Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22604 |
6.9 (4.0)
|
OpenProject is vulnerable to user enumeration via the … |
opf |
openproject |
2026-01-10T01:07:02.555Z | 2026-01-12T19:16:12.780Z |
| CVE-2026-22605 |
4.3 (3.1)
|
OpenProject is Vulnerable to Insecure Direct Object Re… |
opf |
openproject |
2026-01-10T01:07:10.412Z | 2026-01-12T19:15:27.143Z |
| CVE-2025-15501 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
Sangfor Operation and Maintenance Management System ge… |
Sangfor |
Operation and Maintenance Management System |
2026-01-09T22:32:05.839Z | 2026-01-12T19:14:37.055Z |
| CVE-2025-53470 |
N/A
|
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerabilit… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:46:35.789Z | 2026-01-12T19:12:52.715Z |
| CVE-2025-52435 |
N/A
|
Apache Mynewt NimBLE: Invalid error handling in pause … |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:47:10.568Z | 2026-01-12T19:07:07.593Z |
| CVE-2026-22785 |
9.3 (4.0)
|
orval MCP client is vulnerable to a code injection attack. |
orval-labs |
orval |
2026-01-12T18:43:16.637Z | 2026-01-12T18:56:50.902Z |
| CVE-2026-22784 |
2.3 (4.0)
|
Lychee cross-album password propagation on Album unlocking |
LycheeOrg |
Lychee |
2026-01-12T18:37:55.183Z | 2026-01-12T18:55:55.328Z |
| CVE-2026-22783 |
9.6 (3.1)
|
Iris Allows Arbitrary File Deletion via Mass Assignmen… |
dfir-iris |
iris-web |
2026-01-12T18:27:38.259Z | 2026-01-12T18:52:04.765Z |
| CVE-2026-22781 |
10 (4.0)
|
TinyWeb CGI Command Injection |
maximmasiutin |
TinyWeb |
2026-01-12T18:23:00.512Z | 2026-01-12T18:50:57.979Z |
| CVE-2026-22776 |
8.7 (4.0)
|
cpp-httplib vulnerable to a denial of service (DOS) us… |
yhirose |
cpp-httplib |
2026-01-12T18:18:01.527Z | 2026-01-12T18:49:59.317Z |
| CVE-2026-22771 |
8.8 (3.1)
|
Envoy Extension Policy lua scripts injection causes ar… |
envoyproxy |
gateway |
2026-01-12T18:08:22.532Z | 2026-01-12T18:49:19.868Z |
| CVE-2026-22252 |
9.1 (3.1)
|
LibreChat MCP Stdio Remote Command Execution |
danny-avila |
LibreChat |
2026-01-12T18:01:48.399Z | 2026-01-12T18:48:33.821Z |
| CVE-2026-22251 |
5.3 (3.1)
|
wlc may leak API keys due to an insecure API key confi… |
WeblateOrg |
wlc |
2026-01-12T17:55:09.699Z | 2026-01-12T18:43:53.664Z |
| CVE-2025-68471 |
6.5 (3.1)
|
Avahi has a reachable assertion in lookup_start |
avahi |
avahi |
2026-01-12T17:39:57.416Z | 2026-01-12T18:42:26.343Z |
| CVE-2025-68468 |
6.5 (3.1)
|
Avahi has a reachable assertion in lookup_multicast_callback |
avahi |
avahi |
2026-01-12T17:38:10.492Z | 2026-01-12T18:41:50.855Z |
| CVE-2025-68276 |
5.5 (3.1)
|
Avahi has a reachable assertion in avahi_wide_area_sca… |
avahi |
avahi |
2026-01-12T17:31:49.652Z | 2026-01-12T18:41:22.098Z |
| CVE-2025-68657 |
6.4 (3.1)
|
espressif/usb_host_hid Double-Free Race Condition in U… |
espressif |
esp-usb |
2026-01-12T17:26:51.106Z | 2026-01-12T18:40:25.838Z |
| CVE-2025-63314 |
10 (3.1)
|
A static password reset token in the password res… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:40:07.736Z |
| CVE-2025-68656 |
6.8 (3.1)
|
Espressif ESP-IDF USB Host HID (Human Interface Device… |
espressif |
esp-usb |
2026-01-12T17:23:19.393Z | 2026-01-12T18:39:37.514Z |
| CVE-2025-68622 |
6.8 (3.1)
|
Espressif ESP-IDF USB Host UVC Class Driver has a stac… |
espressif |
esp-usb |
2026-01-12T17:08:22.941Z | 2026-01-12T18:37:35.287Z |
| CVE-2026-21858 |
10 (3.1)
|
n8n Vulnerable to Unauthenticated File Access via Impr… |
n8n-io |
n8n |
2026-01-07T23:57:52.079Z | 2026-01-12T18:37:27.893Z |
| CVE-2025-68472 |
8.1 (3.1)
|
MindsDB has improper sanitation of filepath that leads… |
mindsdb |
mindsdb |
2026-01-12T16:53:47.748Z | 2026-01-12T18:36:45.793Z |
| CVE-2025-66689 |
6.5 (3.1)
|
A path traversal vulnerability exists in Zen MCP … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:34:48.370Z |
| CVE-2025-69169 |
5.4 (3.1)
|
WordPress Easy Media Download plugin <= 1.1.11 - CSS I… |
Noor Alam |
Easy Media Download |
2026-01-08T09:17:54.850Z | 2026-01-12T18:33:40.047Z |
| CVE-2026-0674 |
4.3 (3.1)
|
WordPress Campaign Monitor for WordPress plugin <= 2.9… |
Campaign Monitor |
Campaign Monitor for WordPress |
2026-01-08T09:17:55.119Z | 2026-01-12T18:32:30.790Z |
| CVE-2026-0676 |
5.3 (3.1)
|
WordPress Zorka theme <= 1.5.7 - Broken Access Control… |
G5Theme |
Zorka |
2026-01-08T09:17:55.655Z | 2026-01-12T18:31:42.919Z |
| CVE-2026-0822 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
quickjs-ng quickjs quickjs.c js_typed_array_sort heap-… |
quickjs-ng |
quickjs |
2026-01-10T13:32:08.881Z | 2026-01-12T18:30:50.158Z |
| CVE-2025-12379 |
6.4 (3.1)
|
Shortcodes and extra features for Phlox theme <= 2.17.… |
averta |
Shortcodes and extra features for Phlox theme |
2026-01-10T13:47:35.146Z | 2026-01-12T18:29:20.473Z |
| CVE-2025-13393 |
4.3 (3.1)
|
Featured Image from URL (FIFU) <= 5.3.1 - Authenticate… |
marceljm |
Featured Image from URL (FIFU) |
2026-01-10T13:47:35.750Z | 2026-01-12T18:28:15.408Z |
| CVE-2026-0824 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
questdb ui Web Console cross site scripting |
questdb |
ui |
2026-01-10T14:32:08.724Z | 2026-01-12T18:26:21.294Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22236 |
10 (4.0)
|
Improper Authentication Vulnerability in BLUVOYIX |
Bluspark Global |
BLUVOYIX |
2026-01-14T14:34:14.034Z | 2026-01-14T15:01:50.769Z |
| CVE-2026-22211 |
5.1 (4.0)
|
TinyOS <= 2.1.2 Global Buffer Overflow in printfUART |
TinyOS |
TinyOS |
2026-01-14T15:19:54.833Z | 2026-01-14T15:35:01.567Z |
| CVE-2026-0813 |
4.4 (3.1)
|
Short Link <= 1.0 - Authenticated (Administrator+) Sto… |
prasannasp |
Short Link |
2026-01-14T06:40:05.955Z | 2026-01-14T20:59:03.055Z |
| CVE-2026-0812 |
4.4 (3.1)
|
LinkedIn SC <= 1.1.9 - Authenticated (Administrator+) … |
guillaumev |
LinkedIn SC |
2026-01-14T06:40:05.145Z | 2026-01-14T21:47:06.478Z |
| CVE-2026-0741 |
4.4 (3.1)
|
Electric Studio Download Counter <= 2.4 - Authenticate… |
electric-studio |
Electric Studio Download Counter |
2026-01-14T06:40:06.713Z | 2026-01-14T20:48:23.806Z |
| CVE-2026-0739 |
4.4 (3.1)
|
WMF Mobile Redirector <= 1.2 - Authenticated (Administ… |
webbu |
WMF Mobile Redirector |
2026-01-14T06:40:04.088Z | 2026-01-15T17:23:06.026Z |
| CVE-2026-0734 |
4.4 (3.1)
|
WP Allowed Hosts <= 1.0.8 - Authenticated (Administrat… |
dfieldfl |
WP Allowed Hosts |
2026-01-14T06:40:05.559Z | 2026-01-14T21:01:19.790Z |
| CVE-2026-0717 |
5.3 (3.1)
|
LottieFiles – Lottie block for Gutenberg <= 3.0.0 - Un… |
lottiefile |
LottieFiles – Lottie block for Gutenberg |
2026-01-14T05:28:04.741Z | 2026-01-14T19:17:15.578Z |
| CVE-2026-0716 |
4.8 (3.1)
|
Libsoup: out-of-bounds read in libsoup websocket frame… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-13T23:07:06.305Z | 2026-01-14T14:36:02.731Z |
| CVE-2026-0694 |
6.4 (3.1)
|
SearchWiz <= 1.0.0 - Authenticated (Contributor+) Stor… |
searchwiz |
SearchWiz |
2026-01-14T05:28:07.738Z | 2026-01-15T19:58:43.596Z |
| CVE-2026-0680 |
4.4 (3.1)
|
Real Post Slider Lite <= 2.4 - Authenticated (Administ… |
vk011 |
Real Post Slider Lite |
2026-01-14T05:28:05.580Z | 2026-01-14T19:17:04.354Z |
| CVE-2026-0678 |
4.9 (3.1)
|
Shipping Rates by City for WooCommerce <= 1.0.3 - Auth… |
logiceverest |
Shipping Rates by City for WooCommerce |
2026-01-14T05:28:08.115Z | 2026-01-14T05:28:08.115Z |
| CVE-2026-0635 |
4.3 (3.1)
|
Responsive Accordion Slider <= 1.2.2 - Missing Authori… |
techknowprime |
Responsive Accordion Slider |
2026-01-14T05:28:08.887Z | 2026-01-15T18:33:19.942Z |
| CVE-2026-0594 |
6.1 (3.1)
|
List Site Contributors <= 1.1.8 - Reflected Cross-Site… |
mallsop |
List Site Contributors |
2026-01-14T05:28:02.938Z | 2026-01-14T19:17:31.333Z |
| CVE-2026-0532 |
8.6 (3.1)
|
External Control of File Name or Path and Server-Side … |
Elastic |
Kibana |
2026-01-14T10:14:57.415Z | 2026-01-14T16:18:47.674Z |
| CVE-2026-0529 |
6.5 (3.1)
|
Improper Validation of Array Index in Packetbeat Leadi… |
Elastic |
Packetbeat |
2026-01-14T10:09:02.462Z | 2026-01-14T16:31:01.455Z |
| CVE-2025-9142 |
7.5 (3.1)
|
Local privilege escalation in Harmony SASE Windows Agent |
checkpoint |
Hramony SASE |
2026-01-14T14:30:48.630Z | 2026-01-14T14:50:03.652Z |
| CVE-2025-71144 |
N/A
|
mptcp: ensure context reset on disconnect() |
Linux |
Linux |
2026-01-14T15:08:56.700Z | 2026-01-14T15:08:56.700Z |
| CVE-2025-71143 |
N/A
|
clk: samsung: exynos-clkout: Assign .num before access… |
Linux |
Linux |
2026-01-14T15:07:55.828Z | 2026-01-14T15:07:55.828Z |
| CVE-2025-71142 |
N/A
|
cpuset: fix warning when disabling remote partition |
Linux |
Linux |
2026-01-14T15:07:55.145Z | 2026-01-14T15:07:55.145Z |
| CVE-2025-71141 |
N/A
|
drm/tilcdc: Fix removal actions in case of failed probe |
Linux |
Linux |
2026-01-14T15:07:54.456Z | 2026-01-14T15:07:54.456Z |
| CVE-2025-71140 |
N/A
|
media: mediatek: vcodec: Use spinlock for context list… |
Linux |
Linux |
2026-01-14T15:07:53.581Z | 2026-01-14T15:07:53.581Z |
| CVE-2025-71139 |
N/A
|
kernel/kexec: fix IMA when allocation happens in CMA area |
Linux |
Linux |
2026-01-14T15:07:52.658Z | 2026-01-14T15:07:52.658Z |
| CVE-2025-71138 |
N/A
|
drm/msm/dpu: Add missing NULL pointer check for pingpo… |
Linux |
Linux |
2026-01-14T15:07:51.943Z | 2026-01-14T15:07:51.943Z |
| CVE-2025-71137 |
N/A
|
octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" |
Linux |
Linux |
2026-01-14T15:07:51.264Z | 2026-01-14T15:07:51.264Z |
| CVE-2025-71136 |
N/A
|
media: adv7842: Avoid possible out-of-bounds array acc… |
Linux |
Linux |
2026-01-14T15:07:50.568Z | 2026-01-14T15:07:50.568Z |
| CVE-2025-71135 |
N/A
|
md/raid5: fix possible null-pointer dereferences in ra… |
Linux |
Linux |
2026-01-14T15:07:49.891Z | 2026-01-14T15:07:49.891Z |
| CVE-2025-71134 |
N/A
|
mm/page_alloc: change all pageblocks migrate type on c… |
Linux |
Linux |
2026-01-14T15:07:49.200Z | 2026-01-14T15:07:49.200Z |
| CVE-2025-71133 |
N/A
|
RDMA/irdma: avoid invalid read in irdma_net_event |
Linux |
Linux |
2026-01-14T15:07:48.524Z | 2026-01-14T15:07:48.524Z |
| CVE-2025-71132 |
N/A
|
smc91x: fix broken irq-context in PREEMPT_RT |
Linux |
Linux |
2026-01-14T15:07:47.860Z | 2026-01-14T15:07:47.860Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-22211 | TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the pri… | 2026-01-14T16:15:56.950 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0813 | The Short Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'short_lin… | 2026-01-14T07:16:16.027 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0812 | The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkedin… | 2026-01-14T07:16:15.843 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0741 | The Electric Studio Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Script… | 2026-01-14T07:16:15.667 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0739 | The WMF Mobile Redirector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-01-14T07:16:15.487 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0734 | The WP Allowed Hosts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'all… | 2026-01-14T07:16:15.303 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0717 | The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Inform… | 2026-01-14T06:15:55.670 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0716 | A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-… | 2026-01-13T23:16:04.163 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0694 | The SearchWiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in … | 2026-01-14T06:15:55.500 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0680 | The Real Post Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-01-14T06:15:55.350 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0678 | The Flat Shipping Rate by City for WooCommerce plugin for WordPress is vulnerable to time-based SQL… | 2026-01-14T06:15:55.197 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0635 | The Responsive Accordion Slider plugin for WordPress is vulnerable to unauthorized modification of … | 2026-01-14T06:15:55.047 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0594 | The List Site Contributors plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via… | 2026-01-14T06:15:54.893 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0532 | External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) … | 2026-01-14T11:15:50.510 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0529 | Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an a… | 2026-01-14T10:16:08.813 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-9142 | A local user can trigger Harmony SASE Windows client to write or delete files outside the intended … | 2026-01-14T15:16:04.333 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71144 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on… | 2026-01-14T15:16:04.223 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71143 | In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: A… | 2026-01-14T15:16:04.113 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71142 | In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disab… | 2026-01-14T15:16:04.010 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71141 | In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal action… | 2026-01-14T15:16:03.910 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71140 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use s… | 2026-01-14T15:16:03.793 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71139 | In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when all… | 2026-01-14T15:16:03.693 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71138 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL … | 2026-01-14T15:16:03.593 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71137 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shif… | 2026-01-14T15:16:03.487 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71136 | In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible… | 2026-01-14T15:16:03.383 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71135 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-po… | 2026-01-14T15:16:03.277 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71134 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all page… | 2026-01-14T15:16:03.167 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71133 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read… | 2026-01-14T15:16:03.053 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71132 | In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context… | 2026-01-14T15:16:02.947 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71131 | In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req… | 2026-01-14T15:16:02.843 | 2026-01-14T16:25:12.057 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-48mv-p55r-f874 |
9.0 (3.1)
|
This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the post… | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-3xgw-97m8-xp2p |
8.7 (3.1)
|
Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Ex… | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-388c-fp3f-fvcv |
9.0 (3.1)
|
This vulnerability allows a Backup or Tape Operator to write files as root. | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-365v-v88v-6gwg |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-24qf-fgjm-mfxj |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-xxh6-2g83-jp5x |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio conten… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-xww5-2rwh-r562 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-xf8h-2jhw-rgxq |
9.1 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in _nK nK Themes Helper nk-themes-helper allows Se… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-w8wr-qp39-g42p |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-vv2m-g4cj-x269 |
8.8 (3.1)
|
Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploit… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-vrh4-gx3w-4rrg |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-rhq7-g7ch-6mm7 |
8.1 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in WofficeIO Woffice Core woffice-co… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-r3wf-mwj4-x8c7 |
8.1 (3.1)
|
Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-qh42-ch7g-8fpq |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Corpkit corpkit allows … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-q723-5hqf-qmpp |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-q48c-25gr-hmq3 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T12:30:29Z | 2026-01-08T18:30:48Z |
| ghsa-prp6-7xrh-x9fq |
9.8 (3.1)
|
Missing Authorization vulnerability in sizam REHub Framework rehub-framework allows Accessing Funct… | 2026-01-08T12:30:29Z | 2026-01-08T18:30:48Z |
| ghsa-pf46-gqj7-27qr |
7.5 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in AITpro BulletProof Security bull… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-p5wx-jv8p-whhm |
9.8 (3.1)
|
Missing Authorization vulnerability in Kaira Blockons blockons allows Accessing Functionality Not P… | 2026-01-08T12:30:29Z | 2026-01-08T18:30:48Z |
| ghsa-m2mx-2p58-mxhx |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T12:30:29Z | 2026-01-08T18:30:48Z |
| ghsa-jx85-v8cw-87h5 |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-j8rm-2hg2-gmj5 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:29Z | 2026-01-08T18:30:48Z |
| ghsa-gj9x-rhcw-wvp4 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T12:30:29Z | 2026-01-08T18:30:48Z |
| ghsa-gj5j-g2vm-fx8q |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-g3g5-452q-crx8 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:29Z | 2026-01-08T18:30:48Z |
| ghsa-g2fg-xvcw-9vf8 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-f37x-5j3m-j64v |
9.8 (3.1)
|
Authentication Bypass Using an Alternate Path or Channel vulnerability in Arraytics Timetics timeti… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-cg6q-gggj-22j3 |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-c286-2x5w-wcq5 |
7.5 (3.1)
|
Path Traversal: '.../...//' vulnerability in beeteam368 VidMov vidmov allows Path Traversal.This is… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-9ccq-8xp7-m8rf |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-453 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.241877Z |
| pysec-2021-452 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.095784Z |
| pysec-2021-451 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.920888Z |
| pysec-2021-450 |
|
TensorFlow is an end-to-end open source platform for machine learning. The `tf.raw_ops.Co… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.764419Z |
| pysec-2021-449 |
|
TensorFlow is an end-to-end open source platform for machine learning. Specifying a negat… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.609278Z |
| pysec-2021-448 |
|
TensorFlow is an end-to-end open source platform for machine learning. Missing validation… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.522398Z |
| pysec-2021-447 |
|
TensorFlow is an end-to-end open source platform for machine learning. The API of `tf.raw… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.373650Z |
| pysec-2021-446 |
|
TensorFlow is an end-to-end open source platform for machine learning. In eager mode (def… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.214930Z |
| pysec-2021-445 |
|
TensorFlow is an end-to-end open source platform for machine learning. A malicious user c… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.030158Z |
| pysec-2021-444 |
|
TensorFlow is an end-to-end open source platform for machine learning. Calling `tf.raw_op… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:45.869282Z |
| pysec-2021-443 |
|
TensorFlow is an end-to-end open source platform for machine learning. The implementation… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:45.694528Z |
| pysec-2021-442 |
|
TensorFlow is an end-to-end open source platform for machine learning. If the `splits` ar… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:45.524725Z |
| pysec-2021-441 |
|
TensorFlow is an end-to-end open source platform for machine learning. Calling TF operati… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:45.368024Z |
| pysec-2021-440 |
|
TensorFlow is an end-to-end open source platform for machine learning. If the `splits` ar… | tensorflow-cpu | 2021-05-14T19:15:00Z | 2021-12-09T06:34:45.216617Z |
| pysec-2020-303 |
|
In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 … | tensorflow-cpu | 2020-01-28T22:15:00Z | 2021-12-09T06:34:45.123200Z |
| pysec-2020-302 |
|
In affected versions of TensorFlow under certain cases, loading a saved model can result … | tensorflow-cpu | 2020-12-10T22:15:00Z | 2021-12-09T06:34:45.035634Z |
| pysec-2020-301 |
|
In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer rec… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.825248Z |
| pysec-2020-299 |
|
In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a cons… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.590878Z |
| pysec-2020-298 |
|
In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not valid… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.408160Z |
| pysec-2020-297 |
|
In affected versions of TensorFlow under certain cases a saved model can trigger use of u… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.221678Z |
| pysec-2020-296 |
|
In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resiz… | tensorflow-cpu | 2020-10-21T21:15:00Z | 2021-12-09T06:34:44.028853Z |
| pysec-2020-295 |
|
In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.q… | tensorflow-cpu | 2020-10-21T21:15:00Z | 2021-12-09T06:34:43.980213Z |
| pysec-2020-294 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.930382Z |
| pysec-2020-293 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.849481Z |
| pysec-2020-292 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.741009Z |
| pysec-2020-291 |
|
In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.650264Z |
| pysec-2020-290 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite sav… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.437178Z |
| pysec-2020-289 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLit… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.227280Z |
| pysec-2020-288 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determinin… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.041754Z |
| pysec-2020-287 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.836592Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32579 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.726473Z |
| gsd-2024-32578 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.573173Z |
| gsd-2024-32577 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.662736Z |
| gsd-2024-32576 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.706349Z |
| gsd-2024-32575 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.582088Z |
| gsd-2024-32574 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.700589Z |
| gsd-2024-32573 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.712936Z |
| gsd-2024-32572 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.683680Z |
| gsd-2024-32571 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.653845Z |
| gsd-2024-32570 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.691332Z |
| gsd-2024-32569 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.695812Z |
| gsd-2024-32568 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.655991Z |
| gsd-2024-32567 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.652232Z |
| gsd-2024-32566 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.607741Z |
| gsd-2024-32565 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.747516Z |
| gsd-2024-32564 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.612566Z |
| gsd-2024-32563 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.670740Z |
| gsd-2024-32562 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.671923Z |
| gsd-2024-32561 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.727950Z |
| gsd-2024-32560 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.743903Z |
| gsd-2024-32559 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.570404Z |
| gsd-2024-32558 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.748207Z |
| gsd-2024-32557 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.714263Z |
| gsd-2024-32556 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.622736Z |
| gsd-2024-32555 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.697510Z |
| gsd-2024-32554 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.687433Z |
| gsd-2024-32553 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.626870Z |
| gsd-2024-32552 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.617923Z |
| gsd-2024-32551 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-16T05:01:54.708807Z |
| gsd-2024-32550 | Cross-Site Request Forgery (CSRF) vulnerability in BMI Adult & Kid Calculator allows Stor… | 2024-04-16T05:01:54.605868Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-3958 | Malicious code in @chat-components/common (npm) | 2025-05-07T19:59:49Z | 2025-12-24T10:09:25Z |
| MAL-2025-49331 | Malicious code in 8jfiesaf83 (npm) | 2025-11-03T18:59:00Z | 2025-12-24T10:09:25Z |
| MAL-2025-47916 | Malicious code in @hash-validator/v2 (npm) | 2025-10-07T00:21:42Z | 2025-12-24T10:09:25Z |
| MAL-2025-47913 | Malicious code in @bs58-utils/wrapper (npm) | 2025-10-07T00:21:42Z | 2025-12-24T10:09:25Z |
| MAL-2025-3958 | Malicious code in @chat-components/common (npm) | 2025-05-07T19:59:49Z | 2025-12-24T10:09:25Z |
| mal-2025-192764 | Malicious code in trial-guard (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| mal-2025-192763 | Malicious code in supply_chain_dummy_test_4 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| mal-2025-192762 | Malicious code in supply_chain_dummy_test_3 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| mal-2025-192761 | Malicious code in supply_chain_dummy_test_2 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| mal-2025-192760 | Malicious code in supply_chain_dummy_test_1 (npm) | 2025-12-23T19:07:55Z | 2025-12-24T00:53:20Z |
| mal-2025-192759 | Malicious code in start-log-plugin (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| mal-2025-192758 | Malicious code in start-log-backend (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| mal-2025-192729 | Malicious code in streamixer (npm) | 2025-12-23T16:22:41Z | 2025-12-24T00:53:20Z |
| MAL-2025-192764 | Malicious code in trial-guard (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| MAL-2025-192763 | Malicious code in supply_chain_dummy_test_4 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| MAL-2025-192762 | Malicious code in supply_chain_dummy_test_3 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| MAL-2025-192761 | Malicious code in supply_chain_dummy_test_2 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| MAL-2025-192760 | Malicious code in supply_chain_dummy_test_1 (npm) | 2025-12-23T19:07:55Z | 2025-12-24T00:53:20Z |
| MAL-2025-192759 | Malicious code in start-log-plugin (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| MAL-2025-192758 | Malicious code in start-log-backend (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| MAL-2025-192729 | Malicious code in streamixer (npm) | 2025-12-23T16:22:41Z | 2025-12-24T00:53:20Z |
| mal-2025-192757 | Malicious code in qxytest1 (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:19Z |
| mal-2025-192756 | Malicious code in qxytest (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:19Z |
| mal-2025-192749 | Malicious code in rpc-validate (npm) | 2025-12-23T18:19:20Z | 2025-12-24T00:53:19Z |
| MAL-2025-192757 | Malicious code in qxytest1 (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:19Z |
| MAL-2025-192756 | Malicious code in qxytest (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:19Z |
| MAL-2025-192749 | Malicious code in rpc-validate (npm) | 2025-12-23T18:19:20Z | 2025-12-24T00:53:19Z |
| mal-2025-192807 | Malicious code in json-panels (npm) | 2025-12-23T08:17:48Z | 2025-12-24T00:53:18Z |
| mal-2025-192748 | Malicious code in lotusbail (npm) | 2025-12-23T17:40:05Z | 2025-12-24T00:53:18Z |
| MAL-2025-192807 | Malicious code in json-panels (npm) | 2025-12-23T08:17:48Z | 2025-12-24T00:53:18Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-0486 | Eclipse Jetty: Schwachstelle ermöglicht Denial of Service | 2024-02-26T23:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2627 | Eclipse Jetty: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-10-10T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2022-0614 | Eclipse Jetty: Mehrere Schwachstellen | 2022-07-07T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0873 | xwiki: Mehrere Schwachstellen ermöglichen SQL-Injection | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0872 | Trellix Endpoint Security: Schwachstelle ermöglicht Denial of Service | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0871 | CODESYS: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0870 | Hitachi Ops Center: Mehrere Schwachstellen ermöglichen Offenlegung von informationen | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0869 | VMware Tanzu Spring Security: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0868 | PyTorch: Schwachstelle ermöglicht Codeausführung | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0864 | Ruby: Schwachstelle ermöglicht Man-in-the-Middle Angriff | 2013-06-27T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0657 | Erlang/OTP: Schwachstelle ermöglicht Denial of Service | 2025-03-30T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0579 | Mattermost Server: Mehrere Schwachstellen | 2025-03-17T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0495 | Synology DiskStation Manager: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-05T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2024-1605 | Fabasoft Folio: Schwachstelle ermöglicht Codeausführung | 2024-07-11T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2024-1216 | GitLab: Mehrere Schwachstellen | 2024-05-21T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2024-1151 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2024-05-14T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2024-1020 | bluez: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2024-05-02T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-3209 | bluez: Mehrere Schwachstellen | 2023-12-21T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-3197 | bluez: Mehrere Schwachstellen | 2023-12-20T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-2461 | Ruby: Schwachstelle ermöglicht Codeausführung | 2021-05-02T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-1590 | Ruby: Schwachstelle ermöglicht Denial of Service | 2023-06-28T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-1231 | WordPress: Mehrere Schwachstellen | 2023-05-16T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2022-2173 | Ruby: Schwachstelle ermöglicht Manipulation von Dateien | 2022-11-24T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2022-1305 | Ruby: Mehrere Schwachstellen | 2021-07-07T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0863 | Microsoft GitHub Enterprise: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0862 | Moodle: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0860 | Liferay Portal und Liferay DXP: Schwachstelle ermöglicht Cross-Site Scripting | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0859 | Tenable Security Nessus: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0857 | PyTorch: Schwachstelle ermöglicht Codeausführung | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0855 | Zyxel Firewall: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:15670 | Red Hat Security Advisory: kernel security update | 2025-09-11T07:38:39+00:00 | 2026-01-14T19:50:03+00:00 |
| rhsa-2025:17797 | Red Hat Security Advisory: kernel security update | 2025-10-13T11:51:59+00:00 | 2026-01-14T19:50:02+00:00 |
| rhsa-2025:13961 | Red Hat Security Advisory: kernel-rt security update | 2025-08-18T02:50:08+00:00 | 2026-01-14T19:50:01+00:00 |
| rhsa-2025:15658 | Red Hat Security Advisory: kernel-rt security update | 2025-09-10T20:45:03+00:00 | 2026-01-14T19:49:59+00:00 |
| rhsa-2025:13960 | Red Hat Security Advisory: kernel security update | 2025-08-18T02:54:38+00:00 | 2026-01-14T19:49:58+00:00 |
| rhsa-2024:8856 | Red Hat Security Advisory: kernel security update | 2024-11-05T01:22:51+00:00 | 2026-01-14T19:49:52+00:00 |
| rhsa-2024:8157 | Red Hat Security Advisory: kernel security update | 2024-10-16T00:28:23+00:00 | 2026-01-14T19:49:50+00:00 |
| rhsa-2024:5101 | Red Hat Security Advisory: kernel security update | 2024-08-08T04:53:16+00:00 | 2026-01-14T19:49:49+00:00 |
| rhsa-2024:0575 | Red Hat Security Advisory: kernel security and bug fix update | 2024-01-30T13:28:36+00:00 | 2026-01-14T19:49:45+00:00 |
| rhsa-2023:7539 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2023-11-28T15:40:03+00:00 | 2026-01-14T19:49:44+00:00 |
| rhsa-2022:1988 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2022-05-10T13:58:00+00:00 | 2026-01-14T19:49:37+00:00 |
| rhsa-2020:1769 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2020-04-28T15:43:14+00:00 | 2026-01-14T15:58:08+00:00 |
| rhsa-2024:4583 | Red Hat Security Advisory: kernel security update | 2024-07-17T01:06:44+00:00 | 2026-01-14T15:56:10+00:00 |
| rhsa-2024:4533 | Red Hat Security Advisory: kernel security update | 2024-07-15T05:18:09+00:00 | 2026-01-14T15:56:08+00:00 |
| rhsa-2024:4554 | Red Hat Security Advisory: kernel-rt security update | 2024-07-15T21:25:51+00:00 | 2026-01-14T15:56:04+00:00 |
| rhsa-2025:19398 | Red Hat Security Advisory: squid:4 security update | 2025-11-03T01:48:22+00:00 | 2026-01-14T09:51:49+00:00 |
| rhsa-2025:19277 | Red Hat Security Advisory: squid:4 security update | 2025-10-30T01:37:43+00:00 | 2026-01-14T09:51:48+00:00 |
| rhsa-2025:19967 | Red Hat Security Advisory: squid:4 security update | 2025-11-10T08:01:27+00:00 | 2026-01-14T09:51:47+00:00 |
| rhsa-2025:19115 | Red Hat Security Advisory: squid security update | 2025-10-28T01:56:56+00:00 | 2026-01-14T09:51:46+00:00 |
| rhsa-2025:19114 | Red Hat Security Advisory: squid security update | 2025-10-28T01:18:01+00:00 | 2026-01-14T09:51:44+00:00 |
| rhsa-2025:19118 | Red Hat Security Advisory: squid security update | 2025-10-28T01:49:06+00:00 | 2026-01-14T09:51:42+00:00 |
| rhsa-2025:21090 | Red Hat Security Advisory: squid:4 security update | 2025-11-12T08:03:19+00:00 | 2026-01-14T09:51:33+00:00 |
| rhsa-2024:3925 | Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, enhancements, and bug fix update | 2024-06-14T13:20:25+00:00 | 2026-01-14T09:51:23+00:00 |
| rhsa-2024:2047 | Red Hat Security Advisory: OpenShift Container Platform 4.13.41 bug fix and security update | 2024-05-02T16:36:51+00:00 | 2026-01-14T09:51:21+00:00 |
| rhsa-2024:1896 | Red Hat Security Advisory: OpenShift Container Platform 4.12.56 security update | 2024-04-25T15:13:55+00:00 | 2026-01-14T09:51:17+00:00 |
| rhsa-2024:1891 | Red Hat Security Advisory: OpenShift Container Platform 4.14.22 bug fix and security update | 2024-04-26T13:46:47+00:00 | 2026-01-14T09:51:16+00:00 |
| rhsa-2024:1549 | Red Hat Security Advisory: ACS 4.3 enhancement and security update | 2024-03-27T18:47:27+00:00 | 2026-01-14T09:51:14+00:00 |
| rhsa-2024:0989 | Red Hat Security Advisory: Red Hat Multicluster GlobalHub 1.0.2 bug fixes and security updates | 2024-02-26T17:29:54+00:00 | 2026-01-14T09:51:12+00:00 |
| rhsa-2024:0845 | Red Hat Security Advisory: OpenShift Container Platform 4.13.34 security update | 2024-02-21T01:40:34+00:00 | 2026-01-14T09:51:07+00:00 |
| rhsa-2024:0832 | Red Hat Security Advisory: OpenShift Container Platform 4.12.50 security and extras update | 2024-02-21T00:30:34+00:00 | 2026-01-14T09:51:01+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-341-02 | Schweitzer Engineering Laboratories SEL-411L | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| icsa-23-341-01 | Mitsubishi Electric FA Engineering Software Products | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| icsa-25-182-02 | FESTO Automation Suite, FluidDraw, and Festo Didactic Products | 2023-11-28T07:00:00.000000Z | 2023-12-05T07:00:00.000000Z |
| icsa-23-339-01 | Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d | 2023-12-05T07:00:00.000000Z | 2023-12-05T07:00:00.000000Z |
| icsa-23-334-04 | Mitsubishi Electric FA Engineering Software Products | 2023-11-30T07:00:00.000000Z | 2023-11-30T07:00:00.000000Z |
| icsa-23-334-03 | PTC KEPServerEx | 2023-11-30T07:00:00.000000Z | 2023-11-30T07:00:00.000000Z |
| icsa-23-334-02 | Yokogawa STARDOM | 2023-11-30T07:00:00.000000Z | 2023-11-30T07:00:00.000000Z |
| icsa-23-334-01 | Delta Electronics DOPSoft | 2023-11-30T07:00:00.000000Z | 2023-11-30T07:00:00.000000Z |
| icsma-23-331-01 | BD FACSChorus | 2023-11-28T07:00:00.000000Z | 2023-11-28T07:00:00.000000Z |
| icsa-23-331-03 | Mitsubishi Electric GX Works2 | 2023-11-28T07:00:00.000000Z | 2023-11-28T07:00:00.000000Z |
| icsa-23-331-02 | Franklin Electric Fueling Systems Colibri | 2023-11-28T07:00:00.000000Z | 2023-11-28T07:00:00.000000Z |
| icsa-23-325-02 | Fuji Electric Tellus Lite V-Simulator | 2023-11-21T07:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-325-01 | WAGO PFC200 Series | 2023-11-21T07:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-297-01 | Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A) | 2023-10-24T06:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-115-01 | Keysight N8844A Data Analytics Web Service (Update A) | 2023-04-25T06:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-320-02 | Hitachi Energy MACH System Software | 2023-11-16T07:00:00.000000Z | 2023-11-16T07:00:00.000000Z |
| icsa-23-320-01 | Red Lion Sixnet RTUs | 2023-11-16T07:00:00.000000Z | 2023-11-16T07:00:00.000000Z |
| icsa-23-318-02 | Rockwell Automation SIS Workstation and ISaGRAF Workbench | 2023-11-14T07:00:00.000000Z | 2023-11-14T07:00:00.000000Z |
| icsa-23-318-01 | AVEVA Operations Control Logger | 2023-11-14T07:00:00.000000Z | 2023-11-14T07:00:00.000000Z |
| icsa-23-320-13 | Siemens SIMATIC MV500 | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| icsa-23-320-12 | Siemens PNI | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| icsa-23-320-11 | Siemens Mendix Studio Pro | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| icsa-23-320-10 | Siemens SIPROTEC 4 7SJ66 | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| icsa-23-320-09 | Siemens COMOS | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| icsa-23-320-07 | Siemens OPC UA Modeling Editor (SiOME) | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| icsa-23-320-06 | Siemens SIMATIC PCS neo | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| icsa-23-320-04 | Siemens Mendix Runtime | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| icsa-23-166-09 | Siemens Solid Edge | 2023-06-13T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-22-132-06 | Siemens SIMATIC WinCC | 2022-05-10T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-313-02 | Hitachi Energy eSOMS | 2023-11-09T07:00:00.000000Z | 2023-11-09T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-waas-infdisc-twb4eypk | Cisco Wide Area Application Services Software Information Disclosure Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-waas-infdisc-Twb4EypK | Cisco Wide Area Application Services Software Information Disclosure Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-vmanage-xss-en75jxtw | Cisco SD-WAN vManage API Stored Cross-Site Scripting Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-vmanage-xss-eN75jxtW | Cisco SD-WAN vManage API Stored Cross-Site Scripting Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-vmanage-enumeration-64enndky | Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-vmanage-enumeration-64eNnDKy | Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-tp-rmos-fileread-pe9sl3g | Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-tp-rmos-fileread-pE9sL3g | Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sma-priv-esc-jj8zxqsc | Cisco Content Security Management Appliance Privilege Escalation Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sma-priv-esc-JJ8zxQsC | Cisco Content Security Management Appliance Privilege Escalation Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdwan-vmanageinfdis-lkrfpbv | Cisco SD-WAN vManage Information Disclosure Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdwan-vmanageinfdis-LKrFpbv | Cisco SD-WAN vManage Information Disclosure Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdwan-privesc-qvszvupy | Cisco SD-WAN Software Privilege Escalation Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdwan-privesc-QVszVUPy | Cisco SD-WAN Software Privilege Escalation Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdwan-dos-ckn5cvqw | Cisco SD-WAN Software vDaemon Denial of Service Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdwan-dos-Ckn5cVqW | Cisco SD-WAN Software vDaemon Denial of Service Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdwan-arbfile-7qhd9mcn | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdwan-arbfile-7Qhd9mCn | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdw-auth-bypass-65ayqcs2 | Cisco SD-WAN vManage Software Authentication Bypass Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sdw-auth-bypass-65aYqcS2 | Cisco SD-WAN vManage Software Authentication Bypass Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sd-wan-vmanage-9vzo4gfu | Cisco SD-WAN vManage Information Disclosure Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sd-wan-vmanage-9VZO4gfU | Cisco SD-WAN vManage Information Disclosure Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sd-wan-vmanage-4tbynnhz | Cisco SD-WAN vManage Software Vulnerabilities | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sd-wan-vmanage-4TbynnhZ | Cisco SD-WAN vManage Software Vulnerabilities | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sb-wap-multi-zafkgxhf | Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-sb-wap-multi-ZAfKGXhF | Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-rv-34x-privesc-gln8zaqe | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-rv-34x-privesc-GLN8ZAQE | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-nfvis-cmdinj-dkfjqg2j | Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-nfvis-cmdinj-DkFjqg2j | Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2017-6839 | Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6838 | Integer overflow in sfcommands/sfconvert.c in Audio File Library | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6837 | WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6836 | Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6835 | Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6834 | Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6833 | Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6832 | Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6831 | Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:57.000Z |
| msrc_cve-2017-6830 | Heap-based buffer overflow in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:57.000Z |
| msrc_cve-2017-6829 | The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:57.000Z |
| msrc_cve-2017-6828 | Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:57.000Z |
| msrc_cve-2017-6827 | Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact via a crafted audio file | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:56.000Z |
| msrc_cve-2017-5836 | The plist_free_data function libplist allows attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:56.000Z |
| msrc_cve-2017-5835 | libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:56.000Z |
| msrc_cve-2017-5834 | The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:56.000Z |
| msrc_cve-2017-18640 | The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564. | 2019-12-02T00:00:00.000Z | 2025-10-01T23:10:55.000Z |
| msrc_cve-2017-16754 | Bolt before 3.3.6 does not properly restrict access to _profiler routes | 2017-11-02T00:00:00.000Z | 2025-10-01T23:10:55.000Z |
| msrc_cve-2017-14176 | Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands | 2017-11-02T00:00:00.000Z | 2025-10-01T23:10:55.000Z |
| msrc_cve-2017-12613 | When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | 2017-10-02T00:00:00.000Z | 2025-10-01T23:10:55.000Z |
| msrc_cve-2017-11548 | The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service | 2017-07-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| msrc_cve-2016-4912 | The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| msrc_cve-2016-2568 | pkexec, when used with --user nonpriv, allows local users to escape to the parent session | 2017-02-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| msrc_cve-2016-1000104 | A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07. | 2019-12-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| msrc_cve-2015-7309 | The theme editor in Bolt allows remote authenticated users to execute arbitrary code by renaming a crafted file | 2015-09-02T00:00:00.000Z | 2025-10-01T23:10:53.000Z |
| msrc_cve-2015-2704 | realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf | 2015-05-02T00:00:00.000Z | 2025-10-01T23:10:53.000Z |
| msrc_cve-2013-7381 | libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify. | 2020-02-02T00:00:00.000Z | 2025-10-01T23:10:53.000Z |
| msrc_cve-2012-3381 | sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. | 2012-08-02T00:00:00.000Z | 2025-10-01T23:10:53.000Z |
| msrc_cve-2012-2653 | arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon. | 2012-07-02T00:00:00.000Z | 2025-10-01T23:10:52.000Z |
| msrc_cve-2011-5244 | Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433. | 2012-11-02T00:00:00.000Z | 2025-10-01T23:10:52.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202309-0562 | It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client functi… | 2024-06-02T23:01:22.477000Z |
| var-202405-2251 | EG3210 is a multi-service security gateway. Beijing Xingwang Ruijie Network Technology C… | 2024-06-02T23:00:26.137000Z |
| var-201901-0568 | A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.… | 2024-06-02T23:00:10.467000Z |
| var-202309-0437 | It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function AP… | 2024-06-02T23:00:03.450000Z |
| var-202405-3031 | Shenzhen Tongwei Digital Technology Co., Ltd. is an international provider of video secur… | 2024-06-02T23:00:01.695000Z |
| var-202109-1682 | An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An … | 2024-06-02T22:59:43.800000Z |
| var-202405-2633 | HP DesignJet T730 is a printer. HP DesignJet T730 of HP Trading (Shanghai) Co., Ltd. has… | 2024-06-02T22:59:39.601000Z |
| var-202304-0092 | CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext stora… | 2024-06-02T22:57:47.449000Z |
| var-202309-0494 | It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability i… | 2024-06-02T22:57:46.723000Z |
| var-202206-1251 | Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU… | 2024-06-02T22:52:44.849000Z |
| var-202208-1663 | Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use … | 2024-06-02T22:52:16.286000Z |
| var-200402-0012 | Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow O… | 2024-06-02T22:52:00.915000Z |
| var-200411-0057 | Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9… | 2024-06-02T22:51:08.976000Z |
| var-202405-2830 | The Yakong Giant SCADA Monitoring Platform is a high-end industrial automation full-confi… | 2024-06-02T22:49:52.989000Z |
| var-202405-0539 | An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoice… | 2024-06-02T22:47:58.318000Z |
| var-201501-0347 | Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev.… | 2024-06-02T22:46:13.922000Z |
| var-201810-0311 | A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated,… | 2024-06-02T22:46:06.724000Z |
| var-202104-0753 | This issue was addressed by improved management of object lifetimes. This issue is fixed … | 2024-06-02T22:43:38.239000Z |
| var-201907-0157 | Linear eMerge E3-Series devices allow Command Injections. Linear eMerge E3 The devices in… | 2024-06-02T22:38:30.013000Z |
| var-202305-1789 | The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.… | 2024-06-02T22:35:58.867000Z |
| var-202109-1311 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-06-02T22:29:38.052000Z |
| var-202109-1420 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-06-02T22:12:32.420000Z |
| var-200412-0001 | Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not… | 2024-06-02T22:12:20.089000Z |
| var-200403-0020 | Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown… | 2024-06-02T22:07:55.775000Z |
| var-202109-1316 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed … | 2024-06-02T22:03:48.228000Z |
| var-200403-0031 | Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown i… | 2024-06-02T21:50:09.880000Z |
| var-200609-1247 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-06-02T21:48:58.560000Z |
| var-200403-0068 | Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display o… | 2024-06-02T21:40:41.691000Z |
| var-202104-0751 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big … | 2024-06-02T21:39:39.869000Z |
| var-200403-0071 | QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause … | 2024-06-02T21:38:29.327000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000175 | ISUCON5 qualifier portal web application (eventapp) vulnerable to OS command injection | 2015-11-02T14:10+09:00 | 2015-11-11T15:33+09:00 |
| jvndb-2015-000176 | SonicWall TotalSecure TZ 100 Series vulnerable to denial-of-service (DoS) | 2015-11-06T12:30+09:00 | 2015-11-09T10:47+09:00 |
| jvndb-2015-000174 | Multiple TYPE-MOON games vulnerable to OS command injection | 2015-11-05T14:11+09:00 | 2015-11-09T10:39+09:00 |
| jvndb-2015-000170 | Enisys Gw fails to restrict access permissions | 2015-10-29T13:46+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000169 | Enisys Gw vulnerable to cross-site scripting | 2015-10-29T13:46+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000168 | Enisys Gw vulnerable to arbitrary file creation | 2015-10-29T13:37+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000167 | Enisys Gw vulnerable to SQL injection | 2015-10-29T13:37+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000171 | HTML::Scrubber vulnerable to cross-site scripting | 2015-10-30T15:16+09:00 | 2015-10-30T15:16+09:00 |
| jvndb-2013-004446 | Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU) | 2013-10-30T16:32+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2013-001665 | Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS) | 2013-10-30T16:08+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2015-000162 | AirDroid for Android vulnerable in handling of implicit intents | 2015-10-16T14:00+09:00 | 2015-10-20T17:56+09:00 |
| jvndb-2015-000160 | Avast vulnerable to directory traversal | 2015-10-16T14:00+09:00 | 2015-10-20T17:56+09:00 |
| jvndb-2015-000126 | eXtplorer vulnerable to cross-site request forgery | 2015-10-15T12:24+09:00 | 2015-10-19T15:55+09:00 |
| jvndb-2015-000158 | Pref Shimane CMS vulnerable to SQL injection | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000154 | phpRechnung vulnerable to SQL injection | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000153 | Dojo Toolkit vulnerable to cross-site scripting | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000130 | applican vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-14T16:30+09:00 |
| jvndb-2015-000149 | gollum vulnerable to file exposure | 2015-10-02T13:36+09:00 | 2015-10-08T15:26+09:00 |
| jvndb-2015-000146 | MATCHA SNS access restriction bypass vulnerability | 2015-09-30T15:05+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000145 | MATCHA SNS vulnerable to code injection | 2015-09-30T15:05+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000144 | MATCHA INVOICE vulnerable to code injection | 2015-09-30T15:04+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000143 | MATCHA INVOICE vulnerable to SQL injection | 2015-09-30T15:04+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000141 | Python for Windows may insecurely load dynamic libraries | 2015-10-01T14:11+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000147 | AjaXplorer vulnerable to directory traversal | 2015-10-01T14:11+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000139 | baserCMS vulnerable to SQL injection | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000138 | baserCMS fails to restrict access permissions | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000148 | Dotclear vulnerable to cross-site scripting | 2015-10-02T13:36+09:00 | 2015-10-06T18:02+09:00 |
| jvndb-2015-000140 | Canary Labs Trend Web Server vulnerable to buffer overflow | 2015-10-01T14:11+09:00 | 2015-10-06T18:00+09:00 |
| jvndb-2015-000136 | H2O vulnerable to directory traversal | 2015-09-17T13:36+09:00 | 2015-10-05T17:32+09:00 |
| jvndb-2015-000133 | Koritore vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02170-1 | Security update for yelp | 2025-06-30T07:15:30Z | 2025-06-30T07:15:30Z |
| suse-su-2025:02169-1 | Security update for yelp | 2025-06-30T07:15:20Z | 2025-06-30T07:15:20Z |
| suse-su-2025:02168-1 | Security update for yelp-xsl | 2025-06-30T07:15:06Z | 2025-06-30T07:15:06Z |
| suse-su-2025:02167-1 | Security update for glib2 | 2025-06-30T07:14:42Z | 2025-06-30T07:14:42Z |
| suse-su-2025:02166-1 | Security update for himmelblau | 2025-06-30T07:14:21Z | 2025-06-30T07:14:21Z |
| suse-su-2025:02165-1 | Security update for nvidia-open-driver-G06-signed | 2025-06-30T07:14:03Z | 2025-06-30T07:14:03Z |
| suse-su-2025:02164-1 | Security update for gimp | 2025-06-30T07:13:29Z | 2025-06-30T07:13:29Z |
| suse-su-2025:20457-1 | Security update for helm | 2025-06-28T06:00:42Z | 2025-06-28T06:00:42Z |
| suse-su-2025:20453-1 | Security update for libsoup | 2025-06-28T05:47:32Z | 2025-06-28T05:47:32Z |
| suse-su-2025:02162-1 | Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6) | 2025-06-27T17:03:42Z | 2025-06-27T17:03:42Z |
| suse-su-2025:02161-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-06-27T16:33:31Z | 2025-06-27T16:33:31Z |
| suse-su-2025:02159-1 | Security update for apache-commons-fileupload | 2025-06-27T14:56:05Z | 2025-06-27T14:56:05Z |
| suse-su-2025:02158-1 | Security update for MozillaThunderbird | 2025-06-27T14:51:14Z | 2025-06-27T14:51:14Z |
| suse-su-2025:02157-1 | Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5) | 2025-06-27T13:04:00Z | 2025-06-27T13:04:00Z |
| suse-su-2025:01456-2 | Security update for sqlite3 | 2025-06-27T12:17:36Z | 2025-06-27T12:17:36Z |
| suse-su-2025:01455-1 | Security update for sqlite3 | 2025-06-27T12:16:18Z | 2025-06-27T12:16:18Z |
| suse-su-2025:02156-1 | Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5) | 2025-06-27T12:03:49Z | 2025-06-27T12:03:49Z |
| suse-su-2025:02155-1 | Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4) | 2025-06-27T11:33:40Z | 2025-06-27T11:33:40Z |
| suse-su-2025:02154-1 | Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4) | 2025-06-27T09:03:42Z | 2025-06-27T09:03:42Z |
| suse-su-2025:02153-1 | Security update for yelp-xsl | 2025-06-27T07:51:21Z | 2025-06-27T07:51:21Z |
| suse-su-2025:02150-1 | Security update for google-osconfig-agent | 2025-06-27T05:22:19Z | 2025-06-27T05:22:19Z |
| suse-su-2025:02149-1 | Security update for google-osconfig-agent | 2025-06-27T05:22:03Z | 2025-06-27T05:22:03Z |
| suse-su-2025:02146-1 | Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3) | 2025-06-27T04:04:07Z | 2025-06-27T04:04:07Z |
| suse-su-2025:02145-1 | Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3) | 2025-06-27T04:04:00Z | 2025-06-27T04:04:00Z |
| suse-su-2025:02144-1 | Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4) | 2025-06-26T21:07:40Z | 2025-06-26T21:07:40Z |
| suse-su-2025:02142-1 | Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4) | 2025-06-26T18:33:39Z | 2025-06-26T18:33:39Z |
| suse-su-2025:02140-1 | Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3) | 2025-06-26T16:33:38Z | 2025-06-26T16:33:38Z |
| suse-su-2025:02139-1 | Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) | 2025-06-26T16:03:55Z | 2025-06-26T16:03:55Z |
| suse-su-2025:02138-1 | Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3) | 2025-06-26T15:34:35Z | 2025-06-26T15:34:35Z |
| suse-su-2025:02137-1 | Security update for the Linux Kernel (Live Patch 67 for SLE 12 SP5) | 2025-06-26T15:34:27Z | 2025-06-26T15:34:27Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14192-1 | kernel-firmware-all-20240712-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14191-1 | gtk2-branding-upstream-2.24.33-10.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14190-1 | conftest-0.54.0-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14189-1 | MozillaThunderbird-115.13.0-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14188-1 | Botan-doc-2.19.5-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14187-1 | libnetpbm-devel-11.7.0-1.1 on GA media | 2024-07-14T00:00:00Z | 2024-07-14T00:00:00Z |
| opensuse-su-2024:14186-1 | libreoffice-24.2.5.2-1.1 on GA media | 2024-07-14T00:00:00Z | 2024-07-14T00:00:00Z |
| opensuse-su-2024:14185-1 | kubelogin-0.1.4-1.1 on GA media | 2024-07-14T00:00:00Z | 2024-07-14T00:00:00Z |
| opensuse-su-2024:14184-1 | exiv2-0.28.3-1.1 on GA media | 2024-07-14T00:00:00Z | 2024-07-14T00:00:00Z |
| opensuse-su-2024:14183-1 | trivy-0.53.0-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14182-1 | traefik2-2.11.6-2.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14181-1 | traefik-3.0.4-2.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14180-1 | ruby3.3-rubygem-websocket-extensions-0.1.5-1.20 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14179-1 | ruby3.3-rubygem-web-console-4.2.1-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14178-1 | ruby3.3-rubygem-tzinfo-1.2-1.2.11-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14177-1 | ruby3.3-rubygem-sprockets-4.2.1-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14176-1 | ruby3.3-rubygem-rubyzip-2.3.2-1.15 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14175-1 | ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14174-1 | ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14173-1 | ruby3.3-rubygem-multi_xml-0.6.0-1.27 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14172-1 | ruby3.3-rubygem-minitar-0.9-1.17 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14171-1 | ruby3.3-rubygem-loofah-2.22.0-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14170-1 | ruby3.3-rubygem-kramdown-2.4.0-1.12 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14169-1 | ruby3.3-rubygem-jquery-rails-4.6.0-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14168-1 | ruby3.3-rubygem-globalid-1.2.1-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14167-1 | python310-zipp-3.19.2-2.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14166-1 | python310-websockets-12.0-2.6 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14165-1 | python310-slixmpp-1.8.5-1.2 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14164-1 | python310-ruamel.yaml-0.18.6-1.2 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14163-1 | python310-rsa-4.9-3.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-26157 | D-Link DIR-823G缓冲区溢出漏洞(CNVD-2025-26157) | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26108 | Microsoft Windows Server远程代码执行漏洞(CNVD-2025-26108) | 2025-10-17 | 2025-10-31 |
| cnvd-2025-26107 | Simple Food Ordering System editproduct.php文件上传漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26106 | Simple Food Ordering System editproduct.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26105 | Simple Food Ordering System editcategory.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26104 | Simple Food Ordering System addproduct.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26103 | Simple Food Ordering System addcategory.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26102 | Simple Food Ordering System addproduct.php文件上传漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26101 | Nero Social Networking Site index.php文件SQL注入漏洞 | 2025-05-14 | 2025-10-31 |
| cnvd-2025-26100 | Nero Social Networking Site friendprofile.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26099 | Nero Social Networking Site deletemessage.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26098 | Nero Social Networking Site addfriend.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26097 | Nero Social Networking Site acceptoffres.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26081 | Client Details System授权绕过漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26080 | Client Details System welcome.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26079 | Client Details System update-clients.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26078 | Client Details System welcome.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26077 | Client Details System manage-users.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26076 | Client Details System clientview.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26096 | Vehicle Management filter2.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26095 | Vehicle Management /filter1.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26094 | Vehicle Management /filter.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26093 | Vehicle Management addvehicle.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26092 | Vehicle Management addcompany.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26091 | Online Medicine Guide pharsignup.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26090 | Online Medicine Guide login.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26089 | Online Medicine Guide cussignup.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26088 | Medical Store Management System UpdateMedicines.java文件SQL注入漏洞 | 2025-08-18 | 2025-10-30 |
| cnvd-2025-26087 | Medical Store Management System MainPanel.java文件SQL注入漏洞 | 2025-08-18 | 2025-10-30 |
| cnvd-2025-26086 | Online Medicine Guide browsemdcn.php文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0260 | Multiples vulnérabilités dans Zabbix | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0259 | Multiples vulnérabilités dans les produits Fortinet | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| CERTFR-2025-AVI-0261 | Multiples vulnérabilités dans Microsoft Azure | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| CERTFR-2025-AVI-0260 | Multiples vulnérabilités dans Zabbix | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| CERTFR-2025-AVI-0259 | Multiples vulnérabilités dans les produits Fortinet | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0257 | Vulnérabilité dans Synology Mail Server | 2025-03-31T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2025-avi-0256 | Multiples vulnérabilités dans Broadcom VMware Tanzu Greenplum | 2025-03-31T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| CERTFR-2025-AVI-0257 | Vulnérabilité dans Synology Mail Server | 2025-03-31T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| CERTFR-2025-AVI-0256 | Multiples vulnérabilités dans Broadcom VMware Tanzu Greenplum | 2025-03-31T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2025-avi-0255 | Multiples vulnérabilités dans les produits IBM | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0254 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0253 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0252 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0251 | Vulnérabilité dans Mozilla Firefox | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0250 | Multiples vulnérabilités dans StormShield Network Security | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| CERTFR-2025-AVI-0255 | Multiples vulnérabilités dans les produits IBM | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| CERTFR-2025-AVI-0254 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| CERTFR-2025-AVI-0253 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| CERTFR-2025-AVI-0252 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| CERTFR-2025-AVI-0251 | Vulnérabilité dans Mozilla Firefox | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| CERTFR-2025-AVI-0250 | Multiples vulnérabilités dans StormShield Network Security | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0249 | Vulnérabilité dans StormShield Network Security | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0248 | Multiples vulnérabilités dans GitLab | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0247 | Vulnérabilité dans Microsoft Edge | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0246 | Vulnérabilité dans Mitel MiContact Center Business | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0245 | Multiples vulnérabilités dans les produits Splunk | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0244 | Vulnérabilité dans Exim | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0243 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| CERTFR-2025-AVI-0249 | Vulnérabilité dans StormShield Network Security | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| CERTFR-2025-AVI-0248 | Multiples vulnérabilités dans GitLab | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |