Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-46070 |
9.8 (3.1)
|
An issue in Automai BotManager v.25.2.0 allows a … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T16:51:39.610Z |
| CVE-2026-0850 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
code-projects Intern Membership Management System dele… |
code-projects |
Intern Membership Management System |
2026-01-11T23:02:06.162Z | 2026-01-12T16:50:15.555Z |
| CVE-2025-13457 |
7.5 (3.1)
|
WooCommerce Square <= 5.1.1 - Unauthenticated Insecure… |
woocommerce |
WooCommerce Square |
2026-01-10T03:21:01.113Z | 2026-01-12T16:49:14.896Z |
| CVE-2026-22691 |
2.7 (4.0)
|
pypdf has possible long runtimes for malformed startxref |
py-pdf |
pypdf |
2026-01-10T04:46:12.423Z | 2026-01-12T16:48:53.503Z |
| CVE-2026-22698 |
8.7 (4.0)
|
RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability |
RustCrypto |
elliptic-curves |
2026-01-10T05:17:19.993Z | 2026-01-12T16:48:30.706Z |
| CVE-2026-22689 |
6.5 (3.1)
|
Mailpit is vulnerable to Cross-Site WebSocket Hijackin… |
axllent |
mailpit |
2026-01-10T05:46:13.771Z | 2026-01-12T16:47:34.722Z |
| CVE-2026-22693 |
5.3 (3.1)
|
Null Pointer Dereference in SubtableUnicodesCache::cre… |
harfbuzz |
harfbuzz |
2026-01-10T05:53:21.019Z | 2026-01-12T16:47:17.715Z |
| CVE-2026-22701 |
5.3 (3.1)
|
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vu… |
tox-dev |
filelock |
2026-01-10T05:59:28.872Z | 2026-01-12T16:45:50.638Z |
| CVE-2025-62235 |
N/A
|
Apache Mynewt NimBLE: Incorrect handling of SMP Securi… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:42:30.446Z | 2026-01-12T16:45:27.886Z |
| CVE-2026-22702 |
4.5 (3.1)
|
virtualenv Has TOCTOU Vulnerabilities in Directory Creation |
pypa |
virtualenv |
2026-01-10T06:05:53.281Z | 2026-01-12T16:44:12.734Z |
| CVE-2026-22703 |
5.5 (3.1)
|
Cosign verification accepts any valid Rekor entry unde… |
sigstore |
cosign |
2026-01-10T06:11:09.426Z | 2026-01-12T16:43:57.302Z |
| CVE-2026-22705 |
6.4 (3.1)
|
RustCrypto: Signatures has timing side-channel in ML-D… |
RustCrypto |
signatures |
2026-01-10T06:14:20.292Z | 2026-01-12T16:43:06.463Z |
| CVE-2026-0851 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Music Site AdminAddUser.php sql i… |
code-projects |
Online Music Site |
2026-01-11T23:32:07.010Z | 2026-01-12T16:37:46.944Z |
| CVE-2025-46066 |
9.9 (3.1)
|
An issue in Automai Director v.25.2.0 allows a re… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T16:37:34.192Z |
| CVE-2025-46067 |
8.2 (3.1)
|
An issue in Automai Director v.25.2.0 allows a re… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T16:34:11.958Z |
| CVE-2025-71063 |
8.2 (3.1)
|
Errands before 46.2.10 does not verify TLS certif… |
mrvladus |
Errands |
2026-01-12T15:56:26.913Z | 2026-01-12T16:26:36.720Z |
| CVE-2025-56225 |
7.5 (3.1)
|
fluidsynth-2.4.6 and earlier versions is vulnerab… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-12T16:24:43.733Z |
| CVE-2025-70161 |
9.8 (3.1)
|
EDIMAX BR-6208AC V2_1.02 is vulnerable to Command… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-12T16:24:37.524Z |
| CVE-2025-69542 |
9.8 (3.1)
|
A Command Injection Vulnerability has been discov… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-12T16:24:30.945Z |
| CVE-2025-67004 |
6.5 (3.1)
|
An Information Disclosure vulnerability in CouchC… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-12T16:24:24.173Z |
| CVE-2025-66744 |
7.5 (3.1)
|
In Yonyou YonBIP v3 and before, the LoginWithV8 i… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-12T16:24:18.143Z |
| CVE-2025-46298 |
6.5 (3.1)
|
The issue was addressed with improved memory hand… |
Apple |
tvOS |
2026-01-09T21:16:30.193Z | 2026-01-12T16:24:12.312Z |
| CVE-2025-46297 |
5.5 (3.1)
|
A permissions issue was addressed with additional… |
Apple |
macOS |
2026-01-09T21:18:39.834Z | 2026-01-12T16:24:06.174Z |
| CVE-2026-22584 |
9.8 (3.1)
|
Improper Control of Generation of Code ('Code Inj… |
Salesforce |
Uni2TS |
2026-01-09T22:10:02.933Z | 2026-01-12T16:23:58.916Z |
| CVE-2026-22027 |
5.7 (4.0)
|
CryptoLib Vulnerable to Heap Buffer Overflow in MariaD… |
nasa |
CryptoLib |
2026-01-10T00:24:58.903Z | 2026-01-12T16:23:53.099Z |
| CVE-2026-22597 |
5.1 (4.0)
|
Ghost has SSRF via External Media Inliner |
TryGhost |
Ghost |
2026-01-10T02:57:36.898Z | 2026-01-12T16:23:47.163Z |
| CVE-2025-14579 |
4.8 (3.1)
|
Quiz Maker < 6.7.0.89 - Admin+ Stored XSS |
Unknown |
Quiz Maker |
2026-01-12T06:00:10.319Z | 2026-01-12T16:23:40.641Z |
| CVE-2025-41005 |
8.7 (4.0)
|
Multiple vulnerabilities in Imaster products Open conf… |
Imaster |
MEMS Events CRM |
2026-01-12T14:35:20.087Z | 2026-01-12T16:23:34.442Z |
| CVE-2025-41006 |
9.3 (4.0)
|
Multiple vulnerabilities in Imaster products Open conf… |
Imaster |
MEMS Events CRM |
2026-01-12T14:39:11.953Z | 2026-01-12T16:23:28.618Z |
| CVE-2025-41077 |
8.6 (4.0)
|
Multiple vulnerabilities in Viafirma products |
Viafirma |
Inbox |
2026-01-12T14:54:51.852Z | 2026-01-12T16:23:22.680Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-71104 |
N/A
|
KVM: x86: Fix VM hard lockup after prolonged inactivit… |
Linux |
Linux |
2026-01-14T15:05:53.802Z | 2026-01-14T15:05:53.802Z |
| CVE-2025-71103 |
N/A
|
drm/msm: adreno: fix deferencing ifpc_reglist when not… |
Linux |
Linux |
2026-01-14T15:05:53.116Z | 2026-01-14T15:05:53.116Z |
| CVE-2025-71102 |
N/A
|
scs: fix a wrong parameter in __scs_magic |
Linux |
Linux |
2026-01-14T15:05:52.389Z | 2026-01-14T15:05:52.389Z |
| CVE-2025-68492 |
4.2 (3.0)
2.3 (4.0)
|
Chainlit versions prior to 2.8.5 contain an autho… |
Chainlit |
Chainlit |
2026-01-14T06:27:14.846Z | 2026-01-15T17:24:34.226Z |
| CVE-2025-67859 |
5.1 (4.0)
|
Polkit Authorization Check can be Bypassed in the TLP … |
https://github.com/linrunner |
TLP |
2026-01-14T11:34:12.479Z | 2026-01-14T16:08:41.480Z |
| CVE-2025-66005 |
8.5 (4.0)
|
Lack of Authentication in the InputManager D-Bus interface |
https://github.com/ShadowBlip |
inputplumber |
2026-01-14T11:53:49.844Z | 2026-01-14T15:46:07.870Z |
| CVE-2025-56226 |
5.3 (3.1)
|
Libsndfile <=1.2.2 contains a memory leak vulnera… |
n/a |
n/a |
2026-01-14T00:00:00.000Z | 2026-01-14T14:57:00.271Z |
| CVE-2025-15513 |
5.3 (3.1)
|
Float Payment Gateway <= 1.1.9 - Improper Authorizatio… |
floattechnologies |
Float Payment Gateway |
2026-01-14T06:40:07.126Z | 2026-01-14T20:30:29.106Z |
| CVE-2025-15512 |
5.3 (3.1)
|
Aplazo Payment Gateway <= 1.4.2 - Missing Authorizatio… |
aplazopayment |
Aplazo Payment Gateway |
2026-01-14T06:40:06.342Z | 2026-01-14T20:52:03.376Z |
| CVE-2025-15486 |
4.4 (3.1)
|
Kunze Law <= 2.1 - Authenticated (Administrator+) Stor… |
kunzemarketing |
Kunze Law |
2026-01-14T05:28:13.753Z | 2026-01-14T21:06:06.315Z |
| CVE-2025-15475 |
5.3 (3.1)
|
PayHere Payment Gateway Plugin for WooCommerce <= 2.3.… |
payhere |
PayHere Payment Gateway Plugin for WooCommerce |
2026-01-14T06:40:08.795Z | 2026-01-14T17:14:32.246Z |
| CVE-2025-15378 |
7.2 (3.1)
|
AJS Footnotes <= 1.0 - Unauthenticated Stored Cross-Si… |
ajseidl |
AJS Footnotes |
2026-01-14T05:28:08.511Z | 2026-01-15T18:44:14.155Z |
| CVE-2025-15377 |
4.3 (3.1)
|
Sosh Share Buttons <= 1.1.0 - Cross-Site Request Forgery |
abage |
Sosh Share Buttons |
2026-01-14T05:28:06.577Z | 2026-01-15T20:19:13.876Z |
| CVE-2025-15376 |
4.3 (3.1)
|
Stopwords for comments <= 1.1 - Missing Authorization … |
rndsand81 |
Stopwords for comments |
2026-01-14T06:40:08.392Z | 2026-01-14T19:13:00.270Z |
| CVE-2025-15283 |
7.2 (3.1)
|
Name Directory <= 1.30.3 - Unauthenticated Stored Cros… |
jeroenpeters1986 |
Name Directory |
2026-01-14T05:28:07.374Z | 2026-01-15T20:00:43.944Z |
| CVE-2025-15266 |
7.2 (3.1)
|
GeekyBot — Generate AI Content Without Prompt, Chatbot… |
ahmadgb |
GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation |
2026-01-14T05:28:11.185Z | 2026-01-14T19:16:27.766Z |
| CVE-2025-15021 |
4.4 (3.1)
|
Gotham Block Extra Light <= 1.5.0 - Authenticated (Adm… |
gothamdev |
Gotham Block Extra Light |
2026-01-14T05:28:11.608Z | 2026-01-14T19:16:19.735Z |
| CVE-2025-15020 |
6.5 (3.1)
|
Gotham Block Extra Light <= 1.5.0 - Authenticated (Con… |
gothamdev |
Gotham Block Extra Light |
2026-01-14T05:28:10.798Z | 2026-01-14T19:16:35.219Z |
| CVE-2025-14880 |
5.3 (3.1)
|
Netcash WooCommerce Payment Gateway <= 4.1.3 - Missing… |
netcashpaynow |
Netcash WooCommerce Payment Gateway |
2026-01-14T05:28:09.641Z | 2026-01-14T19:16:52.390Z |
| CVE-2025-14854 |
5.4 (3.1)
|
WP-CRM System – Manage Clients and Projects <= 3.4.5 -… |
nofearinc |
WP-CRM System – Manage Clients and Projects |
2026-01-14T05:28:12.974Z | 2026-01-15T17:26:26.971Z |
| CVE-2025-14846 |
4.3 (3.1)
|
SocialChamp with WordPress <= 1.3.3 - Cross-Site Reque… |
socialchampio |
SocialChamp with WordPress |
2026-01-14T06:40:07.548Z | 2026-01-14T20:28:15.355Z |
| CVE-2025-14770 |
7.5 (3.1)
|
Shipping Rate By Cities <= 2.0.0 - Unauthenticated SQL… |
tridenttechnolabs |
Shipping Rate By Cities |
2026-01-14T06:40:04.700Z | 2026-01-15T16:01:00.558Z |
| CVE-2025-14725 |
4.4 (3.1)
|
Internal Link Builder <= 1.0 - Authenticated (Administ… |
sablab |
Internal Link Builder |
2026-01-14T05:28:05.147Z | 2026-01-14T19:17:09.418Z |
| CVE-2025-14615 |
7.1 (3.1)
|
DASHBOARD BUILDER <= 1.5.7 - Cross-Site Request Forger… |
dashboardbuilder |
DASHBOARD BUILDER – WordPress plugin for Charts and Graphs |
2026-01-14T05:28:03.897Z | 2026-01-14T19:17:25.639Z |
| CVE-2025-14613 |
7.2 (3.1)
|
GetContentFromURL <= 1.0 - Authenticated (Contributor+… |
daschmi |
GetContentFromURL |
2026-01-14T05:28:12.007Z | 2026-01-15T18:29:50.855Z |
| CVE-2025-14482 |
4.3 (3.1)
|
Crush.pics Image Optimizer <= 1.8.7 - Missing Authoriz… |
crushpics |
Crush.pics Image Optimizer – Image Compression and Optimization |
2026-01-14T05:28:09.249Z | 2026-01-14T19:16:58.169Z |
| CVE-2025-14464 |
5.3 (3.1)
|
PDF Resume Parser <= 1.0 - Unauthenticated Sensitive I… |
kiwicommerce |
PDF Resume Parser |
2026-01-14T05:28:10.428Z | 2026-01-14T19:16:41.520Z |
| CVE-2025-14389 |
4.3 (3.1)
|
WPBlogSyn <= 1.0 - Cross-Site Request Forgery to Arbit… |
obridgeacademy |
WPBlogSyn |
2026-01-14T05:28:04.313Z | 2026-01-14T19:17:20.698Z |
| CVE-2025-14379 |
4.4 (3.1)
|
Testimonials Creator 1.6 - Authenticated (Admin+) Stor… |
adoncreatives |
Testimonials Creator |
2026-01-14T05:28:07.014Z | 2026-01-15T20:07:54.708Z |
| CVE-2025-14338 |
8.5 (4.0)
|
Polkit authentication dis isabled by default in inputplumber |
https://github.com/ShadowBlip |
inputplumber |
2026-01-14T11:55:31.845Z | 2026-01-14T14:53:44.027Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-71104 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup a… | 2026-01-14T15:15:59.423 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71103 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferenci… | 2026-01-14T15:15:59.323 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-71102 | In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in … | 2026-01-14T15:15:59.210 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-68492 | Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulner… | 2026-01-14T07:16:14.627 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-67859 | A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power … | 2026-01-14T12:16:32.367 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-66005 | Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 c… | 2026-01-14T12:16:32.100 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-56226 | Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function with… | 2026-01-14T15:15:56.873 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15513 | The Float Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data d… | 2026-01-14T07:16:14.433 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15512 | The Aplazo Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data … | 2026-01-14T07:16:14.250 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15486 | The Kunze Law plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's shortc… | 2026-01-14T06:15:54.597 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15475 | The PayHere Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to unauthoriz… | 2026-01-14T07:16:14.063 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15378 | The AJS Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note_l… | 2026-01-14T06:15:54.437 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15377 | The Sosh Share Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers… | 2026-01-14T06:15:54.283 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15376 | The Stopwords for comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all … | 2026-01-14T07:16:13.883 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15283 | The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name_… | 2026-01-14T06:15:54.130 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15266 | The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress… | 2026-01-14T06:15:53.980 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15021 | The Gotham Block Extra Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … | 2026-01-14T06:15:53.827 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-15020 | The Gotham Block Extra Light plugin for WordPress is vulnerable to Arbitrary File Read in all versi… | 2026-01-14T06:15:53.673 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14880 | The Netcash WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized modifica… | 2026-01-14T06:15:53.520 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14854 | The WP-CRM System plugin for WordPress is vulnerable to unauthorized access due to missing capabili… | 2026-01-14T06:15:53.357 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14846 | The SocialChamp with WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in … | 2026-01-14T07:16:13.680 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14770 | The Shipping Rate By Cities plugin for WordPress is vulnerable to SQL Injection via the 'city' para… | 2026-01-14T07:16:13.493 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14725 | The Internal Link Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adm… | 2026-01-14T06:15:53.207 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14615 | The DASHBOARD BUILDER – WordPress plugin for Charts and Graphs plugin for WordPress is vulnerable t… | 2026-01-14T06:15:53.050 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14613 | The GetContentFromURL plugin for WordPress is vulnerable to Server-Side Request Forgery in all vers… | 2026-01-14T06:15:52.890 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14482 | The Crush.pics Image Optimizer - Image Compression and Optimization plugin for WordPress is vulnera… | 2026-01-14T06:15:52.597 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14464 | The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all v… | 2026-01-14T06:15:52.440 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14389 | The WPBlogSyn plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, a… | 2026-01-14T06:15:52.290 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14379 | The Testimonials Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admi… | 2026-01-14T06:15:52.133 | 2026-01-14T16:25:12.057 |
| fkie_cve-2025-14338 | Polkit authentication dis isabled by default and a race condition in the Polkit authorization check… | 2026-01-14T12:16:31.893 | 2026-01-14T16:25:12.057 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mrpr-4fwm-hj99 |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Affected by this vuln… | 2025-11-20T15:30:23Z | 2026-01-08T18:30:27Z |
| ghsa-jvqc-385v-69q8 |
7.1 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: tracing: Limit access to parse… | 2025-09-05T18:31:26Z | 2026-01-08T18:30:27Z |
| ghsa-h5w4-4xvq-qx5c |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driv… | 2025-09-05T18:31:27Z | 2026-01-08T18:30:27Z |
| ghsa-fjf6-f8jx-fjgp |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if … | 2025-09-05T18:31:27Z | 2026-01-08T18:30:27Z |
| ghsa-9wq2-qrhf-fmm4 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_… | 2025-09-05T18:31:26Z | 2026-01-08T18:30:27Z |
| ghsa-9pqv-7h63-32cr |
7.1 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PH… | 2025-09-05T18:31:26Z | 2026-01-08T18:30:27Z |
| ghsa-8v4r-83gc-j76m |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugf… | 2025-09-05T18:31:27Z | 2026-01-08T18:30:27Z |
| ghsa-7wxg-2396-hr4x |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after… | 2025-09-05T18:31:26Z | 2026-01-08T18:30:27Z |
| ghsa-79v5-g3qw-x5vg |
4.7 (3.1)
|
There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to … | 2025-12-19T21:30:20Z | 2026-01-08T18:30:27Z |
| ghsa-6684-j5cx-q9qw |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free … | 2025-09-05T18:31:26Z | 2026-01-08T18:30:27Z |
| ghsa-3px4-cc65-vwjj |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against … | 2025-09-05T18:31:27Z | 2026-01-08T18:30:27Z |
| ghsa-3fr6-pgc4-qmrv |
4.7 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating … | 2025-09-05T18:31:27Z | 2026-01-08T18:30:27Z |
| ghsa-37gv-w6h3-7hm7 |
7.0 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison t… | 2025-09-05T18:31:27Z | 2026-01-08T18:30:27Z |
| ghsa-x8r2-g34h-2v3j |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked… | 2025-09-05T18:31:17Z | 2026-01-08T18:30:26Z |
| ghsa-wvjq-jmp5-gvcr |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offse… | 2025-09-05T18:31:17Z | 2026-01-08T18:30:26Z |
| ghsa-p6j9-xx79-r863 |
7.1 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of boun… | 2025-09-05T18:31:17Z | 2026-01-08T18:30:26Z |
| ghsa-hh9x-rr36-2f2w |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3… | 2025-09-05T18:31:17Z | 2026-01-08T18:30:26Z |
| ghsa-cvch-2h28-pxmh |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add ph… | 2025-09-05T18:31:17Z | 2026-01-08T18:30:26Z |
| ghsa-5j63-8q43-chww |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry … | 2025-09-05T18:31:17Z | 2026-01-08T18:30:26Z |
| ghsa-qjm3-cvp9-3jj3 |
6.8 (4.0)
|
Bio-Formats performs unsafe Java deserialization of attacker-controlled memoization cache files (.b… | 2026-01-07T21:31:56Z | 2026-01-08T17:45:48Z |
| ghsa-fcqj-76g3-q7qm |
4.6 (4.0)
|
Bio-Formats has an XML External Entity (XXE) vulnerability | 2026-01-07T21:31:56Z | 2026-01-08T17:33:26Z |
| ghsa-h4rf-624j-gj33 |
10.0 (3.1)
|
terminal-controller-mcp vulnerable to Command Injection | 2026-01-07T18:30:26Z | 2026-01-08T17:32:50Z |
| ghsa-9726-w42j-3qjr |
8.8 (4.0)
|
picklescan has Arbitrary file read using `io.FileIO` | 2026-01-08T17:25:35Z | 2026-01-08T17:25:35Z |
| ghsa-j893-m93w-jwjw |
7.5 (3.1)
|
fast-filesystem-mcp has a Path Traversal vulnerability | 2026-01-07T18:30:26Z | 2026-01-08T17:18:26Z |
| ghsa-r6jh-234r-fv5v |
5.1 (4.0)
|
A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall … | 2026-01-08T15:31:26Z | 2026-01-08T15:31:26Z |
| ghsa-g8f7-f2vp-fv6x |
6.9 (4.0)
|
An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerabilit… | 2026-01-08T15:31:26Z | 2026-01-08T15:31:26Z |
| ghsa-xfxj-mh7v-h4rr |
5.3 (4.0)
|
Asseco ADMX system is used for processing medical records. It allows logged in users to access medi… | 2026-01-08T15:31:25Z | 2026-01-08T15:31:25Z |
| ghsa-vx77-f96x-gpjp |
5.9 (4.0)
|
Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks … | 2026-01-08T15:31:25Z | 2026-01-08T15:31:25Z |
| ghsa-vqhr-m87q-9jqh |
5.3 (3.1)
|
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO… | 2026-01-08T12:30:29Z | 2026-01-08T15:31:25Z |
| ghsa-v7fr-3jhm-3qhw |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: comedi: Make insn_rw_emulate_b… | 2025-09-05T18:31:26Z | 2026-01-08T15:31:25Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-242 |
|
netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues a… | netius | 2020-05-21T15:15:00Z | 2021-11-23T06:07:22.013113Z |
| pysec-2019-220 |
|
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. | jinja2 | 2019-04-08T13:29:00Z | 2021-11-22T04:57:52.929678Z |
| pysec-2019-217 |
|
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape. | jinja2 | 2019-04-07T00:29:00Z | 2021-11-22T04:57:52.862665Z |
| pysec-2014-97 |
|
Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy Digi… | apache-libcloud | 2014-01-07T18:55:00Z | 2021-11-22T04:57:51.510127Z |
| pysec-2021-430 |
|
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generat… | django-helpdesk | 2021-11-13T09:15:00Z | 2021-11-19T07:28:03.664110Z |
| pysec-2021-429 |
|
SLO generator allows for loading of YAML files that if crafted in a specific format can a… | slo-generator | 2021-10-04T10:15:00Z | 2021-11-16T21:20:29.712720Z |
| pysec-2021-428 |
|
nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions … | nbdime | 2021-11-03T18:15:00Z | 2021-11-16T21:20:29.137127Z |
| pysec-2018-104 |
|
python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an informat… | oslo-middleware | 2018-05-08T17:29:00Z | 2021-11-16T21:20:29.327956Z |
| pysec-2017-99 |
|
Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticat… | cherrymusic | 2017-03-27T15:59:00Z | 2021-11-16T21:20:28.227902Z |
| pysec-2017-100 |
|
Cross-site scripting (XSS) vulnerability in Cherry Music before 0.36.0 allows remote auth… | cherrymusic | 2017-03-27T15:59:00Z | 2021-11-16T21:20:28.264266Z |
| pysec-2013-34 |
|
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote… | graphite-web | 2013-09-27T10:08:00Z | 2021-11-16T21:20:28.715114Z |
| pysec-2011-24 |
|
libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allow… | apache-libcloud | 2011-09-12T12:41:00Z | 2021-11-16T21:20:27.993612Z |
| pysec-2021-426 |
|
The verify function in the Stark Bank Python ECDSA library (ecdsa-python) 2.0.0 fails to … | starkbank-ecdsa | 2021-11-09T22:15:00Z | 2021-11-16T03:58:45.828098Z |
| pysec-2020-267 |
|
Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in … | red-discordbot | 2020-10-28T17:15:00Z | 2021-11-16T03:58:45.518170Z |
| pysec-2020-266 |
|
Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability … | red-discordbot | 2020-08-21T18:15:00Z | 2021-11-16T03:58:45.466484Z |
| pysec-2020-265 |
|
In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia… | red-discordbot | 2020-08-21T17:15:00Z | 2021-11-16T03:58:45.413825Z |
| pysec-2019-218 |
|
libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by… | python-libnmap | 2019-07-15T03:15:00Z | 2021-11-16T03:58:45.118185Z |
| pysec-2021-425 |
|
Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In version… | matrix-synapse | 2021-08-31T17:15:00Z | 2021-11-16T03:58:44.571857Z |
| pysec-2021-424 |
|
Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In version… | matrix-synapse | 2021-08-31T16:15:00Z | 2021-11-16T03:58:44.500451Z |
| pysec-2021-423 |
|
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by t… | gateone | 2021-10-06T13:15:00Z | 2021-11-16T03:58:44.124463Z |
| pysec-2020-264 |
|
In "I hate money" before version 4.1.5, an authenticated member of one project can modify… | ihatemoney | 2020-07-27T18:15:00Z | 2021-11-16T03:58:44.236145Z |
| pysec-2021-422 |
|
Bot Framework SDK Information Disclosure Vulnerability | botframework-connector | 2021-01-12T20:15:00Z | 2021-11-16T03:58:43.637745Z |
| pysec-2021-421 |
|
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (… | babel | 2021-10-20T21:15:00Z | 2021-11-16T03:58:43.401152Z |
| pysec-2020-263 |
|
A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When … | djangorestframework | 2020-09-30T20:15:00Z | 2021-11-16T03:58:43.874175Z |
| pysec-2020-262 |
|
In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the passwor… | apache-airflow | 2020-12-14T10:15:00Z | 2021-11-16T03:58:43.269619Z |
| pysec-2019-216 |
|
A malicious admin user could edit the state of objects in the Airflow metadata database t… | apache-airflow | 2019-10-30T22:15:00Z | 2021-11-16T03:58:43.222984Z |
| pysec-2019-215 |
|
A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have … | apache-airflow | 2019-04-10T20:29:00Z | 2021-11-16T03:58:43.176949Z |
| pysec-2019-214 |
|
A malicious admin user could edit the state of objects in the Airflow metadata database t… | apache-airflow | 2019-04-10T20:29:00Z | 2021-11-16T03:58:43.132049Z |
| pysec-2021-420 |
|
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… | tensorflow | 2021-11-05T23:15:00Z | 2021-11-13T06:52:46.380831Z |
| pysec-2021-419 |
|
TensorFlow is an open source platform for machine learning. In affected versions the `Imm… | tensorflow | 2021-11-05T23:15:00Z | 2021-11-13T06:52:46.221231Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32519 | Missing Authorization vulnerability in GutenGeek GG Woo Feed for WooCommerce.This issue a… | 2024-04-16T05:01:54.579723Z |
| gsd-2024-32518 | Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This is… | 2024-04-16T05:01:54.681110Z |
| gsd-2024-32517 | Missing Authorization vulnerability in WooCommerce & WordPress Tutorials Custom Thank You… | 2024-04-16T05:01:54.595211Z |
| gsd-2024-32516 | Missing Authorization vulnerability in Palscode Multi Currency For WooCommerce.This issue… | 2024-04-16T05:01:54.693949Z |
| gsd-2024-32515 | Missing Authorization vulnerability in Qamar Sheeraz, Nasir Ahmad Mega Addons For Element… | 2024-04-16T05:01:54.604094Z |
| gsd-2024-32514 | Unrestricted Upload of File with Dangerous Type vulnerability in Poll Maker & Voting Plug… | 2024-04-16T05:01:54.724168Z |
| gsd-2024-32513 | Insertion of Sensitive Information into Log File vulnerability in AdTribes.Io Product Fee… | 2024-04-16T05:01:54.642958Z |
| gsd-2024-32512 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.598023Z |
| gsd-2024-32511 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.618177Z |
| gsd-2024-32510 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.722313Z |
| gsd-2024-32509 | Missing Authorization vulnerability in Loopus WP Cost Estimation & Payment Forms Builder.… | 2024-04-16T05:01:54.587442Z |
| gsd-2024-32508 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.598484Z |
| gsd-2024-32507 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.577425Z |
| gsd-2024-32506 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio… | 2024-04-16T05:01:54.618621Z |
| gsd-2024-32505 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.669312Z |
| gsd-2024-32504 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.600594Z |
| gsd-2024-32503 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.577229Z |
| gsd-2024-32502 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.585782Z |
| gsd-2024-32501 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.689371Z |
| gsd-2024-32500 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.674785Z |
| gsd-2024-32499 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.569850Z |
| gsd-2024-32498 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.604307Z |
| gsd-2024-32497 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.732027Z |
| gsd-2024-32496 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.661495Z |
| gsd-2024-32495 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.577033Z |
| gsd-2024-32494 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.678491Z |
| gsd-2024-32493 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.593382Z |
| gsd-2024-32492 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.742285Z |
| gsd-2024-32491 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.605646Z |
| gsd-2024-32490 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.722724Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192794 | Malicious code in elf-stats-whimsical-cocoa-613 (npm) | 2025-12-23T08:11:33Z | 2025-12-24T00:53:16Z |
| mal-2025-192793 | Malicious code in elf-stats-whimsical-cocoa-243 (npm) | 2025-12-23T08:11:32Z | 2025-12-24T00:53:16Z |
| mal-2025-192792 | Malicious code in elf-stats-velvet-sparkler-555 (npm) | 2025-12-23T08:11:31Z | 2025-12-24T00:53:16Z |
| mal-2025-192791 | Malicious code in elf-stats-velvet-bow-244 (npm) | 2025-12-23T08:11:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192790 | Malicious code in elf-stats-sprucey-giftbox-118 (npm) | 2025-12-23T08:10:50Z | 2025-12-24T00:53:16Z |
| mal-2025-192789 | Malicious code in elf-stats-sprucey-cookie-492 (npm) | 2025-12-23T08:10:49Z | 2025-12-24T00:53:16Z |
| mal-2025-192788 | Malicious code in elf-stats-sparkly-train-831 (npm) | 2025-12-23T08:10:48Z | 2025-12-24T00:53:16Z |
| mal-2025-192787 | Malicious code in elf-stats-sparkly-toolkit-703 (npm) | 2025-12-23T08:10:46Z | 2025-12-24T00:53:16Z |
| mal-2025-192786 | Malicious code in elf-stats-sparkly-sled-484 (npm) | 2025-12-23T08:10:45Z | 2025-12-24T00:53:16Z |
| mal-2025-192785 | Malicious code in elf-stats-sleighing-hammer-902 (npm) | 2025-12-23T08:10:05Z | 2025-12-24T00:53:16Z |
| mal-2025-192784 | Malicious code in elf-stats-silvered-toolkit-914 (npm) | 2025-12-23T08:10:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192783 | Malicious code in elf-stats-silvered-bow-679 (npm) | 2025-12-23T08:09:51Z | 2025-12-24T00:53:16Z |
| mal-2025-192782 | Malicious code in elf-stats-shimmering-fir-491 (npm) | 2025-12-23T08:09:49Z | 2025-12-24T00:53:16Z |
| mal-2025-192781 | Malicious code in elf-stats-rooftop-pinecone-887 (npm) | 2025-12-23T08:09:47Z | 2025-12-24T00:53:16Z |
| mal-2025-192780 | Malicious code in elf-stats-rooftop-mitten-324 (npm) | 2025-12-23T08:09:46Z | 2025-12-24T00:53:16Z |
| mal-2025-192779 | Malicious code in elf-stats-piney-train-884 (npm) | 2025-12-23T08:09:34Z | 2025-12-24T00:53:16Z |
| mal-2025-192778 | Malicious code in elf-stats-nutmeg-fir-716 (npm) | 2025-12-23T08:09:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192777 | Malicious code in elf-stats-mistletoe-muffin-976 (npm) | 2025-12-23T08:09:15Z | 2025-12-24T00:53:16Z |
| mal-2025-192776 | Malicious code in elf-stats-mistletoe-cookie-256 (npm) | 2025-12-23T08:09:14Z | 2025-12-24T00:53:16Z |
| mal-2025-192775 | Malicious code in elf-stats-merry-sparkler-797 (npm) | 2025-12-23T08:09:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192774 | Malicious code in elf-stats-joyous-saddlebag-967 (npm) | 2025-12-23T08:08:33Z | 2025-12-24T00:53:16Z |
| mal-2025-192773 | Malicious code in elf-stats-jolly-snowglobe-266 (npm) | 2025-12-23T08:08:32Z | 2025-12-24T00:53:16Z |
| mal-2025-192772 | Malicious code in elf-stats-holly-fir-593 (npm) | 2025-12-23T08:08:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192771 | Malicious code in elf-stats-glittering-cookie-844 (npm) | 2025-12-23T08:08:17Z | 2025-12-24T00:53:16Z |
| mal-2025-192770 | Malicious code in elf-stats-ginger-bow-370 (npm) | 2025-12-23T08:08:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192769 | Malicious code in elf-stats-fuzzy-ribbon-205 (npm) | 2025-12-23T08:08:00Z | 2025-12-24T00:53:16Z |
| mal-2025-192768 | Malicious code in elf-stats-flickering-satchel-815 (npm) | 2025-12-23T08:07:45Z | 2025-12-24T00:53:16Z |
| mal-2025-192767 | Malicious code in elf-stats-festive-marshmallow-962 (npm) | 2025-12-23T08:07:35Z | 2025-12-24T00:53:16Z |
| mal-2025-192766 | Malicious code in elf-stats-evergreen-lantern-387 (npm) | 2025-12-23T08:07:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192765 | Malicious code in elf-stats-ember-workbench-742 (npm) | 2025-12-23T08:07:16Z | 2025-12-24T00:53:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2022-1613 | git: Mehrere Schwachstellen | 2019-12-10T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0835 | Atlassian Jira: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0834 | ESRI ArcGIS: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0833 | Axis OS: Schwachstelle ermöglicht Denial of Service | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0832 | Autodesk AutoCAD und Civil 3D: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0829 | HCL BigFix: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0827 | Oracle Secure Backup: Schwachstelle gefährdet Vertraulichkeit, Integrität und Verfügbarkeit | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0826 | Oracle TimesTen In-Memory Database: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0825 | Oracle Commerce: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0824 | Oracle Communications Applications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0822 | Oracle Construction and Engineering: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0821 | Oracle E-Business Suite: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0820 | Oracle Enterprise Manager: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0819 | Oracle Financial Services Applications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0818 | Oracle Fusion Middleware: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0817 | Oracle Hyperion: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0816 | Oracle Insurance Applications: Schwachstelle gefährdet Vertraulichkeit | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0814 | Oracle JD Edwards: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0812 | Oracle PeopleSoft: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0811 | Oracle Policy Automation: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0810 | Oracle Retail Applications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0809 | Oracle Siebel CRM: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0808 | Oracle Supply Chain: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0807 | Oracle Support Tools: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0805 | Oracle Utilities Applications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0802 | Atlassian Confluence Data Center und Server: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0801 | Atlassian Bamboo: Schwachstelle ermöglicht Denial of Service | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0705 | HCL BigFix WebUI-Anwendungen: Mehrere Schwachstellen | 2025-04-03T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0700 | Red Hat OpenShift: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-02T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0585 | Varnish HTTP Cache: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-18T23:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:2686 | Red Hat Security Advisory: libxml2 security update | 2025-03-12T15:55:48+00:00 | 2026-01-14T00:59:21+00:00 |
| rhsa-2025:2678 | Red Hat Security Advisory: libxml2 security update | 2025-03-12T11:35:08+00:00 | 2026-01-14T00:59:20+00:00 |
| rhsa-2025:2673 | Red Hat Security Advisory: libxml2 security update | 2025-03-12T00:20:59+00:00 | 2026-01-14T00:59:19+00:00 |
| rhsa-2025:2660 | Red Hat Security Advisory: libxml2 security update | 2025-03-11T13:24:23+00:00 | 2026-01-14T00:59:19+00:00 |
| rhsa-2025:2513 | Red Hat Security Advisory: libxml2 security update | 2025-03-10T14:21:34+00:00 | 2026-01-14T00:59:19+00:00 |
| rhsa-2025:2507 | Red Hat Security Advisory: libxml2 security update | 2025-03-10T13:16:54+00:00 | 2026-01-14T00:59:17+00:00 |
| rhsa-2025:2483 | Red Hat Security Advisory: libxml2 security update | 2025-03-10T05:54:13+00:00 | 2026-01-14T00:59:15+00:00 |
| rhsa-2025:2482 | Red Hat Security Advisory: libxml2 security update | 2025-03-10T05:45:33+00:00 | 2026-01-14T00:59:12+00:00 |
| rhsa-2020:3842 | Red Hat Security Advisory: OpenShift Container Platform 4.5.13 openshift-enterprise-console-container security update | 2020-10-01T00:15:26+00:00 | 2026-01-14T00:58:28+00:00 |
| rhsa-2021:2438 | Red Hat Security Advisory: OpenShift Container Platform 4.8.2 bug fix and security update | 2021-07-27T22:30:07+00:00 | 2026-01-14T00:58:27+00:00 |
| rhsa-2021:0308 | Red Hat Security Advisory: OpenShift Container Platform 4.6.16 security and bug fix update | 2021-02-08T13:49:53+00:00 | 2026-01-14T00:58:27+00:00 |
| rhsa-2020:0451 | Red Hat Security Advisory: OpenShift Container Platform 3.11 security update | 2020-02-19T20:13:45+00:00 | 2026-01-14T00:58:26+00:00 |
| rhsa-2019:2859 | Red Hat Security Advisory: OpenShift Container Platform 4.1.18 security update | 2019-09-27T00:14:29+00:00 | 2026-01-14T00:58:25+00:00 |
| rhsa-2019:1245 | Red Hat Security Advisory: Red Hat Quay 3.0.2 security and bug fix update | 2019-05-20T14:12:27+00:00 | 2026-01-14T00:58:25+00:00 |
| rhsa-2018:2123 | Red Hat Security Advisory: python security update | 2018-07-03T14:14:04+00:00 | 2026-01-14T00:58:25+00:00 |
| rhsa-2017:3240 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.18 security update | 2017-11-16T19:27:22+00:00 | 2026-01-14T00:58:24+00:00 |
| rhsa-2017:3239 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.18 security update | 2017-11-16T19:10:21+00:00 | 2026-01-14T00:58:23+00:00 |
| rhsa-2017:3114 | Red Hat Security Advisory: Red Hat JBoss Web Server security and bug fix update | 2017-11-02T19:04:48+00:00 | 2026-01-14T00:58:23+00:00 |
| rhsa-2017:3113 | Red Hat Security Advisory: Red Hat JBoss Web Server security and bug fix update | 2017-11-02T19:15:44+00:00 | 2026-01-14T00:58:23+00:00 |
| rhsa-2017:2710 | Red Hat Security Advisory: Red Hat JBoss Core Services security update | 2017-09-13T16:49:04+00:00 | 2026-01-14T00:58:22+00:00 |
| rhsa-2017:2709 | Red Hat Security Advisory: Red Hat JBoss Core Services security update | 2017-09-13T16:48:46+00:00 | 2026-01-14T00:58:21+00:00 |
| rhsa-2017:2708 | Red Hat Security Advisory: Red Hat JBoss Core Services security update | 2017-09-13T16:37:52+00:00 | 2026-01-14T00:58:21+00:00 |
| rhsa-2017:1216 | Red Hat Security Advisory: java-1.7.1-ibm security update | 2017-05-09T16:41:26+00:00 | 2026-01-14T00:58:21+00:00 |
| rhsa-2017:0462 | Red Hat Security Advisory: java-1.8.0-ibm security update | 2017-03-08T13:22:53+00:00 | 2026-01-14T00:58:20+00:00 |
| rhsa-2017:0338 | Red Hat Security Advisory: java-1.6.0-ibm security update | 2017-02-28T08:29:25+00:00 | 2026-01-14T00:58:18+00:00 |
| rhsa-2017:0337 | Red Hat Security Advisory: java-1.7.0-ibm security update | 2017-02-28T08:19:27+00:00 | 2026-01-14T00:58:18+00:00 |
| rhsa-2017:0336 | Red Hat Security Advisory: java-1.7.1-ibm security update | 2017-02-28T08:19:38+00:00 | 2026-01-14T00:58:14+00:00 |
| rhsa-2016:1940 | Red Hat Security Advisory: openssl security update | 2016-09-27T13:46:00+00:00 | 2026-01-14T00:58:14+00:00 |
| rhba-2019:2581 | Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 images update | 2019-09-03T17:12:22+00:00 | 2026-01-14T00:58:11+00:00 |
| rhsa-2022:8267 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2022-11-15T11:55:31+00:00 | 2026-01-13T23:12:26+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-285-09 | Siemens CPCI85 Firmware of SICAM A8000 Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-05 | Siemens Simcenter Amesim | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-04 | Siemens Xpedition Layout Browser | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-03 | Siemens SICAM A8000 Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-02 | Siemens SCALANCE W1750D | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-01 | Siemens SIMATIC CP products | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-131-02 | Siemens SCALANCE W1750D | 2023-05-09T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-22-223-07 | Siemens SCALANCE (Update A) | 2022-08-09T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-22-132-08 | Siemens Industrial Products with OPC UA | 2022-05-10T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-22-069-03 | Siemens SINEC NMS | 2022-03-08T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-23-278-02 | Qognify NiceVision | 2023-10-05T06:00:00.000000Z | 2023-10-05T06:00:00.000000Z |
| icsa-23-278-01 | Hitachi Energy AFS65x,AFF66x, AFS67x, and AFR67x Series Products | 2023-10-05T06:00:00.000000Z | 2023-10-05T06:00:00.000000Z |
| icsa-23-271-01 | Rockwell Automation PanelView 800 | 2023-09-28T06:00:00.000000Z | 2023-09-28T06:00:00.000000Z |
| icsa-23-271-02 | DEXMA DexGate | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-269-05 | Baker Hughes Bently Nevada 3500 | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-269-04 | Advantech EKI-1524-CE series | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-269-02 | Hitachi Energy Asset Suite 9 | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-269-01 | Suprema BioStar 2 | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-024-02 | SOCOMEC MODULYS GP (UPDATE A) | 2023-01-24T07:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-264-06 | Rockwell Automation FactoryTalk View Machine Edition | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-264-05 | Rockwell Automation Connected Components Workbench | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-264-04 | Rockwell Automation Select Logix Communication Modules | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-264-03 | Delta Electronics DIAScreen | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-264-01 | Real Time Automation 460 Series | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-262-05 | Omron CJ/CS/CP Series | 2023-09-19T06:00:00.000000Z | 2023-09-19T06:00:00.000000Z |
| icsa-23-262-04 | Omron Engineering Software | 2023-09-19T06:00:00.000000Z | 2023-09-19T06:00:00.000000Z |
| icsa-23-262-03 | Omron Engineering Software Zip-Slip | 2023-09-19T06:00:00.000000Z | 2023-09-19T06:00:00.000000Z |
| icsa-23-257-07 | Rockwell Automation Pavilion8 | 2023-09-14T06:00:00.000000Z | 2023-09-14T06:00:00.000000Z |
| icsa-23-262-01 | Siemens SIMATIC PCS neo Administration Console | 2023-09-14T00:00:00Z | 2023-09-14T00:00:00Z |
| icsa-23-255-02 | Fujitsu Software Infrastructure Manager | 2023-09-12T06:00:00.000000Z | 2023-09-12T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-fdm-xxe-zr7sxpfs | Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-fdm-xxe-zR7sxPfs | Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-fdm-dos-nfes8xtn | Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-fdm-dos-nFES8xTN | Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-asa-ftd-vpn-dos-fpbcpecd | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-asa-ftd-vpn-dos-fpBcpEcD | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-asa-ftd-sipdos-ggwmmerc | Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP Denial of Service Vulnerability | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-asa-ftd-sipdos-GGwmMerC | Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP Denial of Service Vulnerability | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-asa-ftd-cmd-inj-selprvg | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Command Injection Vulnerability | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-asa-ftd-cmd-inj-SELprvG | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Command Injection Vulnerability | 2021-04-28T16:00:00+00:00 | 2021-04-28T16:00:00+00:00 |
| cisco-sa-vmanage-info-disclos-ggvm9mfu | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vmanage-info-disclos-gGvm9Mfu | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vmanage-cql-inject-c7z9qqyb | Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vmanage-cql-inject-c7z9QqyB | Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vman-xml-ext-entity-q6z7uvug | Cisco SD-WAN vManage XML External Entity Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vman-xml-ext-entity-q6Z7uVUg | Cisco SD-WAN vManage XML External Entity Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vman-cmdinj-nrhkgfhx | Cisco SD-WAN vManage Command Injection Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vman-cmdinj-nRHKgfHX | Cisco SD-WAN vManage Command Injection Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vman-auth-bypass-z3zze5xc | Cisco SD-WAN vManage Authorization Bypass Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-vman-auth-bypass-Z3Zze5XC | Cisco SD-WAN vManage Authorization Bypass Vulnerability | 2021-04-21T16:00:00+00:00 | 2021-04-21T16:00:00+00:00 |
| cisco-sa-xr-cmdinj-vskgherc | Cisco IOS XR Software Command Injection Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-15T15:41:32+00:00 |
| cisco-sa-xr-cmdinj-vsKGherc | Cisco IOS XR Software Command Injection Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-15T15:41:32+00:00 |
| cisco-sa-anyconnect-dos-55ayyxyr | Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-04-14T16:14:43+00:00 |
| cisco-sa-anyconnect-dos-55AYyxYr | Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-04-14T16:14:43+00:00 |
| cisco-sa-xe-fsm-yj8qjbjc | Cisco IOS and IOS XE Software Privilege Escalation Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-04-13T19:22:50+00:00 |
| cisco-sa-XE-FSM-Yj8qJbJc | Cisco IOS and IOS XE Software Privilege Escalation Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-04-13T19:22:50+00:00 |
| cisco-sa-esa-sma-info-disclo-vou2ghbz | Cisco Content Security Management Appliance Information Disclosure Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-04-12T12:54:51+00:00 |
| cisco-sa-esa-sma-info-disclo-VOu2GHbZ | Cisco Content Security Management Appliance Information Disclosure Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-04-12T12:54:51+00:00 |
| cisco-sa-webex-vobwrkwv | Cisco Webex Meetings HTML Injection Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-webex-andro-iac-f3ur8frb | Cisco Webex Meetings for Android Avatar Modification Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-57876 | drm/dp_mst: Fix resetting msg rx state after topology removal | 2025-01-02T00:00:00.000Z | 2025-09-28T01:01:52.000Z |
| msrc_cve-2024-41069 | ASoC: topology: Fix references to freed memory | 2024-07-01T07:00:00.000Z | 2025-09-28T01:01:40.000Z |
| msrc_cve-2024-35826 | block: Fix page refcounts for unaligned buffers in __bio_release_pages() | 2024-05-02T07:00:00.000Z | 2025-09-28T01:01:35.000Z |
| msrc_cve-2024-35803 | x86/efistub: Call mixed mode boot services on the firmware's stack | 2024-05-02T07:00:00.000Z | 2025-09-28T01:01:29.000Z |
| msrc_cve-2023-52916 | media: aspeed: Fix memory overwrite if timing is 1600x900 | 2024-09-01T07:00:00.000Z | 2025-09-28T01:01:17.000Z |
| msrc_cve-2025-59825 | astral-tokio-tar has a path traversal in tar extraction | 2025-09-02T00:00:00.000Z | 2025-09-27T01:03:20.000Z |
| msrc_cve-2025-22247 | Insecure file handling vulnerability | 2025-05-02T00:00:00.000Z | 2025-09-27T01:03:15.000Z |
| msrc_cve-2025-9900 | Libtiff: libtiff write-what-where | 2025-09-02T00:00:00.000Z | 2025-09-27T01:03:04.000Z |
| msrc_cve-2025-8869 | Fallback tar extraction in pip doesn't check symbolic links point to extraction directory | 2025-09-02T00:00:00.000Z | 2025-09-27T01:02:56.000Z |
| msrc_cve-2024-57843 | virtio-net: fix overflow inside virtnet_rq_alloc | 2025-01-02T00:00:00.000Z | 2025-09-27T01:02:44.000Z |
| msrc_cve-2024-41030 | ksmbd: discard write access to the directory open | 2024-07-01T07:00:00.000Z | 2025-09-27T01:02:35.000Z |
| msrc_cve-2024-41013 | xfs: don't walk off the end of a directory data block | 2024-07-01T07:00:00.000Z | 2025-09-27T01:02:30.000Z |
| msrc_cve-2024-40998 | ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() | 2024-07-01T07:00:00.000Z | 2025-09-27T01:02:25.000Z |
| msrc_cve-2024-35995 | ACPI: CPPC: Use access_width over bit_width for system memory accesses | 2024-05-02T07:00:00.000Z | 2025-09-27T01:02:20.000Z |
| msrc_cve-2024-35971 | net: ks8851: Handle softirqs at the end of IRQ thread to fix hang | 2024-05-02T07:00:00.000Z | 2025-09-27T01:02:14.000Z |
| msrc_cve-2024-35965 | Bluetooth: L2CAP: Fix not validating setsockopt user input | 2024-05-02T07:00:00.000Z | 2025-09-27T01:02:09.000Z |
| msrc_cve-2024-35951 | drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() | 2024-05-02T07:00:00.000Z | 2025-09-27T01:02:04.000Z |
| msrc_cve-2024-35939 | dma-direct: Leak pages on dma_set_decrypted() failure | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:58.000Z |
| msrc_cve-2024-35924 | usb: typec: ucsi: Limit read size on v1.2 | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:50.000Z |
| msrc_cve-2024-35875 | x86/coco: Require seeding RNG with RDRAND on CoCo systems | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:44.000Z |
| msrc_cve-2024-35839 | netfilter: bridge: replace physindev with physinif in nf_bridge_info | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:39.000Z |
| msrc_cve-2023-52732 | ceph: blocklist the kclient when receiving corrupted snap trace | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:34.000Z |
| msrc_cve-2023-52676 | bpf: Guard stack limits against 32bit overflow | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:29.000Z |
| msrc_cve-2023-52671 | drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:23.000Z |
| msrc_cve-2023-52660 | media: rkisp1: Fix IRQ handling due to shared interrupts | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:18.000Z |
| msrc_cve-2025-59251 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2025-09-09T07:00:00.000Z | 2025-09-25T07:00:00.000Z |
| msrc_cve-2025-55232 | Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability | 2025-09-09T07:00:00.000Z | 2025-09-25T07:00:00.000Z |
| msrc_cve-2024-56566 | mm/slub: Avoid list corruption when removing a slab from the full list | 2024-12-02T00:00:00.000Z | 2025-09-25T01:02:33.000Z |
| msrc_cve-2024-41935 | f2fs: fix to shrink read extent node in batches | 2025-01-02T00:00:00.000Z | 2025-09-25T01:02:23.000Z |
| msrc_cve-2024-36000 | mm/hugetlb: fix missing hugetlb_lock for resv uncharge | 2024-05-02T07:00:00.000Z | 2025-09-25T01:02:15.000Z |
| ID | Description | Updated |
|---|---|---|
| var-200110-0169 | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… | 2024-05-29T08:55:04.788000Z |
| var-200411-0123 | SQL injection vulnerability in the "public message" capability (public_message) for Php-N… | 2024-05-28T18:32:13.773000Z |
| var-200411-0029 | SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote … | 2024-05-28T18:21:34.508000Z |
| var-200403-0063 | Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway S… | 2024-05-28T18:21:34.719000Z |
| var-200403-0061 | Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password a… | 2024-05-28T18:17:17.844000Z |
| var-200403-0072 | FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a d… | 2024-05-28T18:13:33.411000Z |
| var-200411-0122 | Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows rem… | 2024-05-28T18:12:38.272000Z |
| var-200609-0988 | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2024-05-27T22:18:41.589000Z |
| var-202405-0216 | A vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter N… | 2024-05-25T23:13:11.966000Z |
| var-202405-1812 | TP-LINK AC1350 is a router from China's TP-LINK company. TP-LINK AC1350 has a security v… | 2024-05-25T23:08:56.284000Z |
| var-202403-1720 | A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware… | 2024-05-25T23:08:56.670000Z |
| var-202405-0205 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affecte… | 2024-05-25T23:06:15.330000Z |
| var-202405-0204 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affecte… | 2024-05-25T23:06:15.348000Z |
| var-202405-0203 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affecte… | 2024-05-25T23:06:15.364000Z |
| var-200609-1114 | Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2024-05-25T22:24:46.235000Z |
| var-202304-1903 | FINS (Factory Interface Network Service) is a message communication protocol, which is de… | 2024-05-25T20:34:12.982000Z |
| var-200609-0998 | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… | 2024-05-25T20:18:12.504000Z |
| var-202404-2093 | A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687). This af… | 2024-05-25T01:45:36.710000Z |
| var-202403-2416 | A improper neutralization of special elements used in an sql command ('sql injection') in… | 2024-05-25T01:44:07.145000Z |
| var-202404-0214 | A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerabi… | 2024-05-25T01:42:29.301000Z |
| var-200402-0018 | Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Busines… | 2024-05-25T01:33:23.856000Z |
| var-202404-0347 | A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.1… | 2024-05-25T01:29:54.322000Z |
| var-202404-0242 | A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affe… | 2024-05-25T01:29:54.341000Z |
| var-202403-2869 | DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability … | 2024-05-25T01:29:54.482000Z |
| var-202401-1842 | IBM Security Access Manager Appliance (IBM Security Verify Access Appliance 10.0.0.0 thro… | 2024-05-25T01:24:49.002000Z |
| var-202306-1994 | Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporat… | 2024-05-25T01:18:49.560000Z |
| var-202306-1993 | Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Co… | 2024-05-25T01:18:49.534000Z |
| var-202306-1992 | Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporat… | 2024-05-25T01:18:49.612000Z |
| var-202306-1991 | Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporat… | 2024-05-25T01:18:49.586000Z |
| var-200609-1209 | Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2024-05-24T22:28:34.807000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000098 | acmailer vulnerable to directory traversal | 2015-07-15T15:53+09:00 | 2015-07-27T15:12+09:00 |
| jvndb-2015-000099 | Thetis vulnerable to SQL injection | 2015-07-15T15:54+09:00 | 2015-07-27T15:07+09:00 |
| jvndb-2014-007612 | Welcart vulnerable to SQL injection | 2015-07-24T14:52+09:00 | 2015-07-24T14:52+09:00 |
| jvndb-2015-000088 | Ruby on Rails library Paperclip vulnerable to cross-site scripting | 2015-06-18T14:14+09:00 | 2015-07-14T18:15+09:00 |
| jvndb-2015-000097 | Simple Oekaki BBS vulnerability where arbitrary files may be deleted | 2015-07-10T13:57+09:00 | 2015-07-14T18:11+09:00 |
| jvndb-2015-000096 | Simple Oekaki BBS vulnerable to cross-site scripting | 2015-07-10T13:57+09:00 | 2015-07-14T18:09+09:00 |
| jvndb-2015-000094 | Cacti vulnerable to cross-site scripting | 2015-07-09T14:41+09:00 | 2015-07-14T18:03+09:00 |
| jvndb-2015-000090 | namshi/jose fails to verify token signatures | 2015-06-25T15:00+09:00 | 2015-07-14T17:18+09:00 |
| jvndb-2015-000092 | OpenEMR vulnerable to authentication bypass | 2015-06-30T13:55+09:00 | 2015-07-14T17:16+09:00 |
| jvndb-2014-002239 | Cacti vulnerable to cross-site request forgery | 2015-07-09T14:41+09:00 | 2015-07-09T14:41+09:00 |
| jvndb-2009-003901 | Cacti vulnerable to cross-site scripting | 2015-07-09T14:41+09:00 | 2015-07-09T14:41+09:00 |
| jvndb-2015-000093 | Explorer+ File Manager vulnerable to directory traversal | 2015-06-30T13:56+09:00 | 2015-07-02T15:04+09:00 |
| jvndb-2015-000091 | osCommerce Japanese version vulnerable to directory traversal | 2015-06-25T15:53+09:00 | 2015-06-30T11:53+09:00 |
| jvndb-2015-000089 | Symfony vulnerable to code injection | 2015-06-23T12:29+09:00 | 2015-06-25T17:34+09:00 |
| jvndb-2015-000012 | Multiple ASUS wireless LAN routers vulnerable to cross-site request forgery | 2015-01-27T14:24+09:00 | 2015-06-17T16:42+09:00 |
| jvndb-2015-000011 | Multiple ASUS wireless LAN routers vulnerable to OS command injection | 2015-01-27T14:23+09:00 | 2015-06-17T16:42+09:00 |
| jvndb-2015-000082 | MilkyStep vulnerable to cross-site scripting | 2015-06-09T14:15+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000081 | MilkyStep vulnerable to SQL injection | 2015-06-09T14:15+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000080 | MilkyStep vulnerable to OS command injection | 2015-06-09T14:02+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000079 | MilkyStep vulnerable to cross-site request forgery | 2015-06-09T13:45+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000078 | MilkyStep fails to restrict access permissions | 2015-06-09T13:43+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000077 | MilkyStep fails to restrict access permissions | 2015-06-12T14:13+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000087 | BloBee vulnerable to arbitrary file creation | 2015-06-12T14:12+09:00 | 2015-06-16T16:51+09:00 |
| jvndb-2015-000083 | MilkyStep fails to restrict access permissions | 2015-06-09T14:16+09:00 | 2015-06-16T16:51+09:00 |
| jvndb-2015-000086 | LoadLibrary function in Microsoft Windows fails to validate input properly | 2015-06-12T14:11+09:00 | 2015-06-12T14:11+09:00 |
| jvndb-2015-000085 | Multiple Buffalo wireless LAN routers vulnerable to OS command injection | 2015-06-05T14:16+09:00 | 2015-06-10T17:54+09:00 |
| jvndb-2015-000076 | NetFlow Analyzer vulnerable to cross-site request forgery | 2015-06-05T14:14+09:00 | 2015-06-10T16:14+09:00 |
| jvndb-2015-000075 | NetFlow Analyzer fails to restrict access permissions | 2015-06-05T14:02+09:00 | 2015-06-10T16:10+09:00 |
| jvndb-2015-000074 | NetFlow Analyzer vulnerable to cross-site scripting | 2015-06-05T13:59+09:00 | 2015-06-10T16:06+09:00 |
| jvndb-2015-000072 | "Open Explorer Beta" App for Android vulnerable to directory traversal | 2015-06-03T14:59+09:00 | 2015-06-08T12:25+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02098-1 | Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3) | 2025-06-25T05:33:37Z | 2025-06-25T05:33:37Z |
| suse-su-2025:02097-1 | Security update for ignition | 2025-06-25T04:34:40Z | 2025-06-25T04:34:40Z |
| suse-su-2025:20449-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-06-24T14:52:46Z | 2025-06-24T14:52:46Z |
| suse-su-2025:20438-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-06-24T14:52:46Z | 2025-06-24T14:52:46Z |
| suse-su-2025:20437-1 | Security update for kernel-livepatch-MICRO-6-0_Update_3 | 2025-06-24T14:52:32Z | 2025-06-24T14:52:32Z |
| suse-su-2025:20448-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-06-24T14:52:22Z | 2025-06-24T14:52:22Z |
| suse-su-2025:20436-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-06-24T14:52:22Z | 2025-06-24T14:52:22Z |
| suse-su-2025:20435-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-06-24T14:48:52Z | 2025-06-24T14:48:52Z |
| suse-su-2025:20451-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-06-24T14:48:35Z | 2025-06-24T14:48:35Z |
| suse-su-2025:20434-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-06-24T14:48:35Z | 2025-06-24T14:48:35Z |
| suse-su-2025:02096-1 | Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5) | 2025-06-24T14:33:45Z | 2025-06-24T14:33:45Z |
| suse-su-2025:02095-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2025-06-24T14:33:39Z | 2025-06-24T14:33:39Z |
| suse-ru-2025:02093-1 | Recommended update for podman | 2025-06-24T13:45:28Z | 2025-06-24T13:45:28Z |
| suse-ru-2025:02092-1 | Recommended update for podman | 2025-06-24T13:44:40Z | 2025-06-24T13:44:40Z |
| suse-ru-2025:02091-1 | Recommended update for podman | 2025-06-24T13:44:12Z | 2025-06-24T13:44:12Z |
| suse-su-2025:02090-1 | Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5) | 2025-06-24T12:34:03Z | 2025-06-24T12:34:03Z |
| suse-su-2025:02089-1 | Security update for python311 | 2025-06-24T12:08:17Z | 2025-06-24T12:08:17Z |
| suse-su-2025:02088-1 | Security update for webkit2gtk3 | 2025-06-24T12:06:18Z | 2025-06-24T12:06:18Z |
| suse-su-2025:0063-1 | Security update for gstreamer-plugins-good | 2025-06-24T12:03:30Z | 2025-06-24T12:03:30Z |
| suse-su-2025:00063-1 | Security update for gstreamer-plugins-good | 2025-06-24T12:03:30Z | 2025-06-24T12:03:30Z |
| suse-su-2025:02087-1 | Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5) | 2025-06-24T11:33:56Z | 2025-06-24T11:33:56Z |
| suse-su-2025:02082-1 | Security update for pam-config | 2025-06-24T10:28:56Z | 2025-06-24T10:28:56Z |
| suse-su-2025:02081-1 | Security update for pam-config | 2025-06-24T10:26:44Z | 2025-06-24T10:26:44Z |
| suse-su-2025:02080-1 | Security update for pam-config | 2025-06-24T10:26:24Z | 2025-06-24T10:26:24Z |
| suse-su-2025:02079-1 | Security update for icu | 2025-06-24T10:24:22Z | 2025-06-24T10:24:22Z |
| suse-su-2025:02077-1 | Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6) | 2025-06-24T09:33:58Z | 2025-06-24T09:33:58Z |
| suse-su-2025:02076-1 | Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6) | 2025-06-24T09:33:54Z | 2025-06-24T09:33:54Z |
| suse-su-2025:02075-1 | Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5) | 2025-06-24T09:03:59Z | 2025-06-24T09:03:59Z |
| suse-su-2025:20445-1 | Security update for python-tornado6 | 2025-06-24T08:53:22Z | 2025-06-24T08:53:22Z |
| suse-su-2025:02074-1 | Security update for python313 | 2025-06-24T07:26:36Z | 2025-06-24T07:26:36Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14132-1 | python310-asyncpg-0.29.0-1.3 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14131-1 | python310-XStatic-jquery-ui-1.13.0.1-1.15 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14130-1 | python-Scrapy-doc-2.11.2-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14129-1 | python310-Flask-Cors-4.0.0-1.3 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14128-1 | python310-CherryPy-18.9.0-3.3 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14127-1 | python310-Babel-2.14.0-1.5 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14126-1 | obs-service-download_url-0.2.1-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14125-1 | iwd-2.19-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14124-1 | gettext-its-gtk3-3.24.43-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14123-1 | global-6.6.13-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14122-1 | chromedriver-126.0.6478.126-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14121-1 | cadvisor-0.49.1-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14120-1 | tomcat10-10.1.25-1.1 on GA media | 2024-07-10T00:00:00Z | 2024-07-10T00:00:00Z |
| opensuse-su-2024:14119-1 | tomcat-9.0.91-1.1 on GA media | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| opensuse-su-2024:14118-1 | python310-certifi-2024.7.4-1.1 on GA media | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| opensuse-su-2024:14117-1 | emacs-29.4-2.1 on GA media | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| opensuse-su-2024:14116-1 | apache2-2.4.61-1.1 on GA media | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| opensuse-su-2024:0194-2 | Security update for keybase-client | 2024-07-08T18:01:42Z | 2024-07-08T18:01:42Z |
| opensuse-su-2024:14115-1 | znc-1.9.1-1.1 on GA media | 2024-07-08T00:00:00Z | 2024-07-08T00:00:00Z |
| opensuse-su-2024:14114-1 | libQt6Concurrent6-6.7.2-2.1 on GA media | 2024-07-08T00:00:00Z | 2024-07-08T00:00:00Z |
| opensuse-su-2024:14113-1 | openssh-9.6p1-11.1 on GA media | 2024-07-08T00:00:00Z | 2024-07-08T00:00:00Z |
| opensuse-su-2024:14112-1 | libndp-1.8-2.1 on GA media | 2024-07-08T00:00:00Z | 2024-07-08T00:00:00Z |
| opensuse-su-2024:14111-1 | krb5-1.21.3-1.1 on GA media | 2024-07-08T00:00:00Z | 2024-07-08T00:00:00Z |
| opensuse-su-2024:0187-1 | Security update for opera | 2024-07-06T12:01:16Z | 2024-07-06T12:01:16Z |
| opensuse-su-2024:14110-1 | rmt-server-2.18-1.1 on GA media | 2024-07-05T00:00:00Z | 2024-07-05T00:00:00Z |
| opensuse-su-2024:14109-1 | python313-3.13.0~b3-1.1 on GA media | 2024-07-05T00:00:00Z | 2024-07-05T00:00:00Z |
| opensuse-su-2024:14108-1 | kbfs-6.3.1-2.1 on GA media | 2024-07-05T00:00:00Z | 2024-07-05T00:00:00Z |
| opensuse-su-2024:14107-1 | forgejo-7.0.5-1.1 on GA media | 2024-07-05T00:00:00Z | 2024-07-05T00:00:00Z |
| opensuse-su-2024:14106-1 | agama-web-ui-9+52-1.1 on GA media | 2024-07-05T00:00:00Z | 2024-07-05T00:00:00Z |
| opensuse-su-2024:14105-1 | teleport-15.4.7-1.1 on GA media | 2024-07-04T00:00:00Z | 2024-07-04T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-25750 | D-Link DI-8400 yyxz.asp文件堆栈缓冲区溢出漏洞 | 2025-09-05 | 2025-10-30 |
| cnvd-2025-25749 | Simple Grading System login.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25748 | Simple Grading System edit_student.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25747 | Simple Grading System edit_account.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25746 | Online Bidding System showprod.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-30 |
| cnvd-2025-25745 | Online Bidding System login.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-30 |
| cnvd-2025-25744 | Online Bidding System details.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-30 |
| cnvd-2025-25743 | Online Bidding System bidnow.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-30 |
| cnvd-2025-25742 | Online Bidding System bidlog.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-30 |
| cnvd-2025-25741 | Online Bidding System administrator文件SQL注入漏洞 | 2025-06-27 | 2025-10-30 |
| cnvd-2025-25735 | Human Resource Integrated System action.php文件跨站脚本漏洞 | 2025-08-04 | 2025-10-30 |
| cnvd-2025-25731 | Simple Grading System delete_student.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25730 | Simple Grading System delete_account.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25729 | Simple Grading System add_student_grade.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25728 | Online Event Judging System create_account.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25727 | Human Resource Integrated System login_timeee.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25726 | Human Resource Integrated System login_query12.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25725 | Human Resource Integrated System login_attendance2.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25724 | Human Resource Integrated System login.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25723 | Human Resource Integrated System log_query.php文件SQL注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25722 | Online Event Judging System index.php文件SQL注入漏洞 | 2025-09-10 | 2025-10-30 |
| cnvd-2025-25721 | Online Event Judging System /review_search.php文件SQL注入漏洞 | 2025-09-10 | 2025-10-30 |
| cnvd-2025-25720 | Human Resource Integrated System Childs Name字段跨站脚本漏洞 | 2025-09-18 | 2025-10-30 |
| cnvd-2025-25719 | Online Bidding System weweee.php文件SQL注入漏洞 | 2025-09-24 | 2025-10-30 |
| cnvd-2025-25718 | Online Bidding System remove.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-30 |
| cnvd-2025-25717 | Online Bidding System index.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-30 |
| cnvd-2025-25716 | Online Bidding System bidupdate.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-30 |
| cnvd-2025-25740 | Automated Voting System存在未明漏洞 | 2025-07-11 | 2025-10-29 |
| cnvd-2025-25739 | Job Diary view-details.php文件SQL注入漏洞 | 2025-07-18 | 2025-10-29 |
| cnvd-2025-25738 | Job Diary search.php文件SQL注入漏洞 | 2025-07-18 | 2025-10-29 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0230 | Vulnérabilité dans Tenable Nessus Agent | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0229 | Vulnérabilité dans Veeam Backup & Replication | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0228 | Multiples vulnérabilités dans Spring Security | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0227 | Vulnérabilité dans Liferay | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0226 | Vulnérabilité dans Google Chrome | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0225 | Vulnérabilité dans Drupal | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| CERTFR-2025-AVI-0229 | Vulnérabilité dans Veeam Backup & Replication | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| CERTFR-2025-AVI-0228 | Multiples vulnérabilités dans Spring Security | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| CERTFR-2025-AVI-0227 | Vulnérabilité dans Liferay | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| CERTFR-2025-AVI-0226 | Vulnérabilité dans Google Chrome | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| CERTFR-2025-AVI-0225 | Vulnérabilité dans Drupal | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0224 | Multiples vulnérabilités dans les produits Synology | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0223 | Multiples vulnérabilités dans Suricata | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0222 | Vulnérabilité dans MongoDB C Driver | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0221 | Multiples vulnérabilités dans HPE Aruba Networking AOS-CX | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0219 | Multiples vulnérabilités dans GLPI | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0218 | Multiples vulnérabilités dans Atlassian Jira | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| CERTFR-2025-AVI-0224 | Multiples vulnérabilités dans les produits Synology | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| CERTFR-2025-AVI-0223 | Multiples vulnérabilités dans Suricata | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| CERTFR-2025-AVI-0222 | Vulnérabilité dans MongoDB C Driver | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| CERTFR-2025-AVI-0221 | Multiples vulnérabilités dans HPE Aruba Networking AOS-CX | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| CERTFR-2025-AVI-0219 | Multiples vulnérabilités dans GLPI | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| CERTFR-2025-AVI-0218 | Multiples vulnérabilités dans Atlassian Jira | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0216 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| certfr-2025-avi-0215 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| CERTFR-2025-AVI-0216 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| CERTFR-2025-AVI-0215 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| certfr-2025-avi-0214 | Multiples vulnérabilités dans les produits IBM | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0213 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0212 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |