Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-6200 |
5.9 (3.1)
|
GeoDirectory < 2.8.120 - Contributor+ Stored XSS |
Unknown |
GeoDirectory |
2025-07-11T06:00:11.028Z | 2026-01-09T20:22:59.234Z |
| CVE-2015-10140 |
8.8 (3.1)
|
Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & D… |
Unknown |
Ajax Load More |
2025-07-22T13:20:59.054Z | 2026-01-09T20:22:04.848Z |
| CVE-2025-7965 |
4.3 (3.1)
|
CBX Restaurant Booking <= 1.2.1 - Plugin Reset via CSRF |
Unknown |
CBX Restaurant Booking |
2025-08-11T06:00:02.778Z | 2026-01-09T20:20:49.331Z |
| CVE-2025-8281 |
7.1 (3.1)
|
WP Talroo <= 2.4 - Reflected XSS |
Unknown |
WP Talroo |
2025-08-22T06:00:03.699Z | 2026-01-09T20:20:08.756Z |
| CVE-2025-10406 |
5.5 (3.1)
|
BlindMatrix e-Commerce < 3.1 - Contributor+ LFI |
Unknown |
BlindMatrix e-Commerce |
2025-10-15T06:00:02.280Z | 2026-01-09T20:19:45.713Z |
| CVE-2025-10723 |
2.7 (3.1)
|
PixelYourSite < 11.1.2 - Admin+ LFI |
Unknown |
PixelYourSite |
2025-10-24T06:00:07.252Z | 2026-01-09T20:19:14.794Z |
| CVE-2025-10874 |
5.5 (3.1)
|
Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery |
Unknown |
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More |
2025-10-24T06:00:09.281Z | 2026-01-09T20:18:42.674Z |
| CVE-2025-9978 |
6.8 (3.1)
|
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS |
Unknown |
Jeg Kit for Elementor |
2025-10-24T06:00:09.729Z | 2026-01-09T20:11:33.393Z |
| CVE-2025-11191 |
5.3 (3.1)
|
RealPress < 1.1.0 - Unauthenticated Content Creation/E… |
Unknown |
RealPress |
2025-10-31T06:00:03.402Z | 2026-01-09T20:10:52.861Z |
| CVE-2025-12057 |
9.8 (3.1)
|
WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload |
Unknown |
WavePlayer |
2025-11-19T06:00:05.080Z | 2026-01-09T20:10:31.329Z |
| CVE-2025-12061 |
8.6 (3.1)
|
Tax Service Electronic HDM < 1.2.1 - Unauthenticated A… |
Unknown |
TAX SERVICE Electronic HDM |
2025-11-26T06:00:08.258Z | 2026-01-09T20:10:03.370Z |
| CVE-2025-12954 |
2.7 (3.1)
|
Timetable and Event Schedule by MotoPress < 2.4.16 - C… |
Unknown |
Timetable and Event Schedule by MotoPress |
2025-12-03T06:00:05.630Z | 2026-01-09T20:09:23.349Z |
| CVE-2025-13070 |
6.6 (3.1)
|
CSV to SortTable <= 4.2 - Contributor+ LFI |
Unknown |
CSV to SortTable |
2025-12-09T06:00:08.117Z | 2026-01-09T20:08:09.803Z |
| CVE-2025-13071 |
7.1 (3.1)
|
Custom Admin Menu <= 1.0.0 - Reflected XSS |
Unknown |
Custom Admin Menu |
2025-12-09T06:00:08.538Z | 2026-01-09T20:04:10.476Z |
| CVE-2025-10684 |
4.3 (3.1)
|
Construction Light < 1.6.8 - Subscriber+ Arbitrary Plu… |
Unknown |
Construction Light |
2025-12-12T06:00:02.332Z | 2026-01-09T20:02:47.997Z |
| CVE-2025-69093 |
5.3 (3.1)
|
WordPress ShopMagic plugin <= 4.7.2 - Broken Access Co… |
wpdesk |
ShopMagic |
2025-12-30T10:47:58.699Z | 2026-01-09T19:35:52.689Z |
| CVE-2025-13701 |
6.1 (3.1)
|
Shabat Keeper <= 0.4.4 - Reflected Cross-Site Scriptin… |
beshkin |
Shabat Keeper |
2026-01-09T11:15:32.224Z | 2026-01-09T19:32:49.805Z |
| CVE-2025-13854 |
6.4 (3.1)
|
Curved Text <= 0.1 - Authenticated (Contributor+) Stor… |
soniz |
Curved Text |
2026-01-09T11:15:32.678Z | 2026-01-09T19:30:10.397Z |
| CVE-2025-14524 |
5.3 (3.1)
|
bearer token leak on cross-protocol redirect |
curl |
curl |
2026-01-08T10:07:25.655Z | 2026-01-09T19:25:30.460Z |
| CVE-2025-14146 |
5.3 (3.1)
|
Booking Calendar <= 10.14.10 - Unauthenticated Sensiti… |
wpdevelop |
Booking Calendar |
2026-01-09T07:22:09.760Z | 2026-01-09T19:18:29.801Z |
| CVE-2025-14574 |
5.3 (3.1)
|
weDocs: AI Powered Knowledge Base, Docs, Documentation… |
wedevs |
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot |
2026-01-09T06:34:56.372Z | 2026-01-09T19:18:20.856Z |
| CVE-2026-20972 |
4.8 (4.0)
|
Improper Export of Android Application Components… |
Samsung Mobile |
Samsung Mobile Devices |
2026-01-09T06:16:26.298Z | 2026-01-09T19:18:11.976Z |
| CVE-2026-20969 |
2.3 (4.0)
|
Improper input validation in SecSettings prior to… |
Samsung Mobile |
Samsung Mobile Devices |
2026-01-09T06:15:52.859Z | 2026-01-09T19:18:02.710Z |
| CVE-2026-22714 |
2.3 (4.0)
|
i18n XSS, DoS and config SQLI in Monaco |
The Wikimedia Foundation |
Mediawiki - Monaco Skin |
2026-01-08T23:56:07.135Z | 2026-01-09T19:17:41.872Z |
| CVE-2026-22713 |
2.3 (4.0)
|
Stored XSS through edit summaries in GrowthExperiments |
The Wikimedia Foundation |
Mediawiki - GrowthExperiments Extension |
2026-01-09T00:00:57.596Z | 2026-01-09T19:17:27.530Z |
| CVE-2026-22710 |
2.3 (4.0)
|
Stored XSS through autocomment system messages in Wikibase |
The Wikimedia Foundation |
Mediawiki - Wikibase Extension |
2026-01-08T23:48:51.645Z | 2026-01-09T19:16:54.193Z |
| CVE-2026-22712 |
2.3 (4.0)
|
ApprovedRevs allows bypassing the inline CSS sanitizer |
The Wikimedia Foundation |
Mediawiki - ApprovedRevs Extension |
2026-01-09T00:06:22.430Z | 2026-01-09T19:15:28.083Z |
| CVE-2025-13781 |
6.5 (3.1)
|
Missing Authorization in GitLab |
GitLab |
GitLab |
2026-01-09T10:03:51.554Z | 2026-01-09T19:14:05.513Z |
| CVE-2025-13772 |
7.1 (3.1)
|
Missing Authorization in GitLab |
GitLab |
GitLab |
2026-01-09T10:04:06.293Z | 2026-01-09T19:13:28.846Z |
| CVE-2025-11246 |
5.4 (3.1)
|
Insufficient Granularity of Access Control in GitLab |
GitLab |
GitLab |
2026-01-09T10:04:21.283Z | 2026-01-09T19:13:17.900Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-0838 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W ConfigWirelessBase strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T05:32:06.225Z | 2026-01-12T14:35:49.763Z |
| CVE-2026-0839 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W APSecurity strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T06:02:05.798Z | 2026-01-12T14:35:14.535Z |
| CVE-2026-0840 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T06:32:06.734Z | 2026-01-12T14:34:38.435Z |
| CVE-2026-0841 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formPictureUrl strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T07:32:07.736Z | 2026-01-12T14:33:15.407Z |
| CVE-2025-5920 |
7.5 (3.1)
|
Sharable Password Protected Posts < 1.1.1 - Unauthenti… |
Unknown |
Sharable Password Protected Posts |
2025-07-04T09:52:44.124Z | 2025-07-08T17:38:34.095Z |
| CVE-2025-69235 |
7.5 (3.1)
|
Whale browser before 4.35.351.12 allows an attack… |
NAVER |
NAVER Whale browser |
2025-12-30T01:22:57.770Z | 2025-12-31T17:15:35.598Z |
| CVE-2025-69234 |
9.1 (3.1)
|
Whale browser before 4.35.351.12 allows an attack… |
NAVER |
NAVER Whale browser |
2025-12-30T01:18:05.718Z | 2025-12-31T17:17:34.260Z |
| CVE-2025-15256 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Edimax BR-6208AC Web-based Configuration formStaDrvSet… |
Edimax |
BR-6208AC |
2025-12-30T16:32:06.090Z | 2025-12-30T18:11:43.621Z |
| CVE-2025-15194 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow |
D-Link |
DIR-600 |
2025-12-29T15:32:09.818Z | 2025-12-29T16:10:13.239Z |
| CVE-2025-15114 |
9.3 (4.0)
9.8 (3.1)
|
Ksenia Security Lares 4.0 Home Automation 1.6 PIN Expo… |
Ksenia Security S.p.A. |
Ksenia Security Lares 4.0 Home Automation |
2025-12-30T22:41:47.116Z | 2026-01-02T14:38:28.109Z |
| CVE-2026-21506 |
5.5 (3.1)
|
iccDEV is Vulnerable to Null Pointer Dereference in CI… |
InternationalColorConsortium |
iccDEV |
2026-01-07T17:10:58.119Z | 2026-01-07T18:30:51.482Z |
| CVE-2026-21678 |
7.8 (3.1)
|
iccDEV has heap-buffer-overflow vulnerability on IccTagXml() |
InternationalColorConsortium |
iccDEV |
2026-01-07T17:11:07.269Z | 2026-01-07T19:27:44.869Z |
| CVE-2025-14936 |
7.8 (3.0)
|
NSF Unidata NetCDF-C Attribute Name Stack-based Buffer… |
NSF Unidata |
NetCDF-C |
2025-12-23T21:08:40.465Z | 2025-12-26T16:09:47.995Z |
| CVE-2025-14935 |
7.8 (3.0)
|
NSF Unidata NetCDF-C Dimension Name Heap-based Buffer … |
NSF Unidata |
NetCDF-C |
2025-12-23T21:08:45.207Z | 2025-12-26T16:10:30.154Z |
| CVE-2025-14934 |
7.8 (3.0)
|
NSF Unidata NetCDF-C Variable Name Stack-based Buffer … |
NSF Unidata |
NetCDF-C |
2025-12-23T21:09:09.693Z | 2025-12-26T19:33:30.294Z |
| CVE-2025-14933 |
7.8 (3.0)
|
NSF Unidata NetCDF-C NC Variable Integer Overflow Remo… |
NSF Unidata |
NetCDF-C |
2025-12-23T21:09:15.230Z | 2025-12-26T19:33:58.950Z |
| CVE-2025-14932 |
7.8 (3.0)
|
NSF Unidata NetCDF-C Time Unit Stack-based Buffer Over… |
NSF Unidata |
NetCDF-C |
2025-12-23T21:11:17.340Z | 2025-12-26T19:34:14.913Z |
| CVE-2025-62864 |
9.8 (3.1)
|
Ampere AmpereOne AC03 devices before 3.5.9.3, Amp… |
n/a |
n/a |
2025-12-16T00:00:00.000Z | 2025-12-17T14:31:33.278Z |
| CVE-2025-62863 |
9.8 (3.1)
|
Ampere AmpereOne AC03 devices before 3.5.9.3, Amp… |
n/a |
n/a |
2025-12-16T00:00:00.000Z | 2025-12-17T14:30:24.767Z |
| CVE-2025-64741 |
8.1 (3.1)
|
Zoom Workplace for Android - Improper Authorization Handling |
Zoom Communications Inc. |
Zoom Workplace for Android |
2025-11-13T14:46:59.205Z | 2025-11-14T04:55:32.679Z |
| CVE-2025-64740 |
7.5 (3.1)
|
Zoom Workplace VDI Client for Windows - Improper Verif… |
Zoom Communications Inc. |
Zoom Workplace VDI Client |
2025-11-13T14:35:39.025Z | 2025-11-14T16:51:22.757Z |
| CVE-2025-30669 |
4.8 (3.1)
|
Zoom Workplace Clients - Improper Certificate Validation |
Zoom Communications Inc. |
Zoom Workplace Clients |
2025-11-13T14:49:54.870Z | 2025-11-13T15:17:54.292Z |
| CVE-2025-62482 |
4.3 (3.1)
|
Zoom Workplace for Windows - Cross-site Scripting |
Zoom Communications Inc. |
Zoom Workplace |
2025-11-13T14:56:25.642Z | 2025-11-13T15:38:29.563Z |
| CVE-2025-62483 |
5.3 (3.1)
|
Zoom Clients - Improper Removal of Sensitive Information |
Zoom Communications Inc. |
Zoom Clients |
2025-11-13T15:03:07.612Z | 2025-11-13T15:15:51.024Z |
| CVE-2025-64738 |
5 (3.1)
|
Zoom Workplace for macOS - External Control of File Na… |
Zoom Communications Inc. |
Zoom Workplace for macOS |
2025-11-13T14:23:00.704Z | 2025-11-14T16:52:02.952Z |
| CVE-2025-64739 |
4.3 (3.1)
|
Zoom Clients - External Control of File Name or Path |
Zoom Communications Inc. |
Zoom Clients |
2025-11-13T14:28:58.527Z | 2025-11-14T16:51:41.747Z |
| CVE-2025-15442 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
CRMEB product_list sql injection |
n/a |
CRMEB |
2026-01-04T11:02:06.400Z | 2026-01-06T19:37:32.120Z |
| CVE-2025-15405 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
PHPEMS cross-site request forgery |
n/a |
PHPEMS |
2026-01-01T15:02:06.258Z | 2026-01-05T20:03:20.016Z |
| CVE-2025-15394 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
iCMS POST Parameter ConfigAdmincp.php save code injection |
n/a |
iCMS |
2025-12-31T19:02:14.256Z | 2026-01-02T19:42:59.224Z |
| CVE-2024-28867 |
5.9 (3.1)
|
Swift Prometheus un-sanitized metric name or labels ca… |
swift-server |
swift-prometheus |
2024-03-29T14:26:22.194Z | 2025-03-25T14:39:04.232Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-14934 | NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability.… | 2025-12-23T21:15:48.887 | 2026-01-13T20:59:58.497 |
| fkie_cve-2025-14933 | NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnera… | 2025-12-23T21:15:48.757 | 2026-01-13T20:59:33.413 |
| fkie_cve-2025-14932 | NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code Execution Vulnerability. Thi… | 2025-12-23T21:15:48.623 | 2026-01-13T20:58:08.560 |
| fkie_cve-2025-62864 | Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne … | 2025-12-16T18:16:13.607 | 2026-01-13T20:58:05.087 |
| fkie_cve-2025-62863 | Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne … | 2025-12-16T18:16:13.493 | 2026-01-13T20:57:29.577 |
| fkie_cve-2025-64741 | Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an un… | 2025-11-13T15:15:54.110 | 2026-01-13T20:52:45.427 |
| fkie_cve-2025-64740 | Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for… | 2025-11-13T15:15:53.820 | 2026-01-13T20:51:36.673 |
| fkie_cve-2025-30669 | Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduc… | 2025-11-13T15:15:51.240 | 2026-01-13T20:50:57.583 |
| fkie_cve-2025-62482 | Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticat… | 2025-11-13T15:15:51.697 | 2026-01-13T20:50:33.410 |
| fkie_cve-2025-62483 | Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow a… | 2025-11-13T15:15:51.860 | 2026-01-13T20:50:10.990 |
| fkie_cve-2025-64738 | External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow a… | 2025-11-13T15:15:53.260 | 2026-01-13T20:49:11.700 |
| fkie_cve-2025-64739 | External control of file name or path in certain Zoom Clients may allow an unauthenticated user to … | 2025-11-13T15:15:53.523 | 2026-01-13T20:46:49.830 |
| fkie_cve-2025-15442 | A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the… | 2026-01-04T11:15:53.960 | 2026-01-13T20:46:47.380 |
| fkie_cve-2025-15405 | A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The… | 2026-01-01T15:15:40.777 | 2026-01-13T20:38:31.960 |
| fkie_cve-2025-15394 | A vulnerability was detected in iCMS up to 8.0.0. Affected is the function Save of the file app/con… | 2025-12-31T19:15:43.570 | 2026-01-13T20:38:18.180 |
| fkie_cve-2024-28867 | Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauge… | 2024-03-29T15:15:11.180 | 2026-01-13T20:35:52.697 |
| fkie_cve-2025-15452 | A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList… | 2026-01-05T03:15:50.110 | 2026-01-13T20:35:43.850 |
| fkie_cve-2025-15451 | A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some un… | 2026-01-05T03:15:49.907 | 2026-01-13T20:35:30.353 |
| fkie_cve-2021-24977 | The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisati… | 2022-02-28T09:15:08.337 | 2026-01-13T20:33:51.607 |
| fkie_cve-2025-32457 | The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_f… | 2025-06-08T21:15:31.403 | 2026-01-13T20:25:19.797 |
| fkie_cve-2025-32456 | The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_t… | 2025-06-08T21:15:31.267 | 2026-01-13T20:20:46.173 |
| fkie_cve-2026-22799 | Emlog is an open source website building system. emlog v2.6.1 and earlier exposes a REST API endpoi… | 2026-01-12T22:16:08.930 | 2026-01-13T20:16:11.070 |
| fkie_cve-2026-22794 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the se… | 2026-01-12T22:16:08.633 | 2026-01-13T20:16:10.910 |
| fkie_cve-2026-22789 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to … | 2026-01-12T22:16:08.490 | 2026-01-13T20:16:10.743 |
| fkie_cve-2026-22788 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to … | 2026-01-12T22:16:08.343 | 2026-01-13T20:16:10.650 |
| fkie_cve-2025-65553 | D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is susceptible to RF jamming on the 433 MHz alarm sen… | 2026-01-12T15:16:03.730 | 2026-01-13T20:16:06.833 |
| fkie_cve-2025-65552 | D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sens… | 2026-01-12T15:16:03.607 | 2026-01-13T20:16:06.670 |
| fkie_cve-2025-32455 | The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd ar… | 2025-06-08T21:15:30.993 | 2026-01-13T20:12:22.423 |
| fkie_cve-2025-49306 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-06-06T13:15:46.303 | 2026-01-13T20:04:21.693 |
| fkie_cve-2025-43026 | A potential security vulnerability has been identified in the HP Support Assistant for versions pri… | 2025-06-05T20:15:26.067 | 2026-01-13T20:02:40.320 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-q66v-vvpj-vg9p |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-pmgq-h38f-3h8p |
8.8 (3.1)
|
The WP Enable WebP plugin for WordPress is vulnerable to arbitrary file uploads due to improper fil… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-jcx6-7p9q-vv8c |
4.4 (3.1)
|
The Simple User Meta Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-j3m2-5cm7-pmh3 |
4.3 (3.1)
|
The Newsletter Email Subscribe plugin for WordPress is vulnerable to Cross-Site Request Forgery in … | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-hhwm-q72q-9mg9 |
5.3 (4.0)
|
AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that all… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-h8f4-2pmc-rc85 |
6.5 (3.1)
|
The Flashcard plugin for WordPress is vulnerable to Path Traversal in all versions up to, and inclu… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-h4x2-9gh9-6543 |
4.3 (3.1)
|
The Latest Tabs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-gwjh-c9m2-g2j9 |
6.5 (3.1)
|
The Bit Form – Contact Form Plugin plugin for WordPress is vulnerable to unauthorized workflow exec… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-g869-mjgr-xmch |
4.4 (3.1)
|
The Page Keys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_key’ … | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-f8vf-66gm-85xg |
6.1 (3.1)
|
The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to limit… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-f7fp-6q7q-4mc8 |
7.1 (3.1)
|
The WP Photo Album Plus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-f53f-v4m9-rh4j |
6.4 (3.1)
|
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Script… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-cp75-95q9-g954 |
5.5 (3.1)
|
Transient DOS while parsing video packets received from the video firmware. | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-ch77-2q3c-8f9w |
2.0 (3.1)
|
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-c6ww-cj2q-f8xm |
5.4 (3.1)
|
The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to unauthorized file deletion in … | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-9w2c-ww5q-2rj7 |
9.8 (3.1)
|
The Optional Email plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover … | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-8h37-wg3p-5fr4 |
6.7 (3.1)
|
Memory corruption while processing a config call from userspace. | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-8cm9-gx9f-q3wm |
4.4 (3.1)
|
The Key Figures plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the kf_field_… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-85jr-qp34-798j |
4.4 (3.1)
|
The twinklesmtp – Email Service Provider For WordPress plugin for WordPress is vulnerable to Stored… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-68g3-qq95-rpv3 |
8.8 (3.1)
|
Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.T… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-5vvq-pw5h-r39p |
6.4 (3.1)
|
The My Album Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image ti… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-5pf5-5xph-xfrf |
6.1 (3.1)
|
Information disclosure while processing a firmware event. | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-5f5v-w8rv-pmc5 |
6.1 (3.1)
|
The HBLPAY Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Si… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-4crf-6666-px9x |
4.3 (3.1)
|
The NS IE Compatibility Fixer plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSR… | 2026-01-07T12:31:23Z | 2026-01-07T12:31:23Z |
| ghsa-w4j2-7v8q-7x76 |
4.3 (3.1)
|
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request … | 2026-01-07T12:31:22Z | 2026-01-07T12:31:22Z |
| ghsa-w4cv-mchj-p2j8 |
6.1 (3.1)
|
The Post Like Dislike plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the … | 2026-01-07T12:31:22Z | 2026-01-07T12:31:22Z |
| ghsa-rg7p-9gq5-gpcc |
5.3 (3.1)
|
The Quote Comments plugin for WordPress is vulnerable to Missing Authorization in all versions up t… | 2026-01-07T12:31:22Z | 2026-01-07T12:31:22Z |
| ghsa-rfxx-6j8g-m3h3 |
6.4 (3.1)
|
The AD Sliding FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slidi… | 2026-01-07T12:31:22Z | 2026-01-07T12:31:22Z |
| ghsa-r5x9-xq27-vvxh |
6.7 (3.1)
5.4 (4.0)
|
Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windo… | 2026-01-07T12:31:22Z | 2026-01-07T12:31:22Z |
| ghsa-p97m-qwvc-gh6m |
6.1 (3.1)
|
The WP Widget Changer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the … | 2026-01-07T12:31:22Z | 2026-01-07T12:31:22Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-258 |
|
In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 … | tensorflow | 2020-01-28T22:15:00Z | 2021-08-27T03:22:23.423115Z |
| pysec-2020-257 |
|
In affected versions of TensorFlow under certain cases, loading a saved model can result … | tensorflow | 2020-12-10T22:15:00Z | 2021-08-27T03:22:23.329750Z |
| pysec-2020-256 |
|
In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer rec… | tensorflow | 2020-12-10T23:15:00Z | 2021-08-27T03:22:23.120464Z |
| pysec-2020-269 |
|
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possib… | tensorflow-cpu | 2020-05-04T15:15:00Z | 2021-08-27T03:22:22.195752Z |
| pysec-2020-255 |
|
In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a cons… | tensorflow | 2020-12-10T23:15:00Z | 2021-08-27T03:22:22.907995Z |
| pysec-2020-254 |
|
In affected versions of TensorFlow under certain cases a saved model can trigger use of u… | tensorflow | 2020-12-10T23:15:00Z | 2021-08-27T03:22:22.698179Z |
| pysec-2020-253 |
|
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possib… | tensorflow | 2020-05-04T15:15:00Z | 2021-08-27T03:22:22.195752Z |
| pysec-2019-228 |
|
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of servi… | tensorflow-cpu | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.500832Z |
| pysec-2019-227 |
|
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced w… | tensorflow-cpu | 2019-12-16T21:15:00Z | 2021-08-27T03:22:22.453759Z |
| pysec-2019-226 |
|
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute a… | tensorflow-cpu | 2019-04-23T21:29:00Z | 2021-08-27T03:22:22.407658Z |
| pysec-2019-225 |
|
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow bef… | tensorflow-cpu | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.362937Z |
| pysec-2019-224 |
|
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of… | tensorflow-cpu | 2019-04-23T21:29:00Z | 2021-08-27T03:22:22.321158Z |
| pysec-2019-223 |
|
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The t… | tensorflow-cpu | 2019-04-24T21:29:00Z | 2021-08-27T03:22:22.242054Z |
| pysec-2019-222 |
|
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Goo… | tensorflow-cpu | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.150023Z |
| pysec-2019-210 |
|
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of servi… | tensorflow | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.500832Z |
| pysec-2019-209 |
|
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced w… | tensorflow | 2019-12-16T21:15:00Z | 2021-08-27T03:22:22.453759Z |
| pysec-2019-208 |
|
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute a… | tensorflow | 2019-04-23T21:29:00Z | 2021-08-27T03:22:22.407658Z |
| pysec-2019-207 |
|
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow bef… | tensorflow | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.362937Z |
| pysec-2019-206 |
|
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of… | tensorflow | 2019-04-23T21:29:00Z | 2021-08-27T03:22:22.321158Z |
| pysec-2019-205 |
|
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The t… | tensorflow | 2019-04-24T21:29:00Z | 2021-08-27T03:22:22.242054Z |
| pysec-2019-204 |
|
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Goo… | tensorflow | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.150023Z |
| pysec-2017-95 |
|
An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.… | tablib | 2017-06-14T13:29:00Z | 2021-08-27T03:22:22.103496Z |
| pysec-2021-148 |
|
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-… | sickrage | 2021-04-12T14:15:00Z | 2021-08-27T03:22:21.656706Z |
| pysec-2021-147 |
|
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting… | sickrage | 2021-04-12T14:15:00Z | 2021-08-27T03:22:21.507681Z |
| pysec-2020-252 |
|
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some ci… | scalyr-agent-2 | 2020-08-27T22:15:00Z | 2021-08-27T03:22:21.152325Z |
| pysec-2020-251 |
|
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some ci… | scalyr-agent-2 | 2020-08-27T22:15:00Z | 2021-08-27T03:22:21.123825Z |
| pysec-2019-203 |
|
Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates… | splunk-sdk | 2019-03-21T16:01:00Z | 2021-08-27T03:22:21.751156Z |
| pysec-2018-101 |
|
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses. | sickrage | 2018-03-31T21:29:00Z | 2021-08-27T03:22:21.352713Z |
| pysec-2013-33 |
|
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP qu… | suds-py3 | 2013-09-23T20:55:00Z | 2021-08-27T03:22:21.834987Z |
| pysec-2021-146 |
|
All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) vi… | reportlab | 2021-02-18T16:15:00Z | 2021-08-27T03:22:19.297131Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32254 | Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File wi… | 2024-04-13T05:02:29.149562Z |
| gsd-2024-32253 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.141839Z |
| gsd-2024-32252 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.107646Z |
| gsd-2024-32251 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.068175Z |
| gsd-2024-32250 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.038560Z |
| gsd-2024-32249 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.053304Z |
| gsd-2024-32248 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.084848Z |
| gsd-2024-32247 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.104463Z |
| gsd-2024-32246 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.102598Z |
| gsd-2024-32245 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.136065Z |
| gsd-2024-32244 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.121517Z |
| gsd-2024-32243 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.057360Z |
| gsd-2024-32242 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.108227Z |
| gsd-2024-32241 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.133047Z |
| gsd-2024-32240 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.123157Z |
| gsd-2024-32239 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.048956Z |
| gsd-2024-32238 | H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's m… | 2024-04-13T05:02:29.100846Z |
| gsd-2024-32237 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.061758Z |
| gsd-2024-32236 | An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive informa… | 2024-04-13T05:02:29.060529Z |
| gsd-2024-32235 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.030972Z |
| gsd-2024-32234 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.133642Z |
| gsd-2024-32233 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.026512Z |
| gsd-2024-32232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.138573Z |
| gsd-2024-32231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.047128Z |
| gsd-2024-32230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.128447Z |
| gsd-2024-32229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.098086Z |
| gsd-2024-32228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.056141Z |
| gsd-2024-32227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.075707Z |
| gsd-2024-32226 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.082322Z |
| gsd-2024-32225 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.098284Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192263 | Malicious code in elf-stats-nutmeg-garland-645 (npm) | 2025-12-03T19:06:00Z | 2025-12-23T20:41:02Z |
| mal-2025-192248 | Malicious code in elf-stats-marzipan-pantry-560 (npm) | 2025-12-03T17:50:51Z | 2025-12-23T20:41:02Z |
| mal-2025-192223 | Malicious code in elf-stats-nutmeg-cocoa-967 (npm) | 2025-12-03T17:20:38Z | 2025-12-23T20:41:02Z |
| mal-2025-192221 | Malicious code in elf-stats-midnight-chimney-291 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T20:41:02Z |
| mal-2025-192220 | Malicious code in elf-stats-merry-cookiejar-646 (npm) | 2025-12-03T17:31:24Z | 2025-12-23T20:41:02Z |
| mal-2025-192219 | Malicious code in elf-stats-merry-cookiejar-511 (npm) | 2025-12-03T17:31:24Z | 2025-12-23T20:41:02Z |
| mal-2025-192201 | Malicious code in elf-stats-merry-garland-548 (npm) | 2025-12-03T16:32:02Z | 2025-12-23T20:41:02Z |
| mal-2025-192116 | Malicious code in elf-stats-piney-garland-824 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192114 | Malicious code in elf-stats-peppermint-stocking-949 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192113 | Malicious code in elf-stats-peppermint-icicle-890 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192109 | Malicious code in elf-stats-nutmeg-giftbox-398 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192100 | Malicious code in elf-stats-mulled-drum-529 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192099 | Malicious code in elf-stats-mistletoe-sparkler-211 (npm) | 2025-12-03T13:02:43Z | 2025-12-23T20:41:02Z |
| mal-2025-192096 | Malicious code in elf-stats-midnight-wreath-655 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192095 | Malicious code in elf-stats-midnight-workbench-208 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192093 | Malicious code in elf-stats-midnight-star-734 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192090 | Malicious code in elf-stats-midnight-drum-606 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192087 | Malicious code in elf-stats-merry-cookiejar-915 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192083 | Malicious code in elf-stats-marzipan-muffin-733 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-191975 | Malicious code in elf-stats-merry-cookiejar-987 (npm) | 2025-12-03T12:55:35Z | 2025-12-23T20:41:02Z |
| MAL-2025-192522 | Malicious code in elf-stats-peppermint-wishlist-307 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| MAL-2025-192520 | Malicious code in elf-stats-nutmeg-candy-869 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| MAL-2025-192514 | Malicious code in elf-stats-merry-cookiejar-796 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| MAL-2025-192334 | Malicious code in elf-stats-midnight-rocket-813 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T20:41:02Z |
| MAL-2025-192304 | Malicious code in elf-stats-northbound-sparkler-410 (npm) | 2025-12-04T19:12:07Z | 2025-12-23T20:41:02Z |
| MAL-2025-192273 | Malicious code in elf-stats-merry-cookiejar-139 (npm) | 2025-12-03T19:22:08Z | 2025-12-23T20:41:02Z |
| MAL-2025-192263 | Malicious code in elf-stats-nutmeg-garland-645 (npm) | 2025-12-03T19:06:00Z | 2025-12-23T20:41:02Z |
| MAL-2025-192248 | Malicious code in elf-stats-marzipan-pantry-560 (npm) | 2025-12-03T17:50:51Z | 2025-12-23T20:41:02Z |
| MAL-2025-192223 | Malicious code in elf-stats-nutmeg-cocoa-967 (npm) | 2025-12-03T17:20:38Z | 2025-12-23T20:41:02Z |
| MAL-2025-192221 | Malicious code in elf-stats-midnight-chimney-291 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T20:41:02Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0577 | Dell BSAFE Crypto-J: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0576 | Contao: Schwachstelle ermöglicht Cross-Site Scripting | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0575 | TYPO3 Extension: Mehrere Schwachstellen | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0550 | Apache Camel: Schwachstelle ermöglicht Manipulation von Dateien | 2025-03-12T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0385 | Mattermost Desktop: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-02-16T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0043 | IBM QRadar SIEM (Log Source Management App): Mehrere Schwachstellen | 2025-01-12T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3665 | Ruby on Rails: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2024-12-10T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3317 | IBM QRadar SIEM: Mehrere Schwachstellen | 2024-10-30T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1608 | IBM QRadar SIEM und Business Automation Workflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-07-14T22:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1252 | GNOME: Schwachstelle ermöglicht Denial of Service und unspezifische Angriffe | 2024-05-28T22:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0560 | Golang Go: Mehrere Schwachstellen | 2024-03-05T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2023-1577 | Ruby on Rails: Schwachstelle ermöglicht Cross-Site Scripting | 2023-06-27T22:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0570 | D-LINK Router: Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-03-16T23:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0569 | Flowise: Schwachstelle ermöglicht Codeausführung | 2025-03-16T23:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0559 | Shibboleth Service Provider: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-13T23:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0515 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2025-03-10T23:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3153 | Red Hat Enterprise Linux (OpenIPMI): Schwachstelle ermöglicht Codeausführung, DoS oder Umgehung der Authentifizierung | 2024-10-13T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1760 | ffmpeg: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-08-05T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1568 | Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen | 2024-07-09T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1496 | ffmpeg: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-07-01T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0982 | ffmpeg: Schwachstelle ermöglicht Codeausführung | 2024-04-28T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0568 | Flowise: Schwachstelle ermöglicht Codeausführung | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0567 | Synology Router Manager: Mehrere Schwachstellen | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0565 | Ruby: Schwachstelle ermöglicht Denial of Service | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0564 | HCL AppScan Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0560 | Autodesk AutoCAD-Produkte: Mehrere Schwachstellen | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0558 | Devolutions Remote Desktop Manager: Mehrere Schwachstellen | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0557 | Red Hat OpenShift Dev Spaces: Schwachstelle ermöglicht Codeausführung | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0552 | Juniper JUNOS: Schwachstelle ermöglicht Codeausführung | 2025-03-12T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0549 | GitLab: Mehrere Schwachstellen | 2025-03-12T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:9442 | Red Hat Security Advisory: mingw-glib2 security update | 2024-11-12T08:59:14+00:00 | 2026-01-13T22:56:53+00:00 |
| rhsa-2024:8337 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.2 for RHEL 9 | 2024-10-31T00:55:34+00:00 | 2026-01-13T22:56:52+00:00 |
| rhsa-2024:7443 | Red Hat Security Advisory: RHACS 4.5 enhancement and security update | 2024-10-01T09:03:41+00:00 | 2026-01-13T22:56:52+00:00 |
| rhsa-2024:6235 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.1.2 | 2024-09-03T14:56:15+00:00 | 2026-01-13T22:56:49+00:00 |
| rhsa-2024:10895 | Red Hat Security Advisory: Cost Management Metrics Operator Update | 2024-12-09T19:09:42+00:00 | 2026-01-13T22:56:48+00:00 |
| rhsa-2024:10775 | Red Hat Security Advisory: ACS 4.6 enhancement and security update | 2024-12-04T00:59:51+00:00 | 2026-01-13T22:56:47+00:00 |
| rhba-2024:6585 | Red Hat Bug Fix Advisory: Updated rhel9/toolbox container image | 2024-09-11T11:29:42+00:00 | 2026-01-13T22:56:46+00:00 |
| rhsa-2024:5144 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:23:05+00:00 | 2026-01-13T22:55:55+00:00 |
| rhsa-2024:6148 | Red Hat Security Advisory: nodejs:18 security update | 2024-09-03T02:32:16+00:00 | 2026-01-13T22:55:53+00:00 |
| rhsa-2024:6147 | Red Hat Security Advisory: nodejs:18 security update | 2024-09-03T02:29:11+00:00 | 2026-01-13T22:55:53+00:00 |
| rhsa-2024:5814 | Red Hat Security Advisory: nodejs:20 security update | 2024-08-26T08:36:35+00:00 | 2026-01-13T22:55:52+00:00 |
| rhsa-2024:4390 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0 security update | 2024-07-08T21:31:05+00:00 | 2026-01-13T22:55:52+00:00 |
| rhsa-2024:5147 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:23:37+00:00 | 2026-01-13T22:55:51+00:00 |
| rhsa-2024:5145 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:22:53+00:00 | 2026-01-13T22:55:51+00:00 |
| rhsa-2024:5143 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:22:54+00:00 | 2026-01-13T22:55:50+00:00 |
| rhsa-2024:4392 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.2 Security update | 2024-07-08T22:19:06+00:00 | 2026-01-13T22:55:50+00:00 |
| rhsa-2024:3417 | Red Hat Security Advisory: mod_http2 security update | 2024-05-28T14:09:14+00:00 | 2026-01-13T22:55:50+00:00 |
| rhea-2024:7870 | Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.16.0 release | 2024-10-09T14:44:53+00:00 | 2026-01-13T22:55:50+00:00 |
| rhsa-2024:3402 | Red Hat Security Advisory: mod_http2 security update | 2024-05-28T14:34:07+00:00 | 2026-01-13T22:55:49+00:00 |
| rhsa-2024:1872 | Red Hat Security Advisory: mod_http2 security update | 2024-04-18T01:43:19+00:00 | 2026-01-13T22:55:49+00:00 |
| rhsa-2024:2907 | Red Hat Security Advisory: httpd:2.4 security update | 2024-05-20T01:58:01+00:00 | 2026-01-13T22:55:48+00:00 |
| rhsa-2024:2891 | Red Hat Security Advisory: httpd:2.4 security update | 2024-05-16T18:23:12+00:00 | 2026-01-13T22:55:48+00:00 |
| rhsa-2024:2694 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update | 2024-05-07T15:44:38+00:00 | 2026-01-13T22:55:47+00:00 |
| rhsa-2024:2693 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update | 2024-05-07T15:50:35+00:00 | 2026-01-13T22:55:47+00:00 |
| rhsa-2024:2564 | Red Hat Security Advisory: mod_http2 security update | 2024-04-30T13:37:06+00:00 | 2026-01-13T22:55:47+00:00 |
| rhsa-2024:1786 | Red Hat Security Advisory: httpd:2.4/mod_http2 security update | 2024-04-11T16:31:01+00:00 | 2026-01-13T22:55:46+00:00 |
| rhsa-2024:1255 | Red Hat Security Advisory: OpenShift Container Platform 4.15.3 bug fix and security update | 2024-03-19T00:19:06+00:00 | 2026-01-13T22:55:45+00:00 |
| rhba-2024:4924 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.2 bugfix release | 2024-07-30T21:58:32+00:00 | 2026-01-13T22:55:44+00:00 |
| rhsa-2024:2968 | Red Hat Security Advisory: fence-agents security and bug fix update | 2024-05-22T09:48:54+00:00 | 2026-01-13T22:54:16+00:00 |
| rhsa-2024:2952 | Red Hat Security Advisory: resource-agents security and bug fix update | 2024-05-22T09:26:27+00:00 | 2026-01-13T22:54:15+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-18-226-02 | Siemens OpenSSL Vulnerability in Industrial Products (Update E) | 2018-08-07T00:00:00.000000Z | 2022-09-13T00:00:00.000000Z |
| icsa-22-251-01 | MZ Automation libIEC61850 | 2022-09-08T00:00:00.000000Z | 2022-09-08T00:00:00.000000Z |
| icsa-22-242-10 | PTC Kepware KEPServerEX (Update A) | 2022-08-30T00:00:00.000000Z | 2022-09-08T00:00:00.000000Z |
| icsa-22-249-04 | Hitachi Energy TXpert Hub CoreTec 4 | 2022-09-06T00:00:00.000000Z | 2022-09-06T00:00:00.000000Z |
| icsa-22-249-03 | Cognex 3D-A1000 Dimensioning System | 2022-09-06T00:00:00.000000Z | 2022-09-06T00:00:00.000000Z |
| icsa-22-249-02 | AVEVA Edge 2020 R2 SP1 and all prior versions | 2022-09-06T00:00:00.000000Z | 2022-09-06T00:00:00.000000Z |
| icsa-22-249-01 | Triangle Microworks Libraries | 2022-09-06T00:00:00.000000Z | 2022-09-06T00:00:00.000000Z |
| icsa-22-242-11 | Sensormatic Electronics iSTAR | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-09 | Omron CX-Programmer | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-08 | Honeywell Trend Controls Inter-Controller Protocol | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-07 | Honeywell Experion LX | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-06 | Honeywell ControlEdge | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-05 | Fuji Electric D300win | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-04 | Hitachi Energy RTU500 series | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-03 | Hitachi Energy MSM Product | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-02 | Hitachi Energy Gateway Station (GWS) Product | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-01 | Hitachi Energy FACTS Control Platform (FCP) Product | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-237-01 | FATEK Automation FvDesigner | 2022-08-25T00:00:00.000000Z | 2022-08-25T00:00:00.000000Z |
| icsa-22-235-07 | Hitachi Energy RTU500 | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-06 | Measuresoft ScadaPro Server and Client | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-05 | Measuresoft ScadaPro Server | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-03 | mySCADA myPRO | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-02 | Delta Industrial Automation DIALink | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-153-02 | Illumina Local Run Manager | 2022-06-02T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-228-07 | Sequi PortBloque S | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-06 | Emerson Proficy Machine Edition | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-05 | B&R Industrial Automation Automation Studio 4 | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-04 | Softing Secure Integration Server | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-03 | Delta Industrial Automation DRAS | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-01 | Yokogawa CENTUM Controller FCS | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-fnd-pwh-yca6m7p | Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-ovw-shzoe3pd | Cisco IoT Field Network Director File Overwrite Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-lv-he4rntet | Cisco IoT Field Network Director Improper Access Control Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-bck-ghkpnz5f | Cisco IoT Field Network Director Unauthenticated REST API Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-auth-veypbmmr | Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-apia-xzntfs2v | Cisco IoT Field Network Director Missing API Authentication Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-dna-cmd-injection-rrayzowc | Cisco DNA Spaces Connector Command Injection Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-dna-cmd-injection-rrAYzOwc | Cisco DNA Spaces Connector Command Injection Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-XSS-NzOPCGEc | Cisco IoT Field Network Director Cross-Site Scripting Vulnerabilities | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-UPWD-dCRPuQ78 | Cisco IoT Field Network Director Improper Domain Access Control Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-SSI-V2myWX9y | Cisco IoT Field Network Director Information Disclosure Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-SQL-zEkBnL2h | Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-PWH-yCA6M7p | Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-OVW-SHzOE3Pd | Cisco IoT Field Network Director File Overwrite Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-LV-hE4Rntet | Cisco IoT Field Network Director Improper Access Control Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-BCK-GHkPNZ5F | Cisco IoT Field Network Director Unauthenticated REST API Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-AUTH-vEypBmmR | Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-FND-APIA-xZntFS2V | Cisco IoT Field Network Director Missing API Authentication Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-csm-rce-8gjuz9fw | Cisco Security Manager Static Credential Vulnerability | 2020-11-16T23:00:00+00:00 | 2020-11-16T23:00:00+00:00 |
| cisco-sa-csm-rce-8gjUz9fW | Cisco Security Manager Static Credential Vulnerability | 2020-11-16T23:00:00+00:00 | 2020-11-16T23:00:00+00:00 |
| cisco-sa-vmanx3-vrzboqqd | Cisco SD-WAN vManage Software XML External Entity Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-09T21:12:21+00:00 |
| cisco-sa-vmanx3-vrZbOqqD | Cisco SD-WAN vManage Software XML External Entity Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-09T21:12:21+00:00 |
| cisco-sa-webex-vdi-qqrpbwuj | Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-webex-vdi-qQrpBwuJ | Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-webex-teams-xss-zlw9td3 | Cisco Webex Teams Web Interface Cross-Site Scripting Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-webex-teams-xss-zLW9tD3 | Cisco Webex Teams Web Interface Cross-Site Scripting Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-webex-nbr-nos6fq24 | Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-webex-nbr-NOS6FQ24 | Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-vsoln-arbfile-gtseyxns | Cisco SD-WAN Software Arbitrary File Creation Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-vsoln-arbfile-gtsEYxns | Cisco SD-WAN Software Arbitrary File Creation Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38572 | ipv6: reject malicious packets in ipv6_gso_segment() | 2025-08-02T00:00:00.000Z | 2025-09-04T04:31:59.000Z |
| msrc_cve-2019-14199 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call. | 2019-07-02T00:00:00.000Z | 2025-09-04T04:30:22.000Z |
| msrc_cve-2010-4756 | The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632. | 2011-03-02T00:00:00.000Z | 2025-09-04T04:29:41.000Z |
| msrc_cve-2024-57258 | Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64. | 2025-02-02T00:00:00.000Z | 2025-09-04T04:25:09.000Z |
| msrc_cve-2025-38578 | f2fs: fix to avoid UAF in f2fs_sync_inode_meta() | 2025-08-02T00:00:00.000Z | 2025-09-04T04:25:05.000Z |
| msrc_cve-2024-50280 | dm cache: fix flushing uninitialized delayed_work on cache_ctr error | 2024-11-02T00:00:00.000Z | 2025-09-04T04:24:51.000Z |
| msrc_cve-2025-23266 | NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service. | 2025-07-02T00:00:00.000Z | 2025-09-04T04:21:49.000Z |
| msrc_cve-2022-49063 | ice: arfs: fix use-after-free when freeing @rx_cpu_rmap | 2025-02-02T00:00:00.000Z | 2025-09-04T04:20:29.000Z |
| msrc_cve-2018-19416 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf. | 2018-11-02T00:00:00.000Z | 2025-09-04T04:18:37.000Z |
| msrc_cve-2025-38576 | powerpc/eeh: Make EEH driver device hotplug safe | 2025-08-02T00:00:00.000Z | 2025-09-04T04:15:21.000Z |
| msrc_cve-2022-49465 | blk-throttle: Set BIO_THROTTLED when bio has been throttled | 2025-02-02T00:00:00.000Z | 2025-09-04T04:15:17.000Z |
| msrc_cve-2024-57259 | sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation. | 2025-02-02T00:00:00.000Z | 2025-09-04T04:14:59.000Z |
| msrc_cve-2025-4878 | Libssh: use of uninitialized variable in privatekey_from_file() | 2025-07-02T00:00:00.000Z | 2025-09-04T04:13:58.000Z |
| msrc_cve-2023-24539 | Improper sanitization of CSS values in html/template | 2023-05-01T00:00:00.000Z | 2025-09-04T04:09:59.000Z |
| msrc_cve-2025-50200 | RabbitMQ Node can log Basic Auth header from an HTTP request | 2025-06-02T00:00:00.000Z | 2025-09-04T04:09:13.000Z |
| msrc_cve-2025-54314 | Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments." | 2025-07-02T00:00:00.000Z | 2025-09-04T04:06:48.000Z |
| msrc_cve-2025-38561 | ksmbd: fix Preauh_HashValue race condition | 2025-08-02T00:00:00.000Z | 2025-09-04T04:06:25.000Z |
| msrc_cve-2025-40914 | Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow | 2025-06-02T00:00:00.000Z | 2025-09-04T04:05:27.000Z |
| msrc_cve-2025-38601 | wifi: ath11k: clear initialized flag for deinit-ed srng lists | 2025-08-02T00:00:00.000Z | 2025-09-04T04:02:55.000Z |
| msrc_cve-2025-7783 | Usage of unsafe random function in form-data for choosing boundary | 2025-07-02T00:00:00.000Z | 2025-09-04T04:02:28.000Z |
| msrc_cve-2021-28216 | BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. | 2021-08-02T00:00:00.000Z | 2025-09-04T04:00:29.000Z |
| msrc_cve-2022-49535 | scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI | 2025-02-02T00:00:00.000Z | 2025-09-04T03:58:29.000Z |
| msrc_cve-2025-6141 | GNU ncurses parse_entry.c postprocess_termcap stack-based overflow | 2025-06-02T00:00:00.000Z | 2025-09-04T03:58:14.000Z |
| msrc_cve-2025-38568 | net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing | 2025-08-02T00:00:00.000Z | 2025-09-04T03:57:06.000Z |
| msrc_cve-2024-1552 | Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8. | 2024-02-02T08:00:00.000Z | 2025-09-04T03:56:01.000Z |
| msrc_cve-2019-16707 | Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. | 2019-09-02T00:00:00.000Z | 2025-09-04T03:53:50.000Z |
| msrc_cve-2025-38581 | crypto: ccp - Fix crash when rebind ccp device for ccp.ko | 2025-08-02T00:00:00.000Z | 2025-09-04T03:53:45.000Z |
| msrc_cve-2024-38628 | usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. | 2024-06-02T07:00:00.000Z | 2025-09-04T03:53:18.000Z |
| msrc_cve-2025-7395 | Domain Name Validation Bypass with Apple Native Certificate Validation | 2025-07-02T00:00:00.000Z | 2025-09-04T03:52:58.000Z |
| msrc_cve-2024-57255 | An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. | 2025-02-02T00:00:00.000Z | 2025-09-04T03:52:20.000Z |
| ID | Description | Updated |
|---|---|---|
| var-199710-0008 | Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to est… | 2024-05-12T03:47:51.020000Z |
| var-202312-2147 | TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command … | 2024-05-12T03:46:41.327000Z |
| var-199801-0019 | AAA authentication on Cisco systems allows attackers to execute commands without authoriz… | 2024-05-12T03:46:40.565000Z |
| var-202312-1108 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command … | 2024-05-12T03:45:39.619000Z |
| var-202312-0941 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command … | 2024-05-12T03:43:42.576000Z |
| var-202312-1976 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command … | 2024-05-12T03:42:05.752000Z |
| var-202001-1829 | In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gp… | 2024-05-12T03:34:57.889000Z |
| var-202207-0587 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does no… | 2024-05-12T03:18:55.457000Z |
| var-202210-0037 | A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change … | 2024-05-12T03:18:39.471000Z |
| var-201702-0880 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … | 2024-05-12T03:12:47.114000Z |
| var-200110-0206 | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2024-05-12T02:40:25.656000Z |
| var-202110-1429 | This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0… | 2024-05-12T02:08:40.085000Z |
| var-202110-1670 | The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow … | 2024-05-12T01:52:15.827000Z |
| var-202207-0378 | A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.… | 2024-05-12T00:07:29.801000Z |
| var-202308-3576 | An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 bef… | 2024-05-11T11:37:06.668000Z |
| var-202309-1900 | An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 bef… | 2024-05-11T11:32:15.250000Z |
| var-202109-1948 | NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulne… | 2024-05-11T11:31:57.002000Z |
| var-202308-3910 | An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9… | 2024-05-11T11:24:35.322000Z |
| var-202305-0219 | D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulner… | 2024-05-11T11:22:28.071000Z |
| var-202308-4279 | An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 bef… | 2024-05-11T11:18:26.496000Z |
| var-199712-0012 | Buffer overflow in Cisco 7xx routers through the telnet service. Cisco Systems Cisco IOS … | 2024-05-04T23:03:04.194000Z |
| var-202101-0228 | SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secu… | 2024-05-04T23:00:41.949000Z |
| var-199808-0008 | Attackers can crash a Cisco IOS router or device, provided they can get to an interactive… | 2024-05-04T22:57:04.588000Z |
| var-199212-0004 | Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP r… | 2024-05-04T22:54:20.278000Z |
| var-199212-0003 | Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass… | 2024-05-04T22:54:20.249000Z |
| var-202305-2804 | Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution … | 2024-05-04T22:48:00.732000Z |
| var-199808-0006 | Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. Cisco… | 2024-05-04T22:47:51.445000Z |
| var-202309-0359 | D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution… | 2024-05-04T22:41:53.127000Z |
| var-202309-0344 | D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Executi… | 2024-05-04T22:41:53.182000Z |
| var-202309-0335 | D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Exe… | 2024-05-04T22:41:53.252000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-000035 | Java Web Start may insecurely load dynamic libraries | 2011-06-10T16:23+09:00 | 2013-03-26T15:14+09:00 |
| jvndb-2013-000028 | OpenWnn/Flick support vulnerable to information disclosure | 2013-03-26T14:55+09:00 | 2013-03-26T14:55+09:00 |
| jvndb-2013-000027 | COBIME vulnerable to information disclosure | 2013-03-26T14:55+09:00 | 2013-03-26T14:55+09:00 |
| jvndb-2013-000029 | Simeji vulnerable to information disclosure | 2013-03-26T14:51+09:00 | 2013-03-26T14:51+09:00 |
| jvndb-2011-000034 | Java Web Start may insecurely load settings files | 2011-06-10T16:23+09:00 | 2013-03-26T14:46+09:00 |
| jvndb-2013-000026 | ArtIME Japanese Input vulnerable to information disclosure | 2013-03-26T13:36+09:00 | 2013-03-26T13:36+09:00 |
| jvndb-2013-000017 | Multiple Cisco products vulnerable to denial-of-service (DoS) | 2013-03-07T14:13+09:00 | 2013-03-11T16:22+09:00 |
| jvndb-2013-000016 | Kingsoft Writer vulnerable to buffer overflow | 2013-03-01T14:47+09:00 | 2013-03-01T14:47+09:00 |
| jvndb-2013-000012 | NEC Universal RAID Utility fails to restrict access permissions | 2013-02-21T13:54+09:00 | 2013-03-01T11:34+09:00 |
| jvndb-2013-000014 | dopvSTAR* vulnerable to cross-site scripting | 2013-02-28T13:46+09:00 | 2013-02-28T13:46+09:00 |
| jvndb-2013-000013 | dopvCOMET* vulnerable to cross-site scripting | 2013-02-28T13:37+09:00 | 2013-02-28T13:37+09:00 |
| jvndb-2013-000015 | Multiple JustSystems products vulnerable to arbitrary code execution | 2013-02-26T14:45+09:00 | 2013-02-26T14:45+09:00 |
| jvndb-2013-001605 | Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management | 2013-02-22T20:09+09:00 | 2013-02-22T20:09+09:00 |
| jvndb-2012-000113 | concrete5 vulnerable to cross-site scripting | 2012-12-21T12:41+09:00 | 2013-02-20T16:10+09:00 |
| jvndb-2013-000011 | 3DM (3ware Disk Manager) vulnerable to directory traversal | 2013-02-15T14:29+09:00 | 2013-02-15T14:29+09:00 |
| jvndb-2013-000010 | GREE for Android vulnerable to directory traversal | 2013-02-14T14:15+09:00 | 2013-02-14T14:15+09:00 |
| jvndb-2013-000009 | imgboard vulnerable to cross-site scripting | 2013-02-14T14:10+09:00 | 2013-02-14T14:10+09:00 |
| jvndb-2013-001470 | Accela BizSearch Gateway Option for TeamWARE Spoofing Vulnerability | 2013-02-13T16:47+09:00 | 2013-02-13T16:47+09:00 |
| jvndb-2013-001321 | User Authentication Vulnerability in Operational Management Function of Cosminexus | 2013-02-12T14:24+09:00 | 2013-02-12T14:24+09:00 |
| jvndb-2013-000007 | Cybozu Garoon vulnerable to SQL injection | 2013-02-08T13:58+09:00 | 2013-02-08T13:58+09:00 |
| jvndb-2013-000008 | Cybozu Garoon vulnerable to cross-site scripting | 2013-02-08T13:53+09:00 | 2013-02-08T13:53+09:00 |
| jvndb-2013-000006 | mora Downloader may insecurely load executable files | 2013-02-07T14:00+09:00 | 2013-02-07T14:00+09:00 |
| jvndb-2013-000005 | Weathernews Touch for Android stores location information in the system log file | 2013-01-31T13:38+09:00 | 2013-01-31T13:38+09:00 |
| jvndb-2013-000004 | WebSphere Application Server (WAS) vulnerable to cross-site scripting | 2013-01-25T12:32+09:00 | 2013-01-25T12:32+09:00 |
| jvndb-2013-000003 | myu-s / PHP WeblogSystem by netmania vulnerable to cross-site scripting | 2013-01-22T15:22+09:00 | 2013-01-22T15:22+09:00 |
| jvndb-2013-000002 | Documents Pro (formerly Files HD) vulnerable to directory traversal | 2013-01-18T13:39+09:00 | 2013-01-18T13:39+09:00 |
| jvndb-2013-000001 | Documents Pro (formerly Files HD) vulnerable to cross-site scripting | 2013-01-18T13:36+09:00 | 2013-01-18T13:36+09:00 |
| jvndb-2012-005827 | Cross-site Scripting Vulnerability in Collaboration - Bulletin board in Multiple Hitachi Products | 2012-12-28T16:43+09:00 | 2012-12-28T16:43+09:00 |
| jvndb-2012-000112 | Opera Mini / Opera Mobile for Android vulnerable in the WebView class | 2012-12-20T15:04+09:00 | 2012-12-28T16:13+09:00 |
| jvndb-2012-000063 | Python SimpleHTTPServer vulnerable to cross-site scripting | 2012-06-19T14:38+09:00 | 2012-12-26T18:01+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01702-1 | Security update for glibc | 2025-05-24T09:50:54Z | 2025-05-24T09:50:54Z |
| suse-su-2025:01701-1 | Security update for MozillaFirefox | 2025-05-24T08:34:24Z | 2025-05-24T08:34:24Z |
| suse-su-2025:20346-1 | Security update for python311 | 2025-05-23T13:40:05Z | 2025-05-23T13:40:05Z |
| suse-su-2025:20345-1 | Security update for augeas | 2025-05-23T13:00:13Z | 2025-05-23T13:00:13Z |
| suse-su-2025:01695-1 | Security update for python-setuptools | 2025-05-23T12:50:53Z | 2025-05-23T12:50:53Z |
| suse-su-2025:01693-1 | Security update for python36-setuptools | 2025-05-23T12:48:03Z | 2025-05-23T12:48:03Z |
| suse-su-2025:01649-2 | Security update for python-tornado6 | 2025-05-23T11:58:50Z | 2025-05-23T11:58:50Z |
| suse-su-2025:01692-1 | Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) | 2025-05-23T08:03:48Z | 2025-05-23T08:03:48Z |
| suse-su-2025:20365-1 | Security update for s390-tools | 2025-05-23T07:59:47Z | 2025-05-23T07:59:47Z |
| suse-su-2025:20352-1 | Security update for s390-tools | 2025-05-23T07:48:14Z | 2025-05-23T07:48:14Z |
| suse-su-2025:20344-1 | Security update for the Linux Kernel | 2025-05-23T07:28:27Z | 2025-05-23T07:28:27Z |
| suse-su-2025:20355-1 | Security update for the Linux Kernel | 2025-05-23T07:28:26Z | 2025-05-23T07:28:26Z |
| suse-su-2025:20354-1 | Security update for the Linux Kernel | 2025-05-23T07:19:59Z | 2025-05-23T07:19:59Z |
| suse-su-2025:20343-1 | Security update for the Linux Kernel | 2025-05-23T07:19:59Z | 2025-05-23T07:19:59Z |
| suse-su-2025:01683-1 | Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6) | 2025-05-22T21:38:10Z | 2025-05-22T21:38:10Z |
| suse-su-2025:01682-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) | 2025-05-22T20:04:36Z | 2025-05-22T20:04:36Z |
| suse-su-2025:01677-1 | Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5) | 2025-05-22T20:04:28Z | 2025-05-22T20:04:28Z |
| suse-su-2025:01676-1 | Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5) | 2025-05-22T20:04:19Z | 2025-05-22T20:04:19Z |
| suse-su-2025:01675-1 | Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6) | 2025-05-22T19:34:27Z | 2025-05-22T19:34:27Z |
| suse-su-2025:01668-1 | Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) | 2025-05-22T19:34:13Z | 2025-05-22T19:34:13Z |
| suse-su-2025:01672-1 | Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3) | 2025-05-22T19:34:05Z | 2025-05-22T19:34:05Z |
| suse-su-2025:01669-1 | Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) | 2025-05-22T19:33:43Z | 2025-05-22T19:33:43Z |
| suse-su-2025:01663-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-05-22T17:33:37Z | 2025-05-22T17:33:37Z |
| suse-su-2025:01662-1 | Security update for python-cryptography | 2025-05-22T16:04:44Z | 2025-05-22T16:04:44Z |
| suse-su-2025:01661-1 | Security update for postgresql14 | 2025-05-22T16:03:02Z | 2025-05-22T16:03:02Z |
| suse-su-2025:01660-1 | Security update for MozillaThunderbird | 2025-05-22T16:01:46Z | 2025-05-22T16:01:46Z |
| suse-su-2025:01658-1 | Security update for open-vm-tools | 2025-05-22T13:34:46Z | 2025-05-22T13:34:46Z |
| suse-su-2025:20370-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:20369-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:20368-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13780-1 | python310-python-rapidjson-1.16-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13779-1 | expat-2.6.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13778-1 | cmctl-1.14.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13777-1 | ungoogled-chromium-122.0.6261.128-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13776-1 | trilead-ssh2-217.293.v56de4d4d3515-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13775-1 | libQt6Concurrent6-6.6.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13774-1 | python310-aiosmtpd-1.4.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13773-1 | nodejs-electron-28.2.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13772-1 | jsch-agent-proxy-connector-factory-0.0.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13771-1 | chromedriver-122.0.6261.128-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13770-1 | Bottles-51.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13769-1 | ucode-intel-20240312-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13768-1 | python310-rpyc-6.0.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13767-1 | kernel-devel-6.7.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13766-1 | ungoogled-chromium-122.0.6261.111-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13765-1 | opensc-0.25.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13764-1 | chromedriver-122.0.6261.111-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13763-1 | clojure-1.11.2.1446-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13762-1 | libunbound8-1.19.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13761-1 | graphviz-2.49.3-9.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13760-1 | perl-Spreadsheet-ParseXLSX-0.310.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13759-1 | libvirt-10.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13758-1 | chromedriver-121.0.6167.184-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13757-1 | squid-6.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13756-1 | go1.21-1.21.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13755-1 | fontforge-20230101-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13754-1 | crun-1.14.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13753-1 | MozillaThunderbird-115.8.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13752-1 | go1.22-1.22.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13751-1 | tar-1.35-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24467 | Tenda AC18 newVersion参数堆栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24466 | Tenda AC18 ddnsEn参数堆栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24465 | Tenda AC18 Username参数栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24420 | Microsoft Windows存在未明漏洞（CNVD-2025-24420） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24419 | Microsoft Office代码执行漏洞（CNVD-2025-24419） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24418 | Centreon Web SQL注入漏洞（CNVD-2025-24418） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24417 | DataEase DB2/MongoDB JNDI代码注入漏洞 | 2025-10-20 | 2025-10-21 |
| cnvd-2025-24416 | DataEase H2 JDBC注入代码执行漏洞 | 2025-10-20 | 2025-10-21 |
| cnvd-2025-24415 | Microsoft Office拒绝服务漏洞（CNVD-2025-24415 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24402 | Microsoft Excel代码执行漏洞（CNVD-2025-24402） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24401 | Microsoft Excel信息泄露漏洞（CNVD-2025-24401） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24400 | Microsoft Excel代码执行漏洞（CNVD-2025-24400） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24399 | Microsoft Office代码执行漏洞（CNVD-2025-24399） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24397 | Fortinet FortiClient MacOS installer数据伪造问题漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24396 | D-Link DAP-2695操作系统命令注入漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24395 | Microsoft Excel信息泄露漏洞（CNVD-2025-24395） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24394 | Microsoft Excel代码执行漏洞（CNVD-2025-24394） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24393 | Adobe Illustrator越界写入漏洞（CNVD-2025-24393） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24392 | Adobe Illustrator越界写入漏洞（CNVD-2025-24392） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24391 | Adobe Framemaker内存错误引用漏洞（CNVD-2025-24391） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24390 | Tenda AC15数据伪造问题漏洞 | 2025-08-20 | 2025-10-21 |
| cnvd-2025-24389 | Tenda AC15 fromSetIpMacBind函数栈缓冲区溢出漏洞 | 2025-08-26 | 2025-10-21 |
| cnvd-2025-24388 | Tenda AC15 newVersion参数堆栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24387 | Tenda AC15 ddnsEn参数栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24259 | Tenda AC15 fromSysToolRestoreSet方法跨站请求伪造漏洞 | 2024-03-26 | 2025-10-21 |
| cnvd-2025-24258 | Online Admission System viewdoc.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-21 |
| cnvd-2025-24257 | Online Admission System SQL注入漏洞 | 2025-08-10 | 2025-10-21 |
| cnvd-2025-24256 | Fuji Electric V-SFT越界读取漏洞 | 2025-10-15 | 2025-10-21 |
| cnvd-2025-24299 | Tenda AC15跨站请求伪造漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24298 | Tenda AC15 fromDhcpListClient方法堆栈缓冲区溢出漏洞 | 2024-03-26 | 2025-10-20 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0052 | Multiples vulnérabilités dans Oracle Database Server | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0051 | Multiples vulnérabilités dans phpMyAdmin | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| certfr-2025-avi-0050 | Multiples vulnérabilités dans les produits Elastic | 2025-01-21T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| certfr-2024-avi-0752 | Multiples vulnérabilités dans les produits Qnap | 2024-09-09T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| CERTFR-2025-AVI-0050 | Multiples vulnérabilités dans les produits Elastic | 2025-01-21T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| CERTFR-2024-AVI-0752 | Multiples vulnérabilités dans les produits Qnap | 2024-09-09T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| certfr-2025-avi-0049 | Multiples vulnérabilités dans Microsoft Edge | 2025-01-20T00:00:00.000000 | 2025-01-20T00:00:00.000000 |
| CERTFR-2025-AVI-0049 | Multiples vulnérabilités dans Microsoft Edge | 2025-01-20T00:00:00.000000 | 2025-01-20T00:00:00.000000 |
| certfr-2025-avi-0048 | Vulnérabilité dans Microsoft Windows | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0046 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0045 | Multiples vulnérabilités dans les produits IBM | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0044 | Vulnérabilité dans les produits Moxa | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0048 | Vulnérabilité dans Microsoft Windows | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0046 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0045 | Multiples vulnérabilités dans les produits IBM | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0044 | Vulnérabilité dans les produits Moxa | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0042 | Vulnérabilité dans le greffon Splunk Supporting pour Active Directory | 2025-01-16T00:00:00.000000 | 2025-01-16T00:00:00.000000 |
| CERTFR-2025-AVI-0042 | Vulnérabilité dans le greffon Splunk Supporting pour Active Directory | 2025-01-16T00:00:00.000000 | 2025-01-16T00:00:00.000000 |
| certfr-2025-avi-0041 | Multiples vulnérabilités dans les produits Microsoft | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0040 | Multiples vulnérabilités dans Microsoft .Net | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0039 | Multiples vulnérabilités dans Microsoft Windows | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0038 | Multiples vulnérabilités dans Microsoft Office | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0037 | Vulnérabilité dans Microsoft Edge | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0036 | Multiples vulnérabilités dans les produits Moxa | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0035 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0034 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0033 | Multiples vulnérabilités dans Google Chrome | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0032 | Multiples vulnérabilités dans HPE Aruba Networking AOS | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |