Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-15055 |
7.2 (3.1)
|
SlimStat Analytics <= 5.3.4 - Unauthenticated Stored C… |
veronalabs |
SlimStat Analytics |
2026-01-09T06:34:55.531Z | 2026-01-09T19:10:52.576Z |
| CVE-2025-15057 |
7.2 (3.1)
|
SlimStat Analytics <= 5.3.3 - Unauthenticated Stored C… |
veronalabs |
SlimStat Analytics |
2026-01-09T06:34:55.004Z | 2026-01-09T19:10:42.287Z |
| CVE-2025-14718 |
5.4 (3.1)
|
Schedule Post Changes With PublishPress Future: Unpubl… |
publishpress |
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories |
2026-01-09T06:34:54.542Z | 2026-01-09T19:10:31.382Z |
| CVE-2025-14720 |
5.3 (3.1)
|
Booking for Appointments and Events Calendar – Amelia … |
ameliabooking |
Booking for Appointments and Events Calendar – Amelia |
2026-01-09T06:34:54.137Z | 2026-01-09T19:10:22.011Z |
| CVE-2026-0563 |
6.4 (3.1)
|
WP Google Street View (with 360° virtual tour) & Googl… |
pagup |
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO |
2026-01-09T06:34:53.735Z | 2026-01-09T19:10:11.929Z |
| CVE-2026-20976 |
5.1 (4.0)
|
Improper input validation in Galaxy Store prior t… |
Samsung Mobile |
Galaxy Store |
2026-01-09T06:17:10.980Z | 2026-01-09T19:10:00.532Z |
| CVE-2026-20975 |
2.1 (4.0)
|
Improper handling of insufficient permission in S… |
Samsung Mobile |
Samsung Cloud |
2026-01-09T06:16:59.823Z | 2026-01-09T19:09:53.391Z |
| CVE-2026-20974 |
5.2 (4.0)
|
Improper input validation in data related to netw… |
Samsung Mobile |
Samsung Mobile Devices |
2026-01-09T06:16:48.700Z | 2026-01-09T19:09:42.100Z |
| CVE-2026-20973 |
5.3 (3.1)
|
Out-of-bounds read in libimagecodec.quram.so prio… |
Samsung Mobile |
Samsung Mobile Devices |
2026-01-09T06:16:37.517Z | 2026-01-09T19:09:34.314Z |
| CVE-2026-22539 |
5.3 (4.0)
|
INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP) |
EFACEC |
QC 60/90/120 |
2026-01-07T17:12:01.065Z | 2026-01-09T19:09:20.052Z |
| CVE-2025-44951 |
7.1 (3.1)
|
A missing length check in `ogs_pfcp_dev_add` func… |
n/a |
n/a |
2025-06-18T00:00:00.000Z | 2026-01-09T18:38:57.294Z |
| CVE-2025-56425 |
9.1 (3.1)
|
An issue was discovered in the AppConnector compo… |
n/a |
n/a |
2026-01-08T00:00:00.000Z | 2026-01-09T18:38:32.265Z |
| CVE-2025-67825 |
9.8 (3.1)
|
An issue was discovered in Nitro PDF Pro for Wind… |
n/a |
n/a |
2026-01-08T00:00:00.000Z | 2026-01-09T18:38:26.981Z |
| CVE-2025-65731 |
6.8 (3.1)
|
An issue was discovered in D-Link Router DIR-605L… |
n/a |
n/a |
2026-01-08T00:00:00.000Z | 2026-01-09T18:38:20.890Z |
| CVE-2025-68715 |
9.1 (3.1)
|
An issue was discovered in Panda Wireless PWRU0 d… |
n/a |
n/a |
2026-01-08T00:00:00.000Z | 2026-01-09T18:38:14.203Z |
| CVE-2025-15492 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
RainyGao DocSys GroupMemberMapper.xml sql injection |
RainyGao |
DocSys |
2026-01-09T16:02:07.110Z | 2026-01-09T18:38:08.299Z |
| CVE-2025-46643 |
2.3 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain with Data Domain Operating System (DD OS) Feature Release |
2026-01-09T16:07:52.194Z | 2026-01-09T18:38:02.650Z |
| CVE-2025-69425 |
10 (4.0)
|
Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE |
RUCKUS Networks |
vRIoT IoT Controller |
2026-01-09T16:14:32.065Z | 2026-01-09T18:37:55.088Z |
| CVE-2025-69426 |
10 (4.0)
|
Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Cr… |
RUCKUS Networks |
vRIoT IOT Controller |
2026-01-09T16:15:01.731Z | 2026-01-09T18:37:43.521Z |
| CVE-2025-15493 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
RainyGao DocSys ReposAuthMapper.xml sql injection |
RainyGao |
DocSys |
2026-01-09T16:32:06.558Z | 2026-01-09T18:37:10.665Z |
| CVE-2025-15494 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
RainyGao DocSys UserMapper.xml sql injection |
RainyGao |
DocSys |
2026-01-09T16:32:08.806Z | 2026-01-09T18:37:05.234Z |
| CVE-2020-36875 |
9.3 (4.0)
|
AccessAlly < 3.3.2 Unauthenticated Arbitrary PHP Code … |
ACCESSALLY, INC. |
AccessAlly |
2026-01-09T16:41:06.883Z | 2026-01-09T18:36:57.869Z |
| CVE-2025-15496 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
guchengwuyue yshopmall jobs getPage sql injection |
guchengwuyue |
yshopmall |
2026-01-09T17:02:12.054Z | 2026-01-09T18:36:47.236Z |
| CVE-2025-15035 |
6.9 (4.0)
|
Arbitrary File Deletion Vulnerability in TP-Link Arche… |
TP-Link Systems Inc. |
Archer AXE75 v1.6 |
2026-01-09T17:10:39.477Z | 2026-01-09T18:36:41.597Z |
| CVE-2025-13749 |
4.3 (3.1)
|
Clearfy <= 2.4.0 - Cross-Site Request Forgery to Updat… |
creativemotion |
Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer |
2026-01-09T05:25:20.788Z | 2026-01-09T18:25:55.170Z |
| CVE-2025-15019 |
6.4 (3.1)
|
BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) … |
pagup |
Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) |
2026-01-09T06:34:52.347Z | 2026-01-09T18:25:18.891Z |
| CVE-2025-14980 |
6.5 (3.1)
|
BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sen… |
wpdevteam |
BetterDocs – Knowledge Base Documentation & FAQ Solution for Elementor & Block Editor |
2026-01-09T06:34:52.906Z | 2026-01-09T18:24:39.427Z |
| CVE-2025-14782 |
5.3 (3.1)
|
Forminator Forms – Contact Form, Payment Form & Custom… |
wpmudev |
Forminator Forms – Contact Form, Payment Form & Custom Form Builder |
2026-01-09T06:34:53.334Z | 2026-01-09T18:21:33.203Z |
| CVE-2025-13897 |
6.4 (3.1)
|
Client Testimonial Slider <= 2.0 - Authenticated (Cont… |
amu02aftab |
Client Testimonial Slider |
2026-01-09T11:15:33.126Z | 2026-01-09T18:19:16.062Z |
| CVE-2025-14886 |
5.3 (3.1)
|
Japanized for WooCommerce <= 2.7.17 - Missing Authoriz… |
shoheitanaka |
Japanized for WooCommerce |
2026-01-09T04:31:05.133Z | 2026-01-09T18:17:33.884Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22788 |
8.2 (3.1)
|
WebErpMesv2 allows unauthenticated API Access |
SMEWebify |
WebErpMesv2 |
2026-01-12T21:40:11.913Z | 2026-01-13T19:08:34.529Z |
| CVE-2025-65553 |
6.5 (3.1)
|
D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-13T19:08:39.284Z |
| CVE-2025-65552 |
9.8 (3.1)
|
D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is v… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-13T19:08:45.203Z |
| CVE-2025-32455 |
7.7 (3.1)
|
ON Semiconductor Quantenna router_command.sh (in the r… |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:02:58.816Z | 2025-06-09T18:38:09.297Z |
| CVE-2025-49306 |
6.5 (3.1)
|
WordPress WP Social Widget <= 2.3 - Cross Site Scripti… |
catchsquare |
WP Social Widget |
2025-06-06T12:53:48.782Z | 2025-06-06T16:05:12.823Z |
| CVE-2025-43026 |
7.1 (4.0)
|
HP Support Assistant – Potential Escalation of Privilege |
HP, Inc. |
HP Support Assistant |
2025-06-05T19:41:30.538Z | 2025-06-11T04:01:29.354Z |
| CVE-2025-3461 |
9.1 (3.1)
|
ON Semiconductor Quantenna Telnet Missing Authentication |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:02:37.521Z | 2025-06-09T18:37:14.718Z |
| CVE-2025-36573 |
7.1 (3.1)
|
Dell Smart Dock Firmware, versions prior to 01.00… |
Dell |
Smart Dock |
2025-06-12T15:18:00.863Z | 2025-06-12T15:35:26.976Z |
| CVE-2025-27689 |
7.8 (3.1)
|
Dell iDRAC Tools, version(s) prior to 11.3.0.0, c… |
Dell |
iDRAC Tools |
2025-06-12T20:36:24.943Z | 2025-06-14T03:56:24.614Z |
| CVE-2025-52560 |
8.1 (3.1)
|
Kanboard Password Reset Poisoning via Host Header Injection |
kanboard |
kanboard |
2025-06-24T02:56:26.589Z | 2025-06-24T15:02:43.025Z |
| CVE-2023-3852 |
4.7 (3.1)
4.7 (3.0)
|
OpenRapid RapidCMS upload.php unrestricted upload |
OpenRapid |
RapidCMS |
2023-07-23T22:00:04.288Z | 2024-08-02T07:08:50.411Z |
| CVE-2026-22813 |
9.4 (4.0)
|
Malicious website can execute commands on the local sy… |
anomalyco |
opencode |
2026-01-12T22:52:35.103Z | 2026-01-13T19:07:23.038Z |
| CVE-2026-22812 |
8.8 (3.1)
|
OpenCode's Unauthenticated HTTP Server Allows Arbitrar… |
anomalyco |
opencode |
2026-01-12T22:49:18.325Z | 2026-01-13T19:07:37.056Z |
| CVE-2025-3892 |
6.7 (3.1)
|
ACAP applications can be executed with elevated p… |
Axis Communications AB |
AXIS OS |
2025-08-12T05:14:43.655Z | 2025-08-14T03:56:10.702Z |
| CVE-2025-30027 |
6.7 (3.1)
|
An ACAP configuration file lacked sufficient inpu… |
Axis Communications AB |
AXIS OS |
2025-08-12T05:18:26.937Z | 2025-08-14T03:56:11.818Z |
| CVE-2025-7622 |
5.1 (4.0)
|
During an internal security assessment, a Server-… |
Axis Communications AB |
AXIS Camera Station Pro |
2025-08-12T05:09:23.834Z | 2025-08-12T17:59:32.228Z |
| CVE-2025-7616 |
5.1 (4.0)
5.5 (3.1)
5.5 (3.0)
|
gmg137 snap7-rs Public API pthread_cond_destroy memory… |
gmg137 |
snap7-rs |
2025-07-14T15:32:12.150Z | 2025-07-15T19:51:27.186Z |
| CVE-2025-55746 |
9.3 (3.1)
|
Directus allows unauthenticated file upload and file m… |
directus |
directus |
2025-08-20T17:58:06.762Z | 2025-08-20T18:20:03.663Z |
| CVE-2025-29903 |
5.2 (3.1)
|
In JetBrains Runtime before 21.0.6b872.80 arbitra… |
JetBrains |
Runtime |
2025-03-12T12:36:15.276Z | 2025-03-12T13:51:16.357Z |
| CVE-2023-53955 |
9.3 (4.0)
9.8 (3.1)
|
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypas… |
SOUND4 Ltd. |
Impact/Pulse/First |
2025-12-22T21:37:15.319Z | 2025-12-22T22:03:50.814Z |
| CVE-2026-22050 |
6.9 (4.0)
|
ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.… |
NETAPP |
ONTAP 9 |
2026-01-12T17:15:07.484Z | 2026-01-13T17:30:51.952Z |
| CVE-2025-66177 |
8.8 (3.1)
|
There is a Stack overflow Vulnerability in the de… |
Hikvision |
DS-96xxxNI-Hx |
2026-01-13T01:47:54.031Z | 2026-01-13T17:27:13.199Z |
| CVE-2025-66176 |
8.8 (3.1)
|
There is a Stack overflow Vulnerability in the de… |
Hikvision |
DS-K1T331 |
2026-01-13T01:47:27.191Z | 2026-01-15T01:56:32.572Z |
| CVE-2025-14333 |
8.1 (3.1)
|
Memory safety bugs fixed in Firefox ESR 140.6, Thunder… |
Mozilla |
Firefox |
2025-12-09T13:38:09.979Z | 2026-01-13T17:28:53.470Z |
| CVE-2025-68457 |
0.6 (4.0)
|
Orejime has executable code in HTML attributes |
boscop-fr |
orejime |
2025-12-19T16:40:30.258Z | 2026-01-13T16:53:35.324Z |
| CVE-2021-36193 |
6.3 (3.1)
|
Multiple stack-based buffer overflows in the comm… |
Fortinet |
FortiFone |
2022-02-02T11:19:47 | 2026-01-13T16:32:40.255Z |
| CVE-2025-0717 |
3.5 (3.1)
|
Social Slider Feed < 2.2.9 - Admin+ Stored XSS |
Unknown |
Social Slider Feed |
2025-03-25T06:00:14.221Z | 2025-03-25T14:14:03.266Z |
| CVE-2025-30610 |
6.5 (3.1)
|
WordPress WP Social Widget - <= <= 2.2.6 Cross Site Sc… |
catchsquare |
WP Social Widget |
2025-03-24T13:47:28.086Z | 2025-03-24T22:00:49.968Z |
| CVE-2024-12010 |
7.2 (3.1)
|
A post-authentication command injection vulnerabi… |
Zyxel |
AX7501-B1 firmware |
2025-03-11T01:44:15.430Z | 2025-03-12T04:00:41.041Z |
| CVE-2025-68665 |
8.6 (3.1)
|
LangChain serialization injection vulnerability enable… |
langchain-ai |
langchainjs |
2025-12-23T22:56:04.837Z | 2025-12-24T14:38:40.268Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-49306 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-06-06T13:15:46.303 | 2026-01-13T20:04:21.693 |
| fkie_cve-2025-43026 | A potential security vulnerability has been identified in the HP Support Assistant for versions pri… | 2025-06-05T20:15:26.067 | 2026-01-13T20:02:40.320 |
| fkie_cve-2025-3461 | The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an inst… | 2025-06-08T21:15:33.030 | 2026-01-13T20:01:27.457 |
| fkie_cve-2025-36573 | Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Informat… | 2025-06-12T16:15:23.003 | 2026-01-13T19:43:45.170 |
| fkie_cve-2025-27689 | Dell iDRAC Tools, version(s) prior to 11.3.0.0, contain(s) an Improper Access Control vulnerability… | 2025-06-12T21:15:20.113 | 2026-01-13T19:41:52.837 |
| fkie_cve-2025-52560 | Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.… | 2025-06-24T03:15:34.653 | 2026-01-13T19:35:51.907 |
| fkie_cve-2023-3852 | A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This… | 2023-07-23T22:15:09.477 | 2026-01-13T19:17:39.980 |
| fkie_cve-2026-22813 | OpenCode is an open source AI coding agent. The markdown renderer used for LLM responses will inser… | 2026-01-12T23:15:53.523 | 2026-01-13T19:16:27.190 |
| fkie_cve-2026-22812 | OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unau… | 2026-01-12T23:15:53.370 | 2026-01-13T19:16:27.083 |
| fkie_cve-2025-3892 | ACAP applications can be executed with elevated privileges, potentially leading to privilege escala… | 2025-08-12T06:15:26.040 | 2026-01-13T18:56:35.630 |
| fkie_cve-2025-30027 | An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code… | 2025-08-12T06:15:25.617 | 2026-01-13T18:54:52.183 |
| fkie_cve-2025-7622 | During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that all… | 2025-08-12T05:15:32.227 | 2026-01-13T18:46:46.573 |
| fkie_cve-2025-7616 | A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1.… | 2025-07-14T16:15:27.377 | 2026-01-13T18:37:16.450 |
| fkie_cve-2025-55746 | Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to bef… | 2025-08-20T18:15:35.183 | 2026-01-13T18:29:53.387 |
| fkie_cve-2025-29903 | In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS… | 2025-03-12T13:15:37.823 | 2026-01-13T18:28:52.163 |
| fkie_cve-2023-53955 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that … | 2025-12-22T22:15:59.980 | 2026-01-13T18:23:14.093 |
| fkie_cve-2026-22050 | ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled … | 2026-01-12T18:15:48.983 | 2026-01-13T18:16:25.530 |
| fkie_cve-2025-66177 | There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR… | 2026-01-13T03:16:01.250 | 2026-01-13T18:16:06.193 |
| fkie_cve-2025-66176 | There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Acc… | 2026-01-13T03:16:01.097 | 2026-01-13T18:16:06.060 |
| fkie_cve-2025-14333 | Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird… | 2025-12-09T16:17:40.990 | 2026-01-13T18:16:05.093 |
| fkie_cve-2025-68457 | Orejime is a consent manager that focuses on accessibility. On HTML elements handled by Orejime pri… | 2025-12-19T17:15:53.393 | 2026-01-13T17:15:59.040 |
| fkie_cve-2021-36193 | Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may … | 2022-02-02T12:15:07.977 | 2026-01-13T17:15:55.737 |
| fkie_cve-2025-0717 | To exploit the vulnerability, it is necessary: | 2025-03-25T06:15:40.123 | 2026-01-13T16:23:32.933 |
| fkie_cve-2025-30610 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-03-24T14:15:33.680 | 2026-01-13T16:21:58.863 |
| fkie_cve-2024-12010 | A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel… | 2025-03-11T02:15:10.773 | 2026-01-13T16:19:21.343 |
| fkie_cve-2025-68665 | LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0… | 2025-12-23T23:15:45.097 | 2026-01-13T16:17:22.673 |
| fkie_cve-2024-11253 | A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnosti… | 2025-03-11T02:15:10.043 | 2026-01-13T16:11:20.030 |
| fkie_cve-2025-68664 | LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81… | 2025-12-23T23:15:44.933 | 2026-01-13T15:58:23.373 |
| fkie_cve-2024-12009 | A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1… | 2025-03-11T02:15:10.590 | 2026-01-13T15:54:51.293 |
| fkie_cve-2023-53963 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability t… | 2025-12-22T22:16:00.693 | 2026-01-13T15:42:50.763 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mcph-7hqh-4gc6 |
4.4 (3.1)
|
The Multi-column Tag Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admi… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-m7m9-whjq-j43v |
6.4 (3.1)
|
The Cool YT Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'video… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-hw36-6mpj-328j |
4.3 (3.1)
|
The Simcast plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-h546-gvh8-c9p8 |
6.4 (3.1)
|
The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Store… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-g666-7hq6-674c |
6.4 (3.1)
|
The 1180px Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cl… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-g2wj-p4r7-x5gf |
4.3 (3.1)
|
The Mamurjor Employee Info plugin for WordPress is vulnerable to Cross-Site Request Forgery in all … | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-fgqr-9c4q-7qr8 |
6.4 (3.1)
|
The Wish To Go plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attr… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-9j7c-jg35-gccj |
6.4 (3.1)
|
The Snillrik Restaurant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-9g9p-66m2-jpjj |
6.4 (3.1)
|
The STM Gallery 1.9 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comp… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-7gr4-rjpr-h39f |
6.4 (3.1)
|
The EDD Download Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ed… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-6h9h-22rh-cwhj |
6.4 (3.1)
|
The WP Js List Pages Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-69c5-xxxm-r666 |
6.5 (3.1)
|
The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all ve… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-4xf7-4jcw-7w6g |
6.1 (3.1)
|
The Starred Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the PHP… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-45q3-g2m4-vhg9 |
6.4 (3.1)
|
The PhotoFade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'time' para… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-42hr-36hh-j6c4 |
4.4 (3.1)
|
The Email Customizer for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Script… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-2r8p-4r3c-hw34 |
6.4 (3.1)
|
The Smart App Banners plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'si… | 2026-01-07T12:31:21Z | 2026-01-07T12:31:21Z |
| ghsa-x8rq-m8j4-85pr |
2.7 (3.1)
|
The Rankology SEO and Analytics Tool plugin for WordPress is vulnerable to unauthorized modificatio… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-r66h-95rg-mcj6 |
6.4 (3.1)
|
The Stylish Order Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-pfhj-w78h-ggpc |
8.6 (3.1)
|
The MoneySpace plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-mwqq-jmph-r66g |
4.3 (3.1)
|
The WP Status Notifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-jvgx-vgv6-vgp9 |
5.3 (3.1)
|
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin f… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-gc57-jf4p-c7fv |
4.3 (3.1)
|
The HelpDesk contact form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all v… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-f993-f86j-2hw6 |
5.3 (3.1)
|
The Unify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing … | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-c494-7f9x-6wf4 |
4.3 (3.1)
|
The MTCaptcha WordPress Plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-9m68-hxf3-3w7w |
6.1 (3.1)
|
The Premmerce WooCommerce Customers Manager plugin for WordPress is vulnerable to Reflected Cross-S… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-9559-p8wg-q54v |
5.3 (3.1)
|
The Moosend Landing Pages plugin for WordPress is vulnerable to unauthorized modification of data d… | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-943g-jpq4-jf4f |
5.4 (3.1)
|
The aBlocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modific… | 2026-01-07T12:31:19Z | 2026-01-07T12:31:20Z |
| ghsa-8jxh-xpcf-824x |
5.3 (3.1)
|
The Guest posting / Frontend Posting / Front Editor – WP Front User Submit plugin for WordPress is … | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-7q6w-ggv8-84g7 |
7.5 (3.1)
|
The Latest Registered Users plugin for WordPress is vulnerable to unauthorized user data export in … | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ghsa-6xwp-836r-mc2g |
4.3 (3.1)
|
The xShare plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, … | 2026-01-07T12:31:20Z | 2026-01-07T12:31:20Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2018-95 |
|
An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary … | osxcollector | 2018-06-13T22:29:00Z | 2021-08-27T03:22:09.893229Z |
| pysec-2014-86 |
|
The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo … | oauth2 | 2014-05-20T14:55:00Z | 2021-08-27T03:22:09.666793Z |
| pysec-2014-85 |
|
The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, w… | oauth2 | 2014-05-20T14:55:00Z | 2021-08-27T03:22:09.637359Z |
| pysec-2021-136 |
|
A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending c… | neutron | 2021-05-28T19:15:00Z | 2021-08-27T03:22:08.884816Z |
| pysec-2019-190 |
|
An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.… | neutron | 2019-03-13T02:29:00Z | 2021-08-27T03:22:08.807010Z |
| pysec-2019-189 |
|
An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and … | neutron | 2019-04-05T05:29:00Z | 2021-08-27T03:22:08.705789Z |
| pysec-2018-94 |
|
Live-migrated instances are briefly able to inspect traffic for other instances on the sa… | neutron | 2018-09-10T19:29:00Z | 2021-08-27T03:22:08.615958Z |
| pysec-2018-93 |
|
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and att… | neutron | 2018-09-10T19:29:00Z | 2021-08-27T03:22:08.555558Z |
| pysec-2020-241 |
|
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write perm… | moin | 2020-11-11T16:15:00Z | 2021-08-27T03:22:07.834309Z |
| pysec-2020-240 |
|
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to an… | mistral | 2020-06-15T15:15:00Z | 2021-08-27T03:22:07.520532Z |
| pysec-2019-188 |
|
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subreposito… | mercurial | 2019-04-22T16:29:00Z | 2021-08-27T03:22:07.409198Z |
| pysec-2018-92 |
|
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the … | mistral | 2018-11-02T21:29:00Z | 2021-08-27T03:22:07.552723Z |
| pysec-2018-91 |
|
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a m… | mercurial | 2018-10-04T23:29:00Z | 2021-08-27T03:22:07.367975Z |
| pysec-2018-90 |
|
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situa… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.326002Z |
| pysec-2018-89 |
|
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-2… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.281860Z |
| pysec-2018-88 |
|
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in c… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.239369Z |
| pysec-2018-87 |
|
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerabi… | mercurial | 2018-03-14T13:29:00Z | 2021-08-27T03:22:07.192158Z |
| pysec-2017-91 |
|
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch… | mercurial | 2017-06-06T21:29:00Z | 2021-08-27T03:22:07.149994Z |
| pysec-2017-90 |
|
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause… | mercurial | 2017-12-07T18:29:00Z | 2021-08-27T03:22:07.106645Z |
| pysec-2017-89 |
|
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to po… | mercurial | 2017-10-05T01:29:00Z | 2021-08-27T03:22:07.062416Z |
| pysec-2017-88 |
|
Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can maliciou… | mercurial | 2017-10-05T01:29:00Z | 2021-08-27T03:22:07.021138Z |
| pysec-2016-31 |
|
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using… | moin | 2016-11-10T17:59:00Z | 2021-08-27T03:22:07.805432Z |
| pysec-2016-30 |
|
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using… | moin | 2016-11-10T17:59:00Z | 2021-08-27T03:22:07.777797Z |
| pysec-2010-28 |
|
Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module … | moin | 2010-04-05T15:30:00Z | 2021-08-27T03:22:07.708069Z |
| pysec-2021-135 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-05-11T15:15:00Z | 2021-08-27T03:22:06.756710Z |
| pysec-2021-134 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.710356Z |
| pysec-2021-133 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.660066Z |
| pysec-2021-132 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-02-26T18:15:00Z | 2021-08-27T03:22:06.616674Z |
| pysec-2021-131 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-02-26T18:15:00Z | 2021-08-27T03:22:06.569635Z |
| pysec-2020-239 |
|
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues a… | meinheld | 2020-05-22T16:15:00Z | 2021-08-27T03:22:06.793758Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32164 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.118472Z |
| gsd-2024-32163 | CMSeasy 7.7.7.9 is vulnerable to code execution. | 2024-04-13T05:02:29.035823Z |
| gsd-2024-32162 | CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. | 2024-04-13T05:02:29.116676Z |
| gsd-2024-32161 | jizhiCMS 2.5 suffers from a File upload vulnerability. | 2024-04-13T05:02:29.030360Z |
| gsd-2024-32160 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.065557Z |
| gsd-2024-32159 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.074632Z |
| gsd-2024-32158 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.086840Z |
| gsd-2024-32157 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.032980Z |
| gsd-2024-32156 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.032218Z |
| gsd-2024-32155 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.058740Z |
| gsd-2024-32154 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.079094Z |
| gsd-2024-32153 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.131911Z |
| gsd-2024-3684 | A server side request forgery vulnerability was identified in GitHub Enterprise Server th… | 2024-04-12T05:02:29.275037Z |
| gsd-2024-3683 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.274257Z |
| gsd-2024-3682 | The WP STAGING and WP STAGING Pro plugins for WordPress are vulnerable to Sensitive Infor… | 2024-04-12T05:02:29.292769Z |
| gsd-2024-3681 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.307607Z |
| gsd-2024-3680 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.373611Z |
| gsd-2024-3679 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.286671Z |
| gsd-2024-3678 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to… | 2024-04-12T05:02:29.184693Z |
| gsd-2024-3677 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.212296Z |
| gsd-2024-3676 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.354611Z |
| gsd-2024-3675 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.169103Z |
| gsd-2024-3674 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.368889Z |
| gsd-2024-3673 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.255028Z |
| gsd-2024-3672 | The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2024-04-12T05:02:29.176394Z |
| gsd-2024-3671 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.295959Z |
| gsd-2024-3670 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.308996Z |
| gsd-2024-3669 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.212978Z |
| gsd-2024-3668 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.302178Z |
| gsd-2024-3667 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.125163Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192048 | Malicious code in elf-stats-fuzzy-pantry-827 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192045 | Malicious code in elf-stats-fuzzy-marshmallow-280 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-191982 | Malicious code in elf-stats-ginger-hammer-326 (npm) | 2025-12-03T14:30:46Z | 2025-12-23T20:09:23Z |
| mal-2025-191973 | Malicious code in elf-stats-fuzzy-fir-973 (npm) | 2025-12-03T12:10:56Z | 2025-12-23T20:09:23Z |
| MAL-2025-192508 | Malicious code in elf-stats-jolly-ornament-687 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:09:23Z |
| MAL-2025-192506 | Malicious code in elf-stats-holly-candy-802 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:09:23Z |
| MAL-2025-192505 | Malicious code in elf-stats-gingersnap-mitten-648 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:09:23Z |
| MAL-2025-192504 | Malicious code in elf-stats-ginger-hollyberry-135 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:09:23Z |
| MAL-2025-192282 | Malicious code in elf-stats-joyous-train-754 (npm) | 2025-12-03T19:42:46Z | 2025-12-23T20:09:23Z |
| MAL-2025-192247 | Malicious code in elf-stats-holly-wishlist-355 (npm) | 2025-12-03T18:00:24Z | 2025-12-23T20:09:23Z |
| MAL-2025-192214 | Malicious code in elf-stats-glittering-fir-252 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T20:09:23Z |
| MAL-2025-192213 | Malicious code in elf-stats-gingersnap-ornament-469 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T20:09:23Z |
| MAL-2025-192212 | Malicious code in elf-stats-ginger-reindeer-411 (npm) | 2025-12-03T16:00:57Z | 2025-12-23T20:09:23Z |
| MAL-2025-192082 | Malicious code in elf-stats-marzipan-fir-795 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192080 | Malicious code in elf-stats-marzipan-cookiejar-316 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192076 | Malicious code in elf-stats-lanternlit-fir-106 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192070 | Malicious code in elf-stats-joyous-sled-261 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192067 | Malicious code in elf-stats-joyous-hollyberry-379 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192064 | Malicious code in elf-stats-holly-stockpile-968 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192062 | Malicious code in elf-stats-glittering-wishlist-537 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192061 | Malicious code in elf-stats-glittering-nutcracker-591 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192060 | Malicious code in elf-stats-glittering-marshmallow-217 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192058 | Malicious code in elf-stats-glittering-cookie-772 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192054 | Malicious code in elf-stats-ginger-workshop-948 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192053 | Malicious code in elf-stats-ginger-ledger-106 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192049 | Malicious code in elf-stats-fuzzy-sparkler-922 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192048 | Malicious code in elf-stats-fuzzy-pantry-827 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-192045 | Malicious code in elf-stats-fuzzy-marshmallow-280 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| MAL-2025-191982 | Malicious code in elf-stats-ginger-hammer-326 (npm) | 2025-12-03T14:30:46Z | 2025-12-23T20:09:23Z |
| MAL-2025-191973 | Malicious code in elf-stats-fuzzy-fir-973 (npm) | 2025-12-03T12:10:56Z | 2025-12-23T20:09:23Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0486 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-03-04T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2024-3464 | Mozilla Thunderbird: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-11-13T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2023-2663 | zlib: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-10-16T22:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2022-0116 | OpenVPN: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-03-16T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2025-0505 | ServiceNow Now Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-06T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0504 | HCL BigFix WebUI Applications: Mehrere Schwachstellen | 2025-03-06T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0502 | Docker Desktop: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-06T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0498 | python-crypto: Schwachstelle ermöglicht Offenlegung von Informationen | 2018-02-15T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0487 | Kibana: Schwachstelle ermöglicht Codeausführung | 2025-03-04T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0480 | VMware ESXi: Mehrere Schwachstellen | 2025-03-03T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0449 | GitLab: Mehrere Schwachstellen | 2025-02-26T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2024-3437 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-11-12T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2023-2725 | Squid: Mehrere Schwachstellen | 2023-10-22T22:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2023-1947 | Golang Go: Schwachstelle ermöglicht Denial of Service | 2023-08-02T22:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0494 | Axis Axis OS: Mehrere Schwachstellen | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0493 | Laravel Framework: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0491 | Cisco TelePresence Management Suite: Schwachstelle ermöglicht Cross-Site Scripting | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0490 | Cisco Secure Client: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0489 | Jenkins: Mehrere Schwachstellen | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0488 | IBM FileNet Content Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0354 | GitLab: Mehrere Schwachstellen | 2025-02-11T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0209 | Moxa Switch: Schwachstelle ermöglicht Denial of Service | 2025-01-28T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2024-3066 | Redis: Mehrere Schwachstellen | 2024-10-03T22:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2024-1856 | IBM WebSphere Application Server: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2024-08-14T22:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2024-1678 | Apache CXF: Mehrere Schwachstellen | 2024-07-18T22:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2024-1637 | Oracle Fusion Middleware: Mehrere Schwachstellen | 2024-07-16T22:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0484 | Commvault Backup & Recovery: Schwachstelle ermöglicht Codeausführung | 2025-03-04T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0481 | Pixel Patchday March 2025: Mehrere Schwachstellen | 2025-03-04T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0470 | vim (tar.vim plugin): Schwachstelle ermöglicht Codeausführung | 2025-03-02T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3563 | Jenkins: Mehrere Schwachstellen | 2024-11-27T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0748 | Red Hat Security Advisory: container-tools:4.0 security update | 2024-02-08T18:33:53+00:00 | 2026-01-13T22:51:57+00:00 |
| rhsa-2024:0733 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-02-07T20:46:32+00:00 | 2026-01-13T22:51:57+00:00 |
| rhsa-2024:0728 | Red Hat Security Advisory: Logging Subsystem 5.8.3 - Red Hat OpenShift | 2024-02-08T17:27:13+00:00 | 2026-01-13T22:51:57+00:00 |
| rhsa-2024:0694 | Red Hat Security Advisory: Logging Subsystem 5.7.11 - Red Hat OpenShift | 2024-02-07T18:45:43+00:00 | 2026-01-13T22:51:56+00:00 |
| rhsa-2024:0588 | Red Hat Security Advisory: python-urllib3 security update | 2024-01-30T13:27:51+00:00 | 2026-01-13T22:51:56+00:00 |
| rhsa-2024:0530 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2024-01-25T18:10:36+00:00 | 2026-01-13T22:51:56+00:00 |
| rhsa-2024:0464 | Red Hat Security Advisory: python-urllib3 security update | 2024-01-25T11:05:15+00:00 | 2026-01-13T22:51:56+00:00 |
| rhsa-2024:0322 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-01-22T14:22:42+00:00 | 2026-01-13T22:51:55+00:00 |
| rhsa-2024:0300 | Red Hat Security Advisory: python-urllib3 security update | 2024-01-18T16:31:24+00:00 | 2026-01-13T22:51:55+00:00 |
| rhsa-2024:0293 | Red Hat Security Advisory: OpenShift Container Platform 4.14.10 packages and security update | 2024-01-23T20:42:27+00:00 | 2026-01-13T22:51:55+00:00 |
| rhsa-2024:0292 | Red Hat Security Advisory: OpenShift Container Platform 4.14.10 security update | 2024-01-23T21:41:52+00:00 | 2026-01-13T22:51:55+00:00 |
| rhsa-2024:0281 | Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.2.1 for RHEL 9 | 2024-03-06T14:39:54+00:00 | 2026-01-13T22:51:55+00:00 |
| rhsa-2024:0215 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (GitPython) security update | 2024-01-16T14:33:02+00:00 | 2026-01-13T22:51:54+00:00 |
| rhsa-2024:0190 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (GitPython) security update | 2024-01-16T14:36:37+00:00 | 2026-01-13T22:51:54+00:00 |
| rhsa-2024:0187 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-urllib3) security update | 2024-01-16T14:36:17+00:00 | 2026-01-13T22:51:53+00:00 |
| rhsa-2024:0133 | Red Hat Security Advisory: fence-agents security update | 2024-01-10T12:07:58+00:00 | 2026-01-13T22:51:53+00:00 |
| rhsa-2023:7762 | Red Hat Security Advisory: skopeo security update | 2023-12-12T17:30:03+00:00 | 2026-01-13T22:51:53+00:00 |
| rhsa-2024:0121 | Red Hat Security Advisory: container-tools:4.0 security update | 2024-01-10T11:36:02+00:00 | 2026-01-13T22:51:52+00:00 |
| rhsa-2024:0116 | Red Hat Security Advisory: python-urllib3 security update | 2024-01-10T10:50:46+00:00 | 2026-01-13T22:51:52+00:00 |
| rhsa-2023:7851 | Red Hat Security Advisory: Satellite 6.14.1 Async Security Update | 2023-12-14T16:30:08+00:00 | 2026-01-13T22:51:52+00:00 |
| rhsa-2023:7528 | Red Hat Security Advisory: fence-agents security update | 2023-11-28T15:39:44+00:00 | 2026-01-13T22:51:52+00:00 |
| rhsa-2023:7766 | Red Hat Security Advisory: containernetworking-plugins security update | 2023-12-12T17:25:07+00:00 | 2026-01-13T22:51:51+00:00 |
| rhsa-2023:7765 | Red Hat Security Advisory: podman security update | 2023-12-12T17:24:49+00:00 | 2026-01-13T22:51:51+00:00 |
| rhsa-2023:7764 | Red Hat Security Advisory: buildah security update | 2023-12-12T17:29:16+00:00 | 2026-01-13T22:51:50+00:00 |
| rhsa-2023:7763 | Red Hat Security Advisory: runc security update | 2023-12-12T17:25:05+00:00 | 2026-01-13T22:51:50+00:00 |
| rhsa-2023:7753 | Red Hat Security Advisory: fence-agents security update | 2023-12-12T17:25:56+00:00 | 2026-01-13T22:51:49+00:00 |
| rhsa-2023:7523 | Red Hat Security Advisory: fence-agents security update | 2023-11-28T15:32:41+00:00 | 2026-01-13T22:51:49+00:00 |
| rhsa-2023:3613 | Red Hat Security Advisory: OpenShift Container Platform 4.12.22 packages and security update | 2023-06-26T01:19:15+00:00 | 2026-01-13T22:51:49+00:00 |
| rhsa-2023:7517 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2023-11-27T19:31:55+00:00 | 2026-01-13T22:51:48+00:00 |
| rhsa-2023:7435 | Red Hat Security Advisory: fence-agents security update | 2023-11-21T15:34:29+00:00 | 2026-01-13T22:51:48+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-172-05 | Phoenix Contact Classic Line Industrial Controllers | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-04 | Phoenix Contact ProConOS and MULTIPROG | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-03 | Phoenix Contact Classic Line Controllers | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-02 | JTEKT TOYOPUC | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsma-22-167-01 | Hillrom Medical Device Management | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-03 | AutomationDirect DirectLOGIC with Ethernet | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-02 | AutomationDirect DirectLOGIC with Serial Communication | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-01 | AutomationDirect C-More EA9 HMI | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-132-10 | Siemens Desigo PXC and DXR Devices | 2022-05-12T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-20-014-05 | Siemens TIA Portal (Update F) | 2020-01-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-16 | Siemens SCALANCE LPE 4903 and SINUMERIK Edge | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-15 | Siemens Teamcenter Active Workspace | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-12 | Siemens Spectrum Power Systems | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-10 | Siemens SCALANCE XM-400 and XR-500 | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-09 | Siemens SCALANCE LPE9403 Third-Party Vulnerabilities | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-07 | Siemens SINEMA Remote Connect Server | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-05 | Siemens EN100 Ethernet Module | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-04 | Siemens Mendix SAML Module | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-165-03 | Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-165-02 | Meridian Cooperative Meridian | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-165-01 | Johnson Controls Metasys ADS ADX OAS Servers | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-041-07 | Siemens Solid Edge, JT2Go, and Teamcenter Visualization | 2022-02-08T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-21-257-06 | Siemens SIMATIC CP (Update A) | 2021-09-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-21-222-07 | Siemens SIMATIC CP (Update A) | 2021-08-10T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-17-285-05 | Siemens BACnet Field Panels (Update A) | 2017-10-12T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-160-01 | Mitsubishi Electric Air Conditioning Systems | 2022-06-09T00:00:00.000000Z | 2022-06-09T00:00:00.000000Z |
| icsa-22-154-01 | Vulnerabilities Affecting Dominion Voting Systems ImageCast X | 2022-06-03T00:00:00.000000Z | 2022-06-03T00:00:00.000000Z |
| icsa-22-153-01 | Carrier LenelS2 HID Mercury access panels | 2022-06-02T00:00:00.000000Z | 2022-06-02T00:00:00.000000Z |
| icsma-22-151-02 | BD Synapsys | 2022-05-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsma-22-151-01 | BD Pyxis | 2022-05-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asaftd-ftpbypass-hy3utxyu | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:09+00:00 |
| cisco-sa-asaftd-ftpbypass-HY3UTxYu | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:09+00:00 |
| cisco-sa-asaftd-frag-memleak-mctqdp9n | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:05+00:00 |
| cisco-sa-asaftd-frag-memleak-mCtqdP9n | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:05+00:00 |
| cisco-sa-asaftd-fileup-dos-zvc7wtys | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:04+00:00 |
| cisco-sa-asaftd-fileup-dos-zvC7wtys | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:04+00:00 |
| cisco-sa-asaftd-webdos-fbzm5ynw | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-webdos-fBzM5Ynw | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-sslvpndma-dos-hrrqb9yx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-sslvpndma-dos-HRrqB9Yx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-ospflls-37xy2q6r | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:55+00:00 |
| cisco-sa-asaftd-ospflls-37Xy2q6r | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:55+00:00 |
| cisco-sa-asaftd-rule-bypass-p73abnwq | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:54+00:00 |
| cisco-sa-asaftd-rule-bypass-P73ABNWQ | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:54+00:00 |
| cisco-sa-asa-ftd-tcp-dos-n3dmnu4t | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-22T23:49:39+00:00 |
| cisco-sa-asa-ftd-tcp-dos-N3DMnU4T | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-22T23:49:39+00:00 |
| cisco-sa-tcp-intercept-bypass-xg9m3pby | Cisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-tcp-intercept-bypass-xG9M3PbY | Cisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxosfcm-csrf-uho4e5bz | Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxosfcm-csrf-uhO4e5BZ | Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-sbbp-xtupkytn | Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-sbbp-XTuPkYTn | Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-cmdinj-b63rwkpm | Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-cmdinj-b63rwKPm | Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-sft-mitm-tc8azfs2 | Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-sft-mitm-tc8AzFs2 | Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dos-njyvdcla | Cisco Firepower Management Center Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dos-NjYvDcLA | Cisco Firepower Management Center Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dirtrav-nw8xcusb | Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dirtrav-NW8XcuSB | Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38604 | wifi: rtl818x: Kill URBs before clearing tx status queue | 2025-08-02T00:00:00.000Z | 2025-09-04T02:44:21.000Z |
| msrc_cve-2017-7718 | hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions. | 2017-04-02T00:00:00.000Z | 2025-09-04T02:42:31.000Z |
| msrc_cve-2025-7207 | mruby nregs codegen.c scope_new heap-based overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T02:39:43.000Z |
| msrc_cve-2025-38579 | f2fs: fix KMSAN uninit-value in extent_info usage | 2025-08-02T00:00:00.000Z | 2025-09-04T02:39:27.000Z |
| msrc_cve-2019-14196 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:36:43.000Z |
| msrc_cve-2025-38602 | iwlwifi: Add missing check for alloc_ordered_workqueue | 2025-08-02T00:00:00.000Z | 2025-09-04T02:35:35.000Z |
| msrc_cve-2024-26886 | Bluetooth: af_bluetooth: Fix deadlock | 2024-04-02T07:00:00.000Z | 2025-09-04T02:33:42.000Z |
| msrc_cve-2025-8194 | Tarfile infinite loop during parsing with negative member offset | 2025-07-02T00:00:00.000Z | 2025-09-04T02:31:30.000Z |
| msrc_cve-2020-36476 | An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory. | 2021-08-02T00:00:00.000Z | 2025-09-04T02:31:03.000Z |
| msrc_cve-2024-46748 | cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT | 2024-09-01T07:00:00.000Z | 2025-09-04T02:30:35.000Z |
| msrc_cve-2023-24537 | Infinite loop in parsing in go/scanner | 2023-04-01T00:00:00.000Z | 2025-09-04T02:29:22.000Z |
| msrc_cve-2025-38553 | net/sched: Restrict conditions for adding duplicating netems to qdisc tree | 2025-08-02T00:00:00.000Z | 2025-09-04T02:28:56.000Z |
| msrc_cve-2025-54409 | AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS) | 2025-08-02T00:00:00.000Z | 2025-09-04T02:25:53.000Z |
| msrc_cve-2019-14202 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:25:42.000Z |
| msrc_cve-2025-37744 | wifi: ath12k: fix memory leak in ath12k_pci_remove() | 2025-05-02T00:00:00.000Z | 2025-09-04T02:23:35.000Z |
| msrc_cve-2025-38070 | ASoC: sma1307: Add NULL check in sma1307_setting_loaded() | 2025-06-02T00:00:00.000Z | 2025-09-04T02:22:58.000Z |
| msrc_cve-2025-8176 | LibTIFF tiffmedian.c get_histogram use after free | 2025-07-02T00:00:00.000Z | 2025-09-04T02:22:03.000Z |
| msrc_cve-2025-37976 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2025-05-02T00:00:00.000Z | 2025-09-04T02:20:05.000Z |
| msrc_cve-2019-14195 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:20:01.000Z |
| msrc_cve-2022-48646 | sfc/siena: fix null pointer dereference in efx_hard_start_xmit | 2024-04-02T07:00:00.000Z | 2025-09-04T02:19:35.000Z |
| msrc_cve-2025-8177 | LibTIFF thumbnail.c setrow buffer overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T02:16:00.000Z |
| msrc_cve-2024-26945 | crypto: iaa - Fix nr_cpus < nr_iaa case | 2024-05-02T07:00:00.000Z | 2025-09-04T02:15:11.000Z |
| msrc_cve-2025-38520 | drm/amdkfd: Don't call mmput from MMU notifier callback | 2025-08-02T00:00:00.000Z | 2025-09-04T02:14:26.000Z |
| msrc_cve-2025-3416 | Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` | 2025-04-02T00:00:00.000Z | 2025-09-04T02:13:49.000Z |
| msrc_cve-2024-53147 | exfat: fix out-of-bounds access of directory entries | 2024-12-02T00:00:00.000Z | 2025-09-04T02:13:09.000Z |
| msrc_cve-2025-38501 | ksmbd: limit repeated connections from clients with the same IP | 2025-08-02T00:00:00.000Z | 2025-09-04T02:11:25.000Z |
| msrc_cve-2022-48666 | scsi: core: Fix a use-after-free | 2024-04-02T07:00:00.000Z | 2025-09-04T02:11:15.000Z |
| msrc_cve-2025-21817 | block: mark GFP_NOIO around sysfs ->store() | 2025-02-02T00:00:00.000Z | 2025-09-04T02:10:59.000Z |
| msrc_cve-2025-8197 | Rejected reason: Maintainers have included reasons at https://gitlab.gnome.org/GNOME/libsoup/-/issues/465 | 2025-07-02T00:00:00.000Z | 2025-09-04T02:10:57.000Z |
| msrc_cve-2023-29409 | Large RSA keys can cause high CPU usage in crypto/tls | 2023-08-01T00:00:00.000Z | 2025-09-04T02:10:32.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202211-1696 | Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, whi… | 2024-04-27T11:57:39.547000Z |
| var-202211-1695 | Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may l… | 2024-04-27T11:57:39.661000Z |
| var-202211-1694 | Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead t… | 2024-04-27T11:57:39.635000Z |
| var-202107-1421 | A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (A… | 2024-04-26T10:58:15.919000Z |
| var-200505-0609 | Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service … | 2024-04-26T10:44:27.129000Z |
| var-202403-2157 | A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due t… | 2024-04-20T23:23:33.360000Z |
| var-202404-0165 | SIMATIC PCS 7 is a process control system. SIMATIC WinCC is an automated supervisory cont… | 2024-04-20T23:23:18.968000Z |
| var-202403-2357 | A memory buffer vulnerability in Rockwell Automation Arena Simulation software could pot… | 2024-04-20T23:19:06.927000Z |
| var-201409-0173 | The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP communi… | 2024-04-20T23:18:01.803000Z |
| var-202403-2758 | An uninitialized pointer in Rockwell Automation Arena Simulation software could potentia… | 2024-04-20T23:17:49.371000Z |
| var-201807-0057 | Processing malformed SOAP messages when performing the HNAP Login action causes a buffer … | 2024-04-20T23:17:14.127000Z |
| var-201712-0130 | Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 con… | 2024-04-20T23:17:14.088000Z |
| var-202403-3014 | Technicolor TC8715D TC8715D-01.EF.04.38.00-180405-S-FF9-D RSE-TC8717T devices allow a rem… | 2024-04-20T23:05:59.994000Z |
| var-201204-0037 | RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password … | 2024-04-20T23:04:08.913000Z |
| var-202006-1646 | A memory consumption issue was addressed with improved memory handling. This issue is fix… | 2024-04-20T23:03:00.743000Z |
| var-201403-0506 | The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "ma… | 2024-04-20T19:59:14.400000Z |
| var-200110-0342 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-04-20T19:49:59.696000Z |
| var-202002-0036 | Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Sy… | 2024-04-20T19:49:44.965000Z |
| var-201703-0755 | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.… | 2024-04-19T23:01:51.687000Z |
| var-201501-0774 | plural UEFI In the system, EFI S3 Resume Boot Path Used in boot script Does not properly … | 2024-04-19T23:01:21.735000Z |
| var-201811-0173 | A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adapt… | 2024-04-19T22:59:46.206000Z |
| var-202401-2573 | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler … | 2024-04-19T22:57:46.120000Z |
| var-201502-0200 | D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary… | 2024-04-19T22:57:38.149000Z |
| var-201501-0762 | BIOS As a locking mechanism BIOS_CNTL.BIOSWE When BIOS_CNTL.BLE Use only Intel Corporatio… | 2024-04-19T22:57:38.199000Z |
| var-201602-0071 | Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7… | 2024-04-19T22:56:33.440000Z |
| var-201503-0067 | Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc10… | 2024-04-19T22:56:33.838000Z |
| var-201306-0355 | ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax mod… | 2024-04-19T22:55:29.087000Z |
| var-201411-0154 | The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows … | 2024-04-19T22:55:28.224000Z |
| var-201504-0559 | HP Network Automation Has multiple vulnerabilities in the web administration screen. HP N… | 2024-04-19T22:55:06.850000Z |
| var-201705-3474 | An unprivileged network attacker could gain system privileges to provisioned Intel manage… | 2024-04-19T22:55:05.789000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000061 | WEB PATIO vulnerable to cross-site scripting | 2012-06-19T14:31+09:00 | 2012-06-19T14:31+09:00 |
| jvndb-2012-000060 | SmallPICT vulnerable to cross-site scripting | 2012-06-19T14:00+09:00 | 2012-06-19T14:00+09:00 |
| jvndb-2012-000062 | WEB PATIO vulnerable to cross-site scripting | 2012-06-19T12:35+09:00 | 2012-06-19T12:35+09:00 |
| jvndb-2012-000057 | Dolphin Browser vulnerable in the WebView class | 2012-06-14T14:20+09:00 | 2012-06-14T14:20+09:00 |
| jvndb-2012-000046 | Flash Player issue in implementations of the Same Origin Policy | 2012-06-11T15:05+09:00 | 2012-06-13T16:39+09:00 |
| jvndb-2012-000056 | FeedDemon vulnerable to arbitrary script execution | 2012-06-07T15:39+09:00 | 2012-06-07T15:39+09:00 |
| jvndb-2012-000059 | SEIL series fail to restrict access permissions | 2012-06-06T12:39+09:00 | 2012-06-06T12:39+09:00 |
| jvndb-2012-000058 | WordPress plugin WassUp vulnerable to cross-site scripting | 2012-06-06T12:29+09:00 | 2012-06-06T12:29+09:00 |
| jvndb-2012-000055 | @WEB ShoppingCart vulnerable to cross-site scripting | 2012-06-05T14:04+09:00 | 2012-06-05T14:04+09:00 |
| jvndb-2012-000054 | Puella Magi Madoka Magica iP for Android vulnerable to information disclosure | 2012-06-01T14:09+09:00 | 2012-06-01T14:09+09:00 |
| jvndb-2012-000053 | Segue vulnerable to SQL injection | 2012-06-01T14:06+09:00 | 2012-06-01T14:06+09:00 |
| jvndb-2012-000052 | Segue vulnerable to cross-site scripting | 2012-06-01T14:03+09:00 | 2012-06-01T14:03+09:00 |
| jvndb-2012-000051 | Logitec LAN-W300N/R series fails to restrict access permissions | 2012-05-25T15:50+09:00 | 2012-05-25T15:50+09:00 |
| jvndb-2012-000050 | Roundcube Webmail vulnerable to cross-site scripting | 2012-05-25T15:43+09:00 | 2012-05-25T15:43+09:00 |
| jvndb-2012-000048 | RSSOwl vulnerable to arbitrary script execution | 2012-05-25T15:37+09:00 | 2012-05-25T15:37+09:00 |
| jvndb-2012-000047 | Sybase EAServer vulnerable to cross-site scripting | 2012-05-25T15:34+09:00 | 2012-05-25T15:34+09:00 |
| jvndb-2012-000044 | iLunascape for Android vulnerable in the WebView class | 2012-05-21T13:56+09:00 | 2012-05-21T13:56+09:00 |
| jvndb-2012-000045 | Drupal Form API fails to validate the redirect URL | 2012-05-17T13:55+09:00 | 2012-05-17T13:55+09:00 |
| jvndb-2012-000043 | baserCMS vulnerable to session management | 2012-05-15T16:56+09:00 | 2012-05-15T16:56+09:00 |
| jvndb-2012-000042 | WEB MART from KENT-WEB vulnerable to cross-site scripting | 2012-05-15T16:53+09:00 | 2012-05-15T16:53+09:00 |
| jvndb-2012-000041 | WEB MART from KENT-WEB vulnerable to cross-site scripting | 2012-05-15T16:44+09:00 | 2012-05-15T16:44+09:00 |
| jvndb-2012-002377 | Arbitrary Code Execution Vulnerability in Hitachi COBOL GUI Option on Windows | 2012-05-15T15:14+09:00 | 2012-05-15T15:14+09:00 |
| jvndb-2012-000035 | Multiple JustSystems products vulnerable to buffer overflow | 2012-04-24T13:37+09:00 | 2012-05-09T19:49+09:00 |
| jvndb-2012-000005 | osCommerce vulnerable to cross-site scripting | 2012-01-20T16:15+09:00 | 2012-04-26T16:58+09:00 |
| jvndb-2012-000037 | sp mode mail issue in the verification of SSL certificates | 2012-04-26T14:21+09:00 | 2012-04-26T14:21+09:00 |
| jvndb-2012-000036 | OSQA vulnerable to cross-site scripting | 2012-04-26T14:15+09:00 | 2012-04-26T14:15+09:00 |
| jvndb-2012-000034 | Multiple JustSystems products may insecurely load dynamic libraries | 2012-04-24T13:36+09:00 | 2012-04-24T13:36+09:00 |
| jvndb-2012-000033 | TwitRocker2 (Android version) vulnerable in the WebView class | 2012-04-20T12:21+09:00 | 2012-04-20T12:21+09:00 |
| jvndb-2012-000031 | ActiveScriptRuby vulnerable to arbitrary Ruby script execution | 2012-04-13T14:08+09:00 | 2012-04-13T14:08+09:00 |
| jvndb-2012-000032 | Dokodemo Rikunabi 2013 vulnerable to cross-site scripting | 2012-04-13T14:03+09:00 | 2012-04-13T14:03+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20327-1 | Security update for nvidia-open-driver-G06-signed | 2025-05-15T15:59:38Z | 2025-05-15T15:59:38Z |
| suse-su-2025:20319-1 | Security update for nvidia-open-driver-G06-signed | 2025-05-15T15:59:38Z | 2025-05-15T15:59:38Z |
| suse-su-2025:1559-1 | Security update for audiofile | 2025-05-15T11:19:22Z | 2025-05-15T11:19:22Z |
| suse-su-2025:20325-1 | Security update for wget | 2025-05-15T09:44:44Z | 2025-05-15T09:44:44Z |
| suse-su-2025:0613-3 | Security update for openssl-1_1 | 2025-05-15T08:51:28Z | 2025-05-15T08:51:28Z |
| suse-su-2025:0613-2 | Security update for openssl-1_1 | 2025-05-15T08:51:28Z | 2025-05-15T08:51:28Z |
| suse-su-2025:1555-1 | Security update for go1.22-openssl | 2025-05-15T05:05:53Z | 2025-05-15T05:05:53Z |
| suse-su-2025:1551-1 | Security update for go1.24 | 2025-05-14T17:06:11Z | 2025-05-14T17:06:11Z |
| suse-su-2025:1549-1 | Security update for apparmor | 2025-05-14T09:06:45Z | 2025-05-14T09:06:45Z |
| suse-su-2025:1548-1 | Security update for rabbitmq-server313 | 2025-05-14T08:25:17Z | 2025-05-14T08:25:17Z |
| suse-su-2025:20311-1 | Security update for expat | 2025-05-13T13:37:27Z | 2025-05-13T13:37:27Z |
| suse-su-2025:20310-1 | Security update for freetype2 | 2025-05-13T13:33:23Z | 2025-05-13T13:33:23Z |
| suse-su-2025:1546-1 | Security update for gimp | 2025-05-13T12:37:05Z | 2025-05-13T12:37:05Z |
| suse-su-2025:1540-1 | Security update for transfig | 2025-05-13T08:54:18Z | 2025-05-13T08:54:18Z |
| suse-su-2025:1537-1 | Security update for tomcat10 | 2025-05-13T02:49:09Z | 2025-05-13T02:49:09Z |
| suse-su-2025:1534-1 | Security update for augeas | 2025-05-12T16:01:01Z | 2025-05-12T16:01:01Z |
| suse-su-2025:20308-1 | Security update for avahi | 2025-05-12T14:34:04Z | 2025-05-12T14:34:04Z |
| suse-su-2025:20318-1 | Security update for glib2 | 2025-05-12T09:55:56Z | 2025-05-12T09:55:56Z |
| suse-su-2025:20307-1 | Security update for ca-certificates-mozilla | 2025-05-12T09:14:56Z | 2025-05-12T09:14:56Z |
| suse-su-2025:1528-1 | Security update for freetype2 | 2025-05-09T17:49:06Z | 2025-05-09T17:49:06Z |
| suse-su-2025:1525-1 | Security update for java-1_8_0-openjdk | 2025-05-09T11:30:10Z | 2025-05-09T11:30:10Z |
| suse-su-2025:1524-1 | Security update for java-1_8_0-openjdk | 2025-05-09T11:29:07Z | 2025-05-09T11:29:07Z |
| suse-su-2025:1523-1 | Security update for python-Django | 2025-05-09T11:27:25Z | 2025-05-09T11:27:25Z |
| suse-su-2025:1522-1 | Security update for wireshark | 2025-05-09T09:34:27Z | 2025-05-09T09:34:27Z |
| suse-su-2025:1521-1 | Security update for tomcat | 2025-05-09T04:56:27Z | 2025-05-09T04:56:27Z |
| suse-su-2025:1520-1 | Security update for govulncheck-vulndb | 2025-05-09T01:08:21Z | 2025-05-09T01:08:21Z |
| suse-su-2025:1519-1 | Security update for libsoup | 2025-05-09T00:07:45Z | 2025-05-09T00:07:45Z |
| suse-su-2025:1518-1 | Security update for libsoup | 2025-05-08T19:35:59Z | 2025-05-08T19:35:59Z |
| suse-su-2025:1517-1 | Security update for apparmor | 2025-05-08T19:35:48Z | 2025-05-08T19:35:48Z |
| suse-su-2025:1516-1 | Security update for openssl-3 | 2025-05-08T13:17:46Z | 2025-05-08T13:17:46Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13690-1 | libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13689-1 | docker-24.0.7_ce-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13688-1 | buildkit-0.12.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13687-1 | bind-9.18.24-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13686-1 | python310-FontTools-4.47.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13685-1 | hugin-2023.0.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13684-1 | python310-fastapi-0.109.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13683-1 | libIex-3_1-30-32bit-3.1.11-1.3 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13682-1 | python310-uamqp-1.6.8-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13681-1 | php-composer2-2.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13680-1 | pdns-recursor-5.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13679-1 | java-1_8_0-openj9-1.8.0.402-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13678-1 | java-17-openj9-17.0.10.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13677-1 | java-11-openj9-11.0.22.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13676-1 | libxml2-2-2.11.6-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13675-1 | libgit2-1_7-1.7.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13674-1 | python310-oletools-0.60.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13673-1 | python310-Django-4.2.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13672-1 | libecpg6-16.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13671-1 | postgresql15-15.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13670-1 | postgresql14-14.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13669-1 | postgresql13-13.14-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13668-1 | postgresql12-12.18-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13667-1 | pgadmin4-8.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13666-1 | gsasl-2.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13665-1 | libsystemd0-254.8-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13664-1 | python310-python-multipart-0.0.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13663-1 | libopenssl-3-devel-3.1.4-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13662-1 | libopenssl-1_1-devel-1.1.1w-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13661-1 | libgit2-1_7-1.7.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24160 | AVEVA eDNA Enterprise Data Historian SQL注入漏洞（CNVD-2025-24160） | 2020-09-12 | 2025-10-17 |
| cnvd-2025-24159 | Rockwell Automation Enhanced HIM跨站点请求伪造漏洞 | 2023-07-13 | 2025-10-17 |
| cnvd-2025-24158 | Project Monitoring System跨站脚本漏洞 | 2025-09-29 | 2025-10-17 |
| cnvd-2025-24157 | Project Monitoring System login.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-17 |
| cnvd-2025-24156 | Project Monitoring System useredit.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24155 | Online Complaint Site state.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24154 | Online Complaint Site register-complaint.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24153 | Tenda AC7 /goform/SetUpnpCfg文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24152 | Tenda AC7 /goform/setNotUpgrade文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24151 | Tenda AC7 /goform/SetDDNSCfg文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24150 | Tenda AC7 /goform/saveAutoQos文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24149 | Tenda AC7 /goform/fast_setting_pppoe_set文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24148 | Juniper Networks Junos OS Evolved操作系统命令注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24147 | ERPNext跨站脚本漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24146 | Fortinet FortiPAM操作系统命令注入漏洞（CNVD-2025-24146） | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24145 | Fortinet FortiOS访问控制错误漏洞（CNVD-2025-24145） | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24144 | fortinet FortiAnalyzer竞争条件问题漏洞 | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24143 | fortinet FortiOS资源管理错误漏洞（CNVD-2025-24143） | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24142 | fortinet FortiADC信息泄露漏洞 | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24141 | Hospital Management System user-login.php文件SQL注入漏洞 | 2024-09-09 | 2025-10-17 |
| cnvd-2025-24140 | Hospital Management System check_availability.php文件SQL注入漏洞 | 2024-09-20 | 2025-10-17 |
| cnvd-2025-24139 | Hospital Management System change-password.php页面SQL注入漏洞 | 2024-10-23 | 2025-10-17 |
| cnvd-2025-24138 | Hospital Management System add-doctor.php文件SQL注入漏洞 | 2024-10-28 | 2025-10-17 |
| cnvd-2025-24137 | Hospital Management System index.php文件SQL注入漏洞 | 2024-12-27 | 2025-10-17 |
| cnvd-2025-24136 | Hospital Management System manage-doctors.php文件跨站脚本漏洞 | 2024-12-30 | 2025-10-17 |
| cnvd-2025-24135 | Hospital Management System doctor-specilization.php文件SQL注入漏洞 | 2025-04-09 | 2025-10-17 |
| cnvd-2025-24134 | Hospital Management System session函数硬编码密钥漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24133 | E-Banking System SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24132 | Online Bidding System wew.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-17 |
| cnvd-2025-24131 | Online Bidding System bidlist.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-17 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0006 | Multiples vulnérabilités dans LibreOffice | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0005 | Vulnérabilité dans Google Pixel | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0004 | Multiples vulnérabilités dans Google Android | 2025-01-07T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| CERTFR-2025-AVI-0004 | Multiples vulnérabilités dans Google Android | 2025-01-07T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| certfr-2025-avi-0002 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-01-03T00:00:00.000000 | 2025-01-06T00:00:00.000000 |
| CERTFR-2025-AVI-0002 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-01-03T00:00:00.000000 | 2025-01-06T00:00:00.000000 |
| certfr-2025-avi-0003 | Multiples vulnérabilités dans les produits IBM | 2025-01-03T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| certfr-2025-avi-0001 | Multiples vulnérabilités dans les produits Moxa | 2025-01-03T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| CERTFR-2025-AVI-0003 | Multiples vulnérabilités dans les produits IBM | 2025-01-03T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| CERTFR-2025-AVI-0001 | Multiples vulnérabilités dans les produits Moxa | 2025-01-03T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| certfr-2024-avi-1110 | Multiples vulnérabilités dans le greffon Security QRadar Log Management AQL de IBM | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| certfr-2024-avi-1109 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| certfr-2024-avi-1108 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| certfr-2024-avi-1107 | Vulnérabilité dans les produits Palo Alto Networks | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| CERTFR-2024-AVI-1110 | Multiples vulnérabilités dans le greffon Security QRadar Log Management AQL de IBM | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| CERTFR-2024-AVI-1109 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| CERTFR-2024-AVI-1108 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| CERTFR-2024-AVI-1107 | Vulnérabilité dans les produits Palo Alto Networks | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| certfr-2024-avi-1106 | Vulnérabilité dans Adobe ColdFusion | 2024-12-24T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| certfr-2024-avi-1091 | Multiples vulnérabilités dans Apache Tomcat | 2024-12-18T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| CERTFR-2024-AVI-1106 | Vulnérabilité dans Adobe ColdFusion | 2024-12-24T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| CERTFR-2024-AVI-1091 | Multiples vulnérabilités dans Apache Tomcat | 2024-12-18T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| certfr-2024-avi-1105 | Multiples vulnérabilités dans Tenable Security Center | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |
| certfr-2024-avi-1104 | Vulnérabilité dans les produits NetApp | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |
| CERTFR-2024-AVI-1105 | Multiples vulnérabilités dans Tenable Security Center | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |
| CERTFR-2024-AVI-1104 | Vulnérabilité dans les produits NetApp | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |
| certfr-2024-avi-1103 | Multiples vulnérabilités dans les produits IBM | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1102 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1101 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1100 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |