Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-61937 |
10 (3.1)
10 (4.0)
|
AVEVA Process Optimization Code Injection |
AVEVA |
Process Optimization |
2026-01-16T00:04:37.128Z | 2026-01-16T15:10:11.404Z |
| CVE-2025-61943 |
8.4 (3.1)
9.3 (4.0)
|
AVEVA Process Optimization SQL Injection |
AVEVA |
Process Optimization |
2026-01-16T00:09:18.629Z | 2026-01-16T15:06:06.845Z |
| CVE-2025-67823 |
8.2 (3.1)
|
A vulnerability in the Multimedia Email component… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-16T15:02:06.780Z |
| CVE-2025-67822 |
9.4 (3.1)
|
A vulnerability in the Provisioning Manager compo… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-16T14:59:20.630Z |
| CVE-2025-64729 |
8.1 (3.1)
8.6 (4.0)
|
AVEVA Process Optimization Missing Authorization |
AVEVA |
Process Optimization |
2026-01-16T00:12:45.798Z | 2026-01-16T14:53:45.166Z |
| CVE-2025-65117 |
7.4 (3.1)
8.5 (4.0)
|
AVEVA Process Optimization Use of Potentially Dangerou… |
AVEVA |
Process Optimization |
2026-01-16T00:14:27.567Z | 2026-01-16T14:53:13.050Z |
| CVE-2025-64769 |
7.1 (3.1)
7.6 (4.0)
|
AVEVA Process Optimization Cleartext Transmission of S… |
AVEVA |
Process Optimization |
2026-01-16T00:16:48.949Z | 2026-01-16T14:52:30.496Z |
| CVE-2025-62582 |
9.8 (3.1)
|
DIAView - Authentication Bypass Vulnerability |
Delta Electronics |
DIAView |
2026-01-16T02:03:22.030Z | 2026-01-16T14:51:10.087Z |
| CVE-2025-58754 |
7.5 (3.1)
|
Axios is vulnerable to DoS attack through lack of data… |
axios |
axios |
2025-09-12T01:16:40.513Z | 2026-01-16T14:50:09.107Z |
| CVE-2025-62581 |
9.8 (3.1)
|
DIAView - Authentication Bypass Vulnerability |
Delta Electronics |
DIAView |
2026-01-16T02:20:04.063Z | 2026-01-16T14:49:48.432Z |
| CVE-2026-1018 |
8.7 (4.0)
7.5 (3.1)
|
Gotac｜Police Statistics Database System - Arbitrary Fi… |
Gotac |
Police Statistics Database System |
2026-01-16T02:32:48.394Z | 2026-01-16T14:48:17.711Z |
| CVE-2026-1019 |
9.3 (4.0)
9.8 (3.1)
|
Gotac｜Police Statistics Database System - Missing Auth… |
Gotac |
Police Statistics Database System |
2026-01-16T02:48:47.077Z | 2026-01-16T14:45:08.512Z |
| CVE-2025-15370 |
4.3 (3.1)
|
Shield Security <= 21.0.9 - Authenticated (Subscriber+… |
paultgoodchild |
Shield: Blocks Bots, Protects Users, and Prevents Security Breaches |
2026-01-16T04:44:35.383Z | 2026-01-16T14:44:37.016Z |
| CVE-2026-1020 |
6.9 (4.0)
5.3 (3.1)
|
Gotac｜Police Statistics Database System - Absolute Pat… |
Gotac |
Police Statistics Database System |
2026-01-16T02:57:08.356Z | 2026-01-16T14:42:29.836Z |
| CVE-2026-1021 |
9.3 (4.0)
9.8 (3.1)
|
Gotac｜Police Statistics Database System - Arbitrary Fi… |
Gotac |
Police Statistics Database System |
2026-01-16T03:08:42.422Z | 2026-01-16T14:41:29.042Z |
| CVE-2026-1000 |
6.5 (3.1)
|
MailerLite - WooCommerce integration <= 3.1.3 - Missin… |
mailerlite |
MailerLite – WooCommerce integration |
2026-01-16T04:44:35.744Z | 2026-01-16T14:38:41.237Z |
| CVE-2026-0615 |
7.3 (3.1)
|
CVE-2026-0615 |
TheLibrarian |
TheLibrarian.io |
2026-01-16T12:47:27.747Z | 2026-01-16T14:38:37.462Z |
| CVE-2025-68707 |
8.8 (3.1)
|
An authentication bypass vulnerability in the Ton… |
n/a |
n/a |
2026-01-13T00:00:00.000Z | 2026-01-16T14:36:10.227Z |
| CVE-2022-50911 |
N/A
|
This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. | N/A | N/A | 2026-01-13T22:51:50.943Z | 2026-01-16T14:31:21.289Z |
| CVE-2025-15104 |
6.9 (4.0)
|
Nu Html Checker (validator.nu) - Restriction bypass vu… |
The Nu Html Checker |
The Nu Html Checker |
2026-01-16T14:00:16.643Z | 2026-01-16T14:30:55.715Z |
| CVE-2025-14384 |
4.3 (3.1)
|
All in One SEO – Powerful SEO Plugin to Boost SEO Rank… |
smub |
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic |
2026-01-16T04:44:36.103Z | 2026-01-16T14:10:21.442Z |
| CVE-2026-0858 |
6.1 (3.1)
|
Versions of the package net.sourceforge.plantuml:… |
n/a |
net.sourceforge.plantuml:plantuml |
2026-01-16T05:00:06.808Z | 2026-01-16T14:10:00.485Z |
| CVE-2025-14435 |
6.8 (3.1)
|
Application-Level DoS via infinite re-render loop in u… |
Mattermost |
Mattermost |
2026-01-16T11:25:35.817Z | 2026-01-16T14:09:00.429Z |
| CVE-2025-14510 |
8.1 (3.1)
9.2 (4.0)
|
ABB Ability OPTIMAX Authentication Bypass in Single-Sign On |
ABB |
ABB Ability OPTIMAX |
2026-01-16T13:02:30.774Z | 2026-01-16T14:08:21.597Z |
| CVE-2026-0695 |
8.7 (3.1)
|
Stored XSS in Time Entry Audit Trail |
ConnectWise |
PSA |
2026-01-16T13:34:42.833Z | 2026-01-16T14:07:48.888Z |
| CVE-2026-0696 |
6.5 (3.1)
|
Session Cookies Missing HttpOnly Attribute |
ConnectWise |
PSA |
2026-01-16T13:34:49.042Z | 2026-01-16T14:07:10.948Z |
| CVE-2026-23769 |
6.5 (3.1)
|
lucy-xss-filter before commit e5826c0 allows an a… |
NAVER |
lucy-xss-filter |
2026-01-16T05:23:56.494Z | 2026-01-16T14:05:51.238Z |
| CVE-2026-1022 |
8.7 (4.0)
7.5 (3.1)
|
Gotac｜Statistics Database System - Arbitrary File Read |
Gotac |
Statistics Database System |
2026-01-16T03:33:46.923Z | 2026-01-16T14:04:31.040Z |
| CVE-2026-1023 |
8.7 (4.0)
7.5 (3.1)
|
Gotac｜Statistics Database System - Missing Authentication |
Gotac |
Statistics Database System |
2026-01-16T03:43:02.419Z | 2026-01-16T14:04:01.712Z |
| CVE-2025-14982 |
4.3 (3.1)
|
Booking Calendar <= 10.14.11 - Missing Authorization t… |
wpdevelop |
Booking Calendar |
2026-01-16T04:44:33.474Z | 2026-01-16T14:03:32.703Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-47822 |
8.5 (4.0)
7.8 (3.1)
|
DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Serv… |
Diskboss |
DiskBoss Service |
2026-01-16T19:09:29.278Z | 2026-01-16T21:10:51.517Z |
| CVE-2021-47820 |
5.1 (4.0)
5.3 (3.1)
|
Ubee EVW327 - 'Enable Remote Access' Cross-Site Reques… |
Ubeeinteractive |
Ubee EVW327 |
2026-01-16T19:09:28.103Z | 2026-01-16T21:11:04.439Z |
| CVE-2021-47818 |
4.6 (4.0)
7.5 (3.1)
|
DupTerminator 1.4.5639.37199 - Denial of Service |
dupterminator |
DupTerminator |
2026-01-16T19:09:27.516Z | 2026-01-16T19:09:27.516Z |
| CVE-2021-47816 |
5.3 (4.0)
8.8 (3.1)
|
Thecus N4800Eco Nas Server Control Panel - Command Injection |
Thecus |
Thecus N4800Eco Nas Server Control Panel |
2026-01-16T19:09:26.929Z | 2026-01-16T20:43:27.338Z |
| CVE-2019-25279 |
6.8 (4.0)
7.5 (3.1)
|
FaceSentry Access Control System 6.4.8 Cleartext Passw… |
iWT Ltd. |
FaceSentry Access Control System |
2026-01-07T23:10:00.907Z | 2026-01-16T18:59:58.793Z |
| CVE-2019-25278 |
9.1 (4.0)
5.9 (3.1)
|
FaceSentry Access Control System 6.4.8 Authentication … |
iWT Ltd. |
FaceSentry Access Control System |
2026-01-07T23:09:59.751Z | 2026-01-16T18:59:58.609Z |
| CVE-2019-25254 |
5.1 (4.0)
8.8 (3.1)
|
KYOCERA Net Admin 3.4.0906 Cross-Site Request Forgery … |
KYOCERA Corporation |
KYOCERA Net Admin |
2025-12-24T19:28:04.889Z | 2026-01-16T18:59:58.350Z |
| CVE-2022-50469 |
N/A
|
staging: rtl8723bs: fix potential memory leak in rtw_i… |
Linux |
Linux |
2025-10-01T11:45:39.811Z | 2025-10-02T07:04:18.862Z |
| CVE-2022-50468 |
N/A
|
platform/chrome: cros_usbpd_notify: Fix error handling… |
Linux |
Linux |
2025-10-01T11:45:38.881Z | 2025-10-01T11:45:38.881Z |
| CVE-2022-50467 |
N/A
|
scsi: lpfc: Fix null ndlp ptr dereference in abnormal … |
Linux |
Linux |
2025-10-01T11:45:38.110Z | 2025-12-23T13:29:31.163Z |
| CVE-2022-50466 |
N/A
|
fs/binfmt_elf: Fix memory leak in load_elf_binary() |
Linux |
Linux |
2025-10-01T11:45:37.376Z | 2025-10-01T11:45:37.376Z |
| CVE-2022-50465 |
N/A
|
ext4: fix leaking uninitialized memory in fast-commit … |
Linux |
Linux |
2025-10-01T11:45:36.647Z | 2025-10-01T11:45:36.647Z |
| CVE-2022-50464 |
N/A
|
mt76: mt7915: Fix PCI device refcount leak in mt7915_p… |
Linux |
Linux |
2025-10-01T11:45:35.878Z | 2025-10-01T11:45:35.878Z |
| CVE-2022-50463 |
N/A
|
powerpc/52xx: Fix a resource leak in an error handling path |
Linux |
Linux |
2025-10-01T11:45:34.858Z | 2025-10-01T11:45:34.858Z |
| CVE-2022-50462 |
N/A
|
MIPS: vpe-mt: fix possible memory leak while module exiting |
Linux |
Linux |
2025-10-01T11:45:34.107Z | 2025-10-01T11:45:34.107Z |
| CVE-2022-50461 |
N/A
|
net: ethernet: ti: am65-cpsw: Fix PM runtime leakage i… |
Linux |
Linux |
2025-10-01T11:45:33.300Z | 2025-10-01T11:45:33.300Z |
| CVE-2022-50460 |
N/A
|
cifs: Fix xid leak in cifs_flock() |
Linux |
Linux |
2025-10-01T11:45:32.484Z | 2025-10-01T11:45:32.484Z |
| CVE-2025-14823 |
5.3 (3.1)
|
Certificate Signing Extension Returns Encrypted Values |
ConnectWise |
ScreenConnect |
2025-12-18T15:50:06.929Z | 2025-12-18T16:04:17.893Z |
| CVE-2026-21430 |
7 (4.0)
|
Emlog: CSRF chained with stored XSS leads to ATO |
emlog |
emlog |
2026-01-02T18:44:24.192Z | 2026-01-05T20:38:09.299Z |
| CVE-2026-22606 |
8.9 (4.0)
|
Fickling has a bypass via runpy.run_path() and runpy.r… |
trailofbits |
fickling |
2026-01-10T01:35:00.797Z | 2026-01-13T19:58:14.707Z |
| CVE-2026-22607 |
8.9 (4.0)
|
Fickling Blocklist Bypass: cProfile.run() |
trailofbits |
fickling |
2026-01-10T01:35:04.920Z | 2026-01-13T21:49:38.169Z |
| CVE-2026-22608 |
8.9 (4.0)
|
Fickling vulnerable to use of ctypes and pydoc gadget … |
trailofbits |
fickling |
2026-01-10T01:35:11.291Z | 2026-01-13T19:57:12.040Z |
| CVE-2026-22612 |
8.9 (4.0)
|
Fickling vulnerable to detection bypass due to "builti… |
trailofbits |
fickling |
2026-01-10T01:35:25.197Z | 2026-01-12T18:18:29.466Z |
| CVE-2026-22609 |
8.9 (4.0)
|
Fickling has Static Analysis Bypass via Incomplete Dan… |
trailofbits |
fickling |
2026-01-10T01:35:18.152Z | 2026-01-14T19:51:31.740Z |
| CVE-2025-68949 |
5.3 (3.1)
|
n8n has a Webhook Node IP Whitelist Bypass via Partial… |
n8n-io |
n8n |
2026-01-13T18:43:20.189Z | 2026-01-13T19:00:47.909Z |
| CVE-2026-22861 |
8.8 (3.1)
|
iccDEV has a heap-buffer-overflow in SIccCalcOp::Descr… |
InternationalColorConsortium |
iccDEV |
2026-01-13T20:20:39.236Z | 2026-01-13T21:45:47.596Z |
| CVE-2026-23497 |
1.3 (4.0)
|
Frappe LMS has a Stored XSS via Unsanitized Image File… |
frappe |
lms |
2026-01-14T18:25:52.052Z | 2026-01-14T21:15:21.105Z |
| CVE-2026-22781 |
10 (4.0)
|
TinyWeb CGI Command Injection |
maximmasiutin |
TinyWeb |
2026-01-12T18:23:00.512Z | 2026-01-12T18:50:57.979Z |
| CVE-2026-22783 |
9.6 (3.1)
|
Iris Allows Arbitrary File Deletion via Mass Assignmen… |
dfir-iris |
iris-web |
2026-01-12T18:27:38.259Z | 2026-01-12T18:52:04.765Z |
| CVE-2026-22784 |
2.3 (4.0)
|
Lychee cross-album password propagation on Album unlocking |
LycheeOrg |
Lychee |
2026-01-12T18:37:55.183Z | 2026-01-12T18:55:55.328Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-69991 | phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php. | 2026-01-13T16:16:04.877 | 2026-01-16T18:23:13.180 |
| fkie_cve-2025-69992 | phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the… | 2026-01-13T16:16:04.987 | 2026-01-16T18:23:02.813 |
| fkie_cve-2026-0861 | Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligne… | 2026-01-14T21:15:52.617 | 2026-01-16T18:16:09.343 |
| fkie_cve-2026-0629 | Authentication bypass in the password recovery feature of the local web interface across multiple V… | 2026-01-16T18:16:09.190 | 2026-01-16T18:16:09.190 |
| fkie_cve-2025-60021 | Remote command injection vulnerability in heap profiler builtin service in Apache bRPC ((all versio… | 2026-01-16T09:16:03.127 | 2026-01-16T18:16:08.780 |
| fkie_cve-2025-43904 | In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinat… | 2026-01-16T18:16:08.197 | 2026-01-16T18:16:08.197 |
| fkie_cve-2025-43508 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1… | 2026-01-16T18:16:07.923 | 2026-01-16T18:16:07.923 |
| fkie_cve-2025-43386 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in t… | 2025-11-04T02:15:45.590 | 2026-01-16T18:16:07.643 |
| fkie_cve-2025-25290 | @octokit/request sends parameterized requests to GitHub’s APIs with sensible defaults in browsers a… | 2025-02-14T20:15:35.593 | 2026-01-16T18:16:07.137 |
| fkie_cve-2025-24980 | pimcore/admin-ui-classic-bundle provides a Backend UI for Pimcore. In affected versions an error me… | 2025-02-07T20:15:33.933 | 2026-01-16T18:16:06.993 |
| fkie_cve-2025-24022 | iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, server… | 2025-05-14T15:15:56.293 | 2026-01-16T18:16:06.313 |
| fkie_cve-2024-44238 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.… | 2026-01-16T18:16:06.040 | 2026-01-16T18:16:06.040 |
| fkie_cve-2024-53695 | A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited,… | 2025-03-07T17:15:20.250 | 2026-01-16T18:15:07.420 |
| fkie_cve-2026-21433 | Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable… | 2026-01-02T19:15:48.187 | 2026-01-16T18:11:24.493 |
| fkie_cve-2025-51567 | A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, … | 2026-01-12T20:15:52.763 | 2026-01-16T17:31:06.853 |
| fkie_cve-2025-64677 | Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-… | 2025-12-18T22:16:01.077 | 2026-01-16T17:28:14.047 |
| fkie_cve-2025-64675 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmo… | 2025-12-19T00:15:52.933 | 2026-01-16T17:25:03.713 |
| fkie_cve-2023-25797 | Auth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for Wor… | 2023-05-03T11:15:13.987 | 2026-01-16T17:21:03.120 |
| fkie_cve-2023-3604 | The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page … | 2023-08-21T17:15:49.260 | 2026-01-16T17:20:15.940 |
| fkie_cve-2024-43947 | Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue affec… | 2024-08-29T19:15:08.653 | 2026-01-16T17:19:37.233 |
| fkie_cve-2025-52598 | Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Sy… | 2025-12-26T05:16:07.383 | 2026-01-16T17:18:13.917 |
| fkie_cve-2025-10568 | HyperX NGENUITY software is potentially vulnerable to arbitrary code execution. HP is releasing upd… | 2025-09-19T20:15:38.317 | 2026-01-16T17:16:48.903 |
| fkie_cve-2026-23529 | Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Goog… | 2026-01-16T17:15:54.783 | 2026-01-16T17:15:54.783 |
| fkie_cve-2026-23528 | Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jup… | 2026-01-16T17:15:54.640 | 2026-01-16T17:15:54.640 |
| fkie_cve-2026-23523 | Dive is an open-source MCP Host Desktop Application that enables integration with function-calling … | 2026-01-16T17:15:54.480 | 2026-01-16T17:15:54.480 |
| fkie_cve-2026-22782 | RustFS is a distributed object storage system built in Rust. From >= 1.0.0-alpha.1 to 1.0.0-alpha.7… | 2026-01-16T17:15:54.343 | 2026-01-16T17:15:54.343 |
| fkie_cve-2026-0949 | PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that … | 2026-01-16T17:15:54.047 | 2026-01-16T17:15:54.047 |
| fkie_cve-2025-70746 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the … | 2026-01-16T16:15:54.473 | 2026-01-16T17:15:53.667 |
| fkie_cve-2020-36929 | Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows servic… | 2026-01-16T00:16:20.320 | 2026-01-16T17:15:52.503 |
| fkie_cve-2020-36928 | Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client servic… | 2026-01-16T00:16:20.140 | 2026-01-16T17:15:52.393 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-r2h5-jh8m-2q64 |
8.4 (4.0)
|
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user… | 2026-01-15T21:31:46Z | 2026-01-15T21:31:46Z |
| ghsa-jcf5-5g56-hcr6 |
5.5 (3.1)
|
A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Servi… | 2026-01-15T18:31:33Z | 2026-01-15T21:31:46Z |
| ghsa-6fxf-xg6m-34hj |
7.1 (3.1)
|
In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to r… | 2026-01-15T18:31:33Z | 2026-01-15T21:31:46Z |
| ghsa-4rx6-3q6g-vr7j |
9.8 (3.1)
9.3 (4.0)
|
Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specia… | 2026-01-15T18:31:32Z | 2026-01-15T21:31:46Z |
| ghsa-3p5w-29q3-9985 |
7.5 (3.1)
|
A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a Denial… | 2026-01-15T18:31:33Z | 2026-01-15T21:31:46Z |
| ghsa-pxqv-3v4v-fcv9 |
7.8 (3.1)
5.1 (4.0)
|
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute … | 2026-01-09T09:31:19Z | 2026-01-15T21:31:45Z |
| ghsa-q9rf-32g7-6fx5 |
7.8 (3.1)
7.3 (4.0)
|
Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentiall… | 2026-01-09T09:31:19Z | 2026-01-15T21:31:44Z |
| ghsa-q7wm-chc7-f7rj |
3.3 (3.1)
4.8 (4.0)
|
Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows… | 2026-01-09T09:31:19Z | 2026-01-15T21:31:44Z |
| ghsa-fr9w-f26g-fh68 |
7.8 (3.1)
6.8 (4.0)
|
Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to exec… | 2026-01-09T09:31:19Z | 2026-01-15T21:31:44Z |
| ghsa-f43f-xc66-f5hm |
5.5 (3.1)
2.3 (4.0)
|
Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to a… | 2026-01-09T09:31:19Z | 2026-01-15T21:31:44Z |
| ghsa-6pjr-p3mh-rr6x |
5.5 (3.1)
2.1 (4.0)
|
Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local … | 2026-01-09T09:31:19Z | 2026-01-15T21:31:44Z |
| ghsa-797x-vjpf-whgj |
6.7 (3.1)
6.7 (4.0)
|
Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to exec… | 2026-01-09T09:31:19Z | 2026-01-15T21:31:43Z |
| ghsa-qhx6-hpfj-8m4g |
5.5 (3.1)
2.1 (4.0)
|
When loading a plist file, the plistlib module reads data in size specified by the file itself, mea… | 2025-12-01T18:30:38Z | 2026-01-15T21:31:42Z |
| ghsa-q863-2f3f-cf77 |
4.3 (3.1)
5.3 (4.0)
|
BullWall Ransomware Containment relies on the number of file modifications to trigger detection. An… | 2025-12-18T21:31:44Z | 2026-01-15T21:31:42Z |
| ghsa-px28-qwg7-83x2 |
5.5 (3.1)
6.9 (4.0)
|
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local use… | 2025-11-20T18:31:01Z | 2026-01-15T21:31:42Z |
| ghsa-mx9q-6x2g-xj7c |
8.8 (3.1)
8.7 (4.0)
|
BullWall Ransomware Containment contains excluded file paths, such as '$recycle.bin' that are not m… | 2025-12-18T21:31:44Z | 2026-01-15T21:31:42Z |
| ghsa-mw8w-4648-89vr |
9.3 (4.0)
|
Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) v… | 2025-12-09T18:30:45Z | 2026-01-15T21:31:42Z |
| ghsa-g9jw-93wv-fj7v |
7.8 (3.1)
8.4 (4.0)
|
BuhoNTFS contains an insecure XPC service that allows local, unprivileged users to escalate their p… | 2025-12-12T18:30:35Z | 2026-01-15T21:31:42Z |
| ghsa-g7hf-xr86-7qmf |
9.8 (3.1)
9.2 (4.0)
|
Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker m… | 2025-12-22T06:30:27Z | 2026-01-15T21:31:42Z |
| ghsa-chcm-jqp3-j5w3 |
6.2 (3.1)
7.5 (4.0)
|
BullWall Server Intrusion Protection services are initialized after login services. An authenticate… | 2025-12-18T21:31:44Z | 2026-01-15T21:31:42Z |
| ghsa-c3mr-fcrj-6g2w |
9.8 (3.1)
9.2 (4.0)
|
Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player … | 2025-12-22T06:30:27Z | 2026-01-15T21:31:42Z |
| ghsa-98qw-prqm-9f4p |
5.4 (3.1)
|
A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle f… | 2025-06-26T21:31:08Z | 2026-01-15T21:31:42Z |
| ghsa-974m-5v9f-vwxw |
6.2 (3.1)
7.5 (4.0)
|
BullWall Server Intrusion Protection has a noticeable delay before the MFA check when connecting vi… | 2025-12-18T21:31:44Z | 2026-01-15T21:31:42Z |
| ghsa-7xr9-h4qx-73w3 |
9.8 (3.1)
8.4 (4.0)
|
Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker m… | 2025-12-22T06:30:27Z | 2026-01-15T21:31:42Z |
| ghsa-7cf5-cv98-v7j6 |
9.8 (3.1)
9.5 (4.0)
|
Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors al… | 2025-12-22T06:30:27Z | 2026-01-15T21:31:42Z |
| ghsa-7376-x4rm-3v8x |
3.9 (3.1)
|
A vulnerability has been identified in the libarchive library, specifically within the archive_read… | 2025-06-09T21:30:52Z | 2026-01-15T21:31:42Z |
| ghsa-32fm-h45j-grpv |
7.5 (3.1)
9.1 (4.0)
|
Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and… | 2025-12-22T06:30:27Z | 2026-01-15T21:31:42Z |
| ghsa-rj4r-gj6w-jfgc |
6.5 (3.1)
|
An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur… | 2025-10-20T15:30:25Z | 2026-01-15T21:31:41Z |
| ghsa-hm8v-8c3v-cxfq |
7.5 (3.1)
|
A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete … | 2025-10-03T12:33:14Z | 2026-01-15T21:31:41Z |
| ghsa-4wg4-p27p-5q2r |
5.4 (3.1)
|
Pimcore Web2Print Tools Bundle "Favourite Output Channel Configuration" Missing Function Level Auth… | 2026-01-15T18:14:17Z | 2026-01-15T20:18:09Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-223 |
|
In the course of work on the open source project it was discovered that authenticated use… | apache-superset | 2020-09-30T21:15:00Z | 2021-08-27T03:21:55.668622Z |
| pysec-2020-222 |
|
While investigating a bug report on Apache Superset, it was determined that an authentica… | apache-superset | 2020-09-17T13:15:00Z | 2021-08-27T03:21:55.635305Z |
| pysec-2012-12 |
|
Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of… | apache-libcloud | 2012-11-04T22:55:00Z | 2021-08-27T03:21:55.557676Z |
| pysec-2021-124 |
|
A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console… | ansible | 2021-05-26T21:15:00Z | 2021-08-27T03:21:53.214122Z |
| pysec-2019-171 |
|
A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5… | ansible | 2019-10-14T15:15:00Z | 2021-08-27T03:21:53.021460Z |
| pysec-2018-80 |
|
aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session functi… | aiohttp-session | 2018-06-26T16:29:00Z | 2021-08-27T03:21:52.874717Z |
| pysec-2017-80 |
|
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript… | mistune | 2017-10-19T08:29:00Z | 2021-08-25T04:57:34.565130Z |
| pysec-2019-166 |
|
The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptio… | coapthon3 | 2019-04-02T19:29:00Z | 2021-08-25T04:57:20.904496Z |
| pysec-2019-165 |
|
The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles ce… | coapthon | 2019-04-02T20:29:00Z | 2021-08-25T04:57:20.831477Z |
| pysec-2020-219 |
|
In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other us… | wagtail-2fa | 2020-03-13T22:15:00Z | 2021-08-25T04:30:36.375287Z |
| pysec-2018-79 |
|
aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed… | websockets | 2018-06-26T16:29:00Z | 2021-08-25T04:30:36.925398Z |
| pysec-2018-78 |
|
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot opti… | uwsgi | 2018-02-26T22:29:00Z | 2021-08-25T04:30:36.296302Z |
| pysec-2017-85 |
|
txAWS (all current versions) fail to perform complete certificate verification resulting … | txaws | 2017-07-17T13:18:00Z | 2021-08-25T04:30:35.998894Z |
| pysec-2018-77 |
|
The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext … | tryton | 2018-11-22T19:29:00Z | 2021-08-25T04:30:34.252835Z |
| pysec-2018-76 |
|
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::pa… | topydo | 2018-06-26T16:29:00Z | 2021-08-25T04:30:33.312157Z |
| pysec-2017-84 |
|
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with… | swauth | 2017-11-21T13:29:00Z | 2021-08-25T04:30:33.081491Z |
| pysec-2018-75 |
|
OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability i… | suricata-update | 2018-04-18T19:29:00Z | 2021-08-25T04:30:32.993759Z |
| pysec-2018-74 |
|
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to … | superset | 2018-11-07T14:29:00Z | 2021-08-25T04:30:32.701868Z |
| pysec-2017-82 |
|
The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configura… | salt | 2017-04-25T17:59:00Z | 2021-08-25T04:30:30.228761Z |
| pysec-2019-170 |
|
An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket… | python-engineio | 2019-07-16T00:15:00Z | 2021-08-25T04:30:27.861588Z |
| pysec-2019-169 |
|
When using PySpark , it's possible for a different local user to connect to the Spark app… | pyspark | 2019-02-04T17:29:00Z | 2021-08-25T04:30:27.510120Z |
| pysec-2018-73 |
|
By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send… | plone | 2018-01-03T20:29:00Z | 2021-08-25T04:30:17.052846Z |
| pysec-2017-81 |
|
Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox… | plone | 2017-03-23T16:59:00Z | 2021-08-25T04:30:17.184045Z |
| pysec-2018-72 |
|
Accessing private content via str.format in through-the-web templates and scripts in Plon… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.983029Z |
| pysec-2018-71 |
|
A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of h… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.873350Z |
| pysec-2018-70 |
|
When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login fo… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.749835Z |
| pysec-2018-69 |
|
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect A… | paramiko | 2018-10-08T15:29:00Z | 2021-08-25T04:30:15.170380Z |
| pysec-2018-68 |
|
An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 a… | oauthenticator | 2018-02-18T03:29:00Z | 2021-08-25T04:30:14.910557Z |
| pysec-2019-168 |
|
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4… | ipa | 2019-11-27T08:15:00Z | 2021-08-25T04:30:10.435825Z |
| pysec-2021-123 |
|
The Python "Flask-Security-Too" package is used for adding security features to your Flas… | flask-security-too | 2021-05-17T18:15:00Z | 2021-08-25T04:30:09.653075Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2021-47256 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.727123Z |
| gsd-2021-47255 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.617481Z |
| gsd-2021-47254 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.693685Z |
| gsd-2021-47253 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.659914Z |
| gsd-2021-47252 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.619083Z |
| gsd-2021-47251 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.668115Z |
| gsd-2021-47250 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.717215Z |
| gsd-2021-47249 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.602618Z |
| gsd-2021-47248 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.555070Z |
| gsd-2021-47247 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.586265Z |
| gsd-2021-47246 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.583702Z |
| gsd-2021-47245 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.722706Z |
| gsd-2021-47244 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.691032Z |
| gsd-2021-47243 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.553204Z |
| gsd-2021-47242 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.722977Z |
| gsd-2021-47241 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.611830Z |
| gsd-2021-47240 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.709261Z |
| gsd-2021-47239 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.532966Z |
| gsd-2021-47238 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.698901Z |
| gsd-2021-47237 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.685235Z |
| gsd-2021-47236 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.722364Z |
| gsd-2021-47235 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.622533Z |
| gsd-2021-47234 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.673329Z |
| gsd-2021-47233 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.619298Z |
| gsd-2021-47232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.652916Z |
| gsd-2021-47231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.639304Z |
| gsd-2021-47230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.647834Z |
| gsd-2021-47229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.726005Z |
| gsd-2021-47228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.698614Z |
| gsd-2021-47227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.566309Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192692 | Malicious code in @vienna_cancer_center_portal/js (npm) | 2025-12-22T22:29:27Z | 2025-12-23T19:24:01Z |
| MAL-2025-192692 | Malicious code in @vienna_cancer_center_portal/js (npm) | 2025-12-22T22:29:27Z | 2025-12-23T19:24:01Z |
| mal-2025-192488 | Malicious code in elf-stats-cocoa-pinecone-118 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T19:09:02Z |
| mal-2025-192330 | Malicious code in elf-stats-cranberry-pinecone-878 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T19:09:02Z |
| mal-2025-192328 | Malicious code in elf-stats-cosy-sled-550 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T19:09:02Z |
| mal-2025-192208 | Malicious code in elf-stats-cranberry-hollyberry-804 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T19:09:02Z |
| mal-2025-192203 | Malicious code in elf-stats-cocoa-ribbon-476 (npm) | 2025-12-03T16:50:41Z | 2025-12-23T19:09:02Z |
| mal-2025-192013 | Malicious code in elf-stats-cosy-wishlist-811 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T19:09:02Z |
| mal-2025-192009 | Malicious code in elf-stats-cocoa-reindeer-663 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T19:09:02Z |
| mal-2025-191980 | Malicious code in elf-stats-cosy-sleigh-356 (npm) | 2025-12-03T14:31:21Z | 2025-12-23T19:09:02Z |
| MAL-2025-192488 | Malicious code in elf-stats-cocoa-pinecone-118 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T19:09:02Z |
| MAL-2025-192330 | Malicious code in elf-stats-cranberry-pinecone-878 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T19:09:02Z |
| MAL-2025-192328 | Malicious code in elf-stats-cosy-sled-550 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T19:09:02Z |
| MAL-2025-192208 | Malicious code in elf-stats-cranberry-hollyberry-804 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T19:09:02Z |
| MAL-2025-192203 | Malicious code in elf-stats-cocoa-ribbon-476 (npm) | 2025-12-03T16:50:41Z | 2025-12-23T19:09:02Z |
| MAL-2025-192013 | Malicious code in elf-stats-cosy-wishlist-811 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T19:09:02Z |
| MAL-2025-192009 | Malicious code in elf-stats-cocoa-reindeer-663 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T19:09:02Z |
| MAL-2025-191980 | Malicious code in elf-stats-cosy-sleigh-356 (npm) | 2025-12-03T14:31:21Z | 2025-12-23T19:09:02Z |
| mal-2025-192429 | Malicious code in yunxohang3 (npm) | 2025-12-10T04:03:49Z | 2025-12-23T18:26:18Z |
| mal-2025-192428 | Malicious code in yunxoahng2 (npm) | 2025-12-10T03:55:40Z | 2025-12-23T18:26:18Z |
| MAL-2025-192429 | Malicious code in yunxohang3 (npm) | 2025-12-10T04:03:49Z | 2025-12-23T18:26:18Z |
| MAL-2025-192428 | Malicious code in yunxoahng2 (npm) | 2025-12-10T03:55:40Z | 2025-12-23T18:26:18Z |
| mal-2025-192433 | Malicious code in mws-common-ui (npm) | 2025-12-10T13:07:26Z | 2025-12-23T18:26:16Z |
| MAL-2025-192433 | Malicious code in mws-common-ui (npm) | 2025-12-10T13:07:26Z | 2025-12-23T18:26:16Z |
| mal-2025-192423 | Malicious code in vue2-amis-custom-widget-pro (npm) | 2025-12-10T04:05:56Z | 2025-12-23T17:25:04Z |
| MAL-2025-192423 | Malicious code in vue2-amis-custom-widget-pro (npm) | 2025-12-10T04:05:56Z | 2025-12-23T17:25:04Z |
| mal-2025-192487 | Malicious code in elf-stats-cheery-sparkler-521 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T17:09:49Z |
| mal-2025-192486 | Malicious code in elf-stats-cheery-sleigh-538 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T17:09:49Z |
| mal-2025-192484 | Malicious code in elf-stats-cheery-muffin-949 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T17:09:49Z |
| mal-2025-192483 | Malicious code in elf-stats-caroling-workshop-885 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T17:09:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0448 | IBM TXSeries: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-02-26T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0447 | Acronis Cyber Protect: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-02-26T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0446 | Webmin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-02-26T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0445 | Cisco Application Policy Infrastructure Controller: Mehrere Schwachstellen | 2025-02-26T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0443 | Drupal: Mehrere Schwachstellen | 2025-02-26T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0407 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-02-18T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2024-3282 | libsndfile: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-10-27T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2023-3112 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-12-11T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2023-2649 | Linux Kernel: Schwachstelle ermöglicht Codeausführung | 2023-10-15T22:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2023-1926 | OpenSSL: Schwachstelle ermöglicht Denial of Service | 2023-07-31T22:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2023-1833 | OpenSSL: Schwachstelle ermöglicht Denial of Service | 2023-07-19T22:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2023-1760 | OpenSSL: Schwachstelle ermöglicht die Umgehung von Sicherheitsmaßnahmen. | 2023-07-16T22:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2023-0692 | GNU Emacs: Schwachstelle ermöglicht Codeausführung | 2023-03-19T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2023-0207 | Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-01-25T23:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2022-1492 | Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-09-20T22:00:00.000+00:00 | 2025-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0441 | Arista EOS: Mehrere Schwachstellen | 2025-02-25T23:00:00.000+00:00 | 2025-02-25T23:00:00.000+00:00 |
| wid-sec-w-2025-0439 | ESRI ArcGIS: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-02-25T23:00:00.000+00:00 | 2025-02-25T23:00:00.000+00:00 |
| wid-sec-w-2025-0436 | Hitachi Energy Relion: Schwachstelle ermöglicht Privilegieneskalation | 2021-12-09T23:00:00.000+00:00 | 2025-02-25T23:00:00.000+00:00 |
| wid-sec-w-2025-0434 | LibreOffice: Schwachstelle ermöglicht Codeausführung | 2025-02-25T23:00:00.000+00:00 | 2025-02-25T23:00:00.000+00:00 |
| wid-sec-w-2024-3682 | Python "virtualenv": Schwachstelle ermöglicht Codeausführung | 2024-12-10T23:00:00.000+00:00 | 2025-02-25T23:00:00.000+00:00 |
| wid-sec-w-2024-3358 | Ansible: Schwachstelle ermöglicht Privilegieneskalation | 2024-11-06T23:00:00.000+00:00 | 2025-02-25T23:00:00.000+00:00 |
| wid-sec-w-2023-3203 | Pro-FTPd: Schwachstelle ermöglicht Denial of Service | 2023-12-21T23:00:00.000+00:00 | 2025-02-25T23:00:00.000+00:00 |
| wid-sec-w-2025-0433 | Adobe ColdFusion: Mehrere Schwachstellen | 2017-04-25T22:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2025-0431 | Joomla: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-02-24T23:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2025-0187 | Mattermost: Mehrere Schwachstellen | 2025-01-23T23:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3551 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2024-11-26T23:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2024-0115 | Oracle Supply Chain: Mehrere Schwachstellen | 2024-01-16T23:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2025-0429 | ffmpeg: Schwachstelle ermöglicht Denial of Service, potentiell Codeausführung | 2025-02-23T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0287 | F5 BIG-IP: Mehrere Schwachstellen | 2025-02-05T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0246 | Grafana: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-02T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:5555 | Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.1] security, bug fix and update | 2022-07-14T12:56:49+00:00 | 2026-01-13T22:51:31+00:00 |
| rhsa-2022:5532 | Red Hat Security Advisory: Red Hat Fuse 7.11.0 release and security update | 2022-07-07T14:19:49+00:00 | 2026-01-13T22:51:31+00:00 |
| rhsa-2022:5415 | Red Hat Security Advisory: go-toolset-1.17 and go-toolset-1.17-golang security and bug fix update | 2022-06-30T17:34:35+00:00 | 2026-01-13T22:51:30+00:00 |
| rhsa-2022:5337 | Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update | 2022-06-30T21:00:23+00:00 | 2026-01-13T22:51:30+00:00 |
| rhsa-2022:5188 | Red Hat Security Advisory: RHACS 3.69 security update | 2022-06-24T19:42:45+00:00 | 2026-01-13T22:51:30+00:00 |
| rhsa-2022:4914 | Red Hat Security Advisory: rh-nodejs12-nodejs security, bug fix, and enhancement update | 2022-06-06T09:29:16+00:00 | 2026-01-13T22:51:30+00:00 |
| rhsa-2022:4880 | Red Hat Security Advisory: ACS 3.70 enhancement and security update | 2022-06-02T02:06:42+00:00 | 2026-01-13T22:51:30+00:00 |
| rhsa-2022:4711 | Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update | 2022-05-26T16:25:03+00:00 | 2026-01-13T22:51:29+00:00 |
| rhsa-2022:2265 | Red Hat Security Advisory: OpenShift Container Platform 4.6.58 security and extras update | 2022-05-26T20:06:24+00:00 | 2026-01-13T22:51:29+00:00 |
| rhsa-2022:1747 | Red Hat Security Advisory: Release of OpenShift Serverless Version 1.22.0 | 2022-05-09T16:47:58+00:00 | 2026-01-13T22:51:28+00:00 |
| rhsa-2022:1745 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.22.0 | 2022-05-09T07:48:15+00:00 | 2026-01-13T22:51:28+00:00 |
| rhsa-2022:1734 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.1 security and bug fix update | 2022-05-05T13:49:11+00:00 | 2026-01-13T22:51:28+00:00 |
| rhsa-2022:1699 | Red Hat Security Advisory: OpenShift Container Platform 4.7.50 security update | 2022-05-12T18:05:11+00:00 | 2026-01-13T22:51:27+00:00 |
| rhsa-2022:1622 | Red Hat Security Advisory: OpenShift Container Platform 4.6.57 security and extras update | 2022-05-04T09:05:42+00:00 | 2026-01-13T22:51:27+00:00 |
| rhsa-2022:1372 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.10.0 enhancement, security & bug fix update | 2022-04-13T18:48:58+00:00 | 2026-01-13T22:51:27+00:00 |
| rhsa-2022:1370 | Red Hat Security Advisory: OpenShift Container Platform 4.8.37 security and extras update | 2022-04-20T12:18:41+00:00 | 2026-01-13T22:51:27+00:00 |
| rhsa-2022:0432 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.20.0 | 2022-02-03T16:10:33+00:00 | 2026-01-13T22:51:27+00:00 |
| rhsa-2022:1363 | Red Hat Security Advisory: OpenShift Container Platform 4.9.29 bug fix and security update | 2022-04-20T14:43:46+00:00 | 2026-01-13T22:51:26+00:00 |
| rhsa-2022:1361 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.10.0 RPM security,enhancement&bugfix update | 2022-04-13T15:33:28+00:00 | 2026-01-13T22:51:26+00:00 |
| rhsa-2022:1357 | Red Hat Security Advisory: OpenShift Container Platform 4.10.10 security and extras update | 2022-04-20T11:41:10+00:00 | 2026-01-13T22:51:26+00:00 |
| rhsa-2022:0687 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.1 security and bug fix update | 2022-02-28T21:18:28+00:00 | 2026-01-13T22:51:25+00:00 |
| rhsa-2022:0434 | Red Hat Security Advisory: Release of OpenShift Serverless 1.20.0 | 2022-02-03T20:05:14+00:00 | 2026-01-13T22:51:25+00:00 |
| rhsa-2021:3748 | Red Hat Security Advisory: OpenShift Container Storage 3.11.z Container Images Security and Bug Fix Update | 2021-10-07T14:17:37+00:00 | 2026-01-13T22:51:24+00:00 |
| rhsa-2022:0308 | Red Hat Security Advisory: OpenShift Container Storage 3.11.z security and bug fix update | 2022-01-27T13:14:43+00:00 | 2026-01-13T22:51:23+00:00 |
| rhsa-2022:0056 | Red Hat Security Advisory: OpenShift Container Platform 4.10.3 security update | 2022-03-10T16:00:51+00:00 | 2026-01-13T22:51:23+00:00 |
| rhsa-2022:0055 | Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update | 2022-03-10T14:59:25+00:00 | 2026-01-13T22:51:23+00:00 |
| rhsa-2022:0041 | Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update | 2022-01-06T18:43:03+00:00 | 2026-01-13T22:51:23+00:00 |
| rhsa-2021:2093 | Red Hat Security Advisory: Release of OpenShift Serverless 1.14.1 security update | 2021-05-24T13:04:23+00:00 | 2026-01-13T22:51:23+00:00 |
| rhsa-2021:5176 | Red Hat Security Advisory: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update | 2021-12-16T16:38:14+00:00 | 2026-01-13T22:51:22+00:00 |
| rhsa-2021:3759 | Red Hat Security Advisory: OpenShift Container Platform 4.9.0 bug fix and security update | 2021-10-18T17:26:13+00:00 | 2026-01-13T22:51:22+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-090-02 | Hitachi Energy e-mesh EMS | 2022-03-31T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsa-22-090-01 | Schneider Electric SCADAPack Workbench | 2022-03-31T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsa-22-067-01 | PTC Axeda agent and Axeda Desktop Server (Update C) | 2022-03-08T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsma-22-088-01 | Philips e-Alert | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-088-04 | Modbus Tools Modbus Slave | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-088-03 | Hitachi Energy LinkOne WebView | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-088-02 | Omron CX-Position | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-088-01 | Rockwell Automation ISaGRAF | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-083-02 | mySCADA myPRO | 2022-03-24T00:00:00.000000Z | 2022-03-24T00:00:00.000000Z |
| icsa-22-083-01 | Yokogawa CENTUM and Exaopc | 2022-03-24T00:00:00.000000Z | 2022-03-24T00:00:00.000000Z |
| icsa-21-238-03 | Delta Electronics DIAEnergie (Update C) | 2021-08-26T00:00:00.000000Z | 2022-03-22T00:00:00.000000Z |
| icsa-22-074-01 | ABB OPC Server for AC 800M | 2022-03-15T00:00:00.000000Z | 2022-03-15T00:00:00.000000Z |
| icsa-21-315-09 | Siemens Climatix POL909 (Update A) | 2021-11-11T00:00:00.000000Z | 2022-03-10T00:00:00.000000Z |
| icsa-20-203-01 | Wibu-Systems CodeMeter (Update F) | 2020-08-20T00:00:00.000000Z | 2022-03-10T00:00:00.000000Z |
| icsa-22-067-02 | AVEVA System Platform | 2022-03-08T00:00:00.000000Z | 2022-03-08T00:00:00.000000Z |
| icsa-22-034-01 | Sensormatic PowerManage (Update A) | 2022-02-03T00:00:00.000000Z | 2022-03-08T00:00:00.000000Z |
| icsa-22-063-01 | Trailer Power Line Communications (PLC) J2497 | 2022-03-04T00:00:00.000000Z | 2022-03-04T00:00:00.000000Z |
| icsma-22-062-02 | BD Viper LT | 2022-03-03T00:00:00.000000Z | 2022-03-03T00:00:00.000000Z |
| icsma-22-062-01 | BD Pyxis | 2022-03-03T00:00:00.000000Z | 2022-03-03T00:00:00.000000Z |
| icsa-22-062-01 | IPCOMM ipDIO | 2022-03-03T00:00:00.000000Z | 2022-03-03T00:00:00.000000Z |
| icsa-22-055-03 | Schneider Electric Easergy P5 and P3 | 2022-02-24T00:00:00.000000Z | 2022-02-24T00:00:00.000000Z |
| icsa-22-055-02 | Mitsubishi Electric EcoWebServerIII | 2022-02-24T00:00:00.000000Z | 2022-02-24T00:00:00.000000Z |
| icsa-22-055-01 | FATEK Automation FvDesigner | 2022-02-24T00:00:00.000000Z | 2022-02-24T00:00:00.000000Z |
| icsa-21-231-02 | Baker Hughes Bently Nevada 3500 | 2021-08-19T00:00:00.000000Z | 2022-02-24T00:00:00.000000Z |
| icsa-22-053-03 | WIN-911 2021 | 2022-02-22T00:00:00.000000Z | 2022-02-22T00:00:00.000000Z |
| icsa-22-053-02 | GE Proficy CIMPLICITY-Cleartext | 2022-02-22T00:00:00.000000Z | 2022-02-22T00:00:00.000000Z |
| icsa-22-053-01 | GE Proficy CIMPLICITY-IPM | 2022-02-22T00:00:00.000000Z | 2022-02-22T00:00:00.000000Z |
| icsa-22-046-01 | Schneider Electric IGSS | 2022-02-15T00:00:00.000000Z | 2022-02-15T00:00:00.000000Z |
| icsa-21-350-16 | Siemens Healthineers syngo fastView (Update A) | 2021-12-16T00:00:00.000000Z | 2022-02-10T00:00:00.000000Z |
| icsa-19-225-03 | ICSA-19-225-03_Siemens SCALANCE X Switches (Update D) | 2019-08-13T00:00:00.000000Z | 2022-02-10T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-iosxr-dvmrp-memexh-dsmpdvfz | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities | 2020-08-29T03:00:00+00:00 | 2020-09-28T21:36:50+00:00 |
| cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities | 2020-08-29T03:00:00+00:00 | 2020-09-28T21:36:50+00:00 |
| cisco-sa-zbfw-94ckg4g | Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-zbfw-94ckG4G | Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-wpa-dos-cxshjerc | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-wpa-dos-cXshjerc | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-webui-auth-bypass-6j2byuc7 | Cisco IOS XE Software Web UI Authorization Bypass Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-webui-auth-bypass-6j2BYUc7 | Cisco IOS XE Software Web UI Authorization Bypass Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-web-ui-exnfmcpo | Cisco IOS XE Software Web UI Improper Input Validation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-unauth-file-access-ebtwkkvw | Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-unauth-file-access-eBTWkKVW | Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-splitdns-spwqpdgw | Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-splitdns-SPWqpdGW | Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-rommon-secboot-7jgvlvyc | Cisco IOS XE ROM Monitor Software Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-rommon-secboot-7JgVLVYC | Cisco IOS XE ROM Monitor Software Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-mdns-dos-3th6ca9j | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-mdns-dos-3tH6cA9J | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-le-drtob625 | Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-le-drTOB625 | Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-jp-dos-g5ffgm8y | Cisco Catalyst 9200 Series Switches Jumbo Frame Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-isr4461-gkkurohx | Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ipsla-jw2djmsv | Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ipsla-jw2DJmSv | Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iox-usb-guestshell-wmevscdj | Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iox-usb-guestshell-WmevScDj | Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-wlc-fnfv9-evraqpnx | Cisco IOS XE Software for Catalyst 9800 Series and Cisco AireOS Software for Cisco WLC Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-wlc-fnfv9-EvrAQpNX | Cisco IOS XE Software for Catalyst 9800 Series and Cisco AireOS Software for Cisco WLC Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-umbrella-dos-t2qmux37 | Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-umbrella-dos-t2QMUX37 | Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-rsp3-rce-jvhg8z7c | Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38047 | x86/fred: Fix system hang during S4 resume with FRED enabled | 2025-06-02T00:00:00.000Z | 2025-09-04T00:56:21.000Z |
| msrc_cve-2025-38503 | btrfs: fix assertion when building free space tree | 2025-08-02T00:00:00.000Z | 2025-09-04T00:53:31.000Z |
| msrc_cve-2024-26671 | blk-mq: fix IO hang from sbitmap wakeup race | 2024-04-02T07:00:00.000Z | 2025-09-04T00:53:31.000Z |
| msrc_cve-2025-38548 | hwmon: (corsair-cpro) Validate the size of the received input buffer | 2025-08-02T00:00:00.000Z | 2025-09-04T00:51:22.000Z |
| msrc_cve-2024-26645 | tracing: Ensure visibility when inserting an element into tracing_map | 2024-03-02T08:00:00.000Z | 2025-09-04T00:50:26.000Z |
| msrc_cve-2024-24785 | Errors returned from JSON marshaling may break template escaping in html/template | 2024-03-02T08:00:00.000Z | 2025-09-04T00:47:50.000Z |
| msrc_cve-2025-38526 | ice: add NULL check in eswitch lag check | 2025-08-02T00:00:00.000Z | 2025-09-04T00:47:42.000Z |
| msrc_cve-2023-52632 | drm/amdkfd: Fix lock dependency warning with srcu | 2024-04-02T07:00:00.000Z | 2025-09-04T00:46:27.000Z |
| msrc_cve-2025-38546 | atm: clip: Fix memory leak of struct clip_vcc. | 2025-08-02T00:00:00.000Z | 2025-09-04T00:44:48.000Z |
| msrc_cve-2022-49484 | mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector | 2025-02-02T00:00:00.000Z | 2025-09-04T00:44:03.000Z |
| msrc_cve-2025-38472 | netfilter: nf_conntrack: fix crash due to removal of uninitialised entry | 2025-07-02T00:00:00.000Z | 2025-09-04T00:44:01.000Z |
| msrc_cve-2022-35409 | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function. | 2022-07-02T00:00:00.000Z | 2025-09-04T00:42:29.000Z |
| msrc_cve-2025-38540 | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | 2025-08-02T00:00:00.000Z | 2025-09-04T00:41:42.000Z |
| msrc_cve-2024-50289 | media: av7110: fix a spectre vulnerability | 2024-11-02T00:00:00.000Z | 2025-09-04T00:41:38.000Z |
| msrc_cve-2025-48964 | ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero). | 2025-07-02T00:00:00.000Z | 2025-09-04T00:40:23.000Z |
| msrc_cve-2023-52905 | octeontx2-pf: Fix resource leakage in VF driver unbind | 2024-08-02T00:00:00.000Z | 2025-09-04T00:40:18.000Z |
| msrc_cve-2025-1180 | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | 2025-02-02T00:00:00.000Z | 2025-09-04T00:39:36.000Z |
| msrc_cve-2025-38532 | net: libwx: properly reset Rx ring descriptor | 2025-08-02T00:00:00.000Z | 2025-09-04T00:39:05.000Z |
| msrc_cve-2023-29400 | Improper handling of empty HTML attributes in html/template | 2023-05-01T00:00:00.000Z | 2025-09-04T00:39:00.000Z |
| msrc_cve-2019-16910 | Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.) | 2019-09-02T00:00:00.000Z | 2025-09-04T00:38:18.000Z |
| msrc_cve-2024-26726 | btrfs: don't drop extent_map for free space inode on write error | 2024-04-02T07:00:00.000Z | 2025-09-04T00:37:57.000Z |
| msrc_cve-2025-1371 | GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference | 2025-02-02T00:00:00.000Z | 2025-09-04T00:37:33.000Z |
| msrc_cve-2023-4580 | Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. | 2023-09-01T00:00:00.000Z | 2025-09-04T00:36:18.000Z |
| msrc_cve-2025-38550 | ipv6: mcast: Delay put pmc->idev in mld_del_delrec() | 2025-08-02T00:00:00.000Z | 2025-09-04T00:35:43.000Z |
| msrc_cve-2022-49476 | mt76: mt7921: fix kernel crash at mt7921_pci_remove | 2025-02-02T00:00:00.000Z | 2025-09-04T00:34:18.000Z |
| msrc_cve-2025-38535 | phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode | 2025-08-02T00:00:00.000Z | 2025-09-04T00:31:56.000Z |
| msrc_cve-2023-52621 | bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers | 2024-03-02T08:00:00.000Z | 2025-09-04T00:31:29.000Z |
| msrc_cve-2024-24783 | Verify panics on certificates with an unknown public key algorithm in crypto/x509 | 2024-03-02T08:00:00.000Z | 2025-09-04T00:29:44.000Z |
| msrc_cve-2024-5642 | Buffer overread when using an empty list with SSLContext.set_npn_protocols() | 2024-06-02T07:00:00.000Z | 2025-09-04T00:29:08.000Z |
| msrc_cve-2025-38552 | mptcp: plug races between subflow fail and subflow creation | 2025-08-02T00:00:00.000Z | 2025-09-04T00:28:50.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202301-0629 | A vulnerability has been identified in Automation License Manager V5 (All versions), Auto… | 2024-04-19T21:02:29.529000Z |
| var-201006-1189 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T20:55:46.393000Z |
| var-201006-1157 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T20:42:13.167000Z |
| var-202403-0635 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2)… | 2024-04-19T20:42:10.148000Z |
| var-201006-1247 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T20:40:43.955000Z |
| var-201507-0106 | Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implemen… | 2024-04-19T20:31:50.284000Z |
| var-201404-0286 | ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to… | 2024-04-19T20:14:12.803000Z |
| var-201006-1181 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T19:57:19.002000Z |
| var-201512-0395 | Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Cl… | 2024-04-19T19:46:59.905000Z |
| var-201006-1129 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T19:40:16.790000Z |
| var-201006-1163 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T19:27:47.252000Z |
| var-201006-1200 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T19:23:56.455000Z |
| var-202012-1387 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' V… | 2024-04-18T13:40:13.625000Z |
| var-202303-0725 | Memory corruption in WLAN due to use after free. APQ8064AU firmware, APQ8096AU firmware, … | 2024-04-18T13:40:09.597000Z |
| var-202302-0730 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or… | 2024-04-18T13:40:09.935000Z |
| var-202310-2659 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP… | 2024-04-18T13:40:08.434000Z |
| var-202302-0680 | Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a v… | 2024-04-18T13:37:18.689000Z |
| var-202307-0109 | Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage r… | 2024-04-18T13:37:17.755000Z |
| var-202309-1995 | Memory corruption in WLAN HAL while handling command streams through WMI interfaces. 9205… | 2024-04-18T13:36:21.114000Z |
| var-202310-2416 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during… | 2024-04-18T13:35:59.496000Z |
| var-201512-0029 | Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 … | 2024-04-18T13:35:20.563000Z |
| var-202302-0804 | Memory corruption due to configuration weakness in modem wile sending command to write pr… | 2024-04-18T13:35:07.880000Z |
| var-202101-1034 | A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex … | 2024-04-18T13:33:45.319000Z |
| var-202302-0870 | Memory corruption due to improper access control in Qualcomm IPC. plural Qualcomm There a… | 2024-04-18T13:30:08.872000Z |
| var-202302-0807 | Memory corruption due to use after free in trusted application environment. plural Qualco… | 2024-04-18T13:30:08.909000Z |
| var-202101-1033 | A vulnerability in the web-based management interface of Cisco Webex Meetings could allow… | 2024-04-18T13:29:48.528000Z |
| var-202305-0093 | Memory corruption in Graphics while importing a file. 315 5g iot modem firmware, 9206 lte… | 2024-04-18T13:29:46.267000Z |
| var-202311-1527 | Memory Corruption in Multi-mode Call Processor while processing bit mask API. 315 5g iot … | 2024-04-18T13:29:43.081000Z |
| var-202310-2020 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call. 315 5g iot modem… | 2024-04-18T13:29:43.570000Z |
| var-202309-1991 | Transient DOS in WLAN Host when an invalid channel (like channel out of range) is receive… | 2024-04-18T13:29:43.760000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-000082 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:28+09:00 | 2011-10-25T13:46+09:00 |
| jvndb-2011-000081 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:27+09:00 | 2011-10-25T13:45+09:00 |
| jvndb-2011-000080 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:24+09:00 | 2011-10-25T13:44+09:00 |
| jvndb-2011-000087 | EC-CUBE vulnerable to SQL injection | 2011-10-14T17:53+09:00 | 2011-10-14T17:53+09:00 |
| jvndb-2011-000086 | DBD::mysqlPP vulnerable to SQL injection | 2011-10-14T17:50+09:00 | 2011-10-14T17:50+09:00 |
| jvndb-2011-000085 | DAEMON Tools vulnerable to denial-of-service | 2011-10-13T18:58+09:00 | 2011-10-13T18:58+09:00 |
| jvndb-2011-000084 | Pligg vulnerable to cross-site scripting | 2011-10-13T18:56+09:00 | 2011-10-13T18:56+09:00 |
| jvndb-2011-000083 | Plume vulnerable to cross-site scripting | 2011-10-13T18:38+09:00 | 2011-10-13T18:38+09:00 |
| jvndb-2011-000078 | A-Form vulnerable in restricting access | 2011-10-11T09:08+09:00 | 2011-10-11T09:08+09:00 |
| jvndb-2011-000077 | Enkai-kun vulnerable to cross-site scripting | 2011-10-11T09:00+09:00 | 2011-10-11T09:00+09:00 |
| jvndb-2011-000066 | BaserCMS vulnerable to access restriction | 2011-09-30T18:45+09:00 | 2011-09-30T18:45+09:00 |
| jvndb-2011-000065 | BaserCMS vulnerable to cross-site scripting | 2011-09-30T18:39+09:00 | 2011-09-30T18:39+09:00 |
| jvndb-2011-000074 | SemanticScuttle vulnerable to cross-site scripting | 2011-09-16T18:08+09:00 | 2011-09-16T18:08+09:00 |
| jvndb-2011-000073 | Megalith vulnerable to authentication bypass | 2011-09-12T09:19+09:00 | 2011-09-12T09:19+09:00 |
| jvndb-2011-000072 | GTK+ may insecurely load dynamic libraries | 2011-09-02T19:26+09:00 | 2011-09-02T19:26+09:00 |
| jvndb-2011-000071 | Juniper Networks IDP ACM vulnerable to cross-site scripting | 2011-09-02T19:22+09:00 | 2011-09-02T19:22+09:00 |
| jvndb-2011-000070 | Sage vulnerable to arbitrary script execution | 2011-09-02T19:19+09:00 | 2011-09-02T19:19+09:00 |
| jvndb-2011-000069 | Sage vulnerable to arbitrary script execution | 2011-09-02T19:14+09:00 | 2011-09-02T19:14+09:00 |
| jvndb-2011-000068 | Multiple vulnerabilities in Phorum | 2011-09-02T19:11+09:00 | 2011-09-02T19:11+09:00 |
| jvndb-2011-000067 | WebsiteBaker vulnerable to cross-site scripting | 2011-08-26T15:50+09:00 | 2011-08-26T15:50+09:00 |
| jvndb-2011-000064 | Microsoft Windows XP vulnerable to denial-of-service (DoS) | 2011-08-19T16:32+09:00 | 2011-08-19T16:32+09:00 |
| jvndb-2011-000063 | Aipo vulnerable to SQL injection | 2011-08-16T16:44+09:00 | 2011-08-16T16:44+09:00 |
| jvndb-2011-000062 | Aipo vulnerable to cross-site request forgery | 2011-08-16T16:41+09:00 | 2011-08-16T16:41+09:00 |
| jvndb-2011-000061 | Internet Explorer window display vulnerability | 2011-08-12T14:06+09:00 | 2011-08-12T14:06+09:00 |
| jvndb-2011-000060 | Windows URL Protocol Handler may insecurely load executable files | 2011-08-10T17:17+09:00 | 2011-08-10T17:17+09:00 |
| jvndb-2011-001928 | JP1/Performance Management - Web Console Cross-Site Scripting Vulnerability | 2011-08-09T10:11+09:00 | 2011-08-09T10:11+09:00 |
| jvndb-2011-001927 | Arbitrary Code Execution Vulnerability in HiRDB Control Manager | 2011-08-09T10:10+09:00 | 2011-08-09T10:10+09:00 |
| jvndb-2011-000059 | Mozilla Firefox vulnerable to cross-site scripting | 2011-07-28T16:31+09:00 | 2011-07-28T16:31+09:00 |
| jvndb-2011-000058 | Mozilla Firefox vulnerable to cross-site scripting | 2011-07-28T16:29+09:00 | 2011-07-28T16:29+09:00 |
| jvndb-2011-000057 | Mozilla Firefox vulnerable to denial-of-service (DoS) | 2011-07-28T16:27+09:00 | 2011-07-28T16:27+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:1420-1 | Security update for redis | 2025-04-30T12:55:40Z | 2025-04-30T12:55:40Z |
| suse-su-2025:1419-1 | Security update for redis | 2025-04-30T12:55:00Z | 2025-04-30T12:55:00Z |
| suse-su-2025:1418-1 | Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3) | 2025-04-30T12:09:46Z | 2025-04-30T12:09:46Z |
| suse-su-2025:20216-1 | Security update for containerd | 2025-04-30T09:17:09Z | 2025-04-30T09:17:09Z |
| suse-su-2025:1416-1 | Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3) | 2025-04-30T09:10:35Z | 2025-04-30T09:10:35Z |
| suse-su-2025:1414-1 | Security update for MozillaFirefox | 2025-04-30T06:59:24Z | 2025-04-30T06:59:24Z |
| suse-su-2025:1413-1 | Security update for augeas | 2025-04-30T06:59:12Z | 2025-04-30T06:59:12Z |
| suse-su-2025:1408-1 | Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5) | 2025-04-29T23:17:49Z | 2025-04-29T23:17:49Z |
| suse-su-2025:1403-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2025-04-29T23:17:20Z | 2025-04-29T23:17:20Z |
| suse-su-2025:1402-1 | Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5) | 2025-04-29T19:10:57Z | 2025-04-29T19:10:57Z |
| suse-su-2025:1399-1 | Security update for java-11-openjdk | 2025-04-29T13:35:08Z | 2025-04-29T13:35:08Z |
| suse-su-2025:20212-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-04-29T11:24:25Z | 2025-04-29T11:24:25Z |
| suse-su-2025:20211-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-04-29T11:24:25Z | 2025-04-29T11:24:25Z |
| suse-su-2025:20315-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20215-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20214-1 | Security update for kernel-livepatch-MICRO-6-0_Update_3 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20314-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-04-29T11:20:13Z | 2025-04-29T11:20:13Z |
| suse-su-2025:20213-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-04-29T11:20:13Z | 2025-04-29T11:20:13Z |
| suse-su-2025:20210-1 | Security update for elemental-toolkit | 2025-04-29T11:13:15Z | 2025-04-29T11:13:15Z |
| suse-su-2025:20209-1 | Security update for gpg2 | 2025-04-29T11:11:44Z | 2025-04-29T11:11:44Z |
| suse-su-2025:20219-1 | Security update for u-boot | 2025-04-29T11:10:08Z | 2025-04-29T11:10:08Z |
| suse-su-2025:20207-1 | Security update for expat | 2025-04-29T11:07:45Z | 2025-04-29T11:07:45Z |
| suse-su-2025:20297-1 | Security update for gnutls | 2025-04-29T10:18:50Z | 2025-04-29T10:18:50Z |
| suse-su-2025:1392-1 | Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6) | 2025-04-28T13:41:00Z | 2025-04-28T13:41:00Z |
| suse-su-2025:1387-1 | Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6) | 2025-04-28T13:10:55Z | 2025-04-28T13:10:55Z |
| suse-su-2025:1385-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-04-28T13:10:49Z | 2025-04-28T13:10:49Z |
| suse-su-2025:1381-1 | Security update for cifs-utils | 2025-04-28T07:37:13Z | 2025-04-28T07:37:13Z |
| suse-su-2025:1380-1 | Security update for libraw | 2025-04-28T07:36:42Z | 2025-04-28T07:36:42Z |
| suse-su-2025:1374-1 | Security update for runc | 2025-04-25T12:39:27Z | 2025-04-25T12:39:27Z |
| suse-su-2025:20206-1 | Security update for the Linux Kernel | 2025-04-25T09:37:28Z | 2025-04-25T09:37:28Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13600-1 | nodejs-electron-27.2.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13599-1 | golang-github-prometheus-alertmanager-0.26.0-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13598-1 | xwayland-23.2.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13597-1 | xorg-x11-server-21.1.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13596-1 | tomcat10-10.1.18-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13595-1 | python310-imagecodecs-2024.1.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13594-1 | java-21-openjdk-21.0.2.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13593-1 | gnutls-3.8.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13592-1 | erlang-26.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13591-1 | chromedriver-120.0.6099.224-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13590-1 | tomcat-9.0.85-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13589-1 | libBasicUsageEnvironment2-2023.11.30-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13588-1 | libebml-devel-1.4.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13587-1 | java-17-openjdk-17.0.10.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13586-1 | grafana-10.1.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13585-1 | ungoogled-chromium-120.0.6099.216-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13584-1 | perl-Spreadsheet-ParseXLSX-0.290.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13583-1 | chromedriver-120.0.6099.216-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13582-1 | SDL2-devel-2.28.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13581-1 | python310-Jinja2-3.1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13580-1 | jsch-0.2.15-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13579-1 | ctdb-4.19.4+git.339.acf1ccaa020-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13578-1 | libuev-devel-2.4.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13577-1 | libpng16-16-1.6.40-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13576-1 | jasper-4.1.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13575-1 | kernel-devel-6.6.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13574-1 | nodejs-electron-27.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13573-1 | tracker-miner-files-3.6.2-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13572-1 | redis-7.2.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13571-1 | libopenjp2-7-2.5.0-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24046 | Bold Workplanner不安全直接对象引用漏洞（CNVD-2025-24046） | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24045 | Bold Workplanner不安全直接对象引用漏洞（CNVD-2025-24045） | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24044 | Bold Workplanner不安全直接对象引用漏洞（CNVD-2025-24044） | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24043 | Bold Workplanner不安全直接对象引用漏洞（CNVD-2025-24043） | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24042 | Bold Workplanner不安全直接对象引用漏洞（CNVD-2025-24042） | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24041 | Bold Workplanner不安全直接对象引用漏洞（CNVD-2025-24041） | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24040 | Bold Workplanner不安全直接对象引用漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24122 | Hostel Management System allocate_room.php文件SQL注入漏洞 | 2025-06-23 | 2025-10-16 |
| cnvd-2025-24121 | Hostel Management System empty_rooms.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-16 |
| cnvd-2025-24120 | Hostel Management System /contact_manager.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-16 |
| cnvd-2025-24119 | Hostel Management System contact.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-16 |
| cnvd-2025-24118 | Hostel Management System allocated_rooms.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-16 |
| cnvd-2025-24117 | Hostel Management System hostel_manage.exe文件栈缓冲区溢出漏洞 | 2025-08-20 | 2025-10-16 |
| cnvd-2025-24116 | Hostel Management System hostel_manage.exe文件身份验证不当漏洞 | 2025-08-20 | 2025-10-16 |
| cnvd-2025-24115 | Hostel Management System log_email参数SQL注入漏洞 | 2025-09-25 | 2025-10-16 |
| cnvd-2025-24114 | Hostel Management System login.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-16 |
| cnvd-2025-24113 | Hostel Management System mod_roomtype/index.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-16 |
| cnvd-2025-24112 | Hostel Management System ID参数SQL注入漏洞 | 2025-09-25 | 2025-10-16 |
| cnvd-2025-24111 | Hostel Management System Home参数SQL注入漏洞 | 2025-09-25 | 2025-10-16 |
| cnvd-2025-24110 | Hostel Management System mod_comments/index.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-16 |
| cnvd-2025-24109 | Hostel Management System index.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-16 |
| cnvd-2025-24108 | Simple Food Ordering System order.php文件跨站脚本漏洞 | 2025-09-25 | 2025-10-16 |
| cnvd-2025-24107 | Simple Scheduling System addsubject.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-16 |
| cnvd-2025-24106 | Simple Scheduling System addfaculty.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-16 |
| cnvd-2025-24105 | Simple Scheduling System addcourse.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-16 |
| cnvd-2025-24104 | Simple Scheduling System addroom.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-16 |
| cnvd-2025-24103 | Simple Scheduling System addtime.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-16 |
| cnvd-2025-24102 | Simple Scheduling System add.home.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-16 |
| cnvd-2025-24101 | Hostel Management System mod_users/index.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-16 |
| cnvd-2025-24100 | Simple Food Ordering System product.php文件SQL注入漏洞 | 2025-10-13 | 2025-10-16 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-1068 | Multiples vulnérabilités dans Microsoft Office | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1067 | Multiples vulnérabilités dans les produits Atlassian | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1066 | Vulnérabilité dans Apache Struts | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1065 | Multiples vulnérabilités dans GitLab | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1064 | Multiples vulnérabilités dans GLPI | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1063 | Vulnérabilité dans cURL et libcurl | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1062 | Multiples vulnérabilités dans les produits Siemens | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1061 | Multiples vulnérabilités dans les produits Splunk | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1060 | Multiples vulnérabilités dans Ruby on Rails | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1059 | Multiples vulnérabilités dans les produits Intel | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1058 | Multiples vulnérabilités dans les produits Ivanti | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1057 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1056 | Multiples vulnérabilités dans les produits Adobe | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1055 | Multiples vulnérabilités dans Google Chrome | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1070 | Multiples vulnérabilités dans les produits Microsoft | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1069 | Multiples vulnérabilités dans Microsoft Windows | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1068 | Multiples vulnérabilités dans Microsoft Office | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1067 | Multiples vulnérabilités dans les produits Atlassian | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1066 | Vulnérabilité dans Apache Struts | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1065 | Multiples vulnérabilités dans GitLab | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1064 | Multiples vulnérabilités dans GLPI | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1063 | Vulnérabilité dans cURL et libcurl | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1062 | Multiples vulnérabilités dans les produits Siemens | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1061 | Multiples vulnérabilités dans les produits Splunk | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1060 | Multiples vulnérabilités dans Ruby on Rails | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1059 | Multiples vulnérabilités dans les produits Intel | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1058 | Multiples vulnérabilités dans les produits Ivanti | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1057 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1056 | Multiples vulnérabilités dans les produits Adobe | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| CERTFR-2024-AVI-1055 | Multiples vulnérabilités dans Google Chrome | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |