Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62020 |
7.1 (3.1)
|
WordPress VOD Infomaniak plugin <= 1.5.11 - Cross Site… |
Infomaniak Network |
VOD Infomaniak |
2025-10-22T14:32:49.407Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62019 |
6.5 (3.1)
|
WordPress Recipe Card Blocks for Gutenberg & Elementor… |
WPZOOM |
Recipe Card Blocks for Gutenberg & Elementor |
2025-10-22T14:32:49.208Z | 2026-01-20T14:28:13.056Z |
| CVE-2025-62018 |
5.3 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Broken Access Cont… |
hogash |
Kallyas |
2025-11-06T15:55:26.361Z | 2026-01-20T14:28:13.058Z |
| CVE-2025-62017 |
5.4 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Broken Access Cont… |
hogash |
Kallyas |
2025-11-06T15:55:25.294Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62016 |
9.9 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upl… |
hogash |
Kallyas |
2025-11-06T15:55:24.586Z | 2026-01-20T14:28:13.045Z |
| CVE-2025-62014 |
8.1 (3.1)
|
WordPress ITok theme <= 1.1.42 - Local File Inclusion … |
ApusTheme |
ITok |
2025-11-06T15:55:23.874Z | 2026-01-20T14:28:13.268Z |
| CVE-2025-62013 |
4.3 (3.1)
|
WordPress UiChemy plugin <= 4.0.0 - Broken Access Cont… |
POSIMYTH |
UiChemy |
2025-10-22T14:32:48.799Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62012 |
6.5 (3.1)
|
WordPress TheGem (Elementor) theme <= 5.10.5 - Cross S… |
CodexThemes |
TheGem (Elementor) |
2025-11-06T15:55:23.261Z | 2026-01-20T14:28:13.036Z |
| CVE-2025-62011 |
6.5 (3.1)
|
WordPress TheGem theme <= 5.10.5 - Cross Site Scriptin… |
CodexThemes |
TheGem |
2025-11-06T15:55:22.593Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62010 |
8.1 (3.1)
|
WordPress Famita theme <= 1.54 - Local File Inclusion … |
ApusTheme |
Famita |
2025-11-06T15:55:21.866Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62009 |
4.3 (3.1)
|
WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 … |
Dmitry V. (CEO of "UKR Solution") |
UPC/EAN/GTIN Code Generator |
2025-10-22T14:32:48.527Z | 2026-01-20T14:28:13.052Z |
| CVE-2025-62008 |
8.8 (3.1)
|
WordPress Product Table For WooCommerce plugin <= 1.2.… |
acowebs |
Product Table For WooCommerce |
2025-10-22T14:32:48.273Z | 2026-01-20T14:28:13.044Z |
| CVE-2025-62006 |
5.4 (3.1)
|
WordPress WP SMS plugin <= 7.0.1 - Broken Access Contr… |
VeronaLabs |
WP SMS |
2025-10-22T14:32:47.684Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62005 |
7.1 (3.1)
|
WordPress SUMO Memberships for WooCommerce plugin < 7.… |
FantasticPlugins |
SUMO Memberships for WooCommerce |
2025-10-22T14:32:47.453Z | 2026-01-20T14:28:13.038Z |
| CVE-2025-60248 |
7.5 (3.1)
|
WordPress WPC Product Options for WooCommerce plugin <… |
WPClever |
WPC Product Options for WooCommerce |
2025-11-06T15:55:21.142Z | 2026-01-20T14:28:13.000Z |
| CVE-2025-60245 |
9.8 (3.1)
|
WordPress WP User Manager plugin <= 2.9.12 - PHP Objec… |
WP User Manager |
WP User Manager |
2025-11-06T15:55:19.859Z | 2026-01-20T14:28:13.047Z |
| CVE-2025-62015 |
7.6 (3.1)
|
WordPress Advanced Coupons for WooCommerce Coupons plu… |
Josh Kohlbach |
Advanced Coupons for WooCommerce Coupons |
2025-10-22T14:32:49.014Z | 2026-01-20T14:28:12.860Z |
| CVE-2025-62007 |
8.8 (3.1)
|
WordPress Voice Feedback plugin <= 1.0.3 - Privilege E… |
bPlugins |
Voice Feedback |
2025-10-22T14:32:47.880Z | 2026-01-20T14:28:12.873Z |
| CVE-2025-60247 |
6.5 (3.1)
|
WordPress Bux Woocommerce plugin <= 1.2.3 - Broken Acc… |
Bux |
Bux Woocommerce |
2025-11-06T15:55:20.539Z | 2026-01-20T14:28:12.911Z |
| CVE-2025-60246 |
7.1 (3.1)
|
WordPress Simple Finance Calculator plugin <= 1.0 - Re… |
weissmike |
Simple Finance Calculator |
2025-10-22T14:32:47.237Z | 2026-01-20T14:28:12.981Z |
| CVE-2025-60244 |
7.1 (3.1)
|
WordPress TableOn plugin <= 1.0.4.2 - Content Injectio… |
RealMag777 |
TableOn |
2025-11-06T15:55:18.193Z | 2026-01-20T14:28:12.860Z |
| CVE-2025-60243 |
9.8 (3.1)
|
WordPress Selling Commander for WooCommerce plugin <= … |
Holest Engineering |
Selling Commander for WooCommerce |
2025-11-06T15:55:15.782Z | 2026-01-20T14:28:12.895Z |
| CVE-2025-60242 |
7.5 (3.1)
|
WordPress Download Counter plugin <= 1.4 - Arbitrary F… |
Anatoly |
Download Counter |
2025-11-06T15:55:14.917Z | 2026-01-20T14:28:12.776Z |
| CVE-2025-60241 |
7.5 (3.1)
|
WordPress Premmerce plugin <= 1.3.19 - Local File Incl… |
Premmerce |
Premmerce |
2025-11-06T15:55:13.362Z | 2026-01-20T14:28:12.936Z |
| CVE-2025-60240 |
7.5 (3.1)
|
WordPress AnyComment plugin <= 0.3.6 - Local File Incl… |
Alexander |
AnyComment |
2025-11-06T15:55:10.324Z | 2026-01-20T14:28:12.866Z |
| CVE-2025-60239 |
8.5 (3.1)
|
WordPress CoSchool LMS plugin <= 1.4.3 - SQL Injection… |
Codexpert, Inc |
CoSchool LMS |
2025-11-06T15:55:09.493Z | 2026-01-20T14:28:12.963Z |
| CVE-2025-60238 |
9.8 (3.1)
|
WordPress UNIVERSAM plugin <= 8.72.34 - PHP Object Inj… |
universam |
UNIVERSAM |
2025-10-22T14:32:47.058Z | 2026-01-20T14:28:12.553Z |
| CVE-2025-60235 |
10 (3.1)
|
WordPress Helpdesk Support Ticket System for WooCommer… |
Plugify |
Helpdesk Support Ticket System for WooCommerce |
2025-11-06T15:55:07.928Z | 2026-01-20T14:28:12.539Z |
| CVE-2025-60234 |
8.8 (3.1)
|
WordPress Single Property theme <= 2.8 - PHP Object In… |
designthemes |
Single Property |
2025-10-22T14:32:46.860Z | 2026-01-20T14:28:12.552Z |
| CVE-2025-60232 |
9.8 (3.1)
|
WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Objec… |
quantumcloud |
KBx Pro Ultimate |
2025-10-22T14:32:46.670Z | 2026-01-20T14:28:12.559Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64269 |
4.3 (3.1)
|
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… |
EDGARROJAS |
WooCommerce PDF Invoice Builder |
2025-11-13T09:24:30.214Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64268 |
7.5 (3.1)
|
WordPress Timetics plugin <= 1.0.44 - Broken Access Co… |
Arraytics |
Timetics |
2025-12-18T07:22:14.683Z | 2026-01-20T14:28:21.327Z |
| CVE-2025-64267 |
4.3 (3.1)
|
WordPress WooCommerce Ultimate Points And Rewards plug… |
WPSwings |
WooCommerce Ultimate Points And Rewards |
2025-11-13T09:24:29.783Z | 2026-01-20T14:28:21.878Z |
| CVE-2025-64266 |
8.8 (3.1)
|
WordPress Booking and Rental Manager plugin <= 2.5.4 -… |
magepeopleteam |
Booking and Rental Manager |
2025-12-18T07:22:14.481Z | 2026-01-20T14:28:21.161Z |
| CVE-2025-64265 |
4.3 (3.1)
|
WordPress Frontend File Manager plugin <= 23.2 - Broke… |
N-Media |
Frontend File Manager |
2025-11-13T09:24:29.310Z | 2026-01-20T14:28:21.291Z |
| CVE-2025-64264 |
5.9 (3.1)
|
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … |
Aman |
Popup addon for Ninja Forms |
2025-11-13T09:24:28.871Z | 2026-01-20T14:28:21.081Z |
| CVE-2025-64263 |
5.4 (3.1)
|
WordPress WP Content Pilot plugin <= 2.1.7 - Broken Ac… |
PluginEver |
WP Content Pilot |
2025-11-13T09:24:28.383Z | 2026-01-20T14:28:21.298Z |
| CVE-2025-64262 |
6.5 (3.1)
|
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… |
ramon fincken |
Auto Prune Posts |
2025-11-13T09:24:27.918Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64261 |
6.5 (3.1)
|
WordPress Appointment Booking Calendar plugin <= 1.3.9… |
codepeople |
Appointment Booking Calendar |
2025-11-13T09:24:27.476Z | 2026-01-20T14:28:21.721Z |
| CVE-2025-64260 |
7.1 (3.1)
|
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… |
Marco Milesi |
ANAC XML Bandi di Gara |
2025-12-18T07:22:14.310Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64259 |
6.5 (3.1)
|
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… |
Jeroen Schmit |
Theater for WordPress |
2025-11-13T09:24:26.955Z | 2026-01-20T14:28:21.159Z |
| CVE-2025-64258 |
7.5 (3.1)
|
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… |
wpweb |
Follow My Blog Post |
2025-12-18T07:22:14.130Z | 2026-01-20T14:28:21.008Z |
| CVE-2025-64257 |
4.3 (3.1)
|
WordPress My Tickets plugin <= 2.1.0 - Broken Access C… |
Joe Dolson |
My Tickets |
2025-12-09T14:13:52.568Z | 2026-01-20T14:28:21.812Z |
| CVE-2025-64256 |
8.8 (3.1)
|
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… |
PressTigers |
Simple Folio |
2025-12-09T14:13:52.351Z | 2026-01-20T14:28:21.259Z |
| CVE-2025-64255 |
7.2 (3.1)
|
WordPress Admin and Site Enhancements (ASE) plugin <= … |
Bowo |
Admin and Site Enhancements (ASE) |
2025-12-09T14:13:52.144Z | 2026-01-20T14:28:21.009Z |
| CVE-2025-64254 |
8.8 (3.1)
|
WordPress Photo Block plugin <= 1.5.1 - Broken Access … |
Ronald Huereca |
Photo Block |
2025-12-09T14:13:51.839Z | 2026-01-20T14:28:20.954Z |
| CVE-2025-64253 |
4.9 (3.1)
|
WordPress Health Check & Troubleshooting plugin <= 1.7… |
WordPress.org |
Health Check & Troubleshooting |
2025-12-16T08:12:50.088Z | 2026-01-20T14:28:21.074Z |
| CVE-2025-64251 |
4.9 (3.1)
|
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbi… |
azzaroco |
Ultimate Learning Pro |
2025-12-16T08:12:49.880Z | 2026-01-20T14:28:20.915Z |
| CVE-2025-64250 |
6.1 (3.1)
|
WordPress Directorist plugin <= 8.5.6 - Open Redirecti… |
wpWax |
Directorist |
2025-12-16T08:12:49.689Z | 2026-01-20T14:28:20.980Z |
| CVE-2025-64249 |
4.8 (3.1)
|
WordPress Protect WP Admin plugin <= 4.1 - Broken Acce… |
WP-EXPERTS.IN |
Protect WP Admin |
2025-12-16T08:12:49.485Z | 2026-01-20T14:28:21.330Z |
| CVE-2025-64248 |
4.3 (3.1)
|
WordPress Request a Quote plugin <= 2.5.3 - Broken Acc… |
emarket-design |
Request a Quote |
2025-12-16T08:12:49.290Z | 2026-01-20T14:28:21.329Z |
| CVE-2025-64247 |
6.5 (3.1)
|
WordPress Read More & Accordion plugin <= 3.5.4.1 - Br… |
edmon.parker |
Read More & Accordion |
2025-12-16T08:12:49.100Z | 2026-01-20T14:28:21.315Z |
| CVE-2025-64246 |
4.3 (3.1)
|
WordPress Accessibility by AudioEye plugin <= 1.0.49 -… |
netopsae |
Accessibility by AudioEye |
2025-12-16T08:12:48.902Z | 2026-01-20T14:28:20.873Z |
| CVE-2025-64245 |
4.3 (3.1)
|
WordPress Import external attachments plugin <= 1.5.12… |
ryanpcmcquen |
Import external attachments |
2025-12-16T08:12:48.719Z | 2026-01-20T14:28:20.395Z |
| CVE-2025-64244 |
4.3 (3.1)
|
WordPress Restrict Elementor Widgets, Columns and Sect… |
Codexpert, Inc |
Restrict Elementor Widgets, Columns and Sections |
2025-12-16T08:12:48.528Z | 2026-01-20T14:28:20.451Z |
| CVE-2025-64243 |
4.3 (3.1)
|
WordPress Directory Pro plugin <= 2.5.6 - Broken Acces… |
e-plugins |
Directory Pro |
2025-12-16T08:12:48.343Z | 2026-01-20T14:28:20.367Z |
| CVE-2025-64242 |
4.3 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.15 - Br… |
Merv Barrett |
Easy Property Listings |
2025-12-16T08:12:48.141Z | 2026-01-20T14:28:20.007Z |
| CVE-2025-64241 |
4.3 (3.1)
|
WordPress WP Coupons and Deals plugin <= 3.2.4 - Broke… |
Imtiaz Rayhan |
WP Coupons and Deals |
2025-12-16T08:12:47.928Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64240 |
4.3 (3.1)
|
WordPress Freshchat plugin <= 2.3.4 - Cross Site Reque… |
freshchat |
Freshchat |
2025-12-16T08:12:47.734Z | 2026-01-20T14:28:20.030Z |
| CVE-2025-64239 |
4.3 (3.1)
|
WordPress RTL Tester plugin <= 1.2 - Cross Site Reques… |
Yoav Farhi |
RTL Tester |
2025-12-16T08:12:47.533Z | 2026-01-20T14:28:19.955Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-64258 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in wpweb F… | 2025-12-18T08:16:12.927 | 2026-01-20T15:18:49.997 |
| fkie_cve-2025-64257 | Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrect… | 2025-12-09T16:18:14.963 | 2026-01-20T15:18:49.867 |
| fkie_cve-2025-64256 | Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Folio simple-folio allows Cro… | 2025-12-09T16:18:14.813 | 2026-01-20T15:18:49.737 |
| fkie_cve-2025-64255 | Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancemen… | 2025-12-09T16:18:14.673 | 2026-01-20T15:18:49.603 |
| fkie_cve-2025-64254 | Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Inc… | 2025-12-09T16:18:14.540 | 2026-01-20T15:18:49.473 |
| fkie_cve-2025-64253 | Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-ch… | 2025-12-16T09:15:55.063 | 2026-01-20T15:18:49.340 |
| fkie_cve-2025-64251 | Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Ex… | 2025-12-16T09:15:54.937 | 2026-01-20T15:18:49.207 |
| fkie_cve-2025-64250 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist … | 2025-12-16T09:15:54.807 | 2026-01-20T15:18:49.077 |
| fkie_cve-2025-64249 | Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Explo… | 2025-12-16T09:15:54.683 | 2026-01-20T15:18:48.947 |
| fkie_cve-2025-64248 | Missing Authorization vulnerability in emarket-design Request a Quote request-a-quote allows Exploi… | 2025-12-16T09:15:54.560 | 2026-01-20T15:18:48.820 |
| fkie_cve-2025-64247 | Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Explo… | 2025-12-16T09:15:54.417 | 2026-01-20T15:18:48.690 |
| fkie_cve-2025-64246 | Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye… | 2025-12-16T09:15:54.290 | 2026-01-20T15:18:48.560 |
| fkie_cve-2025-64245 | Missing Authorization vulnerability in ryanpcmcquen Import external attachments import-external-att… | 2025-12-16T09:15:54.163 | 2026-01-20T15:18:48.430 |
| fkie_cve-2025-64244 | Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Secti… | 2025-12-16T09:15:54.037 | 2026-01-20T15:18:48.300 |
| fkie_cve-2025-64243 | Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Inco… | 2025-12-16T09:15:53.907 | 2026-01-20T15:18:48.170 |
| fkie_cve-2025-64242 | Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings a… | 2025-12-16T09:15:53.773 | 2026-01-20T15:18:48.037 |
| fkie_cve-2025-64241 | Missing Authorization vulnerability in Imtiaz Rayhan WP Coupons and Deals wp-coupons-and-deals allo… | 2025-12-16T09:15:53.640 | 2026-01-20T15:18:47.907 |
| fkie_cve-2025-64240 | Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site … | 2025-12-16T09:15:53.517 | 2026-01-20T15:18:47.777 |
| fkie_cve-2025-64239 | Cross-Site Request Forgery (CSRF) vulnerability in Yoav Farhi RTL Tester rtl-tester allows Cross Si… | 2025-12-16T09:15:53.377 | 2026-01-20T15:18:47.640 |
| fkie_cve-2025-64238 | Missing Authorization vulnerability in NicolasKulka WPS Bidouille wps-bidouille allows Exploiting I… | 2025-12-16T09:15:53.247 | 2026-01-20T15:18:47.507 |
| fkie_cve-2025-64237 | Cross-Site Request Forgery (CSRF) vulnerability in Graham Quick Interest Slider quick-interest-slid… | 2025-12-16T09:15:53.110 | 2026-01-20T15:18:47.353 |
| fkie_cve-2025-64236 | Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows … | 2025-12-18T17:15:55.477 | 2026-01-20T15:18:47.247 |
| fkie_cve-2025-64235 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ame… | 2025-12-18T17:15:55.327 | 2026-01-20T15:18:47.137 |
| fkie_cve-2025-64234 | Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-… | 2025-10-29T09:15:44.763 | 2026-01-20T15:18:46.987 |
| fkie_cve-2025-64233 | Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection… | 2025-12-18T08:16:12.800 | 2026-01-20T15:18:46.853 |
| fkie_cve-2025-64232 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:14.333 | 2026-01-20T15:18:46.720 |
| fkie_cve-2025-64231 | Unrestricted Upload of File with Dangerous Type vulnerability in RedefiningTheWeb WordPress Contact… | 2025-12-18T08:16:12.670 | 2026-01-20T15:18:46.590 |
| fkie_cve-2025-64230 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP … | 2025-12-18T08:16:12.543 | 2026-01-20T15:18:46.450 |
| fkie_cve-2025-64229 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices… | 2025-10-29T09:15:44.250 | 2026-01-20T15:18:46.290 |
| fkie_cve-2025-64228 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fantast… | 2025-10-29T09:15:44.077 | 2026-01-20T15:18:46.160 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-9pc6-xgvc-2w25 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-4527-g864-c7mh |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-3g8r-fpc3-3p9r |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-xwq4-m3ff-5w2g |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-xvj8-fgfh-f3gx |
4.9 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in Codeless Slider Templates slider-templates allo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-wh86-wjvr-gp4g |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w4xm-vpx3-v86f |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request F… | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w294-95cp-qx33 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-rrvr-f37x-r3f9 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-qh3g-9vrf-p9vh |
5.3 (3.1)
|
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing … | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-hrf6-48c7-hhqf |
5.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box allows Cross Site Request Forg… | 2025-10-29T06:31:12Z | 2026-01-20T15:31:39Z |
| ghsa-h9fv-xmvq-pgf6 |
5.3 (3.1)
|
Missing Authorization vulnerability in Facebook Facebook for WooCommerce allows Exploiting Incorrec… | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-f647-c8g3-5cgm |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-w… | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-c2rv-fm36-43g7 |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in FanBridge FanBridge signup fanbridge-signup allo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-9p7p-v96r-fv6r |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Allegro Marketing hpb seo plugin for WordPress h… | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-4w5q-r88j-fm53 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:39Z |
| ghsa-4cj4-4jvg-p6q8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-3wcv-7wxv-gvf8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-v8q4-wpfv-hmr2 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-rxr2-m2mh-wpx6 |
4.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoh… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-qc8p-jp3g-x9hm |
8.8 (3.1)
|
Missing Authorization vulnerability in MDZ Persian Admnin Fonts persian-admin-fonts allows Exploiti… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-mx76-j492-6c3v |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-hg8r-q6jx-8pfj |
5.3 (3.1)
|
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functional… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-fh89-2rg8-6gx9 |
5.3 (3.1)
|
Missing Authorization vulnerability in 沃之涛 百度站长SEO合集(支持百度/神马/Bing/头条推送) baiduseo allows Accessing F… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-c8qv-m95w-84cx |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in raychat Raychat raychat allows Cross Site Reques… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-8rmj-2xg2-c6p9 |
4.3 (3.1)
|
Missing Authorization vulnerability in Kiotviet KiotViet Sync kiotvietsync allows Exploiting Incorr… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-7chw-hhvh-5rp9 |
5.3 (3.1)
|
Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allow… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-75wf-2743-qp5f |
5.3 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in airesvsg ACF to REST API acf-to-… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-r3xr-wm72-mg2w |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-qvpv-xh75-74pw |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2015-25 |
|
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allow… | ipython | 2015-09-29T19:59:00Z | 2021-07-15T02:22:14.948088Z |
| pysec-2015-24 |
|
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py i… | ipython | 2015-09-21T19:59:00Z | 2021-07-15T02:22:14.906376Z |
| pysec-2017-44 |
|
In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled i… | django | 2017-09-07T13:29:00Z | 2021-07-15T02:22:10.638315Z |
| pysec-2016-18 |
|
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when se… | django | 2016-12-09T20:59:00Z | 2021-07-15T02:22:10.532243Z |
| pysec-2016-17 |
|
Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded… | django | 2016-12-09T20:59:00Z | 2021-07-15T02:22:10.369344Z |
| pysec-2016-16 |
|
The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1… | django | 2016-04-08T15:59:00Z | 2021-07-15T02:22:10.225115Z |
| pysec-2016-15 |
|
The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows… | django | 2016-04-08T15:59:00Z | 2021-07-15T02:22:10.137209Z |
| pysec-2016-14 |
|
Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenti… | django | 2016-02-08T19:59:00Z | 2021-07-15T02:22:10.055528Z |
| pysec-2015-23 |
|
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.fl… | django | 2015-08-24T14:59:00Z | 2021-07-15T02:22:10.010649Z |
| pysec-2015-22 |
|
contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before … | django | 2015-08-24T14:59:00Z | 2021-07-15T02:22:09.927134Z |
| pysec-2015-21 |
|
validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a d… | django | 2015-07-14T17:59:00Z | 2021-07-15T02:22:09.798596Z |
| pysec-2015-19 |
|
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not… | django | 2015-06-02T14:59:00Z | 2021-07-15T02:22:09.577532Z |
| pysec-2013-21 |
|
The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.… | django | 2013-10-04T17:55:00Z | 2021-07-15T02:22:09.088856Z |
| pysec-2013-20 |
|
Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1… | django | 2013-09-16T19:14:00Z | 2021-07-15T02:22:08.994909Z |
| pysec-2013-19 |
|
Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/adm… | django | 2013-10-04T17:55:00Z | 2021-07-15T02:22:08.907870Z |
| pysec-2013-18 |
|
The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x be… | django | 2013-09-23T20:55:00Z | 2021-07-15T02:22:08.840916Z |
| pysec-2013-17 |
|
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release… | django | 2013-05-02T14:55:00Z | 2021-07-15T02:22:08.748982Z |
| pysec-2013-16 |
|
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 b… | django | 2013-05-02T14:55:00Z | 2021-07-15T02:22:08.650123Z |
| pysec-2012-7 |
|
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x befo… | django | 2012-11-18T23:55:00Z | 2021-07-15T02:22:08.562601Z |
| pysec-2011-9 |
|
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x bef… | django | 2011-01-10T20:00:00Z | 2021-07-15T02:22:08.187235Z |
| pysec-2011-8 |
|
The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before… | django | 2011-01-10T20:00:00Z | 2021-07-15T02:22:08.091343Z |
| pysec-2011-12 |
|
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on … | django | 2011-02-14T21:00:00Z | 2021-07-15T02:22:08.473566Z |
| pysec-2011-11 |
|
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.… | django | 2011-02-14T21:00:00Z | 2021-07-15T02:22:08.384566Z |
| pysec-2011-10 |
|
Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests… | django | 2011-02-14T21:00:00Z | 2021-07-15T02:22:08.278158Z |
| pysec-2010-12 |
|
Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attac… | django | 2010-09-14T19:00:00Z | 2021-07-15T02:22:08.006222Z |
| pysec-2018-52 |
|
A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_w… | cryptography | 2018-07-30T16:29:00Z | 2021-07-15T02:22:07.445715Z |
| pysec-2018-51 |
|
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values wer… | bleach | 2018-03-07T23:29:00Z | 2021-07-15T02:22:07.141398Z |
| pysec-2009-4 |
|
Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and … | django | 2009-10-13T10:30:00Z | 2021-07-15T02:22:07.960103Z |
| pysec-2009-3 |
|
The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not prope… | django | 2009-08-04T16:30:00Z | 2021-07-15T02:22:07.875702Z |
| pysec-2009-2 |
|
Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 al… | buildbot | 2009-08-26T14:24:00Z | 2021-07-15T02:22:07.247020Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3528 | A vulnerability was found in Campcodes Complete Online Student Management System 1.0 and … | 2024-04-11T05:03:27.323652Z |
| gsd-2024-3527 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.121652Z |
| gsd-2024-3526 | A vulnerability has been found in Campcodes Online Event Management System 1.0 and classi… | 2024-04-11T05:03:27.280106Z |
| gsd-2024-3525 | A vulnerability, which was classified as problematic, was found in Campcodes Online Event… | 2024-04-11T05:03:27.419761Z |
| gsd-2024-3524 | A vulnerability, which was classified as problematic, has been found in Campcodes Online … | 2024-04-11T05:03:27.133139Z |
| gsd-2024-3523 | A vulnerability classified as critical was found in Campcodes Online Event Management Sys… | 2024-04-11T05:03:27.336753Z |
| gsd-2024-3522 | A vulnerability classified as critical has been found in Campcodes Online Event Managemen… | 2024-04-11T05:03:27.036590Z |
| gsd-2024-3521 | A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has … | 2024-04-11T05:03:27.061995Z |
| gsd-2024-3520 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.088874Z |
| gsd-2024-3519 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.321424Z |
| gsd-2024-3518 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.239432Z |
| gsd-2024-3517 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.240663Z |
| gsd-2024-3516 | Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote a… | 2024-04-11T05:03:27.300112Z |
| gsd-2024-3515 | Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker… | 2024-04-11T05:03:27.175261Z |
| gsd-2024-3514 | ** REJECT ** **DUPLICATE** Please use CVE-2024-1846 instead. | 2024-04-11T05:03:27.174480Z |
| gsd-2024-3513 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.197785Z |
| gsd-2024-3512 | ** REJECT ** **DUPLICATE*** Please use CVE-2024-2583 instead. | 2024-04-11T05:03:27.315790Z |
| gsd-2024-3511 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.292073Z |
| gsd-2024-3510 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.296018Z |
| gsd-2024-3509 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.080625Z |
| gsd-2024-3508 | A flaw was found in Bombastic, which allows authenticated users to upload compressed (bzi… | 2024-04-11T05:03:27.063567Z |
| gsd-2024-3507 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.046374Z |
| gsd-2024-3506 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.128291Z |
| gsd-2024-3505 | JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive informat… | 2024-04-11T05:03:27.282899Z |
| gsd-2024-3504 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.402916Z |
| gsd-2024-3503 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.399660Z |
| gsd-2024-3502 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.116755Z |
| gsd-2024-3501 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.053973Z |
| gsd-2024-3500 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.329192Z |
| gsd-2024-3499 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.366035Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192279 | Malicious code in elf-stats-candystriped-chimney-879 (npm) | 2025-12-03T19:54:12Z | 2025-12-23T16:45:01Z |
| mal-2025-192278 | Malicious code in elf-stats-aurora-toy-659 (npm) | 2025-12-03T19:51:09Z | 2025-12-23T16:45:01Z |
| mal-2025-192272 | Malicious code in elf-stats-candystriped-ornament-933 (npm) | 2025-12-03T19:22:08Z | 2025-12-23T16:45:01Z |
| mal-2025-192000 | Malicious code in elf-stats-caroling-hollyberry-628 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191999 | Malicious code in elf-stats-candystriped-saddlebag-217 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191998 | Malicious code in elf-stats-candystriped-lantern-205 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191997 | Malicious code in elf-stats-candystriped-hollyberry-986 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191996 | Malicious code in elf-stats-candlelit-toy-571 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191994 | Malicious code in elf-stats-bright-star-712 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191993 | Malicious code in elf-stats-bright-cushion-246 (npm) | 2025-12-03T12:20:47Z | 2025-12-23T16:45:01Z |
| mal-2025-191992 | Malicious code in elf-stats-bright-bow-377 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191991 | Malicious code in elf-stats-aurora-workbench-5l3 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191990 | Malicious code in elf-stats-aurora-workbench-513 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| mal-2025-191989 | Malicious code in elf-stats-aurora-garland-513 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| MAL-2025-192480 | Malicious code in elf-stats-caroling-hammer-382 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T16:45:01Z |
| MAL-2025-192478 | Malicious code in elf-stats-candystriped-workbench-865 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T16:45:01Z |
| MAL-2025-192477 | Malicious code in elf-stats-candystriped-star-592 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T16:45:01Z |
| MAL-2025-192475 | Malicious code in elf-stats-candystriped-cookiejar-799 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T16:45:01Z |
| MAL-2025-192474 | Malicious code in elf-stats-candystriped-bauble-740 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T16:45:01Z |
| MAL-2025-192279 | Malicious code in elf-stats-candystriped-chimney-879 (npm) | 2025-12-03T19:54:12Z | 2025-12-23T16:45:01Z |
| MAL-2025-192278 | Malicious code in elf-stats-aurora-toy-659 (npm) | 2025-12-03T19:51:09Z | 2025-12-23T16:45:01Z |
| MAL-2025-192272 | Malicious code in elf-stats-candystriped-ornament-933 (npm) | 2025-12-03T19:22:08Z | 2025-12-23T16:45:01Z |
| MAL-2025-192000 | Malicious code in elf-stats-caroling-hollyberry-628 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| MAL-2025-191999 | Malicious code in elf-stats-candystriped-saddlebag-217 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| MAL-2025-191998 | Malicious code in elf-stats-candystriped-lantern-205 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| MAL-2025-191997 | Malicious code in elf-stats-candystriped-hollyberry-986 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| MAL-2025-191996 | Malicious code in elf-stats-candlelit-toy-571 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| MAL-2025-191994 | Malicious code in elf-stats-bright-star-712 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| MAL-2025-191993 | Malicious code in elf-stats-bright-cushion-246 (npm) | 2025-12-03T12:20:47Z | 2025-12-23T16:45:01Z |
| MAL-2025-191992 | Malicious code in elf-stats-bright-bow-377 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T16:45:01Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0322 | Adobe Photoshop Elements: Schwachstelle ermöglicht Privilegieneskalation | 2025-02-11T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0321 | Fortinet FortiOS und FortiProxy: Schwachstelle ermöglicht Codeausführung | 2025-02-11T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0319 | Fortinet FortiOS: Mehrere Schwachstellen | 2025-02-11T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0318 | Insyde UEFI Firmware: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-11T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0317 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-02-11T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0315 | Ivanti Cloud Services Appliance: Mehrere Schwachstellen | 2025-02-11T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0190 | Cacti: Mehrere Schwachstellen | 2025-01-26T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0070 | Fortinet FortiOS: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-01-14T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2024-3686 | Drupal: Mehrere Schwachstellen ermöglichen | 2024-12-11T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2024-3418 | Intel Firmware: Mehrere Schwachstellen | 2024-11-12T23:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2024-3088 | Cacti: Mehrere Schwachstellen | 2024-10-06T22:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2024-1700 | Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-07-23T22:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2024-1506 | Dell BSAFE: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-07-02T22:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2023-1754 | IBM InfoSphere Information Server: Mehrere Schwachstellen | 2023-07-16T22:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2022-1575 | wget: Schwachstelle ermöglicht Offenlegung von Informationen | 2021-04-28T22:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2022-1115 | QEMU: Schwachstelle ermöglicht Denial of Service | 2021-06-20T22:00:00.000+00:00 | 2025-02-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0313 | Siemens SIPROTEC: Mehrere Schwachstellen | 2025-02-10T23:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0312 | Siemens SIMATIC S7: Mehrere Schwachstellen | 2025-02-10T23:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0311 | Siemens TIA Portal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-02-10T23:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0310 | SolarWinds Kiwi Syslog Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-10T23:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0308 | Octopus Deploy: Mehrere Schwachstellen | 2025-02-10T23:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0307 | SAP Patchday Februar 2025: Mehrere Schwachstellen | 2025-02-10T23:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0306 | ABB 800xA: Schwachstelle ermöglicht Manipulation | 2025-02-10T23:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0303 | SolarWinds Platform: Mehrere Schwachstellen | 2025-02-10T23:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2024-3089 | Red Hat Enterprise Linux (Cryostat): Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2024-10-06T22:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2024-2151 | Ansible: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-09-16T22:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2024-1161 | Cacti: Schwachstelle ermöglicht Cross-Site Scripting | 2024-05-15T22:00:00.000+00:00 | 2025-02-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0300 | NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-02-09T23:00:00.000+00:00 | 2025-02-09T23:00:00.000+00:00 |
| wid-sec-w-2025-0299 | IBM Business Automation Workflow: Mehrere Schwachstellen | 2025-02-09T23:00:00.000+00:00 | 2025-02-09T23:00:00.000+00:00 |
| wid-sec-w-2025-0296 | D-LINK DIR-823X Router: Schwachstelle ermöglicht Denial of Service | 2025-02-09T23:00:00.000+00:00 | 2025-02-09T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:4269 | Red Hat Security Advisory: OpenShift Virtualization 4.12.12 Images security update | 2024-07-02T15:00:47+00:00 | 2026-01-21T23:22:54+00:00 |
| rhsa-2024:4151 | Red Hat Security Advisory: OpenShift Container Platform 4.15.20 security update | 2024-07-02T19:30:02+00:00 | 2026-01-21T23:22:49+00:00 |
| rhsa-2024:4144 | Red Hat Security Advisory: VolSync 0.9.2 for RHEL 9 | 2024-06-26T19:30:29+00:00 | 2026-01-21T23:22:47+00:00 |
| rhsa-2024:4146 | Red Hat Security Advisory: golang security update | 2024-06-27T00:22:55+00:00 | 2026-01-21T23:22:46+00:00 |
| rhsa-2024:4125 | Red Hat Security Advisory: Red Hat Service Interconnect 1.4.5 Release security update | 2024-06-26T13:56:19+00:00 | 2026-01-21T23:22:45+00:00 |
| rhsa-2024:4034 | Red Hat Security Advisory: Red Hat Service Interconnect 1.5.4 Release security update (images) | 2024-06-20T16:13:10+00:00 | 2026-01-21T23:22:41+00:00 |
| rhsa-2024:3920 | Red Hat Security Advisory: Migration Toolkit for Runtimes security, bug fix and enhancement update | 2024-06-13T11:02:36+00:00 | 2026-01-21T23:22:37+00:00 |
| rhsa-2024:3918 | Red Hat Security Advisory: OpenShift Container Platform 4.14.30 packages and security update | 2024-06-19T15:04:02+00:00 | 2026-01-21T23:22:35+00:00 |
| rhsa-2024:3831 | Red Hat Security Advisory: containernetworking-plugins security and bug fix update | 2024-06-11T19:48:32+00:00 | 2026-01-21T23:22:31+00:00 |
| rhsa-2024:3830 | Red Hat Security Advisory: gvisor-tap-vsock security and bug fix update | 2024-06-11T19:54:52+00:00 | 2026-01-21T23:22:29+00:00 |
| rhsa-2024:3781 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-06-10T18:41:58+00:00 | 2026-01-21T23:22:27+00:00 |
| rhsa-2024:3708 | Red Hat Security Advisory: Red Hat Build of Apache Camel 3.20.6 for Spring Boot security update. | 2024-06-06T16:42:04+00:00 | 2026-01-21T23:22:21+00:00 |
| rhsa-2024:3550 | Red Hat Security Advisory: HawtIO 4.0.0 for Red Hat build of Apache Camel 4 Release and security update. | 2024-06-03T11:52:35+00:00 | 2026-01-21T23:22:12+00:00 |
| rhsa-2024:3473 | Red Hat Security Advisory: OpenShift Virtualization 4.14.6 Images security update | 2024-05-29T15:48:02+00:00 | 2026-01-21T23:22:10+00:00 |
| rhsa-2024:3417 | Red Hat Security Advisory: mod_http2 security update | 2024-05-28T14:09:14+00:00 | 2026-01-21T23:22:09+00:00 |
| rhsa-2024:3402 | Red Hat Security Advisory: mod_http2 security update | 2024-05-28T14:34:07+00:00 | 2026-01-21T23:22:08+00:00 |
| rhsa-2024:3354 | Red Hat Security Advisory: Red Hat Fuse 7.13.0 release and security update | 2024-05-23T22:45:30+00:00 | 2026-01-21T23:22:07+00:00 |
| rhsa-2024:3265 | Red Hat Security Advisory: grafana security update | 2024-05-22T11:45:55+00:00 | 2026-01-21T23:22:01+00:00 |
| rhsa-2024:2907 | Red Hat Security Advisory: httpd:2.4 security update | 2024-05-20T01:58:01+00:00 | 2026-01-21T23:22:00+00:00 |
| rhsa-2024:2891 | Red Hat Security Advisory: httpd:2.4 security update | 2024-05-16T18:23:12+00:00 | 2026-01-21T23:21:57+00:00 |
| rhsa-2024:2817 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.10.5 security update | 2024-05-10T19:36:39+00:00 | 2026-01-21T23:21:50+00:00 |
| rhsa-2024:2816 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.2 security update | 2024-05-10T19:16:32+00:00 | 2026-01-21T23:21:50+00:00 |
| rhsa-2024:2815 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.4 security update | 2024-05-10T19:06:29+00:00 | 2026-01-21T23:21:48+00:00 |
| rhsa-2024:2768 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-paramiko) security update | 2024-05-22T20:40:08+00:00 | 2026-01-21T23:21:46+00:00 |
| rhsa-2024:2735 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-paramiko) security update | 2024-05-22T20:37:24+00:00 | 2026-01-21T23:21:43+00:00 |
| rhsa-2024:2694 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update | 2024-05-07T15:44:38+00:00 | 2026-01-21T23:21:40+00:00 |
| rhsa-2024:2693 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update | 2024-05-07T15:50:35+00:00 | 2026-01-21T23:21:38+00:00 |
| rhsa-2024:2569 | Red Hat Security Advisory: grafana-pcp security update | 2024-04-30T13:30:34+00:00 | 2026-01-21T23:21:37+00:00 |
| rhsa-2024:2568 | Red Hat Security Advisory: grafana security update | 2024-04-30T13:33:21+00:00 | 2026-01-21T23:21:33+00:00 |
| rhsa-2024:2564 | Red Hat Security Advisory: mod_http2 security update | 2024-04-30T13:37:06+00:00 | 2026-01-21T23:21:31+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-182-04 | Mitsubishi Electric Air Conditioning System | 2021-07-01T00:00:00.000000Z | 2021-07-01T00:00:00.000000Z |
| icsa-21-182-01 | Johnson Controls Facility Explorer | 2021-07-01T00:00:00.000000Z | 2021-07-01T00:00:00.000000Z |
| icsa-21-026-02 | All Bachmann M1 System Processor Modules | 2021-01-26T00:00:00.000000Z | 2021-07-01T00:00:00.000000Z |
| icsa-21-180-06 | Claroty Secure Remote Access Site | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsa-21-180-04 | JTEKT TOYOPUC PLC | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsa-21-180-03 | Panasonic FPWIN Pro | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsa-21-180-02 | Exacq Technologies exacqVision Enterprise Manager | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsa-21-180-01 | Exacq Technologies exacqVision Web Service | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsma-21-175-01 | Philips Interoperability Solution XDS | 2021-06-24T00:00:00.000000Z | 2021-06-24T00:00:00.000000Z |
| icsa-21-175-01 | FATEK Automation WinProladder | 2021-06-24T00:00:00.000000Z | 2021-06-24T00:00:00.000000Z |
| icsa-21-173-04 | CODESYS Control V2 Linux SysFile library | 2021-06-22T00:00:00.000000Z | 2021-06-22T00:00:00.000000Z |
| icsa-21-173-03 | CODESYS Control V2 communication | 2021-06-22T00:00:00.000000Z | 2021-06-22T00:00:00.000000Z |
| icsa-21-173-02 | CODESYS V2 web server | 2021-06-22T00:00:00.000000Z | 2021-06-22T00:00:00.000000Z |
| icsa-21-168-02 | Softing OPC-UA C++ SDK | 2021-06-17T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsa-21-168-01 | Schneider Electric Enerlin'X Com 'X 510 | 2021-06-17T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsa-21-021-05 | WAGO M&M Software fdtCONTAINER (Update C) | 2021-01-21T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsa-20-280-01 | Rockwell Automation ISaGRAF5 Runtime (Update A) | 2020-10-06T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsma-20-184-01 | OpenClinic GA (Update B) | 2020-07-02T00:00:00.000000Z | 2021-06-15T00:00:00.000000Z |
| icsa-21-166-02 | Automation Direct CLICK PLC CPU Modules | 2021-06-15T00:00:00.000000Z | 2021-06-15T00:00:00.000000Z |
| icsa-21-166-01 | ThroughTek P2P SDK | 2021-06-15T00:00:00.000000Z | 2021-06-15T00:00:00.000000Z |
| icsma-21-161-01 | ZOLL Defibrillator Dashboard | 2021-06-10T00:00:00.000000Z | 2021-06-10T00:00:00.000000Z |
| icsa-21-161-02 | AGG Software Web Server Plugin | 2021-06-10T00:00:00.000000Z | 2021-06-10T00:00:00.000000Z |
| icsa-21-161-01 | Rockwell Automation FactoryTalk Services Platform | 2021-06-10T00:00:00.000000Z | 2021-06-10T00:00:00.000000Z |
| icsa-21-159-02 | Open Design Alliance Drawings SDK | 2021-06-08T06:00:00.000000Z | 2021-06-08T06:00:00.000000Z |
| icsa-21-159-06 | Thales Sentinel LDK Run-Time Environment | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-159-05 | Schneider Electric Modicon X80 | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-159-04 | Schneider Electric IGSS | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-159-03 | AVEVA InTouch | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-159-01 | Johnson Controls Metasys | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-154-01 | Advantech iView | 2021-06-03T00:00:00.000000Z | 2021-06-03T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-webex-client-url-fcmpdfvy | Cisco Webex Meetings Desktop App and Webex Meetings Client URL Filtering Arbitrary Program Execution Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-08-11T16:29:52+00:00 |
| cisco-sa-webex-client-url-fcmpdfVY | Cisco Webex Meetings Desktop App and Webex Meetings Client URL Filtering Arbitrary Program Execution Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-08-11T16:29:52+00:00 |
| cisco-sa-cvp-info-dislosure-nzbewj9v | Cisco Unified Customer Voice Portal Information Disclosure Vulnerability | 2020-07-01T16:00:00+00:00 | 2020-08-11T13:54:42+00:00 |
| cisco-sa-cvp-info-dislosure-NZBEwj9V | Cisco Unified Customer Voice Portal Information Disclosure Vulnerability | 2020-07-01T16:00:00+00:00 | 2020-08-11T13:54:42+00:00 |
| cisco-sa-grub2-code-exec-xlepcapy | GRUB2 Arbitrary Code Execution Vulnerability | 2020-08-04T23:00:00+00:00 | 2020-08-10T15:49:28+00:00 |
| cisco-sa-grub2-code-exec-xLePCAPY | GRUB2 Arbitrary Code Execution Vulnerability | 2020-08-04T23:00:00+00:00 | 2020-08-10T15:49:28+00:00 |
| cisco-sa-bgp-erkeqaer | Cisco IOS XR Software Additional Paths Denial of Service Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-10T13:37:52+00:00 |
| cisco-sa-bgp-ErKEqAer | Cisco IOS XR Software Additional Paths Denial of Service Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-10T13:37:52+00:00 |
| cisco-sa-webex-smtdelete-gjdurogr | Cisco Webex Meetings Scheduled Meeting Template Deletion Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-smtdelete-gJDurOgR | Cisco Webex Meetings Scheduled Meeting Template Deletion Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-smtcreate-ymud5sk | Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-smtcreate-YmuD5Sk | Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-mttngs-xss-3vbdxduf | Cisco Webex Meetings Reflected Cross-Site Scripting Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-mttngs-xss-3VbdxDuF | Cisco Webex Meetings Reflected Cross-Site Scripting Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-makmv4qc | Cisco Webex Meetings User Email Address Information Disclosure Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-mAkmV4qc | Cisco Webex Meetings User Email Address Information Disclosure Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-client-g3zevbcp | Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-webex-client-g3zevBcp | Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-ucs-director-xss-o7t8oryr | Cisco UCS Director Stored Cross-Site Scripting Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-ucs-director-xss-O7T8ORYR | Cisco UCS Director Stored Cross-Site Scripting Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-ise-pass-disclosure-k8p2nsgg | Cisco Identity Services Engine Password Disclosure Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-ise-pass-disclosure-K8p2Nsgg | Cisco Identity Services Engine Password Disclosure Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-esa-sma-log-yxq6g2kg | Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-esa-sma-log-YxQ6g2kG | Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-dna-info-disc-3bz8bcgr | Cisco DNA Center Information Disclosure Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-dna-info-disc-3bz8BCgR | Cisco DNA Center Information Disclosure Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-cvc-bypass-k99cb2ff | Cisco Cyber Vision Center Software Access Control Bypass Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-cvc-bypass-K99Cb2ff | Cisco Cyber Vision Center Software Access Control Bypass Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-cucm-selfcare-drasc7sr | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| cisco-sa-cucm-selfcare-drASc7sr | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38500 | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | 2025-08-02T00:00:00.000Z | 2025-09-03T23:19:48.000Z |
| msrc_cve-2022-46883 | Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.<br />*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox < 107. | 2022-12-02T00:00:00.000Z | 2025-09-03T23:19:26.000Z |
| msrc_cve-2024-26866 | spi: lpspi: Avoid potential use-after-free in probe() | 2024-04-02T07:00:00.000Z | 2025-09-03T23:19:20.000Z |
| msrc_cve-2024-26677 | rxrpc: Fix delayed ACKs to not set the reference serial number | 2024-04-02T07:00:00.000Z | 2025-09-03T23:18:53.000Z |
| msrc_cve-2025-52496 | Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery. | 2025-07-02T00:00:00.000Z | 2025-09-03T23:18:31.000Z |
| msrc_cve-2023-39318 | Improper handling of HTML-like comments in script contexts in html/template | 2023-09-01T00:00:00.000Z | 2025-09-03T23:18:21.000Z |
| msrc_cve-2023-52757 | smb: client: fix potential deadlock when releasing mids | 2024-05-02T07:00:00.000Z | 2025-09-03T23:17:53.000Z |
| msrc_cve-2025-8844 | NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference | 2025-08-02T00:00:00.000Z | 2025-09-03T23:16:28.000Z |
| msrc_cve-2024-26893 | firmware: arm_scmi: Fix double free in SMC transport cleanup path | 2024-04-02T07:00:00.000Z | 2025-09-03T23:15:44.000Z |
| msrc_cve-2010-2249 | Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks. | 2010-06-02T00:00:00.000Z | 2025-09-03T23:15:39.000Z |
| msrc_cve-2024-35870 | smb: client: fix UAF in smb2_reconnect_server() | 2024-05-02T07:00:00.000Z | 2025-09-03T23:14:40.000Z |
| msrc_cve-2025-38646 | wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band | 2025-08-02T00:00:00.000Z | 2025-09-03T23:14:25.000Z |
| msrc_cve-2023-42364 | A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function. | 2023-11-01T07:00:00.000Z | 2025-09-03T23:14:03.000Z |
| msrc_cve-2025-0677 | Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks | 2025-02-02T00:00:00.000Z | 2025-09-03T23:13:01.000Z |
| msrc_cve-2024-23829 | aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators | 2024-01-01T08:00:00.000Z | 2025-09-03T23:12:33.000Z |
| msrc_cve-2024-6610 | Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2025-09-03T23:12:15.000Z |
| msrc_cve-2022-49342 | net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register | 2025-02-02T00:00:00.000Z | 2025-09-03T23:11:30.000Z |
| msrc_cve-2018-25091 | urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this issue exists because of an incomplete fix for CVE-2018-20060 (which was case-sensitive). | 2023-10-01T00:00:00.000Z | 2025-09-03T23:11:12.000Z |
| msrc_cve-2022-49901 | blk-mq: Fix kmemleak in blk_mq_init_allocated_queue | 2025-05-02T00:00:00.000Z | 2025-09-03T23:11:01.000Z |
| msrc_cve-2023-52737 | btrfs: lock the inode in shared mode before starting fiemap | 2024-05-02T07:00:00.000Z | 2025-09-03T23:10:25.000Z |
| msrc_cve-2025-38237 | media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() | 2025-07-02T00:00:00.000Z | 2025-09-03T23:10:02.000Z |
| msrc_cve-2025-38640 | bpf: Disable migration in nf_hook_run_bpf(). | 2025-08-02T00:00:00.000Z | 2025-09-03T23:09:33.000Z |
| msrc_cve-2025-38364 | maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() | 2025-07-02T00:00:00.000Z | 2025-09-03T23:08:55.000Z |
| msrc_cve-2023-3482 | When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115. | 2023-07-01T07:00:00.000Z | 2025-09-03T23:08:41.000Z |
| msrc_cve-2018-14042 | In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. | 2018-07-02T00:00:00.000Z | 2025-09-03T23:08:20.000Z |
| msrc_cve-2025-8843 | NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow | 2025-08-02T00:00:00.000Z | 2025-09-03T23:08:17.000Z |
| msrc_cve-2021-33450 | An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c. | 2022-07-02T00:00:00.000Z | 2025-09-03T23:07:56.000Z |
| msrc_cve-2024-35784 | btrfs: fix deadlock with fiemap and extent locking | 2024-05-02T07:00:00.000Z | 2025-09-03T23:07:39.000Z |
| msrc_cve-2024-50009 | cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value | 2024-10-01T07:00:00.000Z | 2025-09-03T23:06:55.000Z |
| msrc_cve-2023-49558 | An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params function in the modules/preprocs/nasm/nasm-pp.c component. | 2024-01-01T08:00:00.000Z | 2025-09-03T23:05:13.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202005-0696 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) … | 2024-03-18T22:14:29.272000Z |
| var-200411-0171 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos c… | 2024-03-18T21:58:08.254000Z |
| var-202211-0553 | Missing release of memory after effective lifetime in firmware for Intel(R) SPS before ve… | 2024-03-18T21:52:24.173000Z |
| var-202211-0555 | Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700… | 2024-03-18T21:30:47.175000Z |
| var-200305-0063 | OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends… | 2024-03-18T20:58:00.361000Z |
| var-202309-0577 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visua… | 2024-03-18T20:45:19.974000Z |
| var-202208-0642 | Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.… | 2024-03-18T20:38:03.825000Z |
| var-200110-0326 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-03-18T20:17:51.889000Z |
| var-200809-0209 | The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4… | 2024-03-18T19:48:03.569000Z |
| var-201011-0079 | OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, whic… | 2024-03-18T19:31:19.132000Z |
| var-202402-0339 | A post authentication command injection vulnerability exists when configuring the wiregu… | 2024-03-16T23:02:49.001000Z |
| var-202402-0356 | A post authentication command injection vulnerability exists in the GRE policy functional… | 2024-03-16T23:02:29.579000Z |
| var-202403-0458 | Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerabili… | 2024-03-16T23:01:37.192000Z |
| var-202402-0660 | A post authentication command injection vulnerability exists in the ipsec policy function… | 2024-03-16T22:55:06.407000Z |
| var-202403-0160 | Cross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware… | 2024-03-16T22:51:04.657000Z |
| var-202311-0697 | A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an ope… | 2024-03-16T22:40:49.696000Z |
| var-200609-1252 | OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key… | 2024-03-16T20:18:27.377000Z |
| var-202402-0523 | there is a possible out of bounds write due to a missing bounds check. This could lead to… | 2024-03-15T23:07:35.562000Z |
| var-202312-0259 | Affected devices improperly handle specially crafted packets sent to port 102/tcp. This… | 2024-03-14T21:09:08.879000Z |
| var-202403-0393 | A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cg… | 2024-03-14T03:14:25.338000Z |
| var-202202-1144 | Puma is a Ruby/Rack web server built for parallelism. Prior to `puma` version `5.6.2`, `p… | 2024-03-13T08:26:19.866000Z |
| var-202308-3431 | Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via … | 2024-03-12T18:17:17.595000Z |
| var-202305-1882 | TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi… | 2024-03-12T18:15:47.847000Z |
| var-202303-0603 | TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injecti… | 2024-03-12T17:58:50.032000Z |
| var-202401-2614 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the f… | 2024-03-07T22:58:37.321000Z |
| var-202209-2004 | A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software… | 2024-03-07T22:57:51.363000Z |
| var-202401-2371 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the fu… | 2024-03-07T22:56:50.490000Z |
| var-202402-2610 | RG-UAC Ruijie unified online behavior management and audit system is an online behavior m… | 2024-03-07T22:55:59.356000Z |
| var-202402-2400 | NBR6205-E is a router product. Beijing Xingwang Ruijie Network Technology Co., Ltd. N… | 2024-03-07T22:55:59.453000Z |
| var-202401-2419 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the f… | 2024-03-07T22:55:59.714000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2010-000010 | HL-SiteManager vulnerable to SQL injection | 2010-04-02T17:33+09:00 | 2010-04-02T17:33+09:00 |
| jvndb-2010-000009 | Compiere vulnerable to cross-site scripting | 2010-04-02T17:32+09:00 | 2010-04-02T17:32+09:00 |
| jvndb-2010-000008 | Compiere vulnerable to cross-site scripting | 2010-04-02T17:32+09:00 | 2010-04-02T17:32+09:00 |
| jvndb-2010-000007 | PrettyFormMail vulnerable to cross-site scripting | 2010-04-02T17:31+09:00 | 2010-04-02T17:31+09:00 |
| jvndb-2009-000057 | ATOK screen lock bypass vulnerability | 2010-03-23T17:42+09:00 | 2010-03-23T17:42+09:00 |
| jvndb-2009-000018 | Ichitaro series buffer overflow vulnerability | 2010-03-23T17:42+09:00 | 2010-03-23T17:42+09:00 |
| jvndb-2010-001147 | JP1/Cm2/Network Node Manager Remote Console Insecure File Permissions Vulnerability | 2010-03-15T12:21+09:00 | 2010-03-15T12:21+09:00 |
| jvndb-2010-000006 | OpenPNE authentication bypass vulnerability | 2010-03-12T15:29+09:00 | 2010-03-12T15:29+09:00 |
| jvndb-2010-001088 | uCosminexus Portal Framework Cross-Site Scripting Vulnerability | 2010-03-03T12:00+09:00 | 2010-03-03T12:00+09:00 |
| jvndb-2010-000005 | tDiary plugin tb-send.rb vulnerable to cross-site scripting | 2010-02-26T12:45+09:00 | 2010-02-26T12:45+09:00 |
| jvndb-2009-002475 | Buffer Overflow Vulnerability in Cosminexus, Processing Kit for XML and Hitachi Developer's Kit for Java | 2010-02-09T14:03+09:00 | 2010-02-09T14:03+09:00 |
| jvndb-2009-000068 | Implementations of IPv6 may be vulnerable to denial of service (DoS) attacks | 2009-10-26T15:58+09:00 | 2010-01-25T12:02+09:00 |
| jvndb-2010-000004 | Oracle Application Server vulnerable to cross-site scripting | 2010-01-14T21:24+09:00 | 2010-01-14T21:24+09:00 |
| jvndb-2010-000003 | WebCalenderC3 vulnerable to directory traversal | 2010-01-14T21:24+09:00 | 2010-01-14T21:24+09:00 |
| jvndb-2010-000002 | WebCalenderC3 cross-site scripting vulnerability | 2010-01-14T21:23+09:00 | 2010-01-14T21:23+09:00 |
| jvndb-2010-000001 | Movable Type access restriction bypass vulnerability | 2010-01-06T16:26+09:00 | 2010-01-06T16:26+09:00 |
| jvndb-2008-000009 | Apache Tomcat fails to properly handle cookie value | 2008-05-21T00:00+09:00 | 2010-01-05T12:14+09:00 |
| jvndb-2009-002358 | Fujitsu Interstage and Systemwalker SSL Vulnerabilities | 2009-12-28T11:19+09:00 | 2009-12-28T11:19+09:00 |
| jvndb-2009-002345 | StartTLS not enabled in Hitachi Storage Command Suite products | 2009-12-24T14:32+09:00 | 2009-12-24T14:32+09:00 |
| jvndb-2009-000084 | P forum vulnerable to directory traversal | 2009-12-17T14:18+09:00 | 2009-12-17T14:18+09:00 |
| jvndb-2009-000077 | Active! mail 2003 cookie disclosure vulnerability | 2009-12-15T19:52+09:00 | 2009-12-15T19:52+09:00 |
| jvndb-2009-000076 | Active! mail 2003 session ID disclosure vulnerability | 2009-12-15T19:52+09:00 | 2009-12-15T19:52+09:00 |
| jvndb-2009-000075 | Active! mail 2003 cross-site scripting vulnerability | 2009-12-15T19:52+09:00 | 2009-12-15T19:52+09:00 |
| jvndb-2009-000079 | SEIL/B1 authentication issue | 2009-12-09T19:38+09:00 | 2009-12-09T19:38+09:00 |
| jvndb-2009-000078 | EC-CUBE information disclosure vulnerability | 2009-12-07T14:51+09:00 | 2009-12-07T14:51+09:00 |
| jvndb-2009-000074 | Redmine vulnerable to cross-site request forgery | 2009-11-19T15:45+09:00 | 2009-11-19T15:45+09:00 |
| jvndb-2009-000073 | Redmine vulnerable to cross-site scripting | 2009-11-19T15:45+09:00 | 2009-11-19T15:45+09:00 |
| jvndb-2007-001022 | Apache UTF-7 Encoding Cross-Site Scripting Vulnerability | 2008-05-21T00:00+09:00 | 2009-11-16T11:52+09:00 |
| jvndb-2009-000072 | Roundcube Webmail vulnerable to cross-site request forgery | 2009-11-04T15:27+09:00 | 2009-11-04T15:27+09:00 |
| jvndb-2009-000071 | Roundcube Webmail vulnerable to cross-site request forgery | 2009-11-04T15:27+09:00 | 2009-11-04T15:27+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20258-1 | Security update for expat | 2025-03-31T14:22:37Z | 2025-03-31T14:22:37Z |
| suse-su-2025:20257-1 | Security update for libarchive | 2025-03-31T14:21:24Z | 2025-03-31T14:21:24Z |
| suse-su-2025:1066-1 | Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6) | 2025-03-31T13:33:27Z | 2025-03-31T13:33:27Z |
| suse-su-2025:1064-1 | Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6) | 2025-03-31T13:03:54Z | 2025-03-31T13:03:54Z |
| suse-su-2025:1063-1 | Security update for apparmor | 2025-03-31T09:04:55Z | 2025-03-31T09:04:55Z |
| suse-su-2025:1062-1 | Security update for docker, docker-stable | 2025-03-31T08:45:25Z | 2025-03-31T08:45:25Z |
| suse-su-2025:1059-1 | Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6) | 2025-03-28T19:33:25Z | 2025-03-28T19:33:25Z |
| suse-su-2025:1057-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-03-28T19:03:41Z | 2025-03-28T19:03:41Z |
| suse-su-2025:1056-1 | Security update for python3 | 2025-03-28T17:06:36Z | 2025-03-28T17:06:36Z |
| suse-su-2025:1055-1 | Security update for skopeo | 2025-03-28T16:55:49Z | 2025-03-28T16:55:49Z |
| suse-su-2025:1054-1 | Security update for mercurial | 2025-03-28T16:54:30Z | 2025-03-28T16:54:30Z |
| suse-su-2025:1053-1 | Security update for openvpn | 2025-03-28T16:46:40Z | 2025-03-28T16:46:40Z |
| suse-su-2025:1052-1 | Security update for govulncheck-vulndb | 2025-03-28T15:49:32Z | 2025-03-28T15:49:32Z |
| suse-su-2025:1051-1 | Security update for erlang26 | 2025-03-28T14:50:17Z | 2025-03-28T14:50:17Z |
| suse-su-2025:20286-1 | Security update for ucode-intel | 2025-03-28T13:56:24Z | 2025-03-28T13:56:24Z |
| suse-su-2025:20255-1 | Security update for python-requests | 2025-03-28T13:56:14Z | 2025-03-28T13:56:14Z |
| suse-su-2025:20254-1 | Security update for python-Jinja2 | 2025-03-28T13:55:43Z | 2025-03-28T13:55:43Z |
| suse-su-2025:20252-1 | Security update for libsoup | 2025-03-28T13:54:44Z | 2025-03-28T13:54:44Z |
| suse-su-2025:20249-1 | Security update for the Linux Kernel | 2025-03-28T07:51:47Z | 2025-03-28T07:51:47Z |
| suse-su-2025:20166-1 | Security update for the Linux Kernel | 2025-03-28T07:51:47Z | 2025-03-28T07:51:47Z |
| suse-su-2025:1043-1 | Security update for python36 | 2025-03-27T16:27:44Z | 2025-03-27T16:27:44Z |
| suse-su-2025:20165-1 | Security update for the Linux Kernel | 2025-03-27T15:23:42Z | 2025-03-27T15:23:42Z |
| suse-su-2025:20164-1 | Security update for the Linux Kernel | 2025-03-27T15:23:38Z | 2025-03-27T15:23:38Z |
| suse-su-2025:1041-1 | Security update for python3 | 2025-03-27T15:08:09Z | 2025-03-27T15:08:09Z |
| suse-su-2025:20248-1 | Security update for the Linux Kernel | 2025-03-27T14:32:55Z | 2025-03-27T14:32:55Z |
| suse-su-2025:20247-1 | Security update for the Linux Kernel | 2025-03-27T14:05:14Z | 2025-03-27T14:05:14Z |
| suse-su-2025:20163-1 | Security update for the Linux Kernel | 2025-03-27T12:56:22Z | 2025-03-27T12:56:22Z |
| suse-su-2025:20246-1 | Security update for the Linux Kernel | 2025-03-27T12:56:21Z | 2025-03-27T12:56:21Z |
| suse-su-2025:1038-1 | Security update for podman | 2025-03-27T09:44:39Z | 2025-03-27T09:44:39Z |
| suse-su-2025:1037-1 | Security update for podman | 2025-03-27T09:44:17Z | 2025-03-27T09:44:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13426-1 | libxml2-2-2.11.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13425-1 | libtommath-devel-1.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13424-1 | chromedriver-119.0.6045.159-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13423-1 | ungoogled-chromium-119.0.6045.123-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13422-1 | libnbd-1.18.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13421-1 | java-1_8_0-openjdk-1.8.0.392-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13420-1 | connman-1.42-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13419-1 | chromedriver-119.0.6045.123-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13418-1 | traceroute-2.1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13417-1 | python310-asyncssh-2.14.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13416-1 | postfix-3.8.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13415-1 | optipng-0.7.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13414-1 | libecpg6-16.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13413-1 | postgresql15-15.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13412-1 | libmozjs-115-0-115.4.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13411-1 | binutils-2.41-1.2 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13410-1 | postgresql14-14.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13409-1 | postgresql13-13.13-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13408-1 | postgresql11-11.22-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13407-1 | go1.21-1.21.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13406-1 | go1.20-1.20.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13405-1 | kernel-devel-6.6.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13404-1 | mupdf-1.23.4-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13403-1 | exiv2-0.28.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13402-1 | cosign-2.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13401-1 | roundcubemail-1.6.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13400-1 | phpPgAdmin-7.14.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13399-1 | libpainter0-0.9.23.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13398-1 | squid-6.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13397-1 | ruby3.2-rubygem-activesupport-7.0-7.0.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23728 | TOTOLINK X2000R Gh formReflashClientTbl方法缓冲区溢出漏洞 | 2023-10-27 | 2025-10-13 |
| cnvd-2025-23727 | TOTOLINK X2000R Gh formPortFw方法缓冲区溢出漏洞 | 2023-10-27 | 2025-10-13 |
| cnvd-2025-23640 | QNAP Qsync Central路径遍历漏洞（CNVD-2025-23640） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23639 | QNAP Qsync Central路径遍历漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23638 | QNAP Qsync Central空指针取消引用漏洞（CNVD-2025-23638） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23637 | QNAP Qsync Central空指针取消引用漏洞（CNVD-2025-23637） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23625 | Dell PowerScale OneFS拒绝服务漏洞 | 2025-01-24 | 2025-10-13 |
| cnvd-2025-23624 | QNAP Qsync Central空指针取消引用漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23623 | QNAP Qsync Central资源分配无限制漏洞（CNVD-2025-23623） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23622 | QNAP Qsync Central资源分配无限制漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23621 | QNAP Qsync Central拒绝服务漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23620 | QNAP Qsync Central SQL注入漏洞（CNVD-2025-23620） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23619 | QNAP Qsync Central SQL注入漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23608 | TOTOLINK X2000R Gh formTcpipSetup方法缓冲区溢出漏洞 | 2023-10-27 | 2025-10-13 |
| cnvd-2025-23607 | TOTOLINK X2000R Gh formSysLog方法缓冲区溢出漏洞 | 2023-10-27 | 2025-10-13 |
| cnvd-2025-23485 | D-Link DIR-823X命令注入漏洞（CNVD-2025-23485） | 2024-07-10 | 2025-10-13 |
| cnvd-2025-23484 | DELL Enterprise SONiC OS加密密钥漏洞 | 2025-08-11 | 2025-10-13 |
| cnvd-2025-23483 | Dell RecoverPoint for Virtual Machines弱文件系统权限漏洞 | 2025-08-12 | 2025-10-13 |
| cnvd-2025-23482 | Dell Client Platform不正确的链接解析漏洞 | 2024-12-20 | 2025-10-13 |
| cnvd-2025-23481 | Dell Inventory Collector文件访问前链接解析不正确漏洞 | 2024-12-25 | 2025-10-13 |
| cnvd-2025-23480 | Dell VxRail明文存储密码漏洞（CNVD-2025-23480） | 2025-01-21 | 2025-10-13 |
| cnvd-2025-23479 | Dell VxRail明文存储密码漏洞 | 2025-01-24 | 2025-10-13 |
| cnvd-2025-23478 | Dell Networking Switches running Enterprise SONiC OS日志信息泄露漏洞 | 2025-02-10 | 2025-10-13 |
| cnvd-2025-23477 | Dell Avamar访问令牌重用漏洞 | 2025-02-18 | 2025-10-13 |
| cnvd-2025-23476 | DELL PowerProtect Data Manager路径遍历漏洞 | 2025-09-12 | 2025-10-13 |
| cnvd-2025-23475 | DELL PowerScale OneFS信息泄露漏洞 | 2025-09-28 | 2025-10-13 |
| cnvd-2025-23474 | DELL BSAFE Crypto-J信息泄露漏洞 | 2025-09-28 | 2025-10-13 |
| cnvd-2025-23473 | GNU Binutils elf_swap_shdr函数缓冲区溢出漏洞 | 2025-09-29 | 2025-10-13 |
| cnvd-2025-23472 | GNU Binutils bfd/elf-eh-frame.c文件堆缓冲区溢出漏洞 | 2025-09-29 | 2025-10-13 |
| cnvd-2025-23471 | D-Link DIR-823X命令注入漏洞（CNVD-2025-23471） | 2025-09-11 | 2025-10-13 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0992 | Multiples vulnérabilités dans les produits IBM | 2024-11-15T00:00:00.000000 | 2024-11-15T00:00:00.000000 |
| CERTFR-2024-AVI-0991 | Vulnérabilité dans Spring | 2024-11-15T00:00:00.000000 | 2024-11-15T00:00:00.000000 |
| CERTFR-2024-AVI-0989 | Vulnérabilité dans MongoDB | 2024-11-15T00:00:00.000000 | 2024-11-15T00:00:00.000000 |
| CERTFR-2024-AVI-0988 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-15T00:00:00.000000 | 2024-11-15T00:00:00.000000 |
| CERTFR-2024-AVI-0987 | Multiples vulnérabilités dans PostgreSQL | 2024-11-15T00:00:00.000000 | 2024-11-15T00:00:00.000000 |
| certfr-2024-avi-0986 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-11-14T00:00:00.000000 | 2024-11-14T00:00:00.000000 |
| certfr-2024-avi-0985 | Multiples vulnérabilités dans Stormshield Network Security | 2024-11-14T00:00:00.000000 | 2024-11-14T00:00:00.000000 |
| certfr-2024-avi-0984 | Vulnérabilité dans les produits Symfony | 2024-11-14T00:00:00.000000 | 2024-11-14T00:00:00.000000 |
| certfr-2024-avi-0983 | Vulnérabilité dans les produits Mozilla | 2024-11-14T00:00:00.000000 | 2024-11-14T00:00:00.000000 |
| CERTFR-2024-AVI-0986 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-11-14T00:00:00.000000 | 2024-11-14T00:00:00.000000 |
| CERTFR-2024-AVI-0985 | Multiples vulnérabilités dans Stormshield Network Security | 2024-11-14T00:00:00.000000 | 2024-11-14T00:00:00.000000 |
| CERTFR-2024-AVI-0984 | Vulnérabilité dans les produits Symfony | 2024-11-14T00:00:00.000000 | 2024-11-14T00:00:00.000000 |
| CERTFR-2024-AVI-0983 | Vulnérabilité dans les produits Mozilla | 2024-11-14T00:00:00.000000 | 2024-11-14T00:00:00.000000 |
| certfr-2024-avi-0982 | Vulnérabilité dans CPython | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0981 | Multiples vulnérabilités dans GitLab | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0980 | Multiples vulnérabilités dans les produits Intel | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0979 | Multiples vulnérabilités dans les produits Fortinet | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0978 | Multiples vulnérabilités dans les produits Microsoft | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0977 | Multiples vulnérabilités dans Microsoft Azure | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0976 | Multiples vulnérabilités dans Microsoft .Net | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0975 | Multiples vulnérabilités dans Microsoft Windows | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0974 | Multiples vulnérabilités dans Microsoft Office | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0973 | Vulnérabilité dans les produits Citrix | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0972 | Vulnérabilité dans les produits Adobe | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0971 | Multiples vulnérabilités dans Grafana | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0970 | Multiples vulnérabilités dans Google Chrome | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0968 | Multiples vulnérabilités dans les produits Siemens | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0967 | Multiples vulnérabilités dans les produits Ivanti | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0966 | Multiples vulnérabilités dans Nagios XI | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |
| certfr-2024-avi-0965 | Multiples vulnérabilités dans les produits PrimX | 2024-11-13T00:00:00.000000 | 2024-11-13T00:00:00.000000 |