Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62021 |
4.3 (3.1)
|
WordPress Acknowledgify plugin <= 1.1.3 - Broken Acces… |
Made Neat |
Acknowledgify |
2025-10-22T14:32:49.606Z | 2026-01-20T14:28:13.041Z |
| CVE-2025-62020 |
7.1 (3.1)
|
WordPress VOD Infomaniak plugin <= 1.5.11 - Cross Site… |
Infomaniak Network |
VOD Infomaniak |
2025-10-22T14:32:49.407Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62019 |
6.5 (3.1)
|
WordPress Recipe Card Blocks for Gutenberg & Elementor… |
WPZOOM |
Recipe Card Blocks for Gutenberg & Elementor |
2025-10-22T14:32:49.208Z | 2026-01-20T14:28:13.056Z |
| CVE-2025-62018 |
5.3 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Broken Access Cont… |
hogash |
Kallyas |
2025-11-06T15:55:26.361Z | 2026-01-20T14:28:13.058Z |
| CVE-2025-62017 |
5.4 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Broken Access Cont… |
hogash |
Kallyas |
2025-11-06T15:55:25.294Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62016 |
9.9 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upl… |
hogash |
Kallyas |
2025-11-06T15:55:24.586Z | 2026-01-20T14:28:13.045Z |
| CVE-2025-62014 |
8.1 (3.1)
|
WordPress ITok theme <= 1.1.42 - Local File Inclusion … |
ApusTheme |
ITok |
2025-11-06T15:55:23.874Z | 2026-01-20T14:28:13.268Z |
| CVE-2025-62013 |
4.3 (3.1)
|
WordPress UiChemy plugin <= 4.0.0 - Broken Access Cont… |
POSIMYTH |
UiChemy |
2025-10-22T14:32:48.799Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62012 |
6.5 (3.1)
|
WordPress TheGem (Elementor) theme <= 5.10.5 - Cross S… |
CodexThemes |
TheGem (Elementor) |
2025-11-06T15:55:23.261Z | 2026-01-20T14:28:13.036Z |
| CVE-2025-62011 |
6.5 (3.1)
|
WordPress TheGem theme <= 5.10.5 - Cross Site Scriptin… |
CodexThemes |
TheGem |
2025-11-06T15:55:22.593Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62010 |
8.1 (3.1)
|
WordPress Famita theme <= 1.54 - Local File Inclusion … |
ApusTheme |
Famita |
2025-11-06T15:55:21.866Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62009 |
4.3 (3.1)
|
WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 … |
Dmitry V. (CEO of "UKR Solution") |
UPC/EAN/GTIN Code Generator |
2025-10-22T14:32:48.527Z | 2026-01-20T14:28:13.052Z |
| CVE-2025-62008 |
8.8 (3.1)
|
WordPress Product Table For WooCommerce plugin <= 1.2.… |
acowebs |
Product Table For WooCommerce |
2025-10-22T14:32:48.273Z | 2026-01-20T14:28:13.044Z |
| CVE-2025-62006 |
5.4 (3.1)
|
WordPress WP SMS plugin <= 7.0.1 - Broken Access Contr… |
VeronaLabs |
WP SMS |
2025-10-22T14:32:47.684Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62005 |
7.1 (3.1)
|
WordPress SUMO Memberships for WooCommerce plugin < 7.… |
FantasticPlugins |
SUMO Memberships for WooCommerce |
2025-10-22T14:32:47.453Z | 2026-01-20T14:28:13.038Z |
| CVE-2025-60248 |
7.5 (3.1)
|
WordPress WPC Product Options for WooCommerce plugin <… |
WPClever |
WPC Product Options for WooCommerce |
2025-11-06T15:55:21.142Z | 2026-01-20T14:28:13.000Z |
| CVE-2025-60245 |
9.8 (3.1)
|
WordPress WP User Manager plugin <= 2.9.12 - PHP Objec… |
WP User Manager |
WP User Manager |
2025-11-06T15:55:19.859Z | 2026-01-20T14:28:13.047Z |
| CVE-2025-62015 |
7.6 (3.1)
|
WordPress Advanced Coupons for WooCommerce Coupons plu… |
Josh Kohlbach |
Advanced Coupons for WooCommerce Coupons |
2025-10-22T14:32:49.014Z | 2026-01-20T14:28:12.860Z |
| CVE-2025-62007 |
8.8 (3.1)
|
WordPress Voice Feedback plugin <= 1.0.3 - Privilege E… |
bPlugins |
Voice Feedback |
2025-10-22T14:32:47.880Z | 2026-01-20T14:28:12.873Z |
| CVE-2025-60247 |
6.5 (3.1)
|
WordPress Bux Woocommerce plugin <= 1.2.3 - Broken Acc… |
Bux |
Bux Woocommerce |
2025-11-06T15:55:20.539Z | 2026-01-20T14:28:12.911Z |
| CVE-2025-60246 |
7.1 (3.1)
|
WordPress Simple Finance Calculator plugin <= 1.0 - Re… |
weissmike |
Simple Finance Calculator |
2025-10-22T14:32:47.237Z | 2026-01-20T14:28:12.981Z |
| CVE-2025-60244 |
7.1 (3.1)
|
WordPress TableOn plugin <= 1.0.4.2 - Content Injectio… |
RealMag777 |
TableOn |
2025-11-06T15:55:18.193Z | 2026-01-20T14:28:12.860Z |
| CVE-2025-60243 |
9.8 (3.1)
|
WordPress Selling Commander for WooCommerce plugin <= … |
Holest Engineering |
Selling Commander for WooCommerce |
2025-11-06T15:55:15.782Z | 2026-01-20T14:28:12.895Z |
| CVE-2025-60242 |
7.5 (3.1)
|
WordPress Download Counter plugin <= 1.4 - Arbitrary F… |
Anatoly |
Download Counter |
2025-11-06T15:55:14.917Z | 2026-01-20T14:28:12.776Z |
| CVE-2025-60241 |
7.5 (3.1)
|
WordPress Premmerce plugin <= 1.3.19 - Local File Incl… |
Premmerce |
Premmerce |
2025-11-06T15:55:13.362Z | 2026-01-20T14:28:12.936Z |
| CVE-2025-60240 |
7.5 (3.1)
|
WordPress AnyComment plugin <= 0.3.6 - Local File Incl… |
Alexander |
AnyComment |
2025-11-06T15:55:10.324Z | 2026-01-20T14:28:12.866Z |
| CVE-2025-60239 |
8.5 (3.1)
|
WordPress CoSchool LMS plugin <= 1.4.3 - SQL Injection… |
Codexpert, Inc |
CoSchool LMS |
2025-11-06T15:55:09.493Z | 2026-01-20T14:28:12.963Z |
| CVE-2025-60238 |
9.8 (3.1)
|
WordPress UNIVERSAM plugin <= 8.72.34 - PHP Object Inj… |
universam |
UNIVERSAM |
2025-10-22T14:32:47.058Z | 2026-01-20T14:28:12.553Z |
| CVE-2025-60235 |
10 (3.1)
|
WordPress Helpdesk Support Ticket System for WooCommer… |
Plugify |
Helpdesk Support Ticket System for WooCommerce |
2025-11-06T15:55:07.928Z | 2026-01-20T14:28:12.539Z |
| CVE-2025-60234 |
8.8 (3.1)
|
WordPress Single Property theme <= 2.8 - PHP Object In… |
designthemes |
Single Property |
2025-10-22T14:32:46.860Z | 2026-01-20T14:28:12.552Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64269 |
4.3 (3.1)
|
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… |
EDGARROJAS |
WooCommerce PDF Invoice Builder |
2025-11-13T09:24:30.214Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64268 |
7.5 (3.1)
|
WordPress Timetics plugin <= 1.0.44 - Broken Access Co… |
Arraytics |
Timetics |
2025-12-18T07:22:14.683Z | 2026-01-20T14:28:21.327Z |
| CVE-2025-64267 |
4.3 (3.1)
|
WordPress WooCommerce Ultimate Points And Rewards plug… |
WPSwings |
WooCommerce Ultimate Points And Rewards |
2025-11-13T09:24:29.783Z | 2026-01-20T14:28:21.878Z |
| CVE-2025-64266 |
8.8 (3.1)
|
WordPress Booking and Rental Manager plugin <= 2.5.4 -… |
magepeopleteam |
Booking and Rental Manager |
2025-12-18T07:22:14.481Z | 2026-01-20T14:28:21.161Z |
| CVE-2025-64265 |
4.3 (3.1)
|
WordPress Frontend File Manager plugin <= 23.2 - Broke… |
N-Media |
Frontend File Manager |
2025-11-13T09:24:29.310Z | 2026-01-20T14:28:21.291Z |
| CVE-2025-64264 |
5.9 (3.1)
|
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … |
Aman |
Popup addon for Ninja Forms |
2025-11-13T09:24:28.871Z | 2026-01-20T14:28:21.081Z |
| CVE-2025-64263 |
5.4 (3.1)
|
WordPress WP Content Pilot plugin <= 2.1.7 - Broken Ac… |
PluginEver |
WP Content Pilot |
2025-11-13T09:24:28.383Z | 2026-01-20T14:28:21.298Z |
| CVE-2025-64262 |
6.5 (3.1)
|
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… |
ramon fincken |
Auto Prune Posts |
2025-11-13T09:24:27.918Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64261 |
6.5 (3.1)
|
WordPress Appointment Booking Calendar plugin <= 1.3.9… |
codepeople |
Appointment Booking Calendar |
2025-11-13T09:24:27.476Z | 2026-01-20T14:28:21.721Z |
| CVE-2025-64260 |
7.1 (3.1)
|
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… |
Marco Milesi |
ANAC XML Bandi di Gara |
2025-12-18T07:22:14.310Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64259 |
6.5 (3.1)
|
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… |
Jeroen Schmit |
Theater for WordPress |
2025-11-13T09:24:26.955Z | 2026-01-20T14:28:21.159Z |
| CVE-2025-64258 |
7.5 (3.1)
|
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… |
wpweb |
Follow My Blog Post |
2025-12-18T07:22:14.130Z | 2026-01-20T14:28:21.008Z |
| CVE-2025-64257 |
4.3 (3.1)
|
WordPress My Tickets plugin <= 2.1.0 - Broken Access C… |
Joe Dolson |
My Tickets |
2025-12-09T14:13:52.568Z | 2026-01-20T14:28:21.812Z |
| CVE-2025-64256 |
8.8 (3.1)
|
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… |
PressTigers |
Simple Folio |
2025-12-09T14:13:52.351Z | 2026-01-20T14:28:21.259Z |
| CVE-2025-64255 |
7.2 (3.1)
|
WordPress Admin and Site Enhancements (ASE) plugin <= … |
Bowo |
Admin and Site Enhancements (ASE) |
2025-12-09T14:13:52.144Z | 2026-01-20T14:28:21.009Z |
| CVE-2025-64254 |
8.8 (3.1)
|
WordPress Photo Block plugin <= 1.5.1 - Broken Access … |
Ronald Huereca |
Photo Block |
2025-12-09T14:13:51.839Z | 2026-01-20T14:28:20.954Z |
| CVE-2025-64253 |
4.9 (3.1)
|
WordPress Health Check & Troubleshooting plugin <= 1.7… |
WordPress.org |
Health Check & Troubleshooting |
2025-12-16T08:12:50.088Z | 2026-01-20T14:28:21.074Z |
| CVE-2025-64251 |
4.9 (3.1)
|
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbi… |
azzaroco |
Ultimate Learning Pro |
2025-12-16T08:12:49.880Z | 2026-01-20T14:28:20.915Z |
| CVE-2025-64250 |
6.1 (3.1)
|
WordPress Directorist plugin <= 8.5.6 - Open Redirecti… |
wpWax |
Directorist |
2025-12-16T08:12:49.689Z | 2026-01-20T14:28:20.980Z |
| CVE-2025-64249 |
4.8 (3.1)
|
WordPress Protect WP Admin plugin <= 4.1 - Broken Acce… |
WP-EXPERTS.IN |
Protect WP Admin |
2025-12-16T08:12:49.485Z | 2026-01-20T14:28:21.330Z |
| CVE-2025-64248 |
4.3 (3.1)
|
WordPress Request a Quote plugin <= 2.5.3 - Broken Acc… |
emarket-design |
Request a Quote |
2025-12-16T08:12:49.290Z | 2026-01-20T14:28:21.329Z |
| CVE-2025-64247 |
6.5 (3.1)
|
WordPress Read More & Accordion plugin <= 3.5.4.1 - Br… |
edmon.parker |
Read More & Accordion |
2025-12-16T08:12:49.100Z | 2026-01-20T14:28:21.315Z |
| CVE-2025-64246 |
4.3 (3.1)
|
WordPress Accessibility by AudioEye plugin <= 1.0.49 -… |
netopsae |
Accessibility by AudioEye |
2025-12-16T08:12:48.902Z | 2026-01-20T14:28:20.873Z |
| CVE-2025-64245 |
4.3 (3.1)
|
WordPress Import external attachments plugin <= 1.5.12… |
ryanpcmcquen |
Import external attachments |
2025-12-16T08:12:48.719Z | 2026-01-20T14:28:20.395Z |
| CVE-2025-64244 |
4.3 (3.1)
|
WordPress Restrict Elementor Widgets, Columns and Sect… |
Codexpert, Inc |
Restrict Elementor Widgets, Columns and Sections |
2025-12-16T08:12:48.528Z | 2026-01-20T14:28:20.451Z |
| CVE-2025-64243 |
4.3 (3.1)
|
WordPress Directory Pro plugin <= 2.5.6 - Broken Acces… |
e-plugins |
Directory Pro |
2025-12-16T08:12:48.343Z | 2026-01-20T14:28:20.367Z |
| CVE-2025-64242 |
4.3 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.15 - Br… |
Merv Barrett |
Easy Property Listings |
2025-12-16T08:12:48.141Z | 2026-01-20T14:28:20.007Z |
| CVE-2025-64241 |
4.3 (3.1)
|
WordPress WP Coupons and Deals plugin <= 3.2.4 - Broke… |
Imtiaz Rayhan |
WP Coupons and Deals |
2025-12-16T08:12:47.928Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64240 |
4.3 (3.1)
|
WordPress Freshchat plugin <= 2.3.4 - Cross Site Reque… |
freshchat |
Freshchat |
2025-12-16T08:12:47.734Z | 2026-01-20T14:28:20.030Z |
| CVE-2025-64239 |
4.3 (3.1)
|
WordPress RTL Tester plugin <= 1.2 - Cross Site Reques… |
Yoav Farhi |
RTL Tester |
2025-12-16T08:12:47.533Z | 2026-01-20T14:28:19.955Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-64268 | Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Co… | 2025-12-18T08:16:13.333 | 2026-01-20T15:18:51.337 |
| fkie_cve-2025-64267 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwing… | 2025-11-13T10:15:52.100 | 2026-01-20T15:18:51.203 |
| fkie_cve-2025-64266 | Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager bookin… | 2025-12-18T08:16:13.180 | 2026-01-20T15:18:51.070 |
| fkie_cve-2025-64265 | Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allo… | 2025-11-13T10:15:51.947 | 2026-01-20T15:18:50.940 |
| fkie_cve-2025-64264 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-13T10:15:51.780 | 2026-01-20T15:18:50.797 |
| fkie_cve-2025-64263 | Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiti… | 2025-11-13T10:15:51.620 | 2026-01-20T15:18:50.667 |
| fkie_cve-2025-64262 | Cross-Site Request Forgery (CSRF) vulnerability in ramon fincken Auto Prune Posts auto-prune-posts … | 2025-11-13T10:15:51.467 | 2026-01-20T15:18:50.537 |
| fkie_cve-2025-64261 | Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-… | 2025-11-13T10:15:51.310 | 2026-01-20T15:18:50.400 |
| fkie_cve-2025-64260 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-18T08:16:13.053 | 2026-01-20T15:18:50.263 |
| fkie_cve-2025-64259 | Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploitin… | 2025-11-13T10:15:51.140 | 2026-01-20T15:18:50.127 |
| fkie_cve-2025-64258 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in wpweb F… | 2025-12-18T08:16:12.927 | 2026-01-20T15:18:49.997 |
| fkie_cve-2025-64257 | Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrect… | 2025-12-09T16:18:14.963 | 2026-01-20T15:18:49.867 |
| fkie_cve-2025-64256 | Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Folio simple-folio allows Cro… | 2025-12-09T16:18:14.813 | 2026-01-20T15:18:49.737 |
| fkie_cve-2025-64255 | Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancemen… | 2025-12-09T16:18:14.673 | 2026-01-20T15:18:49.603 |
| fkie_cve-2025-64254 | Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Inc… | 2025-12-09T16:18:14.540 | 2026-01-20T15:18:49.473 |
| fkie_cve-2025-64253 | Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-ch… | 2025-12-16T09:15:55.063 | 2026-01-20T15:18:49.340 |
| fkie_cve-2025-64251 | Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Ex… | 2025-12-16T09:15:54.937 | 2026-01-20T15:18:49.207 |
| fkie_cve-2025-64250 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist … | 2025-12-16T09:15:54.807 | 2026-01-20T15:18:49.077 |
| fkie_cve-2025-64249 | Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Explo… | 2025-12-16T09:15:54.683 | 2026-01-20T15:18:48.947 |
| fkie_cve-2025-64248 | Missing Authorization vulnerability in emarket-design Request a Quote request-a-quote allows Exploi… | 2025-12-16T09:15:54.560 | 2026-01-20T15:18:48.820 |
| fkie_cve-2025-64247 | Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Explo… | 2025-12-16T09:15:54.417 | 2026-01-20T15:18:48.690 |
| fkie_cve-2025-64246 | Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye… | 2025-12-16T09:15:54.290 | 2026-01-20T15:18:48.560 |
| fkie_cve-2025-64245 | Missing Authorization vulnerability in ryanpcmcquen Import external attachments import-external-att… | 2025-12-16T09:15:54.163 | 2026-01-20T15:18:48.430 |
| fkie_cve-2025-64244 | Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Secti… | 2025-12-16T09:15:54.037 | 2026-01-20T15:18:48.300 |
| fkie_cve-2025-64243 | Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Inco… | 2025-12-16T09:15:53.907 | 2026-01-20T15:18:48.170 |
| fkie_cve-2025-64242 | Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings a… | 2025-12-16T09:15:53.773 | 2026-01-20T15:18:48.037 |
| fkie_cve-2025-64241 | Missing Authorization vulnerability in Imtiaz Rayhan WP Coupons and Deals wp-coupons-and-deals allo… | 2025-12-16T09:15:53.640 | 2026-01-20T15:18:47.907 |
| fkie_cve-2025-64240 | Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site … | 2025-12-16T09:15:53.517 | 2026-01-20T15:18:47.777 |
| fkie_cve-2025-64239 | Cross-Site Request Forgery (CSRF) vulnerability in Yoav Farhi RTL Tester rtl-tester allows Cross Si… | 2025-12-16T09:15:53.377 | 2026-01-20T15:18:47.640 |
| fkie_cve-2025-64238 | Missing Authorization vulnerability in NicolasKulka WPS Bidouille wps-bidouille allows Exploiting I… | 2025-12-16T09:15:53.247 | 2026-01-20T15:18:47.507 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-w4xm-vpx3-v86f |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request F… | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w294-95cp-qx33 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-rrvr-f37x-r3f9 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-qh3g-9vrf-p9vh |
5.3 (3.1)
|
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing … | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-hrf6-48c7-hhqf |
5.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box allows Cross Site Request Forg… | 2025-10-29T06:31:12Z | 2026-01-20T15:31:39Z |
| ghsa-h9fv-xmvq-pgf6 |
5.3 (3.1)
|
Missing Authorization vulnerability in Facebook Facebook for WooCommerce allows Exploiting Incorrec… | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-f647-c8g3-5cgm |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-w… | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-c2rv-fm36-43g7 |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in FanBridge FanBridge signup fanbridge-signup allo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-9p7p-v96r-fv6r |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Allegro Marketing hpb seo plugin for WordPress h… | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-4w5q-r88j-fm53 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:39Z |
| ghsa-4cj4-4jvg-p6q8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-3wcv-7wxv-gvf8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-v8q4-wpfv-hmr2 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-rxr2-m2mh-wpx6 |
4.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoh… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-qc8p-jp3g-x9hm |
8.8 (3.1)
|
Missing Authorization vulnerability in MDZ Persian Admnin Fonts persian-admin-fonts allows Exploiti… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-mx76-j492-6c3v |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-hg8r-q6jx-8pfj |
5.3 (3.1)
|
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functional… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-fh89-2rg8-6gx9 |
5.3 (3.1)
|
Missing Authorization vulnerability in 沃之涛 百度站长SEO合集(支持百度/神马/Bing/头条推送) baiduseo allows Accessing F… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-c8qv-m95w-84cx |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in raychat Raychat raychat allows Cross Site Reques… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-8rmj-2xg2-c6p9 |
4.3 (3.1)
|
Missing Authorization vulnerability in Kiotviet KiotViet Sync kiotvietsync allows Exploiting Incorr… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-7chw-hhvh-5rp9 |
5.3 (3.1)
|
Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allow… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-75wf-2743-qp5f |
5.3 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in airesvsg ACF to REST API acf-to-… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-r3xr-wm72-mg2w |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-qvpv-xh75-74pw |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-prw8-6vx3-vrxm |
9.1 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in videowhisper Paid Videoc… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-p9x7-3xvx-2h65 |
4.3 (3.1)
|
Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploit… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-p98w-mx82-xhg4 |
5.3 (3.1)
|
Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploitin… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-j46c-hfxp-3h44 |
7.2 (3.1)
|
Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended al… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-h9rr-38f2-f57m |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio CloudSearch cloud-search allows … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-fgh4-qp5f-8j48 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2013-15 |
|
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop grou… | salt | 2013-11-05T18:55:00Z | 2021-07-05T00:01:26.106423Z |
| pysec-2013-14 |
|
Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to … | salt | 2013-11-05T18:55:00Z | 2021-07-05T00:01:26.068729Z |
| pysec-2013-13 |
|
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code… | salt | 2013-11-05T18:55:00Z | 2021-07-05T00:01:26.005200Z |
| pysec-2020-212 |
|
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote… | roundup | 2020-01-30T21:15:00Z | 2021-07-05T00:01:25.863651Z |
| pysec-2020-211 |
|
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators … | pyrad | 2020-01-28T16:15:00Z | 2021-07-05T00:01:25.072912Z |
| pysec-2019-155 |
|
python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spa… | python-dbusmock | 2019-04-22T16:29:00Z | 2021-07-05T00:01:25.330872Z |
| pysec-2019-154 |
|
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which … | pyrad | 2019-12-09T21:15:00Z | 2021-07-05T00:01:25.106986Z |
| pysec-2018-49 |
|
In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untru… | pyyaml | 2018-06-27T12:29:00Z | 2021-07-05T00:01:25.530537Z |
| pysec-2018-48 |
|
pysaml2 version 4.4.0 and older accept any password when run with python optimizations en… | pysaml2 | 2018-01-02T23:29:00Z | 2021-07-05T00:01:25.224283Z |
| pysec-2017-28 |
|
python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failur… | python-jose | 2017-01-23T21:59:00Z | 2021-07-05T00:01:25.423622Z |
| pysec-2017-27 |
|
python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF… | python-fedora | 2017-09-14T13:29:00Z | 2021-07-05T00:01:25.360500Z |
| pysec-2017-26 |
|
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across … | pysaml2 | 2017-11-17T04:29:00Z | 2021-07-05T00:01:25.184392Z |
| pysec-2017-25 |
|
XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attack… | pysaml2 | 2017-03-24T14:59:00Z | 2021-07-05T00:01:25.139700Z |
| pysec-2016-10 |
|
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attacker… | rsa | 2016-01-13T15:59:00Z | 2021-07-05T00:01:25.929299Z |
| pysec-2015-17 |
|
The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remo… | requests | 2015-03-18T16:59:00Z | 2021-07-05T00:01:25.716066Z |
| pysec-2014-17 |
|
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7… | rply | 2014-01-28T00:55:00Z | 2021-07-05T00:01:25.895879Z |
| pysec-2014-16 |
|
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows… | roundup | 2014-04-11T15:55:00Z | 2021-07-05T00:01:25.823373Z |
| pysec-2014-15 |
|
Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 … | roundup | 2014-04-11T15:55:00Z | 2021-07-05T00:01:25.790750Z |
| pysec-2014-14 |
|
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive inf… | requests | 2014-10-15T14:55:00Z | 2021-07-05T00:01:25.679942Z |
| pysec-2014-13 |
|
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc passw… | requests | 2014-10-15T14:55:00Z | 2021-07-05T00:01:25.632991Z |
| pysec-2014-12 |
|
The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does… | python-swiftclient | 2014-02-18T19:55:00Z | 2021-07-05T00:01:25.452828Z |
| pysec-2013-12 |
|
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are usin… | salt | 2013-11-05T18:55:00Z | 2021-07-05T00:01:25.968572Z |
| pysec-2013-11 |
|
The Python client library for Glance (python-glanceclient) before 0.10.0 does not properl… | python-glanceclient | 2013-08-28T21:55:00Z | 2021-07-05T00:01:25.393576Z |
| pysec-2013-10 |
|
pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not… | pyshop | 2013-08-06T02:52:00Z | 2021-07-05T00:01:25.257414Z |
| pysec-2011-7 |
|
Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler… | pywebdav | 2011-03-14T19:55:00Z | 2021-07-05T00:01:25.487912Z |
| pysec-2017-24 |
|
In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does … | pyjwt | 2017-08-24T16:29:00Z | 2021-07-05T00:01:24.915848Z |
| pysec-2017-23 |
|
An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser m… | pyanyapi | 2017-11-08T03:29:00Z | 2021-07-05T00:01:24.581595Z |
| pysec-2016-9 |
|
Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using… | pillow | 2016-11-04T10:59:00Z | 2021-07-05T00:01:24.189764Z |
| pysec-2016-8 |
|
Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by… | pillow | 2016-11-04T10:59:00Z | 2021-07-05T00:01:24.104078Z |
| pysec-2016-7 |
|
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pi… | pillow | 2016-04-13T16:59:00Z | 2021-07-05T00:01:24.042207Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3468 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.375137Z |
| gsd-2024-3467 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.239156Z |
| gsd-2024-3466 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.073213Z |
| gsd-2024-3465 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.229133Z |
| gsd-2024-3464 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.070091Z |
| gsd-2024-3463 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.365118Z |
| gsd-2024-3462 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.104245Z |
| gsd-2024-3461 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.194392Z |
| gsd-2024-3460 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.064276Z |
| gsd-2024-3459 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.119527Z |
| gsd-2024-3458 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.160386Z |
| gsd-2024-3457 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.075941Z |
| gsd-2024-3456 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.379834Z |
| gsd-2024-3455 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has be… | 2024-04-11T05:03:27.392000Z |
| gsd-2024-3454 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.399220Z |
| gsd-2024-3453 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.402291Z |
| gsd-2024-3452 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.298658Z |
| gsd-2024-3451 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.305078Z |
| gsd-2024-3450 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.173283Z |
| gsd-2024-3449 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.172017Z |
| gsd-2024-3448 | Users with low privileges can perform certain AJAX actions. In this vulnerability instan… | 2024-04-11T05:03:27.391262Z |
| gsd-2024-3447 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.312326Z |
| gsd-2024-3446 | A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-b… | 2024-04-11T05:03:27.164685Z |
| gsd-2024-3445 | A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been de… | 2024-04-11T05:03:27.428338Z |
| gsd-2024-3444 | A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified… | 2024-04-11T05:03:27.403753Z |
| gsd-2024-3443 | A vulnerability classified as problematic was found in SourceCodester Prison Management S… | 2024-04-11T05:03:27.185340Z |
| gsd-2024-3442 | A vulnerability classified as critical has been found in SourceCodester Prison Management… | 2024-04-11T05:03:27.188160Z |
| gsd-2024-3441 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rat… | 2024-04-11T05:03:27.050071Z |
| gsd-2024-3440 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been dec… | 2024-04-11T05:03:27.214422Z |
| gsd-2024-3439 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been cla… | 2024-04-11T05:03:27.294064Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-190494 | Malicious code in chai-test-async (npm) | 2025-11-14T03:35:19Z | 2025-12-23T16:10:05Z |
| MAL-2025-49400 | Malicious code in capes-ui (npm) | 2025-11-09T00:17:09Z | 2025-12-23T16:10:05Z |
| MAL-2025-192574 | Malicious code in bignumex (npm) | 2025-12-15T07:43:03Z | 2025-12-23T16:10:05Z |
| MAL-2025-192555 | Malicious code in cms_comp (npm) | 2025-12-12T06:34:06Z | 2025-12-23T16:10:05Z |
| MAL-2025-192554 | Malicious code in camscanner-seo (npm) | 2025-12-12T06:34:06Z | 2025-12-23T16:10:05Z |
| MAL-2025-192319 | Malicious code in chai-promised-chain (npm) | 2025-12-05T05:40:01Z | 2025-12-23T16:10:05Z |
| MAL-2025-192318 | Malicious code in chai-as-deployed (npm) | 2025-12-05T05:43:31Z | 2025-12-23T16:10:05Z |
| MAL-2025-192289 | Malicious code in chai-test-await (npm) | 2025-12-03T21:24:32Z | 2025-12-23T16:10:05Z |
| MAL-2025-191546 | Malicious code in chai-status (npm) | 2025-12-02T05:48:01Z | 2025-12-23T16:10:05Z |
| MAL-2025-191541 | Malicious code in bignumx (npm) | 2025-12-02T04:29:23Z | 2025-12-23T16:10:05Z |
| MAL-2025-191472 | Malicious code in chai-auth (npm) | 2025-11-26T04:51:45Z | 2025-12-23T16:10:05Z |
| MAL-2025-190951 | Malicious code in composite-reducer (npm) | 2025-11-24T21:41:37Z | 2025-12-23T16:10:05Z |
| MAL-2025-190627 | Malicious code in chai-async-chain (npm) | 2025-11-24T05:16:12Z | 2025-12-23T16:10:05Z |
| MAL-2025-190495 | Malicious code in chain-test-async (npm) | 2025-11-14T03:35:19Z | 2025-12-23T16:10:05Z |
| MAL-2025-190494 | Malicious code in chai-test-async (npm) | 2025-11-14T03:35:19Z | 2025-12-23T16:10:05Z |
| mal-2025-192573 | Malicious code in @revvity-signals/chemdraw-js (npm) | 2025-12-15T07:34:01Z | 2025-12-23T15:41:17Z |
| mal-2025-192553 | Malicious code in abrhide (npm) | 2025-12-12T06:31:55Z | 2025-12-23T15:41:17Z |
| mal-2025-192324 | Malicious code in ambient-map (npm) | 2025-12-05T21:10:10Z | 2025-12-23T15:41:17Z |
| mal-2025-191952 | Malicious code in angular-trackjs (npm) | 2025-12-03T01:23:28Z | 2025-12-23T15:41:17Z |
| mal-2025-191951 | Malicious code in @wb-drive/icons (npm) | 2025-12-03T01:23:28Z | 2025-12-23T15:41:17Z |
| mal-2025-191381 | Malicious code in @voiceflow/utils-designer (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191371 | Malicious code in @voiceflow/secrets-provider (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191361 | Malicious code in @voiceflow/nestjs-timeout (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191360 | Malicious code in @voiceflow/nestjs-redis (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191359 | Malicious code in @voiceflow/nestjs-rate-limit (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191358 | Malicious code in @voiceflow/nestjs-mongodb (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191357 | Malicious code in @voiceflow/nestjs-common (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191344 | Malicious code in @voiceflow/encryption (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191341 | Malicious code in @voiceflow/default-prompt-wrappers (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| mal-2025-191075 | Malicious code in bidirectional-adapter (npm) | 2025-11-24T22:44:08Z | 2025-12-23T15:41:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0261 | Aruba ClearPass Policy Manager: Mehrere Schwachstellen | 2025-02-04T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0258 | Apache Cassandra: Mehrere Schwachstellen. | 2025-02-03T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0120 | Microsoft Edge: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3733 | Red Hat Advanced Cluster Management: Mehrere Schwachstellen | 2024-12-18T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3155 | QEMU: Schwachstelle ermöglicht Privilegieneskalation oder DoS | 2024-10-13T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-1945 | Red Hat Enterprise Linux (libvpx): Mehrere Schwachstellen ermöglichen Denial of Service | 2024-08-28T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-1618 | Checkmk: Mehrere Schwachstellen | 2024-07-15T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-0700 | Microsoft .NET Framework: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-03-24T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1819 | OpenSSH: Schwachstelle ermöglicht Codeausführung | 2023-07-19T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1642 | cURL: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2018-09-04T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1641 | cURL: Mehrere Schwachstellen | 2018-10-30T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1640 | cURL: Mehrere Schwachstellen | 2019-02-05T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1637 | cURL: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2019-09-10T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1015 | Oracle Health Sciences Applications: Mehrere Schwachstellen | 2023-04-18T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-0938 | ntp: Mehrere Schwachstellen | 2023-04-11T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1243 | RPM: Mehrere Schwachstellen | 2022-08-31T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1113 | GStreamer: Schwachstelle ermöglicht Denial of Service | 2021-06-09T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1105 | GStreamer: Mehrere Schwachstellen ermöglichen Denial of Service | 2021-03-31T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-0882 | libpng: Schwachstelle ermöglicht Denial of Service | 2019-02-04T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-0374 | GStreamer: Mehrere Schwachstellen | 2022-06-16T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0255 | Samsung Android: Mehrere Schwachstellen | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0254 | IBM Security Verify Access: Mehrere Schwachstellen | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0252 | Roundcube: Schwachstelle ermöglicht Cross-Site Scripting | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0251 | Google Android: Mehrere Schwachstellen | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0250 | Dell PowerProtect Data Domain OS: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0249 | ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-10-11T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0177 | ClamAV und Cisco Secure Endpoint: Schwachstelle ermöglicht Denial of Service | 2025-01-22T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0129 | 7-Zip: Schwachstelle ermöglicht Codeausführung | 2025-01-20T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-3660 | Apache Struts: Schwachstelle ermöglicht Codeausführung | 2024-12-10T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-2186 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2024-09-19T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:1150 | Red Hat Security Advisory: buildah security update | 2024-03-05T18:16:47+00:00 | 2026-01-21T23:20:38+00:00 |
| rhsa-2024:11381 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.4 security enhancements and bug fixes | 2024-12-18T16:28:31+00:00 | 2026-01-21T23:20:37+00:00 |
| rhsa-2024:11292 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.4 security and bug fix update | 2024-12-17T18:29:55+00:00 | 2026-01-21T23:20:33+00:00 |
| rhsa-2024:11256 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.1 | 2024-12-17T11:08:00+00:00 | 2026-01-21T23:20:33+00:00 |
| rhsa-2024:11255 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.1 | 2024-12-17T10:22:51+00:00 | 2026-01-21T23:20:33+00:00 |
| rhsa-2024:11094 | Red Hat Security Advisory: python36:3.6 security update | 2024-12-16T08:11:53+00:00 | 2026-01-21T23:20:33+00:00 |
| rhsa-2024:11093 | Red Hat Security Advisory: python36:3.6 security update | 2024-12-16T08:01:03+00:00 | 2026-01-21T23:20:30+00:00 |
| rhsa-2024:11091 | Red Hat Security Advisory: python36:3.6 security update | 2024-12-16T07:24:43+00:00 | 2026-01-21T23:20:27+00:00 |
| rhsa-2024:11048 | Red Hat Security Advisory: python-virtualenv security update | 2024-12-16T02:38:00+00:00 | 2026-01-21T23:20:26+00:00 |
| rhsa-2024:11031 | Red Hat Security Advisory: OpenShift Container Platform 4.14.43 security update | 2024-12-19T00:31:17+00:00 | 2026-01-21T23:20:26+00:00 |
| rhsa-2024:11023 | Red Hat Security Advisory: HawtIO 4.1.0 for Red Hat build of Apache Camel 4 Release and security update. | 2024-12-12T20:00:23+00:00 | 2026-01-21T23:20:24+00:00 |
| rhsa-2024:10990 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.10 | 2025-01-15T10:46:45+00:00 | 2026-01-21T23:20:23+00:00 |
| rhsa-2024:10988 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.6.27 | 2025-01-15T20:08:42+00:00 | 2026-01-21T23:20:23+00:00 |
| rhsa-2024:10986 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.1 Bug Fix Update | 2024-12-12T09:54:33+00:00 | 2026-01-21T23:20:23+00:00 |
| rhsa-2024:10962 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release | 2024-12-11T16:47:10+00:00 | 2026-01-21T23:20:22+00:00 |
| rhsa-2024:10953 | Red Hat Security Advisory: python36:3.6 security update | 2024-12-11T16:20:04+00:00 | 2026-01-21T23:20:17+00:00 |
| rhsa-2024:10952 | Red Hat Security Advisory: php:7.4 security update | 2024-12-11T16:20:37+00:00 | 2026-01-21T23:20:17+00:00 |
| rhsa-2024:10917 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release | 2024-12-10T11:04:35+00:00 | 2026-01-21T23:20:16+00:00 |
| rhsa-2024:10908 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.7 | 2024-12-10T08:27:47+00:00 | 2026-01-21T23:20:16+00:00 |
| rhsa-2024:10907 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.13 | 2024-12-10T08:27:59+00:00 | 2026-01-21T23:20:16+00:00 |
| rhsa-2024:10895 | Red Hat Security Advisory: Cost Management Metrics Operator Update | 2024-12-09T19:09:42+00:00 | 2026-01-21T23:20:13+00:00 |
| rhsa-2024:10883 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (osp-director-operator) security update | 2024-12-09T12:11:16+00:00 | 2026-01-21T23:20:13+00:00 |
| rhsa-2024:10865 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.1 bug fixes and container updates | 2024-12-05T19:46:00+00:00 | 2026-01-21T23:20:12+00:00 |
| rhsa-2024:10839 | Red Hat Security Advisory: OpenShift Container Platform 4.15.41 bug fix and security update | 2024-12-12T01:47:43+00:00 | 2026-01-21T23:20:06+00:00 |
| rhsa-2024:10766 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2024-12-03T19:25:06+00:00 | 2026-01-21T23:20:04+00:00 |
| rhsa-2024:10762 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-12-03T16:20:16+00:00 | 2026-01-21T23:20:04+00:00 |
| rhsa-2024:10665 | Red Hat Security Advisory: ACS 4.4 enhancement and security update | 2024-12-02T11:23:09+00:00 | 2026-01-21T23:20:02+00:00 |
| rhsa-2024:10517 | Red Hat Security Advisory: OpenShift Container Platform 4.17.7 security and extras update | 2024-12-03T08:24:26+00:00 | 2026-01-21T23:20:00+00:00 |
| rhsa-2024:10236 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.17.0 release | 2024-11-25T19:44:38+00:00 | 2026-01-21T23:19:54+00:00 |
| rhsa-2024:10214 | Red Hat Security Advisory: Red Hat Data Grid 8.5.2 security update | 2024-11-25T16:56:04+00:00 | 2026-01-21T23:19:54+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-161-02 | Mitsubishi Electric MELSEC iQ-R Series (Update C) | 2020-06-09T00:00:00.000000Z | 2021-04-20T00:00:00.000000Z |
| icsa-21-105-02 | EIPStackGroup OpENer Ethernet/IP | 2021-04-15T00:00:00.000000Z | 2021-04-15T00:00:00.000000Z |
| icsa-21-105-01 | Schneider Electric C-Bus Toolkit | 2021-04-15T00:00:00.000000Z | 2021-04-15T00:00:00.000000Z |
| icsa-21-103-10 | Siemens and PKE Control Center Server | 2021-04-13T00:00:00.000000Z | 2021-04-13T00:00:00.000000Z |
| icsa-21-103-03 | JTEKT TOYOPUC products | 2021-04-13T00:00:00.000000Z | 2021-04-13T00:00:00.000000Z |
| icsa-21-103-02 | Advantech WebAccessSCADA | 2021-04-13T00:00:00.000000Z | 2021-04-13T00:00:00.000000Z |
| icsa-21-103-01 | Schneider Electric SoMachine Basic | 2021-04-13T00:00:00.000000Z | 2021-04-13T00:00:00.000000Z |
| icsa-19-344-02 | Siemens and PKE SiNVR, SiVMS Video Server (Update A) | 2019-12-10T00:00:00.000000Z | 2021-04-13T00:00:00.000000Z |
| icsma-19-080-01 | Medtronic Conexus Radio Frequency Telemetry Protocol (Update C) | 2019-03-21T00:00:00.000000Z | 2021-04-08T00:00:00.000000Z |
| icsa-21-098-01 | FATEK Automation WinProladder | 2021-04-08T00:00:00.000000Z | 2021-04-08T00:00:00.000000Z |
| icsa-21-091-01 | Rockwell Automation FactoryTalk AssetCentre | 2021-04-01T00:00:00.000000Z | 2021-04-01T00:00:00.000000Z |
| icsma-21-084-01 | Philips Gemini PET/CT Family | 2021-03-25T00:00:00.000000Z | 2021-03-25T00:00:00.000000Z |
| icsa-21-082-03 | GE Reason DR60 | 2021-03-23T00:00:00.000000Z | 2021-03-23T00:00:00.000000Z |
| icsa-21-082-02 | GE MU320E | 2021-03-23T00:00:00.000000Z | 2021-03-23T00:00:00.000000Z |
| icsa-21-082-01 | Weintek EasyWeb cMT | 2021-03-23T00:00:00.000000Z | 2021-03-23T00:00:00.000000Z |
| icsa-21-061-02 | Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers (Update A) | 2021-03-02T00:00:00.000000Z | 2021-03-23T00:00:00.000000Z |
| icsa-21-033-01 | Rockwell Automation MicroLogix 1400 (Update A) | 2021-02-02T00:00:00.000000Z | 2021-03-23T00:00:00.000000Z |
| icsa-21-077-03 | Hitachi ABB Power Grids eSOMS Telerik | 2021-03-18T00:00:00.000000Z | 2021-03-18T00:00:00.000000Z |
| icsa-21-077-02 | Hitachi ABB Power Grids eSOMS | 2021-03-18T00:00:00.000000Z | 2021-03-18T00:00:00.000000Z |
| icsa-21-077-01 | Johnson Controls Exacq Technologies exacqVision | 2021-03-18T00:00:00.000000Z | 2021-03-18T00:00:00.000000Z |
| icsa-21-056-03 | Rockwell Automation Logix Controllers (Update A) | 2021-02-25T00:00:00.000000Z | 2021-03-18T00:00:00.000000Z |
| icsma-17-017-02 | BD Alaris 8015 PC Unit (Update B) | 2017-01-17T00:00:00.000000Z | 2021-03-16T00:00:00.000000Z |
| icsa-21-075-03 | Hitachi ABB Power Grids AFS Series | 2021-03-16T00:00:00.000000Z | 2021-03-16T00:00:00.000000Z |
| icsa-21-075-02 | GE UR family | 2021-03-16T00:00:00.000000Z | 2021-03-16T00:00:00.000000Z |
| icsa-21-075-01 | Advantech WebAccess/SCADA | 2021-03-16T00:00:00.000000Z | 2021-03-16T00:00:00.000000Z |
| icsa-21-070-01 | Schneider Electric IGSS SCADA Software | 2021-03-11T00:00:00.000000Z | 2021-03-11T00:00:00.000000Z |
| icsa-21-068-08 | Siemens Energy PLUSCONTROL 1st Gen | 2021-03-09T00:00:00.000000Z | 2021-03-09T00:00:00.000000Z |
| icsa-21-068-07 | Siemens TCP Stack of SIMATIC MV400 | 2021-03-09T00:00:00.000000Z | 2021-03-09T00:00:00.000000Z |
| icsa-21-068-04 | Siemens SINEMA Remote Connect Server | 2021-03-09T00:00:00.000000Z | 2021-03-09T00:00:00.000000Z |
| icsa-21-068-01 | Siemens SIMATIC S7-PLCSIM | 2021-03-09T00:00:00.000000Z | 2021-03-09T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-dcnm-info-disclosure-tFX3KerC | Cisco Data Center Network Manager Information Disclosure Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-improper-auth-7krd9tdt | Cisco Data Center Network Manager Improper Authorization Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-improper-auth-7Krd9TDT | Cisco Data Center Network Manager Improper Authorization Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-bypass-dyeejums | Cisco Data Center Network Manager Authentication Bypass Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-bypass-dyEejUMs | Cisco Data Center Network Manager Authentication Bypass Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-auth-bypass-jkubgpu3 | Cisco Data Center Network Manager Authentication Bypass Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-auth-bypass-JkubGpu3 | Cisco Data Center Network Manager Authentication Bypass Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-webex-html-bj4y9tx | Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-20T14:31:42+00:00 |
| cisco-sa-webex-html-BJ4Y9tX | Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-20T14:31:42+00:00 |
| cisco-sa-20190904-ise-xss | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2019-09-04T16:00:00+00:00 | 2020-07-16T17:26:05+00:00 |
| cisco-sa-esa-filt-39jxvmfm | Cisco Email Security Appliance Filter Bypass Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-16T16:44:30+00:00 |
| cisco-sa-ESA-filt-39jXvMfM | Cisco Email Security Appliance Filter Bypass Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-16T16:44:30+00:00 |
| cisco-sa-vmanage-v78fubgv | Cisco SD-WAN vManage Software SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T20:56:20+00:00 |
| cisco-sa-vmanage-v78FubGV | Cisco SD-WAN vManage Software SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T20:56:20+00:00 |
| cisco-sa-vmpresc-syzcs4kc | Cisco SD-WAN Solution Software Privilege Escalation Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmpresc-SyzcS4kC | Cisco SD-WAN Solution Software Privilege Escalation Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmdirtrav-efdaxsjg | Cisco SD-WAN vManage Software Directory Traversal Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmdirtrav-eFdAxsJg | Cisco SD-WAN vManage Software Directory Traversal Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanxss-z7bhvhpy | Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanxss-z7bhvHpy | Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanxml-aj4gfekd | Cisco SD-WAN vManage Software XML External Entity Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanxml-Aj4GFEKd | Cisco SD-WAN vManage Software XML External Entity Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanwebid-5qwmccvt | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanwebid-5QWMcCvt | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanrce-4jtwt28p | Cisco SD-WAN vManage Software Remote Code Execution Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanrce-4jtWT28P | Cisco SD-WAN vManage Software Remote Code Execution Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmandowndir-cvgvdkm3 | Cisco SD-WAN vManage Software Path Traversal Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmandowndir-CVGvdKM3 | Cisco SD-WAN vManage Software Path Traversal Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-visio-dir-sql-inj-fpm3mpft | Cisco Vision Dynamic Signage Director SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-visio-dir-sql-inj-fPm3MPfT | Cisco Vision Dynamic Signage Director SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-22106 | vmxnet3: unregister xdp rxq info in the reset path | 2025-04-02T00:00:00.000Z | 2025-09-03T22:50:44.000Z |
| msrc_cve-2025-38463 | tcp: Correct signedness in skb remaining space calculation | 2025-07-02T00:00:00.000Z | 2025-09-03T22:50:41.000Z |
| msrc_cve-2025-23090 | Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083. | 2025-01-02T00:00:00.000Z | 2025-09-03T22:50:35.000Z |
| msrc_cve-2024-45777 | Grub2: grub-core/gettext: integer overflow leads to heap oob write. | 2025-02-02T00:00:00.000Z | 2025-09-03T22:49:56.000Z |
| msrc_cve-2024-2605 | An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. | 2024-03-02T08:00:00.000Z | 2025-09-03T22:49:35.000Z |
| msrc_cve-2025-37759 | ublk: fix handling recovery & reissue in ublk_abort_queue() | 2025-05-02T00:00:00.000Z | 2025-09-03T22:48:52.000Z |
| msrc_cve-2017-11697 | The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file. | 2017-12-02T00:00:00.000Z | 2025-09-03T22:48:37.000Z |
| msrc_cve-2025-38648 | spi: stm32: Check for cfg availability in stm32_spi_probe | 2025-08-02T00:00:00.000Z | 2025-09-03T22:48:28.000Z |
| msrc_cve-2025-22062 | sctp: add mutual exclusion in proc_sctp_do_udp_port() | 2025-04-02T00:00:00.000Z | 2025-09-03T22:47:49.000Z |
| msrc_cve-2024-0753 | In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7. | 2024-01-01T08:00:00.000Z | 2025-09-03T22:47:46.000Z |
| msrc_cve-2025-38650 | hfsplus: remove mutex_lock check in hfsplus_free_extents | 2025-08-02T00:00:00.000Z | 2025-09-03T22:46:10.000Z |
| msrc_cve-2024-6612 | CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2025-09-03T22:46:00.000Z |
| msrc_cve-2024-49937 | wifi: cfg80211: Set correct chandef when starting CAC | 2024-10-01T07:00:00.000Z | 2025-09-03T22:45:31.000Z |
| msrc_cve-2024-26785 | iommufd: Fix protection fault in iommufd_test_syz_conv_iova | 2024-04-02T07:00:00.000Z | 2025-09-03T22:45:23.000Z |
| msrc_cve-2025-38382 | btrfs: fix iteration of extrefs during log replay | 2025-07-02T00:00:00.000Z | 2025-09-03T22:45:15.000Z |
| msrc_cve-2024-58097 | wifi: ath11k: fix RCU stall while reaping monitor destination ring | 2025-04-02T00:00:00.000Z | 2025-09-03T22:44:27.000Z |
| msrc_cve-2017-15042 | An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement, and it was documented to do so. In 2013, upstream issue #5184, this was changed so that the server may decide whether PLAIN is acceptable. The result is that if you set up a man-in-the-middle SMTP server that doesn't advertise STARTTLS and does advertise that PLAIN auth is OK, the smtp.PlainAuth implementation sends the username and password. | 2017-10-02T00:00:00.000Z | 2025-09-03T22:44:27.000Z |
| msrc_cve-2016-1494 | The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack. | 2016-01-02T00:00:00.000Z | 2025-09-03T22:43:53.000Z |
| msrc_cve-2025-8747 | Keras safe_mode bypass allows arbitrary code execution when loading a malicious model. | 2025-08-02T00:00:00.000Z | 2025-09-03T22:43:52.000Z |
| msrc_cve-2023-52751 | smb: client: fix use-after-free in smb2_query_info_compound() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:43:50.000Z |
| msrc_cve-2024-4778 | Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126. | 2024-05-02T07:00:00.000Z | 2025-09-03T22:43:26.000Z |
| msrc_cve-2024-26789 | crypto: arm64/neonbs - fix out-of-bounds access on short input | 2024-04-02T07:00:00.000Z | 2025-09-03T22:42:54.000Z |
| msrc_cve-2024-26948 | drm/amd/display: Add a dc_state NULL check in dc_state_release | 2024-05-02T07:00:00.000Z | 2025-09-03T22:42:47.000Z |
| msrc_cve-2024-52980 | Elasticsearch Uncontrolled Resource Consumption vulnerability | 2025-04-02T00:00:00.000Z | 2025-09-03T22:42:44.000Z |
| msrc_cve-2025-48924 | Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs | 2025-07-02T00:00:00.000Z | 2025-09-03T22:42:41.000Z |
| msrc_cve-2019-14203 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply. | 2019-07-02T00:00:00.000Z | 2025-09-03T22:42:12.000Z |
| msrc_cve-2024-53426 | A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function. | 2024-11-02T00:00:00.000Z | 2025-09-03T22:41:34.000Z |
| msrc_cve-2024-9675 | Buildah: buildah allows arbitrary directory mount | 2024-10-01T07:00:00.000Z | 2025-09-03T22:41:10.000Z |
| msrc_cve-2020-14376 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2020-09-02T00:00:00.000Z | 2025-09-03T22:40:46.000Z |
| msrc_cve-2025-8837 | JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free | 2025-08-02T00:00:00.000Z | 2025-09-03T22:40:08.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201006-0273 | Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username (Gemtek) and pas… | 2024-03-01T22:56:13.017000Z |
| var-201007-0198 | Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows loc… | 2024-03-01T22:55:17.916000Z |
| var-202007-0079 | An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0… | 2024-03-01T22:49:15.179000Z |
| var-200907-0114 | The Huawei D100 stores the administrator's account name and password in cleartext in a co… | 2024-03-01T22:41:28.183000Z |
| var-201209-0235 | Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (C… | 2024-03-01T22:40:04.392000Z |
| var-200905-0048 | iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) c… | 2024-03-01T21:53:31.210000Z |
| var-201912-0613 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-03-01T20:37:13.449000Z |
| var-200809-0567 | The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.… | 2024-03-01T20:07:50.871000Z |
| var-200303-0122 | Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary c… | 2024-03-01T20:03:34.039000Z |
| var-201402-0405 | The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in … | 2024-03-01T19:51:35.543000Z |
| var-201106-0150 | The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform C… | 2024-03-01T19:30:40.278000Z |
| var-202401-2283 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vul… | 2024-02-29T23:19:33.744000Z |
| var-202401-2084 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vul… | 2024-02-29T23:16:24.012000Z |
| var-202401-0254 | There is a possible information disclosure due to a missing permission check. This could … | 2024-02-29T23:15:30.743000Z |
| var-200212-0581 | Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universa… | 2024-02-29T23:15:29.315000Z |
| var-202401-2186 | TOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for … | 2024-02-29T23:13:48.024000Z |
| var-202401-0564 | In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way t… | 2024-02-29T23:12:50.065000Z |
| var-202401-2141 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vul… | 2024-02-29T23:12:49.820000Z |
| var-202401-2259 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vul… | 2024-02-29T23:08:15.450000Z |
| var-200801-0023 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and … | 2024-02-29T22:55:27.112000Z |
| var-202308-2597 | OS command injection vulnerability in ELECOM network devices allows an authenticated user… | 2024-02-29T22:50:12.395000Z |
| var-200711-0309 | CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of ser… | 2024-02-29T21:33:21.636000Z |
| var-200807-0073 | Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of s… | 2024-02-29T20:42:33.575000Z |
| var-201605-0211 | The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in re… | 2024-02-29T19:41:39.979000Z |
| var-200901-0727 | The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 thr… | 2024-02-29T19:24:21.374000Z |
| var-200308-0014 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in … | 2024-02-28T22:37:56.784000Z |
| var-202202-1806 | Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attac… | 2024-02-28T22:21:42.312000Z |
| var-201701-0167 | An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on sra… | 2024-02-28T22:16:09.429000Z |
| var-201003-0130 | Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attacke… | 2024-02-28T21:23:47.906000Z |
| var-200711-0288 | The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread … | 2024-02-28T19:38:33.132000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000069 | Apache Tomcat allows access from a non-permitted IP address | 2008-10-10T15:44+09:00 | 2009-07-08T11:38+09:00 |
| jvndb-2009-001545 | Cosminexus Processing Kit for XML and Hitachi Developer's Kit for Java Possible Unauthorized Access through Zip File Scanning Utility | 2009-07-07T11:12+09:00 | 2009-07-07T11:12+09:00 |
| jvndb-2009-001544 | Cosminexus Processing Kit for XML and Hitachi Developer's Kit for Java Possible Unauthorized Access through Vulnerability in Encoding Process | 2009-07-07T11:12+09:00 | 2009-07-07T11:12+09:00 |
| jvndb-2009-000046 | PHP-I-BOARD from Let's PHP! vulnerable to directory traversal | 2009-07-01T17:54+09:00 | 2009-07-01T17:54+09:00 |
| jvndb-2009-000045 | PHP-I-BOARD from Let's PHP! vulnerable to cross-site scripting | 2009-07-01T17:54+09:00 | 2009-07-01T17:54+09:00 |
| jvndb-2009-000044 | Tree BBS from Let's PHP! vulnerable to cross-site scripting | 2009-07-01T17:53+09:00 | 2009-07-01T17:53+09:00 |
| jvndb-2009-000043 | Movable Type access restriction bypass vulnerability | 2009-07-01T17:53+09:00 | 2009-07-01T17:53+09:00 |
| jvndb-2009-000042 | Movable Type cross-site scripting vulnerability | 2009-07-01T17:53+09:00 | 2009-07-01T17:53+09:00 |
| jvndb-2008-000075 | EC-CUBE vulnerable to SQL injection | 2008-11-06T16:04+09:00 | 2009-06-25T15:44+09:00 |
| jvndb-2009-000041 | Cross-site scripting vulnerability in PukiWikiMod from XOOPS Maniac | 2009-06-19T16:35+09:00 | 2009-06-19T16:35+09:00 |
| jvndb-2009-000040 | iPhone OS denial of service (DoS) vulnerability | 2009-06-18T17:54+09:00 | 2009-06-18T17:54+09:00 |
| jvndb-2009-000039 | Buffer overflow vulnerability in Microsoft Works converters | 2009-06-18T17:54+09:00 | 2009-06-18T17:54+09:00 |
| jvndb-2009-000038 | Cross-site scripting vulnerability in activeCollab | 2009-06-18T17:54+09:00 | 2009-06-18T17:54+09:00 |
| jvndb-2009-000035 | Predictable session ID vulnerability in Serene Bach | 2009-06-18T17:53+09:00 | 2009-06-18T17:53+09:00 |
| jvndb-2009-000034 | IMG-BBS from MT312 vulnerable to cross-site scripting | 2009-05-29T16:19+09:00 | 2009-05-29T16:19+09:00 |
| jvndb-2009-000033 | REP-BBS from MT312 vulnerable to cross-site scripting | 2009-05-29T16:19+09:00 | 2009-05-29T16:19+09:00 |
| jvndb-2009-000032 | Directory traversal vulnerability in multiple Cisco Systems products | 2009-05-29T16:19+09:00 | 2009-05-29T16:19+09:00 |
| jvndb-2009-000031 | Cross-site scripting vulnerability in leger (free edition) | 2009-05-27T18:28+09:00 | 2009-05-27T18:28+09:00 |
| jvndb-2009-000030 | a-News from Appleple vulnerable to cross-site scripting | 2009-05-22T14:31+09:00 | 2009-05-22T14:31+09:00 |
| jvndb-2009-000029 | HP System Management Homepage vulnerable to cross-site scripting | 2009-05-20T16:01+09:00 | 2009-05-20T16:01+09:00 |
| jvndb-2009-000028 | Trees from CGI RESCUE vulnerable to cross-site scripting | 2009-05-19T13:41+09:00 | 2009-05-19T13:41+09:00 |
| jvndb-2009-000027 | Sun GlassFish Enterprise Server and Sun Java System Application Server vulnerable to cross-site scripting | 2009-05-13T15:37+09:00 | 2009-05-13T15:37+09:00 |
| jvndb-2009-000026 | SQL injection vulnerability in SKIP from SKIP User Group | 2009-05-12T17:50+09:00 | 2009-05-12T17:50+09:00 |
| jvndb-2009-000025 | Cross-site scripting vulnerability in SKIP from SKIP User Group | 2009-05-12T17:50+09:00 | 2009-05-12T17:50+09:00 |
| jvndb-2008-000078 | CGI RESCUE MiniBBS2000 directory traversal vulnerability | 2008-11-26T17:50+09:00 | 2009-04-30T15:35+09:00 |
| jvndb-2009-000024 | Web Mailer from CGI RESCUE vulnerable to HTTP header injection | 2009-04-28T16:36+09:00 | 2009-04-28T16:36+09:00 |
| jvndb-2009-000023 | FORM2MAIL from CGI RESCUE allows unauthorized email transmission | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000022 | Cross-site scripting vulnerability in MiniBBS from CGI RESCUE | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000021 | MiniBBS22 from CGI RESCUE allows unauthorized email transmission | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000019 | Cross-site scripting vulnerability in apricot.php from LovPop.net | 2009-04-17T14:40+09:00 | 2009-04-17T14:40+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0993-1 | Security update for webkit2gtk3 | 2025-03-24T14:33:32Z | 2025-03-24T14:33:32Z |
| suse-su-2025:0992-1 | Security update for docker | 2025-03-24T14:31:39Z | 2025-03-24T14:31:39Z |
| suse-su-2025:0991-1 | Security update for rsync | 2025-03-24T13:56:41Z | 2025-03-24T13:56:41Z |
| suse-su-2025:20158-1 | Security update for ucode-intel | 2025-03-24T12:15:39Z | 2025-03-24T12:15:39Z |
| suse-su-2025:20157-1 | Security update for gnutls | 2025-03-24T09:52:04Z | 2025-03-24T09:52:04Z |
| suse-su-2025:20156-1 | Security update for python-Jinja2 | 2025-03-24T09:41:28Z | 2025-03-24T09:41:28Z |
| suse-su-2025:0989-1 | Security update for u-boot | 2025-03-24T09:32:42Z | 2025-03-24T09:32:42Z |
| suse-su-2025:0988-1 | Security update for zvbi | 2025-03-24T09:32:22Z | 2025-03-24T09:32:22Z |
| suse-su-2025:0986-1 | Security update for libarchive | 2025-03-21T17:49:33Z | 2025-03-21T17:49:33Z |
| suse-su-2025:0985-1 | Security update for libarchive | 2025-03-21T17:45:17Z | 2025-03-21T17:45:17Z |
| suse-su-2025:0984-1 | Security update for xorg-x11-server | 2025-03-21T17:44:38Z | 2025-03-21T17:44:38Z |
| suse-su-2025:0983-1 | Security update for the Linux Kernel | 2025-03-21T17:44:17Z | 2025-03-21T17:44:17Z |
| suse-su-2025:0982-1 | Security update for python311 | 2025-03-21T14:17:05Z | 2025-03-21T14:17:05Z |
| suse-su-2025:0981-1 | Security update for python311 | 2025-03-21T14:16:48Z | 2025-03-21T14:16:48Z |
| suse-su-2025:0980-1 | Security update for apptainer | 2025-03-21T14:15:19Z | 2025-03-21T14:15:19Z |
| suse-su-2025:0979-1 | Security update for zvbi | 2025-03-21T12:54:02Z | 2025-03-21T12:54:02Z |
| suse-su-2025:0977-1 | Security update for wpa_supplicant | 2025-03-21T08:25:51Z | 2025-03-21T08:25:51Z |
| suse-su-2025:0976-1 | Security update for libxml2 | 2025-03-21T08:25:09Z | 2025-03-21T08:25:09Z |
| suse-su-2025:0975-1 | Security update for webkit2gtk3 | 2025-03-21T08:24:35Z | 2025-03-21T08:24:35Z |
| suse-su-2025:0974-1 | Security update for webkit2gtk3 | 2025-03-21T08:23:09Z | 2025-03-21T08:23:09Z |
| suse-su-2025:20241-1 | Security update for gstreamer-plugins-base | 2025-03-20T10:57:31Z | 2025-03-20T10:57:31Z |
| suse-su-2025:20155-1 | Security update for protobuf | 2025-03-20T10:44:54Z | 2025-03-20T10:44:54Z |
| suse-su-2025:0962-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-03-19T19:04:26Z | 2025-03-19T19:04:26Z |
| suse-su-2025:0961-1 | Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) | 2025-03-19T19:04:10Z | 2025-03-19T19:04:10Z |
| suse-su-2025:0960-1 | Security update for freetype2 | 2025-03-19T18:34:08Z | 2025-03-19T18:34:08Z |
| suse-su-2025:0959-1 | Security update for python-Django | 2025-03-19T16:56:42Z | 2025-03-19T16:56:42Z |
| suse-su-2025:0958-1 | Security update for ffmpeg-4 | 2025-03-19T16:55:56Z | 2025-03-19T16:55:56Z |
| suse-su-2025:0956-1 | Security update for python-Jinja2 | 2025-03-19T16:12:31Z | 2025-03-19T16:12:31Z |
| suse-su-2025:0955-1 | Security update for the Linux Kernel | 2025-03-19T16:11:24Z | 2025-03-19T16:11:24Z |
| suse-su-2025:0954-1 | Security update for tomcat | 2025-03-19T13:50:54Z | 2025-03-19T13:50:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13366-1 | libsystemd0-254.5-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13365-1 | roundcubemail-1.6.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13364-1 | qemu-8.1.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13363-1 | libminizip1-1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13362-1 | xwayland-23.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13361-1 | xorg-x11-server-21.1.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13360-1 | teleport-14.1.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13359-1 | libsox3-14.4.2-8.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13358-1 | postgresql14-14.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13357-1 | java-21-openjdk-21.0.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13356-1 | MozillaThunderbird-115.4.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13355-1 | python3-virtualbox-7.0.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13354-1 | redis-7.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13353-1 | qutebrowser-3.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13352-1 | python310-unearth-0.12.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13351-1 | java-17-openjdk-17.0.9.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13350-1 | apache2-2.4.58-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13349-1 | vorbis-tools-1.4.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13348-1 | libsndfile-devel-1.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13347-1 | hwloc-2.9.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13346-1 | apache2-mod_uwsgi-2.0.22-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13345-1 | ctdb-4.19.2+git.322.7e9201cef5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13344-1 | python310-urllib3_1-1.26.18-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13343-1 | python310-urllib3-2.0.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13342-1 | java-11-openjdk-11.0.21.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13341-1 | zabbix-agent-6.0.22-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13340-1 | nodejs-electron-25.9.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13339-1 | suse-module-tools-16.0.36-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13338-1 | picard-2.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13337-1 | corepack20-20.8.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23359 | e-Diary Management System dashboard.php文件SQL注入漏洞 | 2025-04-09 | 2025-10-11 |
| cnvd-2025-23358 | e-Diary Management System add-notes.php文件SQL注入漏洞 | 2025-04-09 | 2025-10-11 |
| cnvd-2025-23357 | Bank Locker Management System会话劫持漏洞 | 2025-07-30 | 2025-10-11 |
| cnvd-2025-23356 | Pytorch-Lightning代码问题漏洞 | 2025-03-27 | 2025-10-11 |
| cnvd-2025-23355 | PyTorch拒绝服务漏洞（CNVD-2025-23355） | 2025-04-03 | 2025-10-11 |
| cnvd-2025-23354 | PyTorch torch.jit.jit_module_from_flatbuffer函数存在未明漏洞 | 2025-04-08 | 2025-10-11 |
| cnvd-2025-23353 | PyTorch拒绝服务漏洞（CNVD-2025-23353） | 2025-04-25 | 2025-10-11 |
| cnvd-2025-23352 | PyTorch远程命令执行漏洞 | 2025-04-30 | 2025-10-11 |
| cnvd-2025-23351 | e-Diary Management System edit-category.php文件SQL注入漏洞 | 2025-04-09 | 2025-10-11 |
| cnvd-2025-23350 | e-Diary Management System /my-profile.php文件SQL注入漏洞 | 2025-05-20 | 2025-10-11 |
| cnvd-2025-23349 | e-Diary Management System /manage-notes.php文件SQL注入漏洞 | 2025-05-20 | 2025-10-11 |
| cnvd-2025-23348 | Car Washing Management System SQL注入漏洞 | 2025-07-21 | 2025-10-11 |
| cnvd-2025-23347 | e-Diary Management System会话劫持漏洞 | 2025-07-30 | 2025-10-11 |
| cnvd-2025-23346 | Doctor Appointment Management System会话劫持漏洞 | 2025-07-30 | 2025-10-11 |
| cnvd-2025-23345 | Car Washing Management System会话劫持漏洞 | 2025-08-01 | 2025-10-11 |
| cnvd-2025-23344 | Car Rental Project无限制上传漏洞 | 2025-05-22 | 2025-10-11 |
| cnvd-2025-23343 | Car Rental Project会话劫持漏洞 | 2025-07-30 | 2025-10-11 |
| cnvd-2025-23342 | Car Rental Project carrental/search.php文件跨站脚本漏洞 | 2025-09-25 | 2025-10-11 |
| cnvd-2025-23341 | Employee Record Management System forgetpassword.php文件SQL注入漏洞 | 2021-12-02 | 2025-10-11 |
| cnvd-2025-23340 | Employee Record Management System index.php文件SQL注入漏洞 | 2021-12-15 | 2025-10-11 |
| cnvd-2025-23339 | Employee Record Management System目录遍历漏洞 | 2021-12-15 | 2025-10-11 |
| cnvd-2025-23338 | Employee Record Management System editmyeducation.php文件SQL注入漏洞 | 2025-05-13 | 2025-10-11 |
| cnvd-2025-23337 | Employee Record Management System changepassword.php文件SQL注入漏洞 | 2025-05-14 | 2025-10-11 |
| cnvd-2025-23336 | Employee Record Management System registererms.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-11 |
| cnvd-2025-23335 | Employee Record Management System /myprofile.php文件SQL注入漏洞 | 2025-05-30 | 2025-10-11 |
| cnvd-2025-23334 | Employee Record Management System /loginerms.php文件SQL注入漏洞 | 2025-05-30 | 2025-10-11 |
| cnvd-2025-23333 | Employee Record Management System /admin/editempexp.php文件SQL注入漏洞 | 2025-05-30 | 2025-10-11 |
| cnvd-2025-23332 | Employee Record Management System /resetpassword.php文件SQL注入漏洞 | 2025-06-10 | 2025-10-11 |
| cnvd-2025-23331 | Employee Record Management System /myexp.php文件SQL注入漏洞 | 2025-06-10 | 2025-10-11 |
| cnvd-2025-23330 | Employee Record Management System /editmyexp.php文件SQL注入漏洞 | 2025-06-10 | 2025-10-11 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0957 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0956 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0955 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0954 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0953 | Multiples vulnérabilités dans Moxa EDS-P510 Series | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0952 | Vulnérabilité dans les produits F5 | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| CERTFR-2024-AVI-0958 | Multiples vulnérabilités dans les produits IBM | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| CERTFR-2024-AVI-0957 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| CERTFR-2024-AVI-0956 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| CERTFR-2024-AVI-0955 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| CERTFR-2024-AVI-0954 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| CERTFR-2024-AVI-0953 | Multiples vulnérabilités dans Moxa EDS-P510 Series | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| CERTFR-2024-AVI-0952 | Vulnérabilité dans les produits F5 | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0951 | Multiples vulnérabilités dans Google Pixel | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0950 | Multiples vulnérabilités dans les produits Cisco | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0949 | Vulnérabilité dans Veeam Backup & Replication | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| CERTFR-2024-AVI-0951 | Multiples vulnérabilités dans Google Pixel | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| CERTFR-2024-AVI-0950 | Multiples vulnérabilités dans les produits Cisco | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| CERTFR-2024-AVI-0949 | Vulnérabilité dans Veeam Backup & Replication | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0948 | Multiples vulnérabilités dans les produits Symfony | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0947 | Vulnérabilité dans NetApp ONTAP Select Deploy administration utility | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0946 | Multiples vulnérabilités dans Google Chrome | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0945 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0948 | Multiples vulnérabilités dans les produits Symfony | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0947 | Vulnérabilité dans NetApp ONTAP Select Deploy administration utility | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0946 | Multiples vulnérabilités dans Google Chrome | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0945 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0944 | Multiples vulnérabilités dans Google Android | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0943 | Vulnérabilité dans Qnap QuRouter | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| CERTFR-2024-AVI-0944 | Multiples vulnérabilités dans Google Android | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |