Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-60235 |
10 (3.1)
|
WordPress Helpdesk Support Ticket System for WooCommer… |
Plugify |
Helpdesk Support Ticket System for WooCommerce |
2025-11-06T15:55:07.928Z | 2026-01-20T14:28:12.539Z |
| CVE-2025-60234 |
8.8 (3.1)
|
WordPress Single Property theme <= 2.8 - PHP Object In… |
designthemes |
Single Property |
2025-10-22T14:32:46.860Z | 2026-01-20T14:28:12.552Z |
| CVE-2025-60232 |
9.8 (3.1)
|
WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Objec… |
quantumcloud |
KBx Pro Ultimate |
2025-10-22T14:32:46.670Z | 2026-01-20T14:28:12.559Z |
| CVE-2025-60228 |
8.8 (3.1)
|
WordPress Knowledge Base theme <= 2.9 - PHP Object Inj… |
designthemes |
Knowledge Base |
2025-10-22T14:32:46.487Z | 2026-01-20T14:28:12.451Z |
| CVE-2025-60227 |
8.6 (3.1)
|
WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File De… |
ThimPress |
WP Pipes |
2025-10-22T14:32:46.277Z | 2026-01-20T14:28:12.468Z |
| CVE-2025-60226 |
9.8 (3.1)
|
WordPress White Rabbit theme <= 1.5.2 - PHP Object Inj… |
axiomthemes |
White Rabbit |
2025-10-22T14:32:46.090Z | 2026-01-20T14:28:12.467Z |
| CVE-2025-60225 |
9.8 (3.1)
|
WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injec… |
AncoraThemes |
BugsPatrol |
2025-10-22T14:32:45.876Z | 2026-01-20T14:28:12.508Z |
| CVE-2025-60224 |
9.8 (3.1)
|
WordPress Subscribe to Download plugin <= 2.0.9 - PHP … |
wpshuffle |
Subscribe to Download |
2025-10-22T14:32:45.675Z | 2026-01-20T14:28:12.485Z |
| CVE-2025-60222 |
8.8 (3.1)
|
WordPress SUMO Memberships for WooCommerce plugin <= 7… |
FantasticPlugins |
SUMO Memberships for WooCommerce |
2025-10-22T14:32:45.465Z | 2026-01-20T14:28:12.484Z |
| CVE-2025-60221 |
9.8 (3.1)
|
WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object … |
captivateaudio |
Captivate Sync |
2025-10-22T14:32:45.187Z | 2026-01-20T14:28:12.492Z |
| CVE-2025-60220 |
9.8 (3.1)
|
WordPress CouponXxL theme <= 3.0.0 - Privilege Escalat… |
pebas |
CouponXxL |
2025-10-22T14:32:44.897Z | 2026-01-20T14:28:12.413Z |
| CVE-2025-60217 |
7.7 (3.1)
|
WordPress PT Luxa Addons Plugin <= 1.2.2 - Arbitrary F… |
ypromo |
PT Luxa Addons |
2025-10-22T14:32:44.691Z | 2026-01-20T14:28:12.511Z |
| CVE-2025-60216 |
9.8 (3.1)
|
WordPress Addison theme <= 1.4.2 - PHP Object Injectio… |
BoldThemes |
Addison |
2025-10-22T14:32:44.405Z | 2026-01-20T14:28:12.460Z |
| CVE-2025-60215 |
8.8 (3.1)
|
WordPress Kriya theme <= 3.4 - PHP Object Injection Vu… |
designthemes |
Kriya |
2025-10-22T14:32:44.186Z | 2026-01-20T14:28:12.435Z |
| CVE-2025-60214 |
9.8 (3.1)
|
WordPress Goldenblatt theme <= 1.2.1 - PHP Object Inje… |
BoldThemes |
Goldenblatt |
2025-10-22T14:32:44.013Z | 2026-01-20T14:28:12.452Z |
| CVE-2025-60213 |
9.8 (3.1)
|
WordPress Scape theme <= 1.5.13 - PHP Object Injection… |
Whitebox-Studio |
Scape |
2025-10-22T14:32:43.800Z | 2026-01-20T14:28:12.440Z |
| CVE-2025-60212 |
8.8 (3.1)
|
WordPress VEDA Theme <= 4.2 - PHP Object Injection Vul… |
designthemes |
VEDA |
2025-10-22T14:32:43.582Z | 2026-01-20T14:28:12.478Z |
| CVE-2025-60211 |
8.8 (3.1)
|
WordPress WooCommerce Registration Fields Plugin - Cus… |
extendons |
WooCommerce Registration Fields Plugin - Custom Signup Fields |
2025-10-22T14:32:43.390Z | 2026-01-20T14:28:12.510Z |
| CVE-2025-60210 |
9.8 (3.1)
|
WordPress Everest Forms - Frontend Listing plugin <= 1… |
wpeverest |
Everest Forms - Frontend Listing |
2025-10-22T14:32:43.171Z | 2026-01-20T14:28:12.476Z |
| CVE-2025-60209 |
9.8 (3.1)
|
WordPress Connector for Gravity Forms and Google Sheet… |
CRM Perks |
Connector for Gravity Forms and Google Sheets |
2025-10-22T14:32:42.951Z | 2026-01-20T14:28:12.514Z |
| CVE-2025-60208 |
8.8 (3.1)
|
WordPress Advanced Custom Fields : CPT Options Pages p… |
Tusko Trush |
Advanced Custom Fields : CPT Options Pages |
2025-10-22T14:32:42.742Z | 2026-01-20T14:28:12.505Z |
| CVE-2025-60207 |
10 (3.1)
|
WordPress Custom User Registration Fields for WooComme… |
Addify |
Custom User Registration Fields for WooCommerce |
2025-11-06T15:55:06.274Z | 2026-01-20T14:28:12.440Z |
| CVE-2025-60206 |
10 (3.1)
|
WordPress Alone theme <= 7.8.3 - Remote Code Execution… |
Bearsthemes |
Alone |
2025-10-22T14:32:42.404Z | 2026-01-20T14:28:12.509Z |
| CVE-2025-60204 |
7.5 (3.1)
|
WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - … |
Josh Kohlbach |
WooCommerce Store Toolkit |
2025-11-06T15:55:05.172Z | 2026-01-20T14:28:12.409Z |
| CVE-2025-60203 |
7.5 (3.1)
|
WordPress Store Exporter plugin <= 2.7.6 - Local File … |
Josh Kohlbach |
Store Exporter |
2025-11-06T15:55:04.065Z | 2026-01-20T14:28:12.403Z |
| CVE-2025-60202 |
7.5 (3.1)
|
WordPress Favorites plugin <= 2.3.6 - Local File Inclu… |
Kyle Phillips |
Favorites |
2025-11-06T15:55:03.303Z | 2026-01-20T14:28:12.411Z |
| CVE-2025-60201 |
7.5 (3.1)
|
WordPress WP Customer Area plugin <= 8.2.7 - Local Fil… |
aguilatechnologies |
WP Customer Area |
2025-11-06T15:55:00.953Z | 2026-01-20T14:28:12.509Z |
| CVE-2025-60200 |
7.5 (3.1)
|
WordPress LearnPress Export Import plugin <= 4.0.9 - L… |
ThimPress |
LearnPress Export Import |
2025-11-06T15:54:59.689Z | 2026-01-20T14:28:12.386Z |
| CVE-2025-60199 |
8.2 (3.1)
|
WordPress InHype - Blog & Magazine WordPress Theme the… |
dedalx |
InHype - Blog & Magazine WordPress Theme |
2025-11-06T15:54:56.700Z | 2026-01-20T14:28:12.387Z |
| CVE-2025-60198 |
8.1 (3.1)
|
WordPress Saxon - Viral Content Blog & Magazine Market… |
dedalx |
Saxon - Viral Content Blog & Magazine Marketing WordPress Theme |
2025-11-06T15:54:55.955Z | 2026-01-20T14:28:12.404Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64240 |
4.3 (3.1)
|
WordPress Freshchat plugin <= 2.3.4 - Cross Site Reque… |
freshchat |
Freshchat |
2025-12-16T08:12:47.734Z | 2026-01-20T14:28:20.030Z |
| CVE-2025-64239 |
4.3 (3.1)
|
WordPress RTL Tester plugin <= 1.2 - Cross Site Reques… |
Yoav Farhi |
RTL Tester |
2025-12-16T08:12:47.533Z | 2026-01-20T14:28:19.955Z |
| CVE-2025-64238 |
4.3 (3.1)
|
WordPress WPS Bidouille plugin <= 1.33.1 - Broken Acce… |
NicolasKulka |
WPS Bidouille |
2025-12-16T08:12:47.350Z | 2026-01-20T14:28:20.852Z |
| CVE-2025-64237 |
4.3 (3.1)
|
WordPress Quick Interest Slider plugin <= 3.1.5 - Cros… |
Graham |
Quick Interest Slider |
2025-12-16T08:12:47.167Z | 2026-01-20T14:28:19.971Z |
| CVE-2025-64236 |
9.8 (3.1)
|
WordPress Tuturn plugin < 3.6 - Broken Authentication … |
AmentoTech |
Tuturn |
2025-12-18T16:21:48.796Z | 2026-01-20T14:28:19.967Z |
| CVE-2025-64235 |
6.5 (3.1)
|
WordPress Tuturn plugin < 3.6 - Arbitrary File Downloa… |
AmentoTech |
Tuturn |
2025-12-18T16:43:47.100Z | 2026-01-20T14:28:20.022Z |
| CVE-2025-64234 |
4.3 (3.1)
|
WordPress Evergreen Content Poster plugin <= 1.4.5 - B… |
Evergreen Content Poster |
Evergreen Content Poster |
2025-10-29T08:38:11.964Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64233 |
9.8 (3.1)
|
WordPress Codiqa theme < 1.2.8 - PHP Object Injection … |
BoldThemes |
Codiqa |
2025-12-18T07:22:13.958Z | 2026-01-20T21:45:05.735Z |
| CVE-2025-64232 |
7.1 (3.1)
|
WordPress Import from YML plugin <= 3.1.17 - Cross Sit… |
icopydoc |
Import from YML |
2025-11-06T15:56:12.576Z | 2026-01-20T14:28:19.990Z |
| CVE-2025-64231 |
9.8 (3.1)
|
WordPress WordPress Contact Form 7 PDF, Google Sheet &… |
RedefiningTheWeb |
WordPress Contact Form 7 PDF, Google Sheet & Database |
2025-12-18T07:22:13.778Z | 2026-01-20T21:45:30.264Z |
| CVE-2025-64230 |
7.5 (3.1)
|
WordPress Filr plugin <= 1.2.10 - Arbitrary File Delet… |
WP Chill |
Filr |
2025-12-18T07:22:13.596Z | 2026-01-20T21:45:50.350Z |
| CVE-2025-64229 |
4.3 (3.1)
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2025-10-29T08:38:11.498Z | 2026-01-20T14:28:19.998Z |
| CVE-2025-64228 |
4.3 (3.1)
|
WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensi… |
FantasticPlugins |
SUMO Affiliates Pro |
2025-10-29T08:38:11.052Z | 2026-01-20T14:28:19.952Z |
| CVE-2025-64227 |
9.8 (3.1)
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2025-12-18T07:22:13.423Z | 2026-01-20T21:46:30.834Z |
| CVE-2025-64226 |
4.3 (3.1)
|
WordPress Stockie Extra plugin <= 1.2.11 - Cross Site … |
colabrio |
Stockie Extra |
2025-10-29T08:38:10.612Z | 2026-01-20T14:28:20.084Z |
| CVE-2025-64225 |
6.1 (3.1)
|
WordPress Stockie Extra plugin <= 1.2.11 - Content Inj… |
colabrio |
Stockie Extra |
2025-12-18T07:22:13.245Z | 2026-01-20T21:46:48.570Z |
| CVE-2025-64224 |
7.1 (3.1)
|
WordPress Grand Conference Theme Custom Post Type plug… |
ThemeGoods |
Grand Conference Theme Custom Post Type |
2025-11-06T15:56:10.204Z | 2026-01-20T14:28:20.416Z |
| CVE-2025-64223 |
8.1 (3.1)
|
WordPress PenNews theme < 6.7.3 - Local File Inclusion… |
PenciDesign |
PenNews |
2025-12-18T07:22:13.068Z | 2026-01-20T14:28:20.155Z |
| CVE-2025-64222 |
7.5 (3.1)
|
WordPress WooCommerce Recover Abandoned Cart plugin <=… |
FantasticPlugins |
WooCommerce Recover Abandoned Cart |
2025-12-18T07:22:12.885Z | 2026-01-20T14:28:20.993Z |
| CVE-2025-64221 |
7.1 (3.1)
|
WordPress Reservation Plugin plugin <= 1.6 - Cross Sit… |
designthemes |
Reservation Plugin |
2025-12-18T07:22:12.714Z | 2026-01-20T14:28:20.081Z |
| CVE-2025-64220 |
6.5 (3.1)
|
WordPress Rey Core plugin <= 3.1.8 - Cross Site Script… |
ReyCommerce |
Rey Core |
2025-10-29T08:38:10.174Z | 2026-01-20T14:28:19.951Z |
| CVE-2025-64219 |
4.3 (3.1)
|
WordPress Business Directory plugin <= 6.4.18 - Broken… |
Strategy11 Team |
Business Directory |
2025-10-29T08:38:09.728Z | 2026-01-20T14:28:19.940Z |
| CVE-2025-64218 |
7.5 (3.1)
|
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… |
WP Chill |
Passster |
2025-12-18T07:22:12.527Z | 2026-01-20T14:28:20.843Z |
| CVE-2025-64216 |
7.5 (3.1)
|
WordPress SmartMag theme <= 10.3.0 - Local File Inclus… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:09.280Z | 2026-01-20T14:28:20.060Z |
| CVE-2025-64214 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitr… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:12.176Z | 2026-01-20T14:28:20.339Z |
| CVE-2025-64213 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensit… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:11.993Z | 2026-01-20T14:28:19.977Z |
| CVE-2025-64212 |
5.4 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken… |
StylemixThemes |
MasterStudy LMS Pro |
2025-10-29T08:38:08.827Z | 2026-01-20T14:28:19.958Z |
| CVE-2025-64211 |
5.3 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:08.406Z | 2026-01-20T14:28:20.264Z |
| CVE-2025-64210 |
5.4 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:07.975Z | 2026-01-20T14:28:20.038Z |
| CVE-2025-64209 |
7.5 (3.1)
|
WordPress Masterstudy theme < 4.8.122 - Broken Access … |
StylemixThemes |
Masterstudy |
2025-12-18T07:22:11.805Z | 2026-01-20T14:28:19.877Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-64238 | Missing Authorization vulnerability in NicolasKulka WPS Bidouille wps-bidouille allows Exploiting I… | 2025-12-16T09:15:53.247 | 2026-01-20T15:18:47.507 |
| fkie_cve-2025-64237 | Cross-Site Request Forgery (CSRF) vulnerability in Graham Quick Interest Slider quick-interest-slid… | 2025-12-16T09:15:53.110 | 2026-01-20T15:18:47.353 |
| fkie_cve-2025-64236 | Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows … | 2025-12-18T17:15:55.477 | 2026-01-20T15:18:47.247 |
| fkie_cve-2025-64235 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ame… | 2025-12-18T17:15:55.327 | 2026-01-20T15:18:47.137 |
| fkie_cve-2025-64234 | Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-… | 2025-10-29T09:15:44.763 | 2026-01-20T15:18:46.987 |
| fkie_cve-2025-64233 | Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection… | 2025-12-18T08:16:12.800 | 2026-01-20T15:18:46.853 |
| fkie_cve-2025-64232 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:14.333 | 2026-01-20T15:18:46.720 |
| fkie_cve-2025-64231 | Unrestricted Upload of File with Dangerous Type vulnerability in RedefiningTheWeb WordPress Contact… | 2025-12-18T08:16:12.670 | 2026-01-20T15:18:46.590 |
| fkie_cve-2025-64230 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP … | 2025-12-18T08:16:12.543 | 2026-01-20T15:18:46.450 |
| fkie_cve-2025-64229 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices… | 2025-10-29T09:15:44.250 | 2026-01-20T15:18:46.290 |
| fkie_cve-2025-64228 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fantast… | 2025-10-29T09:15:44.077 | 2026-01-20T15:18:46.160 |
| fkie_cve-2025-64227 | Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices spr… | 2025-12-18T08:16:12.417 | 2026-01-20T15:18:46.017 |
| fkie_cve-2025-64226 | Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cros… | 2025-10-29T09:15:43.567 | 2026-01-20T15:18:45.877 |
| fkie_cve-2025-64225 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in cola… | 2025-12-18T08:16:12.287 | 2026-01-20T15:18:45.747 |
| fkie_cve-2025-64224 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:14.173 | 2026-01-20T15:18:45.613 |
| fkie_cve-2025-64223 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:16:12.160 | 2026-01-20T15:18:45.480 |
| fkie_cve-2025-64222 | Missing Authorization vulnerability in FantasticPlugins WooCommerce Recover Abandoned Cart rac allo… | 2025-12-18T08:16:12.033 | 2026-01-20T15:18:45.330 |
| fkie_cve-2025-64221 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-18T08:16:11.903 | 2026-01-20T15:18:45.197 |
| fkie_cve-2025-64220 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:15:43.393 | 2026-01-20T15:18:45.063 |
| fkie_cve-2025-64219 | Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin… | 2025-10-29T09:15:42.867 | 2026-01-20T15:18:44.927 |
| fkie_cve-2025-64218 | Insertion of Sensitive Information Into Sent Data vulnerability in WP Chill Passster content-protec… | 2025-12-18T08:16:11.780 | 2026-01-20T15:18:44.793 |
| fkie_cve-2025-64216 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:15:42.687 | 2026-01-20T15:18:44.520 |
| fkie_cve-2025-64214 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-… | 2025-12-18T08:16:11.527 | 2026-01-20T15:18:44.390 |
| fkie_cve-2025-64213 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterStudy LMS P… | 2025-12-18T08:16:11.397 | 2026-01-20T15:18:44.257 |
| fkie_cve-2025-64212 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-… | 2025-10-29T09:15:42.157 | 2026-01-20T15:18:44.127 |
| fkie_cve-2025-64211 | Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:15:42.010 | 2026-01-20T15:18:43.993 |
| fkie_cve-2025-64210 | Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:15:41.433 | 2026-01-20T15:18:43.850 |
| fkie_cve-2025-64209 | Missing Authorization vulnerability in StylemixThemes Masterstudy masterstudy allows Accessing Func… | 2025-12-18T08:16:11.273 | 2026-01-20T15:18:43.717 |
| fkie_cve-2025-64208 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:15:41.283 | 2026-01-20T15:18:43.587 |
| fkie_cve-2025-64207 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-18T08:16:11.147 | 2026-01-20T15:18:43.453 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-cmpw-ffqj-x98j |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-9j3c-v37q-wc5j |
5.4 (3.1)
|
Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Conf… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-44r5-gm3r-62wj |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-23qm-g3r4-35xx |
8.1 (3.1)
|
Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-xwpp-p833-67wp |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-xppm-25h7-qf3q |
8.8 (3.1)
|
Missing Authorization vulnerability in Codeinwp Revive Old Posts tweet-old-post allows Exploiting I… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-x5x6-gpfm-cpm4 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-wgh5-f6hf-q96m |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-wfc4-j699-888x |
8.8 (3.1)
|
Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-vh3j-4vp2-x7m2 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-v92x-wwhx-42c7 |
8.8 (3.1)
|
Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-v739-2jgg-rcmx |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-rqm5-mx2c-5fhp |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-qvx9-63c8-g2m4 |
9.8 (3.1)
|
Missing Authorization vulnerability in epiphanyit321 Referral Link Tracker referral-link-tracker al… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-qgvx-wfx5-x9qg |
8.8 (3.1)
|
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly C… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-q5j8-ch67-ww7c |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-prvq-r6h5-gxw2 |
8.8 (3.1)
|
Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploitin… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-pqg3-4wch-ppw5 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-p9r4-469w-3cpx |
8.1 (3.1)
|
Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-descriptio… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-p2v3-q8r8-fhjv |
8.1 (3.1)
|
Missing Authorization vulnerability in clicksend SMS Contact Form 7 Notifications by ClickSend clic… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-m2hj-mr34-9mpp |
8.1 (3.1)
|
Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows A… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-m24f-6c22-rr63 |
6.1 (3.1)
|
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthe… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-fv67-9vrp-68qg |
9.8 (3.1)
|
Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Ex… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-fg6c-rjg4-4j6p |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-f8gm-x2c8-3fpc |
8.8 (3.1)
|
Missing Authorization vulnerability in wprio Table Block by RioVizual riovizual allows Exploiting I… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-f4ch-j254-ph76 |
8.1 (3.1)
|
Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-f2g8-m3wx-cfhq |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-crqx-56cp-p8j6 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in iseremet Reloadly reloadly-topup-widget allows S… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-cjp5-xj95-xh73 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-cj42-frrm-vcmv |
8.1 (3.1)
|
Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2014-11 |
|
pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of pack… | pip | 2014-11-24T15:59:00Z | 2021-07-05T00:01:24.413265Z |
| pysec-2013-9 |
|
pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a … | pip | 2013-08-17T06:54:00Z | 2021-07-05T00:01:24.378636Z |
| pysec-2013-8 |
|
pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perf… | pip | 2013-08-06T02:52:00Z | 2021-07-05T00:01:24.339020Z |
| pysec-2010-9 |
|
ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST com… | pyftpdlib | 2010-10-19T20:00:00Z | 2021-07-05T00:01:24.817551Z |
| pysec-2010-8 |
|
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows r… | pyftpdlib | 2010-10-19T20:00:00Z | 2021-07-05T00:01:24.787287Z |
| pysec-2010-7 |
|
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows r… | pyftpdlib | 2010-10-19T20:00:00Z | 2021-07-05T00:01:24.754790Z |
| pysec-2010-6 |
|
The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticat… | pyftpdlib | 2010-10-19T20:00:00Z | 2021-07-05T00:01:24.722786Z |
| pysec-2010-5 |
|
ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an inv… | pyftpdlib | 2010-10-19T20:00:00Z | 2021-07-05T00:01:24.685476Z |
| pysec-2010-4 |
|
Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 al… | pyftpdlib | 2010-10-19T20:00:00Z | 2021-07-05T00:01:24.654243Z |
| pysec-2010-11 |
|
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows r… | pyftpdlib | 2010-10-19T20:00:00Z | 2021-07-05T00:01:24.878652Z |
| pysec-2010-10 |
|
Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows… | pyftpdlib | 2010-10-19T20:00:00Z | 2021-07-05T00:01:24.847543Z |
| pysec-2018-47 |
|
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin b… | moin | 2018-10-15T19:29:00Z | 2021-07-05T00:01:23.080305Z |
| pysec-2017-22 |
|
An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMi… | owlmixin | 2017-11-08T03:29:00Z | 2021-07-05T00:01:23.384346Z |
| pysec-2017-21 |
|
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neu… | nova-lxd | 2017-04-12T22:59:00Z | 2021-07-05T00:01:23.183236Z |
| pysec-2017-20 |
|
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin b… | moin | 2017-01-30T22:59:00Z | 2021-07-05T00:01:23.049637Z |
| pysec-2016-6 |
|
Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow befo… | pillow | 2016-04-13T16:59:00Z | 2021-07-05T00:01:23.974761Z |
| pysec-2016-5 |
|
Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow… | pillow | 2016-04-13T16:59:00Z | 2021-07-05T00:01:23.915090Z |
| pysec-2015-16 |
|
Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed… | pillow | 2015-01-16T16:59:00Z | 2021-07-05T00:01:23.853626Z |
| pysec-2015-15 |
|
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a de… | pillow | 2015-05-01T15:59:00Z | 2021-07-05T00:01:23.790243Z |
| pysec-2014-10 |
|
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x … | pillow | 2014-08-25T14:55:00Z | 2021-07-05T00:01:23.718339Z |
| pysec-2013-7 |
|
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) a… | moin | 2013-01-03T01:55:00Z | 2021-07-05T00:01:23.010630Z |
| pysec-2019-153 |
|
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided dat… | modulemd | 2019-01-10T21:29:00Z | 2021-07-05T00:01:22.789825Z |
| pysec-2017-19 |
|
An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_q… | mlalchemy | 2017-11-08T03:29:00Z | 2021-07-05T00:01:22.762966Z |
| pysec-2017-18 |
|
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune… | mistune | 2017-12-29T15:29:00Z | 2021-07-05T00:01:22.732782Z |
| pysec-2017-17 |
|
Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallit… | kallithea | 2017-09-19T15:29:00Z | 2021-07-05T00:01:22.152589Z |
| pysec-2017-16 |
|
Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. | kallithea | 2017-09-21T14:29:00Z | 2021-07-05T00:01:22.120949Z |
| pysec-2016-4 |
|
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3… | jwcrypto | 2016-09-01T23:59:00Z | 2021-07-05T00:01:22.078687Z |
| pysec-2015-14 |
|
The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers t… | mercurial | 2015-03-31T14:59:00Z | 2021-07-05T00:01:22.697962Z |
| pysec-2015-13 |
|
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject ar… | kallithea | 2015-10-29T20:59:00Z | 2021-07-05T00:01:22.184837Z |
| pysec-2014-9 |
|
Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 all… | lxml | 2014-05-14T19:55:00Z | 2021-07-05T00:01:22.415943Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3438 | A vulnerability was found in SourceCodester Prison Management System 1.0 and classified a… | 2024-04-11T05:03:27.241051Z |
| gsd-2024-3437 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rat… | 2024-04-11T05:03:27.161557Z |
| gsd-2024-3436 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.357054Z |
| gsd-2024-3435 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.057928Z |
| gsd-2024-3434 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.313876Z |
| gsd-2024-3433 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.425332Z |
| gsd-2024-3432 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.149591Z |
| gsd-2024-3431 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.233402Z |
| gsd-2024-3430 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.098540Z |
| gsd-2024-3429 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.063794Z |
| gsd-2024-3428 | A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as … | 2024-04-11T05:03:27.190953Z |
| gsd-2024-3427 | A vulnerability, which was classified as problematic, was found in SourceCodester Online … | 2024-04-11T05:03:27.380682Z |
| gsd-2024-3426 | A vulnerability, which was classified as problematic, has been found in SourceCodester On… | 2024-04-11T05:03:27.392807Z |
| gsd-2024-3425 | A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0.… | 2024-04-11T05:03:27.414444Z |
| gsd-2024-3424 | A vulnerability classified as critical has been found in SourceCodester Online Courseware… | 2024-04-11T05:03:27.283686Z |
| gsd-2024-3423 | A vulnerability was found in SourceCodester Online Courseware 1.0. It has been rated as c… | 2024-04-11T05:03:27.335996Z |
| gsd-2024-3422 | A vulnerability was found in SourceCodester Online Courseware 1.0. It has been declared a… | 2024-04-11T05:03:27.347364Z |
| gsd-2024-3421 | A vulnerability was found in SourceCodester Online Courseware 1.0. It has been classified… | 2024-04-11T05:03:27.102989Z |
| gsd-2024-3420 | A vulnerability was found in SourceCodester Online Courseware 1.0 and classified as criti… | 2024-04-11T05:03:27.247125Z |
| gsd-2024-3419 | A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as … | 2024-04-11T05:03:27.085806Z |
| gsd-2024-3418 | A vulnerability, which was classified as critical, was found in SourceCodester Online Cou… | 2024-04-11T05:03:27.234193Z |
| gsd-2024-3417 | A vulnerability, which was classified as critical, has been found in SourceCodester Onlin… | 2024-04-11T05:03:27.326834Z |
| gsd-2024-3416 | A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0.… | 2024-04-11T05:03:27.302564Z |
| gsd-2024-3415 | A vulnerability was found in SourceCodester Human Resource Information System 1.0. It has… | 2024-04-11T05:03:27.120981Z |
| gsd-2024-3414 | A vulnerability was found in SourceCodester Human Resource Information System 1.0 and cla… | 2024-04-11T05:03:27.382122Z |
| gsd-2024-3413 | A vulnerability has been found in SourceCodester Human Resource Information System 1.0 an… | 2024-04-11T05:03:27.074349Z |
| gsd-2024-3412 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.071888Z |
| gsd-2024-3411 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.115935Z |
| gsd-2024-3410 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.356725Z |
| gsd-2024-3409 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.316530Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-191036 | Malicious code in @ntnx/t (npm) | 2025-11-24T22:56:21Z | 2025-12-23T15:41:17Z |
| mal-2025-190911 | Malicious code in @postman/secret-scanner-wasm (npm) | 2025-11-24T16:31:47Z | 2025-12-23T15:41:17Z |
| mal-2025-190872 | Malicious code in @mparpaillon/page (npm) | 2025-11-24T16:31:47Z | 2025-12-23T15:41:17Z |
| mal-2025-190676 | Malicious code in @postman/aether-icons (npm) | 2025-11-24T12:48:24Z | 2025-12-23T15:41:17Z |
| MAL-2025-192573 | Malicious code in @revvity-signals/chemdraw-js (npm) | 2025-12-15T07:34:01Z | 2025-12-23T15:41:17Z |
| MAL-2025-192553 | Malicious code in abrhide (npm) | 2025-12-12T06:31:55Z | 2025-12-23T15:41:17Z |
| MAL-2025-192324 | Malicious code in ambient-map (npm) | 2025-12-05T21:10:10Z | 2025-12-23T15:41:17Z |
| MAL-2025-191952 | Malicious code in angular-trackjs (npm) | 2025-12-03T01:23:28Z | 2025-12-23T15:41:17Z |
| MAL-2025-191951 | Malicious code in @wb-drive/icons (npm) | 2025-12-03T01:23:28Z | 2025-12-23T15:41:17Z |
| MAL-2025-191381 | Malicious code in @voiceflow/utils-designer (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191371 | Malicious code in @voiceflow/secrets-provider (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191361 | Malicious code in @voiceflow/nestjs-timeout (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191360 | Malicious code in @voiceflow/nestjs-redis (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191359 | Malicious code in @voiceflow/nestjs-rate-limit (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191358 | Malicious code in @voiceflow/nestjs-mongodb (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191357 | Malicious code in @voiceflow/nestjs-common (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191344 | Malicious code in @voiceflow/encryption (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191341 | Malicious code in @voiceflow/default-prompt-wrappers (npm) | 2025-11-25T00:16:49Z | 2025-12-23T15:41:17Z |
| MAL-2025-191075 | Malicious code in bidirectional-adapter (npm) | 2025-11-24T22:44:08Z | 2025-12-23T15:41:17Z |
| MAL-2025-191036 | Malicious code in @ntnx/t (npm) | 2025-11-24T22:56:21Z | 2025-12-23T15:41:17Z |
| MAL-2025-190911 | Malicious code in @postman/secret-scanner-wasm (npm) | 2025-11-24T16:31:47Z | 2025-12-23T15:41:17Z |
| MAL-2025-190872 | Malicious code in @mparpaillon/page (npm) | 2025-11-24T16:31:47Z | 2025-12-23T15:41:17Z |
| MAL-2025-190676 | Malicious code in @postman/aether-icons (npm) | 2025-11-24T12:48:24Z | 2025-12-23T15:41:17Z |
| mal-2025-49395 | Malicious code in @deputyapp/copilot2 (npm) | 2025-11-09T00:17:09Z | 2025-12-23T15:09:26Z |
| mal-2025-49379 | Malicious code in @chatclub/claude-code (npm) | 2025-11-07T03:58:49Z | 2025-12-23T15:09:26Z |
| mal-2025-192271 | Malicious code in @bhyolken/echotest (npm) | 2025-12-03T19:34:54Z | 2025-12-23T15:09:26Z |
| mal-2025-191950 | Malicious code in @hand-talk/yotta-icons (npm) | 2025-12-03T01:23:28Z | 2025-12-23T15:09:26Z |
| mal-2025-191496 | Malicious code in @hand-talk/yotta-core (npm) | 2025-12-01T16:00:47Z | 2025-12-23T15:09:26Z |
| mal-2025-191495 | Malicious code in @bingads-webui-clientcenter/instrumentation (npm) | 2025-12-01T16:00:47Z | 2025-12-23T15:09:26Z |
| mal-2025-191224 | Malicious code in @fishingbooker/react-swiper (npm) | 2025-11-24T23:42:38Z | 2025-12-23T15:09:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-2051 | ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service und Dateimanipulation | 2024-09-04T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-1079 | PostgreSQL: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-05-09T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-0921 | ClamAV: Schwachstelle ermöglicht Denial of Service | 2024-04-17T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-0092 | Red Hat SQLite: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-01-15T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2023-2489 | PostgreSQL: Mehrere Schwachstellen | 2016-04-03T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2023-2090 | ClamAV & Cisco Secure Endpoint: Mehrere Schwachstellen | 2023-08-16T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0248 | Acronis Cyber Protect (Cloud Agent): Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-02-02T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0247 | Samsung Exynos: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-02-02T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0245 | Dovecot: Schwachstelle ermöglicht Denial of Service | 2018-01-25T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0244 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-03-05T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0243 | Dovecot: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2019-02-05T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0242 | Dovecot: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2019-04-04T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0241 | Dovecot: Schwachstelle ermöglicht Denial of Service | 2019-04-23T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0240 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-05-01T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0239 | Dovecot: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2019-08-28T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0238 | Dovecot: Schwachstelle ermöglicht Denial of Service | 2019-12-12T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0237 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-02-12T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0236 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-05-18T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0235 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-08-12T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0234 | Dovecot: Mehrere Schwachstellen | 2021-01-04T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0208 | Google Chrome/ Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2025-01-28T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0150 | QT: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-01-21T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2024-1867 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-08-15T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2024-0715 | Fluent Bit: Schwachstelle ermöglicht Denial of Service | 2024-03-26T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2023-2964 | Splunk Enterprise: Mehrere Schwachstellen | 2023-11-16T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2023-0098 | Apache Maven: Schwachstelle ermöglicht Manipulation von Dateien oder Offenlegung von Informationen | 2021-04-25T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2022-1536 | Dovecot: Mehrere Schwachstellen | 2021-06-21T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0229 | Rockwell Automation FactoryTalk AssetCentre: Mehrere Schwachstellen ermöglichen Erlangen von Benutzerrechten | 2025-01-30T23:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2025-0227 | IBM QRadar SIEM: Mehrere Schwachstellen | 2021-11-30T23:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2025-0191 | Vaultwarden: Mehrere Schwachstellen | 2025-01-26T23:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:10183 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.8 bug fixes and container updates | 2024-11-21T23:23:53+00:00 | 2026-01-21T23:19:53+00:00 |
| rhsa-2024:10179 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.3.8 bug fixes and container updates | 2024-11-21T21:05:09+00:00 | 2026-01-21T23:19:51+00:00 |
| rhsa-2024:0855 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-02-19T01:16:12+00:00 | 2026-01-21T23:19:44+00:00 |
| rhsa-2024:0797 | Red Hat Security Advisory: Satellite 6.14.2 Async Security Update | 2024-02-13T14:45:57+00:00 | 2026-01-21T23:19:41+00:00 |
| rhsa-2024:0793 | Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.3 release security update | 2024-02-12T18:01:12+00:00 | 2026-01-21T23:19:41+00:00 |
| rhsa-2024:0789 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 release (RHBQ 3.2.10.Final) | 2024-02-12T16:02:02+00:00 | 2026-01-21T23:19:40+00:00 |
| rhsa-2024:0722 | Red Hat Security Advisory: Red Hat build of Quarkus 3.2.10 release and security update | 2024-02-12T15:24:12+00:00 | 2026-01-21T23:19:34+00:00 |
| rhsa-2024:0606 | Red Hat Security Advisory: openssh security update | 2024-01-30T14:59:23+00:00 | 2026-01-21T23:19:33+00:00 |
| rhsa-2024:0628 | Red Hat Security Advisory: libssh security update | 2024-01-31T08:48:54+00:00 | 2026-01-21T23:19:30+00:00 |
| rhsa-2024:0625 | Red Hat Security Advisory: libssh security update | 2024-01-31T08:36:02+00:00 | 2026-01-21T23:19:29+00:00 |
| rhsa-2024:0594 | Red Hat Security Advisory: openssh security update | 2024-01-30T14:13:55+00:00 | 2026-01-21T23:19:27+00:00 |
| rhsa-2024:0538 | Red Hat Security Advisory: libssh security update | 2024-01-29T11:50:44+00:00 | 2026-01-21T23:19:27+00:00 |
| rhsa-2024:0499 | Red Hat Security Advisory: libssh security update | 2024-01-25T15:36:48+00:00 | 2026-01-21T23:19:25+00:00 |
| rhsa-2024:0474 | Red Hat Security Advisory: tomcat security update | 2024-01-25T10:59:50+00:00 | 2026-01-21T23:19:22+00:00 |
| rhsa-2024:0455 | Red Hat Security Advisory: openssh security update | 2024-01-25T09:21:45+00:00 | 2026-01-21T23:19:20+00:00 |
| rhsa-2024:0429 | Red Hat Security Advisory: openssh security update | 2024-01-25T08:14:09+00:00 | 2026-01-21T23:19:20+00:00 |
| rhsa-2024:0387 | Red Hat Security Advisory: php:8.1 security update | 2024-01-24T09:59:57+00:00 | 2026-01-21T23:19:19+00:00 |
| rhsa-2024:0125 | Red Hat Security Advisory: tomcat security update | 2024-01-10T11:32:48+00:00 | 2026-01-21T23:19:17+00:00 |
| rhsa-2023:7678 | Red Hat Security Advisory: Red Hat AMQ Streams 2.6.0 release and security update | 2023-12-06T23:30:39+00:00 | 2026-01-21T23:19:12+00:00 |
| rhsa-2023:6180 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing 2.9.0 containers security update | 2023-10-30T12:53:43+00:00 | 2026-01-21T23:18:48+00:00 |
| rhsa-2023:5927 | Red Hat Security Advisory: php:8.0 security update | 2023-10-19T13:33:11+00:00 | 2026-01-21T23:18:23+00:00 |
| rhsa-2023:5926 | Red Hat Security Advisory: php security update | 2023-10-19T13:19:20+00:00 | 2026-01-21T23:18:21+00:00 |
| rhsa-2023:5441 | Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.0 release and security update | 2023-10-04T11:59:23+00:00 | 2026-01-21T23:17:38+00:00 |
| rhea-2024:7870 | Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.16.0 release | 2024-10-09T14:44:53+00:00 | 2026-01-21T23:17:36+00:00 |
| rhea-2024:3997 | Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.15.0 release | 2024-06-20T01:49:37+00:00 | 2026-01-21T23:17:31+00:00 |
| rhba-2025:0304 | Red Hat Bug Fix Advisory: .NET 8.0 bug fix and enhancement update | 2025-01-14T01:20:49+00:00 | 2026-01-21T23:17:24+00:00 |
| rhba-2024:9054 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.1 bugfix release | 2024-11-11T01:39:34+00:00 | 2026-01-21T23:17:23+00:00 |
| rhba-2024:4924 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.2 bugfix release | 2024-07-30T21:58:32+00:00 | 2026-01-21T23:17:21+00:00 |
| rhba-2024:4458 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.5 bug fix updates | 2024-07-10T15:00:31+00:00 | 2026-01-21T23:17:20+00:00 |
| rhba-2024:2862 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.3 bug fixes and container updates | 2024-05-15T22:17:03+00:00 | 2026-01-21T23:17:19+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-035-01 | Luxion KeyShot (Update A) | 2021-02-04T00:00:00.000000Z | 2021-03-09T00:00:00.000000Z |
| icsa-19-162-02 | Siemens SIMATIC Ident MV440 Family (Update A) | 2019-06-11T00:00:00.000000Z | 2021-03-09T00:00:00.000000Z |
| icsa-19-099-04 | Siemens SINEMA Remote Connect (Update A) | 2019-04-09T00:00:00.000000Z | 2021-03-09T00:00:00.000000Z |
| icsa-21-063-02 | ICSA-21-063-02_Schneider Electric EcoStruxure Building Operation (EBO) | 2021-03-04T00:00:00.000000Z | 2021-03-04T00:00:00.000000Z |
| icsa-21-063-01 | Rockwell Automation 1734-AENTR Series B and Series C | 2021-03-04T00:00:00.000000Z | 2021-03-04T00:00:00.000000Z |
| icsa-21-061-03 | MB connect line mbCONNECT24, mymbCONNECT24 | 2021-03-02T00:00:00.000000Z | 2021-03-02T00:00:00.000000Z |
| icsa-21-061-01 | Hitachi ABB Power Grids Ellipse EAM | 2021-03-02T00:00:00.000000Z | 2021-03-02T00:00:00.000000Z |
| icsa-21-056-04 | ProSoft Technology ICX35 | 2021-02-25T00:00:00.000000Z | 2021-02-25T00:00:00.000000Z |
| icsa-21-056-02 | FATEK Automation FvDesigner | 2021-02-25T00:00:00.000000Z | 2021-02-25T00:00:00.000000Z |
| icsa-21-056-01 | PerFact OpenVPN-Client | 2021-02-25T00:00:00.000000Z | 2021-02-25T00:00:00.000000Z |
| icsa-21-054-03 | Advantech Spectre RT Industrial Routers | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-054-02 | Advantech BB-ESWGP506-2SFP-T | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-054-01 | Rockwell Automation FactoryTalk Services Platform | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-049-01 | Johnson Controls Metasys Reporting Engine (MRE) Web Services | 2021-02-18T00:00:00.000000Z | 2021-02-18T00:00:00.000000Z |
| icsa-21-012-01 | Schneider Electric EcoStruxure Power Build-Rapsody (Update A) | 2021-01-12T00:00:00.000000Z | 2021-02-18T00:00:00.000000Z |
| icsma-21-047-01 | Hamilton-T1 | 2021-02-16T00:00:00.000000Z | 2021-02-16T00:00:00.000000Z |
| icsa-21-047-02 | Rockwell Automation Allen-Bradley Micrologix 1100 | 2021-02-16T00:00:00.000000Z | 2021-02-16T00:00:00.000000Z |
| icsa-21-042-02 | Rockwell Automation DriveTools SP and Drives AOP | 2021-02-11T00:00:00.000000Z | 2021-02-11T00:00:00.000000Z |
| icsa-21-040-10 | Siemens DIGSI 4 | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-09 | SIMATIC WinCC Graphics Designer | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-07 | Siemens SCALANCE W780 and W740 | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-04 | Siemens RUGGEDCOM ROX II | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-03 | Siemens SINEMA Server & SINEC NMS | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-02 | Advantech iView | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-01 | GE Digital HMI/SCADA iFIX | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-20-105-04 | Siemens Climatix (Update A) | 2020-04-14T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-19-162-04 | Siemens SCALANCE X (Update B) | 2019-06-11T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-035-02 | Horner Automation Cscape | 2021-02-04T00:00:00.000000Z | 2021-02-04T00:00:00.000000Z |
| icsa-21-033-02 | Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels | 2021-01-28T00:00:00.000000Z | 2021-01-28T00:00:00.000000Z |
| icsa-21-028-01 | Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform | 2021-01-28T00:00:00.000000Z | 2021-01-28T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-vedgfpdos-pkqqrnwv | Cisco SD-WAN vEdge Routers Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vedgfpdos-PkqQrnwV | Cisco SD-WAN vEdge Routers Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sivm-m8wugr9o | Cisco SD-WAN vManage Software SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sivm-M8wugR9O | Cisco SD-WAN vManage Software SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sdw-dos-kwodyhnb | Cisco SD-WAN Solution Software Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sdw-dos-KWOdyHnB | Cisco SD-WAN Solution Software Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sdscred-hfwwfqbj | Cisco SD-WAN Solution Software Static Credentials Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sdscred-HfWWfqBj | Cisco SD-WAN Solution Software Static Credentials Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sb-rce-dos-9zajkx4 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sb-rce-dos-9ZAjkx4 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sb-dos-zn5gvnh7 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sb-dos-ZN5GvNH7 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv110w-static-cred-bmtwbwty | Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv110w-static-cred-BMTWBWTy | Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv-rce-m4feegwx | Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv-rce-m4FEEGWX | Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv-rce-aqkreqp | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv-rce-AQKREqp | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv-info-dis-fewbwgsd | Cisco Small Business RV110W and RV215W Series Routers Information Disclosure Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv-info-dis-FEWBWgsD | Cisco Small Business RV110W and RV215W Series Routers Information Disclosure Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv-auth-bypass-cgv9eruz | Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-rv-auth-bypass-cGv9EruZ | Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-fpdos-horbfd9f | Cisco SD-WAN vEdge Routers Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-fpdos-hORBfd9f | Cisco SD-WAN vEdge Routers Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-emvman-3y6lutcz | Cisco SD-WAN vManage Software Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-emvman-3y6LuTcZ | Cisco SD-WAN vManage Software Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-dncm-xss-avmyawd2 | Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-dncm-xss-AvMyAwd2 | Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-dcnm-privescal-zxfch7dg | Cisco Data Center Network Manager Privilege Escalation Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-dcnm-privescal-zxfCH7Dg | Cisco Data Center Network Manager Privilege Escalation Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-24534 | Excessive memory allocation in net/http and net/textproto | 2023-04-01T00:00:00.000Z | 2025-09-03T22:40:02.000Z |
| msrc_cve-2024-49939 | wifi: rtw89: avoid to add interface to list twice when SER | 2024-10-01T07:00:00.000Z | 2025-09-03T22:39:44.000Z |
| msrc_cve-2024-52981 | An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow. | 2025-04-02T00:00:00.000Z | 2025-09-03T22:38:10.000Z |
| msrc_cve-2024-36012 | Bluetooth: msft: fix slab-use-after-free in msft_do_close() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:38:10.000Z |
| msrc_cve-2024-46751 | btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() | 2024-09-01T07:00:00.000Z | 2025-09-03T22:38:08.000Z |
| msrc_cve-2023-45857 | An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. | 2023-11-01T07:00:00.000Z | 2025-09-03T22:38:03.000Z |
| msrc_cve-2024-57256 | An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. | 2025-02-02T00:00:00.000Z | 2025-09-03T22:38:00.000Z |
| msrc_cve-2023-52584 | spmi: mediatek: Fix UAF on device remove | 2024-03-02T08:00:00.000Z | 2025-09-03T22:37:27.000Z |
| msrc_cve-2014-4607 | Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run. | 2020-02-02T00:00:00.000Z | 2025-09-03T22:36:44.000Z |
| msrc_cve-2024-56784 | drm/amd/display: Adding array index check to prevent memory corruption | 2025-01-02T00:00:00.000Z | 2025-09-03T22:36:39.000Z |
| msrc_cve-2023-45929 | S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr(). | 2024-03-02T08:00:00.000Z | 2025-09-03T22:36:34.000Z |
| msrc_cve-2024-41066 | ibmvnic: Add tx check to prevent skb leak | 2024-07-01T07:00:00.000Z | 2025-09-03T22:36:21.000Z |
| msrc_cve-2024-3220 | Default mimetype known files writeable on Windows | 2025-02-02T00:00:00.000Z | 2025-09-03T22:36:11.000Z |
| msrc_cve-2025-8836 | JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion | 2025-08-02T00:00:00.000Z | 2025-09-03T22:35:09.000Z |
| msrc_cve-2022-24791 | Use after free in Wasmtime | 2022-03-02T00:00:00.000Z | 2025-09-03T22:34:55.000Z |
| msrc_cve-2023-52591 | reiserfs: Avoid touching renamed directory if parent does not change | 2024-03-02T08:00:00.000Z | 2025-09-03T22:34:49.000Z |
| msrc_cve-2025-37743 | wifi: ath12k: Avoid memory leak while enabling statistics | 2025-05-02T00:00:00.000Z | 2025-09-03T22:34:36.000Z |
| msrc_cve-2025-38617 | net/packet: fix a race in packet_set_ring() and packet_notifier() | 2025-08-02T00:00:00.000Z | 2025-09-03T22:34:22.000Z |
| msrc_cve-2021-23841 | Null pointer deref in X509_issuer_and_serial_hash() | 2021-02-02T00:00:00.000Z | 2025-09-03T22:33:59.000Z |
| msrc_cve-2019-14193 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length. | 2019-07-02T00:00:00.000Z | 2025-09-03T22:33:58.000Z |
| msrc_cve-2025-38414 | wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 | 2025-07-02T00:00:00.000Z | 2025-09-03T22:33:00.000Z |
| msrc_cve-2023-52601 | jfs: fix array-index-out-of-bounds in dbAdjTree | 2024-03-02T08:00:00.000Z | 2025-09-03T22:32:54.000Z |
| msrc_cve-2023-45927 | S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf(). | 2024-03-02T08:00:00.000Z | 2025-09-03T22:32:27.000Z |
| msrc_cve-2025-0913 | Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall | 2025-06-02T00:00:00.000Z | 2025-09-03T22:32:05.000Z |
| msrc_cve-2024-43895 | drm/amd/display: Skip Recompute DSC Params if no Stream on Link | 2024-08-02T00:00:00.000Z | 2025-09-03T22:32:03.000Z |
| msrc_cve-2025-1767 | This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable. | 2025-03-02T00:00:00.000Z | 2025-09-03T22:31:42.000Z |
| msrc_cve-2024-11235 | Reference counting in php_request_shutdown causes Use-After-Free | 2025-04-02T00:00:00.000Z | 2025-09-03T22:31:40.000Z |
| msrc_cve-2024-3660 | Arbitrary code injection vulnerability in Keras framework < 2.13 | 2024-04-02T07:00:00.000Z | 2025-09-03T22:31:36.000Z |
| msrc_cve-2025-38206 | exfat: fix double free in delayed_free | 2025-07-02T00:00:00.000Z | 2025-09-03T22:31:13.000Z |
| msrc_cve-2022-24999 | qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has "deps: qs@6.9.7" in its release description, is not vulnerable). | 2022-11-02T00:00:00.000Z | 2025-09-03T22:31:12.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202002-0214 | In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write… | 2024-02-27T23:07:41.847000Z |
| var-202402-1803 | An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS versi… | 2024-02-27T23:06:09.479000Z |
| var-200505-0198 | Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other vers… | 2024-02-27T22:53:51.996000Z |
| var-200907-0445 | Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (m… | 2024-02-27T22:16:58.978000Z |
| var-202105-1476 | An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and… | 2024-02-27T21:58:56.714000Z |
| var-202105-1429 | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, … | 2024-02-27T20:24:19.155000Z |
| var-202105-1477 | An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3… | 2024-02-27T19:14:44.708000Z |
| var-200203-0011 | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or r… | 2024-02-26T22:51:43.141000Z |
| var-201706-0438 | Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware vers… | 2024-02-26T22:48:07.734000Z |
| var-201104-0076 | Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.1… | 2024-02-26T22:22:58.648000Z |
| var-200711-0249 | Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.… | 2024-02-26T21:58:59.668000Z |
| var-202402-1248 | A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All version… | 2024-02-24T22:55:23.183000Z |
| var-202309-0575 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visua… | 2024-02-23T20:27:35.795000Z |
| var-200711-0210 | Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyon… | 2024-02-22T23:05:04.317000Z |
| var-202312-1526 | An improper neutralization of input during web page generation ('cross-site scripting') i… | 2024-02-22T23:00:21.326000Z |
| var-202007-1057 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) … | 2024-02-22T23:00:06.178000Z |
| var-200901-0408 | Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stac… | 2024-02-22T22:59:46.486000Z |
| var-202401-2083 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vul… | 2024-02-22T22:59:00.640000Z |
| var-200802-0381 | The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56… | 2024-02-22T22:49:53.121000Z |
| var-200911-0246 | Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote a… | 2024-02-22T22:49:51.008000Z |
| var-202401-2215 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vul… | 2024-02-22T22:46:17.642000Z |
| var-202312-1696 | A improper neutralization of input during web page generation ('cross-site scripting') in… | 2024-02-22T22:46:17.839000Z |
| var-200709-0395 | Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.… | 2024-02-22T22:44:28.185000Z |
| var-200801-0123 | OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the … | 2024-02-22T22:42:05.608000Z |
| var-200212-0658 | Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the retu… | 2024-02-22T22:41:24.411000Z |
| var-202402-1322 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < … | 2024-02-22T22:23:10.829000Z |
| var-200812-0329 | The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext conf… | 2024-02-22T22:22:40.709000Z |
| var-200902-0476 | XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with… | 2024-02-22T22:11:14.505000Z |
| var-202402-1324 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < … | 2024-02-22T20:48:02.808000Z |
| var-201912-0889 | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of un… | 2024-02-22T20:10:54.285000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2009-001135 | Fujitsu Jasmine HTTP Response Splitting Vulnerability When Executing WebLink Template | 2009-04-17T14:13+09:00 | 2009-04-17T14:13+09:00 |
| jvndb-2009-000017 | XOOPS Cube Legacy cross-site scripting vulnerability | 2009-04-07T17:06+09:00 | 2009-04-07T17:06+09:00 |
| jvndb-2009-000016 | Access Analyzer CGI Professional Version vulnerability allows third party to gain administrative privileges | 2009-03-31T16:08+09:00 | 2009-03-31T16:08+09:00 |
| jvndb-2008-001647 | Jasmine WebLink Template Multiple Vulnerabilities | 2008-09-18T11:48+09:00 | 2009-03-30T14:29+09:00 |
| jvndb-2009-001087 | Fujitsu Enhanced Support Facility HRM-S Hardware/Software Information Disclosure Vulnerability | 2009-03-24T17:35+09:00 | 2009-03-24T17:35+09:00 |
| jvndb-2009-000015 | Cross-site scripting vulnerability in Access Analyzer CGI Standard Version (Ver. 3.x) | 2009-03-16T17:07+09:00 | 2009-03-16T17:07+09:00 |
| jvndb-2009-000014 | MP Form Mail CGI vulnerability allows third party to gain administrative privileges | 2009-03-13T16:25+09:00 | 2009-03-13T16:25+09:00 |
| jvndb-2009-000012 | Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras | 2009-03-09T16:27+09:00 | 2009-03-09T16:27+09:00 |
| jvndb-2009-000013 | PEAK XOOPS piCal cross-site scripting vulnerability | 2009-03-03T16:37+09:00 | 2009-03-03T16:37+09:00 |
| jvndb-2009-001033 | Multiple Vulnerabilities in uCosminexus Portal Framework | 2009-03-02T17:38+09:00 | 2009-03-02T17:38+09:00 |
| jvndb-2009-001032 | JP1/Cm2/Network Node Manager Denial of Service (DoS) Vulnerability | 2009-03-02T17:38+09:00 | 2009-03-02T17:38+09:00 |
| jvndb-2009-000010 | Apache Tomcat information disclosure vulnerability | 2009-02-26T15:28+09:00 | 2009-02-26T15:28+09:00 |
| jvndb-2009-001025 | Vulnerability allowing Viewing/Updating of Other Users' Information in Groupmax World Wide Web Desktop Version 6 | 2009-02-26T11:55+09:00 | 2009-02-26T11:55+09:00 |
| jvndb-2009-000009 | FAST ESP cross-site scripting vulnerability | 2009-02-17T11:55+09:00 | 2009-02-17T11:55+09:00 |
| jvndb-2009-000011 | Becky! Internet Mail buffer overflow vulnerability | 2009-02-12T17:28+09:00 | 2009-02-12T17:28+09:00 |
| jvndb-2007-000817 | Flash Player vulnerable in handling cross-domain policy files | 2008-05-21T00:00+09:00 | 2009-02-10T11:32+09:00 |
| jvndb-2009-000008 | Fulltext search CGI vulnerability allows third party to gain administrative privileges | 2009-01-28T15:25+09:00 | 2009-01-28T15:25+09:00 |
| jvndb-2009-000007 | Oracle WebLogic Server vulnerable to cross-site scripting | 2009-01-20T16:45+09:00 | 2009-01-20T16:45+09:00 |
| jvndb-2009-000006 | Cisco IOS cross-site scripting vulnerability | 2009-01-15T19:14+09:00 | 2009-01-15T19:14+09:00 |
| jvndb-2009-000005 | MODx vulnerable to SQL injection | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000004 | MODx cross-site request forgery vulnerability | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000003 | MODx cross-site scripting vulnerability | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000001 | MyNETS cross-site scripting vulnerability | 2009-01-08T11:34+09:00 | 2009-01-08T11:34+09:00 |
| jvndb-2008-000086 | BlackJumboDog authentication bypass vulnerability | 2008-12-25T16:22+09:00 | 2008-12-25T16:22+09:00 |
| jvndb-2008-000085 | Mayaa cross-site scripting vulnerability | 2008-12-25T16:22+09:00 | 2008-12-25T16:22+09:00 |
| jvndb-2008-000083 | Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe | 2008-12-17T15:30+09:00 | 2008-12-17T15:30+09:00 |
| jvndb-2008-001911 | Groupmax Workflow - Development Kit for Active Server Pages Cross-Site Scripting Vulnerability | 2008-12-05T11:35+09:00 | 2008-12-05T11:35+09:00 |
| jvndb-2008-001910 | Groupmax Collaboration - Schedule Mis-scheduling Problem: Unintended Members Included When Reservations are Made by Secretary | 2008-12-05T11:34+09:00 | 2008-12-05T11:34+09:00 |
| jvndb-2008-000067 | Movable Type Enterprise cross-site scripting vulnerability | 2008-12-04T14:52+09:00 | 2008-12-04T14:52+09:00 |
| jvndb-2008-000079 | I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability | 2008-12-02T15:50+09:00 | 2008-12-02T15:50+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0976-1 | Security update for libxml2 | 2025-03-21T08:25:09Z | 2025-03-21T08:25:09Z |
| suse-su-2025:0975-1 | Security update for webkit2gtk3 | 2025-03-21T08:24:35Z | 2025-03-21T08:24:35Z |
| suse-su-2025:0974-1 | Security update for webkit2gtk3 | 2025-03-21T08:23:09Z | 2025-03-21T08:23:09Z |
| suse-su-2025:20241-1 | Security update for gstreamer-plugins-base | 2025-03-20T10:57:31Z | 2025-03-20T10:57:31Z |
| suse-su-2025:20155-1 | Security update for protobuf | 2025-03-20T10:44:54Z | 2025-03-20T10:44:54Z |
| suse-su-2025:0962-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-03-19T19:04:26Z | 2025-03-19T19:04:26Z |
| suse-su-2025:0961-1 | Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) | 2025-03-19T19:04:10Z | 2025-03-19T19:04:10Z |
| suse-su-2025:0960-1 | Security update for freetype2 | 2025-03-19T18:34:08Z | 2025-03-19T18:34:08Z |
| suse-su-2025:0959-1 | Security update for python-Django | 2025-03-19T16:56:42Z | 2025-03-19T16:56:42Z |
| suse-su-2025:0958-1 | Security update for ffmpeg-4 | 2025-03-19T16:55:56Z | 2025-03-19T16:55:56Z |
| suse-su-2025:0956-1 | Security update for python-Jinja2 | 2025-03-19T16:12:31Z | 2025-03-19T16:12:31Z |
| suse-su-2025:0955-1 | Security update for the Linux Kernel | 2025-03-19T16:11:24Z | 2025-03-19T16:11:24Z |
| suse-su-2025:0954-1 | Security update for tomcat | 2025-03-19T13:50:54Z | 2025-03-19T13:50:54Z |
| suse-su-2025:0952-1 | Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) | 2025-03-19T13:34:10Z | 2025-03-19T13:34:10Z |
| suse-su-2025:0950-1 | Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) | 2025-03-19T13:34:04Z | 2025-03-19T13:34:04Z |
| suse-su-2025:0949-1 | Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4) | 2025-03-19T13:04:19Z | 2025-03-19T13:04:19Z |
| suse-su-2025:0946-1 | Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) | 2025-03-19T12:35:10Z | 2025-03-19T12:35:10Z |
| suse-su-2025:0945-1 | Security update for the Linux Kernel | 2025-03-19T12:13:45Z | 2025-03-19T12:13:45Z |
| suse-su-2025:0944-1 | Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3) | 2025-03-19T12:04:27Z | 2025-03-19T12:04:27Z |
| suse-su-2025:0943-1 | Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3) | 2025-03-19T11:34:03Z | 2025-03-19T11:34:03Z |
| suse-su-2025:0942-1 | Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3) | 2025-03-19T11:33:56Z | 2025-03-19T11:33:56Z |
| suse-su-2025:20154-1 | Security update for python311 | 2025-03-19T11:31:40Z | 2025-03-19T11:31:40Z |
| suse-su-2025:20240-1 | Security update for gstreamer | 2025-03-19T11:06:39Z | 2025-03-19T11:06:39Z |
| suse-su-2025:20153-1 | Security update for krb5 | 2025-03-19T10:42:10Z | 2025-03-19T10:42:10Z |
| suse-su-2025:20152-1 | Security update for orc | 2025-03-19T10:36:26Z | 2025-03-19T10:36:26Z |
| suse-su-2025:0937-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-03-19T10:34:13Z | 2025-03-19T10:34:13Z |
| suse-su-2025:0929-1 | Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4) | 2025-03-19T10:04:22Z | 2025-03-19T10:04:22Z |
| suse-su-2025:0927-1 | Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5) | 2025-03-19T10:04:05Z | 2025-03-19T10:04:05Z |
| suse-su-2025:0920-1 | Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) | 2025-03-19T09:33:57Z | 2025-03-19T09:33:57Z |
| suse-su-2025:0924-1 | Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5) | 2025-03-19T09:33:39Z | 2025-03-19T09:33:39Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13336-1 | libnghttp2-14-1.57.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13335-1 | ungoogled-chromium-118.0.5993.70-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13334-1 | python310-Django-4.2.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13333-1 | exim-4.96.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13332-1 | ctdb-4.19.1+git.312.c912b3d2ef6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13331-1 | tomcat-9.0.82-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13330-1 | libnss_slurm2-23.02.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13329-1 | jetty-annotations-9.4.53-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13328-1 | grub2-2.12~rc1-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13327-1 | go1.21-1.21.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13326-1 | go1.20-1.20.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13325-1 | curl-8.4.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13324-1 | tuxguitar-1.6.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13323-1 | rxvt-unicode-9.31-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13322-1 | libopenconnect5-9.12-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13321-1 | libeverest-3.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13320-1 | matrix-synapse-1.94.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13319-1 | libcue-devel-2.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13318-1 | erofs-utils-1.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13317-1 | chromedriver-118.0.5993.70-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13316-1 | borgbackup-1.2.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13315-1 | shadowsocks-rust-1.16.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13314-1 | opensc-0.23.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13313-1 | gpp-2.28-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13312-1 | eclipse-jgit-5.11.0-9.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13311-1 | ansible-core-2.15.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13310-1 | libwireshark16-4.0.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13309-1 | plexus-archiver-4.8.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13308-1 | libQt5Bootstrap-devel-static-32bit-5.15.11+kde134-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13307-1 | go1.21-1.21.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23329 | Employee Record Management System /admin/allemployees.php文件SQL注入漏洞 | 2025-06-10 | 2025-10-11 |
| cnvd-2025-23328 | Employee Record Management System /admin/adminprofile.php文件SQL注入漏洞 | 2025-06-10 | 2025-10-11 |
| cnvd-2025-23327 | Employee Record Management System admin/editempeducation.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-11 |
| cnvd-2025-23326 | Employee Record Management System myprofile.php文件跨站脚本漏洞 | 2025-09-29 | 2025-10-11 |
| cnvd-2025-23325 | Zoo Management System /zms/admin/changeimage.php文件SQL注入漏洞 | 2024-03-01 | 2025-10-10 |
| cnvd-2025-23324 | Teachers Record Management System /trms/listed-teachers.php跨站脚本漏洞 | 2024-10-23 | 2025-10-10 |
| cnvd-2025-23323 | Beauty Parlour Management System不安全的直接对象引用漏洞 | 2024-11-08 | 2025-10-10 |
| cnvd-2025-23322 | Teachers Record Management System add-teacher.php文件SQL注入漏洞 | 2024-11-11 | 2025-10-10 |
| cnvd-2025-23321 | Teachers Record Management System admin/queries.php文件SQL注入漏洞 | 2024-11-11 | 2025-10-10 |
| cnvd-2025-23320 | Zoo Management System login.php文件SQL注入漏洞 | 2025-03-27 | 2025-10-10 |
| cnvd-2025-23319 | Zoo Management System aboutus.php文件SQL注入漏洞 | 2025-04-09 | 2025-10-10 |
| cnvd-2025-23318 | Zoo Management System /admin/view-foreigner-ticket.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-10 |
| cnvd-2025-23317 | Auto Taxi Stand Management System /admin/new-autoortaxi-entry-form.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-10 |
| cnvd-2025-23316 | Auto Taxi Stand Management System /admin/index.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-10 |
| cnvd-2025-23315 | Auto Taxi Stand Management System /admin/forgot-password.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-10 |
| cnvd-2025-23314 | Auto Taxi Stand Management System /admin/auto-taxi-entry-detail.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-10 |
| cnvd-2025-23313 | Auto Taxi Stand Management System /admin/admin-profile.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-10 |
| cnvd-2025-23312 | Teachers Record Management System edit-teacher-detail.php文件SQL注入漏洞 | 2025-07-04 | 2025-10-10 |
| cnvd-2025-23311 | Teachers Record Management System changeimage.php文件SQL注入漏洞 | 2025-07-04 | 2025-10-10 |
| cnvd-2025-23310 | Taxi Stand Management System admin/admin-profile.php文件跨站脚本漏洞 | 2025-07-23 | 2025-10-10 |
| cnvd-2025-23309 | Taxi Stand Management System admin/search-autoortaxi.php文件跨站脚本漏洞 | 2025-07-23 | 2025-10-10 |
| cnvd-2025-23308 | Taxi Stand Management System admin/new-autoortaxi-entry-form.php文件跨站脚本漏洞 | 2025-07-30 | 2025-10-10 |
| cnvd-2025-23307 | Zoo Management System admin/add-foreigner-ticket.php文件跨站脚本漏洞 | 2025-08-20 | 2025-10-10 |
| cnvd-2025-23306 | Teachers Record Management System admin/search.php文件SQL注入漏洞 | 2025-08-20 | 2025-10-10 |
| cnvd-2025-23305 | Beauty Parlour Management System admin/all-appointment.php文件SQL注入漏洞 | 2025-09-18 | 2025-10-10 |
| cnvd-2025-23290 | PyTorch存在未明漏洞（CNVD-2025-23290） | 2025-05-12 | 2025-10-10 |
| cnvd-2025-23289 | PyTorch存在未明漏洞（CNVD-2025-23289） | 2025-05-14 | 2025-10-10 |
| cnvd-2025-23288 | PyTorch torch.linalg.lu组件存在未明漏洞 | 2025-09-28 | 2025-10-10 |
| cnvd-2025-23287 | PyTorch缓冲区溢出漏洞（CNVD-2025-23287） | 2025-09-28 | 2025-10-10 |
| cnvd-2025-23286 | PyTorch存在未明漏洞（CNVD-2025-23286） | 2025-09-28 | 2025-10-10 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0943 | Vulnérabilité dans Qnap QuRouter | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0942 | Vulnérabilité dans les produits Broadcom | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0941 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0940 | Multiples vulnérabilités dans les produits Moxa | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0942 | Vulnérabilité dans les produits Broadcom | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0941 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0940 | Multiples vulnérabilités dans les produits Moxa | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0939 | Multiples vulnérabilités dans les produits IBM | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0938 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0937 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0936 | Multiples vulnérabilités dans les produits Splunk | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0935 | Vulnérabilité dans Tenable Sensor Proxy | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0939 | Multiples vulnérabilités dans les produits IBM | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0938 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0937 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0936 | Multiples vulnérabilités dans les produits Splunk | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0935 | Vulnérabilité dans Tenable Sensor Proxy | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0934 | Multiples vulnérabilités dans les produits Mozilla | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0933 | Multiples vulnérabilités dans les produits Qnap | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0932 | Multiples vulnérabilités dans les produits Apple | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0931 | Multiples vulnérabilités dans Google Chrome | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| CERTFR-2024-AVI-0934 | Multiples vulnérabilités dans les produits Mozilla | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| CERTFR-2024-AVI-0933 | Multiples vulnérabilités dans les produits Qnap | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| CERTFR-2024-AVI-0932 | Multiples vulnérabilités dans les produits Apple | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| CERTFR-2024-AVI-0931 | Multiples vulnérabilités dans Google Chrome | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0930 | Vulnérabilité dans MongoDB | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| certfr-2024-avi-0929 | Multiples vulnérabilités dans les produits Apple | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| CERTFR-2024-AVI-0930 | Vulnérabilité dans MongoDB | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| CERTFR-2024-AVI-0929 | Multiples vulnérabilités dans les produits Apple | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| certfr-2024-avi-0928 | Vulnérabilité dans Squid | 2024-10-28T00:00:00.000000 | 2024-10-28T00:00:00.000000 |