Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-60227 |
8.6 (3.1)
|
WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File De… |
ThimPress |
WP Pipes |
2025-10-22T14:32:46.277Z | 2026-01-20T14:28:12.468Z |
| CVE-2025-60226 |
9.8 (3.1)
|
WordPress White Rabbit theme <= 1.5.2 - PHP Object Inj… |
axiomthemes |
White Rabbit |
2025-10-22T14:32:46.090Z | 2026-01-20T14:28:12.467Z |
| CVE-2025-60225 |
9.8 (3.1)
|
WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injec… |
AncoraThemes |
BugsPatrol |
2025-10-22T14:32:45.876Z | 2026-01-20T14:28:12.508Z |
| CVE-2025-60224 |
9.8 (3.1)
|
WordPress Subscribe to Download plugin <= 2.0.9 - PHP … |
wpshuffle |
Subscribe to Download |
2025-10-22T14:32:45.675Z | 2026-01-20T14:28:12.485Z |
| CVE-2025-60222 |
8.8 (3.1)
|
WordPress SUMO Memberships for WooCommerce plugin <= 7… |
FantasticPlugins |
SUMO Memberships for WooCommerce |
2025-10-22T14:32:45.465Z | 2026-01-20T14:28:12.484Z |
| CVE-2025-60221 |
9.8 (3.1)
|
WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object … |
captivateaudio |
Captivate Sync |
2025-10-22T14:32:45.187Z | 2026-01-20T14:28:12.492Z |
| CVE-2025-60220 |
9.8 (3.1)
|
WordPress CouponXxL theme <= 3.0.0 - Privilege Escalat… |
pebas |
CouponXxL |
2025-10-22T14:32:44.897Z | 2026-01-20T14:28:12.413Z |
| CVE-2025-60217 |
7.7 (3.1)
|
WordPress PT Luxa Addons Plugin <= 1.2.2 - Arbitrary F… |
ypromo |
PT Luxa Addons |
2025-10-22T14:32:44.691Z | 2026-01-20T14:28:12.511Z |
| CVE-2025-60216 |
9.8 (3.1)
|
WordPress Addison theme <= 1.4.2 - PHP Object Injectio… |
BoldThemes |
Addison |
2025-10-22T14:32:44.405Z | 2026-01-20T14:28:12.460Z |
| CVE-2025-60215 |
8.8 (3.1)
|
WordPress Kriya theme <= 3.4 - PHP Object Injection Vu… |
designthemes |
Kriya |
2025-10-22T14:32:44.186Z | 2026-01-20T14:28:12.435Z |
| CVE-2025-60214 |
9.8 (3.1)
|
WordPress Goldenblatt theme <= 1.2.1 - PHP Object Inje… |
BoldThemes |
Goldenblatt |
2025-10-22T14:32:44.013Z | 2026-01-20T14:28:12.452Z |
| CVE-2025-60213 |
9.8 (3.1)
|
WordPress Scape theme <= 1.5.13 - PHP Object Injection… |
Whitebox-Studio |
Scape |
2025-10-22T14:32:43.800Z | 2026-01-20T14:28:12.440Z |
| CVE-2025-60212 |
8.8 (3.1)
|
WordPress VEDA Theme <= 4.2 - PHP Object Injection Vul… |
designthemes |
VEDA |
2025-10-22T14:32:43.582Z | 2026-01-20T14:28:12.478Z |
| CVE-2025-60211 |
8.8 (3.1)
|
WordPress WooCommerce Registration Fields Plugin - Cus… |
extendons |
WooCommerce Registration Fields Plugin - Custom Signup Fields |
2025-10-22T14:32:43.390Z | 2026-01-20T14:28:12.510Z |
| CVE-2025-60210 |
9.8 (3.1)
|
WordPress Everest Forms - Frontend Listing plugin <= 1… |
wpeverest |
Everest Forms - Frontend Listing |
2025-10-22T14:32:43.171Z | 2026-01-20T14:28:12.476Z |
| CVE-2025-60209 |
9.8 (3.1)
|
WordPress Connector for Gravity Forms and Google Sheet… |
CRM Perks |
Connector for Gravity Forms and Google Sheets |
2025-10-22T14:32:42.951Z | 2026-01-20T14:28:12.514Z |
| CVE-2025-60208 |
8.8 (3.1)
|
WordPress Advanced Custom Fields : CPT Options Pages p… |
Tusko Trush |
Advanced Custom Fields : CPT Options Pages |
2025-10-22T14:32:42.742Z | 2026-01-20T14:28:12.505Z |
| CVE-2025-60207 |
10 (3.1)
|
WordPress Custom User Registration Fields for WooComme… |
Addify |
Custom User Registration Fields for WooCommerce |
2025-11-06T15:55:06.274Z | 2026-01-20T14:28:12.440Z |
| CVE-2025-60206 |
10 (3.1)
|
WordPress Alone theme <= 7.8.3 - Remote Code Execution… |
Bearsthemes |
Alone |
2025-10-22T14:32:42.404Z | 2026-01-20T14:28:12.509Z |
| CVE-2025-60204 |
7.5 (3.1)
|
WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - … |
Josh Kohlbach |
WooCommerce Store Toolkit |
2025-11-06T15:55:05.172Z | 2026-01-20T14:28:12.409Z |
| CVE-2025-60203 |
7.5 (3.1)
|
WordPress Store Exporter plugin <= 2.7.6 - Local File … |
Josh Kohlbach |
Store Exporter |
2025-11-06T15:55:04.065Z | 2026-01-20T14:28:12.403Z |
| CVE-2025-60202 |
7.5 (3.1)
|
WordPress Favorites plugin <= 2.3.6 - Local File Inclu… |
Kyle Phillips |
Favorites |
2025-11-06T15:55:03.303Z | 2026-01-20T14:28:12.411Z |
| CVE-2025-60201 |
7.5 (3.1)
|
WordPress WP Customer Area plugin <= 8.2.7 - Local Fil… |
aguilatechnologies |
WP Customer Area |
2025-11-06T15:55:00.953Z | 2026-01-20T14:28:12.509Z |
| CVE-2025-60200 |
7.5 (3.1)
|
WordPress LearnPress Export Import plugin <= 4.0.9 - L… |
ThimPress |
LearnPress Export Import |
2025-11-06T15:54:59.689Z | 2026-01-20T14:28:12.386Z |
| CVE-2025-60199 |
8.2 (3.1)
|
WordPress InHype - Blog & Magazine WordPress Theme the… |
dedalx |
InHype - Blog & Magazine WordPress Theme |
2025-11-06T15:54:56.700Z | 2026-01-20T14:28:12.387Z |
| CVE-2025-60198 |
8.1 (3.1)
|
WordPress Saxon - Viral Content Blog & Magazine Market… |
dedalx |
Saxon - Viral Content Blog & Magazine Marketing WordPress Theme |
2025-11-06T15:54:55.955Z | 2026-01-20T14:28:12.404Z |
| CVE-2025-60197 |
8.2 (3.1)
|
WordPress Simple Contact Forms plugin <= 1.6.4 - Local… |
owenr88 |
Simple Contact Forms |
2025-11-06T15:54:54.553Z | 2026-01-20T14:28:12.453Z |
| CVE-2025-60196 |
7.5 (3.1)
|
WordPress Clearblue® Ovulation Calculator plugin <= 1.… |
Clearblue |
Clearblue® Ovulation Calculator |
2025-11-06T15:54:52.172Z | 2026-01-20T14:28:12.390Z |
| CVE-2025-60195 |
9.8 (3.1)
|
WordPress Atarim plugin <= 4.2 - Privilege Escalation … |
Vito Peleg |
Atarim |
2025-11-06T15:54:51.541Z | 2026-01-20T14:28:12.415Z |
| CVE-2025-60194 |
7.5 (3.1)
|
WordPress Premmerce Product Search for WooCommerce plu… |
Premmerce |
Premmerce Product Search for WooCommerce |
2025-11-06T15:54:50.878Z | 2026-01-20T14:28:12.366Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64234 |
4.3 (3.1)
|
WordPress Evergreen Content Poster plugin <= 1.4.5 - B… |
Evergreen Content Poster |
Evergreen Content Poster |
2025-10-29T08:38:11.964Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64233 |
9.8 (3.1)
|
WordPress Codiqa theme < 1.2.8 - PHP Object Injection … |
BoldThemes |
Codiqa |
2025-12-18T07:22:13.958Z | 2026-01-20T21:45:05.735Z |
| CVE-2025-64232 |
7.1 (3.1)
|
WordPress Import from YML plugin <= 3.1.17 - Cross Sit… |
icopydoc |
Import from YML |
2025-11-06T15:56:12.576Z | 2026-01-20T14:28:19.990Z |
| CVE-2025-64231 |
9.8 (3.1)
|
WordPress WordPress Contact Form 7 PDF, Google Sheet &… |
RedefiningTheWeb |
WordPress Contact Form 7 PDF, Google Sheet & Database |
2025-12-18T07:22:13.778Z | 2026-01-20T21:45:30.264Z |
| CVE-2025-64230 |
7.5 (3.1)
|
WordPress Filr plugin <= 1.2.10 - Arbitrary File Delet… |
WP Chill |
Filr |
2025-12-18T07:22:13.596Z | 2026-01-20T21:45:50.350Z |
| CVE-2025-64229 |
4.3 (3.1)
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2025-10-29T08:38:11.498Z | 2026-01-20T14:28:19.998Z |
| CVE-2025-64228 |
4.3 (3.1)
|
WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensi… |
FantasticPlugins |
SUMO Affiliates Pro |
2025-10-29T08:38:11.052Z | 2026-01-20T14:28:19.952Z |
| CVE-2025-64227 |
9.8 (3.1)
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2025-12-18T07:22:13.423Z | 2026-01-20T21:46:30.834Z |
| CVE-2025-64226 |
4.3 (3.1)
|
WordPress Stockie Extra plugin <= 1.2.11 - Cross Site … |
colabrio |
Stockie Extra |
2025-10-29T08:38:10.612Z | 2026-01-20T14:28:20.084Z |
| CVE-2025-64225 |
6.1 (3.1)
|
WordPress Stockie Extra plugin <= 1.2.11 - Content Inj… |
colabrio |
Stockie Extra |
2025-12-18T07:22:13.245Z | 2026-01-20T21:46:48.570Z |
| CVE-2025-64224 |
7.1 (3.1)
|
WordPress Grand Conference Theme Custom Post Type plug… |
ThemeGoods |
Grand Conference Theme Custom Post Type |
2025-11-06T15:56:10.204Z | 2026-01-20T14:28:20.416Z |
| CVE-2025-64223 |
8.1 (3.1)
|
WordPress PenNews theme < 6.7.3 - Local File Inclusion… |
PenciDesign |
PenNews |
2025-12-18T07:22:13.068Z | 2026-01-20T14:28:20.155Z |
| CVE-2025-64222 |
7.5 (3.1)
|
WordPress WooCommerce Recover Abandoned Cart plugin <=… |
FantasticPlugins |
WooCommerce Recover Abandoned Cart |
2025-12-18T07:22:12.885Z | 2026-01-20T14:28:20.993Z |
| CVE-2025-64221 |
7.1 (3.1)
|
WordPress Reservation Plugin plugin <= 1.6 - Cross Sit… |
designthemes |
Reservation Plugin |
2025-12-18T07:22:12.714Z | 2026-01-20T14:28:20.081Z |
| CVE-2025-64220 |
6.5 (3.1)
|
WordPress Rey Core plugin <= 3.1.8 - Cross Site Script… |
ReyCommerce |
Rey Core |
2025-10-29T08:38:10.174Z | 2026-01-20T14:28:19.951Z |
| CVE-2025-64219 |
4.3 (3.1)
|
WordPress Business Directory plugin <= 6.4.18 - Broken… |
Strategy11 Team |
Business Directory |
2025-10-29T08:38:09.728Z | 2026-01-20T14:28:19.940Z |
| CVE-2025-64218 |
7.5 (3.1)
|
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… |
WP Chill |
Passster |
2025-12-18T07:22:12.527Z | 2026-01-20T14:28:20.843Z |
| CVE-2025-64216 |
7.5 (3.1)
|
WordPress SmartMag theme <= 10.3.0 - Local File Inclus… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:09.280Z | 2026-01-20T14:28:20.060Z |
| CVE-2025-64214 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitr… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:12.176Z | 2026-01-20T14:28:20.339Z |
| CVE-2025-64213 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensit… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:11.993Z | 2026-01-20T14:28:19.977Z |
| CVE-2025-64212 |
5.4 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken… |
StylemixThemes |
MasterStudy LMS Pro |
2025-10-29T08:38:08.827Z | 2026-01-20T14:28:19.958Z |
| CVE-2025-64211 |
5.3 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:08.406Z | 2026-01-20T14:28:20.264Z |
| CVE-2025-64210 |
5.4 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:07.975Z | 2026-01-20T14:28:20.038Z |
| CVE-2025-64209 |
7.5 (3.1)
|
WordPress Masterstudy theme < 4.8.122 - Broken Access … |
StylemixThemes |
Masterstudy |
2025-12-18T07:22:11.805Z | 2026-01-20T14:28:19.877Z |
| CVE-2025-64208 |
6.5 (3.1)
|
WordPress Jannah - Extensions plugin <= 1.1.4 - Cross … |
TieLabs |
Jannah - Extensions |
2025-10-29T08:38:07.521Z | 2026-01-20T14:28:20.069Z |
| CVE-2025-64207 |
7.1 (3.1)
|
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting… |
TieLabs |
Jannah |
2025-12-18T07:22:11.630Z | 2026-01-20T14:28:20.368Z |
| CVE-2025-64206 |
9.8 (3.1)
|
WordPress Jannah theme <= 7.6.0 - PHP Object Injection… |
TieLabs |
Jannah |
2025-12-18T07:22:11.440Z | 2026-01-20T14:28:19.907Z |
| CVE-2025-64205 |
8.2 (3.1)
|
WordPress Jannah theme <= 7.6.0 - Local File Inclusion… |
TieLabs |
Jannah |
2025-12-18T07:22:11.263Z | 2026-01-20T21:48:33.454Z |
| CVE-2025-64204 |
6.5 (3.1)
|
WordPress SmartMag theme <= 10.3.1 - Cross Site Script… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:07.091Z | 2026-01-20T14:28:20.029Z |
| CVE-2025-64203 |
7.1 (3.1)
|
WordPress Mailster plugin < 4.1.14 - Cross Site Script… |
EverPress |
Mailster |
2025-12-18T07:22:11.085Z | 2026-01-21T15:31:02.170Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-64229 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices… | 2025-10-29T09:15:44.250 | 2026-01-20T15:18:46.290 |
| fkie_cve-2025-64228 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fantast… | 2025-10-29T09:15:44.077 | 2026-01-20T15:18:46.160 |
| fkie_cve-2025-64227 | Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices spr… | 2025-12-18T08:16:12.417 | 2026-01-20T15:18:46.017 |
| fkie_cve-2025-64226 | Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cros… | 2025-10-29T09:15:43.567 | 2026-01-20T15:18:45.877 |
| fkie_cve-2025-64225 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in cola… | 2025-12-18T08:16:12.287 | 2026-01-20T15:18:45.747 |
| fkie_cve-2025-64224 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:14.173 | 2026-01-20T15:18:45.613 |
| fkie_cve-2025-64223 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:16:12.160 | 2026-01-20T15:18:45.480 |
| fkie_cve-2025-64222 | Missing Authorization vulnerability in FantasticPlugins WooCommerce Recover Abandoned Cart rac allo… | 2025-12-18T08:16:12.033 | 2026-01-20T15:18:45.330 |
| fkie_cve-2025-64221 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-18T08:16:11.903 | 2026-01-20T15:18:45.197 |
| fkie_cve-2025-64220 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:15:43.393 | 2026-01-20T15:18:45.063 |
| fkie_cve-2025-64219 | Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin… | 2025-10-29T09:15:42.867 | 2026-01-20T15:18:44.927 |
| fkie_cve-2025-64218 | Insertion of Sensitive Information Into Sent Data vulnerability in WP Chill Passster content-protec… | 2025-12-18T08:16:11.780 | 2026-01-20T15:18:44.793 |
| fkie_cve-2025-64216 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:15:42.687 | 2026-01-20T15:18:44.520 |
| fkie_cve-2025-64214 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-… | 2025-12-18T08:16:11.527 | 2026-01-20T15:18:44.390 |
| fkie_cve-2025-64213 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterStudy LMS P… | 2025-12-18T08:16:11.397 | 2026-01-20T15:18:44.257 |
| fkie_cve-2025-64212 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-… | 2025-10-29T09:15:42.157 | 2026-01-20T15:18:44.127 |
| fkie_cve-2025-64211 | Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:15:42.010 | 2026-01-20T15:18:43.993 |
| fkie_cve-2025-64210 | Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:15:41.433 | 2026-01-20T15:18:43.850 |
| fkie_cve-2025-64209 | Missing Authorization vulnerability in StylemixThemes Masterstudy masterstudy allows Accessing Func… | 2025-12-18T08:16:11.273 | 2026-01-20T15:18:43.717 |
| fkie_cve-2025-64208 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:15:41.283 | 2026-01-20T15:18:43.587 |
| fkie_cve-2025-64207 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-18T08:16:11.147 | 2026-01-20T15:18:43.453 |
| fkie_cve-2025-64206 | Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.Th… | 2025-12-18T08:16:11.017 | 2026-01-20T15:18:43.323 |
| fkie_cve-2025-64205 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:16:10.883 | 2026-01-20T15:18:43.190 |
| fkie_cve-2025-64204 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:15:40.773 | 2026-01-20T15:18:43.057 |
| fkie_cve-2025-64203 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-18T08:16:10.753 | 2026-01-20T15:18:42.923 |
| fkie_cve-2025-64202 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:15:40.623 | 2026-01-20T15:18:42.790 |
| fkie_cve-2025-64201 | Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows … | 2025-10-29T09:15:40.150 | 2026-01-20T15:18:42.660 |
| fkie_cve-2025-64200 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:15:39.960 | 2026-01-20T15:18:42.523 |
| fkie_cve-2025-64199 | Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrect… | 2025-10-29T09:15:39.490 | 2026-01-20T15:18:42.393 |
| fkie_cve-2025-64198 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:13.990 | 2026-01-20T15:18:42.267 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vh3j-4vp2-x7m2 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-v92x-wwhx-42c7 |
8.8 (3.1)
|
Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-v739-2jgg-rcmx |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-rqm5-mx2c-5fhp |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-qvx9-63c8-g2m4 |
9.8 (3.1)
|
Missing Authorization vulnerability in epiphanyit321 Referral Link Tracker referral-link-tracker al… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-qgvx-wfx5-x9qg |
8.8 (3.1)
|
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly C… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-q5j8-ch67-ww7c |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-prvq-r6h5-gxw2 |
8.8 (3.1)
|
Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploitin… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-pqg3-4wch-ppw5 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-p9r4-469w-3cpx |
8.1 (3.1)
|
Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-descriptio… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-p2v3-q8r8-fhjv |
8.1 (3.1)
|
Missing Authorization vulnerability in clicksend SMS Contact Form 7 Notifications by ClickSend clic… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-m2hj-mr34-9mpp |
8.1 (3.1)
|
Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows A… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-m24f-6c22-rr63 |
6.1 (3.1)
|
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthe… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-fv67-9vrp-68qg |
9.8 (3.1)
|
Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Ex… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-fg6c-rjg4-4j6p |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-f8gm-x2c8-3fpc |
8.8 (3.1)
|
Missing Authorization vulnerability in wprio Table Block by RioVizual riovizual allows Exploiting I… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-f4ch-j254-ph76 |
8.1 (3.1)
|
Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-f2g8-m3wx-cfhq |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-crqx-56cp-p8j6 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in iseremet Reloadly reloadly-topup-widget allows S… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-cjp5-xj95-xh73 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-cj42-frrm-vcmv |
8.1 (3.1)
|
Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-9wpj-fh38-976g |
8.8 (3.1)
|
Missing Authorization vulnerability in microsoftstart MSN Partner Hub microsoft-start allows Exploi… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-9j4h-vh5x-fp8g |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Eduard Pinuaga Linares Did Prestashop Display di… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-99r8-9v34-4xvf |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Mejar WP Business Hours wp-business-hours allows… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-8mrq-qjwv-w2v9 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-82xj-vm55-pp5m |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Clifton Griffin Simple Content Templates for Blo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-79pg-9535-j68v |
8.8 (3.1)
|
Missing Authorization vulnerability in adivaha® Flights & Hotels Booking WP Plugin adiaha-hotel… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-76cq-h226-vv35 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:36Z |
| ghsa-6w3r-9v7p-w427 |
8.1 (3.1)
|
Missing Authorization vulnerability in Reoon Technology Reoon Email Verifier reoon-email-verifier a… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ghsa-6prc-hj23-w22p |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Prakash Awesome Testimonials awesome-testimonial… | 2025-10-27T03:30:38Z | 2026-01-20T15:31:36Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2014-1 |
|
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6… | django | 2014-04-23T15:55:00Z | 2021-07-05T00:01:18.476528Z |
| pysec-2012-4 |
|
The get_image_dimensions function in the image-handling functionality in Django before 1.… | django | 2012-07-31T17:55:00Z | 2021-07-05T00:01:18.369979Z |
| pysec-2012-3 |
|
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x bef… | django | 2012-07-31T17:55:00Z | 2021-07-05T00:01:18.288820Z |
| pysec-2012-2 |
|
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirec… | django | 2012-07-31T17:55:00Z | 2021-07-05T00:01:18.211806Z |
| pysec-2011-5 |
|
The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not pr… | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:18.129041Z |
| pysec-2011-4 |
|
Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct… | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:18.041571Z |
| pysec-2019-150 |
|
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection c… | bodhi | 2019-01-10T21:29:00Z | 2021-07-05T00:01:17.244288Z |
| pysec-2019-149 |
|
In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authentica… | apache-airflow | 2019-01-23T17:29:00Z | 2021-07-05T00:01:17.060541Z |
| pysec-2019-148 |
|
In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command in… | apache-airflow | 2019-01-23T17:29:00Z | 2021-07-05T00:01:17.030004Z |
| pysec-2019-147 |
|
In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on t… | apache-airflow | 2019-01-23T17:29:00Z | 2021-07-05T00:01:17.000324Z |
| pysec-2018-46 |
|
Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulner… | django-anymail | 2018-03-13T15:29:00Z | 2021-07-05T00:01:17.580240Z |
| pysec-2017-8 |
|
HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less… | cryptography | 2017-03-27T17:59:00Z | 2021-07-05T00:01:17.464237Z |
| pysec-2017-7 |
|
An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website own… | cfscrape | 2017-03-23T04:59:00Z | 2021-07-05T00:01:17.351047Z |
| pysec-2017-6 |
|
attic before 0.15 does not confirm unencrypted backups with the user, which allows remote… | attic | 2017-08-18T16:29:00Z | 2021-07-05T00:01:17.176184Z |
| pysec-2017-11 |
|
Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before… | django-cms | 2017-08-18T18:29:00Z | 2021-07-05T00:01:17.665929Z |
| pysec-2015-3 |
|
The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/c… | ceph-deploy | 2015-06-08T14:59:00Z | 2021-07-05T00:01:17.307671Z |
| pysec-2015-2 |
|
ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring,… | ceph-deploy | 2015-06-16T16:59:00Z | 2021-07-05T00:01:17.275200Z |
| pysec-2015-12 |
|
django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTING… | django-markupfield | 2015-04-24T14:59:00Z | 2021-07-05T00:01:17.695542Z |
| pysec-2012-1 |
|
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode… | beaker | 2012-09-15T17:55:00Z | 2021-07-05T00:01:17.212849Z |
| pysec-2011-3 |
|
The verify_exists functionality in the URLField implementation in Django before 1.2.7 and… | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:17.957407Z |
| pysec-2011-2 |
|
The verify_exists functionality in the URLField implementation in Django before 1.2.7 and… | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:17.875375Z |
| pysec-2011-1 |
|
django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data … | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:17.786807Z |
| pysec-2006-1 |
|
Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 … | cherrypy | 2006-02-22T02:02:00Z | 2021-07-05T00:01:17.388273Z |
| pysec-2018-45 |
|
It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS atta… | apache-airflow | 2018-08-06T13:29:00Z | 2021-07-05T00:01:16.968952Z |
| pysec-2017-5 |
|
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault be… | ansible-vault | 2017-09-14T19:29:00Z | 2021-07-05T00:01:14.915465Z |
| pysec-2021-108 |
|
An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing man… | urllib3 | 2021-06-29T11:15:00Z | 2021-07-02T18:56:20.858344Z |
| pysec-2021-107 |
|
A flaw was found in several ansible modules, where parameters containing credentials, suc… | ansible | 2021-04-01T18:15:00Z | 2021-07-02T02:41:35.257212Z |
| pysec-2021-106 |
|
A flaw was found in ansible module where credentials are disclosed in the console log by … | ansible | 2021-05-26T12:15:00Z | 2021-07-02T02:41:35.206595Z |
| pysec-2020-210 |
|
A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, … | ansible | 2020-03-16T15:15:00Z | 2021-07-02T02:41:35.152435Z |
| pysec-2020-209 |
|
A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible… | ansible | 2020-09-23T13:15:00Z | 2021-07-02T02:41:35.012028Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3378 | A vulnerability has been found in iboss Secure Web Gateway up to 10.1 and classified as p… | 2024-04-11T05:03:27.124885Z |
| gsd-2024-3377 | A vulnerability classified as problematic was found in SourceCodester Computer Laboratory… | 2024-04-11T05:03:27.339976Z |
| gsd-2024-3376 | A vulnerability classified as critical has been found in SourceCodester Computer Laborato… | 2024-04-11T05:03:27.067437Z |
| gsd-2024-3375 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.290322Z |
| gsd-2024-3374 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.054372Z |
| gsd-2024-3373 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.177974Z |
| gsd-2024-3372 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.302233Z |
| gsd-2024-3371 | MongoDB Compass may accept and use insufficiently validated input from an untrusted exter… | 2024-04-11T05:03:27.371311Z |
| gsd-2024-3370 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.325529Z |
| gsd-2024-3369 | A vulnerability, which was classified as critical, has been found in code-projects Car Re… | 2024-04-11T05:03:27.316890Z |
| gsd-2024-3368 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.131853Z |
| gsd-2024-3367 | Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p25 and <2… | 2024-04-11T05:03:27.404908Z |
| gsd-2024-3366 | A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This … | 2024-04-11T05:03:27.416780Z |
| gsd-2024-3365 | A vulnerability was found in SourceCodester Online Library System 1.0. It has been rated … | 2024-04-11T05:03:27.039816Z |
| gsd-2024-3364 | A vulnerability was found in SourceCodester Online Library System 1.0. It has been declar… | 2024-04-11T05:03:27.123181Z |
| gsd-2024-3363 | A vulnerability was found in SourceCodester Online Library System 1.0. It has been classi… | 2024-04-11T05:03:27.195993Z |
| gsd-2024-3362 | A vulnerability was found in SourceCodester Online Library System 1.0 and classified as c… | 2024-04-11T05:03:27.262432Z |
| gsd-2024-3361 | A vulnerability has been found in SourceCodester Online Library System 1.0 and classified… | 2024-04-11T05:03:27.388783Z |
| gsd-2024-3360 | A vulnerability, which was classified as critical, was found in SourceCodester Online Lib… | 2024-04-11T05:03:27.343043Z |
| gsd-2024-3359 | A vulnerability, which was classified as critical, has been found in SourceCodester Onlin… | 2024-04-11T05:03:27.069232Z |
| gsd-2024-3358 | A vulnerability classified as problematic was found in SourceCodester Aplaya Beach Resort… | 2024-04-11T05:03:27.058577Z |
| gsd-2024-3357 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.246024Z |
| gsd-2024-3356 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.237199Z |
| gsd-2024-3355 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.424056Z |
| gsd-2024-3354 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.189400Z |
| gsd-2024-3353 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.269917Z |
| gsd-2024-3352 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.324860Z |
| gsd-2024-3351 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.397506Z |
| gsd-2024-3350 | A vulnerability, which was classified as critical, has been found in SourceCodester Aplay… | 2024-04-11T05:03:27.296473Z |
| gsd-2024-3349 | A vulnerability classified as critical was found in SourceCodester Aplaya Beach Resort On… | 2024-04-11T05:03:27.112880Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-190870 | Malicious code in @mparpaillon/connector-parse (npm) | 2025-11-24T16:31:47Z | 2025-12-23T15:09:26Z |
| mal-0000-reversing-labs-133ba305d2fb8810 | 2025-12-23T08:41:15Z | 2025-12-23T08:41:15Z | |
| MAL-0000-REVERSING-LABS-133BA305D2FB8810 | 2025-12-23T08:41:15Z | 2025-12-23T08:41:15Z | |
| mal-2025-192925 | Malicious code in verificator (RubyGems) | 2025-12-23T08:41:14Z | 2025-12-23T08:41:14Z |
| mal-0000-reversing-labs-b85af07a71d65d77 | 2025-12-23T08:41:14Z | 2025-12-23T08:41:14Z | |
| MAL-2025-192925 | Malicious code in verificator (RubyGems) | 2025-12-23T08:41:14Z | 2025-12-23T08:41:14Z |
| MAL-0000-REVERSING-LABS-B85AF07A71D65D77 | 2025-12-23T08:41:14Z | 2025-12-23T08:41:14Z | |
| mal-2025-192924 | Malicious code in u2f_client (RubyGems) | 2025-12-23T08:41:13Z | 2025-12-23T08:41:13Z |
| mal-0000-reversing-labs-de3b4548370b9854 | 2025-12-23T08:41:13Z | 2025-12-23T08:41:13Z | |
| MAL-2025-192924 | Malicious code in u2f_client (RubyGems) | 2025-12-23T08:41:13Z | 2025-12-23T08:41:13Z |
| MAL-0000-REVERSING-LABS-DE3B4548370B9854 | 2025-12-23T08:41:13Z | 2025-12-23T08:41:13Z | |
| mal-2025-192923 | Malicious code in test_gem_978483406ebb19126a2e8c001649a4eb (RubyGems) | 2025-12-23T08:41:12Z | 2025-12-23T08:41:12Z |
| mal-2025-192922 | Malicious code in stripe-server (RubyGems) | 2025-12-23T08:41:12Z | 2025-12-23T08:41:12Z |
| mal-0000-reversing-labs-4771b0087ba742fe | 2025-12-23T08:41:12Z | 2025-12-23T08:41:12Z | |
| mal-0000-reversing-labs-15046b8090272468 | 2025-12-23T08:41:12Z | 2025-12-23T08:41:12Z | |
| MAL-2025-192923 | Malicious code in test_gem_978483406ebb19126a2e8c001649a4eb (RubyGems) | 2025-12-23T08:41:12Z | 2025-12-23T08:41:12Z |
| MAL-2025-192922 | Malicious code in stripe-server (RubyGems) | 2025-12-23T08:41:12Z | 2025-12-23T08:41:12Z |
| MAL-0000-REVERSING-LABS-4771B0087BA742FE | 2025-12-23T08:41:12Z | 2025-12-23T08:41:12Z | |
| MAL-0000-REVERSING-LABS-15046B8090272468 | 2025-12-23T08:41:12Z | 2025-12-23T08:41:12Z | |
| mal-2025-192921 | Malicious code in stripe-rubocop (RubyGems) | 2025-12-23T08:41:11Z | 2025-12-23T08:41:11Z |
| mal-0000-reversing-labs-35d55a00314f8c3b | 2025-12-23T08:41:11Z | 2025-12-23T08:41:11Z | |
| MAL-2025-192921 | Malicious code in stripe-rubocop (RubyGems) | 2025-12-23T08:41:11Z | 2025-12-23T08:41:11Z |
| MAL-0000-REVERSING-LABS-35D55A00314F8C3B | 2025-12-23T08:41:11Z | 2025-12-23T08:41:11Z | |
| mal-2025-192920 | Malicious code in stripe-backup (RubyGems) | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z |
| mal-2025-192919 | Malicious code in sq-samsa (RubyGems) | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z |
| mal-0000-reversing-labs-f050edc87363bb0f | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z | |
| mal-0000-reversing-labs-83e6cba910daccd5 | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z | |
| mal-0000-reversing-labs-747b2859bfd1e44a | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z | |
| MAL-2025-192920 | Malicious code in stripe-backup (RubyGems) | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z |
| MAL-2025-192919 | Malicious code in sq-samsa (RubyGems) | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0198 | IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0189 | git: Schwachstelle ermöglicht Offenlegung von Informationen | 2020-04-14T22:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0033 | GitLab: Mehrere Schwachstellen | 2025-01-08T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2024-3745 | Linux Kernel - BlueZ: Mehrere Schwachstellen | 2020-10-14T22:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2024-1894 | FRRouting Project FRRouting: Schwachstelle ermöglicht Denial of Service | 2024-08-21T22:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2024-0536 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-03-03T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2023-0953 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2023-04-12T22:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0197 | Apache Solr: Mehrere Schwachstellen | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0196 | Microsoft Edge: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0195 | Apache Wicket: Schwachstelle ermöglicht Denial of Service | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0193 | OTRS: Mehrere Schwachstellen | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0192 | Wind River VxWorks: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2024-1372 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2021-10-24T22:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2023-1250 | Linux Kernel: Mehrere Schwachstellen | 2023-05-18T22:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2022-0159 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-03-23T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0185 | Cambium Networks cnPilot und cnMaestro: Schwachstelle ermöglicht Codeausführung | 2025-01-23T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0184 | Checkmk: Schwachstelle ermöglicht Injektion von Kommandos | 2025-01-23T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0174 | SonicWall SMA: Schwachstelle ermöglicht Ausführung von Kommandos | 2025-01-22T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2024-3709 | Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-12-16T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2024-3542 | Red Hat OpenShift: Mehrere Schwachstellen | 2024-11-25T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2024-3122 | Microsoft SystemCenter: Mehrere Schwachstellen | 2024-10-08T22:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2024-1291 | cyrus imapd: Schwachstelle ermöglicht Denial of Service | 2024-06-04T22:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2022-2247 | Cacti: Schwachstelle ermöglicht Codeausführung | 2022-12-06T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2022-0389 | cyrus imapd: Schwachstelle ermöglicht Denial of Service | 2021-08-31T22:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2022-0388 | cyrus imapd: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2019-11-19T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0183 | Drupal: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0182 | Octopus Deploy: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0181 | M-Files Server: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0180 | Ubiquiti UniFi: Schwachstelle ermöglicht Umgehung von Sicherheitsmechanismen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0179 | Kibana: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhba-2024:10760 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.3 bugfix release | 2024-12-17T13:34:55+00:00 | 2026-01-21T23:17:10+00:00 |
| rhba-2024:10184 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.5 bugfix release | 2024-11-21T22:06:56+00:00 | 2026-01-21T23:17:08+00:00 |
| rhsa-2026:0742 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.13 on RHEL 7 security update | 2026-01-19T00:15:08+00:00 | 2026-01-21T23:05:26+00:00 |
| rhsa-2026:0743 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.16 security update | 2026-01-19T00:18:54+00:00 | 2026-01-21T23:05:24+00:00 |
| rhsa-2026:0293 | Red Hat Security Advisory: pki-servlet-engine security update | 2026-01-08T07:28:53+00:00 | 2026-01-21T23:05:01+00:00 |
| rhsa-2026:0292 | Red Hat Security Advisory: pki-servlet-engine security update | 2026-01-08T07:23:28+00:00 | 2026-01-21T23:04:59+00:00 |
| rhsa-2025:23417 | Red Hat Security Advisory: Streams for Apache Kafka 3.1.0 release and security update | 2025-12-16T23:13:43+00:00 | 2026-01-21T23:02:52+00:00 |
| rhsa-2025:23383 | Red Hat Security Advisory: curl security update | 2025-12-18T13:14:50+00:00 | 2026-01-21T23:02:48+00:00 |
| rhsa-2025:23225 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.25.0 Release. | 2025-12-15T21:46:21+00:00 | 2026-01-21T23:02:36+00:00 |
| rhsa-2025:23143 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14.2 for Spring Boot release. | 2025-12-11T20:15:32+00:00 | 2026-01-21T23:02:33+00:00 |
| rhsa-2025:23127 | Red Hat Security Advisory: curl security update | 2025-12-11T13:44:21+00:00 | 2026-01-21T23:02:33+00:00 |
| rhsa-2025:23126 | Red Hat Security Advisory: curl security update | 2025-12-11T13:25:51+00:00 | 2026-01-21T23:02:28+00:00 |
| rhsa-2025:23125 | Red Hat Security Advisory: curl security update | 2025-12-11T13:00:36+00:00 | 2026-01-21T23:02:27+00:00 |
| rhsa-2025:23053 | Red Hat Security Advisory: tomcat9 security update | 2025-12-10T14:39:58+00:00 | 2026-01-21T23:02:20+00:00 |
| rhsa-2025:23052 | Red Hat Security Advisory: tomcat9 security update | 2025-12-10T14:44:53+00:00 | 2026-01-21T23:02:20+00:00 |
| rhsa-2025:23051 | Red Hat Security Advisory: tomcat security update | 2025-12-10T14:38:53+00:00 | 2026-01-21T23:02:18+00:00 |
| rhsa-2025:23050 | Red Hat Security Advisory: tomcat security update | 2025-12-10T14:45:33+00:00 | 2026-01-21T23:02:17+00:00 |
| rhsa-2025:23049 | Red Hat Security Advisory: tomcat security update | 2025-12-10T15:15:23+00:00 | 2026-01-21T23:02:14+00:00 |
| rhsa-2025:23048 | Red Hat Security Advisory: tomcat security update | 2025-12-10T17:45:03+00:00 | 2026-01-21T23:02:14+00:00 |
| rhsa-2025:23047 | Red Hat Security Advisory: tomcat security update | 2025-12-10T15:12:13+00:00 | 2026-01-21T23:02:13+00:00 |
| rhsa-2025:23046 | Red Hat Security Advisory: tomcat security update | 2025-12-10T14:55:18+00:00 | 2026-01-21T23:02:12+00:00 |
| rhsa-2025:23045 | Red Hat Security Advisory: tomcat security update | 2025-12-10T14:52:08+00:00 | 2026-01-21T23:02:11+00:00 |
| rhsa-2025:23044 | Red Hat Security Advisory: tomcat security update | 2025-12-10T17:07:38+00:00 | 2026-01-21T23:02:09+00:00 |
| rhsa-2025:23043 | Red Hat Security Advisory: curl security update | 2025-12-10T16:27:23+00:00 | 2026-01-21T23:02:09+00:00 |
| rhsa-2025:22925 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update | 2025-12-09T15:25:26+00:00 | 2026-01-21T23:01:59+00:00 |
| rhsa-2025:22924 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update | 2025-12-09T15:22:27+00:00 | 2026-01-21T23:01:57+00:00 |
| rhsa-2025:22861 | Red Hat Security Advisory: Red Hat Developer Hub 1.8.1 release. | 2025-12-08T15:17:40+00:00 | 2026-01-21T23:01:57+00:00 |
| rhsa-2025:22784 | Red Hat Security Advisory: Submariner v0.22 security fixes and container updates | 2025-12-04T22:51:38+00:00 | 2026-01-21T23:01:53+00:00 |
| rhsa-2025:22765 | Red Hat Security Advisory: HawtIO 4.3.0 for Red Hat build of Apache Camel 4 Release and security update. | 2025-12-04T15:07:27+00:00 | 2026-01-21T23:01:53+00:00 |
| rhsa-2025:21892 | Red Hat Security Advisory: Submariner v0.21 security fixes and container updates | 2025-11-20T21:12:16+00:00 | 2026-01-21T23:01:36+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsma-20-343-01 | GE Healthcare Imaging and Ultrasound Products | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-10 | Siemens LOGO! 8 BM | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-09 | Siemens SIMATIC Controller Web Servers | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-07 | Siemens SICAM A8000 RTUs | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-06 | Siemens XHQ Operations Intelligence | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-04 | Schneider Electric Modicon M221 Programmable Logic Controller | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-03 | Schneider Electric Easergy T300 | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-01 | Multiple Embedded TCP/IP Stacks | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-252-02 | Siemens SIMATIC S7-300 and S7-400 CPUs (Update C) | 2020-09-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-224-05 | Siemens SIMATIC, SIMOTICS (Update A) | 2020-08-11T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-161-03 | Siemens LOGO! (Update A) | 2020-06-09T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-19-134-04 | Siemens LOGO! 8 BM (Update A) | 2019-05-14T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-19-134-03 | Siemens LOGO! Soft Comfort (Update A) | 2019-05-14T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-18-165-01 | Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D) | 2018-06-14T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-17-243-02 | Siemens LOGO! (Update A) | 2017-08-31T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-338-01 | National Instruments CompactRIO | 2020-12-03T00:00:00.000000Z | 2020-12-03T00:00:00.000000Z |
| icsa-20-238-03 | WECON LeviStudioU (Update C) | 2020-08-25T00:00:00.000000Z | 2020-12-03T00:00:00.000000Z |
| icsa-20-336-01 | Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD) | 2020-12-01T00:00:00.000000Z | 2020-12-01T00:00:00.000000Z |
| icsa-20-329-02 | Fuji Electric V-Server Lite | 2020-11-24T00:00:00.000000Z | 2020-11-24T00:00:00.000000Z |
| icsa-20-329-01 | Rockwell Automation FactoryTalk Linx | 2020-11-24T00:00:00.000000Z | 2020-11-24T00:00:00.000000Z |
| icsa-20-324-04 | Schneider Electric Interactive Graphical SCADA System (IGSS) | 2020-11-17T00:00:00.000000Z | 2020-11-17T00:00:00.000000Z |
| icsa-20-324-03 | Real Time Automation EtherNet/IP | 2020-11-17T00:00:00.000000Z | 2020-11-17T00:00:00.000000Z |
| icsa-20-324-01 | Johnson Controls Sensormatic Electronics American Dynamics victor Web Client | 2020-11-17T00:00:00.000000Z | 2020-11-17T00:00:00.000000Z |
| icsma-20-317-01 | BD Alaris 8015 PC Unit and BD Alaris Systems Manager | 2020-11-12T00:00:00.000000Z | 2020-11-12T00:00:00.000000Z |
| icsa-20-317-01 | Mitsubishi Electric MELSEC iQ-R Series | 2020-11-12T00:00:00.000000Z | 2020-11-12T00:00:00.000000Z |
| icsa-20-315-05 | Siemens SCALANCE W 1750D | 2020-11-10T00:00:00.000000Z | 2020-11-10T00:00:00.000000Z |
| icsa-20-315-03 | Schneider Electric PLC Simulator for EcoStruxure Control Expert | 2020-11-10T00:00:00.000000Z | 2020-11-10T00:00:00.000000Z |
| icsa-20-315-02 | OSIsoft PI Vision | 2020-11-10T00:00:00.000000Z | 2020-11-10T00:00:00.000000Z |
| icsa-20-315-01 | ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA | 2020-11-10T00:00:00.000000Z | 2020-11-10T00:00:00.000000Z |
| icsa-20-310-02 | Mitsubishi Electric GT14 Model of GOT1000 Series | 2020-11-05T00:00:00.000000Z | 2020-11-05T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-webex-token-zpvejkn | Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-webex-token-zPvEjKN | Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-webex-client-mac-x7vp65bl | Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-webex-client-mac-X7vp65BL | Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-umbrella-open-redire-ugk9dwk4 | Cisco Umbrella Open Redirect Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-umbrella-open-redire-UgK9dWK4 | Cisco Umbrella Open Redirect Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-ucsd-task-path-trav-d67zuak7 | Cisco UCS Director Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-ucsd-task-path-trav-d67ZuAk7 | Cisco UCS Director Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-ucsd-info-disclosure-gsmu8ekt | Cisco UCS Director Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-ucsd-info-disclosure-gSMU8EKT | Cisco UCS Director Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-tp-cmd-inj-7zpwhvzb | Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-tp-cmd-inj-7ZpWhvZb | Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-stack-vuxhmnnz | Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-stack-vUxHmnNz | Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-injection-twc7krkq | Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-injection-tWC7krKQ | Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-on-prem-access-ctrl-fpqrfdpf | Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-on-prem-access-ctrl-fpQRfdpf | Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nso-info-disclosure-wdnvbtnq | Cisco Network Services Orchestrator Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nso-info-disclosure-WdNvBTNq | Cisco Network Services Orchestrator Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nfvis-ptrav-shmzzwvr | Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nfvis-ptrav-SHMzzwVR | Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-famp-zepdxy | Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-famp-ZEpdXy | Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-wo4bz75s | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-WO4BZ75s | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-yjyqbjgu | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-yJyqBJGU | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-vye4bnah | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-euygpqxm | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-8734 | GNU Bison scan-code.c code_free double free | 2025-08-02T00:00:00.000Z | 2025-09-03T22:23:02.000Z |
| msrc_cve-2025-3010 | Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference | 2025-03-02T00:00:00.000Z | 2025-09-03T22:23:00.000Z |
| msrc_cve-2024-40969 | f2fs: don't set RO when shutting down f2fs | 2024-07-01T07:00:00.000Z | 2025-09-03T22:22:53.000Z |
| msrc_cve-2024-35867 | smb: client: fix potential UAF in cifs_stats_proc_show() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:22:53.000Z |
| msrc_cve-2018-1999024 | MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability | 2018-07-02T00:00:00.000Z | 2025-09-03T22:22:20.000Z |
| msrc_cve-2020-15254 | Undefined Behavior in bounded Crossbeam channel | 2020-10-02T00:00:00.000Z | 2025-09-03T22:22:18.000Z |
| msrc_cve-2024-40979 | wifi: ath12k: fix kernel crash during resume | 2024-07-01T07:00:00.000Z | 2025-09-03T22:21:56.000Z |
| msrc_cve-2024-49891 | scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths | 2024-10-01T07:00:00.000Z | 2025-09-03T22:21:45.000Z |
| msrc_cve-2024-57075 | A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. | 2025-02-02T00:00:00.000Z | 2025-09-03T22:21:42.000Z |
| msrc_cve-2025-38618 | vsock: Do not allow binding to VMADDR_PORT_ANY | 2025-08-02T00:00:00.000Z | 2025-09-03T22:21:41.000Z |
| msrc_cve-2022-33967 | squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution. | 2022-07-02T00:00:00.000Z | 2025-09-03T22:21:10.000Z |
| msrc_cve-2025-8733 | GNU Bison obprintf.c __obstack_vprintf_internal assertion | 2025-08-02T00:00:00.000Z | 2025-09-03T22:20:27.000Z |
| msrc_cve-2024-40973 | media: mtk-vcodec: potential null pointer deference in SCP | 2024-07-01T07:00:00.000Z | 2025-09-03T22:20:26.000Z |
| msrc_cve-2024-35868 | smb: client: fix potential UAF in cifs_stats_proc_write() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:20:06.000Z |
| msrc_cve-2024-26853 | igc: avoid returning frame twice in XDP_REDIRECT | 2024-04-02T07:00:00.000Z | 2025-09-03T22:19:52.000Z |
| msrc_cve-2025-38671 | i2c: qup: jump out of the loop in case of timeout | 2025-08-02T00:00:00.000Z | 2025-09-03T22:19:35.000Z |
| msrc_cve-2024-43846 | lib: objagg: Fix general protection fault | 2024-08-02T00:00:00.000Z | 2025-09-03T22:18:52.000Z |
| msrc_cve-2023-52979 | squashfs: harden sanity check in squashfs_read_xattr_id_table | 2025-03-02T00:00:00.000Z | 2025-09-03T22:18:39.000Z |
| msrc_cve-2025-47907 | Incorrect results returned from Rows.Scan in database/sql | 2025-08-02T00:00:00.000Z | 2025-09-03T22:18:29.000Z |
| msrc_cve-2024-6604 | Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2025-09-03T22:18:21.000Z |
| msrc_cve-2024-35929 | rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:17:39.000Z |
| msrc_cve-2025-27810 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays. | 2025-03-02T00:00:00.000Z | 2025-09-03T22:17:37.000Z |
| msrc_cve-2023-52589 | media: rkisp1: Fix IRQ disable race issue | 2024-03-02T08:00:00.000Z | 2025-09-03T22:17:34.000Z |
| msrc_cve-2022-49123 | ath11k: Fix frames flush failure caused by deadlock | 2025-02-02T00:00:00.000Z | 2025-09-03T22:16:58.000Z |
| msrc_cve-2025-38665 | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | 2025-08-02T00:00:00.000Z | 2025-09-03T22:16:52.000Z |
| msrc_cve-2019-6290 | An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '{' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file. | 2019-01-02T00:00:00.000Z | 2025-09-03T22:16:25.000Z |
| msrc_cve-2024-26841 | LoongArch: Update cpu_sibling_map when disabling nonboot CPUs | 2024-04-02T07:00:00.000Z | 2025-09-03T22:16:15.000Z |
| msrc_cve-2023-52590 | ocfs2: Avoid touching renamed directory if parent does not change | 2024-03-02T08:00:00.000Z | 2025-09-03T22:15:16.000Z |
| msrc_cve-2023-52812 | drm/amd: check num of link levels when update pcie param | 2024-05-02T07:00:00.000Z | 2025-09-03T22:14:59.000Z |
| msrc_cve-2011-3048 | The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow. | 2012-05-02T00:00:00.000Z | 2025-09-03T22:14:56.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201903-1269 | An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensiti… | 2024-02-20T02:20:23.008000Z |
| var-201708-0889 | Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS … | 2024-02-20T02:13:05.846000Z |
| var-202001-0382 | D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrar… | 2024-02-20T02:07:33.655000Z |
| var-202203-0142 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15… | 2024-02-20T01:13:41.562000Z |
| var-202008-1215 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between seriali… | 2024-02-20T01:12:46.882000Z |
| var-200609-1118 | OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key… | 2024-02-20T00:26:20.655000Z |
| var-202107-1585 | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be craf… | 2024-02-20T00:22:37.524000Z |
| var-202101-1933 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between seriali… | 2024-02-19T23:19:28.257000Z |
| var-202009-1633 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between seriali… | 2024-02-19T22:54:37.042000Z |
| var-202309-0579 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visua… | 2024-02-17T22:35:48.739000Z |
| var-202309-0576 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visua… | 2024-02-17T22:35:48.758000Z |
| var-202309-0574 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visua… | 2024-02-17T22:35:48.694000Z |
| var-202204-1722 | A vulnerability in the VPN web client services component of Cisco Adaptive Security Appli… | 2024-02-17T22:29:38.170000Z |
| var-202107-1611 | Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supp… | 2024-02-17T21:15:00.385000Z |
| var-202402-1506 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to ins… | 2024-02-16T22:51:30.771000Z |
| var-202402-0244 | In Modem NL1, there is a possible system crash due to an improper input validation. This … | 2024-02-16T22:51:30.990000Z |
| var-202310-2079 | Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK… | 2024-02-16T22:46:04.083000Z |
| var-202210-1176 | D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via t… | 2024-02-16T22:39:18.597000Z |
| var-202201-1251 | graphql-go is a GraphQL server with a focus on ease of use. In versions prior to 1.3.0 th… | 2024-02-16T22:38:44.331000Z |
| var-202206-1272 | Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write… | 2024-02-16T22:38:43.560000Z |
| var-202402-0736 | Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allow… | 2024-02-16T22:38:38.474000Z |
| var-202402-1514 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some inst… | 2024-02-16T22:33:21.305000Z |
| var-202402-1475 | Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to versi… | 2024-02-15T23:17:49.723000Z |
| var-202402-1457 | Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 … | 2024-02-15T23:15:43.867000Z |
| var-202401-1568 | MinIO is a High Performance Object Storage. When someone creates an access key, it inheri… | 2024-02-15T23:13:44.206000Z |
| var-202311-0148 | Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Ele… | 2024-02-15T23:01:41.621000Z |
| var-200212-0510 | D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP ser… | 2024-02-15T23:01:07.925000Z |
| var-202212-0950 | OS command injection vulnerability in Buffalo network devices allows a network-adjacent a… | 2024-02-15T22:56:53.081000Z |
| var-202212-0949 | OS command injection vulnerability in Buffalo network devices allows an network-adjacent … | 2024-02-15T22:56:53.105000Z |
| var-202212-0948 | Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent a… | 2024-02-15T22:56:53.056000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000052 | Webservice-DIC shop_v50 and shop_v52 vulnerable to cross-site scripting | 2008-09-08T17:01+09:00 | 2008-09-08T17:01+09:00 |
| jvndb-2008-001585 | Hitachi JP1/File Transmission Server/FTP Unauthorized File Permission Change Vulnerability | 2008-09-05T12:24+09:00 | 2008-09-05T12:24+09:00 |
| jvndb-2008-001584 | Hitachi JP1/File Transmission Server/FTP Transmission Failure Problem | 2008-09-05T12:23+09:00 | 2008-09-05T12:23+09:00 |
| jvndb-2008-001575 | Fujitsu Interstage Application Server Single Sign-On Buffer Overflow Vulnerability | 2008-09-03T12:33+09:00 | 2008-09-03T12:33+09:00 |
| jvndb-2008-000055 | Blogn vulnerable to cross-site scripting | 2008-09-02T17:22+09:00 | 2008-09-02T17:22+09:00 |
| jvndb-2008-000054 | Blogn vulnerable to cross-site request forgery | 2008-09-02T17:22+09:00 | 2008-09-02T17:22+09:00 |
| jvndb-2008-000053 | mysql-lists from AquaGardenSoft Co.,Ltd. vulnerable to cross-site scripting | 2008-09-02T17:05+09:00 | 2008-09-02T17:05+09:00 |
| jvndb-2008-000049 | Vulnerability in La!cooda WIZ and LacoodaST allowing an arbitrary PHP script execution | 2008-09-02T17:03+09:00 | 2008-09-02T17:03+09:00 |
| jvndb-2008-000048 | La!cooda WIZ and LacoodaST vulnerable to cross-site scripting | 2008-09-02T17:02+09:00 | 2008-09-02T17:02+09:00 |
| jvndb-2008-000047 | LacoodaST from SpaceTag, Inc. session fixation vulnerability | 2008-09-02T17:01+09:00 | 2008-09-02T17:01+09:00 |
| jvndb-2008-000046 | La!cooda WIZ and LacoodaST vulnerable to cross-site request forgery | 2008-09-02T16:58+09:00 | 2008-09-02T16:58+09:00 |
| jvndb-2008-000050 | Virus Security and Virus Security ZERO denial of service (DoS) vulnerability | 2008-08-14T18:15+09:00 | 2008-08-14T18:15+09:00 |
| jvndb-2008-000037 | Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting | 2008-08-04T14:34+09:00 | 2008-08-04T14:34+09:00 |
| jvndb-2008-001514 | Cross-Site Scripting Vulnerability in Hitachi Collaboration - Online Community Management | 2008-07-30T13:46+09:00 | 2008-07-30T13:46+09:00 |
| jvndb-2008-000045 | Geeklog Forum Plugin vulnerable to cross-site scripting | 2008-07-29T14:57+09:00 | 2008-07-29T14:57+09:00 |
| jvndb-2008-000044 | K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting | 2008-07-29T14:56+09:00 | 2008-07-29T14:56+09:00 |
| jvndb-2008-000043 | K's CGI Access Log Kaiseki (jcode.pl) vulnerable to cross-site scripting | 2008-07-29T14:56+09:00 | 2008-07-29T14:56+09:00 |
| jvndb-2008-000021 | Mozilla Firefox cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-29T14:54+09:00 |
| jvndb-2008-000042 | Multiple Century Systems routers vulnerable to cross-site request forgery | 2008-07-24T14:23+09:00 | 2008-07-24T14:23+09:00 |
| jvndb-2008-000041 | WebProxy from LunarNight Laboratory vulnerable to cross-site scripting | 2008-07-24T14:23+09:00 | 2008-07-24T14:23+09:00 |
| jvndb-2008-000040 | Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins | 2008-07-24T14:22+09:00 | 2008-07-24T14:22+09:00 |
| jvndb-2008-000039 | Safari installed in iPod touch and iPhone vulnerable in handling server certificates | 2008-07-16T12:27+09:00 | 2008-07-16T12:27+09:00 |
| jvndb-2007-000457 | Apache Tomcat cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-11T13:48+09:00 |
| jvndb-2007-000456 | Apache Tomcat sample web application cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-11T13:48+09:00 |
| jvndb-2007-000297 | Apache Tomcat Accept-Language Header Cross-Site Scripting Vulnerability | 2008-05-21T00:00+09:00 | 2008-07-11T13:47+09:00 |
| jvndb-2008-000038 | Redmine vulnerable to cross-site scripting | 2008-07-08T12:15+09:00 | 2008-07-08T12:15+09:00 |
| jvndb-2008-000036 | FreeStyleWiki cross-site scripting vulnerability | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000035 | Cybozu Garoon vulnerable to arbitrary script execution | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000034 | Cybozu Garoon session fixation vulnerability | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000033 | Multiple Cybozu products vulnerable to cross-site request forgery | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0869-1 | Security update for python | 2025-03-14T10:42:34Z | 2025-03-14T10:42:34Z |
| suse-su-2025:0868-1 | Security update for python3 | 2025-03-14T10:42:25Z | 2025-03-14T10:42:25Z |
| suse-su-2025:0867-1 | Security update for the Linux Kernel | 2025-03-14T09:55:18Z | 2025-03-14T09:55:18Z |
| suse-su-2025:0866-1 | Security update for amazon-ssm-agent | 2025-03-14T09:32:08Z | 2025-03-14T09:32:08Z |
| suse-su-2025:0862-1 | Security update for ffmpeg-4 | 2025-03-14T08:45:30Z | 2025-03-14T08:45:30Z |
| suse-su-2025:0861-1 | Security update for python | 2025-03-14T08:45:13Z | 2025-03-14T08:45:13Z |
| suse-su-2025:0858-1 | Security update for rubygem-rack-1_6 | 2025-03-13T17:58:49Z | 2025-03-13T17:58:49Z |
| suse-su-2025:0857-1 | Security update for build | 2025-03-13T17:58:06Z | 2025-03-13T17:58:06Z |
| suse-su-2025:0856-1 | Security update for the Linux Kernel | 2025-03-13T15:46:38Z | 2025-03-13T15:46:38Z |
| suse-su-2025:0855-1 | Security update for the Linux Kernel | 2025-03-13T12:44:03Z | 2025-03-13T12:44:03Z |
| suse-su-2025:0853-1 | Security update for the Linux Kernel | 2025-03-13T10:40:02Z | 2025-03-13T10:40:02Z |
| suse-su-2025:20239-1 | Security update for curl | 2025-03-13T10:36:20Z | 2025-03-13T10:36:20Z |
| suse-su-2025:0852-1 | Security update for google-osconfig-agent | 2025-03-13T10:29:33Z | 2025-03-13T10:29:33Z |
| suse-su-2025:0849-1 | Security update for MozillaThunderbird | 2025-03-12T15:12:43Z | 2025-03-12T15:12:43Z |
| suse-su-2025:0847-1 | Security update for the Linux Kernel | 2025-03-12T13:00:02Z | 2025-03-12T13:00:02Z |
| suse-su-2025:20144-1 | Security update for curl | 2025-03-12T10:47:54Z | 2025-03-12T10:47:54Z |
| suse-su-2025:20143-1 | Security update for podman | 2025-03-12T10:31:01Z | 2025-03-12T10:31:01Z |
| suse-su-2025:0845-1 | Security update for iniparser | 2025-03-12T09:33:00Z | 2025-03-12T09:33:00Z |
| suse-su-2025:0833-2 | Security update for the Linux Kernel | 2025-03-11T15:28:58Z | 2025-03-11T15:28:58Z |
| suse-su-2025:0833-1 | Security update for the Linux Kernel | 2025-03-11T15:28:58Z | 2025-03-11T15:28:58Z |
| suse-su-2025:0577-2 | Security update for the Linux Kernel | 2025-03-11T15:28:06Z | 2025-03-11T15:28:06Z |
| suse-su-2025:0577-1 | Security update for the Linux Kernel | 2025-03-11T15:28:06Z | 2025-03-11T15:28:06Z |
| suse-su-2025:0201-2 | Security update for the Linux Kernel | 2025-03-11T13:41:34Z | 2025-03-11T13:41:34Z |
| suse-su-2025:0201-1 | Security update for the Linux Kernel | 2025-03-11T13:41:34Z | 2025-03-11T13:41:34Z |
| suse-su-2025:0835-1 | Security update for the Linux Kernel | 2025-03-11T10:58:19Z | 2025-03-11T10:58:19Z |
| suse-su-2025:0834-1 | Security update for the Linux Kernel | 2025-03-11T10:55:11Z | 2025-03-11T10:55:11Z |
| suse-su-2025:0822-1 | Security update for krb5 | 2025-03-10T15:33:40Z | 2025-03-10T15:33:40Z |
| suse-su-2025:0821-1 | Security update for iniparser | 2025-03-10T15:03:19Z | 2025-03-10T15:03:19Z |
| suse-su-2025:0818-1 | Security update for libxkbfile | 2025-03-10T13:59:44Z | 2025-03-10T13:59:44Z |
| suse-su-2025:0817-1 | Security update for u-boot | 2025-03-10T13:59:32Z | 2025-03-10T13:59:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13279-1 | mutt-2.2.12-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13278-1 | libnbd-1.18.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13277-1 | MozillaThunderbird-115.3.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13276-1 | ungoogled-chromium-117.0.5938.132-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13275-1 | libopenssl-3-devel-3.1.3-1.2 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13274-1 | libvpx-devel-1.13.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13273-1 | glibc-2.38-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13272-1 | MozillaFirefox-118.0.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13271-1 | libmozjs-115-0-115.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13270-1 | matrix-synapse-1.93.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13269-1 | chromedriver-117.0.5938.132-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13268-1 | MozillaThunderbird-115.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13267-1 | php8-8.2.10-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13266-1 | libmozjs-102-0-102.15.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13265-1 | element-desktop-1.11.43-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13264-1 | dlt-daemon-2.18.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13263-1 | ImageMagick-7.1.1.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13262-1 | cargo1.72-1.72.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13261-1 | python311-3.11.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13260-1 | python310-jupyter-server-2.7.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13259-1 | apache-commons-configuration2-2.9.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13258-1 | nodejs-electron-25.8.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13257-1 | xen-4.17.2_04-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13256-1 | tomcat-9.0.80-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13255-1 | seamonkey-2.53.17.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13254-1 | python-gevent-doc-23.9.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13253-1 | python-2.7.18-39.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13252-1 | libraw-devel-0.21.1-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13251-1 | gnome-extensions-45.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13250-1 | cups-2.4.2-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23238 | Student Result Management System /srms/change-password.php组件会话劫持漏洞 | 2025-08-01 | 2025-10-10 |
| cnvd-2025-23237 | Student Result Management System /elms/emp-changepassword.php组件会话劫持漏洞 | 2025-08-01 | 2025-10-10 |
| cnvd-2025-23236 | User Management System emailid参数SQL注入漏洞 | 2025-08-26 | 2025-10-10 |
| cnvd-2025-23235 | User Management System admin/change-emailid.php文件SQL注入漏洞 | 2025-09-04 | 2025-10-10 |
| cnvd-2025-23234 | Online Library Management System adminlogin.php组件权限提升漏洞 | 2025-09-18 | 2025-10-10 |
| cnvd-2025-23233 | Student Result Management System Using PHP跨站请求伪造漏洞 | 2025-09-18 | 2025-10-10 |
| cnvd-2025-23232 | Online Library Management System权限提升漏洞 | 2025-09-18 | 2025-10-10 |
| cnvd-2025-23231 | User Management System login.php文件SQL注入漏洞 | 2025-09-19 | 2025-10-10 |
| cnvd-2025-23230 | Online Discussion Forum search_result.php文件SQL注入漏洞 | 2025-09-19 | 2025-10-10 |
| cnvd-2025-23229 | Online Discussion Forum edit_member.php文件SQL注入漏洞 | 2025-09-19 | 2025-10-10 |
| cnvd-2025-23228 | Online Course Registration my-profile.php文件SQL注入漏洞 | 2025-09-23 | 2025-10-10 |
| cnvd-2025-23227 | Park Ticketing Management System /index.php文件SQL注入漏洞 | 2024-12-20 | 2025-10-09 |
| cnvd-2025-23226 | Park Ticketing Management System foreigner-search.php文件HTML注入漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23225 | Park Ticketing Management System edit-ticket.php文件SQL注入漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23224 | Park Ticketing Management System normal-bwdates-reports-details.php文件HTML注入漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23223 | Park Ticketing Management System normal-bwdates-reports-details.php文件SQL注入漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23222 | Park Ticketing Management System add-foreigners-ticket.php文件SQL注入漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23221 | Park Ticketing Management System foreigner-bwdates-reports-details.php文件SQL注入漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23220 | Park Ticketing Management System HTML注入漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23219 | Park Ticketing Management System foreigner-bwdates-reports-details.php文件跨站脚本漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23218 | Park Ticketing Management System /profile.php文件SQL注入漏洞 | 2025-05-13 | 2025-10-09 |
| cnvd-2025-23217 | Park Ticketing Management System /view-normal-ticket.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-09 |
| cnvd-2025-23216 | Park Ticketing Management System /view-foreigner-ticket.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-09 |
| cnvd-2025-23159 | Park Ticketing Management System /normal-search.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-09 |
| cnvd-2025-23158 | Park Ticketing Management System /forgot-password.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-09 |
| cnvd-2025-23157 | Park Ticketing Management System /foreigner-search.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-09 |
| cnvd-2025-23156 | Park Ticketing Management System /add-normal-ticket.php文件SQL注入漏洞 | 2025-05-22 | 2025-10-09 |
| cnvd-2025-23155 | Park Ticketing Management System normal-bwdates-reports-details.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-09 |
| cnvd-2025-23154 | Small CRM Request a Quote字段跨站脚本漏洞 | 2023-10-24 | 2025-10-09 |
| cnvd-2025-23153 | Small CRM Users login面板SQL注入漏洞 | 2024-01-05 | 2025-10-09 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0914 | Vulnérabilité dans les produits Spring | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| CERTFR-2024-AVI-0913 | Multiples vulnérabilités dans Google Chrome | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| CERTFR-2024-AVI-0912 | Multiples vulnérabilités dans Liferay | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| certfr-2024-avi-0911 | Vulnérabilité dans les produits Moxa | 2024-10-22T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0910 | Vulnérabilité dans MongoDB | 2024-10-22T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0909 | Multiples vulnérabilités dans les produits Synology | 2024-10-21T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0792 | Multiples vulnérabilités dans VMware vCenter Server | 2024-09-18T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0426 | Multiples vulnérabilités dans Roundcube | 2024-05-21T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| CERTFR-2024-AVI-0911 | Vulnérabilité dans les produits Moxa | 2024-10-22T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| CERTFR-2024-AVI-0910 | Vulnérabilité dans MongoDB | 2024-10-22T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| CERTFR-2024-AVI-0909 | Multiples vulnérabilités dans les produits Synology | 2024-10-21T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| CERTFR-2024-AVI-0792 | Multiples vulnérabilités dans VMware vCenter Server | 2024-09-18T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| CERTFR-2024-AVI-0426 | Multiples vulnérabilités dans Roundcube | 2024-05-21T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0908 | Vulnérabilité dans Microsoft Edge | 2024-10-21T00:00:00.000000 | 2024-10-21T00:00:00.000000 |
| certfr-2024-avi-0899 | Vulnérabilité dans Grafana | 2024-10-18T00:00:00.000000 | 2024-10-21T00:00:00.000000 |
| certfr-2024-avi-0893 | Multiples vulnérabilités dans les produits F5 | 2024-10-17T00:00:00.000000 | 2024-10-21T00:00:00.000000 |
| CERTFR-2024-AVI-0908 | Vulnérabilité dans Microsoft Edge | 2024-10-21T00:00:00.000000 | 2024-10-21T00:00:00.000000 |
| CERTFR-2024-AVI-0899 | Vulnérabilité dans Grafana | 2024-10-18T00:00:00.000000 | 2024-10-21T00:00:00.000000 |
| CERTFR-2024-AVI-0893 | Multiples vulnérabilités dans les produits F5 | 2024-10-17T00:00:00.000000 | 2024-10-21T00:00:00.000000 |
| certfr-2024-avi-0907 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0906 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0905 | Multiples vulnérabilités dans les produits Moxa | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0904 | Multiples vulnérabilités dans Foxit PDF Editor | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0903 | Multiples vulnérabilités dans les produits IBM | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0902 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0901 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0900 | Multiples vulnérabilités dans Spring Framework | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0895 | Vulnérabilité dans OpenSSL | 2024-10-17T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0907 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0906 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |