Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62071 |
4.3 (3.1)
|
WordPress Social proof testimonials and reviews by Rep… |
Repuso |
Social proof testimonials and reviews by Repuso |
2025-10-22T14:32:54.166Z | 2026-01-20T14:28:14.253Z |
| CVE-2025-62067 |
8.1 (3.1)
|
WordPress Savory theme <= 2.5 - Local File Inclusion v… |
Elated-Themes |
Savory |
2025-11-06T15:55:55.213Z | 2026-01-20T14:28:14.287Z |
| CVE-2025-62061 |
4.3 (3.1)
|
WordPress Product Catalog Simple plugin <= 1.8.4 - Cro… |
impleCode |
Product Catalog Simple |
2025-10-22T14:32:52.854Z | 2026-01-20T14:28:14.011Z |
| CVE-2025-62052 |
4.3 (3.1)
|
WordPress One Page Express Companion plugin <= 1.6.43 … |
Horea Radu |
One Page Express Companion |
2025-10-22T14:32:51.853Z | 2026-01-20T14:28:14.063Z |
| CVE-2025-62049 |
6.5 (3.1)
|
WordPress Cost Calculator Builder plugin <= 3.5.32 - B… |
Stylemix |
Cost Calculator Builder |
2025-11-06T15:55:44.281Z | 2026-01-20T14:28:14.242Z |
| CVE-2025-62048 |
5.4 (3.1)
|
WordPress SmartCrawl plugin <= 3.14.3 - Broken Access … |
WPMU DEV - Your All-in-One WordPress Platform |
SmartCrawl |
2025-10-22T14:32:51.617Z | 2026-01-20T14:28:14.203Z |
| CVE-2025-62044 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:39.461Z | 2026-01-20T14:28:14.135Z |
| CVE-2025-62081 |
5.3 (3.1)
|
WordPress Live Shopping & Shoppable Videos For WooComm… |
Channelize.io Team |
Live Shopping & Shoppable Videos For WooCommerce |
2025-12-31T15:00:18.960Z | 2026-01-20T14:28:13.605Z |
| CVE-2025-62079 |
5.3 (3.1)
|
WordPress WP Export Categories & Taxonomies plugin <= … |
Damian |
WP Export Categories & Taxonomies |
2025-12-31T15:37:27.530Z | 2026-01-20T14:28:13.888Z |
| CVE-2025-62078 |
4.3 (3.1)
|
WordPress Easy Upload Files During Checkout plugin <= … |
Fahad Mahmood |
Easy Upload Files During Checkout |
2025-12-31T16:32:00.958Z | 2026-01-20T14:28:13.715Z |
| CVE-2025-62076 |
7.1 (3.1)
|
WordPress Simple Payment plugin <= 2.4.6 - Cross Site … |
Ido Kobelkowsky |
Simple Payment |
2025-11-06T15:55:59.012Z | 2026-01-20T14:28:13.561Z |
| CVE-2025-62075 |
7.3 (3.1)
|
WordPress Simple Payment plugin <= 2.4.6 - Local File … |
Ido Kobelkowsky |
Simple Payment |
2025-11-06T15:55:57.636Z | 2026-01-20T14:28:13.948Z |
| CVE-2025-62074 |
7.1 (3.1)
|
WordPress WPMobile.App plugin <= 11.71 - Cross Site Sc… |
Amauri |
WPMobile.App |
2025-11-06T15:55:56.024Z | 2026-01-20T14:28:13.659Z |
| CVE-2025-62072 |
4.3 (3.1)
|
WordPress Front End Users plugin <= 3.2.33 - Broken Ac… |
Rustaurius |
Front End Users |
2025-10-22T14:32:54.422Z | 2026-01-20T14:28:13.965Z |
| CVE-2025-62070 |
4.3 (3.1)
|
WordPress WowRevenue plugin <= 1.2.13 - Broken Access … |
WPXPO |
WowRevenue |
2025-10-22T14:32:53.947Z | 2026-01-20T14:28:13.568Z |
| CVE-2025-62069 |
6.5 (3.1)
|
WordPress MDTF plugin <= 1.3.3.8 - Cross Site Scriptin… |
RealMag777 |
MDTF |
2025-10-22T14:32:53.749Z | 2026-01-20T14:28:13.746Z |
| CVE-2025-62068 |
6.5 (3.1)
|
WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripti… |
E2Pdf |
e2pdf |
2025-10-22T14:32:53.513Z | 2026-01-20T14:28:13.967Z |
| CVE-2025-62066 |
7.4 (3.1)
|
WordPress Revolution theme < 2.5.8 - Local File Inclus… |
fuelthemes |
Revolution |
2025-11-06T15:55:54.429Z | 2026-01-20T14:28:13.588Z |
| CVE-2025-62065 |
9.9 (3.1)
|
WordPress RTMKit plugin <= 1.6.5 - Arbitrary File Uplo… |
Rometheme |
RTMKit |
2025-11-06T15:55:53.302Z | 2026-01-20T14:28:13.935Z |
| CVE-2025-62064 |
9.8 (3.1)
|
WordPress Search & Go theme <= 2.7 - Broken Authentica… |
Elated-Themes |
Search & Go |
2025-11-06T15:55:51.676Z | 2026-01-20T14:28:13.941Z |
| CVE-2025-62063 |
6.5 (3.1)
|
WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 -… |
WP Travel |
WP Travel Gutenberg Blocks |
2025-10-22T14:32:53.303Z | 2026-01-20T14:28:13.735Z |
| CVE-2025-62062 |
5.3 (3.1)
|
WordPress Easy Post Submission plugin <= 1.7.0 - Sensi… |
ThemeRuby |
Easy Post Submission |
2025-10-22T14:32:53.065Z | 2026-01-20T14:28:13.826Z |
| CVE-2025-62060 |
6.5 (3.1)
|
WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scri… |
Themepoints |
Tab Ultimate |
2025-10-22T14:32:52.503Z | 2026-01-20T14:28:13.775Z |
| CVE-2025-62059 |
7.1 (3.1)
|
WordPress SureRank plugin <= 1.3.2 - Cross Site Script… |
Brainstorm Force |
SureRank |
2025-11-06T15:55:51.134Z | 2026-01-20T14:28:13.884Z |
| CVE-2025-62058 |
6.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.269Z | 2026-01-20T14:28:13.789Z |
| CVE-2025-62057 |
7.1 (3.1)
|
WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-11-06T15:55:50.427Z | 2026-01-20T14:28:13.708Z |
| CVE-2025-62055 |
8.1 (3.1)
|
WordPress Academist theme < 1.3 - Local File Inclusion… |
Elated-Themes |
Academist |
2025-11-06T15:55:49.844Z | 2026-01-20T14:28:13.866Z |
| CVE-2025-62054 |
7.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin <= 4.1.8… |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.067Z | 2026-01-20T14:28:13.941Z |
| CVE-2025-62053 |
8 (3.1)
|
WordPress Houzez theme < 4.2.0 - Local File Inclusion … |
favethemes |
Houzez |
2025-11-06T15:55:48.526Z | 2026-01-20T14:28:13.854Z |
| CVE-2025-62051 |
6.5 (3.1)
|
WordPress UDesign Core plugin <= 4.14.1 - Cross Site S… |
AndonDesign |
UDesign Core |
2025-11-06T15:55:47.211Z | 2026-01-20T14:28:13.625Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68575 |
8.8 (3.1)
|
WordPress Wappointment plugin <=2.7.2 - Broken Access … |
Wappointment team |
Wappointment |
2025-12-24T13:10:38.366Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68574 |
6.1 (3.1)
|
WordPress WPBakery Visual Composer WHMCS Elements plug… |
voidcoders |
WPBakery Visual Composer WHMCS Elements |
2025-12-24T13:10:38.100Z | 2026-01-20T14:28:28.414Z |
| CVE-2025-68573 |
8.8 (3.1)
|
WordPress Simple Keyword to Link plugin <= 1.5 - Cross… |
Alessandro Piconi |
Simple Keyword to Link |
2025-12-24T13:10:37.793Z | 2026-01-20T14:28:28.455Z |
| CVE-2025-68572 |
8.8 (3.1)
|
WordPress BBP Core plugin <= 1.4.1 - Broken Access Con… |
Spider Themes |
BBP Core |
2025-12-24T13:10:37.515Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68571 |
8.8 (3.1)
|
WordPress SALESmanago plugin <= 3.9.0 - Broken Access … |
SALESmanago |
SALESmanago |
2025-12-24T13:10:37.254Z | 2026-01-20T14:28:28.533Z |
| CVE-2025-68570 |
9.8 (3.1)
|
WordPress Captivate Sync plugin <= 3.2.2 - SQL Injecti… |
captivateaudio |
Captivate Sync |
2025-12-24T13:10:36.970Z | 2026-01-20T14:28:28.532Z |
| CVE-2025-68569 |
8.8 (3.1)
|
WordPress WP Time Slots Booking Form plugin <= 1.2.38 … |
codepeople |
WP Time Slots Booking Form |
2025-12-24T13:10:36.669Z | 2026-01-20T14:28:28.254Z |
| CVE-2025-68568 |
7.5 (3.1)
|
WordPress Popup Builder: Exit-Intent pop-up, Spin the … |
integrationclaspo |
Popup Builder: Exit-Intent pop-up, Spin the Wheel, Newsletter signup, Email Capture & Lead Generation forms maker |
2025-12-24T13:10:36.357Z | 2026-01-20T14:28:28.398Z |
| CVE-2025-68567 |
8.8 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:36.094Z | 2026-01-20T14:28:28.301Z |
| CVE-2025-68566 |
5.4 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:35.820Z | 2026-01-20T14:28:28.563Z |
| CVE-2025-68565 |
9.8 (3.1)
|
WordPress Twitch Player plugin <= 2.1.3 - Broken Acces… |
JayBee |
Twitch Player |
2025-12-24T13:10:35.534Z | 2026-01-20T14:28:28.511Z |
| CVE-2025-68563 |
9.8 (3.1)
|
WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - L… |
WP Shuffle |
Subscribe to Unlock Lite |
2025-12-24T12:31:30.996Z | 2026-01-20T14:28:28.665Z |
| CVE-2025-68562 |
9.9 (3.1)
|
WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Uplo… |
RomanCode |
MapSVG |
2025-12-29T21:13:24.913Z | 2026-01-20T14:28:28.382Z |
| CVE-2025-68561 |
7.6 (3.1)
|
WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection … |
Ruben Garcia |
AutomatorWP |
2025-12-23T11:34:34.900Z | 2026-01-20T14:28:28.768Z |
| CVE-2025-68560 |
7.5 (3.1)
|
WordPress TheGem Theme Elements (for Elementor) plugin… |
CodexThemes |
TheGem Theme Elements (for Elementor) |
2025-12-23T11:36:26.213Z | 2026-01-20T14:28:28.760Z |
| CVE-2025-68559 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for Elementor) plugin… |
CodexThemes |
TheGem Theme Elements (for Elementor) |
2025-12-23T11:37:35.431Z | 2026-01-20T14:28:28.395Z |
| CVE-2025-68557 |
4.3 (3.1)
|
WordPress Chakra test plugin <= 1.0.1 - Broken Access … |
Vikas Ratudi |
Chakra test |
2025-12-23T11:43:26.693Z | 2026-01-20T14:28:27.973Z |
| CVE-2025-68556 |
5.3 (3.1)
|
WordPress HAPPY plugin <= 1.0.9 - Broken Access Contro… |
VillaTheme |
HAPPY |
2025-12-23T11:44:49.953Z | 2026-01-20T14:28:27.964Z |
| CVE-2025-68551 |
6.5 (3.1)
|
WordPress VPSUForm plugin <= 3.2.24 - Sensitive Data E… |
Vikas Ratudi |
VPSUForm |
2025-12-23T11:46:19.271Z | 2026-01-20T14:28:27.968Z |
| CVE-2025-68550 |
7.6 (3.1)
|
WordPress WPBulky plugin <= 1.1.13 - SQL Injection vul… |
VillaTheme |
WPBulky |
2025-12-23T11:47:59.408Z | 2026-01-20T14:28:27.940Z |
| CVE-2025-68548 |
6.5 (3.1)
|
WordPress Responsive Posts Carousel Pro plugin <= 15.2… |
WebCodingPlace |
Responsive Posts Carousel Pro |
2025-12-23T11:50:41.384Z | 2026-01-20T14:28:27.920Z |
| CVE-2025-68547 |
7.5 (3.1)
|
WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitr… |
WPweb |
Follow My Blog Post |
2026-01-05T10:42:04.269Z | 2026-01-20T14:28:27.791Z |
| CVE-2025-68546 |
7.5 (3.1)
|
WordPress Nika theme <= 1.2.14 - Local File Inclusion … |
Thembay |
Nika |
2025-12-23T12:00:07.057Z | 2026-01-20T14:28:27.910Z |
| CVE-2025-68544 |
7.5 (3.1)
|
WordPress Diza theme <= 1.3.15 - Local File Inclusion … |
Thembay |
Diza |
2025-12-23T11:58:39.264Z | 2026-01-20T14:28:27.852Z |
| CVE-2025-68540 |
9.8 (3.1)
|
WordPress Fana theme <= 1.1.35 - Local File Inclusion … |
thembay |
Fana |
2025-12-24T12:31:27.748Z | 2026-01-20T14:28:27.969Z |
| CVE-2025-68537 |
9.8 (3.1)
|
WordPress Zota theme <= 1.3.14 - Local File Inclusion … |
thembay |
Zota |
2025-12-24T12:31:27.277Z | 2026-01-20T14:28:27.905Z |
| CVE-2025-68535 |
9.1 (3.1)
|
WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Brok… |
sunshinephotocart |
Sunshine Photo Cart |
2025-12-24T12:31:27.019Z | 2026-01-20T14:28:27.978Z |
| CVE-2025-68533 |
5.4 (3.1)
|
WordPress WC Builder plugin <= 1.2.0 - Cross Site Scri… |
HasThemes |
WC Builder |
2025-12-24T12:31:26.717Z | 2026-01-20T14:28:27.923Z |
| CVE-2025-68532 |
5.4 (3.1)
|
WordPress ModelTheme Addons for WPBakery and Elementor… |
modeltheme |
ModelTheme Addons for WPBakery and Elementor |
2025-12-24T12:31:26.464Z | 2026-01-20T14:28:27.821Z |
| CVE-2025-68530 |
9.8 (3.1)
|
WordPress Bookory theme <= 2.2.7 - Local File Inclusio… |
pavothemes |
Bookory |
2025-12-24T12:31:26.200Z | 2026-01-20T14:28:27.916Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68570 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:23.953 | 2026-01-20T15:19:47.127 |
| fkie_cve-2025-68569 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-… | 2025-12-24T13:16:23.833 | 2026-01-20T15:19:46.990 |
| fkie_cve-2025-68568 | Missing Authorization vulnerability in integrationclaspo Popup Builder: Exit-Intent pop-up, Spin th… | 2025-12-24T13:16:23.710 | 2026-01-20T15:19:46.863 |
| fkie_cve-2025-68567 | Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro my-auctions-allegro-… | 2025-12-24T13:16:23.593 | 2026-01-20T15:19:46.743 |
| fkie_cve-2025-68566 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:23.470 | 2026-01-20T15:19:46.617 |
| fkie_cve-2025-68565 | Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting… | 2025-12-24T13:16:23.340 | 2026-01-20T15:19:46.493 |
| fkie_cve-2025-68563 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:23.223 | 2026-01-20T15:19:46.373 |
| fkie_cve-2025-68562 | Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a W… | 2025-12-29T22:15:43.310 | 2026-01-20T15:19:46.273 |
| fkie_cve-2025-68561 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-23T12:15:46.567 | 2026-01-20T15:19:46.180 |
| fkie_cve-2025-68560 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-23T12:15:46.430 | 2026-01-20T15:19:46.083 |
| fkie_cve-2025-68559 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-23T12:15:46.290 | 2026-01-20T15:19:45.997 |
| fkie_cve-2025-68557 | Missing Authorization vulnerability in Vikas Ratudi Chakra test allows Exploiting Incorrectly Confi… | 2025-12-23T12:15:46.160 | 2026-01-20T15:19:45.900 |
| fkie_cve-2025-68556 | Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Ac… | 2025-12-23T12:15:46.017 | 2026-01-20T15:19:45.810 |
| fkie_cve-2025-68551 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas R… | 2025-12-23T12:15:45.877 | 2026-01-20T15:19:45.710 |
| fkie_cve-2025-68550 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-23T12:15:45.737 | 2026-01-20T15:19:45.613 |
| fkie_cve-2025-68548 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-23T12:15:45.600 | 2026-01-20T15:19:45.520 |
| fkie_cve-2025-68547 | Missing Authorization vulnerability in WPweb Follow My Blog Post allows Exploiting Incorrectly Conf… | 2026-01-05T11:17:41.973 | 2026-01-20T15:19:45.427 |
| fkie_cve-2025-68546 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-23T12:15:45.457 | 2026-01-20T15:19:45.330 |
| fkie_cve-2025-68544 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-23T12:15:45.313 | 2026-01-20T15:19:45.230 |
| fkie_cve-2025-68540 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:23.093 | 2026-01-20T15:19:45.097 |
| fkie_cve-2025-68537 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:22.970 | 2026-01-20T15:19:44.963 |
| fkie_cve-2025-68535 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart al… | 2025-12-24T13:16:22.850 | 2026-01-20T15:19:44.840 |
| fkie_cve-2025-68533 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.727 | 2026-01-20T15:19:44.720 |
| fkie_cve-2025-68532 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.603 | 2026-01-20T15:19:44.593 |
| fkie_cve-2025-68530 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:22.480 | 2026-01-20T15:19:44.467 |
| fkie_cve-2025-68529 | Cross-Site Request Forgery (CSRF) vulnerability in Rhys Wynne WP Email Capture wp-email-capture all… | 2025-12-24T13:16:22.357 | 2026-01-20T15:19:44.330 |
| fkie_cve-2025-68528 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.233 | 2026-01-20T15:19:44.180 |
| fkie_cve-2025-68527 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.117 | 2026-01-20T15:19:44.033 |
| fkie_cve-2025-68525 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.997 | 2026-01-20T15:19:43.880 |
| fkie_cve-2025-68523 | Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploi… | 2025-12-24T13:16:21.877 | 2026-01-20T15:19:43.710 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-pmpr-2fww-r5fw |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site … | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-ph8j-3xv5-c8gq |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce premmerce allows Cross Site … | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-pgpx-xg4v-wrhx |
5.4 (3.1)
|
Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premme… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-gvvw-5fwr-fmr3 |
4.3 (3.1)
|
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-gpvr-cwgx-r45c |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-fgrg-37hc-qf4g |
4.3 (3.1)
|
Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-8w5m-hc8r-mmm9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cros… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-8rwj-g494-3qp6 |
5.4 (3.1)
|
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-8gx7-cf2h-mfwc |
4.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fantast… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-8cr2-hpc7-v23m |
6.5 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-el… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-698r-29g4-5vv6 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-xjmw-rm34-58c8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-r6p6-v684-4gh3 |
5.3 (3.1)
|
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-q25c-mp33-wj35 |
7.6 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-ppgx-ch2f-563v |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-h3r4-4xxq-ggf2 |
5.4 (3.1)
|
Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrect… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-g57x-6757-m2v6 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-f2cf-j74x-54c5 |
5.4 (3.1)
|
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-9pc6-xgvc-2w25 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-4527-g864-c7mh |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-3g8r-fpc3-3p9r |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-xwq4-m3ff-5w2g |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-xvj8-fgfh-f3gx |
4.9 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in Codeless Slider Templates slider-templates allo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-wh86-wjvr-gp4g |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w4xm-vpx3-v86f |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request F… | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w294-95cp-qx33 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-rrvr-f37x-r3f9 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-qh3g-9vrf-p9vh |
5.3 (3.1)
|
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing … | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-hrf6-48c7-hhqf |
5.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box allows Cross Site Request Forg… | 2025-10-29T06:31:12Z | 2026-01-20T15:31:39Z |
| ghsa-h9fv-xmvq-pgf6 |
5.3 (3.1)
|
Missing Authorization vulnerability in Facebook Facebook for WooCommerce allows Exploiting Incorrec… | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-105 |
|
A flaw was found in the use of insufficiently random values in Ansible. Two random passwo… | ansible | 2021-05-27T19:15:00Z | 2021-07-02T02:41:34.811883Z |
| pysec-2020-208 |
|
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure tempo… | ansible | 2020-05-15T14:15:00Z | 2021-07-02T02:41:34.927743Z |
| pysec-2020-207 |
|
A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, … | ansible | 2020-03-24T14:15:00Z | 2021-07-02T02:41:34.761872Z |
| pysec-2020-206 |
|
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8… | ansible | 2020-03-31T17:15:00Z | 2021-07-02T02:41:34.645049Z |
| pysec-2019-146 |
|
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None | ansible | 2019-11-26T14:15:00Z | 2021-07-02T02:41:34.512855Z |
| pysec-2019-145 |
|
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x bef… | ansible | 2019-11-22T13:15:00Z | 2021-07-02T02:41:34.397311Z |
| pysec-2018-44 |
|
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. Thi… | ansible | 2018-10-23T15:29:00Z | 2021-07-02T02:41:34.271290Z |
| pysec-2018-43 |
|
A flaw was found in ansible. ansible.cfg is read from the current working directory which… | ansible | 2018-07-13T22:29:00Z | 2021-07-02T02:41:34.153569Z |
| pysec-2018-42 |
|
Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for… | ansible | 2018-07-03T01:29:00Z | 2021-07-02T02:41:34.017806Z |
| pysec-2020-205 |
|
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attacker… | ansible | 2020-02-18T15:15:00Z | 2021-07-02T02:41:33.376176Z |
| pysec-2020-204 |
|
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, a… | ansible | 2020-02-18T15:15:00Z | 2021-07-02T02:41:33.333300Z |
| pysec-2020-203 |
|
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset… | ansible | 2020-02-20T03:15:00Z | 2021-07-02T02:41:33.286907Z |
| pysec-2020-202 |
|
Ansible before 1.5.5 constructs filenames containing user and password fields on the basi… | ansible | 2020-02-20T03:15:00Z | 2021-07-02T02:41:33.239912Z |
| pysec-2020-201 |
|
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local user… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.195519Z |
| pysec-2020-200 |
|
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or mod… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.150700Z |
| pysec-2020-199 |
|
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.107799Z |
| pysec-2020-198 |
|
Ansible prior to 1.5.4 mishandles the evaluation of some strings. | ansible | 2020-01-09T13:15:00Z | 2021-07-02T02:41:33.018970Z |
| pysec-2018-41 |
|
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results … | ansible | 2018-07-19T13:29:00Z | 2021-07-02T02:41:33.849138Z |
| pysec-2018-40 |
|
Ansible before version 2.3 has an input validation vulnerability in the handling of data … | ansible | 2018-06-22T13:29:00Z | 2021-07-02T02:41:33.763354Z |
| pysec-2018-39 |
|
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ans… | ansible | 2018-04-24T16:29:00Z | 2021-07-02T02:41:33.713953Z |
| pysec-2018-38 |
|
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansi… | ansible | 2018-07-31T20:29:00Z | 2021-07-02T02:41:33.612895Z |
| pysec-2018-37 |
|
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly ve… | ansible | 2018-07-31T21:29:00Z | 2021-07-02T02:41:33.569568Z |
| pysec-2017-4 |
|
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed c… | ansible | 2017-11-21T17:29:00Z | 2021-07-02T02:41:33.938371Z |
| pysec-2017-3 |
|
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users t… | ansible | 2017-06-07T20:29:00Z | 2021-07-02T02:41:33.471109Z |
| pysec-2017-2 |
|
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbi… | ansible | 2017-06-08T18:29:00Z | 2021-07-02T02:41:33.064199Z |
| pysec-2016-1 |
|
The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x … | ansible | 2016-06-03T14:59:00Z | 2021-07-02T02:41:33.519196Z |
| pysec-2015-1 |
|
Ansible before 1.9.2 does not verify that the server hostname matches a domain name in th… | ansible | 2015-08-12T14:59:00Z | 2021-07-02T02:41:33.423322Z |
| pysec-2018-36 |
|
Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle at… | ansible | 2018-05-04T20:29:00Z | 2021-07-02T02:41:32.885648Z |
| pysec-2018-35 |
|
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability… | aiohttp-session | 2018-12-20T15:29:00Z | 2021-07-02T02:41:32.834524Z |
| pysec-2013-2 |
|
lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not ru… | ansible | 2013-09-16T19:14:00Z | 2021-07-02T02:41:32.973358Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3348 | A vulnerability classified as critical has been found in SourceCodester Aplaya Beach Reso… | 2024-04-11T05:03:27.271700Z |
| gsd-2024-3347 | A vulnerability was found in SourceCodester Airline Ticket Reservation System 1.0. It has… | 2024-04-11T05:03:27.120017Z |
| gsd-2024-3346 | A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as cri… | 2024-04-11T05:03:27.309732Z |
| gsd-2024-3345 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.076692Z |
| gsd-2024-3344 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for W… | 2024-04-11T05:03:27.060660Z |
| gsd-2024-3343 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for W… | 2024-04-11T05:03:27.166355Z |
| gsd-2024-3342 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL I… | 2024-04-11T05:03:27.402495Z |
| gsd-2024-3341 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.301053Z |
| gsd-2024-3340 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.429943Z |
| gsd-2024-3339 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.263258Z |
| gsd-2024-3338 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.111800Z |
| gsd-2024-3337 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.062743Z |
| gsd-2024-3336 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.425049Z |
| gsd-2024-3335 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.412287Z |
| gsd-2024-3334 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.288283Z |
| gsd-2024-3333 | The Essential Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Sit… | 2024-04-11T05:03:27.404703Z |
| gsd-2024-3332 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.420637Z |
| gsd-2024-3331 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.190011Z |
| gsd-2024-3330 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.292829Z |
| gsd-2024-3329 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.144654Z |
| gsd-2024-3328 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.146224Z |
| gsd-2024-3327 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.367458Z |
| gsd-2024-3326 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.099206Z |
| gsd-2024-3325 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.187222Z |
| gsd-2024-3324 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.159785Z |
| gsd-2024-3323 | Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server … | 2024-04-11T05:03:27.132126Z |
| gsd-2024-3322 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.246760Z |
| gsd-2024-3321 | A vulnerability classified as problematic has been found in SourceCodester eLearning Syst… | 2024-04-11T05:03:27.409204Z |
| gsd-2024-3320 | A vulnerability was found in SourceCodester eLearning System 1.0. It has been rated as pr… | 2024-04-11T05:03:27.051075Z |
| gsd-2024-3319 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.323120Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-0000-reversing-labs-747b2859bfd1e44a | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z | |
| MAL-2025-192920 | Malicious code in stripe-backup (RubyGems) | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z |
| MAL-2025-192919 | Malicious code in sq-samsa (RubyGems) | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z |
| MAL-0000-REVERSING-LABS-F050EDC87363BB0F | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z | |
| MAL-0000-REVERSING-LABS-83E6CBA910DACCD5 | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z | |
| MAL-0000-REVERSING-LABS-747B2859BFD1E44A | 2025-12-23T08:41:10Z | 2025-12-23T08:41:10Z | |
| mal-2025-192918 | Malicious code in sq-mdc (RubyGems) | 2025-12-23T08:41:09Z | 2025-12-23T08:41:09Z |
| mal-2025-192917 | Malicious code in space-commander (RubyGems) | 2025-12-23T08:41:09Z | 2025-12-23T08:41:09Z |
| mal-0000-reversing-labs-955b5a63ab935bfb | 2025-12-23T08:41:09Z | 2025-12-23T08:41:09Z | |
| mal-0000-reversing-labs-2b63d46edf2c5574 | 2025-12-23T08:41:09Z | 2025-12-23T08:41:09Z | |
| MAL-2025-192918 | Malicious code in sq-mdc (RubyGems) | 2025-12-23T08:41:09Z | 2025-12-23T08:41:09Z |
| MAL-2025-192917 | Malicious code in space-commander (RubyGems) | 2025-12-23T08:41:09Z | 2025-12-23T08:41:09Z |
| MAL-0000-REVERSING-LABS-955B5A63AB935BFB | 2025-12-23T08:41:09Z | 2025-12-23T08:41:09Z | |
| MAL-0000-REVERSING-LABS-2B63D46EDF2C5574 | 2025-12-23T08:41:09Z | 2025-12-23T08:41:09Z | |
| mal-2025-192916 | Malicious code in redis_connectable (RubyGems) | 2025-12-23T08:41:07Z | 2025-12-23T08:41:07Z |
| mal-0000-reversing-labs-7ba50847315a286e | 2025-12-23T08:41:07Z | 2025-12-23T08:41:07Z | |
| MAL-2025-192916 | Malicious code in redis_connectable (RubyGems) | 2025-12-23T08:41:07Z | 2025-12-23T08:41:07Z |
| MAL-0000-REVERSING-LABS-7BA50847315A286E | 2025-12-23T08:41:07Z | 2025-12-23T08:41:07Z | |
| mal-2025-192915 | Malicious code in rails-structured-logging (RubyGems) | 2025-12-23T08:41:05Z | 2025-12-23T08:41:05Z |
| mal-2025-192914 | Malicious code in queenbee-plugin (RubyGems) | 2025-12-23T08:41:05Z | 2025-12-23T08:41:05Z |
| mal-0000-reversing-labs-f655ca1326c2851b | 2025-12-23T08:41:05Z | 2025-12-23T08:41:05Z | |
| mal-0000-reversing-labs-d90da20fcb1e0c7e | 2025-12-23T08:41:05Z | 2025-12-23T08:41:05Z | |
| MAL-2025-192915 | Malicious code in rails-structured-logging (RubyGems) | 2025-12-23T08:41:05Z | 2025-12-23T08:41:05Z |
| MAL-2025-192914 | Malicious code in queenbee-plugin (RubyGems) | 2025-12-23T08:41:05Z | 2025-12-23T08:41:05Z |
| MAL-0000-REVERSING-LABS-F655CA1326C2851B | 2025-12-23T08:41:05Z | 2025-12-23T08:41:05Z | |
| MAL-0000-REVERSING-LABS-D90DA20FCB1E0C7E | 2025-12-23T08:41:05Z | 2025-12-23T08:41:05Z | |
| mal-2025-192913 | Malicious code in prometheus_gcstat (RubyGems) | 2025-12-23T08:41:04Z | 2025-12-23T08:41:04Z |
| mal-0000-reversing-labs-b01ed7b6d0289ead | 2025-12-23T08:41:04Z | 2025-12-23T08:41:04Z | |
| MAL-2025-192913 | Malicious code in prometheus_gcstat (RubyGems) | 2025-12-23T08:41:04Z | 2025-12-23T08:41:04Z |
| MAL-0000-REVERSING-LABS-B01ED7B6D0289EAD | 2025-12-23T08:41:04Z | 2025-12-23T08:41:04Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0179 | Kibana: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0176 | Cisco Meeting Management: Schwachstelle ermöglicht Privilegieneskalation | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0175 | Jenkins Plugins: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0171 | GitLab: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0169 | Unify OpenScape 4000: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2023-2066 | QT: Schwachstelle ermöglicht Denial of Service | 2023-08-15T22:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0168 | Oracle JD Edwards: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0165 | Oracle Retail Applications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0164 | Oracle Siebel CRM: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0163 | Oracle Supply Chain: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0162 | Oracle Systems: Schwachstelle gefährdet Integrität und Verfügbarkeit | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0161 | Oracle Utilities Applications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0160 | Oracle Virtualization: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0159 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0158 | Linksys Router: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0157 | Microsoft GitHub Enterprise: Schwachstelle ermöglicht Signatur-Spoofing | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0153 | Arista EOS: Schwachstelle ermöglicht Denial of Service | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0152 | Siemens SIMATIC S7: Schwachstelle ermöglicht Manipulation der Konfiguration | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0151 | HCL BigFix: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0149 | Oracle Java SE: Mehrere Schwachstellen | 2019-07-16T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0148 | Oracle Communications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0147 | Oracle Construction and Engineering: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0146 | Oracle E-Business Suite: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0145 | Oracle Enterprise Manager: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0144 | Oracle Financial Services Applications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0143 | Oracle Fusion Middleware: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0142 | Oracle Health Sciences Applications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0141 | Oracle Hyperion: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0139 | Oracle Database Server: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0138 | Oracle REST Data Services: Schwachstelle gefährdet Integrität | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:0381 | Red Hat Security Advisory: .NET 8.0 security update | 2025-01-16T17:18:21+00:00 | 2026-01-21T23:26:38+00:00 |
| rhsa-2025:0340 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2025-01-15T16:54:28+00:00 | 2026-01-21T23:26:38+00:00 |
| rhsa-2025:0329 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.16 | 2025-01-15T09:55:01+00:00 | 2026-01-21T23:26:35+00:00 |
| rhsa-2025:0079 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.2 Bug Fix Update | 2025-01-08T10:04:05+00:00 | 2026-01-21T23:26:29+00:00 |
| rhsa-2025:0002 | Red Hat Security Advisory: python36:3.6 security update | 2025-01-01T09:32:24+00:00 | 2026-01-21T23:26:27+00:00 |
| rhsa-2024:9884 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0 | 2024-11-18T14:52:00+00:00 | 2026-01-21T23:26:27+00:00 |
| rhsa-2024:9885 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0 | 2024-11-18T15:17:19+00:00 | 2026-01-21T23:26:24+00:00 |
| rhsa-2024:9629 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.6 | 2024-11-14T08:36:54+00:00 | 2026-01-21T23:26:23+00:00 |
| rhsa-2024:9627 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.3 | 2024-11-14T08:35:32+00:00 | 2026-01-21T23:26:23+00:00 |
| rhsa-2024:9620 | Red Hat Security Advisory: OpenShift Container Platform 4.14.41 bug fix and security update | 2024-11-20T04:17:57+00:00 | 2026-01-21T23:26:22+00:00 |
| rhsa-2024:9551 | Red Hat Security Advisory: grafana-pcp security update | 2024-11-13T14:54:47+00:00 | 2026-01-21T23:26:18+00:00 |
| rhsa-2024:8981 | Red Hat Security Advisory: OpenShift Container Platform 4.17.4 bug fix and security update | 2024-11-13T04:13:47+00:00 | 2026-01-21T23:26:00+00:00 |
| rhsa-2024:8847 | Red Hat Security Advisory: grafana-pcp security update | 2024-11-05T03:58:20+00:00 | 2026-01-21T23:25:59+00:00 |
| rhsa-2024:8683 | Red Hat Security Advisory: OpenShift Container Platform 4.16.20 bug fix and security update | 2024-11-06T03:29:21+00:00 | 2026-01-21T23:25:52+00:00 |
| rhsa-2024:8678 | Red Hat Security Advisory: grafana security update | 2024-10-30T19:42:46+00:00 | 2026-01-21T23:25:51+00:00 |
| rhsa-2024:8546 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.5 bug fixes and container updates | 2024-10-28T21:28:29+00:00 | 2026-01-21T23:25:51+00:00 |
| rhsa-2024:8533 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.4.6 security updates and bug fixes | 2024-10-28T17:06:38+00:00 | 2026-01-21T23:25:50+00:00 |
| rhsa-2024:8507 | Red Hat Security Advisory: grafana security update | 2024-10-28T10:01:19+00:00 | 2026-01-21T23:25:47+00:00 |
| rhsa-2024:8351 | Red Hat Security Advisory: grafana:7.3.6 security update | 2024-10-23T10:12:31+00:00 | 2026-01-21T23:25:44+00:00 |
| rhsa-2024:8327 | Red Hat Security Advisory: grafana security update | 2024-10-22T15:15:27+00:00 | 2026-01-21T23:25:41+00:00 |
| rhsa-2024:8113 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.3 security and bug fix update | 2024-10-15T08:52:38+00:00 | 2026-01-21T23:25:31+00:00 |
| rhsa-2024:8077 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:43+00:00 | 2026-01-21T23:25:29+00:00 |
| rhsa-2024:8023 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.34.0 security update & enhancements | 2024-10-14T00:59:58+00:00 | 2026-01-21T23:25:26+00:00 |
| rhsa-2024:8076 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:49+00:00 | 2026-01-21T23:25:24+00:00 |
| rhsa-2024:8075 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:59+00:00 | 2026-01-21T23:25:23+00:00 |
| rhsa-2024:7994 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.3 bug fixes and container updates | 2024-10-11T01:43:45+00:00 | 2026-01-21T23:25:20+00:00 |
| rhsa-2024:7759 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.3 security updates | 2024-10-10T16:53:04+00:00 | 2026-01-21T23:25:12+00:00 |
| rhsa-2024:7726 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.2 | 2024-10-07T09:24:48+00:00 | 2026-01-21T23:25:11+00:00 |
| rhsa-2024:7725 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.5 | 2024-10-07T09:24:53+00:00 | 2026-01-21T23:25:11+00:00 |
| rhsa-2024:7724 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.11 | 2024-10-07T09:22:37+00:00 | 2026-01-21T23:25:10+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-310-01 | WECON PLC Editor | 2020-11-05T00:00:00.000000Z | 2020-11-05T00:00:00.000000Z |
| icsa-20-308-02 | NEXCOM NIO50 | 2020-11-03T00:00:00.000000Z | 2020-11-03T00:00:00.000000Z |
| icsa-20-303-02 | Mitsubishi Electric MELSEC iQ-R | 2020-10-29T00:00:00.000000Z | 2020-10-29T00:00:00.000000Z |
| icsa-20-301-01 | SHUN HU Technology JUUKO Industrial Radio Remote Control | 2020-10-27T00:00:00.000000Z | 2020-10-27T00:00:00.000000Z |
| icsma-20-296-02 | B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus | 2020-10-22T00:00:00.000000Z | 2020-10-22T00:00:00.000000Z |
| icsma-20-296-01 | B. Braun OnlineSuite | 2020-10-22T00:00:00.000000Z | 2020-10-22T00:00:00.000000Z |
| icsma-20-196-01 | Capsule Technologies SmartLinx Neuron 2 (Update A) | 2020-07-14T00:00:00.000000Z | 2020-10-20T00:00:00.000000Z |
| icsa-20-294-02 | Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer | 2020-10-20T00:00:00.000000Z | 2020-10-20T00:00:00.000000Z |
| icsa-20-294-01 | Rockwell Automation 1794-AENT Flex I/O Series B | 2020-10-20T00:00:00.000000Z | 2020-10-20T00:00:00.000000Z |
| icsa-20-289-02 | Advantech R-SeeNet | 2020-10-15T00:00:00.000000Z | 2020-10-15T00:00:00.000000Z |
| icsa-20-289-01 | Advantech WebAccess/SCADA | 2020-10-15T00:00:00.000000Z | 2020-10-15T00:00:00.000000Z |
| icsa-20-287-06 | Siemens SIPORT MP | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-05 | Siemens Desigo Insight | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-04 | Fieldcomm Group HART-IP and hipserver | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-03 | Flexera InstallShield | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-02 | LCDS LAquis SCADA | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-01 | MOXA NPort IAW5000A-I/O Series | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-273-03 | B&R Automation SiteManager and GateManager | 2020-09-29T00:00:00.000000Z | 2020-09-29T00:00:00.000000Z |
| icsa-20-273-02 | Yokogawa WideField3 | 2020-09-29T00:00:00.000000Z | 2020-09-29T00:00:00.000000Z |
| icsa-20-273-01 | ICSA-20-273-01_MB Connect line mbCONNECT24, mymbCONNECT24 | 2020-09-29T00:00:00.000000Z | 2020-09-29T00:00:00.000000Z |
| icsa-20-266-02 | GE Reason S20 Ethernet Switch | 2020-09-22T00:00:00.000000Z | 2020-09-22T00:00:00.000000Z |
| icsa-20-266-01 | GE Digital APM Classic | 2020-09-22T00:00:00.000000Z | 2020-09-22T00:00:00.000000Z |
| icsma-20-261-01 | ICSMA-20-261-01_Philips Clinical Collaboration Platform | 2020-09-17T00:00:00.000000Z | 2020-09-17T00:00:00.000000Z |
| icsa-20-261-01 | Advantech WebAccess Node | 2020-09-17T00:00:00.000000Z | 2020-09-17T00:00:00.000000Z |
| icsa-20-177-01 | ENTTEC Lighting Controllers (Update A) | 2020-06-25T00:00:00.000000Z | 2020-09-15T00:00:00.000000Z |
| icsa-20-254-03 | HMS Networks Ewon Flexy and Cosy | 2020-09-10T00:00:00.000000Z | 2020-09-10T00:00:00.000000Z |
| icsa-20-254-02 | FATEK Automation PLC WinProladder | 2020-09-10T00:00:00.000000Z | 2020-09-10T00:00:00.000000Z |
| icsa-20-254-01 | AVEVA Enterprise Data Management Web | 2020-09-10T00:00:00.000000Z | 2020-09-10T00:00:00.000000Z |
| icsa-20-252-08 | Siemens Polarion Subversion Webclient | 2020-09-08T00:00:00.000000Z | 2020-09-08T00:00:00.000000Z |
| icsa-20-252-05 | Siemens Siveillance Video Client | 2020-09-08T00:00:00.000000Z | 2020-09-08T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-dcnm-stored-xss-eUyGPqxm | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-VyE4bNAh | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-asr5k-ecs-bypass-2lqfpcl | Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-asr5k-ecs-bypass-2LqfPCL | Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-salt-2vx545ag | SaltStack FrameWork Vulnerabilities Affecting Cisco Products | 2020-05-28T16:00:00+00:00 | 2020-06-16T15:17:35+00:00 |
| cisco-sa-salt-2vx545AG | SaltStack FrameWork Vulnerabilities Affecting Cisco Products | 2020-05-28T16:00:00+00:00 | 2020-06-16T15:17:35+00:00 |
| cisco-sa-tcl-dos-mazqunmf | Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-08T20:41:10+00:00 |
| cisco-sa-tcl-dos-MAZQUnMF | Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-08T20:41:10+00:00 |
| cisco-sa-20191002-pi-xss-12713 | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability | 2019-10-02T16:00:00+00:00 | 2020-06-08T20:15:05+00:00 |
| cisco-sa-webui-unauthprxy-kxxsbwh | Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-unauthprxy-KXXsbWh | Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-pzgqxjfg | Cisco IOS XE Software Web UI Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-filerd-hngndygk | Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-filerd-HngnDYGk | Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-zm283zdw | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-zM283Zdw | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-PZgQxjfG | Cisco IOS XE Software Web UI Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj4-s2tmh7ga | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj4-S2TmH7GA | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj3-44st5cca | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj3-44st5CcA | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj2-fonjk2ld | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj2-fOnjk2LD | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-uccx-api-auth-wsx4v7sb | Cisco Unified Contact Center Express Improper API Authorization Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-uccx-api-auth-WSx4v7sB | Cisco Unified Contact Center Express Improper API Authorization Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-tcl-ace-c9kuvkmm | Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-tcl-ace-C9KuVKmm | Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-sxp-68tevzr | Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-sxp-68TEVzR | Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ssh-dos-un22sd2a | Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2011-3048 | The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow. | 2012-05-02T00:00:00.000Z | 2025-09-03T22:14:56.000Z |
| msrc_cve-2025-6497 | HTACG tidy-html5 parser.c prvTidyParseNamespace assertion | 2025-06-02T00:00:00.000Z | 2025-09-03T22:14:40.000Z |
| msrc_cve-2022-49134 | mlxsw: spectrum: Guard against invalid local ports | 2025-02-02T00:00:00.000Z | 2025-09-03T22:14:37.000Z |
| msrc_cve-2022-48979 | drm/amd/display: fix array index out of bound error in DCN32 DML | 2024-10-01T07:00:00.000Z | 2025-09-03T22:14:34.000Z |
| msrc_cve-2024-11738 | Rustls: rustls network-reachable panic in `acceptor::accept` | 2024-12-02T00:00:00.000Z | 2025-09-03T22:13:58.000Z |
| msrc_cve-2019-14197 | An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply. | 2019-07-02T00:00:00.000Z | 2025-09-03T22:13:52.000Z |
| msrc_cve-2025-21521 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). | 2025-01-02T00:00:00.000Z | 2025-09-03T22:13:42.000Z |
| msrc_cve-2024-35866 | smb: client: fix potential UAF in cifs_dump_full_key() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:12:44.000Z |
| msrc_cve-2023-29543 | An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. | 2023-06-01T07:00:00.000Z | 2025-09-03T22:12:19.000Z |
| msrc_cve-2024-40977 | wifi: mt76: mt7921s: fix potential hung tasks during chip recovery | 2024-07-01T07:00:00.000Z | 2025-09-03T22:11:37.000Z |
| msrc_cve-2023-52596 | sysctl: Fix out of bounds access for empty sysctl registers | 2024-03-02T08:00:00.000Z | 2025-09-03T22:11:24.000Z |
| msrc_cve-2025-6498 | HTACG tidy-html5 alloc.c defaultAlloc memory leak | 2025-06-02T00:00:00.000Z | 2025-09-03T22:10:38.000Z |
| msrc_cve-2024-6611 | A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2025-09-03T22:10:27.000Z |
| msrc_cve-2020-10723 | A memory corruption issue was found in DPDK versions 17.05 and above | 2020-05-02T00:00:00.000Z | 2025-09-03T22:10:21.000Z |
| msrc_cve-2025-21861 | mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() | 2025-03-02T00:00:00.000Z | 2025-09-03T22:10:12.000Z |
| msrc_cve-2021-47432 | lib/generic-radix-tree.c: Don't overflow in peek() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:09:22.000Z |
| msrc_cve-2023-52488 | serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO | 2024-02-02T08:00:00.000Z | 2025-09-03T22:09:17.000Z |
| msrc_cve-2024-50183 | scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance | 2024-11-02T00:00:00.000Z | 2025-09-03T22:08:49.000Z |
| msrc_cve-2025-22104 | ibmvnic: Use kernel helpers for hex dumps | 2025-04-02T00:00:00.000Z | 2025-09-03T22:08:41.000Z |
| msrc_cve-2024-38557 | net/mlx5: Reload only IB representors upon lag disable/enable | 2024-06-02T07:00:00.000Z | 2025-09-03T22:08:20.000Z |
| msrc_cve-2025-38396 | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass | 2025-07-02T00:00:00.000Z | 2025-09-03T22:07:59.000Z |
| msrc_cve-2025-38203 | jfs: Fix null-ptr-deref in jfs_ioc_trim | 2025-07-02T00:00:00.000Z | 2025-09-03T22:07:31.000Z |
| msrc_cve-2024-5690 | By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. | 2024-06-02T07:00:00.000Z | 2025-09-03T22:07:20.000Z |
| msrc_cve-2025-3770 | SMM IDT Privilege Escalation Vulnerability | 2025-08-02T00:00:00.000Z | 2025-09-03T22:07:10.000Z |
| msrc_cve-2024-34155 | Stack exhaustion in all Parse functions in go/parser | 2024-09-01T07:00:00.000Z | 2025-09-03T22:07:10.000Z |
| msrc_cve-2024-35862 | smb: client: fix potential UAF in smb2_is_network_name_deleted() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:07:06.000Z |
| msrc_cve-2024-2614 | Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. | 2024-03-02T08:00:00.000Z | 2025-09-03T22:07:01.000Z |
| msrc_cve-2024-44955 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2024-09-01T07:00:00.000Z | 2025-09-03T22:07:00.000Z |
| msrc_cve-2025-4563 | Nodes can bypass dynamic resource allocation authorization checks | 2025-06-02T00:00:00.000Z | 2025-09-03T22:06:56.000Z |
| msrc_cve-2024-26836 | platform/x86: think-lmi: Fix password opcode ordering for workstations | 2024-04-02T07:00:00.000Z | 2025-09-03T22:06:28.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202402-1471 | Transient DOS in Audio when invoking callback function of ASM driver. AQT1000 firmware, A… | 2024-02-15T22:56:43.227000Z |
| var-202402-1489 | Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4… | 2024-02-15T22:52:40.576000Z |
| var-202402-1488 | Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to versio… | 2024-02-15T19:09:43.974000Z |
| var-202106-1773 | D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-… | 2024-02-14T23:10:49.539000Z |
| var-201311-0339 | jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 bef… | 2024-02-14T23:10:01.500000Z |
| var-201801-1518 | diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540… | 2024-02-14T23:09:39.817000Z |
| var-200607-0468 | Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device han… | 2024-02-14T23:09:27.252000Z |
| var-200605-0266 | Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restr… | 2024-02-14T23:09:27.582000Z |
| var-201705-3686 | On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can b… | 2024-02-14T23:09:18.558000Z |
| var-202207-0880 | A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) … | 2024-02-14T23:09:13.772000Z |
| var-201803-1342 | Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstr… | 2024-02-14T23:08:52.205000Z |
| var-202402-1418 | Memory corruption in Audio while calling START command on host voice PCM multiple times f… | 2024-02-14T23:08:42.198000Z |
| var-200605-0265 | Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restr… | 2024-02-14T23:08:40.203000Z |
| var-201702-0485 | An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Comm… | 2024-02-14T23:07:12.955000Z |
| var-200212-0099 | sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features,… | 2024-02-14T23:07:01.561000Z |
| var-200609-0071 | Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to… | 2024-02-14T23:06:59.409000Z |
| var-200605-0268 | ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct un… | 2024-02-14T23:06:59.761000Z |
| var-202205-1841 | D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions. of … | 2024-02-14T23:06:04.024000Z |
| var-202206-0222 | TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the f… | 2024-02-14T23:06:03.964000Z |
| var-200512-0471 | SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct req… | 2024-02-14T23:05:59.598000Z |
| var-202112-0695 | An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unaut… | 2024-02-14T23:05:13.446000Z |
| var-202110-1437 | Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for … | 2024-02-14T23:05:13.616000Z |
| var-202401-1419 | A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows … | 2024-02-14T23:05:10.292000Z |
| var-202206-0381 | TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function Reb… | 2024-02-14T23:01:52.113000Z |
| var-202402-1427 | Information disclosure in Audio while accessing AVCS services from ADSP payload. AQT1000 … | 2024-02-14T23:01:45.028000Z |
| var-200703-0036 | SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow re… | 2024-02-14T23:01:39.421000Z |
| var-200901-0055 | The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easie… | 2024-02-14T23:01:36.198000Z |
| var-201402-0420 | Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to i… | 2024-02-14T23:01:32.535000Z |
| var-201709-0895 | Intelbras WRN 150 devices allow remote attackers to read the configuration file, and cons… | 2024-02-14T23:00:01.722000Z |
| var-202106-1771 | D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bo… | 2024-02-14T22:59:53.850000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000033 | Multiple Cybozu products vulnerable to cross-site request forgery | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2005-000804 | Tomcat vulnerable in request processing | 2008-05-21T00:00+09:00 | 2008-07-07T18:04+09:00 |
| jvndb-2008-001417 | Vulnerability in Sample Code in Hitachi uCosminexus Portal Framework Manuals | 2008-07-07T10:38+09:00 | 2008-07-07T10:38+09:00 |
| jvndb-2008-000032 | nProtect : Netizen denial of service (DoS) vulnerability | 2008-07-07T10:24+09:00 | 2008-07-07T10:24+09:00 |
| jvndb-2008-000031 | CGIWrap error page cross-site scripting vulnerability | 2008-06-20T13:46+09:00 | 2008-06-20T13:46+09:00 |
| jvndb-2008-000030 | BlognPlus SQL injection vulnerability | 2008-06-20T13:45+09:00 | 2008-06-20T13:45+09:00 |
| jvndb-2007-000818 | Flash Player allows to send arbitrary HTTP headers | 2008-05-21T00:00+09:00 | 2008-06-20T13:34+09:00 |
| jvndb-2008-000029 | Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history | 2008-06-10T13:59+09:00 | 2008-06-10T13:59+09:00 |
| jvndb-2006-000639 | Pixelpost cross-site scripting vulnerability | 2008-06-10T13:57+09:00 | 2008-06-10T13:57+09:00 |
| jvndb-2007-000329 | Java Web Start vulnerable to execution of unauthorized system classes | 2008-05-21T00:00+09:00 | 2008-06-06T16:22+09:00 |
| jvndb-2008-000028 | WEB MART from KENT WEB vulnerable to cross-site scripting | 2008-06-06T12:01+09:00 | 2008-06-06T12:01+09:00 |
| jvndb-2008-001350 | Hitachi Groupmax Collaboration Products Cross-Site Scripting Vulnerability | 2008-06-06T12:00+09:00 | 2008-06-06T12:00+09:00 |
| jvndb-2008-001349 | XMAP3 Denial of Service (DoS) Vulneability | 2008-06-06T12:00+09:00 | 2008-06-06T12:00+09:00 |
| jvndb-2008-001348 | Groupmax World Wide Web Desktop/BUNSHOKANRI(=DocumentManagement) Cross-Site Scripting Vulnerability | 2008-06-06T12:00+09:00 | 2008-06-06T12:00+09:00 |
| jvndb-2008-001347 | JP1/Cm2/Network Node Manager Web Coordinated Function Multiple Vulnerabilities | 2008-06-06T12:00+09:00 | 2008-06-06T12:00+09:00 |
| jvndb-2008-001313 | JP1/Cm2/Network Node Manager Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:34+09:00 |
| jvndb-2008-000027 | Cross-site scripting vulnerabilities in multiple Bluemoon Inc. XOOPS modules | 2008-05-21T00:00+09:00 | 2008-05-21T11:34+09:00 |
| jvndb-2008-000023 | Sony mylo COM-2 does not verify server SSL certificate | 2008-05-21T00:00+09:00 | 2008-05-21T11:34+09:00 |
| jvndb-2008-000022 | Lhaplus buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000020 | DesignForm cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000019 | PerlMailer cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000017 | Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication | 2008-05-21T00:00+09:00 | 2008-05-21T11:32+09:00 |
| jvndb-2008-000015 | BFup ActiveX Control buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:32+09:00 |
| jvndb-2008-000013 | FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers | 2008-05-21T00:00+09:00 | 2008-05-21T11:31+09:00 |
| jvndb-2008-000010 | Google Desktop cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:31+09:00 |
| jvndb-2008-000004 | Zimbra Collaboration Suite script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:30+09:00 |
| jvndb-2008-000003 | MTCMS WYSIWYG Editor cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:30+09:00 |
| jvndb-2008-001150 | JP1/HIBUN Encryption/Decryption and Removable Media Control Malfunction Problems | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-001097 | SEWB3/PLATFORM Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-001096 | EUR Print Manager Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0814-1 | Security update for python | 2025-03-10T08:35:29Z | 2025-03-10T08:35:29Z |
| suse-su-2025:0813-1 | Security update for buildah | 2025-03-10T08:35:12Z | 2025-03-10T08:35:12Z |
| suse-su-2025:0812-1 | Security update for buildah | 2025-03-10T08:34:52Z | 2025-03-10T08:34:52Z |
| suse-su-2025:0811-1 | Security update for buildah | 2025-03-10T08:34:21Z | 2025-03-10T08:34:21Z |
| suse-su-2025:20236-1 | Security update for glibc | 2025-03-07T17:09:19Z | 2025-03-07T17:09:19Z |
| suse-su-2025:20235-1 | Security update for pcp | 2025-03-07T16:45:51Z | 2025-03-07T16:45:51Z |
| suse-su-2025:20233-1 | Security update for openssl-3 | 2025-03-07T16:29:39Z | 2025-03-07T16:29:39Z |
| suse-su-2025:20136-1 | Security update for pcr-oracle, shim | 2025-03-07T15:31:20Z | 2025-03-07T15:31:20Z |
| suse-su-2025:0803-1 | Security update for go1.23 | 2025-03-06T14:05:44Z | 2025-03-06T14:05:44Z |
| suse-su-2025:0802-1 | Security update for go1.24 | 2025-03-06T14:05:31Z | 2025-03-06T14:05:31Z |
| suse-su-2025:0801-1 | Security update for pcp | 2025-03-06T14:04:47Z | 2025-03-06T14:04:47Z |
| suse-ru-2025:0800-1 | Recommended update for python3-M2Crypto | 2025-03-06T13:49:15Z | 2025-03-06T13:49:15Z |
| suse-su-2025:0798-1 | Security update for emacs | 2025-03-06T13:04:36Z | 2025-03-06T13:04:36Z |
| suse-ru-2025:0796-1 | Recommended update for python3-M2Crypto | 2025-03-06T12:28:11Z | 2025-03-06T12:28:11Z |
| suse-ru-2025:0791-1 | Recommended update 4.3.15 for Multi-Linux Manager Client Tools | 2025-03-06T05:28:17Z | 2025-03-06T05:28:17Z |
| suse-su-2025:20135-1 | Security update for glibc | 2025-03-05T16:35:03Z | 2025-03-05T16:35:03Z |
| suse-su-2025:20134-1 | Security update for gstreamer-plugins-base | 2025-03-05T16:07:27Z | 2025-03-05T16:07:27Z |
| suse-su-2025:20133-1 | Security update for pcp | 2025-03-05T16:01:50Z | 2025-03-05T16:01:50Z |
| suse-su-2025:0788-1 | Security update for MozillaFirefox | 2025-03-05T15:30:33Z | 2025-03-05T15:30:33Z |
| suse-su-2025:20232-1 | Security update for glib2 | 2025-03-05T15:26:09Z | 2025-03-05T15:26:09Z |
| suse-su-2025:20231-1 | Security update for pam_u2f | 2025-03-05T14:56:53Z | 2025-03-05T14:56:53Z |
| suse-su-2025:20229-1 | Security update for pam | 2025-03-05T14:53:57Z | 2025-03-05T14:53:57Z |
| suse-su-2025:20230-1 | Security update for haproxy | 2025-03-05T14:52:30Z | 2025-03-05T14:52:30Z |
| suse-su-2025:0786-1 | Security update for podman | 2025-03-05T13:06:45Z | 2025-03-05T13:06:45Z |
| suse-su-2025:0785-1 | Security update for podman | 2025-03-05T13:06:03Z | 2025-03-05T13:06:03Z |
| suse-su-2025:0784-1 | Security update for the Linux Kernel | 2025-03-05T13:04:51Z | 2025-03-05T13:04:51Z |
| suse-su-2025:0783-1 | Security update for MozillaFirefox | 2025-03-05T10:59:41Z | 2025-03-05T10:59:41Z |
| suse-su-2025:0776-1 | Security update for docker | 2025-03-04T14:55:49Z | 2025-03-04T14:55:49Z |
| suse-su-2025:0775-1 | Security update for podman | 2025-03-04T12:51:39Z | 2025-03-04T12:51:39Z |
| suse-su-2025:20132-1 | Security update for pam_u2f | 2025-03-04T08:28:37Z | 2025-03-04T08:28:37Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13249-1 | bind-9.18.19-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13248-1 | python312-3.12.0rc3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13247-1 | ghostscript-9.56.1-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13246-1 | ghc-pandoc-3.1.3-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13245-1 | kernel-devel-6.5.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13244-1 | ungoogled-chromium-116.0.5845.187-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13243-1 | postgresql15-15.4-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13242-1 | chromedriver-116.0.5845.187-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13241-1 | libopenssl-1_1-devel-1.1.1w-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13240-1 | xterm-384-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13239-1 | sonobuoy-0.56.16-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13238-1 | frr-8.4-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13237-1 | python310-certifi-2023.7.22-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13236-1 | python-2.7.18-38.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13235-1 | cpp7-7.5.0+r278197-15.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13234-1 | cpp13-13.2.1+git7813-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13233-1 | cpp12-12.3.0+git1204-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13232-1 | ungoogled-chromium-116.0.5845.179-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13231-1 | libsharpyuv0-1.3.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13230-1 | curl-8.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13229-1 | chromedriver-116.0.5845.187-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13228-1 | MozillaThunderbird-115.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13227-1 | MozillaFirefox-117.0.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13226-1 | gvim-9.0.1894-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13225-1 | velero-1.11.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13224-1 | python310-Brotli-1.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13223-1 | libmca_common_dstore1-3.2.3-11.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13222-1 | mutt-2.2.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13221-1 | libeconf-devel-0.5.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13220-1 | python310-numpy-1.25.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23152 | Small CRM注册页面SQL注入漏洞 | 2024-04-16 | 2025-10-09 |
| cnvd-2025-23151 | Small CRM SQL注入漏洞（CNVD-2025-23151） | 2024-04-16 | 2025-10-09 |
| cnvd-2025-23150 | Small CRM admin/index.php文件SQL注入漏洞 | 2024-12-30 | 2025-10-09 |
| cnvd-2025-23149 | Small CRM /admin/quote-details.php文件SQL注入漏洞 | 2024-12-30 | 2025-10-09 |
| cnvd-2025-23148 | Small CRM /admin/edit-user.php文件SQL注入漏洞 | 2024-12-30 | 2025-10-09 |
| cnvd-2025-23147 | Small CRM profile.php文件跨站脚本漏洞 | 2025-02-17 | 2025-10-09 |
| cnvd-2025-23146 | Small CRM /admin/manage-tickets.php文件SQL注入漏洞 | 2025-05-30 | 2025-10-09 |
| cnvd-2025-23145 | Park Ticketing Management System foreigner-bwdates-reports-details.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-09 |
| cnvd-2025-23144 | NVIDIA Triton Inference Server目录遍历漏洞 | 2024-03-05 | 2025-10-09 |
| cnvd-2025-23143 | NVIDIA Triton Inference Server拒绝服务漏洞 | 2024-05-24 | 2025-10-09 |
| cnvd-2025-23142 | NVIDIA Triton Inference Server权限提升漏洞 | 2024-05-24 | 2025-10-09 |
| cnvd-2025-23141 | NVIDIA Triton Inference Server存在未明漏洞（CNVD-2025-23141） | 2024-05-24 | 2025-10-09 |
| cnvd-2025-23140 | NVIDIA Triton Inference Server存在未明漏洞（CNVD-2025-23140） | 2024-06-17 | 2025-10-09 |
| cnvd-2025-23139 | NVIDIA Triton Inference Server存在未明漏洞 | 2024-06-17 | 2025-10-09 |
| cnvd-2025-23138 | NVIDIA Triton Inference Server越界读取漏洞 | 2024-10-17 | 2025-10-09 |
| cnvd-2025-23137 | NVIDIA Triton Inference Server输入验证错误漏洞（CNVD-2025-23137） | 2025-02-17 | 2025-10-09 |
| cnvd-2025-23136 | NVIDIA Triton Inference Server输入验证错误漏洞（CNVD-2025-23136） | 2025-09-19 | 2025-10-09 |
| cnvd-2025-23135 | NVIDIA Triton Inference Server输入验证错误漏洞 | 2025-09-19 | 2025-10-09 |
| cnvd-2025-23134 | NVIDIA Triton Inference Server越界写入漏洞 | 2025-09-19 | 2025-10-09 |
| cnvd-2025-23133 | NVIDIA Triton Inference Server访问控制错误漏洞 | 2025-09-19 | 2025-10-09 |
| cnvd-2025-23132 | Grav CMS远程代码执行漏洞 | 2025-08-18 | 2025-10-09 |
| cnvd-2025-23131 | Tigo Energy Cloud Connect Advanced命令注入漏洞 | 2025-08-18 | 2025-10-09 |
| cnvd-2025-23130 | Belkin F9K1009和Belkin F9K1010硬编码凭据漏洞 | 2025-08-15 | 2025-10-09 |
| cnvd-2025-23129 | Ghost目录遍历漏洞 | 2023-05-11 | 2025-10-09 |
| cnvd-2025-23128 | Ghost任意文件读取漏洞 | 2023-08-17 | 2025-10-09 |
| cnvd-2025-23127 | BigAntSoft BigAnt office messenger SQL注入漏洞 | 2025-01-16 | 2025-10-09 |
| cnvd-2025-23126 | Tenda AC18 form_fast_setting_wifi_set方法缓冲区溢出漏洞 | 2024-03-27 | 2025-10-09 |
| cnvd-2025-23125 | Tenda AC18 formsetUsbUnload方法命令注入漏洞 | 2024-03-27 | 2025-10-09 |
| cnvd-2025-23124 | Tenda AC18 /goform/exeCommand命令注入漏洞 | 2024-04-10 | 2025-10-09 |
| cnvd-2025-23123 | Tenda AC18堆栈缓冲区溢出漏洞 | 2024-07-18 | 2025-10-09 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0900 | Multiples vulnérabilités dans Spring Framework | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0895 | Vulnérabilité dans OpenSSL | 2024-10-17T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0907 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0906 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0905 | Multiples vulnérabilités dans les produits Moxa | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0904 | Multiples vulnérabilités dans Foxit PDF Editor | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0903 | Multiples vulnérabilités dans les produits IBM | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0902 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0901 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0900 | Multiples vulnérabilités dans Spring Framework | 2024-10-18T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| CERTFR-2024-AVI-0895 | Vulnérabilité dans OpenSSL | 2024-10-17T00:00:00.000000 | 2024-10-18T00:00:00.000000 |
| certfr-2024-avi-0898 | Multiples vulnérabilités dans Google Pixel | 2024-10-17T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| certfr-2024-avi-0897 | Multiples vulnérabilités dans les produits Cisco | 2024-10-17T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| certfr-2024-avi-0896 | Vulnérabilité dans VMware HCX | 2024-10-17T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| certfr-2024-avi-0894 | Vulnérabilité dans Drupal Core | 2024-10-17T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| certfr-2024-avi-0877 | Multiples Vulnérabilités dans Mozilla Firefox | 2024-10-15T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| CERTFR-2024-AVI-0898 | Multiples vulnérabilités dans Google Pixel | 2024-10-17T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| CERTFR-2024-AVI-0897 | Multiples vulnérabilités dans les produits Cisco | 2024-10-17T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| CERTFR-2024-AVI-0896 | Vulnérabilité dans VMware HCX | 2024-10-17T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| CERTFR-2024-AVI-0894 | Vulnérabilité dans Drupal Core | 2024-10-17T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| CERTFR-2024-AVI-0877 | Multiples Vulnérabilités dans Mozilla Firefox | 2024-10-15T00:00:00.000000 | 2024-10-17T00:00:00.000000 |
| certfr-2024-avi-0892 | Multiples vulnérabilités dans les produits SolarWinds | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0891 | Vulnérabilité dans Synacor Zimbra Desktop | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0890 | Multiples vulnérabilités dans les produits Atlassian | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0889 | Multiples vulnérabilités dans Ruby on Rails | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0888 | Multiples vulnérabilités dans Oracle Weblogic | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0887 | Multiples vulnérabilités dans Oracle Virtualization | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0886 | Multiples vulnérabilités dans Oracle Systems | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0885 | Multiples vulnérabilités dans Oracle PeopleSoft | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0884 | Multiples vulnérabilités dans Oracle MySQL | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |