Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62073 |
4.3 (3.1)
|
WordPress MeetingHub plugin <= 1.23.9 - Broken Access … |
Sovlix |
MeetingHub |
2025-10-22T14:32:54.713Z | 2026-01-20T14:28:14.299Z |
| CVE-2025-62071 |
4.3 (3.1)
|
WordPress Social proof testimonials and reviews by Rep… |
Repuso |
Social proof testimonials and reviews by Repuso |
2025-10-22T14:32:54.166Z | 2026-01-20T14:28:14.253Z |
| CVE-2025-62067 |
8.1 (3.1)
|
WordPress Savory theme <= 2.5 - Local File Inclusion v… |
Elated-Themes |
Savory |
2025-11-06T15:55:55.213Z | 2026-01-20T14:28:14.287Z |
| CVE-2025-62061 |
4.3 (3.1)
|
WordPress Product Catalog Simple plugin <= 1.8.4 - Cro… |
impleCode |
Product Catalog Simple |
2025-10-22T14:32:52.854Z | 2026-01-20T14:28:14.011Z |
| CVE-2025-62052 |
4.3 (3.1)
|
WordPress One Page Express Companion plugin <= 1.6.43 … |
Horea Radu |
One Page Express Companion |
2025-10-22T14:32:51.853Z | 2026-01-20T14:28:14.063Z |
| CVE-2025-62049 |
6.5 (3.1)
|
WordPress Cost Calculator Builder plugin <= 3.5.32 - B… |
Stylemix |
Cost Calculator Builder |
2025-11-06T15:55:44.281Z | 2026-01-20T14:28:14.242Z |
| CVE-2025-62048 |
5.4 (3.1)
|
WordPress SmartCrawl plugin <= 3.14.3 - Broken Access … |
WPMU DEV - Your All-in-One WordPress Platform |
SmartCrawl |
2025-10-22T14:32:51.617Z | 2026-01-20T14:28:14.203Z |
| CVE-2025-62044 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:39.461Z | 2026-01-20T14:28:14.135Z |
| CVE-2025-62081 |
5.3 (3.1)
|
WordPress Live Shopping & Shoppable Videos For WooComm… |
Channelize.io Team |
Live Shopping & Shoppable Videos For WooCommerce |
2025-12-31T15:00:18.960Z | 2026-01-20T14:28:13.605Z |
| CVE-2025-62079 |
5.3 (3.1)
|
WordPress WP Export Categories & Taxonomies plugin <= … |
Damian |
WP Export Categories & Taxonomies |
2025-12-31T15:37:27.530Z | 2026-01-20T14:28:13.888Z |
| CVE-2025-62078 |
4.3 (3.1)
|
WordPress Easy Upload Files During Checkout plugin <= … |
Fahad Mahmood |
Easy Upload Files During Checkout |
2025-12-31T16:32:00.958Z | 2026-01-20T14:28:13.715Z |
| CVE-2025-62076 |
7.1 (3.1)
|
WordPress Simple Payment plugin <= 2.4.6 - Cross Site … |
Ido Kobelkowsky |
Simple Payment |
2025-11-06T15:55:59.012Z | 2026-01-20T14:28:13.561Z |
| CVE-2025-62075 |
7.3 (3.1)
|
WordPress Simple Payment plugin <= 2.4.6 - Local File … |
Ido Kobelkowsky |
Simple Payment |
2025-11-06T15:55:57.636Z | 2026-01-20T14:28:13.948Z |
| CVE-2025-62074 |
7.1 (3.1)
|
WordPress WPMobile.App plugin <= 11.71 - Cross Site Sc… |
Amauri |
WPMobile.App |
2025-11-06T15:55:56.024Z | 2026-01-20T14:28:13.659Z |
| CVE-2025-62072 |
4.3 (3.1)
|
WordPress Front End Users plugin <= 3.2.33 - Broken Ac… |
Rustaurius |
Front End Users |
2025-10-22T14:32:54.422Z | 2026-01-20T14:28:13.965Z |
| CVE-2025-62070 |
4.3 (3.1)
|
WordPress WowRevenue plugin <= 1.2.13 - Broken Access … |
WPXPO |
WowRevenue |
2025-10-22T14:32:53.947Z | 2026-01-20T14:28:13.568Z |
| CVE-2025-62069 |
6.5 (3.1)
|
WordPress MDTF plugin <= 1.3.3.8 - Cross Site Scriptin… |
RealMag777 |
MDTF |
2025-10-22T14:32:53.749Z | 2026-01-20T14:28:13.746Z |
| CVE-2025-62068 |
6.5 (3.1)
|
WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripti… |
E2Pdf |
e2pdf |
2025-10-22T14:32:53.513Z | 2026-01-20T14:28:13.967Z |
| CVE-2025-62066 |
7.4 (3.1)
|
WordPress Revolution theme < 2.5.8 - Local File Inclus… |
fuelthemes |
Revolution |
2025-11-06T15:55:54.429Z | 2026-01-20T14:28:13.588Z |
| CVE-2025-62065 |
9.9 (3.1)
|
WordPress RTMKit plugin <= 1.6.5 - Arbitrary File Uplo… |
Rometheme |
RTMKit |
2025-11-06T15:55:53.302Z | 2026-01-20T14:28:13.935Z |
| CVE-2025-62064 |
9.8 (3.1)
|
WordPress Search & Go theme <= 2.7 - Broken Authentica… |
Elated-Themes |
Search & Go |
2025-11-06T15:55:51.676Z | 2026-01-20T14:28:13.941Z |
| CVE-2025-62063 |
6.5 (3.1)
|
WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 -… |
WP Travel |
WP Travel Gutenberg Blocks |
2025-10-22T14:32:53.303Z | 2026-01-20T14:28:13.735Z |
| CVE-2025-62062 |
5.3 (3.1)
|
WordPress Easy Post Submission plugin <= 1.7.0 - Sensi… |
ThemeRuby |
Easy Post Submission |
2025-10-22T14:32:53.065Z | 2026-01-20T14:28:13.826Z |
| CVE-2025-62060 |
6.5 (3.1)
|
WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scri… |
Themepoints |
Tab Ultimate |
2025-10-22T14:32:52.503Z | 2026-01-20T14:28:13.775Z |
| CVE-2025-62059 |
7.1 (3.1)
|
WordPress SureRank plugin <= 1.3.2 - Cross Site Script… |
Brainstorm Force |
SureRank |
2025-11-06T15:55:51.134Z | 2026-01-20T14:28:13.884Z |
| CVE-2025-62058 |
6.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.269Z | 2026-01-20T14:28:13.789Z |
| CVE-2025-62057 |
7.1 (3.1)
|
WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-11-06T15:55:50.427Z | 2026-01-20T14:28:13.708Z |
| CVE-2025-62055 |
8.1 (3.1)
|
WordPress Academist theme < 1.3 - Local File Inclusion… |
Elated-Themes |
Academist |
2025-11-06T15:55:49.844Z | 2026-01-20T14:28:13.866Z |
| CVE-2025-62054 |
7.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin <= 4.1.8… |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.067Z | 2026-01-20T14:28:13.941Z |
| CVE-2025-62053 |
8 (3.1)
|
WordPress Houzez theme < 4.2.0 - Local File Inclusion … |
favethemes |
Houzez |
2025-11-06T15:55:48.526Z | 2026-01-20T14:28:13.854Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68974 |
9.8 (3.1)
|
WordPress WordPress Social Login and Register plugin <… |
miniOrange |
WordPress Social Login and Register |
2025-12-30T10:47:47.632Z | 2026-01-20T14:28:29.124Z |
| CVE-2025-68897 |
9.9 (3.1)
|
WordPress IF AS Shortcode plugin <= 1.2 - Remote Code … |
Mohammad I. Okfie |
IF AS Shortcode |
2025-12-29T15:55:13.564Z | 2026-01-20T14:28:29.145Z |
| CVE-2025-68893 |
4.9 (3.1)
|
WordPress WordPress Image shrinker plugin <= 1.1.0 - S… |
HETWORKS |
WordPress Image shrinker |
2025-12-29T15:56:47.504Z | 2026-01-20T14:28:29.120Z |
| CVE-2025-68892 |
6.1 (3.1)
|
WordPress Scroll rss excerpt plugin <= 5.0 - Reflected… |
gopiplus@hotmail.com |
Scroll rss excerpt |
2026-01-08T09:17:54.424Z | 2026-01-20T14:28:29.092Z |
| CVE-2025-68891 |
6.1 (3.1)
|
WordPress WP App Bar plugin <= 1.5 - Reflected Cross S… |
Ryan Sutana |
WP App Bar |
2026-01-08T09:17:54.250Z | 2026-01-20T14:28:29.132Z |
| CVE-2025-68890 |
6.1 (3.1)
|
WordPress e-shops plugin <= 1.0.4 - Reflected Cross Si… |
hands01 |
e-shops |
2026-01-08T09:17:54.055Z | 2026-01-20T14:28:29.113Z |
| CVE-2025-68889 |
7.1 (3.1)
|
WordPress Pinpoll plugin <= 4.0.0 - Cross Site Scripti… |
Pinpoll |
Pinpoll |
2026-01-08T09:17:53.868Z | 2026-01-20T14:28:29.129Z |
| CVE-2025-68887 |
7.1 (3.1)
|
WordPress WP-BusinessDirectory plugin <= 3.1.5 - Cross… |
CMSJunkie - WordPress Business Directory Plugins |
WP-BusinessDirectory |
2026-01-08T09:17:53.686Z | 2026-01-20T14:28:29.134Z |
| CVE-2025-68885 |
7.1 (3.1)
|
WordPress Custom Post Status plugin <= 1.1.0 - Cross S… |
Page Carbajal |
Custom Post Status |
2025-12-31T05:34:27.042Z | 2026-01-20T14:28:29.095Z |
| CVE-2025-68879 |
7.1 (3.1)
|
WordPress Content Grid Slider plugin <= 1.5 - Reflecte… |
Councilsoft |
Content Grid Slider |
2025-12-29T15:58:57.851Z | 2026-01-20T14:28:29.125Z |
| CVE-2025-68878 |
7.1 (3.1)
|
WordPress Advanced Custom CSS plugin <= 1.1.0 - Reflec… |
Prasadkirpekar |
Advanced Custom CSS |
2025-12-29T16:00:20.652Z | 2026-01-20T14:28:29.131Z |
| CVE-2025-68877 |
7.5 (3.1)
|
WordPress CedCommerce Integration for Good Market plug… |
CedCommerce |
CedCommerce Integration for Good Market |
2025-12-29T16:03:22.206Z | 2026-01-20T14:28:29.096Z |
| CVE-2025-68876 |
7.1 (3.1)
|
WordPress Invelity SPS connect plugin <= 1.0.8 - Refle… |
INVELITY |
Invelity SPS connect |
2025-12-29T16:05:23.287Z | 2026-01-20T14:28:29.160Z |
| CVE-2025-68875 |
5.4 (3.1)
|
WordPress Flaming Password Reset plugin <= 1.0.3 - Cro… |
jcaruso001 |
Flaming Password Reset |
2026-01-08T09:17:52.299Z | 2026-01-20T14:28:29.096Z |
| CVE-2025-68874 |
7.1 (3.1)
|
WordPress Visitor Stats Widget plugin <= 1.5.0 - Refle… |
Shahjada |
Visitor Stats Widget |
2026-01-08T09:17:52.109Z | 2026-01-20T14:28:29.122Z |
| CVE-2025-68873 |
7.1 (3.1)
|
WordPress PRIMER by chloédigital plugin <= 1.0.25 - Re… |
chloédigital |
PRIMER by chloédigital |
2026-01-08T09:17:51.924Z | 2026-01-20T14:28:29.054Z |
| CVE-2025-68870 |
7.5 (3.1)
|
WordPress CookieHint WP plugin <= 1.0.0 - Local File I… |
reDim GmbH |
CookieHint WP |
2025-12-29T16:09:05.270Z | 2026-01-20T14:28:28.988Z |
| CVE-2025-68868 |
6.5 (3.1)
|
WordPress Wp Text Slider Widget plugin <= 1.0 - Cross … |
Codeaffairs |
Wp Text Slider Widget |
2025-12-29T16:12:32.664Z | 2026-01-20T14:28:29.039Z |
| CVE-2025-68867 |
6.5 (3.1)
|
WordPress Effect Maker plugin <= 1.2.1 - Cross Site Sc… |
anibalwainstein |
Effect Maker |
2026-01-08T09:17:51.313Z | 2026-01-20T14:28:29.078Z |
| CVE-2025-68865 |
9.3 (3.1)
|
WordPress Infility Global plugin <= 2.14.48 - SQL Inje… |
Infility |
Infility Global |
2026-01-05T10:44:34.184Z | 2026-01-20T14:28:28.951Z |
| CVE-2025-68861 |
7.1 (3.1)
|
WordPress Plugin Optimizer plugin <= 1.3.7 - Broken Ac… |
Plugin Optimizer |
Plugin Optimizer |
2025-12-29T17:23:08.542Z | 2026-01-20T14:28:28.999Z |
| CVE-2025-68860 |
9.8 (3.1)
|
WordPress Mobile builder plugin <= 1.4.2 - Broken Auth… |
Mobile Builder |
Mobile builder |
2025-12-29T21:08:56.358Z | 2026-01-20T14:28:28.984Z |
| CVE-2025-68850 |
7.5 (3.1)
|
WordPress Sell Downloads plugin <= 1.1.12 - Broken Ac… |
Codepeople |
Sell Downloads |
2026-01-05T10:43:35.490Z | 2026-01-20T14:28:28.893Z |
| CVE-2025-68608 |
8.8 (3.1)
|
WordPress Userpro plugin <= 5.1.9 - Broken Access Cont… |
DeluxeThemes |
Userpro |
2025-12-24T12:31:31.259Z | 2026-01-20T14:28:29.001Z |
| CVE-2025-68607 |
6.5 (3.1)
|
WordPress Custom Field Template plugin <= 2.7.5 - Cros… |
Hiroaki Miyashita |
Custom Field Template |
2025-12-29T21:10:50.618Z | 2026-01-20T14:28:28.975Z |
| CVE-2025-68606 |
7.5 (3.1)
|
WordPress PostX plugin <= 5.0.3 - Sensitive Data Expos… |
WPXPO |
PostX |
2025-12-24T13:10:48.784Z | 2026-01-20T14:28:28.845Z |
| CVE-2025-68605 |
5.4 (3.1)
|
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3… |
PickPlugins |
Post Grid and Gutenberg Blocks |
2025-12-24T13:10:48.261Z | 2026-01-20T14:28:28.908Z |
| CVE-2025-68603 |
8.1 (3.1)
|
WordPress Editorial Calendar plugin <= 3.8.8 - Broken … |
Marketing Fire |
Editorial Calendar |
2025-12-24T13:10:47.744Z | 2026-01-20T14:28:29.006Z |
| CVE-2025-68602 |
6.1 (3.1)
|
WordPress Accept Donations with PayPal plugin <= 1.5.1… |
Scott Paterson |
Accept Donations with PayPal |
2025-12-24T13:10:47.134Z | 2026-01-20T14:28:29.023Z |
| CVE-2025-68601 |
8.8 (3.1)
|
WordPress Five Star Restaurant Reservations plugin <= … |
Rustaurius |
Five Star Restaurant Reservations |
2025-12-24T13:10:46.860Z | 2026-01-20T14:28:28.891Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68861 | Missing Authorization vulnerability in Plugin Optimizer allows Exploiting Incorrectly Configured Ac… | 2025-12-29T18:15:43.740 | 2026-01-20T15:19:52.697 |
| fkie_cve-2025-68860 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile bui… | 2025-12-29T22:15:43.597 | 2026-01-20T15:19:52.593 |
| fkie_cve-2025-68850 | Missing Authorization vulnerability in Codepeople Sell Downloads allows Exploiting Incorrectly Conf… | 2026-01-05T11:17:42.120 | 2026-01-20T15:19:52.497 |
| fkie_cve-2025-68608 | Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly C… | 2025-12-24T13:16:28.313 | 2026-01-20T15:19:52.360 |
| fkie_cve-2025-68607 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-29T22:15:43.450 | 2026-01-20T15:19:52.240 |
| fkie_cve-2025-68606 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO P… | 2025-12-24T13:16:28.197 | 2026-01-20T15:19:52.100 |
| fkie_cve-2025-68605 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:28.060 | 2026-01-20T15:19:51.950 |
| fkie_cve-2025-68603 | Missing Authorization vulnerability in Marketing Fire Editorial Calendar editorial-calendar allows … | 2025-12-24T13:16:27.920 | 2026-01-20T15:19:51.780 |
| fkie_cve-2025-68602 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Accept Donation… | 2025-12-24T13:16:27.770 | 2026-01-20T15:19:51.623 |
| fkie_cve-2025-68601 | Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Five Star Restaurant Reservations res… | 2025-12-24T13:16:27.650 | 2026-01-20T15:19:51.467 |
| fkie_cve-2025-68600 | Server-Side Request Forgery (SSRF) vulnerability in Yannick Lefebvre Link Library link-library allo… | 2025-12-24T13:16:27.530 | 2026-01-20T15:19:51.300 |
| fkie_cve-2025-68599 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:27.413 | 2026-01-20T15:19:51.127 |
| fkie_cve-2025-68598 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:27.290 | 2026-01-20T15:19:50.967 |
| fkie_cve-2025-68597 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:27.177 | 2026-01-20T15:19:50.827 |
| fkie_cve-2025-68596 | Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly… | 2025-12-24T13:16:27.053 | 2026-01-20T15:19:50.673 |
| fkie_cve-2025-68595 | Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-w… | 2025-12-24T13:16:26.940 | 2026-01-20T15:19:50.523 |
| fkie_cve-2025-68594 | Missing Authorization vulnerability in Assaf Parag Poll, Survey & Quiz Maker Plugin by Opinion Stag… | 2025-12-24T13:16:26.813 | 2026-01-20T15:19:50.380 |
| fkie_cve-2025-68593 | Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrec… | 2025-12-24T13:16:26.697 | 2026-01-20T15:19:50.230 |
| fkie_cve-2025-68592 | Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrec… | 2025-12-24T13:16:26.573 | 2026-01-20T15:19:50.073 |
| fkie_cve-2025-68591 | Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exp… | 2025-12-24T13:16:26.457 | 2026-01-20T15:19:49.910 |
| fkie_cve-2025-68590 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:26.337 | 2026-01-20T15:19:49.757 |
| fkie_cve-2025-68589 | Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget … | 2025-12-24T13:16:26.220 | 2026-01-20T15:19:49.590 |
| fkie_cve-2025-68588 | Missing Authorization vulnerability in totalsoft TS Poll poll-wp allows Exploiting Incorrectly Conf… | 2025-12-24T13:16:26.100 | 2026-01-20T15:19:49.457 |
| fkie_cve-2025-68587 | Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured … | 2025-12-24T13:16:25.980 | 2026-01-20T15:19:49.330 |
| fkie_cve-2025-68586 | Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Config… | 2025-12-24T13:16:25.860 | 2026-01-20T15:19:49.200 |
| fkie_cve-2025-68585 | Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allow… | 2025-12-24T13:16:25.740 | 2026-01-20T15:19:49.070 |
| fkie_cve-2025-68584 | Cross-Site Request Forgery (CSRF) vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vime… | 2025-12-24T13:16:25.620 | 2026-01-20T15:19:48.943 |
| fkie_cve-2025-68583 | Cross-Site Request Forgery (CSRF) vulnerability in Tikweb Management Fast User Switching fast-user-… | 2025-12-24T13:16:25.507 | 2026-01-20T15:19:48.817 |
| fkie_cve-2025-68582 | Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploit… | 2025-12-24T13:16:25.387 | 2026-01-20T15:19:48.687 |
| fkie_cve-2025-68581 | Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-… | 2025-12-24T13:16:25.267 | 2026-01-20T15:19:48.557 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mrg9-x4ww-jcqj |
2.7 (3.1)
|
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-jvpv-fpvh-5mfh |
4.3 (3.1)
|
Missing Authorization vulnerability in f1logic Insert PHP Code Snippet insert-php-code-snippet allo… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-j8fg-qmmq-47j9 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-hp28-jqch-qhrc |
8.8 (3.1)
|
Deserialization of Untrusted Data vulnerability in Chouby Polylang polylang allows Object Injection… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-h3cx-p8jg-9mrc |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR. Advanced Database Cleaner advanced-d… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-g534-gxr9-5j65 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-fr77-chw5-pvc2 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-cx8p-42rg-pwx4 |
4.3 (3.1)
|
Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce wt-smart-coupons-for… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-6h7h-qg92-xfgr |
3.8 (3.1)
|
Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiti… | 2025-10-31T12:30:21Z | 2026-01-20T15:31:42Z |
| ghsa-5mv8-q8gm-mq6x |
4.3 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-… | 2025-10-31T12:30:21Z | 2026-01-20T15:31:42Z |
| ghsa-5c9w-xpcw-vprf |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Product Search for WooCommer… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:42Z |
| ghsa-5869-fm6w-9qxm |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-31T12:30:23Z | 2026-01-20T15:31:42Z |
| ghsa-w8qr-ffgq-7q5j |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-r8fw-gf62-v77w |
4.3 (3.1)
|
Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-q7hf-mwj3-84gh |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-pmpr-2fww-r5fw |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site … | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-ph8j-3xv5-c8gq |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce premmerce allows Cross Site … | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-pgpx-xg4v-wrhx |
5.4 (3.1)
|
Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premme… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-gvvw-5fwr-fmr3 |
4.3 (3.1)
|
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-gpvr-cwgx-r45c |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-fgrg-37hc-qf4g |
4.3 (3.1)
|
Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-8w5m-hc8r-mmm9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cros… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-8rwj-g494-3qp6 |
5.4 (3.1)
|
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-8gx7-cf2h-mfwc |
4.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fantast… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-8cr2-hpc7-v23m |
6.5 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-el… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-698r-29g4-5vv6 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-xjmw-rm34-58c8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-r6p6-v684-4gh3 |
5.3 (3.1)
|
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-q25c-mp33-wj35 |
7.6 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-ppgx-ch2f-563v |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2013-1 |
|
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allo… | ansible | 2013-09-16T19:14:00Z | 2021-07-02T02:41:32.926386Z |
| pysec-2018-34 |
|
(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and… | numpy | 2018-01-08T19:29:00Z | 2021-06-29T22:52:17.858494Z |
| pysec-2018-33 |
|
__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files … | numpy | 2018-01-08T19:29:00Z | 2021-06-29T22:52:17.794688Z |
| pysec-2017-1 |
|
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An… | numpy | 2017-08-15T16:29:00Z | 2021-06-29T22:52:17.919949Z |
| pysec-2021-104 |
|
Zope is an open-source web application server. This advisory extends the previous advisor… | zope | 2021-06-08T18:15:00Z | 2021-06-22T04:54:57.652841Z |
| pysec-2021-103 |
|
Wagtail is an open source content management system built on Django. A cross-site scripti… | wagtail | 2021-06-17T17:15:00Z | 2021-06-22T04:54:57.540693Z |
| pysec-2021-102 |
|
A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6. | localstack | 2021-05-07T05:15:00Z | 2021-06-22T04:54:56.108960Z |
| pysec-2021-101 |
|
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitra… | localstack | 2021-05-07T05:15:00Z | 2021-06-22T04:54:56.080124Z |
| pysec-2021-99 |
|
In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, valid… | django | 2021-06-08T18:15:00Z | 2021-06-22T04:54:55.488063Z |
| pysec-2021-98 |
|
Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory… | django | 2021-06-08T18:15:00Z | 2021-06-22T04:54:55.381670Z |
| pysec-2021-100 |
|
FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python ty… | fastapi | 2021-06-09T18:15:00Z | 2021-06-22T04:54:55.863034Z |
| pysec-2018-31 |
|
tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e2413052… | tlslite-ng | 2018-04-18T19:29:00Z | 2021-06-16T00:03:25.014006Z |
| pysec-2021-97 |
|
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that lead… | thefuck | 2021-06-10T11:15:00Z | 2021-06-16T00:03:24.982635Z |
| pysec-2018-29 |
|
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.… | salt | 2018-10-24T22:29:00Z | 2021-06-16T00:03:24.871222Z |
| pysec-2018-28 |
|
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an ht… | requests | 2018-10-09T17:29:00Z | 2021-06-16T00:03:24.800813Z |
| pysec-2018-25 |
|
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, … | pyspark | 2018-07-12T13:29:00Z | 2021-06-16T00:03:24.717902Z |
| pysec-2018-5 |
|
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1… | django | 2018-03-09T20:29:00Z | 2021-06-16T00:03:23.200365Z |
| pysec-2018-4 |
|
django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1… | django | 2018-02-05T03:29:00Z | 2021-06-16T00:03:23.096188Z |
| pysec-2018-16 |
|
An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.locati… | mayan-edms-ng | 2018-09-03T19:29:00Z | 2021-06-16T00:03:23.682256Z |
| pysec-2018-14 |
|
An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafte… | mayan-edms | 2018-09-03T19:29:00Z | 2021-06-16T00:03:23.733638Z |
| pysec-2018-13 |
|
An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode … | markdown2 | 2018-01-18T21:29:00Z | 2021-06-16T00:03:23.657711Z |
| pysec-2018-12 |
|
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean m… | lxml | 2018-12-02T10:29:00Z | 2021-06-16T00:03:23.627691Z |
| pysec-2018-7 |
|
webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack… | django-anymail | 2018-02-03T21:29:00Z | 2021-06-16T00:03:22.915097Z |
| pysec-2021-96 |
|
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redir… | flask-unchained | 2021-06-11T00:15:00Z | 2021-06-15T05:47:49.199835Z |
| pysec-2018-6 |
|
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1… | django | 2018-03-09T20:29:00Z | 2021-06-10T06:52:11.564894Z |
| pysec-2019-142 |
|
In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects i… | apache-airflow | 2019-02-27T18:29:00Z | 2021-06-10T06:52:05.219935Z |
| pysec-2018-21 |
|
PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, re… | pycryptodome | 2018-08-20T00:29:00Z | 2021-06-10T06:52:01.279206Z |
| pysec-2018-18 |
|
Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/st… | notebook | 2018-11-18T17:29:00Z | 2021-06-10T06:52:01.452566Z |
| pysec-2018-26 |
|
qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) cont… | qutebrowser | 2018-06-26T16:29:00Z | 2021-06-10T06:51:59.879286Z |
| pysec-2018-9 |
|
** DISPUTED ** OpenStack Keystone through 14.0.1 has a user enumeration vulnerability bec… | keystone | 2018-12-17T07:29:00Z | 2021-06-10T06:51:56.696140Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3318 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.236261Z |
| gsd-2024-3317 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.145606Z |
| gsd-2024-3316 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.141466Z |
| gsd-2024-3315 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.052577Z |
| gsd-2024-3314 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.348327Z |
| gsd-2024-3313 | SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in P… | 2024-04-11T05:03:27.386722Z |
| gsd-2024-3312 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.338663Z |
| gsd-2024-3311 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.139394Z |
| gsd-2024-3310 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.422435Z |
| gsd-2024-3309 | The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scrip… | 2024-04-11T05:03:27.176161Z |
| gsd-2024-3308 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.220288Z |
| gsd-2024-3307 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.284596Z |
| gsd-2024-3306 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.357680Z |
| gsd-2024-3305 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.286112Z |
| gsd-2024-3304 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.361839Z |
| gsd-2024-3303 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.097037Z |
| gsd-2024-3302 | There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A… | 2024-04-11T05:03:27.390670Z |
| gsd-2024-3301 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.253061Z |
| gsd-2024-3300 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.042831Z |
| gsd-2024-3299 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.396244Z |
| gsd-2024-3298 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.341830Z |
| gsd-2024-3297 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.345334Z |
| gsd-2024-3296 | A timing-based side-channel flaw exists in the rust-openssl package, which could be suffi… | 2024-04-11T05:03:27.430574Z |
| gsd-2024-3295 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.172607Z |
| gsd-2024-3294 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.266847Z |
| gsd-2024-3293 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to b… | 2024-04-11T05:03:27.159158Z |
| gsd-2024-3292 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.401534Z |
| gsd-2024-3291 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.400922Z |
| gsd-2024-3290 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.122468Z |
| gsd-2024-3289 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.390920Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-0000-REVERSING-LABS-B01ED7B6D0289EAD | 2025-12-23T08:41:04Z | 2025-12-23T08:41:04Z | |
| mal-2025-192912 | Malicious code in prometheus_client_ruby (RubyGems) | 2025-12-23T08:41:03Z | 2025-12-23T08:41:03Z |
| mal-0000-reversing-labs-eb97a25308409344 | 2025-12-23T08:41:03Z | 2025-12-23T08:41:03Z | |
| MAL-2025-192912 | Malicious code in prometheus_client_ruby (RubyGems) | 2025-12-23T08:41:03Z | 2025-12-23T08:41:03Z |
| MAL-0000-REVERSING-LABS-EB97A25308409344 | 2025-12-23T08:41:03Z | 2025-12-23T08:41:03Z | |
| mal-0000-kam193-0bdef1172fff6161 | Pentesting or research code in lanchain-openai (PyPI) | 2025-12-23T08:41:02Z | 2025-12-23T08:41:02Z |
| MAL-0000-KAM193-0BDEF1172FFF6161 | Pentesting or research code in lanchain-openai (PyPI) | 2025-12-23T08:41:02Z | 2025-12-23T08:41:02Z |
| mal-0000-reversing-labs-afc5d216211e1025 | 2025-12-23T08:41:01Z | 2025-12-23T08:41:01Z | |
| MAL-0000-REVERSING-LABS-AFC5D216211E1025 | 2025-12-23T08:41:01Z | 2025-12-23T08:41:01Z | |
| mal-2025-192911 | Malicious code in md_confluence (RubyGems) | 2025-12-23T08:41:00Z | 2025-12-23T08:41:00Z |
| mal-0000-reversing-labs-3d82836f30846a4b | 2025-12-23T08:41:00Z | 2025-12-23T08:41:00Z | |
| MAL-2025-192911 | Malicious code in md_confluence (RubyGems) | 2025-12-23T08:41:00Z | 2025-12-23T08:41:00Z |
| MAL-0000-REVERSING-LABS-3D82836F30846A4B | 2025-12-23T08:41:00Z | 2025-12-23T08:41:00Z | |
| mal-0000-reversing-labs-c8b9b3b0fc24900d | 2025-12-23T08:40:59Z | 2025-12-23T08:40:59Z | |
| mal-0000-reversing-labs-68fc0adc8f08412b | 2025-12-23T08:40:59Z | 2025-12-23T08:40:59Z | |
| MAL-0000-REVERSING-LABS-C8B9B3B0FC24900D | 2025-12-23T08:40:59Z | 2025-12-23T08:40:59Z | |
| MAL-0000-REVERSING-LABS-68FC0ADC8F08412B | 2025-12-23T08:40:59Z | 2025-12-23T08:40:59Z | |
| mal-2025-192910 | Malicious code in macklemore (RubyGems) | 2025-12-23T08:40:58Z | 2025-12-23T08:40:58Z |
| mal-0000-reversing-labs-ad866f010964bcba | 2025-12-23T08:40:58Z | 2025-12-23T08:40:58Z | |
| MAL-2025-192910 | Malicious code in macklemore (RubyGems) | 2025-12-23T08:40:58Z | 2025-12-23T08:40:58Z |
| MAL-0000-REVERSING-LABS-AD866F010964BCBA | 2025-12-23T08:40:58Z | 2025-12-23T08:40:58Z | |
| mal-2025-192909 | Malicious code in html_scrubber (RubyGems) | 2025-12-23T08:40:57Z | 2025-12-23T08:40:57Z |
| mal-0000-reversing-labs-0d3dbba9053b8321 | 2025-12-23T08:40:57Z | 2025-12-23T08:40:57Z | |
| MAL-2025-192909 | Malicious code in html_scrubber (RubyGems) | 2025-12-23T08:40:57Z | 2025-12-23T08:40:57Z |
| MAL-0000-REVERSING-LABS-0D3DBBA9053B8321 | 2025-12-23T08:40:57Z | 2025-12-23T08:40:57Z | |
| mal-2025-192908 | Malicious code in hola_rreichel3github (RubyGems) | 2025-12-23T08:40:56Z | 2025-12-23T08:40:56Z |
| mal-0000-reversing-labs-95c631ed2a21d097 | 2025-12-23T08:40:56Z | 2025-12-23T08:40:56Z | |
| MAL-2025-192908 | Malicious code in hola_rreichel3github (RubyGems) | 2025-12-23T08:40:56Z | 2025-12-23T08:40:56Z |
| MAL-0000-REVERSING-LABS-95C631ED2A21D097 | 2025-12-23T08:40:56Z | 2025-12-23T08:40:56Z | |
| mal-2025-192907 | Malicious code in hockeystick (RubyGems) | 2025-12-23T08:40:55Z | 2025-12-23T08:40:55Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0137 | Oracle Secure Backup: Schwachstelle gefährdet Vertraulichkeit | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0136 | Oracle Commerce: Schwachstelle gefährdet Vertraulichkeit | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0135 | Oracle Communications Applications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0042 | Vaultwarden: Mehrere Schwachstellen | 2025-01-09T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2024-3743 | Vaultwarden: Schwachstelle ermöglicht Privilegieneskalation | 2024-12-22T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2024-2206 | Red Hat JBoss Enterprise Anwendungsplattform: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-09-23T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2023-0524 | Oracle Java SE: Mehrere Schwachstellen | 2019-10-15T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2023-0234 | Oracle Java SE: Mehrere Schwachstellen | 2020-01-14T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2022-1303 | Oracle Java SE: Mehrere Schwachstellen | 2021-04-20T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2022-0196 | Oracle Java SE: Mehrere Schwachstellen | 2021-10-19T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0134 | Kibana: Schwachstelle ermöglicht Denial of Service | 2025-01-20T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0133 | Elasticsearch: Schwachstelle ermöglicht Denial of Service | 2025-01-20T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0064 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0020 | Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2025-01-07T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1613 | libTIFF: Mehrere Schwachstellen | 2023-06-29T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1605 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2023-06-29T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1514 | libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-06-19T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1479 | libTIFF: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2023-06-14T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2022-1858 | Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Denial of Service | 2022-10-25T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2022-0451 | Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-08-10T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0127 | Moxa Switch: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0126 | Verschiedene Tunneling Protokolle: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0125 | IBM Maximo Asset Management: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0124 | IBM App Connect Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0122 | Mattermost: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0121 | IBM Sterling Connect:Direct: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0118 | Perl: Schwachstelle ermöglicht Privilegieneskalation | 2016-07-25T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0117 | Linux Kernel: Mehrere Schwachstellen | 2017-03-07T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0116 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2017-08-30T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3087 | MediaWiki: Mehrere Schwachstellen | 2024-10-06T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:1351 | Red Hat Security Advisory: nodejs:20 security update | 2025-02-12T15:32:22+00:00 | 2026-01-21T23:28:05+00:00 |
| rhsa-2025:1321 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:37:26+00:00 | 2026-01-21T23:27:55+00:00 |
| rhsa-2025:1286 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:51:36+00:00 | 2026-01-21T23:27:54+00:00 |
| rhsa-2025:1249 | Red Hat Security Advisory: updated discovery container images | 2025-02-10T18:38:39+00:00 | 2026-01-21T23:27:49+00:00 |
| rhsa-2025:10853 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.19.0 | 2025-07-14T07:36:21+00:00 | 2026-01-21T23:27:33+00:00 |
| rhsa-2025:10020 | Red Hat Security Advisory: Network Observability 1.9.0 for OpenShift | 2025-07-01T07:28:57+00:00 | 2026-01-21T23:27:21+00:00 |
| rhsa-2025:0876 | Red Hat Security Advisory: OpenShift Container Platform 4.17.15 bug fix and security update | 2025-02-05T13:37:42+00:00 | 2026-01-21T23:27:18+00:00 |
| rhsa-2025:0662 | Red Hat Security Advisory: grafana security update | 2025-01-23T09:34:23+00:00 | 2026-01-21T23:26:58+00:00 |
| rhsa-2025:0401 | Red Hat Security Advisory: grafana security update | 2025-01-20T01:40:19+00:00 | 2026-01-21T23:26:43+00:00 |
| rhsa-2025:0381 | Red Hat Security Advisory: .NET 8.0 security update | 2025-01-16T17:18:21+00:00 | 2026-01-21T23:26:38+00:00 |
| rhsa-2025:0340 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2025-01-15T16:54:28+00:00 | 2026-01-21T23:26:38+00:00 |
| rhsa-2025:0329 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.16 | 2025-01-15T09:55:01+00:00 | 2026-01-21T23:26:35+00:00 |
| rhsa-2025:0079 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.2 Bug Fix Update | 2025-01-08T10:04:05+00:00 | 2026-01-21T23:26:29+00:00 |
| rhsa-2025:0002 | Red Hat Security Advisory: python36:3.6 security update | 2025-01-01T09:32:24+00:00 | 2026-01-21T23:26:27+00:00 |
| rhsa-2024:9884 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0 | 2024-11-18T14:52:00+00:00 | 2026-01-21T23:26:27+00:00 |
| rhsa-2024:9885 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0 | 2024-11-18T15:17:19+00:00 | 2026-01-21T23:26:24+00:00 |
| rhsa-2024:9629 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.6 | 2024-11-14T08:36:54+00:00 | 2026-01-21T23:26:23+00:00 |
| rhsa-2024:9627 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.3 | 2024-11-14T08:35:32+00:00 | 2026-01-21T23:26:23+00:00 |
| rhsa-2024:9620 | Red Hat Security Advisory: OpenShift Container Platform 4.14.41 bug fix and security update | 2024-11-20T04:17:57+00:00 | 2026-01-21T23:26:22+00:00 |
| rhsa-2024:9551 | Red Hat Security Advisory: grafana-pcp security update | 2024-11-13T14:54:47+00:00 | 2026-01-21T23:26:18+00:00 |
| rhsa-2024:8981 | Red Hat Security Advisory: OpenShift Container Platform 4.17.4 bug fix and security update | 2024-11-13T04:13:47+00:00 | 2026-01-21T23:26:00+00:00 |
| rhsa-2024:8847 | Red Hat Security Advisory: grafana-pcp security update | 2024-11-05T03:58:20+00:00 | 2026-01-21T23:25:59+00:00 |
| rhsa-2024:8683 | Red Hat Security Advisory: OpenShift Container Platform 4.16.20 bug fix and security update | 2024-11-06T03:29:21+00:00 | 2026-01-21T23:25:52+00:00 |
| rhsa-2024:8678 | Red Hat Security Advisory: grafana security update | 2024-10-30T19:42:46+00:00 | 2026-01-21T23:25:51+00:00 |
| rhsa-2024:8546 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.5 bug fixes and container updates | 2024-10-28T21:28:29+00:00 | 2026-01-21T23:25:51+00:00 |
| rhsa-2024:8533 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.4.6 security updates and bug fixes | 2024-10-28T17:06:38+00:00 | 2026-01-21T23:25:50+00:00 |
| rhsa-2024:8507 | Red Hat Security Advisory: grafana security update | 2024-10-28T10:01:19+00:00 | 2026-01-21T23:25:47+00:00 |
| rhsa-2024:8351 | Red Hat Security Advisory: grafana:7.3.6 security update | 2024-10-23T10:12:31+00:00 | 2026-01-21T23:25:44+00:00 |
| rhsa-2024:8327 | Red Hat Security Advisory: grafana security update | 2024-10-22T15:15:27+00:00 | 2026-01-21T23:25:41+00:00 |
| rhsa-2024:8113 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.3 security and bug fix update | 2024-10-15T08:52:38+00:00 | 2026-01-21T23:25:31+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-252-04 | Siemens Spectrum Power | 2020-09-08T00:00:00.000000Z | 2020-09-08T00:00:00.000000Z |
| icsa-20-252-03 | Siemens License Management Utility | 2020-09-08T00:00:00.000000Z | 2020-09-08T00:00:00.000000Z |
| icsa-20-252-01 | Siemens SIMATIC RTLS Locating Manager | 2020-09-08T00:00:00.000000Z | 2020-09-08T00:00:00.000000Z |
| icsa-20-105-05 | Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update B) | 2020-04-14T00:00:00.000000Z | 2020-09-08T00:00:00.000000Z |
| icsa-20-240-01 | Red Lion N-Tron 702-W, 702M12-W | 2020-08-27T00:00:00.000000Z | 2020-08-27T00:00:00.000000Z |
| icsa-20-238-02 | Emerson OpenEnterprise | 2020-08-25T00:00:00.000000Z | 2020-08-25T00:00:00.000000Z |
| icsa-20-238-01 | Advantech iView | 2020-08-25T00:00:00.000000Z | 2020-08-25T00:00:00.000000Z |
| icsma-20-233-01 | Philips SureSigns VS4 | 2020-08-20T00:00:00.000000Z | 2020-08-20T00:00:00.000000Z |
| icsa-20-224-08 | Siemens SICAM A8000 RTUs | 2020-08-11T00:00:00.000000Z | 2020-08-11T00:00:00.000000Z |
| icsa-20-224-07 | Siemens Automation License Manager | 2020-08-11T00:00:00.000000Z | 2020-08-11T00:00:00.000000Z |
| icsa-20-224-06 | Siemens Desigo CC | 2020-08-11T00:00:00.000000Z | 2020-08-11T00:00:00.000000Z |
| icsa-20-224-04 | Siemens SCALANCE, RUGGEDCOM | 2020-08-11T00:00:00.000000Z | 2020-08-11T00:00:00.000000Z |
| icsa-20-224-03 | Tridium Niagara | 2020-08-11T00:00:00.000000Z | 2020-08-11T00:00:00.000000Z |
| icsa-20-224-02 | Schneider Electric APC Easy UPS On-Line | 2020-08-11T00:00:00.000000Z | 2020-08-11T00:00:00.000000Z |
| icsa-20-196-07 | Siemens Opcenter Execution Core (Update B) | 2020-07-14T00:00:00.000000Z | 2020-08-11T00:00:00.000000Z |
| icsa-20-219-04 | Delta Industrial Automation TPEditor | 2020-08-06T00:00:00.000000Z | 2020-08-06T00:00:00.000000Z |
| icsa-20-219-03 | Geutebrück G-Cam and G-Code | 2020-08-06T00:00:00.000000Z | 2020-08-06T00:00:00.000000Z |
| icsa-20-219-02 | Advantech WebAccess HMI Designer | 2020-08-06T00:00:00.000000Z | 2020-08-06T00:00:00.000000Z |
| icsa-20-219-01 | Trailer Power Line Communications | 2020-08-06T00:00:00.000000Z | 2020-08-06T00:00:00.000000Z |
| icsa-20-217-01 | Delta Industrial Automation CNCSoft ScreenEditor | 2020-08-04T00:00:00.000000Z | 2020-08-04T00:00:00.000000Z |
| icsma-20-212-01 | Philips DreamMapper | 2020-07-30T00:00:00.000000Z | 2020-07-30T00:00:00.000000Z |
| icsa-20-212-01 | Inductive Automation Ignition 8 | 2020-07-30T00:00:00.000000Z | 2020-07-30T00:00:00.000000Z |
| icsa-20-210-03 | HMS Industrial Networks eCatcher | 2020-07-28T00:00:00.000000Z | 2020-07-28T00:00:00.000000Z |
| icsa-20-210-02 | Softing Industrial Automation OPC | 2020-07-28T00:00:00.000000Z | 2020-07-28T00:00:00.000000Z |
| icsa-20-210-01 | Secomea GateManager | 2020-07-28T00:00:00.000000Z | 2020-07-28T00:00:00.000000Z |
| icsa-20-182-01 | Delta Industrial Automation DOPSoft (Update A) | 2020-06-30T00:00:00.000000Z | 2020-07-28T00:00:00.000000Z |
| icsa-20-205-01 | Schneider Electric Triconex TriStation and Tricon Communication Module | 2020-07-23T00:00:00.000000Z | 2020-07-23T00:00:00.000000Z |
| icsma-20-170-02 | Baxter PrismaFlex and PrisMax (Update B) | 2020-06-18T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| icsa-20-196-08 | Siemens LOGO! Web Server | 2020-07-14T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| icsa-20-196-06 | Siemens SIMATIC S7-200 SMART CPU Family | 2020-07-14T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ssh-dos-Un22sd2A | Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-snmp-dos-usxsytk5 | Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-snmp-dos-USxSyTk5 | Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-sip-cv28sqw2 | Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-sip-Cv28sQw2 | Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc3-gmgngchx | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc3-GMgnGCHx | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc2-a6jvru7c | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc2-A6jVRu7C | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc1-okmkfrhv | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc1-OKMKFRhV | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ngwc-cmdinj-kewwvwr | Cisco IOS XE Software Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ngwc-cmdinj-KEwWVWR | Cisco IOS XE Software Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ise-dos-qnzq39k7 | Cisco Identity Services Engine Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ise-dos-qNzq39K7 | Cisco Identity Services Engine Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ioxxss-wc6cquws | Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ioxxss-wc6CqUws | Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ioxpe-kggvcaf9 | Cisco IOx for IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ioxPE-KgGvCAf9 | Cisco IOx for IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-webui-rce-uk8bxcud | Cisco IOS XE Software Web UI Remote Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-webui-rce-uk8BXcUD | Cisco IOS XE Software Web UI Remote Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-vpn-dos-edomw28z | Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-vpn-dos-edOmW28Z | Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-fnfv9-dos-hnd6fc9u | Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-fnfv9-dos-HND6Fc9u | Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-ewlc-dos-tkupvmzn | Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-ewlc-dos-TkuPVmZN | Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-digsig-bypass-fyq3bmvq | Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-digsig-bypass-FYQ3bmVq | Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-nxos-onepk-rce-6hhyt4dc | Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2020-36475 | An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs. | 2021-08-02T00:00:00.000Z | 2025-09-03T22:06:18.000Z |
| msrc_cve-2024-38538 | net: bridge: xmit: make sure we have at least eth header len bytes | 2024-06-02T07:00:00.000Z | 2025-09-03T22:06:13.000Z |
| msrc_cve-2024-26828 | cifs: fix underflow in parse_server_interfaces() | 2024-04-02T07:00:00.000Z | 2025-09-03T22:06:06.000Z |
| msrc_cve-2024-57975 | btrfs: do proper folio cleanup when run_delalloc_nocow() failed | 2025-02-02T00:00:00.000Z | 2025-09-03T22:05:55.000Z |
| msrc_cve-2025-38653 | proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al | 2025-08-02T00:00:00.000Z | 2025-09-03T22:05:46.000Z |
| msrc_cve-2022-3510 | Parsing issue in protobuf message-type extension | 2022-11-02T00:00:00.000Z | 2025-09-03T22:05:40.000Z |
| msrc_cve-2023-31670 | An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary. | 2023-05-01T00:00:00.000Z | 2025-09-03T22:05:04.000Z |
| msrc_cve-2025-45582 | GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of "Member name contains '..'" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain "x -> ../../../../../home/victim/.ssh" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in wh | 2025-07-02T00:00:00.000Z | 2025-09-03T22:05:01.000Z |
| msrc_cve-2024-5694 | An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127. | 2024-06-02T07:00:00.000Z | 2025-09-03T22:04:29.000Z |
| msrc_cve-2023-25731 | Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110. | 2023-06-01T07:00:00.000Z | 2025-09-03T22:04:26.000Z |
| msrc_cve-2024-35863 | smb: client: fix potential UAF in is_valid_oplock_break() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:04:14.000Z |
| msrc_cve-2025-38668 | regulator: core: fix NULL dereference on unbind due to stale coupling data | 2025-08-02T00:00:00.000Z | 2025-09-03T22:04:02.000Z |
| msrc_cve-2025-37802 | ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" | 2025-05-02T00:00:00.000Z | 2025-09-03T22:03:53.000Z |
| msrc_cve-2024-57852 | firmware: qcom: scm: smc: Handle missing SCM device | 2025-02-02T00:00:00.000Z | 2025-09-03T22:03:50.000Z |
| msrc_cve-2020-36477 | An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though). | 2021-08-02T00:00:00.000Z | 2025-09-03T22:03:28.000Z |
| msrc_cve-2025-4598 | Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump | 2025-05-02T00:00:00.000Z | 2025-09-03T22:03:26.000Z |
| msrc_cve-2024-9407 | Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction | 2024-10-01T07:00:00.000Z | 2025-09-03T22:02:59.000Z |
| msrc_cve-2019-20334 | In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 (and stdscan in asm/stdscan.c). This is similar to CVE-2019-6290 and CVE-2019-6291. | 2020-01-02T00:00:00.000Z | 2025-09-03T22:02:59.000Z |
| msrc_cve-2023-29544 | If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. | 2023-06-01T07:00:00.000Z | 2025-09-03T22:02:48.000Z |
| msrc_cve-2024-36913 | Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails | 2024-05-02T07:00:00.000Z | 2025-09-03T22:02:45.000Z |
| msrc_cve-2024-27032 | f2fs: fix to avoid potential panic during recovery | 2024-05-02T07:00:00.000Z | 2025-09-03T22:01:36.000Z |
| msrc_cve-2024-44949 | parisc: fix a possible DMA corruption | 2024-09-01T07:00:00.000Z | 2025-09-03T22:01:16.000Z |
| msrc_cve-2024-46729 | drm/amd/display: Fix incorrect size calculation for loop | 2024-09-01T07:00:00.000Z | 2025-09-03T22:01:02.000Z |
| msrc_cve-2024-4773 | When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126. | 2024-05-02T07:00:00.000Z | 2025-09-03T22:00:44.000Z |
| msrc_cve-2024-58095 | jfs: add check read-only before txBeginAnon() call | 2025-04-02T00:00:00.000Z | 2025-09-03T22:00:27.000Z |
| msrc_cve-2023-28154 | Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object. | 2023-03-10T00:00:00.000Z | 2025-09-03T22:00:24.000Z |
| msrc_cve-2010-0291 | The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the "do_mremap() mess" or "mremap/mmap mess." | 2010-02-02T00:00:00.000Z | 2025-09-03T22:00:06.000Z |
| msrc_cve-2024-36912 | Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl | 2024-05-02T07:00:00.000Z | 2025-09-03T22:00:05.000Z |
| msrc_cve-2024-55459 | An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function. | 2025-01-02T00:00:00.000Z | 2025-09-03T22:00:02.000Z |
| msrc_cve-2025-4674 | Unexpected command execution in untrusted VCS repositories in cmd/go | 2025-07-02T00:00:00.000Z | 2025-09-03T21:59:38.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202206-0048 | TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can … | 2024-02-14T22:59:49.346000Z |
| var-202203-1484 | Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffe… | 2024-02-14T22:59:49.664000Z |
| var-200605-0267 | Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct … | 2024-02-14T22:59:42.483000Z |
| var-201711-0725 | Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote aut… | 2024-02-14T22:58:57.532000Z |
| var-201709-0331 | XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows … | 2024-02-14T22:58:57.786000Z |
| var-202001-0302 | A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jina… | 2024-02-14T22:58:54.828000Z |
| var-202201-1106 | Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V… | 2024-02-14T22:58:52.351000Z |
| var-202106-1774 | D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC… | 2024-02-14T22:57:49.506000Z |
| var-200607-0083 | Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and … | 2024-02-14T22:56:37.710000Z |
| var-201704-0501 | Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulne… | 2024-02-14T22:55:11.807000Z |
| var-201803-1344 | Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted w… | 2024-02-14T22:55:10.500000Z |
| var-202203-1868 | ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which ma… | 2024-02-14T22:54:02.107000Z |
| var-202202-0343 | A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a r… | 2024-02-14T22:54:02.410000Z |
| var-202202-0342 | A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.… | 2024-02-14T22:54:02.351000Z |
| var-202202-0341 | An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Bet… | 2024-02-14T22:54:02.383000Z |
| var-202402-1352 | Memory corruption in Audio while processing IIR config data from AFE calibration block. 9… | 2024-02-14T22:53:58.474000Z |
| var-201607-0005 | Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and creden… | 2024-02-14T22:51:04.023000Z |
| var-201607-0003 | goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial … | 2024-02-14T22:51:04.068000Z |
| var-201607-0004 | goform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial o… | 2024-02-14T22:51:03.985000Z |
| var-201803-1343 | Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify. Bose SoundT… | 2024-02-14T22:51:01.756000Z |
| var-202402-1245 | Memory corruption in Audio while processing the calibration data returned from ACDB loade… | 2024-02-14T22:50:48.392000Z |
| var-201312-0104 | Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Control… | 2024-02-14T22:48:53.329000Z |
| var-201702-0690 | An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker c… | 2024-02-14T22:48:49.104000Z |
| var-201702-0689 | An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The applicati… | 2024-02-14T22:48:49.133000Z |
| var-201705-3685 | On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains… | 2024-02-14T22:48:48.267000Z |
| var-200607-0487 | Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remo… | 2024-02-14T22:47:51.440000Z |
| var-200607-0486 | Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and… | 2024-02-14T22:47:51.404000Z |
| var-200607-0137 | The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden … | 2024-02-14T22:47:51.594000Z |
| var-201105-0050 | Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component … | 2024-02-14T22:47:00.334000Z |
| var-201105-0049 | Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEn… | 2024-02-14T22:47:00.371000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000014 | Nagios cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000012 | Cross-site scripting vulnerability in multiple Tor World CGI scripts | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000011 | Internet Scanner reporting engine vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000008 | PC2M cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000007 | RaidenHTTPD cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000006 | Cross-site scripting vulnerabilities in multiple Hal Networks shopping cart products | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000005 | Multiple Yamaha routers vulnerable to cross-site request forgery | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000001 | Multiple JustSystems products vulnerable to buffer overflow | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001133 | Cosminexus Component Container Session Handling Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001092 | JP1/Cm2/Network Node Manager Arbitrary Code Execution Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001091 | Cosminexus Application Server Incorrect Group Permission Handling Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001000 | Hitachi JP1/File Transmission Server/FTP Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000999 | Hitachi JP1/File Transmission Server/FTP Authentication Bypass Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000921 | Groupmax Collaboration Schedule Information Disclosure Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000878 | Ichitaro series buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000877 | Ichitaro series buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000876 | Ichitaro series buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000875 | AirStation series and BroadStation series vulnerable to cross-site request forgery | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000824 | GreaseKit and Creammonkey allows execution of userscript functions | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000823 | Cross-site scripting in Sun Java System Web Server and Sun Java System Web Proxy Server | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000822 | WinAce buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000820 | Google Web Toolkit vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000816 | Rainboard cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000815 | Multiple Cybozu products vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000814 | Multiple Cybozu products vulnerable to HTTP header injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000813 | Multiple Cybozu products vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000812 | Cybozu Office denial of service (DoS) vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000811 | HttpLogger vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000810 | JP1/Cm2/Network Node Manager vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000809 | SonicStage CP buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0772-1 | Security update for skopeo | 2025-03-03T14:29:07Z | 2025-03-03T14:29:07Z |
| suse-su-2025:0771-1 | Security update for the Linux Kernel | 2025-03-03T13:42:44Z | 2025-03-03T13:42:44Z |
| suse-su-2025:0770-1 | Security update for govulncheck-vulndb | 2025-03-03T13:41:31Z | 2025-03-03T13:41:31Z |
| suse-su-2025:0767-1 | Security update for gnutls | 2025-03-03T08:45:03Z | 2025-03-03T08:45:03Z |
| suse-su-2025:0766-1 | Security update for gnutls | 2025-03-03T08:44:33Z | 2025-03-03T08:44:33Z |
| suse-su-2025:0765-1 | Security update for gnutls | 2025-03-03T08:44:19Z | 2025-03-03T08:44:19Z |
| suse-su-2025:0764-1 | Security update for gnutls | 2025-03-03T08:43:38Z | 2025-03-03T08:43:38Z |
| suse-su-2025:0763-1 | Security update for u-boot | 2025-03-03T08:43:14Z | 2025-03-03T08:43:14Z |
| suse-su-2025:0758-1 | Security update for libxkbfile | 2025-02-28T18:23:02Z | 2025-02-28T18:23:02Z |
| suse-su-2025:0757-1 | Security update for libX11 | 2025-02-28T16:40:25Z | 2025-02-28T16:40:25Z |
| suse-su-2025:0756-1 | Security update for python | 2025-02-28T16:38:01Z | 2025-02-28T16:38:01Z |
| suse-su-2025:0755-1 | Security update for u-boot | 2025-02-28T16:37:11Z | 2025-02-28T16:37:11Z |
| suse-su-2025:0754-1 | Security update for wireshark | 2025-02-28T16:31:26Z | 2025-02-28T16:31:26Z |
| suse-su-2025:0753-1 | Security update for tiff | 2025-02-28T16:30:36Z | 2025-02-28T16:30:36Z |
| suse-su-2025:0752-1 | Security update for ovmf | 2025-02-28T16:27:48Z | 2025-02-28T16:27:48Z |
| suse-su-2025:0751-1 | Security update for azure-cli | 2025-02-28T16:26:23Z | 2025-02-28T16:26:23Z |
| suse-su-2025:0750-1 | Security update for python-azure-identity | 2025-02-28T16:25:42Z | 2025-02-28T16:25:42Z |
| suse-su-2025:0748-1 | Security update for libxml2 | 2025-02-28T16:14:27Z | 2025-02-28T16:14:27Z |
| suse-su-2025:0747-1 | Security update for libxml2 | 2025-02-28T16:11:47Z | 2025-02-28T16:11:47Z |
| suse-su-2025:0746-1 | Security update for libxml2 | 2025-02-28T16:10:26Z | 2025-02-28T16:10:26Z |
| suse-su-2025:0744-1 | Security update for openssh8.4 | 2025-02-28T14:39:36Z | 2025-02-28T14:39:36Z |
| suse-su-2025:20131-1 | Security update for sssd | 2025-02-28T13:04:53Z | 2025-02-28T13:04:53Z |
| suse-su-2025:0742-1 | Security update for openvswitch3 | 2025-02-28T10:17:30Z | 2025-02-28T10:17:30Z |
| suse-su-2025:0741-1 | Security update for procps | 2025-02-28T10:16:11Z | 2025-02-28T10:16:11Z |
| suse-su-2025:0740-1 | Security update for libX11 | 2025-02-28T10:10:28Z | 2025-02-28T10:10:28Z |
| suse-su-2025:0739-1 | Security update for libX11 | 2025-02-28T10:09:45Z | 2025-02-28T10:09:45Z |
| suse-su-2025:0737-1 | Security update for postgresql13 | 2025-02-28T09:56:55Z | 2025-02-28T09:56:55Z |
| suse-su-2025:0736-1 | Security update for ruby2.5 | 2025-02-26T18:38:15Z | 2025-02-26T18:38:15Z |
| suse-su-2025:0735-1 | Security update for webkit2gtk3 | 2025-02-26T18:34:59Z | 2025-02-26T18:34:59Z |
| suse-su-2025:0734-1 | Security update for xorg-x11-server | 2025-02-26T14:32:41Z | 2025-02-26T14:32:41Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13219-1 | python39-3.9.18-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13218-1 | python310-CairoSVG-2.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13217-1 | go1.21-1.21.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13216-1 | go1.20-1.20.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13215-1 | python311-3.11.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13214-1 | python310-wheel-0.41.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13213-1 | python310-urllib3_1-1.26.16-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13212-1 | python310-urllib3-2.0.4-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13211-1 | python310-py-1.11.0-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13210-1 | python-bottle-doc-0.12.25-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13209-1 | python310-aiohttp-3.8.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13208-1 | python310-Pygments-2.16.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13207-1 | python310-GitPython-3.1.34.1693646983.2a2ae77-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13206-1 | libopenvswitch-3_1-0-3.1.0-15.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13205-1 | docker-24.0.5_ce-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13204-1 | chromedriver-116.0.5845.179-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13203-1 | cacti-1.2.25-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13202-1 | MozillaThunderbird-115.2.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13201-1 | python38-3.8.18-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13200-1 | python310-impacket-0.11.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13199-1 | python310-configobj-5.0.8-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13198-1 | python310-Django-4.2.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13197-1 | libmozjs-115-0-115.2.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13196-1 | libmozjs-102-0-102.15.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13195-1 | libmodsecurity3-3.0.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13194-1 | dpic-2023.02.01-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13193-1 | python310-3.10.13-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13192-1 | libxml2-2-2.10.4-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13191-1 | frr-8.4-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13190-1 | libQt5Pdf5-5.15.15-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23122 | Tenda AC18 ip/goform/saveParentControlInfo接口缓冲区溢出漏洞 | 2024-07-19 | 2025-10-09 |
| cnvd-2025-23121 | Small CRM /admin/change-password.php文件SQL注入漏洞 | 2025-05-30 | 2025-10-09 |
| cnvd-2025-23120 | Tenda AC18弱密码漏洞 | 2025-07-28 | 2025-10-09 |
| cnvd-2025-23119 | Small CRM会话劫持漏洞 | 2025-07-30 | 2025-10-09 |
| cnvd-2025-23118 | Small CRM /registration.php文件跨站脚本漏洞 | 2025-09-04 | 2025-10-09 |
| cnvd-2025-23117 | Small CRM /get-quote.php文件SQL注入漏洞 | 2025-09-10 | 2025-10-09 |
| cnvd-2025-23116 | Small CRM /profile.php文件SQL注入漏洞 | 2025-09-11 | 2025-10-09 |
| cnvd-2025-23115 | Small CRM /create-ticket.php文件SQL注入漏洞 | 2025-09-23 | 2025-10-09 |
| cnvd-2025-23114 | Tenda AC18命令注入漏洞 | 2025-09-29 | 2025-10-09 |
| cnvd-2025-23113 | Tenda AC18缓冲区溢出漏洞 | 2025-09-29 | 2025-10-09 |
| cnvd-2025-23112 | Small CRM SQL注入漏洞 | 2025-09-29 | 2025-10-09 |
| cnvd-2025-23111 | VMware NSX弱密码恢复机制漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23110 | VMware Cloud Foundation和VMware NSX用户名枚举漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23109 | VMware vCenter SMTP标头注入漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23108 | VMware Tools和VMware Aria Operations权限提升漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23107 | VMware Aria Operations信息泄露漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23106 | VMware Tools for Windows访问控制错误漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2024-20482 | 安徽商网某系统SQL注入漏洞 | 2015-10-15 | 2025-10-01 |
| cnvd-2025-23068 | Microsoft Graphics Kernel代码执行漏洞 | 2025-09-11 | 2025-09-30 |
| cnvd-2025-23067 | Microsoft Outlook代码执行漏洞（CNVD-2025-23067） | 2025-06-13 | 2025-09-30 |
| cnvd-2025-23066 | Microsoft Outlook代码执行漏洞（CNVD-2025-23066） | 2025-06-13 | 2025-09-30 |
| cnvd-2025-23065 | Microsoft Edge (Chromium-based)欺骗漏洞（CNVD-2025-23065） | 2025-02-11 | 2025-09-30 |
| cnvd-2025-23064 | Microsoft Edge (Chromium-based)权限提升漏洞（CNVD-2025-23064） | 2025-02-27 | 2025-09-30 |
| cnvd-2025-23063 | Microsoft Edge (Chromium-based)安全功能绕过漏洞（CNVD-2025-23063） | 2025-02-28 | 2025-09-30 |
| cnvd-2025-23062 | Microsoft Edge (Chromium-based) Update权限提升漏洞（CNVD-2025-23062） | 2025-03-27 | 2025-09-30 |
| cnvd-2025-23061 | Microsoft Edge for iOS欺骗漏洞（CNVD-2025-23061） | 2025-04-09 | 2025-09-30 |
| cnvd-2025-23060 | Microsoft Edge for iOS欺骗漏洞（CNVD-2025-23060） | 2025-04-09 | 2025-09-30 |
| cnvd-2025-23059 | Microsoft Edge (Chromium-based)远程代码执行漏洞（CNVD-2025-23059） | 2025-04-09 | 2025-09-30 |
| cnvd-2025-23058 | Microsoft Edge (Chromium-based)远程代码执行漏洞（CNVD-2025-23058） | 2025-04-09 | 2025-09-30 |
| cnvd-2025-23057 | Microsoft Edge (Chromium-based) Update权限提升漏洞（CNVD-2025-23057） | 2025-06-03 | 2025-09-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0883 | Multiples vulnérabilités dans Oracle Java SE | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0882 | Multiples vulnérabilités dans Oracle Database Server | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0881 | Multiples vulnérabilités dans Google Chrome | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0880 | Multiples vulnérabilités dans les produits Trend Micro | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0879 | Vulnérabilité dans Juniper Networks Junos OS | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0892 | Multiples vulnérabilités dans les produits SolarWinds | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0891 | Vulnérabilité dans Synacor Zimbra Desktop | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0890 | Multiples vulnérabilités dans les produits Atlassian | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0889 | Multiples vulnérabilités dans Ruby on Rails | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0888 | Multiples vulnérabilités dans Oracle Weblogic | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0887 | Multiples vulnérabilités dans Oracle Virtualization | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0886 | Multiples vulnérabilités dans Oracle Systems | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0885 | Multiples vulnérabilités dans Oracle PeopleSoft | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0884 | Multiples vulnérabilités dans Oracle MySQL | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0883 | Multiples vulnérabilités dans Oracle Java SE | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0882 | Multiples vulnérabilités dans Oracle Database Server | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0881 | Multiples vulnérabilités dans Google Chrome | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0880 | Multiples vulnérabilités dans les produits Trend Micro | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| CERTFR-2024-AVI-0879 | Vulnérabilité dans Juniper Networks Junos OS | 2024-10-16T00:00:00.000000 | 2024-10-16T00:00:00.000000 |
| certfr-2024-avi-0878 | Multiples vulnérabilités dans les produits Splunk | 2024-10-15T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| certfr-2024-avi-0781 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-09-16T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| certfr-2024-avi-0741 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-09-05T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| certfr-2024-avi-0575 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-07-12T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| CERTFR-2024-AVI-0878 | Multiples vulnérabilités dans les produits Splunk | 2024-10-15T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| CERTFR-2024-AVI-0781 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-09-16T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| CERTFR-2024-AVI-0741 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-09-05T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| CERTFR-2024-AVI-0575 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-07-12T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| certfr-2024-avi-0876 | Multiples vulnérabilités dans Moodle | 2024-10-14T00:00:00.000000 | 2024-10-14T00:00:00.000000 |
| certfr-2024-avi-0875 | Multiples vulnérabilités dans les produits Moxa | 2024-10-14T00:00:00.000000 | 2024-10-14T00:00:00.000000 |
| CERTFR-2024-AVI-0876 | Multiples vulnérabilités dans Moodle | 2024-10-14T00:00:00.000000 | 2024-10-14T00:00:00.000000 |