Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62064 |
9.8 (3.1)
|
WordPress Search & Go theme <= 2.7 - Broken Authentica… |
Elated-Themes |
Search & Go |
2025-11-06T15:55:51.676Z | 2026-01-20T14:28:13.941Z |
| CVE-2025-62063 |
6.5 (3.1)
|
WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 -… |
WP Travel |
WP Travel Gutenberg Blocks |
2025-10-22T14:32:53.303Z | 2026-01-20T14:28:13.735Z |
| CVE-2025-62062 |
5.3 (3.1)
|
WordPress Easy Post Submission plugin <= 1.7.0 - Sensi… |
ThemeRuby |
Easy Post Submission |
2025-10-22T14:32:53.065Z | 2026-01-20T14:28:13.826Z |
| CVE-2025-62060 |
6.5 (3.1)
|
WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scri… |
Themepoints |
Tab Ultimate |
2025-10-22T14:32:52.503Z | 2026-01-20T14:28:13.775Z |
| CVE-2025-62059 |
7.1 (3.1)
|
WordPress SureRank plugin <= 1.3.2 - Cross Site Script… |
Brainstorm Force |
SureRank |
2025-11-06T15:55:51.134Z | 2026-01-20T14:28:13.884Z |
| CVE-2025-62058 |
6.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.269Z | 2026-01-20T14:28:13.789Z |
| CVE-2025-62057 |
7.1 (3.1)
|
WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-11-06T15:55:50.427Z | 2026-01-20T14:28:13.708Z |
| CVE-2025-62055 |
8.1 (3.1)
|
WordPress Academist theme < 1.3 - Local File Inclusion… |
Elated-Themes |
Academist |
2025-11-06T15:55:49.844Z | 2026-01-20T14:28:13.866Z |
| CVE-2025-62054 |
7.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin <= 4.1.8… |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.067Z | 2026-01-20T14:28:13.941Z |
| CVE-2025-62053 |
8 (3.1)
|
WordPress Houzez theme < 4.2.0 - Local File Inclusion … |
favethemes |
Houzez |
2025-11-06T15:55:48.526Z | 2026-01-20T14:28:13.854Z |
| CVE-2025-62051 |
6.5 (3.1)
|
WordPress UDesign Core plugin <= 4.14.1 - Cross Site S… |
AndonDesign |
UDesign Core |
2025-11-06T15:55:47.211Z | 2026-01-20T14:28:13.625Z |
| CVE-2025-62047 |
9.9 (3.1)
|
WordPress Case Addons plugin < 1.3.0 - Arbitrary File … |
Case-Themes |
Case Addons |
2025-11-06T15:55:43.609Z | 2026-01-20T14:28:13.952Z |
| CVE-2025-62046 |
6.5 (3.1)
|
WordPress TheGem Demo Import (for WPBakery) plugin <= … |
CodexThemes |
TheGem Demo Import (for WPBakery) |
2025-11-06T15:55:42.909Z | 2026-01-20T14:28:13.538Z |
| CVE-2025-62045 |
8.1 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:41.551Z | 2026-01-20T14:28:13.819Z |
| CVE-2025-62042 |
6.5 (3.1)
|
WordPress Event post plugin <= 5.10.3 - Cross Site Scr… |
Bastien Ho |
Event post |
2025-10-22T14:32:51.413Z | 2026-01-20T14:28:13.802Z |
| CVE-2025-62041 |
7.1 (3.1)
|
WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross… |
CodexThemes |
TheGem (Elementor) |
2025-11-06T15:55:38.770Z | 2026-01-20T14:28:13.398Z |
| CVE-2025-62040 |
7.1 (3.1)
|
WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scrip… |
YOP |
YOP Poll |
2025-11-06T15:55:38.092Z | 2026-01-20T14:28:13.427Z |
| CVE-2025-62039 |
7.5 (3.1)
|
WordPress AI ChatBot with ChatGPT and Content Generato… |
Ays Pro |
AI ChatBot with ChatGPT and Content Generator by AYS |
2025-11-06T15:55:37.380Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62038 |
6.5 (3.1)
|
WordPress MeetingHub plugin <= 1.23.9 - Sensitive Data… |
Sovlix |
MeetingHub |
2025-11-06T15:55:36.094Z | 2026-01-20T14:28:13.390Z |
| CVE-2025-62037 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:34.720Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62036 |
7.1 (3.1)
|
WordPress Togo theme < 1.0.4 - Cross Site Scripting (X… |
uxper |
Togo |
2025-11-06T15:55:32.766Z | 2026-01-20T14:28:13.319Z |
| CVE-2025-62035 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - PHP Object Injection vu… |
uxper |
Togo |
2025-11-06T15:55:31.398Z | 2026-01-20T14:28:13.288Z |
| CVE-2025-62034 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - Privilege Escalation vu… |
uxper |
Togo |
2025-11-06T15:55:30.572Z | 2026-01-20T14:28:13.109Z |
| CVE-2025-62033 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:29.843Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62032 |
6.5 (3.1)
|
WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross … |
tagDiv |
tagDiv Cloud Library |
2025-11-06T15:55:29.230Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62031 |
7.1 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:28.516Z | 2026-01-20T14:28:13.050Z |
| CVE-2025-62030 |
6.5 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:27.866Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62029 |
8.1 (3.1)
|
WordPress Grevo theme <= 2.4 - Local File Inclusion vu… |
themesion |
Grevo |
2025-10-22T14:32:51.220Z | 2026-01-20T14:28:13.045Z |
| CVE-2025-62028 |
4.3 (3.1)
|
WordPress Salient theme < 17.4.0 - Broken Access Contr… |
ThemeNectar |
Salient |
2025-11-06T15:55:27.077Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62027 |
5.4 (3.1)
|
WordPress Event Tickets plugin <= 5.26.3 - Broken Acce… |
StellarWP |
Event Tickets |
2025-10-22T14:32:51.014Z | 2026-01-20T14:28:13.042Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68865 |
9.3 (3.1)
|
WordPress Infility Global plugin <= 2.14.48 - SQL Inje… |
Infility |
Infility Global |
2026-01-05T10:44:34.184Z | 2026-01-20T14:28:28.951Z |
| CVE-2025-68861 |
7.1 (3.1)
|
WordPress Plugin Optimizer plugin <= 1.3.7 - Broken Ac… |
Plugin Optimizer |
Plugin Optimizer |
2025-12-29T17:23:08.542Z | 2026-01-20T14:28:28.999Z |
| CVE-2025-68860 |
9.8 (3.1)
|
WordPress Mobile builder plugin <= 1.4.2 - Broken Auth… |
Mobile Builder |
Mobile builder |
2025-12-29T21:08:56.358Z | 2026-01-20T14:28:28.984Z |
| CVE-2025-68850 |
7.5 (3.1)
|
WordPress Sell Downloads plugin <= 1.1.12 - Broken Ac… |
Codepeople |
Sell Downloads |
2026-01-05T10:43:35.490Z | 2026-01-20T14:28:28.893Z |
| CVE-2025-68608 |
8.8 (3.1)
|
WordPress Userpro plugin <= 5.1.9 - Broken Access Cont… |
DeluxeThemes |
Userpro |
2025-12-24T12:31:31.259Z | 2026-01-20T14:28:29.001Z |
| CVE-2025-68607 |
6.5 (3.1)
|
WordPress Custom Field Template plugin <= 2.7.5 - Cros… |
Hiroaki Miyashita |
Custom Field Template |
2025-12-29T21:10:50.618Z | 2026-01-20T14:28:28.975Z |
| CVE-2025-68606 |
7.5 (3.1)
|
WordPress PostX plugin <= 5.0.3 - Sensitive Data Expos… |
WPXPO |
PostX |
2025-12-24T13:10:48.784Z | 2026-01-20T14:28:28.845Z |
| CVE-2025-68605 |
5.4 (3.1)
|
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3… |
PickPlugins |
Post Grid and Gutenberg Blocks |
2025-12-24T13:10:48.261Z | 2026-01-20T14:28:28.908Z |
| CVE-2025-68603 |
8.1 (3.1)
|
WordPress Editorial Calendar plugin <= 3.8.8 - Broken … |
Marketing Fire |
Editorial Calendar |
2025-12-24T13:10:47.744Z | 2026-01-20T14:28:29.006Z |
| CVE-2025-68602 |
6.1 (3.1)
|
WordPress Accept Donations with PayPal plugin <= 1.5.1… |
Scott Paterson |
Accept Donations with PayPal |
2025-12-24T13:10:47.134Z | 2026-01-20T14:28:29.023Z |
| CVE-2025-68601 |
8.8 (3.1)
|
WordPress Five Star Restaurant Reservations plugin <= … |
Rustaurius |
Five Star Restaurant Reservations |
2025-12-24T13:10:46.860Z | 2026-01-20T14:28:28.891Z |
| CVE-2025-68600 |
9.1 (3.1)
|
WordPress Link Library plugin <= 7.8.4 - Server Side R… |
Yannick Lefebvre |
Link Library |
2025-12-24T13:10:46.548Z | 2026-01-20T14:28:28.926Z |
| CVE-2025-68599 |
5.4 (3.1)
|
WordPress YouTube Embed plugin <= 5.4 - Cross Site Scr… |
Embeds For YouTube Plugin Support |
YouTube Embed |
2025-12-24T13:10:46.247Z | 2026-01-20T14:28:28.563Z |
| CVE-2025-68598 |
5.4 (3.1)
|
WordPress Page Builder: Live Composer plugin <= 2.0.5 … |
LiveComposer |
Page Builder: Live Composer |
2025-12-24T13:10:45.982Z | 2026-01-20T14:28:28.836Z |
| CVE-2025-68597 |
5.4 (3.1)
|
WordPress Jobs for WordPress plugin <= 2.7.17 - Cross … |
BlueGlass Interactive AG |
Jobs for WordPress |
2025-12-24T13:10:45.718Z | 2026-01-20T14:28:28.528Z |
| CVE-2025-68596 |
8.8 (3.1)
|
WordPress Bit Assist plugin <= 1.5.11 - Broken Access … |
Bit Apps |
Bit Assist |
2025-12-24T13:10:45.364Z | 2026-01-20T14:28:28.773Z |
| CVE-2025-68595 |
8.8 (3.1)
|
WordPress Widgets for Social Photo Feed plugin <= 1.7.… |
Trustindex |
Widgets for Social Photo Feed |
2025-12-24T13:10:44.856Z | 2026-01-20T14:28:28.572Z |
| CVE-2025-68594 |
8.1 (3.1)
|
WordPress Poll, Survey & Quiz Maker Plugin by Opinion … |
Assaf Parag |
Poll, Survey & Quiz Maker Plugin by Opinion Stage |
2025-12-24T13:10:44.556Z | 2026-01-20T14:28:28.512Z |
| CVE-2025-68593 |
8.8 (3.1)
|
WordPress WP Adminify plugin <= 4.0.6.1 - Broken Acces… |
Liton Arefin |
WP Adminify |
2025-12-24T13:10:44.275Z | 2026-01-20T14:28:28.837Z |
| CVE-2025-68592 |
8.8 (3.1)
|
WordPress WP Adminify plugin <= 4.0.6.1 - Broken Acces… |
Liton Arefin |
WP Adminify |
2025-12-24T13:10:43.992Z | 2026-01-20T14:28:28.495Z |
| CVE-2025-68591 |
8.1 (3.1)
|
WordPress Simple File List plugin <= 6.1.15 - Broken A… |
Mitchell Bennis |
Simple File List |
2025-12-24T13:10:43.716Z | 2026-01-20T14:28:28.564Z |
| CVE-2025-68590 |
9.8 (3.1)
|
WordPress Integration for Contact Form 7 HubSpot plugi… |
CRM Perks |
Integration for Contact Form 7 HubSpot |
2025-12-24T13:10:43.422Z | 2026-01-20T14:28:28.555Z |
| CVE-2025-68589 |
8.1 (3.1)
|
WordPress WP Telegram Widget and Join Link plugin <= 2… |
WP Socio |
WP Telegram Widget and Join Link |
2025-12-24T13:10:43.150Z | 2026-01-20T14:28:28.424Z |
| CVE-2025-68588 |
8.1 (3.1)
|
WordPress TS Poll plugin <= 2.5.3 - Broken Access Cont… |
totalsoft |
TS Poll |
2025-12-24T13:10:42.857Z | 2026-01-20T14:28:28.481Z |
| CVE-2025-68587 |
8.1 (3.1)
|
WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Co… |
Bob |
Watu Quiz |
2025-12-24T13:10:42.440Z | 2026-01-20T14:28:28.675Z |
| CVE-2025-68586 |
8.8 (3.1)
|
WordPress Cooked plugin <= 1.11.2 - Broken Access Cont… |
Gora Tech |
Cooked |
2025-12-24T13:10:42.037Z | 2026-01-20T14:28:28.502Z |
| CVE-2025-68585 |
8.8 (3.1)
|
WordPress WP Document Revisions plugin <= 3.7.2 - Brok… |
Ben Balter |
WP Document Revisions |
2025-12-24T13:10:41.715Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68584 |
8.8 (3.1)
|
WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site R… |
Constantin Boiangiu |
Vimeotheque |
2025-12-24T13:10:41.424Z | 2026-01-20T14:28:28.674Z |
| CVE-2025-68583 |
8.8 (3.1)
|
WordPress Fast User Switching plugin <= 1.4.10 - Cross… |
Tikweb Management |
Fast User Switching |
2025-12-24T13:10:41.121Z | 2026-01-20T14:28:28.749Z |
| CVE-2025-68582 |
8.8 (3.1)
|
WordPress Funnelforms Free plugin <= 3.8 - Broken Acce… |
Funnelforms |
Funnelforms Free |
2025-12-24T13:10:40.817Z | 2026-01-20T14:28:28.482Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68601 | Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Five Star Restaurant Reservations res… | 2025-12-24T13:16:27.650 | 2026-01-20T15:19:51.467 |
| fkie_cve-2025-68600 | Server-Side Request Forgery (SSRF) vulnerability in Yannick Lefebvre Link Library link-library allo… | 2025-12-24T13:16:27.530 | 2026-01-20T15:19:51.300 |
| fkie_cve-2025-68599 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:27.413 | 2026-01-20T15:19:51.127 |
| fkie_cve-2025-68598 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:27.290 | 2026-01-20T15:19:50.967 |
| fkie_cve-2025-68597 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:27.177 | 2026-01-20T15:19:50.827 |
| fkie_cve-2025-68596 | Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly… | 2025-12-24T13:16:27.053 | 2026-01-20T15:19:50.673 |
| fkie_cve-2025-68595 | Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-w… | 2025-12-24T13:16:26.940 | 2026-01-20T15:19:50.523 |
| fkie_cve-2025-68594 | Missing Authorization vulnerability in Assaf Parag Poll, Survey & Quiz Maker Plugin by Opinion Stag… | 2025-12-24T13:16:26.813 | 2026-01-20T15:19:50.380 |
| fkie_cve-2025-68593 | Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrec… | 2025-12-24T13:16:26.697 | 2026-01-20T15:19:50.230 |
| fkie_cve-2025-68592 | Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrec… | 2025-12-24T13:16:26.573 | 2026-01-20T15:19:50.073 |
| fkie_cve-2025-68591 | Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exp… | 2025-12-24T13:16:26.457 | 2026-01-20T15:19:49.910 |
| fkie_cve-2025-68590 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:26.337 | 2026-01-20T15:19:49.757 |
| fkie_cve-2025-68589 | Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget … | 2025-12-24T13:16:26.220 | 2026-01-20T15:19:49.590 |
| fkie_cve-2025-68588 | Missing Authorization vulnerability in totalsoft TS Poll poll-wp allows Exploiting Incorrectly Conf… | 2025-12-24T13:16:26.100 | 2026-01-20T15:19:49.457 |
| fkie_cve-2025-68587 | Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured … | 2025-12-24T13:16:25.980 | 2026-01-20T15:19:49.330 |
| fkie_cve-2025-68586 | Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Config… | 2025-12-24T13:16:25.860 | 2026-01-20T15:19:49.200 |
| fkie_cve-2025-68585 | Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allow… | 2025-12-24T13:16:25.740 | 2026-01-20T15:19:49.070 |
| fkie_cve-2025-68584 | Cross-Site Request Forgery (CSRF) vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vime… | 2025-12-24T13:16:25.620 | 2026-01-20T15:19:48.943 |
| fkie_cve-2025-68583 | Cross-Site Request Forgery (CSRF) vulnerability in Tikweb Management Fast User Switching fast-user-… | 2025-12-24T13:16:25.507 | 2026-01-20T15:19:48.817 |
| fkie_cve-2025-68582 | Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploit… | 2025-12-24T13:16:25.387 | 2026-01-20T15:19:48.687 |
| fkie_cve-2025-68581 | Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-… | 2025-12-24T13:16:25.267 | 2026-01-20T15:19:48.557 |
| fkie_cve-2025-68580 | Cross-Site Request Forgery (CSRF) vulnerability in pluginsware Advanced Classifieds & Directory Pro… | 2025-12-24T13:16:25.140 | 2026-01-20T15:19:48.420 |
| fkie_cve-2025-68579 | Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exp… | 2025-12-24T13:16:25.020 | 2026-01-20T15:19:48.293 |
| fkie_cve-2025-68578 | Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Inco… | 2025-12-24T13:16:24.893 | 2026-01-20T15:19:48.163 |
| fkie_cve-2025-68577 | Missing Authorization vulnerability in Virusdie Virusdie virusdie allows Exploiting Incorrectly Con… | 2025-12-24T13:16:24.777 | 2026-01-20T15:19:48.037 |
| fkie_cve-2025-68576 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdi… | 2025-12-24T13:16:24.660 | 2026-01-20T15:19:47.920 |
| fkie_cve-2025-68575 | Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploitin… | 2025-12-24T13:16:24.540 | 2026-01-20T15:19:47.793 |
| fkie_cve-2025-68574 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:24.423 | 2026-01-20T15:19:47.663 |
| fkie_cve-2025-68573 | Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi Simple Keyword to Link simple-… | 2025-12-24T13:16:24.300 | 2026-01-20T15:19:47.537 |
| fkie_cve-2025-68572 | Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectl… | 2025-12-24T13:16:24.183 | 2026-01-20T15:19:47.407 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-8gx7-cf2h-mfwc |
4.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fantast… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-8cr2-hpc7-v23m |
6.5 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-el… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-698r-29g4-5vv6 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-xjmw-rm34-58c8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-r6p6-v684-4gh3 |
5.3 (3.1)
|
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-q25c-mp33-wj35 |
7.6 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-ppgx-ch2f-563v |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-h3r4-4xxq-ggf2 |
5.4 (3.1)
|
Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrect… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-g57x-6757-m2v6 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-f2cf-j74x-54c5 |
5.4 (3.1)
|
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-9pc6-xgvc-2w25 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-4527-g864-c7mh |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-3g8r-fpc3-3p9r |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-xwq4-m3ff-5w2g |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-xvj8-fgfh-f3gx |
4.9 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in Codeless Slider Templates slider-templates allo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-wh86-wjvr-gp4g |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w4xm-vpx3-v86f |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request F… | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w294-95cp-qx33 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-rrvr-f37x-r3f9 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-qh3g-9vrf-p9vh |
5.3 (3.1)
|
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing … | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-hrf6-48c7-hhqf |
5.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box allows Cross Site Request Forg… | 2025-10-29T06:31:12Z | 2026-01-20T15:31:39Z |
| ghsa-h9fv-xmvq-pgf6 |
5.3 (3.1)
|
Missing Authorization vulnerability in Facebook Facebook for WooCommerce allows Exploiting Incorrec… | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-f647-c8g3-5cgm |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-w… | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-c2rv-fm36-43g7 |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in FanBridge FanBridge signup fanbridge-signup allo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-9p7p-v96r-fv6r |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Allegro Marketing hpb seo plugin for WordPress h… | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-4w5q-r88j-fm53 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:39Z |
| ghsa-4cj4-4jvg-p6q8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-3wcv-7wxv-gvf8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-v8q4-wpfv-hmr2 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-rxr2-m2mh-wpx6 |
4.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoh… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2019-141 |
|
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure f… | ansible | 2019-01-03T15:29:00Z | 2021-06-10T06:51:54.692225Z |
| pysec-2018-10 |
|
Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as … | kotti | 2018-04-09T07:29:00Z | 2021-06-10T06:51:50.431238Z |
| pysec-2018-15 |
|
An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag labe… | mayan-edms | 2018-09-03T19:29:00Z | 2021-06-10T06:51:46.544830Z |
| pysec-2018-11 |
|
Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aa… | luigi | 2018-12-20T15:29:00Z | 2021-06-10T06:51:41.493009Z |
| pysec-2018-27 |
|
qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that … | qutebrowser | 2018-07-12T12:29:00Z | 2021-06-10T06:51:37.378319Z |
| pysec-2019-144 |
|
An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the rep… | arrayfire | 2019-08-26T18:15:00Z | 2021-06-10T06:51:33.535067Z |
| pysec-2018-8 |
|
io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arb… | eve | 2018-03-14T12:29:00Z | 2021-06-10T06:51:29.570871Z |
| pysec-2019-143 |
|
The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1… | apache-airflow | 2019-01-23T17:29:00Z | 2021-06-10T06:51:25.502672Z |
| pysec-2018-17 |
|
Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert resp… | notebook | 2018-11-18T17:29:00Z | 2021-06-10T06:51:21.489049Z |
| pysec-2018-30 |
|
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to byp… | salt | 2018-10-24T22:29:00Z | 2021-06-10T06:51:17.561337Z |
| pysec-2018-20 |
|
privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability… | privacyidea | 2018-10-08T15:29:00Z | 2021-06-10T06:51:13.416740Z |
| pysec-2018-2 |
|
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x befor… | django | 2018-08-03T17:29:00Z | 2021-06-10T06:51:09.426505Z |
| pysec-2018-32 |
|
urllib3 before version 1.23 does not remove the Authorization HTTP header when following … | urllib3 | 2018-12-11T17:29:00Z | 2021-06-10T06:51:03.467032Z |
| pysec-2018-24 |
|
Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Fai… | pyopenssl | 2018-10-08T15:29:00Z | 2021-06-10T06:50:57.188381Z |
| pysec-2018-22 |
|
OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management… | pykmip | 2018-12-20T17:29:00Z | 2021-06-10T06:50:52.184344Z |
| pysec-2018-19 |
|
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.… | paramiko | 2018-03-13T18:29:00Z | 2021-06-10T06:50:48.065198Z |
| pysec-2018-3 |
|
An issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read … | django | 2018-10-02T18:29:00Z | 2021-06-10T06:50:43.349902Z |
| pysec-2018-23 |
|
Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-4… | pyopenssl | 2018-10-08T15:29:00Z | 2021-06-10T06:50:39.370732Z |
| pysec-2018-1 |
|
Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 befor… | cloudtoken | 2018-08-10T15:29:00Z | 2021-06-10T06:50:35.324330Z |
| pysec-2021-80 |
|
Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the… | plone | 2021-05-21T22:15:00Z | 2021-06-09T05:01:40.464417Z |
| pysec-2021-95 |
|
The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepan… | websockets | 2021-06-06T15:15:00Z | 2021-06-09T05:01:36.173811Z |
| pysec-2021-86 |
|
This affects all versions of package qlib. The workflow function in cli part of qlib was … | pyqlib | 2021-02-15T16:15:00Z | 2021-06-09T05:01:32.318077Z |
| pysec-2021-89 |
|
Datasette is an open source multi-tool for exploring and publishing data. The `?_trace=1`… | datasette | 2021-06-07T22:15:00Z | 2021-06-09T05:01:28.246179Z |
| pysec-2021-94 |
|
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not prop… | pillow | 2021-06-02T16:15:00Z | 2021-06-09T05:01:24.292350Z |
| pysec-2021-82 |
|
Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an e… | plone | 2021-05-21T22:15:00Z | 2021-06-09T05:01:20.334920Z |
| pysec-2021-92 |
|
An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly … | pillow | 2021-06-02T16:15:00Z | 2021-06-09T05:01:16.347355Z |
| pysec-2021-90 |
|
Flask-AppBuilder is a development framework, built on top of Flask. User enumeration in d… | flask-appbuilder | 2021-06-07T19:15:00Z | 2021-06-09T05:01:12.347920Z |
| pysec-2021-77 |
|
An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through… | hyperkitty | 2021-05-26T14:15:00Z | 2021-06-09T05:01:08.351404Z |
| pysec-2021-91 |
|
The Python "Flask-Security-Too" package is used for adding security features to your Flas… | flask-security-too | 2021-01-11T21:15:00Z | 2021-06-09T05:01:03.786366Z |
| pysec-2021-93 |
|
An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation… | pillow | 2021-06-02T16:15:00Z | 2021-06-09T05:00:59.042287Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3288 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.305270Z |
| gsd-2024-3287 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.175704Z |
| gsd-2024-3286 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.135179Z |
| gsd-2024-3285 | The Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows plugin … | 2024-04-11T05:03:27.327964Z |
| gsd-2024-3284 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.303695Z |
| gsd-2024-3283 | A vulnerability in mintplex-labs/anything-llm allows users with manager roles to escalate… | 2024-04-11T05:03:27.250915Z |
| gsd-2024-3282 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.407546Z |
| gsd-2024-3281 | A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3… | 2024-04-11T05:03:27.249211Z |
| gsd-2024-3280 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.226442Z |
| gsd-2024-3279 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.323337Z |
| gsd-2024-3278 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.119025Z |
| gsd-2024-3277 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.219739Z |
| gsd-2024-3276 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.221747Z |
| gsd-2024-3275 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.254081Z |
| gsd-2024-3274 | ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been… | 2024-04-11T05:03:27.126644Z |
| gsd-2024-3273 | ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which w… | 2024-04-11T05:03:27.405268Z |
| gsd-2024-3272 | ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which w… | 2024-04-11T05:03:27.427501Z |
| gsd-2024-3271 | A command injection vulnerability exists in the run-llama/llama_index repository, specifi… | 2024-04-11T05:03:27.231801Z |
| gsd-2024-3270 | A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vuln… | 2024-04-11T05:03:27.369628Z |
| gsd-2024-3269 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.349071Z |
| gsd-2024-3268 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.151900Z |
| gsd-2024-27460 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.848789Z |
| gsd-2024-26017 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:26.642287Z |
| gsd-2024-28888 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:24.734545Z |
| gsd-2024-28879 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:24.468608Z |
| gsd-2024-28043 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:24.134582Z |
| gsd-2024-28031 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:24.555102Z |
| gsd-2024-22091 | Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 f… | 2024-04-11T05:03:23.914820Z |
| gsd-2024-25647 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:22.250030Z |
| gsd-2024-25577 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:21.798701Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192906 | Malicious code in haybales (RubyGems) | 2025-12-23T08:40:55Z | 2025-12-23T08:40:55Z |
| mal-0000-reversing-labs-bd536daa96e6efee | 2025-12-23T08:40:55Z | 2025-12-23T08:40:55Z | |
| mal-0000-reversing-labs-9579f1469db6cdb4 | 2025-12-23T08:40:55Z | 2025-12-23T08:40:55Z | |
| MAL-2025-192907 | Malicious code in hockeystick (RubyGems) | 2025-12-23T08:40:55Z | 2025-12-23T08:40:55Z |
| MAL-2025-192906 | Malicious code in haybales (RubyGems) | 2025-12-23T08:40:55Z | 2025-12-23T08:40:55Z |
| MAL-0000-REVERSING-LABS-BD536DAA96E6EFEE | 2025-12-23T08:40:55Z | 2025-12-23T08:40:55Z | |
| MAL-0000-REVERSING-LABS-9579F1469DB6CDB4 | 2025-12-23T08:40:55Z | 2025-12-23T08:40:55Z | |
| mal-2025-192905 | Malicious code in critter (RubyGems) | 2025-12-23T08:40:54Z | 2025-12-23T08:40:54Z |
| mal-0000-reversing-labs-2cb52d270b635577 | 2025-12-23T08:40:54Z | 2025-12-23T08:40:54Z | |
| MAL-2025-192905 | Malicious code in critter (RubyGems) | 2025-12-23T08:40:54Z | 2025-12-23T08:40:54Z |
| MAL-0000-REVERSING-LABS-2CB52D270B635577 | 2025-12-23T08:40:54Z | 2025-12-23T08:40:54Z | |
| mal-2025-192904 | Malicious code in cocoapod (RubyGems) | 2025-12-23T08:40:53Z | 2025-12-23T08:40:53Z |
| mal-0000-reversing-labs-6e39c1f1d818680b | 2025-12-23T08:40:53Z | 2025-12-23T08:40:53Z | |
| MAL-2025-192904 | Malicious code in cocoapod (RubyGems) | 2025-12-23T08:40:53Z | 2025-12-23T08:40:53Z |
| MAL-0000-REVERSING-LABS-6E39C1F1D818680B | 2025-12-23T08:40:53Z | 2025-12-23T08:40:53Z | |
| mal-2025-192903 | Malicious code in chalk-thrift (RubyGems) | 2025-12-23T08:40:52Z | 2025-12-23T08:40:52Z |
| mal-0000-reversing-labs-760415061aa3d189 | 2025-12-23T08:40:52Z | 2025-12-23T08:40:52Z | |
| MAL-2025-192903 | Malicious code in chalk-thrift (RubyGems) | 2025-12-23T08:40:52Z | 2025-12-23T08:40:52Z |
| MAL-0000-REVERSING-LABS-760415061AA3D189 | 2025-12-23T08:40:52Z | 2025-12-23T08:40:52Z | |
| mal-2025-192902 | Malicious code in chalk-service (RubyGems) | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z |
| mal-0000-reversing-labs-28d7985dc818c11d | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z | |
| MAL-2025-192902 | Malicious code in chalk-service (RubyGems) | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z |
| MAL-0000-REVERSING-LABS-28D7985DC818C11D | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z | |
| mal-2025-192901 | Malicious code in chalk-sentry (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-2025-192900 | Malicious code in chalk-interface (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-2025-192899 | Malicious code in chalk-hostname (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-0000-reversing-labs-dc1e691b373fdd5f | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| mal-0000-reversing-labs-c051874c322af525 | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| mal-0000-reversing-labs-65f44def7487b6dd | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| MAL-2025-192901 | Malicious code in chalk-sentry (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-2078 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2017-09-26T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-1916 | VMware Tanzu Spring Boot: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-08-22T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-1663 | Apache HTTP Server: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2024-07-17T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-1520 | Apache HTTP Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-07-03T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2023-2177 | libssh2: Schwachstelle ermöglicht Denial of Service | 2023-08-27T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2022-2028 | BusyBox: Mehrere Schwachstellen | 2021-11-09T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2022-0103 | Node.js: Mehrere Schwachstellen | 2022-01-24T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0114 | IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-16T23:00:00.000+00:00 | 2025-01-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0113 | Canonical Snap: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-01-16T23:00:00.000+00:00 | 2025-01-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0061 | Siemens SIPROTEC: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-14T23:00:00.000+00:00 | 2025-01-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3742 | poppler: Schwachstelle ermöglicht Denial of Service | 2024-12-22T23:00:00.000+00:00 | 2025-01-16T23:00:00.000+00:00 |
| wid-sec-w-2024-2205 | Apache Tomcat Connectors: Schwachstelle ermöglicht Denial of Service | 2024-09-23T22:00:00.000+00:00 | 2025-01-16T23:00:00.000+00:00 |
| wid-sec-w-2022-2043 | Python: Schwachstelle ermöglicht Denial of Service | 2022-11-08T23:00:00.000+00:00 | 2025-01-16T23:00:00.000+00:00 |
| wid-sec-w-2022-0547 | GIMP: Schwachstelle ermöglicht Denial of Service | 2022-07-03T22:00:00.000+00:00 | 2025-01-16T23:00:00.000+00:00 |
| wid-sec-w-2022-0283 | GIMP: Schwachstelle ermöglicht Denial of Service | 2022-05-17T22:00:00.000+00:00 | 2025-01-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0110 | Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-01-15T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0108 | Splunk: Schwachstelle ermöglicht Denial of Service | 2025-01-15T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0107 | D-LINK Router (DIR-823X): Schwachstelle ermöglicht Denial of Service | 2025-01-15T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0103 | Drupal: Schwachstelle ermöglicht Manipulation von Dateien | 2025-01-15T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0102 | mutt: Mehrere Schwachstellen | 2018-07-29T22:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0101 | mutt: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2021-05-19T22:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0100 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2022-02-22T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3687 | Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-12-11T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3502 | Google Chrome / Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2024-11-19T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3472 | mutt: Mehrere Schwachstellen | 2024-11-14T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2022-2243 | mutt: Schwachstelle ermöglicht Manipulation von Daten | 2020-06-21T22:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2022-2241 | mutt: Schwachstelle ermöglicht Offenlegung von Informationen | 2020-11-23T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2022-0633 | mutt: Schwachstelle ermöglicht Offenlegung von Informationen | 2022-04-18T22:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2022-0571 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2021-11-09T23:00:00.000+00:00 | 2025-01-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0099 | Microsoft Power Automate Desktop: Schwachstelle ermöglicht Codeausführung | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:8077 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:43+00:00 | 2026-01-21T23:25:29+00:00 |
| rhsa-2024:8023 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.34.0 security update & enhancements | 2024-10-14T00:59:58+00:00 | 2026-01-21T23:25:26+00:00 |
| rhsa-2024:8076 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:49+00:00 | 2026-01-21T23:25:24+00:00 |
| rhsa-2024:8075 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:59+00:00 | 2026-01-21T23:25:23+00:00 |
| rhsa-2024:7994 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.3 bug fixes and container updates | 2024-10-11T01:43:45+00:00 | 2026-01-21T23:25:20+00:00 |
| rhsa-2024:7759 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.3 security updates | 2024-10-10T16:53:04+00:00 | 2026-01-21T23:25:12+00:00 |
| rhsa-2024:7726 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.2 | 2024-10-07T09:24:48+00:00 | 2026-01-21T23:25:11+00:00 |
| rhsa-2024:7725 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.5 | 2024-10-07T09:24:53+00:00 | 2026-01-21T23:25:11+00:00 |
| rhsa-2024:7724 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.11 | 2024-10-07T09:22:37+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7706 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2024-10-07T01:12:29+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7550 | Red Hat Security Advisory: golang security update | 2024-10-02T18:24:59+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7502 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-10-02T11:50:23+00:00 | 2026-01-21T23:25:04+00:00 |
| rhsa-2024:7443 | Red Hat Security Advisory: RHACS 4.5 enhancement and security update | 2024-10-01T09:03:41+00:00 | 2026-01-21T23:25:03+00:00 |
| rhsa-2024:7052 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA) | 2024-09-24T12:51:36+00:00 | 2026-01-21T23:24:53+00:00 |
| rhsa-2024:6779 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.6 bug fixes and container updates | 2024-09-18T19:22:01+00:00 | 2026-01-21T23:24:41+00:00 |
| rhsa-2024:6235 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.1.2 | 2024-09-03T14:56:15+00:00 | 2026-01-21T23:24:29+00:00 |
| rhsa-2024:6211 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.1 security update | 2024-09-03T10:05:20+00:00 | 2026-01-21T23:24:28+00:00 |
| rhsa-2024:6210 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.4 security update | 2024-09-03T10:05:02+00:00 | 2026-01-21T23:24:28+00:00 |
| rhsa-2024:6148 | Red Hat Security Advisory: nodejs:18 security update | 2024-09-03T02:32:16+00:00 | 2026-01-21T23:24:19+00:00 |
| rhsa-2024:6147 | Red Hat Security Advisory: nodejs:18 security update | 2024-09-03T02:29:11+00:00 | 2026-01-21T23:24:16+00:00 |
| rhsa-2024:5814 | Red Hat Security Advisory: nodejs:20 security update | 2024-08-26T08:36:35+00:00 | 2026-01-21T23:24:11+00:00 |
| rhsa-2024:5438 | Red Hat Security Advisory: OpenShift Container Platform 4.15.28 packages and security update | 2024-08-21T03:36:58+00:00 | 2026-01-21T23:24:02+00:00 |
| rhsa-2024:5432 | Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update | 2024-08-21T21:42:52+00:00 | 2026-01-21T23:23:56+00:00 |
| rhsa-2024:5314 | Red Hat Security Advisory: OpenShift Virtualization 4.13.10 Images security update | 2024-08-13T15:13:35+00:00 | 2026-01-21T23:23:55+00:00 |
| rhsa-2024:5147 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:23:37+00:00 | 2026-01-21T23:23:46+00:00 |
| rhsa-2024:5145 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:22:53+00:00 | 2026-01-21T23:23:45+00:00 |
| rhsa-2024:5144 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:23:05+00:00 | 2026-01-21T23:23:44+00:00 |
| rhsa-2024:5143 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:22:54+00:00 | 2026-01-21T23:23:43+00:00 |
| rhsa-2024:4955 | Red Hat Security Advisory: OpenShift Container Platform 4.15.25 bug fix and security update | 2024-08-07T01:16:26+00:00 | 2026-01-21T23:23:33+00:00 |
| rhsa-2024:4884 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4.1 for Spring Boot security update. | 2024-07-25T19:26:07+00:00 | 2026-01-21T23:23:32+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-196-04 | Siemens SIMATIC HMI Panels | 2020-07-14T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| icsa-20-196-03 | Siemens SICAM MMU, SICAM T, and SICAM SGU | 2020-07-14T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| icsa-20-196-02 | Moxa EDR-G902 and EDR-G903 Series Routers | 2020-07-14T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| icsa-20-196-01 | Advantech iView | 2020-07-14T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| icsa-19-318-02 | Siemens S7-1200 and S7-200 SMART CPUs (Update B) | 2019-11-14T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| icsa-19-227-03 | Siemens SCALANCE Products (Update A) | 2019-08-15T00:00:00.000000Z | 2020-07-14T00:00:00.000000Z |
| icsa-20-191-02 | Rockwell Automation Logix Designer Studio 5000 | 2020-07-09T00:00:00.000000Z | 2020-07-09T00:00:00.000000Z |
| icsa-20-191-01 | Phoenix Contact Automation Worx Software Suite | 2020-07-09T00:00:00.000000Z | 2020-07-09T00:00:00.000000Z |
| icsa-20-163-02 | Rockwell Automation FactoryTalk Linx Software (Update A) | 2020-06-11T00:00:00.000000Z | 2020-07-09T00:00:00.000000Z |
| icsa-20-189-02 | Mitsubishi Electric GOT2000 Series | 2020-07-07T00:00:00.000000Z | 2020-07-07T00:00:00.000000Z |
| icsa-20-189-01 | Grundfos CIM 500 | 2020-07-07T00:00:00.000000Z | 2020-07-07T00:00:00.000000Z |
| icsa-20-175-01 | Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L and FX Series CPU Modules (Update A) | 2020-06-23T00:00:00.000000Z | 2020-07-07T00:00:00.000000Z |
| icsa-20-184-02 | ABB System 800xA Information Manager | 2020-07-02T00:00:00.000000Z | 2020-07-02T00:00:00.000000Z |
| icsa-20-184-01 | Nortek Linear eMerge 50P/5000P | 2020-07-02T00:00:00.000000Z | 2020-07-02T00:00:00.000000Z |
| icsa-20-170-01 | Johnson Controls exacqVision (Update A) | 2020-06-18T00:00:00.000000Z | 2020-07-02T00:00:00.000000Z |
| icsa-20-182-02 | Mitsubishi Electric Factory Automation Engineering Software Products | 2020-06-30T00:00:00.000000Z | 2020-06-30T00:00:00.000000Z |
| icsa-20-147-01 | Inductive Automation Ignition (Update B) | 2020-05-26T00:00:00.000000Z | 2020-06-30T00:00:00.000000Z |
| icsma-20-177-01 | Philips Ultrasound Systems | 2020-06-25T00:00:00.000000Z | 2020-06-25T00:00:00.000000Z |
| icsa-20-177-03 | Rockwell Automation FactoryTalk View SE | 2020-06-25T00:00:00.000000Z | 2020-06-25T00:00:00.000000Z |
| icsa-20-177-02 | Rockwell Automation FactoryTalk Services Platform XXE | 2020-06-25T00:00:00.000000Z | 2020-06-25T00:00:00.000000Z |
| icsma-20-170-06 | BD Alaris PCU (Update A) | 2020-06-18T00:00:00.000000Z | 2020-06-23T00:00:00.000000Z |
| icsma-20-170-04 | Baxter Sigma Spectrum Infusion Pumps (Update B) | 2020-06-18T00:00:00.000000Z | 2020-06-23T00:00:00.000000Z |
| icsma-20-170-03 | Baxter Phoenix Hemodialysis Delivery System (Update A) | 2020-06-18T00:00:00.000000Z | 2020-06-23T00:00:00.000000Z |
| icsma-20-170-01 | Baxter ExactaMix (Update A) | 2020-06-18T00:00:00.000000Z | 2020-06-23T00:00:00.000000Z |
| icsa-20-175-03 | ABB Device Library Wizard | 2020-06-23T00:00:00.000000Z | 2020-06-23T00:00:00.000000Z |
| icsa-20-175-02 | Honeywell ControlEdge PLC and RTU | 2020-06-23T00:00:00.000000Z | 2020-06-23T00:00:00.000000Z |
| icsma-20-170-05 | BIOTRONIK CardioMessenger II | 2020-06-18T00:00:00.000000Z | 2020-06-18T00:00:00.000000Z |
| icsa-20-170-05 | Rockwell Automation FactoryTalk View SE | 2020-06-18T00:00:00.000000Z | 2020-06-18T00:00:00.000000Z |
| icsa-20-170-04 | Rockwell Automation FactoryTalk Services Platform | 2020-06-18T00:00:00.000000Z | 2020-06-18T00:00:00.000000Z |
| icsa-20-170-03 | ICONICS GENESIS64, GENESIS32 | 2020-06-18T00:00:00.000000Z | 2020-06-18T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ios-nxos-onepk-rce-6Hhyt4dC | Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-ir800-img-verif-whhlyhjk | Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-ir800-img-verif-wHhLYHjK | Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-vds-cred-upmp9zby | Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-vds-cred-uPMp9zbY | Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-vds-cmd-inj-vfjtqghe | Cisco IOS Software for Cisco Industrial Routers Virtual Device Server CLI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-vds-cmd-inj-VfJtqGhE | Cisco IOS Software for Cisco Industrial Routers Virtual Device Server CLI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-udp-vds-inj-f2d5jzrt | Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Inter-VM Channel Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt | Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Inter-VM Channel Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-rce-xyrsemnh | Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-rce-xYRSeMNH | Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-gos-vuln-s9qs8kyl | Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ios-iot-gos-vuln-s9qS8kYL | Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ikev2-9p23jj2a | Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ikev2-9p23Jj2a | Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ewlc-dos-anvkvmxr | Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ewlc-dos-AnvKvMxR | Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-dnac-audit-log-59rbdwb6 | Cisco Digital Network Architecture Center Information Disclosure Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-dnac-audit-log-59RBdwb6 | Cisco Digital Network Architecture Center Information Disclosure Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-cipdos-hkftzxex | Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service Vulnerabilities | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-cipdos-hkfTZXEx | Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service Vulnerabilities | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-caf-file-mvnpqkw9 | Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-caf-file-mVnPqKW9 | Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-caf-3dxm8exv | Cisco IOx Application Framework Arbitrary File Creation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-caf-3dXM8exv | Cisco IOx Application Framework Arbitrary File Creation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-c2960l-dpwa9re4 | Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X Authentication Bypass Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-c2960L-DpWA9Re4 | Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X Authentication Bypass Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-auth-b-nzwhjhh7 | Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-auth-b-NzwhJHH7 | Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-asr920-abjclmef | Cisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-5702 | Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12. | 2024-06-02T07:00:00.000Z | 2025-09-03T21:59:25.000Z |
| msrc_cve-2023-47627 | Request smuggling in aiohttp | 2023-11-01T07:00:00.000Z | 2025-09-03T21:59:16.000Z |
| msrc_cve-2024-35861 | smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() | 2024-05-02T07:00:00.000Z | 2025-09-03T21:58:47.000Z |
| msrc_cve-2023-39323 | Arbitrary code execution during build via line directives in cmd/go | 2023-10-01T00:00:00.000Z | 2025-09-03T21:58:26.000Z |
| msrc_cve-2025-9301 | cmake cmForEachCommand.cxx ReplayItems assertion | 2025-08-02T00:00:00.000Z | 2025-09-03T21:58:03.000Z |
| msrc_cve-2022-33103 | Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir(). | 2022-07-02T00:00:00.000Z | 2025-09-03T21:58:01.000Z |
| msrc_cve-2025-38456 | ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() | 2025-07-02T00:00:00.000Z | 2025-09-03T21:57:59.000Z |
| msrc_cve-2022-49317 | f2fs: avoid infinite loop to flush node pages | 2025-02-02T00:00:00.000Z | 2025-09-03T21:57:57.000Z |
| msrc_cve-2011-4969 | Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag. | 2013-03-02T00:00:00.000Z | 2025-09-03T21:57:55.000Z |
| msrc_cve-2024-5701 | Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 127. | 2024-06-02T07:00:00.000Z | 2025-09-03T21:57:45.000Z |
| msrc_cve-2023-32212 | An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. | 2023-06-01T07:00:00.000Z | 2025-09-03T21:57:40.000Z |
| msrc_cve-2025-38199 | wifi: ath12k: Fix memory leak due to multiple rx_stats allocation | 2025-07-02T00:00:00.000Z | 2025-09-03T21:57:17.000Z |
| msrc_cve-2022-49636 | vlan: fix memory leak in vlan_newlink() | 2025-02-02T00:00:00.000Z | 2025-09-03T21:57:17.000Z |
| msrc_cve-2023-41330 | Unsafe deserialization in knplabs/knp-snappy | 2023-09-01T00:00:00.000Z | 2025-09-03T21:56:48.000Z |
| msrc_cve-2023-52561 | arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved | 2024-03-02T08:00:00.000Z | 2025-09-03T21:56:45.000Z |
| msrc_cve-2022-29804 | Path traversal via Clean on Windows in path/filepath | 2022-08-02T00:00:00.000Z | 2025-09-03T21:56:34.000Z |
| msrc_cve-2024-36013 | Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() | 2024-05-02T07:00:00.000Z | 2025-09-03T21:56:29.000Z |
| msrc_cve-2025-21884 | net: better track kernel sockets lifetime | 2025-03-02T00:00:00.000Z | 2025-09-03T21:56:18.000Z |
| msrc_cve-2024-35864 | smb: client: fix potential UAF in smb2_is_valid_lease_break() | 2024-05-02T07:00:00.000Z | 2025-09-03T21:55:56.000Z |
| msrc_cve-2023-4458 | Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability | 2024-11-02T00:00:00.000Z | 2025-09-03T21:55:53.000Z |
| msrc_cve-2020-10724 | A vulnerability was found in DPDK versions 18.11 and above | 2020-05-02T00:00:00.000Z | 2025-09-03T21:55:35.000Z |
| msrc_cve-2024-4775 | An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 126. | 2024-05-02T07:00:00.000Z | 2025-09-03T21:55:18.000Z |
| msrc_cve-2024-38541 | of: module: add buffer overflow check in of_modalias() | 2024-06-02T07:00:00.000Z | 2025-09-03T21:54:47.000Z |
| msrc_cve-2022-45639 | OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line. | 2023-01-04T00:00:00.000Z | 2025-09-03T21:54:36.000Z |
| msrc_cve-2023-52576 | x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() | 2024-03-02T08:00:00.000Z | 2025-09-03T21:54:34.000Z |
| msrc_cve-2024-46772 | drm/amd/display: Check denominator crb_pipes before used | 2024-09-01T07:00:00.000Z | 2025-09-03T21:54:12.000Z |
| msrc_cve-2024-5699 | In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127. | 2024-06-02T07:00:00.000Z | 2025-09-03T21:54:01.000Z |
| msrc_cve-2025-4877 | Libssh: write beyond bounds in binary to base64 conversion functions | 2025-08-02T00:00:00.000Z | 2025-09-03T21:53:59.000Z |
| msrc_cve-2024-56737 | GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. | 2024-12-02T00:00:00.000Z | 2025-09-03T21:53:55.000Z |
| msrc_cve-2020-36424 | An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values. | 2021-07-02T00:00:00.000Z | 2025-09-03T21:53:42.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201105-0048 | Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in … | 2024-02-14T22:47:00.411000Z |
| var-201105-0047 | Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before … | 2024-02-14T22:47:00.291000Z |
| var-201105-0046 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (… | 2024-02-14T22:47:00.450000Z |
| var-202106-1772 | There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2… | 2024-02-14T22:46:14.432000Z |
| var-202112-1786 | A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before… | 2024-02-14T22:46:10.691000Z |
| var-200208-0198 | Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute a… | 2024-02-14T22:44:39.654000Z |
| var-202206-1494 | A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versio… | 2024-02-14T21:27:38.469000Z |
| var-201003-1085 | modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.… | 2024-02-14T21:26:53.841000Z |
| var-202208-1483 | Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulner… | 2024-02-14T21:16:26.456000Z |
| var-200512-0910 | Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_… | 2024-02-13T23:05:10.655000Z |
| var-201510-0193 | Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application i… | 2024-02-13T23:05:04.025000Z |
| var-201903-1015 | AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Exe… | 2024-02-13T23:04:58.218000Z |
| var-201806-0161 | node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE)… | 2024-02-13T23:04:58.992000Z |
| var-201912-1673 | Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Woo… | 2024-02-13T23:04:57.348000Z |
| var-202009-0114 | Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker veri… | 2024-02-13T23:04:56.587000Z |
| var-202007-0050 | This vulnerability allows network-adjacent attackers to bypass authentication on affected… | 2024-02-13T23:04:56.751000Z |
| var-202201-1373 | On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 pro… | 2024-02-13T23:04:55.111000Z |
| var-202201-1272 | On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with… | 2024-02-13T23:04:55.140000Z |
| var-202204-1101 | A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software… | 2024-02-13T23:04:54.019000Z |
| var-202203-0913 | ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS)… | 2024-02-13T23:04:54.167000Z |
| var-202202-1477 | IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash tha… | 2024-02-13T23:04:54.364000Z |
| var-202202-1288 | A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthent… | 2024-02-13T23:04:54.455000Z |
| var-202201-1963 | In all versions before 7.2.1.4, when proxy settings are configured in the network access … | 2024-02-13T23:04:54.781000Z |
| var-202201-1961 | On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.… | 2024-02-13T23:04:54.814000Z |
| var-202201-1959 | On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4,… | 2024-02-13T23:04:54.841000Z |
| var-202201-1669 | In Directus, versions 9.0.0-alpha.4 through 9.4.1 are vulnerable to stored Cross-Site Scr… | 2024-02-13T23:04:54.905000Z |
| var-201305-0163 | The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Nod… | 2024-02-13T23:04:10.202000Z |
| var-201504-0279 | SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Un… | 2024-02-13T23:04:09.354000Z |
| var-201405-0213 | Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X … | 2024-02-13T23:04:09.784000Z |
| var-201710-1140 | There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as dem… | 2024-02-13T23:04:08.030000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2007-000808 | Lhaplus buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000807 | FileMaker cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000806 | Feed2JS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000805 | RoundCube Webmail cross-site request forgery vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000804 | Sleipnir and Grani Bookmark Search vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000803 | Cross-site scripting vulnerability in updir.php in UPDIR.NET | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000802 | Lotus Domino cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000801 | NetCommons cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000779 | MouseoverDictionary vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000745 | PowerArchiver buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000730 | Webmin OS command injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000729 | Aipo session fixation vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000727 | Safari allows access from HTTP to HTTPS | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000712 | Cosminexus Agent Process Crash Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000711 | TPBroker Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000710 | Cosminexus Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000702 | Cosminexus Developer's Kit for Java Buffer Overflow and Denial of Service Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000701 | Cosminexus, Processing Kit for XML and Hitachi Developer's Kit for Java Buffer Overflow Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000700 | Cosminexus javadoc Cross-Site Scripting Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000699 | JP1/NETM/DM Manager SQL Injection Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000697 | Lhaplus buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000678 | Fingerprint Authentication Software for Sony Pocket Bit installs hidden folders and files | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000647 | Fuktommy.com httpd.pl included in its HTML preprocessor vulnerable in allowing an attacker to view arbitrary CGI source code | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000646 | Fuktommy.com httpd.pl including HTML preprocessor vulnerable to directory traversal | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000645 | 7-ZIP32.DLL buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000640 | Fulltext search CGI from futomi's CGI Cafe vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000639 | Shopping Basket Pro directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000626 | Mayaa cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000625 | Tuigwaa cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000598 | Apache Tomcat Host Manager cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0733-1 | Security update for xorg-x11-server | 2025-02-26T14:32:04Z | 2025-02-26T14:32:04Z |
| suse-su-2025:0732-1 | Security update for xorg-x11-server | 2025-02-26T14:31:32Z | 2025-02-26T14:31:32Z |
| suse-su-2025:0731-1 | Security update for xorg-x11-server | 2025-02-26T14:30:16Z | 2025-02-26T14:30:16Z |
| suse-su-2025:0730-1 | Security update for xorg-x11-server | 2025-02-26T14:29:14Z | 2025-02-26T14:29:14Z |
| suse-su-2025:0729-1 | Security update for xwayland | 2025-02-26T14:14:28Z | 2025-02-26T14:14:28Z |
| suse-su-2025:0728-1 | Security update for gnutls | 2025-02-26T14:03:26Z | 2025-02-26T14:03:26Z |
| suse-su-2025:0727-1 | Security update for gnutls | 2025-02-26T14:03:17Z | 2025-02-26T14:03:17Z |
| suse-su-2025:20227-1 | Security update for kernel-firmware | 2025-02-26T13:56:22Z | 2025-02-26T13:56:22Z |
| suse-su-2025:20226-1 | Security update for openssh | 2025-02-26T13:44:24Z | 2025-02-26T13:44:24Z |
| suse-su-2025:20225-1 | Security update for pam_pkcs11 | 2025-02-26T13:44:24Z | 2025-02-26T13:44:24Z |
| suse-su-2025:0726-1 | Security update for socat | 2025-02-26T13:37:01Z | 2025-02-26T13:37:01Z |
| suse-su-2025:0725-1 | Security update for procps | 2025-02-26T13:36:43Z | 2025-02-26T13:36:43Z |
| suse-su-2025:0724-1 | Security update for vim | 2025-02-26T13:30:28Z | 2025-02-26T13:30:28Z |
| suse-su-2025:0723-1 | Security update for vim | 2025-02-26T13:29:44Z | 2025-02-26T13:29:44Z |
| suse-su-2025:0722-1 | Security update for vim | 2025-02-26T13:29:24Z | 2025-02-26T13:29:24Z |
| suse-su-2025:20130-1 | Security update for pam_pkcs11 | 2025-02-26T13:23:25Z | 2025-02-26T13:23:25Z |
| suse-su-2025:0719-1 | Recommended update for Maven | 2025-02-26T07:25:33Z | 2025-02-26T07:25:33Z |
| suse-su-2025:0713-1 | Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4) | 2025-02-25T18:04:22Z | 2025-02-25T18:04:22Z |
| suse-su-2025:20129-1 | Security update for kernel-firmware | 2025-02-25T13:27:13Z | 2025-02-25T13:27:13Z |
| suse-su-2025:20128-1 | Security update for vim | 2025-02-25T13:12:31Z | 2025-02-25T13:12:31Z |
| suse-su-2025:0712-1 | Security update for pam_pkcs11 | 2025-02-25T10:38:03Z | 2025-02-25T10:38:03Z |
| suse-su-2025:0709-1 | Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4) | 2025-02-25T08:03:43Z | 2025-02-25T08:03:43Z |
| suse-su-2025:0708-1 | Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) | 2025-02-25T04:33:31Z | 2025-02-25T04:33:31Z |
| suse-su-2025:0707-1 | Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) | 2025-02-25T04:03:57Z | 2025-02-25T04:03:57Z |
| suse-su-2025:0703-1 | Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5) | 2025-02-24T18:03:39Z | 2025-02-24T18:03:39Z |
| suse-su-2025:0704-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-02-24T16:36:08Z | 2025-02-24T16:36:08Z |
| suse-su-2025:0698-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) | 2025-02-24T16:35:52Z | 2025-02-24T16:35:52Z |
| suse-su-2025:0687-1 | Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6) | 2025-02-24T15:33:20Z | 2025-02-24T15:33:20Z |
| suse-su-2025:0692-1 | Security update for qemu | 2025-02-24T14:21:29Z | 2025-02-24T14:21:29Z |
| suse-su-2025:0691-1 | Security update for webkit2gtk3 | 2025-02-24T13:12:26Z | 2025-02-24T13:12:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13189-1 | xalan-j2-2.7.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13188-1 | python3-salt-3006.0-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13187-1 | owasp-modsecurity-crs-3.3.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13186-1 | libvmtools-devel-12.2.0-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13185-1 | nodejs-electron-22.3.23-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13184-1 | libwireshark16-4.0.8-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13183-1 | spectre-meltdown-checker-0.46-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13182-1 | nodejs-electron-22.3.21-1.2 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13181-1 | busybox-1.36.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13180-1 | jdom-1.1.3-40.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13179-1 | kernel-devel-6.4.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13178-1 | djvulibre-3.5.28-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13177-1 | chromedriver-116.0.5845.140-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13176-1 | MozillaFirefox-117.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13175-1 | chromedriver-116.0.5845.110-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13174-1 | clamav-0.103.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13173-1 | ruby3.2-rubygem-websocket-extensions-0.1.5-1.16 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13172-1 | ruby3.2-rubygem-web-console-4.2.0-1.9 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13171-1 | ruby3.2-rubygem-tzinfo-1.2-1.2.10-1.4 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13170-1 | ruby3.2-rubygem-sprockets-3.7-3.7.2-1.20 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13169-1 | ruby3.2-rubygem-sprockets-4.1.1-1.6 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13168-1 | ruby3.2-rubygem-rubyzip-2.3.2-1.11 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13167-1 | ruby3.2-rubygem-rack-3.0.7-1.2 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13166-1 | ruby3.2-rubygem-puma-5-5.6.5-1.7 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13165-1 | ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13164-1 | ruby3.2-rubygem-multi_xml-0.6.0-1.23 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13163-1 | ruby3.2-rubygem-minitar-0.9-1.13 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13162-1 | ruby3.2-rubygem-loofah-2.19.1-1.2 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13161-1 | ruby3.2-rubygem-kramdown-2.4.0-1.8 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13160-1 | ruby3.2-rubygem-json_pure-2.6.3-1.3 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23056 | Microsoft Edge (Chromium-based)信息泄露漏洞（CNVD-2025-23056） | 2025-07-04 | 2025-09-30 |
| cnvd-2025-23055 | Microsoft Edge (Chromium-based)权限提升漏洞（CNVD-2025-23055） | 2025-07-04 | 2025-09-30 |
| cnvd-2025-23054 | Microsoft Edge (Chromium-based)欺骗漏洞（CNVD-2025-23054） | 2025-07-04 | 2025-09-30 |
| cnvd-2025-23053 | Microsoft Edge (Chromium-based)欺骗漏洞（CNVD-2025-23053） | 2025-07-04 | 2025-09-30 |
| cnvd-2025-23052 | Microsoft Edge (Chromium-based) Update权限提升漏洞 | 2025-07-10 | 2025-09-30 |
| cnvd-2025-23051 | Microsoft Edge (Chromium-based)安全功能绕过漏洞（CNVD-2025-23051） | 2025-09-09 | 2025-09-30 |
| cnvd-2025-23050 | Microsoft Edge (Chromium-based)远程代码执行漏洞（CNVD-2025-23050） | 2025-07-11 | 2025-09-30 |
| cnvd-2025-23049 | Microsoft Edge (Chromium-based) for Android欺骗漏洞（CNVD-2025-23049） | 2025-08-15 | 2025-09-30 |
| cnvd-2025-23048 | Microsoft Edge (Chromium-based) for Android欺骗漏洞（CNVD-2025-23048） | 2025-08-15 | 2025-09-30 |
| cnvd-2025-23047 | Microsoft Edge (Chromium-based) for Android欺骗漏洞 | 2025-09-18 | 2025-09-30 |
| cnvd-2025-23046 | Google Android权限提升漏洞（CNVD-2025-23046） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23045 | Google Android信息泄露漏洞（CNVD-2025-23045） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23044 | Google Android权限提升漏洞（CNVD-2025-23044） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23043 | Google Android权限提升漏洞（CNVD-2025-23043） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23042 | Google Android权限提升漏洞（CNVD-2025-23042） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23041 | Google Android拒绝服务漏洞（CNVD-2025-23041） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23040 | Google Android权限提升漏洞（CNVD-2025-23040） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23039 | Google Android存在未明漏洞（CNVD-2025-23039） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23038 | Google Android权限提升漏洞（CNVD-2025-23038） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23037 | Google Android存在未明漏洞（CNVD-2025-23037） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23036 | Google Android代码执行漏洞（CNVD-2025-23036） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23035 | Google Android权限提升漏洞（CNVD-2025-23035） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23034 | Google Android权限提升漏洞（CNVD-2025-23034） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23033 | Google Android信息泄露漏洞（CNVD-2025-23033） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23032 | Google Android拒绝服务漏洞（CNVD-2025-23032） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23031 | Google Android代码执行漏洞（CNVD-2025-23031） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23030 | Google Android拒绝服务漏洞（CNVD-2025-23030） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23029 | Google Android拒绝服务漏洞（CNVD-2025-23029） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23028 | Google Android信息泄露漏洞（CNVD-2025-23028） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23027 | Google Android拒绝服务漏洞（CNVD-2025-23027） | 2025-09-08 | 2025-09-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0875 | Multiples vulnérabilités dans les produits Moxa | 2024-10-14T00:00:00.000000 | 2024-10-14T00:00:00.000000 |
| certfr-2024-avi-0874 | Multiples vulnérabilités dans Google Android | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| certfr-2024-avi-0873 | Multiples vulnérabilités dans les produits IBM | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| certfr-2024-avi-0872 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| certfr-2024-avi-0871 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| certfr-2024-avi-0870 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| certfr-2024-avi-0869 | Vulnérabilité dans Mozilla Thunderbird | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| certfr-2024-avi-0868 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| certfr-2024-avi-0867 | Multiples vulnérabilités dans les produits SonicWall | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| CERTFR-2024-AVI-0874 | Multiples vulnérabilités dans Google Android | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| CERTFR-2024-AVI-0873 | Multiples vulnérabilités dans les produits IBM | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| CERTFR-2024-AVI-0872 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| CERTFR-2024-AVI-0871 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| CERTFR-2024-AVI-0870 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| CERTFR-2024-AVI-0869 | Vulnérabilité dans Mozilla Thunderbird | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| CERTFR-2024-AVI-0868 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| CERTFR-2024-AVI-0867 | Multiples vulnérabilités dans les produits SonicWall | 2024-10-11T00:00:00.000000 | 2024-10-11T00:00:00.000000 |
| certfr-2024-avi-0866 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0865 | Vulnérabilité dans Mozilla Firefox | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0864 | Vulnérabilité dans les produits Microsoft | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0863 | Vulnérabilité dans Synology DSM | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0862 | Multiples vulnérabilités dans GitLab | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0861 | Multiples vulnérabilités dans Wireshark | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0860 | Multiples vulnérabilités dans les produits VMware | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0859 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0858 | Multiples vulnérabilités dans Mitel Micollab | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| CERTFR-2024-AVI-0866 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| CERTFR-2024-AVI-0865 | Vulnérabilité dans Mozilla Firefox | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| CERTFR-2024-AVI-0864 | Vulnérabilité dans les produits Microsoft | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| CERTFR-2024-AVI-0863 | Vulnérabilité dans Synology DSM | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |