Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62037 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:34.720Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62036 |
7.1 (3.1)
|
WordPress Togo theme < 1.0.4 - Cross Site Scripting (X… |
uxper |
Togo |
2025-11-06T15:55:32.766Z | 2026-01-20T14:28:13.319Z |
| CVE-2025-62035 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - PHP Object Injection vu… |
uxper |
Togo |
2025-11-06T15:55:31.398Z | 2026-01-20T14:28:13.288Z |
| CVE-2025-62034 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - Privilege Escalation vu… |
uxper |
Togo |
2025-11-06T15:55:30.572Z | 2026-01-20T14:28:13.109Z |
| CVE-2025-62033 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:29.843Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62032 |
6.5 (3.1)
|
WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross … |
tagDiv |
tagDiv Cloud Library |
2025-11-06T15:55:29.230Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62031 |
7.1 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:28.516Z | 2026-01-20T14:28:13.050Z |
| CVE-2025-62030 |
6.5 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:27.866Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62029 |
8.1 (3.1)
|
WordPress Grevo theme <= 2.4 - Local File Inclusion vu… |
themesion |
Grevo |
2025-10-22T14:32:51.220Z | 2026-01-20T14:28:13.045Z |
| CVE-2025-62028 |
4.3 (3.1)
|
WordPress Salient theme < 17.4.0 - Broken Access Contr… |
ThemeNectar |
Salient |
2025-11-06T15:55:27.077Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62027 |
5.4 (3.1)
|
WordPress Event Tickets plugin <= 5.26.3 - Broken Acce… |
StellarWP |
Event Tickets |
2025-10-22T14:32:51.014Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62026 |
4.3 (3.1)
|
WordPress Blockspare plugin <= 3.2.13.2 - Sensitive Da… |
Blockspare |
Blockspare |
2025-10-22T14:32:50.799Z | 2026-01-20T14:28:13.037Z |
| CVE-2025-62025 |
9.8 (3.1)
|
WordPress JobSearch plugin < 3.0.8 - PHP Object Inject… |
eyecix |
JobSearch |
2025-10-22T14:32:50.582Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62024 |
6.5 (3.1)
|
WordPress Pie Calendar plugin <= 1.2.9 - Cross Site Sc… |
Jonathan Jernigan |
Pie Calendar |
2025-10-22T14:32:50.360Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62023 |
9.8 (3.1)
|
WordPress s2Member plugin <= 250905 - Remote Code Exec… |
Cristián Lávaque |
s2Member |
2025-10-22T14:32:50.026Z | 2026-01-20T14:28:13.041Z |
| CVE-2025-62022 |
7.5 (3.1)
|
WordPress BuddyPress plugin <= 14.3.4 - Broken Access … |
BuddyPress |
BuddyPress |
2025-10-22T14:32:49.815Z | 2026-01-20T14:28:13.037Z |
| CVE-2025-62021 |
4.3 (3.1)
|
WordPress Acknowledgify plugin <= 1.1.3 - Broken Acces… |
Made Neat |
Acknowledgify |
2025-10-22T14:32:49.606Z | 2026-01-20T14:28:13.041Z |
| CVE-2025-62020 |
7.1 (3.1)
|
WordPress VOD Infomaniak plugin <= 1.5.11 - Cross Site… |
Infomaniak Network |
VOD Infomaniak |
2025-10-22T14:32:49.407Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62019 |
6.5 (3.1)
|
WordPress Recipe Card Blocks for Gutenberg & Elementor… |
WPZOOM |
Recipe Card Blocks for Gutenberg & Elementor |
2025-10-22T14:32:49.208Z | 2026-01-20T14:28:13.056Z |
| CVE-2025-62018 |
5.3 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Broken Access Cont… |
hogash |
Kallyas |
2025-11-06T15:55:26.361Z | 2026-01-20T14:28:13.058Z |
| CVE-2025-62017 |
5.4 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Broken Access Cont… |
hogash |
Kallyas |
2025-11-06T15:55:25.294Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62016 |
9.9 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upl… |
hogash |
Kallyas |
2025-11-06T15:55:24.586Z | 2026-01-20T14:28:13.045Z |
| CVE-2025-62014 |
8.1 (3.1)
|
WordPress ITok theme <= 1.1.42 - Local File Inclusion … |
ApusTheme |
ITok |
2025-11-06T15:55:23.874Z | 2026-01-20T14:28:13.268Z |
| CVE-2025-62013 |
4.3 (3.1)
|
WordPress UiChemy plugin <= 4.0.0 - Broken Access Cont… |
POSIMYTH |
UiChemy |
2025-10-22T14:32:48.799Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62012 |
6.5 (3.1)
|
WordPress TheGem (Elementor) theme <= 5.10.5 - Cross S… |
CodexThemes |
TheGem (Elementor) |
2025-11-06T15:55:23.261Z | 2026-01-20T14:28:13.036Z |
| CVE-2025-62011 |
6.5 (3.1)
|
WordPress TheGem theme <= 5.10.5 - Cross Site Scriptin… |
CodexThemes |
TheGem |
2025-11-06T15:55:22.593Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62010 |
8.1 (3.1)
|
WordPress Famita theme <= 1.54 - Local File Inclusion … |
ApusTheme |
Famita |
2025-11-06T15:55:21.866Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62009 |
4.3 (3.1)
|
WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 … |
Dmitry V. (CEO of "UKR Solution") |
UPC/EAN/GTIN Code Generator |
2025-10-22T14:32:48.527Z | 2026-01-20T14:28:13.052Z |
| CVE-2025-62008 |
8.8 (3.1)
|
WordPress Product Table For WooCommerce plugin <= 1.2.… |
acowebs |
Product Table For WooCommerce |
2025-10-22T14:32:48.273Z | 2026-01-20T14:28:13.044Z |
| CVE-2025-62006 |
5.4 (3.1)
|
WordPress WP SMS plugin <= 7.0.1 - Broken Access Contr… |
VeronaLabs |
WP SMS |
2025-10-22T14:32:47.684Z | 2026-01-20T14:28:13.040Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68590 |
9.8 (3.1)
|
WordPress Integration for Contact Form 7 HubSpot plugi… |
CRM Perks |
Integration for Contact Form 7 HubSpot |
2025-12-24T13:10:43.422Z | 2026-01-20T14:28:28.555Z |
| CVE-2025-68589 |
8.1 (3.1)
|
WordPress WP Telegram Widget and Join Link plugin <= 2… |
WP Socio |
WP Telegram Widget and Join Link |
2025-12-24T13:10:43.150Z | 2026-01-20T14:28:28.424Z |
| CVE-2025-68588 |
8.1 (3.1)
|
WordPress TS Poll plugin <= 2.5.3 - Broken Access Cont… |
totalsoft |
TS Poll |
2025-12-24T13:10:42.857Z | 2026-01-20T14:28:28.481Z |
| CVE-2025-68587 |
8.1 (3.1)
|
WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Co… |
Bob |
Watu Quiz |
2025-12-24T13:10:42.440Z | 2026-01-20T14:28:28.675Z |
| CVE-2025-68586 |
8.8 (3.1)
|
WordPress Cooked plugin <= 1.11.2 - Broken Access Cont… |
Gora Tech |
Cooked |
2025-12-24T13:10:42.037Z | 2026-01-20T14:28:28.502Z |
| CVE-2025-68585 |
8.8 (3.1)
|
WordPress WP Document Revisions plugin <= 3.7.2 - Brok… |
Ben Balter |
WP Document Revisions |
2025-12-24T13:10:41.715Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68584 |
8.8 (3.1)
|
WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site R… |
Constantin Boiangiu |
Vimeotheque |
2025-12-24T13:10:41.424Z | 2026-01-20T14:28:28.674Z |
| CVE-2025-68583 |
8.8 (3.1)
|
WordPress Fast User Switching plugin <= 1.4.10 - Cross… |
Tikweb Management |
Fast User Switching |
2025-12-24T13:10:41.121Z | 2026-01-20T14:28:28.749Z |
| CVE-2025-68582 |
8.8 (3.1)
|
WordPress Funnelforms Free plugin <= 3.8 - Broken Acce… |
Funnelforms |
Funnelforms Free |
2025-12-24T13:10:40.817Z | 2026-01-20T14:28:28.482Z |
| CVE-2025-68581 |
8.1 (3.1)
|
WordPress YITH Slider for page builders plugin <= 1.0.… |
YITHEMES |
YITH Slider for page builders |
2025-12-24T13:10:40.513Z | 2026-01-20T14:28:28.581Z |
| CVE-2025-68580 |
8.8 (3.1)
|
WordPress Advanced Classifieds & Directory Pro plugin … |
pluginsware |
Advanced Classifieds & Directory Pro |
2025-12-24T13:10:40.193Z | 2026-01-20T14:28:28.604Z |
| CVE-2025-68579 |
8.1 (3.1)
|
WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Acce… |
FolioVision |
FV Simpler SEO |
2025-12-24T13:10:39.669Z | 2026-01-20T14:28:28.329Z |
| CVE-2025-68578 |
8.1 (3.1)
|
WordPress Addonify plugin <= 2.0.4 - Broken Access Con… |
Addonify |
Addonify |
2025-12-24T13:10:39.343Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68577 |
8.8 (3.1)
|
WordPress Virusdie plugin <= 1.1.6 - Broken Access Con… |
Virusdie |
Virusdie |
2025-12-24T13:10:38.980Z | 2026-01-20T14:28:28.467Z |
| CVE-2025-68576 |
7.5 (3.1)
|
WordPress Virusdie plugin <= 1.1.6 - Sensitive Data Ex… |
Virusdie |
Virusdie |
2025-12-24T13:10:38.690Z | 2026-01-20T14:28:28.713Z |
| CVE-2025-68575 |
8.8 (3.1)
|
WordPress Wappointment plugin <=2.7.2 - Broken Access … |
Wappointment team |
Wappointment |
2025-12-24T13:10:38.366Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68574 |
6.1 (3.1)
|
WordPress WPBakery Visual Composer WHMCS Elements plug… |
voidcoders |
WPBakery Visual Composer WHMCS Elements |
2025-12-24T13:10:38.100Z | 2026-01-20T14:28:28.414Z |
| CVE-2025-68573 |
8.8 (3.1)
|
WordPress Simple Keyword to Link plugin <= 1.5 - Cross… |
Alessandro Piconi |
Simple Keyword to Link |
2025-12-24T13:10:37.793Z | 2026-01-20T14:28:28.455Z |
| CVE-2025-68572 |
8.8 (3.1)
|
WordPress BBP Core plugin <= 1.4.1 - Broken Access Con… |
Spider Themes |
BBP Core |
2025-12-24T13:10:37.515Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68571 |
8.8 (3.1)
|
WordPress SALESmanago plugin <= 3.9.0 - Broken Access … |
SALESmanago |
SALESmanago |
2025-12-24T13:10:37.254Z | 2026-01-20T14:28:28.533Z |
| CVE-2025-68570 |
9.8 (3.1)
|
WordPress Captivate Sync plugin <= 3.2.2 - SQL Injecti… |
captivateaudio |
Captivate Sync |
2025-12-24T13:10:36.970Z | 2026-01-20T14:28:28.532Z |
| CVE-2025-68569 |
8.8 (3.1)
|
WordPress WP Time Slots Booking Form plugin <= 1.2.38 … |
codepeople |
WP Time Slots Booking Form |
2025-12-24T13:10:36.669Z | 2026-01-20T14:28:28.254Z |
| CVE-2025-68568 |
7.5 (3.1)
|
WordPress Popup Builder: Exit-Intent pop-up, Spin the … |
integrationclaspo |
Popup Builder: Exit-Intent pop-up, Spin the Wheel, Newsletter signup, Email Capture & Lead Generation forms maker |
2025-12-24T13:10:36.357Z | 2026-01-20T14:28:28.398Z |
| CVE-2025-68567 |
8.8 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:36.094Z | 2026-01-20T14:28:28.301Z |
| CVE-2025-68566 |
5.4 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:35.820Z | 2026-01-20T14:28:28.563Z |
| CVE-2025-68565 |
9.8 (3.1)
|
WordPress Twitch Player plugin <= 2.1.3 - Broken Acces… |
JayBee |
Twitch Player |
2025-12-24T13:10:35.534Z | 2026-01-20T14:28:28.511Z |
| CVE-2025-68563 |
9.8 (3.1)
|
WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - L… |
WP Shuffle |
Subscribe to Unlock Lite |
2025-12-24T12:31:30.996Z | 2026-01-20T14:28:28.665Z |
| CVE-2025-68562 |
9.9 (3.1)
|
WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Uplo… |
RomanCode |
MapSVG |
2025-12-29T21:13:24.913Z | 2026-01-20T14:28:28.382Z |
| CVE-2025-68561 |
7.6 (3.1)
|
WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection … |
Ruben Garcia |
AutomatorWP |
2025-12-23T11:34:34.900Z | 2026-01-20T14:28:28.768Z |
| CVE-2025-68560 |
7.5 (3.1)
|
WordPress TheGem Theme Elements (for Elementor) plugin… |
CodexThemes |
TheGem Theme Elements (for Elementor) |
2025-12-23T11:36:26.213Z | 2026-01-20T14:28:28.760Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68590 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:26.337 | 2026-01-20T15:19:49.757 |
| fkie_cve-2025-68589 | Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget … | 2025-12-24T13:16:26.220 | 2026-01-20T15:19:49.590 |
| fkie_cve-2025-68588 | Missing Authorization vulnerability in totalsoft TS Poll poll-wp allows Exploiting Incorrectly Conf… | 2025-12-24T13:16:26.100 | 2026-01-20T15:19:49.457 |
| fkie_cve-2025-68587 | Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured … | 2025-12-24T13:16:25.980 | 2026-01-20T15:19:49.330 |
| fkie_cve-2025-68586 | Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Config… | 2025-12-24T13:16:25.860 | 2026-01-20T15:19:49.200 |
| fkie_cve-2025-68585 | Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allow… | 2025-12-24T13:16:25.740 | 2026-01-20T15:19:49.070 |
| fkie_cve-2025-68584 | Cross-Site Request Forgery (CSRF) vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vime… | 2025-12-24T13:16:25.620 | 2026-01-20T15:19:48.943 |
| fkie_cve-2025-68583 | Cross-Site Request Forgery (CSRF) vulnerability in Tikweb Management Fast User Switching fast-user-… | 2025-12-24T13:16:25.507 | 2026-01-20T15:19:48.817 |
| fkie_cve-2025-68582 | Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploit… | 2025-12-24T13:16:25.387 | 2026-01-20T15:19:48.687 |
| fkie_cve-2025-68581 | Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-… | 2025-12-24T13:16:25.267 | 2026-01-20T15:19:48.557 |
| fkie_cve-2025-68580 | Cross-Site Request Forgery (CSRF) vulnerability in pluginsware Advanced Classifieds & Directory Pro… | 2025-12-24T13:16:25.140 | 2026-01-20T15:19:48.420 |
| fkie_cve-2025-68579 | Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exp… | 2025-12-24T13:16:25.020 | 2026-01-20T15:19:48.293 |
| fkie_cve-2025-68578 | Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Inco… | 2025-12-24T13:16:24.893 | 2026-01-20T15:19:48.163 |
| fkie_cve-2025-68577 | Missing Authorization vulnerability in Virusdie Virusdie virusdie allows Exploiting Incorrectly Con… | 2025-12-24T13:16:24.777 | 2026-01-20T15:19:48.037 |
| fkie_cve-2025-68576 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdi… | 2025-12-24T13:16:24.660 | 2026-01-20T15:19:47.920 |
| fkie_cve-2025-68575 | Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploitin… | 2025-12-24T13:16:24.540 | 2026-01-20T15:19:47.793 |
| fkie_cve-2025-68574 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:24.423 | 2026-01-20T15:19:47.663 |
| fkie_cve-2025-68573 | Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi Simple Keyword to Link simple-… | 2025-12-24T13:16:24.300 | 2026-01-20T15:19:47.537 |
| fkie_cve-2025-68572 | Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectl… | 2025-12-24T13:16:24.183 | 2026-01-20T15:19:47.407 |
| fkie_cve-2025-68571 | Missing Authorization vulnerability in SALESmanago SALESmanago salesmanago allows Exploiting Incorr… | 2025-12-24T13:16:24.070 | 2026-01-20T15:19:47.267 |
| fkie_cve-2025-68570 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:23.953 | 2026-01-20T15:19:47.127 |
| fkie_cve-2025-68569 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-… | 2025-12-24T13:16:23.833 | 2026-01-20T15:19:46.990 |
| fkie_cve-2025-68568 | Missing Authorization vulnerability in integrationclaspo Popup Builder: Exit-Intent pop-up, Spin th… | 2025-12-24T13:16:23.710 | 2026-01-20T15:19:46.863 |
| fkie_cve-2025-68567 | Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro my-auctions-allegro-… | 2025-12-24T13:16:23.593 | 2026-01-20T15:19:46.743 |
| fkie_cve-2025-68566 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:23.470 | 2026-01-20T15:19:46.617 |
| fkie_cve-2025-68565 | Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting… | 2025-12-24T13:16:23.340 | 2026-01-20T15:19:46.493 |
| fkie_cve-2025-68563 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:23.223 | 2026-01-20T15:19:46.373 |
| fkie_cve-2025-68562 | Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a W… | 2025-12-29T22:15:43.310 | 2026-01-20T15:19:46.273 |
| fkie_cve-2025-68561 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-23T12:15:46.567 | 2026-01-20T15:19:46.180 |
| fkie_cve-2025-68560 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-23T12:15:46.430 | 2026-01-20T15:19:46.083 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-wh86-wjvr-gp4g |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w4xm-vpx3-v86f |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request F… | 2025-10-27T03:30:40Z | 2026-01-20T15:31:39Z |
| ghsa-w294-95cp-qx33 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-rrvr-f37x-r3f9 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-qh3g-9vrf-p9vh |
5.3 (3.1)
|
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing … | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-hrf6-48c7-hhqf |
5.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box allows Cross Site Request Forg… | 2025-10-29T06:31:12Z | 2026-01-20T15:31:39Z |
| ghsa-h9fv-xmvq-pgf6 |
5.3 (3.1)
|
Missing Authorization vulnerability in Facebook Facebook for WooCommerce allows Exploiting Incorrec… | 2025-10-29T06:31:13Z | 2026-01-20T15:31:39Z |
| ghsa-f647-c8g3-5cgm |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-w… | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-c2rv-fm36-43g7 |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in FanBridge FanBridge signup fanbridge-signup allo… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-9p7p-v96r-fv6r |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Allegro Marketing hpb seo plugin for WordPress h… | 2025-10-29T09:30:22Z | 2026-01-20T15:31:39Z |
| ghsa-4w5q-r88j-fm53 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:39Z |
| ghsa-4cj4-4jvg-p6q8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-3wcv-7wxv-gvf8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:39Z |
| ghsa-v8q4-wpfv-hmr2 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-rxr2-m2mh-wpx6 |
4.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoh… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-qc8p-jp3g-x9hm |
8.8 (3.1)
|
Missing Authorization vulnerability in MDZ Persian Admnin Fonts persian-admin-fonts allows Exploiti… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-mx76-j492-6c3v |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-hg8r-q6jx-8pfj |
5.3 (3.1)
|
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functional… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-fh89-2rg8-6gx9 |
5.3 (3.1)
|
Missing Authorization vulnerability in 沃之涛 百度站长SEO合集(支持百度/神马/Bing/头条推送) baiduseo allows Accessing F… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-c8qv-m95w-84cx |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in raychat Raychat raychat allows Cross Site Reques… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-8rmj-2xg2-c6p9 |
4.3 (3.1)
|
Missing Authorization vulnerability in Kiotviet KiotViet Sync kiotvietsync allows Exploiting Incorr… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-7chw-hhvh-5rp9 |
5.3 (3.1)
|
Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allow… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-75wf-2743-qp5f |
5.3 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in airesvsg ACF to REST API acf-to-… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:38Z |
| ghsa-r3xr-wm72-mg2w |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-qvpv-xh75-74pw |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-prw8-6vx3-vrxm |
9.1 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in videowhisper Paid Videoc… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-p9x7-3xvx-2h65 |
4.3 (3.1)
|
Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploit… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-p98w-mx82-xhg4 |
5.3 (3.1)
|
Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploitin… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-j46c-hfxp-3h44 |
7.2 (3.1)
|
Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended al… | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ghsa-h9rr-38f2-f57m |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio CloudSearch cloud-search allows … | 2025-10-27T03:30:39Z | 2026-01-20T15:31:37Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-85 |
|
Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool. | plone | 2021-05-21T22:15:00Z | 2021-06-09T05:00:54.946731Z |
| pysec-2021-78 |
|
Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in th… | plone | 2021-05-20T16:15:00Z | 2021-06-09T05:00:50.662546Z |
| pysec-2021-84 |
|
Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or H… | plone | 2021-05-21T22:15:00Z | 2021-06-02T03:48:11.504291Z |
| pysec-2021-81 |
|
Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted … | plone | 2021-05-21T22:15:00Z | 2021-06-02T03:48:09.722168Z |
| pysec-2021-87 |
|
Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates… | wasmtime | 2021-05-24T16:15:00Z | 2021-06-02T03:48:07.159295Z |
| pysec-2021-83 |
|
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity … | plone | 2021-05-21T22:15:00Z | 2021-06-02T03:48:05.392145Z |
| pysec-2021-79 |
|
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as use… | plone | 2021-05-21T22:15:00Z | 2021-06-02T03:48:01.619218Z |
| pysec-2021-88 |
|
Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, use… | zope | 2021-05-21T14:15:00Z | 2021-06-02T03:47:57.190321Z |
| pysec-2021-12 |
|
Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memo… | eventlet | 2021-05-07T15:15:00Z | 2021-05-14T17:02:00Z |
| pysec-2021-47 |
|
Pydantic is a data validation and settings management using Python type hinting. In affec… | pydantic | 2021-05-13T19:15:00Z | 2021-05-13T19:15:00Z |
| pysec-2021-7 |
|
In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, Upl… | django | 2021-05-05T15:15:00Z | 2021-05-13T13:41:00Z |
| pysec-2021-8 |
|
In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+)… | django | 2021-05-06T16:15:00Z | 2021-05-12T08:15:00Z |
| pysec-2021-6 |
|
In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser all… | django | 2021-04-06T15:15:00Z | 2021-05-12T08:15:00Z |
| pysec-2021-30 |
|
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input … | octoprint | 2021-05-11T14:15:00Z | 2021-05-11T15:18:00Z |
| pysec-2021-29 |
|
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it a… | octoprint | 2021-05-11T14:15:00Z | 2021-05-11T15:18:00Z |
| pysec-2021-4 |
|
The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to … | apache-airflow | 2021-05-02T08:15:00Z | 2021-05-10T20:07:00Z |
| pysec-2021-64 |
|
django-filter is a generic system for filtering Django QuerySets based on user selections… | django-filter | 2021-04-29T21:15:00Z | 2021-05-10T17:55:00Z |
| pysec-2021-20 |
|
markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of servi… | markdown2 | 2021-03-03T16:15:00Z | 2021-05-10T03:15:00Z |
| pysec-2020-110 |
|
In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious u… | sopel-plugins-channelmgnt | 2020-10-13T18:15:00Z | 2021-05-04T14:02:00Z |
| pysec-2021-58 |
|
sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some … | sopel-plugins-channelmgnt | 2021-04-09T16:15:00Z | 2021-05-04T13:59:00Z |
| pysec-2020-21 |
|
The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to … | apache-airflow | 2020-12-11T14:15:00Z | 2021-05-04T00:15:00Z |
| pysec-2020-19 |
|
In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like … | apache-airflow | 2020-09-17T14:15:00Z | 2021-05-04T00:15:00Z |
| pysec-2021-1 |
|
A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by defa… | ansible | 2021-04-29T16:15:00Z | 2021-05-03T20:43:00Z |
| pysec-2021-114 |
|
Wagtail is a Django content management system. In affected versions of Wagtail, when savi… | wagtail | 2021-04-19T19:15:00Z | 2021-04-29T14:24:00Z |
| pysec-2021-25 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-04-12T22:15:00Z | 2021-04-26T18:40:00Z |
| pysec-2021-21 |
|
Sydent is a reference Matrix identity server. Sydent does not limit the size of requests … | matrix-sydent | 2021-04-15T21:15:00Z | 2021-04-22T17:19:00Z |
| pysec-2021-24 |
|
### Impact Missing input validation of some parameters on the endpoints used to confirm t… | matrix-sydent | 2021-04-15T18:15:00Z | 2021-04-22T17:17:00Z |
| pysec-2021-22 |
|
Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requ… | matrix-sydent | 2021-04-15T21:15:00Z | 2021-04-22T15:27:00Z |
| pysec-2021-23 |
|
Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send… | matrix-sydent | 2021-04-15T21:15:00Z | 2021-04-22T15:25:00Z |
| pysec-2021-27 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-04-12T21:15:00Z | 2021-04-21T17:02:00Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-31999 | @festify/secure-session creates a secure stateless cookie session for Fastify. At the end… | 2024-04-11T05:03:20.694460Z |
| gsd-2024-31998 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.829994Z |
| gsd-2024-31997 | XWiki Platform is a generic wiki platform. Prior to versions 4.10.19, 15.5.4, and 15.10-r… | 2024-04-11T05:03:20.654474Z |
| gsd-2024-31996 | XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to version… | 2024-04-11T05:03:20.682006Z |
| gsd-2024-31995 | `@digitalbazaar/zcap` provides JavaScript reference implementation for Authorization Capa… | 2024-04-11T05:03:20.664760Z |
| gsd-2024-31994 | Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, an attacker can … | 2024-04-11T05:03:20.530442Z |
| gsd-2024-31993 | Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the scrape_image… | 2024-04-11T05:03:20.672540Z |
| gsd-2024-31992 | Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safe_scrape_… | 2024-04-11T05:03:20.724244Z |
| gsd-2024-31991 | Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safe_scrape_… | 2024-04-11T05:03:20.795097Z |
| gsd-2024-31990 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The API server … | 2024-04-11T05:03:20.633956Z |
| gsd-2024-31989 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.548538Z |
| gsd-2024-31988 | XWiki Platform is a generic wiki platform. Starting in version 13.9-rc-1 and prior to ver… | 2024-04-11T05:03:20.619141Z |
| gsd-2024-31987 | XWiki Platform is a generic wiki platform. Starting in version 6.4-milestone-1 and prior … | 2024-04-11T05:03:20.770578Z |
| gsd-2024-31986 | XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions … | 2024-04-11T05:03:20.888268Z |
| gsd-2024-31985 | XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions … | 2024-04-11T05:03:20.744904Z |
| gsd-2024-31984 | XWiki Platform is a generic wiki platform. Starting in version 7.2-rc-1 and prior to vers… | 2024-04-11T05:03:20.665843Z |
| gsd-2024-31983 | XWiki Platform is a generic wiki platform. In multilingual wikis, translations can be edi… | 2024-04-11T05:03:20.638618Z |
| gsd-2024-31982 | XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior … | 2024-04-11T05:03:20.794018Z |
| gsd-2024-31981 | XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to version… | 2024-04-11T05:03:20.649617Z |
| gsd-2024-31980 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.570619Z |
| gsd-2024-31979 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.895082Z |
| gsd-2024-31978 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devi… | 2024-04-11T05:03:20.717946Z |
| gsd-2024-31977 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.782276Z |
| gsd-2024-31976 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.669748Z |
| gsd-2024-31975 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.822986Z |
| gsd-2024-31974 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.769726Z |
| gsd-2024-31973 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.766906Z |
| gsd-2024-31972 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.791557Z |
| gsd-2024-31971 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.602854Z |
| gsd-2024-31970 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.776817Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-0000-REVERSING-LABS-6E39C1F1D818680B | 2025-12-23T08:40:53Z | 2025-12-23T08:40:53Z | |
| mal-2025-192903 | Malicious code in chalk-thrift (RubyGems) | 2025-12-23T08:40:52Z | 2025-12-23T08:40:52Z |
| mal-0000-reversing-labs-760415061aa3d189 | 2025-12-23T08:40:52Z | 2025-12-23T08:40:52Z | |
| MAL-2025-192903 | Malicious code in chalk-thrift (RubyGems) | 2025-12-23T08:40:52Z | 2025-12-23T08:40:52Z |
| MAL-0000-REVERSING-LABS-760415061AA3D189 | 2025-12-23T08:40:52Z | 2025-12-23T08:40:52Z | |
| mal-2025-192902 | Malicious code in chalk-service (RubyGems) | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z |
| mal-0000-reversing-labs-28d7985dc818c11d | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z | |
| MAL-2025-192902 | Malicious code in chalk-service (RubyGems) | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z |
| MAL-0000-REVERSING-LABS-28D7985DC818C11D | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z | |
| mal-2025-192901 | Malicious code in chalk-sentry (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-2025-192900 | Malicious code in chalk-interface (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-2025-192899 | Malicious code in chalk-hostname (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-0000-reversing-labs-dc1e691b373fdd5f | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| mal-0000-reversing-labs-c051874c322af525 | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| mal-0000-reversing-labs-65f44def7487b6dd | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| MAL-2025-192901 | Malicious code in chalk-sentry (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| MAL-2025-192900 | Malicious code in chalk-interface (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| MAL-2025-192899 | Malicious code in chalk-hostname (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| MAL-0000-REVERSING-LABS-DC1E691B373FDD5F | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| MAL-0000-REVERSING-LABS-C051874C322AF525 | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| MAL-0000-REVERSING-LABS-65F44DEF7487B6DD | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| mal-2025-192898 | Malicious code in chalk-henson (RubyGems) | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z |
| mal-2025-192897 | Malicious code in chalk-consul (RubyGems) | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z |
| mal-0000-reversing-labs-b3620d1b7479ed2a | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z | |
| mal-0000-reversing-labs-1f90962698c9dd69 | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z | |
| MAL-2025-192898 | Malicious code in chalk-henson (RubyGems) | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z |
| MAL-2025-192897 | Malicious code in chalk-consul (RubyGems) | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z |
| MAL-0000-REVERSING-LABS-B3620D1B7479ED2A | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z | |
| MAL-0000-REVERSING-LABS-1F90962698C9DD69 | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z | |
| mal-2025-192896 | Malicious code in chalk-cli (RubyGems) | 2025-12-23T08:40:48Z | 2025-12-23T08:40:48Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0098 | MediaWiki: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0096 | Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0095 | Fortinet Produkte: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0094 | Microsoft Azure: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0092 | Microsoft Office: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0089 | xwiki: Schwachstelle ermöglicht Privilegieneskalation | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0088 | Fortinet FortiOS: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0087 | Fortinet FortiManager: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0086 | Adobe Photoshop: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0085 | Adobe Creative Cloud Applikationen: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0083 | Fortinet FortiSIEM: Schwachstelle ermöglicht Denial of Service | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0082 | Fortinet FortiWeb: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0081 | Fortinet FortiPortal: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0080 | Fortinet FortiSandbox: Schwachstelle ermöglicht Codeausführung | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0079 | Fortinet FortiRecorder: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0078 | Linksys Router E5600: Mehrere Schwachstellen ermöglicht Cross-Site Scripting | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0077 | Node.js: Mehrere Schwachstellen ermöglichen nicht spezifizierte Angriffe | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0076 | Aruba ArubaOS: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0075 | Rancher: Schwachstelle ermöglicht Cross-Site Scripting | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0074 | Arista EOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0073 | Ivanti Avalanche: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0071 | Fortinet FortiClient: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0069 | Fortinet FortiSwitch: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0068 | Fortinet FortiRecorder: Schwachstelle ermöglicht Manipulation von Dateien | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0067 | Fortinet FortiSIEM: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0066 | Fortinet FortiMail: Schwachstelle ermöglicht Codeausführung | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0065 | Fortinet FortiVoice: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0062 | Phoenix Technologies BIOS: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-01-14T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0060 | PowerDNS: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2018-05-10T22:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0059 | PowerDNS: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-11-06T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:9620 | Red Hat Security Advisory: OpenShift Container Platform 4.14.41 bug fix and security update | 2024-11-20T04:17:57+00:00 | 2026-01-21T23:26:22+00:00 |
| rhsa-2024:9551 | Red Hat Security Advisory: grafana-pcp security update | 2024-11-13T14:54:47+00:00 | 2026-01-21T23:26:18+00:00 |
| rhsa-2024:8981 | Red Hat Security Advisory: OpenShift Container Platform 4.17.4 bug fix and security update | 2024-11-13T04:13:47+00:00 | 2026-01-21T23:26:00+00:00 |
| rhsa-2024:8847 | Red Hat Security Advisory: grafana-pcp security update | 2024-11-05T03:58:20+00:00 | 2026-01-21T23:25:59+00:00 |
| rhsa-2024:8683 | Red Hat Security Advisory: OpenShift Container Platform 4.16.20 bug fix and security update | 2024-11-06T03:29:21+00:00 | 2026-01-21T23:25:52+00:00 |
| rhsa-2024:8678 | Red Hat Security Advisory: grafana security update | 2024-10-30T19:42:46+00:00 | 2026-01-21T23:25:51+00:00 |
| rhsa-2024:8546 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.5 bug fixes and container updates | 2024-10-28T21:28:29+00:00 | 2026-01-21T23:25:51+00:00 |
| rhsa-2024:8533 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.4.6 security updates and bug fixes | 2024-10-28T17:06:38+00:00 | 2026-01-21T23:25:50+00:00 |
| rhsa-2024:8507 | Red Hat Security Advisory: grafana security update | 2024-10-28T10:01:19+00:00 | 2026-01-21T23:25:47+00:00 |
| rhsa-2024:8351 | Red Hat Security Advisory: grafana:7.3.6 security update | 2024-10-23T10:12:31+00:00 | 2026-01-21T23:25:44+00:00 |
| rhsa-2024:8327 | Red Hat Security Advisory: grafana security update | 2024-10-22T15:15:27+00:00 | 2026-01-21T23:25:41+00:00 |
| rhsa-2024:8113 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.3 security and bug fix update | 2024-10-15T08:52:38+00:00 | 2026-01-21T23:25:31+00:00 |
| rhsa-2024:8077 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:43+00:00 | 2026-01-21T23:25:29+00:00 |
| rhsa-2024:8023 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.34.0 security update & enhancements | 2024-10-14T00:59:58+00:00 | 2026-01-21T23:25:26+00:00 |
| rhsa-2024:8076 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:49+00:00 | 2026-01-21T23:25:24+00:00 |
| rhsa-2024:8075 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:59+00:00 | 2026-01-21T23:25:23+00:00 |
| rhsa-2024:7994 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.3 bug fixes and container updates | 2024-10-11T01:43:45+00:00 | 2026-01-21T23:25:20+00:00 |
| rhsa-2024:7759 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.3 security updates | 2024-10-10T16:53:04+00:00 | 2026-01-21T23:25:12+00:00 |
| rhsa-2024:7726 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.2 | 2024-10-07T09:24:48+00:00 | 2026-01-21T23:25:11+00:00 |
| rhsa-2024:7725 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.5 | 2024-10-07T09:24:53+00:00 | 2026-01-21T23:25:11+00:00 |
| rhsa-2024:7724 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.11 | 2024-10-07T09:22:37+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7706 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2024-10-07T01:12:29+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7550 | Red Hat Security Advisory: golang security update | 2024-10-02T18:24:59+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7502 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-10-02T11:50:23+00:00 | 2026-01-21T23:25:04+00:00 |
| rhsa-2024:7443 | Red Hat Security Advisory: RHACS 4.5 enhancement and security update | 2024-10-01T09:03:41+00:00 | 2026-01-21T23:25:03+00:00 |
| rhsa-2024:7052 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA) | 2024-09-24T12:51:36+00:00 | 2026-01-21T23:24:53+00:00 |
| rhsa-2024:6779 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.6 bug fixes and container updates | 2024-09-18T19:22:01+00:00 | 2026-01-21T23:24:41+00:00 |
| rhsa-2024:6235 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.1.2 | 2024-09-03T14:56:15+00:00 | 2026-01-21T23:24:29+00:00 |
| rhsa-2024:6211 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.1 security update | 2024-09-03T10:05:20+00:00 | 2026-01-21T23:24:28+00:00 |
| rhsa-2024:6210 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.4 security update | 2024-09-03T10:05:02+00:00 | 2026-01-21T23:24:28+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-170-02 | Mitsubishi Electric MC Works64, MC Works32 | 2020-06-18T00:00:00.000000Z | 2020-06-18T00:00:00.000000Z |
| icsma-20-163-01 | Philips IntelliBridge Enterprise IBE | 2020-06-11T00:00:00.000000Z | 2020-06-11T00:00:00.000000Z |
| icsa-20-163-01 | OSIsoft PI Web API 2019 | 2020-06-11T00:00:00.000000Z | 2020-06-11T00:00:00.000000Z |
| icsma-18-228-01 | Philips PageWriter TC10, TC20, TC30, TC50, and TC70 Cardiographs (Update A) | 2018-08-16T00:00:00.000000Z | 2020-06-09T00:00:00.000000Z |
| icsa-20-161-06 | Siemens SINUMERIK | 2020-06-09T00:00:00.000000Z | 2020-06-09T00:00:00.000000Z |
| icsa-20-161-01 | Advantech WebAccess Node | 2020-06-09T00:00:00.000000Z | 2020-06-09T00:00:00.000000Z |
| icsa-20-133-02 | OSIsoft PI System (Update A) | 2020-05-12T00:00:00.000000Z | 2020-06-09T00:00:00.000000Z |
| icsa-20-154-06 | SWARCO CPU LS4000 | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-05 | GE Grid Solutions Reason RT Clocks | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-04 | ABB Central Licensing System | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-03 | ABB Multiple System 800xA Products | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-02 | ABB System 800xA Base | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-01 | ABB System 800xA | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-147-02 | Johnson Controls Kantech EntraPass | 2020-05-26T00:00:00.000000Z | 2020-05-26T00:00:00.000000Z |
| icsa-20-142-02 | Schneider Electric EcoStruxure Operator Terminal Expert | 2020-05-21T00:00:00.000000Z | 2020-05-21T00:00:00.000000Z |
| icsa-20-142-01 | Johnson Controls Software House C-CURE 9000 and American Dynamics victor VMS | 2020-05-21T00:00:00.000000Z | 2020-05-21T00:00:00.000000Z |
| icsa-20-140-02 | Emerson OpenEnterprise | 2020-05-19T00:00:00.000000Z | 2020-05-19T00:00:00.000000Z |
| icsa-20-140-01 | Rockwell Automation EDS Subsystem | 2020-05-19T00:00:00.000000Z | 2020-05-19T00:00:00.000000Z |
| icsa-20-135-02 | Emerson WirelessHART Gateway | 2020-05-14T00:00:00.000000Z | 2020-05-14T00:00:00.000000Z |
| icsa-20-135-01 | Opto 22 SoftPAC Project | 2020-05-14T00:00:00.000000Z | 2020-05-14T00:00:00.000000Z |
| icsa-19-213-04 | 3S-Smart Software Solutions GmbH CODESYS V3 (Update A) | 2019-08-01T00:00:00.000000Z | 2020-05-14T00:00:00.000000Z |
| icsa-20-133-01 | Eaton Intelligent Power Manager | 2020-05-12T00:00:00.000000Z | 2020-05-12T00:00:00.000000Z |
| icsa-19-255-02 | 3S-Smart Software Solutions GmbH CODESYS V3 Library Manager (Update A) | 2019-09-12T00:00:00.000000Z | 2020-05-12T00:00:00.000000Z |
| icsa-19-227-04 | Siemens SINAMICS (Update C) | 2019-08-15T00:00:00.000000Z | 2020-05-12T00:00:00.000000Z |
| icsa-19-190-05 | Siemens SIPROTEC 5 and DIGSI 5 (Update C) | 2019-07-09T00:00:00.000000Z | 2020-05-12T00:00:00.000000Z |
| icsa-20-128-01 | Advantech WebAccess Node | 2020-05-07T00:00:00.000000Z | 2020-05-07T00:00:00.000000Z |
| icsa-20-126-02 | SAE IT-systems FW-50 Remote Telemetry Unit (RTU) | 2020-05-05T00:00:00.000000Z | 2020-05-05T00:00:00.000000Z |
| icsa-20-126-01 | Fazecast jSerialComm | 2020-05-05T00:00:00.000000Z | 2020-05-05T00:00:00.000000Z |
| icsa-20-119-01 | LCDS LAquis SCADA | 2020-04-28T00:00:00.000000Z | 2020-04-28T00:00:00.000000Z |
| icsa-19-122-03 | Sierra Wireless AirLink ALEOS (Update B) | 2019-05-02T00:00:00.000000Z | 2020-04-23T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asr920-ABjcLmef | Cisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-apic-ksv-3wzbhyt4 | Cisco Application Services Engine Software Authorization Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-apic-epu-f8y5kuop | Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-APIC-KSV-3wzbHYT4 | Cisco Application Services Engine Software Authorization Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-APIC-EPU-F8y5kUOP | Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-asaftd-path-je3azww43 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:18:00+00:00 |
| cisco-sa-asaftd-path-JE3azWw43 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:18:00+00:00 |
| cisco-sa-ftd-dos-2-ss2h7awe | Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:15:25+00:00 |
| cisco-sa-ftd-dos-2-sS2h7aWe | Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:15:25+00:00 |
| cisco-sa-ftd-dos-rdpe34sd8 | Cisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:11:10+00:00 |
| cisco-sa-ftd-dos-Rdpe34sd8 | Cisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:11:10+00:00 |
| cisco-sa-asaftd-ipv6-67pa658k | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:07:35+00:00 |
| cisco-sa-asaftd-ipv6-67pA658k | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:07:35+00:00 |
| cisco-sa-asaftd-mgcp-suqb8vkh | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:04:05+00:00 |
| cisco-sa-asaftd-mgcp-SUqB8VKH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:04:05+00:00 |
| cisco-sa-ftd-mgmt-interface-dos-fkg4mutu | Cisco Firepower Threat Defense Software Management Interface Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:00:50+00:00 |
| cisco-sa-ftd-mgmt-interface-dos-FkG4MuTU | Cisco Firepower Threat Defense Software Management Interface Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T21:00:50+00:00 |
| cisco-sa-ftd-dos-n2vqzasr | Cisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:53:05+00:00 |
| cisco-sa-ftd-dos-N2vQZASR | Cisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:53:05+00:00 |
| cisco-sa-asa-ftd-ospf-dos-rhmqy8qx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:50:55+00:00 |
| cisco-sa-asa-ftd-ospf-dos-RhMQY8qx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:50:55+00:00 |
| cisco-sa-asa-ftd-ospf-memleak-dhpsgfnv | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:45:05+00:00 |
| cisco-sa-asa-ftd-ospf-memleak-DHpsgfnv | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:45:05+00:00 |
| cisco-sa-ftd-tls-dos-4v5nmwtz | Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:40:35+00:00 |
| cisco-sa-ftd-tls-dos-4v5nmWtZ | Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:40:35+00:00 |
| cisco-sa-asa-ssl-vpn-dos-qy7bhpjn | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:36:50+00:00 |
| cisco-sa-asa-ssl-vpn-dos-qY7BHpjN | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-06-02T20:36:50+00:00 |
| cisco-sa-nxos-ipip-dos-kct9x4 | Cisco NX-OS Software Unexpected IP in IP Packet Processing Vulnerability | 2020-06-01T16:00:00+00:00 | 2020-06-01T16:00:00+00:00 |
| cisco-sa-nxos-ipip-dos-kCT9X4 | Cisco NX-OS Software Unexpected IP in IP Packet Processing Vulnerability | 2020-06-01T16:00:00+00:00 | 2020-06-01T16:00:00+00:00 |
| cisco-sa-20200219-ucs-boot-bypass | Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability | 2020-02-19T16:00:00+00:00 | 2020-06-01T13:56:07+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-53589 | GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files. | 2024-12-02T00:00:00.000Z | 2025-09-03T21:53:33.000Z |
| msrc_cve-2025-8534 | libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference | 2025-08-02T00:00:00.000Z | 2025-09-03T21:53:12.000Z |
| msrc_cve-2023-5731 | Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119. | 2023-10-01T00:00:00.000Z | 2025-09-03T21:53:08.000Z |
| msrc_cve-2024-49899 | drm/amd/display: Initialize denominators' default to 1 | 2024-10-01T07:00:00.000Z | 2025-09-03T21:53:00.000Z |
| msrc_cve-2024-4770 | When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. | 2024-05-02T07:00:00.000Z | 2025-09-03T21:52:44.000Z |
| msrc_cve-2024-34158 | Stack exhaustion in Parse in go/build/constraint | 2024-09-01T07:00:00.000Z | 2025-09-03T21:51:48.000Z |
| msrc_cve-2024-30204 | In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. | 2024-03-02T08:00:00.000Z | 2025-09-03T21:51:16.000Z |
| msrc_cve-2022-49534 | scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT | 2025-02-02T00:00:00.000Z | 2025-09-03T21:50:59.000Z |
| msrc_cve-2024-4777 | Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. | 2024-05-02T07:00:00.000Z | 2025-09-03T21:50:56.000Z |
| msrc_cve-2025-22127 | f2fs: fix potential deadloop in prepare_compress_overwrite() | 2025-04-02T00:00:00.000Z | 2025-09-03T21:50:44.000Z |
| msrc_cve-2025-9165 | LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak | 2025-08-02T00:00:00.000Z | 2025-09-03T21:50:43.000Z |
| msrc_cve-2023-4583 | When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. | 2023-09-01T00:00:00.000Z | 2025-09-03T21:50:30.000Z |
| msrc_cve-2024-56433 | shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid. | 2024-12-02T00:00:00.000Z | 2025-09-03T21:50:29.000Z |
| msrc_cve-2023-52935 | mm/khugepaged: fix ->anon_vma race | 2025-03-02T00:00:00.000Z | 2025-09-03T21:50:22.000Z |
| msrc_cve-2024-1550 | A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8. | 2024-02-02T08:00:00.000Z | 2025-09-03T21:50:21.000Z |
| msrc_cve-2024-43906 | drm/admgpu: fix dereferencing null pointer context | 2024-08-02T00:00:00.000Z | 2025-09-03T21:50:17.000Z |
| msrc_cve-2025-54351 | In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv). | 2025-08-02T00:00:00.000Z | 2025-09-03T21:50:16.000Z |
| msrc_cve-2022-30552 | Das U-Boot 2022.01 has a Buffer Overflow. | 2022-06-02T00:00:00.000Z | 2025-09-03T21:49:58.000Z |
| msrc_cve-2024-43839 | bna: adjust 'name' buf size of bna_tcb and bna_ccb structures | 2024-08-02T00:00:00.000Z | 2025-09-03T21:49:44.000Z |
| msrc_cve-2024-27407 | fs/ntfs3: Fixed overflow check in mi_enum_attr() | 2024-05-02T07:00:00.000Z | 2025-09-03T21:48:49.000Z |
| msrc_cve-2022-49547 | btrfs: fix deadlock between concurrent dio writes when low on free data space | 2025-02-02T00:00:00.000Z | 2025-09-03T21:48:49.000Z |
| msrc_cve-2023-52733 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2024-05-02T07:00:00.000Z | 2025-09-03T21:48:44.000Z |
| msrc_cve-2023-23604 | A duplicate <code>SystemPrincipal</code> object could be created when parsing a non-system html document via <code>DOMParser::ParseFromSafeString</code>. This could have lead to bypassing web security checks. This vulnerability affects Firefox < 109. | 2023-06-01T07:00:00.000Z | 2025-09-03T21:48:25.000Z |
| msrc_cve-2022-45419 | If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox < 107. | 2022-12-02T00:00:00.000Z | 2025-09-03T21:48:25.000Z |
| msrc_cve-2024-45720 | Apache Subversion: Command line argument injection on Windows platforms | 2024-10-01T07:00:00.000Z | 2025-09-03T21:48:03.000Z |
| msrc_cve-2024-38540 | bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq | 2024-06-02T07:00:00.000Z | 2025-09-03T21:48:01.000Z |
| msrc_cve-2024-43834 | xdp: fix invalid wait context of page_pool_destroy() | 2024-08-02T00:00:00.000Z | 2025-09-03T21:47:49.000Z |
| msrc_cve-2024-11407 | Denial of Service through Data corruption in gRPC-C++ | 2024-11-02T00:00:00.000Z | 2025-09-03T21:47:16.000Z |
| msrc_cve-2022-48990 | drm/amdgpu: fix use-after-free during gpu recovery | 2024-10-01T07:00:00.000Z | 2025-09-03T21:46:43.000Z |
| msrc_cve-2022-49529 | drm/amdgpu/pm: fix the null pointer while the smu is disabled | 2025-02-02T00:00:00.000Z | 2025-09-03T21:46:35.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201707-0616 | dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and co… | 2024-02-13T23:04:08.248000Z |
| var-201808-0771 | Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI. Cybrotec… | 2024-02-13T23:04:07.133000Z |
| var-201711-0013 | In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business A… | 2024-02-13T23:04:07.986000Z |
| var-201908-1851 | Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31,… | 2024-02-13T23:04:06.103000Z |
| var-201906-0213 | Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vul… | 2024-02-13T23:04:06.398000Z |
| var-201812-1037 | An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.… | 2024-02-13T23:04:06.793000Z |
| var-201911-0438 | The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine_s… | 2024-02-13T23:04:05.851000Z |
| var-201910-1280 | An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.… | 2024-02-13T23:04:05.944000Z |
| var-202201-1951 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, whe… | 2024-02-13T23:04:03.419000Z |
| var-202203-1173 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control … | 2024-02-13T23:03:59.249000Z |
| var-202210-0212 | ATA 190, ATA 191, ATA 192 is a Cisco ATA 190 series analog telephone adapter. The Ci… | 2024-02-13T23:03:58.457000Z |
| var-200404-0064 | Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote att… | 2024-02-13T23:03:55.143000Z |
| var-201305-0152 | The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 ce… | 2024-02-13T23:03:49.412000Z |
| var-201702-0790 | An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the A… | 2024-02-13T23:03:47.930000Z |
| var-201803-2203 | Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.… | 2024-02-13T23:03:46.546000Z |
| var-202009-0727 | A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1… | 2024-02-13T23:03:44.191000Z |
| var-202107-1678 | There is a vulnerability when configuring permission isolation in smartphones. Successful… | 2024-02-13T23:03:43.314000Z |
| var-202203-0662 | wire-server provides back end services for Wire, an open source messenger. In versions of… | 2024-02-13T23:03:42.146000Z |
| var-202201-1960 | On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on… | 2024-02-13T23:03:42.555000Z |
| var-202201-1372 | On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1… | 2024-02-13T23:03:42.661000Z |
| var-202201-0633 | A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail… | 2024-02-13T23:03:42.823000Z |
| var-200710-0282 | F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass v… | 2024-02-13T23:03:01.230000Z |
| var-200808-0340 | Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient… | 2024-02-13T23:03:00.705000Z |
| var-201302-0386 | The Cisco Network Admission Control (NAC) agent on Mac OS X does not verify the X.509 cer… | 2024-02-13T23:02:57.028000Z |
| var-201412-0303 | The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attacke… | 2024-02-13T23:02:56.187000Z |
| var-201309-0198 | The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows… | 2024-02-13T23:02:56.794000Z |
| var-201511-0008 | Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x bef… | 2024-02-13T23:02:55.713000Z |
| var-201802-0595 | A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Ci… | 2024-02-13T23:02:54.192000Z |
| var-201711-0048 | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5… | 2024-02-13T23:02:54.447000Z |
| var-201707-0165 | On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2… | 2024-02-13T23:02:54.734000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2007-000572 | WebCart cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000560 | Safari URL spoofing vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000559 | Yayoi Kaikei improper handling of credential information | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000551 | Aruba Mobility Controller Series cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000548 | Nessus report function vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000507 | Flash Player allows to send arbitrary Referer headers | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000494 | KDDI sample CGI download program directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000491 | Lhaca LHZ Archive Extended Header Size Processing Buffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000487 | sHTTPd cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000486 | rktSNS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000476 | Hiki arbitrary file deletion vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000471 | RaidenHTTPD cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000454 | dotProject cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000447 | Internet Explorer vulnerable in handling MHTML protocol | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000446 | Internet Explorer vulnerable in MHTML handling | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000434 | ADPLAN cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000429 | Meneame cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000420 | HP System Management Homepage cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000400 | Advance-Flow cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000395 | Homepage Builder sample CGI programs vulnerable to OS command injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000322 | Lunascape RSS reader arbitrary script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000301 | Canon Network Camera Server VB100 Series vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000290 | InfoBarrier4 self-decrypted file vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000260 | Shihonkanri Plus Ver2 GOOUT directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000259 | open-gorotto cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000236 | Overlay Weaver cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000229 | MailDwarf vulnerability allows unauthorized sending of emails | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000228 | MailDwarf cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000227 | CruiseWorks and Minna De Office vulnerable in access restrictions | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000225 | NewsGlue and Ikinari Jijyoutsuu arbitrary script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0690-1 | Security update for ovmf | 2025-02-24T13:06:14Z | 2025-02-24T13:06:14Z |
| suse-su-2025:0689-1 | Security update for pam_pkcs11 | 2025-02-24T12:57:14Z | 2025-02-24T12:57:14Z |
| suse-su-2025:0688-1 | Security update for pam_pkcs11 | 2025-02-24T12:55:41Z | 2025-02-24T12:55:41Z |
| suse-su-2025:0662-1 | Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6) | 2025-02-24T11:04:13Z | 2025-02-24T11:04:13Z |
| suse-su-2025:0675-1 | Security update for java-1_8_0-ibm | 2025-02-24T10:46:04Z | 2025-02-24T10:46:04Z |
| suse-su-2025:0674-1 | Security update for java-1_8_0-ibm | 2025-02-24T10:45:09Z | 2025-02-24T10:45:09Z |
| suse-su-2025:0669-1 | Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6) | 2025-02-24T09:03:58Z | 2025-02-24T09:03:58Z |
| suse-su-2025:0667-1 | Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5) | 2025-02-24T08:33:24Z | 2025-02-24T08:33:24Z |
| suse-su-2025:0681-1 | Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) | 2025-02-24T08:04:10Z | 2025-02-24T08:04:10Z |
| suse-fu-2025:0661-1 | Feature update for slurm and pdsh | 2025-02-24T02:11:30Z | 2025-02-24T02:11:30Z |
| suse-fu-2025:0660-1 | Feature update for slurm and pdsh | 2025-02-24T02:10:33Z | 2025-02-24T02:10:33Z |
| suse-su-2025:0659-1 | Security update for openssh | 2025-02-23T12:03:53Z | 2025-02-23T12:03:53Z |
| suse-su-2025:0652-1 | Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) | 2025-02-22T21:33:29Z | 2025-02-22T21:33:29Z |
| suse-su-2025:0656-1 | Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5) | 2025-02-22T20:04:02Z | 2025-02-22T20:04:02Z |
| suse-su-2025:0655-1 | Security update for postgresql17 | 2025-02-22T19:33:29Z | 2025-02-22T19:33:29Z |
| suse-su-2025:0645-1 | Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5) | 2025-02-21T23:34:23Z | 2025-02-21T23:34:23Z |
| suse-su-2025:0643-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-02-21T21:35:01Z | 2025-02-21T21:35:01Z |
| suse-su-2025:0650-1 | Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6) | 2025-02-21T21:05:42Z | 2025-02-21T21:05:42Z |
| suse-su-2025:0639-1 | Security update for webkit2gtk3 | 2025-02-21T18:56:51Z | 2025-02-21T18:56:51Z |
| suse-su-2025:0638-1 | Security update for webkit2gtk3 | 2025-02-21T15:38:46Z | 2025-02-21T15:38:46Z |
| suse-su-2025:0637-1 | Security update for postgresql16 | 2025-02-21T14:16:23Z | 2025-02-21T14:16:23Z |
| suse-su-2025:0636-1 | Security update for postgresql16 | 2025-02-21T14:15:12Z | 2025-02-21T14:15:12Z |
| suse-su-2025:0635-1 | Security update for postgresql16 | 2025-02-21T14:13:10Z | 2025-02-21T14:13:10Z |
| suse-su-2025:0634-1 | Security update for postgresql15 | 2025-02-21T14:12:43Z | 2025-02-21T14:12:43Z |
| suse-su-2025:0633-1 | Security update for postgresql15 | 2025-02-21T14:11:55Z | 2025-02-21T14:11:55Z |
| suse-su-2025:0632-1 | Security update for postgresql14 | 2025-02-21T14:10:33Z | 2025-02-21T14:10:33Z |
| suse-su-2025:0631-1 | Security update for postgresql14 | 2025-02-21T14:09:03Z | 2025-02-21T14:09:03Z |
| suse-su-2025:0629-1 | Security update for grub2 | 2025-02-21T12:55:12Z | 2025-02-21T12:55:12Z |
| suse-su-2025:0624-1 | Security update for grafana | 2025-02-21T11:00:27Z | 2025-02-21T11:00:27Z |
| suse-su-2025:0623-1 | Security update for grafana | 2025-02-21T11:00:07Z | 2025-02-21T11:00:07Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13159-1 | ruby3.2-rubygem-jquery-rails-4.5.1-1.3 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13158-1 | ruby3.2-rubygem-http-cookie-1.0.5-1.4 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13157-1 | ruby3.2-rubygem-http-5.1.0-1.4 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13156-1 | ruby3.2-rubygem-globalid-1.1.0-1.3 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13155-1 | ruby3.2-rubygem-fluentd-1.15.3-1.4 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13154-1 | perl-File-Path-2.180000-1.15 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13153-1 | php8-8.2.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13152-1 | jtidy-1.0.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13151-1 | jackson-dataformat-csv-2.15.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13150-1 | jackson-dataformat-xml-2.15.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13149-1 | indent-2.2.13-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13148-1 | apache-ivy-2.5.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13147-1 | libQt6Concurrent6-6.5.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13146-1 | python310-GitPython-3.1.32.1689011721.5d45ce2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13145-1 | kernel-devel-6.4.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13144-1 | ungoogled-chromium-116.0.5845.96-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13143-1 | golang-github-prometheus-prometheus-2.46.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13142-1 | yt-dlp-2023.07.06-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13141-1 | libproc2-0-4.0.3-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13140-1 | libprocps8-3.3.17-13.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13139-1 | chromedriver-116.0.5845.96-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13138-1 | w3m-0.5.3+git20230121-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13137-1 | ruby3.2-rubygem-rails-html-sanitizer-1.5.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13136-1 | python310-cmarkgfm-2022.10.27-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13135-1 | python-2.7.18-37.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13134-1 | libecpg6-15.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13133-1 | libmozjs-102-0-102.14.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13132-1 | java-1_8_0-openj9-1.8.0.382-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13131-1 | java-17-openj9-17.0.8.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13130-1 | java-11-openj9-11.0.20.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23026 | Google Android权限提升漏洞（CNVD-2025-23026） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23025 | Google Android权限提升漏洞（CNVD-2025-23025） | 2025-09-08 | 2025-09-30 |
| cnvd-2025-23024 | Ashlar-Vellum Cobalt类型混淆漏洞（NVD-C-2025-543225） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-23023 | Ashlar-Vellum Cobalt越界读取漏洞（CNVD-2025-23023） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-23022 | Ashlar-Vellum Cobalt类型混淆漏洞（CNVD-2025-23022） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22961 | Delta Electronics CNCSoft越界写入漏洞（CNVD-2025-22961） | 2025-06-11 | 2025-09-29 |
| cnvd-2025-22960 | Delta Electronics CNCSoft越界写入漏洞 | 2025-06-11 | 2025-09-29 |
| cnvd-2025-22959 | Delta Electronics DTN Soft代码执行漏洞（CNVD-2025-22959） | 2025-07-04 | 2025-09-29 |
| cnvd-2025-22958 | Delta Electronics DIAView目录遍历漏洞 | 2025-08-11 | 2025-09-29 |
| cnvd-2025-22957 | Delta Electronics DTN Soft代码执行漏洞 | 2025-08-20 | 2025-09-29 |
| cnvd-2025-22956 | Delta Electronics DIAEnergie跨站脚本漏洞（CNVD-2025-22956） | 2025-08-22 | 2025-09-29 |
| cnvd-2025-22955 | Delta Electronics DIAEnergie跨站脚本漏洞（CNVD-2025-22955） | 2025-08-22 | 2025-09-29 |
| cnvd-2025-22954 | Delta Electronics DIAEnergie跨站脚本漏洞（CNVD-2025-22954） | 2025-08-22 | 2025-09-29 |
| cnvd-2025-22953 | Delta Electronics DIAEnergie跨站脚本漏洞（CNVD-2025-22953） | 2025-08-26 | 2025-09-29 |
| cnvd-2025-22952 | Delta Electronics EIP Builder XML外部实体注入漏洞 | 2025-08-28 | 2025-09-29 |
| cnvd-2025-22951 | Delta Electronics COMMGR命令注入漏洞 | 2025-08-28 | 2025-09-29 |
| cnvd-2025-22950 | Delta Electronics COMMGR代码注入漏洞（CNVD-2025-22950） | 2025-08-28 | 2025-09-29 |
| cnvd-2025-22949 | Delta Electronics DIAView安全绕过漏洞 | 2025-09-04 | 2025-09-29 |
| cnvd-2025-22948 | Delta Electronics DIALink目录遍历漏洞（CNVD-2025-22948） | 2025-09-15 | 2025-09-29 |
| cnvd-2025-22947 | Delta Electronics DIALink目录遍历漏洞（CNVD-2025-22947） | 2025-09-15 | 2025-09-29 |
| cnvd-2025-22946 | Delta Electronics CNCSoft-G2堆栈缓冲区溢出漏洞 | 2025-09-28 | 2025-09-29 |
| cnvd-2025-22945 | Delta Electronics CNCSoft-G2堆栈缓冲区溢出漏洞（CNVD-2025-22945） | 2025-09-28 | 2025-09-29 |
| cnvd-2025-22944 | Ashlar-Vellum Cobalt类型混淆漏洞（CNVD-2025-22944） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22943 | Ashlar-Vellum Cobalt代码执行漏洞 | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22942 | Ashlar-Vellum Cobalt整数溢出漏洞（CNVD-2025-22942） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22941 | Ashlar-Vellum Cobalt整数溢出漏洞 | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22940 | Ashlar-Vellum Cobalt内存损坏漏洞 | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22939 | Ashlar-Vellum Cobalt越界读取漏洞（CNVD-2025-22939） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22934 | Dell Unity操作系统命令注入漏洞 | 2025-08-11 | 2025-09-29 |
| cnvd-2025-22920 | DELL Cloud Disaster Recovery OS命令注入漏洞 | 2025-09-28 | 2025-09-29 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0862 | Multiples vulnérabilités dans GitLab | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| CERTFR-2024-AVI-0861 | Multiples vulnérabilités dans Wireshark | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| CERTFR-2024-AVI-0860 | Multiples vulnérabilités dans les produits VMware | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| CERTFR-2024-AVI-0859 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| CERTFR-2024-AVI-0858 | Multiples vulnérabilités dans Mitel Micollab | 2024-10-10T00:00:00.000000 | 2024-10-10T00:00:00.000000 |
| certfr-2024-avi-0857 | Multiples vulnérabilités dans les produits Microsoft | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0856 | Multiples vulnérabilités dans Microsoft Azure | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0855 | Multiples vulnérabilités dans Microsoft .Net | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0854 | Multiples vulnérabilités dans Microsoft Windows | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0853 | Multiples vulnérabilités dans Microsoft Office | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0852 | Vulnérabilité dans Intel TDX Module | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0851 | Multiples vulnérabilités dans les produits Ivanti | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0850 | Vulnérabilité dans Synacor Zimbra Collaboration | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0849 | Multiples vulnérabilités dans Google Chrome | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0848 | Multiples vulnérabilités dans Adobe Commerce et Magento | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0847 | Multiples vulnérabilités dans les produits Fortinet | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0845 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-10-08T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0857 | Multiples vulnérabilités dans les produits Microsoft | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0856 | Multiples vulnérabilités dans Microsoft Azure | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0855 | Multiples vulnérabilités dans Microsoft .Net | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0854 | Multiples vulnérabilités dans Microsoft Windows | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0853 | Multiples vulnérabilités dans Microsoft Office | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0852 | Vulnérabilité dans Intel TDX Module | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0851 | Multiples vulnérabilités dans les produits Ivanti | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0850 | Vulnérabilité dans Synacor Zimbra Collaboration | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0849 | Multiples vulnérabilités dans Google Chrome | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0848 | Multiples vulnérabilités dans Adobe Commerce et Magento | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0847 | Multiples vulnérabilités dans les produits Fortinet | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0845 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-10-08T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0846 | Multiples vulnérabilités dans les produits Siemens | 2024-10-08T00:00:00.000000 | 2024-10-08T00:00:00.000000 |