Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62752 |
6.5 (3.1)
|
WordPress Calendar.online / Kalender.digital plugin <=… |
kalender.digital |
Calendar.online / Kalender.digital |
2025-12-31T11:57:50.214Z | 2026-01-20T14:28:15.737Z |
| CVE-2025-62751 |
4.3 (3.1)
|
WordPress Vireo theme <= 1.0.24 - Broken Access Contro… |
Extend Themes |
Vireo |
2025-12-31T16:02:50.502Z | 2026-01-20T14:28:15.653Z |
| CVE-2025-62750 |
5.9 (3.1)
|
WordPress WooCommerce Parcelas plugin <= 1.3.5 - Cross… |
Filipe Seabra |
WooCommerce Parcelas |
2025-12-31T13:32:33.519Z | 2026-01-20T14:28:15.793Z |
| CVE-2025-62749 |
6.5 (3.1)
|
WordPress User Specific Content plugin <= 1.0.6 - Cros… |
Bainternet |
User Specific Content |
2025-12-31T11:59:31.689Z | 2026-01-20T14:28:15.605Z |
| CVE-2025-62747 |
5.3 (3.1)
|
WordPress Featured Image Generator plugin <= 1.3.3 - B… |
Aum Watcharapon |
Featured Image Generator |
2025-12-31T15:33:59.438Z | 2026-01-20T14:28:15.556Z |
| CVE-2025-62746 |
6.5 (3.1)
|
WordPress Featured Video for WordPress – VideographyWP… |
CodeFlavors |
Featured Video for WordPress & VideographyWP |
2025-12-30T16:13:59.784Z | 2026-01-20T14:28:15.635Z |
| CVE-2025-62744 |
6.5 (3.1)
|
WordPress Page Title Splitter plugin <= 2.5.9 - Cross … |
Chris Steman |
Page Title Splitter |
2025-12-31T12:49:47.870Z | 2026-01-20T14:28:15.542Z |
| CVE-2025-62743 |
6.5 (3.1)
|
WordPress MyBookTable Bookstore plugin <= 3.5.5 - Cros… |
zookatron |
MyBookTable Bookstore |
2025-12-31T12:51:39.424Z | 2026-01-20T14:28:15.645Z |
| CVE-2025-62742 |
6.5 (3.1)
|
WordPress Curator.io plugin <= 1.9.5 - Cross Site Scri… |
Curator.io |
Curator.io |
2025-12-31T13:03:08.340Z | 2026-01-20T14:28:15.700Z |
| CVE-2025-62740 |
5.3 (3.1)
|
WordPress WP-CRM System plugin <= 3.4.5 - Broken Acces… |
Mario Peshev |
WP-CRM System |
2025-12-09T14:52:22.982Z | 2026-01-20T14:28:15.621Z |
| CVE-2025-62739 |
8.8 (3.1)
|
WordPress Add Custom Codes plugin <= 4.80 - Cross Site… |
SaifuMak |
Add Custom Codes |
2025-12-09T14:52:22.791Z | 2026-01-20T14:28:15.551Z |
| CVE-2025-62737 |
5.3 (3.1)
|
WordPress Image Cleanup plugin <= 1.9.2 - Sensitive Da… |
opicron |
Image Cleanup |
2025-12-09T14:52:22.392Z | 2026-01-20T14:28:15.641Z |
| CVE-2025-62736 |
4.3 (3.1)
|
WordPress Image Cleanup plugin <= 1.9.2 - Broken Acces… |
opicron |
Image Cleanup |
2025-12-09T14:52:22.205Z | 2026-01-20T14:28:15.541Z |
| CVE-2025-62735 |
5.3 (3.1)
|
WordPress User Spam Remover plugin <= 1.1 - Sensitive … |
Joel |
User Spam Remover |
2025-12-09T14:52:22.012Z | 2026-01-20T14:28:15.525Z |
| CVE-2025-62734 |
4.3 (3.1)
|
WordPress Media Library Downloader plugin <= 1.4.0 - C… |
Michael Revellin-Clerc |
Media Library Downloader |
2025-12-09T14:52:21.803Z | 2026-01-20T14:28:15.531Z |
| CVE-2025-62733 |
4.3 (3.1)
|
WordPress Custom Sidebars by ProteusThemes plugin <= 1… |
ProteusThemes |
Custom Sidebars by ProteusThemes |
2025-12-09T14:52:21.585Z | 2026-01-20T14:28:15.669Z |
| CVE-2025-62154 |
4.3 (3.1)
|
WordPress AI Content Writing Assistant (Content Writer… |
Recorp |
AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One |
2025-12-31T15:41:50.974Z | 2026-01-20T14:28:15.491Z |
| CVE-2025-62153 |
8.8 (3.1)
|
WordPress Quick Interest Slider plugin <= 3.1.5 - Brok… |
Graham |
Quick Interest Slider |
2025-12-09T14:52:21.381Z | 2026-01-20T14:28:15.484Z |
| CVE-2025-62152 |
8.8 (3.1)
|
WordPress ConveyThis plugin <= 268.10 - Broken Access … |
ConveyThis |
ConveyThis |
2025-12-09T14:52:21.181Z | 2026-01-20T14:28:15.428Z |
| CVE-2025-62151 |
8.8 (3.1)
|
WordPress Virtuaria PagBank / PagSeguro para Woocommer… |
Virtuaria |
Virtuaria PagBank / PagSeguro para Woocommerce |
2025-12-09T14:52:20.912Z | 2026-01-20T14:28:15.640Z |
| CVE-2025-62150 |
4.3 (3.1)
|
WordPress History Timeline plugin <= 1.0.6 - Broken Ac… |
Themesawesome |
History Timeline |
2025-12-31T15:42:58.777Z | 2026-01-20T14:28:15.376Z |
| CVE-2025-62149 |
5.9 (3.1)
|
WordPress Add Custom Codes plugin <= 4.80 - Cross Site… |
SaifuMak |
Add Custom Codes |
2025-12-31T13:18:40.521Z | 2026-01-20T14:28:15.384Z |
| CVE-2025-62148 |
4.3 (3.1)
|
WordPress Robots.txt rewrite plugin <= 1.6.1 - Cross S… |
Eugen Bobrowski |
Robots.txt rewrite |
2025-12-31T15:45:54.708Z | 2026-01-20T14:28:15.450Z |
| CVE-2025-62147 |
5.3 (3.1)
|
WordPress Realbig plugin <= 1.1.3 - Broken Access Cont… |
Nik Melnik |
Realbig |
2025-12-31T15:01:16.790Z | 2026-01-20T14:28:15.466Z |
| CVE-2025-62146 |
6.5 (3.1)
|
WordPress MX Time Zone Clocks plugin <= 5.1.1 - Cross … |
Maksym Marko |
MX Time Zone Clocks |
2025-12-31T08:47:52.280Z | 2026-01-20T14:28:15.559Z |
| CVE-2025-62145 |
5.3 (3.1)
|
WordPress DMCA Protection Badge plugin <= 2.2.0 - Brok… |
NewClarity |
DMCA Protection Badge |
2025-12-31T15:01:59.749Z | 2026-01-20T14:28:15.330Z |
| CVE-2025-62144 |
5.4 (3.1)
|
WordPress Core Web Vitals & PageSpeed Booster plugin <… |
Mohammed Kaludi |
Core Web Vitals & PageSpeed Booster |
2025-12-31T13:48:57.774Z | 2026-01-20T14:28:15.378Z |
| CVE-2025-62143 |
4.3 (3.1)
|
WordPress Post Video Players plugin <= 1.163 - Sensiti… |
nicashmu |
Post Video Players |
2025-12-31T15:49:17.340Z | 2026-01-20T14:28:15.769Z |
| CVE-2025-62142 |
5.9 (3.1)
|
WordPress Cincopa video and media plug-in plugin <= 1.… |
nicashmu |
Cincopa video and media plug-in |
2025-12-31T13:21:57.454Z | 2026-01-20T14:28:15.155Z |
| CVE-2025-62141 |
5.3 (3.1)
|
WordPress Wawp plugin <= 4.0.5 - Broken Access Control… |
101gen |
Wawp |
2025-12-31T15:07:45.128Z | 2026-01-20T14:28:15.307Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64155 |
9.4 (3.1)
|
An improper neutralization of special elements us… |
Fortinet |
FortiSIEM |
2026-01-13T16:32:28.665Z | 2026-01-20T15:53:24.312Z |
| CVE-2025-14883 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-68016. Reason: This candidate is a reservation duplicate of CVE-2025-68016. Notes: All CVE users should reference CVE-2025-68016 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-01-20T15:07:10.646Z | |
| CVE-2011-10041 |
9.3 (4.0)
|
Uploadify <= 1.0 Unauthenticated Arbitrary File Upload |
Steven |
Uploadify |
2026-01-15T21:44:33.566Z | 2026-01-20T15:56:51.308Z |
| CVE-2025-61674 |
6.1 (3.1)
|
October CMS Vulnerable to Stored XSS via Editor and Br… |
octobercms |
october |
2026-01-10T03:14:11.185Z | 2026-01-12T17:33:33.662Z |
| CVE-2025-61676 |
6.1 (3.1)
|
October CMS Vulnerable to Stored XSS via Branding Styles |
octobercms |
october |
2026-01-10T03:14:00.708Z | 2026-01-12T17:34:13.595Z |
| CVE-2022-50441 |
N/A
|
net/mlx5: Lag, fix failure to cancel delayed bond work |
Linux |
Linux |
2025-10-01T11:42:17.313Z | 2025-10-01T11:42:17.313Z |
| CVE-2022-50442 |
N/A
|
fs/ntfs3: Validate buffer length while parsing index |
Linux |
Linux |
2025-10-01T11:42:18.012Z | 2025-10-02T07:04:16.226Z |
| CVE-2026-21881 |
9.1 (3.1)
|
Kanboard is Vulnerable to Reverse Proxy Authentication… |
kanboard |
kanboard |
2026-01-08T01:08:01.853Z | 2026-01-08T17:13:05.216Z |
| CVE-2023-53464 |
N/A
|
scsi: iscsi_tcp: Check that sock is valid before iscsi… |
Linux |
Linux |
2025-10-01T11:42:35.186Z | 2025-10-01T11:42:35.186Z |
| CVE-2023-53465 |
N/A
|
soundwire: qcom: fix storing port config out-of-bounds |
Linux |
Linux |
2025-10-01T11:42:36.007Z | 2025-10-01T11:42:36.007Z |
| CVE-2023-53466 |
N/A
|
wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit |
Linux |
Linux |
2025-10-01T11:42:36.809Z | 2025-10-01T11:42:36.809Z |
| CVE-2023-53467 |
N/A
|
wifi: rtw89: fix potential leak in rtw89_append_probe_… |
Linux |
Linux |
2025-10-01T11:42:37.757Z | 2025-10-01T11:42:37.757Z |
| CVE-2023-53468 |
N/A
|
ubifs: Fix memory leak in alloc_wbufs() |
Linux |
Linux |
2025-10-01T11:42:38.673Z | 2025-10-01T11:42:38.673Z |
| CVE-2023-53470 |
N/A
|
ionic: catch failure from devlink_alloc |
Linux |
Linux |
2025-10-01T11:42:40.221Z | 2025-10-01T11:42:40.221Z |
| CVE-2025-5499 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
slackero phpwcms image_resized.php getimagesize deseri… |
slackero |
phpwcms |
2025-06-03T13:31:07.203Z | 2025-06-03T13:42:05.740Z |
| CVE-2025-39923 |
N/A
|
dmaengine: qcom: bam_dma: Fix DT error handling for nu… |
Linux |
Linux |
2025-10-01T08:07:11.469Z | 2025-11-03T17:44:41.678Z |
| CVE-2022-50427 |
N/A
|
ALSA: ac97: fix possible memory leak in snd_ac97_dev_r… |
Linux |
Linux |
2025-10-01T11:42:06.365Z | 2025-10-01T11:42:06.365Z |
| CVE-2025-5498 |
5.1 (4.0)
5.5 (3.1)
5.5 (3.0)
|
slackero phpwcms Custom Source Tab cnt21.readform.inc.… |
slackero |
phpwcms |
2025-06-03T13:31:05.263Z | 2025-06-03T13:45:36.390Z |
| CVE-2022-50428 |
N/A
|
ext4: fix off-by-one errors in fast-commit block filling |
Linux |
Linux |
2025-10-01T11:42:07.245Z | 2025-10-01T11:42:07.245Z |
| CVE-2022-50431 |
N/A
|
ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_… |
Linux |
Linux |
2025-10-01T11:42:09.700Z | 2025-10-01T11:42:09.700Z |
| CVE-2022-50432 |
N/A
|
kernfs: fix use-after-free in __kernfs_remove |
Linux |
Linux |
2025-10-01T11:42:10.573Z | 2025-12-23T13:29:25.735Z |
| CVE-2022-50433 |
N/A
|
efi: ssdt: Don't free memory if ACPI table was loaded … |
Linux |
Linux |
2025-10-01T11:42:11.444Z | 2025-10-01T11:42:11.444Z |
| CVE-2025-39839 |
N/A
|
batman-adv: fix OOB read/write in network-coding decode |
Linux |
Linux |
2025-09-19T15:26:14.688Z | 2025-11-03T17:43:54.812Z |
| CVE-2025-39841 |
N/A
|
scsi: lpfc: Fix buffer free/clear order in deferred re… |
Linux |
Linux |
2025-09-19T15:26:16.349Z | 2025-11-03T17:43:56.756Z |
| CVE-2026-22775 |
7.5 (3.1)
|
devalue vulnerable to denial of service due to memory/… |
sveltejs |
devalue |
2026-01-15T18:59:37.499Z | 2026-01-15T19:22:56.774Z |
| CVE-2026-22774 |
7.5 (3.1)
|
devalue vulnerable to denial of service due to memory … |
sveltejs |
devalue |
2026-01-15T18:53:21.963Z | 2026-01-15T19:16:10.500Z |
| CVE-2025-67835 |
6.5 (3.1)
|
Paessler PRTG Network Monitor before 25.4.114 all… |
n/a |
n/a |
2026-01-14T00:00:00.000Z | 2026-01-14T20:15:34.007Z |
| CVE-2025-67834 |
5.4 (3.1)
|
Paessler PRTG Network Monitor before 25.4.114 all… |
n/a |
n/a |
2026-01-14T00:00:00.000Z | 2026-01-14T20:11:32.702Z |
| CVE-2025-39842 |
N/A
|
ocfs2: prevent release journal inode after journal shutdown |
Linux |
Linux |
2025-09-19T15:26:17.075Z | 2025-11-03T17:43:57.858Z |
| CVE-2025-67833 |
6.1 (3.1)
|
Paessler PRTG Network Monitor before 25.4.114 all… |
n/a |
n/a |
2026-01-14T00:00:00.000Z | 2026-01-14T19:07:08.548Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-69089 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:16:02.317 | 2026-01-20T15:20:01.910 |
| fkie_cve-2025-69088 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:16:02.193 | 2026-01-20T15:20:01.787 |
| fkie_cve-2025-69087 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-05T11:17:42.420 | 2026-01-20T15:20:01.690 |
| fkie_cve-2025-69034 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-30T11:16:02.063 | 2026-01-20T15:20:01.557 |
| fkie_cve-2025-69033 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:16:01.940 | 2026-01-20T15:20:01.433 |
| fkie_cve-2025-69032 | Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar a… | 2025-12-30T11:16:01.827 | 2026-01-20T15:20:01.307 |
| fkie_cve-2025-69031 | Missing Authorization vulnerability in Skywarrior Arcane arcane allows Exploiting Incorrectly Confi… | 2025-12-30T11:16:01.703 | 2026-01-20T15:20:01.183 |
| fkie_cve-2025-69030 | Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler b… | 2025-12-30T11:16:01.590 | 2026-01-20T15:20:01.060 |
| fkie_cve-2025-69029 | Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur a… | 2025-12-30T11:16:01.470 | 2026-01-20T15:20:00.933 |
| fkie_cve-2025-69028 | Missing Authorization vulnerability in BoldGrid weForms weforms allows Exploiting Incorrectly Confi… | 2025-12-30T11:16:01.353 | 2026-01-20T15:20:00.810 |
| fkie_cve-2025-69027 | Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite … | 2025-12-30T11:16:01.243 | 2026-01-20T15:20:00.683 |
| fkie_cve-2025-69026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roxnor … | 2025-12-30T11:16:01.130 | 2026-01-20T15:20:00.547 |
| fkie_cve-2025-69025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Aethoni… | 2025-12-30T11:16:01.007 | 2026-01-20T15:20:00.393 |
| fkie_cve-2025-69024 | Missing Authorization vulnerability in bizswoop BizPrint print-google-cloud-print-gcp-woocommerce a… | 2025-12-30T11:16:00.880 | 2026-01-20T15:20:00.270 |
| fkie_cve-2025-69023 | Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows E… | 2025-12-30T11:16:00.763 | 2026-01-20T15:20:00.140 |
| fkie_cve-2025-69022 | Missing Authorization vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite … | 2025-12-30T11:16:00.643 | 2026-01-20T15:20:00.003 |
| fkie_cve-2025-69021 | Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Sit… | 2025-12-30T11:16:00.517 | 2026-01-20T15:19:59.863 |
| fkie_cve-2025-69020 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:16:00.393 | 2026-01-20T15:19:59.740 |
| fkie_cve-2025-69019 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:16:00.260 | 2026-01-20T15:19:59.617 |
| fkie_cve-2025-69018 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:16:00.130 | 2026-01-20T15:19:59.487 |
| fkie_cve-2025-69017 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:16:00.017 | 2026-01-20T15:19:59.357 |
| fkie_cve-2025-69016 | Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-e… | 2025-12-30T11:15:59.887 | 2026-01-20T15:19:59.237 |
| fkie_cve-2025-69015 | Missing Authorization vulnerability in Automattic Crowdsignal Forms crowdsignal-forms allows Exploi… | 2025-12-30T11:15:59.770 | 2026-01-20T15:19:59.107 |
| fkie_cve-2025-69014 | Server-Side Request Forgery (SSRF) vulnerability in Youzify Youzify youzify allows Server Side Requ… | 2025-12-30T11:15:59.650 | 2026-01-20T15:19:58.987 |
| fkie_cve-2025-69013 | Missing Authorization vulnerability in jetmonsters Stratum stratum allows Exploiting Incorrectly Co… | 2025-12-30T11:15:59.527 | 2026-01-20T15:19:58.860 |
| fkie_cve-2025-69012 | Missing Authorization vulnerability in Stephen Harris Event Organiser event-organiser allows Exploi… | 2025-12-30T11:15:59.410 | 2026-01-20T15:19:58.737 |
| fkie_cve-2025-69010 | Missing Authorization vulnerability in themebeez Themebeez Toolkit themebeez-toolkit allows Exploit… | 2025-12-30T11:15:59.290 | 2026-01-20T15:19:58.613 |
| fkie_cve-2025-69009 | Missing Authorization vulnerability in kamleshyadav Medicalequipment medicalequipment allows Exploi… | 2025-12-30T11:15:59.167 | 2026-01-20T15:19:58.490 |
| fkie_cve-2025-69008 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:15:59.053 | 2026-01-20T15:19:58.360 |
| fkie_cve-2025-69007 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T11:15:58.930 | 2026-01-20T15:19:58.233 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-h3cx-p8jg-9mrc |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR. Advanced Database Cleaner advanced-d… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-g534-gxr9-5j65 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-fr77-chw5-pvc2 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-cx8p-42rg-pwx4 |
4.3 (3.1)
|
Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce wt-smart-coupons-for… | 2025-10-31T12:30:22Z | 2026-01-20T15:31:42Z |
| ghsa-6h7h-qg92-xfgr |
3.8 (3.1)
|
Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiti… | 2025-10-31T12:30:21Z | 2026-01-20T15:31:42Z |
| ghsa-5mv8-q8gm-mq6x |
4.3 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-… | 2025-10-31T12:30:21Z | 2026-01-20T15:31:42Z |
| ghsa-5c9w-xpcw-vprf |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Product Search for WooCommer… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:42Z |
| ghsa-5869-fm6w-9qxm |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-31T12:30:23Z | 2026-01-20T15:31:42Z |
| ghsa-w8qr-ffgq-7q5j |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-r8fw-gf62-v77w |
4.3 (3.1)
|
Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-q7hf-mwj3-84gh |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-pmpr-2fww-r5fw |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site … | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-ph8j-3xv5-c8gq |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce premmerce allows Cross Site … | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-pgpx-xg4v-wrhx |
5.4 (3.1)
|
Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premme… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-gvvw-5fwr-fmr3 |
4.3 (3.1)
|
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-gpvr-cwgx-r45c |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-fgrg-37hc-qf4g |
4.3 (3.1)
|
Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-8w5m-hc8r-mmm9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cros… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-8rwj-g494-3qp6 |
5.4 (3.1)
|
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-8gx7-cf2h-mfwc |
4.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fantast… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-8cr2-hpc7-v23m |
6.5 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-el… | 2025-10-29T09:30:24Z | 2026-01-20T15:31:41Z |
| ghsa-698r-29g4-5vv6 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:41Z |
| ghsa-xjmw-rm34-58c8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-r6p6-v684-4gh3 |
5.3 (3.1)
|
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-q25c-mp33-wj35 |
7.6 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-ppgx-ch2f-563v |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-h3r4-4xxq-ggf2 |
5.4 (3.1)
|
Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrect… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-g57x-6757-m2v6 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-f2cf-j74x-54c5 |
5.4 (3.1)
|
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-ele… | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ghsa-9pc6-xgvc-2w25 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-29T09:30:23Z | 2026-01-20T15:31:40Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-26 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-04-12T22:15:00Z | 2021-04-21T16:45:00Z |
| pysec-2021-10 |
|
A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.… | django-debug-toolbar | 2021-04-14T18:15:00Z | 2021-04-21T15:05:00Z |
| pysec-2021-18 |
|
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link. | indico | 2021-04-07T14:15:00Z | 2021-04-15T14:13:00Z |
| pysec-2021-34 |
|
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when … | pikepdf | 2021-04-01T20:15:00Z | 2021-04-09T19:15:00Z |
| pysec-2021-11 |
|
django-registration is a user registration package for Django. The django-registration pa… | django-registration | 2021-04-01T22:15:00Z | 2021-04-06T18:40:00Z |
| pysec-2020-95 |
|
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configur… | pyspark | 2020-06-23T22:15:00Z | 2021-04-02T12:15:00Z |
| pysec-2021-51 |
|
An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_ro… | salt | 2021-02-27T05:15:00Z | 2021-04-01T17:15:00Z |
| pysec-2021-50 |
|
An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor … | salt | 2021-02-27T05:15:00Z | 2021-04-01T17:15:00Z |
| pysec-2021-75 |
|
In SaltStack Salt before 3002.5, when authenticating to services using certain modules, t… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-74 |
|
In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi serv… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-73 |
|
An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vul… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-57 |
|
An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vul… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-55 |
|
An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to … | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-54 |
|
In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They mi… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-53 |
|
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can … | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-52 |
|
An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does … | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2020-28 |
|
In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg … | bleach | 2020-03-24T22:15:00Z | 2021-03-30T23:15:00Z |
| pysec-2020-27 |
|
In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with nos… | bleach | 2020-03-24T22:15:00Z | 2021-03-30T22:15:00Z |
| pysec-2020-62 |
|
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser did… | lxml | 2020-12-03T17:15:00Z | 2021-03-30T21:15:00Z |
| pysec-2020-50 |
|
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints… | jupyter-server | 2020-12-21T18:15:00Z | 2021-03-30T19:15:00Z |
| pysec-2021-19 |
|
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. … | lxml | 2021-03-21T05:15:00Z | 2021-03-30T18:47:00Z |
| pysec-2020-106 |
|
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and to… | salt | 2020-11-06T08:15:00Z | 2021-03-30T13:48:00Z |
| pysec-2020-105 |
|
The TLS module within SaltStack Salt through 3002 creates certificates with weak file per… | salt | 2020-11-06T08:15:00Z | 2021-03-30T13:44:00Z |
| pysec-2020-104 |
|
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to t… | salt | 2020-11-06T08:15:00Z | 2021-03-30T13:29:00Z |
| pysec-2021-32 |
|
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web… | omero-web | 2021-03-23T16:15:00Z | 2021-03-27T02:20:00Z |
| pysec-2021-31 |
|
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web… | omero-web | 2021-03-23T16:15:00Z | 2021-03-27T01:59:00Z |
| pysec-2019-4 |
|
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13… | ansible | 2019-10-08T19:15:00Z | 2021-03-26T22:15:00Z |
| pysec-2021-76 |
|
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohtt… | aiohttp | 2021-02-26T03:15:00Z | 2021-03-26T20:01:00Z |
| pysec-2021-35 |
|
An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overfl… | pillow | 2021-03-19T04:15:00Z | 2021-03-26T14:06:00Z |
| pysec-2020-96 |
|
A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it i… | pyyaml | 2020-03-24T15:15:00Z | 2021-03-26T02:44:00Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-31969 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.819847Z |
| gsd-2024-31968 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.765841Z |
| gsd-2024-31967 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.655152Z |
| gsd-2024-31966 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.856004Z |
| gsd-2024-31965 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.602508Z |
| gsd-2024-31964 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.637728Z |
| gsd-2024-31963 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.605718Z |
| gsd-2024-31962 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.779335Z |
| gsd-2024-31961 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.522969Z |
| gsd-2024-31960 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.845666Z |
| gsd-2024-31959 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.717393Z |
| gsd-2024-31958 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.881893Z |
| gsd-2024-31957 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.534908Z |
| gsd-2024-31956 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.560706Z |
| gsd-2024-31955 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.695461Z |
| gsd-2024-31954 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.599773Z |
| gsd-2024-31953 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.757579Z |
| gsd-2024-31952 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.643311Z |
| gsd-2024-31951 | In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buf… | 2024-04-11T05:03:20.830634Z |
| gsd-2024-31950 | In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_t… | 2024-04-11T05:03:20.620141Z |
| gsd-2024-31949 | In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capabil… | 2024-04-11T05:03:20.679258Z |
| gsd-2024-31948 | In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a B… | 2024-04-11T05:03:20.596771Z |
| gsd-2024-31947 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.548048Z |
| gsd-2024-31946 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.701190Z |
| gsd-2024-31945 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.674799Z |
| gsd-2024-31944 | Cross-Site Request Forgery (CSRF) vulnerability in Octolize WooCommerce UPS Shipping – Li… | 2024-04-11T05:03:20.562624Z |
| gsd-2024-31943 | Cross-Site Request Forgery (CSRF) vulnerability in Octolize USPS Shipping for WooCommerce… | 2024-04-11T05:03:20.876673Z |
| gsd-2024-31942 | Cross-Site Request Forgery (CSRF) vulnerability in Typps Calendarista Basic Edition.This … | 2024-04-11T05:03:20.721733Z |
| gsd-2024-31941 | Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Media Player.This issue … | 2024-04-11T05:03:20.862118Z |
| gsd-2024-31940 | Cross-Site Request Forgery (CSRF) vulnerability in RedNao Extra Product Options Builder f… | 2024-04-11T05:03:20.571278Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-0000-REVERSING-LABS-28D7985DC818C11D | 2025-12-23T08:40:51Z | 2025-12-23T08:40:51Z | |
| mal-2025-192901 | Malicious code in chalk-sentry (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-2025-192900 | Malicious code in chalk-interface (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-2025-192899 | Malicious code in chalk-hostname (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| mal-0000-reversing-labs-dc1e691b373fdd5f | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| mal-0000-reversing-labs-c051874c322af525 | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| mal-0000-reversing-labs-65f44def7487b6dd | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| MAL-2025-192901 | Malicious code in chalk-sentry (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| MAL-2025-192900 | Malicious code in chalk-interface (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| MAL-2025-192899 | Malicious code in chalk-hostname (RubyGems) | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z |
| MAL-0000-REVERSING-LABS-DC1E691B373FDD5F | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| MAL-0000-REVERSING-LABS-C051874C322AF525 | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| MAL-0000-REVERSING-LABS-65F44DEF7487B6DD | 2025-12-23T08:40:50Z | 2025-12-23T08:40:50Z | |
| mal-2025-192898 | Malicious code in chalk-henson (RubyGems) | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z |
| mal-2025-192897 | Malicious code in chalk-consul (RubyGems) | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z |
| mal-0000-reversing-labs-b3620d1b7479ed2a | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z | |
| mal-0000-reversing-labs-1f90962698c9dd69 | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z | |
| MAL-2025-192898 | Malicious code in chalk-henson (RubyGems) | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z |
| MAL-2025-192897 | Malicious code in chalk-consul (RubyGems) | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z |
| MAL-0000-REVERSING-LABS-B3620D1B7479ED2A | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z | |
| MAL-0000-REVERSING-LABS-1F90962698C9DD69 | 2025-12-23T08:40:49Z | 2025-12-23T08:40:49Z | |
| mal-2025-192896 | Malicious code in chalk-cli (RubyGems) | 2025-12-23T08:40:48Z | 2025-12-23T08:40:48Z |
| mal-0000-reversing-labs-e4417e453837a43d | 2025-12-23T08:40:48Z | 2025-12-23T08:40:48Z | |
| MAL-2025-192896 | Malicious code in chalk-cli (RubyGems) | 2025-12-23T08:40:48Z | 2025-12-23T08:40:48Z |
| MAL-0000-REVERSING-LABS-E4417E453837A43D | 2025-12-23T08:40:48Z | 2025-12-23T08:40:48Z | |
| mal-2025-192895 | Malicious code in chalk-aws (RubyGems) | 2025-12-23T08:40:47Z | 2025-12-23T08:40:47Z |
| mal-0000-reversing-labs-13ef573c570aac2d | 2025-12-23T08:40:47Z | 2025-12-23T08:40:47Z | |
| MAL-2025-192895 | Malicious code in chalk-aws (RubyGems) | 2025-12-23T08:40:47Z | 2025-12-23T08:40:47Z |
| MAL-0000-REVERSING-LABS-13EF573C570AAC2D | 2025-12-23T08:40:47Z | 2025-12-23T08:40:47Z | |
| mal-2025-192894 | Malicious code in activestorage-redundancy (RubyGems) | 2025-12-23T08:40:46Z | 2025-12-23T08:40:46Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0058 | PowerDNS: Mehrere Schwachstellen | 2020-09-22T22:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0050 | Mozilla Firefox: Mehrere Schwachstellen ermöglichen das Darstellen falscher Informationen | 2025-01-12T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2024-3622 | Pixel Patchday Dezember 2024: Mehrere Schwachstellen | 2024-12-05T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-2498 | Google Chrome / Microsoft Edge : Mehrere Schwachstellen ermöglichen Codeausführung | 2023-09-27T22:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-2337 | Apache Tomcat mod_jk Connector: Schwachstelle ermöglicht Umgehung von Sicherheitsmaßnahmen oder Offenlegung von Informationen | 2023-09-12T22:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-2305 | Google Chrome / Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2023-09-11T22:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-1738 | Red Hat OpenShift: Mehrere Schwachstellen | 2023-07-12T22:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-1230 | libssh2: Mehrere Schwachstellen | 2019-03-18T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-0842 | PowerDNS: Schwachstelle ermöglicht Denial of Service | 2022-03-27T22:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-0427 | OpenSSL: Mehrere Schwachstellen | 2016-03-01T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2025-0057 | Zoom Video Communications: Mehrere Schwachstellen | 2025-01-13T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0055 | TYPO3 Core: Mehrere Schwachstellen | 2025-01-13T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0053 | Qlik Sense: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2025-01-13T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0052 | Apache CloudStack: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-01-13T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0051 | SAP Patchday Januar 2025: Mehrere Schwachstellen | 2025-01-13T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2024-3726 | BeyondTrust Privileged Remote Access: Schwachstelle ermöglicht Ausführen von beliebigen Kommandos | 2024-12-18T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2024-3424 | Intel Graphics Driver: Mehrere Schwachstellen | 2024-11-12T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2023-2316 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2023-09-12T22:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2023-0281 | Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-02-05T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2022-0357 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2022-02-06T23:00:00.000+00:00 | 2025-01-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0046 | expat: Schwachstelle ermöglicht Denial of Service | 2015-07-26T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0045 | expat: Schwachstelle ermöglicht Codeausführung | 2016-05-17T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0044 | expat: Schwachstelle ermöglicht Codeausführung | 2016-07-04T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2024-2240 | CUPS: Mehrere Schwachstellen ermöglichen Ausführung von beliebigem Programmcode | 2024-09-26T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2024-2038 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2024-09-03T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2024-1735 | expat: Schwachstelle ermöglicht Denial of Service | 2019-06-26T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2024-1712 | Canonical Snap: Mehrere Schwachstellen | 2024-07-25T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2024-1444 | Ghostscript: Mehrere Schwachstellen | 2024-06-24T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2024-1412 | Ghostscript: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2024-06-19T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| wid-sec-w-2024-0980 | Ghostscript: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-04-28T22:00:00.000+00:00 | 2025-01-12T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:7237 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.13 | 2024-09-26T15:00:53+00:00 | 2026-01-22T16:38:36+00:00 |
| rhsa-2024:6738 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.5.7 security updates and bug fixes | 2024-09-17T19:47:09+00:00 | 2026-01-22T16:38:33+00:00 |
| rhsa-2024:5634 | Red Hat Security Advisory: podman security update | 2024-08-20T16:11:08+00:00 | 2026-01-22T16:38:22+00:00 |
| rhsa-2024:5199 | Red Hat Security Advisory: OpenShift Container Platform 4.12.63 security and extras update | 2024-08-19T01:02:38+00:00 | 2026-01-22T16:38:14+00:00 |
| rhsa-2024:5194 | Red Hat Security Advisory: container-tools:rhel8 security update | 2024-08-12T02:39:45+00:00 | 2026-01-22T16:38:13+00:00 |
| rhsa-2024:5160 | Red Hat Security Advisory: OpenShift Container Platform 4.15.27 security update | 2024-08-15T14:24:40+00:00 | 2026-01-22T16:38:13+00:00 |
| rhsa-2024:4965 | Red Hat Security Advisory: OpenShift Container Platform 4.16.6 bug fix and security update | 2024-08-06T11:28:10+00:00 | 2026-01-22T16:38:09+00:00 |
| rhsa-2024:4963 | Red Hat Security Advisory: OpenShift Container Platform 4.14.34 security update | 2024-08-07T13:32:54+00:00 | 2026-01-22T16:38:09+00:00 |
| rhsa-2024:4858 | Red Hat Security Advisory: OpenShift Container Platform 4.16.5 packages and security update | 2024-07-31T13:21:46+00:00 | 2026-01-22T16:38:08+00:00 |
| rhsa-2024:4846 | Red Hat Security Advisory: OpenShift Container Platform 4.13.46 security update | 2024-07-31T14:32:24+00:00 | 2026-01-22T16:38:04+00:00 |
| rhsa-2024:4853 | Red Hat Security Advisory: OpenShift Container Platform 4.15.24 packages and security update | 2024-07-31T00:44:58+00:00 | 2026-01-22T16:38:03+00:00 |
| rhsa-2024:4469 | Red Hat Security Advisory: OpenShift Container Platform 4.16.3 security update | 2024-07-16T13:40:33+00:00 | 2026-01-22T16:37:57+00:00 |
| rhsa-2024:4321 | Red Hat Security Advisory: OpenShift Container Platform 4.15.21 bug fix and security update | 2024-07-10T11:23:29+00:00 | 2026-01-22T16:37:55+00:00 |
| rhsa-2024:4316 | Red Hat Security Advisory: OpenShift Container Platform 4.16.2 bug fix and security update | 2024-07-09T10:50:31+00:00 | 2026-01-22T16:37:55+00:00 |
| rhsa-2024:11562 | Red Hat Security Advisory: OpenShift Container Platform 4.15.42 bug fix and security update | 2025-01-02T18:27:40+00:00 | 2026-01-22T16:37:51+00:00 |
| rhsa-2024:10823 | Red Hat Security Advisory: OpenShift Container Platform 4.16.26 bug fix and security update | 2024-12-12T00:39:58+00:00 | 2026-01-22T16:37:49+00:00 |
| rhsa-2024:10518 | Red Hat Security Advisory: OpenShift Container Platform 4.17.7 bug fix and security update | 2024-12-03T18:08:06+00:00 | 2026-01-22T16:37:47+00:00 |
| rhsa-2024:2353 | Red Hat Security Advisory: mingw components security update | 2024-04-30T10:05:08+00:00 | 2026-01-22T16:31:37+00:00 |
| rhsa-2024:2289 | Red Hat Security Advisory: libtiff security update | 2024-04-30T10:39:42+00:00 | 2026-01-22T16:30:30+00:00 |
| rhsa-2024:0998 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing 3.1.0 operator/operand containers | 2024-02-27T02:24:43+00:00 | 2026-01-22T16:30:28+00:00 |
| rhsa-2024:0271 | Red Hat Security Advisory: Logging Subsystem 5.8.2 - Red Hat OpenShift security update | 2024-01-17T11:31:54+00:00 | 2026-01-22T16:30:25+00:00 |
| rhsa-2023:7623 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.7 release and security update | 2023-12-07T12:37:11+00:00 | 2026-01-22T16:28:04+00:00 |
| rhsa-2023:7622 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.7 release and security update | 2023-12-07T12:21:12+00:00 | 2026-01-22T16:28:02+00:00 |
| rhsa-2024:0853 | Red Hat Security Advisory: Network Observability 1.5.0 for OpenShift | 2024-02-21T13:32:07+00:00 | 2026-01-22T16:27:43+00:00 |
| rhsa-2023:3722 | Red Hat Security Advisory: openssl security and bug fix update | 2023-06-21T14:51:36+00:00 | 2026-01-22T16:27:38+00:00 |
| rhsa-2023:6575 | Red Hat Security Advisory: libtiff security update | 2023-11-07T08:13:41+00:00 | 2026-01-22T16:27:35+00:00 |
| rhsa-2023:6330 | Red Hat Security Advisory: edk2 security, bug fix, and enhancement update | 2023-11-07T09:08:13+00:00 | 2026-01-22T16:27:30+00:00 |
| rhsa-2025:15615 | Red Hat Security Advisory: fence-agents security update | 2025-09-10T12:28:07+00:00 | 2026-01-22T15:46:10+00:00 |
| rhsa-2025:15723 | Red Hat Security Advisory: python-requests security update | 2025-09-15T01:16:24+00:00 | 2026-01-22T15:46:09+00:00 |
| rhsa-2025:15691 | Red Hat Security Advisory: python-requests security update | 2025-09-11T13:38:00+00:00 | 2026-01-22T15:46:08+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-112-01 | Inductive Automation Ignition | 2020-04-21T00:00:00.000000Z | 2020-04-21T00:00:00.000000Z |
| icsa-20-105-09 | Siemens TIM 3V-IE and 4R-IE Family Devices | 2020-04-14T00:00:00.000000Z | 2020-04-14T00:00:00.000000Z |
| icsa-20-105-03 | Triangle MicroWorks SCADA Data Gateway | 2020-04-14T00:00:00.000000Z | 2020-04-14T00:00:00.000000Z |
| icsa-20-105-02 | Triangle MicroWorks DNP3 Outstation Libraries | 2020-04-14T00:00:00.000000Z | 2020-04-14T00:00:00.000000Z |
| icsa-20-105-01 | Eaton HMiSoft VU3 | 2020-04-14T00:00:00.000000Z | 2020-04-14T00:00:00.000000Z |
| icsa-20-100-01 | Rockwell Automation RSLinx Classic | 2020-04-09T00:00:00.000000Z | 2020-04-09T00:00:00.000000Z |
| icsa-20-098-05 | ICSA-20-098-05_KUKA.Sim Pro | 2020-04-07T00:00:00.000000Z | 2020-04-07T00:00:00.000000Z |
| icsa-20-098-04 | Fuji Electric V-Server Lite | 2020-04-07T00:00:00.000000Z | 2020-04-07T00:00:00.000000Z |
| icsa-20-098-03 | HMS Networks eWON Flexy and Cosy | 2020-04-07T00:00:00.000000Z | 2020-04-07T00:00:00.000000Z |
| icsa-20-098-02 | GE Digital CIMPLICITY | 2020-04-07T00:00:00.000000Z | 2020-04-07T00:00:00.000000Z |
| icsa-20-098-01 | Advantech WebAccess/NMS | 2020-04-07T00:00:00.000000Z | 2020-04-07T00:00:00.000000Z |
| icsa-20-042-01 | Synergy Systems & Solutions HUSKY RTU (Update A) | 2020-02-11T00:00:00.000000Z | 2020-04-07T00:00:00.000000Z |
| icsa-20-093-01 | B&R Automation Studio | 2020-04-02T00:00:00.000000Z | 2020-04-02T00:00:00.000000Z |
| icsma-20-091-01 | BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System | 2020-03-31T00:00:00.000000Z | 2020-03-31T00:00:00.000000Z |
| icsa-20-091-02 | Mitsubishi Electric MELSEC | 2020-03-31T00:00:00.000000Z | 2020-03-31T00:00:00.000000Z |
| icsa-20-091-01 | Hirschmann Automation and Control HiOS and HiSecOS Products | 2020-03-31T00:00:00.000000Z | 2020-03-31T00:00:00.000000Z |
| icsa-20-016-01 | Schneider Electric Modicon Controllers (Update A) | 2020-01-16T00:00:00.000000Z | 2020-03-31T00:00:00.000000Z |
| icsa-20-086-01 | Advantech WebAccess | 2020-03-26T00:00:00.000000Z | 2020-03-26T00:00:00.000000Z |
| icsa-20-084-02 | Schneider Electric IGSS SCADA Software | 2020-03-24T00:00:00.000000Z | 2020-03-24T00:00:00.000000Z |
| icsma-20-079-01 | Insulet Omnipod | 2020-03-19T00:00:00.000000Z | 2020-03-19T00:00:00.000000Z |
| icsa-20-079-01 | Systech NDS-5000 Terminal Server | 2020-03-19T00:00:00.000000Z | 2020-03-19T00:00:00.000000Z |
| icsa-20-077-01 | Delta Electronics Industrial Automation CNCSoft ScreenEditor | 2020-03-17T00:00:00.000000Z | 2020-03-17T00:00:00.000000Z |
| icsa-20-072-03 | Rockwell Automation Allen-Bradley Stratix 5950 | 2020-03-12T00:00:00.000000Z | 2020-03-12T00:00:00.000000Z |
| icsa-20-072-02 | ABB Asset Suite | 2020-03-12T00:00:00.000000Z | 2020-03-12T00:00:00.000000Z |
| icsa-20-072-01 | ICSA-20-072-01_ABB eSOMS | 2020-03-12T00:00:00.000000Z | 2020-03-12T00:00:00.000000Z |
| icsa-20-070-06 | Rockwell Automation MicroLogix Controllers and RSLogix 500 Software | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-070-05 | Johnson Controls Metasys | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-070-04 | ICSA-20-070-04_Johnson Controls Kantech EntraPass | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-070-03 | Siemens Spectrum Power 5 | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-070-02 | Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A) | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20200226-mds-ovrld-dos | Cisco MDS 9000 Series Switches Denial of Service Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-05-21T15:32:26+00:00 |
| cisco-sa-uccx-rce-gmsc6rkn | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-uccx-rce-GMSC6RKN | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-pcp-sql-inj-22auwt66 | Cisco Prime Collaboration Provisioning Software SQL Injection Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-pcp-sql-inj-22Auwt66 | Cisco Prime Collaboration Provisioning Software SQL Injection Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-cpnr-dhcp-dos-bkezfhlp | Cisco Prime Network Registrar DHCP Denial of Service Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-cpnr-dhcp-dos-BkEZfhLP | Cisco Prime Network Registrar DHCP Denial of Service Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-amp4emac-dos-kfkjugtm | Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-amp4emac-dos-kfKjUGtM | Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-amp4elinux-h33dkrvb | Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability | 2020-05-20T16:00:00+00:00 | 2020-05-20T16:00:00+00:00 |
| cisco-sa-20180418-fpsnort | Cisco Firepower Detection Engine Secure Sockets Layer Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2020-05-18T15:38:13+00:00 |
| cisco-sa-20191106-wlc-dos | Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability | 2019-11-06T16:00:00+00:00 | 2020-05-11T15:58:49+00:00 |
| cisco-sa-fp2100-arp-dos-kldck8ks | Cisco Firepower 2100 Series Security Appliances ARP Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-11T15:48:19+00:00 |
| cisco-sa-fp2100-arp-dos-kLdCK8ks | Cisco Firepower 2100 Series Security Appliances ARP Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-11T15:48:19+00:00 |
| cisco-sa-20190417-air-ap-dos | Cisco Aironet Series Access Points Denial of Service Vulnerability | 2019-04-17T16:00:00+00:00 | 2020-05-11T15:39:50+00:00 |
| cisco-sa-snort_filepolbypass-m4x5dgop | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-08T15:54:59+00:00 |
| cisco-sa-snort_filepolbypass-m4X5DgOP | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-08T15:54:59+00:00 |
| cisco-asa-kerberos-bypass-96gghe2ss | Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-07T14:39:34+00:00 |
| cisco-asa-kerberos-bypass-96Gghe2sS | Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-07T14:39:34+00:00 |
| cisco-sa-xpftd-gydxyn8h | Cisco Firepower Device Manager On-Box Software XML Parsing Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-xpftd-gYDXyN8H | Cisco Firepower Device Manager On-Box Software XML Parsing Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-umbrella-head-inject-n4qarjh | Cisco Umbrella Carriage Return Line Feed Injection Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-umbrella-head-inject-n4QArJH | Cisco Umbrella Carriage Return Line Feed Injection Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ucsd-ar6baguz | Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ucsd-Ar6BAguz | Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ssl-bypass-o5tgum2n | Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ssl-bypass-O5tGum2n | Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-sma-opn-rdrct-yppmdsmq | Cisco Content Security Management Appliance Open Redirect Vulnerabilities | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-sma-opn-rdrct-yPPMdsMQ | Cisco Content Security Management Appliance Open Redirect Vulnerabilities | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-sigbypass-fcvppcep | Cisco Firepower Threat Defense Software Signature Verification Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-5728 | During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1. | 2023-10-01T00:00:00.000Z | 2025-09-03T21:46:34.000Z |
| msrc_cve-2024-0745 | The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 122. | 2024-01-01T08:00:00.000Z | 2025-09-03T21:46:31.000Z |
| msrc_cve-2024-44942 | f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC | 2024-08-02T00:00:00.000Z | 2025-09-03T21:45:30.000Z |
| msrc_cve-2024-4772 | An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126. | 2024-05-02T07:00:00.000Z | 2025-09-03T21:45:03.000Z |
| msrc_cve-2024-43835 | virtio_net: Fix napi_skb_cache_put warning | 2024-08-02T00:00:00.000Z | 2025-09-03T21:45:01.000Z |
| msrc_cve-2024-21090 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 8.3.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). | 2024-04-02T07:00:00.000Z | 2025-09-03T21:44:43.000Z |
| msrc_cve-2025-27152 | Possible SSRF and Credential Leakage via Absolute URL in axios Requests | 2025-03-02T00:00:00.000Z | 2025-09-03T21:44:02.000Z |
| msrc_cve-2023-32570 | VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. | 2023-05-01T00:00:00.000Z | 2025-09-03T21:44:01.000Z |
| msrc_cve-2023-52582 | netfs: Only call folio_start_fscache() one time for each folio | 2024-03-02T08:00:00.000Z | 2025-09-03T21:43:31.000Z |
| msrc_cve-2024-50017 | x86/mm/ident_map: Use gbpages only where full GB page should be mapped. | 2024-10-01T07:00:00.000Z | 2025-09-03T21:43:19.000Z |
| msrc_cve-2024-47736 | erofs: handle overlapped pclusters out of crafted images properly | 2024-10-01T07:00:00.000Z | 2025-09-03T21:43:14.000Z |
| msrc_cve-2023-3618 | Segmentation fault in fax3encode in libtiff/tif_fax3.c | 2023-07-01T07:00:00.000Z | 2025-09-03T21:43:13.000Z |
| msrc_cve-2024-26875 | media: pvrusb2: fix uaf in pvr2_context_set_notify | 2024-04-02T07:00:00.000Z | 2025-09-03T21:43:08.000Z |
| msrc_cve-2024-38553 | net: fec: remove .ndo_poll_controller to avoid deadlocks | 2024-06-02T07:00:00.000Z | 2025-09-03T21:42:50.000Z |
| msrc_cve-2021-23358 | Arbitrary Code Injection | 2021-03-02T00:00:00.000Z | 2025-09-03T21:42:37.000Z |
| msrc_cve-2022-34169 | Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets | 2022-07-02T00:00:00.000Z | 2025-09-03T21:42:26.000Z |
| msrc_cve-2021-47324 | watchdog: Fix possible use-after-free in wdt_startup() | 2024-05-02T07:00:00.000Z | 2025-09-03T21:41:52.000Z |
| msrc_cve-2018-20538 | There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests. | 2018-12-02T00:00:00.000Z | 2025-09-03T21:40:57.000Z |
| msrc_cve-2023-52569 | btrfs: remove BUG() after failure to insert delayed dir index item | 2024-03-02T08:00:00.000Z | 2025-09-03T21:40:32.000Z |
| msrc_cve-2022-37603 | A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. | 2022-10-02T00:00:00.000Z | 2025-09-03T21:40:32.000Z |
| msrc_cve-2025-24898 | rust openssl ssl::select_next_proto use after free | 2025-02-02T00:00:00.000Z | 2025-09-03T21:40:02.000Z |
| msrc_cve-2024-6601 | A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2025-09-03T21:39:51.000Z |
| msrc_cve-2024-34156 | Stack exhaustion in Decoder.Decode in encoding/gob | 2024-09-01T07:00:00.000Z | 2025-09-03T21:38:57.000Z |
| msrc_cve-2023-52532 | net: mana: Fix TX CQE error handling | 2024-03-02T08:00:00.000Z | 2025-09-03T21:38:55.000Z |
| msrc_cve-2017-1000097 | On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate. | 2017-10-02T00:00:00.000Z | 2025-09-03T21:38:46.000Z |
| msrc_cve-2024-44950 | serial: sc16is7xx: fix invalid FIFO access with special register set | 2024-09-01T07:00:00.000Z | 2025-09-03T21:38:11.000Z |
| msrc_cve-2024-47666 | scsi: pm80xx: Set phy->enable_completion only when we wait for it | 2024-10-01T07:00:00.000Z | 2025-09-03T21:37:45.000Z |
| msrc_cve-2022-45417 | Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107. | 2022-12-02T00:00:00.000Z | 2025-09-03T21:37:30.000Z |
| msrc_cve-2024-29180 | webpack-dev-middleware Path Traversal vulnerability | 2024-03-02T08:00:00.000Z | 2025-09-03T21:37:29.000Z |
| msrc_cve-2024-50304 | ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() | 2024-11-02T00:00:00.000Z | 2025-09-03T21:36:13.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201807-0366 | The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Trave… | 2024-02-13T23:02:50.396000Z |
| var-201908-0438 | An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm ca… | 2024-02-13T23:02:49.109000Z |
| var-201811-0482 | Improper file permissions in the installer for the Intel Ready Mode Technology may allow … | 2024-02-13T23:02:49.929000Z |
| var-201911-0645 | A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmwar… | 2024-02-13T23:02:48.738000Z |
| var-202007-1263 | HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have an im… | 2024-02-13T23:02:47.931000Z |
| var-202201-1964 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and… | 2024-02-13T23:02:46.098000Z |
| var-202201-1691 | Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Rel… | 2024-02-13T23:02:46.212000Z |
| var-202201-1374 | On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, a… | 2024-02-13T23:02:46.399000Z |
| var-202204-1432 | Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML In… | 2024-02-13T23:02:45.169000Z |
| var-202204-1117 | IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login co… | 2024-02-13T23:02:45.215000Z |
| var-201508-0616 | Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to byp… | 2024-02-13T23:01:01.515000Z |
| var-201504-0288 | Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service … | 2024-02-13T23:01:01.709000Z |
| var-201711-0599 | XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post)… | 2024-02-13T23:01:00.102000Z |
| var-201806-0630 | Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to includ… | 2024-02-13T23:00:59.505000Z |
| var-201907-0236 | A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco N… | 2024-02-13T23:00:58.031000Z |
| var-201907-0465 | Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands … | 2024-02-13T23:00:57.988000Z |
| var-202006-0938 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.… | 2024-02-13T23:00:56.963000Z |
| var-202201-1948 | On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x… | 2024-02-13T23:00:55.015000Z |
| var-202201-1843 | Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Creden… | 2024-02-13T23:00:55.070000Z |
| var-202201-1488 | A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos O… | 2024-02-13T23:00:55.177000Z |
| var-202201-1253 | Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A r… | 2024-02-13T23:00:55.248000Z |
| var-202206-1651 | A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attacker… | 2024-02-13T23:00:54.068000Z |
| var-202203-1779 | An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator… | 2024-02-13T23:00:54.401000Z |
| var-202203-0542 | IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to c… | 2024-02-13T23:00:54.505000Z |
| var-202202-1102 | A vulnerability in the web-based management interface of Cisco Prime Service Catalog coul… | 2024-02-13T23:00:54.738000Z |
| var-200507-0067 | IMail stores usernames and passwords in cleartext in a cookie, which allows remote attack… | 2024-02-13T23:00:46.128000Z |
| var-200412-0293 | The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 an… | 2024-02-13T23:00:46.424000Z |
| var-201406-0324 | Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K100… | 2024-02-13T23:00:39.319000Z |
| var-201405-0423 | Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration cons… | 2024-02-13T23:00:39.387000Z |
| var-201505-0100 | Cross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx M… | 2024-02-13T23:00:38.831000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2007-000218 | Interstage Application Server cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000215 | FENCE-Pro and Systemwalker Desktop Encryption self-decoding file vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000200 | Trac cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000199 | CCC Cleaner division-by-zero vulnerability when scanning UPX-packed executables | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000176 | Mozilla Firefox cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000165 | Ariel AirOne series cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000161 | ColdFusion error page cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000160 | ColdFusion cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000159 | Adobe JRun cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000135 | CCC Cleaner buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000134 | Sage vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000127 | CCC Cleaner buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000094 | MODx cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000093 | Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000091 | Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000090 | b2evolution cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000088 | Shopping Basket Professional vulnerable to OS command injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000087 | CGI RESCUE WebFORM missing mail content vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000086 | CGI RESCUE WebFORM vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000085 | CGI RESCUE WebFORM vulnerable to HTTP header injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000074 | phpAdsNew cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000073 | Movable Type cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000071 | Fresh Reader RSS feed cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000070 | Drupal cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000006 | Serene Bach cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000983 | JP1 Request Handling Denial of Service Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000975 | Hitachi Soumu Workflow Authentication Bypassing Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000939 | Multiple vulnerabilities in Webmin and Usermin | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000938 | Webmin directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000858 | Ruby vulnerability caused by a problem with the alias funtion so that safe level 4 does not function as a sandbox | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0636-1 | Security update for postgresql16 | 2025-02-21T14:15:12Z | 2025-02-21T14:15:12Z |
| suse-su-2025:0635-1 | Security update for postgresql16 | 2025-02-21T14:13:10Z | 2025-02-21T14:13:10Z |
| suse-su-2025:0634-1 | Security update for postgresql15 | 2025-02-21T14:12:43Z | 2025-02-21T14:12:43Z |
| suse-su-2025:0633-1 | Security update for postgresql15 | 2025-02-21T14:11:55Z | 2025-02-21T14:11:55Z |
| suse-su-2025:0632-1 | Security update for postgresql14 | 2025-02-21T14:10:33Z | 2025-02-21T14:10:33Z |
| suse-su-2025:0631-1 | Security update for postgresql14 | 2025-02-21T14:09:03Z | 2025-02-21T14:09:03Z |
| suse-su-2025:0629-1 | Security update for grub2 | 2025-02-21T12:55:12Z | 2025-02-21T12:55:12Z |
| suse-su-2025:0624-1 | Security update for grafana | 2025-02-21T11:00:27Z | 2025-02-21T11:00:27Z |
| suse-su-2025:0623-1 | Security update for grafana | 2025-02-21T11:00:07Z | 2025-02-21T11:00:07Z |
| suse-su-2025:0622-1 | Security update for grafana | 2025-02-21T10:59:56Z | 2025-02-21T10:59:56Z |
| suse-su-2025:0619-1 | Security update for postgresql13 | 2025-02-21T10:47:45Z | 2025-02-21T10:47:45Z |
| suse-su-2025:0618-1 | Security update for postgresql17 | 2025-02-21T10:44:42Z | 2025-02-21T10:44:42Z |
| suse-su-2025:0616-1 | Security update for postgresql17 | 2025-02-21T10:42:36Z | 2025-02-21T10:42:36Z |
| suse-su-2025:0615-1 | Security update for postgresql14 | 2025-02-21T10:41:20Z | 2025-02-21T10:41:20Z |
| suse-su-2025:0614-1 | Security update for postgresql15 | 2025-02-21T10:40:20Z | 2025-02-21T10:40:20Z |
| suse-su-2025:0613-1 | Security update for openssl-1_1 | 2025-02-21T10:37:55Z | 2025-02-21T10:37:55Z |
| suse-su-2025:0611-1 | Security update for google-osconfig-agent | 2025-02-21T10:37:12Z | 2025-02-21T10:37:12Z |
| suse-su-2025:0609-1 | Security update for ovmf | 2025-02-21T10:33:48Z | 2025-02-21T10:33:48Z |
| suse-su-2025:0608-1 | Security update for ovmf | 2025-02-21T10:31:14Z | 2025-02-21T10:31:14Z |
| suse-su-2025:0607-1 | Security update for grub2 | 2025-02-20T21:42:16Z | 2025-02-20T21:42:16Z |
| suse-su-2025:0606-1 | Security update for postgresql13 | 2025-02-20T16:21:32Z | 2025-02-20T16:21:32Z |
| suse-su-2025:0605-1 | Security update for openssh | 2025-02-20T14:43:20Z | 2025-02-20T14:43:20Z |
| suse-su-2025:20224-1 | Security update for cloud-regionsrv-client, python-toml | 2025-02-20T12:41:47Z | 2025-02-20T12:41:47Z |
| suse-su-2025:0603-1 | Security update for the Linux Kernel | 2025-02-20T10:34:39Z | 2025-02-20T10:34:39Z |
| suse-su-2025:0602-1 | Security update for helm | 2025-02-20T09:15:28Z | 2025-02-20T09:15:28Z |
| suse-su-2025:0601-1 | Security update for brise | 2025-02-20T09:14:11Z | 2025-02-20T09:14:11Z |
| suse-su-2025:0599-1 | Security update for emacs | 2025-02-19T16:09:03Z | 2025-02-19T16:09:03Z |
| suse-su-2025:0591-1 | Security update for ucode-intel | 2025-02-19T10:35:26Z | 2025-02-19T10:35:26Z |
| suse-su-2025:0590-1 | Security update for netty, netty-tcnative | 2025-02-19T10:34:01Z | 2025-02-19T10:34:01Z |
| suse-su-2025:0589-1 | Security update for emacs | 2025-02-19T10:31:29Z | 2025-02-19T10:31:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13142-1 | yt-dlp-2023.07.06-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13141-1 | libproc2-0-4.0.3-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13140-1 | libprocps8-3.3.17-13.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13139-1 | chromedriver-116.0.5845.96-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13138-1 | w3m-0.5.3+git20230121-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13137-1 | ruby3.2-rubygem-rails-html-sanitizer-1.5.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13136-1 | python310-cmarkgfm-2022.10.27-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13135-1 | python-2.7.18-37.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13134-1 | libecpg6-15.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13133-1 | libmozjs-102-0-102.14.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13132-1 | java-1_8_0-openj9-1.8.0.382-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13131-1 | java-17-openj9-17.0.8.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13130-1 | java-11-openj9-11.0.20.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13129-1 | commons-compiler-3.1.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13128-1 | bluez-5.68-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13127-1 | icu-73.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13126-1 | opensuse-welcome-0.1.9+git.35.4b9444a-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13125-1 | nodejs-electron-22.3.20-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13124-1 | MozillaFirefox-116.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13123-1 | glibc-2.38-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13122-1 | xen-4.17.2_02-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13121-1 | python3-salt-3006.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13120-1 | postgresql13-13.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13119-1 | postgresql12-12.16-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13118-1 | postgresql11-11.21-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13117-1 | corepack20-20.5.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13116-1 | haproxy-2.8.2+git0.61a0f576a-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13115-1 | ucode-intel-20230808-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13114-1 | qemu-8.0.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13113-1 | kernel-firmware-20230731-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-22919 | DELL BSAFE Micro Edition Suite越界写入漏洞 | 2025-09-28 | 2025-09-29 |
| cnvd-2025-22918 | Ashlar-Vellum Cobalt越界写入漏洞（CNVD-2025-22918） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22917 | Ashlar-Vellum Cobalt越界写入漏洞 | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22916 | Ashlar-Vellum Cobalt越界读取漏洞（CNVD-2025-22916） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22915 | Ashlar-Vellum Cobalt越界读取漏洞（CNVD-2025-22915） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22914 | Ashlar-Vellum Cobalt越界读取漏洞（CNVD-2025-22914） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22913 | Ashlar-Vellum Cobalt越界读取漏洞（CNVD-2025-22913） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22912 | Ashlar-Vellum Cobalt越界读取漏洞（CNVD-2025-22912） | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22911 | Ashlar-Vellum Cobalt越界读取漏洞 | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22910 | Ashlar-Vellum Cobalt类型混淆漏洞 | 2025-09-19 | 2025-09-29 |
| cnvd-2025-22909 | Visitor Management System visitor_out.php文件SQL注入漏洞 | 2025-08-20 | 2025-09-29 |
| cnvd-2025-22908 | Visitor Management System query_data.php文件SQL注入漏洞 | 2025-08-20 | 2025-09-29 |
| cnvd-2025-22907 | Visitor Management System front.php文件SQL注入漏洞 | 2025-08-20 | 2025-09-29 |
| cnvd-2025-22906 | Travel Management System /updatesubcategory.php文件SQL注入漏洞 | 2025-08-20 | 2025-09-29 |
| cnvd-2025-22905 | Travel Management System /updatepackage.php文件SQL注入漏洞 | 2025-08-20 | 2025-09-29 |
| cnvd-2025-22904 | Travel Management System SQL注入漏洞 | 2025-08-20 | 2025-09-29 |
| cnvd-2025-23078 | Flowise跨站脚本漏洞 | 2025-09-25 | 2025-09-28 |
| cnvd-2025-23077 | D-Link DCS-935L缓冲区溢出漏洞 | 2025-09-25 | 2025-09-28 |
| cnvd-2025-23076 | Apache IoTDB资源管理错误漏洞 | 2025-09-26 | 2025-09-28 |
| cnvd-2025-23074 | Microsoft Edge远程代码执行漏洞（CNVD-2025-23074） | 2025-09-26 | 2025-09-28 |
| cnvd-2025-23073 | JeecgBoot授权问题漏洞（CNVD-2025-23073） | 2025-09-28 | 2025-09-28 |
| cnvd-2025-23072 | TOTOLINK X6000R操作系统命令注入漏洞 | 2025-09-28 | 2025-09-28 |
| cnvd-2025-22938 | Google Chrome V8释放后重用漏洞（CNVD-2025-22938） | 2025-09-08 | 2025-09-28 |
| cnvd-2025-22937 | Google Chrome扩展实现不当漏洞 | 2025-09-08 | 2025-09-28 |
| cnvd-2025-22936 | JetBrains TeamCity跨站请求伪造漏洞 | 2025-07-30 | 2025-09-28 |
| cnvd-2025-22935 | JetBrains TeamCity信息泄露漏洞（CNVD-2025-22935） | 2025-07-30 | 2025-09-28 |
| cnvd-2025-22933 | JetBrains TeamCity信息泄露漏洞 | 2025-08-27 | 2025-09-28 |
| cnvd-2025-22932 | JetBrains YouTrack跨站脚本漏洞 | 2025-08-27 | 2025-09-28 |
| cnvd-2025-22931 | Google Chrome释放后重用漏洞（CNVD-2025-22931） | 2025-09-12 | 2025-09-28 |
| cnvd-2025-22930 | JetBrains TeamCity凭据泄露漏洞 | 2025-09-19 | 2025-09-28 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0848 | Multiples vulnérabilités dans Adobe Commerce et Magento | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0847 | Multiples vulnérabilités dans les produits Fortinet | 2024-10-09T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| CERTFR-2024-AVI-0845 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-10-08T00:00:00.000000 | 2024-10-09T00:00:00.000000 |
| certfr-2024-avi-0846 | Multiples vulnérabilités dans les produits Siemens | 2024-10-08T00:00:00.000000 | 2024-10-08T00:00:00.000000 |
| certfr-2024-avi-0844 | Multiples vulnérabilités dans les produits SAP | 2024-10-08T00:00:00.000000 | 2024-10-08T00:00:00.000000 |
| certfr-2024-avi-0843 | Multiples vulnérabilités dans Typo3 | 2024-10-08T00:00:00.000000 | 2024-10-08T00:00:00.000000 |
| CERTFR-2024-AVI-0846 | Multiples vulnérabilités dans les produits Siemens | 2024-10-08T00:00:00.000000 | 2024-10-08T00:00:00.000000 |
| CERTFR-2024-AVI-0844 | Multiples vulnérabilités dans les produits SAP | 2024-10-08T00:00:00.000000 | 2024-10-08T00:00:00.000000 |
| CERTFR-2024-AVI-0843 | Multiples vulnérabilités dans Typo3 | 2024-10-08T00:00:00.000000 | 2024-10-08T00:00:00.000000 |
| certfr-2024-avi-0842 | Multiples vulnérabilités dans les produits Moxa | 2024-10-07T00:00:00.000000 | 2024-10-07T00:00:00.000000 |
| CERTFR-2024-AVI-0842 | Multiples vulnérabilités dans les produits Moxa | 2024-10-07T00:00:00.000000 | 2024-10-07T00:00:00.000000 |
| certfr-2024-avi-0841 | Multiples vulnérabilités dans les produits IBM | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| certfr-2024-avi-0840 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| certfr-2024-avi-0839 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| certfr-2024-avi-0838 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| certfr-2024-avi-0837 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| certfr-2024-avi-0836 | Vulnérabilité dans les produits WithSecure | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| certfr-2024-avi-0835 | Multiples vulnérabilités dans les produits Apple | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| certfr-2024-avi-0834 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| CERTFR-2024-AVI-0841 | Multiples vulnérabilités dans les produits IBM | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| CERTFR-2024-AVI-0840 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| CERTFR-2024-AVI-0839 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| CERTFR-2024-AVI-0838 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| CERTFR-2024-AVI-0837 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| CERTFR-2024-AVI-0836 | Vulnérabilité dans les produits WithSecure | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| CERTFR-2024-AVI-0835 | Multiples vulnérabilités dans les produits Apple | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| CERTFR-2024-AVI-0834 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-04T00:00:00.000000 | 2024-10-04T00:00:00.000000 |
| certfr-2024-avi-0833 | Multiples vulnérabilités dans les produits Cisco | 2024-10-03T00:00:00.000000 | 2024-10-03T00:00:00.000000 |
| certfr-2024-avi-0832 | Vulnérabilité dans Sophos Intercept X | 2024-10-03T00:00:00.000000 | 2024-10-03T00:00:00.000000 |
| certfr-2024-avi-0831 | Multiples vulnérabilités dans Suricata | 2024-10-03T00:00:00.000000 | 2024-10-03T00:00:00.000000 |