Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-vxvc-rrx4-6472 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-v2pc-r36h-f9fx | Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go… | 2025-11-06T18:32:56Z | 2025-11-06T18:32:57Z |
| ghsa-q785-f6ff-vwgw | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:56Z | 2025-11-07T15:31:29Z |
| ghsa-q6gw-m89w-g24c | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-07T15:31:29Z |
| ghsa-q2x7-75gc-3j8r | Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/… | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-pmvv-fv86-573g | Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a t… | 2025-11-06T18:32:56Z | 2025-11-07T15:31:29Z |
| ghsa-pfgw-2cm5-3rc9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-06T21:31:27Z |
| ghsa-p9fc-5f3m-4xpv | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-06T21:31:27Z |
| ghsa-mwmx-44g6-hhx9 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:56Z | 2025-11-07T00:30:29Z |
| ghsa-j9gp-4v9p-jmv2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-hghp-rpcc-wp2c | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:56Z | 2025-11-06T18:32:57Z |
| ghsa-gx3q-6pr6-g9q4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-ff25-8qm5-3w37 | Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importe… | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-cpr8-jq42-qq4p | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-06T18:32:57Z |
| ghsa-cm3p-rq24-84m2 | Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addon… | 2025-11-06T18:32:56Z | 2025-11-07T00:30:29Z |
| ghsa-cf83-9m7h-2m52 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:56Z | 2025-11-06T18:32:57Z |
| ghsa-9q6q-gj7m-wm92 | Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT … | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-98vq-c3wh-hpmx | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-06T18:32:56Z |
| ghsa-92vp-r9fc-p4q8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-06T18:32:57Z |
| ghsa-88wf-mfc7-5q93 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-7fw8-429x-p2jr | Unrestricted Upload of File with Dangerous Type vulnerability in hogash Kallyas kallyas.This issue … | 2025-11-06T18:32:56Z | 2025-11-07T15:31:29Z |
| ghsa-7328-gmrh-6ff7 | Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a … | 2025-11-06T18:32:56Z | 2025-11-06T18:32:56Z |
| ghsa-5cxr-c9xc-g5r5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-4pcx-m3hv-2jw5 | Missing Authorization vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder.Thi… | 2025-11-06T18:32:56Z | 2025-11-07T00:30:29Z |
| ghsa-44q7-54g6-xrm8 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:56Z | 2025-11-06T18:32:56Z |
| ghsa-3fcj-hp8x-9h3j | Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a … | 2025-11-06T18:32:56Z | 2025-11-06T18:32:56Z |
| ghsa-2m7w-ch42-4cm9 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. | 2025-11-06T18:32:56Z | 2025-11-06T21:31:27Z |
| ghsa-2ff9-pfjh-8587 | Insertion of Sensitive Information Into Sent Data vulnerability in Sovlix MeetingHub meetinghub all… | 2025-11-06T18:32:56Z | 2025-11-06T21:31:28Z |
| ghsa-x5vw-7x76-j2wq | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:55Z | 2025-11-06T18:32:55Z |
| ghsa-x3wv-6rhv-59pr | On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Ad… | 2025-11-06T18:32:55Z | 2025-11-06T18:32:55Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-34237 | 6.3 (v4.0) | Advantech WebAccess/VPN < 1.1.5 Stored XSS via Standal… |
Advantech |
WebAccess/VPN |
2025-11-06T19:40:50.496Z | 2025-11-06T20:24:46.528Z |
| cve-2025-34236 | 6.2 (v4.0) | Advantech WebAccess/VPN < 1.1.5 Stored XSS via Network… |
Advantech |
WebAccess/VPN |
2025-11-06T19:39:40.112Z | 2025-11-06T20:25:05.684Z |
| cve-2025-31133 | runc container escape via "masked path" abuse due to m… |
opencontainers |
runc |
2025-11-06T18:47:47.335Z | 2025-11-06T19:22:22.047Z | |
| cve-2025-22397 | 6.7 (v3.1) | Dell Integrated Dell Remote Access Controller 9, … |
Dell |
Integrated Dell Remote Access Controller 9 14G Versions |
2025-11-06T18:46:04.736Z | 2025-11-06T19:30:39.315Z |
| cve-2024-25621 | containerd affected by a local privilege escalation vi… |
containerd |
containerd |
2025-11-06T18:36:21.566Z | 2025-11-06T19:35:13.415Z | |
| cve-2025-12815 | 5.3 (v4.0) 4.3 (v3.1) | An ownership verification issue in the Virtual De… |
AWS |
Research and Engineering Studio (RES) |
2025-11-06T17:10:34.559Z | 2025-11-06T17:40:11.560Z |
| cve-2025-10885 | 7.8 (v3.1) | Privilege Escalation Vulnerability |
Autodesk |
Installer |
2025-11-06T17:01:19.327Z | 2025-11-08T04:55:19.036Z |
| cve-2025-12485 | N/A | Improper privilege management during pre-MFA cook… |
Devolutions |
Server |
2025-11-06T16:37:14.546Z | 2025-11-07T14:07:04.358Z |
| cve-2025-12808 | N/A | Improper access control in Devolutions allows a V… |
Devolutions |
Server |
2025-11-06T16:36:14.506Z | 2025-11-07T14:06:55.095Z |
| cve-2025-64287 | N/A | WordPress Alloggio - Hotel Booking Theme theme <= 1.8 … |
Edge-Themes |
Alloggio - Hotel Booking |
2025-11-06T15:56:13.317Z | 2025-11-06T16:27:29.412Z |
| cve-2025-64232 | N/A | WordPress Import from YML plugin <= 3.1.17 - Cross Sit… |
icopydoc |
Import from YML |
2025-11-06T15:56:12.576Z | 2025-11-06T16:28:28.711Z |
| cve-2025-64224 | N/A | WordPress Grand Conference Theme Custom Post Type plug… |
ThemeGoods |
Grand Conference Theme Custom Post Type |
2025-11-06T15:56:10.204Z | 2025-11-06T16:29:41.925Z |
| cve-2025-64198 | N/A | WordPress Easy Social Share Buttons plugin < 10.7.1 - … |
appscreo |
Easy Social Share Buttons |
2025-11-06T15:56:09.273Z | 2025-11-06T16:30:52.338Z |
| cve-2025-64196 | N/A | WordPress Booster for WooCommerce plugin <= 7.2.5 - Cr… |
Pluggabl |
Booster for WooCommerce |
2025-11-06T15:56:07.302Z | 2025-11-06T16:32:04.450Z |
| cve-2025-6327 | N/A | WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:06.826Z | 2025-11-06T16:33:07.489Z |
| cve-2025-6325 | N/A | WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:05.901Z | 2025-11-06T16:35:08.832Z |
| cve-2025-62950 | N/A | WordPress Contest Gallery plugin <= 28.0.0 - Cross Sit… |
Wasiliy Strecker / ContestGallery developer |
Contest Gallery |
2025-11-06T15:56:04.961Z | 2025-11-06T16:39:23.097Z |
| cve-2025-62914 | N/A | WordPress Effect Maker plugin <= 1.2.1 - Broken Access… |
anibalwainstein |
Effect Maker |
2025-11-06T15:56:02.281Z | 2025-11-06T16:40:23.376Z |
| cve-2025-62076 | N/A | WordPress Simple Payment plugin <= 2.4.6 - Cross Site … |
Ido Kobelkowsky |
Simple Payment |
2025-11-06T15:55:59.012Z | 2025-11-06T16:52:48.760Z |
| cve-2025-62075 | N/A | WordPress Simple Payment plugin <= 2.4.6 - Local File … |
Ido Kobelkowsky |
Simple Payment |
2025-11-06T15:55:57.636Z | 2025-11-06T16:52:09.007Z |
| cve-2025-62074 | N/A | WordPress WPMobile.App plugin <= 11.71 - Cross Site Sc… |
Amauri |
WPMobile.App |
2025-11-06T15:55:56.024Z | 2025-11-06T16:50:29.744Z |
| cve-2025-62067 | N/A | WordPress Savory theme <= 2.5 - Local File Inclusion v… |
Elated-Themes |
Savory |
2025-11-06T15:55:55.213Z | 2025-11-06T16:49:34.814Z |
| cve-2025-62066 | N/A | WordPress Revolution theme < 2.5.8 - Local File Inclus… |
fuelthemes |
Revolution |
2025-11-06T15:55:54.429Z | 2025-11-06T16:47:22.028Z |
| cve-2025-62065 | N/A | WordPress RTMKit plugin <= 1.6.5 - Arbitrary File Uplo… |
Rometheme |
RTMKit |
2025-11-06T15:55:53.302Z | 2025-11-06T17:53:06.992Z |
| cve-2025-62064 | N/A | WordPress Search & Go theme <= 2.7 - Broken Authentica… |
Elated-Themes |
Search & Go |
2025-11-06T15:55:51.676Z | 2025-11-06T17:54:27.804Z |
| cve-2025-62059 | N/A | WordPress SureRank plugin <= 1.3.2 - Cross Site Script… |
Brainstorm Force |
SureRank |
2025-11-06T15:55:51.134Z | 2025-11-06T17:55:39.505Z |
| cve-2025-62057 | N/A | WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-11-06T15:55:50.427Z | 2025-11-06T17:56:38.157Z |
| cve-2025-62055 | N/A | WordPress Academist theme < 1.3 - Local File Inclusion… |
Elated-Themes |
Academist |
2025-11-06T15:55:49.844Z | 2025-11-06T17:57:57.885Z |
| cve-2025-62053 | N/A | WordPress Houzez theme < 4.2.0 - Local File Inclusion … |
favethemes |
Houzez |
2025-11-06T15:55:48.526Z | 2025-11-06T21:16:21.196Z |
| cve-2025-62051 | N/A | WordPress UDesign Core plugin <= 4.14.1 - Cross Site S… |
AndonDesign |
UDesign Core |
2025-11-06T15:55:47.211Z | 2025-11-06T21:12:52.533Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2022-50593 | 9.3 (v4.0) | Advantech iView < v5.7.04 Build 6425 search_term Param… |
Advantech |
iView |
2025-11-06T19:57:44.271Z | 2025-11-06T21:02:21.355Z |
| cve-2022-50592 | 9.3 (v4.0) | Advantech iView < v5.7.04 Build 6425 getInventoryRepor… |
Advantech |
iView |
2025-11-06T19:57:20.528Z | 2025-11-06T21:07:38.762Z |
| cve-2022-50591 | 8.8 (v4.0) | Advantech iView < v5.7.04 Build 6425 ztp_config_id Par… |
Advantech |
iView |
2025-11-06T19:58:06.223Z | 2025-11-06T20:36:15.818Z |
| cve-2022-50590 | 8.8 (v4.0) | SuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment… |
SuiteCRM |
SuiteCRM |
2025-11-06T19:59:36.078Z | 2025-11-06T20:26:09.006Z |
| cve-2022-50589 | 9.3 (v4.0) | SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality |
SuiteCRM |
SuiteCRM |
2025-11-06T19:59:12.520Z | 2025-11-06T20:27:20.421Z |
| cve-2025-63551 | N/A | A Server-Side Request Forgery (SSRF) vulnerabilit… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-07T15:11:56.765Z |
| cve-2025-60541 | N/A | A Server-Side Request Forgery (SSRF) in the /api/… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-07T15:20:19.324Z |
| cve-2025-31133 | runc container escape via "masked path" abuse due to m… |
opencontainers |
runc |
2025-11-06T18:47:47.335Z | 2025-11-06T19:22:22.047Z | |
| cve-2025-22397 | 6.7 (v3.1) | Dell Integrated Dell Remote Access Controller 9, … |
Dell |
Integrated Dell Remote Access Controller 9 14G Versions |
2025-11-06T18:46:04.736Z | 2025-11-06T19:30:39.315Z |
| cve-2024-25621 | containerd affected by a local privilege escalation vi… |
containerd |
containerd |
2025-11-06T18:36:21.566Z | 2025-11-06T19:35:13.415Z | |
| cve-2025-27919 | N/A | An issue was discovered in AnyDesk through 9.0.4.… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-06T17:09:39.979Z |
| cve-2025-27918 | N/A | An issue was discovered in AnyDesk before 9.0.0. … |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-06T17:08:56.573Z |
| cve-2025-27917 | N/A | An issue was discovered in AnyDesk through 9.0.4.… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-06T17:08:32.584Z |
| cve-2025-27916 | N/A | An issue was discovered in AnyDesk through 9.0.4.… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-06T17:08:06.765Z |
| cve-2025-12815 | 5.3 (v4.0) 4.3 (v3.1) | An ownership verification issue in the Virtual De… |
AWS |
Research and Engineering Studio (RES) |
2025-11-06T17:10:34.559Z | 2025-11-06T17:40:11.560Z |
| cve-2025-63589 | N/A | A reflected XSS vulnerability exists in CMSimple_… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-06T19:12:48.998Z |
| cve-2025-63588 | N/A | An unauthenticated reflected cross-site scripting… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-06T19:10:56.777Z |
| cve-2025-63560 | N/A | An issue in KiloView Dual Channel 4k HDMI & 3G-SD… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-06T16:44:30.116Z |
| cve-2025-59396 | N/A | The default configuration of WatchGuard Firebox d… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-07T15:01:59.589Z |
| cve-2025-12808 | N/A | Improper access control in Devolutions allows a V… |
Devolutions |
Server |
2025-11-06T16:36:14.506Z | 2025-11-07T14:06:55.095Z |
| cve-2025-12485 | N/A | Improper privilege management during pre-MFA cook… |
Devolutions |
Server |
2025-11-06T16:37:14.546Z | 2025-11-07T14:07:04.358Z |
| cve-2025-10885 | 7.8 (v3.1) | Privilege Escalation Vulnerability |
Autodesk |
Installer |
2025-11-06T17:01:19.327Z | 2025-11-08T04:55:19.036Z |
| cve-2025-6327 | N/A | WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:06.826Z | 2025-11-06T16:33:07.489Z |
| cve-2025-6325 | N/A | WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:05.901Z | 2025-11-06T16:35:08.832Z |
| cve-2025-64287 | N/A | WordPress Alloggio - Hotel Booking Theme theme <= 1.8 … |
Edge-Themes |
Alloggio - Hotel Booking |
2025-11-06T15:56:13.317Z | 2025-11-06T16:27:29.412Z |
| cve-2025-64232 | N/A | WordPress Import from YML plugin <= 3.1.17 - Cross Sit… |
icopydoc |
Import from YML |
2025-11-06T15:56:12.576Z | 2025-11-06T16:28:28.711Z |
| cve-2025-64224 | N/A | WordPress Grand Conference Theme Custom Post Type plug… |
ThemeGoods |
Grand Conference Theme Custom Post Type |
2025-11-06T15:56:10.204Z | 2025-11-06T16:29:41.925Z |
| cve-2025-64198 | N/A | WordPress Easy Social Share Buttons plugin < 10.7.1 - … |
appscreo |
Easy Social Share Buttons |
2025-11-06T15:56:09.273Z | 2025-11-06T16:30:52.338Z |
| cve-2025-64196 | N/A | WordPress Booster for WooCommerce plugin <= 7.2.5 - Cr… |
Pluggabl |
Booster for WooCommerce |
2025-11-06T15:56:07.302Z | 2025-11-06T16:32:04.450Z |
| cve-2025-63307 | N/A | alexusmai laravel-file-manager 3.3.1 is vulnerabl… |
n/a |
n/a |
2025-11-06T00:00:00.000Z | 2025-11-06T19:08:37.837Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-54752 | Malicious code in rudi-lontong87-ruro (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54751 | Malicious code in rudi-lepet28-sluey (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54750 | Malicious code in rudi-lengko94-sluey (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54749 | Malicious code in rudi-lapis41-sukiwir (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54748 | Malicious code in rudi-kupat9-riris (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54747 | Malicious code in rudi-kue75-miaww (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54746 | Malicious code in rudi-kue52-ruro (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54745 | Malicious code in rudi-kue42-miaww (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54744 | Malicious code in rudi-kue15-riris (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54743 | Malicious code in rudi-kepok43-sukiwir (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54742 | Malicious code in rudi-kentang69-miaww (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54741 | Malicious code in rudi-jus60-sukiwir (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54740 | Malicious code in rudi-jengkol83-riris (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54739 | Malicious code in rudi-gepuk47-riris (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54738 | Malicious code in rudi-gandul33-breki (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54737 | Malicious code in rudi-empal92-riris (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54736 | Malicious code in rudi-empal11-riris (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54735 | Malicious code in rudi-bubur42-sukiwir (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54734 | Malicious code in rudi-brongkos16-miaww (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54733 | Malicious code in rudi-bakwan26-sukiwir (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54732 | Malicious code in rudi-bakwan12-sluey (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54731 | Malicious code in rudi-asinan17-sukiwir (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54730 | Malicious code in rina-tumis89-ruro (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54729 | Malicious code in rina-tongseng44-ruro (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54728 | Malicious code in rina-tiwul1-ruro (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54727 | Malicious code in rina-telurtahu89-riris (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54726 | Malicious code in rina-telurtahu84-miaww (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54725 | Malicious code in rina-soto34-sukiwir (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54724 | Malicious code in rina-semur79-sluey (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| mal-2025-54723 | Malicious code in rina-semur70-pore (npm) | 2025-11-10T05:18:00Z | 2025-11-10T05:18:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:17958 | Red Hat Security Advisory: kernel security update | 2025-10-14T08:39:21+00:00 | 2025-11-08T07:17:24+00:00 |
| rhsa-2025:17913 | Red Hat Security Advisory: vim security update | 2025-10-14T05:32:21+00:00 | 2025-11-10T12:41:56+00:00 |
| rhsa-2025:17807 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-10-13T18:21:40+00:00 | 2025-11-06T23:15:08+00:00 |
| rhsa-2025:17812 | Red Hat Security Advisory: kernel-rt security update | 2025-10-13T18:15:30+00:00 | 2025-11-06T22:02:23+00:00 |
| rhsa-2025:17802 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-10-13T13:24:14+00:00 | 2025-11-06T23:15:08+00:00 |
| rhsa-2025:17797 | Red Hat Security Advisory: kernel security update | 2025-10-13T11:51:59+00:00 | 2025-11-06T22:02:18+00:00 |
| rhsa-2025:17776 | Red Hat Security Advisory: kernel security update | 2025-10-13T09:10:44+00:00 | 2025-11-06T23:15:08+00:00 |
| rhsa-2025:17760 | Red Hat Security Advisory: kernel security update | 2025-10-13T04:28:03+00:00 | 2025-11-06T22:02:18+00:00 |
| rhsa-2025:17742 | Red Hat Security Advisory: vim security update | 2025-10-13T02:18:48+00:00 | 2025-11-10T12:41:57+00:00 |
| rhsa-2025:17743 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-10-13T01:47:33+00:00 | 2025-11-06T23:15:08+00:00 |
| rhsa-2025:17741 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-10-13T01:44:23+00:00 | 2025-11-06T23:15:07+00:00 |
| rhsa-2025:17739 | Red Hat Security Advisory: compat-libtiff3 security update | 2025-10-13T01:25:23+00:00 | 2025-11-10T06:42:06+00:00 |
| rhsa-2025:17740 | Red Hat Security Advisory: compat-libtiff3 security update | 2025-10-13T01:21:38+00:00 | 2025-11-10T06:42:04+00:00 |
| rhsa-2025:17738 | Red Hat Security Advisory: compat-libtiff3 security update | 2025-10-13T01:20:48+00:00 | 2025-11-10T06:42:05+00:00 |
| rhsa-2025:17734 | Red Hat Security Advisory: kernel security update | 2025-10-13T00:28:33+00:00 | 2025-11-08T07:17:23+00:00 |
| rhsa-2025:17735 | Red Hat Security Advisory: kernel-rt security update | 2025-10-13T00:15:58+00:00 | 2025-11-08T07:17:24+00:00 |
| rhsa-2025:17733 | Red Hat Security Advisory: kernel security update | 2025-10-10T19:52:47+00:00 | 2025-11-08T07:02:30+00:00 |
| rhsa-2025:17715 | Red Hat Security Advisory: vim security update | 2025-10-09T19:23:45+00:00 | 2025-11-10T12:41:55+00:00 |
| rhsa-2025:17710 | Red Hat Security Advisory: compat-libtiff3 security update | 2025-10-09T18:49:10+00:00 | 2025-11-10T06:42:04+00:00 |
| rhsa-2025:17731 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.2 security update | 2025-10-09T18:48:05+00:00 | 2025-11-10T14:56:49+00:00 |
| rhsa-2025:17730 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.4 security update | 2025-10-09T18:47:06+00:00 | 2025-11-10T14:56:51+00:00 |
| rhsa-2025:17693 | Red Hat Security Advisory: Satellite 6 Client Bug Fix Update | 2025-10-09T17:21:09+00:00 | 2025-11-07T21:09:49+00:00 |
| rhsa-2025:17675 | Red Hat Security Advisory: compat-libtiff3 security update | 2025-10-09T10:52:59+00:00 | 2025-11-10T06:42:06+00:00 |
| rhsa-2025:17649 | Red Hat Security Advisory: ipa security update | 2025-10-09T08:21:24+00:00 | 2025-11-07T18:35:54+00:00 |
| rhsa-2025:17646 | Red Hat Security Advisory: idm:client security update | 2025-10-09T08:21:24+00:00 | 2025-11-07T18:35:54+00:00 |
| rhsa-2025:17645 | Red Hat Security Advisory: idm:client security update | 2025-10-09T08:15:54+00:00 | 2025-11-07T18:35:53+00:00 |
| rhsa-2025:17651 | Red Hat Security Advisory: compat-libtiff3 security update | 2025-10-09T08:09:38+00:00 | 2025-11-10T06:42:05+00:00 |
| rhsa-2025:17648 | Red Hat Security Advisory: idm:DL1 security update | 2025-10-09T08:04:24+00:00 | 2025-11-07T18:35:54+00:00 |
| rhsa-2025:17647 | Red Hat Security Advisory: idm:DL1 security update | 2025-10-09T08:04:24+00:00 | 2025-11-07T18:35:54+00:00 |
| rhsa-2025:17644 | Red Hat Security Advisory: vim security update | 2025-10-09T07:19:29+00:00 | 2025-11-10T12:41:57+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-39847 | ppp: fix memory leak in pad_compress_skb | 2025-09-02T00:00:00.000Z | 2025-09-21T01:02:26.000Z |
| msrc_cve-2025-39846 | pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() | 2025-09-02T00:00:00.000Z | 2025-09-21T01:03:30.000Z |
| msrc_cve-2025-39845 | x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:39.000Z |
| msrc_cve-2025-39844 | mm: move page table sync declarations to linux/pgtable.h | 2025-09-02T00:00:00.000Z | 2025-09-21T01:02:31.000Z |
| msrc_cve-2025-39843 | mm: slub: avoid wake up kswapd in set_track_prepare | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:24.000Z |
| msrc_cve-2025-39842 | ocfs2: prevent release journal inode after journal shutdown | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:44.000Z |
| msrc_cve-2025-39841 | scsi: lpfc: Fix buffer free/clear order in deferred receive path | 2025-09-02T00:00:00.000Z | 2025-09-21T01:02:00.000Z |
| msrc_cve-2025-39839 | batman-adv: fix OOB read/write in network-coding decode | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:18.000Z |
| msrc_cve-2025-39838 | cifs: prevent NULL pointer dereference in UTF16 conversion | 2025-09-02T00:00:00.000Z | 2025-09-21T01:03:35.000Z |
| msrc_cve-2025-39835 | xfs: do not propagate ENODATA disk errors into xattr code | 2025-09-02T00:00:00.000Z | 2025-09-20T01:07:54.000Z |
| msrc_cve-2025-39833 | mISDN: hfcpci: Fix warning when deleting uninitialized timer | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:58.000Z |
| msrc_cve-2025-39832 | net/mlx5: Fix lockdep assertion on sync reset unload event | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:42.000Z |
| msrc_cve-2025-39829 | trace/fgraph: Fix the warning caused by missing unregister notifier | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:31.000Z |
| msrc_cve-2025-39828 | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:15.000Z |
| msrc_cve-2025-39827 | net: rose: include node references in rose_neigh refcount | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:20.000Z |
| msrc_cve-2025-39826 | net: rose: convert 'use' field to refcount_t | 2025-09-02T00:00:00.000Z | 2025-09-20T01:01:34.000Z |
| msrc_cve-2025-39825 | smb: client: fix race with concurrent opens in rename(2) | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:04.000Z |
| msrc_cve-2025-39824 | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 2025-09-02T00:00:00.000Z | 2025-09-20T01:09:08.000Z |
| msrc_cve-2025-39823 | KVM: x86: use array_index_nospec with indices that come from guest | 2025-09-02T00:00:00.000Z | 2025-09-20T01:09:03.000Z |
| msrc_cve-2025-39819 | fs/smb: Fix inconsistent refcnt update | 2025-09-02T00:00:00.000Z | 2025-09-20T01:07:49.000Z |
| msrc_cve-2025-39817 | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:26.000Z |
| msrc_cve-2025-39813 | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 2025-09-02T00:00:00.000Z | 2025-09-20T01:07:59.000Z |
| msrc_cve-2025-39812 | sctp: initialize more fields in sctp_v6_from_sk() | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:53.000Z |
| msrc_cve-2025-39810 | bnxt_en: Fix memory corruption when FW resources change during ifdown | 2025-09-02T00:00:00.000Z | 2025-09-20T01:01:29.000Z |
| msrc_cve-2025-39808 | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:47.000Z |
| msrc_cve-2025-39805 | net: macb: fix unregister_netdev call order in macb_remove() | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:37.000Z |
| msrc_cve-2025-39801 | usb: dwc3: Remove WARN_ON for device endpoint command timeouts | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:45.000Z |
| msrc_cve-2025-39800 | btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:39.000Z |
| msrc_cve-2025-39799 | ACPI: processor: perflib: Move problematic pr->performance check | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:50.000Z |
| msrc_cve-2025-39798 | NFS: Fix the setting of capabilities when automounting a new filesystem | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:21.000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000057 | Multiple vulnerabilities in UNIVERSAL PASSPORT RX | 2024-06-03T15:32+09:00 | 2024-06-03T15:32+09:00 |
| jvndb-2024-003254 | Seiko Solutions SkyBridge MB-A100/MB-A110 and SkyBridge BASIC MB-A130 vulnerable to OS command injection | 2024-06-03T14:53+09:00 | 2024-06-03T14:53+09:00 |
| jvndb-2024-003253 | Multiple vulnerabilities in Sharp and Toshiba Tec MFPs | 2024-06-03T14:36+09:00 | 2024-06-03T14:36+09:00 |
| jvndb-2024-000056 | awkblog vulnerable to OS command injection | 2024-05-30T14:39+09:00 | 2024-05-30T14:39+09:00 |
| jvndb-2024-000055 | Redmine DMSF Plugin vulnerable to path traversal | 2024-05-29T14:13+09:00 | 2024-05-29T14:13+09:00 |
| jvndb-2024-000054 | EC-Orange vulnerable to authorization bypass | 2024-05-29T14:06+09:00 | 2024-05-29T14:06+09:00 |
| jvndb-2024-003249 | ELECOM wireless LAN routers vulnerable to OS command injection | 2024-05-29T12:33+09:00 | 2024-05-29T12:33+09:00 |
| jvndb-2024-000053 | Multiple vulnerabilities in Unifier and Unifier Cast | 2024-05-28T14:47+09:00 | 2024-05-28T14:47+09:00 |
| jvndb-2024-000052 | Multiple vulnerabilities in UTAU | 2024-05-28T14:23+09:00 | 2024-05-28T14:23+09:00 |
| jvndb-2024-003242 | OMRON NJ/NX series vulnerable to insufficient verification of data authenticity | 2024-05-28T12:28+09:00 | 2024-07-26T16:27+09:00 |
| jvndb-2024-000051 | Splunk Config Explorer vulnerable to cross-site scripting | 2024-05-24T13:50+09:00 | 2024-05-24T13:50+09:00 |
| jvndb-2024-000050 | WordPress Plugin "WP Booking" vulnerable to cross-site scripting | 2024-05-24T13:41+09:00 | 2024-05-24T13:41+09:00 |
| jvndb-2024-000046 | Android App "TP-Link Tether" and "TP-Link Tapo" vulnerable to improper server certificate verification | 2024-05-21T13:33+09:00 | 2024-05-21T13:33+09:00 |
| jvndb-2024-003188 | Panasonic KW Watcher vulnerable to memory buffer error | 2024-05-17T15:46+09:00 | 2024-05-17T15:46+09:00 |
| jvndb-2023-021762 | Ruijie BCR810W/BCR860 vulnerable to OS command injection | 2024-05-17T13:54+09:00 | 2024-05-17T13:54+09:00 |
| jvndb-2024-000049 | WordPress Plugin "Download Plugins and Themes from Dashboard" vulnerable to path traversal | 2024-05-17T13:33+09:00 | 2024-05-17T13:33+09:00 |
| jvndb-2024-003187 | Multiple vulnerabilities in Field Logic DataCube | 2024-05-17T12:05+09:00 | 2024-05-17T12:05+09:00 |
| jvndb-2024-002342 | Central Dogma vulnerable to cross-site scripting | 2024-05-13T17:27+09:00 | 2024-05-13T17:27+09:00 |
| jvndb-2024-000047 | Multiple vulnerabilities in Cybozu Garoon | 2024-05-13T15:19+09:00 | 2024-05-13T15:19+09:00 |
| jvndb-2024-000045 | "OfferBox" App uses a hard-coded secret key | 2024-05-10T15:11+09:00 | 2024-05-10T15:11+09:00 |
| jvndb-2024-003181 | Hidden Functionality vulnerability in DT900 | 2024-05-10T13:59+09:00 | 2024-05-10T13:59+09:00 |
| jvndb-2024-000048 | Phormer vulnerable to cross-site scripting | 2024-05-10T13:48+09:00 | 2024-05-10T13:48+09:00 |
| jvndb-2024-000043 | Multiple vulnerabilities in MosP kintai kanri | 2024-05-09T14:10+09:00 | 2024-05-09T14:10+09:00 |
| jvndb-2024-000044 | WordPress Plugin "Heateor Social Login WordPress" vulnerable to cross-site scripting | 2024-05-08T13:43+09:00 | 2024-05-08T13:43+09:00 |
| jvndb-2024-003178 | Trend Micro Maximum Security vulnerable to improper link resolution (CVE-2024-32849) | 2024-05-08T10:19+09:00 | 2024-05-08T10:19+09:00 |
| jvndb-2024-003119 | NETGEAR routers vulnerable to buffer overflow | 2024-04-25T11:21+09:00 | 2024-04-25T11:21+09:00 |
| jvndb-2024-000042 | Multiple vulnerabilities in RoamWiFi R10 | 2024-04-24T13:44+09:00 | 2024-04-24T13:44+09:00 |
| jvndb-2024-003116 | Multiple vulnerabilities in OMRON Sysmac Studio/CX-One and CX-Programmer | 2024-04-24T10:13+09:00 | 2024-04-24T10:13+09:00 |
| jvndb-2024-000901 | TvRock vulnerable to cross-site request forgery | 2024-04-23T18:22+09:00 | 2024-04-23T18:22+09:00 |
| jvndb-2024-000903 | TvRock vulnerable to denial-of-service (DoS) | 2024-04-23T18:21+09:00 | 2024-04-23T18:21+09:00 |
| ID | Description | Updated |
|---|