Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-pgph-4c45-hj8g | Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade an… | 2025-12-24T15:30:44Z | 2025-12-24T15:30:44Z |
| ghsa-j5f2-m9hq-3w98 | Rejected reason: This CVE id was assigned but later discarded. | 2025-12-24T15:30:44Z | 2025-12-24T15:30:44Z |
| ghsa-ghj7-pch2-m5m6 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeou… | 2025-12-24T15:30:44Z | 2025-12-24T15:30:44Z |
| ghsa-99pp-v74j-jmgv | In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when … | 2025-12-24T15:30:44Z | 2025-12-24T15:30:44Z |
| ghsa-98rv-gpf2-fj42 | In the Linux kernel, the following vulnerability has been resolved: mshv: Fix create memory region… | 2025-12-24T15:30:44Z | 2025-12-24T15:30:44Z |
| ghsa-8phj-p75x-7gv8 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition… | 2025-12-24T15:30:44Z | 2025-12-24T15:30:44Z |
| ghsa-348v-47hf-22wr | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel… | 2025-12-24T15:30:44Z | 2025-12-24T15:30:44Z |
| ghsa-ww8h-qfvw-pj5m | In the Linux kernel, the following vulnerability has been resolved: arm64/pageattr: Propagate retu… | 2025-12-24T15:30:43Z | 2025-12-24T15:30:43Z |
| ghsa-pxr4-9wxh-g3jr | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disc… | 2025-12-24T15:30:43Z | 2025-12-24T15:30:43Z |
| ghsa-mjw3-rr6r-w9h2 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper fr… | 2025-12-24T15:30:43Z | 2025-12-24T15:30:43Z |
| ghsa-jvhg-r77c-vccf | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog->stats a… | 2025-12-24T15:30:43Z | 2025-12-24T15:30:43Z |
| ghsa-cqpf-ph48-g563 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential… | 2025-12-24T15:30:43Z | 2025-12-24T15:30:43Z |
| ghsa-c6v5-xpx3-j3vp | In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returne… | 2025-12-24T15:30:43Z | 2025-12-24T15:30:43Z |
| ghsa-826h-4v2p-vwp5 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix null p… | 2025-12-24T15:30:43Z | 2025-12-24T15:30:43Z |
| ghsa-4mp2-rpmv-4xrr | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: hisi: Fix potent… | 2025-12-24T15:30:43Z | 2025-12-24T15:30:43Z |
| ghsa-xh2f-j4vc-q8qj | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-mgqh-xx5m-2h5f | In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix kernel panic at… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-jqh6-r2gj-x2xp | In the Linux kernel, the following vulnerability has been resolved: f2fs: Fix system crash due to … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-jfm8-wf93-6c4c | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_sdei: Fix sleep … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-hxpg-6jhj-qw4q | In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock b… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-hr7g-x38j-56v5 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor ne… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-hqhr-cmq5-2w3r | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of alloc->vma … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-g4x6-vrjg-m8w6 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix an out of bounds … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-crmq-c99h-f986 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-969x-jvv9-7j58 | In the Linux kernel, the following vulnerability has been resolved: ext4: turn quotas off if mount… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-7j7j-rcvh-xpm2 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix null-ptr-deref in… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-6qcc-hqxv-5rww | In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading st… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-4vh9-h9jw-r347 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: avoid suspicious RCU… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-4jvp-69v8-wvq5 | In the Linux kernel, the following vulnerability has been resolved: net: core: remove unnecessary … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-35f8-m7gp-7vmp | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix target… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-68606 | N/A | WordPress PostX plugin <= 5.0.3 - Sensitive Data Expos… |
WPXPO |
PostX |
2025-12-24T13:10:48.784Z | 2025-12-24T19:27:01.170Z |
| cve-2025-7425 | 7.8 (v3.1) | Libxslt: heap use-after-free in libxslt caused by atyp… |
GNOME |
libxml2 |
2025-07-10T13:53:37.295Z | 2025-12-24T17:47:31.672Z |
| cve-2025-7424 | 7.8 (v3.1) | Libxslt: type confusion in xmlnode.psvi between styles… |
GNOME |
libxslt |
2025-07-10T14:05:41.808Z | 2025-12-24T17:32:54.864Z |
| cve-2025-2515 | 7.2 (v3.1) | Bluechi: privilege escalation in bluechi via unrestric… |
Eclipse Foundation |
BlueChi |
2025-12-24T16:21:54.365Z | 2025-12-24T16:48:19.891Z |
| cve-2025-60935 | N/A | An open redirect vulnerability in the login endpo… |
n/a |
n/a |
2025-12-24T00:00:00.000Z | 2025-12-24T16:46:21.881Z |
| cve-2024-35322 | N/A | MyNET up to v26.08 was discovered to contain a re… |
n/a |
n/a |
2025-12-24T00:00:00.000Z | 2025-12-24T16:45:02.195Z |
| cve-2025-13407 | N/A | GravityForms < 2.9.23.1 - Unauthenticated Arbitrary Fi… |
Unknown |
Gravity Forms |
2025-12-24T06:00:04.578Z | 2025-12-24T16:39:08.316Z |
| cve-2025-57840 | 2.2 (v3.1) | Privilege Bypass in ADB |
Honor |
Magic OS |
2025-12-24T06:55:53.538Z | 2025-12-24T16:38:01.522Z |
| cve-2025-13767 | 4.3 (v3.1) | Unauthorized Read Access to Private Channel Posts via … |
Mattermost |
Mattermost |
2025-12-24T08:01:27.157Z | 2025-12-24T16:36:22.999Z |
| cve-2025-64641 | 4.1 (v3.1) | Mattermost Jira plugin crafted action leaks Jira issue… |
Mattermost |
Mattermost |
2025-12-24T08:02:55.476Z | 2025-12-24T16:35:17.618Z |
| cve-2025-14498 | 7.8 (v3.0) | TradingView Desktop Electron Uncontrolled Search Path … |
TradingView |
Desktop |
2025-12-23T21:18:10.145Z | 2025-12-24T16:30:51.250Z |
| cve-2025-14494 | 7.8 (v3.0) | RealDefense SUPERAntiSpyware Exposed Dangerous Functio… |
RealDefense |
SUPERAntiSpyware |
2025-12-23T21:17:17.387Z | 2025-12-24T16:29:53.279Z |
| cve-2025-14920 | 7.8 (v3.0) | Hugging Face Transformers Perceiver Model Deserializat… |
Hugging Face |
Transformers |
2025-12-23T21:04:36.809Z | 2025-12-24T16:29:05.697Z |
| cve-2025-13709 | 7.8 (v3.0) | Tencent TFace restore_checkpoint Deserialization of Un… |
Tencent |
TFace |
2025-12-23T21:34:10.530Z | 2025-12-24T16:28:02.367Z |
| cve-2025-14926 | 7.8 (v3.0) | Hugging Face Transformers SEW convert_config Code Inje… |
Hugging Face |
Transformers |
2025-12-23T21:04:32.162Z | 2025-12-24T16:26:53.253Z |
| cve-2025-14927 | 7.8 (v3.0) | Hugging Face Transformers SEW-D convert_config Code In… |
Hugging Face |
Transformers |
2025-12-23T21:04:28.008Z | 2025-12-24T16:26:02.865Z |
| cve-2025-14921 | 7.8 (v3.0) | Hugging Face Transformers Transformer-XL Model Deseria… |
Hugging Face |
Transformers |
2025-12-23T21:04:23.187Z | 2025-12-24T16:25:13.340Z |
| cve-2025-14929 | 7.8 (v3.0) | Hugging Face Transformers X-CLIP Checkpoint Conversion… |
Hugging Face |
Transformers |
2025-12-23T21:04:15.474Z | 2025-12-24T16:24:34.136Z |
| cve-2025-2154 | 5.4 (v3.1) | Stored XSS in EchoCCS's Specto CM |
Echo Call Center Services Trade and Industry Inc. |
Specto CM |
2025-12-24T14:26:47.561Z | 2025-12-24T16:23:09.149Z |
| cve-2025-2155 | 8.8 (v3.1) | Arbitrary File Upload in EchoCCS's Specto CM |
Echo Call Center Services Trade and Industry Inc. |
Specto CM |
2025-12-24T14:31:07.708Z | 2025-12-24T16:22:27.231Z |
| cve-2025-43875 | 8.7 (v4.0) | iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Ed… |
Johnson Controls |
iSTAR Ultra, iSTAR Ultra SE |
2025-12-24T15:19:19.145Z | 2025-12-24T16:21:31.227Z |
| cve-2025-43876 | 8.7 (v4.0) | iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Ed… |
Johnson Controls |
iSTAR Ultra, iSTAR Ultra SE |
2025-12-24T15:27:06.898Z | 2025-12-24T16:20:55.776Z |
| cve-2025-13715 | 7.8 (v3.0) | Tencent FaceDetection-DSFD resnet Deserialization of U… |
Tencent |
FaceDetection-DSFD |
2025-12-23T21:38:56.096Z | 2025-12-24T16:12:54.598Z |
| cve-2025-13698 | 4.5 (v3.0) | Deciso OPNsense diag_backup.php filename Directory Tra… |
Deciso |
OPNsense |
2025-12-23T21:40:13.580Z | 2025-12-24T16:11:29.726Z |
| cve-2025-13699 | 7 (v3.0) | MariaDB mariadb-dump Utility Directory Traversal Remot… |
MariaDB |
MariaDB |
2025-12-23T21:40:56.956Z | 2025-12-24T16:10:43.525Z |
| cve-2025-61258 | N/A | Outsystems Platform Server 11.18.1.37828 allows a… |
n/a |
n/a |
2025-12-09T00:00:00.000Z | 2025-12-24T16:06:47.086Z |
| cve-2025-12838 | 7.3 (v3.0) | MSP360 Free Backup Link Following Local Privilege Esca… |
MSP360 |
Free Backup |
2025-12-23T21:41:11.250Z | 2025-12-24T16:06:22.818Z |
| cve-2025-12495 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:27.753Z | 2025-12-24T16:05:06.561Z |
| cve-2025-12839 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:37.030Z | 2025-12-24T16:04:35.072Z |
| cve-2025-12840 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:45.445Z | 2025-12-24T16:04:03.735Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2018-25152 | 5.1 (v4.0) 5.3 (v3.1) | Ecessa Edge EV150 10.7.4 Cross-Site Request Forgery vi… |
Ecessa Corporation |
Ecessa Edge EV150 |
2025-12-24T19:27:52.680Z | 2025-12-24T20:24:45.919Z |
| cve-2018-25151 | 5.1 (v4.0) 4.3 (v3.1) | Ecessa WANWorx WVR-30 < 10.7.4 Cross-Site Request Forg… |
Ecessa Corporation |
WANWorx WVR-30 |
2025-12-24T19:27:52.222Z | 2025-12-24T20:24:53.133Z |
| cve-2018-25150 | 5.1 (v4.0) 5.3 (v3.1) | Ecessa ShieldLink SL175EHQ 10.7.4 Cross-Site Request F… |
Ecessa Corporation |
Ecessa ShieldLink SL175EHQ |
2025-12-24T19:27:51.814Z | 2025-12-24T20:24:59.684Z |
| cve-2025-36154 | 6.2 (v3.1) | IBM Concert Software Cleartext Storage in a File or on Disk. |
IBM |
Concert |
2025-12-24T19:01:48.161Z | 2025-12-24T20:02:34.098Z |
| cve-2019-25228 | 5.1 (v4.0) 5.3 (v3.1) | Kentico Xperience <= 12.0.47 Virtual Context Informati… |
Kentico |
Xperience |
2025-12-18T19:53:23.892Z | 2025-12-18T21:48:40.408Z |
| cve-2019-25229 | 8.7 (v4.0) 8.8 (v3.1) | Kentico Xperience <= 12.0.29 MVC Forms Unrestricted Fi… |
Kentico |
Xperience |
2025-12-18T19:53:24.336Z | 2025-12-18T21:48:34.976Z |
| cve-2020-36889 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 12.0.90 Administration Interface … |
Kentico |
Xperience |
2025-12-18T19:53:25.212Z | 2025-12-18T21:48:24.696Z |
| cve-2019-25230 | 5.3 (v4.0) 4.3 (v3.1) | Kentico Xperience <= 12.0.0 User Widget Information Di… |
Kentico |
Xperience |
2025-12-18T19:53:24.782Z | 2025-12-18T21:48:29.671Z |
| cve-2020-36890 | 8.6 (v4.0) 7.2 (v3.1) | Kentico Xperience <= 10 Administrator Access Control Bypass |
Kentico |
Xperience |
2025-12-18T19:53:25.672Z | 2025-12-18T21:48:19.613Z |
| cve-2020-36891 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 12.0.49 File Upload Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:26.107Z | 2025-12-18T21:48:14.482Z |
| cve-2021-47711 | 8.7 (v4.0) 8.8 (v3.1) | Kentico Xperience <= 13.0.52 Online Marketing Macros S… |
Kentico |
Xperience |
2025-12-18T19:53:26.564Z | 2025-12-18T21:48:09.105Z |
| cve-2021-47712 | 6.9 (v4.0) 7.5 (v3.1) | Kentico Xperience <= 12.0.102 URL Hashing Cryptography… |
Kentico |
Xperience |
2025-12-18T19:53:26.971Z | 2025-12-18T21:48:02.746Z |
| cve-2023-53887 | 5.1 (v4.0) | Zomplog 3.9 Cross-Site Scripting Vulnerability via Pag… |
Zomplog |
Zomplog |
2025-12-15T20:28:22.198Z | 2025-12-15T21:46:43.279Z |
| cve-2023-53888 | 7.2 (v4.0) | Zomplog 3.9 Remote Code Execution via Authenticated Fi… |
Zomplog |
Zomplog |
2025-12-15T20:28:22.684Z | 2025-12-15T21:46:37.310Z |
| cve-2023-53918 | 5.1 (v4.0) 5.4 (v3.1) | PodcastGenerator Stored Cross-Site Scripting via Episo… |
Podcastgenerator |
PodcastGenerator |
2025-12-17T22:44:51.638Z | 2025-12-18T15:03:27.411Z |
| cve-2023-53920 | 5.1 (v4.0) 4.6 (v3.1) | PodcastGenerator Stored Cross-Site Scripting via Podca… |
Podcastgenerator |
PodcastGenerator |
2025-12-17T22:44:52.702Z | 2025-12-18T15:03:10.601Z |
| cve-2023-53919 | 5.1 (v4.0) 4.6 (v3.1) | PodcastGenerator Stored Cross-Site Scripting via Freeb… |
Podcastgenerator |
PodcastGenerator |
2025-12-17T22:44:52.167Z | 2025-12-18T15:03:20.230Z |
| cve-2023-53910 | 5.1 (v4.0) 5.4 (v3.1) | WBCE CMS 1.6.1 Stored Cross-Site Scripting via Page Content |
wbce-cms |
WBCE CMS |
2025-12-17T22:44:47.417Z | 2025-12-18T15:04:35.359Z |
| cve-2023-53909 | 5.1 (v4.0) 5.4 (v3.1) | WBCE CMS 1.6.1 SVG File Content Cross-Site Scripting |
wbce-cms |
WBCE CMS |
2025-12-17T22:44:46.920Z | 2025-12-18T15:04:44.354Z |
| cve-2023-53915 | 5.1 (v4.0) 5.4 (v3.1) | Zenphoto 1.6 Stored Cross-Site Scripting via Album Des… |
Zenphoto |
Zenphoto |
2025-12-17T22:44:50.087Z | 2025-12-18T15:03:47.757Z |
| cve-2023-53916 | 5.1 (v4.0) 5.4 (v3.1) | Zenphoto 1.6 Stored Cross-Site Scripting via User Post… |
Zenphoto |
Zenphoto |
2025-12-17T22:44:50.590Z | 2025-12-18T15:03:37.772Z |
| cve-2023-53926 | 8.7 (v4.0) 9.8 (v3.1) | PHPJabbers Simple CMS 5.0 SQL Injection via Column Parameter |
PHPJabbers |
Simple CMS |
2025-12-17T22:44:55.873Z | 2025-12-18T15:02:39.849Z |
| cve-2023-53927 | 5.1 (v4.0) 8.8 (v3.1) | PHPJabbers Simple CMS 5.0 Stored Cross-Site Scripting … |
PHPJabbers |
Simple CMS |
2025-12-17T22:44:56.392Z | 2025-12-18T15:02:32.305Z |
| cve-2025-34288 | 8.6 (v4.0) | Nagios XI Privilege Escalation via Writable PHP Includ… |
Nagios Enterprises |
Nagios XI |
2025-12-16T22:17:02.004Z | 2025-12-18T04:55:16.774Z |
| cve-2023-53913 | 6.2 (v4.0) 8.8 (v3.1) | Rukovoditel 3.3.1 CSV Injection via User Account Export |
Rukovoditel |
Rukovoditel |
2025-12-17T22:44:48.985Z | 2025-12-18T15:04:08.565Z |
| cve-2023-53903 | 5.1 (v4.0) 5.4 (v3.1) | WebsiteBaker 2.13.3 Stored Cross-Site Scripting via SV… |
websitebaker |
WebsiteBaker |
2025-12-16T17:03:48.887Z | 2025-12-16T21:44:03.498Z |
| cve-2023-53981 | 8.6 (v4.0) 8.8 (v3.1) | PhotoShow 3.0 Remote Code Execution via Exiftran Path … |
thibaud-rohmer |
PhotoShow |
2025-12-22T21:35:36.734Z | 2025-12-22T22:03:56.782Z |
| cve-2025-60935 | N/A | An open redirect vulnerability in the login endpo… |
n/a |
n/a |
2025-12-24T00:00:00.000Z | 2025-12-24T16:46:21.881Z |
| cve-2025-2515 | 7.2 (v3.1) | Bluechi: privilege escalation in bluechi via unrestric… |
Eclipse Foundation |
BlueChi |
2025-12-24T16:21:54.365Z | 2025-12-24T16:48:19.891Z |
| cve-2025-13407 | N/A | GravityForms < 2.9.23.1 - Unauthenticated Arbitrary Fi… |
Unknown |
Gravity Forms |
2025-12-24T06:00:04.578Z | 2025-12-24T16:39:08.316Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2020-36889 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:49.200 | 2025-12-24T18:16:50.107 |
| fkie_cve-2019-25230 | An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sen… | 2025-12-18T20:15:49.040 | 2025-12-24T18:16:42.040 |
| fkie_cve-2020-36890 | An access control bypass vulnerability in Kentico Xperience allows administrators to modify global … | 2025-12-18T20:15:49.347 | 2025-12-24T18:15:25.033 |
| fkie_cve-2020-36891 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to upload files w… | 2025-12-18T20:15:49.490 | 2025-12-24T18:15:14.730 |
| fkie_cve-2021-47711 | A SQL injection vulnerability in Kentico Xperience allows authenticated editors to inject malicious… | 2025-12-18T20:15:49.653 | 2025-12-24T18:15:02.687 |
| fkie_cve-2021-47712 | A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL ha… | 2025-12-18T20:15:49.810 | 2025-12-24T18:14:46.850 |
| fkie_cve-2023-53887 | Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject… | 2025-12-15T21:15:51.833 | 2025-12-24T18:13:07.030 |
| fkie_cve-2023-53888 | Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to i… | 2025-12-15T21:15:51.973 | 2025-12-24T18:11:46.850 |
| fkie_cve-2023-53918 | PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title fi… | 2025-12-17T23:15:50.610 | 2025-12-24T18:11:03.593 |
| fkie_cve-2023-53920 | PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title fi… | 2025-12-17T23:15:50.933 | 2025-12-24T18:10:52.043 |
| fkie_cve-2023-53919 | PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content … | 2025-12-17T23:15:50.760 | 2025-12-24T18:08:33.050 |
| fkie_cve-2023-53910 | WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attac… | 2025-12-17T23:15:49.347 | 2025-12-24T18:08:07.400 |
| fkie_cve-2023-53909 | WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attac… | 2025-12-17T23:15:49.193 | 2025-12-24T18:07:50.490 |
| fkie_cve-2023-53915 | Zenphoto 1.6 contains a stored cross-site scripting vulnerability that allows authenticated attacke… | 2025-12-17T23:15:50.137 | 2025-12-24T18:06:39.670 |
| fkie_cve-2023-53916 | Zenphoto 1.6 contains a stored cross-site scripting vulnerability in the user postal code field acc… | 2025-12-17T23:15:50.297 | 2025-12-24T18:04:15.907 |
| fkie_cve-2023-53926 | PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that all… | 2025-12-17T23:15:51.873 | 2025-12-24T18:03:04.240 |
| fkie_cve-2023-53927 | PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenti… | 2025-12-17T23:15:52.027 | 2025-12-24T18:02:56.877 |
| fkie_cve-2025-34288 | Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe … | 2025-12-16T23:15:44.720 | 2025-12-24T17:57:41.600 |
| fkie_cve-2023-53913 | Rukovoditel 3.3.1 contains a CSV injection vulnerability that allows authenticated users to inject … | 2025-12-17T23:15:49.830 | 2025-12-24T17:55:18.900 |
| fkie_cve-2023-53903 | WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated … | 2025-12-16T17:16:02.700 | 2025-12-24T17:54:34.197 |
| fkie_cve-2023-53981 | PhotoShow 3.0 contains a remote code execution vulnerability that allows authenticated administrato… | 2025-12-22T22:16:03.903 | 2025-12-24T17:54:11.960 |
| fkie_cve-2025-60935 | An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to red… | 2025-12-24T15:16:01.860 | 2025-12-24T17:15:47.620 |
| fkie_cve-2025-2515 | A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS. This … | 2025-12-24T17:15:47.293 | 2025-12-24T17:15:47.293 |
| fkie_cve-2025-13407 | The Gravity Forms WordPress plugin before 2.9.23.1 does not properly prevent users from uploading d… | 2025-12-24T06:15:43.973 | 2025-12-24T17:15:46.577 |
| fkie_cve-2024-35322 | MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability v… | 2025-12-24T16:15:46.653 | 2025-12-24T17:15:45.267 |
| fkie_cve-2023-53896 | D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows un… | 2025-12-16T18:16:06.537 | 2025-12-24T17:15:32.207 |
| fkie_cve-2023-53914 | UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers… | 2025-12-17T23:15:49.983 | 2025-12-24T17:04:53.853 |
| fkie_cve-2022-50680 | A stored cross-site scripting vulnerability in Kentico Xperience allows administration users to inj… | 2025-12-18T20:15:49.980 | 2025-12-24T17:03:39.167 |
| fkie_cve-2022-50681 | A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject mali… | 2025-12-18T20:15:50.133 | 2025-12-24T17:03:32.390 |
| fkie_cve-2022-50682 | A CRLF injection vulnerability in Kentico Xperience allows attackers to manipulate URL query string… | 2025-12-18T20:15:50.287 | 2025-12-24T17:03:26.313 |
| ID | Description | Package | Published | Updated |
|---|---|---|---|---|
| pysec-2007-4 | Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrar… | plone | 2007-11-07T21:46:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2006-6 | Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member regis… | Plone | 2006-12-07T23:28:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2006-5 | Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 … | Plone | 2006-09-29T19:07:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2022-43072 | An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted … | chia-blockchain | 2022-07-29T21:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43068 | A race condition flaw was found in ansible-runner, where an attacker could watch for rapi… | ansible-runner | 2022-08-23T16:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43067 | A flaw was found in ansible-runner where the default temporary files configuration in ans… | ansible-runner | 2022-08-23T16:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2013-35 | The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through … | cinder | 2013-09-16T19:14:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43063 | Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arb… | paddlepaddle | 2022-12-07T09:15:00+00:00 | 2024-11-22T12:27:25.862098+00:00 |
| pysec-2006-8 | The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not … | zope2 | 2006-09-19T18:07:00Z | 2024-11-21T14:23:03.63347Z |
| pysec-2006-7 | Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw… | zope2 | 2006-07-07T23:05:00Z | 2024-11-21T14:23:03.576588Z |
| pysec-2017-148 | Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in… | zope | 2017-08-07T17:29:00Z | 2024-11-21T14:23:03.459792Z |
| pysec-2022-43176 | The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. Thi… | zibal | 2022-06-24T21:15:00Z | 2024-11-21T14:23:03.404044Z |
| pysec-2022-43175 | Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to … | xblock-drag-and-drop-v2 | 2022-11-28T21:15:00+00:00 | 2024-11-21T14:23:03.352390+00:00 |
| pysec-2022-43173 | The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third… | wikifaces | 2022-07-22T15:15:00Z | 2024-11-21T14:23:03.244154Z |
| pysec-2019-256 | In libwebp 0.5.1, there is a double free bug in libwebpmux. | webp | 2019-05-23T18:29:00Z | 2024-11-21T14:23:03.194401Z |
| pysec-2022-43172 | The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor… | watertools | 2022-06-24T21:15:00Z | 2024-11-21T14:23:03.143453Z |
| pysec-2024-151 | Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compi… | vyper | 2024-01-30T21:15:00+00:00 | 2024-11-21T14:23:03.091183+00:00 |
| pysec-2024-150 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can … | vyper | 2024-02-07T17:15:00+00:00 | 2024-11-21T14:23:03.024978+00:00 |
| pysec-2024-149 | Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2024-02-01T17:15:00+00:00 | 2024-11-21T14:23:02.970591+00:00 |
| pysec-2024-148 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls … | vyper | 2024-02-02T17:15:00+00:00 | 2024-11-21T14:23:02.917464+00:00 |
| pysec-2024-147 | Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack m… | vyper | 2024-02-05T21:15:00+00:00 | 2024-11-21T14:23:02.864019+00:00 |
| pysec-2023-307 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Contr… | vyper | 2023-12-13T20:15:00+00:00 | 2024-11-21T14:23:02.808922+00:00 |
| pysec-2023-306 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In ve… | vyper | 2023-09-18T21:16:00+00:00 | 2024-11-21T14:23:02.752932+00:00 |
| pysec-2023-305 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Start… | vyper | 2023-09-18T21:16:00+00:00 | 2024-11-21T14:23:02.698147+00:00 |
| pysec-2023-304 | vantage6 is a framework to manage and deploy privacy enhancing technologies like Federate… | vantage6-server | 2023-11-14T21:15:00+00:00 | 2024-11-21T14:23:02.641254+00:00 |
| pysec-2023-303 | vantage6 is a framework to manage and deploy privacy enhancing technologies like Federate… | vantage6-node | 2023-11-14T21:15:00+00:00 | 2024-11-21T14:23:02.574095+00:00 |
| pysec-2022-43171 | An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server… | tryton | 2022-03-10T17:47:00+00:00 | 2024-11-21T14:23:02.453983+00:00 |
| pysec-2022-43170 | An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6… | tryton | 2022-03-10T17:47:00+00:00 | 2024-11-21T14:23:02.248212+00:00 |
| pysec-2016-41 | file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before… | tryton | 2016-09-07T19:28:00+00:00 | 2024-11-21T14:23:02.083165+00:00 |
| pysec-2016-40 | Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, a… | tryton | 2016-09-07T19:28:00+00:00 | 2024-11-21T14:23:02.008255+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4278 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.578652Z |
| gsd-2024-4238 | A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affect… | 2024-04-27T05:02:16.577033Z |
| gsd-2024-4290 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.575829Z |
| gsd-2024-4239 | A vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by… | 2024-04-27T05:02:16.575159Z |
| gsd-2024-4257 | A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has be… | 2024-04-27T05:02:16.570113Z |
| gsd-2024-4288 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.569916Z |
| gsd-2024-4248 | A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. This is… | 2024-04-27T05:02:16.569718Z |
| gsd-2024-4251 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been rated as critical. Aff… | 2024-04-27T05:02:16.569517Z |
| gsd-2024-4276 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.567475Z |
| gsd-2024-4270 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.565894Z |
| gsd-2024-4272 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.564269Z |
| gsd-2024-4228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.563352Z |
| gsd-2024-4253 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.562905Z |
| gsd-2024-4268 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.561404Z |
| gsd-2024-4275 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.560967Z |
| gsd-2024-4234 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-27T05:02:16.558629Z |
| gsd-2024-4245 | A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.14(4… | 2024-04-27T05:02:16.558324Z |
| gsd-2024-4271 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.557860Z |
| gsd-2024-4262 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.557062Z |
| gsd-2024-4250 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been declared as critical. … | 2024-04-27T05:02:16.555748Z |
| gsd-2024-4244 | A vulnerability classified as critical was found in Tenda W9 1.0.0.7(4456). Affected by t… | 2024-04-27T05:02:16.554860Z |
| gsd-2024-4243 | A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456). Affected… | 2024-04-27T05:02:16.549231Z |
| gsd-2024-4256 | A vulnerability was found in Techkshetra Info Solutions Savsoft Quiz 6.0 and classified a… | 2024-04-27T05:02:16.544284Z |
| gsd-2024-4269 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.543844Z |
| gsd-2024-4274 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.542869Z |
| gsd-2024-4236 | A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1… | 2024-04-27T05:02:16.536897Z |
| gsd-2024-4281 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.536355Z |
| gsd-2024-4231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.534700Z |
| gsd-2024-4261 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.534179Z |
| gsd-2024-4280 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.533977Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192727 | Malicious code in cookie-breaker (npm) | 2025-12-23T08:03:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192726 | Malicious code in cms_comp_popup (npm) | 2025-12-23T08:02:49Z | 2025-12-24T00:53:16Z |
| mal-2025-192725 | Malicious code in chai-pack (npm) | 2025-12-23T08:02:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192724 | Malicious code in chai-as-validated (npm) | 2025-12-23T08:02:14Z | 2025-12-24T00:53:16Z |
| mal-2025-192723 | Malicious code in chai-as-tested (npm) | 2025-12-23T08:02:13Z | 2025-12-24T00:53:16Z |
| mal-2025-192722 | Malicious code in chai-as-deploy (npm) | 2025-12-23T08:02:05Z | 2025-12-24T00:53:16Z |
| mal-2025-192721 | Malicious code in caterpillar-test (npm) | 2025-12-23T08:01:58Z | 2025-12-24T00:53:16Z |
| mal-2025-192720 | Malicious code in canva-test (npm) | 2025-12-23T08:01:44Z | 2025-12-24T00:53:16Z |
| mal-2025-192719 | Malicious code in calculator-40ed (npm) | 2025-12-23T08:01:36Z | 2025-12-24T00:53:16Z |
| mal-2025-192718 | Malicious code in bootstrap-setflexcolor (npm) | 2025-12-23T08:01:19Z | 2025-12-24T00:53:16Z |
| mal-2025-192717 | Malicious code in bootstrap-setcolors (npm) | 2025-12-23T08:01:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192716 | Malicious code in bootstrap-setcolor (npm) | 2025-12-23T08:01:17Z | 2025-12-24T00:53:16Z |
| mal-2025-192715 | Malicious code in booms-ai (npm) | 2025-12-23T08:01:16Z | 2025-12-24T00:53:16Z |
| mal-2025-192714 | Malicious code in bignumberx (npm) | 2025-12-23T08:00:59Z | 2025-12-24T00:53:16Z |
| mal-2025-192713 | Malicious code in baidu-src-test4 (npm) | 2025-12-23T08:00:16Z | 2025-12-24T00:53:16Z |
| mal-2025-192752 | Malicious code in @google_recaptcha/js (npm) | 2025-12-23T19:10:06Z | 2025-12-24T00:53:15Z |
| mal-2025-192745 | Malicious code in @aa-techops-ui/ping-authentication (npm) | 2025-12-23T17:29:18Z | 2025-12-24T00:53:15Z |
| mal-2025-192712 | Malicious code in auth-handler (npm) | 2025-12-23T07:59:48Z | 2025-12-24T00:53:15Z |
| mal-2025-192711 | Malicious code in assert-json-not (npm) | 2025-12-23T07:59:32Z | 2025-12-24T00:53:15Z |
| mal-2025-192710 | Malicious code in amournapraia (npm) | 2025-12-23T07:56:20Z | 2025-12-24T00:53:15Z |
| mal-2025-192709 | Malicious code in amazon-testpackage (npm) | 2025-12-23T07:56:17Z | 2025-12-24T00:53:15Z |
| mal-2025-192708 | Malicious code in alicenpmpackage (npm) | 2025-12-23T07:56:14Z | 2025-12-24T00:53:15Z |
| mal-2025-192707 | Malicious code in acz.view.src (npm) | 2025-12-23T07:55:31Z | 2025-12-24T00:53:15Z |
| mal-2025-192706 | Malicious code in @ownbackup/ob-query-builder (npm) | 2025-12-23T07:49:19Z | 2025-12-24T00:53:15Z |
| mal-2025-192705 | Malicious code in @ownbackup/ob-loader (npm) | 2025-12-23T07:49:19Z | 2025-12-24T00:53:15Z |
| mal-2025-192704 | Malicious code in @ownbackup/ob-design-system (npm) | 2025-12-23T07:49:18Z | 2025-12-24T00:53:15Z |
| mal-2025-192703 | Malicious code in @ownbackup/icons (npm) | 2025-12-23T07:49:17Z | 2025-12-24T00:53:15Z |
| mal-2025-192702 | Malicious code in @ownbackup/data-grid (npm) | 2025-12-23T07:49:16Z | 2025-12-24T00:53:15Z |
| mal-2025-192701 | Malicious code in @ownbackup/data-chart (npm) | 2025-12-23T07:49:16Z | 2025-12-24T00:53:15Z |
| mal-2025-192700 | Malicious code in @ads-core/types (npm) | 2025-12-23T07:43:33Z | 2025-12-24T00:53:15Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2640 | SonicWall SSL-VPN: Schwachstelle ermöglicht Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2635 | Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Denial of Service | 2025-11-18T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2499 | IBM WebSphere Application Server: Schwachstelle ermöglicht Manipulation von Dateien und potenziell Umgehen von Sicherheitsvorkehrungen | 2025-11-05T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2464 | OpenSMTP: Schwachstelle ermöglicht Denial of Service | 2025-11-02T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2363 | Oracle MySQL: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2152 | IBM WebSphere Application Server: Schwachstelle ermöglicht Denial of Service | 2025-09-29T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2104 | WebKitGTK: Mehrere Schwachstellen | 2025-09-22T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2101 | Ghostscript: Schwachstellen ermöglichen Codeausführung | 2025-09-21T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-1828 | PAM (linux-pam package): Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-08-13T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-1748 | libarchive: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung | 2025-08-07T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-1417 | Linux Kernel: Mehrere Schwachstellen | 2025-06-29T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-1261 | CoreDNS: Schwachstelle ermöglicht Denial of Service | 2025-06-09T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0991 | Linux Kernel: Mehrere Schwachstellen | 2025-05-08T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0132 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-01-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2022-0969 | Internet Systems Consortium BIND: Mehrere Schwachstellen | 2022-03-16T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2500 | Cisco Contact Center Produkte (CCE,CCX,CUIC): Mehrere Schwachstellen | 2025-11-05T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2612 | M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2609 | IBM SAN Volume Controller, Storwize und FlashSystem: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2607 | Red Hat Enterprise Linux (lasso): Eine Schwachstelle ermöglichen Codeausführung | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2474 | Android Patchday November 2025: Multiple Vulnerabilities | 2025-11-03T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2472 | Samsung Android: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2370 | Oracle Systems: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2361 | Oracle Communications: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2360 | Oracle Communications Applications: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1850 | Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-08-14T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1699 | Red Hat Enterprise Linux (requests): Schwachstelle ermöglicht das Ausspähen von Informationen | 2025-08-03T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1636 | Apache HTTP Server: Schwachstelle ermöglicht umgehen von Sicherheitsvorkehrungen | 2025-07-23T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1623 | Mozilla Firefox , Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2025-07-22T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1583 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2025-07-16T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1569 | Oracle Java SE: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-430425 | SSA-430425: Multiple Vulnerabilities in SINEC Security Monitor before V4.9.0 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-426509 | SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-368868 | SSA-368868: Multiple Vulnerabilities in WibuKey for Windows | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-340240 | SSA-340240: Denial of Service Vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-321292 | SSA-321292: Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products | 2022-05-10T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-254396 | SSA-254396: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-148641 | SSA-148641: XPath Constraint Vulnerability in Mendix Runtime | 2022-03-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-999588 | SSA-999588: Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2 | 2023-12-12T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-959281 | SSA-959281: XML File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-955858 | SSA-955858: Multiple Vulnerabilities in LOGO! 8 BM Devices | 2022-10-11T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-921449 | SSA-921449: Plaintext Storage of a Password Vulnerability in LOGO! V8.3 BM Devices | 2024-08-13T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-852501 | SSA-852501: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-850560 | SSA-850560: Use of 4-Digit PIN in SENTRON PAC3200 Devices | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-844582 | SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA | 2023-12-12T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-783481 | SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM | 2021-03-09T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-711309 | SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products | 2023-09-12T00:00:00Z | 2025-11-11T00:00:00Z |
| SSA-698820 | SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices | 2024-07-09T00:00:00Z | 2025-11-11T00:00:00Z |
| SSA-626178 | SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-620288 | SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic | 2021-12-14T00:00:00Z | 2025-03-11T00:00:00Z |
| SSA-583523 | SSA-583523: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2024-10-08T00:00:00Z | 2024-12-10T00:00:00Z |
| SSA-540493 | SSA-540493: Kiosk Mode Escape Vulnerability in HiMed Cockpit Devices Before V11.6.2 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-455250 | SSA-455250: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h3 | 2024-04-09T00:00:00Z | 2025-05-13T00:00:00Z |
| SSA-430425 | SSA-430425: Multiple Vulnerabilities in SINEC Security Monitor before V4.9.0 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-426509 | SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-368868 | SSA-368868: Multiple Vulnerabilities in WibuKey for Windows | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-366067 | SSA-366067: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.1 on RUGGEDCOM APE1808 Devices | 2024-03-12T00:00:00Z | 2025-09-09T00:00:00Z |
| SSA-340240 | SSA-340240: Denial of Service Vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-321292 | SSA-321292: Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products | 2022-05-10T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-254396 | SSA-254396: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-148641 | SSA-148641: XPath Constraint Vulnerability in Mendix Runtime | 2022-03-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:7827 | Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update | 2024-01-04T14:22:05+00:00 | 2025-11-29T06:51:27+00:00 |
| rhsa-2023:7823 | Red Hat Security Advisory: OpenShift Container Platform 4.12.46 bug fix and security update | 2024-01-04T14:41:38+00:00 | 2025-11-29T06:51:26+00:00 |
| rhsa-2023:7741 | Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancements, and bug fix update | 2023-12-12T13:55:37+00:00 | 2025-11-29T06:51:26+00:00 |
| rhsa-2023:7710 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.0 security update | 2023-12-11T00:20:04+00:00 | 2025-11-29T06:51:25+00:00 |
| rhsa-2023:7704 | Red Hat Security Advisory: OpenShift Virtualization 4.14.1 security and bug fix update | 2023-12-07T15:00:28+00:00 | 2025-11-29T06:51:24+00:00 |
| rhsa-2023:7703 | Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.10.6 release and security update | 2023-12-07T14:57:07+00:00 | 2025-11-29T06:51:23+00:00 |
| rhsa-2023:7699 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update | 2023-12-07T14:26:32+00:00 | 2025-11-29T06:51:22+00:00 |
| rhsa-2023:7691 | Red Hat Security Advisory: OpenShift Container Platform 4.11.55 bug fix and security update | 2023-12-13T21:44:50+00:00 | 2025-11-29T06:51:21+00:00 |
| rhsa-2023:7690 | Red Hat Security Advisory: OpenShift Container Platform 4.11.55 security update | 2023-12-13T21:03:30+00:00 | 2025-11-29T06:51:21+00:00 |
| rhsa-2023:7687 | Red Hat Security Advisory: OpenShift Container Platform 4.13.26 bug fix and security update | 2023-12-13T00:13:20+00:00 | 2025-11-29T06:51:19+00:00 |
| rhsa-2023:7682 | Red Hat Security Advisory: OpenShift Container Platform 4.14.6 bug fix and security update | 2023-12-12T09:48:40+00:00 | 2025-11-29T06:51:18+00:00 |
| rhsa-2023:7662 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 6.0.3 security update | 2023-12-06T00:20:48+00:00 | 2025-11-29T06:51:17+00:00 |
| rhsa-2023:7608 | Red Hat Security Advisory: OpenShift Container Platform 4.12.45 bug fix and security update | 2023-12-06T17:55:11+00:00 | 2025-11-29T06:51:16+00:00 |
| rhsa-2023:7607 | Red Hat Security Advisory: OpenShift Container Platform 4.12.45 security and extras update | 2023-12-06T16:54:41+00:00 | 2025-11-29T06:51:15+00:00 |
| rhsa-2023:7604 | Red Hat Security Advisory: OpenShift Container Platform 4.13.25 bug fix and security update | 2023-12-06T00:34:23+00:00 | 2025-11-29T06:51:14+00:00 |
| rhsa-2023:7602 | Red Hat Security Advisory: OpenShift Container Platform 4.13.25 security and extras update | 2023-12-06T00:16:04+00:00 | 2025-11-29T06:51:13+00:00 |
| rhsa-2023:7599 | Red Hat Security Advisory: OpenShift Container Platform 4.14.5 bug fix and security update | 2023-12-05T09:57:03+00:00 | 2025-11-29T06:51:12+00:00 |
| rhsa-2023:7555 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.0 security update | 2023-11-28T18:50:01+00:00 | 2025-11-29T06:51:10+00:00 |
| rhsa-2023:7515 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 9.0.0 security update | 2023-11-27T16:08:33+00:00 | 2025-11-29T06:50:26+00:00 |
| rhsa-2023:7522 | Red Hat Security Advisory: OpenShift Virtualization 4.13.6 security and bug fix update | 2023-11-28T13:45:02+00:00 | 2025-11-29T06:50:24+00:00 |
| rhsa-2023:7521 | Red Hat Security Advisory: OpenShift Virtualization 4.13.6 RPMs security and bug fix update | 2023-11-28T13:17:06+00:00 | 2025-11-29T06:50:24+00:00 |
| rhsa-2023:7479 | Red Hat Security Advisory: OpenShift Container Platform 4.11.54 bug fix and security update | 2023-11-29T01:40:41+00:00 | 2025-11-29T06:50:23+00:00 |
| rhsa-2023:7475 | Red Hat Security Advisory: OpenShift Container Platform 4.13.24 bug fix and security update | 2023-11-29T01:47:09+00:00 | 2025-11-29T06:50:23+00:00 |
| rhsa-2023:7478 | Red Hat Security Advisory: OpenShift Container Platform 4.11.54 security and extras update | 2023-11-29T00:44:58+00:00 | 2025-11-29T06:50:22+00:00 |
| rhsa-2023:7474 | Red Hat Security Advisory: OpenShift Container Platform 4.13.24 security and extras update | 2023-11-29T00:33:54+00:00 | 2025-11-29T06:50:21+00:00 |
| rhsa-2023:7470 | Red Hat Security Advisory: OpenShift Container Platform 4.14.4 bug fix and security update | 2023-11-29T11:36:57+00:00 | 2025-11-29T06:50:21+00:00 |
| rhsa-2023:7469 | Red Hat Security Advisory: OpenShift Container Platform 4.14.4 security and extras update | 2023-11-29T10:27:24+00:00 | 2025-11-29T06:50:19+00:00 |
| rhsa-2023:7345 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.9.3 security update | 2023-11-20T08:34:18+00:00 | 2025-11-29T06:50:19+00:00 |
| rhsa-2023:7344 | Red Hat Security Advisory: openshift-gitops-kam security update | 2023-11-20T07:53:42+00:00 | 2025-11-29T06:50:19+00:00 |
| rhsa-2023:7342 | Red Hat Security Advisory: OpenShift Container Platform 4.11 low-latency extras update | 2023-11-16T20:48:36+00:00 | 2025-11-29T06:50:18+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-68227 | mptcp: Fix proto fallback detection with BPF | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:21.000Z |
| msrc_cve-2025-68239 | binfmt_misc: restore write access before closing files opened by open_exec() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:16.000Z |
| msrc_cve-2025-68259 | KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:10.000Z |
| msrc_cve-2025-68236 | scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:05.000Z |
| msrc_cve-2025-68265 | nvme: fix admin request_queue lifetime | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:00.000Z |
| msrc_cve-2025-40355 | sysfs: check visibility before changing group attribute ownership | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:54.000Z |
| msrc_cve-2025-68175 | media: nxp: imx8-isi: Fix streaming cleanup on release | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:49.000Z |
| msrc_cve-2025-68204 | pmdomain: arm: scmi: Fix genpd leak on provider registration failure | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:44.000Z |
| msrc_cve-2025-68174 | amd/amdkfd: enhance kfd process check in switch partition | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:38.000Z |
| msrc_cve-2025-68214 | timers: Fix NULL function pointer race in timer_shutdown_sync() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:33.000Z |
| msrc_cve-2025-40353 | arm64: mte: Do not warn if the page is already tagged in copy_highpage() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:28.000Z |
| msrc_cve-2025-68261 | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:23.000Z |
| msrc_cve-2025-68229 | scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:18.000Z |
| msrc_cve-2025-68219 | cifs: fix memory leak in smb3_fs_context_parse_param error path | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:13.000Z |
| msrc_cve-2025-68235 | nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:07.000Z |
| msrc_cve-2025-68231 | mm/mempool: fix poisoning order>0 pages with HIGHMEM | 2025-12-02T00:00:00.000Z | 2025-12-17T01:03:02.000Z |
| msrc_cve-2025-68264 | ext4: refresh inline data size before write operations | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:57.000Z |
| msrc_cve-2025-68230 | drm/amdgpu: fix gpu page fault after hibernation on PF passthrough | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:52.000Z |
| msrc_cve-2025-68263 | ksmbd: ipc: fix use-after-free in ipc_msg_send_request | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:47.000Z |
| msrc_cve-2025-40354 | drm/amd/display: increase max link count and fix link->enc NULL pointer access | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:41.000Z |
| msrc_cve-2025-68198 | crash: fix crashkernel resource shrink | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:36.000Z |
| msrc_cve-2025-68266 | bfs: Reconstruct file type when loading from disk | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:31.000Z |
| msrc_cve-2025-40362 | ceph: fix multifs mds auth caps issue | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:26.000Z |
| msrc_cve-2025-68201 | drm/amdgpu: remove two invalid BUG_ON()s | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:20.000Z |
| msrc_cve-2025-68196 | drm/amd/display: Cache streams targeting link when performing LT automation | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:15.000Z |
| msrc_cve-2025-68203 | drm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:10.000Z |
| msrc_cve-2025-68223 | drm/radeon: delete radeon_fence_process in is_signaled, no deadlock | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:04.000Z |
| msrc_cve-2025-68255 | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | 2025-12-02T00:00:00.000Z | 2025-12-17T01:01:59.000Z |
| msrc_cve-2025-68211 | ksm: use range-walk function to jump over holes in scan_get_next_rmap_item | 2025-12-02T00:00:00.000Z | 2025-12-17T01:01:53.000Z |
| msrc_cve-2025-68190 | drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:01:48.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-240-03 | Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit | 2025-08-12T04:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-238-03 | Schneider Electric Modicon M340 Controller and Communication Modules | 2025-08-12T04:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-035-06 | Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H | 2025-01-14T00:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-226-21 | Siemens BFCClient | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-20 | Siemens RUGGEDCOM ROX II | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-19 | Siemens SINUMERIK | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-17 | Siemens SINEC Traffic Analyzer | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-16 | Siemens SICAM Q100/Q200 | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-15 | Siemens SINEC OS | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-14 | Siemens RUGGEDCOM ROX II | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-13 | Siemens SIMATIC RTLS Locating Manager | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-12 | Siemens SIPROTEC 4 and SIPROTEC 4 Compact | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-10 | Siemens SIPROTEC 5 | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-08 | Siemens RUGGEDCOM CROSSBOW Station Access Controller | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-07 | Siemens Third-Party Components in SINEC OS | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-06 | Siemens Opcenter Quality | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-04 | Siemens Simcenter Femap | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-02 | Siemens COMOS | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-01 | Siemens SIMATIC RTLS Locating Manager | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-191-05 | Siemens TIA Project-Server and TIA Portal | 2025-07-08T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-162-05 | Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 | 2025-06-10T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-135-07 | Siemens SIMATIC IPC RS-828A | 2025-05-13T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-044-05 | Siemens SIPROTEC 5 Devices | 2025-02-11T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-347-05 | Siemens Siemens Engineering Platforms | 2024-12-10T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-319-12 | Siemens Mendix Runtime | 2024-11-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-256-05 | Siemens Mendix Runtime | 2024-09-10T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-193-06 | Siemens RUGGEDCOM | 2024-07-09T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-074-08 | Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family | 2024-03-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-23-348-10 | Siemens SIMATIC S7-1500 | 2023-12-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-23-222-12 | Siemens RUGGEDCOM ROS | 2023-08-08T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-csc-dos-XvPhM3bj | Cisco Secure Client Software Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftdvirtual-dos-muengnyr | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftdvirtual-dos-MuenGnYR | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-xss-yjj7zjvq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-xss-yjj7ZjVq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-webvpn-dos-honb9ph4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-webvpn-dos-hOnB9pH4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-7tcnzxtu | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-7TcnzxTU | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-persist-lce-vu3ekmj3 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-persist-lce-vU3ekMJ3 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-nsgacl-bypass-77xneasl | Cisco Adaptive Security Appliance and Firepower Threat Defense Software NSG Access Control List Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-nsgacl-bypass-77XnEAsL | Cisco Adaptive Security Appliance and Firepower Threat Defense Software NSG Access Control List Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-ikev2-dos-9fgeyhsf | Cisco Adaptive Security Appliance and Firepower Threat Defense Software IKEv2 VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-ikev2-dos-9FgEyHsF | Cisco Adaptive Security Appliance and Firepower Threat Defense Software IKEv2 VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-dap-dos-bhekp7n | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-dap-dos-bhEkP7n | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-bf-dos-vdzhlqrw | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-bf-dos-vDZhLqrW | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-nyh3fhp | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-nyH3fhp | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-czf8gt | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-cZf8gT | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-4gyewmkg | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-4gYEWMKg | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-tls-cwy6zxb | Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-tls-CWY6zXB | Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-rce-graupeuf | Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-rce-gRAuPEUF | Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-dos-eedwu5rm | Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-201904-0747 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:13:29.682000Z |
| var-200703-0007 | Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and … | 2024-11-29T22:13:26.674000Z |
| var-202109-1389 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 1… | 2024-11-29T22:13:24.926000Z |
| var-202110-1684 | This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Bi… | 2024-11-29T22:13:24.373000Z |
| var-201412-0615 | The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configur… | 2024-11-29T22:13:23.914000Z |
| var-200608-0055 | WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of s… | 2024-11-29T22:13:23.815000Z |
| var-201609-0347 | The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider… | 2024-11-29T22:13:20.857000Z |
| var-202003-1778 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2024-11-29T22:13:17.964000Z |
| var-201904-0985 | SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remot… | 2024-11-29T22:13:10.223000Z |
| var-200808-0470 | Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Ap… | 2024-11-29T22:13:10.139000Z |
| var-201109-0208 | Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers… | 2024-11-29T22:12:28.453000Z |
| var-202006-1830 | A memory corruption issue was addressed with improved state management. This issue is fix… | 2024-11-29T22:12:28.185000Z |
| var-202201-0349 | node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. n… | 2024-11-29T22:12:23.267000Z |
| var-200608-0037 | The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain … | 2024-11-29T22:12:22.859000Z |
| var-202103-1464 | An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello m… | 2024-11-29T22:12:22.747000Z |
| var-201201-0314 | The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x befor… | 2024-11-29T22:12:21.610000Z |
| var-201212-0268 | libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash… | 2024-11-29T22:11:48.497000Z |
| var-200810-0643 | Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in ne… | 2024-11-29T22:11:18.878000Z |
| var-200609-1402 | The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will cra… | 2024-11-29T22:11:14.161000Z |
| var-202102-1093 | An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The functio… | 2024-11-29T22:11:13.053000Z |
| var-202210-1530 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 1… | 2024-11-29T22:11:12.516000Z |
| var-201912-0510 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:11:11.662000Z |
| var-201203-0192 | Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified varia… | 2024-11-29T22:11:11.061000Z |
| var-201006-1161 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-11-29T22:11:09.863000Z |
| var-202302-1621 | Apache Commons FileUpload before 1.5 does not limit the number of request parts to be pro… | 2024-11-29T22:10:04.554000Z |
| var-200102-0029 | Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial… | 2024-11-29T22:10:01.210000Z |
| var-200703-0024 | Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins… | 2024-11-29T22:09:54.927000Z |
| var-202106-0345 | Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allo… | 2024-11-29T22:09:51.805000Z |
| var-200712-0599 | Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in M… | 2024-11-29T22:09:21.205000Z |
| var-201912-0511 | A logic issue existed in the handling of document loads. This issue was addressed with im… | 2024-11-29T22:08:44.874000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-005167 | EL Injection Vulnerability in Hitachi Tuning Manager | 2024-08-15T09:38+09:00 | 2024-08-15T09:38+09:00 |
| jvndb-2016-000124 | WAON service app for Android fails to verify SSL server certificates | 2024-08-15T09:36+09:00 | 2024-08-15T09:36+09:00 |
| jvndb-2024-000083 | Firmware update for RICOH JavaTM Platform resets the TLS configuration | 2024-08-06T15:13+09:00 | 2024-08-06T15:13+09:00 |
| jvndb-2024-000079 | Cybozu Office vulnerable to bypass browsing restrictions in Custom App | 2024-08-06T14:59+09:00 | 2024-08-06T14:59+09:00 |
| jvndb-2024-000082 | Pimax Play and PiTool accept WebSocket connections from unintended endpoints | 2024-08-05T13:58+09:00 | 2024-08-05T13:58+09:00 |
| jvndb-2024-000084 | Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN | 2024-08-05T13:46+09:00 | 2024-08-05T13:46+09:00 |
| jvndb-2024-000074 | Multiple vulnerabilities in SKYSEA Client View | 2024-07-29T15:28+09:00 | 2024-07-31T14:12+09:00 |
| jvndb-2024-000077 | FFRI AMC vulnerable to OS command injection | 2024-07-30T16:40+09:00 | 2024-07-30T16:40+09:00 |
| jvndb-2024-000081 | EC-CUBE plugin (for EC-CUBE 4 series) "EC-CUBE Web API Plugin" vulnerable to stored cross-site scripting | 2024-07-30T14:06+09:00 | 2024-07-30T14:06+09:00 |
| jvndb-2024-000080 | EC-CUBE 4 Series improper input validation when installing plugins | 2024-07-30T13:56+09:00 | 2024-07-30T13:56+09:00 |
| jvndb-2024-000028 | Multiple vulnerabilities in SKYSEA Client View | 2024-03-07T16:09+09:00 | 2024-07-29T18:13+09:00 |
| jvndb-2024-000076 | SDoP contains a stack-based buffer overflow vulnerability. | 2024-07-29T17:24+09:00 | 2024-07-29T17:24+09:00 |
| jvndb-2024-003242 | OMRON NJ/NX series vulnerable to insufficient verification of data authenticity | 2024-05-28T12:28+09:00 | 2024-07-26T16:27+09:00 |
| jvndb-2021-000105 | PowerCMS XMLRPC API vulnerable to OS command injection | 2021-11-24T15:47+09:00 | 2024-07-26T15:22+09:00 |
| jvndb-2024-000075 | ORC vulnerable to stack-based buffer overflow | 2024-07-26T13:55+09:00 | 2024-07-26T13:55+09:00 |
| jvndb-2022-000030 | Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM | 2022-05-09T15:02+09:00 | 2024-07-18T16:30+09:00 |
| jvndb-2024-000073 | Assimp vulnerable to heap-based buffer overflow | 2024-07-18T13:44+09:00 | 2024-07-18T13:44+09:00 |
| jvndb-2024-000072 | Cybozu Garoon vulnerable to cross-site scripting | 2024-07-16T16:14+09:00 | 2024-07-16T16:14+09:00 |
| jvndb-2024-000071 | FUJITSU Network Edgiot GW1500 vulnerable to path traversal | 2024-07-16T14:41+09:00 | 2024-07-16T14:41+09:00 |
| jvndb-2023-007150 | Multiple vulnerabilities in First Corporation's DVRs | 2023-11-17T17:31+09:00 | 2024-07-11T17:05+09:00 |
| jvndb-2023-000094 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2023-09-22T13:51+09:00 | 2024-07-11T16:49+09:00 |
| jvndb-2024-000007 | Multiple Dahua Technology products vulnerable to authentication bypass | 2024-01-18T13:43+09:00 | 2024-07-11T16:10+09:00 |
| jvndb-2024-001882 | Sharp NEC Display Solutions' public displays vulnerable to local file inclusion | 2024-02-07T14:25+09:00 | 2024-07-11T14:27+09:00 |
| jvndb-2024-000070 | Out-of-bounds write vulnerability in Ricoh MFPs and printers | 2024-07-10T14:16+09:00 | 2024-07-10T14:16+09:00 |
| jvndb-2024-000059 | Multiple vulnerabilities in multiple Webmin products | 2024-07-09T14:27+09:00 | 2024-07-09T14:27+09:00 |
| jvndb-2024-000069 | Cleartext transmission issue in TONE store App to TONE store | 2024-07-08T13:43+09:00 | 2024-07-08T13:43+09:00 |
| jvndb-2024-000068 | JP1/Extensible SNMP Agent fails to restrict access permissions | 2024-07-03T14:57+09:00 | 2024-07-03T14:57+09:00 |
| jvndb-2017-000194 | WSR-300HP vulnerable to arbitrary code execution | 2017-08-08T18:07+09:00 | 2024-07-02T17:55+09:00 |
| jvndb-2024-003831 | Multiple TP-Link products vulnerable to OS command injection | 2024-06-28T17:38+09:00 | 2024-06-28T17:38+09:00 |
| jvndb-2024-000067 | "Piccoma" App uses a hard-coded API key for an external service | 2024-06-28T13:18+09:00 | 2024-06-28T13:18+09:00 |
| ID | Description | Updated |
|---|