Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-j2f8-96fc-682m | A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0.… | 2025-11-09T00:30:26Z | 2025-11-09T00:30:26Z |
| ghsa-hfpp-2q66-88fj | A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing … | 2025-11-09T00:30:26Z | 2025-11-09T00:30:26Z |
| ghsa-88w2-6722-q9jg | A vulnerability has been found in aaPanel BaoTa up to 11.1.0. This vulnerability affects unknown co… | 2025-11-09T00:30:26Z | 2025-11-09T00:30:26Z |
| ghsa-p3wh-73vj-58h9 | A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of t… | 2025-11-08T21:30:21Z | 2025-11-08T21:30:21Z |
| ghsa-vrvf-crm8-m957 | The Saphali LiqPay for donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | 2025-11-08T12:30:24Z | 2025-11-08T12:30:24Z |
| ghsa-c3cp-8hf9-98fv | The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2025-11-08T12:30:24Z | 2025-11-08T12:30:24Z |
| ghsa-76x3-974v-wx5g | The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary fil… | 2025-11-08T12:30:24Z | 2025-11-08T12:30:24Z |
| ghsa-x2hm-rp6m-pffv | The CYAN Backup plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient f… | 2025-11-08T12:30:23Z | 2025-11-08T12:30:23Z |
| ghsa-rq3c-qcg6-jg99 | The Quick Featured Images plugin for WordPress is vulnerable to SQL Injection via the 'delete_orpha… | 2025-11-08T12:30:23Z | 2025-11-08T12:30:23Z |
| ghsa-qvxj-23x4-63x3 | The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unaut… | 2025-11-08T12:30:23Z | 2025-11-08T12:30:23Z |
| ghsa-5h25-8m42-q52x | The Mail Mint plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type… | 2025-11-08T12:30:23Z | 2025-11-08T12:30:23Z |
| ghsa-v538-gr8w-jr93 | The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthor… | 2025-11-08T09:31:08Z | 2025-11-08T09:31:08Z |
| ghsa-mjfw-994c-x339 | The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vuln… | 2025-11-08T09:31:08Z | 2025-11-08T09:31:08Z |
| ghsa-6gj4-3cmf-ffjv | The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vuln… | 2025-11-08T09:31:08Z | 2025-11-08T09:31:08Z |
| ghsa-4mg2-rgw7-wvrm | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauth… | 2025-11-08T09:31:08Z | 2025-11-08T09:31:08Z |
| ghsa-2mx4-g8fr-m5m8 | The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited … | 2025-11-08T06:30:26Z | 2025-11-08T06:30:27Z |
| ghsa-x258-vqv6-3976 | The HTML Forms – Simple WordPress Forms Plugin plugin for WordPress is vulnerable to Stored Cross-S… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-wq7f-wxg4-cf5j | The Smart Auto Upload Images plugin for WordPress is vulnerable to arbitrary file uploads due to mi… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-vxvr-5342-6g7x | The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mp'… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-rxc7-fx8m-jfjp | The WPFunnels – The Easiest Funnel Builder For WordPress And WooCommerce To Collect Leads And Incre… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-pr98-p8v8-r94g | The Contact Form 7 AWeber Extension plugin for WordPress is vulnerable to unauthorized modification… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-mxg7-8fqf-6h2j | The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to Stored Cross-… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-jcx9-wjx2-ccx2 | The Groups plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions u… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-f2vc-gg64-xmgf | The WPFunnels plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient fil… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-96cx-3fh6-vv56 | The WP2Social Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-8h59-9955-wv9r | The Ovatheme Events Manager plugin for WordPress is vulnerable to unauthorized access due to a miss… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-6mgg-q6v6-jm65 | The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnera… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-5vw4-6m45-994c | The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded C… | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-4q76-wc8j-pm27 | The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to … | 2025-11-08T06:30:26Z | 2025-11-08T06:30:26Z |
| ghsa-m598-vr3f-944r | The Asgaros Forum plugin for WordPress is vulnerable to SQL Injection via the '$_COOKIE['asgarosfor… | 2025-11-08T03:31:18Z | 2025-11-08T03:31:18Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-53723 | 7.8 (v3.1) | Windows Hyper-V Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:27.825Z | 2025-11-10T00:12:32.556Z |
| cve-2025-53722 | 7.5 (v3.1) | Windows Remote Desktop Services Denial of Service Vuln… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:27.262Z | 2025-11-10T00:12:32.063Z |
| cve-2025-53721 | 7 (v3.1) | Windows Connected Devices Platform Service Elevation o… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:26.603Z | 2025-11-10T00:12:31.588Z |
| cve-2025-53720 | 8 (v3.1) | Windows Routing and Remote Access Service (RRAS) Remot… |
Microsoft |
Windows Server 2019 |
2025-08-12T17:10:25.949Z | 2025-11-10T00:12:31.035Z |
| cve-2025-53719 | 5.7 (v3.1) | Windows Routing and Remote Access Service (RRAS) Infor… |
Microsoft |
Windows Server 2019 |
2025-08-12T17:10:25.369Z | 2025-11-10T00:12:30.412Z |
| cve-2025-53718 | 7 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:24.722Z | 2025-11-10T00:12:29.688Z |
| cve-2025-53716 | 6.5 (v3.1) | Local Security Authority Subsystem Service (LSASS) Den… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:24.228Z | 2025-11-10T00:12:29.096Z |
| cve-2025-53156 | 5.5 (v3.1) | Windows Storage Port Driver Information Disclosure Vul… |
Microsoft |
Windows Server 2025 (Server Core installation) |
2025-08-12T17:10:23.673Z | 2025-11-10T00:12:28.481Z |
| cve-2025-53155 | 7.8 (v3.1) | Windows Hyper-V Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:23.016Z | 2025-11-10T00:12:27.976Z |
| cve-2025-53154 | 7.8 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:22.418Z | 2025-11-10T00:12:27.397Z |
| cve-2025-53153 | 5.7 (v3.1) | Windows Routing and Remote Access Service (RRAS) Infor… |
Microsoft |
Windows Server 2019 |
2025-08-12T17:10:21.774Z | 2025-11-10T00:12:26.820Z |
| cve-2025-53152 | 7.8 (v3.1) | Desktop Windows Manager Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:21.205Z | 2025-11-10T00:12:26.195Z |
| cve-2025-53151 | 7.8 (v3.1) | Windows Kernel Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:20.695Z | 2025-11-10T00:12:25.626Z |
| cve-2025-53149 | 7.8 (v3.1) | Kernel Streaming WOW Thunk Service Driver Elevation of… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:20.207Z | 2025-11-10T00:12:24.998Z |
| cve-2025-53148 | 5.7 (v3.1) | Windows Routing and Remote Access Service (RRAS) Infor… |
Microsoft |
Windows Server 2019 |
2025-08-12T17:10:19.553Z | 2025-11-10T00:12:24.513Z |
| cve-2025-53147 | 7 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:18.893Z | 2025-11-10T00:12:23.861Z |
| cve-2025-53145 | 8.8 (v3.1) | Microsoft Message Queuing (MSMQ) Remote Code Execution… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:18.320Z | 2025-11-10T00:12:23.276Z |
| cve-2025-53144 | 8.8 (v3.1) | Microsoft Message Queuing (MSMQ) Remote Code Execution… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:17.749Z | 2025-11-10T00:12:22.630Z |
| cve-2025-53143 | 8.8 (v3.1) | Microsoft Message Queuing (MSMQ) Remote Code Execution… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:17.164Z | 2025-11-10T00:12:22.068Z |
| cve-2025-53142 | 7 (v3.1) | Microsoft Brokering File System Elevation of Privilege… |
Microsoft |
Windows 11 version 22H2 |
2025-08-12T17:10:16.548Z | 2025-11-10T00:12:21.509Z |
| cve-2025-53141 | 7.8 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:15.957Z | 2025-11-10T00:12:20.984Z |
| cve-2025-53140 | 7 (v3.1) | Windows Kernel Transaction Manager Elevation of Privil… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:15.355Z | 2025-11-10T00:12:20.422Z |
| cve-2025-53138 | 5.7 (v3.1) | Windows Routing and Remote Access Service (RRAS) Infor… |
Microsoft |
Windows Server 2019 |
2025-08-12T17:10:14.808Z | 2025-11-10T00:12:19.839Z |
| cve-2025-53137 | 7 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:14.146Z | 2025-11-10T00:12:18.974Z |
| cve-2025-53136 | 5.5 (v3.1) | NT OS Kernel Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:13.644Z | 2025-11-10T00:12:18.410Z |
| cve-2025-53135 | 7 (v3.1) | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:13.050Z | 2025-11-10T00:12:17.605Z |
| cve-2025-53134 | 7 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:12.533Z | 2025-11-10T00:12:16.929Z |
| cve-2025-53133 | 7.8 (v3.1) | Windows PrintWorkflowUserSvc Elevation of Privilege Vu… |
Microsoft |
Windows Server 2025 (Server Core installation) |
2025-08-12T17:10:12.025Z | 2025-11-10T00:12:16.438Z |
| cve-2025-53132 | 7.8 (v3.1) | Win32k Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:11.377Z | 2025-11-10T00:12:15.884Z |
| cve-2025-53131 | 8.8 (v3.1) | Windows Media Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-08-12T17:10:10.843Z | 2025-11-10T00:12:15.365Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-63456 | N/A | Tenda AX-1803 v1.0.0.1 was discovered to contain … |
n/a |
n/a |
2025-11-10T00:00:00.000Z | 2025-11-10T16:38:44.379Z |
| cve-2025-63147 | N/A | Tenda AX3 V16.03.12.10_CN was discovered to conta… |
n/a |
n/a |
2025-11-10T00:00:00.000Z | 2025-11-10T16:29:20.792Z |
| cve-2025-28953 | N/A | WordPress smart SEO plugin <= 4.0 - SQL Injection Vuln… |
axiomthemes |
smart SEO |
2025-11-06T15:53:18.852Z | 2025-11-10T16:16:55.832Z |
| cve-2025-8849 | Denial of Service in danny-avila/librechat |
danny-avila |
danny-avila/librechat |
2025-10-30T23:42:41.552Z | 2025-10-31T15:09:34.057Z | |
| cve-2025-62264 | 5.1 (v4.0) | Reflected cross-site scripting (XSS) vulnerabilit… |
Liferay |
Portal |
2025-10-31T17:32:01.861Z | 2025-10-31T17:52:36.076Z |
| cve-2025-62267 | 4.6 (v4.0) | Multiple cross-site scripting (XSS) vulnerabiliti… |
Liferay |
Portal |
2025-10-31T18:12:50.703Z | 2025-11-03T15:48:52.733Z |
| cve-2025-62618 | ELOG file upload stored XSS |
ELOG |
ELOG |
2025-10-31T18:31:06.652Z | 2025-11-04T15:58:06.636Z | |
| cve-2025-64348 | ELOG configuration file authorization bypass |
ELOG |
ELOG |
2025-10-31T18:31:21.412Z | 2025-11-04T15:58:49.177Z | |
| cve-2025-64349 | ELOG user profile missing authorization |
ELOG |
ELOG |
2025-10-31T18:31:42.904Z | 2025-10-31T18:31:42.904Z | |
| cve-2025-12485 | N/A | Improper privilege management during pre-MFA cook… |
Devolutions |
Server |
2025-11-06T16:37:14.546Z | 2025-11-07T14:07:04.358Z |
| cve-2025-12808 | N/A | Improper access control in Devolutions allows a V… |
Devolutions |
Server |
2025-11-06T16:36:14.506Z | 2025-11-07T14:06:55.095Z |
| cve-2025-36592 | 5.4 (v3.1) | Dell Secure Connect Gateway (SCG) Policy Manager,… |
Dell |
Secure Connect Gateway SCG Policy Manager |
2025-10-30T15:26:59.326Z | 2025-10-30T17:37:02.064Z |
| cve-2025-62276 | 4.6 (v4.0) | The Document Library and the Adaptive Media modul… |
Liferay |
Portal |
2025-10-31T23:34:20.166Z | 2025-11-03T13:31:38.847Z |
| cve-2025-62275 | 6.9 (v4.0) | Blogs in Liferay Portal 7.4.0 through 7.4.3.111, … |
Liferay |
Portal |
2025-11-01T02:42:50.698Z | 2025-11-03T15:47:50.284Z |
| cve-2025-12615 | PHPGurukul News Portal settings.py hard-coded key |
PHPGurukul |
News Portal |
2025-11-03T03:32:06.859Z | 2025-11-03T20:35:20.857Z | |
| cve-2025-63154 | N/A | TOTOLink A7000R V9.1.0u.6115_B20201022 was discov… |
n/a |
n/a |
2025-11-10T00:00:00.000Z | 2025-11-10T16:02:59.621Z |
| cve-2025-63153 | N/A | TOTOLink A7000R V9.1.0u.6115_B20201022 was discov… |
n/a |
n/a |
2025-11-10T00:00:00.000Z | 2025-11-10T16:04:40.368Z |
| cve-2025-63152 | N/A | Tenda AX3 V16.03.12.10_CN was discovered to conta… |
n/a |
n/a |
2025-11-10T00:00:00.000Z | 2025-11-10T16:06:29.988Z |
| cve-2025-46430 | 7.3 (v3.1) | Dell Display and Peripheral Manager, versions pri… |
Dell |
Display and Peripheral Manager |
2025-11-10T15:59:35.862Z | 2025-11-10T16:56:09.323Z |
| cve-2025-12911 | N/A | Inappropriate implementation in Permissions in Go… |
Google |
Chrome |
2025-11-07T23:23:39.451Z | 2025-11-10T15:52:10.342Z |
| cve-2025-12910 | N/A | Inappropriate implementation in Passkeys in Googl… |
Google |
Chrome |
2025-11-07T23:23:39.074Z | 2025-11-10T15:54:34.867Z |
| cve-2025-12909 | N/A | Insufficient policy enforcement in Devtools in Go… |
Google |
Chrome |
2025-11-07T23:23:38.684Z | 2025-11-10T15:41:18.696Z |
| cve-2025-12908 | N/A | Insufficient validation of untrusted input in Dow… |
Google |
Chrome |
2025-11-07T23:23:38.329Z | 2025-11-10T15:38:24.057Z |
| cve-2025-12907 | N/A | Insufficient validation of untrusted input in Dev… |
Google |
Chrome |
2025-11-07T23:23:37.805Z | 2025-11-10T15:38:47.689Z |
| cve-2025-12906 | N/A | Inappropriate implementation in Permissions in Go… |
Google |
Chrome |
2025-11-07T23:23:37.150Z | 2025-11-10T15:42:15.733Z |
| cve-2025-12905 | N/A | Inappropriate implementation in Downloads in Goog… |
Google |
Chrome |
2025-11-07T23:23:36.585Z | 2025-11-10T15:47:11.093Z |
| cve-2025-12480 | 9.1 (v3.1) | Triofox versions prior to 16.7.10368.56560, are v… |
TrioFox |
TrioFox |
2025-11-10T14:20:40.677Z | 2025-11-10T15:28:21.167Z |
| cve-2024-39937 | supOS 5.0 allows api/image/download?fileName=../ … |
n/a |
n/a |
2024-07-04T00:00:00.000Z | 2025-11-10T16:06:21.555Z | |
| cve-2025-63446 | N/A | Water Management System v1.0 is vulnerable to Cro… |
n/a |
n/a |
2025-11-03T00:00:00.000Z | 2025-11-03T15:41:54.899Z |
| cve-2025-37822 | N/A | riscv: uprobes: Add missing fence.i after building the… |
Linux |
Linux |
2025-05-08T06:26:16.209Z | 2025-05-26T05:21:37.724Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-37824 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer derefer… | 2025-05-08T07:15:53.627 | 2025-11-10T15:45:14.477 |
| fkie_cve-2025-37825 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds acces… | 2025-05-08T07:15:53.747 | 2025-11-10T15:42:35.287 |
| fkie_cve-2025-4526 | A vulnerability, which was classified as problematic, was found in Dígitro NGC Explorer 3.44.15. Th… | 2025-05-11T01:15:52.000 | 2025-11-10T15:39:31.857 |
| fkie_cve-2025-4527 | A vulnerability has been found in Dígitro NGC Explorer 3.44.15 and classified as problematic. This … | 2025-05-11T03:15:24.740 | 2025-11-10T15:31:40.053 |
| fkie_cve-2025-4528 | A vulnerability was found in Dígitro NGC Explorer up to 3.44.15 and classified as problematic. This… | 2025-05-11T03:15:24.970 | 2025-11-10T15:24:39.563 |
| fkie_cve-2025-8768 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-12020. Reason:… | 2025-11-10T15:15:39.270 | 2025-11-10T15:15:39.270 |
| fkie_cve-2025-64682 | In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit | 2025-11-10T14:15:43.610 | 2025-11-10T15:15:38.550 |
| fkie_cve-2025-64681 | In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations | 2025-11-10T14:15:43.450 | 2025-11-10T15:15:38.407 |
| fkie_cve-2025-63712 | Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Mana… | 2025-11-10T15:15:38.240 | 2025-11-10T15:15:38.240 |
| fkie_cve-2025-63711 | A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management … | 2025-11-10T15:15:38.057 | 2025-11-10T15:15:38.057 |
| fkie_cve-2025-63710 | The send_message.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-… | 2025-11-10T15:15:37.920 | 2025-11-10T15:15:37.920 |
| fkie_cve-2025-63709 | A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in… | 2025-11-10T15:15:37.793 | 2025-11-10T15:15:37.793 |
| fkie_cve-2025-60574 | A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117. The issue e… | 2025-11-07T22:15:39.210 | 2025-11-10T15:15:37.403 |
| fkie_cve-2025-49175 | A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides … | 2025-06-17T15:15:45.290 | 2025-11-10T15:15:37.083 |
| fkie_cve-2025-12929 | A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function sa… | 2025-11-10T04:15:41.943 | 2025-11-10T15:15:36.903 |
| fkie_cve-2025-4551 | A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affe… | 2025-05-11T23:15:49.977 | 2025-11-10T15:09:21.000 |
| fkie_cve-2025-12601 | Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2025-11-01T19:15:38.723 | 2025-11-10T15:09:14.243 |
| fkie_cve-2025-12114 | Enabled serial console could potentially leak information that might help attacker to find vulnerab… | 2025-10-23T16:15:33.920 | 2025-11-10T15:08:27.637 |
| fkie_cve-2025-12176 | Undocumented administrative accounts were getting created to facilitate access for applications run… | 2025-10-24T16:15:36.617 | 2025-11-10T15:05:15.617 |
| fkie_cve-2025-12216 | Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issu… | 2025-10-25T16:15:39.277 | 2025-11-10T15:04:53.567 |
| fkie_cve-2025-12217 | SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through… | 2025-10-25T16:15:40.243 | 2025-11-10T15:03:28.133 |
| fkie_cve-2025-12218 | Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2025-10-25T16:15:40.397 | 2025-11-10T15:03:00.490 |
| fkie_cve-2025-12219 | Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: throu… | 2025-10-25T16:15:40.540 | 2025-11-10T15:02:00.167 |
| fkie_cve-2025-12220 | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4… | 2025-10-25T16:15:40.660 | 2025-11-10T15:00:44.853 |
| fkie_cve-2025-4552 | A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affecte… | 2025-05-12T00:15:16.450 | 2025-11-10T15:00:19.957 |
| fkie_cve-2025-12278 | Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2025-10-26T17:15:52.180 | 2025-11-10T14:58:56.403 |
| fkie_cve-2025-12284 | Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-… | 2025-10-26T17:15:52.357 | 2025-11-10T14:57:42.463 |
| fkie_cve-2025-12285 | Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2025-10-26T17:15:52.533 | 2025-11-10T14:55:30.380 |
| fkie_cve-2025-12363 | Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2025-10-27T18:15:38.223 | 2025-11-10T14:54:57.490 |
| fkie_cve-2025-12364 | Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2025-10-27T18:15:38.857 | 2025-11-10T14:54:46.497 |
| ID | Description | Package | Published | Updated |
|---|---|---|---|---|
| pysec-2023-301 | Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. | transformers | 2023-12-20T17:15:00+00:00 | 2024-11-21T14:23:01.933055+00:00 |
| pysec-2023-300 | Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. | transformers | 2023-12-19T13:15:00+00:00 | 2024-11-21T14:23:01.871022+00:00 |
| pysec-2023-299 | Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0. | transformers | 2023-05-18T17:15:00+00:00 | 2024-11-21T14:23:01.805729+00:00 |
| pysec-2022-43169 | The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution bac… | togglee | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.740031Z |
| pysec-2016-39 | An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode … | tarantool | 2016-12-23T22:59:00Z | 2024-11-21T14:23:01.531112Z |
| pysec-2022-43167 | Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types suc… | selenium | 2022-04-19T03:15:00+00:00 | 2024-11-21T14:23:01.289420+00:00 |
| pysec-2022-43165 | The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution b… | scoptrial | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.181819Z |
| pysec-2022-43164 | The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution … | rondolu-yt-concate | 2022-06-24T21:15:00Z | 2024-11-21T14:23:00.996865Z |
| pysec-2023-297 | A path traversal vulnerability has been detected in Repox, which allows an attacker to re… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.892241Z |
| pysec-2023-296 | An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.841929Z |
| pysec-2023-295 | An XSS vulnerability stored in Repox has been identified, which allows a local attacker t… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.792103Z |
| pysec-2023-294 | An XSS vulnerability has been detected in Repox, which allows an attacker to compromise i… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.74018Z |
| pysec-2023-293 | An authentication bypass vulnerability has been found in Repox, which allows a remote use… | repox | 2023-12-13T09:15:00Z | 2024-11-21T14:23:00.689595Z |
| pysec-2022-43161 | Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. | rdiffweb | 2022-10-13T20:15:00+00:00 | 2024-11-21T14:23:00.575892+00:00 |
| pysec-2022-43160 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-13T20:15:00+00:00 | 2024-11-21T14:23:00.515460+00:00 |
| pysec-2022-43159 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-14T12:15:00+00:00 | 2024-11-21T14:23:00.456366+00:00 |
| pysec-2022-43158 | Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | rdiffweb | 2022-10-10T12:15:00+00:00 | 2024-11-21T14:23:00.394851+00:00 |
| pysec-2022-43157 | Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | rdiffweb | 2022-10-06T18:16:00+00:00 | 2024-11-21T14:23:00.333240+00:00 |
| pysec-2022-43156 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-06T18:16:00+00:00 | 2024-11-21T14:23:00.273706+00:00 |
| pysec-2022-43155 | wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segment… | pywasm3 | 2022-12-13T23:15:00Z | 2024-11-21T14:23:00.213494Z |
| pysec-2022-43153 | Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirect… | pywasm3 | 2022-04-16T16:15:00Z | 2024-11-21T14:23:00.113164Z |
| pysec-2023-292 | PyInstaller bundles a Python application and all its dependencies into a single package. … | pyinstaller | 2023-12-09T01:15:00+00:00 | 2024-11-21T14:22:59.796437+00:00 |
| pysec-2017-146 | Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users abou… | pyignite | 2017-06-28T13:29:00Z | 2024-11-21T14:22:59.736776Z |
| pysec-2023-291 | PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Goo… | pydrive2 | 2023-12-05T21:15:00+00:00 | 2024-11-21T14:22:59.681617+00:00 |
| pysec-2023-290 | An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaP… | pyassimp | 2023-01-20T19:15:00Z | 2024-11-21T14:22:59.461917Z |
| pysec-2022-43149 | Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentatio… | pyassimp | 2022-09-06T23:15:00Z | 2024-11-21T14:22:59.412324Z |
| pysec-2022-43148 | Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow i… | pyassimp | 2022-01-01T00:15:00Z | 2024-11-21T14:22:59.35793Z |
| pysec-2022-43147 | pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact… | pyanxdns | 2022-06-08T20:15:00Z | 2024-11-21T14:22:59.309018Z |
| pysec-2011-27 | The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 do… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.206417Z |
| pysec-2011-26 | Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.154748Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4237 | A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Aff… | 2024-04-27T05:02:16.532589Z |
| gsd-2024-4241 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Th… | 2024-04-27T05:02:16.531844Z |
| gsd-2024-4284 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.527556Z |
| gsd-2024-4277 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.524486Z |
| gsd-2024-4249 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been classified as critical… | 2024-04-27T05:02:16.524020Z |
| gsd-2024-4279 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.521267Z |
| gsd-2024-32946 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:15.595218Z |
| gsd-2018-25102 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:03:04.675370Z |
| gsd-2024-33676 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.297185Z |
| gsd-2024-33666 | An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket co… | 2024-04-26T05:02:19.293701Z |
| gsd-2024-33630 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.283884Z |
| gsd-2024-33639 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-26T05:02:19.283203Z |
| gsd-2024-33668 | An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, pa… | 2024-04-26T05:02:19.281107Z |
| gsd-2024-33652 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.279059Z |
| gsd-2024-33669 | An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple … | 2024-04-26T05:02:19.275535Z |
| gsd-2024-33675 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.273998Z |
| gsd-2024-33665 | ** DISPUTED ** angular-translate through 2.19.1 allows XSS via a crafted key that is used… | 2024-04-26T05:02:19.265097Z |
| gsd-2024-33656 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.263057Z |
| gsd-2024-33667 | An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a re… | 2024-04-26T05:02:19.258447Z |
| gsd-2024-33637 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.257652Z |
| gsd-2024-33644 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.256945Z |
| gsd-2024-33661 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.254483Z |
| gsd-2024-33670 | Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom c… | 2024-04-26T05:02:19.244921Z |
| gsd-2024-33631 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.242437Z |
| gsd-2024-33645 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.239357Z |
| gsd-2024-33632 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.238835Z |
| gsd-2024-33671 | An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec… | 2024-04-26T05:02:19.236619Z |
| gsd-2024-33660 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.226651Z |
| gsd-2024-33658 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.225239Z |
| gsd-2024-33655 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.215383Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-76357 | Malicious code in yanti-gepuk38-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76356 | Malicious code in yanti-gaplek1-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76355 | Malicious code in yanti-gandul76-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76354 | Malicious code in yanti-gado-gado18-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76353 | Malicious code in yanti-esdoger8-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76352 | Malicious code in yanti-esdoger24-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76351 | Malicious code in yanti-enting99-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76350 | Malicious code in yanti-enting38-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76349 | Malicious code in yanti-empal86-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76348 | Malicious code in yanti-empal8-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76347 | Malicious code in yanti-empal42-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76346 | Malicious code in yanti-donat78-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76345 | Malicious code in yanti-dodol71-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76344 | Malicious code in yanti-dodol32-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76343 | Malicious code in yanti-buburayam40-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76342 | Malicious code in yanti-bika8-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76341 | Malicious code in yanti-bakwan96-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76340 | Malicious code in yanti-bakwan43-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76339 | Malicious code in yanti-bakso47-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76338 | Malicious code in yanti-bakso17-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76337 | Malicious code in yanti-asinan1-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76336 | Malicious code in xaver-wajit6-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76335 | Malicious code in xaver-ubi71-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76334 | Malicious code in xaver-tiwul30-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76333 | Malicious code in xaver-tempe93-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76332 | Malicious code in xaver-tempe65-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76331 | Malicious code in xaver-tempe45-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76330 | Malicious code in xaver-teh27-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76329 | Malicious code in xaver-tahutek65-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| mal-2025-76328 | Malicious code in xaver-tahutek17-breki (npm) | 2025-11-11T02:29:13Z | 2025-11-11T02:29:13Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-2044 | Django: Mehrere Schwachstellen | 2024-09-03T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-1775 | Django: Mehrere Schwachstellen | 2024-08-06T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-1569 | Django: Mehrere Schwachstellen | 2024-07-09T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-1008 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-05-01T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-0538 | Django: Schwachstelle ermöglicht Denial of Service | 2024-03-03T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-0511 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe | 2024-02-28T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-0306 | Django: Schwachstelle ermöglicht Denial of Service | 2024-02-06T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-3174 | SSH Protokoll: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-12-18T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-2259 | Django: Schwachstelle ermöglicht Denial of Service | 2023-09-04T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-0847 | Nextcloud: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2023-04-04T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-0352 | Django: Schwachstelle ermöglicht Denial of Service | 2023-02-13T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-0345 | Red Hat Update Infrastructure (RHUI): Mehrere Schwachstellen | 2023-02-13T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-0262 | Django: Schwachstelle ermöglicht Denial of Service | 2023-02-01T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-2183 | Nextcloud: Mehrere Schwachstellen | 2022-11-27T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-2008 | GNU libc: mehrere Schwachstellen | 2017-02-14T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-1220 | GNU libc: Mehrere Schwachstellen ermöglichen Codeausführung und Denial of Service | 2022-01-16T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-1206 | GNU libc: Mehrere Schwachstellen | 2022-01-24T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-0847 | Red Hat Enterprise Linux (Django): Schwachstelle ermöglicht Manipulation von Dateien | 2022-07-27T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-3291 | Apple macOS: Mehrere Schwachstellen | 2024-10-28T23:00:00.000+00:00 | 2025-09-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2044 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Codeausführung | 2025-09-14T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1861 | Liferay DXP und Portal: Mehrere Schwachstellen | 2025-08-18T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2015 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2025-09-09T22:00:00.000+00:00 | 2025-09-11T22:00:00.000+00:00 |
| wid-sec-w-2025-2004 | Microsoft Azure und Microsoft Entra: Mehrere Schwachstellen | 2025-09-09T22:00:00.000+00:00 | 2025-09-10T22:00:00.000+00:00 |
| wid-sec-w-2025-2001 | TYPO3 Core: Mehrere Schwachstellen | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-2000 | Rockwell Automation ControlLogix: Schwachstelle ermöglicht Denial of Service | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1997 | Rockwell Automation FactoryTalk: Mehrere Schwachstellen | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1995 | IBM Power Hardware Management Console: Schwachstelle ermöglicht Cross-Site Scripting | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1993 | Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1991 | xwiki: Schwachstelle ermöglicht Privilegieneskalation | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1990 | Liferay Portal: Mehrere Schwachstellen | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| SSA-780073 | SSA-780073: Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets | 2020-02-11T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-779936 | SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-750274 | SSA-750274: Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW | 2024-04-19T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-730482 | SSA-730482: Denial of Service Vulnerability in SIMATIC WinCC | 2024-04-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-712929 | SSA-712929: Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products | 2022-06-14T00:00:00Z | 2025-09-09T00:00:00Z |
| SSA-593272 | SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial Devices | 2020-04-14T00:00:00Z | 2025-07-08T00:00:00Z |
| SSA-484086 | SSA-484086: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.1 | 2022-06-14T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-473245 | SSA-473245: Denial of Service Vulnerability in Profinet Devices | 2019-10-08T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-446448 | SSA-446448: Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack | 2022-04-12T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-381581 | SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-346262 | SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products | 2017-11-23T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-170375 | SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9 | 2024-07-09T00:00:00Z | 2025-08-12T00:00:00Z |
| SSA-160243 | SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 | 2023-10-10T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-482757 | SSA-482757: Missing Immutable Root of Trust in S7-1500 CPU devices | 2023-01-10T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-196737 | SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer before V1.2 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-093430 | SSA-093430: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V3.0 | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-035466 | SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS | 2023-10-10T00:00:00Z | 2024-06-11T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2021:4918 | Red Hat Security Advisory: Red Hat Integration Camel-K 1.6 release and security update | 2021-12-02T16:17:17+00:00 | 2025-11-11T00:44:26+00:00 |
| rhsa-2021:4767 | Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus GA security update | 2021-11-23T10:34:10+00:00 | 2025-11-11T00:44:26+00:00 |
| rhsa-2021:3207 | Red Hat Security Advisory: Red Hat Integration Camel Quarkus Tech-Preview 2 security update | 2021-08-18T09:54:27+00:00 | 2025-11-11T00:44:23+00:00 |
| rhsa-2021:2683 | Red Hat Security Advisory: xstream security update | 2021-07-12T08:08:00+00:00 | 2025-11-11T00:44:20+00:00 |
| rhsa-2025:20057 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 security update | 2025-11-10T20:47:44+00:00 | 2025-11-11T00:43:38+00:00 |
| rhsa-2025:20052 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 security update | 2025-11-10T20:35:44+00:00 | 2025-11-11T00:43:38+00:00 |
| rhsa-2024:9571 | Red Hat Security Advisory: Streams for Apache Kafka 2.8.0 release and security update | 2024-11-13T16:21:03+00:00 | 2025-11-11T00:43:38+00:00 |
| rhsa-2024:8064 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4.3 for Spring Boot security update. | 2024-10-14T15:53:39+00:00 | 2025-11-11T00:43:36+00:00 |
| rhsa-2024:7676 | Red Hat Security Advisory: Red Hat build of Quarkus 3.2.12.SP1 Security Update | 2024-10-10T13:43:59+00:00 | 2025-11-11T00:43:36+00:00 |
| rhsa-2024:7670 | Red Hat Security Advisory: Red Hat build of Quarkus 3.8.6.SP1 Security Update | 2024-10-10T11:49:18+00:00 | 2025-11-11T00:43:36+00:00 |
| rhsa-2024:11256 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.1 | 2024-12-17T11:08:00+00:00 | 2025-11-11T00:43:36+00:00 |
| rhsa-2024:11255 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.1 | 2024-12-17T10:22:51+00:00 | 2025-11-11T00:43:34+00:00 |
| rhsa-2024:10700 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8 for Spring Boot security update. | 2024-12-02T16:06:11+00:00 | 2025-11-11T00:43:34+00:00 |
| rhsa-2025:7620 | Red Hat Security Advisory: JBoss EAP XP 5.0 Update 2.0 release. See references for release notes. | 2025-05-14T16:05:43+00:00 | 2025-11-11T00:43:32+00:00 |
| rhsa-2025:3358 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update | 2025-03-27T16:47:04+00:00 | 2025-11-11T00:43:32+00:00 |
| rhsa-2024:7972 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.SP1) | 2024-10-10T14:00:25+00:00 | 2025-11-11T00:43:32+00:00 |
| rhsa-2025:3357 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update | 2025-03-27T16:42:38+00:00 | 2025-11-11T00:43:30+00:00 |
| rhsa-2022:1029 | Red Hat Security Advisory: Red Hat Integration Camel-K 1.6.4 release and security update | 2022-03-23T08:22:19+00:00 | 2025-11-11T00:43:27+00:00 |
| rhsa-2022:1013 | Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.2.1 security update | 2022-03-22T15:33:40+00:00 | 2025-11-11T00:43:22+00:00 |
| rhsa-2021:3225 | Red Hat Security Advisory: Red Hat AMQ Streams 1.8.0 release and security update | 2021-08-19T07:17:54+00:00 | 2025-11-11T00:43:22+00:00 |
| rhsa-2022:0501 | Red Hat Security Advisory: Red Hat Integration - Service Registry release and security update [2.0.3.GA] | 2022-02-09T16:18:09+00:00 | 2025-11-11T00:43:14+00:00 |
| rhsa-2025:19088 | Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage | 2025-10-23T19:26:05+00:00 | 2025-11-11T00:43:13+00:00 |
| rhsa-2025:17913 | Red Hat Security Advisory: vim security update | 2025-10-14T05:32:21+00:00 | 2025-11-11T00:43:13+00:00 |
| rhsa-2025:17742 | Red Hat Security Advisory: vim security update | 2025-10-13T02:18:48+00:00 | 2025-11-11T00:43:11+00:00 |
| rhsa-2025:17715 | Red Hat Security Advisory: vim security update | 2025-10-09T19:23:45+00:00 | 2025-11-11T00:43:06+00:00 |
| rhsa-2025:17644 | Red Hat Security Advisory: vim security update | 2025-10-09T07:19:29+00:00 | 2025-11-11T00:43:04+00:00 |
| rhsa-2022:0164 | Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 for OpenShift image security and enhancement update | 2022-01-18T14:52:40+00:00 | 2025-11-11T00:42:53+00:00 |
| rhsa-2022:0155 | Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 security update | 2022-01-17T21:45:58+00:00 | 2025-11-11T00:42:53+00:00 |
| rhsa-2022:0152 | Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 security update on RHEL 8 | 2022-01-17T21:33:24+00:00 | 2025-11-11T00:42:52+00:00 |
| rhsa-2022:0151 | Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 security update on RHEL 7 | 2022-01-17T21:33:04+00:00 | 2025-11-11T00:42:51+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-55691 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55690 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55689 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55688 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55687 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55686 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55685 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55684 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55683 | Windows Kernel Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55682 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55681 | Desktop Windows Manager Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55680 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55679 | Windows Kernel Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55678 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55677 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55340 | Windows Remote Desktop Protocol Security Feature Bypass | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55339 | Windows Network Driver Interface Specification Driver Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55338 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55337 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55336 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55335 | Windows NTFS Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55334 | Windows Kernel Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55333 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55332 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55331 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55330 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55328 | Windows Hyper-V Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55326 | Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55325 | Windows Storage Management Provider Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55248 | .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-19-029-02 | Mitsubishi Electric MELSEC-Q Series PLCs | 2019-01-29T07:00:00.000000Z | 2025-06-24T06:00:00.000000Z |
| icsa-25-182-04 | FESTO Hardware Controller, Hardware Servo Press Kit | 2022-07-06T07:00:00.000000Z | 2025-06-23T08:00:00.000000Z |
| icsa-16-145-01a | Moxa MiiNePort Vulnerabilities | 2016-02-25T07:00:00.000000Z | 2025-06-20T18:15:20.614865Z |
| va-25-171-01 | ClamAV | 2025-06-20T00:00:00Z | 2025-06-20T00:00:00Z |
| icsa-12-265-01 | Emerson DeltaV Buffer Overflow | 2012-06-25T06:00:00.000000Z | 2025-06-19T22:40:48.319564Z |
| icsa-12-258-01 | IOServer OPC Server Multiple Vulnerabilities | 2012-06-18T06:00:00.000000Z | 2025-06-19T22:40:41.973320Z |
| icsa-15-034-01 | Siemens SCALANCE X-200IRT Switch Family User Impersonation Vulnerability | 2015-11-06T07:00:00.000000Z | 2025-06-18T19:25:20.526318Z |
| icsa-13-022-02 | GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities | 2013-10-26T06:00:00.000000Z | 2025-06-18T19:25:08.106052Z |
| icsa-12-354-01a | Ruggedcom ROS Hard-Coded RSA SSL Private Key | 2012-09-22T06:00:00.000000Z | 2025-06-18T19:25:01.798871Z |
| icsa-12-342-01b | Rockwell Allen-Bradley MicroLogix, SLC 500, and PLC-5 Fault Generation Vulnerability | 2012-09-10T06:00:00.000000Z | 2025-06-18T19:24:55.231514Z |
| icsa-12-249-03 | InduSoft ISSymbol ActiveX Control Buffer Overflow | 2012-06-09T06:00:00.000000Z | 2025-06-18T19:04:35.253383Z |
| icsa-12-228-01a | Tridium Niagara Vulnerabilities | 2012-05-19T06:00:00.000000Z | 2025-06-18T19:04:29.046428Z |
| icsa-15-099-01e | Siemens SIMATIC HMI Devices Vulnerabilities (Update E) | 2015-01-10T07:00:00.000000Z | 2025-06-18T19:04:22.822443Z |
| icsa-15-146-01 | Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service | 2015-02-26T07:00:00.000000Z | 2025-06-18T19:04:16.618149Z |
| icsa-15-153-01 | Beckwith Electric TCP Initial Sequence Vulnerability | 2015-03-05T07:00:00.000000Z | 2025-06-18T19:04:10.391763Z |
| icsa-15-169-02 | Schneider Electric Wonderware System Platform Vulnerabilities | 2015-03-21T06:00:00.000000Z | 2025-06-18T19:04:04.192744Z |
| icsa-15-169-01b | Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B) | 2015-03-21T06:00:00.000000Z | 2025-06-18T19:03:57.981923Z |
| icsa-12-032-03 | GE Intelligent Platforms Proficy Real-Time Information Portal Directory Traversal | 2012-11-04T06:00:00.000000Z | 2025-06-18T19:03:51.787688Z |
| icsa-12-079-01 | Microsoft Remote Desktop Protocol Memory Corruption Vulnerability | 2012-12-21T07:00:00.000000Z | 2025-06-18T19:03:45.218685Z |
| icsa-10-348-01a | Wonderware InBatch Vulnerability | 2010-09-16T06:00:00.000000Z | 2025-06-17T16:50:19.269504Z |
| icsa-10-322-02a | Automated Solutions OPC Vulnerability | 2010-08-21T06:00:00.000000Z | 2025-06-17T16:50:13.013737Z |
| icsa-16-343-01 | Moxa MiiNePort Session Hijack Vulnerabilities | 2016-09-11T06:00:00.000000Z | 2025-06-17T16:50:00.161907Z |
| icsa-12-047-01a | Advantech WebAccess Vulnerabilities | 2012-11-19T07:00:00.000000Z | 2025-06-17T15:46:30.792399Z |
| icsa-12-150-01 | Honeywell HMIWeb Browser Buffer Overflow Vulnerability | 2012-03-02T07:00:00.000000Z | 2025-06-17T15:46:24.572627Z |
| icsa-12-146-01a | RuggedCom Weak Cryptography for Password Vulnerability | 2012-02-26T07:00:00.000000Z | 2025-06-17T15:46:18.307459Z |
| icsa-12-138-01 | Emerson DeltaV Multiple Vulnerabilities | 2012-02-18T07:00:00.000000Z | 2025-06-17T15:45:47.164093Z |
| icsa-12-062-01 | Wonderware Information Server Multiple Vulnerabilities | 2012-12-04T07:00:00.000000Z | 2025-06-17T15:45:28.468819Z |
| icsa-12-059-01 | ABB Robot Communications Runtime Buffer Overflow | 2012-12-01T07:00:00.000000Z | 2025-06-17T15:45:21.808130Z |
| icsa-25-168-05 | Dover Fueling Solutions ProGauge MagLink LX consoles | 2025-06-17T06:00:00.000000Z | 2025-06-17T06:00:00.000000Z |
| icsa-25-168-04 | Fuji Electric Smart Editor | 2025-06-17T06:00:00.000000Z | 2025-06-17T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ccmpdm-rxss-tax76u3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tAX76U3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-vlan-dos-27pur5rt | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-vlan-dos-27Pur5RT | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yj2osdhv | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yJ2OSDhV | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qe33tcms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qE33TCms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-fduf3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-FdUF3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-jh4v6zpn | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-Jh4V6zpN | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-bk8vqedc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-Bk8VqEDc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-t46k3jnn | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-T46k3jnN | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-bushlbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-BUSHLbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-uvyzrkfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-UvYZrKfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-xvyx2wlj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-XvyX2wLj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-meraki-mx-vpn-dos-by-QWUkqV7X | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Session Takeover and Denial of Service Vulnerability | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:27+00:00 |
| cisco-sa-meraki-mx-vpn-dos-QTRHzG2 | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Denial of Service Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:28+00:00 |
| cisco-sa-ise-info-disc-zyf2neex | Cisco Identity Services Engine Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ise-info-disc-ZYF2nEEX | Cisco Identity Services Engine Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-expw-escalation-3bkz77bd | Cisco Expressway Series Privilege Escalation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-expw-escalation-3bkz77bD | Cisco Expressway Series Privilege Escalation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-cimc-redfish-cominj-sbkv5zz | Cisco UCS B-Series, Managed C-Series, and X-Series Servers Redfish API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-cimc-redfish-cominj-sbkv5ZZ | Cisco UCS B-Series, Managed C-Series, and X-Series Servers Redfish API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-201806-1505 | System software utilizing Lazy FP state restore technique on systems using Intel Core-bas… | 2024-11-29T22:08:44.266000Z |
| var-201912-0629 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 1… | 2024-11-29T22:08:43.620000Z |
| var-201711-0472 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-11-29T22:08:42.719000Z |
| var-202010-0251 | In Network Security Services (NSS) before 3.46, several cryptographic primitives had miss… | 2024-11-29T22:08:41.474000Z |
| var-200703-0020 | Stack-based buffer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remot… | 2024-11-29T22:08:40.650000Z |
| var-200704-0219 | The Login Window in Apple Mac OS X 10.4 through 10.4.9 displays the software update windo… | 2024-11-29T22:08:09.192000Z |
| var-200711-0560 | Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matc… | 2024-11-29T22:08:04.894000Z |
| var-202108-1268 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in… | 2024-11-29T22:07:57.241000Z |
| var-202006-1651 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 a… | 2024-11-29T22:07:21.664000Z |
| var-201512-0008 | The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent at… | 2024-11-29T22:07:19.754000Z |
| var-201007-0321 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 thro… | 2024-11-29T22:07:19.688000Z |
| var-200803-0013 | Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other vers… | 2024-11-29T22:07:19.195000Z |
| var-201401-0254 | The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.… | 2024-11-29T22:07:17.374000Z |
| var-201712-0248 | There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponent… | 2024-11-29T22:07:14.556000Z |
| var-200904-0824 | Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other pr… | 2024-11-29T22:07:14.464000Z |
| var-200712-0605 | Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_… | 2024-11-29T22:07:14.067000Z |
| var-202203-0131 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-11-29T22:07:13.242000Z |
| var-201110-0393 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2024-11-29T22:06:37.601000Z |
| var-202208-0404 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in in… | 2024-11-29T22:06:35.987000Z |
| var-201210-0267 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T22:06:34.547000Z |
| var-201706-1000 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte p… | 2024-11-29T22:06:33.554000Z |
| var-201810-0932 | The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side chan… | 2024-11-29T22:06:32.795000Z |
| var-200102-0001 | Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source co… | 2024-11-29T22:06:32.463000Z |
| var-200703-0022 | Unspecified vulnerability in diskimages-helper in Apple Mac OS X 10.3.9 and 10.4 through … | 2024-11-29T22:06:22.888000Z |
| var-201912-0639 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:06:22.811000Z |
| var-202004-1973 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-11-29T22:06:22.600000Z |
| var-201912-1860 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:06:21.932000Z |
| var-201211-0367 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-11-29T22:06:17.679000Z |
| var-202110-1685 | This issue was addressed with improved checks. This issue is fixed in Security Update 202… | 2024-11-29T22:06:17.617000Z |
| var-200701-0295 | The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML … | 2024-11-29T22:06:16.985000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000027 | Hammock AssetView missing authentication for critical functions | 2022-04-22T13:53+09:00 | 2024-06-20T12:15+09:00 |
| jvndb-2022-000037 | Spring Security OAuth (spring-security-oauth2) vulnerable to denial-of-service (DoS) | 2022-05-20T17:04+09:00 | 2024-06-20T12:09+09:00 |
| jvndb-2022-001923 | Multiple vulnerabilities in CONTEC SolarView Compact | 2022-05-27T15:28+09:00 | 2024-06-20T11:34+09:00 |
| jvndb-2022-001795 | Command injection vulnerability in QNAP VioStar series NVR | 2022-05-12T18:07+09:00 | 2024-06-20T11:31+09:00 |
| jvndb-2024-000065 | "ZOZOTOWN" App for Android fails to restrict custom URL schemes properly | 2024-06-19T16:04+09:00 | 2024-06-19T16:04+09:00 |
| jvndb-2022-000029 | KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass | 2022-05-09T14:43+09:00 | 2024-06-19T16:03+09:00 |
| jvndb-2022-000028 | Multiple vulnerabilities in multiple MEIKYO ELECTRIC products | 2022-05-09T14:31+09:00 | 2024-06-19T15:55+09:00 |
| jvndb-2024-000064 | WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page | 2024-06-19T14:25+09:00 | 2024-06-19T14:25+09:00 |
| jvndb-2022-001809 | Trend Micro Password Manager vulnerable to privilege escalation | 2022-05-24T15:27+09:00 | 2024-06-18T17:52+09:00 |
| jvndb-2022-000032 | Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries | 2022-05-11T15:21+09:00 | 2024-06-18T17:46+09:00 |
| jvndb-2022-000039 | RevoWorks incomplete filtering of MS Office v4 macros | 2022-05-27T16:09+09:00 | 2024-06-18T16:31+09:00 |
| jvndb-2022-001948 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-06-03T12:17+09:00 | 2024-06-18T16:30+09:00 |
| jvndb-2022-001931 | Multiple vulnerabilities in Fuji Electric V-SFT, V-Server and V-Server Lite | 2022-05-27T15:37+09:00 | 2024-06-18T16:28+09:00 |
| jvndb-2022-000038 | WordPress plugin "WP Statistics" vulnerable to cross-site scripting | 2022-05-24T15:00+09:00 | 2024-06-18T15:41+09:00 |
| jvndb-2022-000031 | GENEREX RCCMD vulnerable to directory traversal | 2022-05-10T15:47+09:00 | 2024-06-18T15:35+09:00 |
| jvndb-2024-000061 | Multiple vulnerabilities in Ricoh Streamline NX PC Client | 2024-06-18T14:56+09:00 | 2024-06-18T14:56+09:00 |
| jvndb-2022-001929 | Multiple vulnerabilities in Fuji Electric V-SFT | 2022-05-27T15:39+09:00 | 2024-06-18T13:44+09:00 |
| jvndb-2024-000063 | Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR | 2024-06-18T13:43+09:00 | 2024-06-18T13:43+09:00 |
| jvndb-2022-000034 | EC-CUBE plugin "Easy Blog for EC-CUBE4" vulnerable to cross-site request forgery | 2022-05-13T16:31+09:00 | 2024-06-18T12:13+09:00 |
| jvndb-2022-000036 | Multiple vulnerabilities in Rakuten Casa | 2022-05-19T15:13+09:00 | 2024-06-18T12:09+09:00 |
| jvndb-2022-000053 | Django Extract and Trunc functions vulnerable to SQL injection | 2022-07-12T13:47+09:00 | 2024-06-18T11:57+09:00 |
| jvndb-2022-000057 | WordPress Plugin "Newsletter" vulnerable to cross-site scripting | 2022-07-25T14:30+09:00 | 2024-06-18T11:21+09:00 |
| jvndb-2022-000033 | Strapi vulnerable to cross-site scripting | 2022-05-13T16:45+09:00 | 2024-06-18T11:17+09:00 |
| jvndb-2022-000043 | SHIRASAGI vulnerable to cross-site scripting | 2022-06-09T13:31+09:00 | 2024-06-18T11:13+09:00 |
| jvndb-2022-000040 | Mobaoku-Auction & Flea Market App for iOS vulnerable to improper server certificate verification | 2022-05-27T15:48+09:00 | 2024-06-18T11:06+09:00 |
| jvndb-2022-000044 | Cisco Catalyst 2940 Series Switches vulnerable to cross-site scripting | 2022-06-14T13:46+09:00 | 2024-06-18T10:51+09:00 |
| jvndb-2022-000047 | web2py vulnerable to open redirect | 2022-06-23T14:21+09:00 | 2024-06-18T10:48+09:00 |
| jvndb-2022-000048 | L2Blocker Sensor setup screen vulnerable to authentication bypass | 2022-06-24T14:21+09:00 | 2024-06-18T10:45+09:00 |
| jvndb-2022-000041 | WordPress Plugin "Modern Events Calendar Lite" vulnerable to cross-site scripting | 2022-06-01T13:39+09:00 | 2024-06-18T10:42+09:00 |
| jvndb-2022-000042 | T&D Data Server and THERMO RECORDER DATA SERVER contain a directory traversal vulnerability. | 2022-06-01T16:12+09:00 | 2024-06-18T10:34+09:00 |
| ID | Description | Updated |
|---|