Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-35f8-m7gp-7vmp | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix target… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-wg2w-8j36-3rqh | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of … | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-vjmx-q9jh-3hmp | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kernel warning… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-v5xj-7363-557x | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: Fix memory leak … | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-rxqc-v8m6-3ph4 | In the Linux kernel, the following vulnerability has been resolved: serial: sprd: Fix DMA buffer l… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-rhjm-7jhc-x7ww | In the Linux kernel, the following vulnerability has been resolved: nfp: clean mc addresses in app… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-rh3v-jp2c-rq2q | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix r… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-pfr2-326c-2j2w | In the Linux kernel, the following vulnerability has been resolved: fs/jfs: prevent double-free in… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-mj5f-xm29-rm3f | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_o… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-m575-6r3m-823p | In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-tri… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-frp2-qrfx-2m63 | In the Linux kernel, the following vulnerability has been resolved: gtp: Fix use-after-free in __g… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-8vr5-q73g-2w33 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix WARNING in mark_bu… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-8m37-c7gh-2jmr | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Ensure wr… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-8c3j-jg6j-52j2 | In the Linux kernel, the following vulnerability has been resolved: autofs: fix memory leak of wai… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-84w3-9hf3-rf66 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on irq… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-78pw-r9wg-6p38 | In the Linux kernel, the following vulnerability has been resolved: vfio/type1: fix cap_migration … | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-756h-2p6r-crqr | In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under … | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-6m52-8r59-r63x | In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compac… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-6745-68h7-96pp | In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix potential out-… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-646g-pwv5-gp8f | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation f… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-2f2v-fxm5-25rj | In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARN_ON() f… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-x7cf-f53m-6v2m | In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcoun… | 2025-12-24T15:30:38Z | 2025-12-24T15:30:38Z |
| ghsa-wgxf-ch55-cw7h | In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event… | 2025-12-24T15:30:38Z | 2025-12-24T15:30:38Z |
| ghsa-w45h-m4r8-m765 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API cal… | 2025-12-24T15:30:38Z | 2025-12-24T15:30:38Z |
| ghsa-w3g9-f95x-pwmf | In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after… | 2025-12-24T15:30:37Z | 2025-12-24T15:30:38Z |
| ghsa-qc6c-57rr-4q4v | In the Linux kernel, the following vulnerability has been resolved: rcu: dump vmalloc memory info … | 2025-12-24T15:30:38Z | 2025-12-24T15:30:38Z |
| ghsa-q8gv-44j3-p55q | In the Linux kernel, the following vulnerability has been resolved: pcmcia: rsrc_nonstatic: Fix me… | 2025-12-24T15:30:38Z | 2025-12-24T15:30:38Z |
| ghsa-pg9h-x33j-cfq7 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address … | 2025-12-24T15:30:38Z | 2025-12-24T15:30:38Z |
| ghsa-mhhh-8cqr-9rjj | In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Cleanup rin… | 2025-12-24T15:30:38Z | 2025-12-24T15:30:38Z |
| ghsa-mgj8-vp8h-hv58 | In the Linux kernel, the following vulnerability has been resolved: media: rcar_fdp1: Fix refcount… | 2025-12-24T15:30:38Z | 2025-12-24T15:30:38Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-61258 | N/A | Outsystems Platform Server 11.18.1.37828 allows a… |
n/a |
n/a |
2025-12-09T00:00:00.000Z | 2025-12-24T16:06:47.086Z |
| cve-2025-12838 | 7.3 (v3.0) | MSP360 Free Backup Link Following Local Privilege Esca… |
MSP360 |
Free Backup |
2025-12-23T21:41:11.250Z | 2025-12-24T16:06:22.818Z |
| cve-2025-12495 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:27.753Z | 2025-12-24T16:05:06.561Z |
| cve-2025-12839 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:37.030Z | 2025-12-24T16:04:35.072Z |
| cve-2025-12840 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:45.445Z | 2025-12-24T16:04:03.735Z |
| cve-2025-66209 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T21:42:18.324Z | 2025-12-24T15:51:59.319Z |
| cve-2025-68750 | N/A | usb: potential integer overflow in usbg_make_tpg() |
Linux |
Linux |
2025-12-24T15:51:03.141Z | 2025-12-24T15:51:03.141Z |
| cve-2025-13700 | 7.2 (v3.0) | DreamFactory saveZipFile Command Injection Remote Code… |
DreamFactory |
DreamFactory |
2025-12-23T21:42:47.128Z | 2025-12-24T15:50:50.852Z |
| cve-2025-12491 | 7.5 (v3.0) | Senstar Symphony FetchStoredLicense Information Disclo… |
Senstar |
Symphony |
2025-12-23T21:43:02.940Z | 2025-12-24T15:38:12.755Z |
| cve-2025-14412 | 7.8 (v3.0) | Soda PDF Desktop XLS File Insufficient UI Warning Remo… |
Soda PDF |
Desktop |
2025-12-23T21:24:04.860Z | 2025-12-24T15:37:39.350Z |
| cve-2025-66210 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T21:49:44.710Z | 2025-12-24T15:28:51.896Z |
| cve-2025-66211 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T22:00:36.081Z | 2025-12-24T15:16:10.121Z |
| cve-2025-15047 | Tenda WH450 HTTP Request PPTPDClient stack-based overflow |
Tenda |
WH450 |
2025-12-23T22:02:08.039Z | 2025-12-24T15:12:56.163Z | |
| cve-2025-66212 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T22:04:18.883Z | 2025-12-24T14:56:57.280Z |
| cve-2025-66213 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T22:06:38.995Z | 2025-12-24T14:55:53.307Z |
| cve-2025-15048 | Tenda WH450 HTTP Request CheckTools command injection |
Tenda |
WH450 |
2025-12-23T22:32:06.550Z | 2025-12-24T14:54:13.556Z | |
| cve-2025-68617 | Use after free in fluidsynth |
FluidSynth |
fluidsynth |
2025-12-23T22:41:28.861Z | 2025-12-24T14:53:35.537Z | |
| cve-2025-59933 | libvips is vulnerable to Buffer Over-Read in poppler-b… |
libvips |
libvips |
2025-09-29T22:04:09.404Z | 2025-12-24T14:49:49.725Z | |
| cve-2025-49144 | Notepad++ Privilege Escalation in Installer via Uncont… |
notepad-plus-plus |
notepad-plus-plus |
2025-06-23T19:01:16.276Z | 2025-12-24T14:46:08.689Z | |
| cve-2025-62549 | 8.8 (v3.1) | Windows Routing and Remote Access Service (RRAS) Remot… |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:55:38.801Z | 2025-12-24T14:42:03.416Z |
| cve-2025-68664 | LangChain serialization injection vulnerability enable… |
langchain-ai |
langchain |
2025-12-23T22:47:44.084Z | 2025-12-24T14:40:58.427Z | |
| cve-2025-68669 | 5ire vulnerable to Remote Code Execution (RCE) via mermaid |
nanbingxyz |
5ire |
2025-12-23T22:51:35.848Z | 2025-12-24T14:39:38.656Z | |
| cve-2025-68665 | LangChain serialization injection vulnerability enable… |
langchain-ai |
langchainjs |
2025-12-23T22:56:04.837Z | 2025-12-24T14:38:40.268Z | |
| cve-2025-54100 | 7.8 (v3.1) | PowerShell Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:56:09.562Z | 2025-12-24T14:37:33.163Z |
| cve-2025-68696 | httparty Has Potential SSRF Vulnerability That Leads t… |
jnunemaker |
httparty |
2025-12-23T22:59:04.201Z | 2025-12-24T14:31:58.017Z | |
| cve-2025-15049 | code-projects Online Farm System addProduct.php sql in… |
code-projects |
Online Farm System |
2025-12-23T23:02:07.647Z | 2025-12-24T14:24:53.874Z | |
| cve-2024-58335 | OpenXRechnungToolbox through 2024-10-05-3.0.0 bef… |
jcthiele |
OpenXRechnungToolbox |
2025-12-24T00:00:00.000Z | 2025-12-24T14:22:58.208Z | |
| cve-2025-15050 | code-projects Student File Management System save_file… |
code-projects |
Student File Management System |
2025-12-24T00:32:05.799Z | 2025-12-24T14:21:48.005Z | |
| cve-2025-15052 | code-projects Student Information System profile.php c… |
code-projects |
Student Information System |
2025-12-24T01:32:08.989Z | 2025-12-24T14:21:06.288Z | |
| cve-2025-15053 | code-projects Student Information System searchresults… |
code-projects |
Student Information System |
2025-12-24T02:02:06.480Z | 2025-12-24T14:18:13.240Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2023-53903 | 5.1 (v4.0) 5.4 (v3.1) | WebsiteBaker 2.13.3 Stored Cross-Site Scripting via SV… |
websitebaker |
WebsiteBaker |
2025-12-16T17:03:48.887Z | 2025-12-16T21:44:03.498Z |
| cve-2023-53981 | 8.6 (v4.0) 8.8 (v3.1) | PhotoShow 3.0 Remote Code Execution via Exiftran Path … |
thibaud-rohmer |
PhotoShow |
2025-12-22T21:35:36.734Z | 2025-12-22T22:03:56.782Z |
| cve-2025-60935 | N/A | An open redirect vulnerability in the login endpo… |
n/a |
n/a |
2025-12-24T00:00:00.000Z | 2025-12-24T16:46:21.881Z |
| cve-2025-2515 | 7.2 (v3.1) | Bluechi: privilege escalation in bluechi via unrestric… |
Eclipse Foundation |
BlueChi |
2025-12-24T16:21:54.365Z | 2025-12-24T16:48:19.891Z |
| cve-2025-13407 | N/A | GravityForms < 2.9.23.1 - Unauthenticated Arbitrary Fi… |
Unknown |
Gravity Forms |
2025-12-24T06:00:04.578Z | 2025-12-24T16:39:08.316Z |
| cve-2024-35322 | N/A | MyNET up to v26.08 was discovered to contain a re… |
n/a |
n/a |
2025-12-24T00:00:00.000Z | 2025-12-24T16:45:02.195Z |
| cve-2023-53896 | 8.7 (v4.0) 7.5 (v3.1) | D-Link DAP-1325 Hardware A1 Unauthenticated Configurat… |
D-Link |
DAP-1325 |
2025-12-16T17:06:19.762Z | 2025-12-16T21:44:51.912Z |
| cve-2023-53914 | 9.3 (v4.0) 9.8 (v3.1) | UliCMS 2023.1 Authentication Bypass via Mass Assignmen… |
ulicms |
Ulicms |
2025-12-17T22:44:49.556Z | 2025-12-18T15:03:56.460Z |
| cve-2022-50680 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.92 Email Marketing Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:27.435Z | 2025-12-18T21:47:54.940Z |
| cve-2022-50681 | 5.1 (v4.0) 5.4 (v3.1) | Kentico Xperience <= 13.0.88 Rich Text Editor Reflected XSS |
Kentico |
Xperience |
2025-12-18T19:53:27.828Z | 2025-12-18T21:47:49.877Z |
| cve-2022-50682 | 6.9 (v4.0) 6.5 (v3.1) | Kentico Xperience <= 13.0.79 Routing Engine CRLF Injection |
Kentico |
Xperience |
2025-12-18T19:53:28.227Z | 2025-12-18T21:47:44.125Z |
| cve-2022-50683 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.74 Form Configuration Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:28.675Z | 2025-12-18T21:47:38.875Z |
| cve-2022-50684 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.71 Form Emails HTML Injection |
Kentico |
Xperience |
2025-12-18T19:53:29.121Z | 2025-12-18T20:40:44.708Z |
| cve-2022-50685 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.56 File Upload Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:29.551Z | 2025-12-18T21:19:48.667Z |
| cve-2022-50686 | 6.9 (v4.0) 5.3 (v3.1) | Kentico Xperience <= 12.0 Portal Engine Form Control I… |
Kentico |
Xperience |
2025-12-18T19:53:30.061Z | 2025-12-18T21:19:43.244Z |
| cve-2023-53736 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.120 Administration Interface… |
Kentico |
Xperience |
2025-12-18T19:53:30.487Z | 2025-12-18T21:19:38.401Z |
| cve-2023-53737 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.101 Localization Application… |
Kentico |
Xperience |
2025-12-18T19:53:30.896Z | 2025-12-18T21:47:33.565Z |
| cve-2023-53738 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.109 Page Preview Reflected XSS |
Kentico |
Xperience |
2025-12-18T19:53:31.326Z | 2025-12-18T21:47:28.381Z |
| cve-2023-53934 | 8.7 (v4.0) 7.5 (v3.1) | Kentico Xperience <= 12.0.98 GetResource Handler Denia… |
Kentico |
Xperience |
2025-12-18T19:53:32.524Z | 2025-12-18T21:47:23.467Z |
| cve-2023-53898 | 5.1 (v4.0) 4.6 (v3.1) | Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting… |
Rukovoditel |
Rukovoditel |
2025-12-16T17:03:46.653Z | 2025-12-18T20:53:14.732Z |
| cve-2023-53897 | 5.1 (v4.0) 4.6 (v3.1) | Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting… |
Rukovoditel |
Rukovoditel |
2025-12-16T17:03:46.046Z | 2025-12-18T20:53:03.273Z |
| cve-2023-53902 | 7 (v4.0) 6.5 (v3.1) | WebsiteBaker 2.13.3 Directory Traversal via Media Dele… |
websitebaker |
WebsiteBaker |
2025-12-16T17:03:48.466Z | 2025-12-18T20:53:28.524Z |
| cve-2023-53952 | 8.7 (v4.0) 8.8 (v3.1) | Dotclear 2.25.3 Authenticated Remote Code Execution vi… |
Dotclear |
Dotclear |
2025-12-19T21:05:51.107Z | 2025-12-19T21:55:19.452Z |
| cve-2023-53953 | 5.1 (v4.0) 6.4 (v3.1) | WebsiteBaker 2.13.3 Stored Cross-Site Scripting via Pa… |
Websitebaker |
WebsiteBaker |
2025-12-19T21:07:39.820Z | 2025-12-19T21:24:53.593Z |
| cve-2023-53933 | 8.7 (v4.0) 8.8 (v3.1) | Serendipity 2.4.0 Authenticated Remote Code Execution … |
s9y |
Serendipity |
2025-12-17T22:44:59.632Z | 2025-12-18T18:54:23.264Z |
| cve-2023-53932 | 5.1 (v4.0) 4.6 (v3.1) | Serendipity 2.4.0 Stored Cross-Site Scripting via Admi… |
s9y |
Serendipity |
2025-12-17T22:44:59.094Z | 2025-12-18T18:54:27.839Z |
| cve-2023-53922 | 9.3 (v4.0) 9.8 (v3.1) | TinyWebGallery v2.5 Remote Code Execution via Unrestri… |
TinyWebGallery |
TinyWebGallery |
2025-12-17T22:44:53.801Z | 2025-12-18T18:54:43.367Z |
| cve-2023-53931 | 5.1 (v4.0) 5.4 (v3.1) | Revive Adserver 5.4.1 Cross-Site Scripting via Banner … |
Revive-adserver |
revive-adserver |
2025-12-17T22:44:58.562Z | 2025-12-18T15:02:00.360Z |
| cve-2023-53939 | 5.1 (v4.0) 5.4 (v3.1) | TinyWebGallery v2.5 Stored Cross-Site Scripting via Fo… |
TinyWebGallery |
TinyWebGallery |
2025-12-18T19:53:34.564Z | 2025-12-18T21:46:58.131Z |
| cve-2024-58322 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.158 Shipping Options Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:39.280Z | 2025-12-18T21:18:49.590Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2024-35322 | MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability v… | 2025-12-24T16:15:46.653 | 2025-12-24T17:15:45.267 |
| fkie_cve-2023-53896 | D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows un… | 2025-12-16T18:16:06.537 | 2025-12-24T17:15:32.207 |
| fkie_cve-2023-53914 | UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers… | 2025-12-17T23:15:49.983 | 2025-12-24T17:04:53.853 |
| fkie_cve-2022-50680 | A stored cross-site scripting vulnerability in Kentico Xperience allows administration users to inj… | 2025-12-18T20:15:49.980 | 2025-12-24T17:03:39.167 |
| fkie_cve-2022-50681 | A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject mali… | 2025-12-18T20:15:50.133 | 2025-12-24T17:03:32.390 |
| fkie_cve-2022-50682 | A CRLF injection vulnerability in Kentico Xperience allows attackers to manipulate URL query string… | 2025-12-18T20:15:50.287 | 2025-12-24T17:03:26.313 |
| fkie_cve-2022-50683 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:50.437 | 2025-12-24T17:03:14.683 |
| fkie_cve-2022-50684 | An HTML injection vulnerability in Kentico Xperience allows attackers to inject malicious HTML valu… | 2025-12-18T20:15:50.593 | 2025-12-24T17:03:08.677 |
| fkie_cve-2022-50685 | A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inje… | 2025-12-18T20:15:50.753 | 2025-12-24T17:02:58.607 |
| fkie_cve-2022-50686 | An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive sta… | 2025-12-18T20:15:50.897 | 2025-12-24T17:02:48.187 |
| fkie_cve-2023-53736 | A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to i… | 2025-12-18T20:15:51.060 | 2025-12-24T17:02:18.263 |
| fkie_cve-2023-53737 | A stored cross-site scripting vulnerability in Kentico Xperience allows global administrators to in… | 2025-12-18T20:15:51.213 | 2025-12-24T17:02:10.700 |
| fkie_cve-2023-53738 | A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to i… | 2025-12-18T20:15:51.383 | 2025-12-24T17:02:03.637 |
| fkie_cve-2023-53934 | A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via s… | 2025-12-18T20:15:51.530 | 2025-12-24T17:01:50.553 |
| fkie_cve-2023-53898 | Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated a… | 2025-12-16T17:16:02.060 | 2025-12-24T16:59:54.303 |
| fkie_cve-2023-53897 | Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenti… | 2025-12-16T17:16:01.900 | 2025-12-24T16:59:45.537 |
| fkie_cve-2023-53902 | WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attacker… | 2025-12-16T17:16:02.537 | 2025-12-24T16:58:04.950 |
| fkie_cve-2023-53952 | Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers … | 2025-12-19T21:15:51.420 | 2025-12-24T16:57:35.790 |
| fkie_cve-2023-53953 | WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated … | 2025-12-19T21:15:51.590 | 2025-12-24T16:56:50.823 |
| fkie_cve-2023-53933 | Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attacker… | 2025-12-17T23:15:52.973 | 2025-12-24T16:52:17.043 |
| fkie_cve-2023-53932 | Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated us… | 2025-12-17T23:15:52.817 | 2025-12-24T16:52:03.030 |
| fkie_cve-2023-53922 | TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionalit… | 2025-12-17T23:15:51.270 | 2025-12-24T16:50:20.607 |
| fkie_cve-2023-53931 | Revive Adserver 5.4.1 contains a cross-site scripting vulnerability in the banner advanced configur… | 2025-12-17T23:15:52.650 | 2025-12-24T16:48:11.700 |
| fkie_cve-2023-53939 | TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated … | 2025-12-18T20:15:52.323 | 2025-12-24T16:46:55.073 |
| fkie_cve-2024-58322 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:54.233 | 2025-12-24T16:40:03.323 |
| fkie_cve-2024-58321 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:54.080 | 2025-12-24T16:39:49.667 |
| fkie_cve-2024-58320 | An information disclosure vulnerability in Kentico Xperience allows public users to access sensitiv… | 2025-12-18T20:15:53.933 | 2025-12-24T16:39:35.703 |
| fkie_cve-2024-58319 | A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject mali… | 2025-12-18T20:15:53.780 | 2025-12-24T16:39:18.857 |
| fkie_cve-2024-58318 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:53.637 | 2025-12-24T16:39:07.140 |
| fkie_cve-2024-58317 | A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL r… | 2025-12-18T20:15:53.473 | 2025-12-24T16:38:56.773 |
| ID | Description | Package | Published | Updated |
|---|---|---|---|---|
| pysec-2023-301 | Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. | transformers | 2023-12-20T17:15:00+00:00 | 2024-11-21T14:23:01.933055+00:00 |
| pysec-2023-300 | Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. | transformers | 2023-12-19T13:15:00+00:00 | 2024-11-21T14:23:01.871022+00:00 |
| pysec-2023-299 | Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0. | transformers | 2023-05-18T17:15:00+00:00 | 2024-11-21T14:23:01.805729+00:00 |
| pysec-2022-43169 | The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution bac… | togglee | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.740031Z |
| pysec-2016-39 | An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode … | tarantool | 2016-12-23T22:59:00Z | 2024-11-21T14:23:01.531112Z |
| pysec-2022-43167 | Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types suc… | selenium | 2022-04-19T03:15:00+00:00 | 2024-11-21T14:23:01.289420+00:00 |
| pysec-2022-43165 | The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution b… | scoptrial | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.181819Z |
| pysec-2022-43164 | The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution … | rondolu-yt-concate | 2022-06-24T21:15:00Z | 2024-11-21T14:23:00.996865Z |
| pysec-2023-297 | A path traversal vulnerability has been detected in Repox, which allows an attacker to re… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.892241Z |
| pysec-2023-296 | An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.841929Z |
| pysec-2023-295 | An XSS vulnerability stored in Repox has been identified, which allows a local attacker t… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.792103Z |
| pysec-2023-294 | An XSS vulnerability has been detected in Repox, which allows an attacker to compromise i… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.74018Z |
| pysec-2023-293 | An authentication bypass vulnerability has been found in Repox, which allows a remote use… | repox | 2023-12-13T09:15:00Z | 2024-11-21T14:23:00.689595Z |
| pysec-2022-43161 | Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. | rdiffweb | 2022-10-13T20:15:00+00:00 | 2024-11-21T14:23:00.575892+00:00 |
| pysec-2022-43160 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-13T20:15:00+00:00 | 2024-11-21T14:23:00.515460+00:00 |
| pysec-2022-43159 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-14T12:15:00+00:00 | 2024-11-21T14:23:00.456366+00:00 |
| pysec-2022-43158 | Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | rdiffweb | 2022-10-10T12:15:00+00:00 | 2024-11-21T14:23:00.394851+00:00 |
| pysec-2022-43157 | Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | rdiffweb | 2022-10-06T18:16:00+00:00 | 2024-11-21T14:23:00.333240+00:00 |
| pysec-2022-43156 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-06T18:16:00+00:00 | 2024-11-21T14:23:00.273706+00:00 |
| pysec-2022-43155 | wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segment… | pywasm3 | 2022-12-13T23:15:00Z | 2024-11-21T14:23:00.213494Z |
| pysec-2022-43153 | Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirect… | pywasm3 | 2022-04-16T16:15:00Z | 2024-11-21T14:23:00.113164Z |
| pysec-2023-292 | PyInstaller bundles a Python application and all its dependencies into a single package. … | pyinstaller | 2023-12-09T01:15:00+00:00 | 2024-11-21T14:22:59.796437+00:00 |
| pysec-2017-146 | Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users abou… | pyignite | 2017-06-28T13:29:00Z | 2024-11-21T14:22:59.736776Z |
| pysec-2023-291 | PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Goo… | pydrive2 | 2023-12-05T21:15:00+00:00 | 2024-11-21T14:22:59.681617+00:00 |
| pysec-2023-290 | An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaP… | pyassimp | 2023-01-20T19:15:00Z | 2024-11-21T14:22:59.461917Z |
| pysec-2022-43149 | Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentatio… | pyassimp | 2022-09-06T23:15:00Z | 2024-11-21T14:22:59.412324Z |
| pysec-2022-43148 | Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow i… | pyassimp | 2022-01-01T00:15:00Z | 2024-11-21T14:22:59.35793Z |
| pysec-2022-43147 | pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact… | pyanxdns | 2022-06-08T20:15:00Z | 2024-11-21T14:22:59.309018Z |
| pysec-2011-27 | The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 do… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.206417Z |
| pysec-2011-26 | Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.154748Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4237 | A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Aff… | 2024-04-27T05:02:16.532589Z |
| gsd-2024-4241 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Th… | 2024-04-27T05:02:16.531844Z |
| gsd-2024-4284 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.527556Z |
| gsd-2024-4277 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.524486Z |
| gsd-2024-4249 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been classified as critical… | 2024-04-27T05:02:16.524020Z |
| gsd-2024-4279 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.521267Z |
| gsd-2024-32946 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:15.595218Z |
| gsd-2018-25102 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:03:04.675370Z |
| gsd-2024-33676 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.297185Z |
| gsd-2024-33666 | An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket co… | 2024-04-26T05:02:19.293701Z |
| gsd-2024-33630 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.283884Z |
| gsd-2024-33639 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-26T05:02:19.283203Z |
| gsd-2024-33668 | An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, pa… | 2024-04-26T05:02:19.281107Z |
| gsd-2024-33652 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.279059Z |
| gsd-2024-33669 | An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple … | 2024-04-26T05:02:19.275535Z |
| gsd-2024-33675 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.273998Z |
| gsd-2024-33665 | ** DISPUTED ** angular-translate through 2.19.1 allows XSS via a crafted key that is used… | 2024-04-26T05:02:19.265097Z |
| gsd-2024-33656 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.263057Z |
| gsd-2024-33667 | An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a re… | 2024-04-26T05:02:19.258447Z |
| gsd-2024-33637 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.257652Z |
| gsd-2024-33644 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.256945Z |
| gsd-2024-33661 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.254483Z |
| gsd-2024-33670 | Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom c… | 2024-04-26T05:02:19.244921Z |
| gsd-2024-33631 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.242437Z |
| gsd-2024-33645 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.239357Z |
| gsd-2024-33632 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.238835Z |
| gsd-2024-33671 | An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec… | 2024-04-26T05:02:19.236619Z |
| gsd-2024-33660 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.226651Z |
| gsd-2024-33658 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.225239Z |
| gsd-2024-33655 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.215383Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-49410 | Malicious code in frontend-vue-next (npm) | 2025-11-09T00:17:09Z | 2025-12-23T22:40:24Z |
| mal-2025-192321 | Malicious code in json-map-source (npm) | 2025-12-05T05:53:00Z | 2025-12-23T22:40:24Z |
| mal-2025-191497 | Malicious code in handtalk-test-app (npm) | 2025-12-01T16:00:47Z | 2025-12-23T22:40:24Z |
| mal-2025-191463 | Malicious code in initial-path (npm) | 2025-11-25T09:29:47Z | 2025-12-23T22:40:24Z |
| mal-2025-190969 | Malicious code in invo (npm) | 2025-11-24T22:00:24Z | 2025-12-23T22:40:24Z |
| mal-2025-190962 | Malicious code in haufe-axera-api-client (npm) | 2025-11-24T21:56:18Z | 2025-12-23T22:40:24Z |
| mal-2025-190491 | Malicious code in form-classifier (npm) | 2025-11-13T17:54:50Z | 2025-12-23T22:40:24Z |
| mal-2025-192200 | Malicious code in elf-stats-wintry-sled-578 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:40:23Z |
| mal-2025-192199 | Malicious code in elf-stats-wintry-satchel-723 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:40:23Z |
| mal-2025-192628 | Malicious code in elf-stats-wintry-chimney-348 (npm) | 2025-12-19T08:44:11Z | 2025-12-23T22:09:11Z |
| mal-2025-192540 | Malicious code in elf-stats-twinkling-wishlist-283 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T22:09:11Z |
| mal-2025-192534 | Malicious code in elf-stats-sugarplum-snowman-116 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T22:09:11Z |
| mal-2025-192286 | Malicious code in elf-stats-tinsel-sparkler-289 (npm) | 2025-12-03T19:38:32Z | 2025-12-23T22:09:11Z |
| mal-2025-192285 | Malicious code in elf-stats-sugarplum-cookiejar-287 (npm) | 2025-12-03T19:42:46Z | 2025-12-23T22:09:11Z |
| mal-2025-192270 | Malicious code in elf-stats-tinsel-candy-605 (npm) | 2025-12-03T18:49:05Z | 2025-12-23T22:09:11Z |
| mal-2025-192243 | Malicious code in elf-stats-wintry-cocoa-831 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T22:09:11Z |
| mal-2025-192241 | Malicious code in elf-stats-velvet-snowman-470 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T22:09:11Z |
| mal-2025-192240 | Malicious code in elf-stats-velvet-ornament-148 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T22:09:11Z |
| mal-2025-192238 | Malicious code in elf-stats-sugarplum-muffin-944 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T22:09:11Z |
| mal-2025-192237 | Malicious code in elf-stats-storybook-snowglobe-157 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T22:09:11Z |
| mal-2025-192198 | Malicious code in elf-stats-wintry-ornament-960 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192196 | Malicious code in elf-stats-wintry-hollyberry-832 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192194 | Malicious code in elf-stats-wintry-fir-892 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192192 | Malicious code in elf-stats-whimsical-rocket-922 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192191 | Malicious code in elf-stats-whimsical-muffin-613 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192190 | Malicious code in elf-stats-whimsical-marshmallow-258 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192189 | Malicious code in elf-stats-whimsical-marshmallow-212 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192188 | Malicious code in elf-stats-whimsical-ledger-767 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192187 | Malicious code in elf-stats-whimsical-lantern-823 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192181 | Malicious code in elf-stats-twinkling-marshmallow-913 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1567 | Oracle MySQL: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1428 | sudo: Mehrere Schwachstellen | 2025-06-30T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1395 | Mozilla Firefox: Mehrere Schwachstellen | 2025-06-24T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1385 | libssh: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-24T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1352 | X.Org X11 und Xwayland: Mehrere Schwachstellen | 2025-06-17T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1312 | libxml2: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-11T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1245 | Django: Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-04T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1221 | Samba: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-02T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1205 | Golang Go: Mehrere Schwachstellen | 2025-06-01T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1140 | Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen | 2025-05-25T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1134 | Ghostscript: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-22T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0987 | Eclipse Jetty: Mehrere Schwachstellen | 2025-05-08T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0730 | libxml2: Schwachstelle ermöglicht Manipulation von Dateien | 2025-04-07T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0718 | Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht DoS und Codeausführung | 2025-04-06T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0713 | poppler: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-04-06T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0712 | GNU libc: Schwachstelle ermöglicht Denial of Service | 2025-04-06T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0600 | GnuPG: Schwachstelle ermöglicht Denial of Service | 2025-03-19T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0572 | X.Org X11: Schwachstelle ermöglicht Denial of Service | 2025-03-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0503 | Apache Cassandra: Schwachstelle ermöglicht Codeausführung | 2025-03-06T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0302 | GnuTLS: Schwachstelle ermöglicht Denial of Service | 2025-02-09T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0284 | Apache Camel for Spring Boot: Mehrere Schwachstellen | 2025-02-05T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3544 | Red Hat JBoss Data Grid: Mehrere Schwachstellen | 2024-11-25T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3176 | Eclipse Jetty: Mehrere Schwachstellen | 2024-10-14T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1783 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2024-08-06T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0995 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2024-04-29T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2603 | Fortinet FortiWeb: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-11-13T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1946 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-09-02T22:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2071 | WatchGuard Firebox: Schwachstelle ermöglicht Codeausführung | 2025-09-16T22:00:00.000+00:00 | 2025-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0708 | pgAdmin: Mehrere Schwachstellen | 2025-04-03T22:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2023-1431 | Siemens SICAM: Mehrere Schwachstellen | 2023-06-12T22:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-969738 | SSA-969738: Denial of Service Vulnerability in SIMATIC S7-200 SMART Devices | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-869574 | SSA-869574: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP2 | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-792319 | SSA-792319: Missing Read Out Protection in SENTRON 7KM PAC3x20 Devices | 2024-03-12T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-765405 | SSA-765405: Multiple Vulnerabilities in SIMATIC RFID Readers | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-753746 | SSA-753746: Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products | 2024-02-13T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-721642 | SSA-721642: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4 | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-566905 | SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products | 2023-04-11T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-427715 | SSA-427715: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-423808 | SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-417159 | SSA-417159: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2 | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-359713 | SSA-359713: Authorization Bypass Vulnerability in Industrial Edge Management | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-342438 | SSA-342438: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-293562 | SSA-293562: Denial of Service Vulnerabilities in PROFINET DCP Implementation of Industrial Products | 2017-05-08T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-280603 | SSA-280603: Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC | 2023-12-12T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-097786 | SSA-097786: Insertion of Sensitive Information into Log File Vulnerability in SINUMERIK systems | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-088132 | SSA-088132: Denial of Service Vulnerability in the OPC UA Server Implementations of Several Industrial Products | 2024-07-09T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-969738 | SSA-969738: Denial of Service Vulnerability in SIMATIC S7-200 SMART Devices | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-869574 | SSA-869574: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP2 | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-832273 | SSA-832273: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices | 2024-03-12T00:00:00Z | 2025-11-11T00:00:00Z |
| SSA-792319 | SSA-792319: Missing Read Out Protection in SENTRON 7KM PAC3x20 Devices | 2024-03-12T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-765405 | SSA-765405: Multiple Vulnerabilities in SIMATIC RFID Readers | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-753746 | SSA-753746: Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products | 2024-02-13T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-721642 | SSA-721642: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4 | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-691715 | SSA-691715: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products | 2023-04-11T00:00:00Z | 2025-09-09T00:00:00Z |
| SSA-690517 | SSA-690517: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11ax Family | 2024-06-11T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-673996 | SSA-673996: Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products | 2024-09-10T00:00:00Z | 2025-12-09T00:00:00Z |
| SSA-566905 | SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products | 2023-04-11T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-446545 | SSA-446545: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products | 2024-09-10T00:00:00Z | 2025-07-08T00:00:00Z |
| SSA-427715 | SSA-427715: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-423808 | SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:7323 | Red Hat Security Advisory: OpenShift Container Platform 4.13.23 bug fix and security update | 2023-11-21T11:27:12+00:00 | 2025-11-29T06:50:18+00:00 |
| rhsa-2023:7322 | Red Hat Security Advisory: OpenShift Container Platform 4.13.23 security and extras update | 2023-11-21T11:27:54+00:00 | 2025-11-29T06:50:17+00:00 |
| rhsa-2023:7315 | Red Hat Security Advisory: OpenShift Container Platform 4.14.3 bug fix and security update | 2023-11-21T11:26:31+00:00 | 2025-11-29T06:50:17+00:00 |
| rhsa-2023:7288 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update | 2023-11-16T05:58:26+00:00 | 2025-11-29T06:50:16+00:00 |
| rhsa-2023:7215 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.2.12 | 2023-11-15T00:16:31+00:00 | 2025-11-29T06:50:16+00:00 |
| rhsa-2023:7201 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update | 2024-02-27T22:34:13+00:00 | 2025-11-29T06:50:16+00:00 |
| rhsa-2023:7200 | Red Hat Security Advisory: OpenShift Container Platform 4.15.z security update | 2024-02-27T22:49:18+00:00 | 2025-11-29T06:50:16+00:00 |
| rhsa-2023:7198 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 bug fix and security update | 2024-02-27T20:49:10+00:00 | 2025-11-29T06:50:16+00:00 |
| rhsa-2023:6894 | Red Hat Security Advisory: OpenShift Container Platform 4.12.44 bug fix and security update | 2023-11-21T12:36:12+00:00 | 2025-11-29T06:50:14+00:00 |
| rhsa-2023:6893 | Red Hat Security Advisory: OpenShift Container Platform 4.12.44 security and extras update | 2023-11-21T12:20:30+00:00 | 2025-11-29T06:50:14+00:00 |
| rhsa-2023:6846 | Red Hat Security Advisory: OpenShift Container Platform 4.13.22 bug fix and security update | 2023-11-15T01:45:54+00:00 | 2025-11-29T06:50:13+00:00 |
| rhsa-2023:6845 | Red Hat Security Advisory: OpenShift Container Platform 4.13.22 security and extras update | 2023-11-15T00:43:04+00:00 | 2025-11-29T06:50:13+00:00 |
| rhsa-2023:6842 | Red Hat Security Advisory: OpenShift Container Platform 4.12.43 bug fix and security update | 2023-11-16T20:31:52+00:00 | 2025-11-29T06:50:12+00:00 |
| rhsa-2023:6841 | Red Hat Security Advisory: Red Hat OpenShift Enterprise security update | 2023-11-16T20:14:47+00:00 | 2025-11-29T06:50:12+00:00 |
| rhsa-2023:6840 | Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update | 2023-11-15T07:24:02+00:00 | 2025-11-29T06:50:11+00:00 |
| rhsa-2023:6839 | Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security update | 2023-11-16T05:56:26+00:00 | 2025-11-29T06:50:10+00:00 |
| rhsa-2023:6837 | Red Hat Security Advisory: OpenShift Container Platform 4.14.2 bug fix and security update | 2023-11-15T04:22:30+00:00 | 2025-11-29T06:50:10+00:00 |
| rhsa-2023:6836 | Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security and extras update | 2023-11-15T00:47:45+00:00 | 2025-11-29T06:50:09+00:00 |
| rhsa-2023:6832 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update | 2023-11-08T18:49:17+00:00 | 2025-11-29T06:50:09+00:00 |
| rhsa-2023:6828 | Red Hat Security Advisory: ACS 4.1 enhancement update | 2023-11-08T18:34:59+00:00 | 2025-11-29T06:50:09+00:00 |
| rhsa-2023:6818 | Red Hat Security Advisory: Satellite 6.14 security and bug fix update | 2023-11-08T14:26:58+00:00 | 2025-11-29T06:50:08+00:00 |
| rhsa-2023:6817 | Red Hat Security Advisory: OpenShift Virtualization 4.14.0 Images security and bug fix update | 2023-11-08T14:03:27+00:00 | 2025-11-29T06:50:08+00:00 |
| rhsa-2023:6788 | Red Hat Security Advisory: Red Hat OpenShift GitOps security update | 2023-11-08T02:05:06+00:00 | 2025-11-29T06:50:08+00:00 |
| rhsa-2023:6787 | Red Hat Security Advisory: Network Observability security update | 2023-11-08T01:54:46+00:00 | 2025-11-29T06:50:08+00:00 |
| rhsa-2023:6786 | Red Hat Security Advisory: Fence Agents Remediation Operator 0.2.1 security update | 2023-11-08T01:46:23+00:00 | 2025-11-29T06:50:07+00:00 |
| rhsa-2023:6782 | Red Hat Security Advisory: openshift-gitops-kam security update | 2023-11-08T01:10:45+00:00 | 2025-11-29T06:50:07+00:00 |
| rhsa-2023:6296 | Red Hat Security Advisory: Release of OpenShift Serverless 1.30.2 | 2023-11-02T19:16:02+00:00 | 2025-11-29T06:50:07+00:00 |
| rhsa-2023:6276 | Red Hat Security Advisory: OpenShift Container Platform 4.12.42 bug fix and security update | 2023-11-08T10:40:48+00:00 | 2025-11-29T06:50:07+00:00 |
| rhsa-2023:6785 | Red Hat Security Advisory: Machine Deletion Remediation Operator 0.2.1 security update | 2023-11-08T01:37:29+00:00 | 2025-11-29T06:50:06+00:00 |
| rhsa-2023:6784 | Red Hat Security Advisory: Node Health Check Operator 0.6.1 security update | 2023-11-08T01:27:34+00:00 | 2025-11-29T06:50:06+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-68193 | drm/xe/guc: Add devm release action to safely tear down CT | 2025-12-02T00:00:00.000Z | 2025-12-17T01:01:43.000Z |
| msrc_cve-2025-68224 | scsi: core: Fix a regression triggered by scsi_host_busy() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:01:38.000Z |
| msrc_cve-2025-38389 | drm/i915/gt: Fix timeline left held on VMA alloc error | 2025-07-02T00:00:00.000Z | 2025-12-17T01:01:32.000Z |
| msrc_cve-2025-38387 | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 2025-07-02T00:00:00.000Z | 2025-12-17T01:01:28.000Z |
| msrc_cve-2025-38386 | ACPICA: Refuse to evaluate a method if arguments are missing | 2025-07-02T00:00:00.000Z | 2025-12-17T01:01:22.000Z |
| msrc_cve-2025-38384 | mtd: spinand: fix memory leak of ECC engine conf | 2025-07-02T00:00:00.000Z | 2025-12-17T01:01:17.000Z |
| msrc_cve-2025-40337 | net: stmmac: Correctly handle Rx checksum offload errors | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:54.000Z |
| msrc_cve-2025-40333 | f2fs: fix infinite loop in __insert_extent_tree() | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:47.000Z |
| msrc_cve-2025-40329 | drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:41.000Z |
| msrc_cve-2025-40342 | nvme-fc: use lock accessing port_state and rport state | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:34.000Z |
| msrc_cve-2025-40328 | smb: client: fix potential UAF in smb2_close_cached_fid() | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:28.000Z |
| msrc_cve-2025-40331 | sctp: Prevent TOCTOU out-of-bounds write | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:22.000Z |
| msrc_cve-2025-40343 | nvmet-fc: avoid scheduling association deletion twice | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:15.000Z |
| msrc_cve-2025-40341 | futex: Don't leak robust_list pointer on exec race | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:09.000Z |
| msrc_cve-2025-40324 | NFSD: Fix crash in nfsd4_read_release() | 2025-12-02T00:00:00.000Z | 2025-12-16T14:40:02.000Z |
| msrc_cve-2025-40303 | btrfs: ensure no dirty metadata is written back for an fs with errors | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:56.000Z |
| msrc_cve-2025-40297 | net: bridge: fix use-after-free due to MST port state bypass | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:49.000Z |
| msrc_cve-2025-40322 | fbdev: bitblit: bound-check glyph index in bit_putcs* | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:43.000Z |
| msrc_cve-2025-40311 | accel/habanalabs: support mapping cb with vmalloc-backed coherent memory | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:36.000Z |
| msrc_cve-2025-40323 | fbcon: Set fb_display[i]->mode to NULL when the mode is released | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:30.000Z |
| msrc_cve-2025-40310 | amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:23.000Z |
| msrc_cve-2025-40294 | Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:17.000Z |
| msrc_cve-2025-40304 | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:10.000Z |
| msrc_cve-2025-40301 | Bluetooth: hci_event: validate skb length for unknown CC opcode | 2025-12-02T00:00:00.000Z | 2025-12-16T14:39:04.000Z |
| msrc_cve-2025-40321 | wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode | 2025-12-02T00:00:00.000Z | 2025-12-16T14:38:58.000Z |
| msrc_cve-2025-40319 | bpf: Sync pending IRQ work before freeing ring buffer | 2025-12-02T00:00:00.000Z | 2025-12-16T14:38:51.000Z |
| msrc_cve-2025-40292 | virtio-net: fix received length check in big packets | 2025-12-02T00:00:00.000Z | 2025-12-16T14:38:45.000Z |
| msrc_cve-2025-40308 | Bluetooth: bcsp: receive data only if registered | 2025-12-02T00:00:00.000Z | 2025-12-16T14:38:38.000Z |
| msrc_cve-2025-40269 | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | 2025-12-02T00:00:00.000Z | 2025-12-16T14:38:32.000Z |
| msrc_cve-2025-40281 | sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto | 2025-12-02T00:00:00.000Z | 2025-12-16T14:38:25.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-222-08 | Siemens RUGGEDCOM ROS Devices | 2023-08-08T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-22-314-05 | Siemens RUGGEDCOM ROS | 2022-11-08T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-22-195-18 | Siemens RUGGEDCOM ROS Code Injection | 2022-07-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-22-069-12 | Siemens RUGGEDCOM ROS | 2022-03-08T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-22-069-01 | Siemens RUGGEDCOM Devices | 2022-03-08T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-17-271-01b | Siemens Ruggedcom ROS, SCALANCE | 2017-09-28T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-219-08 | Yealink IP Phones and RPS (Redirect and Provisioning Service) | 2025-08-07T06:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-25-219-05 | Packet Power EMX and EG | 2025-08-07T06:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-25-219-04 | Rockwell Automation Arena | 2025-08-07T06:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-25-219-03 | Burk Technology ARC Solo | 2025-08-07T06:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-25-219-01 | Delta Electronics DIAView | 2025-08-07T06:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-25-148-04 | Instantel Micromate (Update A) | 2025-05-29T06:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-24-123-01 | CyberPower PowerPanel Business | 2024-05-02T06:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-24-032-01 | Gessler GmbH WEB-MASTER | 2024-02-01T07:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-25-219-06 | Dreame Technology iOS and Android Mobile Applications | 2025-08-07T04:00:00.000000Z | 2025-08-07T04:00:00.000000Z |
| va-25-219-01 | Tyler Technologies ERP Pro 9 | 2025-08-07T00:00:00Z | 2025-08-07T00:00:00Z |
| icsa-25-247-01 | Honeywell OneWireless Wireless Device Manager (WDM) | 2025-08-04T06:00:00.000000Z | 2025-08-04T06:00:00.000000Z |
| icsa-25-205-03 | Honeywell Experion PKS (Update A) | 2025-07-24T06:00:00.000000Z | 2025-08-04T06:00:00.000000Z |
| icsa-25-212-02 | Rockwell Automation Lifecycle Services with VMware | 2025-07-31T06:00:00.000000Z | 2025-07-31T06:00:00.000000Z |
| icsa-25-210-03 | Delta Electronics DTN Soft | 2025-07-29T06:00:00.000000Z | 2025-07-29T06:00:00.000000Z |
| icsa-25-210-02 | Samsung HVAC DMS | 2025-07-29T06:00:00.000000Z | 2025-07-29T06:00:00.000000Z |
| icsa-25-210-01 | National Instruments LabVIEW | 2025-07-29T06:00:00.000000Z | 2025-07-29T06:00:00.000000Z |
| icsa-24-338-06 | Fuji Electric Tellus Lite V-Simulator (Update A) | 2024-12-03T07:00:00.000000Z | 2025-07-29T06:00:00.000000Z |
| icsa-24-158-04 | Johnson Controls Software House iStar Door Controller (Update A) | 2024-06-06T06:00:00.000000Z | 2025-07-29T06:00:00.000000Z |
| icsa-25-273-03 | Festo CPX-CEC-C1 and CPX-CMXX | 2022-09-20T10:00:00.000000Z | 2025-07-28T10:00:00.000000Z |
| icsa-25-205-04 | LG Innotek Camera Model LNV5110R | 2025-07-25T05:00:00.000000Z | 2025-07-25T05:00:00.000000Z |
| icsma-25-205-01 | Medtronic MyCareLink Patient Monitor | 2025-07-24T06:00:00.000000Z | 2025-07-24T06:00:00.000000Z |
| icsa-25-205-02 | Network Thermostat X-Series WiFi Thermostats | 2025-07-24T06:00:00.000000Z | 2025-07-24T06:00:00.000000Z |
| icsa-22-202-04 | ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update A) | 2022-07-26T06:00:00.000000Z | 2025-07-24T06:00:00.000000Z |
| icsa-25-203-04 | Schneider Electric EcoStruxure Power Operation | 2025-07-22T06:00:00.000000Z | 2025-07-22T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asa-ssh-dos-eEDWu5RM | Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ftd-priv-esc-hbs9gnwq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ftd-priv-esc-hBS9gnwq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-fmc-code-inj-wshrgz8l | Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-10-23T15:57:47+00:00 |
| cisco-sa-ftd-fmc-code-inj-wSHrgz8L | Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-10-23T15:57:47+00:00 |
| cisco-sa-ucsc-bkpsky-tgj5f73j | Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ucsc-bkpsky-TgJ5f73J | Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tax76u3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tAX76U3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-vlan-dos-27pur5rt | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-vlan-dos-27Pur5RT | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yj2osdhv | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yJ2OSDhV | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qe33tcms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qE33TCms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-fduf3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-FdUF3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-jh4v6zpn | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-Jh4V6zpN | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-bk8vqedc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-Bk8VqEDc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-t46k3jnn | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-T46k3jnN | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-bushlbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-BUSHLbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-uvyzrkfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-UvYZrKfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-xvyx2wlj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-XvyX2wLj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-meraki-mx-vpn-dos-by-QWUkqV7X | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Session Takeover and Denial of Service Vulnerability | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:27+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-201806-1505 | System software utilizing Lazy FP state restore technique on systems using Intel Core-bas… | 2024-11-29T22:08:44.266000Z |
| var-201912-0629 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 1… | 2024-11-29T22:08:43.620000Z |
| var-201711-0472 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-11-29T22:08:42.719000Z |
| var-202010-0251 | In Network Security Services (NSS) before 3.46, several cryptographic primitives had miss… | 2024-11-29T22:08:41.474000Z |
| var-200703-0020 | Stack-based buffer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remot… | 2024-11-29T22:08:40.650000Z |
| var-200704-0219 | The Login Window in Apple Mac OS X 10.4 through 10.4.9 displays the software update windo… | 2024-11-29T22:08:09.192000Z |
| var-200711-0560 | Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matc… | 2024-11-29T22:08:04.894000Z |
| var-202108-1268 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in… | 2024-11-29T22:07:57.241000Z |
| var-202006-1651 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 a… | 2024-11-29T22:07:21.664000Z |
| var-201512-0008 | The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent at… | 2024-11-29T22:07:19.754000Z |
| var-201007-0321 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 thro… | 2024-11-29T22:07:19.688000Z |
| var-200803-0013 | Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other vers… | 2024-11-29T22:07:19.195000Z |
| var-201401-0254 | The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.… | 2024-11-29T22:07:17.374000Z |
| var-201712-0248 | There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponent… | 2024-11-29T22:07:14.556000Z |
| var-200904-0824 | Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other pr… | 2024-11-29T22:07:14.464000Z |
| var-200712-0605 | Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_… | 2024-11-29T22:07:14.067000Z |
| var-202203-0131 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-11-29T22:07:13.242000Z |
| var-201110-0393 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2024-11-29T22:06:37.601000Z |
| var-202208-0404 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in in… | 2024-11-29T22:06:35.987000Z |
| var-201210-0267 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T22:06:34.547000Z |
| var-201706-1000 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte p… | 2024-11-29T22:06:33.554000Z |
| var-201810-0932 | The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side chan… | 2024-11-29T22:06:32.795000Z |
| var-200102-0001 | Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source co… | 2024-11-29T22:06:32.463000Z |
| var-200703-0022 | Unspecified vulnerability in diskimages-helper in Apple Mac OS X 10.3.9 and 10.4 through … | 2024-11-29T22:06:22.888000Z |
| var-201912-0639 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:06:22.811000Z |
| var-202004-1973 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-11-29T22:06:22.600000Z |
| var-201912-1860 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:06:21.932000Z |
| var-201211-0367 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-11-29T22:06:17.679000Z |
| var-202110-1685 | This issue was addressed with improved checks. This issue is fixed in Security Update 202… | 2024-11-29T22:06:17.617000Z |
| var-200701-0295 | The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML … | 2024-11-29T22:06:16.985000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-002299 | SaAT Netizen fails to properly verify downloaded installation and update files | 2016-12-05T13:52+09:00 | 2024-06-27T13:59+09:00 |
| jvndb-2022-000080 | Android App "IIJ SmartKey" vulnerable to information disclosure | 2022-10-14T13:57+09:00 | 2024-06-27T13:40+09:00 |
| jvndb-2023-001774 | Multiple vulnerabilities in SolarView Compact | 2023-05-09T16:09+09:00 | 2024-06-27T13:30+09:00 |
| jvndb-2024-000017 | Cybozu KUNAI for Android vulnerable to denial-of-service (DoS) | 2024-02-06T13:25+09:00 | 2024-06-27T13:28+09:00 |
| jvndb-2024-000066 | WordPress plugins "WP Tweet Walls" and "Sola Testimonials" vulnerable to cross-site request forgery | 2024-06-26T14:25+09:00 | 2024-06-26T14:25+09:00 |
| jvndb-2022-000026 | WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" vulnerable to cross-site request forgery | 2022-04-15T13:15+09:00 | 2024-06-25T18:04+09:00 |
| jvndb-2024-003699 | LINE client for iOS vulnerable to universal cross-site scripting | 2024-06-24T11:05+09:00 | 2024-06-24T11:05+09:00 |
| jvndb-2022-001372 | Trend Micro Antivirus for MAC vulnerable to privilege escalation | 2022-02-18T14:55+09:00 | 2024-06-21T18:04+09:00 |
| jvndb-2022-001381 | Multiple vulnerabilities in Trend Micro ServerProtect | 2022-03-03T14:42+09:00 | 2024-06-21T17:58+09:00 |
| jvndb-2022-000015 | EC-CUBE improperly handles HTTP Host header values | 2022-02-22T14:22+09:00 | 2024-06-21T17:39+09:00 |
| jvndb-2022-000013 | EC-CUBE plugin "Mail Magazine Management Plugin" vulnerable to cross-site request forgery | 2022-02-22T14:09+09:00 | 2024-06-21T14:05+09:00 |
| jvndb-2022-000023 | WordPress Plugin "Advanced Custom Fields" vulnerable to missing authorization | 2022-03-30T15:23+09:00 | 2024-06-21T12:25+09:00 |
| jvndb-2022-000020 | Multiple vulnerabilities in pfSense | 2022-03-15T14:58+09:00 | 2024-06-21T11:59+09:00 |
| jvndb-2022-000022 | AttacheCase may insecurely load Dynamic Link Libraries | 2022-03-30T14:00+09:00 | 2024-06-21T11:42+09:00 |
| jvndb-2022-001387 | Installer of WPS Office for Windows misconfigures the ACL for the installation directory | 2022-03-09T12:30+09:00 | 2024-06-21T11:37+09:00 |
| jvndb-2022-001384 | Multiple vulnerabilities in OMRON CX-Programmer | 2022-03-08T15:56+09:00 | 2024-06-21T11:32+09:00 |
| jvndb-2023-000008 | Pgpool-II vulnerable to information disclosure | 2023-01-23T16:35+09:00 | 2024-06-20T17:54+09:00 |
| jvndb-2022-000024 | Zero-channel BBS Plus vulnerable to cross-site scripting | 2022-03-30T15:36+09:00 | 2024-06-20T17:34+09:00 |
| jvndb-2022-000019 | pfSense-pkg-WireGuard vulnerable to directory traversal | 2022-03-03T15:08+09:00 | 2024-06-20T16:51+09:00 |
| jvndb-2022-000018 | MarkText vulnerable to cross-site scripting | 2022-03-03T14:40+09:00 | 2024-06-20T16:46+09:00 |
| jvndb-2022-000046 | Gitlab vulnerable to server-side request forgery | 2022-06-17T12:26+09:00 | 2024-06-20T15:39+09:00 |
| jvndb-2024-003645 | Multiple vulnerabilities in multiple Trend Micro products | 2024-06-20T14:59+09:00 | 2024-06-20T14:59+09:00 |
| jvndb-2022-000027 | Hammock AssetView missing authentication for critical functions | 2022-04-22T13:53+09:00 | 2024-06-20T12:15+09:00 |
| jvndb-2022-000037 | Spring Security OAuth (spring-security-oauth2) vulnerable to denial-of-service (DoS) | 2022-05-20T17:04+09:00 | 2024-06-20T12:09+09:00 |
| jvndb-2022-001923 | Multiple vulnerabilities in CONTEC SolarView Compact | 2022-05-27T15:28+09:00 | 2024-06-20T11:34+09:00 |
| jvndb-2022-001795 | Command injection vulnerability in QNAP VioStar series NVR | 2022-05-12T18:07+09:00 | 2024-06-20T11:31+09:00 |
| jvndb-2024-000065 | "ZOZOTOWN" App for Android fails to restrict custom URL schemes properly | 2024-06-19T16:04+09:00 | 2024-06-19T16:04+09:00 |
| jvndb-2022-000029 | KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass | 2022-05-09T14:43+09:00 | 2024-06-19T16:03+09:00 |
| jvndb-2022-000028 | Multiple vulnerabilities in multiple MEIKYO ELECTRIC products | 2022-05-09T14:31+09:00 | 2024-06-19T15:55+09:00 |
| jvndb-2024-000064 | WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page | 2024-06-19T14:25+09:00 | 2024-06-19T14:25+09:00 |
| ID | Description | Updated |
|---|