Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-69674 |
N/A
|
Buffer Overflow vulnerability in CDATA FD614GS3-R… |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T15:57:30.631Z |
| CVE-2025-67305 |
N/A
|
In RUCKUS Network Director (RND) < 4.5.0.56, the … |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T19:56:38.236Z |
| CVE-2025-67304 |
N/A
|
In Ruckus Network Director (RND) < 4.5.0.54, the … |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T19:51:31.678Z |
| CVE-2025-55853 |
N/A
|
SoftVision webPDF before 10.0.2 is vulnerable to … |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T14:18:15.816Z |
| CVE-2025-15585 |
6.7 (4.0)
|
Fileflows versions before 25.05.2 are affected by… |
fileflows |
fileflows |
2026-02-18T23:44:40.034Z | 2026-02-19T17:20:20.747Z |
| CVE-2026-2684 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System uploadFil… |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T23:32:07.382Z | 2026-02-19T17:18:01.380Z |
| CVE-2026-25926 |
7.3 (3.1)
|
Notepad++ has an Untrusted Search Path |
notepad-plus-plus |
notepad-plus-plus |
2026-02-18T23:07:36.383Z | 2026-02-19T17:45:27.028Z |
| CVE-2026-24126 |
6.6 (3.1)
|
Weblate has an argument injection in management console |
WeblateOrg |
weblate |
2026-02-18T23:05:03.478Z | 2026-02-19T17:13:53.353Z |
| CVE-2026-26281 |
4.4 (3.1)
|
InvoicePlane has Stored Cross-Site Scripting (XSS) Iss… |
InvoicePlane |
InvoicePlane |
2026-02-18T23:03:08.876Z | 2026-02-19T16:47:43.663Z |
| CVE-2026-2683 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System downLoad.… |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T23:02:06.726Z | 2026-02-19T16:44:32.076Z |
| CVE-2026-26270 |
5.4 (3.1)
|
InvoicePlane has Stored Cross-Site Scripting Issue in … |
InvoicePlane |
InvoicePlane |
2026-02-18T23:01:41.222Z | 2026-02-19T16:42:10.944Z |
| CVE-2025-15581 |
4.7 (4.0)
|
Orthanc versions before 1.12.10 are affected by a… |
orthanc-server |
orthanc |
2026-02-18T22:59:55.491Z | 2026-02-19T16:39:35.695Z |
| CVE-2026-25596 |
4.8 (3.1)
|
InvoicePlane has Stored XSS via Product Unit Name in I… |
InvoicePlane |
InvoicePlane |
2026-02-18T22:59:44.627Z | 2026-02-19T16:33:52.856Z |
| CVE-2026-25595 |
4.8 (3.1)
|
InvoicePlane has Stored XSS via Invoice Number in Invo… |
InvoicePlane |
InvoicePlane |
2026-02-18T22:52:27.047Z | 2026-02-19T17:45:39.099Z |
| CVE-2026-25594 |
4.8 (3.1)
|
InvoicePlane has Stored XSS via Family Name in Product Form |
InvoicePlane |
InvoicePlane |
2026-02-18T22:50:45.523Z | 2026-02-19T17:45:49.423Z |
| CVE-2026-25548 |
9.1 (3.1)
|
InvoicePlane Vulnerable to Remote Code Execution via L… |
InvoicePlane |
InvoicePlane |
2026-02-18T22:49:15.235Z | 2026-02-19T17:46:01.656Z |
| CVE-2026-24745 |
5.7 (3.1)
|
InvoicePlane has a Stored Cross-Site Scripting (XSS) issue |
InvoicePlane |
InvoicePlane |
2026-02-18T22:47:19.717Z | 2026-02-19T16:14:50.756Z |
| CVE-2026-2682 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System prinRepor… |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T22:32:08.536Z | 2026-02-19T16:11:57.633Z |
| CVE-2025-12812 |
5.3 (4.0)
|
Cloud Suite and Privilege Access Service – SQL Injection |
Delinea Inc. |
Cloud Suite and Privileged Access Service |
2026-02-18T22:10:35.049Z | 2026-02-19T16:09:52.937Z |
| CVE-2025-12811 |
6.9 (4.0)
|
Cloud Suite and Privilege Access Service– HTTP request… |
Delinea Inc. |
Cloud Suite and Privileged Access Service |
2026-02-18T22:08:25.254Z | 2026-02-19T16:04:19.494Z |
| CVE-2026-2676 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
GoogTech sms-ssm API LoginInterceptor.java preHandle i… |
GoogTech |
sms-ssm |
2026-02-18T22:02:07.132Z | 2026-02-19T16:00:57.872Z |
| CVE-2019-25401 |
8.7 (4.0)
7.5 (3.1)
|
Bematech Printer MP-4200 TH Denial of Service |
Bematech |
MP-4200 |
2026-02-18T21:55:11.819Z | 2026-02-19T20:08:28.965Z |
| CVE-2019-25365 |
8.4 (4.0)
9.8 (3.1)
|
ChaosPro 2.0 - Buffer Overflow |
Chaospro |
ChaosPro |
2026-02-18T21:55:11.104Z | 2026-02-19T20:08:42.024Z |
| CVE-2019-25364 |
9.3 (4.0)
9.8 (3.1)
|
Win10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow |
TABS Laboratories Corporation |
Win10 MailCarrier |
2026-02-18T21:55:10.094Z | 2026-02-19T20:08:53.368Z |
| CVE-2019-25363 |
8.4 (4.0)
7.5 (3.1)
|
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of… |
Alloksoft |
WMV to AVI MPEG DVD WMV Convertor |
2026-02-18T21:55:09.268Z | 2026-02-19T20:09:07.038Z |
| CVE-2019-25362 |
9.3 (4.0)
9.8 (3.1)
|
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow |
Alloksoft |
WMV to AVI MPEG DVD WMV Convertor |
2026-02-18T21:55:08.448Z | 2026-02-19T20:09:18.092Z |
| CVE-2019-25361 |
8.6 (4.0)
9.8 (3.1)
|
Ayukov NFTP client 1.71 - 'SYST' Buffer Overflow |
Ayukov |
Ayukov NFTP client |
2026-02-18T21:55:07.501Z | 2026-02-19T20:09:29.375Z |
| CVE-2019-25360 |
8.4 (4.0)
9.8 (3.1)
|
Aida64 6.10.5200 - Buffer Overflow |
FinalWire Ltd. |
Aida64 |
2026-02-18T21:55:06.734Z | 2026-02-19T20:09:41.717Z |
| CVE-2019-25359 |
8.8 (4.0)
8.2 (3.1)
|
SD.NET RIM 4.7.3c - 'idtyp' SQL Injection |
Sitzungsdienst |
SD.NET RIM |
2026-02-18T21:55:05.859Z | 2026-02-19T20:09:53.575Z |
| CVE-2019-25358 |
8.7 (4.0)
7.5 (3.1)
|
FileOptimizer 14.00.2524 - Denial of Service |
nikkhokkho |
FileOptimizer |
2026-02-18T21:55:04.412Z | 2026-02-19T20:10:06.522Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-13079 |
5.3 (3.1)
|
Popup Builder - Create highly converting, mobile frien… |
popupbuilder |
Popup Builder – Create highly converting, mobile friendly marketing popups. |
2026-02-19T03:25:14.826Z | 2026-02-19T17:42:29.750Z |
| CVE-2025-13048 |
6.4 (3.1)
|
Official StatCounter Plugin <= 2.1.0 - Authenticated (… |
statcounter |
StatCounter – Free Real Time Visitor Stats |
2026-02-19T03:25:19.247Z | 2026-02-19T17:40:41.496Z |
| CVE-2025-12975 |
7.2 (3.1)
|
CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 … |
wahid0003 |
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels |
2026-02-19T04:36:10.601Z | 2026-02-19T17:37:56.018Z |
| CVE-2025-12884 |
4.3 (3.1)
|
Advanced Ads – Ad Manager & AdSense <= 2.0.14 - Missin… |
monetizemore |
Advanced Ads – Ad Manager & AdSense |
2026-02-19T03:25:17.396Z | 2026-02-19T17:41:30.633Z |
| CVE-2025-12882 |
9.8 (3.1)
|
Clasifico Listing <= 2.0 - Unauthenticated Privilege E… |
SmartDataSoft |
Clasifico Listing |
2026-02-19T03:25:15.804Z | 2026-02-19T17:42:05.893Z |
| CVE-2025-12845 |
8.8 (3.1)
|
Tablesome Table – Contact Form DB – WPForms, CF7, Grav… |
essekia |
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent |
2026-02-19T03:25:17.846Z | 2026-02-19T17:41:17.364Z |
| CVE-2025-12821 |
8.8 (3.1)
|
NewsBlogger <= 0.2.5.6 - 0.2.6.1 - Cross-Site Request … |
spicethemes |
NewsBlogger |
2026-02-19T03:25:16.877Z | 2026-02-19T17:41:41.142Z |
| CVE-2025-12707 |
7.5 (3.1)
|
Library Management System <= 3.2.1 - Unauthenticated S… |
owthub |
Library Management System |
2026-02-19T03:25:15.322Z | 2026-02-19T17:42:18.990Z |
| CVE-2025-12500 |
5.3 (3.1)
|
Checkout Field Manager (Checkout Manager) for WooComme… |
quadlayers |
Checkout Field Manager (Checkout Manager) for WooCommerce |
2026-02-19T03:25:20.170Z | 2026-02-19T17:40:18.923Z |
| CVE-2025-12451 |
6.1 (3.1)
|
Easy SVG Support <= 4.0 - Authenticated (Author+) Stor… |
benjamin_zekavica |
Easy SVG Support |
2026-02-19T03:25:13.845Z | 2026-02-19T17:42:53.448Z |
| CVE-2025-12448 |
6.4 (3.1)
|
Smartsupp – live chat, AI shopping assistant and chatb… |
smartsupp |
Smartsupp – live chat, AI shopping assistant and chatbots |
2026-02-19T03:25:11.994Z | 2026-02-19T17:43:40.590Z |
| CVE-2025-12375 |
6.4 (3.1)
|
Printful Integration for WooCommerce <= 2.2.11 - Authe… |
printful |
Printful Integration for WooCommerce |
2026-02-19T03:25:14.353Z | 2026-02-19T17:42:42.024Z |
| CVE-2025-12172 |
4.3 (3.1)
|
Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Re… |
mailchimp |
Mailchimp List Subscribe Form |
2026-02-19T03:25:12.912Z | 2026-02-19T17:43:16.858Z |
| CVE-2025-12117 |
6.4 (3.1)
|
Renden <= 1.8.1 - Authenticated (Contributor+) Stored … |
thinkupthemes |
Renden |
2026-02-19T03:25:18.752Z | 2026-02-19T17:40:52.688Z |
| CVE-2025-12116 |
6.4 (3.1)
|
Drift <= 1.5.0 - Authenticated (Contributor+) Stored … |
thinkupthemes |
Drift |
2026-02-19T03:25:16.294Z | 2026-02-19T17:41:54.223Z |
| CVE-2025-12081 |
4.3 (3.1)
|
ACF Photo Gallery Field <= 3.0 - Missing Authorization… |
navzme |
ACF Photo Gallery Field |
2026-02-19T03:25:19.703Z | 2026-02-19T17:40:29.496Z |
| CVE-2025-12027 |
4.3 (3.1)
|
Mesmerize Companion <= 1.6.158 - Missing Authorization… |
horearadu |
Mesmerize Companion |
2026-02-19T03:25:10.834Z | 2026-02-19T17:44:05.140Z |
| CVE-2025-11754 |
7.5 (3.1)
|
Cookie Banner, Cookie Consent, Consent Log, Cookie Sca… |
wplegalpages |
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent |
2026-02-19T03:25:13.376Z | 2026-02-19T17:43:06.008Z |
| CVE-2025-11725 |
6.5 (3.1)
|
Aruba HiSpeed Cache <= 3.0.2 - Missing Authorization t… |
arubadev |
Aruba HiSpeed Cache |
2026-02-19T03:25:11.535Z | 2026-02-19T17:43:52.800Z |
| CVE-2025-11706 |
6.1 (3.1)
|
Aruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Sc… |
arubadev |
Aruba HiSpeed Cache |
2026-02-19T03:25:12.460Z | 2026-02-19T17:43:28.951Z |
| CVE-2026-2686 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
SECCN Dingcheng G10 session_login.cgi qq os command in… |
SECCN Dingcheng |
G10 |
2026-02-19T00:02:07.214Z | 2026-02-19T00:02:07.214Z |
| CVE-2026-2684 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System uploadFil… |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T23:32:07.382Z | 2026-02-19T17:18:01.380Z |
| CVE-2026-25926 |
7.3 (3.1)
|
Notepad++ has an Untrusted Search Path |
notepad-plus-plus |
notepad-plus-plus |
2026-02-18T23:07:36.383Z | 2026-02-19T17:45:27.028Z |
| CVE-2026-24126 |
6.6 (3.1)
|
Weblate has an argument injection in management console |
WeblateOrg |
weblate |
2026-02-18T23:05:03.478Z | 2026-02-19T17:13:53.353Z |
| CVE-2025-15585 |
6.7 (4.0)
|
Fileflows versions before 25.05.2 are affected by… |
fileflows |
fileflows |
2026-02-18T23:44:40.034Z | 2026-02-19T17:20:20.747Z |
| CVE-2026-2683 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System downLoad.… |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T23:02:06.726Z | 2026-02-19T16:44:32.076Z |
| CVE-2026-2682 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System prinRepor… |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T22:32:08.536Z | 2026-02-19T16:11:57.633Z |
| CVE-2026-2676 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
GoogTech sms-ssm API LoginInterceptor.java preHandle i… |
GoogTech |
sms-ssm |
2026-02-18T22:02:07.132Z | 2026-02-19T16:00:57.872Z |
| CVE-2026-26281 |
4.4 (3.1)
|
InvoicePlane has Stored Cross-Site Scripting (XSS) Iss… |
InvoicePlane |
InvoicePlane |
2026-02-18T23:03:08.876Z | 2026-02-19T16:47:43.663Z |
| CVE-2026-26270 |
5.4 (3.1)
|
InvoicePlane has Stored Cross-Site Scripting Issue in … |
InvoicePlane |
InvoicePlane |
2026-02-18T23:01:41.222Z | 2026-02-19T16:42:10.944Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-1080 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.7 before 18.6.6, 18.7 be… | 2026-02-11T12:16:04.120 | 2026-02-12T21:38:00.433 |
| fkie_cve-2026-0958 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7… | 2026-02-11T12:16:03.970 | 2026-02-13T15:33:52.310 |
| fkie_cve-2026-0595 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 18.6.6, 18.7… | 2026-02-11T12:16:03.830 | 2026-02-12T21:16:37.217 |
| fkie_cve-2025-8099 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18.7… | 2026-02-11T12:16:03.687 | 2026-02-13T15:33:05.570 |
| fkie_cve-2025-7659 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7… | 2026-02-11T12:16:03.533 | 2026-02-13T15:32:18.967 |
| fkie_cve-2025-14594 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.… | 2026-02-11T12:16:03.267 | 2026-02-13T15:30:42.347 |
| fkie_cve-2025-14592 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7… | 2026-02-11T12:16:03.123 | 2026-02-13T15:18:16.647 |
| fkie_cve-2025-14560 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7… | 2026-02-11T12:16:02.980 | 2026-02-13T15:16:54.370 |
| fkie_cve-2025-12575 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.0 before 18.6.6, 18.7 be… | 2026-02-11T12:16:02.833 | 2026-02-13T15:16:07.330 |
| fkie_cve-2025-12073 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 18.6.6, 18.7… | 2026-02-11T12:16:02.653 | 2026-02-13T15:15:12.320 |
| fkie_cve-2025-10174 | Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technol… | 2026-02-11T12:16:01.580 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-2295 | The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to… | 2026-02-11T10:15:51.357 | 2026-02-11T15:27:26.370 |
| fkie_cve-2025-15096 | The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via ac… | 2026-02-11T10:15:49.970 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1885 | The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid'… | 2026-02-11T09:15:53.050 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1853 | The BuddyHolis ListSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-02-11T09:15:52.883 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1833 | The WaMate Confirm – Order Confirmation plugin for WordPress is vulnerable to unauthorized access i… | 2026-02-11T09:15:52.713 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1827 | The Flask Micro code-editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t… | 2026-02-11T09:15:52.550 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1826 | The OpenPOS Lite – Point of Sale for WooCommerce plugin for WordPress is vulnerable to Stored Cross… | 2026-02-11T09:15:52.383 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1821 | The Microtango plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'restkey' … | 2026-02-11T09:15:52.213 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1809 | The HTML Tag Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p… | 2026-02-11T09:15:52.037 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1804 | The WDES Responsive Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-02-11T09:15:51.863 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1786 | The Twitter posts to Blog plugin for WordPress is vulnerable to unauthorized modification of data d… | 2026-02-11T09:15:51.690 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1748 | The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress is vulnerable to unauthori… | 2026-02-11T09:15:51.523 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1560 | The Custom Block Builder – Lazy Blocks plugin for WordPress is vulnerable to Remote Code Execution … | 2026-02-11T09:15:51.353 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-1215 | The MMA Call Tracking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi… | 2026-02-11T09:15:51.177 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-0815 | The Category Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag-i… | 2026-02-11T09:15:51.000 | 2026-02-11T15:27:26.370 |
| fkie_cve-2026-0724 | The WPlyr Media Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_w… | 2026-02-11T09:15:50.827 | 2026-02-11T15:27:26.370 |
| fkie_cve-2025-9986 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vadi Co… | 2026-02-11T09:15:50.663 | 2026-02-11T15:27:26.370 |
| fkie_cve-2025-15440 | The iONE360 configurator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-02-11T09:15:50.457 | 2026-02-11T15:27:26.370 |
| fkie_cve-2025-13651 | Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb… | 2026-02-11T09:15:50.303 | 2026-02-11T15:27:26.370 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-p546-7whm-cxpm |
9.0 (3.1)
7.6 (4.0)
|
An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-c… | 2026-02-18T21:31:23Z | 2026-02-20T00:31:52Z |
| ghsa-mjjq-x58m-rfxp |
3.3 (3.1)
1.9 (4.0)
|
A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the func… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-jx8h-vrjj-cm6g |
5.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-gwrh-w4f9-ffc9 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea8359… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-gq25-pccv-6q8j |
5.5 (3.1)
|
A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploi… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-c96q-rf2r-2xj8 |
5.3 (3.1)
|
A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_fir… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-9f49-2j27-6f79 |
6.3 (3.1)
|
A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segment… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-7qhw-4fcq-2g37 |
4.8 (3.1)
|
An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of fu… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-4pq4-6gr5-cr69 |
6.5 (3.1)
|
An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this fla… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-2q3j-wj77-9934 |
6.5 (3.1)
6.0 (4.0)
|
A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an at… | 2026-02-18T21:31:23Z | 2026-02-20T00:31:52Z |
| ghsa-2g52-f4rf-8vm9 |
3.3 (3.1)
|
A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-wjf9-j9vw-27f4 |
8.8 (3.1)
|
PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability. A low-pri… | 2026-02-18T21:31:22Z | 2026-02-18T21:31:22Z |
| ghsa-rcjr-qg8v-4c3v |
7.8 (3.1)
|
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-o… | 2026-02-18T21:31:22Z | 2026-02-18T21:31:22Z |
| ghsa-pppv-pc54-6j8r |
3.3 (3.1)
1.9 (4.0)
|
A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::o… | 2026-02-18T21:31:22Z | 2026-02-18T21:31:23Z |
| ghsa-h5jq-923c-7w8g |
7.8 (3.1)
|
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out… | 2026-02-18T21:31:22Z | 2026-02-18T21:31:22Z |
| ghsa-cq5p-w4x6-m6h3 |
3.3 (3.1)
1.9 (4.0)
|
A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the funct… | 2026-02-18T21:31:22Z | 2026-02-18T21:31:23Z |
| ghsa-8gfj-223w-87pr |
6.5 (3.1)
|
The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Dir… | 2026-02-18T21:31:22Z | 2026-02-18T21:31:22Z |
| ghsa-2hcf-jfqx-g286 |
6.5 (3.1)
|
PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerabili… | 2026-02-18T21:31:22Z | 2026-02-18T21:31:22Z |
| ghsa-f5pv-9whq-7mv7 |
6.8 (3.1)
|
In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Plat… | 2026-02-18T18:30:41Z | 2026-02-18T18:30:41Z |
| ghsa-9pjv-cqr5-4xh7 |
4.3 (3.1)
2.1 (4.0)
|
A vulnerability was found in newbee-ltd newbee-mall up to a069069b07027613bf0e7f571736be86f431faee.… | 2026-02-18T18:30:41Z | 2026-02-18T18:30:41Z |
| ghsa-4mcw-fcqm-vqg3 |
3.3 (3.1)
1.9 (4.0)
|
A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the functio… | 2026-02-18T18:30:41Z | 2026-02-18T18:30:41Z |
| ghsa-w35p-gjc5-2g6r |
4.3 (3.1)
|
The Booking Calendar plugin for WordPress is vulnerable to Insecure Direct Object Reference in all … | 2026-02-18T18:30:40Z | 2026-02-18T18:30:40Z |
| ghsa-v8wf-h34r-55f7 |
6.8 (3.1)
|
In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Se… | 2026-02-18T18:30:40Z | 2026-02-20T15:31:00Z |
| ghsa-v3v9-r7ff-976x |
9.8 (3.1)
|
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.… | 2026-02-18T18:30:40Z | 2026-02-18T21:31:22Z |
| ghsa-p68h-c56f-p3v6 |
|
In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid … | 2026-02-18T18:30:40Z | 2026-02-19T18:31:44Z |
| ghsa-p525-h9pq-233r |
|
In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Don't assume CID … | 2026-02-18T18:30:40Z | 2026-02-18T18:30:40Z |
| ghsa-mx4x-pxgm-r77w |
|
In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of-bound… | 2026-02-18T18:30:40Z | 2026-02-18T18:30:40Z |
| ghsa-m4v3-95xp-3j5h |
7.5 (3.1)
|
Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Ta… | 2026-02-18T18:30:40Z | 2026-02-18T21:31:22Z |
| ghsa-m4f3-qp2w-gwh6 |
8.2 (3.1)
|
OpenStack Nova calls qemu-img without format restrictions for resize | 2026-02-18T18:30:40Z | 2026-02-21T06:30:15Z |
| ghsa-m34c-wrf8-mw69 |
|
In the Linux kernel, the following vulnerability has been resolved: nilfs2: Fix potential block ov… | 2026-02-18T18:30:40Z | 2026-02-19T18:31:44Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-252 |
|
The deep-translator project on PyPI was taken over via user account compromise via a phis… | deep-translator | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-251 |
|
The spam project on PyPI was taken over via user account compromise via a phishing attack… | spam | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-250 |
|
The exotel project on PyPI was taken over via user account compromise via a phishing atta… | exotel | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-256 |
|
The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from … | deluge | 2022-08-26T16:15:00Z | 2022-08-31T20:34:06.230496Z |
| pysec-2022-255 |
|
There is a NULL pointer dereference vulnerability in VTK, and it lies in IO/Infovis/vtkXM… | vtk | 2022-08-25T18:15:00Z | 2022-08-31T18:46:05.259402Z |
| pysec-2022-254 |
|
A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a reque… | mod-wsgi | 2022-08-25T18:15:00Z | 2022-08-31T18:46:04.047573Z |
| pysec-2022-253 |
|
A flaw was found in ansible-runner. An improper escaping of the shell command, while call… | ansible-runner | 2022-08-24T16:15:00Z | 2022-08-29T16:56:41.591821Z |
| pysec-2022-43068 |
6.3 (3.1)
|
A race condition flaw was found in ansible-runner, where an attacker could watch for rapi… | ansible-runner | 2022-08-23T16:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43067 |
6.6 (3.1)
|
A flaw was found in ansible-runner where the default temporary files configuration in ans… | ansible-runner | 2022-08-23T16:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43142 |
7.8 (3.1)
|
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. | octoprint | 2022-08-22T12:15:00+00:00 | 2024-11-21T14:22:57.145370+00:00 |
| pysec-2022-249 |
|
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnera… | nbconvert | 2022-08-18T19:15:00Z | 2022-08-20T05:32:49.275202Z |
| pysec-2022-43146 |
6.5 (3.1)
|
py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord ve… | py-cord | 2022-08-18T15:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2022-245 |
|
An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.… | django | 2022-08-03T14:15:00Z | 2022-08-03T16:55:03.165433Z |
| pysec-2022-248 |
|
Streamlit is a data oriented application development framework for python. Users hosting … | streamlit | 2022-08-01T22:15:00Z | 2022-08-10T17:01:37.061546Z |
| pysec-2022-247 |
|
Flask-AppBuilder is an application development framework built on top of Flask python fra… | flask-appbuilder | 2022-08-01T19:15:00Z | 2022-08-08T16:56:55.240734Z |
| pysec-2022-246 |
|
Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3. | fava | 2022-08-01T15:15:00Z | 2022-08-05T03:26:17.915953Z |
| pysec-2022-43072 |
7.5 (3.1)
|
An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted … | chia-blockchain | 2022-07-29T21:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43174 |
9.8 (3.1)
|
WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and glob… | wmagent | 2022-07-28T23:15:00Z | 2024-11-25T22:09:33.909779Z |
| pysec-2022-43163 |
9.8 (3.1)
|
WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and glob… | reqmon | 2022-07-28T23:15:00Z | 2024-11-25T22:09:33.909779Z |
| pysec-2022-43136 |
9.8 (3.1)
|
WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and glob… | global-workqueue | 2022-07-28T23:15:00Z | 2024-11-25T22:09:33.909779Z |
| pysec-2022-43057 |
5.5 (3.1)
|
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Mem… | pywasm3 | 2022-07-27T14:15:00+00:00 | 2023-08-17T03:22:33.522615+00:00 |
| pysec-2022-244 |
|
untangle is a python library to convert XML data to python objects. untangle versions 1.2… | untangle | 2022-07-26T06:15:00Z | 2022-08-01T20:42:29.787320Z |
| pysec-2022-243 |
|
untangle is a python library to convert XML data to python objects. untangle versions 1.2… | untangle | 2022-07-26T06:15:00Z | 2022-08-01T18:50:11.676911Z |
| pysec-2022-237 |
|
In mistune through 2.0.2, support of inline markup is implemented by using regular expres… | mistune | 2022-07-25T23:15:00Z | 2022-07-26T03:40:40.758214Z |
| pysec-2022-240 |
|
Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2. | fava | 2022-07-25T14:15:00Z | 2022-07-27T20:32:05.236760Z |
| pysec-2022-239 |
|
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due… | fava | 2022-07-25T14:15:00Z | 2022-07-27T20:32:05.196440Z |
| pysec-2022-43173 |
9.8 (3.1)
|
The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third… | wikifaces | 2022-07-22T15:15:00Z | 2024-11-21T14:23:03.244154Z |
| pysec-2022-43166 |
9.8 (3.1)
|
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inser… | scu-captcha | 2022-07-22T15:15:00+00:00 | 2022-07-29T12:45:00+00:00 |
| pysec-2022-242 |
|
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor insert… | pycrowdtangle | 2022-07-22T15:15:00Z | 2022-07-29T05:45:36.692082Z |
| pysec-2022-241 |
|
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a … | eziod | 2022-07-22T15:15:00Z | 2022-07-29T05:45:35.868408Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-526 | Malicious code in @row-components/pricing-embedded-sui (npm) | 2026-01-27T08:01:02Z | 2026-02-02T05:56:25Z |
| MAL-2026-526 | Malicious code in @row-components/pricing-embedded-sui (npm) | 2026-01-27T08:01:02Z | 2026-02-02T05:56:25Z |
| mal-2026-543 | Malicious code in tailwind-components-cli (npm) | 2026-01-27T07:59:05Z | 2026-02-02T05:56:30Z |
| MAL-2026-543 | Malicious code in tailwind-components-cli (npm) | 2026-01-27T07:59:05Z | 2026-02-02T05:56:30Z |
| mal-2026-540 | Malicious code in n8n-nodes-xkwqpzrt-jmflhvbn-dsyocgxwmkelpt (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| mal-2026-539 | Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| mal-2026-538 | Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| MAL-2026-540 | Malicious code in n8n-nodes-xkwqpzrt-jmflhvbn-dsyocgxwmkelpt (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| MAL-2026-539 | Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| MAL-2026-538 | Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| mal-2026-529 | Malicious code in fileupload-core (npm) | 2026-01-27T07:56:49Z | 2026-02-02T05:56:27Z |
| MAL-2026-529 | Malicious code in fileupload-core (npm) | 2026-01-27T07:56:49Z | 2026-02-02T05:56:27Z |
| mal-2026-528 | Malicious code in @shije/new-qs (npm) | 2026-01-27T07:55:42Z | 2026-02-02T05:56:25Z |
| MAL-2026-528 | Malicious code in @shije/new-qs (npm) | 2026-01-27T07:55:42Z | 2026-02-02T05:56:25Z |
| mal-2026-520 | Malicious code in ftm-noderpc (npm) | 2026-01-27T02:44:52Z | 2026-02-02T05:56:27Z |
| MAL-2026-520 | Malicious code in ftm-noderpc (npm) | 2026-01-27T02:44:52Z | 2026-02-02T05:56:27Z |
| mal-2026-525 | Malicious code in sandbox-hooks (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:30Z |
| mal-2026-524 | Malicious code in mapkit-example-vue (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:28Z |
| mal-2026-523 | Malicious code in mapkit-example-svelte (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:28Z |
| mal-2026-522 | Malicious code in magento-coding-standard-eslint-plugin (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:28Z |
| mal-2026-521 | Malicious code in hammer-jquery (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:27Z |
| MAL-2026-525 | Malicious code in sandbox-hooks (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:30Z |
| MAL-2026-524 | Malicious code in mapkit-example-vue (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:28Z |
| MAL-2026-523 | Malicious code in mapkit-example-svelte (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:28Z |
| MAL-2026-522 | Malicious code in magento-coding-standard-eslint-plugin (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:28Z |
| MAL-2026-521 | Malicious code in hammer-jquery (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:27Z |
| mal-2026-519 | Malicious code in @afg-ikea/ikea-modals (npm) | 2026-01-27T02:11:41Z | 2026-02-02T05:56:25Z |
| MAL-2026-519 | Malicious code in @afg-ikea/ikea-modals (npm) | 2026-01-27T02:11:41Z | 2026-02-02T05:56:25Z |
| mal-2026-518 | Malicious code in @afg-ikea/ikea-kiosk-related-components (npm) | 2026-01-27T02:11:40Z | 2026-02-02T05:56:25Z |
| mal-2026-517 | Malicious code in @afg-ikea/ikea-family-registration-module (npm) | 2026-01-27T02:11:40Z | 2026-02-02T05:56:25Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1151 | libcurl: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-05-27T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1150 | Redis: Schwachstelle ermöglicht Denial of Service | 2025-05-27T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1149 | Icinga: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-27T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1148 | vBulletin Connect: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-05-26T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1147 | Apache ActiveMQ: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-26T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1146 | Mattermost: Mehrere Schwachstellen ermöglicht nicht spezifizierten Angriff | 2025-05-26T22:00:00.000+00:00 | 2025-05-26T22:00:00.000+00:00 |
| wid-sec-w-2025-1145 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-05-26T22:00:00.000+00:00 | 2025-08-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1144 | GIMP: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-05-25T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1143 | Red Hat Enterprise Linux (python-tornado): Schwachstelle ermöglicht Denial of Service | 2025-05-25T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1142 | NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Offenlegung von Informationen, Manipulation von Dateien, und Denial of Service. | 2025-05-25T22:00:00.000+00:00 | 2025-05-25T22:00:00.000+00:00 |
| wid-sec-w-2025-1141 | Red Hat Enterprise Linux (Kernel): Schwachstelle unspezifizierten Angriff | 2025-05-25T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1140 | Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen | 2025-05-25T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1139 | IBM SPSS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-25T22:00:00.000+00:00 | 2025-05-25T22:00:00.000+00:00 |
| wid-sec-w-2025-1138 | Microsoft Windows Server 2025: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-25T22:00:00.000+00:00 | 2025-05-26T22:00:00.000+00:00 |
| wid-sec-w-2025-1137 | Bitwarden: Schwachstelle ermöglicht Cross-Site Scripting | 2025-05-25T22:00:00.000+00:00 | 2025-05-25T22:00:00.000+00:00 |
| wid-sec-w-2025-1136 | Tenable Security Nessus Network Monitor: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-05-22T22:00:00.000+00:00 | 2025-05-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1135 | Asterisk: Mehrere Schwachstellen | 2025-05-22T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1134 | Ghostscript: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-22T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1133 | Grafana: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-22T22:00:00.000+00:00 | 2025-06-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1132 | OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-22T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1131 | Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-22T22:00:00.000+00:00 | 2025-05-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1130 | Microsoft Edge: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-22T22:00:00.000+00:00 | 2025-06-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1129 | Cisco WebEx: Mehrere Schwachstellen | 2025-05-21T22:00:00.000+00:00 | 2025-05-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1128 | Cisco Identity Services Engine (ISE): Mehrere Schwachstellen | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1127 | Cisco Unified Intelligence Center und Cisco Unified Contact Center Express (UCCX): Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1126 | Google Chrome: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-05-21T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1125 | GStreamer: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1124 | Mozilla Firefox: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1123 | Cisco Unified Contact Center Enterprise: Schwachstelle ermöglicht Manipulation von Daten | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1122 | xwiki: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:0074 | Red Hat Security Advisory: httpd security update | 2026-01-05T18:00:45+00:00 | 2026-01-13T22:15:07+00:00 |
| rhsa-2026:0078 | Red Hat Security Advisory: spice-client-win security update | 2026-01-05T17:40:30+00:00 | 2026-02-10T16:53:18+00:00 |
| rhsa-2026:0061 | Red Hat Security Advisory: mariadb security update | 2026-01-05T12:22:55+00:00 | 2026-01-15T16:01:07+00:00 |
| rhsa-2026:0052 | Red Hat Security Advisory: gcc-toolset-14-binutils security update | 2026-01-05T09:16:59+00:00 | 2026-02-12T13:26:50+00:00 |
| rhsa-2026:0050 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.2 | 2026-01-05T08:04:03+00:00 | 2026-02-22T01:34:56+00:00 |
| rhsa-2026:0035 | Red Hat Security Advisory: xorg-x11-server-Xwayland security update | 2026-01-05T06:18:58+00:00 | 2026-01-05T10:10:39+00:00 |
| rhsa-2026:0033 | Red Hat Security Advisory: xorg-x11-server-Xwayland security update | 2026-01-05T06:18:08+00:00 | 2026-01-05T10:10:39+00:00 |
| rhsa-2026:0036 | Red Hat Security Advisory: xorg-x11-server-Xwayland security update | 2026-01-05T06:16:04+00:00 | 2026-01-05T10:10:41+00:00 |
| rhsa-2026:0034 | Red Hat Security Advisory: xorg-x11-server-Xwayland security update | 2026-01-05T06:11:18+00:00 | 2026-01-05T10:10:24+00:00 |
| rhsa-2026:0031 | Red Hat Security Advisory: xorg-x11-server-Xwayland security update | 2026-01-05T06:09:23+00:00 | 2026-01-05T10:10:39+00:00 |
| rhsa-2026:0029 | Red Hat Security Advisory: mod_md security update | 2026-01-05T05:28:58+00:00 | 2026-01-13T22:06:37+00:00 |
| rhsa-2026:0030 | Red Hat Security Advisory: mod_md security update | 2026-01-05T05:19:04+00:00 | 2026-01-13T22:38:27+00:00 |
| rhsa-2026:0013 | Red Hat Security Advisory: firefox security update | 2026-01-05T02:17:33+00:00 | 2026-01-06T12:46:01+00:00 |
| rhsa-2026:0016 | Red Hat Security Advisory: firefox security update | 2026-01-05T02:09:38+00:00 | 2026-01-06T12:46:02+00:00 |
| rhsa-2026:0027 | Red Hat Security Advisory: gimp:2.8 security update | 2026-01-05T02:01:48+00:00 | 2026-01-13T22:12:19+00:00 |
| rhsa-2026:0012 | Red Hat Security Advisory: httpd:2.4 security update | 2026-01-05T02:01:38+00:00 | 2026-01-13T22:31:13+00:00 |
| rhsa-2026:0011 | Red Hat Security Advisory: httpd:2.4 security update | 2026-01-05T02:00:58+00:00 | 2026-01-13T22:26:57+00:00 |
| rhsa-2026:0022 | Red Hat Security Advisory: thunderbird security update | 2026-01-05T01:57:23+00:00 | 2026-01-06T12:45:57+00:00 |
| rhsa-2026:0021 | Red Hat Security Advisory: thunderbird security update | 2026-01-05T01:56:08+00:00 | 2026-01-06T12:45:56+00:00 |
| rhsa-2026:0010 | Red Hat Security Advisory: httpd:2.4 security update | 2026-01-05T01:55:58+00:00 | 2026-01-13T22:33:57+00:00 |
| rhsa-2026:0026 | Red Hat Security Advisory: thunderbird security update | 2026-01-05T01:50:58+00:00 | 2026-01-06T12:43:13+00:00 |
| rhsa-2026:0003 | Red Hat Security Advisory: thunderbird security update | 2026-01-05T01:47:48+00:00 | 2026-01-06T12:45:59+00:00 |
| rhsa-2026:0004 | Red Hat Security Advisory: thunderbird security update | 2026-01-05T01:42:23+00:00 | 2026-01-06T12:45:59+00:00 |
| rhsa-2026:0023 | Red Hat Security Advisory: thunderbird security update | 2026-01-05T01:39:46+00:00 | 2026-01-06T12:45:56+00:00 |
| rhsa-2026:0017 | Red Hat Security Advisory: firefox security update | 2026-01-05T01:39:11+00:00 | 2026-01-06T12:46:03+00:00 |
| rhsa-2026:0014 | Red Hat Security Advisory: firefox security update | 2026-01-05T01:39:07+00:00 | 2026-01-06T12:46:02+00:00 |
| rhsa-2026:0009 | Red Hat Security Advisory: httpd:2.4 security update | 2026-01-05T01:39:00+00:00 | 2026-01-13T22:09:27+00:00 |
| rhsa-2026:0019 | Red Hat Security Advisory: thunderbird security update | 2026-01-05T01:38:55+00:00 | 2026-01-06T12:45:58+00:00 |
| rhsa-2026:0018 | Red Hat Security Advisory: firefox security update | 2026-01-05T01:37:48+00:00 | 2026-01-06T12:46:03+00:00 |
| rhsa-2026:0020 | Red Hat Security Advisory: thunderbird security update | 2026-01-05T01:37:22+00:00 | 2026-01-06T12:45:58+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-165-18 | Rockwell Automation FactoryTalk View SE | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-24-165-17 | Rockwell Automation FactoryTalk View SE | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-24-165-16 | Rockwell Automation FactoryTalk View SE | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-24-165-14 | Fuji Electric Tellus Lite V-Simulator | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-25-063-05 | Hitachi Energy UNEM/ECST | 2024-06-11T12:30:00.000000Z | 2024-06-11T12:30:00.000000Z |
| icsa-25-063-04 | Hitachi Energy XMC20 | 2024-06-11T12:30:00.000000Z | 2024-06-11T12:30:00.000000Z |
| icsa-25-030-01 | Hitachi Energy UNEM | 2024-06-11T12:30:00.000000Z | 2024-06-11T12:30:00.000000Z |
| icsa-25-016-07 | Hitachi Energy FOX61x Products | 2024-06-11T12:30:00.000000Z | 2024-06-11T12:30:00.000000Z |
| icsa-25-016-06 | Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products | 2024-06-11T12:30:00.000000Z | 2024-06-11T12:30:00.000000Z |
| icsa-25-014-01 | Hitachi Energy FOXMAN-UN | 2024-06-11T12:30:00.000000Z | 2024-10-29T13:30:00.000000Z |
| icsma-24-163-01 | MicroDicom DICOM Viewer | 2024-06-11T06:00:00.000000Z | 2024-06-11T06:00:00.000000Z |
| icsa-24-163-04 | Intrado 911 Emergency Gateway | 2024-06-11T06:00:00.000000Z | 2024-06-11T06:00:00.000000Z |
| icsa-24-163-03 | AVEVA PI Asset Framework Client | 2024-06-11T06:00:00.000000Z | 2024-06-11T06:00:00.000000Z |
| icsa-24-163-02 | AVEVA PI Web API | 2024-06-11T06:00:00.000000Z | 2024-06-11T06:00:00.000000Z |
| icsa-24-163-01 | Rockwell Automation ControlLogix, GuardLogix, and CompactLogix | 2024-06-11T06:00:00.000000Z | 2024-06-11T06:00:00.000000Z |
| icsa-25-254-09 | Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 | 2024-06-11T00:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-107-02 | Schneider Electric Sage Series | 2024-06-11T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-331-02 | Schneider Electric PowerLogic P5 | 2024-06-11T00:00:00.000000Z | 2024-09-10T00:00:00.000000Z |
| icsa-24-165-13 | Siemens SINEC Traffic Analyzer | 2024-06-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-165-12 | Siemens SCALANCE W700 | 2024-06-11T00:00:00.000000Z | 2025-01-14T00:00:00.000000Z |
| icsa-24-165-11 | Siemens SCALANCE XM-400, XR-500 | 2024-06-11T00:00:00.000000Z | 2024-06-11T00:00:00.000000Z |
| icsa-24-165-10 | Siemens SIMATIC and SIPLUS | 2024-06-11T00:00:00.000000Z | 2024-06-11T00:00:00.000000Z |
| icsa-24-165-09 | Siemens SICAM AK3/BC/TM | 2024-06-11T00:00:00.000000Z | 2024-06-11T00:00:00.000000Z |
| icsa-24-165-08 | Siemens Teamcenter Visualization and JT2Go | 2024-06-11T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-165-07 | Siemens PowerSys | 2024-06-11T00:00:00.000000Z | 2024-06-11T00:00:00.000000Z |
| icsa-24-165-06 | Siemens TIM 1531 IRC | 2024-06-11T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-165-05 | Siemens SITOP UPS1600 | 2024-06-11T00:00:00.000000Z | 2024-06-11T00:00:00.000000Z |
| icsa-24-165-04 | Siemens ST7 ScadaConnect | 2024-06-11T00:00:00.000000Z | 2024-06-11T00:00:00.000000Z |
| icsa-24-165-03 | Siemens TIA Administrator | 2024-06-11T00:00:00.000000Z | 2024-06-11T00:00:00.000000Z |
| icsa-24-165-02 | Siemens SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00.000000Z | 2024-06-11T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-snort-dos-rywh7ezm | Multiple Cisco Products Snort Rule Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-natalg-bypass-cpkgqkng | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-ftd-tls-decrypt-dos-bmxyjm8m | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-ftd-file-write-shvcmqvc | Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability | 2021-10-27T16:00:00+00:00 | 2023-05-26T11:54:17+00:00 |
| cisco-sa-ftd-enip-bypass-efsxd8kp | Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-ftd-dos-rudsew3r | Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-ftd-cmdinject-fmzsln8 | Cisco Firepower Threat Defense Software Command Injection Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-fmc-xss-openredir-tvpmwjyg | Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-fmc-infodisc-ft2wvmnu | Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-fmc-dir-traversal-95uyw5tk | Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asaftd-xss-webui-gqlsfypm | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asaftd-snmpaccess-m6yoweq3 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asaftd-rule-bypass-ejjogqey | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asaftd-ikev2-dos-g4cmrr7c | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-29T13:51:25+00:00 |
| cisco-sa-asaftd-dos-4ygzlku9 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asafdt-webvpn-dos-ksqjakpa | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asa-ftd-dos-unk689xy | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asa-ftd-dos-jxywmjyl | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-webex-2fmkd7t | Cisco Webex Software Application Authorization Bypass Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-tms-xss-cwjzjsqc | Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-sec-work-xss-t6sytu8q | Cisco Tetration Stored Cross-Site Scripting Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-sd-wan-rhpbe34a | Cisco IOS XE SD-WAN Software Command Injection Vulnerability | 2021-10-20T16:00:00+00:00 | 2022-02-17T18:13:49+00:00 |
| cisco-sa-ise-xss1-rgxyry2v | Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities | 2021-10-20T16:00:00+00:00 | 2021-11-12T18:15:57+00:00 |
| cisco-sa-ise-file-download-b3br5kqa | Cisco Identity Services Engine File Download Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-imc-gui-dos-tzjrfyzh | Cisco Integrated Management Controller GUI Denial of Service Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-cms-lahe8z5v | Cisco Meeting Server Call Bridge Denial of Service Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-12-22T17:29:02+00:00 |
| cisco-sa-apache-httpd-pathtrv-lazg68cz | Apache HTTP Server Vulnerabilities: October 2021 | 2021-10-07T16:00:00+00:00 | 2021-10-07T16:00:00+00:00 |
| cisco-sa-wsa-dos-fmhdkswk | Cisco Web Security Appliance Proxy Service Denial of Service Vulnerability | 2021-10-06T16:00:00+00:00 | 2021-10-22T15:18:37+00:00 |
| cisco-sa-ucsi2-command-inject-cgyc8y2r | Cisco Intersight Virtual Appliance Command Injection Vulnerability | 2021-10-06T16:00:00+00:00 | 2021-10-06T16:00:00+00:00 |
| cisco-sa-tpce-rmos-mem-dos-rck56tt | Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerability | 2021-10-06T16:00:00+00:00 | 2021-10-15T21:03:56+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-59494 | Azure Monitor Agent Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59295 | Windows URL Parsing Remote Code Execution Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-23T00:00:00.000Z |
| msrc_cve-2025-59294 | Windows Taskbar Live Preview Information Disclosure Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59292 | Azure Compute Gallery Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59291 | Confidential Azure Container Instances Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59290 | Windows Bluetooth Service Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59289 | Windows Bluetooth Service Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59288 | Playwright Spoofing Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59287 | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-24T00:00:00.000Z |
| msrc_cve-2025-59286 | Copilot Information Disclosure Vulnerability | 2025-10-14T00:00:00.000Z | 2025-11-21T00:00:00.000Z |
| msrc_cve-2025-59285 | Azure Monitor Agent Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59284 | Windows NTLM Spoofing Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59282 | Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59281 | Xbox Gaming Services Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59280 | Windows SMB Client Tampering Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59278 | Windows Authentication Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59277 | Windows Authentication Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59275 | Windows Authentication Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59273 | Azure Event Grid System Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-23T00:00:00.000Z |
| msrc_cve-2025-59272 | Copilot Information Disclosure Vulnerability | 2025-10-14T00:00:00.000Z | 2025-11-21T00:00:00.000Z |
| msrc_cve-2025-59271 | Redis Enterprise Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-09T00:00:00.000Z |
| msrc_cve-2025-59261 | Windows Graphics Component Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59260 | Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59259 | Windows Local Session Manager (LSM) Denial of Service Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59258 | Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59257 | Windows Local Session Manager (LSM) Denial of Service Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59255 | Windows DWM Core Library Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59254 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59253 | Windows Search Service Denial of Service Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59252 | M365 Copilot Information Disclosure Vulnerability | 2025-10-14T00:00:00.000Z | 2025-11-21T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-734 | Container-overflow in libbrotlidec.so.1 | 2023-08-24T14:02:58.433195Z | 2023-08-24T14:02:58.433472Z |
| osv-2023-728 | Use-of-uninitialized-value in aesEncryptBlock | 2023-08-24T14:00:27.838220Z | 2024-04-29T14:13:55.378729Z |
| osv-2023-726 | Heap-buffer-overflow in Flow::dissectNetBIOS | 2023-08-23T14:02:47.143481Z | 2023-08-23T14:02:47.143744Z |
| osv-2023-723 | Heap-buffer-overflow in H5MM_memcpy | 2023-08-22T14:03:07.334340Z | 2023-08-22T14:03:07.334606Z |
| osv-2023-722 | Heap-buffer-overflow in H5MM_memcpy | 2023-08-22T14:03:04.118428Z | 2025-03-18T00:42:21.984142Z |
| osv-2023-721 | Stack-buffer-overflow in crc24q_check | 2023-08-21T14:02:51.271773Z | 2023-08-21T14:02:51.272060Z |
| osv-2023-719 | Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString | 2023-08-21T14:02:38.497581Z | 2023-08-21T14:02:38.497866Z |
| osv-2023-717 | Heap-buffer-overflow in bit_TV_to_utf8_codepage | 2023-08-21T14:00:28.036480Z | 2023-12-01T14:22:18.777534Z |
| osv-2023-715 | Stack-use-after-scope in ulocimp_addLikelySubtags_74 | 2023-08-21T14:00:19.885505Z | 2023-08-23T15:32:00.801902Z |
| osv-2023-714 | Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields | 2023-08-19T14:02:15.130219Z | 2023-08-19T14:02:15.130475Z |
| osv-2023-710 | Heap-buffer-overflow in Flow::dissectMDNS | 2023-08-19T14:00:12.746394Z | 2023-08-19T14:00:12.746652Z |
| osv-2023-709 | Heap-buffer-overflow in QOIHandler::read | 2023-08-18T14:02:53.146275Z | 2023-08-20T14:15:45.069773Z |
| osv-2023-705 | Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton | 2023-08-17T14:00:59.717535Z | 2023-08-19T14:26:28.816770Z |
| osv-2023-697 | Heap-buffer-overflow in IEC104Stats::processPacket | 2023-08-15T14:01:02.977387Z | 2023-08-15T14:01:02.977646Z |
| osv-2023-696 | Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone | 2023-08-14T14:00:47.094365Z | 2023-08-14T14:00:47.094611Z |
| osv-2023-693 | Security exception in org.json.JSONArray.writeTo | 2023-08-13T14:00:24.146135Z | 2023-08-13T14:00:24.146368Z |
| osv-2023-692 | Invalid-free in reset_context | 2023-08-13T14:00:16.114233Z | 2024-09-01T14:21:14.987075Z |
| osv-2023-689 | Use-of-uninitialized-value | 2023-08-12T14:02:14.530750Z | 2023-08-12T14:02:14.531027Z |
| osv-2023-688 | Invalid-free in Flow::~Flow | 2023-08-12T14:00:58.558753Z | 2023-08-12T14:00:58.559035Z |
| osv-2023-685 | Invalid-free in reset_context | 2023-08-11T14:02:10.018940Z | 2024-09-01T14:21:29.336035Z |
| osv-2023-684 | Heap-use-after-free in __xmlRaiseError | 2023-08-11T14:02:03.986718Z | 2023-08-11T14:02:03.986997Z |
| osv-2023-680 | Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren | 2023-08-11T14:00:29.963332Z | 2023-08-11T14:00:29.963569Z |
| osv-2023-675 | Heap-use-after-free in parse_options | 2023-08-09T14:02:25.748940Z | 2024-04-29T14:13:24.917092Z |
| osv-2023-674 | Heap-buffer-overflow in get_grouplength | 2023-08-09T14:02:09.770996Z | 2023-08-09T14:02:09.771217Z |
| osv-2023-673 | Heap-buffer-overflow in match | 2023-08-09T14:01:09.834447Z | 2023-08-09T14:01:09.834676Z |
| osv-2023-665 | Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren | 2023-08-08T14:02:01.481029Z | 2023-08-08T14:02:01.481263Z |
| osv-2023-663 | Segv on unknown address in decUnitCompare | 2023-08-08T14:00:59.624933Z | 2023-08-08T14:00:59.625154Z |
| osv-2023-662 | Security exception in org.apache.commons.io.IOUtils.byteArray | 2023-08-08T14:00:57.801101Z | 2023-08-08T14:00:57.801377Z |
| osv-2023-660 | Security exception in org.apache.poi.hwpf.model.StyleSheet.createPap | 2023-08-08T14:00:31.168112Z | 2023-08-08T14:00:31.168352Z |
| osv-2023-645 | Segv on unknown address in decUnitCompare | 2023-08-04T14:02:38.270949Z | 2023-08-04T14:02:38.271192Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2019-0024 | Test advisory with associated example crate | 2019-10-08T12:00:00Z | 2022-11-05T17:45:24Z |
| rustsec-2019-0030 | Incorrect implementation of the Streebog hash functions | 2019-10-06T12:00:00Z | 2023-11-02T13:03:48Z |
| rustsec-2019-0025 | Flaw in CBOR deserializer allows stack overflow | 2019-10-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0022 | Stream callback function is not unwind safe | 2019-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0021 | `Matrix::zip_elements` causes double free | 2019-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0020 | fix unsound APIs that could lead to UB | 2019-09-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0018 | Internally mutating methods take immutable ref self | 2019-09-02T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0017 | Panic during initialization of Lazy<T> might trigger undefined behavior | 2019-09-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0016 | Use-after-free in buffer conversion implementation | 2019-09-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0013 | Wrong memory orderings in RwLock potentially violates mutual exclusion | 2019-08-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0019 | HMAC-BLAKE2 algorithms compute incorrect results | 2019-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0023 | Cloned interners may read already dropped strings | 2019-08-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0014 | Flaw in interface may drop uninitialized instance of arbitrary types | 2019-08-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0012 | Memory corruption in SmallVec::grow() | 2019-07-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0011 | Flaw in offset_of and span_of causes SIGILL, drops uninitialized memory of arbitrary type on panic in client code | 2019-07-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0010 | MultiDecoder::read() drops uninitialized memory of arbitrary type on panic in client code | 2019-07-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0008 | Flaw in string parsing can lead to crashes due to invalid memory access. | 2019-06-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0040 | `boxfnonce` obsolete with release of Rust 1.35.0 | 2019-06-20T12:00:00Z | 2023-03-12T07:15:02Z |
| rustsec-2019-0006 | Buffer overflow and format vulnerabilities in functions exposed without unsafe | 2019-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0005 | Format string vulnerabilities in `pancurses` | 2019-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0007 | Processing of maliciously crafted length fields causes memory allocation SIGABRTs | 2019-06-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0037 | Compiler optimisation for next_with_timeout in pnet::transport::IcmpTransportChannelIterator flaws to SEGFAULT | 2019-06-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0003 | Out of Memory in stream::read_raw_bytes_into() | 2019-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0009 | Double-free and use-after-free in SmallVec::grow() | 2019-06-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0015 | Flaw in generativity allows out-of-bounds access | 2019-05-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0004 | Failure to properly verify ed25519 signatures makes any signature valid | 2019-05-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0002 | Bug in SliceDeque::move_head_unchecked corrupts its memory | 2019-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0001 | Uncontrolled recursion leads to abort in HTML serialization | 2019-04-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0035 | Unaligned memory access | 2019-04-19T12:00:00Z | 2021-10-19T22:14:35Z |
| rustsec-2019-0039 | typemap is Unmaintained | 2019-04-06T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-moodle-2024-37674 | 2025-06-14T05:58:57.591Z | 2025-08-20T09:06:12.327Z | |
| bit-golang-2025-4673 | Sensitive headers not cleared on cross-origin redirect in net/http | 2025-06-14T05:46:50.602Z | 2025-07-11T17:31:26.637Z |
| bit-golang-2025-22874 | Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | 2025-06-14T05:46:46.992Z | 2025-07-09T16:46:18.959Z |
| bit-golang-2025-0913 | Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall | 2025-06-14T05:46:34.191Z | 2025-07-11T17:31:26.637Z |
| bit-kibana-2024-43706 | Kibana Improper Authorization | 2025-06-14T05:44:15.801Z | 2025-10-02T15:07:00.184Z |
| bit-kafka-2025-27819 | Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration | 2025-06-14T05:43:46.786Z | 2025-06-14T06:16:31.200Z |
| bit-kafka-2025-27818 | Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration | 2025-06-14T05:43:43.718Z | 2025-06-14T06:16:31.200Z |
| bit-elk-2024-43706 | Kibana Improper Authorization | 2025-06-14T05:38:22.709Z | 2025-10-02T15:07:00.184Z |
| bit-setuptools-2025-47273 | setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write | 2025-06-13T06:13:15.751Z | 2025-06-13T06:33:01.663Z |
| bit-moodle-2024-48900 | Moodle: idor when accessing list of badge recipients | 2025-06-13T06:12:34.451Z | 2025-06-13T06:33:01.663Z |
| bit-discourse-2025-48877 | Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframe | 2025-06-11T11:45:07.067Z | 2025-06-11T12:17:36.925Z |
| bit-discourse-2025-48062 | Discourse vulnerable to HTML injection when inviting to topic via email | 2025-06-11T11:45:04.167Z | 2025-08-26T06:08:52.180Z |
| bit-discourse-2025-48053 | Discourse vulnerable to DoS via large URL payload in PM to a bot | 2025-06-11T11:45:01.073Z | 2025-06-11T12:17:36.925Z |
| bit-pytorch-2024-31583 | 2025-06-11T05:57:26.054Z | 2025-06-11T06:16:36.747Z | |
| bit-pytorch-2024-31580 | 2025-06-11T05:57:22.768Z | 2025-06-11T06:16:36.747Z | |
| bit-joomla-2025-25227 | [20250402] - Joomla Core - MFA Authentication Bypass | 2025-06-05T05:48:56.271Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2025-25226 | [20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package | 2025-06-05T05:48:52.765Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-40749 | [20250103] - Core - Read ACL violation in multiple core views | 2025-06-05T05:48:49.350Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-40748 | [20250102] - Core - XSS vector in the id attribute of menu lists | 2025-06-05T05:48:45.980Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-40747 | [20250101] - Core - XSS vectors in module chromes | 2025-06-05T05:48:42.573Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-40743 | [20240805] - Core - XSS vectors in Outputfilter::strip* methods | 2025-06-05T05:48:39.250Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-27187 | [20240804] - Core - Improper ACL for backend profile view | 2025-06-05T05:48:35.583Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-27186 | [20240803] - Core - XSS in HTML Mail Templates | 2025-06-05T05:48:32.052Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-27185 | [20240802] - Core - Cache Poisoning in Pagination | 2025-06-05T05:48:28.569Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-27184 | [20240801] - Core - Inadequate validation of internal URLs | 2025-06-05T05:48:25.183Z | 2025-06-05T06:15:32.323Z |
| bit-pytorch-2024-31584 | 2025-06-04T14:56:56.215Z | 2025-06-04T15:15:46.482Z | |
| bit-modsecurity2-2025-48866 | ModSecurity has possible DoS vulnerability in sanitiseArg action | 2025-06-04T14:48:01.890Z | 2025-06-10T07:53:49.719Z |
| bit-modsecurity-2025-48866 | ModSecurity has possible DoS vulnerability in sanitiseArg action | 2025-06-04T14:47:59.719Z | 2025-06-10T07:53:49.719Z |
| bit-grafana-2025-3454 | 2025-06-04T14:44:58.591Z | 2025-06-04T15:15:46.482Z | |
| bit-grafana-2025-3260 | 2025-06-04T14:44:55.391Z | 2025-06-04T15:15:46.482Z |
| ID | Description | Updated |
|---|---|---|
| var-202205-0881 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.49… | 2024-07-23T20:29:37.848000Z |
| var-201302-0305 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T20:29:37.668000Z |
| var-201912-0646 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:29:33.187000Z |
| var-200512-0634 | passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 al… | 2024-07-23T20:29:02.384000Z |
| var-202010-1512 | An input validation issue was addressed with improved input validation. This issue is fix… | 2024-07-23T20:29:01.717000Z |
| var-202006-0222 | libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C sub… | 2024-07-23T20:28:59.964000Z |
| var-200102-0007 | WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood… | 2024-07-23T20:28:59.862000Z |
| var-201403-0514 | The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certa… | 2024-07-23T20:28:55.089000Z |
| var-200701-0014 | Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows lo… | 2024-07-23T20:28:55.996000Z |
| var-200112-0223 | Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (… | 2024-07-23T20:28:55.223000Z |
| var-201311-0379 | The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not pro… | 2024-07-23T20:27:48.646000Z |
| var-201006-1142 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-07-23T20:27:48.807000Z |
| var-200904-0794 | Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows rem… | 2024-07-23T20:27:48.713000Z |
| var-200708-0604 | The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and late… | 2024-07-23T20:27:48.307000Z |
| var-201601-0495 | Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x bef… | 2024-07-23T20:27:47.728000Z |
| var-200701-0340 | The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428… | 2024-07-23T20:27:11.499000Z |
| var-201912-0647 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:26:07.934000Z |
| var-201912-0542 | This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Moj… | 2024-07-23T20:26:04.490000Z |
| var-200309-0035 | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may… | 2024-07-23T20:26:04.438000Z |
| var-202110-1512 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS… | 2024-07-23T20:26:00.417000Z |
| var-200807-0062 | JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not pr… | 2024-07-23T20:26:00.063000Z |
| var-202210-1528 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-07-23T20:25:59.725000Z |
| var-202106-1921 | A security issue in nginx resolver was identified, which might allow an attacker who is a… | 2024-07-23T20:25:59.461000Z |
| var-202004-0983 | Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager… | 2024-07-23T20:25:59.004000Z |
| var-202201-0370 | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. The… | 2024-07-23T20:25:58.764000Z |
| var-202104-1571 | A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lea… | 2024-07-23T20:25:58.423000Z |
| var-201405-0543 | Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filter… | 2024-07-23T20:25:58.247000Z |
| var-200703-0025 | The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not suffici… | 2024-07-23T20:25:58.189000Z |
| var-202006-1838 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested… | 2024-07-23T20:25:57.515000Z |
| var-201304-0381 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:25:24.023000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000080 | baserCMS vulnerable to cross-site scripting | 2021-08-27T13:29+09:00 | 2021-08-27T13:29+09:00 |
| jvndb-2021-000079 | Multiple cross-site scripting vulnerabilities in Movable Type | 2021-08-25T14:54+09:00 | 2021-08-25T14:54+09:00 |
| jvndb-2021-000078 | The installers of multiple Sony products may insecurely load Dynamic Link Libraries | 2021-08-24T14:30+09:00 | 2021-08-24T14:30+09:00 |
| jvndb-2021-002282 | Multiple vulnerabilities in Navigate CMS | 2021-08-20T14:25+09:00 | 2021-08-20T14:25+09:00 |
| jvndb-2021-002279 | Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises | 2021-08-19T15:01+09:00 | 2021-08-19T15:01+09:00 |
| jvndb-2021-000077 | Huawei EchoLife HG8045Q vulnerable to OS command injection | 2021-08-17T14:24+09:00 | 2021-08-17T14:24+09:00 |
| jvndb-2021-002273 | Multiple vulnerabilities in D-Link router DSL-2750U | 2021-08-17T14:09+09:00 | 2021-08-17T14:09+09:00 |
| jvndb-2021-000076 | Plone vulnerable to open redirect | 2021-08-12T14:05+09:00 | 2021-08-12T14:05+09:00 |
| jvndb-2021-000075 | WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting | 2021-08-10T14:40+09:00 | 2021-08-10T14:40+09:00 |
| jvndb-2021-002077 | Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises | 2021-08-04T11:15+09:00 | 2021-08-04T11:15+09:00 |
| jvndb-2021-000073 | Multiple vulnerabilities in Cybozu Garoon | 2021-08-02T16:42+09:00 | 2022-05-24T15:16+09:00 |
| jvndb-2021-000072 | Minecraft Java Edition vulnerable to directory traversal | 2021-07-21T15:12+09:00 | 2021-07-21T15:12+09:00 |
| jvndb-2021-002005 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting | 2021-07-19T16:53+09:00 | 2021-07-19T16:53+09:00 |
| jvndb-2021-000070 | Multiple vulnerabilities in GroupSession | 2021-07-19T15:41+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000069 | Optical BB unit E-WMTA2.3 vulnerable to cross-site request forgery | 2021-07-14T17:13+09:00 | 2021-07-14T17:13+09:00 |
| jvndb-2021-000068 | Multiple vulnerabilities in Retty App | 2021-07-13T14:34+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000067 | voidtools "Everything" vulnerable to HTTP header injection | 2021-07-09T14:40+09:00 | 2021-07-09T14:40+09:00 |
| jvndb-2021-000065 | WordPress Plugin "WordPress Meta Data Filter & Taxonomies Filter" vulnerable to cross-site request forgery | 2021-07-08T14:29+09:00 | 2021-07-08T14:29+09:00 |
| jvndb-2021-000066 | WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery | 2021-07-08T13:45+09:00 | 2021-07-08T13:45+09:00 |
| jvndb-2021-001977 | Multiple vulnerabilities in Elecom routers | 2021-07-07T14:03+09:00 | 2021-07-12T16:04+09:00 |
| jvndb-2021-000064 | GU App for Android fails to restrict access permissions | 2021-07-07T13:16+09:00 | 2021-07-07T13:16+09:00 |
| jvndb-2021-001968 | Multiple vulnerabilities in Trend Micro Password Manager | 2021-07-06T16:08+09:00 | 2021-07-06T16:08+09:00 |
| jvndb-2021-000063 | WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery | 2021-07-06T14:50+09:00 | 2021-07-06T14:50+09:00 |
| jvndb-2021-000062 | WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery | 2021-07-06T14:11+09:00 | 2021-07-06T14:11+09:00 |
| jvndb-2021-000061 | A-Stage SCT-40CM01SR and AT-40CM01SR vulnerable to authentication bypass | 2021-07-05T14:28+09:00 | 2021-07-05T14:28+09:00 |
| jvndb-2021-000059 | EC-CUBE fails to restrict access permissions | 2021-07-01T15:49+09:00 | 2021-07-01T15:49+09:00 |
| jvndb-2007-002102 | boastMachine vulnerable to cross-site scripting | 2021-06-30T14:32+09:00 | 2021-06-30T14:32+09:00 |
| jvndb-2021-000058 | IkaIka RSS Reader vulnerable to cross-site scripting | 2021-06-30T14:21+09:00 | 2021-06-30T14:21+09:00 |
| jvndb-2021-000056 | WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting | 2021-06-30T11:36+09:00 | 2021-06-30T11:36+09:00 |
| jvndb-2021-000057 | Multiple cross-site scripting vulnerabilities in EC-CUBE | 2021-06-23T15:15+09:00 | 2021-06-23T15:15+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:3996-1 | Security update for java-11-openjdk | 2025-11-07T15:48:31Z | 2025-11-07T15:48:31Z |
| suse-su-2025:3995-1 | Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7) | 2025-11-07T15:33:40Z | 2025-11-07T15:33:40Z |
| suse-su-2025:3989-1 | Security update for tiff | 2025-11-07T13:44:29Z | 2025-11-07T13:44:29Z |
| suse-su-2025:3987-1 | Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP7) | 2025-11-07T13:03:43Z | 2025-11-07T13:03:43Z |
| suse-su-2025:3986-1 | Security update for gpg2 | 2025-11-07T10:31:06Z | 2025-11-07T10:31:06Z |
| suse-su-2025:3985-1 | Security update for ImageMagick | 2025-11-07T10:30:54Z | 2025-11-07T10:30:54Z |
| suse-su-2025:3983-1 | Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6) | 2025-11-06T21:33:47Z | 2025-11-06T21:33:47Z |
| suse-su-2025:20996-1 | Security update for the Linux Kernel | 2025-11-06T15:51:37Z | 2025-11-06T15:51:37Z |
| suse-su-2025:3978-1 | Security update for ImageMagick | 2025-11-06T15:43:10Z | 2025-11-06T15:43:10Z |
| suse-su-2025:20994-1 | Security update for the Linux Kernel | 2025-11-06T15:30:43Z | 2025-11-06T15:30:43Z |
| suse-su-2025:3976-1 | Security update for bind | 2025-11-06T13:14:37Z | 2025-11-06T13:14:37Z |
| suse-su-2025:3970-1 | Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP6) | 2025-11-06T12:03:46Z | 2025-11-06T12:03:46Z |
| suse-su-2025:20991-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-11-06T11:20:15Z | 2025-11-06T11:20:15Z |
| suse-su-2025:20960-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-11-06T11:20:15Z | 2025-11-06T11:20:15Z |
| suse-su-2025:20959-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-11-06T11:20:15Z | 2025-11-06T11:20:15Z |
| suse-su-2025:20971-1 | Security update for tiff | 2025-11-06T11:07:55Z | 2025-11-06T11:07:55Z |
| suse-su-2025:3966-1 | Security update for fetchmail | 2025-11-06T10:48:18Z | 2025-11-06T10:48:18Z |
| suse-su-2025:3965-1 | Security update for java-1_8_0-ibm | 2025-11-06T10:47:33Z | 2025-11-06T10:47:33Z |
| suse-su-2025:3964-1 | Security update for java-1_8_0-ibm | 2025-11-06T10:46:49Z | 2025-11-06T10:46:49Z |
| suse-su-2025:3961-1 | Security update for tiff | 2025-11-06T09:19:55Z | 2025-11-06T09:19:55Z |
| suse-su-2025:20981-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-11-05T16:34:28Z | 2025-11-05T16:34:28Z |
| suse-su-2025:20955-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-11-05T16:34:28Z | 2025-11-05T16:34:28Z |
| suse-su-2025:20980-1 | Security update for kernel-livepatch-MICRO-6-0_Update_8 | 2025-11-05T16:34:09Z | 2025-11-05T16:34:09Z |
| suse-su-2025:20956-1 | Security update for kernel-livepatch-MICRO-6-0_Update_8 | 2025-11-05T16:34:09Z | 2025-11-05T16:34:09Z |
| suse-su-2025:20990-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_12 | 2025-11-05T16:33:56Z | 2025-11-05T16:33:56Z |
| suse-su-2025:20989-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-11-05T16:33:56Z | 2025-11-05T16:33:56Z |
| suse-su-2025:20954-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_12 | 2025-11-05T16:33:56Z | 2025-11-05T16:33:56Z |
| suse-su-2025:20953-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-11-05T16:33:56Z | 2025-11-05T16:33:56Z |
| suse-su-2025:20979-1 | Security update for kernel-livepatch-MICRO-6-0_Update_11 | 2025-11-05T16:33:53Z | 2025-11-05T16:33:53Z |
| suse-su-2025:20958-1 | Security update for kernel-livepatch-MICRO-6-0_Update_11 | 2025-11-05T16:33:53Z | 2025-11-05T16:33:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-30213 | NVIDIA TAO资源加载漏洞 | 2025-12-04 | 2025-12-05 |
| cnvd-2025-29924 | Meta React Server Components远程代码执行漏洞 | 2025-12-04 | 2025-12-04 |
| cnvd-2025-29923 | ZEIT Next.js远程代码执行漏洞 | 2025-12-04 | 2025-12-04 |
| cnvd-2026-05362 | ChurchCRM 时间型盲SQL注入漏洞 | 2025-12-03 | 2026-01-19 |
| cnvd-2026-04449 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976472） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04448 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976469） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04447 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976466） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04446 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976462） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04445 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976459） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04444 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976458） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04443 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976457） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04442 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976455） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-03544 | Blood Bank Management System rprofile.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03543 | Blood Bank Management System receiverLogin.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03542 | Blood Bank Management System login.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03541 | Blood Bank Management System hprofile.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03540 | Blood Bank Management System cancel.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03539 | Blood Bank Management System blooddinfo.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03538 | Blood Bank Management System abs.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03537 | Blood Bank Management System abs.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-00140 | Huawei HarmonyOS/EMUI释放后重用漏洞 | 2025-12-03 | 2026-01-05 |
| cnvd-2026-00139 | Huawei HarmonyOS/EMUI访问无效内存漏洞 | 2025-12-03 | 2026-01-05 |
| cnvd-2026-00138 | Huawei HarmonyOS/EMUI权限控制漏洞（CNVD-2026-00138） | 2025-12-03 | 2026-01-05 |
| cnvd-2026-00023 | Apache Kvrocks权限提升漏洞 | 2025-12-03 | 2026-01-04 |
| cnvd-2026-00022 | Apache bRPC拒绝服务漏洞（CNVD-2026-00022） | 2025-12-03 | 2026-01-04 |
| cnvd-2025-30579 | Apache Kvrocks信息泄露漏洞 | 2025-12-03 | 2025-12-12 |
| cnvd-2025-30566 | Apache SkyWalking跨站脚本漏洞（CNVD-2025-30566） | 2025-12-03 | 2025-12-12 |
| cnvd-2025-30565 | Apache CloudStack访问控制错误漏洞（CNVD-2025-30565） | 2025-12-03 | 2025-12-12 |
| cnvd-2025-30511 | LIVE555 Streaming Media空指针取消引用漏洞 | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30510 | LIVE555 Streaming Media释放后重用漏洞（CNVD-2025-30510） | 2025-12-03 | 2025-12-11 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0901 | Vulnérabilité dans Google Chrome | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0900 | Multiples vulnérabilités dans Centreon Web | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0912 | Vulnérabilité dans SolarWinds Observability | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0911 | Multiples vulnérabilités dans Oracle Weblogic | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0910 | Multiples vulnérabilités dans Oracle Virtualization | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0909 | Multiples vulnérabilités dans Oracle Systems | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0908 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0907 | Multiples vulnérabilités dans Oracle MySQL | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0906 | Multiples vulnérabilités dans Oracle Java SE | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0905 | Multiples vulnérabilités dans Oracle Database Server | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0904 | Multiples vulnérabilités dans GitLab | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0903 | Multiples vulnérabilités dans les produits Atlassian | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0902 | Multiples vulnérabilités dans Xen | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0901 | Vulnérabilité dans Google Chrome | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| CERTFR-2025-AVI-0900 | Multiples vulnérabilités dans Centreon Web | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0899 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0898 | Vulnérabilité dans Microsoft Edge | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0897 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| CERTFR-2025-AVI-0899 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| CERTFR-2025-AVI-0898 | Vulnérabilité dans Microsoft Edge | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| CERTFR-2025-AVI-0897 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0896 | Multiples vulnérabilités dans les produits IBM | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0895 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0894 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0893 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0892 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0891 | Vulnérabilité dans MongoDB Connector for BI pour Windows | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0890 | Multiples vulnérabilités dans les produits Moxa | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0889 | Vulnérabilité dans Squid | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| CERTFR-2025-AVI-0896 | Multiples vulnérabilités dans les produits IBM | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |