Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-4jf5-rmwc-7vww | The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System … | 2025-12-26T18:30:26Z | 2025-12-26T18:30:27Z |
| ghsa-x2hf-qg23-rjpx | An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute … | 2025-12-26T18:30:26Z | 2025-12-26T18:30:26Z |
| ghsa-v82x-ghcg-c238 | A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as a… | 2025-12-26T15:30:17Z | 2025-12-26T18:30:26Z |
| ghsa-fmqj-pm68-cqq4 | SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-det… | 2025-12-26T15:30:17Z | 2025-12-26T18:30:26Z |
| ghsa-chq3-v87j-fwq5 | An issue was discovered in the Delight Custom Firmware (CFW) for Nokia Symbian Belle devices on Nok… | 2025-12-26T15:30:17Z | 2025-12-26T18:30:26Z |
| ghsa-8qx7-g43x-4mhm | An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to obtain sens… | 2025-12-26T18:30:26Z | 2025-12-26T18:30:26Z |
| ghsa-pffp-qx9q-h7v4 | Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control… | 2025-11-15T00:30:26Z | 2025-12-26T18:30:24Z |
| ghsa-h78q-4j5r-86xx | Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.… | 2025-12-26T18:30:24Z | 2025-12-26T18:30:24Z |
| ghsa-xh99-hw7h-wf63 | Unchecked validity of Facing values in PlayerActionPacket | 2022-01-13T22:25:44Z | 2025-12-26T17:30:07Z |
| ghsa-wjfq-88q2-r34j | Unhandled exception when decoding form response JSON | 2022-01-21T23:02:14Z | 2025-12-26T17:29:53Z |
| ghsa-46c5-pfj8-fv65 | Improperly checked metadata on tools/armour itemstacks received from the client | 2022-03-18T22:36:03Z | 2025-12-26T17:29:39Z |
| ghsa-g5rr-p69h-7v3g | Insufficient type validation in pocketmine/pocketmine-mp | 2022-04-22T20:57:12Z | 2025-12-26T17:29:16Z |
| ghsa-gj94-v4p9-w672 | Denial-of-service vulnerability processing large chat messages containing many newlines | 2022-05-25T22:34:01Z | 2025-12-26T17:29:04Z |
| ghsa-fqx3-r75h-vc89 | Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP | 2022-06-07T21:07:31Z | 2025-12-26T17:28:57Z |
| ghsa-wqqv-jcfr-9f5g | PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash | 2023-01-09T20:07:27Z | 2025-12-26T17:28:42Z |
| ghsa-7wrv-6h42-w54f | PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket | 2023-07-14T21:50:42Z | 2025-12-26T17:28:18Z |
| ghsa-9rmp-2568-59rv | rPGP Panics on Malformed Untrusted Input | 2024-12-05T17:30:52Z | 2025-12-26T16:30:25Z |
| ghsa-pcqx-8qww-7f4v | OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custo… | 2025-12-15T18:30:39Z | 2025-12-26T16:30:12Z |
| ghsa-rh9m-3jjg-79rv | IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to HTML injection. A remote attacker could… | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-mrrq-9gcx-wv49 | IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from … | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-hjxw-q6qf-prmj | IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race… | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-gp88-9wrc-jxf5 | IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass au… | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-cqcr-6gvh-8xmg | IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user inte… | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-cjc8-9v4p-h4r5 | IBM Db2 Intelligence Center 1.1.0, 1.1.1, 1.1.2 could allow an authenticated user to perform unauth… | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-737v-mrx7-86p3 | IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper … | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-4gh5-5w79-82mv | IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89… | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-28p8-98p7-q6xq | IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 could allow authenticated users to enumerate sensitive i… | 2025-12-26T15:30:17Z | 2025-12-26T15:30:17Z |
| ghsa-x3r8-2hmh-89f5 | Mattermost has an Invite Token Replay Vulnerability via Channel Membership Manipulation | 2025-12-17T21:30:48Z | 2025-12-26T15:17:57Z |
| ghsa-wjc4-73q6-gv3m | plotly.js prototype pollution vulnerability | 2024-01-03T06:30:27Z | 2025-12-26T15:16:48Z |
| ghsa-vpq5-q5gw-c89v | Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with ac… | 2025-12-26T09:30:17Z | 2025-12-26T09:30:17Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-15141 | Halo Configuration actuator information disclosure |
n/a |
Halo |
2025-12-28T15:02:05.484Z | 2025-12-29T16:30:18.082Z | |
| cve-2025-15142 | 9786 phpok3w show.php sql injection |
9786 |
phpok3w |
2025-12-28T15:32:12.734Z | 2025-12-29T16:26:52.591Z | |
| cve-2025-15143 | EyouCMS Backend Template Management FilemanagerLogic.p… |
n/a |
EyouCMS |
2025-12-28T16:02:08.347Z | 2025-12-29T16:24:22.854Z | |
| cve-2025-69200 | phpMyFAQ has unauthenticated config backup download vi… |
thorsten |
phpMyFAQ |
2025-12-29T15:24:51.844Z | 2025-12-29T16:14:32.476Z | |
| cve-2025-68951 | phpMyFAQ has stored XSS in admin "List of users" via d… |
thorsten |
phpMyFAQ |
2025-12-29T15:18:58.000Z | 2025-12-29T16:13:54.598Z | |
| cve-2025-68929 | Frappe may be vulnerable remote code execution due to … |
frappe |
frappe |
2025-12-29T15:10:59.510Z | 2025-12-29T16:13:17.680Z | |
| cve-2025-68928 | Frappe CRM vulnerable to authenticated XSS via website field |
frappe |
crm |
2025-12-29T15:06:31.756Z | 2025-12-29T16:12:29.988Z | |
| cve-2025-15192 | D-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 c… |
D-Link |
DWR-M920 |
2025-12-29T14:32:08.392Z | 2025-12-29T16:11:38.000Z | |
| cve-2025-15193 | D-Link DWR-M920 formParentControl sub_423848 buffer overflow |
D-Link |
DWR-M920 |
2025-12-29T15:02:08.698Z | 2025-12-29T16:10:51.648Z | |
| cve-2025-15194 | D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow |
D-Link |
DIR-600 |
2025-12-29T15:32:09.818Z | 2025-12-29T16:10:13.239Z | |
| cve-2025-15169 | BiggiDroid Simple PHP CMS editsite.php sql injection |
BiggiDroid |
Simple PHP CMS |
2025-12-29T03:02:09.145Z | 2025-12-29T16:09:31.243Z | |
| cve-2025-15160 | Tenda WH450 PPTPServer stack-based overflow |
Tenda |
WH450 |
2025-12-28T22:32:07.881Z | 2025-12-29T16:08:39.716Z | |
| cve-2025-15150 | PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_fr… |
PX4 |
PX4-Autopilot |
2025-12-28T19:02:07.960Z | 2025-12-29T16:08:11.074Z | |
| cve-2025-15156 | omec-project UPF PFCP Session Establishment Request me… |
omec-project |
UPF |
2025-12-28T22:02:06.001Z | 2025-12-29T16:08:01.587Z | |
| cve-2025-15140 | saiftheboss7 onlinemcqexam quesadd.php sql injection |
saiftheboss7 |
onlinemcqexam |
2025-12-28T14:32:06.750Z | 2025-12-29T16:07:22.328Z | |
| cve-2025-15139 | TRENDnet TEW-822DRE formWsc sub_43ACF4 command injection |
TRENDnet |
TEW-822DRE |
2025-12-28T14:02:07.407Z | 2025-12-29T16:06:45.224Z | |
| cve-2025-15128 | ZKTeco BioTime Endpoint safe_setting credentials storage |
ZKTeco |
BioTime |
2025-12-28T08:32:10.069Z | 2025-12-29T16:06:03.528Z | |
| cve-2025-15123 | JeecgBoot datarule improper authorization |
n/a |
JeecgBoot |
2025-12-28T06:02:05.781Z | 2025-12-29T16:05:08.309Z | |
| cve-2025-15124 | JeecgBoot list getParameterMap improper authorization |
n/a |
JeecgBoot |
2025-12-28T06:32:06.920Z | 2025-12-29T16:04:32.586Z | |
| cve-2025-15125 | JeecgBoot queryDepartPermission improper authorization |
n/a |
JeecgBoot |
2025-12-28T07:02:06.680Z | 2025-12-29T16:03:49.238Z | |
| cve-2025-15126 | JeecgBoot getPositionUserList improper authorization |
n/a |
JeecgBoot |
2025-12-28T07:32:06.264Z | 2025-12-29T16:03:06.162Z | |
| cve-2025-15127 | FantasticLBP Hotels_Server Room.php sql injection |
FantasticLBP |
Hotels_Server |
2025-12-28T08:02:06.225Z | 2025-12-29T16:02:17.068Z | |
| cve-2025-14177 | 6.3 (v4.0) | Information Leak of Memory in getimagesize |
PHP Group |
PHP |
2025-12-27T19:33:23.973Z | 2025-12-29T16:01:36.231Z |
| cve-2025-14178 | 6.5 (v3.1) | Heap buffer overflow in array_merge() |
PHP Group |
PHP |
2025-12-27T19:27:41.691Z | 2025-12-29T16:01:02.639Z |
| cve-2025-14180 | 8.2 (v4.0) | NULL Pointer Dereference in PDO quoting |
PHP Group |
PHP |
2025-12-27T19:21:20.768Z | 2025-12-29T16:00:11.239Z |
| cve-2025-15109 | jackq XCMS upload.php unrestricted upload |
jackq |
XCMS |
2025-12-27T18:32:08.961Z | 2025-12-29T15:59:07.141Z | |
| cve-2025-15108 | PandaXGO PandaX JWT Secret config.yml hard-coded key |
PandaXGO |
PandaX |
2025-12-27T16:32:05.829Z | 2025-12-29T15:58:13.566Z | |
| cve-2025-15107 | actiontech sqle JWT Secret jwt.go hard-coded key |
actiontech |
sqle |
2025-12-27T12:32:06.081Z | 2025-12-29T15:57:28.455Z | |
| cve-2025-15106 | getmaxun Authentication Endpoint auth.ts router.get im… |
getmaxun |
maxun |
2025-12-27T10:32:05.218Z | 2025-12-29T15:56:17.889Z | |
| cve-2025-15105 | getmaxun auth.ts hard-coded key |
getmaxun |
maxun |
2025-12-27T09:02:06.124Z | 2025-12-29T15:55:05.915Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2024-22771 | 7.4 (v3.1) | Hitron Systems DVR LGUVR-4H Improper Input Validation … |
Hitron Systems |
DVR LGUVR-4H |
2024-01-23T04:49:10.800Z | 2024-10-22T03:55:42.957Z |
| cve-2024-23842 | 7.4 (v3.1) | Hitron Systems DVR LGUVR-16H Improper Input Validation… |
Hitron Systems DVR |
DVR LGUVR-16H |
2024-01-23T04:56:41.242Z | 2025-09-15T13:58:10.062Z |
| cve-2025-55311 | N/A | An issue was discovered in Foxit PDF and Editor f… |
n/a |
n/a |
2025-12-11T00:00:00.000Z | 2025-12-11T16:25:41.126Z |
| cve-2024-33453 | N/A | Buffer Overflow vulnerability in esp-idf v.5.1 al… |
n/a |
n/a |
2024-10-17T00:00:00 | 2024-10-18T19:10:25.659Z |
| cve-2024-33454 | N/A | Buffer Overflow vulnerability in esp-idf v.5.1 al… |
n/a |
n/a |
2024-05-09T15:57:23.806Z | 2025-02-13T15:52:38.610Z |
| cve-2024-48809 | N/A | An issue in Open Networking Foundations sdran-in-… |
n/a |
n/a |
2024-11-04T00:00:00 | 2024-11-05T21:18:03.960Z |
| cve-2025-13499 | 7.8 (v3.1) | Access of Uninitialized Pointer in Wireshark |
Wireshark Foundation |
Wireshark |
2025-11-21T06:03:52.020Z | 2025-12-11T15:34:55.962Z |
| cve-2025-13946 | 5.5 (v3.1) | Loop with Unreachable Exit Condition ('Infinite Loop')… |
Wireshark Foundation |
Wireshark |
2025-12-03T08:04:54.335Z | 2025-12-03T14:28:19.274Z |
| cve-2024-48246 | N/A | Vehicle Management System 1.0 contains a Stored C… |
n/a |
n/a |
2025-03-05T00:00:00.000Z | 2025-03-06T14:23:01.488Z |
| cve-2025-14284 | Versions of the package @tiptap/extension-link be… |
n/a |
@tiptap/extension-link |
2025-12-09T05:00:03.409Z | 2025-12-09T14:59:53.928Z | |
| cve-2024-9582 | Accordion Slider <= 1.9.11 - Authenticted (Contributor… |
bqworks |
Accordion Slider |
2024-10-16T06:43:37.406Z | 2024-10-16T14:09:41.287Z | |
| cve-2024-56055 | 8.5 (v3.1) | WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directo… |
VibeThemes |
WPLMS |
2024-12-18T18:42:49.539Z | 2024-12-18T19:02:18.760Z |
| cve-2025-63035 | N/A | WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scrip… |
VibeThemes |
WPLMS |
2025-12-09T14:52:29.953Z | 2025-12-10T17:14:40.434Z |
| cve-2025-64052 | N/A | An issue was discovered in Fanvil x210 V2 2.12.20… |
n/a |
n/a |
2025-12-05T00:00:00.000Z | 2025-12-05T21:49:55.897Z |
| cve-2024-30146 | 4.1 (v3.1) | HCL Domino Leap is affected by improper access control |
HCL Software |
HCL Domino Leap |
2025-04-30T21:16:31.949Z | 2025-05-01T15:34:11.144Z |
| cve-2025-11200 | 8.1 (v3.0) | MLflow Weak Password Requirements Authentication Bypas… |
MLflow |
MLflow |
2025-10-29T19:42:03.734Z | 2025-10-31T03:55:31.971Z |
| cve-2025-25298 | Missing Maximum Password Length Validation in Strapi P… |
strapi |
strapi |
2025-10-16T16:21:45.585Z | 2025-10-16T18:12:49.837Z | |
| cve-2024-56143 | Strapi Allows Unauthorized Access to Private Fields vi… |
strapi |
strapi |
2025-10-16T16:07:30.996Z | 2025-10-16T17:54:24.103Z | |
| cve-2024-33065 | 8.4 (v3.1) | Improper Input Validation in Camera |
Qualcomm, Inc. |
Snapdragon |
2024-10-07T12:58:52.280Z | 2024-10-07T13:15:33.662Z |
| cve-2024-4068 | 7.5 (v3.1) | Memory Exhaustion in braces |
micromatch |
braces |
2024-05-13T10:06:38.152Z | 2024-11-06T13:10:11.179Z |
| cve-2024-53406 | N/A | Espressif Esp idf v5.3.0 is vulnerable to Insecur… |
n/a |
n/a |
2025-03-13T00:00:00.000Z | 2025-03-19T18:42:46.005Z |
| cve-2023-40238 | N/A | A LogoFAIL issue was discovered in BmpDecoderDxe … |
n/a |
n/a |
2023-12-07T00:00:00 | 2024-08-02T18:24:55.918Z |
| cve-2025-14652 | itsourcecode Online Cake Ordering System admindetail.p… |
itsourcecode |
Online Cake Ordering System |
2025-12-14T09:02:06.291Z | 2025-12-15T21:18:14.730Z | |
| cve-2025-14832 | itsourcecode Online Cake Ordering System updateproduct… |
itsourcecode |
Online Cake Ordering System |
2025-12-17T22:02:06.941Z | 2025-12-18T15:07:31.226Z | |
| cve-2025-14650 | itsourcecode Online Cake Ordering System product.php s… |
itsourcecode |
Online Cake Ordering System |
2025-12-14T08:02:06.327Z | 2025-12-15T21:22:27.841Z | |
| cve-2025-4533 | JeecgBoot Document Library Upload zip unzipFile resour… |
n/a |
JeecgBoot |
2025-05-11T06:31:04.456Z | 2025-05-12T13:39:06.588Z | |
| cve-2025-10981 | JeecgBoot exportXls improper authorization |
n/a |
JeecgBoot |
2025-09-26T00:02:07.436Z | 2025-09-26T15:18:45.375Z | |
| cve-2025-10980 | JeecgBoot exportXls improper authorization |
n/a |
JeecgBoot |
2025-09-25T23:32:07.502Z | 2025-09-26T19:15:16.785Z | |
| cve-2024-39580 | 6.7 (v3.1) | Dell PowerScale InsightIQ, versions 5.0 through 5… |
Dell |
PowerScale InsightIQ |
2024-09-10T08:54:54.258Z | 2024-09-10T13:16:32.221Z |
| cve-2024-39581 | 7.3 (v3.1) | Dell PowerScale InsightIQ, versions 5.0 through 5… |
Dell |
PowerScale InsightIQ |
2024-09-10T08:49:57.279Z | 2024-09-10T13:18:42.264Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2024-33453 | Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive informa… | 2024-10-17T22:15:03.040 | 2025-12-31T01:16:35.170 |
| fkie_cve-2024-33454 | Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code v… | 2024-05-14T15:37:41.710 | 2025-12-31T01:16:27.710 |
| fkie_cve-2024-48809 | An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote… | 2024-11-04T17:15:07.880 | 2025-12-31T01:16:13.153 |
| fkie_cve-2025-13499 | Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service | 2025-11-21T06:15:48.203 | 2025-12-31T01:14:40.110 |
| fkie_cve-2025-13946 | MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service | 2025-12-03T08:15:48.180 | 2025-12-31T01:14:22.890 |
| fkie_cve-2024-48246 | Vehicle Management System 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the "Na… | 2025-03-05T19:15:37.453 | 2025-12-31T01:13:36.757 |
| fkie_cve-2025-14284 | Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting… | 2025-12-09T16:17:37.657 | 2025-12-31T01:12:50.423 |
| fkie_cve-2024-9582 | The Accordion Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htm… | 2024-10-16T07:15:17.033 | 2025-12-31T01:12:06.993 |
| fkie_cve-2024-56055 | Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS allows Path Traversal.This issue affe… | 2024-12-18T19:15:13.263 | 2025-12-31T01:11:25.533 |
| fkie_cve-2025-63035 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:09.053 | 2025-12-31T01:10:52.543 |
| fkie_cve-2025-64052 | An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local n… | 2025-12-05T16:15:50.047 | 2025-12-31T01:10:32.347 |
| fkie_cve-2024-30146 | Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applica… | 2025-04-30T22:15:16.720 | 2025-12-31T01:06:39.007 |
| fkie_cve-2025-11200 | MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows re… | 2025-10-29T20:15:35.543 | 2025-12-31T01:06:20.083 |
| fkie_cve-2025-25298 | Strapi is an open source headless CMS. The @strapi/core package before version 5.10.3 does not enfo… | 2025-10-16T17:15:33.353 | 2025-12-31T01:06:00.520 |
| fkie_cve-2024-56143 | Strapi is an open-source headless content management system. In versions from 5.0.0 to before 5.5.2… | 2025-10-16T16:15:36.183 | 2025-12-31T01:05:40.340 |
| fkie_cve-2024-33065 | Memory corruption while taking snapshot when an offset variable is set by camera driver. | 2024-10-07T13:15:12.710 | 2025-12-31T01:04:45.317 |
| fkie_cve-2024-4068 | The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can h… | 2024-05-14T15:42:48.660 | 2025-12-31T01:04:21.577 |
| fkie_cve-2024-53406 | Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. … | 2025-03-13T17:15:33.410 | 2025-12-31T01:04:08.637 |
| fkie_cve-2023-40238 | A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.4… | 2023-12-07T04:15:06.790 | 2025-12-31T01:03:36.493 |
| fkie_cve-2025-14652 | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some … | 2025-12-14T09:15:40.540 | 2025-12-31T01:01:18.297 |
| fkie_cve-2025-14832 | A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected elemen… | 2025-12-17T22:15:58.643 | 2025-12-31T01:00:57.970 |
| fkie_cve-2025-14650 | A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part… | 2025-12-14T08:15:39.820 | 2025-12-31T01:00:43.140 |
| fkie_cve-2025-4533 | A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability af… | 2025-05-11T07:15:15.430 | 2025-12-31T01:00:06.310 |
| fkie_cve-2025-10981 | A vulnerability was detected in JeecgBoot up to 3.8.2. This impacts an unknown function of the file… | 2025-09-26T00:15:37.643 | 2025-12-31T00:59:45.517 |
| fkie_cve-2025-10980 | A security vulnerability has been detected in JeecgBoot up to 3.8.2. This affects an unknown functi… | 2025-09-26T00:15:36.627 | 2025-12-31T00:59:32.337 |
| fkie_cve-2024-39580 | Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerabil… | 2024-09-10T09:15:02.740 | 2025-12-31T00:58:07.767 |
| fkie_cve-2024-39581 | Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to E… | 2024-09-10T09:15:02.993 | 2025-12-31T00:57:02.217 |
| fkie_cve-2024-39582 | Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A hi… | 2024-09-10T09:15:03.243 | 2025-12-31T00:56:45.423 |
| fkie_cve-2024-39583 | Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptograp… | 2024-09-10T09:15:03.513 | 2025-12-31T00:56:32.077 |
| fkie_cve-2022-49950 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corr… | 2025-06-18T11:15:22.050 | 2025-12-31T00:56:16.950 |
| ID | Description | Package | Published | Updated |
|---|---|---|---|---|
| pysec-2022-43018 | WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using th… | wsgidav | 2022-11-11T21:15:00Z | 2023-05-04T04:29:31.369774Z |
| pysec-2022-43016 | A vulnerability, which was classified as problematic, has been found in UBI Reader up to … | ubi-reader | 2022-12-17T02:15:00Z | 2023-05-04T04:29:30.474506Z |
| pysec-2022-43013 | Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an … | slixmpp | 2022-12-25T05:15:00Z | 2023-05-04T04:29:29.928881Z |
| pysec-2022-43012 | Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cau… | setuptools | 2022-12-23T00:15:00Z | 2023-05-04T04:29:29.797493Z |
| pysec-2022-43011 | Sentry is an error tracking and performance monitoring platform. In versions of the sentr… | sentry | 2022-12-10T01:15:00Z | 2023-05-04T04:29:29.699170Z |
| pysec-2022-43002 | Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. | rdiffweb | 2022-12-12T18:15:00Z | 2023-05-04T04:29:29.006053Z |
| pysec-2022-43001 | Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior … | rdiffweb | 2022-11-16T13:15:00Z | 2023-05-04T04:29:28.960174Z |
| pysec-2022-43000 | Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0. | rdiffweb | 2022-11-14T21:15:00Z | 2023-05-04T04:29:28.911542Z |
| pysec-2022-42999 | ** DISPUTED ** In the python-libnmap package through 0.7.2 for Python, remote command exe… | python-libnmap | 2022-05-04T22:15:00Z | 2023-05-04T04:29:28.652969Z |
| pysec-2022-42998 | A directory traversal vulnerability in the SevenZipFile.extractall() function of the pyth… | py7zr | 2022-12-06T20:15:00Z | 2023-05-04T04:29:28.497759Z |
| pysec-2022-42997 | Passeo is an open source python password generator. Versions prior to 1.0.5 rely on the p… | passeo | 2022-12-06T18:15:00Z | 2023-05-04T04:29:27.942516Z |
| pysec-2022-42996 | MPXJ is an open source library to read and write project plans from a variety of file for… | mpxj | 2022-11-25T19:15:00Z | 2023-05-04T04:29:27.436392Z |
| pysec-2022-42995 | A vulnerability was found in keylime. This security issue happens in some circumstances, … | keylime | 2022-11-22T19:15:00Z | 2023-05-04T04:29:25.773897Z |
| pysec-2022-42994 | GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to 0.1.5 are v… | guarddog | 2022-12-17T00:15:00Z | 2023-05-04T04:29:25.595529Z |
| pysec-2022-42993 | GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to v0.1.8 are … | guarddog | 2022-12-16T23:15:00Z | 2023-05-04T04:29:25.550921Z |
| pysec-2022-42990 | A vulnerability was found in collective.task up to 3.0.9. It has been classified as probl… | collective-task | 2022-12-15T21:15:00Z | 2023-05-04T04:29:24.403566Z |
| pysec-2022-42988 | A vulnerability classified as problematic was found in collective.contact.widget up to 1.… | collective-contact-widget | 2022-12-21T22:15:00Z | 2023-05-04T04:29:24.049172Z |
| pysec-2022-42987 | CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is… | ckan | 2022-11-22T01:15:00Z | 2023-05-04T04:29:23.890366Z |
| pysec-2022-42985 | Arches is a web platform for creating, managing, & visualizing geospatial data. Versions … | arches | 2022-11-11T04:15:00Z | 2023-05-04T04:29:23.524968Z |
| pysec-2022-42984 | In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's … | apache-airflow | 2022-11-15T09:15:00Z | 2023-05-04T04:29:22.748527Z |
| pysec-2022-42983 | In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an alread… | apache-airflow | 2022-10-07T07:15:00Z | 2023-05-04T04:29:22.696589Z |
| pysec-2022-42982 | A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who c… | apache-airflow | 2022-11-14T10:15:00Z | 2023-05-04T04:29:22.645854Z |
| pysec-2022-42981 | A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in re… | apache-airflow | 2022-11-14T10:15:00Z | 2023-05-04T04:29:22.592547Z |
| pysec-2022-43017 | An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows … | wheel | 2022-12-23T00:15:00Z | 2023-05-04T03:49:49.039483Z |
| pysec-2023-58 | Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeu… | werkzeug | 2023-02-14T20:15:00Z | 2023-05-04T03:49:48.987713Z |
| pysec-2023-57 | Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" c… | werkzeug | 2023-02-14T20:15:00Z | 2023-05-04T03:49:48.931463Z |
| pysec-2023-56 | Wagtail is an open source content management system built on Django. Prior to versions 4.… | wagtail | 2023-04-03T17:15:00Z | 2023-05-04T03:49:48.874145Z |
| pysec-2023-55 | Wagtail is an open source content management system built on Django. Starting in version … | wagtail | 2023-04-03T17:15:00Z | 2023-05-04T03:49:48.764275Z |
| pysec-2023-54 | vantage6 is a privacy preserving federated learning infrastructure for secure insight exc… | vantage6 | 2023-03-04T00:15:00Z | 2023-05-04T03:49:48.653810Z |
| pysec-2023-53 | vantage6 is a privacy preserving federated learning infrastructure for secure insight exc… | vantage6 | 2023-03-01T21:15:00Z | 2023-05-04T03:49:48.592158Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33323 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.648147Z |
| gsd-2024-33191 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.647629Z |
| gsd-2024-33398 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.647172Z |
| gsd-2024-33074 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.646756Z |
| gsd-2024-33319 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.646296Z |
| gsd-2024-33069 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.645844Z |
| gsd-2024-33342 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd funct… | 2024-04-24T05:02:09.645419Z |
| gsd-2024-33428 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.644983Z |
| gsd-2024-33240 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.644562Z |
| gsd-2024-33335 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.644106Z |
| gsd-2024-33009 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.643652Z |
| gsd-2024-33270 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.643212Z |
| gsd-2024-33338 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.642793Z |
| gsd-2024-33015 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.642215Z |
| gsd-2024-33073 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.641767Z |
| gsd-2024-33301 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.641343Z |
| gsd-2024-33066 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.640877Z |
| gsd-2024-33052 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.640443Z |
| gsd-2024-33389 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.639989Z |
| gsd-2024-33487 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.639566Z |
| gsd-2024-33328 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.639108Z |
| gsd-2024-33252 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.638622Z |
| gsd-2024-33002 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.638133Z |
| gsd-2024-33196 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.637713Z |
| gsd-2024-33299 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.637274Z |
| gsd-2024-33055 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.636678Z |
| gsd-2024-33211 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.635754Z |
| gsd-2024-33025 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.635178Z |
| gsd-2024-33523 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.634683Z |
| gsd-2024-33321 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.634157Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192890 | Malicious code in sqzrframework480 (NuGet) | 2025-12-23T08:37:46Z | 2025-12-23T08:37:46Z |
| mal-2025-192889 | Malicious code in minimutex (NuGet) | 2025-12-23T08:37:45Z | 2025-12-23T08:37:45Z |
| mal-2025-192888 | Malicious code in workvivo-layout-extension (npm) | 2025-12-23T08:36:36Z | 2025-12-23T08:36:36Z |
| mal-2025-192887 | Malicious code in workvivo-chatbot (npm) | 2025-12-23T08:36:36Z | 2025-12-23T08:36:36Z |
| mal-2025-192886 | Malicious code in workvivo-anniversary-automation (npm) | 2025-12-23T08:36:35Z | 2025-12-23T08:36:35Z |
| mal-2025-192885 | Malicious code in wealthbox-marketing (npm) | 2025-12-23T08:35:44Z | 2025-12-23T08:35:44Z |
| mal-2025-192884 | Malicious code in vite-react-setting (npm) | 2025-12-23T08:35:16Z | 2025-12-23T08:35:16Z |
| mal-2025-192883 | Malicious code in varshade-afc (npm) | 2025-12-23T08:34:50Z | 2025-12-23T08:34:50Z |
| mal-2025-192882 | Malicious code in vapark-boost-v1 (npm) | 2025-12-23T08:34:49Z | 2025-12-23T08:34:49Z |
| mal-2025-192881 | Malicious code in typeface-maison-neue (npm) | 2025-12-23T08:34:00Z | 2025-12-23T08:34:00Z |
| mal-2025-192880 | Malicious code in tierlist (npm) | 2025-12-23T08:33:32Z | 2025-12-23T08:33:32Z |
| mal-2025-192879 | Malicious code in tescoutils (npm) | 2025-12-23T08:33:02Z | 2025-12-23T08:33:02Z |
| mal-2025-192878 | Malicious code in teeseest (npm) | 2025-12-23T08:32:50Z | 2025-12-23T08:32:50Z |
| mal-2025-192877 | Malicious code in tdm-react (npm) | 2025-12-23T08:32:44Z | 2025-12-23T08:32:44Z |
| mal-2025-192876 | Malicious code in suntik-tiktok (npm) | 2025-12-23T08:32:05Z | 2025-12-23T08:32:05Z |
| mal-2025-192875 | Malicious code in sturdyfetch9 (npm) | 2025-12-23T08:31:59Z | 2025-12-23T08:31:59Z |
| mal-2025-192874 | Malicious code in sturdyfetch5 (npm) | 2025-12-23T08:31:52Z | 2025-12-23T08:31:52Z |
| mal-2025-192873 | Malicious code in sturdyfetch4 (npm) | 2025-12-23T08:31:51Z | 2025-12-23T08:31:51Z |
| mal-2025-192872 | Malicious code in sturdyfetch3 (npm) | 2025-12-23T08:31:50Z | 2025-12-23T08:31:50Z |
| mal-2025-192871 | Malicious code in sturdyfetch22 (npm) | 2025-12-23T08:31:49Z | 2025-12-23T08:31:49Z |
| mal-2025-192870 | Malicious code in sturdyfetch21 (npm) | 2025-12-23T08:31:48Z | 2025-12-23T08:31:48Z |
| mal-2025-192869 | Malicious code in sturdyfetch19 (npm) | 2025-12-23T08:31:47Z | 2025-12-23T08:31:47Z |
| mal-2025-192868 | Malicious code in sturdyfetch18 (npm) | 2025-12-23T08:31:47Z | 2025-12-23T08:31:47Z |
| mal-2025-192867 | Malicious code in sturdyfetch17 (npm) | 2025-12-23T08:31:46Z | 2025-12-23T08:31:46Z |
| mal-2025-192866 | Malicious code in sturdyfetch15 (npm) | 2025-12-23T08:31:45Z | 2025-12-23T08:31:45Z |
| mal-2025-192865 | Malicious code in streamlinear (npm) | 2025-12-23T08:31:32Z | 2025-12-23T08:31:32Z |
| mal-2025-192864 | Malicious code in stream-chain-xor (npm) | 2025-12-23T08:31:31Z | 2025-12-23T08:31:31Z |
| mal-2025-192863 | Malicious code in smart-parser (npm) | 2025-12-23T08:30:35Z | 2025-12-23T08:30:35Z |
| mal-2025-192862 | Malicious code in session-parse (npm) | 2025-12-23T08:30:06Z | 2025-12-23T08:30:06Z |
| mal-2025-192861 | Malicious code in session-keeper (npm) | 2025-12-23T08:30:05Z | 2025-12-23T08:30:05Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0064 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0038 | Red Hat Enterprise Linux (iperf): Schwachstelle ermöglicht Denial of Service | 2025-01-08T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3630 | Python: Schwachstelle ermöglicht Denial of Service | 2024-12-08T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2024-1812 | Red Hat Enterprise Linux (389-ds-base ldap server): Schwachstelle ermöglicht Denial of Service | 2024-08-11T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2024-1761 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2024-08-05T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1613 | libTIFF: Mehrere Schwachstellen | 2023-06-29T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1605 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2023-06-29T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1514 | libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-06-19T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1479 | libTIFF: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2023-06-14T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2022-1858 | Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Denial of Service | 2022-10-25T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2022-0451 | Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-08-10T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0127 | Moxa Switch: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0126 | Verschiedene Tunneling Protokolle: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0125 | IBM Maximo Asset Management: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0124 | IBM App Connect Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0122 | Mattermost: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0121 | IBM Sterling Connect:Direct: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0120 | Microsoft Edge: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0118 | Perl: Schwachstelle ermöglicht Privilegieneskalation | 2016-07-25T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0117 | Linux Kernel: Mehrere Schwachstellen | 2017-03-07T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0116 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2017-08-30T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0097 | git: Mehrere Schwachstellen ermöglichen Manipulation | 2025-01-14T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0091 | Microsoft Windows: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0090 | Red Hat Enterprise Linux (librdf): Schwachstelle ermöglicht Denial of Service | 2025-01-14T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0028 | LibreOffice: Mehrere Schwachstellen | 2025-01-07T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3756 | Linux Kernel: Mehrere Schwachstellen | 2024-12-26T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3715 | Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-17T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3682 | Python "virtualenv": Schwachstelle ermöglicht Codeausführung | 2024-12-10T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3547 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-11-25T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3486 | Apache Tomcat: Mehrere Schwachstellen | 2024-11-17T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:10926 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update | 2025-07-14T15:55:57+00:00 | 2025-11-27T17:36:35+00:00 |
| rhsa-2025:10925 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update | 2025-07-14T15:56:17+00:00 | 2025-11-27T17:36:34+00:00 |
| rhsa-2025:10924 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update | 2025-07-14T15:56:17+00:00 | 2025-11-27T17:36:33+00:00 |
| rhsa-2025:10814 | Red Hat Security Advisory: apache-commons-beanutils security update | 2025-07-10T16:19:11+00:00 | 2025-11-27T17:36:32+00:00 |
| rhsa-2025:10459 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update | 2025-07-07T13:35:06+00:00 | 2025-11-27T17:36:32+00:00 |
| rhsa-2025:10453 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update | 2025-07-07T13:27:47+00:00 | 2025-11-27T17:36:30+00:00 |
| rhsa-2025:10452 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update | 2025-07-07T13:32:31+00:00 | 2025-11-27T17:36:29+00:00 |
| rhsa-2025:20998 | Red Hat Security Advisory: libtiff security update | 2025-11-11T19:21:21+00:00 | 2025-11-27T17:36:27+00:00 |
| rhsa-2025:19156 | Red Hat Security Advisory: libtiff security update | 2025-10-28T08:49:12+00:00 | 2025-11-27T17:36:27+00:00 |
| rhsa-2025:18275 | Red Hat Security Advisory: libssh security update | 2025-10-16T22:09:51+00:00 | 2025-11-27T17:36:27+00:00 |
| rhsa-2025:20943 | Red Hat Security Advisory: libssh security update | 2025-11-11T14:12:42+00:00 | 2025-11-27T17:36:25+00:00 |
| rhsa-2025:18286 | Red Hat Security Advisory: libssh security update | 2025-10-20T02:19:30+00:00 | 2025-11-27T17:36:25+00:00 |
| rhsa-2025:18231 | Red Hat Security Advisory: libssh security update | 2025-10-16T10:25:20+00:00 | 2025-11-27T17:36:25+00:00 |
| rhsa-2025:21013 | Red Hat Security Advisory: libssh security update | 2025-11-11T19:29:32+00:00 | 2025-11-27T17:36:22+00:00 |
| rhsa-2025:20478 | Red Hat Security Advisory: zziplib security update | 2025-11-11T11:39:12+00:00 | 2025-11-27T17:36:20+00:00 |
| rhsa-2025:13241 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.4 | 2025-08-06T13:12:09+00:00 | 2025-11-27T17:36:17+00:00 |
| rhsa-2025:9761 | Red Hat Security Advisory: OpenShift Container Platform 4.14.53 security and extras update | 2025-07-02T14:09:57+00:00 | 2025-11-27T15:01:31+00:00 |
| rhsa-2025:8301 | Red Hat Security Advisory: OpenShift Container Platform 4.15.52 security and extras update | 2025-06-04T00:50:17+00:00 | 2025-11-27T15:01:30+00:00 |
| rhsa-2025:7451 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.20 | 2025-05-14T15:49:22+00:00 | 2025-11-27T15:01:29+00:00 |
| rhsa-2025:7449 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.14 | 2025-05-14T19:18:43+00:00 | 2025-11-27T15:01:28+00:00 |
| rhsa-2025:4007 | Red Hat Security Advisory: OpenShift Container Platform 4.16.39 security and extras update | 2025-04-23T01:59:09+00:00 | 2025-11-27T15:01:28+00:00 |
| rhsa-2025:3573 | Red Hat Security Advisory: OpenShift Container Platform 4.12.75 packages and security update | 2025-04-10T21:37:13+00:00 | 2025-11-27T15:01:25+00:00 |
| rhsa-2025:3500 | Red Hat Security Advisory: RHODF-4.17-RHEL-9 security update | 2025-04-01T19:42:34+00:00 | 2025-11-27T15:01:22+00:00 |
| rhsa-2025:3374 | Red Hat Security Advisory: Red Hat Developer Hub 1.5.1 release. | 2025-03-27T20:51:32+00:00 | 2025-11-27T15:01:21+00:00 |
| rhsa-2025:2710 | Red Hat Security Advisory: OpenShift Container Platform 4.14.49 bug fix and security update | 2025-03-19T20:54:49+00:00 | 2025-11-27T15:01:17+00:00 |
| rhsa-2025:2700 | Red Hat Security Advisory: OpenShift Container Platform 4.13.56 security update | 2025-03-20T01:46:31+00:00 | 2025-11-27T15:01:17+00:00 |
| rhsa-2025:2658 | Red Hat Security Advisory: OpenShift Virtualization 4.15.9 Images | 2025-03-11T11:41:12+00:00 | 2025-11-27T15:01:16+00:00 |
| rhsa-2025:2449 | Red Hat Security Advisory: OpenShift Container Platform 4.18.4 security update | 2025-03-11T02:08:00+00:00 | 2025-11-27T15:01:16+00:00 |
| rhsa-2025:2440 | Red Hat Security Advisory: OpenShift Container Platform 4.12.74 security and extras update | 2025-03-13T00:55:15+00:00 | 2025-11-27T15:01:15+00:00 |
| rhsa-2025:2415 | Red Hat Security Advisory: Red Hat Insights for Runtimes security update | 2025-03-05T20:41:26+00:00 | 2025-11-27T15:01:14+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2022-49955 | powerpc/rtas: Fix RTAS MSR[HV] handling for Cell | 2025-06-02T00:00:00.000Z | 2025-11-25T01:35:40.000Z |
| msrc_cve-2022-50002 | net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY | 2025-06-02T00:00:00.000Z | 2025-11-25T01:35:35.000Z |
| msrc_cve-2024-49761 | REXML ReDoS vulnerability | 2024-10-01T07:00:00.000Z | 2025-11-25T01:35:17.000Z |
| msrc_cve-2018-14040 | In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attributeIn Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute | 2018-07-02T00:00:00.000Z | 2025-11-25T01:01:37.000Z |
| msrc_cve-2025-38127 | ice: fix Tx scheduler error handling in XDP callback | 2025-07-02T00:00:00.000Z | 2025-11-22T01:01:52.000Z |
| msrc_cve-2025-38117 | Bluetooth: MGMT: Protect mgmt_pending list with its own lock | 2025-07-02T00:00:00.000Z | 2025-11-22T01:01:42.000Z |
| msrc_cve-2025-38105 | ALSA: usb-audio: Kill timer properly at removal | 2025-07-02T00:00:00.000Z | 2025-11-22T01:01:36.000Z |
| msrc_cve-2025-59286 | Copilot Spoofing Vulnerability | 2025-10-14T07:00:00.000Z | 2025-11-21T08:00:00.000Z |
| msrc_cve-2025-59272 | Copilot Spoofing Vulnerability | 2025-10-14T07:00:00.000Z | 2025-11-21T08:00:00.000Z |
| msrc_cve-2025-59252 | M365 Copilot Spoofing Vulnerability | 2025-10-14T07:00:00.000Z | 2025-11-21T08:00:00.000Z |
| msrc_cve-2025-54114 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | 2025-09-09T07:00:00.000Z | 2025-11-21T08:00:00.000Z |
| msrc_cve-2025-49752 | Azure Bastion Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-21T08:00:00.000Z |
| msrc_cve-2025-54770 | Grub2: use-after-free in net_set_vlan | 2025-11-02T00:00:00.000Z | 2025-11-21T01:03:27.000Z |
| msrc_cve-2025-54771 | Grub2: use-after-free in grub_file_close() | 2025-11-02T00:00:00.000Z | 2025-11-21T01:03:19.000Z |
| msrc_cve-2025-38449 | drm/gem: Acquire references on GEM handles for framebuffers | 2025-07-02T00:00:00.000Z | 2025-11-21T01:02:39.000Z |
| msrc_cve-2025-38436 | drm/scheduler: signal scheduled fence when kill job | 2025-07-02T00:00:00.000Z | 2025-11-21T01:02:29.000Z |
| msrc_cve-2025-38408 | genirq/irq_sim: Initialize work context pointers properly | 2025-07-02T00:00:00.000Z | 2025-11-21T01:02:19.000Z |
| msrc_cve-2025-38250 | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 2025-07-02T00:00:00.000Z | 2025-11-21T01:02:14.000Z |
| msrc_cve-2025-38192 | net: clear the dst when changing skb protocol | 2025-07-02T00:00:00.000Z | 2025-11-21T01:02:04.000Z |
| msrc_cve-2022-50233 | Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} | 2025-08-02T00:00:00.000Z | 2025-11-21T01:01:41.000Z |
| msrc_cve-2022-50230 | arm64: set UXN on swapper page tables | 2025-06-02T00:00:00.000Z | 2025-11-21T01:01:34.000Z |
| msrc_cve-2022-50224 | KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT | 2025-06-02T00:00:00.000Z | 2025-11-21T01:01:30.000Z |
| msrc_cve-2025-64657 | Azure Application Gateway Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-20T08:00:00.000Z |
| msrc_cve-2025-64656 | Application Gateway Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-20T08:00:00.000Z |
| msrc_cve-2025-64655 | Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-20T08:00:00.000Z |
| msrc_cve-2025-62459 | Microsoft Defender Portal Spoofing Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-20T08:00:00.000Z |
| msrc_cve-2025-62207 | Azure Monitor Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-20T08:00:00.000Z |
| msrc_cve-2025-59245 | Microsoft SharePoint Online Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-20T08:00:00.000Z |
| msrc_cve-2025-54099 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2025-09-09T07:00:00.000Z | 2025-11-20T08:00:00.000Z |
| msrc_cve-2025-38544 | rxrpc: Fix bug due to prealloc collision | 2025-08-02T00:00:00.000Z | 2025-11-20T01:02:43.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-16-061-03 | Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerabilities | 2016-12-03T07:00:00.000000Z | 2025-06-05T21:37:51.714610Z |
| icsa-16-061-02 | Rockwell Automation Allen-Bradley CompactLogix Reflective Cross-Site Scripting Vulnerability (Update A) | 2016-12-03T07:00:00.000000Z | 2025-06-05T21:37:45.425599Z |
| icsa-16-061-01 | Schneider Electric Building Operation Automation Server Vulnerability | 2016-12-03T07:00:00.000000Z | 2025-06-05T21:37:39.217752Z |
| icsa-16-056-01 | Rockwell Automation Integrated Architecture Builder Access Violation Memory Error | 2016-11-28T07:00:00.000000Z | 2025-06-05T21:37:32.767943Z |
| icsa-16-049-02a | AMX Multiple Products Credential Management Vulnerabilities (Update A) | 2016-11-21T07:00:00.000000Z | 2025-06-05T21:37:20.275376Z |
| icsa-16-049-01 | B+B SmartWorx VESP211 Authentication Bypass Vulnerability | 2016-11-21T07:00:00.000000Z | 2025-06-05T21:37:14.043505Z |
| icsa-16-042-01a | Moxa EDR-G903 Secure Router Vulnerabilities (Update A) | 2016-11-14T07:00:00.000000Z | 2025-06-05T21:36:42.937829Z |
| icsa-16-040-02 | Siemens SIMATIC S7-1500 CPU Vulnerabilities | 2016-11-12T07:00:00.000000Z | 2025-06-05T21:36:30.466787Z |
| icsa-16-040-01 | Tollgrade SmartGrid Sensor Management System Software Vulnerabilities | 2016-11-12T07:00:00.000000Z | 2025-06-05T21:36:05.594352Z |
| icsa-16-033-02 | GE SNMP/Web Interface Vulnerabilities | 2016-11-05T06:00:00.000000Z | 2025-06-05T21:35:53.140871Z |
| icsa-16-033-01 | Sauter moduWeb Vision Vulnerabilities | 2016-11-05T06:00:00.000000Z | 2025-06-05T21:35:34.424132Z |
| icsa-16-028-01a | Westermo Industrial Switch Hard-coded Certificate Vulnerability (Update A) | 2016-10-31T06:00:00.000000Z | 2025-06-05T21:35:27.841677Z |
| icsa-25-155-01 | CyberData 011209 SIP Emergency Intercom | 2025-06-05T06:00:00.000000Z | 2025-06-05T06:00:00.000000Z |
| icsa-21-049-02 | Mitsubishi Electric FA Engineering Software Products (Update H) | 2021-02-18T07:00:00.000000Z | 2025-06-05T06:00:00.000000Z |
| icsa-25-153-03 | Mitsubishi Electric MELSEC iQ-F Series | 2025-06-03T06:00:00.000000Z | 2025-06-03T06:00:00.000000Z |
| icsa-25-153-01 | Schneider Electric Wiser Home Automation | 2025-06-03T06:00:00.000000Z | 2025-06-03T06:00:00.000000Z |
| icsma-25-148-01 | Santesoft Sante DICOM Viewer Pro | 2025-05-29T06:00:00.000000Z | 2025-05-29T06:00:00.000000Z |
| va-25-147-01 | Craft CMS stores user-provided content session files | 2025-05-28T20:57:43Z | 2025-05-28T20:57:43Z |
| va-25-148-01 | ZKTeco BioTime multiple vulnerabilities | 2025-05-28T15:28:55Z | 2025-05-28T15:28:55Z |
| icsa-25-160-02 | Hitachi Energy Relion 670 650 SAM600-IO Series | 2023-06-27T12:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-155-02 | Hitachi Energy Relion 670 650 series and SAM600-IO Product | 2021-12-16T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-133-02 | Hitachi Energy Relion 670/650/SAM600-IO Series (Update A) | 2023-11-28T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-23-089-01 | Hitachi Energy IEC 61850 MMS-Server | 2023-02-14T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-23-068-05 | Hitachi Energy Relion 670, 650 and SAM600-IO Series | 2023-02-28T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-21-336-05 | Hitachi Energy Relion 670/650/SAM600-IO | 2021-11-04T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-146-01 | Johnson Controls iSTAR Configuration Utility (ICU) tool | 2025-05-27T06:00:00.000000Z | 2025-05-27T06:00:00.000000Z |
| icsa-25-142-02 | Rockwell Automation FactoryTalk Historian ThingWorx | 2025-05-22T06:00:00.000000Z | 2025-05-22T06:00:00.000000Z |
| icsa-25-142-01 | Lantronix Device Installer | 2025-05-22T06:00:00.000000Z | 2025-05-22T06:00:00.000000Z |
| icsa-25-140-10 | Vertiv Liebert RDU101 and UNITY | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| icsa-25-140-09 | AutomationDirect MB-Gateway | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asa5500x-entropy-6v9bhvyp | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-asa5500x-entropy-6v9bHVYP | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ap-cli-dos-tc2ekepu | Cisco Access Point Software Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ap-cli-dos-tc2EKEpu | Cisco Access Point Software Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ap-assoc-dos-d2sunwk2 | Cisco Access Point Software Association Request Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ap-assoc-dos-D2SunWK2 | Cisco Access Point Software Association Request Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-aironetap-cmdinj-6bjt4fl8 | Cisco Access Point Software Command Injection Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-aironetap-cmdinj-6bjT4FL8 | Cisco Access Point Software Command Injection Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ip-phone-cmd-inj-kmfynvcp | Cisco IP Phone 6800, 7800, and 8800 Series Web UI Vulnerabilities | 2023-03-01T16:00:00+00:00 | 2023-03-20T20:45:17+00:00 |
| cisco-sa-ip-phone-cmd-inj-KMFynVcP | Cisco IP Phone 6800, 7800, and 8800 Series Web UI Vulnerabilities | 2023-03-01T16:00:00+00:00 | 2023-03-20T20:45:17+00:00 |
| cisco-sa-sbr042-multi-vuln-ej76Pke5 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2025-03-07T17:33:55+00:00 |
| cisco-sa-bfd-xmrescbt | Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability | 2023-03-08T16:00:00+00:00 | 2023-03-08T16:00:00+00:00 |
| cisco-sa-bfd-XmRescbT | Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability | 2023-03-08T16:00:00+00:00 | 2023-03-08T16:00:00+00:00 |
| cisco-sa-roomos-dkjgfgrk | Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2023-03-07T14:21:36+00:00 |
| cisco-sa-roomos-dkjGFgRK | Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2023-03-07T14:21:36+00:00 |
| cisco-sa-finesse-proxy-dos-vy5dqhrv | Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-03-02T20:35:00+00:00 |
| cisco-sa-finesse-proxy-dos-vY5dQhrV | Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-03-02T20:35:00+00:00 |
| cisco-sa-webex-xss-yn8hhsmj | Cisco Webex App for Web Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-03-01T16:00:00+00:00 |
| cisco-sa-webex-xss-Yn8HHsMJ | Cisco Webex App for Web Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-03-01T16:00:00+00:00 |
| cisco-sa-cuic-infodisc-ssrf-84zbmwvk | Cisco Unified Intelligence Center Vulnerabilities | 2023-03-01T16:00:00+00:00 | 2023-03-01T16:00:00+00:00 |
| cisco-sa-cuic-infodisc-ssrf-84ZBmwVk | Cisco Unified Intelligence Center Vulnerabilities | 2023-03-01T16:00:00+00:00 | 2023-03-01T16:00:00+00:00 |
| cisco-sa-webex-app-qrto6yc2 | Cisco Webex Meetings App Character Interface Manipulation Vulnerability | 2022-09-07T16:00:00+00:00 | 2023-02-24T15:40:30+00:00 |
| cisco-sa-webex-app-qrtO6YC2 | Cisco Webex Meetings App Character Interface Manipulation Vulnerability | 2022-09-07T16:00:00+00:00 | 2023-02-24T15:40:30+00:00 |
| cisco-sa-nxos-x509v3-unsupportedconfig-scrtabuk | Cisco NX-OS Software SSH X.509v3 Certificate Authentication with Unsupported Remote Authorization Method Privilege Escalation Issues | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-nxos-x509v3-unsupportedconfig-ScRtAbUk | Cisco NX-OS Software SSH X.509v3 Certificate Authentication with Unsupported Remote Authorization Method Privilege Escalation Issues | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-nxos-cli-cmdinject-euqvk9u | Cisco NX-OS Software CLI Command Injection Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-nxos-cli-cmdinject-euQVK9u | Cisco NX-OS Software CLI Command Injection Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-nxfp-cmdinj-xxbzjtr | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-nxfp-cmdinj-XXBZjtR | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-elyfex-dos-gfvcbyx | Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects Authentication Bypass Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-201806-1469 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2024-11-29T20:35:57.437000Z |
| var-201506-0496 | Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL be… | 2024-11-29T20:35:54.485000Z |
| var-200512-0212 | Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$<… | 2024-11-29T20:35:47.585000Z |
| var-201507-0303 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlie… | 2024-11-29T20:35:13.010000Z |
| var-202207-1485 | An out-of-bounds write issue was addressed with improved input validation. This issue is … | 2024-11-29T20:35:11.858000Z |
| var-201511-0037 | The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip in… | 2024-11-29T20:34:36.631000Z |
| var-201106-0026 | Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Wind… | 2024-11-29T20:34:32.908000Z |
| var-201006-1239 | The execCommand JavaScript function in WebKit in Apple Safari before 5.0 on Mac OS X 10.5… | 2024-11-29T20:34:32.841000Z |
| var-202106-1921 | A security issue in nginx resolver was identified, which might allow an attacker who is a… | 2024-11-29T20:34:32.717000Z |
| var-202201-0370 | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Exp… | 2024-11-29T20:34:32.650000Z |
| var-201306-0253 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T20:34:32.122000Z |
| var-201504-0477 | SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names… | 2024-11-29T20:34:31.848000Z |
| var-200312-0218 | OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recu… | 2024-11-29T20:34:30.971000Z |
| var-201107-0156 | Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M900… | 2024-11-29T20:34:28.544000Z |
| var-200701-0156 | Integer overflow in the byte_swap_sbin function in bsd/ufs/ufs/ufs_byte_order.c in Mac OS… | 2024-11-29T20:34:28.479000Z |
| var-200902-0880 | International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in A… | 2024-11-29T20:34:28.376000Z |
| var-200701-0036 | The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cau… | 2024-11-29T20:33:57.251000Z |
| var-202411-0908 | A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < … | 2024-11-29T20:33:56.765000Z |
| var-200505-0354 | Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to exe… | 2024-11-29T20:33:24.706000Z |
| var-202002-1479 | A denial of service issue was addressed with improved memory handling. This issue is fixe… | 2024-11-29T20:32:48.062000Z |
| var-201912-1851 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T20:32:47.566000Z |
| var-201601-0029 | The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x … | 2024-11-29T20:32:47.381000Z |
| var-202301-1527 | A carefully crafted If: request header can cause a memory read, or write of a single zero… | 2024-11-29T20:32:16.420000Z |
| var-201302-0106 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T20:31:46.245000Z |
| var-200210-0102 | Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a deni… | 2024-11-29T20:31:10.465000Z |
| var-201107-0097 | Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGra… | 2024-11-29T20:31:08.467000Z |
| var-201912-0616 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T20:31:07.060000Z |
| var-201210-0144 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T20:31:05.692000Z |
| var-202010-1510 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-11-29T20:31:02.907000Z |
| var-202201-0073 | In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exist… | 2024-11-29T20:31:02.257000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2020-000060 | "Shadankun Server Security Type" vulnerable to denial-of-service (DoS) | 2020-08-31T14:41+09:00 | 2020-08-31T14:41+09:00 |
| jvndb-2020-000056 | Multiple NETGEAR switching hubs vulnerable to cross-site request forgery | 2020-08-28T15:33+09:00 | 2020-08-28T15:33+09:00 |
| jvndb-2020-000058 | Multiple vulnerabilities in XOOPS module "XooNIps" | 2020-08-27T15:37+09:00 | 2020-08-27T15:37+09:00 |
| jvndb-2020-000057 | NITORI App fails to restrict access permissions | 2020-08-26T15:34+09:00 | 2020-08-26T15:34+09:00 |
| jvndb-2020-000054 | Multiple cross-site scripting vulnerabilities in Exment | 2020-08-21T14:34+09:00 | 2020-08-21T14:34+09:00 |
| jvndb-2020-000053 | Multiple vulnerabilities in CyberMail | 2020-08-11T14:20+09:00 | 2020-08-11T14:20+09:00 |
| jvndb-2020-007128 | DoS Vulnerability in HiRDB | 2020-08-03T16:37+09:00 | 2020-08-03T16:37+09:00 |
| jvndb-2020-007127 | Multiple Vulnerabilities in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center | 2020-08-03T16:36+09:00 | 2020-08-03T16:36+09:00 |
| jvndb-2020-000052 | SKYSEA Client View vulnerable to privilege escalation | 2020-08-03T14:59+09:00 | 2020-08-03T14:59+09:00 |
| jvndb-2020-000051 | Multiple vulnerabilities in multiple PHP Factory products | 2020-07-31T16:29+09:00 | 2020-07-31T16:29+09:00 |
| jvndb-2020-000050 | FANUC i Series CNC vulnerable to denial-of-service (DoS) | 2020-07-31T14:29+09:00 | 2020-07-31T14:29+09:00 |
| jvndb-2020-000047 | JavaFX WebEngine does not properly restrict Java method execution | 2020-07-28T15:47+09:00 | 2020-07-28T15:47+09:00 |
| jvndb-2020-000048 | Multiple vulnerabilities in KonaWiki2 and KonaWiki3 | 2020-07-28T15:38+09:00 | 2020-07-28T15:38+09:00 |
| jvndb-2020-000046 | WordPress Plugin "Social Sharing Plugin" vulnerable to cross-site request forgery | 2020-07-22T14:24+09:00 | 2020-07-22T14:24+09:00 |
| jvndb-2020-006617 | Cross-site Scripting Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2020-07-14T10:40+09:00 | 2020-07-14T10:40+09:00 |
| jvndb-2020-006586 | Server Side Request Forgery Vulnerability in Hitachi Ops Center Analyzer viewpoint | 2020-07-13T14:25+09:00 | 2020-07-13T14:25+09:00 |
| jvndb-2020-006469 | Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric GOT2000 series | 2020-07-09T15:46+09:00 | 2020-07-09T15:46+09:00 |
| jvndb-2020-000045 | SHIRASAGI vulnerable to open redirect | 2020-07-09T15:08+09:00 | 2020-07-09T15:08+09:00 |
| jvndb-2020-000043 | Android App "Mercari" (Japan version) vulnerable to arbitrary method execution of the Java object | 2020-07-08T16:04+09:00 | 2020-07-08T16:04+09:00 |
| jvndb-2020-000042 | Multiple vulnerabilities in Cybozu Garoon | 2020-06-29T16:17+09:00 | 2020-06-29T16:17+09:00 |
| jvndb-2020-006031 | DoS Vulnerability in Hitachi Device Manager | 2020-06-29T12:25+09:00 | 2020-06-29T12:25+09:00 |
| jvndb-2019-000056 | Panasonic Video Insight VMS vulnerable to SQL injection | 2019-09-02T13:57+09:00 | 2020-06-26T12:27+09:00 |
| jvndb-2020-000032 | Panasonic Video Insight VMS vulnerable to arbitrary code execution | 2020-05-19T16:04+09:00 | 2020-06-26T12:19+09:00 |
| jvndb-2020-000040 | Chrome Extension for e-Tax Reception System vulnerable to arbitrary command execution | 2020-06-24T14:25+09:00 | 2020-06-24T14:25+09:00 |
| jvndb-2020-005854 | Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series vulnerable to cleartext transmission of sensitive information | 2020-06-24T10:32+09:00 | 2020-06-24T10:32+09:00 |
| jvndb-2020-005743 | Vulnerability in Cosminexus HTTP Server | 2020-06-22T15:40+09:00 | 2020-06-22T15:40+09:00 |
| jvndb-2020-000039 | EC-CUBE vulnerable to directory traversal | 2020-06-18T13:48+09:00 | 2020-06-18T13:48+09:00 |
| jvndb-2020-005443 | Path Traversal Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator | 2020-06-15T16:29+09:00 | 2020-06-15T16:29+09:00 |
| jvndb-2020-000038 | Multiple vulnerabilities in Zenphoto | 2020-06-11T17:17+09:00 | 2020-06-11T17:17+09:00 |
| jvndb-2020-000037 | Multiple SONY Wireless Headphones allow improper Bluetooth pairing | 2020-06-09T15:49+09:00 | 2020-06-09T15:49+09:00 |
| ID | Description | Updated |
|---|