Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-x462-8pqp-gj6q | This issue was addressed through improved state management. This issue is fixed in Safari 26.1, vis… | 2025-11-04T03:30:29Z | 2025-11-05T21:31:00Z |
| ghsa-wg34-qg7p-mhvv | The issue was addressed with improved checks. This issue is fixed in Safari 26.1, visionOS 26.1, wa… | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-vqqj-hmq5-9gmp | The issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An a… | 2025-11-04T03:30:29Z | 2025-11-05T21:31:00Z |
| ghsa-vm9c-2469-c5jv | A privacy issue was addressed with improved checks. This issue is fixed in watchOS 26.1, iOS 26.1 a… | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-rmrv-87q6-gwjf | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14… | 2025-11-04T03:30:29Z | 2025-11-05T21:31:00Z |
| ghsa-q2x4-7v64-r886 | The issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, Safa… | 2025-11-04T03:30:29Z | 2025-11-05T21:31:00Z |
| ghsa-pqwf-2452-r2f3 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.… | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-p867-9m9g-6jj4 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A… | 2025-11-04T03:30:29Z | 2025-11-04T15:31:34Z |
| ghsa-mwcp-7pff-55mh | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. … | 2025-11-04T03:30:29Z | 2025-11-04T18:31:52Z |
| ghsa-mr98-6qp8-6gpm | The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS 26.… | 2025-11-04T03:30:29Z | 2025-11-04T21:31:33Z |
| ghsa-jqp9-863w-8xvr | This issue was addressed by restricting options offered on a locked device. This issue is fixed in … | 2025-11-04T03:30:29Z | 2025-11-04T18:31:52Z |
| ghsa-grmc-3h6c-p3q9 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma… | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-gp5f-42gx-q2fq | A privacy issue was addressed with improved handling of user preferences. This issue is fixed in wa… | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-cvjw-3jg5-rvcq | An authentication issue was addressed with improved state management. This issue is fixed in watchO… | 2025-11-04T03:30:29Z | 2025-11-04T15:31:33Z |
| ghsa-c9vx-r5gq-hhr8 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Son… | 2025-11-04T03:30:29Z | 2025-11-04T15:31:33Z |
| ghsa-c7h7-j3m6-933p | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma… | 2025-11-04T03:30:29Z | 2025-11-04T21:31:33Z |
| ghsa-9c63-94gf-85h2 | A use-after-free issue was addressed with improved memory management. This issue is fixed in watchO… | 2025-11-04T03:30:29Z | 2025-11-04T15:31:33Z |
| ghsa-946v-48wq-8882 | A privacy issue was addressed with improved private data redaction for log entries. This issue is f… | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-8v28-rgjq-f5h7 | An inconsistent user interface issue was addressed with improved state management. This issue is fi… | 2025-11-04T03:30:29Z | 2025-11-05T21:31:01Z |
| ghsa-8h3p-p2xh-j29x | This issue was addressed through improved state management. This issue is fixed in iOS 26.1 and iPa… | 2025-11-04T03:30:29Z | 2025-11-05T21:31:00Z |
| ghsa-849v-5927-j7jq | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing re… | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-7jw7-wvw3-gc2g | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS So… | 2025-11-04T03:30:29Z | 2025-11-04T15:31:33Z |
| ghsa-7g3g-36m8-grv8 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. … | 2025-11-04T03:30:29Z | 2025-11-05T21:31:00Z |
| ghsa-6wgr-2m33-vg69 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in X… | 2025-11-04T03:30:29Z | 2025-11-04T15:31:34Z |
| ghsa-6824-ghx8-vrm5 | This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2. An app … | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-4v2x-jqm6-7wqw | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.1 and iPadO… | 2025-11-04T03:30:29Z | 2025-11-04T15:31:34Z |
| ghsa-479r-rg4f-86j3 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cro… | 2025-11-04T03:30:29Z | 2025-11-04T03:30:29Z |
| ghsa-3rjw-h7x9-663w | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma… | 2025-11-04T03:30:29Z | 2025-11-04T18:31:53Z |
| ghsa-2mw2-gj79-mjf4 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS … | 2025-11-04T03:30:29Z | 2025-11-04T15:31:34Z |
| ghsa-xvjg-xxqh-hg7q | The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, w… | 2025-11-04T03:30:28Z | 2025-11-04T18:31:52Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-11753 | Multi-language Responsive Portfolio WordPress <= 1.0 -… |
augustinfotech |
Bootstrap Multi-language Responsive Portfolio |
2025-11-04T04:27:23.226Z | 2025-11-04T14:56:56.689Z | |
| cve-2025-12158 | Simple User Capabilities <= 1.0 - Missing Authorizatio… |
tanvirahmed1984 |
Simple User Capabilities |
2025-11-04T04:27:22.881Z | 2025-11-04T15:01:57.048Z | |
| cve-2025-12452 | Visit Counter 1.0 - Cross-Site Request Forgery to Stor… |
bestiadurmiente |
Visit Counter |
2025-11-04T04:27:22.522Z | 2025-11-04T15:08:35.205Z | |
| cve-2025-11733 | Footnotes Made Easy <= 3.0.7 - Unauthenticated Stored … |
lumiblog |
Footnotes Made Easy |
2025-11-04T04:27:22.165Z | 2025-11-04T15:10:40.025Z | |
| cve-2025-12065 | WP Carticon <= 1.0.0 - Authenticated (Admin+) Stored C… |
carticon |
WP Carticon |
2025-11-04T04:27:21.798Z | 2025-11-04T15:10:58.084Z | |
| cve-2025-12371 | Nari Accountant <= 1.0.12 - Authenticated (Editor+) St… |
shakhi |
Nari Accountant |
2025-11-04T04:27:21.431Z | 2025-11-04T15:15:44.559Z | |
| cve-2025-12389 | Import Export For WooCommerce <= 1.6.2 - Missing Autho… |
sidngr |
Import Export For WooCommerce |
2025-11-04T04:27:21.061Z | 2025-11-04T15:20:23.287Z | |
| cve-2025-11704 | Elegance Menu <= 1.9 - Authenticated (Contributor+) Lo… |
impacttechlab |
Elegance Menu |
2025-11-04T04:27:20.117Z | 2025-11-04T15:51:56.144Z | |
| cve-2025-12402 | LinkedIn Resume <= 2.00 - Cross-Site Request Forgery t… |
bondnono |
LinkedIn Resume |
2025-11-04T04:27:19.651Z | 2025-11-04T15:52:16.797Z | |
| cve-2025-12415 | MapMap <= 1.1 - Cross-Site Request Forgery to Settings… |
sugiartha |
MapMap |
2025-11-04T04:27:19.056Z | 2025-11-04T15:53:00.650Z | |
| cve-2025-12156 | Ai Auto Tool Content Writing Assistant (Gemini Writer,… |
aitool |
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One |
2025-11-04T04:27:18.698Z | 2025-11-04T16:08:38.677Z | |
| cve-2025-11724 | EM Beer Manager <= 3.2.3 - Authenticated (Subscriber+)… |
erinmorelli |
EM Beer Manager |
2025-11-04T04:27:18.321Z | 2025-11-04T16:32:44.217Z | |
| cve-2025-12456 | Centangle Team Showcase <= 1.0.0 - Cross-Site Request … |
centangle |
Centangle-Team |
2025-11-04T04:27:17.736Z | 2025-11-04T16:43:20.440Z | |
| cve-2025-12400 | LMB^Box Smileys <= 3.2 - Cross-Site Request Forgery to… |
lmbbox |
LMB^Box Smileys |
2025-11-04T04:27:17.374Z | 2025-11-04T16:47:13.869Z | |
| cve-2025-12369 | Extensions for Leaflet Map <= 4.7 - Authenticated (Con… |
hupe13 |
Extensions for Leaflet Map |
2025-11-04T04:27:17.014Z | 2025-11-04T16:47:34.277Z | |
| cve-2025-11890 | Crypto Payment Gateway with Payeer for WooCommerce <= … |
beycanpress |
Crypto Payment Gateway with Payeer for WooCommerce |
2025-11-04T04:27:16.569Z | 2025-11-04T16:47:59.207Z | |
| cve-2025-12157 | Simple User Capabilities <= 1.0 - Missing Authorizatio… |
tanvirahmed1984 |
Simple User Capabilities |
2025-11-04T04:27:16.185Z | 2025-11-04T17:16:00.320Z | |
| cve-2025-12410 | SH Contextual Help <= 3.2.1 - Cross-Site Request Forge… |
samhoamt |
SH Contextual Help |
2025-11-04T04:27:15.805Z | 2025-11-04T21:01:21.541Z | |
| cve-2025-11758 | All in One Time Clock Lite – Tracking Employee Time Ha… |
codebangers |
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier |
2025-11-04T04:27:15.403Z | 2025-11-04T21:00:48.168Z | |
| cve-2025-12413 | Social Media WPCF7 Stop Words <= 1.1.3 - Cross-Site Re… |
socialmedialtd |
WPCF7 Stop words |
2025-11-04T04:27:14.981Z | 2025-11-04T21:00:10.133Z | |
| cve-2025-12350 | DominoKit <= 1.1.0 - Missing Authorization to Unauthen… |
domiinodev |
DominoKit |
2025-11-04T04:27:14.553Z | 2025-11-04T20:59:31.623Z | |
| cve-2025-12393 | Free Quotation <= 3.1.6 - Authenticated (Admin+) Store… |
kris_iv |
Free Quotation |
2025-11-04T04:27:14.125Z | 2025-11-04T20:58:53.990Z | |
| cve-2025-12416 | Pagerank Tools <= 1.1.5 - Cross-Site Request Forgery t… |
mahype |
Pagerank tools |
2025-11-04T04:27:13.744Z | 2025-11-04T20:56:39.593Z | |
| cve-2025-10896 | Multiple Plugins <= Multiple Versions - Missing Author… |
litonice13 |
Master Blocks – Ultimate Gutenberg Blocks for Marketers |
2025-11-04T04:27:13.331Z | 2025-11-04T20:55:54.279Z | |
| cve-2025-12412 | Top Bar Notification <= 1.12 - Cross-Site Request Forg… |
josereyev |
Top Bar Notification |
2025-11-04T04:27:12.930Z | 2025-11-04T20:53:26.807Z | |
| cve-2025-12188 | Posts Navigation Links for Sections and Headings - Fre… |
wpmasterscom |
Posts Navigation Links for Sections and Headings – Free by WP Masters |
2025-11-04T04:27:12.323Z | 2025-11-04T20:52:13.667Z | |
| cve-2025-12683 | 5.8 (v4.0) | NULL DACL assigned to Named Pipe communicating with SY… |
Voidtools |
Everything |
2025-11-04T04:23:02.884Z | 2025-11-04T20:50:21.977Z |
| cve-2025-12069 | WP Global Screen Options <= 0.2 - Cross-Site Request F… |
stiand |
WP Global Screen Options |
2025-11-04T03:26:47.094Z | 2025-11-04T18:48:00.111Z | |
| cve-2025-11008 | CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Inform… |
ce21com |
CE21 Suite |
2025-11-04T03:26:46.726Z | 2025-11-04T18:48:23.226Z | |
| cve-2025-12401 | Label Plugins <= 0.5 - Cross-Site Request Forgery to S… |
theode |
Label Plugins |
2025-11-04T03:26:46.350Z | 2025-11-04T18:48:46.590Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-12695 | 5.9 (v3.1) | Insecure configuration in DSPy lead to arbitrary file … |
|
|
2025-11-04T13:24:42.358Z | 2025-11-04T14:19:33.945Z |
| cve-2025-12682 | Easy Upload Files During Checkout <= 2.9.8 - Unauthent… |
fahadmahmood |
Easy Upload Files During Checkout |
2025-11-04T13:47:35.380Z | 2025-11-04T14:16:38.630Z | |
| cve-2025-41114 | 8.7 (v4.0) | Missing Authorization vulnerability in CanalDenuncia.app |
CanalDenuncia |
CanalDenuncia.app |
2025-11-04T13:10:31.829Z | 2025-11-04T18:32:18.961Z |
| cve-2025-41113 | 8.7 (v4.0) | Missing Authorization vulnerability in CanalDenuncia.app |
CanalDenuncia |
CanalDenuncia.app |
2025-11-04T13:10:12.086Z | 2025-11-04T18:51:57.285Z |
| cve-2025-41112 | 8.7 (v4.0) | Missing Authorization vulnerability in CanalDenuncia.app |
CanalDenuncia |
CanalDenuncia.app |
2025-11-04T13:09:53.897Z | 2025-11-04T14:18:59.923Z |
| cve-2025-41111 | 8.7 (v4.0) | Missing Authorization vulnerability in CanalDenuncia.app |
CanalDenuncia |
CanalDenuncia.app |
2025-11-04T13:08:40.472Z | 2025-11-04T14:19:54.307Z |
| cve-2025-12493 | ShopLentor <= 3.2.5 - Unauthenticated Local PHP File I… |
devitemsllc |
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) |
2025-11-04T11:19:27.403Z | 2025-11-04T20:13:56.143Z | |
| cve-2025-12045 | Orbit Fox Companion <= 3.0.2 - Authenticated (Author+)… |
themeisle |
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More |
2025-11-04T11:19:27.966Z | 2025-11-04T18:53:30.602Z | |
| cve-2025-11690 | 8.5 (v3.1) | IDOR vulnerability in the CFMOTO RIDE API |
CFMOTO |
RIDE |
2025-11-04T10:25:45.416Z | 2025-11-10T18:24:47.168Z |
| cve-2025-20749 | N/A | In charger, there is a possible out of bounds wri… |
MediaTek, Inc. |
MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8169, MT8188, MT8195, MT8196, MT8781, MT8796 |
2025-11-04T06:20:51.979Z | 2025-11-05T04:55:28.632Z |
| cve-2025-20748 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:23.128Z | 2025-11-05T04:55:29.380Z |
| cve-2025-20747 | N/A | In gnss service, there is a possible out of bound… |
MediaTek, Inc. |
MT2718, MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6982, MT6985, MT6986, MT6986D, MT6989, MT6990, MT6991, MT8676, MT8678, MT8755, MT8893 |
2025-11-04T06:20:19.607Z | 2025-11-05T04:55:31.133Z |
| cve-2025-20746 | N/A | In gnss service, there is a possible out of bound… |
MediaTek, Inc. |
MT2718, MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6982, MT6985, MT6986, MT6986D, MT6989, MT6990, MT6991, MT8676, MT8678, MT8755, MT8893 |
2025-11-04T06:20:17.860Z | 2025-11-05T04:55:32.792Z |
| cve-2025-20745 | N/A | In apusys, there is a possible memory corruption … |
MediaTek, Inc. |
MT2718, MT6989, MT6991, MT8370, MT8390, MT8395, MT8676, MT8678, MT87920 |
2025-11-04T06:20:03.095Z | 2025-11-05T04:55:47.647Z |
| cve-2025-20744 | N/A | In pda, there is a possible escalation of privile… |
MediaTek, Inc. |
MT6899, MT6991, MT8793 |
2025-11-04T06:19:59.710Z | 2025-11-05T04:55:45.818Z |
| cve-2025-20743 | N/A | In clkdbg, there is a possible escalation of priv… |
MediaTek, Inc. |
MT2718, MT6761, MT6765, MT6768, MT6781, MT6853, MT6877, MT6886, MT6893, MT6897, MT6899, MT6983, MT6989, MT6991, MT8113, MT8163, MT8168, MT8169, MT8183, MT8186, MT8188, MT8195, MT8196, MT8321, MT8365, MT8385, MT8390, MT8391, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8755, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788E, MT8791T, MT8792, MT8793, MT8796, MT8797, MT8798, MT8873, MT8883, MT8893 |
2025-11-04T06:19:57.990Z | 2025-11-05T04:55:44.828Z |
| cve-2025-20742 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:19:56.287Z | 2025-11-05T04:55:43.910Z |
| cve-2025-20741 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:21.366Z | 2025-11-05T04:55:30.330Z |
| cve-2025-20740 | N/A | In wlan STA driver, there is a possible out of bo… |
MediaTek, Inc. |
MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 |
2025-11-04T06:19:54.584Z | 2025-11-04T15:04:25.506Z |
| cve-2025-20739 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:16.025Z | 2025-11-05T04:55:33.598Z |
| cve-2025-20738 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:14.296Z | 2025-11-05T04:55:34.374Z |
| cve-2025-20737 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:19:52.883Z | 2025-11-05T04:55:42.993Z |
| cve-2025-20736 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:12.530Z | 2025-11-05T04:55:35.164Z |
| cve-2025-20735 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:19:50.999Z | 2025-11-05T04:55:42.073Z |
| cve-2025-20734 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:10.764Z | 2025-11-05T04:55:51.084Z |
| cve-2025-20733 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:19:49.117Z | 2025-11-05T04:55:41.224Z |
| cve-2025-20732 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:08.954Z | 2025-11-05T04:55:50.276Z |
| cve-2025-20731 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:07.276Z | 2025-11-05T04:55:49.411Z |
| cve-2025-20730 | N/A | In preloader, there is a possible escalation of p… |
MediaTek, Inc. |
MT2737, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6990, MT6991, MT8188, MT8195, MT8676, MT8678, MT8696 |
2025-11-04T06:19:47.152Z | 2025-11-05T04:55:40.432Z |
| cve-2025-20729 | N/A | In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:20:05.491Z | 2025-11-05T04:55:48.589Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-169431 | Malicious code in uafagarug-mfie-dtut (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169430 | Malicious code in uafagaru-musafie-dtut (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169429 | Malicious code in uafaarug-mifi-sut (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169428 | Malicious code in tusya-sfd-ss3da (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169427 | Malicious code in tusya-sfd-reaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169426 | Malicious code in tusya-fss-ss3da (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169425 | Malicious code in tusya-fss-s3da (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169424 | Malicious code in tusya-fss-s3a (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169423 | Malicious code in tusya-fss-3a (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169422 | Malicious code in tusya-fses-ss3da (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169421 | Malicious code in tusya-fsefss-ss3da (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169420 | Malicious code in tusya-fsd-sdeaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169419 | Malicious code in tusya-fsd-frssdeaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169418 | Malicious code in tusya-fsd-frseaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169417 | Malicious code in tusya-fsd-frsdeaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169416 | Malicious code in tusya-fsassd-sdeaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169415 | Malicious code in tusya-fsasd-sdeaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169414 | Malicious code in tusya-fd-rseaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169413 | Malicious code in tusya-fd-frseaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169412 | Malicious code in tusya-fasss-ssa (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169411 | Malicious code in tusya-fass-ssa (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169410 | Malicious code in tusya-fass-ss3a (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169409 | Malicious code in tusya-fass-s3a (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169408 | Malicious code in tusaya-s-rfe (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169407 | Malicious code in tusaya-reff-sdeaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169406 | Malicious code in tusaya-fsassd-sdeaf (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169405 | Malicious code in tusaaya-sssad-s (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169404 | Malicious code in tusaaya-ssad-s (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169403 | Malicious code in tusaaya-ss-rfe (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| mal-2025-169402 | Malicious code in tusaaya-ss-r2fe (npm) | 2025-11-12T16:47:05Z | 2025-11-12T16:47:05Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:11411 | Red Hat Security Advisory: kernel security update | 2025-07-21T04:16:44+00:00 | 2025-11-11T08:42:56+00:00 |
| rhsa-2025:11402 | Red Hat Security Advisory: avahi security update | 2025-07-21T02:20:49+00:00 | 2025-11-11T09:29:52+00:00 |
| rhsa-2025:11401 | Red Hat Security Advisory: valkey security update | 2025-07-21T01:24:54+00:00 | 2025-11-11T16:22:53+00:00 |
| rhsa-2025:11396 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.4.5 security and bug fix update | 2025-07-18T15:51:18+00:00 | 2025-11-12T16:52:16+00:00 |
| rhsa-2025:10862 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2025-07-18T09:57:57+00:00 | 2025-11-11T12:34:18+00:00 |
| rhsa-2025:10782 | Red Hat Security Advisory: OpenShift Container Platform 4.16.44 packages and security update | 2025-07-18T09:40:47+00:00 | 2025-11-11T20:38:50+00:00 |
| rhsa-2025:10861 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2025-07-18T08:45:45+00:00 | 2025-11-11T12:34:17+00:00 |
| rhsa-2025:10768 | Red Hat Security Advisory: OpenShift Container Platform 4.18.20 packages and security update | 2025-07-18T08:33:56+00:00 | 2025-11-11T20:38:48+00:00 |
| rhsa-2025:10781 | Red Hat Security Advisory: OpenShift Container Platform 4.16.44 bug fix and security update | 2025-07-17T21:33:05+00:00 | 2025-11-11T20:38:48+00:00 |
| rhsa-2025:10767 | Red Hat Security Advisory: OpenShift Container Platform 4.18.20 bug fix and security update | 2025-07-17T21:32:29+00:00 | 2025-11-11T20:38:48+00:00 |
| rhsa-2025:10874 | Red Hat Security Advisory: OpenJDK 21.0.8 Security Update for Portable Linux Builds | 2025-07-17T16:43:55+00:00 | 2025-11-11T07:51:15+00:00 |
| rhsa-2025:10875 | Red Hat Security Advisory: OpenJDK 21.0.8 Security Update for Windows Builds | 2025-07-17T16:43:38+00:00 | 2025-11-11T07:51:15+00:00 |
| rhsa-2025:10870 | Red Hat Security Advisory: OpenJDK 17.0.16 Security Update for Windows Builds | 2025-07-17T16:31:03+00:00 | 2025-11-11T07:51:14+00:00 |
| rhsa-2025:10869 | Red Hat Security Advisory: OpenJDK 17.0.16 Security Update for Portable Linux Builds | 2025-07-17T16:27:32+00:00 | 2025-11-11T07:51:14+00:00 |
| rhsa-2025:10864 | Red Hat Security Advisory: OpenJDK 8u462 Windows Security Update | 2025-07-17T16:21:11+00:00 | 2025-11-11T12:34:19+00:00 |
| rhsa-2025:10863 | Red Hat Security Advisory: OpenJDK 8u462 Security Update for Portable Linux Builds | 2025-07-17T16:20:40+00:00 | 2025-11-11T12:34:19+00:00 |
| rhsa-2025:11386 | Red Hat Security Advisory: updated RHEL-8 based Middleware Containers container images | 2025-07-17T15:25:25+00:00 | 2025-11-11T16:22:44+00:00 |
| rhsa-2025:11388 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.5.0 | 2025-07-17T14:21:22+00:00 | 2025-11-07T03:32:07+00:00 |
| rhsa-2025:11382 | Red Hat Security Advisory: tomcat security update | 2025-07-17T11:05:31+00:00 | 2025-11-11T12:34:25+00:00 |
| rhsa-2025:11381 | Red Hat Security Advisory: tomcat security update | 2025-07-17T10:53:55+00:00 | 2025-11-11T12:34:24+00:00 |
| rhsa-2025:11375 | Red Hat Security Advisory: kernel-rt security update | 2025-07-17T09:35:41+00:00 | 2025-11-07T13:08:51+00:00 |
| rhsa-2025:10747 | Red Hat Security Advisory: OpenShift Container Platform 4.13.59 bug fix and security update | 2025-07-17T02:10:31+00:00 | 2025-10-21T04:17:36+00:00 |
| rhsa-2025:11358 | Red Hat Security Advisory: kernel security update | 2025-07-17T00:20:19+00:00 | 2025-11-07T13:08:50+00:00 |
| rhsa-2025:11339 | Red Hat Security Advisory: cloud-init security update | 2025-07-16T15:43:53+00:00 | 2025-11-11T09:40:25+00:00 |
| rhsa-2025:11337 | Red Hat Security Advisory: cloud-init security update | 2025-07-16T15:37:58+00:00 | 2025-11-11T09:40:24+00:00 |
| rhsa-2025:11333 | Red Hat Security Advisory: tomcat security update | 2025-07-16T15:30:03+00:00 | 2025-11-11T12:34:23+00:00 |
| rhsa-2025:11335 | Red Hat Security Advisory: tomcat security update | 2025-07-16T15:28:33+00:00 | 2025-11-11T12:34:23+00:00 |
| rhsa-2025:11334 | Red Hat Security Advisory: tomcat security update | 2025-07-16T15:25:28+00:00 | 2025-11-11T12:34:23+00:00 |
| rhsa-2025:11332 | Red Hat Security Advisory: tomcat9 security update | 2025-07-16T15:19:33+00:00 | 2025-11-11T12:34:21+00:00 |
| rhsa-2025:10873 | Red Hat Security Advisory: java-21-openjdk security update | 2025-07-16T14:32:48+00:00 | 2025-11-11T07:51:15+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-37989 | net: phy: leds: fix memory leak | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37988 | fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37987 | pds_core: Prevent possible adminq overflow/stuck condition | 2025-05-02T00:00:00.000Z | 2025-08-06T00:00:00.000Z |
| msrc_cve-2025-37985 | USB: wdm: close race between wdm_open and wdm_wwan_port_stop | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37984 | crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() | 2025-05-02T00:00:00.000Z | 2025-09-04T01:05:17.000Z |
| msrc_cve-2025-37983 | qibfs: fix _another_ leak | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37982 | wifi: wl1251: fix memory leak in wl1251_tx_work | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37980 | block: fix resource leak in blk_register_queue() error path | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37979 | ASoC: qcom: Fix sc7280 lpass potential buffer overflow | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37977 | scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set | 2025-05-02T00:00:00.000Z | 2025-09-04T01:30:15.000Z |
| msrc_cve-2025-37976 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2025-05-02T00:00:00.000Z | 2025-09-04T02:20:05.000Z |
| msrc_cve-2025-37973 | wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37972 | Input: mtk-pmic-keys - fix possible null pointer dereference | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37970 | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37969 | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37968 | iio: light: opt3001: fix deadlock due to concurrent flag access | 2025-05-02T00:00:00.000Z | 2025-09-04T01:26:58.000Z |
| msrc_cve-2025-37967 | usb: typec: ucsi: displayport: Fix deadlock | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37963 | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37961 | ipvs: fix uninit-value for saddr in do_output_route4 | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37960 | memblock: Accept allocated memory before use in memblock_double_array() | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37958 | mm/huge_memory: fix dereferencing invalid pmd migration entry | 2025-05-02T00:00:00.000Z | 2025-08-06T00:00:00.000Z |
| msrc_cve-2025-37957 | KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37956 | ksmbd: prevent rename with empty string | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37954 | smb: client: Avoid race in open_cached_dir with lease breaks | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37952 | ksmbd: Fix UAF in __close_file_table_ids | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37951 | drm/v3d: Add job to pending list if the reset was skipped | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37948 | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37947 | ksmbd: prevent out-of-bounds stream writes by validating *pos | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37944 | wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37943 | wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-000077 | Multiple vulnerabilities in Aterm HC100RC | 2018-07-12T15:04+09:00 | 2019-08-27T13:52+09:00 |
| jvndb-2018-000076 | Multiple vulnerabilities in Aterm W300P | 2018-07-12T15:04+09:00 | 2019-08-27T16:56+09:00 |
| jvndb-2018-000075 | Multiple OS command injection vulnerabilities in Aterm WG1200HP | 2018-07-12T15:04+09:00 | 2019-08-27T13:44+09:00 |
| jvndb-2018-000072 | The installers of multiple Logicool software programs may insecurely load Dynamic Link Libraries | 2018-07-06T14:36+09:00 | 2019-07-05T17:38+09:00 |
| jvndb-2018-000071 | DHC Online Shop App for Android fails to verify SSL server certificates | 2018-07-06T14:36+09:00 | 2019-07-05T17:35+09:00 |
| jvndb-2018-000070 | Installer of Glary Utilities may insecurely load Dynamic Link Libraries | 2018-07-03T13:42+09:00 | 2019-07-05T17:52+09:00 |
| jvndb-2018-000069 | Cybozu Garoon vulnerable to SQL injection | 2018-07-02T15:22+09:00 | 2019-07-05T17:55+09:00 |
| jvndb-2018-000068 | Multiple vulnerabilities in Calsos CSDX and CSDJ series products | 2018-07-02T15:22+09:00 | 2019-07-24T14:31+09:00 |
| jvndb-2018-000067 | Mailman vulnerable to cross-site scripting | 2018-06-28T12:30+09:00 | 2019-07-24T15:21+09:00 |
| jvndb-2018-000066 | MemoCGI vulnerable to directory traversal | 2018-06-27T14:44+09:00 | 2019-07-05T17:58+09:00 |
| jvndb-2018-000065 | ANA App for iOS fails to verify SSL server certificates | 2018-06-15T14:40+09:00 | 2019-12-27T18:08+09:00 |
| jvndb-2018-000064 | Chrome Extension "5000 trillion yen converter" vulnerable to cross-site scripting | 2018-06-15T14:36+09:00 | 2018-06-15T14:36+09:00 |
| jvndb-2018-000062 | Local File Inclusion vulnerability in Zenphoto | 2018-06-13T15:11+09:00 | 2018-06-13T15:11+09:00 |
| jvndb-2018-000063 | LINE for Windows may insecurely load Dynamic Link Libraries | 2018-06-12T14:44+09:00 | 2018-06-12T14:44+09:00 |
| jvndb-2018-000061 | H2O vulnerable to buffer overflow | 2018-06-04T14:10+09:00 | 2018-06-04T14:10+09:00 |
| jvndb-2018-000060 | Multiple vulnerabilities in Pixelpost | 2018-05-31T14:07+09:00 | 2018-05-31T14:07+09:00 |
| jvndb-2018-000057 | The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely invoke an executable file | 2018-05-29T13:47+09:00 | 2019-12-27T18:09+09:00 |
| jvndb-2018-000059 | WordPress plugin "Site Reviews" vulnerable to cross-site scripting | 2018-05-28T14:11+09:00 | 2019-07-02T14:25+09:00 |
| jvndb-2018-000058 | WordPress plugin "Email Subscribers & Newsletters" vulnerable to cross-site scripting | 2018-05-28T14:11+09:00 | 2019-07-02T14:50+09:00 |
| jvndb-2018-003553 | Information Disclosure Vulnerability in Hitachi Automation Director | 2018-05-28T12:13+09:00 | 2018-07-31T12:16+09:00 |
| jvndb-2018-000046 | The installer of PlayMemories Home for Windows may insecurely load Dynamic Link Libraries | 2018-05-24T15:25+09:00 | 2019-07-02T14:31+09:00 |
| jvndb-2018-000056 | Susie plug-in "axpdfium" may insecurely load Dynamic Link Libraries | 2018-05-24T15:15+09:00 | 2019-07-02T14:53+09:00 |
| jvndb-2018-000054 | Multiple cross-site scripting vulnerabilities in Cybozu Mailwise | 2018-05-22T15:26+09:00 | 2018-08-30T17:47+09:00 |
| jvndb-2018-000055 | Multiple vulnerabilities in baserCMS | 2018-05-22T14:53+09:00 | 2019-12-27T18:10+09:00 |
| jvndb-2018-000053 | Multiple vulnerabilities in Cybozu Office | 2018-05-22T14:30+09:00 | 2018-08-30T16:03+09:00 |
| jvndb-2018-000052 | Nessus vulnerable to cross-site scripting | 2018-05-21T13:39+09:00 | 2018-08-30T13:47+09:00 |
| jvndb-2018-000049 | Multiple Microsoft Windows applications and installers may insecurely load Dynamic Link Libraries | 2018-05-17T15:18+09:00 | 2019-07-05T16:40+09:00 |
| jvndb-2018-000051 | The installer of Visual C++ Redistributable may insecurely load Dynamic Link Libraries | 2018-05-17T14:57+09:00 | 2019-07-05T16:41+09:00 |
| jvndb-2018-000050 | Self-Extracting Archive files created by IExpress may insecurely load Dynamic Link Libraries | 2018-05-17T14:57+09:00 | 2018-08-21T16:40+09:00 |
| jvndb-2018-000048 | KINEPASS App fails to verify SSL server certificates | 2018-05-11T14:34+09:00 | 2018-08-30T15:01+09:00 |
| ID | Description | Updated |
|---|