Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-71092
N/A
RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() Linux
Linux
2026-01-13T15:34:53.110Z 2026-01-13T15:34:53.110Z
CVE-2025-71091
N/A
team: fix check for port enabled in team_queue_overrid… Linux
Linux
2026-01-13T15:34:52.431Z 2026-01-13T15:34:52.431Z
CVE-2025-71090
N/A
nfsd: fix nfsd_file reference leak in nfsd4_add_rdacce… Linux
Linux
2026-01-13T15:34:51.777Z 2026-01-13T15:34:51.777Z
CVE-2025-71089
N/A
iommu: disable SVA when CONFIG_X86 is set Linux
Linux
2026-01-13T15:34:51.079Z 2026-01-13T15:34:51.079Z
CVE-2025-71088
N/A
mptcp: fallback earlier on simult connection Linux
Linux
2026-01-13T15:34:50.377Z 2026-01-13T15:34:50.377Z
CVE-2025-71087
N/A
iavf: fix off-by-one issues in iavf_config_rss_reg() Linux
Linux
2026-01-13T15:34:49.691Z 2026-01-13T15:34:49.691Z
CVE-2025-71086
N/A
net: rose: fix invalid array index in rose_kill_by_device() Linux
Linux
2026-01-13T15:34:49.007Z 2026-01-13T15:34:49.007Z
CVE-2025-71085
N/A
ipv6: BUG() in pskb_expand_head() as part of calipso_s… Linux
Linux
2026-01-13T15:34:48.324Z 2026-01-13T15:34:48.324Z
CVE-2025-71084
N/A
RDMA/cm: Fix leaking the multicast GID table reference Linux
Linux
2026-01-13T15:34:47.665Z 2026-01-13T15:34:47.665Z
CVE-2025-71083
N/A
drm/ttm: Avoid NULL pointer deref for evicted BOs Linux
Linux
2026-01-13T15:34:46.974Z 2026-01-13T15:34:46.974Z
CVE-2025-71082
N/A
Bluetooth: btusb: revert use of devm_kzalloc in btusb Linux
Linux
2026-01-13T15:34:46.301Z 2026-01-13T15:34:46.301Z
CVE-2025-71081
N/A
ASoC: stm32: sai: fix OF node leak on probe Linux
Linux
2026-01-13T15:34:45.503Z 2026-01-13T15:34:45.503Z
CVE-2025-71080
N/A
ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT Linux
Linux
2026-01-13T15:34:44.832Z 2026-01-13T15:34:44.832Z
CVE-2025-71079
N/A
net: nfc: fix deadlock between nfc_unregister_device a… Linux
Linux
2026-01-13T15:34:44.136Z 2026-01-13T15:34:44.136Z
CVE-2025-71078
N/A
powerpc/64s/slb: Fix SLB multihit issue during SLB preload Linux
Linux
2026-01-13T15:34:43.437Z 2026-01-13T15:34:43.437Z
CVE-2025-71077
N/A
tpm: Cap the number of PCR banks Linux
Linux
2026-01-13T15:31:29.435Z 2026-01-13T15:31:29.435Z
CVE-2025-71076
N/A
drm/xe/oa: Limit num_syncs to prevent oversized allocations Linux
Linux
2026-01-13T15:31:28.759Z 2026-01-13T15:31:28.759Z
CVE-2025-71075
N/A
scsi: aic94xx: fix use-after-free in device removal path Linux
Linux
2026-01-13T15:31:28.075Z 2026-01-13T15:31:28.075Z
CVE-2025-71072
N/A
shmem: fix recovery on rename failures Linux
Linux
2026-01-13T15:31:26.089Z 2026-01-13T15:31:26.089Z
CVE-2025-71071
N/A
iommu/mediatek: fix use-after-free on probe deferral Linux
Linux
2026-01-13T15:31:25.400Z 2026-01-13T15:31:25.400Z
CVE-2025-71070
N/A
ublk: clean up user copy references on ublk server exit Linux
Linux
2026-01-13T15:31:24.709Z 2026-01-13T15:31:24.709Z
CVE-2025-71069
N/A
f2fs: invalidate dentry cache on failed whiteout creation Linux
Linux
2026-01-13T15:31:23.948Z 2026-01-13T15:31:23.948Z
CVE-2025-71068
N/A
svcrdma: bound check rq_pages index in inline path Linux
Linux
2026-01-13T15:31:23.283Z 2026-01-13T15:31:23.283Z
CVE-2025-71066
N/A
net/sched: ets: Always remove class from active list b… Linux
Linux
2026-01-13T15:31:21.931Z 2026-01-13T15:31:21.931Z
CVE-2025-71065
N/A
f2fs: fix to avoid potential deadlock Linux
Linux
2026-01-13T15:31:21.235Z 2026-01-13T15:31:21.235Z
CVE-2025-71064
N/A
net: hns3: using the num_tqps in the vf driver to appl… Linux
Linux
2026-01-13T15:31:20.503Z 2026-01-13T15:31:20.503Z
CVE-2025-68823
N/A
ublk: fix deadlock when reading partition table Linux
Linux
2026-01-13T15:29:25.392Z 2026-01-13T15:29:25.392Z
CVE-2025-68822
N/A
Input: alps - fix use-after-free bugs caused by dev3_r… Linux
Linux
2026-01-13T15:29:24.703Z 2026-01-13T15:29:24.703Z
CVE-2025-68821
N/A
fuse: fix readahead reclaim deadlock Linux
Linux
2026-01-13T15:29:24.014Z 2026-01-13T15:29:24.014Z
CVE-2025-68820
N/A
ext4: xattr: fix null pointer deref in ext4_raw_inode() Linux
Linux
2026-01-13T15:29:23.351Z 2026-01-13T15:29:23.351Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-7673
9.8 (3.1)
A buffer overflow vulnerability in the URL parser… Zyxel
VMG8825-T50K firmware
2025-07-16T07:11:02.974Z 2025-07-19T03:55:18.953Z
CVE-2025-66052
8.6 (4.0)
Command injection in Vivotek IP7137 cameras Vivotek
IP7137
2026-01-09T11:54:16.626Z 2026-01-09T12:51:10.558Z
CVE-2025-66051
6.9 (4.0)
Path traversal in Vivotek IP7137 cameras Vivotek
IP7137
2026-01-09T11:54:09.170Z 2026-01-09T14:07:13.457Z
CVE-2025-6265
7.2 (3.1)
A path traversal vulnerability in the file_upload… Zyxel
NWA50AX PRO firmware
2025-07-15T01:32:10.377Z 2025-07-19T03:55:15.778Z
CVE-2025-66050
9.3 (4.0)
No password set for administrative account in Vivotek … Vivotek
IP7137
2026-01-09T11:53:45.338Z 2026-01-09T14:08:08.233Z
CVE-2025-66049
8.7 (4.0)
Unprotected RTSP stream in Vivotek IP7137 cameras Vivotek
IP7137
2026-01-09T11:53:41.060Z 2026-01-09T16:22:19.535Z
CVE-2025-46286
4.3 (3.1)
A logic issue was addressed with improved validat… Apple
iOS and iPadOS
2026-01-09T21:14:39.092Z 2026-01-09T21:34:49.689Z
CVE-2025-46297
5.5 (3.1)
A permissions issue was addressed with additional… Apple
macOS
2026-01-09T21:18:39.834Z 2026-01-12T16:24:06.174Z
CVE-2025-62235
N/A
Apache Mynewt NimBLE: Incorrect handling of SMP Securi… Apache Software Foundation
Apache Mynewt NimBLE
2026-01-10T09:42:30.446Z 2026-01-12T16:45:27.886Z
CVE-2025-0926
5.9 (3.1)
Gee-netics, member of AXIS Camera Station Pro Bug… Axis Communications AB
AXIS Camera Station Pro
2025-04-23T05:22:03.489Z 2025-04-23T13:08:49.871Z
CVE-2025-46298
6.5 (3.1)
The issue was addressed with improved memory hand… Apple
tvOS
2026-01-09T21:16:30.193Z 2026-01-12T16:24:12.312Z
CVE-2025-46299
4.3 (3.1)
A memory initialization issue was addressed with … Apple
tvOS
2026-01-09T21:15:50.158Z 2026-01-09T22:03:08.142Z
CVE-2025-9614
6.5 (3.1)
CVE-2025-9614 PCI-SIG
PCI Express Integrity and Data Encryption (PCIe IDE) Specification
2025-12-09T18:48:36.950Z 2025-12-10T20:09:20.429Z
CVE-2025-9613
6.5 (3.1)
CVE-2025-9613 PCI-SIG
PCI Express Integrity and Data Encryption (PCIe IDE) Specification
2025-12-09T18:52:02.956Z 2025-12-10T17:04:11.448Z
CVE-2025-9612
5.1 (3.1)
CVE-2025-9612 PCI-SIG
PCI Express Integrity and Data Encryption (PCIe IDE) Specification
2025-12-09T18:44:59.620Z 2025-12-11T14:57:09.949Z
CVE-2025-1056
6.1 (3.1)
Gee-netics, member of AXIS Camera Station Pro Bug… Axis Communications AB
AXIS Camera Station Pro
2025-04-23T05:18:10.120Z 2025-04-23T13:09:33.255Z
CVE-2025-53477
N/A
Apache Mynewt NimBLE: NULL Pointer Dereference in NimB… Apache Software Foundation
Apache Mynewt NimBLE
2026-01-10T09:45:27.630Z 2026-01-12T16:54:48.496Z
CVE-2025-53470
N/A
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerabilit… Apache Software Foundation
Apache Mynewt NimBLE
2026-01-10T09:46:35.789Z 2026-01-12T19:12:52.715Z
CVE-2025-46687
5.6 (3.1)
quickjs-ng through 0.9.0 has a missing length che… QuickJS Project
QuickJS
2025-04-27T00:00:00.000Z 2025-04-28T16:19:35.018Z
CVE-2023-0274
N/A
URL Params < 2.5 - Contributor+ Stored XSS Unknown
URL Params
2023-08-16T11:03:26.919Z 2024-10-08T19:08:53.579Z
CVE-2025-67399
4.6 (3.1)
An issue in AIRTH SMART HOME AQI MONITOR Bootload… n/a
n/a
2026-01-14T00:00:00.000Z 2026-01-14T16:09:43.888Z
CVE-2025-64723
4.8 (4.0)
Arduino IDE for macOS has TCC Bypass via Dynamic Libra… arduino
arduino-ide
2025-12-18T15:15:15.883Z 2026-01-14T16:41:03.867Z
CVE-2025-64710
5.3 (4.0)
Bitplatform Boilerplate has cross-site scripting vulne… bitfoundation
bitplatform
2025-11-13T01:40:55.653Z 2026-01-14T16:36:25.003Z
CVE-2025-55213
5.8 (4.0)
OpenFGA Authorization Bypass (Check) openfga
openfga
2025-08-18T19:23:33.684Z 2025-08-18T19:49:55.886Z
CVE-2023-25039
4.3 (3.1)
WordPress Google Maps CP plugin <= 1.0.43 - Missing Au… CodePeople
Google Maps CP
2024-03-25T11:46:49.366Z 2024-08-02T11:11:43.681Z
CVE-2023-27608
6.5 (3.1)
WordPress Points and Rewards for WooCommerce plugin <=… WP Swings
Points and Rewards for WooCommerce
2024-03-25T11:12:54.772Z 2024-08-02T12:16:36.885Z
CVE-2023-27459
7.4 (3.1)
WordPress User Registration plugin <= 2.3.2.1 - Authen… WPEverest
User Registration
2024-03-26T20:01:36.479Z 2024-08-02T14:37:16.271Z
CVE-2024-28893
7.7 (3.1)
Certain HP software packages (SoftPaqs) are poten… HP Inc.
HP software packages (SoftPaqs)
2024-05-01T15:45:25.307Z 2025-03-27T15:08:57.666Z
CVE-2025-69274
2.3 (4.0)
Spectrum broken authorization scheme Broadcom
DX NetOps Spectrum
2026-01-12T04:42:39.547Z 2026-01-12T14:58:15.237Z
CVE-2025-69275
7.1 (4.0)
Spectrum outdated java library in class-path Broadcom
DX NetOps Spectrum
2026-01-12T04:47:07.893Z 2026-01-12T14:57:23.830Z
ID Description Published Updated
fkie_cve-2025-66052 Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "sy… 2026-01-09T12:15:53.883 2026-01-14T17:50:09.087
fkie_cve-2025-66051 Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible f… 2026-01-09T12:15:53.740 2026-01-14T17:49:09.330
fkie_cve-2025-6265 A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware ver… 2025-07-15T02:15:28.080 2026-01-14T17:48:56.863
fkie_cve-2025-66050 Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any passwor… 2026-01-09T12:15:53.587 2026-01-14T17:48:29.730
fkie_cve-2025-66049 Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue … 2026-01-09T12:15:53.420 2026-01-14T17:48:18.313
fkie_cve-2025-46286 A logic issue was addressed with improved validation. This issue is fixed in iOS 26.2 and iPadOS 26… 2026-01-09T22:15:59.407 2026-01-14T17:46:11.003
fkie_cve-2025-46297 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe … 2026-01-09T22:15:59.580 2026-01-14T17:46:06.847
fkie_cve-2025-62235 Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Secu… 2026-01-10T10:15:50.820 2026-01-14T17:45:58.133
fkie_cve-2025-0926 Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for… 2025-04-23T06:15:45.200 2026-01-14T17:45:54.573
fkie_cve-2025-46298 The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.… 2026-01-09T22:15:59.693 2026-01-14T17:45:48.230
fkie_cve-2025-46299 A memory initialization issue was addressed with improved memory handling. This issue is fixed in t… 2026-01-09T22:15:59.797 2026-01-14T17:45:42.583
fkie_cve-2025-9614 An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification… 2025-12-09T19:15:50.943 2026-01-14T17:44:00.217
fkie_cve-2025-9613 A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specif… 2025-12-09T19:15:50.837 2026-01-14T17:43:52.943
fkie_cve-2025-9612 An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification… 2025-12-09T19:15:50.730 2026-01-14T17:43:47.990
fkie_cve-2025-1056 Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a sp… 2025-04-23T06:15:46.573 2026-01-14T17:41:50.350
fkie_cve-2025-53477 NULL Pointer Dereference vulnerability in Apache Nimble. Missing validation of HCI connection comp… 2026-01-10T10:15:50.660 2026-01-14T17:38:58.047
fkie_cve-2025-53470 Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could… 2026-01-10T10:15:50.493 2026-01-14T17:38:48.897
fkie_cve-2025-46687 quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a hea… 2025-04-27T20:15:15.720 2026-01-14T17:30:17.067
fkie_cve-2023-0274 The URL Params WordPress plugin before 2.5 does not validate and escape some of its shortcode attri… 2023-08-16T12:15:12.067 2026-01-14T17:19:44.310
fkie_cve-2025-67399 An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker … 2026-01-14T16:15:56.610 2026-01-14T17:16:06.930
fkie_cve-2025-64723 Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS… 2025-12-18T16:15:55.470 2026-01-14T17:16:06.700
fkie_cve-2025-64710 Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are … 2025-11-13T03:16:28.930 2026-01-14T17:16:06.577
fkie_cve-2025-55213 OpenFGA is a high-performance and flexible authorization/permission engine built for developers and… 2025-08-18T20:15:29.897 2026-01-14T17:10:47.670
fkie_cve-2023-25039 Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP:… 2024-03-25T12:15:10.027 2026-01-14T17:09:33.947
fkie_cve-2023-27608 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affe… 2024-03-25T12:15:10.287 2026-01-14T17:08:37.260
fkie_cve-2023-27459 Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects U… 2024-03-26T20:15:08.737 2026-01-14T17:00:55.330
fkie_cve-2024-28893 Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when… 2024-05-01T16:15:07.553 2026-01-14T16:54:44.270
fkie_cve-2025-69274 Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Wi… 2026-01-12T05:16:11.497 2026-01-14T16:48:55.327
fkie_cve-2025-69275 Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Wind… 2026-01-12T05:16:11.643 2026-01-14T16:47:26.547
fkie_cve-2024-20887 Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker… 2024-06-04T07:15:47.413 2026-01-14T16:46:02.513
ID Severity Description Published Updated
ghsa-f98m-rgjw-h2rv
6.4 (3.1)
The WP Popup Magic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name'… 2026-01-09T12:32:25Z 2026-01-09T12:32:25Z
ghsa-6mpj-fw9g-9wqm
3.5 (3.1)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6… 2026-01-09T12:32:25Z 2026-01-09T12:32:25Z
ghsa-29gv-cv9c-r93w
8.6 (3.1)
This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of … 2026-01-09T12:32:25Z 2026-01-09T12:32:25Z
ghsa-xqqj-h3wv-qfx7
6.4 (3.1)
The Nearby Now Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'd… 2026-01-09T12:32:24Z 2026-01-09T12:32:24Z
ghsa-qc3w-f7pj-hx87
6.1 (3.1)
The Top Position Google Finance plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin… 2026-01-09T12:32:24Z 2026-01-09T12:32:24Z
ghsa-p7gw-xwgf-7w7c
6.5 (3.1)
GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 be… 2026-01-09T12:32:24Z 2026-01-09T12:32:24Z
ghsa-jxx7-c7v6-wh2p
7.1 (3.1)
GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.5.5, 18.6 be… 2026-01-09T12:32:24Z 2026-01-09T12:32:24Z
ghsa-8j38-6f9j-vg43
6.4 (3.1)
The Entry Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's … 2026-01-09T12:32:24Z 2026-01-09T12:32:24Z
ghsa-3r2c-p78w-vg88
8.0 (3.1)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.3, and … 2026-01-09T12:32:24Z 2026-01-09T12:32:24Z
ghsa-w2j6-r4xj-rjcj
5.4 (3.1)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6… 2026-01-09T12:32:23Z 2026-01-09T12:32:23Z
ghsa-rp7g-q3r4-jjjr
6.3 (3.1)
2.1 (4.0)
A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impa… 2026-01-09T00:30:28Z 2026-01-09T12:32:23Z
ghsa-rh5v-9jwc-7736
6.5 (3.1)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 … 2026-01-09T12:32:23Z 2026-01-09T12:32:23Z
ghsa-xqjx-hmf9-wj9v
6.4 (3.1)
The AMP for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploa… 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-vxqj-cqqr-q9rw
7.2 (3.1)
The Eventin – Event Manager, Events Calendar, Event Tickets and Registrations plugin for WordPress … 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-v43w-wv28-g523
5.3 (3.1)
The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve… 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-q2gj-jpwc-8f46
7.6 (3.1)
A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the fil… 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-gxfw-m8jc-p6cp
7.2 (3.1)
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting … 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-gr9w-rm5h-x7gv
4.3 (3.1)
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-842v-gv8w-xp7c
5.9 (3.1)
8.2 (4.0)
Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-m… 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-82jv-f4jx-8r27
8.8 (3.1)
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fail… 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-5vqg-gqhg-cw89
9.1 (3.1)
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to missing authorization to una… 2026-01-09T09:31:20Z 2026-01-09T09:31:20Z
ghsa-x6m5-78q9-hvfg
5.2 (4.0)
Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 a… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ghsa-wh58-cvj2-mjv5
4.3 (3.1)
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ghsa-rx6q-58qj-7693
7.2 (3.1)
The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ghsa-rw38-7x7v-pfg6
6.5 (3.1)
The BetterDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ghsa-qgw8-6p5h-7w7m
4.3 (3.1)
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ghsa-mj4h-gvfv-49mm
6.4 (3.1)
The BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin for W… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ghsa-gwjq-2874-69h8
7.2 (3.1)
The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `f… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ghsa-f79x-f7wm-9f4h
6.4 (3.1)
The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress i… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ghsa-f5wv-cvx7-7x88
5.3 (3.1)
Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker… 2026-01-09T09:31:19Z 2026-01-09T09:31:19Z
ID Severity Description Package Published Updated
pysec-2020-322
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:14.570909Z
pysec-2020-321
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorF… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:14.366685Z
pysec-2020-320
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` ar… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:14.101977Z
pysec-2020-319
In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not … tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.891462Z
pysec-2020-318
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.671465Z
pysec-2020-317
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in T… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.455948Z
pysec-2020-316
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.253783Z
pysec-2020-315
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.201827Z
pysec-2020-314
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` does not validate that … tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.149576Z
pysec-2020-313
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.097348Z
pysec-2020-312
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.010994Z
pysec-2020-311
In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` … tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.960487Z
pysec-2020-310
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation o… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.907152Z
pysec-2020-309
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmpty… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.701793Z
pysec-2020-308
In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` c… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.446415Z
pysec-2020-307
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlp… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.356862Z
pysec-2020-306
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `d… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.260463Z
pysec-2020-305
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Swit… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.169887Z
pysec-2021-637
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… tensorflow-cpu 2021-11-05T23:15:00Z 2021-12-09T06:35:11.562556Z
pysec-2021-636
TensorFlow is an open source platform for machine learning. In affected versions the `Imm… tensorflow-cpu 2021-11-05T23:15:00Z 2021-12-09T06:35:11.413655Z
pysec-2021-635
TensorFlow is an open source platform for machine learning. In affected versions the impl… tensorflow-cpu 2021-11-05T21:15:00Z 2021-12-09T06:35:11.266312Z
pysec-2021-634
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… tensorflow-cpu 2021-11-05T23:15:00Z 2021-12-09T06:35:11.117498Z
pysec-2020-304
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possib… tensorflow-gpu 2020-05-04T15:15:00Z 2021-12-09T06:35:11.657729Z
pysec-2019-235
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of servi… tensorflow-gpu 2019-04-24T17:29:00Z 2021-12-09T06:35:11.945126Z
pysec-2019-234
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced w… tensorflow-gpu 2019-12-16T21:15:00Z 2021-12-09T06:35:11.891064Z
pysec-2019-233
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute a… tensorflow-gpu 2019-04-23T21:29:00Z 2021-12-09T06:35:11.845396Z
pysec-2019-232
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow bef… tensorflow-gpu 2019-04-24T17:29:00Z 2021-12-09T06:35:11.800944Z
pysec-2019-231
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of… tensorflow-gpu 2019-04-23T21:29:00Z 2021-12-09T06:35:11.756170Z
pysec-2019-230
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The t… tensorflow-gpu 2019-04-24T21:29:00Z 2021-12-09T06:35:11.711453Z
pysec-2019-229
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Goo… tensorflow-gpu 2019-04-24T17:29:00Z 2021-12-09T06:35:11.612649Z
ID Description Updated
gsd-2024-3884 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:02.021774Z
gsd-2024-3883 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:02.077880Z
gsd-2024-3880 A vulnerability has been found in Tenda W30E 1.0.1.25(633) and classified as critical. Th… 2024-04-17T05:02:02.080484Z
gsd-2024-3879 A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25(633).… 2024-04-17T05:02:02.005700Z
gsd-2024-3875 A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. Th… 2024-04-17T05:02:02.029903Z
gsd-2024-27458 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:02.189278Z
gsd-2024-3904 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.971177Z
gsd-2024-3903 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.744366Z
gsd-2024-3902 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.917220Z
gsd-2024-3901 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.738443Z
gsd-2024-3900 Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in… 2024-04-17T05:02:01.798018Z
gsd-2024-3899 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.776803Z
gsd-2024-3897 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.926430Z
gsd-2024-3896 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.839826Z
gsd-2024-3894 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.923224Z
gsd-2024-3893 The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress … 2024-04-17T05:02:01.729007Z
gsd-2024-3892 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.787383Z
gsd-2024-3890 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Sc… 2024-04-17T05:02:01.995525Z
gsd-2024-3889 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cro… 2024-04-17T05:02:01.770672Z
gsd-2024-3888 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.882591Z
gsd-2024-3887 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.834983Z
gsd-2024-3886 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.915831Z
gsd-2024-3885 The format of the source doesn't require a description, click on the link for more details. 2024-04-17T05:02:01.856655Z
gsd-2024-3882 A vulnerability was found in Tenda W30E 1.0.1.25(633). It has been classified as critical… 2024-04-17T05:02:01.985356Z
gsd-2024-3881 A vulnerability was found in Tenda W30E 1.0.1.25(633) and classified as critical. This is… 2024-04-17T05:02:01.747944Z
gsd-2024-3878 A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20… 2024-04-17T05:02:01.849357Z
gsd-2024-3877 A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408). Affected b… 2024-04-17T05:02:01.778133Z
gsd-2024-3876 A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affec… 2024-04-17T05:02:01.925777Z
gsd-2024-3874 A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This… 2024-04-17T05:02:01.827037Z
gsd-2024-3873 A vulnerability was found in SMI SMI-EX-5414W up to 1.0.03. It has been classified as pro… 2024-04-17T05:02:01.974848Z
ID Description Published Updated
mal-2025-191474 Malicious code in vite-dynachunk (npm) 2025-11-26T04:53:42Z 2025-12-24T10:09:31Z
mal-2025-191447 Malicious code in vf-oss-template (npm) 2025-11-25T00:16:49Z 2025-12-24T10:09:31Z
mal-2025-190498 Malicious code in validator-node (npm) 2025-11-14T03:35:19Z 2025-12-24T10:09:31Z
MAL-2025-66552 Malicious code in vite-plugin-postcss-tools (npm) 2025-11-11T00:04:35Z 2025-12-24T10:09:31Z
MAL-2025-66551 Malicious code in tensor-fi-utils-lib (npm) 2025-11-11T00:09:38Z 2025-12-24T10:09:31Z
MAL-2025-49372 Malicious code in vite-smart-chunk (npm) 2025-11-05T23:17:31Z 2025-12-24T10:09:31Z
MAL-2025-48951 Malicious code in xdater (npm) 2025-10-29T01:46:43Z 2025-12-24T10:09:31Z
MAL-2025-48915 Malicious code in vite-plugin-es6-compat (npm) 2025-10-28T01:39:47Z 2025-12-24T10:09:31Z
MAL-2025-48914 Malicious code in vite-manual-chunker (npm) 2025-10-28T01:44:03Z 2025-12-24T10:09:31Z
MAL-2025-48784 Malicious code in vite-plugin-parsify (npm) 2025-10-27T07:09:08Z 2025-12-24T10:09:31Z
MAL-2025-48599 Malicious code in vite-compiler-tools (npm) 2025-10-24T02:49:26Z 2025-12-24T10:09:31Z
MAL-2025-48426 Malicious code in vite-plugin-parseflow (npm) 2025-10-15T13:05:55Z 2025-12-24T10:09:31Z
MAL-2025-192656 Malicious code in xvxx (npm) 2025-12-19T08:41:06Z 2025-12-24T10:09:31Z
MAL-2025-192645 Malicious code in vdous (npm) 2025-12-19T08:41:06Z 2025-12-24T10:09:31Z
MAL-2025-192402 Malicious code in wartsila-text-csv (npm) 2025-12-10T01:44:48Z 2025-12-24T10:09:31Z
MAL-2025-192375 Malicious code in tensor-fi-utils-core (npm) 2025-12-08T03:36:17Z 2025-12-24T10:09:31Z
MAL-2025-191669 Malicious code in wfui-dsm-react-ui (npm) 2025-12-02T17:30:50Z 2025-12-24T10:09:31Z
MAL-2025-191668 Malicious code in wfui-dbd-react-ui (npm) 2025-12-02T17:36:00Z 2025-12-24T10:09:31Z
MAL-2025-191600 Malicious code in vite-dynamic-chunks (npm) 2025-12-01T13:29:03Z 2025-12-24T10:09:31Z
MAL-2025-191504 Malicious code in testhaus (npm) 2025-12-01T16:00:47Z 2025-12-24T10:09:31Z
MAL-2025-191474 Malicious code in vite-dynachunk (npm) 2025-11-26T04:53:42Z 2025-12-24T10:09:31Z
MAL-2025-191447 Malicious code in vf-oss-template (npm) 2025-11-25T00:16:49Z 2025-12-24T10:09:31Z
MAL-2025-190498 Malicious code in validator-node (npm) 2025-11-14T03:35:19Z 2025-12-24T10:09:31Z
mal-2025-66550 Malicious code in szsec-infos-report (npm) 2025-11-11T00:02:04Z 2025-12-24T10:09:30Z
mal-2025-49446 Malicious code in supxmlparser (npm) 2025-11-09T00:17:09Z 2025-12-24T10:09:30Z
mal-2025-49441 Malicious code in superbankxmlparser (npm) 2025-11-09T00:17:09Z 2025-12-24T10:09:30Z
mal-2025-49439 Malicious code in study-lab-npm-test (npm) 2025-11-09T00:17:09Z 2025-12-24T10:09:30Z
mal-2025-49435 Malicious code in something-not-in-cache (npm) 2025-11-09T00:17:09Z 2025-12-24T10:09:30Z
mal-2025-49383 Malicious code in rce-poc-test-honor-mcp (npm) 2025-11-07T04:05:52Z 2025-12-24T10:09:30Z
mal-2025-49382 Malicious code in rce-poc-test-honor-dev (npm) 2025-11-07T04:05:52Z 2025-12-24T10:09:30Z
ID Description Published Updated
wid-sec-w-2025-0382 Linux Kernel: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten 2025-02-16T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2025-0381 libarchive: Schwachstelle ermöglicht Denial of Service 2025-02-16T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2025-0366 Vaultwarden: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen 2025-02-13T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2024-3486 Apache Tomcat: Mehrere Schwachstellen 2024-11-17T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2024-3296 Mozilla Firefox, ESR und Thunderbird: Mehrere Schwachstellen 2024-10-29T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2024-3057 Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2024-10-01T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2024-0344 Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff 2024-02-11T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2024-0097 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2024-01-15T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2024-0032 Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen 2024-01-09T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-3181 Linux Kernel: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2023-12-19T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-3090 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2023-12-10T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-2770 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2023-10-29T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-2643 Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2023-10-15T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-2598 Linux Kernel: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen 2023-10-09T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-2553 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2023-10-03T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-2530 Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen 2023-10-01T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-2525 Linux Kernel: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2023-10-01T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-2284 Linux Kernel: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2023-09-06T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-1971 Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2023-08-06T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-1957 Linux Kernel: Mehrere Schwachstellen 2023-08-03T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2023-0126 Oracle MySQL: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2022-1596 Eclipse Jetty: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2021-06-22T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2022-1522 Oracle Java SE: Mehrere Schwachstellen 2020-07-14T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2025-1012 Red Hat Enterprise Linux: Mehrere Schwachstellen 2025-05-12T22:00:00.000+00:00 2025-05-12T22:00:00.000+00:00
wid-sec-w-2025-1011 Dell PowerScale InsightIQ: Mehrere Schwachstellen 2025-05-12T22:00:00.000+00:00 2025-05-12T22:00:00.000+00:00
wid-sec-w-2025-1009 Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen 2025-05-12T22:00:00.000+00:00 2025-05-12T22:00:00.000+00:00
wid-sec-w-2025-1008 Apache Superset: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen 2025-05-12T22:00:00.000+00:00 2025-05-12T22:00:00.000+00:00
wid-sec-w-2025-0994 Kong Insomnia: Schwachstelle ermöglicht Codeausführung 2025-05-11T22:00:00.000+00:00 2025-05-12T22:00:00.000+00:00
wid-sec-w-2025-0985 F5 BIG-IP: Mehrere Schwachstellen 2025-05-07T22:00:00.000+00:00 2025-05-12T22:00:00.000+00:00
wid-sec-w-2025-0492 AMD EPYC Prozessoren: Schwachstelle ermöglicht Codeausführung 2025-03-05T23:00:00.000+00:00 2025-05-12T22:00:00.000+00:00
ID Description Published Updated
rhsa-2025:11695 Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.5 release and security update 2025-07-28T13:54:01+00:00 2026-01-15T15:59:54+00:00
rhsa-2025:11386 Red Hat Security Advisory: updated RHEL-8 based Middleware Containers container images 2025-07-17T15:25:25+00:00 2026-01-15T15:59:54+00:00
rhsa-2025:11742 Red Hat Security Advisory: Red Hat JBoss Web Server 6.1.1 release and security update 2025-07-30T15:55:40+00:00 2026-01-15T15:59:53+00:00
rhsa-2025:10484 Red Hat Security Advisory: python3 security update 2025-07-07T16:21:57+00:00 2026-01-15T15:59:53+00:00
rhsa-2025:10602 Red Hat Security Advisory: python3 security update 2025-07-08T11:17:19+00:00 2026-01-15T15:59:52+00:00
rhsa-2025:10399 Red Hat Security Advisory: python3.9 security update 2025-07-07T11:25:51+00:00 2026-01-15T15:59:51+00:00
rhsa-2025:10136 Red Hat Security Advisory: python3.9 security update 2025-07-01T21:13:33+00:00 2026-01-15T15:59:51+00:00
rhsa-2025:10128 Red Hat Security Advisory: python3 security update 2025-07-01T20:06:34+00:00 2026-01-15T15:59:51+00:00
rhsa-2025:10148 Red Hat Security Advisory: python3.11 security update 2025-07-01T22:05:54+00:00 2026-01-15T15:59:50+00:00
rhsa-2025:9918 Red Hat Security Advisory: python3.11 security update 2025-06-30T13:43:06+00:00 2026-01-15T15:59:49+00:00
rhsa-2025:10140 Red Hat Security Advisory: python3.12 security update 2025-07-01T21:50:44+00:00 2026-01-15T15:59:49+00:00
rhsa-2025:10189 Red Hat Security Advisory: python3.12 security update 2025-07-02T06:27:20+00:00 2026-01-15T15:59:48+00:00
rhsa-2025:10028 Red Hat Security Advisory: python3.12 security update 2025-07-01T13:21:58+00:00 2026-01-15T15:59:48+00:00
rhsa-2025:10026 Red Hat Security Advisory: python3.11 security update 2025-07-01T13:22:58+00:00 2026-01-15T15:59:47+00:00
rhsa-2025:10031 Red Hat Security Advisory: python3.12 security update 2025-07-01T13:23:58+00:00 2026-01-15T15:59:45+00:00
rhsa-2025:9922 Red Hat Security Advisory: Streams for Apache Kafka 2.9.1 release and security update 2025-06-30T13:16:39+00:00 2026-01-15T15:59:41+00:00
rhsa-2025:9697 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.3 for Spring Boot patch release. 2025-06-25T19:47:43+00:00 2026-01-15T15:59:41+00:00
rhsa-2025:9696 Red Hat Security Advisory: apache-commons-beanutils security update 2025-06-25T19:30:28+00:00 2026-01-15T15:59:41+00:00
rhsa-2025:9318 Red Hat Security Advisory: javapackages-tools:201801 security update 2025-06-23T03:38:42+00:00 2026-01-15T15:59:40+00:00
rhsa-2025:9166 Red Hat Security Advisory: apache-commons-beanutils security update 2025-06-17T09:07:56+00:00 2026-01-15T15:59:40+00:00
rhsa-2025:9117 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update 2025-06-16T15:03:56+00:00 2026-01-15T15:59:40+00:00
rhsa-2025:9115 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update 2025-06-16T15:03:42+00:00 2026-01-15T15:59:39+00:00
rhsa-2025:9114 Red Hat Security Advisory: apache-commons-beanutils security update 2025-06-16T14:55:14+00:00 2026-01-15T15:59:39+00:00
rhsa-2025:8919 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.1.SP1) 2025-06-11T15:34:10+00:00 2026-01-15T15:59:39+00:00
rhsa-2025:8265 Red Hat Security Advisory: Red Hat build of Cryostat 4.0.1: new RHEL 9 container image security update 2025-06-05T02:19:45+00:00 2026-01-15T15:59:39+00:00
rhsa-2025:3467 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update 2025-04-01T13:06:47+00:00 2026-01-15T15:59:38+00:00
rhsa-2025:16667 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.15 security update 2025-09-25T00:09:21+00:00 2026-01-15T15:59:38+00:00
rhsa-2025:16409 Red Hat Security Advisory: Red Hat AMQ Broker 7.12.5 release and security update 2025-09-22T23:39:35+00:00 2026-01-15T15:59:38+00:00
rhsa-2025:15817 Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update 2025-09-15T15:04:50+00:00 2026-01-15T15:59:37+00:00
rhsa-2025:15816 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update 2025-09-15T15:05:00+00:00 2026-01-15T15:59:37+00:00
ID Description Published Updated
icsa-24-179-06 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-05 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-04 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-177-02 PTC Creo Elements/Direct License Server (Update A) 2024-06-25T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-03 Yokogawa FAST/TOOLS and CI Server 2024-06-27T06:00:00.000000Z 2024-06-27T06:00:00.000000Z
icsa-24-179-02 SDG Technologies PnPSCADA 2024-06-27T06:00:00.000000Z 2024-06-27T06:00:00.000000Z
icsa-24-179-01 TELSAT marKoni FM Transmitter 2024-06-27T06:00:00.000000Z 2024-06-27T06:00:00.000000Z
icsa-24-177-01 ABB 800xA Base 2024-06-25T06:00:00.000000Z 2024-06-25T06:00:00.000000Z
icsa-24-172-03 Westermo L210-F2G 2024-06-20T06:00:00.000000Z 2024-06-20T06:00:00.000000Z
icsa-24-172-02 CAREL Boss-Mini 2024-06-20T06:00:00.000000Z 2024-06-20T06:00:00.000000Z
icsa-24-172-01 Yokogawa CENTUM 2024-06-20T06:00:00.000000Z 2024-06-20T06:00:00.000000Z
icsa-24-170-01 RAD Data Communications SecFlow-2 2024-06-18T06:00:00.000000Z 2024-06-18T06:00:00.000000Z
icsa-24-165-19 Motorola Solutions Vigilant License Plate Readers 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-165-18 Rockwell Automation FactoryTalk View SE 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-165-17 Rockwell Automation FactoryTalk View SE 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-165-16 Rockwell Automation FactoryTalk View SE 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-165-14 Fuji Electric Tellus Lite V-Simulator 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-074-14 Mitsubishi Electric MELSEC-Q/L Series (Update B) 2024-03-14T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-20-245-01 Mitsubishi Electric Multiple Products (Update G) 2020-09-01T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-25-063-05 Hitachi Energy UNEM/ECST 2024-06-11T12:30:00.000000Z 2024-06-11T12:30:00.000000Z
icsa-25-063-04 Hitachi Energy XMC20 2024-06-11T12:30:00.000000Z 2024-06-11T12:30:00.000000Z
icsa-25-030-01 Hitachi Energy UNEM 2024-06-11T12:30:00.000000Z 2024-06-11T12:30:00.000000Z
icsa-25-016-07 Hitachi Energy FOX61x Products 2024-06-11T12:30:00.000000Z 2024-06-11T12:30:00.000000Z
icsa-25-016-06 Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products 2024-06-11T12:30:00.000000Z 2024-06-11T12:30:00.000000Z
icsma-24-163-01 MicroDicom DICOM Viewer 2024-06-11T06:00:00.000000Z 2024-06-11T06:00:00.000000Z
icsa-24-163-04 Intrado 911 Emergency Gateway 2024-06-11T06:00:00.000000Z 2024-06-11T06:00:00.000000Z
icsa-24-163-03 AVEVA PI Asset Framework Client 2024-06-11T06:00:00.000000Z 2024-06-11T06:00:00.000000Z
icsa-24-163-02 AVEVA PI Web API 2024-06-11T06:00:00.000000Z 2024-06-11T06:00:00.000000Z
icsa-24-163-01 Rockwell Automation ControlLogix, GuardLogix, and CompactLogix 2024-06-11T06:00:00.000000Z 2024-06-11T06:00:00.000000Z
icsa-23-108-02 Schneider Electric APC Easy UPS Online Monitoring Software (Update A) 2023-04-18T06:00:00.000000Z 2024-06-11T06:00:00.000000Z
ID Description Published Updated
cisco-sa-ios-nxos-xr-udld-dos-W5hGHgtQ Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-ikev2-ebfrwmpr Cisco IOS and IOS XE Software IKEv2 AutoReconnect Feature Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-ikev2-ebFrwMPr Cisco IOS and IOS XE Software IKEv2 AutoReconnect Feature Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-fxo-pattern-bypass-juxgygyv Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-fxo-pattern-bypass-jUXgygYv Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-ewlc-gre-6u4elzat Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers EoGRE Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-ewlc-gre-6u4ELzAT Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers EoGRE Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-ewlc-capwap-rce-lygj8kf Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-ewlc-capwap-rce-LYgj8Kf Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-ewlc-capwap-dos-gmnjdkoy Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-ewlc-capwap-dos-gmNjdKOY Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-cisco-ap-lljsgxv Cisco Access Points SSH Management Privilege Escalation Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-cisco-ap-LLjsGxv Cisco Access Points SSH Management Privilege Escalation Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-cbr8snmp-zgjkz9fc Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Simple Network Management Protocol Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-cbr8snmp-zGjkZ9Fc Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Simple Network Management Protocol Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-cbr8-cops-vc2zsjsx Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-cbr8-cops-Vc2ZsJSx Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-asr900acl-ueeycxkv Cisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-asr900acl-UeEyCxkv Cisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-airo-wpa-pktleak-dos-ustygrl Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-airo-wpa-pktleak-dos-uSTyGrL Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-aaa-yx47zt8q Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-aaa-Yx47ZT8Q Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability 2021-09-22T16:00:00+00:00 2021-09-22T16:00:00+00:00
cisco-sa-iosxr-cmd-inj-wbzkvpxc Cisco IOS XR Software Command Injection Vulnerabilities 2021-09-08T16:00:00+00:00 2021-09-17T17:22:42+00:00
cisco-sa-iosxr-cmd-inj-wbZKvPxc Cisco IOS XR Software Command Injection Vulnerabilities 2021-09-08T16:00:00+00:00 2021-09-17T17:22:42+00:00
cisco-sa-openssl-2021-ghy28djd Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021 2021-03-25T16:00:00+00:00 2021-09-10T17:29:50+00:00
cisco-sa-openssl-2021-GHY28dJd Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021 2021-03-25T16:00:00+00:00 2021-09-10T17:29:50+00:00
cisco-sa-xrbgp-rpki-dos-gvmjqxbk Cisco IOS XR Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability 2021-09-08T16:00:00+00:00 2021-09-08T16:00:00+00:00
cisco-sa-lnt-qn9mczwn Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities 2021-09-08T16:00:00+00:00 2021-09-08T16:00:00+00:00
cisco-sa-lnt-QN9mCzwn Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities 2021-09-08T16:00:00+00:00 2021-09-08T16:00:00+00:00
ID Description Published Updated
msrc_cve-2024-41079 nvmet: always initialize cqe.result 2024-07-01T07:00:00.000Z 2025-10-11T01:01:36.000Z
msrc_cve-2024-41062 bluetooth/l2cap: sync sock recv cb and release 2024-07-01T07:00:00.000Z 2025-10-11T01:01:26.000Z
msrc_cve-2024-56584 io_uring/tctx: work around xa_store() allocation error issue 2024-12-02T00:00:00.000Z 2025-10-10T14:35:34.000Z
msrc_cve-2024-56565 f2fs: fix to drop all discards after creating snapshot on lvm device 2024-12-02T00:00:00.000Z 2025-10-10T14:35:28.000Z
msrc_cve-2024-42319 mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() 2024-08-02T00:00:00.000Z 2025-10-10T14:35:23.000Z
msrc_cve-2024-42110 net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() 2024-07-01T07:00:00.000Z 2025-10-10T14:35:18.000Z
msrc_cve-2023-52888 media: mediatek: vcodec: Only free buffer VA that is not NULL 2024-07-01T07:00:00.000Z 2025-10-10T14:35:12.000Z
msrc_cve-2025-59220 Windows Bluetooth Service Elevation of Privilege Vulnerability 2025-09-09T07:00:00.000Z 2025-10-10T07:00:00.000Z
msrc_cve-2025-46819 Redis is vulnerable to DoS via specially crafted LUA scripts 2025-10-02T00:00:00.000Z 2025-10-10T01:37:12.000Z
msrc_cve-2025-46817 Lua library commands may lead to integer overflow and potential RCE 2025-10-02T00:00:00.000Z 2025-10-10T01:36:56.000Z
msrc_cve-2025-39957 wifi: mac80211: increase scan_ies_len for S1G 2025-10-02T00:00:00.000Z 2025-10-10T01:02:23.000Z
msrc_cve-2025-39955 tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). 2025-10-02T00:00:00.000Z 2025-10-10T01:02:17.000Z
msrc_cve-2025-39958 iommu/s390: Make attach succeed when the device was surprise removed 2025-10-02T00:00:00.000Z 2025-10-10T01:02:11.000Z
msrc_cve-2025-8291 ZIP64 End of Central Directory (EOCD) Locator record offset not checked 2025-10-02T00:00:00.000Z 2025-10-10T01:02:05.000Z
msrc_cve-2024-56592 bpf: Call free_htab_elem() after htab_unlock_bucket() 2024-12-02T00:00:00.000Z 2025-10-10T01:01:57.000Z
msrc_cve-2024-53234 erofs: handle NONHEAD !delta[1] lclusters gracefully 2024-12-02T00:00:00.000Z 2025-10-10T01:01:52.000Z
msrc_cve-2024-53220 f2fs: fix to account dirty data in __get_secs_required() 2024-12-02T00:00:00.000Z 2025-10-10T01:01:46.000Z
msrc_cve-2024-53196 KVM: arm64: Don't retire aborted MMIO instruction 2024-12-02T00:00:00.000Z 2025-10-10T01:01:40.000Z
msrc_cve-2024-53195 KVM: arm64: Get rid of userspace_irqchip_in_use 2024-12-02T00:00:00.000Z 2025-10-10T01:01:34.000Z
msrc_cve-2025-59271 Redis Enterprise Elevation of Privilege Vulnerability 2025-10-09T07:00:00.000Z 2025-10-09T07:00:00.000Z
msrc_cve-2025-59247 Azure PlayFab Elevation of Privilege Vulnerability 2025-10-09T07:00:00.000Z 2025-10-09T07:00:00.000Z
msrc_cve-2025-59246 Azure Entra ID Elevation of Privilege Vulnerability 2025-10-09T07:00:00.000Z 2025-10-09T07:00:00.000Z
msrc_cve-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability 2025-10-09T07:00:00.000Z 2025-10-09T07:00:00.000Z
msrc_cve-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability 2025-10-09T07:00:00.000Z 2025-10-09T07:00:00.000Z
msrc_cve-2023-36038 ASP.NET Core Denial of Service Vulnerability 2023-11-14T08:00:00.000Z 2025-10-08T07:00:00.000Z
msrc_cve-2025-61984 ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.) 2025-10-02T00:00:00.000Z 2025-10-08T01:02:05.000Z
msrc_cve-2025-61985 ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. 2025-10-02T00:00:00.000Z 2025-10-08T01:02:00.000Z
msrc_cve-2025-49844 Redis Lua Use-After-Free may lead to remote code execution 2025-10-02T00:00:00.000Z 2025-10-08T01:01:53.000Z
msrc_cve-2024-56707 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c 2024-12-02T00:00:00.000Z 2025-10-08T01:01:47.000Z
msrc_cve-2024-56641 net/smc: initialize close_work early to avoid warning 2024-12-02T00:00:00.000Z 2025-10-08T01:01:42.000Z
ID Description Updated
var-202203-1921 Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to … 2024-06-14T19:41:55.786000Z
var-200609-1229 The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… 2024-06-14T19:39:22.118000Z
var-202406-0059 A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0)… 2024-06-13T23:41:15.400000Z
var-202405-1101 The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, … 2024-06-13T23:41:15.526000Z
var-202209-0069 Opening a specially crafted file could cause the affected product to fail to release its … 2024-06-13T23:36:55.808000Z
var-202302-0891 Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials in a file… 2024-06-13T23:23:13.681000Z
var-201406-0117 The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 … 2024-06-13T23:00:33.950000Z
var-200609-1386 Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 throug… 2024-06-13T22:37:13.842000Z
var-200609-0868 The Installer application in Apple Mac OS X 10.4.8 and earlier, when used by a user with … 2024-06-13T22:34:16.859000Z
var-200609-0843 Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and … 2024-06-13T20:42:53.228000Z
var-201302-0248 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-06-13T20:28:08.491000Z
var-200609-1340 WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote atta… 2024-06-13T19:19:03.272000Z
var-202003-0210 Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Ci… 2024-06-12T23:07:41.878000Z
var-202405-0279 A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < … 2024-06-12T23:05:34.880000Z
var-201904-0995 lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers … 2024-06-12T22:59:11.245000Z
var-202210-1178 Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WT… 2024-06-12T22:56:54.766000Z
var-202008-0712 A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 … 2024-06-12T22:51:18.638000Z
var-202406-0101 Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerabilit… 2024-06-12T22:43:10.688000Z
var-200110-0280 OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… 2024-06-12T22:29:21.955000Z
var-201306-0258 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-06-12T22:04:48.520000Z
var-201505-0417 The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allow… 2024-06-12T21:47:20.585000Z
var-202311-0439 Affected devices do not properly sanitize an input field. This could allow an authentica… 2024-06-12T21:43:52.414000Z
var-202304-0702 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All ver… 2024-06-12T21:42:40.494000Z
var-202304-0700 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All ver… 2024-06-12T21:42:39.936000Z
var-201409-1154 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the value… 2024-06-12T21:39:25.573000Z
var-200110-0207 The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.… 2024-06-12T21:38:12.479000Z
var-202311-0437 Affected devices allow to change the password, but insufficiently check which password is… 2024-06-12T21:29:04.831000Z
var-200609-1116 Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 throug… 2024-06-12T21:24:39.913000Z
var-202312-0253 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All … 2024-06-12T21:12:24.581000Z
var-202304-0701 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All ver… 2024-06-12T20:23:05.185000Z
ID Description Published Updated
jvndb-2016-000056 kintone mobile for Android fails to verify SSL server certificates 2016-04-25T15:36+09:00 2017-05-23T14:28+09:00
jvndb-2016-000050 Photopt App fails to verify SSL server certificates 2016-04-19T13:44+09:00 2017-05-23T14:28+09:00
jvndb-2016-000049 Tokyo Star bank App fails to verify SSL server certificates 2016-04-13T14:30+09:00 2017-05-23T14:28+09:00
jvndb-2016-000004 Shoplat App for iOS issue in the verification of SSL certificates 2016-01-18T14:24+09:00 2017-05-23T13:57+09:00
jvndb-2016-000047 a-blog cms vulnerable to session management 2016-05-16T14:48+09:00 2017-05-23T13:44+09:00
jvndb-2016-000046 a-blog cms vulnerable to cross-site scripting 2016-05-16T14:48+09:00 2017-05-23T13:44+09:00
jvndb-2016-000019 Akerun - Smart Lock Robot App for iOS fails to verify SSL server certificates 2016-02-12T15:59+09:00 2017-05-23T12:25+09:00
jvndb-2016-000137 Cybozu Mailwise vulnerable to information disclosure 2016-08-16T14:14+09:00 2017-05-23T12:02+09:00
jvndb-2016-000136 Cybozu Mailwise vulnerable to information disclosure 2016-08-16T14:14+09:00 2017-05-23T12:02+09:00
jvndb-2016-000149 Cybozu Garoon fails to restrict access permissions 2016-08-22T15:16+09:00 2017-05-23T12:01+09:00
jvndb-2016-000148 Cybozu Garoon vulnerable to authentication bypass 2016-08-22T15:16+09:00 2017-05-23T12:01+09:00
jvndb-2016-000147 Cybozu Garoon vulnerable to SQL injection 2016-08-22T15:16+09:00 2017-05-23T12:01+09:00
jvndb-2016-000146 "Check available times" function in Cybozu Garoon vulnerable to cross-site scripting 2016-08-22T15:16+09:00 2017-05-23T12:01+09:00
jvndb-2016-000145 "New appointment" function in Cybozu Garoon vulnerable to cross-site scripting 2016-08-22T15:16+09:00 2017-05-23T12:01+09:00
jvndb-2016-000144 "User details" function in Cybozu Garoon vulnerable to cross-site scripting 2016-08-22T15:16+09:00 2017-05-23T12:01+09:00
jvndb-2016-000143 "Response request" function in Cybozu Garoon vulnerable to cross-site scripting 2016-08-22T15:16+09:00 2017-05-23T12:01+09:00
jvndb-2016-000142 Cybozu Garoon vulnerable to open redirect 2016-08-22T15:16+09:00 2017-05-23T12:01+09:00
jvndb-2016-000138 Cybozu Mailwise contains issue in preventing clickjacking attacks 2016-08-16T14:14+09:00 2017-05-23T12:01+09:00
jvndb-2014-000069 RockDisk vulnerable to cross-site scripting 2014-07-02T14:40+09:00 2017-05-17T17:07+09:00
jvndb-2016-000201 SetucoCMS vulnerable to session management 2016-10-07T15:04+09:00 2017-05-17T14:44+09:00
jvndb-2016-000200 SetucoCMS vulnerable to code injection 2016-10-07T15:04+09:00 2017-05-17T14:44+09:00
jvndb-2016-000199 SetucoCMS vulnerable to denial-of-service (DoS) 2016-10-07T15:04+09:00 2017-05-17T14:44+09:00
jvndb-2016-000198 SetucoCMS vulnerable to SQL injection 2016-10-07T15:04+09:00 2017-05-17T14:44+09:00
jvndb-2016-000197 SetucoCMS vulnerable to cross-site scripting 2016-10-07T15:04+09:00 2017-05-17T14:44+09:00
jvndb-2016-000196 SetucoCMS vulnerable to cross-site request forgery 2016-10-07T15:04+09:00 2017-05-17T14:44+09:00
jvndb-2016-000202 Usermin cross-site scripting vulnerabilties 2016-10-07T13:50+09:00 2017-05-16T17:52+09:00
jvndb-2017-000033 PrimeDrive Desktop Application Installer may insecurely load Dynamic Link Libraries 2017-03-01T15:53+09:00 2017-05-15T11:27+09:00
jvndb-2016-000193 Cybozu Office vulnerable to Reflected File Download (RFD) 2016-10-03T15:47+09:00 2017-04-24T15:10+09:00
jvndb-2016-000192 Cybozu Office vulnerable to denial-of-service (DoS) 2016-10-03T15:46+09:00 2017-04-24T15:10+09:00
jvndb-2016-000189 "Project" function in Cybozu Office vulnerable vulnerable to operation restriction bypass 2016-10-03T15:43+09:00 2017-04-24T15:10+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:02464-1 Security update for libgcrypt 2025-07-22T11:40:21Z 2025-07-22T11:40:21Z
suse-su-2025:02463-1 Security update for php8 2025-07-22T08:42:55Z 2025-07-22T08:42:55Z
suse-su-2025:02462-1 Security update for php8 2025-07-22T08:41:03Z 2025-07-22T08:41:03Z
suse-su-2025:02460-1 Security update for python 2025-07-22T05:48:26Z 2025-07-22T05:48:26Z
suse-su-2025:02459-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) 2025-07-22T05:04:25Z 2025-07-22T05:04:25Z
suse-su-2025:02456-1 Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3) 2025-07-21T21:18:35Z 2025-07-21T21:18:35Z
suse-su-2025:02455-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4) 2025-07-21T19:33:42Z 2025-07-21T19:33:42Z
suse-su-2025:01783-2 Security update for postgresql17 2025-07-21T19:31:41Z 2025-07-21T19:31:41Z
suse-su-2025:02454-1 Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3) 2025-07-21T19:03:58Z 2025-07-21T19:03:58Z
suse-su-2025:02451-1 Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4) 2025-07-21T17:33:48Z 2025-07-21T17:33:48Z
suse-su-2025:02449-1 Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) 2025-07-21T15:33:47Z 2025-07-21T15:33:47Z
suse-su-2025:02448-1 Security update for python-oslo.utils 2025-07-21T14:46:13Z 2025-07-21T14:46:13Z
suse-su-2025:02447-1 Security update for libgcrypt 2025-07-21T14:45:26Z 2025-07-21T14:45:26Z
suse-su-2025:02446-1 Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) 2025-07-21T14:33:46Z 2025-07-21T14:33:46Z
suse-su-2025:02445-1 Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4) 2025-07-21T14:04:05Z 2025-07-21T14:04:05Z
suse-su-2025:02444-1 Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4) 2025-07-21T13:04:21Z 2025-07-21T13:04:21Z
suse-su-2025:02442-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6) 2025-07-21T12:34:23Z 2025-07-21T12:34:23Z
suse-su-2025:02439-1 Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6) 2025-07-21T12:34:00Z 2025-07-21T12:34:00Z
suse-su-2025:02438-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5) 2025-07-21T12:33:57Z 2025-07-21T12:33:57Z
suse-su-2025:02437-1 Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5) 2025-07-21T12:33:50Z 2025-07-21T12:33:50Z
suse-su-2025:02436-1 Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4) 2025-07-21T12:33:43Z 2025-07-21T12:33:43Z
suse-su-2025:02440-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) 2025-07-21T12:04:43Z 2025-07-21T12:04:43Z
suse-su-2025:02434-1 Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4) 2025-07-21T12:04:26Z 2025-07-21T12:04:26Z
suse-su-2025:02433-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) 2025-07-21T11:33:36Z 2025-07-21T11:33:36Z
suse-su-2025:02432-1 Security update for iputils 2025-07-21T11:23:54Z 2025-07-21T11:23:54Z
suse-su-2025:02431-1 Security update for iputils 2025-07-21T11:23:49Z 2025-07-21T11:23:49Z
suse-su-2025:02430-1 Security update for iputils 2025-07-21T11:23:21Z 2025-07-21T11:23:21Z
suse-su-2025:02429-1 Security update for rmt-server 2025-07-21T11:04:10Z 2025-07-21T11:04:10Z
suse-su-2025:20502-1 Security update for iputils 2025-07-21T10:04:01Z 2025-07-21T10:04:01Z
suse-su-2025:02428-1 Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) 2025-07-21T09:04:15Z 2025-07-21T09:04:15Z
ID Description Published Updated
opensuse-su-2024:14360-1 postgresql16-16.4-1.1 on GA media 2024-09-23T00:00:00Z 2024-09-23T00:00:00Z
opensuse-su-2024:14359-1 cargo-c-0.10.3~git0.ee7d7ef-2.1 on GA media 2024-09-22T00:00:00Z 2024-09-22T00:00:00Z
opensuse-su-2024:14358-1 MozillaFirefox-130.0.1-1.1 on GA media 2024-09-22T00:00:00Z 2024-09-22T00:00:00Z
opensuse-su-2024:14357-1 chromedriver-129.0.6668.58-1.1 on GA media 2024-09-21T00:00:00Z 2024-09-21T00:00:00Z
opensuse-su-2024:14356-1 system-user-zabbix-6.0.33-1.1 on GA media 2024-09-20T00:00:00Z 2024-09-20T00:00:00Z
opensuse-su-2024:14355-1 stgit-2.4.12-1.1 on GA media 2024-09-20T00:00:00Z 2024-09-20T00:00:00Z
opensuse-su-2024:14354-1 rage-encryption-0.10.0+0-3.1 on GA media 2024-09-20T00:00:00Z 2024-09-20T00:00:00Z
opensuse-su-2024:14353-1 onefetch-2.22.0-1.1 on GA media 2024-09-20T00:00:00Z 2024-09-20T00:00:00Z
opensuse-su-2024:14352-1 python39-3.9.20-2.1 on GA media 2024-09-19T00:00:00Z 2024-09-19T00:00:00Z
opensuse-su-2024:14351-1 postgresql15-15.8-1.1 on GA media 2024-09-19T00:00:00Z 2024-09-19T00:00:00Z
opensuse-su-2024:14350-1 postgresql14-14.13-1.1 on GA media 2024-09-19T00:00:00Z 2024-09-19T00:00:00Z
opensuse-su-2024:14349-1 postgresql13-13.16-1.1 on GA media 2024-09-19T00:00:00Z 2024-09-19T00:00:00Z
opensuse-su-2024:14348-1 postgresql12-12.20-1.1 on GA media 2024-09-19T00:00:00Z 2024-09-19T00:00:00Z
opensuse-su-2024:14347-1 apr-devel-1.7.5-1.1 on GA media 2024-09-19T00:00:00Z 2024-09-19T00:00:00Z
opensuse-su-2024:14346-1 python311-3.11.9-7.1 on GA media 2024-09-18T00:00:00Z 2024-09-18T00:00:00Z
opensuse-su-2024:14345-1 python310-3.10.15-1.1 on GA media 2024-09-18T00:00:00Z 2024-09-18T00:00:00Z
opensuse-su-2024:14344-1 ffmpeg-6-6.1.1-9.1 on GA media 2024-09-18T00:00:00Z 2024-09-18T00:00:00Z
opensuse-su-2024:14343-1 ffmpeg-4-4.4.4-14.1 on GA media 2024-09-18T00:00:00Z 2024-09-18T00:00:00Z
opensuse-su-2024:14342-1 assimp-devel-5.4.3-2.1 on GA media 2024-09-18T00:00:00Z 2024-09-18T00:00:00Z
opensuse-su-2024:0305-1 Security update for gstreamer-plugins-bad 2024-09-17T08:54:10Z 2024-09-17T08:54:10Z
opensuse-su-2024:14341-1 libwireshark18-4.4.0-2.1 on GA media 2024-09-17T00:00:00Z 2024-09-17T00:00:00Z
opensuse-su-2024:14340-1 python38-3.8.20-1.1 on GA media 2024-09-17T00:00:00Z 2024-09-17T00:00:00Z
opensuse-su-2024:14339-1 ffmpeg-5-5.1.4-13.1 on GA media 2024-09-17T00:00:00Z 2024-09-17T00:00:00Z
opensuse-su-2024:0304-1 Security update for htmldoc 2024-09-16T14:01:45Z 2024-09-16T14:01:45Z
opensuse-su-2024:0303-1 Security update for htmldoc 2024-09-16T14:01:42Z 2024-09-16T14:01:42Z
opensuse-su-2024:0302-1 Security update for chromium 2024-09-16T08:29:07Z 2024-09-16T08:29:07Z
opensuse-su-2024:14338-1 wpa_supplicant-2.11-1.1 on GA media 2024-09-13T00:00:00Z 2024-09-13T00:00:00Z
opensuse-su-2024:14337-1 ucode-intel-20240910-1.1 on GA media 2024-09-13T00:00:00Z 2024-09-13T00:00:00Z
opensuse-su-2024:14336-1 ovmf-202405-1.1 on GA media 2024-09-13T00:00:00Z 2024-09-13T00:00:00Z
opensuse-su-2024:14335-1 chromedriver-128.0.6613.137-1.1 on GA media 2024-09-13T00:00:00Z 2024-09-13T00:00:00Z
ID Description Published Updated
cnvd-2025-27053 WordPress Community Events plugin跨站脚本漏洞 2025-11-05 2025-11-06
cnvd-2025-27052 WordPress Blocksy Companion Plugin跨站脚本漏洞 2025-11-05 2025-11-06
cnvd-2025-27051 WordPress Bard plugin跨站请求伪造漏洞 2025-11-05 2025-11-06
cnvd-2025-27050 WordPress AppPresser plugin未经授权的数据访问漏洞 2025-11-05 2025-11-06
cnvd-2025-27049 WordPress Analytify Pro plugin信息泄露漏洞 2025-11-05 2025-11-06
cnvd-2025-27048 WordPress Advanced Database Cleaner plugin跨站请求伪造漏洞 2025-11-05 2025-11-06
cnvd-2025-26891 多款Mozilla产品代码执行漏洞(CNVD-2025-26891) 2025-09-18 2025-11-06
cnvd-2025-26890 多款Mozilla产品欺骗漏洞(CNVD-2025-26890) 2025-09-18 2025-11-06
cnvd-2025-26885 Google Android权限提升漏洞(CNVD-2025-26885) 2025-09-08 2025-11-06
cnvd-2025-26884 Google Android权限提升漏洞(CNVD-2025-26884) 2025-09-08 2025-11-06
cnvd-2025-26883 Google Android权限提升漏洞(CNVD-2025-26883) 2025-09-08 2025-11-06
cnvd-2025-26882 Google Android权限提升漏洞(CNVD-2025-26882) 2025-09-08 2025-11-06
cnvd-2025-26881 Google Android拒绝服务漏洞(CNVD-2025-26881) 2025-09-08 2025-11-06
cnvd-2025-26880 Google Android信息泄露漏洞(CNVD-2025-26880) 2025-09-08 2025-11-06
cnvd-2025-26879 Google Android权限提升漏洞(CNVD-2025-26879) 2025-09-08 2025-11-06
cnvd-2025-26878 TP-LINK AX10信息泄露漏洞 2025-09-11 2025-11-06
cnvd-2025-27237 Tenda O3 formAdvSetLanip函数缓冲区溢出漏洞 2025-10-31 2025-11-05
cnvd-2025-27236 Tenda O3 form/setDhcpConfig函数函数缓冲区溢出漏洞 2025-10-31 2025-11-05
cnvd-2025-27235 Tenda CH22 fromVirtualSer函数缓冲区溢出漏洞 2025-10-31 2025-11-05
cnvd-2025-27234 Tenda CH22 fromSafeUrlFilter函数缓冲区溢出漏洞 2025-10-31 2025-11-05
cnvd-2025-27047 jonnys Liquor跨站脚本漏洞 2024-11-15 2025-11-05
cnvd-2025-27046 jonnys Liquor browse.php文件SQL注入漏洞 2025-07-21 2025-11-05
cnvd-2025-27045 jonnys Liquor delete-row.php文件SQL注入漏洞 2025-07-21 2025-11-05
cnvd-2025-27044 jonnys Liquor admin-area.php文件SQL注入漏洞 2025-07-21 2025-11-05
cnvd-2025-27043 Crime Reporting System userlogin.php文件SQL注入漏洞 2025-07-21 2025-11-05
cnvd-2025-27042 Crime Reporting System registration.php文件SQL注入漏洞 2025-07-21 2025-11-05
cnvd-2025-27041 Crime Reporting System policelogin.php文件SQL注入漏洞 2025-07-21 2025-11-05
cnvd-2025-27040 Crime Reporting System /headlogin.php文件SQL注入漏洞 2025-07-21 2025-11-05
cnvd-2025-27039 Crime Reporting System /complainer_page.php文件SQL注入漏洞 2025-07-21 2025-11-05
cnvd-2025-27038 Chat System update_room.php文件SQL注入漏洞 2024-12-30 2025-11-05
ID Description Published Updated
CERTFR-2025-AVI-0369 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0368 Multiples vulnérabilités dans le noyau Linux de Debian 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0367 Vulnérabilité dans le noyau Linux de Red Hat 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0366 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0365 Vulnérabilité dans les produits Microsoft 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0364 Multiples vulnérabilités dans Microsoft Azure 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0363 Multiples vulnérabilités dans Microsoft Edge 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0362 Vulnérabilité dans Sonicwall Secure Mobile Access 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0361 Multiples vulnérabilités dans les produits Mozilla 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0360 Multiples vulnérabilités dans les produits Tenable 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
CERTFR-2025-AVI-0359 Multiples vulnérabilités dans les produits Elastic 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
certfr-2025-avi-0358 Multiples vulnérabilités dans les produits Mozilla 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0357 Vulnérabilité dans les produits Symantec 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0356 Multiples vulnérabilités dans Splunk User Behavior Analytics (UBA) 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0354 Multiples vulnérabilités dans Google Chrome 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0258 Multiples vulnérabilités dans les produits Apple 2025-04-01T00:00:00.000000 2025-04-30T00:00:00.000000
CERTFR-2025-AVI-0358 Multiples vulnérabilités dans les produits Mozilla 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
CERTFR-2025-AVI-0357 Vulnérabilité dans les produits Symantec 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
CERTFR-2025-AVI-0356 Multiples vulnérabilités dans Splunk User Behavior Analytics (UBA) 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
CERTFR-2025-AVI-0354 Multiples vulnérabilités dans Google Chrome 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
CERTFR-2025-AVI-0258 Multiples vulnérabilités dans les produits Apple 2025-04-01T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0353 Multiples vulnérabilités dans les produits VMware 2025-04-29T00:00:00.000000 2025-04-29T00:00:00.000000
certfr-2025-avi-0352 Multiples vulnérabilités dans Apache Tomcat 2025-04-29T00:00:00.000000 2025-04-29T00:00:00.000000
CERTFR-2025-AVI-0353 Multiples vulnérabilités dans les produits VMware 2025-04-29T00:00:00.000000 2025-04-29T00:00:00.000000
CERTFR-2025-AVI-0352 Multiples vulnérabilités dans Apache Tomcat 2025-04-29T00:00:00.000000 2025-04-29T00:00:00.000000
certfr-2025-avi-0351 Vulnérabilité dans LibreOffice 2025-04-28T00:00:00.000000 2025-04-28T00:00:00.000000
certfr-2025-avi-0074 Vulnérabilité dans Synacor Zimbra Collaboration 2025-01-28T00:00:00.000000 2025-04-28T00:00:00.000000
CERTFR-2025-AVI-0351 Vulnérabilité dans LibreOffice 2025-04-28T00:00:00.000000 2025-04-28T00:00:00.000000
CERTFR-2025-AVI-0074 Vulnérabilité dans Synacor Zimbra Collaboration 2025-01-28T00:00:00.000000 2025-04-28T00:00:00.000000
certfr-2025-avi-0349 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-04-25T00:00:00.000000 2025-04-25T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated