Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-71200
N/A
mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction… Linux
Linux
2026-02-14T15:09:45.689Z 2026-02-14T15:09:45.689Z
CVE-2026-2312
4.3 (3.1)
Media Library Folders <= 8.3.6 - Insecure Direct Objec… maxfoundry
Media Library Folders
2026-02-14T11:24:28.662Z 2026-02-14T11:24:28.662Z
CVE-2026-1512
6.4 (3.1)
Essential Addons for Elementor <= 6.5.9 - Authenticate… wpdevteam
Essential Addons for Elementor – Popular Elementor Templates & Widgets
2026-02-14T09:49:39.256Z 2026-02-14T09:49:39.256Z
CVE-2026-1258
4.9 (3.1)
Mail Mint <= 1.19.2 - Authenticated (Administrator+) S… getwpfunnels
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more
2026-02-14T08:26:48.193Z 2026-02-14T08:26:48.193Z
CVE-2026-1843
7.2 (3.1)
Super Page Cache <= 5.2.2 - Unauthenticated Stored Cro… optimole
Super Page Cache
2026-02-14T08:26:47.080Z 2026-02-14T08:26:47.080Z
CVE-2026-0550
6.4 (3.1)
myCred <= 2.9.7.3 - Authenticated (Contributor+) Store… saadiqbal
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program.
2026-02-14T08:26:47.816Z 2026-02-14T08:26:47.816Z
CVE-2025-8572
9.8 (3.1)
Truelysell Core <= 1.8.7 - Unauthenticated Privilege E… dreamstechnologies
Truelysell Core
2026-02-14T08:26:47.464Z 2026-02-14T08:26:47.464Z
CVE-2026-1254
4.3 (3.1)
Modula Image Gallery – Photo Grid & Video Gallery <= 2… wpchill
Modula Image Gallery – Photo Grid & Video Gallery
2026-02-14T08:26:46.683Z 2026-02-14T08:26:46.683Z
CVE-2026-1249
5 (3.1)
MP3 Audio Player – Music Player, Podcast Player & Radi… sonaar
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
2026-02-14T08:26:46.021Z 2026-02-14T08:26:46.021Z
CVE-2026-1988
7.5 (3.1)
Flexi Product Slider and Grid for WooCommerce <= 1.0.5… wpdecent
Flexi Product Slider and Grid for WooCommerce
2026-02-14T06:42:37.658Z 2026-02-14T06:42:37.658Z
CVE-2026-1987
5.4 (3.1)
Scheduler Widget <= 0.1.6 - Insecure Direct Object Ref… morelmathieuj
Scheduler Widget
2026-02-14T06:42:37.284Z 2026-02-14T06:42:37.284Z
CVE-2026-1915
6.4 (3.1)
Simple Plyr <= 0.0.1 - Authenticated (Contributor+) St… bestony
Simple Plyr
2026-02-14T06:42:36.109Z 2026-02-14T06:42:36.109Z
CVE-2026-1187
6.4 (3.1)
ZoomifyWP Free <= 1.1 - Authenticated (Contributor+) S… terrazoom
ZoomifyWP Free
2026-02-14T06:42:36.502Z 2026-02-14T06:42:36.502Z
CVE-2026-0736
6.4 (3.1)
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.8 - Au… collectchat
Chatbot for WordPress by Collect.chat ⚡️
2026-02-14T06:42:36.906Z 2026-02-14T06:42:36.906Z
CVE-2026-1985
6.4 (3.1)
Press3D <= 1.0.2 - Authenticated (Author+) Stored Cros… arieslab
Press3D
2026-02-14T06:42:35.710Z 2026-02-14T06:42:35.710Z
CVE-2026-0753
7.2 (3.1)
Super Simple Contact Form <= 1.6.2 - Reflected Cross-S… bitacre
Super Simple Contact Form
2026-02-14T06:42:35.247Z 2026-02-14T06:42:35.247Z
CVE-2026-1306
9.8 (3.1)
midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File U… adminkov
midi-Synth
2026-02-14T06:42:34.875Z 2026-02-14T06:42:34.875Z
CVE-2026-0735
4.4 (3.1)
User Language Switch <= 1.6.10 - Authenticated (Admini… webilop
User Language Switch
2026-02-14T06:42:34.475Z 2026-02-14T06:42:34.475Z
CVE-2025-15483
4.4 (3.1)
Link Hopper <= 2.5 - Authenticated (Administrator+) St… ajferg
Link Hopper
2026-02-14T06:42:34.100Z 2026-02-14T06:42:34.100Z
CVE-2026-1910
6.4 (3.1)
UpMenu <= 3.1 - Authenticated (Contributor+) Stored Cr… upmenu
UpMenu – Online ordering for restaurants
2026-02-14T06:42:33.299Z 2026-02-14T06:42:33.299Z
CVE-2026-1303
5.3 (3.1)
MailChimp Campaigns <= 3.2.4 - Missing Authorization t… matthieuscarset
MailChimp Campaigns
2026-02-14T06:42:33.704Z 2026-02-14T06:42:33.704Z
CVE-2026-1096
6.4 (3.1)
Best-wp-google-map <= 2.1 - Authenticated (Contributor… raju_ahmed
Best-wp-google-map
2026-02-14T06:42:32.532Z 2026-02-14T06:42:32.532Z
CVE-2026-0693
4.4 (3.1)
Allow HTML in Category Descriptions <= 1.2.4 - Authent… arnoesterhuizen
Allow HTML in Category Descriptions
2026-02-14T06:42:32.915Z 2026-02-14T06:42:32.915Z
CVE-2026-0559
6.4 (3.1)
MasterStudy LMS WordPress Plugin – for Online Courses … stylemix
MasterStudy LMS WordPress Plugin – for Online Courses and Education
2026-02-14T06:42:32.152Z 2026-02-14T06:42:32.152Z
CVE-2026-1905
6.4 (3.1)
Sphere Manager <= 1.0.2 - Authenticated (Contributor+)… devmw
Sphere Manager
2026-02-14T06:42:31.305Z 2026-02-14T06:42:31.305Z
CVE-2026-1394
4.3 (3.1)
WP Quick Contact Us <= 1.0 - Cross-Site Request Forger… dmitritechs
WP Quick Contact Us
2026-02-14T06:42:31.697Z 2026-02-14T06:42:31.697Z
CVE-2026-1944
5.3 (3.1)
CallbackKiller service widget <= 1.2 - Missing Authori… krellbat
CallbackKiller service widget
2026-02-14T06:42:30.529Z 2026-02-14T06:42:30.529Z
CVE-2026-0557
6.4 (3.1)
WP Data Access <= 5.5.63 - Authenticated (Contributor+… peterschulznl
WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps
2026-02-14T06:42:30.165Z 2026-02-14T06:42:30.165Z
CVE-2025-14852
4.3 (3.1)
MDirector Newsletter <= 4.5.8 - Cross-Site Request For… antevenio
MDirector Newsletter
2026-02-14T06:42:30.914Z 2026-02-14T06:42:30.914Z
CVE-2026-2024
7.5 (3.1)
PhotoStack Gallery <= 0.4.1 - Unauthenticated SQL Inje… savitasoni
PhotoStack Gallery
2026-02-14T06:42:29.782Z 2026-02-14T06:42:29.782Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-71200
N/A
mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction… Linux
Linux
2026-02-14T15:09:45.689Z 2026-02-14T15:09:45.689Z
CVE-2026-2312
4.3 (3.1)
Media Library Folders <= 8.3.6 - Insecure Direct Objec… maxfoundry
Media Library Folders
2026-02-14T11:24:28.662Z 2026-02-14T11:24:28.662Z
CVE-2026-1512
6.4 (3.1)
Essential Addons for Elementor <= 6.5.9 - Authenticate… wpdevteam
Essential Addons for Elementor – Popular Elementor Templates & Widgets
2026-02-14T09:49:39.256Z 2026-02-14T09:49:39.256Z
CVE-2026-1843
7.2 (3.1)
Super Page Cache <= 5.2.2 - Unauthenticated Stored Cro… optimole
Super Page Cache
2026-02-14T08:26:47.080Z 2026-02-14T08:26:47.080Z
CVE-2026-1258
4.9 (3.1)
Mail Mint <= 1.19.2 - Authenticated (Administrator+) S… getwpfunnels
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more
2026-02-14T08:26:48.193Z 2026-02-14T08:26:48.193Z
CVE-2026-1254
4.3 (3.1)
Modula Image Gallery – Photo Grid & Video Gallery <= 2… wpchill
Modula Image Gallery – Photo Grid & Video Gallery
2026-02-14T08:26:46.683Z 2026-02-14T08:26:46.683Z
CVE-2026-1249
5 (3.1)
MP3 Audio Player – Music Player, Podcast Player & Radi… sonaar
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
2026-02-14T08:26:46.021Z 2026-02-14T08:26:46.021Z
CVE-2026-0550
6.4 (3.1)
myCred <= 2.9.7.3 - Authenticated (Contributor+) Store… saadiqbal
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program.
2026-02-14T08:26:47.816Z 2026-02-14T08:26:47.816Z
CVE-2025-8572
9.8 (3.1)
Truelysell Core <= 1.8.7 - Unauthenticated Privilege E… dreamstechnologies
Truelysell Core
2026-02-14T08:26:47.464Z 2026-02-14T08:26:47.464Z
CVE-2026-2024
7.5 (3.1)
PhotoStack Gallery <= 0.4.1 - Unauthenticated SQL Inje… savitasoni
PhotoStack Gallery
2026-02-14T06:42:29.782Z 2026-02-14T06:42:29.782Z
CVE-2026-2022
4.3 (3.1)
Smart Forms <= 2.6.99 - Missing Authorization to Authe… edgarrojas
Smart Forms – when you need more than just a contact form
2026-02-14T06:42:27.519Z 2026-02-14T06:42:27.519Z
CVE-2026-1988
7.5 (3.1)
Flexi Product Slider and Grid for WooCommerce <= 1.0.5… wpdecent
Flexi Product Slider and Grid for WooCommerce
2026-02-14T06:42:37.658Z 2026-02-14T06:42:37.658Z
CVE-2026-1987
5.4 (3.1)
Scheduler Widget <= 0.1.6 - Insecure Direct Object Ref… morelmathieuj
Scheduler Widget
2026-02-14T06:42:37.284Z 2026-02-14T06:42:37.284Z
CVE-2026-1985
6.4 (3.1)
Press3D <= 1.0.2 - Authenticated (Author+) Stored Cros… arieslab
Press3D
2026-02-14T06:42:35.710Z 2026-02-14T06:42:35.710Z
CVE-2026-1944
5.3 (3.1)
CallbackKiller service widget <= 1.2 - Missing Authori… krellbat
CallbackKiller service widget
2026-02-14T06:42:30.529Z 2026-02-14T06:42:30.529Z
CVE-2026-1939
6.4 (3.1)
Percent to Infograph <= 1.0 - Authenticated (Contribut… cutesalah
Percent to Infograph
2026-02-14T06:42:29.416Z 2026-02-14T06:42:29.416Z
CVE-2026-1915
6.4 (3.1)
Simple Plyr <= 0.0.1 - Authenticated (Contributor+) St… bestony
Simple Plyr
2026-02-14T06:42:36.109Z 2026-02-14T06:42:36.109Z
CVE-2026-1910
6.4 (3.1)
UpMenu <= 3.1 - Authenticated (Contributor+) Stored Cr… upmenu
UpMenu – Online ordering for restaurants
2026-02-14T06:42:33.299Z 2026-02-14T06:42:33.299Z
CVE-2026-1905
6.4 (3.1)
Sphere Manager <= 1.0.2 - Authenticated (Contributor+)… devmw
Sphere Manager
2026-02-14T06:42:31.305Z 2026-02-14T06:42:31.305Z
CVE-2026-1903
6.4 (3.1)
Ravelry Designs Widget <= 1.0.0 - Authenticated (Contr… shellbot
Ravelry Designs Widget
2026-02-14T06:42:28.647Z 2026-02-14T06:42:28.647Z
CVE-2026-1901
6.4 (3.1)
QuestionPro Surveys <= 1.0 - Authenticated (Contributo… questionpro
QuestionPro Surveys
2026-02-14T06:42:27.139Z 2026-02-14T06:42:27.139Z
CVE-2026-1796
6.1 (3.1)
StyleBidet <= 1.0.0 - Reflected Cross-Site Scripting indextwo
StyleBidet
2026-02-14T06:42:24.992Z 2026-02-14T06:42:24.992Z
CVE-2026-1795
6.1 (3.1)
Address Bar Ads <= 1.0.0 - Reflected Cross-Site Scripting sivenso
Address Bar Ads
2026-02-14T06:42:29.053Z 2026-02-14T06:42:29.053Z
CVE-2026-1792
6.1 (3.1)
Geo Widet <= 1.0 - Reflected Cross-Site Scripting owencutajar
Geo Widget
2026-02-14T06:42:28.278Z 2026-02-14T06:42:28.278Z
CVE-2026-1394
4.3 (3.1)
WP Quick Contact Us <= 1.0 - Cross-Site Request Forger… dmitritechs
WP Quick Contact Us
2026-02-14T06:42:31.697Z 2026-02-14T06:42:31.697Z
CVE-2026-1306
9.8 (3.1)
midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File U… adminkov
midi-Synth
2026-02-14T06:42:34.875Z 2026-02-14T06:42:34.875Z
CVE-2026-1303
5.3 (3.1)
MailChimp Campaigns <= 3.2.4 - Missing Authorization t… matthieuscarset
MailChimp Campaigns
2026-02-14T06:42:33.704Z 2026-02-14T06:42:33.704Z
CVE-2026-1187
6.4 (3.1)
ZoomifyWP Free <= 1.1 - Authenticated (Contributor+) S… terrazoom
ZoomifyWP Free
2026-02-14T06:42:36.502Z 2026-02-14T06:42:36.502Z
CVE-2026-1096
6.4 (3.1)
Best-wp-google-map <= 2.1 - Authenticated (Contributor… raju_ahmed
Best-wp-google-map
2026-02-14T06:42:32.532Z 2026-02-14T06:42:32.532Z
CVE-2026-0753
7.2 (3.1)
Super Simple Contact Form <= 1.6.2 - Reflected Cross-S… bitacre
Super Simple Contact Form
2026-02-14T06:42:35.247Z 2026-02-14T06:42:35.247Z
ID Description Published Updated
fkie_cve-2026-22082 This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… 2026-01-09T12:15:54.403 2026-01-13T14:03:46.203
fkie_cve-2026-22081 This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… 2026-01-09T12:15:54.260 2026-01-13T14:03:46.203
fkie_cve-2025-7072 The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (sh… 2026-01-09T12:15:54.020 2026-01-13T14:03:46.203
fkie_cve-2025-66052 Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "sy… 2026-01-09T12:15:53.883 2026-01-14T17:50:09.087
fkie_cve-2025-66051 Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible f… 2026-01-09T12:15:53.740 2026-01-14T17:49:09.330
fkie_cve-2025-66050 Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any passwor… 2026-01-09T12:15:53.587 2026-01-14T17:48:29.730
fkie_cve-2025-66049 Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue … 2026-01-09T12:15:53.420 2026-01-14T17:48:18.313
fkie_cve-2025-14172 The WP Page Permalink Extension plugin for WordPress is vulnerable to Missing Authorization in all … 2026-01-09T12:15:53.260 2026-01-13T14:03:46.203
fkie_cve-2025-13967 The Woodpecker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … 2026-01-09T12:15:53.103 2026-01-13T14:03:46.203
fkie_cve-2025-13908 The The Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's … 2026-01-09T12:15:52.950 2026-01-13T14:03:46.203
fkie_cve-2025-13903 The PullQuote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'p… 2026-01-09T12:15:52.800 2026-01-13T14:03:46.203
fkie_cve-2025-13897 The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… 2026-01-09T12:15:52.647 2026-01-13T14:03:46.203
fkie_cve-2025-13893 The Lesson Plan Book plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `… 2026-01-09T12:15:52.493 2026-01-13T14:03:46.203
fkie_cve-2025-13892 The MG AdvancedOptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… 2026-01-09T12:15:52.347 2026-01-13T14:03:46.203
fkie_cve-2025-13862 The Menu Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `category` … 2026-01-09T12:15:52.197 2026-01-13T14:03:46.203
fkie_cve-2025-13854 The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' … 2026-01-09T12:15:52.040 2026-01-13T14:03:46.203
fkie_cve-2025-13852 The Debt.com Business in a Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… 2026-01-09T12:15:51.890 2026-01-13T14:03:46.203
fkie_cve-2025-13717 The Contact Form vCard Generator plugin for WordPress is vulnerable to unauthorized access of data … 2026-01-09T12:15:51.740 2026-01-13T14:03:46.203
fkie_cve-2025-13704 The Autogen Headers Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … 2026-01-09T12:15:51.583 2026-01-13T14:03:46.203
fkie_cve-2025-13701 The Shabat Keeper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SE… 2026-01-09T12:15:51.430 2026-01-13T14:03:46.203
fkie_cve-2025-11453 The Header and Footer Scripts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… 2026-01-09T12:15:50.620 2026-01-13T14:03:46.203
fkie_cve-2026-22080 This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… 2026-01-09T11:15:51.150 2026-01-13T14:03:46.203
fkie_cve-2026-22079 This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… 2026-01-09T11:15:50.617 2026-01-13T14:03:46.203
fkie_cve-2025-9222 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.2 before 18.5.5, 18… 2026-01-09T10:15:47.037 2026-01-22T17:20:15.873
fkie_cve-2025-64093 Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary comma… 2026-01-09T10:15:46.890 2026-02-10T20:33:36.620
fkie_cve-2025-64092 This vulnerability allows unauthenticated attackers to inject an SQL request into GET request param… 2026-01-09T10:15:46.750 2026-02-12T17:42:53.230
fkie_cve-2025-64091 This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of … 2026-01-09T10:15:46.627 2026-02-12T17:45:46.487
fkie_cve-2025-64090 This vulnerability allows authenticated attackers to execute commands via the hostname of the device. 2026-01-09T10:15:46.480 2026-02-12T17:45:04.993
fkie_cve-2025-3950 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6… 2026-01-09T10:15:46.310 2026-01-21T19:19:06.850
fkie_cve-2025-13900 The WP Popup Magic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name'… 2026-01-09T10:15:46.130 2026-01-13T14:03:46.203
ID Severity Description Published Updated
ghsa-92mm-wrj7-g7r7
4.3 (3.1)
The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authori… 2026-02-14T09:31:34Z 2026-02-14T09:31:34Z
ghsa-5899-42j8-fxpr
5.0 (3.1)
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulne… 2026-02-14T09:31:34Z 2026-02-14T09:31:34Z
ghsa-xhwg-m969-356h
7.5 (3.1)
The PhotoStack Gallery plugin for WordPress is vulnerable to SQL Injection via the 'postid' paramet… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-x6ph-vfh4-48q4
9.8 (3.1)
The Truelysell Core plugin for WordPress is vulnerable to privilege escalation in versions less tha… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-x35p-8cmq-xf5p
6.4 (3.1)
The UpMenu – Online ordering for restaurants plugin for WordPress is vulnerable to Stored Cross-Sit… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-wrwf-qpx5-8gj4
6.4 (3.1)
The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'l… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-whjx-jr95-pc2f
6.4 (3.1)
The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site S… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-wcg8-g6m5-jgh5
5.4 (3.1)
The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all … 2026-02-14T09:31:33Z 2026-02-14T09:31:34Z
ghsa-w2x2-hcw6-22p4
7.5 (3.1)
The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File … 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-r8hc-3q2v-m9fj
4.4 (3.1)
The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-q8wh-g4r2-jgrq
6.4 (3.1)
The QuestionPro Surveys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-q73g-q59m-6qff
6.4 (3.1)
The Percent to Infograph plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-q477-mh2f-28m4
6.4 (3.1)
The Sphere Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-pmxf-4m9g-jv6w
6.4 (3.1)
The ZoomifyWP Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'filen… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-p7w9-7w5h-q4xc
5.4 (3.1)
The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in al… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-mv6c-jc9c-qq2q
6.4 (3.1)
The myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mycr… 2026-02-14T09:31:33Z 2026-02-14T09:31:34Z
ghsa-m38c-5p3m-p7gm
7.2 (3.1)
The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all v… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-j7x7-gc84-q635
6.4 (3.1)
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vul… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-gwjc-jv9v-qrxm
6.4 (3.1)
The Simple Plyr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poster' … 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-grp9-8c88-8ph6
6.4 (3.1)
The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-f4qw-9xx8-rwgr
4.4 (3.1)
The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scr… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-cvgg-m9hw-r94w
6.4 (3.1)
The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gute… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-cchp-7wr7-98gf
4.3 (3.1)
The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing … 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-8xxh-rwxq-w2fc
6.1 (3.1)
The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path i… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-8jp5-qrhm-p8v5
6.1 (3.1)
The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the UR… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-8gh7-8v8f-6f45
5.3 (3.1)
The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification o… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-6m5f-57jg-w742
9.8 (3.1)
The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-59rj-2hg2-476v
6.1 (3.1)
The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL pat… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-4q47-jxhq-7fj2
4.3 (3.1)
The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ghsa-4p4p-xgjx-qcc9
5.3 (3.1)
The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions… 2026-02-14T09:31:33Z 2026-02-14T09:31:33Z
ID Severity Description Package Published Updated
pysec-2024-200
7.2 (3.1)
JupyterHub is software that allows one to create a multi-user server for Jupyter notebook… jupyterhub 2024-08-08T15:15:17+00:00 2025-01-19T16:22:58.171761+00:00
pysec-2024-70
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values… django 2024-08-07T15:15:00+00:00 2024-08-07T17:22:10.804411+00:00
pysec-2024-69
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and … django 2024-08-07T15:15:00+00:00 2024-08-07T17:22:10.745844+00:00
pysec-2024-68
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() an… django 2024-08-07T15:15:00+00:00 2024-08-07T17:22:10.682679+00:00
pysec-2024-67
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat… django 2024-08-07T15:15:00+00:00 2024-08-07T17:22:10.613440+00:00
pysec-2024-73
9.1 (3.1)
A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 … chuanhuchatgpt 2024-07-31T01:15:00+00:00 2024-08-27T15:22:40.259109+00:00
pysec-2024-75
6.1 (3.1)
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Th… twisted 2024-07-29T16:15:00+00:00 2024-09-11T19:19:18.005250+00:00
pysec-2024-203
7.5 (3.1)
DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in files… duckdb 2024-07-24T18:15:05+00:00 2025-01-19T19:18:58.299130+00:00
pysec-2024-65
Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents. roundup 2024-07-17T20:15:00+00:00 2024-07-17T23:22:05.024899+00:00
pysec-2024-64
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header. roundup 2024-07-17T20:15:00+00:00 2024-07-17T23:22:04.987078+00:00
pysec-2024-63
In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS. roundup 2024-07-17T20:15:00+00:00 2024-07-17T23:22:04.949977+00:00
pysec-2024-173
8.8 (3.1)
Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such… streampipes 2024-07-17T10:15:01+00:00 2025-01-18T22:21:43.618882+00:00
pysec-2024-174
4.3 (3.1)
Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installatio… streampipes 2024-07-17T09:15:02+00:00 2025-01-18T22:21:43.678475+00:00
pysec-2024-172
3.7 (3.1)
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in … streampipes 2024-07-17T09:15:02+00:00 2025-01-18T22:21:43.557516+00:00
pysec-2024-190
8.8 (3.1)
Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenti… apache-airflow 2024-07-17T08:15:02+00:00 2025-01-19T07:21:16.859034+00:00
pysec-2024-189
5.4 (3.1)
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated at… apache-airflow 2024-07-17T08:15:01+00:00 2025-01-19T07:21:16.796301+00:00
pysec-2024-66
7.8 (3.1)
dbt enables data analysts and engineers to transform their data using the same practices … dbt-core 2024-07-16T23:15:00+00:00 2024-07-19T17:21:49.664320+00:00
pysec-2024-62
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerab… langchain-experimental 2024-07-15T05:15:00+00:00 2024-07-15T11:19:36.686972+00:00
pysec-2024-86
4.9 (3.1)
Wagtail is an open source content management system built on Django. A bug in Wagtail's `… wagtail 2024-07-11T16:15:00+00:00 2024-09-19T19:20:17.668744+00:00
pysec-2024-61
6.1 (3.1)
A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt ve… chuanhuchatgpt 2024-07-11T11:15:00+00:00 2024-07-12T21:33:00.657381+00:00
pysec-2024-59
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_l… django 2024-07-10T05:15:00+00:00 2024-07-10T11:20:07.800540+00:00
pysec-2024-58
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes… django 2024-07-10T05:15:00+00:00 2024-07-10T11:20:07.704786+00:00
pysec-2024-57
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.cont… django 2024-07-10T05:15:00+00:00 2024-07-10T11:20:07.604887+00:00
pysec-2024-56
An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urli… django 2024-07-10T05:15:00+00:00 2024-07-10T11:20:07.495359+00:00
pysec-2024-60
7.5 (3.1)
A vulnerability was identified in the kjd/idna library, specifically within the `idna.enc… idna 2024-07-07T18:15:00+00:00 2024-07-11T17:21:37.216928+00:00
pysec-2024-230
7.5 (3.1)
Certifi is a curated collection of Root Certificates for validating the trustworthiness o… certifi 2024-07-05T19:15:10+00:00 2025-02-12T21:21:51.559667+00:00
pysec-2024-176
6.1 (3.1)
A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml ver… zenml 2024-06-30T16:15:03+00:00 2025-01-18T22:21:45.122426+00:00
pysec-2024-167
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python… nltk 2024-06-27T22:15:10+00:00 2025-01-18T19:19:06.317325+00:00
pysec-2024-54
6.5 (3.1)
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang St… codechecker 2024-06-24T18:15:00+00:00 2024-06-26T19:19:24.981233+00:00
pysec-2024-53
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides … langchain-experimental 2024-06-16T15:15:00+00:00 2024-06-16T17:20:32.187558+00:00
ID Description Updated
ID Description Published Updated
mal-2026-765 Malicious code in optimizer-cpu (npm) 2026-02-05T16:05:05Z 2026-02-06T03:05:25Z
mal-2026-764 Malicious code in chai-as-advanced (npm) 2026-02-05T14:54:55Z 2026-02-06T03:05:23Z
mal-2026-763 Malicious code in web3-meme-tool (PyPI) 2026-02-05T14:33:05Z 2026-02-05T14:33:05Z
mal-2026-762 Malicious code in metadata-checker (PyPI) 2026-02-05T14:30:34Z 2026-02-05T15:20:28Z
mal-2026-761 Malicious code in digital-checkout (npm) 2026-02-05T14:22:06Z 2026-02-06T03:05:23Z
mal-2026-760 Malicious code in @helloflex/widget-next-sdk (npm) 2026-02-05T12:44:37Z 2026-02-06T03:05:22Z
mal-2026-759 Malicious code in pipelinepoision-test (PyPI) 2026-02-05T08:43:35Z 2026-02-05T08:43:35Z
mal-2026-772 Malicious code in conp-dats-editor (npm) 2026-02-05T08:16:03Z 2026-02-06T03:05:23Z
mal-2026-757 Malicious code in internallib_v157 (npm) 2026-02-05T02:24:51Z 2026-02-06T03:05:24Z
mal-2026-758 Malicious code in tailwindcss-forms-starter (npm) 2026-02-05T02:03:44Z 2026-02-06T03:05:26Z
mal-2026-756 Malicious code in cat-retail-app (npm) 2026-02-05T01:58:59Z 2026-02-06T03:05:23Z
mal-2026-755 Malicious code in @jes4l/react-pkg (npm) 2026-02-05T01:57:08Z 2026-02-06T03:05:22Z
mal-2026-751 Malicious code in express_update (npm) 2026-02-05T01:50:12Z 2026-02-06T03:05:23Z
mal-2026-753 Malicious code in log-symbols_updated (npm) 2026-02-05T01:50:11Z 2026-02-06T03:05:25Z
mal-2026-752 Malicious code in locate-path_updated (npm) 2026-02-05T01:50:11Z 2026-02-06T03:05:25Z
mal-2026-749 Malicious code in @purecore/rabbitmq (npm) 2026-02-05T01:28:01Z 2026-02-06T03:05:22Z
mal-2026-750 Malicious code in dspmobile (npm) 2026-02-05T01:07:59Z 2026-02-06T03:05:23Z
mal-2026-754 Malicious code in tailwindcss-animation-modern (npm) 2026-02-05T01:06:23Z 2026-02-06T03:05:26Z
mal-2026-747 Malicious code in react-vite-sync (npm) 2026-02-04T23:44:25Z 2026-02-06T03:05:26Z
mal-2026-748 Malicious code in web3-chain-sync (npm) 2026-02-04T23:44:24Z 2026-02-06T03:05:27Z
mal-2026-746 Malicious code in react-count-sync (npm) 2026-02-04T23:44:24Z 2026-02-06T03:05:26Z
mal-2026-745 Malicious code in statssol (PyPI) 2026-02-04T19:47:20Z 2026-02-04T19:47:20Z
mal-2026-742 Malicious code in dcf-commons (npm) 2026-02-04T17:26:21Z 2026-02-06T03:05:23Z
mal-2026-740 Malicious code in @msecscc/gaia (npm) 2026-02-04T17:18:05Z 2026-02-06T03:05:22Z
mal-2026-743 Malicious code in internationalized (npm) 2026-02-04T17:13:32Z 2026-02-06T03:05:24Z
mal-2026-744 Malicious code in mdp-client-web (npm) 2026-02-04T17:08:45Z 2026-02-06T03:05:25Z
mal-2026-741 Malicious code in confluence-analytics-support (npm) 2026-02-04T17:08:45Z 2026-02-06T03:05:23Z
mal-2026-739 Malicious code in test-for-ppe (PyPI) 2026-02-04T14:57:08Z 2026-02-04T14:57:08Z
mal-2026-738 Malicious code in tablescene (PyPI) 2026-02-04T10:24:43Z 2026-02-04T18:51:22Z
mal-2026-737 Malicious code in remark-gfm-v4 (npm) 2026-02-04T09:46:59Z 2026-02-06T03:05:26Z
ID Description Published Updated
wid-sec-w-2025-2805 TianoCore EDK2: Schwachstelle ermöglicht Codeausführung 2025-12-09T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2802 Notepad++: Schwachstelle ermöglicht Codeausführung 2025-12-09T23:00:00.000+00:00 2026-02-03T23:00:00.000+00:00
wid-sec-w-2025-2798 Red Hat OpenShift Service Mesh: Mehrere Schwachstellen 2025-12-09T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-2789 Adobe Experience Manager: Mehrere Schwachstellen 2025-12-09T23:00:00.000+00:00 2025-12-10T23:00:00.000+00:00
wid-sec-w-2025-2781 Microsoft Windows: Mehrere Schwachstellen 2025-12-09T23:00:00.000+00:00 2026-01-19T23:00:00.000+00:00
wid-sec-w-2025-2765 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-08T23:00:00.000+00:00 2026-02-12T23:00:00.000+00:00
wid-sec-w-2025-2759 IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting 2025-12-08T23:00:00.000+00:00 2026-01-07T23:00:00.000+00:00
wid-sec-w-2025-2756 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-07T23:00:00.000+00:00 2026-02-12T23:00:00.000+00:00
wid-sec-w-2025-2755 util-linux: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen 2025-12-07T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2751 WebKitGTK: Mehrere Schwachstellen 2025-12-04T23:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
wid-sec-w-2025-2750 Apache HTTP Server: Mehrere Schwachstellen 2025-12-04T23:00:00.000+00:00 2026-01-19T23:00:00.000+00:00
wid-sec-w-2025-2747 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-04T23:00:00.000+00:00 2026-02-12T23:00:00.000+00:00
wid-sec-w-2025-2746 IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen 2025-12-04T23:00:00.000+00:00 2025-12-08T23:00:00.000+00:00
wid-sec-w-2025-2741 cPython: Schwachstelle ermöglicht Denial of Service 2025-12-03T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2740 ffmpeg: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-12-03T23:00:00.000+00:00 2026-01-27T23:00:00.000+00:00
wid-sec-w-2025-2738 Vercel Next.js und React Server Components (React2Shell): Schwachstelle ermöglicht Codeausführung 2025-12-03T23:00:00.000+00:00 2025-12-04T23:00:00.000+00:00
wid-sec-w-2025-2737 libpng: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen 2025-12-03T23:00:00.000+00:00 2026-02-12T23:00:00.000+00:00
wid-sec-w-2025-2736 QT (Declarative module): Schwachstelle ermöglicht Denial of Service 2025-12-03T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2733 Drupal-Module: Mehrere Schwachstellen 2025-12-03T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-2730 Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-02T23:00:00.000+00:00 2025-12-16T23:00:00.000+00:00
wid-sec-w-2025-2729 WebKitGTK: Schwachstelle ermöglicht Offenlegung von Informationen 2025-12-02T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2724 Golang Go: Mehrere Schwachstellen 2025-12-02T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2722 ImageMagick: Schwachstelle ermöglicht Denial of Service 2025-12-02T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2718 Google Chrome/Microsoft Edge: Mehrere Schwachstellen 2025-12-02T23:00:00.000+00:00 2025-12-15T23:00:00.000+00:00
wid-sec-w-2025-2717 Django: Mehrere Schwachstellen 2025-12-02T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-2711 Android Patchday Dezember 2025: Mehrere Schwachstellen 2025-12-01T23:00:00.000+00:00 2025-12-08T23:00:00.000+00:00
wid-sec-w-2025-2706 Python: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-01T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2703 Zabbix: Mehrere Schwachstellen 2025-11-30T23:00:00.000+00:00 2025-12-01T23:00:00.000+00:00
wid-sec-w-2025-2702 Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Manipulation von Dateien 2025-11-30T23:00:00.000+00:00 2025-12-08T23:00:00.000+00:00
wid-sec-w-2025-2701 xwiki (XJetty): Schwachstelle ermöglicht Offenlegung von Informationen 2025-11-30T23:00:00.000+00:00 2025-12-01T23:00:00.000+00:00
ID Description Published Updated
ncsc-2025-0319 Kwetsbaarheden verholpen in F5 Networks BIG-IP, F5OS en NGINX App Protect WAF 2025-10-15T15:21:14.871532Z 2025-10-15T15:21:14.871532Z
ncsc-2025-0318 Kwetsbaarheden verholpen in Ivanti Endpoint Manager 2025-10-15T06:22:07.027110Z 2025-10-15T06:22:07.027110Z
ncsc-2025-0317 Kwetsbaarheden verholpen in Veeam Backup & Replication 2025-10-15T06:13:55.126030Z 2025-10-15T06:13:55.126030Z
ncsc-2025-0316 Kwetsbaarheid verholpen in Microsoft SQL Server 2025-10-14T18:52:06.487996Z 2025-10-14T18:52:06.487996Z
ncsc-2025-0315 Kwetsbaarheden verholpen in Microsoft Office 2025-10-14T18:38:05.692251Z 2025-10-14T18:38:05.692251Z
ncsc-2025-0314 Kwetsbaarheden verholpen in Microsoft System Center 2025-10-14T18:27:56.075338Z 2025-10-14T18:27:56.075338Z
ncsc-2025-0313 Kwetsbaarheden verholpen in Microsoft Developer Tools 2025-10-14T18:21:47.576457Z 2025-10-14T18:21:47.576457Z
ncsc-2025-0312 Kwetsbaarheden verholpen in Microsoft Exchange 2025-10-14T18:16:12.274468Z 2025-10-14T18:16:12.274468Z
ncsc-2025-0311 Kwetsbaarheden verholpen in Microsoft Azure 2025-10-14T18:13:41.244373Z 2025-10-14T18:13:41.244373Z
ncsc-2025-0310 Kwetsbaarheden verholpen in Microsoft Windows 2025-10-14T18:03:45.875739Z 2025-10-24T11:09:29.790442Z
ncsc-2025-0309 Kwetsbaarheden verholpen in Siemens producten 2025-10-14T11:22:10.254089Z 2025-10-14T11:22:10.254089Z
ncsc-2025-0308 Kwetsbaarheden verholpen in Juniper Networks Junos Space 2025-10-13T08:31:03.235596Z 2025-10-13T08:31:03.235596Z
ncsc-2025-0307 Kwetsbaarheid verholpen in Oracle E-Business Suite 2025-10-13T07:52:22.500853Z 2025-10-13T07:52:22.500853Z
ncsc-2025-0306 Kwetsbaarheden verholpen in GitLab 2025-10-13T07:25:32.225768Z 2025-10-13T07:25:32.225768Z
ncsc-2025-0305 Kwetsbaarheden verholpen in Juniper Networks Junos OS 2025-10-13T07:17:00.445318Z 2025-10-13T07:17:00.445318Z
ncsc-2025-0304 Kwetsbaarheden verholpen in Redis 2025-10-08T11:43:37.331971Z 2025-10-08T11:43:37.331971Z
ncsc-2025-0303 Kwetsbaarheid verholpen in Oracle E-Business Suite 2025-10-05T09:07:57.122302Z 2025-10-08T13:03:30.836713Z
ncsc-2025-0302 Kwetsbaarheid verholpen in IBM InfoSphere 2025-09-30T08:31:27.582962Z 2025-09-30T08:31:27.582962Z
ncsc-2025-0301 Kwetsbaarheden verholpen in VMware NSX 2025-09-30T08:29:24.969885Z 2025-09-30T08:29:24.969885Z
ncsc-2025-0300 Kwetsbaarheden verholpen in GitLab EE & CE 2025-09-29T09:40:53.033373Z 2025-09-29T09:40:53.033373Z
ncsc-2025-0299 Kwetsbaarheden verholpen in Zenitel ICX500 en ICX510 Gateway 2025-09-26T07:00:18.729367Z 2025-09-26T07:00:18.729367Z
ncsc-2025-0298 Kwetsbaarheden verholpen in Cisco Secure Firewall ASA en FTD 2025-09-25T18:17:20.040958Z 2025-09-25T18:17:20.040958Z
ncsc-2025-0297 Kwetsbaarheden verholpen in Cisco IOS en Cisco IOS XE Software 2025-09-25T09:20:07.678881Z 2025-09-25T10:42:19.129323Z
ncsc-2025-0296 Kwetsbaarheid verholpen in WatchGuard Fireware OS 2025-09-19T13:31:26.392203Z 2025-10-17T08:19:28.145953Z
ncsc-2025-0295 Kwetsbaarheid verholpen in Fortra's GoAnywhere MFT 2025-09-19T12:26:42.186246Z 2025-09-19T12:26:42.186246Z
ncsc-2025-0294 Kwetsbaarheden verholpen in HPE Aruba Networking EdgeConnect SD-WAN Gateways 2025-09-18T12:02:45.239087Z 2025-09-18T12:02:45.239087Z
ncsc-2025-0293 Kwetsbaarheden verholpen in Spring Framework 2025-09-16T13:38:44.960337Z 2025-09-16T13:38:44.960337Z
ncsc-2025-0292 Kwetsbaarheden verholpen in Ivanti producten 2025-09-16T12:21:50.959347Z 2025-09-16T12:21:50.959347Z
ncsc-2025-0291 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2025-09-16T11:17:27.365694Z 2025-09-16T11:17:27.365694Z
ncsc-2025-0290 Kwetsbaarheden verholpen in Apple macOS 2025-09-16T11:16:20.572265Z 2025-09-16T11:16:20.572265Z
ID Description Published Updated
ssa-416411 SSA-416411: Cross-Site Scripting Vulnerability in Industrial Edge Management 2025-01-14T00:00:00Z 2025-01-14T00:00:00Z
ssa-404759 SSA-404759: Information Disclosure Vulnerability in Siveillance Video Camera Drivers 2025-01-14T00:00:00Z 2025-01-15T00:00:00Z
ssa-314390 SSA-314390: LDAP Injection Vulnerability in Mendix LDAP Module 2025-01-14T00:00:00Z 2025-01-14T00:00:00Z
ssa-194557 SSA-194557: Improper Limitation of Filesystem Access through Web Server Vulnerability in SIPROTEC 5 2025-01-14T00:00:00Z 2025-11-11T00:00:00Z
ssa-928984 SSA-928984: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) 2024-12-16T00:00:00Z 2026-01-13T00:00:00Z
ssa-979056 SSA-979056: Out of Bounds Write Vulnerability in Parasolid 2024-12-10T00:00:00Z 2024-12-12T00:00:00Z
ssa-881356 SSA-881356: Multiple Memory Corruption Vulnerabilities in Simcenter Femap 2024-12-10T00:00:00Z 2024-12-10T00:00:00Z
ssa-800126 SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20 2024-12-10T00:00:00Z 2025-12-09T00:00:00Z
ssa-730188 SSA-730188: Multiple File Parsing Vulnerabilities in Solid Edge V2024 2024-12-10T00:00:00Z 2024-12-10T00:00:00Z
ssa-701627 SSA-701627: XXE Injection Vulnerabilities in COMOS 2024-12-10T00:00:00Z 2024-12-10T00:00:00Z
ssa-645131 SSA-645131: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization 2024-12-10T00:00:00Z 2024-12-10T00:00:00Z
ssa-620799 SSA-620799: Denial of Service Vulnerability During BLE Pairing in SENTRON Powercenter 1000/1100 2024-12-10T00:00:00Z 2025-06-10T00:00:00Z
ssa-392859 SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20 2024-12-10T00:00:00Z 2025-12-09T00:00:00Z
ssa-384652 SSA-384652: Cross-Site Request Forgery (CSRF) Vulnerability in RUGGEDCOM ROX II 2024-12-10T00:00:00Z 2024-12-10T00:00:00Z
ssa-128393 SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050 2024-12-10T00:00:00Z 2024-12-10T00:00:00Z
ssa-354569 SSA-354569: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices 2024-11-22T00:00:00Z 2025-06-10T00:00:00Z
ssa-824503 SSA-824503: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation Before V2302.0018 and V2404.0007 2024-11-18T00:00:00Z 2024-11-18T00:00:00Z
ssa-472448 SSA-472448: Security Bypass Vulnerability in the SQL Client-Server Communication in Siveillance Video 2024-11-13T00:00:00Z 2024-11-13T00:00:00Z
ssa-915275 SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-914892 SSA-914892: Race Condition Vulnerability in Basic Authentication Implementation of Mendix Runtime 2024-11-12T00:00:00Z 2025-08-12T00:00:00Z
ssa-871035 SSA-871035: Session-Memory Deserialization Vulnerability in Siemens Engineering Platforms Before V19 2024-11-12T00:00:00Z 2025-01-14T00:00:00Z
ssa-654798 SSA-654798: Incorrect Authorization Vulnerability in SIMATIC CP 1543-1 Devices 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-616032 SSA-616032: Local Privilege Escalation Vulnerability in Spectrum Power 7 Before V24Q3 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-454789 SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-354112 SSA-354112: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.2 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-351178 SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 9 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-331112 SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-230445 SSA-230445: Stored XSS Vulnerability in OZW Web Servers Before V5.2 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-064257 SSA-064257: Privilege Escalation Vulnerability in SIPORT Before V3.4.0 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ssa-000297 SSA-000297: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller Before V5.6 2024-11-12T00:00:00Z 2024-11-12T00:00:00Z
ID Description Published Updated
rhsa-2026:1842 Red Hat Security Advisory: nodejs24 security update 2026-02-05T16:03:11+00:00 2026-02-12T10:51:17+00:00
rhsa-2026:1837 Red Hat Security Advisory: osbuild-composer security update 2026-02-05T16:03:01+00:00 2026-02-14T01:42:14+00:00
rhsa-2026:1838 Red Hat Security Advisory: image-builder security update 2026-02-05T16:02:26+00:00 2026-02-14T01:42:15+00:00
rhsa-2026:2148 Red Hat Security Advisory: Kiali 2.11.6 for Red Hat OpenShift Service Mesh 3.1 2026-02-05T15:58:24+00:00 2026-02-16T01:37:16+00:00
rhsa-2026:2147 Red Hat Security Advisory: Kiali 2.4.12 for Red Hat OpenShift Service Mesh 3.0 2026-02-05T15:58:12+00:00 2026-02-16T01:37:15+00:00
rhsa-2026:2146 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-05T15:54:06+00:00 2026-02-16T01:37:15+00:00
rhsa-2026:2145 Red Hat Security Advisory: Kiali 1.73.26 for Red Hat OpenShift Service Mesh 2.6 2026-02-05T15:53:57+00:00 2026-02-12T22:34:51+00:00
rhsa-2026:1549 Red Hat Security Advisory: OpenShift Container Platform 4.15.61 bug fix and security update 2026-02-05T15:48:33+00:00 2026-02-16T00:32:50+00:00
rhsa-2026:2128 Red Hat Security Advisory: python3 security update 2026-02-05T15:48:06+00:00 2026-02-12T19:30:17+00:00
rhsa-2026:2144 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-05T15:45:43+00:00 2026-02-16T01:37:14+00:00
rhsa-2026:2139 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-05T15:35:09+00:00 2026-02-16T01:37:14+00:00
rhsa-2026:2138 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-05T15:35:02+00:00 2026-02-16T01:37:13+00:00
rhsa-2026:2137 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-05T15:26:20+00:00 2026-02-16T01:37:13+00:00
rhsa-2026:2136 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-05T15:17:09+00:00 2026-02-16T01:37:12+00:00
rhsa-2026:2127 Red Hat Security Advisory: kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, kpatch-patch-5_14_0-70_132_1, kpatch-patch-5_14_0-70_144_1, and kpatch-patch-5_14_0-70_155_1 security update 2026-02-05T15:08:50+00:00 2026-02-11T18:58:09+00:00
rhsa-2026:2133 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-05T15:02:51+00:00 2026-02-16T01:37:12+00:00
rhsa-2026:2124 Red Hat Security Advisory: osbuild-composer security update 2026-02-05T14:55:40+00:00 2026-02-16T01:37:11+00:00
rhsa-2026:2126 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-05T14:55:08+00:00 2026-02-16T01:37:11+00:00
rhsa-2026:1965 Red Hat Security Advisory: Red Hat build of Quarkus 3.27.2 release and security update 2026-02-05T14:53:30+00:00 2026-02-05T19:49:02+00:00
rhsa-2026:1899 Red Hat Security Advisory: Red Hat build of Quarkus 3.20.5 release and security update 2026-02-05T14:43:16+00:00 2026-02-05T20:05:39+00:00
rhsa-2026:2123 Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.0 2026-02-05T14:26:23+00:00 2026-02-16T01:37:10+00:00
rhsa-2026:2115 Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_92_1 security update 2026-02-05T14:10:15+00:00 2026-02-11T18:58:09+00:00
rhsa-2026:2109 Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update 2026-02-05T14:06:15+00:00 2026-02-11T18:58:09+00:00
rhsa-2026:2096 Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, and kpatch-patch-5_14_0-570_66_1 security update 2026-02-05T13:49:50+00:00 2026-02-11T18:58:08+00:00
rhsa-2026:2106 Red Hat Security Advisory: RHOAI 2.25.2 - Red Hat OpenShift AI 2026-02-05T13:38:32+00:00 2026-02-16T01:37:09+00:00
rhsa-2026:2090 Red Hat Security Advisory: python3.12-wheel security update 2026-02-05T13:26:00+00:00 2026-02-12T22:50:04+00:00
rhsa-2026:2084 Red Hat Security Advisory: python3.11 security update 2026-02-05T11:58:50+00:00 2026-02-11T14:41:35+00:00
rhsa-2026:2081 Red Hat Security Advisory: freerdp security update 2026-02-05T11:53:40+00:00 2026-02-13T08:42:14+00:00
rhsa-2026:2074 Red Hat Security Advisory: firefox security update 2026-02-05T10:53:04+00:00 2026-02-09T13:27:20+00:00
rhsa-2026:2073 Red Hat Security Advisory: firefox security update 2026-02-05T10:50:14+00:00 2026-02-09T13:27:20+00:00
ID Description Published Updated
icsa-25-296-02 ASKI Energy ALS-Mini-S8 and ALS-Mini-S4 2025-10-23T06:00:00.000000Z 2025-10-23T06:00:00.000000Z
icsa-25-296-01 AutomationDirect Productivity Suite 2025-10-23T06:00:00.000000Z 2025-10-23T06:00:00.000000Z
va-25-296-01 Frontier Airlines website publicly available email address validation 2025-10-23T00:00:00Z 2025-10-23T00:00:00Z
va-25-297-01 IBM DOORS Next Generation multiple vulnerabilities 2025-10-22T18:45:47Z 2025-10-22T18:45:47Z
icsma-25-294-01 Oxford Nanopore Technologies MinKNOW 2025-10-21T06:00:00.000000Z 2025-10-21T06:00:00.000000Z
icsa-25-294-06 Raisecomm RAX701-GC Series 2025-10-21T06:00:00.000000Z 2025-10-21T06:00:00.000000Z
icsa-25-294-05 CloudEdge Online Cameras and App 2025-10-21T06:00:00.000000Z 2025-10-21T06:00:00.000000Z
icsa-25-294-02 Rockwell Automation Compact GuardLogix 5370 2025-10-21T06:00:00.000000Z 2025-10-23T06:00:00.000000Z
icsa-25-294-01 Rockwell Automation 1783-NATR 2025-10-21T06:00:00.000000Z 2025-10-23T06:00:00.000000Z
va-25-289-01 OPEXUS FOIAXpress unauthenticated administrator password reset 2025-10-16T16:43:55Z 2025-10-16T16:43:55Z
icsa-25-289-04 Rockwell Automation ArmorStart AOP 2025-10-16T06:00:00.000000Z 2025-10-16T06:00:00.000000Z
icsa-25-289-03 Rockwell Automation FactoryTalk ViewPoint 2025-10-16T06:00:00.000000Z 2025-10-16T06:00:00.000000Z
icsa-25-289-02 Rockwell Automation FactoryTalk Linx 2025-10-16T06:00:00.000000Z 2025-10-23T06:00:00.000000Z
icsa-25-289-01 Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7 2025-10-16T06:00:00.000000Z 2025-10-16T06:00:00.000000Z
icsa-25-301-01 Schneider Electric EcoStruxure 2025-10-14T07:00:00.000000Z 2025-10-14T07:00:00.000000Z
icsa-25-287-01 Rockwell Automation 1715 EtherNet/IP Comms Module 2025-10-14T06:00:00.000000Z 2025-10-14T06:00:00.000000Z
icsa-25-289-10 Siemens HyperLynx and Industrial Edge App Publisher 2025-10-14T00:00:00.000000Z 2026-01-14T22:05:41.165529Z
icsa-25-289-09 Siemens TeleControl Server Basic 2025-10-14T00:00:00.000000Z 2025-10-14T00:00:00.000000Z
icsa-25-289-08 Siemens SINEC NMS 2025-10-14T00:00:00.000000Z 2025-10-14T00:00:00.000000Z
icsa-25-289-07 Siemens SIMATIC ET 200SP Communication Processors 2025-10-14T00:00:00.000000Z 2025-10-14T00:00:00.000000Z
icsa-25-289-06 Siemens SiPass Integrated 2025-10-14T00:00:00.000000Z 2026-02-12T07:00:00.000000Z
icsa-25-289-05 Siemens Solid Edge 2025-10-14T00:00:00.000000Z 2025-10-14T00:00:00.000000Z
va-25-282-01 Newforma Project Center multiple vulnerabilities 2025-10-09T19:50:00Z 2025-10-09T19:50:00Z
icsa-25-282-03 Rockwell Automation Stratix 2025-10-09T06:00:00.000000Z 2025-10-09T06:00:00.000000Z
icsa-25-282-02 Rockwell Automation Lifecycle Services with Cisco 2025-10-09T06:00:00.000000Z 2025-10-09T06:00:00.000000Z
va-25-280-01 OPEXUS FOIAXpress stored XSS 2025-10-07T22:50:29Z 2025-10-07T22:50:29Z
icsa-25-280-01 Delta Electronics DIAScreen 2025-10-07T06:00:00.000000Z 2025-10-23T06:00:00.000000Z
icsa-25-275-01 Raise3D Pro2 Series 3D Printers** 2025-10-02T05:00:00.000000Z 2025-10-02T05:00:00.000000Z
icsa-25-289-11 Hitachi Energy MACH GWS 2025-09-30T12:50:29.000000Z 2025-09-30T12:50:29.000000Z
icsa-25-275-02 Hitachi Energy MSM 2025-09-30T09:02:31.000000Z 2025-09-30T09:02:31.000000Z
ID Description Published Updated
cisco-sa-ewlc-cdp-dos-fpeks9k Cisco IOS XE Wireless Controller Software Cisco Discovery Protocol Denial of Service Vulnerability 2025-05-07T16:00:00+00:00 2025-05-07T16:00:00+00:00
cisco-sa-dnac-api-nbpzcjcm Cisco Catalyst Center Unauthenticated API Access Vulnerability 2025-05-07T16:00:00+00:00 2025-03-26T16:00:00+00:00
cisco-sa-catc-insec-acc-mtt8eheb Cisco Catalyst Center Insufficient Access Control Vulnerability 2025-05-07T16:00:00+00:00 2025-05-07T16:00:00+00:00
cisco-sa-catalyst-tls-pqnd5kej Cisco Catalyst SD-WAN Manager Certificate Validation Vulnerability 2025-05-07T16:00:00+00:00 2025-05-07T16:00:00+00:00
cisco-sa-c2960-3560-sboot-ztqadrhq Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability 2025-05-07T16:00:00+00:00 2025-05-07T16:00:00+00:00
cisco-sa-bootstrap-kfgxygdh Cisco IOS XE Software Bootstrap Arbitrary File Write Vulnerability 2025-05-07T16:00:00+00:00 2025-05-07T16:00:00+00:00
cisco-sa-asr903-rsp3-arp-dos-wmfzdvjz Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ARP Denial of Service Vulnerability 2025-05-07T16:00:00+00:00 2025-05-07T16:00:00+00:00
cisco-sa-erlang-otp-ssh-xyzzy Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang/OTP SSH Server: April 2025 2025-04-22T21:45:00+00:00 2025-06-11T14:40:37+00:00
cisco-sa-webex-app-client-rce-ufymmylc Cisco Webex App Client-Side Remote Code Execution Vulnerability 2025-04-16T16:00:00+00:00 2025-04-16T16:00:00+00:00
cisco-sa-sna-prvesc-4bqmk33z Cisco Secure Network Analytics Privilege Escalation Vulnerability 2025-04-16T16:00:00+00:00 2025-04-16T16:00:00+00:00
cisco-sa-nd-unenum-2xffh472 Cisco Nexus Dashboard LDAP Username Enumeration Vulnerability 2025-04-16T16:00:00+00:00 2025-04-16T16:00:00+00:00
cisco-sa-meraki-mx-vpn-dos-vnrpdvfb Cisco Meraki MX and Z Series AnyConnect VPN Denial of Service Vulnerability 2025-04-02T16:00:00+00:00 2025-04-02T16:00:00+00:00
cisco-sa-epnmpi-sxss-gsscpgy4 Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerabilities 2025-04-02T16:00:00+00:00 2025-04-02T16:00:00+00:00
cisco-sa-ece-dos-tc6m9gz8 Cisco Enterprise Chat and Email Denial of Service Vulnerability 2025-04-02T16:00:00+00:00 2025-04-02T16:00:00+00:00
cisco-sa-xrike-9wygprgq Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-xr792-bwfvdpy Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-sb-lkm-znerzjbz Cisco IOS XR Software Secure Boot Bypass Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-ncs-hybridacl-crmzffkq Cisco IOS XR Software Hybrid Access Control List Bypass Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-multicast-ermrsvq7 Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Denial of Service Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-modular-acl-u5mepxmm Cisco IOS XR Software Access Control List Bypass Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-ipv4uni-lfm3cfbu Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-iosxr-priv-esc-gfqjxvof Cisco IOS XR Software CLI Privilege Escalation Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-iosxr-bgp-dos-o7stephx Cisco IOS XR Software Border Gateway Protocol Confederation Denial of Service Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-ios-xr-verii-bypass-hhpwqrvx Cisco IOS XR Software Image Verification Bypass Vulnerability 2025-03-12T16:00:00+00:00 2025-03-12T16:00:00+00:00
cisco-sa-tms-xss-vuln-wbtcywxg Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability 2025-03-05T16:00:00+00:00 2025-03-05T16:44:57+00:00
cisco-sa-secure-dll-injection-aoyzeqsg Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability 2025-03-05T16:00:00+00:00 2025-03-05T16:00:00+00:00
cisco-sa-webex-credexp-xmn85y6 Cisco Webex for BroadWorks Credential Exposure Vulnerability 2025-03-04T16:00:00+00:00 2025-04-01T13:40:00+00:00
cisco-sa-nxos-ici-dpojbwxk Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability 2025-02-26T16:00:00+00:00 2025-02-26T16:00:00+00:00
cisco-sa-n3kn9k-healthdos-eoqswk4g Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability 2025-02-26T16:00:00+00:00 2025-02-26T16:00:00+00:00
cisco-sa-apic-multi-vulns-9ummtg5 Cisco Application Policy Infrastructure Controller Vulnerabilities 2025-02-26T16:00:00+00:00 2025-02-26T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-20837 Windows Media Remote Code Execution Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20836 DirectX Graphics Kernel Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20835 Capability Access Management Service (camsvc) Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20834 Windows Spoofing Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20833 Windows Kerberos Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20832 Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20831 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20830 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-20T08:00:00.000Z
msrc_cve-2026-20829 TPM Trustlet Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20828 Windows rndismp6.sys Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20827 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20826 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20825 Windows Hyper-V Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20824 Windows Remote Assistance Security Feature Bypass Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20823 Windows File Explorer Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20822 Windows Graphics Component Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20821 Remote Procedure Call Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20820 Windows Common Log File System Driver Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20819 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20818 Windows Kernel Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-20T08:00:00.000Z
msrc_cve-2026-20817 Windows Error Reporting Service Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20816 Windows Installer Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20815 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20814 DirectX Graphics Kernel Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20812 LDAP Tampering Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20811 Win32k Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20810 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20809 Windows Kernel Memory Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20808 Windows File Explorer Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20805 Desktop Window Manager Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-27T08:00:00.000Z
ID Description Published Updated
opensuse-su-2026:10059-1 freerdp-3.20.2-1.1 on GA media 2026-01-17T00:00:00Z 2026-01-17T00:00:00Z
opensuse-su-2026:10058-1 MozillaThunderbird-140.7.0-1.1 on GA media 2026-01-17T00:00:00Z 2026-01-17T00:00:00Z
opensuse-su-2026:20055-1 Security update for gimp 2026-01-16T16:13:02Z 2026-01-16T16:13:02Z
opensuse-su-2026:20046-1 Security update for MozillaThunderbird 2026-01-16T12:09:04Z 2026-01-16T12:09:04Z
opensuse-su-2026:10057-1 chromedriver-144.0.7559.59-1.1 on GA media 2026-01-16T00:00:00Z 2026-01-16T00:00:00Z
opensuse-su-2026:20056-1 Security update for cpp-httplib 2026-01-15T22:11:25Z 2026-01-15T22:11:25Z
opensuse-su-2026:20044-1 Security update for alloy 2026-01-15T17:56:17Z 2026-01-15T17:56:17Z
opensuse-su-2026:20043-1 Security update for erlang 2026-01-15T17:21:23Z 2026-01-15T17:21:23Z
opensuse-su-2026:20041-1 Security update for MozillaFirefox 2026-01-15T16:28:43Z 2026-01-15T16:28:43Z
opensuse-su-2026:20039-1 Security update for bind 2026-01-15T10:43:49Z 2026-01-15T10:43:49Z
opensuse-su-2026:10056-1 libwireshark19-4.6.3-1.1 on GA media 2026-01-15T00:00:00Z 2026-01-15T00:00:00Z
opensuse-su-2026:10055-1 python311-virtualenv-20.36.1-1.1 on GA media 2026-01-15T00:00:00Z 2026-01-15T00:00:00Z
opensuse-su-2026:10054-1 php-composer2-2.9.3-1.1 on GA media 2026-01-15T00:00:00Z 2026-01-15T00:00:00Z
opensuse-su-2026:10053-1 ffmpeg-4-4.4.6-11.1 on GA media 2026-01-15T00:00:00Z 2026-01-15T00:00:00Z
opensuse-su-2026:10052-1 avahi-0.8-41.1 on GA media 2026-01-15T00:00:00Z 2026-01-15T00:00:00Z
opensuse-su-2026:10051-1 NetworkManager-applet-l2tp-1.52.0-1.1 on GA media 2026-01-15T00:00:00Z 2026-01-15T00:00:00Z
opensuse-su-2026:20038-1 Security update for wget2 2026-01-14T13:23:53Z 2026-01-14T13:23:53Z
opensuse-su-2026:20034-1 Security update for tomcat 2026-01-14T13:14:54Z 2026-01-14T13:14:54Z
opensuse-su-2026:20031-1 Security update for curl 2026-01-14T11:01:44Z 2026-01-14T11:01:44Z
opensuse-su-2026:20032-1 Security update for haproxy 2026-01-14T10:56:00Z 2026-01-14T10:56:00Z
opensuse-su-2026:20030-1 Security update for apache2 2026-01-14T10:49:51Z 2026-01-14T10:49:51Z
opensuse-su-2026:20029-1 Security update for gpg2 2026-01-14T10:23:16Z 2026-01-14T10:23:16Z
opensuse-su-2026:20027-1 Security update for squid 2026-01-14T08:39:17Z 2026-01-14T08:39:17Z
opensuse-su-2026:10050-1 rke2-1.34-1.34.3+rke2r1-1.1 on GA media 2026-01-14T00:00:00Z 2026-01-14T00:00:00Z
opensuse-su-2026:10049-1 python311-urllib3-2.6.3-1.1 on GA media 2026-01-14T00:00:00Z 2026-01-14T00:00:00Z
opensuse-su-2026:10048-1 openCryptoki-3.26.0-3.1 on GA media 2026-01-14T00:00:00Z 2026-01-14T00:00:00Z
opensuse-su-2026:10047-1 libcryptopp-devel-8.9.0-6.1 on GA media 2026-01-14T00:00:00Z 2026-01-14T00:00:00Z
opensuse-su-2026:10046-1 MozillaFirefox-147.0-1.1 on GA media 2026-01-14T00:00:00Z 2026-01-14T00:00:00Z
opensuse-su-2026:20026-1 Security update for python-uv 2026-01-13T12:48:04Z 2026-01-13T12:48:04Z
opensuse-su-2026:20025-1 Security update for hawk2 2026-01-13T12:41:42Z 2026-01-13T12:41:42Z
ID Description Published Updated
sevd-2022-130-01 PowerLogic ION Setup 2022-05-10T00:00:00.00Z 2022-05-10T00:00:00.00Z
sevd-2022-102-01 IGSS (Interactive Graphical SCADA System) 2022-04-12T08:47:25.000Z 2022-07-12T08:47:25.000Z
sevd-2022-102-02 Modicon M340 Controller and Communication Modules 2022-04-12T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2022-087-01 SCADAPack Workbench 2022-03-28T13:51:11.000Z 2023-04-11T13:51:11.000Z
sevd-2022-067-01 EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70 2022-03-08T18:30:00.000Z 2022-06-14T18:30:00.000Z
sevd-2022-067-03 Ritto Wiser™ Door 2022-03-08T10:12:35.000Z 2022-03-08T10:12:35.000Z
sevd-2022-067-02 APC Smart-UPS SMT, SMC, SMX, SCL, SRC, XU, XP, CSH2, SURTD, SMTL, SRT, and select SRTL Series 2022-03-08T06:30:00.000Z 2022-06-16T18:30:00.000Z
sevd-2022-039-06 Harmony/Magelis iPC Series HMI, Vijeo Designer and Vijeo Designer Basic 2022-02-08T23:25:23.000Z 2022-02-08T23:25:23.000Z
sevd-2022-039-04 spaceLYnk, Wiser For KNX, fellerLYnk 2022-02-08T20:32:52.000Z 2022-03-08T20:32:52.000Z
sevd-2022-039-03 Easergy P40 2022-02-08T17:58:55.000Z 2022-02-08T17:58:55.000Z
sevd-2022-039-05 EcoStruxure Geo SCADA Expert 2022-02-08T17:33:44.000Z 2022-02-08T17:33:44.000Z
sevd-2022-039-02 EcoStruxure EV Charging Expert 2022-02-08T12:36:59.000Z 2022-02-08T12:36:59.000Z
sevd-2022-039-01 IGSS (Interactive Graphical SCADA System) 2022-02-08T07:29:58.000Z 2022-02-08T07:29:58.000Z
sevd-2022-011-07 EcoStruxure™ Power Monitoring Expert 2022-01-11T13:20:28.000Z 2022-01-11T13:20:28.000Z
sevd-2022-011-05 ConneXium Tofino Firewall and Loadable Security Modules 2022-01-11T12:53:54.000Z 2022-01-11T12:53:54.000Z
sevd-2022-011-04 Easergy P3 2022-01-11T11:28:56.000Z 2022-01-11T11:28:56.000Z
sevd-2022-011-03 Easergy P5 2022-01-11T11:05:25.000Z 2022-03-02T11:05:25.000Z
sevd-2022-011-02 Easergy T300 2022-01-11T10:48:02.000Z 2022-01-11T10:48:02.000Z
sevd-2022-011-01 Ethernet and Web server on Modicon M340 controller and Communication Modules 2022-01-11T07:53:07.000Z 2022-01-11T07:53:07.000Z
sevd-2022-011-06 CODESYS V3 Runtime, Development System, and Gateway Vulnerabilities 2022-01-11T07:08:13.000Z 2023-04-11T11:30:00.000Z
sevd-2021-348-04 APC by Schneider Electric Rack PDU 2021-12-14T00:00:00.000Z 2021-12-21T00:00:00.000Z
sevd-2021-348-02 EVlink City / Parking / Smart Wallbox Charging Stations 2021-12-14T00:00:00.000Z 2021-12-14T00:00:00.000Z
sevd-2021-348-01 IGSS (Interactive Graphical SCADA System) 2021-12-14T00:00:00.000Z 2021-12-14T00:00:00.000Z
sesb-2021-347-01 Apache Log4j Vulnerabilities (Log4Shell) 2021-12-13T09:22:58.000Z 2022-08-09T09:22:58.000Z
sevd-2021-313-04 Windows Print Spooler embedded in EcoStruxure™ Process Expert 2021-11-09T08:45:48.000Z 2022-03-08T08:45:48.000Z
sevd-2021-313-03 APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices 2021-11-09T06:30:00.000Z 2022-05-10T00:00:00.00Z
sevd-2021-313-05 BadAlloc Vulnerabilities 2021-11-09T05:00:00.000Z 2025-09-09T04:00:00.000Z
sevd-2021-313-07 Eurotherm GUIcon 2021-11-09T00:00:00.000Z 2021-11-09T00:00:00.000Z
sevd-2021-313-02 Schneider Electric Software Update 2021-11-09T00:00:00.000Z 2021-11-09T00:00:00.000Z
sevd-2021-313-01 SCADAPack 300E Series RTU 2021-11-09T00:00:00.000Z 2021-11-09T00:00:00.000Z
ID Description Published Updated
bit-php-2025-14177 Information Leak of Memory in getimagesize 2026-01-08T11:48:30.537Z 2026-01-08T12:08:29.041Z
bit-libphp-2025-14180 NULL Pointer Dereference in PDO quoting 2026-01-08T11:43:29.868Z 2026-01-08T12:08:29.041Z
bit-libphp-2025-14178 Heap buffer overflow in array_merge() 2026-01-08T11:43:28.412Z 2026-01-26T15:09:56.435Z
bit-libphp-2025-14177 Information Leak of Memory in getimagesize 2026-01-08T11:43:26.820Z 2026-01-08T12:08:29.041Z
bit-discourse-2025-64528 Users are able to find users by name even when `enable_names` is off 2026-01-08T11:40:33.666Z 2026-01-08T18:07:34.629Z
bit-composer-2025-67746 Composer vulnerable to ANSI sequence injection 2026-01-08T11:35:54.533Z 2026-01-08T12:08:29.041Z
bit-gitea-2025-69413 2026-01-07T12:00:07.972Z 2026-01-07T12:31:01.344Z
bit-pytorch-2025-63396 2026-01-03T11:47:28.014Z 2026-01-03T12:07:32.193Z
bit-gitea-2025-68942 2026-01-03T11:37:48.385Z 2026-01-03T12:07:32.193Z
bit-gitea-2025-68941 2026-01-03T11:37:46.756Z 2026-01-03T12:07:32.193Z
bit-gitea-2025-68940 2026-01-03T11:37:45.335Z 2026-01-03T12:07:32.193Z
bit-gitea-2025-68939 2026-01-03T11:37:43.934Z 2026-01-03T12:07:32.193Z
bit-gitea-2025-68938 2026-01-03T11:37:42.629Z 2026-01-03T12:07:32.193Z
bit-pebble-2024-3250 2026-01-02T17:44:20.392Z 2026-01-02T18:06:33.396Z
bit-gitea-2025-68946 2026-01-01T11:37:50.117Z 2026-01-01T12:06:33.381Z
bit-gitea-2025-68945 2026-01-01T11:37:48.522Z 2026-01-01T12:06:33.381Z
bit-gitea-2025-68944 2026-01-01T11:37:47.146Z 2026-01-01T12:06:33.381Z
bit-gitea-2025-68943 2026-01-01T11:37:45.731Z 2026-01-01T12:06:33.381Z
bit-nifi-2025-66524 Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor 2025-12-23T11:44:08.985Z 2025-12-23T12:07:14.245Z
bit-kibana-2025-68422 Kibana Improper Authorization 2025-12-20T11:39:27.247Z 2025-12-20T12:06:39.262Z
bit-kibana-2025-68389 Kibana Allocation of Resources Without Limits or Throttling 2025-12-20T11:39:25.644Z 2025-12-20T12:06:39.262Z
bit-kibana-2025-68387 Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 2025-12-20T11:39:24.143Z 2025-12-20T12:06:39.262Z
bit-kibana-2025-68386 Kibana Improper Authorization 2025-12-20T11:39:22.798Z 2025-12-20T12:06:39.262Z
bit-kibana-2025-68385 Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 2025-12-20T11:39:21.164Z 2025-12-24T12:08:49.467Z
bit-haproxy-2025-11230 Denial of service vulnerability in HAProxy mjson library 2025-12-20T11:38:08.173Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68422 Kibana Improper Authorization 2025-12-20T11:36:41.895Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68389 Kibana Allocation of Resources Without Limits or Throttling 2025-12-20T11:36:40.368Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68387 Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 2025-12-20T11:36:38.841Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68386 Kibana Improper Authorization 2025-12-20T11:36:37.419Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68385 Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 2025-12-20T11:36:36.041Z 2025-12-24T12:08:49.467Z
ID Description Updated
var-201404-0378 Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1… 2024-07-23T22:08:28.541000Z
var-201908-0264 Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a den… 2024-07-23T22:07:30.228000Z
var-201702-0469 An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari be… 2024-07-23T22:06:53.547000Z
var-200703-0016 Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… 2024-07-23T22:06:48.011000Z
var-201609-0595 The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly … 2024-07-23T22:06:46.651000Z
var-202004-1974 A type confusion issue was addressed with improved memory handling. This issue is fixed i… 2024-07-23T22:06:44.403000Z
var-201705-3790 In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod Ope… 2024-07-23T22:06:43.841000Z
var-202109-1802 A crafted request uri-path can cause mod_proxy to forward the request to an origin server… 2024-07-23T22:06:13.520000Z
var-202110-1622 A memory corruption issue was addressed with improved memory handling. This issue is fixe… 2024-07-23T22:06:10.313000Z
var-200905-0043 Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, … 2024-07-23T22:06:10.145000Z
var-202203-0129 A cookie management issue was addressed with improved state management. This issue is fix… 2024-07-23T22:06:09.291000Z
var-200210-0102 Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a deni… 2024-07-23T22:06:08.093000Z
var-202009-0037 A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP… 2024-07-23T22:06:07.991000Z
var-201912-0619 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T22:06:04.230000Z
var-200809-0566 Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2… 2024-07-23T22:06:03.293000Z
var-202201-0424 A validation issue was addressed with improved input sanitization. This issue is fixed in… 2024-07-23T22:06:01.833000Z
var-200604-0201 Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary c… 2024-07-23T22:05:29.066000Z
var-201201-0025 Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers … 2024-07-23T22:05:28.758000Z
var-201808-0957 Systems with microprocessors utilizing speculative execution and address translations may… 2024-07-23T22:05:21.889000Z
var-202203-1400 jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of servic… 2024-07-23T22:05:19.247000Z
var-201912-0640 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T22:05:19.907000Z
var-201904-1343 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T22:05:19.745000Z
var-201007-0949 WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… 2024-07-23T22:05:19.065000Z
var-201912-1856 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T22:04:56.028000Z
var-200904-0821 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products… 2024-07-23T22:04:56.133000Z
var-200603-0282 Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 1… 2024-07-23T22:04:24.723000Z
var-201912-0509 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T22:03:53.293000Z
var-200806-0575 SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and … 2024-07-23T22:03:53.151000Z
var-200703-0024 Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins… 2024-07-23T22:03:53.866000Z
var-202005-1054 dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by d… 2024-07-23T22:03:49.580000Z
ID Description Published Updated
jvndb-2025-000038 UpdateNavi vulnerable to improper restriction of communication channel to intended endpoints 2025-06-12T15:56+09:00 2025-06-12T15:56+09:00
jvndb-2025-000037 Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery 2025-06-06T13:56+09:00 2025-06-06T13:56+09:00
jvndb-2025-000036 TimeWorks vulnerable to path traversal 2025-06-03T15:35+09:00 2025-06-03T15:35+09:00
jvndb-2025-000035 Improper file access permission settings in PC Time Tracer 2025-06-03T14:40+09:00 2025-06-03T14:40+09:00
jvndb-2025-000034 Multiple vulnerabilities in wivia 5 2025-05-30T15:57+09:00 2025-05-30T15:57+09:00
jvndb-2025-000032 Mailform Pro CGI generating error messages containing sensitive information 2025-05-26T14:22+09:00 2025-05-26T14:22+09:00
jvndb-2025-000033 Improper pattern file validation in i-FILTER optional feature 'Anti-Virus & Sandbox' 2025-05-23T15:36+09:00 2025-05-23T15:36+09:00
jvndb-2025-005467 Passback vulnerabilities in Canon Production Printers, Office/Small Office Multifunction Printers, and Laser Printers 2025-05-22T15:03+09:00 2025-05-22T15:03+09:00
jvndb-2025-005107 Multiple vulnerabilities in V-SFT 2025-05-16T14:32+09:00 2025-05-16T14:32+09:00
jvndb-2025-005057 Multiple vulnerabilities in I-O DATA network attached hard disk 'HDL-T Series' 2025-05-15T18:27+09:00 2025-05-15T18:27+09:00
jvndb-2025-005050 Multiple vulnerabilities in a-blog cms 2025-05-15T18:11+09:00 2025-05-15T18:11+09:00
jvndb-2025-000031 Pgpool-II vulnerable to authentication bypass by primary weakness 2025-05-15T16:14+09:00 2025-05-15T16:14+09:00
jvndb-2025-004863 Panasonic IR Control Hub vulnerable to Unauthorised firmware loading 2025-05-14T11:30+09:00 2025-05-14T11:30+09:00
jvndb-2025-000030 Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor 2025-05-12T18:00+09:00 2025-07-17T10:06+09:00
jvndb-2025-004671 Multiple vulnerabilities in GL-MT2500 and GL-MT2500A 2025-05-12T17:52+09:00 2025-05-12T17:52+09:00
jvndb-2025-004079 Improper access permission settings in multiple SEIKO EPSON printer drivers for Windows OS 2025-04-30T11:46+09:00 2025-04-30T11:46+09:00
jvndb-2025-004076 Security Update for Trend Micro Trend Vision One (April 2025) 2025-04-30T10:38+09:00 2025-04-30T10:38+09:00
jvndb-2025-000029 Multiple vulnerabilities in Quick Agent 2025-04-25T13:49+09:00 2025-04-25T13:49+09:00
jvndb-2025-000028 i-PRO Configuration Tool vulnerable to use of hard-coded cryptographic key 2025-04-24T13:50+09:00 2025-04-24T13:50+09:00
jvndb-2025-000027 Active! mail vulnerable to stack-based buffer overflow 2025-04-18T16:50+09:00 2025-04-18T16:50+09:00
jvndb-2025-003213 TP-Link Deco BE65 Pro vulnerable to OS command injection 2025-04-11T13:52+09:00 2025-04-11T13:52+09:00
jvndb-2025-000026 Multiple vulnerabilities in BizRobo! 2025-04-10T15:36+09:00 2025-04-10T15:36+09:00
jvndb-2025-003091 Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (April 2025) 2025-04-09T14:55+09:00 2025-04-09T14:55+09:00
jvndb-2025-002990 Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT 'AC-WPS-11ac series' 2025-04-07T17:44+09:00 2025-04-07T17:44+09:00
jvndb-2025-000025 WinRAR vulnerable to the symbolic link based "Mark of the Web" check bypass 2025-04-03T12:29+09:00 2025-04-03T12:29+09:00
jvndb-2025-000022 Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products 2025-04-02T15:12+09:00 2025-04-02T15:12+09:00
jvndb-2025-002790 Out-of-bounds Write vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers 2025-04-02T15:05+09:00 2025-04-02T15:05+09:00
jvndb-2025-000023 WordPress plugin "Welcart e-Commerce" vulnerable to untrusted data deserialization 2025-04-01T14:20+09:00 2025-04-01T14:20+09:00
jvndb-2025-002714 Improper symbolic link file handling in FutureNet NXR series, VXR series and WXR series routers 2025-03-31T16:59+09:00 2025-04-03T15:19+09:00
jvndb-2025-000024 a-blog cms vulnerable to untrusted data deserialization 2025-03-28T10:46+09:00 2025-03-28T10:46+09:00
ID Description Updated
ID Description Published Updated
suse-su-2026:0247-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7) 2026-01-22T15:22:22Z 2026-01-22T15:22:22Z
suse-su-2026:0246-1 Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5) 2026-01-22T15:19:55Z 2026-01-22T15:19:55Z
suse-su-2026:0245-1 Security update for php7 2026-01-22T15:18:06Z 2026-01-22T15:18:06Z
suse-su-2026:20156-1 Security update for gdk-pixbuf 2026-01-22T14:36:50Z 2026-01-22T14:36:50Z
suse-su-2026:20128-1 Security update for gdk-pixbuf 2026-01-22T14:36:50Z 2026-01-22T14:36:50Z
suse-su-2026:20155-1 Security update for libpng16 2026-01-22T14:31:16Z 2026-01-22T14:31:16Z
suse-su-2026:20127-1 Security update for libpng16 2026-01-22T14:31:16Z 2026-01-22T14:31:16Z
suse-su-2026:20154-1 Security update for python313 2026-01-22T14:12:33Z 2026-01-22T14:12:33Z
suse-su-2026:20126-1 Security update for rabbitmq-server 2026-01-22T14:12:33Z 2026-01-22T14:12:33Z
suse-su-2026:20125-1 Security update for python313 2026-01-22T14:12:33Z 2026-01-22T14:12:33Z
suse-su-2026:0243-1 Security update for librsvg 2026-01-22T13:57:37Z 2026-01-22T13:57:37Z
suse-su-2026:20123-1 Security update for buildah 2026-01-22T13:01:23Z 2026-01-22T13:01:23Z
suse-su-2026:20122-1 Security update for go1.24 2026-01-22T12:53:24Z 2026-01-22T12:53:24Z
suse-su-2026:0238-1 Security update for dpdk 2026-01-22T12:26:26Z 2026-01-22T12:26:26Z
suse-su-2026:0237-1 Security update for wireshark 2026-01-22T12:26:09Z 2026-01-22T12:26:09Z
suse-su-2026:0236-1 Security update for busybox 2026-01-22T12:25:35Z 2026-01-22T12:25:35Z
suse-su-2026:0235-1 Security update for busybox 2026-01-22T12:25:06Z 2026-01-22T12:25:06Z
suse-su-2026:0234-1 Security update for libpng16 2026-01-22T12:24:45Z 2026-01-22T12:24:45Z
suse-su-2026:0233-1 Security update for python-virtualenv 2026-01-22T12:24:32Z 2026-01-22T12:24:32Z
suse-su-2026:0232-1 Security update for pgadmin4 2026-01-22T12:24:10Z 2026-01-22T12:24:10Z
suse-su-2026:0231-1 Security update for exiv2-0_26 2026-01-22T12:22:53Z 2026-01-22T12:22:53Z
suse-su-2026:0230-1 Security update for util-linux 2026-01-22T12:22:40Z 2026-01-22T12:22:40Z
suse-su-2026:0229-1 Security update for ffmpeg-4 2026-01-22T12:22:22Z 2026-01-22T12:22:22Z
suse-su-2026:0228-1 Security update for net-snmp 2026-01-22T12:21:52Z 2026-01-22T12:21:52Z
suse-su-2026:0227-1 Security update for net-snmp 2026-01-22T12:21:35Z 2026-01-22T12:21:35Z
suse-su-2026:0226-1 Security update for python-marshmallow 2026-01-22T12:20:21Z 2026-01-22T12:20:21Z
suse-su-2026:0225-1 Security update for net-snmp 2026-01-22T12:19:54Z 2026-01-22T12:19:54Z
suse-su-2026:0224-1 Security update for libtasn1 2026-01-22T12:18:33Z 2026-01-22T12:18:33Z
suse-su-2026:0223-1 Security update for libsodium 2026-01-22T12:18:02Z 2026-01-22T12:18:02Z
suse-su-2026:0222-1 Security update for python-tornado 2026-01-22T12:16:49Z 2026-01-22T12:16:49Z
ID Description Published Updated
cnvd-2026-05358 ChurchCRM代码执行漏洞(CNVD-2026-0535893) 2025-12-25 2026-01-19
cnvd-2026-05357 ChurchCRM 事件参与者编辑器SQL注入漏洞 2025-12-25 2026-01-19
cnvd-2026-05356 ChurchCRM访问控制错误漏洞 2025-12-25 2026-01-19
cnvd-2026-05355 ChurchCRM代码执行漏洞 2025-12-25 2026-01-19
cnvd-2026-05354 ChurchCRM跨站脚本漏洞(CNVD-2026-0535400) 2025-12-25 2026-01-19
cnvd-2026-05353 ChurchCRM跨站脚本漏洞 2025-12-25 2026-01-19
cnvd-2026-05352 ChurchCRM UserEditor.php文件SQL注入漏洞 2025-12-25 2026-01-19
cnvd-2026-05351 ChurchCRM ListEvents.php文件SQL注入漏洞 2025-12-25 2026-01-19
cnvd-2026-05350 ChurchCRM GroupEditor.php页面跨站脚本漏洞 2025-12-25 2026-01-19
cnvd-2026-05349 ChurchCRM eGive.php文件SQL注入漏洞 2025-12-25 2026-01-19
cnvd-2026-05348 ChurchCRM CartToFamily.php文件SQL注入漏洞 2025-12-25 2026-01-19
cnvd-2026-05344 RiteCMS存在未明漏洞 2025-12-25 2026-01-19
cnvd-2026-05343 RiteCMS文件包含漏洞 2025-12-25 2026-01-19
cnvd-2026-05342 RiteCMS访问控制不当漏洞 2025-12-25 2026-01-19
cnvd-2026-05341 RiteCMS跨站请求伪造漏洞 2025-12-25 2026-01-19
cnvd-2026-05340 RiteCMS跨站脚本漏洞 2025-12-25 2026-01-19
cnvd-2026-05339 RiteCMS代码执行漏洞 2025-12-25 2026-01-19
cnvd-2026-05332 Complete Online Beauty Parlor Management System /bwdates-reports-details.php文件跨站脚本漏洞 2025-12-25 2026-01-21
cnvd-2026-05331 Complete Online Beauty Parlor Management System /search-invoices.php文件SQL注入漏洞 2025-12-25 2026-01-21
cnvd-2026-05330 Complete Online Beauty Parlor Management System /view-appointment.php文件SQL注入漏洞 2025-12-25 2026-01-21
cnvd-2026-05130 Kentico Xperience信息泄露漏洞 2025-12-25 2026-01-20
cnvd-2026-05129 Kentico Xperience文件上传漏洞 2025-12-25 2026-01-20
cnvd-2026-05128 Kentico Xperience HTML注入漏洞 2025-12-25 2026-01-20
cnvd-2026-05127 Kentico Xperience跨站脚本漏洞(CNVD-2026-05127) 2025-12-25 2026-01-20
cnvd-2026-05126 Kentico Xperience富文本编辑器组件跨站脚本漏洞 2025-12-25 2026-01-20
cnvd-2026-05125 Kentico Xperience电子邮件营销模板跨站脚本漏洞 2025-12-25 2026-01-20
cnvd-2026-05124 Kentico Xperience跨站脚本漏洞(CNVD-2026-05124) 2025-12-25 2026-01-20
cnvd-2026-05123 Kentico Xperience跨站脚本漏洞(CNVD-2026-05123) 2025-12-25 2026-01-20
cnvd-2026-05122 Kentico Xperience跨站脚本漏洞(CNVD-2026-05122) 2025-12-25 2026-01-20
cnvd-2026-05121 Kentico Xperience跨站脚本漏洞(CNVD-2026-05121) 2025-12-25 2026-01-20
ID Description Published Updated
certfr-2026-avi-0021 Vulnérabilité dans Microsoft Edge 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0020 Multiples vulnérabilités dans les produits IBM 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0019 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0018 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0017 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0016 Vulnérabilité dans les produits Moxa 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0022 Multiples vulnérabilités dans les produits Microsoft 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0021 Vulnérabilité dans Microsoft Edge 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0020 Multiples vulnérabilités dans les produits IBM 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0019 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0018 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0017 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0016 Vulnérabilité dans les produits Moxa 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0015 Multiples vulnérabilités dans les produits Centreon 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0014 Multiples vulnérabilités dans GitLab 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0013 Vulnérabilité dans Tenable Nessus Agent 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0012 Multiples vulnérabilités dans Trend Micro Apex Central 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0011 Vulnérabilité dans Google Android 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0015 Multiples vulnérabilités dans les produits Centreon 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0014 Multiples vulnérabilités dans GitLab 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0013 Vulnérabilité dans Tenable Nessus Agent 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0012 Multiples vulnérabilités dans Trend Micro Apex Central 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0011 Vulnérabilité dans Google Android 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0010 Multiples vulnérabilités dans Curl 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
certfr-2026-avi-0009 Vulnérabilité dans Google Chrome 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
certfr-2026-avi-0008 Multiples vulnérabilités dans Joomla! 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
CERTFR-2026-AVI-0010 Multiples vulnérabilités dans Curl 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
CERTFR-2026-AVI-0009 Vulnérabilité dans Google Chrome 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
CERTFR-2026-AVI-0008 Multiples vulnérabilités dans Joomla! 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
certfr-2026-avi-0007 Vulnérabilité dans Stormshield Network Security 2026-01-06T00:00:00.000000 2026-01-06T00:00:00.000000
ID Description Published Updated
CERTFR-2021-ALE-005 Multiples vulnérabilités dans Microsoft DNS server 2021-03-12T00:00:00.000000 2021-05-12T00:00:00.000000
certfr-2021-ale-004 [MàJ] Multiples vulnérabilités dans Microsoft Exchange Server 2021-03-03T00:00:00.000000 2021-07-16T00:00:00.000000
CERTFR-2021-ALE-004 [MàJ] Multiples vulnérabilités dans Microsoft Exchange Server 2021-03-03T00:00:00.000000 2021-07-16T00:00:00.000000
certfr-2021-ale-003 [MàJ] Vulnérabilité dans VMware vCenter Server 2021-02-25T00:00:00.000000 2021-05-12T00:00:00.000000
CERTFR-2021-ALE-003 [MàJ] Vulnérabilité dans VMware vCenter Server 2021-02-25T00:00:00.000000 2021-05-12T00:00:00.000000
certfr-2021-ale-002 [MàJ] Vulnérabilité dans Google Chrome et Microsoft Edge 2021-02-05T00:00:00.000000 2021-03-11T00:00:00.000000
CERTFR-2021-ALE-002 [MàJ] Vulnérabilité dans Google Chrome et Microsoft Edge 2021-02-05T00:00:00.000000 2021-03-11T00:00:00.000000
certfr-2021-ale-001 |MàJ] Vulnérabilité dans SonicWall SMA100 2021-02-02T00:00:00.000000 2021-05-12T00:00:00.000000
CERTFR-2021-ALE-001 |MàJ] Vulnérabilité dans SonicWall SMA100 2021-02-02T00:00:00.000000 2021-05-12T00:00:00.000000
certfr-2020-ale-026 [MaJ] Présence de code malveillant dans SolarWinds Orion 2020-12-14T00:00:00.000000 2021-04-15T00:00:00.000000
CERTFR-2020-ALE-026 [MaJ] Présence de code malveillant dans SolarWinds Orion 2020-12-14T00:00:00.000000 2021-04-15T00:00:00.000000
certfr-2020-ale-025 Vulnérabilité dans Fortinet FortiOS SSL-VPN 2020-11-27T00:00:00.000000 2021-02-08T00:00:00.000000
CERTFR-2020-ALE-025 Vulnérabilité dans Fortinet FortiOS SSL-VPN 2020-11-27T00:00:00.000000 2021-02-08T00:00:00.000000
certfr-2020-ale-024 [MaJ] Vulnérabilité dans les produits VMware 2020-11-24T00:00:00.000000 2020-12-17T00:00:00.000000
CERTFR-2020-ALE-024 [MaJ] Vulnérabilité dans les produits VMware 2020-11-24T00:00:00.000000 2020-12-17T00:00:00.000000
certfr-2020-ale-023 Multiples vulnérabilités dans Google Chrome 2020-11-12T00:00:00.000000 2020-12-04T00:00:00.000000
CERTFR-2020-ALE-023 Multiples vulnérabilités dans Google Chrome 2020-11-12T00:00:00.000000 2020-12-04T00:00:00.000000
certfr-2020-ale-022 [MàJ] Vulnérabilité dans Oracle Weblogic 2020-10-30T00:00:00.000000 2020-12-17T00:00:00.000000
CERTFR-2020-ALE-022 [MàJ] Vulnérabilité dans Oracle Weblogic 2020-10-30T00:00:00.000000 2020-12-17T00:00:00.000000
certfr-2020-ale-021 Vulnérabilité dans Samba 2020-09-18T00:00:00.000000 2021-03-11T00:00:00.000000
CERTFR-2020-ALE-021 Vulnérabilité dans Samba 2020-09-18T00:00:00.000000 2021-03-11T00:00:00.000000
certfr-2020-ale-020 [MàJ] Vulnérabilité dans Microsoft Netlogon 2020-09-15T00:00:00.000000 2021-03-11T00:00:00.000000
CERTFR-2020-ALE-020 [MàJ] Vulnérabilité dans Microsoft Netlogon 2020-09-15T00:00:00.000000 2021-03-11T00:00:00.000000
certfr-2020-ale-019 Recrudescence d'activité Emotet en France 2020-09-07T00:00:00.000000 2021-02-09T00:00:00.000000
CERTFR-2020-ALE-019 Recrudescence d'activité Emotet en France 2020-09-07T00:00:00.000000 2021-02-09T00:00:00.000000
certfr-2020-ale-018 Vulnérabilité dans Cisco ASA et FTD 2020-07-28T00:00:00.000000 2020-11-05T00:00:00.000000
CERTFR-2020-ALE-018 Vulnérabilité dans Cisco ASA et FTD 2020-07-28T00:00:00.000000 2020-11-05T00:00:00.000000
certfr-2020-ale-017 Multiples vulnérabilités dans SAP Netweaver AS JAVA 2020-07-15T00:00:00.000000 2020-10-12T00:00:00.000000
certfr-2020-ale-016 Vulnérabilité dans Microsoft Domain Name System (DNS) Server 2020-07-15T00:00:00.000000 2020-10-12T00:00:00.000000
CERTFR-2020-ALE-017 Multiples vulnérabilités dans SAP Netweaver AS JAVA 2020-07-15T00:00:00.000000 2020-10-12T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated