Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-71200 |
N/A
|
mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction… |
Linux |
Linux |
2026-02-14T15:09:45.689Z | 2026-02-14T15:09:45.689Z |
| CVE-2026-2312 |
4.3 (3.1)
|
Media Library Folders <= 8.3.6 - Insecure Direct Objec… |
maxfoundry |
Media Library Folders |
2026-02-14T11:24:28.662Z | 2026-02-14T11:24:28.662Z |
| CVE-2026-1512 |
6.4 (3.1)
|
Essential Addons for Elementor <= 6.5.9 - Authenticate… |
wpdevteam |
Essential Addons for Elementor – Popular Elementor Templates & Widgets |
2026-02-14T09:49:39.256Z | 2026-02-14T09:49:39.256Z |
| CVE-2026-1258 |
4.9 (3.1)
|
Mail Mint <= 1.19.2 - Authenticated (Administrator+) S… |
getwpfunnels |
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more |
2026-02-14T08:26:48.193Z | 2026-02-14T08:26:48.193Z |
| CVE-2026-1843 |
7.2 (3.1)
|
Super Page Cache <= 5.2.2 - Unauthenticated Stored Cro… |
optimole |
Super Page Cache |
2026-02-14T08:26:47.080Z | 2026-02-14T08:26:47.080Z |
| CVE-2026-0550 |
6.4 (3.1)
|
myCred <= 2.9.7.3 - Authenticated (Contributor+) Store… |
saadiqbal |
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program. |
2026-02-14T08:26:47.816Z | 2026-02-14T08:26:47.816Z |
| CVE-2025-8572 |
9.8 (3.1)
|
Truelysell Core <= 1.8.7 - Unauthenticated Privilege E… |
dreamstechnologies |
Truelysell Core |
2026-02-14T08:26:47.464Z | 2026-02-14T08:26:47.464Z |
| CVE-2026-1254 |
4.3 (3.1)
|
Modula Image Gallery – Photo Grid & Video Gallery <= 2… |
wpchill |
Modula Image Gallery – Photo Grid & Video Gallery |
2026-02-14T08:26:46.683Z | 2026-02-14T08:26:46.683Z |
| CVE-2026-1249 |
5 (3.1)
|
MP3 Audio Player – Music Player, Podcast Player & Radi… |
sonaar |
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar |
2026-02-14T08:26:46.021Z | 2026-02-14T08:26:46.021Z |
| CVE-2026-1988 |
7.5 (3.1)
|
Flexi Product Slider and Grid for WooCommerce <= 1.0.5… |
wpdecent |
Flexi Product Slider and Grid for WooCommerce |
2026-02-14T06:42:37.658Z | 2026-02-14T06:42:37.658Z |
| CVE-2026-1987 |
5.4 (3.1)
|
Scheduler Widget <= 0.1.6 - Insecure Direct Object Ref… |
morelmathieuj |
Scheduler Widget |
2026-02-14T06:42:37.284Z | 2026-02-14T06:42:37.284Z |
| CVE-2026-1915 |
6.4 (3.1)
|
Simple Plyr <= 0.0.1 - Authenticated (Contributor+) St… |
bestony |
Simple Plyr |
2026-02-14T06:42:36.109Z | 2026-02-14T06:42:36.109Z |
| CVE-2026-1187 |
6.4 (3.1)
|
ZoomifyWP Free <= 1.1 - Authenticated (Contributor+) S… |
terrazoom |
ZoomifyWP Free |
2026-02-14T06:42:36.502Z | 2026-02-14T06:42:36.502Z |
| CVE-2026-0736 |
6.4 (3.1)
|
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.8 - Au… |
collectchat |
Chatbot for WordPress by Collect.chat ⚡️ |
2026-02-14T06:42:36.906Z | 2026-02-14T06:42:36.906Z |
| CVE-2026-1985 |
6.4 (3.1)
|
Press3D <= 1.0.2 - Authenticated (Author+) Stored Cros… |
arieslab |
Press3D |
2026-02-14T06:42:35.710Z | 2026-02-14T06:42:35.710Z |
| CVE-2026-0753 |
7.2 (3.1)
|
Super Simple Contact Form <= 1.6.2 - Reflected Cross-S… |
bitacre |
Super Simple Contact Form |
2026-02-14T06:42:35.247Z | 2026-02-14T06:42:35.247Z |
| CVE-2026-1306 |
9.8 (3.1)
|
midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File U… |
adminkov |
midi-Synth |
2026-02-14T06:42:34.875Z | 2026-02-14T06:42:34.875Z |
| CVE-2026-0735 |
4.4 (3.1)
|
User Language Switch <= 1.6.10 - Authenticated (Admini… |
webilop |
User Language Switch |
2026-02-14T06:42:34.475Z | 2026-02-14T06:42:34.475Z |
| CVE-2025-15483 |
4.4 (3.1)
|
Link Hopper <= 2.5 - Authenticated (Administrator+) St… |
ajferg |
Link Hopper |
2026-02-14T06:42:34.100Z | 2026-02-14T06:42:34.100Z |
| CVE-2026-1910 |
6.4 (3.1)
|
UpMenu <= 3.1 - Authenticated (Contributor+) Stored Cr… |
upmenu |
UpMenu – Online ordering for restaurants |
2026-02-14T06:42:33.299Z | 2026-02-14T06:42:33.299Z |
| CVE-2026-1303 |
5.3 (3.1)
|
MailChimp Campaigns <= 3.2.4 - Missing Authorization t… |
matthieuscarset |
MailChimp Campaigns |
2026-02-14T06:42:33.704Z | 2026-02-14T06:42:33.704Z |
| CVE-2026-1096 |
6.4 (3.1)
|
Best-wp-google-map <= 2.1 - Authenticated (Contributor… |
raju_ahmed |
Best-wp-google-map |
2026-02-14T06:42:32.532Z | 2026-02-14T06:42:32.532Z |
| CVE-2026-0693 |
4.4 (3.1)
|
Allow HTML in Category Descriptions <= 1.2.4 - Authent… |
arnoesterhuizen |
Allow HTML in Category Descriptions |
2026-02-14T06:42:32.915Z | 2026-02-14T06:42:32.915Z |
| CVE-2026-0559 |
6.4 (3.1)
|
MasterStudy LMS WordPress Plugin – for Online Courses … |
stylemix |
MasterStudy LMS WordPress Plugin – for Online Courses and Education |
2026-02-14T06:42:32.152Z | 2026-02-14T06:42:32.152Z |
| CVE-2026-1905 |
6.4 (3.1)
|
Sphere Manager <= 1.0.2 - Authenticated (Contributor+)… |
devmw |
Sphere Manager |
2026-02-14T06:42:31.305Z | 2026-02-14T06:42:31.305Z |
| CVE-2026-1394 |
4.3 (3.1)
|
WP Quick Contact Us <= 1.0 - Cross-Site Request Forger… |
dmitritechs |
WP Quick Contact Us |
2026-02-14T06:42:31.697Z | 2026-02-14T06:42:31.697Z |
| CVE-2026-1944 |
5.3 (3.1)
|
CallbackKiller service widget <= 1.2 - Missing Authori… |
krellbat |
CallbackKiller service widget |
2026-02-14T06:42:30.529Z | 2026-02-14T06:42:30.529Z |
| CVE-2026-0557 |
6.4 (3.1)
|
WP Data Access <= 5.5.63 - Authenticated (Contributor+… |
peterschulznl |
WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps |
2026-02-14T06:42:30.165Z | 2026-02-14T06:42:30.165Z |
| CVE-2025-14852 |
4.3 (3.1)
|
MDirector Newsletter <= 4.5.8 - Cross-Site Request For… |
antevenio |
MDirector Newsletter |
2026-02-14T06:42:30.914Z | 2026-02-14T06:42:30.914Z |
| CVE-2026-2024 |
7.5 (3.1)
|
PhotoStack Gallery <= 0.4.1 - Unauthenticated SQL Inje… |
savitasoni |
PhotoStack Gallery |
2026-02-14T06:42:29.782Z | 2026-02-14T06:42:29.782Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-71200 |
N/A
|
mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction… |
Linux |
Linux |
2026-02-14T15:09:45.689Z | 2026-02-14T15:09:45.689Z |
| CVE-2026-2312 |
4.3 (3.1)
|
Media Library Folders <= 8.3.6 - Insecure Direct Objec… |
maxfoundry |
Media Library Folders |
2026-02-14T11:24:28.662Z | 2026-02-14T11:24:28.662Z |
| CVE-2026-1512 |
6.4 (3.1)
|
Essential Addons for Elementor <= 6.5.9 - Authenticate… |
wpdevteam |
Essential Addons for Elementor – Popular Elementor Templates & Widgets |
2026-02-14T09:49:39.256Z | 2026-02-14T09:49:39.256Z |
| CVE-2026-1843 |
7.2 (3.1)
|
Super Page Cache <= 5.2.2 - Unauthenticated Stored Cro… |
optimole |
Super Page Cache |
2026-02-14T08:26:47.080Z | 2026-02-14T08:26:47.080Z |
| CVE-2026-1258 |
4.9 (3.1)
|
Mail Mint <= 1.19.2 - Authenticated (Administrator+) S… |
getwpfunnels |
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more |
2026-02-14T08:26:48.193Z | 2026-02-14T08:26:48.193Z |
| CVE-2026-1254 |
4.3 (3.1)
|
Modula Image Gallery – Photo Grid & Video Gallery <= 2… |
wpchill |
Modula Image Gallery – Photo Grid & Video Gallery |
2026-02-14T08:26:46.683Z | 2026-02-14T08:26:46.683Z |
| CVE-2026-1249 |
5 (3.1)
|
MP3 Audio Player – Music Player, Podcast Player & Radi… |
sonaar |
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar |
2026-02-14T08:26:46.021Z | 2026-02-14T08:26:46.021Z |
| CVE-2026-0550 |
6.4 (3.1)
|
myCred <= 2.9.7.3 - Authenticated (Contributor+) Store… |
saadiqbal |
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program. |
2026-02-14T08:26:47.816Z | 2026-02-14T08:26:47.816Z |
| CVE-2025-8572 |
9.8 (3.1)
|
Truelysell Core <= 1.8.7 - Unauthenticated Privilege E… |
dreamstechnologies |
Truelysell Core |
2026-02-14T08:26:47.464Z | 2026-02-14T08:26:47.464Z |
| CVE-2026-2024 |
7.5 (3.1)
|
PhotoStack Gallery <= 0.4.1 - Unauthenticated SQL Inje… |
savitasoni |
PhotoStack Gallery |
2026-02-14T06:42:29.782Z | 2026-02-14T06:42:29.782Z |
| CVE-2026-2022 |
4.3 (3.1)
|
Smart Forms <= 2.6.99 - Missing Authorization to Authe… |
edgarrojas |
Smart Forms – when you need more than just a contact form |
2026-02-14T06:42:27.519Z | 2026-02-14T06:42:27.519Z |
| CVE-2026-1988 |
7.5 (3.1)
|
Flexi Product Slider and Grid for WooCommerce <= 1.0.5… |
wpdecent |
Flexi Product Slider and Grid for WooCommerce |
2026-02-14T06:42:37.658Z | 2026-02-14T06:42:37.658Z |
| CVE-2026-1987 |
5.4 (3.1)
|
Scheduler Widget <= 0.1.6 - Insecure Direct Object Ref… |
morelmathieuj |
Scheduler Widget |
2026-02-14T06:42:37.284Z | 2026-02-14T06:42:37.284Z |
| CVE-2026-1985 |
6.4 (3.1)
|
Press3D <= 1.0.2 - Authenticated (Author+) Stored Cros… |
arieslab |
Press3D |
2026-02-14T06:42:35.710Z | 2026-02-14T06:42:35.710Z |
| CVE-2026-1944 |
5.3 (3.1)
|
CallbackKiller service widget <= 1.2 - Missing Authori… |
krellbat |
CallbackKiller service widget |
2026-02-14T06:42:30.529Z | 2026-02-14T06:42:30.529Z |
| CVE-2026-1939 |
6.4 (3.1)
|
Percent to Infograph <= 1.0 - Authenticated (Contribut… |
cutesalah |
Percent to Infograph |
2026-02-14T06:42:29.416Z | 2026-02-14T06:42:29.416Z |
| CVE-2026-1915 |
6.4 (3.1)
|
Simple Plyr <= 0.0.1 - Authenticated (Contributor+) St… |
bestony |
Simple Plyr |
2026-02-14T06:42:36.109Z | 2026-02-14T06:42:36.109Z |
| CVE-2026-1910 |
6.4 (3.1)
|
UpMenu <= 3.1 - Authenticated (Contributor+) Stored Cr… |
upmenu |
UpMenu – Online ordering for restaurants |
2026-02-14T06:42:33.299Z | 2026-02-14T06:42:33.299Z |
| CVE-2026-1905 |
6.4 (3.1)
|
Sphere Manager <= 1.0.2 - Authenticated (Contributor+)… |
devmw |
Sphere Manager |
2026-02-14T06:42:31.305Z | 2026-02-14T06:42:31.305Z |
| CVE-2026-1903 |
6.4 (3.1)
|
Ravelry Designs Widget <= 1.0.0 - Authenticated (Contr… |
shellbot |
Ravelry Designs Widget |
2026-02-14T06:42:28.647Z | 2026-02-14T06:42:28.647Z |
| CVE-2026-1901 |
6.4 (3.1)
|
QuestionPro Surveys <= 1.0 - Authenticated (Contributo… |
questionpro |
QuestionPro Surveys |
2026-02-14T06:42:27.139Z | 2026-02-14T06:42:27.139Z |
| CVE-2026-1796 |
6.1 (3.1)
|
StyleBidet <= 1.0.0 - Reflected Cross-Site Scripting |
indextwo |
StyleBidet |
2026-02-14T06:42:24.992Z | 2026-02-14T06:42:24.992Z |
| CVE-2026-1795 |
6.1 (3.1)
|
Address Bar Ads <= 1.0.0 - Reflected Cross-Site Scripting |
sivenso |
Address Bar Ads |
2026-02-14T06:42:29.053Z | 2026-02-14T06:42:29.053Z |
| CVE-2026-1792 |
6.1 (3.1)
|
Geo Widet <= 1.0 - Reflected Cross-Site Scripting |
owencutajar |
Geo Widget |
2026-02-14T06:42:28.278Z | 2026-02-14T06:42:28.278Z |
| CVE-2026-1394 |
4.3 (3.1)
|
WP Quick Contact Us <= 1.0 - Cross-Site Request Forger… |
dmitritechs |
WP Quick Contact Us |
2026-02-14T06:42:31.697Z | 2026-02-14T06:42:31.697Z |
| CVE-2026-1306 |
9.8 (3.1)
|
midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File U… |
adminkov |
midi-Synth |
2026-02-14T06:42:34.875Z | 2026-02-14T06:42:34.875Z |
| CVE-2026-1303 |
5.3 (3.1)
|
MailChimp Campaigns <= 3.2.4 - Missing Authorization t… |
matthieuscarset |
MailChimp Campaigns |
2026-02-14T06:42:33.704Z | 2026-02-14T06:42:33.704Z |
| CVE-2026-1187 |
6.4 (3.1)
|
ZoomifyWP Free <= 1.1 - Authenticated (Contributor+) S… |
terrazoom |
ZoomifyWP Free |
2026-02-14T06:42:36.502Z | 2026-02-14T06:42:36.502Z |
| CVE-2026-1096 |
6.4 (3.1)
|
Best-wp-google-map <= 2.1 - Authenticated (Contributor… |
raju_ahmed |
Best-wp-google-map |
2026-02-14T06:42:32.532Z | 2026-02-14T06:42:32.532Z |
| CVE-2026-0753 |
7.2 (3.1)
|
Super Simple Contact Form <= 1.6.2 - Reflected Cross-S… |
bitacre |
Super Simple Contact Form |
2026-02-14T06:42:35.247Z | 2026-02-14T06:42:35.247Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-22082 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T12:15:54.403 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22081 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T12:15:54.260 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-7072 | The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (sh… | 2026-01-09T12:15:54.020 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-66052 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "sy… | 2026-01-09T12:15:53.883 | 2026-01-14T17:50:09.087 |
| fkie_cve-2025-66051 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible f… | 2026-01-09T12:15:53.740 | 2026-01-14T17:49:09.330 |
| fkie_cve-2025-66050 | Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any passwor… | 2026-01-09T12:15:53.587 | 2026-01-14T17:48:29.730 |
| fkie_cve-2025-66049 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue … | 2026-01-09T12:15:53.420 | 2026-01-14T17:48:18.313 |
| fkie_cve-2025-14172 | The WP Page Permalink Extension plugin for WordPress is vulnerable to Missing Authorization in all … | 2026-01-09T12:15:53.260 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13967 | The Woodpecker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … | 2026-01-09T12:15:53.103 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13908 | The The Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's … | 2026-01-09T12:15:52.950 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13903 | The PullQuote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'p… | 2026-01-09T12:15:52.800 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13897 | The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | 2026-01-09T12:15:52.647 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13893 | The Lesson Plan Book plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `… | 2026-01-09T12:15:52.493 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13892 | The MG AdvancedOptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… | 2026-01-09T12:15:52.347 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13862 | The Menu Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `category` … | 2026-01-09T12:15:52.197 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13854 | The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' … | 2026-01-09T12:15:52.040 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13852 | The Debt.com Business in a Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… | 2026-01-09T12:15:51.890 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13717 | The Contact Form vCard Generator plugin for WordPress is vulnerable to unauthorized access of data … | 2026-01-09T12:15:51.740 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13704 | The Autogen Headers Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-01-09T12:15:51.583 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13701 | The Shabat Keeper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SE… | 2026-01-09T12:15:51.430 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-11453 | The Header and Footer Scripts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | 2026-01-09T12:15:50.620 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22080 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T11:15:51.150 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22079 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T11:15:50.617 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-9222 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.2 before 18.5.5, 18… | 2026-01-09T10:15:47.037 | 2026-01-22T17:20:15.873 |
| fkie_cve-2025-64093 | Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary comma… | 2026-01-09T10:15:46.890 | 2026-02-10T20:33:36.620 |
| fkie_cve-2025-64092 | This vulnerability allows unauthenticated attackers to inject an SQL request into GET request param… | 2026-01-09T10:15:46.750 | 2026-02-12T17:42:53.230 |
| fkie_cve-2025-64091 | This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of … | 2026-01-09T10:15:46.627 | 2026-02-12T17:45:46.487 |
| fkie_cve-2025-64090 | This vulnerability allows authenticated attackers to execute commands via the hostname of the device. | 2026-01-09T10:15:46.480 | 2026-02-12T17:45:04.993 |
| fkie_cve-2025-3950 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6… | 2026-01-09T10:15:46.310 | 2026-01-21T19:19:06.850 |
| fkie_cve-2025-13900 | The WP Popup Magic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name'… | 2026-01-09T10:15:46.130 | 2026-01-13T14:03:46.203 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-92mm-wrj7-g7r7 |
4.3 (3.1)
|
The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authori… | 2026-02-14T09:31:34Z | 2026-02-14T09:31:34Z |
| ghsa-5899-42j8-fxpr |
5.0 (3.1)
|
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulne… | 2026-02-14T09:31:34Z | 2026-02-14T09:31:34Z |
| ghsa-xhwg-m969-356h |
7.5 (3.1)
|
The PhotoStack Gallery plugin for WordPress is vulnerable to SQL Injection via the 'postid' paramet… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-x6ph-vfh4-48q4 |
9.8 (3.1)
|
The Truelysell Core plugin for WordPress is vulnerable to privilege escalation in versions less tha… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-x35p-8cmq-xf5p |
6.4 (3.1)
|
The UpMenu – Online ordering for restaurants plugin for WordPress is vulnerable to Stored Cross-Sit… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-wrwf-qpx5-8gj4 |
6.4 (3.1)
|
The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'l… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-whjx-jr95-pc2f |
6.4 (3.1)
|
The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site S… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-wcg8-g6m5-jgh5 |
5.4 (3.1)
|
The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:34Z |
| ghsa-w2x2-hcw6-22p4 |
7.5 (3.1)
|
The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-r8hc-3q2v-m9fj |
4.4 (3.1)
|
The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-q8wh-g4r2-jgrq |
6.4 (3.1)
|
The QuestionPro Surveys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-q73g-q59m-6qff |
6.4 (3.1)
|
The Percent to Infograph plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-q477-mh2f-28m4 |
6.4 (3.1)
|
The Sphere Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-pmxf-4m9g-jv6w |
6.4 (3.1)
|
The ZoomifyWP Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'filen… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-p7w9-7w5h-q4xc |
5.4 (3.1)
|
The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in al… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-mv6c-jc9c-qq2q |
6.4 (3.1)
|
The myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mycr… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:34Z |
| ghsa-m38c-5p3m-p7gm |
7.2 (3.1)
|
The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all v… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-j7x7-gc84-q635 |
6.4 (3.1)
|
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vul… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-gwjc-jv9v-qrxm |
6.4 (3.1)
|
The Simple Plyr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poster' … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-grp9-8c88-8ph6 |
6.4 (3.1)
|
The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-f4qw-9xx8-rwgr |
4.4 (3.1)
|
The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scr… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-cvgg-m9hw-r94w |
6.4 (3.1)
|
The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gute… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-cchp-7wr7-98gf |
4.3 (3.1)
|
The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8xxh-rwxq-w2fc |
6.1 (3.1)
|
The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path i… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8jp5-qrhm-p8v5 |
6.1 (3.1)
|
The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the UR… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8gh7-8v8f-6f45 |
5.3 (3.1)
|
The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification o… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-6m5f-57jg-w742 |
9.8 (3.1)
|
The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-59rj-2hg2-476v |
6.1 (3.1)
|
The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL pat… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4q47-jxhq-7fj2 |
4.3 (3.1)
|
The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4p4p-xgjx-qcc9 |
5.3 (3.1)
|
The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-200 |
7.2 (3.1)
|
JupyterHub is software that allows one to create a multi-user server for Jupyter notebook… | jupyterhub | 2024-08-08T15:15:17+00:00 | 2025-01-19T16:22:58.171761+00:00 |
| pysec-2024-70 |
|
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values… | django | 2024-08-07T15:15:00+00:00 | 2024-08-07T17:22:10.804411+00:00 |
| pysec-2024-69 |
|
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and … | django | 2024-08-07T15:15:00+00:00 | 2024-08-07T17:22:10.745844+00:00 |
| pysec-2024-68 |
|
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() an… | django | 2024-08-07T15:15:00+00:00 | 2024-08-07T17:22:10.682679+00:00 |
| pysec-2024-67 |
|
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat… | django | 2024-08-07T15:15:00+00:00 | 2024-08-07T17:22:10.613440+00:00 |
| pysec-2024-73 |
9.1 (3.1)
|
A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 … | chuanhuchatgpt | 2024-07-31T01:15:00+00:00 | 2024-08-27T15:22:40.259109+00:00 |
| pysec-2024-75 |
6.1 (3.1)
|
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Th… | twisted | 2024-07-29T16:15:00+00:00 | 2024-09-11T19:19:18.005250+00:00 |
| pysec-2024-203 |
7.5 (3.1)
|
DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in files… | duckdb | 2024-07-24T18:15:05+00:00 | 2025-01-19T19:18:58.299130+00:00 |
| pysec-2024-65 |
|
Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents. | roundup | 2024-07-17T20:15:00+00:00 | 2024-07-17T23:22:05.024899+00:00 |
| pysec-2024-64 |
|
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header. | roundup | 2024-07-17T20:15:00+00:00 | 2024-07-17T23:22:04.987078+00:00 |
| pysec-2024-63 |
|
In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS. | roundup | 2024-07-17T20:15:00+00:00 | 2024-07-17T23:22:04.949977+00:00 |
| pysec-2024-173 |
8.8 (3.1)
|
Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such… | streampipes | 2024-07-17T10:15:01+00:00 | 2025-01-18T22:21:43.618882+00:00 |
| pysec-2024-174 |
4.3 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installatio… | streampipes | 2024-07-17T09:15:02+00:00 | 2025-01-18T22:21:43.678475+00:00 |
| pysec-2024-172 |
3.7 (3.1)
|
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in … | streampipes | 2024-07-17T09:15:02+00:00 | 2025-01-18T22:21:43.557516+00:00 |
| pysec-2024-190 |
8.8 (3.1)
|
Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenti… | apache-airflow | 2024-07-17T08:15:02+00:00 | 2025-01-19T07:21:16.859034+00:00 |
| pysec-2024-189 |
5.4 (3.1)
|
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated at… | apache-airflow | 2024-07-17T08:15:01+00:00 | 2025-01-19T07:21:16.796301+00:00 |
| pysec-2024-66 |
7.8 (3.1)
|
dbt enables data analysts and engineers to transform their data using the same practices … | dbt-core | 2024-07-16T23:15:00+00:00 | 2024-07-19T17:21:49.664320+00:00 |
| pysec-2024-62 |
|
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerab… | langchain-experimental | 2024-07-15T05:15:00+00:00 | 2024-07-15T11:19:36.686972+00:00 |
| pysec-2024-86 |
4.9 (3.1)
|
Wagtail is an open source content management system built on Django. A bug in Wagtail's `… | wagtail | 2024-07-11T16:15:00+00:00 | 2024-09-19T19:20:17.668744+00:00 |
| pysec-2024-61 |
6.1 (3.1)
|
A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt ve… | chuanhuchatgpt | 2024-07-11T11:15:00+00:00 | 2024-07-12T21:33:00.657381+00:00 |
| pysec-2024-59 |
|
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_l… | django | 2024-07-10T05:15:00+00:00 | 2024-07-10T11:20:07.800540+00:00 |
| pysec-2024-58 |
|
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes… | django | 2024-07-10T05:15:00+00:00 | 2024-07-10T11:20:07.704786+00:00 |
| pysec-2024-57 |
|
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.cont… | django | 2024-07-10T05:15:00+00:00 | 2024-07-10T11:20:07.604887+00:00 |
| pysec-2024-56 |
|
An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urli… | django | 2024-07-10T05:15:00+00:00 | 2024-07-10T11:20:07.495359+00:00 |
| pysec-2024-60 |
7.5 (3.1)
|
A vulnerability was identified in the kjd/idna library, specifically within the `idna.enc… | idna | 2024-07-07T18:15:00+00:00 | 2024-07-11T17:21:37.216928+00:00 |
| pysec-2024-230 |
7.5 (3.1)
|
Certifi is a curated collection of Root Certificates for validating the trustworthiness o… | certifi | 2024-07-05T19:15:10+00:00 | 2025-02-12T21:21:51.559667+00:00 |
| pysec-2024-176 |
6.1 (3.1)
|
A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml ver… | zenml | 2024-06-30T16:15:03+00:00 | 2025-01-18T22:21:45.122426+00:00 |
| pysec-2024-167 |
|
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python… | nltk | 2024-06-27T22:15:10+00:00 | 2025-01-18T19:19:06.317325+00:00 |
| pysec-2024-54 |
6.5 (3.1)
|
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang St… | codechecker | 2024-06-24T18:15:00+00:00 | 2024-06-26T19:19:24.981233+00:00 |
| pysec-2024-53 |
|
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides … | langchain-experimental | 2024-06-16T15:15:00+00:00 | 2024-06-16T17:20:32.187558+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-765 | Malicious code in optimizer-cpu (npm) | 2026-02-05T16:05:05Z | 2026-02-06T03:05:25Z |
| mal-2026-764 | Malicious code in chai-as-advanced (npm) | 2026-02-05T14:54:55Z | 2026-02-06T03:05:23Z |
| mal-2026-763 | Malicious code in web3-meme-tool (PyPI) | 2026-02-05T14:33:05Z | 2026-02-05T14:33:05Z |
| mal-2026-762 | Malicious code in metadata-checker (PyPI) | 2026-02-05T14:30:34Z | 2026-02-05T15:20:28Z |
| mal-2026-761 | Malicious code in digital-checkout (npm) | 2026-02-05T14:22:06Z | 2026-02-06T03:05:23Z |
| mal-2026-760 | Malicious code in @helloflex/widget-next-sdk (npm) | 2026-02-05T12:44:37Z | 2026-02-06T03:05:22Z |
| mal-2026-759 | Malicious code in pipelinepoision-test (PyPI) | 2026-02-05T08:43:35Z | 2026-02-05T08:43:35Z |
| mal-2026-772 | Malicious code in conp-dats-editor (npm) | 2026-02-05T08:16:03Z | 2026-02-06T03:05:23Z |
| mal-2026-757 | Malicious code in internallib_v157 (npm) | 2026-02-05T02:24:51Z | 2026-02-06T03:05:24Z |
| mal-2026-758 | Malicious code in tailwindcss-forms-starter (npm) | 2026-02-05T02:03:44Z | 2026-02-06T03:05:26Z |
| mal-2026-756 | Malicious code in cat-retail-app (npm) | 2026-02-05T01:58:59Z | 2026-02-06T03:05:23Z |
| mal-2026-755 | Malicious code in @jes4l/react-pkg (npm) | 2026-02-05T01:57:08Z | 2026-02-06T03:05:22Z |
| mal-2026-751 | Malicious code in express_update (npm) | 2026-02-05T01:50:12Z | 2026-02-06T03:05:23Z |
| mal-2026-753 | Malicious code in log-symbols_updated (npm) | 2026-02-05T01:50:11Z | 2026-02-06T03:05:25Z |
| mal-2026-752 | Malicious code in locate-path_updated (npm) | 2026-02-05T01:50:11Z | 2026-02-06T03:05:25Z |
| mal-2026-749 | Malicious code in @purecore/rabbitmq (npm) | 2026-02-05T01:28:01Z | 2026-02-06T03:05:22Z |
| mal-2026-750 | Malicious code in dspmobile (npm) | 2026-02-05T01:07:59Z | 2026-02-06T03:05:23Z |
| mal-2026-754 | Malicious code in tailwindcss-animation-modern (npm) | 2026-02-05T01:06:23Z | 2026-02-06T03:05:26Z |
| mal-2026-747 | Malicious code in react-vite-sync (npm) | 2026-02-04T23:44:25Z | 2026-02-06T03:05:26Z |
| mal-2026-748 | Malicious code in web3-chain-sync (npm) | 2026-02-04T23:44:24Z | 2026-02-06T03:05:27Z |
| mal-2026-746 | Malicious code in react-count-sync (npm) | 2026-02-04T23:44:24Z | 2026-02-06T03:05:26Z |
| mal-2026-745 | Malicious code in statssol (PyPI) | 2026-02-04T19:47:20Z | 2026-02-04T19:47:20Z |
| mal-2026-742 | Malicious code in dcf-commons (npm) | 2026-02-04T17:26:21Z | 2026-02-06T03:05:23Z |
| mal-2026-740 | Malicious code in @msecscc/gaia (npm) | 2026-02-04T17:18:05Z | 2026-02-06T03:05:22Z |
| mal-2026-743 | Malicious code in internationalized (npm) | 2026-02-04T17:13:32Z | 2026-02-06T03:05:24Z |
| mal-2026-744 | Malicious code in mdp-client-web (npm) | 2026-02-04T17:08:45Z | 2026-02-06T03:05:25Z |
| mal-2026-741 | Malicious code in confluence-analytics-support (npm) | 2026-02-04T17:08:45Z | 2026-02-06T03:05:23Z |
| mal-2026-739 | Malicious code in test-for-ppe (PyPI) | 2026-02-04T14:57:08Z | 2026-02-04T14:57:08Z |
| mal-2026-738 | Malicious code in tablescene (PyPI) | 2026-02-04T10:24:43Z | 2026-02-04T18:51:22Z |
| mal-2026-737 | Malicious code in remark-gfm-v4 (npm) | 2026-02-04T09:46:59Z | 2026-02-06T03:05:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2805 | TianoCore EDK2: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2802 | Notepad++: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2026-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2798 | Red Hat OpenShift Service Mesh: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2789 | Adobe Experience Manager: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-2781 | Microsoft Windows: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2765 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-08T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2759 | IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting | 2025-12-08T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2756 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-07T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2755 | util-linux: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-12-07T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2751 | WebKitGTK: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2750 | Apache HTTP Server: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2747 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-04T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2746 | IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-04T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2741 | cPython: Schwachstelle ermöglicht Denial of Service | 2025-12-03T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2740 | ffmpeg: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-12-03T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2738 | Vercel Next.js und React Server Components (React2Shell): Schwachstelle ermöglicht Codeausführung | 2025-12-03T23:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2737 | libpng: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-12-03T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2736 | QT (Declarative module): Schwachstelle ermöglicht Denial of Service | 2025-12-03T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2733 | Drupal-Module: Mehrere Schwachstellen | 2025-12-03T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2730 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2729 | WebKitGTK: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2724 | Golang Go: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2722 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2718 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2717 | Django: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2711 | Android Patchday Dezember 2025: Mehrere Schwachstellen | 2025-12-01T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2706 | Python: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-01T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2703 | Zabbix: Mehrere Schwachstellen | 2025-11-30T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2702 | Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-30T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2701 | xwiki (XJetty): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-30T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0319 | Kwetsbaarheden verholpen in F5 Networks BIG-IP, F5OS en NGINX App Protect WAF | 2025-10-15T15:21:14.871532Z | 2025-10-15T15:21:14.871532Z |
| ncsc-2025-0318 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager | 2025-10-15T06:22:07.027110Z | 2025-10-15T06:22:07.027110Z |
| ncsc-2025-0317 | Kwetsbaarheden verholpen in Veeam Backup & Replication | 2025-10-15T06:13:55.126030Z | 2025-10-15T06:13:55.126030Z |
| ncsc-2025-0316 | Kwetsbaarheid verholpen in Microsoft SQL Server | 2025-10-14T18:52:06.487996Z | 2025-10-14T18:52:06.487996Z |
| ncsc-2025-0315 | Kwetsbaarheden verholpen in Microsoft Office | 2025-10-14T18:38:05.692251Z | 2025-10-14T18:38:05.692251Z |
| ncsc-2025-0314 | Kwetsbaarheden verholpen in Microsoft System Center | 2025-10-14T18:27:56.075338Z | 2025-10-14T18:27:56.075338Z |
| ncsc-2025-0313 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-10-14T18:21:47.576457Z | 2025-10-14T18:21:47.576457Z |
| ncsc-2025-0312 | Kwetsbaarheden verholpen in Microsoft Exchange | 2025-10-14T18:16:12.274468Z | 2025-10-14T18:16:12.274468Z |
| ncsc-2025-0311 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-10-14T18:13:41.244373Z | 2025-10-14T18:13:41.244373Z |
| ncsc-2025-0310 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-10-14T18:03:45.875739Z | 2025-10-24T11:09:29.790442Z |
| ncsc-2025-0309 | Kwetsbaarheden verholpen in Siemens producten | 2025-10-14T11:22:10.254089Z | 2025-10-14T11:22:10.254089Z |
| ncsc-2025-0308 | Kwetsbaarheden verholpen in Juniper Networks Junos Space | 2025-10-13T08:31:03.235596Z | 2025-10-13T08:31:03.235596Z |
| ncsc-2025-0307 | Kwetsbaarheid verholpen in Oracle E-Business Suite | 2025-10-13T07:52:22.500853Z | 2025-10-13T07:52:22.500853Z |
| ncsc-2025-0306 | Kwetsbaarheden verholpen in GitLab | 2025-10-13T07:25:32.225768Z | 2025-10-13T07:25:32.225768Z |
| ncsc-2025-0305 | Kwetsbaarheden verholpen in Juniper Networks Junos OS | 2025-10-13T07:17:00.445318Z | 2025-10-13T07:17:00.445318Z |
| ncsc-2025-0304 | Kwetsbaarheden verholpen in Redis | 2025-10-08T11:43:37.331971Z | 2025-10-08T11:43:37.331971Z |
| ncsc-2025-0303 | Kwetsbaarheid verholpen in Oracle E-Business Suite | 2025-10-05T09:07:57.122302Z | 2025-10-08T13:03:30.836713Z |
| ncsc-2025-0302 | Kwetsbaarheid verholpen in IBM InfoSphere | 2025-09-30T08:31:27.582962Z | 2025-09-30T08:31:27.582962Z |
| ncsc-2025-0301 | Kwetsbaarheden verholpen in VMware NSX | 2025-09-30T08:29:24.969885Z | 2025-09-30T08:29:24.969885Z |
| ncsc-2025-0300 | Kwetsbaarheden verholpen in GitLab EE & CE | 2025-09-29T09:40:53.033373Z | 2025-09-29T09:40:53.033373Z |
| ncsc-2025-0299 | Kwetsbaarheden verholpen in Zenitel ICX500 en ICX510 Gateway | 2025-09-26T07:00:18.729367Z | 2025-09-26T07:00:18.729367Z |
| ncsc-2025-0298 | Kwetsbaarheden verholpen in Cisco Secure Firewall ASA en FTD | 2025-09-25T18:17:20.040958Z | 2025-09-25T18:17:20.040958Z |
| ncsc-2025-0297 | Kwetsbaarheden verholpen in Cisco IOS en Cisco IOS XE Software | 2025-09-25T09:20:07.678881Z | 2025-09-25T10:42:19.129323Z |
| ncsc-2025-0296 | Kwetsbaarheid verholpen in WatchGuard Fireware OS | 2025-09-19T13:31:26.392203Z | 2025-10-17T08:19:28.145953Z |
| ncsc-2025-0295 | Kwetsbaarheid verholpen in Fortra's GoAnywhere MFT | 2025-09-19T12:26:42.186246Z | 2025-09-19T12:26:42.186246Z |
| ncsc-2025-0294 | Kwetsbaarheden verholpen in HPE Aruba Networking EdgeConnect SD-WAN Gateways | 2025-09-18T12:02:45.239087Z | 2025-09-18T12:02:45.239087Z |
| ncsc-2025-0293 | Kwetsbaarheden verholpen in Spring Framework | 2025-09-16T13:38:44.960337Z | 2025-09-16T13:38:44.960337Z |
| ncsc-2025-0292 | Kwetsbaarheden verholpen in Ivanti producten | 2025-09-16T12:21:50.959347Z | 2025-09-16T12:21:50.959347Z |
| ncsc-2025-0291 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2025-09-16T11:17:27.365694Z | 2025-09-16T11:17:27.365694Z |
| ncsc-2025-0290 | Kwetsbaarheden verholpen in Apple macOS | 2025-09-16T11:16:20.572265Z | 2025-09-16T11:16:20.572265Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-416411 | SSA-416411: Cross-Site Scripting Vulnerability in Industrial Edge Management | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-404759 | SSA-404759: Information Disclosure Vulnerability in Siveillance Video Camera Drivers | 2025-01-14T00:00:00Z | 2025-01-15T00:00:00Z |
| ssa-314390 | SSA-314390: LDAP Injection Vulnerability in Mendix LDAP Module | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-194557 | SSA-194557: Improper Limitation of Filesystem Access through Web Server Vulnerability in SIPROTEC 5 | 2025-01-14T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-928984 | SSA-928984: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) | 2024-12-16T00:00:00Z | 2026-01-13T00:00:00Z |
| ssa-979056 | SSA-979056: Out of Bounds Write Vulnerability in Parasolid | 2024-12-10T00:00:00Z | 2024-12-12T00:00:00Z |
| ssa-881356 | SSA-881356: Multiple Memory Corruption Vulnerabilities in Simcenter Femap | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-800126 | SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20 | 2024-12-10T00:00:00Z | 2025-12-09T00:00:00Z |
| ssa-730188 | SSA-730188: Multiple File Parsing Vulnerabilities in Solid Edge V2024 | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-701627 | SSA-701627: XXE Injection Vulnerabilities in COMOS | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-645131 | SSA-645131: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-620799 | SSA-620799: Denial of Service Vulnerability During BLE Pairing in SENTRON Powercenter 1000/1100 | 2024-12-10T00:00:00Z | 2025-06-10T00:00:00Z |
| ssa-392859 | SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20 | 2024-12-10T00:00:00Z | 2025-12-09T00:00:00Z |
| ssa-384652 | SSA-384652: Cross-Site Request Forgery (CSRF) Vulnerability in RUGGEDCOM ROX II | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-128393 | SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050 | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-354569 | SSA-354569: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices | 2024-11-22T00:00:00Z | 2025-06-10T00:00:00Z |
| ssa-824503 | SSA-824503: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation Before V2302.0018 and V2404.0007 | 2024-11-18T00:00:00Z | 2024-11-18T00:00:00Z |
| ssa-472448 | SSA-472448: Security Bypass Vulnerability in the SQL Client-Server Communication in Siveillance Video | 2024-11-13T00:00:00Z | 2024-11-13T00:00:00Z |
| ssa-915275 | SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-914892 | SSA-914892: Race Condition Vulnerability in Basic Authentication Implementation of Mendix Runtime | 2024-11-12T00:00:00Z | 2025-08-12T00:00:00Z |
| ssa-871035 | SSA-871035: Session-Memory Deserialization Vulnerability in Siemens Engineering Platforms Before V19 | 2024-11-12T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-654798 | SSA-654798: Incorrect Authorization Vulnerability in SIMATIC CP 1543-1 Devices | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-616032 | SSA-616032: Local Privilege Escalation Vulnerability in Spectrum Power 7 Before V24Q3 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-454789 | SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-354112 | SSA-354112: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.2 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-351178 | SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 9 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-331112 | SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-230445 | SSA-230445: Stored XSS Vulnerability in OZW Web Servers Before V5.2 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-064257 | SSA-064257: Privilege Escalation Vulnerability in SIPORT Before V3.4.0 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-000297 | SSA-000297: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller Before V5.6 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1842 | Red Hat Security Advisory: nodejs24 security update | 2026-02-05T16:03:11+00:00 | 2026-02-12T10:51:17+00:00 |
| rhsa-2026:1837 | Red Hat Security Advisory: osbuild-composer security update | 2026-02-05T16:03:01+00:00 | 2026-02-14T01:42:14+00:00 |
| rhsa-2026:1838 | Red Hat Security Advisory: image-builder security update | 2026-02-05T16:02:26+00:00 | 2026-02-14T01:42:15+00:00 |
| rhsa-2026:2148 | Red Hat Security Advisory: Kiali 2.11.6 for Red Hat OpenShift Service Mesh 3.1 | 2026-02-05T15:58:24+00:00 | 2026-02-16T01:37:16+00:00 |
| rhsa-2026:2147 | Red Hat Security Advisory: Kiali 2.4.12 for Red Hat OpenShift Service Mesh 3.0 | 2026-02-05T15:58:12+00:00 | 2026-02-16T01:37:15+00:00 |
| rhsa-2026:2146 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-05T15:54:06+00:00 | 2026-02-16T01:37:15+00:00 |
| rhsa-2026:2145 | Red Hat Security Advisory: Kiali 1.73.26 for Red Hat OpenShift Service Mesh 2.6 | 2026-02-05T15:53:57+00:00 | 2026-02-12T22:34:51+00:00 |
| rhsa-2026:1549 | Red Hat Security Advisory: OpenShift Container Platform 4.15.61 bug fix and security update | 2026-02-05T15:48:33+00:00 | 2026-02-16T00:32:50+00:00 |
| rhsa-2026:2128 | Red Hat Security Advisory: python3 security update | 2026-02-05T15:48:06+00:00 | 2026-02-12T19:30:17+00:00 |
| rhsa-2026:2144 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-05T15:45:43+00:00 | 2026-02-16T01:37:14+00:00 |
| rhsa-2026:2139 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-05T15:35:09+00:00 | 2026-02-16T01:37:14+00:00 |
| rhsa-2026:2138 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-05T15:35:02+00:00 | 2026-02-16T01:37:13+00:00 |
| rhsa-2026:2137 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-05T15:26:20+00:00 | 2026-02-16T01:37:13+00:00 |
| rhsa-2026:2136 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-05T15:17:09+00:00 | 2026-02-16T01:37:12+00:00 |
| rhsa-2026:2127 | Red Hat Security Advisory: kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, kpatch-patch-5_14_0-70_132_1, kpatch-patch-5_14_0-70_144_1, and kpatch-patch-5_14_0-70_155_1 security update | 2026-02-05T15:08:50+00:00 | 2026-02-11T18:58:09+00:00 |
| rhsa-2026:2133 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-05T15:02:51+00:00 | 2026-02-16T01:37:12+00:00 |
| rhsa-2026:2124 | Red Hat Security Advisory: osbuild-composer security update | 2026-02-05T14:55:40+00:00 | 2026-02-16T01:37:11+00:00 |
| rhsa-2026:2126 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-05T14:55:08+00:00 | 2026-02-16T01:37:11+00:00 |
| rhsa-2026:1965 | Red Hat Security Advisory: Red Hat build of Quarkus 3.27.2 release and security update | 2026-02-05T14:53:30+00:00 | 2026-02-05T19:49:02+00:00 |
| rhsa-2026:1899 | Red Hat Security Advisory: Red Hat build of Quarkus 3.20.5 release and security update | 2026-02-05T14:43:16+00:00 | 2026-02-05T20:05:39+00:00 |
| rhsa-2026:2123 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.0 | 2026-02-05T14:26:23+00:00 | 2026-02-16T01:37:10+00:00 |
| rhsa-2026:2115 | Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_92_1 security update | 2026-02-05T14:10:15+00:00 | 2026-02-11T18:58:09+00:00 |
| rhsa-2026:2109 | Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update | 2026-02-05T14:06:15+00:00 | 2026-02-11T18:58:09+00:00 |
| rhsa-2026:2096 | Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, and kpatch-patch-5_14_0-570_66_1 security update | 2026-02-05T13:49:50+00:00 | 2026-02-11T18:58:08+00:00 |
| rhsa-2026:2106 | Red Hat Security Advisory: RHOAI 2.25.2 - Red Hat OpenShift AI | 2026-02-05T13:38:32+00:00 | 2026-02-16T01:37:09+00:00 |
| rhsa-2026:2090 | Red Hat Security Advisory: python3.12-wheel security update | 2026-02-05T13:26:00+00:00 | 2026-02-12T22:50:04+00:00 |
| rhsa-2026:2084 | Red Hat Security Advisory: python3.11 security update | 2026-02-05T11:58:50+00:00 | 2026-02-11T14:41:35+00:00 |
| rhsa-2026:2081 | Red Hat Security Advisory: freerdp security update | 2026-02-05T11:53:40+00:00 | 2026-02-13T08:42:14+00:00 |
| rhsa-2026:2074 | Red Hat Security Advisory: firefox security update | 2026-02-05T10:53:04+00:00 | 2026-02-09T13:27:20+00:00 |
| rhsa-2026:2073 | Red Hat Security Advisory: firefox security update | 2026-02-05T10:50:14+00:00 | 2026-02-09T13:27:20+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-296-02 | ASKI Energy ALS-Mini-S8 and ALS-Mini-S4 | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-296-01 | AutomationDirect Productivity Suite | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| va-25-296-01 | Frontier Airlines website publicly available email address validation | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| va-25-297-01 | IBM DOORS Next Generation multiple vulnerabilities | 2025-10-22T18:45:47Z | 2025-10-22T18:45:47Z |
| icsma-25-294-01 | Oxford Nanopore Technologies MinKNOW | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-25-294-06 | Raisecomm RAX701-GC Series | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-25-294-05 | CloudEdge Online Cameras and App | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-25-294-02 | Rockwell Automation Compact GuardLogix 5370 | 2025-10-21T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-294-01 | Rockwell Automation 1783-NATR | 2025-10-21T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| va-25-289-01 | OPEXUS FOIAXpress unauthenticated administrator password reset | 2025-10-16T16:43:55Z | 2025-10-16T16:43:55Z |
| icsa-25-289-04 | Rockwell Automation ArmorStart AOP | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-289-03 | Rockwell Automation FactoryTalk ViewPoint | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-289-02 | Rockwell Automation FactoryTalk Linx | 2025-10-16T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-289-01 | Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7 | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-301-01 | Schneider Electric EcoStruxure | 2025-10-14T07:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-287-01 | Rockwell Automation 1715 EtherNet/IP Comms Module | 2025-10-14T06:00:00.000000Z | 2025-10-14T06:00:00.000000Z |
| icsa-25-289-10 | Siemens HyperLynx and Industrial Edge App Publisher | 2025-10-14T00:00:00.000000Z | 2026-01-14T22:05:41.165529Z |
| icsa-25-289-09 | Siemens TeleControl Server Basic | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-08 | Siemens SINEC NMS | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-07 | Siemens SIMATIC ET 200SP Communication Processors | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-06 | Siemens SiPass Integrated | 2025-10-14T00:00:00.000000Z | 2026-02-12T07:00:00.000000Z |
| icsa-25-289-05 | Siemens Solid Edge | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| va-25-282-01 | Newforma Project Center multiple vulnerabilities | 2025-10-09T19:50:00Z | 2025-10-09T19:50:00Z |
| icsa-25-282-03 | Rockwell Automation Stratix | 2025-10-09T06:00:00.000000Z | 2025-10-09T06:00:00.000000Z |
| icsa-25-282-02 | Rockwell Automation Lifecycle Services with Cisco | 2025-10-09T06:00:00.000000Z | 2025-10-09T06:00:00.000000Z |
| va-25-280-01 | OPEXUS FOIAXpress stored XSS | 2025-10-07T22:50:29Z | 2025-10-07T22:50:29Z |
| icsa-25-280-01 | Delta Electronics DIAScreen | 2025-10-07T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-275-01 | Raise3D Pro2 Series 3D Printers** | 2025-10-02T05:00:00.000000Z | 2025-10-02T05:00:00.000000Z |
| icsa-25-289-11 | Hitachi Energy MACH GWS | 2025-09-30T12:50:29.000000Z | 2025-09-30T12:50:29.000000Z |
| icsa-25-275-02 | Hitachi Energy MSM | 2025-09-30T09:02:31.000000Z | 2025-09-30T09:02:31.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ewlc-cdp-dos-fpeks9k | Cisco IOS XE Wireless Controller Software Cisco Discovery Protocol Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-dnac-api-nbpzcjcm | Cisco Catalyst Center Unauthenticated API Access Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-03-26T16:00:00+00:00 |
| cisco-sa-catc-insec-acc-mtt8eheb | Cisco Catalyst Center Insufficient Access Control Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-catalyst-tls-pqnd5kej | Cisco Catalyst SD-WAN Manager Certificate Validation Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-c2960-3560-sboot-ztqadrhq | Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-bootstrap-kfgxygdh | Cisco IOS XE Software Bootstrap Arbitrary File Write Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-asr903-rsp3-arp-dos-wmfzdvjz | Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ARP Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-erlang-otp-ssh-xyzzy | Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang/OTP SSH Server: April 2025 | 2025-04-22T21:45:00+00:00 | 2025-06-11T14:40:37+00:00 |
| cisco-sa-webex-app-client-rce-ufymmylc | Cisco Webex App Client-Side Remote Code Execution Vulnerability | 2025-04-16T16:00:00+00:00 | 2025-04-16T16:00:00+00:00 |
| cisco-sa-sna-prvesc-4bqmk33z | Cisco Secure Network Analytics Privilege Escalation Vulnerability | 2025-04-16T16:00:00+00:00 | 2025-04-16T16:00:00+00:00 |
| cisco-sa-nd-unenum-2xffh472 | Cisco Nexus Dashboard LDAP Username Enumeration Vulnerability | 2025-04-16T16:00:00+00:00 | 2025-04-16T16:00:00+00:00 |
| cisco-sa-meraki-mx-vpn-dos-vnrpdvfb | Cisco Meraki MX and Z Series AnyConnect VPN Denial of Service Vulnerability | 2025-04-02T16:00:00+00:00 | 2025-04-02T16:00:00+00:00 |
| cisco-sa-epnmpi-sxss-gsscpgy4 | Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerabilities | 2025-04-02T16:00:00+00:00 | 2025-04-02T16:00:00+00:00 |
| cisco-sa-ece-dos-tc6m9gz8 | Cisco Enterprise Chat and Email Denial of Service Vulnerability | 2025-04-02T16:00:00+00:00 | 2025-04-02T16:00:00+00:00 |
| cisco-sa-xrike-9wygprgq | Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-xr792-bwfvdpy | Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-sb-lkm-znerzjbz | Cisco IOS XR Software Secure Boot Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ncs-hybridacl-crmzffkq | Cisco IOS XR Software Hybrid Access Control List Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-multicast-ermrsvq7 | Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-modular-acl-u5mepxmm | Cisco IOS XR Software Access Control List Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ipv4uni-lfm3cfbu | Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-iosxr-priv-esc-gfqjxvof | Cisco IOS XR Software CLI Privilege Escalation Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-iosxr-bgp-dos-o7stephx | Cisco IOS XR Software Border Gateway Protocol Confederation Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ios-xr-verii-bypass-hhpwqrvx | Cisco IOS XR Software Image Verification Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-tms-xss-vuln-wbtcywxg | Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability | 2025-03-05T16:00:00+00:00 | 2025-03-05T16:44:57+00:00 |
| cisco-sa-secure-dll-injection-aoyzeqsg | Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability | 2025-03-05T16:00:00+00:00 | 2025-03-05T16:00:00+00:00 |
| cisco-sa-webex-credexp-xmn85y6 | Cisco Webex for BroadWorks Credential Exposure Vulnerability | 2025-03-04T16:00:00+00:00 | 2025-04-01T13:40:00+00:00 |
| cisco-sa-nxos-ici-dpojbwxk | Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| cisco-sa-n3kn9k-healthdos-eoqswk4g | Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| cisco-sa-apic-multi-vulns-9ummtg5 | Cisco Application Policy Infrastructure Controller Vulnerabilities | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-20837 | Windows Media Remote Code Execution Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20836 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20835 | Capability Access Management Service (camsvc) Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20834 | Windows Spoofing Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20833 | Windows Kerberos Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20832 | Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20831 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20830 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-20T08:00:00.000Z |
| msrc_cve-2026-20829 | TPM Trustlet Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20828 | Windows rndismp6.sys Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20827 | Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20826 | Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20825 | Windows Hyper-V Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20824 | Windows Remote Assistance Security Feature Bypass Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20823 | Windows File Explorer Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20822 | Windows Graphics Component Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20821 | Remote Procedure Call Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20820 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20819 | Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20818 | Windows Kernel Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-20T08:00:00.000Z |
| msrc_cve-2026-20817 | Windows Error Reporting Service Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20816 | Windows Installer Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20815 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20814 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20812 | LDAP Tampering Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20811 | Win32k Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20810 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20809 | Windows Kernel Memory Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20808 | Windows File Explorer Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20805 | Desktop Window Manager Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-27T08:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10059-1 | freerdp-3.20.2-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10058-1 | MozillaThunderbird-140.7.0-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:20055-1 | Security update for gimp | 2026-01-16T16:13:02Z | 2026-01-16T16:13:02Z |
| opensuse-su-2026:20046-1 | Security update for MozillaThunderbird | 2026-01-16T12:09:04Z | 2026-01-16T12:09:04Z |
| opensuse-su-2026:10057-1 | chromedriver-144.0.7559.59-1.1 on GA media | 2026-01-16T00:00:00Z | 2026-01-16T00:00:00Z |
| opensuse-su-2026:20056-1 | Security update for cpp-httplib | 2026-01-15T22:11:25Z | 2026-01-15T22:11:25Z |
| opensuse-su-2026:20044-1 | Security update for alloy | 2026-01-15T17:56:17Z | 2026-01-15T17:56:17Z |
| opensuse-su-2026:20043-1 | Security update for erlang | 2026-01-15T17:21:23Z | 2026-01-15T17:21:23Z |
| opensuse-su-2026:20041-1 | Security update for MozillaFirefox | 2026-01-15T16:28:43Z | 2026-01-15T16:28:43Z |
| opensuse-su-2026:20039-1 | Security update for bind | 2026-01-15T10:43:49Z | 2026-01-15T10:43:49Z |
| opensuse-su-2026:10056-1 | libwireshark19-4.6.3-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10055-1 | python311-virtualenv-20.36.1-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10054-1 | php-composer2-2.9.3-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10053-1 | ffmpeg-4-4.4.6-11.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10052-1 | avahi-0.8-41.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10051-1 | NetworkManager-applet-l2tp-1.52.0-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:20038-1 | Security update for wget2 | 2026-01-14T13:23:53Z | 2026-01-14T13:23:53Z |
| opensuse-su-2026:20034-1 | Security update for tomcat | 2026-01-14T13:14:54Z | 2026-01-14T13:14:54Z |
| opensuse-su-2026:20031-1 | Security update for curl | 2026-01-14T11:01:44Z | 2026-01-14T11:01:44Z |
| opensuse-su-2026:20032-1 | Security update for haproxy | 2026-01-14T10:56:00Z | 2026-01-14T10:56:00Z |
| opensuse-su-2026:20030-1 | Security update for apache2 | 2026-01-14T10:49:51Z | 2026-01-14T10:49:51Z |
| opensuse-su-2026:20029-1 | Security update for gpg2 | 2026-01-14T10:23:16Z | 2026-01-14T10:23:16Z |
| opensuse-su-2026:20027-1 | Security update for squid | 2026-01-14T08:39:17Z | 2026-01-14T08:39:17Z |
| opensuse-su-2026:10050-1 | rke2-1.34-1.34.3+rke2r1-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10049-1 | python311-urllib3-2.6.3-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10048-1 | openCryptoki-3.26.0-3.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10047-1 | libcryptopp-devel-8.9.0-6.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10046-1 | MozillaFirefox-147.0-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:20026-1 | Security update for python-uv | 2026-01-13T12:48:04Z | 2026-01-13T12:48:04Z |
| opensuse-su-2026:20025-1 | Security update for hawk2 | 2026-01-13T12:41:42Z | 2026-01-13T12:41:42Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| sevd-2022-130-01 | PowerLogic ION Setup | 2022-05-10T00:00:00.00Z | 2022-05-10T00:00:00.00Z |
| sevd-2022-102-01 | IGSS (Interactive Graphical SCADA System) | 2022-04-12T08:47:25.000Z | 2022-07-12T08:47:25.000Z |
| sevd-2022-102-02 | Modicon M340 Controller and Communication Modules | 2022-04-12T00:00:00.000Z | 2024-10-08T00:00:00.000Z |
| sevd-2022-087-01 | SCADAPack Workbench | 2022-03-28T13:51:11.000Z | 2023-04-11T13:51:11.000Z |
| sevd-2022-067-01 | EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70 | 2022-03-08T18:30:00.000Z | 2022-06-14T18:30:00.000Z |
| sevd-2022-067-03 | Ritto Wiser™ Door | 2022-03-08T10:12:35.000Z | 2022-03-08T10:12:35.000Z |
| sevd-2022-067-02 | APC Smart-UPS SMT, SMC, SMX, SCL, SRC, XU, XP, CSH2, SURTD, SMTL, SRT, and select SRTL Series | 2022-03-08T06:30:00.000Z | 2022-06-16T18:30:00.000Z |
| sevd-2022-039-06 | Harmony/Magelis iPC Series HMI, Vijeo Designer and Vijeo Designer Basic | 2022-02-08T23:25:23.000Z | 2022-02-08T23:25:23.000Z |
| sevd-2022-039-04 | spaceLYnk, Wiser For KNX, fellerLYnk | 2022-02-08T20:32:52.000Z | 2022-03-08T20:32:52.000Z |
| sevd-2022-039-03 | Easergy P40 | 2022-02-08T17:58:55.000Z | 2022-02-08T17:58:55.000Z |
| sevd-2022-039-05 | EcoStruxure Geo SCADA Expert | 2022-02-08T17:33:44.000Z | 2022-02-08T17:33:44.000Z |
| sevd-2022-039-02 | EcoStruxure EV Charging Expert | 2022-02-08T12:36:59.000Z | 2022-02-08T12:36:59.000Z |
| sevd-2022-039-01 | IGSS (Interactive Graphical SCADA System) | 2022-02-08T07:29:58.000Z | 2022-02-08T07:29:58.000Z |
| sevd-2022-011-07 | EcoStruxure™ Power Monitoring Expert | 2022-01-11T13:20:28.000Z | 2022-01-11T13:20:28.000Z |
| sevd-2022-011-05 | ConneXium Tofino Firewall and Loadable Security Modules | 2022-01-11T12:53:54.000Z | 2022-01-11T12:53:54.000Z |
| sevd-2022-011-04 | Easergy P3 | 2022-01-11T11:28:56.000Z | 2022-01-11T11:28:56.000Z |
| sevd-2022-011-03 | Easergy P5 | 2022-01-11T11:05:25.000Z | 2022-03-02T11:05:25.000Z |
| sevd-2022-011-02 | Easergy T300 | 2022-01-11T10:48:02.000Z | 2022-01-11T10:48:02.000Z |
| sevd-2022-011-01 | Ethernet and Web server on Modicon M340 controller and Communication Modules | 2022-01-11T07:53:07.000Z | 2022-01-11T07:53:07.000Z |
| sevd-2022-011-06 | CODESYS V3 Runtime, Development System, and Gateway Vulnerabilities | 2022-01-11T07:08:13.000Z | 2023-04-11T11:30:00.000Z |
| sevd-2021-348-04 | APC by Schneider Electric Rack PDU | 2021-12-14T00:00:00.000Z | 2021-12-21T00:00:00.000Z |
| sevd-2021-348-02 | EVlink City / Parking / Smart Wallbox Charging Stations | 2021-12-14T00:00:00.000Z | 2021-12-14T00:00:00.000Z |
| sevd-2021-348-01 | IGSS (Interactive Graphical SCADA System) | 2021-12-14T00:00:00.000Z | 2021-12-14T00:00:00.000Z |
| sesb-2021-347-01 | Apache Log4j Vulnerabilities (Log4Shell) | 2021-12-13T09:22:58.000Z | 2022-08-09T09:22:58.000Z |
| sevd-2021-313-04 | Windows Print Spooler embedded in EcoStruxure™ Process Expert | 2021-11-09T08:45:48.000Z | 2022-03-08T08:45:48.000Z |
| sevd-2021-313-03 | APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices | 2021-11-09T06:30:00.000Z | 2022-05-10T00:00:00.00Z |
| sevd-2021-313-05 | BadAlloc Vulnerabilities | 2021-11-09T05:00:00.000Z | 2025-09-09T04:00:00.000Z |
| sevd-2021-313-07 | Eurotherm GUIcon | 2021-11-09T00:00:00.000Z | 2021-11-09T00:00:00.000Z |
| sevd-2021-313-02 | Schneider Electric Software Update | 2021-11-09T00:00:00.000Z | 2021-11-09T00:00:00.000Z |
| sevd-2021-313-01 | SCADAPack 300E Series RTU | 2021-11-09T00:00:00.000Z | 2021-11-09T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-php-2025-14177 | Information Leak of Memory in getimagesize | 2026-01-08T11:48:30.537Z | 2026-01-08T12:08:29.041Z |
| bit-libphp-2025-14180 | NULL Pointer Dereference in PDO quoting | 2026-01-08T11:43:29.868Z | 2026-01-08T12:08:29.041Z |
| bit-libphp-2025-14178 | Heap buffer overflow in array_merge() | 2026-01-08T11:43:28.412Z | 2026-01-26T15:09:56.435Z |
| bit-libphp-2025-14177 | Information Leak of Memory in getimagesize | 2026-01-08T11:43:26.820Z | 2026-01-08T12:08:29.041Z |
| bit-discourse-2025-64528 | Users are able to find users by name even when `enable_names` is off | 2026-01-08T11:40:33.666Z | 2026-01-08T18:07:34.629Z |
| bit-composer-2025-67746 | Composer vulnerable to ANSI sequence injection | 2026-01-08T11:35:54.533Z | 2026-01-08T12:08:29.041Z |
| bit-gitea-2025-69413 | 2026-01-07T12:00:07.972Z | 2026-01-07T12:31:01.344Z | |
| bit-pytorch-2025-63396 | 2026-01-03T11:47:28.014Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68942 | 2026-01-03T11:37:48.385Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68941 | 2026-01-03T11:37:46.756Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68940 | 2026-01-03T11:37:45.335Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68939 | 2026-01-03T11:37:43.934Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68938 | 2026-01-03T11:37:42.629Z | 2026-01-03T12:07:32.193Z | |
| bit-pebble-2024-3250 | 2026-01-02T17:44:20.392Z | 2026-01-02T18:06:33.396Z | |
| bit-gitea-2025-68946 | 2026-01-01T11:37:50.117Z | 2026-01-01T12:06:33.381Z | |
| bit-gitea-2025-68945 | 2026-01-01T11:37:48.522Z | 2026-01-01T12:06:33.381Z | |
| bit-gitea-2025-68944 | 2026-01-01T11:37:47.146Z | 2026-01-01T12:06:33.381Z | |
| bit-gitea-2025-68943 | 2026-01-01T11:37:45.731Z | 2026-01-01T12:06:33.381Z | |
| bit-nifi-2025-66524 | Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor | 2025-12-23T11:44:08.985Z | 2025-12-23T12:07:14.245Z |
| bit-kibana-2025-68422 | Kibana Improper Authorization | 2025-12-20T11:39:27.247Z | 2025-12-20T12:06:39.262Z |
| bit-kibana-2025-68389 | Kibana Allocation of Resources Without Limits or Throttling | 2025-12-20T11:39:25.644Z | 2025-12-20T12:06:39.262Z |
| bit-kibana-2025-68387 | Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2025-12-20T11:39:24.143Z | 2025-12-20T12:06:39.262Z |
| bit-kibana-2025-68386 | Kibana Improper Authorization | 2025-12-20T11:39:22.798Z | 2025-12-20T12:06:39.262Z |
| bit-kibana-2025-68385 | Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2025-12-20T11:39:21.164Z | 2025-12-24T12:08:49.467Z |
| bit-haproxy-2025-11230 | Denial of service vulnerability in HAProxy mjson library | 2025-12-20T11:38:08.173Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68422 | Kibana Improper Authorization | 2025-12-20T11:36:41.895Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68389 | Kibana Allocation of Resources Without Limits or Throttling | 2025-12-20T11:36:40.368Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68387 | Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2025-12-20T11:36:38.841Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68386 | Kibana Improper Authorization | 2025-12-20T11:36:37.419Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68385 | Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2025-12-20T11:36:36.041Z | 2025-12-24T12:08:49.467Z |
| ID | Description | Updated |
|---|---|---|
| var-201404-0378 | Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1… | 2024-07-23T22:08:28.541000Z |
| var-201908-0264 | Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a den… | 2024-07-23T22:07:30.228000Z |
| var-201702-0469 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari be… | 2024-07-23T22:06:53.547000Z |
| var-200703-0016 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… | 2024-07-23T22:06:48.011000Z |
| var-201609-0595 | The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly … | 2024-07-23T22:06:46.651000Z |
| var-202004-1974 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-07-23T22:06:44.403000Z |
| var-201705-3790 | In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod Ope… | 2024-07-23T22:06:43.841000Z |
| var-202109-1802 | A crafted request uri-path can cause mod_proxy to forward the request to an origin server… | 2024-07-23T22:06:13.520000Z |
| var-202110-1622 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T22:06:10.313000Z |
| var-200905-0043 | Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, … | 2024-07-23T22:06:10.145000Z |
| var-202203-0129 | A cookie management issue was addressed with improved state management. This issue is fix… | 2024-07-23T22:06:09.291000Z |
| var-200210-0102 | Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a deni… | 2024-07-23T22:06:08.093000Z |
| var-202009-0037 | A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP… | 2024-07-23T22:06:07.991000Z |
| var-201912-0619 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:06:04.230000Z |
| var-200809-0566 | Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2… | 2024-07-23T22:06:03.293000Z |
| var-202201-0424 | A validation issue was addressed with improved input sanitization. This issue is fixed in… | 2024-07-23T22:06:01.833000Z |
| var-200604-0201 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary c… | 2024-07-23T22:05:29.066000Z |
| var-201201-0025 | Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers … | 2024-07-23T22:05:28.758000Z |
| var-201808-0957 | Systems with microprocessors utilizing speculative execution and address translations may… | 2024-07-23T22:05:21.889000Z |
| var-202203-1400 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of servic… | 2024-07-23T22:05:19.247000Z |
| var-201912-0640 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:05:19.907000Z |
| var-201904-1343 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:05:19.745000Z |
| var-201007-0949 | WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… | 2024-07-23T22:05:19.065000Z |
| var-201912-1856 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:04:56.028000Z |
| var-200904-0821 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products… | 2024-07-23T22:04:56.133000Z |
| var-200603-0282 | Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 1… | 2024-07-23T22:04:24.723000Z |
| var-201912-0509 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:03:53.293000Z |
| var-200806-0575 | SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and … | 2024-07-23T22:03:53.151000Z |
| var-200703-0024 | Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins… | 2024-07-23T22:03:53.866000Z |
| var-202005-1054 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by d… | 2024-07-23T22:03:49.580000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000038 | UpdateNavi vulnerable to improper restriction of communication channel to intended endpoints | 2025-06-12T15:56+09:00 | 2025-06-12T15:56+09:00 |
| jvndb-2025-000037 | Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery | 2025-06-06T13:56+09:00 | 2025-06-06T13:56+09:00 |
| jvndb-2025-000036 | TimeWorks vulnerable to path traversal | 2025-06-03T15:35+09:00 | 2025-06-03T15:35+09:00 |
| jvndb-2025-000035 | Improper file access permission settings in PC Time Tracer | 2025-06-03T14:40+09:00 | 2025-06-03T14:40+09:00 |
| jvndb-2025-000034 | Multiple vulnerabilities in wivia 5 | 2025-05-30T15:57+09:00 | 2025-05-30T15:57+09:00 |
| jvndb-2025-000032 | Mailform Pro CGI generating error messages containing sensitive information | 2025-05-26T14:22+09:00 | 2025-05-26T14:22+09:00 |
| jvndb-2025-000033 | Improper pattern file validation in i-FILTER optional feature 'Anti-Virus & Sandbox' | 2025-05-23T15:36+09:00 | 2025-05-23T15:36+09:00 |
| jvndb-2025-005467 | Passback vulnerabilities in Canon Production Printers, Office/Small Office Multifunction Printers, and Laser Printers | 2025-05-22T15:03+09:00 | 2025-05-22T15:03+09:00 |
| jvndb-2025-005107 | Multiple vulnerabilities in V-SFT | 2025-05-16T14:32+09:00 | 2025-05-16T14:32+09:00 |
| jvndb-2025-005057 | Multiple vulnerabilities in I-O DATA network attached hard disk 'HDL-T Series' | 2025-05-15T18:27+09:00 | 2025-05-15T18:27+09:00 |
| jvndb-2025-005050 | Multiple vulnerabilities in a-blog cms | 2025-05-15T18:11+09:00 | 2025-05-15T18:11+09:00 |
| jvndb-2025-000031 | Pgpool-II vulnerable to authentication bypass by primary weakness | 2025-05-15T16:14+09:00 | 2025-05-15T16:14+09:00 |
| jvndb-2025-004863 | Panasonic IR Control Hub vulnerable to Unauthorised firmware loading | 2025-05-14T11:30+09:00 | 2025-05-14T11:30+09:00 |
| jvndb-2025-000030 | Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2025-05-12T18:00+09:00 | 2025-07-17T10:06+09:00 |
| jvndb-2025-004671 | Multiple vulnerabilities in GL-MT2500 and GL-MT2500A | 2025-05-12T17:52+09:00 | 2025-05-12T17:52+09:00 |
| jvndb-2025-004079 | Improper access permission settings in multiple SEIKO EPSON printer drivers for Windows OS | 2025-04-30T11:46+09:00 | 2025-04-30T11:46+09:00 |
| jvndb-2025-004076 | Security Update for Trend Micro Trend Vision One (April 2025) | 2025-04-30T10:38+09:00 | 2025-04-30T10:38+09:00 |
| jvndb-2025-000029 | Multiple vulnerabilities in Quick Agent | 2025-04-25T13:49+09:00 | 2025-04-25T13:49+09:00 |
| jvndb-2025-000028 | i-PRO Configuration Tool vulnerable to use of hard-coded cryptographic key | 2025-04-24T13:50+09:00 | 2025-04-24T13:50+09:00 |
| jvndb-2025-000027 | Active! mail vulnerable to stack-based buffer overflow | 2025-04-18T16:50+09:00 | 2025-04-18T16:50+09:00 |
| jvndb-2025-003213 | TP-Link Deco BE65 Pro vulnerable to OS command injection | 2025-04-11T13:52+09:00 | 2025-04-11T13:52+09:00 |
| jvndb-2025-000026 | Multiple vulnerabilities in BizRobo! | 2025-04-10T15:36+09:00 | 2025-04-10T15:36+09:00 |
| jvndb-2025-003091 | Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (April 2025) | 2025-04-09T14:55+09:00 | 2025-04-09T14:55+09:00 |
| jvndb-2025-002990 | Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT 'AC-WPS-11ac series' | 2025-04-07T17:44+09:00 | 2025-04-07T17:44+09:00 |
| jvndb-2025-000025 | WinRAR vulnerable to the symbolic link based "Mark of the Web" check bypass | 2025-04-03T12:29+09:00 | 2025-04-03T12:29+09:00 |
| jvndb-2025-000022 | Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products | 2025-04-02T15:12+09:00 | 2025-04-02T15:12+09:00 |
| jvndb-2025-002790 | Out-of-bounds Write vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers | 2025-04-02T15:05+09:00 | 2025-04-02T15:05+09:00 |
| jvndb-2025-000023 | WordPress plugin "Welcart e-Commerce" vulnerable to untrusted data deserialization | 2025-04-01T14:20+09:00 | 2025-04-01T14:20+09:00 |
| jvndb-2025-002714 | Improper symbolic link file handling in FutureNet NXR series, VXR series and WXR series routers | 2025-03-31T16:59+09:00 | 2025-04-03T15:19+09:00 |
| jvndb-2025-000024 | a-blog cms vulnerable to untrusted data deserialization | 2025-03-28T10:46+09:00 | 2025-03-28T10:46+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0247-1 | Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7) | 2026-01-22T15:22:22Z | 2026-01-22T15:22:22Z |
| suse-su-2026:0246-1 | Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5) | 2026-01-22T15:19:55Z | 2026-01-22T15:19:55Z |
| suse-su-2026:0245-1 | Security update for php7 | 2026-01-22T15:18:06Z | 2026-01-22T15:18:06Z |
| suse-su-2026:20156-1 | Security update for gdk-pixbuf | 2026-01-22T14:36:50Z | 2026-01-22T14:36:50Z |
| suse-su-2026:20128-1 | Security update for gdk-pixbuf | 2026-01-22T14:36:50Z | 2026-01-22T14:36:50Z |
| suse-su-2026:20155-1 | Security update for libpng16 | 2026-01-22T14:31:16Z | 2026-01-22T14:31:16Z |
| suse-su-2026:20127-1 | Security update for libpng16 | 2026-01-22T14:31:16Z | 2026-01-22T14:31:16Z |
| suse-su-2026:20154-1 | Security update for python313 | 2026-01-22T14:12:33Z | 2026-01-22T14:12:33Z |
| suse-su-2026:20126-1 | Security update for rabbitmq-server | 2026-01-22T14:12:33Z | 2026-01-22T14:12:33Z |
| suse-su-2026:20125-1 | Security update for python313 | 2026-01-22T14:12:33Z | 2026-01-22T14:12:33Z |
| suse-su-2026:0243-1 | Security update for librsvg | 2026-01-22T13:57:37Z | 2026-01-22T13:57:37Z |
| suse-su-2026:20123-1 | Security update for buildah | 2026-01-22T13:01:23Z | 2026-01-22T13:01:23Z |
| suse-su-2026:20122-1 | Security update for go1.24 | 2026-01-22T12:53:24Z | 2026-01-22T12:53:24Z |
| suse-su-2026:0238-1 | Security update for dpdk | 2026-01-22T12:26:26Z | 2026-01-22T12:26:26Z |
| suse-su-2026:0237-1 | Security update for wireshark | 2026-01-22T12:26:09Z | 2026-01-22T12:26:09Z |
| suse-su-2026:0236-1 | Security update for busybox | 2026-01-22T12:25:35Z | 2026-01-22T12:25:35Z |
| suse-su-2026:0235-1 | Security update for busybox | 2026-01-22T12:25:06Z | 2026-01-22T12:25:06Z |
| suse-su-2026:0234-1 | Security update for libpng16 | 2026-01-22T12:24:45Z | 2026-01-22T12:24:45Z |
| suse-su-2026:0233-1 | Security update for python-virtualenv | 2026-01-22T12:24:32Z | 2026-01-22T12:24:32Z |
| suse-su-2026:0232-1 | Security update for pgadmin4 | 2026-01-22T12:24:10Z | 2026-01-22T12:24:10Z |
| suse-su-2026:0231-1 | Security update for exiv2-0_26 | 2026-01-22T12:22:53Z | 2026-01-22T12:22:53Z |
| suse-su-2026:0230-1 | Security update for util-linux | 2026-01-22T12:22:40Z | 2026-01-22T12:22:40Z |
| suse-su-2026:0229-1 | Security update for ffmpeg-4 | 2026-01-22T12:22:22Z | 2026-01-22T12:22:22Z |
| suse-su-2026:0228-1 | Security update for net-snmp | 2026-01-22T12:21:52Z | 2026-01-22T12:21:52Z |
| suse-su-2026:0227-1 | Security update for net-snmp | 2026-01-22T12:21:35Z | 2026-01-22T12:21:35Z |
| suse-su-2026:0226-1 | Security update for python-marshmallow | 2026-01-22T12:20:21Z | 2026-01-22T12:20:21Z |
| suse-su-2026:0225-1 | Security update for net-snmp | 2026-01-22T12:19:54Z | 2026-01-22T12:19:54Z |
| suse-su-2026:0224-1 | Security update for libtasn1 | 2026-01-22T12:18:33Z | 2026-01-22T12:18:33Z |
| suse-su-2026:0223-1 | Security update for libsodium | 2026-01-22T12:18:02Z | 2026-01-22T12:18:02Z |
| suse-su-2026:0222-1 | Security update for python-tornado | 2026-01-22T12:16:49Z | 2026-01-22T12:16:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-05358 | ChurchCRM代码执行漏洞(CNVD-2026-0535893) | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05357 | ChurchCRM 事件参与者编辑器SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05356 | ChurchCRM访问控制错误漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05355 | ChurchCRM代码执行漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05354 | ChurchCRM跨站脚本漏洞(CNVD-2026-0535400) | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05353 | ChurchCRM跨站脚本漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05352 | ChurchCRM UserEditor.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05351 | ChurchCRM ListEvents.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05350 | ChurchCRM GroupEditor.php页面跨站脚本漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05349 | ChurchCRM eGive.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05348 | ChurchCRM CartToFamily.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05344 | RiteCMS存在未明漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05343 | RiteCMS文件包含漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05342 | RiteCMS访问控制不当漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05341 | RiteCMS跨站请求伪造漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05340 | RiteCMS跨站脚本漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05339 | RiteCMS代码执行漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05332 | Complete Online Beauty Parlor Management System /bwdates-reports-details.php文件跨站脚本漏洞 | 2025-12-25 | 2026-01-21 |
| cnvd-2026-05331 | Complete Online Beauty Parlor Management System /search-invoices.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-21 |
| cnvd-2026-05330 | Complete Online Beauty Parlor Management System /view-appointment.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-21 |
| cnvd-2026-05130 | Kentico Xperience信息泄露漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05129 | Kentico Xperience文件上传漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05128 | Kentico Xperience HTML注入漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05127 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05127) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05126 | Kentico Xperience富文本编辑器组件跨站脚本漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05125 | Kentico Xperience电子邮件营销模板跨站脚本漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05124 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05124) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05123 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05123) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05122 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05122) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05121 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05121) | 2025-12-25 | 2026-01-20 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0021 | Vulnérabilité dans Microsoft Edge | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0020 | Multiples vulnérabilités dans les produits IBM | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0018 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0017 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0016 | Vulnérabilité dans les produits Moxa | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0022 | Multiples vulnérabilités dans les produits Microsoft | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0021 | Vulnérabilité dans Microsoft Edge | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0020 | Multiples vulnérabilités dans les produits IBM | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0018 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0017 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0016 | Vulnérabilité dans les produits Moxa | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0015 | Multiples vulnérabilités dans les produits Centreon | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0014 | Multiples vulnérabilités dans GitLab | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0013 | Vulnérabilité dans Tenable Nessus Agent | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0012 | Multiples vulnérabilités dans Trend Micro Apex Central | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0011 | Vulnérabilité dans Google Android | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0015 | Multiples vulnérabilités dans les produits Centreon | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0014 | Multiples vulnérabilités dans GitLab | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0013 | Vulnérabilité dans Tenable Nessus Agent | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0012 | Multiples vulnérabilités dans Trend Micro Apex Central | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0011 | Vulnérabilité dans Google Android | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0010 | Multiples vulnérabilités dans Curl | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0009 | Vulnérabilité dans Google Chrome | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0008 | Multiples vulnérabilités dans Joomla! | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| CERTFR-2026-AVI-0010 | Multiples vulnérabilités dans Curl | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| CERTFR-2026-AVI-0009 | Vulnérabilité dans Google Chrome | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| CERTFR-2026-AVI-0008 | Multiples vulnérabilités dans Joomla! | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0007 | Vulnérabilité dans Stormshield Network Security | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2021-ALE-005 | Multiples vulnérabilités dans Microsoft DNS server | 2021-03-12T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-004 | [MàJ] Multiples vulnérabilités dans Microsoft Exchange Server | 2021-03-03T00:00:00.000000 | 2021-07-16T00:00:00.000000 |
| CERTFR-2021-ALE-004 | [MàJ] Multiples vulnérabilités dans Microsoft Exchange Server | 2021-03-03T00:00:00.000000 | 2021-07-16T00:00:00.000000 |
| certfr-2021-ale-003 | [MàJ] Vulnérabilité dans VMware vCenter Server | 2021-02-25T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| CERTFR-2021-ALE-003 | [MàJ] Vulnérabilité dans VMware vCenter Server | 2021-02-25T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-002 | [MàJ] Vulnérabilité dans Google Chrome et Microsoft Edge | 2021-02-05T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| CERTFR-2021-ALE-002 | [MàJ] Vulnérabilité dans Google Chrome et Microsoft Edge | 2021-02-05T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2021-ale-001 | |MàJ] Vulnérabilité dans SonicWall SMA100 | 2021-02-02T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| CERTFR-2021-ALE-001 | |MàJ] Vulnérabilité dans SonicWall SMA100 | 2021-02-02T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2020-ale-026 | [MaJ] Présence de code malveillant dans SolarWinds Orion | 2020-12-14T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| CERTFR-2020-ALE-026 | [MaJ] Présence de code malveillant dans SolarWinds Orion | 2020-12-14T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| certfr-2020-ale-025 | Vulnérabilité dans Fortinet FortiOS SSL-VPN | 2020-11-27T00:00:00.000000 | 2021-02-08T00:00:00.000000 |
| CERTFR-2020-ALE-025 | Vulnérabilité dans Fortinet FortiOS SSL-VPN | 2020-11-27T00:00:00.000000 | 2021-02-08T00:00:00.000000 |
| certfr-2020-ale-024 | [MaJ] Vulnérabilité dans les produits VMware | 2020-11-24T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| CERTFR-2020-ALE-024 | [MaJ] Vulnérabilité dans les produits VMware | 2020-11-24T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| certfr-2020-ale-023 | Multiples vulnérabilités dans Google Chrome | 2020-11-12T00:00:00.000000 | 2020-12-04T00:00:00.000000 |
| CERTFR-2020-ALE-023 | Multiples vulnérabilités dans Google Chrome | 2020-11-12T00:00:00.000000 | 2020-12-04T00:00:00.000000 |
| certfr-2020-ale-022 | [MàJ] Vulnérabilité dans Oracle Weblogic | 2020-10-30T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| CERTFR-2020-ALE-022 | [MàJ] Vulnérabilité dans Oracle Weblogic | 2020-10-30T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| certfr-2020-ale-021 | Vulnérabilité dans Samba | 2020-09-18T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| CERTFR-2020-ALE-021 | Vulnérabilité dans Samba | 2020-09-18T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2020-ale-020 | [MàJ] Vulnérabilité dans Microsoft Netlogon | 2020-09-15T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| CERTFR-2020-ALE-020 | [MàJ] Vulnérabilité dans Microsoft Netlogon | 2020-09-15T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2020-ale-019 | Recrudescence d'activité Emotet en France | 2020-09-07T00:00:00.000000 | 2021-02-09T00:00:00.000000 |
| CERTFR-2020-ALE-019 | Recrudescence d'activité Emotet en France | 2020-09-07T00:00:00.000000 | 2021-02-09T00:00:00.000000 |
| certfr-2020-ale-018 | Vulnérabilité dans Cisco ASA et FTD | 2020-07-28T00:00:00.000000 | 2020-11-05T00:00:00.000000 |
| CERTFR-2020-ALE-018 | Vulnérabilité dans Cisco ASA et FTD | 2020-07-28T00:00:00.000000 | 2020-11-05T00:00:00.000000 |
| certfr-2020-ale-017 | Multiples vulnérabilités dans SAP Netweaver AS JAVA | 2020-07-15T00:00:00.000000 | 2020-10-12T00:00:00.000000 |
| certfr-2020-ale-016 | Vulnérabilité dans Microsoft Domain Name System (DNS) Server | 2020-07-15T00:00:00.000000 | 2020-10-12T00:00:00.000000 |
| CERTFR-2020-ALE-017 | Multiples vulnérabilités dans SAP Netweaver AS JAVA | 2020-07-15T00:00:00.000000 | 2020-10-12T00:00:00.000000 |