Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-x4qj-2f4q-r4rx | Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format | 2025-11-05T19:52:27Z | 2025-11-07T20:31:43Z |
| ghsa-2qfp-q593-8484 | Scrapy with Brotli is vulnerable to a denial of service (DoS) attack due to decompression | 2025-10-31T00:30:35Z | 2025-11-07T19:11:50Z |
| ghsa-46xp-26xh-hpqh | KubeVirt Vulnerable to Arbitrary Host File Read and Write | 2025-11-07T18:46:09Z | 2025-11-07T18:46:09Z |
| ghsa-x34q-4vc5-pwfp | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE … | 2025-11-07T18:30:30Z | 2025-11-07T18:30:31Z |
| ghsa-w24c-cvfw-wmxx | Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0 allows remote… | 2025-11-07T18:30:31Z | 2025-11-07T18:30:31Z |
| ghsa-rhj9-2v59-8ccx | The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attac… | 2025-11-07T18:30:31Z | 2025-11-07T18:30:31Z |
| ghsa-ggfg-472r-q46h | Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attacker… | 2025-11-07T18:30:31Z | 2025-11-07T18:30:31Z |
| ghsa-g79x-4qm3-4xp7 | A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknow… | 2025-11-07T18:30:31Z | 2025-11-07T18:30:31Z |
| ghsa-745r-657p-6h6w | A SQL injection vulnerability exists in the SourceCodester PQMS (Patient Queue Management System) 1… | 2025-11-07T18:30:31Z | 2025-11-07T18:30:31Z |
| ghsa-49f9-rcrj-v5wp | A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory C… | 2025-11-07T18:30:31Z | 2025-11-07T18:30:31Z |
| ghsa-rmvm-jpvw-wv6p | A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The rem… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-r4cg-5xmx-26h7 | An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-pqvw-whxm-qq5j | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gain… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-p9v7-8x2v-h926 | A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, … | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-mrvf-43v7-86fr | Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authenticat… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-g6vp-qx8j-gqr4 | A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remot… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-f2mq-8pqx-fqh5 | A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the text editor feature of the Onloo… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-cc6p-pmxf-h4wh | A relative path traversal vulnerability has been reported to affect Download Station. If a remote a… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-9m86-pmxw-268g | A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-662x-h9f2-q6cg | A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutatio… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-4wvp-cwq3-wg7g | There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-3xhw-hf92-cgv2 | Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-2qv6-8qcf-2852 | An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in fi… | 2025-11-07T18:30:30Z | 2025-11-07T18:30:30Z |
| ghsa-xxj3-2v78-2rpq | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote at… | 2025-11-07T18:30:29Z | 2025-11-07T18:30:29Z |
| ghsa-rxrq-fx2p-jjc3 | A NULL pointer dereference vulnerability has been reported to affect several product versions. If a… | 2025-11-07T18:30:29Z | 2025-11-07T18:30:29Z |
| ghsa-rp6p-wfxv-r42f | A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a re… | 2025-11-07T18:30:29Z | 2025-11-07T18:30:29Z |
| ghsa-qgw9-46r7-vc44 | A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote at… | 2025-11-07T18:30:29Z | 2025-11-07T18:30:29Z |
| ghsa-pm6h-6rwh-xxg7 | An allocation of resources without limits or throttling vulnerability has been reported to affect F… | 2025-11-07T18:30:29Z | 2025-11-07T18:30:29Z |
| ghsa-pgj4-857c-6p22 | An allocation of resources without limits or throttling vulnerability has been reported to affect F… | 2025-11-07T18:30:29Z | 2025-11-07T18:30:29Z |
| ghsa-m3r6-m7vf-qggf | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote at… | 2025-11-07T18:30:29Z | 2025-11-07T18:30:29Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-11448 | Gallery Plugin for WordPress – Envira Photo Gallery <=… |
smub |
Gallery Plugin for WordPress – Envira Photo Gallery |
2025-11-08T09:28:11.104Z | 2025-11-08T09:28:11.104Z | |
| cve-2025-12837 | aThemes Addons for Elementor <= 1.1.5 - Authenticated … |
smub |
aThemes Addons for Elementor |
2025-11-08T09:28:10.706Z | 2025-11-08T09:28:10.706Z | |
| cve-2025-12643 | Saphali LiqPay for donate <= 1.0.2 - Authenticated (Co… |
saphali |
Saphali LiqPay for donate |
2025-11-08T09:28:10.300Z | 2025-11-08T09:28:10.300Z | |
| cve-2025-11980 | Quick Featured Images <= 13.7.3 - Authenticated (Edito… |
kybernetikservices |
Quick Featured Images |
2025-11-08T09:28:09.878Z | 2025-11-08T09:28:09.878Z | |
| cve-2025-12092 | CYAN Backup <= 2.5.4 - Authenticated (Admin+) Arbitrar… |
gregross |
CYAN Backup |
2025-11-08T09:28:09.323Z | 2025-11-08T09:28:09.323Z | |
| cve-2024-8612 | 3.8 (v3.1) | Qemu-kvm: information leak in virtio devices |
|
|
2024-09-20T17:50:21.635Z | 2025-11-08T08:56:18.036Z |
| cve-2024-8354 | 5.5 (v3.1) | Qemu-kvm: usb: assertion failure in usb_ep_get() |
|
|
2024-09-19T10:45:06.191Z | 2025-11-08T08:56:17.010Z |
| cve-2023-5215 | 5.3 (v3.1) | Libnbd: crash or misbehaviour when nbd server returns … |
Red Hat |
Red Hat Enterprise Linux 9 |
2023-09-28T13:55:32.462Z | 2025-11-08T08:55:24.112Z |
| cve-2025-12098 | Academy LMS Pro <= 3.3.8 - Unauthenticated Sensitive I… |
academylms |
Academy LMS Pro |
2025-11-08T08:27:42.051Z | 2025-11-08T08:27:42.051Z | |
| cve-2025-12099 | Academy LMS – WordPress LMS Plugin for Complete eLearn… |
academylms |
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution |
2025-11-08T08:27:41.410Z | 2025-11-08T08:27:41.410Z | |
| cve-2024-1441 | 5.5 (v3.1) | Libvirt: off-by-one error in udevlistinterfacesbystatus() |
|
|
2024-03-11T13:37:54.724Z | 2025-11-08T08:05:37.056Z |
| cve-2023-39417 | 7.5 (v3.1) | Postgresql: extension script @substitutions@ within qu… |
Red Hat |
Red Hat Advanced Cluster Security 4.2 |
2023-08-11T12:19:15.108Z | 2025-11-08T08:05:25.592Z |
| cve-2025-12621 | Flexible Refund and Return Order for WooCommerce <= 1.… |
wpdesk |
Flexible Refund and Return Order for WooCommerce |
2025-11-08T07:26:28.151Z | 2025-11-08T07:26:28.151Z | |
| cve-2025-47712 | 4.3 (v3.1) | Nbd: nbdkit: integer overflow triggers an assertion re… |
|
|
2025-06-09T05:58:41.198Z | 2025-11-08T07:16:28.855Z |
| cve-2025-47711 | 4.3 (v3.1) | Nbdkit: nbdkit-server: off-by-one error when processin… |
|
|
2025-06-09T06:03:47.063Z | 2025-11-08T07:16:25.135Z |
| cve-2024-52337 | 5.5 (v3.1) | Tuned: improper sanitization of `instance_name` parame… |
|
|
2024-11-26T15:21:17.538Z | 2025-11-08T07:14:22.907Z |
| cve-2024-8235 | 6.2 (v3.1) | Libvirt: crash of virtinterfaced via virconnectlistint… |
|
|
2024-08-30T16:16:57.214Z | 2025-11-08T07:13:57.335Z |
| cve-2024-7383 | 7.4 (v3.1) | Libnbd: nbd server improper certificate validation |
|
|
2024-08-05T13:19:13.933Z | 2025-11-08T07:13:53.292Z |
| cve-2024-6505 | 6.8 (v3.1) | Qemu-kvm: virtio-net: queue index out-of-bounds access… |
|
|
2024-07-05T13:51:38.241Z | 2025-11-08T07:13:50.565Z |
| cve-2024-4418 | 6.2 (v3.1) | Libvirt: stack use-after-free in virnetclientioeventloop() |
|
|
2024-05-08T03:03:05.135Z | 2025-11-08T07:13:49.167Z |
| cve-2024-4693 | 5.5 (v3.1) | Qemu-kvm: virtio-pci: improper release of configure ve… |
|
|
2024-05-10T12:57:41.445Z | 2025-11-08T07:13:46.427Z |
| cve-2024-10306 | 5.4 (v3.1) | Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp… |
|
|
2025-04-23T09:59:49.150Z | 2025-11-08T07:11:48.337Z |
| cve-2024-2182 | 6.5 (v3.1) | Ovn: insufficient validation of bfd packets may lead t… |
|
|
2024-03-12T16:18:31.829Z | 2025-11-08T07:11:46.026Z |
| cve-2023-42755 | 6.5 (v3.1) | Kernel: rsvp: out-of-bounds read in rsvp_classify() |
Red Hat |
Red Hat Enterprise Linux 8 |
2023-10-05T18:25:23.117Z | 2025-11-08T07:10:59.010Z |
| cve-2023-39192 | 6.7 (v3.1) | Kernel: netfilter: xtables out-of-bounds read in u32_m… |
Red Hat |
Red Hat Enterprise Linux 8 |
2023-10-09T17:57:48.959Z | 2025-11-08T07:10:41.834Z |
| cve-2023-6841 | 7.5 (v3.1) | Keycloak: amount of attributes per object is not limit… |
|
|
2024-09-10T16:15:32.639Z | 2025-11-08T07:10:39.283Z |
| cve-2023-6683 | 6.5 (v3.1) | Qemu: vnc: null pointer dereference in qemu_clipboard_… |
Red Hat |
Red Hat Enterprise Linux 8 |
2024-01-12T19:01:25.542Z | 2025-11-08T07:10:34.148Z |
| cve-2023-6610 | 7.1 (v3.1) | Kernel: oob access in smb2_dump_detail |
Red Hat |
Red Hat Enterprise Linux 8 |
2023-12-08T16:58:09.963Z | 2025-11-08T07:10:28.228Z |
| cve-2023-6606 | 7.1 (v3.1) | Kernel: out-of-bounds read vulnerability in smbcalcsize |
Red Hat |
Red Hat Enterprise Linux 8 |
2023-12-08T16:58:08.746Z | 2025-11-08T07:10:24.326Z |
| cve-2023-6240 | 6.5 (v3.1) | Kernel: marvin vulnerability side-channel leakage in t… |
Red Hat |
Red Hat Enterprise Linux 8 |
2024-02-04T14:11:17.824Z | 2025-11-08T07:10:21.775Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2019-16759 | N/A | vBulletin 5.x through 5.5.4 allows remote command… |
n/a |
n/a |
2019-09-24T21:01:49.000Z | 2025-10-21T23:45:30.090Z |
| cve-2019-16920 | N/A | Unauthenticated remote code execution occurs in D… |
n/a |
n/a |
2019-09-27T11:34:12.000Z | 2025-10-21T23:45:29.886Z |
| cve-2019-16928 | N/A | Exim 4.92 through 4.92.2 allows remote code execu… |
n/a |
n/a |
2019-09-27T20:07:12.000Z | 2025-10-21T23:45:29.725Z |
| cve-2019-17621 | N/A | The UPnP endpoint URL /gena.cgi in the D-Link DIR… |
n/a |
n/a |
2019-12-30T16:09:17.000Z | 2025-10-21T23:35:54.315Z |
| cve-2019-18935 | N/A | Progress Telerik UI for ASP.NET AJAX through 2019… |
n/a |
n/a |
2019-12-11T00:00:00.000Z | 2025-10-21T23:35:56.289Z |
| cve-2019-18988 | N/A | TeamViewer Desktop through 14.7.1965 allows a byp… |
n/a |
n/a |
2020-02-07T15:09:36.000Z | 2025-10-21T23:35:52.116Z |
| cve-2019-19356 | N/A | Netis WF2419 is vulnerable to authenticated Remot… |
n/a |
n/a |
2020-02-07T22:49:07.000Z | 2025-10-21T23:35:51.944Z |
| cve-2019-19781 | N/A | An issue was discovered in Citrix Application Del… |
n/a |
n/a |
2019-12-27T13:06:46.000Z | 2025-10-21T23:35:54.648Z |
| cve-2019-20085 | N/A | TVT NVMS-1000 devices allow GET /.. Directory Traversal |
n/a |
n/a |
2019-12-30T02:28:29.000Z | 2025-10-21T23:35:54.497Z |
| cve-2019-20500 | N/A | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an … |
n/a |
n/a |
2020-03-05T14:37:00.000Z | 2025-10-21T23:35:50.043Z |
| cve-2019-6340 | N/A | Drupal core - Highly critical - Remote Code Execution |
Drupal |
Drupal Core |
2019-02-21T21:00:00.000Z | 2025-10-21T23:45:43.200Z |
| cve-2019-7609 | N/A | Kibana versions before 5.6.15 and 6.6.1 contain a… |
Elastic |
Kibana |
2019-03-25T00:00:00.000Z | 2025-10-21T23:45:41.577Z |
| cve-2019-8394 | N/A | Zoho ManageEngine ServiceDesk Plus (SDP) before 1… |
n/a |
n/a |
2019-02-17T04:00:00.000Z | 2025-10-21T23:45:43.349Z |
| cve-2019-9082 | N/A | ThinkPHP before 3.2.4, as used in Open Source BMS… |
n/a |
n/a |
2019-02-24T18:00:00.000Z | 2025-10-21T23:45:43.026Z |
| cve-2025-7626 | YiJiuSmile kkFileViewOfficeEdit onlinePreview path traversal |
YiJiuSmile |
kkFileViewOfficeEdit |
2025-07-14T17:02:05.706Z | 2025-07-14T17:26:17.208Z | |
| cve-2019-9874 | N/A | Deserialization of Untrusted Data in the Sitecore… |
n/a |
n/a |
2019-05-31T20:11:49.000Z | 2025-10-21T23:45:35.994Z |
| cve-2019-9875 | N/A | Deserialization of Untrusted Data in the anti CSR… |
n/a |
n/a |
2019-05-31T20:34:46.000Z | 2025-10-21T23:45:35.858Z |
| cve-2022-49801 | N/A | tracing: Fix memory leak in tracing_read_pipe() |
Linux |
Linux |
2025-05-01T14:09:29.682Z | 2025-05-04T12:45:13.899Z |
| cve-2019-9978 | N/A | The social-warfare plugin before 3.5.3 for WordPr… |
n/a |
n/a |
2019-03-24T14:47:26.000Z | 2025-10-21T23:45:41.750Z |
| cve-2020-10181 | N/A | goform/formEMR30 in Sumavision Enhanced Multimedi… |
n/a |
n/a |
2020-03-11T15:26:04.000Z | 2025-10-21T23:35:48.929Z |
| cve-2020-10189 | Zoho ManageEngine Desktop Central before 10.0.474… |
n/a |
n/a |
2020-03-06T16:05:22.000Z | 2025-10-21T23:35:49.767Z | |
| cve-2020-10199 | N/A | Sonatype Nexus Repository before 3.21.2 allows Ja… |
n/a |
n/a |
2020-04-01T18:27:23.000Z | 2025-10-21T23:35:47.249Z |
| cve-2020-10221 | N/A | lib/ajaxHandlers/ajaxAddTemplate.php in rConfig t… |
n/a |
n/a |
2020-03-08T21:03:47.000Z | 2025-10-21T23:35:49.645Z |
| cve-2022-49800 | N/A | tracing: Fix memory leak in test_gen_synth_cmd() and t… |
Linux |
Linux |
2025-05-01T14:09:29.042Z | 2025-05-04T08:45:37.373Z |
| cve-2022-49799 | N/A | tracing: Fix wild-memory-access in register_synth_event() |
Linux |
Linux |
2025-05-01T14:09:28.377Z | 2025-05-04T08:45:36.249Z |
| cve-2022-49798 | N/A | tracing: Fix race where eprobes can be called before t… |
Linux |
Linux |
2025-05-01T14:09:27.722Z | 2025-05-04T08:45:35.052Z |
| cve-2020-10987 | N/A | The goform/setUsbUnload endpoint of Tenda AC15 AC… |
n/a |
n/a |
2020-07-13T18:46:12.000Z | 2025-10-21T23:35:40.165Z |
| cve-2020-11023 | Potential XSS vulnerability in jQuery |
jquery |
jQuery |
2020-04-29T00:00:00.000Z | 2025-10-21T23:35:45.230Z | |
| cve-2022-49789 | N/A | scsi: zfcp: Fix double free of FSF request when qdio s… |
Linux |
Linux |
2025-05-01T14:09:21.481Z | 2025-05-04T08:45:24.202Z |
| cve-2022-49788 | N/A | misc/vmw_vmci: fix an infoleak in vmci_host_do_receive… |
Linux |
Linux |
2025-05-01T14:09:20.506Z | 2025-05-04T08:45:22.950Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2019-6340 | Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 … | 2019-02-21T21:29:00.343 | 2025-11-07T19:36:49.270 |
| fkie_cve-2019-7609 | Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion vi… | 2019-03-25T19:29:02.147 | 2025-11-07T19:36:46.077 |
| fkie_cve-2019-8394 | Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload … | 2019-02-17T04:29:00.330 | 2025-11-07T19:36:40.770 |
| fkie_cve-2019-9082 | ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command … | 2019-02-24T18:29:00.207 | 2025-11-07T19:36:36.643 |
| fkie_cve-2025-7626 | A vulnerability has been found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e… | 2025-07-14T17:15:39.243 | 2025-11-07T19:36:24.987 |
| fkie_cve-2019-9874 | Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitec… | 2019-05-31T21:29:06.123 | 2025-11-07T19:36:12.820 |
| fkie_cve-2019-9875 | Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authent… | 2019-05-31T21:29:06.187 | 2025-11-07T19:36:07.503 |
| fkie_cve-2022-49801 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in tr… | 2025-05-01T15:16:03.407 | 2025-11-07T19:34:49.877 |
| fkie_cve-2019-9978 | The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php… | 2019-03-24T15:29:00.243 | 2025-11-07T19:33:51.637 |
| fkie_cve-2020-10181 | goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitra… | 2020-03-11T16:15:12.007 | 2025-11-07T19:33:47.293 |
| fkie_cve-2020-10189 | Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deseriali… | 2020-03-06T17:15:12.383 | 2025-11-07T19:33:43.150 |
| fkie_cve-2020-10199 | Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). | 2020-04-01T19:15:14.393 | 2025-11-07T19:33:38.540 |
| fkie_cve-2020-10221 | lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arb… | 2020-03-08T22:15:11.120 | 2025-11-07T19:33:35.000 |
| fkie_cve-2022-49800 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in te… | 2025-05-01T15:16:03.303 | 2025-11-07T19:33:15.817 |
| fkie_cve-2022-49799 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix wild-memory-acces… | 2025-05-01T15:16:03.200 | 2025-11-07T19:33:04.857 |
| fkie_cve-2022-49798 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race where eprobe… | 2025-05-01T15:16:03.097 | 2025-11-07T19:32:58.330 |
| fkie_cve-2020-10987 | The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers t… | 2020-07-13T19:15:12.207 | 2025-11-07T19:32:57.680 |
| fkie_cve-2020-11023 | In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option… | 2020-04-29T21:15:11.743 | 2025-11-07T19:32:52.023 |
| fkie_cve-2022-49789 | In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of… | 2025-05-01T15:16:02.143 | 2025-11-07T19:32:49.943 |
| fkie_cve-2022-49788 | In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak… | 2025-05-01T15:16:02.027 | 2025-11-07T19:32:44.140 |
| fkie_cve-2020-11651 | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master p… | 2020-04-30T17:15:12.143 | 2025-11-07T19:32:41.770 |
| fkie_cve-2020-11652 | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master p… | 2020-04-30T17:15:12.190 | 2025-11-07T19:32:37.253 |
| fkie_cve-2022-49787 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible m… | 2025-05-01T15:16:01.920 | 2025-11-07T19:32:36.457 |
| fkie_cve-2020-11738 | The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) al… | 2020-04-13T22:15:10.660 | 2025-11-07T19:32:32.807 |
| fkie_cve-2020-11899 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | 2020-06-17T11:15:10.210 | 2025-11-07T19:32:29.170 |
| fkie_cve-2020-15069 | Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via t… | 2020-06-29T18:15:12.313 | 2025-11-07T19:32:23.480 |
| fkie_cve-2020-12271 | A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG F… | 2020-04-27T04:15:10.553 | 2025-11-07T19:32:18.900 |
| fkie_cve-2020-15415 | On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcf… | 2020-06-30T14:15:11.953 | 2025-11-07T19:32:15.237 |
| fkie_cve-2020-15505 | A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier,… | 2020-07-07T02:15:10.613 | 2025-11-07T19:32:10.727 |
| fkie_cve-2020-16846 | An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt AP… | 2020-11-06T08:15:13.283 | 2025-11-07T19:32:05.420 |
| ID | Description | Package | Published | Updated |
|---|---|---|---|---|
| pysec-2024-200 | JupyterHub is software that allows one to create a multi-user server for Jupyter notebook… | jupyterhub | 2024-08-08T15:15:17+00:00 | 2025-01-19T16:22:58.171761+00:00 |
| pysec-2024-199 | Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T23:15:02+00:00 | 2025-01-19T16:22:57.938459+00:00 |
| pysec-2024-198 | Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T22:15:11+00:00 | 2025-01-19T16:22:57.845317+00:00 |
| pysec-2024-197 | Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T22:15:10+00:00 | 2025-01-19T16:22:57.732726+00:00 |
| pysec-2024-196 | Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T22:15:10+00:00 | 2025-01-19T16:22:57.640183+00:00 |
| pysec-2024-195 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow… | apache-airflow | 2024-06-14T09:15:09+00:00 | 2025-01-19T16:22:56.419822+00:00 |
| pysec-2024-194 | A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5… | zenml | 2024-06-06T19:15:54+00:00 | 2025-01-19T13:22:31.835293+00:00 |
| pysec-2024-193 | An issue was discovered in zenml-io/zenml versions up to and including 0.55.4. Due to imp… | zenml | 2024-06-06T19:15:53+00:00 | 2025-01-19T13:22:31.701775+00:00 |
| pysec-2024-192 | An issue was discovered in llama_index before 0.10.38. download/integration.py includes a… | llama-index | 2024-08-22T20:15:10+00:00 | 2025-01-19T13:22:29.175614+00:00 |
| pysec-2024-191 | The Snowflake Connector for Python provides an interface for developing Python applicatio… | snowflake-connector-python | 2024-10-24T22:15:04+00:00 | 2025-01-19T10:22:29.812605+00:00 |
| pysec-2024-190 | Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenti… | apache-airflow | 2024-07-17T08:15:02+00:00 | 2025-01-19T07:21:16.859034+00:00 |
| pysec-2024-189 | Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated at… | apache-airflow | 2024-07-17T08:15:01+00:00 | 2025-01-19T07:21:16.796301+00:00 |
| pysec-2024-188 | WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Lo… | webob | 2024-08-14T21:15:17+00:00 | 2025-01-19T04:23:01.908824+00:00 |
| pysec-2024-187 | virtualenv before 20.26.6 allows command injection through the activation scripts for a v… | virtualenv | 2024-11-24T16:15:06+00:00 | 2025-01-19T04:23:01.784352+00:00 |
| pysec-2024-186 | RestrictedPython is a restricted execution environment for Python to run untrusted code. … | restrictedpython | 2024-09-30T16:15:09+00:00 | 2025-01-19T04:23:01.259448+00:00 |
| pysec-2024-185 | Nebari through 2024.4.1 prints the temporary Keycloak root password. | nebari | 2024-05-06T00:15:10+00:00 | 2025-01-19T04:23:00.951638+00:00 |
| pysec-2024-184 | A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio ve… | gradio | 2024-06-06T18:15:18+00:00 | 2025-01-19T04:23:00.017053+00:00 |
| pysec-2024-183 | CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang St… | codechecker | 2024-11-06T15:15:11+00:00 | 2025-01-19T04:22:59.576907+00:00 |
| pysec-2024-182 | Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive… | apache-airflow | 2024-11-15T09:15:14+00:00 | 2025-01-19T04:22:59.398988+00:00 |
| pysec-2024-181 | Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of… | apache-airflow | 2024-08-21T16:15:08+00:00 | 2025-01-19T04:22:59.351008+00:00 |
| pysec-2024-180 | Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious even… | pretix | 2024-08-23T15:15:17+00:00 | 2025-01-19T01:52:24.493530+00:00 |
| pysec-2024-179 | OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versio… | octoprint | 2024-03-18T22:15:07+00:00 | 2025-01-19T01:52:24.377662+00:00 |
| pysec-2024-178 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2… | litestar | 2024-11-20T21:15:08+00:00 | 2025-01-19T01:52:23.772726+00:00 |
| pysec-2024-177 | Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach… | langflow | 2024-06-10T20:15:15+00:00 | 2025-01-19T01:52:23.722576+00:00 |
| pysec-2024-176 | A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml ver… | zenml | 2024-06-30T16:15:03+00:00 | 2025-01-18T22:21:45.122426+00:00 |
| pysec-2024-175 | WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because t… | wordops | 2024-05-06T00:15:10+00:00 | 2025-01-18T22:21:44.991242+00:00 |
| pysec-2024-174 | Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installatio… | streampipes | 2024-07-17T09:15:02+00:00 | 2025-01-18T22:21:43.678475+00:00 |
| pysec-2024-173 | Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such… | streampipes | 2024-07-17T10:15:01+00:00 | 2025-01-18T22:21:43.618882+00:00 |
| pysec-2024-172 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in … | streampipes | 2024-07-17T09:15:02+00:00 | 2025-01-18T22:21:43.557516+00:00 |
| pysec-2024-171 | Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, mult… | strawberry-graphql | 2024-09-25T18:15:05+00:00 | 2025-01-18T22:21:43.412172+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33683 | Cross-Site Request Forgery (CSRF) vulnerability in WP Republic Hide Dashboard Notificatio… | 2024-04-27T05:02:18.438205Z |
| gsd-2024-33755 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.436135Z |
| gsd-2024-33687 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.432624Z |
| gsd-2024-33753 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.430763Z |
| gsd-2024-33756 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.430035Z |
| gsd-2024-33717 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.429699Z |
| gsd-2024-33724 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.429383Z |
| gsd-2024-33706 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.427436Z |
| gsd-2024-33787 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.424661Z |
| gsd-2024-33799 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.424348Z |
| gsd-2024-33813 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.424031Z |
| gsd-2024-33735 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.410261Z |
| gsd-2024-33721 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.408369Z |
| gsd-2024-33695 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-27T05:02:18.407619Z |
| gsd-2024-33752 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.406190Z |
| gsd-2024-33692 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-27T05:02:18.404770Z |
| gsd-2024-33696 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-27T05:02:18.403548Z |
| gsd-2024-33761 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.399777Z |
| gsd-2024-33689 | Cross-Site Request Forgery (CSRF) vulnerability in Tony Zeoli, Tony Hayes Radio Station.T… | 2024-04-27T05:02:18.398121Z |
| gsd-2024-33730 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.396940Z |
| gsd-2024-33708 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.395735Z |
| gsd-2024-33830 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.395389Z |
| gsd-2024-33843 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.393431Z |
| gsd-2024-33841 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.393169Z |
| gsd-2024-33686 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.392053Z |
| gsd-2024-33816 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.388757Z |
| gsd-2024-33785 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.387543Z |
| gsd-2024-33703 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.386761Z |
| gsd-2024-33705 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.385891Z |
| gsd-2024-33824 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.385552Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-52216 | Malicious code in maman-klipo15-sluey (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52215 | Malicious code in maman-keraktelor9-riris (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52214 | Malicious code in maman-kepok82-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52213 | Malicious code in maman-getas60-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52212 | Malicious code in maman-bakwan76-riris (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52211 | Malicious code in mahesa-tapai6-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52210 | Malicious code in mahesa-tahu39-sukiwir (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52209 | Malicious code in mahesa-soto51-breki (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52208 | Malicious code in mahesa-sego15-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52207 | Malicious code in mahesa-sambalado69-riris (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52206 | Malicious code in mahesa-rangginang65-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52205 | Malicious code in mahesa-moci80-tititugel (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52204 | Malicious code in mahesa-moci39-sluey (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52203 | Malicious code in mahesa-mangut15-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52202 | Malicious code in mahesa-bubursumsum45-sluey (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52201 | Malicious code in lutfi-tahu46-breki (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52200 | Malicious code in lutfi-sroto74-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52199 | Malicious code in lutfi-sasag90-sukiwir (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52198 | Malicious code in lutfi-lapis97-riris (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52197 | Malicious code in lutfi-kolak8-ruro (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52196 | Malicious code in lutfi-klipo23-ruro (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52195 | Malicious code in lutfi-jamblang27-sluey (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52194 | Malicious code in lutfi-brongkos15-sluey (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52193 | Malicious code in lutfi-bika13-breki (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52192 | Malicious code in lisa-sego21-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52191 | Malicious code in lisa-rojak1-ruro (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52190 | Malicious code in lisa-lapis28-sukiwir (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52189 | Malicious code in lisa-kupang97-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52188 | Malicious code in lisa-kue67-tititugel (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| mal-2025-52187 | Malicious code in lisa-klanting32-miaww (npm) | 2025-11-10T04:40:39Z | 2025-11-10T04:40:39Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1999 | Adobe Magento SessionReaper: Schwachstelle ermöglicht Umgehung von Sicherheitsmaßnahmen | 2025-09-08T22:00:00.000+00:00 | 2025-10-22T22:00:00.000+00:00 |
| wid-sec-w-2025-2195 | Oracle E-Business Suite: Schwachstelle ermöglicht Codeausführung | 2025-10-05T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-2026 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2025-09-10T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1998 | ffmpeg: Schwachstelle ermöglicht Codeausführung und potenziell Denial of Service | 2025-09-08T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1664 | Python: Schwachstelle ermöglicht Denial of Service | 2025-07-28T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1583 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2025-07-16T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1522 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-07-09T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1502 | AMD Prozessor: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-07-08T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1481 | Linux Kernel: Mehrere Schwachstellen | 2025-07-07T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1470 | Python (CPython): Schwachstelle ermöglicht Denial of Service | 2025-07-07T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1389 | Podman: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-24T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1372 | Linux Kernel: Schwachstelle ermöglicht Manipulation von Daten und Denial of Service | 2025-06-22T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1277 | Microsoft Windows: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-10-20T22:00:00.000+00:00 |
| wid-sec-w-2022-0782 | Apple iOS: Mehrere Schwachstellen | 2022-07-20T22:00:00.000+00:00 | 2025-10-20T22:00:00.000+00:00 |
| wid-sec-w-2022-0778 | Apple macOS: Mehrere Schwachstellen | 2022-07-20T22:00:00.000+00:00 | 2025-10-20T22:00:00.000+00:00 |
| wid-sec-w-2025-2322 | Samba: Mehrere Schwachstellen | 2025-10-15T22:00:00.000+00:00 | 2025-10-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1828 | PAM (linux-pam package): Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-08-13T22:00:00.000+00:00 | 2025-10-19T22:00:00.000+00:00 |
| wid-sec-w-2025-2305 | Ivanti Endpoint Manager (Admin Panel): Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2316 | Nextcloud "Tables" App: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2315 | Mattermost Server und Mobile: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2314 | HCL BigFix: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2313 | IBM App Connect Enterprise: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2312 | Cisco Mehrere Produkte: Mehrere Schwachstellen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2310 | F5 BIG-IP und F5OS: Mehrere Schwachstellen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2309 | Cisco TelePresence: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2308 | F5 BIG-IP: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-14T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2304 | Adobe Creative Cloud Applikationen: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2298 | Linux Kernel: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2292 | HPE ProLiant und AMD EPYC Prozessoren: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2290 | Zoom Video Communications Rooms: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-10-14T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-844582 | SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA | 2023-12-12T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-783481 | SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM | 2021-03-09T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-626178 | SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-620288 | SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic | 2021-12-14T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-583523 | SSA-583523: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-540493 | SSA-540493: Kiosk Mode Escape Vulnerability in HiMed Cockpit Devices Before V11.6.2 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-455250 | SSA-455250: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h3 | 2024-04-09T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-430425 | SSA-430425: Multiple Vulnerabilities in SINEC Security Monitor before V4.9.0 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-426509 | SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-368868 | SSA-368868: Multiple Vulnerabilities in WibuKey for Windows | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-340240 | SSA-340240: Denial of Service Vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-321292 | SSA-321292: Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products | 2022-05-10T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-254396 | SSA-254396: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-148641 | SSA-148641: XPath Constraint Vulnerability in Mendix Runtime | 2022-03-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-999588 | SSA-999588: Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2 | 2023-12-12T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-959281 | SSA-959281: XML File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-955858 | SSA-955858: Multiple Vulnerabilities in LOGO! 8 BM Devices | 2022-10-11T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-921449 | SSA-921449: Plaintext Storage of a Password Vulnerability in LOGO! V8.3 BM Devices | 2024-08-13T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-852501 | SSA-852501: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-850560 | SSA-850560: Use of 4-Digit PIN in SENTRON PAC3200 Devices | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-844582 | SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA | 2023-12-12T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-783481 | SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM | 2021-03-09T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-711309 | SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products | 2023-09-12T00:00:00Z | 2025-08-18T00:00:00Z |
| SSA-698820 | SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices | 2024-07-09T00:00:00Z | 2025-07-08T00:00:00Z |
| SSA-626178 | SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-620288 | SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic | 2021-12-14T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-583523 | SSA-583523: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-540493 | SSA-540493: Kiosk Mode Escape Vulnerability in HiMed Cockpit Devices Before V11.6.2 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-455250 | SSA-455250: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h3 | 2024-04-09T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-430425 | SSA-430425: Multiple Vulnerabilities in SINEC Security Monitor before V4.9.0 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:7607 | Red Hat Security Advisory: OpenShift Container Platform 4.12.45 security and extras update | 2023-12-06T16:54:41+00:00 | 2025-11-10T00:58:50+00:00 |
| rhsa-2023:7602 | Red Hat Security Advisory: OpenShift Container Platform 4.13.25 security and extras update | 2023-12-06T00:16:04+00:00 | 2025-11-10T00:58:50+00:00 |
| rhsa-2023:7599 | Red Hat Security Advisory: OpenShift Container Platform 4.14.5 bug fix and security update | 2023-12-05T09:57:03+00:00 | 2025-11-10T00:58:50+00:00 |
| rhsa-2023:7555 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.0 security update | 2023-11-28T18:50:01+00:00 | 2025-11-10T00:58:48+00:00 |
| rhsa-2023:7522 | Red Hat Security Advisory: OpenShift Virtualization 4.13.6 security and bug fix update | 2023-11-28T13:45:02+00:00 | 2025-11-10T00:58:48+00:00 |
| rhsa-2023:7521 | Red Hat Security Advisory: OpenShift Virtualization 4.13.6 RPMs security and bug fix update | 2023-11-28T13:17:06+00:00 | 2025-11-10T00:58:47+00:00 |
| rhsa-2023:7515 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 9.0.0 security update | 2023-11-27T16:08:33+00:00 | 2025-11-10T00:58:46+00:00 |
| rhsa-2023:7479 | Red Hat Security Advisory: OpenShift Container Platform 4.11.54 bug fix and security update | 2023-11-29T01:40:41+00:00 | 2025-11-10T00:58:46+00:00 |
| rhsa-2023:7478 | Red Hat Security Advisory: OpenShift Container Platform 4.11.54 security and extras update | 2023-11-29T00:44:58+00:00 | 2025-11-10T00:58:44+00:00 |
| rhsa-2023:7475 | Red Hat Security Advisory: OpenShift Container Platform 4.13.24 bug fix and security update | 2023-11-29T01:47:09+00:00 | 2025-11-10T00:58:44+00:00 |
| rhsa-2023:7474 | Red Hat Security Advisory: OpenShift Container Platform 4.13.24 security and extras update | 2023-11-29T00:33:54+00:00 | 2025-11-10T00:58:44+00:00 |
| rhsa-2023:7470 | Red Hat Security Advisory: OpenShift Container Platform 4.14.4 bug fix and security update | 2023-11-29T11:36:57+00:00 | 2025-11-10T00:58:43+00:00 |
| rhsa-2023:7469 | Red Hat Security Advisory: OpenShift Container Platform 4.14.4 security and extras update | 2023-11-29T10:27:24+00:00 | 2025-11-10T00:58:42+00:00 |
| rhsa-2023:7345 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.9.3 security update | 2023-11-20T08:34:18+00:00 | 2025-11-10T00:58:42+00:00 |
| rhsa-2023:7344 | Red Hat Security Advisory: openshift-gitops-kam security update | 2023-11-20T07:53:42+00:00 | 2025-11-10T00:58:42+00:00 |
| rhsa-2023:7342 | Red Hat Security Advisory: OpenShift Container Platform 4.11 low-latency extras update | 2023-11-16T20:48:36+00:00 | 2025-11-10T00:58:41+00:00 |
| rhsa-2023:7323 | Red Hat Security Advisory: OpenShift Container Platform 4.13.23 bug fix and security update | 2023-11-21T11:27:12+00:00 | 2025-11-10T00:58:40+00:00 |
| rhsa-2023:7322 | Red Hat Security Advisory: OpenShift Container Platform 4.13.23 security and extras update | 2023-11-21T11:27:54+00:00 | 2025-11-10T00:58:40+00:00 |
| rhsa-2023:7315 | Red Hat Security Advisory: OpenShift Container Platform 4.14.3 bug fix and security update | 2023-11-21T11:26:31+00:00 | 2025-11-10T00:58:39+00:00 |
| rhsa-2023:7288 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update | 2023-11-16T05:58:26+00:00 | 2025-11-10T00:58:38+00:00 |
| rhsa-2023:7215 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.2.12 | 2023-11-15T00:16:31+00:00 | 2025-11-10T00:58:38+00:00 |
| rhsa-2023:7201 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update | 2024-02-27T22:34:13+00:00 | 2025-11-10T00:58:37+00:00 |
| rhsa-2023:7200 | Red Hat Security Advisory: OpenShift Container Platform 4.15.z security update | 2024-02-27T22:49:18+00:00 | 2025-11-10T00:58:37+00:00 |
| rhsa-2023:7198 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 bug fix and security update | 2024-02-27T20:49:10+00:00 | 2025-11-10T00:58:36+00:00 |
| rhsa-2023:6894 | Red Hat Security Advisory: OpenShift Container Platform 4.12.44 bug fix and security update | 2023-11-21T12:36:12+00:00 | 2025-11-10T00:58:36+00:00 |
| rhsa-2023:6893 | Red Hat Security Advisory: OpenShift Container Platform 4.12.44 security and extras update | 2023-11-21T12:20:30+00:00 | 2025-11-10T00:58:35+00:00 |
| rhsa-2023:6846 | Red Hat Security Advisory: OpenShift Container Platform 4.13.22 bug fix and security update | 2023-11-15T01:45:54+00:00 | 2025-11-10T00:58:34+00:00 |
| rhsa-2023:6845 | Red Hat Security Advisory: OpenShift Container Platform 4.13.22 security and extras update | 2023-11-15T00:43:04+00:00 | 2025-11-10T00:58:34+00:00 |
| rhsa-2023:6842 | Red Hat Security Advisory: OpenShift Container Platform 4.12.43 bug fix and security update | 2023-11-16T20:31:52+00:00 | 2025-11-10T00:58:32+00:00 |
| rhsa-2023:6841 | Red Hat Security Advisory: Red Hat OpenShift Enterprise security update | 2023-11-16T20:14:47+00:00 | 2025-11-10T00:58:31+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-53740 | Microsoft Office Remote Code Execution Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-53739 | Microsoft Excel Remote Code Execution Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-53738 | Microsoft Word Remote Code Execution Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-53737 | Microsoft Excel Remote Code Execution Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-53736 | Microsoft Word Information Disclosure Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-53735 | Microsoft Excel Remote Code Execution Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-53733 | Microsoft Word Remote Code Execution Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-53731 | Microsoft Office Remote Code Execution Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-50154 | Microsoft Windows File Explorer Spoofing Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-16T07:00:00.000Z |
| msrc_cve-2025-39996 | media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove | 2025-10-02T00:00:00.000Z | 2025-10-16T01:03:22.000Z |
| msrc_cve-2025-39986 | can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow | 2025-10-02T00:00:00.000Z | 2025-10-16T01:03:16.000Z |
| msrc_cve-2025-39977 | futex: Prevent use-after-free during requeue-PI | 2025-10-02T00:00:00.000Z | 2025-10-16T01:03:11.000Z |
| msrc_cve-2025-39982 | Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync | 2025-10-02T00:00:00.000Z | 2025-10-16T01:03:06.000Z |
| msrc_cve-2025-39990 | bpf: Check the helper function is valid in get_helper_proto | 2025-10-02T00:00:00.000Z | 2025-10-16T01:03:00.000Z |
| msrc_cve-2025-39987 | can: hi311x: populate ndo_change_mtu() to prevent buffer overflow | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:55.000Z |
| msrc_cve-2025-40000 | wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:49.000Z |
| msrc_cve-2025-39994 | media: tuner: xc5000: Fix use-after-free in xc5000_release | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:44.000Z |
| msrc_cve-2025-39980 | nexthop: Forbid FDB status change while nexthop is in a group | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:38.000Z |
| msrc_cve-2025-39998 | scsi: target: target_core_configfs: Add length check to avoid buffer overflow | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:33.000Z |
| msrc_cve-2025-39981 | Bluetooth: MGMT: Fix possible UAFs | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:27.000Z |
| msrc_cve-2025-39993 | media: rc: fix races with imon_disconnect() | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:22.000Z |
| msrc_cve-2025-39973 | i40e: add validation for ring_len param | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:16.000Z |
| msrc_cve-2025-39995 | media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:10.000Z |
| msrc_cve-2025-39969 | i40e: fix validation of VF state in get resources | 2025-10-02T00:00:00.000Z | 2025-10-16T01:02:04.000Z |
| msrc_cve-2025-39978 | octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() | 2025-10-02T00:00:00.000Z | 2025-10-16T01:01:59.000Z |
| msrc_cve-2025-39972 | i40e: fix idx validation in i40e_validate_queue_map | 2025-10-02T00:00:00.000Z | 2025-10-16T01:01:53.000Z |
| msrc_cve-2025-39971 | i40e: fix idx validation in config queues msg | 2025-10-02T00:00:00.000Z | 2025-10-16T01:01:48.000Z |
| msrc_cve-2025-39988 | can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow | 2025-10-02T00:00:00.000Z | 2025-10-16T01:01:43.000Z |
| msrc_cve-2025-39985 | can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow | 2025-10-02T00:00:00.000Z | 2025-10-16T01:01:37.000Z |
| msrc_cve-2025-39970 | i40e: fix input validation logic for action_meta | 2025-10-02T00:00:00.000Z | 2025-10-16T01:01:31.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-177-01 | Mitsubishi Electric Air Conditioning Systems (Update A) | 2025-06-26T06:00:00.000000Z | 2025-08-21T06:00:00.000000Z |
| icsa-25-217-02 | Tigo Energy Cloud Connect Advanced (Update A) | 2025-08-05T06:00:00.000000Z | 2025-08-19T06:00:00.000000Z |
| icsa-25-226-30 | Rockwell Automation FactoryTalk Action Manager | 2025-08-14T06:00:00.000000Z | 2025-08-15T06:00:00.000000Z |
| icsa-25-226-29 | Rockwell Automation Studio 5000 Logix Designer | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-28 | Rockwell Automation ControlLogix Ethernet Modules | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-27 | Rockwell Automation ArmorBlock 5000 I/O - Webserver | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-25 | Rockwell Automation Micro800 | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-24 | Rockwell FactoryTalk Linx | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-23 | Rockwell Automation FactoryTalk Viewpoint | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-212-01 | Güralp Systems FMUS Series and MIN Series Devices (Update A) | 2025-07-31T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-231-02 | Siemens Mendix SAML Module | 2025-08-14T00:00:00.000000Z | 2025-08-14T00:00:00.000000Z |
| icsa-25-231-01 | Siemens Desigo CC Product Family and SENTRON Powermanager | 2025-08-14T00:00:00.000000Z | 2025-08-14T00:00:00.000000Z |
| icsma-25-224-01 | Santesoft Sante PACS Server | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-224-04 | AVEVA PI Integrator | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-224-01 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-219-02 | Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-24-263-04 | MegaSys Computer Technologies Telenium Online Web Application (Update A) | 2024-09-19T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-254-09 | Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 | 2024-06-11T00:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-240-03 | Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit | 2025-08-12T04:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-238-03 | Schneider Electric Modicon M340 Controller and Communication Modules | 2025-08-12T04:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-035-06 | Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H | 2025-01-14T00:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-226-21 | Siemens BFCClient | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-20 | Siemens RUGGEDCOM ROX II | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-19 | Siemens SINUMERIK | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-17 | Siemens SINEC Traffic Analyzer | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-16 | Siemens SICAM Q100/Q200 | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-15 | Siemens SINEC OS | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-14 | Siemens RUGGEDCOM ROX II | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-13 | Siemens SIMATIC RTLS Locating Manager | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-12 | Siemens SIPROTEC 4 and SIPROTEC 4 Compact | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-dnac-api-nbpzcjcm | Cisco Catalyst Center Unauthenticated API Access Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-03-26T16:00:00+00:00 |
| cisco-sa-xrike-9wygprgq | Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-xr792-bwfvdpy | Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-sb-lkm-znerzjbz | Cisco IOS XR Software Secure Boot Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ncs-hybridacl-crmzffkq | Cisco IOS XR Software Hybrid Access Control List Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-multicast-ermrsvq7 | Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-modular-acl-u5mepxmm | Cisco IOS XR Software Access Control List Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ipv4uni-lfm3cfbu | Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-iosxr-priv-esc-gfqjxvof | Cisco IOS XR Software CLI Privilege Escalation Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-iosxr-bgp-dos-o7stephx | Cisco IOS XR Software Border Gateway Protocol Confederation Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ios-xr-verii-bypass-hhpwqrvx | Cisco IOS XR Software Image Verification Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-snmp-dos-sdxnsucw | Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-03-12T15:22:33+00:00 |
| cisco-sa-sbr042-multi-vuln-ej76pke5 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2025-03-07T17:33:55+00:00 |
| cisco-sa-tms-xss-vuln-wbtcywxg | Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability | 2025-03-05T16:00:00+00:00 | 2025-03-05T16:44:57+00:00 |
| cisco-sa-secure-dll-injection-aoyzeqsg | Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability | 2025-03-05T16:00:00+00:00 | 2025-03-05T16:00:00+00:00 |
| cisco-sa-nxos-ici-dpojbwxk | Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| cisco-sa-n3kn9k-healthdos-eoqswk4g | Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| cisco-sa-apic-multi-vulns-9ummtg5 | Cisco Application Policy Infrastructure Controller Vulnerabilities | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| cisco-sa-phone-info-disc-yyxswstk | Cisco Video Phone 8875 and Desk Phone 9800 Series Information Disclosure Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-esa-mailpol-bypass-5nvcjzmw | Cisco Secure Email Gateway Email Filter Bypass Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-broadworks-xss-gdpgj58p | Cisco BroadWorks Application Delivery Platform Cross-Site Scripting Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-ise-multivuls-ftw9aoxf | Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-10T20:23:50+00:00 |
| cisco-sa-esa-sma-wsa-multi-ykujhs34 | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-07T19:21:57+00:00 |
| cisco-sa-swa-range-bypass-2bsehysu | Cisco Secure Web Appliance Range Request Bypass Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-ise-xss-42tgsdmg | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-expressway-xss-uexuzrew | Cisco Expressway Series Cross-Site Scripting Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-esa-sma-xss-wck2wcug | Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-esa-sma-wsa-snmp-inf-fqpvl8sx | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance SNMP Polling Information Disclosure Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-cmm-privesc-uy2vf8pc | Cisco Meeting Management REST API Privilege Escalation Vulnerability | 2025-01-22T16:00:00+00:00 | 2025-01-22T16:00:00+00:00 |
| cisco-sa-clamav-ole2-h549rpha | ClamAV OLE2 File Format Decryption Denial of Service Vulnerability | 2025-01-22T16:00:00+00:00 | 2025-01-22T16:00:00+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-201102-0095 | Google Chrome before 9.0.597.94 does not properly perform event handling for animations, … | 2024-11-29T22:30:21.471000Z |
| var-201912-0484 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-11-29T22:30:19.168000Z |
| var-201912-0562 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in mac… | 2024-11-29T22:29:43.969000Z |
| var-201903-0420 | A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, … | 2024-11-29T22:29:43.774000Z |
| var-200803-0016 | CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure web… | 2024-11-29T22:28:36.444000Z |
| var-202105-1432 | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired… | 2024-11-29T22:28:09.090000Z |
| var-201711-0446 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-11-29T22:28:08.620000Z |
| var-201108-0184 | Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … | 2024-11-29T22:28:08.450000Z |
| var-201606-0478 | OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary check… | 2024-11-29T22:28:04.343000Z |
| var-201606-0135 | The XML parser in Expat does not use sufficient entropy for hash initialization, which al… | 2024-11-29T22:28:04.035000Z |
| var-201108-0236 | The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF de… | 2024-11-29T22:28:02.939000Z |
| var-201412-0519 | The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j … | 2024-11-29T22:27:49.961000Z |
| var-202207-0381 | A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5… | 2024-11-29T22:27:49.386000Z |
| var-200704-0218 | The Login Window in Apple Mac OS X 10.4 through 10.4.9 does not display the screen saver … | 2024-11-29T22:27:49.098000Z |
| var-201206-0058 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T22:27:48.847000Z |
| var-200811-0321 | The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from… | 2024-11-29T22:27:14.660000Z |
| var-202109-1360 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:26:43.295000Z |
| var-201906-1174 | Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. T… | 2024-11-29T22:26:43.084000Z |
| var-201202-0137 | Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote at… | 2024-11-29T22:26:31.980000Z |
| var-200703-0019 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… | 2024-11-29T22:26:30.062000Z |
| var-200704-0229 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allo… | 2024-11-29T22:26:29.395000Z |
| var-201404-0008 | Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, whe… | 2024-11-29T22:26:29.107000Z |
| var-202002-1458 | eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_requ… | 2024-11-29T22:26:28.708000Z |
| var-202012-1547 | A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel thr… | 2024-11-29T22:26:28.519000Z |
| var-200907-0748 | Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird… | 2024-11-29T22:26:27.797000Z |
| var-201105-0121 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apa… | 2024-11-29T22:25:51.782000Z |
| var-202008-0248 | An elevation of privilege vulnerability exists when an attacker establishes a vulnerable … | 2024-11-29T22:25:50.715000Z |
| var-202010-1295 | An out-of-bounds read was addressed with improved input validation. This issue is fixed i… | 2024-11-29T22:25:40.888000Z |
| var-201912-0817 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:25:40.788000Z |
| var-202002-1243 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_re… | 2024-11-29T22:25:35.647000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-002797 | Multiple vulnerabilities in ELECOM and LOGITEC network devices | 2023-08-15T11:54+09:00 | 2025-02-13T15:21+09:00 |
| jvndb-2024-001061 | ELECOM wireless LAN routers vulnerable to OS command injection | 2024-01-24T17:16+09:00 | 2025-02-13T14:31+09:00 |
| jvndb-2025-000011 | Multiple vulnerabilities in FileMegane | 2025-02-13T13:39+09:00 | 2025-02-13T13:39+09:00 |
| jvndb-2025-000010 | acmailer vulnerable to cross-site scripting | 2025-02-12T15:05+09:00 | 2025-02-12T15:05+09:00 |
| jvndb-2024-000078 | Multiple vulnerabilities in ELECOM wireless LAN routers | 2024-07-30T15:34+09:00 | 2025-02-12T14:34+09:00 |
| jvndb-2025-001017 | Multiple vulnerabilities in STEALTHONE D220/D340/D440 | 2025-02-06T18:27+09:00 | 2025-02-06T18:27+09:00 |
| jvndb-2025-001018 | Improper restriction of XML external entity reference (XXE) vulnerability in OMRON NB-Designer | 2025-02-06T18:26+09:00 | 2025-02-06T18:26+09:00 |
| jvndb-2025-000008 | Multiple vulnerabilities in Defense Platform Home Edition | 2025-02-05T14:06+09:00 | 2025-02-05T14:06+09:00 |
| jvndb-2025-000009 | WordPress Plugin "Activity Log WinterLock" vulnerable to cross-site request forgery | 2025-02-04T13:58+09:00 | 2025-02-04T13:58+09:00 |
| jvndb-2025-001244 | Clickjacking Vulnerability in JP1/ServerConductor/Deployment Manager | 2025-01-30T18:19+09:00 | 2025-01-30T18:19+09:00 |
| jvndb-2025-000007 | SXF Common Library vulnerable to improper input data handling | 2025-01-29T14:57+09:00 | 2025-01-29T14:57+09:00 |
| jvndb-2025-000006 | WordPress Plugin "Simple Image Sizes" vulnerable to cross-site scripting | 2025-01-28T13:44+09:00 | 2025-01-28T13:44+09:00 |
| jvndb-2025-000005 | EXIF Viewer Classic vulnerable to cross-site scripting | 2025-01-27T14:25+09:00 | 2025-01-27T14:25+09:00 |
| jvndb-2025-000003 | FortiWeb vulnerable to SQL injection | 2025-01-21T15:59+09:00 | 2025-01-21T15:59+09:00 |
| jvndb-2025-001027 | Linux Ratfor vulnerable to stack-based buffer overflow | 2025-01-16T13:27+09:00 | 2025-01-16T13:27+09:00 |
| jvndb-2025-000001 | PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting | 2025-01-08T17:08+09:00 | 2025-01-08T17:08+09:00 |
| jvndb-2024-015471 | Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element | 2024-12-25T11:28+09:00 | 2024-12-25T11:28+09:00 |
| jvndb-2024-015393 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (December 2024) | 2024-12-23T12:52+09:00 | 2024-12-23T12:52+09:00 |
| jvndb-2024-000125 | Multiple vulnerabilities in I-O DATA routers UD-LT1 and UD-LT1/EX | 2024-12-04T15:22+09:00 | 2024-12-18T15:20+09:00 |
| jvndb-2024-014918 | Authentication Bypass Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2024-12-17T15:23+09:00 | 2024-12-17T15:23+09:00 |
| jvndb-2024-000128 | Multiple vulnerabilities in SHARP routers | 2024-12-17T07:54+09:00 | 2024-12-17T07:54+09:00 |
| jvndb-2024-000127 | "Shonen Jump+" App for Android fails to restrict custom URL schemes properly | 2024-12-16T15:07+09:00 | 2024-12-16T15:07+09:00 |
| jvndb-2024-014825 | WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting | 2024-12-16T13:57+09:00 | 2024-12-16T13:57+09:00 |
| jvndb-2024-014793 | Multiple vulnerabilities in FXC AE1021 and AE1021PE | 2024-12-16T11:51+09:00 | 2024-12-16T11:51+09:00 |
| jvndb-2024-014079 | Trend Micro Deep Security Agent for Windows and Deep Security Notifier on DSVA vulnerable to OS command injection | 2024-12-06T12:11+09:00 | 2024-12-06T12:11+09:00 |
| jvndb-2023-000085 | "Skylark" App fails to restrict custom URL schemes properly | 2023-08-24T13:34+09:00 | 2024-12-03T15:51+09:00 |
| jvndb-2024-000124 | Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers | 2024-12-02T16:38+09:00 | 2024-12-02T16:38+09:00 |
| jvndb-2024-000123 | Multiple FCNT Android devices vulnerable to authentication bypass | 2024-11-29T15:30+09:00 | 2024-11-29T15:30+09:00 |
| jvndb-2024-013702 | Multiple vulnerabilities in FUJI ELECTRIC products | 2024-11-29T14:42+09:00 | 2024-11-29T14:42+09:00 |
| jvndb-2024-002831 | ELECOM wireless LAN routers vulnerable to OS command injection | 2024-02-22T08:15+09:00 | 2024-11-27T14:45+09:00 |
| ID | Description | Updated |
|---|