Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1303 |
5.3 (3.1)
|
MailChimp Campaigns <= 3.2.4 - Missing Authorization t… |
matthieuscarset |
MailChimp Campaigns |
2026-02-14T06:42:33.704Z | 2026-02-14T06:42:33.704Z |
| CVE-2026-1096 |
6.4 (3.1)
|
Best-wp-google-map <= 2.1 - Authenticated (Contributor… |
raju_ahmed |
Best-wp-google-map |
2026-02-14T06:42:32.532Z | 2026-02-14T06:42:32.532Z |
| CVE-2026-0693 |
4.4 (3.1)
|
Allow HTML in Category Descriptions <= 1.2.4 - Authent… |
arnoesterhuizen |
Allow HTML in Category Descriptions |
2026-02-14T06:42:32.915Z | 2026-02-14T06:42:32.915Z |
| CVE-2026-0559 |
6.4 (3.1)
|
MasterStudy LMS WordPress Plugin – for Online Courses … |
stylemix |
MasterStudy LMS WordPress Plugin – for Online Courses and Education |
2026-02-14T06:42:32.152Z | 2026-02-14T06:42:32.152Z |
| CVE-2026-1905 |
6.4 (3.1)
|
Sphere Manager <= 1.0.2 - Authenticated (Contributor+)… |
devmw |
Sphere Manager |
2026-02-14T06:42:31.305Z | 2026-02-14T06:42:31.305Z |
| CVE-2026-1394 |
4.3 (3.1)
|
WP Quick Contact Us <= 1.0 - Cross-Site Request Forger… |
dmitritechs |
WP Quick Contact Us |
2026-02-14T06:42:31.697Z | 2026-02-14T06:42:31.697Z |
| CVE-2026-1944 |
5.3 (3.1)
|
CallbackKiller service widget <= 1.2 - Missing Authori… |
krellbat |
CallbackKiller service widget |
2026-02-14T06:42:30.529Z | 2026-02-14T06:42:30.529Z |
| CVE-2026-0557 |
6.4 (3.1)
|
WP Data Access <= 5.5.63 - Authenticated (Contributor+… |
peterschulznl |
WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps |
2026-02-14T06:42:30.165Z | 2026-02-14T06:42:30.165Z |
| CVE-2025-14852 |
4.3 (3.1)
|
MDirector Newsletter <= 4.5.8 - Cross-Site Request For… |
antevenio |
MDirector Newsletter |
2026-02-14T06:42:30.914Z | 2026-02-14T06:42:30.914Z |
| CVE-2026-2024 |
7.5 (3.1)
|
PhotoStack Gallery <= 0.4.1 - Unauthenticated SQL Inje… |
savitasoni |
PhotoStack Gallery |
2026-02-14T06:42:29.782Z | 2026-02-14T06:42:29.782Z |
| CVE-2026-1939 |
6.4 (3.1)
|
Percent to Infograph <= 1.0 - Authenticated (Contribut… |
cutesalah |
Percent to Infograph |
2026-02-14T06:42:29.416Z | 2026-02-14T06:42:29.416Z |
| CVE-2026-1795 |
6.1 (3.1)
|
Address Bar Ads <= 1.0.0 - Reflected Cross-Site Scripting |
sivenso |
Address Bar Ads |
2026-02-14T06:42:29.053Z | 2026-02-14T06:42:29.053Z |
| CVE-2026-1903 |
6.4 (3.1)
|
Ravelry Designs Widget <= 1.0.0 - Authenticated (Contr… |
shellbot |
Ravelry Designs Widget |
2026-02-14T06:42:28.647Z | 2026-02-14T06:42:28.647Z |
| CVE-2026-1792 |
6.1 (3.1)
|
Geo Widet <= 1.0 - Reflected Cross-Site Scripting |
owencutajar |
Geo Widget |
2026-02-14T06:42:28.278Z | 2026-02-14T06:42:28.278Z |
| CVE-2026-2022 |
4.3 (3.1)
|
Smart Forms <= 2.6.99 - Missing Authorization to Authe… |
edgarrojas |
Smart Forms – when you need more than just a contact form |
2026-02-14T06:42:27.519Z | 2026-02-14T06:42:27.519Z |
| CVE-2026-1901 |
6.4 (3.1)
|
QuestionPro Surveys <= 1.0 - Authenticated (Contributo… |
questionpro |
QuestionPro Surveys |
2026-02-14T06:42:27.139Z | 2026-02-14T06:42:27.139Z |
| CVE-2026-0745 |
7.2 (3.1)
|
User Language Switch <= 1.6.10 - Authenticated (Admini… |
webilop |
User Language Switch |
2026-02-14T06:42:27.887Z | 2026-02-14T06:42:27.887Z |
| CVE-2026-0751 |
6.4 (3.1)
|
Payment Page | Payment Form for Stripe <= 1.4.6 - Auth… |
brandonfire |
Payment Page | Payment Form for Stripe |
2026-02-14T06:42:26.021Z | 2026-02-14T06:42:26.021Z |
| CVE-2026-0727 |
5.4 (3.1)
|
Accordion and Accordion Slider <= 1.4.5 - Missing Auth… |
essentialplugin |
Accordion and Accordion Slider |
2026-02-14T06:42:26.388Z | 2026-02-14T06:42:26.388Z |
| CVE-2025-14873 |
4.3 (3.1)
|
LatePoint – Calendar Booking Plugin for Appointments a… |
latepoint |
LatePoint – Calendar Booking Plugin for Appointments and Events |
2026-02-14T06:42:26.760Z | 2026-02-14T06:42:26.760Z |
| CVE-2025-6792 |
5.3 (3.1)
|
One to one user Chat by WPGuppy <= 1.1.4 - Unauthentic… |
amentotechpvtltd |
One to one user Chat by WPGuppy |
2026-02-14T06:42:25.584Z | 2026-02-14T06:42:25.584Z |
| CVE-2026-1796 |
6.1 (3.1)
|
StyleBidet <= 1.0.0 - Reflected Cross-Site Scripting |
indextwo |
StyleBidet |
2026-02-14T06:42:24.992Z | 2026-02-14T06:42:24.992Z |
| CVE-2026-1932 |
5.3 (3.1)
|
Appointment Booking Calendar Plugin <= 1.0.2 - Missing… |
bssoftware |
Appointment Booking Calendar Plugin – Bookr |
2026-02-14T05:54:12.182Z | 2026-02-14T05:54:12.182Z |
| CVE-2026-2469 |
7.6 (3.1)
|
Versions of the package directorytree/imapengine … |
n/a |
directorytree/imapengine |
2026-02-14T05:00:05.646Z | 2026-02-14T05:00:05.646Z |
| CVE-2026-0692 |
7.5 (3.1)
|
BlueSnap Payment Gateway for WooCommerce <= 3.3.0 - Mi… |
bluesnap |
BlueSnap Payment Gateway for WooCommerce |
2026-02-14T04:35:43.208Z | 2026-02-14T04:35:43.208Z |
| CVE-2026-1983 |
4.3 (3.1)
|
SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site R… |
sourcez |
SEATT: Simple Event Attendance |
2026-02-14T04:35:42.467Z | 2026-02-14T04:35:42.467Z |
| CVE-2026-1912 |
6.4 (3.1)
|
Citations tools <= 0.3.2 - Authenticated (Contributor+… |
ulaulaman |
Citations tools |
2026-02-14T04:35:42.851Z | 2026-02-14T04:35:42.851Z |
| CVE-2026-1164 |
6.1 (3.1)
|
Easy Voice Mail <= 1.2.5 - Unauthenticated Stored Cros… |
phoenixstudiodz |
Easy Voice Mail |
2026-02-14T04:35:42.022Z | 2026-02-14T04:35:42.022Z |
| CVE-2026-1904 |
6.4 (3.1)
|
Simple Wp colorfull Accordion <= 1.0 - Authenticated (… |
nayon46 |
Simple Wp colorfull Accordion |
2026-02-14T04:35:41.605Z | 2026-02-14T04:35:41.605Z |
| CVE-2026-1754 |
6.1 (3.1)
|
personal-authors-category <= 0.3 - Reflected Cross-Sit… |
alexeyknyazev |
personal-authors-category |
2026-02-14T04:35:41.228Z | 2026-02-14T04:35:41.228Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1796 |
6.1 (3.1)
|
StyleBidet <= 1.0.0 - Reflected Cross-Site Scripting |
indextwo |
StyleBidet |
2026-02-14T06:42:24.992Z | 2026-02-14T06:42:24.992Z |
| CVE-2026-1795 |
6.1 (3.1)
|
Address Bar Ads <= 1.0.0 - Reflected Cross-Site Scripting |
sivenso |
Address Bar Ads |
2026-02-14T06:42:29.053Z | 2026-02-14T06:42:29.053Z |
| CVE-2026-1792 |
6.1 (3.1)
|
Geo Widet <= 1.0 - Reflected Cross-Site Scripting |
owencutajar |
Geo Widget |
2026-02-14T06:42:28.278Z | 2026-02-14T06:42:28.278Z |
| CVE-2026-1394 |
4.3 (3.1)
|
WP Quick Contact Us <= 1.0 - Cross-Site Request Forger… |
dmitritechs |
WP Quick Contact Us |
2026-02-14T06:42:31.697Z | 2026-02-14T06:42:31.697Z |
| CVE-2026-1306 |
9.8 (3.1)
|
midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File U… |
adminkov |
midi-Synth |
2026-02-14T06:42:34.875Z | 2026-02-14T06:42:34.875Z |
| CVE-2026-1303 |
5.3 (3.1)
|
MailChimp Campaigns <= 3.2.4 - Missing Authorization t… |
matthieuscarset |
MailChimp Campaigns |
2026-02-14T06:42:33.704Z | 2026-02-14T06:42:33.704Z |
| CVE-2026-1187 |
6.4 (3.1)
|
ZoomifyWP Free <= 1.1 - Authenticated (Contributor+) S… |
terrazoom |
ZoomifyWP Free |
2026-02-14T06:42:36.502Z | 2026-02-14T06:42:36.502Z |
| CVE-2026-1096 |
6.4 (3.1)
|
Best-wp-google-map <= 2.1 - Authenticated (Contributor… |
raju_ahmed |
Best-wp-google-map |
2026-02-14T06:42:32.532Z | 2026-02-14T06:42:32.532Z |
| CVE-2026-0753 |
7.2 (3.1)
|
Super Simple Contact Form <= 1.6.2 - Reflected Cross-S… |
bitacre |
Super Simple Contact Form |
2026-02-14T06:42:35.247Z | 2026-02-14T06:42:35.247Z |
| CVE-2026-0751 |
6.4 (3.1)
|
Payment Page | Payment Form for Stripe <= 1.4.6 - Auth… |
brandonfire |
Payment Page | Payment Form for Stripe |
2026-02-14T06:42:26.021Z | 2026-02-14T06:42:26.021Z |
| CVE-2026-0745 |
7.2 (3.1)
|
User Language Switch <= 1.6.10 - Authenticated (Admini… |
webilop |
User Language Switch |
2026-02-14T06:42:27.887Z | 2026-02-14T06:42:27.887Z |
| CVE-2026-0736 |
6.4 (3.1)
|
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.8 - Au… |
collectchat |
Chatbot for WordPress by Collect.chat ⚡️ |
2026-02-14T06:42:36.906Z | 2026-02-14T06:42:36.906Z |
| CVE-2026-0735 |
4.4 (3.1)
|
User Language Switch <= 1.6.10 - Authenticated (Admini… |
webilop |
User Language Switch |
2026-02-14T06:42:34.475Z | 2026-02-14T06:42:34.475Z |
| CVE-2026-0727 |
5.4 (3.1)
|
Accordion and Accordion Slider <= 1.4.5 - Missing Auth… |
essentialplugin |
Accordion and Accordion Slider |
2026-02-14T06:42:26.388Z | 2026-02-14T06:42:26.388Z |
| CVE-2026-0693 |
4.4 (3.1)
|
Allow HTML in Category Descriptions <= 1.2.4 - Authent… |
arnoesterhuizen |
Allow HTML in Category Descriptions |
2026-02-14T06:42:32.915Z | 2026-02-14T06:42:32.915Z |
| CVE-2026-0559 |
6.4 (3.1)
|
MasterStudy LMS WordPress Plugin – for Online Courses … |
stylemix |
MasterStudy LMS WordPress Plugin – for Online Courses and Education |
2026-02-14T06:42:32.152Z | 2026-02-14T06:42:32.152Z |
| CVE-2026-0557 |
6.4 (3.1)
|
WP Data Access <= 5.5.63 - Authenticated (Contributor+… |
peterschulznl |
WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps |
2026-02-14T06:42:30.165Z | 2026-02-14T06:42:30.165Z |
| CVE-2025-6792 |
5.3 (3.1)
|
One to one user Chat by WPGuppy <= 1.1.4 - Unauthentic… |
amentotechpvtltd |
One to one user Chat by WPGuppy |
2026-02-14T06:42:25.584Z | 2026-02-14T06:42:25.584Z |
| CVE-2025-15483 |
4.4 (3.1)
|
Link Hopper <= 2.5 - Authenticated (Administrator+) St… |
ajferg |
Link Hopper |
2026-02-14T06:42:34.100Z | 2026-02-14T06:42:34.100Z |
| CVE-2025-14873 |
4.3 (3.1)
|
LatePoint – Calendar Booking Plugin for Appointments a… |
latepoint |
LatePoint – Calendar Booking Plugin for Appointments and Events |
2026-02-14T06:42:26.760Z | 2026-02-14T06:42:26.760Z |
| CVE-2025-14852 |
4.3 (3.1)
|
MDirector Newsletter <= 4.5.8 - Cross-Site Request For… |
antevenio |
MDirector Newsletter |
2026-02-14T06:42:30.914Z | 2026-02-14T06:42:30.914Z |
| CVE-2026-1932 |
5.3 (3.1)
|
Appointment Booking Calendar Plugin <= 1.0.2 - Missing… |
bssoftware |
Appointment Booking Calendar Plugin – Bookr |
2026-02-14T05:54:12.182Z | 2026-02-14T05:54:12.182Z |
| CVE-2026-2469 |
7.6 (3.1)
|
Versions of the package directorytree/imapengine … |
n/a |
directorytree/imapengine |
2026-02-14T05:00:05.646Z | 2026-02-14T05:00:05.646Z |
| CVE-2026-2144 |
8.1 (3.1)
|
Magic Login Mail or QR Code <= 2.05 - Unauthenticated … |
katsushi-kawamori |
Magic Login Mail or QR Code |
2026-02-14T04:35:40.772Z | 2026-02-14T04:35:40.772Z |
| CVE-2026-2027 |
4.4 (3.1)
|
AMP Enhancer <= 1.0.49 - Authenticated (Administrator+… |
ampenhancer |
AMP Enhancer – Compatibility Layer for Official AMP Plugin |
2026-02-14T04:35:39.847Z | 2026-02-14T04:35:39.847Z |
| CVE-2026-1983 |
4.3 (3.1)
|
SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site R… |
sourcez |
SEATT: Simple Event Attendance |
2026-02-14T04:35:42.467Z | 2026-02-14T04:35:42.467Z |
| CVE-2026-1912 |
6.4 (3.1)
|
Citations tools <= 0.3.2 - Authenticated (Contributor+… |
ulaulaman |
Citations tools |
2026-02-14T04:35:42.851Z | 2026-02-14T04:35:42.851Z |
| CVE-2026-1904 |
6.4 (3.1)
|
Simple Wp colorfull Accordion <= 1.0 - Authenticated (… |
nayon46 |
Simple Wp colorfull Accordion |
2026-02-14T04:35:41.605Z | 2026-02-14T04:35:41.605Z |
| CVE-2026-1754 |
6.1 (3.1)
|
personal-authors-category <= 0.3 - Reflected Cross-Sit… |
alexeyknyazev |
personal-authors-category |
2026-02-14T04:35:41.228Z | 2026-02-14T04:35:41.228Z |
| CVE-2026-1164 |
6.1 (3.1)
|
Easy Voice Mail <= 1.2.5 - Unauthenticated Stored Cros… |
phoenixstudiodz |
Easy Voice Mail |
2026-02-14T04:35:42.022Z | 2026-02-14T04:35:42.022Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-13895 | The Top Position Google Finance plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin… | 2026-01-09T10:15:45.943 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13853 | The Nearby Now Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'd… | 2026-01-09T10:15:45.770 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13781 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 be… | 2026-01-09T10:15:45.613 | 2026-01-22T21:13:15.820 |
| fkie_cve-2025-13772 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.5.5, 18.6 be… | 2026-01-09T10:15:45.450 | 2026-01-22T17:25:24.950 |
| fkie_cve-2025-13761 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.3, and … | 2026-01-09T10:15:45.280 | 2026-01-22T17:26:37.803 |
| fkie_cve-2025-13729 | The Entry Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's … | 2026-01-09T10:15:45.087 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-11246 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6… | 2026-01-09T10:15:44.813 | 2026-01-22T17:28:53.690 |
| fkie_cve-2025-10569 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 … | 2026-01-09T10:15:44.590 | 2026-01-22T17:30:01.333 |
| fkie_cve-2026-0627 | The AMP for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploa… | 2026-01-09T09:15:47.883 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-21409 | Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-m… | 2026-01-09T08:15:58.297 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-69195 | A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the fil… | 2026-01-09T08:15:58.147 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-69194 | A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fail… | 2026-01-09T08:15:57.980 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14937 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2026-01-09T08:15:57.813 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14741 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to missing authorization to una… | 2026-01-09T08:15:57.660 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14657 | The Eventin – Event Manager, Events Calendar, Event Tickets and Registrations plugin for WordPress … | 2026-01-09T08:15:57.487 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14146 | The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve… | 2026-01-09T08:15:57.330 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13935 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… | 2026-01-09T08:15:57.170 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13934 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… | 2026-01-09T08:15:57.007 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13753 | The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to unauthorized… | 2026-01-09T08:15:56.833 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13628 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… | 2026-01-09T08:15:56.660 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-20976 | Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute … | 2026-01-09T07:16:04.263 | 2026-01-15T19:43:57.340 |
| fkie_cve-2026-20975 | Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local … | 2026-01-09T07:16:04.093 | 2026-01-15T19:43:07.930 |
| fkie_cve-2026-20974 | Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 a… | 2026-01-09T07:16:03.960 | 2026-02-02T18:17:46.427 |
| fkie_cve-2026-20973 | Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker… | 2026-01-09T07:16:03.817 | 2026-02-02T18:16:50.733 |
| fkie_cve-2026-20972 | Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows… | 2026-01-09T07:16:03.690 | 2026-01-15T19:40:59.913 |
| fkie_cve-2026-20971 | Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentiall… | 2026-01-09T07:16:03.547 | 2026-01-15T19:33:54.930 |
| fkie_cve-2026-20970 | Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to exec… | 2026-01-09T07:16:03.400 | 2026-01-15T19:33:43.077 |
| fkie_cve-2026-20969 | Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to a… | 2026-01-09T07:16:03.267 | 2026-01-15T19:41:02.810 |
| fkie_cve-2026-20968 | Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to exec… | 2026-01-09T07:16:03.107 | 2026-01-15T19:25:07.217 |
| fkie_cve-2026-0563 | The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress i… | 2026-01-09T07:16:02.910 | 2026-01-13T14:03:46.203 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-cchp-7wr7-98gf |
4.3 (3.1)
|
The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8xxh-rwxq-w2fc |
6.1 (3.1)
|
The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path i… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8jp5-qrhm-p8v5 |
6.1 (3.1)
|
The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the UR… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8gh7-8v8f-6f45 |
5.3 (3.1)
|
The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification o… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-6m5f-57jg-w742 |
9.8 (3.1)
|
The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-59rj-2hg2-476v |
6.1 (3.1)
|
The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL pat… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4q47-jxhq-7fj2 |
4.3 (3.1)
|
The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4p4p-xgjx-qcc9 |
5.3 (3.1)
|
The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4j5m-vc2q-295r |
6.4 (3.1)
|
The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-45r3-ggw3-q62c |
7.2 (3.1)
|
The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-3hmx-xfr5-8hq6 |
6.4 (3.1)
|
The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-qp2f-j6qh-vgqx |
4.4 (3.1)
|
The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hop_name… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-h9rw-4pm8-962h |
5.3 (3.1)
|
The One to one user Chat by WPGuppy plugin for WordPress is vulnerable to unauthorized access of da… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-67pm-pg4r-8ff4 |
4.3 (3.1)
|
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnera… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-3cx2-gf73-34wr |
4.3 (3.1)
|
The MDirector Newsletter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ve… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-xh3r-gpf9-2v95 |
7.5 (3.1)
|
The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authoriz… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-w8xp-8wjp-8rcf |
|
Rejected reason: Not used | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-rfq9-4wcm-64gh |
7.6 (3.1)
5.7 (4.0)
|
Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutraliz… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-qrpm-ph3r-w26w |
4.3 (3.1)
|
The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-gjxr-jc3p-683p |
5.3 (3.1)
|
The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized … | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-9pqx-6794-4f2c |
8.1 (3.1)
|
The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all v… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-7vxf-c7r5-6293 |
6.4 (3.1)
|
The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-72q5-4qh8-7556 |
6.1 (3.1)
|
The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mess… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-3fvr-9rw3-q3hc |
6.4 (3.1)
|
The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-335p-m75m-6r4h |
6.1 (3.1)
|
The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting … | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-26cj-h8gp-hcf9 |
4.4 (3.1)
|
The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Store… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-xv85-h7cp-9wff |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-w5rw-6rc6-433j |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-v88q-2f34-49rp |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-rfmq-rw5v-3vw4 |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-195 |
5.5 (3.1)
|
Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow… | apache-airflow | 2024-06-14T09:15:09+00:00 | 2025-01-19T16:22:56.419822+00:00 |
| pysec-2024-98 |
9.8 (3.1)
|
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine… | apache-submarine | 2024-06-12T15:15:00+00:00 | 2024-09-26T17:22:54.526846+00:00 |
| pysec-2024-97 |
9.8 (3.1)
|
** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine… | apache-submarine | 2024-06-12T14:15:00+00:00 | 2024-09-26T17:22:54.470974+00:00 |
| pysec-2024-236 |
6.1 (3.1)
|
Jupyter Server Proxy allows users to run arbitrary external processes alongside their not… | jupyter-server-proxy | 2024-06-11T22:15:09+00:00 | 2025-02-26T23:22:41.524251+00:00 |
| pysec-2024-177 |
9.8 (3.1)
|
Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach… | langflow | 2024-06-10T20:15:15+00:00 | 2025-01-19T01:52:23.722576+00:00 |
| pysec-2024-52 |
|
lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless … | authlib | 2024-06-09T19:15:00+00:00 | 2024-06-09T21:20:21.309692+00:00 |
| pysec-2024-76 |
7.5 (3.1)
|
An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of eboo… | ebookmeta | 2024-06-07T19:15:00+00:00 | 2024-09-13T21:22:04.531357+00:00 |
| pysec-2024-117 |
9.8 (3.1)
|
man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code … | dtale | 2024-06-06T19:16:00+00:00 | 2024-11-03T20:22:34.425699+00:00 |
| pysec-2024-110 |
4.7 (3.1)
|
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, … | scikit-learn | 2024-06-06T19:16:00+00:00 | 2024-10-24T21:22:05.950602+00:00 |
| pysec-2024-108 |
7.5 (3.1)
|
A path traversal vulnerability exists in the parisneo/lollms application, affecting versi… | lollms | 2024-06-06T19:16:00+00:00 | 2024-10-17T17:21:59.592496+00:00 |
| pysec-2024-242 |
7.5 (3.1)
|
A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically … | mlflow | 2024-06-06T19:15:55+00:00 | 2025-04-08T10:23:24.995743+00:00 |
| pysec-2024-194 |
6.1 (3.1)
|
A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5… | zenml | 2024-06-06T19:15:54+00:00 | 2025-01-19T13:22:31.835293+00:00 |
| pysec-2024-193 |
3.3 (3.1)
|
An issue was discovered in zenml-io/zenml versions up to and including 0.55.4. Due to imp… | zenml | 2024-06-06T19:15:53+00:00 | 2025-01-19T13:22:31.701775+00:00 |
| pysec-2024-170 |
4.8 (3.1)
|
A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml re… | zenml | 2024-06-06T19:15:53+00:00 | 2025-01-18T19:19:08.253212+00:00 |
| pysec-2024-169 |
6.5 (3.1)
|
An improper authorization vulnerability exists in the zenml-io/zenml repository, specific… | zenml | 2024-06-06T19:15:53+00:00 | 2025-01-18T19:19:08.205431+00:00 |
| pysec-2024-239 |
8.8 (3.1)
|
A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to im… | mlflow | 2024-06-06T19:15:51+00:00 | 2025-04-08T10:23:24.852109+00:00 |
| pysec-2024-118 |
4.7 (3.1)
|
A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langc… | langchain | 2024-06-06T19:15:00+00:00 | 2024-11-03T20:22:34.854295+00:00 |
| pysec-2024-105 |
3.1 (3.1)
|
A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55… | zenml | 2024-06-06T19:15:00+00:00 | 2024-10-11T17:21:29.672975+00:00 |
| pysec-2024-184 |
7.5 (3.1)
|
A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio ve… | gradio | 2024-06-06T18:15:18+00:00 | 2025-01-19T04:23:00.017053+00:00 |
| pysec-2024-165 |
7.5 (3.1)
|
The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on W… | jupyter-server | 2024-06-06T16:15:11+00:00 | 2025-01-18T19:19:04.842426+00:00 |
| pysec-2024-166 |
|
Nautobot is a Network Source of Truth and Network Automation Platform. A user with permis… | nautobot | 2024-05-28T23:15:17+00:00 | 2025-01-18T19:19:06.277166+00:00 |
| pysec-2024-258 |
|
In scrapy/scrapy, an issue was identified where the Authorization header is not removed d… | scrapy | 2024-05-20T08:15:08+00:00 | 2025-07-15T17:37:50.051730+00:00 |
| pysec-2024-244 |
7.5 (3.1)
|
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a by… | mlflow | 2024-05-16T09:15:14+00:00 | 2025-04-08T10:23:25.092581+00:00 |
| pysec-2024-51 |
|
A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, whe… | mlflow | 2024-05-16T09:15:00+00:00 | 2024-05-16T11:19:52.866536+00:00 |
| pysec-2024-237 |
9.4 (3.1)
|
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versio… | octoprint | 2024-05-14T16:17:12+00:00 | 2025-03-05T17:22:29.121263+00:00 |
| pysec-2024-185 |
|
Nebari through 2024.4.1 prints the temporary Keycloak root password. | nebari | 2024-05-06T00:15:10+00:00 | 2025-01-19T04:23:00.951638+00:00 |
| pysec-2024-175 |
|
WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because t… | wordops | 2024-05-06T00:15:10+00:00 | 2025-01-18T22:21:44.991242+00:00 |
| pysec-2024-255 |
|
Gradio before 4.20 allows credential leakage on Windows. | gradio | 2024-05-05T20:15:07+00:00 | 2025-06-17T19:21:48.983901+00:00 |
| pysec-2024-233 |
|
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consump… | python-jose | 2024-04-26T00:15:09+00:00 | 2025-02-18T19:20:15.511369+00:00 |
| pysec-2024-232 |
|
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key f… | python-jose | 2024-04-26T00:15:09+00:00 | 2025-02-18T19:20:15.468012+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-738 | Malicious code in tablescene (PyPI) | 2026-02-04T10:24:43Z | 2026-02-04T18:51:22Z |
| mal-2026-737 | Malicious code in remark-gfm-v4 (npm) | 2026-02-04T09:46:59Z | 2026-02-06T03:05:26Z |
| mal-2026-736 | Malicious code in ggajsvjsg (npm) | 2026-02-04T09:46:59Z | 2026-02-06T03:05:24Z |
| mal-2026-735 | Malicious code in docusaurus-plugin-launchdarkly (npm) | 2026-02-04T09:46:59Z | 2026-02-06T03:05:23Z |
| mal-2026-734 | Malicious code in xpack-subscription-test (npm) | 2026-02-04T09:40:53Z | 2026-02-06T03:05:27Z |
| mal-2026-733 | Malicious code in deuro-landing-page (npm) | 2026-02-04T09:21:07Z | 2026-02-06T03:05:23Z |
| mal-2026-731 | Malicious code in cicd-ppe-test (PyPI) | 2026-02-04T07:33:21Z | 2026-02-04T07:33:21Z |
| mal-2026-732 | Malicious code in gridifys (PyPI) | 2026-02-04T07:29:56Z | 2026-02-04T07:29:56Z |
| mal-2026-717 | Malicious code in partnerss (npm) | 2026-02-04T05:25:27Z | 2026-02-06T03:05:25Z |
| mal-2026-725 | Malicious code in json-mapping-source (npm) | 2026-02-04T05:25:15Z | 2026-02-06T03:05:24Z |
| mal-2026-720 | Malicious code in chai-grab (npm) | 2026-02-04T05:22:34Z | 2026-02-06T03:05:23Z |
| mal-2026-730 | Malicious code in zappr (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:28Z |
| mal-2026-729 | Malicious code in zalando-consent-api (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:28Z |
| mal-2026-728 | Malicious code in z-shop-ui (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| mal-2026-727 | Malicious code in z-shop-js-env (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| mal-2026-726 | Malicious code in z-shop-event-bus (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| mal-2026-721 | Malicious code in dotenv-embedded (npm) | 2026-02-04T05:11:23Z | 2026-02-06T03:05:23Z |
| mal-2026-719 | Malicious code in chai-async-promised (npm) | 2026-02-04T05:11:23Z | 2026-02-06T03:05:23Z |
| mal-2026-724 | Malicious code in https-emailjs (npm) | 2026-02-04T05:02:52Z | 2026-02-06T03:05:24Z |
| mal-2026-723 | Malicious code in http-emailjs (npm) | 2026-02-04T05:02:52Z | 2026-02-06T03:05:24Z |
| mal-2026-718 | Malicious code in @fxinternal/netdiagnostics (npm) | 2026-02-04T05:00:18Z | 2026-02-06T03:05:22Z |
| mal-2026-722 | Malicious code in express-groups-routes (npm) | 2026-02-04T04:56:58Z | 2026-02-06T03:05:23Z |
| mal-2026-716 | Malicious code in si-wsl (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:26Z |
| mal-2026-715 | Malicious code in rreact-sdk (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:26Z |
| mal-2026-714 | Malicious code in reactt-sdkk (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:26Z |
| mal-2026-713 | Malicious code in react-sdkk (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:26Z |
| mal-2026-712 | Malicious code in ongose (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:25Z |
| mal-2026-711 | Malicious code in mongoose_update (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:25Z |
| mal-2026-709 | Malicious code in mongooose_update (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:25Z |
| mal-2026-710 | Malicious code in mongooose_updated (npm) | 2026-02-04T04:41:10Z | 2026-02-06T03:05:25Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2700 | CODESYS Control und Development System: Mehrere Schwachstellen | 2025-11-30T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2697 | Devolutions Remote Desktop Manager und Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-30T23:00:00.000+00:00 | 2025-11-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2694 | MariaDB: Schwachstelle ermöglicht Codeausführung | 2025-11-27T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2693 | CUPS: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-27T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2682 | Tinyproxy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-26T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2677 | OPNsense: Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-25T23:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2676 | GeoServer: Mehrere Schwachstellen | 2025-11-25T23:00:00.000+00:00 | 2025-12-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2672 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-24T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2670 | Fluent Bit: Mehrere Schwachstellen | 2025-11-24T23:00:00.000+00:00 | 2025-11-25T23:00:00.000+00:00 |
| wid-sec-w-2025-2667 | Janitza UMG 96-PA und UMG 96-PA-MID+: Schwachstelle ermöglicht Denial of Service | 2025-11-23T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2666 | vllm und PyTorch: Schwachstelle ermöglicht DoS und potenzielle Codeausführung | 2025-11-23T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2663 | libpng: Mehrere Schwachstellen | 2025-11-23T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2661 | Google Cloud Platform (Looker): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2025-11-23T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2658 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2657 | WebKitGTK: Mehrere Schwachstellen | 2025-11-20T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2655 | CUPS-Filters: Schwachstelle ermöglicht Codeausführung | 2025-11-20T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2653 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2652 | Red Hat Satellite: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2651 | GnuTLS: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-19T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2649 | Google Cloud Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2647 | SonicWall Email Security: Mehrere Schwachstellen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2645 | Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2643 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2640 | SonicWall SSL-VPN: Schwachstelle ermöglicht Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2638 | Grub: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2637 | Rsync: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-18T23:00:00.000+00:00 | 2026-01-06T23:00:00.000+00:00 |
| wid-sec-w-2025-2636 | OpenVPN: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2635 | Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Denial of Service | 2025-11-18T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2616 | libvirt: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-17T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2613 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung oder DoS | 2025-11-17T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0289 | Kwetsbaarheden verholpen in Omnissa Workspace ONE UEM | 2025-09-12T15:23:20.359090Z | 2025-09-12T15:23:20.359090Z |
| ncsc-2025-0288 | Kwetsbaarheden verholpen in GitLab CE/EE | 2025-09-12T14:49:52.285990Z | 2025-09-12T14:49:52.285990Z |
| ncsc-2025-0287 | Kwetsbaarheden verholpen in Cisco NX-OS Software | 2025-09-11T08:18:37.706725Z | 2025-09-11T08:18:37.706725Z |
| ncsc-2025-0286 | Kwetsbaarheden verholpen in Cisco IOS XR Software | 2025-09-11T08:14:36.960621Z | 2025-09-11T08:14:36.960621Z |
| ncsc-2025-0285 | Kwetsbaarheden verholpen in Adobe Acrobat Reader | 2025-09-10T11:01:43.415733Z | 2025-09-10T11:01:43.415733Z |
| ncsc-2025-0284 | Kwetsbaarheid verholpen in Adobe Commerce en Magento | 2025-09-10T10:49:56.787627Z | 2025-09-10T10:49:56.787627Z |
| ncsc-2025-0283 | Kwetsbaarheden verholpen in Adobe Experience Manager | 2025-09-10T10:46:54.808276Z | 2025-09-10T10:46:54.808276Z |
| ncsc-2025-0282 | Kwetsbaarheid verholpen in Adobe Dreamweaver | 2025-09-10T10:38:24.553749Z | 2025-09-10T10:38:24.553749Z |
| ncsc-2025-0281 | Kwetsbaarheid verholpen in Adobe ColdFusion | 2025-09-10T10:24:09.409410Z | 2025-09-10T10:24:09.409410Z |
| ncsc-2025-0280 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2025-09-09T18:27:39.956624Z | 2025-09-09T18:27:39.956624Z |
| ncsc-2025-0279 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-09-09T18:25:53.539582Z | 2025-09-09T18:25:53.539582Z |
| ncsc-2025-0278 | Kwetsbaarheden verholpen in Microsoft Office | 2025-09-09T18:23:23.763765Z | 2025-09-09T18:23:23.763765Z |
| ncsc-2025-0277 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-09-09T18:22:30.766030Z | 2025-09-09T18:22:30.766030Z |
| ncsc-2025-0276 | Kwetsbaarheden verholpen in Schneider Electric Saitel | 2025-09-09T15:16:00.122647Z | 2025-09-09T15:16:00.122647Z |
| ncsc-2025-0275 | Kwetsbaarheden verholpen in SAP producten | 2025-09-09T11:12:22.945466Z | 2025-09-09T11:12:22.945466Z |
| ncsc-2025-0274 | Kwetsbaarheden verholpen in Siemens producten | 2025-09-09T11:06:34.785987Z | 2025-09-09T11:06:34.785987Z |
| ncsc-2025-0273 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-09-04T08:15:14.806733Z | 2025-09-04T08:15:14.806733Z |
| ncsc-2025-0272 | Kwetsbaarheid verholpen in FreePBX | 2025-08-29T08:37:54.893549Z | 2025-08-29T08:37:54.893549Z |
| ncsc-2025-0271 | Kwetsbaarheden verholpen in Arcserve Unified Data Protection | 2025-08-28T12:56:02.228992Z | 2025-08-28T12:56:02.228992Z |
| ncsc-2025-0270 | Kwetsbaarheden verholpen in Cisco NX-OS Software | 2025-08-28T08:36:20.358948Z | 2025-08-28T08:36:20.358948Z |
| ncsc-2025-0269 | Kwetsbaarheden verholpen in IBM Cognos Command Center | 2025-08-27T13:10:59.965070Z | 2025-08-27T13:10:59.965070Z |
| ncsc-2025-0268 | Kwetsbaarheden verholpen in Citrix NetScaler ADC en Gateway | 2025-08-26T13:11:42.925280Z | 2025-08-26T17:34:30.428328Z |
| ncsc-2025-0267 | Kwetsbaarheden verholpen in Foxit Reader | 2025-08-25T11:26:17.380689Z | 2025-08-25T11:26:17.380689Z |
| ncsc-2025-0266 | Kwetsbaarheid verholpen in Apple MacOS, iOS en iPadOS | 2025-08-22T05:49:07.556948Z | 2025-08-25T12:16:10.430485Z |
| ncsc-2025-0265 | Kwetsbaarheden verholpen in Commvault | 2025-08-20T12:15:48.655099Z | 2025-08-20T12:15:48.655099Z |
| ncsc-2025-0264 | Kwetsbaarheden verholpen in Cisco Secure Firewall Software | 2025-08-15T08:52:41.012811Z | 2025-08-15T08:52:41.012811Z |
| ncsc-2025-0263 | Kwetsbaarheden verholpen in N-able N-Central | 2025-08-14T12:38:27.349283Z | 2025-08-14T12:38:27.349283Z |
| ncsc-2025-0262 | Kwetsbaarheden verholpen in Xerox FreeFlow Core | 2025-08-14T07:00:50.843871Z | 2025-08-14T07:00:50.843871Z |
| ncsc-2025-0261 | Kwetsbaarheden verholpen in Adobe InCopy | 2025-08-13T10:13:59.220398Z | 2025-08-13T10:13:59.220398Z |
| ncsc-2025-0260 | Kwetsbaarheden verholpen in Adobe Framemaker | 2025-08-13T10:12:35.130811Z | 2025-08-13T10:12:35.130811Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-333468 | SSA-333468: Multiple Vulnerabilities in InterMesh Subscriber Devices | 2024-10-23T00:00:00Z | 2024-10-23T00:00:00Z |
| ssa-438590 | SSA-438590: Buffer Overflow Vulnerability in Siveillance Video Camera Drivers | 2024-10-10T00:00:00Z | 2024-10-10T00:00:00Z |
| ssa-959281 | SSA-959281: XML File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-876787 | SSA-876787: Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs | 2024-10-08T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-852501 | SSA-852501: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-850560 | SSA-850560: Use of 4-Digit PIN in SENTRON PAC3200 Devices | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-626178 | SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-583523 | SSA-583523: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2024-10-08T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-540493 | SSA-540493: Kiosk Mode Escape Vulnerability in HiMed Cockpit Devices Before V11.6.2 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-430425 | SSA-430425: Multiple Vulnerabilities in SINEC Security Monitor before V4.9.0 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-426509 | SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim | 2024-10-08T00:00:00Z | 2025-06-17T00:00:00Z |
| ssa-368868 | SSA-368868: Multiple Vulnerabilities in WibuKey for Windows | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-340240 | SSA-340240: Denial of Service Vulnerability in SIRIUS 3RV2921-5M | 2024-10-08T00:00:00Z | 2025-06-10T00:00:00Z |
| ssa-254396 | SSA-254396: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-054046 | SSA-054046: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs | 2024-10-08T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-969738 | SSA-969738: Denial of Service Vulnerability in SIMATIC S7-200 SMART Devices | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-869574 | SSA-869574: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP2 | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-773256 | SSA-773256: Impact of Socket.IO CVE-2024-38355 on Siemens Industrial Products | 2024-09-10T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-765405 | SSA-765405: Multiple Vulnerabilities in SIMATIC RFID Readers | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-721642 | SSA-721642: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4 | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-673996 | SSA-673996: Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products | 2024-09-10T00:00:00Z | 2025-12-09T00:00:00Z |
| ssa-629254 | SSA-629254: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems | 2024-09-10T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-446545 | SSA-446545: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products | 2024-09-10T00:00:00Z | 2025-07-08T00:00:00Z |
| ssa-427715 | SSA-427715: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-423808 | SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-417159 | SSA-417159: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2 | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-359713 | SSA-359713: Authorization Bypass Vulnerability in Industrial Edge Management | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-342438 | SSA-342438: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-103653 | SSA-103653: Denial-of-Service Vulnerability in Automation License Manager | 2024-09-10T00:00:00Z | 2025-05-13T00:00:00Z |
| ssa-097786 | SSA-097786: Insertion of Sensitive Information into Log File Vulnerability in SINUMERIK systems | 2024-09-10T00:00:00Z | 2024-09-10T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:2070 | Red Hat Security Advisory: firefox security update | 2026-02-05T10:46:50+00:00 | 2026-02-09T13:27:19+00:00 |
| rhsa-2026:2069 | Red Hat Security Advisory: firefox security update | 2026-02-05T10:39:09+00:00 | 2026-02-09T13:27:18+00:00 |
| rhsa-2026:2048 | Red Hat Security Advisory: freerdp security update | 2026-02-05T10:29:20+00:00 | 2026-02-13T08:42:12+00:00 |
| rhsa-2026:2049 | Red Hat Security Advisory: libsoup security update | 2026-02-05T10:09:21+00:00 | 2026-02-12T13:28:16+00:00 |
| rhsa-2026:2042 | Red Hat Security Advisory: brotli security update | 2026-02-05T09:50:39+00:00 | 2026-02-13T15:41:07+00:00 |
| rhsa-2026:2043 | Red Hat Security Advisory: firefox security update | 2026-02-05T09:43:00+00:00 | 2026-02-09T13:27:16+00:00 |
| rhsa-2026:2060 | Red Hat Security Advisory: python-s3transfer security update | 2026-02-05T09:42:45+00:00 | 2026-02-12T22:50:03+00:00 |
| rhsa-2026:2047 | Red Hat Security Advisory: firefox security update | 2026-02-05T09:31:05+00:00 | 2026-02-09T13:27:18+00:00 |
| rhsa-2026:2044 | Red Hat Security Advisory: firefox security update | 2026-02-05T09:15:14+00:00 | 2026-02-09T13:27:18+00:00 |
| rhsa-2026:2041 | Red Hat Security Advisory: firefox security update | 2026-02-05T08:47:44+00:00 | 2026-02-09T13:26:59+00:00 |
| rhsa-2026:2039 | Red Hat Security Advisory: fontforge security update | 2026-02-05T07:44:49+00:00 | 2026-02-11T18:58:53+00:00 |
| rhsa-2026:2034 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update | 2026-02-05T06:37:04+00:00 | 2026-02-16T01:37:08+00:00 |
| rhsa-2026:2007 | Red Hat Security Advisory: libsoup security update | 2026-02-05T04:12:08+00:00 | 2026-02-12T13:28:14+00:00 |
| rhsa-2026:2008 | Red Hat Security Advisory: libsoup security update | 2026-02-05T03:46:53+00:00 | 2026-02-12T13:28:14+00:00 |
| rhsa-2026:2006 | Red Hat Security Advisory: libsoup3 security update | 2026-02-05T03:37:38+00:00 | 2026-02-12T13:28:15+00:00 |
| rhsa-2026:2005 | Red Hat Security Advisory: libsoup security update | 2026-02-05T03:34:18+00:00 | 2026-02-12T13:28:16+00:00 |
| rhsa-2026:1967 | Red Hat Security Advisory: iperf3 security update | 2026-02-04T21:10:32+00:00 | 2026-02-10T19:02:39+00:00 |
| rhsa-2026:1913 | Red Hat Security Advisory: util-linux security update | 2026-02-04T20:08:57+00:00 | 2026-02-12T19:30:14+00:00 |
| rhsa-2026:1893 | Red Hat Security Advisory: python3.11 security update | 2026-02-04T19:51:47+00:00 | 2026-02-11T14:41:31+00:00 |
| rhsa-2026:1892 | Red Hat Security Advisory: python3.11 security update | 2026-02-04T19:41:47+00:00 | 2026-02-11T14:41:35+00:00 |
| rhsa-2026:1939 | Red Hat Security Advisory: python3.12-wheel security update | 2026-02-04T19:31:27+00:00 | 2026-02-16T07:33:03+00:00 |
| rhsa-2026:1948 | Red Hat Security Advisory: libsoup security update | 2026-02-04T19:21:37+00:00 | 2026-02-12T13:28:15+00:00 |
| rhsa-2026:1957 | Red Hat Security Advisory: python3.12-urllib3 security update | 2026-02-04T19:16:17+00:00 | 2026-02-16T09:02:30+00:00 |
| rhsa-2026:1946 | Red Hat Security Advisory: kernel-rt security update | 2026-02-04T18:55:17+00:00 | 2026-02-12T19:28:15+00:00 |
| rhsa-2026:1903 | Red Hat Security Advisory: fence-agents security update | 2026-02-04T18:50:17+00:00 | 2026-02-11T01:33:27+00:00 |
| rhsa-2026:1539 | Red Hat Security Advisory: OpenShift Container Platform 4.19.23 bug fix and security update | 2026-02-04T18:43:37+00:00 | 2026-02-12T13:27:40+00:00 |
| rhsa-2026:1909 | Red Hat Security Advisory: kernel security update | 2026-02-04T18:39:12+00:00 | 2026-02-12T19:28:14+00:00 |
| rhsa-2026:1908 | Red Hat Security Advisory: opentelemetry-collector security update | 2026-02-04T16:10:41+00:00 | 2026-02-16T01:37:06+00:00 |
| rhsa-2026:1879 | Red Hat Security Advisory: kernel security update | 2026-02-04T16:06:23+00:00 | 2026-02-12T19:28:35+00:00 |
| rhsa-2026:1942 | Red Hat Security Advisory: Red Hat Quay 3.15.3 | 2026-02-04T15:43:51+00:00 | 2026-02-16T09:02:29+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-282-01 | Hitachi Energy Asset Suite (Update A) | 2025-09-30T08:50:13.000000Z | 2025-10-28T09:50:00.000000Z |
| icsa-25-273-06 | National Instruments Circuit Design Suite | 2025-09-30T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-273-05 | OpenPLC_V3 | 2025-09-30T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-273-04 | Festo Controller CECC-S,-LK,-D Family Firmware (Update A) | 2025-09-30T06:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-273-01 | MegaSys Enterprises Telenium Online Web Application | 2025-09-30T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-273-07 | LG Innotek Camera Multiple Models | 2025-09-30T05:00:00.000000Z | 2025-09-30T05:00:00.000000Z |
| va-25-273-01 | Microsoft Windows inconsistent driver blocking | 2025-09-30T00:00:00Z | 2025-09-30T00:00:00Z |
| va-25-272-01 | Medical Informatics Engineering Enterprise Health multiple vulnerabilities | 2025-09-29T00:00:00Z | 2025-09-29T00:00:00Z |
| icsa-25-268-01 | Dingtian DT-R002 | 2025-09-25T06:00:00.000000Z | 2025-09-25T06:00:00.000000Z |
| icsa-25-266-04 | Viessmann Vitogate 300 | 2025-09-23T06:00:00.000000Z | 2025-09-23T06:00:00.000000Z |
| icsa-25-266-02 | Mitsubishi Electric MELSEC-Q Series CPU Module | 2025-09-23T06:00:00.000000Z | 2025-09-23T06:00:00.000000Z |
| icsa-25-266-01 | AutomationDirect CLICK PLUS | 2025-09-23T06:00:00.000000Z | 2025-09-23T06:00:00.000000Z |
| va-25-265-01 | Airship AI MFA bypass and default credentials vulnerabilities | 2025-09-22T14:06:13Z | 2025-09-22T14:06:13Z |
| icsa-25-261-07 | Dover Fueling Solutions ProGauge MagLink LX4 Devices | 2025-09-18T06:00:00.000000Z | 2025-09-18T06:00:00.000000Z |
| icsa-25-261-06 | Cognex In-Sight Explorer and In-Sight Camera Firmware | 2025-09-18T06:00:00.000000Z | 2025-09-18T06:00:00.000000Z |
| icsa-25-261-03 | Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit | 2025-09-18T06:00:00.000000Z | 2025-09-18T06:00:00.000000Z |
| icsa-25-261-02 | Westermo Network Technologies WeOS 5 | 2025-09-18T06:00:00.000000Z | 2025-09-18T06:00:00.000000Z |
| icsa-25-261-01 | Westermo Network Technologies WeOS 5 | 2025-09-18T06:00:00.000000Z | 2025-09-18T06:00:00.000000Z |
| icsa-25-259-07 | Delta Electronics DIALink | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| icsa-25-259-06 | Siemens Multiple Industrial Products | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| icsa-25-259-05 | Siemens OpenSSL Vulnerability in Industrial Products | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| icsa-25-259-04 | Siemens RUGGEDCOM, SINEC NMS, and SINEMA | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| icsa-25-259-03 | Siemens SIMATIC NET CP, SINEMA and SCALANCE | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| icsa-25-259-02 | Hitachi Energy RTU500 series | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| va-25-259-01 | CISA Thorium multiple vulnerabilities | 2025-09-16T00:00:00Z | 2025-09-16T00:00:00Z |
| va-25-258-01 | psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse | 2025-09-15T18:41:08Z | 2025-09-15T18:41:08Z |
| icsa-25-254-10 | Daikin Europe N.V Security Gateway | 2025-09-11T06:00:00.000000Z | 2025-09-18T06:00:00.000000Z |
| va-25-252-01 | OPEXUS FOIAXpress Public Access Link (PAL) SQL injection | 2025-09-09T20:48:26Z | 2025-09-09T20:48:26Z |
| icsa-25-252-09 | Rockwell Automation 1783-NATR | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-08 | Rockwell Automation Analytics LogixAI | 2025-09-09T06:00:00.000000Z | 2025-10-10T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-phone-info-disc-yyxswstk | Cisco Video Phone 8875 and Desk Phone 9800 Series Information Disclosure Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-esa-mailpol-bypass-5nvcjzmw | Cisco Secure Email Gateway Email Filter Bypass Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-broadworks-xss-gdpgj58p | Cisco BroadWorks Application Delivery Platform Cross-Site Scripting Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-swa-range-bypass-2bsehysu | Cisco Secure Web Appliance Range Request Bypass Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-snmp-dos-sdxnsucw | Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-03-12T15:22:33+00:00 |
| cisco-sa-ise-xss-42tgsdmg | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-ise-multivuls-ftw9aoxf | Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-10T20:23:50+00:00 |
| cisco-sa-expressway-xss-uexuzrew | Cisco Expressway Series Cross-Site Scripting Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-esa-sma-xss-wck2wcug | Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-esa-sma-wsa-snmp-inf-fqpvl8sx | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance SNMP Polling Information Disclosure Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-esa-sma-wsa-multi-ykujhs34 | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-07T19:21:57+00:00 |
| cisco-sa-cmm-privesc-uy2vf8pc | Cisco Meeting Management REST API Privilege Escalation Vulnerability | 2025-01-22T16:00:00+00:00 | 2025-01-22T16:00:00+00:00 |
| cisco-sa-clamav-ole2-h549rpha | ClamAV OLE2 File Format Decryption Denial of Service Vulnerability | 2025-01-22T16:00:00+00:00 | 2025-01-22T16:00:00+00:00 |
| cisco-sa-bw-sip-dos-msysbrmt | Cisco BroadWorks SIP Denial of Service Vulnerability | 2025-01-22T16:00:00+00:00 | 2025-01-22T16:00:00+00:00 |
| cisco-sa-xwork-xss-kccg7wwu | Cisco Crosswork Network Controller Stored Cross-Site Scripting Vulnerabilities | 2025-01-08T16:00:00+00:00 | 2025-01-08T16:00:00+00:00 |
| cisco-sa-thousandeyes-cert-pqtjuv9n | Cisco ThousandEyes Endpoint Agent for MacOS and RoomOS Certificate Validation Vulnerability | 2025-01-08T16:00:00+00:00 | 2025-01-13T22:15:18+00:00 |
| cisco-sa-cspc-xss-cdojzyh | Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities | 2025-01-08T16:00:00+00:00 | 2025-01-08T16:00:00+00:00 |
| cisco-sa-nxos-image-sig-bypas-pqdrqvjl | Cisco NX-OS Software Image Verification Bypass Vulnerability | 2024-12-04T16:00:00+00:00 | 2025-04-07T16:43:32+00:00 |
| cisco-sa-phone-infodisc-sbyqqvbg | Cisco 7800, 8800, and 9800 Series Phones Information Disclosure Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-ndfc-sqli-cyppaxrl | Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-mpp-xss-8tav2tvf | Cisco 6800, 7800, 8800, and 9800 Series Phones with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-ise-multi-vulns-af544ed5 | Cisco Identity Services Engine Vulnerabilities | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-ise-multi-vuln-dbqdwry | Cisco Identity Services Engine Vulnerabilities | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-ise-auth-bypass-bbrf7mke | Cisco Identity Services Engine Authorization Bypass and Cross-Site Scripting Vulnerabilities | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-imp-inf-disc-cupkua5n | Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-esa-wsa-sma-xss-zym3f49n | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-epnmpi-sxss-yyf2zkxs | Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-ece-dos-oqb9ufev | Cisco Enterprise Chat and Email Denial of Service Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-cucm-xss-svckmmw | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-cmm-info-disc-9zemahga | Cisco Meeting Management Information Disclosure Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-20804 | Windows Hello Tampering Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20803 | Microsoft SQL Server Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-0386 | Windows Deployment Services Remote Code Execution Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-21444 | libtpms returns wrong initialization vector when certain symmetric ciphers are used | 2026-01-02T00:00:00.000Z | 2026-01-07T01:01:25.000Z |
| msrc_cve-2025-68766 | irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() | 2026-01-02T00:00:00.000Z | 2026-01-08T01:40:49.000Z |
| msrc_cve-2025-68765 | mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() | 2026-01-02T00:00:00.000Z | 2026-01-06T01:01:27.000Z |
| msrc_cve-2025-68764 | NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags | 2026-01-02T00:00:00.000Z | 2026-01-06T01:01:16.000Z |
| msrc_cve-2025-68763 | crypto: starfive - Correctly handle return of sg_nents_for_len | 2026-01-02T00:00:00.000Z | 2026-01-06T01:01:48.000Z |
| msrc_cve-2025-68759 | wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() | 2026-01-02T00:00:00.000Z | 2026-01-06T01:01:38.000Z |
| msrc_cve-2025-68758 | backlight: led-bl: Add devlink to supplier LEDs | 2026-01-02T00:00:00.000Z | 2026-01-06T01:01:59.000Z |
| msrc_cve-2025-68757 | drm/vgem-fence: Fix potential deadlock on release | 2026-01-02T00:00:00.000Z | 2026-01-06T01:01:54.000Z |
| msrc_cve-2025-68756 | block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock | 2026-01-02T00:00:00.000Z | 2026-01-06T01:02:04.000Z |
| msrc_cve-2025-68755 | staging: most: remove broken i2c driver | 2026-01-02T00:00:00.000Z | 2026-01-06T01:01:22.000Z |
| msrc_cve-2025-68753 | ALSA: firewire-motu: add bounds check in put_user loop for DSP events | 2026-01-02T00:00:00.000Z | 2026-01-08T01:40:44.000Z |
| msrc_cve-2025-65046 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-18T08:00:00.000Z |
| msrc_cve-2025-65041 | Microsoft Partner Center Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-18T08:00:00.000Z |
| msrc_cve-2025-65037 | Azure Container Apps Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-18T08:00:00.000Z |
| msrc_cve-2025-64680 | Windows DWM Core Library Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-23T08:00:00.000Z |
| msrc_cve-2025-64679 | Windows DWM Core Library Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2026-01-14T08:00:00.000Z |
| msrc_cve-2025-64678 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2026-01-14T08:00:00.000Z |
| msrc_cve-2025-64677 | Office Out-of-Box Experience Spoofing Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-18T08:00:00.000Z |
| msrc_cve-2025-64676 | Microsoft Purview eDiscovery Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-18T08:00:00.000Z |
| msrc_cve-2025-64675 | Azure Cosmos DB Spoofing Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-18T08:00:00.000Z |
| msrc_cve-2025-64673 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-64672 | Microsoft SharePoint Server Spoofing Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-64671 | GitHub Copilot for Jetbrains Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-64670 | Windows DirectX Information Disclosure Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-64669 | Windows Admin Center Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-11T08:00:00.000Z |
| msrc_cve-2025-64667 | Microsoft Exchange Server Spoofing Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-64666 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10045-1 | liburiparser1-1.0.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10044-1 | python311-pypdf-6.6.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10043-1 | python311-filelock-3.20.3-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10042-1 | mcphost-0.32.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10041-1 | libsoup-2_4-1-2.74.3-14.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10040-1 | libsoup-3_0-0-3.6.5-11.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10039-1 | kernel-devel-6.18.5-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10038-1 | fluidsynth-2.5.2-2.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10037-1 | firefox-esr-140.7.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10036-1 | cockpit-repos-4.6-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:20018-1 | Security update for glib2 | 2026-01-12T11:52:23Z | 2026-01-12T11:52:23Z |
| opensuse-su-2026:20014-1 | Security update for MozillaFirefox | 2026-01-12T11:35:13Z | 2026-01-12T11:35:13Z |
| opensuse-su-2026:20017-1 | Security update for libpng16 | 2026-01-12T11:14:46Z | 2026-01-12T11:14:46Z |
| opensuse-su-2026:20016-1 | Security update for libmicrohttpd | 2026-01-12T11:14:46Z | 2026-01-12T11:14:46Z |
| opensuse-su-2026:20015-1 | Security update for python-tornado6 | 2026-01-12T10:29:37Z | 2026-01-12T10:29:37Z |
| opensuse-su-2026:10035-1 | teleport-17.7.13-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10034-1 | python311-Authlib-1.6.6-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10033-1 | libtasn1-6-32bit-4.21.0-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10032-1 | libpcap-devel-1.10.6-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10031-1 | kubelogin-0.2.14-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10030-1 | k6-1.5.0-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10029-1 | istioctl-1.28.2-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10028-1 | ffmpeg-7-7.1.3-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10027-1 | ffmpeg-4-4.4.6-10.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:20022-1 | Security update for matio | 2026-01-11T17:15:13Z | 2026-01-11T17:15:13Z |
| opensuse-su-2026:20013-1 | Security update for avahi | 2026-01-11T16:54:00Z | 2026-01-11T16:54:00Z |
| opensuse-su-2026:20020-1 | Security update for chromium | 2026-01-10T02:17:54Z | 2026-01-10T02:17:54Z |
| opensuse-su-2026:10026-1 | python311-urllib3-2.6.2-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10025-1 | python311-aiohttp-3.13.3-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10024-1 | libsoup-2_4-1-2.74.3-13.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| sevd-2021-285-05 | Conext™ Advisor & Conext™ Control V2 | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-285-04 | Modicon M218 Logic Controller | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-285-03 | IGSS (Interactive Graphical SCADA System) | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-285-02 | ConneXium Network Manager (CNM) Software | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-285-01 | spaceLYnk, Wiser For KNX, fellerLYnk | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-257-02 | Web Server on Modicon M340, Legacy Offers Modicon Quantum and Premium and Associated Communication Modules | 2021-09-14T20:04:00.000Z | 2023-02-14T20:04:43.000Z |
| sevd-2021-257-01 | EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70 | 2021-09-14T18:30:00.000Z | 2022-07-12T18:30:00.000Z |
| sevd-2021-257-03 | StruxureWare Data Center Expert | 2021-09-14T00:00:00.000Z | 2021-09-14T00:00:00.000Z |
| sevd-2021-222-04 | Modicon PAC Controllers and PLC Simulator for EcoStruxure™ Control Expert and EcoStruxure™ Process Expert | 2021-08-10T02:27:39.000Z | 2024-08-13T00:00:00.000Z |
| sevd-2021-222-06 | CODESYS V2 Vulnerabilities in Programmable Automation Controller (PacDrive) M | 2021-08-10T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| sevd-2021-222-05 | AccuSine PCSn/PCS+/PFV+ | 2021-08-10T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| sevd-2021-222-03 | Pro-face GP-Pro EX | 2021-08-10T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| sevd-2021-217-01 | NicheStack TCP/IP Vulnerabilities (INFRA:HALT) in Lexium ILE, ILA, ILS, and Communication Option Boards for Altivar and Lexium32 drives | 2021-08-05T06:29:08.000Z | 2023-05-09T06:29:00.000Z |
| sevd-2021-222-02 | AT&T Labs Compressor (XMilI) and Decompressor (XDemill) used by EcoStruxureTM Control Expert, EcoStruxureTM Process Expert and SCADAPack RemoteConnect™ for x70 | 2021-08-01T07:25:51.000Z | 2022-07-12T18:30:00.000Z |
| sevd-2021-194-01 | EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ x70, and Modicon Controllers M580 and M340 | 2021-07-13T08:22:02.000Z | 2024-08-13T00:00:00.000Z |
| sevd-2021-194-05 | Easergy T200 | 2021-07-13T00:00:00.000Z | 2021-07-13T00:00:00.000Z |
| sevd-2021-194-04 | C-Bus Toolkit | 2021-07-13T00:00:00.000Z | 2021-07-13T00:00:00.000Z |
| sevd-2021-194-03 | SoSafe Configurable | 2021-07-13T00:00:00.000Z | 2021-07-13T00:00:00.000Z |
| sevd-2021-159-04 | ISaGRAF Vulnerabilities in IEC 61131-3 Programming and Engineering Tools | 2021-06-08T04:36:25.000Z | 2025-11-15T00:00:00.000Z |
| sevd-2021-159-03 | PowerLogic EGX100 and PowerLogicEGX300 | 2021-06-08T00:00:00.000Z | 2021-06-08T00:00:00.000Z |
| sevd-2021-159-02 | PowerLogic PM5500 and PowerLogic PM8ECC | 2021-06-08T00:00:00.000Z | 2024-11-12T00:00:00.000Z |
| sevd-2021-159-01 | IGSS (Interactive Graphical SCADA System) | 2021-06-08T00:00:00.000Z | 2021-06-08T00:00:00.000Z |
| sevd-2021-130-04 | homeLYnk (Wiser For KNX) and spaceLYnk | 2021-05-11T07:30:55.000Z | 2022-11-08T07:30:55.000Z |
| sevd-2021-130-07 | EcoStruxure Geo SCADA Expert | 2021-05-11T00:00:00.000Z | 2021-05-11T00:00:00.000Z |
| sevd-2021-130-05 | Modicon M241 & M251 Logic Controllers | 2021-05-11T00:00:00.000Z | 2021-05-11T00:00:00.000Z |
| sevd-2021-130-01 | Modicon Managed Switch | 2021-05-11T00:00:00.000Z | 2021-05-11T00:00:00.000Z |
| sevd-2021-103-01 | C-Bus Toolkit and C-Gate Server | 2021-04-13T11:17:13.000Z | 2022-11-08T11:17:13.000Z |
| sevd-2021-068-02 | PowerLogic ION7400 / PM8000 / ION9000 Power Meters | 2021-03-09T00:00:00.000Z | 2021-03-09T00:00:00.000Z |
| sevd-2021-068-01 | IGSS (Interactive Graphical SCADA System) | 2021-03-09T00:00:00.000Z | 2021-03-09T00:00:00.000Z |
| sevd-2021-040-01 | PowerLogic Power Metering Products | 2021-02-08T00:00:00.000Z | 2021-02-08T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-elasticsearch-2025-68390 | Elasticsearch Allocation of Resources Without Limits or Throttling | 2025-12-20T11:36:36.080Z | 2025-12-20T12:06:39.262Z |
| bit-elasticsearch-2025-68384 | Elasticsearch Allocation of Resources Without Limits or Throttling | 2025-12-20T11:36:34.496Z | 2025-12-20T12:06:39.262Z |
| bit-mongodb-2025-14847 | Zlib compressed protocol header length confusion may allow memory read | 2025-12-19T11:15:49.277Z | 2025-12-30T00:15:51.160Z |
| bit-gitlab-2025-8405 | Improper Encoding or Escaping of Output in GitLab | 2025-12-18T12:06:48.009Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-4097 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:05:44.981Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-14157 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:46.334Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-13978 | Generation of Error Message Containing Sensitive Information in GitLab | 2025-12-18T12:04:44.454Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12734 | Improper Encoding or Escaping of Output in GitLab | 2025-12-18T12:04:35.112Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12716 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:33.134Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12562 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:25.675Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12029 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:20.332Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11984 | Authentication Bypass Using an Alternate Path or Channel in GitLab | 2025-12-18T12:04:14.698Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11247 | Authorization Bypass Through User-Controlled Key in GitLab | 2025-12-18T12:03:59.823Z | 2025-12-18T12:08:20.703Z |
| bit-parse-2025-68150 | Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter | 2025-12-18T11:46:18.950Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-68115 | Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables | 2025-12-18T11:46:17.211Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-67727 | Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management | 2025-12-18T11:46:15.637Z | 2026-01-08T18:07:34.629Z |
| bit-kibana-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:40:39.003Z | 2025-12-18T12:08:20.703Z |
| bit-elk-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:37:43.350Z | 2025-12-18T12:08:20.703Z |
| bit-elasticsearch-2025-37731 | Elasticsearch Improper Authentication | 2025-12-18T11:37:43.121Z | 2025-12-19T12:06:33.755Z |
| bit-airflow-2025-66388 | Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI | 2025-12-16T14:37:51.384Z | 2025-12-16T15:14:22.118Z |
| bit-mongodb-2025-12657 | Malformed KMIP response may result in access violation | 2025-12-13T11:42:23.275Z | 2025-12-13T12:05:53.698Z |
| bit-django-2025-13372 | Potential SQL injection in FilteredRelation column aliases on PostgreSQL | 2025-12-13T11:36:31.883Z | 2025-12-13T12:05:53.698Z |
| bit-mongodb-2025-14345 | Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server | 2025-12-12T17:42:48.437Z | 2025-12-12T18:06:16.411Z |
| bit-jenkins-2025-67639 | 2025-12-12T11:23:52.749Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67638 | 2025-12-12T11:23:47.516Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67637 | 2025-12-12T11:23:42.761Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67636 | 2025-12-12T11:23:36.617Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67635 | 2025-12-12T11:23:31.286Z | 2025-12-12T11:51:34.315Z | |
| bit-mongodb-2025-13644 | MongoDB may be susceptible to Invariant Failure due to batched delete | 2025-12-12T11:19:13.963Z | 2026-01-08T18:07:34.629Z |
| bit-mongodb-2025-13643 | MongoDB Server may allow queries to be terminated by unauthorized users | 2025-12-12T11:19:08.903Z | 2026-01-08T18:07:34.629Z |
| ID | Description | Updated |
|---|---|---|
| var-201106-0026 | Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Wind… | 2024-07-23T22:03:48.916000Z |
| var-202005-1028 | A malicious actor who intentionally exploits this lack of effective limitation on the num… | 2024-07-23T22:03:40.061000Z |
| var-201911-1619 | Improper invalidation for page table updates by a virtual guest operating system for mult… | 2024-07-23T22:03:40.870000Z |
| var-201505-0337 | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorit… | 2024-07-23T22:03:40.995000Z |
| var-201912-0533 | This issue was addressed with improved transparency. This issue is fixed in iOS 12.2. A u… | 2024-07-23T22:03:39.534000Z |
| var-201908-0265 | Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a … | 2024-07-23T22:03:39.695000Z |
| var-200103-0056 | Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM pri… | 2024-07-23T22:03:07.478000Z |
| var-202109-1368 | A type confusion issue was addressed with improved state handling. This issue is fixed in… | 2024-07-23T22:03:02.962000Z |
| var-200609-1249 | The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not prope… | 2024-07-23T22:03:02.065000Z |
| var-201904-1344 | Multiple memory corruption issues were addressed with improved input validation. This iss… | 2024-07-23T22:03:00.873000Z |
| var-202108-2039 | A logic issue was addressed with improved state management. This issue is fixed in macOS … | 2024-07-23T22:02:34.481000Z |
| var-201006-1259 | Double free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 1… | 2024-07-23T22:02:34.562000Z |
| var-201707-0592 | Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre att… | 2024-07-23T22:02:33.954000Z |
| var-201109-0190 | Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allow… | 2024-07-23T22:02:33.523000Z |
| var-200803-0016 | CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure web… | 2024-07-23T22:01:55.420000Z |
| var-201912-1850 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:01:51.188000Z |
| var-200609-1027 | Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, whe… | 2024-07-23T22:01:14.362000Z |
| var-201904-1408 | A memory corruption issue was addressed with improved state management. This issue affect… | 2024-07-23T22:01:11.971000Z |
| var-202201-0372 | lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. The vu… | 2024-07-23T22:01:10.106000Z |
| var-200612-0136 | Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 2005… | 2024-07-23T22:01:10.008000Z |
| var-201609-0593 | Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.… | 2024-07-23T22:01:08.857000Z |
| var-201304-0375 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T22:01:08.426000Z |
| var-201210-0270 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T22:01:08.344000Z |
| var-200603-0279 | Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and… | 2024-07-23T22:01:08.748000Z |
| var-201904-1397 | An input validation issue was addressed with improved input validation. This issue affect… | 2024-07-23T22:01:07.123000Z |
| var-200704-0213 | load_webdav in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environme… | 2024-07-23T22:00:36.528000Z |
| var-201711-0480 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T21:59:32.421000Z |
| var-200102-0030 | The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attack… | 2024-07-23T21:59:32.267000Z |
| var-202207-0381 | A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5… | 2024-07-23T21:59:00.866000Z |
| var-201801-1708 | The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before… | 2024-07-23T21:58:56.016000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000021 | Multiple vulnerabilities in PowerCMS | 2025-03-26T18:13+09:00 | 2025-03-26T18:13+09:00 |
| jvndb-2025-002592 | Multiple vulnerabilities in CHOCO TEI WATCHER mini | 2025-03-26T13:25+09:00 | 2025-03-26T13:25+09:00 |
| jvndb-2025-000019 | Multiple vulnerabilities in AssetView | 2025-03-25T17:10+09:00 | 2025-03-25T17:10+09:00 |
| jvndb-2025-000018 | Multiple vulnerabilities in home gateway HGW-BL1500HM | 2025-03-19T15:33+09:00 | 2025-03-28T11:48+09:00 |
| jvndb-2025-000020 | +F FS010M vulnerable to OS command injection | 2025-03-18T15:01+09:00 | 2025-03-18T15:01+09:00 |
| jvndb-2025-000017 | hostapd vulnerable to improper processing of RADIUS packets | 2025-03-12T14:19+09:00 | 2025-03-12T14:19+09:00 |
| jvndb-2025-000016 | Multiple vulnerabilities in RemoteView Agent (for Windows) | 2025-03-06T14:27+09:00 | 2025-03-10T15:22+09:00 |
| jvndb-2025-001898 | Multiple vulnerabilities in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) | 2025-03-04T14:56+09:00 | 2025-03-04T14:56+09:00 |
| jvndb-2025-001605 | "RoboForm Password Manager" App for Android vulnerable to authentication bypass using an alternate path or channel | 2025-02-20T20:15+09:00 | 2025-02-20T20:15+09:00 |
| jvndb-2025-000014 | Multiple cross-site scripting vulnerabilities in Movable Type | 2025-02-19T16:19+09:00 | 2025-02-19T16:19+09:00 |
| jvndb-2025-000015 | RevoWorks SCVX and RevoWorks Browser vulnerable to incorrect resource transfer between spheres | 2025-02-19T14:51+09:00 | 2025-02-19T14:51+09:00 |
| jvndb-2025-001563 | Out-of-bounds write vulnerability in FUJIFILM Business Innovation Corp. MFPs | 2025-02-18T16:33+09:00 | 2025-02-18T16:33+09:00 |
| jvndb-2025-001562 | Out-of-bounds read vulnerability in OMRON CX-Programmer | 2025-02-18T16:24+09:00 | 2025-02-18T16:24+09:00 |
| jvndb-2025-001548 | Out-of-bounds read vulnerability in Cente middleware | 2025-02-17T18:22+09:00 | 2025-02-17T18:22+09:00 |
| jvndb-2025-000012 | Multiple vulnerabilities in The LuxCal Web Calendar | 2025-02-17T13:43+09:00 | 2025-02-17T13:43+09:00 |
| jvndb-2025-000013 | acmailer CGI and acmailer DB vulnerable to OS command injection | 2025-02-14T16:39+09:00 | 2025-02-14T16:39+09:00 |
| jvndb-2025-000002 | Multiple vulnerabilities in NEC Aterm series (NV25-003) | 2025-02-14T15:48+09:00 | 2025-02-14T15:48+09:00 |
| jvndb-2025-000011 | Multiple vulnerabilities in FileMegane | 2025-02-13T13:39+09:00 | 2025-02-13T13:39+09:00 |
| jvndb-2025-000010 | acmailer vulnerable to cross-site scripting | 2025-02-12T15:05+09:00 | 2025-02-12T15:05+09:00 |
| jvndb-2025-001017 | Multiple vulnerabilities in STEALTHONE D220/D340/D440 | 2025-02-06T18:27+09:00 | 2025-02-06T18:27+09:00 |
| jvndb-2025-001016 | OMRON NJ/NX series vulnerable to path traversal | 2025-02-06T18:27+09:00 | 2025-05-08T17:44+09:00 |
| jvndb-2025-001018 | Improper restriction of XML external entity reference (XXE) vulnerability in OMRON NB-Designer | 2025-02-06T18:26+09:00 | 2025-02-06T18:26+09:00 |
| jvndb-2025-000008 | Multiple vulnerabilities in Defense Platform Home Edition | 2025-02-05T14:06+09:00 | 2025-02-05T14:06+09:00 |
| jvndb-2025-000009 | WordPress Plugin "Activity Log WinterLock" vulnerable to cross-site request forgery | 2025-02-04T13:58+09:00 | 2025-02-04T13:58+09:00 |
| jvndb-2025-001244 | Clickjacking Vulnerability in JP1/ServerConductor/Deployment Manager | 2025-01-30T18:19+09:00 | 2025-01-30T18:19+09:00 |
| jvndb-2025-000007 | SXF Common Library vulnerable to improper input data handling | 2025-01-29T14:57+09:00 | 2025-01-29T14:57+09:00 |
| jvndb-2025-001238 | Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers | 2025-01-29T13:41+09:00 | 2025-05-27T16:06+09:00 |
| jvndb-2025-000006 | WordPress Plugin "Simple Image Sizes" vulnerable to cross-site scripting | 2025-01-28T13:44+09:00 | 2025-01-28T13:44+09:00 |
| jvndb-2025-000005 | EXIF Viewer Classic vulnerable to cross-site scripting | 2025-01-27T14:25+09:00 | 2025-01-27T14:25+09:00 |
| jvndb-2025-000004 | Multiple vulnerabilities in I-O DATA router UD-LT2 | 2025-01-22T13:55+09:00 | 2025-02-20T15:55+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0221-1 | Security update for curl | 2026-01-22T12:15:38Z | 2026-01-22T12:15:38Z |
| suse-su-2026:0220-1 | Security update for python-filelock | 2026-01-22T12:15:26Z | 2026-01-22T12:15:26Z |
| suse-su-2026:0219-1 | Security update for go1.24 | 2026-01-22T12:13:47Z | 2026-01-22T12:13:47Z |
| suse-su-2026:0218-1 | Security update for go1.25 | 2026-01-22T12:12:47Z | 2026-01-22T12:12:47Z |
| suse-su-2026:0217-1 | Security update for keylime | 2026-01-22T12:11:40Z | 2026-01-22T12:11:40Z |
| suse-su-2026:0216-1 | Security update for kernel-firmware | 2026-01-22T12:11:01Z | 2026-01-22T12:11:01Z |
| suse-su-2026:0215-1 | Security update for gpg2 | 2026-01-22T12:10:17Z | 2026-01-22T12:10:17Z |
| suse-su-2026:0214-1 | Security update for gpg2 | 2026-01-22T12:09:32Z | 2026-01-22T12:09:32Z |
| suse-su-2026:0213-1 | Security update for ovmf | 2026-01-22T12:08:49Z | 2026-01-22T12:08:49Z |
| suse-su-2026:0212-1 | Security update for ovmf | 2026-01-22T12:08:32Z | 2026-01-22T12:08:32Z |
| suse-su-2026:0211-1 | Security update for libsoup | 2026-01-22T12:08:07Z | 2026-01-22T12:08:07Z |
| suse-su-2026:20121-1 | Security update for libheif | 2026-01-22T10:59:15Z | 2026-01-22T10:59:15Z |
| suse-su-2026:20153-1 | Security update for libpcap | 2026-01-22T10:14:02Z | 2026-01-22T10:14:02Z |
| suse-su-2026:20120-1 | Security update for libpcap | 2026-01-22T10:14:02Z | 2026-01-22T10:14:02Z |
| suse-su-2026:0210-1 | Security update for python3 | 2026-01-22T09:07:42Z | 2026-01-22T09:07:42Z |
| suse-su-2026:0209-1 | Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) | 2026-01-21T18:03:57Z | 2026-01-21T18:03:57Z |
| suse-su-2026:0206-1 | Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5) | 2026-01-21T15:38:11Z | 2026-01-21T15:38:11Z |
| suse-su-2026:0202-1 | Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7) | 2026-01-21T14:35:49Z | 2026-01-21T14:35:49Z |
| suse-su-2026:0204-1 | Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6) | 2026-01-21T13:33:35Z | 2026-01-21T13:33:35Z |
| suse-su-2026:0203-1 | Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6) | 2026-01-21T13:04:03Z | 2026-01-21T13:04:03Z |
| suse-su-2026:0200-1 | Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5) | 2026-01-21T12:17:09Z | 2026-01-21T12:17:09Z |
| suse-su-2026:20116-1 | Security update for podman | 2026-01-21T11:08:51Z | 2026-01-21T11:08:51Z |
| suse-su-2026:20103-1 | Security update for podman | 2026-01-21T11:08:51Z | 2026-01-21T11:08:51Z |
| suse-su-2026:0199-1 | Security update for python-FontTools | 2026-01-21T11:03:55Z | 2026-01-21T11:03:55Z |
| suse-su-2026:0198-1 | Security update for ffmpeg-4 | 2026-01-21T10:16:19Z | 2026-01-21T10:16:19Z |
| suse-su-2026:0197-1 | Security update for postgresql17, postgresql18 | 2026-01-21T09:31:57Z | 2026-01-21T09:31:57Z |
| suse-su-2026:0196-1 | Security update for ovmf | 2026-01-21T09:05:26Z | 2026-01-21T09:05:26Z |
| suse-su-2026:0195-1 | Security update for net-snmp | 2026-01-21T09:05:17Z | 2026-01-21T09:05:17Z |
| suse-su-2026:0194-1 | Security update for libsodium | 2026-01-21T09:05:11Z | 2026-01-21T09:05:11Z |
| suse-su-2026:0193-1 | Security update for libvirt | 2026-01-21T08:04:55Z | 2026-01-21T08:04:55Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-05120 | Kentico Xperience跨站脚本漏洞（CNVD-2026-05120） | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05119 | Kentico Xperience跨站脚本漏洞（CNVD-2026-05119） | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05019 | TOTOLINK T10缓冲区溢出漏洞 | 2025-12-25 | 2026-01-14 |
| cnvd-2026-04266 | Kentico Xperience跨站脚本漏洞（CNVD-2026-04266） | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04265 | Kentico Xperience跨站脚本漏洞（CNVD-2026-04265） | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04264 | Kentico Xperience存在未明漏洞（CNVD-2026-04264） | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04263 | Kentico Xperience存在未明漏洞（CNVD-2026-04263） | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04262 | Kentico Xperience安全绕过漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04261 | Kentico Xperience跨站脚本漏洞（CNVD-2026-04261） | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04247 | Kentico Xperience信息泄露漏洞（CNVD-2026-04247） | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04246 | Kentico Xperience访问控制绕过漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04245 | Kentico Xperience信息泄露漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04244 | Kentico Xperience拒绝服务漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04243 | Kentico Xperience跨站脚本漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04242 | Kentico Xperience SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-04241 | Kentico Xperience CRLF注入漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04240 | Kentico Xperience Content-Type跨站脚本漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04238 | Apple macOS Tahoe信息泄露漏洞（CNVD-2026-04238） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04237 | Apple macOS Tahoe存在未明漏洞（CNVD-2026-04237） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04236 | Apple macOS Tahoe信息泄露漏洞（CNVD-2026-04236） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04235 | Apple macOS Tahoe信息泄露漏洞（CNVD-2026-04235） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04234 | Apple macOS Tahoe存在未明漏洞（CNVD-2026-04234） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04233 | Apple macOS Tahoe信息泄露漏洞（CNVD-2026-04233） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04232 | Apple macOS Tahoe存在未明漏洞（CNVD-2026-04232） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04231 | Apple macOS Tahoe拒绝服务漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04230 | Apple macOS Tahoe信息泄露漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04229 | Apple macOS Tahoe安全绕过漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04187 | WordPress插件Download Manager信息泄露漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04186 | WordPress插件All In One SEO Pack信息泄露漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-03178 | Growatt ShineLan-X跨站脚本漏洞（CNVD-2026-0317861） | 2025-12-25 | 2026-01-09 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0006 | Multiples vulnérabilités dans Veeam Backup & Replication | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2026-avi-0005 | Multiples vulnérabilités dans Centreon Open Tickets | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| CERTFR-2026-AVI-0007 | Vulnérabilité dans Stormshield Network Security | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| CERTFR-2026-AVI-0006 | Multiples vulnérabilités dans Veeam Backup & Replication | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| CERTFR-2026-AVI-0005 | Multiples vulnérabilités dans Centreon Open Tickets | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2026-avi-0004 | Vulnérabilité dans MariaDB | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2026-avi-0003 | Multiples vulnérabilités dans les produits Qnap | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| CERTFR-2026-AVI-0004 | Vulnérabilité dans MariaDB | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| CERTFR-2026-AVI-0003 | Multiples vulnérabilités dans les produits Qnap | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2026-avi-0002 | Multiples vulnérabilités dans les produits IBM | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| certfr-2026-avi-0001 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| CERTFR-2026-AVI-0002 | Multiples vulnérabilités dans les produits IBM | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| CERTFR-2026-AVI-0001 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| certfr-2025-avi-1142 | Multiples vulnérabilités dans Moxa NPort | 2025-12-31T00:00:00.000000 | 2025-12-31T00:00:00.000000 |
| CERTFR-2025-AVI-1142 | Multiples vulnérabilités dans Moxa NPort | 2025-12-31T00:00:00.000000 | 2025-12-31T00:00:00.000000 |
| certfr-2025-avi-1141 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1140 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1139 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1138 | Multiples vulnérabilités dans VMware Tanzu Platform | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1137 | Multiples vulnérabilités dans les produits IBM | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| CERTFR-2025-AVI-1141 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| CERTFR-2025-AVI-1140 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| CERTFR-2025-AVI-1139 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| CERTFR-2025-AVI-1138 | Multiples vulnérabilités dans VMware Tanzu Platform | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| CERTFR-2025-AVI-1137 | Multiples vulnérabilités dans les produits IBM | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1136 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1135 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1134 | Multiples vulnérabilités dans MongoDB Server | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1133 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1132 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2020-ALE-016 | Vulnérabilité dans Microsoft Domain Name System (DNS) Server | 2020-07-15T00:00:00.000000 | 2020-10-12T00:00:00.000000 |
| certfr-2020-ale-015 | Vulnérabilité dans F5 BIG-IP | 2020-07-05T00:00:00.000000 | 2020-09-15T00:00:00.000000 |
| CERTFR-2020-ALE-015 | Vulnérabilité dans F5 BIG-IP | 2020-07-05T00:00:00.000000 | 2020-09-15T00:00:00.000000 |
| certfr-2020-ale-014 | Vulnérabilité dans Palo Alto Networks PAN-OS | 2020-07-03T00:00:00.000000 | 2020-07-31T00:00:00.000000 |
| CERTFR-2020-ALE-014 | Vulnérabilité dans Palo Alto Networks PAN-OS | 2020-07-03T00:00:00.000000 | 2020-07-31T00:00:00.000000 |
| certfr-2020-ale-013 | Multiples vulnérabilités dans Microsoft Windows | 2020-07-01T00:00:00.000000 | 2020-07-05T00:00:00.000000 |
| CERTFR-2020-ALE-013 | Multiples vulnérabilités dans Microsoft Windows | 2020-07-01T00:00:00.000000 | 2020-07-05T00:00:00.000000 |
| certfr-2020-ale-012 | Multiples vulnérabilités dans SaltStack | 2020-05-04T00:00:00.000000 | 2020-07-31T00:00:00.000000 |
| CERTFR-2020-ALE-012 | Multiples vulnérabilités dans SaltStack | 2020-05-04T00:00:00.000000 | 2020-07-31T00:00:00.000000 |
| certfr-2020-ale-011 | Multiples vulnérabilités dans les produits Microsoft qui utilisent la bibliothèque Autodesk FBX | 2020-04-22T00:00:00.000000 | 2020-06-23T00:00:00.000000 |
| CERTFR-2020-ALE-011 | Multiples vulnérabilités dans les produits Microsoft qui utilisent la bibliothèque Autodesk FBX | 2020-04-22T00:00:00.000000 | 2020-06-23T00:00:00.000000 |
| certfr-2020-ale-010 | Multiples vulnérabilités dans Mozilla Firefox | 2020-04-06T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| CERTFR-2020-ALE-010 | Multiples vulnérabilités dans Mozilla Firefox | 2020-04-06T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| certfr-2020-ale-009 | Multiples vulnérabilités dans Microsoft Windows | 2020-03-24T00:00:00.000000 | 2020-06-23T00:00:00.000000 |
| CERTFR-2020-ALE-009 | Multiples vulnérabilités dans Microsoft Windows | 2020-03-24T00:00:00.000000 | 2020-06-23T00:00:00.000000 |
| certfr-2020-ale-008 | Vulnérabilité dans l'implémentation du protocole SMB par Microsoft | 2020-03-11T00:00:00.000000 | 2020-07-31T00:00:00.000000 |
| CERTFR-2020-ALE-008 | Vulnérabilité dans l'implémentation du protocole SMB par Microsoft | 2020-03-11T00:00:00.000000 | 2020-07-31T00:00:00.000000 |
| certfr-2020-ale-007 | Vulnérabilité dans Microsoft Exchange Server | 2020-02-27T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| CERTFR-2020-ALE-007 | Vulnérabilité dans Microsoft Exchange Server | 2020-02-27T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| certfr-2020-ale-006 | Vulnérabilité dans Microsoft Internet Explorer | 2020-01-20T00:00:00.000000 | 2020-02-19T00:00:00.000000 |
| CERTFR-2020-ALE-006 | Vulnérabilité dans Microsoft Internet Explorer | 2020-01-20T00:00:00.000000 | 2020-02-19T00:00:00.000000 |
| certfr-2020-ale-005 | Multiples vulnérabilités dans le serveur de passerelle RDP de Windows | 2020-01-14T00:00:00.000000 | 2020-02-19T00:00:00.000000 |
| certfr-2020-ale-004 | Vulnérabilité dans Microsoft Windows | 2020-01-14T00:00:00.000000 | 2020-01-17T00:00:00.000000 |
| CERTFR-2020-ALE-005 | Multiples vulnérabilités dans le serveur de passerelle RDP de Windows | 2020-01-14T00:00:00.000000 | 2020-02-19T00:00:00.000000 |
| CERTFR-2020-ALE-004 | Vulnérabilité dans Microsoft Windows | 2020-01-14T00:00:00.000000 | 2020-01-17T00:00:00.000000 |
| certfr-2020-ale-003 | Vulnérabilité dans les produits Mozilla | 2020-01-09T00:00:00.000000 | 2020-01-20T00:00:00.000000 |
| certfr-2020-ale-002 | Vulnérabilité dans les produits Citrix ADC et Citrix Gateway | 2020-01-09T00:00:00.000000 | 2020-07-31T00:00:00.000000 |
| certfr-2020-ale-001 | Multiples vulnérabilités dans les produits de Pulse Secure | 2020-01-09T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| CERTFR-2020-ALE-003 | Vulnérabilité dans les produits Mozilla | 2020-01-09T00:00:00.000000 | 2020-01-20T00:00:00.000000 |
| CERTFR-2020-ALE-002 | Vulnérabilité dans les produits Citrix ADC et Citrix Gateway | 2020-01-09T00:00:00.000000 | 2020-07-31T00:00:00.000000 |