Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-wfc4-j699-888x | Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-vrhg-58w3-ch3g | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-vh3j-4vp2-x7m2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-v9q2-7r8q-p2qm | Missing Authorization vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-v92x-wwhx-42c7 | Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-v739-2jgg-rcmx | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-qvx9-63c8-g2m4 | Missing Authorization vulnerability in epiphanyit321 Referral Link Tracker referral-link-tracker al… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-q5j8-ch67-ww7c | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-prvq-r6h5-gxw2 | Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploitin… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-pqg3-4wch-ppw5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-p9r4-469w-3cpx | Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-descriptio… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-p2v3-q8r8-fhjv | Missing Authorization vulnerability in clicksend SMS Contact Form 7 Notifications by ClickSend clic… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-m2hj-mr34-9mpp | Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows A… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-m24f-6c22-rr63 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthe… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-fv67-9vrp-68qg | Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Ex… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-fg6c-rjg4-4j6p | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-f8gm-x2c8-3fpc | Missing Authorization vulnerability in wprio Table Block by RioVizual riovizual allows Exploiting I… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-f4ch-j254-ph76 | Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-f2g8-m3wx-cfhq | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-cjp5-xj95-xh73 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-cj42-frrm-vcmv | Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-9wpj-fh38-976g | Missing Authorization vulnerability in microsoftstart MSN Partner Hub microsoft-start allows Exploi… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-9j4h-vh5x-fp8g | Cross-Site Request Forgery (CSRF) vulnerability in Eduard Pinuaga Linares Did Prestashop Display di… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-99r8-9v34-4xvf | Cross-Site Request Forgery (CSRF) vulnerability in Mejar WP Business Hours wp-business-hours allows… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-8mrq-qjwv-w2v9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-79pg-9535-j68v | Missing Authorization vulnerability in adivaha® Flights & Hotels Booking WP Plugin adiaha-hotel… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-6w3r-9v7p-w427 | Missing Authorization vulnerability in Reoon Technology Reoon Email Verifier reoon-email-verifier a… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-6prc-hj23-w22p | Cross-Site Request Forgery (CSRF) vulnerability in Prakash Awesome Testimonials awesome-testimonial… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:30Z |
| ghsa-6p63-xfw3-mxcf | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ghsa-5jxc-g6h9-qhh2 | Missing Authorization vulnerability in ignitionwp IgnitionDeck ignitiondeck allows Exploiting Incor… | 2025-10-27T03:30:38Z | 2025-11-13T12:31:29Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-62945 | N/A | WordPress Did Prestashop Display plugin <= 1.0.30 - Cr… |
Eduard Pinuaga Linares |
Did Prestashop Display |
2025-10-27T01:34:07.137Z | 2025-11-13T10:33:48.588Z |
| cve-2025-62944 | N/A | WordPress MSTW CSV EXPORTER plugin <= 1.4 - Broken Acc… |
Mark O'Donnell |
MSTW CSV EXPORTER |
2025-10-27T01:34:06.759Z | 2025-11-13T10:33:48.393Z |
| cve-2025-62943 | N/A | WordPress Next Page, Not Next Post plugin <= 0.3.0 - C… |
Matt McInvale |
Next Page, Not Next Post |
2025-10-27T01:34:06.378Z | 2025-11-13T10:33:48.706Z |
| cve-2025-62942 | N/A | WordPress WP Mapbox GL JS Maps plugin <= 3.0.1 - Cross… |
tempranova |
WP Mapbox GL JS Maps |
2025-10-27T01:34:05.970Z | 2025-11-13T10:33:48.351Z |
| cve-2025-62941 | N/A | WordPress Events Maker by dFactory plugin <= 1.6.14 - … |
dFactory |
Events Maker by dFactory |
2025-10-27T01:34:05.575Z | 2025-11-13T10:33:48.624Z |
| cve-2025-62940 | N/A | WordPress Blox Lite plugin <= 1.2.8 - Cross Site Scrip… |
Nick Diego |
Blox Lite |
2025-10-27T01:34:05.124Z | 2025-11-13T10:33:48.335Z |
| cve-2025-62939 | N/A | WordPress Open Currency Converter plugin <= 1.5.0 - Cr… |
Joe |
Open Currency Converter |
2025-10-27T01:34:04.735Z | 2025-11-13T10:33:48.160Z |
| cve-2025-62938 | N/A | WordPress Reoon Email Verifier plugin <= 2.0.1 - Broke… |
Reoon Technology |
Reoon Email Verifier |
2025-10-27T01:34:04.368Z | 2025-11-13T10:33:48.315Z |
| cve-2025-62937 | N/A | WordPress Post List Featured Image plugin <= 0.5.9 - C… |
Johnny |
Post List Featured Image |
2025-10-27T01:34:03.973Z | 2025-11-13T10:33:48.308Z |
| cve-2025-62936 | N/A | WordPress xSmart theme <= 1.2.9.4 - Content Injection … |
Jthemes |
xSmart |
2025-10-27T01:34:03.605Z | 2025-11-13T10:33:47.954Z |
| cve-2025-62935 | N/A | WordPress Open Close WooCommerce Store plugin <= 4.9.8… |
ilmosys |
Open Close WooCommerce Store |
2025-10-27T01:34:03.234Z | 2025-11-13T10:33:47.938Z |
| cve-2025-62934 | N/A | WordPress WP Business Hours plugin <= 1.4 - Cross Site… |
Mejar |
WP Business Hours |
2025-10-27T01:34:02.856Z | 2025-11-13T10:33:47.932Z |
| cve-2025-62933 | N/A | WordPress Awesome Testimonials plugin <= 2.2.1 - Cross… |
Prakash |
Awesome Testimonials |
2025-10-27T01:34:02.471Z | 2025-11-13T10:33:47.896Z |
| cve-2025-62932 | N/A | WordPress Table Block by RioVizual plugin <= 2.3.2 - B… |
wprio |
Table Block by RioVizual |
2025-10-27T01:34:02.004Z | 2025-11-13T10:33:47.905Z |
| cve-2025-62931 | N/A | WordPress MSN Partner Hub plugin <= 2.8.7 - Broken Acc… |
microsoftstart |
MSN Partner Hub |
2025-10-27T01:34:01.473Z | 2025-11-13T10:33:47.917Z |
| cve-2025-62930 | N/A | WordPress MapSVG plugin <= 8.7.15 - Cross Site Scripti… |
RomanCode |
MapSVG |
2025-10-27T01:34:01.039Z | 2025-11-13T10:33:47.888Z |
| cve-2025-62929 | N/A | WordPress Testimonial Slider plugin <= 2.0.15 - Broken… |
PickPlugins |
Testimonial Slider |
2025-10-27T01:34:00.648Z | 2025-11-13T10:33:47.853Z |
| cve-2025-62928 | N/A | WordPress SEO Meta Description Updater plugin <= 1.2.0… |
Joby Joseph |
SEO Meta Description Updater |
2025-10-27T01:34:00.000Z | 2025-11-13T10:33:47.860Z |
| cve-2025-62927 | N/A | WordPress Nelio Content plugin <= 4.0.5 - Broken Acces… |
Nelio Software |
Nelio Content |
2025-10-27T01:33:59.620Z | 2025-11-13T10:33:47.829Z |
| cve-2025-62925 | N/A | WordPress Conversios.io plugin <= 7.2.10 - Broken Acce… |
Conversios |
Conversios.io |
2025-10-27T01:33:59.236Z | 2025-11-13T10:33:47.839Z |
| cve-2025-62924 | N/A | WordPress Post Grid and Gutenberg Blocks plugin <= 2.3… |
PickPlugins |
Post Grid and Gutenberg Blocks |
2025-10-27T01:33:58.866Z | 2025-11-13T10:33:47.811Z |
| cve-2025-62923 | N/A | WordPress Marquee Addons for Elementor plugin <= 3.7.1… |
Debuggers Studio |
Marquee Addons for Elementor |
2025-10-27T01:33:58.486Z | 2025-11-13T10:33:47.796Z |
| cve-2025-62922 | N/A | WordPress Export Categories plugin <= 1.0 - Broken Acc… |
Shambhu Patnaik |
Export Categories |
2025-10-27T01:33:58.086Z | 2025-11-13T10:33:47.816Z |
| cve-2025-62921 | N/A | WordPress Bulk Auto Image Title Attribute plugin <= 2.… |
Pagup |
Bulk Auto Image Title Attribute |
2025-10-27T01:33:57.675Z | 2025-11-13T10:33:47.774Z |
| cve-2025-62920 | N/A | WordPress USERCENTRICS CMP plugin <= 1.0.9 - Cross Sit… |
webnique |
USERCENTRICS CMP |
2025-10-27T01:33:57.278Z | 2025-11-13T10:33:47.770Z |
| cve-2025-62919 | N/A | WordPress TS Demo Importer plugin <= 0.1.2 - Broken Ac… |
themeshopy |
TS Demo Importer |
2025-10-27T01:33:56.876Z | 2025-11-13T10:33:47.770Z |
| cve-2025-62918 | N/A | WordPress IgnitionDeck plugin <= 2.0.10 - Broken Acces… |
ignitionwp |
IgnitionDeck |
2025-10-27T01:33:56.477Z | 2025-11-13T10:33:47.771Z |
| cve-2025-62917 | N/A | WordPress Tooltipy plugin <= 5.5.9 - Cross Site Script… |
Jamel.Z |
Tooltipy |
2025-10-27T01:33:56.091Z | 2025-11-13T10:33:47.768Z |
| cve-2025-62916 | N/A | WordPress Flights & Hotels Booking WP Plugin plugin <=… |
adivaha® |
Flights & Hotels Booking WP Plugin |
2025-10-27T01:33:55.688Z | 2025-11-13T10:33:47.727Z |
| cve-2025-62915 | N/A | WordPress SMS Contact Form 7 Notifications by ClickSen… |
clicksend |
SMS Contact Form 7 Notifications by ClickSend |
2025-10-27T01:33:55.284Z | 2025-11-13T10:33:47.735Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-12241 | TOTOLINK A3300R POST Parameter cstecgi.cgi setLanguage… |
TOTOLINK |
A3300R |
2025-10-27T07:02:10.780Z | 2025-10-27T18:03:42.756Z | |
| cve-2025-12240 | TOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflow |
TOTOLINK |
A3300R |
2025-10-27T06:32:14.914Z | 2025-10-27T20:13:13.431Z | |
| cve-2025-12239 | TOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflow |
TOTOLINK |
A3300R |
2025-10-27T06:32:10.266Z | 2025-10-27T20:12:41.451Z | |
| cve-2025-12238 | code-projects Automated Voting System user.php sql injection |
code-projects |
Automated Voting System |
2025-10-27T06:32:06.192Z | 2025-10-27T13:21:46.145Z | |
| cve-2025-12237 | projectworlds Advanced Library Management System index… |
projectworlds |
Advanced Library Management System |
2025-10-27T06:22:49.972Z | 2025-10-27T13:22:39.279Z | |
| cve-2025-12236 | Tenda CH22 DhcpListClient fromDhcpListClient buffer overflow |
Tenda |
CH22 |
2025-10-27T06:22:47.662Z | 2025-10-27T13:23:52.661Z | |
| cve-2025-12235 | Tenda CH22 SetIpBind fromSetIpBind buffer overflow |
Tenda |
CH22 |
2025-10-27T06:22:44.013Z | 2025-10-27T13:25:16.489Z | |
| cve-2025-12234 | Tenda CH22 SafeMacFilter fromSafeMacFilter buffer overflow |
Tenda |
CH22 |
2025-10-27T06:22:21.764Z | 2025-10-27T13:34:53.278Z | |
| cve-2025-12233 | Tenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflow |
Tenda |
CH22 |
2025-10-27T06:22:17.626Z | 2025-10-27T14:42:43.162Z | |
| cve-2025-12232 | Tenda CH22 SafeClientFilter fromSafeClientFilter buffe… |
Tenda |
CH22 |
2025-10-27T06:22:13.528Z | 2025-10-27T14:51:20.097Z | |
| cve-2025-12055 | N/A | Unauthenticated Local File Disclosure in MPDV Mikrolab… |
MPDV Mikrolab GmbH |
MIP 2 |
2025-10-27T06:36:36.526Z | 2025-11-03T17:32:04.323Z |
| cve-2025-12231 | projectworlds Expense Management System Expense Catego… |
projectworlds |
Expense Management System |
2025-10-27T06:02:08.498Z | 2025-10-27T15:13:52.169Z | |
| cve-2025-12230 | projectworlds Expense Management System Currency creat… |
projectworlds |
Expense Management System |
2025-10-27T06:02:06.014Z | 2025-10-27T15:15:26.294Z | |
| cve-2025-12229 | projectworlds Expense Management System Roles Page cre… |
projectworlds |
Expense Management System |
2025-10-27T05:32:09.853Z | 2025-10-27T20:11:46.848Z | |
| cve-2025-12228 | projectworlds Expense Management System Users Page cre… |
projectworlds |
Expense Management System |
2025-10-27T05:32:07.551Z | 2025-10-27T20:10:59.785Z | |
| cve-2025-12227 | projectworlds Gate Pass Management System add-pass.php… |
projectworlds |
Gate Pass Management System |
2025-10-27T05:32:05.176Z | 2025-10-27T20:09:56.142Z | |
| cve-2025-11154 | N/A | IDonate < 2.1.13 - Unauthenticated User Deletion |
Unknown |
IDonate |
2025-10-27T06:00:01.632Z | 2025-10-27T15:11:51.813Z |
| cve-2025-12226 | SourceCodester Best House Rental Management System adm… |
SourceCodester |
Best House Rental Management System |
2025-10-27T05:02:10.120Z | 2025-10-27T20:09:00.735Z | |
| cve-2025-12225 | Tenda AC6 HTTP Request WifiGuestSet stack-based overflow |
Tenda |
AC6 |
2025-10-27T05:02:06.747Z | 2025-10-27T20:06:53.554Z | |
| cve-2025-12224 | Iqbolshoh php-business-website contact.php cross site … |
Iqbolshoh |
php-business-website |
2025-10-27T04:32:10.383Z | 2025-10-27T20:06:17.208Z | |
| cve-2025-12223 | Bdtask Flight Booking Software Package Information pac… |
Bdtask |
Flight Booking Software |
2025-10-27T04:32:07.968Z | 2025-10-27T20:05:20.283Z | |
| cve-2025-12222 | Bdtask Flight Booking Software Deposit deposit unrestr… |
Bdtask |
Flight Booking Software |
2025-10-27T04:32:05.653Z | 2025-10-27T20:04:43.065Z | |
| cve-2025-12215 | projectworlds Online Shopping System login_submit.php … |
projectworlds |
Online Shopping System |
2025-10-27T04:02:12.489Z | 2025-10-27T20:03:23.987Z | |
| cve-2025-12214 | Tenda O3 sysAutoReboot GetValue stack-based overflow |
Tenda |
O3 |
2025-10-27T04:02:10.027Z | 2025-10-27T20:02:25.401Z | |
| cve-2025-12213 | Tenda O3 setVlanConfig GetValue stack-based overflow |
Tenda |
O3 |
2025-10-27T04:02:06.607Z | 2025-10-27T15:16:14.832Z | |
| cve-2025-12212 | Tenda O3 setNetworkService GetValue stack-based overflow |
Tenda |
O3 |
2025-10-27T03:32:10.375Z | 2025-10-27T15:22:32.247Z | |
| cve-2025-12211 | Tenda O3 setDmzInfo GetValue stack-based overflow |
Tenda |
O3 |
2025-10-27T03:32:06.892Z | 2025-10-28T13:22:35.992Z | |
| cve-2025-58918 | 4.3 (v3.1) | WordPress Entrada theme <= 5.7.7 - Cross Site Request … |
Waituk |
Entrada |
2025-10-27T02:07:49.744Z | 2025-10-27T14:45:34.467Z |
| cve-2025-48088 | 6.5 (v3.1) | WordPress Ultimate Addons for WPBakery Page Builder pl… |
Brainstorm Force |
Ultimate Addons for WPBakery Page Builder |
2025-10-27T02:09:52.224Z | 2025-10-28T16:03:09.945Z |
| cve-2025-12210 | Tenda O3 AdvSetLanip GetValue stack-based overflow |
Tenda |
O3 |
2025-10-27T03:02:13.722Z | 2025-10-28T13:27:32.757Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-187832 | Malicious code in load-wind-root-balance-file (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187831 | Malicious code in load-protected-file-index-analyze (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187830 | Malicious code in load-integer-wind-byte-key (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187829 | Malicious code in load-float-omega-char-mock (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187828 | Malicious code in load-fire-balance-try-old (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187827 | Malicious code in load-abstract-final-static-pipe (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187826 | Malicious code in lithosphere-quark-mesosphere-cache (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187825 | Malicious code in lithosphere-pegasus-jest-paleoecology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187824 | Malicious code in lithosphere-markdown-pdf-winston-neptune (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187823 | Malicious code in lithosphere-inflation-antimatter-europa (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187822 | Malicious code in lithosphere-geodynamo-mui-robotics (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187821 | Malicious code in lithosphere-changelog-grunt-uglify-js (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187820 | Malicious code in lithosphere-buffer-jwt-prettier (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187819 | Malicious code in lithosphere-browserify-express-spectron (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187818 | Malicious code in lint-staged-tailwindcss-altair-dotenv-safe (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187817 | Malicious code in lint-staged-superagent-eridanus-bionics (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187816 | Malicious code in lint-staged-reveal-md-electron-convict (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187815 | Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187814 | Malicious code in lint-staged-javascript-jwt-zooarchaeology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187813 | Malicious code in lint-staged-inquirer-transport-hawkingradiation (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187812 | Malicious code in lint-staged-gemini-aquarius-superagent (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187811 | Malicious code in lint-remark-meteor-neptune (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187810 | Malicious code in lint-nuxtjs-babel-socketio (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187809 | Malicious code in lint-markdownlint-sedimentology-winston (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187808 | Malicious code in lint-loop-playwright-publish (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187807 | Malicious code in lint-less-loader-jekyll-virgo (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187806 | Malicious code in lint-janus-juno-blueshift (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187805 | Malicious code in lint-isostasy-altair-less-loader (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187804 | Malicious code in lint-cassini-metalsmith-jupiter (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187803 | Malicious code in lint-auth0-joviology-jovian (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:1308 | Red Hat Security Advisory: gcc security update | 2025-02-11T13:37:23+00:00 | 2025-11-06T23:54:02+00:00 |
| rhsa-2025:1312 | Red Hat Security Advisory: gcc security update | 2025-02-11T13:28:13+00:00 | 2025-11-06T23:54:05+00:00 |
| rhsa-2025:1306 | Red Hat Security Advisory: gcc-toolset-13-gcc security update | 2025-02-11T13:02:18+00:00 | 2025-11-06T23:53:59+00:00 |
| rhsa-2025:1300 | Red Hat Security Advisory: gcc-toolset-14-gcc security update | 2025-02-11T12:58:08+00:00 | 2025-11-06T23:53:58+00:00 |
| rhsa-2025:1305 | Red Hat Security Advisory: gcc security update | 2025-02-11T12:55:53+00:00 | 2025-11-06T23:53:59+00:00 |
| rhsa-2025:1310 | Red Hat Security Advisory: gcc security update | 2025-02-11T12:52:38+00:00 | 2025-11-06T23:54:00+00:00 |
| rhsa-2025:1120 | Red Hat Security Advisory: OpenShift Container Platform 4.17.16 bug fix and security update | 2025-02-11T11:31:16+00:00 | 2025-11-14T11:38:59+00:00 |
| rhsa-2025:1292 | Red Hat Security Advisory: thunderbird security update | 2025-02-11T11:29:33+00:00 | 2025-11-06T23:23:49+00:00 |
| rhsa-2025:1291 | Red Hat Security Advisory: kernel security update | 2025-02-11T11:22:53+00:00 | 2025-11-06T22:35:22+00:00 |
| rhsa-2025:1119 | Red Hat Security Advisory: OpenShift Container Platform 4.17.16 bug fix and security update | 2025-02-11T10:53:54+00:00 | 2025-11-14T11:38:59+00:00 |
| rhsa-2025:1289 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:53:10+00:00 | 2025-11-15T08:44:40+00:00 |
| rhsa-2025:1287 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:52:52+00:00 | 2025-11-15T08:44:39+00:00 |
| rhsa-2025:1286 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:51:36+00:00 | 2025-11-15T08:44:38+00:00 |
| rhsa-2025:1285 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:50:52+00:00 | 2025-11-15T08:44:37+00:00 |
| rhsa-2025:1283 | Red Hat Security Advisory: firefox security update | 2025-02-11T09:57:23+00:00 | 2025-11-06T23:23:49+00:00 |
| rhsa-2025:1282 | Red Hat Security Advisory: kernel security update | 2025-02-11T09:20:43+00:00 | 2025-11-06T22:35:21+00:00 |
| rhsa-2025:1281 | Red Hat Security Advisory: kernel security update | 2025-02-11T09:15:48+00:00 | 2025-11-06T22:35:21+00:00 |
| rhsa-2025:1280 | Red Hat Security Advisory: kernel-rt security update | 2025-02-11T09:03:52+00:00 | 2025-11-06T22:35:21+00:00 |
| rhsa-2025:1278 | Red Hat Security Advisory: kernel security update | 2025-02-11T08:55:27+00:00 | 2025-11-06T22:35:20+00:00 |
| rhsa-2025:1270 | Red Hat Security Advisory: kernel security update | 2025-02-11T04:34:47+00:00 | 2025-11-06T22:35:20+00:00 |
| rhsa-2025:1268 | Red Hat Security Advisory: kernel security update | 2025-02-11T04:26:52+00:00 | 2025-11-07T15:55:34+00:00 |
| rhsa-2025:1267 | Red Hat Security Advisory: kernel security update | 2025-02-11T04:17:57+00:00 | 2025-11-06T22:35:23+00:00 |
| rhsa-2025:1269 | Red Hat Security Advisory: kernel-rt security update | 2025-02-11T03:57:12+00:00 | 2025-11-07T15:55:36+00:00 |
| rhsa-2025:1266 | Red Hat Security Advisory: kernel security update | 2025-02-11T03:45:12+00:00 | 2025-11-06T22:35:19+00:00 |
| rhsa-2025:1264 | Red Hat Security Advisory: kernel security update | 2025-02-11T01:40:16+00:00 | 2025-11-06T22:35:18+00:00 |
| rhsa-2025:1262 | Red Hat Security Advisory: kernel security update | 2025-02-11T01:23:47+00:00 | 2025-11-06T22:35:18+00:00 |
| rhsa-2025:1255 | Red Hat Security Advisory: doxygen security update | 2025-02-10T22:29:46+00:00 | 2025-11-06T23:53:58+00:00 |
| rhsa-2025:1256 | Red Hat Security Advisory: doxygen security update | 2025-02-10T22:26:46+00:00 | 2025-11-06T23:53:58+00:00 |
| rhsa-2025:1253 | Red Hat Security Advisory: kernel security update | 2025-02-10T21:31:41+00:00 | 2025-11-07T15:55:34+00:00 |
| rhsa-2025:1254 | Red Hat Security Advisory: kernel-rt security update | 2025-02-10T21:29:11+00:00 | 2025-11-07T15:55:34+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-49882 | ext4: fix double brelse() the buffer of the extents path | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49881 | ext4: update orig_path in ext4_find_extent() | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49879 | drm: omapdrm: Add missing check for alloc_ordered_workqueue | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49878 | resource: fix region_intersects() vs add_memory_driver_managed() | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49877 | ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49875 | nfsd: map the EBADMSG to nfserr_io to avoid warning | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49874 | i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition | 2024-10-01T07:00:00.000Z | 2024-11-09T00:00:00.000Z |
| msrc_cve-2024-49871 | Input: adp5589-keys - fix NULL pointer dereference | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49870 | cachefiles: fix dentry leak in cachefiles_open_file() | 2024-10-01T07:00:00.000Z | 2024-11-12T00:00:00.000Z |
| msrc_cve-2024-49868 | btrfs: fix a NULL pointer dereference when failed to start a new trasacntion | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49867 | btrfs: wait for fixup workers before stopping cleaner kthread during umount | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49866 | tracing/timerlat: Fix a race during cpuhp processing | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49863 | vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49862 | powercap: intel_rapl: Fix off by one in get_rpi() | 2024-10-01T07:00:00.000Z | 2024-11-09T00:00:00.000Z |
| msrc_cve-2024-49861 | bpf: Fix helper writes to read-only maps | 2024-10-01T07:00:00.000Z | 2024-11-09T00:00:00.000Z |
| msrc_cve-2024-49860 | ACPI: sysfs: validate return type of _STR method | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49859 | f2fs: fix to check atomic_file in f2fs ioctl interfaces | 2024-10-01T07:00:00.000Z | 2024-11-09T00:00:00.000Z |
| msrc_cve-2024-49858 | efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49856 | x86/sgx: Fix deadlock in SGX NUMA node search | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49855 | nbd: fix race between timeout and normal completion | 2024-10-01T07:00:00.000Z | 2024-11-09T00:00:00.000Z |
| msrc_cve-2024-49854 | block bfq: fix uaf for accessing waker_bfqq after splitting | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49853 | firmware: arm_scmi: Fix double free in OPTEE transport | 2024-10-01T07:00:00.000Z | 2024-11-09T00:00:00.000Z |
| msrc_cve-2024-49852 | scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49851 | tpm: Clean up TPM space after command failure | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49850 | bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos | 2024-10-01T07:00:00.000Z | 2024-11-09T00:00:00.000Z |
| msrc_cve-2024-49769 | Waitress has a denial of service leading to high CPU usage/resource exhaustion | 2024-10-01T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-49767 | Werkzeug possible resource exhaustion when parsing file data in forms | 2024-10-01T07:00:00.000Z | 2024-12-12T00:00:00.000Z |
| msrc_cve-2024-49761 | REXML ReDoS vulnerability | 2024-10-01T07:00:00.000Z | 2024-12-19T00:00:00.000Z |
| msrc_cve-2024-49214 | QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality. | 2024-10-01T07:00:00.000Z | 2025-10-01T23:11:34.000Z |
| msrc_cve-2024-48958 | execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. | 2024-10-01T07:00:00.000Z | 2024-10-30T00:00:00.000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2009-000022 | Cross-site scripting vulnerability in MiniBBS from CGI RESCUE | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000021 | MiniBBS22 from CGI RESCUE allows unauthorized email transmission | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000020 | Movable Type cross-site scripting vulnerability | 2009-04-28T16:18+09:00 | 2009-07-29T12:22+09:00 |
| jvndb-2009-000019 | Cross-site scripting vulnerability in apricot.php from LovPop.net | 2009-04-17T14:40+09:00 | 2009-04-17T14:40+09:00 |
| jvndb-2009-001135 | Fujitsu Jasmine HTTP Response Splitting Vulnerability When Executing WebLink Template | 2009-04-17T14:13+09:00 | 2009-04-17T14:13+09:00 |
| jvndb-2009-000017 | XOOPS Cube Legacy cross-site scripting vulnerability | 2009-04-07T17:06+09:00 | 2009-04-07T17:06+09:00 |
| jvndb-2009-000016 | Access Analyzer CGI Professional Version vulnerability allows third party to gain administrative privileges | 2009-03-31T16:08+09:00 | 2009-03-31T16:08+09:00 |
| jvndb-2009-001087 | Fujitsu Enhanced Support Facility HRM-S Hardware/Software Information Disclosure Vulnerability | 2009-03-24T17:35+09:00 | 2009-03-24T17:35+09:00 |
| jvndb-2009-000015 | Cross-site scripting vulnerability in Access Analyzer CGI Standard Version (Ver. 3.x) | 2009-03-16T17:07+09:00 | 2009-03-16T17:07+09:00 |
| jvndb-2009-000014 | MP Form Mail CGI vulnerability allows third party to gain administrative privileges | 2009-03-13T16:25+09:00 | 2009-03-13T16:25+09:00 |
| jvndb-2009-000012 | Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras | 2009-03-09T16:27+09:00 | 2009-03-09T16:27+09:00 |
| jvndb-2009-000013 | PEAK XOOPS piCal cross-site scripting vulnerability | 2009-03-03T16:37+09:00 | 2009-03-03T16:37+09:00 |
| jvndb-2009-001033 | Multiple Vulnerabilities in uCosminexus Portal Framework | 2009-03-02T17:38+09:00 | 2009-03-02T17:38+09:00 |
| jvndb-2009-001032 | JP1/Cm2/Network Node Manager Denial of Service (DoS) Vulnerability | 2009-03-02T17:38+09:00 | 2009-03-02T17:38+09:00 |
| jvndb-2009-000010 | Apache Tomcat information disclosure vulnerability | 2009-02-26T15:28+09:00 | 2009-02-26T15:28+09:00 |
| jvndb-2009-001025 | Vulnerability allowing Viewing/Updating of Other Users' Information in Groupmax World Wide Web Desktop Version 6 | 2009-02-26T11:55+09:00 | 2009-02-26T11:55+09:00 |
| jvndb-2009-000009 | FAST ESP cross-site scripting vulnerability | 2009-02-17T11:55+09:00 | 2009-02-17T11:55+09:00 |
| jvndb-2009-000011 | Becky! Internet Mail buffer overflow vulnerability | 2009-02-12T17:28+09:00 | 2009-02-12T17:28+09:00 |
| jvndb-2006-000992 | Multiple Vulnerabilities Concerning Hitachi Web Server | 2009-02-04T17:42+09:00 | 2014-05-22T18:03+09:00 |
| jvndb-2009-000008 | Fulltext search CGI vulnerability allows third party to gain administrative privileges | 2009-01-28T15:25+09:00 | 2009-01-28T15:25+09:00 |
| jvndb-2009-000007 | Oracle WebLogic Server vulnerable to cross-site scripting | 2009-01-20T16:45+09:00 | 2009-01-20T16:45+09:00 |
| jvndb-2009-000006 | Cisco IOS cross-site scripting vulnerability | 2009-01-15T19:14+09:00 | 2009-01-15T19:14+09:00 |
| jvndb-2009-000002 | Movable Type Enterprise cross-site scripting vulnerability | 2009-01-13T18:50+09:00 | 2009-07-29T12:22+09:00 |
| jvndb-2009-000005 | MODx vulnerable to SQL injection | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000004 | MODx cross-site request forgery vulnerability | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000003 | MODx cross-site scripting vulnerability | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000001 | MyNETS cross-site scripting vulnerability | 2009-01-08T11:34+09:00 | 2009-01-08T11:34+09:00 |
| jvndb-2008-000086 | BlackJumboDog authentication bypass vulnerability | 2008-12-25T16:22+09:00 | 2008-12-25T16:22+09:00 |
| jvndb-2008-000085 | Mayaa cross-site scripting vulnerability | 2008-12-25T16:22+09:00 | 2008-12-25T16:22+09:00 |
| jvndb-2008-000084 | PHP vulnerable to cross-site scripting | 2008-12-19T15:37+09:00 | 2010-10-19T17:40+09:00 |
| ID | Description | Updated |
|---|