Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-jqh6-r2gj-x2xp | In the Linux kernel, the following vulnerability has been resolved: f2fs: Fix system crash due to … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-jfm8-wf93-6c4c | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_sdei: Fix sleep … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-hxpg-6jhj-qw4q | In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock b… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-hr7g-x38j-56v5 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor ne… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-hqhr-cmq5-2w3r | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of alloc->vma … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-g4x6-vrjg-m8w6 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix an out of bounds … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-crmq-c99h-f986 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-969x-jvv9-7j58 | In the Linux kernel, the following vulnerability has been resolved: ext4: turn quotas off if mount… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-7j7j-rcvh-xpm2 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix null-ptr-deref in… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-6qcc-hqxv-5rww | In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading st… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-4vh9-h9jw-r347 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: avoid suspicious RCU… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-4jvp-69v8-wvq5 | In the Linux kernel, the following vulnerability has been resolved: net: core: remove unnecessary … | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-35f8-m7gp-7vmp | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix target… | 2025-12-24T15:30:40Z | 2025-12-24T15:30:40Z |
| ghsa-wg2w-8j36-3rqh | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of … | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-vjmx-q9jh-3hmp | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kernel warning… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-v5xj-7363-557x | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: Fix memory leak … | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-rxqc-v8m6-3ph4 | In the Linux kernel, the following vulnerability has been resolved: serial: sprd: Fix DMA buffer l… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-rhjm-7jhc-x7ww | In the Linux kernel, the following vulnerability has been resolved: nfp: clean mc addresses in app… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-rh3v-jp2c-rq2q | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix r… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-pfr2-326c-2j2w | In the Linux kernel, the following vulnerability has been resolved: fs/jfs: prevent double-free in… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-mj5f-xm29-rm3f | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_o… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-m575-6r3m-823p | In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-tri… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-frp2-qrfx-2m63 | In the Linux kernel, the following vulnerability has been resolved: gtp: Fix use-after-free in __g… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-8vr5-q73g-2w33 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix WARNING in mark_bu… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-8m37-c7gh-2jmr | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Ensure wr… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-8c3j-jg6j-52j2 | In the Linux kernel, the following vulnerability has been resolved: autofs: fix memory leak of wai… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-84w3-9hf3-rf66 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on irq… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-78pw-r9wg-6p38 | In the Linux kernel, the following vulnerability has been resolved: vfio/type1: fix cap_migration … | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-756h-2p6r-crqr | In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under … | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ghsa-6m52-8r59-r63x | In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compac… | 2025-12-24T15:30:39Z | 2025-12-24T15:30:39Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-13699 | 7 (v3.0) | MariaDB mariadb-dump Utility Directory Traversal Remot… |
MariaDB |
MariaDB |
2025-12-23T21:40:56.956Z | 2025-12-24T16:10:43.525Z |
| cve-2025-61258 | N/A | Outsystems Platform Server 11.18.1.37828 allows a… |
n/a |
n/a |
2025-12-09T00:00:00.000Z | 2025-12-24T16:06:47.086Z |
| cve-2025-12838 | 7.3 (v3.0) | MSP360 Free Backup Link Following Local Privilege Esca… |
MSP360 |
Free Backup |
2025-12-23T21:41:11.250Z | 2025-12-24T16:06:22.818Z |
| cve-2025-12495 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:27.753Z | 2025-12-24T16:05:06.561Z |
| cve-2025-12839 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:37.030Z | 2025-12-24T16:04:35.072Z |
| cve-2025-12840 | 7.8 (v3.0) | Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:45.445Z | 2025-12-24T16:04:03.735Z |
| cve-2025-66209 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T21:42:18.324Z | 2025-12-24T15:51:59.319Z |
| cve-2025-68750 | N/A | usb: potential integer overflow in usbg_make_tpg() |
Linux |
Linux |
2025-12-24T15:51:03.141Z | 2025-12-24T15:51:03.141Z |
| cve-2025-13700 | 7.2 (v3.0) | DreamFactory saveZipFile Command Injection Remote Code… |
DreamFactory |
DreamFactory |
2025-12-23T21:42:47.128Z | 2025-12-24T15:50:50.852Z |
| cve-2025-12491 | 7.5 (v3.0) | Senstar Symphony FetchStoredLicense Information Disclo… |
Senstar |
Symphony |
2025-12-23T21:43:02.940Z | 2025-12-24T15:38:12.755Z |
| cve-2025-14412 | 7.8 (v3.0) | Soda PDF Desktop XLS File Insufficient UI Warning Remo… |
Soda PDF |
Desktop |
2025-12-23T21:24:04.860Z | 2025-12-24T15:37:39.350Z |
| cve-2025-66210 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T21:49:44.710Z | 2025-12-24T15:28:51.896Z |
| cve-2025-66211 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T22:00:36.081Z | 2025-12-24T15:16:10.121Z |
| cve-2025-15047 | Tenda WH450 HTTP Request PPTPDClient stack-based overflow |
Tenda |
WH450 |
2025-12-23T22:02:08.039Z | 2025-12-24T15:12:56.163Z | |
| cve-2025-66212 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T22:04:18.883Z | 2025-12-24T14:56:57.280Z |
| cve-2025-66213 | 9.4 (v4.0) | Coolify Vulnerable to Authenticated Remote Code Execut… |
coollabsio |
coolify |
2025-12-23T22:06:38.995Z | 2025-12-24T14:55:53.307Z |
| cve-2025-15048 | Tenda WH450 HTTP Request CheckTools command injection |
Tenda |
WH450 |
2025-12-23T22:32:06.550Z | 2025-12-24T14:54:13.556Z | |
| cve-2025-68617 | Use after free in fluidsynth |
FluidSynth |
fluidsynth |
2025-12-23T22:41:28.861Z | 2025-12-24T14:53:35.537Z | |
| cve-2025-68667 | continuwuity Has an Unintended Proxy or Intermediary a… |
continuwuity |
continuwuity |
2025-12-23T22:45:25.958Z | 2025-12-24T14:51:52.781Z | |
| cve-2025-59933 | libvips is vulnerable to Buffer Over-Read in poppler-b… |
libvips |
libvips |
2025-09-29T22:04:09.404Z | 2025-12-24T14:49:49.725Z | |
| cve-2025-49144 | Notepad++ Privilege Escalation in Installer via Uncont… |
notepad-plus-plus |
notepad-plus-plus |
2025-06-23T19:01:16.276Z | 2025-12-24T14:46:08.689Z | |
| cve-2025-62549 | 8.8 (v3.1) | Windows Routing and Remote Access Service (RRAS) Remot… |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:55:38.801Z | 2025-12-24T14:42:03.416Z |
| cve-2025-68664 | LangChain serialization injection vulnerability enable… |
langchain-ai |
langchain |
2025-12-23T22:47:44.084Z | 2025-12-24T14:40:58.427Z | |
| cve-2025-68669 | 5ire vulnerable to Remote Code Execution (RCE) via mermaid |
nanbingxyz |
5ire |
2025-12-23T22:51:35.848Z | 2025-12-24T14:39:38.656Z | |
| cve-2025-68665 | LangChain serialization injection vulnerability enable… |
langchain-ai |
langchainjs |
2025-12-23T22:56:04.837Z | 2025-12-24T14:38:40.268Z | |
| cve-2025-54100 | 7.8 (v3.1) | PowerShell Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:56:09.562Z | 2025-12-24T14:37:33.163Z |
| cve-2025-68696 | httparty Has Potential SSRF Vulnerability That Leads t… |
jnunemaker |
httparty |
2025-12-23T22:59:04.201Z | 2025-12-24T14:31:58.017Z | |
| cve-2025-15049 | code-projects Online Farm System addProduct.php sql in… |
code-projects |
Online Farm System |
2025-12-23T23:02:07.647Z | 2025-12-24T14:24:53.874Z | |
| cve-2024-58335 | OpenXRechnungToolbox through 2024-10-05-3.0.0 bef… |
jcthiele |
OpenXRechnungToolbox |
2025-12-24T00:00:00.000Z | 2025-12-24T14:22:58.208Z | |
| cve-2025-15050 | code-projects Student File Management System save_file… |
code-projects |
Student File Management System |
2025-12-24T00:32:05.799Z | 2025-12-24T14:21:48.005Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2023-53914 | 9.3 (v4.0) 9.8 (v3.1) | UliCMS 2023.1 Authentication Bypass via Mass Assignmen… |
ulicms |
Ulicms |
2025-12-17T22:44:49.556Z | 2025-12-18T15:03:56.460Z |
| cve-2022-50680 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.92 Email Marketing Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:27.435Z | 2025-12-18T21:47:54.940Z |
| cve-2022-50681 | 5.1 (v4.0) 5.4 (v3.1) | Kentico Xperience <= 13.0.88 Rich Text Editor Reflected XSS |
Kentico |
Xperience |
2025-12-18T19:53:27.828Z | 2025-12-18T21:47:49.877Z |
| cve-2022-50682 | 6.9 (v4.0) 6.5 (v3.1) | Kentico Xperience <= 13.0.79 Routing Engine CRLF Injection |
Kentico |
Xperience |
2025-12-18T19:53:28.227Z | 2025-12-18T21:47:44.125Z |
| cve-2022-50683 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.74 Form Configuration Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:28.675Z | 2025-12-18T21:47:38.875Z |
| cve-2022-50684 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.71 Form Emails HTML Injection |
Kentico |
Xperience |
2025-12-18T19:53:29.121Z | 2025-12-18T20:40:44.708Z |
| cve-2022-50685 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.56 File Upload Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:29.551Z | 2025-12-18T21:19:48.667Z |
| cve-2022-50686 | 6.9 (v4.0) 5.3 (v3.1) | Kentico Xperience <= 12.0 Portal Engine Form Control I… |
Kentico |
Xperience |
2025-12-18T19:53:30.061Z | 2025-12-18T21:19:43.244Z |
| cve-2023-53736 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.120 Administration Interface… |
Kentico |
Xperience |
2025-12-18T19:53:30.487Z | 2025-12-18T21:19:38.401Z |
| cve-2023-53737 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.101 Localization Application… |
Kentico |
Xperience |
2025-12-18T19:53:30.896Z | 2025-12-18T21:47:33.565Z |
| cve-2023-53738 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.109 Page Preview Reflected XSS |
Kentico |
Xperience |
2025-12-18T19:53:31.326Z | 2025-12-18T21:47:28.381Z |
| cve-2023-53934 | 8.7 (v4.0) 7.5 (v3.1) | Kentico Xperience <= 12.0.98 GetResource Handler Denia… |
Kentico |
Xperience |
2025-12-18T19:53:32.524Z | 2025-12-18T21:47:23.467Z |
| cve-2023-53898 | 5.1 (v4.0) 4.6 (v3.1) | Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting… |
Rukovoditel |
Rukovoditel |
2025-12-16T17:03:46.653Z | 2025-12-18T20:53:14.732Z |
| cve-2023-53897 | 5.1 (v4.0) 4.6 (v3.1) | Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting… |
Rukovoditel |
Rukovoditel |
2025-12-16T17:03:46.046Z | 2025-12-18T20:53:03.273Z |
| cve-2023-53902 | 7 (v4.0) 6.5 (v3.1) | WebsiteBaker 2.13.3 Directory Traversal via Media Dele… |
websitebaker |
WebsiteBaker |
2025-12-16T17:03:48.466Z | 2025-12-18T20:53:28.524Z |
| cve-2023-53952 | 8.7 (v4.0) 8.8 (v3.1) | Dotclear 2.25.3 Authenticated Remote Code Execution vi… |
Dotclear |
Dotclear |
2025-12-19T21:05:51.107Z | 2025-12-19T21:55:19.452Z |
| cve-2023-53953 | 5.1 (v4.0) 6.4 (v3.1) | WebsiteBaker 2.13.3 Stored Cross-Site Scripting via Pa… |
Websitebaker |
WebsiteBaker |
2025-12-19T21:07:39.820Z | 2025-12-19T21:24:53.593Z |
| cve-2023-53933 | 8.7 (v4.0) 8.8 (v3.1) | Serendipity 2.4.0 Authenticated Remote Code Execution … |
s9y |
Serendipity |
2025-12-17T22:44:59.632Z | 2025-12-18T18:54:23.264Z |
| cve-2023-53932 | 5.1 (v4.0) 4.6 (v3.1) | Serendipity 2.4.0 Stored Cross-Site Scripting via Admi… |
s9y |
Serendipity |
2025-12-17T22:44:59.094Z | 2025-12-18T18:54:27.839Z |
| cve-2023-53922 | 9.3 (v4.0) 9.8 (v3.1) | TinyWebGallery v2.5 Remote Code Execution via Unrestri… |
TinyWebGallery |
TinyWebGallery |
2025-12-17T22:44:53.801Z | 2025-12-18T18:54:43.367Z |
| cve-2023-53931 | 5.1 (v4.0) 5.4 (v3.1) | Revive Adserver 5.4.1 Cross-Site Scripting via Banner … |
Revive-adserver |
revive-adserver |
2025-12-17T22:44:58.562Z | 2025-12-18T15:02:00.360Z |
| cve-2023-53939 | 5.1 (v4.0) 5.4 (v3.1) | TinyWebGallery v2.5 Stored Cross-Site Scripting via Fo… |
TinyWebGallery |
TinyWebGallery |
2025-12-18T19:53:34.564Z | 2025-12-18T21:46:58.131Z |
| cve-2024-58322 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.158 Shipping Options Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:39.280Z | 2025-12-18T21:18:49.590Z |
| cve-2024-58321 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.159 Form Validation Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:38.873Z | 2025-12-18T21:18:54.615Z |
| cve-2024-58320 | 6.9 (v4.0) 5.3 (v3.1) | Kentico Xperience <= 13.0.159 Authentication Informati… |
Kentico |
Xperience |
2025-12-18T19:53:38.454Z | 2025-12-18T21:18:59.622Z |
| cve-2024-58319 | 5.1 (v4.0) 5.4 (v3.1) | Kentico Xperience <= 13.0.160 Pages Dashboard Widget R… |
Kentico |
Xperience |
2025-12-18T19:53:37.996Z | 2025-12-18T21:19:06.462Z |
| cve-2024-58318 | 5.1 (v4.0) 5.4 (v3.1) | Kentico Xperience <= 13.0.162 Rich Text Editor Stored XSS |
Kentico |
Xperience |
2025-12-18T19:53:37.545Z | 2025-12-18T21:19:12.777Z |
| cve-2024-58317 | 6.9 (v4.0) 5.3 (v3.1) | Kentico Xperience <= 13.0.164 Cookie Security Configuration |
Kentico |
Xperience |
2025-12-18T19:53:37.121Z | 2025-12-18T21:19:17.630Z |
| cve-2024-58323 | 5.1 (v4.0) 4.6 (v3.1) | Kentico Xperience <= 13.0.158 Checkbox Form Component … |
Kentico |
Xperience |
2025-12-18T19:53:39.715Z | 2025-12-18T21:18:43.970Z |
| cve-2025-14731 | CTCMS Content Management System Frontend/Template Mana… |
CTCMS |
Content Management System |
2025-12-15T23:32:09.187Z | 2025-12-16T15:09:13.941Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2023-53914 | UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers… | 2025-12-17T23:15:49.983 | 2025-12-24T17:04:53.853 |
| fkie_cve-2022-50680 | A stored cross-site scripting vulnerability in Kentico Xperience allows administration users to inj… | 2025-12-18T20:15:49.980 | 2025-12-24T17:03:39.167 |
| fkie_cve-2022-50681 | A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject mali… | 2025-12-18T20:15:50.133 | 2025-12-24T17:03:32.390 |
| fkie_cve-2022-50682 | A CRLF injection vulnerability in Kentico Xperience allows attackers to manipulate URL query string… | 2025-12-18T20:15:50.287 | 2025-12-24T17:03:26.313 |
| fkie_cve-2022-50683 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:50.437 | 2025-12-24T17:03:14.683 |
| fkie_cve-2022-50684 | An HTML injection vulnerability in Kentico Xperience allows attackers to inject malicious HTML valu… | 2025-12-18T20:15:50.593 | 2025-12-24T17:03:08.677 |
| fkie_cve-2022-50685 | A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inje… | 2025-12-18T20:15:50.753 | 2025-12-24T17:02:58.607 |
| fkie_cve-2022-50686 | An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive sta… | 2025-12-18T20:15:50.897 | 2025-12-24T17:02:48.187 |
| fkie_cve-2023-53736 | A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to i… | 2025-12-18T20:15:51.060 | 2025-12-24T17:02:18.263 |
| fkie_cve-2023-53737 | A stored cross-site scripting vulnerability in Kentico Xperience allows global administrators to in… | 2025-12-18T20:15:51.213 | 2025-12-24T17:02:10.700 |
| fkie_cve-2023-53738 | A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to i… | 2025-12-18T20:15:51.383 | 2025-12-24T17:02:03.637 |
| fkie_cve-2023-53934 | A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via s… | 2025-12-18T20:15:51.530 | 2025-12-24T17:01:50.553 |
| fkie_cve-2023-53898 | Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated a… | 2025-12-16T17:16:02.060 | 2025-12-24T16:59:54.303 |
| fkie_cve-2023-53897 | Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenti… | 2025-12-16T17:16:01.900 | 2025-12-24T16:59:45.537 |
| fkie_cve-2023-53902 | WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attacker… | 2025-12-16T17:16:02.537 | 2025-12-24T16:58:04.950 |
| fkie_cve-2023-53952 | Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers … | 2025-12-19T21:15:51.420 | 2025-12-24T16:57:35.790 |
| fkie_cve-2023-53953 | WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated … | 2025-12-19T21:15:51.590 | 2025-12-24T16:56:50.823 |
| fkie_cve-2023-53933 | Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attacker… | 2025-12-17T23:15:52.973 | 2025-12-24T16:52:17.043 |
| fkie_cve-2023-53932 | Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated us… | 2025-12-17T23:15:52.817 | 2025-12-24T16:52:03.030 |
| fkie_cve-2023-53922 | TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionalit… | 2025-12-17T23:15:51.270 | 2025-12-24T16:50:20.607 |
| fkie_cve-2023-53931 | Revive Adserver 5.4.1 contains a cross-site scripting vulnerability in the banner advanced configur… | 2025-12-17T23:15:52.650 | 2025-12-24T16:48:11.700 |
| fkie_cve-2023-53939 | TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated … | 2025-12-18T20:15:52.323 | 2025-12-24T16:46:55.073 |
| fkie_cve-2024-58322 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:54.233 | 2025-12-24T16:40:03.323 |
| fkie_cve-2024-58321 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:54.080 | 2025-12-24T16:39:49.667 |
| fkie_cve-2024-58320 | An information disclosure vulnerability in Kentico Xperience allows public users to access sensitiv… | 2025-12-18T20:15:53.933 | 2025-12-24T16:39:35.703 |
| fkie_cve-2024-58319 | A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject mali… | 2025-12-18T20:15:53.780 | 2025-12-24T16:39:18.857 |
| fkie_cve-2024-58318 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:53.637 | 2025-12-24T16:39:07.140 |
| fkie_cve-2024-58317 | A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL r… | 2025-12-18T20:15:53.473 | 2025-12-24T16:38:56.773 |
| fkie_cve-2024-58323 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicio… | 2025-12-18T20:15:54.380 | 2025-12-24T16:38:03.877 |
| fkie_cve-2025-14731 | A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unkn… | 2025-12-16T00:16:01.800 | 2025-12-24T16:21:59.443 |
| ID | Description | Package | Published | Updated |
|---|---|---|---|---|
| pysec-2018-149 | The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of In… | galaxy-app | 2018-06-26T16:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2017-147 | In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of da… | pyspark | 2017-09-13T16:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2017-145 | OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local… | nova | 2017-08-09T18:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2017-143 | The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypas… | glance | 2017-03-29T14:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2016-38 | The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) al… | keystone | 2016-06-13T14:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-40 | Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack … | horizon | 2015-08-20T20:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-39 | The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo… | glance | 2015-08-19T15:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-38 | OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not p… | glance | 2015-02-24T15:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-37 | OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not p… | glance | 2015-02-24T15:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-116 | The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 thr… | swift | 2014-01-23T01:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-113 | The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly p… | nova | 2014-03-25T16:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-112 | The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse … | nova | 2014-05-08T14:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-111 | The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver … | nova | 2014-02-06T17:00:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-109 | OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not … | keystone | 2014-08-25T14:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-108 | The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Ju… | keystone | 2014-08-25T14:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-107 | The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Ju… | keystone | 2014-08-25T14:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-106 | The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before ic… | keystone | 2014-04-15T14:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-105 | The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 201… | keystone | 2014-04-01T06:35:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-102 | OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehou… | glance | 2014-02-14T15:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-44 | OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly i… | nova | 2013-03-22T21:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-43 | OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authe… | nova | 2013-03-22T21:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-42 | The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.… | keystone | 2013-09-23T20:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-41 | OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and H… | keystone | 2013-05-21T18:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-39 | OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keysto… | keystone | 2013-03-22T21:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2010-32 | ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to… | Zope | 2010-09-08T20:00:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2009-13 | MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to… | moin | 2009-04-03T18:30:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2009-12 | The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the crackli… | moin | 2009-03-30T01:30:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2008-14 | Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 a… | Plone | 2008-03-20T00:44:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2008-13 | Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (a… | moin | 2008-07-30T18:41:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2008-12 | The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non… | moin | 2008-04-25T06:05:00Z | 2024-11-25T18:35:18.357593Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33772 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.282306Z |
| gsd-2024-31152 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:17.731991Z |
| gsd-2024-4273 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.625570Z |
| gsd-2024-4227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.624403Z |
| gsd-2024-4255 | A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to … | 2024-04-27T05:02:16.623487Z |
| gsd-2024-4265 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.621175Z |
| gsd-2024-4233 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.618656Z |
| gsd-2024-4283 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.614027Z |
| gsd-2024-4289 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.612538Z |
| gsd-2024-4287 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.611362Z |
| gsd-2024-4235 | A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This v… | 2024-04-27T05:02:16.608439Z |
| gsd-2024-4246 | A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.14(4656).… | 2024-04-27T05:02:16.603900Z |
| gsd-2024-4263 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.603449Z |
| gsd-2024-4252 | A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687). This af… | 2024-04-27T05:02:16.602334Z |
| gsd-2024-4229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.599914Z |
| gsd-2024-4285 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.599710Z |
| gsd-2024-4286 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.599503Z |
| gsd-2024-4282 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.598979Z |
| gsd-2024-4242 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. This … | 2024-04-27T05:02:16.596328Z |
| gsd-2024-4267 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.595290Z |
| gsd-2024-4266 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.592000Z |
| gsd-2024-4247 | A vulnerability has been found in Tenda i21 1.0.0.14(4656) and classified as critical. Th… | 2024-04-27T05:02:16.588079Z |
| gsd-2024-4254 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587642Z |
| gsd-2024-4260 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587447Z |
| gsd-2024-4230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587245Z |
| gsd-2024-4232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587045Z |
| gsd-2024-4240 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. … | 2024-04-27T05:02:16.585061Z |
| gsd-2024-4264 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.584159Z |
| gsd-2024-4258 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.581681Z |
| gsd-2024-4259 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.580041Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192771 | Malicious code in elf-stats-glittering-cookie-844 (npm) | 2025-12-23T08:08:17Z | 2025-12-24T00:53:16Z |
| mal-2025-192770 | Malicious code in elf-stats-ginger-bow-370 (npm) | 2025-12-23T08:08:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192769 | Malicious code in elf-stats-fuzzy-ribbon-205 (npm) | 2025-12-23T08:08:00Z | 2025-12-24T00:53:16Z |
| mal-2025-192768 | Malicious code in elf-stats-flickering-satchel-815 (npm) | 2025-12-23T08:07:45Z | 2025-12-24T00:53:16Z |
| mal-2025-192767 | Malicious code in elf-stats-festive-marshmallow-962 (npm) | 2025-12-23T08:07:35Z | 2025-12-24T00:53:16Z |
| mal-2025-192766 | Malicious code in elf-stats-evergreen-lantern-387 (npm) | 2025-12-23T08:07:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192765 | Malicious code in elf-stats-ember-workbench-742 (npm) | 2025-12-23T08:07:16Z | 2025-12-24T00:53:16Z |
| mal-2025-192755 | Malicious code in dotjsenv (npm) | 2025-12-23T18:37:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192754 | Malicious code in chai-max (npm) | 2025-12-23T18:30:01Z | 2025-12-24T00:53:16Z |
| mal-2025-192753 | Malicious code in chai-async-chains (npm) | 2025-12-23T18:26:52Z | 2025-12-24T00:53:16Z |
| mal-2025-192751 | Malicious code in elf-stats-cosy-sled-455 (npm) | 2025-12-23T08:07:03Z | 2025-12-24T00:53:16Z |
| mal-2025-192750 | Malicious code in elf-stats-cosy-cocoa-331 (npm) | 2025-12-23T08:07:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192743 | Malicious code in dotenv-extend (npm) | 2025-12-23T16:58:53Z | 2025-12-24T00:53:16Z |
| mal-2025-192742 | Malicious code in chai-tests-await (npm) | 2025-12-23T16:58:53Z | 2025-12-24T00:53:16Z |
| mal-2025-192741 | Malicious code in elf-stats-cocoa-mitten-558 (npm) | 2025-12-23T08:06:52Z | 2025-12-24T00:53:16Z |
| mal-2025-192740 | Malicious code in elf-stats-caroling-wreath-635 (npm) | 2025-12-23T08:06:45Z | 2025-12-24T00:53:16Z |
| mal-2025-192739 | Malicious code in elf-stats-caroling-train-677 (npm) | 2025-12-23T08:06:35Z | 2025-12-24T00:53:16Z |
| mal-2025-192738 | Malicious code in elf-stats-caroling-star-725 (npm) | 2025-12-23T08:06:34Z | 2025-12-24T00:53:16Z |
| mal-2025-192737 | Malicious code in elf-stats-candlelit-ornament-402 (npm) | 2025-12-23T08:06:15Z | 2025-12-24T00:53:16Z |
| mal-2025-192736 | Malicious code in elf-stats-bright-pinecone-706 (npm) | 2025-12-23T08:06:06Z | 2025-12-24T00:53:16Z |
| mal-2025-192735 | Malicious code in elf-stats-aurora-rocket-733 (npm) | 2025-12-23T08:06:01Z | 2025-12-24T00:53:16Z |
| mal-2025-192734 | Malicious code in elf-stats-aurora-drum-979 (npm) | 2025-12-23T08:05:59Z | 2025-12-24T00:53:16Z |
| mal-2025-192733 | Malicious code in ddxq_cms_tools (npm) | 2025-12-23T08:04:21Z | 2025-12-24T00:53:16Z |
| mal-2025-192732 | Malicious code in ddos-turbo-max (npm) | 2025-12-23T08:04:20Z | 2025-12-24T00:53:16Z |
| mal-2025-192731 | Malicious code in ddos-turbo-ecma (npm) | 2025-12-23T08:04:20Z | 2025-12-24T00:53:16Z |
| mal-2025-192730 | Malicious code in corplib (npm) | 2025-12-23T08:03:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192728 | Malicious code in cookie-mapper (npm) | 2025-12-23T08:03:19Z | 2025-12-24T00:53:16Z |
| mal-2025-192727 | Malicious code in cookie-breaker (npm) | 2025-12-23T08:03:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192726 | Malicious code in cms_comp_popup (npm) | 2025-12-23T08:02:49Z | 2025-12-24T00:53:16Z |
| mal-2025-192725 | Malicious code in chai-pack (npm) | 2025-12-23T08:02:18Z | 2025-12-24T00:53:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0035 | Linux Kernel: Mehrere Schwachstellen | 2025-01-08T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-0017 | Redis: Mehrere Schwachstellen | 2025-01-06T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3754 | shadow: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2024-12-26T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3714 | Xen: Mehrere Schwachstellen | 2024-12-17T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3619 | Linux Kernel: Mehrere Schwachstellen | 2024-12-05T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3608 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-12-04T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3575 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-12-02T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3509 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-11-19T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3497 | Linux Kernel: Mehrere Schwachstellen | 2024-11-18T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3461 | Red Hat Enterprise Linux (WebKitGTK): Mehrere Schwachstellen | 2024-11-13T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3129 | Docker Desktop: Mehrere Schwachstellen | 2024-10-09T22:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3066 | Redis: Mehrere Schwachstellen | 2024-10-03T22:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-2173 | Linux Kernel: Mehrere Schwachstellen | 2024-09-17T22:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-2133 | Linux Kernel: Mehrere Schwachstellen | 2024-09-12T22:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-1625 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-07-16T22:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-0984 | Linux Kernel: Mehrere Schwachstellen | 2024-04-28T22:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-0278 | expat: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-02-04T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2024-0219 | libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-01-25T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2023-2987 | Red Hat OpenStack: Schwachstelle ermöglicht Erlangung erweiterter Privilegien | 2023-11-21T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2023-2710 | QT: Schwachstelle ermöglicht Denial of Service | 2023-10-18T22:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2022-2058 | Grub2: Mehrere Schwachstellen | 2022-11-15T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2022-1964 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-11-06T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2022-0047 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2021-12-01T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-1007 | Apple macOS: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0201 | Apple macOS, iPadOS und iOS: Mehrere Schwachstellen | 2025-01-27T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2654 | MongoDB (Server): Schwachstelle ermöglicht Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2653 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2652 | Red Hat Satellite: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2649 | Google Cloud Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2647 | SonicWall Email Security: Mehrere Schwachstellen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| SSA-723487 | SSA-723487: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Products | 2024-07-09T00:00:00Z | 2025-12-09T00:00:00Z |
| SSA-654798 | SSA-654798: Incorrect Authorization Vulnerability in SIMATIC CP 1543-1 Devices | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| SSA-629254 | SSA-629254: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems | 2024-09-10T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-616032 | SSA-616032: Local Privilege Escalation Vulnerability in Spectrum Power 7 Before V24Q3 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| SSA-599968 | SSA-599968: Denial of Service Vulnerability in Profinet Devices | 2021-07-13T00:00:00Z | 2024-12-10T00:00:00Z |
| SSA-454789 | SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| SSA-398330 | SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 | 2023-12-12T00:00:00Z | 2025-08-12T00:00:00Z |
| SSA-364175 | SSA-364175: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1 | 2024-07-09T00:00:00Z | 2025-07-08T00:00:00Z |
| SSA-354112 | SSA-354112: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.2 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| SSA-351178 | SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 9 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| SSA-331112 | SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| SSA-265688 | SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 | 2024-04-09T00:00:00Z | 2025-10-14T00:00:00Z |
| SSA-230445 | SSA-230445: Stored XSS Vulnerability in OZW Web Servers Before V5.2 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| SSA-064257 | SSA-064257: Privilege Escalation Vulnerability in SIPORT Before V3.4.0 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| SSA-054046 | SSA-054046: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs | 2024-10-08T00:00:00Z | 2025-10-14T00:00:00Z |
| SSA-039007 | SSA-039007: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) | 2024-09-10T00:00:00Z | 2025-10-14T00:00:00Z |
| SSA-000297 | SSA-000297: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller Before V5.6 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-333468 | SSA-333468: Multiple Vulnerabilities in InterMesh Subscriber Devices | 2024-10-23T00:00:00Z | 2024-10-23T00:00:00Z |
| SSA-333468 | SSA-333468: Multiple Vulnerabilities in InterMesh Subscriber Devices | 2024-10-23T00:00:00Z | 2024-10-23T00:00:00Z |
| ssa-438590 | SSA-438590: Buffer Overflow Vulnerability in Siveillance Video Camera Drivers | 2024-10-10T00:00:00Z | 2024-10-10T00:00:00Z |
| SSA-438590 | SSA-438590: Buffer Overflow Vulnerability in Siveillance Video Camera Drivers | 2024-10-10T00:00:00Z | 2024-10-10T00:00:00Z |
| ssa-959281 | SSA-959281: XML File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-955858 | SSA-955858: Multiple Vulnerabilities in LOGO! 8 BM Devices | 2022-10-11T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-921449 | SSA-921449: Plaintext Storage of a Password Vulnerability in LOGO! V8.3 BM Devices | 2024-08-13T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-852501 | SSA-852501: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-850560 | SSA-850560: Use of 4-Digit PIN in SENTRON PAC3200 Devices | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-844582 | SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA | 2023-12-12T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-783481 | SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM | 2021-03-09T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-626178 | SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-540493 | SSA-540493: Kiosk Mode Escape Vulnerability in HiMed Cockpit Devices Before V11.6.2 | 2024-10-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:1449 | Red Hat Security Advisory: OpenShift Container Platform 4.15.5 bug fix and security update | 2024-03-27T11:18:26+00:00 | 2025-11-29T06:51:55+00:00 |
| rhsa-2024:10813 | Red Hat Security Advisory: OpenShift Container Platform 4.13.54 bug fix and security update | 2024-12-12T02:08:06+00:00 | 2025-11-29T06:51:55+00:00 |
| rhsa-2024:10523 | Red Hat Security Advisory: OpenShift Container Platform 4.14.42 bug fix and security update | 2024-12-05T00:33:01+00:00 | 2025-11-29T06:51:53+00:00 |
| rhsa-2024:1052 | Red Hat Security Advisory: OpenShift Container Platform 4.12.51 bug fix and security update | 2024-03-06T00:38:22+00:00 | 2025-11-29T06:51:53+00:00 |
| rhsa-2024:1037 | Red Hat Security Advisory: OpenShift Container Platform 4.13.36 bug fix and security update | 2024-03-06T14:46:43+00:00 | 2025-11-29T06:51:53+00:00 |
| rhsa-2024:10142 | Red Hat Security Advisory: OpenShift Container Platform 4.15.39 bug fix and security update | 2024-11-26T11:17:01+00:00 | 2025-11-29T06:51:52+00:00 |
| rhsa-2024:0954 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update | 2024-02-27T15:16:25+00:00 | 2025-11-29T06:51:51+00:00 |
| rhsa-2024:0946 | Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update | 2024-02-28T14:03:56+00:00 | 2025-11-29T06:51:50+00:00 |
| rhsa-2024:0941 | Red Hat Security Advisory: OpenShift Container Platform 4.14.14 bug fix and security update | 2024-02-28T00:21:13+00:00 | 2025-11-29T06:51:48+00:00 |
| rhsa-2024:0837 | Red Hat Security Advisory: OpenShift Container Platform 4.14.13 security update | 2024-02-20T15:27:06+00:00 | 2025-11-29T06:51:48+00:00 |
| rhsa-2024:0833 | Red Hat Security Advisory: OpenShift Container Platform 4.12.50 bug fix and security update | 2024-02-21T01:44:15+00:00 | 2025-11-29T06:51:47+00:00 |
| rhsa-2024:0777 | Red Hat Security Advisory: jenkins and jenkins-2-plugins security update | 2024-02-12T10:27:23+00:00 | 2025-11-29T06:51:45+00:00 |
| rhsa-2024:0766 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security update | 2024-02-28T08:10:56+00:00 | 2025-11-29T06:51:44+00:00 |
| rhsa-2024:0741 | Red Hat Security Advisory: OpenShift Container Platform 4.13.33 bug fix and security update | 2024-02-14T06:34:01+00:00 | 2025-11-29T06:51:44+00:00 |
| rhsa-2024:0682 | Red Hat Security Advisory: OpenShift Container Platform 4.11.58 bug fix and security update | 2024-02-08T18:42:42+00:00 | 2025-11-29T06:51:43+00:00 |
| rhsa-2024:0664 | Red Hat Security Advisory: OpenShift Container Platform 4.12.49 bug fix update and security update | 2024-02-08T19:31:18+00:00 | 2025-11-29T06:51:40+00:00 |
| rhsa-2024:0660 | Red Hat Security Advisory: OpenShift Container Platform 4.13.32 bug fix and security update | 2024-02-07T15:07:37+00:00 | 2025-11-29T06:51:38+00:00 |
| rhsa-2024:0642 | Red Hat Security Advisory: OpenShift Container Platform 4.14.11 bug fix and security update | 2024-02-07T17:36:34+00:00 | 2025-11-29T06:51:38+00:00 |
| rhsa-2024:0485 | Red Hat Security Advisory: OpenShift Container Platform 4.12.48 bug fix and security update | 2024-01-31T16:17:59+00:00 | 2025-11-29T06:51:37+00:00 |
| rhsa-2024:0484 | Red Hat Security Advisory: OpenShift Container Platform 4.13.31 bug fix and security update | 2024-02-01T19:01:48+00:00 | 2025-11-29T06:51:35+00:00 |
| rhsa-2024:0306 | Red Hat Security Advisory: OpenShift Container Platform 4.11.57 bug fix and security update | 2024-01-24T20:54:46+00:00 | 2025-11-29T06:51:33+00:00 |
| rhsa-2024:0302 | Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update | 2024-03-06T13:33:21+00:00 | 2025-11-29T06:51:33+00:00 |
| rhsa-2024:0198 | Red Hat Security Advisory: OpenShift Container Platform 4.12.47 security update | 2024-01-17T18:20:55+00:00 | 2025-11-29T06:51:33+00:00 |
| rhsa-2024:0290 | Red Hat Security Advisory: OpenShift Container Platform 4.14.10 bug fix and security update | 2024-01-23T20:26:08+00:00 | 2025-11-29T06:51:32+00:00 |
| rhsa-2024:0273 | Red Hat Security Advisory: OpenShift Virtualization 4.12.9 Images security and bug fix update | 2024-01-17T08:29:36+00:00 | 2025-11-29T06:51:31+00:00 |
| rhsa-2024:0269 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.0 for RHEL 9 | 2024-02-28T00:20:04+00:00 | 2025-11-29T06:51:30+00:00 |
| rhsa-2024:0193 | Red Hat Security Advisory: OpenShift Container Platform 4.13.29 bug fix and security update | 2024-01-17T09:48:09+00:00 | 2025-11-29T06:51:30+00:00 |
| rhsa-2024:0059 | Red Hat Security Advisory: OpenShift Container Platform 4.11.56 bug fix and security update | 2024-01-10T00:23:49+00:00 | 2025-11-29T06:51:29+00:00 |
| rhsa-2024:0050 | Red Hat Security Advisory: OpenShift Container Platform 4.14.8 bug fix and security update | 2024-01-09T16:55:38+00:00 | 2025-11-29T06:51:28+00:00 |
| rhsa-2023:7831 | Red Hat Security Advisory: OpenShift Container Platform 4.14.7 bug fix and security update | 2024-01-03T20:04:32+00:00 | 2025-11-29T06:51:27+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-62558 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62557 | Microsoft Office Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62556 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62555 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62554 | Microsoft Office Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-24044 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | 2025-03-11T07:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-21367 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | 2025-02-11T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2024-30099 | Windows Kernel Elevation of Privilege Vulnerability | 2024-06-11T07:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2023-53447 | f2fs: don't reset unchangable mount option in f2fs_remount() | 2025-09-02T00:00:00.000Z | 2025-12-17T01:39:01.000Z |
| msrc_cve-2023-53371 | net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create | 2025-09-02T00:00:00.000Z | 2025-12-17T01:38:56.000Z |
| msrc_cve-2022-50390 | drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED | 2025-09-02T00:00:00.000Z | 2025-12-17T01:38:51.000Z |
| msrc_cve-2025-61661 | Grub2: grub2: out-of-bounds write via malicious usb device | 2025-11-02T00:00:00.000Z | 2025-12-17T01:36:59.000Z |
| msrc_cve-2025-61663 | Grub2: missing unregister call for normal commands may lead to use-after-free | 2025-11-02T00:00:00.000Z | 2025-12-17T01:36:53.000Z |
| msrc_cve-2025-61664 | Grub2: missing unregister call for normal_exit command may lead to use-after-free | 2025-11-02T00:00:00.000Z | 2025-12-17T01:36:47.000Z |
| msrc_cve-2025-61662 | Grub2: missing unregister call for gettext command may lead to use-after-free | 2025-11-02T00:00:00.000Z | 2025-12-17T01:36:40.000Z |
| msrc_cve-2025-13912 | Potential non-constant time compiled code with Clang LLVM | 2025-12-02T00:00:00.000Z | 2025-12-17T01:05:58.000Z |
| msrc_cve-2025-67897 | In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet. | 2025-12-02T00:00:00.000Z | 2025-12-17T01:05:50.000Z |
| msrc_cve-2025-68258 | comedi: multiq3: sanitize config options in multiq3_attach() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:05:30.000Z |
| msrc_cve-2025-68188 | tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:05:25.000Z |
| msrc_cve-2025-68217 | Input: pegasus-notetaker - fix potential out-of-bounds access | 2025-12-02T00:00:00.000Z | 2025-12-17T01:05:19.000Z |
| msrc_cve-2025-68281 | ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list | 2025-12-02T00:00:00.000Z | 2025-12-17T01:05:14.000Z |
| msrc_cve-2025-68233 | drm/tegra: Add call to put_pid() | 2025-12-02T00:00:00.000Z | 2025-12-17T01:05:09.000Z |
| msrc_cve-2025-68222 | pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc | 2025-12-02T00:00:00.000Z | 2025-12-17T01:05:03.000Z |
| msrc_cve-2025-68220 | net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:58.000Z |
| msrc_cve-2025-68237 | mtdchar: fix integer overflow in read/write ioctls | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:53.000Z |
| msrc_cve-2025-68209 | mlx5: Fix default values in create CQ | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:47.000Z |
| msrc_cve-2025-68254 | staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:42.000Z |
| msrc_cve-2025-68256 | staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:37.000Z |
| msrc_cve-2025-68206 | netfilter: nft_ct: add seqadj extension for natted connections | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:31.000Z |
| msrc_cve-2025-68257 | comedi: check device's attached status in compat ioctls | 2025-12-02T00:00:00.000Z | 2025-12-17T01:04:26.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-240-02 | Mitsubishi Electric MELSEC iQ-F Series CPU Module | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-01 | Mitsubishi Electric MELSEC iQ-F Series CPU Module | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-140-04 | Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update B) | 2025-05-20T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-24-135-04 | Mitsubishi Electric Multiple FA Engineering Software Products (Update D) | 2024-05-14T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-273-02 | Festo SBRD-Q/SBOC-Q/SBOI-Q | 2021-09-22T11:13:00.000000Z | 2025-08-26T10:00:00.000000Z |
| icsa-25-184-01 | Hitachi Energy Relion 670/650 and SAM600-IO Series | 2025-06-24T12:30:00.000000Z | 2025-08-26T10:00:00.000000Z |
| icsa-25-182-06 | Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A) | 2025-06-24T12:30:00.000000Z | 2025-08-26T10:00:00.000000Z |
| icsa-25-261-05 | Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product | 2025-08-26T09:52:01.000000Z | 2025-08-26T09:52:01.000000Z |
| icsa-25-261-04 | Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product | 2025-08-26T09:22:47.000000Z | 2025-08-26T09:22:00.000000Z |
| icsa-25-238-01 | INVT VT-Designer and HMITool | 2025-08-26T06:00:00.000000Z | 2025-08-26T06:00:00.000000Z |
| icsa-25-140-03 | Danfoss AK-SM 8xxA Series (Update A) | 2025-05-20T06:00:00.000000Z | 2025-08-26T06:00:00.000000Z |
| va-25-239-01 | Agiloft multiple vulnerabilities | 2025-08-26T00:00:00Z | 2025-08-26T00:00:00Z |
| icsma-25-233-01 | FUJIFILM Healthcare Americas Synapse Mobility | 2025-08-21T06:00:00.000000Z | 2025-08-21T06:00:00.000000Z |
| icsa-25-217-02 | Tigo Energy Cloud Connect Advanced (Update A) | 2025-08-05T06:00:00.000000Z | 2025-08-19T06:00:00.000000Z |
| icsa-25-226-30 | Rockwell Automation FactoryTalk Action Manager | 2025-08-14T06:00:00.000000Z | 2025-08-15T06:00:00.000000Z |
| icsa-25-226-29 | Rockwell Automation Studio 5000 Logix Designer | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-28 | Rockwell Automation ControlLogix Ethernet Modules | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-27 | Rockwell Automation ArmorBlock 5000 I/O - Webserver | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-25 | Rockwell Automation Micro800 | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-24 | Rockwell FactoryTalk Linx | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-23 | Rockwell Automation FactoryTalk Viewpoint | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-212-01 | Güralp Systems FMUS Series and MIN Series Devices (Update A) | 2025-07-31T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-231-02 | Siemens Mendix SAML Module | 2025-08-14T00:00:00.000000Z | 2025-08-14T00:00:00.000000Z |
| icsa-25-231-01 | Siemens Desigo CC Product Family and SENTRON Powermanager | 2025-08-14T00:00:00.000000Z | 2025-08-14T00:00:00.000000Z |
| icsma-25-224-01 | Santesoft Sante PACS Server | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-224-04 | AVEVA PI Integrator | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-224-01 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-24-263-04 | MegaSys Computer Technologies Telenium Online Web Application (Update A) | 2024-09-19T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-254-09 | Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 | 2024-06-11T00:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-240-03 | Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit | 2025-08-12T04:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-sa-ftd-snort-fw-BCJTZPMu | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TCP/IP Traffic with Snort 2 and Snort 3 Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd2100-snort-dos-m9humt75 | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series Appliances TCP UDP Snort 2 and Snort 3 Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd2100-snort-dos-M9HuMt75 | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series Appliances TCP UDP Snort 2 and Snort 3 Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-vdb-snort-djj4cnbr | Cisco Firepower Threat Defense Software Vulnerability Database with Snort Detection Engine Security Policy Bypass and Denial of Service Issue | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-vdb-snort-djj4cnbR | Cisco Firepower Threat Defense Software Vulnerability Database with Snort Detection Engine Security Policy Bypass and Denial of Service Issue | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-tls-dos-qxye5ufy | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-tls-dos-QXYE5Ufy | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-statcred-dfc8txt5 | Cisco Firepower Threat Defense Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-statcred-dFC8tXT5 | Cisco Firepower Threat Defense Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-geoip-bypass-mb4zrdu | Cisco Firepower Threat Defense Software Geolocation ACL Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-geoip-bypass-MB4zRDu | Cisco Firepower Threat Defense Software Geolocation ACL Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-xss-dhjxqyzs | Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-xss-dhJxQYZs | Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inject-2enmtc8v | Cisco Secure Firewall Management Center Software SQL Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inject-2EnmTC8v | Cisco Secure Firewall Management Center Software SQL Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inj-loyafcfq | Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inj-LOYAFcfq | Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-priv-esc-cmq4s6m7 | Cisco Secure Firewall Management Center Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-priv-esc-CMQ4S6m7 | Cisco Secure Firewall Management Center Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-html-inj-nfjeyhxz | Cisco Secure Firewall Management Center Software HTML Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-html-inj-nfJeYHxz | Cisco Secure Firewall Management Center Software HTML Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-file-read-5q4mqrn | Cisco Secure Firewall Management Center Software Arbitrary File Read Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-file-read-5q4mQRn | Cisco Secure Firewall Management Center Software Arbitrary File Read Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-v3awdqn7 | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-v3AWDqN7 | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-g8aokndp | Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-g8AOKnDP | Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-2hbka97g | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-2HBkA97G | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-csc-dos-xvphm3bj | Cisco Secure Client Software Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-201907-1547 | undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps… | 2024-11-29T22:17:29.680000Z |
| var-200106-0080 | Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGat… | 2024-11-29T22:17:29.588000Z |
| var-201912-1853 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:17:23.861000Z |
| var-201006-1149 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-11-29T22:16:49.661000Z |
| var-201011-0042 | Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Appl… | 2024-11-29T22:16:49.063000Z |
| var-201202-0067 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T22:16:48.022000Z |
| var-200603-0276 | Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to r… | 2024-11-29T22:16:47.643000Z |
| var-201707-0592 | Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre att… | 2024-11-29T22:16:46.555000Z |
| var-201912-0640 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:16:42.889000Z |
| var-200901-0700 | WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod to… | 2024-11-29T22:16:42.797000Z |
| var-200510-0005 | Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Mic… | 2024-11-29T22:16:41.840000Z |
| var-200909-0789 | libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when Open… | 2024-11-29T22:16:41.767000Z |
| var-201110-0383 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2024-11-29T22:16:40.881000Z |
| var-201201-0259 | Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash value… | 2024-11-29T22:15:39.169000Z |
| var-202206-1186 | Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may all… | 2024-11-29T22:14:11.713000Z |
| var-201203-0185 | Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attacker… | 2024-11-29T22:13:55.868000Z |
| var-200701-0341 | The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428… | 2024-11-29T22:13:52.420000Z |
| var-202006-1838 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested… | 2024-11-29T22:13:49.767000Z |
| var-201202-0245 | Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, L… | 2024-11-29T22:13:48.880000Z |
| var-201304-0184 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T22:13:48.616000Z |
| var-202202-0081 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. Expa… | 2024-11-29T22:13:42.217000Z |
| var-201302-0184 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T22:13:41.327000Z |
| var-202110-1514 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS… | 2024-11-29T22:13:40.467000Z |
| var-202004-2200 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-11-29T22:13:40.393000Z |
| var-202101-0119 | The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing… | 2024-11-29T22:13:34.099000Z |
| var-201203-0180 | Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allo… | 2024-11-29T22:13:33.551000Z |
| var-200809-0195 | Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10… | 2024-11-29T22:13:32.396000Z |
| var-201708-0039 | Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows re… | 2024-11-29T22:13:31.738000Z |
| var-201304-0378 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T22:13:30.824000Z |
| var-202210-0043 | The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fie… | 2024-11-29T22:13:29.754000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000103 | The installer of e-Tax software(common program) vulnerable to privilege escalation | 2024-09-24T16:12+09:00 | 2024-09-24T16:12+09:00 |
| jvndb-2024-000101 | Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices | 2024-09-24T15:26+09:00 | 2024-09-24T15:26+09:00 |
| jvndb-2024-003068 | Multiple vulnerabilities in Cente middleware | 2024-04-05T15:36+09:00 | 2024-09-24T15:00+09:00 |
| jvndb-2024-008391 | Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders | 2024-09-19T14:07+09:00 | 2024-09-19T14:07+09:00 |
| jvndb-2024-000100 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2024-09-18T14:34+09:00 | 2024-09-18T14:34+09:00 |
| jvndb-2024-000099 | Assimp vulnerable to heap-based buffer overflow | 2024-09-18T14:20+09:00 | 2024-09-18T14:20+09:00 |
| jvndb-2020-018328 | Falsification and eavesdropping of contents across multiple websites via Web Rehosting services | 2024-09-12T12:23+09:00 | 2024-09-12T12:23+09:00 |
| jvndb-2023-027250 | Security Problem in Web Browser Permission Mechanism | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| jvndb-2020-018327 | Malleability attack against executables encrypted by CBC mode with no integrity check | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| jvndb-2024-000095 | Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery | 2024-09-09T16:40+09:00 | 2024-09-09T16:40+09:00 |
| jvndb-2024-000096 | Pgpool-II vulnerable to information disclosure | 2024-09-09T14:58+09:00 | 2024-09-09T14:58+09:00 |
| jvndb-2024-000094 | "@cosme" App fails to restrict custom URL schemes properly | 2024-09-09T14:20+09:00 | 2024-09-09T14:20+09:00 |
| jvndb-2024-000097 | WordPress Plugin "Forminator" vulnerable to cross-site scripting | 2024-09-09T13:51+09:00 | 2024-09-09T13:51+09:00 |
| jvndb-2024-000098 | Multiple products from KINGSOFT JAPAN vulnerable to path traversal | 2024-09-06T15:07+09:00 | 2024-09-06T15:07+09:00 |
| jvndb-2024-000090 | Secure Boot bypass Vulnerability in PRIMERGY | 2024-09-06T14:39+09:00 | 2024-09-06T14:39+09:00 |
| jvndb-2024-000093 | WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting | 2024-09-04T13:01+09:00 | 2024-09-04T13:01+09:00 |
| jvndb-2024-007002 | Panasonic Control FPWIN Pro7 vulnerable to stack-based buffer overflow | 2024-09-02T14:57+09:00 | 2024-09-02T14:57+09:00 |
| jvndb-2024-000091 | IPCOM vulnerable to information disclosure | 2024-08-30T14:56+09:00 | 2024-08-30T14:56+09:00 |
| jvndb-2024-000092 | Multiple vulnerabilities in WordPress plugin "Carousel Slider" | 2024-08-30T13:58+09:00 | 2024-08-30T13:58+09:00 |
| jvndb-2024-006787 | xfpt vulnerable to stack-based buffer overflow | 2024-08-29T14:07+09:00 | 2024-08-29T14:07+09:00 |
| jvndb-2024-000086 | Multiple Safie products vulnerable to improper server certificate verification | 2024-08-22T13:51+09:00 | 2024-08-29T12:23+09:00 |
| jvndb-2024-006646 | Authentication Bypass Vulnerability in Hitachi Ops Center Common Services | 2024-08-27T12:01+09:00 | 2024-08-27T12:01+09:00 |
| jvndb-2024-006367 | Unquoted Service Path in Hitachi Device Manager | 2024-08-26T16:27+09:00 | 2024-08-26T16:27+09:00 |
| jvndb-2024-000087 | BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection | 2024-08-23T14:17+09:00 | 2024-08-23T14:17+09:00 |
| jvndb-2020-007305 | Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries | 2024-08-22T11:33+09:00 | 2024-08-22T11:33+09:00 |
| jvndb-2017-009536 | Packetbeat vulnerable to denial-of-service (DoS) | 2024-08-21T17:54+09:00 | 2024-08-21T17:54+09:00 |
| jvndb-2018-009127 | Multiple vulnerabilities in LogonTracer | 2024-08-21T17:37+09:00 | 2024-08-21T17:37+09:00 |
| jvndb-2020-002957 | A vulnerability in TOYOTA MOTOR's DCU (Display Control Unit) | 2024-08-20T18:12+09:00 | 2024-08-20T18:12+09:00 |
| jvndb-2020-007306 | Trend Micro Security (Consumer) Driver vulnerable to Out-of-bounds Read | 2024-08-20T17:52+09:00 | 2024-08-20T17:52+09:00 |
| jvndb-2024-000085 | "Rakuten Ichiba App" fails to restrict custom URL schemes properly | 2024-08-20T16:56+09:00 | 2024-08-20T16:56+09:00 |
| ID | Description | Updated |
|---|