|
CVE-2019-25598
|
中
|
6.2
|
MSSQL
|
HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability th...
HeidiSQL Portable 10.1.0.5464 包含拒絕服務漏洞，允許本...
|
2026-03-22
|
|
CVE-2026-32710
|
高
|
8.5
|
MySQL
MSSQL
|
MariaDB server is a community developed fork of MySQL server. An authentica...
MariaDB 伺服器是社群開發的 MySQL 伺服器分支。經過驗證的...
|
2026-03-20
|
|
CVE-2025-58112
|
高
|
8.8
|
MSSQL
|
Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034)...
Microsoft Dynamics 365 Customer Engagement (on-premises...
|
2026-03-18
|
|
CVE-2026-22730
|
高
|
8.8
|
MySQL
|
A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressi...
Spring AI 的 MariaDBFilterExpressionConverter 中存在一...
|
2026-03-18
|
|
CVE-2026-32628
|
高
|
8.8
|
MySQL
MSSQL
|
AnythingLLM is an application that turns pieces of content into context tha...
AnythingLLM 是一個將內容片段轉換為上下文的應用程序，任...
|
2026-03-16
|
|
CVE-2016-20026
|
嚴重
|
9.8
|
Apache
|
ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apac...
ZKTeco ZKBioSecurity 3.0 在捆綁的 Apache Tomcat 伺服器...
|
2026-03-16
|
|
CVE-2026-4105
|
中
|
6.7
|
Linux OS
|
A flaw was found in systemd. The systemd-machined service contains an Impro...
systemd 中發現一個缺陷。由於 RegisterMachine D-Bus（桌...
|
2026-03-13
|
|
CVE-2026-3497
|
N/A
|
-
|
Linux OS
|
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distrib...
各種 Linux 發行版中所包含的 OpenSSH GSSAPI 增量中的漏洞...
|
2026-03-12
|
|
CVE-2026-31979
|
高
|
8.8
|
Linux OS
|
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and In...
Himmelblau 是 Microsoft Azure Entra ID 和 Intune 的互通...
|
2026-03-11
|
|
CVE-2026-32063
|
高
|
7.1
|
Linux OS
|
OpenClaw version 2026.2.19-2 prior to 2026.2.21 contains a command injectio...
2026.2.21 之前的 OpenClaw 版本 2026.2.19-2 在 systemd...
|
2026-03-11
|
|
CVE-2025-69651
|
中
|
5.5
|
Linux OS
|
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an in...
GNU Binutils 至 2.46 readelf 包含一個漏洞，在處理具有格...
|
2026-03-06
|
|
CVE-2026-3494
|
中
|
4.3
|
MySQL
|
In MariaDB server version through 11.8.5, when server audit plugin is enabl...
在 MariaDB 伺服器版本至 11.8.5 中，當使用配置有 QUERY_D...
|
2026-03-03
|
|
CVE-2026-28372
|
高
|
7.4
|
Linux OS
|
telnetd in GNU inetutils through 2.7 allows privilege escalation that can b...
GNU inetutils 到 2.7 中的 telnetd 允許權限升級，可以透...
|
2026-02-27
|
|
CVE-2025-15560
|
高
|
8.8
|
MSSQL
|
An authenticated attacker with minimal permissions can exploit a SQL inject...
具有最小權限的經過驗證的攻擊者可以利用 WorkTime 伺服器...
|
2026-02-19
|
|
CVE-2025-0577
|
中
|
4.8
|
Linux OS
|
An insufficient entropy vulnerability was found in glibc. The getrandom and...
glibc 中發現熵不足漏洞。如果在 fork 之後再次呼叫 getran...
|
2026-02-18
|
|
CVE-2026-24734
|
高
|
7.5
|
Apache
|
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tom...
Apache Tomcat Native、Apache Tomcat 中的不正確輸入驗證...
|
2026-02-17
|
|
CVE-2026-24733
|
低
|
3.7
|
Apache
|
Improper Input Validation vulnerability in Apache Tomcat.
Tomcat did not...
Apache Tomcat 中的不正確輸入驗證漏洞。
Tomcat 沒有將...
|
2026-02-17
|
|
CVE-2025-66614
|
嚴重
|
9.1
|
Apache
|
Improper Input Validation vulnerability.
This issue affects Apache Tomcat:...
不正確的輸入驗證漏洞。
此問題影響 Apache Tomcat：從 11...
|
2026-02-17
|
|
CVE-2025-32063
|
中
|
6.8
|
Linux OS
|
There is a misconfiguration vulnerability inside the Infotainment ECU manuf...
BOSCH 製造的資訊娛樂 ECU 內部存在配置錯誤漏洞。此漏洞發...
|
2026-02-15
|
|
CVE-2026-23162
|
高
|
7.8
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
drm/xe...
在Linux核心中，以下漏洞已解決：
drm/xe/nvm：修復輔助添...
|
2026-02-14
|
|
CVE-2026-23115
|
中
|
4.7
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
serial...
在Linux核心中，以下漏洞已解決：
序列：修復未設定 tty->...
|
2026-02-14
|
|
CVE-2026-26214
|
高
|
7.4
|
Apache
|
Galaxy FDS Android SDK (XiaoMi/galaxy-fds-sdk-android) version 3.0.8 and pr...
Galaxy FDS Android SDK (XiaoMi/galaxy-fds-sdk-android)...
|
2026-02-12
|
|
CVE-2026-23901
|
低
|
2.5
|
Apache
|
Observable Timing Discrepancy vulnerability in Apache Shiro.
This issue af...
Apache Shiro 中可觀察到的時序差異漏洞。
此問題影響 Apa...
|
2026-02-10
|
|
CVE-2026-23055
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
i2c: r...
在Linux核心中，以下漏洞已解決：
i2c：riic：將掛起處理...
|
2026-02-04
|
|
CVE-2026-1642
|
中
|
5.9
|
Linux OS
|
A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy...
當配置為代理程式到上游傳輸層安全性 (TLS) 伺服器時，NGIN...
|
2026-02-04
|
|
CVE-2026-24512
|
高
|
8.8
|
Linux OS
|
A security issue was discovered in ingress-nginx where the `rules.http.path...
在 ingress-nginx 中發現了一個安全性問題，其中 `rules.ht...
|
2026-02-03
|
|
CVE-2026-1580
|
高
|
8.8
|
Linux OS
|
A security issue was discovered in ingress-nginx where the `nginx.ingress.k...
在 ingress-nginx 中發現了一個安全性問題，其中「nginx.in...
|
2026-02-03
|
|
CVE-2026-1616
|
高
|
7.5
|
Linux OS
|
The $uri$args concatenation in nginx configuration file present in Open Sec...
v2025.9.0 之前的開放安全性問題管理 (OSIM) 中存在的 ngin...
|
2026-01-29
|
|
CVE-2025-69419
|
高
|
7.4
|
Linux OS
|
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously...
問題摘要：惡意呼叫 PKCS12_get_Friendlyname() 函數
精心...
|
2026-01-27
|
|
CVE-2025-69418
|
中
|
4
|
Linux OS
|
Issue summary: When using the low-level OCB API directly with AES-NI or<br>...
問題摘要：當直接將低階 OCB API 與 AES-NI 或<br>其他硬體...
|
2026-01-27
|
|
CVE-2025-68160
|
中
|
4.7
|
Linux OS
|
Issue summary: Writing large, newline-free data into a BIO chain using the...
問題摘要：使用以下命令將大型、無換行符的資料寫入 BIO 鏈...
|
2026-01-27
|
|
CVE-2025-66199
|
中
|
5.9
|
Linux OS
|
Issue summary: A TLS 1.3 connection using certificate compression can be
fo...
問題摘要：使用憑證壓縮的 TLS 1.3 連線可以
解壓縮前強制...
|
2026-01-27
|
|
CVE-2025-15469
|
中
|
5.5
|
Linux OS
|
Issue summary: The 'openssl dgst' command-line tool silently truncates inpu...
問題摘要：「openssl dgst」命令列工具默默地截斷輸入
使用...
|
2026-01-27
|
|
CVE-2025-15468
|
中
|
5.9
|
Linux OS
|
Issue summary: If an application using the SSL_CIPHER_find() function in
a...
問題摘要：如果應用程式使用 SSL_CIPHER_find() 函數
QUIC...
|
2026-01-27
|
|
CVE-2025-15467
|
高
|
8.8
|
Linux OS
|
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with...
問題摘要：使用以下指令解析 CMS AuthEnvelopedData 或 Env...
|
2026-01-27
|
|
CVE-2025-11187
|
中
|
6.1
|
Linux OS
|
Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation
wh...
問題摘要：PKCS#12 檔案中的 PBMAC1 參數缺少驗證
這可能會...
|
2026-01-27
|
|
CVE-2025-59095
|
N/A
|
-
|
MSSQL
|
The program libraries (DLL) and binaries used by exos 9300 contain multiple...
exos 9300 所使用的程式庫 (DLL) 和二進位檔案包含多個硬編...
|
2026-01-26
|
|
CVE-2025-59093
|
N/A
|
-
|
MSSQL
|
Exos 9300 instances are using a randomly generated database password to con...
Exos 9300 執行個體使用隨機產生的資料庫密碼連接到設定的...
|
2026-01-26
|
|
CVE-2026-22444
|
高
|
7.1
|
Apache
|
The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient in...
Apache Solr 8.6 到 9.10.0 的「建立核心」API 對某些 API...
|
2026-01-21
|
|
CVE-2026-22022
|
高
|
8.2
|
Apache
|
Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule B...
由於這些元件中的輸入驗證不夠嚴格，依賴 Solr 的「基於規...
|
2026-01-21
|
|
CVE-2026-21975
|
中
|
4.5
|
Oracle
|
Vulnerability in the Java VM component of Oracle Database Server. Supporte...
Oracle 資料庫伺服器的 Java VM 元件中的漏洞。 受影響的...
|
2026-01-20
|
|
CVE-2026-21962
|
嚴重
|
10
|
Apache
Oracle
|
Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-...
Oracle HTTP Server、Oracle Fusion Middleware 的 Oracle...
|
2026-01-20
|
|
CVE-2026-21952
|
中
|
4.9
|
MySQL
MSSQL
Oracle
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: Serve...
Oracle MySQL 的 MySQL Server 產品（元件：伺服器：解析器...
|
2026-01-20
|
|
CVE-2026-21950
|
中
|
6.5
|
MySQL
MSSQL
Oracle
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: Serve...
Oracle MySQL 的 MySQL Server 產品（元件：伺服器：最佳化...
|
2026-01-20
|
|
CVE-2026-21949
|
中
|
6.5
|
MySQL
MSSQL
Oracle
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: Serve...
Oracle MySQL 的 MySQL Server 產品（元件：伺服器：最佳化...
|
2026-01-20
|
|
CVE-2026-21948
|
中
|
4.9
|
MySQL
MSSQL
Oracle
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: Serve...
Oracle MySQL 的 MySQL Server 產品（元件：伺服器：最佳化...
|
2026-01-20
|
|
CVE-2026-21941
|
中
|
4.9
|
MySQL
MSSQL
Oracle
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: Serve...
Oracle MySQL 的 MySQL Server 產品（元件：伺服器：最佳化...
|
2026-01-20
|
|
CVE-2026-21939
|
高
|
7
|
Oracle
|
Vulnerability in the SQLcl component of Oracle Database Server. Supported...
Oracle 資料庫伺服器的 SQLcl 元件中的漏洞。 受影響的受...
|
2026-01-20
|
|
CVE-2026-21937
|
中
|
4.9
|
MySQL
MSSQL
Oracle
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: Serve...
Oracle MySQL 的 MySQL Server 產品（元件：伺服器：DDL）...
|
2026-01-20
|
|
CVE-2026-21936
|
中
|
4.9
|
MySQL
MSSQL
Oracle
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoD...
Oracle MySQL（元件：InnoDB）的 MySQL Server 產品中存在...
|
2026-01-20
|
|
CVE-2026-21929
|
中
|
5.3
|
MySQL
MSSQL
Oracle
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: Serve...
Oracle MySQL 的 MySQL Server 產品（元件：伺服器：解析器...
|
2026-01-20
|
|
CVE-2025-59464
|
高
|
7.5
|
Linux OS
|
A memory leak in Node.js’s OpenSSL integration occurs when converting `X.50...
將「X.509」憑證欄位轉換為 UTF-8 而不釋放分配的緩衝區時...
|
2026-01-20
|
|
CVE-2026-23837
|
嚴重
|
9.8
|
Linux OS
|
MyTube is a self-hosted downloader and player for several video websites. A...
MyTube 是多個影片網站的自架下載器和播放器。版本 1.7.65...
|
2026-01-19
|
|
CVE-2026-23838
|
N/A
|
-
|
Linux OS
|
Tandoor Recipes is a recipe manager than can be installed with the Nix pack...
Tandoor Recipes 是一個配方管理器，可與 Nix 套件管理器一...
|
2026-01-19
|
|
CVE-2025-29847
|
高
|
7.5
|
Apache
|
A vulnerability in Apache Linkis.
Problem Description
When using the JDBC...
Apache Linkis 中的漏洞。
問題描述
使用 JDBC 引擎和資料...
|
2026-01-19
|
|
CVE-2025-60021
|
嚴重
|
9.8
|
Apache
|
Remote command injection vulnerability in heap profiler builtin service in...
所有平台上的 Apache bRPC（（所有版本 < 1.15.0））中的堆...
|
2026-01-16
|
|
CVE-2026-22265
|
高
|
7.5
|
Linux OS
Apache
|
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepaliv...
Roxy-WI 是一個用於管理 Haproxy、Nginx、Apache 和 Keepal...
|
2026-01-15
|
|
CVE-2021-47761
|
高
|
7.8
|
MySQL
|
MilleGPG5 5.7.2 contains a local privilege escalation vulnerability that al...
MilleGPG5 5.7.2 包含本地權限提升漏洞，允許經過驗證的使...
|
2026-01-15
|
|
CVE-2025-68493
|
高
|
8.1
|
Apache
|
Missing XML Validation vulnerability in Apache Struts, Apache Struts.
This...
Apache Struts 中缺少 XML 驗證漏洞，Apache Struts。
此...
|
2026-01-11
|
|
CVE-2026-22027
|
中
|
6
|
MySQL
|
CryptoLib provides a software-only solution using the CCSDS Space Data Link...
CryptoLib 使用 CCSDS 太空資料鏈路安全協定 - 擴充程式 (S...
|
2026-01-10
|
|
CVE-2026-21856
|
高
|
7.2
|
MySQL
|
The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to...
塔科夫資料管理器是管理塔科夫物品資料的工具。在提交 9bdb...
|
2026-01-07
|
|
CVE-2026-21444
|
中
|
5.5
|
Linux OS
|
libtpms, a library that provides software emulation of a Trusted Platform M...
libtpms 是一個提供可信任平台模組軟體模擬的函式庫，在版...
|
2026-01-02
|
|
CVE-2023-54317
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
dm fla...
在Linux核心中，以下漏洞已解決：
dm flkey：不要損壞零頁...
|
2025-12-30
|
|
CVE-2023-54271
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
blk-cg...
在Linux核心中，以下漏洞已解決：
blk-cgroup：修復由於在...
|
2025-12-30
|
|
CVE-2025-69217
|
高
|
7.7
|
Linux OS
|
coturn is a free open source implementation of TURN and STUN Server. Versio...
coturn 是 TURN 和 STUN 伺服器的免費開源實作。版本 4.6.2...
|
2025-12-30
|
|
CVE-2025-2515
|
高
|
7.2
|
Linux OS
|
A vulnerability was found in BlueChi, a multi-node systemd service controll...
RHIVOS 中使用的多節點 systemd 服務控制器 BlueChi 中發現...
|
2025-12-24
|
|
CVE-2023-54126
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
crypto...
在Linux核心中，以下漏洞已解決：
crypto: safexcel - 載...
|
2025-12-24
|
|
CVE-2023-54006
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
af_uni...
在Linux核心中，以下漏洞已解決：
af_unix：修正 unix_tot...
|
2025-12-24
|
|
CVE-2025-14406
|
高
|
7.8
|
Linux OS
|
Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalatio...
Soda PDF 桌面不受控制的搜尋路徑元素本機權限升級漏洞。此...
|
2025-12-23
|
|
CVE-2025-14405
|
中
|
6.8
|
Linux OS
|
PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation...
PDFsam 增強不受控制的搜尋路徑元素本機權限升級漏洞。此漏...
|
2025-12-23
|
|
CVE-2025-13699
|
高
|
7
|
MySQL
|
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vuln...
MariaDB mariadb-dump 實用程式目錄遍歷遠端程式碼執行漏洞...
|
2025-12-23
|
|
CVE-2025-68161
|
中
|
4.8
|
Apache
|
The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2...
Apache Log4j Core 版本 2.0-beta9 到 2.25.2 中的 Socket...
|
2025-12-18
|
|
CVE-2025-59529
|
中
|
5.5
|
Linux OS
|
Avahi is a system which facilitates service discovery on a local network vi...
Avahi 是一個透過 mDNS/DNS-SD 協定套件促進本地網路上的服...
|
2025-12-18
|
|
CVE-2025-67745
|
高
|
7.1
|
MySQL
|
MyHoard is a daemon for creating, managing and restoring MySQL backups. Sta...
MyHoard 是一個用於建立、管理和還原 MySQL 備份的守護程式...
|
2025-12-18
|
|
CVE-2025-14727
|
高
|
8.3
|
Linux OS
|
A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-targ...
NGINX Ingress Controller 的 nginx.org/rewrite-target 註...
|
2025-12-17
|
|
CVE-2025-68297
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
ceph:...
在Linux核心中，以下漏洞已解決：
ceph：修復加密目錄的 p...
|
2025-12-16
|
|
CVE-2025-40356
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
spi: r...
在Linux核心中，以下漏洞已解決：
spi：rockchip-sfc：修...
|
2025-12-16
|
|
CVE-2025-14758
|
中
|
6.5
|
MySQL
|
Incorrect configuration of replication security in the MariaDB component of...
YAOOK Operator 中的基礎運營商的 MariaDB 元件中的複製安...
|
2025-12-16
|
|
CVE-2025-58173
|
高
|
8.8
|
MySQL
PHP
MSSQL
|
FreshRSS is a self-hosted RSS feed aggregator. In versions 1.23.0 through 1...
FreshRSS 是一個自架的 RSS 提要聚合器。在版本 1.23.0 到...
|
2025-12-16
|
|
CVE-2025-67900
|
高
|
8.1
|
Linux OS
|
NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF envir...
6.11之前的NXLog Agent可以載入OPENSSL_CONF環境變數指定的...
|
2025-12-14
|
|
CVE-2025-10289
|
中
|
5.9
|
MySQL
|
The Filter & Grids plugin for WordPress is vulnerable to SQL Injection via...
WordPress 的 Filter & Grids 外掛程式在 3.2.0 及之前的所...
|
2025-12-13
|
|
CVE-2025-67731
|
高
|
7.5
|
Linux OS
|
Servify Express is a Node.js package to start an Express server and log the...
Servify Express 是一個 Node.js 包，用於啟動 Express 伺...
|
2025-12-12
|
|
CVE-2025-67510
|
嚴重
|
9.4
|
MySQL
PHP
|
Neuron is a PHP framework for creating and orchestrating AI Agents. In vers...
Neuron 是一個用於創建和編排 AI 代理的 PHP 框架。在2.8.1...
|
2025-12-10
|
|
CVE-2025-67509
|
高
|
8.2
|
MySQL
PHP
|
Neuron is a PHP framework for creating and orchestrating AI Agents. Version...
Neuron 是一個用於創建和編排 AI 代理的 PHP 框架。 2.8.11...
|
2025-12-10
|
|
CVE-2025-66675
|
高
|
8.2
|
Apache
|
Denial of Service vulnerability in Apache Struts, file leak in multipart re...
Apache Struts 中的拒絕服務漏洞、多部分請求處理中的檔案...
|
2025-12-10
|
|
CVE-2025-12381
|
高
|
7.8
|
Linux OS
|
Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on...
Linux 64 位元上的 AlgoSec 防火牆分析器中存在不當權限管...
|
2025-12-09
|
|
CVE-2025-66491
|
中
|
5.9
|
Linux OS
|
Traefik is an HTTP reverse proxy and load balancer. Versions 3.5.0 through...
Traefik 是一個 HTTP 反向代理和負載平衡器。版本 3.5.0 到...
|
2025-12-09
|
|
CVE-2023-53803
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
scsi:...
在Linux核心中，以下漏洞已解決：
scsi：ses：修正 ses_en...
|
2025-12-09
|
|
CVE-2025-66577
|
中
|
5.3
|
Linux OS
|
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS li...
cpp-httplib 是一個 C++11 單檔案頭跨平台 HTTP/HTTPS 函式...
|
2025-12-05
|
|
CVE-2025-66570
|
嚴重
|
10
|
Linux OS
|
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS li...
cpp-httplib 是一個 C++11 單檔案頭跨平台 HTTP/HTTPS 函式...
|
2025-12-05
|
|
CVE-2025-58098
|
高
|
8.3
|
Apache
|
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabl...
啟用伺服器端包含 (SSI) 且 mod_cgid（但不是 mod_cgi）的...
|
2025-12-05
|
|
CVE-2025-66200
|
中
|
5.4
|
Apache
|
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apach...
mod_userdir+suexec 透過 Apache HTTP Server 中的 AllowOv...
|
2025-12-05
|
|
CVE-2025-65082
|
中
|
6.5
|
Apache
|
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability...
Apache HTTP Server 中的轉義、元或控制序列漏洞的不正確中...
|
2025-12-05
|
|
CVE-2025-59775
|
高
|
7.5
|
Apache
|
Server-Side Request Forgery (SSRF) vulnerability
in Apache HTTP Server o...
伺服器端請求偽造 (SSRF) 漏洞
在 Windows 上的 Apache H...
|
2025-12-05
|
|
CVE-2025-55753
|
高
|
7.5
|
Apache
|
An integer overflow in the case of failed ACME certificate renewal leads, a...
ACME 憑證續訂失敗時的整數溢位會導致在多次失敗（預設組態...
|
2025-12-05
|
|
CVE-2025-13494
|
中
|
5.3
|
PHP
|
The SSP Debug plugin for WordPress is vulnerable to Sensitive Information E...
WordPress 的 SSP 偵錯外掛程式在 1.0.0 及之前的所有版本...
|
2025-12-05
|
|
CVE-2025-66509
|
嚴重
|
9.8
|
PHP
|
LaraDashboard is an all-In-one solution to start a Laravel Application. In...
LaraDashboard 是啟動 Laravel 應用程式的一體化解決方案。...
|
2025-12-04
|
|
CVE-2025-66571
|
N/A
|
-
|
PHP
|
UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vuln...
UNA CMS 版本 9.0.0-RC1 - 14.0.0-RC4 在 BxBaseMenuSetAcl...
|
2025-12-04
|
|
CVE-2025-40237
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
fs/not...
在Linux核心中，以下漏洞已解決：
fs/notify：使用 s_umou...
|
2025-12-04
|
|
CVE-2025-40226
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
firmwa...
在Linux核心中，以下漏洞已解決：
韌體：arm_scmi：調試初...
|
2025-12-04
|
|
CVE-2025-40225
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
drm/pa...
在Linux核心中，以下漏洞已解決：
drm/panthor：修復 GPU...
|
2025-12-04
|
|
CVE-2025-40224
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
hwmon:...
在Linux核心中，以下漏洞已解決：
hwmon: (cgbc-hwmon) 在...
|
2025-12-04
|
|
CVE-2025-40223
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
most:...
在Linux核心中，以下漏洞已解決：
大多數：usb：修正 hdm_...
|
2025-12-04
|
|
CVE-2025-40222
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
tty: s...
在Linux核心中，以下漏洞已解決：
tty: 序列: sh-sci: 修...
|
2025-12-04
|
|
CVE-2025-40221
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
media:...
在Linux核心中，以下漏洞已解決：
媒體：pci：mg4b：修復...
|
2025-12-04
|
|
CVE-2025-40220
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
fuse:...
在Linux核心中，以下漏洞已解決：
熔斷器：修復從熔斷器工...
|
2025-12-04
|
|
CVE-2025-40219
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
PCI/IO...
在Linux核心中，以下漏洞已解決：
PCI/IOV：啟用/停用 SR-...
|
2025-12-04
|
|
CVE-2025-40218
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
mm/dam...
在Linux核心中，以下漏洞已解決：
mm/damon/vaddr: 不要重...
|
2025-12-04
|
|
CVE-2025-40217
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
pidfs:...
在Linux核心中，以下漏洞已解決：
pidfs：驗證可擴充 ioct...
|
2025-12-04
|
|
CVE-2025-40216
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
io_uri...
在Linux核心中，以下漏洞已解決：
io_uring/rsrc：不依賴...
|
2025-12-04
|
|
CVE-2025-40215
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
xfrm:...
在Linux核心中，以下漏洞已解決：
xfrm：刪除 x->tunnel...
|
2025-12-04
|
|
CVE-2025-40214
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
af_uni...
在Linux核心中，以下漏洞已解決：
af_unix：在unix_add_ed...
|
2025-12-04
|
|
CVE-2025-11379
|
中
|
5.3
|
Linux OS
|
The WebP Express plugin for WordPress is vulnerable to information exposure...
WordPress 的 WebP Express 外掛程式很容易透過 0.25.9 及...
|
2025-12-04
|
|
CVE-2025-53841
|
高
|
7.8
|
Linux OS
|
The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent...
作為 Akamai Guardicore Platform Agent for Windows v49.2...
|
2025-12-03
|
|
CVE-2025-65657
|
中
|
6.5
|
PHP
|
FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Up...
FeehiCMS 2.1.1 版透過廣告管理中的無限檔上傳實現遠端程式...
|
2025-12-02
|
|
CVE-2025-65380
|
中
|
6.5
|
PHP
|
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/i...
PHPGurukul 計費系統 1.0 在 admin/index.php 端點容易受到...
|
2025-12-02
|
|
CVE-2025-64298
|
高
|
8.4
|
MSSQL
|
NMIS/BioDose V22.02 and previous version installations where the embedded M...
使用嵌入式 Microsoft SQLServer Express 的 NMIS/BioDose...
|
2025-12-02
|
|
CVE-2025-62575
|
高
|
8.3
|
MSSQL
|
NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server da...
NMIS/BioDose V22.02 及之前的版本依賴 Microsoft SQL Serv...
|
2025-12-02
|
|
CVE-2025-65379
|
中
|
6.5
|
PHP
|
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/...
PHPGurukul Billing System 1.0 在 /admin/password-recove...
|
2025-12-02
|
|
CVE-2025-13516
|
高
|
8.1
|
Linux OS
Apache
PHP
|
The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Un...
SureMail – WordPress 的 SMTP 和電子郵件日誌外掛程式在 1...
|
2025-12-02
|
|
CVE-2025-66206
|
中
|
6.8
|
Linux OS
|
Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.9...
Frappe 是一個全端 Web 應用程式框架。在 15.86.0 和 14.99...
|
2025-12-01
|
|
CVE-2025-64775
|
高
|
7.5
|
Apache
|
Denial of Service vulnerability in Apache Struts, file leak in multipart re...
Apache Struts 中的拒絕服務漏洞、多部分請求處理中的檔案...
|
2025-12-01
|
|
CVE-2025-59789
|
高
|
7.5
|
Apache
|
Uncontrolled recursion in the json2pb component in Apache bRPC (version < 1...
所有平台上的 Apache bRPC（版本 < 1.15.0）中的 json2pb...
|
2025-12-01
|
|
CVE-2025-9191
|
中
|
6.3
|
PHP
|
The Houzez theme for WordPress is vulnerable to PHP Object Injection in all...
WordPress 的 Houzez 主題在 4.1.6 及之前的所有版本中都容...
|
2025-11-26
|
|
CVE-2025-66026
|
中
|
6.1
|
PHP
|
REDAXO is a PHP-based CMS. Prior to version 5.20.1, a reflected Cross-Site...
REDAXO 是一個以 PHP 為基礎的 CMS。在版本 5.20.1 之前，M...
|
2025-11-26
|
|
CVE-2025-66263
|
高
|
7.5
|
PHP
|
Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electroni...
透過 DB Electronica Telecomunicazioni S.p.A. Mozart FM...
|
2025-11-26
|
|
CVE-2025-65647
|
中
|
4.3
|
PHP
|
Insecure Direct Object Reference (IDOR) in the Track order function in PHPG...
PHPGURUKUL 線上購物入口網站 2.1 中的追蹤訂單功能中的不...
|
2025-11-25
|
|
CVE-2025-65960
|
中
|
6.6
|
PHP
|
Contao is an Open Source CMS. From version 4.0.0 to before 4.13.57, before...
Contao 是一個開源 CMS。從4.0.0版本到4.13.57之前、5.3.42...
|
2025-11-25
|
|
CVE-2025-64050
|
高
|
7.2
|
PHP
|
A Remote Code Execution (RCE) vulnerability in the template management comp...
REDAXO CMS 5.20.0 中的模板管理元件中存在遠端程式碼執行...
|
2025-11-25
|
|
CVE-2023-7330
|
N/A
|
-
|
PHP
|
Ruijie NBR series routers contain an unauthenticated arbitrary file upload...
銳捷NBR系列路由器存在透過/ddi/server/fileupload.php未經...
|
2025-11-24
|
|
CVE-2025-40213
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
Blueto...
在Linux核心中，以下漏洞已解決：
藍牙：MGMT：修復 set_m...
|
2025-11-24
|
|
CVE-2025-40212
|
N/A
|
-
|
Linux OS
|
In the Linux kernel, the following vulnerability has been resolved:
nfsd:...
在Linux核心中，以下漏洞已解決：
nfsd：修正 nfsd_set_fh...
|
2025-11-24
|
|
CVE-2025-13577
|
低
|
3.5
|
PHP
|
A flaw has been found in PHPGurukul Hostel Management System 2.1. The impac...
PHPGurukul Hostel Management System 2.1 發現一個缺陷。...
|
2025-11-24
|