Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
Ghost CVEs
All sightingsA Ghost CVE is a vulnerability identifier that appears in the wild — through GitHub Gists, security advisories, social media, or RSS feeds — yet remains marked as RESERVED or NOT_FOUND in the official CVE registries like NVD and MITRE. Also called "RESERVED BUT PUBLIC" CVEs, these ghosts highlight potential security blind spots where vulnerabilities are discussed publicly before official disclosure. They are detected from the sightings collected from these sources; the most recently sighted come first.
Loading…
No Ghost CVE sighted recently.
| Identifier | Sightings | Sighted by | Last sighted |
|---|
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic HONA Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
377 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock Airoha AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-102105 2026-09-30Kiteworks Email Protection Gateway server-side request forgery
-
CVE-2026-102106 2026-09-30Kiteworks Email Protection Gateway improper authentication
-
CVE-2026-102107 2026-09-30Kiteworks Core user impersonation in a file-request feature
-
CVE-2026-102108 2026-09-30Kiteworks Email Protection Gateway deserialization of untrusted data
-
CVE-2026-102109 2026-09-30Kiteworks Secure Data Forms SQL injection
-
CVE-2026-102110 2026-09-30Missing authentication on a Kiteworks appliance setup function
-
CVE-2026-102111 2026-09-30Kiteworks Core Improper Validation of Specified Quantity in Input
-
CVE-2026-102112 2026-09-30Kiteworks Core Local Privilege Escalation
-
CVE-2026-102113 2026-09-30Kiteworks Core Local Privilege Escalation
-
CVE-2026-102114 2026-09-30Kiteworks Core OS Command Injection
-
CVE-2026-102490 2026-09-30Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha
-
CVE-2026-102489 2026-09-30Undisclosed RCE in Zammad v6.3 and higher
-
CVE-2026-103389 2026-09-30MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in…
-
CVE-2026-103388 2026-09-30MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster…
-
CVE-2026-103321 2026-09-30MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Pr…
-
CVE-2026-74865 2026-09-30Authentication Bypass in sogo_yhn
-
CVE-2026-74864 2026-09-30Authentication Bypass in sogo_yhn
-
CVE-2026-103239 2026-09-30MISP Tag Collection Save Allows Privilege Escalation via Sibling Mode…
-
CVE-2026-103237 2026-09-30MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Te…
-
CVE-2026-10764 2026-09-30Information disclosure in BVMS 4.5 up to 12.3
-
CVE-2026-102305 2026-09-29UI misrepresentation in SignIn in Google Chrome on on iOS prior to 15…
-
CVE-2026-102314 2026-09-29UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037…
-
CVE-2026-102330 2026-09-29Incorrect authorization in SiteIsolation in Google Chrome prior to 15…
-
CVE-2026-102327 2026-09-29Incorrect authorization in WebView in Google Chrome on on Android pri…
-
CVE-2026-102310 2026-09-29Missing authorization in Payments in Google Chrome prior to 154.0.803…
-
CVE-2026-102320 2026-09-29Missing authorization in CORS in Google Chrome prior to 154.0.8037.92…
-
CVE-2026-102321 2026-09-29Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed …
-
CVE-2026-102302 2026-09-29Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed…
-
CVE-2026-102315 2026-09-29Uninitialized resource in Media in Google Chrome on on Windows prior …
-
CVE-2026-102329 2026-09-29Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92…
-
CVE-2026-75969 2026-09-30PTZOptics Missing Authentication in Firmware Upload
-
CVE-2026-76992 2026-09-30Uncontrolled Memory Allocation in CODESYS Gateway Client
-
CVE-2026-79625 2026-09-30Improper Synchronization in Monitoring in CODESYS Control Runtime
-
CVE-2026-71189 2026-09-29Toptech TMS7 and TopHAT Cross-site Scripting
-
CVE-2026-69662 2026-09-29Toptech TMS7 and TopHAT Eval Injection
-
CVE-2026-71302 2026-09-29Toptech TMS7 and TopHAT Session Fixation
-
CVE-2026-72507 2026-09-29Toptech TMS7 and TopHAT SQL Injection
-
CVE-2026-68068 2026-09-29Toptech TMS7 and TopHAT SQL Injection
-
CVE-2026-68954 2026-09-29Toptech TMS7 and TopHAT SQL Injection
-
CVE-2026-63713 2026-09-29Toptech TMS7 and TopHAT SQL Injection
-
CVE-2026-7192 2026-09-29Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Sh…
-
CVE-2026-7193 2026-09-29Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Sh…
-
CVE-2026-91154 2026-09-28Missing authentication in Ecommerce Template product cache revalidati…
-
CVE-2026-7171 2026-09-28Stored Cross-Site Scripting (XSS) in TPVEnlanube
-
CVE-2026-7172 2026-09-28Stored Cross-Site Scripting (XSS) in TPVEnlanube
-
CVE-2026-7170 2026-09-28Stored Cross-Site Scripting (XSS) in TPVEnlanube
-
CVE-2026-95835 2026-09-25Missing ownership check on the shared memory object named by the kitt…
-
CVE-2026-95834 2026-09-25Use after free in the kitty drag and drop protocol when a drag source…
-
CVE-2026-80432 2026-09-25Missing authorization in the kitty drag and drop protocol allows a cl…
-
CVE-2026-80431 2026-09-25Out-of-bounds write in the kitty text sizing protocol allows terminat…
-
CVE-2026-92873 2026-09-30Pgpool-II contains an incorrect implementation of an authentication a…
-
CVE-2026-92872 2026-09-30Pgpool-II inserts sensitive information into log file, which may allo…
-
CVE-2026-92871 2026-09-30A NULL pointer dereference vulnerability exists in Pgpool-II, which m…
-
CVE-2026-93462 2026-09-30Missing authentication for critical function vulnerability exists in …
-
CVE-2026-93464 2026-09-30Stored Cross-Site Scripting via custom content descriptions vulnerabi…
-
CVE-2026-93460 2026-09-30Stored Cross-site scripting via appended strings in email form fields…
-
CVE-2026-93463 2026-09-30Cross-Site Scripting via Script Validation Bypass exists in baserCMS.…
-
CVE-2026-92870 2026-09-30A stack-based buffer overflow vulnerability exists in Pgpool-II, whic…
-
CVE-2026-92869 2026-09-30An out-of-bounds write vulnerability exists in Pgpool-II, which may a…
-
CVE-2026-92868 2026-09-30An improper certificate validation vulnerability exists in Pgpool-II,…
-
CVE-2026-101276 2026-09-30iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use…
-
CVE-2026-92172 2026-09-30Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be…
-
CVE-2026-92173 2026-09-30Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver co…
-
CVE-2023-54403 2026-09-30Yonyou U8 CRM Arbitrary File Read via getemaildata.php
-
CVE-2024-58387 2026-09-30Inspur HCM Cloud Arbitrary File Read via file/download Endpoint
-
CVE-2023-54402 2026-09-30iDocView SSRF via /doc/upload Endpoint Hardcoded Token
-
CVE-2026-103000 2026-09-30pypdf: Possible large memory usage when retrieving alphabetical page labels
-
CVE-2026-102999 2026-09-30pypdf: Possible long runtimes with large amount of embedded files
-
CVE-2026-102998 2026-09-30pypdf: Possible long runtimes when generating appearance streams
-
CVE-2026-102997 2026-09-30pypdf: Possible long runtimes for partially malformed FlateDecode str…
-
CVE-2026-103399 2026-09-30Libsoup: soupserver: http/1 request smuggling via undrained expect: 1…
-
CVE-2026-80490 2026-09-30Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the ha…
-
CVE-2026-101295 2026-09-30Oc-mirror: oc-mirror: path traversal / arbitrary file write in operat…
-
CVE-2026-103242 2026-09-30Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rp…
-
CVE-2026-62146 2026-09-30Cri-o: cri-o: sandbox state poisoning via pod annotations may expose …
-
CVE-2026-102588 2026-09-30Moodle: csrf in xml grade import
-
CVE-2026-102587 2026-09-30Moodle: user list filters bypass profile field visibility
-
CVE-2026-102586 2026-09-30Moodle: xss via password reset link due to insufficient username escaping
-
CVE-2026-102585 2026-09-30Moodle: group validation missing when enrolling user to course
-
CVE-2026-102584 2026-09-30Moodle: missing capability check allows unauthorised grade penalty re…
-
CVE-2026-18825 2026-09-28Origin validation error in the connect-xcors npm package
-
CVE-2026-19614 2026-09-08XML External Entity (XXE) Injection in CyberELF NanoXML
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
-
CVE-2026-3457 2026-03-27Stored XSS vulnerability in Sentinel ACC
GCVE Numbering Authorities (GNAs) allocate vulnerability identifiers in their own namespace, without a central authority. This list is the local, signature-verified copy of the GCVE registry; the cards below cover this instance's own GNA and the feeds it pulls from other GNAs, following GCVE-BCP-03.
46
GNAs registered
3
GNA feeds pulled
397
Publications pulled
289
Published here (GNA-1)
-
GCVE-1-2026-20142 2026-09-30MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in…
-
GCVE-1-2026-20256 2026-09-30MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster…
-
GCVE-1-2026-20294 2026-09-30MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Pr…
-
GCVE-1-2026-20019 2026-09-30MISP Tag Collection Save Allows Privilege Escalation via Sibling Mode…
-
GCVE-1-2026-20280 2026-09-30MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Te…
bcsec
GNA-128-
GCVE-128-2026-0001 2026-08-31Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure
AHA!
GNA-1337-
Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use
-
Open MQTT orchestration without read/write ACLs in Yarbo robot firmware
-
Hardcoded credentials in Yarbo robot firmware
-
Persistent undocumented backdoor access in Yarbo robot
-
NSA Ghidra Auto-Analysis Annotation Command Execution
VULNARCHIVE
GNA-1988-
GCVE-1988-2026-0382 2026-09-11Dovecot Security Advisory 3/2026
-
GCVE-1988-2026-0381 2026-09-11Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation
-
GCVE-1988-2026-0380 2026-09-11FD - Half-click unauthenticated remote code execution on Horde Groupw…
-
GCVE-1988-2026-0379 2026-09-11[ADVISORY] Multiple Integer Overflows in U-Boot Filesystem Parsing (C…
-
GCVE-1988-2026-0378 2026-09-11CyberDanube Security Research 20260611-0 | Multiple Denial of Service…
GCVE registry
| GNA | Organization | Publications | Services |
|---|---|---|---|
| GNA-1 This instance |
CIRCL
circl
Computer Incident Response Center Luxembourg
|
289 | |
| GNA-128 Pulled |
bcsec
Bertoldi Cybersecurity
|
1 | |
| GNA-1337 Pulled |
AHA!
Austin Hackers Anonymous
|
9 | |
| GNA-1988 Pulled |
VULNARCHIVE
Vulnerability Disclosure Archive
|
387 | |
| GNA-0 |
CVE
CVE ProgramThis GCVE GNA ID is used as a prefix and MUST be followed by the official CVE ID.
|
— | |
| GNA-2 |
EUVD
European Union Vulnerability Database
|
— | |
| GNA-3 |
Red Hat
redhat
Red Hat Inc.
|
— | |
| GNA-25 |
exim
Exim
Exim Project
|
— | |
| GNA-69 |
CESNET-CERTS
CSIRT of Czech NREN
|
— | |
| GNA-79 |
SWISSCOM
swisscom
Swisscom (Schweiz) AG
|
— | |
| GNA-100 |
VulDB
vuldb
vuldb.com
|
— | |
| GNA-101 |
ERIC
Ericsson
Ericsson AB
|
— | |
| GNA-102 |
EACG
Enterprise Architecture Consulting Group
|
— | |
| GNA-103 |
SCHUTZWERK
SCHUTZWERK
SCHUTZWERK GmbH
|
— | |
| GNA-104 |
AboutCode.org
aboutcode-org
AboutCode Europe ASBL
|
— | |
| GNA-105 |
OPC
OPC Foundation
|
— | |
| GNA-106 |
SK-CERT
National Cyber Security Centre SK-CERT
|
— | |
| GNA-107 |
THA-PSIRT
thalesgroup
Thales PSIRT
|
— | |
| GNA-108 |
Securin
Securin Inc
|
— | |
| GNA-109 |
concinnity-risks
Concinnity Risks LLC
|
— | |
| GNA-110 |
VVD
Vulnetix Vulnerability Database
|
— | |
| GNA-111 |
MOGWAILABS
MOGWAI LABS GmbH
|
— | |
| GNA-112 |
CERT-QC
Ministère de la Cybersécurité et du Numérique – CERT-QC
|
— | |
| GNA-113 |
Krones
Krones AG
|
— | |
| GNA-114 |
siemens
siemens
Siemens
|
— | |
| GNA-115 |
Adrian Dacka
syrex1013
Adrian "syrex1013" Dacka
|
— | |
| GNA-116 |
FLAT
Fluid Attacks
|
— | |
| GNA-117 |
Moksha
Moksha
|
— | |
| GNA-118 |
Nozomi Networks
nozominetworks
Nozomi Networks, Inc.
|
— | |
| GNA-119 |
olearysec
olearysec.com Security Research
|
— | |
| GNA-120 |
eef
Erlang Ecosystem Foundation
|
— | |
| GNA-121 |
Passbolt
Passbolt SA
|
— | |
| GNA-122 |
OneSpan
OneSpan Inc.
|
— | |
| GNA-123 |
CI-ISAC Australia
CI-ISAC Australia Ltd
|
— | |
| GNA-124 |
SUSE
suse
SUSE Software Solutions Germany GmbH
|
— | |
| GNA-125 |
Postiz
gitroomhq
Postiz
|
— | |
| GNA-126 |
cvdportal
CVD Portal
|
— | |
| GNA-127 |
HackRTU
HackRTU
|
— | |
| GNA-129 |
Edgewatch
Occentus Network SL
|
— | |
| GNA-404 |
VulnCheck
VulnCheck Inc.
|
— | |
| GNA-680 |
DFN-CERT
DFN-CERT Services GmbH
|
— | |
| GNA-1291 |
NCSC-CH
National Cyber Security Centre (NCSC) - Switzerland
|
— | |
| GNA-2342 |
Pentagrid
Pentagrid AG
|
— | |
| GNA-31337 |
Talos
Cisco Talos
|
— | |
| GNA-65530 |
GCVE-CVE-Extension
GNA Dedicated to CVE Extension and Proposal - ID must be aligned with CVE ID reference
|
— | |
| GNA-65535 |
TEST-GNA-GCVE
GNA id used for testing onlyThis GNA ID is reserved for testing purposes. It may appear in publications generated by instances testing the publication process; however, any content produced using this GNA ID MUST NOT be considered valid.
|
— |
Latest records imported from the sources outside the CVE and GCVE programs — GitHub advisories, PyPI, OSV ecosystems, national databases, CSAF providers… — grouped as the recent vulnerabilities page lists them. The CVE Program mirrors are covered per root in the CNA Roots tab, the GNA feeds in the GNAs tab.
No source matches this filter.
Community & Open Source Databases
5 sources
GitHub 🐙
GitHub Advisory Database.-
GHSA-3CV6-JPF6-8222 2026-09-30
-
GHSA-X7G5-C7FW-CCQ6 2026-09-30
-
GHSA-Q26R-P9CQ-X7R9 2026-09-30
-
GHSA-8744-CXH8-R23V 2026-09-30
-
GHSA-6P5W-GC4F-G298 2026-09-30
PySec 🐍
Advisory database for Python packages published on pypi.org.-
PYSEC-2026-3987 2026-09-23
-
PYSEC-2026-4008 2026-09-21
-
PYSEC-2026-4007 2026-09-21
-
PYSEC-2026-4006 2026-09-21
-
PYSEC-2026-4005 2026-09-21
GSD
Global Security Database of the Cloud Security Alliance (archived).-
GSD-2024-33884 2024-04-29
-
GSD-2024-33901 2024-04-29
-
GSD-2024-33887 2024-04-29
-
GSD-2024-33895 2024-04-29
-
GSD-2024-33894 2024-04-29
OpenSSF Malicious Packages ☠
OpenSSF database of reports about malicious open source packages.-
MAL-2026-17417 2026-09-30
-
MAL-2026-17416 2026-09-30
-
MAL-2026-17415 2026-09-30
-
MAL-2026-17339 2026-09-30
-
MAL-2026-17334 2026-09-30
-
MOKSHA-2026-0089 2026-04-24Raw kbps Value Exposure in Private Xenstore via VIF.qos_algorithm_params
-
MOKSHA-2026-0088 2026-04-24Int64 Overflow in bytes_per_interval via VIF.qos_algorithm_params
-
MOKSHA-2026-0087 2026-04-24QEMU Device Model Selection via VM.platform device-model (Limited by …
-
MOKSHA-2026-0086 2026-04-24License Expiry Manipulation via Host.license_params expiry
-
MOKSHA-2026-0085 2026-04-24Feature Restriction Bypass via Host.license_params restrict_* Keys
National Vulnerability Databases
5 sources
CERT FR Alerte 🇫🇷
French national and governmental CERT.-
CERTFR-2026-ALE-011 2026-09-28
-
CERTFR-2026-ALE-010 2026-09-10
-
CERTFR-2026-ALE-009 2026-09-02
-
CERTFR-2026-ALE-008 2026-07-22
-
CERTFR-2026-ALE-007 2026-07-20
CERT FR Avis 🇫🇷
French national and governmental CERT.-
CERTFR-2026-AVI-1242 2026-09-30
-
CERTFR-2026-AVI-1241 2026-09-30
-
CERTFR-2026-AVI-1240 2026-09-30
-
CERTFR-2026-AVI-1239 2026-09-30
-
CERTFR-2026-AVI-1238 2026-09-30
JVNDB 🇯🇵
The database of vulnerability countermeasure information published on JVN.-
JVNDB-2026-035987 2026-09-30
-
JVNDB-2026-000140 2026-09-29
-
JVNDB-2026-035794 2026-09-29
-
JVNDB-2026-035789 2026-09-28
-
JVNDB-2026-000141 2026-09-25
CNVD 🇨🇳
China National Vulnerability Database.-
CNVD-2026-39098 2026-09-16
-
CNVD-2026-39097 2026-09-16
-
CNVD-2026-39096 2026-09-16
-
CNVD-2026-39095 2026-09-16
-
CNVD-2026-39094 2026-09-16
FSTEC 🇷🇺
Federal Service for Technical and Export Control of Russia.-
BDU:2026-15527 2026-09-28
-
BDU:2026-15526 2026-09-28
-
BDU:2026-15525 2026-09-28
-
BDU:2026-15524 2026-09-28
-
BDU:2026-15523 2026-09-28
CSAF Databases
52 sources
CSAF ABB
ABB cyber security advisories in CSAF format.-
3ADR011566 2026-09-28ABB Automation Builder - Deserialization of untrusted data
-
3ADR011565 2026-09-28AC500 V3 - Invalid type usage in visualization
-
2NGA003179 2026-09-28ABB Protection and Control IED Manager (PCM600) - PCM600 Project Impo…
-
2NGA003170 2026-09-28ABB Protection and Control IED Manager PCM600 Scheduler Service Privi…
-
9AKK108473A3188 2026-09-22Mint Workbench I Path traversal Vulnerability
CSAF CERT-Bund 🇩🇪
Advisories of the German federal CERT (BSI CERT-Bund) in CSAF format.-
WID-SEC-W-2026-3606 2026-09-27X.Org X11: Mehrere Schwachstellen ermöglichen Denial of Service
-
WID-SEC-W-2026-3605 2026-09-27Red Hat Enterprise Linux (rhc): Schwachstelle ermöglicht Denial of Service
-
WID-SEC-W-2026-3579 2026-09-24Linux Kernel: Mehrere Schwachstellen
-
WID-SEC-W-2026-3546 2026-09-23Fleet: Mehrere Schwachstellen
-
WID-SEC-W-2026-3472 2026-09-20WordPress: Mehrere Schwachstellen
CSAF CISA 🇺🇸
CISA ICS advisories in CSAF format.-
ICSA-26-272-07 2026-09-29Viidure Dashcam Android Application
-
ICSA-26-272-06 2026-09-29MikroTik RouterOS
-
ICSA-26-272-05 2026-09-29Anjvision YSSD-RTMP-H5
-
ICSA-26-272-04 2026-09-29Baicells Nova 430H
-
ICSA-26-272-03 2026-09-29VIVOTEK Camera Firmware
CSAF CISCO
Cisco PSIRT security advisories in CSAF format.-
CISCO-SA-NOTICE-FBN58ELX 2026-09-30Cisco Advance Notification for Publication of October 7, 2026, Securi…
-
CISCO-SA-SDWAN-WEBAUTH-XR8BEUUU 2026-09-30Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
-
CISCO-SA-TEVA-OS-COMMAND-W4GAO6JP 2026-09-16Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Comm…
-
CISCO-SA-ISE-XSS-UZ9VWRQ 2026-09-16Cisco Identity Services Engine Cross-Site Scripting Vulnerability
-
CISCO-SA-ISE-SQL-INJ-3QTKR947 2026-09-16Cisco Identity Services Engine SQL Injection Vulnerabilities
CSAF Microsoft 🪟
Microsoft Security Response Center advisories in CSAF format.-
MSRC_CVE-2026-98164 2026-09-30KVM: x86/mmu: Check write tracking in all address spaces
-
MSRC_CVE-2026-55556 2026-09-30Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication h…
-
MSRC_CVE-2026-102268 2026-09-30PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutate…
-
MSRC_CVE-2026-102270 2026-09-30PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
-
MSRC_CVE-2026-102269 2026-09-30PyJWT: Non-canonical signature segments enable raw-token revocation bypass
CSAF NCSC-NL 🇳🇱
Advisories of the Dutch National Cyber Security Centre (NCSC-NL) in CSAF format.-
NCSC-2026-0396 2026-09-30Kwetsbaarheden aangetroffen in Zammad
-
NCSC-2026-0395 2026-09-30Kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager
-
NCSC-2026-0394 2026-09-27Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway
-
NCSC-2026-0393 2026-09-24Kwetsbaarheden verholpen in Adobe Campaign Classic
-
NCSC-2026-0392 2026-09-23Kwetsbaarheden verholpen in IBM Langflow OSS en IBM MQ Appliance
CSAF Nozomi Networks
Nozomi Networks security advisories in CSAF format.-
NN-2026:20-01 2026-09-08Disabled and non-configurable certificate/host key validation in Smar…
-
NN-2026:19-01 2026-09-08Incorrect authorization in Credentials Manager in Guardian/CMC before…
-
NN-2026:18-01 2026-09-08Cross-site request forgery in the Guardian/CMC login before 26.3.0
-
NN-2026:17-01 2026-09-08Incorrect authorization in Smart Polling configuration in Guardian/CM…
-
NN-2026:16-01 2026-09-08Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
CSAF OpenSuse 🦎
openSUSE security advisories in CSAF format.-
RHSA-2026:73425 2026-09-29security update for gdb
-
OPENSUSE-SU-2026:11931-1 2026-09-29velero-1.18.4-1.1 on GA media
-
OPENSUSE-SU-2026:11930-1 2026-09-29libunbound8-1.26.1-1.1 on GA media
-
OPENSUSE-SU-2026:11929-1 2026-09-29rpcbind-1.2.9-3.1 on GA media
-
OPENSUSE-SU-2026:11928-1 2026-09-29python313-pyramid-2.1-2.1 on GA media
CSAF Open-Xchange
Open-Xchange security advisories in CSAF format.-
OXDC-ADV-2026-0002 2026-05-05OX Dovecot Security Advisory OXDC-ADV-2026-0002
-
OXDC-ADV-2026-0001 2026-03-27OX Dovecot Security Advisory OXDC-ADV-2026-0001
-
OXDC-ADV-2025-0001 2025-10-31OX Dovecot Pro Security Advisory OXDC-ADV-2025-0001
-
OXAS-ADV-2025-0003 2025-09-23OX App Suite Security Advisory OXAS-ADV-2025-0003
-
OXAS-ADV-2025-0002 2025-08-11OX App Suite Security Advisory OXAS-ADV-2025-0002
CSAF Red Hat 🎩
Red Hat Product Security advisories in CSAF format.-
RHSA-2026:74081 2026-09-30Red Hat Security Advisory: python3.12-lxml security update
-
RHSA-2026:73998 2026-09-30Red Hat Security Advisory: gvfs security update
-
RHSA-2026:74001 2026-09-30Red Hat Security Advisory: expat security update
-
RHSA-2026:74025 2026-09-30Red Hat Security Advisory: OpenShift File Integrity Operator bug fix …
-
RHSA-2026:74023 2026-09-30Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF IBU …
CSAF Schneider Electric
Schneider Electric security notifications in CSAF format.-
SEVD-2026-251-04 2026-09-08Incorrect Implementation of Authentication Algorithm vulnerability on…
-
SEVD-2026-251-02 2026-09-08Improper Neutralization of Special Elements used in an OS Command vul…
-
SEVD-2026-251-01 2026-09-08Multiple Vulnerabilities on EcoStruxure IT Data Center Expert
-
SEVD-2026-223-02 2026-08-11Multiple Vulnerabilities on NetBotz 5 750/755 Products
-
SEVD-2026-223-01 2026-08-11Improper Restriction of Excessive Authentication Attempts vulnerabili…
CSAF Sick
SICK PSIRT security advisories in CSAF format.-
SCA-2026-0013 2026-09-11Vulnerabilities Affecting SICK CorivaEngine
-
SCA-2026-0012 2026-09-11Vulnerability Affecting Sentio Creator Extension 'Device Manager'
-
SCA-2026-0011 2026-09-04Vulnerabilities in Wibu Systems CodeMeter Runtime Affect Multiple SIC…
-
SCA-2026-0010 2026-08-24AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx …
-
SCA-2026-0009 2026-07-16Vulnerability in several Endress+Hauser products
CSAF Siemens
Siemens ProductCERT security advisories in CSAF format.-
SSA-823812 2026-09-16SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices
-
SSA-517424 2026-09-08SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT
-
SSA-503852 2026-09-08SSA-503852: Authentication Bypass Vulnerability in Industrial Edge Ma…
-
SSA-330084 2026-09-08SSA-330084: Client Code Execution Vulnerability in Desigo CC Product Family
-
SSA-328642 2026-09-08SSA-328642: "Copy Fail" Vulnerability in Multiple Industrial Products
CSAF Suse 🦎
SUSE security advisories in CSAF format.-
SUSE-SU-2026:4398-1 2026-09-29Security update for python-pymongo
-
SUSE-SU-2026:4395-1 2026-09-29Security update for libXrender
-
SUSE-SU-2026:4387-1 2026-09-29Security update for corosync
-
RHSA-2026:73425 2026-09-29security update for gdb
-
SUSE-SU-2026:4383-1 2026-09-28Security update for the Linux Kernel (Live Patch 19 for SUSE Linux En…
CERT@VDE
Advisories coordinated by CERT@VDE for industrial automation vendors, in CSAF format.-
VDE-2025-028 2025-08-05Draeger: ICMHelper is vulnerable to a privilege escalation
-
VDE-2019-012 2019-06-04TECSON/GOK: Improper Authentication and Access Control on multiple devices
-
VDE-2026-027 2026-09-16Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 …
-
VDE-2025-056 2026-08-12Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext…
-
VDE-2026-008 2026-07-30Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SE…
-
VDE-2026-060 2026-06-03Phoenix Contact: Unauthenticated log download vulnerability in the fi…
-
VDE-2026-050 2026-05-27Phoenix Contact: PLCnext Firmware Security Issues Related to APPs and…
-
VDE-2025-085 2025-09-10Welotec: Path Traversal in SmartEMS Upload Handling
-
VDE-2025-076 2025-08-26Welotec: Hard-coded JWT secret in egOS WebGUI
-
VDE-2024-043 2024-08-22Welotec: Multiple products are vulnerable to regreSSHion
-
VDE-2024-023 2024-04-23Welotec: Clickjacking Vulnerability in WebUI
-
VDE-2024-009 2024-04-09Welotec: Two vulnerabilities in TK500v1 router series
-
ADVISORY2026-12_VDE-2026-097 2026-09-30CODESYS Control Runtime - Improper Synchronization in Monitoring
-
ADVISORY2026-06_VDE-2026-041 2026-07-29CODESYS PROFINET Controller - Out-of-bounds Write
-
ADVISORY2026-04_VDE-2026-040 2026-07-13CODESYS EtherNetIP - Improper timeout handling
-
ADVISORY2026-10_VDE-2026-057 2026-05-26CODESYS Control - Out-of-bounds Write
-
ADVISORY2026-09_VDE-2026-055 2026-05-26CODESYS Development System - Incorrect Default Permissions
-
VDE-2025-067 2025-08-10Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
-
VDE-2025-024 2025-05-13Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2025-032 2025-05-06Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site…
-
VDE-2025-031 2025-04-28Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2024-018 2024-02-28Wiesemann & Theis: Multiple products prone to unquoted search path
-
VDE-2026-068 2026-06-23MB connect line: Authenticated unintended access to critical program …
-
VDE-2026-054 2026-05-27MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini
-
VDE-2026-044 2026-05-27MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-030 2026-04-02MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-024 2026-03-23MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-070 2026-06-23Helmholz: Authenticated unintended access to critical program paramet…
-
VDE-2026-059 2026-05-27Helmholz: Multiple vulnerabilities in REX100/REX200/REX250
-
VDE-2026-058 2026-05-21Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
-
VDE-2026-015 2026-04-21Helmholz: Use of a Broken or Risky Cryptographic Algorithm
-
VDE-2026-043 2026-04-13Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual
-
FSA-202601 2026-02-26Several CODESYS vulnerabilities in Festo Automation Suite
-
FSA-202406 2024-12-03Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo
-
FSA-202405 2024-09-09Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products co…
-
FSA-202402 2024-02-27Several Vulnerabilities in MES PC (Windows 10)
-
FSA-202401 2024-01-30Festo: Multiple products contain CoDe16 vulnerability
-
VDE-2026-014 2026-09-16Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vu…
-
VDE-2025-011 2025-05-26PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by …
-
VDE-2025-002 2025-02-25PEPPERL+FUCHS: HMI – devices are affected by Windows RCE
-
VDE-2024-065 2024-11-26PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key
-
VDE-2024-063 2024-10-08PEPPERL+FUCHS: Multiple products are affected by regreSSHion
-
PPSA-2026-003 2026-08-04Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI
-
PPSA-2026-002 2026-04-23Pilz: Vulnerability affecting PASvisu Runtime
-
PPSA-2026-001 2026-02-02Pilz: Multiple Vulnerabilities affecting the PIT User Authentication …
-
PPSA-2025-004 2025-10-20Pilz: Vulnerability affecting PASvisu Runtime
-
PPSA-2025-003 2025-07-01Pilz: Authentication Bypass in IndustrialPI Webstatus
-
VDE-2026-031 2026-07-13WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices
-
VDE-2024-008 2026-04-08Wago: Vulnerability in WBM through Open VPN
-
VDE-2026-021 2026-03-30WAGO: Multiple Vulnerabilities in WAGO VC Hub
-
VDE-2026-010 2026-03-30WAGO: Multiple Vulnerabilities in WAGO Solution Builder and WAGO Devi…
-
VDE-2026-020 2026-03-23WAGO: Vulnerability in managed switches
-
VDE-2026-005 2026-05-06ifm: Multiple Vulnerabilities in CR3171
-
VDE-2024-061 2025-06-30ifm: Improper Access Control vulnerability
-
VDE-2024-012 2024-07-09ifm: Vulnerabilities in ifm AC14 firmware
-
VDE-2024-028 2024-05-06ifm moneo password reset can be exploited
-
VDE-2022-050 2022-12-12IFM: weak password recovery vulnerability in moneo appliance
-
VDE-2025-092 2026-01-27Beckhoff: Privilege escalation and information leak via Beckhoff Devi…
-
VDE-2025-106 2026-01-26Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
-
VDE-2025-075 2025-09-09Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
-
VDE-2024-064 2024-10-31Beckhoff: Local command injection via TwinCAT Package Manager
-
VDE-2021-008 2024-10-21Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products
-
VDE-2026-091 2026-09-15TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
-
VDE-2026-007 2026-02-23TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability
-
VDE-2025-078 2025-08-25TRUMPF: Remote support uses an outdated encryption algorithm
-
VDE-2024-004 2025-04-22TRUMPF: Multiple products affected by log4net vulnerability
-
VDE-2024-040 2024-06-25Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerab…
-
VDE-2026-089 2026-09-21Lenze: VPN Client Remote Code Execution in combination with Lenze x50…
-
VDE-2026-077 2026-07-27Lenze: Incorrect signature validation in the enable SSH routine
-
VDE-2025-043 2025-06-25Lenze: PLC Designer V4 with insecure storage of sensitive information
-
VDE-2025-042 2025-05-27Lenze: VPN Client Privilege Escalation in combination with Lenze x500…
-
VDE-2024-053 2024-09-03Lenze: Install Directory with insufficient permissions
-
VDE-2026-028 2026-09-16Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple …
-
VDE-2022-029 2022-09-26Carlo Gavazzi Controls: Multiple Vulnerabilities in Controller UWP 3.0
-
VDE-2025-047 2025-06-10AUMA: Incorrect delivery status of the Bluetooth configuration
-
VDE-2025-026 2025-05-12AUMA Riester: Buffer overflow in service telegram
-
VDE-2023-028 2023-08-07AUMA: SIMA Master Station affected by WRECK vulnerability
-
VDE-2023-027 2023-08-07AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations
-
VDE-2022-032 2022-08-09AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service
-
VDE-2025-084 2025-09-08Bender Charge Controller Vulnerability - Unsecure Communication
-
VDE-2025-061 2025-09-08Bender Charge Controller Vulnerability - Disclosure Of Stored Credent…
-
VDE-2021-047 2022-04-26Bender/ebee: Multiple Charge Controller Vulnerabilities
-
VDE-2020-043 2020-10-16Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vuln…
-
VDE-2026-065 2026-08-03Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package…
-
VDE-2026-045 2026-07-16Endress+Hauser: Multiple products affected by SopasET interface vulne…
-
VDE-2026-032 2026-04-21Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW
-
VDE-2026-003 2026-03-31Endress+Hauser: Multiple products prone to multiple vulnerabilities i…
-
VDE-2026-002 2026-03-02Endress+Hauser: buffer overflow in glibc ld.so leading to privilege e…
-
VDE-2026-078 2026-08-20Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities
-
VDE-2025-030 2025-07-07Frauscher: FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi are Vulnerab…
-
VDE-2023-049 2023-12-11Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
-
VDE-2023-038 2023-09-21Frauscher: Multiple Vulnerabilities in FDS101
-
VDE-2023-011 2023-07-05Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vul…
-
VDE-2022-052 2022-11-21Miele: Vulnerability in ease2pay cloud service used by appWash
-
VDE-2022-015 2022-04-27Miele: Security vulnerability in Benchmark Programming Tool
-
VDE-2020-024 2020-07-08Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communicatio…
-
VDE-2019-010 2019-05-20Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway
-
VDE-2026-083 2026-08-25Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are af…
-
VDE-2026-085 2026-07-28Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA
-
VDE-2026-081 2026-07-28Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by…
-
VDE-2025-096 2026-03-10Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Ener…
-
VDE-2025-052 2025-06-11Weidmueller: Security routers IE-SR-2TX are affected by multiple vuln…
-
VDE-2025-066 2025-08-27SMA: Directory Traversal in Sunny Boy
-
VDE-2025-050 2025-08-19SMA: Sunny Portal limited disclosure of personal data of registered u…
-
VDE-2025-010 2025-05-13SMA: Sunny Portal demo system privilege escalation
-
VDE-2025-012 2025-02-26SMA: Sunny Portal Remote Code Execution
-
VDE-2024-075 2025-01-27SMA: Sunny Webbox clickjacking vulnerability
-
VDE-2024-013 2024-02-13HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing
-
VDE-2022-059 2023-01-16HIMA: unquoted path vulnerabilities in X-OPC and X-OTS
-
VDE-2026-061 2026-08-24Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' functio…
-
VDE-2026-063 2026-07-14Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS
-
VDE-2026-062 2026-07-14Several Murrelektronik Devices use Default SNMP Community Names
-
VDE-2025-091 2025-10-14Murrelektronik: Cleartext Transmission of Sensitive Information in IM…
-
VDE-2020-016 2020-05-28SWARCO: Critical Vulnerability in CPU LS4000
-
VDE-2026-076 2026-07-28ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products
-
VDE-2025-033 2025-04-14ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC…
-
VDE-2024-016 2024-02-19ADS-TEC Industrial IT: Docker vulnerability affects multiple products
-
VDE-2023-009 2023-05-08ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000
-
VDE-2022-061 2023-03-15VARTA: Multiple devices prone to hard-coded credentials
-
VDE-2026-093 2026-09-01SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mec…
-
VDE-2025-060 2025-10-21Sauter: Multiple vulnerabilities in SAUTER modulo 6
-
VDE-2025-079 2026-03-10Janitza: Multiple vulnerabilities in UMG 96RM-E
-
VDE-2025-094 2025-11-24Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+
-
VDE-2026-088 2026-08-20METTLER TOLEDO: LabX Standard and Enterprise Report on External Compo…
-
VDE-2026-066 2026-07-14METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
-
VDE-2026-064 2026-06-09METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3
-
VDE-2026-053 2026-05-26METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnera…
-
VDE-2026-029 2026-04-23METTLER TOLEDO: OpenSSL vulnerability in MX and MR balances
TIBCO
TIBCO security advisories in CSAF format.-
TIBCO-2023-454 2023-05-23TIBCO Security Advisory TIBCO-2023-454
-
TIBCO-2023-453 2023-05-23TIBCO Security Advisory TIBCO-2023-453
-
TIBCO-2023-460 2023-04-18TIBCO Security Advisory TIBCO-2023-460
-
TIBCO-2023-450 2023-02-22TIBCO Security Advisory TIBCO-2023-450
-
TIBCO-2023-446 2023-02-22TIBCO Security Advisory TIBCO-2023-446
Trend Micro
Trend Micro security bulletins in CSAF format.-
2026-0521-TM-A1-001 2026-05-21ITW SECURITY BULLETIN: Apex One and Vision One and Standard Endpoint …
-
2025-0805-TM-A1-002 2025-08-05ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One (On-Premise) Man…
-
2025-0627-TM-WF-001 2025-06-27SECURITY BULLETIN: June 2025 for Trend Micro Worry-Free Business Secu…
-
2025-0610-TM-TMEE-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Endpoint Encryption PolicySer…
-
2025-0610-TM-AC-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Apex Central (June 2025)
-
VDE-2026-048 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Blueto…
-
VDE-2026-047 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Air products
-
VDE-2026-046 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS two- a…
-
VDE-2026-016 2026-04-22VEGA: Unsecured Configuration Interface Allows Unauthorized Access Le…
-
HBSA-2025-0003 2026-02-18JBL: DoS vulnerability in Flip 4
-
HBSA-2025-0002 2025-12-10BLE ICM Vulnerability in JBL Headphones
-
HBSA-2025-0001 2025-12-10BLE GATT Service Vulnerability in JBL Headphones
-
VDE-2026-071 2026-06-23JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON …
-
VDE-2026-009 2026-05-26JUMO: Multiple products affected by nodejs vulnerability
-
VDE-2025-086 2025-11-10Jumo: Predictable debug-interface password in variTRON series
-
VDE-2025-098 2026-04-02Baade M2M-Products GmbH: ubusd heap buffer overflow vulnerability in …
-
VDE-2025-097 2025-11-18METZ CONNECT: Config API – Authentication bypass leads to admin takeo…
OSV Sources
13 sources
OSV AlmaLinux
AlmaLinux security advisories in OSV format.-
ALSA-2026:73512 2026-09-29
-
ALSA-2026:73429 2026-09-29
-
ALSA-2026:73428 2026-09-29
-
ALSA-2026:73427 2026-09-29
-
ALSA-2026:73426 2026-09-29
OSV BellSoft
BellSoft advisories for Alpaquita Linux and its hardened containers, in OSV format.-
BELL-CVE-2026-98164 2026-09-30
-
BELL-CVE-2026-98114 2026-09-29
-
BELL-CVE-2026-98113 2026-09-29
-
BELL-CVE-2026-98112 2026-09-29
-
BELL-CVE-2026-98095 2026-09-29
OSV Haskell λ
Haskell Security Advisory Database (HSEC) in OSV format.-
HSEC-2026-0010 2026-09-29
-
HSEC-2026-0008 2026-06-03
-
HSEC-2026-0007 2026-05-22
-
HSEC-2026-0006 2026-04-08
-
HSEC-2026-0004 2026-03-28
OSV Homebrew 🍺
OSV records for Homebrew formulae patched against known vulnerabilities.-
BREW-KIMI-CLI-CVE-2026-102274 2026-09-30
-
BREW-KIMI-CLI-CVE-2026-102273 2026-09-30
-
BREW-KIMI-CLI-CVE-2026-102272 2026-09-30
-
BREW-KIMI-CLI-CVE-2026-102271 2026-09-30
-
BREW-KIMI-CLI-CVE-2026-102269 2026-09-30
OSV Ocaml 🐫
OCaml security advisories in OSV format.-
OSEC-2026-20 2026-09-10
-
OSEC-2026-19 2026-09-10
-
OSEC-2026-18 2026-09-10
-
OSEC-2026-16 2026-08-20
-
OSEC-2026-17 2026-08-17
OSV openEuler
openEuler security advisories (OESA) in OSV format.-
OESA-2026-4130 2026-09-25
-
OESA-2026-4129 2026-09-25
-
OESA-2026-4128 2026-09-25
-
OESA-2026-4127 2026-09-25
-
OESA-2026-4126 2026-09-25
OSV OSS Fuzz 🧪
Vulnerabilities found by Google OSS-Fuzz, in OSV format.-
OSV-2026-1239 2026-09-06
-
OSV-2026-1235 2026-09-06
-
OSV-2026-1220 2026-08-31
-
OSV-2026-1198 2026-08-25
-
OSV-2026-1196 2026-08-25
OSV Rocky Linux
Rocky Linux security advisories in OSV format, served by the Apollo API.-
RLSA-2026:73429 2026-09-30
-
RLSA-2026:73427 2026-09-30
-
RLSA-2026:73130 2026-09-30
-
RLSA-2026:72624 2026-09-30
-
RLSA-2026:73838 2026-09-30
OSV Rustsec 🦀
RustSec advisory database for Rust crates.-
RUSTSEC-2026-0311 2026-09-27
-
RUSTSEC-2026-0310 2026-09-25
-
RUSTSEC-2026-0316 2026-09-24
-
RUSTSEC-2026-0315 2026-09-24
-
RUSTSEC-2026-0314 2026-09-24
OSV Ubuntu
Ubuntu security notices and CVE records in OSV format.-
USN-8851-1 2026-09-30
-
USN-8850-1 2026-09-30
-
USN-8849-1 2026-09-30
-
USN-8818-4 2026-09-30
-
USN-8819-4 2026-09-30
Bitnami VulnDB
Bitnami vulnerability database for the applications it packages.-
BIT-GITLAB-2026-93577 2026-09-29
-
BIT-GITLAB-2026-92874 2026-09-29
-
BIT-GITLAB-2026-92628 2026-09-29
-
BIT-GITLAB-2026-92530 2026-09-29
-
BIT-GITLAB-2026-92529 2026-09-29
-
CLEANSTART-2025-JH01650 2026-09-30
-
CLEANSTART-2025-NH78236 2026-09-30
-
CLEANSTART-2025-AN69250 2026-09-30
-
CLEANSTART-2025-NL28578 2026-09-30
-
CLEANSTART-2025-BC18774 2026-09-30
Drupal 💧
Drupal core and contributed project security advisories.-
DRUPAL-CONTRIB-2026-191 2026-09-23
-
DRUPAL-CONTRIB-2026-190 2026-09-23
-
DRUPAL-CONTRIB-2026-189 2026-09-23
-
DRUPAL-CONTRIB-2026-188 2026-09-23
-
DRUPAL-CONTRIB-2026-187 2026-09-23
Specialized Sources
3 sources
Tailscale
Tailscale security bulletins.-
TS-2026-011 2026-08-18
-
TS-2026-010 2026-07-24
-
TS-2026-009 2026-07-13
-
TS-2026-008 2026-07-13
-
TS-2026-007 2026-07-10
AVID 🤖
AI Vulnerability Database of failure reports for AI/ML systems.-
AVID-2023-V028 2023-03-31
-
AVID-2023-V027 2023-03-31
-
AVID-2023-V026 2023-03-31
-
AVID-2023-V016 2023-03-31
-
AVID-2023-V015 2023-03-31
VARIoT 📡
Vulnerability database focused on vulnerabilities in the Internet of Things (IoT) ecosystem.-
VAR-202407-2188 2024-07-23
-
VAR-202406-3119 2024-07-23
-
VAR-202407-1740 2024-07-23
-
VAR-202407-1417 2024-07-23
-
VAR-202407-1103 2024-07-23