Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2017-20221
5.3 (4.0)
4.3 (3.1)
Telesquare SKT LTE Router SDT-CS3B1 CSRF System Comman… Telesquare
SDT-CS3B1
2026-03-16T01:28:24.978Z 2026-03-16T14:20:17.143Z
CVE-2026-4204
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downla… D-Link
DNS-120
2026-03-16T01:02:15.336Z 2026-03-16T14:40:36.556Z
CVE-2026-4203
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command i… D-Link
DNS-120
2026-03-16T01:02:10.990Z 2026-03-16T14:40:36.405Z
CVE-2026-4201
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
glowxq glowxq-oj SysFileController.java upload unrestr… glowxq
glowxq-oj
2026-03-16T00:32:43.342Z 2026-03-16T18:47:12.805Z
CVE-2026-4200
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
glowxq glowxq-oj ProblemCaseController.java uploadTest… glowxq
glowxq-oj
2026-03-16T00:02:49.207Z 2026-03-16T20:05:01.576Z
CVE-2026-4199
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
bazinga012 mcp_code_executor index.ts installDependenc… bazinga012
mcp_code_executor
2026-03-16T00:02:10.776Z 2026-03-16T20:07:05.441Z
CVE-2026-30405
7.5 (3.1)
An issue in GoBGP gobgpd v.4.2.0 allows a remote … n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-17T15:24:03.136Z
CVE-2025-69902
9.8 (3.1)
A command injection vulnerability in the minimal_… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-17T14:01:39.958Z
CVE-2025-69809
9.8 (3.1)
A write-what-where condition in p2r3 Bareiron com… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-16T19:32:16.530Z
CVE-2025-69808
9.1 (3.1)
An out-of-bounds memory access (OOB) in p2r3 Bare… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-16T19:52:03.880Z
CVE-2025-69784
8.8 (3.1)
A local, non-privileged attacker can abuse a vuln… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-16T18:52:07.059Z
CVE-2025-69783
7.8 (3.1)
A local attacker can bypass OpenEDR's 2.5.1.0 sel… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-17T13:54:12.332Z
CVE-2025-69768
7.5 (3.1)
SQL Injection vulnerability in Chyrp v.2.5.2 and … n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-16T18:58:26.256Z
CVE-2025-69727
5.3 (3.1)
An Incorrect Access Control vulnerability exists … n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-16T19:05:49.605Z
CVE-2025-69693
5.4 (3.1)
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 v… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-16T20:04:20.747Z
CVE-2025-68971
6.5 (3.1)
In Forgejo through 13.0.3, the attachment compone… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-17T20:47:45.452Z
CVE-2025-66687
7.5 (3.1)
Doom Launcher 3.8.1.0 is vulnerable to Directory … n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-17T13:55:53.024Z
CVE-2025-65734
5.4 (3.1)
An authenticated arbitrary file upload vulnerabil… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-16T17:24:36.260Z
CVE-2025-57543
6.1 (3.1)
Cross Site scripting vulnerability (XSS) in NetBo… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-16T19:10:44.673Z
CVE-2025-50881
8.8 (3.1)
The `flow/admin/moniteur.php` script in Use It Fl… n/a
n/a
2026-03-16T00:00:00.000Z 2026-03-17T13:59:00.502Z
CVE-2026-4198
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
hypermodel-labs mcp-server-auto-commit index.ts getGit… hypermodel-labs
mcp-server-auto-commit
2026-03-15T23:32:19.764Z 2026-03-16T20:08:37.689Z
CVE-2026-4197
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List comm… D-Link
DNS-120
2026-03-15T23:32:15.445Z 2026-03-16T14:40:36.175Z
CVE-2026-4196
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_ser… D-Link
DNS-120
2026-03-15T23:32:11.114Z 2026-03-16T14:40:35.989Z
CVE-2026-4195
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
D-Link DNS-1550-04 wizard_mgr.cgi command injection D-Link
DNS-120
2026-03-15T23:02:19.813Z 2026-03-16T14:40:35.838Z
CVE-2026-4194
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control D-Link
DNS-120
2026-03-15T23:02:14.929Z 2026-03-16T14:40:35.694Z
CVE-2026-4193
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
D-Link DIR-823G goahead UpdateClientInfo access control D-Link
DIR-823G
2026-03-15T23:02:10.715Z 2026-03-16T14:40:35.349Z
CVE-2026-4192
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
AvinashBole quip-mcp-server index.ts setupToolHandlers… AvinashBole
quip-mcp-server
2026-03-15T20:32:09.433Z 2026-03-16T20:10:09.885Z
CVE-2026-4191
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
JawherKl node-api-postgres Profile Picture index.js pa… JawherKl
node-api-postgres
2026-03-15T20:02:09.002Z 2026-03-16T20:10:57.488Z
CVE-2026-4190
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
JawherKl node-api-postgres user.js User.getAll sql injection JawherKl
node-api-postgres
2026-03-15T19:32:16.058Z 2026-03-16T20:12:17.864Z
CVE-2026-4189
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
phpipam Section edit-result.php sql injection n/a
phpipam
2026-03-15T19:32:12.338Z 2026-03-16T20:09:17.428Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-3083
8.8 (3.0)
GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code… GStreamer
GStreamer
2026-03-13T20:41:31.185Z 2026-03-18T03:55:32.323Z
CVE-2026-3082
7.8 (3.0)
GStreamer JPEG Parser Heap-based Buffer Overflow Remot… GStreamer
GStreamer
2026-03-13T20:39:33.772Z 2026-03-18T03:55:31.109Z
CVE-2026-3081
7.8 (3.0)
GStreamer H.266 Codec Parser Stack-based Buffer Overfl… GStreamer
GStreamer
2026-03-13T20:39:20.596Z 2026-03-17T12:43:51.002Z
CVE-2026-3024
4.8 (4.0)
Stored Cross-Site Scripting (XSS) vulnerability in the… Wakyma
Wakyma application web
2026-03-16T10:13:37.130Z 2026-03-16T13:25:02.460Z
CVE-2026-3023
5.3 (4.0)
Non-relational SQL injection vulnerability (NoSQLi) in… Wakyma
Wakyma application web
2026-03-16T10:12:53.281Z 2026-03-16T13:25:33.440Z
CVE-2026-3022
7.1 (4.0)
Non-relational SQL injection vulnerability (NoSQLi) in… Wakyma
Wakyma application web
2026-03-16T10:11:30.207Z 2026-03-16T15:26:40.413Z
CVE-2026-3021
7.1 (4.0)
Non-relational SQL injection vulnerability (NoSQLi) in… Wakyma
Wakyma application web
2026-03-16T10:11:11.742Z 2026-03-16T15:27:11.828Z
CVE-2026-3020
8.6 (4.0)
Identity based authorization bypass vulnerability (IDO… Wakyma
Wakyma application web
2026-03-16T10:09:54.621Z 2026-03-16T15:27:44.272Z
CVE-2026-32778
2.9 (3.1)
libexpat before 2.7.5 allows a NULL pointer deref… libexpat project
libexpat
2026-03-16T07:02:34.410Z 2026-03-17T14:39:21.950Z
CVE-2026-32777
4 (3.1)
libexpat before 2.7.5 allows an infinite loop whi… libexpat project
libexpat
2026-03-16T06:58:06.657Z 2026-03-16T14:55:27.958Z
CVE-2026-32776
4 (3.1)
libexpat before 2.7.5 allows a NULL pointer deref… libexpat project
libexpat
2026-03-16T06:54:20.318Z 2026-03-16T14:58:38.710Z
CVE-2026-32775
7.4 (3.1)
libexif through 0.6.25 has a flaw in decoding Mak… libexif
libexif
2026-03-16T06:31:36.015Z 2026-03-17T12:53:49.253Z
CVE-2026-32774
5.3 (4.0)
6.4 (3.1)
Vulnogram - Stored Cross-Site Scripting via Comment Hy… Vulnogram
Vulnogram
2026-03-14T21:44:07.130Z 2026-03-17T20:16:37.588Z
CVE-2026-32772
3.4 (3.1)
telnet in GNU inetutils through 2.7 allows server… GNU
inetutils
2026-03-13T21:01:17.782Z 2026-03-16T17:02:16.817Z
CVE-2026-32732
0 (4.0)
XSS in @leanprover/unicode-input-component leanprover
vscode-lean4
2026-03-13T21:43:22.209Z 2026-03-16T20:22:43.428Z
CVE-2026-32729
8.1 (3.1)
Runtipi has a TOTP two-factor authentication bypass vi… runtipi
runtipi
2026-03-13T21:41:11.699Z 2026-03-16T20:22:43.613Z
CVE-2026-32724
5.3 (3.1)
PX4 autopilot has a heap Use-After-Free in MavlinkShel… PX4
PX4-Autopilot
2026-03-13T21:39:19.207Z 2026-03-16T20:22:43.754Z
CVE-2026-32720
7.1 (4.0)
Improper Access Control in github.com/ctfer-io/monitoring ctfer-io
monitoring
2026-03-13T21:27:52.824Z 2026-03-16T16:42:54.043Z
CVE-2026-32719
4.2 (3.1)
AnythingLLM has a Zip Slip Path Traversal and Code Exe… Mintplex-Labs
anything-llm
2026-03-13T21:25:31.682Z 2026-03-16T16:44:38.247Z
CVE-2026-32717
2.7 (3.1)
AnythingLLM access control bypass: suspended users can… Mintplex-Labs
anything-llm
2026-03-13T21:23:48.659Z 2026-03-16T16:45:17.568Z
CVE-2026-32715
3.8 (3.1)
AnythingLLM Manager Privilege Bypass Allows Access to … Mintplex-Labs
anything-llm
2026-03-13T21:22:00.783Z 2026-03-16T16:46:00.551Z
CVE-2026-32713
4.3 (3.1)
PX4 Autopilot MAVLink FTP Session Validation Logic Err… PX4
PX4-Autopilot
2026-03-13T21:20:09.352Z 2026-03-17T15:11:04.784Z
CVE-2026-32709
5.4 (3.1)
PX4 Autopilot MAVLink FTP Unauthenticated Path Travers… PX4
PX4-Autopilot
2026-03-13T21:19:33.528Z 2026-03-17T15:12:28.877Z
CVE-2026-32708
7.8 (3.1)
Zenoh uORB Subscriber Allows Arbitrary Stack Allocatio… PX4
PX4-Autopilot
2026-03-13T21:18:53.025Z 2026-03-17T15:32:42.537Z
CVE-2026-32707
5.2 (3.1)
PX4 autopilot has a stack buffer overflow in tattu_can… PX4
PX4-Autopilot
2026-03-13T21:18:09.118Z 2026-03-17T15:34:02.447Z
CVE-2026-32706
7.1 (3.1)
PX4 autopilot has a global buffer overflow in crsf_rc … PX4
PX4-Autopilot
2026-03-13T21:17:02.719Z 2026-03-17T15:41:50.077Z
CVE-2026-32705
6.8 (3.1)
PX4 autopilot BST Device Name Length Can Overflow Driv… PX4
PX4-Autopilot
2026-03-13T21:15:55.509Z 2026-03-17T16:03:00.531Z
CVE-2026-32704
6.5 (3.1)
SiYuan renderSprig: missing admin check allows any use… siyuan-note
siyuan
2026-03-13T21:10:36.613Z 2026-03-16T16:46:59.090Z
CVE-2026-32702
6.9 (4.0)
Cleanuparr has Username Enumeration via Timing Attack Cleanuparr
Cleanuparr
2026-03-13T21:09:00.127Z 2026-03-16T16:47:53.284Z
CVE-2026-32640
8.7 (4.0)
(SimpleEval) Objects (including modules) can leak dang… danthedeckie
simpleeval
2026-03-13T21:03:53.435Z 2026-03-16T16:48:21.852Z
ID Description Published Updated
fkie_cve-2025-27573 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.387 2026-02-13T19:16:29.387
fkie_cve-2025-27569 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.327 2026-02-13T19:16:29.327
fkie_cve-2025-27251 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.253 2026-02-13T19:16:29.253
fkie_cve-2025-26471 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:28.970 2026-02-13T19:16:28.970
fkie_cve-2025-25049 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:28.900 2026-02-13T19:16:28.900
fkie_cve-2025-24524 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:28.103 2026-02-13T19:16:28.103
fkie_cve-2025-24518 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:28.043 2026-02-13T19:16:28.043
fkie_cve-2025-24492 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.983 2026-02-13T19:16:27.983
fkie_cve-2025-24321 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.927 2026-02-13T19:16:27.927
fkie_cve-2025-24300 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.860 2026-02-13T19:16:27.860
fkie_cve-2025-22845 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.457 2026-02-13T19:16:27.457
fkie_cve-2025-20110 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.397 2026-02-13T19:16:27.397
fkie_cve-2025-20107 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.337 2026-02-13T19:16:27.337
fkie_cve-2025-20098 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.277 2026-02-13T19:16:27.277
fkie_cve-2025-20089 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.217 2026-02-13T19:16:27.217
fkie_cve-2025-20078 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.153 2026-02-13T19:16:27.153
fkie_cve-2025-20066 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.083 2026-02-13T19:16:27.083
fkie_cve-2025-20038 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:27.013 2026-02-13T19:16:27.013
fkie_cve-2025-20007 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:26.430 2026-02-13T19:16:26.430
fkie_cve-2026-21870 BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (… 2026-02-13T18:16:19.783 2026-02-18T18:49:07.307
fkie_cve-2025-69770 A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allo… 2026-02-13T18:16:18.043 2026-02-13T21:43:11.137
fkie_cve-2025-66676 An issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a craf… 2026-02-13T18:16:17.923 2026-02-13T21:43:11.137
fkie_cve-2026-26268 Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuratio… 2026-02-13T17:16:14.227 2026-02-18T17:59:35.067
fkie_cve-2026-26226 beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to… 2026-02-13T17:16:14.073 2026-02-13T21:43:11.137
fkie_cve-2026-2026 A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Wi… 2026-02-13T17:16:14.383 2026-02-24T20:26:42.967
fkie_cve-2025-70123 An improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows remote … 2026-02-13T17:16:12.210 2026-02-18T15:40:29.760
fkie_cve-2025-70122 A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers… 2026-02-13T17:16:12.090 2026-02-18T15:40:09.237
fkie_cve-2025-70121 An array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote att… 2026-02-13T17:16:11.933 2026-02-18T15:45:58.910
fkie_cve-2025-1790 Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user … 2026-02-13T17:16:10.917 2026-02-13T21:43:11.137
fkie_cve-2026-26221 Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Servi… 2026-02-13T16:16:11.683 2026-02-13T21:43:11.137
ID Severity Description Published Updated
ghsa-65gc-f4hp-xpp4
8.0 (3.1)
Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code E… 2026-03-16T15:30:44Z 2026-03-16T15:30:44Z
ghsa-5377-m765-56mv
7.8 (3.1)
GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerab… 2026-03-16T15:30:44Z 2026-03-16T15:30:44Z
ghsa-4hx7-4qhw-8hjh
9.8 (3.1)
8.9 (4.0)
A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is the function Delete_Mac_list/SetNam… 2026-03-16T15:30:44Z 2026-03-16T15:30:44Z
ghsa-3wjp-87jx-r4pv
6.3 (3.1)
2.1 (4.0)
A security vulnerability has been detected in CodeGenieApp serverless-express up to 4.17.1. Affecte… 2026-03-16T15:30:44Z 2026-03-16T15:30:44Z
ghsa-393c-jhgx-p674
8.1 (3.1)
Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. Thi… 2026-03-16T15:30:44Z 2026-03-16T15:30:44Z
ghsa-2q8v-6q3v-prjc
8.0 (3.1)
Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execu… 2026-03-16T15:30:44Z 2026-03-16T15:30:44Z
ghsa-26fg-fjwm-xwm6
8.8 (3.1)
7.4 (4.0)
A vulnerability was determined in Belkin F9K1122 1.00.33. This affects the function formReboot of t… 2026-03-16T15:30:44Z 2026-03-16T15:30:44Z
ghsa-wj6x-vgpf-cpm6
7.8 (3.1)
GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerab… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-vggc-6pg2-xvp9
6.4 (3.1)
5.1 (4.0)
Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling … 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-vfq7-rgvh-5gcx
7.1 (4.0)
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in … 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-pq8m-942f-68cv
7.4 (3.1)
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-hx82-g397-5ggr
2.9 (3.1)
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after a… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-hjx5-q68f-pv56
7.8 (3.1)
GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerabi… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-hf8w-x9h5-5gf9
4.3 (3.1)
Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks … 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-h8gg-vg9f-x3jm
7.5 (3.1)
IceWarp collaboration Directory Traversal Information Disclosure Vulnerability. This vulnerability … 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-h3jf-fj6h-58j8
7.1 (4.0)
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in … 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-g7gw-mp9w-623w
7.8 (3.1)
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability all… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-fx49-m253-27jj
4.3 (3.1)
Mattermost fails to filter invite IDs based on user permissions 2026-03-16T15:30:43Z 2026-03-17T20:02:22Z
ghsa-fprx-ppqr-8wgf
6.6 (3.1)
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-9rpf-mhcj-gv7r
4.0 (3.1)
libexpat before 2.7.5 allows an infinite loop while parsing DTD content. 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-9qp5-q937-cpvv
5.3 (4.0)
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in … 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-832q-9r5f-ppx5
8.6 (4.0)
Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-7q24-fxcq-rmwc
6.3 (3.1)
Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability. This vulnerability allows network-… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-679f-wmrg-qf57
4.3 (3.1)
Mattermost allows a removed team member to enumerate all public channels within a private team 2026-03-16T15:30:43Z 2026-03-17T20:01:40Z
ghsa-5p6r-4c7p-96fh
3.4 (3.1)
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from cli… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-52ch-r2h3-gxrq
7.8 (3.1)
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-4ppj-6chv-5pgc
7.6 (3.1)
Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which al… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-3rhr-jr63-hwq5
4.3 (3.1)
Mattermost fails to preserve the redacted state of burn-on-read posts during deletion 2026-03-16T15:30:43Z 2026-03-17T20:02:36Z
ghsa-3gr9-8p27-7f3p
7.2 (3.1)
8.6 (4.0)
OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injectio… 2026-03-16T15:30:43Z 2026-03-16T15:30:43Z
ghsa-34g8-9fpp-46ch
5.3 (3.1)
Mattermost fails to limit the size of responses from integration action endpoints 2026-03-16T15:30:43Z 2026-03-17T20:01:22Z
ID Severity Description Package Published Updated
pysec-2023-244
Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a use… apache-submarine 2023-11-22T10:15:00+00:00 2023-11-22T11:21:52.095543+00:00
pysec-2023-288
6.5 (3.1)
The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify t… nautobot-device-onboarding 2023-11-21T23:15:00+00:00 2024-11-21T14:22:55.475794+00:00
pysec-2023-302
7.5 (3.1)
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive info… upydev 2023-11-20T23:15:00Z 2024-11-25T18:35:18.357593Z
pysec-2023-240
Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The … apache-submarine 2023-11-20T09:15:00+00:00 2023-11-20T11:21:41.073991+00:00
pysec-2023-245
7.5 (3.1)
PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in … pypinksign 2023-11-16T18:15:00+00:00 2023-11-22T19:19:42.405614+00:00
pysec-2023-243
7.4 (3.1)
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on … localstack 2023-11-16T18:15:00Z 2024-10-09T12:05:48.156835Z
pysec-2023-242
7.4 (3.1)
Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on comm… httpie 2023-11-16T18:15:00+00:00 2023-11-22T02:43:48.390438+00:00
pysec-2023-304
8.8 (3.1)
vantage6 is a framework to manage and deploy privacy enhancing technologies like Federate… vantage6-server 2023-11-14T21:15:00+00:00 2024-11-21T14:23:02.641254+00:00
pysec-2023-303
8.8 (3.1)
vantage6 is a framework to manage and deploy privacy enhancing technologies like Federate… vantage6-node 2023-11-14T21:15:00+00:00 2024-11-21T14:23:02.574095+00:00
pysec-2023-247
6.5 (3.1)
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected … aiohttp 2023-11-14T21:15:00+00:00 2023-11-22T23:23:57.631856+00:00
pysec-2023-246
7.5 (3.1)
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP … aiohttp 2023-11-14T21:15:00+00:00 2023-11-22T23:23:57.547793+00:00
pysec-2023-239
6.8 (3.1)
An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the remote end of an… asyncssh 2023-11-14T03:15:00+00:00 2023-11-20T09:25:38.326328+00:00
pysec-2023-237
5.9 (3.1)
An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the extension info m… asyncssh 2023-11-14T03:15:00+00:00 2023-11-17T17:27:01.919743+00:00
pysec-2023-275
7.5 (3.1)
Label Studio is an open source data labeling tool. In all current versions of Label Studi… label-studio 2023-11-13T21:15:00+00:00 2024-11-21T14:22:53.350760+00:00
pysec-2023-236
7.5 (3.1)
Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulne… remarshal 2023-11-13T03:15:00+00:00 2023-11-16T20:25:23.801345+00:00
pysec-2023-232
We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed the… apache-airflow 2023-11-12T14:15:00+00:00 2023-11-12T16:29:15.404665+00:00
pysec-2023-231
Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user… apache-airflow 2023-11-12T14:15:00+00:00 2023-11-12T16:29:15.321733+00:00
pysec-2023-241
9.1 (3.1)
Piccolo is an object-relational mapping and query builder which supports asyncio. Prior t… piccolo 2023-11-10T18:15:00Z 2024-01-23T23:21:13.409656Z
pysec-2023-234
7.5 (3.1)
An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via w… esptool 2023-11-09T16:15:00Z 2024-01-02T13:04:16.284694Z
pysec-2023-274
8.8 (3.1)
Label Studio is a multi-type data labeling and annotation tool with standardized output f… label-studio 2023-11-09T15:15:00+00:00 2024-11-21T14:22:53.173192+00:00
pysec-2023-235
7.5 (3.1)
An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.l… couchbase 2023-11-08T21:15:00Z 2024-01-03T21:03:33.010228Z
pysec-2023-233
8.8 (3.1)
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif,… exiv2 2023-11-06T18:15:00Z 2024-01-02T15:20:59.435740Z
pysec-2023-227
An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrol… pillow 2023-11-03T05:15:00+00:00 2023-11-03T10:29:41.505456+00:00
pysec-2023-226
In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.te… django 2023-11-03T05:15:00+00:00 2023-11-03T10:29:40.328470+00:00
pysec-2023-225
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encodi… django 2023-11-03T05:15:00+00:00 2023-11-03T10:29:40.160394+00:00
pysec-2023-223
Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attacke… transmute-core 2023-11-02T06:15:00+00:00 2023-11-02T10:30:07.951105+00:00
pysec-2023-222
An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.… django 2023-11-02T06:15:00+00:00 2023-11-02T10:30:06.341485+00:00
pysec-2023-230
5.3 (3.1)
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cache… matrix-synapse 2023-10-31T17:15:00+00:00 2023-11-08T20:24:49.199333+00:00
pysec-2023-224
5.3 (3.1)
Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc… twisted 2023-10-25T21:15:00+00:00 2023-11-02T16:33:16.395026+00:00
pysec-2023-228
3.3 (3.1)
When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip p… pip 2023-10-25T18:17:00+00:00 2023-11-03T16:28:41.538340+00:00
ID Description Updated
ID Description Published Updated
mal-2026-1202 Malicious code in mvn-runtime (npm) 2026-03-03T06:48:16Z 2026-03-08T01:39:46Z
mal-2026-1209 Malicious code in tailwindcss-form-bundler (npm) 2026-03-03T06:47:36Z 2026-03-08T01:39:47Z
mal-2026-1188 Malicious code in alpha-replicator (npm) 2026-03-03T06:47:36Z 2026-03-08T01:39:42Z
mal-2026-1208 Malicious code in tailwindcss-fonts-bundler (npm) 2026-03-03T06:46:16Z 2026-03-08T01:39:47Z
mal-2026-1210 Malicious code in tailwindcss-forms-animation (npm) 2026-03-03T06:45:16Z 2026-03-08T01:39:47Z
mal-2026-1204 Malicious code in polygon-bitquery-api (npm) 2026-03-03T06:45:16Z 2026-03-08T01:39:46Z
mal-2026-1201 Malicious code in mongos-api (npm) 2026-03-03T06:45:16Z 2026-03-08T01:39:46Z
mal-2026-1200 Malicious code in mongoose-apis (npm) 2026-03-03T06:45:16Z 2026-03-08T01:39:46Z
mal-2026-1193 Malicious code in cloud-apis (npm) 2026-03-03T06:45:16Z 2026-03-08T01:39:43Z
mal-2026-1213 Malicious code in turbo-json-parser (npm) 2026-03-03T06:43:35Z 2026-03-08T01:39:48Z
mal-2026-1214 Malicious code in typescript-constructors (npm) 2026-03-03T06:42:40Z 2026-03-08T01:39:48Z
mal-2026-1212 Malicious code in tailwindcss-forms-componentes (npm) 2026-03-03T06:42:40Z 2026-03-08T01:39:47Z
mal-2026-1211 Malicious code in tailwindcss-forms-component (npm) 2026-03-03T06:42:40Z 2026-03-08T01:39:47Z
mal-2026-1190 Malicious code in bubblemap-bypass-sdk (npm) 2026-03-03T06:41:16Z 2026-03-08T01:39:43Z
mal-2026-1207 Malicious code in selfbot-lofy (npm) 2026-03-03T06:39:59Z 2026-03-08T01:39:47Z
mal-2026-1195 Malicious code in consolelofy (npm) 2026-03-03T06:39:59Z 2026-03-08T01:39:43Z
mal-2026-1189 Malicious code in bmath (npm) 2026-03-03T06:39:20Z 2026-03-08T01:39:43Z
mal-2026-1186 Malicious code in @powpegtest/powpeg (npm) 2026-03-03T06:38:24Z 2026-03-08T01:39:42Z
mal-2026-1197 Malicious code in demo-ip-package-cm (npm) 2026-03-03T06:38:05Z 2026-03-08T01:39:43Z
mal-2026-1196 Malicious code in demo-ip-package (npm) 2026-03-03T06:38:05Z 2026-03-08T01:39:43Z
mal-2026-1198 Malicious code in flycord (npm) 2026-03-03T06:36:43Z 2026-03-08T01:39:44Z
mal-2026-1199 Malicious code in fps-logger (npm) 2026-03-03T06:32:39Z 2026-03-08T01:39:44Z
mal-2026-1187 Malicious code in @twilio-client/twilio-client (npm) 2026-03-03T06:32:39Z 2026-03-08T01:39:42Z
mal-2026-1185 Malicious code in @bookings.microsoft.com/s (npm) 2026-03-03T06:32:39Z 2026-03-08T01:39:42Z
mal-2026-1183 Malicious code in rbxm-utils (npm) 2026-03-03T06:30:58Z 2026-03-08T01:39:47Z
mal-2026-1184 Malicious code in web-prompt (npm) 2026-03-03T06:18:43Z 2026-03-08T01:39:48Z
mal-2026-1182 Malicious code in bigmathutils-v2 (npm) 2026-03-03T06:16:03Z 2026-03-08T01:39:43Z
mal-2026-1181 Malicious code in webnochs (npm) 2026-03-03T05:29:56Z 2026-03-08T01:39:48Z
mal-2026-1180 Malicious code in webnoch (npm) 2026-03-03T05:29:56Z 2026-03-08T01:39:48Z
mal-2026-1175 Malicious code in ethersnog (npm) 2026-03-03T05:29:56Z 2026-03-08T01:39:44Z
ID Description Published Updated
wid-sec-w-2025-2334 Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen 2025-10-16T22:00:00.000+00:00 2025-11-02T23:00:00.000+00:00
wid-sec-w-2025-2327 binutils: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-16T22:00:00.000+00:00 2025-12-01T23:00:00.000+00:00
wid-sec-w-2025-2325 xpdf: Schwachstelle ermöglicht Denial of Service 2025-10-16T22:00:00.000+00:00 2025-12-16T23:00:00.000+00:00
wid-sec-w-2025-2322 Samba: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-10-19T22:00:00.000+00:00
wid-sec-w-2025-2317 Ubiquiti UniFi: Schwachstelle ermöglicht Ausführung von Debug-Funktionen 2025-10-15T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2315 Mattermost Server und Mobile: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2314 HCL BigFix: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2313 IBM App Connect Enterprise: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2312 Cisco Mehrere Produkte: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2311 Red Hat Enterprise Linux (libsoup3): Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-15T22:00:00.000+00:00 2026-03-02T23:00:00.000+00:00
wid-sec-w-2025-2310 F5 BIG-IP und F5OS: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2309 Cisco TelePresence: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2307 Microsoft Windows: Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2305 Ivanti Endpoint Manager (Admin Panel): Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2301 Red Hat Enterprise Linux: Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2026-02-23T23:00:00.000+00:00
wid-sec-w-2025-2298 Linux Kernel: Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2275 Mozilla Firefox: Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2025-10-29T23:00:00.000+00:00
wid-sec-w-2025-2274 Veeam Backup & Replication: Mehrere Schwachstellen 2025-10-13T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2272 Moodle: Mehrere Schwachstellen 2025-10-13T22:00:00.000+00:00 2025-10-23T22:00:00.000+00:00
wid-sec-w-2025-2269 WebKitGTK: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung 2025-10-13T22:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
wid-sec-w-2025-2268 Linux Kernel: Mehrere Schwachstellen 2025-10-13T22:00:00.000+00:00 2026-03-02T23:00:00.000+00:00
wid-sec-w-2025-2264 Ivanti Endpoint Manager: Mehrere Schwachstellen ermöglichen Codeausführung 2025-10-12T22:00:00.000+00:00 2025-10-13T22:00:00.000+00:00
wid-sec-w-2025-2249 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-09T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-2247 Nvidia GPU Display Treiber: Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2246 Linux Kernel: Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2242 Wireshark: Schwachstelle ermöglicht Denial of Service 2025-10-08T22:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2025-2241 binutils: Schwachstelle ermöglicht Denial of Service 2025-10-08T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2236 GitLab: Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2025-10-12T22:00:00.000+00:00
wid-sec-w-2025-2232 Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2025-10-08T22:00:00.000+00:00 2025-10-08T22:00:00.000+00:00
wid-sec-w-2025-2230 Python (CPython Zipfile Module): Schwachstelle ermöglicht Manipulation von Dateien 2025-10-07T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
ID Description Published Updated
icsa-25-189-01 Emerson ValveLink Products 2025-07-08T06:00:00.000000Z 2025-07-08T06:00:00.000000Z
icsa-25-203-06 Schneider Electric EcoStruxture IT Data Center Expert 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-203-05 Schneider Electric System Monitor Application 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-203-03 Schneider Electric EcoStruxure 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-294-04 Siemens RUGGEDCOM ROS Devices 2025-07-08T00:00:00.000000Z 2025-10-14T00:00:00.000000Z
icsa-25-191-06 Siemens SIPROTEC 5 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-05 Siemens TIA Project-Server and TIA Portal 2025-07-08T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-191-04 Siemens SIMATIC CN 4100 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-03 Siemens TIA Administrator 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-02 Siemens Solid Edge 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-01 Siemens SINEC NMS 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-184-04 Mitsubishi Electric MELSEC iQ-F Series 2025-07-03T06:00:00.000000Z 2025-07-03T06:00:00.000000Z
icsa-25-184-03 Mitsubishi Electric MELSOFT Update Manager (Update B) 2025-07-03T06:00:00.000000Z 2026-02-05T07:00:00.000000Z
icsa-25-184-02 Hitachi Energy MicroSCADA X SYS600 2025-07-03T06:00:00.000000Z 2025-07-03T06:00:00.000000Z
va-25-169-01 Versa Networks Versa Director multiple vulnerabilities 2025-07-02T20:57:00Z 2025-07-02T20:57:00Z
icsa-25-182-05 Voltronic Power and PowerShield UPS monitoring software 2025-07-01T06:00:00.000000Z 2025-07-01T06:00:00.000000Z
icsa-25-177-01 Mitsubishi Electric Air Conditioning Systems (Update B) 2025-06-26T06:00:00.000000Z 2025-12-23T07:00:00.000000Z
icsa-25-177-02 TrendMakers Sight Bulb Pro 2025-06-26T05:00:00.000000Z 2025-06-26T05:00:00.000000Z
icsa-25-182-07 Hitachi Energy MSM 2025-06-24T12:30:00.000000Z 2025-06-24T12:30:00.000000Z
icsa-25-182-06 Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A) 2025-06-24T12:30:00.000000Z 2025-08-26T10:00:00.000000Z
icsa-25-175-07 MICROSENS NMP Web+ 2025-06-24T06:00:00.000000Z 2025-06-24T06:00:00.000000Z
icsa-25-175-06 Parsons AccuWeather widget 2025-06-24T06:00:00.000000Z 2025-06-24T06:00:00.000000Z
icsa-25-175-05 ControlID iDSecure On-premises 2025-06-24T06:00:00.000000Z 2025-06-24T06:00:00.000000Z
icsa-25-175-02 Delta Electronics CNCSoft 2025-06-24T06:00:00.000000Z 2025-06-24T06:00:00.000000Z
icsa-25-175-01 Kaleris Navis N4 Terminal Operating System 2025-06-24T06:00:00.000000Z 2025-06-24T06:00:00.000000Z
icsa-25-184-01 Hitachi Energy Relion 670/650 and SAM600-IO Series 2025-06-24T00:00:00.000000Z 2026-02-05T07:00:00.000000Z
va-25-171-01 ClamAV 2025-06-20T00:00:00Z 2025-06-20T00:00:00Z
icsa-25-168-05 Dover Fueling Solutions ProGauge MagLink LX consoles 2025-06-17T06:00:00.000000Z 2025-06-17T06:00:00.000000Z
icsa-25-168-04 Fuji Electric Smart Editor 2025-06-17T06:00:00.000000Z 2025-06-17T06:00:00.000000Z
icsa-25-168-02 LS Electric GMWin 4 2025-06-17T06:00:00.000000Z 2025-06-17T06:00:00.000000Z
ID Description Published Updated
cisco-sa-nso-rwpesc-qrqgnh3f Cisco Crosswork Network Services Orchestrator Vulnerabilities 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-nso-ordir-mnm8yqzo Cisco Crosswork Network Services Orchestrator Open Redirect Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-nso-hcc-priv-esc-owbwcs5d Cisco Crosswork Network Services Orchestrator Privilege Escalation Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-esa-sma-wsa-xss-bgg5whod Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Cross-Site Scripting Vulnerabilities 2024-05-15T16:00:00+00:00 2024-06-12T15:37:50+00:00
cisco-sa-esa-http-split-glrnnows Cisco Secure Email Gateway HTTP Response Splitting Vulnerability 2024-05-15T16:00:00+00:00 2024-06-12T15:14:33+00:00
cisco-sa-cnfd-rwpesc-zaoufyx8 ConfD CLI Privilege Escalation and Arbitrary File Read and Write Vulnerabilities 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-appd-netvisdos-9znbsjtk Cisco AppDynamics Network Visibility Service Denial of Service Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-ipphone-multi-vulns-cxahcvs Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Vulnerabilities 2024-05-01T16:00:00+00:00 2024-05-01T16:00:00+00:00
cisco-sa-asaftd-websrvs-dos-x8gnucd2 Cisco Adaptive Security Appliance and Firepower Threat Defense Software Web Services Denial of Service Vulnerability 2024-04-24T16:00:00+00:00 2024-04-24T16:00:00+00:00
cisco-sa-asaftd-persist-rce-flsnxf4h Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability 2024-04-24T16:00:00+00:00 2024-04-24T16:00:00+00:00
cisco-sa-asaftd-cmd-inj-zjv8wysm Cisco Adaptive Security Appliance and Firepower Threat Defense Software Command Injection Vulnerability 2024-04-24T16:00:00+00:00 2026-03-04T16:10:59+00:00
cisco-sa-snmp-uwbxfqww Cisco IOS and IOS XE Software SNMP Extended Named Access Control List Bypass Vulnerability 2024-04-17T16:00:00+00:00 2024-04-17T16:00:00+00:00
cisco-sa-cimc-cmd-inj-mux4c5aj Cisco Integrated Management Controller CLI Command Injection Vulnerability 2024-04-17T16:00:00+00:00 2024-06-28T15:22:08+00:00
cisco-sa-cimc-cmd-inj-blupcb Cisco Integrated Management Controller Web-Based Management Interface Command Injection Vulnerability 2024-04-17T16:00:00+00:00 2024-06-28T15:22:37+00:00
cisco-sa-tms-xss-kgw4dx9y Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-sbiz-rv-xss-oqertup Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Cross-Site Scripting Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-ndru-pesc-kz2pqlzh Cisco Nexus Dashboard Privilege Escalation Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-ndo-upav-yrqsccsp Cisco Nexus Dashboard Orchestrator Unauthorized Policy Actions Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-ndidv-lmxdvaf2 Cisco Nexus Dashboard Information Disclosure Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-ndfccsrf-temzefj9 Cisco Nexus Dashboard and Nexus Dashboard Hosted Services Cross-Site Request Forgery Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-ndfc-dir-trav-ssn3aydw Cisco Nexus Dashboard Fabric Controller Plug and Play Arbitrary File Read Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-ise-ssrf-ftsth5oz Cisco Identity Services Engine Server-Side Request Forgery Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-ise-csrf-nfakxrp5 Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-ece-xss-csqxgxfm Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-cucm-imps-xss-quwkd9yf Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting Vulnerability 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-cem-csrf-sucmnjfr Cisco Emergency Responder Cross-Site Request Forgery and Directory Traversal Vulnerabilities 2024-04-03T16:00:00+00:00 2024-04-03T16:00:00+00:00
cisco-sa-wlc-mdns-dos-4hv6pbgf Cisco IOS XE Software for Wireless LAN Controllers Multicast DNS Denial of Service Vulnerability 2024-03-27T16:00:00+00:00 2024-03-27T16:00:00+00:00
cisco-sa-lisp-3gyxs3qp Cisco IOS and IOS XE Software Locator ID Separation Protocol Denial of Service Vulnerability 2024-03-27T16:00:00+00:00 2024-03-27T16:00:00+00:00
cisco-sa-isis-sgjyouhx Cisco IOS and IOS XE Software Intermediate System-to-Intermediate System Denial of Service Vulnerability 2024-03-27T16:00:00+00:00 2024-03-27T16:00:00+00:00
cisco-sa-iosxe-wlc-privesc-rjsmrmpk Cisco IOS XE Software for Wireless LAN Controllers Privilege Escalation Vulnerability 2024-03-27T16:00:00+00:00 2024-03-27T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-20840 Windows NTFS Remote Code Execution Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20839 Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20838 Windows Kernel Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20837 Windows Media Remote Code Execution Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20836 DirectX Graphics Kernel Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20835 Capability Access Management Service (camsvc) Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20834 Windows Spoofing Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20833 Windows Kerberos Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20832 Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20831 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20830 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-20T08:00:00.000Z
msrc_cve-2026-20829 TPM Trustlet Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20828 Windows rndismp6.sys Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20827 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20826 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20825 Windows Hyper-V Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20824 Windows Remote Assistance Security Feature Bypass Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20823 Windows File Explorer Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20822 Windows Graphics Component Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20821 Remote Procedure Call Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20820 Windows Common Log File System Driver Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20819 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20818 Windows Kernel Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-20T08:00:00.000Z
msrc_cve-2026-20817 Windows Error Reporting Service Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20816 Windows Installer Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20815 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20814 DirectX Graphics Kernel Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20812 LDAP Tampering Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20811 Win32k Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20810 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
ID Description Published Updated
ncsc-2025-0143 Kwetsbaarheden verholpen in Google Android en Samsung Mobile 2025-05-07T11:19:50.517092Z 2025-05-07T11:19:50.517092Z
ncsc-2025-0142 Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird 2025-05-06T08:01:05.582708Z 2025-05-06T08:01:05.582708Z
ncsc-2025-0141 Kwetsbaarheden verholpen in Keycloak 2025-05-06T07:12:42.075830Z 2025-05-06T07:12:42.075830Z
ncsc-2025-0140 Kwetsbaarheden verholpen in Apple AirPlay zoals gebruikt door macOS, iOS en iPadOS 2025-04-30T08:45:31.426155Z 2025-04-30T08:45:31.426155Z
ncsc-2025-0139 Kwetsbaarheid verholpen in SonicWall SonicOS 2025-04-25T09:35:24.276801Z 2025-04-25T09:35:24.276801Z
ncsc-2025-0138 Kwetsbaarheid verholpen in Commvault Command Center 2025-04-24T13:09:08.399556Z 2025-05-06T06:55:31.232567Z
ncsc-2025-0137 Kwetsbaarheid verholpen in Erlang/OTP SSH-server 2025-04-18T05:33:40.823978Z 2025-04-18T05:33:40.823978Z
ncsc-2025-0136 Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS 2025-04-17T07:19:14.228835Z 2025-04-17T07:19:14.228835Z
ncsc-2025-0135 Kwetsbaarheden verholpen in Siemens TeleControl Server 2025-04-17T07:14:24.584624Z 2025-04-17T07:14:24.584624Z
ncsc-2025-0134 Kwetsbaarheid verholpen in Cisco Webex App 2025-04-17T07:11:41.369333Z 2025-04-17T07:11:41.369333Z
ncsc-2025-0133 Kwetsbaarheden verholpen in Oracle PeopleSoft 2025-04-16T15:13:33.586832Z 2025-04-16T15:13:33.586832Z
ncsc-2025-0132 Kwetsbaarheden verholpen in Oracle MySQL 2025-04-16T15:11:43.357092Z 2025-04-16T15:11:43.357092Z
ncsc-2025-0131 Kwetsbaarheden verholpen in Oracle JD Edwards 2025-04-16T15:10:06.149204Z 2025-04-16T15:10:06.149204Z
ncsc-2025-0130 Kwetsbaarheden verholpen in Oracle Java 2025-04-16T15:04:40.041941Z 2025-04-16T15:04:40.041941Z
ncsc-2025-0129 Kwetsbaarheden verholpen in Oracle Analytics 2025-04-16T15:02:22.596981Z 2025-04-16T15:02:22.596981Z
ncsc-2025-0128 Kwetsbaarheden verholpen in Oracle Fusion Middleware 2025-04-16T15:01:24.587426Z 2025-04-16T15:01:24.587426Z
ncsc-2025-0127 Kwetsbaarheden verholpen in Oracle Financial Services 2025-04-16T15:00:12.952979Z 2025-04-16T15:00:12.952979Z
ncsc-2025-0126 Kwetsbaarheden verholpen in Oracle Enterprise Manager 2025-04-16T14:59:13.973935Z 2025-04-16T14:59:13.973935Z
ncsc-2025-0125 Kwetsbaarheden verholpen in Oracle E-Business Suite 2025-04-16T14:58:05.867499Z 2025-04-16T14:58:05.867499Z
ncsc-2025-0124 Kwetsbaarheden verholpen in Oracle Communications 2025-04-16T08:39:55.217751Z 2025-04-16T08:39:55.217751Z
ncsc-2025-0123 Kwetsbaarheden verholpen in Oracle Database Producten 2025-04-16T08:37:39.412900Z 2025-04-16T08:37:39.412900Z
ncsc-2025-0122 Kwetsbaarheden verholpen in Rockwell Automation Arena 2025-04-14T11:29:22.815190Z 2025-04-14T11:29:22.815190Z
ncsc-2025-0121 Kwetsbaarheid verholpen in Gladinet CentreStack 2025-04-10T11:53:42.018541Z 2025-04-10T11:53:42.018541Z
ncsc-2025-0120 Kwetsbaarheden verholpen in Ivanti Endpoint Manager 2025-04-09T14:41:41.327208Z 2025-04-09T14:41:41.327208Z
ncsc-2025-0119 Kwetsbaarheden verholpen in SAP-producten 2025-04-09T09:12:05.705017Z 2025-04-30T13:12:27.070565Z
ncsc-2025-0118 Kwetsbaarheden verholpen in Adobe Framemaker 2025-04-09T08:14:16.645915Z 2025-04-09T08:14:16.645915Z
ncsc-2025-0117 Kwetsbaarheden verholpen in Adobe Animate 2025-04-09T08:12:45.041685Z 2025-04-09T08:12:45.041685Z
ncsc-2025-0116 Kwetsbaarheid verholpen in Adobe Photoshop 2025-04-09T08:09:40.474635Z 2025-04-09T08:09:40.474635Z
ncsc-2025-0115 Kwetsbaarheden verholpen in Adobe ColdFusion 2025-04-09T08:08:15.866613Z 2025-04-09T08:08:15.866613Z
ncsc-2025-0114 Kwetsbaarheden verholpen in Adobe After Effects 2025-04-09T08:05:51.653949Z 2025-04-09T08:05:51.653949Z
ID Description Published Updated
opensuse-su-2026:10120-1 MozillaFirefox-147.0.2-1.1 on GA media 2026-01-30T00:00:00Z 2026-01-30T00:00:00Z
opensuse-su-2026:10119-1 ImageMagick-7.1.2.13-2.1 on GA media 2026-01-30T00:00:00Z 2026-01-30T00:00:00Z
opensuse-su-2026:20134-1 Security update for java-17-openjdk 2026-01-29T17:44:57Z 2026-01-29T17:44:57Z
opensuse-su-2026:20133-1 Security update for glibc 2026-01-29T17:44:57Z 2026-01-29T17:44:57Z
opensuse-su-2026:20137-1 Security update for openvpn 2026-01-29T16:14:38Z 2026-01-29T16:14:38Z
opensuse-su-2026:20136-1 Security update for gpg2 2026-01-29T16:14:38Z 2026-01-29T16:14:38Z
opensuse-su-2026:20132-1 Security update for elemental-register, elemental-toolkit 2026-01-29T15:32:26Z 2026-01-29T15:32:26Z
opensuse-su-2026:20127-1 Security update for python-urllib3 2026-01-29T14:48:50Z 2026-01-29T14:48:50Z
opensuse-su-2026:20131-1 Security update for postgresql17 and postgresql18 2026-01-29T13:21:20Z 2026-01-29T13:21:20Z
opensuse-su-2026:20130-1 Security update for postgresql16 2026-01-29T10:55:17Z 2026-01-29T10:55:17Z
opensuse-ru-2026:20129-1 Recommended update for cloud-init 2026-01-29T10:30:03Z 2026-01-29T10:30:03Z
opensuse-su-2026:10118-1 xen-4.21.0_04-1.1 on GA media 2026-01-29T00:00:00Z 2026-01-29T00:00:00Z
opensuse-su-2026:10117-1 python314-3.14.2-2.1 on GA media 2026-01-29T00:00:00Z 2026-01-29T00:00:00Z
opensuse-su-2026:10116-1 python311-pypdf-6.6.2-1.1 on GA media 2026-01-29T00:00:00Z 2026-01-29T00:00:00Z
opensuse-su-2026:10115-1 python311-djangorestframework-3.16.1-2.1 on GA media 2026-01-29T00:00:00Z 2026-01-29T00:00:00Z
opensuse-su-2026:10114-1 logback-1.2.13-2.1 on GA media 2026-01-29T00:00:00Z 2026-01-29T00:00:00Z
opensuse-su-2026:10113-1 icinga2-2.15.2-1.1 on GA media 2026-01-29T00:00:00Z 2026-01-29T00:00:00Z
opensuse-su-2026:10112-1 dirmngr-2.5.17-1.1 on GA media 2026-01-29T00:00:00Z 2026-01-29T00:00:00Z
opensuse-su-2026:10111-1 gio-branding-upstream-2.86.3-3.1 on GA media 2026-01-29T00:00:00Z 2026-01-29T00:00:00Z
opensuse-su-2026:20126-1 Security update for java-21-openjdk 2026-01-28T16:43:12Z 2026-01-28T16:43:12Z
opensuse-su-2026:20125-1 Security update for python-python-multipart 2026-01-28T16:07:51Z 2026-01-28T16:07:51Z
opensuse-su-2026:20124-1 Security update for ucode-amd 2026-01-28T16:01:59Z 2026-01-28T16:01:59Z
opensuse-su-2026:20122-1 Security update for python-h2 2026-01-28T15:52:29Z 2026-01-28T15:52:29Z
opensuse-su-2026:20123-1 Security update for xkbcomp 2026-01-28T15:47:30Z 2026-01-28T15:47:30Z
opensuse-su-2026:20120-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) 2026-01-28T10:27:58Z 2026-01-28T10:27:58Z
opensuse-su-2026:20119-1 Security update for python-FontTools 2026-01-28T09:58:53Z 2026-01-28T09:58:53Z
opensuse-su-2026:20118-1 Security update for ImageMagick 2026-01-28T08:27:48Z 2026-01-28T08:27:48Z
opensuse-su-2026:10110-1 python311-salt-3006.0-55.1 on GA media 2026-01-28T00:00:00Z 2026-01-28T00:00:00Z
opensuse-su-2026:10109-1 python311-sse-starlette-3.2.0-1.1 on GA media 2026-01-28T00:00:00Z 2026-01-28T00:00:00Z
opensuse-su-2026:10108-1 java-25-openjdk-25.0.2.0-1.1 on GA media 2026-01-28T00:00:00Z 2026-01-28T00:00:00Z
ID Description Published Updated
rhsa-2026:3354 Red Hat Security Advisory: python-pyasn1 security update 2026-02-25T13:16:46+00:00 2026-03-18T03:18:50+00:00
rhsa-2026:2978 Red Hat Security Advisory: OpenShift Container Platform 4.18.34 security and extras update 2026-02-25T13:07:00+00:00 2026-03-17T13:51:30+00:00
rhsa-2026:3340 Red Hat Security Advisory: skopeo security update 2026-02-25T12:16:20+00:00 2026-03-18T11:10:34+00:00
rhsa-2026:3341 Red Hat Security Advisory: containernetworking-plugins security update 2026-02-25T12:14:45+00:00 2026-03-18T11:10:34+00:00
rhsa-2026:3343 Red Hat Security Advisory: skopeo security update 2026-02-25T11:50:40+00:00 2026-03-18T11:10:34+00:00
rhsa-2026:3339 Red Hat Security Advisory: firefox security update 2026-02-25T11:48:30+00:00 2026-03-18T09:49:44+00:00
rhsa-2026:3337 Red Hat Security Advisory: podman security update 2026-02-25T11:48:26+00:00 2026-03-18T11:10:33+00:00
rhsa-2026:3338 Red Hat Security Advisory: firefox security update 2026-02-25T11:38:15+00:00 2026-03-18T09:49:44+00:00
rhsa-2026:3336 Red Hat Security Advisory: podman security update 2026-02-25T11:30:01+00:00 2026-03-18T11:10:33+00:00
rhsa-2026:3334 Red Hat Security Advisory: freerdp security update 2026-02-25T11:24:50+00:00 2026-03-18T03:18:51+00:00
rhsa-2026:3298 Red Hat Security Advisory: buildah security update 2026-02-25T09:32:15+00:00 2026-03-18T11:10:38+00:00
rhsa-2026:3297 Red Hat Security Advisory: buildah security update 2026-02-25T09:09:30+00:00 2026-03-18T11:10:33+00:00
rhsa-2026:3296 Red Hat Security Advisory: RHTAS - Tech Preview Release Of the Policy Controller Operator 2026-02-25T08:49:49+00:00 2026-03-18T11:26:40+00:00
rhsa-2026:3293 Red Hat Security Advisory: kernel security update 2026-02-25T08:08:24+00:00 2026-03-18T03:18:02+00:00
rhsa-2026:3291 Red Hat Security Advisory: runc security update 2026-02-25T07:41:04+00:00 2026-03-18T11:10:32+00:00
rhsa-2026:3289 Red Hat Security Advisory: opentelemetry-collector security update 2026-02-25T07:10:59+00:00 2026-03-18T11:10:31+00:00
rhsa-2026:3287 Red Hat Security Advisory: opentelemetry-collector security update 2026-02-25T07:05:39+00:00 2026-03-18T11:10:31+00:00
rhsa-2026:3288 Red Hat Security Advisory: opentelemetry-collector security update 2026-02-25T06:54:49+00:00 2026-03-18T11:10:31+00:00
rhsa-2026:3277 Red Hat Security Advisory: kernel security update 2026-02-25T04:10:15+00:00 2026-03-18T03:18:00+00:00
rhsa-2026:3275 Red Hat Security Advisory: kernel security update 2026-02-25T02:10:39+00:00 2026-03-18T03:18:52+00:00
rhsa-2026:3267 Red Hat Security Advisory: kernel security update 2026-02-25T00:28:18+00:00 2026-03-18T03:17:56+00:00
rhsa-2026:3268 Red Hat Security Advisory: kernel security update 2026-02-25T00:27:43+00:00 2026-03-18T03:18:00+00:00
rhsa-2026:3228 Red Hat Security Advisory: Cost Management Metrics Operator Update 2026-02-24T17:03:15+00:00 2026-03-18T03:19:51+00:00
rhsa-2026:3219 Red Hat Security Advisory: protobuf security update 2026-02-24T16:27:37+00:00 2026-03-18T03:18:45+00:00
rhsa-2026:3220 Red Hat Security Advisory: protobuf security update 2026-02-24T16:09:22+00:00 2026-03-18T03:18:38+00:00
rhsa-2026:3218 Red Hat Security Advisory: protobuf security update 2026-02-24T15:37:12+00:00 2026-03-18T03:18:45+00:00
rhsa-2026:3208 Red Hat Security Advisory: 389-ds-base security update 2026-02-24T13:53:17+00:00 2026-03-18T03:18:54+00:00
rhsa-2026:3192 Red Hat Security Advisory: golang security update 2026-02-24T12:06:46+00:00 2026-03-18T11:10:30+00:00
rhsa-2026:3193 Red Hat Security Advisory: golang security update 2026-02-24T12:01:01+00:00 2026-03-18T11:10:31+00:00
rhsa-2026:3189 Red Hat Security Advisory: 389-ds-base security update 2026-02-24T11:44:57+00:00 2026-03-18T03:18:54+00:00
ID Description Published Updated
ssa-240541 SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products 2023-09-12T00:00:00Z 2024-05-14T00:00:00Z
ssa-190839 SSA-190839: X_T File Parsing Vulnerabilities in Parasolid 2023-09-12T00:00:00Z 2023-09-12T00:00:00Z
ssa-147266 SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 2023-09-12T00:00:00Z 2023-09-12T00:00:00Z
ssa-975961 SSA-975961: Privilege Escalation Vulnerabilities in SICAM TOOLBOX II before V07.10 2023-08-08T00:00:00Z 2023-08-08T00:00:00Z
ssa-908185 SSA-908185: Mirror Port Isolation Vulnerability in RUGGEDCOM ROS Devices 2023-08-08T00:00:00Z 2025-08-12T00:00:00Z
ssa-811403 SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 2023-08-08T00:00:00Z 2023-08-08T00:00:00Z
ssa-770902 SSA-770902: Denial of Service Vulnerability in the Web Server of RUGGEDCOM ROS Devices 2023-08-08T00:00:00Z 2025-08-12T00:00:00Z
ssa-472630 SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 2023-08-08T00:00:00Z 2023-08-08T00:00:00Z
ssa-407785 SSA-407785: Multiple X_T File Parsing Vulnerabilities in Parasolid and Teamcenter Visualization 2023-08-08T00:00:00Z 2024-08-13T00:00:00Z
ssa-264815 SSA-264815: Type Confusion Vulnerability in OpenSSL X.400 Address Processing in SIMATIC Products 2023-08-08T00:00:00Z 2024-12-10T00:00:00Z
ssa-264814 SSA-264814: Timing Based Side Channel Vulnerability in the OpenSSL RSA Decryption in SIMATIC Products 2023-08-08T00:00:00Z 2024-12-10T00:00:00Z
ssa-188491 SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center 2023-08-08T00:00:00Z 2023-08-08T00:00:00Z
ssa-131450 SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization 2023-08-08T00:00:00Z 2023-08-08T00:00:00Z
ssa-116172 SSA-116172: Nullsoft Scriptable Install System (NSIS) Vulnerability (CVE-2023-37378) in Parasolid Installer 2023-08-08T00:00:00Z 2023-08-08T00:00:00Z
ssa-001569 SSA-001569: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid 2023-08-08T00:00:00Z 2023-08-08T00:00:00Z
ssa-924149 SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8 2023-07-11T00:00:00Z 2023-07-11T00:00:00Z
ssa-764801 SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation 2023-07-11T00:00:00Z 2023-09-12T00:00:00Z
ssa-561322 SSA-561322: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3.4 2023-07-11T00:00:00Z 2023-07-11T00:00:00Z
ssa-313488 SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 2023-07-11T00:00:00Z 2023-07-11T00:00:00Z
ssa-146325 SSA-146325: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16 2023-07-11T00:00:00Z 2023-07-11T00:00:00Z
ssa-975766 SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge 2023-06-13T00:00:00Z 2023-11-14T00:00:00Z
ssa-968170 SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products 2023-06-13T00:00:00Z 2024-05-14T00:00:00Z
ssa-942865 SSA-942865: Multiple Vulnerabilities in the Integrated SCALANCE S615 of SINAMICS Medium Voltage Products 2023-06-13T00:00:00Z 2023-06-14T00:00:00Z
ssa-914026 SSA-914026: Local Code Execution Vulnerability in SIMATIC WinCC V7 2023-06-13T00:00:00Z 2023-06-13T00:00:00Z
ssa-887249 SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices 2023-06-13T00:00:00Z 2023-06-13T00:00:00Z
ssa-831302 SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 2023-06-13T00:00:00Z 2024-04-09T00:00:00Z
ssa-794697 SSA-794697: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP before V1.1 2023-06-13T00:00:00Z 2024-04-09T00:00:00Z
ssa-731916 SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices 2023-06-13T00:00:00Z 2023-06-13T00:00:00Z
ssa-538795 SSA-538795: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go 2023-06-13T00:00:00Z 2023-06-13T00:00:00Z
ssa-508677 SSA-508677: Use of Obsolete Function Vulnerability in SIMATIC WinCC before V8 2023-06-13T00:00:00Z 2023-06-13T00:00:00Z
ID Description Published Updated
suse-su-2026:20372-1 Security update for libxml2 2026-02-16T08:19:48Z 2026-02-16T08:19:48Z
suse-su-2026:0551-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6) 2026-02-16T06:33:35Z 2026-02-16T06:33:35Z
suse-su-2026:0550-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6) 2026-02-16T05:33:34Z 2026-02-16T05:33:34Z
suse-su-2026:0548-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6) 2026-02-16T03:33:34Z 2026-02-16T03:33:34Z
suse-su-2026:0546-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) 2026-02-15T19:33:42Z 2026-02-15T19:33:42Z
suse-su-2026:0544-1 Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) 2026-02-15T18:03:51Z 2026-02-15T18:03:51Z
suse-su-2026:0543-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6) 2026-02-15T17:33:36Z 2026-02-15T17:33:36Z
suse-su-2026:0542-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) 2026-02-15T16:03:51Z 2026-02-15T16:03:51Z
suse-su-2026:0539-1 Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5) 2026-02-15T13:33:40Z 2026-02-15T13:33:40Z
suse-su-2026:0535-1 Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5) 2026-02-15T11:04:06Z 2026-02-15T11:04:06Z
suse-su-2026:20436-1 Security update for nodejs22 2026-02-15T08:45:21Z 2026-02-15T08:45:21Z
suse-su-2026:0528-1 Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) 2026-02-15T06:33:50Z 2026-02-15T06:33:50Z
suse-su-2026:0533-1 Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4) 2026-02-15T06:33:38Z 2026-02-15T06:33:38Z
suse-su-2026:20435-1 Security update for fontforge 2026-02-14T21:30:08Z 2026-02-14T21:30:08Z
suse-su-2026:0526-1 Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4) 2026-02-14T19:33:43Z 2026-02-14T19:33:43Z
suse-su-2026:0525-1 Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5) 2026-02-14T17:04:03Z 2026-02-14T17:04:03Z
suse-su-2026:0524-1 Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) 2026-02-14T17:03:57Z 2026-02-14T17:03:57Z
suse-su-2026:0521-1 Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5) 2026-02-14T12:03:47Z 2026-02-14T12:03:47Z
suse-su-2026:0518-1 Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5) 2026-02-14T09:03:51Z 2026-02-14T09:03:51Z
suse-su-2026:0517-1 Security update for protobuf 2026-02-14T08:25:01Z 2026-02-14T08:25:01Z
suse-su-2026:0515-1 Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5) 2026-02-13T23:04:09Z 2026-02-13T23:04:09Z
suse-su-2026:20434-1 Security update for openCryptoki 2026-02-13T17:44:22Z 2026-02-13T17:44:22Z
suse-su-2026:20345-1 Security update for openCryptoki 2026-02-13T17:42:31Z 2026-02-13T17:42:31Z
suse-su-2026:20352-1 Security update for protobuf 2026-02-13T16:56:15Z 2026-02-13T16:56:15Z
suse-su-2026:20350-1 Security update for expat 2026-02-13T16:46:23Z 2026-02-13T16:46:23Z
suse-su-2026:20431-1 Security update for patch 2026-02-13T16:41:48Z 2026-02-13T16:41:48Z
suse-su-2026:20343-1 Security update for patch 2026-02-13T16:41:48Z 2026-02-13T16:41:48Z
suse-su-2026:0514-1 Security update for cargo-auditable 2026-02-13T14:57:18Z 2026-02-13T14:57:18Z
suse-su-2026:0510-1 Security update for util-linux 2026-02-13T14:52:46Z 2026-02-13T14:52:46Z
suse-su-2026:0508-1 Security update for curl 2026-02-13T14:50:33Z 2026-02-13T14:50:33Z
ID Description Published Updated
alsa-2025:22063 Moderate: cups security update 2025-11-25T00:00:00Z 2025-11-28T13:48:35Z
alsa-2025:22012 Important: buildah security update 2025-11-25T00:00:00Z 2025-12-05T07:44:58Z
alsa-2025:22011 Important: buildah security update 2025-11-25T00:00:00Z 2025-11-25T12:06:57Z
alsa-2025:22005 Moderate: go-rpm-macros security update 2025-11-25T00:00:00Z 2025-11-25T10:51:18Z
alsa-2025:21977 Moderate: libssh security update 2025-11-24T00:00:00Z 2025-11-25T12:04:18Z
alsa-2025:21974 Important: mingw-expat security update 2025-11-24T00:00:00Z 2025-12-01T07:55:50Z
alsa-2025:21968 Important: gimp security update 2025-11-24T00:00:00Z 2025-12-01T07:58:09Z
alsa-2025:21936 Important: valkey security update 2025-11-24T00:00:00Z 2025-12-05T08:20:47Z
alsa-2025:21931 Moderate: kernel security update 2025-11-24T00:00:00Z 2025-12-05T08:40:44Z
alsa-2025:21926 Moderate: kernel security update 2025-11-24T00:00:00Z 2025-12-01T08:01:07Z
alsa-2025:21920 Moderate: kernel-rt security update 2025-11-24T00:00:00Z 2025-11-25T09:25:12Z
alsa-2025:21917 Moderate: kernel security update 2025-11-24T00:00:00Z 2025-11-25T09:27:51Z
alsa-2025:21916 Important: valkey security update 2025-11-24T00:00:00Z 2025-12-01T08:02:48Z
alsa-2025:21881 Important: thunderbird security update 2025-11-20T00:00:00Z 2025-11-25T09:29:54Z
alsa-2025:21843 Important: thunderbird security update 2025-11-20T00:00:00Z 2025-11-24T10:41:50Z
alsa-2025:21816 Moderate: delve and golang security update 2025-11-20T00:00:00Z 2025-11-24T12:49:17Z
alsa-2025:21815 Moderate: delve and golang security update 2025-11-20T00:00:00Z 2025-11-20T10:59:53Z
alsa-2025:21776 Important: expat security update 2025-11-19T00:00:00Z 2025-11-20T09:03:52Z
alsa-2025:21702 Important: podman security update 2025-11-18T00:00:00Z 2025-11-19T10:51:29Z
alsa-2025:21693 Important: haproxy security update 2025-11-18T00:00:00Z 2025-11-19T10:52:41Z
alsa-2025:21691 Important: haproxy security update 2025-11-18T00:00:00Z 2025-11-24T12:50:19Z
alsa-2025:21628 Critical: lasso security update 2025-11-17T00:00:00Z 2025-11-19T10:11:06Z
alsa-2025:21462 Critical: lasso security update 2025-11-17T00:00:00Z 2025-11-19T09:40:25Z
alsa-2025:21398 Moderate: kernel security update 2025-11-17T00:00:00Z 2025-11-19T14:49:27Z
alsa-2025:21397 Moderate: kernel-rt security update 2025-11-17T00:00:00Z 2025-11-19T14:52:45Z
alsa-2025:21281 Important: firefox security update 2025-11-13T00:00:00Z 2025-11-25T09:59:17Z
alsa-2025:21280 Important: firefox security update 2025-11-13T00:00:00Z 2025-11-24T12:36:14Z
alsa-2025:21255 Moderate: openssl security update 2025-11-13T00:00:00Z 2025-12-01T08:04:03Z
alsa-2025:21248 Moderate: openssl security update 2025-11-13T00:00:00Z 2025-11-25T09:31:36Z
alsa-2025:21232 Important: container-tools:rhel8 security update 2025-11-13T00:00:00Z 2025-11-20T10:07:52Z
ID Description Published Updated
osv-2024-1056 UNKNOWN WRITE in bfd_elf_get_str_section 2024-09-13T00:02:11.288214Z 2024-09-13T00:02:11.288549Z
osv-2024-1054 Bad-cast to Assimp::LogStream from invalid vptr 2024-09-13T00:00:21.771518Z 2024-09-13T00:00:21.772014Z
osv-2024-1053 Heap-buffer-overflow in gguf_get_tensor_offset 2024-09-13T00:00:16.432562Z 2025-01-10T05:05:50.790792Z
osv-2024-1045 UNKNOWN READ in glslang::TInfoSinkBase::location 2024-08-23T00:05:10.053074Z 2024-08-23T00:05:10.053507Z
osv-2024-1044 UNKNOWN READ in H5FL_reg_malloc 2024-08-22T00:03:34.815128Z 2024-08-22T00:03:34.815744Z
osv-2024-1043 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1 2024-08-21T00:14:12.263763Z 2024-08-21T14:20:12.835561Z
osv-2024-1042 UNKNOWN READ in chunk_free_object 2024-08-21T00:13:34.712386Z 2024-08-21T00:13:34.712770Z
osv-2024-1041 UNKNOWN READ in chunk_free_object 2024-08-21T00:11:49.349439Z 2024-08-21T00:11:49.350156Z
osv-2024-1036 UNKNOWN READ in chunk_free_object 2024-08-19T00:04:37.123473Z 2024-08-19T00:04:37.124078Z
osv-2024-1034 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf16be 2024-08-18T00:08:22.168066Z 2024-08-18T14:21:16.718581Z
osv-2024-1029 Stack-buffer-overflow in gf_hevc_parse_nalu_bs 2024-08-17T00:13:24.697197Z 2024-08-17T00:13:24.697938Z
osv-2024-1023 Use-of-uninitialized-value in pcpp::SomeIpLayer::parseSomeIpLayer 2024-08-16T00:17:01.984623Z 2025-12-22T14:18:12.391769Z
osv-2024-1010 UNKNOWN READ in H5SL_first 2024-08-16T00:16:31.692553Z 2025-08-14T14:39:40.358063Z
osv-2024-1009 Heap-buffer-overflow in pcpp::Layer::shortenLayer 2024-08-16T00:16:31.167287Z 2025-10-21T14:37:47.186948Z
osv-2024-996 Use-of-uninitialized-value in cups_array_find 2024-08-16T00:15:52.987192Z 2024-08-16T00:15:52.987525Z
osv-2024-994 Use-of-uninitialized-value in packet_parse 2024-08-16T00:15:48.093497Z 2024-08-16T00:15:48.093872Z
osv-2024-987 Heap-buffer-overflow in pcpp::NDPNeighborAdvertisementLayer::toString 2024-08-16T00:15:31.057826Z 2025-04-16T14:29:47.716122Z
osv-2024-985 Heap-double-free in libssh2_default_free 2024-08-16T00:15:23.884058Z 2024-08-16T00:15:23.884369Z
osv-2024-983 UNKNOWN READ in ireclaim 2024-08-16T00:15:21.362695Z 2024-08-16T00:15:21.363094Z
osv-2024-978 Stack-buffer-overflow in narrow_conv_backprop 2024-08-16T00:15:00.390591Z 2025-01-10T05:19:36.120081Z
osv-2024-969 Security exception in com.github.javaparser.GeneratedJavaParser.Expression 2024-08-16T00:14:31.527023Z 2024-08-16T00:14:31.527538Z
osv-2024-967 Heap-buffer-overflow in pcpp::byteArrayToHexString 2024-08-16T00:14:27.813459Z 2025-10-22T18:24:09.671012Z
osv-2024-965 Stack-buffer-overflow in FLAC__stream_encoder_init_ogg_file 2024-08-16T00:14:23.665242Z 2024-08-16T00:14:23.665768Z
osv-2024-964 Security exception in com.alibaba.fastjson2.JSONPathSegment$CycleNameSegment$MapLoop.accept 2024-08-16T00:14:15.405443Z 2024-08-16T00:14:15.405835Z
osv-2024-963 Heap-buffer-overflow in GfxTilingPattern::scanXObjectForBlendMode 2024-08-16T00:14:14.315705Z 2024-08-16T00:14:14.316160Z
osv-2024-957 Heap-buffer-overflow in pcpp::computeChecksum 2024-08-16T00:13:51.457458Z 2025-10-22T18:24:27.257255Z
osv-2024-955 Use-of-uninitialized-value in pcpp::IPv6Address::toString 2024-08-16T00:13:46.718533Z 2024-08-16T00:13:46.718830Z
osv-2024-954 Use-of-uninitialized-value in pcpp::MplsLayer::toString 2024-08-16T00:13:43.824630Z 2025-12-22T14:21:33.246456Z
osv-2024-953 UNKNOWN READ in pcpp::PcapNgFileReaderDevice::getNextPacket 2024-08-16T00:13:41.933683Z 2025-12-22T14:21:34.886075Z
osv-2024-951 Index-out-of-bounds in hevc_ref_pic_lists_modification 2024-08-16T00:13:38.322516Z 2024-08-16T00:13:38.322849Z
ID Description Published Updated
rustsec-2023-0061 libwebp: OOB write in BuildHuffmanTable 2023-09-12T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0060 libwebp: OOB write in BuildHuffmanTable 2023-09-12T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0059 Unaligned read of `*const *const c_char` pointer 2023-09-10T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0058 Exposes reference to non-Sync data to an arbitrary thread 2023-09-10T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0057 Fails to prohibit standard library access prior to initialization of Rust standard library runtime 2023-09-10T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0091 Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86\_64 2023-09-05T12:00:00Z 2025-05-02T08:23:27Z
rustsec-2023-0086 Multiple soundness issues 2023-09-03T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0055 Multiple soundness issues 2023-09-03T12:00:00Z 2024-09-16T14:15:37Z
rustsec-2023-0056 Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses 2023-09-01T12:00:00Z 2023-09-06T17:18:09Z
rustsec-2023-0053 rustls-webpki: CPU denial of service in certificate path building 2023-08-22T12:00:00Z 2023-08-27T15:52:52Z
rustsec-2023-0052 webpki: CPU denial of service in certificate path building 2023-08-22T12:00:00Z 2023-09-30T20:13:23Z
rustsec-2023-0054 Use-after-free in `vec_insert_bytes` 2023-08-07T12:00:00Z 2023-08-27T15:52:52Z
rustsec-2023-0049 `tui` is unmaintained; use `ratatui` instead 2023-08-07T12:00:00Z 2023-08-07T13:27:47Z
rustsec-2023-0095 Invalid Slice Split Results in Server Panic 2023-08-03T12:00:00Z 2025-12-22T18:53:25Z
rustsec-2023-0051 `dlopen_derive` is unmaintained 2023-07-30T12:00:00Z 2023-08-19T10:29:52Z
rustsec-2023-0048 Unsoundness in `intern` methods on `intaglio` symbol interners 2023-07-26T12:00:00Z 2023-07-29T17:20:00Z
rustsec-2023-0089 atomic-polyfill is unmaintained 2023-07-11T12:00:00Z 2025-04-29T08:31:10Z
rustsec-2023-0047 impl `FromMdbValue` for bool is unsound 2023-06-26T12:00:00Z 2023-07-29T17:20:00Z
rustsec-2023-0045 memoffset allows reading uninitialized memory 2023-06-21T12:00:00Z 2023-07-08T12:30:19Z
rustsec-2023-0044 `openssl` `X509VerifyParamRef::set_host` buffer over-read 2023-06-20T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0046 Misaligned pointer dereference in `ChunkId::new` 2023-06-15T12:00:00Z 2023-07-08T12:30:19Z
rustsec-2023-0042 Ouroboros is Unsound 2023-06-11T12:00:00Z 2023-07-08T12:30:19Z
rustsec-2023-0041 Remote Attackers can cause Denial-of-Service (packet loops) with crafted DNS packets 2023-06-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0040 `users` crate is unmaintained 2023-06-01T12:00:00Z 2023-08-21T10:35:45Z
rustsec-2023-0039 Out-of-bounds array access leads to panic 2023-05-16T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0038 Out-of-bounds array access leads to panic 2023-05-16T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0037 crate has been renamed to `crypto_secretbox` 2023-05-16T12:00:00Z 2023-05-17T03:02:51Z
rustsec-2023-0066 Vulnerable to privilege escalation using ioctls TIOCSTI and TIOCLINUX 2023-04-29T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0092 Undefined Behavior in Rust runtime functions 2023-04-21T12:00:00Z 2025-05-02T08:23:27Z
rustsec-2023-0035 Adverserial use of `make_bitflags!` macro can cause undefined behavior 2023-04-17T12:00:00Z 2023-06-13T13:10:24Z
ID Description Published Updated
bit-kibana-2025-68385 Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 2025-12-20T11:39:21.164Z 2025-12-24T12:08:49.467Z
bit-haproxy-2025-11230 Denial of service vulnerability in HAProxy mjson library 2025-12-20T11:38:08.173Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68422 Kibana Improper Authorization 2025-12-20T11:36:41.895Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68389 Kibana Allocation of Resources Without Limits or Throttling 2025-12-20T11:36:40.368Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68387 Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 2025-12-20T11:36:38.841Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68386 Kibana Improper Authorization 2025-12-20T11:36:37.419Z 2025-12-20T12:06:39.262Z
bit-elk-2025-68385 Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 2025-12-20T11:36:36.041Z 2025-12-24T12:08:49.467Z
bit-elasticsearch-2025-68390 Elasticsearch Allocation of Resources Without Limits or Throttling 2025-12-20T11:36:36.080Z 2025-12-20T12:06:39.262Z
bit-elasticsearch-2025-68384 Elasticsearch Allocation of Resources Without Limits or Throttling 2025-12-20T11:36:34.496Z 2025-12-20T12:06:39.262Z
bit-mongodb-2025-14847 Zlib compressed protocol header length confusion may allow memory read 2025-12-19T11:15:49.277Z 2025-12-30T00:15:51.160Z
bit-gitlab-2025-8405 Improper Encoding or Escaping of Output in GitLab 2025-12-18T12:06:48.009Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-4097 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-18T12:05:44.981Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-14157 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-18T12:04:46.334Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-13978 Generation of Error Message Containing Sensitive Information in GitLab 2025-12-18T12:04:44.454Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-12734 Improper Encoding or Escaping of Output in GitLab 2025-12-18T12:04:35.112Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-12716 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-12-18T12:04:33.134Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-12562 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-18T12:04:25.675Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-12029 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-12-18T12:04:20.332Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-11984 Authentication Bypass Using an Alternate Path or Channel in GitLab 2025-12-18T12:04:14.698Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-11247 Authorization Bypass Through User-Controlled Key in GitLab 2025-12-18T12:03:59.823Z 2025-12-18T12:08:20.703Z
bit-parse-2025-68150 Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter 2025-12-18T11:46:18.950Z 2026-01-08T18:07:34.629Z
bit-parse-2025-68115 Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables 2025-12-18T11:46:17.211Z 2026-01-08T18:07:34.629Z
bit-parse-2025-67727 Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management 2025-12-18T11:46:15.637Z 2026-01-08T18:07:34.629Z
bit-kibana-2025-37732 Kibana Cross-site Scripting via the Integration Package Upload Functionality 2025-12-18T11:40:39.003Z 2025-12-18T12:08:20.703Z
bit-elk-2025-37732 Kibana Cross-site Scripting via the Integration Package Upload Functionality 2025-12-18T11:37:43.350Z 2025-12-18T12:08:20.703Z
bit-elasticsearch-2025-37731 Elasticsearch Improper Authentication 2025-12-18T11:37:43.121Z 2025-12-19T12:06:33.755Z
bit-airflow-2025-66388 Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI 2025-12-16T14:37:51.384Z 2025-12-16T15:14:22.118Z
bit-mongodb-2025-12657 Malformed KMIP response may result in access violation 2025-12-13T11:42:23.275Z 2025-12-13T12:05:53.698Z
bit-django-2025-13372 Potential SQL injection in FilteredRelation column aliases on PostgreSQL 2025-12-13T11:36:31.883Z 2025-12-13T12:05:53.698Z
bit-mongodb-2025-14345 Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server 2025-12-12T17:42:48.437Z 2025-12-12T18:06:16.411Z
ID Description Published Updated
cleanstart-2026-ia26094 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:51:22.634752Z 2026-01-29T18:58:54Z
cleanstart-2026-cb20757 Cancelling a query (e 2026-01-30T14:51:22.636956Z 2026-01-29T18:58:54Z
cleanstart-2026-do68350 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:50:22.886394Z 2026-01-29T18:58:54Z
cleanstart-2026-xo66167 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:49:52.662006Z 2026-01-29T18:58:54Z
cleanstart-2026-ph90623 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:49:52.682724Z 2026-01-29T18:58:54Z
cleanstart-2026-mi26039 Within HostnameError 2026-01-30T14:49:22.768843Z 2026-01-29T18:58:54Z
cleanstart-2026-gn47077 Within HostnameError 2026-01-30T14:48:53.159123Z 2026-01-29T18:58:54Z
cleanstart-2026-uu20906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:48:52.774829Z 2026-01-29T18:58:54Z
cleanstart-2026-kc01126 tar 2026-01-30T14:48:22.721160Z 2026-01-29T18:58:54Z
cleanstart-2026-oo14630 tar 2026-01-30T14:47:23.043882Z 2026-01-29T18:58:54Z
cleanstart-2026-hy43775 Within HostnameError 2026-01-30T14:46:52.607713Z 2026-01-29T18:58:54Z
cleanstart-2026-uy85485 Within HostnameError 2026-01-30T14:45:52.628542Z 2026-01-29T18:58:54Z
cleanstart-2026-ol25917 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:44:22.881508Z 2026-01-29T18:58:54Z
cleanstart-2026-rb28539 Within HostnameError 2026-01-30T14:43:52.571458Z 2026-01-29T18:58:54Z
cleanstart-2026-bx37171 Redis is an open source, in-memory database that persists on disk 2026-01-30T14:43:22.549529Z 2026-01-29T18:58:54Z
cleanstart-2026-gv62494 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:41:53.003431Z 2026-01-29T18:58:54Z
cleanstart-2026-kz63902 tar 2026-01-30T14:41:22.559595Z 2026-01-29T18:58:54Z
cleanstart-2026-di05920 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:41:22.824254Z 2026-01-29T18:58:54Z
cleanstart-2026-fz95989 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:40:52.734894Z 2026-01-29T18:58:54Z
cleanstart-2026-la33013 Within HostnameError 2026-01-30T14:40:22.526589Z 2026-01-29T18:58:54Z
cleanstart-2026-mz27698 Redis is an open source, in-memory database that persists on disk 2026-01-30T14:39:52.940858Z 2026-01-29T18:58:54Z
cleanstart-2026-jm36781 Within HostnameError 2026-01-30T14:37:22.513933Z 2026-01-29T18:58:54Z
cleanstart-2026-fr00621 Redis is an open source, in-memory database that persists on disk 2026-01-30T14:36:52.496829Z 2026-01-29T18:58:54Z
cleanstart-2026-dl37890 Redis is an open source, in-memory database that persists on disk 2026-01-30T14:36:22.812571Z 2026-01-29T18:58:54Z
cleanstart-2026-pk92575 ParseAddress function constructs domain-literal address components through repeated string concatenation 2026-01-30T14:35:52.456913Z 2026-01-29T18:58:54Z
cleanstart-2026-gs30434 Within HostnameError 2026-01-30T14:35:22.588418Z 2026-01-29T18:58:54Z
cleanstart-2026-ym75307 Redis is an open source, in-memory database that persists on disk 2026-01-30T14:34:22.430652Z 2026-01-29T18:58:54Z
cleanstart-2026-di78859 Redis is an open source, in-memory database that persists on disk 2026-01-30T14:24:51.733190Z 2026-01-29T18:58:54Z
cleanstart-2026-ng71279 Redis is an open source, in-memory database that persists on disk 2026-01-30T14:23:51.400746Z 2026-01-29T18:58:54Z
cleanstart-2026-ez98723 Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ... 2026-01-30T14:21:51.714006Z 2026-01-29T18:58:54Z
ID Description Updated
ID Description Published Updated
CERTFR-2014-ALE-011 Vulnérabilité de l'implémentation Kerberos dans Microsoft Windows 2014-11-18T00:00:00.000000 2015-01-30T00:00:00.000000
certfr-2014-ale-010 Vulnérabilité de l'implémentation des protocoles SSL/TLS dans Microsoft Windows 2014-11-11T00:00:00.000000 2015-01-30T00:00:00.000000
CERTFR-2014-ALE-010 Vulnérabilité de l'implémentation des protocoles SSL/TLS dans Microsoft Windows 2014-11-11T00:00:00.000000 2015-01-30T00:00:00.000000
certfr-2014-ale-009 Vulnérabilité dans Microsoft OLE 2014-10-22T00:00:00.000000 2014-11-12T00:00:00.000000
CERTFR-2014-ALE-009 Vulnérabilité dans Microsoft OLE 2014-10-22T00:00:00.000000 2014-11-12T00:00:00.000000
certfr-2014-ale-008 Vulnérabilité dans Drupal 2014-10-16T00:00:00.000000 2015-01-30T00:00:00.000000
CERTFR-2014-ALE-008 Vulnérabilité dans Drupal 2014-10-16T00:00:00.000000 2015-01-30T00:00:00.000000
certfr-2014-ale-007 Vulnérabilité dans SSLv3 2014-10-15T00:00:00.000000 2014-10-15T00:00:00.000000
CERTFR-2014-ALE-007 Vulnérabilité dans SSLv3 2014-10-15T00:00:00.000000 2014-10-15T00:00:00.000000
certfr-2014-ale-006 Vulnérabilité dans GNU bash 2014-09-25T00:00:00.000000 2014-09-30T00:00:00.000000
CERTFR-2014-ALE-006 Vulnérabilité dans GNU bash 2014-09-25T00:00:00.000000 2014-09-30T00:00:00.000000
certfr-2014-ale-005 Vulnérabilité dans Microsoft Internet Explorer 2014-04-28T00:00:00.000000 2014-05-02T00:00:00.000000
CERTFR-2014-ALE-005 Vulnérabilité dans Microsoft Internet Explorer 2014-04-28T00:00:00.000000 2014-05-02T00:00:00.000000
certfr-2014-ale-004 Vulnérabilité dans Apache Struts 2014-04-25T00:00:00.000000 2014-04-29T00:00:00.000000
CERTFR-2014-ALE-004 Vulnérabilité dans Apache Struts 2014-04-25T00:00:00.000000 2014-04-29T00:00:00.000000
certfr-2014-ale-003 Vulnérabilité dans OpenSSL 2014-04-08T00:00:00.000000 2014-07-30T00:00:00.000000
CERTFR-2014-ALE-003 Vulnérabilité dans OpenSSL 2014-04-08T00:00:00.000000 2014-07-30T00:00:00.000000
certfr-2014-ale-002 Vulnérabilité dans Microsoft Word 2014-03-25T00:00:00.000000 2014-04-09T00:00:00.000000
CERTFR-2014-ALE-002 Vulnérabilité dans Microsoft Word 2014-03-25T00:00:00.000000 2014-04-09T00:00:00.000000
certfr-2014-ale-001 Vulnérabilité dans Microsoft Internet Explorer 2014-02-21T00:00:00.000000 2014-03-12T00:00:00.000000
CERTFR-2014-ALE-001 Vulnérabilité dans Microsoft Internet Explorer 2014-02-21T00:00:00.000000 2014-03-12T00:00:00.000000
certa-2013-ale-008 Vulnérabilité critique dans le noyau de Microsoft Windows 2013-11-28T00:00:00.000000 2014-01-16T00:00:00.000000
CERTA-2013-ALE-008 Vulnérabilité critique dans le noyau de Microsoft Windows 2013-11-28T00:00:00.000000 2014-01-16T00:00:00.000000
certa-2013-ale-007 Vulnérabilité dans un composant graphique de Microsoft 2013-11-06T00:00:00.000000 2013-12-10T00:00:00.000000
CERTA-2013-ALE-007 Vulnérabilité dans un composant graphique de Microsoft 2013-11-06T00:00:00.000000 2013-12-10T00:00:00.000000
certa-2013-ale-006 Vulnérabilité dans Microsoft Internet Explorer 2013-09-18T00:00:00.000000 2013-10-09T00:00:00.000000
CERTA-2013-ALE-006 Vulnérabilité dans Microsoft Internet Explorer 2013-09-18T00:00:00.000000 2013-10-09T00:00:00.000000
certa-2013-ale-005 Vulnérabilité dans le noyau Linux 2013-05-14T00:00:00.000000 2013-05-24T00:00:00.000000
CERTA-2013-ALE-005 Vulnérabilité dans le noyau Linux 2013-05-14T00:00:00.000000 2013-05-24T00:00:00.000000
certa-2013-ale-004 Vulnérabilité dans Adobe ColdFusion 2013-05-10T00:00:00.000000 2013-05-15T00:00:00.000000
ID Description Published Updated
certfr-2026-avi-0059 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
certfr-2026-avi-0058 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
certfr-2026-avi-0057 Multiples vulnérabilités dans le noyau Linux de Debian LTS 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
certfr-2026-avi-0056 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
certfr-2026-avi-0055 Multiples vulnérabilités dans GLPI 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
certfr-2026-avi-0054 Multiples vulnérabilités dans Centreon Infra Monitoring 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
certfr-2026-avi-0053 Vulnérabilité dans Traefik 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
certfr-2026-avi-0052 Multiples vulnérabilités dans Mattermost Server 2026-01-16T00:00:00.000000 2026-03-17T00:00:00.000000
CERTFR-2026-AVI-0061 Multiples vulnérabilités dans les produits IBM 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0060 Vulnérabilité dans Apache Struts 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0059 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0058 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0057 Multiples vulnérabilités dans le noyau Linux de Debian LTS 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0056 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0055 Multiples vulnérabilités dans GLPI 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0054 Multiples vulnérabilités dans Centreon Infra Monitoring 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0053 Vulnérabilité dans Traefik 2026-01-16T00:00:00.000000 2026-01-16T00:00:00.000000
CERTFR-2026-AVI-0052 Multiples vulnérabilités dans Mattermost Server 2026-01-16T00:00:00.000000 2026-03-17T00:00:00.000000
certfr-2026-avi-0051 Multiples vulnérabilités dans les produits Mozilla 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
certfr-2026-avi-0050 Multiples vulnérabilités dans les produits Juniper Networks 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
certfr-2026-avi-0049 Multiples vulnérabilités dans les produits Palo Alto Networks 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
certfr-2026-avi-0048 Multiples vulnérabilités dans Wireshark 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
certfr-2026-avi-0047 Vulnérabilité dans F5 NGINX Ingress Controller 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
CERTFR-2026-AVI-0051 Multiples vulnérabilités dans les produits Mozilla 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
CERTFR-2026-AVI-0050 Multiples vulnérabilités dans les produits Juniper Networks 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
CERTFR-2026-AVI-0049 Multiples vulnérabilités dans les produits Palo Alto Networks 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
CERTFR-2026-AVI-0048 Multiples vulnérabilités dans Wireshark 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
CERTFR-2026-AVI-0047 Vulnérabilité dans F5 NGINX Ingress Controller 2026-01-15T00:00:00.000000 2026-01-15T00:00:00.000000
certfr-2026-avi-0046 Multiples vulnérabilités dans les produits Microsoft 2026-01-14T00:00:00.000000 2026-01-14T00:00:00.000000
certfr-2026-avi-0045 Multiples vulnérabilités dans Microsoft Azure 2026-01-14T00:00:00.000000 2026-01-14T00:00:00.000000
ID Description Published Updated
jvndb-2024-000056 awkblog vulnerable to OS command injection 2024-05-30T14:39+09:00 2024-05-30T14:39+09:00
jvndb-2024-000055 Redmine DMSF Plugin vulnerable to path traversal 2024-05-29T14:13+09:00 2024-05-29T14:13+09:00
jvndb-2024-000054 EC-Orange vulnerable to authorization bypass 2024-05-29T14:06+09:00 2024-05-29T14:06+09:00
jvndb-2024-003249 ELECOM wireless LAN routers vulnerable to OS command injection 2024-05-29T12:33+09:00 2024-05-29T12:33+09:00
jvndb-2024-000053 Multiple vulnerabilities in Unifier and Unifier Cast 2024-05-28T14:47+09:00 2024-05-28T14:47+09:00
jvndb-2024-000052 Multiple vulnerabilities in UTAU 2024-05-28T14:23+09:00 2024-05-28T14:23+09:00
jvndb-2024-003242 OMRON NJ/NX series vulnerable to insufficient verification of data authenticity 2024-05-28T12:28+09:00 2024-07-26T16:27+09:00
jvndb-2024-000051 Splunk Config Explorer vulnerable to cross-site scripting 2024-05-24T13:50+09:00 2024-05-24T13:50+09:00
jvndb-2024-000050 WordPress Plugin "WP Booking" vulnerable to cross-site scripting 2024-05-24T13:41+09:00 2024-05-24T13:41+09:00
jvndb-2024-000046 Android App "TP-Link Tether" and "TP-Link Tapo" vulnerable to improper server certificate verification 2024-05-21T13:33+09:00 2024-05-21T13:33+09:00
jvndb-2024-003188 Panasonic KW Watcher vulnerable to memory buffer error 2024-05-17T15:46+09:00 2024-05-17T15:46+09:00
jvndb-2023-021762 Ruijie BCR810W/BCR860 vulnerable to OS command injection 2024-05-17T13:54+09:00 2024-05-17T13:54+09:00
jvndb-2024-000049 WordPress Plugin "Download Plugins and Themes from Dashboard" vulnerable to path traversal 2024-05-17T13:33+09:00 2024-05-17T13:33+09:00
jvndb-2024-003187 Multiple vulnerabilities in Field Logic DataCube 2024-05-17T12:05+09:00 2024-05-17T12:05+09:00
jvndb-2024-002342 Central Dogma vulnerable to cross-site scripting 2024-05-13T17:27+09:00 2024-05-13T17:27+09:00
jvndb-2024-000047 Multiple vulnerabilities in Cybozu Garoon 2024-05-13T15:19+09:00 2024-05-13T15:19+09:00
jvndb-2024-000045 "OfferBox" App uses a hard-coded secret key 2024-05-10T15:11+09:00 2024-05-10T15:11+09:00
jvndb-2024-003181 Hidden Functionality vulnerability in DT900 2024-05-10T13:59+09:00 2024-05-10T13:59+09:00
jvndb-2024-000048 Phormer vulnerable to cross-site scripting 2024-05-10T13:48+09:00 2024-05-10T13:48+09:00
jvndb-2024-000043 Multiple vulnerabilities in MosP kintai kanri 2024-05-09T14:10+09:00 2024-05-09T14:10+09:00
jvndb-2024-000044 WordPress Plugin "Heateor Social Login WordPress" vulnerable to cross-site scripting 2024-05-08T13:43+09:00 2024-05-08T13:43+09:00
jvndb-2024-003178 Trend Micro Maximum Security vulnerable to improper link resolution (CVE-2024-32849) 2024-05-08T10:19+09:00 2024-05-08T10:19+09:00
jvndb-2024-003119 NETGEAR routers vulnerable to buffer overflow 2024-04-25T11:21+09:00 2024-04-25T11:21+09:00
jvndb-2024-000042 Multiple vulnerabilities in RoamWiFi R10 2024-04-24T13:44+09:00 2024-04-24T13:44+09:00
jvndb-2024-003116 Multiple vulnerabilities in OMRON Sysmac Studio/CX-One and CX-Programmer 2024-04-24T10:13+09:00 2024-04-24T10:13+09:00
jvndb-2024-000901 TvRock vulnerable to cross-site request forgery 2024-04-23T18:22+09:00 2024-04-23T18:22+09:00
jvndb-2024-000903 TvRock vulnerable to denial-of-service (DoS) 2024-04-23T18:21+09:00 2024-04-23T18:21+09:00
jvndb-2024-003108 Armeria-saml improperly handles SAML messages 2024-04-22T17:28+09:00 2024-04-22T17:28+09:00
jvndb-2023-014491 LINE client for iOS vulnerable to improper server certificate verification 2024-04-22T15:27+09:00 2024-04-22T15:27+09:00
jvndb-2024-000041 Multiple vulnerabilities in WordPress Plugin "Forminator" 2024-04-18T13:53+09:00 2024-04-18T13:53+09:00
ID Description Published Updated
cnvd-2026-08433 iccDEV未定义行为漏洞 2026-01-19 2026-01-27
cnvd-2026-08432 iccDEV内存泄漏漏洞 2026-01-19 2026-01-27
cnvd-2026-08431 iccDEV CIccXmlArrayType::ParseTextCountNum函数整数溢出漏洞 2026-01-19 2026-01-27
cnvd-2026-08430 iccDEV CIccXform::Create函数释放后重用漏洞 2026-01-19 2026-01-27
cnvd-2026-08429 iccDEV Unicode缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08428 iccDEV CIccTagText::Read函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08427 iccDEV CIccTagLut8::Validate函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08426 iccDEV CIccTagLut16::Validate函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08425 iccDEV CIccSparseMatrix::CIccSparseMatrix函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08424 iccDEV CIccProfile::LoadTag函数输入验证不当漏洞 2026-01-19 2026-01-26
cnvd-2026-08423 iccDEV CIccMBB::Validate函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08422 iccDEV CIccCalculatorFunc::SequenceNeedTempReset函数越界读取漏洞 2026-01-19 2026-01-26
cnvd-2026-08421 iccDEV ICC颜色配置文件未定义行为漏洞 2026-01-19 2026-01-26
cnvd-2026-08420 iccDEV计算器解析器堆栈缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08419 iccDEV CIccProfileXml::ParseBasic函数空指针取消引用漏洞 2026-01-19 2026-01-26
cnvd-2026-07954 iccDEV拒绝服务漏洞 2026-01-19 2026-01-27
cnvd-2026-07953 iccDEV空指针成员调用漏洞 2026-01-19 2026-01-27
cnvd-2026-07952 iccDEV未知标签解析器空指针取消引用漏洞 2026-01-19 2026-01-26
cnvd-2026-07951 iccDEV ICC色彩配置文件空指针取消引用漏洞 2026-01-19 2026-01-26
cnvd-2026-07950 iccDEV数字错误漏洞 2026-01-19 2026-01-26
cnvd-2026-07949 iccDEV CIccTagLutAtoB::Validate函数未定义行为漏洞 2026-01-19 2026-01-26
cnvd-2026-07948 iccDEV CIccTagLut16::Read函数未定义行为漏洞 2026-01-19 2026-01-26
cnvd-2026-07947 iccDEV XML计算器宏扩展堆栈缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-07946 iccDEV XML标签解析器空指针引用漏洞 2026-01-19 2026-01-26
cnvd-2026-07945 iccDEV CIccTagSpectralViewingConditions函数未定义行为漏洞 2026-01-19 2026-01-26
cnvd-2026-07944 iccDEV签名解析器空指针引用漏洞 2026-01-19 2026-01-26
cnvd-2026-07943 iccDEV无效枚举值漏洞 2026-01-19 2026-01-26
cnvd-2026-07942 iccDEV XML计算器解析器空指针取消引用漏洞 2026-01-19 2026-01-26
cnvd-2026-07941 iccDEV CIccTagCurve::CIccTagCurve函数未定义行为漏洞 2026-01-19 2026-01-26
cnvd-2026-07940 iccDEV CIccTagSparseMatrixArray空指针引用漏洞 2026-01-19 2026-01-26
ID Description Published Updated
bdu:2026-01334 Уязвимость функции __drm_gem_fb_end_cpu_access() модуля drivers/gpu/drm/drm_gem_framebuff… 06.02.2026 06.02.2026
bdu:2026-01333 Уязвимость функции drm_gem_prime_handle_to_dmabuf() модуля drivers/gpu/drm/drm_prime.c др… 06.02.2026 06.02.2026
bdu:2026-01332 Уязвимость функции ses_enclosure_data_process() модуля drivers/scsi/ses.c драйвера устрой… 06.02.2026 06.02.2026
bdu:2026-01331 Уязвимость функции ses_enclosure_data_process() модуля drivers/scsi/ses.c драйвера устрой… 06.02.2026 06.02.2026
bdu:2026-01330 Уязвимость функции __netpoll_setup() ядра операционной системы Linux, позволяющая нарушит… 06.02.2026 06.02.2026
bdu:2026-01329 Уязвимость функции fpu_vstl() ядра операционной системы Linux, позволяющая нарушителю выз… 06.02.2026 06.02.2026
bdu:2026-01328 Уязвимость функции tuning_ctl_set() модуля sound/pci/hda/patch_ca0132.c звуковой подсисте… 06.02.2026 06.02.2026
bdu:2026-01327 Уязвимость функции flush_cache_all_local() модуля arch/parisc/include/asm/cacheflush.h по… 06.02.2026 06.02.2026
bdu:2026-01326 Уязвимость функции sddr55_write_data() модуля drivers/usb/storage/sddr55.c драйвера устро… 06.02.2026 06.02.2026
bdu:2026-01325 Уязвимость функции iommu_mmio_write() ядра операционной системы Linux, позволяющая наруши… 06.02.2026 06.02.2026
bdu:2026-01324 Уязвимость функции rxstate() ядра операционной системы Linux, позволяющая нарушителю полу… 06.02.2026 06.02.2026
bdu:2026-01323 Уязвимость функции handle_auth_session_key() модуля net/ceph/auth_x.c реализации сетевых … 06.02.2026 06.02.2026
bdu:2026-01322 Уязвимость функции udp_tunnel_nic_netdevice_event() модуля net/ipv4/udp_tunnel_nic.c реал… 06.02.2026 06.02.2026
bdu:2026-01321 Уязвимость функции true_sectors_per_clst() ядра операционной системы Linux, позволяющая н… 06.02.2026 06.02.2026
bdu:2026-01320 Уязвимость функции ath11k_mac_setup_channels_rates() ядра операционной системы Linux, поз… 06.02.2026 06.02.2026
bdu:2026-01319 Уязвимость функции relocate_one_page() ядра операционной системы Linux, позволяющая наруш… 06.02.2026 06.02.2026
bdu:2026-01318 Уязвимость функции tcp_fastopen_active_disable_ofo_check() модуля net/ipv4/tcp_fastopen.c… 06.02.2026 06.02.2026
bdu:2026-01317 Уязвимость функции hci_remove_adv_monitor() ядра операционной системы Linux, позволяющая … 06.02.2026 06.02.2026
bdu:2026-01316 Уязвимость функции nfs4_setup_readdir() модуля fs/nfs/nfs4proc.c поддержки клиентов NFS я… 06.02.2026 06.02.2026
bdu:2026-01315 Уязвимость функции iopt_alloc_pages() ядра операционной системы Linux, позволяющая наруши… 06.02.2026 06.02.2026
bdu:2026-01314 Уязвимость функции filter() ядра операционной системы Linux, позволяющая нарушителю оказа… 06.02.2026 06.02.2026
bdu:2026-01313 Уязвимость функции sco_sock_kill() модуля net/bluetooth/sco.c подсистемы Bluetooth ядра о… 06.02.2026 06.02.2026
bdu:2026-01312 Уязвимость функции bcsp_recv() модуля drivers/bluetooth/hci_bcsp.c драйвера устройств Blu… 06.02.2026 06.02.2026
bdu:2026-01311 Уязвимость функции virtio_gpu_cmd_transfer_to_host_2d() ядра операционной системы Linux, … 06.02.2026 06.02.2026
bdu:2026-01310 Уязвимость функции snd_usbmidi_output_open() модуля sound/usb/midi.c поддержки звуковых у… 06.02.2026 06.02.2026
bdu:2026-01309 Уязвимость функции ntfs_read_mft() ядра операционной системы Linux, позволяющая нарушител… 06.02.2026 06.02.2026
bdu:2026-01308 Уязвимость функции bit_putcs() модуля drivers/video/fbdev/core/bitblit.c драйвера устройс… 06.02.2026 06.02.2026
bdu:2026-01307 Уязвимость функции safexcel_probe_generic() ядра операционной системы Linux, позволяющая … 06.02.2026 06.02.2026
bdu:2026-01306 Уязвимость функций hfs_find_init() и hfs_brec_find() модуля fs/hfsplus/bfind.c поддержки … 06.02.2026 06.02.2026
bdu:2026-01305 Уязвимость функции map_create() ядра операционной системы Linux, позволяющая нарушителю в… 06.02.2026 06.02.2026
ID Description Updated
var-200512-0299 Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authent… 2024-07-23T21:40:52.289000Z
var-202212-2277 An integer underflow in Organization Specific TLV was found in various versions of OpenvS… 2024-07-23T21:40:51.741000Z
var-200912-0756 The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Wind… 2024-07-23T21:40:51.958000Z
var-201210-0456 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:40:50.864000Z
var-200712-0433 Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) f… 2024-07-23T21:40:50.122000Z
var-201904-1460 A cross-site scripting issue existed in Safari. This issue was addressed with improved UR… 2024-07-23T21:40:45.159000Z
var-201806-1466 An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… 2024-07-23T21:40:45.074000Z
var-201501-0436 The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1… 2024-07-23T21:40:45.003000Z
var-200704-0226 Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properl… 2024-07-23T21:40:44.831000Z
var-201605-0465 The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple … 2024-07-23T21:40:43.806000Z
var-202010-1510 A type confusion issue was addressed with improved memory handling. This issue is fixed i… 2024-07-23T21:40:40.672000Z
var-201103-0114 The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x be… 2024-07-23T21:40:40.823000Z
var-201302-0262 Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… 2024-07-23T21:40:39.972000Z
var-201109-0201 Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 … 2024-07-23T21:40:39.355000Z
var-200505-1240 The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a d… 2024-07-23T21:40:35.490000Z
var-201912-1857 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T21:39:57.528000Z
var-202104-0752 A memory corruption issue was addressed with improved validation. This issue is fixed in … 2024-07-23T21:39:56.465000Z
var-200902-0880 International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in A… 2024-07-23T21:39:24.164000Z
var-201908-1958 The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently l… 2024-07-23T21:39:23.746000Z
var-200102-0052 Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of s… 2024-07-23T21:39:23.577000Z
var-201708-0038 The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 al… 2024-07-23T21:39:15.769000Z
var-200901-0706 WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, … 2024-07-23T21:39:10.742000Z
var-202112-1608 A carefully crafted request body can cause a buffer overflow in the mod_lua multipart par… 2024-07-23T21:38:29.659000Z
var-202301-1703 The issue was addressed with improved memory handling. This issue is fixed in macOS Monte… 2024-07-23T21:38:27.556000Z
var-202103-0287 A flaw possibility of race condition and incorrect initialization of the process id was f… 2024-07-23T21:38:27.231000Z
var-201011-0174 ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute … 2024-07-23T21:37:24.567000Z
var-202106-0343 Improper isolation of shared resources in some Intel(R) Processors may allow an authentic… 2024-07-23T21:37:23.721000Z
var-201506-0268 The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before… 2024-07-23T21:36:44.513000Z
var-201904-0744 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T21:36:28.176000Z
var-201606-0329 Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/us… 2024-07-23T21:36:28.630000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated