Recent vulnerabilities

ID	CVSS	Description	Vendor	Product	Published	Updated
CVE-2026-22261	3.7 (3.1)	Suricata eve/alert: http1 xff handling can lead to den…	OISF	suricata	2026-01-27T18:10:27.881Z	2026-01-27T18:10:27.881Z
CVE-2026-23593	7.5 (3.1)	Unauthenticated Limited File Read allows Data Exposure…	Hewlett Packard Enterprise (HPE)	HPE Aruba Networking Fabric Composer	2026-01-27T17:58:35.889Z	2026-01-27T17:58:35.889Z
CVE-2025-33234	7.8 (3.1)	NVIDIA runx contains a vulnerability where an att…	NVIDIA	runx	2026-01-27T17:58:09.530Z	2026-01-27T18:15:04.152Z
CVE-2026-23592	7.2 (3.1)	Insecure File Handling allows Remote Code Execution in…	Hewlett Packard Enterprise (HPE)	HPE Aruba Networking Fabric Composer	2026-01-27T17:57:57.364Z	2026-01-27T17:58:58.029Z
CVE-2026-1315	7.1 (4.0)	Unauthenticated Denial of Service via Firmware Update …	TP-Link Systems Inc.	Tapo C220 v1	2026-01-27T17:53:29.242Z	2026-01-27T18:11:48.097Z
CVE-2026-0919	7.1 (4.0)	Unauthenticated Denial of Service via Oversized URL in…	TP-Link Systems Inc.	Tapo C220 v1	2026-01-27T17:52:39.170Z	2026-01-27T18:10:00.577Z
CVE-2026-0918	7.1 (4.0)	Null Pointer Dereference in Tapo SmartCam HTTP Service…	TP-Link Systems Inc.	Tapo C220 v1	2026-01-27T17:52:04.348Z	2026-01-27T18:07:32.574Z
CVE-2026-22260	7.5 (3.1)	Suricata http1: infinite recursion in decompression	OISF	suricata	2026-01-27T17:30:39.582Z	2026-01-27T17:57:27.806Z
CVE-2025-14911	7.1 (4.0) 6.5 (3.1)	Integer Overflow in GridFS chunkSize Leading to Heap A…	MongoDB	Mongo-c-driver	2026-01-27T17:29:21.423Z	2026-01-27T18:15:37.725Z
CVE-2026-22259	7.5 (3.1)	Suricata dnp3: unbounded transaction growth	OISF	suricata	2026-01-27T17:13:11.057Z	2026-01-27T18:16:55.422Z
CVE-2026-0705	6.7 (3.0)	Local privilege escalation due to insecure folder…	Acronis	Acronis Cloud Manager	2026-01-27T16:43:42.575Z	2026-01-27T16:43:42.575Z
CVE-2026-1483	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:33:21.696Z	2026-01-27T16:33:21.696Z
CVE-2026-1482	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:32:53.381Z	2026-01-27T16:32:53.381Z
CVE-2026-1481	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:32:25.749Z	2026-01-27T16:32:25.749Z
CVE-2026-1480	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:31:51.831Z	2026-01-27T16:31:51.831Z
CVE-2026-1479	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:31:06.870Z	2026-01-27T16:31:06.870Z
CVE-2026-1478	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:30:35.628Z	2026-01-27T16:30:35.628Z
CVE-2026-1477	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:30:04.356Z	2026-01-27T16:30:04.356Z
CVE-2026-1476	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:29:18.270Z	2026-01-27T16:29:18.270Z
CVE-2026-1475	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:28:31.574Z	2026-01-27T16:28:31.574Z
CVE-2026-1474	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:27:58.383Z	2026-01-27T16:27:58.383Z
CVE-2026-1473	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:27:26.475Z	2026-01-27T16:27:26.475Z
CVE-2026-1472	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:26:46.297Z	2026-01-27T16:26:46.297Z
CVE-2026-22258	7.5 (3.1)	Suricata DCERPC: unbounded fragment buffering leads to…	OISF	suricata	2026-01-27T16:17:29.903Z	2026-01-27T16:17:29.903Z
CVE-2026-23881	7.7 (3.1)	Kyverno Denial of Service via Context Variable Amplifi…	kyverno	kyverno	2026-01-27T16:10:44.376Z	2026-01-27T16:33:03.342Z
CVE-2026-22039	10 (3.1)	Kyverno Cross-Namespace Privilege Escalation via Polic…	kyverno	kyverno	2026-01-27T16:07:19.698Z	2026-01-27T16:42:49.789Z
CVE-2026-22796	N/A	ASN1_TYPE Type Confusion in the PKCS7_digest_from_attr…	OpenSSL	OpenSSL	2026-01-27T16:01:28.150Z	2026-01-27T16:28:52.046Z
CVE-2026-22795	N/A	Missing ASN1_TYPE validation in PKCS#12 parsing	OpenSSL	OpenSSL	2026-01-27T16:01:27.320Z	2026-01-27T16:01:27.320Z
CVE-2025-69421	N/A	NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex…	OpenSSL	OpenSSL	2026-01-27T16:01:26.435Z	2026-01-27T16:01:26.435Z
CVE-2025-69420	N/A	Missing ASN1_TYPE validation in TS_RESP_verify_respons…	OpenSSL	OpenSSL	2026-01-27T16:01:25.643Z	2026-01-27T16:01:25.643Z

ID	CVSS	Description	Vendor	Product	Published	Updated
CVE-2026-23881	7.7 (3.1)	Kyverno Denial of Service via Context Variable Amplifi…	kyverno	kyverno	2026-01-27T16:10:44.376Z	2026-01-27T16:33:03.342Z
CVE-2026-22259	7.5 (3.1)	Suricata dnp3: unbounded transaction growth	OISF	suricata	2026-01-27T17:13:11.057Z	2026-01-27T18:16:55.422Z
CVE-2026-22258	7.5 (3.1)	Suricata DCERPC: unbounded fragment buffering leads to…	OISF	suricata	2026-01-27T16:17:29.903Z	2026-01-27T16:17:29.903Z
CVE-2026-22039	10 (3.1)	Kyverno Cross-Namespace Privilege Escalation via Polic…	kyverno	kyverno	2026-01-27T16:07:19.698Z	2026-01-27T16:42:49.789Z
CVE-2026-1483	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:33:21.696Z	2026-01-27T16:33:21.696Z
CVE-2026-1482	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:32:53.381Z	2026-01-27T16:32:53.381Z
CVE-2026-1481	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:32:25.749Z	2026-01-27T16:32:25.749Z
CVE-2026-1480	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:31:51.831Z	2026-01-27T16:31:51.831Z
CVE-2026-1479	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:31:06.870Z	2026-01-27T16:31:06.870Z
CVE-2026-1478	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:30:35.628Z	2026-01-27T16:30:35.628Z
CVE-2026-1477	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:30:04.356Z	2026-01-27T16:30:04.356Z
CVE-2026-1476	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:29:18.270Z	2026-01-27T16:29:18.270Z
CVE-2026-1475	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:28:31.574Z	2026-01-27T16:28:31.574Z
CVE-2026-1474	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:27:58.383Z	2026-01-27T16:27:58.383Z
CVE-2026-1473	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:27:26.475Z	2026-01-27T16:27:26.475Z
CVE-2026-1472	9.3 (4.0)	Out-of-band SQL injection in Quatuor Performance Evaluation	Quatuor	Evaluación de Desempeño (EDD)	2026-01-27T16:26:46.297Z	2026-01-27T16:26:46.297Z
CVE-2026-0705	6.7 (3.0)	Local privilege escalation due to insecure folder…	Acronis	Acronis Cloud Manager	2026-01-27T16:43:42.575Z	2026-01-27T16:43:42.575Z
CVE-2025-69564	N/A	code-projects Mobile Shop Management System 1.0 i…	n/a	n/a	2026-01-27T00:00:00.000Z	2026-01-27T16:15:51.142Z
CVE-2025-69563	N/A	code-projects Mobile Shop Management System 1.0 i…	n/a	n/a	2026-01-27T00:00:00.000Z	2026-01-27T16:08:35.755Z
CVE-2025-69562	N/A	code-projects Mobile Shop Management System 1.0 i…	n/a	n/a	2026-01-27T00:00:00.000Z	2026-01-27T16:26:06.501Z
CVE-2025-69559	N/A	code-projects Computer Book Store 1.0 is vulnerab…	n/a	n/a	2026-01-27T00:00:00.000Z	2026-01-27T16:28:38.567Z
CVE-2025-65264	N/A	The kernel driver of CPUID CPU-Z v2.17 and earlie…	n/a	n/a	2026-01-27T00:00:00.000Z	2026-01-27T16:49:00.368Z
CVE-2026-24875	7.8 (3.1)	Integer overflow in modizer	yoyofr	modizer	2026-01-27T15:55:48.365Z	2026-01-27T15:55:48.365Z
CVE-2026-24874	9.1 (3.1)	Type confusion in xray-monolith	themrdemonized	xray-monolith	2026-01-27T15:55:03.021Z	2026-01-27T16:48:38.430Z
CVE-2026-24873	7.8 (3.1)	Out-of-bounds read in lpp-vita	Rinnegatamante	lpp-vita	2026-01-27T15:53:20.942Z	2026-01-27T17:00:59.576Z
CVE-2026-24872	9.8 (3.1)	Pointer arithmetic error in SkyFire_548	ProjectSkyfire	SkyFire_548	2026-01-27T15:51:45.395Z	2026-01-27T15:51:45.395Z
CVE-2026-24871	10 (4.0)	Code injection in Minecraft-Rcon-Manage	pilgrimage233	Minecraft-Rcon-Manage	2026-01-27T15:50:52.952Z	2026-01-27T15:50:52.952Z
CVE-2026-24870	3.7 (3.1)	Information disclosure in ixray-1.6-stcop	ixray-team	ixray-1.6-stcop	2026-01-27T15:47:13.401Z	2026-01-27T15:47:13.401Z
CVE-2026-24869	8.1 (3.1)	Use-after-free in the Layout: Scrolling and Overflow c…	Mozilla	Firefox	2026-01-27T15:58:48.799Z	2026-01-27T16:11:49.834Z
CVE-2026-24868	N/A	Mitigation bypass in the Privacy: Anti-Tracking component	Mozilla	Firefox	2026-01-27T15:58:48.472Z	2026-01-27T15:58:48.472Z

ID	Description	Published	Updated
fkie_cve-2026-0854	Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing …	2026-01-12T06:16:11.040	2026-01-13T14:03:18.990
fkie_cve-2025-14579	The Quiz Maker WordPress plugin before 6.7.0.89 does not sanitise and escape some of its settings, …	2026-01-12T06:16:10.193	2026-01-13T14:03:18.990
fkie_cve-2025-69276	Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux al…	2026-01-12T05:16:11.780	2026-01-14T16:41:50.373
fkie_cve-2025-69275	Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Wind…	2026-01-12T05:16:11.643	2026-01-14T16:47:26.547
fkie_cve-2025-69274	Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Wi…	2026-01-12T05:16:11.497	2026-01-14T16:48:55.327
fkie_cve-2025-69273	Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authe…	2026-01-12T05:16:11.363	2026-01-14T17:53:48.250
fkie_cve-2025-69272	Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Win…	2026-01-12T05:16:11.213	2026-01-14T17:54:24.857
fkie_cve-2025-69271	Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux…	2026-01-12T05:16:11.060	2026-01-14T17:55:06.017
fkie_cve-2025-69270	Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spect…	2026-01-12T05:16:10.900	2026-01-14T17:56:04.990
fkie_cve-2025-69269	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…	2026-01-12T05:16:10.747	2026-01-14T18:01:20.657
fkie_cve-2025-69268	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera…	2026-01-12T05:16:10.587	2026-01-14T18:03:32.927
fkie_cve-2025-69267	Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broad…	2026-01-12T05:16:09.753	2026-01-14T18:03:58.060
fkie_cve-2026-0853	Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerabili…	2026-01-12T04:15:46.840	2026-01-13T14:03:18.990
fkie_cve-2025-52694	Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote at…	2026-01-12T03:16:07.127	2026-01-26T03:15:49.177
fkie_cve-2026-0852	A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is…	2026-01-12T01:15:49.950	2026-01-14T22:19:33.933
fkie_cve-2026-0851	A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an u…	2026-01-12T00:15:52.763	2026-01-14T22:18:02.417
fkie_cve-2026-0850	A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted i…	2026-01-11T23:15:46.090	2026-01-14T22:09:35.817
fkie_cve-2025-68493	Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache St…	2026-01-11T13:15:45.610	2026-01-16T14:31:16.030
fkie_cve-2025-15506	A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects …	2026-01-11T11:15:49.113	2026-01-13T14:03:18.990
fkie_cve-2026-0843	A vulnerability has been found in jiujiujia/victor123/wxw850227 jjjfood and jjjshop_food up to 2026…	2026-01-11T09:15:50.810	2026-01-13T14:03:18.990
fkie_cve-2026-0842	A flaw has been found in Flycatcher Toys smART Sketcher up to 2.0. This affects an unknown part of …	2026-01-11T08:16:00.150	2026-01-13T14:03:18.990
fkie_cve-2026-0841	A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function st…	2026-01-11T08:15:59.153	2026-01-13T21:55:32.140
fkie_cve-2026-0840	A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerabil…	2026-01-11T07:15:49.680	2026-01-13T21:56:28.297
fkie_cve-2026-0839	A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the …	2026-01-11T06:15:57.567	2026-01-13T21:57:24.170
fkie_cve-2026-0838	A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy o…	2026-01-11T06:15:57.300	2026-01-13T22:02:34.320
fkie_cve-2026-0837	A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the…	2026-01-11T05:15:58.893	2026-01-13T22:03:26.023
fkie_cve-2026-0836	A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function st…	2026-01-11T05:15:47.947	2026-01-13T22:04:12.347
fkie_cve-2025-15505	A vulnerability was found in Luxul XWR-600 up to 4.0.1. The affected element is an unknown function…	2026-01-11T02:15:58.890	2026-01-13T14:03:18.990
fkie_cve-2026-0824	A security flaw has been discovered in questdb ui up to 1.11.9. Impacted is an unknown function of …	2026-01-10T15:15:50.137	2026-01-13T14:03:18.990
fkie_cve-2026-0822	A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function …	2026-01-10T14:15:50.087	2026-01-22T20:58:16.307

ID	Severity	Description	Published	Updated
ghsa-r2rj-wwm5-x6mq	7.7 (3.1)	Kyverno Denial of Service via Context Variable Amplification in Policy Engine	2026-01-27T18:02:22Z	2026-01-27T18:02:22Z
ghsa-8p9x-46gm-qfx2	9.9 (3.1)	Kyverno Cross-Namespace Privilege Escalation via Policy apiCall	2026-01-27T18:01:26Z	2026-01-27T18:01:26Z
ghsa-9m4g-m3p5-p6gm	5.4 (3.1)	A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implemen…	2026-01-27T15:30:32Z	2026-01-27T15:30:32Z
ghsa-5xrp-6693-jjx9	9.9 (3.1)	n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evalua…	2026-01-27T15:30:32Z	2026-01-27T15:30:32Z
ghsa-xc99-2v4m-jv2w	2.8 (3.1)	A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs b…	2026-01-27T15:30:31Z	2026-01-27T15:30:31Z
ghsa-r2rp-r5cj-6c6x	4.2 (3.1)	A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to …	2026-01-27T15:30:31Z	2026-01-27T15:30:31Z
ghsa-r2jv-fwfr-4j8c	5.3 (4.0)	All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user…	2026-01-27T15:30:31Z	2026-01-27T15:30:31Z
ghsa-xr9j-2jxx-p2h8	9.8 (3.1)	Integer Overflow or Wraparound vulnerability in Ralim IronOS.This issue affects IronOS: before v2.23-rc2.	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-w299-fq8v-qvg7	7.5 (3.1)	Missing Release of Memory after Effective Lifetime vulnerability in Is-Daouda is-Engine.This issue …	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-rx39-3p86-f4v2	7.5 (3.1)	Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-rq8q-2gpw-5fr2	7.4 (4.0)	Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allo…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-f6mf-xjgg-34j8	7.8 (3.1)	A local low privileged attacker can bypass the authentication of the Device Manager user interface,…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-9x3w-xc3m-rx49	10.0 (4.0)	Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-o…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-8283-g649-xjrh	8.8 (3.1)	A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to t…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-4hm5-jmp9-7g72	6.9 (4.0)	Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo.…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-45hq-rq49-xwcf	5.7 (4.0)	Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to mani…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-3gh2-3c3q-2933	5.3 (3.1)	A low privileged remote attacker may be able to disclose confidential information from the memory o…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-382v-76mx-pqx3	6.5 (3.1)	Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in Is-Daouda is-Engine.This issue aff…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-292q-v67v-f66g	6.9 (4.0)	A vulnerability in the Pix-Link LV-WR21Q router's language module allows remote attackers to trigge…	2026-01-27T12:31:18Z	2026-01-27T12:31:18Z
ghsa-pqh8-v6gf-267q	7.0 (3.1)	Dell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of Pas…	2026-01-27T12:31:17Z	2026-01-27T12:31:17Z
ghsa-cr4v-m7hf-7hvj	6.8 (4.0)	Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to byp…	2026-01-27T12:31:17Z	2026-01-27T12:31:17Z
ghsa-cq4v-33m4-7gj5	7.6 (4.0)	Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attac…	2026-01-27T12:31:17Z	2026-01-27T12:31:18Z
ghsa-8pm5-xr39-vfv3	6.1 (3.1)	A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Re…	2026-01-27T12:31:17Z	2026-01-27T12:31:17Z
ghsa-xg4q-g85w-x6x5	6.9 (4.0)	Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/…	2026-01-27T09:30:31Z	2026-01-27T09:30:31Z
ghsa-mvcg-wp8g-8fcv	10.0 (4.0)	Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnera…	2026-01-27T09:30:31Z	2026-01-27T09:30:31Z
ghsa-49v6-p72m-p687	6.9 (4.0)	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera…	2026-01-27T09:30:31Z	2026-01-27T09:30:31Z
ghsa-3vcc-ghcj-6f52	10.0 (4.0)	Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper (src modules). T…	2026-01-27T09:30:31Z	2026-01-27T09:30:31Z
ghsa-w586-qrfw-4qhv	8.7 (4.0)	Out-of-bounds Write vulnerability in praydog UEVR (dependencies/lua/src modules). This vulnerabilit…	2026-01-27T09:30:30Z	2026-01-27T09:30:30Z
ghsa-vx2x-xf93-9fw9	9.2 (4.0)	Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in coolsnowwolf lede (package/…	2026-01-27T09:30:30Z	2026-01-27T09:30:30Z
ghsa-v546-jrfg-ph8q	8.3 (4.0)	Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability …	2026-01-27T09:30:30Z	2026-01-27T09:30:30Z

ID	Severity	Description	Package	Published	Updated
pysec-2025-71		Cadwyn creates production-ready community-driven modern Stripe-like API versioning in Fas…	cadwyn	2025-07-21T21:15:25+00:00	2025-07-23T15:24:03.825615+00:00
pysec-2025-69		In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker tem…	roundup	2025-07-13T20:15:25+00:00	2025-07-13T21:23:01.161315+00:00
pysec-2025-65		A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0…	llama-index	2025-07-07T13:15:28+00:00	2025-07-07T15:23:42.730681+00:00
pysec-2025-61		Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap …	pillow	2025-07-01T19:15:27Z	2025-07-07T14:12:46.226030Z
pysec-2025-51		Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) v…	apache-airflow-providers-snowflake	2025-06-24T08:15:24+00:00	2025-06-26T21:23:03.132527+00:00
pysec-2025-70	10.0 (3.1)	A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit componen…	langchain-community	2025-06-23T21:15:25+00:00	2025-07-16T21:23:40.211079+00:00
pysec-2025-52		gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.	mlflow	2025-06-23T15:15:29Z	2025-12-05T13:25:55.146081Z
pysec-2025-68	8.0 (3.1)	A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6…	upsonic	2025-06-19T21:15:27+00:00	2025-07-08T19:22:27.449399+00:00
pysec-2025-67	9.8 (3.1)	A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerabil…	upsonic	2025-06-19T21:15:27+00:00	2025-07-08T19:22:27.385619+00:00
pysec-2025-64	9.8 (3.1)	A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0…	python-a2a	2025-06-17T07:15:18+00:00	2025-07-02T21:23:13.806273+00:00
pysec-2025-47		An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2…	django	2025-06-05T03:15:25+00:00	2025-06-05T05:23:28.296596+00:00
pysec-2025-44		django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in mod…	django-helpdesk	2025-05-31T01:15:19+00:00	2025-05-31T03:09:35.357757+00:00
pysec-2025-55		vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 u…	vllm	2025-05-30T19:15:30+00:00	2025-06-26T21:23:06.407481+00:00
pysec-2025-54		vLLM is an inference and serving engine for large language models (LLMs). In versions 0.8…	vllm	2025-05-30T19:15:30+00:00	2025-06-26T21:23:06.319321+00:00
pysec-2025-50		vLLM, an inference and serving engine for large language models (LLMs), has a Regular Exp…	vllm	2025-05-30T18:15:32+00:00	2025-06-19T03:02:28.572160+00:00
pysec-2025-53		vLLM is an inference and serving engine for large language models (LLMs). Prior to versio…	vllm	2025-05-29T17:15:21+00:00	2025-06-26T21:23:06.231251+00:00
pysec-2025-43		vLLM is an inference and serving engine for large language models (LLMs). In versions sta…	vllm	2025-05-29T17:15:21+00:00	2025-05-29T19:21:01.611587+00:00
pysec-2025-46	5.5 (3.1)	A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as cri…	pypickle	2025-05-26T08:15:19+00:00	2025-06-03T17:36:58.579358+00:00
pysec-2025-45	7.8 (3.1)	A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic.…	pypickle	2025-05-26T07:15:26+00:00	2025-06-03T17:36:58.528116+00:00
pysec-2025-40	7.5 (3.1)	A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils`…	transformers	2025-05-19T12:15:19+00:00	2025-05-21T19:22:10.801823+00:00
pysec-2025-49	8.8 (3.1)	setuptools is a package that allows users to download, build, install, upgrade, and unins…	setuptools	2025-05-17T16:15:19+00:00	2025-06-12T22:23:11.115559+00:00
pysec-2025-39		motionEye is an online interface for the software motion, a video surveillance program wi…	motioneye	2025-05-14T16:15:29+00:00	2025-05-14T17:22:51.050788+00:00
pysec-2025-60		Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Inform…	apache-iotdb	2025-05-14T11:16:28+00:00	2025-07-01T21:22:47.232036+00:00
pysec-2025-59		Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attack…	apache-iotdb	2025-05-14T11:15:47+00:00	2025-07-01T21:22:47.177405+00:00
pysec-2025-38		OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during im…	ironic	2025-05-08T17:16:01Z	2025-05-13T04:24:03.083929Z
pysec-2025-37		An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2…	django	2025-05-08T04:17:18+00:00	2025-05-08T05:23:16.210893+00:00
pysec-2025-42	9.8 (3.1)	vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Ver…	vllm	2025-04-30T01:15:51+00:00	2025-05-28T21:23:12.396609+00:00
pysec-2025-34		The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_…	picklescan	2025-04-24T01:15:49+00:00	2025-04-24T03:08:15.436691+00:00
pysec-2025-56	4.3 (3.1)	OctoPrint provides a web interface for controlling consumer 3D printers. In versions up t…	octoprint	2025-04-22T18:15:59+00:00	2025-06-27T17:22:53.513680+00:00
pysec-2025-41	9.8 (3.1)	PyTorch is a Python package that provides tensor computation with strong GPU acceleration…	torch	2025-04-18T16:15:23+00:00	2025-05-28T15:23:37.843138+00:00

ID	Description	Updated

ID	Description	Published	Updated
mal-2026-547	Malicious code in solhint-plugin-hyperlane (PyPI)	2026-01-27T09:15:48Z	2026-01-27T09:15:48Z
mal-2026-527	Malicious code in @santandergroup-uk/edgehome-components (npm)	2026-01-27T08:16:51Z	2026-01-27T08:16:51Z
mal-2026-534	Malicious code in internallib_v828 (npm)	2026-01-27T08:12:56Z	2026-01-27T08:12:57Z
mal-2026-542	Malicious code in stylus.js (npm)	2026-01-27T08:11:31Z	2026-01-27T08:11:32Z
mal-2026-541	Malicious code in pump.js (npm)	2026-01-27T08:11:31Z	2026-01-27T08:11:32Z
mal-2026-537	Malicious code in mysql2.js (npm)	2026-01-27T08:11:31Z	2026-01-27T08:11:31Z
mal-2026-536	Malicious code in morgan.js (npm)	2026-01-27T08:11:31Z	2026-01-27T08:11:31Z
mal-2026-535	Malicious code in knex.js (npm)	2026-01-27T08:11:31Z	2026-01-27T08:11:39Z
mal-2026-530	Malicious code in grepleaks (npm)	2026-01-27T08:09:32Z	2026-01-27T08:09:32Z
mal-2026-546	Malicious code in xhjxhjhiagent (npm)	2026-01-27T08:09:00Z	2026-01-27T08:09:00Z
mal-2026-545	Malicious code in testxhjhka (npm)	2026-01-27T08:09:00Z	2026-01-27T08:09:00Z
mal-2026-544	Malicious code in testxhjhk (npm)	2026-01-27T08:09:00Z	2026-01-27T08:09:00Z
mal-2026-531	Malicious code in hackerxhj (npm)	2026-01-27T08:09:00Z	2026-01-27T08:09:00Z
mal-2026-533	Malicious code in hiagentxhjrceme (npm)	2026-01-27T08:08:59Z	2026-01-27T08:09:00Z
mal-2026-532	Malicious code in hiagentxhjrce (npm)	2026-01-27T08:08:59Z	2026-01-27T08:09:00Z
mal-2026-526	Malicious code in @row-components/pricing-embedded-sui (npm)	2026-01-27T08:01:02Z	2026-01-27T08:01:02Z
mal-2026-543	Malicious code in tailwind-components-cli (npm)	2026-01-27T07:59:05Z	2026-01-27T07:59:05Z
mal-2026-540	Malicious code in n8n-nodes-xkwqpzrt-jmflhvbn-dsyocgxwmkelpt (npm)	2026-01-27T07:57:56Z	2026-01-27T07:57:56Z
mal-2026-539	Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm)	2026-01-27T07:57:56Z	2026-01-27T07:57:57Z
mal-2026-538	Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm)	2026-01-27T07:57:56Z	2026-01-27T07:57:56Z
mal-2026-529	Malicious code in fileupload-core (npm)	2026-01-27T07:56:49Z	2026-01-27T07:56:49Z
mal-2026-528	Malicious code in @shije/new-qs (npm)	2026-01-27T07:55:42Z	2026-01-27T07:55:43Z
mal-2026-520	Malicious code in ftm-noderpc (npm)	2026-01-27T02:44:52Z	2026-01-27T02:44:52Z
mal-2026-525	Malicious code in sandbox-hooks (npm)	2026-01-27T02:25:01Z	2026-01-27T02:25:02Z
mal-2026-524	Malicious code in mapkit-example-vue (npm)	2026-01-27T02:25:01Z	2026-01-27T02:25:01Z
mal-2026-523	Malicious code in mapkit-example-svelte (npm)	2026-01-27T02:25:01Z	2026-01-27T02:25:01Z
mal-2026-522	Malicious code in magento-coding-standard-eslint-plugin (npm)	2026-01-27T02:25:01Z	2026-01-27T02:25:02Z
mal-2026-521	Malicious code in hammer-jquery (npm)	2026-01-27T02:25:01Z	2026-01-27T02:25:02Z
mal-2026-519	Malicious code in @afg-ikea/ikea-modals (npm)	2026-01-27T02:11:41Z	2026-01-27T02:11:41Z
mal-2026-518	Malicious code in @afg-ikea/ikea-kiosk-related-components (npm)	2026-01-27T02:11:40Z	2026-01-27T02:11:41Z

ID	Description	Published	Updated
wid-sec-w-2026-0190	vllm: Mehrere Schwachstellen	2026-01-21T23:00:00.000+00:00	2026-01-22T23:00:00.000+00:00
wid-sec-w-2026-0185	M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service	2026-01-20T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0184	Linux Kernel: Schwachstelle ermöglicht Denial of Service	2026-01-20T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0183	InetUtils (telnetd): Schwachstelle ermöglicht Erlangen von Administratorrechten	2026-01-20T23:00:00.000+00:00	2026-01-25T23:00:00.000+00:00
wid-sec-w-2026-0182	Apache Solr: Mehrere Schwachstellen	2026-01-20T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0176	Google Chrome/Microsoft Edge: Schwachstelle ermöglicht Codeausführung	2026-01-20T23:00:00.000+00:00	2026-01-25T23:00:00.000+00:00
wid-sec-w-2026-0174	Oracle Systems: Mehrere Schwachstellen	2026-01-20T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0172	Oracle Virtualization: Mehrere Schwachstellen	2026-01-20T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0168	Oracle MySQL: Mehrere Schwachstellen	2026-01-20T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0164	Oracle Java SE: Mehrere Schwachstellen	2026-01-20T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0159	Oracle E-Business Suite: Mehrere Schwachstellen	2026-01-20T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0148	ImageMagick: Mehrere Schwachstellen	2026-01-19T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0144	n8n: Schwachstelle ermöglicht Codeausführung	2026-01-18T23:00:00.000+00:00	2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0138	Red Hat Enterprise Linux (gpsd): Mehrere Schwachstellen	2026-01-18T23:00:00.000+00:00	2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0135	Google Fast Pair Bluetooth Protokoll: Schwachstelle ermöglicht Offenlegung von Informationen	2026-01-15T23:00:00.000+00:00	2026-01-20T23:00:00.000+00:00
wid-sec-w-2026-0133	SmarterTools SmarterMail: Mehrere Schwachstellen	2026-01-15T23:00:00.000+00:00	2026-01-22T23:00:00.000+00:00
wid-sec-w-2026-0129	Golang Go: Mehrere Schwachstellen	2026-01-15T23:00:00.000+00:00	2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0114	Red Hat OpenShift (github.com/sirupsen/logrus): Schwachstelle ermöglicht Denial of Service	2026-01-14T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0106	Google Chrome/Microsoft Edge: Mehrere Schwachstellen	2026-01-13T23:00:00.000+00:00	2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0098	Node.js: Mehrere Schwachstellen	2026-01-13T23:00:00.000+00:00	2026-01-26T23:00:00.000+00:00
wid-sec-w-2026-0096	Google Android Pixel: Mehrere Schwachstellen	2026-01-13T23:00:00.000+00:00	2026-01-15T23:00:00.000+00:00
wid-sec-w-2026-0090	Mozilla Firefox und Thunderbird: Mehrere Schwachstellen	2026-01-13T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0083	Microsoft Windows : Mehrere Schwachstellen	2026-01-13T23:00:00.000+00:00	2026-01-18T23:00:00.000+00:00
wid-sec-w-2026-0068	libpng (API-Funktionen): Mehrere Schwachstellen ermöglichen DoS und Offenlegung von Informationen	2026-01-12T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0066	avahi-daemon: Mehrere Schwachstellen ermöglichen Denial of Service	2026-01-12T23:00:00.000+00:00	2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0062	Red Hat Enterprise Linux (libsoup): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Datenmanipulation	2026-01-11T23:00:00.000+00:00	2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0056	MailPit: Schwachstelle ermöglicht Offenlegung von Informationen	2026-01-11T23:00:00.000+00:00	2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0047	CoreDNS: Schwachstelle ermöglicht Denial of Service	2026-01-07T23:00:00.000+00:00	2026-01-08T23:00:00.000+00:00
wid-sec-w-2026-0044	libtasn1: Schwachstelle ermöglicht Denial of Service	2026-01-07T23:00:00.000+00:00	2026-01-08T23:00:00.000+00:00
wid-sec-w-2026-0043	Trend Micro Apex Central: Mehrere Schwachstellen	2026-01-07T23:00:00.000+00:00	2026-01-08T23:00:00.000+00:00

ID	Description	Published	Updated
ncsc-2026-0040	Kwetsbaarheid verholpen in SmarterTools SmarterMail	2026-01-27T10:51:39.476320Z	2026-01-27T10:51:39.476320Z
ncsc-2026-0039	ZeroDay kwetsbaarheid verholpen in Microsoft Office	2026-01-27T07:27:52.867415Z	2026-01-27T07:27:52.867415Z
ncsc-2026-0038	Kwetsbaarheid verholpen in BIND 9	2026-01-23T08:54:43.506215Z	2026-01-23T08:54:43.506215Z
ncsc-2026-0037	Kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition	2026-01-22T12:35:30.505659Z	2026-01-22T12:35:30.505659Z
ncsc-2026-0036	Kwetsbaarheden verholpen in Cisco Unified Communications producten	2026-01-22T09:49:39.156365Z	2026-01-22T09:49:39.156365Z
ncsc-2026-0035	Kwetsbaarheid verholpen in Palo Alto Networks PAN-OS	2026-01-22T09:22:36.433609Z	2026-01-22T09:22:36.433609Z
ncsc-2026-0034	Kwetsbaarheden verholpen in Atlassian producten	2026-01-22T09:03:42.667958Z	2026-01-22T09:03:42.667958Z
ncsc-2026-0033	Kwetsbaarheid verholpen in GNU Inetutils telnetd	2026-01-21T14:15:46.424529Z	2026-01-21T14:15:46.424529Z
ncsc-2026-0032	Kwetsbaarheden verholpen in Oracle MySQL	2026-01-21T10:12:24.844869Z	2026-01-21T10:12:24.844869Z
ncsc-2026-0031	Kwetsbaarheden verholpen in Oracle JD Edwards	2026-01-21T10:12:00.674214Z	2026-01-21T10:12:00.674214Z
ncsc-2026-0030	Kwetsbaarheden verholpen in Oracle Java	2026-01-21T10:11:39.759123Z	2026-01-21T10:11:39.759123Z
ncsc-2026-0029	Kwetsbaarheden verholpen in Oracle Hyperion	2026-01-21T10:10:46.297433Z	2026-01-21T10:10:46.297433Z
ncsc-2026-0028	Kwetsbaarheden verholpen in Oracle Analytics	2026-01-21T10:10:15.985753Z	2026-01-21T10:10:15.985753Z
ncsc-2026-0027	Kwetsbaarheden verholpen in Oracle Fusion Middleware	2026-01-21T10:08:59.379774Z	2026-01-21T10:08:59.379774Z
ncsc-2026-0026	Kwetsbaarheden verholpen in Oracle Enterprise Manager	2026-01-21T10:06:27.920991Z	2026-01-21T10:06:27.920991Z
ncsc-2026-0025	Kwetsbaarheden verholpen in Oracle Financial Services	2026-01-21T09:55:33.889125Z	2026-01-21T09:55:33.889125Z
ncsc-2026-0024	Kwetsbaarheden verholpen in Oracle E-Business Suite	2026-01-21T09:29:38.334428Z	2026-01-21T09:29:38.334428Z
ncsc-2026-0023	Kwetsbaarheden verholpen in Oracle PeopleSoft	2026-01-21T09:27:58.715578Z	2026-01-21T09:27:58.715578Z
ncsc-2026-0022	Kwetsbaarheden verholpen in Oracle Communications producten	2026-01-21T09:25:39.876330Z	2026-01-21T09:25:39.876330Z
ncsc-2026-0021	Kwetsbaarheden verholpen in Oracle Database Server producten	2026-01-21T09:19:00.000449Z	2026-01-21T09:19:00.000449Z
ncsc-2026-0020	Kwetsbaarheden verholpen in Oracle Commerce	2026-01-21T09:18:16.268788Z	2026-01-21T09:18:16.268788Z
ncsc-2026-0019	Kwetsbaarheid verholpen in Fortinet FortiSIEM	2026-01-16T13:34:34.467426Z	2026-01-16T13:34:34.467426Z
ncsc-2026-0018	Kwetsbaarheden verholpen in TYPO3 CMS	2026-01-16T10:11:37.524826Z	2026-01-16T10:11:37.524826Z
ncsc-2026-0017	Kwetsbaarheden verholpen in Juniper Networks JunOS	2026-01-16T10:07:39.310560Z	2026-01-16T10:07:39.310560Z
ncsc-2026-0016	Kwetsbaarheden verholpen in Aruba Networks ArubaOS	2026-01-16T09:44:20.575860Z	2026-01-16T09:44:20.575860Z
ncsc-2026-0015	Kwetsbaarheid verholpen in Fortinet FortiOS	2026-01-15T12:31:57.265723Z	2026-01-15T12:31:57.265723Z
ncsc-2026-0014	Kwetsbaarheden verholpen in Adobe Illustrator	2026-01-15T12:16:05.427141Z	2026-01-15T12:16:05.427141Z
ncsc-2026-0013	Kwetsbaarheden verholpen in Adobe InDesign Desktop	2026-01-14T13:45:48.530782Z	2026-01-14T13:45:48.530782Z
ncsc-2026-0012	Kwetsbaarheden verholpen in Adobe Dreamweaver Desktop	2026-01-14T13:41:56.261778Z	2026-01-14T13:41:56.261778Z
ncsc-2026-0011	Kwetsbaarheid verholpen in Microsoft Developer Tools	2026-01-13T19:19:27.690900Z	2026-01-13T19:19:27.690900Z

ID	Description	Published	Updated
ssa-827968	SSA-827968: Vulnerability in Nozomi Guardian/CMC on RUGGEDCOM APE1808 Devices	2026-01-13T00:00:00Z	2026-01-13T00:00:00Z
ssa-674753	SSA-674753: Denial-of-Service Vulnerability in ET 200SP	2026-01-13T00:00:00Z	2026-01-13T00:00:00Z
ssa-192617	SSA-192617: Local Privilege Escalation Vulnerability in TeleControl Server Basic Before V3.1.2.4	2026-01-13T00:00:00Z	2026-01-13T00:00:00Z
ssa-014678	SSA-014678: Authorization Bypass Vulnerability in Industrial Edge Device Kit	2026-01-13T00:00:00Z	2026-01-13T00:00:00Z
ssa-001536	SSA-001536: Authorization Bypass Vulnerability in Siemens Industrial Edge Devices	2026-01-13T00:00:00Z	2026-01-13T00:00:00Z
ssa-512988	SSA-512988: File Parsing Vulnerability in Simcenter Femap Before V2512	2025-12-12T00:00:00Z	2025-12-12T00:00:00Z
ssa-915282	SSA-915282: Denial of service Vulnerability in Interniche IP-Stack based Industrial Devices	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-912274	SSA-912274: Multiple Vulnerabilities in RUGGEDCOM ROX Before V2.17	2025-12-09T00:00:00Z	2026-01-13T00:00:00Z
ssa-882673	SSA-882673: Multiple Vulnerabilities in SINEC Security Monitor before V4.10.0	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-868571	SSA-868571: Missing Server Certificate Validation in IAM Client	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-763474	SSA-763474: Denial of Service Vulnerability in Ruggedcom ROS devices before V5.10.1	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-734261	SSA-734261: Authentication Bypass Vulnerability in Energy Services Using Elspec G5DFR	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-710408	SSA-710408: Missing Server Certificate Validation in Siemens Advanced Licensing (SALT) Toolkit	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-626856	SSA-626856: Multiple Vulnerabilities in SINEMA Remote Connect Sever Before V3.2 SP4	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-471761	SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-420375	SSA-420375: Improper Integrity Check of Firmware Updates in Building X - Security Manager Edge Controller (ACC-AP)	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-416652	SSA-416652: Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-356310	SSA-356310: Multiple Vulnerabilities in Gridscale X Prepay	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-212953	SSA-212953: Multiple Vulnerabilities in COMOS	2025-12-09T00:00:00Z	2026-01-13T00:00:00Z
ssa-202008	SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.0	2025-12-09T00:00:00Z	2025-12-09T00:00:00Z
ssa-241605	SSA-241605: Out of Bounds Read in PS/IGES Parasolid Translator Component Before V29.0.258	2025-11-17T00:00:00Z	2025-11-17T00:00:00Z
ssa-190588	SSA-190588: Cross-Site Scripting Vulnerability in Mendix Rich Text Widget	2025-11-17T00:00:00Z	2025-11-17T00:00:00Z
ssa-682326	SSA-682326: Multiple Vulnerabilities in COMOS before V10.4.5	2025-11-11T00:00:00Z	2025-11-11T00:00:00Z
ssa-522291	SSA-522291: Improper Certificate Validation Vulnerability in Solid Edge	2025-11-11T00:00:00Z	2025-11-11T00:00:00Z
ssa-514895	SSA-514895: Multiple Vulnerabilities in Altair Grid Engine V2025.1.0	2025-11-11T00:00:00Z	2025-11-11T00:00:00Z
ssa-365596	SSA-365596: DLL Hijacking Vulnerability in Siemens Software Center and Solid Edge	2025-11-11T00:00:00Z	2025-11-11T00:00:00Z
ssa-339694	SSA-339694: Multiple Vulnerabilities in Spectrum Power 4 Before v4.70 SP12 Security Patch 2	2025-11-11T00:00:00Z	2025-11-11T00:00:00Z
ssa-267056	SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM Devices	2025-11-11T00:00:00Z	2025-11-11T00:00:00Z
ssa-201498	SSA-201498: Multiple Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices Before V3.11	2025-11-11T00:00:00Z	2025-11-11T00:00:00Z
ssa-599451	SSA-599451: Multiple Vulnerabilities in SiPass integrated Before V3.0	2025-10-14T00:00:00Z	2025-10-14T00:00:00Z

ID	Description	Published	Updated
rhsa-2026:0978	Red Hat Security Advisory: OpenShift Container Platform 4.20.12 bug fix and security update	2026-01-27T17:40:19+00:00	2026-01-27T17:41:43+00:00
rhsa-2026:1408	Red Hat Security Advisory: python3.12 security update	2026-01-27T17:29:58+00:00	2026-01-27T17:30:23+00:00
rhsa-2026:1414	Red Hat Security Advisory: thunderbird security update	2026-01-27T17:28:09+00:00	2026-01-27T17:28:57+00:00
rhsa-2026:1416	Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.8.2 release	2026-01-27T16:53:57+00:00	2026-01-27T16:55:44+00:00
rhsa-2026:1377	Red Hat Security Advisory: image-builder security update	2026-01-27T16:34:13+00:00	2026-01-27T16:36:07+00:00
rhsa-2026:1379	Red Hat Security Advisory: osbuild-composer security update	2026-01-27T16:11:53+00:00	2026-01-27T16:36:08+00:00
rhsa-2026:1380	Red Hat Security Advisory: osbuild-composer security update	2026-01-27T16:02:11+00:00	2026-01-27T16:36:08+00:00
rhsa-2026:1350	Red Hat Security Advisory: curl security update	2026-01-27T15:26:43+00:00	2026-01-27T15:50:35+00:00
rhsa-2026:1374	Red Hat Security Advisory: python3.11 security update	2026-01-27T15:21:04+00:00	2026-01-27T17:30:22+00:00
rhsa-2026:1000	Red Hat Security Advisory: OpenShift Container Platform 4.20.12 bug fix and security update	2026-01-27T14:30:57+00:00	2026-01-27T14:32:59+00:00
rhsa-2026:1349	Red Hat Security Advisory: openssl security update	2026-01-27T14:02:32+00:00	2026-01-27T15:48:36+00:00
rhsa-2026:1344	Red Hat Security Advisory: grafana security update	2026-01-27T11:37:52+00:00	2026-01-27T16:55:47+00:00
rhsa-2026:1338	Red Hat Security Advisory: resource-agents security update	2026-01-27T09:52:33+00:00	2026-01-27T15:49:40+00:00
rhsa-2026:1340	Red Hat Security Advisory: resource-agents security update	2026-01-27T09:35:26+00:00	2026-01-27T15:49:40+00:00
rhsa-2026:1339	Red Hat Security Advisory: resource-agents security update	2026-01-27T09:35:23+00:00	2026-01-27T15:49:40+00:00
rhsa-2026:1336	Red Hat Security Advisory: resource-agents security update	2026-01-27T09:34:28+00:00	2026-01-27T15:49:40+00:00
rhsa-2026:1337	Red Hat Security Advisory: python-s3transfer security update	2026-01-27T09:32:38+00:00	2026-01-27T15:49:40+00:00
rhsa-2026:1334	Red Hat Security Advisory: glibc security update	2026-01-27T09:17:01+00:00	2026-01-27T15:48:50+00:00
rhsa-2026:1332	Red Hat Security Advisory: fence-agents security update	2026-01-27T09:10:08+00:00	2026-01-27T15:49:39+00:00
rhsa-2026:1331	Red Hat Security Advisory: fence-agents security update	2026-01-27T09:04:37+00:00	2026-01-27T15:49:36+00:00
rhsa-2026:1329	Red Hat Security Advisory: fence-agents security update	2026-01-27T08:39:01+00:00	2026-01-27T15:49:36+00:00
rhsa-2026:1330	Red Hat Security Advisory: fence-agents security update	2026-01-27T08:38:11+00:00	2026-01-27T15:49:36+00:00
rhsa-2026:1326	Red Hat Security Advisory: glib2 security update	2026-01-27T07:46:31+00:00	2026-01-27T09:14:36+00:00
rhsa-2026:1327	Red Hat Security Advisory: glib2 security update	2026-01-27T07:32:51+00:00	2026-01-27T09:14:37+00:00
rhsa-2026:1324	Red Hat Security Advisory: glib2 security update	2026-01-27T07:16:01+00:00	2026-01-27T09:14:37+00:00
rhsa-2026:1323	Red Hat Security Advisory: glib2 security update	2026-01-27T07:08:41+00:00	2026-01-27T09:14:36+00:00
rhsa-2026:1320	Red Hat Security Advisory: thunderbird security update	2026-01-27T06:58:16+00:00	2026-01-27T17:28:56+00:00
rhsa-2026:1248	Red Hat Security Advisory: MTV RHEL9 Images	2026-01-26T18:31:11+00:00	2026-01-27T10:37:46+00:00
rhsa-2026:1236	Red Hat Security Advisory: kernel security update	2026-01-26T16:39:04+00:00	2026-01-26T21:11:47+00:00
rhsa-2026:0932	Red Hat Security Advisory: java-1.8.0-openjdk security update	2026-01-26T16:34:29+00:00	2026-01-27T10:37:43+00:00

ID	Description	Published	Updated
icsa-26-022-08	EVMAPA	2026-01-22T07:00:00.000000Z	2026-01-22T07:00:00.000000Z
icsa-26-020-03	Rockwell Automation Verve Asset Manager	2026-01-20T07:00:00.000000Z	2026-01-20T07:00:00.000000Z
va-26-015-01	NOAA PMEL Live Access Server (LAS) command injection	2026-01-15T19:59:37Z	2026-01-15T19:59:37Z
icsa-26-022-01	Schneider Electric	2026-01-13T08:00:00.000000Z	2026-01-22T17:29:46.950679Z
icsa-26-013-03	YoSmart YoLink Smart Hub	2026-01-13T07:00:00.000000Z	2026-01-13T07:00:00.000000Z
icsa-26-013-02	Rockwell Automation FactoryTalk DataMosaix Private Cloud	2026-01-13T07:00:00.000000Z	2026-01-13T07:00:00.000000Z
icsa-26-013-01	Rockwell Automation 432ES-IG3 Series A	2026-01-13T07:00:00.000000Z	2026-01-13T07:00:00.000000Z
va-26-013-01	NSecKrnl driver terminates system processes with crafted IOCTL requests	2026-01-13T00:00:00Z	2026-01-13T00:00:00Z
va-26-008-01	OPEXUS eCASE	2026-01-08T16:36:15Z	2026-01-08T16:36:15Z
va-26-008-03	Ideagen DevonWay stored XSS	2026-01-08T00:00:00Z	2026-01-08T00:00:00Z
va-26-008-02	OPEXUS eComplaint and eCasePortal IDOR	2026-01-07T16:35:11Z	2026-01-07T16:35:11Z
icsa-26-006-01	Columbia Weather Systems MicroServer	2026-01-06T07:00:00.000000Z	2026-01-06T07:00:00.000000Z
icsma-25-364-01	WHILL Model C2 Electric Wheelchairs and Model F Power Chairs	2025-12-30T07:00:00.000000Z	2025-12-30T07:00:00.000000Z
icsa-25-352-08	Axis Communications Camera Station Pro, Camera Station, and Device Manager	2025-12-18T07:00:00.000000Z	2025-12-18T07:00:00.000000Z
icsa-25-352-07	Rockwell Automation Micro820, Micro850, Micro870	2025-12-18T07:00:00.000000Z	2025-12-18T07:00:00.000000Z
icsa-25-352-06	Advantech WebAccess/SCADA	2025-12-18T07:00:00.000000Z	2025-12-18T07:00:00.000000Z
icsa-25-352-04	Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products	2025-12-18T07:00:00.000000Z	2025-12-18T07:00:00.000000Z
icsa-25-352-03	National Instruments LabView	2025-12-18T07:00:00.000000Z	2025-12-18T07:00:00.000000Z
icsa-25-352-01	Inductive Automation Ignition	2025-12-18T07:00:00.000000Z	2025-12-18T07:00:00.000000Z
va-25-352-01	BullWall Ransomware Containment and Server Intrusion Protection multiple vulnerabilities	2025-12-18T00:00:00Z	2025-12-18T00:00:00Z
icsa-25-350-04	Mitsubishi Electric GT Designer3	2025-12-16T07:00:00.000000Z	2025-12-16T07:00:00.000000Z
icsa-25-350-03	Hitachi Energy AFS, AFR and AFF Series	2025-12-16T07:00:00.000000Z	2025-12-16T07:00:00.000000Z
icsa-25-350-02	Johnson Controls PowerG, IQPanel and IQHub	2025-12-16T07:00:00.000000Z	2025-12-16T07:00:00.000000Z
icsa-25-350-01	Güralp Systems Fortimus Series, Minimus Series, and Certimus Series	2025-12-16T07:00:00.000000Z	2025-12-16T07:00:00.000000Z
va-25-345-01	CISA Software Acquisition Guide Supplier Response Web Tool XSS	2025-12-12T20:27:47Z	2025-12-12T20:27:47Z
icsma-25-345-02	Varex Imaging Panoramic Dental Imaging Software	2025-12-11T07:00:00.000000Z	2025-12-11T07:00:00.000000Z
icsma-25-345-01	Grassroots DICOM (GDCM)	2025-12-11T07:00:00.000000Z	2025-12-11T07:00:00.000000Z
icsa-25-345-10	OpenPLC_V3	2025-12-11T07:00:00.000000Z	2025-12-11T07:00:00.000000Z
icsa-25-345-03	AzeoTech DAQFactory (Update A)	2025-12-11T07:00:00.000000Z	2026-01-12T07:00:00.000000Z
icsa-25-345-02	Johnson Controls iSTAR Ultra	2025-12-11T07:00:00.000000Z	2025-12-11T07:00:00.000000Z

ID	Description	Published	Updated
cisco-sa-voice-rce-morhqy4b	Cisco Unified Communications Products Remote Code Execution Vulnerability	2026-01-21T16:00:00+00:00	2026-01-21T16:00:00+00:00
cisco-sa-ucce-pcce-xss-2jvyg3ud	Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities	2026-01-21T16:00:00+00:00	2026-01-21T16:00:00+00:00
cisco-sa-intersight-privesc-p6tbm6jk	Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability	2026-01-21T16:00:00+00:00	2026-01-21T16:00:00+00:00
cisco-sa-iec6400-pem5uq7v	Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability	2026-01-21T16:00:00+00:00	2026-01-21T16:00:00+00:00
cisco-sa-ise-xss-9tdh2kx	Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability	2026-01-15T16:00:00+00:00	2026-01-15T16:00:00+00:00
cisco-sa-ise-xss-964cdxw5	Cisco Identity Services Engine Cross-Site Scripting Vulnerability	2026-01-15T16:00:00+00:00	2026-01-15T16:00:00+00:00
cisco-sa-epnm-pi-stored-xss-gekx8ywk	Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability	2026-01-15T16:00:00+00:00	2026-01-15T16:00:00+00:00
cisco-sa-snort3-dcerpc-vulns-j9hnf4th	Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities	2026-01-07T16:00:00+00:00	2026-01-07T16:00:00+00:00
cisco-sa-ise-xxe-jwsbsdkt	Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability	2026-01-07T16:00:00+00:00	2026-01-07T16:00:00+00:00
cisco-sa-sma-attack-n9bf4	Reports About Cyberattacks Against Cisco Secure Email Gateway And Cisco Secure Email and Web Manager	2025-12-17T16:00:00+00:00	2026-01-15T16:01:43+00:00
cisco-sa-react-flight-tyw32ddb	Remote Code Execution Vulnerability in React and Next.js Frameworks: December 2025	2025-12-04T16:00:00+00:00	2025-12-17T22:37:17+00:00
cisco-sa-privesc-catc-ryjreelu	Cisco Catalyst Center Privilege Escalation Vulnerability	2025-11-13T16:00:00+00:00	2025-11-13T16:00:00+00:00
cisco-sa-dnac-xss-wextvz59	Cisco Catalyst Center Cross-Site Scripting Vulnerability	2025-11-13T16:00:00+00:00	2025-11-13T16:00:00+00:00
cisco-sa-dnac-ci-zwlqvswt	Cisco Catalyst Center REST API Command Injection Vulnerability	2025-11-13T16:00:00+00:00	2025-11-13T16:00:00+00:00
cisco-sa-catc-priv-esc-vs8eecux	Cisco Catalyst Center Virtual Appliance Privilege Escalation Vulnerability	2025-11-13T16:00:00+00:00	2025-11-13T16:00:00+00:00
cisco-sa-catc-open-redirect-3w5bk3je	Cisco Catalyst Center Virtual Appliance HTTP Open Redirect Vulnerability	2025-11-13T16:00:00+00:00	2025-11-13T16:00:00+00:00
cisco-sa-ise-radsupress-dos-8yf3jthh	Cisco Identity Services Engine RADIUS Suppression Denial of Service Vulnerability	2025-11-05T16:00:00+00:00	2025-11-05T16:00:00+00:00
cisco-sa-ise-multiple-vulns-o9beswjh	Cisco Identity Services Engine Reflected Cross-Site Scripting and Information Disclosure Vulnerabilities	2025-11-05T16:00:00+00:00	2025-12-04T14:23:54+00:00
cisco-sa-cc-unauth-rce-qen8h7mq	Cisco Unified Contact Center Express Remote Code Execution Vulnerabilities	2025-11-05T16:00:00+00:00	2025-11-13T12:48:42+00:00
cisco-sa-cc-mult-vuln-gk4tfxsn	Multiple Cisco Contact Center Products Vulnerabilities	2025-11-05T16:00:00+00:00	2025-11-18T14:49:09+00:00
cisco-sa-snort3-mime-vulns-ttl8pgvh	Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerabilities	2025-10-15T16:00:00+00:00	2025-10-15T16:00:00+00:00
cisco-sa-roomos-inf-disc-qggsbxam	Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability	2025-10-15T16:00:00+00:00	2025-10-15T16:00:00+00:00
cisco-sa-phone-dos-fpyjlv7a	Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Vulnerabilities	2025-10-15T16:00:00+00:00	2025-10-15T16:00:00+00:00
cisco-sa-cv-xss-rwrakaj9	Cisco Cyber Vision Center Stored Cross-Site Scripting Vulnerabilities	2025-10-01T16:00:00+00:00	2025-10-01T16:00:00+00:00
cisco-sa-cucm-stored-xss-fnj66yly	Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability	2025-10-01T16:00:00+00:00	2025-10-01T16:00:00+00:00
cisco-sa-http-code-exec-wmfp3h3o	Cisco Secure Firewall Adaptive Security Appliance Software, Secure Firewall Threat Defense Software, IOS Software, IOS XE Software, and IOS XR Software Web Services Remote Code Execution Vulnerability	2025-09-25T16:00:00+00:00	2025-11-06T15:50:51+00:00
cisco-sa-asaftd-webvpn-z5xp8eub	Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability	2025-09-25T16:00:00+00:00	2025-11-06T15:50:54+00:00
cisco-sa-asaftd-webvpn-yrootuw	Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Unauthorized Access Vulnerability	2025-09-25T16:00:00+00:00	2025-11-06T15:50:55+00:00
cisco-sa-webui-xss-vwydgjou	Cisco IOS XE Software Web Authentication Reflected Cross-Site Scripting Vulnerability	2025-09-24T16:00:00+00:00	2025-09-26T16:35:50+00:00
cisco-sa-snmpwred-x3mjyf5m	Cisco IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability	2025-09-24T16:00:00+00:00	2025-09-24T16:00:00+00:00

ID	Description	Published	Updated
sca-2026-0003	Vulnerability affecting SICK nanoScan3 and microScan3	2026-01-26T14:00:00.000Z	2026-01-26T14:00:00.000Z
sca-2026-0002	Vulnerabilities affecting SICK Incoming Goods Suite	2026-01-15T14:00:00.000Z	2026-01-22T19:00:00.000Z
sca-2026-0001	Vulnerabilities affecting SICK TDC-X401GL	2026-01-15T14:00:00.000Z	2026-01-15T14:00:00.000Z
sca-2025-0014	CodeMeter vulnerablity affects SICK CODE-LOC and SICK LIDAR-LOC	2025-11-03T11:00:00.000Z	2025-11-03T14:00:00.000Z
sca-2025-0013	Vulnerabilities affecting SICK TLOC100-100	2025-10-27T14:00:00.000Z	2025-11-11T14:00:00.000Z
sca-2025-0012	Sudo vulnerability affects SICK SID products	2025-10-27T11:00:00.000Z	2025-10-27T14:00:00.000Z
sca-2025-0011	Vulnerabilities affecting Endress+Hauser SSG-E210GC	2025-10-02T13:00:00.000Z	2025-10-02T13:00:00.000Z
sca-2025-0010	Multiple vulnerabilities in SICK Enterprise Analytics and SICK Logistic Analytics Products	2025-10-02T13:00:00.000Z	2025-10-02T13:00:00.000Z
sca-2025-0009	Vulnerabilities affecting SICK TDC-E210GC	2025-08-01T13:00:00.000Z	2025-08-01T13:00:00.000Z
sca-2025-0008	Multiple vulnerabilities in Endress+Hauser MEAC300-FNADE4	2025-07-03T13:00:00.000Z	2025-07-03T13:00:00.000Z
sca-2025-0007	Multiple vulnerabilities in SICK Field Analytics and SICK Media Server	2025-06-12T13:00:00.000Z	2025-06-12T13:00:00.000Z
sca-2025-0006	Vulnerability affecting picoScan and multiScan	2025-04-28T13:00:00.000Z	2025-04-28T13:00:00.000Z
sca-2025-0005	Vulnerabilities in SICK Flexi Compact	2025-04-28T10:00:00.000Z	2025-04-28T10:00:00.000Z
sca-2025-0004	Critical vulnerabilities in SICK DL100-2xxxxxxx	2025-03-14T11:00:00.000Z	2025-03-14T11:00:00.000Z
sca-2025-0003	FreeRTOS Vulnerabilities have no impact on SICK Products	2025-02-28T00:00:00.000Z	2025-05-20T11:00:00.000Z
sca-2025-0001	Multiple vulnerabilities in SICK MEAC300	2025-02-14T14:00:00.000Z	2025-02-21T14:00:00.000Z
sca-2025-0002	Vulnerability in SICK Lector8xx and SICK InspectorP8xx	2025-02-14T10:19:00.000Z	2025-02-14T10:19:00.000Z
sca-2024-0007	Vulnerability in SICK OLM	2024-12-31T00:00:00.000Z	2024-12-31T00:00:00.000Z
sca-2024-0006	Critical vulnerabilities in SICK InspectorP61x, InspectorP62x and TiM3xx	2024-12-06T00:00:00.000Z	2024-12-06T00:00:00.000Z
sca-2024-0005	Vulnerability in SICK Incoming Goods Suite	2024-11-19T00:00:00.000Z	2024-11-19T00:00:00.000Z
sca-2024-0004	Third party vulnerabilities in SICK CDE-100	2024-11-07T12:00:00.000Z	2024-11-07T12:00:00.000Z
sca-2024-0003	Critical vulnerability in multiple SICK products	2024-10-17T13:00:00.000Z	2024-10-17T13:00:00.000Z
sca-2024-0002	Vulnerability in SICK MSC800	2024-09-11T23:00:00.000Z	2024-09-11T23:00:00.000Z
sca-2024-0001	Vulnerability in SICK Logistics Analytics Products and SICK Field Analytics	2024-01-29T00:00:00.000Z	2024-01-29T00:00:00.000Z
sca-2023-0011	Vulnerability in multiple SICK Flexi Soft Gateways	2023-10-23T11:00:00.000Z	2023-10-23T11:00:00.000Z
sca-2023-0010	Vulnerabilities in SICK Application Processing Unit	2023-10-09T11:00:00.000Z	2023-10-09T11:00:00.000Z
sca-2023-0008	Vulnerability in SICK SIM1012	2023-09-29T13:00:00.000Z	2023-09-29T13:00:00.000Z
sca-2023-0009	Vulnerability in Wibu-Systems CodeMeter Runtime affects multiple SICK products	2023-09-29T10:00:00.000Z	2023-09-29T10:00:00.000Z
sca-2023-0007	Vulnerabilities in SICK LMS5xx	2023-08-25T11:00:00.000Z	2023-08-25T11:00:00.000Z
sca-2023-0006	Vulnerabilities in SICK ICR890-4	2023-07-10T13:00:00.000Z	2023-07-10T13:00:00.000Z

ID	Description	Published	Updated
nn-2025:15-01	Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0	2025-12-18T11:00:00.000Z	2025-12-18T11:00:00.000Z
nn-2025:14-01	HTML injection in Asset List in Guardian/CMC before 25.5.0	2025-12-18T11:00:00.000Z	2025-12-18T11:00:00.000Z
nn-2025:13-01	Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0	2025-12-18T11:00:00.000Z	2025-12-18T11:00:00.000Z
nn-2025:12-01	HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0	2025-12-18T11:00:00.000Z	2025-12-18T11:00:00.000Z
nn-2025:11-01	Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0	2025-11-25T11:00:00.000Z	2025-11-26T11:00:00.000Z
nn-2025:9-01	Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0	2025-10-07T11:00:00.000Z	2025-10-07T11:00:00.000Z
nn-2025:8-01	Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0	2025-10-07T11:00:00.000Z	2025-10-07T11:00:00.000Z
nn-2025:7-01	Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0	2025-10-07T11:00:00.000Z	2025-10-07T11:00:00.000Z
nn-2025:6-01	Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0	2025-10-07T11:00:00.000Z	2025-10-07T11:00:00.000Z
nn-2025:5-01	Incorrect authorization for CLI in Guardian/CMC before 25.2.0	2025-10-07T11:00:00.000Z	2025-10-07T11:00:00.000Z
nn-2025:4-01	Client-side path traversal in Guardian/CMC before 25.2.0	2025-10-07T11:00:00.000Z	2025-10-07T11:00:00.000Z
nn-2025:10-01	Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0	2025-10-07T11:00:00.000Z	2025-10-07T11:00:00.000Z
nn-2025:3-01	Incorrect authorization for traces request/download in CMC before 25.1.0	2025-08-26T11:00:00.000Z	2025-08-26T11:00:00.000Z
nn-2025:2-01	Privilege escalation in Guardian/CMC before 24.6.0	2025-06-10T11:00:00.000Z	2025-06-10T11:00:00.000Z
nn-2025:1-01	Authenticated RCE in update functionality in Guardian/CMC before 24.6.0	2025-06-10T11:00:00.000Z	2025-06-10T11:00:00.000Z
nn-2024_1-01	DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1	2024-04-10T11:00:00.000Z	2024-04-10T11:00:00.000Z
nn-2024:1-01	DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1	2024-04-10T11:00:00.000Z	2024-04-10T11:00:00.000Z
nn-2023_17-01	Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1	2024-04-10T11:00:00.000Z	2024-04-11T11:00:00.000Z
nn-2023:17-01	Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1	2024-04-10T11:00:00.000Z	2024-04-11T11:00:00.000Z
nn-2023_12-01	Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0	2024-01-15T11:00:00.000Z	2024-01-16T11:00:00.000Z
nn-2023:12-01	Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0	2024-01-15T11:00:00.000Z	2024-01-16T11:00:00.000Z
nn-2023_9-01	Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0	2023-09-18T11:00:00.000Z	2023-11-16T11:00:00.000Z
nn-2023_11-01	SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0	2023-09-18T11:00:00.000Z	2023-11-16T11:00:00.000Z
nn-2023_10-01	DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0	2023-09-18T11:00:00.000Z	2023-11-16T11:00:00.000Z
nn-2023:9-01	Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0	2023-09-18T11:00:00.000Z	2023-11-16T11:00:00.000Z
nn-2023:11-01	SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0	2023-09-18T11:00:00.000Z	2023-11-16T11:00:00.000Z
nn-2023:10-01	DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0	2023-09-18T11:00:00.000Z	2023-11-16T11:00:00.000Z
nn-2023_8-01	Session Fixation in Guardian/CMC before 22.6.2	2023-08-09T11:00:00.000Z	2023-11-16T11:00:00.000Z
nn-2023_7-01	DoS via SAML configuration in Guardian/CMC before 22.6.2	2023-08-09T11:00:00.000Z	2023-11-16T11:00:00.000Z
nn-2023_6-01	Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2	2023-08-09T11:00:00.000Z	2023-11-16T11:00:00.000Z

ID	Description	Published	Updated
oxdc-adv-2025-0001	OX Dovecot Pro Security Advisory OXDC-ADV-2025-0001	2025-10-31T00:00:00+00:00	2025-11-27T00:00:00+00:00
oxas-adv-2025-0003	OX App Suite Security Advisory OXAS-ADV-2025-0003	2025-09-24T00:00:00+02:00	2025-11-27T00:00:00+00:00
oxas-adv-2025-0002	OX App Suite Security Advisory OXAS-ADV-2025-0002	2025-08-12T00:00:00+02:00	2025-10-31T00:00:00+00:00
oxas-adv-2025-0001	OX App Suite Security Advisory OXAS-ADV-2025-0001	2025-01-27T00:00:00+01:00	2025-04-07T00:00:00+00:00
oxdc-adv-2024-0003	OX Dovecot Pro Security Advisory OXDC-ADV-2024-0003	2024-09-10T00:00:00+02:00	2024-09-10T00:00:00+00:00
oxdc-adv-2024-0002	OX Dovecot Pro Security Advisory OXDC-ADV-2024-0002	2024-09-10T00:00:00+02:00	2024-09-10T00:00:00+00:00
oxdc-adv-2024-0001	OX Dovecot Pro Security Advisory OXDC-ADV-2024-0001	2024-09-02T00:00:00+02:00	2024-09-06T00:00:00+00:00
oxas-adv-2024-0005	OX App Suite Security Advisory OXAS-ADV-2024-0005	2024-07-08T00:00:00+02:00	2024-09-09T00:00:00+00:00
oxas-adv-2024-0004	OX App Suite Security Advisory OXAS-ADV-2024-0004	2024-06-13T00:00:00+02:00	2024-08-19T00:00:00+00:00
oxas-adv-2024-0003	OX App Suite Security Advisory OXAS-ADV-2024-0003	2024-04-24T00:00:00+02:00	2024-08-19T00:00:00+00:00
oxas-adv-2024-0002	OX App Suite Security Advisory OXAS-ADV-2024-0002	2024-03-06T00:00:00+01:00	2024-05-06T00:00:00+00:00
oxas-adv-2024-0001	OX App Suite Security Advisory OXAS-ADV-2024-0001	2024-02-08T00:00:00+01:00	2024-04-25T00:00:00+00:00
oxas-adv-2023-0007	OX App Suite Security Advisory OXAS-ADV-2023-0007	2023-12-11T00:00:00+01:00	2024-02-16T00:00:00+00:00
oxas-adv-2023-0006	OX App Suite Security Advisory OXAS-ADV-2023-0006	2023-09-25T00:00:00+02:00	2024-01-22T00:00:00+00:00
oxas-adv-2023-0005	OX App Suite Security Advisory OXAS-ADV-2023-0005	2023-09-19T00:00:00+02:00	2024-01-22T00:00:00+00:00
oxas-adv-2023-0004	OX App Suite Security Advisory OXAS-ADV-2023-0004	2023-08-01T00:00:00+02:00	2024-01-22T00:00:00+00:00
oxas-adv-2023-0003	OX App Suite Security Advisory OXAS-ADV-2023-0003	2023-05-02T00:00:00+02:00	2024-01-22T00:00:00+00:00
oxas-adv-2023-0002	OX App Suite Security Advisory OXAS-ADV-2023-0002	2023-03-20T00:00:00+01:00	2024-01-22T00:00:00+00:00
oxas-adv-2023-0001	OX App Suite Security Advisory OXAS-ADV-2023-0001	2023-02-06T00:00:00+01:00	2024-01-22T00:00:00+00:00
oxas-adv-2022-0002	OX App Suite Security Advisory OXAS-ADV-2022-0002	2022-11-02T00:00:00+01:00	2024-01-22T00:00:00+00:00
oxas-adv-2022-0001	OX App Suite Security Advisory OXAS-ADV-2022-0001	2022-08-10T00:00:00+02:00	2024-01-22T00:00:00+00:00

ID	Description	Published	Updated
msrc_cve-2026-24307	M365 Copilot Information Disclosure Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-24306	Azure Front Door Elevation of Privilege Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-24305	Azure Entra ID Elevation of Privilege Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-24304	Azure Resource Manager Elevation of Privilege Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-21524	Azure Data Explorer Information Disclosure Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-21521	Word Copilot Information Disclosure Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-21520	Copilot Studio Information Disclosure Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-21509	Microsoft Office Security Feature Bypass Vulnerability	2026-01-13T08:00:00.000Z	2026-01-26T08:00:00.000Z
msrc_cve-2026-21265	Secure Boot Certificate Expiration Security Feature Bypass Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-21264	Microsoft Account Spoofing Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-21227	Azure Logic Apps Elevation of Privilege Vulnerability	2026-01-13T08:00:00.000Z	2026-01-22T08:00:00.000Z
msrc_cve-2026-21226	Azure Core shared client library for Python Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-21224	Azure Connected Machine Agent Elevation of Privilege Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-21223	Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability	2026-01-13T08:00:00.000Z	2026-01-16T08:00:00.000Z
msrc_cve-2026-21221	Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability	2026-01-13T08:00:00.000Z	2026-01-20T08:00:00.000Z
msrc_cve-2026-21219	Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20965	Windows Admin Center Elevation of Privilege Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20963	Microsoft SharePoint Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20962	Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20960	Microsoft Power Apps Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-16T08:00:00.000Z
msrc_cve-2026-20959	Microsoft SharePoint Server Spoofing Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20958	Microsoft SharePoint Information Disclosure Vulnerability	2026-01-13T08:00:00.000Z	2026-01-14T08:00:00.000Z
msrc_cve-2026-20957	Microsoft Excel Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20956	Microsoft Excel Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20955	Microsoft Excel Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20953	Microsoft Office Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20952	Microsoft Office Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20951	Microsoft SharePoint Server Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20950	Microsoft Excel Remote Code Execution Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
msrc_cve-2026-20949	Microsoft Excel Security Feature Bypass Vulnerability	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z

ID	Description	Published	Updated
sa25p005	B&R Automation Runtime Improper Handling of Flooding conditions on ANSL Server	2026-01-19T00:30:00.000Z	2026-01-19T00:30:00.000Z
sa25p004	Automation Studio Insufficient Server Certificate Validation	2026-01-19T00:30:00.000Z	2026-01-19T00:30:00.000Z
9akk108472a1331	ABB Ability™ OPTIMAX® Authentication Bypass in Single-Sign On with Azure Active Directory	2026-01-16T00:30:00.000Z	2026-01-16T00:30:00.000Z
2crt000009	WebPro SNMP Card PowerValue Multiple Vulnerabilities	2026-01-07T00:30:00.000Z	2026-01-07T00:30:00.000Z
4hzm000603	ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (VLC)	2025-11-27T00:30:00.000Z	2025-11-28T00:30:00.000Z
7paa022088	Edgenius Management Portal Authentication Bypass	2025-11-20T00:30:00.000Z	2025-11-20T00:30:00.000Z
2nga002813	PCM600 SharpZip library vulnerability	2025-11-03T00:30:00.000Z	2025-11-03T00:30:00.000Z
9akk108471a8948	Terra AC wallbox Heap Memory Corruption Vulnerability	2025-10-20T00:30:00.000Z	2025-10-21T00:30:00.000Z
4tz00000006007	ALS-mini-S4/S8 IP Missing Authentication Vulnerability and its Mitigations	2025-10-20T00:30:00.000Z	2025-10-23T00:30:00.000Z
4tz00000006008	LVS MConfig Insecure memory handling	2025-10-08T00:30:00.000Z	2025-10-08T00:30:00.000Z
sa25p003	B&R Automation Runtime Vulnerabilities in System Diagnostic Manager (SDM)	2025-10-07T00:30:00.000Z	2025-10-14T00:30:00.000Z
sa25p002	B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)	2025-10-07T00:30:00.000Z	2025-10-07T00:30:00.000Z
9akk108471a7808	EIBPORT Reflected XSS	2025-10-07T00:30:00.000Z	2025-10-07T00:30:00.000Z
9akk108471a8107	Terra AC wallbox Heap Memory Corruption Vulnerability	2025-09-16T00:30:00.000Z	2025-11-28T08:00:00.000Z
9akk108471a7121	FLXeon Controllers Multiple vulnerabilities	2025-09-09T00:30:00.000Z	2025-09-18T00:30:00.000Z
2nga002743	ABB AbilityTM zenon Remote Transport Vulnerability	2025-08-12T00:30:00.000Z	2025-08-12T00:30:00.000Z
9akk108471a4462	ELSB/BLBA ASPECT advisory several CVEs	2025-08-11T00:30:00.000Z	2025-09-04T00:30:00.000Z
3adr011432	AC500 V2 Buffer overread on Modbus protocol	2025-07-23T00:30:00.000Z	2025-07-23T00:30:00.000Z
9akk108471a4556	Busch-Welcome® 2 wire Door opener actuator by default in compatibility mode.	2025-07-21T00:30:00.000Z	2025-07-21T00:30:00.000Z
9akk108471a3623	RMC - 100 Vulnerabilities in web UI (REST Interface)	2025-07-03T00:30:00.000Z	2025-08-18T00:30:00.000Z
2crt000008	Lite Panel Pro Vulnerability in Session Management	2025-06-26T00:30:00.000Z	2025-06-26T00:30:00.000Z
9akk108471a1621	EIBPORT Session Management Fail	2025-06-02T00:30:00.000Z	2025-06-04T00:30:00.000Z
9akk108470a8948	ELSB/Home Solutions Outdated SW Components in ABB Welcome IP-Gateway.	2025-05-29T00:30:00.000Z	2025-06-05T00:30:00.000Z
9akk108471a0021	ELSB/BLBA ASPECT advisory several CVEs	2025-05-22T00:30:00.000Z	2025-05-23T10:30:00.000Z
2crt000006	ANC – ABB Network Card Multiple vulnerabilities in ANC	2025-04-30T00:30:00.000Z	2025-04-30T00:30:00.000Z
3adr011407	ABB Automation Builder Vulnerabilities in user management and access control	2025-04-30T00:00:00.000Z	2025-07-25T00:00:00.000Z
2crt000007	Ekip Com IEC61850 Vulnerability in 3rd Party Library	2025-04-29T00:30:00.000Z	2025-04-29T00:30:00.000Z
3kxg200000r4801	CoreSense™ HM and CoreSense™ M10 File Path Traversal Vulnerability	2025-04-16T00:30:00.000Z	2025-10-20T00:30:00.000Z
9akk108470a9989	ABB MV Drives Affected by CODESYS RTS (Runtime System) Vulnerabilities	2025-04-10T08:30:00.000Z	2025-04-10T08:30:00.000Z
2nga002579	ABB Arctic communication solution ARM600 Vulnerabilities	2025-04-07T10:30:00.000Z	2025-04-07T10:30:00.000Z

ID	Description	Updated
var-202407-2188	Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digita…	2024-07-23T22:46:32.699000Z
var-202406-3119	Beijing StarNet Ruijie Network Technology Co., Ltd. EG3220 is a new generation of multi-s…	2024-07-23T22:46:22.685000Z
var-202407-1740	NBR6135-E is a router. Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6135-E ha…	2024-07-23T22:46:18.378000Z
var-202407-1417	Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digita…	2024-07-23T22:46:07.784000Z
var-202407-1103	Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digita…	2024-07-23T22:46:01.992000Z
var-202407-0957	WinCC is a SCADA system suitable for all walks of life. It can access devices from mobile…	2024-07-23T22:45:59.391000Z
var-202407-0819	SIMATIC S7-1500 is a modular control system suitable for various automation applications …	2024-07-23T22:45:56.958000Z
var-202407-0818	NBR6210-E is a router product. Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6…	2024-07-23T22:45:56.946000Z
var-202407-0779	Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root. Tenda of …	2024-07-23T22:45:56.150000Z
var-202407-0778	Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnera…	2024-07-23T22:45:56.131000Z
var-202407-0745	Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnera…	2024-07-23T22:45:55.498000Z
var-202305-1479	D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution …	2024-07-23T22:45:09.335000Z
var-202108-1158	A race condition was addressed with improved locking. This issue is fixed in macOS Monter…	2024-07-23T22:44:06.976000Z
var-201109-0089	Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used…	2024-07-23T22:43:49.590000Z
var-200702-0378	Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 …	2024-07-23T22:43:25.614000Z
var-201011-0225	Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent …	2024-07-23T22:41:43.584000Z
var-201112-0297	Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Ne…	2024-07-23T22:41:20.004000Z
var-201507-0645	D-Link is an internationally renowned provider of network equipment and solutions, includ…	2024-07-23T22:41:18.832000Z
var-201803-1810	A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial …	2024-07-23T22:41:17.171000Z
var-201809-0087	WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vul…	2024-07-23T22:41:16.554000Z
var-200607-0396	Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) b…	2024-07-23T22:41:04.279000Z
var-201702-0423	An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft…	2024-07-23T22:40:53.160000Z
var-202305-1588	D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerabilit…	2024-07-23T22:40:05.297000Z
var-201112-0173	The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, …	2024-07-23T22:39:32.535000Z
var-201103-0371	SAP Crystal Reports Server is a complete reporting solution for creating, managing, and d…	2024-07-23T22:39:32.874000Z
var-201706-0017	In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClie…	2024-07-23T22:38:34.494000Z
var-202305-1520	D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vul…	2024-07-23T22:38:26.576000Z
var-202407-0490	A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP …	2024-07-23T22:38:24.768000Z
var-201810-0396	Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabili…	2024-07-23T22:37:44.850000Z
var-202001-0833	A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe mo…	2024-07-23T22:37:43.471000Z

ID	Description	Published	Updated
jvndb-2026-001732	Multiple Brother software installers may insecurely load Dynamic Link Libraries	2026-01-26T16:04+09:00	2026-01-26T16:04+09:00
jvndb-2026-000010	Command injection vulnerability in ASUS routers	2026-01-23T15:22+09:00	2026-01-23T15:22+09:00
jvndb-2026-001663	"iRMC S5/S6" implemented in PRIMERGY vulnerable to incorrect authorization	2026-01-23T11:29+09:00	2026-01-23T11:29+09:00
jvndb-2026-001662	Multiple vulnerabilities in Trend Micro Apex Central (January 2026)	2026-01-23T11:29+09:00	2026-01-23T11:29+09:00
jvndb-2026-000009	Installer of Fujitsu ServerView Agents for Windows may insecurely load Dynamic Link Libraries	2026-01-21T15:17+09:00	2026-01-21T15:17+09:00
jvndb-2026-000008	Ruijie Networks AP180 series vulnerable to OS command injection	2026-01-21T15:17+09:00	2026-01-21T15:17+09:00
jvndb-2026-001582	Security information for Hitachi Disk Array Systems	2026-01-21T12:11+09:00	2026-01-21T12:11+09:00
jvndb-2026-001578	ETERNUS SF vulnerable to insertion of sensitive information into maintenance data	2026-01-20T20:00+09:00	2026-01-20T20:00+09:00
jvndb-2026-001380	Multiple vulnerabilities in Canon Small Office Multifunction Printers and Laser Printers	2026-01-19T10:08+09:00	2026-01-19T10:08+09:00
jvndb-2026-000007	Multiple Vulnerabilities in TOA Network Cameras TRIFORA 3 series	2026-01-16T15:06+09:00	2026-01-16T15:06+09:00
jvndb-2026-000006	Chainlit vulnerable to improper access restriction	2026-01-14T17:03+09:00	2026-01-14T17:03+09:00
jvndb-2026-000005	Multiple vulnerabilities in EATON UPS Companion	2026-01-13T19:01+09:00	2026-01-13T19:01+09:00
jvndb-2026-000003	RICOH Streamline NX vulnerable to improper authorization	2026-01-09T18:17+09:00	2026-01-09T18:17+09:00
jvndb-2026-000004	The installers for multiple PIONEER products may insecurely load Dynamic Link Libraries	2026-01-08T13:47+09:00	2026-01-08T13:47+09:00
jvndb-2026-000001	Origin validation error vulnerability in Fujitsu Security Solution AuthConductor Client Basic V2	2026-01-07T14:19+09:00	2026-01-07T14:19+09:00
jvndb-2026-000002	Multiple vulnerabilities in multiple NEC branded projectors manufactured by Sharp Display Solutions, Ltd.	2026-01-07T14:10+09:00	2026-01-14T16:54+09:00
jvndb-2026-001001	Authentication bypass vulnerability in OpenBlocks series	2026-01-07T10:46+09:00	2026-01-07T10:46+09:00
jvndb-2025-022878	Media Player MP-01 vulnerable to Missing Authentication for Critical Function	2025-12-24T11:10+09:00	2026-01-15T11:10+09:00
jvndb-2025-022400	Ruijie Networks AP180 Series vulnerable to OS command injection	2025-12-19T12:33+09:00	2025-12-19T12:33+09:00
jvndb-2025-000118	GROWI vulnerable to cross-site request forgery	2025-12-17T13:04+09:00	2025-12-17T13:04+09:00
jvndb-2025-022062	Multiple vulnerabilities in CHOCO TEI WATCHER mini	2025-12-17T11:28+09:00	2025-12-17T11:28+09:00
jvndb-2025-000117	SEIKO EPSON printer Web Config vulnerable to stack-based buffer overflow	2025-12-16T15:31+09:00	2025-12-23T11:57+09:00
jvndb-2025-000115	QND vulnerable to privilege escalation	2025-12-11T14:33+09:00	2025-12-11T14:33+09:00
jvndb-2025-021305	Android App "Brother iPrint&Scan" improper use of an external cache directory	2025-12-09T17:25+09:00	2025-12-09T17:25+09:00
jvndb-2025-000114	ELECOM Clone for Windows registers a Windows service with an unquoted file path	2025-12-09T17:16+09:00	2025-12-09T17:16+09:00
jvndb-2025-000113	Multiple vulnerabilities in GroupSession	2025-12-08T17:48+09:00	2025-12-11T11:30+09:00
jvndb-2025-000116	GS Yuasa FULLBACK Manager Pro registers Windows services with unquoted file paths	2025-12-08T14:06+09:00	2025-12-08T14:06+09:00
jvndb-2025-000094	Multiple vulnerabilities in ABB Terra AC Wallbox	2025-12-05T14:12+09:00	2025-12-05T14:12+09:00
jvndb-2025-000112	Installer of INZONE Hub may insecurely load Dynamic Link Libraries	2025-11-28T13:36+09:00	2025-11-28T13:36+09:00
jvndb-2025-000111	SwitchBot Smart Video Doorbell vulnerable to active debug code	2025-11-26T14:35+09:00	2025-11-26T14:35+09:00

ID	Description	Updated

ID	Description	Published	Updated
suse-su-2026:0280-1	Security update for openvswitch	2026-01-23T15:33:56Z	2026-01-23T15:33:56Z
suse-su-2026:0279-1	Security update for libvirt	2026-01-23T15:09:05Z	2026-01-23T15:09:05Z
suse-su-2026:0278-1	Security update for the Linux Kernel	2026-01-23T15:08:32Z	2026-01-23T15:08:32Z
suse-su-2026:0274-1	Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)	2026-01-23T12:04:25Z	2026-01-23T12:04:25Z
suse-su-2026:0273-1	Security update for azure-cli-core	2026-01-23T11:26:43Z	2026-01-23T11:26:43Z
suse-su-2026:0270-1	Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)	2026-01-23T10:33:38Z	2026-01-23T10:33:38Z
suse-su-2026:0269-1	Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6)	2026-01-23T10:04:12Z	2026-01-23T10:04:12Z
suse-su-2026:0268-1	Security update for python	2026-01-23T09:40:47Z	2026-01-23T09:40:47Z
suse-su-2026:0267-1	Recommended update for kernel-firmware	2026-01-23T09:40:29Z	2026-01-23T09:40:29Z
suse-su-2026:0266-1	Security update for glib2	2026-01-23T08:55:04Z	2026-01-23T08:55:04Z
suse-su-2026:0265-1	Security update for libsoup	2026-01-23T07:08:44Z	2026-01-23T07:08:44Z
suse-su-2026:0264-1	Security update for glib2	2026-01-23T04:33:57Z	2026-01-23T04:33:57Z
suse-su-2026:0263-1	Security update for the Linux Kernel	2026-01-22T21:15:02Z	2026-01-22T21:15:02Z
suse-su-2026:0209-1	Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)	2026-01-21T18:03:57Z	2026-01-21T18:03:57Z
suse-su-2026:0206-1	Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5)	2026-01-21T15:38:11Z	2026-01-21T15:38:11Z
suse-su-2026:0202-1	Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)	2026-01-21T14:35:49Z	2026-01-21T14:35:49Z
suse-su-2026:0204-1	Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)	2026-01-21T13:33:35Z	2026-01-21T13:33:35Z
suse-su-2026:0203-1	Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)	2026-01-21T13:04:03Z	2026-01-21T13:04:03Z
suse-su-2026:0200-1	Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)	2026-01-21T12:17:09Z	2026-01-21T12:17:09Z
suse-su-2026:0188-1	Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)	2026-01-20T14:06:23Z	2026-01-20T14:06:23Z
suse-su-2026:0166-1	Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4)	2026-01-19T15:05:22Z	2026-01-19T15:05:22Z
suse-su-2026:0163-1	Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)	2026-01-19T14:34:24Z	2026-01-19T14:34:24Z
suse-su-2026:0155-1	Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)	2026-01-19T12:11:10Z	2026-01-19T12:11:10Z
suse-su-2026:0154-1	Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)	2026-01-19T12:08:42Z	2026-01-19T12:08:42Z
suse-su-2026:0153-1	Security update for MozillaThunderbird	2026-01-19T11:14:01Z	2026-01-19T11:14:01Z
suse-su-2026:0151-1	Security update for libsoup	2026-01-19T09:56:33Z	2026-01-19T09:56:33Z
suse-su-2026:0148-1	Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)	2026-01-17T12:04:20Z	2026-01-17T12:04:20Z
suse-su-2026:0133-1	Security update for python	2026-01-16T09:19:41Z	2026-01-16T09:19:41Z
suse-su-2026:0125-1	Security update for podman	2026-01-14T16:57:37Z	2026-01-14T16:57:37Z
suse-su-2026:0123-1	Security update for libsoup	2026-01-14T13:47:28Z	2026-01-14T13:47:28Z

ID	Description	Published	Updated
opensuse-su-2026:20099-1	Security update for coredns	2026-01-24T09:09:32Z	2026-01-24T09:09:32Z
opensuse-su-2026:20103-1	Security update for chromium	2026-01-24T01:00:21Z	2026-01-24T01:00:21Z
opensuse-su-2026:20097-1	Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)	2026-01-23T16:43:58Z	2026-01-23T16:43:58Z
opensuse-su-2026:10083-1	vlang-0.5-2.1 on GA media	2026-01-22T00:00:00Z	2026-01-22T00:00:00Z
opensuse-su-2026:10082-1	libsuricata8_0_3-8.0.3-1.1 on GA media	2026-01-22T00:00:00Z	2026-01-22T00:00:00Z
opensuse-su-2026:10081-1	libsubid-devel-4.19.2-2.1 on GA media	2026-01-22T00:00:00Z	2026-01-22T00:00:00Z
opensuse-su-2026:10080-1	bind-9.20.18-1.1 on GA media	2026-01-22T00:00:00Z	2026-01-22T00:00:00Z
opensuse-su-2026:20062-1	Security update for rust1.91, rust1.92	2026-01-19T19:43:51Z	2026-01-19T19:43:51Z
opensuse-su-2026:20064-1	Security update for ffmpeg-4	2026-01-19T14:05:53Z	2026-01-19T14:05:53Z
opensuse-su-2026:10065-1	harfbuzz-devel-12.3.0-2.1 on GA media	2026-01-18T00:00:00Z	2026-01-18T00:00:00Z
opensuse-su-2026:10064-1	go1.25-1.25.6-1.1 on GA media	2026-01-18T00:00:00Z	2026-01-18T00:00:00Z
opensuse-su-2026:10063-1	go1.24-1.24.12-1.1 on GA media	2026-01-18T00:00:00Z	2026-01-18T00:00:00Z
opensuse-su-2026:20057-1	Security update for docker	2026-01-17T13:20:26Z	2026-01-17T13:20:26Z
opensuse-su-2026:10057-1	chromedriver-144.0.7559.59-1.1 on GA media	2026-01-16T00:00:00Z	2026-01-16T00:00:00Z
opensuse-su-2026:10050-1	rke2-1.34-1.34.3+rke2r1-1.1 on GA media	2026-01-14T00:00:00Z	2026-01-14T00:00:00Z
opensuse-su-2026:10049-1	python311-urllib3-2.6.3-1.1 on GA media	2026-01-14T00:00:00Z	2026-01-14T00:00:00Z
opensuse-su-2026:10048-1	openCryptoki-3.26.0-3.1 on GA media	2026-01-14T00:00:00Z	2026-01-14T00:00:00Z
opensuse-su-2026:10047-1	libcryptopp-devel-8.9.0-6.1 on GA media	2026-01-14T00:00:00Z	2026-01-14T00:00:00Z
opensuse-su-2026:10046-1	MozillaFirefox-147.0-1.1 on GA media	2026-01-14T00:00:00Z	2026-01-14T00:00:00Z
opensuse-su-2026:10035-1	teleport-17.7.13-1.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10034-1	python311-Authlib-1.6.6-1.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10033-1	libtasn1-6-32bit-4.21.0-1.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10032-1	libpcap-devel-1.10.6-1.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10031-1	kubelogin-0.2.14-1.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10030-1	k6-1.5.0-1.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10029-1	istioctl-1.28.2-1.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10028-1	ffmpeg-7-7.1.3-1.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10027-1	ffmpeg-4-4.4.6-10.1 on GA media	2026-01-12T00:00:00Z	2026-01-12T00:00:00Z
opensuse-su-2026:10026-1	python311-urllib3-2.6.2-1.1 on GA media	2026-01-09T00:00:00Z	2026-01-09T00:00:00Z
opensuse-su-2026:10025-1	python311-aiohttp-3.13.3-1.1 on GA media	2026-01-09T00:00:00Z	2026-01-09T00:00:00Z

ID	Description	Published	Updated
sevd-2026-013-04	Multiple Vulnerabilities on EcoStruxure Power Build Rapsody	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
sevd-2026-013-03	Multiple Vulnerabilities on Zigbee Products	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
sevd-2026-013-02	Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
sevd-2026-013-01	Multiple Third-Party Vulnerabilities on ProLeiT Plant iT/Brewmaxx	2026-01-13T08:00:00.000Z	2026-01-13T08:00:00.000Z
sevd-2025-343-02	EcoStruxure™ Foxboro DCS Advisor	2025-12-09T08:00:00.000Z	2025-12-09T08:00:00.000Z
sevd-2025-343-01	EcoStruxure™ Foxboro DCS	2025-12-09T08:00:00.000Z	2025-12-09T08:00:00.000Z
sevd-2025-315-02	EcoStruxure™ Machine SCADA Expert & Pro-face BLUE Open Studio	2025-11-11T08:00:00.000Z	2025-11-11T08:00:00.000Z
sevd-2025-315-01	PowerChute™ Serial Shutdown	2025-11-11T08:00:00.000Z	2025-11-11T08:00:00.000Z
sevd-2025-287-01	EcoStruxure™ OPC UA Server Expert and EcoStruxure™ Modicon Communication Server	2025-10-14T07:00:00.000Z	2025-10-14T07:00:00.000Z
sevd-2025-252-02	Saitel DR & Saitel DP Remote Terminal Unit	2025-09-09T04:00:00.000Z	2025-09-09T04:00:00.000Z
sevd-2025-252-01	Multiple Altivar Process Drives and Communication Modules	2025-09-09T04:00:00.000Z	2025-12-09T08:00:00.000Z
sevd-2025-224-05	Modicon M340 Controller and Communication Modules	2025-08-12T04:00:00.000Z	2025-08-12T04:00:00.000Z
sevd-2025-224-04	EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation	2025-08-12T04:00:00.000Z	2025-09-09T04:00:00.000Z
sevd-2025-224-03	Schneider Electric Software Update	2025-08-12T04:00:00.000Z	2025-09-09T04:00:00.000Z
sevd-2025-224-02	EcoStruxure™ Power Monitoring Expert Software & EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO)	2025-08-12T04:00:00.000Z	2025-11-11T08:00:00.000Z
sevd-2025-224-01	Saitel DR & Saitel DP Remote Terminal Unit	2025-08-12T04:00:00.000Z	2025-11-11T08:00:00.000Z
sevd-2025-189-04	EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) with Advanced Reporting and Dashboards	2025-07-08T04:00:00.000Z	2025-07-08T04:00:00.000Z
sevd-2025-189-03	EcoStruxure™ Power Operation	2025-07-08T04:00:00.000Z	2025-07-08T04:00:00.000Z
sevd-2025-189-02	System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs	2025-07-08T04:00:00.000Z	2025-07-08T04:00:00.000Z
sevd-2025-189-01	EcoStruxure™ IT Data Center Expert	2025-07-08T04:00:00.000Z	2025-07-08T04:00:00.000Z
sevd-2025-161-03	EVLink WallBox	2025-06-10T04:00:00.000Z	2025-07-08T04:00:00.000Z
sevd-2025-161-02	Modicon Controllers M241/M251/M258/LMC058/M262	2025-06-10T04:00:00.000Z	2025-07-08T04:00:00.000Z
sevd-2025-161-01	Insight Home and Insight Facility	2025-06-10T04:00:00.000Z	2025-06-10T04:00:00.000Z
sevd-2025-133-05	Galaxy VS, Galaxy VL, Galaxy VXL	2025-05-13T04:00:00.000Z	2025-09-24T04:00:00.000Z
sevd-2025-133-04	Schneider Electric PrismaSeT Active - Wireless Panel Server	2025-05-13T04:00:00.000Z	2025-05-13T04:00:00.000Z
sevd-2025-133-03	EcoStruxure Power Build Rapsody	2025-05-13T04:00:00.000Z	2025-05-13T04:00:00.000Z
sevd-2025-133-02	Wiser Home Automation	2025-05-13T04:00:00.000Z	2025-05-13T04:00:00.000Z
sevd-2025-133-01	Modicon Controllers M241/M251/M258/LMC058	2025-05-13T04:00:00.000Z	2025-10-14T07:00:00.000Z
sevd-2025-098-02	Trio™ Q Licensed Data Radios	2025-04-08T04:00:00.000Z	2025-04-08T04:00:00.000Z
sevd-2025-098-01	ConneXium Network Manager Software	2025-04-08T04:00:00.000Z	2025-05-13T04:00:00.000Z

ID	Description	Published	Updated
cnvd-2026-00112	WordPress Real 3D FlipBook plugin跨站脚本漏洞	2025-12-30	2026-01-04
cnvd-2026-00111	WordPress User Submitted Posts plugin开放重定向漏洞	2025-12-30	2026-01-04
cnvd-2026-00110	WordPress Docket Cache plugin文件包含漏洞	2025-12-30	2026-01-04
cnvd-2026-00109	WordPress Diza plugin文件包含漏洞	2025-12-30	2026-01-04
cnvd-2026-00108	WordPress Chakra test plugin缺少授权漏洞	2025-12-30	2026-01-04
cnvd-2026-00107	WordPress Brave plugin缺少授权漏洞	2025-12-30	2026-01-04
cnvd-2026-00106	WordPress Brands for WooCommerce Plugin SQL注入漏洞	2025-12-30	2026-01-04
cnvd-2026-00105	WordPress Bold Timeline Lite plugin跨站脚本漏洞	2025-12-30	2026-01-04
cnvd-2026-00104	WordPress AutomatorWP plugin SQL注入漏洞	2025-12-30	2026-01-04
cnvd-2026-00103	WordPress Astra Widgets plugin跨站脚本漏洞	2025-12-30	2026-01-04
cnvd-2026-00012	Microsoft Azure Cosmos DB欺骗漏洞	2025-12-25	2026-01-04
cnvd-2026-00011	Microsoft Azure Cognitive Service for Language权限提升漏洞	2025-12-25	2026-01-04
cnvd-2026-00010	Microsoft Edge (Chromium-based)欺骗漏洞（CNVD-2026-00010）	2025-12-25	2026-01-04
cnvd-2026-00009	WordPress插件MasterStudy LMS Pro信息泄露漏洞	2025-12-25	2026-01-04
cnvd-2026-00008	WordPress插件Follow My Blog Post息泄露漏洞	2025-12-25	2026-01-04
cnvd-2026-00007	Apache StreamPark安全绕过漏洞	2025-12-25	2026-01-04
cnvd-2026-00006	Apache Fineract信息泄露漏洞（CNVD-2026-00006）	2025-12-25	2026-01-04
cnvd-2026-00005	Apache Fineract信息泄露漏洞	2025-12-25	2026-01-04
cnvd-2026-00004	Apache Fineract安全绕过漏洞	2025-12-25	2026-01-04
cnvd-2026-00003	Apache Airflow信息泄露漏洞（CNVD-2026-00003）	2025-12-25	2026-01-04
cnvd-2026-00002	WordPress插件myCred信息泄露漏洞	2025-12-25	2026-01-04
cnvd-2026-00001	WordPress插件Appointment Booking Calendar信息泄露漏洞	2025-12-25	2026-01-04
cnvd-2025-31388	Apache StreamPark弱算法漏洞	2025-12-25	2025-12-25
cnvd-2025-31387	Apache HugeGraph-Server反序列化漏洞	2025-12-25	2025-12-25
cnvd-2025-31336	WordPress Hide Email Address plugin跨站脚本漏洞	2025-12-22	2025-12-24
cnvd-2025-31335	WordPress HelloLeads CRM Form Shortcode plugin缺少授权漏洞	2025-12-22	2025-12-24
cnvd-2025-31334	WordPress Header Footer Script Adder plugin跨站脚本漏洞	2025-12-22	2025-12-25
cnvd-2025-31333	WordPress Grider for Elementor plugin缺少授权漏洞	2025-12-22	2025-12-25
cnvd-2025-31332	WordPress GPXpress plugin跨站脚本漏洞	2025-12-22	2025-12-25
cnvd-2025-31331	WordPress FX Currency Converter plugin跨站脚本漏洞	2025-12-22	2025-12-25

ID	Description	Published	Updated
certfr-2026-avi-0091	Multiples vulnérabilités dans Xen	2026-01-27T00:00:00.000000	2026-01-27T00:00:00.000000
certfr-2026-avi-0090	Multiples vulnérabilités dans Citrix XenServer	2026-01-27T00:00:00.000000	2026-01-27T00:00:00.000000
certfr-2026-avi-0089	Vulnérabilité dans Microsoft Office	2026-01-27T00:00:00.000000	2026-01-27T00:00:00.000000
certfr-2026-avi-0088	Vulnérabilité dans MariaDB	2026-01-27T00:00:00.000000	2026-01-27T00:00:00.000000
certfr-2026-avi-0087	Vulnérabilité dans les produits Belden	2026-01-26T00:00:00.000000	2026-01-26T00:00:00.000000
certfr-2026-avi-0086	Vulnérabilité dans CPython	2026-01-26T00:00:00.000000	2026-01-26T00:00:00.000000
certfr-2026-avi-0085	Multiples vulnérabilités dans NetApp Brocade SAN Navigator	2026-01-26T00:00:00.000000	2026-01-26T00:00:00.000000
certfr-2026-avi-0084	Vulnérabilité dans Microsoft Edge	2026-01-26T00:00:00.000000	2026-01-26T00:00:00.000000
certfr-2026-avi-0083	Multiples vulnérabilités dans les produits IBM	2026-01-23T00:00:00.000000	2026-01-23T00:00:00.000000
certfr-2026-avi-0082	Multiples vulnérabilités dans le noyau Linux de Red Hat	2026-01-23T00:00:00.000000	2026-01-23T00:00:00.000000
certfr-2026-avi-0081	Multiples vulnérabilités dans le noyau Linux de SUSE	2026-01-23T00:00:00.000000	2026-01-23T00:00:00.000000
certfr-2026-avi-0080	Vulnérabilité dans Broadcom Web Security Services Agent	2026-01-23T00:00:00.000000	2026-01-23T00:00:00.000000
certfr-2026-avi-0079	Vulnérabilité dans Python	2026-01-22T00:00:00.000000	2026-01-22T00:00:00.000000
certfr-2026-avi-0078	Vulnérabilité dans Ceph	2026-01-22T00:00:00.000000	2026-01-22T00:00:00.000000
certfr-2026-avi-0077	Multiples vulnérabilités dans les produits Symantec	2026-01-22T00:00:00.000000	2026-01-22T00:00:00.000000
certfr-2026-avi-0076	Vulnérabilité dans les produits Cisco	2026-01-22T00:00:00.000000	2026-01-22T00:00:00.000000
certfr-2026-avi-0075	Multiples vulnérabilités dans GitLab	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0074	Multiples vulnérabilités dans Oracle Weblogic	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0073	Multiples vulnérabilités dans Oracle Virtualization	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0072	Multiples vulnérabilités dans Oracle Systems	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0071	Multiples vulnérabilités dans Oracle PeopleSoft	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0070	Multiples vulnérabilités dans Oracle MySQL	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0069	Multiples vulnérabilités dans Oracle Java SE	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0068	Multiples vulnérabilités dans Oracle Database Server	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0067	Multiples vulnérabilités dans Python	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0066	Vulnérabilité dans Google Chrome	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0065	Multiples vulnérabilités dans les produits Atlassian	2026-01-21T00:00:00.000000	2026-01-21T00:00:00.000000
certfr-2026-avi-0064	Vulnérabilité Microsoft Power Apps	2026-01-19T00:00:00.000000	2026-01-19T00:00:00.000000
certfr-2026-avi-0063	Multiples vulnérabilités dans Microsoft Edge	2026-01-19T00:00:00.000000	2026-01-19T00:00:00.000000
certfr-2026-avi-0062	Vulnérabilité dans Mattermost Desktop App	2026-01-19T00:00:00.000000	2026-01-19T00:00:00.000000

ID	Description	Published	Updated
certfr-2025-ale-014	[MàJ] Vulnérabilité dans React Server Components	2025-12-05T00:00:00.000000	2025-12-08T00:00:00.000000
CERTFR-2025-ALE-014	[MàJ] Vulnérabilité dans React Server Components	2025-12-05T00:00:00.000000	2025-12-08T00:00:00.000000
certfr-2025-ale-013	[MàJ] Multiples vulnérabilités dans Cisco ASA et FTD	2025-09-25T00:00:00.000000	2025-10-06T00:00:00.000000
CERTFR-2025-ALE-013	[MàJ] Multiples vulnérabilités dans Cisco ASA et FTD	2025-09-25T00:00:00.000000	2025-10-06T00:00:00.000000
certfr-2025-ale-012	Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway	2025-08-26T00:00:00.000000	2025-09-26T00:00:00.000000
CERTFR-2025-ALE-012	Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway	2025-08-26T00:00:00.000000	2025-09-26T00:00:00.000000
certfr-2025-ale-011	Incidents de sécurité dans les pare-feux SonicWall	2025-08-05T00:00:00.000000	2025-08-18T00:00:00.000000
CERTFR-2025-ALE-011	Incidents de sécurité dans les pare-feux SonicWall	2025-08-05T00:00:00.000000	2025-08-18T00:00:00.000000
certfr-2025-ale-010	[MàJ] Multiples vulnérabilités dans Microsoft SharePoint	2025-07-21T00:00:00.000000	2025-08-26T00:00:00.000000
CERTFR-2025-ALE-010	[MàJ] Multiples vulnérabilités dans Microsoft SharePoint	2025-07-21T00:00:00.000000	2025-08-26T00:00:00.000000
certfr-2025-ale-009	Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway	2025-07-01T00:00:00.000000	2025-07-17T00:00:00.000000
CERTFR-2025-ALE-009	Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway	2025-07-01T00:00:00.000000	2025-07-17T00:00:00.000000
certfr-2025-ale-008	[MàJ] Vulnérabilité dans Roundcube	2025-06-05T00:00:00.000000	2025-07-21T00:00:00.000000
CERTFR-2025-ALE-008	[MàJ] Vulnérabilité dans Roundcube	2025-06-05T00:00:00.000000	2025-07-21T00:00:00.000000
certfr-2025-ale-007	Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (EPMM)	2025-05-14T00:00:00.000000	2025-06-24T00:00:00.000000
CERTFR-2025-ALE-007	Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (EPMM)	2025-05-14T00:00:00.000000	2025-06-24T00:00:00.000000
certfr-2025-ale-006	Vulnérabilité dans les produits Fortinet	2025-05-13T00:00:00.000000	2025-06-24T00:00:00.000000
CERTFR-2025-ALE-006	Vulnérabilité dans les produits Fortinet	2025-05-13T00:00:00.000000	2025-06-24T00:00:00.000000
certfr-2025-ale-002	[MàJ] Vulnérabilité dans les produits Fortinet	2025-05-07T00:00:00.000000	2025-01-14T00:00:00.000000
CERTFR-2025-ALE-002	[MàJ] Vulnérabilité dans les produits Fortinet	2025-05-07T00:00:00.000000	2025-01-14T00:00:00.000000
certfr-2025-ale-005	Vulnérabilité dans SAP NetWeaver	2025-04-28T00:00:00.000000	2025-06-24T00:00:00.000000
CERTFR-2025-ALE-005	Vulnérabilité dans SAP NetWeaver	2025-04-28T00:00:00.000000	2025-06-24T00:00:00.000000
certfr-2025-ale-004	Activités de post-exploitation dans Fortinet FortiGate	2025-04-11T00:00:00.000000	2025-08-07T00:00:00.000000
CERTFR-2025-ALE-004	Activités de post-exploitation dans Fortinet FortiGate	2025-04-11T00:00:00.000000	2025-08-07T00:00:00.000000
certfr-2025-ale-003	[MàJ] Vulnérabilité dans les produits Ivanti	2025-04-04T00:00:00.000000	2025-04-11T00:00:00.000000
CERTFR-2025-ALE-003	[MàJ] Vulnérabilité dans les produits Ivanti	2025-04-04T00:00:00.000000	2025-04-11T00:00:00.000000
certfr-2024-ale-013	Exploitations de vulnérabilités dans Ivanti Cloud Services Appliance (CSA)	2025-03-31T00:00:00.000000	2024-10-25T00:00:00.000000
CERTFR-2024-ALE-013	Exploitations de vulnérabilités dans Ivanti Cloud Services Appliance (CSA)	2025-03-31T00:00:00.000000	2024-10-25T00:00:00.000000
certfr-2025-ale-001	[MàJ] Vulnérabilité dans les produits Ivanti	2025-01-09T00:00:00.000000	2025-04-01T00:00:00.000000
CERTFR-2025-ALE-001	[MàJ] Vulnérabilité dans les produits Ivanti	2025-01-09T00:00:00.000000	2025-04-01T00:00:00.000000

ID	CVSS	Description	Vendor	Product	Published	Updated
GCVE-1-2026-0002	10 (4.0)	Heap-buffer-overflow in EXIF writer for extra IFD tags	ffmpeg	ffmpeg	2026-01-02T19:50:00.000Z	2026-01-02T20:05:27.269877Z
GCVE-1-2026-0001	N/A	Bundle reference to gpg.fail	gnupg	gnupg	2026-01-02T10:20:00.000Z	2026-01-02T13:31:14.359346Z
GCVE-1-2025-0041	6.4 (4.0)	[online services] Reflected Cross-Site Scripting (XSS)…	typo3	typo3	2025-12-19T14:25:00.000Z	2025-12-19T14:54:51.594645Z
GCVE-1-2025-0040	7.2 (4.0)	A cross-site scripting (XSS) vulnerability was id…	misp	misp	2025-12-13T08:44:32.378924Z	2025-12-13T08:44:32.378924Z
GCVE-1-2025-0039	8.5 (4.0)	XSS Reintroduced in MISP Dashboard World Map Widget Du…	misp	misp	2025-12-10T14:33:52.856734Z	2025-12-10T14:33:52.856734Z
GCVE-1-2025-0038	5 (4.0)	Reflected XSS in MISP Template Tag Removal and MISP Ad…	misp	misp	2025-12-10T14:10:00.000Z	2025-12-10T14:16:55.918270Z
GCVE-1-2025-0037	7 (4.0)	Reflected XSS in MISP Dashboard Widgets via Unescaped …	misp	misp	2025-12-10T14:01:03.200804Z	2025-12-10T14:01:03.200804Z
GCVE-1-2025-0036	8.3 (4.0)	A reflected cross-site scripting (XSS) vulnerability w…	misp	misp	2025-12-10T13:46:07.170083Z	2025-12-10T13:46:07.170083Z
GCVE-1-2025-0035	8.3 (4.0)	Insufficient sanitization of bundle metadata (availabl…	CIRCL	vulnerability-lookup	2025-12-08T10:25:00.000Z	2025-12-08T12:14:06.307298Z
GCVE-1-2025-0034	7 (4.0)	Missing CSRF protection on state-changing endpoints in…	CIRCL	vulnerability-lookup	2025-12-08T10:19:00.000Z	2025-12-08T12:13:24.197294Z
GCVE-1-2025-0033	8.1 (4.0)	Vulnerability-lookup did not track or limit failed One…	CIRCL	vulnerability-lookup	2025-12-08T10:11:00.000Z	2025-12-08T12:12:53.235996Z
GCVE-1-2025-0032	10 (4.0)	The default configuration of WatchGuard Firebox device…	watchguard	firebox	2025-12-03T16:25:00.000Z	2025-12-19T13:48:34.570799Z
GCVE-1-2025-0031	7.1 (4.0)	A cross-site scripting (XSS) vulnerability was identif…	misp	misp	2025-12-03T10:58:00.000Z	2025-12-16T09:36:09.594750Z
GCVE-1-2025-0030	6.2 (4.0)	A cross-site scripting (XSS) vulnerability in the MISP…	misp	misp	2025-12-03T10:53:00.000Z	2025-12-03T10:58:55.845341Z
GCVE-1-2025-0029	6.3 (4.0)	Reflected cross-site scripting (XSS) vulnerabilities i…	misp	misp	2025-11-27T12:41:00.000Z	2025-11-27T12:48:51.085860Z
GCVE-1-2025-0028	8.5 (4.0)	Information leakage vulnerability in the MISP Feed con…	misp	misp	2025-11-27T07:23:00.000Z	2025-12-02T08:51:35.429494Z
GCVE-1-2025-0027	9.4 (4.0)	Reflected cross-site scripting (XSS) vulnerability in …	misp	misp	2025-11-27T07:17:00.000Z	2025-12-02T08:51:04.323899Z
GCVE-1-2025-0026	9.4 (4.0)	Reflected cross-site scripting (XSS) vulnerability in …	misp	misp	2025-11-26T16:35:00.000Z	2025-12-02T08:50:46.381572Z
GCVE-1-2025-0025	9.4 (4.0)	Reflected cross-site scripting (XSS) vulnerability in …	misp	misp	2025-11-26T16:27:00.000Z	2025-12-02T08:50:18.897756Z
GCVE-1-2025-0024	9.4 (4.0)	cross-site scripting (XSS) vulnerability in the MISP s…	misp	misp	2025-11-26T16:14:00.000Z	2025-12-02T08:50:01.482327Z
GCVE-1-2025-0023	9.4 (4.0)	XSS in MISP server comparison tool	misp	misp	2025-11-26T16:10:00.000Z	2025-12-02T08:49:24.626168Z
GCVE-1-2025-0022	9.4 (4.0)	Clarified setting's impact on download_attachments_on_load	misp	misp	2025-11-26T16:04:00.000Z	2025-12-02T08:49:04.510294Z
GCVE-1-2025-0021	9.4 (4.0)	XSS in MISP ReST client in HTML view	misp	misp	2025-11-26T15:55:00.000Z	2025-12-02T08:48:41.869838Z
GCVE-1-2025-0020	9.4 (4.0)	cross-site scripting (XSS) in Galaxy element JSON view	misp	misp	2025-11-26T15:49:00.000Z	2025-12-02T08:47:41.151429Z
GCVE-1-2025-0019	4 (4.0)	Path traversal vulnerability in EventReport for site-admin	misp	misp	2025-11-26T14:47:00.000Z	2025-11-28T07:27:42.721350Z
GCVE-1-2025-0018	9.4 (4.0)	HTML injection issue was identified in Lookyloo’s web …	lookyloo	lookyloo	2025-11-18T15:33:00.000Z	2025-11-18T20:39:45.579295Z
GCVE-1-2025-0017	9.4 (4.0)	Privilege escalation in Cerebrate allows an authentica…	cerebrate	cerebrate	2025-11-12T08:15:00.000Z	2025-11-28T07:22:08.205835Z
GCVE-1-2025-0016	6 (4.0)	Local file inclusion in [ImportFromUrl() URL hand…	misp	misp	2025-11-04T09:20:00.000Z	2025-11-04T09:56:38.383646Z
GCVE-1-2025-0015	9 (4.0)	Potential XSS in decaying simulation tool	misp	misp	2025-11-04T09:06:00.000Z	2025-11-04T09:06:59.216121Z
GCVE-1-2025-0014	9.4 (4.0)	XSS in event report via Mermaid diagram	misp	misp	2025-11-04T08:58:00.024516Z	2025-11-04T08:58:00.024516Z

ID	CVSS	Description	Vendor	Product	Published	Updated
GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011	9.1 (3.1)	HexStrike AI MCP Server Command Injection	0x4m4	HexStrike AI	2025-11-30T21:27:56.057Z	2025-11-30T21:27:56.057Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111111111011111111110000000000000000000000000000000000000000000000000000000100	6.5 (3.1)	Abilis CPX Fallback Shell Connection Relay	Abilis	CPX	2025-11-04T00:23:23.924Z	2025-11-04T00:23:23.924Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011011111110011111111110000000000000000000000000000000000000000000000000000000010	7.3 (3.1)	Unitree Multiple Robotic Products Command Injection	Unitree	Go2	2025-09-26T06:53:49.585Z	2025-09-26T15:16:57.586Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001	4.3 (3.1)	Unauthenticated leak of sensitive information affectin…	Brother Industries, Ltd	HL-L8260CDN	2025-08-12T15:23:00.577Z	2025-08-15T05:53:23.017Z