Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-32462
N/A
WordPress Master Addons for Elementor plugin <= 2.1.3 … Liton Arefin
Master Addons for Elementor
2026-03-13T11:42:23.560Z 2026-03-13T11:42:23.560Z
CVE-2026-32461
5.3 (3.1)
WordPress Really Simple SSL plugin <= 9.5.7 - Broken A… Really Simple Plugins
Really Simple SSL
2026-03-13T11:42:23.380Z 2026-03-13T18:32:33.789Z
CVE-2026-32460
N/A
WordPress Ultimate Addons for Contact Form 7 plugin <=… Themefic
Ultimate Addons for Contact Form 7
2026-03-13T11:42:23.111Z 2026-03-13T11:42:23.111Z
CVE-2026-32459
8.5 (3.1)
WordPress UpsellWP plugin <= 2.2.4 - SQL Injection vul… flycart
UpsellWP
2026-03-13T11:42:22.929Z 2026-03-13T19:33:50.959Z
CVE-2026-32458
7.6 (3.1)
WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulne… RealMag777
WOLF
2026-03-13T11:42:22.748Z 2026-03-13T14:09:19.411Z
CVE-2026-32457
5.3 (3.1)
WordPress Advanced Product Fields (Product Addons) for… Wombat Plugins
Advanced Product Fields (Product Addons) for WooCommerce
2026-03-13T11:42:22.574Z 2026-03-13T18:53:34.058Z
CVE-2026-32456
4.3 (3.1)
WordPress Admin Menu Editor plugin <= 1.14.1 - Cross S… Janis Elsts
Admin Menu Editor
2026-03-13T11:42:22.381Z 2026-03-13T14:21:53.842Z
CVE-2026-32455
6.5 (3.1)
WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting … RealMag777
MDTF
2026-03-13T11:42:22.200Z 2026-03-13T19:17:49.086Z
CVE-2026-32454
6.5 (3.1)
WordPress Avada Core plugin < 5.15.0 - Cross Site Scri… ThemeFusion
Avada Core
2026-03-13T11:42:22.010Z 2026-03-13T14:27:26.579Z
CVE-2026-32453
5.3 (3.1)
WordPress Avada Core plugin < 5.15.0 - Broken Access C… ThemeFusion
Avada Core
2026-03-13T11:42:21.829Z 2026-03-13T18:53:33.921Z
CVE-2026-32452
5.3 (3.1)
WordPress Fusion Builder plugin < 3.15.0 - Broken Acce… ThemeFusion
Fusion Builder
2026-03-13T11:42:21.652Z 2026-03-13T14:30:38.057Z
CVE-2026-32451
6.3 (3.1)
WordPress Fusion Builder plugin < 3.15.0 - Broken Acce… ThemeFusion
Fusion Builder
2026-03-13T11:42:21.480Z 2026-03-13T18:51:32.066Z
CVE-2026-32450
6.5 (3.1)
WordPress Active Products Tables for WooCommerce plugi… RealMag777
Active Products Tables for WooCommerce
2026-03-13T11:42:21.288Z 2026-03-13T14:34:11.364Z
CVE-2026-32449
6.5 (3.1)
WordPress Themify Event Post plugin <= 1.3.4 - Cross S… themifyme
Themify Event Post
2026-03-13T11:42:21.103Z 2026-03-13T19:23:47.856Z
CVE-2026-32448
6.5 (3.1)
WordPress Podlove Podcast Publisher plugin <= 4.3.3 - … Eric Teubert
Podlove Podcast Publisher
2026-03-13T11:42:20.912Z 2026-03-13T14:39:35.485Z
CVE-2026-32447
4.3 (3.1)
WordPress Atarim plugin <= 4.3.2 - Broken Access Contr… Vito Peleg
Atarim
2026-03-13T11:42:20.710Z 2026-03-13T18:53:45.311Z
CVE-2026-32446
4.3 (3.1)
WordPress Contact Form by WPForms plugin <= 1.9.9.3 - … Syed Balkhi
Contact Form by WPForms
2026-03-13T11:42:20.527Z 2026-03-13T15:33:27.342Z
CVE-2026-32445
2.7 (3.1)
WordPress Elementor Website Builder plugin <= 3.35.5 -… Elementor
Elementor Website Builder
2026-03-13T11:42:20.356Z 2026-03-13T18:50:11.050Z
CVE-2026-32443
6.5 (3.1)
WordPress Product Feed PRO for WooCommerce plugin <= 1… Josh Kohlbach
Product Feed PRO for WooCommerce
2026-03-13T11:42:20.167Z 2026-03-13T15:37:58.357Z
CVE-2026-32442
4.3 (3.1)
WordPress e2pdf plugin <= 1.28.15 - Broken Access Cont… E2Pdf
e2pdf
2026-03-13T11:42:19.991Z 2026-03-13T18:53:34.496Z
CVE-2026-32440
5.3 (3.1)
WordPress WP Food plugin < 2.7.1 - Broken Access Contr… Ex-Themes
WP Food
2026-03-13T11:42:19.810Z 2026-03-13T15:40:37.844Z
CVE-2026-32439
5.3 (3.1)
WordPress BigHearts theme <= 3.1.14 - Broken Access Co… WebGeniusLab
BigHearts
2026-03-13T11:42:19.604Z 2026-03-13T18:53:33.774Z
CVE-2026-32438
5.3 (3.1)
WordPress VW School Education theme <= 1.4.6 - Broken … vowelweb
VW School Education
2026-03-13T11:42:19.358Z 2026-03-13T15:44:53.276Z
CVE-2026-32437
5.3 (3.1)
WordPress VW Portfolio theme <= 1.3.3 - Broken Access … vowelweb
VW Portfolio
2026-03-13T11:42:19.177Z 2026-03-13T18:53:33.607Z
CVE-2026-32436
5.3 (3.1)
WordPress VW Photography theme <= 1.3.8 - Broken Acces… vowelweb
VW Photography
2026-03-13T11:42:19.005Z 2026-03-13T15:48:15.864Z
CVE-2026-32435
5.3 (3.1)
WordPress VW Pet Shop theme <= 1.4.7 - Broken Access C… vowelweb
VW Pet Shop
2026-03-13T11:42:18.837Z 2026-03-13T18:53:33.454Z
CVE-2026-32434
5.3 (3.1)
WordPress VW Fitness theme <= 4.3.4 - Broken Access Co… vowelweb
VW Fitness
2026-03-13T11:42:18.658Z 2026-03-13T15:54:53.168Z
CVE-2026-32433
8.5 (3.1)
WordPress CP Contact Form with Paypal plugin <= 1.3.61… codepeople
CP Contact Form with Paypal
2026-03-13T11:42:18.460Z 2026-03-13T19:33:50.826Z
CVE-2026-32432
5.3 (3.1)
WordPress WP Time Slots Booking Form plugin <= 1.2.42 … codepeople
WP Time Slots Booking Form
2026-03-13T11:42:18.279Z 2026-03-13T15:57:49.043Z
CVE-2026-32431
6.5 (3.1)
WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Sit… Brainstorm Force
Astra Bulk Edit
2026-03-13T11:42:18.080Z 2026-03-13T19:23:48.861Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-32358
7.6 (3.1)
WordPress Booking Calendar plugin <= 10.14.15 - SQL In… wpdevelop
Booking Calendar
2026-03-13T11:42:03.699Z 2026-03-13T19:30:13.444Z
CVE-2026-32357
N/A
WordPress Simple Blog Card plugin <= 2.37 - Server Sid… Katsushi Kawamori
Simple Blog Card
2026-03-13T11:42:01.168Z 2026-03-13T11:42:01.168Z
CVE-2026-32356
6.5 (3.1)
WordPress Robo Gallery plugin <= 5.1.2 - Cross Site Sc… robosoft
Robo Gallery
2026-03-13T11:42:00.938Z 2026-03-13T19:23:48.414Z
CVE-2026-32355
N/A
WordPress JetEngine plugin < 3.8.4.1 - Deserialization… Crocoblock
JetEngine
2026-03-13T11:42:00.737Z 2026-03-13T11:42:00.737Z
CVE-2026-32354
N/A
WordPress WpEvently plugin < 5.1.9 - Sensitive Data Ex… magepeopleteam
WpEvently
2026-03-13T11:41:59.838Z 2026-03-13T11:41:59.838Z
CVE-2026-32353
N/A
WordPress MailerPress plugin <= 1.4.2 - Server Side Re… MailerPress Team
MailerPress
2026-03-13T11:41:59.644Z 2026-03-13T11:41:59.644Z
CVE-2026-32352
6.5 (3.1)
WordPress Elementor Website Builder plugin <= 3.35.5 -… Elementor
Elementor Website Builder
2026-03-13T11:41:59.354Z 2026-03-13T19:23:48.529Z
CVE-2026-32351
N/A
WordPress PowerPress Podcasting plugin <= 11.15.13 - C… blubrry
PowerPress Podcasting
2026-03-13T11:41:59.168Z 2026-03-13T11:41:59.168Z
CVE-2026-32350
5.3 (3.1)
WordPress Chocolate House theme <= 1.1.5 - Broken Acce… wpradiant
Chocolate House
2026-03-13T11:41:58.999Z 2026-03-13T18:53:30.907Z
CVE-2026-32349
4.9 (3.1)
WordPress Embed PDF Viewer plugin <= 2.4.7 - Server Si… Andy Fragen
Embed PDF Viewer
2026-03-13T11:41:58.830Z 2026-03-13T20:05:38.080Z
CVE-2026-32348
5.3 (3.1)
WordPress MAS Videos plugin <= 1.3.2 - Broken Access C… MadrasThemes
MAS Videos
2026-03-13T11:41:58.651Z 2026-03-13T18:53:30.790Z
CVE-2026-32347
5.3 (3.1)
WordPress Restaurant and Cafe theme <= 1.2.5 - Broken … raratheme
Restaurant and Cafe
2026-03-13T11:41:58.469Z 2026-03-13T20:10:33.517Z
CVE-2026-32346
5.3 (3.1)
WordPress Travel Agency theme <= 1.5.5 - Broken Access… raratheme
Travel Agency
2026-03-13T11:41:58.085Z 2026-03-13T18:53:30.647Z
CVE-2026-32345
5.3 (3.1)
WordPress Perfect Portfolio theme <= 1.2.4 - Broken Ac… raratheme
Perfect Portfolio
2026-03-13T11:41:57.904Z 2026-03-13T20:12:24.596Z
CVE-2026-32344
N/A
WordPress Corpiva theme <= 1.0.96 - Cross Site Request… desertthemes
Corpiva
2026-03-13T11:41:57.714Z 2026-03-13T11:41:57.714Z
CVE-2026-32343
4.3 (3.1)
WordPress Easy Table of Contents plugin <= 2.0.80 - Cr… Magazine3
Easy Table of Contents
2026-03-13T11:41:57.540Z 2026-03-13T20:16:09.251Z
CVE-2026-32342
N/A
WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Re… Ays Pro
Quiz Maker
2026-03-13T11:41:57.370Z 2026-03-13T11:41:57.370Z
CVE-2026-32341
5.3 (3.1)
WordPress Benevolent theme <= 1.3.9 - Broken Access Co… raratheme
Benevolent
2026-03-13T11:41:57.194Z 2026-03-13T20:18:38.659Z
CVE-2026-32340
5.3 (3.1)
WordPress Business One Page theme <= 1.3.2 - Broken Ac… raratheme
Business One Page
2026-03-13T11:41:57.010Z 2026-03-13T18:53:30.335Z
CVE-2026-32339
5.3 (3.1)
WordPress Bakes And Cakes theme <= 1.2.9 - Broken Acce… raratheme
Bakes And Cakes
2026-03-13T11:41:56.845Z 2026-03-13T19:23:36.573Z
CVE-2026-32338
5.3 (3.1)
WordPress Construction Landing Page theme <= 1.4.1 - B… raratheme
Construction Landing Page
2026-03-13T11:41:56.674Z 2026-03-13T18:53:30.177Z
CVE-2026-32337
5.3 (3.1)
WordPress Preschool and Kindergarten theme <= 1.2.5 - … raratheme
Preschool and Kindergarten
2026-03-13T11:41:56.507Z 2026-03-13T19:25:35.939Z
CVE-2026-32336
5.3 (3.1)
WordPress Rara Business theme <= 1.3.0 - Broken Access… raratheme
Rara Business
2026-03-13T11:41:56.325Z 2026-03-13T18:53:29.993Z
CVE-2026-32335
5.3 (3.1)
WordPress The Conference theme <= 1.2.5 - Broken Acces… raratheme
The Conference
2026-03-13T11:41:56.138Z 2026-03-13T19:31:29.266Z
CVE-2026-32334
5.3 (3.1)
WordPress JobScout theme <= 1.1.7 - Broken Access Cont… raratheme
JobScout
2026-03-13T11:41:55.950Z 2026-03-13T18:53:29.856Z
CVE-2026-32332
5.3 (3.1)
WordPress Easy Form plugin <= 2.7.9 - Broken Access Co… Ays Pro
Easy Form
2026-03-13T11:41:55.724Z 2026-03-13T19:54:29.124Z
CVE-2026-32331
4.3 (3.1)
WordPress Textmetrics plugin <= 3.6.4 - Broken Access … Israpil
Textmetrics
2026-03-13T11:41:55.444Z 2026-03-13T18:57:13.098Z
CVE-2026-32330
4.3 (3.1)
WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cr… 10Web
Photo Gallery by 10Web
2026-03-13T11:41:55.160Z 2026-03-13T19:57:18.639Z
CVE-2026-32329
5.3 (3.1)
WordPress Advanced Related Posts plugin <= 1.9.1 - Bro… Ays Pro
Advanced Related Posts
2026-03-13T11:41:54.930Z 2026-03-13T18:53:29.720Z
CVE-2026-32328
5.4 (3.1)
WordPress Lemmony theme < 1.7.1 - Cross Site Request F… shufflehound
Lemmony
2026-03-13T11:41:54.754Z 2026-03-13T15:28:59.573Z
ID Description Published Updated
fkie_cve-2025-32058 The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is conn… 2026-02-15T11:15:52.773 2026-02-18T17:52:22.253
fkie_cve-2026-1793 The Element Pack Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in… 2026-02-15T04:15:54.260 2026-02-18T17:52:22.253
fkie_cve-2026-1750 The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Esc… 2026-02-15T04:15:54.113 2026-02-18T17:52:22.253
fkie_cve-2026-1490 The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unautho… 2026-02-15T04:15:53.783 2026-02-18T17:52:22.253
fkie_cve-2026-23210 In the Linux kernel, the following vulnerability has been resolved: ice: Fix PTP NULL pointer dere… 2026-02-14T17:15:58.910 2026-02-18T17:52:22.253
fkie_cve-2026-23209 In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in… 2026-02-14T17:15:58.803 2026-02-18T17:52:22.253
fkie_cve-2026-23208 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Prevent exces… 2026-02-14T17:15:58.703 2026-02-18T17:52:22.253
fkie_cve-2026-23207 In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect cu… 2026-02-14T17:15:58.610 2026-02-18T17:52:22.253
fkie_cve-2026-23206 In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: prevent ZERO_SIZ… 2026-02-14T17:15:58.507 2026-02-18T17:52:22.253
fkie_cve-2026-23205 In the Linux kernel, the following vulnerability has been resolved: smb/client: fix memory leak in… 2026-02-14T17:15:58.403 2026-02-18T17:52:22.253
fkie_cve-2026-23204 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_he… 2026-02-14T17:15:58.297 2026-02-18T17:52:22.253
fkie_cve-2026-23203 In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Execute ndo_set… 2026-02-14T17:15:58.177 2026-02-18T17:52:22.253
fkie_cve-2026-23202 In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect cu… 2026-02-14T17:15:58.050 2026-02-18T17:52:22.253
fkie_cve-2026-23201 In the Linux kernel, the following vulnerability has been resolved: ceph: fix oops due to invalid … 2026-02-14T17:15:57.950 2026-02-18T17:52:22.253
fkie_cve-2026-23200 In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix ECMP sibling count m… 2026-02-14T17:15:57.847 2026-02-18T17:52:22.253
fkie_cve-2026-23199 In the Linux kernel, the following vulnerability has been resolved: procfs: avoid fetching build I… 2026-02-14T17:15:57.743 2026-02-18T17:52:22.253
fkie_cve-2026-23198 In the Linux kernel, the following vulnerability has been resolved: KVM: Don't clobber irqfd routi… 2026-02-14T17:15:57.640 2026-02-18T17:52:22.253
fkie_cve-2026-23197 In the Linux kernel, the following vulnerability has been resolved: i2c: imx: preserve error state… 2026-02-14T17:15:57.540 2026-02-18T17:52:22.253
fkie_cve-2026-23196 In the Linux kernel, the following vulnerability has been resolved: HID: Intel-thc-hid: Intel-thc:… 2026-02-14T17:15:57.440 2026-02-18T17:52:22.253
fkie_cve-2026-23195 In the Linux kernel, the following vulnerability has been resolved: cgroup/dmem: avoid pool UAF A… 2026-02-14T17:15:57.337 2026-02-18T17:52:22.253
fkie_cve-2026-23194 In the Linux kernel, the following vulnerability has been resolved: rust_binder: correctly handle … 2026-02-14T17:15:57.233 2026-02-18T17:52:22.253
fkie_cve-2026-23193 In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-a… 2026-02-14T17:15:57.123 2026-02-18T17:52:22.253
fkie_cve-2026-23192 In the Linux kernel, the following vulnerability has been resolved: linkwatch: use __dev_put() in … 2026-02-14T17:15:57.020 2026-02-18T17:52:22.253
fkie_cve-2026-23191 In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access a… 2026-02-14T17:15:56.917 2026-02-18T17:52:22.253
fkie_cve-2026-23190 In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in … 2026-02-14T17:15:56.810 2026-02-18T17:52:22.253
fkie_cve-2026-23189 In the Linux kernel, the following vulnerability has been resolved: ceph: fix NULL pointer derefer… 2026-02-14T17:15:56.703 2026-02-18T17:52:22.253
fkie_cve-2026-23188 In the Linux kernel, the following vulnerability has been resolved: net: usb: r8152: fix resume re… 2026-02-14T17:15:56.600 2026-02-18T17:52:22.253
fkie_cve-2026-23187 In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix … 2026-02-14T17:15:56.490 2026-02-18T17:52:22.253
fkie_cve-2026-23186 In the Linux kernel, the following vulnerability has been resolved: hwmon: (acpi_power_meter) Fix … 2026-02-14T17:15:56.373 2026-02-18T17:52:22.253
fkie_cve-2026-23185 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo… 2026-02-14T17:15:56.273 2026-02-18T17:52:22.253
ID Severity Description Published Updated
ghsa-64c8-w3fx-v572
7.6 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-59mw-82vh-f4q5
5.3 (3.1)
Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Inco… 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-56hx-88qj-8268
Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting In… 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-4mvh-jg3r-rmj5
5.3 (3.1)
Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configur… 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-42wv-w6r3-qgm2
5.3 (3.1)
Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic … 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-2r7p-ccfc-8pxw
5.3 (3.1)
Missing Authorization vulnerability in MadrasThemes MAS Videos masvideos allows Exploiting Incorrec… 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-2p7g-pm3c-2f82
8.5 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-2jrw-9994-7wpr
8.5 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-247f-frvc-wqqm
5.3 (3.1)
Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectl… 2026-03-13T21:31:48Z 2026-03-13T21:31:48Z
ghsa-wfp3-438j-9p4x
Missing Authorization vulnerability in raratheme Benevolent benevolent allows Exploiting Incorrectl… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-w2x8-253c-h6cq
5.3 (3.1)
Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergar… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-rqx6-29c6-8688
5.3 (3.1)
Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allo… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-qw27-8ccm-3c9q
Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allow… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-qq2h-3v2m-x37f
5.3 (3.1)
Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-pag… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-q92x-92fx-w39x
Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Easy Table of Contents easy-table-of-c… 2026-03-13T21:31:47Z 2026-03-13T21:31:48Z
ghsa-q6m9-jqwc-4rww
Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Co… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-q3w4-mg5f-qrq9
5.3 (3.1)
Missing Authorization vulnerability in Ays Pro Advanced Related Posts advanced-related-posts allows… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-phfp-3mx7-3q73
4.3 (3.1)
Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectl… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-m8h9-57pj-5pxv
5.3 (3.1)
Missing Authorization vulnerability in raratheme Rara Business rara-business allows Exploiting Inco… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-jwpp-jwg5-pq7x
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site … 2026-03-13T21:31:47Z 2026-03-13T21:31:48Z
ghsa-hj2w-559c-8w34
8.5 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-g49p-7245-p5wh
5.4 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in shufflehound Lemmony lemmony allows Cross Site R… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-fwx4-2wf3-v6cm
5.3 (3.1)
Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting In… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-fhw5-4v88-4qq6
8.5 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-4x4m-8c2x-4hq3
5.3 (3.1)
Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting … 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-4rrh-wqqx-4jh2
7.5 (3.1)
The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versio… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-4hf3-6269-c3w3
4.3 (3.1)
Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advan… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-36w5-3r66-pm2c
5.3 (3.1)
Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Co… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-2v58-fmf4-q6pv
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ghsa-28fh-94w2-fjw8
5.3 (3.1)
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Co… 2026-03-13T21:31:47Z 2026-03-13T21:31:47Z
ID Severity Description Package Published Updated
pysec-2024-171
8.0 (3.1)
Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, mult… strawberry-graphql 2024-09-25T18:15:05+00:00 2025-01-18T22:21:43.412172+00:00
pysec-2024-99
7.5 (3.1)
OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords. openslides 2024-09-25T15:15:00+00:00 2024-10-01T21:22:35.777428+00:00
pysec-2024-96
7.5 (3.1)
A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affe… micropython-string 2024-09-17T19:15:00+00:00 2024-09-25T06:23:56.151249+00:00
pysec-2024-95
7.5 (3.1)
A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affe… micropython-os-path 2024-09-17T19:15:00+00:00 2024-09-25T06:23:56.045949+00:00
pysec-2024-94
8.1 (3.1)
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affect… micropython-io 2024-09-17T19:15:00+00:00 2024-09-25T06:23:55.930133+00:00
pysec-2024-93
7.5 (3.1)
A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affe… micropython-io 2024-09-17T19:15:00+00:00 2024-09-25T06:23:55.864558+00:00
pysec-2024-92
8.1 (3.1)
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affect… micropython-copy 2024-09-17T19:15:00+00:00 2024-09-25T06:23:55.787891+00:00
pysec-2024-91
7.5 (3.1)
A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affe… micropython-copy 2024-09-17T19:15:00+00:00 2024-09-25T06:23:55.729708+00:00
pysec-2024-89
7.5 (3.1)
A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected … micropython-os 2024-09-17T19:15:00+00:00 2024-09-23T21:22:09.689786+00:00
pysec-2024-88
7.5 (3.1)
A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected … micropython-io 2024-09-17T19:15:00+00:00 2024-09-23T21:22:09.570550+00:00
pysec-2024-87
7.5 (3.1)
A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected … micropython-copy 2024-09-17T19:15:00+00:00 2024-09-23T21:22:09.445188+00:00
pysec-2024-85
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-03-03T16:29:37.848846Z
pysec-2024-84
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-03-03T16:29:37.756762Z
pysec-2024-83
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-03-03T16:29:37.662671Z
pysec-2024-82
8.8 (3.1)
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB… mindsdb 2024-09-12T13:15:00Z 2026-03-03T16:29:37.563380Z
pysec-2024-81
8.8 (3.1)
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of … mindsdb 2024-09-12T13:15:00+00:00 2024-09-16T19:20:05.004524+00:00
pysec-2024-80
8.8 (3.1)
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of … mindsdb 2024-09-12T13:15:00+00:00 2024-09-16T19:20:04.922906+00:00
pysec-2024-79
8.8 (3.1)
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of … mindsdb 2024-09-12T13:15:00+00:00 2024-09-16T19:20:04.841635+00:00
pysec-2024-78
8.8 (3.1)
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of … mindsdb 2024-09-12T13:15:00+00:00 2024-09-16T19:20:04.697678+00:00
pysec-2024-77
8.8 (3.1)
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of … mindsdb 2024-09-12T13:15:00+00:00 2024-09-16T19:20:04.616691+00:00
pysec-2024-212
Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add… apache-airflow 2024-09-07T08:15:11+00:00 2025-01-19T22:22:22.289672+00:00
pysec-2024-74
9.1 (3.1)
MindsDB is a platform for building artificial intelligence from enterprise data. Prior to… mindsdb 2024-09-05T17:15:00+00:00 2024-09-06T15:22:53.971446+00:00
pysec-2024-90
6.1 (3.1)
Indico is an event management system that uses Flask-Multipass, a multi-backend authentic… indico 2024-09-04T20:15:00+00:00 2024-09-25T06:23:55.564403+00:00
pysec-2024-180
5.4 (3.1)
Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious even… pretix 2024-08-23T15:15:17+00:00 2025-01-19T01:52:24.493530+00:00
pysec-2024-192
An issue was discovered in llama_index before 0.10.38. download/integration.py includes a… llama-index 2024-08-22T20:15:10+00:00 2025-01-19T13:22:29.175614+00:00
pysec-2024-181
6.1 (3.1)
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of… apache-airflow 2024-08-21T16:15:08+00:00 2025-01-19T04:22:59.351008+00:00
pysec-2024-72
8.8 (3.1)
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running … ekuiper 2024-08-20T15:15:00Z 2024-09-18T07:04:07.042699Z
pysec-2024-71
7.5 (3.1)
A vulnerability in corydolphin/flask-cors up to version 4.0.1 allows the `Access-Control-… flask-cors 2024-08-18T19:15:00Z 2024-09-09T07:59:30.591275Z
pysec-2024-188
6.1 (3.1)
WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Lo… webob 2024-08-14T21:15:17+00:00 2025-01-19T04:23:01.908824+00:00
pysec-2024-153
6.5 (3.1)
Streamlit is a data oriented application development framework for python. Snowflake Stre… streamlit 2024-08-12T17:15:17+00:00 2024-11-25T21:22:50.933853+00:00
ID Description Updated
ID Description Published Updated
mal-2026-1300 Malicious code in @mmm-otrade/transaction (npm) 2026-03-10T01:04:15Z 2026-03-10T01:04:15Z
mal-2026-1316 Malicious code in xc-input-toggle (npm) 2026-03-10T01:04:14Z 2026-03-10T01:04:15Z
mal-2026-1310 Malicious code in iron-media-query (npm) 2026-03-10T01:04:14Z 2026-03-10T01:04:15Z
mal-2026-1308 Malicious code in iron-image (npm) 2026-03-10T01:04:14Z 2026-03-10T01:04:20Z
mal-2026-1299 Malicious code in monoping (npm) 2026-03-10T00:29:16Z 2026-03-10T00:29:16Z
mal-2026-1298 Malicious code in jsonify-core (npm) 2026-03-09T22:44:51Z 2026-03-09T22:44:52Z
mal-2026-1297 Malicious code in json-merge-tool (npm) 2026-03-09T22:44:51Z 2026-03-09T22:44:52Z
mal-2026-1296 Malicious code in bpsm (PyPI) 2026-03-09T17:31:34Z 2026-03-12T00:30:43Z
mal-2026-1294 Malicious code in causal-canvas (PyPI) 2026-03-09T17:28:14Z 2026-03-12T00:30:43Z
mal-2026-1295 Malicious code in tabformerlite (PyPI) 2026-03-09T17:26:01Z 2026-03-12T00:30:44Z
mal-2026-1293 Malicious code in tw-modern-ui (npm) 2026-03-09T16:01:36Z 2026-03-09T16:01:45Z
mal-2026-1292 Malicious code in odds-analyzer (npm) 2026-03-09T16:01:36Z 2026-03-09T16:01:36Z
mal-2026-1291 Malicious code in requests-lite (PyPI) 2026-03-09T10:21:44Z 2026-03-09T10:21:44Z
mal-2026-1290 Malicious code in remjsonparse (PyPI) 2026-03-09T10:09:35Z 2026-03-09T10:09:35Z
mal-2026-1289 Malicious code in aioutil3 (PyPI) 2026-03-08T19:35:54Z 2026-03-08T19:35:54Z
mal-2026-1288 Malicious code in arnavtest123 (PyPI) 2026-03-08T19:01:20Z 2026-03-08T19:01:20Z
mal-2026-1287 Malicious code in simple-text-parser (PyPI) 2026-03-08T17:12:35Z 2026-03-08T17:12:35Z
mal-2026-1286 Malicious code in demozecosse (PyPI) 2026-03-08T16:29:43Z 2026-03-08T16:29:43Z
mal-2026-1283 Malicious code in demozecob (PyPI) 2026-03-08T14:53:48Z 2026-03-08T14:53:48Z
mal-2026-1285 Malicious code in demozecox (PyPI) 2026-03-08T14:52:48Z 2026-03-08T14:52:48Z
mal-2026-1284 Malicious code in demozecosso (PyPI) 2026-03-08T14:52:35Z 2026-03-08T14:52:35Z
mal-2026-1282 Malicious code in xmrig-miner (PyPI) 2026-03-08T14:15:50Z 2026-03-08T14:15:50Z
mal-2026-1280 Malicious code in py-sysbench (PyPI) 2026-03-08T14:15:27Z 2026-03-08T14:15:27Z
mal-2026-1279 Malicious code in cpucheck (PyPI) 2026-03-08T14:14:08Z 2026-03-08T14:14:08Z
mal-2026-1281 Malicious code in pyutils-helper (PyPI) 2026-03-08T14:13:30Z 2026-03-08T14:13:30Z
mal-2026-1278 Malicious code in chat-xdk (PyPI) 2026-03-07T09:17:14Z 2026-03-07T09:17:34Z
mal-2026-1277 Malicious code in prateek-yadav23 (PyPI) 2026-03-06T23:22:42Z 2026-03-06T23:22:42Z
mal-2026-1276 Malicious code in flowfix (PyPI) 2026-03-06T17:39:56Z 2026-03-06T17:39:56Z
mal-2026-1275 Malicious code in hostlists-plugins-default (PyPI) 2026-03-06T17:01:42Z 2026-03-06T17:01:59Z
mal-2026-1271 Malicious code in qq-console (npm) 2026-03-06T15:22:32Z 2026-03-08T01:39:47Z
ID Description Published Updated
wid-sec-w-2026-0182 Apache Solr: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0179 GNU libc: Schwachstelle ermöglicht Denial of Service 2026-01-20T23:00:00.000+00:00 2026-02-02T23:00:00.000+00:00
wid-sec-w-2026-0177 Atlassian Bamboo, Bitbucket, Confluence und Jira: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2026-0176 Google Chrome/Microsoft Edge: Schwachstelle ermöglicht Codeausführung 2026-01-20T23:00:00.000+00:00 2026-01-25T23:00:00.000+00:00
wid-sec-w-2026-0174 Oracle Systems: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0172 Oracle Virtualization: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0168 Oracle MySQL: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-02-02T23:00:00.000+00:00
wid-sec-w-2026-0164 Oracle Java SE: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-03-08T23:00:00.000+00:00
wid-sec-w-2026-0159 Oracle E-Business Suite: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0148 ImageMagick: Mehrere Schwachstellen 2026-01-19T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2026-0145 FreeRDP: Mehrere Schwachstellen ermöglichen DoS und Codeausführung 2026-01-19T23:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2026-0144 n8n: Schwachstelle ermöglicht Codeausführung 2026-01-18T23:00:00.000+00:00 2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0138 Red Hat Enterprise Linux (gpsd): Mehrere Schwachstellen 2026-01-18T23:00:00.000+00:00 2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0136 AMD EPYC-Prozessoren: Schwachstelle ermöglicht Manipulation von Daten 2026-01-15T23:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2026-0135 Google Fast Pair Bluetooth Protokoll: Schwachstelle ermöglicht Offenlegung von Informationen 2026-01-15T23:00:00.000+00:00 2026-01-20T23:00:00.000+00:00
wid-sec-w-2026-0133 SmarterTools SmarterMail: Mehrere Schwachstellen 2026-01-15T23:00:00.000+00:00 2026-01-22T23:00:00.000+00:00
wid-sec-w-2026-0132 GNU libc: Schwachstelle ermöglicht Offenlegung von Informationen 2026-01-15T23:00:00.000+00:00 2026-02-02T23:00:00.000+00:00
wid-sec-w-2026-0129 Golang Go: Mehrere Schwachstellen 2026-01-15T23:00:00.000+00:00 2026-03-08T23:00:00.000+00:00
wid-sec-w-2026-0126 libxml2: Mehrere Schwachstellen ermöglichen Denial of Service 2026-01-15T23:00:00.000+00:00 2026-03-08T23:00:00.000+00:00
wid-sec-w-2026-0121 Drupal Module: Mehrere Schwachstellen 2026-01-14T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0119 Linux Kernel: Mehrere Schwachstellen 2026-01-14T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2026-0118 GNU libc: Schwachstelle ermöglicht Codeausführung 2026-01-14T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2026-0116 Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service 2026-01-14T23:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2026-0114 Red Hat OpenShift (github.com/sirupsen/logrus): Schwachstelle ermöglicht Denial of Service 2026-01-14T23:00:00.000+00:00 2026-02-23T23:00:00.000+00:00
wid-sec-w-2026-0111 FreeRDP: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-02-23T23:00:00.000+00:00
wid-sec-w-2026-0106 Google Chrome/Microsoft Edge: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-01-19T23:00:00.000+00:00
wid-sec-w-2026-0105 Red Hat Developer Hub: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2026-0098 Node.js: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2026-0096 Google Android Pixel: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-01-15T23:00:00.000+00:00
wid-sec-w-2026-0090 Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
ID Description Published Updated
icsa-26-015-12 Siemens SIMATIC CN 4100 2025-12-09T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-26-015-11 Siemens RUGGEDCOM ROX II 2025-12-09T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-26-015-06 Siemens SINEC Security Monitor 2025-12-09T00:00:00.000000Z 2026-01-14T22:35:44.907344Z
icsa-26-015-05 Siemens RUGGEDCOM ROS 2025-12-09T00:00:00.000000Z 2026-01-14T22:35:44.058931Z
icsa-26-008-01 Hitachi Energy Asset Suite 2025-12-09T00:00:00.000000Z 2026-01-07T21:26:16.381953Z
icsa-25-352-05 Siemens Interniche IP-Stack 2025-12-09T00:00:00.000000Z 2025-12-18T18:13:59.515670Z
icsa-25-345-09 Siemens Gridscale X Prepay 2025-12-09T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-25-345-08 Siemens Energy Services 2025-12-09T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-25-345-07 Siemens Building X - Security Manager Edge Controller 2025-12-09T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-25-345-06 Siemens SINEMA Remote Connect Server 2025-12-09T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-25-345-05 Siemens Advanced Licensing (SALT) Toolkit 2025-12-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-345-04 Siemens IAM Client 2025-12-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-338-07 Advantech iView 2025-12-04T07:00:00.000000Z 2025-12-04T07:00:00.000000Z
icsa-25-338-06 SolisCloud Monitoring Platform 2025-12-04T07:00:00.000000Z 2025-12-04T07:00:00.000000Z
icsa-25-338-05 Sunbird DCIM dcTrack and Power IQ 2025-12-04T07:00:00.000000Z 2025-12-04T07:00:00.000000Z
icsa-25-338-04 Johnson Controls iSTAR 2025-12-04T07:00:00.000000Z 2025-12-04T07:00:00.000000Z
icsa-25-338-03 Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace 2025-12-04T07:00:00.000000Z 2025-12-04T07:00:00.000000Z
icsa-25-338-02 MAXHUB Pivot 2025-12-04T07:00:00.000000Z 2025-12-04T07:00:00.000000Z
icsa-25-338-01 Mitsubishi Electric GX Works2 2025-12-04T07:00:00.000000Z 2025-12-04T07:00:00.000000Z
icsma-25-336-01 Mirion Medical EC2 Software NMIS BioDose 2025-12-02T07:00:00.000000Z 2025-12-02T07:00:00.000000Z
icsa-25-336-02 Iskra iHUB and iHUB Lite 2025-12-02T07:00:00.000000Z 2025-12-02T07:00:00.000000Z
icsa-25-336-01 Industrial Video & Control Longwatch 2025-12-02T07:00:00.000000Z 2025-12-02T07:00:00.000000Z
icsa-25-329-06 SiRcom SMART Alert (SiSA) 2025-11-25T07:00:00.000000Z 2025-11-25T07:00:00.000000Z
icsa-25-329-05 Festo Compact Vision System, Control Block, Controller, and Operator Unit products 2025-11-25T07:00:00.000000Z 2025-11-25T07:00:00.000000Z
icsa-25-329-03 Zenitel TCIV-3+ 2025-11-25T07:00:00.000000Z 2025-11-25T07:00:00.000000Z
icsa-25-329-02 Rockwell Automation Arena Simulation 2025-11-25T07:00:00.000000Z 2025-11-25T07:00:00.000000Z
icsa-25-329-01 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share 2025-11-25T07:00:00.000000Z 2025-11-25T07:00:00.000000Z
icsa-25-329-04 Opto 22 groov View 2025-11-25T06:00:00.000000Z 2025-11-25T06:00:00.000000Z
icsa-25-324-06 Emerson Appleton UPSMON-PRO 2025-11-20T07:00:00.000000Z 2025-11-20T07:00:00.000000Z
icsa-25-324-01 Automated Logic WebCTRL Premium Server 2025-11-20T07:00:00.000000Z 2025-11-20T07:00:00.000000Z
ID Description Published Updated
cisco-sa-asa-ftd-acl-bypass-mtpze9yh Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Rules Bypass Vulnerability 2025-08-14T16:00:00+00:00 2025-08-14T16:00:00+00:00
cisco-sa-asa-buffer-overflow-pyruhwbc Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Web Services Denial of Service Vulnerability 2025-08-14T16:00:00+00:00 2025-08-14T16:00:00+00:00
cisco-sa-3100_4200_tlsdos-2ynscd54 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series TLS 1.3 Cipher Denial of Service Vulnerability 2025-08-14T16:00:00+00:00 2025-09-03T13:37:50+00:00
cisco-sa-webex-join-ynxfqhk4 Cisco Webex Meeting Client Join Certificate Validation Vulnerability 2025-08-06T16:00:00+00:00 2025-08-06T16:00:00+00:00
cisco-sa-ise_xss_acc_cont-ysr4ut4u Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities 2025-08-06T16:00:00+00:00 2025-08-06T16:00:00+00:00
cisco-sa-piepnm-bsi-25jjqsbb Cisco Prime Infrastructure and Evolved Programmable Network Manager Blind SQL Injection Vulnerability 2025-07-16T16:00:00+00:00 2025-07-16T16:00:00+00:00
cisco-sa-ise-multi-3vpsxoxo Cisco Identity Services Engine Authenticated Remote Code Execution and Authorization Bypass Vulnerabilities 2025-07-16T16:00:00+00:00 2025-07-16T16:00:00+00:00
cisco-sa-cuis-ssrf-jsudjev Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability 2025-07-16T16:00:00+00:00 2025-07-16T16:00:00+00:00
cisco-sa-cuis-file-upload-uhnetstm Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability 2025-07-16T16:00:00+00:00 2025-07-16T16:00:00+00:00
cisco-sa-spaces-conn-privesc-kgd2ccdu Cisco Spaces Connector Privilege Escalation Vulnerability 2025-07-02T16:00:00+00:00 2025-07-02T16:00:00+00:00
cisco-sa-ece-xss-cbtkteyc Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability 2025-07-02T16:00:00+00:00 2025-07-02T16:00:00+00:00
cisco-sa-cucm-ssh-m4ubdpe7 Cisco Unified Communications Manager Static SSH Credentials Vulnerability 2025-07-02T16:00:00+00:00 2025-07-02T16:00:00+00:00
cisco-sa-broadworks-xss-o696ymra Cisco BroadWorks CommPilot Application Software Cross-Site Scripting Vulnerability 2025-07-02T16:00:00+00:00 2025-10-21T15:13:31+00:00
cisco-sa-ise-unauth-rce-zad2gnj6 Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities 2025-06-25T16:00:00+00:00 2025-07-24T23:30:31+00:00
cisco-sa-ise-auth-bypass-mvfkvqau Cisco Identity Services Engine Authorization Bypass Vulnerability 2025-06-25T16:00:00+00:00 2025-06-25T16:00:00+00:00
cisco-sa-meraki-mx-vpn-dos-sm5gcfm7 Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability 2025-06-18T16:00:00+00:00 2025-06-18T16:00:00+00:00
cisco-sa-clamav-udf-hmwd9ndy ClamAV UDF File Parsing Out-of-Bounds Read Information Disclosure Vulnerability 2025-06-18T16:00:00+00:00 2025-06-18T16:00:00+00:00
cisco-sa-vos-command-inject-65s2ucyy Cisco Unified Communications Products Command Injection Vulnerability 2025-06-04T16:00:00+00:00 2025-06-04T16:00:00+00:00
cisco-sa-ucs-ssh-priv-esc-2mzdtdjm Cisco Integrated Management Controller Privilege Escalation Vulnerability 2025-06-04T16:00:00+00:00 2025-06-04T16:00:00+00:00
cisco-sa-uccx-multi-uhotvpgl Cisco Unified Contact Center Express Vulnerabilities 2025-06-04T16:00:00+00:00 2025-06-04T16:00:00+00:00
cisco-sa-uccx-editor-rce-ezyyzte8 Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability 2025-06-04T16:00:00+00:00 2025-06-04T16:00:00+00:00
cisco-sa-te-endagent-filewrt-zncdqnrj Cisco ThousandEyes Endpoint Agent for Windows Arbitrary File Delete Vulnerabilities 2025-06-04T16:00:00+00:00 2025-06-04T16:00:00+00:00
cisco-sa-ndfc-shkv-snqjtjrp Cisco Nexus Dashboard Fabric Controller SSH Host Key Validation Vulnerability 2025-06-04T16:00:00+00:00 2025-06-04T16:00:00+00:00
cisco-sa-ise-file-upload-p4m8vwxy Cisco Identity Services Engine Arbitrary File Upload Vulnerability 2025-06-04T16:00:00+00:00 2025-06-23T19:16:21+00:00
cisco-sa-ise-aws-static-cred-fpmjucm7 Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability 2025-06-04T16:00:00+00:00 2025-06-05T17:26:25+00:00
cisco-sa-icm-xss-cfcqhxag Cisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting Vulnerability 2025-06-04T16:00:00+00:00 2025-06-04T16:00:00+00:00
cisco-sa-ccp-info-disc-zygerqpd Cisco Customer Collaboration Platform Information Disclosure Vulnerability 2025-06-04T16:00:00+00:00 2025-06-04T16:00:00+00:00
cisco-sa-webex-xss-7teqtfn8 Cisco Webex Services Cross-Site Scripting Vulnerabilities 2025-05-21T16:00:00+00:00 2025-05-21T16:00:00+00:00
cisco-sa-webex-cache-q4xbkqbg Cisco Webex Meetings Services HTTP Cache Poisoning Vulnerability 2025-05-21T16:00:00+00:00 2025-05-21T16:00:00+00:00
cisco-sa-sna-ssti-dpulqsmz Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability 2025-05-21T16:00:00+00:00 2025-05-21T16:00:00+00:00
ID Description Published Updated
msrc_cve-2025-69651 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. Later, process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. No evidence of further memory corruption or code execution was observed; the impact is limited to denial of service. 2026-03-02T00:00:00.000Z 2026-03-11T01:02:49.000Z
msrc_cve-2025-69650 GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. 2026-03-02T00:00:00.000Z 2026-03-11T01:02:17.000Z
msrc_cve-2025-69649 GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed. 2026-03-02T00:00:00.000Z 2026-03-11T01:02:41.000Z
msrc_cve-2025-69646 Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leading to excessive CPU and I/O usage and preventing completion of the objdump analysis. 2026-03-02T00:00:00.000Z 2026-03-11T01:02:09.000Z
msrc_cve-2025-69645 Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file. 2026-03-02T00:00:00.000Z 2026-03-11T01:02:32.000Z
msrc_cve-2025-69644 An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file. 2026-03-02T00:00:00.000Z 2026-03-11T01:02:56.000Z
msrc_cve-2024-14027 xattr: switch to CLASS(fd) 2026-03-02T00:00:00.000Z 2026-03-11T14:36:33.000Z
msrc_cve-2026-26119 Windows Admin Center Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-17T08:00:00.000Z
msrc_cve-2026-24302 Azure Arc Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-05T08:00:00.000Z
msrc_cve-2026-24300 Azure Front Door Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-05T08:00:00.000Z
msrc_cve-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21537 Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21535 Microsoft Teams Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-19T08:00:00.000Z
msrc_cve-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21532 Azure Function Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-05T08:00:00.000Z
msrc_cve-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21529 Azure HDInsight Spoofing Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-19T08:00:00.000Z
msrc_cve-2026-21527 Microsoft Exchange Server Spoofing Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21523 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-27T08:00:00.000Z
msrc_cve-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21519 Desktop Window Manager Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21518 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability 2026-02-10T08:00:00.000Z 2026-02-27T08:00:00.000Z
msrc_cve-2026-21516 GitHub Copilot for Jetbrains Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21514 Microsoft Word Security Feature Bypass Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21511 Microsoft Outlook Spoofing Vulnerability 2026-02-10T08:00:00.000Z 2026-02-11T08:00:00.000Z
msrc_cve-2026-21510 Windows Shell Security Feature Bypass Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
ID Description Published Updated
ncsc-2025-0383 Kwetsbaarheden verholpen in Microsoft Windows 2025-12-09T18:39:18.152251Z 2025-12-09T18:39:18.152251Z
ncsc-2025-0382 Kwetsbaarheden verholpen in Siemens producten 2025-12-09T13:15:05.391966Z 2025-12-09T13:15:05.391966Z
ncsc-2025-0381 Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform 2025-12-08T08:23:21.965599Z 2025-12-08T08:23:21.965599Z
ncsc-2025-0380 Kwetsbaarheden verholpen in React Server Components 2025-12-03T20:11:57.728117Z 2025-12-05T12:13:36.590522Z
ncsc-2025-0379 Kwetsbaarheden verholpen in Google Android en Samsung Mobile 2025-12-02T13:25:17.745981Z 2025-12-02T13:25:17.745981Z
ncsc-2025-0378 Kwetsbaarheden verholpen in Mattermost 2025-11-28T09:53:42.334621Z 2025-11-28T09:53:42.334621Z
ncsc-2025-0377 Kwetsbaarheden verholpen in GitLab 2025-11-27T13:35:09.121804Z 2025-11-27T13:35:09.121804Z
ncsc-2025-0376 Kwetsbaarheden verholpen in SonicWall Email Security appliances 2025-11-21T16:06:33.949861Z 2025-11-21T16:06:33.949861Z
ncsc-2025-0375 Kwetsbaarheid verholpen in Progress MOVEit Transfer 2025-11-21T16:06:14.387571Z 2025-11-21T16:06:14.387571Z
ncsc-2025-0374 Kwetsbaarheden verholpen in Arista EOS 2025-11-20T11:48:20.126141Z 2025-11-20T11:48:20.126141Z
ncsc-2025-0373 Kwetsbaarheden verholpen in Fortinet FortiOS 2025-11-19T08:35:31.999400Z 2025-11-19T08:35:31.999400Z
ncsc-2025-0372 Kwetsbaarheid verholpen in Fortinet FortiWeb 2025-11-19T08:34:59.616354Z 2025-11-19T08:34:59.616354Z
ncsc-2025-0371 Kwetsbaarheden verholpen in Google Chrome 2025-11-18T09:01:31.984222Z 2025-11-18T09:01:31.984222Z
ncsc-2025-0370 Kwetsbaarheden verholpen in Cisco Unified Contact Center Express 2025-11-18T07:04:55.173157Z 2025-11-18T07:04:55.173157Z
ncsc-2025-0369 Kwetsbaarheden verholpen in IBM AIX 2025-11-18T07:03:55.766335Z 2025-11-18T07:03:55.766335Z
ncsc-2025-0368 Kwetsbaarheden verholpen in Zoom Workplace en Zoom Clients 2025-11-18T07:02:36.696426Z 2025-11-18T07:02:36.696426Z
ncsc-2025-0367 Kwetsbaarheden verholpen in GitLab 2025-11-18T07:01:35.502522Z 2025-11-18T07:01:35.502522Z
ncsc-2025-0366 Kwetsbaarheid verholpen in Fortinet FortiWeb 2025-11-15T14:57:33.774388Z 2025-11-15T14:57:33.774388Z
ncsc-2025-0365 Kwetsbaarheden verholpen in Cisco Catalyst Center 2025-11-14T12:55:27.227262Z 2025-11-14T12:55:27.227262Z
ncsc-2025-0364 Kwetsbaarheid verholpen in Adobe Photoshop 2025-11-12T12:17:16.207233Z 2025-11-12T12:17:16.207233Z
ncsc-2025-0363 Kwetsbaarheden verholpen in Adobe Illustrator 2025-11-12T11:52:08.634593Z 2025-11-12T11:56:09.924799Z
ncsc-2025-0362 Kwetsbaarheden verholpen in Microsoft Visual Studio 2025-11-11T18:35:40.376220Z 2025-11-11T18:35:40.376220Z
ncsc-2025-0361 Kwetsbaarheid verholpen in Microsoft SQL Server 2025-11-11T18:34:39.453615Z 2025-11-11T18:34:39.453615Z
ncsc-2025-0360 Kwetsbaarheden verholpen in Microsoft Dynamics 2025-11-11T18:33:13.936830Z 2025-11-11T18:33:13.936830Z
ncsc-2025-0359 Kwetsbaarheden verholpen in Microsoft Office 2025-11-11T18:31:27.092072Z 2025-11-11T18:31:27.092072Z
ncsc-2025-0358 Kwetsbaartheden verholpen in Microsoft Windows 2025-11-11T18:29:38.918562Z 2025-11-11T18:29:38.918562Z
ncsc-2025-0357 Kwetsbaarheden verholpen in Siemens producten 2025-11-11T18:14:44.487803Z 2025-11-11T18:14:44.487803Z
ncsc-2025-0356 Kwetsbaarheden verholpen in SAP-producten 2025-11-11T12:15:53.615720Z 2025-11-11T12:15:53.615720Z
ncsc-2025-0355 Kwetsbaarheden verholpen in Fortinet FortiOS en FortiProxy 2025-11-07T10:07:28.475542Z 2025-11-07T10:07:28.475542Z
ncsc-2025-0354 Kwetsbaarheid verholpen in Cisco Identity Services Engine 2025-11-06T12:36:51.591695Z 2025-11-06T12:36:51.591695Z
ID Description Published Updated
opensuse-su-2026:20233-1 Security update for openCryptoki 2026-02-13T17:42:04Z 2026-02-13T17:42:04Z
opensuse-su-2026:20227-1 Security update for patch 2026-02-13T16:41:43Z 2026-02-13T16:41:43Z
opensuse-su-2026:20219-1 Security update for htmldoc 2026-02-13T16:07:48Z 2026-02-13T16:07:48Z
opensuse-su-2026:20220-1 Security update for go1.24 2026-02-13T11:53:30Z 2026-02-13T11:53:30Z
opensuse-su-2026:20214-1 Security update for go1.25 2026-02-13T10:08:14Z 2026-02-13T10:08:14Z
opensuse-su-2026:20206-1 Security update for kepler 2026-02-13T08:53:10Z 2026-02-13T08:53:10Z
opensuse-su-2026:10200-1 python310-3.10.19-4.1 on GA media 2026-02-13T00:00:00Z 2026-02-13T00:00:00Z
opensuse-su-2026:10199-1 python311-pymssql-2.3.12-1.1 on GA media 2026-02-13T00:00:00Z 2026-02-13T00:00:00Z
opensuse-su-2026:10198-1 python311-Pillow-12.1.1-1.1 on GA media 2026-02-13T00:00:00Z 2026-02-13T00:00:00Z
opensuse-su-2026:10197-1 libecpg6-18.2-1.1 on GA media 2026-02-13T00:00:00Z 2026-02-13T00:00:00Z
opensuse-su-2026:10196-1 matrix-synapse-1.147.1-1.1 on GA media 2026-02-13T00:00:00Z 2026-02-13T00:00:00Z
opensuse-su-2026:10195-1 gimp-3.0.8-2.1 on GA media 2026-02-13T00:00:00Z 2026-02-13T00:00:00Z
opensuse-su-2026:10194-1 cargo-audit-advisory-db-20260213-1.1 on GA media 2026-02-13T00:00:00Z 2026-02-13T00:00:00Z
opensuse-su-2026:20205-1 Security update for rust1.93 2026-02-12T15:13:26Z 2026-02-12T15:13:26Z
opensuse-su-2026:20204-1 Security update for python-aiohttp, python-Brotli 2026-02-12T14:01:04Z 2026-02-12T14:01:04Z
opensuse-su-2026:10193-1 postgresql17-17.8-1.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10192-1 postgresql16-16.12-1.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10191-1 postgresql15-15.16-1.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10190-1 postgresql14-14.21-1.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10189-1 libowncloudsync-devel-6.0.3-1.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10188-1 libpng16-16-1.6.55-1.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10187-1 haproxy-3.3.3+git0.465d8e2fc-1.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10186-1 gnome-remote-desktop-49.2-2.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10185-1 cargo-c-0.10.15-2.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10184-1 cargo-auditable-0.7.2~0-2.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:10183-1 build-20260202-2.1 on GA media 2026-02-12T00:00:00Z 2026-02-12T00:00:00Z
opensuse-su-2026:20202-1 Security update for python-pip 2026-02-11T19:17:08Z 2026-02-11T19:17:08Z
opensuse-su-2026:20203-1 Security update for openjpeg2 2026-02-11T19:15:23Z 2026-02-11T19:15:23Z
opensuse-su-2026:20199-1 Security update for micropython 2026-02-11T16:38:19Z 2026-02-11T16:38:19Z
opensuse-su-2026:20198-1 Security update for xorg-x11-server 2026-02-11T11:25:45Z 2026-02-11T11:25:45Z
ID Description Published Updated
rhsa-2026:4111 Red Hat Security Advisory: kernel security update 2026-03-09T17:03:00+00:00 2026-03-12T19:09:00+00:00
rhsa-2026:4110 Red Hat Security Advisory: postgresql:16 security update 2026-03-09T16:57:16+00:00 2026-03-13T00:37:35+00:00
rhsa-2026:4086 Red Hat Security Advisory: php security update 2026-03-09T15:28:44+00:00 2026-03-12T19:15:09+00:00
rhsa-2026:4077 Red Hat Security Advisory: php security update 2026-03-09T14:43:34+00:00 2026-03-12T19:09:25+00:00
rhsa-2026:4075 Red Hat Security Advisory: postgresql:12 security update 2026-03-09T14:32:36+00:00 2026-03-13T00:37:42+00:00
rhsa-2026:4074 Red Hat Security Advisory: postgresql:13 security update 2026-03-09T14:27:14+00:00 2026-03-13T00:37:39+00:00
rhsa-2026:4064 Red Hat Security Advisory: postgresql:12 security update 2026-03-09T14:23:54+00:00 2026-03-13T00:37:37+00:00
rhsa-2026:4063 Red Hat Security Advisory: postgresql:16 security update 2026-03-09T13:49:05+00:00 2026-03-13T00:37:35+00:00
rhsa-2026:3976 Red Hat Security Advisory: firefox security update 2026-03-09T13:21:00+00:00 2026-03-12T19:09:19+00:00
rhsa-2026:4059 Red Hat Security Advisory: postgresql:15 security update 2026-03-09T13:00:19+00:00 2026-03-13T00:37:36+00:00
rhsa-2026:4024 Red Hat Security Advisory: postgresql:13 security update 2026-03-09T11:47:59+00:00 2026-03-13T00:37:36+00:00
rhsa-2026:4022 Red Hat Security Advisory: thunderbird security update 2026-03-09T11:24:48+00:00 2026-03-12T19:08:50+00:00
rhsa-2026:4012 Red Hat Security Advisory: kernel security update 2026-03-09T10:02:53+00:00 2026-03-13T18:12:50+00:00
rhsa-2026:4011 Red Hat Security Advisory: kernel security update 2026-03-09T09:38:43+00:00 2026-03-12T19:03:19+00:00
rhsa-2026:3975 Red Hat Security Advisory: freerdp security update 2026-03-09T07:37:48+00:00 2026-03-12T19:09:25+00:00
rhsa-2026:3985 Red Hat Security Advisory: git-lfs security update 2026-03-09T02:13:04+00:00 2026-03-14T06:37:01+00:00
rhsa-2026:3982 Red Hat Security Advisory: thunderbird security update 2026-03-09T02:06:12+00:00 2026-03-12T19:08:50+00:00
rhsa-2026:3987 Red Hat Security Advisory: kpatch-patch-5_14_0-611_9_1 security update 2026-03-09T02:05:22+00:00 2026-03-09T07:51:42+00:00
rhsa-2026:3981 Red Hat Security Advisory: thunderbird security update 2026-03-09T02:02:02+00:00 2026-03-12T19:08:51+00:00
rhsa-2026:3984 Red Hat Security Advisory: firefox security update 2026-03-09T02:00:27+00:00 2026-03-12T19:08:49+00:00
rhsa-2026:3980 Red Hat Security Advisory: thunderbird security update 2026-03-09T01:57:43+00:00 2026-03-12T19:08:56+00:00
rhsa-2026:3968 Red Hat Security Advisory: libpng15 security update 2026-03-09T01:56:43+00:00 2026-03-12T14:52:30+00:00
rhsa-2026:3979 Red Hat Security Advisory: thunderbird security update 2026-03-09T01:56:29+00:00 2026-03-12T19:08:55+00:00
rhsa-2026:3972 Red Hat Security Advisory: git-lfs security update 2026-03-09T01:55:26+00:00 2026-03-14T06:36:56+00:00
rhsa-2026:3978 Red Hat Security Advisory: thunderbird security update 2026-03-09T01:52:42+00:00 2026-03-12T19:08:56+00:00
rhsa-2026:3977 Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update 2026-03-09T01:52:37+00:00 2026-03-14T06:36:57+00:00
rhsa-2026:3974 Red Hat Security Advisory: git-lfs security update 2026-03-09T01:51:17+00:00 2026-03-14T06:36:57+00:00
rhsa-2026:3983 Red Hat Security Advisory: thunderbird security update 2026-03-09T01:50:17+00:00 2026-03-12T19:08:50+00:00
rhsa-2026:3967 Red Hat Security Advisory: libvpx security update 2026-03-09T01:49:02+00:00 2026-03-12T19:15:10+00:00
rhsa-2026:3969 Red Hat Security Advisory: libpng15 security update 2026-03-09T01:35:17+00:00 2026-03-12T14:52:31+00:00
ID Description Published Updated
sevd-2023-045-02 StruxureWare Data Center Expert 2023-02-14T08:05:19.000Z 2023-02-14T08:05:19.000Z
sevd-2023-045-03 Merten KNX devices 2023-02-14T07:24:05.000Z 2023-02-14T07:24:05.000Z
sevd-2023-045-01 EcoStruxureTM Geo SCADA Expert 2023-02-14T06:02:05.000Z 2023-02-14T06:02:05.000Z
sevd-2023-010-03 EcoStruxure™ Power Operation 2021, EcoStruxure™ Power SCADA Operation 2020 and EcoStruxure™ Power SCADA Operation 2020 R2 2023-01-10T17:44:20.000Z 2023-01-10T17:44:20.000Z
sevd-2023-010-02 EcoStruxure Geo SCADA Expert 2023-01-10T16:24:00.000Z 2023-03-13T18:30:00.000Z
sevd-2023-010-05 EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) 2023-01-10T15:41:57.000Z 2024-08-13T00:00:00.000Z
sevd-2023-010-06 EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon M340, M580 and M580 CPU Safety 2023-01-10T15:17:09.000Z 2024-08-13T00:00:00.000Z
sevd-2023-010-04 EcoStruxure™ Power SCADA Anywhere 2023-01-10T10:28:35.000Z 2023-01-10T10:28:35.000Z
sevd-2023-010-01 EcoStruxureTM Machine Expert – HVAC (formerly SoMachine - HVAC) 2023-01-10T09:28:52.000Z 2023-01-10T09:28:52.000Z
sevd-2022-347-01 APC Easy UPS Online Monitoring Software 2022-12-13T06:09:04.000Z 2023-01-11T00:00:00.000Z
sevd-2022-347-03 EcoStruxure Power Commission 2022-12-13T04:28:00.000Z 2022-12-13T04:28:00.000Z
sevd-2022-347-02 Saitel DR RTU 2022-12-13T04:12:25.000Z 2022-12-13T04:12:25.000Z
sevd-2022-312-01 NetBotz 4 - 355/450/455/550/570 2022-11-08T06:53:24.000Z 2023-02-14T06:30:00.000Z
sevd-2022-284-04 EcoStruxure™ Power Operation 2021, EcoStruxure™ Power SCADA Operation 2020 and EcoStruxure™ Power SCADA Operation 2020 R2 2022-10-11T10:45:15.000Z 2022-10-14T10:45:15.000Z
sevd-2022-284-02 EcoStruxure™ Panel Server Box (PAS900) 2022-10-11T10:05:49.000Z 2022-10-11T10:05:49.000Z
sevd-2022-284-01 EcoStruxure™ Operator Terminal Expert and Pro-face BLUE 2022-10-11T09:48:46.000Z 2022-10-11T09:48:46.000Z
sevd-2022-284-03 ISaGRAF Workbench for SAGE RTU 2022-10-10T22:13:16.000Z 2025-11-14T06:30:00.000Z
sevd-2022-256-01 EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio 2022-09-13T05:45:41.000Z 2022-09-13T05:45:41.000Z
sevd-2022-221-01 EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, and Modicon Controllers M580 and M340 2022-08-09T10:58:35.000Z 2024-08-13T00:00:00.000Z
sevd-2022-221-03 EcoStruxure™ Control Expert 2022-08-09T09:14:27.000Z 2022-08-09T09:14:27.000Z
sevd-2022-221-04 Modicon PAC Controllers 2022-08-09T08:15:40.000Z 2024-08-13T00:00:00.000Z
sevd-2022-221-02 Modicon PAC Controllers 2022-08-09T08:15:40.000Z 2024-08-13T00:00:00.000Z
sevd-2022-193-03 Acti9 PowerTag Link C 2022-07-12T18:30:00.000Z 2022-07-12T18:30:00.000Z
sevd-2022-193-02 SpaceLogic C-Bus Home Controller, formerly known as C-Bus Wiser Home Controller MK2 2022-07-12T18:30:00.000Z 2022-07-12T18:30:00.000Z
sevd-2022-193-04 Easergy P5 2022-07-12T08:55:42.000Z 2022-07-12T08:55:42.000Z
sevd-2022-193-01 OPC UA and X80 advanced RTU Modicon Communication Modules 2022-07-12T04:00:00.000Z 2022-08-19T06:30:00.000Z
sevd-2022-165-08 EcoStruxure™ Cybersecurity Admin Expert 2022-06-14T18:30:00.000Z 2022-06-14T18:30:00.000Z
sevd-2022-165-07 CanBRASS 2022-06-14T18:30:00.000Z 2022-06-14T18:30:00.000Z
sevd-2022-165-06 Schneider Electric C-Bus Home Automation Products 2022-06-14T18:30:00.000Z 2022-06-14T18:30:00.000Z
sevd-2022-165-05 EcoStruxure Power Commission 2022-06-14T18:30:00.000Z 2022-06-14T18:30:00.000Z
ID Description Published Updated
ssa-817234 SSA-817234: Multiple Kubernetes Ingress NGINX Controller Vulnerabilities in Insights Hub Private Cloud 2025-04-08T00:00:00Z 2025-04-08T00:00:00Z
ssa-725549 SSA-725549: Denial of Service of ICMP in Industrial Devices 2025-04-08T00:00:00Z 2025-07-21T00:00:00Z
ssa-672923 SSA-672923: Out of Bounds Write Vulnerability in Solid Edge 2025-04-08T00:00:00Z 2025-04-08T00:00:00Z
ssa-634640 SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices 2025-04-08T00:00:00Z 2025-07-08T00:00:00Z
ssa-525431 SSA-525431: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3 2025-04-08T00:00:00Z 2025-04-08T00:00:00Z
ssa-277137 SSA-277137: Multiple Vulnerabilities in SIDIS Prime Before V4.0.700 2025-04-08T00:00:00Z 2025-04-08T00:00:00Z
ssa-187636 SSA-187636: Multiple Vulnerabilities in SENTRON 7KT PAC1260 Data Manager 2025-04-08T00:00:00Z 2025-04-08T00:00:00Z
ssa-920092 SSA-920092: Memory Corruption Vulnerability in Simcenter Femap 2025-03-13T00:00:00Z 2025-03-13T00:00:00Z
ssa-858251 SSA-858251: Authentication Bypass Vulnerabilities in OPC UA 2025-03-11T00:00:00Z 2026-01-13T00:00:00Z
ssa-787280 SSA-787280: Unlocked Bootloader Vulnerability in SINAMICS S200 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
ssa-615740 SSA-615740: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP3 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
ssa-515903 SSA-515903: Multiple Vulnerabilities in SiPass integrated AC5102 / ACC-G2 and ACC-AP 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
ssa-507653 SSA-507653: Improper Access Control Vulnerabilities in Tecnomatix Plant Simulation 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
ssa-503939 SSA-503939: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP 2025-03-11T00:00:00Z 2025-09-09T00:00:00Z
ssa-280834 SSA-280834: Improper OpenVPN Credential Validation Vulnerability in SCALANCE M-800 and SC-600 Families 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
ssa-216014 SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs 2025-03-11T00:00:00Z 2026-02-10T00:00:00Z
ssa-075201 SSA-075201: Multiple Vulnerabilities in SCALANCE LPE9403 Before V4.0 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
ssa-073066 SSA-073066: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP3 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
ssa-050438 SSA-050438: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and Tecnomatix Plant Simulation 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
ssa-992434 SSA-992434: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated 2025-02-17T00:00:00Z 2025-02-17T00:00:00Z
ssa-770770 SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices 2025-02-11T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-769027 SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0 2025-02-11T00:00:00Z 2025-02-11T00:00:00Z
ssa-767615 SSA-767615: Information Disclosure Vulnerability in SIPROTEC 5 Devices 2025-02-11T00:00:00Z 2025-08-12T00:00:00Z
ssa-687955 SSA-687955: Accessible Development Shell via Physical Interface in SIPROTEC 5 2025-02-11T00:00:00Z 2025-11-11T00:00:00Z
ssa-656895 SSA-656895: Open Redirect Vulnerability in Teamcenter 2025-02-11T00:00:00Z 2025-06-10T00:00:00Z
ssa-647005 SSA-647005: Memory Corruption Vulnerability in OpenV2G 2025-02-11T00:00:00Z 2025-02-11T00:00:00Z
ssa-637914 SSA-637914: Local Code Execution Vulnerability in Questa and ModelSim Before V2025.1 2025-02-11T00:00:00Z 2025-02-11T00:00:00Z
ssa-615116 SSA-615116: Multiple Vulnerabilities in Apogee PXC and Talon TC Devices 2025-02-11T00:00:00Z 2025-02-11T00:00:00Z
ssa-369369 SSA-369369: Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor 2025-02-11T00:00:00Z 2025-04-08T00:00:00Z
ssa-342348 SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products 2025-02-11T00:00:00Z 2025-02-11T00:00:00Z
ID Description Published Updated
suse-su-2026:0588-1 Security update for postgresql16 2026-02-20T10:05:15Z 2026-02-20T10:05:15Z
suse-su-2026:0587-1 Security update for the Linux Kernel 2026-02-20T10:04:28Z 2026-02-20T10:04:28Z
suse-su-2026:0586-1 Security update for postgresql17 2026-02-20T10:04:16Z 2026-02-20T10:04:16Z
suse-su-2026:0585-1 Security update for postgresql18 2026-02-20T10:03:34Z 2026-02-20T10:03:34Z
suse-su-2026:0584-1 Security update for postgresql18 2026-02-20T10:03:22Z 2026-02-20T10:03:22Z
suse-su-2026:0583-1 Security update for libpng16 2026-02-20T10:02:34Z 2026-02-20T10:02:34Z
suse-su-2026:0582-1 Security update for snpguest 2026-02-20T10:02:23Z 2026-02-20T10:02:23Z
suse-su-2026:0581-1 Security update for openCryptoki 2026-02-20T06:38:26Z 2026-02-20T06:38:26Z
suse-su-2026:0577-1 Security update for avahi 2026-02-18T15:49:23Z 2026-02-18T15:49:23Z
suse-su-2026:0573-1 Security update for kubernetes-old 2026-02-17T18:47:26Z 2026-02-17T18:47:26Z
suse-su-2026:0572-1 Security update for kubernetes 2026-02-17T18:47:08Z 2026-02-17T18:47:08Z
suse-su-2026:0571-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer 2026-02-17T18:46:54Z 2026-02-17T18:46:54Z
suse-su-2026:0570-1 Security update for libxml2 2026-02-17T16:38:51Z 2026-02-17T16:38:51Z
suse-su-2026:0561-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7) 2026-02-16T12:33:41Z 2026-02-16T12:33:41Z
suse-su-2026:0560-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) 2026-02-16T12:03:47Z 2026-02-16T12:03:47Z
suse-su-2026:0559-1 Security update for freerdp 2026-02-16T11:43:04Z 2026-02-16T11:43:04Z
suse-su-2026:0558-1 Security update for libnvidia-container 2026-02-16T11:42:25Z 2026-02-16T11:42:25Z
suse-su-2026:0557-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) 2026-02-16T10:33:36Z 2026-02-16T10:33:36Z
suse-su-2026:0556-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7) 2026-02-16T10:03:47Z 2026-02-16T10:03:47Z
suse-su-2026:0555-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7) 2026-02-16T09:04:29Z 2026-02-16T09:04:29Z
suse-su-2026:0554-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7) 2026-02-16T08:33:36Z 2026-02-16T08:33:36Z
suse-su-2026:0551-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6) 2026-02-16T06:33:35Z 2026-02-16T06:33:35Z
suse-su-2026:0550-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6) 2026-02-16T05:33:34Z 2026-02-16T05:33:34Z
suse-su-2026:0548-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6) 2026-02-16T03:33:34Z 2026-02-16T03:33:34Z
suse-su-2026:0546-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) 2026-02-15T19:33:42Z 2026-02-15T19:33:42Z
suse-su-2026:0544-1 Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) 2026-02-15T18:03:51Z 2026-02-15T18:03:51Z
suse-su-2026:0543-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6) 2026-02-15T17:33:36Z 2026-02-15T17:33:36Z
suse-su-2026:0542-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) 2026-02-15T16:03:51Z 2026-02-15T16:03:51Z
suse-su-2026:0539-1 Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5) 2026-02-15T13:33:40Z 2026-02-15T13:33:40Z
suse-su-2026:0535-1 Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5) 2026-02-15T11:04:06Z 2026-02-15T11:04:06Z
ID Description Published Updated
alsa-2026:2124 Important: osbuild-composer security update 2026-02-05T00:00:00Z 2026-02-09T11:33:23Z
alsa-2026:2090 Important: python3.12-wheel security update 2026-02-05T00:00:00Z 2026-02-06T08:49:17Z
alsa-2026:2081 Important: freerdp security update 2026-02-05T00:00:00Z 2026-02-06T08:53:33Z
alsa-2026:2048 Important: freerdp security update 2026-02-05T00:00:00Z 2026-02-10T07:49:11Z
alsa-2026:2042 Important: brotli security update 2026-02-05T00:00:00Z 2026-02-05T12:08:23Z
alsa-2026:2039 Important: fontforge security update 2026-02-05T00:00:00Z 2026-02-06T21:29:46Z
alsa-2026:1939 Important: python3.12-wheel security update 2026-02-04T00:00:00Z 2026-02-10T07:52:01Z
alsa-2026:1913 Moderate: util-linux security update 2026-02-04T00:00:00Z 2026-02-10T07:54:49Z
alsa-2026:1908 Important: opentelemetry-collector security update 2026-02-04T00:00:00Z 2026-02-10T07:56:31Z
alsa-2026:1907 Important: opentelemetry-collector security update 2026-02-04T00:00:00Z 2026-02-10T07:58:47Z
alsa-2026:1906 Important: fence-agents security update 2026-02-04T00:00:00Z 2026-02-10T08:07:49Z
alsa-2026:1905 Important: fence-agents security update 2026-02-04T00:00:00Z 2026-02-10T08:20:49Z
alsa-2026:1904 Important: resource-agents security update 2026-02-04T00:00:00Z 2026-02-10T08:22:54Z
alsa-2026:1903 Important: fence-agents security update 2026-02-04T00:00:00Z 2026-02-10T08:31:08Z
alsa-2026:1902 Important: python-wheel security update 2026-02-04T00:00:00Z 2026-02-05T09:52:44Z
alsa-2026:1852 Moderate: util-linux security update 2026-02-03T00:00:00Z 2026-02-10T08:33:43Z
alsa-2026:1843 Important: nodejs22 security update 2026-02-03T00:00:00Z 2026-02-06T17:27:45Z
alsa-2026:1842 Important: nodejs24 security update 2026-02-03T00:00:00Z 2026-02-06T17:30:17Z
alsa-2026:1837 Moderate: osbuild-composer security update 2026-02-03T00:00:00Z 2026-02-06T17:33:01Z
alsa-2026:1831 Moderate: qemu-kvm security update 2026-02-03T00:00:00Z 2026-02-06T17:34:44Z
alsa-2026:1828 Moderate: python3.12 security update 2026-02-03T00:00:00Z 2026-02-05T09:48:47Z
alsa-2026:1825 Moderate: curl security update 2026-02-03T00:00:00Z 2026-02-05T09:50:43Z
alsa-2026:1715 Important: golang-github-openprinting-ipp-usb security update 2026-02-02T00:00:00Z 2026-02-03T11:03:28Z
alsa-2026:1714 Moderate: wireshark security update 2026-02-02T00:00:00Z 2026-02-03T11:02:21Z
alsa-2026:1696 Moderate: util-linux security update 2026-02-02T00:00:00Z 2026-02-03T11:05:12Z
alsa-2026:1690 Important: kernel security update 2026-02-02T00:00:00Z 2026-02-05T09:56:48Z
alsa-2026:1662 Moderate: kernel security update 2026-02-02T00:00:00Z 2026-02-02T13:45:57Z
alsa-2026:1661 Moderate: kernel-rt security update 2026-02-02T00:00:00Z 2026-02-02T13:40:07Z
alsa-2026:1631 Moderate: python3 security update 2026-02-02T00:00:00Z 2026-02-02T12:08:18Z
alsa-2026:1628 Important: php security update 2026-02-02T00:00:00Z 2026-02-02T09:59:40Z
ID Description Published Updated
osv-2025-618 Heap-buffer-overflow in iTUNTripletCallback 2025-08-12T00:05:50.847179Z 2025-08-12T00:05:50.847582Z
osv-2025-617 UNKNOWN WRITE in MP4_BoxFree 2025-08-12T00:04:18.009473Z 2025-08-12T00:04:18.009816Z
osv-2025-616 Heap-buffer-overflow in Open 2025-08-12T00:00:48.056276Z 2025-08-12T00:00:48.056623Z
osv-2025-615 Index-out-of-bounds in hevc_get_picture_size 2025-08-12T00:00:42.725434Z 2025-08-12T00:00:42.725767Z
osv-2025-614 Heap-buffer-overflow in hevc_hvcC_to_AnnexB_NAL 2025-08-12T00:00:36.634849Z 2025-08-12T00:00:36.635239Z
osv-2025-613 Heap-buffer-overflow in check_sync_pes 2025-08-12T00:00:33.354786Z 2025-08-12T00:00:33.355391Z
osv-2025-608 Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes 2025-08-09T00:02:00.092320Z 2025-08-11T14:17:56.957704Z
osv-2025-600 Heap-buffer-overflow in generic_unpack 2025-08-05T00:10:00.536266Z 2025-08-05T00:10:00.536669Z
osv-2025-597 Heap-buffer-overflow in generic_unpack 2025-08-04T00:08:26.345735Z 2025-08-04T00:08:26.346368Z
osv-2025-593 Heap-buffer-overflow in mmcall 2025-08-02T00:16:19.626747Z 2025-12-20T14:30:41.473113Z
osv-2025-591 UNKNOWN READ in mov_read_header 2025-08-02T00:02:00.509459Z 2025-08-02T00:02:00.510035Z
osv-2025-589 Heap-buffer-overflow in isvcd_decode_recon_tfr_nmb_base_lyr 2025-08-01T00:10:54.848946Z 2025-08-01T00:10:54.849286Z
osv-2025-584 Heap-buffer-overflow in isvcd_mark_err_slice_skip 2025-07-31T00:09:08.538145Z 2025-07-31T00:09:08.538507Z
osv-2025-580 UNKNOWN READ in signed char Assimp::StreamReader<false, false>::Get<signed char> 2025-07-29T00:16:41.422221Z 2026-01-25T14:18:57.285875Z
osv-2025-570 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2025-07-23T00:17:34.356115Z 2025-07-23T00:17:34.356449Z
osv-2025-565 Heap-buffer-overflow in pcpp::IPv6Address::IPv6Address 2025-07-21T00:09:57.314960Z 2025-12-22T14:22:23.333531Z
osv-2025-564 Heap-buffer-overflow in ndpi_match_host_subprotocol 2025-07-21T00:03:40.000875Z 2025-07-21T00:03:40.001170Z
osv-2025-550 Use-of-uninitialized-value in CFF::cff2_cs_opset_t<cff2_cs_opset_subr_subset_t, CFF::subr_subset_param_t, CFF: 2025-07-16T00:09:08.050994Z 2025-07-16T00:09:08.051469Z
osv-2025-547 Security exception in com.alibaba.fastjson2.JSONReader.readArray 2025-07-15T00:09:03.936493Z 2026-02-07T14:17:37.720783Z
osv-2025-544 Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32 2025-07-11T00:16:53.687776Z 2025-07-11T00:16:53.688703Z
osv-2025-542 Use-of-uninitialized-value in httpEncode64_3 2025-07-10T00:07:45.698070Z 2025-07-10T00:07:45.698655Z
osv-2025-541 Heap-buffer-overflow in js_create_function 2025-07-09T00:20:09.455729Z 2025-07-09T00:20:09.456170Z
osv-2025-538 Heap-double-free in policydb_destroy 2025-07-09T00:05:37.052433Z 2025-12-20T14:25:14.356814Z
osv-2025-534 Heap-use-after-free in ih264_inter_pred_luma_horz_ssse3 2025-07-08T00:08:11.218515Z 2025-07-08T00:08:11.218991Z
osv-2025-530 Invalid-free in cli_pdf 2025-07-07T00:17:21.884018Z 2025-07-07T00:17:21.884367Z
osv-2025-528 Heap-buffer-overflow in xmlnode_parser_structural_error_libxml 2025-07-07T00:10:42.902465Z 2025-07-07T00:10:42.902766Z
osv-2025-525 UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame 2025-07-06T00:18:54.304371Z 2025-07-06T00:18:54.304891Z
osv-2025-524 Heap-buffer-overflow in JS_CallInternal 2025-07-05T00:19:21.758513Z 2025-07-05T00:19:21.758880Z
osv-2025-515 Use-of-uninitialized-value in JS_DefineProperty 2025-07-03T00:16:17.481972Z 2025-07-03T00:16:17.482410Z
osv-2025-512 Invalid-free in pdf_decodestream 2025-07-03T00:00:40.745577Z 2025-07-03T00:00:40.746200Z
ID Description Published Updated
rustsec-2025-0068 serde_yml crate is unsound and unmaintained 2025-09-11T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0067 `libyml::string::yaml_string_extend` is unsound and unmaintained 2025-09-11T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0065 matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method 2025-09-11T12:00:00Z 2025-09-11T12:21:52Z
rustsec-2025-0000 matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method 2025-09-11T12:00:00Z 2025-09-11T12:10:54Z
rustsec-2025-0066 The `google-apis-rs` project is now unmaintained 2025-09-09T12:00:00Z 2025-09-11T16:34:38Z
rustsec-2025-0061 iron crate is unmaintained 2025-09-08T12:00:00Z 2025-09-08T09:09:54Z
rustsec-2025-0060 crypto-hash crate is unmaintained 2025-09-08T12:00:00Z 2025-09-08T09:09:54Z
rustsec-2025-0059 servo-fontconfig crate is unmaintained 2025-09-08T12:00:00Z 2025-09-08T09:09:54Z
rustsec-2025-0058 custom_derive crate is unmaintained 2025-09-07T12:00:00Z 2025-09-07T08:38:20Z
rustsec-2025-0057 fxhash - no longer maintained 2025-09-05T12:00:00Z 2025-09-05T19:09:01Z
rustsec-2025-0056 adler crate is unmaintained, use adler2 instead 2025-09-05T12:00:00Z 2025-09-05T09:05:48Z
rustsec-2025-0055 Logging user input may result in poisoning logs with ANSI escape sequences 2025-08-29T12:00:00Z 2025-09-02T11:05:02Z
rustsec-2025-0052 async-std has been discontinued 2025-08-24T12:00:00Z 2025-08-27T11:36:30Z
rustsec-2025-0054 ArrayQueue::push_front is not panic-safe 2025-08-14T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0053 Multiple memory corruption vulnerabilities in safe APIs 2025-08-14T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0050 IdMap::from_iter may lead to uninitialized memory being freed on drop 2025-08-14T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0049 User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows 2025-08-14T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0047 Out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check 2025-08-12T12:00:00Z 2025-08-12T09:41:13Z
rustsec-2025-0051 `xcb::Connection::connect_to_fd*` functions violate I/O safety 2025-08-05T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0048 tsify-next is unmaintained, use tsify instead 2025-07-29T12:00:00Z 2025-08-13T14:05:32Z
rustsec-2025-0112 Possible host crash with host-to-wasm component intrinsics 2025-07-18T12:00:00Z 2025-10-25T11:20:30Z
rustsec-2025-0046 Host panic with `fd_renumber` WASIp1 function 2025-07-18T12:00:00Z 2025-07-18T19:48:13Z
rustsec-2025-0045 ConstStaticCell could have been used to pass non-Send values to another thread 2025-07-17T12:00:00Z 2025-07-17T14:38:11Z
rustsec-2025-0043 matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations` 2025-07-11T12:00:00Z 2025-07-11T15:30:12Z
rustsec-2025-0042 Uninitialized read after allocating MemBump 2025-07-11T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0044 Four unique double-free vulnerabilities triggered via safe APIs 2025-06-16T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0041 matrix-sdk-crypto vulnerable to encrypted event sender spoofing by homeserver administrator 2025-06-11T12:00:00Z 2025-06-12T09:17:43Z
rustsec-2025-0138 --allow-read / --allow-write permission bypass in `node:sqlite` 2025-06-03T12:00:00Z 2025-12-29T10:04:21Z
rustsec-2025-0062 Heap Buffer Overflow in the DrainCol Destructor 2025-05-22T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0037 Pingora Request Smuggling and Cache Poisoning 2025-05-22T12:00:00Z 2025-10-28T06:02:18Z
ID Description Published Updated
bit-grafana-2026-21725 Authorization Bypass via TOCTOU in Grafana Datasource Deletion by Name 2026-03-02T08:41:16.926Z 2026-03-02T09:10:16.414Z
bit-pytorch-2025-2149 PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization 2026-02-26T15:23:05.500Z 2026-02-26T15:46:51.306Z
bit-pytorch-2025-2148 PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption 2026-02-26T15:23:02.496Z 2026-02-26T15:46:51.306Z
bit-neo4j-2026-1337 Insufficient escaping of unicode characters in query log 2026-02-26T15:16:17.899Z 2026-02-26T15:46:51.306Z
bit-superset-2026-23983 Apache Superset: Sensitive Data Exposure via REST API (disabled by default) 2026-02-26T08:54:03.107Z 2026-02-26T09:13:58.886Z
bit-superset-2026-23982 Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass 2026-02-26T08:54:01.397Z 2026-02-26T09:13:58.886Z
bit-superset-2026-23980 Apache Superset: Improper Neutralization of Special Elements used in a SQL Command 2026-02-26T08:53:59.760Z 2026-02-26T09:13:58.886Z
bit-valkey-2026-27623 Valkey has Pre-Authentication DOS from malformed RESP request 2026-02-26T08:53:22.415Z 2026-02-26T09:13:58.886Z
bit-valkey-2026-21863 Malformed Valkey Cluster bus message can lead to Remote DoS 2026-02-26T08:53:20.799Z 2026-02-26T09:13:58.886Z
bit-valkey-2025-67733 Valkey Affected by RESP Protocol Injection via Lua error_reply 2026-02-26T08:53:18.978Z 2026-02-26T09:13:58.886Z
bit-mongodb-2026-25613 An unsafe cast in the MongoDB query planner can result in a segmentation fault. 2026-02-26T08:47:48.322Z 2026-02-26T09:13:58.886Z
bit-mongodb-2026-25610 Invalid $geoNear index hint may cause server crash 2026-02-26T08:47:46.620Z 2026-02-26T09:13:58.886Z
bit-mongodb-2026-25609 profile command may permit unauthorized configuration 2026-02-26T08:47:44.983Z 2026-02-26T09:13:58.886Z
bit-mongodb-2026-1850 An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification 2026-02-26T08:47:43.390Z 2026-02-26T09:13:58.886Z
bit-mongodb-2026-1849 Mongod can run out of stack memory when expressions create deeply nested documents 2026-02-26T08:47:41.788Z 2026-02-26T09:13:58.886Z
bit-mongodb-2026-1848 Connections received from the proxy port may not count towards total accepted connections 2026-02-26T08:47:40.094Z 2026-02-26T09:13:58.886Z
bit-mongodb-2026-1847 MongoDB Server may crash when inserting large documents 2026-02-26T08:47:38.190Z 2026-02-26T09:13:58.886Z
bit-airflow-2025-27555 Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli 2026-02-26T08:39:17.851Z 2026-02-26T09:13:58.886Z
bit-airflow-2024-56373 Apache Airflow: SSTI to Code Execution in Airflow through Shared DB Information 2026-02-26T08:39:15.266Z 2026-02-26T09:13:58.886Z
bit-airflow-2025-65995 Apache Airflow: Disclosure of secrets to UI via kwargs 2026-02-24T08:38:47.831Z 2026-02-24T09:11:39.593Z
bit-ghost-2026-26980 Ghost has a SQL Injection in its Content API 2026-02-21T08:39:22.999Z 2026-02-21T09:08:21.332Z
bit-cilium-2026-26963 Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled 2026-02-21T08:36:53.368Z 2026-02-21T09:08:21.332Z
bit-cosign-2026-24122 Cosign Certificate Chain Expiry Validation Issue Allows Issuing Certificate Expiry to Be Overlooked 2026-02-21T08:36:39.661Z 2026-02-21T09:08:21.332Z
bit-tomcat-2026-24734 Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass 2026-02-20T09:53:00.269Z 2026-03-12T09:10:07.191Z
bit-tomcat-2026-24733 Apache Tomcat: Security constraint bypass with HTTP/0.9 2026-02-20T09:52:58.708Z 2026-03-12T09:10:07.191Z
bit-tomcat-2025-66614 Apache Tomcat: Client certificate verification bypass due to virtual host mapping 2026-02-20T09:52:57.300Z 2026-03-12T09:10:07.191Z
bit-nifi-2026-25903 Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates 2026-02-20T08:45:57.883Z 2026-02-20T09:09:49.097Z
bit-milvus-2025-64513 Milvus Proxy has Critical Authentication Bypass Vulnerability 2026-02-20T08:43:34.608Z 2026-02-20T09:09:49.097Z
bit-jenkins-2026-27100 2026-02-20T08:43:34.823Z 2026-02-20T09:09:49.097Z
bit-jenkins-2026-27099 2026-02-20T08:43:33.019Z 2026-02-20T09:09:49.097Z
ID Description Published Updated
cleanstart-2026-wi17406 Redis is an open source, in-memory database that persists on disk 2026-01-30T17:35:28.375848Z 2026-01-29T18:58:54Z
cleanstart-2026-wi75198 vulnerability has been identified in Node 2026-01-30T17:34:27.754206Z 2026-01-29T18:58:54Z
cleanstart-2026-az32516 Within HostnameError 2026-01-30T17:27:26.591189Z 2026-01-29T18:58:54Z
cleanstart-2026-yt18139 issue was discovered in libexpat before 2 2026-01-30T17:26:57.202658Z 2026-01-29T18:58:54Z
cleanstart-2026-zd89666 Within HostnameError 2026-01-30T17:26:56.612763Z 2026-01-29T18:58:54Z
cleanstart-2026-pb78859 ParseAddress function constructs domain-literal address components through repeated string concatenation 2026-01-30T17:25:56.763674Z 2026-01-29T18:58:54Z
cleanstart-2026-jx46109 Within HostnameError 2026-01-30T17:25:26.548568Z 2026-01-29T18:58:54Z
cleanstart-2026-yg94604 Within HostnameError 2026-01-30T17:24:56.864393Z 2026-01-29T18:58:54Z
cleanstart-2026-qz70444 Within HostnameError 2026-01-30T17:24:26.605623Z 2026-01-29T18:58:54Z
cleanstart-2026-az24638 Within HostnameError 2026-01-30T17:22:56.881050Z 2026-01-29T18:58:54Z
cleanstart-2026-hj04971 vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT 2026-01-30T17:21:56.808972Z 2026-01-29T18:58:54Z
cleanstart-2026-ck35256 Within HostnameError 2026-01-30T17:21:56.458213Z 2026-01-29T18:58:54Z
cleanstart-2026-hf39630 potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf 2026-01-30T17:20:56.632450Z 2026-01-29T18:58:54Z
cleanstart-2026-nf19624 ParseAddress function constructs domain-literal address components through repeated string concatenation 2026-01-30T17:20:26.466437Z 2026-01-29T18:58:54Z
cleanstart-2026-fw42039 vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT 2026-01-30T17:19:56.954092Z 2026-01-29T18:58:54Z
cleanstart-2026-ht23337 flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm 2026-01-30T17:15:56.746125Z 2026-01-29T18:58:54Z
cleanstart-2026-zz61324 Hunspell 1 2026-01-30T17:14:26.562334Z 2026-01-29T18:58:54Z
cleanstart-2026-ba37192 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers 2026-01-30T17:14:26.459138Z 2026-01-29T18:58:54Z
cleanstart-2026-xb16901 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers 2026-01-30T17:13:56.781902Z 2026-01-29T18:58:54Z
cleanstart-2026-zc18474 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access 2026-01-30T17:04:56.559720Z 2026-01-29T18:58:54Z
cleanstart-2026-yb44027 Moby is an open-source project created by Docker for software containerization 2026-01-30T17:04:26.396860Z 2026-01-29T18:58:54Z
cleanstart-2026-ka40024 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access 2026-01-30T17:03:56.468881Z 2026-01-29T18:58:54Z
cleanstart-2026-sb85645 Moby is an open-source project created by Docker for software containerization 2026-01-30T17:00:56.485426Z 2026-01-29T18:58:54Z
cleanstart-2026-os18490 Moby is an open-source project created by Docker for software containerization 2026-01-30T16:58:26.304466Z 2026-01-29T18:58:54Z
cleanstart-2026-xl45869 Moby is an open-source project created by Docker for software containerization 2026-01-30T16:57:56.432971Z 2026-01-29T18:58:54Z
cleanstart-2026-dn29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing 2026-01-30T16:57:26.436107Z 2026-01-29T18:58:54Z
cleanstart-2026-zr62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing 2026-01-30T16:56:56.696859Z 2026-01-29T18:58:54Z
cleanstart-2025-zr62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing 2026-01-30T16:56:56.696859Z 2026-01-29T18:58:54Z
cleanstart-2026-jm16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing 2026-01-30T16:56:26.537390Z 2026-01-29T18:58:54Z
cleanstart-2026-bn11148 Moby is an open-source project created by Docker for software containerization 2026-01-30T16:54:56.412220Z 2026-01-29T18:58:54Z
ID Description Updated
ID Description Published Updated
CERTFR-2021-ALE-021 Vulnérabilité dans Microsoft Exchange 2021-11-10T00:00:00.000000 2022-05-04T00:00:00.000000
certfr-2021-ale-020 [Maj] Multiples vulnérabilités dans Microsoft Azure Open Management Infrastructure 2021-09-17T00:00:00.000000 2022-01-05T00:00:00.000000
CERTFR-2021-ALE-020 [Maj] Multiples vulnérabilités dans Microsoft Azure Open Management Infrastructure 2021-09-17T00:00:00.000000 2022-01-05T00:00:00.000000
certfr-2021-ale-019 [MaJ] Vulnérabilité dans Microsoft Windows 2021-09-08T00:00:00.000000 2022-05-04T00:00:00.000000
CERTFR-2021-ALE-019 [MaJ] Vulnérabilité dans Microsoft Windows 2021-09-08T00:00:00.000000 2022-05-04T00:00:00.000000
certfr-2021-ale-018 Vulnérabilité dans Atlassian Confluence Server et Data Center 2021-09-06T00:00:00.000000 2022-01-05T00:00:00.000000
CERTFR-2021-ALE-018 Vulnérabilité dans Atlassian Confluence Server et Data Center 2021-09-06T00:00:00.000000 2022-01-05T00:00:00.000000
certfr-2021-ale-017 Multiples vulnérabilités dans Microsoft Exchange 2021-08-27T00:00:00.000000 2022-05-04T00:00:00.000000
CERTFR-2021-ALE-017 Multiples vulnérabilités dans Microsoft Exchange 2021-08-27T00:00:00.000000 2022-05-04T00:00:00.000000
certfr-2021-ale-016 Vulnérabilité dans SonicWall 2021-07-15T00:00:00.000000 2021-08-19T00:00:00.000000
CERTFR-2021-ALE-016 Vulnérabilité dans SonicWall 2021-07-15T00:00:00.000000 2021-08-19T00:00:00.000000
certfr-2021-ale-015 Multiples vulnérabilités dans SolarWinds Serv-U 2021-07-13T00:00:00.000000 2021-10-19T00:00:00.000000
CERTFR-2021-ALE-015 Multiples vulnérabilités dans SolarWinds Serv-U 2021-07-13T00:00:00.000000 2021-10-19T00:00:00.000000
certfr-2021-ale-014 [MaJ] Multiples vulnérabilités dans Microsoft Windows 2021-07-02T00:00:00.000000 2022-01-05T00:00:00.000000
CERTFR-2021-ALE-014 [MaJ] Multiples vulnérabilités dans Microsoft Windows 2021-07-02T00:00:00.000000 2022-01-05T00:00:00.000000
certfr-2021-ale-013 [MaJ] Vulnérabilité dans Microsoft Windows 2021-06-30T00:00:00.000000 2021-07-02T00:00:00.000000
CERTFR-2021-ALE-013 [MaJ] Vulnérabilité dans Microsoft Windows 2021-06-30T00:00:00.000000 2021-07-02T00:00:00.000000
certfr-2021-ale-012 Multiples vulnérabilités dans Microsoft Windows 2021-06-09T00:00:00.000000 2021-10-19T00:00:00.000000
CERTFR-2021-ALE-012 Multiples vulnérabilités dans Microsoft Windows 2021-06-09T00:00:00.000000 2021-10-19T00:00:00.000000
certfr-2021-ale-011 Vulnérabilité dans VMware vCenter Server 2021-06-07T00:00:00.000000 2021-10-19T00:00:00.000000
CERTFR-2021-ALE-011 Vulnérabilité dans VMware vCenter Server 2021-06-07T00:00:00.000000 2021-10-19T00:00:00.000000
certfr-2021-ale-010 Vulnérabilité dans Adobe Acrobat et Acrobat Reader 2021-05-12T00:00:00.000000 2021-06-29T00:00:00.000000
certfr-2021-ale-009 [MàJ] Vulnérabilité dans Microsoft Windows 2021-05-12T00:00:00.000000 2021-06-10T00:00:00.000000
CERTFR-2021-ALE-010 Vulnérabilité dans Adobe Acrobat et Acrobat Reader 2021-05-12T00:00:00.000000 2021-06-29T00:00:00.000000
CERTFR-2021-ALE-009 [MàJ] Vulnérabilité dans Microsoft Windows 2021-05-12T00:00:00.000000 2021-06-10T00:00:00.000000
certfr-2021-ale-008 Multiples vulnérabilités dans Exim 2021-05-05T00:00:00.000000 2021-06-10T00:00:00.000000
CERTFR-2021-ALE-008 Multiples vulnérabilités dans Exim 2021-05-05T00:00:00.000000 2021-06-10T00:00:00.000000
certfr-2021-ale-007 [MàJ] Vulnérabilité dans Pulse Connect Secure 2021-04-20T00:00:00.000000 2021-06-21T00:00:00.000000
CERTFR-2021-ALE-007 [MàJ] Vulnérabilité dans Pulse Connect Secure 2021-04-20T00:00:00.000000 2021-06-21T00:00:00.000000
certfr-2021-ale-006 [MàJ] Vulnérabilité dans F5 BIG-IP 2021-03-22T00:00:00.000000 2021-04-15T00:00:00.000000
ID Description Published Updated
certfr-2026-avi-0175 Multiples vulnérabilités dans les produits Mozilla 2026-02-17T00:00:00.000000 2026-02-17T00:00:00.000000
certfr-2026-avi-0174 Multiples vulnérabilités dans LibreNMS 2026-02-17T00:00:00.000000 2026-02-17T00:00:00.000000
certfr-2026-avi-0173 Multiples vulnérabilités dans les produits Mattermost 2026-02-16T00:00:00.000000 2026-02-16T00:00:00.000000
certfr-2026-avi-0172 Vulnérabilité dans Google Chrome 2026-02-16T00:00:00.000000 2026-02-16T00:00:00.000000
CERTFR-2026-AVI-0173 Multiples vulnérabilités dans les produits Mattermost 2026-02-16T00:00:00.000000 2026-02-16T00:00:00.000000
CERTFR-2026-AVI-0172 Vulnérabilité dans Google Chrome 2026-02-16T00:00:00.000000 2026-02-16T00:00:00.000000
certfr-2026-avi-0171 Multiples vulnérabilités dans les produits IBM 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0170 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0169 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0168 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0167 Multiples vulnérabilités dans le noyau Linux de Debian LTS 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0166 Multiples vulnérabilités dans le noyau Linux de Debian 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0165 Vulnérabilité dans Mattermost Server 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0164 Multiples vulnérabilités dans PostgreSQL 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0163 Multiples vulnérabilités dans HAProxy 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0162 Multiples vulnérabilités dans Juniper Networks Secure Analytics 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0161 Vulnérabilité dans Tenable Nessus Agent 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0171 Multiples vulnérabilités dans les produits IBM 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0170 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0169 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0168 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0167 Multiples vulnérabilités dans le noyau Linux de Debian LTS 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0166 Multiples vulnérabilités dans le noyau Linux de Debian 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0165 Vulnérabilité dans Mattermost Server 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0164 Multiples vulnérabilités dans PostgreSQL 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0163 Multiples vulnérabilités dans HAProxy 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0162 Multiples vulnérabilités dans Juniper Networks Secure Analytics 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
CERTFR-2026-AVI-0161 Vulnérabilité dans Tenable Nessus Agent 2026-02-13T00:00:00.000000 2026-02-13T00:00:00.000000
certfr-2026-avi-0160 Multiples vulnérabilités dans les produits Palo Alto Networks 2026-02-12T00:00:00.000000 2026-02-12T00:00:00.000000
certfr-2026-avi-0159 Multiples vulnérabilités dans Keycloak 2026-02-12T00:00:00.000000 2026-02-12T00:00:00.000000
ID Description Published Updated
jvndb-2025-000077 RICOH Streamline NX vulnerable to tampering with operation history 2025-09-08T13:42+09:00 2025-09-24T16:53+09:00
jvndb-2025-000072 Obsidian GitHub Copilot Plugin stores sensitive information in cleartext 2025-09-05T16:52+09:00 2025-09-05T16:52+09:00
jvndb-2025-000073 RATOC RAID Monitoring Manager for Windows registers a Windows service with an unquoted file path 2025-09-05T16:20+09:00 2025-09-05T16:20+09:00
jvndb-2025-000071 "Yahoo! Shopping" App for Android fails to restrict custom URL schemes properly 2025-09-05T15:12+09:00 2025-09-05T15:12+09:00
jvndb-2025-000075 Multiple vulnerabilities in TkEasyGUI 2025-09-05T14:53+09:00 2025-09-05T14:53+09:00
jvndb-2025-000069 Web Caster V130 vulnerable to cross-site request forgery 2025-09-03T14:23+09:00 2025-09-03T14:23+09:00
jvndb-2025-000070 "Gunosy" App vulnerable to insertion of sensitive information into sent data 2025-09-02T14:20+09:00 2025-09-09T09:51+09:00
jvndb-2025-000068 Seiko Solutions SkyBridge BASIC MB-A130 vulnerable to OS command injection 2025-09-01T16:21+09:00 2025-09-01T16:21+09:00
jvndb-2025-012659 Denial-of-service (DoS) vulnerability in Konica Minolta bizhub series 2025-09-01T15:22+09:00 2025-09-01T15:22+09:00
jvndb-2025-000067 Multiple vulnerabilities in multiple iND products 2025-08-29T14:47+09:00 2025-08-29T14:47+09:00
jvndb-2025-000066 Improper file access permission settings in multiple i-FILTER products 2025-08-27T19:50+09:00 2025-09-29T13:45+09:00
jvndb-2025-000064 Multiple vulnerabilities in SS1 2025-08-27T15:13+09:00 2025-08-27T15:13+09:00
jvndb-2025-000065 ScanSnap Manager installers vulnerable to privilege escalation 2025-08-27T14:22+09:00 2025-08-27T14:22+09:00
jvndb-2025-000063 Western Digital Kitfox registers a Windows service with an unquoted file path 2025-08-22T13:37+09:00 2025-08-22T13:37+09:00
jvndb-2025-000062 Multiple vulnerabilities in Group-Office 2025-08-21T14:03+09:00 2025-08-21T14:03+09:00
jvndb-2025-011884 FUJIFILM Healthcare Americas Synapse Mobility vulnerable to Privilege Escalation 2025-08-21T11:49+09:00 2025-08-25T10:38+09:00
jvndb-2025-000061 Multiple vulnerabilities in Movable Type 2025-08-20T15:30+09:00 2025-08-20T15:30+09:00
jvndb-2025-000060 PgManage vulnerable to injection 2025-08-18T13:40+09:00 2025-08-18T13:40+09:00
jvndb-2025-000059 Seagate Toolkit registers a Windows service with an unquoted file path 2025-08-14T12:32+09:00 2025-08-19T14:40+09:00
jvndb-2025-000058 WordPress plugin "Advanced Custom Fields" vulnerable to HTML injection 2025-08-08T15:29+09:00 2025-08-08T15:29+09:00
jvndb-2025-010972 Multiple SEIKO EPSON products use weak initial passwords 2025-08-08T14:50+09:00 2025-08-08T14:50+09:00
jvndb-2025-000057 Multiple vulnerabilities in Mubit Powered BLUE 870 2025-08-08T14:47+09:00 2025-08-08T14:47+09:00
jvndb-2025-010854 Trend Micro Endpoint security products for enterprises vulnerable to multiple OS command injection 2025-08-07T12:25+09:00 2025-08-19T11:36+09:00
jvndb-2025-000056 Multiple vulnerabilities in Sato label printers CL4/6NX Plus and CL4/6NX-J Plus series 2025-08-06T16:38+09:00 2025-08-06T16:38+09:00
jvndb-2025-010603 Out-of-bounds write vulnerability in FUJIFILM Business Innovation MFPs 2025-08-05T11:29+09:00 2025-08-05T11:29+09:00
jvndb-2025-010408 Multiple vulnerabilities in PowerCMS 2025-08-01T12:05+09:00 2025-08-01T12:05+09:00
jvndb-2025-000055 ZXHN-F660T and ZXHN-F660A use a common credential for all installations 2025-07-31T15:12+09:00 2025-07-31T15:12+09:00
jvndb-2025-000054 Apache Jena Fuseki vulnerable to path traversal 2025-07-30T14:17+09:00 2025-07-30T14:17+09:00
jvndb-2025-000053 "SwitchBot" App vulnerable to insertion of sensitive information into log file 2025-07-29T13:44+09:00 2025-07-29T13:44+09:00
jvndb-2025-010056 TP-Link VIGI NVR1104H-4P and VIGI NVR2016H-16MP vulnerable to OS command injection 2025-07-28T17:53+09:00 2025-07-28T17:53+09:00
ID Description Published Updated
cnvd-2026-10653 IBM ApplinX信息泄露漏洞(CNVD-2026-10653) 2026-01-30 2026-02-10
cnvd-2026-10638 Tenda AX1803缓冲区溢出漏洞(CNVD-2026-10638) 2026-01-30 2026-02-09
cnvd-2026-10318 Tenda AX1806 fromSetSysTime函数堆栈溢出漏洞 2026-01-30 2026-02-05
cnvd-2026-10317 Oracle MySQL Server存在未明漏洞(CNVD-2026-10317) 2026-01-30 2026-02-05
cnvd-2026-10316 Tenda AX1806 deviceList参数堆栈溢出漏洞 2026-01-30 2026-02-05
cnvd-2026-10313 Oracle MySQL Server存在未明漏洞(CNVD-2026-10313) 2026-01-30 2026-02-05
cnvd-2026-10312 Oracle MySQL Server存在未明漏洞(CNVD-2026-10312) 2026-01-30 2026-02-05
cnvd-2026-09811 OpenEMR未授权访问漏洞 2026-01-30 2026-01-30
cnvd-2026-09793 Apache Solr输入验证错误漏洞 2026-01-30 2026-01-30
cnvd-2026-09792 Apache Linkis信息泄露漏洞(CNVD-2026-09792) 2026-01-30 2026-01-30
cnvd-2026-09791 Apache Linkis授权问题漏洞 2026-01-30 2026-01-30
cnvd-2026-09790 Apache Airflow信息泄露漏洞 2026-01-30 2026-01-30
cnvd-2026-09789 Apache Hadoop HDFS越界写入漏洞 2026-01-30 2026-01-30
cnvd-2026-09634 MedDream PACS Premium notifynewstudy功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09633 MedDream PACS Premium modifyTranscript功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09632 MedDream PACS Premium modifyRoute功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09631 MedDream PACS Premium modifyHL7Route功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09630 MedDream PACS Premium modifyHL7App功能跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09629 MedDream PACS Premium modifyEmail功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09628 MedDream PACS Premium modifyCoercion功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09627 MedDream PACS Premium modifyAutopurgeFilter功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09626 MedDream PACS Premium modifyAeTitle功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09625 MedDream PACS Premium ldapUser功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09624 MedDream PACS Premium fetchPriorStudies功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09623 MedDream PACS Premium existingUser功能跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09622 MedDream PACS Premium encapsulatedDoc功能跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09621 MedDream PACS Premium config.php功能worklistsrc参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09620 MedDream PACS Premium config.php功能uploaddir参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09619 MedDream PACS Premium config.php功能thumbnaildir参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09618 MedDream PACS Premium config.php功能status参数跨站脚本漏洞 2026-01-30 2026-02-03
ID Description Published Updated
bdu:2026-01708 Уязвимость функции commonprefix() модуля pip языка программирования Python, позволяющая н… 11.02.2026 11.02.2026
bdu:2026-01707 Уязвимость библиотеки обработки JSON-данных Json-smart, связанная с неконтролируемой реку… 11.02.2026 11.02.2026
bdu:2026-01706 Уязвимость функции toFixed() среды выполнения JavaScript-кода Rhino, позволяющая нарушите… 11.02.2026 11.02.2026
bdu:2026-01705 Уязвимость классов ManifestParser и AmazonS3 системы контроля версий Git на языке Java Ec… 11.02.2026 11.02.2026
bdu:2026-01704 Уязвимость компонента JSON Web Token Handler программного средства для управления иденти… 11.02.2026 11.02.2026
bdu:2026-01703 Уязвимость функции h2v2_merged_upsample_internal() библиотеки libjpeg-turbo, позволяющая … 11.02.2026 11.02.2026
bdu:2026-01702 Уязвимость диспетчера окон рабочего стола (Desktop Window Manager) операционных систем Wi… 11.02.2026 11.02.2026
bdu:2026-01701 Уязвимость службы удаленного рабочего стола Remote Desktop Services (RDS) операционных си… 11.02.2026 11.02.2026
bdu:2026-01700 Уязвимость компонента MSHTML операционных систем Windows, позволяющая нарушителю обойти ф… 11.02.2026 11.02.2026
bdu:2026-01699 Уязвимость пакета программ Microsoft Office, связанная с использованием ненадежных входны… 11.02.2026 11.02.2026
bdu:2026-01698 Уязвимость службы Remote Access Connection Manager (RASMan) операционной системы Windows,… 11.02.2026 11.02.2026
bdu:2026-01639 Уязвимость функций virtio_queue_rqs() и virtblk_poll() модуля drivers/block/virtio_blk.c … 11.02.2026 11.02.2026
bdu:2026-01636 Уязвимость функции felix_change_tag_protocol() модуля drivers/net/dsa/ocelot/felix.c драй… 11.02.2026 11.02.2026
bdu:2026-01635 Уязвимость анализатора XML-файлов Xerces2 Java, связанная с ошибками управления ресурсом,… 11.02.2026 11.02.2026
bdu:2026-01634 Уязвимость библиотеки синтаксического анализа XML Apache Xerces, связанная с выполнением … 11.02.2026 11.02.2026
bdu:2026-01633 Уязвимость функции gfx_v9_0_hw_fini() модуля drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c драйве… 11.02.2026 11.02.2026
bdu:2026-01632 Уязвимость компонента io.netty.handler.codec.http.HttpRequestEncoder сетевого программног… 11.02.2026 11.02.2026
bdu:2026-01631 Уязвимость функции nouveau_gem_prime_import_sg_table() модуля drivers/gpu/drm/nouveau/nou… 11.02.2026 11.02.2026
bdu:2026-01630 Уязвимость командной оболочки Shell операционных систем Windows, позволяющая нарушителю о… 11.02.2026 11.02.2026
bdu:2026-01629 Уязвимость функции efivar_ssdt_load() модуля drivers/firmware/efi/efi.c драйвера прошивок… 11.02.2026 11.02.2026
bdu:2026-01628 Уязвимость функции irdma_net_event() модуля drivers/infiniband/hw/irdma/utils.c драйвера … 11.02.2026 11.02.2026
bdu:2026-01627 Уязвимость функции kimage_map_segment() модуля kernel/kexec_core.c ядра операционной сист… 11.02.2026 11.02.2026
bdu:2026-01626 Уязвимость функций rtw89_core_register_hw(), rtw89_pci_probe() модуля drivers/net/wireles… 11.02.2026 11.02.2026
bdu:2026-01625 Уязвимость инструмента создания сценариев веб-клиента системы для управления взаимоотноше… 11.02.2026 11.02.2026
bdu:2026-01599 Уязвимость функции drain_obj_stock() модуля mm/memcontrol.c подсистемы управления памятью… 11.02.2026 11.02.2026
bdu:2026-01598 Уязвимость функции f2fs_put_super() модуля fs/f2fs/super.c файловой системы F2FS ядра опе… 11.02.2026 11.02.2026
bdu:2026-01570 Уязвимость функции a7xx_patch_pwrup_reglist() модуля drivers/gpu/drm/msm/adreno/a6xx_gpu… 11.02.2026 11.02.2026
bdu:2026-01569 Уязвимость функции exynos_clkout_probe() модуля drivers/clk/samsung/clk-exynos-clkout.c д… 11.02.2026 11.02.2026
bdu:2026-01568 Уязвимость функции adv7842_cp_log_status() модуля drivers/media/i2c/adv7842.c драйвера му… 11.02.2026 11.02.2026
bdu:2026-01567 Уязвимость функции raid1_remove_disk() модуля drivers/md/raid1.c драйвера нескольких устр… 11.02.2026 11.02.2026
ID Description Updated
var-202010-1511 A use after free issue was addressed with improved memory management. This issue is fixed… 2024-07-23T22:14:35.686000Z
var-201912-1854 An issue existed in the drawing of web page elements. The issue was addressed with improv… 2024-07-23T22:14:33.774000Z
var-200511-0019 The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows… 2024-07-23T22:14:03.297000Z
var-201008-0270 The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used o… 2024-07-23T22:14:01.941000Z
var-200904-0819 Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.… 2024-07-23T22:12:51.678000Z
var-201711-0446 An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… 2024-07-23T22:12:50.009000Z
var-201912-0506 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T22:12:49.908000Z
var-200609-0311 Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote at… 2024-07-23T22:12:46.615000Z
var-201905-1248 Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some m… 2024-07-23T22:12:08.666000Z
var-202007-1133 Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an … 2024-07-23T22:12:07.961000Z
var-201009-0230 bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attac… 2024-07-23T22:12:06.629000Z
var-201806-1488 An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… 2024-07-23T22:12:00.711000Z
var-201405-0244 The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEA… 2024-07-23T22:12:00.239000Z
var-200611-0368 The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Pas… 2024-07-23T22:11:59.300000Z
var-201806-1436 An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… 2024-07-23T22:11:27.007000Z
var-201702-0879 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … 2024-07-23T22:10:32.463000Z
var-200703-0010 Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… 2024-07-23T22:10:30.778000Z
var-201902-0855 png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_im… 2024-07-23T22:10:27.196000Z
var-202010-1294 A use after free issue was addressed with improved memory management. This issue is fixed… 2024-07-23T22:10:25.978000Z
var-201506-0038 Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to exe… 2024-07-23T22:10:25.193000Z
var-200805-0585 OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the… 2024-07-23T22:10:24.233000Z
var-202012-1547 A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel thr… 2024-07-23T22:10:23.557000Z
var-201302-0236 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T22:10:22.448000Z
var-202004-2191 In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untru… 2024-07-23T22:10:21.285000Z
var-201904-0742 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T22:10:15.079000Z
var-200608-0030 Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 1… 2024-07-23T22:10:15.377000Z
var-201912-0608 A memory corruption issue was addressed with improved input validation. This issue is fix… 2024-07-23T22:09:37.183000Z
var-200505-0162 Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based … 2024-07-23T22:09:05.800000Z
var-202003-1771 A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-pro… 2024-07-23T22:09:01.387000Z
var-201506-0465 The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.… 2024-07-23T22:08:28.995000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated