Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-54898 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-09-09T17:00:54.212Z | 2026-02-26T17:48:59.769Z |
| CVE-2025-49813 |
6.6 (3.1)
|
An improper neutralization of special elements us… |
Fortinet |
FortiADC |
2025-08-12T18:59:19.468Z | 2026-02-26T17:48:59.044Z |
| CVE-2025-32766 |
6.3 (3.1)
|
A stack-based buffer overflow vulnerability [CWE-… |
Fortinet |
FortiWeb |
2025-08-12T18:59:16.692Z | 2026-02-26T17:48:59.410Z |
| CVE-2025-25256 |
9.8 (3.1)
|
An improper neutralization of special elements us… |
Fortinet |
FortiSIEM |
2025-08-12T18:59:14.863Z | 2026-02-26T17:48:59.921Z |
| CVE-2025-54906 |
7.8 (3.1)
|
Microsoft Office Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-09-09T17:00:57.894Z | 2026-02-26T17:48:58.388Z |
| CVE-2025-54904 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-09-09T17:00:56.615Z | 2026-02-26T17:48:58.533Z |
| CVE-2025-54902 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-09-09T17:00:55.356Z | 2026-02-26T17:48:58.838Z |
| CVE-2025-53744 |
6.8 (3.1)
|
An incorrect privilege assignment vulnerability [… |
Fortinet |
FortiOS |
2025-08-12T18:59:22.011Z | 2026-02-26T17:48:58.679Z |
| CVE-2023-45584 |
6.3 (3.1)
|
A double free vulnerability [CWE-415] vulnerabili… |
Fortinet |
FortiProxy |
2025-08-12T18:59:35.883Z | 2026-02-26T17:48:58.204Z |
| CVE-2025-55223 |
7 (3.1)
|
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-09-09T17:01:02.102Z | 2026-02-26T17:48:57.186Z |
| CVE-2025-54919 |
7.5 (3.1)
|
Windows Graphics Component Remote Code Execution Vulne… |
Microsoft |
Windows 10 Version 1809 |
2025-09-09T17:01:01.459Z | 2026-02-26T17:48:57.537Z |
| CVE-2025-54908 |
7.8 (3.1)
|
Microsoft PowerPoint Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-09-09T17:00:58.996Z | 2026-02-26T17:48:57.908Z |
| CVE-2025-47857 |
6.5 (3.1)
|
A improper neutralization of special elements use… |
Fortinet |
FortiWeb |
2025-08-12T19:00:05.087Z | 2026-02-26T17:48:57.003Z |
| CVE-2025-27759 |
6.7 (3.1)
|
An improper neutralization of special elements us… |
Fortinet |
FortiWeb |
2025-08-12T18:59:49.646Z | 2026-02-26T17:48:57.350Z |
| CVE-2024-26009 |
7.9 (3.1)
|
An authentication bypass using an alternate path … |
Fortinet |
FortiPAM |
2025-08-12T18:59:47.462Z | 2026-02-26T17:48:57.729Z |
| CVE-2025-55317 |
7.8 (3.1)
|
Microsoft AutoUpdate (MAU) Elevation of Privilege Vuln… |
Microsoft |
Microsoft AutoUpdate for Mac |
2025-09-09T17:01:07.872Z | 2026-02-26T17:48:56.092Z |
| CVE-2025-55316 |
7.8 (3.1)
|
Azure Connected Machine Agent Elevation of Privilege V… |
Microsoft |
Azure Connected Machine Agent |
2025-09-09T17:01:07.205Z | 2026-02-26T17:48:56.427Z |
| CVE-2025-55245 |
7.8 (3.1)
|
Xbox Gaming Services Elevation of Privilege Vulnerability |
Microsoft |
Xbox Gaming Services |
2025-09-09T17:01:05.889Z | 2026-02-26T17:48:56.560Z |
| CVE-2025-55228 |
7.8 (3.1)
|
Windows Graphics Component Remote Code Execution Vulne… |
Microsoft |
Windows 10 Version 21H2 |
2025-09-09T17:01:04.230Z | 2026-02-26T17:48:56.838Z |
| CVE-2025-49569 |
7.8 (3.1)
|
Substance3D - Viewer | Out-of-bounds Write (CWE-787) |
Adobe |
Substance3D - Viewer |
2025-08-12T20:08:01.433Z | 2026-02-26T17:48:56.271Z |
| CVE-2025-49560 |
7.8 (3.1)
|
Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122) |
Adobe |
Substance3D - Viewer |
2025-08-12T20:07:59.593Z | 2026-02-26T17:48:56.698Z |
| CVE-2025-53802 |
7 (3.1)
|
Windows Bluetooth Service Elevation of Privilege Vulne… |
Microsoft |
Windows 10 Version 21H2 |
2025-09-09T17:01:12.213Z | 2026-02-26T17:48:55.106Z |
| CVE-2025-53800 |
7.8 (3.1)
|
Windows Graphics Component Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 1607 |
2025-09-09T17:01:10.938Z | 2026-02-26T17:48:55.450Z |
| CVE-2025-49692 |
7.8 (3.1)
|
Azure Connected Machine Agent Elevation of Privilege V… |
Microsoft |
Azure Connected Machine Agent |
2025-09-09T17:01:08.470Z | 2026-02-26T17:48:55.778Z |
| CVE-2025-49571 |
7.8 (3.1)
|
Substance3D - Modeler | Uncontrolled Search Path Eleme… |
Adobe |
Substance3D - Modeler |
2025-08-12T20:36:07.533Z | 2026-02-26T17:48:55.292Z |
| CVE-2025-49570 |
7.8 (3.1)
|
Photoshop Desktop | Out-of-bounds Write (CWE-787) |
Adobe |
Photoshop Desktop |
2025-08-12T20:29:35.794Z | 2026-02-26T17:48:55.604Z |
| CVE-2025-49561 |
7.8 (3.1)
|
Animate | Use After Free (CWE-416) |
Adobe |
Animate |
2025-08-12T20:25:41.981Z | 2026-02-26T17:48:55.932Z |
| CVE-2025-54093 |
7 (3.1)
|
Windows TCP/IP Driver Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1507 |
2025-09-09T17:01:18.982Z | 2026-02-26T17:48:54.165Z |
| CVE-2025-54092 |
7.8 (3.1)
|
Windows Hyper-V Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-09-09T17:01:18.383Z | 2026-02-26T17:48:54.549Z |
| CVE-2025-53808 |
6.7 (3.1)
|
Windows Defender Firewall Service Elevation of Privile… |
Microsoft |
Windows 10 Version 1507 |
2025-09-09T17:01:15.772Z | 2026-02-26T17:48:54.716Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-14668 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
campcodes Advanced Online Examination System loginExe.… |
campcodes |
Advanced Online Examination System |
2025-12-14T16:32:07.839Z | 2026-02-24T05:50:59.131Z |
| CVE-2025-14665 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
Tenda WH450 HTTP Request DhcpListClient stack-based overflow |
Tenda |
WH450 |
2025-12-14T15:02:09.088Z | 2026-02-24T05:50:47.189Z |
| CVE-2025-14656 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda AC20 openSchedWifi httpd buffer overflow |
Tenda |
AC20 |
2025-12-14T11:02:07.310Z | 2026-02-24T05:50:18.678Z |
| CVE-2025-14655 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTime… |
Tenda |
AC20 |
2025-12-14T10:32:08.489Z | 2026-02-24T05:50:00.913Z |
| CVE-2025-14636 |
6.3 (4.0)
3.7 (3.1)
3.7 (3.0)
|
Tenda AX9 httpd image_check weak hash |
Tenda |
AX9 |
2025-12-13T19:02:08.025Z | 2026-02-24T05:49:20.379Z |
| CVE-2025-14589 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
code-projects Prison Management System search.php sql … |
code-projects |
Prison Management System |
2025-12-13T10:32:07.091Z | 2026-02-24T05:48:41.011Z |
| CVE-2025-14583 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
campcodes Online Student Enrollment System register.ph… |
campcodes |
Online Student Enrollment System |
2025-12-12T22:02:09.974Z | 2026-02-24T05:48:12.459Z |
| CVE-2025-14582 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
campcodes Online Student Enrollment System index.php u… |
campcodes |
Online Student Enrollment System |
2025-12-12T22:02:07.303Z | 2026-02-24T05:48:00.344Z |
| CVE-2025-14566 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
kidaze CourseSelectionSystem reg.php sql injection |
kidaze |
CourseSelectionSystem |
2025-12-12T15:32:08.420Z | 2026-02-24T05:47:11.578Z |
| CVE-2025-14565 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
kidaze CourseSelectionSystem login1.php sql injection |
kidaze |
CourseSelectionSystem |
2025-12-12T15:32:06.269Z | 2026-02-24T05:46:58.180Z |
| CVE-2025-14527 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
projectworlds Advanced Library Management System view_… |
projectworlds |
Advanced Library Management System |
2025-12-11T17:02:09.729Z | 2026-02-24T05:46:32.987Z |
| CVE-2025-14526 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda CH22 L7Im frmL7ImForm buffer overflow |
Tenda |
CH22 |
2025-12-11T16:32:09.328Z | 2026-02-24T05:46:21.260Z |
| CVE-2025-14518 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
PowerJob Network Request PingPongUtils.java checkConne… |
n/a |
PowerJob |
2025-12-11T15:02:08.153Z | 2026-02-24T05:46:06.690Z |
| CVE-2025-14276 |
6.3 (4.0)
5.6 (3.1)
5.6 (3.0)
|
Ilevia EVE X1 Server leaf_search.php command injection |
Ilevia |
EVE X1 Server |
2025-12-08T21:32:08.167Z | 2026-02-24T05:44:58.788Z |
| CVE-2025-14219 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
Campcodes Retro Basketball Shoes Online Store admin_ru… |
Campcodes |
Retro Basketball Shoes Online Store |
2025-12-08T06:02:07.585Z | 2026-02-24T05:44:07.983Z |
| CVE-2025-14212 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
projectworlds Advanced Library Management System membe… |
projectworlds |
Advanced Library Management System |
2025-12-08T03:02:07.359Z | 2026-02-24T05:43:55.095Z |
| CVE-2025-14211 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
projectworlds Advanced Library Management System delet… |
projectworlds |
Advanced Library Management System |
2025-12-08T02:32:06.385Z | 2026-02-24T05:43:41.688Z |
| CVE-2025-14209 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Campcodes School File Management System update_query.p… |
Campcodes |
School File Management System |
2025-12-08T01:32:07.017Z | 2026-02-24T05:43:17.750Z |
| CVE-2025-14195 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
code-projects Employee Profile Management System add_f… |
code-projects |
Employee Profile Management System |
2025-12-07T15:02:05.771Z | 2026-02-24T05:42:38.842Z |
| CVE-2025-14193 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
code-projects Employee Profile Management System view_… |
code-projects |
Employee Profile Management System |
2025-12-07T14:02:05.879Z | 2026-02-24T05:42:12.330Z |
| CVE-2025-14012 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
JIZHICMS Batch Delete Comments deleteAll.html delete s… |
n/a |
JIZHICMS |
2025-12-04T17:32:08.510Z | 2026-02-24T05:40:25.562Z |
| CVE-2025-14011 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
JIZHICMS Add Display Name Field addcomment.html commen… |
n/a |
JIZHICMS |
2025-12-04T17:32:06.179Z | 2026-02-24T05:40:11.562Z |
| CVE-2025-14005 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
dayrui XunRuiCMS Add Display Name Field admind45f74adb… |
dayrui |
XunRuiCMS |
2025-12-04T13:32:08.601Z | 2026-02-24T05:39:20.960Z |
| CVE-2025-14004 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
dayrui XunRuiCMS Email Setting admind45f74adbd95.php s… |
dayrui |
XunRuiCMS |
2025-12-04T13:32:06.141Z | 2026-02-24T05:39:08.429Z |
| CVE-2025-69367 |
7.1 (3.1)
|
WordPress Oyster - Photography WordPress Theme theme <… |
GT3themes |
Oyster - Photography WordPress Theme |
2026-02-20T15:46:50.750Z | 2026-02-23T22:08:05.425Z |
| CVE-2025-68854 |
7.1 (3.1)
|
WordPress ID Arrays plugin <= 2.1.2 - POST-Based Refle… |
harman79 |
ID Arrays |
2026-02-20T15:46:43.644Z | 2026-02-23T22:08:05.744Z |
| CVE-2025-68037 |
7.1 (3.1)
|
WordPress Export Media URLs plugin <= 2.2 - Reflected … |
Atlas Gondal |
Export Media URLs |
2026-02-20T15:46:36.647Z | 2026-02-23T22:08:05.889Z |
| CVE-2025-53231 |
7.1 (3.1)
|
WordPress Easy Taxonomy Images plugin <= 1.0.1 - Cross… |
wpdevstudio |
Easy Taxonomy Images |
2026-02-20T15:46:26.944Z | 2026-02-23T22:08:06.036Z |
| CVE-2025-53228 |
7.1 (3.1)
|
WordPress bbpress Simple Advert Units Plugin <= 0.41 -… |
jezza101 |
bbpress Simple Advert Units |
2026-02-20T15:46:26.768Z | 2026-02-23T22:08:06.172Z |
| CVE-2026-27163 |
N/A
|
This CVE was assigned in error. | N/A | N/A | 2026-02-23T21:30:30.262Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68852 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:13.983 | 2026-02-23T22:16:19.960 |
| fkie_cve-2025-68848 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:13.853 | 2026-02-23T22:16:19.773 |
| fkie_cve-2025-68847 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:13.687 | 2026-02-23T22:16:19.553 |
| fkie_cve-2025-68846 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:13.480 | 2026-02-23T22:16:19.343 |
| fkie_cve-2025-68845 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:13.273 | 2026-02-23T22:16:19.157 |
| fkie_cve-2025-68844 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:13.133 | 2026-02-23T22:16:18.967 |
| fkie_cve-2025-68843 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:13.000 | 2026-02-23T22:16:18.773 |
| fkie_cve-2025-68842 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:12.873 | 2026-02-23T22:16:18.583 |
| fkie_cve-2025-68501 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:10.100 | 2026-02-23T22:16:18.387 |
| fkie_cve-2025-68495 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:09.630 | 2026-02-23T22:16:18.190 |
| fkie_cve-2025-68031 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:08.087 | 2026-02-23T22:16:17.997 |
| fkie_cve-2025-67991 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:05.230 | 2026-02-23T22:16:17.807 |
| fkie_cve-2025-67990 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:05.100 | 2026-02-23T22:16:17.617 |
| fkie_cve-2025-67984 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:04.710 | 2026-02-23T22:16:17.430 |
| fkie_cve-2025-67978 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:04.063 | 2026-02-23T22:16:17.233 |
| fkie_cve-2025-67972 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:03.430 | 2026-02-23T22:16:17.043 |
| fkie_cve-2025-67971 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:03.293 | 2026-02-23T22:16:16.837 |
| fkie_cve-2025-53237 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:02.223 | 2026-02-23T22:16:16.620 |
| fkie_cve-2025-53233 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:02.077 | 2026-02-23T22:16:16.373 |
| fkie_cve-2026-22351 | Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows … | 2026-02-20T16:22:34.237 | 2026-02-23T21:19:09.807 |
| fkie_cve-2025-69393 | Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured A… | 2026-02-20T16:22:24.840 | 2026-02-23T21:19:08.873 |
| fkie_cve-2025-69380 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in van… | 2026-02-20T16:22:22.570 | 2026-02-23T21:19:08.670 |
| fkie_cve-2020-8908 | A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with … | 2020-12-10T23:15:13.973 | 2026-02-23T21:17:30.437 |
| fkie_cve-2025-70064 | PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability. A low-pri… | 2026-02-18T19:21:42.493 | 2026-02-23T21:03:37.660 |
| fkie_cve-2025-70062 | PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerabili… | 2026-02-18T19:21:42.270 | 2026-02-23T21:03:09.027 |
| fkie_cve-2026-2886 | A weakness has been identified in Tenda A21 1.0.0.0. This affects the function set_device_name of t… | 2026-02-21T21:16:11.217 | 2026-02-23T21:00:35.513 |
| fkie_cve-2026-2870 | A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function se… | 2026-02-21T15:15:59.643 | 2026-02-23T21:00:00.257 |
| fkie_cve-2026-2871 | A weakness has been identified in Tenda A21 1.0.0.0. This affects the function fromSetIpMacBind of … | 2026-02-21T16:16:05.133 | 2026-02-23T20:59:13.240 |
| fkie_cve-2026-2872 | A security vulnerability has been detected in Tenda A21 1.0.0.0. This vulnerability affects the fun… | 2026-02-21T16:16:05.390 | 2026-02-23T20:57:59.307 |
| fkie_cve-2026-2873 | A vulnerability was detected in Tenda A21 1.0.0.0. This issue affects the function setSchedWifi of … | 2026-02-21T17:15:58.987 | 2026-02-23T20:56:58.853 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-75g2-xj79-xvcw |
9.8 (3.1)
9.5 (4.0)
|
When a specific function is enabled while joining a AD Domain from ADM, an improper input parameter… | 2026-02-03T06:31:05Z | 2026-02-19T18:31:43Z |
| ghsa-53xr-2xx3-73wm |
3.7 (3.1)
6.3 (4.0)
|
The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate whe… | 2026-02-03T03:30:27Z | 2026-02-19T18:31:43Z |
| ghsa-4rhr-9xj2-x9gx |
|
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_sh… | 2026-02-04T18:30:44Z | 2026-02-19T18:31:43Z |
| ghsa-3qgq-r69m-f2f7 |
9.3 (4.0)
|
Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with p… | 2026-01-27T09:30:30Z | 2026-02-19T18:31:43Z |
| ghsa-xrr8-p4pf-hfwr |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return … | 2025-04-16T15:34:39Z | 2026-02-19T18:31:42Z |
| ghsa-w4x2-878r-xjgp |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing fre… | 2025-05-01T15:31:41Z | 2026-02-19T18:31:42Z |
| ghsa-mw57-63xv-7mx2 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lo… | 2025-08-22T18:31:22Z | 2026-02-19T18:31:42Z |
| ghsa-jf3w-82f5-fq58 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence… | 2025-10-07T18:31:08Z | 2026-02-19T18:31:42Z |
| ghsa-hp7p-hw7m-prxm |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: fix of_iomap me… | 2025-09-18T18:30:27Z | 2026-02-19T18:31:42Z |
| ghsa-gvh3-4cff-qfpj |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ksmbd: set ATTR_CTIME flags wh… | 2025-01-15T15:31:25Z | 2026-02-19T18:31:42Z |
| ghsa-g7f2-49vp-j5f7 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: send SIGBUS to cur… | 2025-09-11T18:35:52Z | 2026-02-19T18:31:42Z |
| ghsa-7mv8-qr93-j282 |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table o… | 2025-05-01T15:31:44Z | 2026-02-19T18:31:42Z |
| ghsa-5gcf-h7r6-w82j |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, u… | 2024-04-17T12:32:02Z | 2026-02-19T18:31:42Z |
| ghsa-5c8q-r66v-f4fc |
7.5 (3.1)
8.3 (4.0)
|
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Prof… | 2025-12-16T18:31:32Z | 2026-02-19T18:31:42Z |
| ghsa-4qc6-52f6-6vgr |
4.7 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_… | 2025-05-20T18:30:54Z | 2026-02-19T18:31:42Z |
| ghsa-2v48-hmwv-qpj8 |
7.8 (3.1)
7.3 (4.0)
|
Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hija… | 2025-12-09T18:30:37Z | 2026-02-19T18:31:42Z |
| ghsa-2jg8-5xcc-qjcx |
8.8 (3.1)
7.1 (4.0)
|
Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue … | 2025-12-11T18:30:45Z | 2026-02-19T18:31:42Z |
| ghsa-rf92-7gjw-vm2g |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows atta… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-qx2f-v62g-3w7p |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the … | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-p5q9-gghv-g686 |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows atta… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-jxpr-m2mh-h3r3 |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows atta… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-jmc4-f6rv-h5gr |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unau… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-h82x-c7r5-xpqv |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attack… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-h3w6-x9vg-c4cv |
7.2 (3.1)
5.3 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attacke… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-gqxh-mgm3-9w6j |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows atta… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-cc7m-45cp-7f4q |
7.2 (3.1)
5.3 (4.0)
|
Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to in… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-97v4-p49x-2ch3 |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows atta… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-7x9p-8p89-5443 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-7g54-j55c-px94 |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows atta… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ghsa-7952-xr2h-v2wg |
6.1 (3.1)
5.1 (4.0)
|
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows atta… | 2026-02-19T15:30:35Z | 2026-02-19T15:30:35Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-330 |
|
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify l… | parlai | 2021-09-10T22:15:00Z | 2021-09-23T00:11:05.455785Z |
| pysec-2021-329 |
|
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x… | neutron | 2021-09-08T20:15:00Z | 2021-09-23T00:11:02.378195Z |
| pysec-2021-328 |
|
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and b… | mitmproxy | 2021-09-16T15:15:00Z | 2021-09-23T00:11:00.900340Z |
| pysec-2021-327 |
|
Apprise is an open source library which allows you to send a notification to almost all o… | apprise | 2021-09-20T22:15:00Z | 2021-09-23T00:10:35.209283Z |
| pysec-2021-326 |
|
The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1… | apache-airflow | 2021-09-09T15:15:00Z | 2021-09-21T14:26:17.443988Z |
| pysec-2021-325 |
|
Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flas… | flask-restx | 2021-09-20T18:15:00Z | 2021-09-20T20:31:06.092661Z |
| pysec-2021-324 |
|
An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the func… | lief | 2021-09-20T16:15:00Z | 2021-09-20T18:35:23.431537Z |
| pysec-2021-323 |
|
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Pr… | products-isurlinportal | 2021-08-02T19:15:00Z | 2021-09-20T14:26:43.785985Z |
| pysec-2021-322 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0… | wasmtime | 2021-09-17T20:15:00Z | 2021-09-17T22:30:49.947373Z |
| pysec-2021-321 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.… | wasmtime | 2021-09-17T21:15:00Z | 2021-09-17T22:30:49.898970Z |
| pysec-2021-320 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.… | wasmtime | 2021-09-17T20:15:00Z | 2021-09-17T22:30:49.852358Z |
| pysec-2021-319 |
|
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attack… | postorius | 2021-09-10T19:15:00Z | 2021-09-10T20:31:12.904905Z |
| pysec-2021-317 |
|
The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of… | pillow | 2021-09-03T16:15:00Z | 2021-09-03T18:35:52.828411Z |
| pysec-2019-201 |
|
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_han… | roundup | 2019-04-06T20:29:00Z | 2021-09-02T01:11:35.189013Z |
| pysec-2020-224 |
|
An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and … | apache-superset | 2020-01-28T01:15:00Z | 2021-09-02T01:10:59.006282Z |
| pysec-2021-371 |
|
BinderHub is a kubernetes-based cloud service that allows users to share reproducible int… | binderhub | 2021-08-25T19:15:00Z | 2021-09-01T12:23:00Z |
| pysec-2014-51 |
|
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed… | plone | 2014-11-03T22:55:00Z | 2021-09-01T08:44:31.427296Z |
| pysec-2014-50 |
|
The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obt… | plone | 2014-11-03T22:55:00Z | 2021-09-01T08:44:31.321280Z |
| pysec-2014-49 |
|
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:31.212307Z |
| pysec-2014-48 |
|
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to … | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:31.097145Z |
| pysec-2014-47 |
|
atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read priva… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.978910Z |
| pysec-2014-46 |
|
Cross-site scripting (XSS) vulnerability in widget_traversal.py in Plone before 4.2.3 and… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.873895Z |
| pysec-2014-45 |
|
ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.766279Z |
| pysec-2014-44 |
|
Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 be… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.658658Z |
| pysec-2014-43 |
|
at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to rea… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.552304Z |
| pysec-2014-42 |
|
The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before… | plone | 2014-11-03T22:55:00Z | 2021-09-01T08:44:30.447394Z |
| pysec-2014-41 |
|
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to … | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.342149Z |
| pysec-2014-40 |
|
queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to by… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.217052Z |
| pysec-2014-39 |
|
membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.107520Z |
| pysec-2014-37 |
|
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to … | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.952455Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3694 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.609033Z |
| gsd-2024-3693 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.782958Z |
| gsd-2024-3692 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.917140Z |
| gsd-2024-3691 | A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM… | 2024-04-13T05:02:35.784787Z |
| gsd-2024-3690 | A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by… | 2024-04-13T05:02:35.881527Z |
| gsd-2024-3689 | A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Networ… | 2024-04-13T05:02:35.586853Z |
| gsd-2024-3688 | A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It h… | 2024-04-13T05:02:35.858909Z |
| gsd-2024-3687 | A vulnerability was found in bihell Dice 3.1.0 and classified as problematic. Affected by… | 2024-04-13T05:02:35.873605Z |
| gsd-2024-3686 | A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Aff… | 2024-04-13T05:02:35.802762Z |
| gsd-2024-3685 | A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Aff… | 2024-04-13T05:02:35.862849Z |
| gsd-2024-26024 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.554681Z |
| gsd-2024-28042 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:33.649306Z |
| gsd-2024-32482 | The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability h… | 2024-04-13T05:02:29.036012Z |
| gsd-2024-32481 | Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in… | 2024-04-13T05:02:29.060928Z |
| gsd-2024-32480 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prio… | 2024-04-13T05:02:29.064142Z |
| gsd-2024-32479 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to vers… | 2024-04-13T05:02:29.082525Z |
| gsd-2024-32478 | Git Credential Manager (GCM) is a secure Git credential helper. Prior to 2.5.0, the Debia… | 2024-04-13T05:02:29.141641Z |
| gsd-2024-32477 | Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using … | 2024-04-13T05:02:29.081733Z |
| gsd-2024-32476 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Deni… | 2024-04-13T05:02:29.139616Z |
| gsd-2024-32475 | Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster… | 2024-04-13T05:02:29.105695Z |
| gsd-2024-32474 | Sentry is an error tracking and performance monitoring platform. Prior to 24.4.1, when au… | 2024-04-13T05:02:29.106080Z |
| gsd-2024-32473 | Moby is an open source container framework that is a key component of Docker Engine, Dock… | 2024-04-13T05:02:29.067500Z |
| gsd-2024-32472 | excalidraw is an open source virtual hand-drawn style whiteboard. A stored XSS vulnerabil… | 2024-04-13T05:02:29.058522Z |
| gsd-2024-32471 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.055748Z |
| gsd-2024-32470 | Tolgee is an open-source localization platform. When API key created by admin user is use… | 2024-04-13T05:02:29.134464Z |
| gsd-2024-32469 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.130549Z |
| gsd-2024-32468 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.025407Z |
| gsd-2024-32467 | MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, … | 2024-04-13T05:02:29.107455Z |
| gsd-2024-32466 | Tolgee is an open-source localization platform. For the `/v2/projects/translations` and `… | 2024-04-13T05:02:29.137980Z |
| gsd-2024-32465 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.044853Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2026-133 | Malicious code in language-capirca (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:15Z |
| MAL-2026-125 | Malicious code in kmeet (npm) | 2026-01-07T07:40:31Z | 2026-01-08T09:13:15Z |
| MAL-2026-119 | Malicious code in klywarns (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:15Z |
| MAL-2026-118 | Malicious code in klywarn (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:15Z |
| MAL-2026-117 | Malicious code in kdb1-demo-v2 (npm) | 2026-01-07T06:49:54Z | 2026-01-08T09:13:15Z |
| MAL-2026-116 | Malicious code in jh5o (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:15Z |
| MAL-2026-115 | Malicious code in hiqomu (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:15Z |
| MAL-2026-114 | Malicious code in garfield777 (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:15Z |
| mal-2026-88 | Malicious code in evm-gateway-contracts-private (npm) | 2026-01-06T13:43:17Z | 2026-01-08T09:13:14Z |
| mal-2026-87 | Malicious code in electra-web-player-event (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:14Z |
| mal-2026-86 | Malicious code in electra-web-player (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:14Z |
| mal-2026-85 | Malicious code in elastic-docs-v3-utilities (npm) | 2026-01-06T13:43:17Z | 2026-01-08T09:13:14Z |
| mal-2026-84 | Malicious code in code-review-frontend (npm) | 2026-01-06T13:33:00Z | 2026-01-08T09:13:14Z |
| mal-2026-75 | Malicious code in ethos2.0 (npm) | 2026-01-06T12:58:53Z | 2026-01-08T09:13:14Z |
| mal-2026-74 | Malicious code in cp_amm (npm) | 2026-01-06T12:58:52Z | 2026-01-08T09:13:14Z |
| mal-2026-58 | Malicious code in eslint-supertest (npm) | 2026-01-06T02:34:56Z | 2026-01-08T09:13:14Z |
| mal-2026-49 | Malicious code in diskho (npm) | 2026-01-05T08:50:46Z | 2026-01-08T09:13:14Z |
| mal-2026-30 | Malicious code in dstny-utils (npm) | 2026-01-03T16:01:31Z | 2026-01-08T09:13:14Z |
| mal-2026-153 | Malicious code in darknet-dispatches-internal (npm) | 2026-01-08T04:58:19Z | 2026-01-08T09:13:14Z |
| mal-2026-132 | Malicious code in create-react-app-lambda (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:14Z |
| mal-2026-113 | Malicious code in garfield000 (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:14Z |
| mal-2026-112 | Malicious code in fbfu (npm) | 2026-01-07T06:49:54Z | 2026-01-08T09:13:14Z |
| mal-2026-103 | Malicious code in const-enum (npm) | 2026-01-07T05:38:18Z | 2026-01-08T09:13:14Z |
| mal-2026-100 | Malicious code in eslint-plugin-supertest (npm) | 2026-01-07T02:08:41Z | 2026-01-08T09:13:14Z |
| MAL-2026-88 | Malicious code in evm-gateway-contracts-private (npm) | 2026-01-06T13:43:17Z | 2026-01-08T09:13:14Z |
| MAL-2026-87 | Malicious code in electra-web-player-event (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:14Z |
| MAL-2026-86 | Malicious code in electra-web-player (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:14Z |
| MAL-2026-85 | Malicious code in elastic-docs-v3-utilities (npm) | 2026-01-06T13:43:17Z | 2026-01-08T09:13:14Z |
| MAL-2026-84 | Malicious code in code-review-frontend (npm) | 2026-01-06T13:33:00Z | 2026-01-08T09:13:14Z |
| MAL-2026-75 | Malicious code in ethos2.0 (npm) | 2026-01-06T12:58:53Z | 2026-01-08T09:13:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0871 | CODESYS: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0870 | Hitachi Ops Center: Mehrere Schwachstellen ermöglichen Offenlegung von informationen | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0869 | VMware Tanzu Spring Security: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0868 | PyTorch: Schwachstelle ermöglicht Codeausführung | 2025-04-22T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0864 | Ruby: Schwachstelle ermöglicht Man-in-the-Middle Angriff | 2013-06-27T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0657 | Erlang/OTP: Schwachstelle ermöglicht Denial of Service | 2025-03-30T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0579 | Mattermost Server: Mehrere Schwachstellen | 2025-03-17T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0495 | Synology DiskStation Manager: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-05T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2024-1605 | Fabasoft Folio: Schwachstelle ermöglicht Codeausführung | 2024-07-11T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2024-1216 | GitLab: Mehrere Schwachstellen | 2024-05-21T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2024-1151 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2024-05-14T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2024-1020 | bluez: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2024-05-02T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-3209 | bluez: Mehrere Schwachstellen | 2023-12-21T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-3197 | bluez: Mehrere Schwachstellen | 2023-12-20T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-2461 | Ruby: Schwachstelle ermöglicht Codeausführung | 2021-05-02T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-1590 | Ruby: Schwachstelle ermöglicht Denial of Service | 2023-06-28T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2023-1231 | WordPress: Mehrere Schwachstellen | 2023-05-16T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2022-2173 | Ruby: Schwachstelle ermöglicht Manipulation von Dateien | 2022-11-24T23:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2022-1305 | Ruby: Mehrere Schwachstellen | 2021-07-07T22:00:00.000+00:00 | 2025-04-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0863 | Microsoft GitHub Enterprise: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0862 | Moodle: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0860 | Liferay Portal und Liferay DXP: Schwachstelle ermöglicht Cross-Site Scripting | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0859 | Tenable Security Nessus: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0857 | PyTorch: Schwachstelle ermöglicht Codeausführung | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0855 | Zyxel Firewall: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0852 | IBM Maximo Asset Management: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0851 | OpenText Enterprise Security Manager: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0850 | IBM Power Hardware Management Console: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0800 | Mozilla Firefox: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-04-15T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0771 | GraphicsMagick: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-04-08T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:1255 | Red Hat Security Advisory: doxygen security update | 2025-02-10T22:29:46+00:00 | 2026-02-27T07:41:31+00:00 |
| rhsa-2025:1247 | Red Hat Security Advisory: doxygen security update | 2025-02-10T21:00:59+00:00 | 2026-02-27T07:41:29+00:00 |
| rhsa-2025:1217 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:20+00:00 | 2026-02-27T07:41:27+00:00 |
| rhsa-2025:1214 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:21+00:00 | 2026-02-27T07:41:25+00:00 |
| rhsa-2025:1216 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:22+00:00 | 2026-02-27T07:41:23+00:00 |
| rhsa-2025:1215 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:20+00:00 | 2026-02-27T07:41:22+00:00 |
| rhsa-2025:1213 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:20+00:00 | 2026-02-27T07:41:18+00:00 |
| rhsa-2025:1212 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:21+00:00 | 2026-02-27T07:41:17+00:00 |
| rhsa-2025:1211 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:25+00:00 | 2026-02-27T07:41:17+00:00 |
| rhsa-2025:1210 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:18+00:00 | 2026-02-27T07:41:14+00:00 |
| rhsa-2025:1209 | Red Hat Security Advisory: tbb security update | 2025-02-10T15:46:09+00:00 | 2026-02-27T07:41:12+00:00 |
| rhsa-2025:1185 | Red Hat Security Advisory: doxygen security update | 2025-02-10T01:05:29+00:00 | 2026-02-27T07:41:10+00:00 |
| rhsa-2025:1070 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update | 2025-02-05T11:52:56+00:00 | 2026-02-27T07:41:09+00:00 |
| rhsa-2024:5294 | Red Hat Security Advisory: jose security update | 2024-08-13T15:37:20+00:00 | 2026-02-27T07:23:13+00:00 |
| rhsa-2024:5200 | Red Hat Security Advisory: OpenShift Container Platform 4.12.63 bug fix and security update | 2024-08-19T03:13:31+00:00 | 2026-02-27T07:23:09+00:00 |
| rhsa-2024:5094 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.0 security update | 2024-08-07T15:39:25+00:00 | 2026-02-27T07:23:09+00:00 |
| rhsa-2024:4955 | Red Hat Security Advisory: OpenShift Container Platform 4.15.25 bug fix and security update | 2024-08-07T01:16:26+00:00 | 2026-02-27T07:23:04+00:00 |
| rhsa-2024:4662 | Red Hat Security Advisory: OpenShift Virtualization 4.15.3 Images security update | 2024-07-18T19:25:23+00:00 | 2026-02-27T07:23:00+00:00 |
| rhsa-2024:4613 | Red Hat Security Advisory: OpenShift Container Platform 4.16.4 bug fix and security update | 2024-07-24T18:53:12+00:00 | 2026-02-27T07:22:55+00:00 |
| rhsa-2024:4597 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update | 2024-07-17T18:49:17+00:00 | 2026-02-27T07:22:54+00:00 |
| rhsa-2024:4484 | Red Hat Security Advisory: OpenShift Container Platform 4.13.45 bug fix and security update | 2024-07-17T01:35:44+00:00 | 2026-02-27T07:22:43+00:00 |
| rhsa-2024:4479 | Red Hat Security Advisory: OpenShift Container Platform 4.14.33 bug fix and security update | 2024-07-17T00:37:52+00:00 | 2026-02-27T07:22:37+00:00 |
| rhsa-2024:4443 | Red Hat Security Advisory: toolbox security update | 2024-07-09T17:24:03+00:00 | 2026-02-27T07:22:30+00:00 |
| rhsa-2024:4329 | Red Hat Security Advisory: OpenShift Container Platform 4.14.32 bug fix and security update | 2024-07-11T11:54:20+00:00 | 2026-02-27T07:22:15+00:00 |
| rhsa-2024:4151 | Red Hat Security Advisory: OpenShift Container Platform 4.15.20 security update | 2024-07-02T19:30:02+00:00 | 2026-02-27T07:22:03+00:00 |
| rhsa-2024:4010 | Red Hat Security Advisory: OpenShift Container Platform 4.14.31 security update | 2024-06-26T02:06:07+00:00 | 2026-02-27T07:21:49+00:00 |
| rhsa-2024:3968 | Red Hat Security Advisory: container-tools:rhel8 bug fix and enhancement update | 2024-06-18T00:36:57+00:00 | 2026-02-27T07:21:44+00:00 |
| rhsa-2024:3918 | Red Hat Security Advisory: OpenShift Container Platform 4.14.30 packages and security update | 2024-06-19T15:04:02+00:00 | 2026-02-27T07:21:39+00:00 |
| rhsa-2024:3827 | Red Hat Security Advisory: buildah security and bug fix update | 2024-06-11T20:07:13+00:00 | 2026-02-27T07:21:36+00:00 |
| rhsa-2024:3826 | Red Hat Security Advisory: podman security and bug fix update | 2024-06-11T19:55:42+00:00 | 2026-02-27T07:21:30+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-236-03 | CODESYS Development System | 2023-08-24T06:00:00.000000Z | 2023-08-24T06:00:00.000000Z |
| icsa-23-236-02 | OPTO 22 SNAP PAC S1 | 2023-08-24T06:00:00.000000Z | 2023-08-24T06:00:00.000000Z |
| icsa-23-236-01 | KNX Protocol | 2023-08-24T06:00:00.000000Z | 2023-08-24T06:00:00.000000Z |
| icsa-23-234-03 | Rockwell Automation ThinManager ThinServer | 2023-08-22T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-234-02 | Trane Thermostats | 2023-08-22T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-234-01 | Hitachi Energy AFF66x | 2023-08-22T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-138-02 | Mitsubishi Electric MELSEC WS Series | 2023-05-18T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-229-03 | Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters | 2023-08-17T06:00:00.000000Z | 2023-08-17T06:00:00.000000Z |
| icsa-23-229-01 | ICONICS and Mitsubishi Electric Products | 2023-08-17T06:00:00.000000Z | 2023-08-17T06:00:00.000000Z |
| icsa-23-227-02 | Rockwell Automation Armor PowerFlex | 2023-08-15T06:00:00.000000Z | 2023-08-15T06:00:00.000000Z |
| icsa-23-227-01 | Schneider Electric EcoStruxure Control Expert, Process Expert, Modicon M340, M580 and M580 CPU | 2023-08-15T06:00:00.000000Z | 2023-08-15T06:00:00.000000Z |
| icsa-23-220-02 | Hitachi Energy RTU500 series | 2023-08-08T06:00:00.000000Z | 2023-08-08T06:00:00.000000Z |
| icsa-23-222-11 | Siemens Solid Edge SE2023 | 2023-08-08T00:00:00Z | 2023-08-08T00:00:00Z |
| icsa-23-222-02 | Siemens Parasolid Installer | 2023-08-08T00:00:00Z | 2023-08-08T00:00:00Z |
| icsa-23-131-01 | Siemens Solid Edge | 2023-05-09T00:00:00.000000Z | 2023-08-08T00:00:00.000000Z |
| icsa-23-215-04 | Sensormatic Electronics VideoEdge | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-03 | TEL-STER TelWin SCADA WebInterface | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-02 | Mitsubishi Electric GT and GOT Series Products | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-01 | Mitsubishi Electric GOT2000 and GOT SIMPLE | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-213-01 | APSystems Altenergy Power Control | 2023-08-01T06:00:00.000000Z | 2023-08-01T06:00:00.000000Z |
| icsa-23-208-02 | PTC KEPServerEX | 2023-07-27T00:00:00.000000Z | 2023-07-27T00:00:00.000000Z |
| icsa-23-208-01 | ETIC Telecom RAS Authentication | 2023-07-27T00:00:00.000000Z | 2023-07-27T00:00:00.000000Z |
| icsa-23-206-04 | Johnson Controls IQ Wifi 6 | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-03 | Emerson ROC800 Series RTU and DL8000 Preset Controller | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-02 | Rockwell Automation ThinManager ThinServer | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-01 | AXIS A1001 | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-229-04 | Walchem Intuition 9 | 2023-07-21T06:00:00.000000Z | 2023-07-21T06:00:00.000000Z |
| icsa-23-201-01 | Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers | 2023-07-20T06:00:00.000000Z | 2023-07-20T06:00:00.000000Z |
| icsa-23-199-07 | WellinTech KingHistorian | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-06 | GE Digital CIMPLICITY | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ios-xe-iot-codexec-k46EFF6q | Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-evss-code-exe-8cw5vsvw | Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-evss-code-exe-8cw5VSvw | Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-cat-verify-bq5hrxgh | Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-cat-verify-BQ5hrXgH | Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ewlc-xss-cafmtczv | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ewlc-xss-cAfMtCzv | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ewlc-capwap-dos-2oa3jgks | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ewlc-capwap-dos-2OA3JgKS | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-arp-mtfhbfje | Cisco IOS and IOS XE Software ARP Resource Management Exhaustion Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-arp-mtfhBfjE | Cisco IOS and IOS XE Software ARP Resource Management Exhaustion Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ap-privesc-wevfp8ud | Cisco Access Point Software Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ap-privesc-wEVfp8Ud | Cisco Access Point Software Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ap-foverwrt-hyvxvrtb | Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ap-foverwrt-HyVXvrtb | Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-alg-dos-hbbs7sze | Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-alg-dos-hbBS7SZE | Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-aironet-mdns-dos-e6kwyumx | Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-aironet-mdns-dos-E6KwYuMx | Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-aironet-info-disc-bfwqghj | Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-aironet-info-disc-BfWqghj | Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-XE-SAP-OPLbze68 | Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-XE-OFP-6Nezgn7b | Cisco IOS XE Software Local Privilege Escalation Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-XE-BLKH-Ouvrnf2s | Cisco IOS XE Software Active Debug Code Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-XE-ACE-75K3bRWe | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-rv-132w134w-overflow-pptt4h2p | Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability | 2021-03-17T16:00:00+00:00 | 2021-03-17T16:00:00+00:00 |
| cisco-sa-rv-132w134w-overflow-Pptt4H2p | Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability | 2021-03-17T16:00:00+00:00 | 2021-03-17T16:00:00+00:00 |
| cisco-sa-sudo-privesc-jan2021-qnyqfcm | Sudo Privilege Escalation Vulnerability Affecting Cisco Products: January 2021 | 2021-01-29T21:30:00+00:00 | 2021-03-16T20:43:10+00:00 |
| cisco-sa-sudo-privesc-jan2021-qnYQfcM | Sudo Privilege Escalation Vulnerability Affecting Cisco Products: January 2021 | 2021-01-29T21:30:00+00:00 | 2021-03-16T20:43:10+00:00 |
| cisco-sa-mso-authbyp-bb5gmbqv | Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication Bypass Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-03-12T16:02:24+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-37947 | ksmbd: prevent out-of-bounds stream writes by validating *pos | 2025-05-02T00:00:00.000Z | 2026-02-18T14:19:33.000Z |
| msrc_cve-2025-68211 | ksm: use range-walk function to jump over holes in scan_get_next_rmap_item | 2025-12-02T00:00:00.000Z | 2026-02-18T14:19:31.000Z |
| msrc_cve-2025-71082 | Bluetooth: btusb: revert use of devm_kzalloc in btusb | 2026-01-02T00:00:00.000Z | 2026-02-18T14:19:21.000Z |
| msrc_cve-2024-21198 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2024-10-01T07:00:00.000Z | 2026-02-18T14:19:18.000Z |
| msrc_cve-2024-53126 | vdpa: solidrun: Fix UB bug with devres | 2024-12-02T00:00:00.000Z | 2026-02-18T14:19:13.000Z |
| msrc_cve-2025-23150 | ext4: fix off-by-one error in do_split | 2025-05-02T00:00:00.000Z | 2026-02-18T14:19:06.000Z |
| msrc_cve-2024-50246 | fs/ntfs3: Add rough attr alloc_size check | 2024-11-02T00:00:00.000Z | 2026-02-18T14:19:05.000Z |
| msrc_cve-2025-68190 | drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() | 2025-12-02T00:00:00.000Z | 2026-02-18T14:19:01.000Z |
| msrc_cve-2024-1086 | Use-after-free in Linux kernel's netfilter: nf_tables component | 2024-01-01T08:00:00.000Z | 2026-02-18T14:18:54.000Z |
| msrc_cve-2025-71079 | net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write | 2026-01-02T00:00:00.000Z | 2026-02-18T14:18:50.000Z |
| msrc_cve-2025-38684 | net/sched: ets: use old 'nbands' while purging unused classes | 2025-09-02T00:00:00.000Z | 2026-02-18T14:18:42.000Z |
| msrc_cve-2025-37948 | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | 2025-05-02T00:00:00.000Z | 2026-02-18T14:18:40.000Z |
| msrc_cve-2024-21218 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2024-10-01T07:00:00.000Z | 2026-02-18T14:18:35.000Z |
| msrc_cve-2025-68785 | net: openvswitch: fix middle attribute validation in push_nsh() action | 2026-01-02T00:00:00.000Z | 2026-02-18T14:18:19.000Z |
| msrc_cve-2024-53113 | mm: fix NULL pointer dereference in alloc_pages_bulk_noprof | 2024-12-02T00:00:00.000Z | 2026-02-18T14:18:15.000Z |
| msrc_cve-2024-50262 | bpf: Fix out-of-bounds write in trie_get_next_key() | 2024-11-02T00:00:00.000Z | 2026-02-18T14:18:15.000Z |
| msrc_cve-2025-22044 | acpi: nfit: fix narrowing conversion in acpi_nfit_ctl | 2025-04-02T00:00:00.000Z | 2026-02-18T14:18:11.000Z |
| msrc_cve-2025-38697 | jfs: upper bound check of tree index in dbAllocAG | 2025-09-02T00:00:00.000Z | 2026-02-18T14:18:07.000Z |
| msrc_cve-2024-21201 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2024-10-01T07:00:00.000Z | 2026-02-18T14:17:50.000Z |
| msrc_cve-2020-14039 | In Go before 1.13.13 and 1.14.x before 1.14.5 Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equals nil and the installation is on Windows). Thus X.509 certificate verification is incomplete. | 2020-07-02T00:00:00.000Z | 2026-02-18T14:17:47.000Z |
| msrc_cve-2025-71093 | e1000: fix OOB in e1000_tbi_should_accept() | 2026-01-02T00:00:00.000Z | 2026-02-18T14:17:46.000Z |
| msrc_cve-2024-46753 | btrfs: handle errors from btrfs_dec_ref() properly | 2024-09-01T07:00:00.000Z | 2026-02-18T14:17:44.000Z |
| msrc_cve-2024-53114 | x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client | 2024-12-02T00:00:00.000Z | 2026-02-18T14:17:36.000Z |
| msrc_cve-2025-71089 | iommu: disable SVA when CONFIG_X86 is set | 2026-01-02T00:00:00.000Z | 2026-02-18T14:17:17.000Z |
| msrc_cve-2025-37775 | ksmbd: fix the warning from __kernel_write_iter | 2025-05-02T00:00:00.000Z | 2026-02-18T14:17:17.000Z |
| msrc_cve-2024-52530 | GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations | 2024-11-02T00:00:00.000Z | 2026-02-18T14:17:17.000Z |
| msrc_cve-2023-40549 | Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file | 2024-01-01T08:00:00.000Z | 2026-02-18T14:17:17.000Z |
| msrc_cve-2024-58241 | Bluetooth: hci_core: Disable works on hci_unregister_dev | 2025-09-02T00:00:00.000Z | 2026-02-18T14:17:07.000Z |
| msrc_cve-2024-21213 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H). | 2024-10-01T07:00:00.000Z | 2026-02-18T14:17:07.000Z |
| msrc_cve-2025-38715 | hfs: fix slab-out-of-bounds in hfs_bnode_read() | 2025-09-02T00:00:00.000Z | 2026-02-18T14:17:03.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14421-1 | python310-mysql-connector-python-9.1.0-1.1 on GA media | 2024-10-22T00:00:00Z | 2024-10-22T00:00:00Z |
| opensuse-su-2024:14420-1 | podman-5.2.4-3.1 on GA media | 2024-10-22T00:00:00Z | 2024-10-22T00:00:00Z |
| opensuse-su-2024:14419-1 | libeverest-3.6.2-1.1 on GA media | 2024-10-21T00:00:00Z | 2024-10-21T00:00:00Z |
| opensuse-su-2024:14418-1 | buildah-1.37.5-1.1 on GA media | 2024-10-21T00:00:00Z | 2024-10-21T00:00:00Z |
| opensuse-su-2024:14417-1 | python310-starlette-0.41.0-1.1 on GA media | 2024-10-20T00:00:00Z | 2024-10-20T00:00:00Z |
| opensuse-su-2024:14416-1 | libopenssl-3-devel-3.1.4-15.1 on GA media | 2024-10-20T00:00:00Z | 2024-10-20T00:00:00Z |
| opensuse-su-2024:14415-1 | MozillaFirefox-131.0.3-1.1 on GA media | 2024-10-20T00:00:00Z | 2024-10-20T00:00:00Z |
| opensuse-su-2024:14414-1 | chromedriver-130.0.6723.58-1.1 on GA media | 2024-10-19T00:00:00Z | 2024-10-19T00:00:00Z |
| opensuse-su-2024:0337-1 | Security update for chromium | 2024-10-18T13:29:47Z | 2024-10-18T13:29:47Z |
| opensuse-su-2024:14413-1 | python3-virtualbox-7.1.4-1.1 on GA media | 2024-10-18T00:00:00Z | 2024-10-18T00:00:00Z |
| opensuse-su-2024:14412-1 | valkey-8.0.1-1.1 on GA media | 2024-10-18T00:00:00Z | 2024-10-18T00:00:00Z |
| opensuse-su-2024:14411-1 | qemu-9.1.0-2.1 on GA media | 2024-10-18T00:00:00Z | 2024-10-18T00:00:00Z |
| opensuse-su-2024:14410-1 | nodejs-electron-31.7.1-1.1 on GA media | 2024-10-18T00:00:00Z | 2024-10-18T00:00:00Z |
| opensuse-su-2024:14409-1 | podman-5.2.4-2.1 on GA media | 2024-10-17T00:00:00Z | 2024-10-17T00:00:00Z |
| opensuse-su-2024:14408-1 | jetty-annotations-9.4.56-2.1 on GA media | 2024-10-17T00:00:00Z | 2024-10-17T00:00:00Z |
| opensuse-su-2024:14407-1 | element-web-1.11.81-1.1 on GA media | 2024-10-17T00:00:00Z | 2024-10-17T00:00:00Z |
| opensuse-su-2024:14406-1 | element-desktop-1.11.81-1.1 on GA media | 2024-10-17T00:00:00Z | 2024-10-17T00:00:00Z |
| opensuse-su-2024:14405-1 | buildah-1.37.4-2.1 on GA media | 2024-10-17T00:00:00Z | 2024-10-17T00:00:00Z |
| opensuse-su-2024:14404-1 | libnss_slurm2-24.05.3-1.1 on GA media | 2024-10-15T00:00:00Z | 2024-10-15T00:00:00Z |
| opensuse-su-2024:14403-1 | python310-pytest-html-4.1.1-2.1 on GA media | 2024-10-15T00:00:00Z | 2024-10-15T00:00:00Z |
| opensuse-su-2024:14402-1 | haproxy-3.0.5+git0.8e879a52e-2.1 on GA media | 2024-10-15T00:00:00Z | 2024-10-15T00:00:00Z |
| opensuse-su-2024:0335-1 | Security update for chromium | 2024-10-14T08:57:23Z | 2024-10-14T08:57:23Z |
| opensuse-su-2024:14401-1 | libsonivox3-3.6.14-1.1 on GA media | 2024-10-14T00:00:00Z | 2024-10-14T00:00:00Z |
| opensuse-su-2024:14400-1 | etcd-for-k8s1.30-3.5.15-1.1 on GA media | 2024-10-14T00:00:00Z | 2024-10-14T00:00:00Z |
| opensuse-su-2024:14399-1 | etcd-for-k8s1.28-3.5.15-1.1 on GA media | 2024-10-14T00:00:00Z | 2024-10-14T00:00:00Z |
| opensuse-su-2024:14398-1 | xmlgraphics-fop-2.10-1.1 on GA media | 2024-10-13T00:00:00Z | 2024-10-13T00:00:00Z |
| opensuse-su-2024:14397-1 | libmozjs-128-0-128.3.1-1.1 on GA media | 2024-10-12T00:00:00Z | 2024-10-12T00:00:00Z |
| opensuse-su-2024:0331-1 | Security update for ntpd-rs | 2024-10-11T22:01:43Z | 2024-10-11T22:01:43Z |
| opensuse-su-2024:14396-1 | libwireshark18-4.4.1-1.1 on GA media | 2024-10-11T00:00:00Z | 2024-10-11T00:00:00Z |
| opensuse-su-2024:14395-1 | java-jwt-4.4.0-1.1 on GA media | 2024-10-11T00:00:00Z | 2024-10-11T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2021-1758 | Heap-buffer-overflow in seturl | 2021-12-25T00:01:59.000146Z | 2022-04-13T03:04:42.895414Z |
| osv-2021-1756 | Heap-buffer-overflow in Curl_sasl_decode_mech | 2021-12-25T00:01:47.005391Z | 2022-04-13T03:04:42.912178Z |
| osv-2021-1747 | Heap-buffer-overflow in seturl | 2021-12-24T00:00:40.494852Z | 2022-04-13T03:04:42.889719Z |
| osv-2021-1737 | Heap-buffer-overflow in Curl_sasl_decode_mech | 2021-12-22T00:01:51.212187Z | 2022-04-13T03:04:42.934553Z |
| osv-2021-1736 | Segv on unknown address in symhash | 2021-12-22T00:01:49.194656Z | 2022-04-13T03:04:42.334128Z |
| osv-2021-1733 | UNKNOWN READ in mls_semantic_level_expand | 2021-12-22T00:00:12.409265Z | 2022-04-13T03:04:42.300750Z |
| osv-2021-1730 | Heap-buffer-overflow in seturl | 2021-12-21T00:01:40.506935Z | 2022-04-13T03:04:42.940270Z |
| osv-2021-1695 | Heap-buffer-overflow in flexbuffers::Verifier::VerifyRef | 2021-12-15T00:00:06.478363Z | 2022-04-13T03:04:42.040710Z |
| osv-2021-1678 | Heap-buffer-overflow in flatbuffers::EscapeString | 2021-12-13T00:01:41.858945Z | 2022-04-13T03:04:42.029998Z |
| osv-2021-1629 | Heap-buffer-overflow in Curl_sasl_decode_mech | 2021-11-27T00:01:35.152286Z | 2022-04-13T03:04:42.952015Z |
| osv-2021-1625 | Heap-buffer-overflow in junkscan | 2021-11-26T00:01:33.118188Z | 2022-04-13T03:04:42.946027Z |
| osv-2021-1605 | Heap-use-after-free in perfetto::trace_processor::SliceTracker::GetStackHash | 2021-11-22T00:00:36.355325Z | 2022-04-13T03:04:42.003237Z |
| osv-2021-1385 | Heap-buffer-overflow in Assimp::BaseImporter::ConvertToUTF8 | 2021-09-28T00:00:07.486971Z | 2022-04-13T03:04:42.673761Z |
| osv-2021-1333 | Heap-buffer-overflow in pe_get_section_full_name | 2021-09-20T00:00:16.641649Z | 2022-04-13T03:04:42.265452Z |
| osv-2021-1316 | Stack-buffer-overflow in Assimp::ZipArchiveIOSystem::Implement::MapArchive | 2021-09-18T00:01:34.920205Z | 2022-04-13T03:04:42.667817Z |
| osv-2021-1314 | Use-of-uninitialized-value in LoadBinarySchema | 2021-09-18T00:01:28.793578Z | 2022-04-13T03:04:42.024738Z |
| osv-2021-1311 | Null-dereference READ in unzOpenCurrentFile3 | 2021-09-18T00:00:37.776159Z | 2022-04-13T03:04:42.679623Z |
| osv-2021-1257 | Stack-buffer-overflow in GRIBDataset::Open | 2021-09-14T00:01:43.346984Z | 2022-04-13T03:04:42.155223Z |
| osv-2021-1249 | Heap-buffer-overflow in int flatbuffers::ReadScalar<int> | 2021-09-14T00:00:07.321535Z | 2022-04-13T03:04:42.051274Z |
| osv-2021-1229 | Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset | 2021-09-12T00:00:09.534319Z | 2022-04-13T03:04:42.073120Z |
| osv-2021-1197 | Heap-buffer-overflow in H5O__linfo_decode | 2021-09-04T00:00:54.649060Z | 2022-04-13T03:04:42.974116Z |
| osv-2021-1160 | Heap-buffer-overflow in pe_valid_dll_name | 2021-08-22T00:01:21.561957Z | 2022-04-13T03:04:42.166443Z |
| osv-2020-981 | Heap-buffer-overflow in surround51_to_stereo_downmix_mtx | 2020-07-22T21:49:37.746028Z | 2022-04-13T03:04:42.592497Z |
| osv-2020-977 | Segv on unknown address in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco | 2020-07-22T21:49:37.459040Z | 2022-04-13T03:04:42.754414Z |
| osv-2020-948 | Heap-buffer-overflow in surround51_to_stereo_downmix_mtx | 2020-07-22T00:00:22.941909Z | 2022-04-13T03:04:42.566045Z |
| osv-2020-940 | Heap-use-after-free in surround51_to_stereo_downmix_mtx | 2020-07-22T00:00:19.715558Z | 2022-04-13T03:04:42.597913Z |
| osv-2020-925 | Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder> | 2020-07-22T00:00:10.590751Z | 2022-04-13T03:04:42.767001Z |
| osv-2020-891 | Heap-buffer-overflow in ccr_handle_message_from_client | 2020-07-21T00:00:05.825108Z | 2022-04-13T03:04:42.581747Z |
| osv-2020-889 | Use-of-uninitialized-value in RGBTOHLS | 2020-07-16T00:00:23.898514Z | 2022-04-13T03:04:42.443563Z |
| osv-2020-877 | Use-of-uninitialized-value in Mat_VarReadNumeric5 | 2020-07-14T22:13:56.653856Z | 2022-04-13T03:04:42.989542Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-node-2021-23840 | Integer overflow in CipherUpdate | 2024-03-06T11:05:55.584Z | 2025-05-20T10:02:07.006Z |
| bit-node-2020-1971 | EDIPARTYNAME NULL pointer dereference | 2024-03-06T11:08:41.389Z | 2025-05-20T10:02:07.006Z |
| bit-node-2020-11080 | Denial of service in nghttp2 | 2024-03-06T11:08:52.092Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-35200 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:49:17.615Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-34161 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:49:32.908Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-32760 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:49:48.003Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-31079 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:02.910Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-24990 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:17.408Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-24989 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:31.007Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2022-41742 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 | 2024-03-06T10:58:59.003Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2022-41741 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 | 2024-03-06T10:59:11.025Z | 2025-05-20T10:02:07.006Z |
| bit-nats-2025-30215 | NATS-Server Fails to Authorize Certain Jetstream Admin APIs | 2025-04-18T19:17:14.515Z | 2025-05-20T10:02:07.006Z |
| bit-nats-2023-46129 | xkeys Seal encryption used fixed key for all encryption | 2024-03-06T10:58:03.564Z | 2025-05-20T10:02:07.006Z |
| bit-nats-2020-28466 | Denial of Service (DoS) | 2024-03-06T10:58:44.583Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43440 | Moodle: lfi vulnerability when restoring malformed block backups | 2025-05-02T06:19:00.410Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43439 | Moodle: reflected xss via h5p error message | 2025-04-24T07:29:07.150Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43437 | Moodle: xss risk when restoring malicious course backup file | 2025-04-24T07:29:05.528Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43435 | Moodle: can create global glossary without being admin | 2025-05-02T06:18:56.485Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43434 | Moodle: csrf risk in feedback non-respondents report | 2025-05-02T06:18:55.145Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43433 | Moodle: matrix user/power level management not always working as expected with suspended users | 2025-05-02T06:18:53.795Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43432 | Moodle: authorization headers preserved between "emulated redirects" | 2025-05-02T06:18:52.499Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43431 | Moodle: idor in badges allows deletion of arbitrary badges | 2025-05-02T06:18:51.186Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43430 | Moodle: lack of access control when using external methods for quiz overrides | 2025-05-02T06:18:49.899Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43429 | Moodle: user information visibility control issues in gradebook reports | 2025-05-02T06:18:48.592Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43428 | Moodle: cache poisoning via injection into storage | 2025-05-02T06:18:47.252Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43427 | Moodle: admin presets export tool includes some secrets that should not be exported | 2025-05-02T06:18:45.967Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43425 | Moodle: remote code execution via calculated question types | 2025-05-02T06:18:44.557Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-38276 | moodle: CSRF risks due to misuse of confirm_sesskey | 2024-08-09T07:26:18.452Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-38275 | moodle: HTTP authorization header is preserved between "emulated redirects" | 2025-05-01T05:57:26.688Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-34008 | moodle: CSRF risk in analytics management of models | 2024-07-19T07:25:34.028Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202403-0820 | A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. Thi… | 2024-05-17T23:09:15.133000Z |
| var-202405-0120 | A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. Affecte… | 2024-05-17T23:09:14.510000Z |
| var-202405-1505 | EG2000UE is a gateway product. Beijing Xingwang Ruijie Network Technology Co., Ltd. EG20… | 2024-05-17T23:09:13.484000Z |
| var-202405-1356 | EG3210 is a new generation of multi-service security gateway in the RG-EG3200 series. It … | 2024-05-17T23:09:13.566000Z |
| var-201808-0217 | Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networ… | 2024-05-17T23:07:58.902000Z |
| var-202004-0227 | An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may b… | 2024-05-17T23:07:57.256000Z |
| var-202210-2140 | Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_sco… | 2024-05-17T23:07:54.267000Z |
| var-202304-2287 | A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problem… | 2024-05-17T23:07:52.587000Z |
| var-202304-2224 | A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3… | 2024-05-17T23:07:52.628000Z |
| var-202401-1079 | A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical.… | 2024-05-17T23:07:50.411000Z |
| var-202401-0073 | A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.… | 2024-05-17T23:07:50.634000Z |
| var-202403-0937 | A vulnerability was found in Tenda F1203 2.0.1.6. It has been rated as critical. Affected… | 2024-05-17T23:07:49.872000Z |
| var-202403-0832 | A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15… | 2024-05-17T23:07:49.929000Z |
| var-201204-0203 | McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the… | 2024-05-17T23:07:37.630000Z |
| var-201710-0718 | The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka… | 2024-05-17T23:07:05.007000Z |
| var-201708-1531 | An issue was discovered in SMA Solar Technology products. The inverters make use of a wea… | 2024-05-17T23:07:05.143000Z |
| var-201910-0889 | The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies… | 2024-05-17T23:07:02.891000Z |
| var-202108-1369 | D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E contains hard-coded creden… | 2024-05-17T23:06:57.478000Z |
| var-202304-2226 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as probl… | 2024-05-17T23:06:54.314000Z |
| var-202401-1183 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classifie… | 2024-05-17T23:06:52.017000Z |
| var-202403-1087 | A vulnerability has been found in Tenda FH1205 2.0.0.7(775) and classified as critical. A… | 2024-05-17T23:06:51.425000Z |
| var-202403-0814 | A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18. Affected b… | 2024-05-17T23:06:51.537000Z |
| var-202403-0709 | A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by t… | 2024-05-17T23:06:51.588000Z |
| var-202108-0228 | A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attacker… | 2024-05-17T23:05:01.093000Z |
| var-202206-0974 | Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected c… | 2024-05-17T23:04:59.898000Z |
| var-202312-0729 | A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4… | 2024-05-17T23:04:52.233000Z |
| var-202401-0755 | A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.61… | 2024-05-17T23:04:51.913000Z |
| var-202401-0377 | A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. T… | 2024-05-17T23:04:51.990000Z |
| var-200708-0147 | PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remo… | 2024-05-17T23:04:47.149000Z |
| var-200707-0278 | Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device bef… | 2024-05-17T23:04:47.224000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-002800 | Multiple Vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001594 | JP1/File Transmission Server / FTP vulnerable to access control violation | 2014-03-11T16:33+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001593 | JP1/Integrated Management - Service Support vulnerable to cross-site scripting | 2014-03-11T15:54+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001203 | A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software | 2014-01-22T18:06+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2015-000028 | KENT-WEB Clip Board vulnerability where arbitary files may be deleted | 2015-02-27T14:02+09:00 | 2015-03-03T15:59+09:00 |
| jvndb-2015-000024 | Joyful Note vulnerability in handling files | 2015-02-27T13:57+09:00 | 2015-03-03T15:59+09:00 |
| jvndb-2015-000033 | Vulnerability in the jBCrypt key stretching process | 2015-02-27T14:03+09:00 | 2015-03-03T15:58+09:00 |
| jvndb-2015-000032 | checkpw vulnerable to denial-of-service (DoS) | 2015-02-27T12:30+09:00 | 2015-03-03T15:57+09:00 |
| jvndb-2015-000026 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to remote code execution | 2015-02-25T15:00+09:00 | 2015-03-02T14:23+09:00 |
| jvndb-2015-000027 | Zen Cart Japanese version vulnerable to cross-site scripting | 2015-02-25T15:09+09:00 | 2015-03-02T14:19+09:00 |
| jvndb-2015-001558 | Cross-site Scripting Vulnerability in Hitachi IT Operations Analyzer | 2015-02-27T15:57+09:00 | 2015-02-27T15:57+09:00 |
| jvndb-2015-001557 | Cross-site Scripting Vulnerability in JP1/IT Desktop Management - Manager and Hitachi IT Operations Director | 2015-02-27T15:56+09:00 | 2015-02-27T15:56+09:00 |
| jvndb-2015-001556 | Multiple Cross-site Scripting Vulnerabilities in Hitachi Compute Systems Manager | 2015-02-27T15:55+09:00 | 2015-02-27T15:55+09:00 |
| jvndb-2015-000023 | Speed Software Root Explorer and Explorer vulnerable to directory traversal | 2015-02-24T14:35+09:00 | 2015-02-26T17:18+09:00 |
| jvndb-2015-000020 | AL-Mail32 vulnerable to directory traversal | 2015-02-20T14:37+09:00 | 2015-02-24T16:38+09:00 |
| jvndb-2015-000021 | AL-Mail32 vulnerable to denial-of-service (DoS) | 2015-02-20T14:54+09:00 | 2015-02-24T16:37+09:00 |
| jvndb-2015-000022 | AL-Mail32 vulnerable to buffer overflow | 2015-02-20T14:55+09:00 | 2015-02-24T16:36+09:00 |
| jvndb-2015-000010 | Fumy News Clipper vulnerable to cross-site scripting | 2015-01-30T13:52+09:00 | 2015-02-16T15:55+09:00 |
| jvndb-2015-000007 | Arbitrary files may be overwritten in multiple VMware products | 2015-01-29T13:52+09:00 | 2015-02-16T15:34+09:00 |
| jvndb-2015-000006 | SYNCK GRAPHICA Download Log CGI vulnerable to directory traversal | 2015-01-19T13:54+09:00 | 2015-02-13T15:09+09:00 |
| jvndb-2015-000014 | PerlTreeBBS vulnerable to cross-site scripting | 2015-02-13T13:58+09:00 | 2015-02-13T13:58+09:00 |
| jvndb-2015-000013 | shiromuku(u1)GUESTBOOK vulnerable to cross-site scripting | 2015-02-13T13:58+09:00 | 2015-02-13T13:58+09:00 |
| jvndb-2015-000008 | shiromuku(bu2)BBS vulnerable to arbitrary file creation | 2015-01-23T14:22+09:00 | 2015-02-13T09:51+09:00 |
| jvndb-2015-000001 | Cybozu Remote Service Manager vulnerable to denial-of-service (DoS) | 2015-01-30T14:19+09:00 | 2015-01-30T14:19+09:00 |
| jvndb-2014-000132 | Multiple Allied Telesis products vulnerable to buffer overflow | 2014-12-18T14:47+09:00 | 2015-01-28T17:38+09:00 |
| jvndb-2014-000056 | TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation | 2014-06-17T15:01+09:00 | 2015-01-22T15:50+09:00 |
| jvndb-2014-000095 | Shutter vulnerable to SQL injection | 2014-08-15T13:24+09:00 | 2015-01-15T17:47+09:00 |
| jvndb-2014-000124 | TSUTAYA App for Android vulnerable to arbitrary Java method execution | 2014-12-18T13:41+09:00 | 2014-12-22T17:52+09:00 |
| jvndb-2014-000152 | WBS Gantt-Chart for JIRA vulnerable to cross-site scripting | 2014-12-18T14:49+09:00 | 2014-12-22T17:33+09:00 |
| jvndb-2014-000151 | WBS Gantt-Chart for JIRA vulnerable to cross-site scripting | 2014-12-18T14:48+09:00 | 2014-12-22T17:30+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20543-1 | Security update for kernel-livepatch-MICRO-6-0_Update_6 | 2025-08-01T08:37:43Z | 2025-08-01T08:37:43Z |
| suse-su-2025:20542-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-08-01T08:37:43Z | 2025-08-01T08:37:43Z |
| suse-su-2025:20541-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-08-01T08:37:43Z | 2025-08-01T08:37:43Z |
| suse-su-2025:20529-1 | Security update for kernel-livepatch-MICRO-6-0_Update_6 | 2025-08-01T08:37:43Z | 2025-08-01T08:37:43Z |
| suse-su-2025:20528-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-08-01T08:37:43Z | 2025-08-01T08:37:43Z |
| suse-su-2025:20527-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-08-01T08:37:43Z | 2025-08-01T08:37:43Z |
| suse-su-2025:20540-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-08-01T08:37:39Z | 2025-08-01T08:37:39Z |
| suse-su-2025:20526-1 | Security update for kernel-livepatch-MICRO-6-0_Update_3 | 2025-08-01T08:37:39Z | 2025-08-01T08:37:39Z |
| suse-su-2025:20525-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-08-01T08:37:39Z | 2025-08-01T08:37:39Z |
| suse-su-2025:20548-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-08-01T07:30:37Z | 2025-08-01T07:30:37Z |
| suse-su-2025:20524-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-08-01T07:30:37Z | 2025-08-01T07:30:37Z |
| suse-su-2025:02583-1 | Security update for gnutls | 2025-07-31T16:04:45Z | 2025-07-31T16:04:45Z |
| suse-su-2025:02536-1 | Security update for boost | 2025-07-31T14:44:56Z | 2025-07-31T14:44:56Z |
| suse-su-2025:02581-1 | Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container | 2025-07-31T12:34:43Z | 2025-07-31T12:34:43Z |
| suse-su-2025:02579-1 | Security update for redis | 2025-07-31T11:38:07Z | 2025-07-31T11:38:07Z |
| suse-su-2025:02575-1 | Security update for nvidia-open-driver-G06-signed | 2025-07-31T10:34:38Z | 2025-07-31T10:34:38Z |
| suse-su-2025:20523-1 | Security update for coreutils | 2025-07-31T09:41:53Z | 2025-07-31T09:41:53Z |
| suse-su-2025:20538-1 | Security update for libgcrypt | 2025-07-31T09:38:25Z | 2025-07-31T09:38:25Z |
| suse-su-2025:02566-1 | Security update for libarchive | 2025-07-31T07:18:45Z | 2025-07-31T07:18:45Z |
| suse-su-2025:02565-1 | Security update for apache2 | 2025-07-31T06:27:04Z | 2025-07-31T06:27:04Z |
| suse-su-2025:02564-1 | Security update for rmt-server | 2025-07-31T06:26:40Z | 2025-07-31T06:26:40Z |
| suse-su-2025:02563-1 | Security update for java-11-openjdk | 2025-07-31T02:15:52Z | 2025-07-31T02:15:52Z |
| suse-su-2025:02555-1 | Recommended update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container | 2025-07-30T17:15:11Z | 2025-07-30T17:15:11Z |
| suse-su-2025:2554-1 | Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer | 2025-07-30T16:48:54Z | 2025-07-30T16:48:54Z |
| suse-su-2025:02554-1 | Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer | 2025-07-30T16:48:54Z | 2025-07-30T16:48:54Z |
| suse-su-2025:20547-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20546-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20545-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20544-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20521-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-29404 | Desktop Alert PingAlert信息泄露漏洞（CNVD-2025-29404） | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29403 | Desktop Alert PingAlert跨站脚本漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29402 | Desktop Alert PingAlert权限提升漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29401 | Desktop Alert PingAlert信息泄露漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29400 | Desktop Alert PingAlert访问控制不当漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29392 | Mediawiki - MultiBoilerplate Extensionmaste跨站脚本漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29391 | Mediawiki - LastModified Extension跨站脚本漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29390 | Mediawiki - LanguageSelector Extension代码注入漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29389 | Mediawiki - ImageRating Extension跨站脚本漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29388 | Mediawiki - GrowthExperiments Extension默认权限错误漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29387 | Mediawiki - GrowthExperiments Extension跨站脚本漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29386 | Mediawiki - FlexDiagrams Extension跨站脚本漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29385 | Mediawiki - ExternalGuidance跨站脚本漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29384 | Mediawiki - CirrusSearch Extension拒绝服务漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29383 | Mediawiki - CentralAuth Extension资源泄露漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29382 | Mediawiki - AdvancedSearch Extension跨站脚本漏洞 | 2025-10-23 | 2025-11-26 |
| cnvd-2025-29381 | Online Shopping Portal two_tables.php文件跨站脚本漏洞 | 2024-11-07 | 2025-11-25 |
| cnvd-2025-29380 | Online Shopping Portal js_data.php文件跨站脚本漏洞 | 2024-11-07 | 2025-11-25 |
| cnvd-2025-29379 | Online Shopping Portal html_table.php文件跨站脚本漏洞 | 2024-11-07 | 2025-11-25 |
| cnvd-2025-29378 | Online Shopping Portal empty_table.php文件跨站脚本漏洞 | 2024-11-07 | 2025-11-25 |
| cnvd-2025-29377 | Online Shopping Portal dymanic_table.php文件跨站脚本漏洞 | 2024-11-07 | 2025-11-25 |
| cnvd-2025-29376 | Online Shopping Portal dom_data_two_headers.php文件跨站脚本漏洞 | 2024-11-07 | 2025-11-25 |
| cnvd-2025-29375 | Online Shopping Portal dom_data_th.php文件跨站脚本漏洞 | 2024-11-07 | 2025-11-25 |
| cnvd-2025-29374 | Online Shopping Portal dom_data.php文件跨站脚本漏洞 | 2024-11-07 | 2025-11-25 |
| cnvd-2025-29373 | Complaint Management System user-search.php文件SQL注入漏洞 | 2024-12-13 | 2025-11-25 |
| cnvd-2025-29372 | Complaint Management System complaint-search.php文件SQL注入漏洞 | 2024-12-13 | 2025-11-25 |
| cnvd-2025-29371 | Complaint Management System subcategory.php文件SQL注入漏洞 | 2024-12-13 | 2025-11-25 |
| cnvd-2025-29370 | Online Shopping Portal /search-result.php文件SQL注入漏洞 | 2025-02-28 | 2025-11-25 |
| cnvd-2025-29369 | Small CRM manage-tickets.php文件跨站脚本漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29368 | Small CRM quote-details.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0329 | Multiples vulnérabilités dans Tenable Nessus | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0328 | Multiples vulnérabilités dans Tenable Security Center | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0327 | Vulnérabilité dans SonicWall Connect Tunnel | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0326 | Vulnérabilité dans Cisco Webex App | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0325 | Multiples vulnérabilités dans les produits Apple | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0220 | Vulnérabilité dans Mattermost Server | 2025-03-19T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0217 | Multiples vulnérabilités dans Mattermost Server | 2025-03-18T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| CERTFR-2025-AVI-0328 | Multiples vulnérabilités dans Tenable Security Center | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| CERTFR-2025-AVI-0327 | Vulnérabilité dans SonicWall Connect Tunnel | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| CERTFR-2025-AVI-0326 | Vulnérabilité dans Cisco Webex App | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| CERTFR-2025-AVI-0325 | Multiples vulnérabilités dans les produits Apple | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| CERTFR-2025-AVI-0220 | Vulnérabilité dans Mattermost Server | 2025-03-19T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| CERTFR-2025-AVI-0217 | Multiples vulnérabilités dans Mattermost Server | 2025-03-18T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0324 | Vulnérabilité dans Oracle Weblogic | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0323 | Multiples vulnérabilités dans Oracle Virtualization | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0322 | Multiples vulnérabilités dans Oracle Systems | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0321 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0320 | Multiples vulnérabilités dans Oracle MySQL | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0319 | Multiples vulnérabilités dans Oracle Java SE | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0318 | Multiples vulnérabilités dans Oracle Database Server | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0317 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0316 | Multiples vulnérabilités dans les produits Atlassian | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0315 | Multiples vulnérabilités dans Google Chrome | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0314 | Vulnérabilité dans les produits Microsoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0312 | Multiples vulnérabilités dans les produits Mattermost | 2025-04-15T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| CERTFR-2025-AVI-0324 | Vulnérabilité dans Oracle Weblogic | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| CERTFR-2025-AVI-0323 | Multiples vulnérabilités dans Oracle Virtualization | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| CERTFR-2025-AVI-0322 | Multiples vulnérabilités dans Oracle Systems | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| CERTFR-2025-AVI-0321 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| CERTFR-2025-AVI-0320 | Multiples vulnérabilités dans Oracle MySQL | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |