Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-32431 |
6.5 (3.1)
|
WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Sit… |
Brainstorm Force |
Astra Bulk Edit |
2026-03-13T11:42:18.080Z | 2026-03-13T19:23:48.861Z |
| CVE-2026-32430 |
6.5 (3.1)
|
WordPress PowerPack Addons for Elementor plugin <= 2.9… |
IdeaBox Creations |
PowerPack Addons for Elementor |
2026-03-13T11:42:17.868Z | 2026-03-13T16:02:27.320Z |
| CVE-2026-32429 |
6.5 (3.1)
|
WordPress Magical Addons For Elementor plugin <= 1.4.1… |
Noor Alam |
Magical Addons For Elementor |
2026-03-13T11:42:17.710Z | 2026-03-13T19:23:47.980Z |
| CVE-2026-32428 |
5.3 (3.1)
|
WordPress Popup Like box plugin <= 3.7.7 - Broken Acce… |
Ays Pro |
Popup Like box |
2026-03-13T11:42:17.541Z | 2026-03-13T17:53:07.918Z |
| CVE-2026-32427 |
5.3 (3.1)
|
WordPress VW Education Lite plugin <= 2.2.0 - Broken A… |
vowelweb |
VW Education Lite |
2026-03-13T11:42:17.358Z | 2026-03-13T18:53:33.301Z |
| CVE-2026-32426 |
7.5 (3.1)
|
WordPress Medilazar Core plugin < 1.4.7 - Local File I… |
themelexus |
Medilazar Core |
2026-03-13T11:42:17.181Z | 2026-03-13T17:59:04.378Z |
| CVE-2026-32425 |
5.3 (3.1)
|
WordPress Payment Gateway Pix For GiveWP plugin <= 2.2… |
linknacional |
Payment Gateway Pix For GiveWP |
2026-03-13T11:42:17.005Z | 2026-03-13T18:53:33.143Z |
| CVE-2026-32424 |
6.5 (3.1)
|
WordPress Sprout Clients plugin <= 3.2.2 - Cross Site … |
BoldGrid |
Sprout Clients |
2026-03-13T11:42:16.828Z | 2026-03-13T18:01:53.120Z |
| CVE-2026-32423 |
5.4 (3.1)
|
WordPress Admin and Site Enhancements (ASE) plugin <= … |
Bowo |
Admin and Site Enhancements (ASE) |
2026-03-13T11:42:16.662Z | 2026-03-13T18:54:27.531Z |
| CVE-2026-32422 |
8.5 (3.1)
|
WordPress WP EasyCart plugin <= 5.8.13 - SQL Injection… |
levelfourdevelopment |
WP EasyCart |
2026-03-13T11:42:16.471Z | 2026-03-13T18:06:07.361Z |
| CVE-2026-32421 |
5.3 (3.1)
|
WordPress Post Timeline plugin <= 2.4.1 - Broken Acces… |
Agile Logix |
Post Timeline |
2026-03-13T11:42:16.295Z | 2026-03-13T18:53:32.978Z |
| CVE-2026-32420 |
5.4 (3.1)
|
WordPress GamiPress plugin <= 7.6.6 - Cross Site Reque… |
Ruben Garcia |
GamiPress |
2026-03-13T11:42:16.126Z | 2026-03-13T18:10:20.502Z |
| CVE-2026-32419 |
5.9 (3.1)
|
WordPress List category posts plugin <= 0.93.1 - Cross… |
Fernando Briano |
List category posts |
2026-03-13T11:42:15.955Z | 2026-03-13T18:59:46.765Z |
| CVE-2026-32418 |
7.6 (3.1)
|
WordPress Meow Gallery plugin <= 5.4.4 - SQL Injection… |
Jordy Meow |
Meow Gallery |
2026-03-13T11:42:15.769Z | 2026-03-13T18:15:07.795Z |
| CVE-2026-32417 |
5.4 (3.1)
|
WordPress Pochipp plugin < 1.18.9 - Broken Access Cont… |
wppochipp |
Pochipp |
2026-03-13T11:42:15.593Z | 2026-03-13T18:54:48.842Z |
| CVE-2026-32416 |
5.4 (3.1)
|
WordPress PDF Poster plugin <= 2.4.0 - Broken Access C… |
bPlugins |
PDF Poster |
2026-03-13T11:42:15.425Z | 2026-03-13T18:19:12.356Z |
| CVE-2026-32415 |
N/A
|
WordPress Squeeze plugin <= 1.7.7 - Directory Traversa… |
Bogdan Bendziukov |
Squeeze |
2026-03-13T11:42:15.203Z | 2026-03-13T11:42:15.203Z |
| CVE-2026-32414 |
7.2 (3.1)
|
WordPress Advanced Woo Labels plugin <= 2.36 - Remote … |
ILLID |
Advanced Woo Labels |
2026-03-13T11:42:14.914Z | 2026-03-13T18:21:55.131Z |
| CVE-2026-32413 |
5.3 (3.1)
|
WordPress Permalink Manager Lite plugin < 2.5.3 - Brok… |
Maciej Bis |
Permalink Manager Lite |
2026-03-13T11:42:14.732Z | 2026-03-13T18:53:32.824Z |
| CVE-2026-32412 |
5.4 (3.1)
|
WordPress Gift Up Gift Cards for WordPress and WooComm… |
Gift Up! |
Gift Up Gift Cards for WordPress and WooCommerce |
2026-03-13T11:42:14.544Z | 2026-03-13T18:27:03.463Z |
| CVE-2026-32411 |
6.5 (3.1)
|
WordPress Embed Calendly plugin <= 4.4 - Cross Site Sc… |
Simpma |
Embed Calendly |
2026-03-13T11:42:14.354Z | 2026-03-13T19:23:48.148Z |
| CVE-2026-32410 |
5.3 (3.1)
|
WordPress WBW Currency Switcher for WooCommerce plugin… |
WBW Plugins |
WBW Currency Switcher for WooCommerce |
2026-03-13T11:42:14.149Z | 2026-03-13T18:30:00.729Z |
| CVE-2026-32409 |
5.3 (3.1)
|
WordPress Forminator plugin <= 1.50.2 - Broken Access … |
WPMU DEV - Your All-in-One WordPress Platform |
Forminator |
2026-03-13T11:42:13.977Z | 2026-03-13T18:53:32.678Z |
| CVE-2026-32408 |
4.3 (3.1)
|
WordPress Brizy plugin <= 2.7.23 - Broken Access Contr… |
themefusecom |
Brizy |
2026-03-13T11:42:13.798Z | 2026-03-13T18:52:34.197Z |
| CVE-2026-32407 |
4.3 (3.1)
|
WordPress WPC Smart Wishlist for WooCommerce plugin <=… |
WPClever |
WPC Smart Wishlist for WooCommerce |
2026-03-13T11:42:13.638Z | 2026-03-13T18:55:19.154Z |
| CVE-2026-32406 |
4.3 (3.1)
|
WordPress WPC Product Bundles for WooCommerce plugin <… |
WPClever |
WPC Product Bundles for WooCommerce |
2026-03-13T11:42:13.454Z | 2026-03-13T18:56:03.247Z |
| CVE-2026-32405 |
N/A
|
WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exp… |
xtemos |
WoodMart |
2026-03-13T11:42:13.263Z | 2026-03-13T11:42:13.263Z |
| CVE-2026-32404 |
5.3 (3.1)
|
WordPress Studio99 WP Monitor plugin <= 1.0.3 - Broken… |
Studio99 |
Studio99 WP Monitor |
2026-03-13T11:42:13.050Z | 2026-03-13T19:00:10.097Z |
| CVE-2026-32403 |
6.5 (3.1)
|
WordPress Toocheke Companion plugin <= 1.194 - Cross S… |
toocheke |
Toocheke Companion |
2026-03-13T11:42:12.862Z | 2026-03-13T19:23:48.283Z |
| CVE-2026-32402 |
5.3 (3.1)
|
WordPress Image Slider by Ays plugin <= 2.7.1 - Broken… |
Ays Pro |
Image Slider by Ays |
2026-03-13T11:42:12.702Z | 2026-03-13T19:05:11.122Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-32322 |
5.3 (3.1)
|
soroban-sdk: `Fr` scalar field equality comparison byp… |
stellar |
rs-soroban-sdk |
2026-03-12T21:39:38.022Z | 2026-03-13T15:00:09.804Z |
| CVE-2026-32320 |
6.5 (3.1)
|
Ella Core: AMF DoS via malformed PathSwitchRequest wit… |
ellanetworks |
core |
2026-03-12T21:34:50.318Z | 2026-03-14T03:46:29.938Z |
| CVE-2026-32319 |
7.5 (3.1)
|
Ella Core: Unauthenticated AMF DoS via malformed Initi… |
ellanetworks |
core |
2026-03-12T21:33:32.463Z | 2026-03-14T03:45:57.547Z |
| CVE-2026-32308 |
7.6 (3.1)
|
OneUptime: Stored XSS via Mermaid Diagram Rendering (s… |
OneUptime |
oneuptime |
2026-03-12T21:29:00.510Z | 2026-03-14T03:43:13.858Z |
| CVE-2026-32306 |
10 (3.1)
|
OneUptime ClickHouse SQL Injection via Aggregate Query… |
OneUptime |
oneuptime |
2026-03-12T21:27:51.463Z | 2026-03-14T03:42:22.271Z |
| CVE-2026-32304 |
9.8 (3.1)
|
Locutus: RCE via unsanitized input in create_function() |
locutusjs |
locutus |
2026-03-12T21:24:51.730Z | 2026-03-13T13:12:13.553Z |
| CVE-2026-32302 |
8.1 (3.1)
|
OpenClaw: Untrusted web origins can obtain authenticat… |
openclaw |
openclaw |
2026-03-12T21:22:29.099Z | 2026-03-13T13:11:06.707Z |
| CVE-2026-32301 |
9.3 (3.1)
|
Centrifugo: SSRF via unverified JWT claims interpolate… |
centrifugal |
centrifugo |
2026-03-12T21:19:03.862Z | 2026-03-13T13:09:57.376Z |
| CVE-2026-31949 |
6.5 (3.1)
|
LibreChat Denial of Service (DoS) via Unhandled Except… |
danny-avila |
LibreChat |
2026-03-13T19:47:24.653Z | 2026-03-13T19:47:24.653Z |
| CVE-2026-31944 |
7.6 (3.1)
|
LibreChat MCP OAuth callback does not validate browser… |
danny-avila |
LibreChat |
2026-03-13T19:44:30.850Z | 2026-03-13T19:44:30.850Z |
| CVE-2026-31922 |
8.5 (3.1)
|
WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vu… |
Ays Pro |
Fox LMS |
2026-03-13T11:41:54.569Z | 2026-03-13T19:26:59.728Z |
| CVE-2026-31919 |
4.3 (3.1)
|
WordPress Advanced Coupons for WooCommerce Coupons plu… |
Josh Kohlbach |
Advanced Coupons for WooCommerce Coupons |
2026-03-13T11:41:54.329Z | 2026-03-13T14:48:55.614Z |
| CVE-2026-31918 |
6.5 (3.1)
|
WordPress immonex Kickstart plugin <= 1.13.0 - Cross S… |
immonex |
immonex Kickstart |
2026-03-13T11:41:54.126Z | 2026-03-13T19:23:48.722Z |
| CVE-2026-31917 |
8.5 (3.1)
|
WordPress WP ERP plugin <= 1.16.10 - SQL Injection vul… |
weDevs |
WP ERP |
2026-03-13T11:41:53.941Z | 2026-03-13T15:21:10.021Z |
| CVE-2026-31916 |
5.3 (3.1)
|
WordPress Latest Post Shortcode plugin <= 14.2.1 - Bro… |
Iulia Cazan |
Latest Post Shortcode |
2026-03-13T11:41:53.694Z | 2026-03-13T18:53:29.422Z |
| CVE-2026-31915 |
5.3 (3.1)
|
WordPress Flatsome theme <= 3.19.6 - Broken Access Con… |
UX-themes |
Flatsome |
2026-03-13T11:41:53.239Z | 2026-03-13T15:24:08.859Z |
| CVE-2026-31899 |
7.5 (3.1)
|
CairoSVG vulnerable to Exponential DoS via recursive <… |
Kozea |
CairoSVG |
2026-03-13T19:38:43.990Z | 2026-03-13T19:38:43.990Z |
| CVE-2026-31897 |
0 (3.1)
|
FreeRDP has an out-of-bounds read in `freerdp_bitmap_d… |
FreeRDP |
FreeRDP |
2026-03-13T17:42:11.932Z | 2026-03-13T18:10:06.909Z |
| CVE-2026-31886 |
9.1 (3.1)
|
Dagu has a Path Traversal via `dagRunId` in Inline DAG… |
dagu-org |
dagu |
2026-03-13T19:32:09.415Z | 2026-03-13T19:43:18.359Z |
| CVE-2026-31885 |
6.5 (3.1)
|
FreeRDP has an out-of-bounds read in ADPCM decoders du… |
FreeRDP |
FreeRDP |
2026-03-13T17:38:23.756Z | 2026-03-13T17:38:23.756Z |
| CVE-2026-31884 |
6.5 (3.1)
|
FreeRDP has a division-by-zero in ADPCM decoders when … |
FreeRDP |
FreeRDP |
2026-03-13T17:36:57.722Z | 2026-03-13T17:36:57.722Z |
| CVE-2026-31883 |
6.5 (3.1)
|
FreeRDP has a `size_t` underflow in ADPCM decoder lead… |
FreeRDP |
FreeRDP |
2026-03-13T17:35:17.411Z | 2026-03-13T17:35:17.411Z |
| CVE-2026-31882 |
7.5 (3.1)
|
Dagu SSE Authentication Bypass in Basic Auth Mode |
dagu-org |
dagu |
2026-03-13T19:28:25.615Z | 2026-03-13T19:43:56.406Z |
| CVE-2026-31864 |
6.8 (3.1)
|
JumpServer has a Server-Side Template Injection Leadin… |
jumpserver |
jumpserver |
2026-03-13T19:22:05.168Z | 2026-03-13T19:44:51.850Z |
| CVE-2026-31814 |
8.7 (4.0)
|
Yamux remote Panic via malformed WindowUpdate credit |
libp2p |
rust-yamux |
2026-03-13T19:19:41.879Z | 2026-03-13T19:38:02.290Z |
| CVE-2026-31806 |
9.3 (4.0)
|
FreeRDP has a Heap Buffer Overflow in nsc_process_mess… |
FreeRDP |
FreeRDP |
2026-03-13T17:40:19.920Z | 2026-03-14T03:55:33.685Z |
| CVE-2026-31798 |
5 (3.1)
|
JumpServer Improper Certificate Validation in Custom S… |
jumpserver |
jumpserver |
2026-03-13T19:15:26.081Z | 2026-03-13T19:38:35.576Z |
| CVE-2026-30961 |
4.3 (3.1)
|
Gokapi's File Request MaxSize Limit Bypassed via Multi… |
Forceu |
Gokapi |
2026-03-13T19:09:38.427Z | 2026-03-13T19:39:14.146Z |
| CVE-2026-30955 |
6.5 (3.1)
|
Gokapi vulnerable to DoS in E2E Metadata Parser |
Forceu |
Gokapi |
2026-03-13T19:07:55.836Z | 2026-03-13T19:39:58.108Z |
| CVE-2026-30943 |
4.1 (3.1)
|
Gokapi has Privilege Escalation in File Replace |
Forceu |
Gokapi |
2026-03-13T19:07:01.576Z | 2026-03-13T19:40:38.395Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-23184 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_netl… | 2026-02-14T17:15:56.167 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23183 | In the Linux kernel, the following vulnerability has been resolved: cgroup/dmem: fix NULL pointer … | 2026-02-14T17:15:56.067 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23182 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra: Fix a memory leak … | 2026-02-14T17:15:55.960 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23181 | In the Linux kernel, the following vulnerability has been resolved: btrfs: sync read disk super an… | 2026-02-14T17:15:55.853 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23180 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: add bounds check… | 2026-02-14T17:15:55.747 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23179 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fixup hang in nvmet… | 2026-02-14T17:15:55.643 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23178 | In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fix potential bu… | 2026-02-14T17:15:55.537 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23177 | In the Linux kernel, the following vulnerability has been resolved: mm, shmem: prevent infinite lo… | 2026-02-14T17:15:55.430 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23176 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_haps: Fi… | 2026-02-14T17:15:55.320 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23175 | In the Linux kernel, the following vulnerability has been resolved: net: cpsw: Execute ndo_set_rx_… | 2026-02-14T17:15:55.210 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23174 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: handle changing devi… | 2026-02-14T17:15:55.103 | 2026-02-18T17:52:22.253 |
| fkie_cve-2025-71224 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ocb: skip rx_n… | 2026-02-14T17:15:54.773 | 2026-02-18T17:52:22.253 |
| fkie_cve-2025-71223 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak … | 2026-02-14T17:15:54.670 | 2026-02-18T17:52:22.253 |
| fkie_cve-2025-71222 | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: ensure skb headr… | 2026-02-14T17:15:54.560 | 2026-02-18T17:52:22.253 |
| fkie_cve-2025-71221 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race … | 2026-02-14T17:15:54.450 | 2026-02-18T17:52:22.253 |
| fkie_cve-2025-71220 | In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_session… | 2026-02-14T17:15:54.343 | 2026-02-18T17:52:22.253 |
| fkie_cve-2025-71204 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak … | 2026-02-14T17:15:54.237 | 2026-02-18T17:52:22.253 |
| fkie_cve-2025-71203 | In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table … | 2026-02-14T17:15:54.110 | 2026-02-18T17:52:22.253 |
| fkie_cve-2026-23173 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows on… | 2026-02-14T16:15:57.560 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23172 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential… | 2026-02-14T16:15:57.457 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23171 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free du… | 2026-02-14T16:15:57.353 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23170 | In the Linux kernel, the following vulnerability has been resolved: drm/imx/tve: fix probe device … | 2026-02-14T16:15:57.247 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23169 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl… | 2026-02-14T16:15:57.147 | 2026-02-19T16:27:13.943 |
| fkie_cve-2026-23168 | In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_n… | 2026-02-14T16:15:57.023 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23167 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfk… | 2026-02-14T16:15:56.910 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23166 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix NULL pointer derefere… | 2026-02-14T16:15:56.797 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23165 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix deadlock in RSS confi… | 2026-02-14T16:15:56.693 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23164 | In the Linux kernel, the following vulnerability has been resolved: rocker: fix memory leak in roc… | 2026-02-14T16:15:56.590 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23163 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer d… | 2026-02-14T16:15:56.483 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-23162 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/nvm: Fix double-free on… | 2026-02-14T16:15:56.383 | 2026-02-18T17:52:44.520 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-2622-7mvw-7jrg |
5.3 (3.1)
|
Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploit… | 2026-03-13T21:31:47Z | 2026-03-13T21:31:47Z |
| ghsa-xxw2-9c45-r2hr |
6.3 (4.0)
|
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, a… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-xxg2-xvp8-vqm5 |
5.3 (3.1)
6.9 (4.0)
|
wpDiscuz before 7.6.47 contains an IP spoofing vulnerability in the getIP() function that allows at… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-xw8f-mr3m-9h4c |
8.8 (3.1)
|
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and C… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-xc8q-rh3x-h9m3 |
5.3 (3.1)
|
The Formidable Forms plugin for WordPress is vulnerable to an authorization bypass through user-con… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:47Z |
| ghsa-wj64-gh9j-xm82 |
|
Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange … | 2026-03-13T21:31:46Z | 2026-03-13T21:31:47Z |
| ghsa-qgvm-cj9x-53jj |
5.3 (3.1)
6.9 (4.0)
|
wpDiscuz before 7.6.47 contains a vote manipulation vulnerability that allows attackers to manipula… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-qgpf-49hm-qfx7 |
7.3 (3.1)
8.5 (4.0)
|
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Rep… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-q226-8c4v-p73w |
6.5 (3.1)
6.9 (4.0)
|
wpDiscuz before 7.6.47 contains a shortcode injection vulnerability that allows attackers to execut… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-pxx3-v286-jcrq |
7.5 (3.1)
8.7 (4.0)
|
wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anon… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-p9gr-qppx-mjcg |
4.3 (3.1)
5.3 (4.0)
|
wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability in the getFollowsPage() … | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-jv3p-742h-x3pf |
4.9 (3.1)
6.9 (4.0)
|
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators … | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-hwx3-r9g9-2q2v |
7.5 (3.1)
|
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and C… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-hrwg-p9c4-49wp |
5.5 (3.1)
5.1 (4.0)
|
wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that al… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-fq3v-mc83-wvwc |
4.3 (3.1)
|
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-fprc-m8hw-hvjj |
8.1 (3.1)
6.1 (4.0)
|
wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-fmw5-jxp8-6hq3 |
7.7 (4.0)
|
The web interface on multiple Omada switches does not adequately validate certain external inputs, … | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-fffh-m74r-q8cx |
6.1 (3.1)
5.3 (4.0)
|
wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment p… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-cr29-p7m8-fr3q |
8.1 (3.1)
9.2 (4.0)
|
wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions() functio… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-cq9v-9ww6-phr8 |
6.4 (3.1)
|
The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:47Z |
| ghsa-9rm9-28cx-pq56 |
3.7 (3.1)
6.3 (4.0)
|
wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to ma… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-9j2r-2287-24hf |
6.5 (3.1)
6.9 (4.0)
|
wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated a… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-9837-hmw4-q6x7 |
7.8 (3.1)
8.5 (4.0)
|
There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted f… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-7p64-f72w-3rpr |
9.8 (3.1)
|
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and C… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-58rf-522j-f25h |
5.4 (3.1)
|
The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:47Z |
| ghsa-3xw8-g6v7-h2gh |
6.1 (3.1)
6.3 (4.0)
|
wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability that allows authenticat… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-34x2-m38g-824f |
5.3 (4.0)
|
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, a… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-34jf-g4m6-4f57 |
4.4 (3.1)
2.1 (4.0)
|
wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability that allows attackers to injec… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-278p-xrjq-m6gf |
9.1 (3.1)
|
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and C… | 2026-03-13T21:31:46Z | 2026-03-13T21:31:46Z |
| ghsa-xh4v-97g8-ww62 |
5.4 (3.1)
|
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 throug… | 2026-03-13T21:31:45Z | 2026-03-13T21:31:45Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-200 |
7.2 (3.1)
|
JupyterHub is software that allows one to create a multi-user server for Jupyter notebook… | jupyterhub | 2024-08-08T15:15:17+00:00 | 2025-01-19T16:22:58.171761+00:00 |
| pysec-2024-70 |
|
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values… | django | 2024-08-07T15:15:00+00:00 | 2024-08-07T17:22:10.804411+00:00 |
| pysec-2024-69 |
|
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and … | django | 2024-08-07T15:15:00+00:00 | 2024-08-07T17:22:10.745844+00:00 |
| pysec-2024-68 |
|
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() an… | django | 2024-08-07T15:15:00+00:00 | 2024-08-07T17:22:10.682679+00:00 |
| pysec-2024-67 |
|
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat… | django | 2024-08-07T15:15:00+00:00 | 2024-08-07T17:22:10.613440+00:00 |
| pysec-2024-73 |
9.1 (3.1)
|
A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 … | chuanhuchatgpt | 2024-07-31T01:15:00+00:00 | 2024-08-27T15:22:40.259109+00:00 |
| pysec-2024-75 |
6.1 (3.1)
|
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Th… | twisted | 2024-07-29T16:15:00+00:00 | 2024-09-11T19:19:18.005250+00:00 |
| pysec-2024-203 |
7.5 (3.1)
|
DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in files… | duckdb | 2024-07-24T18:15:05+00:00 | 2025-01-19T19:18:58.299130+00:00 |
| pysec-2024-65 |
|
Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents. | roundup | 2024-07-17T20:15:00+00:00 | 2024-07-17T23:22:05.024899+00:00 |
| pysec-2024-64 |
|
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header. | roundup | 2024-07-17T20:15:00+00:00 | 2024-07-17T23:22:04.987078+00:00 |
| pysec-2024-63 |
|
In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS. | roundup | 2024-07-17T20:15:00+00:00 | 2024-07-17T23:22:04.949977+00:00 |
| pysec-2024-173 |
8.8 (3.1)
|
Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such… | streampipes | 2024-07-17T10:15:01+00:00 | 2025-01-18T22:21:43.618882+00:00 |
| pysec-2024-174 |
4.3 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installatio… | streampipes | 2024-07-17T09:15:02+00:00 | 2025-01-18T22:21:43.678475+00:00 |
| pysec-2024-172 |
3.7 (3.1)
|
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in … | streampipes | 2024-07-17T09:15:02+00:00 | 2025-01-18T22:21:43.557516+00:00 |
| pysec-2024-190 |
8.8 (3.1)
|
Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenti… | apache-airflow | 2024-07-17T08:15:02+00:00 | 2025-01-19T07:21:16.859034+00:00 |
| pysec-2024-189 |
5.4 (3.1)
|
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated at… | apache-airflow | 2024-07-17T08:15:01+00:00 | 2025-01-19T07:21:16.796301+00:00 |
| pysec-2024-66 |
7.8 (3.1)
|
dbt enables data analysts and engineers to transform their data using the same practices … | dbt-core | 2024-07-16T23:15:00+00:00 | 2024-07-19T17:21:49.664320+00:00 |
| pysec-2024-62 |
|
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerab… | langchain-experimental | 2024-07-15T05:15:00+00:00 | 2024-07-15T11:19:36.686972+00:00 |
| pysec-2024-86 |
4.9 (3.1)
|
Wagtail is an open source content management system built on Django. A bug in Wagtail's `… | wagtail | 2024-07-11T16:15:00+00:00 | 2024-09-19T19:20:17.668744+00:00 |
| pysec-2024-61 |
6.1 (3.1)
|
A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt ve… | chuanhuchatgpt | 2024-07-11T11:15:00+00:00 | 2024-07-12T21:33:00.657381+00:00 |
| pysec-2024-59 |
|
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_l… | django | 2024-07-10T05:15:00+00:00 | 2024-07-10T11:20:07.800540+00:00 |
| pysec-2024-58 |
|
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes… | django | 2024-07-10T05:15:00+00:00 | 2024-07-10T11:20:07.704786+00:00 |
| pysec-2024-57 |
|
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.cont… | django | 2024-07-10T05:15:00+00:00 | 2024-07-10T11:20:07.604887+00:00 |
| pysec-2024-56 |
|
An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urli… | django | 2024-07-10T05:15:00+00:00 | 2024-07-10T11:20:07.495359+00:00 |
| pysec-2024-60 |
7.5 (3.1)
|
A vulnerability was identified in the kjd/idna library, specifically within the `idna.enc… | idna | 2024-07-07T18:15:00+00:00 | 2024-07-11T17:21:37.216928+00:00 |
| pysec-2024-230 |
7.5 (3.1)
|
Certifi is a curated collection of Root Certificates for validating the trustworthiness o… | certifi | 2024-07-05T19:15:10+00:00 | 2025-02-12T21:21:51.559667+00:00 |
| pysec-2024-176 |
6.1 (3.1)
|
A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml ver… | zenml | 2024-06-30T16:15:03+00:00 | 2025-01-18T22:21:45.122426+00:00 |
| pysec-2024-167 |
|
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python… | nltk | 2024-06-27T22:15:10+00:00 | 2025-01-18T19:19:06.317325+00:00 |
| pysec-2024-54 |
6.5 (3.1)
|
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang St… | codechecker | 2024-06-24T18:15:00+00:00 | 2024-06-26T19:19:24.981233+00:00 |
| pysec-2024-53 |
|
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides … | langchain-experimental | 2024-06-16T15:15:00+00:00 | 2024-06-16T17:20:32.187558+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1270 | Malicious code in @wgu-edu/wgu-icons (npm) | 2026-03-06T15:20:59Z | 2026-03-08T01:39:42Z |
| mal-2026-1269 | Malicious code in @wgu-edu/wgu-core (npm) | 2026-03-06T15:20:59Z | 2026-03-08T01:39:42Z |
| mal-2026-1268 | Malicious code in @shenira/libsignal-node (npm) | 2026-03-06T14:37:02Z | 2026-03-08T01:39:42Z |
| mal-2026-1267 | Malicious code in @shenira/baileysx (npm) | 2026-03-06T14:37:02Z | 2026-03-08T01:39:42Z |
| mal-2026-1266 | Malicious code in @shenira/baileys (npm) | 2026-03-06T14:37:02Z | 2026-03-08T01:39:42Z |
| mal-2026-1274 | Malicious code in test-mal-npm-pkg-not-local (npm) | 2026-03-06T14:26:46Z | 2026-03-08T01:39:48Z |
| mal-2026-1273 | Malicious code in test-mal-npm-pkg-local (npm) | 2026-03-06T14:26:46Z | 2026-03-08T01:39:48Z |
| mal-2026-1272 | Malicious code in test-mal-npm-pkg-2 (npm) | 2026-03-06T14:26:46Z | 2026-03-08T01:39:48Z |
| mal-2026-1265 | Malicious code in aaaaaxxxxx (npm) | 2026-03-06T14:18:06Z | 2026-03-08T01:39:42Z |
| mal-2026-1264 | Malicious code in python-requirements (PyPI) | 2026-03-06T13:12:14Z | 2026-03-06T13:12:15Z |
| mal-2026-1263 | Malicious code in python-module-installer (PyPI) | 2026-03-06T13:02:02Z | 2026-03-06T13:02:03Z |
| mal-2026-1261 | Malicious code in fastapi-requests (PyPI) | 2026-03-06T11:35:54Z | 2026-03-06T11:35:54Z |
| mal-2026-1262 | Malicious code in fastapis-requests (PyPI) | 2026-03-06T11:34:31Z | 2026-03-06T11:34:31Z |
| mal-2026-1260 | Malicious code in webmd-url (npm) | 2026-03-06T07:28:40Z | 2026-03-12T16:38:55Z |
| mal-2026-1259 | Malicious code in pino-sdk-v2 (npm) | 2026-03-06T07:19:17Z | 2026-03-08T01:39:46Z |
| mal-2026-1258 | Malicious code in tether-dev-docs (npm) | 2026-03-06T00:01:05Z | 2026-03-08T01:39:48Z |
| mal-2026-1257 | Malicious code in pdfjs-dist-fourth (npm) | 2026-03-05T22:15:57Z | 2026-03-08T01:39:46Z |
| mal-2026-1247 | Malicious code in @imhuman/corp-build-utils-poc (npm) | 2026-03-05T16:49:33Z | 2026-03-08T01:39:42Z |
| mal-2026-1249 | Malicious code in imhuman-fw-logger (npm) | 2026-03-05T16:49:32Z | 2026-03-08T01:39:45Z |
| mal-2026-1248 | Malicious code in @imhuman/fw-logger (npm) | 2026-03-05T16:49:32Z | 2026-03-08T01:39:42Z |
| mal-2026-1251 | Malicious code in pear-apps-lib-ui-react-hooks (npm) | 2026-03-05T16:18:38Z | 2026-03-08T01:39:46Z |
| mal-2026-1252 | Malicious code in pear-apps-utils-avatar-initials (npm) | 2026-03-05T16:04:20Z | 2026-03-08T01:39:46Z |
| mal-2026-1253 | Malicious code in pear-apps-utils-date (npm) | 2026-03-05T16:00:53Z | 2026-03-08T01:39:46Z |
| mal-2026-1254 | Malicious code in pear-apps-utils-qr (npm) | 2026-03-05T15:55:06Z | 2026-03-08T01:39:46Z |
| mal-2026-1255 | Malicious code in pearpass-lib-data-export (npm) | 2026-03-05T15:50:09Z | 2026-03-08T01:39:46Z |
| mal-2026-1250 | Malicious code in pear-apps-lib-feedback (npm) | 2026-03-05T15:35:15Z | 2026-03-08T01:39:46Z |
| mal-2026-1256 | Malicious code in pearpass-lib-data-import (npm) | 2026-03-05T15:33:59Z | 2026-03-08T01:39:46Z |
| mal-2026-1246 | Malicious code in pearpass-utils-password-check (npm) | 2026-03-05T15:32:42Z | 2026-03-08T01:39:46Z |
| mal-2026-1245 | Malicious code in nf-referral-backend-placeholder (npm) | 2026-03-05T15:26:23Z | 2026-03-08T01:39:46Z |
| mal-2026-1244 | Malicious code in spectral-corsair-navigator (npm) | 2026-03-05T15:05:48Z | 2026-03-08T01:39:47Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2026-0088 | Fortinet FortiSandbox: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2026-01-13T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0086 | Linux Kernel: Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-03-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0083 | Microsoft Windows : Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-02-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0080 | Microsoft Azure: Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-03-02T23:00:00.000+00:00 |
| wid-sec-w-2026-0068 | libpng (API-Funktionen): Mehrere Schwachstellen ermöglichen DoS und Offenlegung von Informationen | 2026-01-12T23:00:00.000+00:00 | 2026-03-02T23:00:00.000+00:00 |
| wid-sec-w-2026-0066 | avahi-daemon: Mehrere Schwachstellen ermöglichen Denial of Service | 2026-01-12T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0062 | Red Hat Enterprise Linux (libsoup): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Datenmanipulation | 2026-01-11T23:00:00.000+00:00 | 2026-03-02T23:00:00.000+00:00 |
| wid-sec-w-2026-0056 | MailPit: Schwachstelle ermöglicht Offenlegung von Informationen | 2026-01-11T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0047 | CoreDNS: Schwachstelle ermöglicht Denial of Service | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0044 | libtasn1: Schwachstelle ermöglicht Denial of Service | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0043 | Trend Micro Apex Central: Mehrere Schwachstellen | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0041 | Cisco Firewall Threat Defense, IOS XE und Meraki MX: Mehrere Schwachstellen | 2026-01-07T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0040 | n8n: Mehrere Schwachstellen | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0037 | GitLab CE und EE: Mehrere Schwachstellen | 2026-01-07T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2026-0036 | OpenLDAP: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0035 | MediaWiki Erweiterungen: Mehrere Schwachstellen | 2026-01-07T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2026-0034 | Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2026-01-07T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2026-0030 | cURL: Mehrere Schwachstellen | 2026-01-06T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0026 | HCL BigFix: Mehrere Schwachstellen | 2026-01-06T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2026-0020 | Google Chrome/Microsoft Edge: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2026-01-06T23:00:00.000+00:00 | 2026-01-11T23:00:00.000+00:00 |
| wid-sec-w-2026-0019 | Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen | 2026-01-06T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2026-0018 | MailPit: Schwachstelle ermöglicht Offenlegung von Informationen | 2026-01-06T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0017 | Veeam Backup & Replication: Mehrere Schwachstellen | 2026-01-05T23:00:00.000+00:00 | 2026-01-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0010 | Samsung Exynos: Mehrere Schwachstellen | 2026-01-04T23:00:00.000+00:00 | 2026-01-06T23:00:00.000+00:00 |
| wid-sec-w-2026-0009 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2026-01-04T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0008 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2026-01-04T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0006 | OpenCTI: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen, Manipulation von Daten, Denial of Service | 2026-01-04T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2026-0003 | Vaadin: Schwachstelle ermöglicht Cross-Site Scripting | 2026-01-04T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2941 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-30T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2938 | Arista EOS: Schwachstelle ermöglicht Denial of Service | 2025-12-30T23:00:00.000+00:00 | 2026-01-06T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-324-03 | Opto 22 GRV-EPIC and groov RIO | 2025-11-20T06:00:00.000000Z | 2025-11-20T06:00:00.000000Z |
| icsa-25-324-02 | ICAM365 CCTV Camera Multiple Models | 2025-11-20T06:00:00.000000Z | 2025-11-20T06:00:00.000000Z |
| icsa-25-322-05 | METZ CONNECT EWIO2 | 2025-11-18T12:00:00.000000Z | 2025-11-18T12:00:00.000000Z |
| icsa-25-322-03 | Shelly Pro 3EM | 2025-11-18T07:00:00.000000Z | 2025-11-18T07:00:00.000000Z |
| icsa-25-322-02 | Shelly Pro 4PM | 2025-11-18T07:00:00.000000Z | 2025-11-18T07:00:00.000000Z |
| icsa-25-317-12 | Siemens Spectrum Power 4 | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-11 | Siemens SICAM P850 family and SICAM P855 family | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-10 | *Rockwell Automation AADvance-Trusted SIS Workstation * | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-09 | Rockwell Automation FactoryTalk Policy Manager | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-08 | General Industrial Controls Lynx+ Gateway | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-07 | Rockwell Automation FactoryTalk DataMosaix Private Cloud | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-06 | Rockwell Automation Studio 5000 Simulation Interface | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-05 | Rockwell Automation Verve Asset Manager | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-04 | Brightpick Mission Control / Internal Logic Control | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-03 | AVEVA Edge | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-02 | AVEVA Application Server IDE | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-01 | Mitsubishi Electric MELSEC iQ-F Series | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-322-04 | Schneider Electric PowerChute Serial Shutdown | 2025-11-11T08:00:00.000000Z | 2025-11-11T08:00:00.000000Z |
| icsa-25-322-01 | Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio | 2025-11-11T08:00:00.000000Z | 2025-11-11T08:00:00.000000Z |
| icsa-25-317-17 | Siemens Software Center and Solid Edge | 2025-11-11T00:00:00.000000Z | 2025-11-11T00:00:00.000000Z |
| icsa-25-317-16 | Siemens Altair Grid Engine | 2025-11-11T00:00:00.000000Z | 2025-11-11T00:00:00.000000Z |
| icsa-25-317-15 | Siemens COMOS | 2025-11-11T00:00:00.000000Z | 2025-11-11T00:00:00.000000Z |
| icsa-25-317-14 | Siemens Solid Edge | 2025-11-11T00:00:00.000000Z | 2025-11-11T00:00:00.000000Z |
| icsa-25-317-13 | Siemens LOGO! 8 BM Devices | 2025-11-11T00:00:00.000000Z | 2025-11-11T00:00:00.000000Z |
| icsa-25-310-03 | ABB FLXeon Controllers | 2025-11-06T07:00:00.000000Z | 2025-11-06T07:00:00.000000Z |
| icsa-25-310-02 | Ubia Ubox (Update A) | 2025-11-06T07:00:00.000000Z | 2026-02-03T07:00:00.000000Z |
| icsa-25-310-01 | Advantech DeviceOn/iEdge | 2025-11-06T07:00:00.000000Z | 2025-11-06T07:00:00.000000Z |
| icsa-25-308-05 | IDIS ICM Viewer | 2025-11-04T07:00:00.000000Z | 2025-11-04T07:00:00.000000Z |
| icsa-25-308-04 | Radiometrics VizAir | 2025-11-04T07:00:00.000000Z | 2025-11-04T07:00:00.000000Z |
| icsa-25-308-03 | Delta Electronics CNCSoft-G2 | 2025-11-04T07:00:00.000000Z | 2025-11-04T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-sna-apiacv-4b6x5ysw | Cisco Secure Network Analytics Manager API Authorization Vulnerability | 2025-05-21T16:00:00+00:00 | 2025-05-21T16:00:00+00:00 |
| cisco-sa-ise-stored-xss-yff54m73 | Cisco Identity Services Stored Cross-Site Scripting Vulnerability | 2025-05-21T16:00:00+00:00 | 2025-06-30T15:08:59+00:00 |
| cisco-sa-ise-restart-ss-uf986g2q | Cisco Identity Services Engine RADIUS Denial of Service Vulnerability | 2025-05-21T16:00:00+00:00 | 2025-05-21T16:00:00+00:00 |
| cisco-sa-duo-ssp-cmd-inj-rcmyrna | Cisco Duo Self-Service Portal Command Injection Vulnerability | 2025-05-21T16:00:00+00:00 | 2025-05-21T16:00:00+00:00 |
| cisco-sa-cuis-priv-esc-3pk96su4 | Cisco Unified Intelligence Center Privilege Escalation Vulnerabilities | 2025-05-21T16:00:00+00:00 | 2025-05-21T16:00:00+00:00 |
| cisco-sa-cucm-kkhzbhr5 | Cisco Unified Communications Products Privilege Escalation Vulnerability | 2025-05-21T16:00:00+00:00 | 2025-05-21T16:00:00+00:00 |
| cisco-sa-contcent-insuffacces-ardovhn8 | Cisco Unified Contact Center Enterprise Cloud Connect Insufficient Access Control Vulnerability | 2025-05-21T16:00:00+00:00 | 2025-05-21T16:00:00+00:00 |
| cisco-sa-wlc-wncd-p6gvt6hl | Cisco IOS XE Software for WLC Wireless IPv6 Clients Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-wlc-file-uplpd-rhzg9ufc | Cisco IOS XE Wireless Controller Software Arbitrary File Upload Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-06-06T20:02:48+00:00 |
| cisco-sa-webui-multi-arnhm4v6 | Cisco IOS XE Software Web-Based Management Interface Vulnerabilities | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-gvn3oknc | Cisco IOS XE Software Web-Based Management Interface Command Injection Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-vmanage-xss-xhn8m5jt | Cisco Catalyst SD-WAN Manager Stored Cross-Site Scripting Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-vmanage-html-inj-gxvtk6zj | Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-twamp-kv4fhugn | Cisco IOS, IOS XE, and IOS XR Software TWAMP Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-snmpv3-qkeyvzsy | Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-snmp-bypass-hhuvujdn | Cisco IOS XE SD-WAN Software Packet Filtering Bypass Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-09-22T14:12:28+00:00 |
| cisco-sa-sisf-dos-zgwt4ddy | Multiple Cisco Products Switch Integrated Security Features DHCPv6 Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-sdwanarbfile-2zkhkzwj | Cisco Catalyst SD-WAN Manager Arbitrary File Creation Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-14T20:04:53+00:00 |
| cisco-sa-sdwan-priviesc-wck7bmmt | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-sdwan-fileoverwrite-uc9txwh | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-08T15:55:57+00:00 |
| cisco-sa-netconf-nacm-bypass-tgzv9pmq | Cisco IOS XE Software Model-Driven Programmability Authorization Bypass Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-multiprod-ikev2-dos-gpctuqv2 | Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-ipsgacl-pg6qfzk | Cisco IOS Software on Cisco Catalyst 1000 and 2960L Switches Access Control List Bypass Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-iox-dos-95fqnf7b | Cisco IOx Application Hosting Environment Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-iosxe-privesc-su7scvdp | Cisco IOS XE Software Privilege Escalation Vulnerabilities | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-iosxe-ikev1-dos-xhk3hzfc | Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-iosxe-dhcpsn-dos-xbn8mtks | Cisco IOS XE Software DHCP Snooping Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-ios-http-privesc-wcrd5e3 | Cisco IOS Software Industrial Ethernet Switch Device Manager Privilege Escalation Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-ewlc-user-del-hqxmpudj | Cisco IOS XE Wireless Controller Software Unauthorized User Deletion Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-ewlc-cdp-dos-fpeks9k | Cisco IOS XE Wireless Controller Software Cisco Discovery Protocol Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-21508 | Windows Storage Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21261 | Microsoft Excel Information Disclosure Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21260 | Microsoft Outlook Spoofing Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21259 | Microsoft Excel Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21258 | Microsoft Excel Information Disclosure Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21257 | GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-03-13T07:00:00.000Z |
| msrc_cve-2026-21256 | GitHub Copilot and Visual Studio Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-03-13T07:00:00.000Z |
| msrc_cve-2026-21255 | Windows Hyper-V Security Feature Bypass Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21253 | Mailslot File System Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21251 | Cluster Client Failover (CCF) Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21250 | Windows HTTP.sys Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21249 | Windows NTLM Spoofing Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21248 | Windows Hyper-V Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21247 | Windows Hyper-V Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21246 | Windows Graphics Component Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21245 | Windows Kernel Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21244 | Windows Hyper-V Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21243 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21242 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21241 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21240 | Windows HTTP.sys Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21239 | Windows Kernel Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21238 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21237 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21236 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21235 | Windows Graphics Component Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21232 | Windows HTTP.sys Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21229 | Power BI Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0353 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-11-04T15:03:48.630084Z | 2025-11-04T15:03:48.630084Z |
| ncsc-2025-0352 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2025-11-04T12:53:15.358078Z | 2025-11-04T12:53:15.358078Z |
| ncsc-2025-0351 | Kwetsbaarheden verholpen in Apple MacOS | 2025-11-04T12:44:25.439757Z | 2025-11-04T12:44:25.439757Z |
| ncsc-2025-0350 | Kwetsbaarheid verholpen in CFMOTO Ride voertuigdatabeheer systemen | 2025-11-04T10:27:59.187171Z | 2025-11-04T10:27:59.187171Z |
| ncsc-2025-0349 | Kwetsbaarheden verholpen in Nagios XI | 2025-11-03T08:27:42.052256Z | 2025-11-03T08:27:42.052256Z |
| ncsc-2025-0348 | Kwetsbaarheden verholpen in Arista Networks producten | 2025-11-03T08:26:39.905306Z | 2025-11-03T08:26:39.905306Z |
| ncsc-2025-0347 | Kwetsbaarheden verholpen in IBM QRadar SIEM | 2025-11-03T08:17:18.981494Z | 2025-11-03T08:17:18.981494Z |
| ncsc-2025-0346 | Kwetsbaarheid verholpen in Progress MOVEit Transfer | 2025-11-03T08:14:02.972842Z | 2025-11-03T08:14:02.972842Z |
| ncsc-2025-0345 | Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk | 2025-10-31T09:35:00.469498Z | 2025-10-31T09:35:00.469498Z |
| ncsc-2025-0344 | Kwetsbaarheden verholpen in Rockwell Automation COMMS | 2025-10-31T09:34:05.069339Z | 2025-10-31T09:34:05.069339Z |
| ncsc-2025-0343 | Kwetsbaarheid verholpen in Mozilla Firefox | 2025-10-31T09:31:53.270725Z | 2025-10-31T09:31:53.270725Z |
| ncsc-2025-0342 | Kwetsbaarheden verholpen in GitLab Enterprise en Community Edition | 2025-10-27T08:08:17.974767Z | 2025-10-27T09:38:47.073257Z |
| ncsc-2025-0341 | Kwetsbaarheden verholpen in BIND 9 | 2025-10-24T08:19:45.232307Z | 2025-10-27T08:24:03.796638Z |
| ncsc-2025-0340 | Kwetsbaarheden verholpen in Oracle PeopleSoft | 2025-10-23T14:13:39.969386Z | 2025-10-23T14:13:39.969386Z |
| ncsc-2025-0339 | Kwetsbaarheden verholpen in Oracle MySQL | 2025-10-23T14:11:30.111892Z | 2025-10-23T14:11:30.111892Z |
| ncsc-2025-0338 | Kwetsbaarheden verholpen in Oracle JD Edwards EnterpriseOne Tools | 2025-10-23T13:53:27.268400Z | 2025-10-23T13:53:27.268400Z |
| ncsc-2025-0337 | Kwetsbaarheden verholpen in Oracle Java | 2025-10-23T13:51:40.686406Z | 2025-10-23T13:51:40.686406Z |
| ncsc-2025-0336 | Kwetsbaarheden verholpen in Oracle Hyperion | 2025-10-23T13:49:44.344049Z | 2025-10-23T13:49:44.344049Z |
| ncsc-2025-0335 | Kwetsbaarheden verholpen in Oracle Analytics | 2025-10-23T13:45:06.747933Z | 2025-10-23T13:45:06.747933Z |
| ncsc-2025-0334 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2025-10-23T13:42:11.992643Z | 2025-11-21T16:03:18.991100Z |
| ncsc-2025-0333 | Kwetsbaarheden verholpen in Oracle Financial Services | 2025-10-23T13:35:32.902231Z | 2025-10-23T13:35:32.902231Z |
| ncsc-2025-0332 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2025-10-23T13:26:49.210414Z | 2025-10-23T13:26:49.210414Z |
| ncsc-2025-0331 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2025-10-23T13:23:20.471568Z | 2025-10-23T13:23:20.471568Z |
| ncsc-2025-0330 | Kwetsbaarheden verholpen in Oracle Communications producten | 2025-10-23T13:20:15.363063Z | 2025-10-23T13:20:15.363063Z |
| ncsc-2025-0329 | Kwetsbaarheden verholpen in Oracle Commerce | 2025-10-23T07:20:51.213314Z | 2025-10-23T07:20:51.213314Z |
| ncsc-2025-0328 | Kwetsbaarheden verholpen in Oracle Database producten | 2025-10-23T07:19:57.652532Z | 2025-10-23T07:19:57.652532Z |
| ncsc-2025-0327 | Kwetsbaarheden verholpen in Zohocorp's ManageEngine | 2025-10-23T07:18:47.274781Z | 2025-10-23T07:18:47.274781Z |
| ncsc-2025-0326 | Kwetsbaarheden verholpen in Moxa’s netwerkbeveiligingsapparaten | 2025-10-20T13:03:34.436477Z | 2025-10-20T13:03:34.436477Z |
| ncsc-2025-0325 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2025-10-20T12:59:06.729067Z | 2025-10-20T12:59:06.729067Z |
| ncsc-2025-0324 | Kwetsbaarheid verholpen in FortiOS | 2025-10-17T08:42:51.624827Z | 2025-10-17T08:42:51.624827Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10182-1 | snpguest-0.10.0-2.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10181-1 | sccache-0.13.0~1-2.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10180-1 | rustup-1.28.2~0-3.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10179-1 | python311-maturin-1.11.5-1.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10178-1 | libmunge2-0.5.18-1.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10177-1 | gnutls-3.8.12-1.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10176-1 | freerdp2-2.11.7-4.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10175-1 | cargo-audit-0.22.1~git0.efcde93-2.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10174-1 | assimp-devel-6.0.4-1.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:10173-1 | apptainer-1.4.5-2.1 on GA media | 2026-02-11T00:00:00Z | 2026-02-11T00:00:00Z |
| opensuse-su-2026:20193-1 | Security update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc | 2026-02-10T22:29:40Z | 2026-02-10T22:29:40Z |
| opensuse-su-2026:20191-1 | Security update for trivy | 2026-02-10T21:52:10Z | 2026-02-10T21:52:10Z |
| opensuse-su-2026:20192-1 | Security update for tailscale | 2026-02-10T21:45:05Z | 2026-02-10T21:45:05Z |
| opensuse-su-2026:10172-1 | wicked2nm-1.4.1-1.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10171-1 | lemon-3.51.2-1.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10170-1 | keylime-ima-policy-0.2.8+116-1.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10169-1 | libp11-kit0-0.26.2-1.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10168-1 | openQA-5.1770718745.ce2072d3-1.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10167-1 | libxml2-16-2.14.5-3.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10166-1 | libsoup-2_4-1-2.74.3-15.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10165-1 | keylime-config-7.14.0+0-1.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10164-1 | go1.25-1.25.7-1.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:10163-1 | go1.24-1.24.13-1.1 on GA media | 2026-02-10T00:00:00Z | 2026-02-10T00:00:00Z |
| opensuse-su-2026:20183-1 | Security update for chromium | 2026-02-07T14:42:36Z | 2026-02-07T14:42:36Z |
| opensuse-su-2026:20184-1 | Security update for python-Django | 2026-02-07T13:45:17Z | 2026-02-07T13:45:17Z |
| opensuse-su-2026:10162-1 | localsearch-3.10.2-2.1 on GA media | 2026-02-07T00:00:00Z | 2026-02-07T00:00:00Z |
| opensuse-su-2026:20186-1 | Security update for libsoup | 2026-02-06T11:13:48Z | 2026-02-06T11:13:48Z |
| opensuse-su-2026:20185-1 | Security update for cockpit-packages | 2026-02-06T09:31:50Z | 2026-02-06T09:31:50Z |
| opensuse-su-2026:20182-1 | Security update for cockpit | 2026-02-06T03:08:03Z | 2026-02-06T03:08:03Z |
| opensuse-su-2026:20181-1 | Security update for cockpit-subscriptions | 2026-02-06T02:48:38Z | 2026-02-06T02:48:38Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:3971 | Red Hat Security Advisory: rhc-worker-playbook security update | 2026-03-09T01:33:17+00:00 | 2026-03-14T06:36:56+00:00 |
| rhsa-2026:3973 | Red Hat Security Advisory: git-lfs security update | 2026-03-09T01:30:22+00:00 | 2026-03-14T06:36:56+00:00 |
| rhsa-2026:3970 | Red Hat Security Advisory: rhc-worker-playbook security update | 2026-03-09T01:29:32+00:00 | 2026-03-14T06:36:56+00:00 |
| rhsa-2026:3966 | Red Hat Security Advisory: kernel security update | 2026-03-09T01:03:42+00:00 | 2026-03-13T18:12:48+00:00 |
| rhsa-2026:3963 | Red Hat Security Advisory: kernel security update | 2026-03-09T00:51:57+00:00 | 2026-03-11T09:33:56+00:00 |
| rhsa-2026:3964 | Red Hat Security Advisory: kernel-rt security update | 2026-03-09T00:23:12+00:00 | 2026-03-11T09:33:48+00:00 |
| rhsa-2026:3959 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2026-03-06T16:36:31+00:00 | 2026-03-14T00:38:15+00:00 |
| rhsa-2026:3962 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2026-03-06T13:33:22+00:00 | 2026-03-12T13:44:52+00:00 |
| rhsa-2026:3960 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update | 2026-03-06T11:24:38+00:00 | 2026-03-14T06:36:56+00:00 |
| rhsa-2026:3958 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update | 2026-03-06T11:00:27+00:00 | 2026-03-14T00:38:15+00:00 |
| rhsa-2026:3941 | Red Hat Security Advisory: nfs-utils security update | 2026-03-06T08:17:05+00:00 | 2026-03-06T14:11:26+00:00 |
| rhsa-2026:3939 | Red Hat Security Advisory: nfs-utils security update | 2026-03-06T08:09:49+00:00 | 2026-03-06T14:18:43+00:00 |
| rhsa-2026:3942 | Red Hat Security Advisory: nfs-utils security update | 2026-03-06T08:05:30+00:00 | 2026-03-06T14:18:47+00:00 |
| rhsa-2026:3957 | Red Hat Security Advisory: Red Hat AMQ Broker 7.13.4 release and security update | 2026-03-06T06:15:07+00:00 | 2026-03-13T18:23:43+00:00 |
| rhsa-2026:3955 | Red Hat Security Advisory: Red Hat AMQ Broker 7.12.6 release and security update | 2026-03-05T21:59:31+00:00 | 2026-03-13T18:23:43+00:00 |
| rhsa-2026:3951 | Red Hat Security Advisory: JBoss EAP XP 5.0 Update 4.0 release. See references for release notes. | 2026-03-05T20:00:33+00:00 | 2026-03-11T04:47:28+00:00 |
| rhsa-2026:3940 | Red Hat Security Advisory: nfs-utils security update | 2026-03-05T19:12:37+00:00 | 2026-03-06T14:11:25+00:00 |
| rhsa-2026:3948 | Red Hat Security Advisory: Red Hat build of Keycloak 26.4.10 Images Update | 2026-03-05T19:09:49+00:00 | 2026-03-10T18:48:38+00:00 |
| rhsa-2026:3947 | Red Hat Security Advisory: Red Hat build of Keycloak 26.4.10 Update | 2026-03-05T19:07:56+00:00 | 2026-03-10T18:48:36+00:00 |
| rhsa-2026:3938 | Red Hat Security Advisory: nfs-utils security update | 2026-03-05T19:05:37+00:00 | 2026-03-06T14:11:23+00:00 |
| rhsa-2026:3929 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T17:28:44+00:00 | 2026-03-14T06:36:54+00:00 |
| rhsa-2026:3930 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T17:14:14+00:00 | 2026-03-14T06:36:55+00:00 |
| rhsa-2026:3928 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T16:42:20+00:00 | 2026-03-14T06:36:54+00:00 |
| rhsa-2026:3931 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T16:12:11+00:00 | 2026-03-14T06:36:55+00:00 |
| rhsa-2026:3932 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T16:08:17+00:00 | 2026-03-14T06:36:55+00:00 |
| rhsa-2026:3925 | Red Hat Security Advisory: Red Hat build of Keycloak 26.2.14 Images Update | 2026-03-05T15:35:42+00:00 | 2026-03-10T15:07:36+00:00 |
| rhsa-2026:3926 | Red Hat Security Advisory: Red Hat build of Keycloak 26.2.14 Update | 2026-03-05T15:33:39+00:00 | 2026-03-10T15:07:36+00:00 |
| rhsa-2026:3896 | Red Hat Security Advisory: postgresql:15 security update | 2026-03-05T14:46:07+00:00 | 2026-03-13T00:37:39+00:00 |
| rhsa-2026:3900 | Red Hat Security Advisory: python3.12 security update | 2026-03-05T14:44:37+00:00 | 2026-03-10T14:56:08+00:00 |
| rhsa-2026:3897 | Red Hat Security Advisory: python3.12 security update | 2026-03-05T14:43:18+00:00 | 2026-03-10T14:56:08+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| sevd-2022-165-04 | Data Center Expert | 2022-06-14T18:30:00.000Z | 2022-06-14T18:30:00.000Z |
| sevd-2022-165-03 | Conext™ Combox | 2022-06-14T18:30:00.000Z | 2022-06-14T18:30:00.000Z |
| sevd-2022-165-02 | Geo SCADA Mobile | 2022-06-14T18:30:00.000Z | 2022-06-14T18:30:00.000Z |
| sevd-2022-165-01 | IGSS (Interactive Graphical SCADA System) | 2022-06-14T18:30:00.000Z | 2023-03-13T18:30:00.000Z |
| sevd-2022-130-03 | Wiser Smart | 2022-05-10T00:00:00.00Z | 2022-05-10T00:00:00.00Z |
| sevd-2022-130-02 | Saitel DP RTU | 2022-05-10T00:00:00.00Z | 2022-05-10T00:00:00.00Z |
| sevd-2022-130-01 | PowerLogic ION Setup | 2022-05-10T00:00:00.00Z | 2022-05-10T00:00:00.00Z |
| sevd-2022-102-01 | IGSS (Interactive Graphical SCADA System) | 2022-04-12T08:47:25.000Z | 2022-07-12T08:47:25.000Z |
| sevd-2022-102-02 | Modicon M340 Controller and Communication Modules | 2022-04-12T00:00:00.000Z | 2024-10-08T00:00:00.000Z |
| sevd-2022-087-01 | SCADAPack Workbench | 2022-03-28T13:51:11.000Z | 2023-04-11T13:51:11.000Z |
| sevd-2022-067-01 | EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70 | 2022-03-08T18:30:00.000Z | 2022-06-14T18:30:00.000Z |
| sevd-2022-067-03 | Ritto Wiser™ Door | 2022-03-08T10:12:35.000Z | 2022-03-08T10:12:35.000Z |
| sevd-2022-067-02 | APC Smart-UPS SMT, SMC, SMX, SCL, SRC, XU, XP, CSH2, SURTD, SMTL, SRT, and select SRTL Series | 2022-03-08T06:30:00.000Z | 2022-06-16T18:30:00.000Z |
| sevd-2022-039-06 | Harmony/Magelis iPC Series HMI, Vijeo Designer and Vijeo Designer Basic | 2022-02-08T23:25:23.000Z | 2022-02-08T23:25:23.000Z |
| sevd-2022-039-04 | spaceLYnk, Wiser For KNX, fellerLYnk | 2022-02-08T20:32:52.000Z | 2022-03-08T20:32:52.000Z |
| sevd-2022-039-03 | Easergy P40 | 2022-02-08T17:58:55.000Z | 2022-02-08T17:58:55.000Z |
| sevd-2022-039-05 | EcoStruxure Geo SCADA Expert | 2022-02-08T17:33:44.000Z | 2022-02-08T17:33:44.000Z |
| sevd-2022-039-02 | EcoStruxure EV Charging Expert | 2022-02-08T12:36:59.000Z | 2022-02-08T12:36:59.000Z |
| sevd-2022-039-01 | IGSS (Interactive Graphical SCADA System) | 2022-02-08T07:29:58.000Z | 2022-02-08T07:29:58.000Z |
| sevd-2022-011-07 | EcoStruxure™ Power Monitoring Expert | 2022-01-11T13:20:28.000Z | 2022-01-11T13:20:28.000Z |
| sevd-2022-011-05 | ConneXium Tofino Firewall and Loadable Security Modules | 2022-01-11T12:53:54.000Z | 2022-01-11T12:53:54.000Z |
| sevd-2022-011-04 | Easergy P3 | 2022-01-11T11:28:56.000Z | 2022-01-11T11:28:56.000Z |
| sevd-2022-011-03 | Easergy P5 | 2022-01-11T11:05:25.000Z | 2022-03-02T11:05:25.000Z |
| sevd-2022-011-02 | Easergy T300 | 2022-01-11T10:48:02.000Z | 2022-01-11T10:48:02.000Z |
| sevd-2022-011-01 | Ethernet and Web server on Modicon M340 controller and Communication Modules | 2022-01-11T07:53:07.000Z | 2022-01-11T07:53:07.000Z |
| sevd-2022-011-06 | CODESYS V3 Runtime, Development System, and Gateway Vulnerabilities | 2022-01-11T07:08:13.000Z | 2023-04-11T11:30:00.000Z |
| sevd-2021-348-04 | APC by Schneider Electric Rack PDU | 2021-12-14T00:00:00.000Z | 2021-12-21T00:00:00.000Z |
| sevd-2021-348-02 | EVlink City / Parking / Smart Wallbox Charging Stations | 2021-12-14T00:00:00.000Z | 2021-12-14T00:00:00.000Z |
| sevd-2021-348-01 | IGSS (Interactive Graphical SCADA System) | 2021-12-14T00:00:00.000Z | 2021-12-14T00:00:00.000Z |
| sesb-2021-347-01 | Apache Log4j Vulnerabilities (Log4Shell) | 2021-12-13T09:22:58.000Z | 2022-08-09T09:22:58.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-246355 | SSA-246355: Multiple Vulnerabilities in Tableau Server Component of Opcenter Intelligence | 2025-02-11T00:00:00Z | 2025-02-14T00:00:00Z |
| ssa-224824 | SSA-224824: Denial of Service Vulnerabilities in SIMATIC S7-1200 CPU Family Before V4.7 | 2025-02-11T00:00:00Z | 2025-02-11T00:00:00Z |
| ssa-195895 | SSA-195895: User Enumeration Vulnerability in the Webserver of SIMATIC Products | 2025-02-11T00:00:00Z | 2025-04-08T00:00:00Z |
| ssa-111547 | SSA-111547: Cleartext Storage of Sensitive Information Vulnerability in SIPROTEC 5 | 2025-02-11T00:00:00Z | 2025-02-11T00:00:00Z |
| ssa-717113 | SSA-717113: Cross-Site Request Forgery (CSRF) Vulnerability in SIMATIC S7-1200 CPUs before V4.7 | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-416411 | SSA-416411: Cross-Site Scripting Vulnerability in Industrial Edge Management | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-404759 | SSA-404759: Information Disclosure Vulnerability in Siveillance Video Camera Drivers | 2025-01-14T00:00:00Z | 2025-01-15T00:00:00Z |
| ssa-314390 | SSA-314390: LDAP Injection Vulnerability in Mendix LDAP Module | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-194557 | SSA-194557: Improper Limitation of Filesystem Access through Web Server Vulnerability in SIPROTEC 5 | 2025-01-14T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-928984 | SSA-928984: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) | 2024-12-16T00:00:00Z | 2026-01-13T00:00:00Z |
| ssa-979056 | SSA-979056: Out of Bounds Write Vulnerability in Parasolid | 2024-12-10T00:00:00Z | 2024-12-12T00:00:00Z |
| ssa-881356 | SSA-881356: Multiple Memory Corruption Vulnerabilities in Simcenter Femap | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-800126 | SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20 | 2024-12-10T00:00:00Z | 2025-12-09T00:00:00Z |
| ssa-730188 | SSA-730188: Multiple File Parsing Vulnerabilities in Solid Edge V2024 | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-701627 | SSA-701627: XXE Injection Vulnerabilities in COMOS | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-645131 | SSA-645131: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-620799 | SSA-620799: Denial of Service Vulnerability During BLE Pairing in SENTRON Powercenter 1000/1100 | 2024-12-10T00:00:00Z | 2025-06-10T00:00:00Z |
| ssa-392859 | SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20 | 2024-12-10T00:00:00Z | 2025-12-09T00:00:00Z |
| ssa-384652 | SSA-384652: Cross-Site Request Forgery (CSRF) Vulnerability in RUGGEDCOM ROX II | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-128393 | SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050 | 2024-12-10T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-354569 | SSA-354569: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices | 2024-11-22T00:00:00Z | 2025-06-10T00:00:00Z |
| ssa-824503 | SSA-824503: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation Before V2302.0018 and V2404.0007 | 2024-11-18T00:00:00Z | 2024-11-18T00:00:00Z |
| ssa-472448 | SSA-472448: Security Bypass Vulnerability in the SQL Client-Server Communication in Siveillance Video | 2024-11-13T00:00:00Z | 2024-11-13T00:00:00Z |
| ssa-915275 | SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-914892 | SSA-914892: Race Condition Vulnerability in Basic Authentication Implementation of Mendix Runtime | 2024-11-12T00:00:00Z | 2025-08-12T00:00:00Z |
| ssa-871035 | SSA-871035: Session-Memory Deserialization Vulnerability in Siemens Engineering Platforms Before V19 | 2024-11-12T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-654798 | SSA-654798: Incorrect Authorization Vulnerability in SIMATIC CP 1543-1 Devices | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-616032 | SSA-616032: Local Privilege Escalation Vulnerability in Spectrum Power 7 Before V24Q3 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-454789 | SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-354112 | SSA-354112: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.2 | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0528-1 | Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) | 2026-02-15T06:33:50Z | 2026-02-15T06:33:50Z |
| suse-su-2026:0533-1 | Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4) | 2026-02-15T06:33:38Z | 2026-02-15T06:33:38Z |
| suse-su-2026:0526-1 | Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4) | 2026-02-14T19:33:43Z | 2026-02-14T19:33:43Z |
| suse-su-2026:0525-1 | Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5) | 2026-02-14T17:04:03Z | 2026-02-14T17:04:03Z |
| suse-su-2026:0524-1 | Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) | 2026-02-14T17:03:57Z | 2026-02-14T17:03:57Z |
| suse-su-2026:0514-1 | Security update for cargo-auditable | 2026-02-13T14:57:18Z | 2026-02-13T14:57:18Z |
| suse-su-2026:0510-1 | Security update for util-linux | 2026-02-13T14:52:46Z | 2026-02-13T14:52:46Z |
| suse-su-2026:0508-1 | Security update for curl | 2026-02-13T14:50:33Z | 2026-02-13T14:50:33Z |
| suse-su-2026:0506-1 | Security update for cargo-auditable | 2026-02-13T14:32:17Z | 2026-02-13T14:32:17Z |
| suse-su-2026:0505-1 | Security update for cargo-auditable | 2026-02-13T14:31:50Z | 2026-02-13T14:31:50Z |
| suse-su-2026:0504-1 | Security update for java-1_8_0-openjdk | 2026-02-13T14:24:00Z | 2026-02-13T14:24:00Z |
| suse-su-2026:0503-1 | Security update for ImageMagick | 2026-02-13T14:23:00Z | 2026-02-13T14:23:00Z |
| suse-su-2026:0480-1 | Security update for helm | 2026-02-12T15:35:07Z | 2026-02-12T15:35:07Z |
| suse-su-2026:0479-1 | Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container, virt-synchronization-controller-container | 2026-02-12T15:34:08Z | 2026-02-12T15:34:08Z |
| suse-su-2026:0450-1 | Security update for munge | 2026-02-11T15:46:23Z | 2026-02-11T15:46:23Z |
| suse-su-2026:0449-1 | Security update for freerdp2 | 2026-02-11T14:53:55Z | 2026-02-11T14:53:55Z |
| suse-su-2026:0448-1 | Security update for munge | 2026-02-11T14:51:56Z | 2026-02-11T14:51:56Z |
| suse-su-2026:0447-1 | Security update for the Linux Kernel | 2026-02-11T14:05:07Z | 2026-02-11T14:05:07Z |
| suse-su-2026:0421-1 | Security update for freerdp | 2026-02-10T15:28:56Z | 2026-02-10T15:28:56Z |
| suse-su-2026:0420-1 | Security update for python-pip | 2026-02-10T14:18:13Z | 2026-02-10T14:18:13Z |
| suse-su-2026:0419-1 | Security update for libsoup2 | 2026-02-10T14:15:53Z | 2026-02-10T14:15:53Z |
| suse-su-2026:0418-1 | Security update for libsoup2 | 2026-02-10T14:15:42Z | 2026-02-10T14:15:42Z |
| suse-su-2026:0417-1 | Security update for freerdp | 2026-02-10T14:14:15Z | 2026-02-10T14:14:15Z |
| suse-su-2026:0415-1 | Security update for java-17-openjdk | 2026-02-10T08:35:23Z | 2026-02-10T08:35:23Z |
| suse-su-2026:0414-1 | Security update for java-11-openjdk | 2026-02-10T08:33:15Z | 2026-02-10T08:33:15Z |
| suse-su-2026:0412-1 | Security update for abseil-cpp | 2026-02-10T06:43:35Z | 2026-02-10T06:43:35Z |
| suse-su-2026:0411-1 | Security update for the Linux Kernel | 2026-02-09T14:51:43Z | 2026-02-09T14:51:43Z |
| suse-su-2026:0399-1 | Security update for kubernetes-old | 2026-02-06T12:06:39Z | 2026-02-06T12:06:39Z |
| suse-su-2026:0397-1 | Security update for cockpit-machines | 2026-02-06T08:02:32Z | 2026-02-06T08:02:32Z |
| suse-su-2026:0396-1 | Security update for cockpit-machines | 2026-02-06T08:02:20Z | 2026-02-06T08:02:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2026:1617 | Moderate: kernel security update | 2026-02-02T00:00:00Z | 2026-02-06T08:24:53Z |
| alsa-2026:1597 | Moderate: iperf3 security update | 2026-01-29T00:00:00Z | 2026-02-02T10:00:47Z |
| alsa-2026:1595 | Moderate: iperf3 security update | 2026-01-29T00:00:00Z | 2026-02-02T10:01:50Z |
| alsa-2026:1592 | Moderate: iperf3 security update | 2026-01-29T00:00:00Z | 2026-02-02T11:56:57Z |
| alsa-2026:1574 | Important: gimp:2.8 security update | 2026-01-29T00:00:00Z | 2026-01-29T14:07:36Z |
| alsa-2026:1518 | Important: grafana-pcp security update | 2026-01-28T00:00:00Z | 2026-01-29T12:32:40Z |
| alsa-2026:1478 | Moderate: python3.9 security update | 2026-01-28T00:00:00Z | 2026-01-28T19:56:37Z |
| alsa-2026:1473 | Important: openssl security update | 2026-01-28T00:00:00Z | 2026-02-02T11:12:21Z |
| alsa-2026:1472 | Important: openssl security update | 2026-01-28T00:00:00Z | 2026-01-28T19:58:47Z |
| alsa-2026:1429 | Important: php:8.3 security update | 2026-01-27T00:00:00Z | 2026-01-29T11:59:57Z |
| alsa-2026:1412 | Important: php:8.2 security update | 2026-01-27T00:00:00Z | 2026-02-02T11:16:18Z |
| alsa-2026:1410 | Moderate: python3.11 security update | 2026-01-27T00:00:00Z | 2026-01-29T12:02:18Z |
| alsa-2026:1409 | Important: php:8.2 security update | 2026-01-27T00:00:00Z | 2026-02-02T11:20:21Z |
| alsa-2026:1408 | Moderate: python3.12 security update | 2026-01-27T00:00:00Z | 2026-01-29T12:05:44Z |
| alsa-2026:1381 | Moderate: osbuild-composer security update | 2026-01-27T00:00:00Z | 2026-02-02T11:22:03Z |
| alsa-2026:1380 | Moderate: osbuild-composer security update | 2026-01-27T00:00:00Z | 2026-01-29T12:07:35Z |
| alsa-2026:1377 | Moderate: image-builder security update | 2026-01-27T00:00:00Z | 2026-02-12T10:36:07Z |
| alsa-2026:1374 | Moderate: python3.11 security update | 2026-01-27T00:00:00Z | 2026-01-29T12:10:37Z |
| alsa-2026:1359 | Moderate: gcc-toolset-15-binutils security update | 2026-01-27T00:00:00Z | 2026-02-02T11:23:42Z |
| alsa-2026:1350 | Moderate: curl security update | 2026-01-27T00:00:00Z | 2026-01-29T12:31:06Z |
| alsa-2026:1344 | Important: grafana security update | 2026-01-27T00:00:00Z | 2026-01-29T12:12:24Z |
| alsa-2026:1334 | Moderate: glibc security update | 2026-01-27T00:00:00Z | 2026-01-29T12:29:45Z |
| alsa-2026:1254 | Important: python-urllib3 security update | 2026-01-26T00:00:00Z | 2026-01-29T12:14:07Z |
| alsa-2026:1239 | Important: fence-agents security update | 2026-01-26T00:00:00Z | 2026-02-02T11:30:59Z |
| alsa-2026:1226 | Important: python3.12-urllib3 security update | 2026-01-26T00:00:00Z | 2026-01-27T08:21:23Z |
| alsa-2026:1224 | Important: python3.11-urllib3 security update | 2026-01-26T00:00:00Z | 2026-01-27T08:28:50Z |
| alsa-2026:1178 | Moderate: kernel security update | 2026-01-26T00:00:00Z | 2026-02-02T11:36:10Z |
| alsa-2026:1148 | Important: kernel-rt security update | 2026-01-26T00:00:00Z | 2026-01-26T13:52:56Z |
| alsa-2026:1143 | Important: kernel security update | 2026-01-26T00:00:00Z | 2026-01-30T09:51:59Z |
| alsa-2026:1142 | Important: kernel security update | 2026-01-26T00:00:00Z | 2026-01-26T13:49:21Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2025-500 | UNKNOWN READ in getUShort | 2025-06-29T00:08:49.553890Z | 2025-06-29T00:08:49.554520Z |
| osv-2025-491 | Heap-buffer-overflow in libssl.soNUMBER | 2025-06-27T00:16:09.822144Z | 2025-06-27T00:16:09.822510Z |
| osv-2025-486 | Bad-cast to cv::PngDecoder from invalid vptr | 2025-06-24T00:16:24.786334Z | 2025-06-24T00:16:24.786690Z |
| osv-2025-485 | Use-of-uninitialized-value in pcpp::IDnsResource::decodeName | 2025-06-24T00:11:04.762139Z | 2025-06-24T00:11:04.762681Z |
| osv-2025-484 | Heap-buffer-overflow in load_protocols_file_fd | 2025-06-23T00:14:46.656195Z | 2025-06-23T00:14:46.656704Z |
| osv-2025-481 | Stack-buffer-overflow in void glz::from<10000u, int>::op<glz::opts_csv{10000u, | 2025-06-20T00:15:46.185029Z | 2025-06-20T00:15:46.185445Z |
| osv-2025-480 | Stack-buffer-overflow in void glz::from<10000u, std::__1::__bit_reference<std::__1::vector<bool, std::__1 | 2025-06-20T00:14:17.007847Z | 2025-06-20T00:14:17.008310Z |
| osv-2025-469 | Use-of-uninitialized-value in ndpi_strdup | 2025-06-16T00:17:21.776120Z | 2025-06-16T00:17:21.776520Z |
| osv-2025-465 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-15T00:09:20.387117Z | 2025-06-15T00:09:20.387490Z |
| osv-2025-461 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-14T00:10:49.391511Z | 2025-06-14T00:10:49.391787Z |
| osv-2025-457 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-14T00:04:11.416575Z | 2025-06-14T00:04:11.417116Z |
| osv-2025-456 | Use-of-uninitialized-value in ppd_hash_option | 2025-06-12T00:10:52.355312Z | 2025-06-12T00:10:52.355684Z |
| osv-2025-454 | Use-of-uninitialized-value in _cups_strcasecmp | 2025-06-11T00:12:12.952969Z | 2025-06-11T00:12:12.953357Z |
| osv-2025-449 | Heap-buffer-overflow in check_content_type_and_change_protocol | 2025-06-10T00:16:50.624468Z | 2025-06-10T00:16:50.624907Z |
| osv-2025-447 | Use-of-uninitialized-value in spvtools::EmitNumericLiteral | 2025-06-09T00:05:11.128452Z | 2025-09-24T14:18:33.220549Z |
| osv-2024-1446 | Segv on unknown address in glslang::TIntermediate::addSymbol | 2025-06-06T00:12:59.981959Z | 2025-06-06T00:12:59.982286Z |
| osv-2025-442 | Security exception in org.jsoup.parser.HtmlTreeBuilder.process | 2025-06-06T00:12:40.427852Z | 2025-06-06T00:12:40.428189Z |
| osv-2025-437 | Heap-buffer-overflow in mmcall | 2025-06-05T00:18:59.402795Z | 2025-06-05T00:18:59.403189Z |
| osv-2025-436 | Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType | 2025-06-05T00:11:24.382209Z | 2025-06-05T00:11:24.382444Z |
| osv-2025-433 | Null-dereference READ in _libssh2_packet_add | 2025-06-05T00:02:57.199903Z | 2025-06-05T00:02:57.200566Z |
| osv-2025-424 | UNKNOWN READ in RDKit::RDValue::destroy | 2025-06-03T00:12:35.236863Z | 2025-09-24T14:19:44.921114Z |
| osv-2025-412 | UNKNOWN WRITE in luaL_newstate | 2025-05-28T00:06:09.320289Z | 2025-05-28T00:06:09.320970Z |
| osv-2025-408 | Heap-buffer-overflow in sav_parse_long_variable_names_record | 2025-05-27T00:12:59.401698Z | 2025-05-27T00:12:59.402180Z |
| osv-2025-406 | Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst | 2025-05-27T00:01:44.628210Z | 2025-05-27T00:01:44.628747Z |
| osv-2025-404 | Use-of-uninitialized-value in JS_FreeRuntime | 2025-05-23T00:14:00.218149Z | 2025-05-23T00:14:00.218494Z |
| osv-2025-401 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2025-05-23T00:07:37.622395Z | 2025-05-23T00:07:37.622817Z |
| osv-2025-396 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2025-05-22T00:16:08.210127Z | 2025-05-22T00:16:08.210510Z |
| osv-2025-384 | Segv on unknown address in rtpp_refcnt_decref | 2025-05-20T00:04:47.616424Z | 2025-05-20T00:04:47.617104Z |
| osv-2025-374 | Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry | 2025-05-17T00:16:26.661924Z | 2025-05-17T00:16:26.662355Z |
| osv-2025-373 | Heap-use-after-free in aiMesh::~aiMesh | 2025-05-17T00:11:17.621374Z | 2025-08-22T19:20:38.723565Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2025-0036 | surf is unmaintained | 2025-05-17T12:00:00Z | 2025-05-17T13:43:35Z |
| rustsec-2025-0113 | soundness issue and unmaintained | 2025-05-06T12:00:00Z | 2025-11-04T06:10:22Z |
| rustsec-2025-0064 | soundness issue and unmaintained | 2025-05-06T12:00:00Z | 2025-09-11T07:03:09Z |
| rustsec-2025-0039 | Lack of sufficient checks in public API | 2025-05-06T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0034 | soundness issue and unmaintained | 2025-05-06T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0027 | Panic in mp3-metadata due to the lack of bounds checking | 2025-04-28T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0025 | rustc-serialize is unmaintained | 2025-04-28T12:00:00Z | 2025-04-28T13:38:14Z |
| rustsec-2025-0063 | Possible unsound public API | 2025-04-25T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0038 | Out of bounds access in public safe API | 2025-04-24T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0031 | Unsound public API in unmaintained crate | 2025-04-24T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0035 | Multiple soundness issues in `macroquad` | 2025-04-23T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0024 | crossbeam-channel: double free on Drop | 2025-04-08T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0023 | Broadcast channel calls clone in parallel, but does not require `Sync` | 2025-04-07T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0022 | Use-After-Free in `Md::fetch` and `Cipher::fetch` | 2025-04-04T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0021 | SHA-1 collision attacks are not detected | 2025-04-03T12:00:00Z | 2025-04-08T07:10:04Z |
| rustsec-2025-0020 | Risk of buffer overflow in `PyString::from_object` | 2025-04-01T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0033 | Public API without sufficient bounds checking | 2025-03-27T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0032 | Safe API can cause heap-buffer-overflow | 2025-03-27T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0019 | `array-init-cursor` in version 0.2.0 and below is unsound when used with types that implement `Drop` | 2025-03-27T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0018 | Potential out-of-bounds read with a malformed ELF file and the HashTable API. | 2025-03-26T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0017 | The `trust-dns` project has been rebranded to `hickory-dns` | 2025-03-23T12:00:00Z | 2025-03-23T07:00:21Z |
| rustsec-2025-0016 | Use after free in `Parc` and `Prc` due to missing lifetime constraints | 2025-03-13T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0149 | World Writable Directory in /var/log/below Allows Local Privilege Escalation | 2025-03-12T12:00:00Z | 2026-02-08T07:26:28Z |
| rustsec-2025-0014 | humantime is unmaintained | 2025-03-08T12:00:00Z | 2025-03-13T00:41:50Z |
| rustsec-2025-0009 | Some AES functions may panic when overflow checking is enabled. | 2025-03-06T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0010 | Versions of *ring* prior to 0.17 are unmaintained. | 2025-03-05T12:00:00Z | 2025-03-07T15:46:47Z |
| rustsec-2025-0012 | `backoff` is unmaintained. | 2025-03-04T12:00:00Z | 2025-08-06T09:33:04Z |
| rustsec-2025-0011 | `openpgp-card-sequoia` is unmaintained. | 2025-03-04T12:00:00Z | 2025-03-07T15:47:21Z |
| rustsec-2025-0008 | Openh264 Decoding Functions Heap Overflow Vulnerability | 2025-02-24T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2025-0013 | resolve is unmaintained | 2025-02-21T12:00:00Z | 2025-03-07T15:52:15Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-grafana-2026-21722 | Public Dashboards time range restriction on annotations can be bypassed | 2026-02-20T08:41:29.411Z | 2026-03-02T09:10:16.414Z |
| bit-grafana-2026-21721 | Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation | 2026-02-20T08:41:27.652Z | 2026-03-02T09:10:16.414Z |
| bit-grafana-2025-41117 | XSS in Grafana Explore stack trace | 2026-02-20T08:41:19.089Z | 2026-03-02T09:10:16.414Z |
| bit-milvus-2026-26190 | Milvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise | 2026-02-19T08:47:10.808Z | 2026-02-19T09:13:37.164Z |
| bit-grafana-2026-21720 | Unauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out | 2026-02-18T17:41:21.379Z | 2026-02-18T18:09:39.057Z |
| bit-gitlab-2026-1458 | Allocation of Resources Without Limits or Throttling in GitLab | 2026-02-16T16:31:06.973Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2026-1456 | Allocation of Resources Without Limits or Throttling in GitLab | 2026-02-16T16:31:05.146Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2026-1282 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab | 2026-02-16T16:31:03.017Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2026-1094 | Improper Validation of Unsafe Equivalence in Input in GitLab | 2026-02-16T16:30:59.417Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2026-0958 | Interpretation Conflict in GitLab | 2026-02-16T16:30:57.233Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2026-0595 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-02-16T16:30:53.679Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2025-8099 | Allocation of Resources Without Limits or Throttling in GitLab | 2026-02-16T16:30:40.312Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2025-7659 | Origin Validation Error in GitLab | 2026-02-16T16:30:29.449Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2025-14594 | Authorization Bypass Through User-Controlled Key in GitLab | 2026-02-16T16:28:35.547Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2025-14592 | Missing Authorization in GitLab | 2026-02-16T16:28:33.785Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2025-14560 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-02-16T16:28:32.048Z | 2026-02-16T16:32:40.318Z |
| bit-gitlab-2025-12073 | Server-Side Request Forgery (SSRF) in GitLab | 2026-02-16T16:27:53.661Z | 2026-02-16T16:32:40.318Z |
| bit-postgresql-2026-2007 | PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory | 2026-02-16T16:03:46.313Z | 2026-02-16T16:32:40.318Z |
| bit-postgresql-2026-2006 | PostgreSQL missing validation of multibyte character length executes arbitrary code | 2026-02-16T16:03:41.880Z | 2026-02-16T16:32:40.318Z |
| bit-postgresql-2026-2005 | PostgreSQL pgcrypto heap buffer overflow executes arbitrary code | 2026-02-16T16:03:36.943Z | 2026-02-16T16:32:40.318Z |
| bit-postgresql-2026-2004 | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code | 2026-02-16T16:03:32.935Z | 2026-02-16T16:32:40.318Z |
| bit-postgresql-2026-2003 | PostgreSQL oidvector discloses a few bytes of memory | 2026-02-16T16:03:27.354Z | 2026-02-16T16:32:40.318Z |
| bit-pillow-2026-25990 | Pillow has an out-of-bounds write when loading PSD images | 2026-02-16T16:02:06.871Z | 2026-02-16T16:32:40.318Z |
| bit-pip-2026-1703 | Limited path traversal when installing wheel archives | 2026-02-16T15:59:06.080Z | 2026-02-16T16:32:40.318Z |
| bit-dotnet-2026-21218 | .NET Spoofing Vulnerability | 2026-02-16T15:58:16.593Z | 2026-02-16T16:32:40.318Z |
| bit-moodle-2025-67857 | Moodle: moodle: data exposure of user identifiers in urls | 2026-02-12T08:51:13.591Z | 2026-02-12T09:10:24.600Z |
| bit-moodle-2025-67856 | Moodle: moodle: privilege escalation via incomplete role checks in badge awarding | 2026-02-12T08:51:12.105Z | 2026-02-12T09:10:24.600Z |
| bit-moodle-2025-67855 | Mooodle: mooodle: information disclosure and script execution via reflected cross-site scripting | 2026-02-12T08:51:10.563Z | 2026-02-12T09:10:24.600Z |
| bit-moodle-2025-67853 | Moodle: moodle: brute-force facilitation due to missing rate limiting in confirmation email service | 2026-02-12T08:51:08.996Z | 2026-02-12T09:10:24.600Z |
| bit-moodle-2025-67852 | Moodle: moodle: open redirect vulnerability in oauth login flow allows redirection to malicious sites. | 2026-02-12T08:51:07.525Z | 2026-02-12T09:10:24.600Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-jd48541 | Moby is an open-source project created by Docker for software containerization | 2026-01-30T16:52:56.596548Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hl71566 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:50:56.129322Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-tk38210 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:46:25.995358Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-sb25660 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T16:44:27.197226Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-pz62650 | Cancelling a query (e | 2026-01-30T16:41:55.453512Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-lz10721 | Within HostnameError | 2026-01-30T16:40:55.517816Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hj34439 | Go before 1 | 2026-01-30T16:39:55.415446Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-kz30232 | Go before 1 | 2026-01-30T16:39:25.872575Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oj15484 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T16:37:55.388839Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-iy17697 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:37:55.497960Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-on38469 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:37:25.667594Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fp29743 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:37:25.443687Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gl18398 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:36:55.508939Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-qd78411 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T16:36:25.408698Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-vv68546 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:35:55.883570Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ty78539 | ParseAddress function constructs domain-literal address components through repeated string concatenation | 2026-01-30T16:35:55.295657Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-na36743 | Within HostnameError | 2026-01-30T16:35:55.379246Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ax77726 | vulnerability was found in PAM | 2026-01-30T16:35:55.808062Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-pw02676 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:35:26.383203Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-vs64679 | ParseAddress function constructs domain-literal address components through repeated string concatenation | 2026-01-30T16:35:25.680295Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nl96892 | Within HostnameError | 2026-01-30T16:31:25.336110Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gj12884 | Within HostnameError | 2026-01-30T16:31:25.827659Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-yk54840 | Within HostnameError | 2026-01-30T16:30:55.324232Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-so17846 | Within HostnameError | 2026-01-30T16:30:25.764771Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rt10702 | Within HostnameError | 2026-01-30T16:30:25.697056Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dn37053 | Within HostnameError | 2026-01-30T16:30:25.711037Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ib84500 | security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion | 2026-01-30T16:29:55.343868Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-wg18689 | attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests | 2026-01-30T16:29:25.690410Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ul17352 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:29:25.464127Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-tf33105 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T16:29:25.639055Z | 2026-01-29T18:58:54Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2021-ALE-006 | [MàJ] Vulnérabilité dans F5 BIG-IP | 2021-03-22T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| certfr-2021-ale-005 | Multiples vulnérabilités dans Microsoft DNS server | 2021-03-12T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| CERTFR-2021-ALE-005 | Multiples vulnérabilités dans Microsoft DNS server | 2021-03-12T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-004 | [MàJ] Multiples vulnérabilités dans Microsoft Exchange Server | 2021-03-03T00:00:00.000000 | 2021-07-16T00:00:00.000000 |
| CERTFR-2021-ALE-004 | [MàJ] Multiples vulnérabilités dans Microsoft Exchange Server | 2021-03-03T00:00:00.000000 | 2021-07-16T00:00:00.000000 |
| certfr-2021-ale-003 | [MàJ] Vulnérabilité dans VMware vCenter Server | 2021-02-25T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| CERTFR-2021-ALE-003 | [MàJ] Vulnérabilité dans VMware vCenter Server | 2021-02-25T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-002 | [MàJ] Vulnérabilité dans Google Chrome et Microsoft Edge | 2021-02-05T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| CERTFR-2021-ALE-002 | [MàJ] Vulnérabilité dans Google Chrome et Microsoft Edge | 2021-02-05T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2021-ale-001 | |MàJ] Vulnérabilité dans SonicWall SMA100 | 2021-02-02T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| CERTFR-2021-ALE-001 | |MàJ] Vulnérabilité dans SonicWall SMA100 | 2021-02-02T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2020-ale-026 | [MaJ] Présence de code malveillant dans SolarWinds Orion | 2020-12-14T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| CERTFR-2020-ALE-026 | [MaJ] Présence de code malveillant dans SolarWinds Orion | 2020-12-14T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| certfr-2020-ale-025 | Vulnérabilité dans Fortinet FortiOS SSL-VPN | 2020-11-27T00:00:00.000000 | 2021-02-08T00:00:00.000000 |
| CERTFR-2020-ALE-025 | Vulnérabilité dans Fortinet FortiOS SSL-VPN | 2020-11-27T00:00:00.000000 | 2021-02-08T00:00:00.000000 |
| certfr-2020-ale-024 | [MaJ] Vulnérabilité dans les produits VMware | 2020-11-24T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| CERTFR-2020-ALE-024 | [MaJ] Vulnérabilité dans les produits VMware | 2020-11-24T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| certfr-2020-ale-023 | Multiples vulnérabilités dans Google Chrome | 2020-11-12T00:00:00.000000 | 2020-12-04T00:00:00.000000 |
| CERTFR-2020-ALE-023 | Multiples vulnérabilités dans Google Chrome | 2020-11-12T00:00:00.000000 | 2020-12-04T00:00:00.000000 |
| certfr-2020-ale-022 | [MàJ] Vulnérabilité dans Oracle Weblogic | 2020-10-30T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| CERTFR-2020-ALE-022 | [MàJ] Vulnérabilité dans Oracle Weblogic | 2020-10-30T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| certfr-2020-ale-021 | Vulnérabilité dans Samba | 2020-09-18T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| CERTFR-2020-ALE-021 | Vulnérabilité dans Samba | 2020-09-18T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2020-ale-020 | [MàJ] Vulnérabilité dans Microsoft Netlogon | 2020-09-15T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| CERTFR-2020-ALE-020 | [MàJ] Vulnérabilité dans Microsoft Netlogon | 2020-09-15T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2020-ale-019 | Recrudescence d'activité Emotet en France | 2020-09-07T00:00:00.000000 | 2021-02-09T00:00:00.000000 |
| CERTFR-2020-ALE-019 | Recrudescence d'activité Emotet en France | 2020-09-07T00:00:00.000000 | 2021-02-09T00:00:00.000000 |
| certfr-2020-ale-018 | Vulnérabilité dans Cisco ASA et FTD | 2020-07-28T00:00:00.000000 | 2020-11-05T00:00:00.000000 |
| CERTFR-2020-ALE-018 | Vulnérabilité dans Cisco ASA et FTD | 2020-07-28T00:00:00.000000 | 2020-11-05T00:00:00.000000 |
| certfr-2020-ale-017 | Multiples vulnérabilités dans SAP Netweaver AS JAVA | 2020-07-15T00:00:00.000000 | 2020-10-12T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0158 | Multiples vulnérabilités dans les produits Apple | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0157 | Multiples vulnérabilités dans les produits Qnap | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0156 | Multiples vulnérabilités dans Google Chrome | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0155 | Multiples vulnérabilités dans SPIP | 2026-02-12T00:00:00.000000 | 2026-02-25T00:00:00.000000 |
| certfr-2026-avi-0154 | Vulnérabilité dans Traefik | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| CERTFR-2026-AVI-0160 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| CERTFR-2026-AVI-0159 | Multiples vulnérabilités dans Keycloak | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| CERTFR-2026-AVI-0158 | Multiples vulnérabilités dans les produits Apple | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| CERTFR-2026-AVI-0157 | Multiples vulnérabilités dans les produits Qnap | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| CERTFR-2026-AVI-0156 | Multiples vulnérabilités dans Google Chrome | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| CERTFR-2026-AVI-0155 | Multiples vulnérabilités dans SPIP | 2026-02-12T00:00:00.000000 | 2026-02-25T00:00:00.000000 |
| CERTFR-2026-AVI-0154 | Vulnérabilité dans Traefik | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0153 | Multiples vulnérabilités dans les produits Microsoft | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0152 | Multiples vulnérabilités dans Microsoft Azure | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0151 | Vulnérabilité dans Microsoft .Net | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0150 | Multiples vulnérabilités dans Microsoft Windows | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0149 | Multiples vulnérabilités dans Microsoft Office | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0148 | Multiples vulnérabilités dans les produits Intel | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0147 | Multiples vulnérabilités dans les produits Fortinet | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0146 | Multiples vulnérabilités dans GitLab | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0145 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0144 | Multiples vulnérabilités dans Ivanti Endpoint Manager | 2026-02-11T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0143 | Multiples vulnérabilités dans Synology Storage Manager | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0142 | Multiples vulnérabilités dans MongoDB | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0153 | Multiples vulnérabilités dans les produits Microsoft | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0152 | Multiples vulnérabilités dans Microsoft Azure | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0151 | Vulnérabilité dans Microsoft .Net | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0150 | Multiples vulnérabilités dans Microsoft Windows | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0149 | Multiples vulnérabilités dans Microsoft Office | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0148 | Multiples vulnérabilités dans les produits Intel | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000052 | TP-Link Archer C1200 vulnerable to clickjacking | 2025-07-24T14:16+09:00 | 2025-07-24T14:16+09:00 |
| jvndb-2025-000051 | Real-time Bus Tracking System vulnerable to improper validation of specified quantity in input | 2025-07-23T13:54+09:00 | 2025-07-23T13:54+09:00 |
| jvndb-2025-009576 | Multiple vulnerabilities in ELECOM wireless LAN routers | 2025-07-23T11:13+09:00 | 2025-07-23T11:13+09:00 |
| jvndb-2025-000050 | "region PAY" App for Android vulnerable to insertion of sensitive information into log file | 2025-07-22T13:33+09:00 | 2025-07-22T13:33+09:00 |
| jvndb-2025-009150 | Security updates for Trend Micro products (June 2025) | 2025-07-17T17:03+09:00 | 2025-07-17T17:03+09:00 |
| jvndb-2025-000049 | ZWX-2000CSW2-HN and ZWX-2000CS2-HN vulnerable to use of hard-coded credentials | 2025-07-16T13:54+09:00 | 2025-07-16T13:54+09:00 |
| jvndb-2025-008881 | Least Privilege Violation Vulnerability in the communications functions of NJ/NX series Machine Automation Controllers | 2025-07-15T15:54+09:00 | 2025-07-15T15:54+09:00 |
| jvndb-2025-008783 | Firebox T15 contains an issue with hidden functionality | 2025-07-14T17:22+09:00 | 2025-07-14T17:22+09:00 |
| jvndb-2025-008145 | Epson Web Installer for Mac vulnerable to missing authentication for critical function | 2025-07-08T14:08+09:00 | 2025-07-08T14:08+09:00 |
| jvndb-2025-008106 | Heap-based buffer overflow vulnerability in V-SFT and TELLUS | 2025-07-07T16:26+09:00 | 2025-07-07T16:26+09:00 |
| jvndb-2025-008105 | Windows shortcut following (.LNK) vulnerability in Trend Micro Security for Windows (CVE-2025-52521) | 2025-07-07T16:04+09:00 | 2025-07-07T16:04+09:00 |
| jvndb-2025-000047 | Multiple vulnerabilities in Nimesa Backup and Recovery | 2025-07-07T15:26+09:00 | 2025-07-07T15:26+09:00 |
| jvndb-2025-007978 | Multiple vulnerabilities in Trend Micro Password Manager for Windows (CVE-2025-48443, CVE-2025-52837) | 2025-07-04T13:28+09:00 | 2025-07-04T13:28+09:00 |
| jvndb-2025-000045 | Multiple vulnerabilities in Active! mail | 2025-07-02T14:13+09:00 | 2025-07-02T14:13+09:00 |
| jvndb-2025-007754 | Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) | 2025-07-02T11:31+09:00 | 2025-07-02T11:31+09:00 |
| jvndb-2025-007607 | Pass-Back Attack vulnerability in Konica Minorta bizhub series | 2025-07-01T14:09+09:00 | 2025-07-01T14:09+09:00 |
| jvndb-2025-007595 | Multiple vulnerabilities in Web Connection of Konica Minolta MFPs | 2025-07-01T14:02+09:00 | 2025-07-01T14:02+09:00 |
| jvndb-2025-000046 | SLNX Help Documentation of RICOH Streamline NX vulnerable to reflected cross-site scripting | 2025-06-30T15:45+09:00 | 2025-06-30T15:45+09:00 |
| jvndb-2025-007552 | Multiple vulnerabilities in TB-eye network recorders and AHD recorders | 2025-06-30T14:45+09:00 | 2025-06-30T14:45+09:00 |
| jvndb-2025-007521 | Multiple Brother driver installers for Windows vulnerable to privilege escalation | 2025-06-27T09:37+09:00 | 2025-08-19T11:29+09:00 |
| jvndb-2025-007519 | Multiple vulnerabilities in multiple BROTHER products | 2025-06-26T18:15+09:00 | 2025-09-22T10:16+09:00 |
| jvndb-2025-000043 | Multiple vulnerabilities in iroha Board | 2025-06-26T15:13+09:00 | 2025-06-26T15:13+09:00 |
| jvndb-2025-000044 | Denial-of-service (DoS) vulnerabilities in multiple Apache products | 2025-06-26T14:41+09:00 | 2025-10-01T14:18+09:00 |
| jvndb-2025-000042 | Inefficient regular expressions in GROWI | 2025-06-24T15:25+09:00 | 2025-06-24T15:25+09:00 |
| jvndb-2025-000041 | Multiple vulnerabilities in ELECOM wireless LAN routers | 2025-06-24T14:50+09:00 | 2026-02-03T15:35+09:00 |
| jvndb-2025-007390 | Trend Micro Internet Security and Trend Micro Maximum Security vulnerable to link following local privilege escalation (CVE-2025-49384, CVE-2025-49385) | 2025-06-24T11:18+09:00 | 2025-06-24T11:18+09:00 |
| jvndb-2025-000040 | KCM3100 vulnerable to authentication bypass using an alternate path or channel | 2025-06-18T13:42+09:00 | 2025-06-18T13:42+09:00 |
| jvndb-2025-000039 | Multiple vulnerabilities in RICOH Streamline NX PC Client | 2025-06-13T16:09+09:00 | 2025-06-13T16:09+09:00 |
| jvndb-2025-000038 | UpdateNavi vulnerable to improper restriction of communication channel to intended endpoints | 2025-06-12T15:56+09:00 | 2025-06-12T15:56+09:00 |
| jvndb-2025-000037 | Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery | 2025-06-06T13:56+09:00 | 2025-06-06T13:56+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-09617 | MedDream PACS Premium config.php功能phpexe参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09616 | MedDream PACS Premium config.php功能phpdir参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09615 | MedDream PACS Premium config.php功能longtermdir参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09614 | MedDream PACS Premium config.php功能imagedir参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09461 | WordPress插件AWP Classifieds信息泄露漏洞 | 2026-01-30 | 2026-02-02 |
| cnvd-2026-10667 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-10667) | 2026-01-29 | 2026-02-11 |
| cnvd-2026-09794 | Apache bRPC远程命令注入漏洞 | 2026-01-29 | 2026-01-30 |
| cnvd-2026-12367 | NVIDIA Merlin Transformers4Rec代码注入漏洞 | 2026-01-26 | 2026-03-03 |
| cnvd-2026-11738 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-11738) | 2026-01-26 | 2026-02-24 |
| cnvd-2026-11737 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-11737) | 2026-01-26 | 2026-02-24 |
| cnvd-2026-10670 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-10670) | 2026-01-26 | 2026-02-11 |
| cnvd-2026-10669 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-10669) | 2026-01-26 | 2026-02-11 |
| cnvd-2026-10668 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-10668) | 2026-01-26 | 2026-02-11 |
| cnvd-2026-10660 | IBM ApplinX数据伪造问题漏洞 | 2026-01-26 | 2026-02-10 |
| cnvd-2026-08328 | Tenda AX1806堆栈溢出漏洞(CNVD-2026-08328) | 2026-01-26 | 2026-01-29 |
| cnvd-2026-08327 | Tenda AX1803堆栈溢出漏洞 | 2026-01-26 | 2026-01-29 |
| cnvd-2026-08326 | Tenda AX1806堆栈溢出漏洞 | 2026-01-26 | 2026-01-29 |
| cnvd-2026-12368 | NVIDIA NSIGHT Graphics操作系统命令注入漏洞 | 2026-01-23 | 2026-03-03 |
| cnvd-2026-07240 | Google Chrome实现不当漏洞(CNVD-2026-07240) | 2026-01-23 | 2026-01-26 |
| cnvd-2026-05940 | GNU InetUtils Telnetd远程认证绕过漏洞 | 2026-01-22 | 2026-01-22 |
| cnvd-2026-11808 | Apache Kyuubi目录遍历漏洞 | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11807 | 多款Mozilla产品整数溢出漏洞 | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11806 | 多款Mozilla产品代码执行漏洞(CNVD-2026-11806) | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11805 | 多款Mozilla产品安全绕过漏洞(CNVD-2026-11805) | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11804 | 多款Mozilla产品缓冲区溢出漏洞(CNVD-2026-11804) | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11803 | 多款Mozilla产品代码执行漏洞(CNVD-2026-11803) | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11802 | 多款Mozilla产品代码执行漏洞(CNVD-2026-11802) | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11801 | 多款Mozilla产品存在未明漏洞(CNVD-2026-11801) | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11800 | Mozilla Firefox和Mozilla Firefox ESR缓冲区溢出漏洞(CNVD-2026-11800) | 2026-01-19 | 2026-02-28 |
| cnvd-2026-11799 | Mozilla Firefox和Mozilla Firefox ESR代码执行漏洞(CNVD-2026-11799) | 2026-01-19 | 2026-02-28 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-01566 | Уязвимость функции f2fs_map_blocks() модуля fs/f2fs/data.c файловой системы F2FS ядра опе… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01565 | Уязвимость функции nfsd_splice_actor() модуля fs/nfsd/vfs.c поддержки сетевой файловой си… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01564 | Уязвимость функции ext4_io_end_defer_completion() модуля fs/ext4/page-io.c файловой сист… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01563 | Уязвимость функции hns_roce_v2_init() модуля drivers/infiniband/hw/hns/hns_roce_hw_v2.c д… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01562 | Уязвимость функции gmin_get_config_var() модуля drivers/staging/media/atomisp/pci/atomisp… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01561 | Уязвимость функции blocking_domain_set_dev_pasid() модуля drivers/iommu/intel/iommu.c дра… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01560 | Уязвимость функции dmabuf_exp_from_pages() модуля drivers/xen/gntdev-dmabuf.c драйвера ус… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01559 | Уязвимость функции panthor_gem_create_with_handle() модуля drivers/gpu/drm/panthor/pantho… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01558 | Уязвимость функции meson_encoder_hdmi_init() модуля drivers/gpu/drm/meson/meson_encoder_h… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01557 | Уязвимость функции signal_our_withdraw() модуля fs/gfs2/util.c файловой системы GFS2 ядра… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01556 | Уязвимость функции __fbnic_open() модуля drivers/net/ethernet/meta/fbnic/fbnic_netdev.c д… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01555 | Уязвимость функции scarlett2_input_select_ctl_info() модуля sound/usb/mixer_scarlett2.c п… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01554 | Уязвимость функции inet6_rt_notify() модуля net/ipv6/route.c ядра операционной системы Li… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01553 | Уязвимость функции ieee80211_link_info_change_notify() модуля net/mac80211/main.c реализа… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01550 | Уязвимость функций usbnet_stop() и usbnet_disconnect() ядра операционной системы Linux, п… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01549 | Уязвимость функций scpi_init_versions() и scpi_probe() ядра операционной системы Linux, п… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01548 | Уязвимость функции pm8001_chip_reg_dev_req() модуля drivers/scsi/pm8001/pm8001_hwi.c драй… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01547 | Уязвимость функции pm8001_send_abort_all() модуля drivers/scsi/pm8001/pm8001_hwi.c драйве… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01546 | Уязвимость функции attempt_restore_of_faulty_devices() ядра операционной системы Linux, п… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01545 | Уязвимость функций qla2x00_async_login_sp_done(), qla2x00_async_adisc_sp_done(), qla2x00_… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01544 | Уязвимость функции qla24xx_handle_plogi_done_event() модуля drivers/scsi/qla2xxx/qla_init… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01543 | Уязвимость функции qla2xxx_create_qpair() модуля drivers/scsi/qla2xxx/qla_init.c драйвера… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01542 | Уязвимость функции avic_pi_update_irte() модуля arch/x86/kvm/svm/avic.c подсистемы виртуа… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01541 | Уязвимость функции hci_sync_conn_complete_evt() модуля net/bluetooth/hci_event.c подсисте… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01540 | Уязвимость функции dp_link_settings_read() модуля drivers/gpu/drm/amd/display/amdgpu_dm/a… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01539 | Уязвимость функции mlxsw_sp_pude_event_func() модуля drivers/net/ethernet/mellanox/mlxsw/… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01538 | Уязвимость функции kfd_process_notifier_release() модуля drivers/gpu/drm/amd/amdkfd/kfd_p… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01537 | Уязвимость функции acpi_processor_get_lpi_info() модуля drivers/acpi/processor_idle.c дра… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01536 | Уязвимость функций ext4_writepage(), mpage_prepare_extent_to_map() модуля fs/ext4/inode.c… | 10.02.2026 | 10.02.2026 |
| bdu:2026-01535 | Уязвимость функции ntfs_read_inode_mount() модуля fs/ntfs/inode.c файловой системы ядра о… | 10.02.2026 | 10.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201404-0378 | Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1… | 2024-07-23T22:08:28.541000Z |
| var-201908-0264 | Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a den… | 2024-07-23T22:07:30.228000Z |
| var-201702-0469 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari be… | 2024-07-23T22:06:53.547000Z |
| var-200703-0016 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… | 2024-07-23T22:06:48.011000Z |
| var-201609-0595 | The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly … | 2024-07-23T22:06:46.651000Z |
| var-202004-1974 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-07-23T22:06:44.403000Z |
| var-201705-3790 | In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod Ope… | 2024-07-23T22:06:43.841000Z |
| var-202109-1802 | A crafted request uri-path can cause mod_proxy to forward the request to an origin server… | 2024-07-23T22:06:13.520000Z |
| var-202110-1622 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T22:06:10.313000Z |
| var-200905-0043 | Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, … | 2024-07-23T22:06:10.145000Z |
| var-202203-0129 | A cookie management issue was addressed with improved state management. This issue is fix… | 2024-07-23T22:06:09.291000Z |
| var-200210-0102 | Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a deni… | 2024-07-23T22:06:08.093000Z |
| var-202009-0037 | A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP… | 2024-07-23T22:06:07.991000Z |
| var-201912-0619 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:06:04.230000Z |
| var-200809-0566 | Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2… | 2024-07-23T22:06:03.293000Z |
| var-202201-0424 | A validation issue was addressed with improved input sanitization. This issue is fixed in… | 2024-07-23T22:06:01.833000Z |
| var-200604-0201 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary c… | 2024-07-23T22:05:29.066000Z |
| var-201201-0025 | Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers … | 2024-07-23T22:05:28.758000Z |
| var-201808-0957 | Systems with microprocessors utilizing speculative execution and address translations may… | 2024-07-23T22:05:21.889000Z |
| var-202203-1400 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of servic… | 2024-07-23T22:05:19.247000Z |
| var-201912-0640 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:05:19.907000Z |
| var-201904-1343 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:05:19.745000Z |
| var-201007-0949 | WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… | 2024-07-23T22:05:19.065000Z |
| var-201912-1856 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:04:56.028000Z |
| var-200904-0821 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products… | 2024-07-23T22:04:56.133000Z |
| var-200603-0282 | Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 1… | 2024-07-23T22:04:24.723000Z |
| var-201912-0509 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T22:03:53.293000Z |
| var-200806-0575 | SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and … | 2024-07-23T22:03:53.151000Z |
| var-200703-0024 | Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins… | 2024-07-23T22:03:53.866000Z |
| var-202005-1054 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by d… | 2024-07-23T22:03:49.580000Z |