Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22264 |
7.4 (3.1)
|
Suricata detect/alert: heap-use-after-free on alert qu… |
OISF |
suricata |
2026-01-27T18:33:50.354Z | 2026-01-28T14:02:38.233Z |
| CVE-2025-14693 |
7 (4.0)
6.2 (3.1)
6.2 (3.0)
|
Ugreen DH2100+ USB symlink |
Ugreen |
DH2100+ |
2025-12-15T00:02:06.966Z | 2026-01-28T06:49:07.795Z |
| CVE-2025-14188 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UGREEN DH2100+ nas_svr create handler_file_backup_crea… |
UGREEN |
DH2100+ |
2025-12-07T11:02:05.449Z | 2026-01-28T06:48:58.591Z |
| CVE-2025-14187 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UGREEN DH2100+ nas_svr create handler_file_backup_crea… |
UGREEN |
DH2100+ |
2025-12-07T08:32:07.027Z | 2026-01-28T06:48:53.137Z |
| CVE-2025-36911 |
7.1 (3.1)
|
In key-based pairing, there is a possible ID due … |
Google |
Android |
2026-01-15T17:41:57.504Z | 2026-01-28T04:55:59.423Z |
| CVE-2023-0507 |
7.3 (3.1)
|
Grafana is an open-source platform for monitoring… |
Grafana |
Grafana |
2023-03-01T15:35:55.259Z | 2026-01-28T04:55:39.324Z |
| CVE-2023-22462 |
6.4 (3.1)
|
Stored XSS in Grafana Text plugin |
grafana |
grafana |
2023-03-02T00:06:59.876Z | 2026-01-28T04:55:37.854Z |
| CVE-2023-0594 |
7.3 (3.1)
|
Grafana is an open-source platform for monitoring… |
Grafana |
Grafana |
2023-03-01T15:36:43.881Z | 2026-01-28T04:55:36.581Z |
| CVE-2022-23552 |
7.3 (3.1)
|
Grafana stored XSS in FileUploader component |
grafana |
grafana |
2023-01-27T22:59:16.675Z | 2026-01-28T04:55:35.339Z |
| CVE-2022-31097 |
7.3 (3.1)
|
Stored XSS in Grafana's Unified Alerting |
grafana |
grafana |
2022-07-15T12:10:10.000Z | 2026-01-28T04:55:34.182Z |
| CVE-2022-24812 |
8 (3.1)
|
FGAC API Key privilege escalation in Grafana |
grafana |
grafana |
2022-04-12T17:00:19.000Z | 2026-01-28T04:55:33.003Z |
| CVE-2022-31107 |
7.1 (3.1)
|
Grafana account takeover via OAuth vulnerability |
grafana |
grafana |
2022-07-15T12:30:14.000Z | 2026-01-28T04:55:31.786Z |
| CVE-2022-36062 |
7.6 (3.1)
|
Grafana folders admin only permission privilege escalation |
grafana |
grafana |
2022-09-22T00:00:00.000Z | 2026-01-28T04:55:30.640Z |
| CVE-2022-35957 |
6.6 (3.1)
|
Authentication Bypass in Grafana via auth proxy allowi… |
grafana |
grafana |
2022-09-20T00:00:00.000Z | 2026-01-28T04:55:29.297Z |
| CVE-2022-31123 |
6.1 (3.1)
|
Grafana plugin signature bypass vulnerability |
grafana |
grafana |
2022-10-13T00:00:00.000Z | 2026-01-28T04:55:28.143Z |
| CVE-2022-39328 |
9.8 (3.1)
|
Grafana vulnerable to race condition allowing privileg… |
grafana |
grafana |
2022-11-08T00:00:00.000Z | 2026-01-28T04:55:26.896Z |
| CVE-2022-39306 |
6.4 (3.1)
|
Grafana contains Improper Input Validation |
grafana |
grafana |
2022-11-09T00:00:00.000Z | 2026-01-28T04:55:25.735Z |
| CVE-2026-24869 |
8.1 (3.1)
|
Use-after-free in the Layout: Scrolling and Overflow c… |
Mozilla |
Firefox |
2026-01-27T15:58:48.799Z | 2026-01-28T04:55:24.537Z |
| CVE-2022-39307 |
6.7 (3.1)
|
Grafana subject to Exposure of Sensitive Information r… |
grafana |
grafana |
2022-11-09T00:00:00.000Z | 2026-01-28T04:55:23.388Z |
| CVE-2022-39324 |
6.7 (3.1)
|
Grafana vulnerable to spoofing originalUrl of snapshots |
grafana |
grafana |
2023-01-27T22:42:01.550Z | 2026-01-28T04:55:22.240Z |
| CVE-2022-23498 |
7.1 (3.1)
|
When query caching is enabled in Grafana users can que… |
grafana |
grafana |
2023-02-03T21:34:58.677Z | 2026-01-28T04:55:21.088Z |
| CVE-2025-3260 |
8.3 (3.1)
|
A security vulnerability in the /apis/dashboard.g… |
Grafana |
Grafana |
2025-06-02T10:06:39.039Z | 2026-01-28T04:55:19.921Z |
| CVE-2026-23683 |
4.3 (3.1)
|
Missing Authorization check in SAP Fiori App (Intercom… |
SAP_SE |
SAP Fiori App (Intercompany Balance Reconciliation) |
2026-01-27T00:22:13.153Z | 2026-01-28T04:55:17.259Z |
| CVE-2026-24859 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:09.264Z | |
| CVE-2026-24861 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:08.318Z | |
| CVE-2026-24860 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:08.774Z | |
| CVE-2026-24863 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:07.412Z | |
| CVE-2026-24862 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:07.877Z | |
| CVE-2026-24865 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:06.486Z | |
| CVE-2026-24864 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:06.964Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-47767 |
8.5 (4.0)
7.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - 'srvIn… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:09.919Z | 2026-01-15T18:27:09.610Z |
| CVE-2021-47768 |
5.3 (4.0)
6.1 (3.1)
|
ImportExportTools NG 10.0.4 - HTML Injection |
thundernest |
ImportExportTools NG |
2026-01-15T15:52:10.377Z | 2026-01-15T18:27:03.728Z |
| CVE-2026-20047 |
4.8 (3.1)
|
Cisco Identity Services Engine Cross-Site Scripting Vu… |
Cisco |
Cisco Identity Services Engine Software |
2026-01-15T16:32:15.578Z | 2026-01-16T04:55:52.838Z |
| CVE-2026-20075 |
4.8 (3.1)
|
Cisco Evolved Programmable Network Manager and Cisco P… |
Cisco |
Cisco Evolved Programmable Network Manager (EPNM) |
2026-01-15T16:32:15.838Z | 2026-01-15T18:11:54.678Z |
| CVE-2026-20076 |
4.8 (3.1)
|
Cisco Identity Services Engine Stored Cross-Site Scrip… |
Cisco |
Cisco Identity Services Engine Software |
2026-01-15T16:32:03.744Z | 2026-01-16T04:55:53.964Z |
| CVE-2026-23495 |
4.3 (3.1)
|
Pimcore's Admin Classic Bundle is Missing Function Lev… |
pimcore |
pimcore |
2026-01-15T16:47:07.114Z | 2026-01-15T17:09:32.298Z |
| CVE-2026-23496 |
5.4 (3.1)
|
Pimcore Web2Print Tools Bundle "Favourite Output Chann… |
pimcore |
pimcore |
2026-01-15T16:58:39.431Z | 2026-01-15T18:26:33.948Z |
| CVE-2026-0765 |
8.8 (3.0)
|
Open WebUI PIP install_frontmatter_requirements Comman… |
Open WebUI |
Open WebUI |
2026-01-23T03:28:32.185Z | 2026-01-24T04:55:37.773Z |
| CVE-2026-0766 |
8.8 (3.0)
|
Open WebUI load_tool_module_by_id Command Injection Re… |
Open WebUI |
Open WebUI |
2026-01-23T03:28:35.773Z | 2026-01-24T04:55:36.583Z |
| CVE-2025-67025 |
6.1 (3.1)
|
Cross Site Scripting vulnerability in Anycomment … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T21:07:24.240Z |
| CVE-2026-0767 |
5.3 (3.0)
|
Open WebUI Cleartext Transmission of Credentials Infor… |
Open WebUI |
Open WebUI |
2026-01-23T03:28:39.523Z | 2026-01-23T16:33:51.687Z |
| CVE-2025-63045 |
6.5 (3.1)
|
WordPress Master Slider Pro plugin <= 3.7.12 - Cross S… |
averta |
Master Slider Pro |
2025-12-09T14:52:30.970Z | 2026-01-30T17:36:16.361Z |
| CVE-2022-47425 |
4.3 (3.1)
|
WordPress ARMember – Membership Plugin, Content Restri… |
Repute Infosystems |
ARMember |
2025-12-09T16:41:37.058Z | 2025-12-09T17:05:20.626Z |
| CVE-2025-13743 |
2.4 (4.0)
|
Expired Personal Access Tokens (PATs) are recorded in … |
Docker |
Docker Desktop |
2025-12-09T20:39:52.071Z | 2025-12-10T15:45:17.295Z |
| CVE-2026-23645 |
5.3 (4.0)
|
SiYuan Vulnerable to Stored Cross-Site Scripting (XSS)… |
siyuan-note |
siyuan |
2026-01-16T19:20:06.744Z | 2026-01-16T21:37:58.336Z |
| CVE-2025-67488 |
7.8 (3.1)
|
SiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE |
siyuan-note |
siyuan |
2025-12-09T20:32:37.274Z | 2025-12-09T21:30:12.799Z |
| CVE-2025-40700 |
5.1 (4.0)
|
Reflected Cross-Site Scripting (XSS) in Governalia by … |
IDI Eikon |
Governalia |
2025-12-02T13:08:55.540Z | 2025-12-02T13:26:32.149Z |
| CVE-2024-50388 |
9.5 (4.0)
|
HBS 3 Hybrid Backup Sync |
QNAP Systems Inc. |
HBS 3 Hybrid Backup Sync |
2024-12-06T16:35:07.434Z | 2024-12-06T19:59:55.053Z |
| CVE-2024-13086 |
5.3 (3.1)
|
QTS, QuTS hero |
QNAP Systems Inc. |
QTS |
2025-03-07T16:12:39.065Z | 2025-03-07T17:55:56.464Z |
| CVE-2025-66476 |
7.8 (3.1)
|
Vim for Windows Uncontrolled Search Path Element Remot… |
vim |
vim |
2025-12-02T21:49:24.672Z | 2025-12-05T04:56:29.527Z |
| CVE-2026-21625 |
4.8 (4.0)
|
Extension - stackideas.com - Lack of mime type validat… |
Stackideas.com |
EasyDiscuss extension for Joomla |
2026-01-16T15:06:15.596Z | 2026-01-16T15:35:53.746Z |
| CVE-2025-13751 |
1.3 (4.0)
|
Interactive service agent in OpenVPN version 2.5.… |
OpenVPN |
OpenVPN |
2025-12-03T16:22:35.771Z | 2025-12-12T13:56:20.684Z |
| CVE-2026-21624 |
9.4 (4.0)
|
Extension - stackideas.com - Persistent XSS in EasyDis… |
Stackideas.com |
EasyDiscuss extension for Joomla |
2026-01-16T15:05:37.172Z | 2026-01-16T15:41:11.155Z |
| CVE-2026-21623 |
9.4 (4.0)
|
Extension - stackideas.com - Persistent XSS in EasyDis… |
Stackideas.com |
EasyDiscuss extension for Joomla |
2026-01-16T15:04:36.308Z | 2026-01-16T15:38:27.743Z |
| CVE-2025-63083 |
5.9 (4.0)
|
Joomla! Core - [20260102] - XSS vector in the pagebrea… |
Joomla! Project |
Joomla! CMS |
2026-01-06T16:01:15.123Z | 2026-01-06T18:56:00.865Z |
| CVE-2025-33208 |
8.8 (3.1)
|
NVIDIA TAO contains a vulnerability where an atta… |
NVIDIA |
TAO |
2025-12-03T18:19:04.324Z | 2025-12-03T18:55:47.516Z |
| CVE-2025-63082 |
5.9 (4.0)
|
Joomla! Core - [20260101] - Inadequate content filteri… |
Joomla! Project |
Joomla! CMS |
2026-01-06T16:01:38.720Z | 2026-01-06T17:45:21.282Z |
| CVE-2025-10865 |
7.8 (3.1)
|
GPU DDK - DevmemIntGetReservationData does not ref the… |
Imagination Technologies |
Graphics DDK |
2026-01-13T17:26:45.523Z | 2026-01-14T14:36:47.473Z |
| CVE-2025-58409 |
3.5 (3.1)
|
GPU DDK - Disguised freelist buffers passed to RGXCrea… |
Imagination Technologies |
Graphics DDK |
2026-01-13T16:37:46.020Z | 2026-01-14T15:04:14.357Z |
| CVE-2025-58411 |
8.8 (3.1)
|
GPU DDK - Reservation::psMappedPMR can change while us… |
Imagination Technologies |
Graphics DDK |
2026-01-13T16:41:51.276Z | 2026-01-14T14:41:14.848Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-23495 | Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Prior to 2.2.3 and 1.7.16, the AP… | 2026-01-15T17:16:08.597 | 2026-01-30T19:51:59.950 |
| fkie_cve-2026-23496 | Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and… | 2026-01-15T17:16:08.747 | 2026-01-30T19:49:56.363 |
| fkie_cve-2026-0765 | Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerabili… | 2026-01-23T04:16:03.390 | 2026-01-30T19:48:35.070 |
| fkie_cve-2026-0766 | Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability. This vulne… | 2026-01-23T04:16:03.527 | 2026-01-30T19:47:56.023 |
| fkie_cve-2025-67025 | Cross Site Scripting vulnerability in Anycomment anycomment.io 0.4.4 allows a remote attacker to ex… | 2026-01-15T21:16:04.620 | 2026-01-30T19:42:50.463 |
| fkie_cve-2026-0767 | Open WebUI Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnera… | 2026-01-23T04:16:03.660 | 2026-01-30T19:36:59.573 |
| fkie_cve-2025-63045 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:09.747 | 2026-01-30T19:36:50.487 |
| fkie_cve-2022-47425 | Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Co… | 2025-12-09T17:15:47.830 | 2026-01-30T19:36:17.163 |
| fkie_cve-2025-13743 | Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to erro… | 2025-12-09T21:15:53.500 | 2026-01-30T19:35:24.140 |
| fkie_cve-2026-23645 | SiYuan is self-hosted, open source personal knowledge management software. Prior to 3.5.4-dev2, a S… | 2026-01-16T20:15:49.880 | 2026-01-30T19:32:11.660 |
| fkie_cve-2025-67488 | SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-202512021… | 2025-12-09T21:16:00.317 | 2026-01-30T19:30:11.173 |
| fkie_cve-2025-40700 | Reflected Cross-Site Scripting (XSS) in IDI Eikon's Governalia. The vulnerability allows an attacke… | 2025-12-02T13:15:53.537 | 2026-01-30T19:13:04.337 |
| fkie_cve-2024-50388 | An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If expl… | 2024-12-06T17:15:09.373 | 2026-01-30T19:03:53.217 |
| fkie_cve-2024-13086 | An exposure of sensitive information vulnerability has been reported to affect product. If exploite… | 2025-03-07T17:15:18.430 | 2026-01-30T18:54:35.447 |
| fkie_cve-2025-66476 | Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search … | 2025-12-02T22:16:09.940 | 2026-01-30T18:50:29.877 |
| fkie_cve-2026-21625 | User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads a… | 2026-01-16T15:15:55.017 | 2026-01-30T18:45:43.407 |
| fkie_cve-2025-13751 | Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on… | 2025-12-03T17:15:49.913 | 2026-01-30T18:43:57.883 |
| fkie_cve-2026-21624 | Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of… | 2026-01-16T15:15:54.873 | 2026-01-30T18:43:24.353 |
| fkie_cve-2026-21623 | Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the E… | 2026-01-16T15:15:54.733 | 2026-01-30T18:42:53.640 |
| fkie_cve-2025-63083 | Lack of output escaping leads to a XSS vector in the pagebreak plugin. | 2026-01-06T17:15:44.740 | 2026-01-30T18:41:36.323 |
| fkie_cve-2025-33208 | NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an unco… | 2025-12-03T19:15:55.983 | 2026-01-30T18:41:29.603 |
| fkie_cve-2025-63082 | Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags. | 2026-01-06T17:15:44.590 | 2026-01-30T18:41:18.417 |
| fkie_cve-2025-10865 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause … | 2026-01-13T18:16:04.433 | 2026-01-30T18:39:09.417 |
| fkie_cve-2025-58409 | Software installed and run as a non-privileged user may conduct improper GPU system calls to subver… | 2026-01-13T17:15:57.680 | 2026-01-30T18:39:02.007 |
| fkie_cve-2025-58411 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause … | 2026-01-13T17:15:57.813 | 2026-01-30T18:38:40.350 |
| fkie_cve-2025-13086 | Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 t… | 2025-12-03T20:16:24.353 | 2026-01-30T18:38:13.833 |
| fkie_cve-2025-25176 | Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from app… | 2026-01-13T17:15:56.753 | 2026-01-30T18:37:54.833 |
| fkie_cve-2025-39205 | A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation … | 2025-06-24T13:15:22.470 | 2026-01-30T18:36:38.200 |
| fkie_cve-2026-1260 | Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file,… | 2026-01-22T17:16:30.643 | 2026-01-30T18:33:45.450 |
| fkie_cve-2025-67493 | Homarr is an open-source dashboard. Prior to version 1.45.3, it was possible to craft an input whic… | 2025-12-17T21:16:15.627 | 2026-01-30T18:32:21.217 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-gh9v-9mv6-p8g9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-9wq4-qhqp-553r |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-75wm-q5m3-c399 |
7.5 (3.1)
|
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Conf… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-75hf-52rg-6v76 |
7.3 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-7335-mx3x-jg48 |
5.3 (3.1)
|
Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-5p48-v8rv-8f32 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-4p8r-wx48-qfxr |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-3w43-vh49-x5jp |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-3mf6-3q6q-vqgr |
7.3 (3.1)
|
Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allo… | 2026-01-22T18:30:38Z | 2026-01-27T21:31:42Z |
| ghsa-32qq-wr5q-gh7c |
7.5 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Bu… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-2p99-vc9j-4p2g |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-g7gq-qmh4-jhww |
7.3 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-g3rp-cv32-x284 |
7.3 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-g2pf-4pxg-m8xx |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:35Z | 2026-01-27T21:31:41Z |
| ghsa-fv85-v87w-8wjv |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-62cp-mf64-qf99 |
8.5 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:35Z | 2026-01-27T21:31:41Z |
| ghsa-3fmc-7wj3-j5v5 |
8.6 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-28gq-jr92-xw88 |
8.8 (3.1)
|
Deserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-mwg5-cwh8-88m5 |
9.8 (3.1)
9.3 (4.0)
|
A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthentica… | 2026-01-13T00:30:45Z | 2026-01-27T21:31:40Z |
| ghsa-4hcq-q3qf-q453 |
7.5 (3.1)
8.7 (4.0)
|
Enhancesoft osTicket versions up to and including 1.18.2 contain an arbitrary file read vulnerabili… | 2026-01-12T21:30:34Z | 2026-01-27T21:31:40Z |
| ghsa-xvh8-9h96-57r8 |
8.1 (3.1)
8.6 (4.0)
|
IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user with… | 2026-01-12T15:30:42Z | 2026-01-27T21:31:39Z |
| ghsa-r7v3-974m-576m |
8.1 (3.1)
8.7 (4.0)
|
Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated us… | 2026-01-12T15:30:42Z | 2026-01-27T21:31:39Z |
| ghsa-m5q9-73x5-pf78 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remai… | 2025-10-04T09:30:21Z | 2026-01-27T21:31:36Z |
| ghsa-9px7-88w4-86hp |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to … | 2025-10-01T12:30:31Z | 2026-01-27T21:31:36Z |
| ghsa-xw7x-gch6-cpx7 |
7.1 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate dat… | 2025-10-04T09:30:21Z | 2026-01-27T21:31:35Z |
| ghsa-ww7h-mcjr-5643 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbd_destroy(… | 2025-10-04T09:30:20Z | 2026-01-27T21:31:35Z |
| ghsa-r3wm-5qjq-c8qp |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netde… | 2025-10-04T09:30:21Z | 2026-01-27T21:31:35Z |
| ghsa-pm9c-rrjm-4v2f |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix memory corrupt… | 2025-10-04T09:30:21Z | 2026-01-27T21:31:35Z |
| ghsa-jm8p-ggg3-gfgw |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in a… | 2025-10-04T09:30:20Z | 2026-01-27T21:31:35Z |
| ghsa-cgf5-f6fj-4v5q |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the st… | 2025-10-04T09:30:21Z | 2026-01-27T21:31:35Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-123 |
|
The Python "Flask-Security-Too" package is used for adding security features to your Flas… | flask-security-too | 2021-05-17T18:15:00Z | 2021-08-25T04:30:09.653075Z |
| pysec-2018-66 |
|
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validat… | flask | 2018-08-20T19:31:00Z | 2021-08-25T04:30:09.712538Z |
| pysec-2018-65 |
|
MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /account… | django-crm | 2018-09-05T22:29:00Z | 2021-08-25T04:29:58.134898Z |
| pysec-2017-79 |
|
An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_fi… | django-make-app | 2017-11-10T09:29:00Z | 2021-08-25T04:29:58.287263Z |
| pysec-2019-167 |
|
In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause… | colander | 2019-02-01T09:29:00Z | 2021-08-25T04:29:57.387774Z |
| pysec-2018-64 |
|
In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers … | conference-scheduler-cli | 2018-08-28T19:29:00Z | 2021-08-25T04:29:57.468517Z |
| pysec-2017-78 |
|
An exploitable vulnerability exists in the YAML parsing functionality in config.py in Con… | confire | 2017-11-10T09:29:00Z | 2021-08-25T04:29:57.582065Z |
| pysec-2019-164 |
|
aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference. | aubio | 2019-06-07T17:29:00Z | 2021-08-25T04:29:55.989477Z |
| pysec-2019-163 |
|
aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid… | aubio | 2019-06-07T17:29:00Z | 2021-08-25T04:29:55.933107Z |
| pysec-2019-162 |
|
aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo. | aubio | 2019-06-07T17:29:00Z | 2021-08-25T04:29:55.885441Z |
| pysec-2018-63 |
|
An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyi… | aubio | 2018-07-23T08:29:00Z | 2021-08-25T04:29:55.843499Z |
| pysec-2018-62 |
|
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit i… | aubio | 2018-07-23T08:29:00Z | 2021-08-25T04:29:55.802886Z |
| pysec-2018-61 |
|
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_r… | aubio | 2018-07-23T08:29:00Z | 2021-08-25T04:29:55.761457Z |
| pysec-2017-77 |
|
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101… | aubio | 2017-12-12T01:29:00Z | 2021-08-25T04:29:55.717031Z |
| pysec-2017-76 |
|
A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avc… | aubio | 2017-12-12T01:29:00Z | 2021-08-25T04:29:55.674951Z |
| pysec-2017-75 |
|
In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() … | aubio | 2017-11-29T07:29:00Z | 2021-08-25T04:29:55.630157Z |
| pysec-2018-60 |
|
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging a… | ansible | 2018-11-29T18:29:00Z | 2021-08-25T04:29:51.914778Z |
| pysec-2021-122 |
|
If remote logging is not used, the worker (in the case of CeleryExecutor) or the schedule… | apache-airflow | 2021-08-16T08:15:00Z | 2021-08-24T14:30:45.545655Z |
| pysec-2021-121 |
|
An XML external entity (XXE) injection in PyWPS before 4.5.0 allows an attacker to view f… | pywps | 2021-08-23T01:15:00Z | 2021-08-23T05:26:18.647869Z |
| pysec-2021-120 |
|
Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates… | pywb | 2021-08-18T18:15:00Z | 2021-08-18T20:29:26.806388Z |
| pysec-2021-119 |
|
23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a craft… | yamale | 2021-08-09T21:15:00Z | 2021-08-17T20:30:12.776802Z |
| pysec-2021-118 |
|
The Jupyter notebook is a web-based notebook environment for interactive computing. In af… | notebook | 2021-08-09T21:15:00Z | 2021-08-17T18:40:19.674164Z |
| pysec-2021-117 |
|
This affects the package bikeshed before 3.0.0. This can occur when an untrusted source f… | bikeshed | 2021-08-16T08:15:00Z | 2021-08-16T10:33:00.179750Z |
| pysec-2021-116 |
|
This affects the package bikeshed before 3.0.0. This can occur when an untrusted source f… | bikeshed | 2021-08-16T08:15:00Z | 2021-08-16T10:33:00.121184Z |
| pysec-2015-20 |
|
The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, an… | django | 2015-07-14T17:59:00Z | 2021-08-11T21:51:02.776258Z |
| pysec-2020-215 |
|
Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously c… | notebook | 2020-11-18T22:15:00Z | 2021-08-11T11:14:19.531087Z |
| pysec-2021-115 |
|
The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection vi… | glances | 2021-07-29T18:15:00Z | 2021-07-29T20:29:05.800424Z |
| pysec-2015-29 |
|
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API … | kallithea | 2015-02-16T15:59:00Z | 2021-07-25T23:49:37.203310Z |
| pysec-2014-76 |
|
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed… | zope2 | 2014-11-03T22:55:00Z | 2021-07-25T23:34:59.010626Z |
| pysec-2014-75 |
|
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4… | zope2 | 2014-09-30T14:55:00Z | 2021-07-25T23:34:58.957854Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2021-47226 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.595677Z |
| gsd-2021-47225 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.674954Z |
| gsd-2021-47224 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.701222Z |
| gsd-2021-47223 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.545321Z |
| gsd-2021-47222 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.686011Z |
| gsd-2021-47221 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.673111Z |
| gsd-2021-47220 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.620487Z |
| gsd-2021-47219 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fi… | 2024-04-11T05:05:09.565114Z |
| gsd-2021-47218 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix NULL-po… | 2024-04-11T05:05:09.704022Z |
| gsd-2021-47217 | In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Fix NULL… | 2024-04-11T05:05:09.560295Z |
| gsd-2021-47216 | In the Linux kernel, the following vulnerability has been resolved: scsi: advansys: Fix … | 2024-04-11T05:05:09.535964Z |
| gsd-2021-47215 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix… | 2024-04-11T05:05:09.648402Z |
| gsd-2021-47214 | In the Linux kernel, the following vulnerability has been resolved: hugetlb, userfaultfd… | 2024-04-11T05:05:09.682284Z |
| gsd-2021-47213 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix exposure i… | 2024-04-11T05:05:09.655542Z |
| gsd-2021-47212 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Update err… | 2024-04-11T05:05:09.607738Z |
| gsd-2021-47211 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix… | 2024-04-11T05:05:09.705806Z |
| gsd-2021-47210 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Re… | 2024-04-11T05:05:09.599169Z |
| gsd-2021-47209 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent … | 2024-04-11T05:05:09.539439Z |
| gsd-2021-47208 | The Mojolicious module before 9.11 for Perl has a bug in format detection that can potent… | 2024-04-11T05:05:09.630853Z |
| gsd-2021-4438 | A vulnerability, which was classified as critical, has been found in kyivstarteam react-n… | 2024-04-11T05:04:54.175072Z |
| gsd-2014-125111 | A vulnerability was found in namithjawahar Wp-Insert up to 2.0.8 and classified as proble… | 2024-04-11T05:04:35.509000Z |
| gsd-2020-36829 | The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attack… | 2024-04-11T05:03:42.080285Z |
| gsd-2024-24970 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:29.488616Z |
| gsd-2024-29222 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:28.521848Z |
| gsd-2024-29088 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:28.400560Z |
| gsd-2024-29080 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:28.548607Z |
| gsd-2024-3652 | The Libreswan Project was notified of an issue causing libreswan to restart when using IK… | 2024-04-11T05:03:27.386137Z |
| gsd-2024-3651 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.420421Z |
| gsd-2024-3650 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.165942Z |
| gsd-2024-3649 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.362152Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192734 | Malicious code in elf-stats-aurora-drum-979 (npm) | 2025-12-23T08:05:59Z | 2025-12-24T00:53:16Z |
| mal-2025-192733 | Malicious code in ddxq_cms_tools (npm) | 2025-12-23T08:04:21Z | 2025-12-24T00:53:16Z |
| mal-2025-192732 | Malicious code in ddos-turbo-max (npm) | 2025-12-23T08:04:20Z | 2025-12-24T00:53:16Z |
| mal-2025-192731 | Malicious code in ddos-turbo-ecma (npm) | 2025-12-23T08:04:20Z | 2025-12-24T00:53:16Z |
| mal-2025-192730 | Malicious code in corplib (npm) | 2025-12-23T08:03:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192728 | Malicious code in cookie-mapper (npm) | 2025-12-23T08:03:19Z | 2025-12-24T00:53:16Z |
| mal-2025-192727 | Malicious code in cookie-breaker (npm) | 2025-12-23T08:03:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192726 | Malicious code in cms_comp_popup (npm) | 2025-12-23T08:02:49Z | 2025-12-24T00:53:16Z |
| mal-2025-192725 | Malicious code in chai-pack (npm) | 2025-12-23T08:02:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192723 | Malicious code in chai-as-tested (npm) | 2025-12-23T08:02:13Z | 2025-12-24T00:53:16Z |
| mal-2025-192722 | Malicious code in chai-as-deploy (npm) | 2025-12-23T08:02:05Z | 2025-12-24T00:53:16Z |
| mal-2025-192721 | Malicious code in caterpillar-test (npm) | 2025-12-23T08:01:58Z | 2025-12-24T00:53:16Z |
| mal-2025-192720 | Malicious code in canva-test (npm) | 2025-12-23T08:01:44Z | 2025-12-24T00:53:16Z |
| mal-2025-192719 | Malicious code in calculator-40ed (npm) | 2025-12-23T08:01:36Z | 2025-12-24T00:53:16Z |
| mal-2025-192718 | Malicious code in bootstrap-setflexcolor (npm) | 2025-12-23T08:01:19Z | 2025-12-24T00:53:16Z |
| mal-2025-192717 | Malicious code in bootstrap-setcolors (npm) | 2025-12-23T08:01:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192716 | Malicious code in bootstrap-setcolor (npm) | 2025-12-23T08:01:17Z | 2025-12-24T00:53:16Z |
| mal-2025-192715 | Malicious code in booms-ai (npm) | 2025-12-23T08:01:16Z | 2025-12-24T00:53:16Z |
| mal-2025-192714 | Malicious code in bignumberx (npm) | 2025-12-23T08:00:59Z | 2025-12-24T00:53:16Z |
| mal-2025-192713 | Malicious code in baidu-src-test4 (npm) | 2025-12-23T08:00:16Z | 2025-12-24T00:53:16Z |
| MAL-2025-192795 | Malicious code in elf-stats-whimsical-satchel-586 (npm) | 2025-12-23T08:11:46Z | 2025-12-24T00:53:16Z |
| MAL-2025-192794 | Malicious code in elf-stats-whimsical-cocoa-613 (npm) | 2025-12-23T08:11:33Z | 2025-12-24T00:53:16Z |
| MAL-2025-192793 | Malicious code in elf-stats-whimsical-cocoa-243 (npm) | 2025-12-23T08:11:32Z | 2025-12-24T00:53:16Z |
| MAL-2025-192792 | Malicious code in elf-stats-velvet-sparkler-555 (npm) | 2025-12-23T08:11:31Z | 2025-12-24T00:53:16Z |
| MAL-2025-192791 | Malicious code in elf-stats-velvet-bow-244 (npm) | 2025-12-23T08:11:29Z | 2025-12-24T00:53:16Z |
| MAL-2025-192790 | Malicious code in elf-stats-sprucey-giftbox-118 (npm) | 2025-12-23T08:10:50Z | 2025-12-24T00:53:16Z |
| MAL-2025-192789 | Malicious code in elf-stats-sprucey-cookie-492 (npm) | 2025-12-23T08:10:49Z | 2025-12-24T00:53:16Z |
| MAL-2025-192788 | Malicious code in elf-stats-sparkly-train-831 (npm) | 2025-12-23T08:10:48Z | 2025-12-24T00:53:16Z |
| MAL-2025-192787 | Malicious code in elf-stats-sparkly-toolkit-703 (npm) | 2025-12-23T08:10:46Z | 2025-12-24T00:53:16Z |
| MAL-2025-192786 | Malicious code in elf-stats-sparkly-sled-484 (npm) | 2025-12-23T08:10:45Z | 2025-12-24T00:53:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0504 | HCL BigFix WebUI Applications: Mehrere Schwachstellen | 2025-03-06T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0502 | Docker Desktop: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-06T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0498 | python-crypto: Schwachstelle ermöglicht Offenlegung von Informationen | 2018-02-15T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0487 | Kibana: Schwachstelle ermöglicht Codeausführung | 2025-03-04T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0480 | VMware ESXi: Mehrere Schwachstellen | 2025-03-03T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0449 | GitLab: Mehrere Schwachstellen | 2025-02-26T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2024-3437 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-11-12T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2023-2725 | Squid: Mehrere Schwachstellen | 2023-10-22T22:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2023-1947 | Golang Go: Schwachstelle ermöglicht Denial of Service | 2023-08-02T22:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0494 | Axis Axis OS: Mehrere Schwachstellen | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0493 | Laravel Framework: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0491 | Cisco TelePresence Management Suite: Schwachstelle ermöglicht Cross-Site Scripting | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0490 | Cisco Secure Client: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0489 | Jenkins: Mehrere Schwachstellen | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0488 | IBM FileNet Content Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-05T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0354 | GitLab: Mehrere Schwachstellen | 2025-02-11T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0209 | Moxa Switch: Schwachstelle ermöglicht Denial of Service | 2025-01-28T23:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2024-3066 | Redis: Mehrere Schwachstellen | 2024-10-03T22:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2024-1856 | IBM WebSphere Application Server: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2024-08-14T22:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2024-1678 | Apache CXF: Mehrere Schwachstellen | 2024-07-18T22:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2024-1637 | Oracle Fusion Middleware: Mehrere Schwachstellen | 2024-07-16T22:00:00.000+00:00 | 2025-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0484 | Commvault Backup & Recovery: Schwachstelle ermöglicht Codeausführung | 2025-03-04T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0481 | Pixel Patchday March 2025: Mehrere Schwachstellen | 2025-03-04T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0470 | vim (tar.vim plugin): Schwachstelle ermöglicht Codeausführung | 2025-03-02T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3563 | Jenkins: Mehrere Schwachstellen | 2024-11-27T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3456 | Jenkins Plugins: Mehrere Schwachstellen | 2024-11-13T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2024-0500 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-02-27T23:00:00.000+00:00 | 2025-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0479 | PostgreSQL: Mehrere Schwachstellen | 2015-05-25T22:00:00.000+00:00 | 2025-03-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0478 | Red Hat Enterprise Linux (Raptor2): Mehrere Schwachstellen ermöglichen Denial of Service | 2021-05-18T22:00:00.000+00:00 | 2025-03-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0476 | ESRI ArcGIS: Mehrere Schwachstellen | 2025-03-03T23:00:00.000+00:00 | 2025-03-03T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhea-2024:6787 | Red Hat Enhancement Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.14.0 | 2024-09-18T18:30:16+00:00 | 2026-02-03T21:12:07+00:00 |
| rhea-2024:11005 | Red Hat Enhancement Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.15.0 | 2024-12-12T14:32:14+00:00 | 2026-02-03T21:12:04+00:00 |
| rhea-2023:7493 | Red Hat Enhancement Advisory: OpenShift sandboxed containers 1.5.0 update | 2023-11-27T11:44:10+00:00 | 2026-02-03T21:12:04+00:00 |
| rhba-2024:1246 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.4.4 bug fixes | 2024-03-11T18:16:03+00:00 | 2026-02-03T21:12:02+00:00 |
| rhba-2024:1127 | Red Hat Bug Fix Advisory: libssh bug fix update | 2024-03-05T18:22:05+00:00 | 2026-02-03T21:12:02+00:00 |
| rhba-2024:1136 | Red Hat Bug Fix Advisory: podman bug fix update | 2024-03-05T20:05:51+00:00 | 2026-02-03T21:12:01+00:00 |
| rhba-2023:4315 | Red Hat Bug Fix Advisory: Red Hat OpenShift Pipelines 1.10.5 release | 2023-07-27T18:51:06+00:00 | 2026-02-03T21:11:51+00:00 |
| rhba-2023:3611 | Red Hat Bug Fix Advisory: Release of Bug Advisories for the OpenShift Jenkins and Jenkins agent base image | 2023-06-15T00:29:54+00:00 | 2026-02-03T21:11:50+00:00 |
| rhba-2023:2181 | Red Hat Bug Fix Advisory: delve, golang, and go-toolset bug fix and enhancement update | 2023-05-09T09:51:23+00:00 | 2026-02-03T21:11:49+00:00 |
| rhba-2023:1649 | Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.35 packages and security update | 2023-04-12T04:51:26+00:00 | 2026-02-03T21:11:48+00:00 |
| rhba-2023:0568 | Red Hat Bug Fix Advisory: OpenShift Container Platform 4.12.2 packages update | 2023-02-08T04:26:39+00:00 | 2026-02-03T21:11:48+00:00 |
| rhba-2022:5876 | Red Hat Bug Fix Advisory: OpenShift Container Platform 4.10.26 extras update | 2022-08-09T02:28:26+00:00 | 2026-02-03T21:11:46+00:00 |
| rhsa-2026:1815 | Red Hat Security Advisory: openssh security update | 2026-02-03T13:31:42+00:00 | 2026-02-03T20:56:58+00:00 |
| rhsa-2026:1790 | Red Hat Security Advisory: openssh security update | 2026-02-03T07:04:31+00:00 | 2026-02-03T20:56:58+00:00 |
| rhsa-2026:1678 | Red Hat Security Advisory: openssh security update | 2026-02-02T08:15:22+00:00 | 2026-02-03T20:56:57+00:00 |
| rhsa-2026:0976 | Red Hat Security Advisory: openssh security update | 2026-01-22T09:20:02+00:00 | 2026-02-03T20:56:55+00:00 |
| rhsa-2026:0693 | Red Hat Security Advisory: openssh security update | 2026-01-15T11:56:04+00:00 | 2026-02-03T20:56:55+00:00 |
| rhsa-2026:0435 | Red Hat Security Advisory: tar security update | 2026-01-12T02:39:28+00:00 | 2026-02-03T20:56:55+00:00 |
| rhsa-2026:0434 | Red Hat Security Advisory: tar security update | 2026-01-12T02:30:08+00:00 | 2026-02-03T20:56:54+00:00 |
| rhsa-2026:0355 | Red Hat Security Advisory: python3.12 security update | 2026-01-08T14:45:29+00:00 | 2026-02-03T20:56:53+00:00 |
| rhsa-2026:0354 | Red Hat Security Advisory: python3.12 security update | 2026-01-08T14:33:54+00:00 | 2026-02-03T20:56:53+00:00 |
| rhsa-2026:0353 | Red Hat Security Advisory: python3.12 security update | 2026-01-08T13:54:19+00:00 | 2026-02-03T20:56:53+00:00 |
| rhsa-2026:0135 | Red Hat Security Advisory: tar security update | 2026-01-06T13:36:23+00:00 | 2026-02-03T20:56:53+00:00 |
| rhsa-2026:0067 | Red Hat Security Advisory: tar security update | 2026-01-05T19:01:10+00:00 | 2026-02-03T20:56:52+00:00 |
| rhsa-2026:0002 | Red Hat Security Advisory: tar security update | 2026-01-05T00:51:42+00:00 | 2026-02-03T20:56:50+00:00 |
| rhsa-2025:23940 | Red Hat Security Advisory: python3.12 security update | 2025-12-22T16:40:10+00:00 | 2026-02-03T20:56:50+00:00 |
| rhsa-2025:23481 | Red Hat Security Advisory: openssh security update | 2025-12-17T17:42:18+00:00 | 2026-02-03T20:56:49+00:00 |
| rhsa-2025:23480 | Red Hat Security Advisory: openssh security update | 2025-12-17T16:48:13+00:00 | 2026-02-03T20:56:48+00:00 |
| rhsa-2025:23479 | Red Hat Security Advisory: openssh security update | 2025-12-17T14:16:13+00:00 | 2026-02-03T20:56:48+00:00 |
| rhsa-2025:23323 | Red Hat Security Advisory: python3.12 security update | 2025-12-18T13:19:52+00:00 | 2026-02-03T20:56:45+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsma-22-095-01 | LifePoint Informatics Patient Portal | 2022-04-05T00:00:00.000000Z | 2022-04-05T00:00:00.000000Z |
| icsma-21-187-01 | Philips Vue PACS (Update B) | 2021-07-06T00:00:00.000000Z | 2022-04-05T00:00:00.000000Z |
| icsa-22-095-02 | Johnson Controls Metasys | 2022-04-05T00:00:00.000000Z | 2022-04-05T00:00:00.000000Z |
| icsa-22-095-01 | Rockwell Automation ISaGRAF | 2022-04-05T00:00:00.000000Z | 2022-04-05T00:00:00.000000Z |
| icsa-22-090-07 | Rockwell Automation Studio 5000 Logix Designer | 2022-03-31T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsa-22-090-06 | General Electric Renewable Energy MDS Radios | 2022-03-31T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsa-22-090-05 | Rockwell Automation Logix Controllers | 2022-03-31T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsa-22-090-03 | Fuji Electric Alpha5 | 2022-03-31T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsa-22-090-02 | Hitachi Energy e-mesh EMS | 2022-03-31T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsa-22-090-01 | Schneider Electric SCADAPack Workbench | 2022-03-31T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsa-22-067-01 | PTC Axeda agent and Axeda Desktop Server (Update C) | 2022-03-08T00:00:00.000000Z | 2022-03-31T00:00:00.000000Z |
| icsma-22-088-01 | Philips e-Alert | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-088-04 | Modbus Tools Modbus Slave | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-088-03 | Hitachi Energy LinkOne WebView | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-088-02 | Omron CX-Position | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-088-01 | Rockwell Automation ISaGRAF | 2022-03-29T00:00:00.000000Z | 2022-03-29T00:00:00.000000Z |
| icsa-22-083-02 | mySCADA myPRO | 2022-03-24T00:00:00.000000Z | 2022-03-24T00:00:00.000000Z |
| icsa-22-083-01 | Yokogawa CENTUM and Exaopc | 2022-03-24T00:00:00.000000Z | 2022-03-24T00:00:00.000000Z |
| icsa-21-238-03 | Delta Electronics DIAEnergie (Update C) | 2021-08-26T00:00:00.000000Z | 2022-03-22T00:00:00.000000Z |
| icsa-22-074-01 | ABB OPC Server for AC 800M | 2022-03-15T00:00:00.000000Z | 2022-03-15T00:00:00.000000Z |
| icsa-21-315-09 | Siemens Climatix POL909 (Update A) | 2021-11-11T00:00:00.000000Z | 2022-03-10T00:00:00.000000Z |
| icsa-20-203-01 | Wibu-Systems CodeMeter (Update F) | 2020-08-20T00:00:00.000000Z | 2022-03-10T00:00:00.000000Z |
| icsa-22-067-02 | AVEVA System Platform | 2022-03-08T00:00:00.000000Z | 2022-03-08T00:00:00.000000Z |
| icsa-22-034-01 | Sensormatic PowerManage (Update A) | 2022-02-03T00:00:00.000000Z | 2022-03-08T00:00:00.000000Z |
| icsa-22-063-01 | Trailer Power Line Communications (PLC) J2497 | 2022-03-04T00:00:00.000000Z | 2022-03-04T00:00:00.000000Z |
| icsma-22-062-02 | BD Viper LT | 2022-03-03T00:00:00.000000Z | 2022-03-03T00:00:00.000000Z |
| icsma-22-062-01 | BD Pyxis | 2022-03-03T00:00:00.000000Z | 2022-03-03T00:00:00.000000Z |
| icsa-22-062-01 | IPCOMM ipDIO | 2022-03-03T00:00:00.000000Z | 2022-03-03T00:00:00.000000Z |
| icsa-22-055-03 | Schneider Electric Easergy P5 and P3 | 2022-02-24T00:00:00.000000Z | 2022-02-24T00:00:00.000000Z |
| icsa-22-055-02 | Mitsubishi Electric EcoWebServerIII | 2022-02-24T00:00:00.000000Z | 2022-02-24T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ipsla-jw2djmsv | Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ipsla-jw2DJmSv | Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iox-usb-guestshell-wmevscdj | Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iox-usb-guestshell-WmevScDj | Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-wlc-fnfv9-evraqpnx | Cisco IOS XE Software for Catalyst 9800 Series and Cisco AireOS Software for Cisco WLC Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-wlc-fnfv9-EvrAQpNX | Cisco IOS XE Software for Catalyst 9800 Series and Cisco AireOS Software for Cisco WLC Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-umbrella-dos-t2qmux37 | Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-umbrella-dos-t2QMUX37 | Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-rsp3-rce-jvhg8z7c | Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-rsp3-rce-jVHg8Z7c | Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-isdn-q931-dos-67euzbtf | Cisco IOS and IOS XE Software ISDN Q.931 Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-isdn-q931-dos-67eUZBTf | Cisco IOS and IOS XE Software ISDN Q.931 Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-iox-app-host-mczcnsbt | Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-iox-app-host-mcZcnsBt | Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-ewlc-snmp-dos-wnkedg9k | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-dhcp-dos-jsckx43h | Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-dhcp-dos-JSCKX43h | Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-ctbypass-7qhafhkk | Cisco IOS XE Software Consent Token Bypass Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-ctbypass-7QHAfHkK | Cisco IOS XE Software Consent Token Bypass Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-cmdinj-2mzhjm6k | Cisco IOS XE Software Command Injection Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-cmdinj-2MzhjM6K | Cisco IOS XE Software Command Injection Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ios-xe-webui-multi-vftkk7yr | Cisco IOS XE Software Web Management Framework Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ios-xe-webui-multi-vfTkk7yr | Cisco IOS XE Software Web Management Framework Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ios-webui-priv-esc-k8zvewm | Cisco IOS XE Software Privilege Escalation Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ios-webui-priv-esc-K8zvEWM | Cisco IOS XE Software Privilege Escalation Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ios-lua-rce-7vejx4f | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ios-lua-rce-7VeJX4f | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ios-lpwa-access-cxsd7pra | Cisco IOS Software for Cisco Industrial Routers Virtual-LPWA Unauthorized Access Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ios-lpwa-access-cXsD7PRA | Cisco IOS Software for Cisco Industrial Routers Virtual-LPWA Unauthorized Access Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38526 | ice: add NULL check in eswitch lag check | 2025-08-02T00:00:00.000Z | 2025-09-04T00:47:42.000Z |
| msrc_cve-2023-52632 | drm/amdkfd: Fix lock dependency warning with srcu | 2024-04-02T07:00:00.000Z | 2025-09-04T00:46:27.000Z |
| msrc_cve-2025-38546 | atm: clip: Fix memory leak of struct clip_vcc. | 2025-08-02T00:00:00.000Z | 2025-09-04T00:44:48.000Z |
| msrc_cve-2022-49484 | mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector | 2025-02-02T00:00:00.000Z | 2025-09-04T00:44:03.000Z |
| msrc_cve-2025-38472 | netfilter: nf_conntrack: fix crash due to removal of uninitialised entry | 2025-07-02T00:00:00.000Z | 2025-09-04T00:44:01.000Z |
| msrc_cve-2022-35409 | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function. | 2022-07-02T00:00:00.000Z | 2025-09-04T00:42:29.000Z |
| msrc_cve-2025-38540 | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | 2025-08-02T00:00:00.000Z | 2025-09-04T00:41:42.000Z |
| msrc_cve-2024-50289 | media: av7110: fix a spectre vulnerability | 2024-11-02T00:00:00.000Z | 2025-09-04T00:41:38.000Z |
| msrc_cve-2025-48964 | ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero). | 2025-07-02T00:00:00.000Z | 2025-09-04T00:40:23.000Z |
| msrc_cve-2023-52905 | octeontx2-pf: Fix resource leakage in VF driver unbind | 2024-08-02T00:00:00.000Z | 2025-09-04T00:40:18.000Z |
| msrc_cve-2025-1180 | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | 2025-02-02T00:00:00.000Z | 2025-09-04T00:39:36.000Z |
| msrc_cve-2025-38532 | net: libwx: properly reset Rx ring descriptor | 2025-08-02T00:00:00.000Z | 2025-09-04T00:39:05.000Z |
| msrc_cve-2023-29400 | Improper handling of empty HTML attributes in html/template | 2023-05-01T00:00:00.000Z | 2025-09-04T00:39:00.000Z |
| msrc_cve-2019-16910 | Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.) | 2019-09-02T00:00:00.000Z | 2025-09-04T00:38:18.000Z |
| msrc_cve-2024-26726 | btrfs: don't drop extent_map for free space inode on write error | 2024-04-02T07:00:00.000Z | 2025-09-04T00:37:57.000Z |
| msrc_cve-2025-1371 | GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference | 2025-02-02T00:00:00.000Z | 2025-09-04T00:37:33.000Z |
| msrc_cve-2023-4580 | Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. | 2023-09-01T00:00:00.000Z | 2025-09-04T00:36:18.000Z |
| msrc_cve-2025-38550 | ipv6: mcast: Delay put pmc->idev in mld_del_delrec() | 2025-08-02T00:00:00.000Z | 2025-09-04T00:35:43.000Z |
| msrc_cve-2022-49476 | mt76: mt7921: fix kernel crash at mt7921_pci_remove | 2025-02-02T00:00:00.000Z | 2025-09-04T00:34:18.000Z |
| msrc_cve-2025-38535 | phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode | 2025-08-02T00:00:00.000Z | 2025-09-04T00:31:56.000Z |
| msrc_cve-2023-52621 | bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers | 2024-03-02T08:00:00.000Z | 2025-09-04T00:31:29.000Z |
| msrc_cve-2024-24783 | Verify panics on certificates with an unknown public key algorithm in crypto/x509 | 2024-03-02T08:00:00.000Z | 2025-09-04T00:29:44.000Z |
| msrc_cve-2024-5642 | Buffer overread when using an empty list with SSLContext.set_npn_protocols() | 2024-06-02T07:00:00.000Z | 2025-09-04T00:29:08.000Z |
| msrc_cve-2025-38552 | mptcp: plug races between subflow fail and subflow creation | 2025-08-02T00:00:00.000Z | 2025-09-04T00:28:50.000Z |
| msrc_cve-2023-0778 | A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system. | 2023-03-10T00:00:00.000Z | 2025-09-04T00:28:46.000Z |
| msrc_cve-2023-52939 | mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() | 2025-03-02T00:00:00.000Z | 2025-09-04T00:26:59.000Z |
| msrc_cve-2022-21235 | Command Injection | 2022-04-02T00:00:00.000Z | 2025-09-04T00:26:21.000Z |
| msrc_cve-2025-23130 | f2fs: fix to avoid panic once fallocation fails for pinfile | 2025-04-02T00:00:00.000Z | 2025-09-04T00:26:15.000Z |
| msrc_cve-2024-0752 | A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122. | 2024-01-01T08:00:00.000Z | 2025-09-04T00:25:16.000Z |
| msrc_cve-2015-7511 | Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations. | 2016-04-02T00:00:00.000Z | 2025-09-04T00:25:12.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13844-1 | libQt6Concurrent6-6.7.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13843-1 | pgadmin4-8.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13842-1 | openssh-9.6p1-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13841-1 | kubernetes1.29-apiserver-1.29.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13840-1 | kubernetes1.28-apiserver-1.28.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13839-1 | kubernetes1.27-apiserver-1.27.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13838-1 | kubernetes1.26-apiserver-1.26.15-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13837-1 | forgejo-1.21.10+0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13836-1 | etcd-for-k8s1.29-3.5.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13835-1 | etcd-for-k8s1.28-3.5.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13834-1 | etcd-for-k8s1.27-3.5.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13833-1 | tomcat10-10.1.20-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13832-1 | tomcat-9.0.87-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13831-1 | grafana-10.3.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13830-1 | system-user-velociraptor-1.0.0-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13829-1 | xwayland-23.2.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13828-1 | xorg-x11-server-21.1.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13827-1 | python310-Pillow-10.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13826-1 | podman-5.0.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13825-1 | libnghttp2-14-1.61.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13824-1 | kubeseal-0.26.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13823-1 | go1.22-1.22.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13822-1 | go1.21-1.21.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13821-1 | python310-pyzmq-25.1.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13820-1 | python310-numpy-1.26.2-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13819-1 | python310-cryptography-42.0.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13818-1 | libuv-devel-1.48.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13817-1 | kernel-devel-6.8.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13816-1 | freerdp2-devel-2.11.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13815-1 | freerdp-3.4.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2024-2829 | Inefficient Regular Expression Complexity in GitLab | 2024-04-27T07:19:44.538Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2818 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-04-03T10:50:50.059Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2800 | Uncontrolled Resource Consumption in GitLab | 2024-08-10T07:28:58.601Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2743 | Incorrect Authorization in GitLab | 2024-09-14T07:17:52.830Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2651 | Inefficient Regular Expression Complexity in GitLab | 2024-05-24T07:22:10.554Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2454 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-05-24T07:22:42.950Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2434 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab | 2024-04-27T07:20:41.642Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2279 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-04-16T07:19:14.481Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2191 | Improper Access Control in GitLab | 2024-06-28T07:25:13.983Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2177 | Improper Restriction of Rendered UI Layers or Frames in GitLab | 2024-07-11T07:25:19.401Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1963 | Uncontrolled Resource Consumption in GitLab | 2024-06-17T07:23:01.731Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1947 | Improper Handling of Highly Compressed Data (Data Amplification) in GitLab | 2024-05-29T07:25:38.659Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1816 | Uncontrolled Resource Consumption in GitLab | 2024-06-28T07:25:58.286Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1736 | Uncontrolled Resource Consumption in GitLab | 2024-06-17T07:23:34.137Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1525 | Authentication Bypass Using an Alternate Path or Channel in GitLab | 2024-03-06T10:52:18.885Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1495 | Uncontrolled Resource Consumption in GitLab | 2024-06-17T07:24:07.037Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1493 | Uncontrolled Resource Consumption in GitLab | 2024-06-28T07:26:59.194Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1451 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-03-06T10:52:28.168Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1347 | Authentication Bypass by Spoofing in GitLab | 2024-04-27T07:22:08.128Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-13054 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-03-15T07:41:20.300Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1299 | Privilege Chaining in GitLab | 2024-03-12T08:24:19.293Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-12570 | Privilege Context Switching Error in GitLab | 2024-12-16T07:23:37.577Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1250 | Privilege Chaining in GitLab | 2024-03-06T10:52:40.993Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-12431 | Missing Authorization in GitLab | 2025-01-10T19:24:59.289Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-12379 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-02-17T19:27:19.016Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-12292 | Insertion of Sensitive Information into Log File in GitLab | 2024-12-16T07:23:47.892Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-12244 | Missing Authorization in GitLab | 2025-04-26T06:28:03.620Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-11828 | Inefficient Algorithmic Complexity in GitLab | 2024-11-28T19:21:48.331Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-11669 | Incorrect Authorization in GitLab | 2024-11-28T19:21:54.715Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-11668 | Insufficient Session Expiration in GitLab | 2024-11-28T19:22:00.426Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202403-3007 | IBM Security Verify Access 10.0.6 could disclose sensitive snapshot information due to mi… | 2024-04-18T13:29:42.346000Z |
| var-202311-2324 | Memory corruption while processing audio effects. AQT1000 firmware, AR8035 firmware, fast… | 2024-04-18T13:29:09.908000Z |
| var-202012-1391 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web S… | 2024-04-18T13:28:51.385000Z |
| var-202309-2506 | Memory corruption in Audio during playback session with audio effects enabled. APQ8096AU … | 2024-04-18T13:28:42.410000Z |
| var-201903-0642 | Remote file inclusion allows an attacker to craft a specific URL referencing the Schneide… | 2024-04-18T13:27:50.292000Z |
| var-201903-0624 | Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL… | 2024-04-18T13:27:50.248000Z |
| var-202012-1384 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in t… | 2024-04-18T13:27:47.342000Z |
| var-202302-0689 | Memory corruption in User Identity Module due to integer overflow to buffer overflow when… | 2024-04-18T13:27:39.659000Z |
| var-202310-2661 | Weak configuration in Automotive while VM is processing a listener request from TEE. APQ8… | 2024-04-18T13:27:38.027000Z |
| var-202311-1596 | Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the V… | 2024-04-18T13:27:37.917000Z |
| var-201706-0453 | A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0… | 2024-04-18T13:26:50.977000Z |
| var-201804-1269 | Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantu… | 2024-04-18T13:26:49.928000Z |
| var-201804-1268 | Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modic… | 2024-04-18T13:26:49.880000Z |
| var-201905-0035 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists whic… | 2024-04-18T13:26:48.716000Z |
| var-202311-1603 | Information disclosure in IOE Firmware while handling WMI command. AQT1000 firmware, AR80… | 2024-04-18T13:26:40.678000Z |
| var-202104-0486 | Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier… | 2024-04-18T13:26:11.232000Z |
| var-202104-0485 | Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS c… | 2024-04-18T13:26:11.256000Z |
| var-202104-0483 | Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware… | 2024-04-18T13:26:11.210000Z |
| var-202104-0482 | NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware … | 2024-04-18T13:26:11.167000Z |
| var-201905-1033 | CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50,… | 2024-04-18T13:22:57.061000Z |
| var-202310-2426 | Information Disclosure in data Modem while parsing an FMTP line in an SDP message. 315 5g… | 2024-04-18T13:22:45.128000Z |
| var-201804-1338 | A vulnerability exists in the web services to process SOAP requests in Schneider Electric… | 2024-04-18T13:20:53.473000Z |
| var-201804-1337 | A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, M… | 2024-04-18T13:20:53.513000Z |
| var-201804-1336 | An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modico… | 2024-04-18T13:20:53.593000Z |
| var-201804-1335 | A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Prem… | 2024-04-18T13:20:53.553000Z |
| var-202302-0627 | Information disclosure due to buffer over-read in WLAN while parsing NMF frame. plural Qu… | 2024-04-18T13:19:11.026000Z |
| var-202311-1602 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. CSRB31024 … | 2024-04-18T13:19:04.921000Z |
| var-202104-0310 | Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3… | 2024-04-18T13:16:59.290000Z |
| var-201505-0274 | The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code… | 2024-04-18T13:16:59.233000Z |
| var-202309-2499 | Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. AQ… | 2024-04-18T13:16:22.059000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-000078 | A-Form vulnerable in restricting access | 2011-10-11T09:08+09:00 | 2011-10-11T09:08+09:00 |
| jvndb-2011-000077 | Enkai-kun vulnerable to cross-site scripting | 2011-10-11T09:00+09:00 | 2011-10-11T09:00+09:00 |
| jvndb-2011-000066 | BaserCMS vulnerable to access restriction | 2011-09-30T18:45+09:00 | 2011-09-30T18:45+09:00 |
| jvndb-2011-000065 | BaserCMS vulnerable to cross-site scripting | 2011-09-30T18:39+09:00 | 2011-09-30T18:39+09:00 |
| jvndb-2011-000074 | SemanticScuttle vulnerable to cross-site scripting | 2011-09-16T18:08+09:00 | 2011-09-16T18:08+09:00 |
| jvndb-2011-000073 | Megalith vulnerable to authentication bypass | 2011-09-12T09:19+09:00 | 2011-09-12T09:19+09:00 |
| jvndb-2011-000072 | GTK+ may insecurely load dynamic libraries | 2011-09-02T19:26+09:00 | 2011-09-02T19:26+09:00 |
| jvndb-2011-000071 | Juniper Networks IDP ACM vulnerable to cross-site scripting | 2011-09-02T19:22+09:00 | 2011-09-02T19:22+09:00 |
| jvndb-2011-000070 | Sage vulnerable to arbitrary script execution | 2011-09-02T19:19+09:00 | 2011-09-02T19:19+09:00 |
| jvndb-2011-000069 | Sage vulnerable to arbitrary script execution | 2011-09-02T19:14+09:00 | 2011-09-02T19:14+09:00 |
| jvndb-2011-000068 | Multiple vulnerabilities in Phorum | 2011-09-02T19:11+09:00 | 2011-09-02T19:11+09:00 |
| jvndb-2011-000067 | WebsiteBaker vulnerable to cross-site scripting | 2011-08-26T15:50+09:00 | 2011-08-26T15:50+09:00 |
| jvndb-2011-000064 | Microsoft Windows XP vulnerable to denial-of-service (DoS) | 2011-08-19T16:32+09:00 | 2011-08-19T16:32+09:00 |
| jvndb-2011-000063 | Aipo vulnerable to SQL injection | 2011-08-16T16:44+09:00 | 2011-08-16T16:44+09:00 |
| jvndb-2011-000062 | Aipo vulnerable to cross-site request forgery | 2011-08-16T16:41+09:00 | 2011-08-16T16:41+09:00 |
| jvndb-2011-000061 | Internet Explorer window display vulnerability | 2011-08-12T14:06+09:00 | 2011-08-12T14:06+09:00 |
| jvndb-2011-000060 | Windows URL Protocol Handler may insecurely load executable files | 2011-08-10T17:17+09:00 | 2011-08-10T17:17+09:00 |
| jvndb-2011-001928 | JP1/Performance Management - Web Console Cross-Site Scripting Vulnerability | 2011-08-09T10:11+09:00 | 2011-08-09T10:11+09:00 |
| jvndb-2011-001927 | Arbitrary Code Execution Vulnerability in HiRDB Control Manager | 2011-08-09T10:10+09:00 | 2011-08-09T10:10+09:00 |
| jvndb-2011-000059 | Mozilla Firefox vulnerable to cross-site scripting | 2011-07-28T16:31+09:00 | 2011-07-28T16:31+09:00 |
| jvndb-2011-000058 | Mozilla Firefox vulnerable to cross-site scripting | 2011-07-28T16:29+09:00 | 2011-07-28T16:29+09:00 |
| jvndb-2011-000057 | Mozilla Firefox vulnerable to denial-of-service (DoS) | 2011-07-28T16:27+09:00 | 2011-07-28T16:27+09:00 |
| jvndb-2011-000055 | Mozilla Firefox vulnerability in processing content-length header | 2011-07-28T16:24+09:00 | 2011-07-28T16:24+09:00 |
| jvndb-2011-000056 | Plone vulnerable to cross-site scripting | 2011-07-27T16:17+09:00 | 2011-07-27T16:17+09:00 |
| jvndb-2009-002069 | Oracle iPlanet Web Server information disclosure vulnerability | 2011-07-25T18:06+09:00 | 2011-07-25T18:06+09:00 |
| jvndb-2011-000051 | ASP.NET vulnerable to cross-site scripting | 2011-07-15T16:32+09:00 | 2011-07-15T16:32+09:00 |
| jvndb-2011-000054 | Google Search Appliance vulnerable to cross-site scripting | 2011-07-15T16:27+09:00 | 2011-07-15T16:27+09:00 |
| jvndb-2011-000052 | Internet Explorer vulnerable to cross-site scripting | 2011-07-08T18:29+09:00 | 2011-07-08T18:29+09:00 |
| jvndb-2011-000050 | XnView may insecurely load executable files | 2011-07-05T16:56+09:00 | 2011-07-05T16:56+09:00 |
| jvndb-2011-000049 | Opera vulnerable to denial-of-service (DoS) | 2011-07-05T16:54+09:00 | 2011-07-05T16:54+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01880-1 | Security update for glib2 | 2025-06-11T05:41:42Z | 2025-06-11T05:41:42Z |
| suse-su-2025:01879-1 | Security update for nodejs22 | 2025-06-11T05:41:29Z | 2025-06-11T05:41:29Z |
| suse-su-2025:01878-1 | Security update for nodejs22 | 2025-06-11T05:41:14Z | 2025-06-11T05:41:14Z |
| suse-su-2025:01877-1 | Security update for python3 | 2025-06-11T05:41:08Z | 2025-06-11T05:41:08Z |
| suse-su-2025:01875-1 | Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5) | 2025-06-10T23:03:54Z | 2025-06-10T23:03:54Z |
| suse-su-2025:01873-1 | Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) | 2025-06-10T21:04:03Z | 2025-06-10T21:04:03Z |
| suse-su-2025:01869-1 | Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) | 2025-06-10T18:33:35Z | 2025-06-10T18:33:35Z |
| suse-su-2025:01868-1 | Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) | 2025-06-10T15:33:31Z | 2025-06-10T15:33:31Z |
| suse-su-2025:01864-1 | Security update for libsoup2 | 2025-06-10T14:05:01Z | 2025-06-10T14:05:01Z |
| suse-su-2025:20399-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-06-10T13:34:03Z | 2025-06-10T13:34:03Z |
| suse-su-2025:20389-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-06-10T13:34:03Z | 2025-06-10T13:34:03Z |
| suse-su-2025:20388-1 | Security update for kernel-livepatch-MICRO-6-0_Update_3 | 2025-06-10T13:19:44Z | 2025-06-10T13:19:44Z |
| suse-su-2025:20398-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-06-10T13:19:33Z | 2025-06-10T13:19:33Z |
| suse-su-2025:20387-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-06-10T13:19:33Z | 2025-06-10T13:19:33Z |
| suse-su-2025:20397-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-06-10T13:19:24Z | 2025-06-10T13:19:24Z |
| suse-su-2025:20386-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-06-10T13:19:24Z | 2025-06-10T13:19:24Z |
| suse-su-2025:20395-1 | Security update for sqlite3 | 2025-06-10T11:50:23Z | 2025-06-10T11:50:23Z |
| suse-su-2025:20385-1 | Security update for docker-compose | 2025-06-10T11:31:50Z | 2025-06-10T11:31:50Z |
| suse-su-2025:20384-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-06-10T11:23:02Z | 2025-06-10T11:23:02Z |
| suse-su-2025:20402-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-06-10T11:22:13Z | 2025-06-10T11:22:13Z |
| suse-su-2025:20383-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-06-10T11:22:13Z | 2025-06-10T11:22:13Z |
| suse-su-2025:20401-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-06-10T11:22:04Z | 2025-06-10T11:22:04Z |
| suse-su-2025:20382-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-06-10T11:22:04Z | 2025-06-10T11:22:04Z |
| suse-su-2025:20400-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-06-10T11:17:39Z | 2025-06-10T11:17:39Z |
| suse-su-2025:20381-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-06-10T11:17:39Z | 2025-06-10T11:17:39Z |
| suse-su-2025:01639-2 | Security update for libwebp | 2025-06-10T08:12:48Z | 2025-06-10T08:12:48Z |
| suse-su-2025:01860-1 | Security update for xen | 2025-06-10T08:11:57Z | 2025-06-10T08:11:57Z |
| suse-su-2025:01853-1 | Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP6) | 2025-06-10T05:33:35Z | 2025-06-10T05:33:35Z |
| suse-su-2025:01851-1 | Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6) | 2025-06-10T05:33:27Z | 2025-06-10T05:33:27Z |
| suse-su-2025:01850-1 | Security update for xen | 2025-06-10T01:33:36Z | 2025-06-10T01:33:36Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-26957 | Tenda O3 formsetDmzInfo函数缓冲区溢出漏洞 | 2025-10-31 | 2025-11-05 |
| cnvd-2025-26956 | Online Appointment Booking System adddoctor.php文件SQL注入漏洞 | 2025-07-23 | 2025-11-05 |
| cnvd-2025-26955 | Online Appointment Booking System addclinic.php文件SQL注入漏洞 | 2025-07-23 | 2025-11-05 |
| cnvd-2025-26954 | Online Appointment Booking System deletedoctorclinic.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-05 |
| cnvd-2025-26953 | Online Appointment Booking System addmanagerclinic.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-05 |
| cnvd-2025-26899 | Delta Electronics DIAScreen越界写入漏洞(CNVD-2025-26899) | 2025-10-21 | 2025-11-05 |
| cnvd-2025-26898 | Delta Electronics DIAScreen越界写入漏洞(CNVD-2025-26898) | 2025-10-21 | 2025-11-05 |
| cnvd-2025-26897 | Delta Electronics DIAScreen越界写入漏洞(CNVD-2025-26897) | 2025-10-21 | 2025-11-05 |
| cnvd-2025-26896 | Delta Electronics DIAScreen越界写入漏洞 | 2025-10-21 | 2025-11-05 |
| cnvd-2025-26889 | Mozilla Firefox代码执行漏洞(CNVD-2025-26889) | 2025-10-30 | 2025-11-05 |
| cnvd-2025-26888 | Mozilla Firefox安全绕过漏洞(CNVD-2025-26888) | 2025-10-30 | 2025-11-05 |
| cnvd-2025-26887 | Mozilla Firefox for iOS信息泄露漏洞 | 2025-10-30 | 2025-11-05 |
| cnvd-2025-26886 | Mozilla Firefox代码执行漏洞(CNVD-2025-26886) | 2025-10-31 | 2025-11-05 |
| cnvd-2025-26877 | Tenda O3缓冲区溢出漏洞(CNVD-2025-26877) | 2025-10-31 | 2025-11-05 |
| cnvd-2025-26876 | Tenda O3缓冲区溢出漏洞(CNVD-2025-26876) | 2025-10-31 | 2025-11-05 |
| cnvd-2025-26952 | Church Donation System update_password_admin.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-04 |
| cnvd-2025-26951 | Church Donation System Tithes.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-04 |
| cnvd-2025-26950 | Church Donation System search.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-04 |
| cnvd-2025-26949 | Church Donation System reg.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-04 |
| cnvd-2025-26948 | Church Donation System offering.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-04 |
| cnvd-2025-26947 | Church Donation System /login_admin.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-04 |
| cnvd-2025-26946 | Church Donation System login.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-04 |
| cnvd-2025-26945 | Church Donation System giving.php文件SQL注入漏洞 | 2025-07-25 | 2025-11-04 |
| cnvd-2025-26944 | Student Crud Operation delete.ph文件SQL注入漏洞 | 2025-10-13 | 2025-11-04 |
| cnvd-2025-26943 | D-Link DIR600L formWlSiteSurvey函数缓冲区溢出漏洞 | 2025-10-30 | 2025-11-04 |
| cnvd-2025-26942 | D-Link DIR600L formVirtualServ函数缓冲区溢出漏洞 | 2025-10-30 | 2025-11-04 |
| cnvd-2025-26941 | D-Link DIR600L formTcpipSetup函数缓冲区溢出漏洞 | 2025-10-30 | 2025-11-04 |
| cnvd-2025-26940 | D-Link DIR600L formSetWizardSelectMode函数缓冲区溢出漏洞 | 2025-10-30 | 2025-11-04 |
| cnvd-2025-26939 | D-Link DIR600L formSetWizard1函数缓冲区溢出漏洞 | 2025-10-30 | 2025-11-04 |
| cnvd-2025-26938 | D-Link DIR600L formSetWAN_Wizard7函数缓冲区溢出漏洞 | 2025-10-30 | 2025-11-04 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-1086 | Multiples vulnérabilités dans Trend Micro Apex One | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1085 | Multiples vulnérabilités dans Moodle | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| CERTFR-2024-AVI-1089 | Vulnérabilité dans les produits StormShield Management Center | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| CERTFR-2024-AVI-1088 | Multiples vulnérabilités dans les produits Foxit | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| CERTFR-2024-AVI-1087 | Vulnérabilité dans les produits Siemens | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| CERTFR-2024-AVI-1086 | Multiples vulnérabilités dans Trend Micro Apex One | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| CERTFR-2024-AVI-1085 | Multiples vulnérabilités dans Moodle | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1084 | Vulnérabilité dans SolarWinds Web Help Desk | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| certfr-2024-avi-1083 | Multiples vulnérabilités dans Mozilla Thunderbird | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| certfr-2024-avi-1082 | Multiples vulnérabilités dans les produits Synology | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| CERTFR-2024-AVI-1084 | Vulnérabilité dans SolarWinds Web Help Desk | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| CERTFR-2024-AVI-1083 | Multiples vulnérabilités dans Mozilla Thunderbird | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| CERTFR-2024-AVI-1082 | Multiples vulnérabilités dans les produits Synology | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| certfr-2024-avi-1081 | Multiples vulnérabilités dans les produits IBM | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1080 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1079 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1078 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1077 | Multiples vulnérabilités dans Microsoft Edge | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1076 | Multiples vulnérabilités dans Suricata | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1075 | Multiples vulnérabilités dans Nagios XI | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| CERTFR-2024-AVI-1081 | Multiples vulnérabilités dans les produits IBM | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| CERTFR-2024-AVI-1080 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| CERTFR-2024-AVI-1079 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| CERTFR-2024-AVI-1078 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| CERTFR-2024-AVI-1077 | Multiples vulnérabilités dans Microsoft Edge | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| CERTFR-2024-AVI-1076 | Multiples vulnérabilités dans Suricata | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| CERTFR-2024-AVI-1075 | Multiples vulnérabilités dans Nagios XI | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1074 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-12-12T00:00:00.000000 | 2024-12-12T00:00:00.000000 |
| certfr-2024-avi-1073 | Vulnérabilité dans les produits Mozilla | 2024-12-12T00:00:00.000000 | 2024-12-12T00:00:00.000000 |
| certfr-2024-avi-1072 | Multiples vulnérabilités dans les produits Apple | 2024-12-12T00:00:00.000000 | 2024-12-12T00:00:00.000000 |