Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2015-20119 |
5.1 (4.0)
6.4 (3.1)
|
RealtyScript 4.0.2 Stored Cross-Site Scripting via tex… |
Next Click Ventures |
RealtyScript |
2026-03-15T18:34:17.708Z | 2026-03-16T14:30:30.762Z |
| CVE-2015-20118 |
5.1 (4.0)
7.2 (3.1)
|
RealtyScript 4.0.2 Stored Cross-Site Scripting via loc… |
Next Click Ventures |
RealtyScript |
2026-03-15T18:34:16.830Z | 2026-03-16T14:30:30.949Z |
| CVE-2015-20117 |
6.9 (4.0)
5.3 (3.1)
|
RealtyScript 4.0.2 Cross-Site Request Forgery Unauthor… |
Next Click Ventures |
RealtyScript |
2026-03-15T18:34:16.030Z | 2026-03-16T14:30:31.130Z |
| CVE-2015-20116 |
5.1 (4.0)
6.1 (3.1)
|
RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV… |
Next Click Ventures |
RealtyScript |
2026-03-15T18:34:14.443Z | 2026-03-16T14:30:31.280Z |
| CVE-2015-20115 |
5.1 (4.0)
7.2 (3.1)
|
RealtyScript 4.0.2 Stored Cross-Site Scripting via Fil… |
Next Click Ventures |
RealtyScript |
2026-03-15T18:34:13.697Z | 2026-03-16T14:30:31.420Z |
| CVE-2015-20114 |
5.1 (4.0)
6.1 (3.1)
|
RealtyScript 4.0.2 Cross-Site Scripting via Multiple P… |
Next Click Ventuers |
RealtyScript |
2026-03-15T18:34:12.468Z | 2026-03-16T14:20:18.259Z |
| CVE-2015-20113 |
6.9 (4.0)
5.3 (3.1)
|
RealtyScript 4.0.2 Multiple Cross-Site Request Forgery… |
Next Click Ventuers |
RealtyScript |
2026-03-15T18:34:11.692Z | 2026-03-16T14:20:18.451Z |
| CVE-2013-20006 |
8.7 (4.0)
7.5 (3.1)
|
Qool CMS Multiple Persistent Cross-Site Scripting Vuln… |
Qool |
Qool CMS |
2026-03-15T18:34:10.910Z | 2026-03-16T14:20:18.616Z |
| CVE-2013-20005 |
6.9 (4.0)
5.3 (3.1)
|
Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduser |
Qool |
Qool CMS |
2026-03-15T18:34:09.977Z | 2026-03-16T14:20:18.785Z |
| CVE-2026-4185 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
GPAC MP4Box swf_parse.c swf_def_bits_jpeg stack-based … |
n/a |
GPAC |
2026-03-15T18:32:08.668Z | 2026-03-15T18:32:08.668Z |
| CVE-2026-4184 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-ba… |
D-Link |
DIR-816 |
2026-03-15T17:32:09.843Z | 2026-03-16T14:40:34.929Z |
| CVE-2026-4183 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-b… |
D-Link |
DIR-816 |
2026-03-15T16:32:09.354Z | 2026-03-16T14:40:34.375Z |
| CVE-2026-4182 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack… |
D-Link |
DIR-816 |
2026-03-15T16:02:15.731Z | 2026-03-16T14:40:34.130Z |
| CVE-2026-4181 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-ba… |
D-Link |
DIR-816 |
2026-03-15T16:02:10.609Z | 2026-03-16T14:40:33.964Z |
| CVE-2026-28522 |
7.1 (4.0)
6.5 (3.1)
|
arduino-TuyaOpen WiFiUDP Null Pointer Dereference Deni… |
Tuya |
arduino-TuyaOpen |
2026-03-15T13:36:52.798Z | 2026-03-16T14:20:18.964Z |
| CVE-2026-28519 |
8.7 (4.0)
8.8 (3.1)
|
arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow … |
Tuya |
arduino-TuyaOpen |
2026-03-15T13:36:47.991Z | 2026-03-16T14:20:19.096Z |
| CVE-2026-28521 |
7 (4.0)
7.7 (3.1)
|
arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Inf… |
Tuya |
arduino-TuyaOpen |
2026-03-15T13:35:46.217Z | 2026-03-16T14:20:19.227Z |
| CVE-2026-28520 |
8.6 (4.0)
8.4 (3.1)
|
arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow… |
Tuya |
arduino-TuyaOpen |
2026-03-15T13:35:42.482Z | 2026-03-16T14:20:19.411Z |
| CVE-2016-20032 |
5.1 (4.0)
7.2 (3.1)
|
ZKTeco ZKAccess Security System 5.3.1 Stored XSS |
ZKTeco Inc. |
ZKTeco ZKAccess Security System |
2026-03-15T13:35:36.942Z | 2026-03-16T14:20:19.748Z |
| CVE-2016-20031 |
6.8 (4.0)
5.5 (3.1)
|
ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass vi… |
ZKTeco Inc. |
ZKTeco ZKBioSecurity |
2026-03-15T13:35:35.350Z | 2026-03-16T14:20:19.921Z |
| CVE-2016-20030 |
9.3 (4.0)
9.8 (3.1)
|
ZKTeco ZKBioSecurity 3.0 User Enumeration via authLogi… |
ZKTeco Inc. |
ZKTeco ZKBioSecurity |
2026-03-15T13:35:32.348Z | 2026-03-16T14:20:20.095Z |
| CVE-2016-20029 |
6.9 (4.0)
6.2 (3.1)
|
ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulner… |
ZKTeco Inc. |
ZKTeco ZKBioSecurity |
2026-03-15T13:35:26.328Z | 2026-03-16T14:20:20.265Z |
| CVE-2016-20028 |
5.3 (4.0)
4.3 (3.1)
|
ZKTeco ZKBioSecurity 3.0 Cross-Site Request Forgery Su… |
ZKTeco Inc. |
ZKTeco ZKBioSecurity |
2026-03-15T13:35:23.779Z | 2026-03-16T14:20:20.449Z |
| CVE-2016-20027 |
5.1 (4.0)
6.1 (3.1)
|
ZKTeco ZKBioSecurity 3.0 Multiple Reflected XSS Vulner… |
ZKTeco Inc. |
ZKTeco ZKBioSecurity |
2026-03-15T13:35:21.111Z | 2026-03-16T14:20:20.593Z |
| CVE-2016-20026 |
9.3 (4.0)
9.8 (3.1)
|
ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote … |
ZKTeco Inc. |
ZKTeco ZKBioSecurity |
2026-03-15T13:35:16.754Z | 2026-03-16T14:20:20.775Z |
| CVE-2016-20025 |
8.7 (4.0)
8.8 (3.1)
|
ZKTeco ZKAccess Professional 3.5.3 Privilege Escalatio… |
ZKTeco Inc. |
ZKTeco ZKAccess Professional |
2026-03-15T13:35:13.072Z | 2026-03-16T14:20:21.010Z |
| CVE-2016-20024 |
9.3 (4.0)
9.8 (3.1)
|
ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Pr… |
ZKTeco Inc. |
ZKTeco ZKTime.Net |
2026-03-15T13:35:11.360Z | 2026-03-16T14:20:21.142Z |
| CVE-2026-4180 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
D-Link DIR-816 goahead redirect.asp access control |
D-Link |
DIR-816 |
2026-03-15T13:32:10.207Z | 2026-03-15T13:32:10.207Z |
| CVE-2026-4175 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
Aureus ERP Chatter Message content-text-entry.blade.ph… |
Aureus |
ERP |
2026-03-15T10:32:14.092Z | 2026-03-15T10:32:14.092Z |
| CVE-2026-4174 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
Radare2 Mach-O File mach0.c walk_exports_trie resource… |
n/a |
Radare2 |
2026-03-15T10:32:10.553Z | 2026-03-15T10:32:10.553Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2923 |
7.8 (3.0)
|
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Cod… |
GStreamer |
GStreamer |
2026-03-13T20:39:01.199Z | 2026-03-17T03:55:38.806Z |
| CVE-2026-2922 |
7.8 (3.0)
|
GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote… |
GStreamer |
GStreamer |
2026-03-13T20:38:49.124Z | 2026-03-16T20:24:56.719Z |
| CVE-2026-2921 |
7.8 (3.0)
|
GStreamer RIFF Palette Integer Overflow Remote Code Ex… |
GStreamer |
GStreamer |
2026-03-13T20:41:50.780Z | 2026-03-16T15:41:06.206Z |
| CVE-2026-2920 |
7.8 (3.0)
|
GStreamer ASF Demuxer Heap-based Buffer Overflow Remot… |
GStreamer |
GStreamer |
2026-03-13T20:38:27.802Z | 2026-03-16T20:23:57.712Z |
| CVE-2026-2578 |
4.3 (3.1)
|
Information Disclosure via WebSocket Event When Deleti… |
Mattermost |
Mattermost |
2026-03-16T11:58:09.834Z | 2026-03-16T13:49:55.812Z |
| CVE-2026-2493 |
7.5 (3.0)
|
IceWarp collaboration Directory Traversal Information … |
IceWarp |
IceWarp |
2026-03-13T20:42:38.658Z | 2026-03-16T15:41:05.952Z |
| CVE-2026-2491 |
6.3 (3.0)
|
Socomec DIRIS A-40 HTTP API Authentication Bypass Vuln… |
Socomec |
DIRIS A-40 |
2026-03-13T20:43:15.417Z | 2026-03-16T15:41:05.821Z |
| CVE-2026-2476 |
7.6 (3.1)
|
MS Teams plugin sensitive config values not properly m… |
Mattermost |
Mattermost |
2026-03-16T11:11:07.387Z | 2026-03-16T13:49:58.500Z |
| CVE-2026-2463 |
4.3 (3.1)
|
Unauthorized access to invite ID during team creation |
Mattermost |
Mattermost |
2026-03-16T11:13:57.575Z | 2026-03-16T13:49:58.332Z |
| CVE-2026-2462 |
6.6 (3.1)
|
Admin RCE via Malicious Plugin Upload on CI Test Instances |
Mattermost |
Mattermost |
2026-03-16T12:00:21.069Z | 2026-03-17T03:55:27.849Z |
| CVE-2026-2461 |
4.3 (3.1)
|
Missing authorization check allows unauthorized modifi… |
Mattermost |
Mattermost |
2026-03-16T11:16:32.720Z | 2026-03-16T13:49:57.924Z |
| CVE-2026-2458 |
4.3 (3.1)
|
Unauthorized channel enumeration in private teams afte… |
Mattermost |
Mattermost |
2026-03-16T11:27:49.310Z | 2026-03-16T13:49:57.631Z |
| CVE-2026-2457 |
4.3 (3.1)
|
WebSocket Message Spoofing via Permalink Embed Manipulation |
Mattermost |
Mattermost |
2026-03-16T11:20:25.335Z | 2026-03-16T13:49:57.761Z |
| CVE-2026-2456 |
5.3 (3.1)
|
Denial of Service via Unbounded Memory Allocation in I… |
Mattermost |
Mattermost |
2026-03-16T11:06:44.920Z | 2026-03-16T13:49:58.650Z |
| CVE-2026-2326 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-03-16T11:59:12.474Z | |
| CVE-2026-28522 |
7.1 (4.0)
6.5 (3.1)
|
arduino-TuyaOpen WiFiUDP Null Pointer Dereference Deni… |
Tuya |
arduino-TuyaOpen |
2026-03-15T13:36:52.798Z | 2026-03-16T14:20:18.964Z |
| CVE-2026-28521 |
7 (4.0)
7.7 (3.1)
|
arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Inf… |
Tuya |
arduino-TuyaOpen |
2026-03-15T13:35:46.217Z | 2026-03-16T14:20:19.227Z |
| CVE-2026-28520 |
8.6 (4.0)
8.4 (3.1)
|
arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow… |
Tuya |
arduino-TuyaOpen |
2026-03-15T13:35:42.482Z | 2026-03-16T14:20:19.411Z |
| CVE-2026-28519 |
8.7 (4.0)
8.8 (3.1)
|
arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow … |
Tuya |
arduino-TuyaOpen |
2026-03-15T13:36:47.991Z | 2026-03-16T14:20:19.096Z |
| CVE-2026-2233 |
5.3 (3.1)
|
User Frontend: AI Powered Frontend Posting, User Direc… |
wedevs |
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration |
2026-03-15T02:19:14.723Z | 2026-03-16T19:12:15.863Z |
| CVE-2026-26246 |
4.3 (3.1)
|
Memory Exhaustion via Malformed PSD File Upload |
Mattermost |
Mattermost |
2026-03-16T11:33:02.591Z | 2026-03-16T13:49:57.467Z |
| CVE-2026-26133 |
7.1 (3.1)
|
M365 Copilot Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Copilot for Android |
2026-03-13T21:10:13.535Z | 2026-03-16T22:45:31.173Z |
| CVE-2026-25783 |
4.3 (3.1)
|
Denial of service via malformed User-Agent header in g… |
Mattermost |
Mattermost |
2026-03-16T12:04:18.478Z | 2026-03-16T13:49:55.332Z |
| CVE-2026-25780 |
4.3 (3.1)
|
Memory Exhaustion via Malformed DOC File Upload |
Mattermost |
Mattermost |
2026-03-16T12:59:13.620Z | 2026-03-16T13:49:54.865Z |
| CVE-2026-25083 |
8.3 (3.0)
8.7 (4.0)
|
GROWI OpenAI thread/message API endpoints do not … |
GROWI, Inc. |
GROWI |
2026-03-16T06:47:38.734Z | 2026-03-16T14:59:21.243Z |
| CVE-2026-24458 |
7.5 (3.1)
|
DoS attack via login attempts with multi-megabyte passwords |
Mattermost |
Mattermost |
2026-03-16T12:02:23.223Z | 2026-03-16T13:49:55.523Z |
| CVE-2026-21005 |
7.1 (4.0)
|
Path traversal in Smart Switch prior to version 3… |
Samsung Mobile |
Smart Switch |
2026-03-16T04:35:37.481Z | 2026-03-16T13:19:35.051Z |
| CVE-2026-21004 |
6.9 (4.0)
|
Improper authentication in Smart Switch prior to … |
Samsung Mobile |
Smart Switch |
2026-03-16T04:35:36.283Z | 2026-03-16T13:19:35.280Z |
| CVE-2026-21002 |
5.9 (4.0)
|
Improper verification of cryptographic signature … |
Samsung Mobile |
Galaxy Store |
2026-03-16T04:32:11.128Z | 2026-03-16T13:59:29.066Z |
| CVE-2026-21001 |
5.9 (4.0)
|
Path traversal in Galaxy Store prior to version 4… |
Samsung Mobile |
Galaxy Store |
2026-03-16T04:32:09.910Z | 2026-03-16T13:59:43.525Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-2024 | The PhotoStack Gallery plugin for WordPress is vulnerable to SQL Injection via the 'postid' paramet… | 2026-02-14T07:16:13.020 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-2022 | The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing … | 2026-02-14T07:16:12.847 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1988 | The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File … | 2026-02-14T07:16:12.670 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1987 | The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all … | 2026-02-14T07:16:12.493 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1985 | The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gute… | 2026-02-14T07:16:12.320 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1944 | The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification o… | 2026-02-14T07:16:12.150 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1939 | The Percent to Infograph plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-02-14T07:16:11.977 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1915 | The Simple Plyr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poster' … | 2026-02-14T07:16:11.803 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1910 | The UpMenu – Online ordering for restaurants plugin for WordPress is vulnerable to Stored Cross-Sit… | 2026-02-14T07:16:11.633 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1905 | The Sphere Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width… | 2026-02-14T07:16:11.460 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1903 | The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th… | 2026-02-14T07:16:11.283 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1901 | The QuestionPro Surveys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… | 2026-02-14T07:16:11.113 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1796 | The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL pat… | 2026-02-14T07:16:10.903 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1795 | The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the UR… | 2026-02-14T07:16:10.733 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1792 | The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path i… | 2026-02-14T07:16:10.553 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1394 | The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver… | 2026-02-14T07:16:10.343 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1306 | The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ… | 2026-02-14T07:16:10.150 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1303 | The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions… | 2026-02-14T07:16:09.970 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1187 | The ZoomifyWP Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'filen… | 2026-02-14T07:16:09.800 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-1096 | The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'l… | 2026-02-14T07:16:09.627 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0753 | The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting … | 2026-02-14T07:16:09.450 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0751 | The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site … | 2026-02-14T07:16:09.283 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0745 | The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all v… | 2026-02-14T07:16:09.113 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0736 | The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site S… | 2026-02-14T07:16:08.940 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0735 | The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-02-14T07:16:08.770 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0727 | The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in al… | 2026-02-14T07:16:08.590 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0693 | The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scr… | 2026-02-14T07:16:08.417 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0559 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vul… | 2026-02-14T07:16:08.240 | 2026-02-18T17:52:44.520 |
| fkie_cve-2026-0557 | The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin… | 2026-02-14T07:16:08.053 | 2026-02-18T17:52:44.520 |
| fkie_cve-2025-6792 | The One to one user Chat by WPGuppy plugin for WordPress is vulnerable to unauthorized access of da… | 2026-02-14T07:16:07.270 | 2026-02-18T17:52:44.520 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-hx82-g397-5ggr |
2.9 (3.1)
|
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after a… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-hjx5-q68f-pv56 |
7.8 (3.1)
|
GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerabi… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-hf8w-x9h5-5gf9 |
4.3 (3.1)
|
Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks … | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-h8gg-vg9f-x3jm |
7.5 (3.1)
|
IceWarp collaboration Directory Traversal Information Disclosure Vulnerability. This vulnerability … | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-h3jf-fj6h-58j8 |
7.1 (4.0)
|
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in … | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-g7gw-mp9w-623w |
7.8 (3.1)
|
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability all… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-fx49-m253-27jj |
4.3 (3.1)
|
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite I… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-fprx-ppqr-8wgf |
6.6 (3.1)
|
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-9rpf-mhcj-gv7r |
4.0 (3.1)
|
libexpat before 2.7.5 allows an infinite loop while parsing DTD content. | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-9qp5-q937-cpvv |
5.3 (4.0)
|
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in … | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-832q-9r5f-ppx5 |
8.6 (4.0)
|
Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-7q24-fxcq-rmwc |
6.3 (3.1)
|
Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability. This vulnerability allows network-… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-679f-wmrg-qf57 |
4.3 (3.1)
|
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly valida… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-5p6r-4c7p-96fh |
3.4 (3.1)
|
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from cli… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-52ch-r2h3-gxrq |
7.8 (3.1)
|
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-4ppj-6chv-5pgc |
7.6 (3.1)
|
Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which al… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-3rhr-jr63-hwq5 |
4.3 (3.1)
|
Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts duri… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-3gr9-8p27-7f3p |
7.2 (3.1)
8.6 (4.0)
|
OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injectio… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-34g8-9fpp-46ch |
5.3 (3.1)
|
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to lim… | 2026-03-16T15:30:43Z | 2026-03-16T15:30:43Z |
| ghsa-26hg-xq22-5254 |
4.8 (4.0)
|
Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma web application, specifically in the … | 2026-03-16T15:30:43Z | 2026-03-16T15:30:44Z |
| ghsa-xvr9-fr69-g722 |
5.3 (3.1)
|
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registra… | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ghsa-xv2p-wchj-qjhp |
4.3 (3.1)
|
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory al… | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ghsa-x8wx-px39-c6qg |
5.1 (3.1)
|
IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view… | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ghsa-wx9p-57x7-7rh9 |
6.1 (3.1)
5.1 (4.0)
|
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attack… | 2026-03-16T15:30:42Z | 2026-03-16T21:34:32Z |
| ghsa-w8w9-p22v-m9jp |
4.3 (3.1)
|
The Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types plugin for WordPress … | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ghsa-vpvf-7jf8-3gpw |
6.7 (4.0)
|
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileg… | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ghsa-rjf5-cxrf-4rvw |
7.1 (3.1)
|
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a… | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ghsa-rcpf-m3cr-fh99 |
7.1 (4.0)
|
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows … | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ghsa-r7p7-x56g-w5cp |
7.0 (4.0)
|
Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create f… | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ghsa-r5w6-89h4-6hw8 |
4.8 (4.0)
|
Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable… | 2026-03-16T15:30:42Z | 2026-03-16T15:30:42Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-40 |
|
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents. | orjson | 2024-02-26T16:28:00+00:00 | 2024-02-26T18:22:26.039698+00:00 |
| pysec-2024-253 |
|
pretix before 2024.1.1 mishandles file validation. | pretix | 2024-02-26T16:28:00+00:00 | 2025-06-11T15:23:51.683422+00:00 |
| pysec-2024-235 |
8.1 (3.1)
|
With the following crawler configuration: ```python from bs4 import BeautifulSoup as Sou… | langchain-exa | 2024-02-26T16:27:49+00:00 | 2025-02-26T02:48:56.937312+00:00 |
| pysec-2024-39 |
|
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Var… | fastecdsa | 2024-02-24T05:15:00+00:00 | 2024-02-24T07:19:09.418536+00:00 |
| pysec-2024-241 |
9.6 (3.1)
|
Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untru… | mlflow | 2024-02-23T22:15:55+00:00 | 2025-04-08T10:23:24.946136+00:00 |
| pysec-2024-240 |
9.6 (3.1)
|
Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. This … | mlflow | 2024-02-23T22:15:55+00:00 | 2025-04-08T10:23:24.900947+00:00 |
| pysec-2024-223 |
9.1 (3.1)
|
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds … | onnx | 2024-02-23T18:15:50+00:00 | 2025-01-22T16:23:22.060512+00:00 |
| pysec-2024-222 |
7.5 (3.1)
|
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Trav… | onnx | 2024-02-23T18:15:50+00:00 | 2025-01-22T16:23:21.994731+00:00 |
| pysec-2024-249 |
6.1 (3.1)
|
### Summary On all Label Studio versions prior to 1.11.0, data imported via file upload f… | label-studio | 2024-02-22T22:15:47+00:00 | 2025-05-19T11:22:35.312280+00:00 |
| pysec-2024-226 |
7.8 (3.1)
|
Pymatgen (Python Materials Genomics) is an open-source Python library for materials analy… | pymatgen | 2024-02-21T17:15:09+00:00 | 2025-02-06T00:34:28.734730+00:00 |
| pysec-2024-225 |
7.5 (3.1)
|
cryptography is a package designed to expose cryptographic primitives and recipes to Pyth… | cryptography | 2024-02-21T17:15:09+00:00 | 2025-02-06T00:34:24.427679+00:00 |
| pysec-2024-155 |
7.5 (3.1)
|
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) … | cbor2 | 2024-02-19T23:15:07+00:00 | 2025-01-14T05:22:09.226388+00:00 |
| pysec-2024-107 |
5.0 (3.1)
|
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modif… | exiv2 | 2024-02-12T23:15:00+00:00 | 2024-10-23T00:00:00+00:00 |
| pysec-2024-106 |
5.0 (3.1)
|
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modif… | exiv2 | 2024-02-12T23:15:00+00:00 | 2024-10-23T00:00:00+00:00 |
| pysec-2024-104 |
5.3 (3.1)
|
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of … | jwcrypto | 2024-02-12T14:15:00+00:00 | 2024-10-10T17:22:00.587279+00:00 |
| pysec-2024-37 |
6.5 (3.1)
|
nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. Thi… | nonebot2 | 2024-02-09T23:15:00+00:00 | 2024-02-16T16:22:37.389642+00:00 |
| pysec-2024-125 |
7.5 (3.1)
|
DIRAC is a distributed resource framework. In affected versions any user could get a toke… | dirac | 2024-02-09T00:15:00+00:00 | 2024-11-21T14:22:45.495938+00:00 |
| pysec-2024-150 |
9.8 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can … | vyper | 2024-02-07T17:15:00+00:00 | 2024-11-21T14:23:03.024978+00:00 |
| pysec-2024-28 |
|
An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 be… | django | 2024-02-06T22:16:00+00:00 | 2024-02-07T00:25:46.826634+00:00 |
| pysec-2024-36 |
5.5 (3.1)
|
An information disclosure flaw was found in ansible-core due to a failure to respect the … | ansible-core | 2024-02-06T12:15:00+00:00 | 2024-02-14T07:20:09.911618+00:00 |
| pysec-2024-147 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack m… | vyper | 2024-02-05T21:15:00+00:00 | 2024-11-21T14:23:02.864019+00:00 |
| pysec-2024-38 |
7.5 (3.1)
|
FastAPI is a web framework for building APIs with Python 3.8+ based on standard Python ty… | fastapi | 2024-02-05T15:15:00+00:00 | 2024-02-16T18:22:32.607118+00:00 |
| pysec-2024-148 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls … | vyper | 2024-02-02T17:15:00+00:00 | 2024-11-21T14:23:02.917464+00:00 |
| pysec-2024-35 |
5.4 (3.1)
|
Versions of the package dash-core-components before 2.13.0; all versions of the package d… | dash | 2024-02-02T05:15:00+00:00 | 2024-02-10T07:18:43.563257+00:00 |
| pysec-2024-149 |
9.8 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2024-02-01T17:15:00+00:00 | 2024-11-21T14:23:02.970591+00:00 |
| pysec-2024-29 |
4.9 (3.1)
|
OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1… | octoprint | 2024-01-31T18:15:00+00:00 | 2024-02-08T07:19:40.535297+00:00 |
| pysec-2024-127 |
5.3 (3.1)
|
Label Studio is a popular open source data labeling tool. The vulnerability affects all v… | label-studio | 2024-01-31T17:15:00+00:00 | 2024-11-21T14:22:53.294472+00:00 |
| pysec-2024-151 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compi… | vyper | 2024-01-30T21:15:00+00:00 | 2024-11-21T14:23:03.091183+00:00 |
| pysec-2024-34 |
9.8 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6-server | 2024-01-30T16:15:00+00:00 | 2024-02-08T20:20:16.896186+00:00 |
| pysec-2024-33 |
9.8 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6-node | 2024-01-30T16:15:00+00:00 | 2024-02-08T20:20:16.842528+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1257 | Malicious code in pdfjs-dist-fourth (npm) | 2026-03-05T22:15:57Z | 2026-03-08T01:39:46Z |
| mal-2026-1247 | Malicious code in @imhuman/corp-build-utils-poc (npm) | 2026-03-05T16:49:33Z | 2026-03-08T01:39:42Z |
| mal-2026-1249 | Malicious code in imhuman-fw-logger (npm) | 2026-03-05T16:49:32Z | 2026-03-08T01:39:45Z |
| mal-2026-1248 | Malicious code in @imhuman/fw-logger (npm) | 2026-03-05T16:49:32Z | 2026-03-08T01:39:42Z |
| mal-2026-1251 | Malicious code in pear-apps-lib-ui-react-hooks (npm) | 2026-03-05T16:18:38Z | 2026-03-08T01:39:46Z |
| mal-2026-1252 | Malicious code in pear-apps-utils-avatar-initials (npm) | 2026-03-05T16:04:20Z | 2026-03-08T01:39:46Z |
| mal-2026-1253 | Malicious code in pear-apps-utils-date (npm) | 2026-03-05T16:00:53Z | 2026-03-08T01:39:46Z |
| mal-2026-1254 | Malicious code in pear-apps-utils-qr (npm) | 2026-03-05T15:55:06Z | 2026-03-08T01:39:46Z |
| mal-2026-1255 | Malicious code in pearpass-lib-data-export (npm) | 2026-03-05T15:50:09Z | 2026-03-08T01:39:46Z |
| mal-2026-1250 | Malicious code in pear-apps-lib-feedback (npm) | 2026-03-05T15:35:15Z | 2026-03-08T01:39:46Z |
| mal-2026-1256 | Malicious code in pearpass-lib-data-import (npm) | 2026-03-05T15:33:59Z | 2026-03-08T01:39:46Z |
| mal-2026-1246 | Malicious code in pearpass-utils-password-check (npm) | 2026-03-05T15:32:42Z | 2026-03-08T01:39:46Z |
| mal-2026-1245 | Malicious code in nf-referral-backend-placeholder (npm) | 2026-03-05T15:26:23Z | 2026-03-08T01:39:46Z |
| mal-2026-1244 | Malicious code in spectral-corsair-navigator (npm) | 2026-03-05T15:05:48Z | 2026-03-16T01:00:42Z |
| mal-2026-1243 | Malicious code in nf-referral-backend (npm) | 2026-03-05T09:50:28Z | 2026-03-08T01:39:46Z |
| mal-2026-1242 | Malicious code in yaml-manifest-utils-mynarratorai (npm) | 2026-03-04T18:39:41Z | 2026-03-08T01:39:48Z |
| mal-2026-1240 | Malicious code in requests-ml-min (PyPI) | 2026-03-04T17:24:20Z | 2026-03-04T17:24:20Z |
| mal-2026-1238 | Malicious code in pearpass-lib-vault (npm) | 2026-03-04T14:25:47Z | 2026-03-08T01:39:46Z |
| mal-2026-1239 | Malicious code in pearpass-lib-vault-core (npm) | 2026-03-04T14:16:24Z | 2026-03-08T01:39:46Z |
| mal-2026-1237 | Malicious code in pearpass-lib-ui-theme-provider (npm) | 2026-03-04T14:15:03Z | 2026-03-08T01:39:46Z |
| mal-2026-1241 | Malicious code in @get-wrecked/overlay (npm) | 2026-03-04T14:02:28Z | 2026-03-08T01:39:42Z |
| mal-2026-1236 | Malicious code in @molb-prelogin/gobiz-config (npm) | 2026-03-04T12:28:05Z | 2026-03-08T01:39:42Z |
| mal-2026-1235 | Malicious code in dakhara (PyPI) | 2026-03-03T23:29:16Z | 2026-03-03T23:37:58Z |
| mal-2026-1226 | Malicious code in qwery-core (PyPI) | 2026-03-03T19:19:13Z | 2026-03-03T19:19:13Z |
| mal-2026-1224 | Malicious code in spark-ml-utilities (PyPI) | 2026-03-03T18:13:56Z | 2026-03-03T20:14:02Z |
| mal-2026-1223 | Malicious code in risk-utilities (PyPI) | 2026-03-03T18:10:56Z | 2026-03-03T20:14:02Z |
| mal-2026-1222 | Malicious code in optimal-spark-config (PyPI) | 2026-03-03T18:02:59Z | 2026-03-03T20:14:02Z |
| mal-2026-1225 | Malicious code in urllib-slim (PyPI) | 2026-03-03T17:51:17Z | 2026-03-03T20:14:02Z |
| mal-2026-1220 | Malicious code in corp-build-utils-poc (npm) | 2026-03-03T16:11:08Z | 2026-03-08T01:39:43Z |
| mal-2026-1221 | Malicious code in xrpl-dev-portal (npm) | 2026-03-03T15:37:29Z | 2026-03-08T01:39:48Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2736 | QT (Declarative module): Schwachstelle ermöglicht Denial of Service | 2025-12-03T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2733 | Drupal-Module: Mehrere Schwachstellen | 2025-12-03T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2730 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2729 | WebKitGTK: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2724 | Golang Go: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2026-03-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2722 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2718 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2717 | Django: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2712 | Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-01T23:00:00.000+00:00 | 2026-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2711 | Android Patchday Dezember 2025: Mehrere Schwachstellen | 2025-12-01T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2706 | Python: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-01T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2703 | Zabbix: Mehrere Schwachstellen | 2025-11-30T23:00:00.000+00:00 | 2026-03-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2702 | Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-30T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2701 | xwiki (XJetty): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-30T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2700 | CODESYS Control und Development System: Mehrere Schwachstellen | 2025-11-30T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2697 | Devolutions Remote Desktop Manager und Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-30T23:00:00.000+00:00 | 2025-11-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2694 | MariaDB: Schwachstelle ermöglicht Codeausführung | 2025-11-27T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2693 | CUPS: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-27T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2685 | Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-26T23:00:00.000+00:00 | 2026-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2682 | Tinyproxy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-26T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2677 | OPNsense: Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-25T23:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2676 | GeoServer: Mehrere Schwachstellen | 2025-11-25T23:00:00.000+00:00 | 2025-12-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2672 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-24T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2670 | Fluent Bit: Mehrere Schwachstellen | 2025-11-24T23:00:00.000+00:00 | 2025-11-25T23:00:00.000+00:00 |
| wid-sec-w-2025-2667 | Janitza UMG 96-PA und UMG 96-PA-MID+: Schwachstelle ermöglicht Denial of Service | 2025-11-23T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2666 | vllm und PyTorch: Schwachstelle ermöglicht DoS und potenzielle Codeausführung | 2025-11-23T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2663 | libpng: Mehrere Schwachstellen | 2025-11-23T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2661 | Google Cloud Platform (Looker): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2025-11-23T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2658 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2026-03-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2657 | WebKitGTK: Mehrere Schwachstellen | 2025-11-20T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-259-05 | Siemens OpenSSL Vulnerability in Industrial Products | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| icsa-25-259-04 | Siemens RUGGEDCOM, SINEC NMS, and SINEMA | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| icsa-25-259-03 | Siemens SIMATIC NET CP, SINEMA and SCALANCE | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| icsa-25-259-02 | Hitachi Energy RTU500 series | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| va-25-259-01 | CISA Thorium multiple vulnerabilities | 2025-09-16T00:00:00Z | 2025-09-16T00:00:00Z |
| va-25-258-01 | psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse | 2025-09-15T18:41:08Z | 2025-09-15T18:41:08Z |
| icsa-25-254-10 | Daikin Europe N.V Security Gateway | 2025-09-11T06:00:00.000000Z | 2025-09-18T06:00:00.000000Z |
| va-25-252-01 | OPEXUS FOIAXpress Public Access Link (PAL) SQL injection | 2025-09-09T20:48:26Z | 2025-09-09T20:48:26Z |
| icsa-25-252-09 | Rockwell Automation 1783-NATR | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-08 | Rockwell Automation Analytics LogixAI | 2025-09-09T06:00:00.000000Z | 2025-10-10T06:00:00.000000Z |
| icsa-25-252-07 | Rockwell Automation ControlLogix 5580 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-06 | Rockwell Automation CompactLogix® 5480 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-05 | Rockwell Automation FactoryTalk Activation Manager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-04 | Rockwell Automation FactoryTalk Optix | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-03 | Rockwell Automation Stratix IOS | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-01 | Rockwell Automation ThinManager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-02 | ABB Cylon Aspect BMS/BAS | 2025-09-09T05:00:00.000000Z | 2025-09-09T05:00:00.000000Z |
| icsa-25-259-01 | Schneider Electric Altivar products ATVdPAC module ILC992 InterLink Converter (Update A) | 2025-09-09T04:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-254-07 | Siemens User Management Component (UMC) | 2025-09-09T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-254-06 | Siemens Industrial Edge Management | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-05 | Siemens Apogee PXC and Talon TC Devices | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-04 | Siemens SINEC OS | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-03 | Siemens SINAMICS Drives | 2025-09-09T00:00:00.000000Z | 2026-03-12T06:00:00.000000Z |
| icsa-25-254-02 | Siemens SIMATIC Virtualization as a Service (SIVaaS) | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-01 | Siemens SIMOTION Tools | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-245-03 | SunPower PVS6 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-02 | Fuji Electric FRENIC-Loader 4 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-01 | Delta Electronics EIP Builder | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-240-06 | GE Vernova CIMPLICITY | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-05 | Delta Electronics COMMGR | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ccmp-sxss-qbtdbzdd | Cisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-backhaul-ap-cmdinj-r7e28ecs | Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-3550-acl-bypass-mhskzc2q | Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-snort-rf-bypass-oy8f3pnm | Multiple Cisco Products Snort Rate Filter Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2025-01-13T16:44:31+00:00 |
| cisco-sa-snort-bypass-ptry37fx | Cisco Firepower Threat Defense Software TCP Snort 3 Detection Engine Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-sa-ftd-snort-fw-bcjtzpmu | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TCP/IP Traffic with Snort 2 and Snort 3 Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd2100-snort-dos-m9humt75 | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series Appliances TCP UDP Snort 2 and Snort 3 Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-vdb-snort-djj4cnbr | Cisco Firepower Threat Defense Software Vulnerability Database with Snort Detection Engine Security Policy Bypass and Denial of Service Issue | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-tls-dos-qxye5ufy | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-statcred-dfc8txt5 | Cisco Firepower Threat Defense Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-geoip-bypass-mb4zrdu | Cisco Firepower Threat Defense Software Geolocation ACL Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-xss-infodisc-rl4mjfer | Cisco Secure Firewall Management Center Software Cross-Site Scripting and Information Disclosure Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-24T11:52:38+00:00 |
| cisco-sa-fmc-xss-dhjxqyzs | Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inject-2enmtc8v | Cisco Secure Firewall Management Center Software SQL Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2026-03-04T16:11:01+00:00 |
| cisco-sa-fmc-sql-inj-loyafcfq | Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-priv-esc-cmq4s6m7 | Cisco Secure Firewall Management Center Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-html-inj-nfjeyhxz | Cisco Secure Firewall Management Center Software HTML Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-file-read-5q4mqrn | Cisco Secure Firewall Management Center Software Arbitrary File Read Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-v3awdqn7 | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-g8aokndp | Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-2hbka97g | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-csc-dos-xvphm3bj | Cisco Secure Client Software Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftdvirtual-dos-muengnyr | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-xss-yjj7zjvq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-webvpn-dos-honb9ph4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-7tcnzxtu | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-persist-lce-vu3ekmj3 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-nsgacl-bypass-77xneasl | Cisco Adaptive Security Appliance and Firepower Threat Defense Software NSG Access Control List Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-ikev2-dos-9fgeyhsf | Cisco Adaptive Security Appliance and Firepower Threat Defense Software IKEv2 VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-dap-dos-bhekp7n | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-23069 | vsock/virtio: fix potential underflow in virtio_transport_get_credit() | 2026-02-02T00:00:00.000Z | 2026-03-17T01:38:52.000Z |
| msrc_cve-2026-23068 | spi: spi-sprd-adi: Fix double free in probe error path | 2026-02-02T00:00:00.000Z | 2026-03-16T14:36:57.000Z |
| msrc_cve-2026-23066 | rxrpc: Fix recvmsg() unconditional requeue | 2026-02-02T00:00:00.000Z | 2026-03-17T01:38:47.000Z |
| msrc_cve-2026-2243 | Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing | 2026-02-02T00:00:00.000Z | 2026-02-24T14:04:04.000Z |
| msrc_cve-2026-21863 | Malformed Valkey Cluster bus message can lead to Remote DoS | 2026-02-02T00:00:00.000Z | 2026-02-26T14:36:37.000Z |
| msrc_cve-2026-21620 | TFTP Path Traversal | 2026-02-02T00:00:00.000Z | 2026-03-03T01:38:17.000Z |
| msrc_cve-2026-1979 | mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free | 2026-02-02T00:00:00.000Z | 2026-03-03T01:37:17.000Z |
| msrc_cve-2026-1703 | Limited path traversal when installing wheel archives | 2026-02-02T00:00:00.000Z | 2026-03-17T01:36:31.000Z |
| msrc_cve-2025-71237 | nilfs2: Fix potential block overflow that cause system hang | 2026-02-02T00:00:00.000Z | 2026-03-03T01:37:45.000Z |
| msrc_cve-2025-71236 | scsi: qla2xxx: Validate sp before freeing associated memory | 2026-02-02T00:00:00.000Z | 2026-02-21T04:29:23.000Z |
| msrc_cve-2025-71235 | scsi: qla2xxx: Delay module unload while fabric scan in progress | 2026-02-02T00:00:00.000Z | 2026-02-28T01:38:41.000Z |
| msrc_cve-2025-71234 | wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add | 2026-02-02T00:00:00.000Z | 2026-02-21T04:29:07.000Z |
| msrc_cve-2025-71233 | PCI: endpoint: Avoid creating sub-groups asynchronously | 2026-02-02T00:00:00.000Z | 2026-03-04T14:37:51.000Z |
| msrc_cve-2025-71232 | scsi: qla2xxx: Free sp in error path to fix system crash | 2026-02-02T00:00:00.000Z | 2026-02-28T01:39:04.000Z |
| msrc_cve-2025-71231 | crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode | 2026-02-02T00:00:00.000Z | 2026-02-21T04:28:41.000Z |
| msrc_cve-2025-71230 | hfs: ensure sb->s_fs_info is always cleaned up | 2026-02-02T00:00:00.000Z | 2026-03-03T01:37:28.000Z |
| msrc_cve-2025-71229 | wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() | 2026-02-02T00:00:00.000Z | 2026-02-28T01:38:47.000Z |
| msrc_cve-2025-71228 | LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED | 2026-02-02T00:00:00.000Z | 2026-02-21T04:26:37.000Z |
| msrc_cve-2025-71227 | wifi: mac80211: don't WARN for connections on invalid channels | 2026-02-02T00:00:00.000Z | 2026-03-04T14:37:19.000Z |
| msrc_cve-2025-71226 | wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:30.000Z |
| msrc_cve-2025-71225 | md: suspend array while updating raid_disks via sysfs | 2026-02-02T00:00:00.000Z | 2026-03-04T14:37:02.000Z |
| msrc_cve-2025-69873 | ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., "^(a|a)*$") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. | 2026-02-02T00:00:00.000Z | 2026-03-03T01:38:55.000Z |
| msrc_cve-2025-69299 | WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability | 2026-02-02T00:00:00.000Z | 2026-02-24T14:03:49.000Z |
| msrc_cve-2025-68121 | Unexpected session resumption in crypto/tls | 2026-02-02T00:00:00.000Z | 2026-03-05T01:09:17.000Z |
| msrc_cve-2025-67733 | Valkey Affected by RESP Protocol Injection via Lua error_reply | 2026-02-02T00:00:00.000Z | 2026-02-26T14:36:30.000Z |
| msrc_cve-2025-62878 | Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern | 2026-02-02T00:00:00.000Z | 2026-03-03T01:38:32.000Z |
| msrc_cve-2025-61145 | libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c. | 2026-02-02T00:00:00.000Z | 2026-03-03T01:38:25.000Z |
| msrc_cve-2025-61144 | libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. | 2026-02-02T00:00:00.000Z | 2026-02-26T14:36:23.000Z |
| msrc_cve-2025-61143 | libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c. | 2026-02-02T00:00:00.000Z | 2026-02-26T14:36:13.000Z |
| msrc_cve-2025-11563 | wcurl path traversal with percent-encoded slashes | 2026-02-02T00:00:00.000Z | 2026-03-03T01:38:45.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0263 | Kwetsbaarheden verholpen in N-able N-Central | 2025-08-14T12:38:27.349283Z | 2025-08-14T12:38:27.349283Z |
| ncsc-2025-0262 | Kwetsbaarheden verholpen in Xerox FreeFlow Core | 2025-08-14T07:00:50.843871Z | 2025-08-14T07:00:50.843871Z |
| ncsc-2025-0261 | Kwetsbaarheden verholpen in Adobe InCopy | 2025-08-13T10:13:59.220398Z | 2025-08-13T10:13:59.220398Z |
| ncsc-2025-0260 | Kwetsbaarheden verholpen in Adobe Framemaker | 2025-08-13T10:12:35.130811Z | 2025-08-13T10:12:35.130811Z |
| ncsc-2025-0259 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2025-08-13T10:11:22.733287Z | 2025-08-13T10:11:22.733287Z |
| ncsc-2025-0258 | Kwetsbaarheden verholpen in Adobe InDesign | 2025-08-13T10:05:31.442414Z | 2025-08-13T10:05:31.442414Z |
| ncsc-2025-0257 | Kwetsbaarheid verholpen in Adobe Photoshop | 2025-08-13T10:00:18.181867Z | 2025-08-13T10:00:18.181867Z |
| ncsc-2025-0256 | Kwetsbaarheden verholpen in Adobe Illustrator | 2025-08-13T09:59:45.240348Z | 2025-08-13T09:59:45.240348Z |
| ncsc-2025-0255 | Kwetsbaarheden verholpen in Fortinet producten | 2025-08-13T09:16:29.067287Z | 2025-08-13T09:35:40.587034Z |
| ncsc-2025-0254 | Kwetsbaarheden verholpen in Zoom | 2025-08-13T09:09:21.491424Z | 2025-08-13T09:09:21.491424Z |
| ncsc-2025-0253 | Kwetsbaarheden verholpen in Ivanti Connect Secure, Policy Secure en ZTA Gateways | 2025-08-13T09:06:58.420498Z | 2025-08-13T09:06:58.420498Z |
| ncsc-2025-0252 | Kwetsbaarheden verholpen in Microsoft Exchange Server | 2025-08-13T07:29:24.639524Z | 2025-08-13T07:29:24.639524Z |
| ncsc-2025-0251 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-08-13T07:25:08.789693Z | 2025-08-13T07:25:08.789693Z |
| ncsc-2025-0250 | Kwetsbaarheden verholpen in Microsoft Office | 2025-08-13T07:23:56.395786Z | 2025-08-13T07:23:56.395786Z |
| ncsc-2025-0249 | Kwetsbaarheden verholpen in Azure-producten | 2025-08-13T07:22:17.432067Z | 2025-08-13T07:22:17.432067Z |
| ncsc-2025-0248 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-08-13T07:21:52.836899Z | 2025-08-13T07:21:52.836899Z |
| ncsc-2025-0247 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2025-08-13T07:19:19.911308Z | 2025-08-13T07:19:19.911308Z |
| ncsc-2025-0246 | Kwetsbaarheden verholpen in Siemens producten | 2025-08-12T13:03:08.211775Z | 2025-08-12T13:03:08.211775Z |
| ncsc-2025-0245 | Kwetsbaarheden verholpen in SAP producten | 2025-08-12T11:10:21.111816Z | 2025-09-05T11:12:05.722381Z |
| ncsc-2025-0244 | Kwetsbaarheid verholpen in WinRAR | 2025-08-11T07:36:12.848669Z | 2025-08-11T07:36:12.848669Z |
| ncsc-2025-0243 | Kwetsbaarheid verholpen in Microsoft Exchange | 2025-08-07T09:15:22.461434Z | 2025-08-07T09:15:22.461434Z |
| ncsc-2025-0242 | Kwetsbaarheden verholpen in Trend Micro Apex One | 2025-08-06T13:21:03.156432Z | 2025-08-06T13:21:03.156432Z |
| ncsc-2025-0241 | Kwetsbaarheden verholpen in Adobe Experience Manager | 2025-08-06T12:11:46.234849Z | 2025-10-17T10:44:55.312550Z |
| ncsc-2025-0240 | Kwetsbaarheden verholpen in Rockwell Automation Arena | 2025-08-06T07:55:23.705278Z | 2025-08-06T07:55:23.705278Z |
| ncsc-2025-0239 | Kwetsbaarheid verholpen in SonicWall SonicOS | 2025-07-31T11:12:42.653547Z | 2025-07-31T11:12:42.653547Z |
| ncsc-2025-0238 | Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS | 2025-07-30T13:02:51.663320Z | 2025-07-30T13:02:51.663320Z |
| ncsc-2025-0237 | Kwetsbaarheden verholpen in Autodesk AutoCAD | 2025-07-30T08:04:31.603165Z | 2025-07-30T08:04:31.603165Z |
| ncsc-2025-0236 | Kwetsbaarheden verholpen in Salesforce Tableau Server | 2025-07-28T07:52:42.872259Z | 2025-07-28T07:52:42.872259Z |
| ncsc-2025-0235 | Kwetsbaarheden verholpen in Firefox en Thunderbird | 2025-07-23T13:01:45.118883Z | 2025-07-23T13:01:45.118883Z |
| ncsc-2025-0234 | Kwetsbaarheid verholpen in CrushFTP | 2025-07-21T08:34:35.304610Z | 2025-08-28T07:59:34.275023Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:20138-1 | Security update for jasper | 2026-01-30T09:59:14Z | 2026-01-30T09:59:14Z |
| opensuse-su-2026:10127-1 | rekor-1.5.0-1.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:10126-1 | python315-3.15.0~a3-3.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:10125-1 | python311-django-storages-1.14.6-1.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:10124-1 | golang-github-prometheus-prometheus-3.9.1-2.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:10123-1 | freerdp-3.21.0-2.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:10122-1 | fontforge-20251009-4.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:10121-1 | chromedriver-144.0.7559.109-1.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:10120-1 | MozillaFirefox-147.0.2-1.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:10119-1 | ImageMagick-7.1.2.13-2.1 on GA media | 2026-01-30T00:00:00Z | 2026-01-30T00:00:00Z |
| opensuse-su-2026:20134-1 | Security update for java-17-openjdk | 2026-01-29T17:44:57Z | 2026-01-29T17:44:57Z |
| opensuse-su-2026:20133-1 | Security update for glibc | 2026-01-29T17:44:57Z | 2026-01-29T17:44:57Z |
| opensuse-su-2026:20137-1 | Security update for openvpn | 2026-01-29T16:14:38Z | 2026-01-29T16:14:38Z |
| opensuse-su-2026:20136-1 | Security update for gpg2 | 2026-01-29T16:14:38Z | 2026-01-29T16:14:38Z |
| opensuse-su-2026:20132-1 | Security update for elemental-register, elemental-toolkit | 2026-01-29T15:32:26Z | 2026-01-29T15:32:26Z |
| opensuse-su-2026:20127-1 | Security update for python-urllib3 | 2026-01-29T14:48:50Z | 2026-01-29T14:48:50Z |
| opensuse-su-2026:20131-1 | Security update for postgresql17 and postgresql18 | 2026-01-29T13:21:20Z | 2026-01-29T13:21:20Z |
| opensuse-su-2026:20130-1 | Security update for postgresql16 | 2026-01-29T10:55:17Z | 2026-01-29T10:55:17Z |
| opensuse-ru-2026:20129-1 | Recommended update for cloud-init | 2026-01-29T10:30:03Z | 2026-01-29T10:30:03Z |
| opensuse-su-2026:10118-1 | xen-4.21.0_04-1.1 on GA media | 2026-01-29T00:00:00Z | 2026-01-29T00:00:00Z |
| opensuse-su-2026:10117-1 | python314-3.14.2-2.1 on GA media | 2026-01-29T00:00:00Z | 2026-01-29T00:00:00Z |
| opensuse-su-2026:10116-1 | python311-pypdf-6.6.2-1.1 on GA media | 2026-01-29T00:00:00Z | 2026-01-29T00:00:00Z |
| opensuse-su-2026:10115-1 | python311-djangorestframework-3.16.1-2.1 on GA media | 2026-01-29T00:00:00Z | 2026-01-29T00:00:00Z |
| opensuse-su-2026:10114-1 | logback-1.2.13-2.1 on GA media | 2026-01-29T00:00:00Z | 2026-01-29T00:00:00Z |
| opensuse-su-2026:10113-1 | icinga2-2.15.2-1.1 on GA media | 2026-01-29T00:00:00Z | 2026-01-29T00:00:00Z |
| opensuse-su-2026:10112-1 | dirmngr-2.5.17-1.1 on GA media | 2026-01-29T00:00:00Z | 2026-01-29T00:00:00Z |
| opensuse-su-2026:10111-1 | gio-branding-upstream-2.86.3-3.1 on GA media | 2026-01-29T00:00:00Z | 2026-01-29T00:00:00Z |
| opensuse-su-2026:20126-1 | Security update for java-21-openjdk | 2026-01-28T16:43:12Z | 2026-01-28T16:43:12Z |
| opensuse-su-2026:20125-1 | Security update for python-python-multipart | 2026-01-28T16:07:51Z | 2026-01-28T16:07:51Z |
| opensuse-su-2026:20124-1 | Security update for ucode-amd | 2026-01-28T16:01:59Z | 2026-01-28T16:01:59Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:3816 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T05:42:24+00:00 | 2026-03-17T06:47:28+00:00 |
| rhsa-2026:3815 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T05:32:24+00:00 | 2026-03-17T06:47:31+00:00 |
| rhsa-2026:3813 | Red Hat Security Advisory: go-rpm-macros security update | 2026-03-05T05:30:04+00:00 | 2026-03-17T06:36:48+00:00 |
| rhsa-2026:3812 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T04:13:33+00:00 | 2026-03-17T06:47:28+00:00 |
| rhsa-2026:3810 | Red Hat Security Advisory: kernel security update | 2026-03-05T03:22:49+00:00 | 2026-03-05T08:40:12+00:00 |
| rhsa-2026:3782 | Red Hat Security Advisory: RHOAI 2.25.3 - Red Hat OpenShift AI | 2026-03-04T18:23:40+00:00 | 2026-03-17T06:47:28+00:00 |
| rhsa-2026:3391 | Red Hat Security Advisory: OpenShift Container Platform 4.19.25 packages and security update | 2026-03-04T15:54:04+00:00 | 2026-03-17T06:36:43+00:00 |
| rhsa-2026:3753 | Red Hat Security Advisory: osbuild-composer security update | 2026-03-04T15:52:29+00:00 | 2026-03-17T06:47:27+00:00 |
| rhsa-2026:3392 | Red Hat Security Advisory: OpenShift Container Platform 4.19.25 bug fix and security update | 2026-03-04T15:36:49+00:00 | 2026-03-12T19:08:48+00:00 |
| rhsa-2026:3752 | Red Hat Security Advisory: osbuild-composer security update | 2026-03-04T15:29:36+00:00 | 2026-03-17T06:47:27+00:00 |
| rhsa-2026:3751 | Red Hat Security Advisory: Red Hat Developer Hub 1.9.0 release. | 2026-03-04T15:00:31+00:00 | 2026-03-04T15:14:14+00:00 |
| rhsa-2026:3730 | Red Hat Security Advisory: postgresql security update | 2026-03-04T14:32:11+00:00 | 2026-03-13T00:33:00+00:00 |
| rhsa-2026:3416 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 packages and security update | 2026-03-04T09:07:15+00:00 | 2026-03-17T06:36:49+00:00 |
| rhsa-2026:3723 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 | 2026-03-04T08:59:26+00:00 | 2026-03-17T06:47:27+00:00 |
| rhsa-2026:3417 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 bug fix and security update | 2026-03-04T08:55:38+00:00 | 2026-03-12T19:08:49+00:00 |
| rhsa-2026:3418 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 bug fix and security update | 2026-03-04T08:33:38+00:00 | 2026-03-13T01:02:37+00:00 |
| rhsa-2026:3718 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 | 2026-03-04T07:52:57+00:00 | 2026-03-17T06:47:27+00:00 |
| rhsa-2026:3419 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 security and extras update | 2026-03-04T07:32:52+00:00 | 2026-03-13T01:02:37+00:00 |
| rhsa-2026:3713 | Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI | 2026-03-04T07:18:30+00:00 | 2026-03-17T06:47:26+00:00 |
| rhsa-2026:3712 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 | 2026-03-04T07:12:04+00:00 | 2026-03-17T06:47:26+00:00 |
| rhsa-2026:3710 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3 | 2026-03-04T06:00:07+00:00 | 2026-03-17T06:47:26+00:00 |
| rhsa-2026:3699 | Red Hat Security Advisory: yggdrasil-worker-package-manager security update | 2026-03-04T05:15:19+00:00 | 2026-03-17T06:36:48+00:00 |
| rhsa-2026:3692 | Red Hat Security Advisory: kernel security update | 2026-03-04T01:01:24+00:00 | 2026-03-04T08:13:00+00:00 |
| rhsa-2026:3685 | Red Hat Security Advisory: kernel security update | 2026-03-03T20:57:40+00:00 | 2026-03-13T01:10:32+00:00 |
| rhsa-2026:3668 | Red Hat Security Advisory: go-rpm-macros security update | 2026-03-03T16:17:02+00:00 | 2026-03-17T06:36:47+00:00 |
| rhsa-2026:3669 | Red Hat Security Advisory: go-rpm-macros security update | 2026-03-03T15:33:23+00:00 | 2026-03-17T06:36:47+00:00 |
| rhsa-2026:3577 | Red Hat Security Advisory: libpng security update | 2026-03-03T12:51:32+00:00 | 2026-03-17T10:24:13+00:00 |
| rhsa-2026:3638 | Red Hat Security Advisory: nginx:1.24 security update | 2026-03-03T11:35:14+00:00 | 2026-03-17T10:42:15+00:00 |
| rhsa-2026:3634 | Red Hat Security Advisory: kernel-rt security update | 2026-03-03T09:54:06+00:00 | 2026-03-13T01:10:32+00:00 |
| rhsa-2026:3402 | Red Hat Security Advisory: OpenShift Container Platform 4.21.4 bug fix and security update | 2026-03-03T09:24:45+00:00 | 2026-03-11T05:29:48+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| sevd-2020-224-07 | SoMove | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-06 | Harmony® eXLhoist | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-05 | PowerChute Business Edition | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-04 | APC Easy UPS On-Line Software | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-03 | Modicon M218 Logic Controller | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-02 | spaceLYnk & Wiser for KNX (formerly homeLYnk) | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-01 | Schneider Electric Modbus Serial Driver | 2020-08-11T00:00:00.000Z | 2020-10-13T00:00:00.000Z |
| sevd-2020-196-01 | Schneider Electric Software Update (SESU) | 2020-07-14T00:00:00.000Z | 2020-07-14T00:00:00.000Z |
| sevd-2020-175-01 | Treck TCP/IP Vulnerabilities (Ripple20) | 2020-06-23T16:00:00.000Z | 2022-08-08T13:57:08.970Z |
| sevd-2020-174-01 | APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices | 2020-06-22T00:00:00.000Z | 2021-06-30T00:00:00.000Z |
| sevd-2020-161-05 | Easergy Builder | 2020-06-09T00:00:00.000Z | 2021-05-13T00:00:00.000Z |
| sevd-2020-161-04 | Easergy T300 | 2020-06-09T00:00:00.000Z | 2021-05-13T00:00:00.000Z |
| sevd-2020-161-03 | Modicon LMC078 Logic Controller additional URGENT/11 Fix | 2020-06-09T00:00:00.000Z | 2020-06-09T00:00:00.000Z |
| sevd-2020-161-01 | Modicon M218 Logic Controller | 2020-06-09T00:00:00.000Z | 2020-06-09T00:00:00.000Z |
| sevd-2020-133-03 | U.motion Servers and Touch Panels | 2020-05-12T00:00:00.000Z | 2021-04-15T00:00:00.000Z |
| sevd-2020-133-02 | Vijeo Designer and Vijeo Designer Basic Software | 2020-05-12T00:00:00.000Z | 2020-08-14T00:00:00.000Z |
| sevd-2020-105-03 | Vijeo Designer and Vijeo Designer Basic | 2020-04-14T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-105-02 | Modicon M218/M241/M251/M258 Logic Controllers,SoMachine/SoMachine Motion, EcoStruxure™ Machine Expert | 2020-04-14T00:00:00.000Z | 2020-11-10T00:00:00.000Z |
| sevd-2020-105-01 | Modicon M100/M200/M221 controllers, SoMachine Basic and EcoStruxure Machine Expert - Basic Programming Software | 2020-04-14T00:00:00.000Z | 2020-04-14T00:00:00.000Z |
| sevd-2020-080-01 | Modicon Controllers, EcoStruxure™ Control Expert and Unity Pro Programming Software | 2020-03-20T00:00:00.000Z | 2021-05-11T00:00:00.000Z |
| sevd-2020-070-04 | Andover Continuum System | 2020-03-10T00:00:00.000Z | 2020-05-12T00:00:00.000Z |
| sevd-2020-070-03 | ZigBee Installation Toolkit | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-070-02 | Modicon Quantum Ethernet Network module and Quantum / Premium COPRO | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-070-01 | IGSS (Interactive Graphical SCADA System) | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-042-01 | ProSoft Configurator for Modicon PMEPXM0100 (H) | 2020-02-11T00:00:00.000Z | 2020-02-11T00:00:00.000Z |
| sevd-2020-014-01 | MSX Configurator | 2020-01-14T00:00:00.000Z | 2020-01-14T00:00:00.000Z |
| sevd-2019-281-02 | Modicon Controllers | 2019-09-26T12:53:28.000Z | 2024-08-13T00:00:00.000Z |
| sevd-2019-225-01 | Harmony (formerly known as Magelis) HMI Panels | 2019-08-13T09:59:02.000Z | 2024-01-09T09:59:02.000Z |
| sesb-2019-214-01 | Wind River VxWorks Vulnerabilities (URGENT/11) | 2019-08-02T00:00:00.000Z | 2022-09-13T00:00:00.000Z |
| sevd-2019-134-11 | Modicon Controllers | 2019-05-14T08:31:22.000Z | 2025-02-11T06:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-364175 | SSA-364175: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1 | 2024-07-09T00:00:00Z | 2026-01-13T00:00:00Z |
| ssa-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-170375 | SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9 | 2024-07-09T00:00:00Z | 2025-08-12T00:00:00Z |
| ssa-088132 | SSA-088132: Denial of Service Vulnerability in the OPC UA Server Implementations of Several Industrial Products | 2024-07-09T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-771940 | SSA-771940: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-06-11T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-690517 | SSA-690517: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11ax Family | 2024-06-11T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-196737 | SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2 | 2024-06-11T00:00:00Z | 2025-02-11T00:00:00Z |
| ssa-024584 | SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-976324 | SSA-976324: Multiple IGS File Parsing Vulnerabilities in PS/IGES Parasolid Translator Component before V27.1.215 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-962515 | SSA-962515: Out of Bounds Read Vulnerability in Industrial Products | 2024-05-14T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-953710 | SSA-953710: Vulnerabilities in the Network Communication Stack in Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-925850 | SSA-925850: Improper Access Control in Polarion ALM | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-923361 | SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-916916 | SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-661579 | SSA-661579: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-589937 | SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-489698 | SSA-489698: X_T File Parsing Vulnerability in Parasolid | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-292022 | SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20170-1 | Security update for cockpit-subscriptions | 2026-01-27T20:40:44Z | 2026-01-27T20:40:44Z |
| suse-su-2026:0307-1 | Security update for python-python-multipart | 2026-01-27T16:36:58Z | 2026-01-27T16:36:58Z |
| suse-su-2026:0306-1 | Security update for xen | 2026-01-27T16:15:19Z | 2026-01-27T16:15:19Z |
| suse-su-2026:0305-1 | Recommended update for kernel-firmware | 2026-01-27T16:15:14Z | 2026-01-27T16:15:14Z |
| suse-su-2026:0304-1 | Security update for xen | 2026-01-27T16:14:51Z | 2026-01-27T16:14:51Z |
| suse-su-2026:0303-1 | Security update for xen | 2026-01-27T16:14:45Z | 2026-01-27T16:14:45Z |
| suse-su-2026:0301-1 | Security update for nodejs22 | 2026-01-27T08:20:46Z | 2026-01-27T08:20:46Z |
| suse-su-2026:0300-1 | Security update for python-pyasn1 | 2026-01-27T06:46:27Z | 2026-01-27T06:46:27Z |
| suse-su-2026:0299-1 | Security update for python311 | 2026-01-26T16:39:24Z | 2026-01-26T16:39:24Z |
| suse-su-2026:0298-1 | Security update for go1.25-openssl | 2026-01-26T16:11:04Z | 2026-01-26T16:11:04Z |
| suse-su-2026:0297-1 | Security update for go1.25-openssl | 2026-01-26T16:10:54Z | 2026-01-26T16:10:54Z |
| suse-su-2026:0296-1 | Security update for go1.24-openssl | 2026-01-26T13:51:05Z | 2026-01-26T13:51:05Z |
| suse-su-2026:0295-1 | Security update for nodejs22 | 2026-01-26T13:19:01Z | 2026-01-26T13:19:01Z |
| suse-su-2026:20146-1 | Security update for php8 | 2026-01-26T12:36:41Z | 2026-01-26T12:36:41Z |
| suse-su-2026:0293-1 | Security update for the Linux Kernel | 2026-01-26T11:36:42Z | 2026-01-26T11:36:42Z |
| suse-su-2026:20169-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-01-26T11:24:31Z | 2026-01-26T11:24:31Z |
| suse-su-2026:20149-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-01-26T11:24:31Z | 2026-01-26T11:24:31Z |
| suse-su-2026:0291-1 | Security update for openCryptoki | 2026-01-26T11:11:40Z | 2026-01-26T11:11:40Z |
| suse-su-2026:20168-1 | Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-01-26T11:03:44Z | 2026-01-26T11:03:44Z |
| suse-su-2026:0290-1 | Security update for openvswitch3 | 2026-01-26T10:34:13Z | 2026-01-26T10:34:13Z |
| suse-su-2026:20167-1 | Security update for avahi | 2026-01-26T09:42:41Z | 2026-01-26T09:42:41Z |
| suse-su-2026:20145-1 | Security update for avahi | 2026-01-26T09:42:41Z | 2026-01-26T09:42:41Z |
| suse-su-2026:20165-1 | Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) | 2026-01-26T09:12:02Z | 2026-01-26T09:12:02Z |
| suse-su-2026:20164-1 | Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-01-26T09:12:02Z | 2026-01-26T09:12:02Z |
| suse-su-2026:0288-1 | Security update for qemu | 2026-01-26T09:04:46Z | 2026-01-26T09:04:46Z |
| suse-su-2026:0287-1 | Security update for harfbuzz | 2026-01-23T23:35:49Z | 2026-01-23T23:35:49Z |
| suse-su-2026:0286-1 | Security update for glib2 | 2026-01-23T23:35:36Z | 2026-01-23T23:35:36Z |
| suse-su-2026:0284-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) | 2026-01-23T20:04:18Z | 2026-01-23T20:04:18Z |
| suse-su-2026:0283-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7) | 2026-01-23T17:33:31Z | 2026-01-23T17:33:31Z |
| suse-su-2026:20163-1 | Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) | 2026-01-23T16:43:58Z | 2026-01-23T16:43:58Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2026:0545 | Important: podman security update | 2026-01-14T00:00:00Z | 2026-01-16T15:04:20Z |
| alsa-2026:0525 | Moderate: postgresql16 security update | 2026-01-13T00:00:00Z | 2026-01-16T15:06:52Z |
| alsa-2026:0524 | Moderate: postgresql:15 security update | 2026-01-13T00:00:00Z | 2026-01-16T15:09:07Z |
| alsa-2026:0523 | Moderate: postgresql:13 security update | 2026-01-13T00:00:00Z | 2026-01-16T15:11:39Z |
| alsa-2026:0519 | Moderate: postgresql:16 security update | 2026-01-13T00:00:00Z | 2026-01-16T15:14:12Z |
| alsa-2026:0493 | Moderate: postgresql:16 security update | 2026-01-13T00:00:00Z | 2026-01-19T09:45:22Z |
| alsa-2026:0492 | Moderate: postgresql:15 security update | 2026-01-13T00:00:00Z | 2026-01-19T10:02:02Z |
| alsa-2026:0491 | Moderate: postgresql security update | 2026-01-13T00:00:00Z | 2026-01-16T15:16:39Z |
| alsa-2026:0470 | Important: podman security update | 2026-01-12T00:00:00Z | 2026-01-16T15:18:30Z |
| alsa-2026:0464 | Moderate: cups security update | 2026-01-12T00:00:00Z | 2026-01-16T15:20:45Z |
| alsa-2026:0458 | Moderate: libpq security update | 2026-01-12T00:00:00Z | 2026-01-16T15:21:50Z |
| alsa-2026:0453 | Important: kernel security update | 2026-01-12T00:00:00Z | 2026-01-16T15:27:10Z |
| alsa-2026:0445 | Moderate: kernel security update | 2026-01-12T00:00:00Z | 2026-01-16T15:31:40Z |
| alsa-2026:0444 | Important: kernel security update | 2026-01-12T00:00:00Z | 2026-01-16T15:34:47Z |
| alsa-2026:0443 | Important: kernel-rt security update | 2026-01-12T00:00:00Z | 2026-01-16T15:37:02Z |
| alsa-2026:0437 | Important: buildah security update | 2026-01-12T00:00:00Z | 2026-01-16T15:38:30Z |
| alsa-2026:0436 | Important: buildah security update | 2026-01-12T00:00:00Z | 2026-01-16T15:50:15Z |
| alsa-2026:0423 | Important: libsoup3 security update | 2026-01-12T00:00:00Z | 2026-01-16T15:49:08Z |
| alsa-2026:0422 | Important: libsoup security update | 2026-01-12T00:00:00Z | 2026-01-16T15:46:52Z |
| alsa-2026:0421 | Important: libsoup security update | 2026-01-12T00:00:00Z | 2026-01-16T15:44:34Z |
| alsa-2026:0337 | Moderate: openssl security update | 2026-01-08T00:00:00Z | 2026-01-16T15:42:22Z |
| alsa-2026:0312 | Moderate: cups security update | 2026-01-08T00:00:00Z | 2026-01-16T15:40:37Z |
| alsa-2026:0247 | Important: mariadb:10.11 security update | 2026-01-07T00:00:00Z | 2026-01-12T10:57:59Z |
| alsa-2026:0241 | Important: libpng security update | 2026-01-07T00:00:00Z | 2026-01-07T21:34:12Z |
| alsa-2026:0238 | Important: libpng security update | 2026-01-07T00:00:00Z | 2026-01-07T21:36:21Z |
| alsa-2026:0237 | Important: libpng security update | 2026-01-07T00:00:00Z | 2026-01-07T21:38:33Z |
| alsa-2026:0233 | Important: mariadb:10.5 security update | 2026-01-07T00:00:00Z | 2026-01-12T10:45:28Z |
| alsa-2026:0232 | Important: mariadb:10.11 security update | 2026-01-07T00:00:00Z | 2026-01-12T10:48:54Z |
| alsa-2026:0225 | Important: mariadb:10.3 security update | 2026-01-07T00:00:00Z | 2026-01-12T10:51:12Z |
| alsa-2026:0137 | Important: mariadb security update | 2026-01-06T00:00:00Z | 2026-01-07T14:24:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2025-127 | Object-size in unpack_dsd_samples | 2025-02-15T00:16:56.314634Z | 2025-02-15T00:16:56.315060Z |
| osv-2025-124 | Use-of-uninitialized-value in get_word | 2025-02-15T00:09:23.967012Z | 2025-02-15T00:09:23.967345Z |
| osv-2025-119 | Heap-buffer-overflow in snmp_config_when | 2025-02-14T00:15:08.375253Z | 2025-03-18T00:37:43.437021Z |
| osv-2025-114 | Index-out-of-bounds in ada_fuzz_header.h | 2025-02-14T00:11:24.754671Z | 2025-02-14T00:11:24.755045Z |
| osv-2025-113 | Heap-buffer-overflow in snmp_log_options | 2025-02-14T00:01:45.812592Z | 2025-03-18T00:35:43.690001Z |
| osv-2025-111 | Stack-buffer-overflow in absl::debugging_internal::ParseLocalNameSuffix | 2025-02-13T00:15:36.403252Z | 2025-02-13T00:15:36.403744Z |
| osv-2022-1292 | Heap-buffer-overflow in LibRaw::phase_one_correct | 2025-02-10T00:13:32.671074Z | 2025-02-10T00:13:32.671487Z |
| osv-2025-108 | Use-of-uninitialized-value in decimate_dsd_run | 2025-02-10T00:12:35.140061Z | 2025-02-10T00:12:35.140400Z |
| osv-2025-107 | Use-of-uninitialized-value in get_words_lossless | 2025-02-10T00:06:27.370789Z | 2025-02-10T00:06:27.371196Z |
| osv-2025-105 | Heap-use-after-free in unpack_dsd_samples | 2025-02-10T00:00:59.046535Z | 2025-02-10T00:00:59.047010Z |
| osv-2025-93 | Heap-buffer-overflow in lj_strfmt_pushvf | 2025-02-05T00:18:14.584575Z | 2025-07-23T14:24:29.384461Z |
| osv-2025-92 | Null-dereference READ in session_startup | 2025-02-05T00:18:00.385170Z | 2025-12-20T14:25:08.038174Z |
| osv-2025-90 | Null-dereference READ in ubsan_GetStackTrace | 2025-02-03T00:02:54.185593Z | 2025-12-20T14:15:37.974751Z |
| osv-2025-88 | Segv on unknown address in ___interceptor_free | 2025-02-02T00:16:16.201801Z | 2025-02-02T00:16:16.202130Z |
| osv-2025-85 | Segv on unknown address in ndpi_free_flow_data | 2025-02-02T00:13:42.076001Z | 2025-02-02T00:13:42.076373Z |
| osv-2025-84 | Segv on unknown address in Flow::processExtraDissectedInformation | 2025-02-02T00:12:09.563391Z | 2025-02-02T00:12:09.563778Z |
| osv-2025-81 | Segv on unknown address in ndpi_serialize_string_string | 2025-02-02T00:02:52.946833Z | 2025-02-02T00:02:52.947083Z |
| osv-2025-80 | Segv on unknown address in ndpi_snprintf | 2025-02-02T00:00:58.798346Z | 2025-02-02T00:00:58.798951Z |
| osv-2025-74 | Stack-buffer-overflow in xmlValidateElementContent | 2025-01-29T00:13:55.386256Z | 2025-01-29T00:13:55.386629Z |
| osv-2024-1427 | Heap-buffer-overflow in extract_mediaip | 2025-01-28T00:14:30.487391Z | 2025-03-18T00:41:33.426387Z |
| osv-2025-68 | UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame | 2025-01-28T00:00:46.845996Z | 2025-02-05T14:25:02.989469Z |
| osv-2025-63 | Stack-buffer-underflow in gs_type1_interpret | 2025-01-27T00:10:00.833706Z | 2025-01-27T00:10:00.834151Z |
| osv-2025-62 | UNKNOWN READ in RDKit::Dict::reset | 2025-01-27T00:01:51.692636Z | 2026-03-06T14:31:24.229549Z |
| osv-2025-61 | Heap-buffer-overflow in oatpp::json::Utils::escapeString | 2025-01-27T00:00:09.905879Z | 2025-01-27T00:00:09.906561Z |
| osv-2024-1424 | Heap-buffer-overflow in extract_candidate | 2025-01-25T00:17:13.787335Z | 2025-01-25T14:25:05.188301Z |
| osv-2024-1423 | Security exception in java.base/java.util.Arrays.copyOfRange | 2025-01-25T00:03:24.362190Z | 2025-01-25T00:03:24.362579Z |
| osv-2025-54 | UNKNOWN READ in Assimp::SceneCombiner::CopyScene | 2025-01-22T00:15:23.827419Z | 2025-03-18T00:29:47.108675Z |
| osv-2025-52 | Use-of-uninitialized-value in icalmemory_strdup | 2025-01-22T00:07:34.573371Z | 2025-01-22T00:07:34.573823Z |
| osv-2025-51 | Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame | 2025-01-22T00:03:50.355443Z | 2025-01-24T14:26:07.849301Z |
| osv-2025-50 | Heap-double-free in r_crbtree_free | 2025-01-20T00:16:43.389094Z | 2025-01-20T00:16:43.389604Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2024-0370 | proc-macro-error is unmaintained | 2024-09-01T12:00:00Z | 2024-09-09T12:08:37Z |
| rustsec-2024-0367 | gix-path uses local config across repos when it is the highest scope | 2024-08-31T12:00:00Z | 2024-09-03T22:23:51Z |
| rustsec-2024-0366 | CWA-2023-004: Excessive number of function parameters in compiled Wasm | 2024-08-27T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0385 | `cw0` is unmaintained | 2024-08-26T12:00:00Z | 2024-11-10T13:12:32Z |
| rustsec-2024-0365 | Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts | 2024-08-23T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0364 | gitoxide-core does not neutralize special characters for terminals | 2024-08-22T12:00:00Z | 2024-08-22T23:15:02Z |
| rustsec-2024-0363 | Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts | 2024-08-15T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0444 | Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then` | 2024-08-14T12:00:00Z | 2025-12-19T06:15:15Z |
| rustsec-2024-0390 | minitrace is Unmaintained | 2024-08-14T12:00:00Z | 2024-11-10T13:54:21Z |
| rustsec-2024-0361 | CWA-2024-004: Gas mispricing in cosmwasm-vm | 2024-08-08T12:00:00Z | 2024-08-08T17:11:37Z |
| rustsec-2024-0362 | Stack overflow when parsing specially crafted JSON ABI strings | 2024-07-30T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0446 | Shell expansion in custom commands | 2024-07-26T12:00:00Z | 2025-12-22T13:54:49Z |
| rustsec-2024-0360 | `XmpFile::close` can trigger UB | 2024-07-26T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0359 | The kstring integration in gix-attributes is unsound | 2024-07-24T12:00:00Z | 2025-01-19T00:36:24Z |
| rustsec-2024-0358 | Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files | 2024-07-23T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0357 | `MemBio::get_buf` has undefined behavior with empty buffers | 2024-07-21T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0405 | op_panic in the base runtime can force a panic in the runtime's containing thread | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0403 | op_panic in the base runtime can force a panic in the runtime's containing thread | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0393 | Ambiguous challenge derivation | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0392 | Ambiguous challenge derivation | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0391 | Ambiguous challenge derivation | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0356 | `UserIdentity::is_verified` not checking verification status of own user identity while performing the check | 2024-07-18T12:00:00Z | 2024-07-19T10:11:38Z |
| rustsec-2024-0355 | gix-path can use a fake program files location | 2024-07-18T12:00:00Z | 2024-07-18T16:46:06Z |
| rustsec-2024-0354 | Usage of non-constant time base64 decoder could lead to leakage of secret key material | 2024-07-17T12:00:00Z | 2024-07-18T11:24:58Z |
| rustsec-2024-0369 | phonenumber: panic on parsing crafted phonenumber inputs | 2024-07-07T12:00:00Z | 2024-09-05T13:40:37Z |
| rustsec-2024-0442 | Dump Undefined Memory by `JitDumpFile` | 2024-07-06T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0389 | `openslide` is unmaintained | 2024-07-03T12:00:00Z | 2024-11-10T13:42:14Z |
| rustsec-2024-0387 | `opentelemetry_api` has been merged into the `opentelemetry` crate | 2024-07-03T12:00:00Z | 2024-11-10T13:29:25Z |
| rustsec-2024-0347 | Incorrect usage of `#[repr(packed)]` | 2024-07-01T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0346 | Incorrect usage of `#[repr(packed)]` | 2024-07-01T12:00:00Z | 2025-10-28T06:02:18Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitea-2026-20800 | Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation | 2026-01-30T08:40:39.688Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20750 | Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR) | 2026-01-30T08:40:37.768Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20736 | Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check | 2026-01-30T08:40:35.702Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-0798 | Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation | 2026-01-30T08:40:33.870Z | 2026-01-30T09:12:31.676Z |
| bit-rum-2022-50806 | 4images 1.9 - Remote Command Execution (RCE) | 2026-01-29T20:50:41.024Z | 2026-01-29T21:11:31.203Z |
| bit-ghost-2025-9862 | Ghost 6.0.6 - SSRF via oEmbed Bookmark | 2026-01-29T20:40:02.993Z | 2026-03-09T12:11:07.851Z |
| bit-pytorch-2026-24747 | PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files | 2026-01-29T08:50:25.994Z | 2026-01-29T09:11:54.406Z |
| bit-appsmith-2026-24042 | Appsmith public apps can execute unpublished actions (viewMode confusion) | 2026-01-29T08:36:35.250Z | 2026-02-26T09:13:58.886Z |
| bit-gitlab-2026-1102 | Allocation of Resources Without Limits or Throttling in GitLab | 2026-01-27T09:13:24.685Z | 2026-01-27T09:14:53.416Z |
| bit-gitlab-2026-0723 | Unchecked Return Value in GitLab | 2026-01-27T09:13:22.812Z | 2026-01-27T09:14:53.416Z |
| bit-gitlab-2025-13928 | Incorrect Authorization in GitLab | 2026-01-27T09:10:58.706Z | 2026-01-27T09:14:53.416Z |
| bit-gitlab-2025-13927 | Allocation of Resources Without Limits or Throttling in GitLab | 2026-01-27T09:10:56.771Z | 2026-01-27T09:14:53.416Z |
| bit-gitlab-2025-13335 | Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab | 2026-01-27T09:10:47.144Z | 2026-01-27T09:14:53.416Z |
| bit-python-2026-0865 | wsgiref.headers.Headers allows header newline injection | 2026-01-26T14:50:04.789Z | 2026-03-04T14:21:20.421Z |
| bit-python-2026-0672 | Header injection in http.cookies.Morsel | 2026-01-26T14:50:03.015Z | 2026-02-20T15:52:56.451Z |
| bit-solr-2026-22444 | Apache Solr: Insufficient file-access checking in standalone core-creation requests | 2026-01-26T14:49:58.661Z | 2026-01-26T15:09:56.435Z |
| bit-solr-2026-22022 | Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin | 2026-01-26T14:49:57.084Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3647 | Moodle: idor when accessing the cohorts report | 2026-01-26T14:49:52.208Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3645 | Moodle: idor in messaging web service allows access to some user details | 2026-01-26T14:49:50.806Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3644 | Moodle: ajax section delete does not respect course_can_delete_section() | 2026-01-26T14:49:49.408Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3643 | Moodle: reflected xss risk in policy tool | 2026-01-26T14:49:47.987Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3642 | Moodle: authenticated remote code execution risk in the moodle lms equella repository | 2026-01-26T14:49:46.287Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3641 | Moodle: authenticated remote code execution risk in the moodle lms dropbox repository | 2026-01-26T14:49:44.921Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-15367 | POP3 command injection in user-controlled commands | 2026-01-26T14:49:43.697Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3640 | Moodle: idor in web service allows users enrolled in a course to access some details of other users | 2026-01-26T14:49:43.349Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-15366 | IMAP command injection in user-controlled commands | 2026-01-26T14:49:42.105Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-15282 | Header injection via newlines in data URL mediatype | 2026-01-26T14:49:40.631Z | 2026-02-23T12:55:58.474Z |
| bit-moodle-2025-3637 | Moodle: csrf token exposure via url in moodle mod_data module | 2026-01-26T14:49:40.549Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3636 | Moodle: idor in moodle rss block allows unauthorized access to rss feeds | 2026-01-26T14:49:39.118Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3635 | Moodle: csrf risk in moodle user tours manager allows tour duplication | 2026-01-26T14:49:37.686Z | 2026-01-26T15:09:56.435Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-oh86281 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:52:25.054249Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ll43287 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:50:54.603931Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ej58111 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:50:24.547860Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-qw16951 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:48:54.464404Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-zp68963 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:47:54.288582Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-sv79070 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:47:54.520743Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ad41794 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:47:54.368234Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-tr11635 | Cancelling a query (e | 2026-01-30T15:46:54.229170Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gc16599 | Cancelling a query (e | 2026-01-30T15:46:54.243517Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-xd92996 | Cancelling a query (e | 2026-01-30T15:46:24.650971Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ok45738 | Within HostnameError | 2026-01-30T15:45:53.967263Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rx06615 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:45:24.056160Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fj56296 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:45:23.960354Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bt39952 | Moby is an open source container framework developed by Docker Inc | 2026-01-30T15:45:23.955705Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-uy81473 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:44:54.187987Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bs24435 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:44:54.166999Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-me47927 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:43:24.066833Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bq46815 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:43:24.142238Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-pa85871 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:42:24.099846Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bv91860 | Within HostnameError | 2026-01-30T15:42:23.881650Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ia37596 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:41:53.874436Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-er42900 | ParseAddress function constructs domain-literal address components through repeated string concatenation | 2026-01-30T15:41:23.817747Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dv06422 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:40:54.415037Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mj51212 | Cancelling a query (e | 2026-01-30T15:40:23.782215Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-so16176 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:39:24.255623Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ru37859 | Cancelling a query (e | 2026-01-30T15:39:24.210234Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-pc16040 | Within HostnameError | 2026-01-30T15:37:23.991168Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dy37532 | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability | 2026-01-30T15:36:23.811582Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rw65075 | Within HostnameError | 2026-01-30T15:35:53.815887Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hg66170 | Cancelling a query (e | 2026-01-30T15:35:23.809128Z | 2026-01-29T18:58:54Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2019-ALE-002 | Vulnérabilités affectant l'écosystème Microsoft Exchange et Active Directory | 2019-01-30T00:00:00.000000 | 2019-03-06T00:00:00.000000 |
| certfr-2019-ale-001 | Vulnérabilité dans le gestionnaire de paquets APT | 2019-01-22T00:00:00.000000 | 2019-02-27T00:00:00.000000 |
| CERTFR-2019-ALE-001 | Vulnérabilité dans le gestionnaire de paquets APT | 2019-01-22T00:00:00.000000 | 2019-02-27T00:00:00.000000 |
| certfr-2018-ale-013 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| CERTFR-2018-ALE-013 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-012 | Vulnérabilité dans Wallix AdminBastion | 2018-10-26T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| CERTFR-2018-ALE-012 | Vulnérabilité dans Wallix AdminBastion | 2018-10-26T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-011 | Vulnérabilité dans le client Git | 2018-10-08T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| CERTFR-2018-ALE-011 | Vulnérabilité dans le client Git | 2018-10-08T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| certfr-2018-ale-010 | Vulnérabilité activement exploitée dans le framework STRUTS 2 | 2018-08-29T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-009 | Vulnérabilité dans Microsoft Windows | 2018-08-29T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| CERTFR-2018-ALE-010 | Vulnérabilité activement exploitée dans le framework STRUTS 2 | 2018-08-29T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-009 | Vulnérabilité dans Microsoft Windows | 2018-08-29T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-ale-008 | Campagne de messages électroniques non sollicités de type Locky Locker | 2018-08-03T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-008 | Campagne de messages électroniques non sollicités de type Locky Locker | 2018-08-03T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-007 | Multiples vulnérabilités dans S/MIME et OpenPGP | 2018-05-14T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-007 | Multiples vulnérabilités dans S/MIME et OpenPGP | 2018-05-14T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-006 | Vulnérabilité dans Cisco IOS et IOS XE Smart Install Client | 2018-04-06T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| CERTFR-2018-ALE-006 | Vulnérabilité dans Cisco IOS et IOS XE Smart Install Client | 2018-04-06T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-005 | Multiples vulnérabilités dans Drupal | 2018-03-29T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| CERTFR-2018-ALE-005 | Multiples vulnérabilités dans Drupal | 2018-03-29T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-004 | Vulnérabilité dans le serveur de messagerie Exim | 2018-03-07T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| CERTFR-2018-ALE-004 | Vulnérabilité dans le serveur de messagerie Exim | 2018-03-07T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-003 | Vulnérabilité dans Adobe Flash Player | 2018-02-02T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| CERTFR-2018-ALE-003 | Vulnérabilité dans Adobe Flash Player | 2018-02-02T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| certfr-2018-ale-002 | Vulnérabilité dans Cisco Adaptive Security Appliance | 2018-02-01T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| CERTFR-2018-ALE-002 | Vulnérabilité dans Cisco Adaptive Security Appliance | 2018-02-01T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2018-ale-001 | Multiples vulnérabilités de fuite d'informations dans des processeurs | 2018-01-04T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-001 | Multiples vulnérabilités de fuite d'informations dans des processeurs | 2018-01-04T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2017-ale-020 | Vulnérabilité dans des implémentations de TLS | 2017-12-13T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0115 | Multiples vulnérabilités dans Tenable Identity Exposure | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| certfr-2026-avi-0114 | Multiples vulnérabilités dans Google Chrome | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| certfr-2026-avi-0113 | Vulnérabilité dans Google Pixel | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0117 | Multiples vulnérabilités dans GLPI | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0116 | Vulnérabilité dans les produits Moxa | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0115 | Multiples vulnérabilités dans Tenable Identity Exposure | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0114 | Multiples vulnérabilités dans Google Chrome | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0113 | Vulnérabilité dans Google Pixel | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| certfr-2026-avi-0112 | Multiples vulnérabilités dans les produits VMware | 2026-02-02T00:00:00.000000 | 2026-02-02T00:00:00.000000 |
| certfr-2026-avi-0111 | Vulnérabilité dans ESET Inspect Connector | 2026-02-02T00:00:00.000000 | 2026-02-02T00:00:00.000000 |
| CERTFR-2026-AVI-0112 | Multiples vulnérabilités dans les produits VMware | 2026-02-02T00:00:00.000000 | 2026-02-02T00:00:00.000000 |
| CERTFR-2026-AVI-0111 | Vulnérabilité dans ESET Inspect Connector | 2026-02-02T00:00:00.000000 | 2026-02-02T00:00:00.000000 |
| certfr-2026-avi-0110 | Multiples vulnérabilités Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0109 | Multiples vulnérabilités dans les produits IBM | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0108 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0107 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0106 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0105 | Vulnérabilité dans Microsoft Edge | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0104 | Vulnérabilité dans Qnap QTS | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0103 | Multiples vulnérabilités dans Node.js | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0102 | Vulnérabilité dans Splunk Enterprise | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0110 | Multiples vulnérabilités Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0109 | Multiples vulnérabilités dans les produits IBM | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0108 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0107 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0106 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0105 | Vulnérabilité dans Microsoft Edge | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0104 | Vulnérabilité dans Qnap QTS | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0103 | Multiples vulnérabilités dans Node.js | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| CERTFR-2026-AVI-0102 | Vulnérabilité dans Splunk Enterprise | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000005 | EXIF Viewer Classic vulnerable to cross-site scripting | 2025-01-27T14:25+09:00 | 2025-01-27T14:25+09:00 |
| jvndb-2025-000004 | Multiple vulnerabilities in I-O DATA router UD-LT2 | 2025-01-22T13:55+09:00 | 2025-02-20T15:55+09:00 |
| jvndb-2025-000003 | FortiWeb vulnerable to SQL injection | 2025-01-21T15:59+09:00 | 2025-01-21T15:59+09:00 |
| jvndb-2025-001027 | Linux Ratfor vulnerable to stack-based buffer overflow | 2025-01-16T13:27+09:00 | 2025-01-16T13:27+09:00 |
| jvndb-2025-000001 | PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting | 2025-01-08T17:08+09:00 | 2025-01-08T17:08+09:00 |
| jvndb-2024-015471 | Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element | 2024-12-25T11:28+09:00 | 2024-12-25T11:28+09:00 |
| jvndb-2024-015393 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (December 2024) | 2024-12-23T12:52+09:00 | 2024-12-23T12:52+09:00 |
| jvndb-2024-014918 | Authentication Bypass Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2024-12-17T15:23+09:00 | 2024-12-17T15:23+09:00 |
| jvndb-2024-000128 | Multiple vulnerabilities in SHARP routers | 2024-12-17T07:54+09:00 | 2024-12-17T07:54+09:00 |
| jvndb-2024-000127 | "Shonen Jump+" App for Android fails to restrict custom URL schemes properly | 2024-12-16T15:07+09:00 | 2024-12-16T15:07+09:00 |
| jvndb-2024-014825 | WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting | 2024-12-16T13:57+09:00 | 2024-12-16T13:57+09:00 |
| jvndb-2024-014793 | Multiple vulnerabilities in FXC AE1021 and AE1021PE | 2024-12-16T11:51+09:00 | 2024-12-16T11:51+09:00 |
| jvndb-2024-014079 | Trend Micro Deep Security Agent for Windows and Deep Security Notifier on DSVA vulnerable to OS command injection | 2024-12-06T12:11+09:00 | 2024-12-06T12:11+09:00 |
| jvndb-2024-000125 | Multiple vulnerabilities in I-O DATA routers UD-LT1 and UD-LT1/EX | 2024-12-04T15:22+09:00 | 2024-12-18T15:20+09:00 |
| jvndb-2024-000124 | Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers | 2024-12-02T16:38+09:00 | 2024-12-02T16:38+09:00 |
| jvndb-2024-000123 | Multiple FCNT Android devices vulnerable to authentication bypass | 2024-11-29T15:30+09:00 | 2024-11-29T15:30+09:00 |
| jvndb-2024-013702 | Multiple vulnerabilities in FUJI ELECTRIC products | 2024-11-29T14:42+09:00 | 2024-11-29T14:42+09:00 |
| jvndb-2024-000122 | HAProxy vulnerable to HTTP request/response smuggling | 2024-11-27T14:36+09:00 | 2024-11-27T14:36+09:00 |
| jvndb-2024-000121 | WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting | 2024-11-26T13:57+09:00 | 2024-11-26T13:57+09:00 |
| jvndb-2024-013260 | Multiple vulnerabilities in Edgecross Basic Software for Windows | 2024-11-22T10:59+09:00 | 2025-11-04T16:41+09:00 |
| jvndb-2024-000120 | "Kura Sushi Official App Produced by EPARK" for Android uses a hard-coded cryptographic key | 2024-11-20T13:56+09:00 | 2024-11-20T13:56+09:00 |
| jvndb-2024-012941 | Multiple vulnerabilities in Rakuten Turbo 5G | 2024-11-19T10:41+09:00 | 2024-11-19T10:41+09:00 |
| jvndb-2024-000119 | Multiple vulnerabilities in FitNesse | 2024-11-15T13:37+09:00 | 2024-11-20T11:18+09:00 |
| jvndb-2024-012461 | Multiple vulnerabilities in SoftBank Mesh Wi-Fi router RP562B | 2024-11-13T14:26+09:00 | 2024-11-26T16:11+09:00 |
| jvndb-2024-000118 | WordPress Plugin "VK All in One Expansion Unit" vulnerable to cross-site scripting | 2024-11-13T13:50+09:00 | 2024-11-13T13:50+09:00 |
| jvndb-2024-012017 | Trend Micro Deep Security 20 Agent for Windows vulnerable to improper access control | 2024-11-06T11:00+09:00 | 2024-11-06T11:00+09:00 |
| jvndb-2024-011833 | Incorrect authorization vulnerability in OMRON Sysmac Studio | 2024-11-05T15:29+09:00 | 2024-11-05T15:29+09:00 |
| jvndb-2024-011747 | Command injection vulnerability in Trend Micro Cloud Edge | 2024-11-01T14:28+09:00 | 2024-11-01T14:28+09:00 |
| jvndb-2024-011744 | REST-APIs unintentionally enabled in Century Systems FutureNet NXR series routers | 2024-11-01T13:49+09:00 | 2024-11-01T13:49+09:00 |
| jvndb-2024-000117 | Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2024-10-31T16:44+09:00 | 2025-05-19T17:59+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-10892 | WordPress插件WP Directory Kit信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10891 | WordPress插件CubeWP – All-in-One Dynamic Content Framework信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10890 | WordPress插件Contact Form 7 GetResponse Extension信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10889 | WordPress插件Cargus信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10888 | WordPress插件Booking Ultra Pro信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10855 | Rockwell Automation CompactLogix 5370拒绝服务漏洞 | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10854 | Rockwell Automation ArmorStart LT拒绝服务漏洞（CNVD-2026-10854） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10852 | Rockwell Automation ArmorStart LT拒绝服务漏洞（CNVD-2026-10852） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10851 | Rockwell Automation ArmorStart LT拒绝服务漏洞（CNVD-2026-10851） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10850 | Rockwell Automation ArmorStart LT拒绝服务漏洞（CNVD-2026-10850） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10849 | Rockwell Automation ArmorStart LT拒绝服务漏洞（CNVD-2026-10849） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10848 | Rockwell Automation ArmorStart LT拒绝服务漏洞 | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10666 | MedDream PACS Premium任意文件读取漏洞 | 2026-01-30 | 2026-02-11 |
| cnvd-2026-10665 | MedDream PACS Premium跨站脚本漏洞 | 2026-01-30 | 2026-02-11 |
| cnvd-2026-10664 | IBM Aspera Console日志信息泄露漏洞 | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10663 | IBM Concert代码问题漏洞 | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10662 | IBM Concert信息泄露漏洞（CNVD-2026-10662） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10661 | IBM Concert信息泄露漏洞（CNVD-2026-10661） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10656 | IBM ApplinX跨站请求伪造漏洞（CNVD-2026-10656） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10655 | IBM ApplinX跨站脚本漏洞 | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10654 | IBM ApplinX未授权访问漏洞 | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10653 | IBM ApplinX信息泄露漏洞（CNVD-2026-10653） | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10638 | Tenda AX1803缓冲区溢出漏洞（CNVD-2026-10638） | 2026-01-30 | 2026-02-09 |
| cnvd-2026-10318 | Tenda AX1806 fromSetSysTime函数堆栈溢出漏洞 | 2026-01-30 | 2026-02-05 |
| cnvd-2026-10317 | Oracle MySQL Server存在未明漏洞（CNVD-2026-10317） | 2026-01-30 | 2026-02-05 |
| cnvd-2026-10316 | Tenda AX1806 deviceList参数堆栈溢出漏洞 | 2026-01-30 | 2026-02-05 |
| cnvd-2026-10313 | Oracle MySQL Server存在未明漏洞（CNVD-2026-10313） | 2026-01-30 | 2026-02-05 |
| cnvd-2026-10312 | Oracle MySQL Server存在未明漏洞（CNVD-2026-10312） | 2026-01-30 | 2026-02-05 |
| cnvd-2026-09811 | OpenEMR未授权访问漏洞 | 2026-01-30 | 2026-01-30 |
| cnvd-2026-09793 | Apache Solr输入验证错误漏洞 | 2026-01-30 | 2026-01-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-01454 | Уязвимость функции rcu_tasks_rude_wait_gp() модуля kernel/rcu/tasks.h ядра операционной с… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01453 | Уязвимость функции gfs2_show_options() модуля fs/gfs2/super.c файловой системы GFS2 ядра … | 09.02.2026 | 09.02.2026 |
| bdu:2026-01452 | Уязвимость функции show_ipi_list() модуля arch/loongarch/kernel/smp.c поддержки архитекту… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01451 | Уязвимость функции ucsi_read_message_in() модуля drivers/usb/typec/ucsi/ucsi.c драйвера п… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01450 | Уязвимость определения структуры imx8mp_blk_ctrl_domain_data{} модуля drivers/pmdomain/im… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01449 | Уязвимость функции free_netvsc_device() модуля drivers/net/hyperv/netvsc.c драйвера подде… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01448 | Уязвимость функции iwl_txq_reclaim() модуля drivers/net/wireless/intel/iwlwifi/queue/tx.c… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01447 | Уязвимость функции x86_android_tablet_remove() модуля drivers/platform/x86/x86-android-ta… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01446 | Уязвимость функции __ext4_fill_super() модуля fs/ext4/super.c ядра операционной системы L… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01445 | Уязвимость функции ena_com_cdesc_rx_pkt_get() модуля drivers/net/ethernet/amazon/ena/ena_… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01444 | Уязвимость функции scrub_submit_extent_sector_read() модуля fs/btrfs/scrub.c поддержки фа… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01443 | Уязвимость функции nvmf_reg_read32() модуля drivers/nvme/host/fabrics.c драйвера поддержк… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01442 | Уязвимость функции kvm_get_mode() модуля arch/arm64/include/asm/kvm_host.h поддержки плат… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01441 | Уязвимость компонента RDMA/mlx5 ядра операционной системы Linux, позволяющая нарушителю в… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01440 | Уязвимость команды WMI_TXSTATUS_EVENTID ядра операционной системы Linux, позволяющая нару… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01439 | Уязвимость компонента smb ядра операционной системы Linux, позволяющая нарушителю оказать… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01438 | Уязвимость функции stbi__convert_format библиотек для C/C++ Libstb, позволяющая нарушител… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01437 | Уязвимость компонента kdc/do_tgs_req.c сетевого протокола аутентификации Kerberos, позвол… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01436 | Уязвимость программной платформы Node.js, связанная с неконтролируемым расходом ресурсов,… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01435 | Уязвимость функций Buffer.fill() и Buffer.alloc() программной платформы Node.js, позволяю… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01434 | Уязвимость компонентов node_http2 программной платформы Node.js, позволяющая нарушителю в… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01433 | Уязвимость сетевого протокола аутентификации Kerberos, связанная с непринятием мер по ней… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01432 | Уязвимость сетевого протокола аутентификации Kerberos, связанная с недостатком использова… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01431 | Уязвимость программной платформы для разработки и управления веб-приложениями Symfony, св… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01430 | Уязвимость функции url.parse() программной платформы Node.js, позволяющая нарушителю оказ… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01429 | Уязвимость компонентов http программной платформы Node.js, позволяющая нарушителю вызвать… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01428 | Уязвимость кодировки UCS-2 программной платформы Node.js, позволяющая нарушителю вызвать … | 09.02.2026 | 09.02.2026 |
| bdu:2026-01427 | Уязвимость функции GetImagePixelCache компонента MagickCore/cache.c консольного графическ… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01426 | Уязвимость функции WriteTIFFImage компонента coders/tiff.c консольного графического редак… | 09.02.2026 | 09.02.2026 |
| bdu:2026-01425 | Уязвимость функции MontageImageCommand компонента MagickWand/montage.c консольного графич… | 09.02.2026 | 09.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-200610-0022 | User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 a… | 2024-07-23T21:56:15.078000Z |
| var-200905-0505 | Array index error in the insertItemBefore method in WebKit, as used in Apple Safari befor… | 2024-07-23T21:56:07.125000Z |
| var-201912-0618 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:55:36.712000Z |
| var-202112-2011 | Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 an… | 2024-07-23T21:55:35.394000Z |
| var-201810-0932 | The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side chan… | 2024-07-23T21:55:35.727000Z |
| var-201210-0063 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:55:35.147000Z |
| var-200809-0182 | ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attack… | 2024-07-23T21:55:33.188000Z |
| var-201903-0417 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:55:16.315000Z |
| var-201912-0597 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:55:13.309000Z |
| var-200809-0009 | ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attack… | 2024-07-23T21:55:12.610000Z |
| var-201704-1589 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server t… | 2024-07-23T21:55:11.835000Z |
| var-200911-0398 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Int… | 2024-07-23T21:54:40.707000Z |
| var-201912-0128 | A logic issue was addressed with improved state management. This issue is fixed in watchO… | 2024-07-23T21:54:39.274000Z |
| var-201502-0366 | named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when D… | 2024-07-23T21:54:05.549000Z |
| var-201006-1183 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2024-07-23T21:53:56.790000Z |
| var-202003-1784 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2024-07-23T21:53:51.536000Z |
| var-201302-0132 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:53:51.971000Z |
| var-201711-0447 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T21:53:49.059000Z |
| var-201805-0963 | Systems with microprocessors utilizing speculative execution and speculative execution of… | 2024-07-23T21:53:48.206000Z |
| var-200102-0104 | "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges b… | 2024-07-23T21:53:48.441000Z |
| var-201403-0387 | Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python … | 2024-07-23T21:53:47.789000Z |
| var-201208-0344 | libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not pro… | 2024-07-23T21:53:17.145000Z |
| var-201910-1495 | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print… | 2024-07-23T21:53:16.217000Z |
| var-201912-0579 | A logic issue existed in the handling of synchronous page loads. This issue was addressed… | 2024-07-23T21:53:15.777000Z |
| var-200905-0196 | racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denia… | 2024-07-23T21:53:12.318000Z |
| var-200609-0315 | Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary c… | 2024-07-23T21:53:10.410000Z |
| var-202212-1751 | A type confusion issue was addressed with improved state handling. This issue is fixed in… | 2024-07-23T21:52:34.161000Z |
| var-201404-0398 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 an… | 2024-07-23T21:52:34.093000Z |
| var-201008-0172 | Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType befor… | 2024-07-23T21:52:33.872000Z |
| var-202108-2172 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-07-23T21:52:30.241000Z |