Recent vulnerabilities

ID CVSS Description Vendor Product Published Updated
CVE-2026-4258
7.5 (3.1)
All versions of the package sjcl are vulnerable t… n/a
 sjcl
 2026-03-17T05:00:04.199Z 2026-03-17T05:00:04.199Z
CVE-2026-4308
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
frdel/agent0ai agent-zero document_query.py handle_pdf… frdel
 agent-zero
 2026-03-17T04:02:07.980Z 2026-03-17T04:02:07.980Z
CVE-2026-23940
7.1 (4.0)
Denial of Service via Oversized Package Upload hexpm
 hexpm
 2026-03-13T16:07:53.328Z 2026-03-17T04:00:18.548Z
CVE-2026-27962
9.1 (3.1)
Authlib JWS JWK Header Injection: Signature Verificati… authlib
 authlib
 2026-03-16T17:34:38.946Z 2026-03-17T03:55:41.023Z
CVE-2026-3081
7.8 (3.0)
GStreamer H.266 Codec Parser Stack-based Buffer Overfl… GStreamer
 GStreamer
 2026-03-13T20:39:20.596Z 2026-03-17T03:55:39.931Z
CVE-2026-2923
7.8 (3.0)
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Cod… GStreamer
 GStreamer
 2026-03-13T20:39:01.199Z 2026-03-17T03:55:38.806Z
CVE-2026-23862
7.8 (3.1)
Dell ThinOS 10 versions prior to ThinOS 2602_10.0… Dell
 ThinOS 10
 2026-03-16T17:28:44.696Z 2026-03-17T03:55:37.692Z
CVE-2025-14287
7.5 (3.0)
Command Injection in mlflow/mlflow mlflow
 mlflow/mlflow
 2026-03-15T09:27:36.706Z 2026-03-17T03:55:36.612Z
CVE-2026-3227
8.5 (4.0)
Authenticated Command Injection on TP-Link TL-WR802N, … TP-Link Systems Inc.
 TL-WR802N v4
 2026-03-13T21:38:31.666Z 2026-03-17T03:55:35.442Z
CVE-2026-32635
8.6 (4.0)
Angular has XSS in i18n attribute bindings @angular
 compiler
 2026-03-13T20:58:12.554Z 2026-03-17T03:55:33.785Z
CVE-2025-54920
N/A
Apache Spark: Spark History Server Code Execution Vuln… Apache Software Foundation
 Apache Spark
 2026-03-14T09:01:50.486Z 2026-03-17T03:55:32.660Z
CVE-2026-20988
6.8 (4.0)
Improper verification of intent by broadcast rece… Samsung Mobile
 Samsung Mobile Devices
 2026-03-16T04:31:53.810Z 2026-03-17T03:55:31.506Z
CVE-2026-20990
8.4 (4.0)
Improper export of android application components… Samsung Mobile
 Samsung Mobile Devices
 2026-03-16T04:31:56.225Z 2026-03-17T03:55:30.305Z
CVE-2026-3476
7.8 (3.1)
Code Injection vulnerability affecting SOLIDWORKS Desk… Dassault Systèmes
 SOLIDWORKS Desktop
 2026-03-16T11:48:18.815Z 2026-03-17T03:55:29.037Z
CVE-2026-2462
6.6 (3.1)
Admin RCE via Malicious Plugin Upload on CI Test Instances Mattermost
 Mattermost
 2026-03-16T12:00:21.069Z 2026-03-17T03:55:27.849Z
CVE-2025-47813
4.3 (3.1)
loginok.html in Wing FTP Server before 7.4.4 disc… wftpserver
 Wing FTP Server
 2025-07-10T00:00:00.000Z 2026-03-17T03:55:26.413Z
CVE-2026-2373
5.3 (3.1)
Royal Addons for Elementor – Addons and Templates Kit … wproyal
 Royal Addons for Elementor – Addons and Templates Kit for Elementor
 2026-03-17T03:36:25.155Z 2026-03-17T03:36:25.155Z
CVE-2026-4307
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
frdel/agent0ai agent-zero files.py get_abs_path path t… frdel
 agent-zero
 2026-03-17T03:32:07.609Z 2026-03-17T03:32:07.609Z
CVE-2026-0708
8.3 (3.1)
Libucl: libucl: denial of service via embedded null by… libucl
 libucl
 2026-03-17T02:28:08.429Z 2026-03-17T02:44:16.527Z
CVE-2026-4177
N/A
YAML::Syck versions through 1.36 for Perl has several … TODDR
 YAML::Syck
 2026-03-16T22:30:25.367Z 2026-03-17T01:34:04.213Z
CVE-2026-2579
7.5 (3.1)
WowStore – Store Builder & Product Blocks for WooComme… wpxpo
 WowStore – Store Builder & Product Blocks for WooCommerce
 2026-03-17T01:24:28.737Z 2026-03-17T01:24:28.737Z
CVE-2025-7195
6.4 (3.1)
Operator-sdk: privilege escalation due to incorrect pe… operator-framework
 operator-sdk
 2025-08-07T19:05:08.756Z 2026-03-17T00:09:30.619Z
CVE-2026-4289
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Tiandy Easy7 Integrated Management Platform getRecByTe… Tiandy
 Easy7 Integrated Management Platform
 2026-03-17T00:03:10.717Z 2026-03-17T00:03:10.717Z
CVE-2026-4288
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Tiandy Easy7 Integrated Management Platform Endpoint g… Tiandy
 Easy7 Integrated Management Platform
 2026-03-17T00:02:39.811Z 2026-03-17T00:02:39.811Z
CVE-2025-61662
7.8 (3.1)
Grub2: missing unregister call for gettext command may… GNU
 grub2
 2025-11-18T18:20:48.351Z 2026-03-17T00:02:37.910Z
CVE-2026-4287
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Tiandy Easy7 Integrated Management Platform Endpoint q… Tiandy
 Easy7 Integrated Management Platform
 2026-03-16T23:33:17.024Z 2026-03-16T23:33:17.024Z
CVE-2026-4285
5.1 (4.0)
2.7 (3.1)
2.7 (3.0)
taoofagi easegen-admin Pdf2MdUtil.java recognizeMarkdo… taoofagi
 easegen-admin
 2026-03-16T23:32:42.192Z 2026-03-16T23:32:42.192Z
CVE-2026-4224
6 (4.0)
Stack overflow parsing XML with deeply nested DTD cont… Python Software Foundation
 CPython
 2026-03-16T17:52:26.639Z 2026-03-16T23:08:21.692Z
CVE-2026-4284
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
taoofagi easegen-admin PPT File PPTUtil.java downloadF… taoofagi
 easegen-admin
 2026-03-16T23:02:43.594Z 2026-03-16T23:02:43.594Z
CVE-2026-20841
7.8 (3.1)
Windows Notepad App Remote Code Execution Vulnerability Microsoft
 Windows Notepad
 2026-02-10T17:51:50.412Z 2026-03-16T22:47:40.140Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-4308
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
frdel/agent0ai agent-zero document_query.py handle_pdf… frdel
 agent-zero
 2026-03-17T04:02:07.980Z 2026-03-17T04:02:07.980Z
CVE-2026-4307
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
frdel/agent0ai agent-zero files.py get_abs_path path t… frdel
 agent-zero
 2026-03-17T03:32:07.609Z 2026-03-17T03:32:07.609Z
CVE-2026-2373
5.3 (3.1)
Royal Addons for Elementor – Addons and Templates Kit … wproyal
 Royal Addons for Elementor – Addons and Templates Kit for Elementor
 2026-03-17T03:36:25.155Z 2026-03-17T03:36:25.155Z
CVE-2026-0708
8.3 (3.1)
Libucl: libucl: denial of service via embedded null by… libucl
 libucl
 2026-03-17T02:28:08.429Z 2026-03-17T02:44:16.527Z
CVE-2026-4177
N/A
YAML::Syck versions through 1.36 for Perl has several … TODDR
 YAML::Syck
 2026-03-16T22:30:25.367Z 2026-03-17T01:34:04.213Z
CVE-2026-2579
7.5 (3.1)
WowStore – Store Builder & Product Blocks for WooComme… wpxpo
 WowStore – Store Builder & Product Blocks for WooCommerce
 2026-03-17T01:24:28.737Z 2026-03-17T01:24:28.737Z
CVE-2026-4289
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Tiandy Easy7 Integrated Management Platform getRecByTe… Tiandy
 Easy7 Integrated Management Platform
 2026-03-17T00:03:10.717Z 2026-03-17T00:03:10.717Z
CVE-2026-4288
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Tiandy Easy7 Integrated Management Platform Endpoint g… Tiandy
 Easy7 Integrated Management Platform
 2026-03-17T00:02:39.811Z 2026-03-17T00:02:39.811Z
CVE-2026-4287
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Tiandy Easy7 Integrated Management Platform Endpoint q… Tiandy
 Easy7 Integrated Management Platform
 2026-03-16T23:33:17.024Z 2026-03-16T23:33:17.024Z
CVE-2026-4285
5.1 (4.0)
2.7 (3.1)
2.7 (3.0)
taoofagi easegen-admin Pdf2MdUtil.java recognizeMarkdo… taoofagi
 easegen-admin
 2026-03-16T23:32:42.192Z 2026-03-16T23:32:42.192Z
CVE-2026-4224
6 (4.0)
Stack overflow parsing XML with deeply nested DTD cont… Python Software Foundation
 CPython
 2026-03-16T17:52:26.639Z 2026-03-16T23:08:21.692Z
CVE-2025-61662
7.8 (3.1)
Grub2: missing unregister call for gettext command may… GNU
 grub2
 2025-11-18T18:20:48.351Z 2026-03-17T00:02:37.910Z
CVE-2026-4284
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
taoofagi easegen-admin PPT File PPTUtil.java downloadF… taoofagi
 easegen-admin
 2026-03-16T23:02:43.594Z 2026-03-16T23:02:43.594Z
CVE-2026-21991
5.5 (3.1)
A DTrace component, dtprobed, allows arbitrary fi… Oracle Corporation
 Oracle Linux
 2026-03-16T21:36:44.856Z 2026-03-16T21:36:44.856Z
CVE-2026-2454
5.8 (3.1)
DoS in Calls plugin via malformed msgpack in websocket… Mattermost
 Mattermost
 2026-03-16T20:10:16.644Z 2026-03-16T20:10:16.644Z
CVE-2026-29522
8.7 (4.0)
ZwickRoell Test Data Management < 3.0.8 Path Traversal LFI ZwickRoell GmbH & Co. KG
 Test Data Management
 2026-03-16T20:46:49.771Z 2026-03-16T20:46:49.771Z
CVE-2026-26230
3.8 (3.1)
Team Admin Privilege Escalation to Demote Members to Guest Mattermost
 Mattermost
 2026-03-16T20:19:51.287Z 2026-03-16T20:19:51.287Z
CVE-2026-1629
4.3 (3.1)
Permalink Preview Information Disclosure After Permiss… Mattermost
 Mattermost
 2026-03-16T20:24:05.415Z 2026-03-16T20:24:05.415Z
CVE-2025-69902
N/A
A command injection vulnerability in the minimal_… n/a
 n/a
 2026-03-16T00:00:00.000Z 2026-03-16T20:40:52.491Z
CVE-2025-69693
5.4 (3.1)
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 v… n/a
 n/a
 2026-03-16T00:00:00.000Z 2026-03-16T20:04:20.747Z
CVE-2025-52646
2.2 (3.1)
HCL AION is affected by a vulnerability where certain … HCL
 AION
 2026-03-16T14:42:16.317Z 2026-03-16T20:13:31.637Z
CVE-2025-52645
1.9 (3.1)
HCL AION is affected by a vulnerability where model pa… HCL
 AION
 2026-03-16T14:39:12.088Z 2026-03-16T20:14:12.826Z
CVE-2025-52642
3.3 (3.1)
HCL AION is affected by an internal filesystem paths d… HCL
 AION
 2026-03-16T14:45:23.821Z 2026-03-16T20:07:54.201Z
CVE-2025-50881
N/A
The `flow/admin/moniteur.php` script in Use It Fl… n/a
 n/a
 2026-03-16T00:00:00.000Z 2026-03-16T20:12:52.857Z
CVE-2025-13913
5.4 (4.0)
6.3 (3.1)
Inductive Automation Ignition Software Deserialization… Inductive Automation
 Ignition Software
 2026-03-12T18:17:22.839Z 2026-03-16T20:00:47.484Z
CVE-2026-24509
3.6 (3.1)
Dell Alienware Command Center (AWCC), versions pr… Dell
 Alienware Command Center (AWCC)
 2026-03-11T18:51:04.154Z 2026-03-11T19:12:15.988Z
CVE-2026-31876
5.4 (3.1)
Notesnook has Stored XSS via unsanitized Twitter/X emb… streetwriters
 notesnook
 2026-03-11T18:17:08.142Z 2026-03-12T20:08:12.048Z
CVE-2026-31881
7.7 (3.1)
Runtipi unauthenticated /api/auth/reset-password allow… runtipi
 runtipi
 2026-03-11T18:37:11.360Z 2026-03-12T20:06:56.196Z
CVE-2026-32617
7.1 (3.1)
AnythingLLM Permissable CORS policy Mintplex-Labs
 anything-llm
 2026-03-13T20:07:57.446Z 2026-03-16T20:09:19.009Z
CVE-2026-31887
8.9 (4.0)
Shopware unauthenticated data extraction possible thro… shopware
 core
 2026-03-11T18:49:46.294Z 2026-03-12T20:02:14.866Z
ID Description Published Updated
fkie_cve-2026-4308 A weakness has been identified in frdel/agent0ai agent-zero 0.9.7. This affects the function handle… 2026-03-17T04:16:24.207 2026-03-17T04:16:24.207
fkie_cve-2026-4307 A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is … 2026-03-17T04:16:22.377 2026-03-17T04:16:22.377
fkie_cve-2026-2373 The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vul… 2026-03-17T04:16:14.730 2026-03-17T04:16:14.730
fkie_cve-2026-0708 A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted U… 2026-03-17T04:16:07.750 2026-03-17T04:16:07.750
fkie_cve-2026-4177 YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including … 2026-03-16T23:16:21.543 2026-03-17T02:16:14.267
fkie_cve-2026-2579 The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to… 2026-03-17T02:16:13.860 2026-03-17T02:16:13.860
fkie_cve-2026-4289 A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.1… 2026-03-17T00:16:19.910 2026-03-17T00:16:19.910
fkie_cve-2026-4288 A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted … 2026-03-17T00:16:19.700 2026-03-17T00:16:19.700
fkie_cve-2026-4287 A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affe… 2026-03-17T00:16:19.493 2026-03-17T00:16:19.493
fkie_cve-2026-4285 A vulnerability was identified in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea7… 2026-03-17T00:16:19.280 2026-03-17T00:16:19.280
fkie_cve-2026-4224 When an Expat parser with a registered ElementDeclHandler parses an inline document type definition… 2026-03-16T18:16:10.070 2026-03-17T00:16:19.127
fkie_cve-2025-61662 A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a… 2025-11-18T19:15:50.203 2026-03-17T00:16:17.280
fkie_cve-2026-4284 A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea7… 2026-03-16T23:16:21.703 2026-03-16T23:16:21.703
fkie_cve-2026-21991 A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names. 2026-03-16T22:16:18.397 2026-03-16T22:16:18.397
fkie_cve-2026-2454 Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrec… 2026-03-16T21:16:33.890 2026-03-16T21:16:33.890
fkie_cve-2026-29522 ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulner… 2026-03-16T21:16:33.717 2026-03-16T21:16:33.717
fkie_cve-2026-26230 Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the te… 2026-03-16T21:16:33.480 2026-03-16T21:16:33.480
fkie_cve-2026-1629 Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a use… 2026-03-16T21:16:19.727 2026-03-16T21:16:19.727
fkie_cve-2025-69902 A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 … 2026-03-16T21:16:17.700 2026-03-16T21:16:17.700
fkie_cve-2025-69693 Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantizat… 2026-03-16T20:16:15.060 2026-03-16T21:16:17.487
fkie_cve-2025-52646 HCL AION is affected by a vulnerability where certain offering configurations may permit execution … 2026-03-16T15:16:18.837 2026-03-16T21:16:17.103
fkie_cve-2025-52645 HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not i… 2026-03-16T15:16:18.707 2026-03-16T21:16:16.960
fkie_cve-2025-52642 HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through appl… 2026-03-16T15:16:18.300 2026-03-16T21:16:16.823
fkie_cve-2025-50881 The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnera… 2026-03-16T21:16:16.670 2026-03-16T21:16:16.670
fkie_cve-2025-13913 If an Ignition user imports an external file with a specially crafted payload, it could execute emb… 2026-03-12T19:16:14.250 2026-03-16T21:16:16.367
fkie_cve-2026-24509 Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Access Contr… 2026-03-11T19:16:03.800 2026-03-16T20:55:23.130
fkie_cve-2026-31876 Notesnook is a note-taking app focused on user privacy & ease of use. Prior to 3.3.9, a Stored Cros… 2026-03-11T19:16:04.140 2026-03-16T20:54:45.300
fkie_cve-2026-31881 Runtipi is a personal homeserver orchestrator. Prior to 4.8.0, an unauthenticated attacker can rese… 2026-03-11T19:16:04.787 2026-03-16T20:53:43.683
fkie_cve-2026-32617 AnythingLLM is an application that turns pieces of content into context that any LLM can use as ref… 2026-03-16T14:19:39.630 2026-03-16T20:40:06.763
fkie_cve-2026-31887 Shopware is an open commerce platform. Prior to 6.7.8.1 and 6.6.10.15, an insufficient check on the… 2026-03-11T19:16:04.950 2026-03-16T20:39:53.950
ID Severity Description Published Updated
ghsa-xgff-53jx-q4j3
7.5 (3.1)
The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to… 2026-03-17T03:30:21Z 2026-03-17T03:30:21Z
ghsa-72r6-p2x3-g9gj
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including … 2026-03-17T00:31:34Z 2026-03-17T03:30:21Z
ghsa-g93w-mfhg-p222
8.6 (4.0)
Angular vulnerable to XSS in i18n attribute bindings 2026-03-13T20:56:18Z 2026-03-17T01:15:50Z
ghsa-rjxq-j5v8-3c89
7.3 (3.1)
5.5 (4.0)
A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affe… 2026-03-17T00:31:34Z 2026-03-17T00:31:34Z
ghsa-m3x9-92c9-624c
5.5 (3.1)
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names. 2026-03-17T00:31:34Z 2026-03-17T00:31:34Z
ghsa-h46w-ffvp-4pw5
6.0 (4.0)
When an Expat parser with a registered ElementDeclHandler parses an inline document type definition… 2026-03-16T18:32:04Z 2026-03-17T00:31:34Z
ghsa-g7mr-vm94-3rv7
4.9 (3.1)
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a… 2025-11-18T21:32:31Z 2026-03-17T00:31:34Z
ghsa-fj7g-gh2h-jx3m
7.3 (3.1)
5.5 (4.0)
A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted … 2026-03-17T00:31:34Z 2026-03-17T00:31:34Z
ghsa-c3cr-f45p-2vfp
2.7 (3.1)
2.0 (4.0)
A vulnerability was identified in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea7… 2026-03-17T00:31:34Z 2026-03-17T00:31:34Z
ghsa-7w3v-mfh5-q7x3
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.1… 2026-03-17T00:31:34Z 2026-03-17T00:31:34Z
ghsa-25w3-8f4h-3qh6
4.7 (3.1)
2.0 (4.0)
A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea7… 2026-03-17T00:31:34Z 2026-03-17T00:31:34Z
ghsa-r353-4845-pr5p
8.2 (3.1)
simplesamlphp/xml-security: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows… 2026-03-13T20:44:21Z 2026-03-16T22:01:35Z
ghsa-p2x3-8689-cwpg
6.9 (4.0)
Parse Server's GraphQL WebSocket endpoint bypasses security middleware 2026-03-13T20:04:44Z 2026-03-16T22:01:24Z
ghsa-vxx9-2994-q338
8.7 (4.0)
Yamux vulnerable to remote Panic via malformed Data frame with SYN set and len = 262145 2026-03-13T20:04:38Z 2026-03-16T22:01:11Z
ghsa-4v26-v6cg-g6f9
8.2 (3.1)
xmlseclibs: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorize… 2026-03-13T20:04:21Z 2026-03-16T22:01:02Z
ghsa-7x23-j8gv-v54x
7.1 (4.0)
github.com/ctfer-io/monitoring Vulnerable to Improper Access Control 2026-03-13T20:58:28Z 2026-03-16T22:00:32Z
ghsa-4j3x-hhg2-fm2x
6.5 (3.1)
SiYuan's renderSprig has a missing admin check that allows any user to read full workspace DB 2026-03-13T20:56:47Z 2026-03-16T22:00:21Z
ghsa-44vg-5wv2-h2hg
8.7 (4.0)
SimpleEval: Objects (including modules) can leak dangerous modules through to direct access inside … 2026-03-13T20:56:26Z 2026-03-16T22:00:13Z
ghsa-j47w-4g3g-c36v
5.3 (3.1)
file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entry 2026-03-13T20:56:05Z 2026-03-16T21:59:48Z
ghsa-3x67-4c2c-w45m
8.0 (3.1)
Admidio has a Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter) 2026-03-16T21:19:09Z 2026-03-16T21:58:08Z
ghsa-6j68-gcc3-mq73
6.8 (3.1)
Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint 2026-03-16T21:17:57Z 2026-03-16T21:57:59Z
ghsa-4484-8v2f-5748
8.6 (4.0)
Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController 2026-03-16T18:13:15Z 2026-03-16T21:57:50Z
ghsa-cc7p-2j3x-x7xf
9.2 (4.0)
Craft CMS Vulnerable to Privilege Escalation/Bypass through UsersController->actionImpersonateWithToken() 2026-03-16T18:44:20Z 2026-03-16T21:57:43Z
ghsa-qx2q-q59v-wf3j
8.6 (4.0)
Craft CMS vulnerable to behavior injection RCE via EntryTypesController 2026-03-16T18:12:32Z 2026-03-16T21:57:33Z
ghsa-472v-j2g4-g9h2
5.3 (4.0)
Craft CMS has a Path Traversal Vulnerability in AssetsController 2026-03-16T18:11:49Z 2026-03-16T21:57:24Z
ghsa-8wg7-wm29-2rvg
8.5 (4.0)
RCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin 2026-03-16T18:11:23Z 2026-03-16T21:57:13Z
ghsa-p799-g7vv-f279
8.3 (4.0)
Romeo is vulnerable to Archive Slip due to missing checks in sanitization 2026-03-16T20:47:02Z 2026-03-16T21:55:45Z
ghsa-f7cq-gvh6-qr25
8.3 (4.0)
Monitoring is vulnerable to Archive Slip due to missing checks in sanitization 2026-03-16T20:46:48Z 2026-03-16T21:55:37Z
ghsa-hxm7-9q36-c77f
7.1 (4.0)
Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace 2026-03-16T20:47:15Z 2026-03-16T21:55:30Z
ghsa-mw24-f3xh-j3qv
7.9 (4.0)
Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace 2026-03-16T20:45:34Z 2026-03-16T21:55:24Z
ID Severity Description Package Published Updated
pysec-2024-85
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-03-03T16:29:37.848846Z
pysec-2024-84
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-03-03T16:29:37.756762Z
pysec-2024-83
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-03-03T16:29:37.662671Z
pysec-2024-82
8.8 (3.1)
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB… mindsdb 2024-09-12T13:15:00Z 2026-03-03T16:29:37.563380Z
pysec-2023-278
5.3 (3.1)
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.1… mindsdb 2023-12-11T21:15:00Z 2026-03-03T16:29:37.448520Z
pysec-2023-121
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as a… zstd 2023-03-31T20:15:00+00:00 2026-02-25T19:20:58+00:00
pysec-2026-1
A PyPI user account compromised by an attacker and was able to upload a malicious version… dydx-v4-client 2026-01-28T21:09:02+00:00
pysec-2025-52
gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation. mlflow 2025-06-23T15:15:29Z 2025-12-05T13:25:55.146081Z
pysec-2020-220
A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage coll… ansible 2020-10-05T14:15:00Z 2025-10-31T04:43:53.616247Z
pysec-2025-72
The `num2words` project was compromised via a phishing attack and two new versions were u… num2words 2025-07-31T14:34:47+00:00
pysec-2025-71
Cadwyn creates production-ready community-driven modern Stripe-like API versioning in Fas… cadwyn 2025-07-21T21:15:25+00:00 2025-07-23T15:24:03.825615+00:00
pysec-2025-70
10.0 (3.1)
A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit componen… langchain-community 2025-06-23T21:15:25+00:00 2025-07-16T21:23:40.211079+00:00
pysec-2024-259
9.8 (3.1)
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by m… torch 2024-10-29T21:15:04+00:00 2025-07-16T03:09:57.748865+00:00
pysec-2024-258
In scrapy/scrapy, an issue was identified where the Authorization header is not removed d… scrapy 2024-05-20T08:15:08+00:00 2025-07-15T17:37:50.051730+00:00
pysec-2025-69
In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker tem… roundup 2025-07-13T20:15:25+00:00 2025-07-13T21:23:01.161315+00:00
pysec-2025-68
8.0 (3.1)
A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6… upsonic 2025-06-19T21:15:27+00:00 2025-07-08T19:22:27.449399+00:00
pysec-2025-67
9.8 (3.1)
A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerabil… upsonic 2025-06-19T21:15:27+00:00 2025-07-08T19:22:27.385619+00:00
pysec-2025-66
Improper privilege management in a REST interface allowed registered users to access unau… streampipes 2025-03-03T11:15:11+00:00 2025-07-08T15:23:46.628375+00:00
pysec-2025-65
A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0… llama-index 2025-07-07T13:15:28+00:00 2025-07-07T15:23:42.730681+00:00
pysec-2025-61
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap … pillow 2025-07-01T19:15:27Z 2025-07-07T14:12:46.226030Z
pysec-2025-64
9.8 (3.1)
A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0… python-a2a 2025-06-17T07:15:18+00:00 2025-07-02T21:23:13.806273+00:00
pysec-2025-63
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Whe… vllm 2025-03-19T16:15:32+00:00 2025-07-01T23:22:49.176005+00:00
pysec-2025-62
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Mal… vllm 2025-02-07T20:15:34+00:00 2025-07-01T23:22:49.083695+00:00
pysec-2025-60
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Inform… apache-iotdb 2025-05-14T11:16:28+00:00 2025-07-01T21:22:47.232036+00:00
pysec-2025-59
Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attack… apache-iotdb 2025-05-14T11:15:47+00:00 2025-07-01T21:22:47.177405+00:00
pysec-2024-257
7.5 (3.1)
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessm… mobsf 2024-03-22T23:15:07+00:00 2025-06-30T15:23:50.085549+00:00
pysec-2025-58
8.8 (3.1)
vLLM is a library for LLM inference and serving. vllm/model_executor/weight_utils.py impl… vllm 2025-01-27T18:15:41+00:00 2025-06-27T21:22:36.583615+00:00
pysec-2025-57
A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthent… zenml 2025-03-20T10:15:48+00:00 2025-06-27T17:22:55.175431+00:00
pysec-2025-56
4.3 (3.1)
OctoPrint provides a web interface for controlling consumer 3D printers. In versions up t… octoprint 2025-04-22T18:15:59+00:00 2025-06-27T17:22:53.513680+00:00
pysec-2024-256
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessm… mobsf 2024-12-03T16:15:24+00:00 2025-06-27T17:22:53.325430+00:00
ID Description Updated
gsd-2024-33884 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.534455Z
gsd-2024-33901 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.525896Z
gsd-2024-33887 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.503613Z
gsd-2024-33895 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.493081Z
gsd-2024-33894 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.488420Z
gsd-2024-33902 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.486429Z
gsd-2024-33888 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.468423Z
gsd-2024-33885 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.441746Z
gsd-2024-33891 Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via th… 2024-04-29T05:02:07.412035Z
gsd-2024-33899 RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the scr… 2024-04-29T05:02:07.400574Z
gsd-2024-33889 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.392587Z
gsd-2024-33893 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.381761Z
gsd-2024-33892 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.378170Z
gsd-2024-33890 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.344384Z
gsd-2024-33896 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.313250Z
gsd-2024-33903 In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pede… 2024-04-29T05:02:07.295775Z
gsd-2024-33900 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.290639Z
gsd-2024-33898 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.287632Z
gsd-2024-33886 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.287167Z
gsd-2024-33897 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.283756Z
gsd-2024-33883 The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certa… 2024-04-29T05:02:07.271727Z
gsd-2024-4303 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:05.716348Z
gsd-2024-4300 E-WEBInformationCo. FS-EZViewer(Web) exposes sensitive information in the service. A remo… 2024-04-29T05:02:05.715239Z
gsd-2024-4297 The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlo… 2024-04-29T05:02:05.700888Z
gsd-2024-4301 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:05.678292Z
gsd-2024-4296 The account management interface of HGiga iSherlock (including MailSherlock, SpamSherlock… 2024-04-29T05:02:05.621428Z
gsd-2024-4299 The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSheroc… 2024-04-29T05:02:05.606402Z
gsd-2024-4302 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:05.603637Z
gsd-2024-4298 The email search interface of HGiga iSherlock (including MailSherlock, SpamSherock, Audit… 2024-04-29T05:02:05.598531Z
gsd-2024-33876 The format of the source doesn't require a description, click on the link for more details. 2024-04-28T05:02:07.990196Z
ID Description Published Updated
mal-2026-1317 Malicious code in @augmentor/experiences (npm) 2026-03-10T08:29:47Z 2026-03-17T04:54:59Z
mal-2026-1493 Malicious code in pino-logger-utils (npm) 2026-03-17T04:46:23Z 2026-03-17T04:46:24Z
mal-2026-1487 Malicious code in vitest-config (npm) 2026-03-16T09:58:05Z 2026-03-17T03:17:03Z
mal-2026-1492 Malicious code in strapi-plugin-workspace-plugin (npm) 2026-03-17T03:09:34Z 2026-03-17T03:09:34Z
mal-2026-1490 Malicious code in ember-power-calendar-utils (npm) 2026-03-17T03:09:34Z 2026-03-17T03:09:34Z
mal-2026-1489 Malicious code in asset-delivery (npm) 2026-03-17T03:09:32Z 2026-03-17T03:09:33Z
mal-2026-1491 Malicious code in graphlib-js (npm) 2026-03-17T02:54:20Z 2026-03-17T02:54:21Z
mal-2026-1481 Malicious code in revolut-merchant-widget (npm) 2026-03-16T20:46:00Z 2026-03-16T20:46:00Z
mal-2026-1482 Malicious code in chacha-lite-encrypt (PyPI) 2026-03-16T20:09:47Z 2026-03-16T20:09:47Z
mal-2026-1480 Malicious code in pretty-tabulate (PyPI) 2026-03-16T18:04:10Z 2026-03-16T18:04:10Z
mal-2026-1479 Malicious code in color-list (PyPI) 2026-03-16T18:03:13Z 2026-03-16T18:03:13Z
mal-2026-1488 Malicious code in codeshouhu (PyPI) 2026-03-16T18:00:09Z 2026-03-16T18:00:09Z
mal-2026-1319 Malicious code in alinet-w (npm) 2026-03-10T08:29:15Z 2026-03-16T16:40:04Z
mal-2026-1478 Malicious code in wordpecker-fx (npm) 2026-03-16T15:51:36Z 2026-03-16T15:51:37Z
mal-2026-1477 Malicious code in supply-hx (npm) 2026-03-16T15:51:36Z 2026-03-16T15:51:37Z
mal-2026-1476 Malicious code in jalalstealer (npm) 2026-03-16T15:51:36Z 2026-03-16T15:51:37Z
mal-2026-1475 Malicious code in delta666 (npm) 2026-03-16T15:51:36Z 2026-03-16T15:51:37Z
mal-2026-1474 Malicious code in alinet (npm) 2026-03-16T15:51:36Z 2026-03-16T15:51:37Z
mal-2026-1473 Malicious code in aesdecryptor (npm) 2026-03-16T15:51:36Z 2026-03-16T15:51:37Z
mal-2026-1454 Malicious code in n8n-nodes-text-helpers (npm) 2026-03-15T01:58:08Z 2026-03-16T15:41:53Z
mal-2026-1472 Malicious code in n8n-nodes-xml-utils (npm) 2026-03-16T14:49:15Z 2026-03-16T14:49:16Z
mal-2026-1471 Malicious code in n8n-nodes-text-utils (npm) 2026-03-16T14:49:15Z 2026-03-16T14:49:16Z
mal-2026-1470 Malicious code in n8n-nodes-json-helper (npm) 2026-03-16T14:49:15Z 2026-03-16T14:49:16Z
mal-2026-1467 Malicious code in n8n-nodes-csv-parse (npm) 2026-03-16T14:49:15Z 2026-03-16T14:49:16Z
mal-2026-1469 Malicious code in n8n-nodes-format-utils (npm) 2026-03-16T14:49:15Z 2026-03-16T14:49:15Z
mal-2026-1468 Malicious code in n8n-nodes-data-transform (npm) 2026-03-16T14:49:15Z 2026-03-16T14:49:15Z
mal-2026-1465 Malicious code in hariprasath (npm) 2026-03-16T14:29:56Z 2026-03-16T14:29:57Z
mal-2026-1466 Malicious code in supplychain-security-demo (npm) 2026-03-16T14:29:56Z 2026-03-16T14:29:56Z
mal-2026-1483 Malicious code in @jaime9008/math-service (npm) 2026-03-16T11:54:06Z 2026-03-16T11:54:06Z
mal-2026-1458 Malicious code in @wealth-common/font (npm) 2026-03-16T08:11:02Z 2026-03-16T10:38:54Z
ID Description Published Updated
4jno000329 AWIN Gateways Vulnerabilities in Embedded Webserver 2026-03-13T00:30:00.000Z 2026-03-13T00:30:00.000Z
3adr011536 AC500 V3 Stack buffer overflow in Cryptographic Message Syntax 2026-03-12T00:30:00.000Z 2026-03-12T00:30:00.000Z
3adr011525 ABB Automation Builder Gateway for Windows with insecure defaults 2026-02-24T00:30:00.000Z 2026-02-24T00:30:00.000Z
3adr011524 AC500 V3 Multiple vulnerabilities 2026-02-24T00:30:00.000Z 2026-02-24T00:30:00.000Z
sa25p007 B&R Automation Studio Update of SQLite version 2026-02-18T00:30:00.000Z 2026-02-18T00:30:00.000Z
sa26p001 ​​PVI​ ​​Insertion of Sensitive Information into Logfile 2026-01-29T00:30:00.000Z 2026-01-29T00:30:00.000Z
sa24p003 ​B&R PCs vulnerable to PixieFail attack​ 2026-01-29T00:30:00.000Z 2026-01-29T00:30:00.000Z
7paa013309 System 800xA SECURITY Advisory - ABB 800xA Base 6.0.x, 6.1.x CSLib communication DoS vulnerability 2024-06-05T00:30:00.000Z 2026-01-23T00:30:00.000Z
sa25p005 B&R Automation Runtime Improper Handling of Flooding conditions on ANSL Server 2026-01-19T00:30:00.000Z 2026-01-19T00:30:00.000Z
sa25p004 Automation Studio Insufficient Server Certificate Validation 2026-01-19T00:30:00.000Z 2026-01-19T00:30:00.000Z
9akk108472a1331 ABB Ability™ OPTIMAX® Authentication Bypass in Single-Sign On with Azure Active Directory 2026-01-16T00:30:00.000Z 2026-01-16T00:30:00.000Z
2crt000009 WebPro SNMP Card PowerValue Multiple Vulnerabilities 2026-01-07T00:30:00.000Z 2026-01-07T00:30:00.000Z
9akk108471a8107 Terra AC wallbox Heap Memory Corruption Vulnerability 2025-09-16T00:30:00.000Z 2025-11-28T08:00:00.000Z
4hzm000603 ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (VLC) 2025-11-27T00:30:00.000Z 2025-11-28T00:30:00.000Z
7paa022088 Edgenius Management Portal Authentication Bypass 2025-11-20T00:30:00.000Z 2025-11-20T00:30:00.000Z
2nga002813 PCM600 SharpZip library vulnerability 2025-11-03T00:30:00.000Z 2025-11-03T00:30:00.000Z
4tz00000006007 ALS-mini-S4/S8 IP Missing Authentication Vulnerability and its Mitigations 2025-10-20T00:30:00.000Z 2025-10-23T00:30:00.000Z
9akk108471a8948 Terra AC wallbox Heap Memory Corruption Vulnerability 2025-10-20T00:30:00.000Z 2025-10-21T00:30:00.000Z
3kxg200000r4801 CoreSense™ HM and CoreSense™ M10 File Path Traversal Vulnerability 2025-04-16T00:30:00.000Z 2025-10-20T00:30:00.000Z
sa25p003 B&R Automation Runtime Vulnerabilities in System Diagnostic Manager (SDM) 2025-10-07T00:30:00.000Z 2025-10-14T00:30:00.000Z
4tz00000006008 LVS MConfig Insecure memory handling 2025-10-08T00:30:00.000Z 2025-10-08T00:30:00.000Z
sa25p002 B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM) 2025-10-07T00:30:00.000Z 2025-10-07T00:30:00.000Z
9akk108471a7808 EIBPORT Reflected XSS 2025-10-07T00:30:00.000Z 2025-10-07T00:30:00.000Z
9akk108471a7121 FLXeon Controllers Multiple vulnerabilities 2025-09-09T00:30:00.000Z 2025-09-18T00:30:00.000Z
9akk108471a4462 ELSB/BLBA ASPECT advisory several CVEs 2025-08-11T00:30:00.000Z 2025-09-04T00:30:00.000Z
9akk108471a3623 RMC - 100 Vulnerabilities in web UI (REST Interface) 2025-07-03T00:30:00.000Z 2025-08-18T00:30:00.000Z
2nga002743 ABB AbilityTM zenon Remote Transport Vulnerability 2025-08-12T00:30:00.000Z 2025-08-12T00:30:00.000Z
3adr011407 ABB Automation Builder Vulnerabilities in user management and access control 2025-04-30T00:00:00.000Z 2025-07-25T00:00:00.000Z
3adr011432 AC500 V2 Buffer overread on Modbus protocol 2025-07-23T00:30:00.000Z 2025-07-23T00:30:00.000Z
9akk108471a4556 Busch-Welcome® 2 wire Door opener actuator by default in compatibility mode. 2025-07-21T00:30:00.000Z 2025-07-21T00:30:00.000Z
ID Description Published Updated
wid-sec-w-2026-0726 TYPO3 Core: Mehrere Schwachstellen 2020-07-27T22:00:00.000+00:00 2026-03-15T23:00:00.000+00:00
wid-sec-w-2026-0705 Apple iOS und iPadOS: Mehrere Schwachstellen 2026-03-11T23:00:00.000+00:00 2026-03-12T23:00:00.000+00:00
wid-sec-w-2026-0695 GNU libc: Schwachstelle ermöglicht Denial of Service 2026-03-11T23:00:00.000+00:00 2026-03-12T23:00:00.000+00:00
wid-sec-w-2026-0551 OpenClaw: Mehrere Schwachstellen 2026-02-26T23:00:00.000+00:00 2026-03-11T23:00:00.000+00:00
wid-sec-w-2026-0490 OpenClaw: Mehrere Schwachstellen 2026-02-23T23:00:00.000+00:00 2026-03-11T23:00:00.000+00:00
wid-sec-w-2026-0472 OpenClaw: Mehrere Schwachstellen 2026-02-22T23:00:00.000+00:00 2026-03-11T23:00:00.000+00:00
wid-sec-w-2026-0656 Microsoft Authenticator App: Schwachstelle ermöglicht Offenlegung von Informationen 2026-03-10T23:00:00.000+00:00 2026-03-10T23:00:00.000+00:00
wid-sec-w-2026-0655 Microsoft Azure Komponenten: Mehrere Schwachstellen 2026-03-10T23:00:00.000+00:00 2026-03-10T23:00:00.000+00:00
wid-sec-w-2026-0654 Siemens SICAM SIAPP SDK: Mehrere Schwachstellen 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0653 Zoom Rooms und Workplace: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0652 Siemens SIMATIC S7: Schwachstelle ermöglicht Cross-Site Scripting 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0651 Budibase: Mehrere Schwachstellen 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0650 Kubernetes (ingress-nginx): Schwachstelle ermöglicht Codeausführung 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0649 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0648 vllm: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0647 SAP Patchday März 2026: Mehrere Schwachstellen 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0646 VMware Workspace One: Schwachstelle ermöglicht Offenlegung von Informationen 2021-12-16T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0645 binutils: Mehrere Schwachstellen ermöglichen Denial of Service 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0644 Devolutions Server: Schwachstelle ermöglicht Privilegieneskalation 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0643 ImageMagick: Mehrere Schwachstellen 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0642 IBM Planning Analytics: Schwachstelle ermöglicht Offenlegung von Informationen 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0641 NATS Server: Mehrere Schwachstellen ermöglichen Denial of Service 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0640 CODESYS Installer: Schwachstelle ermöglicht Privilegieneskalation 2026-03-09T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0636 Apache Airflow: Schwachstelle ermöglicht Codeausführung 2026-03-08T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0615 Red Hat Enterprise Linux (nfs-utils): Schwachstelle ermöglicht Offenlegung von Informationen 2026-03-05T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0569 Google Android: Mehrere Schwachstellen 2026-03-02T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0548 Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-02-26T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0506 FreeBSD Project FreeBSD OS: Mehrere Schwachstellen 2026-02-24T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0499 ImageMagick: Mehrere Schwachstellen 2026-02-24T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
wid-sec-w-2026-0497 Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-02-24T23:00:00.000+00:00 2026-03-09T23:00:00.000+00:00
ID Description Published Updated
icsa-26-071-06 Inductive Automation Ignition Software 2026-03-12T06:00:00.000000Z 2026-03-13T06:00:00.000000Z
icsa-26-071-05 Siemens Heliox EV Chargers 2026-03-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-071-04 Siemens SIMATIC 2026-03-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-071-03 Siemens SIDIS Prime 2026-03-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-071-02 Siemens RUGGEDCOM APE1808 Devices 2026-03-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-071-01 Trane Tracer SC, Tracer SC+, and Tracer Concierge 2026-03-12T06:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-048-04 Honeywell HIB2PI CCTV Camera (Update B) 2026-02-17T07:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-043-08 Siemens NX 2026-02-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-043-03 Siemens COMOS 2025-12-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-345-05 Siemens Advanced Licensing (SALT) Toolkit 2025-12-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-345-04 Siemens IAM Client 2025-12-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-254-03 Siemens SINAMICS Drives 2025-09-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-231-02 Siemens Mendix SAML Module 2025-08-14T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-226-22 Siemens Web Installer 2025-08-12T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-162-05 Siemens SIMATIC S7-1500 CPU Family 2025-06-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-162-02 Siemens RUGGEDCOM APE1808 2025-06-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-044-06 Siemens RUGGEDCOM APE1808 2025-02-11T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-24-284-06 Siemens SINEC Security Monitor 2024-10-08T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-069-03 Honeywell IQ4x BMS Controller 2026-03-10T06:00:00.000000Z 2026-03-10T06:00:00.000000Z
icsa-26-069-02 Lantronix EDS3000PS and EDS5000 2026-03-10T06:00:00.000000Z 2026-03-10T06:00:00.000000Z
icsa-26-069-01 Apeman Cameras 2026-03-10T06:00:00.000000Z 2026-03-10T06:00:00.000000Z
icsa-26-069-04 Ceragon Siklu MultiHaul and EtherHaul Series 2026-03-10T05:00:00.000000Z 2026-03-10T05:00:00.000000Z
icsa-24-338-04 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update B) 2024-12-03T07:00:00.000000Z 2026-03-10T00:00:00.000000Z
icsa-26-064-01 Delta Electronics CNCSoft-G2 2026-03-05T07:00:00.000000Z 2026-03-05T07:00:00.000000Z
icsa-25-350-02 Johnson Controls PowerG, IQPanel and IQHub (Update A) 2025-12-16T07:00:00.000000Z 2026-03-05T07:00:00.000000Z
icsa-25-343-01 Universal Boot Loader (U-Boot) (Update A) 2025-12-09T07:00:00.000000Z 2026-03-05T07:00:00.000000Z
icsa-22-020-01 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B) 2022-01-20T07:00:00.000000Z 2026-03-05T07:00:00.000000Z
va-25-297-01 IBM DOORS Next Generation multiple vulnerabilities 2025-10-22T18:45:47Z 2026-03-04T00:00:00Z
icsa-26-062-05 Labkotec LID-3300IP 2026-03-03T07:00:00.000000Z 2026-03-03T07:00:00.000000Z
icsa-26-062-04 Portwell Engineering Toolkits 2026-03-03T07:00:00.000000Z 2026-03-03T07:00:00.000000Z
ID Description Published Updated
cisco-sa-xrncs-epni-int-dos-twmffusn Cisco IOS XR Egress Packet Network Interface Aligner Interrupt Denial of Service Vulnerability 2026-03-11T16:00:00+00:00 2026-03-11T16:00:00+00:00
cisco-sa-isis-dos-kdmxpszk Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability 2026-03-11T16:00:00+00:00 2026-03-11T16:00:00+00:00
cisco-sa-iosxr-privesc-bf8d5u4w Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities 2026-03-11T16:00:00+00:00 2026-03-11T16:00:00+00:00
cisco-sa-cc-xss-mrnah5jh Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities 2026-03-11T16:00:00+00:00 2026-03-11T16:00:00+00:00
cisco-sa-sdwan-authbp-qwcx8d4v Cisco Catalyst SD-WAN Vulnerabilities 2026-02-25T16:00:00+00:00 2026-03-05T00:06:17+00:00
cisco-sa-fmc-sql-inject-2enmtc8v Cisco Secure Firewall Management Center Software SQL Injection Vulnerability 2024-10-23T16:00:00+00:00 2026-03-04T16:11:01+00:00
cisco-sa-asaftd-cmd-inj-zjv8wysm Cisco Adaptive Security Appliance and Firepower Threat Defense Software Command Injection Vulnerability 2024-04-24T16:00:00+00:00 2026-03-04T16:10:59+00:00
cisco-sa-onprem-fmc-authbypass-5jpp45v2 Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-ftdfmc-dir-trav-wergjhwq Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software Path Traversal Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-ftd-tcp-dos-rhfqnwrg Cisco Secure Firewall Threat Defense Software TLS with Snort 3 Detection Engine Denial of Service Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-ftd-snort-bypass-rlggkzvf Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-ftd-dnd-dos-bpecg7b7 Cisco Secure Firewall Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-ftd-cmd-inj-mtzgzexf Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Authenticated Command Injection Vulnerabilities 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-fmc-sql-injection-2qh6ccjd Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-fmc-rce-nkhnuljh Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-asaftd-vpn-m9sx6mbc Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-asaftd-saml-lkttrwzp Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-asaftd-ospf-zh8phbsw Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software OSPF Protocol Vulnerabilities 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-asaftd-luainject-vescqgms Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-asaftd-ikev2-dos-ebuegdeg Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerabilities 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-asaftd-desync-n5avzeqw Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-asa-ssh-keybypass-cr5xpusf Cisco Secure Firewall Adaptive Security Appliance Software SSH Partial Private Key Authentication Bypass Vulnerability 2026-03-04T16:00:00+00:00 2026-03-04T16:00:00+00:00
cisco-sa-sdwan-rpa-ehchtzk Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 2026-02-25T16:00:00+00:00 2026-03-03T00:38:56+00:00
cisco-sa-sd-wan-priv-e6e8tedf Cisco SD-WAN Software Privilege Escalation Vulnerabilities 2022-09-28T16:00:00+00:00 2026-02-25T20:29:00+00:00
cisco-sa-ucsm-cmdinj-gvxlpesb Cisco UCS Manager Software Command Injection Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-ucsm-afwae-mogufyln Cisco UCS Manager Software Privilege Escalation Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-ucsfxosxss-7skve8zv Cisco FXOS and UCS Manager Software Stored Cross-Site Scripting Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-ucsciv-wgytc78q Cisco FXOS and UCS Manager Software Command Injection Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-nxos-ether-dos-kv8ynwz4 Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-nxos-dsnmp-cnn39uh Cisco Nexus 9000 Series Fabric Switches in ACI Mode SNMP Denial of Service Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-23868 CVE-2026-23868 2026-03-02T00:00:00.000Z 2026-03-14T01:37:47.000Z
msrc_cve-2026-27137 Incorrect enforcement of email constraints in crypto/x509 2026-03-02T00:00:00.000Z 2026-03-14T01:37:36.000Z
msrc_cve-2026-27138 Panic in name constraint checking for malformed certificates in crypto/x509 2026-03-02T00:00:00.000Z 2026-03-14T01:37:26.000Z
msrc_cve-2026-3494 MariaDB Server Audit Plugin Comment Handling Bypass 2026-03-02T00:00:00.000Z 2026-03-14T01:37:11.000Z
msrc_cve-2026-26018 CoreDNS Loop Detection Denial of Service Vulnerability 2026-03-02T00:00:00.000Z 2026-03-14T01:37:01.000Z
msrc_cve-2026-26017 CoreDNS ACL Bypass 2026-03-02T00:00:00.000Z 2026-03-14T01:36:50.000Z
msrc_cve-2026-27141 Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net 2026-02-02T00:00:00.000Z 2026-03-14T01:36:22.000Z
msrc_cve-2025-58160 Tracing logging user input may result in poisoning logs with ANSI escape sequences 2025-08-02T00:00:00.000Z 2026-03-14T01:36:06.000Z
msrc_cve-2026-27171 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition. 2026-02-02T00:00:00.000Z 2026-03-14T01:01:27.000Z
msrc_cve-2026-3381 Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib 2026-03-02T00:00:00.000Z 2026-03-14T01:01:22.000Z
msrc_cve-2026-31802 node-tar Symlink Path Traversal via Drive-Relative Linkpath 2026-03-02T00:00:00.000Z 2026-03-14T01:01:17.000Z
msrc_cve-2026-26111 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 2026-03-10T07:00:00.000Z 2026-03-13T07:00:00.000Z
msrc_cve-2026-25173 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 2026-03-10T07:00:00.000Z 2026-03-13T07:00:00.000Z
msrc_cve-2026-25172 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 2026-03-10T07:00:00.000Z 2026-03-13T07:00:00.000Z
msrc_cve-2026-21257 GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-03-13T07:00:00.000Z
msrc_cve-2026-21256 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-03-13T07:00:00.000Z
msrc_cve-2026-0385 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability 2026-03-10T07:00:00.000Z 2026-03-13T07:00:00.000Z
msrc_cve-2026-3805 use after free in SMB connection reuse 2026-03-02T00:00:00.000Z 2026-03-13T01:03:13.000Z
msrc_cve-2026-3904 CVE-2026-3904 2026-03-02T00:00:00.000Z 2026-03-13T01:03:00.000Z
msrc_cve-2026-3784 wrong proxy connection reuse with credentials 2026-03-02T00:00:00.000Z 2026-03-13T01:02:44.000Z
msrc_cve-2026-3783 token leak with redirect and netrc 2026-03-02T00:00:00.000Z 2026-03-13T01:02:16.000Z
msrc_cve-2026-1965 bad reuse of HTTP Negotiate connection 2026-03-02T00:00:00.000Z 2026-03-13T01:01:47.000Z
msrc_cve-2026-25679 Incorrect parsing of IPv6 host literals in net/url 2026-03-02T00:00:00.000Z 2026-03-12T14:36:21.000Z
msrc_cve-2026-27139 FileInfo can escape from a Root in os 2026-03-02T00:00:00.000Z 2026-03-12T14:36:01.000Z
msrc_cve-2026-26133 M365 Copilot Information Disclosure Vulnerability 2026-03-10T07:00:00.000Z 2026-03-12T07:00:00.000Z
msrc_cve-2026-20841 Windows Notepad App Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-03-12T07:00:00.000Z
msrc_cve-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 2025-12-02T00:00:00.000Z 2026-03-12T01:37:04.000Z
msrc_cve-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509 2025-12-02T00:00:00.000Z 2026-03-12T01:36:56.000Z
msrc_cve-2025-61725 Excessive CPU consumption in ParseAddress in net/mail 2025-10-02T00:00:00.000Z 2026-03-12T01:36:48.000Z
msrc_cve-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto 2025-10-02T00:00:00.000Z 2026-03-12T01:36:43.000Z
ID Description Published Updated
ncsc-2026-0098 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2026-03-13T08:41:19.155490Z 2026-03-13T08:41:19.155490Z
ncsc-2026-0097 Kwetsbaarheden verholpen in Google Chrome 2026-03-13T08:33:43.877125Z 2026-03-13T08:33:43.877125Z
ncsc-2026-0096 Kwetsbaarheden verholpen in Veeam Backup & Replication 2026-03-12T14:54:08.200676Z 2026-03-12T14:54:08.200676Z
ncsc-2026-0095 Kwetsbaarheid verholpen in pac4j-jwt 2026-03-12T14:45:51.156512Z 2026-03-12T14:45:51.156512Z
ncsc-2026-0094 Kwetsbaarheden verholpen in Cisco IOS XR 2026-03-12T14:44:08.106602Z 2026-03-12T14:44:08.106602Z
ncsc-2026-0093 Kwetsbaarheden verholpen in GitLab 2026-03-12T14:42:46.936248Z 2026-03-12T14:42:46.936248Z
ncsc-2026-0092 Kwetsbaarheden verholpen in Fortinet FortiWeb 2026-03-12T07:46:15.529522Z 2026-03-12T07:46:15.529522Z
ncsc-2026-0091 Kwetsbaarheden verholpen in SAP-producten 2026-03-12T07:24:16.575638Z 2026-03-12T07:24:16.575638Z
ncsc-2026-0090 Kwetsbaarheden verholpen in Adobe Experience Manager 2026-03-12T07:12:51.952931Z 2026-03-12T07:12:51.952931Z
ncsc-2026-0089 Kwetsbaarheden verholpen in Adobe Acrobat Reader 2026-03-12T07:03:24.148324Z 2026-03-12T07:03:24.148324Z
ncsc-2026-0088 Kwetsbaarheden verholpen in Adobe Illustrator 2026-03-12T06:55:39.712240Z 2026-03-12T06:55:39.712240Z
ncsc-2026-0087 Kwetsbaarheden verholpen in Adobe Commerce 2026-03-12T06:49:56.459199Z 2026-03-12T06:49:56.459199Z
ncsc-2026-0086 Kwetsbaarheden verholpen in Fortinet FortiManager en FortiAnalyzer 2026-03-11T09:19:38.777277Z 2026-03-11T09:19:38.777277Z
ncsc-2026-0085 Kwetsbaarheden verholpen in Microsoft Developer tools 2026-03-10T20:35:10.478398Z 2026-03-10T20:35:10.478398Z
ncsc-2026-0084 Kwetsbaarheden verholpen in Microsoft Office 2026-03-10T20:20:08.157658Z 2026-03-10T20:20:08.157658Z
ncsc-2026-0083 Kwetsbaarheid verholpen in Microsoft Authenticator app 2026-03-10T20:18:35.792755Z 2026-03-10T20:18:35.792755Z
ncsc-2026-0082 Kwetsbaarheden verholpen in Microsoft Azure 2026-03-10T20:15:41.528951Z 2026-03-10T20:15:41.528951Z
ncsc-2026-0081 Kwetsbaarheden verholpen in Microsoft SQL Server 2026-03-10T20:12:56.032261Z 2026-03-10T20:12:56.032261Z
ncsc-2026-0080 Kwetsbaarheden verholpen in Microsoft Windows 2026-03-10T20:07:55.976638Z 2026-03-10T20:07:55.976638Z
ncsc-2026-0059 Kwetsbaarheden verholpen in Ivanti Endpoint Manager 2026-02-11T08:16:27.583936Z 2026-03-10T14:20:48.176282Z
ncsc-2026-0079 Kwetsbaarheden verholpen in Siemens producten 2026-03-10T12:39:14.474522Z 2026-03-10T12:39:14.474522Z
ncsc-2026-0071 Kwetsbaarheden verholpen in Cisco Catalyst SD-WAN Manager 2026-02-25T17:11:09.013125Z 2026-03-06T12:07:02.595940Z
ncsc-2026-0078 Kwetsbaarheden verholpen in Kibana 2026-03-05T09:36:49.056247Z 2026-03-05T09:36:49.056247Z
ncsc-2026-0077 Kwetsbaarheden verholpen in Cisco Secure Firewall systemen 2026-03-05T09:05:21.646499Z 2026-03-05T09:05:21.646499Z
ncsc-2026-0076 Kwetsbaarheden verholpen in Cisco Secure Firewall Management Center 2026-03-04T20:49:12.211658Z 2026-03-04T20:49:12.211658Z
ncsc-2026-0075 Kwetsbaarheid verholpen in n8n Automation Platform 2026-03-04T14:03:54.207583Z 2026-03-04T14:03:54.207583Z
ncsc-2026-0070 Kwetsbaarheden verholpen in VMware Aria Operations 2026-02-25T11:24:46.807867Z 2026-03-04T08:54:08.940512Z
ncsc-2026-0074 Kwetsbaarheden verholpen in Google Android en Samsung Mobile 2026-03-03T09:07:09.279353Z 2026-03-03T09:07:09.279353Z
ncsc-2026-0073 Kwetsbaarheid verholpen in Juniper Junos OS Evolved 2026-02-27T09:48:51.845864Z 2026-02-27T09:48:51.845864Z
ncsc-2026-0072 Kwetsbaarheden verholpen in GitLab 2026-02-27T07:15:18.318821Z 2026-02-27T07:15:18.318821Z
ID Description Published Updated
nn-2025:18-01 Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0 2026-03-04T11:00:00.000Z 2026-03-04T11:00:00.000Z
nn-2025:17-01 HTML injection in Sensor Map in CMC before 25.6.0 2026-03-04T11:00:00.000Z 2026-03-04T11:00:00.000Z
nn-2025:16-01 HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0 2026-03-04T11:00:00.000Z 2026-03-04T11:00:00.000Z
nn-2025:15-01 Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 2025-12-18T11:00:00.000Z 2025-12-18T11:00:00.000Z
nn-2025:14-01 HTML injection in Asset List in Guardian/CMC before 25.5.0 2025-12-18T11:00:00.000Z 2025-12-18T11:00:00.000Z
nn-2025:13-01 Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0 2025-12-18T11:00:00.000Z 2025-12-18T11:00:00.000Z
nn-2025:12-01 HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0 2025-12-18T11:00:00.000Z 2025-12-18T11:00:00.000Z
nn-2025:11-01 Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0 2025-11-25T11:00:00.000Z 2025-11-26T11:00:00.000Z
nn-2025:9-01 Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:8-01 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:7-01 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:6-01 Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:5-01 Incorrect authorization for CLI in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:4-01 Client-side path traversal in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:10-01 Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:3-01 Incorrect authorization for traces request/download in CMC before 25.1.0 2025-08-26T11:00:00.000Z 2025-08-26T11:00:00.000Z
nn-2025:2-01 Privilege escalation in Guardian/CMC before 24.6.0 2025-06-10T11:00:00.000Z 2025-06-10T11:00:00.000Z
nn-2025:1-01 Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 2025-06-10T11:00:00.000Z 2025-06-10T11:00:00.000Z
nn-2024:2-01 Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0 2024-09-11T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2024:1-01 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1 2024-04-10T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:9-01 Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0 2023-09-18T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:8-01 Session Fixation in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:7-01 DoS via SAML configuration in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:6-01 Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:4-01 Stored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:3-01 Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:2-01 Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:17-01 Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1 2024-04-10T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:15-01 Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0 2024-05-15T11:00:00.000Z 2024-09-19T11:00:00.000Z
nn-2023:12-01 Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0 2024-01-15T11:00:00.000Z 2024-09-19T11:00:00.000Z
ID Description Published Updated
opensuse-su-2026:10374-1 python311-tornado6-6.5.5-1.1 on GA media 2026-03-14T00:00:00Z 2026-03-14T00:00:00Z
opensuse-su-2026:10373-1 python311-simpleeval-1.0.5-1.1 on GA media 2026-03-14T00:00:00Z 2026-03-14T00:00:00Z
opensuse-su-2026:10372-1 python311-black-26.3.1-1.1 on GA media 2026-03-14T00:00:00Z 2026-03-14T00:00:00Z
opensuse-su-2026:10371-1 curl-8.19.0-1.1 on GA media 2026-03-14T00:00:00Z 2026-03-14T00:00:00Z
opensuse-su-2026:20357-1 Security update for qemu 2026-03-13T10:47:15Z 2026-03-13T10:47:15Z
opensuse-su-2026:20348-1 Security update for python-PyPDF2 2026-03-11T20:15:02Z 2026-03-11T20:15:02Z
opensuse-su-2026:20345-1 Security update for python-lxml_html_clean 2026-03-11T18:05:18Z 2026-03-11T18:05:18Z
opensuse-su-2026:20342-1 Security update for go1.26 2026-03-11T09:09:25Z 2026-03-11T09:09:25Z
opensuse-su-2026:20341-1 Security update for kea 2026-03-11T08:51:21Z 2026-03-11T08:51:21Z
opensuse-su-2026:20340-1 Security update for cJSON 2026-03-11T08:21:26Z 2026-03-11T08:21:26Z
opensuse-su-2026:10314-1 traefik2-2.11.40-1.1 on GA media 2026-03-09T00:00:00Z 2026-03-09T00:00:00Z
opensuse-su-2026:10313-1 rclone-1.73.2-1.1 on GA media 2026-03-09T00:00:00Z 2026-03-09T00:00:00Z
opensuse-su-2026:10312-1 python311-pymongo-4.16.0-1.1 on GA media 2026-03-09T00:00:00Z 2026-03-09T00:00:00Z
opensuse-su-2026:10311-1 corepack24-24.13.0-4.1 on GA media 2026-03-08T00:00:00Z 2026-03-08T00:00:00Z
opensuse-su-2026:10310-1 go1.25-1.25.8-1.1 on GA media 2026-03-08T00:00:00Z 2026-03-08T00:00:00Z
opensuse-su-2026:20332-1 Security update for chromium 2026-03-07T12:59:14Z 2026-03-07T12:59:14Z
opensuse-su-2026:10309-1 weblate-5.16.1-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10308-1 virtiofsd-1.13.2-2.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10307-1 tomcat11-11.0.18-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10306-1 tomcat10-10.1.52-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10305-1 tomcat-9.0.115-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10304-1 python311-nltk-3.9.3-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10303-1 libIex-3_4-33-3.4.6-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10302-1 kubeshark-cli-53.1.0-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10301-1 kernel-devel-longterm-6.18.16-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10300-1 jetty-annotations-9.4.58-3.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10299-1 go1.26-1.26.1-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10298-1 exiv2-0.28.8-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10297-1 coredns-1.14.2-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
opensuse-su-2026:10296-1 chromedriver-145.0.7632.159-1.1 on GA media 2026-03-07T00:00:00Z 2026-03-07T00:00:00Z
ID Description Published Updated
oxdc-adv-2025-0001 OX Dovecot Pro Security Advisory OXDC-ADV-2025-0001 2025-10-31T00:00:00+00:00 2025-11-27T00:00:00+00:00
oxas-adv-2025-0003 OX App Suite Security Advisory OXAS-ADV-2025-0003 2025-09-24T00:00:00+02:00 2025-11-27T00:00:00+00:00
oxas-adv-2025-0002 OX App Suite Security Advisory OXAS-ADV-2025-0002 2025-08-12T00:00:00+02:00 2025-10-31T00:00:00+00:00
oxas-adv-2025-0001 OX App Suite Security Advisory OXAS-ADV-2025-0001 2025-01-27T00:00:00+01:00 2025-04-07T00:00:00+00:00
oxdc-adv-2024-0003 OX Dovecot Pro Security Advisory OXDC-ADV-2024-0003 2024-09-10T00:00:00+02:00 2024-09-10T00:00:00+00:00
oxdc-adv-2024-0002 OX Dovecot Pro Security Advisory OXDC-ADV-2024-0002 2024-09-10T00:00:00+02:00 2024-09-10T00:00:00+00:00
oxas-adv-2024-0005 OX App Suite Security Advisory OXAS-ADV-2024-0005 2024-07-08T00:00:00+02:00 2024-09-09T00:00:00+00:00
oxdc-adv-2024-0001 OX Dovecot Pro Security Advisory OXDC-ADV-2024-0001 2024-09-02T00:00:00+02:00 2024-09-06T00:00:00+00:00
oxas-adv-2024-0004 OX App Suite Security Advisory OXAS-ADV-2024-0004 2024-06-13T00:00:00+02:00 2024-08-19T00:00:00+00:00
oxas-adv-2024-0003 OX App Suite Security Advisory OXAS-ADV-2024-0003 2024-04-24T00:00:00+02:00 2024-08-19T00:00:00+00:00
oxas-adv-2024-0002 OX App Suite Security Advisory OXAS-ADV-2024-0002 2024-03-06T00:00:00+01:00 2024-05-06T00:00:00+00:00
oxas-adv-2024-0001 OX App Suite Security Advisory OXAS-ADV-2024-0001 2024-02-08T00:00:00+01:00 2024-04-25T00:00:00+00:00
oxas-adv-2023-0007 OX App Suite Security Advisory OXAS-ADV-2023-0007 2023-12-11T00:00:00+01:00 2024-02-16T00:00:00+00:00
oxas-adv-2023-0006 OX App Suite Security Advisory OXAS-ADV-2023-0006 2023-09-25T00:00:00+02:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0005 OX App Suite Security Advisory OXAS-ADV-2023-0005 2023-09-19T00:00:00+02:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0004 OX App Suite Security Advisory OXAS-ADV-2023-0004 2023-08-01T00:00:00+02:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0003 OX App Suite Security Advisory OXAS-ADV-2023-0003 2023-05-02T00:00:00+02:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0002 OX App Suite Security Advisory OXAS-ADV-2023-0002 2023-03-20T00:00:00+01:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0001 OX App Suite Security Advisory OXAS-ADV-2023-0001 2023-02-06T00:00:00+01:00 2024-01-22T00:00:00+00:00
oxas-adv-2022-0002 OX App Suite Security Advisory OXAS-ADV-2022-0002 2022-11-02T00:00:00+01:00 2024-01-22T00:00:00+00:00
oxas-adv-2022-0001 OX App Suite Security Advisory OXAS-ADV-2022-0001 2022-08-10T00:00:00+02:00 2024-01-22T00:00:00+00:00
ID Description Published Updated
rhsa-2026:3971 Red Hat Security Advisory: rhc-worker-playbook security update 2026-03-09T01:33:17+00:00 2026-03-12T07:11:49+00:00
rhsa-2026:3970 Red Hat Security Advisory: rhc-worker-playbook security update 2026-03-09T01:29:32+00:00 2026-03-12T07:11:39+00:00
rhsa-2026:3932 Red Hat Security Advisory: git-lfs security update 2026-03-05T16:08:17+00:00 2026-03-12T07:11:33+00:00
rhsa-2026:3931 Red Hat Security Advisory: git-lfs security update 2026-03-05T16:12:11+00:00 2026-03-12T07:11:26+00:00
rhsa-2026:3930 Red Hat Security Advisory: git-lfs security update 2026-03-05T17:14:14+00:00 2026-03-12T07:11:19+00:00
rhsa-2026:3929 Red Hat Security Advisory: git-lfs security update 2026-03-05T17:28:44+00:00 2026-03-12T07:11:07+00:00
rhsa-2026:3928 Red Hat Security Advisory: git-lfs security update 2026-03-05T16:42:20+00:00 2026-03-12T07:10:57+00:00
rhsa-2026:3905 Red Hat Security Advisory: OpenShift Container Platform 4.18.35 bug fix and security update 2026-03-11T04:27:58+00:00 2026-03-12T07:10:19+00:00
rhsa-2026:3898 Red Hat Security Advisory: osbuild-composer security update 2026-03-05T14:35:19+00:00 2026-03-12T07:08:37+00:00
rhsa-2026:3884 Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.2 security update 2026-03-05T12:07:11+00:00 2026-03-12T07:08:25+00:00
rhsa-2026:3880 Red Hat Security Advisory: grafana security update 2026-03-05T12:20:43+00:00 2026-03-12T07:08:10+00:00
rhsa-2026:3879 Red Hat Security Advisory: grafana security update 2026-03-05T12:15:12+00:00 2026-03-12T07:08:02+00:00
rhsa-2026:3875 Red Hat Security Advisory: OpenShift Container Platform 4.18.35 packages and security update 2026-03-11T05:09:45+00:00 2026-03-12T07:07:46+00:00
rhsa-2026:3874 Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.4 security update 2026-03-05T11:31:22+00:00 2026-03-12T07:07:39+00:00
rhsa-2026:3864 Red Hat Security Advisory: delve security update 2026-03-05T11:35:47+00:00 2026-03-12T07:07:31+00:00
rhsa-2026:3854 Red Hat Security Advisory: grafana security update 2026-03-05T11:07:41+00:00 2026-03-12T07:07:22+00:00
rhsa-2026:3843 Red Hat Security Advisory: delve security update 2026-03-05T09:56:17+00:00 2026-03-12T07:07:13+00:00
rhsa-2026:3842 Red Hat Security Advisory: delve security update 2026-03-05T11:24:36+00:00 2026-03-12T07:07:09+00:00
rhsa-2026:3841 Red Hat Security Advisory: grafana security update 2026-03-05T09:37:53+00:00 2026-03-12T07:07:02+00:00
rhsa-2026:3840 Red Hat Security Advisory: image-builder security update 2026-03-05T09:44:51+00:00 2026-03-12T07:06:52+00:00
rhsa-2026:3839 Red Hat Security Advisory: image-builder security update 2026-03-05T10:11:47+00:00 2026-03-12T07:06:42+00:00
rhsa-2026:3838 Red Hat Security Advisory: grafana security update 2026-03-05T09:44:33+00:00 2026-03-12T07:06:31+00:00
rhsa-2026:3836 Red Hat Security Advisory: grafana security update 2026-03-05T09:03:15+00:00 2026-03-12T07:06:20+00:00
rhsa-2026:3835 Red Hat Security Advisory: grafana security update 2026-03-05T09:01:36+00:00 2026-03-12T07:06:07+00:00
rhsa-2026:3833 Red Hat Security Advisory: grafana security update 2026-03-05T08:23:57+00:00 2026-03-12T07:05:57+00:00
rhsa-2026:3831 Red Hat Security Advisory: grafana security update 2026-03-05T07:55:46+00:00 2026-03-12T07:05:45+00:00
rhsa-2026:3827 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3 2026-03-05T07:31:32+00:00 2026-03-12T07:05:38+00:00
rhsa-2026:3825 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3 2026-03-05T07:08:51+00:00 2026-03-12T07:05:32+00:00
rhsa-2026:3822 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T06:53:01+00:00 2026-03-12T07:05:22+00:00
rhsa-2026:3821 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T06:51:55+00:00 2026-03-12T07:05:14+00:00
ID Description Published Updated
sevd-2026-069-03 Deserialization of Untrusted Data vulnerability on EcoStruxure™ Foxboro DCS 2026-03-10T07:00:00.000Z 2026-03-13T07:00:00.000Z
sevd-2026-069-06 Deserialization of Untrusted Data vulnerability on Multiple Products 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-069-05 Use of Hard-coded Credentials vulnerability in EcoStruxure™ IT Data Center Expert 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-069-04 Improper Control of Generation of Code ('Code Injection') vulnerability on EcoStruxure™ Automation Expert 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-069-02 Improper Neutralization in Multiple Products 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-069-01 Improper Resource Shutdown or Release vulnerability in Multiple Products 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-013-04 Multiple Vulnerabilities on EcoStruxure Power Build Rapsody 2026-01-13T08:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-013-01 Multiple Third-Party Vulnerabilities on ProLeiT Plant iT/Brewmaxx 2026-01-13T08:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2025-014-07 FlexNet Publisher Vulnerability 2025-01-14T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-041-02 Multiple Vulnerabilities on EcoStruxure™ Building Operation Workstation and EcoStruxure™ Building Operation Webstation 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2026-041-01 Improper Check for Unusual or Exceptional Conditions on Multiple Products 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2025-343-01 EcoStruxure™ Foxboro DCS 2025-12-09T08:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2025-189-03 EcoStruxure™ Power Operation 2025-07-08T04:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2025-042-02 Improper Input Validation Vulnerability in Uni-Telway Driver 2025-02-11T05:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2026-013-03 Multiple Vulnerabilities on Zigbee Products 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
sevd-2026-013-02 Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
sevd-2025-014-06 RemoteConnect and SCADAPack™ x70 Utilities 2025-01-14T00:00:00.000Z 2026-01-13T08:00:00.000Z
sevd-2024-317-03 Modicon Controllers M340 / Momentum / MC80 2024-11-12T05:00:00.000Z 2026-01-13T08:00:00.000Z
sevd-2025-343-02 EcoStruxure™ Foxboro DCS Advisor 2025-12-09T08:00:00.000Z 2025-12-09T08:00:00.000Z
sevd-2025-252-01 Multiple Altivar Process Drives and Communication Modules 2025-09-09T04:00:00.000Z 2025-12-09T08:00:00.000Z
sevd-2023-192-04 CODESYS Runtime Vulnerabilities 2023-07-11T07:15:18.000Z 2025-12-09T08:00:00.000Z
sevd-2021-159-04 ISaGRAF Vulnerabilities in IEC 61131-3 Programming and Engineering Tools 2021-06-08T04:36:25.000Z 2025-11-15T00:00:00.000Z
sevd-2022-284-03 ISaGRAF Workbench for SAGE RTU 2022-10-10T22:13:16.000Z 2025-11-14T06:30:00.000Z
sevd-2025-315-02 EcoStruxure™ Machine SCADA Expert & Pro-face BLUE Open Studio 2025-11-11T08:00:00.000Z 2025-11-11T08:00:00.000Z
sevd-2025-315-01 PowerChute™ Serial Shutdown 2025-11-11T08:00:00.000Z 2025-11-11T08:00:00.000Z
sevd-2025-224-02 EcoStruxure™ Power Monitoring Expert Software & EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO) 2025-08-12T04:00:00.000Z 2025-11-11T08:00:00.000Z
sevd-2025-224-01 Saitel DR & Saitel DP Remote Terminal Unit 2025-08-12T04:00:00.000Z 2025-11-11T08:00:00.000Z
sevd-2025-287-01 EcoStruxure™ OPC UA Server Expert and EcoStruxure™ Modicon Communication Server 2025-10-14T07:00:00.000Z 2025-10-14T07:00:00.000Z
sevd-2025-133-01 Modicon Controllers M241/M251/M258/LMC058 2025-05-13T04:00:00.000Z 2025-10-14T07:00:00.000Z
sevd-2024-345-03 Modicon M241 / M251 / M258 / LMC058 2024-12-10T05:00:00.000Z 2025-10-14T07:00:00.000Z
ID Description Published Updated
sca-2026-0006 Vulnerabilities affecting SICK Lector85x and SICK Lector83x 2026-03-06T14:00:00.000Z 2026-03-06T14:00:00.000Z
sca-2026-0005 Vulnerabilities affecting SICK LMS1000 and SICK MRS1000 2026-02-27T14:00:00.000Z 2026-02-27T14:00:00.000Z
sca-2026-0004 Eclipse Cyclone DDS Vulnerabilities have no impact on SICK picoScan150 & SICK picoScan120 products 2026-02-13T14:00:00.000Z 2026-02-13T14:00:00.000Z
sca-2026-0003 Vulnerability affecting SICK nanoScan3 and microScan3 2026-01-26T14:00:00.000Z 2026-01-26T14:00:00.000Z
sca-2026-0002 Vulnerabilities affecting SICK Incoming Goods Suite 2026-01-15T14:00:00.000Z 2026-01-22T19:00:00.000Z
sca-2026-0001 Vulnerabilities affecting SICK TDC-X401GL 2026-01-15T14:00:00.000Z 2026-01-15T14:00:00.000Z
sca-2025-0013 Vulnerabilities affecting SICK TLOC100-100 2025-10-27T14:00:00.000Z 2025-11-11T14:00:00.000Z
sca-2025-0014 CodeMeter vulnerablity affects SICK CODE-LOC and SICK LIDAR-LOC 2025-11-03T11:00:00.000Z 2025-11-03T14:00:00.000Z
sca-2025-0012 Sudo vulnerability affects SICK SID products 2025-10-27T11:00:00.000Z 2025-10-27T14:00:00.000Z
sca-2025-0011 Vulnerabilities affecting Endress+Hauser SSG-E210GC 2025-10-02T13:00:00.000Z 2025-10-02T13:00:00.000Z
sca-2025-0010 Multiple vulnerabilities in SICK Enterprise Analytics and SICK Logistic Analytics Products 2025-10-02T13:00:00.000Z 2025-10-02T13:00:00.000Z
sca-2025-0009 Vulnerabilities affecting SICK TDC-E210GC 2025-08-01T13:00:00.000Z 2025-08-01T13:00:00.000Z
sca-2025-0008 Multiple vulnerabilities in Endress+Hauser MEAC300-FNADE4 2025-07-03T13:00:00.000Z 2025-07-03T13:00:00.000Z
sca-2025-0007 Multiple vulnerabilities in SICK Field Analytics and SICK Media Server 2025-06-12T13:00:00.000Z 2025-06-12T13:00:00.000Z
sca-2025-0003 FreeRTOS Vulnerabilities have no impact on SICK Products 2025-02-28T00:00:00.000Z 2025-05-20T11:00:00.000Z
sca-2025-0006 Vulnerability affecting picoScan and multiScan 2025-04-28T13:00:00.000Z 2025-04-28T13:00:00.000Z
sca-2025-0005 Vulnerabilities in SICK Flexi Compact 2025-04-28T10:00:00.000Z 2025-04-28T10:00:00.000Z
sca-2025-0004 Critical vulnerabilities in SICK DL100-2xxxxxxx 2025-03-14T11:00:00.000Z 2025-03-14T11:00:00.000Z
sca-2025-0001 Multiple vulnerabilities in SICK MEAC300 2025-02-14T14:00:00.000Z 2025-02-21T14:00:00.000Z
sca-2025-0002 Vulnerability in SICK Lector8xx and SICK InspectorP8xx 2025-02-14T10:19:00.000Z 2025-02-14T10:19:00.000Z
sca-2024-0007 Vulnerability in SICK OLM 2024-12-31T00:00:00.000Z 2024-12-31T00:00:00.000Z
sca-2024-0006 Critical vulnerabilities in SICK InspectorP61x, InspectorP62x and TiM3xx 2024-12-06T00:00:00.000Z 2024-12-06T00:00:00.000Z
sca-2024-0005 Vulnerability in SICK Incoming Goods Suite 2024-11-19T00:00:00.000Z 2024-11-19T00:00:00.000Z
sca-2024-0004 Third party vulnerabilities in SICK CDE-100 2024-11-07T12:00:00.000Z 2024-11-07T12:00:00.000Z
sca-2024-0003 Critical vulnerability in multiple SICK products 2024-10-17T13:00:00.000Z 2024-10-17T13:00:00.000Z
sca-2024-0002 Vulnerability in SICK MSC800 2024-09-11T23:00:00.000Z 2024-09-11T23:00:00.000Z
sca-2024-0001 Vulnerability in SICK Logistics Analytics Products and SICK Field Analytics 2024-01-29T00:00:00.000Z 2024-01-29T00:00:00.000Z
sca-2023-0011 Vulnerability in multiple SICK Flexi Soft Gateways 2023-10-23T11:00:00.000Z 2023-10-23T11:00:00.000Z
sca-2023-0010 Vulnerabilities in SICK Application Processing Unit 2023-10-09T11:00:00.000Z 2023-10-09T11:00:00.000Z
sca-2023-0008 Vulnerability in SICK SIM1012 2023-09-29T13:00:00.000Z 2023-09-29T13:00:00.000Z
ID Description Published Updated
ssa-452276 SSA-452276: Stored Cross-Site Scripting Vulnerability in SIMATIC S7-1500 2026-03-10T00:00:00.000Z 2026-03-13T00:00:00.000Z
ssa-975644 SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices 2026-03-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-903736 SSA-903736: Multiple vulnerabilities in SICAM SIAPP SDK before V2.1.7 2026-03-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-868571 SSA-868571: Missing Server Certificate Validation in IAM Client 2025-12-09T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-770770 SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices 2025-02-11T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-710408 SSA-710408: Missing Server Certificate Validation in Siemens Advanced Licensing (SALT) Toolkit 2025-12-09T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-535115 SSA-535115: Data Validation Vulnerability in NX Before V2512 2026-02-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-513708 SSA-513708: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices 2025-06-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-485750 SSA-485750: Multiple Vulnerabilities in SIDIS Prime Before V4.0.800 2026-03-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-430425 SSA-430425: Multiple Vulnerabilities in SINEC Security Monitor before V4.9.0 2024-10-08T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-282044 SSA-282044: DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software Delivery 2025-08-12T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-212953 SSA-212953: Multiple Vulnerabilities in COMOS 2025-12-09T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-201595 SSA-201595: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC Product Family and SENTRON Powermanager 2025-08-14T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-126399 SSA-126399: Improper Access Control Vulnerability in Heliox EV Chargers 2026-03-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-082556 SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 2025-06-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-027652 SSA-027652: Privilege Escalation Vulnerability in SINAMICS Drives 2025-09-09T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-613116 SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.1 2025-08-12T00:00:00Z 2026-02-24T00:00:00Z
ssa-355557 SSA-355557: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.2 2025-08-12T00:00:00Z 2026-02-24T00:00:00Z
ssa-089022 SSA-089022: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.3 2026-01-28T00:00:00Z 2026-02-24T00:00:00Z
ssa-965753 SSA-965753: Multiple File Parsing Vulnerabilities in Simcenter Femap and Nastran Before V2512 2026-02-10T00:00:00Z 2026-02-10T00:00:00Z
ssa-864900 SSA-864900: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices 2025-05-13T00:00:00Z 2026-02-10T00:00:00Z
ssa-783261 SSA-783261: Denial of Service Vulnerability in Automation License Manager (ALM) Before V5.2 2012-12-12T00:00:00Z 2026-02-10T00:00:00Z
ssa-674753 SSA-674753: Denial-of-Service Vulnerability in ET 200 Devices 2026-01-13T00:00:00Z 2026-02-10T00:00:00Z
ssa-625934 SSA-625934: Improper Access Control Vulnerability in the Webhooks Implementation of Siveillance Video Management Servers 2026-02-10T00:00:00Z 2026-02-10T00:00:00Z
ssa-599451 SSA-599451: Multiple Vulnerabilities in SiPass integrated 2025-10-14T00:00:00Z 2026-02-10T00:00:00Z
ssa-507364 SSA-507364: Heap Based Buffer Overflow Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC Product Family and SENTRON Powermanager 2026-02-10T00:00:00Z 2026-02-10T00:00:00Z
ssa-445819 SSA-445819: Out of Bounds Read in PS/IGES Parasolid Translator Component in Solid Edge 2026-02-10T00:00:00Z 2026-02-10T00:00:00Z
ssa-311973 SSA-311973: Multiple Local Privilege Escalation Vulnerabilities in SINEC NMS and User Management Component (UMC) 2026-02-10T00:00:00Z 2026-02-10T00:00:00Z
ssa-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 2024-04-09T00:00:00Z 2026-02-10T00:00:00Z
ssa-216014 SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs 2025-03-11T00:00:00Z 2026-02-10T00:00:00Z
ID Description Published Updated
suse-su-2026:0898-1 Security update for libpng15 2026-03-13T15:26:30Z 2026-03-13T15:26:30Z
suse-su-2026:0897-1 Security update for python3 2026-03-13T15:26:14Z 2026-03-13T15:26:14Z
suse-su-2026:0896-1 Security update for glibc 2026-03-13T15:25:13Z 2026-03-13T15:25:13Z
suse-su-2026:0894-1 Security update for libsoup 2026-03-13T13:48:31Z 2026-03-13T13:48:31Z
suse-su-2026:0892-1 Security update for busybox 2026-03-13T09:05:08Z 2026-03-13T09:05:08Z
suse-su-2026:0891-1 Security update for python 2026-03-13T09:04:54Z 2026-03-13T09:04:54Z
suse-su-2026:0890-1 Security update for tomcat10 2026-03-13T08:57:08Z 2026-03-13T08:57:08Z
suse-su-2026:0889-1 Security update for qemu 2026-03-13T07:58:55Z 2026-03-13T07:58:55Z
suse-su-2026:0888-1 Security update for dnsdist 2026-03-13T07:08:03Z 2026-03-13T07:08:03Z
suse-su-2026:0886-1 Security update for libsoup2 2026-03-12T14:50:32Z 2026-03-12T14:50:32Z
suse-su-2026:0885-1 Security update for curl 2026-03-12T14:50:17Z 2026-03-12T14:50:17Z
suse-su-2026:0884-1 Security update for python36 2026-03-12T10:20:30Z 2026-03-12T10:20:30Z
suse-su-2026:0883-1 Security update for postgresql17 2026-03-12T10:20:03Z 2026-03-12T10:20:03Z
suse-su-2026:0882-1 Security update for postgresql16 2026-03-12T10:19:26Z 2026-03-12T10:19:26Z
suse-su-2026:0881-1 Security update for postgresql18 2026-03-12T10:18:52Z 2026-03-12T10:18:52Z
suse-su-2026:0880-1 Security update for MozillaThunderbird 2026-03-12T10:18:33Z 2026-03-12T10:18:33Z
suse-su-2026:0879-1 Security update for curl 2026-03-12T10:04:20Z 2026-03-12T10:04:20Z
suse-su-2026:0877-1 Security update for tomcat11 2026-03-12T05:39:40Z 2026-03-12T05:39:40Z
suse-su-2026:0876-1 Security update for go1.26 2026-03-11T18:35:26Z 2026-03-11T18:35:26Z
suse-su-2026:0875-1 Security update for go1.25 2026-03-11T18:34:13Z 2026-03-11T18:34:13Z
suse-su-2026:0874-1 Security update for GraphicsMagick 2026-03-11T17:07:29Z 2026-03-11T17:07:29Z
suse-su-2026:0873-1 Security update for python 2026-03-11T17:07:11Z 2026-03-11T17:07:11Z
suse-su-2026:0872-1 Security update for busybox 2026-03-11T17:06:34Z 2026-03-11T17:06:34Z
suse-su-2026:0871-1 Security update for MozillaFirefox 2026-03-11T17:05:23Z 2026-03-11T17:05:23Z
suse-su-2026:0870-1 Security update for ImageMagick 2026-03-11T16:45:31Z 2026-03-11T16:45:31Z
suse-su-2026:0862-1 Security update for gnutls 2026-03-11T10:00:03Z 2026-03-11T10:00:03Z
suse-su-2026:0860-1 Security update for python-maturin 2026-03-10T16:46:52Z 2026-03-10T16:46:52Z
suse-su-2026:0859-1 Security update for python-aiohttp 2026-03-10T16:05:00Z 2026-03-10T16:05:00Z
suse-su-2026:0858-1 Security update for python-aiohttp 2026-03-10T12:38:39Z 2026-03-10T12:38:39Z
suse-su-2026:0857-1 Security update for util-linux 2026-03-10T11:01:32Z 2026-03-10T11:01:32Z
ID Description Published Updated
alsa-2026:3985 Important: git-lfs security update 2026-03-09T00:00:00Z 2026-03-13T12:38:07Z
alsa-2026:4306 Important: mingw-libpng security update 2026-03-11T00:00:00Z 2026-03-13T12:35:26Z
alsa-2026:4012 Moderate: kernel security update 2026-03-09T00:00:00Z 2026-03-13T09:42:02Z
alsa-2026:4450 Important: .NET 9.0 security update 2026-03-12T00:00:00Z 2026-03-13T09:36:54Z
alsa-2026:4451 Important: .NET 8.0 security update 2026-03-12T00:00:00Z 2026-03-13T09:34:29Z
alsa-2026:4453 Important: .NET 10.0 security update 2026-03-12T00:00:00Z 2026-03-13T09:32:40Z
alsa-2026:3940 Moderate: nfs-utils security update 2026-03-05T00:00:00Z 2026-03-13T09:30:09Z
alsa-2026:3842 Moderate: delve security update 2026-03-05T00:00:00Z 2026-03-13T09:28:13Z
alsa-2026:4168 Moderate: python3.9 security update 2026-03-10T00:00:00Z 2026-03-13T09:26:02Z
alsa-2026:4177 Important: opentelemetry-collector security update 2026-03-10T00:00:00Z 2026-03-13T09:23:39Z
alsa-2026:4188 Moderate: gnutls security update 2026-03-10T00:00:00Z 2026-03-13T09:21:59Z
alsa-2026:4216 Moderate: python3.11 security update 2026-03-10T00:00:00Z 2026-03-13T09:19:57Z
alsa-2026:4454 Important: .NET 8.0 security update 2026-03-12T00:00:00Z 2026-03-13T09:17:27Z
alsa-2026:4458 Important: .NET 10.0 security update 2026-03-12T00:00:00Z 2026-03-13T09:14:44Z
alsa-2026:4455 Important: .NET 8.0 security update 2026-03-12T00:00:00Z 2026-03-13T09:11:49Z
alsa-2026:4463 Moderate: python3.12 security update 2026-03-12T00:00:00Z 2026-03-13T09:03:59Z
alsa-2026:4443 Important: .NET 9.0 security update 2026-03-12T00:00:00Z 2026-03-13T09:01:07Z
alsa-2026:4442 Moderate: vim security update 2026-03-12T00:00:00Z 2026-03-12T14:47:41Z
alsa-2026:4174 Important: opentelemetry-collector security update 2026-03-10T00:00:00Z 2026-03-11T17:46:34Z
alsa-2026:4235 Moderate: nginx:1.26 security update 2026-03-10T00:00:00Z 2026-03-11T11:13:12Z
alsa-2026:3966 Moderate: kernel security update 2026-03-09T00:00:00Z 2026-03-11T10:10:37Z
alsa-2026:3730 Important: postgresql security update 2026-03-04T00:00:00Z 2026-03-11T10:01:08Z
alsa-2026:3752 Important: osbuild-composer security update 2026-03-04T00:00:00Z 2026-03-11T09:57:01Z
alsa-2026:3898 Important: osbuild-composer security update 2026-03-05T00:00:00Z 2026-03-11T09:54:32Z
alsa-2026:4024 Important: postgresql:13 security update 2026-03-09T00:00:00Z 2026-03-11T09:52:09Z
alsa-2026:4059 Important: postgresql:15 security update 2026-03-09T00:00:00Z 2026-03-11T09:49:31Z
alsa-2026:4063 Important: postgresql:16 security update 2026-03-09T00:00:00Z 2026-03-11T09:46:43Z
alsa-2026:4162 Moderate: mysql8.4 security update 2026-03-10T00:00:00Z 2026-03-11T09:43:31Z
alsa-2026:3939 Moderate: nfs-utils security update 2026-03-05T00:00:00Z 2026-03-11T09:35:33Z
alsa-2026:4164 Important: git-lfs security update 2026-03-10T00:00:00Z 2026-03-11T09:33:00Z
ID Description Published Updated
hsec-2024-0004 Hackage package and doc upload stored XSS vulnerability 2026-01-16T11:18:20Z 2026-01-16T11:18:20Z
hsec-2025-0007 cmark-gfm: resource exhaustion due to quadratic complexity in parser 2025-12-27T08:58:56Z 2025-12-27T08:58:56Z
hsec-2025-0006 Private key leak via inherited file descriptor 2025-11-17T02:22:38Z 2025-11-17T02:22:38Z
hsec-2025-0005 cabal-install dependency confusion 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2025-0004 Broken Path Sanitization in spacecookie Library 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2025-0003 Use after free in multithreaded lzma (.xz) decoder 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2025-0002 Double Public Key Signing Function Oracle Attack on Ed25519 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2025-0001 Subword division operations may produce incorrect results 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0009 Public key confusion in third-party blocks 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0008 Sign extension error in the PPC64le FFI 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0007 Sign extension error in the AArch64 NCG 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0006 fromIntegral: conversion error 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0003 process: command injection via argument list on Windows 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0002 out-of-bounds write when there are many bzip2 selectors 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0001 Reflected XSS vulnerability in keter 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0015 cabal-install uses expired key policies 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0014 Arbitrary file write is possible when using PDF output or --extract-media with untrusted input 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0013 git-annex plaintext storage of embedded credentials on encrypted remotes 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0012 git-annex checksum exposure to encrypted special remotes 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0011 git-annex GPG decryption attack via compromised remote 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0010 git-annex private data exfiltration to compromised remote 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0009 git-annex command injection via malicious SSH hostname 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0008 Stored XSS in hledger-web 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0007 readFloat: memory exhaustion with large exponent 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0006 x509-validation does not enforce pathLenConstraint 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0005 tls-extra: certificate validation does not check Basic Constraints 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0004 xml-conduit unbounded entity expansion 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0003 code injection in xmonad-contrib 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0002 Improper Verification of Cryptographic Signature 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0001 Hash flooding vulnerability in aeson 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
ID Description Published Updated
osec-2026-01 Buffer Over-Read in OCaml Marshal Deserialization 2026-02-17T13:30:00Z 2026-02-27T09:30:00Z
osec-2026-02 ARP unbounded memory usage 2026-02-18T10:30:00Z 2026-02-18T10:30:00Z
osec-2022-01 Infinite loop in console output on xen 2022-12-07T00:00:00Z 2026-02-18T09:30:00Z
osec-2025-01 Albatross console out of memory 2025-08-15T00:18:22Z 2026-01-13T12:00:00Z
osec-2019-02 Grant unshare vulnerability in mirage-xen 2019-04-26T00:00:00Z 2026-01-13T12:00:00Z
osec-2019-01 Memory disclosure in mirage-net-xen 2019-03-21T00:00:00Z 2026-01-13T12:00:00Z
osec-2016-02 Memory disclosure in mirage-net-xen 2016-05-03T00:00:00Z 2026-01-13T12:00:00Z
osec-2023-01 Time of check time of use issue in opam's cache 2023-05-25T12:00:00Z 2026-01-09T12:00:00Z
osec-2016-01 Buffer overflow and information leak in OCaml < 4.03.0 2016-04-29T00:18:22Z 2026-01-01T12:00:00Z
osec-2018-01 An integer overflow in the `bigarray` serialization module leads to arbitrary code execution 2018-04-06T18:29:00Z 2025-12-16T12:00:00Z
osec-2017-01 Local privilege escalation issue with ocaml binaries 2017-06-23T15:19:47Z 2025-12-16T12:00:00Z
ID Description Published Updated
osv-2023-1267 Heap-buffer-overflow in dwg_free_object 2023-12-08T00:11:02.971903Z 2026-03-16T14:18:18.473266Z
osv-2023-307 Heap-buffer-overflow in bit_read_BB 2023-04-13T14:02:09.774988Z 2026-03-16T14:15:35.572117Z
osv-2022-714 Heap-buffer-overflow in dynapi_set_helper 2022-08-15T00:00:47.794062Z 2026-03-16T14:15:01.485520Z
osv-2022-653 Heap-double-free in dwg_free_common_entity_data 2022-07-30T00:01:52.491112Z 2026-03-16T14:14:57.977202Z
osv-2022-400 Heap-double-free in dwg_free_XRECORD_private 2022-05-08T00:00:40.782520Z 2026-03-16T14:13:21.856413Z
osv-2022-388 Segv on unknown address in dwg_ref_get_object 2022-05-01T00:01:54.904711Z 2026-03-16T14:13:13.117484Z
osv-2022-379 Segv on unknown address in bit_write_TV 2022-04-27T00:00:44.539231Z 2026-03-16T14:13:11.577194Z
osv-2022-372 Heap-buffer-overflow in dwg_encode_VERTEX_2D 2022-04-26T00:00:09.352798Z 2026-03-16T14:13:07.208839Z
osv-2022-1259 Heap-buffer-overflow in dwg_decode_INSERT_private 2022-12-13T13:00:46.870838Z 2026-03-16T14:11:57.760297Z
osv-2022-1198 Heap-buffer-overflow in dwg_json_LTYPE 2022-11-23T13:02:06.623044Z 2026-03-16T14:11:45.682026Z
osv-2022-312 Heap-buffer-overflow in dhcp_reply 2022-04-07T00:00:40.457052Z 2026-03-16T14:11:33.985074Z
osv-2021-1343 Heap-buffer-overflow in get_next_owned_entity 2021-09-21T00:01:33.177403Z 2026-03-16T14:10:46.284440Z
osv-2021-1086 Heap-buffer-overflow in dwg_convert_SAB_to_SAT1 2021-08-02T00:00:31.888461Z 2026-03-16T14:10:27.258849Z
osv-2022-1176 Heap-double-free in dwg_free 2022-11-18T13:00:26.857477Z 2026-03-15T14:15:50.835444Z
osv-2022-1018 Index-out-of-bounds in LibRaw::kodak_radc_load_raw 2022-10-06T00:02:27.511658Z 2026-03-15T14:14:15.550635Z
osv-2021-586 Use-of-uninitialized-value in void intra_prediction_angular<unsigned short> 2021-03-31T00:01:03.787831Z 2026-03-15T14:14:10.270829Z
osv-2026-350 UNKNOWN READ in bfd_getl32 2026-03-04T00:14:56.651284Z 2026-03-14T18:43:19.427139Z
osv-2024-679 Heap-buffer-overflow in readImage4v2 2024-07-25T00:14:34.485446Z 2026-03-14T14:26:34.498018Z
osv-2023-800 Heap-buffer-overflow in XCFImageFormat::loadTileRLE 2023-09-07T14:00:27.693270Z 2026-03-14T14:22:21.230087Z
osv-2023-55 Index-out-of-bounds in LibRaw::apply_tiff 2023-02-07T13:00:07.438565Z 2026-03-14T14:22:06.668821Z
osv-2021-972 UNKNOWN READ in void mc_chroma<unsigned short> 2021-07-13T00:00:16.631711Z 2026-03-14T14:16:24.498362Z
osv-2021-948 Use-of-uninitialized-value in residual_coding 2021-07-10T00:01:12.890029Z 2026-03-14T14:16:22.555693Z
osv-2021-735 Use-of-uninitialized-value in decode_CABAC_FL_bypass 2021-05-08T00:00:14.355747Z 2026-03-14T14:16:21.360945Z
osv-2021-525 Use-of-uninitialized-value in void edge_filtering_chroma_internal<unsigned char> 2021-03-16T00:00:19.176877Z 2026-03-14T14:16:18.923815Z
osv-2020-876 Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB 2020-07-14T22:13:55.541274Z 2026-03-14T14:15:49.159544Z
osv-2020-868 Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2 2020-07-14T22:13:50.828646Z 2026-03-14T14:15:46.256168Z
osv-2023-395 Stack-buffer-overflow in sc_path_print 2023-05-14T14:00:57.078498Z 2026-03-13T14:25:13.201222Z
osv-2022-1235 Heap-buffer-overflow in _rrparse 2022-12-04T13:00:30.303410Z 2026-03-13T14:16:08.108628Z
osv-2022-1201 Stack-buffer-overflow in msc_zero_object 2022-11-24T13:00:10.344351Z 2026-03-13T14:15:44.308696Z
osv-2022-1188 Stack-buffer-overflow in authentic_get_tagged_data 2022-11-20T13:01:57.719130Z 2026-03-13T14:15:40.902293Z
ID Description Published Updated
rustsec-2026-0040 `tracing-ethers` was removed from crates.io due to malicious code 2026-03-14T12:00:00Z 2026-03-14T18:30:09Z
rustsec-2026-0037 Denial of service in Quinn endpoints 2026-03-09T12:00:00Z 2026-03-14T07:21:57Z
rustsec-2023-0083 blurhash: panic on parsing crafted blurhash inputs 2023-09-19T12:00:00Z 2026-03-11T10:51:38Z
rustsec-2023-0082 phonenumber: panic on parsing crafted RF3966 phonenumber inputs 2023-09-19T12:00:00Z 2026-03-11T10:37:17Z
rustsec-2026-0038 RustSec Advisory 2026-03-08T12:00:00Z 2026-03-11T06:21:51Z
rustsec-2026-0039 `chrono_anchor` was removed from crates.io due to malicious code 2026-03-10T12:00:00Z 2026-03-10T20:34:44Z
rustsec-2026-0035 Cache poisoning via insecure-by-default cache key 2026-03-04T12:00:00Z 2026-03-09T20:53:55Z
rustsec-2026-0034 HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing 2026-03-04T12:00:00Z 2026-03-09T20:53:55Z
rustsec-2026-0033 HTTP Request Smuggling via Premature Upgrade 2026-03-04T12:00:00Z 2026-03-09T20:53:55Z
rustsec-2026-0036 `time-sync` was removed from crates.io due to malicious code 2026-03-04T12:00:00Z 2026-03-06T06:03:13Z
rustsec-2026-0032 `dnp3times` was removed from crates.io due to malicious code 2026-03-04T12:00:00Z 2026-03-05T05:53:11Z
rustsec-2026-0031 `time_calibrators` was removed from crates.io due to malicious code 2026-03-03T12:00:00Z 2026-03-05T05:53:11Z
rustsec-2026-0030 `time_calibrator` was removed from crates.io due to malicious code 2026-03-03T12:00:00Z 2026-03-05T05:53:11Z
rustsec-2026-0019 `tracing-check` was removed from crates.io for malicious code 2026-02-24T12:00:00Z 2026-03-05T05:53:11Z
rustsec-2025-0140 Non-utf8 String can be created with `TimeBuf::as_str` 2025-12-29T12:00:00Z 2026-03-04T07:42:48Z
rustsec-2026-0029 Double-free and use-after-free for Hive 2026-02-26T12:00:00Z 2026-03-01T06:01:36Z
rustsec-2026-0028 `tracing_checks` was removed from crates.io for transitively including malicious code 2026-02-26T12:00:00Z 2026-02-26T21:11:05Z
rustsec-2026-0027 `tracings` was removed from crates.io for malicious code 2026-02-26T12:00:00Z 2026-02-26T21:11:05Z
rustsec-2025-0153 hexchat crate is unsound and unmaintained 2025-11-17T12:00:00Z 2026-02-26T06:11:28Z
rustsec-2026-0026 Unnecessary clamping of seed reduces seed entropy to 251 bits 2026-02-05T12:00:00Z 2026-02-25T17:22:43Z
rustsec-2026-0025 Panic in `libcrux-psq` on decryption of malformed AES-GCM ciphertext 2026-02-08T12:00:00Z 2026-02-25T17:22:43Z
rustsec-2026-0024 Incorrect X25519 clamping check rejects all secrets on import 2026-01-26T12:00:00Z 2026-02-25T17:22:43Z
rustsec-2026-0023 X25519 secret validation did not check buffer length or clamping 2026-01-26T12:00:00Z 2026-02-25T17:22:43Z
rustsec-2026-0022 Panic when dropping a `[Typed]Func::call_async` future 2026-02-24T12:00:00Z 2026-02-24T19:42:18Z
rustsec-2026-0021 Panic adding excessive fields to a `wasi:http/types.fields` instance 2026-02-24T12:00:00Z 2026-02-24T19:42:18Z
rustsec-2026-0020 Guest-controlled resource exhaustion in WASI implementations 2026-02-24T12:00:00Z 2026-02-24T19:42:18Z
rustsec-2026-0018 `rpc-check` was removed from crates.io for malicious code 2026-02-24T12:00:00Z 2026-02-24T16:32:13Z
rustsec-2026-0013 Type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature targeting Python 3.12 and up 2026-02-18T12:00:00Z 2026-02-23T07:15:28Z
rustsec-2026-0010 `polymarket-clients-sdk` was removed from crates.io for malicious code 2026-02-06T12:00:00Z 2026-02-23T07:15:28Z
rustsec-2025-0148 `finch-rust` was removed from crates.io for malicious code 2025-12-05T12:00:00Z 2026-02-23T07:15:28Z
ID Description Published Updated
bit-parse-2026-32269 Parse Server OAuth2 adapter app ID validation sends wrong token to introspection endpoint 2026-03-16T09:53:45.375Z 2026-03-16T10:20:00.130Z
bit-parse-2026-32248 Parse Server: Account takeover via operator injection in authentication data identifier 2026-03-16T09:53:42.464Z 2026-03-16T10:20:00.130Z
bit-parse-2026-32242 Parse Server OAuth2 adapter shares mutable state across providers via singleton instance 2026-03-16T09:53:39.413Z 2026-03-16T10:20:00.130Z
bit-python-2025-13462 tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling 2026-03-14T08:49:56.012Z 2026-03-14T09:10:54.038Z
bit-libpython-2025-13462 tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling 2026-03-14T08:42:41.133Z 2026-03-14T09:10:54.038Z
bit-gitlab-2026-1182 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab 2026-03-14T09:09:00.605Z 2026-03-14T09:10:54.038Z
bit-gitlab-2026-1090 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2026-03-13T09:35:17.166Z 2026-03-14T09:10:54.038Z
bit-parse-2026-32234 Parse Server has a SQL injection via query field name when using PostgreSQL 2026-03-13T12:28:58.177Z 2026-03-13T12:55:29.610Z
bit-parse-2026-32098 Parse Server has a protected fields bypass via LiveQuery subscription WHERE clause 2026-03-13T12:28:55.457Z 2026-03-13T12:55:29.610Z
bit-parse-2026-31901 Parse Server has user enumeration via email verification endpoint 2026-03-13T12:28:52.748Z 2026-03-13T12:55:29.610Z
bit-parse-2026-31875 Parse Server MFA recovery codes not consumed after use 2026-03-13T12:28:49.853Z 2026-03-13T12:55:29.610Z
bit-parse-2026-31872 Parse Server has a protected fields bypass via dot-notation in query and sort 2026-03-13T12:28:47.303Z 2026-03-13T12:55:29.610Z
bit-parse-2026-31871 Parse Server has a SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL 2026-03-13T12:28:44.452Z 2026-03-13T12:55:29.610Z
bit-parse-2026-31868 Parse Server has Stored XSS via file upload of HTML-renderable file types 2026-03-13T12:28:41.729Z 2026-03-13T12:55:29.610Z
bit-parse-2026-31856 Parse Server has a SQL injection via `Increment` operation on nested object field in PostgreSQL 2026-03-13T12:28:38.912Z 2026-03-13T12:55:29.610Z
bit-parse-2026-31840 Parse Server has a SQL injection via dot-notation field name in PostgreSQL 2026-03-13T12:28:36.029Z 2026-03-13T12:55:29.610Z
bit-parse-2025-64430 Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format 2025-11-12T11:45:02.117Z 2026-03-13T12:55:29.610Z
bit-wordpress-2026-3906 WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API 2026-03-13T09:17:59.157Z 2026-03-13T09:37:20.375Z
bit-gitlab-2026-3848 Improper Neutralization of CRLF Sequences ('CRLF Injection') in GitLab 2026-03-13T09:35:49.642Z 2026-03-13T09:37:20.375Z
bit-gitlab-2026-1732 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab 2026-03-13T09:35:40.993Z 2026-03-13T09:37:20.375Z
bit-gitlab-2026-1663 Missing Authorization in GitLab 2026-03-13T09:35:36.922Z 2026-03-13T09:37:20.375Z
bit-gitlab-2026-1230 Use of Incorrectly-Resolved Name or Reference in GitLab 2026-03-13T09:35:23.537Z 2026-03-13T09:37:20.375Z
bit-gitlab-2026-1069 Uncontrolled Recursion in GitLab 2026-03-13T09:35:15.010Z 2026-03-13T09:37:20.375Z
bit-gitlab-2026-0602 Authentication Bypass Using an Alternate Path or Channel in GitLab 2026-03-13T09:35:05.636Z 2026-03-13T09:37:20.375Z
bit-gitlab-2025-14513 Improper Validation of Specified Quantity in Input in GitLab 2026-03-13T09:31:32.729Z 2026-03-13T09:37:20.375Z
bit-gitlab-2025-13929 Allocation of Resources Without Limits or Throttling in GitLab 2026-03-13T09:31:23.093Z 2026-03-13T09:37:20.375Z
bit-gitlab-2025-13690 Allocation of Resources Without Limits or Throttling in GitLab 2026-03-13T09:31:10.589Z 2026-03-13T09:37:20.375Z
bit-gitlab-2025-12704 Missing Authorization in GitLab 2026-03-13T09:30:55.187Z 2026-03-13T09:37:20.375Z
bit-gitlab-2025-12697 Improper Encoding or Escaping of Output in GitLab 2026-03-13T09:30:53.383Z 2026-03-13T09:37:20.375Z
bit-gitlab-2025-12576 Allocation of Resources Without Limits or Throttling in GitLab 2026-03-13T09:30:49.795Z 2026-03-13T09:37:20.375Z
ID Description Published Updated
cleanstart-2026-zv38826 Within HostnameError 2026-03-10T01:00:05.764793Z 2026-03-09T13:15:34Z
cleanstart-2026-qy24299 @octokit/endpoint turns REST API endpoints into generic request options 2026-03-07T00:39:47.646997Z 2026-03-06T13:08:41Z
cleanstart-2026-pp62083 OpenTelemetry-Go is the Go implementation of OpenTelemetry 2026-03-07T00:39:46.558367Z 2026-03-06T13:08:41Z
cleanstart-2026-gi57625 OpenTelemetry-Go is the Go implementation of OpenTelemetry 2026-03-07T00:39:46.578400Z 2026-03-06T13:08:41Z
cleanstart-2026-yp32652 Redis is an open source, in-memory database that persists on disk 2026-03-04T00:42:01.150900Z 2026-03-03T12:59:01Z
cleanstart-2026-xj84245 Rack is a modular Ruby web server interface 2026-03-04T00:43:02.364521Z 2026-03-03T12:59:01Z
cleanstart-2026-wy43835 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access 2026-03-04T00:41:31.079681Z 2026-03-03T12:59:01Z
cleanstart-2026-vc01496 Security fixes for GHSA-f6x5-jh6r-wrfv, GHSA-j5w8-q4qc-rx2x applied in versions: 0.8.4-r0 2026-03-04T00:39:30.734261Z 2026-03-03T12:59:01Z
cleanstart-2026-sm37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic 2026-03-04T00:45:05.719125Z 2026-03-03T12:59:01Z
cleanstart-2026-na21773 GNU patch through 2 2026-03-04T00:42:01.122309Z 2026-03-03T12:59:01Z
cleanstart-2026-ew93264 Security fixes for GHSA-4cx2-fc23-5wg6, GHSA-6xw4-3v39-52mm, GHSA-72qj-48g4-5xgx, GHSA-mr3q-g2mv-mr4q, GHSA-p543-xpfm-54cp, GHSA-vc5p-v9hr-52mj, GHSA-vqg5-3255-v292 applied in versions: 9.0.8-r2, 9.0.8-r3, 9.0.8-r4, 9.3.0-r1, 9.3.0-r2 2026-03-04T00:39:32.590174Z 2026-03-03T12:59:01Z
cleanstart-2026-cq83284 Redis is an open source, in-memory database that persists on disk 2026-03-04T00:43:01.818359Z 2026-03-03T12:59:01Z
cleanstart-2026-bz70876 Redis is an open source, in-memory database that persists on disk 2026-03-04T00:42:00.996564Z 2026-03-03T12:59:01Z
cleanstart-2026-ay29369 Redis is an open source, in-memory database that persists on disk 2026-03-04T00:43:31.868035Z 2026-03-03T12:59:01Z
cleanstart-2026-mw73882 filippo 2026-03-03T00:39:03.237072Z 2026-03-02T17:13:50Z
cleanstart-2026-by85815 OpenTelemetry-Go is the Go implementation of OpenTelemetry 2026-03-03T00:39:03.275022Z 2026-03-02T17:13:50Z
cleanstart-2026-zn32454 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers 2026-02-27T00:50:08.716833Z 2026-02-26T12:09:56Z
cleanstart-2026-zg64300 Within HostnameError 2026-02-27T01:05:11.090007Z 2026-02-26T12:09:56Z
cleanstart-2026-yw12690 go-git is a highly extensible git implementation library written in pure Go 2026-02-27T01:01:12.144914Z 2026-02-26T12:09:56Z
cleanstart-2026-xz04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-02-27T00:43:38.553069Z 2026-02-26T12:09:56Z
cleanstart-2026-wp10148 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate 2026-02-27T00:57:40.231450Z 2026-02-26T12:09:56Z
cleanstart-2026-qc30410 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate 2026-02-27T01:01:12.325618Z 2026-02-26T12:09:56Z
cleanstart-2026-ny12442 node-tar is a full-featured Tar for Node 2026-02-27T00:41:38.733387Z 2026-02-26T12:09:56Z
cleanstart-2026-ls98939 go-git is a highly extensible git implementation library written in pure Go 2026-02-27T01:04:10.463954Z 2026-02-26T12:09:56Z
cleanstart-2026-jy06700 vulnerability has been identified in Node 2026-02-27T01:09:46.914639Z 2026-02-26T12:09:56Z
cleanstart-2026-id51598 Cancelling a query (e 2026-02-27T01:01:11.850782Z 2026-02-26T12:09:56Z
cleanstart-2026-hf45264 filippo 2026-02-27T01:03:40.135210Z 2026-02-26T12:09:56Z
cleanstart-2026-ff98917 go-git is a highly extensible git implementation library written in pure Go 2026-02-27T00:51:38.790691Z 2026-02-26T12:09:56Z
cleanstart-2026-er93728 go-git is a highly extensible git implementation library written in pure Go 2026-02-27T00:46:38.846728Z 2026-02-26T12:09:56Z
cleanstart-2026-dz05206 go-git is a highly extensible git implementation library written in pure Go 2026-02-27T01:00:40.158214Z 2026-02-26T12:09:56Z
ID Description Published Updated
drupal-contrib-2026-029 2026-03-11T16:35:02.000Z 2026-03-11T16:35:02.000Z
drupal-contrib-2026-028 2026-03-11T16:33:14.000Z 2026-03-11T16:33:14.000Z
drupal-contrib-2026-024 2026-03-04T17:59:51.000Z 2026-03-05T14:03:05.000Z
drupal-contrib-2026-027 2026-03-04T18:02:59.000Z 2026-03-04T18:02:59.000Z
drupal-contrib-2026-026 2026-03-04T18:02:14.000Z 2026-03-04T18:02:14.000Z
drupal-contrib-2026-025 2026-03-04T18:00:41.000Z 2026-03-04T18:00:41.000Z
drupal-contrib-2026-023 2026-03-04T17:58:55.000Z 2026-03-04T17:58:55.000Z
drupal-contrib-2026-022 2026-03-04T17:57:58.000Z 2026-03-04T17:57:58.000Z
drupal-contrib-2026-021 2026-03-04T17:56:18.000Z 2026-03-04T17:56:18.000Z
drupal-contrib-2026-020 2026-03-04T17:54:27.000Z 2026-03-04T17:54:27.000Z
drupal-contrib-2026-016 2026-02-25T18:49:59.000Z 2026-02-25T19:30:03.000Z
drupal-contrib-2026-015 2026-02-25T18:47:57.000Z 2026-02-25T19:07:00.000Z
drupal-contrib-2026-019 2026-02-25T18:51:43.000Z 2026-02-25T18:51:43.000Z
drupal-contrib-2026-018 2026-02-25T18:51:26.000Z 2026-02-25T18:51:26.000Z
drupal-contrib-2026-017 2026-02-25T18:51:01.000Z 2026-02-25T18:51:01.000Z
drupal-contrib-2026-014 2026-02-25T18:46:10.000Z 2026-02-25T18:46:10.000Z
drupal-contrib-2026-013 2026-02-25T18:45:13.000Z 2026-02-25T18:45:13.000Z
drupal-contrib-2026-012 2026-02-25T18:44:38.000Z 2026-02-25T18:44:38.000Z
drupal-contrib-2026-011 2026-02-25T18:43:32.000Z 2026-02-25T18:43:32.000Z
drupal-contrib-2026-010 2026-02-11T16:54:18.000Z 2026-02-25T17:17:46.000Z
drupal-contrib-2026-009 2026-02-11T16:53:32.000Z 2026-02-12T15:37:20.000Z
drupal-contrib-2026-008 2026-02-04T17:23:40.000Z 2026-02-04T17:23:40.000Z
drupal-contrib-2026-007 2026-01-28T17:29:32.000Z 2026-01-28T17:29:32.000Z
drupal-contrib-2026-006 2026-01-28T17:28:31.000Z 2026-01-28T17:28:31.000Z
drupal-contrib-2026-005 2026-01-14T17:57:31.000Z 2026-01-14T18:33:02.000Z
drupal-contrib-2026-004 2026-01-14T17:56:28.000Z 2026-01-14T17:56:28.000Z
drupal-contrib-2026-003 2026-01-14T17:55:41.000Z 2026-01-14T17:55:41.000Z
drupal-contrib-2026-002 2026-01-14T17:54:33.000Z 2026-01-14T17:54:33.000Z
drupal-contrib-2026-001 2026-01-14T17:53:33.000Z 2026-01-14T17:53:33.000Z
drupal-contrib-2025-126 2025-12-17T17:47:13.000Z 2025-12-17T17:47:13.000Z
ID Description Updated
ts-2026-001 TS-2026-001 2026-01-15T00:00
ts-2025-008 TS-2025-008 2025-11-19T00:00
ts-2025-007 TS-2025-007 2025-11-07T00:00
ts-2025-006 TS-2025-006 2025-10-28T00:00
ts-2025-005 TS-2025-005 2025-08-07T00:00
ts-2025-004 TS-2025-004 2025-05-27T00:00
ts-2025-003 TS-2025-003 2025-05-21T00:00
ts-2025-002 TS-2025-002 2025-05-15T00:00
ts-2025-001 TS-2025-001 2025-03-07T00:00
ts-2024-013 TS-2024-013 2024-12-04T00:00
ts-2024-012 TS-2024-012 2024-10-02T00:00
ts-2024-011 TS-2024-011 2024-07-22T00:00
ts-2024-010 TS-2024-010 2024-07-19T00:00
ts-2024-009 TS-2024-009 2024-06-27T00:00
ts-2024-008 TS-2024-008 2024-06-14T00:00
ts-2024-007 TS-2024-007 2024-06-12T00:00
ts-2024-006 TS-2024-006 2024-05-22T00:00
ts-2024-005 TS-2024-005 2024-05-08T00:00
ts-2024-004 TS-2024-004 2024-05-06T00:00
ts-2024-003 TS-2024-003 2024-04-23T00:00
ts-2024-002 TS-2024-002 2024-01-30T00:00
ts-2024-001 TS-2024-001 2024-01-08T00:00
ts-2023-009 TS-2023-009 2023-12-22T00:00
ts-2023-008 TS-2023-008 2023-11-01T00:00
ts-2023-007 TS-2023-007 2023-10-26T00:00
ts-2023-006 TS-2023-006 2023-08-22T00:00
ts-2023-005 TS-2023-005 2023-04-28T00:00
ts-2023-004 TS-2023-004 2023-04-04T00:00
ts-2023-003 TS-2023-003 2023-03-22T00:00
ts-2023-002 TS-2023-002 2023-01-24T00:00
ID Description Published Updated
certfr-2026-ale-002 [MàJ] Vulnérabilité dans Cisco Catalyst SD-WAN 2026-02-25T00:00:00.000000 2026-02-26T00:00:00.000000
certfr-2025-ale-014 [MàJ] Vulnérabilité dans React Server Components 2025-12-05T00:00:00.000000 2026-02-12T00:00:00.000000
certfr-2026-ale-001 [MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile 2026-01-30T00:00:00.000000 2026-02-03T00:00:00.000000
certfr-2025-ale-013 [MàJ] Multiples vulnérabilités dans Cisco ASA et FTD 2025-09-25T00:00:00.000000 2025-10-06T00:00:00.000000
certfr-2025-ale-012 Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway 2025-08-26T00:00:00.000000 2025-09-26T00:00:00.000000
certfr-2025-ale-010 [MàJ] Multiples vulnérabilités dans Microsoft SharePoint 2025-07-21T00:00:00.000000 2025-08-26T00:00:00.000000
certfr-2025-ale-011 Incidents de sécurité dans les pare-feux SonicWall 2025-08-05T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-ale-009 Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway 2025-07-01T00:00:00.000000 2025-07-17T00:00:00.000000
certfr-2025-ale-004 Activités de post-exploitation dans Fortinet FortiGate 2025-04-11T00:00:00.000000 2025-08-07T00:00:00.000000
certfr-2025-ale-008 [MàJ] Vulnérabilité dans Roundcube 2025-06-05T00:00:00.000000 2025-07-21T00:00:00.000000
certfr-2025-ale-007 Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (EPMM) 2025-05-14T00:00:00.000000 2025-06-24T00:00:00.000000
certfr-2025-ale-006 Vulnérabilité dans les produits Fortinet 2025-05-13T00:00:00.000000 2025-06-24T00:00:00.000000
certfr-2025-ale-005 Vulnérabilité dans SAP NetWeaver 2025-04-28T00:00:00.000000 2025-06-24T00:00:00.000000
certfr-2025-ale-003 [MàJ] Vulnérabilité dans les produits Ivanti 2025-04-04T00:00:00.000000 2025-04-11T00:00:00.000000
certfr-2025-ale-002 [MàJ] Vulnérabilité dans les produits Fortinet 2025-05-07T00:00:00.000000 2025-01-14T00:00:00.000000
certfr-2025-ale-001 [MàJ] Vulnérabilité dans les produits Ivanti 2025-01-09T00:00:00.000000 2025-04-01T00:00:00.000000
certfr-2024-ale-014 [MàJ] Multiples vulnérabilités dans Fortinet FortiManager 2024-10-30T00:00:00.000000 2024-10-23T00:00:00.000000
certfr-2024-ale-013 Exploitations de vulnérabilités dans Ivanti Cloud Services Appliance (CSA) 2025-03-31T00:00:00.000000 2024-10-25T00:00:00.000000
certfr-2024-ale-015 [MàJ] Multiples vulnérabilités sur l'interface d'administration des équipements Palo Alto Networks 2024-11-15T00:00:00.000000 2024-11-18T00:00:00.000000
certfr-2024-ale-012 [MàJ] Vulnérabilités affectant OpenPrinting CUPS 2024-09-27T00:00:00.000000 2024-11-21T00:00:00.000000
certfr-2024-ale-011 Vulnérabilité dans SonicWall 2024-09-10T00:00:00.000000 2024-11-21T00:00:00.000000
certfr-2024-ale-010 Multiples vulnérabilités dans Roundcube 2024-08-09T00:00:00.000000 2024-10-07T00:00:00.000000
certfr-2024-ale-009 Vulnérabilité dans OpenSSH 2024-07-01T00:00:00.000000 2024-07-03T00:00:00.000000
certfr-2024-ale-008 [MàJ] Vulnérabilité dans les produits Check Point 2024-05-30T00:00:00.000000 2024-07-01T00:00:00.000000
certfr-2024-ale-007 Multiples vulnérabilités dans les produits Cisco 2024-04-25T00:00:00.000000 2024-07-01T00:00:00.000000
certfr-2024-ale-006 [MàJ] Vulnérabilité dans Palo Alto Networks GlobalProtect 2024-04-12T00:00:00.000000 2024-07-01T00:00:00.000000
certfr-2024-ale-004 [MàJ] Vulnérabilité dans Fortinet FortiOS 2024-02-09T00:00:00.000000 2024-07-01T00:00:00.000000
certfr-2024-ale-005 [MàJ] Vulnérabilité dans Microsoft Outlook 2024-02-15T00:00:00.000000 2024-04-15T00:00:00.000000
certfr-2024-ale-003 [MàJ] Incident affectant les solutions AnyDesk 2024-02-05T00:00:00.000000 2024-04-15T00:00:00.000000
certfr-2024-ale-001 [MàJ] Multiples vulnérabilités dans Ivanti Connect Secure et Policy Secure Gateways 2024-01-11T00:00:00.000000 2024-04-15T00:00:00.000000
ID Description Published Updated
certfr-2026-avi-0299 Multiples vulnérabilités dans les produits Microsoft 2026-03-16T00:00:00.000000 2026-03-16T00:00:00.000000
certfr-2026-avi-0298 Multiples vulnérabilités dans Microsoft Edge 2026-03-16T00:00:00.000000 2026-03-16T00:00:00.000000
certfr-2026-avi-0297 Vulnérabilité dans Google Chrome 2026-03-16T00:00:00.000000 2026-03-16T00:00:00.000000
certfr-2026-avi-0296 Vulnérabilité dans OpenSSL 2026-03-16T00:00:00.000000 2026-03-16T00:00:00.000000
certfr-2026-avi-0295 Vulnérabilité dans les produits Microsoft 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0294 Vulnérabilité dans Microsoft Office 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0293 Vulnérabilité dans Microsoft Edge 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0292 Multiples vulnérabilités dans les produits IBM 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0291 Multiples vulnérabilités dans le noyau Linux de Debian 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0290 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0289 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0288 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0287 Multiples vulnérabilités dans les produits NetApp 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0286 Multiples vulnérabilités dans Google Chrome 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0285 Vulnérabilité dans Python 2026-03-13T00:00:00.000000 2026-03-13T00:00:00.000000
certfr-2026-avi-0284 Multiples vulnérabilités dans les produits Microsoft 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0283 Vulnérabilité dans Microsoft Edge 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0282 Multiples vulnérabilités dans Veeam Backup & Replication 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0281 Multiples vulnérabilités dans les produits Splunk 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0280 Multiples vulnérabilités dans les produits Apple 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0279 Multiples vulnérabilités dans Cisco IOS XR 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0278 Multiples vulnérabilités dans Google Chrome 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0277 Multiples vulnérabilités dans les produits Palo Alto Networks 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0276 Multiples vulnérabilités dans GitLab 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0275 Vulnérabilité dans GLPI 2026-03-12T00:00:00.000000 2026-03-12T00:00:00.000000
certfr-2026-avi-0274 Multiples vulnérabilités dans les produits Microsoft 2026-03-11T00:00:00.000000 2026-03-11T00:00:00.000000
certfr-2026-avi-0273 Multiples vulnérabilités dans Microsoft Azure 2026-03-11T00:00:00.000000 2026-03-11T00:00:00.000000
certfr-2026-avi-0272 Multiples vulnérabilités dans Microsoft .Net 2026-03-11T00:00:00.000000 2026-03-11T00:00:00.000000
certfr-2026-avi-0271 Multiples vulnérabilités dans Microsoft Windows 2026-03-11T00:00:00.000000 2026-03-11T00:00:00.000000
certfr-2026-avi-0270 Multiples vulnérabilités dans Microsoft Office 2026-03-11T00:00:00.000000 2026-03-11T00:00:00.000000
ID Description Published Updated
jvndb-2026-000039 Missing authorization in the OpenAI thread/message API endpoints of GROWI 2026-03-16T17:18+09:00 2026-03-16T17:18+09:00
jvndb-2026-000037 OpenLiteSpeed and LSWS Enterprise vulnerable to OS command injection 2026-03-16T17:18+09:00 2026-03-16T17:18+09:00
jvndb-2026-006887 Multiple vulnerabilities in Micro Research MR-GM5L-S1 and MR-GM5A-L1 2026-03-12T17:22+09:00 2026-03-12T17:22+09:00
jvndb-2026-000036 Improper file access permission settings in multiple Digital Arts products 2026-03-09T14:57+09:00 2026-03-09T16:23+09:00
jvndb-2026-000035 Installer for Qsee Client may insecurely load Dynamic Link Libraries 2026-03-09T14:57+09:00 2026-03-09T14:57+09:00
jvndb-2026-006102 Security issues in ESC/POS 2026-03-06T10:31+09:00 2026-03-06T10:31+09:00
jvndb-2026-000034 django-allauth vulnerable to open redirect 2026-03-05T12:36+09:00 2026-03-05T12:36+09:00
jvndb-2026-000033 EC-CUBE vulnerable to multi-factor authentication bypass 2026-03-05T12:36+09:00 2026-03-05T12:36+09:00
jvndb-2026-000032 Multiple vulnerabilities in Dell UPS Multi-UPS Management Console (MUMC) 2026-03-04T12:20+09:00 2026-03-04T12:20+09:00
jvndb-2026-005746 Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (February 2026) 2026-03-04T10:40+09:00 2026-03-04T10:40+09:00
jvndb-2026-005744 Canon IJ Scan Utility registers Windows services with unquoted file paths 2026-03-04T10:40+09:00 2026-03-04T10:40+09:00
jvndb-2026-000030 IM-LogicDesigner module of intra-mart Accel Platform vulnerable to untrusted data deserialization 2026-02-27T15:41+09:00 2026-03-03T10:06+09:00
jvndb-2026-005259 Out-of-bounds write vulnerability in Fujitsu BIOS Driver (fbiosdrv.sys) 2026-03-02T11:46+09:00 2026-03-02T11:46+09:00
jvndb-2026-000031 Improper file access permission settings in the installers for multiple Soliton Systems products 2026-02-27T15:41+09:00 2026-02-27T15:41+09:00
jvndb-2026-000029 Multiple vulnerabilities in the installer of FinalCode Client 2026-02-26T14:24+09:00 2026-02-26T14:24+09:00
jvndb-2026-004811 Vulnerability in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager 2026-02-26T11:02+09:00 2026-02-26T11:02+09:00
jvndb-2026-004810 Vulnerability in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager 2026-02-26T11:02+09:00 2026-02-26T11:02+09:00
jvndb-2026-000026 Lanscope Endpoint Manager (On-Premises) vulnerable to path traversal 2026-02-25T15:14+09:00 2026-02-25T15:14+09:00
jvndb-2026-004359 Security information for Hitachi Disk Array Systems 2026-02-20T18:35+09:00 2026-02-20T18:35+09:00
jvndb-2026-000027 WordPress Plugin "Survey Maker" vulnerable to cross-site scripting 2026-02-20T12:32+09:00 2026-02-20T12:32+09:00
jvndb-2026-000028 Installer for Job log aggregation/analysis software RICOH Job Log Aggregation Tool may insecurely load Dynamic Link Libraries 2026-02-20T12:31+09:00 2026-02-20T12:31+09:00
jvndb-2026-003912 Vulnerability in Cosminexus HTTP Server and Hitachi Web Server 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-003911 Vulnerability in Cosminexus HTTP Server 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-003910 Multiple Vulnerabilities in Cosminexus HTTP Server 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-003909 Multiple Vulnerabilities in Hitachi Command Suite products 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-003908 Multiple Vulnerabilities in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-003907 Multiple Vulnerabilities in JP1 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-003906 Multiple Vulnerabilities in Cosminexus 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-003905 Multiple Vulnerabilities in Cosminexus HTTP Server and Hitachi Web Server 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-000025 Joomla! CMS vulnerable to cross-site scripting 2026-02-17T12:46+09:00 2026-02-17T12:46+09:00
ID Description Published Updated
cnvd-2026-13601 OpenClaw信息泄露漏洞（CNVD-2026-13601） 2026-03-12 2026-03-13
cnvd-2026-13596 OpenClaw存在未明漏洞（CNVD-2026-13596） 2026-03-12 2026-03-13
cnvd-2026-13595 OpenClaw访问控制错误漏洞（CNVD-2026-13595） 2026-03-12 2026-03-13
cnvd-2026-13594 OpenClaw加密问题漏洞 2026-03-12 2026-03-13
cnvd-2026-13593 OpenClaw存在未明漏洞（CNVD-2026-13593） 2026-03-12 2026-03-13
cnvd-2026-13592 OpenClaw路径遍历漏洞（CNVD-2026-13592） 2026-03-12 2026-03-13
cnvd-2026-13591 OpenClaw数据伪造问题漏洞（CNVD-2026-13591） 2026-03-12 2026-03-13
cnvd-2026-13590 OpenClaw代码问题漏洞（CNVD-2026-13590） 2026-03-12 2026-03-13
cnvd-2026-13589 OpenClaw存在未明漏洞（CNVD-2026-13589） 2026-03-12 2026-03-13
cnvd-2026-13588 OpenClaw访问控制错误漏洞（CNVD-2026-13588） 2026-03-12 2026-03-13
cnvd-2026-13408 OpenClaw访问控制错误漏洞（CNVD-2026-13408） 2026-03-02 2026-03-13
cnvd-2026-13392 OpenClaw访问控制错误漏洞（CNVD-2026-13392） 2026-03-02 2026-03-13
cnvd-2026-13391 OpenClaw访问控制错误漏洞 2026-03-02 2026-03-13
cnvd-2026-13390 OpenClaw代码注入漏洞 2026-03-02 2026-03-13
cnvd-2026-13389 OpenClaw存在未明漏洞（CNVD-2026-13389） 2026-03-02 2026-03-13
cnvd-2026-13388 OpenClaw代码问题漏洞（CNVD-2026-13388） 2026-03-02 2026-03-13
cnvd-2026-13383 OpenClaw存在未明漏洞（CNVD-2026-13383） 2026-03-02 2026-03-13
cnvd-2026-13382 OpenClaw存在未明漏洞（CNVD-2026-13382） 2026-03-02 2026-03-13
cnvd-2026-13381 OpenClaw存在未明漏洞（CNVD-2026-13381） 2026-03-02 2026-03-13
cnvd-2026-13380 OpenClaw存在未明漏洞（CNVD-2026-13380） 2026-03-02 2026-03-13
cnvd-2026-13379 OpenClaw存在未明漏洞（CNVD-2026-13379） 2026-03-02 2026-03-13
cnvd-2026-13378 OpenClaw存在未明漏洞（CNVD-2026-13378） 2026-03-02 2026-03-13
cnvd-2026-13377 OpenClaw存在未明漏洞（CNVD-2026-13377） 2026-03-02 2026-03-13
cnvd-2026-13833 SPIP interface_traduction_objets SQL注入漏洞 2026-03-11 2026-03-12
cnvd-2026-13832 OpenClaw拒绝服务漏洞（CNVD-2026-13832） 2026-03-12 2026-03-12
cnvd-2026-13801 OpenClaw命令注入漏洞（CNVD-2026-13801） 2026-03-12 2026-03-12
cnvd-2026-13800 OpenClaw拒绝服务漏洞（CNVD-2026-13800） 2026-03-12 2026-03-12
cnvd-2026-13583 FunAdmin访问控制错误漏洞 2026-03-06 2026-03-12
cnvd-2026-13582 Gradio信任管理问题漏洞 2026-03-09 2026-03-12
cnvd-2026-13555 OpenClaw任意文件读取漏洞（CNVD-2026-13555） 2026-03-12 2026-03-12
ID Description Published Updated
bdu:2026-01844 Уязвимость сервиса безопасности Advanced DNS Security (ADNS) операционной системы PAN-OS,… 16.02.2026 16.02.2026
bdu:2026-01843 Уязвимость функции loadRLE() загрузчика TGA-изображений (PluginTARGA.cpp) графической биб… 16.02.2026 16.02.2026
bdu:2026-01842 Уязвимость функции ws_user_gerList() сценария pwg.users.php системы управления контентом … 16.02.2026 16.02.2026
bdu:2026-01841 Уязвимость компонента Updater облачной платформы управления контейнерами Arcane, позволяю… 16.02.2026 16.02.2026
bdu:2026-01840 Уязвимость ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), связанная с отсутствием про… 16.02.2026 16.02.2026
bdu:2026-01839 Уязвимость функции blocked_path() пакета Python для создания приложений для моделей машин… 16.02.2026 16.02.2026
bdu:2026-01838 Уязвимость драйверов графических процессоров NVIDIA NVS, Quadro, NVIDIA RTX, GeForce, свя… 16.02.2026 16.02.2026
bdu:2026-01837 Уязвимость микропрограммного обеспечения графических процессоров Imagination, позволяющая… 16.02.2026 16.02.2026
bdu:2026-01836 Уязвимость микропрограммного обеспечения графических процессоров Imagination, позволяющая… 16.02.2026 16.02.2026
bdu:2026-01835 Уязвимость драйвера ESXi base микропрограммного обеспечения сетевых контроллеров Intel 80… 16.02.2026 16.02.2026
bdu:2026-01834 Уязвимость микропрограммного обеспечения контроллеров Intel Ethernet серии E810, связанна… 16.02.2026 16.02.2026
bdu:2026-01833 Уязвимость технологий Intel Active Management Technology (AMT) и Intel Standard Manageabi… 16.02.2026 16.02.2026
bdu:2026-01832 Уязвимость технологий Intel Active Management Technology (AMT) и Intel Standard Manageabi… 16.02.2026 16.02.2026
bdu:2026-01831 Уязвимость технологий Intel Active Management Technology (AMT) и Intel Standard Manageabi… 16.02.2026 16.02.2026
bdu:2026-01830 Уязвимость компонента File input браузера Google Chrome, позволяющая нарушителю осуществи… 16.02.2026 16.02.2026
bdu:2026-01829 Уязвимость компонента PictureInPicture браузера Google Chrome, позволяющая нарушителю ока… 16.02.2026 16.02.2026
bdu:2026-01828 Уязвимость компонента Animation браузера Google Chrome, позволяющая нарушителю оказать во… 16.02.2026 16.02.2026
bdu:2026-01827 Уязвимость функции конфиденциальности Fenced Frames браузера Google Chrome, позволяющая н… 16.02.2026 16.02.2026
bdu:2026-01826 Уязвимость компонента WebGPU браузера Google Chrome, позволяющая нарушителю вызвать отказ… 16.02.2026 16.02.2026
bdu:2026-01825 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… 16.02.2026 16.02.2026
bdu:2026-01824 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… 16.02.2026 16.02.2026
bdu:2026-01823 Уязвимость функции межсетевых экранов SSL-VPN операционных систем Fortinet FortiOS, позво… 16.02.2026 16.02.2026
bdu:2026-01822 Уязвимость операционных систем Fortinet FortiOS, связанная с недостаточной проверкой исто… 16.02.2026 16.02.2026
bdu:2026-01821 Уязвимость функции межсетевых экранов SSL-VPN операционных систем Fortinet FortiOS, позво… 16.02.2026 16.02.2026
bdu:2026-01820 Уязвимость интерфейса командной строки операционных систем Fortinet FortiOS, позволяющая … 16.02.2026 16.02.2026
bdu:2026-01819 Уязвимость графического пользовательского интерфейса операционных систем Fortinet FortiOS… 16.02.2026 16.02.2026
bdu:2026-01818 Уязвимость программного обеспечения для разработки 3D-моделей Autodesk Fusion, связанная … 16.02.2026 16.02.2026
bdu:2026-01817 Уязвимость программного обеспечения для разработки 3D-моделей Autodesk Fusion, связанная … 16.02.2026 16.02.2026
bdu:2026-01816 Уязвимость программного обеспечения для разработки 3D-моделей Autodesk Fusion, связанная … 16.02.2026 16.02.2026
bdu:2026-01815 Уязвимость программного обеспечения Microsoft ACI Confidential Containers, связанная с не… 16.02.2026 16.02.2026
ID Description Updated
var-202603-1017 A vulnerability was determined in Tenda FH451 1.0.0.9. Affected is the function sub_3C434… 2026-03-09T23:54:57.504000Z
var-202603-0913 This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte… 2026-03-09T23:53:52.758000Z
var-201507-0645 D-Link is an internationally renowned provider of network equipment and solutions, includ… 2026-03-09T23:53:36.828000Z
var-202509-3918 An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in th… 2026-03-09T23:52:25.566000Z
var-202603-0527 Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform… 2026-03-09T23:51:31.837000Z
var-202603-0907 This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte… 2026-03-09T23:51:31.712000Z
var-202603-0928 This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte… 2026-03-09T23:51:31.700000Z
var-201112-0097 Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 a… 2026-03-09T23:50:50.963000Z
var-202603-0854 The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 a… 2026-03-09T23:50:02.265000Z
var-202603-0956 This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte… 2026-03-09T23:49:39.350000Z
var-201103-0371 SAP Crystal Reports Server is a complete reporting solution for creating, managing, and d… 2026-03-09T23:49:06.528000Z
var-201807-0341 ABB Panel Builder 800 all versions has an improper input validation vulnerability which m… 2026-03-09T23:49:00.002000Z
var-202601-4617 FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, do… 2026-03-09T23:47:50.003000Z
var-202602-4602 A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manag… 2026-03-09T23:47:49.683000Z
var-202603-0595 The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 a… 2026-03-09T23:47:49.548000Z
var-201112-0173 The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, … 2026-03-09T23:47:43.188000Z
var-201809-0087 WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vul… 2026-03-09T23:47:39.073000Z
var-202603-0936 This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte… 2026-03-09T23:47:24.755000Z
var-202602-4478 A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local atta… 2026-03-09T23:46:19.733000Z
var-200607-0396 Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) b… 2026-03-09T23:46:10.855000Z
var-202603-0912 This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte… 2026-03-09T23:44:44.895000Z
var-201109-0089 Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used… 2026-03-09T23:43:52.032000Z
var-201112-0297 Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Ne… 2026-03-09T23:42:40.522000Z
var-202602-4354 A vulnerability in Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote a… 2026-03-09T23:41:43.191000Z
var-202603-0926 This vulnerability allows network-adjacent attackers to bypass authentication on affected… 2026-03-09T23:41:42.948000Z
var-201805-1147 WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffe… 2026-03-09T23:40:47.052000Z
var-202005-0008 Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buf… 2026-03-09T23:40:44.003000Z
var-202601-4765 FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, ex… 2026-03-09T23:40:28.326000Z
var-202602-3835 A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could all… 2026-03-09T23:40:28.093000Z
var-202602-3961 A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated,… 2026-03-09T23:40:28.074000Z
ID CVSS Description Vendor Product Published Updated
GCVE-1-2026-0020
10 (4.0)
Remote Code Execution Attack Against Eircom D1000 Router Eir
 D1000
 2026-03-11T14:12:00.000Z 2026-03-11T14:23:24.609831Z
GCVE-1-2026-0019
6.4 (4.0)
Improper URL validation in MISP dashboard button widge… misp
 misp
 2026-02-27T14:55:00.000Z 2026-02-27T15:44:29.998063Z
GCVE-1-2026-0018
6.5 (4.0)
Improper access control in MISP user contact form allo… misp
 misp
 2026-02-27T13:25:32.632362Z 2026-02-27T13:25:32.632362Z
GCVE-1-2026-0017
7.2 (4.0)
Improper Neutralization of Raw HTML in MISP modules Ma… misp
 misp-modules
 2026-02-27T13:10:24.641948Z 2026-02-27T13:10:24.641948Z
GCVE-1-2026-0016
7 (4.0)
Server-Side Request Forgery via Event Report Import Fr… misp
 misp
 2026-02-27T10:56:32.745676Z 2026-02-27T10:56:32.745676Z
GCVE-1-2026-0015
7.2 (4.0)
Threat actors use FortiCloud SSO bypass to collect LDA… fortinet
 fortios
 2026-02-09T09:09:00.000Z 2026-02-09T09:14:59.004089Z
GCVE-1-2026-0013
2.1 (4.0)
Flask Application Username Route Collision Allows Rese… vulnerability-lookup
 vulnerability-lookup
 2026-02-04T19:27:00.000Z 2026-02-04T19:32:49.787763Z
GCVE-1-2026-0014
7.4 (4.0)
Missing Authorization Check Allows Unauthorized Modifi… vulnerability-lookup
 vulnerability-lookup
 2026-02-04T19:32:14.341383Z 2026-02-04T19:32:14.341383Z
GCVE-1-2026-0012
2.1 (4.0)
Authentication Error Message Allows Email Address Enum… vulnerability-lookup
 vulnerability-lookup
 2026-02-04T19:21:34.411344Z 2026-02-04T19:21:34.411344Z
GCVE-1-2026-0011
8.7 (4.0)
Out-of-bounds memory write in the network packet … EA Games
 Command & Conquer: Generals
 2026-01-29T14:37:00.000Z 2026-01-29T14:39:17.728822Z
GCVE-1-2026-0010
9.3 (4.0)
Improper input validation in the file transfer ha… EA Games
 Command & Conquer: Generals
 2026-01-29T14:33:18.822829Z 2026-01-29T14:33:18.822829Z
GCVE-1-2026-0009
9.3 (4.0)
Stack-based buffer overflow in the multiplayer ne… EA Games
 Command & Conquer: Generals
 2026-01-29T14:30:38.596928Z 2026-01-29T14:30:38.596928Z
GCVE-1-2026-0008
10 (4.0)
gpg-agent stack buffer overflow in pkdecrypt using KEM gnupg
 gpg-agent
 2026-01-28T13:48:12.350509Z 2026-01-28T13:48:12.350509Z
GCVE-1-2026-0007
10 (4.0)
GNU InetUtils Security Advisory: remote authentication… gnu
 InetUtils
 2026-01-20T20:57:00.000Z 2026-01-26T16:32:40.831364Z
GCVE-1-2026-0004
8.5 (4.0)
Authorization Bypass in Cerebrate IndividualsControlle… cerebrate
 cerebrate
 2026-01-13T15:28:00.000Z 2026-01-13T15:38:37.744618Z
GCVE-1-2026-0005
8.5 (4.0)
Improper Access Control in Cerebrate Alignment Model A… cerebrate
 cerebrate
 2026-01-13T15:31:00.000Z 2026-01-13T15:38:02.888546Z
GCVE-1-2026-0006
8.5 (4.0)
Improper Access Control in Cerebrate AuthKey and Encry… cerebrate
 cerebrate
 2026-01-13T15:37:17.337254Z 2026-01-13T15:37:17.337254Z
GCVE-1-2026-0003
6.3 (4.0)
Stored/Reflected XSS via Unsanitized Parameters in URL… misp
 misp
 2026-01-13T10:50:00.000Z 2026-01-13T10:54:13.659223Z
GCVE-1-2026-0002
10 (4.0)
Heap-buffer-overflow in EXIF writer for extra IFD tags ffmpeg
 ffmpeg
 2026-01-02T19:50:00.000Z 2026-01-02T20:05:27.269877Z
GCVE-1-2026-0001
N/A
Bundle reference to gpg.fail gnupg
 gnupg
 2026-01-02T10:20:00.000Z 2026-01-02T13:31:14.359346Z
GCVE-1-2025-0041
6.4 (4.0)
[online services] Reflected Cross-Site Scripting (XSS)… typo3
 typo3
 2025-12-19T14:25:00.000Z 2025-12-19T14:54:51.594645Z
GCVE-1-2025-0032
10 (4.0)
The default configuration of WatchGuard Firebox device… watchguard
 firebox
 2025-12-03T16:25:00.000Z 2025-12-19T13:48:34.570799Z
GCVE-1-2025-0031
7.1 (4.0)
A cross-site scripting (XSS) vulnerability was identif… misp
 misp
 2025-12-03T10:58:00.000Z 2025-12-16T09:36:09.594750Z
GCVE-1-2025-0040
7.2 (4.0)
A cross-site scripting (XSS) vulnerability was id… misp
 misp
 2025-12-13T08:44:32.378924Z 2025-12-13T08:44:32.378924Z
GCVE-1-2025-0039
8.5 (4.0)
XSS Reintroduced in MISP Dashboard World Map Widget Du… misp
 misp
 2025-12-10T14:33:52.856734Z 2025-12-10T14:33:52.856734Z
GCVE-1-2025-0038
5 (4.0)
Reflected XSS in MISP Template Tag Removal and MISP Ad… misp
 misp
 2025-12-10T14:10:00.000Z 2025-12-10T14:16:55.918270Z
GCVE-1-2025-0037
7 (4.0)
Reflected XSS in MISP Dashboard Widgets via Unescaped … misp
 misp
 2025-12-10T14:01:03.200804Z 2025-12-10T14:01:03.200804Z
GCVE-1-2025-0036
8.3 (4.0)
A reflected cross-site scripting (XSS) vulnerability w… misp
 misp
 2025-12-10T13:46:07.170083Z 2025-12-10T13:46:07.170083Z
GCVE-1-2025-0035
8.3 (4.0)
Insufficient sanitization of bundle metadata (availabl… CIRCL
 vulnerability-lookup
 2025-12-08T10:25:00.000Z 2025-12-08T12:14:06.307298Z
GCVE-1-2025-0034
7 (4.0)
Missing CSRF protection on state-changing endpoints in… CIRCL
 vulnerability-lookup
 2025-12-08T10:19:00.000Z 2025-12-08T12:13:24.197294Z
ID CVSS Description Vendor Product Published Updated
GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011
9.1 (3.1)
HexStrike AI MCP Server Command Injection 0x4m4
 HexStrike AI
 2025-11-30T21:27:56.057Z 2025-11-30T21:27:56.057Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111111111011111111110000000000000000000000000000000000000000000000000000000100
6.5 (3.1)
Abilis CPX Fallback Shell Connection Relay Abilis
 CPX
 2025-11-04T00:23:23.924Z 2025-11-04T00:23:23.924Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011011111110011111111110000000000000000000000000000000000000000000000000000000010
7.3 (3.1)
Unitree Multiple Robotic Products Command Injection Unitree
 Go2
 2025-09-26T06:53:49.585Z 2025-09-26T15:16:57.586Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001
4.3 (3.1)
Unauthenticated leak of sensitive information affectin… Brother Industries, Ltd
 HL-L8260CDN
 2025-08-12T15:23:00.577Z 2025-08-15T05:53:23.017Z