Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-28216 |
8.3 (3.1)
|
hoppscotch has IDOR in updateUserEnvironment / deleteU… |
hoppscotch |
hoppscotch |
2026-02-26T22:36:50.539Z | 2026-02-27T18:43:16.218Z |
| CVE-2025-9909 |
6.7 (3.1)
|
Aap-gateway: improper path validation in gateway allow… |
Red Hat |
Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
2026-02-27T07:30:00.885Z | 2026-02-27T18:43:09.098Z |
| CVE-2025-9572 |
5 (3.1)
|
Foreman: satellite: graphql api permission bypass lead… |
The Foreman |
Foreman |
2026-02-27T07:28:44.391Z | 2026-02-27T18:42:37.881Z |
| CVE-2026-28217 |
6.5 (3.1)
|
IDOR in GraphQL userCollection Query Exposes Other Use… |
hoppscotch |
hoppscotch |
2026-02-26T22:38:33.854Z | 2026-02-27T18:42:07.857Z |
| CVE-2025-15567 |
5.1 (4.0)
|
Insufficient protection mechanisms in the Health … |
vivo |
Health |
2026-02-27T06:54:29.817Z | 2026-02-27T18:41:41.980Z |
| CVE-2025-40932 |
8.2 (3.1)
|
Apache::SessionX versions through 2.01 for Perl create… |
GRICHTER |
Apache::SessionX |
2026-02-26T23:33:37.083Z | 2026-02-27T18:41:24.407Z |
| CVE-2026-28225 |
5.3 (3.1)
|
Manyfold has IDOR in ModelFilesController |
manyfold3d |
manyfold |
2026-02-26T22:40:17.996Z | 2026-02-27T18:33:16.833Z |
| CVE-2019-25491 |
8.8 (4.0)
8.2 (3.1)
|
Homey BNB V4 SQL Injection via cms_getpagetitle.php |
Doditsolutions |
Homey BNB (Airbnb Clone Script) |
2026-02-27T17:23:33.151Z | 2026-02-27T18:31:40.556Z |
| CVE-2019-25490 |
8.8 (4.0)
8.2 (3.1)
|
Homey BNB V4 SQL Injection via admin edit.php |
Doditsolutions |
Homey BNB (Airbnb Clone Script) |
2026-02-27T17:23:32.329Z | 2026-02-27T18:31:02.347Z |
| CVE-2019-25489 |
8.8 (4.0)
8.2 (3.1)
|
Homey BNB V4 SQL Injection via ajax_refresh_subtotal |
Doditsolutions |
Homey BNB (Airbnb Clone Script) |
2026-02-27T17:23:31.447Z | 2026-02-27T18:28:30.334Z |
| CVE-2026-25147 |
7.1 (3.1)
|
OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid |
openemr |
openemr |
2026-02-27T16:44:40.734Z | 2026-02-27T18:27:59.160Z |
| CVE-2026-24488 |
6.5 (3.1)
|
OpenEMR Vulnerable to Arbitrary File Exfiltration via … |
openemr |
openemr |
2026-02-27T16:41:45.665Z | 2026-02-27T18:27:12.987Z |
| CVE-2019-25495 |
8.8 (4.0)
8.2 (3.1)
|
osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter |
Oscommerce |
osCommerce |
2026-02-27T17:23:36.955Z | 2026-02-27T18:26:12.046Z |
| CVE-2019-25494 |
8.8 (4.0)
8.2 (3.1)
|
Homey BNB V4 SQL Injection Authentication Bypass via A… |
Doditsolutions |
Homey BNB (Airbnb Clone Script) |
2026-02-27T17:23:36.185Z | 2026-02-27T18:25:29.418Z |
| CVE-2019-25493 |
8.8 (4.0)
8.2 (3.1)
|
Homey BNB V4 SQL Injection via getrecord.php |
Doditsolutions |
Homey BNB (Airbnb Clone Script) |
2026-02-27T17:23:35.222Z | 2026-02-27T18:24:09.868Z |
| CVE-2019-25492 |
8.8 (4.0)
8.2 (3.1)
|
Homey BNB V4 SQL Injection via getcmsdata.php |
Doditsolutions |
Homey BNB (Airbnb Clone Script) |
2026-02-27T17:23:34.010Z | 2026-02-27T18:23:16.032Z |
| CVE-2025-50180 |
8.7 (4.0)
|
esm.sh is vulnerable to full-response SSRF |
esm-dev |
esm.sh |
2026-02-25T15:32:56.449Z | 2026-02-27T18:22:28.728Z |
| CVE-2019-25496 |
8.8 (4.0)
8.2 (3.1)
|
osCommerce 2.3.4.1 SQL Injection via products_id Parameter |
Oscommerce |
osCommerce |
2026-02-27T17:23:37.732Z | 2026-02-27T18:22:26.478Z |
| CVE-2019-25497 |
8.8 (4.0)
8.2 (3.1)
|
osCommerce 2.3.4.1 SQL Injection via currency Parameter |
Oscommerce |
osCommerce |
2026-02-27T17:23:38.536Z | 2026-02-27T18:21:53.283Z |
| CVE-2026-3193 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
Chia Blockchain send_transaction cross-site request forgery |
Chia |
Blockchain |
2026-02-25T16:32:08.589Z | 2026-02-27T18:20:18.500Z |
| CVE-2026-27483 |
8.8 (3.1)
|
MindsDB has Path Traversal in /api/files Leading to Re… |
mindsdb |
mindsdb |
2026-02-24T14:00:05.402Z | 2026-02-27T18:19:11.743Z |
| CVE-2026-2933 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
YiFang CMS Extended Management D_adManage.php update c… |
YiFang |
CMS |
2026-02-22T07:32:11.055Z | 2026-02-27T18:18:36.765Z |
| CVE-2026-28226 |
6.5 (3.1)
|
Phishing Club has Authenticated Blind SQL Injection in… |
phishingclub |
phishingclub |
2026-02-26T22:43:05.629Z | 2026-02-27T18:18:06.714Z |
| CVE-2026-25554 |
8.3 (4.0)
6.5 (3.1)
|
OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables J… |
OpenSIPS |
OpenSIPS |
2026-02-25T16:54:11.845Z | 2026-02-27T18:17:35.536Z |
| CVE-2026-28230 |
5.7 (4.0)
|
In SteVe, any authenticated charger can terminate any … |
steve-community |
steve |
2026-02-26T22:49:33.613Z | 2026-02-27T18:17:19.675Z |
| CVE-2026-22207 |
9.3 (4.0)
9.8 (3.1)
|
OpenViking Missing root_api_key Allows Anonymous ROOT Access |
Volcengine |
OpenViking |
2026-02-26T20:34:30.907Z | 2026-02-27T18:17:03.313Z |
| CVE-2026-27510 |
6.4 (4.0)
9.6 (3.1)
|
Unitree Go2 Mobile Program Tampering Enables Root RCE |
UnitreeRobotics |
Unitree Go2 |
2026-02-26T18:56:56.654Z | 2026-02-27T18:15:59.996Z |
| CVE-2026-27509 |
8.5 (4.0)
8 (3.1)
|
Unitree Go2 Missing DDS Authentication Enables Adjacent RCE |
UnitreeRobotics |
Unitree Go2 |
2026-02-26T18:56:31.648Z | 2026-02-27T18:15:37.037Z |
| CVE-2026-2932 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
YiFang CMS Extended Management D_adPosition.php update… |
YiFang |
CMS |
2026-02-22T07:32:08.677Z | 2026-02-27T18:15:32.945Z |
| CVE-2025-67445 |
6.5 (3.1)
|
TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains … |
n/a |
n/a |
2026-02-24T00:00:00.000Z | 2026-02-27T18:15:06.130Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-28276 |
7.5 (3.1)
|
Initiative Allows Unauthenticated Access to Uploaded D… |
Morelitea |
initiative |
2026-02-26T22:57:36.406Z | 2026-02-27T17:40:15.760Z |
| CVE-2026-23947 |
9.3 (4.0)
|
Orval MCP client is vulnerable to code injection via … |
orval-labs |
orval |
2026-01-20T00:19:48.901Z | 2026-01-21T17:09:11.690Z |
| CVE-2026-27615 |
8.8 (4.0)
|
ADB-Explorer: UNC Path Support in ManualAdbPath Leads … |
Alex4SSB |
ADB-Explorer |
2026-02-25T02:33:53.553Z | 2026-02-27T17:09:58.886Z |
| CVE-2026-27621 |
6.8 (4.0)
|
TypiCMS Core has Stored Cross-Site Scripting (XSS) via… |
TypiCMS |
Core |
2026-02-25T02:36:12.353Z | 2026-02-26T20:59:12.644Z |
| CVE-2026-24132 |
7.7 (4.0)
|
Orval Mock Generation Code Injection via const |
orval-labs |
orval |
2026-01-22T23:47:45.846Z | 2026-01-23T20:01:12.356Z |
| CVE-2026-27626 |
10 (3.1)
|
OliveTin vulnerable to OS Command Injection via `passw… |
OliveTin |
OliveTin |
2026-02-25T02:43:08.189Z | 2026-02-27T17:07:28.612Z |
| CVE-2026-2914 |
8.5 (4.0)
|
CyberArk Endpoint Privilege Manager Agent version… |
CyberArk Software, a Palo Alto Networks Company |
Endpoint Privilege Manager Agent |
2026-02-25T01:33:05.657Z | 2026-02-26T21:42:22.714Z |
| CVE-2026-1772 |
5.3 (4.0)
|
RTU500 web interface: An unprivileged user can re… |
Hitachi Energy |
RTU500 series CMU firmware |
2026-02-24T13:03:23.592Z | 2026-02-28T02:19:01.092Z |
| CVE-2026-1773 |
8.7 (4.0)
|
IEC 60870-5-104: Potential Denial of Service impa… |
Hitachi Energy |
RTU500 series CMU firmware |
2026-02-24T13:13:17.990Z | 2026-02-28T02:20:00.192Z |
| CVE-2026-27627 |
8.2 (3.1)
|
Karakeep's Reddit plugin content bypasses DOMPurify sa… |
karakeep-app |
karakeep |
2026-02-25T03:48:07.431Z | 2026-02-25T21:20:03.257Z |
| CVE-2026-27639 |
8.5 (4.0)
|
Mercator vulnerable to stored XSS via unescaped Blade … |
dbarzin |
mercator |
2026-02-25T03:44:26.241Z | 2026-02-25T15:20:41.753Z |
| CVE-2026-27640 |
8.5 (4.0)
|
tfplan2md has Sensitive Value Exposure in Generated Reports |
oocx |
tfplan2md |
2026-02-25T03:52:26.615Z | 2026-02-25T21:21:08.940Z |
| CVE-2026-27641 |
9.8 (3.1)
|
Flask-Reuploaded vulnerable to Remote Code Execution v… |
jugmac00 |
flask-reuploaded |
2026-02-25T03:54:54.391Z | 2026-02-25T21:12:45.608Z |
| CVE-2026-27743 |
9.3 (4.0)
9.8 (3.1)
|
SPIP referer_spam <= 1.2.1 Unauthenticated SQL Injection |
SPIP |
referer_spam |
2026-02-25T03:08:39.325Z | 2026-02-26T19:55:07.890Z |
| CVE-2026-27635 |
7.5 (3.1)
|
Manyfold vulnerable to OS command injection via ZIP fi… |
manyfold3d |
manyfold |
2026-02-25T23:10:27.951Z | 2026-02-26T16:52:18.942Z |
| CVE-2026-24352 |
4.8 (4.0)
|
Session Fixation in PluXml CMS |
PluXml |
PluXml CMS |
2026-02-27T11:35:27.107Z | 2026-02-27T15:05:15.633Z |
| CVE-2026-24351 |
5.1 (4.0)
|
Stored XSS in PluXml CMS |
PluXml |
PluXml CMS |
2026-02-27T11:35:23.141Z | 2026-02-27T15:14:57.021Z |
| CVE-2026-24350 |
5.1 (4.0)
|
Stored XSS in PluXml CMS |
PluXml |
PluXml CMS |
2026-02-27T11:35:08.802Z | 2026-02-27T15:16:22.413Z |
| CVE-2026-3292 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
jizhiCMS Batch Model.php findAll sql injection |
n/a |
jizhiCMS |
2026-02-27T05:02:06.427Z | 2026-02-27T18:51:35.927Z |
| CVE-2026-3271 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F453 httpd P2pListFilterof fromP2pListFilter buf… |
Tenda |
F453 |
2026-02-27T00:02:09.718Z | 2026-02-27T17:25:44.383Z |
| CVE-2026-27969 |
9.3 (4.0)
|
Vitess users with backup storage access can write to a… |
vitessio |
vitess |
2026-02-26T01:52:30.677Z | 2026-02-26T19:33:53.738Z |
| CVE-2026-27597 |
10 (3.1)
|
@enclave-vm/core is vulnerable to Sandbox Escape |
agentfront |
enclave |
2026-02-25T03:56:25.927Z | 2026-02-25T21:13:32.747Z |
| CVE-2026-25141 |
9.3 (4.0)
|
Orval has a code injection via unsanitized x-enum-desc… |
orval-labs |
orval |
2026-01-30T20:19:04.333Z | 2026-02-02T18:00:17.681Z |
| CVE-2026-3075 |
5.3 (3.1)
|
WordPress Simple Ajax Chat plugin <= 20251121 - Sensit… |
Jeff Starr |
Simple Ajax Chat |
2026-02-23T20:48:13.276Z | 2026-02-27T17:55:48.411Z |
| CVE-2026-2472 |
8.6 (4.0)
|
Stored Cross-Site Scripting (XSS) in Vertex AI Python … |
Google Cloud |
Vertex AI SDK for Python |
2026-02-20T19:29:12.162Z | 2026-02-27T17:38:41.190Z |
| CVE-2026-28131 |
6.5 (3.1)
|
WordPress Elementor Addon Elements plugin <= 1.14.4 - … |
WPVibes |
Elementor Addon Elements |
2026-02-26T08:33:36.436Z | 2026-02-27T17:57:01.188Z |
| CVE-2026-27753 |
6.9 (4.0)
6.5 (3.1)
|
SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rat… |
Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) |
SODOLA SL902-SWTGW124AS |
2026-02-27T18:09:06.491Z | 2026-02-27T19:27:57.676Z |
| CVE-2026-27752 |
8.2 (4.0)
5.9 (3.1)
|
SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credenti… |
Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) |
SODOLA SL902-SWTGW124AS |
2026-02-27T18:08:32.920Z | 2026-02-27T19:28:35.579Z |
| CVE-2026-27751 |
9.3 (4.0)
9.8 (3.1)
|
SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Cre… |
Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) |
SODOLA SL902-SWTGW124AS |
2026-02-27T18:07:58.403Z | 2026-02-27T19:33:20.672Z |
| CVE-2026-22715 |
5.9 (3.1)
|
VMware Workstation/Fusion NAT vulnerability |
VMware |
Workstation |
2026-02-26T18:29:14.190Z | 2026-02-27T17:55:10.640Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-24132 | Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specifica… | 2026-01-23T00:15:52.403 | 2026-02-27T19:00:40.547 |
| fkie_cve-2026-27626 | OliveTin gives access to predefined shell commands from a web interface. In versions up to and incl… | 2026-02-25T03:16:06.347 | 2026-02-27T18:58:46.380 |
| fkie_cve-2026-2914 | CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized p… | 2026-02-25T02:16:23.130 | 2026-02-27T18:58:08.133 |
| fkie_cve-2026-1772 | RTU500 web interface: An unprivileged user can read user management information. The information ca… | 2026-02-24T14:16:22.180 | 2026-02-27T18:56:47.210 |
| fkie_cve-2026-1773 | IEC 60870-5-104: Potential Denial of Service impact on reception of invalid U-format frame. Product… | 2026-02-24T14:16:22.420 | 2026-02-27T18:56:20.460 |
| fkie_cve-2026-27627 | Karakeep is a elf-hostable bookmark-everything app. In version 0.30.0, when the Reddit metascraper … | 2026-02-25T04:16:03.757 | 2026-02-27T18:48:34.580 |
| fkie_cve-2026-27639 | Mercator is an open source web application designed to enable mapping of information systems. A sto… | 2026-02-25T04:16:04.280 | 2026-02-27T18:45:51.407 |
| fkie_cve-2026-27640 | tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports… | 2026-02-25T04:16:04.450 | 2026-02-27T18:45:02.947 |
| fkie_cve-2026-27641 | Flask-Reuploaded provides file uploads for Flask. A critical path traversal and extension bypass vu… | 2026-02-25T04:16:04.620 | 2026-02-27T18:40:20.083 |
| fkie_cve-2026-27743 | The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulne… | 2026-02-25T04:16:04.783 | 2026-02-27T18:38:06.783 |
| fkie_cve-2026-27635 | Manyfold is an open source, self-hosted web application for managing a collection of 3d models, par… | 2026-02-26T00:16:24.307 | 2026-02-27T18:36:30.553 |
| fkie_cve-2026-24352 | PluXml CMS allows a user's session identifier to be set before authentication. The value of this se… | 2026-02-27T12:16:03.210 | 2026-02-27T18:36:00.687 |
| fkie_cve-2026-24351 | PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality. Attacker with editing… | 2026-02-27T12:16:03.047 | 2026-02-27T18:34:15.210 |
| fkie_cve-2026-24350 | PluXml CMS is vulnerable to Stored XSS in file uploading functionality. An authenticated attacker c… | 2026-02-27T12:16:02.867 | 2026-02-27T18:33:58.880 |
| fkie_cve-2026-3292 | A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAl… | 2026-02-27T05:18:21.927 | 2026-02-27T18:32:50.777 |
| fkie_cve-2026-3271 | A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the… | 2026-02-27T00:16:59.143 | 2026-02-27T18:30:41.480 |
| fkie_cve-2026-27969 | Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 an… | 2026-02-26T02:16:24.177 | 2026-02-27T18:28:21.607 |
| fkie_cve-2026-27597 | Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version … | 2026-02-25T04:16:03.557 | 2026-02-27T18:27:17.377 |
| fkie_cve-2026-25141 | Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specifica… | 2026-01-30T21:15:58.603 | 2026-02-27T18:21:56.603 |
| fkie_cve-2026-3075 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff St… | 2026-02-23T21:19:13.140 | 2026-02-27T18:16:14.340 |
| fkie_cve-2026-2472 | Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vert… | 2026-02-20T20:25:24.307 | 2026-02-27T18:16:14.137 |
| fkie_cve-2026-28131 | Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements… | 2026-02-26T09:16:15.050 | 2026-02-27T18:16:13.490 |
| fkie_cve-2026-27753 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnera… | 2026-02-27T18:16:13.303 | 2026-02-27T18:16:13.303 |
| fkie_cve-2026-27752 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over… | 2026-02-27T18:16:13.083 | 2026-02-27T18:16:13.083 |
| fkie_cve-2026-27751 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerabil… | 2026-02-27T18:16:12.897 | 2026-02-27T18:16:12.897 |
| fkie_cve-2026-22715 | VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known at… | 2026-02-26T19:32:37.893 | 2026-02-27T18:16:11.667 |
| fkie_cve-2026-21619 | Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_cor… | 2026-02-27T18:16:11.373 | 2026-02-27T18:16:11.373 |
| fkie_cve-2025-69929 | An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate pri… | 2026-01-29T20:16:09.953 | 2026-02-27T18:16:09.217 |
| fkie_cve-2025-69394 | Authorization Bypass Through User-Controlled Key vulnerability in cnvrse Cnvrse cnvrse allows Explo… | 2026-02-20T16:22:24.970 | 2026-02-27T18:16:09.020 |
| fkie_cve-2025-69378 | Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdc… | 2026-02-20T16:22:22.297 | 2026-02-27T18:16:08.823 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-v653-r55g-hcmg |
6.3 (3.1)
|
A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during pack… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-v23v-xhv2-h6xf |
6.4 (3.1)
|
The WP Accessibility plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting vi… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-qvjv-wc87-5x43 |
7.1 (4.0)
|
The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some inform… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-pfhj-rw8h-88jh |
8.8 (4.0)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick C… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-mrg5-ffj4-qw8r |
6.4 (3.1)
|
The Simple Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via c… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-jhjg-8mcj-cvjp |
8.8 (4.0)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick C… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-hh8f-7cpw-gff5 |
6.4 (3.1)
|
The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-gvvp-xfg4-2fr6 |
5.0 (3.1)
|
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-cqcg-78xg-q885 |
6.5 (3.1)
|
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to … | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-cg57-mvgj-rxvr |
9.8 (3.1)
|
Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-cfm2-f46f-rc3g |
7.5 (3.1)
|
An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request For… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-c2g3-cfch-p5h4 |
6.7 (3.1)
|
A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Strea… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-9crv-fj8p-224j |
8.8 (4.0)
|
Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection')… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-8fxc-329r-9p4v |
5.1 (4.0)
|
Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-5hwv-xjx8-73mr |
6.5 (3.1)
|
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to pote… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-42rf-xhpv-2c8q |
6.4 (3.1)
|
The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Sit… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-3mcc-r9wq-f9g6 |
6.7 (3.1)
|
A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Strea… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-3j9h-rxgh-gc62 |
4.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this is… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-38mc-hhxh-4rgq |
7.2 (3.1)
8.6 (4.0)
|
IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. This … | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-2fx4-vwf2-pw99 |
6.7 (3.1)
|
A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This … | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-pw4j-xhwf-vgmr |
6.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in Sanluan PublicCMS 6.202506.d. This impacts the function saveMetad… | 2026-02-27T06:31:28Z | 2026-02-27T06:31:29Z |
| ghsa-2r7h-m6jv-58qc |
5.3 (3.1)
|
The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR… | 2026-02-27T06:31:28Z | 2026-02-27T06:31:29Z |
| ghsa-rwvh-hmmf-wpqx |
6.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAl… | 2026-02-27T06:31:28Z | 2026-02-27T06:31:28Z |
| ghsa-mcx7-55c8-m5jv |
4.3 (3.1)
5.3 (4.0)
|
A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user … | 2025-12-08T12:30:25Z | 2026-02-27T06:31:28Z |
| ghsa-m56j-8cwc-qgv8 |
6.7 (3.1)
5.4 (4.0)
|
The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorre… | 2026-02-27T06:31:28Z | 2026-02-27T06:31:28Z |
| ghsa-jppp-pmhm-3cp9 |
9.8 (3.1)
8.9 (4.0)
|
A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulner… | 2026-02-27T06:31:28Z | 2026-02-27T06:31:28Z |
| ghsa-g54x-7hpm-29q8 |
7.9 (3.1)
|
In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime… | 2026-02-27T06:31:28Z | 2026-02-27T06:31:28Z |
| ghsa-99wf-f9rf-jh8p |
7.8 (3.1)
|
Since the encryption algorithm used to protect firmware updates is itself encrypted using key mater… | 2026-02-27T06:31:28Z | 2026-02-27T06:31:28Z |
| ghsa-7mf8-hqh9-29fx |
6.3 (3.1)
2.1 (4.0)
|
A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function list… | 2026-02-27T06:31:28Z | 2026-02-27T06:31:28Z |
| ghsa-7cj7-hvph-vvv7 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element … | 2026-02-27T06:31:28Z | 2026-02-27T06:31:28Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2008-13 |
|
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (a… | moin | 2008-07-30T18:41:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2008-12 |
|
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non… | moin | 2008-04-25T06:05:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2007-4 |
|
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrar… | plone | 2007-11-07T21:46:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2006-6 |
|
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member regis… | Plone | 2006-12-07T23:28:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2006-5 |
|
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 … | Plone | 2006-09-29T19:07:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2022-43072 |
7.5 (3.1)
|
An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted … | chia-blockchain | 2022-07-29T21:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43068 |
6.3 (3.1)
|
A race condition flaw was found in ansible-runner, where an attacker could watch for rapi… | ansible-runner | 2022-08-23T16:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43067 |
6.6 (3.1)
|
A flaw was found in ansible-runner where the default temporary files configuration in ans… | ansible-runner | 2022-08-23T16:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2013-35 |
|
The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through … | cinder | 2013-09-16T19:14:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43063 |
9.8 (3.1)
|
Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arb… | paddlepaddle | 2022-12-07T09:15:00+00:00 | 2024-11-22T12:27:25.862098+00:00 |
| pysec-2006-8 |
|
The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not … | zope2 | 2006-09-19T18:07:00Z | 2024-11-21T14:23:03.63347Z |
| pysec-2006-7 |
|
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw… | zope2 | 2006-07-07T23:05:00Z | 2024-11-21T14:23:03.576588Z |
| pysec-2017-148 |
6.1 (3.1)
|
Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in… | zope | 2017-08-07T17:29:00Z | 2024-11-21T14:23:03.459792Z |
| pysec-2022-43176 |
9.8 (3.1)
|
The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. Thi… | zibal | 2022-06-24T21:15:00Z | 2024-11-21T14:23:03.404044Z |
| pysec-2022-43175 |
6.1 (3.1)
|
Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to … | xblock-drag-and-drop-v2 | 2022-11-28T21:15:00+00:00 | 2024-11-21T14:23:03.352390+00:00 |
| pysec-2022-43173 |
9.8 (3.1)
|
The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third… | wikifaces | 2022-07-22T15:15:00Z | 2024-11-21T14:23:03.244154Z |
| pysec-2019-256 |
7.5 (3.1)
|
In libwebp 0.5.1, there is a double free bug in libwebpmux. | webp | 2019-05-23T18:29:00Z | 2024-11-21T14:23:03.194401Z |
| pysec-2022-43172 |
9.8 (3.1)
|
The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor… | watertools | 2022-06-24T21:15:00Z | 2024-11-21T14:23:03.143453Z |
| pysec-2024-151 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compi… | vyper | 2024-01-30T21:15:00+00:00 | 2024-11-21T14:23:03.091183+00:00 |
| pysec-2024-150 |
9.8 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can … | vyper | 2024-02-07T17:15:00+00:00 | 2024-11-21T14:23:03.024978+00:00 |
| pysec-2024-149 |
9.8 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2024-02-01T17:15:00+00:00 | 2024-11-21T14:23:02.970591+00:00 |
| pysec-2024-148 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls … | vyper | 2024-02-02T17:15:00+00:00 | 2024-11-21T14:23:02.917464+00:00 |
| pysec-2024-147 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack m… | vyper | 2024-02-05T21:15:00+00:00 | 2024-11-21T14:23:02.864019+00:00 |
| pysec-2023-307 |
7.5 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Contr… | vyper | 2023-12-13T20:15:00+00:00 | 2024-11-21T14:23:02.808922+00:00 |
| pysec-2023-306 |
8.1 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In ve… | vyper | 2023-09-18T21:16:00+00:00 | 2024-11-21T14:23:02.752932+00:00 |
| pysec-2023-305 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Start… | vyper | 2023-09-18T21:16:00+00:00 | 2024-11-21T14:23:02.698147+00:00 |
| pysec-2023-304 |
8.8 (3.1)
|
vantage6 is a framework to manage and deploy privacy enhancing technologies like Federate… | vantage6-server | 2023-11-14T21:15:00+00:00 | 2024-11-21T14:23:02.641254+00:00 |
| pysec-2023-303 |
8.8 (3.1)
|
vantage6 is a framework to manage and deploy privacy enhancing technologies like Federate… | vantage6-node | 2023-11-14T21:15:00+00:00 | 2024-11-21T14:23:02.574095+00:00 |
| pysec-2022-43171 |
7.5 (3.1)
|
An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server… | tryton | 2022-03-10T17:47:00+00:00 | 2024-11-21T14:23:02.453983+00:00 |
| pysec-2022-43170 |
6.5 (3.1)
|
An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6… | tryton | 2022-03-10T17:47:00+00:00 | 2024-11-21T14:23:02.248212+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4278 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.578652Z |
| gsd-2024-4238 | A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affect… | 2024-04-27T05:02:16.577033Z |
| gsd-2024-4290 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.575829Z |
| gsd-2024-4239 | A vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by… | 2024-04-27T05:02:16.575159Z |
| gsd-2024-4257 | A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has be… | 2024-04-27T05:02:16.570113Z |
| gsd-2024-4288 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.569916Z |
| gsd-2024-4248 | A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. This is… | 2024-04-27T05:02:16.569718Z |
| gsd-2024-4251 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been rated as critical. Aff… | 2024-04-27T05:02:16.569517Z |
| gsd-2024-4276 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.567475Z |
| gsd-2024-4270 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.565894Z |
| gsd-2024-4272 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.564269Z |
| gsd-2024-4228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.563352Z |
| gsd-2024-4253 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.562905Z |
| gsd-2024-4268 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.561404Z |
| gsd-2024-4275 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.560967Z |
| gsd-2024-4234 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-27T05:02:16.558629Z |
| gsd-2024-4245 | A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.14(4… | 2024-04-27T05:02:16.558324Z |
| gsd-2024-4271 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.557860Z |
| gsd-2024-4262 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.557062Z |
| gsd-2024-4250 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been declared as critical. … | 2024-04-27T05:02:16.555748Z |
| gsd-2024-4244 | A vulnerability classified as critical was found in Tenda W9 1.0.0.7(4456). Affected by t… | 2024-04-27T05:02:16.554860Z |
| gsd-2024-4243 | A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456). Affected… | 2024-04-27T05:02:16.549231Z |
| gsd-2024-4256 | A vulnerability was found in Techkshetra Info Solutions Savsoft Quiz 6.0 and classified a… | 2024-04-27T05:02:16.544284Z |
| gsd-2024-4269 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.543844Z |
| gsd-2024-4274 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.542869Z |
| gsd-2024-4236 | A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1… | 2024-04-27T05:02:16.536897Z |
| gsd-2024-4281 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.536355Z |
| gsd-2024-4231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.534700Z |
| gsd-2024-4261 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.534179Z |
| gsd-2024-4280 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.533977Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-863 | Malicious code in krbutils (PyPI) | 2026-02-12T08:00:39Z | 2026-02-19T22:47:48Z |
| mal-2026-938 | Malicious code in pylibcugraphops (PyPI) | 2026-02-19T09:16:31Z | 2026-02-19T09:16:31Z |
| mal-2026-936 | Malicious code in questpro (PyPI) | 2026-02-18T19:43:37Z | 2026-02-18T19:43:37Z |
| mal-2026-932 | Malicious code in easyreg (PyPI) | 2026-02-17T23:17:30Z | 2026-02-18T00:36:33Z |
| mal-2026-933 | Malicious code in pywin-simple-gui (PyPI) | 2026-02-17T23:14:17Z | 2026-02-17T23:14:17Z |
| mal-2026-910 | Malicious code in dns-execution-test (PyPI) | 2026-02-15T23:20:54Z | 2026-02-17T11:48:47Z |
| mal-2026-926 | Malicious code in auto-backup-wsl (PyPI) | 2026-01-05T23:50:24Z | 2026-02-17T00:36:40Z |
| mal-2026-925 | Malicious code in auto-backup-wins (PyPI) | 2026-01-05T23:49:57Z | 2026-02-17T00:36:40Z |
| mal-2026-924 | Malicious code in auto-backup-macos (PyPI) | 2026-01-05T23:50:38Z | 2026-02-17T00:36:40Z |
| mal-2026-923 | Malicious code in auto-backup-linux (PyPI) | 2026-01-05T23:50:47Z | 2026-02-17T00:36:40Z |
| mal-2025-5096 | Malicious code in aliyun-ai-labs-snippets-sdk (PyPI) | 2025-05-19T15:43:26Z | 2026-02-16T14:24:05Z |
| mal-2025-5094 | Malicious code in ai-labs-snippets-sdk (PyPI) | 2025-05-19T15:43:26Z | 2026-02-16T14:24:05Z |
| mal-2026-917 | Malicious code in aliyun-python-sdk-v2 (PyPI) | 2026-02-16T11:28:09Z | 2026-02-16T11:28:09Z |
| mal-2026-916 | Malicious code in alibabacloude (PyPI) | 2026-02-16T11:20:53Z | 2026-02-16T11:20:53Z |
| mal-2026-915 | Malicious code in alibabacloud-code-tool (PyPI) | 2026-02-16T11:19:13Z | 2026-02-16T11:19:13Z |
| mal-2026-913 | Malicious code in groq-ppe-pkg (PyPI) | 2026-02-16T07:09:54Z | 2026-02-16T07:09:54Z |
| mal-2026-912 | Malicious code in http-request-toolkit (PyPI) | 2026-02-16T07:03:21Z | 2026-02-16T07:03:21Z |
| mal-2026-911 | Malicious code in malpkgv2-0 (PyPI) | 2026-02-16T00:00:09Z | 2026-02-16T00:00:09Z |
| mal-2026-907 | Malicious code in tronpad (PyPI) | 2026-02-15T15:24:18Z | 2026-02-15T15:24:18Z |
| mal-2026-906 | Malicious code in cucumber_json_schema (RubyGems) | 2026-02-15T14:20:25Z | 2026-02-15T14:20:25Z |
| mal-2026-904 | Malicious code in strands-agents-anthropic (PyPI) | 2026-02-15T07:34:00Z | 2026-02-15T07:34:00Z |
| mal-2026-903 | Malicious code in requests-toolkit (PyPI) | 2026-02-15T00:02:57Z | 2026-02-15T00:02:57Z |
| mal-2025-193013 | Malicious code in tablixs (PyPI) | 2026-02-11T10:04:22Z | 2026-02-14T18:48:58Z |
| mal-2025-193012 | Malicious code in gridifies (PyPI) | 2026-02-06T14:04:11Z | 2026-02-14T18:48:58Z |
| mal-2024-12375 | Malicious code in langraph (PyPI) | 2026-02-14T05:25:23Z | 2026-02-14T18:48:58Z |
| mal-2024-12374 | Malicious code in ci-metadata-python-logging (PyPI) | 2026-02-11T10:26:41Z | 2026-02-14T18:48:58Z |
| mal-2024-12373 | Malicious code in gpu-discovery (PyPI) | 2026-02-10T22:28:06Z | 2026-02-14T18:48:58Z |
| mal-2026-902 | Malicious code in crc32fast (PyPI) | 2026-02-14T13:26:41Z | 2026-02-14T14:13:09Z |
| mal-2026-900 | Malicious code in cubaflixdownload (PyPI) | 2026-02-14T12:34:41Z | 2026-02-14T12:34:41Z |
| mal-2026-901 | Malicious code in platforms (PyPI) | 2026-02-14T12:29:36Z | 2026-02-14T12:29:36Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2022-0117 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2022-03-28T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2802 | Notepad++: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2026-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2475 | Apple macOS: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2026-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2473 | Apple iOS: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2026-02-02T23:00:00.000+00:00 |
| bsi-2026-0001 | Unauthorized access affects VibroLine and AvibiaLine devices | 2026-02-02T13:00:00.000Z | 2026-02-02T13:00:00.000Z |
| wid-sec-w-2023-2788 | GitLab: Mehrere Schwachstellen | 2023-10-31T23:00:00.000+00:00 | 2026-01-29T23:00:00.000+00:00 |
| wid-sec-w-2026-0235 | Nvidia Treiber: Mehrere Schwachstellen | 2026-01-27T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0233 | vllm: Schwachstelle ermöglicht Offenlegung von Informationen und DoS | 2026-01-27T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0230 | Mozilla Thunderbird: Schwachstelle ermöglicht Offenlegung von Informationen | 2026-01-27T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0229 | Citrix Systems XenServer und Xen: Schwachstelle ermöglicht Offenlegung von Informationen | 2026-01-27T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0225 | Xen: Mehrere Schwachstellen | 2026-01-26T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0188 | Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial of Service | 2026-01-21T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0177 | Atlassian Bamboo, Bitbucket, Confluence und Jira: Mehrere Schwachstellen | 2026-01-20T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0088 | Fortinet FortiSandbox: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2026-01-13T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0066 | avahi-daemon: Mehrere Schwachstellen ermöglichen Denial of Service | 2026-01-12T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0062 | Red Hat Enterprise Linux (libsoup): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Datenmanipulation | 2026-01-11T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0041 | Cisco Firewall Threat Defense, IOS XE und Meraki MX: Mehrere Schwachstellen | 2026-01-07T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2026-0226 | Fortinet FortiAnalyzer, FortiManager, FortiOS und FortiProxy: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2026-01-27T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2026-0222 | PyTorch: Schwachstelle ermöglicht Codeausführung | 2026-01-26T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2026-0219 | Vercel Next.js: Mehrere Schwachstellen ermöglichen Denial of Service | 2026-01-26T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2026-0214 | dormakaba Access Manager: Mehrere Schwachstellen | 2026-01-25T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2026-0132 | GNU libc: Schwachstelle ermöglicht Offenlegung von Informationen | 2026-01-15T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2740 | ffmpeg: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-12-03T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2693 | CUPS: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-27T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2663 | libpng: Mehrere Schwachstellen | 2025-11-23T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2489 | cURL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-04T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2365 | Oracle Java SE: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2249 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-09T22:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2130 | ffmpeg: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-09-24T22:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2023 | cURL: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-09-09T22:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0210 | Kwetsbaarheid verholpen in Cisco Unified Communications Manager | 2025-07-03T07:43:27.075341Z | 2025-07-03T07:43:27.075341Z |
| ncsc-2025-0209 | Kwetsbaarheid verholpen in Google Chrome | 2025-07-01T15:56:24.236216Z | 2025-07-01T15:56:24.236216Z |
| ncsc-2025-0208 | Kwetsbaarheden verholpen in Adobe Commerce | 2025-06-30T12:59:12.105658Z | 2025-06-30T12:59:12.105658Z |
| ncsc-2025-0207 | Kwetsbaarheden verholpen in Adobe InDesign Desktop | 2025-06-30T12:58:32.421661Z | 2025-06-30T12:58:32.421661Z |
| ncsc-2025-0206 | Kwetsbaarheden verholpen in Adobe Acrobat Reader | 2025-06-30T12:57:43.622242Z | 2025-06-30T12:57:43.622242Z |
| ncsc-2025-0205 | Kwetsbaarheid verholpen in IBM WebSphere Application Server | 2025-06-26T12:32:54.177712Z | 2025-06-26T12:32:54.177712Z |
| ncsc-2025-0203 | Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway | 2025-06-25T14:54:38.413413Z | 2025-06-25T14:54:38.413413Z |
| ncsc-2025-0202 | Kwetsbaarheden verholpen in IBM InfoSphere Information Server | 2025-06-22T08:19:47.485567Z | 2025-06-22T08:19:47.485567Z |
| ncsc-2025-0201 | Kwetsbaarheid verholpen in IBM Spectrum Protect Server | 2025-06-22T08:17:03.146698Z | 2025-06-22T08:17:03.146698Z |
| ncsc-2025-0200 | Kwetsbaarheden verholpen in IBM QRadar SIEM | 2025-06-20T11:04:50.445218Z | 2025-06-20T11:04:50.445218Z |
| ncsc-2025-0199 | Kwetsbaarheid verholpen in Cisco AnyConnect VPN voor Meraki MX en Z | 2025-06-19T08:42:22.673078Z | 2025-06-19T08:42:22.673078Z |
| ncsc-2025-0198 | Kwetsbaarheden verholpen in Veeam Backup | 2025-06-18T12:18:39.049977Z | 2025-06-18T12:18:39.049977Z |
| ncsc-2025-0197 | Kwetsbaarheid verholpen in GeoServer | 2025-06-18T10:17:42.472544Z | 2025-06-18T10:17:42.472544Z |
| ncsc-2025-0195 | Kwetsbaarheden verholpen in Apache Tomcat | 2025-06-18T08:01:06.984131Z | 2025-06-18T08:01:06.984131Z |
| ncsc-2025-0194 | Kwetsbaarheden verholpen in Trend Micro Apex One en Apex Central | 2025-06-12T11:12:33.408725Z | 2025-06-12T11:12:33.408725Z |
| ncsc-2025-0193 | Kwetsbaarheden verholpen in Ivanti Workspace Control | 2025-06-12T11:08:41.247215Z | 2025-06-12T11:08:41.247215Z |
| ncsc-2025-0192 | Kwetsbaarheden verholpen in Fortinet FortiOS | 2025-06-12T11:04:45.167843Z | 2025-06-12T11:04:45.167843Z |
| ncsc-2025-0191 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2025-06-11T06:58:19.840921Z | 2025-06-11T06:58:19.840921Z |
| ncsc-2025-0190 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-06-10T18:46:10.932182Z | 2025-06-10T18:46:10.932182Z |
| ncsc-2025-0189 | Kwetsbaarheden verholpen in Microsoft Office | 2025-06-10T18:45:25.061778Z | 2025-06-10T18:45:25.061778Z |
| ncsc-2025-0182 | Kwetsbaarheden verholpen in Google Chrome en Microsoft Edge | 2025-06-03T07:52:36.009178Z | 2025-06-10T18:44:36.060357Z |
| ncsc-2025-0188 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-06-10T18:43:18.187461Z | 2025-06-10T18:43:18.187461Z |
| ncsc-2025-0187 | Kwetsbaarheden verholpen in Siemens producten | 2025-06-10T13:11:56.672768Z | 2025-06-10T13:11:56.672768Z |
| ncsc-2025-0186 | Kwetsbaarheden verholpen in SAP Producten | 2025-06-10T10:15:56.898255Z | 2025-06-10T10:15:56.898255Z |
| ncsc-2025-0185 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-06-10T07:19:02.701613Z | 2025-06-10T07:19:02.701613Z |
| ncsc-2025-0181 | Kwetsbaarheid verholpen in Roundcube Webmail | 2025-06-02T09:04:58.900416Z | 2025-06-05T14:19:00.303593Z |
| ncsc-2025-0184 | Kwetsbaarheden verholpen in HPE StoreOnce Software | 2025-06-05T10:37:04.196801Z | 2025-06-05T10:37:04.196801Z |
| ncsc-2025-0183 | Kwetsbaarheid verholpen in Cisco Identity Services Engine voor cloudplatformen | 2025-06-05T10:25:46.291683Z | 2025-06-05T10:25:46.291683Z |
| ncsc-2025-0180 | Kwetsbaarheid verholpen in IBM Tivoli Monitoring | 2025-06-02T09:00:25.515472Z | 2025-06-02T09:00:25.515472Z |
| ncsc-2025-0179 | Kwetsbaarheid verholpen in Siemens SiPass Integrated | 2025-05-27T11:42:46.878569Z | 2025-05-27T11:42:46.878569Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-084182 | SSA-084182: Privilege Escalation Vulnerability in Mendix Runtime | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-843070 | SSA-843070: Multiple Vulnerabilities in SCALANCE W1750D | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-829656 | SSA-829656: Stack Overflow Vulnerability in Xpedition Layout Browser | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-784849 | SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-770890 | SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-710008 | SSA-710008: Multiple Web Vulnerabilities in SCALANCE Products | 2022-08-09T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-594373 | SSA-594373: Cross-Site-Scripting (XSS) Vulnerability in SINEMA Server V14 | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-524778 | SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-516174 | SSA-516174: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D | 2023-05-09T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-386812 | SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1 | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-295483 | SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-285795 | SSA-285795: Denial of Service in OPC-UA in Industrial Products | 2022-05-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-250085 | SSA-250085: Multiple Vulnerabilities in SINEC NMS and SINEMA Server | 2022-03-08T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-134651 | SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-646240 | SSA-646240: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console | 2023-09-14T00:00:00Z | 2023-09-14T00:00:00Z |
| ssa-357182 | SSA-357182: Local Privilege Escalation Vulnerability in Spectrum Power 7 | 2023-09-14T00:00:00Z | 2023-09-14T00:00:00Z |
| ssa-957369 | SSA-957369: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family | 2023-09-12T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-764801 | SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2023-07-11T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-587547 | SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive | 2022-11-08T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-478960 | SSA-478960: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers | 2022-11-08T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-450613 | SSA-450613: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family | 2023-02-14T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-382653 | SSA-382653: Multiple Denial of Service Vulnerabilities in Industrial Products | 2022-12-13T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-278349 | SSA-278349: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2023-09-12T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-190839 | SSA-190839: X_T File Parsing Vulnerabilities in Parasolid | 2023-09-12T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-147266 | SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 | 2023-09-12T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-975961 | SSA-975961: Privilege Escalation Vulnerabilities in SICAM TOOLBOX II before V07.10 | 2023-08-08T00:00:00Z | 2023-08-08T00:00:00Z |
| ssa-932528 | SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge | 2023-05-09T00:00:00Z | 2023-08-08T00:00:00Z |
| ssa-851884 | SSA-851884: Authentication Bypass Vulnerability in Mendix SAML Module | 2023-03-14T00:00:00Z | 2023-08-08T00:00:00Z |
| ssa-811403 | SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 | 2023-08-08T00:00:00Z | 2023-08-08T00:00:00Z |
| ssa-472630 | SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 | 2023-08-08T00:00:00Z | 2023-08-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:3500 | Red Hat Security Advisory: RHODF-4.17-RHEL-9 security update | 2025-04-01T19:42:34+00:00 | 2026-02-17T09:19:30+00:00 |
| rhsa-2025:3573 | Red Hat Security Advisory: OpenShift Container Platform 4.12.75 packages and security update | 2025-04-10T21:37:13+00:00 | 2026-02-17T09:19:29+00:00 |
| rhsa-2025:3560 | Red Hat Security Advisory: RHODF-4.14-RHEL-9 security update | 2025-04-03T05:09:02+00:00 | 2026-02-17T09:19:29+00:00 |
| rhsa-2025:3542 | Red Hat Security Advisory: RHODF-4.15-RHEL-9 security update | 2025-04-02T19:51:02+00:00 | 2026-02-17T09:19:28+00:00 |
| rhsa-2025:3502 | Red Hat Security Advisory: RHODF-4.16-RHEL-9 security update | 2025-04-01T21:25:57+00:00 | 2026-02-17T09:19:28+00:00 |
| rhsa-2025:3397 | Red Hat Security Advisory: RHOAI 2.16.0 - Red Hat OpenShift AI | 2025-03-31T08:04:43+00:00 | 2026-02-17T09:19:28+00:00 |
| rhsa-2025:3374 | Red Hat Security Advisory: Red Hat Developer Hub 1.5.1 release. | 2025-03-27T20:51:32+00:00 | 2026-02-17T09:19:27+00:00 |
| rhsa-2025:3368 | Red Hat Security Advisory: RHOAI 2.16.0 - Red Hat OpenShift AI | 2025-03-27T17:45:39+00:00 | 2026-02-17T09:19:27+00:00 |
| rhsa-2025:3132 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.6 | 2025-03-26T17:34:00+00:00 | 2026-02-17T09:19:26+00:00 |
| rhsa-2025:3131 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.1.4 | 2025-03-26T17:39:24+00:00 | 2026-02-17T09:19:26+00:00 |
| rhsa-2025:3069 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.14.3 security update | 2025-03-20T08:37:59+00:00 | 2026-02-17T09:19:25+00:00 |
| rhsa-2025:2933 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0 | 2025-03-17T12:53:03+00:00 | 2026-02-17T09:19:25+00:00 |
| rhsa-2025:2903 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0 | 2025-03-17T09:37:38+00:00 | 2026-02-17T09:19:24+00:00 |
| rhsa-2025:2710 | Red Hat Security Advisory: OpenShift Container Platform 4.14.49 bug fix and security update | 2025-03-19T20:54:49+00:00 | 2026-02-17T09:19:23+00:00 |
| rhsa-2025:2701 | Red Hat Security Advisory: OpenShift Container Platform 4.13.56 bug fix and security update | 2025-03-20T07:01:20+00:00 | 2026-02-17T09:19:23+00:00 |
| rhsa-2025:2700 | Red Hat Security Advisory: OpenShift Container Platform 4.13.56 security update | 2025-03-20T01:46:31+00:00 | 2026-02-17T09:19:23+00:00 |
| rhsa-2025:2658 | Red Hat Security Advisory: OpenShift Virtualization 4.15.9 Images | 2025-03-11T11:41:12+00:00 | 2026-02-17T09:19:23+00:00 |
| rhsa-2025:2652 | Red Hat Security Advisory: RHODF-4.18-RHEL-9 enhancement, bug fix and security update | 2025-03-11T09:16:21+00:00 | 2026-02-17T09:19:21+00:00 |
| rhsa-2025:2588 | Red Hat Security Advisory: RHOAI 2.18.0 - Red Hat OpenShift AI | 2025-03-10T23:41:31+00:00 | 2026-02-17T09:19:21+00:00 |
| rhsa-2025:2440 | Red Hat Security Advisory: OpenShift Container Platform 4.12.74 security and extras update | 2025-03-13T00:55:15+00:00 | 2026-02-17T09:19:21+00:00 |
| rhsa-2025:2449 | Red Hat Security Advisory: OpenShift Container Platform 4.18.4 security update | 2025-03-11T02:08:00+00:00 | 2026-02-17T09:19:20+00:00 |
| rhsa-2025:2441 | Red Hat Security Advisory: OpenShift Container Platform 4.12.74 bug fix and security update | 2025-03-13T16:28:27+00:00 | 2026-02-17T09:19:17+00:00 |
| rhsa-2025:2415 | Red Hat Security Advisory: Red Hat Insights for Runtimes security update | 2025-03-05T20:41:26+00:00 | 2026-02-17T09:19:17+00:00 |
| rhsa-2025:23207 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.5 security update | 2025-12-15T15:40:35+00:00 | 2026-02-17T09:19:15+00:00 |
| rhsa-2025:23206 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.3 security update | 2025-12-15T15:39:18+00:00 | 2026-02-17T09:19:14+00:00 |
| rhsa-2025:23203 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.2 security update | 2025-12-15T15:34:36+00:00 | 2026-02-17T09:19:13+00:00 |
| rhsa-2025:23064 | Red Hat Security Advisory: Red Hat Quay 3.10.17 | 2025-12-10T16:36:13+00:00 | 2026-02-17T09:19:13+00:00 |
| rhsa-2025:23061 | Red Hat Security Advisory: Red Hat Quay 3.9.17 | 2025-12-10T16:13:23+00:00 | 2026-02-17T09:19:12+00:00 |
| rhsa-2025:22287 | Red Hat Security Advisory: Red Hat Quay 3.9 | 2025-11-27T14:54:51+00:00 | 2026-02-17T09:19:10+00:00 |
| rhsa-2025:22182 | Red Hat Security Advisory: Red Hat Quay 3.10.16 | 2025-11-26T14:52:57+00:00 | 2026-02-17T09:19:10+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-226-18 | Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER | 2025-08-12T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-148-01 | Siemens SiPass | 2025-05-23T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-135-09 | Siemens User Management Component (UMC) | 2025-05-13T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-24-284-10 | Siemens SIMATIC S7-1500 CPUs | 2024-10-08T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-24-284-01 | Siemens SIMATIC S7-1500 and S7-1200 CPUs | 2024-10-08T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-24-256-03 | Siemens User Management Component (UMC) | 2024-09-10T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-252-08 | Rockwell Automation Analytics LogixAI | 2025-09-09T06:00:00.000000Z | 2025-10-10T06:00:00.000000Z |
| va-25-282-01 | Newforma Project Center multiple vulnerabilities | 2025-10-09T19:50:00Z | 2025-10-09T19:50:00Z |
| icsa-25-282-03 | Rockwell Automation Stratix | 2025-10-09T06:00:00.000000Z | 2025-10-09T06:00:00.000000Z |
| icsa-25-282-02 | Rockwell Automation Lifecycle Services with Cisco | 2025-10-09T06:00:00.000000Z | 2025-10-09T06:00:00.000000Z |
| va-25-280-01 | OPEXUS FOIAXpress stored XSS | 2025-10-07T22:50:29Z | 2025-10-07T22:50:29Z |
| icsa-25-226-31 | Rockwell Automation 1756-EN4TR, 1756-EN4TRXT (Update B) | 2025-08-14T06:00:00.000000Z | 2025-10-07T06:00:00.000000Z |
| icsa-25-275-01 | Raise3D Pro2 Series 3D Printers** | 2025-10-02T05:00:00.000000Z | 2025-10-02T05:00:00.000000Z |
| icsa-25-343-02 | Festo LX Appliance | 2023-08-29T10:00:00.000000Z | 2025-10-01T10:00:00.000000Z |
| icsa-25-324-04 | Festo MSE6-C2M/D2M/E2M | 2023-09-05T10:00:00.000000Z | 2025-10-01T10:00:00.000000Z |
| icsa-25-324-05 | Festo Didactic products | 2023-10-17T06:00:00.000000Z | 2025-10-01T06:00:00.000000Z |
| icsa-25-289-11 | Hitachi Energy MACH GWS | 2025-09-30T12:50:29.000000Z | 2025-09-30T12:50:29.000000Z |
| icsa-24-116-02 | Hitachi Energy MACH SCM (Update A) | 2024-03-26T11:32:43.000000Z | 2025-09-30T11:32:43.000000Z |
| icsa-25-275-02 | Hitachi Energy MSM | 2025-09-30T09:02:31.000000Z | 2025-09-30T09:02:31.000000Z |
| icsa-25-273-06 | National Instruments Circuit Design Suite | 2025-09-30T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-273-05 | OpenPLC_V3 | 2025-09-30T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-273-01 | MegaSys Enterprises Telenium Online Web Application | 2025-09-30T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-226-26 | Rockwell Automation FLEX 5000 I/O (Update A) | 2025-08-14T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-063-02 | Keysight Ixia Vision Product Family (Update A) | 2025-03-04T07:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-22-298-02 | HEIDENHAIN Controller TNC (Update A) | 2022-10-25T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-273-07 | LG Innotek Camera Multiple Models | 2025-09-30T05:00:00.000000Z | 2025-09-30T05:00:00.000000Z |
| va-25-273-01 | Microsoft Windows inconsistent driver blocking | 2025-09-30T00:00:00Z | 2025-09-30T00:00:00Z |
| va-25-272-01 | Medical Informatics Engineering Enterprise Health multiple vulnerabilities | 2025-09-29T00:00:00Z | 2025-09-29T00:00:00Z |
| icsa-25-268-01 | Dingtian DT-R002 | 2025-09-25T06:00:00.000000Z | 2025-09-25T06:00:00.000000Z |
| icsa-25-140-07 | Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL (Update A) | 2025-05-13T04:00:00.000000Z | 2025-09-24T04:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asa-ftd-priv-esc-hbs9gnwq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-fmc-code-inj-wshrgz8l | Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-10-23T15:57:47+00:00 |
| cisco-sa-ucsc-bkpsky-tgj5f73j | Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tax76u3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-vlan-dos-27pur5rt | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yj2osdhv | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qe33tcms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-fduf3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-jh4v6zpn | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-bk8vqedc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-t46k3jnn | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-bushlbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-uvyzrkfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-xvyx2wlj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ise-info-disc-zyf2neex | Cisco Identity Services Engine Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-expw-escalation-3bkz77bd | Cisco Expressway Series Privilege Escalation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-cimc-redfish-cominj-sbkv5zz | Cisco UCS B-Series, Managed C-Series, and X-Series Servers Redfish API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-webui-csrf-ycuyxkko | Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-utd-snort3-dos-bypas-b4ouewxd | Cisco Unified Threat Defense Snort Intrusion Prevention System Engine for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-sdwan-utd-dos-hdatqxs | Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-sdw-vedos-kqffhps3 | Cisco SD-WAN vEdge Software UDP Packet Validation Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-rsvp-dos-oypvgvzf | Cisco IOS and IOS XE Software Resource Reservation Protocol Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-repacl-9exgnbpd | Cisco IOS Software on Cisco Industrial Ethernet Series Switches Access Control List Bypass Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-pim-apbvfysj | Cisco IOS XE Software Protocol Independent Multicast Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-ios-xe-sda-edge-dos-mbcbg9k | Cisco IOS XE Software SD-Access Fabric Edge Node Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-ios-webui-hfwnrgk | Cisco IOS and IOS XE Software Web UI Cross-Site Request Forgery Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-httpsrvr-dos-yozthut | Cisco IOS XE Software HTTP Server Telephony Services Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-dnac-ssh-e4uodasj | Cisco Catalyst Center Static SSH Host Key Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-cpp-vfr-dos-nhhkggo | Cisco IOS XE Software IPv4 Fragmentation Reassembly Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-c9800-cwa-acl-npsbhsna | Cisco IOS XE Software for Wireless Controllers CWA Pre-Authentication ACL Bypass Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-23213 | drm/amd/pm: Disable MMIO access during SMU Mode 1 reset | 2026-02-02T00:00:00.000Z | 2026-02-21T04:26:43.000Z |
| msrc_cve-2025-3770 | SMM IDT Privilege Escalation Vulnerability | 2025-08-02T00:00:00.000Z | 2026-02-21T04:26:39.000Z |
| msrc_cve-2025-71228 | LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED | 2026-02-02T00:00:00.000Z | 2026-02-21T04:26:37.000Z |
| msrc_cve-2025-71133 | RDMA/irdma: avoid invalid read in irdma_net_event | 2026-01-02T00:00:00.000Z | 2026-02-21T04:26:01.000Z |
| msrc_cve-2025-8534 | libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference | 2025-08-02T00:00:00.000Z | 2026-02-21T04:25:59.000Z |
| msrc_cve-2025-54351 | In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv). | 2025-08-02T00:00:00.000Z | 2026-02-21T04:25:41.000Z |
| msrc_cve-2025-38660 | [ceph] parse_longname(): strrchr() expects NUL-terminated string | 2025-08-02T00:00:00.000Z | 2026-02-21T04:25:40.000Z |
| msrc_cve-2025-54349 | In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. | 2025-08-02T00:00:00.000Z | 2026-02-21T04:25:22.000Z |
| msrc_cve-2025-71101 | platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing | 2026-01-02T00:00:00.000Z | 2026-02-21T04:25:15.000Z |
| msrc_cve-2025-54350 | In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. | 2025-08-02T00:00:00.000Z | 2026-02-21T04:24:59.000Z |
| msrc_cve-2025-68786 | ksmbd: skip lock-range check on equal size to avoid size==0 underflow | 2026-01-02T00:00:00.000Z | 2026-02-21T04:24:47.000Z |
| msrc_cve-2025-1795 | Mishandling of comma during folding and unicode-encoding of email headers | 2025-02-02T00:00:00.000Z | 2026-02-21T04:24:37.000Z |
| msrc_cve-2025-68771 | ocfs2: fix kernel BUG in ocfs2_find_victim_chain | 2026-01-02T00:00:00.000Z | 2026-02-21T04:24:13.000Z |
| msrc_cve-2025-4877 | Libssh: write beyond bounds in binary to base64 conversion functions | 2025-08-02T00:00:00.000Z | 2026-02-21T04:23:45.000Z |
| msrc_cve-2023-53158 | The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit. | 2025-07-02T00:00:00.000Z | 2026-02-21T04:23:43.000Z |
| msrc_cve-2025-71074 | functionfs: fix the open/removal races | 2026-01-02T00:00:00.000Z | 2026-02-21T04:23:33.000Z |
| msrc_cve-2023-53159 | The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host. | 2025-07-02T00:00:00.000Z | 2026-02-21T04:23:18.000Z |
| msrc_cve-2025-71081 | ASoC: stm32: sai: fix OF node leak on probe | 2026-01-02T00:00:00.000Z | 2026-02-21T04:22:25.000Z |
| msrc_cve-2024-58266 | The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection. | 2025-07-02T00:00:00.000Z | 2026-02-21T04:22:24.000Z |
| msrc_cve-2025-40215 | xfrm: delete x->tunnel as we delete x | 2025-12-02T00:00:00.000Z | 2026-02-21T04:21:50.000Z |
| msrc_cve-2025-4056 | Glib: glib crash after long command line | 2025-07-02T00:00:00.000Z | 2026-02-21T04:21:13.000Z |
| msrc_cve-2025-71105 | f2fs: use global inline_xattr_slab instead of per-sb slab cache | 2026-01-02T00:00:00.000Z | 2026-02-21T04:21:09.000Z |
| msrc_cve-2025-13837 | Out-of-memory when loading Plist | 2025-12-02T00:00:00.000Z | 2026-02-21T04:20:53.000Z |
| msrc_cve-2025-38615 | fs/ntfs3: cancle set bad inode after removing name fails | 2025-08-02T00:00:00.000Z | 2026-02-21T04:20:48.000Z |
| msrc_cve-2024-48916 | Ceph is vulnerable to authentication bypass through RadosGW | 2025-07-02T00:00:00.000Z | 2026-02-21T04:20:33.000Z |
| msrc_cve-2025-71064 | net: hns3: using the num_tqps in the vf driver to apply for resources | 2026-01-02T00:00:00.000Z | 2026-02-21T04:20:16.000Z |
| msrc_cve-2025-38584 | padata: Fix pd UAF once and for all | 2025-08-02T00:00:00.000Z | 2026-02-21T04:19:45.000Z |
| msrc_cve-2025-38498 | do_change_type(): refuse to operate on unmounted/not ours mounts | 2025-07-02T00:00:00.000Z | 2026-02-21T04:19:45.000Z |
| msrc_cve-2025-7458 | SQLite integer overflow in key info allocation may lead to information disclosure. | 2025-07-02T00:00:00.000Z | 2026-02-21T04:19:16.000Z |
| msrc_cve-2025-71122 | iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED | 2026-01-02T00:00:00.000Z | 2026-02-21T04:19:03.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201804-1149 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2025-12-22T22:56:50.365000Z |
| var-202206-1186 | Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may all… | 2025-12-22T22:55:16.251000Z |
| var-201804-1185 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2025-12-22T22:55:15.903000Z |
| var-201109-0209 | Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) t… | 2025-12-22T22:55:15.389000Z |
| var-200701-0156 | Integer overflow in the byte_swap_sbin function in bsd/ufs/ufs/ufs_byte_order.c in Mac OS… | 2025-12-22T22:55:14.806000Z |
| var-201811-0912 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit softwa… | 2025-12-22T22:55:14.343000Z |
| var-202008-1140 | In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> … | 2025-12-22T22:55:02.218000Z |
| var-202104-1571 | A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lea… | 2025-12-22T22:54:50.569000Z |
| var-201904-1473 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T22:54:46.436000Z |
| var-200704-0225 | Buffer overflow in the AirPortDriver module for AirPort in Apple Mac OS X 10.3.9 through … | 2025-12-22T22:54:40.539000Z |
| var-202107-1361 | fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly res… | 2025-12-22T22:53:38.711000Z |
| var-200505-0350 | The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an ap… | 2025-12-22T22:53:38.390000Z |
| var-201210-0267 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:53:37.280000Z |
| var-201302-0406 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:53:36.765000Z |
| var-201912-1848 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T22:53:01.637000Z |
| var-201408-0300 | Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap… | 2025-12-22T22:52:41.795000Z |
| var-201912-0509 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T22:52:41.462000Z |
| var-200408-0145 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequen… | 2025-12-22T22:51:38.200000Z |
| var-202006-1806 | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression… | 2025-12-22T22:51:26.528000Z |
| var-201804-1188 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2025-12-22T22:51:26.276000Z |
| var-201605-0078 | The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote a… | 2025-12-22T22:51:25.570000Z |
| var-200610-0022 | User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 a… | 2025-12-22T22:51:19.217000Z |
| var-200701-0124 | The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users… | 2025-12-22T22:51:18.575000Z |
| var-201912-0648 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T22:51:17.375000Z |
| var-202210-1530 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 1… | 2025-12-22T22:51:15.937000Z |
| var-201603-0222 | The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denia… | 2025-12-22T22:51:15.660000Z |
| var-201912-0624 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T22:50:54.806000Z |
| var-202205-2059 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. Vim is a cross-platform te… | 2025-12-22T22:49:48.637000Z |
| var-200902-0880 | International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in A… | 2025-12-22T22:49:48.376000Z |
| var-202212-1523 | The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2… | 2025-12-22T22:49:42.660000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-011747 | Command injection vulnerability in Trend Micro Cloud Edge | 2024-11-01T14:28+09:00 | 2024-11-01T14:28+09:00 |
| jvndb-2024-011744 | REST-APIs unintentionally enabled in Century Systems FutureNet NXR series routers | 2024-11-01T13:49+09:00 | 2024-11-01T13:49+09:00 |
| jvndb-2024-000116 | Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials | 2024-10-30T15:07+09:00 | 2024-10-30T15:07+09:00 |
| jvndb-2024-011256 | Multiple vulnerabilities in Sharp and Toshiba Tec MFPs | 2024-10-28T17:33+09:00 | 2024-10-28T17:33+09:00 |
| jvndb-2024-000115 | Chatwork Desktop Application (Windows) uses a potentially dangerous function | 2024-10-28T14:29+09:00 | 2024-10-28T14:29+09:00 |
| jvndb-2024-000112 | MUSASI version 3 performing authentication on client-side | 2024-10-18T14:40+09:00 | 2024-10-25T16:55+09:00 |
| jvndb-2024-000113 | N-LINE vulnerable to HTML injection | 2024-10-18T14:48+09:00 | 2024-10-25T16:48+09:00 |
| jvndb-2024-004623 | Multiple products from Check Point Software Technologies vulnerable to information disclosure | 2024-07-29T10:23+09:00 | 2024-10-24T16:37+09:00 |
| jvndb-2024-000111 | SHIRASAGI vulnerable to path traversal | 2024-10-16T14:12+09:00 | 2024-10-23T17:35+09:00 |
| jvndb-2024-010802 | Multiple SQL injection vulnerabilities in Trend Micro Deep Discovery Inspector | 2024-10-22T13:02+09:00 | 2024-10-22T13:02+09:00 |
| jvndb-2024-000102 | Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions | 2024-09-24T16:00+09:00 | 2024-10-18T11:02+09:00 |
| jvndb-2024-000110 | Multiple vulnerabilities in Exment | 2024-10-11T14:13+09:00 | 2024-10-11T14:13+09:00 |
| jvndb-2024-000104 | MF Teacher Performance Management System vulnerable to cross-site scripting | 2024-09-27T15:00+09:00 | 2024-10-10T11:14+09:00 |
| jvndb-2024-009667 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2024-10-03T13:42+09:00 | 2024-10-03T13:42+09:00 |
| jvndb-2024-000108 | Apache Tomcat improper handling of TLS handshake process data | 2024-10-01T17:51+09:00 | 2024-10-01T17:51+09:00 |
| jvndb-2024-009498 | Vulnerability in Cosminexus | 2024-10-01T16:01+09:00 | 2024-10-01T16:01+09:00 |
| jvndb-2024-000107 | RevoWorks Cloud vulnerable to unintended process execution | 2024-09-30T15:17+09:00 | 2024-09-30T15:17+09:00 |
| jvndb-2024-003932 | File Permissions Vulnerability in Hitachi Ops Center Common Services | 2024-09-30T14:15+09:00 | 2024-09-30T14:15+09:00 |
| jvndb-2024-000105 | Multiple vulnerabilities in Smart-tab | 2024-09-30T14:14+09:00 | 2024-09-30T14:14+09:00 |
| jvndb-2024-009396 | SNMP service is enabled by default in Sharp NEC Display Solutions projectors | 2024-09-30T12:46+09:00 | 2024-09-30T12:46+09:00 |
| jvndb-2024-003049 | Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12 | 2024-04-01T12:31+09:00 | 2024-09-25T13:51+09:00 |
| jvndb-2024-000089 | WindLDR and WindO/I-NV4 store sensitive information in cleartext | 2024-08-29T15:08+09:00 | 2024-09-24T17:14+09:00 |
| jvndb-2024-000103 | The installer of e-Tax software(common program) vulnerable to privilege escalation | 2024-09-24T16:12+09:00 | 2024-09-24T16:12+09:00 |
| jvndb-2024-000101 | Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices | 2024-09-24T15:26+09:00 | 2024-09-24T15:26+09:00 |
| jvndb-2024-003068 | Multiple vulnerabilities in Cente middleware | 2024-04-05T15:36+09:00 | 2024-09-24T15:00+09:00 |
| jvndb-2024-008391 | Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders | 2024-09-19T14:07+09:00 | 2024-09-19T14:07+09:00 |
| jvndb-2024-000100 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2024-09-18T14:34+09:00 | 2024-09-18T14:34+09:00 |
| jvndb-2024-000099 | Assimp vulnerable to heap-based buffer overflow | 2024-09-18T14:20+09:00 | 2024-09-18T14:20+09:00 |
| jvndb-2020-018328 | Falsification and eavesdropping of contents across multiple websites via Web Rehosting services | 2024-09-12T12:23+09:00 | 2024-09-12T12:23+09:00 |
| jvndb-2023-027250 | Security Problem in Web Browser Permission Mechanism | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0243-1 | Security update for librsvg | 2026-01-22T13:57:37Z | 2026-01-22T13:57:37Z |
| suse-su-2026:20123-1 | Security update for buildah | 2026-01-22T13:01:23Z | 2026-01-22T13:01:23Z |
| suse-su-2026:20122-1 | Security update for go1.24 | 2026-01-22T12:53:24Z | 2026-01-22T12:53:24Z |
| suse-su-2026:0238-1 | Security update for dpdk | 2026-01-22T12:26:26Z | 2026-01-22T12:26:26Z |
| suse-su-2026:0237-1 | Security update for wireshark | 2026-01-22T12:26:09Z | 2026-01-22T12:26:09Z |
| suse-su-2026:0236-1 | Security update for busybox | 2026-01-22T12:25:35Z | 2026-01-22T12:25:35Z |
| suse-su-2026:0235-1 | Security update for busybox | 2026-01-22T12:25:06Z | 2026-01-22T12:25:06Z |
| suse-su-2026:0234-1 | Security update for libpng16 | 2026-01-22T12:24:45Z | 2026-01-22T12:24:45Z |
| suse-su-2026:0233-1 | Security update for python-virtualenv | 2026-01-22T12:24:32Z | 2026-01-22T12:24:32Z |
| suse-su-2026:0232-1 | Security update for pgadmin4 | 2026-01-22T12:24:10Z | 2026-01-22T12:24:10Z |
| suse-su-2026:0231-1 | Security update for exiv2-0_26 | 2026-01-22T12:22:53Z | 2026-01-22T12:22:53Z |
| suse-su-2026:0230-1 | Security update for util-linux | 2026-01-22T12:22:40Z | 2026-01-22T12:22:40Z |
| suse-su-2026:0229-1 | Security update for ffmpeg-4 | 2026-01-22T12:22:22Z | 2026-01-22T12:22:22Z |
| suse-su-2026:0228-1 | Security update for net-snmp | 2026-01-22T12:21:52Z | 2026-01-22T12:21:52Z |
| suse-su-2026:0227-1 | Security update for net-snmp | 2026-01-22T12:21:35Z | 2026-01-22T12:21:35Z |
| suse-su-2026:0226-1 | Security update for python-marshmallow | 2026-01-22T12:20:21Z | 2026-01-22T12:20:21Z |
| suse-su-2026:0225-1 | Security update for net-snmp | 2026-01-22T12:19:54Z | 2026-01-22T12:19:54Z |
| suse-su-2026:0224-1 | Security update for libtasn1 | 2026-01-22T12:18:33Z | 2026-01-22T12:18:33Z |
| suse-su-2026:0223-1 | Security update for libsodium | 2026-01-22T12:18:02Z | 2026-01-22T12:18:02Z |
| suse-su-2026:0222-1 | Security update for python-tornado | 2026-01-22T12:16:49Z | 2026-01-22T12:16:49Z |
| suse-su-2026:0221-1 | Security update for curl | 2026-01-22T12:15:38Z | 2026-01-22T12:15:38Z |
| suse-su-2026:0220-1 | Security update for python-filelock | 2026-01-22T12:15:26Z | 2026-01-22T12:15:26Z |
| suse-su-2026:0219-1 | Security update for go1.24 | 2026-01-22T12:13:47Z | 2026-01-22T12:13:47Z |
| suse-su-2026:0218-1 | Security update for go1.25 | 2026-01-22T12:12:47Z | 2026-01-22T12:12:47Z |
| suse-su-2026:0217-1 | Security update for keylime | 2026-01-22T12:11:40Z | 2026-01-22T12:11:40Z |
| suse-su-2026:0216-1 | Security update for kernel-firmware | 2026-01-22T12:11:01Z | 2026-01-22T12:11:01Z |
| suse-su-2026:0215-1 | Security update for gpg2 | 2026-01-22T12:10:17Z | 2026-01-22T12:10:17Z |
| suse-su-2026:0214-1 | Security update for gpg2 | 2026-01-22T12:09:32Z | 2026-01-22T12:09:32Z |
| suse-su-2026:0213-1 | Security update for ovmf | 2026-01-22T12:08:49Z | 2026-01-22T12:08:49Z |
| suse-su-2026:0212-1 | Security update for ovmf | 2026-01-22T12:08:32Z | 2026-01-22T12:08:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:20013-1 | Security update for avahi | 2026-01-11T16:54:00Z | 2026-01-11T16:54:00Z |
| opensuse-su-2026:20020-1 | Security update for chromium | 2026-01-10T02:17:54Z | 2026-01-10T02:17:54Z |
| opensuse-su-2026:10026-1 | python311-urllib3-2.6.2-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10025-1 | python311-aiohttp-3.13.3-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10024-1 | libsoup-2_4-1-2.74.3-13.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10023-1 | libsoup-3_0-0-3.6.5-10.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10022-1 | libsodium-devel-1.0.21-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10021-1 | coredns-1.14.0-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-ru-2026:20010-1 | Recommended update for trivy | 2026-01-08T14:37:24Z | 2026-01-08T14:37:24Z |
| opensuse-su-2026:10020-1 | traefik-3.6.6-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10019-1 | gdk-pixbuf-loader-libheif-1.21.1-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10018-1 | gimp-3.0.6-4.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10017-1 | curl-8.18.0-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10016-1 | chromedriver-143.0.7499.192-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:20003-1 | Security update of valkey | 2026-01-07T09:43:28Z | 2026-01-07T09:43:28Z |
| opensuse-su-2026:10015-1 | libwget4-2.2.1-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10014-1 | python311-cbor2-5.8.0-2.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10013-1 | apptainer-1.4.5-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10012-1 | ImageMagick-7.1.2.12-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10011-1 | python314-3.14.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10010-1 | python311-filelock-3.20.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10009-1 | log4j-2.20.0-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10008-1 | gpsd-3.27.3-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10007-1 | c-ares-devel-1.34.6-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10006-1 | dcmtk-3.7.0-1.1 on GA media | 2026-01-05T00:00:00Z | 2026-01-05T00:00:00Z |
| opensuse-su-2026:10005-1 | python312-Django6-6.0-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:10004-1 | fluidsynth-2.5.2-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:20001-1 | Security update for sssd | 2026-01-02T16:58:16Z | 2026-01-02T16:58:16Z |
| opensuse-su-2026:20002-1 | Security update for MozillaThunderbird | 2026-01-02T12:14:18Z | 2026-01-02T12:14:18Z |
| opensuse-su-2026:10003-1 | python311-marshmallow-3.26.2-1.1 on GA media | 2026-01-02T00:00:00Z | 2026-01-02T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-virtualenv-2026-22702 | virtualenv Has TOCTOU Vulnerabilities in Directory Creation | 2026-01-13T08:53:06.703Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-3950 | Exposure of Private Personal Information to an Unauthorized Actor in GitLab | 2026-01-13T09:08:23.763Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-13781 | Missing Authorization in GitLab | 2026-01-13T09:07:23.273Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-11246 | Insufficient Granularity of Access Control in GitLab | 2026-01-13T09:06:35.458Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-10569 | Allocation of Resources Without Limits or Throttling in GitLab | 2026-01-13T09:06:21.471Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22597 | Ghost has SSRF via External Media Inliner | 2026-01-13T08:40:27.429Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22595 | Ghost has Staff Token permission bypass | 2026-01-13T08:40:23.758Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22594 | Ghost has Staff 2FA bypass | 2026-01-13T08:40:22.071Z | 2026-01-13T09:11:00.781Z |
| bit-cosign-2026-22703 | Cosign verification accepts any valid Rekor entry under certain conditions | 2026-01-13T08:37:37.120Z | 2026-01-13T09:11:00.781Z |
| bit-drupal-2025-13083 | Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 | 2025-11-25T17:56:46.824Z | 2026-01-10T12:08:11.327Z |
| bit-parse-2025-68150 | Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter | 2025-12-18T11:46:18.950Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-68115 | Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables | 2025-12-18T11:46:17.211Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-67727 | Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management | 2025-12-18T11:46:15.637Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-64502 | Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details | 2025-11-12T11:45:03.650Z | 2026-01-08T18:07:34.629Z |
| bit-openldap-2021-27212 | 2024-03-06T11:00:07.978Z | 2026-01-08T18:07:34.629Z | |
| bit-mongodb-2025-13644 | MongoDB may be susceptible to Invariant Failure due to batched delete | 2025-12-12T11:19:13.963Z | 2026-01-08T18:07:34.629Z |
| bit-mongodb-2025-13643 | MongoDB Server may allow queries to be terminated by unauthorized users | 2025-12-12T11:19:08.903Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-67500 | Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration | 2025-12-11T11:41:16.693Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62605 | Mastodon quotes control can be bypassed | 2025-10-23T08:44:09.997Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62176 | Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels | 2025-10-15T08:44:06.235Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62175 | Mastodon streaming API fails to disconnect disabled and suspended users | 2025-10-15T08:44:04.530Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62174 | Mastodon allows continued access after password reset via CLI | 2025-10-15T08:44:02.890Z | 2026-01-08T18:07:34.629Z |
| bit-lua-2020-24370 | 2024-03-06T10:56:50.799Z | 2026-01-08T18:07:34.629Z | |
| bit-kyverno-2025-46342 | Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements | 2025-09-12T11:43:04.352Z | 2026-01-08T18:07:34.629Z |
| bit-kyverno-2025-29778 | Kyverno ignores subjectRegExp and IssuerRegExp | 2025-09-12T11:43:02.825Z | 2026-01-08T18:07:34.629Z |
| bit-discourse-2025-64528 | Users are able to find users by name even when `enable_names` is off | 2026-01-08T11:40:33.666Z | 2026-01-08T18:07:34.629Z |
| bit-wordpress-2024-31210 | PHP file upload bypass via Plugin installer | 2024-04-06T18:33:59.181Z | 2026-01-08T12:08:29.041Z |
| bit-php-2025-14180 | NULL Pointer Dereference in PDO quoting | 2026-01-08T11:48:33.482Z | 2026-01-08T12:08:29.041Z |
| bit-php-2025-14177 | Information Leak of Memory in getimagesize | 2026-01-08T11:48:30.537Z | 2026-01-08T12:08:29.041Z |
| bit-libphp-2025-14180 | NULL Pointer Dereference in PDO quoting | 2026-01-08T11:43:29.868Z | 2026-01-08T12:08:29.041Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-gj12884 | Within HostnameError | 2026-01-30T16:31:25.827659Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gc72145 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:09:23.061580Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gc16599 | Cancelling a query (e | 2026-01-30T15:46:54.243517Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fz95989 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:40:52.734894Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fw42039 | vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT | 2026-01-30T17:19:56.954092Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fs64938 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:24:53.185811Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fr57243 | Cancelling a query (e | 2026-01-30T14:52:52.746706Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fr00621 | Redis is an open source, in-memory database that persists on disk | 2026-01-30T14:36:52.496829Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fp29743 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:37:25.443687Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fn26367 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:10:23.074072Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fn12833 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) | 2026-01-30T16:25:25.422564Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fm00685 | Cancelling a query (e | 2026-01-30T15:07:53.091254Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fj56296 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:45:23.960354Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fd27182 | Cancelling a query (e | 2026-01-30T15:02:52.949683Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ez98723 | Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ... | 2026-01-30T14:21:51.714006Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ez55127 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:54:23.021613Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ew68942 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:53:53.713652Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-er42900 | ParseAddress function constructs domain-literal address components through repeated string concatenation | 2026-01-30T15:41:23.817747Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-el98016 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:23:23.257385Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ek72220 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:24:55.137022Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ej58111 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:50:24.547860Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dy37532 | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability | 2026-01-30T15:36:23.811582Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dv06422 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:40:54.415037Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dp30290 | processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input | 2026-01-30T15:52:54.729374Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-do68350 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:50:22.886394Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-do54415 | Within HostnameError | 2026-01-30T15:33:23.703184Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dn37053 | Within HostnameError | 2026-01-30T16:30:25.711037Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dn29911 | attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing | 2026-01-30T16:57:26.436107Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dj71086 | PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access | 2026-01-30T16:26:55.342548Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-di91874 | Cancelling a query (e | 2026-01-30T15:02:23.274144Z | 2026-01-29T18:58:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| drupal-contrib-2019-033 | 2019-03-06T18:16:22.000Z | 2023-08-11T18:50:05.000Z | |
| drupal-contrib-2019-030 | 2019-02-27T17:28:36.000Z | 2023-08-11T18:48:35.000Z | |
| drupal-contrib-2019-046 | 2019-05-15T17:07:58.000Z | 2023-08-11T18:46:39.000Z | |
| drupal-contrib-2019-039 | 2019-03-20T13:26:14.000Z | 2023-08-11T18:43:25.000Z | |
| drupal-contrib-2019-055 | 2019-07-10T16:30:00.000Z | 2023-08-11T18:39:41.000Z | |
| drupal-contrib-2019-050 | 2019-05-22T16:29:17.000Z | 2023-08-11T18:37:20.000Z | |
| drupal-contrib-2019-048 | 2019-05-15T17:13:59.000Z | 2023-08-11T18:36:19.000Z | |
| drupal-contrib-2019-047 | 2019-05-15T17:09:57.000Z | 2023-08-11T18:35:51.000Z | |
| drupal-contrib-2019-066 | 2019-09-18T15:07:56.000Z | 2023-08-11T18:34:46.000Z | |
| drupal-contrib-2019-065 | 2019-08-21T14:52:51.000Z | 2023-08-11T18:34:31.000Z | |
| drupal-contrib-2019-064 | 2019-08-14T17:33:20.000Z | 2023-08-11T18:34:14.000Z | |
| drupal-contrib-2019-063 | 2019-08-14T17:26:13.000Z | 2023-08-11T18:33:56.000Z | |
| drupal-contrib-2019-062 | 2019-08-14T17:14:00.000Z | 2023-08-11T18:33:31.000Z | |
| drupal-contrib-2019-060 | 2019-07-24T17:36:23.000Z | 2023-08-11T18:32:38.000Z | |
| drupal-contrib-2019-058 | 2019-07-24T16:31:19.000Z | 2023-08-11T18:32:08.000Z | |
| drupal-contrib-2019-075 | 2019-11-06T16:10:25.000Z | 2023-08-11T18:30:06.000Z | |
| drupal-contrib-2019-074 | 2019-10-16T16:09:20.000Z | 2023-08-11T18:28:44.000Z | |
| drupal-contrib-2019-071 | 2019-10-02T16:29:46.000Z | 2023-08-11T18:27:09.000Z | |
| drupal-contrib-2019-069 | 2019-09-25T14:55:33.000Z | 2023-08-11T18:26:25.000Z | |
| drupal-contrib-2019-068 | 2019-09-25T14:43:49.000Z | 2023-08-11T18:25:53.000Z | |
| drupal-contrib-2019-067 | 2019-09-18T15:17:32.000Z | 2023-08-11T18:24:28.000Z | |
| drupal-contrib-2019-078 | 2019-11-13T18:02:43.000Z | 2023-08-11T18:22:43.000Z | |
| drupal-contrib-2019-081 | 2019-11-13T18:04:58.000Z | 2023-08-11T18:22:08.000Z | |
| drupal-contrib-2019-092 | 2019-12-11T18:20:59.000Z | 2023-08-11T18:16:26.000Z | |
| drupal-contrib-2019-093 | 2019-12-11T18:32:17.000Z | 2023-08-11T18:16:07.000Z | |
| drupal-contrib-2019-094 | 2019-12-11T18:38:32.000Z | 2023-08-11T18:15:45.000Z | |
| drupal-contrib-2019-095 | 2019-12-11T18:59:46.000Z | 2023-08-11T18:15:27.000Z | |
| drupal-contrib-2019-089 | 2019-11-13T18:10:23.000Z | 2023-08-11T18:14:07.000Z | |
| drupal-contrib-2020-010 | 2020-04-15T15:45:46.000Z | 2023-08-11T18:01:50.000Z | |
| drupal-contrib-2020-008 | 2020-03-25T18:05:38.000Z | 2023-08-11T18:00:53.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-08438 | iccDEV ToXmlCurve函数类型混淆漏洞 | 2026-01-14 | 2026-01-26 |
| cnvd-2026-08437 | iccDEV CIccSegmentedCurveXml::ToXml函数类型混淆漏洞 | 2026-01-14 | 2026-01-26 |
| cnvd-2026-08436 | iccDEV icStatusCMM::CIccEvalCompare::EvaluateProfile函数类型混淆漏洞 | 2026-01-14 | 2026-01-26 |
| cnvd-2026-08435 | iccDEV CIccSingleSampledeCurveXml类的类型混淆漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08429 | iccDEV Unicode缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08428 | iccDEV CIccTagText::Read函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08427 | iccDEV CIccTagLut8::Validate函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08426 | iccDEV CIccTagLut16::Validate函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08425 | iccDEV CIccSparseMatrix::CIccSparseMatrix函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08424 | iccDEV CIccProfile::LoadTag函数输入验证不当漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08423 | iccDEV CIccMBB::Validate函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08422 | iccDEV CIccCalculatorFunc::SequenceNeedTempReset函数越界读取漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08421 | iccDEV ICC颜色配置文件未定义行为漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08420 | iccDEV计算器解析器堆栈缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08419 | iccDEV CIccProfileXml::ParseBasic函数空指针取消引用漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07952 | iccDEV未知标签解析器空指针取消引用漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07951 | iccDEV ICC色彩配置文件空指针取消引用漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07950 | iccDEV数字错误漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07949 | iccDEV CIccTagLutAtoB::Validate函数未定义行为漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07948 | iccDEV CIccTagLut16::Read函数未定义行为漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07947 | iccDEV XML计算器宏扩展堆栈缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07946 | iccDEV XML标签解析器空指针引用漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07945 | iccDEV CIccTagSpectralViewingConditions函数未定义行为漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07944 | iccDEV签名解析器空指针引用漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07943 | iccDEV无效枚举值漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07942 | iccDEV XML计算器解析器空指针取消引用漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07941 | iccDEV CIccTagCurve::CIccTagCurve函数未定义行为漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07940 | iccDEV CIccTagSparseMatrixArray空指针引用漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07939 | iccDEV XML解析器空指针引用漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07938 | iccDEV ToneMap解析器堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1107 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1106 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1105 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1104 | Vulnérabilité dans Microsoft Windows Admin Center | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1102 | Multiples vulnérabilités dans les produits NetApp | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1101 | Multiples vulnérabilités dans les produits Netgate | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1100 | Multiples vulnérabilités dans les produits Atlassian | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1099 | Multiples vulnérabilités dans les produits Mozilla | 2025-12-11T00:00:00.000000 | 2025-12-11T00:00:00.000000 |
| certfr-2025-avi-1098 | Vulnérabilité dans Broadcom Carbon Black Cloud | 2025-12-11T00:00:00.000000 | 2025-12-11T00:00:00.000000 |
| certfr-2025-avi-1095 | Multiples vulnérabilités dans GitLab | 2025-12-11T00:00:00.000000 | 2025-12-11T00:00:00.000000 |
| certfr-2025-avi-1094 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1093 | Vulnérabilité dans Microsoft Azure Monitor Agent | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1092 | Multiples vulnérabilités dans Microsoft Windows | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1091 | Multiples vulnérabilités dans Microsoft Office | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1090 | Vulnérabilité dans les produits Moxa | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1089 | Vulnérabilité dans les produits Bitdefender | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1088 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1087 | Multiples vulnérabilités dans les produits Mozilla | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1086 | Multiples vulnérabilités dans les produits Intel | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1085 | Multiples vulnérabilités dans les produits Adobe | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1084 | Multiples vulnérabilités dans les produits Fortinet | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1083 | Multiples vulnérabilités dans les produits Siemens | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1082 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1081 | Vulnérabilité dans Citrix XenServer | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1080 | Multiples vulnérabilités dans VMware Tanzu RabbitMQ | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1079 | Multiples vulnérabilités dans les produits SAP | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1078 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2025-avi-1077 | Multiples vulnérabilités dans Traefik | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2024-avi-1026 | Multiples vulnérabilités dans les produits Synology | 2024-11-28T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2025-avi-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-ale-007 | Vulnérabilité de Microsoft Windows Explorer | 2007-03-09T00:00:00.000000 | 2008-10-09T00:00:00.000000 |
| certa-2006-ale-012 | Vulnérabilité de Microsoft PowerPoint | 2006-10-13T00:00:00.000000 | 2008-10-09T00:00:00.000000 |
| certa-2007-ale-005 | Vulnérabilité de Sun Solaris | 2007-02-12T00:00:00.000000 | 2008-09-18T00:00:00.000000 |
| certa-2008-ale-010 | Vulnérabilité dans Microsoft Word | 2008-07-09T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-ale-009 | Vulnérabilité dans Microsoft Access Snapshot Viewer | 2008-07-08T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-ale-011 | Vulnérabilité dans Oracle BEA WebLogic Server | 2008-07-24T00:00:00.000000 | 2008-08-08T00:00:00.000000 |
| certa-2008-ale-008 | Vulnérabilité du navigateur Safari | 2008-06-02T00:00:00.000000 | 2008-06-20T00:00:00.000000 |
| certa-2008-ale-007 | Multiples vulnérabilités dans Apple iCal | 2008-05-23T00:00:00.000000 | 2008-05-29T00:00:00.000000 |
| certa-2008-ale-005 | Vulnérabilité dans Microsoft Jet Database Engine | 2008-03-25T00:00:00.000000 | 2008-05-14T00:00:00.000000 |
| certa-2008-ale-004 | Vulnérabilité dans VMware | 2008-02-27T00:00:00.000000 | 2008-04-16T00:00:00.000000 |
| certa-2008-ale-003 | Vulnérabilité dans Excel | 2008-01-16T00:00:00.000000 | 2008-03-12T00:00:00.000000 |
| certa-2008-ale-002 | Vulnérabilité dans Joomla! | 2008-01-14T00:00:00.000000 | 2008-02-25T00:00:00.000000 |
| certa-2008-ale-001 | Vulnérabilité dans Apple QuickTime | 2008-01-11T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2007-ale-017 | Vulnérabilité dans la gestion RTSP d'Apple QuickTime | 2007-11-27T00:00:00.000000 | 2007-12-14T00:00:00.000000 |
| certa-2007-ale-016 | Vulnérabilité d'Oracle 10g | 2007-11-16T00:00:00.000000 | 2007-11-16T00:00:00.000000 |
| certa-2007-ale-015 | Vulnérabilité dans le traitement des URI sous Windows | 2007-10-10T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-ale-014 | Vulnérabilité dans Apple QuickTime | 2007-09-13T00:00:00.000000 | 2007-10-12T00:00:00.000000 |
| certa-2007-ale-013 | Vulnérabilité dans Mozilla Firefox | 2007-07-27T00:00:00.000000 | 2007-07-31T00:00:00.000000 |
| certa-2007-ale-012 | Multiples vulnérabilités dans Mozilla Firefox | 2007-06-06T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-ale-010 | Vulnérabilité de Microsoft DNS Server | 2007-04-16T00:00:00.000000 | 2007-05-09T00:00:00.000000 |
| certa-2007-ale-006 | Vulnérabilité dans le logiciel Microsoft Word | 2007-02-16T00:00:00.000000 | 2007-05-09T00:00:00.000000 |
| certa-2007-ale-009 | Vulnérabilité dans BrightStor ARCServe Backup | 2007-03-30T00:00:00.000000 | 2007-04-27T00:00:00.000000 |
| certa-2007-ale-008 | Vulnérabilité dans Mirosoft Windows | 2007-03-29T00:00:00.000000 | 2007-04-03T00:00:00.000000 |
| certa-2007-ale-002 | Vulnérabilité dans Windows | 2007-01-12T00:00:00.000000 | 2007-04-03T00:00:00.000000 |
| certa-2006-ale-013 | Vulnérabilité de MacOS X | 2006-11-23T00:00:00.000000 | 2007-02-16T00:00:00.000000 |
| certa-2006-ale-014 | Vulnérabilités dans Microsoft Word | 2006-12-06T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2007-ale-004 | Vulnérabilité dans Microsoft Office | 2007-02-03T00:00:00.000000 | 2007-02-13T00:00:00.000000 |
| certa-2007-ale-001 | Vulnérablité dans Apple Quicktime | 2007-01-04T00:00:00.000000 | 2007-01-24T00:00:00.000000 |
| certa-2007-ale-003 | Filoutage contre le site voyages-sncf.com | 2007-01-15T00:00:00.000000 | 2007-01-15T00:00:00.000000 |
| certa-2006-ale-011 | Multiples vulnérabilités de produits Microsoft | 2006-08-31T00:00:00.000000 | 2006-10-11T00:00:00.000000 |