Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2472 |
8.6 (4.0)
|
Stored Cross-Site Scripting (XSS) in Vertex AI Python … |
Google Cloud |
Vertex AI SDK for Python |
2026-02-20T19:29:12.162Z | 2026-02-27T17:38:41.190Z |
| CVE-2026-28279 |
7.4 (3.1)
|
`osctrl-admin` Vulnerable to OS Command Injection via … |
jmpsec |
osctrl |
2026-02-26T22:59:29.972Z | 2026-02-27T17:33:49.803Z |
| CVE-2022-46764 |
9.8 (3.1)
|
A SQL injection issue in the web API in TrueConf … |
TrueConf |
TrueConf Server |
2022-12-27T00:00:00.000Z | 2026-02-27T17:32:51.107Z |
| CVE-2025-67491 |
8.5 (4.0)
|
OpenEMR has Stored XSS in ub04 helper |
openemr |
openemr |
2026-02-25T00:31:11.369Z | 2026-02-27T17:32:18.289Z |
| CVE-2026-3137 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
CodeAstro Food Ordering System food_ordering.exe stack… |
CodeAstro |
Food Ordering System |
2026-02-25T00:32:07.501Z | 2026-02-27T17:31:16.374Z |
| CVE-2025-67752 |
8.1 (3.1)
|
OpenEMR Has Disabled SSL Certificate Verification in H… |
openemr |
openemr |
2026-02-25T01:09:20.946Z | 2026-02-27T17:30:42.203Z |
| CVE-2026-3268 |
5.3 (4.0)
5.4 (3.1)
5.4 (3.0)
|
psi-probe PSI Probe Session Attribute RemoveSessAttrib… |
psi-probe |
PSI Probe |
2026-02-26T23:02:08.067Z | 2026-02-27T17:27:38.521Z |
| CVE-2025-68277 |
7.2 (4.0)
|
OpenEMR allows links sent via Secure Messaging to be o… |
openemr |
openemr |
2026-02-25T01:13:28.531Z | 2026-02-27T17:27:36.039Z |
| CVE-2025-69929 |
9.8 (3.1)
|
An issue in N3uron Web User Interface v.1.21.7-24… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-27T17:26:28.197Z |
| CVE-2026-3271 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F453 httpd P2pListFilterof fromP2pListFilter buf… |
Tenda |
F453 |
2026-02-27T00:02:09.718Z | 2026-02-27T17:25:44.383Z |
| CVE-2025-69231 |
8.7 (3.1)
|
OpenEMR has a Stored XSS in GAD-7 Form that Enables Se… |
openemr |
openemr |
2026-02-25T01:18:14.722Z | 2026-02-27T17:25:25.132Z |
| CVE-2026-27609 |
8.3 (4.0)
|
Parse Dashboard Missing CSRF Protection on Agent Endpoint |
parse-community |
parse-dashboard |
2026-02-25T02:18:28.909Z | 2026-02-27T17:24:51.491Z |
| CVE-2026-27610 |
7 (4.0)
|
Parse Dashboard Has a Cache Key Collision that Leaks M… |
parse-community |
parse-dashboard |
2026-02-25T02:19:56.022Z | 2026-02-27T17:24:10.098Z |
| CVE-2026-3272 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F453 httpd DhcpListClient fromDhcpListClient buf… |
Tenda |
F453 |
2026-02-27T00:02:12.958Z | 2026-02-27T17:19:02.067Z |
| CVE-2025-60344 |
8.6 (3.1)
|
A path traversal (directory traversal) vulnerabil… |
D-Link |
DSR-150 |
2025-10-21T00:00:00.000Z | 2026-02-27T17:17:53.807Z |
| CVE-2026-27595 |
9.9 (4.0)
|
Parse Dashboard has incomplete authentication on AI Ag… |
parse-community |
parse-dashboard |
2026-02-25T02:21:33.428Z | 2026-02-27T17:14:07.067Z |
| CVE-2026-2359 |
8.7 (4.0)
|
Multer vulnerable to Denial of Service via resource ex… |
expressjs |
multer |
2026-02-27T15:42:08.088Z | 2026-02-27T17:13:17.930Z |
| CVE-2026-3304 |
8.7 (4.0)
|
Multer vulnerable to Denial of Service via incomplete … |
expressjs |
multer |
2026-02-27T15:44:37.187Z | 2026-02-27T17:12:45.375Z |
| CVE-2025-7195 |
5.2 (3.1)
|
Operator-sdk: privilege escalation due to incorrect pe… |
operator-framework |
operator-sdk |
2025-08-07T19:05:08.756Z | 2026-02-27T17:11:31.068Z |
| CVE-2024-1394 |
7.5 (3.1)
|
Golang-fips/openssl: memory leaks in code encrypting a… |
Red Hat |
Red Hat Ansible Automation Platform 2.4 for RHEL 8 |
2024-03-21T12:16:38.790Z | 2026-02-27T17:11:18.543Z |
| CVE-2026-27611 |
7.1 (4.0)
|
FileBrowser Quantum: Password Protection Not Enforced … |
gtsteffaniak |
filebrowser |
2026-02-25T02:24:48.357Z | 2026-02-27T17:11:18.122Z |
| CVE-2026-27615 |
8.8 (4.0)
|
ADB-Explorer: UNC Path Support in ManualAdbPath Leads … |
Alex4SSB |
ADB-Explorer |
2026-02-25T02:33:53.553Z | 2026-02-27T17:09:58.886Z |
| CVE-2026-2293 |
8.2 (4.0)
|
NestJS 11.1.13 - Lack of data validation allowing auth… |
nest.js |
nest.js |
2026-02-27T16:15:11.784Z | 2026-02-27T17:07:59.779Z |
| CVE-2026-27626 |
10 (3.1)
|
OliveTin vulnerable to OS Command Injection via `passw… |
OliveTin |
OliveTin |
2026-02-25T02:43:08.189Z | 2026-02-27T17:07:28.612Z |
| CVE-2026-2878 |
5.3 (3.1)
|
Insufficient Entropy Vulnerability in Telerik UI for A… |
Progress Software |
Telerik UI for ASP.NET AJAX |
2026-02-25T14:45:11.142Z | 2026-02-27T17:06:16.616Z |
| CVE-2025-5318 |
8.1 (3.1)
|
Libssh: out-of-bounds read in sftp_handle() |
|
|
2025-06-24T14:10:07.188Z | 2026-02-27T17:05:15.158Z |
| CVE-2023-52356 |
7.5 (3.1)
|
Libtiff: segment fault in libtiff in tiffreadrgbatile… |
|
|
2024-01-25T20:03:40.971Z | 2026-02-27T17:05:04.387Z |
| CVE-2023-52355 |
7.5 (3.1)
|
Libtiff: tiffrasterscanlinesize64 produce too-big size… |
|
|
2024-01-25T20:03:35.031Z | 2026-02-27T17:05:04.306Z |
| CVE-2026-27699 |
9.1 (3.1)
|
Basic FTP has Path Traversal Vulnerability in its down… |
patrickjuchli |
basic-ftp |
2026-02-25T14:58:56.815Z | 2026-02-27T17:04:33.751Z |
| CVE-2025-68545 |
9.1 (3.1)
|
WordPress Nika theme <= 1.2.14 - Local File Inclusion … |
thembay |
Nika |
2026-02-20T15:46:40.615Z | 2026-02-27T17:02:45.502Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27709 |
5.1 (4.0)
|
NanaZip .NET Single-File Manifest Parser Vulnerable to… |
M2Team |
NanaZip |
2026-02-25T23:39:03.772Z | 2026-02-26T15:49:04.311Z |
| CVE-2026-27710 |
5.1 (4.0)
|
NanaZip .NET Single-File Parser Integer Underflow Lead… |
M2Team |
NanaZip |
2026-02-25T23:43:28.219Z | 2026-02-26T15:48:29.934Z |
| CVE-2026-27711 |
5.1 (4.0)
|
NanaZip UFS Archive Parser Memory Corruption via Unval… |
M2Team |
NanaZip |
2026-02-25T23:44:26.848Z | 2026-02-26T15:07:47.597Z |
| CVE-2026-3118 |
6.5 (3.1)
|
Rhdh: graphql injection leading to platform-wide denia… |
Red Hat |
Red Hat Developer Hub |
2026-02-25T11:25:55.016Z | 2026-02-25T16:29:48.062Z |
| CVE-2025-50180 |
8.7 (4.0)
|
esm.sh is vulnerable to full-response SSRF |
esm-dev |
esm.sh |
2026-02-25T15:32:56.449Z | 2026-02-27T18:22:28.728Z |
| CVE-2026-27730 |
8.6 (3.0)
|
esm.sh has SSRF localhost/private-network bypass in `/… |
esm-dev |
esm.sh |
2026-02-25T15:37:01.753Z | 2026-02-25T20:32:05.079Z |
| CVE-2026-27705 |
4.9 (4.0)
|
Plane Vulnerable to Cross-Workspace/Cross-Project Asse… |
makeplane |
plane |
2026-02-25T15:51:46.700Z | 2026-02-25T20:10:06.766Z |
| CVE-2026-27706 |
7.7 (3.1)
|
Plane Vulnerable to Full Read SSRF via Favicon Fetchin… |
makeplane |
plane |
2026-02-25T15:56:11.220Z | 2026-02-25T20:13:05.310Z |
| CVE-2026-25138 |
5.3 (3.1)
|
Rucio WebUI has Username Enumeration via Login Error Message |
rucio |
rucio |
2026-02-25T19:28:35.628Z | 2026-02-26T16:03:22.817Z |
| CVE-2026-1434 |
5.1 (4.0)
|
Reflected XSS in Omega-PSIR |
Politechnika Warszawska |
Omega-PSIR |
2026-02-27T10:32:53.339Z | 2026-02-27T15:38:38.137Z |
| CVE-2026-27933 |
6.8 (3.1)
|
Manyfold vulnerable to session hijack via cookie leaka… |
manyfold3d |
manyfold |
2026-02-25T23:16:01.572Z | 2026-02-26T16:45:33.523Z |
| CVE-2026-27888 |
6.6 (4.0)
|
pypdf: Manipulated FlateDecode XFA streams can exhaust RAM |
py-pdf |
pypdf |
2026-02-26T00:42:00.542Z | 2026-02-26T16:16:08.680Z |
| CVE-2026-28208 |
5.9 (3.1)
|
Junrar has arbitrary file write due to backslash path … |
junrar |
junrar |
2026-02-26T22:20:03.765Z | 2026-02-26T22:20:03.765Z |
| CVE-2025-11251 |
9.8 (3.1)
|
SQLi in Dayneks Software's E-Commerce Platform |
Dayneks Software Industry and Trade Inc. |
E-Commerce Platform |
2026-02-27T11:58:02.619Z | 2026-02-27T12:39:46.160Z |
| CVE-2026-27903 |
7.5 (3.1)
|
minimatch has a ReDoS: matchOne() combinatorial backtr… |
isaacs |
minimatch |
2026-02-26T01:06:32.856Z | 2026-02-26T19:20:51.517Z |
| CVE-2026-3071 |
8.4 (3.1)
|
Deserialization of untrusted data in the Language… |
Flair |
Flair |
2026-02-26T14:56:39.524Z | 2026-02-27T16:21:29.889Z |
| CVE-2026-2293 |
8.2 (4.0)
|
NestJS 11.1.13 - Lack of data validation allowing auth… |
nest.js |
nest.js |
2026-02-27T16:15:11.784Z | 2026-02-27T17:07:59.779Z |
| CVE-2026-28207 |
6.6 (3.1)
|
Zen-C Vulnerable to Command Injection via Malicious Ou… |
z-libs |
Zen-C |
2026-02-26T22:17:58.898Z | 2026-02-27T16:57:44.054Z |
| CVE-2026-27701 |
8.8 (4.0)
|
LiveCodes vulnerable to JavaScript Injection via untru… |
live-codes |
livecodes |
2026-02-25T15:06:17.617Z | 2026-02-27T17:00:20.183Z |
| CVE-2026-27074 |
6.5 (3.1)
|
WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scri… |
vaakash |
Shortcoder |
2026-02-19T08:27:11.377Z | 2026-02-27T16:24:12.439Z |
| CVE-2026-25389 |
5.3 (3.1)
|
WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Dat… |
Metagauss |
EventPrime |
2026-02-19T08:27:02.493Z | 2026-02-27T16:23:27.069Z |
| CVE-2026-25331 |
6.5 (3.1)
|
WordPress WP Activity Log plugin <= 5.5.4 - Cross Site… |
Melapress |
WP Activity Log |
2026-02-19T08:26:57.085Z | 2026-02-27T16:22:19.799Z |
| CVE-2026-25305 |
6.5 (3.1)
|
WordPress XStore theme <= 9.6.4 - Cross Site Scripting… |
8theme |
XStore |
2026-02-19T08:26:52.704Z | 2026-02-27T16:21:31.717Z |
| CVE-2026-25147 |
7.1 (3.1)
|
OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid |
openemr |
openemr |
2026-02-27T16:44:40.734Z | 2026-02-27T18:27:59.160Z |
| CVE-2026-25006 |
5.3 (3.1)
|
WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode … |
8theme |
XStore |
2026-02-19T08:26:52.080Z | 2026-02-27T16:20:40.970Z |
| CVE-2026-24488 |
6.5 (3.1)
|
OpenEMR Vulnerable to Arbitrary File Exfiltration via … |
openemr |
openemr |
2026-02-27T16:41:45.665Z | 2026-02-27T18:27:12.987Z |
| CVE-2025-68545 |
9.1 (3.1)
|
WordPress Nika theme <= 1.2.14 - Local File Inclusion … |
thembay |
Nika |
2026-02-20T15:46:40.615Z | 2026-02-27T17:02:45.502Z |
| CVE-2025-67979 |
9.9 (3.1)
|
WordPress WPForms Google Sheet Connector plugin <= 4.0… |
WesternDeal |
WPForms Google Sheet Connector |
2026-02-20T15:46:30.861Z | 2026-02-27T17:00:03.047Z |
| CVE-2025-60183 |
5.9 (3.1)
|
WordPress Silencesoft RSS Reader Plugin <= 0.6 - Cross… |
silence |
Silencesoft RSS Reader |
2026-02-20T15:46:27.695Z | 2026-02-27T16:57:57.144Z |
| CVE-2025-5318 |
8.1 (3.1)
|
Libssh: out-of-bounds read in sftp_handle() |
|
|
2025-06-24T14:10:07.188Z | 2026-02-27T17:05:15.158Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-27711 | NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.16… | 2026-02-26T00:16:24.843 | 2026-02-27T17:51:29.583 |
| fkie_cve-2026-3118 | A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The… | 2026-02-25T12:16:17.957 | 2026-02-27T17:47:55.287 |
| fkie_cve-2025-50180 | esm.sh is a no-build content delivery network (CDN) for web development. In version 136, esm.sh is … | 2026-02-25T16:23:21.173 | 2026-02-27T17:44:36.470 |
| fkie_cve-2026-27730 | esm.sh is a no-build content delivery network (CDN) for web development. Versions up to and includi… | 2026-02-25T16:23:27.123 | 2026-02-27T17:43:47.737 |
| fkie_cve-2026-27705 | Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoi… | 2026-02-25T17:25:39.573 | 2026-02-27T17:37:38.557 |
| fkie_cve-2026-27706 | Plane is an an open-source project management tool. Prior to version 1.2.2, a Full Read Server-Side… | 2026-02-25T17:25:39.740 | 2026-02-27T17:36:19.910 |
| fkie_cve-2026-25138 | Rucio is a software framework that provides functionality to organize, manage, and access large vol… | 2026-02-25T20:23:47.457 | 2026-02-27T17:35:41.793 |
| fkie_cve-2026-1434 | Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious… | 2026-02-27T11:16:04.770 | 2026-02-27T17:34:25.750 |
| fkie_cve-2026-27933 | Manyfold is an open source, self-hosted web application for managing a collection of 3d models, par… | 2026-02-26T00:16:26.973 | 2026-02-27T17:27:19.060 |
| fkie_cve-2026-27888 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an attacker who uses this … | 2026-02-26T01:16:25.470 | 2026-02-27T17:26:35.363 |
| fkie_cve-2026-28208 | Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path travers… | 2026-02-26T23:16:35.440 | 2026-02-27T17:24:18.280 |
| fkie_cve-2025-11251 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-27T12:16:01.783 | 2026-02-27T17:22:23.443 |
| fkie_cve-2026-27903 | minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp obje… | 2026-02-26T02:16:21.353 | 2026-02-27T17:21:22.370 |
| fkie_cve-2026-3071 | Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest… | 2026-02-26T15:17:48.803 | 2026-02-27T17:16:33.680 |
| fkie_cve-2026-2293 | A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorizatio… | 2026-02-27T17:16:33.357 | 2026-02-27T17:16:33.357 |
| fkie_cve-2026-28207 | Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version… | 2026-02-26T23:16:35.277 | 2026-02-27T17:16:33.220 |
| fkie_cve-2026-27701 | LiveCode is an open-source, client-side code playground. Prior to commit e151c64c2bd80d2d53ac1333f1… | 2026-02-25T16:23:26.613 | 2026-02-27T17:16:32.963 |
| fkie_cve-2026-27074 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:27.770 | 2026-02-27T17:16:32.057 |
| fkie_cve-2026-25389 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagau… | 2026-02-19T09:16:21.093 | 2026-02-27T17:16:31.477 |
| fkie_cve-2026-25331 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:17.753 | 2026-02-27T17:16:31.287 |
| fkie_cve-2026-25305 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:14.783 | 2026-02-27T17:16:31.093 |
| fkie_cve-2026-25147 | OpenEMR is a free and open source electronic health records and medical practice management applica… | 2026-02-27T17:16:30.933 | 2026-02-27T17:16:30.933 |
| fkie_cve-2026-25006 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8the… | 2026-02-19T09:16:14.497 | 2026-02-27T17:16:30.733 |
| fkie_cve-2026-24488 | OpenEMR is a free and open source electronic health records and medical practice management applica… | 2026-02-27T17:16:30.497 | 2026-02-27T17:16:30.497 |
| fkie_cve-2025-68545 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:11.910 | 2026-02-27T17:16:25.813 |
| fkie_cve-2025-67979 | Improper Control of Generation of Code ('Code Injection') vulnerability in WesternDeal WPForms Goog… | 2026-02-20T16:22:04.190 | 2026-02-27T17:16:25.620 |
| fkie_cve-2025-60183 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:02.503 | 2026-02-27T17:16:25.087 |
| fkie_cve-2025-5318 | A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be t… | 2025-06-24T14:15:30.523 | 2026-02-27T17:16:24.440 |
| fkie_cve-2026-27904 | minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp obje… | 2026-02-26T02:16:21.760 | 2026-02-27T17:16:23.773 |
| fkie_cve-2024-56208 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:00.987 | 2026-02-27T17:16:23.510 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-w6wm-hqx9-7cq8 |
9.8 (3.1)
8.7 (4.0)
|
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an au… | 2026-02-24T21:31:47Z | 2026-02-27T03:30:26Z |
| ghsa-q87p-3jrp-v3v5 |
8.0 (3.1)
|
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an … | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-p8c6-r53p-q435 |
8.0 (3.1)
|
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an a… | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-mprq-mg66-vm32 |
8.6 (3.1)
|
A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected retur… | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-mmcc-ppg6-c7j2 |
9.1 (3.1)
5.9 (4.0)
|
In affected version of Octopus Deploy it was possible to remove files and/or contents of files on t… | 2026-02-25T15:31:39Z | 2026-02-27T03:30:26Z |
| ghsa-f3h6-vxx4-wvjr |
7.5 (3.1)
|
The WebSocket Application Programming Interface lacks restrictions on the number of authentication… | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-cc2q-7r88-56q9 |
7.3 (3.1)
|
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows … | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-9vp3-cxq9-72jh |
6.5 (3.1)
|
Charging station authentication identifiers are publicly accessible via web-based mapping platforms. | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-92fm-h5h6-cjf9 |
8.0 (3.1)
|
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an au… | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-7r34-g88h-g49f |
10.0 (3.1)
|
An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabl… | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-6pvr-hxgm-74hg |
8.0 (3.1)
|
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an au… | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-5m2v-c6pj-9qqh |
9.0 (3.1)
|
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an una… | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-28pj-7rwg-vxrf |
6.5 (3.1)
|
Charging station authentication identifiers are publicly accessible via web-based mapping platforms. | 2026-02-27T03:30:26Z | 2026-02-27T03:30:26Z |
| ghsa-xc6x-6xp8-3frw |
7.3 (3.1)
|
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows … | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-rvf2-2r2v-x27p |
9.4 (3.1)
|
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthori… | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-qc92-5v9v-hh5w |
7.3 (3.1)
|
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows … | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-pf83-65gp-c24p |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromDhcpListClient o… | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-j7ww-pvc6-ph97 |
7.3 (3.1)
|
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows … | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-j4fg-v368-8838 |
7.5 (3.1)
|
The WebSocket Application Programming Interface lacks restrictions on the number of authentication… | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-cr9w-4p8w-56h8 |
9.4 (3.1)
|
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthori… | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-9348-37vp-f2h3 |
9.4 (3.1)
|
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthori… | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-429m-9874-rx9w |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup… | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-3fx3-vmv7-fxc7 |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the… | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-3frc-jf93-6v8p |
6.5 (3.1)
|
Charging station authentication identifiers are publicly accessible via web-based mapping platforms. | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-2xph-9rqm-66cr |
7.5 (3.1)
|
The WebSocket Application Programming Interface lacks restrictions on the number of authentication… | 2026-02-27T00:31:46Z | 2026-02-27T00:31:46Z |
| ghsa-w6cc-5826-4fq3 |
7.3 (3.1)
|
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows … | 2026-02-27T00:31:45Z | 2026-02-27T00:31:45Z |
| ghsa-v843-wj8h-jm5r |
6.7 (3.1)
8.4 (4.0)
|
An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1… | 2026-02-27T00:31:45Z | 2026-02-27T00:31:45Z |
| ghsa-qjgj-45g7-3rp5 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1… | 2026-02-27T00:31:45Z | 2026-02-27T00:31:45Z |
| ghsa-p8jq-98c2-8ggq |
5.4 (3.1)
2.1 (4.0)
|
A vulnerability was detected in psi-probe PSI Probe up to 5.3.0. The affected element is an unknown… | 2026-02-27T00:31:45Z | 2026-02-27T00:31:45Z |
| ghsa-m9p8-mq88-4q4g |
7.5 (3.1)
|
The WebSocket Application Programming Interface lacks restrictions on the number of authentication… | 2026-02-27T00:31:45Z | 2026-02-27T00:31:45Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2011-27 |
|
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 do… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.206417Z |
| pysec-2011-26 |
|
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.154748Z |
| pysec-2014-115 |
|
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using… | portage | 2014-09-29T22:55:00Z | 2024-11-21T14:22:59.10272Z |
| pysec-2024-146 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.401329+00:00 |
| pysec-2024-145 |
7.5 (3.1)
|
FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.341995+00:00 |
| pysec-2024-144 |
7.5 (3.1)
|
Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a ru… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.282654+00:00 |
| pysec-2024-143 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.223275+00:00 |
| pysec-2024-142 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resul… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.166295+00:00 |
| pysec-2024-141 |
9.8 (3.1)
|
Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.106968+00:00 |
| pysec-2024-140 |
7.5 (3.1)
|
FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.044369+00:00 |
| pysec-2024-139 |
9.8 (3.1)
|
Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lea… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.974712+00:00 |
| pysec-2024-138 |
7.5 (3.1)
|
FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.913569+00:00 |
| pysec-2024-137 |
7.5 (3.1)
|
FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.844840+00:00 |
| pysec-2024-136 |
9.8 (3.1)
|
Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.785687+00:00 |
| pysec-2024-135 |
7.5 (3.1)
|
Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runt… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.726582+00:00 |
| pysec-2024-134 |
7.5 (3.1)
|
Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime c… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.667127+00:00 |
| pysec-2024-133 |
7.5 (3.1)
|
OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime cra… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.605277+00:00 |
| pysec-2024-132 |
7.5 (3.1)
|
FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime cras… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.546560+00:00 |
| pysec-2024-131 |
7.5 (3.1)
|
Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash a… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.485379+00:00 |
| pysec-2024-130 |
7.5 (3.1)
|
FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runt… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.427583+00:00 |
| pysec-2024-129 |
7.5 (3.1)
|
FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.364643+00:00 |
| pysec-2022-43143 |
6.5 (3.1)
|
OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo f… | openzeppelin-cairo-contracts-test | 2022-07-15T18:15:00Z | 2024-11-21T14:22:57.304802Z |
| pysec-2018-153 |
5.5 (3.1)
|
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmen… | opencc-py | 2018-09-13T02:29:00Z | 2024-11-21T14:22:57.249534Z |
| pysec-2022-43142 |
7.8 (3.1)
|
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. | octoprint | 2022-08-22T12:15:00+00:00 | 2024-11-21T14:22:57.145370+00:00 |
| pysec-2014-114 |
|
Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows rem… | ntopng | 2014-06-19T10:50:00Z | 2024-11-21T14:22:57.09034Z |
| pysec-2013-45 |
|
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an i… | nova | 2013-12-27T01:55:00Z | 2024-11-21T14:22:56.793365Z |
| pysec-2012-41 |
|
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM b… | nova | 2012-12-26T22:55:00Z | 2024-11-21T14:22:56.616552Z |
| pysec-2012-40 |
|
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when D… | nova | 2012-07-17T21:55:00Z | 2024-11-21T14:22:56.558714Z |
| pysec-2012-39 |
|
virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo … | nova | 2012-07-22T16:55:00Z | 2024-11-21T14:22:56.493974Z |
| pysec-2012-38 |
|
Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom … | nova | 2012-07-22T16:55:00Z | 2024-11-21T14:22:56.434839Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33641 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.213153Z |
| gsd-2024-33654 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.212436Z |
| gsd-2024-33653 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.211438Z |
| gsd-2024-33640 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.209462Z |
| gsd-2024-33651 | Cross-Site Request Forgery (CSRF) vulnerability in Matthew Fries MF Gig Calendar.This iss… | 2024-04-26T05:02:19.207978Z |
| gsd-2024-33646 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.206029Z |
| gsd-2024-33659 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.194728Z |
| gsd-2024-33636 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.188953Z |
| gsd-2024-33647 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.188223Z |
| gsd-2024-33649 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.185793Z |
| gsd-2024-33657 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.176271Z |
| gsd-2024-33663 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.175935Z |
| gsd-2024-33650 | Cross-Site Request Forgery (CSRF) vulnerability in Cryout Creations Serious Slider.This i… | 2024-04-26T05:02:19.172076Z |
| gsd-2024-33672 | An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used i… | 2024-04-26T05:02:19.171109Z |
| gsd-2024-33642 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-26T05:02:19.166814Z |
| gsd-2024-33629 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.165154Z |
| gsd-2024-33635 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.164031Z |
| gsd-2024-33673 | An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access… | 2024-04-26T05:02:19.162010Z |
| gsd-2024-33627 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.157764Z |
| gsd-2024-33638 | Cross-Site Request Forgery (CSRF) vulnerability in Brijesh Kothari Smart Maintenance Mode… | 2024-04-26T05:02:19.155155Z |
| gsd-2024-33674 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.150702Z |
| gsd-2024-33628 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149995Z |
| gsd-2024-33662 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149532Z |
| gsd-2024-33648 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149332Z |
| gsd-2024-33633 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.141967Z |
| gsd-2024-33634 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.138995Z |
| gsd-2024-33664 | python-jose through 3.3.0 allows attackers to cause a denial of service (resource consump… | 2024-04-26T05:02:19.131389Z |
| gsd-2024-33643 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.131060Z |
| gsd-2024-4192 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.442382Z |
| gsd-2024-4212 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.440122Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-826 | Malicious code in testppe-pkg (PyPI) | 2026-02-10T08:38:48Z | 2026-02-10T08:38:48Z |
| mal-2026-824 | Malicious code in dev-pipline-test (PyPI) | 2026-02-10T07:48:33Z | 2026-02-10T07:48:33Z |
| mal-2026-825 | Malicious code in devtools-webhook-cicd-utils (PyPI) | 2026-02-10T07:42:45Z | 2026-02-10T07:42:45Z |
| mal-2026-823 | Malicious code in ntoutils (PyPI) | 2026-02-10T07:25:38Z | 2026-02-10T07:25:38Z |
| mal-2026-817 | Malicious code in ctf-pipline-test (PyPI) | 2026-02-09T15:35:47Z | 2026-02-09T16:28:03Z |
| mal-2026-818 | Malicious code in thecorrectjames (PyPI) | 2026-02-09T16:25:34Z | 2026-02-09T16:25:50Z |
| mal-2026-814 | Malicious code in http-notifier-test (PyPI) | 2026-02-09T09:29:06Z | 2026-02-09T09:29:06Z |
| mal-2026-815 | Malicious code in skydeo (PyPI) | 2026-02-09T09:12:05Z | 2026-02-09T09:12:05Z |
| mal-2026-812 | Malicious code in hardixx-code (PyPI) | 2026-02-08T21:21:34Z | 2026-02-08T22:46:48Z |
| mal-2026-813 | Malicious code in teligram (PyPI) | 2026-02-08T22:19:04Z | 2026-02-08T22:19:04Z |
| mal-2024-12278 | Malicious code in gltest (PyPI) | 2024-08-23T22:55:41Z | 2026-02-08T21:44:34Z |
| mal-2026-809 | Malicious code in ccxt-bullish (PyPI) | 2026-02-08T07:47:19Z | 2026-02-08T07:47:19Z |
| mal-2026-810 | Malicious code in thread-pipeline-test (PyPI) | 2026-02-08T07:41:19Z | 2026-02-08T07:41:19Z |
| mal-2026-704 | Malicious code in testing-package-xdsfdsfsc (npm) | 2026-02-03T16:22:25Z | 2026-02-07T10:45:40Z |
| mal-2026-789 | Malicious code in syf-typings (npm) | 2026-02-06T07:06:46Z | 2026-02-06T21:46:29Z |
| mal-2026-807 | Malicious code in web3-sinon (npm) | 2026-02-06T14:44:08Z | 2026-02-06T18:21:39Z |
| mal-2026-806 | Malicious code in web3-chain-sinon (npm) | 2026-02-06T14:44:08Z | 2026-02-06T18:21:39Z |
| mal-2026-804 | Malicious code in breadcrumb-service (npm) | 2026-02-06T12:30:53Z | 2026-02-06T16:19:57Z |
| mal-2026-805 | Malicious code in aligned-arrays (npm) | 2026-02-06T14:24:56Z | 2026-02-06T16:19:56Z |
| mal-2026-802 | Malicious code in @sbseg-plugin/qbo-web-app-ui (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| mal-2026-801 | Malicious code in @rsgweb/utils (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| mal-2026-800 | Malicious code in @rsgweb/tina (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| mal-2026-799 | Malicious code in @rsgweb/rockstar-account (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| mal-2026-798 | Malicious code in @rsgweb/modules-core-www-page (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| mal-2026-797 | Malicious code in @rsgweb/modules-core-feedback (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| mal-2026-796 | Malicious code in @rdxportal/ui-components (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| mal-2026-795 | Malicious code in @opposhop/nuxt-ssr-cache (npm) | 2026-02-06T11:10:47Z | 2026-02-06T16:19:56Z |
| mal-2026-794 | Malicious code in @meli-lint/eslint-config-tests-jest (npm) | 2026-02-06T11:10:46Z | 2026-02-06T16:19:56Z |
| mal-2026-793 | Malicious code in @meli-lint/eslint-config-base-ts (npm) | 2026-02-06T11:10:46Z | 2026-02-06T16:19:56Z |
| mal-2026-792 | Malicious code in @meli-lint/eslint-config-base (npm) | 2026-02-06T11:10:47Z | 2026-02-06T16:19:56Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-1235 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe | 2024-05-26T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-1188 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-05-20T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-1083 | Linux Kernel: Mehrere Schwachstellen | 2024-05-09T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-0964 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-04-24T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-0773 | Linux Kernel: Mehrere Schwachstellen | 2024-04-03T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2023-1367 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-06-05T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2022-2400 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-12-22T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2022-2132 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2022-11-20T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2022-2038 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-11-14T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2022-1201 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2022-08-28T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2022-0997 | Linux Kernel: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2022-08-09T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2022-0540 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2022-05-11T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0125 | Red Hat Enterprise Linux (transfig): Schwachstelle ermöglicht Codeausführung | 2026-01-14T23:00:00.000+00:00 | 2026-01-18T23:00:00.000+00:00 |
| wid-sec-w-2026-0113 | Red Hat Enterprise Linux (vsftpd): Schwachstelle ermöglicht Denial of Service | 2026-01-14T23:00:00.000+00:00 | 2026-01-18T23:00:00.000+00:00 |
| wid-sec-w-2026-0096 | Google Android Pixel: Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-01-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2196 | Redis: Mehrere Schwachstellen | 2025-10-05T22:00:00.000+00:00 | 2026-01-14T23:00:00.000+00:00 |
| wid-sec-w-2026-0017 | Veeam Backup & Replication: Mehrere Schwachstellen | 2026-01-05T23:00:00.000+00:00 | 2026-01-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0020 | Google Chrome/Microsoft Edge: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2026-01-06T23:00:00.000+00:00 | 2026-01-11T23:00:00.000+00:00 |
| wid-sec-w-2026-0047 | CoreDNS: Schwachstelle ermöglicht Denial of Service | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0044 | libtasn1: Schwachstelle ermöglicht Denial of Service | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0043 | Trend Micro Apex Central: Mehrere Schwachstellen | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0040 | n8n: Mehrere Schwachstellen | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0036 | OpenLDAP: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2026-01-07T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0022 | Ubiquiti UniFi Building Bridge und Device Bridge: Schwachstelle ermöglicht Codeausführung | 2026-01-06T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2936 | LangChain: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-12-29T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2935 | wget: Mehrere Schwachstellen | 2025-12-29T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2934 | ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-29T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2694 | MariaDB: Schwachstelle ermöglicht Codeausführung | 2025-11-27T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2468 | CPython: Schwachstelle ermöglicht Denial of Service | 2025-11-02T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2449 | GIMP: Schwachstelle ermöglicht Codeausführung | 2025-10-29T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0148 | Kwetsbaarheden verholpen in ASUS DriverHub | 2025-05-12T13:22:18.034442Z | 2025-05-12T13:22:18.034442Z |
| ncsc-2025-0147 | Kwetsbaarheden verholpen in F5 BIG-IP | 2025-05-09T08:07:32.002935Z | 2025-05-09T08:07:32.002935Z |
| ncsc-2025-0146 | Kwetsbaarheden verholpen in Cisco IOS XE Software | 2025-05-08T08:43:57.415709Z | 2025-05-08T08:43:57.415709Z |
| ncsc-2025-0145 | Kwetsbaarheden verholpen in SonicWall SMA100 | 2025-05-08T08:40:26.301646Z | 2025-05-08T08:40:26.301646Z |
| ncsc-2025-0144 | Kwetsbaarheden verholpen in SysAid On-Prem | 2025-05-08T06:56:21.378830Z | 2025-05-08T06:56:21.378830Z |
| ncsc-2025-0143 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-05-07T11:19:50.517092Z | 2025-05-07T11:19:50.517092Z |
| ncsc-2025-0142 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2025-05-06T08:01:05.582708Z | 2025-05-06T08:01:05.582708Z |
| ncsc-2025-0141 | Kwetsbaarheden verholpen in Keycloak | 2025-05-06T07:12:42.075830Z | 2025-05-06T07:12:42.075830Z |
| ncsc-2025-0138 | Kwetsbaarheid verholpen in Commvault Command Center | 2025-04-24T13:09:08.399556Z | 2025-05-06T06:55:31.232567Z |
| ncsc-2025-0119 | Kwetsbaarheden verholpen in SAP-producten | 2025-04-09T09:12:05.705017Z | 2025-04-30T13:12:27.070565Z |
| ncsc-2025-0140 | Kwetsbaarheden verholpen in Apple AirPlay zoals gebruikt door macOS, iOS en iPadOS | 2025-04-30T08:45:31.426155Z | 2025-04-30T08:45:31.426155Z |
| ncsc-2025-0139 | Kwetsbaarheid verholpen in SonicWall SonicOS | 2025-04-25T09:35:24.276801Z | 2025-04-25T09:35:24.276801Z |
| ncsc-2025-0137 | Kwetsbaarheid verholpen in Erlang/OTP SSH-server | 2025-04-18T05:33:40.823978Z | 2025-04-18T05:33:40.823978Z |
| ncsc-2025-0136 | Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS | 2025-04-17T07:19:14.228835Z | 2025-04-17T07:19:14.228835Z |
| ncsc-2025-0135 | Kwetsbaarheden verholpen in Siemens TeleControl Server | 2025-04-17T07:14:24.584624Z | 2025-04-17T07:14:24.584624Z |
| ncsc-2025-0134 | Kwetsbaarheid verholpen in Cisco Webex App | 2025-04-17T07:11:41.369333Z | 2025-04-17T07:11:41.369333Z |
| ncsc-2025-0133 | Kwetsbaarheden verholpen in Oracle PeopleSoft | 2025-04-16T15:13:33.586832Z | 2025-04-16T15:13:33.586832Z |
| ncsc-2025-0132 | Kwetsbaarheden verholpen in Oracle MySQL | 2025-04-16T15:11:43.357092Z | 2025-04-16T15:11:43.357092Z |
| ncsc-2025-0131 | Kwetsbaarheden verholpen in Oracle JD Edwards | 2025-04-16T15:10:06.149204Z | 2025-04-16T15:10:06.149204Z |
| ncsc-2025-0130 | Kwetsbaarheden verholpen in Oracle Java | 2025-04-16T15:04:40.041941Z | 2025-04-16T15:04:40.041941Z |
| ncsc-2025-0129 | Kwetsbaarheden verholpen in Oracle Analytics | 2025-04-16T15:02:22.596981Z | 2025-04-16T15:02:22.596981Z |
| ncsc-2025-0128 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2025-04-16T15:01:24.587426Z | 2025-04-16T15:01:24.587426Z |
| ncsc-2025-0127 | Kwetsbaarheden verholpen in Oracle Financial Services | 2025-04-16T15:00:12.952979Z | 2025-04-16T15:00:12.952979Z |
| ncsc-2025-0126 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2025-04-16T14:59:13.973935Z | 2025-04-16T14:59:13.973935Z |
| ncsc-2025-0125 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2025-04-16T14:58:05.867499Z | 2025-04-16T14:58:05.867499Z |
| ncsc-2025-0124 | Kwetsbaarheden verholpen in Oracle Communications | 2025-04-16T08:39:55.217751Z | 2025-04-16T08:39:55.217751Z |
| ncsc-2025-0123 | Kwetsbaarheden verholpen in Oracle Database Producten | 2025-04-16T08:37:39.412900Z | 2025-04-16T08:37:39.412900Z |
| ncsc-2025-0122 | Kwetsbaarheden verholpen in Rockwell Automation Arena | 2025-04-14T11:29:22.815190Z | 2025-04-14T11:29:22.815190Z |
| ncsc-2025-0121 | Kwetsbaarheid verholpen in Gladinet CentreStack | 2025-04-10T11:53:42.018541Z | 2025-04-10T11:53:42.018541Z |
| ncsc-2025-0120 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager | 2025-04-09T14:41:41.327208Z | 2025-04-09T14:41:41.327208Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-978220 | SSA-978220: Denial of Service Vulnerability over SNMP in Multiple Industrial Products | 2020-02-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-840188 | SSA-840188: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products | 2021-11-09T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-838121 | SSA-838121: Multiple Denial of Service Vulnerabilities in Industrial Products | 2022-02-08T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-792594 | SSA-792594: Host Header Injection Vulnerability in Polarion ALM | 2022-12-13T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-700053 | SSA-700053: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2022-12-13T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-699404 | SSA-699404: Observable Response Discrepancy in Mendix Forgot Password Module | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-676336 | SSA-676336: OpenSSH Vulnerabilities in SCALANCE X-200 and X-300/X408 Switches | 2021-09-14T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-642810 | SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-629917 | SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-603476 | SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs | 2016-11-21T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-572164 | SSA-572164: Luxion KeyShot Vulnerability in Solid Edge | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-558014 | SSA-558014: Third-Party Component Vulnerabilities in SCALANCE XCM332 before V2.2 | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-557541 | SSA-557541: Denial-of-Service Vulnerability in SIMATIC S7-400 CPUs | 2022-04-12T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-552702 | SSA-552702: Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products | 2022-10-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-549234 | SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules | 2021-09-14T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-511182 | SSA-511182: Use of Static TLS Certificate Known Hard Coded Private Keys in Adaptec Maxview Application | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-479249 | SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-472454 | SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-462066 | SSA-462066: Vulnerability known as TCP SACK PANIC in Industrial Products | 2019-09-10T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-459643 | SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0 | 2022-09-13T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-310038 | SSA-310038: Multiple Vulnerabilities in SCALANCE X Switch Devices | 2022-07-12T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-270778 | SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software | 2020-02-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-244969 | SSA-244969: OpenSSL Vulnerability in Industrial Products | 2022-02-08T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-102233 | SSA-102233: SegmentSmack in VxWorks-based Industrial Devices | 2020-04-14T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-941426 | SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products | 2021-07-13T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-847261 | SSA-847261: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2023-02-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-726834 | SSA-726834: Denial of Service Vulnerability in the RADIUS Client of SIPROTEC 5 Devices | 2023-03-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-539476 | SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan | 2022-02-08T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-517377 | SSA-517377: Multiple Vulnerabilities in the SRCS VPN Feature in SIMATIC CP Devices | 2022-07-12T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-491245 | SSA-491245: Multiple File Parsing Vulnerabilities in Solid Edge | 2023-02-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:1386 | Red Hat Security Advisory: OpenShift Container Platform 4.16.35 security update | 2025-02-19T19:45:29+00:00 | 2026-02-17T09:18:40+00:00 |
| rhsa-2025:1333 | Red Hat Security Advisory: Gatekeeper v3.14.3 | 2025-02-12T17:36:57+00:00 | 2026-02-17T09:18:40+00:00 |
| rhsa-2025:1332 | Red Hat Security Advisory: Gatekeeper v3.15.3 | 2025-02-12T17:48:36+00:00 | 2026-02-17T09:18:39+00:00 |
| rhsa-2025:1331 | Red Hat Security Advisory: Gatekeeper v3.17.1 | 2025-02-12T17:47:51+00:00 | 2026-02-17T09:18:39+00:00 |
| rhsa-2025:1327 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:44:02+00:00 | 2026-02-17T09:18:38+00:00 |
| rhsa-2025:1326 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:41:51+00:00 | 2026-02-17T09:18:38+00:00 |
| rhsa-2025:1325 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:41:41+00:00 | 2026-02-17T09:18:37+00:00 |
| rhsa-2025:1324 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:39:16+00:00 | 2026-02-17T09:18:37+00:00 |
| rhsa-2025:1322 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:37:40+00:00 | 2026-02-17T09:18:37+00:00 |
| rhsa-2025:1289 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:53:10+00:00 | 2026-02-17T09:18:37+00:00 |
| rhsa-2025:1287 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:52:52+00:00 | 2026-02-17T09:18:35+00:00 |
| rhsa-2025:1285 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:50:52+00:00 | 2026-02-17T09:18:35+00:00 |
| rhsa-2025:11749 | Red Hat Security Advisory: Updated 8.1 container image is now available: security and bug fix update | 2025-07-24T15:20:25+00:00 | 2026-02-17T09:18:34+00:00 |
| rhsa-2025:11669 | Red Hat Security Advisory: OpenShift Container Platform 4.14.54 bug fix and security update | 2025-07-31T03:56:26+00:00 | 2026-02-17T09:18:34+00:00 |
| rhsa-2025:11396 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.4.5 security and bug fix update | 2025-07-18T15:51:18+00:00 | 2026-02-17T09:18:33+00:00 |
| rhsa-2025:1128 | Red Hat Security Advisory: OpenShift Container Platform 4.15.45 bug fix and security update | 2025-02-12T03:43:17+00:00 | 2026-02-17T09:18:33+00:00 |
| rhsa-2025:1123 | Red Hat Security Advisory: OpenShift Container Platform 4.16.34 security and extras update | 2025-02-12T00:13:05+00:00 | 2026-02-17T09:18:32+00:00 |
| rhsa-2025:1120 | Red Hat Security Advisory: OpenShift Container Platform 4.17.16 bug fix and security update | 2025-02-11T11:31:16+00:00 | 2026-02-17T09:18:32+00:00 |
| rhsa-2025:1119 | Red Hat Security Advisory: OpenShift Container Platform 4.17.16 bug fix and security update | 2025-02-11T10:53:54+00:00 | 2026-02-17T09:18:31+00:00 |
| rhsa-2025:1116 | Red Hat Security Advisory: OpenShift Container Platform 4.13.55 bug fix and security update | 2025-02-13T02:27:35+00:00 | 2026-02-17T09:18:31+00:00 |
| rhsa-2025:1115 | Red Hat Security Advisory: OpenShift Container Platform 4.13.55 security and extras update | 2025-02-13T00:41:27+00:00 | 2026-02-17T09:18:30+00:00 |
| rhsa-2025:1013 | Red Hat Security Advisory: RHSA: Submariner 0.19.2 - bug fix and enhancement update | 2025-02-04T18:36:21+00:00 | 2026-02-17T09:18:30+00:00 |
| rhsa-2025:1053 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.5 | 2025-02-05T09:04:18+00:00 | 2026-02-17T09:18:29+00:00 |
| rhsa-2025:1051 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.8 | 2025-02-05T08:58:11+00:00 | 2026-02-17T09:18:28+00:00 |
| rhsa-2025:1050 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.14 | 2025-02-05T08:56:35+00:00 | 2026-02-17T09:18:28+00:00 |
| rhsa-2025:0907 | Red Hat Security Advisory: ACS 4.6.2 enhancement and security update | 2025-02-03T22:40:53+00:00 | 2026-02-17T09:18:26+00:00 |
| rhsa-2025:0905 | Red Hat Security Advisory: RHOAI 2.16.0 - Red Hat OpenShift AI | 2025-02-03T17:17:02+00:00 | 2026-02-17T09:18:26+00:00 |
| rhsa-2025:0875 | Red Hat Security Advisory: OpenShift Container Platform 4.17.15 security and extras update | 2025-02-05T10:48:52+00:00 | 2026-02-17T09:18:26+00:00 |
| rhsa-2025:0892 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.18.0 release | 2025-02-03T16:38:18+00:00 | 2026-02-17T09:18:24+00:00 |
| rhsa-2025:0851 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.2 security and bug fix updates | 2025-01-30T21:30:22+00:00 | 2026-02-17T09:18:23+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-219-07 | EG4 Electronics EG4 Inverters (Update B) | 2025-08-07T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-058-01 | Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B) | 2025-02-27T07:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-02 | ABB Cylon Aspect BMS/BAS | 2025-09-09T05:00:00.000000Z | 2025-09-09T05:00:00.000000Z |
| icsa-25-266-03 | Schneider Electric SESU | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-08 | Schneider Electric EcoStruxure | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-035-07 | Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A) | 2025-01-14T00:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-06 | Siemens Industrial Edge Management | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-05 | Siemens Apogee PXC and Talon TC Devices | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-04 | Siemens SINEC OS | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-02 | Siemens SIMATIC Virtualization as a Service (SIVaaS) | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-01 | Siemens SIMOTION Tools | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-226-05 | Siemens WIBU CodeMeter Runtime | 2025-08-12T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-072-03 | Siemens SIMATIC S7-1500 TM MFP | 2025-03-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-24-102-08 | Siemens OPC Foundation Local Discovery Server Affecting Siemens Products | 2023-04-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-105-07 | Delta Electronics COMMGR (Update A) | 2025-04-15T06:00:00.000000Z | 2025-09-04T06:00:00.000000Z |
| icsa-25-217-01 | Mitsubishi Electric Iconics Digital Solutions Multiple Products (Update A) | 2025-08-05T05:00:00.000000Z | 2025-09-04T05:00:00.000000Z |
| icsa-25-245-03 | SunPower PVS6 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-02 | Fuji Electric FRENIC-Loader 4 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-01 | Delta Electronics EIP Builder | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-240-06 | GE Vernova CIMPLICITY | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-05 | Delta Electronics COMMGR | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-04 | Delta Electronics CNCSoft-G2 | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-02 | Mitsubishi Electric MELSEC iQ-F Series CPU Module | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-01 | Mitsubishi Electric MELSEC iQ-F Series CPU Module | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-273-02 | Festo SBRD-Q/SBOC-Q/SBOI-Q | 2021-09-22T11:13:00.000000Z | 2025-08-26T10:00:00.000000Z |
| icsa-25-182-06 | Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A) | 2025-06-24T12:30:00.000000Z | 2025-08-26T10:00:00.000000Z |
| icsa-25-261-05 | Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product | 2025-08-26T09:52:01.000000Z | 2025-08-26T09:52:01.000000Z |
| icsa-25-261-04 | Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product | 2025-08-26T09:22:47.000000Z | 2025-08-26T09:22:00.000000Z |
| icsa-25-238-01 | INVT VT-Designer and HMITool | 2025-08-26T06:00:00.000000Z | 2025-08-26T06:00:00.000000Z |
| icsa-25-140-03 | Danfoss AK-SM 8xxA Series (Update A) | 2025-05-20T06:00:00.000000Z | 2025-08-26T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ise-xss-v2bm9jcy | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | 2024-08-07T16:00:00+00:00 | 2024-08-07T16:00:00+00:00 |
| cisco-sa-iosxr-ipxe-sigbypass-pymfyqgb | Cisco IOS XR Software iPXE Boot Signature Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2024-08-07T15:55:33+00:00 |
| cisco-sa-cssm-auth-slw3uhuy | Cisco Smart Software Manager On-Prem Password Change Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-08-07T14:54:52+00:00 |
| cisco-sa-webex-app-zjnm8x8j | Cisco Webex App Vulnerabilities | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-sb-rv34x-rce-7pqfu2e | Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-ise-file-upload-krw2txa9 | Cisco Identity Services Engine Arbitrary File Upload Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-inode-static-key-vuvceynn | Cisco Intelligent Node Software Static Key Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-expressway-redirect-kjsfuxgj | Cisco Expressway Series Open Redirect Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-esa-priv-esc-ssti-xno2eogz | Cisco Secure Email Gateway Server-Side Template Injection Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-esa-afw-bgg2usjh | Cisco Secure Email Gateway Arbitrary File Write Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-xr-secure-boot-qud5g8ap | Cisco IOS XR Software Secure Boot Bypass Vulnerability | 2024-07-10T16:00:00+00:00 | 2024-07-10T16:00:00+00:00 |
| cisco-sa-cimc-cmd-inj-blupcb | Cisco Integrated Management Controller Web-Based Management Interface Command Injection Vulnerability | 2024-04-17T16:00:00+00:00 | 2024-06-28T15:22:37+00:00 |
| cisco-sa-cimc-cmd-inj-mux4c5aj | Cisco Integrated Management Controller CLI Command Injection Vulnerability | 2024-04-17T16:00:00+00:00 | 2024-06-28T15:22:08+00:00 |
| cisco-sa-finesse-ssrf-rfi-um7wt8ew | Cisco Finesse Web-Based Management Interface Vulnerabilities | 2024-06-05T16:00:00+00:00 | 2024-06-14T21:44:14+00:00 |
| cisco-sa-esa-sma-wsa-xss-bgg5whod | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Cross-Site Scripting Vulnerabilities | 2024-05-15T16:00:00+00:00 | 2024-06-12T15:37:50+00:00 |
| cisco-sa-esa-http-split-glrnnows | Cisco Secure Email Gateway HTTP Response Splitting Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-06-12T15:14:33+00:00 |
| cisco-sa-webex-june-2024 | Cisco Webex Meetings Meeting Information and Metadata Issue June 2024 | 2024-06-04T21:00:00+00:00 | 2024-06-11T19:41:36+00:00 |
| cisco-sa-opendns-pulse-dos-dd8l3szq | Cisco OpenDNS Pulsing DNS Denial of Service Attack | 2024-05-20T16:00:00+00:00 | 2024-05-23T16:28:32+00:00 |
| cisco-sa-fmc-sqli-wffdnnos | Cisco Firepower Management Center Software SQL Injection Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T17:39:28+00:00 |
| cisco-sa-asaftd-ssl-dos-uu7mv5p6 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 2100 Series Appliances SSL/TLS Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2024-05-22T16:37:00+00:00 |
| cisco-sa-snort3-ips-bypass-ue69kbmd | Multiple Cisco Products Snort 3 HTTP Intrusion Prevention System Rule Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-ftd-archive-bypass-z4wqjwcn | Cisco Firepower Threat Defense Software Encrypted Archive File Policy Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-fmc-object-bypass-fth8tdjq | Cisco Firepower Management Center Software Object Group Access Control List Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-asaftd-saml-bypass-kknvxykw | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Authorization Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-asaftd-ogsnsg-aclbyp-3xb8q6jx | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-asaftd-dos-njvawoeq | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability | 2022-04-27T16:00:00+00:00 | 2024-05-22T15:57:10+00:00 |
| cisco-sa-cucm-apidos-pgsdcdnf | Multiple Cisco Unified Communications Products Unauthenticated API High CPU Utilization Denial of Service Vulnerability | 2023-10-04T16:00:00+00:00 | 2024-05-17T15:07:50+00:00 |
| cisco-sa-secure-nam-priv-esc-szu2vypz | Cisco Secure Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-nso-rwpesc-qrqgnh3f | Cisco Crosswork Network Services Orchestrator Vulnerabilities | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-nso-ordir-mnm8yqzo | Cisco Crosswork Network Services Orchestrator Open Redirect Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38482 | comedi: das6402: Fix bit shift out of bounds | 2025-07-02T00:00:00.000Z | 2026-02-21T04:11:45.000Z |
| msrc_cve-2025-22054 | arcnet: Add NULL check in com20020pci_probe() | 2025-04-02T00:00:00.000Z | 2026-02-21T04:11:03.000Z |
| msrc_cve-2025-38585 | staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() | 2025-08-02T00:00:00.000Z | 2026-02-21T04:10:38.000Z |
| msrc_cve-2025-68758 | backlight: led-bl: Add devlink to supplier LEDs | 2026-01-02T00:00:00.000Z | 2026-02-21T04:09:56.000Z |
| msrc_cve-2025-22038 | ksmbd: validate zero num_subauth before sub_auth is accessed | 2025-04-02T00:00:00.000Z | 2026-02-21T04:09:56.000Z |
| msrc_cve-2025-68763 | crypto: starfive - Correctly handle return of sg_nents_for_len | 2026-01-02T00:00:00.000Z | 2026-02-21T04:08:57.000Z |
| msrc_cve-2025-23136 | thermal: int340x: Add NULL check for adev | 2025-04-02T00:00:00.000Z | 2026-02-21T04:08:47.000Z |
| msrc_cve-2025-58436 | OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack | 2025-11-02T00:00:00.000Z | 2026-02-21T04:08:24.000Z |
| msrc_cve-2025-68766 | irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() | 2026-01-02T00:00:00.000Z | 2026-02-21T04:08:11.000Z |
| msrc_cve-2025-38476 | rpl: Fix use-after-free in rpl_do_srh_inline(). | 2025-07-02T00:00:00.000Z | 2026-02-21T04:07:49.000Z |
| msrc_cve-2025-22056 | netfilter: nft_tunnel: fix geneve_opt type confusion addition | 2025-04-02T00:00:00.000Z | 2026-02-21T04:07:29.000Z |
| msrc_cve-2025-68808 | media: vidtv: initialize local pointers upon transfer of memory ownership | 2026-01-02T00:00:00.000Z | 2026-02-21T04:07:10.000Z |
| msrc_cve-2025-68753 | ALSA: firewire-motu: add bounds check in put_user loop for DSP events | 2026-01-02T00:00:00.000Z | 2026-02-21T04:06:54.000Z |
| msrc_cve-2025-38579 | f2fs: fix KMSAN uninit-value in extent_info usage | 2025-08-02T00:00:00.000Z | 2026-02-21T04:06:50.000Z |
| msrc_cve-2025-26601 | Xorg: xwayland: use-after-free in syncinittrigger() | 2025-02-02T00:00:00.000Z | 2026-02-21T04:06:35.000Z |
| msrc_cve-2025-39728 | clk: samsung: Fix UBSAN panic in samsung_clk_init() | 2025-04-02T00:00:00.000Z | 2026-02-21T04:06:09.000Z |
| msrc_cve-2025-68755 | staging: most: remove broken i2c driver | 2026-01-02T00:00:00.000Z | 2026-02-21T04:05:35.000Z |
| msrc_cve-2025-26596 | Xorg: xwayland: heap overflow in xkbwritekeysyms() | 2025-02-02T00:00:00.000Z | 2026-02-21T04:05:17.000Z |
| msrc_cve-2025-38591 | bpf: Reject narrower access to pointer ctx fields | 2025-08-02T00:00:00.000Z | 2026-02-21T04:05:16.000Z |
| msrc_cve-2025-37925 | jfs: reject on-disk inodes of an unsupported type | 2025-04-02T00:00:00.000Z | 2026-02-21T04:04:51.000Z |
| msrc_cve-2025-38490 | net: libwx: remove duplicate page_pool_put_full_page() | 2025-07-02T00:00:00.000Z | 2026-02-21T04:04:11.000Z |
| msrc_cve-2025-26600 | Xorg: xwayland: use-after-free in playreleasedevents() | 2025-02-02T00:00:00.000Z | 2026-02-21T04:03:58.000Z |
| msrc_cve-2025-38152 | remoteproc: core: Clear table_sz when rproc_shutdown | 2025-04-02T00:00:00.000Z | 2026-02-21T04:03:36.000Z |
| msrc_cve-2025-38483 | comedi: das16m1: Fix bit shift out of bounds | 2025-07-02T00:00:00.000Z | 2026-02-21T04:03:27.000Z |
| msrc_cve-2025-68781 | usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal | 2026-01-02T00:00:00.000Z | 2026-02-21T04:02:38.000Z |
| msrc_cve-2025-26597 | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() | 2025-02-02T00:00:00.000Z | 2026-02-21T04:02:38.000Z |
| msrc_cve-2025-38478 | comedi: Fix initialization of data for instructions that write to subdevice | 2025-07-02T00:00:00.000Z | 2026-02-21T04:01:36.000Z |
| msrc_cve-2025-26595 | Xorg: xwayland: buffer overflow in xkbvmodmasktext() | 2025-02-02T00:00:00.000Z | 2026-02-21T04:01:17.000Z |
| msrc_cve-2022-22576 | An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S) IMAP(S) POP3(S) and LDAP(S) (openldap only). | 2022-05-02T00:00:00.000Z | 2026-02-21T04:01:03.000Z |
| msrc_cve-2025-38533 | net: libwx: fix the using of Rx buffer DMA | 2025-08-02T00:00:00.000Z | 2026-02-21T04:00:15.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201110-0384 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2025-12-22T22:45:35.787000Z |
| var-201806-1466 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2025-12-22T22:45:33.043000Z |
| var-200411-0172 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, all… | 2025-12-22T22:45:01.114000Z |
| var-202201-0104 | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtt… | 2025-12-22T22:44:26.002000Z |
| var-201904-1341 | A memory corruption issue was addressed with improved memory handling. This issue affecte… | 2025-12-22T22:44:24.861000Z |
| var-200904-0798 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.1… | 2025-12-22T22:43:53.030000Z |
| var-201203-0200 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2025-12-22T22:43:52.654000Z |
| var-201412-0615 | The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configur… | 2025-12-22T22:43:21.768000Z |
| var-200810-0394 | Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local us… | 2025-12-22T22:42:50.944000Z |
| var-201806-1468 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2025-12-22T22:42:50.262000Z |
| var-200106-0199 | banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs … | 2025-12-22T22:42:14.233000Z |
| var-201310-0343 | Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and ear… | 2025-12-22T22:41:42.481000Z |
| var-200703-0017 | Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted a… | 2025-12-22T22:41:11.175000Z |
| var-200904-0817 | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS … | 2025-12-22T22:41:09.605000Z |
| var-201506-0496 | Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL be… | 2025-12-22T22:41:09.056000Z |
| var-201903-0926 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9… | 2025-12-22T22:40:37.555000Z |
| var-201108-0147 | Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before … | 2025-12-22T22:40:33.025000Z |
| var-201304-0378 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:40:24.906000Z |
| var-200904-0811 | Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier… | 2025-12-22T22:40:17.651000Z |
| var-201110-0388 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2025-12-22T22:40:15.013000Z |
| var-202201-0468 | build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. E… | 2025-12-22T22:40:08.647000Z |
| var-201210-0144 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:39:44.393000Z |
| var-200704-0740 | The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 t… | 2025-12-22T22:39:43.370000Z |
| var-200611-0417 | Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X… | 2025-12-22T22:39:42.998000Z |
| var-200312-0218 | OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recu… | 2025-12-22T22:39:40.737000Z |
| var-201912-0582 | A logic issue was addressed with improved state management. This issue is fixed in iOS 12… | 2025-12-22T22:39:37.859000Z |
| var-201904-0347 | In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize… | 2025-12-22T22:39:37.447000Z |
| var-202104-0334 | curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Info… | 2025-12-22T22:39:37.199000Z |
| var-201208-0343 | libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not proper… | 2025-12-22T22:39:36.059000Z |
| var-201009-0230 | bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attac… | 2025-12-22T22:39:35.115000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000081 | EC-CUBE plugin (for EC-CUBE 4 series) "EC-CUBE Web API Plugin" vulnerable to stored cross-site scripting | 2024-07-30T14:06+09:00 | 2024-07-30T14:06+09:00 |
| jvndb-2024-000080 | EC-CUBE 4 Series improper input validation when installing plugins | 2024-07-30T13:56+09:00 | 2024-07-30T13:56+09:00 |
| jvndb-2024-000028 | Multiple vulnerabilities in SKYSEA Client View | 2024-03-07T16:09+09:00 | 2024-07-29T18:13+09:00 |
| jvndb-2024-000076 | SDoP contains a stack-based buffer overflow vulnerability. | 2024-07-29T17:24+09:00 | 2024-07-29T17:24+09:00 |
| jvndb-2024-003242 | OMRON NJ/NX series vulnerable to insufficient verification of data authenticity | 2024-05-28T12:28+09:00 | 2024-07-26T16:27+09:00 |
| jvndb-2021-000105 | PowerCMS XMLRPC API vulnerable to OS command injection | 2021-11-24T15:47+09:00 | 2024-07-26T15:22+09:00 |
| jvndb-2024-000075 | ORC vulnerable to stack-based buffer overflow | 2024-07-26T13:55+09:00 | 2024-07-26T13:55+09:00 |
| jvndb-2022-000030 | Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM | 2022-05-09T15:02+09:00 | 2024-07-18T16:30+09:00 |
| jvndb-2024-000073 | Assimp vulnerable to heap-based buffer overflow | 2024-07-18T13:44+09:00 | 2024-07-18T13:44+09:00 |
| jvndb-2024-000072 | Cybozu Garoon vulnerable to cross-site scripting | 2024-07-16T16:14+09:00 | 2024-07-16T16:14+09:00 |
| jvndb-2024-000071 | FUJITSU Network Edgiot GW1500 vulnerable to path traversal | 2024-07-16T14:41+09:00 | 2024-07-16T14:41+09:00 |
| jvndb-2023-007150 | Multiple vulnerabilities in First Corporation's DVRs | 2023-11-17T17:31+09:00 | 2024-07-11T17:05+09:00 |
| jvndb-2023-000094 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2023-09-22T13:51+09:00 | 2024-07-11T16:49+09:00 |
| jvndb-2024-000007 | Multiple Dahua Technology products vulnerable to authentication bypass | 2024-01-18T13:43+09:00 | 2024-07-11T16:10+09:00 |
| jvndb-2024-001882 | Sharp NEC Display Solutions' public displays vulnerable to local file inclusion | 2024-02-07T14:25+09:00 | 2024-07-11T14:27+09:00 |
| jvndb-2024-000070 | Out-of-bounds write vulnerability in Ricoh MFPs and printers | 2024-07-10T14:16+09:00 | 2024-07-10T14:16+09:00 |
| jvndb-2024-000059 | Multiple vulnerabilities in multiple Webmin products | 2024-07-09T14:27+09:00 | 2024-07-09T14:27+09:00 |
| jvndb-2024-000069 | Cleartext transmission issue in TONE store App to TONE store | 2024-07-08T13:43+09:00 | 2024-07-08T13:43+09:00 |
| jvndb-2024-000068 | JP1/Extensible SNMP Agent fails to restrict access permissions | 2024-07-03T14:57+09:00 | 2024-07-03T14:57+09:00 |
| jvndb-2017-000194 | WSR-300HP vulnerable to arbitrary code execution | 2017-08-08T18:07+09:00 | 2024-07-02T17:55+09:00 |
| jvndb-2024-003831 | Multiple TP-Link products vulnerable to OS command injection | 2024-06-28T17:38+09:00 | 2024-06-28T17:38+09:00 |
| jvndb-2024-000067 | "Piccoma" App uses a hard-coded API key for an external service | 2024-06-28T13:18+09:00 | 2024-06-28T13:18+09:00 |
| jvndb-2016-002299 | SaAT Netizen fails to properly verify downloaded installation and update files | 2016-12-05T13:52+09:00 | 2024-06-27T13:59+09:00 |
| jvndb-2022-000080 | Android App "IIJ SmartKey" vulnerable to information disclosure | 2022-10-14T13:57+09:00 | 2024-06-27T13:40+09:00 |
| jvndb-2023-001774 | Multiple vulnerabilities in SolarView Compact | 2023-05-09T16:09+09:00 | 2024-06-27T13:30+09:00 |
| jvndb-2024-000017 | Cybozu KUNAI for Android vulnerable to denial-of-service (DoS) | 2024-02-06T13:25+09:00 | 2024-06-27T13:28+09:00 |
| jvndb-2024-000066 | WordPress plugins "WP Tweet Walls" and "Sola Testimonials" vulnerable to cross-site request forgery | 2024-06-26T14:25+09:00 | 2024-06-26T14:25+09:00 |
| jvndb-2022-000026 | WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" vulnerable to cross-site request forgery | 2022-04-15T13:15+09:00 | 2024-06-25T18:04+09:00 |
| jvndb-2024-003699 | LINE client for iOS vulnerable to universal cross-site scripting | 2024-06-24T11:05+09:00 | 2024-06-24T11:05+09:00 |
| jvndb-2022-001372 | Trend Micro Antivirus for MAC vulnerable to privilege escalation | 2022-02-18T14:55+09:00 | 2024-06-21T18:04+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0180-1 | Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) | 2026-01-20T07:04:14Z | 2026-01-20T07:04:14Z |
| suse-su-2026:0176-1 | Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T19:03:59Z | 2026-01-19T19:03:59Z |
| suse-su-2026:20099-1 | Security update for rust1.91, rust1.92 | 2026-01-19T18:30:57Z | 2026-01-19T18:30:57Z |
| suse-su-2026:0168-1 | Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T18:04:39Z | 2026-01-19T18:04:39Z |
| suse-su-2026:0174-1 | Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T18:04:30Z | 2026-01-19T18:04:30Z |
| suse-su-2026:0173-1 | Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5) | 2026-01-19T17:33:53Z | 2026-01-19T17:33:53Z |
| suse-su-2026:0171-1 | Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7) | 2026-01-19T16:34:41Z | 2026-01-19T16:34:41Z |
| suse-su-2026:0169-1 | Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7) | 2026-01-19T16:04:33Z | 2026-01-19T16:04:33Z |
| suse-su-2026:0166-1 | Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T15:05:22Z | 2026-01-19T15:05:22Z |
| suse-su-2026:0163-1 | Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T14:34:24Z | 2026-01-19T14:34:24Z |
| suse-su-2026:0155-1 | Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) | 2026-01-19T12:11:10Z | 2026-01-19T12:11:10Z |
| suse-su-2026:0154-1 | Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) | 2026-01-19T12:08:42Z | 2026-01-19T12:08:42Z |
| suse-su-2026:0153-1 | Security update for MozillaThunderbird | 2026-01-19T11:14:01Z | 2026-01-19T11:14:01Z |
| suse-su-2026:20096-1 | Security update for cargo-c | 2026-01-19T10:38:15Z | 2026-01-19T10:38:15Z |
| suse-su-2026:0151-1 | Security update for libsoup | 2026-01-19T09:56:33Z | 2026-01-19T09:56:33Z |
| suse-su-2026:20112-1 | Security update for docker | 2026-01-17T13:20:31Z | 2026-01-17T13:20:31Z |
| suse-su-2026:20095-1 | Security update for docker | 2026-01-17T13:20:31Z | 2026-01-17T13:20:31Z |
| suse-su-2026:0148-1 | Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T12:04:20Z | 2026-01-17T12:04:20Z |
| suse-su-2026:0147-1 | Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T11:33:38Z | 2026-01-17T11:33:38Z |
| suse-su-2026:0146-1 | Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T11:33:35Z | 2026-01-17T11:33:35Z |
| suse-su-2026:0145-1 | Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T11:04:25Z | 2026-01-17T11:04:25Z |
| suse-su-2026:0144-1 | Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T11:04:22Z | 2026-01-17T11:04:22Z |
| suse-su-2026:0143-1 | Security update for avahi | 2026-01-17T11:04:15Z | 2026-01-17T11:04:15Z |
| suse-su-2026:0133-1 | Security update for python | 2026-01-16T09:19:41Z | 2026-01-16T09:19:41Z |
| suse-su-2026:20090-1 | Security update for cpp-httplib | 2026-01-15T22:11:51Z | 2026-01-15T22:11:51Z |
| suse-su-2026:20089-1 | Security update for alloy | 2026-01-15T17:57:53Z | 2026-01-15T17:57:53Z |
| suse-su-2026:20088-1 | Security update for erlang | 2026-01-15T17:32:55Z | 2026-01-15T17:32:55Z |
| suse-su-2026:20086-1 | Security update for MozillaFirefox | 2026-01-15T16:33:38Z | 2026-01-15T16:33:38Z |
| suse-su-2026:0130-1 | Security update for python310 | 2026-01-15T13:11:09Z | 2026-01-15T13:11:09Z |
| suse-su-2026:20085-1 | Security update for bind | 2026-01-15T10:43:50Z | 2026-01-15T10:43:50Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15836-1 | kernel-devel-6.18.2-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15835-1 | duc-1.4.6-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15834-1 | busybox-1.37.0-8.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15833-1 | MozillaFirefox-146.0.1-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:20172-1 | Security update for the Linux Kernel | 2025-12-19T17:38:16Z | 2025-12-19T17:38:16Z |
| opensuse-su-2025:15832-1 | coredns-for-k8s1.35-1.13.1-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15831-1 | chromedriver-143.0.7499.146-1.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15830-1 | alloy-1.12.0-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15829-1 | ImageMagick-7.1.2.10-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:20171-1 | Security update for qemu | 2025-12-18T12:42:03Z | 2025-12-18T12:42:03Z |
| opensuse-su-2025:20177-1 | Security update for cheat | 2025-12-18T00:17:52Z | 2025-12-18T00:17:52Z |
| opensuse-su-2025:15828-1 | libruby3_4-3_4-3.4.8-1.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15827-1 | rsync-3.4.1-4.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15826-1 | coredns-for-k8s1.34-1.12.1-2.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15825-1 | coredns-for-k8s1.33-1.12.0-2.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15824-1 | netty-4.1.130-1.1 on GA media | 2025-12-17T00:00:00Z | 2025-12-17T00:00:00Z |
| opensuse-su-2025:15823-1 | clair-4.9.0-1.1 on GA media | 2025-12-17T00:00:00Z | 2025-12-17T00:00:00Z |
| opensuse-su-2025:20164-1 | Security update for openssl-3 | 2025-12-15T18:16:15Z | 2025-12-15T18:16:15Z |
| opensuse-su-2025:20163-1 | Security update for grub2 | 2025-12-15T12:52:50Z | 2025-12-15T12:52:50Z |
| opensuse-su-2025:20162-1 | Security update for ImageMagick | 2025-12-15T09:55:25Z | 2025-12-15T09:55:25Z |
| opensuse-su-2025:15822-1 | strongswan-6.0.4-1.1 on GA media | 2025-12-15T00:00:00Z | 2025-12-15T00:00:00Z |
| opensuse-su-2025:15821-1 | qemu-10.1.3-1.1 on GA media | 2025-12-15T00:00:00Z | 2025-12-15T00:00:00Z |
| opensuse-su-2025:15820-1 | chromedriver-143.0.7499.109-1.1 on GA media | 2025-12-13T00:00:00Z | 2025-12-13T00:00:00Z |
| opensuse-su-2025:20150-1 | Security update for binutils | 2025-12-12T15:58:27Z | 2025-12-12T15:58:27Z |
| opensuse-su-2025:20161-1 | Security update for chromium | 2025-12-12T15:30:17Z | 2025-12-12T15:30:17Z |
| opensuse-su-2025:20160-1 | Security update for hauler | 2025-12-12T13:20:11Z | 2025-12-12T13:20:11Z |
| opensuse-su-2025:20159-1 | Security update for keylime | 2025-12-12T09:46:01Z | 2025-12-12T09:46:01Z |
| opensuse-su-2025:20158-1 | Security update for go1.24 | 2025-12-12T07:45:01Z | 2025-12-12T07:45:01Z |
| opensuse-su-2025:20157-1 | Security update for go1.25 | 2025-12-12T07:23:58Z | 2025-12-12T07:23:58Z |
| opensuse-su-2025:15819-1 | libruby4_0-4_0-4.0.0~preview2-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-kibana-2025-68386 | Kibana Improper Authorization | 2025-12-20T11:39:22.798Z | 2025-12-20T12:06:39.262Z |
| bit-haproxy-2025-11230 | Denial of service vulnerability in HAProxy mjson library | 2025-12-20T11:38:08.173Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68422 | Kibana Improper Authorization | 2025-12-20T11:36:41.895Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68389 | Kibana Allocation of Resources Without Limits or Throttling | 2025-12-20T11:36:40.368Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68387 | Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2025-12-20T11:36:38.841Z | 2025-12-20T12:06:39.262Z |
| bit-elk-2025-68386 | Kibana Improper Authorization | 2025-12-20T11:36:37.419Z | 2025-12-20T12:06:39.262Z |
| bit-elasticsearch-2025-68390 | Elasticsearch Allocation of Resources Without Limits or Throttling | 2025-12-20T11:36:36.080Z | 2025-12-20T12:06:39.262Z |
| bit-elasticsearch-2025-68384 | Elasticsearch Allocation of Resources Without Limits or Throttling | 2025-12-20T11:36:34.496Z | 2025-12-20T12:06:39.262Z |
| bit-elasticsearch-2025-37731 | Elasticsearch Improper Authentication | 2025-12-18T11:37:43.121Z | 2025-12-19T12:06:33.755Z |
| bit-kibana-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:40:39.003Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-8405 | Improper Encoding or Escaping of Output in GitLab | 2025-12-18T12:06:48.009Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-4097 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:05:44.981Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-14157 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:46.334Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-13978 | Generation of Error Message Containing Sensitive Information in GitLab | 2025-12-18T12:04:44.454Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12734 | Improper Encoding or Escaping of Output in GitLab | 2025-12-18T12:04:35.112Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12716 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:33.134Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12562 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:25.675Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12029 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:20.332Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11984 | Authentication Bypass Using an Alternate Path or Channel in GitLab | 2025-12-18T12:04:14.698Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11247 | Authorization Bypass Through User-Controlled Key in GitLab | 2025-12-18T12:03:59.823Z | 2025-12-18T12:08:20.703Z |
| bit-elk-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:37:43.350Z | 2025-12-18T12:08:20.703Z |
| bit-vault-2025-6013 | Vault LDAP MFA Enforcement Bypass When Using Username As Alias | 2025-08-08T06:04:14.175Z | 2025-12-16T15:14:22.118Z |
| bit-airflow-2025-66388 | Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI | 2025-12-16T14:37:51.384Z | 2025-12-16T15:14:22.118Z |
| bit-mongodb-2025-12657 | Malformed KMIP response may result in access violation | 2025-12-13T11:42:23.275Z | 2025-12-13T12:05:53.698Z |
| bit-django-2025-13372 | Potential SQL injection in FilteredRelation column aliases on PostgreSQL | 2025-12-13T11:36:31.883Z | 2025-12-13T12:05:53.698Z |
| bit-mongodb-2025-14345 | Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server | 2025-12-12T17:42:48.437Z | 2025-12-12T18:06:16.411Z |
| bit-jenkins-2025-67639 | 2025-12-12T11:23:52.749Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67638 | 2025-12-12T11:23:47.516Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67637 | 2025-12-12T11:23:42.761Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67636 | 2025-12-12T11:23:36.617Z | 2025-12-12T11:51:34.315Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-au31441 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:29:25.997506Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-an66259 | attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests | 2026-01-30T16:28:25.281484Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-aj76138 | tar | 2026-01-30T14:58:52.957172Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ai42483 | PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access | 2026-01-30T16:26:55.732852Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ad41794 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:47:54.368234Z | 2026-01-29T18:58:54Z |
| cleanstart-2025-zr62045 | attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing | 2026-01-30T16:56:56.696859Z | 2026-01-29T18:58:54Z |
| cleanstart-2025-us16386 | Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.2-r0 | 2026-01-16T11:58:18.007779Z | 2025-12-23T06:02:25Z |
| cleanstart-2025-ob44035 | Security fixes for CVE-2025-61729, GHSA-f6x5-jh6r-wrfv, GHSA-j5w8-q4qc-rx2x applied in versions: 1.16.2-r2 | 2026-01-16T11:28:43.176297Z | 2025-12-13T08:34:16Z |
| cleanstart-2025-yj25356 | Security fixes for CVE-2025-61729 applied in versions: 1.40.2-r0 | 2026-01-16T12:00:45.358320Z | 2025-12-06T13:34:11Z |
| cleanstart-2025-jl63399 | Security fixes for CVE-2025-61729 applied in versions: 0.20.2-r1 | 2026-01-16T12:00:43.312220Z | 2025-12-06T13:34:11Z |
| cleanstart-2025-eu07511 | Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0 | 2026-01-16T11:58:32.440192Z | 2025-12-06T13:34:11Z |
| cleanstart-2025-az51267 | Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.0-r0 | 2026-01-16T12:00:40.997706Z | 2025-09-29T13:20:59Z |
| cleanstart-2025-cn65903 | Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0 | 2026-01-16T12:00:42.667592Z | 2025-09-29T13:20:40Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| drupal-contrib-2021-009 | 2021-05-12T16:23:23.000Z | 2023-08-11T17:18:42.000Z | |
| drupal-contrib-2021-008 | 2021-05-12T16:14:35.000Z | 2023-08-11T17:17:58.000Z | |
| drupal-contrib-2021-007 | 2021-05-12T16:08:34.000Z | 2023-08-11T17:17:34.000Z | |
| drupal-contrib-2021-006 | 2021-04-28T16:47:09.000Z | 2023-08-11T17:16:38.000Z | |
| drupal-contrib-2021-005 | 2021-03-17T18:36:07.000Z | 2023-08-11T17:15:48.000Z | |
| drupal-contrib-2021-004 | 2021-03-03T16:49:33.000Z | 2023-08-11T17:15:22.000Z | |
| drupal-contrib-2021-003 | 2021-01-27T17:53:09.000Z | 2023-08-11T17:13:06.000Z | |
| drupal-contrib-2021-022 | 2021-06-30T16:46:21.000Z | 2023-08-11T17:12:21.000Z | |
| drupal-contrib-2021-021 | 2021-06-30T16:43:19.000Z | 2023-08-11T17:11:42.000Z | |
| drupal-contrib-2021-020 | 2021-06-30T16:39:06.000Z | 2023-08-11T17:11:13.000Z | |
| drupal-contrib-2021-019 | 2021-06-23T16:51:26.000Z | 2023-08-11T17:10:31.000Z | |
| drupal-contrib-2021-018 | 2021-06-23T16:47:59.000Z | 2023-08-11T17:09:57.000Z | |
| drupal-contrib-2021-017 | 2021-06-16T16:15:21.000Z | 2023-08-11T17:09:04.000Z | |
| drupal-contrib-2021-016 | 2021-06-16T16:05:14.000Z | 2023-08-11T17:08:37.000Z | |
| drupal-contrib-2021-015 | 2021-06-16T15:58:47.000Z | 2023-08-11T17:08:06.000Z | |
| drupal-contrib-2021-014 | 2021-06-02T16:59:12.000Z | 2023-08-11T17:07:36.000Z | |
| drupal-contrib-2021-013 | 2021-06-02T16:56:19.000Z | 2023-08-11T17:07:00.000Z | |
| drupal-contrib-2021-033 | 2021-09-22T16:55:24.000Z | 2023-08-11T17:05:59.000Z | |
| drupal-contrib-2021-032 | 2021-09-22T16:51:57.000Z | 2023-08-11T17:04:59.000Z | |
| drupal-contrib-2021-031 | 2021-09-22T16:49:24.000Z | 2023-08-11T17:04:21.000Z | |
| drupal-contrib-2021-030 | 2021-09-22T16:43:17.000Z | 2023-08-11T17:03:36.000Z | |
| drupal-contrib-2021-029 | 2021-09-15T15:30:15.000Z | 2023-08-11T17:03:09.000Z | |
| drupal-contrib-2021-028 | 2021-09-15T15:28:04.000Z | 2023-08-11T17:02:11.000Z | |
| drupal-contrib-2021-026 | 2021-08-25T15:27:54.000Z | 2023-08-11T17:01:51.000Z | |
| drupal-contrib-2021-025 | 2021-08-25T14:36:25.000Z | 2023-08-11T16:59:37.000Z | |
| drupal-contrib-2021-024 | 2021-07-28T16:39:17.000Z | 2023-08-11T16:58:13.000Z | |
| drupal-contrib-2021-023 | 2021-07-21T16:51:57.000Z | 2023-08-11T16:57:55.000Z | |
| drupal-contrib-2021-043 | 2021-10-13T16:32:09.000Z | 2023-08-11T16:57:04.000Z | |
| drupal-contrib-2021-042 | 2021-09-29T14:38:35.000Z | 2023-08-11T16:56:26.000Z | |
| drupal-contrib-2021-041 | 2021-09-22T17:26:20.000Z | 2023-08-11T16:55:59.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-07120 | IBM Engineering Systems Design Rhapsody信息泄露漏洞 | 2025-07-24 | 2026-01-23 |
| cnvd-2026-07119 | IBM Engineering Systems Design Rhapsody堆栈缓冲区溢出漏洞(CNVD-2026-07119) | 2025-07-24 | 2026-01-23 |
| cnvd-2026-07118 | IBM Engineering Systems Design Rhapsody堆栈缓冲区溢出漏洞 | 2025-07-24 | 2026-01-23 |
| cnvd-2026-07117 | IBM Cognos Command Center重定向漏洞 | 2025-08-28 | 2026-01-23 |
| cnvd-2026-07116 | IBM Cognos Command Center代码执行漏洞 | 2025-08-28 | 2026-01-23 |
| cnvd-2026-07115 | IBM Cognos Command Center点击劫持漏洞 | 2025-08-28 | 2026-01-23 |
| cnvd-2026-07114 | IBM Concert信息泄露漏洞(CNVD-2026-07114) | 2025-11-24 | 2026-01-23 |
| cnvd-2026-07113 | IBM Concert堆内存清理不当漏洞 | 2025-12-29 | 2026-01-23 |
| cnvd-2026-07112 | IBM Concert信息泄露漏洞 | 2026-01-14 | 2026-01-23 |
| cnvd-2026-07111 | IBM Concert竞争条件漏洞 | 2026-01-14 | 2026-01-23 |
| cnvd-2026-07091 | D-Link DAP-2622堆栈缓冲区溢出远程代码执行漏洞(CNVD-2026-07091) | 2023-08-28 | 2026-01-23 |
| cnvd-2026-07090 | D-Link DAP-2622栈缓冲区溢出远程代码执行漏洞 | 2023-08-28 | 2026-01-23 |
| cnvd-2026-07089 | D-Link DAP-2622堆栈缓冲区溢出远程代码执行漏洞 | 2023-08-28 | 2026-01-23 |
| cnvd-2026-07088 | D-Link DIR-823G SOAPACTION参数缓冲区溢出漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07087 | D-Link DIR-823G Cookie参数缓冲区溢出漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07086 | D-Link DIR-823G缓冲区溢出漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07085 | D-Link DIR-823G sub_41C488函数空指针取消引用漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07084 | D-Link DIR-823G sub_4484A8函数空指针取消引用漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07083 | D-Link DIR-823G sub_4484A8函数空指针取消引用漏洞 | 2024-03-06 | 2026-01-23 |
| cnvd-2026-07082 | D-Link DIR-823G sub_42AF30函数空指针取消引用漏洞 | 2024-03-06 | 2026-01-23 |
| cnvd-2026-07081 | D-Link DIR-823G空指针取消引用漏洞 | 2024-03-06 | 2026-01-23 |
| cnvd-2026-07040 | WordPress WP-Members Membership plugin跨站脚本漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07039 | WordPress WP-CRM System plugin未经授权访问漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07027 | WordPress Uploadify plugin代码问题漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07026 | WordPress Testimonials Creator plugin跨站脚本漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07025 | WordPress Supreme Modules Lite plugin代码问题漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07012 | WordPress Stopwords for comments plugin跨站请求伪造漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07004 | WordPress SpiceForms Form Builder plugin跨站脚本漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-06988 | WordPress Sosh Share Buttons plugin跨站请求伪造漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-06987 | WordPress SocialChamp with WordPress plugin跨站请求伪造漏洞 | 2026-01-19 | 2026-01-23 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1046 | Multiples vulnérabilités dans les produits Moxa | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1045 | Vulnérabilité dans MISP | 2025-11-27T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1044 | Vulnérabilité dans Mattermost Server | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1043 | Multiples vulnérabilités dans les produits Splunk | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1042 | Multiples vulnérabilités dans GitLab | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1041 | Vulnérabilité dans Synology ActiveProtect Agent | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| certfr-2025-avi-1040 | Vulnérabilité dans Postfix | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| certfr-2025-avi-1039 | Vulnérabilité dans Kaspersky Security Center | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1038 | Vulnérabilité dans les produits PrimX | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1037 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1036 | Multiples vulnérabilités dans les produits VMware | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1035 | Multiples vulnérabilités dans les produits Synology | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1034 | Multiples vulnérabilités dans les produits IBM | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1033 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1032 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1031 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1030 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1029 | Vulnérabilité dans les produits Kaspersky | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1028 | Vulnérabilité dans GnuTLS | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1027 | Multiples vulnérabilités dans les produits SonicWall | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1026 | Multiples vulnérabilités dans Wireshark | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1025 | Multiples vulnérabilités dans les produits Atlassian | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1024 | Multiples vulnérabilités dans les produits VMware | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1023 | Multiples vulnérabilités dans les produits Fortinet | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1022 | Multiples vulnérabilités dans Microsoft Edge | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1021 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1020 | Multiples vulnérabilités dans les produits SolarWinds | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1019 | Multiples vulnérabilités dans Mattermost Server | 2025-11-18T00:00:00.000000 | 2025-11-18T00:00:00.000000 |
| certfr-2025-avi-1018 | Multiples vulnérabilités dans Google Chrome | 2025-11-18T00:00:00.000000 | 2025-11-18T00:00:00.000000 |
| certfr-2025-avi-1017 | Multiples vulnérabilités dans Mattermost Server | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-ale-011 | Diffusion de programmes exploitant la faille GDI+ | 2004-09-23T00:00:00.000000 | 2004-09-23T00:00:00.000000 |
| certa-2004-ale-010 | Vulnérabilité du service Telnet de Cisco IOS | 2004-08-30T00:00:00.000000 | 2004-08-30T00:00:00.000000 |
| certa-2004-ale-004 | Vulnérabilité du composant dtlogin de CDE | 2004-03-26T00:00:00.000000 | 2004-08-05T00:00:00.000000 |
| certa-2004-ale-009 | Vulnérabilités d'Internet Explorer | 2004-06-09T00:00:00.000000 | 2004-08-03T00:00:00.000000 |
| certa-2004-ale-008 | Vulnérabilité de Safari | 2004-05-19T00:00:00.000000 | 2004-05-24T00:00:00.000000 |
| certa-2004-ale-007 | Exploitation de la vulnérabilité LSASS sous Windows : appration du ver Sasser | 2004-05-02T00:00:00.000000 | 2004-05-02T00:00:00.000000 |
| certa-2004-ale-006 | Vulnérabilité SMB sous Windows | 2004-04-28T00:00:00.000000 | 2004-04-28T00:00:00.000000 |
| certa-2004-ale-005 | Vulnérabilité d'Internet Explorer | 2004-04-09T00:00:00.000000 | 2004-04-15T00:00:00.000000 |
| certa-2004-ale-003 | Propagation du ver Phatbot | 2004-03-19T00:00:00.000000 | 2004-03-19T00:00:00.000000 |
| certa-2004-ale-002 | Propagation du virux Bizex | 2004-02-26T00:00:00.000000 | 2004-02-26T00:00:00.000000 |
| certa-2003-ale-006 | Vulnérabilité dans l'affichage des adresses réticulaires | 2003-12-19T00:00:00.000000 | 2004-02-03T00:00:00.000000 |
| certa-2004-ale-001 | Obstacles à la résolution d'incidents | 2004-01-30T00:00:00.000000 | 2004-01-30T00:00:00.000000 |
| certa-2003-ale-004 | Vulnérabilité d'Internet Explorer | 2003-09-10T00:00:00.000000 | 2003-10-06T00:00:00.000000 |
| certa-2003-ale-005 | Vulnérabilité de sadmind sur Solaris | 2003-09-19T00:00:00.000000 | 2003-09-19T00:00:00.000000 |
| certa-2003-ale-003 | Exploitation massive de la vulnérabilité « include PHP » | 2003-09-09T00:00:00.000000 | 2003-09-09T00:00:00.000000 |
| certa-2003-ale-002 | Exploitation d'une faille de Windows RPC | 2003-08-01T00:00:00.000000 | 2003-08-19T00:00:00.000000 |
| certa-2003-ale-001 | Vulnérabilité dans l'implémentation des logiciels de lecture des documents PDF | 2003-06-23T00:00:00.000000 | 2003-07-04T00:00:00.000000 |
| certa-2002-ale-007 | Cédérom Pages Pro | 2002-09-04T00:00:00.000000 | 2002-09-04T00:00:00.000000 |
| certa-2002-ale-006 | Propagation du ver Spida (Microsoft SQL Server) | 2002-05-22T00:00:00.000000 | 2002-06-04T00:00:00.000000 |
| certa-2002-ale-005 | Risque de compromission des auto-commutateurs (PABX) ALCATEL 4400 | 2002-02-20T00:00:00.000000 | 2002-02-20T00:00:00.000000 |
| certa-2002-ale-004 | Multiples implémentations de SNMP V1 vulnérables | 2002-02-13T00:00:00.000000 | 2002-02-13T00:00:00.000000 |
| certa-2002-ale-003 | Propagation importante du virus « W32.Myparty@mm » | 2002-01-29T00:00:00.000000 | 2002-01-29T00:00:00.000000 |
| certa-2002-ale-002 | Exploitation d'une faille de wu-ftpd | 2002-01-28T00:00:00.000000 | 2002-01-28T00:00:00.000000 |
| certa-2002-ale-001 | Exploitation massive d'une faille de CDE | 2002-01-24T00:00:00.000000 | 2002-01-24T00:00:00.000000 |
| certa-2001-ale-012 | Rappels concernant les virus | 2001-09-13T00:00:00.000000 | 2002-01-09T00:00:00.000000 |
| certa-2001-ale-016 | Propagation du ver badtrans - variante B | 2001-11-27T00:00:00.000000 | 2001-11-27T00:00:00.000000 |
| certa-2001-ale-015 | Exploitation massive d'une ancienne vulnérabilité de SSH | 2001-11-19T00:00:00.000000 | 2001-11-19T00:00:00.000000 |
| certa-2001-ale-014 | Risque de divulgation de données personnelles/confidentielles par des produits Microsoft | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-ale-013 | Propagation du ver/virus NIMDA (Concept Virus) | 2001-09-19T00:00:00.000000 | 2001-09-19T00:00:00.000000 |
| certa-2001-ale-011 | <TT>antivirus2001</TT> est un cheval de Troie | 2001-09-10T00:00:00.000000 | 2001-09-13T00:00:00.000000 |