Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27951 |
5.3 (3.1)
|
FreeRDP has possible Integer overflow in Stream_Ensure… |
FreeRDP |
FreeRDP |
2026-02-25T21:07:30.828Z | 2026-02-25T21:43:56.822Z |
| CVE-2026-27950 |
5.5 (4.0)
|
FreeRDP heap-use-after-free in update_pointer_new(SDL)… |
FreeRDP |
FreeRDP |
2026-02-25T21:05:23.581Z | 2026-02-26T20:38:07.068Z |
| CVE-2026-26986 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in rail_window_free |
FreeRDP |
FreeRDP |
2026-02-25T21:01:16.916Z | 2026-02-26T20:36:03.263Z |
| CVE-2026-26965 |
8.8 (3.1)
|
FreeRDP has Out-of-bounds Write |
FreeRDP |
FreeRDP |
2026-02-25T20:59:17.828Z | 2026-02-26T14:44:04.865Z |
| CVE-2026-3172 |
8.1 (3.1)
|
pgvector buffer overflow in parallel HNSW index build |
n/a |
pgvector |
2026-02-25T20:59:10.051Z | 2026-02-26T15:04:08.481Z |
| CVE-2026-26955 |
8.8 (3.1)
|
FreeRDP has Out-of-bounds Write |
FreeRDP |
FreeRDP |
2026-02-25T20:47:14.660Z | 2026-02-26T20:30:46.008Z |
| CVE-2026-27015 |
5 (4.0)
|
FreeRDP: Smartcard NDR Alignment Padding Triggers Reac… |
FreeRDP |
FreeRDP |
2026-02-25T20:44:14.152Z | 2026-02-26T15:49:52.553Z |
| CVE-2026-26271 |
5.5 (4.0)
|
Buffer Overread in FreeRDP Icon Processing |
FreeRDP |
FreeRDP |
2026-02-25T20:40:19.377Z | 2026-02-26T15:50:49.130Z |
| CVE-2026-25997 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_clipboard_format_equal |
FreeRDP |
FreeRDP |
2026-02-25T20:38:40.483Z | 2026-02-25T21:39:08.071Z |
| CVE-2026-25959 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_ |
FreeRDP |
FreeRDP |
2026-02-25T20:36:09.791Z | 2026-02-26T15:52:24.977Z |
| CVE-2026-0542 |
9.2 (4.0)
|
Remote Code Execution in ServiceNow AI Platform |
ServiceNow |
ServiceNow AI Platform |
2026-02-25T20:35:27.303Z | 2026-02-26T15:53:05.161Z |
| CVE-2026-25955 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_AppUpdateWindowF… |
FreeRDP |
FreeRDP |
2026-02-25T20:32:42.458Z | 2026-02-26T15:54:09.229Z |
| CVE-2026-25954 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_rail_server_loca… |
FreeRDP |
FreeRDP |
2026-02-25T20:30:32.755Z | 2026-02-26T15:54:47.557Z |
| CVE-2026-25953 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_AppUpdateWindowF… |
FreeRDP |
FreeRDP |
2026-02-25T20:27:00.424Z | 2026-02-26T15:55:34.086Z |
| CVE-2026-25952 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo |
FreeRDP |
FreeRDP |
2026-02-25T20:24:07.396Z | 2026-02-26T15:56:24.771Z |
| CVE-2025-14511 |
7.5 (3.1)
|
Improper Validation of Specified Quantity in Input in GitLab |
GitLab |
GitLab |
2026-02-25T20:05:24.799Z | 2026-02-26T15:57:25.416Z |
| CVE-2026-0752 |
8 (3.1)
|
Improper Neutralization of Input During Web Page Gener… |
GitLab |
GitLab |
2026-02-25T20:05:19.818Z | 2026-02-26T14:44:05.136Z |
| CVE-2026-1388 |
7.5 (3.1)
|
Inefficient Regular Expression Complexity in GitLab |
GitLab |
GitLab |
2026-02-25T20:05:05.289Z | 2026-02-26T15:07:56.004Z |
| CVE-2026-1662 |
7.5 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-02-25T20:04:59.913Z | 2026-02-26T15:10:46.924Z |
| CVE-2026-1747 |
4.3 (3.1)
|
Authentication Bypass Using an Alternate Path or Chann… |
GitLab |
GitLab |
2026-02-25T20:04:49.893Z | 2026-02-26T15:39:03.951Z |
| CVE-2026-1725 |
5.3 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-02-25T20:04:44.830Z | 2026-02-26T15:42:29.688Z |
| CVE-2026-2845 |
6.5 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-02-25T20:04:35.210Z | 2026-02-26T15:45:14.406Z |
| CVE-2026-3200 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
z-9527 admin user.js getUsers sql injection |
z-9527 |
admin |
2026-02-25T20:02:08.548Z | 2026-02-27T17:57:56.330Z |
| CVE-2026-25942 |
5.5 (4.0)
|
FreeRDP has global-buffer-overflow in xf_rail_server_e… |
FreeRDP |
FreeRDP |
2026-02-25T20:01:16.472Z | 2026-02-26T20:47:09.779Z |
| CVE-2026-22721 |
6.2 (3.1)
|
VMware Aria Operations privilege escalation vulnerability |
VMware |
VMware Aria Operations |
2026-02-25T20:00:15.719Z | 2026-02-27T04:55:47.793Z |
| CVE-2026-25941 |
4.3 (3.1)
|
FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-B… |
FreeRDP |
FreeRDP |
2026-02-25T19:55:24.984Z | 2026-02-26T21:33:42.006Z |
| CVE-2026-25736 |
6.1 (3.1)
|
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vu… |
rucio |
rucio |
2026-02-25T19:50:52.820Z | 2026-02-26T15:59:19.879Z |
| CVE-2026-25735 |
6.1 (3.1)
|
Rucio WebUI has a Stored Cross-site Scripting (XSS) vu… |
rucio |
rucio |
2026-02-25T19:43:36.463Z | 2026-02-26T16:00:36.501Z |
| CVE-2025-3525 |
6.5 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-02-25T19:33:56.609Z | 2026-02-25T20:51:14.590Z |
| CVE-2026-25734 |
6.1 (3.1)
|
Rucio WebUI has Stored Cross-site Scripting (XSS) in R… |
rucio |
rucio |
2026-02-25T19:33:44.627Z | 2026-02-26T16:01:36.671Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27578 |
8.5 (4.0)
|
n8n Vulnerable to Stored XSS via Various Nodes |
n8n-io |
n8n |
2026-02-25T22:40:38.606Z | 2026-02-26T20:16:20.758Z |
| CVE-2026-27577 |
9.4 (4.0)
|
n8n: Expression Sandbox Escape Leads to RCE |
n8n-io |
n8n |
2026-02-25T22:19:44.806Z | 2026-02-26T20:14:30.327Z |
| CVE-2026-27498 |
9 (4.0)
|
n8n has Arbitrary Command Execution via File Write and… |
n8n-io |
n8n |
2026-02-25T22:42:21.618Z | 2026-02-26T20:21:05.587Z |
| CVE-2026-27497 |
9.4 (4.0)
|
n8n has Potential Remote Code Execution via Merge Node |
n8n-io |
n8n |
2026-02-25T22:16:08.347Z | 2026-02-26T19:35:29.529Z |
| CVE-2026-27495 |
9.4 (4.0)
|
n8n has a Sandbox Escape in its JavaScript Task Runner |
n8n-io |
n8n |
2026-02-25T22:10:04.054Z | 2026-02-26T20:28:18.099Z |
| CVE-2026-27494 |
7.1 (4.0)
|
n8n has Arbitrary File Read via Python Code Node Sandb… |
n8n-io |
n8n |
2026-02-25T22:08:00.520Z | 2026-02-26T20:28:57.625Z |
| CVE-2026-27493 |
9.5 (4.0)
|
n8n has Unauthenticated Expression Evaluation via Form Node |
n8n-io |
n8n |
2026-02-25T22:05:00.686Z | 2026-02-26T20:27:26.036Z |
| CVE-2026-2694 |
5.4 (3.1)
|
The Events Calendar <= 6.15.16 - Improper Authorizatio… |
stellarwp |
The Events Calendar |
2026-02-25T21:25:02.211Z | 2026-02-25T21:40:41.317Z |
| CVE-2026-27951 |
5.3 (3.1)
|
FreeRDP has possible Integer overflow in Stream_Ensure… |
FreeRDP |
FreeRDP |
2026-02-25T21:07:30.828Z | 2026-02-25T21:43:56.822Z |
| CVE-2026-27950 |
5.5 (4.0)
|
FreeRDP heap-use-after-free in update_pointer_new(SDL)… |
FreeRDP |
FreeRDP |
2026-02-25T21:05:23.581Z | 2026-02-26T20:38:07.068Z |
| CVE-2026-27819 |
7.2 (3.1)
|
Vikunja has Path Traversal in CLI Restore |
go-vikunja |
vikunja |
2026-02-25T21:40:38.703Z | 2026-02-26T20:24:45.237Z |
| CVE-2026-27616 |
7.3 (3.1)
|
Vikunja Vulnerable to Stored Cross-Site Scripting (XSS… |
go-vikunja |
vikunja |
2026-02-25T21:37:57.671Z | 2026-02-26T20:38:41.085Z |
| CVE-2026-27575 |
9.1 (3.1)
|
Vijkunja has Weak Password Policy Combined with Persis… |
go-vikunja |
vikunja |
2026-02-25T21:35:23.230Z | 2026-02-26T20:39:18.888Z |
| CVE-2026-27148 |
8.9 (4.0)
|
Storybook Dev Server Vulnerable to WebSocket Hijacking |
storybookjs |
storybook |
2026-02-25T21:46:48.967Z | 2026-02-26T20:26:14.136Z |
| CVE-2026-27116 |
6.1 (3.1)
|
Vikunja has Reflected HTML Injection via filter Parame… |
go-vikunja |
vikunja |
2026-02-25T21:33:50.448Z | 2026-02-25T21:38:05.386Z |
| CVE-2026-26986 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in rail_window_free |
FreeRDP |
FreeRDP |
2026-02-25T21:01:16.916Z | 2026-02-26T20:36:03.263Z |
| CVE-2026-26985 |
8.1 (3.1)
|
LORIS vulnerable to path traversal in electrophysiolog… |
aces |
Loris |
2026-02-25T21:26:00.201Z | 2026-02-25T21:39:45.355Z |
| CVE-2026-26984 |
8.7 (3.0)
|
LORIS media module vulnerable to remote code execution |
aces |
Loris |
2026-02-25T21:15:54.790Z | 2026-02-25T21:42:13.721Z |
| CVE-2026-3200 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
z-9527 admin user.js getUsers sql injection |
z-9527 |
admin |
2026-02-25T20:02:08.548Z | 2026-02-27T17:57:56.330Z |
| CVE-2026-3172 |
8.1 (3.1)
|
pgvector buffer overflow in parallel HNSW index build |
n/a |
pgvector |
2026-02-25T20:59:10.051Z | 2026-02-26T15:04:08.481Z |
| CVE-2026-2845 |
6.5 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-02-25T20:04:35.210Z | 2026-02-26T15:45:14.406Z |
| CVE-2026-27015 |
5 (4.0)
|
FreeRDP: Smartcard NDR Alignment Padding Triggers Reac… |
FreeRDP |
FreeRDP |
2026-02-25T20:44:14.152Z | 2026-02-26T15:49:52.553Z |
| CVE-2026-26965 |
8.8 (3.1)
|
FreeRDP has Out-of-bounds Write |
FreeRDP |
FreeRDP |
2026-02-25T20:59:17.828Z | 2026-02-26T14:44:04.865Z |
| CVE-2026-26955 |
8.8 (3.1)
|
FreeRDP has Out-of-bounds Write |
FreeRDP |
FreeRDP |
2026-02-25T20:47:14.660Z | 2026-02-26T20:30:46.008Z |
| CVE-2026-26271 |
5.5 (4.0)
|
Buffer Overread in FreeRDP Icon Processing |
FreeRDP |
FreeRDP |
2026-02-25T20:40:19.377Z | 2026-02-26T15:50:49.130Z |
| CVE-2026-25997 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_clipboard_format_equal |
FreeRDP |
FreeRDP |
2026-02-25T20:38:40.483Z | 2026-02-25T21:39:08.071Z |
| CVE-2026-25959 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_ |
FreeRDP |
FreeRDP |
2026-02-25T20:36:09.791Z | 2026-02-26T15:52:24.977Z |
| CVE-2026-25955 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_AppUpdateWindowF… |
FreeRDP |
FreeRDP |
2026-02-25T20:32:42.458Z | 2026-02-26T15:54:09.229Z |
| CVE-2026-25954 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_rail_server_loca… |
FreeRDP |
FreeRDP |
2026-02-25T20:30:32.755Z | 2026-02-26T15:54:47.557Z |
| CVE-2026-25953 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_AppUpdateWindowF… |
FreeRDP |
FreeRDP |
2026-02-25T20:27:00.424Z | 2026-02-26T15:55:34.086Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-g4x4-mr34-3pw3 |
4.7 (3.1)
|
NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service | 2026-02-25T15:31:43Z | 2026-02-25T15:31:43Z |
| ghsa-8p92-v8gg-gvcv |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this is… | 2026-02-25T15:31:43Z | 2026-02-25T15:31:43Z |
| ghsa-3g96-v3mg-9xp9 |
4.7 (3.1)
|
USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows… | 2026-02-25T15:31:43Z | 2026-02-25T15:31:43Z |
| ghsa-wqx8-r5jg-36w6 |
5.3 (3.1)
|
In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerabil… | 2026-02-25T15:31:41Z | 2026-02-26T15:30:29Z |
| ghsa-whqp-34xh-xmxr |
4.3 (3.1)
|
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add para… | 2026-02-25T15:31:40Z | 2026-02-25T15:31:40Z |
| ghsa-px6f-q5hr-gqcp |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this vu… | 2026-02-25T15:31:40Z | 2026-02-25T15:31:40Z |
| ghsa-c7jf-2rmf-hc7w |
4.3 (3.1)
|
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow | 2026-02-25T15:31:40Z | 2026-02-25T15:31:40Z |
| ghsa-4x44-gf2f-7mh8 |
2.3 (3.1)
|
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk | 2026-02-25T15:31:40Z | 2026-02-25T15:31:40Z |
| ghsa-26wv-wm3r-6rvc |
5.3 (3.1)
5.5 (4.0)
|
A vulnerability was found in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected is an unknown f… | 2026-02-25T15:31:40Z | 2026-02-25T15:31:40Z |
| ghsa-w36g-f98m-wm99 |
2.6 (3.1)
|
A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data so… | 2026-02-25T15:31:39Z | 2026-02-25T15:31:39Z |
| ghsa-mmcc-ppg6-c7j2 |
9.1 (3.1)
5.9 (4.0)
|
In affected version of Octopus Deploy it was possible to remove files and/or contents of files on t… | 2026-02-25T15:31:39Z | 2026-02-27T03:30:26Z |
| ghsa-jqcj-pmgf-5g3q |
9.8 (3.1)
|
Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies I… | 2026-02-25T15:31:39Z | 2026-02-25T15:31:39Z |
| ghsa-8p8j-jq9g-4f8j |
8.8 (3.1)
|
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions e… | 2026-02-25T15:31:39Z | 2026-02-25T15:31:39Z |
| ghsa-mhc9-48gj-9gp3 |
5.3 (4.0)
|
Fickling has safety check bypass via REDUCE+BUILD opcode sequence | 2026-02-25T15:24:18Z | 2026-02-25T15:24:18Z |
| ghsa-273h-m46v-96q4 |
3.7 (3.1)
|
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for… | 2026-02-25T15:20:15Z | 2026-02-25T15:20:16Z |
| ghsa-3c9r-837r-qqm4 |
8.7 (4.0)
|
esm.sh is vulnerable to full-response SSRF | 2026-02-25T15:19:41Z | 2026-02-27T20:56:15Z |
| ghsa-qvwr-8759-6g2c |
6.5 (3.1)
|
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The… | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-pgjf-9qg9-f4gv |
7.0 (4.0)
|
An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a … | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-hpp6-437r-vmvj |
6.4 (3.1)
|
The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored… | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-hjgq-ff5j-5v2m |
5.5 (3.1)
|
A flaw was found in the udisks storage management daemon that allows unprivileged users to back up … | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-fw7p-cggr-9xm6 |
7.1 (3.1)
|
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for re… | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-x4x7-v8wj-3952 |
4.3 (3.1)
|
The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a miss… | 2026-02-25T12:30:28Z | 2026-02-25T12:30:28Z |
| ghsa-wrj5-2cc6-7p8j |
4.3 (3.1)
|
The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post met… | 2026-02-25T12:30:28Z | 2026-02-25T12:30:28Z |
| ghsa-4qpc-c9r6-9jrx |
4.3 (3.1)
|
The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cros… | 2026-02-25T12:30:28Z | 2026-02-25T12:30:29Z |
| ghsa-v72r-wpp2-8369 |
7.5 (3.1)
|
The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification … | 2026-02-25T09:30:27Z | 2026-02-25T09:30:27Z |
| ghsa-rjq9-488h-qv7q |
3.5 (3.1)
2.0 (4.0)
|
A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System… | 2026-02-25T09:30:27Z | 2026-02-25T09:30:27Z |
| ghsa-p7fh-wf7x-3xhv |
5.0 (3.1)
|
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery… | 2026-02-25T09:30:27Z | 2026-02-25T09:30:27Z |
| ghsa-cv4r-qfj3-hv3v |
8.8 (3.1)
7.4 (4.0)
|
A security vulnerability has been detected in Tenda F453 1.0.0.3. This impacts the function fromSaf… | 2026-02-25T09:30:27Z | 2026-02-25T09:30:27Z |
| ghsa-cf59-33h4-g872 |
8.8 (3.1)
7.4 (4.0)
|
A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromNatStaticSettin… | 2026-02-25T09:30:27Z | 2026-02-25T09:30:27Z |
| ghsa-5825-95cg-hj5r |
7.5 (3.1)
|
The Geo Mashup plugin for WordPress is vulnerable to SQL Injection via the 'sort' parameter in all … | 2026-02-25T09:30:27Z | 2026-02-25T09:30:27Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-202 |
6.5 (3.1)
|
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows au… | apache-airflow | 2023-10-14T10:15:00+00:00 | 2023-10-18T20:24:08.482939+00:00 |
| pysec-2023-197 |
|
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user… | apache-airflow | 2023-10-14T10:15:00+00:00 | 2023-10-14T12:46:00.410542+00:00 |
| pysec-2023-201 |
4.3 (3.1)
|
vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/colla… | vantage6 | 2023-10-11T20:15:00+00:00 | 2023-10-18T05:26:18.202930+00:00 |
| pysec-2023-200 |
4.3 (3.1)
|
vantage6 is privacy preserving federated learning infrastructure. When a collaboration is… | vantage6 | 2023-10-11T20:15:00+00:00 | 2023-10-18T05:26:18.112311+00:00 |
| pysec-2023-198 |
5.4 (3.1)
|
vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0,… | vantage6-node | 2023-10-11T20:15:00+00:00 | 2023-10-17T18:31:16.643410+00:00 |
| pysec-2023-196 |
7.2 (3.1)
|
vantage6 is privacy preserving federated learning infrastructure. Versions prior to 4.0.0… | vantage6 | 2023-10-11T18:15:00+00:00 | 2023-10-13T22:28:56.802294+00:00 |
| pysec-2023-199 |
4.9 (3.1)
|
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… | matrix-synapse | 2023-10-10T18:15:00+00:00 | 2023-10-17T22:26:17.611846+00:00 |
| pysec-2023-194 |
9.8 (3.1)
|
langchain_experimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and exe… | langchain-experimental | 2023-10-09T20:15:00Z | 2025-02-23T07:46:11Z |
| pysec-2023-195 |
6.5 (3.1)
|
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1… | octoprint | 2023-10-09T16:15:00+00:00 | 2023-10-13T20:25:14.968230+00:00 |
| pysec-2023-193 |
4.8 (3.1)
|
Zope is an open-source web application server. The title property, available on most Zope… | zope | 2023-10-04T21:15:00+00:00 | 2023-10-10T20:21:16.174482+00:00 |
| pysec-2023-192 |
8.1 (3.1)
|
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Coo… | urllib3 | 2023-10-04T17:15:00+00:00 | 2023-10-10T14:28:19.389317+00:00 |
| pysec-2023-190 |
7.5 (3.1)
|
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) s… | asyncua | 2023-10-03T05:15:00+00:00 | 2023-10-04T18:37:48.407821+00:00 |
| pysec-2023-189 |
7.5 (3.1)
|
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication s… | asyncua | 2023-10-03T05:15:00+00:00 | 2023-10-04T18:37:48.328804+00:00 |
| pysec-2023-187 |
|
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration fil… | pretix | 2023-10-02T20:15:00+00:00 | 2023-10-02T22:26:51.461030+00:00 |
| pysec-2023-183 |
|
opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulne… | opencv-python | 2023-09-29T21:15:28.039030+00:00 | |
| pysec-2023-184 |
|
opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that … | opencv-python-headless | 2023-09-29T21:15:27.980982+00:00 | |
| pysec-2023-181 |
|
opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that a… | opencv-contrib-python | 2023-09-29T21:15:27.924031+00:00 | |
| pysec-2023-182 |
|
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in whee… | opencv-contrib-python-headless | 2023-09-29T21:15:27.863960+00:00 | |
| pysec-2023-188 |
7.5 (3.1)
|
When deserializing untrusted or corrupted data, it is possible for a reader to consume me… | avro | 2023-09-29T17:15:00+00:00 | 2023-10-03T22:26:25.361706+00:00 |
| pysec-2023-186 |
8.8 (3.1)
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2023-09-29T14:15:00+00:00 | 2023-10-02T20:24:26.790735+00:00 |
| pysec-2023-179 |
|
This affects versions of the package pydash before 6.0.0. A number of pydash methods such… | pydash | 2023-09-28T05:15:00+00:00 | 2023-09-28T10:29:02.604249+00:00 |
| pysec-2023-191 |
7.5 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function doe… | vyper | 2023-09-27T15:19:00+00:00 | 2023-10-04T20:26:42.494872+00:00 |
| pysec-2023-185 |
3.7 (3.1)
|
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… | matrix-synapse | 2023-09-27T15:19:00+00:00 | 2023-09-30T05:24:54.158504+00:00 |
| pysec-2023-180 |
4.3 (3.1)
|
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… | matrix-synapse | 2023-09-27T15:19:00+00:00 | 2023-09-29T20:23:39.578838+00:00 |
| pysec-2023-175 |
|
Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to … | pillow | 2023-09-25T17:25:13.946374Z | |
| pysec-2023-177 |
|
An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges … | gevent | 2023-09-25T12:15:00+00:00 | 2023-09-25T14:28:09.019811+00:00 |
| pysec-2023-310 |
7.5 (3.1)
|
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NO… | mobsf | 2023-09-21T22:15:11+00:00 | 2025-04-09T17:27:26.663665+00:00 |
| pysec-2023-311 |
5.4 (3.1)
|
plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depen… | plone-namedfile | 2023-09-21T15:15:10+00:00 | 2025-04-09T17:27:27.153848+00:00 |
| pysec-2023-178 |
7.5 (3.1)
|
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. … | plone-rest | 2023-09-21T15:15:00Z | 2023-10-28T20:22:08.431825Z |
| pysec-2023-174 |
|
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulner… | imagecodecs | 2023-09-20T05:12:42.403706+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-677 | Malicious code in chai-promise-tools (npm) | 2026-02-03T06:59:53Z | 2026-02-06T03:05:23Z |
| mal-2026-678 | Malicious code in cookie-parsers-env (npm) | 2026-02-03T06:59:52Z | 2026-02-06T03:05:23Z |
| mal-2026-676 | Malicious code in @ikeacnalan/icons (npm) | 2026-02-03T06:58:19Z | 2026-02-06T03:05:22Z |
| mal-2026-674 | Malicious code in freedom-baileys (npm) | 2026-02-03T05:01:34Z | 2026-02-06T03:05:24Z |
| mal-2026-673 | Malicious code in baileys-ud (npm) | 2026-02-03T05:01:34Z | 2026-02-06T03:05:22Z |
| mal-2026-675 | Malicious code in supun-baileys (npm) | 2026-02-03T05:01:33Z | 2026-02-06T03:05:26Z |
| mal-2026-672 | Malicious code in baileys-dtz (npm) | 2026-02-03T05:01:33Z | 2026-02-06T03:05:22Z |
| mal-2026-671 | Malicious code in cheerio-core (npm) | 2026-02-03T04:20:03Z | 2026-02-06T03:05:23Z |
| mal-2026-670 | Malicious code in aligned-array (npm) | 2026-02-03T04:12:07Z | 2026-02-06T03:05:22Z |
| mal-2026-668 | Malicious code in typescript-react-apollo (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-667 | Malicious code in typed-document-node (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-666 | Malicious code in transform-react-display-name (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-665 | Malicious code in transform-exponentiation-operator (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-664 | Malicious code in transform-es2015-modules-amd (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-663 | Malicious code in transform-async-generator-functions (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-661 | Malicious code in netlify-project-helper (npm) | 2026-02-03T03:54:05Z | 2026-02-06T03:05:25Z |
| mal-2026-660 | Malicious code in dns-troubleshoot-toolkit-xyz123 (npm) | 2026-02-03T03:54:05Z | 2026-02-06T03:05:23Z |
| mal-2026-669 | Malicious code in vite-ui-components (npm) | 2026-02-03T03:42:39Z | 2026-02-06T03:05:27Z |
| mal-2026-658 | Malicious code in ansi-universal-ui (npm) | 2026-02-03T03:42:39Z | 2026-02-06T03:05:22Z |
| mal-2026-659 | Malicious code in atg-atgse (npm) | 2026-02-03T03:27:31Z | 2026-02-06T03:05:22Z |
| mal-2026-662 | Malicious code in researchpoc (npm) | 2026-02-03T03:25:19Z | 2026-02-06T03:05:26Z |
| mal-2026-657 | Malicious code in react-dnd-legacy-html5-backend (npm) | 2026-02-03T02:23:48Z | 2026-02-06T03:05:26Z |
| mal-2026-656 | Malicious code in jshint-groups (npm) | 2026-02-03T01:59:02Z | 2026-02-06T03:05:24Z |
| mal-2026-655 | Malicious code in pipeline-poision-test (PyPI) | 2026-02-02T21:53:29Z | 2026-02-02T21:53:29Z |
| mal-2026-651 | Malicious code in cat-admin-tool (PyPI) | 2026-02-02T14:44:25Z | 2026-02-02T14:44:25Z |
| mal-2026-652 | Malicious code in chia-pool-reference (PyPI) | 2026-02-02T14:43:22Z | 2026-02-02T14:43:22Z |
| mal-2026-653 | Malicious code in credit-decision-metrics (PyPI) | 2026-02-02T14:42:50Z | 2026-02-02T14:42:50Z |
| mal-2026-654 | Malicious code in zabitog (PyPI) | 2026-02-02T14:41:04Z | 2026-02-02T14:41:04Z |
| mal-2026-650 | Malicious code in tableapy (PyPI) | 2026-02-02T12:56:55Z | 2026-02-02T12:56:55Z |
| mal-2026-649 | Malicious code in callapirequests (PyPI) | 2026-02-02T09:08:10Z | 2026-02-02T09:08:10Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2663 | libpng: Mehrere Schwachstellen | 2025-11-23T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2662 | IBM Informix (Dynamic Server): Schwachstelle ermöglicht Denial of Service | 2025-11-23T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2661 | Google Cloud Platform (Looker): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2025-11-23T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2659 | Synology DiskStation Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-23T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2658 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2657 | WebKitGTK: Mehrere Schwachstellen | 2025-11-20T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2656 | MELDUNG ZURÜCKGEZOGEN | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2655 | CUPS-Filters: Schwachstelle ermöglicht Codeausführung | 2025-11-20T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2654 | MongoDB (Server): Schwachstelle ermöglicht Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2653 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2652 | Red Hat Satellite: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2651 | GnuTLS: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-19T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2650 | Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-19T23:00:00.000+00:00 | 2025-11-25T23:00:00.000+00:00 |
| wid-sec-w-2025-2649 | Google Cloud Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2648 | IBM AIX und VIOS: Mehrere Schwachstellen | 2025-11-19T23:00:00.000+00:00 | 2025-11-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2647 | SonicWall Email Security: Mehrere Schwachstellen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2646 | Progress Software MOVEit: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-19T23:00:00.000+00:00 | 2025-11-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2645 | Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2644 | Pega Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-19T23:00:00.000+00:00 | 2025-11-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2643 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2642 | MongoDB: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-19T23:00:00.000+00:00 | 2025-11-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2641 | Grafana Enterprise: Schwachstelle ermöglicht Privilegieneskalation | 2025-11-19T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2640 | SonicWall SSL-VPN: Schwachstelle ermöglicht Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2639 | Arista EOS: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2638 | Grub: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2637 | Rsync: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-18T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2636 | OpenVPN: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2025-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2635 | Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Denial of Service | 2025-11-18T23:00:00.000+00:00 | 2025-12-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2634 | Meta WhatsApp: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2633 | Aruba AOS-CX: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0058 | Kwetsbaarheden verholpen in Palo Alto Networks PAN-OS | 2025-02-13T09:28:54.459828Z | 2025-02-21T08:08:58.513404Z |
| ncsc-2025-0057 | Kwetsbaarheden verholpen in GitLab CE/EE | 2025-02-13T09:09:26.087113Z | 2025-02-13T09:09:26.087113Z |
| ncsc-2025-0056 | Kwetsbaarheden verholpen in Schneider Electric ASCO | 2025-02-13T09:07:55.191514Z | 2025-02-13T09:07:55.191514Z |
| ncsc-2025-0055 | Kwetsbaarheid verholpen in CrowdStrike Falcon sensor | 2025-02-13T08:22:07.880125Z | 2025-02-13T08:22:07.880125Z |
| ncsc-2025-0054 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2025-02-13T06:46:08.560650Z | 2025-02-13T06:46:08.560650Z |
| ncsc-2025-0053 | Kwetsbaarheden verholpen in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS en FortiProxy | 2025-02-12T12:39:02.366846Z | 2025-02-18T08:09:48.619964Z |
| ncsc-2025-0052 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Ivanti Policy Secure | 2025-02-12T09:35:30.260596Z | 2025-02-12T09:35:30.260596Z |
| ncsc-2025-0051 | Kwetsbaarheden verholpen in Siemens producten | 2025-02-11T19:40:34.993264Z | 2025-02-11T19:40:34.993264Z |
| ncsc-2025-0050 | Kwetsbaarheden verholpen in Microsoft Office | 2025-02-11T19:19:24.863294Z | 2025-02-11T19:19:24.863294Z |
| ncsc-2025-0049 | Kwetsbaarheden verholpen in Microsoft Visual Studio | 2025-02-11T19:17:58.768578Z | 2025-02-11T19:17:58.768578Z |
| ncsc-2025-0048 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-02-11T19:17:03.555400Z | 2025-02-11T19:17:03.555400Z |
| ncsc-2025-0047 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-02-11T19:16:04.610648Z | 2025-02-11T19:16:04.610648Z |
| ncsc-2025-0046 | Kwetsbaarheid verholpen in Apple iOS en iPadOS | 2025-02-11T09:54:03.266145Z | 2025-02-11T09:54:03.266145Z |
| ncsc-2025-0045 | Kwetsbaarheden verholpen in SAP producten | 2025-02-11T09:08:48.427126Z | 2025-02-11T09:08:48.427126Z |
| ncsc-2025-0044 | Kwetsbaarheden verholpen in Cisco Identity Services Engine | 2025-02-07T07:50:13.796001Z | 2025-02-07T07:50:13.796001Z |
| ncsc-2025-0043 | Kwetsbaarheden verholpen in Cisco IOS, IOS XE en IOS XR Software | 2025-02-07T07:44:34.306225Z | 2025-02-11T06:53:00.177478Z |
| ncsc-2025-0042 | Kwetsbaarheden verholpen in Cisco AsyncOS Software | 2025-02-07T07:41:10.612134Z | 2025-02-07T07:41:10.612134Z |
| ncsc-2025-0041 | Kwetsbaarheden verholpen in F5 BIG-IP | 2025-02-07T07:38:11.981975Z | 2025-02-11T06:51:17.629249Z |
| ncsc-2025-0040 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2025-02-07T07:33:40.643635Z | 2025-02-07T07:33:40.643635Z |
| ncsc-2025-0039 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-02-04T09:13:08.342699Z | 2025-02-04T09:13:08.342699Z |
| ncsc-2025-0038 | Kwetsbaarheden verholpen in Zimbra Collaboration | 2025-02-04T09:10:55.525420Z | 2025-02-04T09:10:55.525420Z |
| ncsc-2025-0037 | Kwetsbaarheden verholpen in VMware Aria Operations | 2025-01-31T12:25:21.454904Z | 2025-01-31T12:25:21.454904Z |
| ncsc-2025-0036 | Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk | 2025-01-29T10:35:51.164484Z | 2025-01-29T10:35:51.164484Z |
| ncsc-2025-0035 | Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk | 2025-01-29T10:32:40.594073Z | 2025-01-29T10:32:40.594073Z |
| ncsc-2025-0034 | Kwetsbaarheden verholpen in Apple iPadOS en iOS | 2025-01-28T11:31:14.861619Z | 2025-01-28T11:31:14.861619Z |
| ncsc-2025-0033 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2025-01-28T10:43:20.128933Z | 2025-01-28T10:43:20.128933Z |
| ncsc-2025-0032 | Kwetsbaarheden verholpen in Apple macOS | 2025-01-28T10:37:38.942515Z | 2025-01-28T10:37:38.942515Z |
| ncsc-2025-0031 | Kwetsbaarheid verholpen in Cisco Meeting Management | 2025-01-23T13:56:01.391387Z | 2025-01-23T13:56:01.391387Z |
| ncsc-2025-0030 | Kwetsbaarheid verholpen in Cisco BroadWorks | 2025-01-23T13:53:16.250734Z | 2025-01-23T13:53:16.250734Z |
| ncsc-2025-0029 | Kwetsbaarheid verholpen in SonicWall SMA1000 Appliance | 2025-01-23T13:50:32.719670Z | 2025-01-23T13:50:32.719670Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-400332 | SSA-400332: Insufficient Design IP Protection in IEEE 1735 Recommended Practice - Impact to Questa and ModelSim | 2021-12-14T00:00:00Z | 2022-11-08T00:00:00Z |
| ssa-396621 | SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-390195 | SSA-390195: LibVNC Vulnerabilities in SIMATIC ITC Products | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-352143 | SSA-352143: Multiple File Parsing Vulnerabilities in JTTK before V11.0.3.0 and JT Utilities before V13.0.3.0 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-199605 | SSA-199605: Arbitrary File Download Vulnerability in SIMATIC eaSie PCS 7 Skill Package | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-161331 | SSA-161331: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer before V2021.3.1 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-160202 | SSA-160202: Multiple Access Control Vulnerabilities in SiPass Integrated | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-133772 | SSA-133772: Zip Path Traversal Vulnerability in Teamcenter Active Workspace | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-917476 | SSA-917476: Multiple Vulnerabilities in SCALANCE W1750D | 2021-11-09T00:00:00Z | 2022-10-11T00:00:00Z |
| ssa-840188 | SSA-840188: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products | 2021-11-09T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-779699 | SSA-779699: Two Incorrect Authorization Vulnerabilities in Mendix | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-755517 | SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-740908 | SSA-740908: File Parsing Vulnerabilities in JT Translator in NX | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-703715 | SSA-703715: Information Disclosure Vulnerability in Climatix POL909 (AWM and AWB) | 2021-11-09T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-537983 | SSA-537983: Local Code Execution Vulnerability in SENTRON powermanager V3 | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-338732 | SSA-338732: Information Disclosure Vulnerability in Mendix | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-328042 | SSA-328042: File Parsing Vulnerabilities in OBJ Translator in NX | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-145157 | SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-044112 | SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS | 2021-11-09T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-766247 | SSA-766247: Authentication Vulnerability in SIMATIC Process Historian | 2021-10-12T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-280624 | SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D | 2021-10-12T00:00:00Z | 2022-10-11T00:00:00Z |
| ssa-728618 | SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 | 2021-09-28T00:00:00Z | 2021-09-28T00:00:00Z |
| ssa-997732 | SSA-997732: Modfem File Parsing Vulnerability in Simcenter Femap before V2021.2 | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-987403 | SSA-987403: Multiple Vulnerabilities in Teamcenter | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-944498 | SSA-944498: Buffer Overflow Vulnerability in Web Server of APOGEE and TALON Automation Devices | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-847986 | SSA-847986: Denial-of-Service Vulnerabilities in SIPROTEC 5 relays | 2021-09-14T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-835377 | SSA-835377: Missing Authentication Vulnerability in SINEMA Server | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-756638 | SSA-756638: Vulnerabilities in Third-Party Component Mbed TLS of LOGO! CMR Family and SIMATIC RTU 3000 Family | 2021-09-14T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-692317 | SSA-692317: Authorization Bypass Vulnerability in Industrial Edge | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-676336 | SSA-676336: OpenSSH Vulnerabilities in SCALANCE X-200 and X-300/X408 Switches | 2021-09-14T00:00:00Z | 2023-04-11T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1380 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T16:02:11+00:00 | 2026-02-17T08:01:31+00:00 |
| rhsa-2026:1359 | Red Hat Security Advisory: gcc-toolset-15-binutils security update | 2026-01-27T15:59:55+00:00 | 2026-02-12T13:26:50+00:00 |
| rhsa-2026:1378 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T15:37:28+00:00 | 2026-02-17T08:01:31+00:00 |
| rhsa-2026:1350 | Red Hat Security Advisory: curl security update | 2026-01-27T15:26:43+00:00 | 2026-02-11T14:41:07+00:00 |
| rhsa-2026:1374 | Red Hat Security Advisory: python3.11 security update | 2026-01-27T15:21:04+00:00 | 2026-02-16T14:15:21+00:00 |
| rhsa-2026:1000 | Red Hat Security Advisory: OpenShift Container Platform 4.20.12 bug fix and security update | 2026-01-27T14:30:57+00:00 | 2026-02-16T17:58:18+00:00 |
| rhsa-2026:1349 | Red Hat Security Advisory: openssl security update | 2026-01-27T14:02:32+00:00 | 2026-02-04T01:03:34+00:00 |
| rhsa-2026:1344 | Red Hat Security Advisory: grafana security update | 2026-01-27T11:37:52+00:00 | 2026-02-17T12:41:19+00:00 |
| rhsa-2026:1338 | Red Hat Security Advisory: resource-agents security update | 2026-01-27T09:52:33+00:00 | 2026-02-17T09:27:26+00:00 |
| rhsa-2026:1340 | Red Hat Security Advisory: resource-agents security update | 2026-01-27T09:35:26+00:00 | 2026-02-17T09:27:27+00:00 |
| rhsa-2026:1339 | Red Hat Security Advisory: resource-agents security update | 2026-01-27T09:35:23+00:00 | 2026-02-17T09:27:26+00:00 |
| rhsa-2026:1336 | Red Hat Security Advisory: resource-agents security update | 2026-01-27T09:34:28+00:00 | 2026-02-17T09:27:24+00:00 |
| rhsa-2026:1337 | Red Hat Security Advisory: python-s3transfer security update | 2026-01-27T09:32:38+00:00 | 2026-02-17T09:27:29+00:00 |
| rhsa-2026:1334 | Red Hat Security Advisory: glibc security update | 2026-01-27T09:17:01+00:00 | 2026-02-17T10:37:35+00:00 |
| rhsa-2026:1332 | Red Hat Security Advisory: fence-agents security update | 2026-01-27T09:10:08+00:00 | 2026-02-17T09:27:23+00:00 |
| rhsa-2026:1331 | Red Hat Security Advisory: fence-agents security update | 2026-01-27T09:04:37+00:00 | 2026-02-17T09:27:23+00:00 |
| rhsa-2026:1329 | Red Hat Security Advisory: fence-agents security update | 2026-01-27T08:39:01+00:00 | 2026-02-17T09:27:22+00:00 |
| rhsa-2026:1330 | Red Hat Security Advisory: fence-agents security update | 2026-01-27T08:38:11+00:00 | 2026-02-17T09:27:22+00:00 |
| rhsa-2026:1326 | Red Hat Security Advisory: glib2 security update | 2026-01-27T07:46:31+00:00 | 2026-02-13T19:05:04+00:00 |
| rhsa-2026:1327 | Red Hat Security Advisory: glib2 security update | 2026-01-27T07:32:51+00:00 | 2026-02-13T19:05:05+00:00 |
| rhsa-2026:1324 | Red Hat Security Advisory: glib2 security update | 2026-01-27T07:16:01+00:00 | 2026-02-13T19:05:03+00:00 |
| rhsa-2026:1323 | Red Hat Security Advisory: glib2 security update | 2026-01-27T07:08:41+00:00 | 2026-02-13T19:05:05+00:00 |
| rhsa-2026:1320 | Red Hat Security Advisory: thunderbird security update | 2026-01-27T06:58:16+00:00 | 2026-02-09T13:26:55+00:00 |
| rhsa-2026:1254 | Red Hat Security Advisory: python-urllib3 security update | 2026-01-26T20:52:30+00:00 | 2026-02-17T12:41:19+00:00 |
| rhsa-2026:1249 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update | 2026-01-26T19:58:10+00:00 | 2026-02-17T12:41:19+00:00 |
| rhsa-2026:1248 | Red Hat Security Advisory: MTV RHEL9 Images | 2026-01-26T18:31:11+00:00 | 2026-02-16T17:58:31+00:00 |
| rhsa-2026:1240 | Red Hat Security Advisory: fence-agents security update | 2026-01-26T18:30:35+00:00 | 2026-02-17T12:41:19+00:00 |
| rhsa-2026:1239 | Red Hat Security Advisory: fence-agents security update | 2026-01-26T18:09:09+00:00 | 2026-02-17T12:41:19+00:00 |
| rhsa-2026:1241 | Red Hat Security Advisory: resource-agents security update | 2026-01-26T18:01:29+00:00 | 2026-02-17T12:41:19+00:00 |
| rhsa-2026:1236 | Red Hat Security Advisory: kernel security update | 2026-01-26T16:39:04+00:00 | 2026-02-12T19:26:44+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-135-02 | Siemens INTRALOG WMS | 2025-05-13T00:00:00.000000Z | 2025-05-13T00:00:00.000000Z |
| icsa-25-135-01 | Siemens RUGGEDCOM APE1808 Devices | 2025-05-13T00:00:00.000000Z | 2026-02-12T07:00:00.000000Z |
| icsma-25-128-01 | Pixmeo OsiriX MD | 2025-05-08T06:00:00.000000Z | 2025-05-08T06:00:00.000000Z |
| icsa-25-128-03 | Mitsubishi Electric Multiple FA Products (Update B) | 2025-05-08T06:00:00.000000Z | 2026-02-03T07:00:00.000000Z |
| icsa-25-128-01 | Horner Automation Cscape | 2025-05-08T06:00:00.000000Z | 2025-05-08T06:00:00.000000Z |
| icsa-25-126-03 | BrightSign Players (Update A) | 2025-05-06T06:00:00.000000Z | 2026-01-29T07:00:00.000000Z |
| icsa-25-126-02 | Milesight UG65-868M-EA | 2025-05-06T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-126-01 | Optigo Networks ONS NC600 | 2025-05-06T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsma-25-121-01 | MicroDicom DICOM Viewer | 2025-05-01T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-121-01 | KUNBUS GmbH Revolution Pi (Update A) | 2025-05-01T06:00:00.000000Z | 2025-07-10T06:00:00.000000Z |
| va-25-120-01 | Commvault Web Server unspecified vulnerability | 2025-04-30T00:00:00Z | 2025-04-30T00:00:00Z |
| va-25-119-01 | MSP360 Backup insecure filesystem permissions | 2025-04-29T15:59:52Z | 2025-05-19T00:00:00Z |
| icsa-25-196-01 | Hitachi Energy Asset Suite | 2025-04-29T12:30:00.000000Z | 2025-04-29T12:30:00.000000Z |
| icsa-25-119-02 | Delta Electronics ISPSoft | 2025-04-29T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-119-01 | Rockwell Automation ThinManager | 2025-04-29T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-114-06 | Planet Technology Network Products | 2025-04-24T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-114-05 | Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool | 2025-04-24T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-114-04 | Nice Linear eMerge E3 | 2025-04-24T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-114-03 | Vestel AC Charger | 2025-04-24T06:00:00.000000Z | 2025-04-24T06:00:00.000000Z |
| icsa-25-114-02 | ALBEDO Telecom Net.Time - PTP/NTP clock | 2025-04-24T06:00:00.000000Z | 2025-04-24T06:00:00.000000Z |
| icsa-25-107-04 | Yokogawa Recorder Products | 2025-04-17T06:00:00.000000Z | 2025-04-17T06:00:00.000000Z |
| icsa-25-112-02 | Siemens TeleControl Server Basic | 2025-04-16T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-112-01 | Siemens TeleControl Server Basic SQL | 2025-04-16T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| va-25-104-01 | SicommNet multiple vulnerabilities | 2025-04-15T13:49:55Z | 2025-04-23T00:00:00Z |
| icsa-25-105-09 | Mitsubishi Electric Europe B.V. smartRTU | 2025-04-15T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-105-07 | Delta Electronics COMMGR (Update A) | 2025-04-15T06:00:00.000000Z | 2025-09-04T06:00:00.000000Z |
| icsa-25-105-06 | National Instruments LabVIEW | 2025-04-15T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-105-05 | Lantronix XPort (Update A) | 2025-04-15T06:00:00.000000Z | 2025-04-29T06:00:00.000000Z |
| icsa-25-105-04 | Growatt Cloud Applications | 2025-04-15T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-112-04 | ABB MV Drives | 2025-04-10T08:30:00.000000Z | 2025-04-10T08:30:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ise-mult-j-kxpnynr | Cisco Identity Services Engine Vulnerabilities | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-appd-php-authpriv-gebwtvu5 | Cisco AppDynamics PHP Agent Privilege Escalation Vulnerability | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-accsc-dos-9slzkz8 | Cisco Secure Client Software Denial of Service Vulnerabilities | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-snort-ftd-zxytnjom | Multiple Cisco Products Snort FTP Inspection Bypass Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-sa-ftd-snort3-urldos-occfqtex | Cisco Firepower Threat Defense Software SSL/TLS URL Category and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ise-injection-qexegrcw | Cisco Identity Services Engine Command Injection Vulnerabilities | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ise-file-upload-fcelp4xs | Cisco Identity Services Engine Vulnerabilities | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ftdsnort3sip-bypass-lmz2thkn | Cisco Firepower Threat Defense Software Snort 3 Geolocation IP Filter Bypass Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ftd-snort3acp-bypass-3bdr2beh | Multiple Cisco Products Snort 3 Access Control Policy Bypass Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-02-06T18:30:17+00:00 |
| cisco-sa-ftd-snort3-uanuntcv | Cisco Firepower Threat Defense Software Snort 3 Detection Engine Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ftd-snort3-8u4hhxh8 | Cisco Firepower Threat Defense Software SSL and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ftd-smbsnort3-dos-pfojoyuv | Cisco Firepower Threat Defense Software SMB Protocol Snort 3 Detection Engine Bypass and Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ftd-intrusion-dos-dft7wygc | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series Firewalls Inspection Rules Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ftd-icmpv6-dos-4emklun | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services ICMPv6 with Snort 2 Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-16T21:10:27+00:00 |
| cisco-sa-ftd-fmc-code-inj-wshrgz8l | Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-10-23T15:57:47+00:00 |
| cisco-sa-fmc-xss-sk2gkfvj | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-fmc-logview-dos-ayjdex55 | Cisco Firepower Management Center Software Log API Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-fmc-file-download-7js4ug2j | Cisco Firepower Management Center Software Arbitrary File Download Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-fmc-cmdinj-btegufox | Cisco Firepower Management Center Software Command Injection Vulnerabilities | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-29mp49hn | Cisco Firepower Management Center Software Command Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-cms-segfault-g6es4ve8 | Cisco Meeting Server Web Bridge Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-asaftd-ssl-dos-kxg8mpua | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software AnyConnect SSL/TLS VPN Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-asaftd-saml-hijack-ttuqfyz | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SAML Assertion Hijack Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-asaftd-multi-cert-dza3h5pt | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Multiple Certificate Authentication Bypass Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-asaftd-ac-acl-bypass-bwd7q6gb | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software AnyConnect Access Control List Bypass Vulnerabilities | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-asa-webvpn-dos-3ghzqbas | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-02T13:47:35+00:00 |
| cisco-sa-asa-icmpv6-t5tzqwnd | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ICMPv6 Message Processing Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-02T13:50:35+00:00 |
| cisco-sa-sdwan-lfi-owlbkuge | Cisco Catalyst SD-WAN Manager Local File Inclusion Vulnerability | 2023-10-18T16:00:00+00:00 | 2023-10-18T16:00:00+00:00 |
| cisco-sa-http2-reset-d8kf32vz | HTTP/2 Rapid Reset Attack Affecting Cisco Products: October 2023 | 2023-10-16T16:00:00+00:00 | 2023-12-21T17:09:38+00:00 |
| cisco-sa-iosxe-webui-privesc-j22saa4z | Multiple Vulnerabilities in Cisco IOS XE Software Web UI Feature | 2023-10-16T15:00:00+00:00 | 2023-11-01T15:44:28+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-64677 | Office Out-of-Box Experience Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64676 | Microsoft Purview eDiscovery Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64675 | Azure Cosmos DB Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64673 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64672 | Microsoft SharePoint Server Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64671 | GitHub Copilot for Jetbrains Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64670 | Windows DirectX Information Disclosure Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64669 | Windows Admin Center Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-11T00:00:00.000Z |
| msrc_cve-2025-64667 | Microsoft Exchange Server Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64666 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64663 | Custom Question Answering Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64661 | Windows Shell Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64658 | Windows File Explorer Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62573 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62572 | Application Information Service Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62571 | Windows Installer Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62570 | Windows Camera Frame Server Monitor Information Disclosure Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62569 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62567 | Windows Hyper-V Denial of Service Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62565 | Windows File Explorer Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62564 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62563 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62562 | Microsoft Outlook Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62561 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62560 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62559 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62558 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62557 | Microsoft Office Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62556 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62555 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201108-0285 | Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allow… | 2025-12-22T22:28:37.620000Z |
| var-201302-0132 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:28:05.896000Z |
| var-202004-2201 | A memory consumption issue was addressed with improved memory handling. This issue is fix… | 2025-12-22T22:28:05.590000Z |
| var-202212-2075 | An out-of-bounds read in Organization Specific TLV was found in various versions of Openv… | 2025-12-22T22:28:05.282000Z |
| var-202206-1157 | Incomplete cleanup in specific special register write operations for some Intel(R) Proces… | 2025-12-22T22:28:05.116000Z |
| var-201306-0247 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:28:04.566000Z |
| var-201405-0244 | The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEA… | 2025-12-22T22:28:01.243000Z |
| var-202201-0437 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Summary: The Migra… | 2025-12-22T22:26:21.708000Z |
| var-201705-3873 | In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 me… | 2025-12-22T22:26:20.552000Z |
| var-200705-0670 | The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.1… | 2025-12-22T22:26:17.477000Z |
| var-201404-0592 | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly h… | 2025-12-22T22:25:45.985000Z |
| var-202002-1458 | eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_requ… | 2025-12-22T22:25:40.910000Z |
| var-202103-0920 | An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be … | 2025-12-22T22:25:38.767000Z |
| var-200110-0176 | Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox … | 2025-12-22T22:25:38.536000Z |
| var-200609-1400 | The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to c… | 2025-12-22T22:25:37.911000Z |
| var-200110-0214 | The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely cre… | 2025-12-22T22:25:36.634000Z |
| var-202103-1554 | Netty is an open-source, asynchronous event-driven network application framework for rapi… | 2025-12-22T22:25:35.567000Z |
| var-201804-1163 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2025-12-22T22:25:34.525000Z |
| var-201603-0244 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and… | 2025-12-22T22:25:33.303000Z |
| var-201205-0305 | sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI… | 2025-12-22T22:25:33.148000Z |
| var-202006-1838 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested… | 2025-12-22T22:24:22.909000Z |
| var-200703-0019 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… | 2025-12-22T22:24:21.795000Z |
| var-201103-0287 | The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and ea… | 2025-12-22T22:24:09.603000Z |
| var-200703-0016 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… | 2025-12-22T22:24:09.518000Z |
| var-202109-1803 | ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No in… | 2025-12-22T22:24:04.207000Z |
| var-201302-0150 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2025-12-22T22:23:39.487000Z |
| var-201110-0394 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2025-12-22T22:23:38.465000Z |
| var-202004-1972 | A race condition was addressed with additional validation. This issue is fixed in iOS 13.… | 2025-12-22T22:23:38.165000Z |
| var-201605-0467 | Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4… | 2025-12-22T22:23:36.468000Z |
| var-201710-1400 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2025-12-22T22:23:35.804000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-002050 | Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers | 2024-02-07T15:39+09:00 | 2024-03-08T18:05+09:00 |
| jvndb-2024-001882 | Sharp NEC Display Solutions' public displays vulnerable to local file inclusion | 2024-02-07T14:25+09:00 | 2024-07-11T14:27+09:00 |
| jvndb-2020-013805 | Zeroshell vulnerable to OS command injection | 2024-02-07T13:38+09:00 | 2024-02-07T13:38+09:00 |
| jvndb-2024-001804 | Multiple buffer overflow vulnerabilities in HOME SPOT CUBE2 | 2024-02-06T15:02+09:00 | 2024-03-11T17:32+09:00 |
| jvndb-2024-001785 | Incorrect permission assignment vulnerability in Trend Micro uiAirSupport | 2024-02-06T14:46+09:00 | 2024-03-11T17:42+09:00 |
| jvndb-2024-000017 | Cybozu KUNAI for Android vulnerable to denial-of-service (DoS) | 2024-02-06T13:25+09:00 | 2024-06-27T13:28+09:00 |
| jvndb-2024-001462 | File and Directory Permissions Vulnerability in Hitachi Tuning Manager | 2024-02-05T14:54+09:00 | 2024-02-05T14:54+09:00 |
| jvndb-2024-000016 | Group Office vulnerable to cross-site scripting | 2024-02-01T13:48+09:00 | 2024-03-11T18:04+09:00 |
| jvndb-2024-000015 | Payment EX vulnerable to information disclosure | 2024-02-01T13:41+09:00 | 2024-03-11T17:42+09:00 |
| jvndb-2024-001161 | Multiple vulnerabilities in SHARP Energy Management Controller with Cloud Services | 2024-01-31T16:01+09:00 | 2024-01-31T16:01+09:00 |
| jvndb-2024-001160 | File and Directory Permissions Vulnerability in Hitachi Storage Plug-in for VMware vCenter | 2024-01-31T15:25+09:00 | 2024-03-11T17:41+09:00 |
| jvndb-2024-001062 | Yamaha wireless LAN access point devices vulnerable to active debug code | 2024-01-24T17:16+09:00 | 2024-03-13T17:24+09:00 |
| jvndb-2024-001061 | ELECOM wireless LAN routers vulnerable to OS command injection | 2024-01-24T17:16+09:00 | 2025-02-13T14:31+09:00 |
| jvndb-2024-000014 | Oracle WebLogic Server vulnerable to HTTP header injection | 2024-01-24T13:53+09:00 | 2024-01-24T13:53+09:00 |
| jvndb-2024-000005 | "Mercari" App for Android fails to restrict custom URL schemes properly | 2024-01-24T13:46+09:00 | 2024-03-04T18:01+09:00 |
| jvndb-2024-000008 | Improper restriction of XML external entity references (XXE) in MLIT "Electronic Delivery Check System" and "Electronic delivery item Inspection Support System" | 2024-01-23T16:57+09:00 | 2024-03-13T17:40+09:00 |
| jvndb-2024-000013 | Android App "Spoon" uses a hard-coded API key for an external service | 2024-01-23T16:53+09:00 | 2024-03-14T17:44+09:00 |
| jvndb-2024-000010 | Improper restriction of XML external entity references (XXE) in "Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version)" | 2024-01-23T15:25+09:00 | 2024-03-14T17:33+09:00 |
| jvndb-2024-000009 | Improper restriction of XML external entity references (XXE) in Electronic Deliverables Creation Support Tool provided by Ministry of Defense | 2024-01-23T15:13+09:00 | 2024-03-13T17:46+09:00 |
| jvndb-2024-000012 | Access analysis CGI An-Analyzer vulnerable to open redirect | 2024-01-22T15:57+09:00 | 2024-03-13T17:34+09:00 |
| jvndb-2024-000011 | Multiple vulnerabilities in a-blog cms | 2024-01-22T15:08+09:00 | 2024-03-13T17:50+09:00 |
| jvndb-2024-000006 | FusionPBX vulnerable to cross-site scripting | 2024-01-19T12:30+09:00 | 2024-03-12T17:31+09:00 |
| jvndb-2024-000007 | Multiple Dahua Technology products vulnerable to authentication bypass | 2024-01-18T13:43+09:00 | 2024-07-11T16:10+09:00 |
| jvndb-2024-000004 | Drupal vulnerable to improper handling of structural elements | 2024-01-16T13:41+09:00 | 2024-03-12T17:33+09:00 |
| jvndb-2024-000003 | Pleasanter vulnerable to cross-site scripting | 2024-01-15T15:59+09:00 | 2024-01-15T15:59+09:00 |
| jvndb-2024-000002 | Thermal camera TMC series vulnerable to insufficient technical documentation | 2024-01-15T15:19+09:00 | 2024-03-11T18:17+09:00 |
| jvndb-2024-000001 | Improper input validation vulnerability in WordPress Plugin "WordPress Quiz Maker Plugin" | 2024-01-12T13:51+09:00 | 2024-03-14T12:28+09:00 |
| jvndb-2024-001002 | Multiple TP-Link products vulnerable to OS command injection | 2024-01-10T13:57+09:00 | 2024-03-14T13:52+09:00 |
| jvndb-2024-001001 | Multiple vulnerabilities in Panasonic Control FPWIN Pro7 | 2024-01-10T13:46+09:00 | 2024-01-10T13:46+09:00 |
| jvndb-2023-000126 | Multiple vulnerabilities in PowerCMS | 2023-12-26T16:46+09:00 | 2024-03-18T17:58+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20064-1 | Security update for libpcap | 2026-01-08T16:16:36Z | 2026-01-08T16:16:36Z |
| suse-su-2026:20045-1 | Security update for glib2 | 2026-01-08T16:00:18Z | 2026-01-08T16:00:18Z |
| suse-su-2026:20044-1 | Security update for rsync | 2026-01-08T15:49:46Z | 2026-01-08T15:49:46Z |
| suse-su-2026:20043-1 | Security update for python-tornado6 | 2026-01-08T15:48:09Z | 2026-01-08T15:48:09Z |
| suse-su-2026:20042-1 | Security update for curl | 2026-01-08T15:18:54Z | 2026-01-08T15:18:54Z |
| suse-su-2026:20041-1 | Security update for bluez | 2026-01-08T15:07:04Z | 2026-01-08T15:07:04Z |
| suse-su-2026:20062-1 | Security update for curl | 2026-01-08T14:51:21Z | 2026-01-08T14:51:21Z |
| suse-su-2026:20061-1 | Security update for openvswitch | 2026-01-08T14:43:50Z | 2026-01-08T14:43:50Z |
| suse-su-2026:0073-1 | Security update for ImageMagick | 2026-01-08T13:22:41Z | 2026-01-08T13:22:41Z |
| suse-su-2026:0072-1 | Security update for ImageMagick | 2026-01-08T13:22:28Z | 2026-01-08T13:22:28Z |
| suse-su-2026:0071-1 | Security update for php8 | 2026-01-08T13:22:08Z | 2026-01-08T13:22:08Z |
| suse-su-2026:0070-1 | Security update for qemu | 2026-01-08T13:21:59Z | 2026-01-08T13:21:59Z |
| suse-su-2026:0069-1 | Security update for rsync | 2026-01-08T13:21:48Z | 2026-01-08T13:21:48Z |
| suse-su-2026:0068-1 | Security update for libvirt | 2026-01-08T12:22:40Z | 2026-01-08T12:22:40Z |
| suse-su-2026:0067-1 | Security update for podman | 2026-01-08T12:22:16Z | 2026-01-08T12:22:16Z |
| suse-su-2026:0066-1 | Security update for curl | 2026-01-08T12:21:35Z | 2026-01-08T12:21:35Z |
| suse-su-2026:0063-1 | Security update for libpcap | 2026-01-08T09:36:26Z | 2026-01-08T09:36:26Z |
| suse-su-2026:0062-1 | Security update for libpcap | 2026-01-08T09:36:12Z | 2026-01-08T09:36:12Z |
| suse-su-2026:0061-1 | Security update for ImageMagick | 2026-01-07T18:33:22Z | 2026-01-07T18:33:22Z |
| suse-su-2026:0060-1 | Security update for capstone | 2026-01-07T16:02:47Z | 2026-01-07T16:02:47Z |
| suse-su-2026:0059-1 | Security update for ImageMagick | 2026-01-07T16:01:56Z | 2026-01-07T16:01:56Z |
| suse-su-2026:20039-1 | Security update for the Linux Kernel | 2026-01-07T12:33:45Z | 2026-01-07T12:33:45Z |
| suse-su-2026:0053-1 | Security update for libpcap | 2026-01-07T11:03:52Z | 2026-01-07T11:03:52Z |
| suse-su-2026:20059-1 | Security update for the Linux Kernel | 2026-01-07T10:55:44Z | 2026-01-07T10:55:44Z |
| suse-su-2026:20022-1 | Security update of valkey | 2026-01-07T09:35:57Z | 2026-01-07T09:35:57Z |
| suse-su-2026:0052-1 | Security update for curl | 2026-01-07T09:28:37Z | 2026-01-07T09:28:37Z |
| suse-su-2026:0051-1 | Security update for curl | 2026-01-07T09:28:27Z | 2026-01-07T09:28:27Z |
| suse-su-2026:0050-1 | Security update for curl | 2026-01-07T09:28:15Z | 2026-01-07T09:28:15Z |
| suse-su-2026:0044-1 | Security update for mozjs60 | 2026-01-06T16:10:16Z | 2026-01-06T16:10:16Z |
| suse-su-2026:0043-1 | Security update for qemu | 2026-01-06T16:03:07Z | 2026-01-06T16:03:07Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15778-1 | libwireshark19-4.6.1-2.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15777-1 | python311-spotipy-2.25.2-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15776-1 | python311-pypdf-6.4.0-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15775-1 | opa-1.11.0-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15774-1 | netbird-0.60.3-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15773-1 | cheat-4.4.2-3.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:20091-1 | Security update for the Linux Kernel | 2025-11-26T17:04:24Z | 2025-11-26T17:04:24Z |
| opensuse-su-2025:20090-1 | Security update for curl | 2025-11-26T14:30:14Z | 2025-11-26T14:30:14Z |
| opensuse-su-2025:20089-1 | Security update for mysql-connector-java | 2025-11-26T08:12:25Z | 2025-11-26T08:12:25Z |
| opensuse-su-2025:15772-1 | kubevirt-container-disk-1.6.3-1.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:15771-1 | git-bug-0.10.1-3.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:15770-1 | bash-git-prompt-2.7.1-4.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:20083-1 | Security update for lasso | 2025-11-25T13:27:21Z | 2025-11-25T13:27:21Z |
| opensuse-su-2025:20081-1 | Security update for the Linux Kernel | 2025-11-25T07:35:00Z | 2025-11-25T07:35:00Z |
| opensuse-su-2025:15769-1 | libwireshark19-4.6.1-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15768-1 | python310-3.10.19-2.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15767-1 | openbao-2.4.4-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15766-1 | libsoup-3_0-0-3.6.5-9.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15765-1 | gnutls-3.8.11-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15764-1 | etcd-for-k8s1.32-3.5.24-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15763-1 | cloudflared-2025.11.1-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15762-1 | librnp0-0.18.1-1.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15761-1 | rclone-1.72.0-1.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15760-1 | python311-3.11.14-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15759-1 | libIex-3_4-33-3.4.3-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15758-1 | fontforge-20251009-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15757-1 | curl-8.17.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15756-1 | blender-5.0-5.0.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15755-1 | blender-4.5-4.5.4-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15754-1 | ansible-core-2.19-2.19.4-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2025-10004 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-11T09:04:16.301Z | 2025-10-11T09:07:57.990Z |
| bit-ejbca-2025-3027 | Open Redirect vulnerability in EJBCA | 2025-10-10T08:38:43.953Z | 2025-10-10T09:07:15.482Z |
| bit-ejbca-2025-3026 | Improper Neutralization of Special Elements vulnerability in EJBCA | 2025-10-10T08:38:42.126Z | 2025-10-10T09:07:15.482Z |
| bit-kibana-2025-37728 | Kibana Insufficiently Protected Credentials in the CrowdStrike Connector | 2025-10-09T08:43:25.053Z | 2025-10-09T09:08:03.236Z |
| bit-kibana-2025-25009 | Kibana Cross-Site Scripting (XSS) | 2025-10-09T08:43:15.178Z | 2025-11-06T13:25:46.476Z |
| bit-elk-2025-37728 | Kibana Insufficiently Protected Credentials in the CrowdStrike Connector | 2025-10-09T08:40:04.041Z | 2025-10-09T09:08:03.236Z |
| bit-elk-2025-25009 | Kibana Cross-Site Scripting (XSS) | 2025-10-09T08:39:52.493Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 2025-10-08T08:52:39.220Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 2025-10-08T08:52:37.720Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-46817 | Lua library commands may lead to integer overflow and potential RCE | 2025-10-08T08:52:36.400Z | 2025-11-13T11:23:28.166Z |
| bit-redis-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 2025-10-08T08:51:28.594Z | 2025-11-06T13:25:46.476Z |
| bit-redis-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 2025-10-08T08:51:27.125Z | 2025-10-11T09:07:57.990Z |
| bit-redis-2025-46817 | Lua library commands may lead to integer overflow and potential RCE | 2025-10-08T08:51:25.578Z | 2025-11-13T11:23:28.166Z |
| bit-keydb-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 2025-10-08T08:43:23.522Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 2025-10-08T08:43:21.875Z | 2025-10-11T09:07:57.990Z |
| bit-keydb-2025-46817 | Lua library commands may lead to integer overflow and potential RCE | 2025-10-08T08:43:20.393Z | 2025-11-13T11:23:28.166Z |
| bit-django-2025-59681 | 2025-10-08T08:40:24.312Z | 2025-11-06T13:25:46.476Z | |
| bit-tensorflow-2025-55559 | 2025-10-05T23:59:43.523Z | 2025-10-06T00:06:00.502Z | |
| bit-tensorflow-2025-55556 | 2025-10-05T23:59:42.019Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-55558 | 2025-10-05T23:47:59.108Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-55557 | 2025-10-05T23:47:57.792Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-55554 | 2025-10-05T23:47:56.493Z | 2025-10-16T00:08:58.048Z | |
| bit-pytorch-2025-55553 | 2025-10-05T23:47:55.078Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-55552 | 2025-10-05T23:47:53.725Z | 2025-10-16T00:08:58.048Z | |
| bit-pytorch-2025-55551 | 2025-10-05T23:47:52.236Z | 2025-10-16T00:08:58.048Z | |
| bit-pytorch-2025-46153 | 2025-10-05T23:47:50.900Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46152 | 2025-10-05T23:47:49.619Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46150 | 2025-10-05T23:47:48.186Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46149 | 2025-10-05T23:47:46.869Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46148 | 2025-10-05T23:47:45.481Z | 2025-10-06T00:06:00.502Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| drupal-contrib-2018-067 | 2018-10-17T16:29:08.000Z | 2023-08-11T21:21:48.000Z | |
| drupal-contrib-2018-059 | 2018-09-05T17:22:50.000Z | 2023-08-11T21:18:37.000Z | |
| drupal-contrib-2018-057 | 2018-08-29T16:26:33.000Z | 2023-08-11T21:25:35.000Z | |
| drupal-contrib-2018-055 | 2018-08-08T17:14:32.000Z | 2023-08-11T21:24:54.000Z | |
| drupal-contrib-2018-040 | 2018-06-06T13:05:27.000Z | 2023-08-11T21:31:17.000Z | |
| drupal-contrib-2018-039 | 2018-06-06T13:01:46.000Z | 2023-08-11T21:29:11.000Z | |
| drupal-contrib-2018-038 | 2018-06-06T12:58:31.000Z | 2023-08-11T21:28:55.000Z | |
| drupal-contrib-2018-027 | 2018-05-09T20:28:16.000Z | 2023-08-11T21:40:01.000Z | |
| drupal-contrib-2018-025 | 2018-05-09T14:16:32.000Z | 2023-08-11T21:39:24.000Z | |
| drupal-contrib-2018-021 | 2018-04-25T17:43:28.000Z | 2023-08-11T21:38:48.000Z | |
| drupal-contrib-2018-022 | 2018-04-25T17:37:20.000Z | 2023-08-11T21:38:26.000Z | |
| drupal-contrib-2018-018 | 2018-04-18T15:45:18.000Z | 2023-08-11T21:35:30.000Z | |
| drupal-contrib-2018-017 | 2018-03-21T17:05:41.000Z | 2023-08-11T21:44:22.000Z | |
| drupal-contrib-2018-016 | 2018-03-21T16:59:32.000Z | 2023-08-11T21:44:04.000Z | |
| drupal-contrib-2018-015 | 2018-02-21T20:12:22.000Z | 2023-08-11T21:43:40.000Z | |
| drupal-contrib-2018-014 | 2018-02-21T19:04:59.000Z | 2023-08-11T21:43:18.000Z | |
| drupal-contrib-2018-008 | 2018-02-07T18:45:12.000Z | 2023-08-11T21:41:56.000Z | |
| drupal-contrib-2018-002 | 2018-01-10T18:02:19.000Z | 2023-08-11T21:46:04.000Z | |
| drupal-contrib-2018-001 | 2018-01-10T17:57:53.000Z | 2023-08-11T21:45:33.000Z | |
| drupal-contrib-2017-094 | 2017-12-20T14:12:47.000Z | 2023-08-21T13:28:00.000Z | |
| drupal-contrib-2017-091 | 2017-12-06T18:44:03.000Z | 2023-08-21T13:26:56.000Z | |
| drupal-contrib-2017-083 | 2017-11-08T17:22:08.000Z | 2023-08-21T13:31:18.000Z | |
| drupal-contrib-2017-082 | 2017-11-08T17:16:30.000Z | 2023-08-21T13:31:01.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-00829 | Student File Management System login_query.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00828 | Student File Management System /delete_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00827 | Prison Management System search1.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00826 | Prison Management System search.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00825 | Online Appointment Booking System deletemanager.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00794 | UTT 进取 512W内存损坏漏洞 | 2025-12-25 | 2026-01-08 |
| cnvd-2026-00694 | Computer Laboratory System文件上传漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00677 | WordPress插件VikBooking Hotel Booking Engine & PMS信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00676 | WordPress插件Ultimate Member Widgets for Elementor信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00675 | WordPress插件Restaurant Menu by MotoPress信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00012 | Microsoft Azure Cosmos DB欺骗漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00011 | Microsoft Azure Cognitive Service for Language权限提升漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00010 | Microsoft Edge (Chromium-based)欺骗漏洞（CNVD-2026-00010） | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00009 | WordPress插件MasterStudy LMS Pro信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00008 | WordPress插件Follow My Blog Post息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00007 | Apache StreamPark安全绕过漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00006 | Apache Fineract信息泄露漏洞（CNVD-2026-00006） | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00005 | Apache Fineract信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00004 | Apache Fineract安全绕过漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00003 | Apache Airflow信息泄露漏洞（CNVD-2026-00003） | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00002 | WordPress插件myCred信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00001 | WordPress插件Appointment Booking Calendar信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2025-31388 | Apache StreamPark弱算法漏洞 | 2025-12-25 | 2025-12-25 |
| cnvd-2025-31387 | Apache HugeGraph-Server反序列化漏洞 | 2025-12-25 | 2025-12-25 |
| cnvd-2026-06416 | 深圳市广联智通科技有限公司AR300M16路由器存在命令执行漏洞（CNVD-C-2025-1171570） | 2025-12-24 | 2026-02-07 |
| cnvd-2026-06411 | 杭州飞致云信息科技有限公司SQLBot存在命令执行漏洞 | 2025-12-24 | 2026-02-01 |
| cnvd-2026-07559 | WordPress Brizy – Page Builder plugin信息泄露漏洞 | 2025-12-22 | 2026-01-28 |
| cnvd-2026-07558 | WordPress插件Ultimate Auction信息泄露漏洞 | 2025-12-22 | 2026-01-28 |
| cnvd-2026-07557 | WordPress插件SendPulse Email Marketing Newsletter信息泄露漏洞 | 2025-12-22 | 2026-01-28 |
| cnvd-2026-07556 | WordPress插件Export WP Page to Static HTML & PDF信息泄露漏洞 | 2025-12-22 | 2026-01-28 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0949 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0948 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0947 | Multiples vulnérabilités dans les produits IBM | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0946 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0945 | Vulnérabilité dans Qnap NetBak PC Agent | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0944 | Vulnérabilité dans Liferay | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0943 | Multiples vulnérabilités dans les produits Centreon | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0942 | Vulnérabilité dans Dovecot | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0941 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0940 | Vulnérabilité dans Liferay | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0939 | Multiples vulnérabilités dans les produits Splunk | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0938 | Multiples vulnérabilités dans les produits VMware | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0937 | Multiples vulnérabilités dans Google Chrome | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0936 | Multiples vulnérabilités dans Mattermost Server | 2025-10-29T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-0935 | Multiples vulnérabilités dans les produits VMware | 2025-10-29T00:00:00.000000 | 2025-10-29T00:00:00.000000 |
| certfr-2025-avi-0934 | Vulnérabilité dans les produits Mozilla | 2025-10-29T00:00:00.000000 | 2025-10-29T00:00:00.000000 |
| certfr-2025-avi-0933 | Multiples vulnérabilités dans Apache Tomcat | 2025-10-28T00:00:00.000000 | 2025-10-28T00:00:00.000000 |
| certfr-2025-avi-0932 | Multiples vulnérabilités dans Liferay | 2025-10-28T00:00:00.000000 | 2025-10-28T00:00:00.000000 |
| certfr-2025-avi-0931 | Vulnérabilité dans StrongSwan | 2025-10-28T00:00:00.000000 | 2025-10-28T00:00:00.000000 |
| certfr-2025-avi-0930 | Vulnérabilité dans Microsoft Windows Server Update Service | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0929 | Vulnérabilité dans le client VPN de TheGreenBow | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0928 | Vulnérabilité dans Microsoft Configuration Manager | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0927 | Vulnérabilité dans Xen | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0926 | Vulnérabilité dans le pilote ODBC de MongoDB | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0925 | Vulnérabilité dans les produits Belden | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0924 | Multiples vulnérabilités dans les produits IBM | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0923 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0922 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0921 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0920 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |