Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25734 |
6.1 (3.1)
|
Rucio WebUI has Stored Cross-site Scripting (XSS) in R… |
rucio |
rucio |
2026-02-25T19:33:44.627Z | 2026-02-26T16:01:36.671Z |
| CVE-2025-14103 |
4.3 (3.1)
|
Missing Authorization in GitLab |
GitLab |
GitLab |
2026-02-25T19:33:35.698Z | 2026-02-25T20:52:22.958Z |
| CVE-2026-22720 |
8 (3.1)
|
VMware Aria Operations stored cross-site scripting vul… |
VMware |
VMware Aria Operations |
2026-02-25T19:33:14.729Z | 2026-02-26T14:44:05.372Z |
| CVE-2026-25733 |
7.3 (3.1)
|
Rucio WebUI Vulnerable to Stored Cross-site Scripting … |
rucio |
rucio |
2026-02-25T19:30:55.695Z | 2026-02-26T16:02:31.146Z |
| CVE-2026-25138 |
5.3 (3.1)
|
Rucio WebUI has Username Enumeration via Login Error Message |
rucio |
rucio |
2026-02-25T19:28:35.628Z | 2026-02-26T16:03:22.817Z |
| CVE-2026-22719 |
8.1 (3.1)
|
VMware Aria Operations command injection vulnerability |
VMware |
Aria Operations |
2026-02-25T19:18:59.269Z | 2026-02-26T15:50:38.075Z |
| CVE-2026-25136 |
8.1 (3.1)
|
Rucio WebUI has a Reflected Cross-site Scripting Vulne… |
rucio |
rucio |
2026-02-25T18:57:28.589Z | 2026-02-26T20:44:57.174Z |
| CVE-2026-2636 |
5.5 (3.1)
|
Denial of Service in Microsoft OS |
Microsoft |
Windows OS |
2026-02-25T18:57:02.962Z | 2026-02-26T15:56:55.089Z |
| CVE-2026-24005 |
0 (3.1)
|
OpenKruise PodProbeMarker is Vulnerable to SSRF via Un… |
openkruise |
kruise |
2026-02-25T18:53:30.170Z | 2026-02-26T20:44:09.282Z |
| CVE-2026-25930 |
6.5 (3.1)
|
OpenEMR's Printable LBF Endpoint Leaks Arbitrary Patie… |
openemr |
openemr |
2026-02-25T18:48:10.373Z | 2026-02-26T20:43:11.655Z |
| CVE-2026-25929 |
6.5 (3.1)
|
OpenEMR Patient Picture Context Allows Arbitrary Patie… |
openemr |
openemr |
2026-02-25T18:46:44.816Z | 2026-02-26T21:33:41.863Z |
| CVE-2026-25927 |
7.1 (3.1)
|
OpenEMR Missing Authorization Checks in DICOM Viewer S… |
openemr |
openemr |
2026-02-25T18:43:25.725Z | 2026-02-26T21:33:41.716Z |
| CVE-2026-25746 |
8.8 (3.1)
|
OpenEMR has SQL Injection Vulnerability |
openemr |
openemr |
2026-02-25T18:39:24.787Z | 2026-02-26T20:54:39.616Z |
| CVE-2026-25743 |
7.2 (4.0)
|
OpenEMR has Stored XSS in Questionnaire answers |
openemr |
openemr |
2026-02-25T18:33:56.620Z | 2026-02-26T20:53:59.221Z |
| CVE-2026-3221 |
4.9 (3.1)
|
Sensitive user account information is not encryp… |
Devolutions |
Server |
2026-02-25T18:29:11.939Z | 2026-02-26T16:03:04.217Z |
| CVE-2026-25476 |
7.5 (3.1)
|
OpenEMR has Session Timeout Bypass via skip_timeout_reset |
openemr |
openemr |
2026-02-25T18:28:29.881Z | 2026-02-26T16:04:10.627Z |
| CVE-2026-25220 |
5.7 (4.0)
|
OpenEMR Messages "Show All" Not Restricted to Admins |
openemr |
openemr |
2026-02-25T18:25:06.228Z | 2026-02-26T16:12:36.374Z |
| CVE-2026-25164 |
8.1 (3.1)
|
OpenEMR's Document and Insurance REST Endpoints Skip ACL |
openemr |
openemr |
2026-02-25T18:22:40.693Z | 2026-02-26T16:13:42.534Z |
| CVE-2026-24908 |
10 (3.1)
|
OpenEMR has SQL Injection in Patient API Sort Parameter |
openemr |
openemr |
2026-02-25T18:14:03.504Z | 2026-02-26T16:14:34.090Z |
| CVE-2026-24890 |
8.1 (3.1)
|
OpenEMR Portal Users Can Forge Provider Signatures |
openemr |
openemr |
2026-02-25T18:10:22.910Z | 2026-02-26T16:15:28.455Z |
| CVE-2026-24487 |
5.7 (4.0)
|
OpenEMR has FHIR Patient Compartment Bypass in CareTea… |
openemr |
openemr |
2026-02-25T17:45:24.584Z | 2026-02-26T20:48:47.360Z |
| CVE-2026-23627 |
7.4 (4.0)
|
OpenEMR has SQL Injection in Immunization Search/Report |
openemr |
openemr |
2026-02-25T17:39:20.540Z | 2026-02-26T20:58:11.023Z |
| CVE-2026-27795 |
4.1 (3.1)
|
LangChain Community: redirect chaining can lead to SSR… |
langchain-ai |
langchainjs |
2026-02-25T17:30:01.106Z | 2026-02-25T18:42:52.277Z |
| CVE-2026-3194 |
2 (4.0)
4.5 (3.1)
4.5 (3.0)
|
Chia Blockchain RPC Server Master Passphrase get_priva… |
Chia |
Blockchain |
2026-02-25T17:02:17.420Z | 2026-02-25T18:43:40.383Z |
| CVE-2026-21902 |
9.8 (3.1)
9.3 (4.0)
|
Junos OS Evolved: PTX Series: A vulnerability allows a… |
Juniper Networks |
Junos OS Evolved |
2026-02-25T16:59:10.672Z | 2026-02-26T14:44:05.553Z |
| CVE-2026-27850 |
7.5 (3.1)
|
Improper verification in Linksys MR9600, Linksys MX4200 |
Linksys |
MR9600 |
2026-02-25T16:58:06.450Z | 2026-02-25T19:11:29.416Z |
| CVE-2026-25554 |
8.3 (4.0)
6.5 (3.1)
|
OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables J… |
OpenSIPS |
OpenSIPS |
2026-02-25T16:54:11.845Z | 2026-02-27T18:17:35.536Z |
| CVE-2026-27794 |
6.6 (3.1)
|
LangGraph: BaseCache Deserialization of Untrusted Data… |
langchain-ai |
langgraph-checkpoint |
2026-02-25T16:53:47.176Z | 2026-02-25T21:00:24.430Z |
| CVE-2026-27739 |
9.2 (4.0)
|
Angular SSR is vulnerable to SSRF and Header Injection… |
angular |
angular-cli |
2026-02-25T16:47:29.705Z | 2026-02-27T17:59:11.328Z |
| CVE-2026-27738 |
6.9 (4.0)
|
Angular SSR has an Open Redirect via X-Forwarded-Prefix |
angular |
angular-cli |
2026-02-25T16:40:44.724Z | 2026-02-27T20:46:26.917Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25952 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo |
FreeRDP |
FreeRDP |
2026-02-25T20:24:07.396Z | 2026-02-26T15:56:24.771Z |
| CVE-2026-25942 |
5.5 (4.0)
|
FreeRDP has global-buffer-overflow in xf_rail_server_e… |
FreeRDP |
FreeRDP |
2026-02-25T20:01:16.472Z | 2026-02-26T20:47:09.779Z |
| CVE-2026-22721 |
6.2 (3.1)
|
VMware Aria Operations privilege escalation vulnerability |
VMware |
VMware Aria Operations |
2026-02-25T20:00:15.719Z | 2026-02-27T04:55:47.793Z |
| CVE-2026-1747 |
4.3 (3.1)
|
Authentication Bypass Using an Alternate Path or Chann… |
GitLab |
GitLab |
2026-02-25T20:04:49.893Z | 2026-02-26T15:39:03.951Z |
| CVE-2026-1725 |
5.3 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-02-25T20:04:44.830Z | 2026-02-26T15:42:29.688Z |
| CVE-2026-1662 |
7.5 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-02-25T20:04:59.913Z | 2026-02-26T15:10:46.924Z |
| CVE-2026-1388 |
7.5 (3.1)
|
Inefficient Regular Expression Complexity in GitLab |
GitLab |
GitLab |
2026-02-25T20:05:05.289Z | 2026-02-26T15:07:56.004Z |
| CVE-2026-0752 |
8 (3.1)
|
Improper Neutralization of Input During Web Page Gener… |
GitLab |
GitLab |
2026-02-25T20:05:19.818Z | 2026-02-26T14:44:05.136Z |
| CVE-2026-0542 |
9.2 (4.0)
|
Remote Code Execution in ServiceNow AI Platform |
ServiceNow |
ServiceNow AI Platform |
2026-02-25T20:35:27.303Z | 2026-02-26T15:53:05.161Z |
| CVE-2025-14511 |
7.5 (3.1)
|
Improper Validation of Specified Quantity in Input in GitLab |
GitLab |
GitLab |
2026-02-25T20:05:24.799Z | 2026-02-26T15:57:25.416Z |
| CVE-2026-2636 |
5.5 (3.1)
|
Denial of Service in Microsoft OS |
Microsoft |
Windows OS |
2026-02-25T18:57:02.962Z | 2026-02-26T15:56:55.089Z |
| CVE-2026-25941 |
4.3 (3.1)
|
FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-B… |
FreeRDP |
FreeRDP |
2026-02-25T19:55:24.984Z | 2026-02-26T21:33:42.006Z |
| CVE-2026-25736 |
6.1 (3.1)
|
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vu… |
rucio |
rucio |
2026-02-25T19:50:52.820Z | 2026-02-26T15:59:19.879Z |
| CVE-2026-25735 |
6.1 (3.1)
|
Rucio WebUI has a Stored Cross-site Scripting (XSS) vu… |
rucio |
rucio |
2026-02-25T19:43:36.463Z | 2026-02-26T16:00:36.501Z |
| CVE-2026-25734 |
6.1 (3.1)
|
Rucio WebUI has Stored Cross-site Scripting (XSS) in R… |
rucio |
rucio |
2026-02-25T19:33:44.627Z | 2026-02-26T16:01:36.671Z |
| CVE-2026-25733 |
7.3 (3.1)
|
Rucio WebUI Vulnerable to Stored Cross-site Scripting … |
rucio |
rucio |
2026-02-25T19:30:55.695Z | 2026-02-26T16:02:31.146Z |
| CVE-2026-25138 |
5.3 (3.1)
|
Rucio WebUI has Username Enumeration via Login Error Message |
rucio |
rucio |
2026-02-25T19:28:35.628Z | 2026-02-26T16:03:22.817Z |
| CVE-2026-25136 |
8.1 (3.1)
|
Rucio WebUI has a Reflected Cross-site Scripting Vulne… |
rucio |
rucio |
2026-02-25T18:57:28.589Z | 2026-02-26T20:44:57.174Z |
| CVE-2026-22720 |
8 (3.1)
|
VMware Aria Operations stored cross-site scripting vul… |
VMware |
VMware Aria Operations |
2026-02-25T19:33:14.729Z | 2026-02-26T14:44:05.372Z |
| CVE-2026-22719 |
8.1 (3.1)
|
VMware Aria Operations command injection vulnerability |
VMware |
Aria Operations |
2026-02-25T19:18:59.269Z | 2026-02-26T15:50:38.075Z |
| CVE-2025-3525 |
6.5 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-02-25T19:33:56.609Z | 2026-02-25T20:51:14.590Z |
| CVE-2025-14103 |
4.3 (3.1)
|
Missing Authorization in GitLab |
GitLab |
GitLab |
2026-02-25T19:33:35.698Z | 2026-02-25T20:52:22.958Z |
| CVE-2026-3221 |
4.9 (3.1)
|
Sensitive user account information is not encryp… |
Devolutions |
Server |
2026-02-25T18:29:11.939Z | 2026-02-26T16:03:04.217Z |
| CVE-2026-25930 |
6.5 (3.1)
|
OpenEMR's Printable LBF Endpoint Leaks Arbitrary Patie… |
openemr |
openemr |
2026-02-25T18:48:10.373Z | 2026-02-26T20:43:11.655Z |
| CVE-2026-25929 |
6.5 (3.1)
|
OpenEMR Patient Picture Context Allows Arbitrary Patie… |
openemr |
openemr |
2026-02-25T18:46:44.816Z | 2026-02-26T21:33:41.863Z |
| CVE-2026-25927 |
7.1 (3.1)
|
OpenEMR Missing Authorization Checks in DICOM Viewer S… |
openemr |
openemr |
2026-02-25T18:43:25.725Z | 2026-02-26T21:33:41.716Z |
| CVE-2026-25746 |
8.8 (3.1)
|
OpenEMR has SQL Injection Vulnerability |
openemr |
openemr |
2026-02-25T18:39:24.787Z | 2026-02-26T20:54:39.616Z |
| CVE-2026-25743 |
7.2 (4.0)
|
OpenEMR has Stored XSS in Questionnaire answers |
openemr |
openemr |
2026-02-25T18:33:56.620Z | 2026-02-26T20:53:59.221Z |
| CVE-2026-25476 |
7.5 (3.1)
|
OpenEMR has Session Timeout Bypass via skip_timeout_reset |
openemr |
openemr |
2026-02-25T18:28:29.881Z | 2026-02-26T16:04:10.627Z |
| CVE-2026-25220 |
5.7 (4.0)
|
OpenEMR Messages "Show All" Not Restricted to Admins |
openemr |
openemr |
2026-02-25T18:25:06.228Z | 2026-02-26T16:12:36.374Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-xcq6-x53r-q98g |
8.8 (3.1)
7.4 (4.0)
|
A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function for… | 2026-02-25T09:30:26Z | 2026-02-25T09:30:27Z |
| ghsa-mf59-ffwh-5qhw |
2.4 (3.1)
1.9 (4.0)
|
A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management… | 2026-02-25T09:30:26Z | 2026-02-25T09:30:27Z |
| ghsa-jv27-w2xj-6cq3 |
8.8 (3.1)
|
The Advanced Woo Labels plugin for WordPress is vulnerable to Remote Code Execution in all versions… | 2026-02-25T09:30:26Z | 2026-02-25T09:30:27Z |
| ghsa-f8m8-w7hg-xv97 |
6.4 (3.1)
|
The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cr… | 2026-02-25T09:30:26Z | 2026-02-25T09:30:26Z |
| ghsa-7gq2-xp8m-v3r5 |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRout… | 2026-02-25T09:30:26Z | 2026-02-25T09:30:27Z |
| ghsa-6xq2-fm6w-mxfm |
4.6 (3.1)
|
URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file ou… | 2026-02-25T09:30:26Z | 2026-02-25T21:31:18Z |
| ghsa-wmc4-44hv-rxcc |
8.1 (3.1)
9.2 (4.0)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ASU… | 2026-02-25T06:31:15Z | 2026-02-26T18:31:38Z |
| ghsa-r9gx-29q7-44rw |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This imp… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-r58x-2c7j-vfm9 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unkno… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-r3qv-6v6v-622r |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affe… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-q7q5-p52h-85m5 |
7.3 (3.1)
5.5 (4.0)
|
A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknow… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-pgmp-w8v7-hhfx |
6.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issu… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-hmg7-v7c7-65qj |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasi… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-fv8r-cjf4-v929 |
4.7 (3.1)
|
Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configu… | 2026-02-25T06:31:15Z | 2026-02-27T21:31:20Z |
| ghsa-9953-hw28-xvx7 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown … | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-8vx8-439w-j8j5 |
6.1 (3.1)
5.1 (4.0)
|
The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnera… | 2026-02-25T06:31:15Z | 2026-02-26T21:31:30Z |
| ghsa-77xw-22r9-95g2 |
6.5 (3.1)
8.7 (4.0)
|
The SPIP interface_traduction_objets plugin versions prior to 4.3.3 contain an authenticated SQL in… | 2026-02-25T06:31:15Z | 2026-02-27T21:31:20Z |
| ghsa-6rvw-w3xj-gg67 |
8.8 (3.1)
8.7 (4.0)
|
The SPIP interface_traduction_objets plugin versions prior to 4.3.3 contain an authenticated remote… | 2026-02-25T06:31:15Z | 2026-02-26T21:31:30Z |
| ghsa-55xf-4pmg-v3xm |
5.3 (3.1)
1.9 (4.0)
|
A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-4v56-g6h4-6655 |
6.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in itsourcecode College Management System 1.0. This affe… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-4jxf-pwgr-9m4j |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability has been found in SourceCodester Website Link Extractor 1.0. This vulnerability aff… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-3h75-x2ww-p6ww |
9.8 (3.1)
9.3 (4.0)
|
Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server V… | 2026-02-25T06:31:15Z | 2026-02-25T06:31:15Z |
| ghsa-3224-p867-265f |
6.5 (3.1)
8.3 (4.0)
|
Improper Certificate Validation vulnerability in ASUSTOR ADM FTP Backup on Linux, x86, ARM, 64 bit … | 2026-02-25T06:31:15Z | 2026-02-26T18:31:38Z |
| ghsa-pg8p-25c5-3f44 |
9.8 (3.1)
9.3 (4.0)
|
The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulne… | 2026-02-25T06:31:14Z | 2026-02-26T21:31:30Z |
| ghsa-68cf-j259-wgr8 |
9.8 (3.1)
9.3 (4.0)
|
The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vu… | 2026-02-25T06:31:14Z | 2026-02-26T21:31:30Z |
| ghsa-vfwc-g9gj-ppmx |
7.8 (3.1)
8.5 (4.0)
|
CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized p… | 2026-02-25T03:30:58Z | 2026-02-27T21:31:19Z |
| ghsa-v5rp-3mcx-fr73 |
3.3 (3.1)
4.8 (4.0)
|
A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_f… | 2026-02-25T03:30:58Z | 2026-02-25T03:30:59Z |
| ghsa-crhx-frv8-2mww |
7.3 (3.1)
5.5 (4.0)
|
A weakness has been identified in itsourcecode News Portal Project 1.0. The impacted element is an … | 2026-02-25T03:30:58Z | 2026-02-25T03:30:58Z |
| ghsa-49pv-4fw7-7vw4 |
5.3 (3.1)
1.9 (4.0)
|
A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an u… | 2026-02-25T03:30:58Z | 2026-02-25T03:30:58Z |
| ghsa-3pm4-mcqw-jq89 |
5.2 (3.1)
|
Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configu… | 2026-02-25T03:30:58Z | 2026-02-25T03:30:58Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-306 |
8.1 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In ve… | vyper | 2023-09-18T21:16:00+00:00 | 2024-11-21T14:23:02.752932+00:00 |
| pysec-2023-305 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Start… | vyper | 2023-09-18T21:16:00+00:00 | 2024-11-21T14:23:02.698147+00:00 |
| pysec-2023-176 |
6.5 (3.1)
|
GeoNode is an open source platform that facilitates the creation, sharing, and collaborat… | geonode | 2023-09-15T21:15:00+00:00 | 2023-09-20T17:25:44.504117+00:00 |
| pysec-2023-173 |
5.3 (3.1)
|
Piccolo is an ORM and query builder which supports asyncio. In versions 0.120.0 and prior… | piccolo | 2023-09-12T21:15:00+00:00 | 2023-09-19T05:26:00.954782+00:00 |
| pysec-2023-171 |
|
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authent… | apache-airflow | 2023-09-12T12:15:00+00:00 | 2023-09-12T14:27:23.735580+00:00 |
| pysec-2023-170 |
|
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authent… | apache-airflow | 2023-09-12T12:15:00+00:00 | 2023-09-12T14:27:23.660908+00:00 |
| pysec-2023-172 |
4.3 (3.1)
|
The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, … | hana-ml | 2023-09-12T02:15:00Z | 2023-09-29T22:26:12.812435Z |
| pysec-2023-169 |
7.8 (3.1)
|
Git Providers can read from the wrong environment because they get the same cache directo… | salt | 2023-09-05T11:15:00+00:00 | 2023-09-08T20:23:17.288300+00:00 |
| pysec-2023-166 |
5.3 (3.1)
|
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving se… | salt | 2023-09-05T11:15:00+00:00 | 2023-09-07T20:23:20.197102+00:00 |
| pysec-2023-168 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation… | vyper | 2023-09-04T18:15:00+00:00 | 2023-09-08T16:30:59.497777+00:00 |
| pysec-2023-167 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language. For the following (probably non-exhaustive) … | vyper | 2023-09-04T18:15:00+00:00 | 2023-09-08T15:22:00.929480+00:00 |
| pysec-2023-163 |
9.8 (3.1)
|
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary… | numexpr | 2023-09-01T16:15:00Z | 2025-02-20T09:11:38.521949Z |
| pysec-2023-162 |
9.8 (3.1)
|
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary… | langchain | 2023-09-01T16:15:00Z | 2023-10-04T16:56:57.465474Z |
| pysec-2023-165 |
6.5 (3.1)
|
GitPython is a python library used to interact with Git repositories. In order to resolv… | gitpython | 2023-08-30T22:15:00+00:00 | 2023-09-07T14:33:25.683922+00:00 |
| pysec-2023-164 |
4.7 (3.1)
|
borgbackup is an opensource, deduplicating archiver with compression and authenticated en… | borgbackup | 2023-08-30T18:15:00+00:00 | 2023-09-06T16:31:20.448538+00:00 |
| pysec-2023-159 |
7.7 (3.1)
|
RestrictedPython is a restricted execution environment for Python to run untrusted code. … | restrictedpython | 2023-08-30T18:15:00+00:00 | 2023-09-05T16:32:17.658660+00:00 |
| pysec-2023-157 |
6.1 (3.1)
|
jupyter-server is the backend for Jupyter web applications. Improper cross-site credentia… | jupyter-server | 2023-08-28T21:15:00+00:00 | 2023-09-01T20:23:47.344401+00:00 |
| pysec-2023-155 |
6.1 (3.1)
|
jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. … | jupyter-server | 2023-08-28T21:15:00+00:00 | 2023-09-01T16:31:48.441782+00:00 |
| pysec-2023-161 |
7.8 (3.1)
|
GitPython is a python library used to interact with Git repositories. When resolving a p… | gitpython | 2023-08-28T18:15:00+00:00 | 2023-09-05T22:26:14.587281+00:00 |
| pysec-2023-156 |
8.8 (3.1)
|
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphe… | apache-airflow-providers-apache-spark | 2023-08-28T08:15:00+00:00 | 2023-09-01T18:27:11.679668+00:00 |
| pysec-2023-160 |
6.5 (3.1)
|
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-resp… | keylime | 2023-08-25T17:15:00+00:00 | 2023-09-05T20:22:36.414406+00:00 |
| pysec-2023-154 |
5.3 (3.1)
|
Datasette is an open source multi-tool for exploring and publishing data. This bug affect… | datasette | 2023-08-25T01:15:00Z | 2023-10-08T16:12:24.555320Z |
| pysec-2023-269 |
7.5 (3.1)
|
GeoNode is an open source platform that facilitates the creation, sharing, and collaborat… | geonode | 2023-08-24T23:15:00+00:00 | 2024-11-21T14:22:50.995218+00:00 |
| pysec-2023-158 |
8.0 (3.1)
|
The session fixation vulnerability allowed the authenticated user to continue accessing A… | apache-airflow | 2023-08-23T16:15:00+00:00 | 2023-09-04T08:29:37.781470+00:00 |
| pysec-2023-152 |
8.1 (3.1)
|
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be… | apache-airflow | 2023-08-23T16:15:00+00:00 | 2023-08-29T18:28:28.180958+00:00 |
| pysec-2023-153 |
6.1 (3.1)
|
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_u… | horizon | 2023-08-22T19:16:00+00:00 | 2023-08-30T18:28:45.068261+00:00 |
| pysec-2023-151 |
9.8 (3.1)
|
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via th… | langchain | 2023-08-22T19:16:00Z | 2023-08-29T15:11:37.047967Z |
| pysec-2023-149 |
|
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabl… | json2xml | 2023-08-22T19:16:00+00:00 | 2023-08-22T20:23:14.541580+00:00 |
| pysec-2023-150 |
7.8 (3.1)
|
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 a… | exiv2 | 2023-08-22T19:15:00+00:00 | 2023-08-25T18:28:13.546911+00:00 |
| pysec-2023-148 |
9.8 (3.1)
|
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary… | llama-index | 2023-08-15T17:15:00+00:00 | 2023-08-22T18:27:29.213194+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-649 | Malicious code in callapirequests (PyPI) | 2026-02-02T09:08:10Z | 2026-02-02T09:08:10Z |
| mal-2026-646 | Malicious code in picking-miniapp (npm) | 2026-02-02T08:30:53Z | 2026-02-02T18:50:26Z |
| mal-2026-647 | Malicious code in react-native-expofp (npm) | 2026-02-02T08:30:15Z | 2026-02-02T18:50:26Z |
| mal-2026-644 | Malicious code in dise-pkt (npm) | 2026-02-02T08:29:38Z | 2026-02-02T18:50:24Z |
| mal-2026-643 | Malicious code in @hemanshu_patil/xcode-windows-x64 (npm) | 2026-02-02T08:28:43Z | 2026-02-02T18:50:22Z |
| mal-2026-642 | Malicious code in @hemanshu_patil/xcode (npm) | 2026-02-02T08:28:43Z | 2026-02-02T18:50:22Z |
| mal-2026-648 | Malicious code in yazxzpedia (npm) | 2026-02-02T08:27:24Z | 2026-02-02T18:50:28Z |
| mal-2026-645 | Malicious code in libsignal-yazxzpedia (npm) | 2026-02-02T08:27:24Z | 2026-02-02T18:50:25Z |
| mal-2026-641 | Malicious code in connections-api-requests (PyPI) | 2026-02-02T06:54:40Z | 2026-02-02T06:54:40Z |
| mal-2026-640 | Malicious code in connections-api-request (PyPI) | 2026-02-02T06:52:24Z | 2026-02-02T06:52:24Z |
| mal-2026-639 | Malicious code in connection-api-requests (PyPI) | 2026-02-02T06:49:31Z | 2026-02-02T06:49:31Z |
| mal-2026-638 | Malicious code in solhint-plugin-hyperlane (npm) | 2026-02-02T05:19:43Z | 2026-02-03T08:27:44Z |
| mal-2026-637 | Malicious code in launchdarkly-cpp-networking (npm) | 2026-02-02T05:19:43Z | 2026-02-03T03:16:52Z |
| mal-2026-636 | Malicious code in idv-script (npm) | 2026-02-02T05:19:43Z | 2026-02-04T05:37:04Z |
| mal-2026-635 | Malicious code in finnairshop (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-634 | Malicious code in eslint-config-minecraft-scripting (npm) | 2026-02-02T05:19:43Z | 2026-02-03T08:27:41Z |
| mal-2026-633 | Malicious code in cowsay-fancy (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-632 | Malicious code in cowsay-deluxe (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-631 | Malicious code in cowsay-caps (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-630 | Malicious code in cowsay-allcaps (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-629 | Malicious code in client-desktop-web-installer (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-628 | Malicious code in @casaverso/frontend-core (npm) | 2026-02-02T05:19:43Z | 2026-02-04T15:31:04Z |
| mal-2026-625 | Malicious code in hangimani (PyPI) | 2026-02-02T00:02:05Z | 2026-02-04T17:50:02Z |
| mal-2026-624 | Malicious code in hultine (PyPI) | 2026-02-01T21:00:48Z | 2026-02-01T21:00:48Z |
| mal-2026-621 | Malicious code in base-local-planner (PyPI) | 2026-02-01T19:14:02Z | 2026-02-01T19:27:08Z |
| mal-2026-623 | Malicious code in marshl (PyPI) | 2026-02-01T19:10:30Z | 2026-02-26T09:50:46Z |
| mal-2026-622 | Malicious code in genvia-utils (PyPI) | 2026-02-01T19:06:58Z | 2026-02-01T19:06:58Z |
| mal-2026-619 | Malicious code in colorss (PyPI) | 2026-02-01T10:28:48Z | 2026-02-01T11:10:26Z |
| mal-2026-620 | Malicious code in wandb-widget (PyPI) | 2026-02-01T10:15:33Z | 2026-02-01T10:15:33Z |
| mal-2026-618 | Malicious code in learning-curve-projects (PyPI) | 2026-01-31T19:19:08Z | 2026-01-31T19:23:36Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2632 | Fortinet FortiWeb: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2631 | Fortinet FortiOS und FortiProxy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2630 | Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2629 | xwiki (AdminTools und Pro Macros): Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2628 | Fortinet FortiVoice: Schwachstelle ermöglicht Codeausführung | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2627 | WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Cross-Site Scripting | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2626 | Liferay Portal und DXP: Schwachstelle ermöglicht Cross-Site Scripting | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2625 | Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2624 | Fortinet FortiOS (CAPWAP daemon): Mehrere Schwachstellen ermöglichen Codeausführung | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2623 | Fortinet FortiClient (Windows): Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2622 | Fortinet FortiSandbox: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2621 | Fortinet FortiWeb: Schwachstelle ermöglicht Codeausführung | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2620 | Mattermost Plugins: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-17T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2619 | MISP: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-17T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2618 | SolarWinds Serv-U: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-11-17T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2617 | Checkmk: Mehrere Schwachstellen | 2025-11-17T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2616 | libvirt: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-17T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2615 | SolarWinds Platform: Mehrere Schwachstellen | 2025-11-17T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2614 | D-LINK DIR-878 Router: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-11-17T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2613 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung oder DoS | 2025-11-17T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2612 | M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2611 | NetApp ActiveIQ Unified Manager (Axios): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-16T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2610 | Flowise (on-premise): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-16T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2609 | IBM SAN Volume Controller, Storwize und FlashSystem: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2608 | Golang Go: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2026-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2607 | Red Hat Enterprise Linux (lasso): Eine Schwachstelle ermöglichen Codeausführung | 2025-11-16T23:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-2606 | Keycloak: Mehrere Schwachstellen | 2025-11-13T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2605 | IBM AIX: Mehrere Schwachstellen | 2025-11-13T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2604 | Linksys Router (E1200, E7350, RE700): Mehrere Schwachstellen | 2025-11-13T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2603 | Fortinet FortiWeb: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-11-13T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0028 | Kwetsbaarheden verholpen in Oracle Analytics | 2025-01-22T13:36:58.196605Z | 2025-01-22T13:36:58.196605Z |
| ncsc-2025-0027 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2025-01-22T13:36:27.908718Z | 2025-01-22T13:36:27.908718Z |
| ncsc-2025-0026 | Kwetsbaarheden verholpen in Oracle JD Edwards | 2025-01-22T13:34:42.937250Z | 2025-01-22T13:34:42.937250Z |
| ncsc-2025-0025 | Kwetsbaarheden verholpen in Oracle Financial Services | 2025-01-22T13:33:00.723963Z | 2025-01-22T13:33:00.723963Z |
| ncsc-2025-0024 | Kwetsbaarheden verholpen in Oracle MySQL | 2025-01-22T13:32:27.142159Z | 2025-01-22T13:32:27.142159Z |
| ncsc-2025-0023 | Kwetsbaarheden verholpen in Oracle PeopleSoft | 2025-01-22T13:31:17.380797Z | 2025-01-22T13:31:17.380797Z |
| ncsc-2025-0022 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2025-01-22T13:31:16.019294Z | 2025-01-22T13:31:16.019294Z |
| ncsc-2025-0021 | Kwetsbaarheden verholpen in Oracle Communications | 2025-01-22T13:30:50.189632Z | 2025-01-22T13:30:50.189632Z |
| ncsc-2025-0020 | Kwetsbaarheden verholpen in Oracle Database producten | 2025-01-22T13:30:16.354373Z | 2025-01-22T13:30:16.354373Z |
| ncsc-2025-0019 | Kwetsbaarheden verholpen in Schneider Electric Modicon | 2025-01-16T11:46:16.661689Z | 2025-01-16T11:46:16.661689Z |
| ncsc-2025-0018 | Kwetsbaarheden verholpen in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS en FortiProxy | 2025-01-15T13:25:32.904961Z | 2025-01-15T13:25:32.904961Z |
| ncsc-2025-0017 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager | 2025-01-15T11:59:32.488132Z | 2025-01-15T11:59:32.488132Z |
| ncsc-2025-0016 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2025-01-15T11:47:27.276959Z | 2025-01-15T11:47:27.276959Z |
| ncsc-2025-0015 | Kwetsbaarheden verholpen in Rsync | 2025-01-15T07:42:19.351539Z | 2025-01-15T07:42:19.351539Z |
| ncsc-2025-0014 | Kwetsbaarheid verholpen in Microsoft Dynamics Power Automate | 2025-01-14T19:20:14.753491Z | 2025-01-14T19:20:14.753491Z |
| ncsc-2025-0013 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-01-14T19:18:00.798473Z | 2025-01-14T19:18:00.798473Z |
| ncsc-2025-0012 | Kwetsbaarheden verholpen in Microsoft Office | 2025-01-14T19:15:33.729625Z | 2025-01-14T19:15:33.729625Z |
| ncsc-2025-0011 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-01-14T19:10:44.895101Z | 2025-01-14T19:10:44.895101Z |
| ncsc-2025-0010 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-01-14T19:09:24.429168Z | 2025-01-14T19:09:24.429168Z |
| ncsc-2025-0009 | Kwetsbaarheid verholpen in FortiNet FortiOS en FortiProxy | 2025-01-14T14:58:02.272504Z | 2025-01-28T10:42:03.747650Z |
| ncsc-2025-0008 | Kwetsbaarheden verholpen in Siemens producten | 2025-01-14T11:54:04.658073Z | 2025-01-14T11:54:04.658073Z |
| ncsc-2025-0007 | Kwetsbaarheden verholpen in SAP producten | 2025-01-14T11:50:16.988268Z | 2025-01-14T11:50:16.988268Z |
| ncsc-2025-0006 | Kwetsbaarheden verholpen in Juniper JunOS | 2025-01-10T12:14:00.841636Z | 2025-01-10T12:14:00.841636Z |
| ncsc-2025-0005 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Policy Secure | 2025-01-08T18:55:33.983262Z | 2025-01-17T08:54:45.356129Z |
| ncsc-2025-0004 | Kwetsbaarheden verholpen in SonicWall SonicOS | 2025-01-08T09:57:24.409437Z | 2025-02-18T08:09:28.652034Z |
| ncsc-2025-0003 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-01-07T12:54:49.261777Z | 2025-01-07T12:54:49.261777Z |
| ncsc-2025-0002 | Kwetsbaarheden verholpen in Moxa's cellulaire routers en netwerkbeveiligingsapparaten | 2025-01-06T07:49:21.319255Z | 2025-01-06T07:49:21.319255Z |
| ncsc-2025-0001 | Kwetsbaarheden verholpen in Ipswitch WhatsUp Gold | 2025-01-03T12:01:12.344285Z | 2025-01-03T12:01:12.344285Z |
| ncsc-2024-0484 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Policy Secure | 2024-12-11T08:50:15.463062Z | 2025-01-08T11:00:21.273985Z |
| ncsc-2024-0480 | Kwetsbaarheid verholpen in Adobe After Effects | 2024-12-11T08:34:49.812349Z | 2024-12-11T08:34:49.812349Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-549234 | SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules | 2021-09-14T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-535380 | SSA-535380: Command Injection Vulnerability in Siveillance OIS Affecting Several Building Management Systems | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-453715 | SSA-453715: Deserialization Vulnerability in CCOM Communication Component of Desigo CC Family | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-413407 | SSA-413407: Path Traversal Vulnerability in Teamcenter Active Workspace | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-334944 | SSA-334944: Vulnerability in SINEMA Remote Connect Server | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-330339 | SSA-330339: Web Vulnerabilities in SINEC NMS | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-316383 | SSA-316383: NumberJack Vulnerability in LOGO! CMR and SIMATIC RTU 3000 devices | 2021-09-14T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-288459 | SSA-288459: Heap Overflow Vulnerability in RFID terminals | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-208530 | SSA-208530: File parsing vulnerabilities in IFC adapter in NX | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-150692 | SSA-150692: Multiple Vulnerabilities in RUGGEDCOM ROX | 2021-09-14T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-109294 | SSA-109294: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-816035 | SSA-816035: Code Execution Vulnerability in SINEMA Remote Connect Client | 2021-08-19T00:00:00Z | 2021-08-19T00:00:00Z |
| ssa-938030 | SSA-938030: DGN and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.2 | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-865327 | SSA-865327: Incorrect Authorization Vulnerability in Industrial Products | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-830194 | SSA-830194: Missing Authentication Vulnerability in S7-1200 Devices | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-818688 | SSA-818688: Multiple Vulnerabilities in Solid Edge before SE2021MP7 | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-756744 | SSA-756744: OS Command Injection Vulnerability in SINEC NMS | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-679335 | SSA-679335: Multiple Vulnerabilities in Embedded FTP Server of SIMATIC CP Modules | 2021-08-10T00:00:00Z | 2022-06-14T00:00:00Z |
| ssa-553445 | SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-365397 | SSA-365397: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.1 | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-309571 | SSA-309571: IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021) | 2021-08-10T00:00:00Z | 2024-02-13T00:00:00Z |
| ssa-158827 | SSA-158827: Denial-of-Service Vulnerability in Automation License Manager | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-789208 | SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices | 2021-08-04T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-941426 | SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products | 2021-07-13T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-913875 | SSA-913875: Frame Aggregation and Fragmentation Vulnerabilities in 802.11 | 2021-07-13T00:00:00Z | 2025-04-08T00:00:00Z |
| ssa-772220 | SSA-772220: OpenSSL Vulnerabilities in Industrial Products | 2021-07-13T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-729965 | SSA-729965: TLS Certificate Validation Vulnerability in SINUMERIK Integrate Operate Client | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-675303 | SSA-675303: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products | 2021-07-13T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-661034 | SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products | 2021-07-13T00:00:00Z | 2022-08-09T00:00:00Z |
| ssa-641963 | SSA-641963: Remote Code Execution Vulnerability in Multiple SIMATIC Software Products | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:0932 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2026-01-26T16:34:29+00:00 | 2026-02-03T20:02:54+00:00 |
| rhsa-2026:1229 | Red Hat Security Advisory: gnupg2 security update | 2026-01-26T16:26:39+00:00 | 2026-02-11T15:13:21+00:00 |
| rhsa-2026:1230 | Red Hat Security Advisory: gnupg2 security update | 2026-01-26T16:16:34+00:00 | 2026-02-11T15:13:21+00:00 |
| rhsa-2026:0933 | Red Hat Security Advisory: java-25-openjdk security update | 2026-01-26T16:09:29+00:00 | 2026-02-03T20:02:55+00:00 |
| rhsa-2026:1226 | Red Hat Security Advisory: python3.12-urllib3 security update | 2026-01-26T15:35:09+00:00 | 2026-02-17T12:41:18+00:00 |
| rhsa-2026:1224 | Red Hat Security Advisory: python3.11-urllib3 security update | 2026-01-26T15:03:40+00:00 | 2026-02-17T12:41:17+00:00 |
| rhsa-2026:1143 | Red Hat Security Advisory: kernel security update | 2026-01-26T14:47:56+00:00 | 2026-02-16T19:39:52+00:00 |
| rhsa-2026:1194 | Red Hat Security Advisory: kernel security update | 2026-01-26T14:32:56+00:00 | 2026-02-16T14:15:16+00:00 |
| rhsa-2026:1084 | Red Hat Security Advisory: podman security update | 2026-01-26T14:25:50+00:00 | 2026-02-17T07:23:40+00:00 |
| rhsa-2026:0931 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2026-01-26T14:21:52+00:00 | 2026-02-02T21:21:27+00:00 |
| rhsa-2026:1088 | Red Hat Security Advisory: python3.12-urllib3 security update | 2026-01-26T14:19:44+00:00 | 2026-02-17T12:41:17+00:00 |
| rhsa-2026:1089 | Red Hat Security Advisory: python3.11-urllib3 security update | 2026-01-26T14:11:43+00:00 | 2026-02-17T12:41:17+00:00 |
| rhsa-2026:1142 | Red Hat Security Advisory: kernel security update | 2026-01-26T13:44:48+00:00 | 2026-02-12T19:26:39+00:00 |
| rhsa-2026:0901 | Red Hat Security Advisory: OpenJDK 25.0.2 Security Update for Portable Linux Builds | 2026-01-26T13:42:41+00:00 | 2026-02-03T20:02:53+00:00 |
| rhsa-2026:0900 | Red Hat Security Advisory: OpenJDK 21.0.10 Security Update for Windows Builds | 2026-01-26T13:41:51+00:00 | 2026-02-02T21:21:25+00:00 |
| rhsa-2026:0899 | Red Hat Security Advisory: OpenJDK 21.0.10 Security Update for Portable Linux Builds | 2026-01-26T13:41:39+00:00 | 2026-02-03T20:02:54+00:00 |
| rhsa-2026:0898 | Red Hat Security Advisory: OpenJDK 17.0.18 Security Update for Windows Builds | 2026-01-26T13:39:49+00:00 | 2026-02-02T21:21:19+00:00 |
| rhsa-2026:0897 | Red Hat Security Advisory: OpenJDK 17.0.18 Security Update for Portable Linux Builds | 2026-01-26T13:39:39+00:00 | 2026-02-03T20:02:52+00:00 |
| rhsa-2026:0895 | Red Hat Security Advisory: OpenJDK 8u482 Security Update for Portable Linux Builds | 2026-01-26T13:38:53+00:00 | 2026-02-03T20:02:52+00:00 |
| rhsa-2026:0896 | Red Hat Security Advisory: OpenJDK 8u482 Windows Security Update | 2026-01-26T13:38:38+00:00 | 2026-02-02T21:21:17+00:00 |
| rhsa-2026:1087 | Red Hat Security Advisory: python-urllib3 security update | 2026-01-26T13:09:48+00:00 | 2026-02-17T12:41:17+00:00 |
| rhsa-2026:1190 | Red Hat Security Advisory: php:8.3 security update | 2026-01-26T13:00:21+00:00 | 2026-02-11T01:03:53+00:00 |
| rhsa-2026:1086 | Red Hat Security Advisory: python-urllib3 security update | 2026-01-26T12:44:33+00:00 | 2026-02-17T12:41:16+00:00 |
| rhsa-2026:1090 | Red Hat Security Advisory: poppler security update | 2026-01-26T12:42:08+00:00 | 2026-01-26T15:41:26+00:00 |
| rhsa-2026:1091 | Red Hat Security Advisory: poppler security update | 2026-01-26T12:36:38+00:00 | 2026-01-26T15:44:00+00:00 |
| rhsa-2026:1187 | Red Hat Security Advisory: php:8.2 security update | 2026-01-26T12:19:28+00:00 | 2026-02-11T01:03:54+00:00 |
| rhsa-2026:1185 | Red Hat Security Advisory: php security update | 2026-01-26T11:43:38+00:00 | 2026-02-11T01:03:59+00:00 |
| rhsa-2026:1178 | Red Hat Security Advisory: kernel security update | 2026-01-26T10:58:58+00:00 | 2026-02-16T19:39:51+00:00 |
| rhsa-2026:1169 | Red Hat Security Advisory: php:8.2 security update | 2026-01-26T10:37:48+00:00 | 2026-02-11T01:03:53+00:00 |
| rhsa-2026:1176 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-26T10:17:05+00:00 | 2026-02-17T12:41:17+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsma-25-100-01 | INFINITT Healthcare INFINITT PACS | 2025-04-10T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-100-08 | Subnet Solutions PowerSYSTEM Center | 2025-04-10T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-100-07 | Rockwell Automation Arena | 2025-04-10T06:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-107-03 | Schneider Electric ConneXium Network Manager Software | 2025-04-08T04:00:00.000000Z | 2025-04-08T04:00:00.000000Z |
| icsa-25-107-01 | Schneider Electric Trio Q Licensed Data Radio | 2025-04-08T04:00:00.000000Z | 2025-04-08T04:00:00.000000Z |
| icsa-25-105-03 | Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX | 2025-04-08T00:00:00.000000Z | 2025-07-10T00:00:00.000000Z |
| icsa-25-105-02 | Siemens Industrial Edge Device Kit | 2025-04-08T00:00:00.000000Z | 2025-05-13T00:00:00.000000Z |
| icsa-25-105-01 | Siemens Mendix Runtime | 2025-04-08T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-25-100-06 | Siemens SENTRON 7KT PAC1260 Data Manager | 2025-04-08T00:00:00.000000Z | 2025-04-08T00:00:00.000000Z |
| icsa-25-100-05 | Siemens Insights Hub Private Cloud | 2025-04-08T00:00:00.000000Z | 2025-04-08T00:00:00.000000Z |
| icsa-25-100-04 | Siemens Industrial Edge Devices | 2025-04-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-100-03 | Siemens Solid Edge | 2025-04-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-100-02 | Siemens SIDIS Prime | 2025-04-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-100-01 | Siemens License Server (SLS) | 2025-04-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-105-08 | ABB M2M Gateway | 2025-04-07T10:30:00.000000Z | 2025-04-07T10:30:00.000000Z |
| icsa-25-100-09 | ABB Arctic Wireless Gateways | 2025-04-07T10:30:00.000000Z | 2025-04-07T10:30:00.000000Z |
| icsa-25-091-01 | Rockwell Automation Lifecycle Services with Veeam Backup and Replication | 2025-04-01T06:00:00.000000Z | 2025-04-01T06:00:00.000000Z |
| icsa-25-093-04 | ABB Low Voltage DC Drives and Power Controllers CODESYS RTS | 2025-03-26T00:30:00.000000Z | 2025-03-26T00:30:00.000000Z |
| icsa-25-093-03 | ABB ACS880 Drives Containing CODESYS RTS | 2025-03-26T00:30:00.000000Z | 2025-03-26T00:30:00.000000Z |
| icsa-25-093-02 | Hitachi Energy TRMTracker | 2025-03-25T13:30:00.000000Z | 2025-03-25T13:30:00.000000Z |
| icsa-25-093-01 | Hitachi Energy RTU500 Series (Update B) | 2025-03-25T12:30:00.000000Z | 2025-09-09T12:30:00.000000Z |
| icsa-25-084-04 | Inaba Denki Sangyo CHOCO TEI WATCHER mini | 2025-03-25T06:00:00.000000Z | 2025-03-25T06:00:00.000000Z |
| icsa-25-084-03 | Rockwell Automation 440G TLS-Z | 2025-03-25T06:00:00.000000Z | 2025-03-25T06:00:00.000000Z |
| icsa-25-084-02 | Rockwell Automation Verve Asset Manager | 2025-03-25T06:00:00.000000Z | 2025-03-25T06:00:00.000000Z |
| icsa-25-093-05 | B&R APROL | 2025-03-24T00:30:00.000000Z | 2025-03-24T00:30:00.000000Z |
| icsma-25-079-01 | Santesoft Sante DICOM Viewer Pro | 2025-03-20T06:00:00.000000Z | 2025-03-20T06:00:00.000000Z |
| icsa-25-079-04 | SMA Sunny Portal | 2025-03-20T06:00:00.000000Z | 2025-03-20T06:00:00.000000Z |
| va-25-079-01 | CentralSquare eTRAKiT.Net SQL injection vulnerability | 2025-03-20T00:00:00Z | 2025-05-02T01:11:43Z |
| icsa-25-077-02 | Rockwell Automation Lifecycle Services with VMware | 2025-03-18T06:00:00.000000Z | 2025-03-18T06:00:00.000000Z |
| icsa-25-077-01 | Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI) | 2025-03-18T06:00:00.000000Z | 2025-03-18T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-curl-libcurl-d9ds39cv | cURL and libcurl Vulnerability Affecting Cisco Products: October 2023 | 2023-10-12T16:00:00+00:00 | 2024-08-27T18:06:16+00:00 |
| cisco-sa-rdocker-uatbukkn | Cisco IOx Application Hosting Environment Privilege Escalation Vulnerability | 2023-10-04T16:00:00+00:00 | 2023-10-04T16:00:00+00:00 |
| cisco-sa-cucm-apidos-pgsdcdnf | Multiple Cisco Unified Communications Products Unauthenticated API High CPU Utilization Denial of Service Vulnerability | 2023-10-04T16:00:00+00:00 | 2024-05-17T15:07:50+00:00 |
| cisco-sa-cer-priv-esc-b9t3hqk9 | Cisco Emergency Responder Static Credentials Vulnerability | 2023-10-04T16:00:00+00:00 | 2023-10-04T16:00:00+00:00 |
| cisco-sa-wlc-wncd-hfgmsfsd | Cisco IOS XE Software for Wireless LAN Controllers Wireless Network Control Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-webui-cmdij-fzzaexay | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-vmanage-html-3zkh8d6x | Cisco Catalyst SD-WAN Manager Web UI HTML Injection Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-sdwan-vman-sc-lrlfu2z | Cisco Catalyst SD-WAN Manager Vulnerabilities | 2023-09-27T16:00:00+00:00 | 2023-10-25T16:37:56+00:00 |
| cisco-sa-mlre-h93fswrz | Cisco IOS XE Software for ASR 1000 Series Aggregation Services Routers IPv6 Multicast Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-ios-xe-l2tp-dos-eb5tufmv | Cisco IOS XE Software Layer 2 Tunneling Protocol Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-getvpn-rce-g8qr68sx | Cisco IOS and IOS XE Software Cisco Group Encrypted Transport VPN Software Out-of-Bounds Write Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-dnac-ins-acc-con-nhavdrbz | Cisco DNA Center API Insufficient Access Control Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-click-ap-dos-wdcxkvnq | Cisco Catalyst 9100 Access Points Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-cbw-dos-ysmbuqx3 | Cisco Wireless LAN Controller AireOS Software Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-cat3k-dos-zza4gb3r | Cisco IOS XE Software for Catalyst 3650 and Catalyst 3850 Series Switches Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-appqoe-utd-dos-p8o57p5y | Cisco IOS XE Software Application Quality of Experience and Unified Threat Defense Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-ap-dos-capwap-ddmczs4m | Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability | 2023-09-27T16:00:00+00:00 | 2024-12-12T12:27:21+00:00 |
| cisco-sa-aaascp-tyj4fejm | Cisco IOS and IOS XE Software Command Authorization Bypass Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-10-13T13:36:50+00:00 |
| cisco-sa-lnt-l9zokbz5 | Cisco IOS XR Software Image Verification Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-iosxr-ipxe-sigbypass-pymfyqgb | Cisco IOS XR Software iPXE Boot Signature Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2024-08-07T15:55:33+00:00 |
| cisco-sa-iosxr-info-gxp7nvcp | Cisco IOS XR Software Model-Driven Programmability Behavior with AAA Authorization | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-ios-xr-cfm-3pwn8mkt | Cisco IOS XR Software Connectivity Fault Management Denial of Service Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-dnx-acl-pyzdkeyf | Cisco IOS XR Software Access Control List Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-comp3acl-vgmp6bq3 | Cisco IOS XR Software Compression ACL Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-sb-rv-stack-shyv2f5n | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Stack Overflow Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-ise-radius-dos-w7cnn7gt | Cisco Identity Services Engine RADIUS Denial of Service Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-ise-priv-esc-kjlp2aw | Cisco Identity Services Engine Privilege Escalation Vulnerabilities | 2023-09-06T16:00:00+00:00 | 2024-01-08T19:01:50+00:00 |
| cisco-sa-hyperflex-redirect-uxlgqduf | Cisco HyperFlex HX Data Platform Open Redirect Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-bw-auth-bypass-kcggmwhx | Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Authentication Bypass Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-asaftd-ravpn-auth-8lyfckec | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Unauthorized Access Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-10-11T14:59:29+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-62554 | Microsoft Office Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62553 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62552 | Microsoft Access Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62550 | Azure Monitor Agent Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62549 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62474 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62473 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62472 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62470 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62469 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62468 | Windows Defender Firewall Service Information Disclosure Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-12T00:00:00.000Z |
| msrc_cve-2025-62467 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62466 | Windows Client-Side Caching Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62465 | DirectX Graphics Kernel Denial of Service Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62464 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62463 | DirectX Graphics Kernel Denial of Service Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62462 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62461 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62458 | Win32k Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62457 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62456 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62455 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62454 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62223 | Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-04T00:00:00.000Z |
| msrc_cve-2025-62221 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-59517 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-59516 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-55233 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-54100 | PowerShell Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-69277 | libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. | 2025-12-02T00:00:00.000Z | 2026-02-18T02:48:42.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201912-0581 | An out-of-bounds read was addressed with improved input validation. This issue is fixed i… | 2025-12-22T22:23:33.860000Z |
| var-200608-0033 | The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrar… | 2025-12-22T22:23:33.785000Z |
| var-201108-0145 | Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before … | 2025-12-22T22:23:33.278000Z |
| var-202108-2123 | A memory corruption vulnerability was addressed with improved locking. This issue is fixe… | 2025-12-22T22:23:33.196000Z |
| var-201806-1505 | System software utilizing Lazy FP state restore technique on systems using Intel Core-bas… | 2025-12-22T22:23:31.074000Z |
| var-201912-0562 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in mac… | 2025-12-22T22:23:30.908000Z |
| var-201211-0369 | Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS … | 2025-12-22T22:23:30.831000Z |
| var-202005-0022 | A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of … | 2025-12-22T22:23:29.444000Z |
| var-202404-0120 | Faulty input validation in the core of Apache allows malicious or exploitable backend/con… | 2025-12-22T22:23:29.138000Z |
| var-202109-1313 | An integer overflow was addressed with improved input validation. This issue is fixed in … | 2025-12-22T22:23:29.056000Z |
| var-201912-0508 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T22:23:27.434000Z |
| var-200611-0488 | Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows r… | 2025-12-22T22:23:23.367000Z |
| var-202104-0160 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is f… | 2025-12-22T22:23:20.419000Z |
| var-201302-0235 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:23:19.880000Z |
| var-200609-0940 | The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… | 2025-12-22T22:23:19.406000Z |
| var-201006-1160 | Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in WebKit… | 2025-12-22T22:22:48.573000Z |
| var-201110-0332 | Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execu… | 2025-12-22T22:21:53.196000Z |
| var-200711-0540 | Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regco… | 2025-12-22T22:21:52.670000Z |
| var-201506-0465 | The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.… | 2025-12-22T22:21:51.898000Z |
| var-200911-0416 | The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other… | 2025-12-22T22:21:50.653000Z |
| var-201308-0259 | The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not prop… | 2025-12-22T22:21:44.402000Z |
| var-201702-0870 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … | 2025-12-22T22:21:11.574000Z |
| var-200505-1240 | The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a d… | 2025-12-22T22:21:11.491000Z |
| var-202110-1514 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS… | 2025-12-22T22:21:11.189000Z |
| var-201711-0473 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2025-12-22T22:21:02.843000Z |
| var-200704-0220 | Buffer overflow in natd in network_cmds in Apple Mac OS X 10.3.9 through 10.4.9, when Int… | 2025-12-22T22:21:01.534000Z |
| var-201210-0274 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:21:00.945000Z |
| var-201404-0377 | Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51,… | 2025-12-22T22:21:00.617000Z |
| var-201106-0131 | The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion be… | 2025-12-22T22:20:55.292000Z |
| var-200807-0012 | WebCore in Apple Safari does not properly perform garbage collection of JavaScript docume… | 2025-12-22T22:20:52.812000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000125 | Multiple vulnerabilities in BUFFALO VR-S1000 | 2023-12-26T15:51+09:00 | 2024-03-19T17:56+09:00 |
| jvndb-2023-014781 | Brother iPrint&Scan Desktop for Windows vulnerable to improper link resolution before file access | 2023-12-26T09:27+09:00 | 2024-03-18T18:05+09:00 |
| jvndb-2023-012042 | WordPress plugin "MW WP Form" vulnerable to arbitrary file upload | 2023-12-15T15:17+09:00 | 2024-03-26T17:39+09:00 |
| jvndb-2023-000123 | Multiple vulnerabilities in GROWI | 2023-12-13T15:30+09:00 | 2024-03-19T17:46+09:00 |
| jvndb-2023-011403 | ELECOM wireless LAN routers vulnerable to OS command injection | 2023-12-13T15:06+09:00 | 2024-04-18T17:22+09:00 |
| jvndb-2023-000122 | Multiple denial-of-service (DoS) vulnerabilities in JTEKT ELECTRONICS HMI GC-A2 series | 2023-12-11T14:12+09:00 | 2024-04-22T16:55+09:00 |
| jvndb-2023-009966 | FXC wireless LAN routers "AE1021PE" and "AE1021" vulnerable to OS command injection Critical | 2023-12-07T15:09+09:00 | 2023-12-25T16:54+09:00 |
| jvndb-2023-009619 | OS command injection vulnerability in DT900 | 2023-12-06T14:43+09:00 | 2023-12-06T14:43+09:00 |
| jvndb-2023-000121 | RakRak Document Plus vulnerable to path traversal | 2023-12-04T13:45+09:00 | 2024-01-24T12:06+09:00 |
| jvndb-2023-000119 | Ruckus Access Point contains a cross-site scripting vulnerability. | 2023-12-01T14:58+09:00 | 2024-04-23T17:51+09:00 |
| jvndb-2023-000117 | Multiple vulnerabilities in LuxCal Web Calendar | 2023-11-20T17:15+09:00 | 2023-11-20T17:15+09:00 |
| jvndb-2023-007152 | Multiple vulnerabilities in EXPRESSCLUSTER X | 2023-11-20T14:09+09:00 | 2024-05-01T18:10+09:00 |
| jvndb-2023-007150 | Multiple vulnerabilities in First Corporation's DVRs | 2023-11-17T17:31+09:00 | 2024-07-11T17:05+09:00 |
| jvndb-2023-000116 | Redmine vulnerable to cross-site scripting | 2023-11-17T14:32+09:00 | 2024-05-09T17:55+09:00 |
| jvndb-2023-000118 | Multiple vulnerabilities in CubeCart | 2023-11-17T14:22+09:00 | 2024-04-30T18:15+09:00 |
| jvndb-2023-006588 | Multiple vulnerabilities in ELECOM and LOGITEC routers | 2023-11-15T18:27+09:00 | 2024-04-26T15:22+09:00 |
| jvndb-2023-006578 | ASUSTeK COMPUTER RT-AC87U vulnerable to improper access control | 2023-11-15T17:44+09:00 | 2024-04-30T18:08+09:00 |
| jvndb-2023-000115 | OSS Calendar vulnerable to SQL injection | 2023-11-14T14:05+09:00 | 2024-05-01T17:38+09:00 |
| jvndb-2023-006199 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (November 2023) | 2023-11-13T17:28+09:00 | 2024-03-13T17:28+09:00 |
| jvndb-2023-000112 | Multiple vulnerabilities in Pleasanter | 2023-11-13T15:57+09:00 | 2024-04-22T17:56+09:00 |
| jvndb-2023-000114 | Multiple vulnerabilities in Cisco Firepower Management Center Software | 2023-11-13T14:01+09:00 | 2024-05-07T15:07+09:00 |
| jvndb-2023-000113 | HOTELDRUID vulnerable to cross-site scripting | 2023-11-10T14:41+09:00 | 2024-05-01T17:47+09:00 |
| jvndb-2023-000111 | Remarshal unlimitedly expanding YAML alias nodes | 2023-11-10T14:41+09:00 | 2024-05-08T17:53+09:00 |
| jvndb-2023-000107 | EC-CUBE 3 series and 4 series vulnerable to arbitrary code execution | 2023-11-07T13:47+09:00 | 2024-05-09T17:17+09:00 |
| jvndb-2023-004919 | FUJIFILM Business Innovation Corp. and Xerox Corporation MFPs export Address Books with insufficient encryption strength | 2023-11-02T17:21+09:00 | 2024-05-07T15:25+09:00 |
| jvndb-2023-000110 | Improper restriction of XML external entity references (XXE) in e-Tax software | 2023-11-02T13:38+09:00 | 2024-05-01T18:41+09:00 |
| jvndb-2023-004790 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2023-11-02T12:14+09:00 | 2023-11-02T12:14+09:00 |
| jvndb-2023-004754 | MCL Technologies MCL-Net vulnerable to directory traversal | 2023-11-01T16:49+09:00 | 2023-11-01T16:49+09:00 |
| jvndb-2023-000109 | Cybozu Remote Service vulnerable to uncontrolled resource consumption | 2023-10-31T13:43+09:00 | 2024-05-07T15:51+09:00 |
| jvndb-2023-000108 | Inkdrop vulnerable to code injection | 2023-10-30T13:48+09:00 | 2024-05-07T16:09+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20038-1 | Security update for qemu | 2026-01-06T11:41:24Z | 2026-01-06T11:41:24Z |
| suse-su-2026:0042-1 | Security update for usbmuxd | 2026-01-06T10:34:56Z | 2026-01-06T10:34:56Z |
| suse-su-2026:0041-1 | Security update for rsync | 2026-01-06T10:33:33Z | 2026-01-06T10:33:33Z |
| suse-su-2026:0039-1 | Security update for qemu | 2026-01-06T10:31:23Z | 2026-01-06T10:31:23Z |
| suse-su-2026:0036-1 | Security update for libpcap | 2026-01-06T10:22:41Z | 2026-01-06T10:22:41Z |
| suse-su-2026:0034-1 | Security update for the Linux Kernel | 2026-01-05T19:29:28Z | 2026-01-05T19:29:28Z |
| suse-su-2026:0033-1 | Security update for the Linux Kernel | 2026-01-05T19:26:53Z | 2026-01-05T19:26:53Z |
| suse-su-2026:0032-1 | Security update for the Linux Kernel | 2026-01-05T19:24:53Z | 2026-01-05T19:24:53Z |
| suse-su-2026:0029-1 | Security update for the Linux Kernel | 2026-01-05T12:59:48Z | 2026-01-05T12:59:48Z |
| suse-su-2026:0028-1 | Security update for alloy | 2026-01-05T12:53:11Z | 2026-01-05T12:53:11Z |
| suse-su-2026:0027-1 | Security update for python3 | 2026-01-05T12:47:16Z | 2026-01-05T12:47:16Z |
| suse-su-2026:0025-1 | Security update for python312 | 2026-01-05T12:11:09Z | 2026-01-05T12:11:09Z |
| suse-su-2026:0024-1 | Security update for python313 | 2026-01-05T12:10:23Z | 2026-01-05T12:10:23Z |
| suse-su-2026:0023-1 | Security update for erlang26 | 2026-01-05T12:06:04Z | 2026-01-05T12:06:04Z |
| suse-su-2026:0022-1 | Security update for qemu | 2026-01-05T11:18:23Z | 2026-01-05T11:18:23Z |
| suse-su-2026:0021-1 | Security update for webkit2gtk3 | 2026-01-05T11:12:33Z | 2026-01-05T11:12:33Z |
| suse-su-2026:0020-1 | Security update for apache2 | 2026-01-05T11:08:42Z | 2026-01-05T11:08:42Z |
| suse-su-2026:0019-1 | Security update for apache2 | 2026-01-05T11:08:00Z | 2026-01-05T11:08:00Z |
| suse-su-2026:0018-1 | Security update for glib2 | 2026-01-05T10:52:26Z | 2026-01-05T10:52:26Z |
| suse-su-2026:0017-1 | Security update for libsoup | 2026-01-05T10:52:01Z | 2026-01-05T10:52:01Z |
| suse-su-2026:0016-1 | Security update for pgadmin4 | 2026-01-05T10:48:08Z | 2026-01-05T10:48:08Z |
| suse-su-2026:0015-1 | Security update for pgadmin4 | 2026-01-05T10:40:59Z | 2026-01-05T10:40:59Z |
| suse-su-2026:0014-1 | Security update for buildah | 2026-01-05T10:39:01Z | 2026-01-05T10:39:01Z |
| suse-su-2026:0013-1 | Security update for ImageMagick | 2026-01-05T10:36:11Z | 2026-01-05T10:36:11Z |
| suse-su-2026:0012-1 | Security update for xen | 2026-01-05T10:31:27Z | 2026-01-05T10:31:27Z |
| suse-su-2026:0011-1 | Security update for ImageMagick | 2026-01-05T10:28:55Z | 2026-01-05T10:28:55Z |
| suse-su-2026:0010-1 | Security update for python-tornado6 | 2026-01-05T10:26:32Z | 2026-01-05T10:26:32Z |
| suse-su-2026:20019-1 | Security update for sssd | 2026-01-02T16:58:52Z | 2026-01-02T16:58:52Z |
| suse-su-2026:20014-1 | Security update for sssd | 2026-01-02T16:58:52Z | 2026-01-02T16:58:52Z |
| suse-su-2026:0005-1 | Security update for rsync | 2026-01-02T12:30:51Z | 2026-01-02T12:30:51Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15753-1 | ansible-12-12.2.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15752-1 | act-0.2.82-2.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:20073-1 | Security update for alloy | 2025-11-20T17:26:16Z | 2025-11-20T17:26:16Z |
| opensuse-su-2025:20072-1 | Security update for runc | 2025-11-20T16:44:20Z | 2025-11-20T16:44:20Z |
| opensuse-su-2025:20068-1 | Security update for poppler | 2025-11-20T13:33:03Z | 2025-11-20T13:33:03Z |
| opensuse-su-2025:20076-1 | Security update for chromium | 2025-11-20T10:12:51Z | 2025-11-20T10:12:51Z |
| opensuse-su-2025:15751-1 | libipa_hbac-devel-2.11.1-2.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:15750-1 | python313-3.13.9-2.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:15749-1 | grub2-2.12-67.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:20065-1 | Security update for MozillaFirefox | 2025-11-19T16:45:48Z | 2025-11-19T16:45:48Z |
| opensuse-su-2025:20059-1 | Security update for ongres-scram | 2025-11-19T10:33:44Z | 2025-11-19T10:33:44Z |
| opensuse-su-2025:20056-1 | Security update for openexr | 2025-11-19T09:45:59Z | 2025-11-19T09:45:59Z |
| opensuse-su-2025:20050-1 | Security update for libxslt | 2025-11-19T09:40:24Z | 2025-11-19T09:40:24Z |
| opensuse-su-2025:20049-1 | Security update for tiff | 2025-11-19T09:40:24Z | 2025-11-19T09:40:24Z |
| opensuse-su-2025:20055-1 | Security update for expat | 2025-11-19T09:37:50Z | 2025-11-19T09:37:50Z |
| opensuse-su-2025:20074-1 | Security update for certbot | 2025-11-19T09:30:46Z | 2025-11-19T09:30:46Z |
| opensuse-su-2025:15748-1 | python314-3.14.0-3.1 on GA media | 2025-11-19T00:00:00Z | 2025-11-19T00:00:00Z |
| opensuse-su-2025:15747-1 | libeverest-3.6.5-1.1 on GA media | 2025-11-19T00:00:00Z | 2025-11-19T00:00:00Z |
| opensuse-su-2025:15746-1 | libvirt-11.9.0-2.1 on GA media | 2025-11-19T00:00:00Z | 2025-11-19T00:00:00Z |
| opensuse-su-2025:15745-1 | chromedriver-142.0.7444.175-1.1 on GA media | 2025-11-19T00:00:00Z | 2025-11-19T00:00:00Z |
| opensuse-su-2025:15744-1 | amazon-ssm-agent-3.3.3270.0-2.1 on GA media | 2025-11-19T00:00:00Z | 2025-11-19T00:00:00Z |
| opensuse-su-2025:20048-1 | Security update for samba | 2025-11-18T23:14:26Z | 2025-11-18T23:14:26Z |
| opensuse-su-2025:15743-1 | sbctl-0.18-2.1 on GA media | 2025-11-18T00:00:00Z | 2025-11-18T00:00:00Z |
| opensuse-su-2025:15742-1 | python312-3.12.12-2.1 on GA media | 2025-11-18T00:00:00Z | 2025-11-18T00:00:00Z |
| opensuse-su-2025:15741-1 | libIex-3_4-33-3.4.3-1.1 on GA media | 2025-11-18T00:00:00Z | 2025-11-18T00:00:00Z |
| opensuse-su-2025:15740-1 | erlang27-27.1.3-1.1 on GA media | 2025-11-18T00:00:00Z | 2025-11-18T00:00:00Z |
| opensuse-su-2025:15739-1 | itextpdf-5.5.13.4-1.1 on GA media | 2025-11-17T00:00:00Z | 2025-11-17T00:00:00Z |
| opensuse-su-2025:15738-1 | MozillaThunderbird-140.5.0-1.1 on GA media | 2025-11-17T00:00:00Z | 2025-11-17T00:00:00Z |
| opensuse-su-2025:15737-1 | teleport-17.7.10-1.1 on GA media | 2025-11-14T00:00:00Z | 2025-11-14T00:00:00Z |
| opensuse-su-2025:15736-1 | chromedriver-142.0.7444.162-1.1 on GA media | 2025-11-14T00:00:00Z | 2025-11-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mongodb-2025-7259 | Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash | 2025-10-05T23:44:19.761Z | 2025-10-06T00:06:00.502Z |
| bit-mongodb-2025-6714 | Incorrect Handling of incomplete data may prevent mongoS from Accepting New Connections | 2025-10-05T23:44:18.162Z | 2025-10-06T00:06:00.502Z |
| bit-mongodb-2025-6713 | MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage | 2025-10-05T23:44:16.574Z | 2025-10-06T00:06:00.502Z |
| bit-mongodb-2025-6712 | MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation | 2025-10-05T23:44:14.958Z | 2025-10-06T00:06:00.502Z |
| bit-mongodb-2025-6711 | Incomplete Redaction of Sensitive Information in MongoDB Server Logs | 2025-10-05T23:44:13.320Z | 2025-10-06T00:06:00.502Z |
| bit-discourse-2025-59337 | Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments | 2025-10-05T23:41:00.220Z | 2025-10-06T00:06:00.502Z |
| bit-discourse-2025-58055 | Discourse AI Suggestions Contain Insecure Direct Object Reference | 2025-10-05T23:40:58.710Z | 2025-10-24T15:07:36.996Z |
| bit-discourse-2025-58054 | Discourse is vulnerable to XSS when quoting chat messages | 2025-10-05T23:40:57.314Z | 2025-10-24T15:07:36.996Z |
| bit-powershell-2025-49734 | PowerShell Direct Elevation of Privilege Vulnerability | 2025-10-03T08:49:03.988Z | 2025-10-03T09:07:39.166Z |
| bit-mongodb-2024-10921 | Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server | 2025-10-02T14:44:36.017Z | 2025-10-02T15:07:00.184Z |
| bit-mongoose-2024-53900 | 2025-10-02T14:44:18.222Z | 2025-11-06T13:25:46.476Z | |
| bit-gitlab-2025-9958 | Insertion of Sensitive Information Into Sent Data in GitLab | 2025-10-01T15:13:13.235Z | 2025-11-07T09:06:54.375Z |
| bit-gitlab-2025-9642 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-10-01T15:13:11.350Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-8014 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-01T15:13:07.496Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-7691 | Privilege Defined With Unsafe Actions in GitLab | 2025-10-01T15:13:01.621Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-5069 | Incorrect Ownership Assignment in GitLab | 2025-10-01T15:12:30.475Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-11042 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-01T15:11:04.156Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-10871 | Missing Authorization in GitLab | 2025-10-01T15:11:02.199Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-10868 | Business Logic Errors in GitLab | 2025-10-01T15:11:00.230Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-10867 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-01T15:10:58.294Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-10858 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-01T15:10:56.334Z | 2025-10-01T15:14:38.852Z |
| bit-mongodb-2024-3374 | MongoDB Server (mongod) may crash when generating ftdc | 2025-10-01T14:49:48.814Z | 2025-10-01T15:14:38.852Z |
| bit-jupyterlab-2025-59842 | JupyterLab LaTeX typesetter links did not enforce `noopener` attribute | 2025-10-01T14:43:22.333Z | 2025-10-01T15:14:38.852Z |
| bit-airflow-2025-54831 | Apache Airflow: Connection sensitive details exposed to users with READ permissions | 2025-10-01T14:39:16.556Z | 2025-11-06T13:25:46.476Z |
| bit-zookeeper-2025-58457 | Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands | 2025-09-26T08:51:26.070Z | 2025-11-06T13:25:46.476Z |
| bit-pip-2025-8869 | Fallback tar extraction in pip doesn't check symbolic links point to extraction directory | 2025-09-26T08:48:13.610Z | 2025-11-06T13:25:46.476Z |
| bit-wordpress-2025-58674 | WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability | 2025-09-25T08:55:10.378Z | 2025-10-02T15:07:00.184Z |
| bit-wordpress-2025-58246 | WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability | 2025-09-25T08:55:08.592Z | 2025-10-02T15:07:00.184Z |
| bit-valkey-2025-46686 | 2025-09-25T08:53:41.270Z | 2025-09-25T09:09:38.625Z | |
| bit-redis-2025-46686 | 2025-09-25T08:52:27.726Z | 2025-10-03T15:12:57.579Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-04454 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-1134083） | 2025-12-22 | 2026-01-21 |
| cnvd-2025-31336 | WordPress Hide Email Address plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-24 |
| cnvd-2025-31335 | WordPress HelloLeads CRM Form Shortcode plugin缺少授权漏洞 | 2025-12-22 | 2025-12-24 |
| cnvd-2025-31334 | WordPress Header Footer Script Adder plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31333 | WordPress Grider for Elementor plugin缺少授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31332 | WordPress GPXpress plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31331 | WordPress FX Currency Converter plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31330 | WordPress Freshchat plugin跨站请求伪造漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31329 | WordPress Fix Media Library plugin信息泄露漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31328 | WordPress Filebird Plugin缺少授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31327 | WordPress FileBird Pro plugin缺失授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31115 | WordPress Fancy Product Designer plugin信息泄露漏洞 | 2025-12-22 | 2025-12-23 |
| cnvd-2025-31114 | WordPress Fancy Product Designer plugin服务器端请求伪造漏洞 | 2025-12-22 | 2025-12-23 |
| cnvd-2025-31113 | WordPress Events Manager Plugin信息泄露漏洞 | 2025-12-22 | 2025-12-23 |
| cnvd-2026-05361 | ChurchCRM legacy端点SQL注入漏洞 | 2025-12-19 | 2026-01-19 |
| cnvd-2026-04239 | Apple macOS Tahoe安全绕过漏洞（CNVD-2026-04239） | 2025-12-19 | 2026-01-16 |
| cnvd-2025-31154 | Apple macOS Tahoe权限问题漏洞 | 2025-12-19 | 2025-12-22 |
| cnvd-2025-31153 | Apple macOS Tahoe符号链接处理不当漏洞（CNVD-2025-3115302） | 2025-12-19 | 2025-12-22 |
| cnvd-2025-31152 | Apple macOS Tahoe注入漏洞 | 2025-12-19 | 2025-12-22 |
| cnvd-2025-31151 | Apple macOS Tahoe内存处理不当漏洞 | 2025-12-19 | 2025-12-22 |
| cnvd-2025-31150 | Apple macOS Tahoe沙盒限制不足漏洞 | 2025-12-19 | 2025-12-22 |
| cnvd-2025-31149 | Apple macOS Tahoe逻辑限制不足漏洞 | 2025-12-19 | 2025-12-23 |
| cnvd-2025-31148 | Apple macOS Tahoe符号链接验证不足漏洞 | 2025-12-19 | 2025-12-23 |
| cnvd-2025-31147 | Apple macOS Tahoe验证不足漏洞 | 2025-12-19 | 2025-12-23 |
| cnvd-2025-31146 | Apple macOS Tahoe检查不足漏洞（CNVD-2025-3114612） | 2025-12-19 | 2025-12-23 |
| cnvd-2025-31145 | Apple macOS Tahoe权限限制不足漏洞 | 2025-12-19 | 2025-12-23 |
| cnvd-2025-31144 | Apple macOS Tahoe检查不足漏洞 | 2025-12-19 | 2025-12-23 |
| cnvd-2026-10887 | MailEnable存在未明漏洞（CNVD-2026-10887） | 2025-12-18 | 2026-02-14 |
| cnvd-2026-10886 | MailEnable存在未明漏洞 | 2025-12-18 | 2026-02-13 |
| cnvd-2026-10328 | Google Pixel gxp_fence_manager.cc文件输入验证错误漏洞 | 2025-12-18 | 2026-02-06 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0919 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0918 | Multiples vulnérabilités dans Liferay | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0917 | Multiples vulnérabilités dans les produits Moxa | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0916 | Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0915 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0914 | Multiples vulnérabilités dans les produits Centreon | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0913 | Multiples vulnérabilités dans ISC BIND | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0912 | Vulnérabilité dans SolarWinds Observability | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0911 | Multiples vulnérabilités dans Oracle Weblogic | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0910 | Multiples vulnérabilités dans Oracle Virtualization | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0909 | Multiples vulnérabilités dans Oracle Systems | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0908 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0907 | Multiples vulnérabilités dans Oracle MySQL | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0906 | Multiples vulnérabilités dans Oracle Java SE | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0905 | Multiples vulnérabilités dans Oracle Database Server | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0904 | Multiples vulnérabilités dans GitLab | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0903 | Multiples vulnérabilités dans les produits Atlassian | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0902 | Multiples vulnérabilités dans Xen | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0901 | Vulnérabilité dans Google Chrome | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0900 | Multiples vulnérabilités dans Centreon Web | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0899 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0898 | Vulnérabilité dans Microsoft Edge | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0897 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0896 | Multiples vulnérabilités dans les produits IBM | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0895 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0894 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0893 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0892 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0891 | Vulnérabilité dans MongoDB Connector for BI pour Windows | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0890 | Multiples vulnérabilités dans les produits Moxa | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |