Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-3193 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
Chia Blockchain send_transaction cross-site request forgery |
Chia |
Blockchain |
2026-02-25T16:32:08.589Z | 2026-02-27T18:20:18.500Z |
| CVE-2026-27736 |
6.1 (3.1)
|
BigBlueButton has Open Redirect vulnerability in ApiCo… |
bigbluebutton |
bigbluebutton |
2026-02-25T16:27:01.507Z | 2026-02-26T21:33:41.504Z |
| CVE-2026-20033 |
7.4 (3.1)
|
Cisco NX-OS Software Denial of Service Vulnerability |
Cisco |
Cisco NX-OS System Software in ACI Mode |
2026-02-25T16:26:29.215Z | 2026-02-25T19:05:48.146Z |
| CVE-2026-20048 |
7.7 (3.1)
|
Cisco NX-OS Software SNMP Denial of Service Vulnerability |
Cisco |
Cisco NX-OS System Software in ACI Mode |
2026-02-25T16:26:28.329Z | 2026-02-25T19:05:48.366Z |
| CVE-2026-20099 |
6.7 (3.1)
|
Cisco UCS Manager and FXOS Software Command Injection … |
Cisco |
Cisco Firepower Extensible Operating System (FXOS) |
2026-02-25T16:25:38.517Z | 2026-02-26T14:44:05.716Z |
| CVE-2026-27728 |
10 (3.1)
|
OneUptime: OS Command Injection in Probe NetworkPathMo… |
OneUptime |
oneuptime |
2026-02-25T16:25:09.698Z | 2026-02-25T20:19:55.906Z |
| CVE-2026-20091 |
4.8 (3.1)
|
Cisco UCS Manager and FXOS Software Stored Cross-Site … |
Cisco |
Cisco Firepower Extensible Operating System (FXOS) |
2026-02-25T16:24:44.412Z | 2026-02-25T19:05:48.712Z |
| CVE-2026-20037 |
4.4 (3.1)
|
Cisco UCS Manager File Write Vulnerability |
Cisco |
Cisco Unified Computing System (Managed) |
2026-02-25T16:24:09.650Z | 2026-02-25T19:05:48.855Z |
| CVE-2026-27849 |
9.8 (3.1)
|
Missing neutralization in Linksys MR9600, Linksys MX4200 |
Linksys |
MR9600 |
2026-02-25T16:20:25.395Z | 2026-02-26T16:47:01.147Z |
| CVE-2026-20010 |
7.4 (3.1)
|
Cisco Nexus 3000 and 9000 Series Switches Link Layer D… |
Cisco |
Cisco NX-OS Software |
2026-02-25T16:18:14.561Z | 2026-02-25T19:05:49.108Z |
| CVE-2026-20036 |
6.5 (3.1)
|
Cisco UCS Manager Software Command Injection Vulnerability |
Cisco |
Cisco Unified Computing System (Managed) |
2026-02-25T16:14:43.296Z | 2026-02-26T14:44:05.885Z |
| CVE-2026-20107 |
5.5 (3.1)
|
Cisco Application Policy Infrastructure Controller Den… |
Cisco |
Cisco Application Policy Infrastructure Controller (APIC) |
2026-02-25T16:14:33.988Z | 2026-02-25T19:05:49.359Z |
| CVE-2026-20051 |
7.4 (3.1)
|
Cisco Nexus 3600-R and 9500-R Series Switching Platfor… |
Cisco |
Cisco NX-OS Software |
2026-02-25T16:14:33.859Z | 2026-02-25T19:05:49.650Z |
| CVE-2026-20122 |
5.4 (3.1)
|
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:14:21.256Z | 2026-02-25T18:14:27.915Z |
| CVE-2026-20127 |
10 (3.1)
|
Cisco Catalyst SD-WAN Controller Authentication Bypass… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:14:20.137Z | 2026-02-26T14:44:06.050Z |
| CVE-2026-20128 |
7.5 (3.1)
|
Cisco Catalyst SD-WAN Manager Information Disclosure V… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:14:12.353Z | 2026-02-26T14:44:06.220Z |
| CVE-2026-20129 |
9.8 (3.1)
|
Cisco Catayst SD-WAN Authentication Bypass Vulnerability |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:14:09.046Z | 2026-02-26T14:44:06.393Z |
| CVE-2026-20126 |
8.8 (3.1)
|
Cisco Catalyst SD-WAN Manager Privilege Escalation Vul… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:13:58.856Z | 2026-02-26T14:44:06.591Z |
| CVE-2026-20133 |
6.5 (3.1)
|
Cisco Catalyst SD-WAN Manager Information Disclosure V… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:13:56.017Z | 2026-02-25T19:05:52.915Z |
| CVE-2026-3192 |
6.3 (4.0)
5.6 (3.1)
5.6 (3.0)
|
Chia Blockchain RPC Credential rpc_server_base.py _aut… |
Chia |
Blockchain |
2026-02-25T16:02:12.515Z | 2026-02-25T20:19:14.151Z |
| CVE-2026-3189 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
feiyuchuixue sz-boot-parent download server-side reque… |
feiyuchuixue |
sz-boot-parent |
2026-02-25T16:02:09.732Z | 2026-02-25T20:18:20.086Z |
| CVE-2026-27727 |
8.9 (4.0)
|
mchange-commons-java: Remote Code Execution via JNDI R… |
swaldman |
mchange-commons-java |
2026-02-25T16:01:04.187Z | 2026-02-25T20:15:05.299Z |
| CVE-2026-27706 |
7.7 (3.1)
|
Plane Vulnerable to Full Read SSRF via Favicon Fetchin… |
makeplane |
plane |
2026-02-25T15:56:11.220Z | 2026-02-25T20:13:05.310Z |
| CVE-2026-27705 |
4.9 (4.0)
|
Plane Vulnerable to Cross-Workspace/Cross-Project Asse… |
makeplane |
plane |
2026-02-25T15:51:46.700Z | 2026-02-25T20:10:06.766Z |
| CVE-2026-22866 |
2.7 (4.0)
|
ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery … |
ensdomains |
ens-contracts |
2026-02-25T15:47:16.230Z | 2026-02-25T20:34:05.144Z |
| CVE-2026-27730 |
8.6 (3.0)
|
esm.sh has SSRF localhost/private-network bypass in `/… |
esm-dev |
esm.sh |
2026-02-25T15:37:01.753Z | 2026-02-25T20:32:05.079Z |
| CVE-2025-50180 |
8.7 (4.0)
|
esm.sh is vulnerable to full-response SSRF |
esm-dev |
esm.sh |
2026-02-25T15:32:56.449Z | 2026-02-27T18:22:28.728Z |
| CVE-2026-3188 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
feiyuchuixue sz-boot-parent API templates path traversal |
feiyuchuixue |
sz-boot-parent |
2026-02-25T15:32:09.025Z | 2026-02-27T16:52:23.121Z |
| CVE-2025-1242 |
9.3 (4.0)
9.1 (3.1)
|
Administrative Credentials Can Be Extracted Through Ga… |
Gardyn |
Home Kit |
2026-02-25T15:21:48.369Z | 2026-02-25T20:30:46.714Z |
| CVE-2026-27704 |
6.6 (4.0)
|
Dart SDK and Flutter SDK have Zip slip in Dart Pub pac… |
dart-lang |
sdk |
2026-02-25T15:17:26.243Z | 2026-02-25T20:27:35.486Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25164 |
8.1 (3.1)
|
OpenEMR's Document and Insurance REST Endpoints Skip ACL |
openemr |
openemr |
2026-02-25T18:22:40.693Z | 2026-02-26T16:13:42.534Z |
| CVE-2026-24908 |
10 (3.1)
|
OpenEMR has SQL Injection in Patient API Sort Parameter |
openemr |
openemr |
2026-02-25T18:14:03.504Z | 2026-02-26T16:14:34.090Z |
| CVE-2026-24890 |
8.1 (3.1)
|
OpenEMR Portal Users Can Forge Provider Signatures |
openemr |
openemr |
2026-02-25T18:10:22.910Z | 2026-02-26T16:15:28.455Z |
| CVE-2026-24487 |
5.7 (4.0)
|
OpenEMR has FHIR Patient Compartment Bypass in CareTea… |
openemr |
openemr |
2026-02-25T17:45:24.584Z | 2026-02-26T20:48:47.360Z |
| CVE-2026-24005 |
0 (3.1)
|
OpenKruise PodProbeMarker is Vulnerable to SSRF via Un… |
openkruise |
kruise |
2026-02-25T18:53:30.170Z | 2026-02-26T20:44:09.282Z |
| CVE-2026-23627 |
7.4 (4.0)
|
OpenEMR has SQL Injection in Immunization Search/Report |
openemr |
openemr |
2026-02-25T17:39:20.540Z | 2026-02-26T20:58:11.023Z |
| CVE-2026-3194 |
2 (4.0)
4.5 (3.1)
4.5 (3.0)
|
Chia Blockchain RPC Server Master Passphrase get_priva… |
Chia |
Blockchain |
2026-02-25T17:02:17.420Z | 2026-02-25T18:43:40.383Z |
| CVE-2026-27850 |
7.5 (3.1)
|
Improper verification in Linksys MR9600, Linksys MX4200 |
Linksys |
MR9600 |
2026-02-25T16:58:06.450Z | 2026-02-25T19:11:29.416Z |
| CVE-2026-27795 |
4.1 (3.1)
|
LangChain Community: redirect chaining can lead to SSR… |
langchain-ai |
langchainjs |
2026-02-25T17:30:01.106Z | 2026-02-25T18:42:52.277Z |
| CVE-2026-27794 |
6.6 (3.1)
|
LangGraph: BaseCache Deserialization of Untrusted Data… |
langchain-ai |
langgraph-checkpoint |
2026-02-25T16:53:47.176Z | 2026-02-25T21:00:24.430Z |
| CVE-2026-27739 |
9.2 (4.0)
|
Angular SSR is vulnerable to SSRF and Header Injection… |
angular |
angular-cli |
2026-02-25T16:47:29.705Z | 2026-02-27T17:59:11.328Z |
| CVE-2026-25554 |
8.3 (4.0)
6.5 (3.1)
|
OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables J… |
OpenSIPS |
OpenSIPS |
2026-02-25T16:54:11.845Z | 2026-02-27T18:17:35.536Z |
| CVE-2026-21902 |
9.8 (3.1)
9.3 (4.0)
|
Junos OS Evolved: PTX Series: A vulnerability allows a… |
Juniper Networks |
Junos OS Evolved |
2026-02-25T16:59:10.672Z | 2026-02-26T14:44:05.553Z |
| CVE-2026-3193 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
Chia Blockchain send_transaction cross-site request forgery |
Chia |
Blockchain |
2026-02-25T16:32:08.589Z | 2026-02-27T18:20:18.500Z |
| CVE-2026-3192 |
6.3 (4.0)
5.6 (3.1)
5.6 (3.0)
|
Chia Blockchain RPC Credential rpc_server_base.py _aut… |
Chia |
Blockchain |
2026-02-25T16:02:12.515Z | 2026-02-25T20:19:14.151Z |
| CVE-2026-3189 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
feiyuchuixue sz-boot-parent download server-side reque… |
feiyuchuixue |
sz-boot-parent |
2026-02-25T16:02:09.732Z | 2026-02-25T20:18:20.086Z |
| CVE-2026-27849 |
9.8 (3.1)
|
Missing neutralization in Linksys MR9600, Linksys MX4200 |
Linksys |
MR9600 |
2026-02-25T16:20:25.395Z | 2026-02-26T16:47:01.147Z |
| CVE-2026-27738 |
6.9 (4.0)
|
Angular SSR has an Open Redirect via X-Forwarded-Prefix |
angular |
angular-cli |
2026-02-25T16:40:44.724Z | 2026-02-27T20:46:26.917Z |
| CVE-2026-27736 |
6.1 (3.1)
|
BigBlueButton has Open Redirect vulnerability in ApiCo… |
bigbluebutton |
bigbluebutton |
2026-02-25T16:27:01.507Z | 2026-02-26T21:33:41.504Z |
| CVE-2026-27728 |
10 (3.1)
|
OneUptime: OS Command Injection in Probe NetworkPathMo… |
OneUptime |
oneuptime |
2026-02-25T16:25:09.698Z | 2026-02-25T20:19:55.906Z |
| CVE-2026-27727 |
8.9 (4.0)
|
mchange-commons-java: Remote Code Execution via JNDI R… |
swaldman |
mchange-commons-java |
2026-02-25T16:01:04.187Z | 2026-02-25T20:15:05.299Z |
| CVE-2026-27706 |
7.7 (3.1)
|
Plane Vulnerable to Full Read SSRF via Favicon Fetchin… |
makeplane |
plane |
2026-02-25T15:56:11.220Z | 2026-02-25T20:13:05.310Z |
| CVE-2026-27705 |
4.9 (4.0)
|
Plane Vulnerable to Cross-Workspace/Cross-Project Asse… |
makeplane |
plane |
2026-02-25T15:51:46.700Z | 2026-02-25T20:10:06.766Z |
| CVE-2026-26717 |
4.8 (3.1)
|
An issue in OpenFUN Richie (LMS) in src/richie/ap… |
n/a |
n/a |
2026-02-25T00:00:00.000Z | 2026-02-26T19:11:04.934Z |
| CVE-2026-20133 |
6.5 (3.1)
|
Cisco Catalyst SD-WAN Manager Information Disclosure V… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:13:56.017Z | 2026-02-25T19:05:52.915Z |
| CVE-2026-20129 |
9.8 (3.1)
|
Cisco Catayst SD-WAN Authentication Bypass Vulnerability |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:14:09.046Z | 2026-02-26T14:44:06.393Z |
| CVE-2026-20128 |
7.5 (3.1)
|
Cisco Catalyst SD-WAN Manager Information Disclosure V… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:14:12.353Z | 2026-02-26T14:44:06.220Z |
| CVE-2026-20127 |
10 (3.1)
|
Cisco Catalyst SD-WAN Controller Authentication Bypass… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:14:20.137Z | 2026-02-26T14:44:06.050Z |
| CVE-2026-20126 |
8.8 (3.1)
|
Cisco Catalyst SD-WAN Manager Privilege Escalation Vul… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:13:58.856Z | 2026-02-26T14:44:06.591Z |
| CVE-2026-20122 |
5.4 (3.1)
|
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite… |
Cisco |
Cisco Catalyst SD-WAN Manager |
2026-02-25T16:14:21.256Z | 2026-02-25T18:14:27.915Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-33r2-hfpx-fx7h |
5.3 (3.1)
4.8 (4.0)
|
A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_lo… | 2026-02-25T03:30:58Z | 2026-02-25T03:30:59Z |
| ghsa-whqr-g77p-vcjh |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in itsourcecode Document Management System 1.0. This issue affects s… | 2026-02-25T00:31:22Z | 2026-02-25T00:31:22Z |
| ghsa-9c6q-74h4-vx48 |
7.3 (3.1)
5.5 (4.0)
|
A security flaw has been discovered in itsourcecode News Portal Project 1.0. The affected element i… | 2026-02-25T00:31:22Z | 2026-02-25T00:31:22Z |
| ghsa-98hq-gxg8-fchj |
4.8 (3.1)
4.8 (4.0)
|
GetSimpleCMS Community Edition (CE) version 3.3.16 contains a stored cross-site scripting (XSS) vul… | 2026-02-25T00:31:22Z | 2026-02-27T00:31:45Z |
| ghsa-6v48-fcq6-ff23 |
7.1 (4.0)
|
Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory | 2026-02-24T21:43:15Z | 2026-02-27T20:40:23Z |
| ghsa-mxhj-88fx-4pcv |
8.6 (4.0)
|
Fickling: OBJ opcode call invisibility bypasses all safety checks | 2026-02-24T21:41:31Z | 2026-02-24T21:41:31Z |
| ghsa-wxjg-wxm8-w2qc |
9.8 (3.1)
9.3 (4.0)
|
All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in… | 2026-02-24T21:31:47Z | 2026-02-24T21:31:47Z |
| ghsa-wh6f-f7pf-3hqg |
9.8 (3.1)
9.3 (4.0)
|
InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious … | 2026-02-24T21:31:47Z | 2026-02-24T21:31:47Z |
| ghsa-w6wm-hqx9-7cq8 |
9.8 (3.1)
8.7 (4.0)
|
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an au… | 2026-02-24T21:31:47Z | 2026-02-27T03:30:26Z |
| ghsa-mjm8-6393-j3wg |
6.1 (3.1)
|
A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to u… | 2026-02-24T21:31:47Z | 2026-02-25T00:31:22Z |
| ghsa-hr94-5hp8-p3qr |
4.3 (3.1)
|
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an at… | 2026-02-24T21:31:47Z | 2026-02-24T21:31:47Z |
| ghsa-c8xr-66ch-xcpx |
7.5 (3.1)
8.7 (4.0)
|
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP str… | 2026-02-24T21:31:47Z | 2026-02-26T18:31:38Z |
| ghsa-8c83-cvgq-pp7w |
8.8 (3.1)
8.6 (4.0)
|
EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the a… | 2026-02-24T21:31:47Z | 2026-02-26T03:31:17Z |
| ghsa-682g-r279-6gq6 |
9.8 (3.1)
9.3 (4.0)
|
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with defau… | 2026-02-24T21:31:47Z | 2026-02-26T18:31:38Z |
| ghsa-3fr2-qc88-c4cv |
6.5 (3.1)
|
Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and… | 2026-02-24T21:31:47Z | 2026-02-25T15:31:37Z |
| ghsa-xph9-72vf-6x2f |
7.8 (3.1)
5.8 (4.0)
|
Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows use… | 2026-02-24T21:31:46Z | 2026-02-26T18:31:38Z |
| ghsa-vcqv-v77g-qhch |
5.4 (3.1)
|
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input … | 2026-02-24T21:31:46Z | 2026-02-24T21:31:46Z |
| ghsa-qv39-5mwf-4pj2 |
8.0 (3.1)
|
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-p… | 2026-02-24T21:31:46Z | 2026-02-24T21:31:46Z |
| ghsa-p5fg-p22w-8pfg |
7.3 (3.1)
|
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-p… | 2026-02-24T21:31:46Z | 2026-02-24T21:31:46Z |
| ghsa-mhh4-8fhx-47qg |
8.0 (3.1)
|
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-p… | 2026-02-24T21:31:46Z | 2026-02-24T21:31:46Z |
| ghsa-fc3q-vg8h-qrfp |
4.3 (3.1)
|
A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypa… | 2026-02-24T21:31:46Z | 2026-02-25T15:31:37Z |
| ghsa-f46g-p3mm-9g3p |
2.7 (3.1)
|
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-… | 2026-02-24T21:31:46Z | 2026-02-24T21:31:46Z |
| ghsa-cp7r-fhjg-f2vc |
7.2 (3.1)
|
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with … | 2026-02-24T21:31:46Z | 2026-02-24T21:31:46Z |
| ghsa-58vr-q64v-x475 |
8.8 (3.1)
|
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerabilit… | 2026-02-24T21:31:46Z | 2026-02-24T21:31:46Z |
| ghsa-fpg9-3qpq-vpm5 |
4.2 (3.1)
5.8 (4.0)
|
Local admin could to leak information from the Genetec Update Service configuration web page. An au… | 2026-02-24T21:31:45Z | 2026-02-26T18:31:38Z |
| ghsa-jxq9-79vj-rgvw |
9.3 (3.1)
|
Statamic is vulnerable to account takeover via password reset link injection | 2026-02-24T21:09:23Z | 2026-02-27T20:36:21Z |
| ghsa-243v-98vx-264h |
6.9 (4.0)
|
Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance | 2026-02-24T21:08:06Z | 2026-02-27T20:25:44Z |
| ghsa-mrq8-rjmw-wpq3 |
6.9 (4.0)
|
Fiber has a Denial of Service Vulnerability via Route Parameter Overflow | 2026-02-24T21:04:07Z | 2026-02-27T20:33:49Z |
| ghsa-2mr3-m5q5-wgp6 |
7.5 (3.1)
|
Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation | 2026-02-24T20:57:25Z | 2026-02-27T20:37:07Z |
| ghsa-m3c2-496v-cw3v |
8.7 (4.0)
|
Fiber has an Arbitrary File Read in Static Middleware on Windows | 2026-02-24T20:51:01Z | 2026-02-27T20:04:39Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-147 |
9.8 (3.1)
|
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execu… | langchain | 2023-08-15T17:15:00+00:00 | 2023-08-22T18:27:28.580705+00:00 |
| pysec-2023-146 |
9.8 (3.1)
|
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to exe… | langchain | 2023-08-15T17:15:00+00:00 | 2023-08-22T14:25:42.963301+00:00 |
| pysec-2023-145 |
9.8 (3.1)
|
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via th… | langchain | 2023-08-15T17:15:00Z | 2023-08-29T18:47:00.000000Z |
| pysec-2023-136 |
|
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… | apache-airflow | 2023-08-11T08:15:00+00:00 | 2023-08-17T03:22:30.530556+00:00 |
| pysec-2023-137 |
|
GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from… | gitpython | 2023-08-11T07:15:00+00:00 | 2023-08-17T03:22:31.332731+00:00 |
| pysec-2023-141 |
5.4 (3.1)
|
A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to ex… | pynetbox | 2023-08-10T20:15:00Z | 2023-09-07T15:50:00.665697Z |
| pysec-2023-144 |
8.8 (3.1)
|
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.… | wger | 2023-08-08T16:15:00+00:00 | 2023-08-17T03:22:34.520767+00:00 |
| pysec-2023-143 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows … | wger | 2023-08-08T16:15:00+00:00 | 2023-08-17T03:22:34.437974+00:00 |
| pysec-2023-142 |
5.9 (3.1)
|
Vyer is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In ver… | vyper | 2023-08-07T19:15:00+00:00 | 2023-08-17T03:22:33.953997+00:00 |
| pysec-2023-134 |
|
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthor… | apache-airflow | 2023-08-05T07:15:00+00:00 | 2023-08-05T10:26:00.927631+00:00 |
| pysec-2023-138 |
9.8 (3.1)
|
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary co… | langchain | 2023-08-05T03:15:00Z | 2023-08-22T15:51:39.650271Z |
| pysec-2023-140 |
6.5 (3.1)
|
MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasou… | mindsdb | 2023-08-04T18:15:00+00:00 | 2023-08-17T03:22:32.744229+00:00 |
| pysec-2023-139 |
5.3 (3.1)
|
Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5… | matrix-sydent | 2023-08-04T16:15:00+00:00 | 2023-08-17T03:22:32.583512+00:00 |
| pysec-2023-135 |
|
Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These ar… | certifi | 2023-08-03T19:36:12+00:00 | 2023-08-07T05:41:30.977938+00:00 |
| pysec-2023-280 |
7.8 (3.1)
|
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0. | mlflow | 2023-08-01T01:15:00+00:00 | 2024-11-21T14:22:54.880705+00:00 |
| pysec-2023-126 |
|
PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability … | paddlepaddle | 2023-07-26T12:15:00+00:00 | 2023-07-26T14:25:58.775032+00:00 |
| pysec-2023-125 |
|
FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and… | paddlepaddle | 2023-07-26T12:15:00+00:00 | 2023-07-26T14:25:58.693754+00:00 |
| pysec-2023-124 |
|
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to … | paddlepaddle | 2023-07-26T11:15:00+00:00 | 2023-07-26T12:51:10.139446+00:00 |
| pysec-2023-123 |
|
Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a … | paddlepaddle | 2023-07-26T11:15:00+00:00 | 2023-07-26T12:51:10.092120+00:00 |
| pysec-2023-122 |
|
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potent… | paddlepaddle | 2023-07-26T10:15:00+00:00 | 2023-07-26T12:51:10.047714+00:00 |
| pysec-2023-132 |
6.1 (3.1)
|
copyparty is file server software. Prior to version 1.8.7, the application contains a ref… | copyparty | 2023-07-25T22:15:00+00:00 | 2023-08-02T20:24:02.446410+00:00 |
| pysec-2023-133 |
5.3 (3.1)
|
Vyper is a Pythonic programming language that targets the Ethereum Virtual Machine (EVM).… | vyper | 2023-07-25T21:15:00+00:00 | 2023-08-03T18:27:50.332832+00:00 |
| pysec-2023-130 |
6.5 (3.1)
|
Sentry is an error tracking and performance monitoring platform. Starting in version 8.21… | sentry | 2023-07-25T19:15:00+00:00 | 2023-08-02T16:31:39.850029+00:00 |
| pysec-2023-129 |
5.4 (3.1)
|
Indico is an open source a general-purpose, web based event management tool. There is a C… | indico | 2023-07-21T19:15:00+00:00 | 2023-07-31T20:36:08.003610+00:00 |
| pysec-2023-120 |
|
### Impact aiohttp v3.8.4 and earlier are [bundled with llhttp v6.0.6](https://github.co… | aiohttp | 2023-07-20T14:52:00+00:00 | 2023-07-24T14:58:05.562874+00:00 |
| pysec-2023-128 |
2.8 (3.1)
|
A flaw was found in the keylime attestation verifier, which fails to flag a device's subm… | keylime | 2023-07-19T19:15:00+00:00 | 2023-07-28T16:31:09.279625+00:00 |
| pysec-2023-117 |
|
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via … | pygments | 2023-07-19T15:15:00+00:00 | 2023-07-19T17:26:16.938508+00:00 |
| pysec-2023-308 |
10.0 (3.1)
|
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. | mlflow | 2023-07-19T01:15:10+00:00 | 2025-04-09T17:27:26.223213+00:00 |
| pysec-2023-312 |
5.9 (3.1)
|
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server b… | redis | 2023-07-15T23:15:09Z | 2025-06-02T11:48:06.372423Z |
| pysec-2023-127 |
|
Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traver… | copyparty | 2023-07-14T20:15:00+00:00 | 2023-07-27T20:23:01.674307+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-617 | Malicious code in roots-cms-client (npm) | 2026-01-31T17:27:21Z | 2026-02-03T03:16:53Z |
| mal-2026-616 | Malicious code in c11dff444 (npm) | 2026-01-31T16:58:54Z | 2026-02-02T06:41:02Z |
| mal-2026-615 | Malicious code in teaser-nav (npm) | 2026-01-31T13:35:28Z | 2026-02-02T05:56:30Z |
| mal-2026-614 | Malicious code in mkdocs-dataopslive (PyPI) | 2026-01-31T02:09:30Z | 2026-01-31T02:09:33Z |
| mal-2026-612 | Malicious code in sharedclasses (npm) | 2026-01-30T23:47:34Z | 2026-02-02T05:56:30Z |
| mal-2026-613 | Malicious code in fastpi (PyPI) | 2026-01-30T23:26:42Z | 2026-01-30T23:30:09Z |
| mal-2026-611 | Malicious code in mbo-letters-cl (npm) | 2026-01-30T23:13:08Z | 2026-02-02T05:56:29Z |
| mal-2026-610 | Malicious code in snapshot-date (PyPI) | 2026-01-30T19:09:41Z | 2026-01-30T19:09:41Z |
| mal-2026-609 | Malicious code in euskalplantxa (npm) | 2026-01-30T15:31:12Z | 2026-02-02T05:56:27Z |
| mal-2026-608 | Malicious code in ezviz-shop-mall (npm) | 2026-01-30T13:08:07Z | 2026-02-02T05:56:27Z |
| mal-2026-607 | Malicious code in banquet-runtime-modules (npm) | 2026-01-30T12:50:57Z | 2026-02-04T17:33:26Z |
| mal-2026-606 | Malicious code in userver-requires-at-least-python-3-10 (PyPI) | 2026-01-30T10:14:10Z | 2026-01-30T10:14:10Z |
| mal-2026-605 | Malicious code in dhgshop (npm) | 2026-01-29T15:50:42Z | 2026-02-02T05:56:27Z |
| mal-2026-627 | Malicious code in theanswre (PyPI) | 2026-01-29T13:57:51Z | 2026-02-02T01:40:48Z |
| mal-2026-604 | Malicious code in securedrop-workstation-dom0-config (PyPI) | 2026-01-29T13:50:57Z | 2026-01-29T13:50:57Z |
| mal-2026-603 | Malicious code in mcp-pdftool-plus (PyPI) | 2026-01-29T13:25:53Z | 2026-01-29T13:25:53Z |
| mal-2026-602 | Malicious code in tableasets (PyPI) | 2026-01-29T11:22:50Z | 2026-01-29T11:22:50Z |
| mal-2026-601 | Malicious code in tableautes (PyPI) | 2026-01-29T10:08:47Z | 2026-01-29T11:16:21Z |
| mal-2026-600 | Malicious code in researchpoc2 (npm) | 2026-01-29T04:22:59Z | 2026-02-02T05:56:30Z |
| mal-2026-599 | Malicious code in jwt-pack (npm) | 2026-01-29T04:14:08Z | 2026-02-02T05:56:28Z |
| mal-2026-597 | Malicious code in n8n-nodes-comfyui-illu (npm) | 2026-01-29T03:52:09Z | 2026-02-02T05:56:29Z |
| mal-2026-598 | Malicious code in wallet-icon-font (npm) | 2026-01-29T03:47:06Z | 2026-02-02T05:56:31Z |
| mal-2026-596 | Malicious code in turbotax (npm) | 2026-01-29T00:03:56Z | 2026-02-02T05:56:31Z |
| mal-2026-595 | Malicious code in morty-package (PyPI) | 2026-01-28T19:48:56Z | 2026-01-28T19:48:56Z |
| mal-2026-594 | Malicious code in epic-asset-uploader (npm) | 2026-01-28T19:45:45Z | 2026-02-03T08:27:41Z |
| mal-2026-593 | Malicious code in pypi-package-explore (PyPI) | 2026-01-28T17:56:33Z | 2026-01-28T17:56:33Z |
| mal-2026-592 | Malicious code in lvldragdrop (npm) | 2026-01-28T16:39:23Z | 2026-02-02T05:56:28Z |
| mal-2026-591 | Malicious code in kol7a (npm) | 2026-01-28T16:39:23Z | 2026-02-02T05:56:28Z |
| mal-2026-590 | Malicious code in pytorch-mutex (PyPI) | 2026-01-28T16:28:32Z | 2026-01-28T17:47:09Z |
| mal-2026-584 | Malicious code in chai-as-extended (npm) | 2026-01-28T15:06:22Z | 2026-02-02T05:56:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2602 | Cisco Catalyst Center Virtual Appliance: Mehrere Schwachstellen | 2025-11-13T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2601 | Cisco Catalyst Center: Mehrere Schwachstellen | 2025-11-13T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2600 | PostgreSQL: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-13T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2599 | HP LaserJet: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-11-13T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2598 | CUPS (Filters): Mehrere Schwachstellen | 2025-11-13T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2597 | Trellix Agent: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-13T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2596 | Autodesk 3ds Max: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-11-12T23:00:00.000+00:00 | 2025-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2595 | Linux Kernel: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2594 | Omnissa Workspace ONE UEM: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-12T23:00:00.000+00:00 | 2025-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2593 | pgAdmin: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2592 | IBM QRadar SIEM: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2591 | Flowise: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-11-12T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2590 | Drupal Core: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2589 | PyTorch: Schwachstelle ermöglicht Denial of Service | 2025-11-12T23:00:00.000+00:00 | 2025-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2588 | Splunk Splunk Enterprise: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2025-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2587 | GitLab: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2586 | Red Hat Enterprise Linux (python-kdcproxy): Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2585 | Red Hat OpenShift AI: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-12T23:00:00.000+00:00 | 2025-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2584 | Red Hat Enterprise Linux Ceph Storage: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2583 | Palo Alto Networks PAN-OS: Schwachstelle ermöglicht Denial of Service | 2025-11-12T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2581 | TYPO3 Extensions: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2025-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2580 | Google Chrome/Microsoft Edge: Schwachstelle ermöglicht nicht näher beschriebene Auswirkungen | 2025-11-11T23:00:00.000+00:00 | 2025-12-14T23:00:00.000+00:00 |
| wid-sec-w-2025-2579 | Linux Kernel: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2578 | ZScaler Client Connector: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-11T23:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2577 | Apache OpenOffice: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2025-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2576 | Kibana: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2575 | Ivanti Endpoint Manager: Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-11T23:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2574 | Qualys Cloud Agent: Schwachstelle ermöglicht Privilegieneskalation | 2025-11-11T23:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2573 | Intel Prozessoren: Schwachstelle ermöglicht Privilegieneskalation | 2025-11-11T23:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2572 | Adobe Photoshop: Schwachstelle ermöglicht Codeausführung | 2025-11-11T23:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0477 | Kwetsbaarheid verholpen in Adobe Photoshop | 2024-12-11T08:17:46.923581Z | 2024-12-11T08:17:46.923581Z |
| ncsc-2024-0475 | Kwetsbaarheid verholpen in Adobe Framemaker | 2024-12-11T08:06:34.387394Z | 2024-12-11T08:06:34.387394Z |
| ncsc-2024-0474 | Kwetsbaarheden verholpen in Drupal Core | 2024-12-10T19:35:37.345875Z | 2024-12-10T19:35:37.345875Z |
| ncsc-2024-0473 | Kwetsbaarheden verholpen in Siemens producten | 2024-12-10T19:34:53.515240Z | 2024-12-10T19:34:53.515240Z |
| ncsc-2024-0472 | Kwetsbaarheden verholpen in SAP producten | 2024-12-10T19:34:10.105945Z | 2024-12-10T19:34:10.105945Z |
| ncsc-2024-0471 | Kwetsbaarheden verholpen in Microsoft Office | 2024-12-10T19:33:29.415423Z | 2024-12-10T19:33:29.415423Z |
| ncsc-2024-0470 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-12-10T19:32:38.846024Z | 2025-01-06T07:30:29.655717Z |
| ncsc-2024-0469 | Kwetsbaarheden verholpen in Qlik Sense Enterprise voor Windows | 2024-12-09T13:38:50.887753Z | 2024-12-09T13:38:50.887753Z |
| ncsc-2024-0468 | Kwetsbaarheden verholpen in Mitel MiCollab | 2024-12-09T13:37:33.039167Z | 2024-12-09T13:37:33.039167Z |
| ncsc-2024-0467 | Kwetsbaarheden verholpen in QNAP besturingssystemen | 2024-12-09T13:36:33.362104Z | 2024-12-09T13:36:33.362104Z |
| ncsc-2024-0466 | Kwetsbaarheden verholpen in Atlassian producten | 2024-12-06T13:05:55.904619Z | 2024-12-06T13:05:55.904619Z |
| ncsc-2024-0465 | Kwetsbaarheden verholpen in ABB ASPECT, NEXUS Series en MATRIX Series | 2024-12-06T11:49:21.695542Z | 2024-12-06T11:49:21.695542Z |
| ncsc-2024-0464 | Kwetsbaarheden verholpen in SonicWall SMA100 SSLVPN | 2024-12-06T11:48:08.461746Z | 2024-12-06T11:48:08.461746Z |
| ncsc-2024-0463 | Kwetsbaarheden verholpen in Veeam Backup & Replication | 2024-12-06T11:47:19.699742Z | 2024-12-06T11:47:19.699742Z |
| ncsc-2024-0462 | Kwetsbaarheden verholpen in Zabbix | 2024-12-02T12:51:47.361749Z | 2024-12-02T12:51:47.361749Z |
| ncsc-2024-0461 | Kwetsbaarheden verholpen in IBM Security Verify Access Appliance | 2024-12-02T10:55:14.978137Z | 2024-12-02T10:55:14.978137Z |
| ncsc-2024-0460 | Kwetsbaarheid verholpen in Zabbix | 2024-11-28T14:24:11.654121Z | 2024-11-28T14:24:11.654121Z |
| ncsc-2024-0459 | Kwetsbaarheden verholpen in VMware Aria Operations | 2024-11-26T13:25:37.944485Z | 2024-11-26T13:25:37.944485Z |
| ncsc-2024-0458 | Kwetsbaarheden ontdekt in Veritas Enterprise Vault | 2024-11-25T09:04:34.013551Z | 2024-11-25T09:04:34.013551Z |
| ncsc-2024-0457 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-11-20T10:01:35.437557Z | 2024-11-20T10:01:35.437557Z |
| ncsc-2024-0456 | Kwetsbaarheden verholpen in Apple macOS en Safari | 2024-11-20T10:00:42.593160Z | 2024-11-20T10:00:42.593160Z |
| ncsc-2024-0455 | Kwetsbaarheid verholpen in Trend Micro Deep Security | 2024-11-20T09:04:14.183257Z | 2024-11-20T09:04:14.183257Z |
| ncsc-2024-0454 | Kwetsbaarheid verholpen in GitHub CLI | 2024-11-19T15:03:48.421618Z | 2024-11-19T15:03:48.421618Z |
| ncsc-2024-0453 | Kwetsbaarheid verholpen in Oracle Agile PLM Framework | 2024-11-19T09:41:05.945149Z | 2024-11-19T09:41:05.945149Z |
| ncsc-2024-0452 | Kwetsbaarheden verholpen in Siemens Tecnomatix Plant Simulation | 2024-11-19T08:19:24.590425Z | 2024-11-19T08:19:24.590425Z |
| ncsc-2024-0451 | Kwetsbaarheden verholpen in Palo Alto PAN-OS | 2024-11-18T16:00:29.206286Z | 2024-11-20T08:41:37.309906Z |
| ncsc-2024-0450 | Kwetsbaarheid verholpen in Adobe Photoshop | 2024-11-18T11:18:22.537372Z | 2024-11-18T11:18:22.537372Z |
| ncsc-2024-0449 | Kwetsbaarheden verholpen in Adobe InDesign | 2024-11-18T11:14:49.456205Z | 2024-11-18T11:14:49.456205Z |
| ncsc-2024-0448 | Kwetsbaarheden verholpen in Adobe Illustrator | 2024-11-18T11:08:38.687476Z | 2024-11-18T11:08:38.687476Z |
| ncsc-2024-0447 | Kwetsbaarheden verholpen in GitLab CE/EE | 2024-11-15T12:29:35.775993Z | 2024-11-15T12:29:35.775993Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-622535 | SSA-622535: Multiple Vulnerabilities in Teamcenter Active Workspace | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-483182 | SSA-483182: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2 | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-434536 | SSA-434536: Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC | 2021-07-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-434535 | SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives | 2021-07-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-373591 | SSA-373591: Buffer Overflow Vulnerability in RUGGEDCOM ROS Devices | 2021-07-13T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-209268 | SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-173615 | SSA-173615: Multiple PAR and ASM File Parsing Vulnerabilities in Solid Edge | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-787292 | SSA-787292: Denial of Service Vulnerability in SIMATIC RFID Readers | 2021-06-08T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-645530 | SSA-645530: TIFF File Parsing Vulnerability in JT2Go and Teamcenter Visualization before V13.1.0.3 | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-522654 | SSA-522654: Privilege Escalation Vulnerability in Mendix SAML Module | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-211752 | SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA | 2021-06-08T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-208356 | SSA-208356: DFT File Parsing Vulnerabilities in Solid Edge | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-200951 | SSA-200951: Multiple Vulnerabilities in Third-Party Component libcurl of TIM Devices | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-133038 | SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-434534 | SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families | 2021-05-28T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-119468 | SSA-119468: Luxion KeyShot Vulnerabilities in Solid Edge | 2021-05-25T00:00:00Z | 2021-05-25T00:00:00Z |
| ssa-695540 | SSA-695540: ASM and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.2 | 2021-05-17T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-940818 | SSA-940818: UltraVNC Vulnerabilities in SIMATIC HMIs/WinCC Products | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-919955 | SSA-919955: Information Disclosure Vulnerability in Mendix Database Replication Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-854248 | SSA-854248: Information Disclosure Vulnerability in Mendix Excel Importer Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-752103 | SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-723417 | SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D | 2021-05-11T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-678983 | SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020) | 2021-05-11T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-676775 | SSA-676775: Denial-of-Service Vulnerability in SIMATIC NET CP 343-1 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-594364 | SSA-594364: Denial-of-Service Vulnerability in SNMP Implementation of WinCC Runtime | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-538778 | SSA-538778: SmartVNC Vulnerabilities in SIMATIC HMI/WinCC Products | 2021-05-11T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-324955 | SSA-324955: SAD DNS Attack in Linux Based Products | 2021-05-11T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-286838 | SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-116379 | SSA-116379: Denial-of-Service Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-875726 | SSA-875726: Privilege Escalation Vulnerability in Mendix | 2021-04-14T00:00:00Z | 2021-04-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1168 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-26T09:54:57+00:00 | 2026-02-17T12:41:17+00:00 |
| rhsa-2026:1166 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-26T09:50:40+00:00 | 2026-02-17T12:41:17+00:00 |
| rhsa-2026:1148 | Red Hat Security Advisory: kernel-rt security update | 2026-01-26T07:50:32+00:00 | 2026-02-12T19:26:36+00:00 |
| rhsa-2026:1072 | Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.1 security update | 2026-01-25T22:43:46+00:00 | 2026-02-17T08:01:16+00:00 |
| rhsa-2026:1071 | Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.1 security update | 2026-01-25T22:31:05+00:00 | 2026-02-17T08:01:16+00:00 |
| rhsa-2026:1067 | Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.1 | 2026-01-23T16:45:25+00:00 | 2026-02-17T08:01:15+00:00 |
| rhsa-2026:1049 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.0 | 2026-01-22T21:04:37+00:00 | 2026-02-17T11:15:36+00:00 |
| rhsa-2026:0674 | Red Hat Security Advisory: OpenShift Container Platform 4.19.22 bug fix and security update | 2026-01-22T21:01:40+00:00 | 2026-02-05T19:45:33+00:00 |
| rhsa-2026:0677 | Red Hat Security Advisory: OpenShift Container Platform 4.13.63 bug fix and security update | 2026-01-22T20:18:18+00:00 | 2026-02-05T19:45:40+00:00 |
| rhsa-2026:0676 | Red Hat Security Advisory: OpenShift Container Platform 4.13.63 packages and security update | 2026-01-22T19:53:23+00:00 | 2026-02-17T12:41:14+00:00 |
| rhsa-2026:0702 | Red Hat Security Advisory: OpenShift Container Platform 4.17.47 bug fix and security update | 2026-01-22T19:09:07+00:00 | 2026-02-05T19:37:46+00:00 |
| rhsa-2026:0928 | Red Hat Security Advisory: java-21-openjdk security update | 2026-01-22T19:02:18+00:00 | 2026-02-03T20:02:56+00:00 |
| rhsa-2026:0701 | Red Hat Security Advisory: OpenShift Container Platform 4.17.47 packages and security update | 2026-01-22T18:53:43+00:00 | 2026-02-17T12:41:11+00:00 |
| rhsa-2026:1042 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T18:14:00+00:00 | 2026-02-17T12:41:16+00:00 |
| rhsa-2026:0715 | Red Hat Security Advisory: OpenShift Container Platform 4.17.47 bug fix and security update | 2026-01-22T18:11:18+00:00 | 2026-02-17T08:01:03+00:00 |
| rhsa-2026:1041 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T18:11:01+00:00 | 2026-02-17T12:41:15+00:00 |
| rhsa-2026:1038 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T18:00:37+00:00 | 2026-02-17T12:41:15+00:00 |
| rhsa-2026:1025 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-22T16:47:34+00:00 | 2026-02-17T08:01:11+00:00 |
| rhsa-2026:1027 | Red Hat Security Advisory: RHOAI 3.2 - Red Hat OpenShift AI | 2026-01-22T16:34:27+00:00 | 2026-02-17T09:27:15+00:00 |
| rhsa-2026:1026 | Red Hat Security Advisory: RHOAI 3.2 - Red Hat OpenShift AI | 2026-01-22T16:34:21+00:00 | 2026-02-17T09:27:15+00:00 |
| rhsa-2026:1018 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.4 security update | 2026-01-22T15:52:24+00:00 | 2026-02-17T12:41:15+00:00 |
| rhsa-2026:1014 | Red Hat Security Advisory: gnupg2 security update | 2026-01-22T15:48:38+00:00 | 2026-02-11T15:13:18+00:00 |
| rhsa-2026:1017 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.3 security update | 2026-01-22T15:47:03+00:00 | 2026-02-17T12:41:15+00:00 |
| rhsa-2026:0991 | Red Hat Security Advisory: glib2 security update | 2026-01-22T12:22:52+00:00 | 2026-02-13T19:06:50+00:00 |
| rhsa-2026:0990 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T11:34:41+00:00 | 2026-02-17T12:41:13+00:00 |
| rhsa-2026:0987 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-22T11:30:22+00:00 | 2026-02-17T08:01:06+00:00 |
| rhsa-2026:0981 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T10:00:40+00:00 | 2026-02-17T12:41:13+00:00 |
| rhsa-2026:0927 | Red Hat Security Advisory: java-17-openjdk security update | 2026-01-22T09:24:37+00:00 | 2026-02-03T20:02:54+00:00 |
| rhsa-2026:0976 | Red Hat Security Advisory: openssh security update | 2026-01-22T09:20:02+00:00 | 2026-02-03T20:56:55+00:00 |
| rhsa-2026:0975 | Red Hat Security Advisory: glib2 security update | 2026-01-22T07:41:11+00:00 | 2026-02-13T19:05:06+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsma-25-072-01 | Philips Intellispace Cardiovascular (ISCV) | 2025-03-13T06:00:00.000000Z | 2025-03-13T06:00:00.000000Z |
| icsa-25-072-12 | Sungrow iSolarCloud Android App, WiNet Firmware | 2025-03-13T06:00:00.000000Z | 2025-03-13T06:00:00.000000Z |
| icsa-25-079-03 | Siemens Simcenter Femap | 2025-03-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-070-02 | Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool | 2025-03-11T06:00:00.000000Z | 2025-03-11T06:00:00.000000Z |
| icsa-25-077-04 | Schneider Electric EcoStruxure Panel Server | 2025-03-11T04:00:00.000000Z | 2025-03-11T04:00:00.000000Z |
| icsa-25-077-03 | Schneider Electric EcoStruxure Power Automation System | 2025-03-11T04:00:00.000000Z | 2025-03-11T04:00:00.000000Z |
| icsa-25-084-01 | ABB RMC-100 | 2025-03-11T00:30:00.000000Z | 2025-03-11T00:30:00.000000Z |
| icsa-25-072-11 | Siemens SIMATIC IPC Family, ITP1000, and Field PGs | 2025-03-11T00:00:00.000000Z | 2026-02-12T07:00:00.000000Z |
| icsa-25-072-10 | Siemens SINEMA Remote Connect Client | 2025-03-11T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-25-072-09 | Siemens OPC UA | 2025-03-11T00:00:00.000000Z | 2026-01-14T22:05:42.018496Z |
| icsa-25-072-08 | Siemens Tecnomatix Plant Simulation | 2025-03-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-072-07 | Siemens SCALANCE M-800 and SC-600 Families | 2025-03-11T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-25-072-06 | Siemens SCALANCE LPE9403 | 2025-03-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-072-05 | Siemens SINAMICS S200 | 2025-03-11T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-25-072-04 | Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP | 2025-03-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-072-03 | Siemens SIMATIC S7-1500 TM MFP | 2025-03-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-072-02 | Siemens SINEMA Remote Connect Server | 2025-03-11T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-25-072-01 | Siemens Teamcenter Visualization and Tecnomatix | 2025-03-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-063-08 | Edimax IC-7100 IP Camera | 2025-03-04T07:00:00.000000Z | 2025-03-04T07:00:00.000000Z |
| icsa-25-063-07 | GMOD Apollo | 2025-03-04T07:00:00.000000Z | 2025-03-04T07:00:00.000000Z |
| icsa-25-063-06 | Delta Electronics CNCSoft-G2 | 2025-03-04T07:00:00.000000Z | 2025-03-04T07:00:00.000000Z |
| icsa-25-063-02 | Keysight Ixia Vision Product Family (Update A) | 2025-03-04T07:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-063-01 | Carrier Block Load | 2025-03-04T07:00:00.000000Z | 2025-03-04T07:00:00.000000Z |
| icsma-25-058-01 | Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application | 2025-02-27T07:00:00.000000Z | 2025-02-27T07:00:00.000000Z |
| icsa-25-058-01 | Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B) | 2025-02-27T07:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-133-03 | Hitachi Energy MACH GWS products | 2025-02-25T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-25-133-01 | Hitachi Energy Service Suite | 2025-02-25T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-25-065-01 | Hitachi Energy PCU400 | 2025-02-25T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-25-063-03 | Hitachi Energy MACH PS700 | 2025-02-25T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-25-056-01 | Rockwell Automation PowerFlex 755 | 2025-02-25T07:00:00.000000Z | 2025-02-25T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cucm-priv-esc-d8bky5eg | Cisco Unified Communications Products Privilege Escalation Vulnerability | 2023-08-30T16:00:00+00:00 | 2023-08-30T16:00:00+00:00 |
| cisco-sa-nxos-sftp-xvap5hfd | Cisco Nexus 3000 and 9000 Series Switches SFTP Server File Access Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-remoteauth-dos-xb6pv74m | Cisco NX-OS Software TACACS+ or RADIUS Remote Authentication Directed Request Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-n3_9k-isis-dos-ftcxb4vb | Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fxos-arbitrary-file-blk6yupl | Cisco FXOS Software Arbitrary File Write Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fp-ucsfi-snmp-dos-qtv69nao | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects SNMP Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-apic-uapa-f4tashk | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-umbrella-tunnel-gjw5thge | Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-uccx-wcp-jjeqdt3s | Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-thoueye-privesc-nvhhgwb3 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T21:54:23+00:00 |
| cisco-sa-te-va-priv-esc-pudgrx8e | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T22:00:29+00:00 |
| cisco-sa-pi-epnm-storedxss-ttjo62r | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-bfjsrjp5 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ivpa-cmdinj-c5xrbboy | Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ise-credentials-tkto3h3 | Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ipphone-csrf-hocmxw2c | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-intersight-forward-c45ncgqb | Cisco Intersight Virtual Appliance Unauthenticated Port Forwarding Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-expressway-injection-x475ebtq | Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-duo-dha-filewrite-xpmbmzak | Cisco Duo Device Health Application for Windows Arbitrary File Write Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-injection-g6mbwh2 | Cisco Unified Communications Manager SQL Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-imp-xss-qtt4vdsk | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-clamav-rnwneeee | ClamAV HFS+ File Scanning Infinite Loop Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-25T16:08:02+00:00 |
| cisco-sa-clamav-dos-ftkhqmwz | ClamAV AutoIt Module Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cimc-xss-umytyetr | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2024-02-22T20:57:19+00:00 |
| cisco-sa-ac-leak-sew6g2kd | Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client | 2023-08-08T15:00:00+00:00 | 2023-08-08T15:00:00+00:00 |
| cisco-sa-wsa-bypass-vxvqwzsj | Cisco Secure Web Appliance Content Encoding Filter Bypass Vulnerability | 2023-08-02T16:00:00+00:00 | 2024-08-14T14:27:30+00:00 |
| cisco-sa-commpilot-xss-jc46sezf | Cisco BroadWorks CommPilot Application Software Cross-Site Scripting Vulnerability | 2023-08-02T16:00:00+00:00 | 2023-08-30T19:34:29+00:00 |
| cisco-sa-asaftd-aclconfig-wvk52f3z | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ACLs Not Installed upon Reload | 2023-07-27T16:00:00+00:00 | 2023-07-27T16:38:54+00:00 |
| cisco-sa-spa-web-multi-7kvpmu2f | Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities | 2023-07-19T16:00:00+00:00 | 2023-07-19T16:00:00+00:00 |
| cisco-sa-bw-priv-esc-qtguzosq | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-19T16:00:00+00:00 | 2023-07-20T17:42:21+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-68973 | In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.) | 2025-12-02T00:00:00.000Z | 2026-02-25T01:36:51.000Z |
| msrc_cve-2025-68972 | In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an "invalid armor" message is printed during verification). This is related to use of \f as a marker to denote truncation of a long plaintext line. | 2025-12-02T00:00:00.000Z | 2026-01-13T01:44:08.000Z |
| msrc_cve-2025-68746 | spi: tegra210-quad: Fix timeout handling | 2025-12-02T00:00:00.000Z | 2026-02-18T02:29:02.000Z |
| msrc_cve-2025-68745 | scsi: qla2xxx: Clear cmds after chip reset | 2025-12-02T00:00:00.000Z | 2026-02-18T02:25:37.000Z |
| msrc_cve-2025-68744 | bpf: Free special fields when update [lru_,]percpu_hash maps | 2025-12-02T00:00:00.000Z | 2026-02-18T02:26:56.000Z |
| msrc_cve-2025-68742 | bpf: Fix invalid prog->stats access when update_effective_progs fails | 2025-12-02T00:00:00.000Z | 2026-02-18T02:30:39.000Z |
| msrc_cve-2025-68741 | scsi: qla2xxx: Fix improper freeing of purex item | 2025-12-02T00:00:00.000Z | 2026-02-18T02:21:57.000Z |
| msrc_cve-2025-68740 | ima: Handle error code returned by ima_filter_rule_match() | 2025-12-02T00:00:00.000Z | 2026-02-18T02:34:12.000Z |
| msrc_cve-2025-68736 | landlock: Fix handling of disconnected directories | 2025-12-02T00:00:00.000Z | 2026-02-18T02:24:55.000Z |
| msrc_cve-2025-68733 | smack: fix bug: unprivileged task can create labels | 2025-12-02T00:00:00.000Z | 2026-02-18T02:39:17.000Z |
| msrc_cve-2025-68732 | gpu: host1x: Fix race in syncpt alloc/free | 2025-12-02T00:00:00.000Z | 2026-02-18T02:22:51.000Z |
| msrc_cve-2025-68729 | wifi: ath12k: Fix MSDU buffer types handling in RX error path | 2025-12-02T00:00:00.000Z | 2026-01-08T14:37:51.000Z |
| msrc_cve-2025-68728 | ntfs3: fix uninit memory after failed mi_read in mi_format_new | 2025-12-02T00:00:00.000Z | 2026-01-13T01:43:26.000Z |
| msrc_cve-2025-68727 | ntfs3: Fix uninit buffer allocated by __getname() | 2025-12-02T00:00:00.000Z | 2026-01-13T01:43:46.000Z |
| msrc_cve-2025-68725 | bpf: Do not let BPF test infra emit invalid GSO types to stack | 2025-12-02T00:00:00.000Z | 2026-02-28T01:37:31.000Z |
| msrc_cve-2025-68724 | crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id | 2025-12-02T00:00:00.000Z | 2026-02-18T02:38:05.000Z |
| msrc_cve-2025-68615 | Net-SNMP snmptrapd crash | 2025-12-02T00:00:00.000Z | 2025-12-31T01:37:13.000Z |
| msrc_cve-2025-68476 | KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential | 2025-12-02T00:00:00.000Z | 2026-01-08T01:39:41.000Z |
| msrc_cve-2025-68390 | Elasticsearch Allocation of Resources Without Limits or Throttling | 2025-12-02T00:00:00.000Z | 2025-12-23T01:37:15.000Z |
| msrc_cve-2025-68384 | Elasticsearch Allocation of Resources Without Limits or Throttling | 2025-12-02T00:00:00.000Z | 2025-12-23T01:37:09.000Z |
| msrc_cve-2025-68380 | wifi: ath11k: fix peer HE MCS assignment | 2025-12-02T00:00:00.000Z | 2026-01-08T14:41:22.000Z |
| msrc_cve-2025-68379 | RDMA/rxe: Fix null deref on srq->rq.queue after resize failure | 2025-12-02T00:00:00.000Z | 2026-02-18T02:35:33.000Z |
| msrc_cve-2025-68378 | bpf: Fix stackmap overflow check in __bpf_get_stackid() | 2025-12-02T00:00:00.000Z | 2026-02-18T02:36:53.000Z |
| msrc_cve-2025-68376 | coresight: ETR: Fix ETR buffer use-after-free issue | 2025-12-02T00:00:00.000Z | 2026-01-13T01:43:52.000Z |
| msrc_cve-2025-68374 | md: fix rcu protection in md_wakeup_thread | 2025-12-02T00:00:00.000Z | 2026-02-18T02:38:35.000Z |
| msrc_cve-2025-68372 | nbd: defer config put in recv_work | 2025-12-02T00:00:00.000Z | 2026-02-18T02:32:55.000Z |
| msrc_cve-2025-68371 | scsi: smartpqi: Fix device resources accessed after device removal | 2025-12-02T00:00:00.000Z | 2026-02-18T02:17:01.000Z |
| msrc_cve-2025-68367 | macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse | 2025-12-02T00:00:00.000Z | 2026-01-08T14:39:03.000Z |
| msrc_cve-2025-68366 | nbd: defer config unlock in nbd_genl_connect | 2025-12-02T00:00:00.000Z | 2026-02-18T02:24:10.000Z |
| msrc_cve-2025-68365 | fs/ntfs3: Initialize allocated memory before use | 2025-12-02T00:00:00.000Z | 2026-02-28T01:02:18.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201908-1840 | When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_dat… | 2025-12-22T22:20:44.833000Z |
| var-201302-0142 | Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… | 2025-12-22T22:20:44.262000Z |
| var-201804-1225 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2025-12-22T22:20:44.127000Z |
| var-202210-0043 | The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fie… | 2025-12-22T22:20:39.209000Z |
| var-201708-1547 | The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers… | 2025-12-22T22:20:07.115000Z |
| var-201806-1470 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2025-12-22T22:20:06.986000Z |
| var-202203-0664 | BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions… | 2025-12-22T22:20:05.920000Z |
| var-202001-0472 | Insufficient control flow in certain data structures for some Intel(R) Processors with In… | 2025-12-22T22:20:05.839000Z |
| var-201711-0476 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2025-12-22T22:19:35.406000Z |
| var-202104-0752 | A memory corruption issue was addressed with improved validation. This issue is fixed in … | 2025-12-22T22:19:02.462000Z |
| var-201908-0265 | Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a … | 2025-12-22T22:18:31.894000Z |
| var-201302-0253 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:18:28.137000Z |
| var-201912-0642 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T22:18:27.432000Z |
| var-201306-0257 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:18:26.814000Z |
| var-201904-1408 | A memory corruption issue was addressed with improved state management. This issue affect… | 2025-12-22T22:16:54.320000Z |
| var-201606-0135 | The XML parser in Expat does not use sufficient entropy for hash initialization, which al… | 2025-12-22T22:16:52.819000Z |
| var-201406-0137 | The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 befo… | 2025-12-22T22:16:52.589000Z |
| var-201110-0444 | Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgp… | 2025-12-22T22:16:52.388000Z |
| var-200702-0471 | Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allow… | 2025-12-22T22:16:12.244000Z |
| var-201605-0037 | The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0… | 2025-12-22T22:15:33.887000Z |
| var-201502-0366 | named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when D… | 2025-12-22T22:14:30.049000Z |
| var-201806-1467 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2025-12-22T22:14:08.889000Z |
| var-201302-0404 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 U… | 2025-12-22T22:14:08.456000Z |
| var-201206-0059 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:14:08.226000Z |
| var-201310-0356 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… | 2025-12-22T22:14:02.189000Z |
| var-201506-0464 | Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h i… | 2025-12-22T22:14:01.479000Z |
| var-201104-0082 | dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and … | 2025-12-22T22:13:59.499000Z |
| var-201708-0212 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 all… | 2025-12-22T22:13:57.918000Z |
| var-202205-0881 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.49… | 2025-12-22T22:13:57.821000Z |
| var-201304-0105 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:13:26.858000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-004294 | Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL | 2023-10-27T16:10+09:00 | 2024-05-20T17:49+09:00 |
| jvndb-2023-000106 | Multiple vulnerabilities in baserCMS | 2023-10-27T14:46+09:00 | 2024-05-07T15:59+09:00 |
| jvndb-2023-000105 | Movable Type vulnerable to cross-site scripting | 2023-10-25T15:18+09:00 | 2024-05-10T17:47+09:00 |
| jvndb-2023-003956 | Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Designer | 2023-10-24T16:11+09:00 | 2024-05-10T17:47+09:00 |
| jvndb-2023-000103 | HP ThinUpdate vulnerable to improper server certificate verification | 2023-10-23T14:26+09:00 | 2023-10-23T14:26+09:00 |
| jvndb-2023-000102 | Multiple vulnerabilities in JustSystems products | 2023-10-19T15:16+09:00 | 2024-05-16T16:44+09:00 |
| jvndb-2023-000104 | Improper restriction of XML external entity references (XXE) in Proself | 2023-10-18T18:00+09:00 | 2024-05-15T17:08+09:00 |
| jvndb-2023-003913 | Multiple vulnerabilities in JTEKT ELECTRONICS OnSinView2 | 2023-10-18T14:13+09:00 | 2024-05-16T17:28+09:00 |
| jvndb-2023-000101 | web2py vulnerable to OS command injection | 2023-10-16T16:11+09:00 | 2024-05-22T17:58+09:00 |
| jvndb-2023-000100 | Scanning evasion issue in Cisco Secure Email Gateway | 2023-10-16T16:11+09:00 | 2023-10-27T15:52+09:00 |
| jvndb-2023-003788 | Out-of-bounds read vulnerability in Keyence KV STUDIO and KV REPLAY VIEWER | 2023-10-11T15:23+09:00 | 2024-05-16T17:09+09:00 |
| jvndb-2023-000098 | e-Gov Client Application fails to restrict custom URL schemes properly | 2023-10-06T14:57+09:00 | 2024-05-17T17:55+09:00 |
| jvndb-2023-003771 | File and Directory Permissions Vulnerability in JP1/Performance Management | 2023-10-04T15:23+09:00 | 2023-10-04T15:23+09:00 |
| jvndb-2023-003770 | DoS Vulnerability in Hitachi Ops Center Common Services | 2023-10-04T15:23+09:00 | 2024-05-22T15:31+09:00 |
| jvndb-2023-003769 | Information Exposure Vulnerability in Hitachi Ops Center Administrator | 2023-10-04T15:23+09:00 | 2024-05-22T15:20+09:00 |
| jvndb-2023-000097 | Citadel WebCit vulnerable to cross-site scripting on Instant Messaging facility | 2023-10-04T14:07+09:00 | 2024-05-21T17:08+09:00 |
| jvndb-2023-003767 | Multiple vulnerabilities in multiple FURUNO SYSTEMS wireless LAN access point devices in ST(Standalone) mode | 2023-10-03T14:26+09:00 | 2024-05-22T18:01+09:00 |
| jvndb-2023-000096 | Improper restriction of XML external entity references (XXE) in FD Application | 2023-10-02T12:36+09:00 | 2024-05-22T15:37+09:00 |
| jvndb-2023-003764 | Multiple vulnerabilities in Panasonic KW Watcher | 2023-09-27T14:44+09:00 | 2023-09-27T14:44+09:00 |
| jvndb-2023-000095 | Shihonkanri Plus vulnerable to relative path traversal | 2023-09-27T13:49+09:00 | 2024-05-21T17:16+09:00 |
| jvndb-2023-003757 | Trend Micro Mobile Security vulnerable to cross-site scripting | 2023-09-26T11:30+09:00 | 2024-03-13T18:07+09:00 |
| jvndb-2023-000094 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2023-09-22T13:51+09:00 | 2024-07-11T16:49+09:00 |
| jvndb-2023-003721 | Trend Micro Endpoint security products for enterprises vulnerable to arbitrary code execution | 2023-09-20T13:58+09:00 | 2024-05-09T18:22+09:00 |
| jvndb-2023-003592 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2023-09-13T15:02+09:00 | 2023-09-13T15:02+09:00 |
| jvndb-2023-000093 | Pyramid vulnerable to directory traversal | 2023-09-11T13:53+09:00 | 2024-05-16T16:52+09:00 |
| jvndb-2023-003335 | Vulnerability in JP1/VERITAS | 2023-09-06T15:35+09:00 | 2023-09-06T15:35+09:00 |
| jvndb-2023-000092 | "direct" Desktop App for macOS fails to restrict access permissions | 2023-09-06T14:33+09:00 | 2023-09-06T14:33+09:00 |
| jvndb-2023-000091 | Multiple vulnerabilities in F-RevoCRM | 2023-09-05T15:51+09:00 | 2024-05-14T18:06+09:00 |
| jvndb-2023-000090 | Multiple vulnerabilities in CGIs of PMailServer and PMailServer2 | 2023-09-05T14:55+09:00 | 2023-09-05T14:55+09:00 |
| jvndb-2023-000088 | Multiple vulnerabilities in SHIRASAGI | 2023-09-04T13:41+09:00 | 2024-05-14T17:58+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20058-1 | Security update for rsync | 2026-01-02T11:13:05Z | 2026-01-02T11:13:05Z |
| suse-su-2026:20057-1 | Security update for libmicrohttpd | 2026-01-02T11:07:26Z | 2026-01-02T11:07:26Z |
| suse-ru-2026:20056-1 | Recommended update for shim | 2026-01-01T13:54:36Z | 2026-01-01T13:54:36Z |
| suse-su-2025:4539-1 | Security update for python36 | 2025-12-31T15:05:33Z | 2025-12-31T15:05:33Z |
| suse-su-2025:4538-1 | Security update for python3 | 2025-12-31T15:05:25Z | 2025-12-31T15:05:25Z |
| suse-su-2025:4536-1 | Security update for podman | 2025-12-31T10:35:17Z | 2025-12-31T10:35:17Z |
| suse-su-2026:20036-1 | Security update for dpdk | 2025-12-30T20:51:25Z | 2025-12-30T20:51:25Z |
| suse-su-2026:20037-1 | Security update for ovmf | 2025-12-30T20:33:17Z | 2025-12-30T20:33:17Z |
| suse-su-2026:20035-1 | Security update for podman | 2025-12-30T20:16:23Z | 2025-12-30T20:16:23Z |
| suse-su-2026:20055-1 | Security update for dpdk | 2025-12-30T20:05:16Z | 2025-12-30T20:05:16Z |
| suse-su-2026:20054-1 | Security update for capstone | 2025-12-30T20:03:14Z | 2025-12-30T20:03:14Z |
| suse-ru-2026:20004-1 | Recommended update for shim | 2025-12-30T16:20:45Z | 2025-12-30T16:20:45Z |
| suse-su-2025:4534-1 | Security update for dpdk22 | 2025-12-29T16:15:13Z | 2025-12-29T16:15:13Z |
| suse-su-2025:4533-1 | Security update for libpng16 | 2025-12-29T16:11:25Z | 2025-12-29T16:11:25Z |
| suse-su-2025:4532-1 | Security update for apache2-mod_auth_openidc | 2025-12-29T13:53:59Z | 2025-12-29T13:53:59Z |
| suse-su-2025:4530-1 | Security update for the Linux Kernel | 2025-12-29T10:48:23Z | 2025-12-29T10:48:23Z |
| suse-su-2025:4528-1 | Security update for webkit2gtk3 | 2025-12-26T14:52:35Z | 2025-12-26T14:52:35Z |
| suse-su-2025:4527-1 | Security update for webkit2gtk3 | 2025-12-26T14:49:08Z | 2025-12-26T14:49:08Z |
| suse-su-2025:4526-1 | Security update for buildah | 2025-12-26T12:24:16Z | 2025-12-26T12:24:16Z |
| suse-su-2025:4525-1 | Security update for gnutls | 2025-12-26T12:19:11Z | 2025-12-26T12:19:11Z |
| suse-su-2025:4523-1 | Security update for qemu | 2025-12-26T10:45:48Z | 2025-12-26T10:45:48Z |
| suse-su-2025:4522-1 | Security update for python39 | 2025-12-26T10:35:01Z | 2025-12-26T10:35:01Z |
| suse-su-2025:4521-1 | Security update for the Linux Kernel | 2025-12-24T12:42:49Z | 2025-12-24T12:42:49Z |
| suse-su-2025:4520-1 | Security update for mariadb | 2025-12-24T09:19:47Z | 2025-12-24T09:19:47Z |
| suse-su-2025:4518-1 | Security update for apache2 | 2025-12-23T19:07:45Z | 2025-12-23T19:07:45Z |
| suse-su-2025:4517-1 | Security update for the Linux Kernel | 2025-12-23T16:28:51Z | 2025-12-23T16:28:51Z |
| suse-su-2025:4516-1 | Security update for the Linux Kernel | 2025-12-23T16:27:39Z | 2025-12-23T16:27:39Z |
| suse-su-2025:4515-1 | Security update for the Linux Kernel | 2025-12-23T16:19:45Z | 2025-12-23T16:19:45Z |
| suse-su-2025:4514-1 | Security update for libsoup | 2025-12-23T14:59:59Z | 2025-12-23T14:59:59Z |
| suse-su-2025:4512-1 | Security update for mozjs52 | 2025-12-23T12:23:19Z | 2025-12-23T12:23:19Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15735-1 | MozillaFirefox-145.0-1.1 on GA media | 2025-11-14T00:00:00Z | 2025-11-14T00:00:00Z |
| opensuse-su-2025:15734-1 | starboard-0.15.28-1.1 on GA media | 2025-11-13T00:00:00Z | 2025-11-13T00:00:00Z |
| opensuse-su-2025:15733-1 | weblate-5.14.3-1.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15732-1 | python-Scrapy-doc-2.13.3-2.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15731-1 | python311-Brotli-1.2.0-1.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15730-1 | helm-3.19.1-1.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15729-1 | go-sendxmpp-0.15.1-1.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15728-1 | tcpreplay-4.5.2-1.1 on GA media | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| opensuse-su-2025:15727-1 | python311-pdfminer.six-20251107-1.1 on GA media | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| opensuse-su-2025:15726-1 | containerd-1.7.29-1.1 on GA media | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| opensuse-su-2025:15725-1 | binutils-2.45-2.1 on GA media | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| opensuse-su-2025:20037-1 | Security update for chromium | 2025-11-10T17:22:06Z | 2025-11-10T17:22:06Z |
| opensuse-su-2025:20035-1 | Security update for micropython | 2025-11-10T15:52:16Z | 2025-11-10T15:52:16Z |
| opensuse-su-2025:15724-1 | trivy-0.67.2-1.1 on GA media | 2025-11-10T00:00:00Z | 2025-11-10T00:00:00Z |
| opensuse-su-2025:15723-1 | regclient-0.10.0-1.1 on GA media | 2025-11-10T00:00:00Z | 2025-11-10T00:00:00Z |
| opensuse-su-2025:15722-1 | hauler-1.3.1-1.1 on GA media | 2025-11-10T00:00:00Z | 2025-11-10T00:00:00Z |
| opensuse-su-2025:15721-1 | incus-6.17-2.1 on GA media | 2025-11-09T00:00:00Z | 2025-11-09T00:00:00Z |
| opensuse-su-2025:15720-1 | chromedriver-142.0.7444.134-1.1 on GA media | 2025-11-08T00:00:00Z | 2025-11-08T00:00:00Z |
| opensuse-su-2025:20026-1 | Security update for MozillaThunderbird | 2025-11-07T12:08:41Z | 2025-11-07T12:08:41Z |
| opensuse-su-2025:15719-1 | xen-4.20.1_08-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15718-1 | tomcat11-11.0.13-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15717-1 | tomcat10-10.1.48-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15716-1 | tomcat-9.0.111-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15715-1 | squid-7.3-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15714-1 | libshibsp-lite12-3.5.1-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15713-1 | python315-3.15.0~a1-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15712-1 | python311-Django-5.2.8-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15711-1 | opentofu-1.10.7-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15710-1 | govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15709-1 | google-osconfig-agent-20251028.00-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mlflow-2025-52967 | 2025-09-25T08:47:37.376Z | 2025-09-25T09:09:38.625Z | |
| bit-mongodb-2025-3085 | MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked | 2025-09-25T08:47:27.812Z | 2025-09-25T09:09:38.625Z |
| bit-mongodb-2025-3084 | MongoDB Server may crash due to improper validation of explain command | 2025-09-25T08:47:26.320Z | 2025-09-25T09:09:38.625Z |
| bit-mongoose-2025-23061 | 2025-09-25T08:46:40.232Z | 2025-10-06T00:06:00.502Z | |
| bit-keydb-2025-46686 | 2025-09-25T08:44:35.725Z | 2025-09-25T09:09:38.625Z | |
| bit-django-2025-57833 | 2025-09-25T08:40:38.586Z | 2025-11-06T13:25:46.476Z | |
| bit-django-2025-48432 | 2025-09-25T08:40:36.630Z | 2025-10-16T18:08:44.835Z | |
| bit-django-2025-27556 | 2025-09-25T08:40:31.995Z | 2025-10-06T00:06:00.502Z | |
| bit-golang-2025-47910 | CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http | 2025-09-24T08:48:08.127Z | 2025-09-25T09:09:38.625Z |
| bit-mongodb-2025-3083 | Malformed MongoDB wire protocol messages may cause mongos to crash | 2025-09-23T08:46:32.630Z | 2025-09-23T09:10:44.834Z |
| bit-mongodb-2025-3082 | User may override a view's collation and gain unauthorized access to underlying data | 2025-09-23T08:46:30.283Z | 2025-09-23T09:10:44.834Z |
| bit-mongodb-2025-10059 | MongoDB Server router will crash when incorrect lsid is set on a sharded query | 2025-09-23T08:46:23.470Z | 2025-09-23T09:10:44.834Z |
| bit-mongodb-2025-0755 | MongoDB C Driver bson library may be susceptible to buffer overflow | 2025-09-23T08:46:21.341Z | 2025-11-06T13:25:46.476Z |
| bit-mongodb-2024-8654 | MongoDB Server may access non-initialized region of memory leading to unexpected behaviour | 2025-09-23T08:46:18.972Z | 2025-09-23T09:10:44.834Z |
| bit-mongodb-2024-3372 | MongoDB Server may have unexpected application behaviour due to invalid BSON | 2025-09-23T08:46:07.044Z | 2025-09-23T09:10:44.834Z |
| bit-golang-2025-47906 | Unexpected paths returned from LookPath in os/exec | 2025-09-20T08:43:22.590Z | 2025-11-06T13:25:46.476Z |
| bit-mongodb-2025-10061 | Malformed $group Query May Cause MongoDB Server to Crash | 2025-09-19T09:58:18.588Z | 2025-11-14T15:09:14.122Z |
| bit-mongodb-2025-10060 | MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation | 2025-09-19T09:58:16.816Z | 2025-09-19T10:21:21.758Z |
| bit-jenkins-2025-59476 | 2025-09-19T09:57:11.182Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2025-59475 | 2025-09-19T09:57:09.400Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2025-59474 | 2025-09-19T09:57:07.574Z | 2025-11-06T13:25:46.476Z | |
| bit-temporal-2023-3485 | Insecure Default Authorization in Temporal Server | 2025-09-16T11:52:55.067Z | 2025-09-16T12:10:06.830Z |
| bit-gitlab-2025-7337 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-09-16T09:08:52.685Z | 2025-09-16T09:10:21.105Z |
| bit-gitlab-2025-6769 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab | 2025-09-16T09:08:47.176Z | 2025-09-16T09:10:21.105Z |
| bit-gitlab-2025-6454 | Server-Side Request Forgery (SSRF) in GitLab | 2025-09-16T09:08:45.357Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-2256 | Improper Validation of Specified Quantity in Input in GitLab | 2025-09-16T09:07:42.625Z | 2025-09-16T09:10:21.105Z |
| bit-gitlab-2025-1250 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-09-16T09:07:13.477Z | 2025-09-16T09:10:21.105Z |
| bit-gitlab-2025-10094 | Improper Validation of Specified Quantity in Input in GitLab | 2025-09-16T09:07:02.268Z | 2025-09-16T09:10:21.105Z |
| bit-prestashop-2024-36626 | 2025-09-16T08:51:49.628Z | 2025-09-16T09:10:21.105Z | |
| bit-mongodb-2025-6710 | Pre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB | 2025-09-16T08:47:35.944Z | 2025-09-16T09:10:21.105Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-10327 | Google Pixel aoc_ipc_core.c文件输入验证错误漏洞 | 2025-12-18 | 2026-02-06 |
| cnvd-2026-10326 | Google Pixel授权问题漏洞 | 2025-12-18 | 2026-02-06 |
| cnvd-2026-10325 | Google Pixel protocolpsadapter.cpp文件缓冲区溢出漏洞 | 2025-12-18 | 2026-02-06 |
| cnvd-2026-10324 | Google Pixel cn_NrmmDecoder.cpp文件缓冲区溢出漏洞 | 2025-12-18 | 2026-02-06 |
| cnvd-2026-10323 | Google Pixel gxp_buffer.h文件缓冲区溢出漏洞 | 2025-12-18 | 2026-02-06 |
| cnvd-2026-10322 | Google Pixel ss_LcsManagement.c文件缓冲区溢出漏洞 | 2025-12-18 | 2026-02-06 |
| cnvd-2026-10321 | Google Pixel代码执行漏洞（CNVD-2026-1032114） | 2025-12-18 | 2026-02-06 |
| cnvd-2026-05878 | 麒麟软件有限公司银河麒麟操作系统存在二进制漏洞 | 2025-12-18 | 2026-02-01 |
| cnvd-2026-03712 | TOTOLINK X5000R代码执行漏洞 | 2025-12-18 | 2026-01-15 |
| cnvd-2026-02696 | Google Pixel权限提升漏洞（CNVD-2026-0269620） | 2025-12-18 | 2026-01-09 |
| cnvd-2026-02695 | Google Pixel权限提升漏洞（CNVD-2026-0269521） | 2025-12-18 | 2026-01-09 |
| cnvd-2026-02694 | Google Pixel权限提升漏洞（CNVD-2026-0269422） | 2025-12-18 | 2026-01-09 |
| cnvd-2026-02693 | Google Pixel权限提升漏洞（CNVD-2026-0269323） | 2025-12-18 | 2026-01-09 |
| cnvd-2026-00840 | Student File Management System update_user.php文件跨站脚本漏洞 | 2025-12-18 | 2026-01-05 |
| cnvd-2026-00839 | Student File Management System user_id参数SQL注入漏洞 | 2025-12-18 | 2026-01-05 |
| cnvd-2026-00796 | UTT 进取 512W缓冲区溢出漏洞（CNVD-2026-0079609） | 2025-12-18 | 2026-01-08 |
| cnvd-2026-00795 | UTT 进取 512W缓冲区溢出漏洞（CNVD-2026-0079510） | 2025-12-18 | 2026-01-08 |
| cnvd-2026-00696 | Simple Attendance Record System check.php文件SQL注入漏洞 | 2025-12-18 | 2026-01-07 |
| cnvd-2026-00695 | Computer Laboratory System admin_pic.php文件文件上传漏洞 | 2025-12-18 | 2026-01-07 |
| cnvd-2026-00656 | D-Link DIR-803信息泄露漏洞 | 2025-12-18 | 2026-01-07 |
| cnvd-2026-00446 | Class and Exam Timetable Management /index.php文件SQL注入漏洞 | 2025-12-18 | 2026-01-05 |
| cnvd-2026-00445 | Class and Exam Timetable Management /preview7.php文件SQL注入漏洞 | 2025-12-18 | 2026-01-05 |
| cnvd-2025-31547 | IBM Aspera Orchestrator拒绝服务漏洞 | 2025-12-18 | 2025-12-30 |
| cnvd-2025-31546 | IBM Aspera Orchestrator未验证的密码更改漏洞 | 2025-12-18 | 2025-12-30 |
| cnvd-2025-31116 | WordPress Addon Elements for Elementor跨站脚本漏洞 | 2025-12-18 | 2025-12-26 |
| cnvd-2025-31121 | WordPress Video Merchant跨站请求伪造漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31120 | WordPress Wp Job Portal任意文件读取漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31119 | WordPress RSS Aggregator by Feedzy代码问题漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31118 | WordPress WP CarDealer权限提升漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31117 | WordPress List category posts SQL注入漏洞 | 2025-12-16 | 2025-12-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0889 | Vulnérabilité dans Squid | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0888 | Multiples vulnérabilités dans les produits Mattermost | 2025-10-16T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-0887 | Vulnérabilité dans Synacor Zimbra Collaboration | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0886 | Multiples vulnérabilités dans les produits F5 | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0885 | Multiples vulnérabilités dans Samba | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0884 | Multiples vulnérabilités dans les produits Cisco | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0883 | Multiples vulnérabilités dans les produits Spring | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0882 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0881 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0880 | Multiples vulnérabilités dans Microsoft .Net | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0879 | Multiples vulnérabilités dans Microsoft Windows | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0878 | Multiples vulnérabilités dans Microsoft Office | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0877 | Multiples vulnérabilités dans les produits Ivanti | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0876 | Multiples vulnérabilités dans les produits Adobe | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0875 | Vulnérabilité dans Google Chrome | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0874 | Vulnérabilité dans Schneider Electric EcoStruxure | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0873 | Multiples vulnérabilités dans les produits Mozilla | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0872 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0871 | Multiples vulnérabilités dans les produits Fortinet | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0870 | Vulnérabilité dans Microsoft Azure | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0869 | Multiples vulnérabilités dans les produits Veeam | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0868 | Vulnérabilité dans Siemens SIMATIC | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0867 | Multiples vulnérabilités dans les produits SAP | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0866 | Vulnérabilité dans Elastic Cloud Enterprise | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0865 | Vulnérabilité dans Oracle E-Business Suite | 2025-10-13T00:00:00.000000 | 2025-10-13T00:00:00.000000 |
| certfr-2025-avi-0864 | Multiples vulnérabilités dans VMware Tanzu | 2025-10-13T00:00:00.000000 | 2025-10-13T00:00:00.000000 |
| certfr-2025-avi-0863 | Vulnérabilité dans Belden HiOS Switch Platform | 2025-10-13T00:00:00.000000 | 2025-10-13T00:00:00.000000 |
| certfr-2025-avi-0862 | Multiples vulnérabilités dans Microsoft Edge | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0861 | Multiples vulnérabilités dans les produits IBM | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0860 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |