Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2022-45179 |
5.4 (3.1)
|
An issue was discovered in LIVEBOX Collaboration … |
n/a |
n/a |
2024-02-21T00:00:00.000Z | 2026-02-26T22:10:53.379Z |
| CVE-2023-26323 |
7.6 (3.1)
|
Xiaomi App Market has a code execution vulnerability |
Xiaomi |
App Market |
2024-08-28T07:53:42.801Z | 2026-02-26T22:08:53.877Z |
| CVE-2024-3331 |
6.8 (3.1)
|
Spotfire: NTLM token leakage |
Spotfire |
Spotfire Enterprise Runtime for R - Server Edition |
2024-06-27T18:50:13.758Z | 2026-02-26T22:08:29.272Z |
| CVE-2026-27839 |
4.3 (3.1)
|
wger: IDOR in nutritional_values endpoints exposes pri… |
wger-project |
wger |
2026-02-26T22:07:43.640Z | 2026-02-26T22:07:43.640Z |
| CVE-2024-27218 |
6.2 (3.1)
|
In update_freq_data of , there is a possible out … |
Google |
Android |
2024-03-11T18:55:38.895Z | 2026-02-26T22:07:29.852Z |
| CVE-2026-26724 |
7.6 (3.1)
|
Cross Site Scripting vulnerability in Key Systems… |
n/a |
n/a |
2026-02-20T00:00:00.000Z | 2026-02-26T22:06:41.927Z |
| CVE-2026-26464 |
6.1 (3.1)
|
Stored Cross-Site Scripting (XSS) was found in th… |
n/a |
n/a |
2026-02-23T00:00:00.000Z | 2026-02-26T22:06:10.099Z |
| CVE-2026-24953 |
6.5 (3.1)
|
WordPress Simple File List plugin <= 6.1.15 - Arbitrar… |
Mitchell Bennis |
Simple File List |
2026-02-20T15:47:08.637Z | 2026-02-26T22:05:33.879Z |
| CVE-2026-27838 |
3.1 (3.1)
|
wger: IDOR via user-unscoped cache keys on routine API… |
wger-project |
wger |
2026-02-26T22:04:57.968Z | 2026-02-26T22:04:57.968Z |
| CVE-2026-24946 |
6.5 (3.1)
|
WordPress Print Invoice & Delivery Notes for WooCommer… |
tychesoftwares |
Print Invoice & Delivery Notes for WooCommerce |
2026-02-20T15:47:07.869Z | 2026-02-26T22:04:24.610Z |
| CVE-2024-32902 |
7.5 (3.1)
|
Remote prevention of access to cellular service w… |
Google |
Android |
2024-06-13T21:01:58.523Z | 2026-02-26T22:03:14.174Z |
| CVE-2024-20079 |
9.8 (3.1)
|
In gnss service, there is a possible out of bound… |
MediaTek, Inc. |
MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT8666, MT8667, MT8673, MT8676, MT8678 |
2024-07-01T03:18:06.522Z | 2026-02-26T22:00:45.313Z |
| CVE-2026-27835 |
4.3 (3.1)
|
wger: IDOR in RepetitionsConfig and MaxRepetitionsConf… |
wger-project |
wger |
2026-02-26T22:00:23.768Z | 2026-02-26T22:00:23.768Z |
| CVE-2024-22795 |
7 (3.1)
|
Insecure Permissions vulnerability in Forescout S… |
n/a |
n/a |
2024-02-08T00:00:00.000Z | 2026-02-26T21:58:55.678Z |
| CVE-2024-25399 |
6.1 (3.1)
|
Subrion CMS 4.2.1 is vulnerable to Cross Site Scr… |
n/a |
n/a |
2024-02-27T00:00:00.000Z | 2026-02-26T21:58:24.444Z |
| CVE-2026-27457 |
4.3 (3.1)
|
Weblate: Missing access control for the AddonViewSet A… |
WeblateOrg |
weblate |
2026-02-26T21:56:03.220Z | 2026-02-26T21:56:03.220Z |
| CVE-2026-27449 |
7.5 (3.1)
|
Umbraco.Engage.Forms Allows Unauthorized Access to Mul… |
umbraco |
Umbraco.Engage.Forms |
2026-02-26T21:51:14.512Z | 2026-02-26T21:51:14.512Z |
| CVE-2026-1707 |
7.4 (3.1)
|
Restore restriction bypass via key disclosure vulnerab… |
pgadmin.org |
pgAdmin 4 |
2026-02-05T17:30:05.089Z | 2026-02-26T21:50:19.579Z |
| CVE-2026-24869 |
8.8 (3.1)
|
Use-after-free in the Layout: Scrolling and Overflow c… |
Mozilla |
Firefox |
2026-01-27T15:58:48.799Z | 2026-02-26T21:48:47.132Z |
| CVE-2026-21721 |
8.1 (3.1)
|
Dashboard Permissions Scope Bypass Enables Cross‑Dashb… |
Grafana |
grafana/grafana |
2026-01-27T09:07:55.160Z | 2026-02-26T21:45:54.908Z |
| CVE-2026-25741 |
7.1 (3.1)
|
Zulip Vulnerable to Modification of Payment Method (St… |
zulip |
zulip |
2026-02-26T21:44:34.398Z | 2026-02-26T21:44:34.398Z |
| CVE-2026-21927 |
5.8 (3.1)
|
Vulnerability in the Oracle Solaris product of Or… |
Oracle Corporation |
Oracle Solaris |
2026-01-20T21:56:21.840Z | 2026-02-26T21:44:33.203Z |
| CVE-2025-67856 |
5.4 (3.1)
|
Moodle: moodle: privilege escalation via incomplete ro… |
|
|
2026-02-03T10:52:19.744Z | 2026-02-26T21:43:57.825Z |
| CVE-2026-25747 |
N/A
|
Apache Camel: Deserialization of Untrusted Data in Cam… |
Apache Software Foundation |
Apache Camel |
2026-02-23T08:45:45.826Z | 2026-02-26T21:43:30.970Z |
| CVE-2025-13108 |
5.5 (3.1)
|
Fixes to common vulnerabilities found in IBM Db2 Merge… |
IBM |
DB2 Merge Backup for Linux, UNIX and Windows |
2026-02-17T19:11:18.442Z | 2026-02-26T21:42:41.200Z |
| CVE-2026-2914 |
8.5 (4.0)
|
CyberArk Endpoint Privilege Manager Agent version… |
CyberArk Software, a Palo Alto Networks Company |
Endpoint Privilege Manager Agent |
2026-02-25T01:33:05.657Z | 2026-02-26T21:42:22.714Z |
| CVE-2025-37166 |
7.5 (3.1)
|
Unexpected shutdown in HPE Instant On Access Points af… |
Hewlett Packard Enterprise (HPE) |
Instant On |
2026-01-13T17:42:09.716Z | 2026-02-26T21:40:42.967Z |
| CVE-2025-12007 |
8.4 (3.1)
|
Supermicro BMC firmware update validation bypass |
SMCI |
X13SEM-F |
2026-01-16T08:39:41.840Z | 2026-02-26T21:39:58.686Z |
| CVE-2025-10258 |
6.3 (3.1)
|
A time-based SQL Injection vulnerability in Infinera DNA |
Nokia |
Infinera DNA |
2026-02-05T07:13:50.948Z | 2026-02-26T21:38:18.448Z |
| CVE-2025-41117 |
6.8 (3.1)
|
XSS in Grafana Explore stack trace |
Grafana |
grafana/grafana |
2026-02-12T08:49:08.545Z | 2026-02-26T21:38:10.871Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27728 |
10 (3.1)
|
OneUptime: OS Command Injection in Probe NetworkPathMo… |
OneUptime |
oneuptime |
2026-02-25T16:25:09.698Z | 2026-02-25T20:19:55.906Z |
| CVE-2026-27727 |
8.9 (4.0)
|
mchange-commons-java: Remote Code Execution via JNDI R… |
swaldman |
mchange-commons-java |
2026-02-25T16:01:04.187Z | 2026-02-25T20:15:05.299Z |
| CVE-2026-27704 |
6.6 (4.0)
|
Dart SDK and Flutter SDK have Zip slip in Dart Pub pac… |
dart-lang |
sdk |
2026-02-25T15:17:26.243Z | 2026-02-25T20:27:35.486Z |
| CVE-2026-27702 |
9.9 (3.1)
|
Budibase Vulnerable to Remote Code Execution via Unsaf… |
Budibase |
budibase |
2026-02-25T15:11:16.324Z | 2026-02-25T20:43:35.833Z |
| CVE-2026-27700 |
8.2 (3.1)
|
Hono is Vulnerable to Authentication Bypass by IP Spoo… |
honojs |
hono |
2026-02-25T15:01:44.681Z | 2026-02-27T17:01:28.403Z |
| CVE-2026-27616 |
7.3 (3.1)
|
Vikunja Vulnerable to Stored Cross-Site Scripting (XSS… |
go-vikunja |
vikunja |
2026-02-25T21:37:57.671Z | 2026-02-26T20:38:41.085Z |
| CVE-2026-27613 |
10 (4.0)
|
CGI Parameter Injection (Bypass of STRICT_CGI_PARAMS a… |
maximmasiutin |
TinyWeb |
2026-02-25T22:58:16.358Z | 2026-02-26T20:22:22.813Z |
| CVE-2026-27578 |
8.5 (4.0)
|
n8n Vulnerable to Stored XSS via Various Nodes |
n8n-io |
n8n |
2026-02-25T22:40:38.606Z | 2026-02-26T20:16:20.758Z |
| CVE-2026-27577 |
9.4 (4.0)
|
n8n: Expression Sandbox Escape Leads to RCE |
n8n-io |
n8n |
2026-02-25T22:19:44.806Z | 2026-02-26T20:14:30.327Z |
| CVE-2026-27575 |
9.1 (3.1)
|
Vijkunja has Weak Password Policy Combined with Persis… |
go-vikunja |
vikunja |
2026-02-25T21:35:23.230Z | 2026-02-26T20:39:18.888Z |
| CVE-2026-27498 |
9 (4.0)
|
n8n has Arbitrary Command Execution via File Write and… |
n8n-io |
n8n |
2026-02-25T22:42:21.618Z | 2026-02-26T20:21:05.587Z |
| CVE-2026-27497 |
9.4 (4.0)
|
n8n has Potential Remote Code Execution via Merge Node |
n8n-io |
n8n |
2026-02-25T22:16:08.347Z | 2026-02-26T19:35:29.529Z |
| CVE-2026-27495 |
9.4 (4.0)
|
n8n has a Sandbox Escape in its JavaScript Task Runner |
n8n-io |
n8n |
2026-02-25T22:10:04.054Z | 2026-02-26T20:28:18.099Z |
| CVE-2026-27494 |
7.1 (4.0)
|
n8n has Arbitrary File Read via Python Code Node Sandb… |
n8n-io |
n8n |
2026-02-25T22:08:00.520Z | 2026-02-26T20:28:57.625Z |
| CVE-2026-27493 |
9.5 (4.0)
|
n8n has Unauthenticated Expression Evaluation via Form Node |
n8n-io |
n8n |
2026-02-25T22:05:00.686Z | 2026-02-26T20:27:26.036Z |
| CVE-2026-27465 |
1.3 (4.0)
|
Fleet: Sensitive Google Calendar credentials disclosed… |
fleetdm |
fleet |
2026-02-26T02:54:04.886Z | 2026-02-26T14:26:24.835Z |
| CVE-2026-27148 |
8.9 (4.0)
|
Storybook Dev Server Vulnerable to WebSocket Hijacking |
storybookjs |
storybook |
2026-02-25T21:46:48.967Z | 2026-02-26T20:26:14.136Z |
| CVE-2026-27116 |
6.1 (3.1)
|
Vikunja has Reflected HTML Injection via filter Parame… |
go-vikunja |
vikunja |
2026-02-25T21:33:50.448Z | 2026-02-25T21:38:05.386Z |
| CVE-2026-26985 |
8.1 (3.1)
|
LORIS vulnerable to path traversal in electrophysiolog… |
aces |
Loris |
2026-02-25T21:26:00.201Z | 2026-02-25T21:39:45.355Z |
| CVE-2026-26984 |
8.7 (3.0)
|
LORIS media module vulnerable to remote code execution |
aces |
Loris |
2026-02-25T21:15:54.790Z | 2026-02-25T21:42:13.721Z |
| CVE-2026-2694 |
5.4 (3.1)
|
The Events Calendar <= 6.15.16 - Improper Authorizatio… |
stellarwp |
The Events Calendar |
2026-02-25T21:25:02.211Z | 2026-02-25T21:40:41.317Z |
| CVE-2026-26717 |
4.8 (3.1)
|
An issue in OpenFUN Richie (LMS) in src/richie/ap… |
n/a |
n/a |
2026-02-25T00:00:00.000Z | 2026-02-26T19:11:04.934Z |
| CVE-2026-2636 |
5.5 (3.1)
|
Denial of Service in Microsoft OS |
Microsoft |
Windows OS |
2026-02-25T18:57:02.962Z | 2026-02-26T15:56:55.089Z |
| CVE-2026-26186 |
5.1 (4.0)
|
Fleet has a SQL injection via backtick escape in ORDER… |
fleetdm |
fleet |
2026-02-26T00:05:02.016Z | 2026-02-26T14:52:24.634Z |
| CVE-2026-25191 |
7.8 (3.0)
8.4 (4.0)
|
The installer of FinalCode Client provided by Dig… |
Digital Arts Inc. |
FinalCode Ver.5 series |
2026-02-26T05:39:24.457Z | 2026-02-26T14:24:33.596Z |
| CVE-2026-2506 |
6.1 (3.1)
|
EM Cost Calculator <= 2.3.1 - Unauthenticated Stored C… |
motahar1 |
EM Cost Calculator |
2026-02-26T01:24:13.651Z | 2026-02-26T15:42:01.642Z |
| CVE-2026-2499 |
4.4 (3.1)
|
Custom Logo <= 2.2 - Authenticated (Administrator+) St… |
tgrk |
Custom Logo |
2026-02-26T01:24:15.718Z | 2026-02-26T15:10:28.820Z |
| CVE-2026-2498 |
4.4 (3.1)
|
WP Social Meta <= 1.0.1 - Authenticated (Administrator… |
bulktheme |
WP Social Meta |
2026-02-26T01:24:14.553Z | 2026-02-26T15:29:44.068Z |
| CVE-2026-2489 |
4.4 (3.1)
|
TP2WP Importer <= 1.1 - Authenticated (Administrator+)… |
readymadeweb |
TP2WP Importer |
2026-02-26T01:24:14.916Z | 2026-02-26T15:29:15.546Z |
| CVE-2026-24005 |
0 (3.1)
|
OpenKruise PodProbeMarker is Vulnerable to SSRF via Un… |
openkruise |
kruise |
2026-02-25T18:53:30.170Z | 2026-02-26T20:44:09.282Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-27704 | The Dart and Flutter SDKs provide software development kits for the Dart programming language. In v… | 2026-02-25T16:23:26.960 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27702 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. Prior to … | 2026-02-25T16:23:26.777 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27700 | Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4… | 2026-02-25T16:23:26.440 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27616 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the applica… | 2026-02-25T22:16:26.627 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27613 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. A vulnerability in versions prio… | 2026-02-25T23:16:21.743 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27578 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, … | 2026-02-25T23:16:21.560 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27577 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, … | 2026-02-25T23:16:21.387 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27575 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the applica… | 2026-02-25T22:16:26.383 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27498 | n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authent… | 2026-02-25T23:16:21.213 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27497 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, … | 2026-02-25T23:16:21.037 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27495 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, … | 2026-02-25T23:16:20.853 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27494 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, … | 2026-02-25T23:16:20.677 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27493 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, … | 2026-02-25T23:16:20.440 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27465 | Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fl… | 2026-02-26T03:16:04.520 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27148 | Storybook is a frontend workshop for building user interface components and pages in isolation. Pri… | 2026-02-25T22:16:25.317 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-27116 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, a reflected… | 2026-02-25T22:16:24.723 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-26985 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provi… | 2026-02-25T22:16:24.360 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-26984 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provi… | 2026-02-25T22:16:24.173 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-2694 | The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and… | 2026-02-25T22:16:28.027 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-26717 | An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-co… | 2026-02-25T17:25:39.293 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-2636 | This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" w… | 2026-02-25T20:23:48.910 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-26186 | Fleet is open source device management software. A SQL injection vulnerability in versions prior to… | 2026-02-26T00:16:23.450 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-25191 | The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL sear… | 2026-02-26T06:17:16.200 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-2506 | The EM Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version… | 2026-02-26T02:16:25.410 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-2499 | The Custom Logo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin setting… | 2026-02-26T02:16:25.233 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-2498 | The WP Social Meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin sett… | 2026-02-26T02:16:25.067 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-2489 | The TP2WP Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Watch… | 2026-02-26T02:16:24.890 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-24005 | Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1… | 2026-02-25T19:43:21.163 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-24004 | Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fl… | 2026-02-26T03:16:04.183 | 2026-02-27T14:06:59.787 |
| fkie_cve-2026-23999 | Fleet is open source device management software. In versions prior to 4.80.1, Fleet generated devic… | 2026-02-26T03:16:04.010 | 2026-02-27T14:06:59.787 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-rfh7-7v27-6p9r |
2.4 (3.1)
1.9 (4.0)
|
funadmin: XSS through Value argument in Backend Interface component | 2026-02-22T03:30:26Z | 2026-02-26T15:33:00Z |
| ghsa-gcxp-xg77-798j |
5.5 (3.1)
2.0 (4.0)
|
funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function | 2026-02-22T03:30:26Z | 2026-02-26T15:32:52Z |
| ghsa-5m2g-4cf6-c3rg |
7.3 (3.1)
5.5 (4.0)
|
funadmin has Incorrect Privilege Assignment in its Configuration Handler | 2026-02-22T00:31:01Z | 2026-02-26T15:31:55Z |
| ghsa-fmr2-m7gc-577w |
3.7 (3.1)
2.9 (4.0)
|
funadmin has Weak Password Recovery Mechanism for Forgotten Password | 2026-02-22T00:31:01Z | 2026-02-26T15:31:41Z |
| ghsa-8hhx-xq9j-xwfj |
5.3 (3.1)
5.5 (4.0)
|
funadmin exposes sensitive information via getMember function | 2026-02-22T00:31:01Z | 2026-02-26T15:31:24Z |
| ghsa-65m8-95c4-38hm |
8.4 (4.0)
|
A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker… | 2026-02-26T15:30:30Z | 2026-02-26T15:30:31Z |
| ghsa-xp3g-cfwm-4q5h |
4.8 (4.0)
|
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3fact… | 2026-02-26T15:30:30Z | 2026-02-26T15:30:30Z |
| ghsa-wc4c-6r77-mp37 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-26T09:30:27Z | 2026-02-26T15:30:30Z |
| ghsa-vq69-qj8j-4r8j |
4.8 (4.0)
|
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter … | 2026-02-26T15:30:30Z | 2026-02-26T15:30:30Z |
| ghsa-jm25-jfc5-xhx6 |
4.8 (4.0)
|
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in… | 2026-02-26T15:30:30Z | 2026-02-26T15:30:30Z |
| ghsa-j28w-j889-vwc6 |
7.6 (3.1)
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-02-26T15:30:30Z | 2026-02-26T15:30:30Z |
| ghsa-g8p2-q5wh-ppx2 |
4.8 (4.0)
|
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber… | 2026-02-26T15:30:30Z | 2026-02-26T15:30:30Z |
| ghsa-9284-m2hp-cfp4 |
7.2 (3.1)
|
Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injecti… | 2026-02-26T09:30:27Z | 2026-02-26T15:30:30Z |
| ghsa-77v4-gvxh-3ccf |
5.3 (3.1)
|
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in vill… | 2026-02-26T09:30:27Z | 2026-02-26T15:30:30Z |
| ghsa-6v6h-v95w-6g6x |
8.4 (3.1)
|
Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest… | 2026-02-26T15:30:30Z | 2026-02-26T15:30:30Z |
| ghsa-xfqp-wv94-qg88 |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special … | 2026-01-22T18:30:31Z | 2026-02-26T15:30:29Z |
| ghsa-wqx8-r5jg-36w6 |
5.3 (3.1)
|
In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerabil… | 2026-02-25T15:31:41Z | 2026-02-26T15:30:29Z |
| ghsa-vj55-4r38-w2gh |
8.0 (3.1)
|
An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models runni… | 2023-12-08T18:30:42Z | 2026-02-26T15:30:29Z |
| ghsa-mwf2-qr4v-94h2 |
7.1 (4.0)
|
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections | 2026-02-24T15:30:30Z | 2026-02-26T15:29:01Z |
| ghsa-h294-8fxm-m2pj |
2.3 (4.0)
|
Apache Superset allows authenticated users to view sensitive data without explicit permissions | 2026-02-24T15:30:30Z | 2026-02-26T15:28:47Z |
| ghsa-3m2g-v7jf-7fxc |
7.1 (4.0)
|
Apache Superset Improper Authorization allows low-privileged users to bypass access controls | 2026-02-24T15:30:30Z | 2026-02-26T15:28:38Z |
| ghsa-gvxg-9hqx-f4rg |
5.3 (4.0)
|
Apache Superset allows privileged users to conduct error-based SQL Injection | 2026-02-24T15:30:30Z | 2026-02-26T15:28:27Z |
| ghsa-48m2-v2r8-h23m |
5.3 (4.0)
|
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine | 2026-02-24T15:30:30Z | 2026-02-26T15:28:10Z |
| ghsa-42wg-38gx-85rh |
7.2 (3.1)
|
Vikunja has Path Traversal in CLI Restore | 2026-02-26T15:23:30Z | 2026-02-26T15:23:30Z |
| ghsa-w789-49fc-v8hr |
8.7 (4.0)
|
TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist | 2026-02-26T15:22:11Z | 2026-02-26T15:22:11Z |
| ghsa-24p2-j2jr-386w |
6.8 (4.0)
|
psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and h… | 2026-02-26T15:20:51Z | 2026-02-26T15:20:51Z |
| ghsa-mpf7-p9x7-96r3 |
5.8 (3.1)
|
Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API | 2026-02-26T15:18:46Z | 2026-02-26T15:18:46Z |
| ghsa-vjqx-cfc4-9h6v |
6.4 (4.0)
|
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries | 2026-02-26T15:16:57Z | 2026-02-26T15:16:57Z |
| ghsa-mjf5-7g4m-gx5w |
8.9 (4.0)
|
Storybook Dev Server is Vulnerable to WebSocket Hijacking | 2026-02-26T15:16:10Z | 2026-02-26T15:16:10Z |
| ghsa-49xw-vfc4-7p43 |
5.1 (4.0)
|
Fleet has an SQL Injection vulnerability via backtick escape in ORDER BY parameter | 2026-02-26T15:14:12Z | 2026-02-26T15:14:12Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2012-28 |
|
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick … | bitdefender | 2012-03-21T10:11:00Z | 2024-11-21T14:22:41.328571Z |
| pysec-2012-27 |
|
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.… | bitdefender | 2012-03-21T10:11:00Z | 2024-11-21T14:22:41.276629Z |
| pysec-2012-26 |
|
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.16… | bitdefender | 2012-03-21T10:11:00Z | 2024-11-21T14:22:41.220887Z |
| pysec-2012-25 |
|
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antiv… | bitdefender | 2012-03-21T10:11:00Z | 2024-11-21T14:22:41.165409Z |
| pysec-2012-24 |
|
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat Q… | bitdefender | 2012-03-21T10:11:00Z | 2024-11-21T14:22:41.111226Z |
| pysec-2012-23 |
|
The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424… | bitdefender | 2012-03-21T10:11:00Z | 2024-11-21T14:22:41.056758Z |
| pysec-2012-22 |
|
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure A… | bitdefender | 2012-03-21T10:11:00Z | 2024-11-21T14:22:41.00719Z |
| pysec-2022-43070 |
7.5 (3.1)
|
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization… | apache-iotdb | 2022-09-05T10:15:00Z | 2024-11-21T14:22:40.90699Z |
| pysec-2023-268 |
7.5 (3.1)
|
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Dolphi… | apache-dolphinscheduler | 2023-11-24T08:15:00+00:00 | 2024-11-21T14:22:40.797843+00:00 |
| pysec-2023-267 |
6.5 (3.1)
|
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an auth… | apache-airflow | 2023-12-21T10:15:00+00:00 | 2024-11-21T14:22:40.744438+00:00 |
| pysec-2023-266 |
6.5 (3.1)
|
Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker … | apache-airflow | 2023-12-21T10:15:00+00:00 | 2024-11-21T14:22:40.683792+00:00 |
| pysec-2023-265 |
4.3 (3.1)
|
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows… | apache-airflow | 2023-12-21T10:15:00+00:00 | 2024-11-21T14:22:40.621314+00:00 |
| pysec-2023-264 |
5.4 (3.1)
|
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a… | apache-airflow | 2023-12-21T10:15:00+00:00 | 2024-11-21T14:22:40.559945+00:00 |
| pysec-2023-263 |
8.8 (3.1)
|
An improper array index validation vulnerability exists in the stl_fix_normal_directions … | admesh | 2023-04-03T16:15:00Z | 2024-11-21T14:22:40.308634Z |
| pysec-2022-43066 |
9.8 (3.1)
|
The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor vi… | aamiles | 2022-06-24T21:15:00Z | 2024-11-21T14:22:40.256677Z |
| pysec-2024-124 |
4.8 (3.1)
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting… | django-cms | 2024-11-18T12:15:00Z | 2024-11-20T16:23:43.554559Z |
| pysec-2024-123 |
6.1 (3.1)
|
An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerabilit… | pyload-ng | 2024-11-15T11:15:00+00:00 | 2024-11-19T22:22:34.280606+00:00 |
| pysec-2024-122 |
4.4 (3.1)
|
A path traversal vulnerability exists in the api open_personality_folder endpoint of pari… | lollms | 2024-10-11T16:15:00+00:00 | 2024-11-15T20:23:01.816492+00:00 |
| pysec-2024-121 |
6.5 (3.1)
|
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from… | openc3 | 2024-10-02T20:15:00+00:00 | 2024-11-13T20:22:56.434107+00:00 |
| pysec-2024-115 |
9.8 (3.1)
|
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community versi… | langchain | 2024-11-05T16:04:14Z | 2024-11-12T19:19:57.535206Z |
| pysec-2024-120 |
7.8 (3.1)
|
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the Call… | pyassimp | 2024-10-24T21:15:00+00:00 | 2024-11-05T20:22:53.185968+00:00 |
| pysec-2024-119 |
7.5 (3.1)
|
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Ser… | chuanhuchatgpt | 2024-10-29T13:15:00+00:00 | 2024-11-04T22:22:08.835024+00:00 |
| pysec-2024-114 |
9.8 (3.1)
|
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.… | langchain | 2024-10-29T13:15:00Z | 2024-11-04T19:21:44.923698Z |
| pysec-2024-118 |
4.7 (3.1)
|
A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langc… | langchain | 2024-06-06T19:15:00+00:00 | 2024-11-03T20:22:34.854295+00:00 |
| pysec-2024-117 |
9.8 (3.1)
|
man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code … | dtale | 2024-06-06T19:16:00+00:00 | 2024-11-03T20:22:34.425699+00:00 |
| pysec-2024-116 |
9.0 (3.1)
|
A vulnerability in the discussion image upload function of the Lollms application, versio… | lollms | 2024-10-29T13:15:00+00:00 | 2024-11-01T21:22:09.060172+00:00 |
| pysec-2024-113 |
4.3 (3.1)
|
In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /f… | chuanhuchatgpt | 2024-10-29T13:15:00+00:00 | 2024-10-31T19:20:49.353218+00:00 |
| pysec-2024-112 |
7.5 (3.1)
|
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 2024062… | chuanhuchatgpt | 2024-10-29T13:15:00+00:00 | 2024-10-31T19:20:49.309758+00:00 |
| pysec-2024-110 |
4.7 (3.1)
|
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, … | scikit-learn | 2024-06-06T19:16:00+00:00 | 2024-10-24T21:22:05.950602+00:00 |
| pysec-2024-107 |
5.0 (3.1)
|
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modif… | exiv2 | 2024-02-12T23:15:00+00:00 | 2024-10-23T00:00:00+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4151 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.570377Z |
| gsd-2024-4121 | A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14. Affected … | 2024-04-25T05:02:08.568351Z |
| gsd-2024-4118 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. T… | 2024-04-25T05:02:08.567594Z |
| gsd-2024-4126 | A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue… | 2024-04-25T05:02:08.564980Z |
| gsd-2024-4150 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.563239Z |
| gsd-2024-4158 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.563038Z |
| gsd-2024-4156 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.562256Z |
| gsd-2024-4128 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.561160Z |
| gsd-2024-4116 | A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affec… | 2024-04-25T05:02:08.560496Z |
| gsd-2024-4119 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been declared as critical. Thi… | 2024-04-25T05:02:08.559738Z |
| gsd-2024-4144 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.557398Z |
| gsd-2024-4138 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.556926Z |
| gsd-2024-4117 | A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected b… | 2024-04-25T05:02:08.556268Z |
| gsd-2024-4131 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.555982Z |
| gsd-2024-4133 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.555278Z |
| gsd-2024-4148 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.554457Z |
| gsd-2024-4152 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.553366Z |
| gsd-2024-4112 | A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affe… | 2024-04-25T05:02:08.551093Z |
| gsd-2024-4122 | A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by th… | 2024-04-25T05:02:08.549865Z |
| gsd-2024-4130 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.548815Z |
| gsd-2024-4114 | A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.1… | 2024-04-25T05:02:08.547916Z |
| gsd-2024-4142 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.547368Z |
| gsd-2024-4147 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.547111Z |
| gsd-2024-4120 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been rated as critical. This i… | 2024-04-25T05:02:08.546405Z |
| gsd-2024-4153 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.546102Z |
| gsd-2024-4146 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.545881Z |
| gsd-2024-21793 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.052374Z |
| gsd-2024-32049 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:07.770640Z |
| gsd-2024-32761 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:07.707336Z |
| gsd-2024-33006 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.763047Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-500 | Malicious code in zabittest11 (npm) | 2026-01-25T06:56:37Z | 2026-02-02T05:56:31Z |
| mal-2026-615 | Malicious code in teaser-nav (npm) | 2026-01-31T13:35:28Z | 2026-02-02T05:56:30Z |
| mal-2026-612 | Malicious code in sharedclasses (npm) | 2026-01-30T23:47:34Z | 2026-02-02T05:56:30Z |
| mal-2026-600 | Malicious code in researchpoc2 (npm) | 2026-01-29T04:22:59Z | 2026-02-02T05:56:30Z |
| mal-2026-582 | Malicious code in somsodamsd (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| mal-2026-581 | Malicious code in somesomesomesome (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| mal-2026-580 | Malicious code in somesomesome (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| mal-2026-579 | Malicious code in skndkjasndkjan (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| mal-2026-576 | Malicious code in teslaone (npm) | 2026-01-28T07:49:34Z | 2026-02-02T05:56:30Z |
| mal-2026-575 | Malicious code in syntax-jsx (npm) | 2026-01-28T07:43:54Z | 2026-02-02T05:56:30Z |
| mal-2026-574 | Malicious code in syntax-flow (npm) | 2026-01-28T07:43:54Z | 2026-02-02T05:56:30Z |
| mal-2026-559 | Malicious code in syntax-async-functions (npm) | 2026-01-28T06:44:48Z | 2026-02-02T05:56:30Z |
| mal-2026-545 | Malicious code in testxhjhka (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| mal-2026-544 | Malicious code in testxhjhk (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| mal-2026-543 | Malicious code in tailwind-components-cli (npm) | 2026-01-27T07:59:05Z | 2026-02-02T05:56:30Z |
| mal-2026-542 | Malicious code in stylus.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:30Z |
| mal-2026-525 | Malicious code in sandbox-hooks (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:30Z |
| mal-2026-611 | Malicious code in mbo-letters-cl (npm) | 2026-01-30T23:13:08Z | 2026-02-02T05:56:29Z |
| mal-2026-597 | Malicious code in n8n-nodes-comfyui-illu (npm) | 2026-01-29T03:52:09Z | 2026-02-02T05:56:29Z |
| mal-2026-573 | Malicious code in primebeem-db (npm) | 2026-01-28T07:27:26Z | 2026-02-02T05:56:29Z |
| mal-2026-572 | Malicious code in pino-debugger (npm) | 2026-01-28T07:37:08Z | 2026-02-02T05:56:29Z |
| mal-2026-571 | Malicious code in okijuh (npm) | 2026-01-28T07:56:55Z | 2026-02-02T05:56:29Z |
| mal-2026-558 | Malicious code in n8n-zalo-fevox (npm) | 2026-01-28T06:59:38Z | 2026-02-02T05:56:29Z |
| mal-2026-557 | Malicious code in n8n-nodes-zalo-fevox (npm) | 2026-01-28T06:59:38Z | 2026-02-02T05:56:29Z |
| mal-2026-541 | Malicious code in pump.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| mal-2026-540 | Malicious code in n8n-nodes-xkwqpzrt-jmflhvbn-dsyocgxwmkelpt (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| mal-2026-539 | Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| mal-2026-538 | Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm) | 2026-01-27T07:57:56Z | 2026-02-02T05:56:29Z |
| mal-2026-537 | Malicious code in mysql2.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| mal-2026-536 | Malicious code in morgan.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2022-1258 | MariaDB: Schwachstelle ermöglicht Denial of Service | 2022-09-01T22:00:00.000+00:00 | 2025-12-28T23:00:00.000+00:00 |
| wid-sec-w-2022-0727 | Apache HTTP Server: Mehrere Schwachstellen | 2021-12-19T23:00:00.000+00:00 | 2025-12-28T23:00:00.000+00:00 |
| wid-sec-w-2022-0641 | MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-07-11T22:00:00.000+00:00 | 2025-12-28T23:00:00.000+00:00 |
| wid-sec-w-2022-0005 | zlib: Schwachstelle ermöglicht Codeausführung | 2022-04-03T22:00:00.000+00:00 | 2025-12-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2918 | Linksys E5600 Router: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-12-23T23:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2917 | Linksys E9450-SG Router: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-12-23T23:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2910 | Hitachi Ops Center: Mehrere Schwachstellen | 2025-12-22T23:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2677 | OPNsense: Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-25T23:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0935 | Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen | 2025-05-04T22:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0627 | Vercel Next.js: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-24T23:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2913 | Mattermost: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-22T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-2912 | D-LINK Router: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-22T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-2909 | IBM App Connect Enterprise: Mehrere Schwachstellen | 2025-12-22T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-2814 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-12-10T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-2718 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-2564 | Microsoft Windows und Windows Server: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0633 | Gitea: Mehrere Schwachstellen | 2025-03-25T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2024-0585 | Grafana: Schwachstelle ermöglicht Privilegieneskalation | 2024-03-07T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-2908 | FileZilla: Schwachstelle ermöglicht Codeausführung | 2025-12-21T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2907 | Red Hat Enterprise Linux AI (HDF5 ): Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-12-21T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2906 | ESRI ArcGIS Web AppBuilder: Schwachstelle ermöglicht Manipulation von Dateien | 2025-12-21T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2885 | Mozilla Firefox: Mehrere Schwachstellen | 2025-12-18T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2866 | Dropbear SSH: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-12-16T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2858 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-12-16T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2849 | Red Hat Enterprise Linux (Keylime): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-15T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2586 | Red Hat Enterprise Linux (python-kdcproxy): Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2537 | BusyBox (wget): Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen | 2025-11-10T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2198 | MediaWiki: Mehrere Schwachstellen | 2025-10-05T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2115 | WordPress Core: Mehrere Schwachstellen | 2025-09-23T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1833 | IBM WebSphere Application Server: Schwachstelle ermöglicht Denial of Service | 2025-08-13T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0417 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2024-10-17T13:19:16.185510Z | 2024-10-17T13:19:16.185510Z |
| ncsc-2024-0416 | Kwetsbaarheden verholpen in Oracle Financial Services Applications | 2024-10-17T13:18:45.385015Z | 2024-10-17T13:18:45.385015Z |
| ncsc-2024-0415 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2024-10-17T13:18:06.611153Z | 2024-10-17T13:18:06.611153Z |
| ncsc-2024-0414 | Kwetsbaarheden verholpen in Oracle Communications | 2024-10-17T13:17:52.103171Z | 2024-10-17T13:17:52.103171Z |
| ncsc-2024-0413 | Kwetsbaarheden verholpen in Oracle Commerce | 2024-10-17T13:17:19.736602Z | 2024-10-17T13:17:19.736602Z |
| ncsc-2024-0412 | Kwetsbaarheden verholpen in Oracle Peoplesoft | 2024-10-17T13:16:18.175855Z | 2024-10-17T13:16:18.175855Z |
| ncsc-2024-0411 | Kwetsbaarheden verholpen in Oracle Database producten | 2024-10-17T13:15:19.595269Z | 2024-10-17T13:15:19.595269Z |
| ncsc-2024-0410 | Kwetsbaarheden verholpen in Solarwinds Platform | 2024-10-17T06:09:32.053449Z | 2024-10-17T06:09:32.053449Z |
| ncsc-2024-0409 | Kwetsbaarheid verholpen in Solarwinds Web Helpdesk | 2024-10-17T06:08:32.057774Z | 2024-10-17T06:08:32.057774Z |
| ncsc-2024-0408 | Kwetsbaarheden verholpen in Splunk Enterprise | 2024-10-15T15:18:24.694416Z | 2024-10-15T15:18:24.694416Z |
| ncsc-2024-0407 | Kwetsbaarheden verholpen in Moxa systemen | 2024-10-14T12:14:38.572540Z | 2024-10-14T12:14:38.572540Z |
| ncsc-2024-0359 | Kwetsbaarheden verholpen in diverse producten van Veeam. | 2024-09-06T08:01:04.558202Z | 2024-10-11T09:18:53.784374Z |
| ncsc-2024-0406 | Kwetsbaarheden verholpen in Gitlab Enterprise Edition en Community Edition | 2024-10-11T08:23:31.975727Z | 2024-10-11T08:23:31.975727Z |
| ncsc-2024-0398 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Policy Secure | 2024-10-09T09:47:33.556285Z | 2024-10-11T07:03:14.760313Z |
| ncsc-2024-0386 | Kwetsbaarheden verholpen in Zimbra | 2024-10-02T07:02:43.365395Z | 2024-10-10T12:50:25.238470Z |
| ncsc-2024-0405 | Kwetsbaarheden verholpen in Palo Alto Expedition | 2024-10-10T12:02:12.890277Z | 2024-10-10T12:02:12.890277Z |
| ncsc-2024-0404 | Kwetsbaarheden verholpen in Juniper JunOS en JunOS Evolved | 2024-10-10T11:19:54.515278Z | 2024-10-10T11:19:54.515278Z |
| ncsc-2024-0403 | Kwetsbaarheid verholpen in Mozilla Firefox | 2024-10-10T07:20:38.171954Z | 2024-10-10T07:20:38.171954Z |
| ncsc-2024-0402 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2024-10-09T13:38:09.912496Z | 2024-10-09T13:38:09.912496Z |
| ncsc-2024-0401 | Kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile | 2024-10-09T11:21:34.434721Z | 2024-10-09T11:21:34.434721Z |
| ncsc-2024-0400 | Kwetsbaarheden verholpen in Ivanti Avalanche | 2024-10-09T10:45:10.558311Z | 2024-10-09T10:45:10.558311Z |
| ncsc-2024-0399 | Kwetsbaarheden verholpen in Ivanti Cloud Services Appliance | 2024-10-09T09:49:35.398654Z | 2024-10-09T09:49:35.398654Z |
| ncsc-2024-0397 | Kwetsbaarheden verholpen in Microsoft System Center | 2024-10-08T20:02:55.249830Z | 2024-10-08T20:02:55.249830Z |
| ncsc-2024-0396 | Kwetsbaarheden verholpen in Microsoft Office | 2024-10-08T20:00:57.142744Z | 2024-10-08T20:00:57.142744Z |
| ncsc-2024-0395 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2024-10-08T19:59:28.385237Z | 2024-10-08T19:59:28.385237Z |
| ncsc-2024-0394 | Kwetsbaarheden verholpen in Microsoft SQL Server Power BI Report Server | 2024-10-08T19:58:15.839568Z | 2024-10-08T19:58:15.839568Z |
| ncsc-2024-0393 | Kwetsbaarheden verholpen in Microsoft Azure componenten | 2024-10-08T19:57:08.426643Z | 2024-10-08T19:57:08.426643Z |
| ncsc-2024-0392 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-10-08T19:55:28.028805Z | 2024-10-08T19:55:28.028805Z |
| ncsc-2024-0391 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2024-10-08T13:55:56.095947Z | 2024-10-08T13:55:56.095947Z |
| ncsc-2024-0390 | Kwetsbaarheden verholpen in Siemens producten | 2024-10-08T13:49:37.486004Z | 2024-10-08T13:49:37.486004Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-522654 | SSA-522654: Privilege Escalation Vulnerability in Mendix SAML Module | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-208356 | SSA-208356: DFT File Parsing Vulnerabilities in Solid Edge | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-200951 | SSA-200951: Multiple Vulnerabilities in Third-Party Component libcurl of TIM Devices | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-133038 | SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-119468 | SSA-119468: Luxion KeyShot Vulnerabilities in Solid Edge | 2021-05-25T00:00:00Z | 2021-05-25T00:00:00Z |
| ssa-695540 | SSA-695540: ASM and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.2 | 2021-05-17T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-663999 | SSA-663999: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.1 | 2021-02-09T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-622830 | SSA-622830: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0 | 2021-01-12T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-940818 | SSA-940818: UltraVNC Vulnerabilities in SIMATIC HMIs/WinCC Products | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-919955 | SSA-919955: Information Disclosure Vulnerability in Mendix Database Replication Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-854248 | SSA-854248: Information Disclosure Vulnerability in Mendix Excel Importer Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-794542 | SSA-794542: Insecure Folder Permissions in SIMARIS Configuration | 2021-02-09T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-676775 | SSA-676775: Denial-of-Service Vulnerability in SIMATIC NET CP 343-1 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-646763 | SSA-646763: DNSpooq - Dnsmasq Vulnerabilities in SCALANCE and RUGGEDCOM Devices | 2021-01-19T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-594364 | SSA-594364: Denial-of-Service Vulnerability in SNMP Implementation of WinCC Runtime | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-478893 | SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) | 2020-12-08T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-116379 | SSA-116379: Denial-of-Service Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-875726 | SSA-875726: Privilege Escalation Vulnerability in Mendix | 2021-04-14T00:00:00Z | 2021-04-14T00:00:00Z |
| ssa-979775 | SSA-979775: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-853866 | SSA-853866: User Credentials Disclosure Vulnerability in Siveillance Video Open Network Bridge (ONVIF) | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-788287 | SSA-788287: Disclosure of Private Data | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-689942 | SSA-689942: Denial-of-Service and DLL Hijacking Vulnerabilities in Multiple SIMATIC Software Products | 2020-06-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-591405 | SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family | 2020-02-11T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-296266 | SSA-296266: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-292794 | SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-163226 | SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:4203 | Red Hat Security Advisory: OpenShift Container Platform 4.17.27 security and extras update | 2025-04-30T01:25:50+00:00 | 2026-02-17T07:59:16+00:00 |
| rhsa-2025:4188 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.2 | 2025-04-24T13:21:19+00:00 | 2026-02-17T07:59:16+00:00 |
| rhsa-2025:4177 | Red Hat Security Advisory: OpenShift Container Platform 4.14.51 bug fix and security update | 2025-04-30T07:11:57+00:00 | 2026-02-17T07:59:15+00:00 |
| rhsa-2025:4171 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.3 | 2025-04-24T11:52:49+00:00 | 2026-02-17T07:59:14+00:00 |
| rhsa-2025:4019 | Red Hat Security Advisory: OpenShift Container Platform 4.18.10 bug fix and security update | 2025-04-22T23:52:01+00:00 | 2026-02-17T07:59:12+00:00 |
| rhsa-2025:4018 | Red Hat Security Advisory: OpenShift Container Platform 4.18.10 security and extras update | 2025-04-22T14:51:20+00:00 | 2026-02-17T07:59:12+00:00 |
| rhsa-2025:4012 | Red Hat Security Advisory: OpenShift Container Platform 4.17.26 bug fix and security update | 2025-04-23T12:41:37+00:00 | 2026-02-17T07:59:12+00:00 |
| rhsa-2025:4008 | Red Hat Security Advisory: OpenShift Container Platform 4.16.39 bug fix and security update | 2025-04-23T05:51:53+00:00 | 2026-02-17T07:59:11+00:00 |
| rhsa-2025:4002 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.3 container image updates | 2025-04-17T22:09:36+00:00 | 2026-02-17T07:59:10+00:00 |
| rhsa-2025:3993 | Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.15.1-6 Update | 2025-04-17T14:42:51+00:00 | 2026-02-17T07:59:09+00:00 |
| rhsa-2025:3987 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.4 security updates | 2025-04-17T17:18:55+00:00 | 2026-02-17T07:59:09+00:00 |
| rhsa-2025:3930 | Red Hat Security Advisory: RHACS 4.7 security update | 2025-04-15T20:29:23+00:00 | 2026-02-17T07:59:09+00:00 |
| rhsa-2025:3959 | Red Hat Security Advisory: VolSync 0.11.2 security fixes and enhancements for RHEL 9 | 2025-04-16T21:10:52+00:00 | 2026-02-17T07:59:08+00:00 |
| rhsa-2025:3932 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.20.0 release | 2025-04-16T02:48:23+00:00 | 2026-02-17T07:59:07+00:00 |
| rhsa-2025:3929 | Red Hat Security Advisory: ACS 4.6 enhancement and security update | 2025-04-15T19:52:32+00:00 | 2026-02-17T07:59:07+00:00 |
| rhsa-2025:3928 | Red Hat Security Advisory: ACS 4.5 enhancement and security update | 2025-04-15T19:46:07+00:00 | 2026-02-17T07:59:05+00:00 |
| rhsa-2025:3922 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.10 | 2025-04-15T17:24:31+00:00 | 2026-02-17T07:59:05+00:00 |
| rhsa-2025:3907 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.1.5 | 2025-04-16T21:35:18+00:00 | 2026-02-17T07:59:05+00:00 |
| rhsa-2025:3906 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.13 | 2025-04-16T10:29:32+00:00 | 2026-02-17T07:59:05+00:00 |
| rhsa-2025:3905 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.7 | 2025-04-16T14:51:29+00:00 | 2026-02-17T07:59:03+00:00 |
| rhsa-2025:3886 | Red Hat Security Advisory: RHOAI 2.19.0 - Red Hat OpenShift AI | 2025-04-15T07:52:02+00:00 | 2026-02-17T07:59:03+00:00 |
| rhsa-2025:3863 | Red Hat Security Advisory: Red Hat multicluster global hub 1.3.3 bug fixes and container update | 2025-04-14T18:00:47+00:00 | 2026-02-17T07:59:03+00:00 |
| rhsa-2025:3833 | Red Hat Security Advisory: gvisor-tap-vsock security update | 2025-04-14T09:21:59+00:00 | 2026-02-17T07:59:02+00:00 |
| rhsa-2025:3814 | Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release | 2025-04-10T15:20:44+00:00 | 2026-02-17T07:59:01+00:00 |
| rhsa-2025:3813 | Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release | 2025-04-10T14:56:45+00:00 | 2026-02-17T07:59:01+00:00 |
| rhsa-2025:3808 | Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release | 2025-04-10T14:26:28+00:00 | 2026-02-17T07:59:00+00:00 |
| rhsa-2025:3811 | Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release | 2025-04-10T14:32:08+00:00 | 2026-02-17T07:58:59+00:00 |
| rhsa-2025:3798 | Red Hat Security Advisory: OpenShift Container Platform 4.17.25 bug fix and security update | 2025-04-16T17:46:00+00:00 | 2026-02-17T07:58:56+00:00 |
| rhsa-2025:3790 | Red Hat Security Advisory: OpenShift Container Platform 4.15.49 bug fix and security update | 2025-04-17T04:03:56+00:00 | 2026-02-17T07:58:55+00:00 |
| rhsa-2025:3789 | Red Hat Security Advisory: OpenShift Container Platform 4.15.49 security and extras update | 2025-04-16T02:18:49+00:00 | 2026-02-17T07:58:54+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-347-10 | Siemens SENTRON Powercenter 1000 | 2024-12-10T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-24-338-02 | Siemens RUGGEDCOM APE1808 | 2024-11-22T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-24-284-12 | Siemens Sentron Powercenter 1000 | 2024-10-08T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-21-103-11 | Siemens TIM 4R-IE Devices | 2021-04-13T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-20-105-06 | Siemens SIMOTICS, Desigo, APOGEE, and TALON | 2020-04-14T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-11-340-01 | ARC Informatique PcVue HMI/SCADA ActiveX Vulnerabilities | 2011-09-08T06:00:00.000000Z | 2025-06-09T19:53:05.359419Z |
| icsa-11-335-01 | 7-Technologies Data Server Denial of Service | 2011-09-03T06:00:00.000000Z | 2025-06-09T19:52:59.122386Z |
| icsa-11-319-01 | InduSoft Web Studio Vulnerabilities | 2011-08-18T06:00:00.000000Z | 2025-06-09T19:52:46.658796Z |
| icsa-11-314-01 | Safenet Sentinel and 7-T Input Sanitization Vulnerability | 2011-08-13T06:00:00.000000Z | 2025-06-09T19:52:40.428887Z |
| icsa-11-307-01 | Schneider Electric Vijeo Historian Web Server Multiple Vulnerabilities | 2011-08-06T06:00:00.000000Z | 2025-06-09T19:52:15.424002Z |
| icsa-11-298-01a | Sielco Sistemi Winlog Buffer Overflow | 2011-07-28T06:00:00.000000Z | 2025-06-09T19:52:09.187490Z |
| icsa-11-294-01 | Progea Movicon Power HMI Vulnerabilities | 2011-07-24T06:00:00.000000Z | 2025-06-09T19:51:50.522681Z |
| icsa-11-280-01 | Cogent DataHub Vulnerabilities | 2011-07-10T06:00:00.000000Z | 2025-06-09T19:51:25.265310Z |
| icsa-11-279-04 | Beckhoff TwinCAT Read Access Violation | 2011-07-09T06:00:00.000000Z | 2025-06-09T19:51:19.034220Z |
| icsa-11-279-03a | Unitronics UNIOPC Server Input Handling Vulnerability | 2011-07-09T06:00:00.000000Z | 2025-06-09T19:51:12.801318Z |
| icsa-11-279-02 | CitectSCADA and Mitsubishi MX4 SCADA Batch Server Buffer Overflow | 2011-07-09T06:00:00.000000Z | 2025-06-09T19:51:06.585776Z |
| icsa-11-279-01 | Advantech OPC Server Buffer Overflow | 2011-07-09T06:00:00.000000Z | 2025-06-09T19:51:00.349798Z |
| icsa-11-277-01 | Schneider Electric UnitelWay Buffer Overflow | 2011-07-07T06:00:00.000000Z | 2025-06-09T19:50:53.798376Z |
| icsa-14-189-01 | Yokogawa Centum Buffer Overflow Vulnerability | 2014-04-10T06:00:00.000000Z | 2025-06-09T19:50:47.578955Z |
| icsa-14-175-01 | Honeywell FALCON XLWeb Controllers Vulnerabilities | 2014-03-27T06:00:00.000000Z | 2025-06-09T19:50:34.818730Z |
| icsa-14-154-01 | COPA-DATA Improper Input Validation | 2014-03-06T07:00:00.000000Z | 2025-06-09T19:50:22.034930Z |
| icsa-14-149-02 | Cogent DataHub Vulnerabilities | 2014-03-01T07:00:00.000000Z | 2025-06-09T19:50:03.330208Z |
| icsa-14-149-01 | Triangle MicroWorks Uncontrolled Resource Consumption | 2014-03-01T07:00:00.000000Z | 2025-06-09T19:49:50.848677Z |
| icsa-14-135-05 | OpenSSL Vulnerability | 2014-02-15T07:00:00.000000Z | 2025-06-09T19:49:44.423856Z |
| icsa-14-135-04 | Unified Automation OPC SDK OpenSSL Vulnerability | 2014-02-15T07:00:00.000000Z | 2025-06-09T19:49:38.008876Z |
| icsa-14-135-03a | Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A) | 2014-02-15T07:00:00.000000Z | 2025-06-09T19:49:31.780137Z |
| icsa-14-135-02 | Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability | 2014-02-15T07:00:00.000000Z | 2025-06-09T19:49:25.382123Z |
| icsa-14-135-01 | CSWorks Software SQL Injection Vulnerability | 2014-02-15T07:00:00.000000Z | 2025-06-09T19:49:19.141034Z |
| icsa-14-133-02 | Emerson DeltaV Vulnerabilities | 2014-02-13T07:00:00.000000Z | 2025-06-09T19:49:06.355363Z |
| icsa-14-133-01 | Yokogawa Multiple Products Vulnerabilities | 2014-02-13T07:00:00.000000Z | 2025-06-09T19:48:41.450208Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-csw-auth-openapi-ktndjdnx | Cisco Secure Workload Authenticated OpenAPI Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-iox-8whgn5dl | Cisco IOx Application Hosting Environment Command Injection Vulnerability | 2023-02-01T16:00:00+00:00 | 2023-06-01T15:34:21+00:00 |
| cisco-sa-cuis-xss-omm8jybx | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-05-30T14:22:18+00:00 |
| cisco-sa-ftd-file-write-shvcmqvc | Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability | 2021-10-27T16:00:00+00:00 | 2023-05-26T11:54:17+00:00 |
| cisco-sa-iosxe-info-disc-nrorxjo | Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability | 2022-09-28T16:00:00+00:00 | 2023-05-17T18:23:37+00:00 |
| cisco-sa-ssm-sql-x9mmjsyh | Cisco Smart Software Manager On-Prem SQL Injection Vulnerability | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-sg-web-multi-s9g4nkgv | Cisco Small Business Series Switches Buffer Overflow Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-xxe-inj-696oztcm | Cisco Identity Services Engine XML External Entity Injection Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-traversal-ztugmyhu | Cisco Identity Services Engine Path Traversal Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-injection-srqnseu9 | Cisco Identity Services Engine Command Injection Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-file-dwnld-srcdnkd2 | Cisco Identity Services Engine Arbitrary File Download Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-file-delete-read-pk5ghddd | Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-dnac-multiple-ktqkgu3 | Cisco DNA Center Software API Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-cbw-auth-bypass-ggnafdz | Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-pi-epnm-erpwaxle | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-05-15T13:11:25+00:00 |
| cisco-sa-c9300-spi-ace-yejygnnq | Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-05-11T15:34:52+00:00 |
| cisco-sa-iox-priv-escalate-xg8zkypk | Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-05-08T15:01:45+00:00 |
| cisco-sa-spa-unauth-upgrade-uqhytww | Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability | 2023-05-03T16:00:00+00:00 | 2023-05-03T16:00:00+00:00 |
| cisco-sa-ipp-oobwrite-8cmf5r7u | Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol Stack Overflow Vulnerability | 2022-12-08T16:00:00+00:00 | 2023-04-27T21:07:18+00:00 |
| cisco-sa-pcd-xss-jdxpjm7 | Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability | 2023-04-26T16:00:00+00:00 | 2023-04-26T16:00:00+00:00 |
| cisco-sa-cisco-pdng-dos-kmzwey2q | Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-19T20:31:01+00:00 |
| cisco-sa-staros-ssh-privesc-bmwejc3h | Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-wfnqmyhn | Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-roomos-file-write-rhkwegkf | Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-ind-caelfk6v | Cisco Industrial Network Director Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cml-auth-bypass-4fucceg5 | Cisco Modeling Labs External Authentication Bypass Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-bw-tcp-dos-kedjcxls | Cisco BroadWorks Network Server TCP Denial of Service Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cisco-pi-epnm-xss-mzshh2j | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-04-06T15:31:34+00:00 |
| cisco-sa-sb-rv01x_rv32x_rce-nzagwwdd | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T20:30:30+00:00 |
| cisco-sa-wbx-sxss-fupl-64uhbcm5 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-46732 | drm/amd/display: Assign linear_pitch_alignment even for VM | 2024-09-01T07:00:00.000Z | 2026-02-21T02:44:19.000Z |
| msrc_cve-2025-21904 | caif_virtio: fix wrong pointer check in cfv_probe() | 2025-04-02T00:00:00.000Z | 2026-02-21T02:44:14.000Z |
| msrc_cve-2024-47619 | tranport: TLS host name wildcard matching too lax | 2025-05-02T00:00:00.000Z | 2026-02-21T02:43:29.000Z |
| msrc_cve-2025-21905 | wifi: iwlwifi: limit printed string from FW file | 2025-04-02T00:00:00.000Z | 2026-02-21T02:43:05.000Z |
| msrc_cve-2024-46784 | net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup | 2024-09-01T07:00:00.000Z | 2026-02-21T02:43:02.000Z |
| msrc_cve-2025-21690 | scsi: storvsc: Ratelimit warning logs to prevent VM denial of service | 2025-02-02T00:00:00.000Z | 2026-02-21T02:42:19.000Z |
| msrc_cve-2025-4287 | PyTorch nccl.py torch.cuda.nccl.reduce denial of service | 2025-05-02T00:00:00.000Z | 2026-02-21T02:42:13.000Z |
| msrc_cve-2024-46728 | drm/amd/display: Check index for aux_rd_interval before using | 2024-09-01T07:00:00.000Z | 2026-02-21T02:41:47.000Z |
| msrc_cve-2025-21912 | gpio: rcar: Use raw_spinlock to protect register access | 2025-04-02T00:00:00.000Z | 2026-02-21T02:41:45.000Z |
| msrc_cve-2024-46765 | ice: protect XDP configuration with a mutex | 2024-09-01T07:00:00.000Z | 2026-02-21T02:40:42.000Z |
| msrc_cve-2025-21915 | cdx: Fix possible UAF error in driver_override_show() | 2025-04-02T00:00:00.000Z | 2026-02-21T02:40:38.000Z |
| msrc_cve-2024-53186 | ksmbd: fix use-after-free in SMB request handling | 2024-12-02T00:00:00.000Z | 2026-02-21T02:40:37.000Z |
| msrc_cve-2024-56538 | drm: zynqmp_kms: Unplug DRM device before removal | 2024-12-02T00:00:00.000Z | 2026-02-21T02:39:51.000Z |
| msrc_cve-2024-46746 | HID: amd_sfh: free driver_data after destroying hid device | 2024-09-01T07:00:00.000Z | 2026-02-21T02:39:40.000Z |
| msrc_cve-2025-22081 | fs/ntfs3: Fix a couple integer overflows on 32bit systems | 2025-04-02T00:00:00.000Z | 2026-02-21T02:39:33.000Z |
| msrc_cve-2024-8176 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | 2025-03-02T00:00:00.000Z | 2026-02-21T02:38:52.000Z |
| msrc_cve-2025-22070 | fs/9p: fix NULL pointer dereference on mkdir | 2025-04-02T00:00:00.000Z | 2026-02-21T02:38:49.000Z |
| msrc_cve-2024-53173 | NFSv4.0: Fix a use-after-free problem in the asynchronous open() | 2024-12-02T00:00:00.000Z | 2026-02-21T02:38:41.000Z |
| msrc_cve-2024-46680 | Bluetooth: btnxpuart: Fix random crash seen while removing driver | 2024-09-01T07:00:00.000Z | 2026-02-21T02:38:17.000Z |
| msrc_cve-2025-22066 | ASoC: imx-card: Add NULL check in imx_card_probe() | 2025-04-02T00:00:00.000Z | 2026-02-21T02:38:07.000Z |
| msrc_cve-2024-46772 | drm/amd/display: Check denominator crb_pipes before used | 2024-09-01T07:00:00.000Z | 2026-02-21T02:37:29.000Z |
| msrc_cve-2025-22027 | media: streamzap: fix race between device disconnection and urb callback | 2025-04-02T00:00:00.000Z | 2026-02-21T02:37:21.000Z |
| msrc_cve-2025-21961 | eth: bnxt: fix truesize for mb-xdp-pass case | 2025-04-02T00:00:00.000Z | 2026-02-21T02:36:58.000Z |
| msrc_cve-2024-46678 | bonding: change ipsec_lock from spin lock to mutex | 2024-09-01T07:00:00.000Z | 2026-02-21T02:36:23.000Z |
| msrc_cve-2025-21968 | drm/amd/display: Fix slab-use-after-free on hdcp_work | 2025-04-02T00:00:00.000Z | 2026-02-21T02:36:14.000Z |
| msrc_cve-2024-55549 | xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue | 2025-03-02T00:00:00.000Z | 2026-02-21T02:36:12.000Z |
| msrc_cve-2025-22020 | memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove | 2025-04-02T00:00:00.000Z | 2026-02-21T02:36:08.000Z |
| msrc_cve-2025-22018 | atm: Fix NULL pointer dereference | 2025-04-02T00:00:00.000Z | 2026-02-21T02:35:24.000Z |
| msrc_cve-2024-46782 | ila: call nf_unregister_net_hooks() sooner | 2024-09-01T07:00:00.000Z | 2026-02-21T02:35:19.000Z |
| msrc_cve-2025-21962 | cifs: Fix integer overflow while processing closetimeo mount option | 2025-04-02T00:00:00.000Z | 2026-02-21T02:35:04.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201302-0234 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:10:48.790000Z |
| var-201110-0393 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2025-12-22T22:10:47.502000Z |
| var-202108-2172 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2025-12-22T22:10:46.555000Z |
| var-200706-0660 | cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabl… | 2025-12-22T22:10:46.267000Z |
| var-200703-0018 | Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to… | 2025-12-22T22:10:45.506000Z |
| var-201903-0440 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2025-12-22T22:10:44.512000Z |
| var-200711-0538 | Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header fro… | 2025-12-22T22:10:43.843000Z |
| var-202004-0061 | The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7… | 2025-12-22T22:10:11.211000Z |
| var-201806-1462 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2025-12-22T22:09:41.051000Z |
| var-200901-0714 | OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFi… | 2025-12-22T22:09:40.752000Z |
| var-201304-0373 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T22:09:40.680000Z |
| var-201609-0595 | The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly … | 2025-12-22T22:09:40.424000Z |
| var-201204-0092 | Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Poli… | 2025-12-22T22:09:34.723000Z |
| var-201506-0268 | The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before… | 2025-12-22T22:09:34.484000Z |
| var-201904-1344 | Multiple memory corruption issues were addressed with improved input validation. This iss… | 2025-12-22T22:09:02.315000Z |
| var-201501-0436 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1… | 2025-12-22T22:08:58.262000Z |
| var-201302-0264 | Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.… | 2025-12-22T22:08:57.438000Z |
| var-200701-0320 | The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other … | 2025-12-22T22:08:53.934000Z |
| var-200003-0033 | The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (… | 2025-12-22T22:08:02.182000Z |
| var-200609-1306 | The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not prope… | 2025-12-22T22:08:01.985000Z |
| var-200612-0136 | Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 2005… | 2025-12-22T22:07:30.751000Z |
| var-201501-0737 | Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and o… | 2025-12-22T22:06:30.112000Z |
| var-200910-0505 | Use-after-free vulnerability in the abstract file-descriptor handling interface in the cu… | 2025-12-22T22:06:29.433000Z |
| var-201601-0030 | The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in… | 2025-12-22T22:05:48.047000Z |
| var-201704-1397 | The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certa… | 2025-12-22T22:05:16.966000Z |
| var-200912-0769 | ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause … | 2025-12-22T22:05:16.233000Z |
| var-201006-1149 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2025-12-22T22:05:15.518000Z |
| var-202003-1784 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2025-12-22T22:05:11.482000Z |
| var-201910-1485 | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. tcpdum… | 2025-12-22T22:05:11.311000Z |
| var-202009-0037 | A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP… | 2025-12-22T22:05:05.489000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000069 | Multiple vulnerabilities in SoftEther VPN and PacketiX VPN | 2023-07-03T15:07+09:00 | 2024-05-22T17:47+09:00 |
| jvndb-2023-000096 | Improper restriction of XML external entity references (XXE) in FD Application | 2023-10-02T12:36+09:00 | 2024-05-22T15:37+09:00 |
| jvndb-2023-003770 | DoS Vulnerability in Hitachi Ops Center Common Services | 2023-10-04T15:23+09:00 | 2024-05-22T15:31+09:00 |
| jvndb-2023-003769 | Information Exposure Vulnerability in Hitachi Ops Center Administrator | 2023-10-04T15:23+09:00 | 2024-05-22T15:20+09:00 |
| jvndb-2023-000095 | Shihonkanri Plus vulnerable to relative path traversal | 2023-09-27T13:49+09:00 | 2024-05-21T17:16+09:00 |
| jvndb-2023-000097 | Citadel WebCit vulnerable to cross-site scripting on Instant Messaging facility | 2023-10-04T14:07+09:00 | 2024-05-21T17:08+09:00 |
| jvndb-2024-000046 | Android App "TP-Link Tether" and "TP-Link Tapo" vulnerable to improper server certificate verification | 2024-05-21T13:33+09:00 | 2024-05-21T13:33+09:00 |
| jvndb-2023-004294 | Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL | 2023-10-27T16:10+09:00 | 2024-05-20T17:49+09:00 |
| jvndb-2023-000098 | e-Gov Client Application fails to restrict custom URL schemes properly | 2023-10-06T14:57+09:00 | 2024-05-17T17:55+09:00 |
| jvndb-2024-003188 | Panasonic KW Watcher vulnerable to memory buffer error | 2024-05-17T15:46+09:00 | 2024-05-17T15:46+09:00 |
| jvndb-2023-021762 | Ruijie BCR810W/BCR860 vulnerable to OS command injection | 2024-05-17T13:54+09:00 | 2024-05-17T13:54+09:00 |
| jvndb-2024-000049 | WordPress Plugin "Download Plugins and Themes from Dashboard" vulnerable to path traversal | 2024-05-17T13:33+09:00 | 2024-05-17T13:33+09:00 |
| jvndb-2024-003187 | Multiple vulnerabilities in Field Logic DataCube | 2024-05-17T12:05+09:00 | 2024-05-17T12:05+09:00 |
| jvndb-2023-003913 | Multiple vulnerabilities in JTEKT ELECTRONICS OnSinView2 | 2023-10-18T14:13+09:00 | 2024-05-16T17:28+09:00 |
| jvndb-2023-003788 | Out-of-bounds read vulnerability in Keyence KV STUDIO and KV REPLAY VIEWER | 2023-10-11T15:23+09:00 | 2024-05-16T17:09+09:00 |
| jvndb-2023-000093 | Pyramid vulnerable to directory traversal | 2023-09-11T13:53+09:00 | 2024-05-16T16:52+09:00 |
| jvndb-2023-000102 | Multiple vulnerabilities in JustSystems products | 2023-10-19T15:16+09:00 | 2024-05-16T16:44+09:00 |
| jvndb-2023-000087 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to Regular expression Denial-of-Service (ReDoS) | 2023-08-24T14:12+09:00 | 2024-05-15T17:12+09:00 |
| jvndb-2023-000104 | Improper restriction of XML external entity references (XXE) in Proself | 2023-10-18T18:00+09:00 | 2024-05-15T17:08+09:00 |
| jvndb-2014-000006 | EC-CUBE vulnerable to authorization bypass | 2014-01-22T15:28+09:00 | 2024-05-15T14:59+09:00 |
| jvndb-2023-000091 | Multiple vulnerabilities in F-RevoCRM | 2023-09-05T15:51+09:00 | 2024-05-14T18:06+09:00 |
| jvndb-2023-000089 | Multiple vulnerabilities in i-PRO VI Web Client | 2023-08-31T14:13+09:00 | 2024-05-14T18:05+09:00 |
| jvndb-2023-000088 | Multiple vulnerabilities in SHIRASAGI | 2023-09-04T13:41+09:00 | 2024-05-14T17:58+09:00 |
| jvndb-2014-000123 | GIGAPOD vulnerable to denial-of-service (DoS) | 2014-10-16T13:51+09:00 | 2024-05-13T18:10+09:00 |
| jvndb-2024-002342 | Central Dogma vulnerable to cross-site scripting | 2024-05-13T17:27+09:00 | 2024-05-13T17:27+09:00 |
| jvndb-2024-000047 | Multiple vulnerabilities in Cybozu Garoon | 2024-05-13T15:19+09:00 | 2024-05-13T15:19+09:00 |
| jvndb-2023-003956 | Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Designer | 2023-10-24T16:11+09:00 | 2024-05-10T17:47+09:00 |
| jvndb-2023-000105 | Movable Type vulnerable to cross-site scripting | 2023-10-25T15:18+09:00 | 2024-05-10T17:47+09:00 |
| jvndb-2024-000045 | "OfferBox" App uses a hard-coded secret key | 2024-05-10T15:11+09:00 | 2024-05-10T15:11+09:00 |
| jvndb-2024-003181 | Hidden Functionality vulnerability in DT900 | 2024-05-10T13:59+09:00 | 2024-05-10T13:59+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4478-1 | Security update for salt | 2025-12-18T12:10:32Z | 2025-12-18T12:10:32Z |
| suse-su-2025:4477-1 | Security update for salt | 2025-12-18T12:09:42Z | 2025-12-18T12:09:42Z |
| suse-su-2025:4476-1 | Security update for salt | 2025-12-18T12:08:58Z | 2025-12-18T12:08:58Z |
| suse-su-2025:4475-1 | Security update for salt | 2025-12-18T12:08:19Z | 2025-12-18T12:08:19Z |
| suse-su-2025:4474-1 | Security update 5.0.6 for Multi-Linux Manager Salt Bundle | 2025-12-18T12:07:57Z | 2025-12-18T12:07:57Z |
| suse-su-2025:4467-1 | Security update 5.0.6 for Multi-Linux Manager Salt Bundle | 2025-12-18T12:01:11Z | 2025-12-18T12:01:11Z |
| suse-su-2025:4466-1 | Security update 5.0.6 for Multi-Linux Manager Salt Bundle | 2025-12-18T11:59:53Z | 2025-12-18T11:59:53Z |
| suse-su-2025:4458-1 | Security update 5.0.6 for Multi-Linux Manager Client Tools | 2025-12-18T11:57:30Z | 2025-12-18T11:57:30Z |
| suse-su-2025:4457-1 | Security update 5.0.6 for Multi-Linux Manager Client Tools | 2025-12-18T11:56:34Z | 2025-12-18T11:56:34Z |
| suse-su-2025:4450-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:50:27Z | 2025-12-18T08:50:27Z |
| suse-su-2025:4449-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:50:22Z | 2025-12-18T08:50:22Z |
| suse-su-2025:4448-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:50:16Z | 2025-12-18T08:50:16Z |
| suse-su-2025:4447-1 | Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle | 2025-12-18T08:50:09Z | 2025-12-18T08:50:09Z |
| suse-su-2025:4446-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:49:58Z | 2025-12-18T08:49:58Z |
| suse-su-2025:4445-1 | Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle | 2025-12-18T08:49:43Z | 2025-12-18T08:49:43Z |
| suse-su-2025:4444-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:49:35Z | 2025-12-18T08:49:35Z |
| suse-su-2025:4442-1 | Security update for glib2 | 2025-12-17T16:17:51Z | 2025-12-17T16:17:51Z |
| suse-su-2025:4441-1 | Security update for glib2 | 2025-12-17T16:15:21Z | 2025-12-17T16:15:21Z |
| suse-su-2025:4440-1 | Security update for wireshark | 2025-12-17T15:44:39Z | 2025-12-17T15:44:39Z |
| suse-su-2025:4439-1 | Security update for poppler | 2025-12-17T15:44:25Z | 2025-12-17T15:44:25Z |
| suse-su-2025:4438-1 | Security update for mariadb | 2025-12-17T15:43:51Z | 2025-12-17T15:43:51Z |
| suse-su-2025:4437-1 | Security update for helm | 2025-12-17T14:44:51Z | 2025-12-17T14:44:51Z |
| suse-su-2025:4436-1 | Security update for libpng16 | 2025-12-17T13:56:16Z | 2025-12-17T13:56:16Z |
| suse-su-2025:4435-1 | Security update for usbmuxd | 2025-12-17T13:32:55Z | 2025-12-17T13:32:55Z |
| suse-su-2025:4434-1 | Security update for poppler | 2025-12-17T13:31:05Z | 2025-12-17T13:31:05Z |
| suse-su-2025:4433-1 | Security update for python39 | 2025-12-17T13:20:25Z | 2025-12-17T13:20:25Z |
| suse-su-2025:4432-1 | Security update for libpng12 | 2025-12-17T13:07:22Z | 2025-12-17T13:07:22Z |
| suse-su-2025:4429-1 | Security update for ImageMagick | 2025-12-17T11:26:56Z | 2025-12-17T11:26:56Z |
| suse-su-2025:4428-1 | Security update for ImageMagick | 2025-12-17T11:26:21Z | 2025-12-17T11:26:21Z |
| suse-su-2025:4427-1 | Security update for ImageMagick | 2025-12-17T11:24:34Z | 2025-12-17T11:24:34Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:20117-1 | Security update for trivy | 2025-11-27T12:27:44Z | 2025-11-27T12:27:44Z |
| opensuse-su-2025:20100-1 | Security update for libvirt | 2025-11-27T10:23:20Z | 2025-11-27T10:23:20Z |
| opensuse-su-2025:20099-1 | Security update for xwayland | 2025-11-27T10:11:16Z | 2025-11-27T10:11:16Z |
| opensuse-su-2025:15778-1 | libwireshark19-4.6.1-2.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15777-1 | python311-spotipy-2.25.2-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15776-1 | python311-pypdf-6.4.0-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15775-1 | opa-1.11.0-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15774-1 | netbird-0.60.3-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15773-1 | cheat-4.4.2-3.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:20091-1 | Security update for the Linux Kernel | 2025-11-26T17:04:24Z | 2025-11-26T17:04:24Z |
| opensuse-su-2025:20090-1 | Security update for curl | 2025-11-26T14:30:14Z | 2025-11-26T14:30:14Z |
| opensuse-su-2025:20089-1 | Security update for mysql-connector-java | 2025-11-26T08:12:25Z | 2025-11-26T08:12:25Z |
| opensuse-su-2025:15772-1 | kubevirt-container-disk-1.6.3-1.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:15771-1 | git-bug-0.10.1-3.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:15770-1 | bash-git-prompt-2.7.1-4.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:20083-1 | Security update for lasso | 2025-11-25T13:27:21Z | 2025-11-25T13:27:21Z |
| opensuse-su-2025:20081-1 | Security update for the Linux Kernel | 2025-11-25T07:35:00Z | 2025-11-25T07:35:00Z |
| opensuse-su-2025:15769-1 | libwireshark19-4.6.1-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15768-1 | python310-3.10.19-2.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15767-1 | openbao-2.4.4-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15766-1 | libsoup-3_0-0-3.6.5-9.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15765-1 | gnutls-3.8.11-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15764-1 | etcd-for-k8s1.32-3.5.24-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15763-1 | cloudflared-2025.11.1-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15762-1 | librnp0-0.18.1-1.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15761-1 | rclone-1.72.0-1.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15760-1 | python311-3.11.14-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15759-1 | libIex-3_4-33-3.4.3-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15758-1 | fontforge-20251009-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15757-1 | curl-8.17.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-python-2024-6923 | Email header injection due to unquoted newlines | 2024-08-19T09:33:54.548Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-6232 | Regular-expression DoS when parsing TarFile headers | 2024-09-16T12:04:20.671Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-4032 | Incorrect IPv4 and IPv6 private ranges | 2024-06-20T11:17:24.961Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-11168 | Improper validation of IPv6 and IPvFuture addresses | 2024-12-10T11:25:45.323Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-0450 | Quoted zip-bomb protection for zipfile | 2024-12-13T12:41:10.011Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-0397 | Memory race condition in ssl.SSLContext certificate store methods | 2024-06-20T11:18:14.556Z | 2025-11-06T13:25:46.476Z |
| bit-python-2023-6597 | 2024-12-13T12:41:26.412Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2023-40217 | 2024-03-06T11:03:14.481Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2023-27043 | 2024-10-22T12:06:11.918Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2023-24329 | 2024-03-06T11:04:03.580Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2022-42919 | 2024-03-06T11:05:06.167Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2022-0391 | 2024-03-06T11:05:40.083Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-4189 | 2024-03-06T11:05:50.693Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-3737 | 2024-03-06T11:06:04.065Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-3733 | 2024-03-06T11:06:14.679Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-3426 | 2024-03-06T11:06:24.568Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-29921 | 2024-03-06T11:06:43.578Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-28861 | 2024-03-06T11:06:51.991Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2020-10735 | 2024-03-06T11:08:16.884Z | 2025-11-06T13:25:46.476Z | |
| bit-postgresql-2024-10979 | PostgreSQL PL/Perl environment variable changes execute arbitrary code | 2024-11-16T07:16:38.797Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2024-10978 | PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID | 2024-11-16T07:16:45.984Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2024-10977 | PostgreSQL libpq retains an error message from man-in-the-middle | 2024-11-16T07:16:52.278Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2024-10976 | PostgreSQL row security below e.g. subqueries disregards user ID changes | 2024-11-16T07:16:59.886Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2023-5870 | Postgresql: role pg_signal_backend can signal certain superuser processes. | 2024-03-06T11:02:29.084Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2023-5869 | Postgresql: buffer overrun from integer overflow in array modification | 2024-03-06T11:02:41.294Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2023-5868 | Postgresql: memory disclosure in aggregate function calls | 2024-03-06T11:02:52.082Z | 2025-11-06T13:25:46.476Z |
| bit-pip-2025-8869 | Fallback tar extraction in pip doesn't check symbolic links point to extraction directory | 2025-09-26T08:48:13.610Z | 2025-11-06T13:25:46.476Z |
| bit-pip-2023-5752 | Mercurial configuration injectable in repo revision when installing via pip | 2024-03-06T11:01:43.973Z | 2025-11-06T13:25:46.476Z |
| bit-phpmyadmin-2025-24530 | 2025-04-24T07:21:48.097Z | 2025-11-06T13:25:46.476Z | |
| bit-phpmyadmin-2025-24529 | 2025-04-24T07:21:41.489Z | 2025-11-06T13:25:46.476Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-04445 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976459) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04444 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976458) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04443 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976457) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04442 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976455) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-05137 | Kentico Xperience存在未明漏洞 | 2025-03-28 | 2026-01-20 |
| cnvd-2026-05136 | Kentico Xperience跨站脚本漏洞 | 2025-03-28 | 2026-01-20 |
| cnvd-2026-05135 | Kentico Xperience身份验证绕过漏洞 | 2025-03-28 | 2026-01-20 |
| cnvd-2026-05134 | Kentico Xperience身份验证绕过漏洞(CNVD-2026-05134) | 2025-03-28 | 2026-01-20 |
| cnvd-2026-05133 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05133) | 2025-04-10 | 2026-01-20 |
| cnvd-2026-05132 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05132) | 2025-04-16 | 2026-01-20 |
| cnvd-2026-05131 | Kentico Xperience拒绝服务漏洞 | 2025-04-16 | 2026-01-20 |
| cnvd-2026-05130 | Kentico Xperience信息泄露漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05129 | Kentico Xperience文件上传漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05128 | Kentico Xperience HTML注入漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05127 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05127) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05126 | Kentico Xperience富文本编辑器组件跨站脚本漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05125 | Kentico Xperience电子邮件营销模板跨站脚本漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05124 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05124) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05123 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05123) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05122 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05122) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05121 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05121) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05120 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05120) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05119 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05119) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05118 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05118) | 2026-01-19 | 2026-01-20 |
| cnvd-2026-06433 | D-Link DIR-806A命令注入漏洞 | 2026-01-19 | 2026-01-19 |
| cnvd-2026-05363 | ChurchCRM EventEditor.php页面SQL注入漏洞 | 2025-05-13 | 2026-01-19 |
| cnvd-2026-05362 | ChurchCRM 时间型盲SQL注入漏洞 | 2025-12-03 | 2026-01-19 |
| cnvd-2026-05361 | ChurchCRM legacy端点SQL注入漏洞 | 2025-12-19 | 2026-01-19 |
| cnvd-2026-05360 | ChurchCRM跨站脚本漏洞(CNVD-2026-0536090) | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05359 | ChurchCRM信息泄露漏洞 | 2025-12-25 | 2026-01-19 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0835 | Multiples vulnérabilités dans OpenSSL | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0834 | Multiples vulnérabilités dans Mozilla Firefox | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0833 | Multiples vulnérabilités dans Joomla! | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0832 | Multiples vulnérabilités dans les produits VMware | 2025-09-30T00:00:00.000000 | 2025-09-30T00:00:00.000000 |
| certfr-2025-avi-0831 | Vulnérabilité dans les produits Apple | 2025-09-30T00:00:00.000000 | 2025-09-30T00:00:00.000000 |
| certfr-2025-avi-0830 | Vulnérabilité dans Tenable Patch Management | 2025-09-29T00:00:00.000000 | 2025-09-29T00:00:00.000000 |
| certfr-2025-avi-0829 | Vulnérabilité dans Apereo CAS | 2025-09-29T00:00:00.000000 | 2025-09-29T00:00:00.000000 |
| certfr-2025-avi-0828 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0827 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0826 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0825 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0824 | Multiples vulnérabilités dans les produits FoxIT | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0823 | Vulnérabilité dans Liferay | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0822 | Multiples vulnérabilités dans Tenable Security Center | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0821 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0820 | Multiples vulnérabilités dans GitLab | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0819 | Multiples vulnérabilités dans les produits Cisco | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0818 | Multiples vulnérabilités dans Cisco IOS et IOS XE | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0817 | Vulnérabilité dans Microsoft OmniParser | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0816 | Vulnérabilité dans StormShield Network Security | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0815 | Vulnérabilité dans Liferay | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| certfr-2025-avi-0814 | Multiples vulnérabilités dans Google Chrome | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| certfr-2025-avi-0813 | Vulnérabilité dans SolarWinds Web Help Desk | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0812 | Vulnérabilité dans Synology Safe Access pour SRM | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0811 | Multiples vulnérabilités dans Liferay | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0810 | Vulnérabilité dans Liferay | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| certfr-2025-avi-0809 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| certfr-2025-avi-0808 | Multiples vulnérabilités dans les produits IBM | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0807 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0806 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |