Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-32228 |
N/A
|
Apache Airflow: Users with asset materialization permi… |
Apache Software Foundation |
Apache Airflow |
2026-04-18T06:19:47.512Z | 2026-04-20T15:54:05.072Z |
| CVE-2026-41253 |
6.9 (3.1)
|
In iTerm2 through 3.6.9, displaying a .txt file c… |
iTerm2 |
iTerm2 |
2026-04-18T05:27:08.202Z | 2026-04-20T15:52:10.357Z |
| CVE-2026-6048 |
6.4 (3.1)
|
Flipbox Addon for Elementor <= 2.1.1 - Authenticated (… |
dragwyb |
Flipbox Addon for Elementor |
2026-04-18T03:37:05.751Z | 2026-04-20T13:46:08.081Z |
| CVE-2026-6518 |
8.8 (3.1)
|
CMP – Coming Soon & Maintenance Plugin by NiteoThemes … |
niteo |
CMP – Coming Soon & Maintenance Plugin by NiteoThemes |
2026-04-18T03:37:04.707Z | 2026-04-20T13:46:08.222Z |
| CVE-2026-4801 |
6.4 (3.1)
|
Page Builder Gutenberg Blocks <= 3.1.16 - Authenticate… |
godaddy |
Page Builder Gutenberg Blocks – CoBlocks |
2026-04-18T03:37:03.859Z | 2026-04-20T14:42:38.120Z |
| CVE-2026-40494 |
9.8 (3.1)
|
SAIL has heap buffer overflow in TGA RLE decoder — raw… |
HappySeaFox |
sail |
2026-04-18T01:42:48.830Z | 2026-04-20T14:55:42.859Z |
| CVE-2026-40493 |
9.8 (3.1)
|
SAIL has heap buffer overflow in PSD decoder — bpp mis… |
HappySeaFox |
sail |
2026-04-18T01:41:14.664Z | 2026-04-20T16:15:22.120Z |
| CVE-2026-40492 |
9.8 (3.1)
|
SAIL has heap buffer overflow in XWD decoder — bits_pe… |
HappySeaFox |
sail |
2026-04-18T01:39:48.056Z | 2026-04-20T15:24:42.029Z |
| CVE-2026-40491 |
6.5 (3.1)
|
gdown Affected by Arbitrary File Write via Path Traver… |
wkentaro |
gdown |
2026-04-18T01:36:47.659Z | 2026-04-20T15:50:02.983Z |
| CVE-2026-40490 |
6.8 (3.1)
|
AsyncHttpClient leaks authorization credentials to unt… |
AsyncHttpClient |
async-http-client |
2026-04-18T01:31:13.860Z | 2026-04-20T14:55:50.254Z |
| CVE-2026-1559 |
6.4 (3.1)
|
Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored … |
youzify |
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress |
2026-04-18T01:26:05.210Z | 2026-04-20T13:46:08.353Z |
| CVE-2026-1838 |
6.1 (3.1)
|
Hostel <= 1.1.6 - Reflected Cross-Site Scripting via '… |
prasunsen |
Hostel |
2026-04-18T01:26:04.643Z | 2026-04-20T14:19:29.627Z |
| CVE-2026-40489 |
8.6 (4.0)
|
editorconfig-core-c has incomplete fix for CVE-2023-0341 |
editorconfig |
editorconfig-core-c |
2026-04-18T01:24:57.278Z | 2026-04-20T16:15:31.570Z |
| CVE-2026-40487 |
8.9 (3.1)
|
Postiz Has Unrestricted File Upload via MIME Type Spoo… |
gitroomhq |
postiz-app |
2026-04-18T01:19:06.588Z | 2026-04-20T15:25:40.893Z |
| CVE-2026-35582 |
8.8 (3.1)
|
Emissary has an OS Command Injection via Unvalidated I… |
NationalSecurityAgency |
emissary |
2026-04-18T01:16:27.661Z | 2026-04-20T15:48:51.543Z |
| CVE-2026-35465 |
7.5 (3.1)
|
SecureDrop Client has path injection in read_gzip_head… |
freedomofpress |
securedrop-client |
2026-04-18T00:41:16.594Z | 2026-04-20T15:47:43.822Z |
| CVE-2026-40572 |
9 (3.1)
|
NovumOS has Arbitrary Memory Mapping via Syscall 15 (M… |
MinecAnton209 |
NovumOS |
2026-04-18T00:16:02.590Z | 2026-04-20T14:55:57.521Z |
| CVE-2026-40317 |
9.4 (3.1)
|
NovumOS has Privilege Escalation in the Syscall Interface |
MinecAnton209 |
NovumOS |
2026-04-18T00:12:10.368Z | 2026-04-20T15:26:25.222Z |
| CVE-2026-40350 |
8.8 (3.1)
|
Movary User Management (/settings/users) has Authoriza… |
leepeuker |
movary |
2026-04-18T00:07:33.324Z | 2026-04-20T16:15:39.915Z |
| CVE-2026-40349 |
8.8 (3.1)
|
Authenticated Movary User Can Self-Escalate to Adminis… |
leepeuker |
movary |
2026-04-18T00:05:46.360Z | 2026-04-20T16:15:49.844Z |
| CVE-2026-40593 |
4.8 (3.1)
|
ChurchCRM: Stored XSS in UserEditor.php via Login Name Field |
ChurchCRM |
CRM |
2026-04-18T00:02:59.606Z | 2026-04-20T14:56:05.666Z |
| CVE-2026-40348 |
7.7 (3.1)
|
Movary has Authenticated SSRF via Jellyfin Server URL … |
leepeuker |
movary |
2026-04-18T00:01:09.725Z | 2026-04-20T16:11:32.779Z |
| CVE-2026-40347 |
5.3 (3.1)
|
Python-Multipart affected by Denial of Service via lar… |
Kludex |
python-multipart |
2026-04-17T23:56:50.777Z | 2026-04-20T15:46:40.011Z |
| CVE-2026-40346 |
6.4 (4.0)
|
NocoBase has SSRF in Workflow HTTP Request and Custom … |
nocobase |
@nocobase/plugin-workflow-request |
2026-04-17T23:54:34.829Z | 2026-04-20T14:56:12.829Z |
| CVE-2026-40581 |
8.1 (3.1)
|
ChurchCRM: Cross-Site Request Forgery (CSRF) in Select… |
ChurchCRM |
CRM |
2026-04-17T23:51:32.765Z | 2026-04-20T16:15:58.183Z |
| CVE-2026-40337 |
5.1 (3.1)
|
Sentry kernel has incomplete ownership check for IRQ l… |
camelot-os |
sentry-kernel |
2026-04-17T23:51:09.866Z | 2026-04-20T16:13:48.908Z |
| CVE-2026-40341 |
3.5 (3.1)
|
libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx |
gphoto |
libgphoto2 |
2026-04-17T23:48:36.644Z | 2026-04-20T16:14:19.107Z |
| CVE-2026-40340 |
6.1 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack… |
gphoto |
libgphoto2 |
2026-04-17T23:45:17.467Z | 2026-04-20T13:36:05.149Z |
| CVE-2026-40339 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormF… |
gphoto |
libgphoto2 |
2026-04-17T23:42:32.586Z | 2026-04-20T14:56:21.979Z |
| CVE-2026-40338 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enume… |
gphoto |
libgphoto2 |
2026-04-17T23:40:10.097Z | 2026-04-20T16:16:08.585Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1559 |
6.4 (3.1)
|
Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored … |
youzify |
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress |
2026-04-18T01:26:05.210Z | 2026-04-20T13:46:08.353Z |
| CVE-2026-40572 |
9 (3.1)
|
NovumOS has Arbitrary Memory Mapping via Syscall 15 (M… |
MinecAnton209 |
NovumOS |
2026-04-18T00:16:02.590Z | 2026-04-20T14:55:57.521Z |
| CVE-2026-40350 |
8.8 (3.1)
|
Movary User Management (/settings/users) has Authoriza… |
leepeuker |
movary |
2026-04-18T00:07:33.324Z | 2026-04-20T16:15:39.915Z |
| CVE-2026-40317 |
9.4 (3.1)
|
NovumOS has Privilege Escalation in the Syscall Interface |
MinecAnton209 |
NovumOS |
2026-04-18T00:12:10.368Z | 2026-04-20T15:26:25.222Z |
| CVE-2026-35465 |
7.5 (3.1)
|
SecureDrop Client has path injection in read_gzip_head… |
freedomofpress |
securedrop-client |
2026-04-18T00:41:16.594Z | 2026-04-20T15:47:43.822Z |
| CVE-2026-40593 |
4.8 (3.1)
|
ChurchCRM: Stored XSS in UserEditor.php via Login Name Field |
ChurchCRM |
CRM |
2026-04-18T00:02:59.606Z | 2026-04-20T14:56:05.666Z |
| CVE-2026-40582 |
9.1 (4.0)
|
ChurchCRM: Authentication Bypass in `/api/public/user/… |
ChurchCRM |
CRM |
2026-04-17T23:16:13.862Z | 2026-04-20T14:56:36.921Z |
| CVE-2026-40581 |
8.1 (3.1)
|
ChurchCRM: Cross-Site Request Forgery (CSRF) in Select… |
ChurchCRM |
CRM |
2026-04-17T23:51:32.765Z | 2026-04-20T16:15:58.183Z |
| CVE-2026-40485 |
5.3 (3.1)
|
ChurchCRM: Username Enumeration via Differential Respo… |
ChurchCRM |
CRM |
2026-04-17T23:29:35.884Z | 2026-04-20T13:36:05.319Z |
| CVE-2026-40484 |
9.1 (3.1)
|
ChurchCRM: Authenticated Remote Code Execution via Unr… |
ChurchCRM |
CRM |
2026-04-17T23:25:06.319Z | 2026-04-20T14:56:29.684Z |
| CVE-2026-40483 |
5.4 (3.1)
|
ChurchCRM: Stored XSS in PledgeEditor.php via Donation… |
ChurchCRM |
CRM |
2026-04-17T23:20:44.900Z | 2026-04-20T16:16:17.841Z |
| CVE-2026-40482 |
7.1 (4.0)
|
ChurchCRM has Authenticated SQL Injection in `/api/fam… |
ChurchCRM |
CRM |
2026-04-17T22:58:48.528Z | 2026-04-20T16:16:32.247Z |
| CVE-2026-40480 |
7.1 (4.0)
|
ChurchCRM has Missing Object-Level Authorization / IDO… |
ChurchCRM |
CRM |
2026-04-17T23:07:30.126Z | 2026-04-20T16:16:00.433Z |
| CVE-2026-40349 |
8.8 (3.1)
|
Authenticated Movary User Can Self-Escalate to Adminis… |
leepeuker |
movary |
2026-04-18T00:05:46.360Z | 2026-04-20T16:15:49.844Z |
| CVE-2026-40348 |
7.7 (3.1)
|
Movary has Authenticated SSRF via Jellyfin Server URL … |
leepeuker |
movary |
2026-04-18T00:01:09.725Z | 2026-04-20T16:11:32.779Z |
| CVE-2026-40347 |
5.3 (3.1)
|
Python-Multipart affected by Denial of Service via lar… |
Kludex |
python-multipart |
2026-04-17T23:56:50.777Z | 2026-04-20T15:46:40.011Z |
| CVE-2026-40346 |
6.4 (4.0)
|
NocoBase has SSRF in Workflow HTTP Request and Custom … |
nocobase |
@nocobase/plugin-workflow-request |
2026-04-17T23:54:34.829Z | 2026-04-20T14:56:12.829Z |
| CVE-2026-40341 |
3.5 (3.1)
|
libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx |
gphoto |
libgphoto2 |
2026-04-17T23:48:36.644Z | 2026-04-20T16:14:19.107Z |
| CVE-2026-40340 |
6.1 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack… |
gphoto |
libgphoto2 |
2026-04-17T23:45:17.467Z | 2026-04-20T13:36:05.149Z |
| CVE-2026-40339 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormF… |
gphoto |
libgphoto2 |
2026-04-17T23:42:32.586Z | 2026-04-20T14:56:21.979Z |
| CVE-2026-40338 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enume… |
gphoto |
libgphoto2 |
2026-04-17T23:40:10.097Z | 2026-04-20T16:16:08.585Z |
| CVE-2026-40337 |
5.1 (3.1)
|
Sentry kernel has incomplete ownership check for IRQ l… |
camelot-os |
sentry-kernel |
2026-04-17T23:51:09.866Z | 2026-04-20T16:13:48.908Z |
| CVE-2026-40336 |
2.4 (3.1)
|
libgphoto2 has memory leak in ptp_unpack_Sony_DPD() se… |
gphoto |
libgphoto2 |
2026-04-17T23:27:42.868Z | 2026-04-20T16:14:53.071Z |
| CVE-2026-40335 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/IN… |
gphoto |
libgphoto2 |
2026-04-17T23:19:16.935Z | 2026-04-20T13:36:05.542Z |
| CVE-2026-40334 |
3.5 (3.1)
|
libgphoto2 missing null termination in ptp_unpack_Cano… |
gphoto |
libgphoto2 |
2026-04-17T23:16:38.751Z | 2026-04-20T13:36:05.703Z |
| CVE-2026-40333 |
6.1 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat(… |
gphoto |
libgphoto2 |
2026-04-17T23:11:11.073Z | 2026-04-20T14:56:44.091Z |
| CVE-2026-40324 |
9.1 (3.1)
|
Hot Chocolate's Utf8GraphQLParser has Stack Overflow v… |
ChilliCream |
graphql-platform |
2026-04-17T23:05:26.217Z | 2026-04-20T16:16:25.151Z |
| CVE-2026-40323 |
8.9 (4.0)
|
SP1 V6 Recursion Circuit Row-Count Binding Gap |
succinctlabs |
sp1 |
2026-04-17T22:58:42.580Z | 2026-04-20T16:16:41.143Z |
| CVE-2026-2262 |
7.5 (3.1)
|
Easy Appointments <= 3.12.21 - Unauthenticated Sensiti… |
easyappointments |
Easy Appointments |
2026-04-17T23:26:48.863Z | 2026-04-20T13:51:28.513Z |
| CVE-2026-5250 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-04-17T22:21:51.917Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-q846-2w2g-p6v6 |
7.8 (3.1)
|
Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, L… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-gc8m-6q8j-fh75 |
4.4 (3.1)
|
The VideoZen plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to an… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-cpjc-5x9w-83h8 |
9.5 (4.0)
|
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database i… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-c63q-7gvc-8xq3 |
5.3 (3.1)
|
A flaw was found in the AAP MCP server. An unauthenticated remote attacker can exploit a log inject… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-mqmv-fjj3-cwjx |
9.3 (4.0)
|
Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System I… | 2026-04-17T09:31:19Z | 2026-04-17T09:31:19Z |
| ghsa-g7j3-235h-9jvv |
6.2 (4.0)
|
Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd. Sparx Enterprise Archi… | 2026-04-17T09:31:19Z | 2026-04-17T09:31:19Z |
| ghsa-9gf7-444h-6v98 |
9.3 (4.0)
|
Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In… | 2026-04-17T09:31:19Z | 2026-04-17T09:31:19Z |
| ghsa-8mf7-m4px-v9qq |
4.3 (3.1)
|
The cms-fuer-motorrad-werkstaetten plugin for WordPress is vulnerable to Cross-Site Request Forgery… | 2026-04-17T09:31:19Z | 2026-04-17T09:31:19Z |
| ghsa-rq4p-44h8-crv3 |
7.2 (3.1)
|
In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass | 2026-04-17T09:31:18Z | 2026-04-17T09:31:18Z |
| ghsa-fwp9-f988-69xr |
5.0 (3.1)
|
Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigg… | 2026-04-17T09:31:18Z | 2026-04-17T09:31:18Z |
| ghsa-ch84-4cgh-f3fc |
8.4 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T09:31:18Z | 2026-04-17T09:31:18Z |
| ghsa-c8jg-hc58-jrx2 |
9.8 (3.1)
|
The Accordion and Accordion Slider plugin for WordPress is vulnerable to an injected backdoor in ve… | 2026-04-17T09:31:18Z | 2026-04-17T09:31:18Z |
| ghsa-fx9j-cj6r-vf5m |
7.5 (3.1)
|
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via … | 2026-04-17T09:31:17Z | 2026-04-17T09:31:17Z |
| ghsa-8pj7-rr49-2c47 |
4.3 (3.1)
|
The Canto plugin for WordPress is vulnerable to Missing Authorization in versions up to and includi… | 2026-04-17T09:31:17Z | 2026-04-17T09:31:17Z |
| ghsa-xhph-rh45-hg46 |
5.3 (3.1)
|
The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all version… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-wcw2-cv2c-x8cm |
5.3 (3.1)
|
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-mj52-hprj-j8xh |
7.2 (3.1)
8.6 (4.0)
|
An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user wit… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-hfjg-jhg9-mrvf |
6.3 (3.1)
5.1 (4.0)
|
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to ex… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-hf75-j846-hmxr |
7.0 (3.1)
6.4 (4.0)
|
A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknow… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-g57h-5974-fhw4 |
6.5 (3.1)
|
The Tutor LMS plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-88v5-9hxc-f85r |
7.5 (3.1)
|
HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Ope… | 2026-04-17T06:31:08Z | 2026-04-18T00:53:47Z |
| ghsa-7rv8-2hr2-39f9 |
5.3 (3.1)
|
The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in v… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-6rgm-mxx7-qxmc |
8.5 (4.0)
|
The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack … | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-69wp-qf6q-mf28 |
5.3 (3.1)
|
The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and includi… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-4p7p-gf39-gmhp |
2.7 (3.1)
5.1 (4.0)
|
A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an ad… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-m2w4-8ggf-rj47 |
8.1 (3.1)
|
HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service | 2026-04-17T06:31:07Z | 2026-04-18T00:51:48Z |
| ghsa-gq2v-mwv7-cvm2 |
6.5 (3.1)
|
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ghsa-8r5m-3f66-qpr3 |
5.3 (3.1)
|
HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS | 2026-04-17T06:31:07Z | 2026-04-18T00:53:25Z |
| ghsa-8cfg-qq42-h3w8 |
4.9 (3.1)
|
The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal lead… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ghsa-88f4-qv6h-wgph |
4.9 (3.1)
|
The Form Maker by 10Web plugin for WordPress is vulnerable to SQL Injection via the 'ip_search', 's… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-68 |
|
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. | mlflow | 2023-04-28T00:15:00Z | 2023-06-05T01:12:55.421205Z |
| pysec-2023-273 |
8.8 (3.1)
|
Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and … | kiwitcms | 2023-04-24T22:15:00+00:00 | 2024-11-21T14:22:53.063160+00:00 |
| pysec-2023-131 |
7.5 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2023-04-24T22:15:00+00:00 | 2023-08-02T18:28:00.492615+00:00 |
| pysec-2023-27 |
|
mindsdb is a Machine Learning platform to help developers build AI solutions. In affected… | mindsdb | 2023-04-21T21:15:00Z | 2023-05-04T03:49:46.507545Z |
| pysec-2023-48 |
|
There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0… | starlette | 2023-04-21T16:15:00Z | 2023-05-04T03:49:48.202946Z |
| pysec-2023-36 |
|
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0. | modoboa | 2023-04-21T13:15:00Z | 2023-05-04T03:49:46.989399Z |
| pysec-2023-35 |
|
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0. | modoboa | 2023-04-21T13:15:00Z | 2023-05-04T03:49:46.938934Z |
| pysec-2023-41 |
|
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). … | pretalx | 2023-04-20T21:15:00Z | 2023-05-04T03:49:47.257209Z |
| pysec-2023-40 |
|
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). … | pretalx | 2023-04-20T21:15:00Z | 2023-05-04T03:49:47.207450Z |
| pysec-2023-20 |
|
Netflix Lemur before version 1.3.2 used insufficiently random values when generating de… | lemur | 2023-04-19T20:15:00Z | 2023-05-04T03:49:46.100234Z |
| pysec-2023-87 |
|
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL p… | sqlparse | 2023-04-18T22:15:00Z | 2023-06-14T20:24:17.342510Z |
| pysec-2023-34 |
|
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0. | modoboa | 2023-04-18T16:15:00Z | 2023-05-04T03:49:46.887089Z |
| pysec-2023-8 |
|
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This iss… | apache-iotdb | 2023-04-17T08:15:00Z | 2023-05-04T03:49:44.939309Z |
| pysec-2023-44 |
|
In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'p… | pyspark | 2023-04-17T08:15:00Z | 2023-05-04T03:49:47.415944Z |
| pysec-2023-7 |
|
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This iss… | apache-iotdb | 2023-04-17T07:15:00Z | 2023-05-04T03:49:44.888533Z |
| pysec-2023-22 |
|
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST… | mailman | 2023-04-15T20:16:00Z | 2023-05-04T03:49:46.203477Z |
| pysec-2023-3 |
|
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… | apache-airflow | 2023-04-07T15:15:00Z | 2023-05-04T03:49:44.692400Z |
| pysec-2023-18 |
|
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that… | langchain | 2023-04-05T02:15:00Z | 2023-05-04T03:49:46.000016Z |
| pysec-2023-56 |
|
Wagtail is an open source content management system built on Django. Prior to versions 4.… | wagtail | 2023-04-03T17:15:00Z | 2023-05-04T03:49:48.874145Z |
| pysec-2023-55 |
|
Wagtail is an open source content management system built on Django. Starting in version … | wagtail | 2023-04-03T17:15:00Z | 2023-05-04T03:49:48.764275Z |
| pysec-2023-263 |
8.8 (3.1)
|
An improper array index validation vulnerability exists in the stl_fix_normal_directions … | admesh | 2023-04-03T16:15:00Z | 2024-11-21T14:22:40.308634Z |
| pysec-2023-121 |
|
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as a… | zstd | 2023-03-31T20:15:00+00:00 | 2026-02-25T19:20:58+00:00 |
| pysec-2023-26 |
|
MindsDB is an open source machine learning platform. An unsafe extraction is being perfor… | mindsdb | 2023-03-30T19:15:00Z | 2023-05-04T03:49:46.430565Z |
| pysec-2023-46 |
|
redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at… | redis | 2023-03-26T19:15:00Z | 2023-06-05T01:13:00.432606Z |
| pysec-2023-45 |
|
redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open af… | redis | 2023-03-26T19:15:00Z | 2023-06-05T01:13:00.293462Z |
| pysec-2023-29 |
|
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. | mlflow | 2023-03-24T15:15:00Z | 2023-05-04T03:49:46.618607Z |
| pysec-2023-28 |
|
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2. | mlflow | 2023-03-24T15:15:00Z | 2023-05-04T03:49:46.565156Z |
| pysec-2023-9 |
|
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.… | cairosvg | 2023-03-20T16:15:00Z | 2023-05-04T03:49:44.989748Z |
| pysec-2023-50 |
|
Streamlit, software for turning data scripts into web applications, had a cross-site scri… | streamlit | 2023-03-16T21:15:00Z | 2023-05-04T03:49:48.326940Z |
| pysec-2023-2 |
|
Generation of Error Message Containing Sensitive Information vulnerability in Apache Soft… | apache-airflow | 2023-03-15T10:15:00Z | 2023-05-04T03:49:44.630805Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2311 | Malicious code in officepyai (PyPI) | 2026-03-31T09:26:34Z | 2026-03-31T09:28:16Z |
| mal-2026-2310 | Malicious code in lakeflow-community-connectors (PyPI) | 2026-03-31T05:36:24Z | 2026-03-31T05:36:24Z |
| mal-2026-2308 | Malicious code in workingitme (PyPI) | 2026-03-31T03:40:48Z | 2026-03-31T05:19:14Z |
| mal-2026-2309 | Malicious code in zzzzthisisitwantsafecheckitzzzz (PyPI) | 2026-03-31T03:35:47Z | 2026-03-31T05:19:14Z |
| mal-2026-2307 | Malicious code in axios (npm) | 2026-03-31T03:15:49Z | 2026-04-07T14:41:20Z |
| mal-2026-2306 | Malicious code in plain-crypto-js (npm) | 2026-03-31T02:07:58Z | 2026-03-31T05:26:30Z |
| mal-2026-2305 | Malicious code in databaseroboats (PyPI) | 2026-03-30T20:21:21Z | 2026-04-16T07:40:04Z |
| mal-2026-2304 | Malicious code in spanner-client (PyPI) | 2026-03-30T16:07:34Z | 2026-03-30T16:07:34Z |
| mal-2026-2303 | Malicious code in prodaccess (PyPI) | 2026-03-30T16:07:26Z | 2026-03-30T16:07:26Z |
| mal-2026-2301 | Malicious code in dremel (PyPI) | 2026-03-30T16:06:05Z | 2026-03-30T16:06:05Z |
| mal-2026-2302 | Malicious code in loas (PyPI) | 2026-03-30T16:04:14Z | 2026-03-30T16:04:14Z |
| mal-2026-2300 | Malicious code in eslint-validator (npm) | 2026-03-30T15:59:45Z | 2026-03-31T03:12:01Z |
| mal-2026-2299 | Malicious code in mnemoniclib (PyPI) | 2026-03-30T12:02:35Z | 2026-03-30T12:02:35Z |
| mal-2026-2298 | Malicious code in hiveos-sdk (PyPI) | 2026-03-30T11:55:02Z | 2026-03-30T11:55:02Z |
| mal-2026-2297 | Malicious code in earthengine-api (npm) | 2026-03-30T01:40:30Z | 2026-03-31T03:12:01Z |
| mal-2026-2296 | Malicious code in bos-decoration-elements (npm) | 2026-03-29T22:45:22Z | 2026-03-31T03:12:00Z |
| mal-2026-2295 | Malicious code in databaseroboat (PyPI) | 2026-03-29T20:12:48Z | 2026-04-16T07:40:04Z |
| mal-2026-2294 | Malicious code in hiveos (PyPI) | 2026-03-29T18:44:31Z | 2026-03-29T18:44:31Z |
| mal-2026-2291 | Malicious code in pychatz (PyPI) | 2026-03-29T13:50:56Z | 2026-03-29T13:50:56Z |
| mal-2026-2292 | Malicious code in safecheckit (PyPI) | 2026-03-29T13:37:12Z | 2026-03-29T22:12:52Z |
| mal-2026-2293 | Malicious code in thisismytestnouser (PyPI) | 2026-03-29T13:34:24Z | 2026-03-29T13:34:25Z |
| mal-2026-2290 | Malicious code in iwantsafecheckit (PyPI) | 2026-03-29T13:31:21Z | 2026-03-29T22:12:52Z |
| mal-2026-2289 | Malicious code in database-roblox (PyPI) | 2026-03-29T12:15:48Z | 2026-04-16T07:40:04Z |
| mal-2026-2287 | Malicious code in f0-state-manager (npm) | 2026-03-29T11:50:43Z | 2026-03-31T03:12:01Z |
| mal-2026-2288 | Malicious code in merchservicingnodeserv (npm) | 2026-03-29T11:50:39Z | 2026-03-31T03:12:03Z |
| mal-2026-2285 | Malicious code in dial-app-version (npm) | 2026-03-29T10:58:29Z | 2026-03-31T03:12:01Z |
| mal-2026-2284 | Malicious code in bizsignupnodeweb (npm) | 2026-03-29T10:58:26Z | 2026-03-31T03:12:00Z |
| mal-2026-2286 | Malicious code in sn3akysnak3-test (npm) | 2026-03-29T10:55:32Z | 2026-03-31T03:12:04Z |
| mal-2026-2283 | Malicious code in interwebz (PyPI) | 2026-03-29T10:06:44Z | 2026-03-29T10:06:44Z |
| mal-2026-2282 | Malicious code in @adac-fahrzeugplattform/ui (npm) | 2026-03-29T04:43:26Z | 2026-04-14T01:05:13Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2795 | Fortinet FortiOS, FortiProxy, FortiSwitch und FortiWeb: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-09T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2794 | Fortinet FortiVoice: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2793 | Adobe Creative Cloud: Schwachstelle ermöglicht Denial of Service | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2792 | Fortinet FortiWeb: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2791 | Fortinet FortiSandbox: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2790 | Fortinet FortiPortal: Schwachstelle ermöglicht Denial of Service | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2789 | Adobe Experience Manager: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-2788 | Siemens SIMATIC S7 Produkte: Schwachstelle ermöglicht Denial of Service | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2787 | Fortinet FortiOS SSLVPN: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2786 | Mehrere Fortinet Produkte: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2785 | Fortinet FortiOS und FortiProxy: Schwachstelle ermöglicht Privilegieneskalation | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2784 | Red Hat OpenStack Platform (Wallaby): Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2783 | Microsoft Office Produkte: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2782 | Microsoft GitHub Copilot für for Jetbrains: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2781 | Microsoft Windows: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2780 | Microsoft Exchange Server: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2779 | Microsoft Azure Monitor Agent: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2768 | SAP Patchday Dezember 2025: Mehrere Schwachstellen | 2025-12-08T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2766 | Google Cloud Platform: Schwachstelle ermöglicht Codeausführung | 2025-12-08T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2765 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-08T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2764 | Ruby SAML: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-12-08T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2763 | IBM InfoSphere Information Server (Netty, FreeScout): Mehrere Schwachstellen | 2025-12-08T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2762 | HCL BigFix: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-08T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2761 | Rockwell Automation FactoryTalk (DataMosaix Private Cloud): Schwachstelle ermöglicht SQL-Injection | 2025-12-08T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2760 | Phoenix Contact FL SWITCH: Mehrere Schwachstellen | 2025-12-08T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2759 | IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting | 2025-12-08T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2758 | PowerDNS: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-08T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2757 | Nextcloud (Contacts, Talk, Deck und Twofactor WebAuthn): Mehrere Schwachstellen | 2025-12-07T23:00:00.000+00:00 | 2025-12-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2756 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-07T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2755 | util-linux: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-12-07T23:00:00.000+00:00 | 2026-03-03T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-063-02 | Keysight Ixia Vision Product Family (Update A) | 2025-03-04T07:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-063-01 | Carrier Block Load | 2025-03-04T07:00:00.000000Z | 2025-03-04T07:00:00.000000Z |
| icsma-25-058-01 | Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application | 2025-02-27T07:00:00.000000Z | 2025-02-27T07:00:00.000000Z |
| icsa-25-058-01 | Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B) | 2025-02-27T07:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-133-03 | Hitachi Energy MACH GWS products | 2025-02-25T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-25-133-01 | Hitachi Energy Service Suite | 2025-02-25T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-25-065-01 | Hitachi Energy PCU400 | 2025-02-25T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-25-063-03 | Hitachi Energy MACH PS700 | 2025-02-25T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-25-056-01 | Rockwell Automation PowerFlex 755 | 2025-02-25T07:00:00.000000Z | 2025-02-25T07:00:00.000000Z |
| icsma-25-051-01 | Medixant RadiAnt DICOM Viewer | 2025-02-20T07:00:00.000000Z | 2025-02-20T07:00:00.000000Z |
| icsa-25-051-05 | Rapid Response Monitoring My Security Account App | 2025-02-20T07:00:00.000000Z | 2025-02-20T07:00:00.000000Z |
| icsa-25-051-03 | Carrier Block Load | 2025-02-20T07:00:00.000000Z | 2025-02-20T07:00:00.000000Z |
| icsa-25-051-06 | Elseta Vinci Protocol Analyzer | 2025-02-18T07:00:00.000000Z | 2025-02-18T07:00:00.000000Z |
| icsa-25-051-04 | Siemens SiPass Integrated | 2025-02-17T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsma-25-044-01 | Qardio Heart Health IOS and Android Application and QardioARM A100 | 2025-02-13T07:00:00.000000Z | 2025-02-13T07:00:00.000000Z |
| icsa-25-044-18 | Dingtian DT-R0 Series | 2025-02-13T07:00:00.000000Z | 2025-02-13T07:00:00.000000Z |
| icsa-25-044-17 | Outback Power Mojave Inverter | 2025-02-13T07:00:00.000000Z | 2025-02-13T07:00:00.000000Z |
| icsa-25-044-16 | mySCADA myPRO Manager | 2025-02-13T07:00:00.000000Z | 2025-02-13T07:00:00.000000Z |
| icsa-25-044-15 | ORing IAP-420 | 2025-02-13T07:00:00.000000Z | 2025-02-13T07:00:00.000000Z |
| va-25-043-01 | Ivanti Connect Secure and Ivanti Policy Secure external file control vulnerability | 2025-02-12T19:44:47Z | 2025-02-20T00:00:00Z |
| icsa-25-079-02 | Schneider Electric Enerlin’X IFE and eIFE | 2025-02-11T06:00:00.000000Z | 2025-02-11T06:00:00.000000Z |
| icsa-25-079-01 | Schneider Electric EcoStruxureâ„¢ | 2025-02-11T06:00:00.000000Z | 2025-02-11T06:00:00.000000Z |
| icsa-25-077-05 | Schneider Electric ASCO 5310/5350 Remote Annunciator | 2025-02-11T06:00:00.000000Z | 2025-02-11T06:00:00.000000Z |
| icsa-25-070-01 | Schneider Electric Uni-Telway Driver (Update C) | 2025-02-11T05:00:00.000000Z | 2026-02-24T07:00:00.000000Z |
| icsa-25-044-14 | Siemens Opcenter Intelligence | 2025-02-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-044-13 | Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal | 2025-02-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-044-12 | Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor | 2025-02-11T00:00:00.000000Z | 2025-04-08T00:00:00.000000Z |
| icsa-25-044-11 | Siemens Apogee PXC100 Devices | 2025-02-11T00:00:00.000000Z | 2025-02-11T00:00:00.000000Z |
| icsa-25-044-10 | Siemens Questa and ModelSim | 2025-02-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-044-09 | Siemens SCALANCE W700 IEEE 802.11ax | 2025-02-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cucm-imp-dos-49gl7rzt | Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-cucm-dos-4ag3ywbd | Cisco Unified Communications Manager Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-csw-auth-openapi-ktndjdnx | Cisco Secure Workload Authenticated OpenAPI Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-asaftd-ssl-dos-uu7mv5p6 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 2100 Series Appliances SSL/TLS Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2024-05-22T16:37:00+00:00 |
| cisco-sa-ac-csc-privesc-wx4u4kw | Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-07-05T16:20:46+00:00 |
| cisco-sa-ssm-sql-x9mmjsyh | Cisco Smart Software Manager On-Prem SQL Injection Vulnerability | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-sg-web-multi-s9g4nkgv | Cisco Small Business Series Switches Buffer Overflow Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-xxe-inj-696oztcm | Cisco Identity Services Engine XML External Entity Injection Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-traversal-ztugmyhu | Cisco Identity Services Engine Path Traversal Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-injection-srqnseu9 | Cisco Identity Services Engine Command Injection Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-file-dwnld-srcdnkd2 | Cisco Identity Services Engine Arbitrary File Download Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-ise-file-delete-read-pk5ghddd | Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-dnac-multiple-ktqkgu3 | Cisco DNA Center Software API Vulnerabilities | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-cbw-auth-bypass-ggnafdz | Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability | 2023-05-17T16:00:00+00:00 | 2023-05-17T16:00:00+00:00 |
| cisco-sa-spa-unauth-upgrade-uqhytww | Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability | 2023-05-03T16:00:00+00:00 | 2023-05-03T16:00:00+00:00 |
| cisco-sa-pcd-xss-jdxpjm7 | Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability | 2023-04-26T16:00:00+00:00 | 2023-04-26T16:00:00+00:00 |
| cisco-sa-staros-ssh-privesc-bmwejc3h | Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-wfnqmyhn | Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-roomos-file-write-rhkwegkf | Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-ind-caelfk6v | Cisco Industrial Network Director Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cml-auth-bypass-4fucceg5 | Cisco Modeling Labs External Authentication Bypass Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-bw-tcp-dos-kedjcxls | Cisco BroadWorks Network Server TCP Denial of Service Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-wbx-sxss-fupl-64uhbcm5 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-uccx-xss-go9l9xxr | Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-stealthsmc-rce-sfnbpjcs | Cisco Secure Network Analytics Remote Code Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-stealth-rce-bdwxfk9c | Cisco Secure Network Analytics Remote Code Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-sb-rv32x-cmdinject-ckqszpxl | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-sb-rv01x_rv32x_rce-nzagwwdd | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T20:30:30+00:00 |
| cisco-sa-rv-stored-xss-vqz7gc8w | Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-pi-epnm-erpwaxle | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-05-15T13:11:25+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-23343 | xdp: produce a warning when calculated tailroom is negative | 2026-03-02T00:00:00.000Z | 2026-03-27T14:44:00.000Z |
| msrc_cve-2026-23340 | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs | 2026-03-02T00:00:00.000Z | 2026-03-27T14:42:13.000Z |
| msrc_cve-2026-23339 | nfc: nci: free skb on nci_transceive early error paths | 2026-03-02T00:00:00.000Z | 2026-03-27T01:36:59.000Z |
| msrc_cve-2026-23336 | wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:42:47.000Z |
| msrc_cve-2026-23335 | RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() | 2026-03-02T00:00:00.000Z | 2026-03-27T01:37:07.000Z |
| msrc_cve-2026-23334 | can: usb: f81604: handle short interrupt urb messages properly | 2026-03-02T00:00:00.000Z | 2026-03-27T14:41:40.000Z |
| msrc_cve-2026-23333 | netfilter: nft_set_rbtree: validate open interval overlap | 2026-03-02T00:00:00.000Z | 2026-03-31T14:37:18.000Z |
| msrc_cve-2026-23330 | nfc: nci: complete pending data exchange on device close | 2026-03-02T00:00:00.000Z | 2026-03-27T01:36:13.000Z |
| msrc_cve-2026-23327 | cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() | 2026-03-02T00:00:00.000Z | 2026-03-27T01:37:50.000Z |
| msrc_cve-2026-23325 | wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() | 2026-03-02T00:00:00.000Z | 2026-03-27T01:36:22.000Z |
| msrc_cve-2026-23324 | can: usb: etas_es58x: correctly anchor the urb in the read bulk callback | 2026-03-02T00:00:00.000Z | 2026-03-27T14:44:14.000Z |
| msrc_cve-2026-23320 | usb: gadget: f_ncm: align net_device lifecycle with bind/unbind | 2026-03-02T00:00:00.000Z | 2026-03-31T14:44:36.000Z |
| msrc_cve-2026-23319 | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim | 2026-03-02T00:00:00.000Z | 2026-03-27T14:42:40.000Z |
| msrc_cve-2026-23318 | ALSA: usb-audio: Use correct version for UAC3 header validation | 2026-03-02T00:00:00.000Z | 2026-03-27T14:40:28.000Z |
| msrc_cve-2026-23317 | drm/vmwgfx: Return the correct value in vmw_translate_ptr functions | 2026-03-02T00:00:00.000Z | 2026-03-27T14:43:27.000Z |
| msrc_cve-2026-23315 | wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:39:35.000Z |
| msrc_cve-2026-23313 | i40e: Fix preempt count leak in napi poll tracepoint | 2026-03-02T00:00:00.000Z | 2026-03-31T14:40:37.000Z |
| msrc_cve-2026-23312 | net: usb: kaweth: validate USB endpoints | 2026-03-02T00:00:00.000Z | 2026-03-27T14:39:48.000Z |
| msrc_cve-2026-23310 | bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded | 2026-03-02T00:00:00.000Z | 2026-03-27T14:43:40.000Z |
| msrc_cve-2026-23308 | pinctrl: equilibrium: fix warning trace on load | 2026-03-02T00:00:00.000Z | 2026-03-27T01:37:21.000Z |
| msrc_cve-2026-23307 | can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message | 2026-03-02T00:00:00.000Z | 2026-03-27T14:41:26.000Z |
| msrc_cve-2026-23306 | scsi: pm8001: Fix use-after-free in pm8001_queue_command() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:40:42.000Z |
| msrc_cve-2026-23304 | ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:41:53.000Z |
| msrc_cve-2026-23303 | smb: client: Don't log plaintext credentials in cifs_set_cifscreds | 2026-03-02T00:00:00.000Z | 2026-03-27T14:41:46.000Z |
| msrc_cve-2026-23302 | net: annotate data-races around sk->sk_{data_ready,write_space} | 2026-03-02T00:00:00.000Z | 2026-03-31T14:46:23.000Z |
| msrc_cve-2026-23300 | net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop | 2026-03-02T00:00:00.000Z | 2026-03-27T14:42:54.000Z |
| msrc_cve-2026-23298 | can: ucan: Fix infinite loop from zero-length messages | 2026-03-02T00:00:00.000Z | 2026-03-27T14:42:06.000Z |
| msrc_cve-2026-23296 | scsi: core: Fix refcount leak for tagset_refcnt | 2026-03-02T00:00:00.000Z | 2026-03-27T14:40:08.000Z |
| msrc_cve-2026-23293 | net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled | 2026-03-02T00:00:00.000Z | 2026-03-27T14:43:47.000Z |
| msrc_cve-2026-23292 | scsi: target: Fix recursive locking in __configfs_open_file() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:41:13.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0457 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-11-20T10:01:35.437557Z | 2024-11-20T10:01:35.437557Z |
| ncsc-2024-0456 | Kwetsbaarheden verholpen in Apple macOS en Safari | 2024-11-20T10:00:42.593160Z | 2024-11-20T10:00:42.593160Z |
| ncsc-2024-0455 | Kwetsbaarheid verholpen in Trend Micro Deep Security | 2024-11-20T09:04:14.183257Z | 2024-11-20T09:04:14.183257Z |
| ncsc-2024-0454 | Kwetsbaarheid verholpen in GitHub CLI | 2024-11-19T15:03:48.421618Z | 2024-11-19T15:03:48.421618Z |
| ncsc-2024-0453 | Kwetsbaarheid verholpen in Oracle Agile PLM Framework | 2024-11-19T09:41:05.945149Z | 2024-11-19T09:41:05.945149Z |
| ncsc-2024-0452 | Kwetsbaarheden verholpen in Siemens Tecnomatix Plant Simulation | 2024-11-19T08:19:24.590425Z | 2024-11-19T08:19:24.590425Z |
| ncsc-2024-0451 | Kwetsbaarheden verholpen in Palo Alto PAN-OS | 2024-11-18T16:00:29.206286Z | 2024-11-20T08:41:37.309906Z |
| ncsc-2024-0450 | Kwetsbaarheid verholpen in Adobe Photoshop | 2024-11-18T11:18:22.537372Z | 2024-11-18T11:18:22.537372Z |
| ncsc-2024-0449 | Kwetsbaarheden verholpen in Adobe InDesign | 2024-11-18T11:14:49.456205Z | 2024-11-18T11:14:49.456205Z |
| ncsc-2024-0448 | Kwetsbaarheden verholpen in Adobe Illustrator | 2024-11-18T11:08:38.687476Z | 2024-11-18T11:08:38.687476Z |
| ncsc-2024-0447 | Kwetsbaarheden verholpen in GitLab CE/EE | 2024-11-15T12:29:35.775993Z | 2024-11-15T12:29:35.775993Z |
| ncsc-2024-0446 | Kwetsbaarheid verholpen in Schneider Electric Ecostruxture | 2024-11-14T12:46:16.737874Z | 2024-11-14T12:46:16.737874Z |
| ncsc-2024-0445 | Kwetsbaarheden verholpen in Fortinet FortiClient | 2024-11-14T12:42:00.899040Z | 2024-11-14T12:42:00.899040Z |
| ncsc-2024-0444 | Kwetsbaarheden verholpen in Palo Alto PAN-OS | 2024-11-14T12:38:50.941039Z | 2024-11-14T12:38:50.941039Z |
| ncsc-2024-0443 | Kwetsbaarheden verholpen in Citrix NetScaler ADC en NetScaler Gateway | 2024-11-13T15:10:45.265209Z | 2024-11-13T15:10:45.265209Z |
| ncsc-2024-0442 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Policy Secure | 2024-11-13T12:38:13.252957Z | 2024-11-13T12:38:13.252957Z |
| ncsc-2024-0441 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager | 2024-11-13T10:42:35.387490Z | 2024-11-13T10:42:35.387490Z |
| ncsc-2024-0440 | Kwetsbaarheden verholpen in Citrix Session Recording | 2024-11-13T08:51:17.257998Z | 2024-11-13T08:51:17.257998Z |
| ncsc-2024-0439 | Kwetsbaarheden verholpen in Microsoft Office | 2024-11-12T18:57:09.604321Z | 2024-11-12T18:57:09.604321Z |
| ncsc-2024-0438 | Kwetsbaarheid verholpen in Microsoft Exchange Server | 2024-11-12T18:56:25.729148Z | 2024-11-12T18:56:25.729148Z |
| ncsc-2024-0437 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2024-11-12T18:55:39.363057Z | 2024-11-12T18:55:39.363057Z |
| ncsc-2024-0436 | Kwetsbaarheden verholpen in Microsoft Azure | 2024-11-12T18:54:41.456199Z | 2024-11-12T18:54:41.456199Z |
| ncsc-2024-0435 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2024-11-12T18:54:00.107773Z | 2024-11-12T18:54:00.107773Z |
| ncsc-2024-0434 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-11-12T18:53:07.914094Z | 2024-11-12T18:53:07.914094Z |
| ncsc-2024-0433 | Kwetsbaarheden verholpen in Siemens producten | 2024-11-12T14:19:20.051128Z | 2024-11-12T14:19:20.051128Z |
| ncsc-2024-0432 | Kwetsbaarheden verholpen in Cisco Identity Services Engine | 2024-11-07T08:55:49.899244Z | 2024-11-07T08:55:49.899244Z |
| ncsc-2024-0431 | Kwetsbaarheden verholpen in Aruba Networks ArubaOS | 2024-11-07T08:51:16.689034Z | 2024-11-07T08:51:16.689034Z |
| ncsc-2024-0430 | Kwetsbaarheid verholpen in Cisco Catalyst Access points | 2024-11-07T08:47:41.650502Z | 2024-11-07T08:47:41.650502Z |
| ncsc-2024-0429 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2024-11-05T14:09:27.373651Z | 2024-11-05T14:09:27.373651Z |
| ncsc-2024-0428 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-10-30T11:39:26.910666Z | 2024-10-30T11:39:26.910666Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10077-1 | python311-jaraco.context-6.1.0-1.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10076-1 | python311-FontTools-4.61.1-1.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10075-1 | corepack24-24.13.0-2.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10074-1 | corepack22-22.22.0-1.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10073-1 | alloy-1.12.2-2.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:20069-1 | Security update for python-weasyprint | 2026-01-20T23:40:26Z | 2026-01-20T23:40:26Z |
| opensuse-su-2026:20065-1 | Security update for webkit2gtk3 | 2026-01-20T12:08:51Z | 2026-01-20T12:08:51Z |
| opensuse-su-2026:20067-1 | Security update of open-vm-tools | 2026-01-20T11:02:10Z | 2026-01-20T11:02:10Z |
| opensuse-su-2026:20062-1 | Security update for rust1.91, rust1.92 | 2026-01-19T19:43:51Z | 2026-01-19T19:43:51Z |
| opensuse-su-2026:20064-1 | Security update for ffmpeg-4 | 2026-01-19T14:05:53Z | 2026-01-19T14:05:53Z |
| opensuse-su-2026:20060-1 | Security update for cargo-c | 2026-01-19T10:42:10Z | 2026-01-19T10:42:10Z |
| opensuse-su-2026:10072-1 | libblkid-devel-2.41.3-1.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10071-1 | libraylib550-5.5-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10070-1 | python-keystonemiddleware-doc-10.12.0-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10069-1 | heroic-games-launcher-2.18.1-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10068-1 | hauler-1.4.1-1.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10067-1 | grafana-11.6.7-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10066-1 | gimp-3.0.6-5.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10065-1 | harfbuzz-devel-12.3.0-2.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:10064-1 | go1.25-1.25.6-1.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:10063-1 | go1.24-1.24.12-1.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:20057-1 | Security update for docker | 2026-01-17T13:20:26Z | 2026-01-17T13:20:26Z |
| opensuse-su-2026:20058-1 | Security update for go-sendxmpp | 2026-01-17T09:30:33Z | 2026-01-17T09:30:33Z |
| opensuse-su-2026:20054-1 | Security update for chromium | 2026-01-17T06:48:43Z | 2026-01-17T06:48:43Z |
| opensuse-su-2026:10062-1 | corepack24-24.13.0-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10061-1 | libsndfile-devel-1.2.2-4.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10060-1 | libpng16-16-1.6.54-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10059-1 | freerdp-3.20.2-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10058-1 | MozillaThunderbird-140.7.0-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:20055-1 | Security update for gimp | 2026-01-16T16:13:02Z | 2026-01-16T16:13:02Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:4174 | Red Hat Security Advisory: opentelemetry-collector security update | 2026-03-10T12:12:43+00:00 | 2026-04-14T07:58:56+00:00 |
| rhsa-2026:4173 | Red Hat Security Advisory: gimp security update | 2026-03-10T12:04:04+00:00 | 2026-03-23T19:18:17+00:00 |
| rhsa-2026:4168 | Red Hat Security Advisory: python3.9 security update | 2026-03-10T10:09:57+00:00 | 2026-04-09T15:16:57+00:00 |
| rhsa-2026:4170 | Red Hat Security Advisory: Red Hat OpenShift API for Data Protection | 2026-03-10T10:02:11+00:00 | 2026-04-14T07:58:57+00:00 |
| rhsa-2026:4165 | Red Hat Security Advisory: python3.12 security update | 2026-03-10T09:36:17+00:00 | 2026-04-09T15:16:57+00:00 |
| rhsa-2026:4164 | Red Hat Security Advisory: git-lfs security update | 2026-03-10T09:29:17+00:00 | 2026-04-14T09:46:40+00:00 |
| rhsa-2026:4166 | Red Hat Security Advisory: git-lfs security update | 2026-03-10T09:26:33+00:00 | 2026-04-14T09:46:40+00:00 |
| rhsa-2026:4162 | Red Hat Security Advisory: mysql8.4 security update | 2026-03-10T08:35:22+00:00 | 2026-04-02T16:36:36+00:00 |
| rhsa-2026:4163 | Red Hat Security Advisory: openssl security update | 2026-03-10T08:31:12+00:00 | 2026-04-09T23:05:46+00:00 |
| rhsa-2026:4152 | Red Hat Security Advisory: firefox security update | 2026-03-10T06:11:47+00:00 | 2026-03-23T13:08:31+00:00 |
| rhsa-2026:4141 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T05:20:31+00:00 | 2026-03-24T10:03:20+00:00 |
| rhsa-2026:4143 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T02:43:31+00:00 | 2026-03-24T10:03:20+00:00 |
| rhsa-2026:4147 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T01:54:46+00:00 | 2026-03-24T10:03:26+00:00 |
| rhsa-2026:4139 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T01:01:51+00:00 | 2026-03-24T10:03:19+00:00 |
| rhsa-2026:4146 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T00:43:46+00:00 | 2026-03-24T10:03:21+00:00 |
| rhsa-2026:4140 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T00:41:36+00:00 | 2026-03-24T10:03:20+00:00 |
| rhsa-2026:4148 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T00:34:46+00:00 | 2026-03-24T10:03:22+00:00 |
| rhsa-2026:4144 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T00:30:02+00:00 | 2026-03-24T10:03:21+00:00 |
| rhsa-2026:4138 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T00:22:46+00:00 | 2026-03-24T10:03:19+00:00 |
| rhsa-2026:4142 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T00:20:22+00:00 | 2026-03-24T10:03:20+00:00 |
| rhsa-2026:4145 | Red Hat Security Advisory: python-pyasn1 security update | 2026-03-10T00:18:21+00:00 | 2026-03-24T10:03:21+00:00 |
| rhsa-2026:4128 | Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA) | 2026-03-09T18:59:37+00:00 | 2026-04-12T20:00:21+00:00 |
| rhsa-2026:4121 | Red Hat Security Advisory: freerdp security update | 2026-03-09T18:07:35+00:00 | 2026-03-18T03:19:42+00:00 |
| rhsa-2026:4111 | Red Hat Security Advisory: kernel security update | 2026-03-09T17:03:00+00:00 | 2026-04-13T08:40:28+00:00 |
| rhsa-2026:4110 | Red Hat Security Advisory: postgresql:16 security update | 2026-03-09T16:57:16+00:00 | 2026-04-10T21:16:33+00:00 |
| rhsa-2026:4086 | Red Hat Security Advisory: php security update | 2026-03-09T15:28:44+00:00 | 2026-04-08T16:38:02+00:00 |
| rhsa-2026:4077 | Red Hat Security Advisory: php security update | 2026-03-09T14:43:34+00:00 | 2026-04-08T16:38:01+00:00 |
| rhsa-2026:4075 | Red Hat Security Advisory: postgresql:12 security update | 2026-03-09T14:32:36+00:00 | 2026-04-10T21:16:31+00:00 |
| rhsa-2026:4074 | Red Hat Security Advisory: postgresql:13 security update | 2026-03-09T14:27:14+00:00 | 2026-04-10T21:16:31+00:00 |
| rhsa-2026:4064 | Red Hat Security Advisory: postgresql:12 security update | 2026-03-09T14:23:54+00:00 | 2026-04-10T21:16:31+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-133038 | SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-434534 | SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families | 2021-05-28T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-119468 | SSA-119468: Luxion KeyShot Vulnerabilities in Solid Edge | 2021-05-25T00:00:00Z | 2021-05-25T00:00:00Z |
| ssa-695540 | SSA-695540: ASM and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.2 | 2021-05-17T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-940818 | SSA-940818: UltraVNC Vulnerabilities in SIMATIC HMIs/WinCC Products | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-919955 | SSA-919955: Information Disclosure Vulnerability in Mendix Database Replication Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-854248 | SSA-854248: Information Disclosure Vulnerability in Mendix Excel Importer Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-752103 | SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-723417 | SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D | 2021-05-11T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-678983 | SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020) | 2021-05-11T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-676775 | SSA-676775: Denial-of-Service Vulnerability in SIMATIC NET CP 343-1 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-594364 | SSA-594364: Denial-of-Service Vulnerability in SNMP Implementation of WinCC Runtime | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-538778 | SSA-538778: SmartVNC Vulnerabilities in SIMATIC HMI/WinCC Products | 2021-05-11T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-501073 | SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) | 2021-05-11T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-324955 | SSA-324955: SAD DNS Attack in Linux Based Products | 2021-05-11T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-286838 | SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-116379 | SSA-116379: Denial-of-Service Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-875726 | SSA-875726: Privilege Escalation Vulnerability in Mendix | 2021-04-14T00:00:00Z | 2021-04-14T00:00:00Z |
| ssa-983300 | SSA-983300: Vulnerabilities in LOGO! Soft Comfort | 2021-04-13T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-853866 | SSA-853866: User Credentials Disclosure Vulnerability in Siveillance Video Open Network Bridge (ONVIF) | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-788287 | SSA-788287: Disclosure of Private Data | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-761844 | SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) | 2021-04-13T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-705111 | SSA-705111: Multiple Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS | 2021-04-13T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-669158 | SSA-669158: DNS Client Vulnerabilities in SIMOTICS CONNECT 400 | 2021-04-13T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-574442 | SSA-574442: Multiple PAR and DFT File Parsing Vulnerabilities in Solid Edge | 2021-04-13T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-292794 | SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-201384 | SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS | 2021-04-13T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-187092 | SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 | 2021-04-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-185699 | SSA-185699: Out of Bounds Write Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS | 2021-04-13T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-163226 | SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0946-1 | Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7 RT) | 2026-03-22T22:48:59Z | 2026-03-22T22:48:59Z |
| suse-su-2026:0943-1 | Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7 RT) | 2026-03-22T22:48:59Z | 2026-03-22T22:48:59Z |
| suse-su-2026:0944-1 | Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7 RT) | 2026-03-22T22:48:56Z | 2026-03-22T22:48:56Z |
| suse-su-2026:0945-1 | Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7 RT) | 2026-03-22T22:48:53Z | 2026-03-22T22:48:53Z |
| suse-su-2026:0953-1 | Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5) | 2026-03-22T18:34:12Z | 2026-03-22T18:34:12Z |
| suse-su-2026:0950-1 | Security update for docker | 2026-03-20T18:10:22Z | 2026-03-20T18:10:22Z |
| suse-su-2026:0949-1 | Security update for runc | 2026-03-20T18:08:37Z | 2026-03-20T18:08:37Z |
| suse-su-2026:0948-1 | Security update for helm | 2026-03-20T18:06:48Z | 2026-03-20T18:06:48Z |
| suse-su-2026:20922-1 | Security update for harfbuzz | 2026-03-20T15:24:11Z | 2026-03-20T15:24:11Z |
| suse-su-2026:20762-1 | Security update for harfbuzz | 2026-03-20T15:24:11Z | 2026-03-20T15:24:11Z |
| suse-su-2026:0947-1 | Security update for go1.25-openssl | 2026-03-20T15:06:59Z | 2026-03-20T15:06:59Z |
| suse-su-2026:20921-1 | Security update for postgresql18 | 2026-03-20T14:50:46Z | 2026-03-20T14:50:46Z |
| suse-su-2026:0938-1 | Security update for GraphicsMagick | 2026-03-20T13:41:10Z | 2026-03-20T13:41:10Z |
| suse-su-2026:20920-1 | Security update for python-orjson | 2026-03-20T12:06:49Z | 2026-03-20T12:06:49Z |
| suse-su-2026:20769-1 | Security update for ovmf | 2026-03-20T11:57:43Z | 2026-03-20T11:57:43Z |
| suse-su-2026:20768-1 | Security update for python311 | 2026-03-20T11:48:44Z | 2026-03-20T11:48:44Z |
| suse-su-2026:20919-1 | Security update for python-tornado6 | 2026-03-20T10:55:14Z | 2026-03-20T10:55:14Z |
| suse-su-2026:20761-1 | Security update for python-tornado6 | 2026-03-20T10:55:14Z | 2026-03-20T10:55:14Z |
| suse-su-2026:20918-1 | Security update for curl | 2026-03-20T09:37:16Z | 2026-03-20T09:37:16Z |
| suse-su-2026:20760-1 | Security update for curl | 2026-03-20T09:37:16Z | 2026-03-20T09:37:16Z |
| suse-su-2026:20917-1 | Security update for ImageMagick | 2026-03-20T09:31:53Z | 2026-03-20T09:31:53Z |
| suse-su-2026:0936-1 | Security update for libssh | 2026-03-20T07:46:48Z | 2026-03-20T07:46:48Z |
| suse-su-2026:20916-1 | Security update for vim | 2026-03-20T03:15:49Z | 2026-03-20T03:15:49Z |
| suse-su-2026:20759-1 | Security update for vim | 2026-03-20T03:15:49Z | 2026-03-20T03:15:49Z |
| suse-su-2026:20915-1 | Security update for gstreamer-plugins-ugly | 2026-03-19T13:48:27Z | 2026-03-19T13:48:27Z |
| suse-su-2026:20796-1 | Security update for python311 | 2026-03-19T12:47:35Z | 2026-03-19T12:47:35Z |
| suse-su-2026:20795-1 | Security update for dpkg | 2026-03-19T12:23:49Z | 2026-03-19T12:23:49Z |
| suse-su-2026:20794-1 | Security update for sqlite3 | 2026-03-19T12:20:26Z | 2026-03-19T12:20:26Z |
| suse-su-2026:20767-1 | Security update for libssh | 2026-03-19T11:23:34Z | 2026-03-19T11:23:34Z |
| suse-su-2026:20766-1 | Security update for dpkg | 2026-03-19T11:22:45Z | 2026-03-19T11:22:45Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:20960 | Moderate: xorg-x11-server-Xwayland security update | 2025-11-11T00:00:00Z | 2025-11-19T09:34:47Z |
| alsa-2025:20959 | Important: libsoup security update | 2025-11-11T00:00:00Z | 2025-11-19T09:32:27Z |
| alsa-2025:20958 | Important: tigervnc security update | 2025-11-11T00:00:00Z | 2025-12-01T08:10:34Z |
| alsa-2025:20957 | Important: runc security update | 2025-11-11T00:00:00Z | 2025-11-19T09:31:22Z |
| alsa-2025:20956 | Important: libtiff security update | 2025-11-11T00:00:00Z | 2025-11-19T09:30:24Z |
| alsa-2025:20955 | Important: redis:7 security update | 2025-11-11T00:00:00Z | 2025-11-19T09:42:38Z |
| alsa-2025:20954 | Important: sssd security update | 2025-11-11T00:00:00Z | 2025-12-01T08:13:09Z |
| alsa-2025:20945 | Moderate: vim security update | 2025-11-11T00:00:00Z | 2025-11-19T09:26:44Z |
| alsa-2025:20943 | Moderate: libssh security update | 2025-11-11T00:00:00Z | 2025-11-19T09:28:35Z |
| alsa-2025:20936 | Important: sqlite security update | 2025-11-11T00:00:00Z | 2025-11-19T09:25:24Z |
| alsa-2025:20935 | Important: squid security update | 2025-11-11T00:00:00Z | 2025-11-19T09:24:20Z |
| alsa-2025:20928 | Important: ipa security update | 2025-11-11T00:00:00Z | 2025-12-01T08:16:32Z |
| alsa-2025:20926 | Important: redis security update | 2025-11-11T00:00:00Z | 2025-11-19T09:23:20Z |
| alsa-2025:20922 | Important: webkit2gtk3 security update | 2025-11-11T00:00:00Z | 2025-11-19T09:22:06Z |
| alsa-2025:20909 | Important: podman security update | 2025-11-11T00:00:00Z | 2025-11-24T12:26:34Z |
| alsa-2025:20838 | Moderate: zziplib security update | 2025-11-11T00:00:00Z | 2025-11-19T09:20:52Z |
| alsa-2025:20559 | Low: shadow-utils security update | 2025-11-11T00:00:00Z | 2025-11-19T09:19:16Z |
| alsa-2025:20532 | Moderate: grub2 security update | 2025-11-11T00:00:00Z | 2025-11-19T09:18:10Z |
| alsa-2025:20518 | Moderate: kernel security update | 2025-11-11T00:00:00Z | 2025-11-19T09:15:54Z |
| alsa-2025:20478 | Moderate: zziplib security update | 2025-11-11T00:00:00Z | 2025-11-24T10:49:03Z |
| alsa-2025:20181 | Important: pam security update | 2025-11-11T00:00:00Z | 2025-11-24T10:46:53Z |
| alsa-2025:20155 | Moderate: binutils security update | 2025-11-11T00:00:00Z | 2025-11-24T10:47:58Z |
| alsa-2025:20145 | Low: shadow-utils security update | 2025-11-11T00:00:00Z | 2025-11-24T10:50:07Z |
| alsa-2025:20126 | Moderate: openssh security update | 2025-11-11T00:00:00Z | 2025-11-24T10:51:19Z |
| alsa-2025:20095 | Moderate: kernel security update | 2025-11-11T00:00:00Z | 2025-11-24T10:55:21Z |
| alsa-2025:20034 | Important: libtiff security update | 2025-11-10T00:00:00Z | 2025-11-11T12:31:49Z |
| alsa-2025:19950 | Important: bind9.18 security update | 2025-11-10T00:00:00Z | 2025-11-19T09:11:13Z |
| alsa-2025:19932 | Moderate: kernel-rt security update | 2025-11-10T00:00:00Z | 2025-11-11T12:37:42Z |
| alsa-2025:19931 | Moderate: kernel security update | 2025-11-10T00:00:00Z | 2025-11-11T14:31:40Z |
| alsa-2025:19930 | Moderate: kernel security update | 2025-11-10T00:00:00Z | 2025-11-12T09:59:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-255 | UNKNOWN READ | 2024-04-13T00:10:35.758074Z | 2024-04-17T14:26:32.470274Z |
| osv-2024-251 | Heap-use-after-free in gx_device_forward_finalize | 2024-04-12T00:02:31.478145Z | 2025-01-10T05:30:43.786965Z |
| osv-2024-248 | Security exception in com.github.javaparser.CommentsInserter.insertComments | 2024-04-10T00:06:40.907073Z | 2026-01-13T04:44:52.454141Z |
| osv-2024-246 | UNKNOWN READ in ndpi_detection_process_packet | 2024-04-08T00:12:19.539863Z | 2024-04-08T00:12:19.540398Z |
| osv-2024-245 | Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept | 2024-04-08T00:11:03.595756Z | 2026-04-12T14:19:34.243085Z |
| osv-2024-239 | Use-of-uninitialized-value in H5G__ent_to_link | 2024-04-06T00:11:00.845086Z | 2026-01-13T04:44:11.568412Z |
| osv-2024-233 | Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay | 2024-04-03T00:12:42.632653Z | 2024-04-29T11:29:24.123337Z |
| osv-2024-223 | UNKNOWN READ in H5HG_read | 2024-04-01T00:01:29.989664Z | 2026-01-13T04:44:02.988515Z |
| osv-2024-221 | Heap-buffer-overflow in libspdm_copy_mem | 2024-03-31T00:05:20.376065Z | 2024-04-06T14:38:17.060185Z |
| osv-2024-217 | Heap-use-after-free in dropNode | 2024-03-30T00:03:20.549054Z | 2024-03-30T00:03:20.549358Z |
| osv-2024-207 | Heap-buffer-overflow in emit_goto | 2024-03-27T00:05:42.651468Z | 2024-03-27T00:05:42.651810Z |
| osv-2024-204 | Heap-use-after-free in JS_NewObjectFromShape | 2024-03-27T00:00:05.756758Z | 2024-03-27T00:00:05.757264Z |
| osv-2024-198 | Heap-use-after-free in xmlCopyPropInternal | 2024-03-25T00:05:53.628217Z | 2024-03-25T00:05:53.628547Z |
| osv-2024-195 | Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept | 2024-03-24T00:14:24.746452Z | 2026-01-13T14:21:46.144635Z |
| osv-2024-194 | Heap-use-after-free in xmlDOMWrapNSNormAcquireNormalizedNs | 2024-03-24T00:06:16.876227Z | 2024-03-24T00:06:16.876833Z |
| osv-2024-193 | Use-of-uninitialized-value in api.c | 2024-03-24T00:04:56.514783Z | 2024-03-24T00:04:56.515126Z |
| osv-2024-189 | Negative-size-param in vcf_parse_format | 2024-03-23T00:12:44.903137Z | 2024-04-16T14:19:36.401830Z |
| osv-2024-187 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-23T00:06:48.454975Z | 2024-03-23T00:06:48.455591Z |
| osv-2024-184 | Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse | 2024-03-21T00:13:27.175097Z | 2025-09-25T14:28:31.599671Z |
| osv-2024-182 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-19T00:03:53.557559Z | 2024-03-19T00:03:53.558132Z |
| osv-2024-181 | Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext | 2024-03-18T00:11:51.491190Z | 2024-04-29T11:30:26.169921Z |
| osv-2024-180 | Heap-buffer-overflow in ixheaace_process | 2024-03-17T00:05:09.373138Z | 2024-03-17T00:05:09.373453Z |
| osv-2024-179 | UNKNOWN READ in gs_font_finalize | 2024-03-17T00:03:41.275523Z | 2024-04-12T14:46:15.104038Z |
| osv-2024-178 | Global-buffer-overflow in dissect_dns_answer | 2024-03-16T00:04:44.507570Z | 2024-03-16T00:04:44.508060Z |
| osv-2024-177 | Heap-buffer-overflow in p11_rpc_buffer_get_date_value | 2024-03-16T00:01:15.392885Z | 2024-03-16T00:01:15.393177Z |
| osv-2024-173 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-15T00:09:32.005883Z | 2024-03-15T00:09:32.006372Z |
| osv-2024-171 | Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse | 2024-03-15T00:08:01.855772Z | 2025-09-25T14:28:39.920838Z |
| osv-2024-170 | Use-of-uninitialized-value in pcpp::Packet::createFirstLayer | 2024-03-14T00:14:30.862304Z | 2024-03-14T00:14:30.862862Z |
| osv-2024-167 | Security exception in com.github.javaparser.GeneratedJavaParser.Expression | 2024-03-14T00:10:52.218597Z | 2024-04-29T11:19:04.592001Z |
| osv-2024-163 | Stack-buffer-overflow in H5S_get_simple_extent_dims | 2024-03-12T00:05:38.587103Z | 2024-04-29T11:18:04.652469Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2022-0038 | Denial of service on deeply nested fragment requests | 2022-07-28T12:00:00Z | 2022-08-02T17:59:55Z |
| rustsec-2022-0086 | Slack OAuth Secrets leak in debug logs | 2022-07-22T12:00:00Z | 2023-02-02T11:43:48Z |
| rustsec-2022-0034 | Safety issues in `pkcs11` | 2022-07-22T12:00:00Z | 2022-07-25T17:19:15Z |
| rustsec-2022-0037 | Denial of service on deeply nested fragment requests | 2022-07-21T12:00:00Z | 2022-08-06T06:41:24Z |
| rustsec-2022-0100 | Use After Free with `externref`s in Wasmtime | 2022-07-12T12:00:00Z | 2025-05-02T08:23:27Z |
| rustsec-2022-0084 | libp2p Lack of resource management DoS | 2022-07-12T12:00:00Z | 2023-02-02T11:22:51Z |
| rustsec-2022-0101 | Miscompilation of constant values in division on AArch64 | 2022-07-05T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2022-0033 | Heap memory corruption with RSA private key operation | 2022-07-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0032 | AES OCB fails to encrypt some bytes | 2022-07-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0095 | Miscompilation of `i8x16.swizzle` and `select` with v128 inputs | 2022-06-27T12:00:00Z | 2025-05-02T08:23:27Z |
| rustsec-2022-0056 | clipboard is Unmaintained | 2022-06-25T12:00:00Z | 2022-09-24T11:52:27Z |
| rustsec-2022-0093 | Double Public Key Signing Function Oracle Attack on `ed25519-dalek` | 2022-06-11T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2022-0029 | `MsQueue` `push`/`pop` use the wrong orderings | 2022-06-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0028 | Use after free in Neon external buffers | 2022-05-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0031 | Panic due to improper UTF-8 indexing | 2022-05-21T12:00:00Z | 2022-06-26T20:01:26Z |
| rustsec-2022-0030 | Stack overflow during recursive expression parsing | 2022-05-21T12:00:00Z | 2022-06-26T19:44:13Z |
| rustsec-2022-0054 | wee_alloc is Unmaintained | 2022-05-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0046 | Out-of-bounds read when opening multiple column families with TTL | 2022-05-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0024 | double-checked-cell is unmaintained | 2022-05-11T12:00:00Z | 2022-05-11T21:13:02Z |
| rustsec-2022-0023 | `static_type_map` has been renamed to `erased_set` | 2022-05-11T12:00:00Z | 2022-05-11T19:44:11Z |
| rustsec-2022-0042 | malicious crate `rustdecimal` | 2022-05-10T12:00:00Z | 2026-03-17T22:31:38Z |
| rustsec-2022-0022 | Parser creates invalid uninitialized value | 2022-05-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0021 | `SegQueue` creates zero value of any type | 2022-05-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0020 | `SegQueue` creates zero value of any type | 2022-05-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0019 | Channel creates zero value of any type | 2022-05-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0018 | Timing attack | 2022-05-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0027 | `OCSP_basic_verify` may incorrectly verify the response signing certificate | 2022-05-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0026 | Incorrect MAC key used in the RC4-MD5 ciphersuite | 2022-05-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0025 | Resource leakage when decoding certificates and keys | 2022-05-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0017 | `array!` macro is unsound when its length is impure constant | 2022-04-27T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-python-2026-0672 | Header injection in http.cookies.Morsel | 2026-01-26T14:50:03.015Z | 2026-04-10T09:26:18.172Z |
| bit-solr-2026-22444 | Apache Solr: Insufficient file-access checking in standalone core-creation requests | 2026-01-26T14:49:58.661Z | 2026-01-26T15:09:56.435Z |
| bit-solr-2026-22022 | Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin | 2026-01-26T14:49:57.084Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3647 | Moodle: idor when accessing the cohorts report | 2026-01-26T14:49:52.208Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3645 | Moodle: idor in messaging web service allows access to some user details | 2026-01-26T14:49:50.806Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3644 | Moodle: ajax section delete does not respect course_can_delete_section() | 2026-01-26T14:49:49.408Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3643 | Moodle: reflected xss risk in policy tool | 2026-01-26T14:49:47.987Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3642 | Moodle: authenticated remote code execution risk in the moodle lms equella repository | 2026-01-26T14:49:46.287Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3641 | Moodle: authenticated remote code execution risk in the moodle lms dropbox repository | 2026-01-26T14:49:44.921Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-15367 | POP3 command injection in user-controlled commands | 2026-01-26T14:49:43.697Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3640 | Moodle: idor in web service allows users enrolled in a course to access some details of other users | 2026-01-26T14:49:43.349Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-15366 | IMAP command injection in user-controlled commands | 2026-01-26T14:49:42.105Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-15282 | Header injection via newlines in data URL mediatype | 2026-01-26T14:49:40.631Z | 2026-04-10T09:26:18.172Z |
| bit-moodle-2025-3637 | Moodle: csrf token exposure via url in moodle mod_data module | 2026-01-26T14:49:40.549Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3636 | Moodle: idor in moodle rss block allows unauthorized access to rss feeds | 2026-01-26T14:49:39.118Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3635 | Moodle: csrf risk in moodle user tours manager allows tour duplication | 2026-01-26T14:49:37.686Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3634 | Moodle: moodle allows course self-enrolment before completing mfa | 2026-01-26T14:49:36.271Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-12781 | base64.b64decode() always accepts "+/" characters, despite setting altchars | 2026-01-26T14:49:35.455Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3628 | Moodle: moodle assignment submission search leaks anonymous student identities | 2026-01-26T14:49:34.772Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3627 | Moodle: partial data exposure in moodle before completing multi-factor authentication | 2026-01-26T14:49:33.343Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-11468 | Folding email comments of unfoldable characters doesn't preserve parenthesis | 2026-01-26T14:49:32.088Z | 2026-04-10T09:26:18.172Z |
| bit-moodle-2025-3625 | Moodle: user dos and name disclosure via idor in moodle mfa email factor revoke action | 2026-01-26T14:49:31.897Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-32045 | Moodle: hidden grades shown to users without permission on some grade reports | 2026-01-26T14:49:30.385Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-32044 | Moodle: unauthenticated rest api user data exposure | 2026-01-26T14:49:29.093Z | 2026-01-26T15:09:56.435Z |
| bit-node-2026-21637 | 2026-01-26T14:48:02.384Z | 2026-01-31T09:09:11.750Z | |
| bit-node-2026-21636 | 2026-01-26T14:48:00.613Z | 2026-01-31T09:09:11.750Z | |
| bit-node-2025-59466 | 2026-01-26T14:47:58.830Z | 2026-01-31T09:09:11.750Z | |
| bit-node-2025-59465 | 2026-01-26T14:47:56.981Z | 2026-01-26T15:09:56.435Z | |
| bit-node-2025-59464 | 2026-01-26T14:47:55.131Z | 2026-01-31T09:09:11.750Z | |
| bit-node-2025-55132 | 2026-01-26T14:47:53.358Z | 2026-02-04T10:19:33.233Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-nv34418 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:04:54.566695Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-qv26039 | Within HostnameError | 2026-01-30T16:03:24.653963Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mf93723 | Within HostnameError | 2026-01-30T16:03:24.521286Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ec15228 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:02:54.964872Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-xr85161 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:02:54.934169Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bd53293 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:02:54.709597Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-wq07901 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T16:01:54.911193Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-np17404 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T15:58:24.395667Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oa33370 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T15:57:24.977544Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-yc48827 | Within HostnameError | 2026-01-30T15:56:24.532632Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hv28992 | Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3 | 2026-01-30T15:55:24.450018Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dp30290 | processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input | 2026-01-30T15:52:54.729374Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oh86281 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:52:25.054249Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ll43287 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:50:54.603931Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ej58111 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:50:24.547860Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-qw16951 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:48:54.464404Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-sv79070 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:47:54.520743Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ad41794 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:47:54.368234Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-zp68963 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:47:54.288582Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gc16599 | Cancelling a query (e | 2026-01-30T15:46:54.243517Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-tr11635 | Cancelling a query (e | 2026-01-30T15:46:54.229170Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-xd92996 | Cancelling a query (e | 2026-01-30T15:46:24.650971Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ok45738 | Within HostnameError | 2026-01-30T15:45:53.967263Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rx06615 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:45:24.056160Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fj56296 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:45:23.960354Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bt39952 | Moby is an open source container framework developed by Docker Inc | 2026-01-30T15:45:23.955705Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-uy81473 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:44:54.187987Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bs24435 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:44:54.166999Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bq46815 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:43:24.142238Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-me47927 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:43:24.066833Z | 2026-01-29T18:58:54Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1038 | Vulnérabilité dans les produits PrimX | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1037 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1036 | Multiples vulnérabilités dans les produits VMware | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1035 | Multiples vulnérabilités dans les produits Synology | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1034 | Multiples vulnérabilités dans les produits IBM | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1033 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1032 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1031 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1030 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1029 | Vulnérabilité dans les produits Kaspersky | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1028 | Vulnérabilité dans GnuTLS | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1027 | Multiples vulnérabilités dans les produits SonicWall | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1026 | Multiples vulnérabilités dans Wireshark | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1025 | Multiples vulnérabilités dans les produits Atlassian | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1024 | Multiples vulnérabilités dans les produits VMware | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1023 | Multiples vulnérabilités dans les produits Fortinet | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1022 | Multiples vulnérabilités dans Microsoft Edge | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1021 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1020 | Multiples vulnérabilités dans les produits SolarWinds | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1019 | Multiples vulnérabilités dans Mattermost Server | 2025-11-18T00:00:00.000000 | 2025-11-18T00:00:00.000000 |
| certfr-2025-avi-1018 | Multiples vulnérabilités dans Google Chrome | 2025-11-18T00:00:00.000000 | 2025-11-18T00:00:00.000000 |
| certfr-2025-avi-1017 | Multiples vulnérabilités dans Mattermost Server | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1016 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1015 | Multiples vulnérabilités dans les produits NetApp | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1014 | Vulnérabilité dans Fortinet FortiWeb | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1013 | Multiples vulnérabilités dans les produits IBM | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1012 | Vulnérabilité dans Microsoft Edge | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1011 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1010 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1009 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000081 | "Rikunabi NEXT" App for Android fails to restrict custom URL schemes properly | 2023-08-09T12:45+09:00 | 2024-03-28T18:01+09:00 |
| jvndb-2023-000080 | "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly | 2023-08-07T17:39+09:00 | 2024-03-28T17:54+09:00 |
| jvndb-2023-000079 | Multiple vulnerabilities in Special Interest Group Network for Analysis and Liaison's API | 2023-08-07T15:15+09:00 | 2024-03-28T18:08+09:00 |
| jvndb-2023-000077 | Fujitsu Software Infrastructure Manager (ISM) stores sensitive information in cleartext | 2023-08-04T17:31+09:00 | 2024-04-03T17:19+09:00 |
| jvndb-2023-002787 | OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS) | 2023-08-03T13:45+09:00 | 2023-08-03T13:45+09:00 |
| jvndb-2023-002786 | Multiple vulnerabilities in OMRON CX-Programmer | 2023-08-03T13:42+09:00 | 2024-04-05T17:39+09:00 |
| jvndb-2023-000076 | SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS) | 2023-08-02T14:55+09:00 | 2024-04-19T17:27+09:00 |
| jvndb-2023-002725 | Multiple vulnerabilities in Command Center RX (CCRX) of Kyocera Document Solutions MFPs and printers | 2023-07-28T18:24+09:00 | 2024-05-07T18:15+09:00 |
| jvndb-2023-002722 | Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass | 2023-07-27T18:12+09:00 | 2024-04-19T18:07+09:00 |
| jvndb-2023-000074 | Fujitsu Real-time Video Transmission Gear "IP series" uses a hard-coded credentials | 2023-07-26T18:00+09:00 | 2024-04-12T18:04+09:00 |
| jvndb-2023-000075 | Improper restriction of XML external entity references (XXE) in Applicant Programme | 2023-07-24T15:44+09:00 | 2024-04-22T14:20+09:00 |
| jvndb-2023-000073 | GBrowse vulnerable to unrestricted upload of files with dangerous types | 2023-07-21T15:02+09:00 | 2024-04-12T17:31+09:00 |
| jvndb-2023-000070 | Multiple vulnerabilities in WordPress Plugin "TS Webfonts for SAKURA" | 2023-07-20T16:05+09:00 | 2024-04-17T17:20+09:00 |
| jvndb-2023-002512 | EL Injection Vulnerability in Hitachi Replication Manager | 2023-07-19T14:48+09:00 | 2024-04-26T12:24+09:00 |
| jvndb-2023-002511 | File and Directory Permissions Vulnerability in Hitachi Command Suite | 2023-07-19T14:48+09:00 | 2024-04-26T12:29+09:00 |
| jvndb-2023-002510 | Multiple Vulnerabilities in Hitachi Device Manager | 2023-07-19T14:48+09:00 | 2023-07-19T14:48+09:00 |
| jvndb-2023-000072 | Improper restriction of XML external entity references (XXE) in XBRL data create application | 2023-07-18T15:22+09:00 | 2024-03-19T18:11+09:00 |
| jvndb-2023-002413 | Multiple vulnerabilities in ELECOM and LOGITEC wireless LAN routers | 2023-07-12T16:15+09:00 | 2024-04-22T16:18+09:00 |
| jvndb-2023-000071 | Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters | 2023-07-11T15:37+09:00 | 2024-03-29T15:28+09:00 |
| jvndb-2023-000069 | Multiple vulnerabilities in SoftEther VPN and PacketiX VPN | 2023-07-03T15:07+09:00 | 2024-05-22T17:47+09:00 |
| jvndb-2023-000068 | "NewsPicks" App uses a hard-coded API key for an external service | 2023-06-30T15:06+09:00 | 2024-04-30T18:09+09:00 |
| jvndb-2023-002270 | Null pointer dereference vulnerability in multiple printers and MFPs which implement BROTHER debut web server | 2023-06-30T11:49+09:00 | 2024-04-22T16:07+09:00 |
| jvndb-2023-000067 | WordPress Plugin "Snow Monkey Forms" vulnerable to directory traversal | 2023-06-27T17:05+09:00 | 2024-04-26T17:56+09:00 |
| jvndb-2023-000065 | Multiple vulnerabilities in WAVLINK WL-WN531AX2 | 2023-06-27T16:50+09:00 | 2023-06-27T16:50+09:00 |
| jvndb-2023-000066 | Multiple vulnerabilities in Aterm series | 2023-06-27T15:12+09:00 | 2024-05-22T18:16+09:00 |
| jvndb-2023-000060 | Multiple vulnerabilities in Pleasanter | 2023-06-22T15:49+09:00 | 2024-05-07T14:10+09:00 |
| jvndb-2023-000064 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to Regular expression Denial-of-Service (ReDoS) | 2023-06-20T14:48+09:00 | 2024-04-26T18:03+09:00 |
| jvndb-2023-000063 | Multiple vulnerabilities in Panasonic AiSEG2 | 2023-06-16T14:05+09:00 | 2023-06-16T14:05+09:00 |
| jvndb-2023-002111 | Printer Driver Packager NX creates driver installation packages without modification detection | 2023-06-15T16:06+09:00 | 2024-05-23T15:45+09:00 |
| jvndb-2023-002100 | Security updates for multiple Trend Micro products for enterprises (June 2023) | 2023-06-14T14:47+09:00 | 2024-05-23T15:23+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-13372 | OpenClaw操作系统命令注入漏洞（CNVD-2026-13372） | 2026-03-02 | 2026-03-12 |
| cnvd-2026-13295 | OpenClaw路径遍历漏洞 | 2026-03-02 | 2026-03-11 |
| cnvd-2026-13294 | OpenClaw代码问题漏洞 | 2026-03-02 | 2026-03-11 |
| cnvd-2026-13292 | OpenClaw命令注入漏洞 | 2026-03-02 | 2026-03-11 |
| cnvd-2026-12892 | Apache Shiro身份验证绕过漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12770 | WordPress插件Web Accessibility by accessiBe信息泄露漏洞 | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12769 | WordPress插件Simple Ajax Chat信息泄露漏洞 | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12768 | WordPress插件Context Blog信息泄露漏洞 | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12767 | D-Link DWR-M960 formDdns文件缓冲区溢出漏洞 | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12763 | Google Chrome缓冲区溢出漏洞（CNVD-2026-12763） | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12702 | Adobe After Effects存在内存释放后使用漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12701 | Adobe After Effects存在二进制漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12700 | Adobe Substance 3D Stager存在越界读取漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12699 | Adobe Substance 3D Stager存在越界读取漏洞（CNVD-2026-12699） | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12698 | Adobe Substance 3D Stager存在越界写入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12697 | Adobe Substance 3D Stager存在越界写入漏洞（CNVD-2026-12697） | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12696 | Adobe InDesign Desktop存在越界读取漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12694 | Adobe After Effects 25.6及之前版本存在内存释放后使用漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12693 | Adobe After Effects存在越界写入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12691 | Adobe After Effects存在越界写入漏洞（CNVD-2026-12691） | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12690 | Adobe After Effects存在越界读取漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12689 | Adobe After Effects存在越界读取漏洞（CNVD-2026-12689） | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12688 | Adobe After Effects存在越界读取漏洞（CNVD-2026-12688） | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12668 | IBM webMethods Integration Server存在HTML注入漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12667 | IBM Sterling B2B Integrator和IBM Sterling File Gateway存在信息泄露漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12666 | IBM MQ Operator和IBM‑supplied MQ Advanced container images存在日志注入漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12665 | IBM Db2存在拒绝服务漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12664 | IBM Db2存在XML外部实体注入漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12663 | IBM Concert存在弱密码算法漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12560 | Microsoft Windows资源管理错误漏洞（CNVD-2026-12560） | 2026-03-02 | 2026-03-04 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-01122 | Уязвимость функции sub_40AC74() микропрограммного обеспечения маршрутизаторов D-link DIR-… | 03.02.2026 | 03.02.2026 |
| bdu:2026-01121 | Уязвимость функции django.core.serializers.xml_serializer.getInnerText() программной плат… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01120 | Уязвимость прикладного программного интерфейса платформы для мониторинга и наблюдения Gra… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01119 | Уязвимость компонента keycloak-services программного средства для управления идентификаци… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01118 | Уязвимость программного обеспечения для управления базами данных Adminer, связанная с нед… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01117 | Уязвимость функции tegra_adma_terminate_all() ядра операционной системы Linux, позволяюща… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01116 | Уязвимость компонента dmaengine ядра операционной системы Linux, позволяющая нарушителю в… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01115 | Уязвимость компонента perf ядра операционной системы Linux, позволяющая нарушителю оказат… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01114 | Уязвимость компонента ASoC ядра операционной системы Linux, позволяющая нарушителю вызват… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01113 | Уязвимость функции skb_vlan_inet_prepare() ядра операционной системы Linux, позволяющая н… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01112 | Уязвимость функции __kernel_read() ядра операционной системы Linux, позволяющая нарушител… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01111 | Уязвимость функции macvlan_forward_source() ядра операционной системы Linux, позволяющая … | 02.02.2026 | 02.02.2026 |
| bdu:2026-01110 | Уязвимость функции qfq_change_class() ядра операционной системы Linux, позволяющая наруши… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01109 | Уязвимость функции j1939_xtp_rx_rts_session_active() ядра операционной системы Linux, поз… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01108 | Уязвимость фреймворка для разведки веб-приложений reNgine, связанная с неверной нейтрализ… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01107 | Уязвимость антивирусных программных средств Trend Micro Worry-Free Business Security и Wo… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01106 | Уязвимость IP-камеры видеонаблюдения TP-Link VIGI C385 V1, связанная с переполнением буфе… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01105 | Уязвимость службы Content Distribution Service (NomadBranch.exe) программной платформы дл… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01104 | Уязвимость программного обеспечения контроллеров для управления корпоративными сетями Oma… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01103 | Уязвимость микропрограммного обеспечения маршрутизатора D-Link DSL-124, связанная с отсут… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01102 | Уязвимость службы Content Distribution Service (NomadBranch.exe) программной платформы дл… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01101 | Уязвимость службы Content Distribution Service (NomadBranch.exe) программной платформы дл… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01100 | Уязвимость службы Content Distribution Service (NomadBranch.exe) программной платформы дл… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01099 | Уязвимость службы Content Distribution Service (NomadBranch.exe) программной платформы дл… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01098 | Уязвимость службы Content Distribution Service (NomadBranch.exe) программной платформы дл… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01097 | Уязвимость VPN-сервиса Avast SecureLine VPN, связанная с отсутствием кавычек в написании … | 02.02.2026 | 02.02.2026 |
| bdu:2026-01096 | Уязвимость службы EMP_NSWLSV Service утилиты для передачи контента по IP-сети EasyMP Netw… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01070 | Уязвимость системы централизованного управления мультимедийным контентом MagicINFO 9, свя… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01069 | Уязвимость системы централизованного управления мультимедийным контентом MagicINFO 9, свя… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01068 | Уязвимость системы централизованного управления мультимедийным контентом MagicINFO 9, свя… | 02.02.2026 | 02.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201911-1627 | Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, … | 2026-04-10T22:02:49.110000Z |
| var-201904-0981 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow … | 2026-04-10T22:02:41.674000Z |
| var-201211-0370 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2026-04-10T22:02:41.559000Z |
| var-202205-1304 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2026-04-10T22:02:04.204000Z |
| var-201302-0143 | Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… | 2026-04-10T22:02:03.706000Z |
| var-200501-0287 | Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a… | 2026-04-10T22:02:02.821000Z |
| var-201912-0125 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-04-10T22:02:01.162000Z |
| var-202103-0218 | A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can … | 2026-04-10T22:01:06.779000Z |
| var-200704-0216 | Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 al… | 2026-04-10T22:00:32.146000Z |
| var-201904-1403 | The issue was addressed by removing origin information. This issue affected versions prio… | 2026-04-10T22:00:23.262000Z |
| var-201304-0378 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-04-10T22:00:23.149000Z |
| var-200702-0471 | Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allow… | 2026-04-10T22:00:22.702000Z |
| var-201302-0136 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-04-10T22:00:21.908000Z |
| var-202106-0343 | Improper isolation of shared resources in some Intel(R) Processors may allow an authentic… | 2026-04-10T22:00:19.849000Z |
| var-201506-0264 | The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.… | 2026-04-10T21:59:08.776000Z |
| var-202003-1771 | A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-pro… | 2026-04-10T21:58:37.900000Z |
| var-201908-0266 | Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a den… | 2026-04-10T21:58:07.634000Z |
| var-201602-0004 | Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the… | 2026-04-10T21:58:07.360000Z |
| var-201401-0579 | expat before version 2.4.0 does not properly handle entities expansion unless an applicat… | 2026-04-10T21:58:06.961000Z |
| var-201310-0366 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… | 2026-04-10T21:58:06.417000Z |
| var-202010-1245 | A logic issue was addressed with improved state management. This issue is fixed in iOS 13… | 2026-04-10T21:58:02.254000Z |
| var-202201-0499 | Heap-based Buffer Overflow in vim/vim prior to 8.2. vim Exists in an out-of-bounds write … | 2026-04-10T21:58:01.253000Z |
| var-201803-0086 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) … | 2026-04-10T21:58:00.654000Z |
| var-200512-0293 | Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-de… | 2026-04-10T21:58:00.605000Z |
| var-202004-0812 | In ksh version 20120801, a flaw was found in the way it evaluates certain environment var… | 2026-04-10T21:57:56.195000Z |
| var-200611-0368 | The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Pas… | 2026-04-10T21:57:18.813000Z |
| var-202205-0855 | Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4… | 2026-04-10T21:57:17.647000Z |
| var-201912-0589 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-04-10T21:57:16.223000Z |
| var-202209-0761 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed … | 2026-04-10T21:56:42.876000Z |
| var-201106-0131 | The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion be… | 2026-04-10T21:56:40.388000Z |