Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-40593 |
4.8 (3.1)
|
ChurchCRM: Stored XSS in UserEditor.php via Login Name Field |
ChurchCRM |
CRM |
2026-04-18T00:02:59.606Z | 2026-04-20T14:56:05.666Z |
| CVE-2026-40348 |
7.7 (3.1)
|
Movary has Authenticated SSRF via Jellyfin Server URL … |
leepeuker |
movary |
2026-04-18T00:01:09.725Z | 2026-04-20T16:11:32.779Z |
| CVE-2026-40347 |
5.3 (3.1)
|
Python-Multipart affected by Denial of Service via lar… |
Kludex |
python-multipart |
2026-04-17T23:56:50.777Z | 2026-04-20T15:46:40.011Z |
| CVE-2026-40346 |
6.4 (4.0)
|
NocoBase has SSRF in Workflow HTTP Request and Custom … |
nocobase |
@nocobase/plugin-workflow-request |
2026-04-17T23:54:34.829Z | 2026-04-20T14:56:12.829Z |
| CVE-2026-40581 |
8.1 (3.1)
|
ChurchCRM: Cross-Site Request Forgery (CSRF) in Select… |
ChurchCRM |
CRM |
2026-04-17T23:51:32.765Z | 2026-04-20T16:15:58.183Z |
| CVE-2026-40337 |
5.1 (3.1)
|
Sentry kernel has incomplete ownership check for IRQ l… |
camelot-os |
sentry-kernel |
2026-04-17T23:51:09.866Z | 2026-04-20T16:13:48.908Z |
| CVE-2026-40341 |
3.5 (3.1)
|
libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx |
gphoto |
libgphoto2 |
2026-04-17T23:48:36.644Z | 2026-04-20T16:14:19.107Z |
| CVE-2026-40340 |
6.1 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack… |
gphoto |
libgphoto2 |
2026-04-17T23:45:17.467Z | 2026-04-20T13:36:05.149Z |
| CVE-2026-40339 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormF… |
gphoto |
libgphoto2 |
2026-04-17T23:42:32.586Z | 2026-04-20T14:56:21.979Z |
| CVE-2026-40338 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enume… |
gphoto |
libgphoto2 |
2026-04-17T23:40:10.097Z | 2026-04-20T16:16:08.585Z |
| CVE-2026-40485 |
5.3 (3.1)
|
ChurchCRM: Username Enumeration via Differential Respo… |
ChurchCRM |
CRM |
2026-04-17T23:29:35.884Z | 2026-04-20T13:36:05.319Z |
| CVE-2026-40336 |
2.4 (3.1)
|
libgphoto2 has memory leak in ptp_unpack_Sony_DPD() se… |
gphoto |
libgphoto2 |
2026-04-17T23:27:42.868Z | 2026-04-20T16:14:53.071Z |
| CVE-2026-2262 |
7.5 (3.1)
|
Easy Appointments <= 3.12.21 - Unauthenticated Sensiti… |
easyappointments |
Easy Appointments |
2026-04-17T23:26:48.863Z | 2026-04-20T13:51:28.513Z |
| CVE-2026-40484 |
9.1 (3.1)
|
ChurchCRM: Authenticated Remote Code Execution via Unr… |
ChurchCRM |
CRM |
2026-04-17T23:25:06.319Z | 2026-04-20T14:56:29.684Z |
| CVE-2026-40483 |
5.4 (3.1)
|
ChurchCRM: Stored XSS in PledgeEditor.php via Donation… |
ChurchCRM |
CRM |
2026-04-17T23:20:44.900Z | 2026-04-20T16:16:17.841Z |
| CVE-2026-40335 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/IN… |
gphoto |
libgphoto2 |
2026-04-17T23:19:16.935Z | 2026-04-20T13:36:05.542Z |
| CVE-2026-40334 |
3.5 (3.1)
|
libgphoto2 missing null termination in ptp_unpack_Cano… |
gphoto |
libgphoto2 |
2026-04-17T23:16:38.751Z | 2026-04-20T13:36:05.703Z |
| CVE-2026-40582 |
9.1 (4.0)
|
ChurchCRM: Authentication Bypass in `/api/public/user/… |
ChurchCRM |
CRM |
2026-04-17T23:16:13.862Z | 2026-04-20T14:56:36.921Z |
| CVE-2026-40333 |
6.1 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat(… |
gphoto |
libgphoto2 |
2026-04-17T23:11:11.073Z | 2026-04-20T14:56:44.091Z |
| CVE-2026-40480 |
7.1 (4.0)
|
ChurchCRM has Missing Object-Level Authorization / IDO… |
ChurchCRM |
CRM |
2026-04-17T23:07:30.126Z | 2026-04-20T16:16:00.433Z |
| CVE-2026-40324 |
9.1 (3.1)
|
Hot Chocolate's Utf8GraphQLParser has Stack Overflow v… |
ChilliCream |
graphql-platform |
2026-04-17T23:05:26.217Z | 2026-04-20T16:16:25.151Z |
| CVE-2026-40482 |
7.1 (4.0)
|
ChurchCRM has Authenticated SQL Injection in `/api/fam… |
ChurchCRM |
CRM |
2026-04-17T22:58:48.528Z | 2026-04-20T16:16:32.247Z |
| CVE-2026-40323 |
8.9 (4.0)
|
SP1 V6 Recursion Circuit Row-Count Binding Gap |
succinctlabs |
sp1 |
2026-04-17T22:58:42.580Z | 2026-04-20T16:16:41.143Z |
| CVE-2026-40481 |
8.2 (4.0)
|
monetr: Unauthenticated Stripe webhook reads attacker-… |
monetr |
monetr |
2026-04-17T22:54:57.545Z | 2026-04-20T13:36:05.862Z |
| CVE-2026-40486 |
4.3 (3.1)
|
Kimai's User Preferences API allows standard users to … |
kimai |
kimai |
2026-04-17T22:35:53.543Z | 2026-04-20T14:56:51.165Z |
| CVE-2026-40479 |
5.4 (3.1)
|
Kimai: Stored XSS via Incomplete HTML Attribute Escapi… |
kimai |
kimai |
2026-04-17T22:31:29.930Z | 2026-04-20T16:16:41.880Z |
| CVE-2026-2434 |
6.4 (3.1)
|
Pz-LinkCard <= 2.5.8.1 - Authenticated (Contributor+) … |
poporon |
Pz-LinkCard |
2026-04-17T22:27:13.525Z | 2026-04-20T13:36:06.124Z |
| CVE-2026-40478 |
9.1 (3.1)
|
Improper neutralization of specific syntax patterns fo… |
thymeleaf |
thymeleaf |
2026-04-17T21:57:01.560Z | 2026-04-20T16:17:11.654Z |
| CVE-2026-40477 |
9.1 (3.1)
|
Improper restriction of the scope of accessible object… |
thymeleaf |
thymeleaf |
2026-04-17T21:53:47.271Z | 2026-04-20T13:36:06.261Z |
| CVE-2026-40476 |
6.9 (4.0)
|
graphql-php: Denial of Service via quadratic complexit… |
webonyx |
graphql-php |
2026-04-17T21:42:59.511Z | 2026-04-20T14:56:57.812Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-40480 |
7.1 (4.0)
|
ChurchCRM has Missing Object-Level Authorization / IDO… |
ChurchCRM |
CRM |
2026-04-17T23:07:30.126Z | 2026-04-20T16:16:00.433Z |
| CVE-2026-40349 |
8.8 (3.1)
|
Authenticated Movary User Can Self-Escalate to Adminis… |
leepeuker |
movary |
2026-04-18T00:05:46.360Z | 2026-04-20T16:15:49.844Z |
| CVE-2026-40348 |
7.7 (3.1)
|
Movary has Authenticated SSRF via Jellyfin Server URL … |
leepeuker |
movary |
2026-04-18T00:01:09.725Z | 2026-04-20T16:11:32.779Z |
| CVE-2026-40347 |
5.3 (3.1)
|
Python-Multipart affected by Denial of Service via lar… |
Kludex |
python-multipart |
2026-04-17T23:56:50.777Z | 2026-04-20T15:46:40.011Z |
| CVE-2026-40346 |
6.4 (4.0)
|
NocoBase has SSRF in Workflow HTTP Request and Custom … |
nocobase |
@nocobase/plugin-workflow-request |
2026-04-17T23:54:34.829Z | 2026-04-20T14:56:12.829Z |
| CVE-2026-40341 |
3.5 (3.1)
|
libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx |
gphoto |
libgphoto2 |
2026-04-17T23:48:36.644Z | 2026-04-20T16:14:19.107Z |
| CVE-2026-40340 |
6.1 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack… |
gphoto |
libgphoto2 |
2026-04-17T23:45:17.467Z | 2026-04-20T13:36:05.149Z |
| CVE-2026-40339 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormF… |
gphoto |
libgphoto2 |
2026-04-17T23:42:32.586Z | 2026-04-20T14:56:21.979Z |
| CVE-2026-40338 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enume… |
gphoto |
libgphoto2 |
2026-04-17T23:40:10.097Z | 2026-04-20T16:16:08.585Z |
| CVE-2026-40337 |
5.1 (3.1)
|
Sentry kernel has incomplete ownership check for IRQ l… |
camelot-os |
sentry-kernel |
2026-04-17T23:51:09.866Z | 2026-04-20T16:13:48.908Z |
| CVE-2026-40336 |
2.4 (3.1)
|
libgphoto2 has memory leak in ptp_unpack_Sony_DPD() se… |
gphoto |
libgphoto2 |
2026-04-17T23:27:42.868Z | 2026-04-20T16:14:53.071Z |
| CVE-2026-40335 |
5.2 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/IN… |
gphoto |
libgphoto2 |
2026-04-17T23:19:16.935Z | 2026-04-20T13:36:05.542Z |
| CVE-2026-40334 |
3.5 (3.1)
|
libgphoto2 missing null termination in ptp_unpack_Cano… |
gphoto |
libgphoto2 |
2026-04-17T23:16:38.751Z | 2026-04-20T13:36:05.703Z |
| CVE-2026-40333 |
6.1 (3.1)
|
libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat(… |
gphoto |
libgphoto2 |
2026-04-17T23:11:11.073Z | 2026-04-20T14:56:44.091Z |
| CVE-2026-40324 |
9.1 (3.1)
|
Hot Chocolate's Utf8GraphQLParser has Stack Overflow v… |
ChilliCream |
graphql-platform |
2026-04-17T23:05:26.217Z | 2026-04-20T16:16:25.151Z |
| CVE-2026-40323 |
8.9 (4.0)
|
SP1 V6 Recursion Circuit Row-Count Binding Gap |
succinctlabs |
sp1 |
2026-04-17T22:58:42.580Z | 2026-04-20T16:16:41.143Z |
| CVE-2026-2262 |
7.5 (3.1)
|
Easy Appointments <= 3.12.21 - Unauthenticated Sensiti… |
easyappointments |
Easy Appointments |
2026-04-17T23:26:48.863Z | 2026-04-20T13:51:28.513Z |
| CVE-2026-5250 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-04-17T22:21:51.917Z | |
| CVE-2026-40486 |
4.3 (3.1)
|
Kimai's User Preferences API allows standard users to … |
kimai |
kimai |
2026-04-17T22:35:53.543Z | 2026-04-20T14:56:51.165Z |
| CVE-2026-40481 |
8.2 (4.0)
|
monetr: Unauthenticated Stripe webhook reads attacker-… |
monetr |
monetr |
2026-04-17T22:54:57.545Z | 2026-04-20T13:36:05.862Z |
| CVE-2026-40479 |
5.4 (3.1)
|
Kimai: Stored XSS via Incomplete HTML Attribute Escapi… |
kimai |
kimai |
2026-04-17T22:31:29.930Z | 2026-04-20T16:16:41.880Z |
| CVE-2026-2434 |
6.4 (3.1)
|
Pz-LinkCard <= 2.5.8.1 - Authenticated (Contributor+) … |
poporon |
Pz-LinkCard |
2026-04-17T22:27:13.525Z | 2026-04-20T13:36:06.124Z |
| CVE-2026-5720 |
7.1 (4.0)
|
miniupnpd Integer Underflow SOAPAction Header Parsing |
miniupnp project |
miniupnpd |
2026-04-17T21:39:54.818Z | 2026-04-20T16:59:21.060Z |
| CVE-2026-40478 |
9.1 (3.1)
|
Improper neutralization of specific syntax patterns fo… |
thymeleaf |
thymeleaf |
2026-04-17T21:57:01.560Z | 2026-04-20T16:17:11.654Z |
| CVE-2026-40477 |
9.1 (3.1)
|
Improper restriction of the scope of accessible object… |
thymeleaf |
thymeleaf |
2026-04-17T21:53:47.271Z | 2026-04-20T13:36:06.261Z |
| CVE-2026-40476 |
6.9 (4.0)
|
graphql-php: Denial of Service via quadratic complexit… |
webonyx |
graphql-php |
2026-04-17T21:42:59.511Z | 2026-04-20T14:56:57.812Z |
| CVE-2026-40474 |
7.6 (3.1)
|
wger has Broken Access Control in the Global Gym Confi… |
wger-project |
wger |
2026-04-17T21:39:03.677Z | 2026-04-20T16:08:12.427Z |
| CVE-2026-40353 |
5.1 (4.0)
|
wger: Stored XSS via Unescaped License Attribution Fields |
wger-project |
wger |
2026-04-17T21:16:12.401Z | 2026-04-20T16:17:52.305Z |
| CVE-2026-40352 |
8.8 (3.1)
|
FastGPT: NoSQL Injection in updatePasswordByOld Leads … |
labring |
FastGPT |
2026-04-17T21:09:32.913Z | 2026-04-20T13:36:06.464Z |
| CVE-2026-40351 |
9.8 (3.1)
|
FastGPT: NoSQL Injection in loginByPassword leads to A… |
labring |
FastGPT |
2026-04-17T21:05:05.911Z | 2026-04-20T14:57:15.664Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-hfjg-jhg9-mrvf |
6.3 (3.1)
5.1 (4.0)
|
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to ex… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-hf75-j846-hmxr |
7.0 (3.1)
6.4 (4.0)
|
A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknow… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-g57h-5974-fhw4 |
6.5 (3.1)
|
The Tutor LMS plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-88v5-9hxc-f85r |
7.5 (3.1)
|
HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Ope… | 2026-04-17T06:31:08Z | 2026-04-18T00:53:47Z |
| ghsa-7rv8-2hr2-39f9 |
5.3 (3.1)
|
The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in v… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-6rgm-mxx7-qxmc |
8.5 (4.0)
|
The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack … | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-69wp-qf6q-mf28 |
5.3 (3.1)
|
The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and includi… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-4p7p-gf39-gmhp |
2.7 (3.1)
5.1 (4.0)
|
A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an ad… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-m2w4-8ggf-rj47 |
8.1 (3.1)
|
HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service | 2026-04-17T06:31:07Z | 2026-04-18T00:51:48Z |
| ghsa-gq2v-mwv7-cvm2 |
6.5 (3.1)
|
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ghsa-8r5m-3f66-qpr3 |
5.3 (3.1)
|
HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS | 2026-04-17T06:31:07Z | 2026-04-18T00:53:25Z |
| ghsa-8cfg-qq42-h3w8 |
4.9 (3.1)
|
The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal lead… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ghsa-88f4-qv6h-wgph |
4.9 (3.1)
|
The Form Maker by 10Web plugin for WordPress is vulnerable to SQL Injection via the 'ip_search', 's… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ghsa-72gw-fmmr-c4r4 |
7.5 (3.1)
|
HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization | 2026-04-17T06:31:07Z | 2026-04-18T00:53:01Z |
| ghsa-v77j-mp3m-5c9v |
6.5 (3.1)
|
The WP Statistics plugin for WordPress is vulnerable to Missing Authorization in all versions up to… | 2026-04-17T03:30:52Z | 2026-04-17T03:30:52Z |
| ghsa-mw2x-833r-j7mf |
6.5 (3.1)
|
The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulne… | 2026-04-17T03:30:52Z | 2026-04-17T03:30:52Z |
| ghsa-58f8-jw5x-898x |
7.2 (3.1)
|
The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_so… | 2026-04-17T03:30:52Z | 2026-04-17T03:30:52Z |
| ghsa-22fc-qj5h-4gpq |
6.4 (3.1)
|
The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… | 2026-04-17T03:30:52Z | 2026-04-17T03:30:52Z |
| ghsa-vp68-f85j-5gw3 |
8.6 (3.1)
|
Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user … | 2026-04-17T03:30:51Z | 2026-04-17T03:30:51Z |
| ghsa-j23v-33r7-63rx |
8.1 (3.1)
|
sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshost… | 2026-04-17T00:31:02Z | 2026-04-18T21:31:00Z |
| ghsa-gqwq-8j5x-ghf8 |
4.3 (3.1)
|
Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modifie… | 2026-04-17T00:31:02Z | 2026-04-17T00:31:02Z |
| ghsa-f3g8-9xv5-77gv |
5.1 (4.0)
|
Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backs… | 2026-04-16T23:00:45Z | 2026-04-16T23:00:45Z |
| ghsa-r7w7-9xr2-qq2r |
3.1 (3.1)
|
langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding | 2026-04-16T23:00:12Z | 2026-04-16T23:00:12Z |
| ghsa-fv5p-p927-qmxr |
6.5 (3.1)
|
LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass | 2026-04-16T22:53:32Z | 2026-04-16T22:53:32Z |
| ghsa-3g92-f9ch-qjcm |
2.9 (4.0)
|
Plonky3: The sponge construction used to get a hash function from a cryptographic permutation is no… | 2026-04-16T22:52:41Z | 2026-04-16T22:52:41Z |
| ghsa-jp74-mfrx-3qvh |
9.9 (3.1)
|
Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId) | 2026-04-16T22:51:43Z | 2026-04-16T22:51:43Z |
| ghsa-f5v8-v6q3-q4h6 |
7.5 (3.1)
|
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out) | 2026-04-16T22:50:37Z | 2026-04-16T22:50:37Z |
| ghsa-3xx2-mqjm-hg9x |
9.9 (3.1)
|
Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company … | 2026-04-16T22:49:46Z | 2026-04-16T22:49:46Z |
| ghsa-fpw4-p57j-hqmq |
5.4 (3.1)
|
Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-m… | 2026-04-16T22:49:13Z | 2026-04-16T22:49:13Z |
| ghsa-p7mm-r948-4q3q |
4.3 (3.1)
|
Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperc… | 2026-04-16T22:48:46Z | 2026-04-16T22:48:46Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-86 |
|
OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) w… | owslib | 2023-03-08T00:15:00Z | 2023-06-14T18:28:54.683011Z |
| pysec-2023-42 |
|
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out ses… | pretix | 2023-03-06T23:15:00Z | 2023-05-04T03:49:47.315146Z |
| pysec-2023-270 |
2.8 (3.1)
|
A flaw was found in openstack-glance. This issue could allow a remote, authenticated atta… | glance | 2023-03-06T23:15:00Z | 2024-11-25T22:26:00.352650Z |
| pysec-2023-209 |
9.8 (3.1)
|
A vulnerability, which was classified as critical, has been found in json-logic-js 2.0.0.… | json-logic | 2023-03-05T19:15:00+00:00 | 2023-10-20T16:31:18.877419+00:00 |
| pysec-2023-54 |
|
vantage6 is a privacy preserving federated learning infrastructure for secure insight exc… | vantage6 | 2023-03-04T00:15:00Z | 2023-05-04T03:49:48.653810Z |
| pysec-2023-53 |
|
vantage6 is a privacy preserving federated learning infrastructure for secure insight exc… | vantage6 | 2023-03-01T21:15:00Z | 2023-05-04T03:49:48.592158Z |
| pysec-2023-52 |
|
vantage6 is a privacy preserving federated learning infrastructure for secure insight exc… | vantage6 | 2023-03-01T17:15:00Z | 2023-05-04T03:49:48.490711Z |
| pysec-2023-15 |
|
GeoNode is an open source platform that facilitates the creation, sharing, and collaborat… | geonode | 2023-02-27T21:15:00Z | 2023-05-04T03:49:45.721412Z |
| pysec-2023-16 |
|
Gradio is an open-source Python library to build machine learning and data science demos … | gradio | 2023-02-23T22:15:00Z | 2023-05-04T03:49:45.858658Z |
| pysec-2023-24 |
|
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was al… | markdown-it-py | 2023-02-23T00:15:00Z | 2023-05-04T03:49:46.302314Z |
| pysec-2023-23 |
|
Denial of service could be caused to the command line interface of markdown-it-py, before… | markdown-it-py | 2023-02-22T23:15:00Z | 2023-05-04T03:49:46.254022Z |
| pysec-2023-33 |
|
Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5. | modoboa | 2023-02-22T09:15:00Z | 2023-05-04T03:49:46.836234Z |
| pysec-2023-37 |
|
Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nauto… | nautobot | 2023-02-21T21:15:00Z | 2023-05-04T03:49:47.044688Z |
| pysec-2023-10 |
|
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripti… | changedetection-io | 2023-02-17T22:15:00Z | 2023-05-04T03:49:45.088821Z |
| pysec-2023-47 |
|
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute a… | salt | 2023-02-17T18:15:00Z | 2023-05-04T03:49:48.043803Z |
| pysec-2023-289 |
8.8 (3.1)
|
An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3,… | plone | 2023-02-17T18:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2023-49 |
|
Starlite is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 1… | starlite | 2023-02-15T15:15:00Z | 2023-05-04T03:49:48.263994Z |
| pysec-2023-13 |
|
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 … | django | 2023-02-15T01:15:00Z | 2023-05-04T03:49:45.612158Z |
| pysec-2023-58 |
|
Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeu… | werkzeug | 2023-02-14T20:15:00Z | 2023-05-04T03:49:48.987713Z |
| pysec-2023-57 |
|
Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" c… | werkzeug | 2023-02-14T20:15:00Z | 2023-05-04T03:49:48.931463Z |
| pysec-2023-17 |
|
IPython (Interactive Python) is a command shell for interactive computing in multiple pro… | ipython | 2023-02-10T20:15:00Z | 2023-05-04T03:49:45.922825Z |
| pysec-2023-32 |
|
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-02-10T19:15:00Z | 2023-05-04T03:49:46.777940Z |
| pysec-2023-276 |
5.4 (3.1)
|
An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation wa… | mayan-edms | 2023-02-07T22:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2023-11 |
|
cryptography is a package designed to expose cryptographic primitives and recipes to Pyth… | cryptography | 2023-02-07T21:15:00Z | 2023-05-04T03:49:45.221186Z |
| pysec-2023-208 |
4.3 (3.1)
|
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been r… | eve-srp | 2023-02-06T17:15:00+00:00 | 2023-10-20T16:31:18.806057+00:00 |
| pysec-2023-39 |
|
OpenZeppelin Contracts for Cairo is a library for secure smart contract development writt… | openzeppelin-cairo-contracts | 2023-02-03T20:15:00Z | 2023-05-04T03:49:47.155676Z |
| pysec-2023-12 |
|
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of… | django | 2023-02-01T19:15:00Z | 2023-05-04T03:49:45.437728Z |
| pysec-2023-51 |
|
ubireader_extract_files is vulnerable to path traversal when run against specifically cra… | ubi-reader | 2023-01-31T10:15:00Z | 2023-05-04T03:49:48.432460Z |
| pysec-2023-5 |
|
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This iss… | apache-iotdb | 2023-01-31T10:15:00Z | 2023-05-04T03:49:44.792097Z |
| pysec-2023-6 |
|
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This iss… | apache-iotdb | 2023-01-30T17:15:00Z | 2023-05-04T03:49:44.840128Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2293 | Malicious code in thisismytestnouser (PyPI) | 2026-03-29T13:34:24Z | 2026-03-29T13:34:25Z |
| mal-2026-2290 | Malicious code in iwantsafecheckit (PyPI) | 2026-03-29T13:31:21Z | 2026-03-29T22:12:52Z |
| mal-2026-2289 | Malicious code in database-roblox (PyPI) | 2026-03-29T12:15:48Z | 2026-04-16T07:40:04Z |
| mal-2026-2287 | Malicious code in f0-state-manager (npm) | 2026-03-29T11:50:43Z | 2026-03-31T03:12:01Z |
| mal-2026-2288 | Malicious code in merchservicingnodeserv (npm) | 2026-03-29T11:50:39Z | 2026-03-31T03:12:03Z |
| mal-2026-2285 | Malicious code in dial-app-version (npm) | 2026-03-29T10:58:29Z | 2026-03-31T03:12:01Z |
| mal-2026-2284 | Malicious code in bizsignupnodeweb (npm) | 2026-03-29T10:58:26Z | 2026-03-31T03:12:00Z |
| mal-2026-2286 | Malicious code in sn3akysnak3-test (npm) | 2026-03-29T10:55:32Z | 2026-03-31T03:12:04Z |
| mal-2026-2283 | Malicious code in interwebz (PyPI) | 2026-03-29T10:06:44Z | 2026-03-29T10:06:44Z |
| mal-2026-2282 | Malicious code in @adac-fahrzeugplattform/ui (npm) | 2026-03-29T04:43:26Z | 2026-04-14T01:05:13Z |
| mal-2026-2281 | Malicious code in roboats-addition (PyPI) | 2026-03-28T20:17:03Z | 2026-04-16T07:40:04Z |
| mal-2026-2280 | Malicious code in roboat-additions (PyPI) | 2026-03-28T20:16:43Z | 2026-04-16T07:40:04Z |
| mal-2026-2279 | Malicious code in roboat-addition (PyPI) | 2026-03-28T20:15:46Z | 2026-04-16T07:40:04Z |
| mal-2026-2278 | Malicious code in python-aiogram-telegram-updater (PyPI) | 2026-03-28T19:40:48Z | 2026-03-28T19:40:48Z |
| mal-2026-2277 | Malicious code in aiogram-photo-updater (PyPI) | 2026-03-28T19:40:23Z | 2026-03-28T19:40:23Z |
| mal-2026-2276 | Malicious code in payerpath-customer-lib (npm) | 2026-03-28T14:45:51Z | 2026-03-31T03:12:04Z |
| mal-2026-2274 | Malicious code in autoshipment-public-front (npm) | 2026-03-28T10:54:19Z | 2026-03-31T11:35:12Z |
| mal-2026-2275 | Malicious code in npmamzs (npm) | 2026-03-28T10:54:14Z | 2026-03-31T03:12:03Z |
| mal-2026-2270 | Malicious code in copytrading (PyPI) | 2026-03-27T16:50:02Z | 2026-03-27T16:50:02Z |
| mal-2026-2273 | Malicious code in trustwallet (PyPI) | 2026-03-27T16:47:51Z | 2026-03-27T16:47:51Z |
| mal-2026-2271 | Malicious code in metamask-api (PyPI) | 2026-03-27T16:47:31Z | 2026-03-27T16:47:31Z |
| mal-2026-2269 | Malicious code in claude-lite (PyPI) | 2026-03-27T16:45:20Z | 2026-03-27T16:45:20Z |
| mal-2026-2272 | Malicious code in solana-api (PyPI) | 2026-03-27T16:44:41Z | 2026-03-27T16:44:41Z |
| mal-2026-2268 | Malicious code in gemini-ai-api (PyPI) | 2026-03-27T16:39:25Z | 2026-03-27T17:24:17Z |
| mal-2026-2265 | Malicious code in monolith-twirp-codingagentintegrations-codingagentintegrations (RubyGems) | 2026-03-27T13:38:51Z | 2026-03-27T13:38:51Z |
| mal-2026-2266 | Malicious code in monolith-twirp-copilot-registry (RubyGems) | 2026-03-27T13:37:00Z | 2026-03-27T13:37:00Z |
| mal-2026-2267 | Malicious code in monolith-twirp-partitioning-pull_requests (RubyGems) | 2026-03-27T13:36:59Z | 2026-03-27T13:36:59Z |
| mal-2026-2263 | Malicious code in monolith-twirp-reposinsights-reposinsights (RubyGems) | 2026-03-27T13:27:04Z | 2026-03-27T13:27:04Z |
| mal-2026-2262 | Malicious code in monolith-twirp-pullsd-teams (RubyGems) | 2026-03-27T13:27:00Z | 2026-03-27T13:27:00Z |
| mal-2026-2259 | Malicious code in monolith-twirp-loops-core (RubyGems) | 2026-03-27T13:26:58Z | 2026-03-27T13:26:58Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2754 | Google Cloud Platform: Schwachstelle ermöglicht Codeausführung | 2025-12-07T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2753 | Fortra GoAnywhere MFT: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-07T23:00:00.000+00:00 | 2025-12-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2752 | Nextcloud: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2025-12-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2751 | WebKitGTK: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2750 | Apache HTTP Server: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-03-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2749 | WatchGuard Firebox: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2748 | Red Hat Enterprise Linux (ABRT): Schwachstelle ermöglicht Privilegieneskalation | 2025-12-04T23:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-2747 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-04T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2746 | IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-04T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2745 | Dell PowerEdge: Schwachstelle ermöglicht Denial of Service | 2025-12-04T23:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2744 | Microsoft Edge: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-12-04T23:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2743 | Checkmk: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-04T23:00:00.000+00:00 | 2025-12-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2742 | IBM QRadar SIEM: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-04T23:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2741 | cPython: Schwachstelle ermöglicht Denial of Service | 2025-12-03T23:00:00.000+00:00 | 2026-03-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2740 | ffmpeg: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-12-03T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2739 | Nextcloud: Schwachstelle ermöglicht Cross-Site Scripting | 2025-12-03T23:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2738 | Vercel Next.js und React Server Components (React2Shell): Schwachstelle ermöglicht Codeausführung | 2025-12-03T23:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2737 | libpng: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-12-03T23:00:00.000+00:00 | 2026-03-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2736 | QT (Declarative module): Schwachstelle ermöglicht Denial of Service | 2025-12-03T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2735 | Splunk Enterprise: Mehrere Schwachstellen | 2025-12-03T23:00:00.000+00:00 | 2025-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2734 | PgBouncer: Schwachstelle ermöglicht SQL injection | 2025-12-03T23:00:00.000+00:00 | 2025-12-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2733 | Drupal-Module: Mehrere Schwachstellen | 2025-12-03T23:00:00.000+00:00 | 2025-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2732 | Dell BSAFE SSL-J: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-12-02T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2731 | HCL BigFix: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-02T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2730 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2729 | WebKitGTK: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2728 | Proxmox Virtual Environment: Schwachstelle ermöglicht Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2727 | Red Hat OpenShift Container Platform: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2726 | Google Android Pixel: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2025-12-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2725 | Red Hat OpenShift Dev Spaces: Schwachstelle ermöglicht Codeausführung | 2025-12-02T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-044-08 | Siemens OpenV2G | 2025-02-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-044-07 | Siemens Teamcenter | 2025-02-11T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-25-044-06 | Siemens RUGGEDCOM APE1808 | 2025-02-11T00:00:00.000000Z | 2026-03-12T06:00:00.000000Z |
| icsa-25-044-05 | Siemens SIPROTEC 5 Devices | 2025-02-11T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-044-04 | Siemens SIPROTEC 5 | 2025-02-11T00:00:00.000000Z | 2025-11-11T00:00:00.000000Z |
| icsa-25-044-03 | Siemens SIPROTEC 5 | 2025-02-11T00:00:00.000000Z | 2025-02-11T00:00:00.000000Z |
| icsa-25-044-02 | Siemens SIMATIC | 2025-02-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-044-01 | Siemens SIMATIC S7-1200 CPU Family | 2025-02-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsma-25-037-02 | Orthanc Server | 2025-02-06T07:00:00.000000Z | 2025-02-06T07:00:00.000000Z |
| icsma-25-037-01 | MicroDicom DICOM Viewer | 2025-02-06T07:00:00.000000Z | 2025-02-06T07:00:00.000000Z |
| icsa-25-037-04 | Trimble Cityworks (Update A) | 2025-02-06T07:00:00.000000Z | 2025-02-11T07:00:00.000000Z |
| icsa-25-051-01 | ABB ASPECT-Enterprise NEXUS and MATRIX Series | 2025-02-05T00:30:00.000000Z | 2025-02-05T00:30:00.000000Z |
| icsa-25-035-08 | AutomationDirect C-more EA9 HMI | 2025-02-04T07:00:00.000000Z | 2025-02-04T07:00:00.000000Z |
| icsa-25-035-05 | Schneider Electric Web Designer for Modicon | 2025-02-04T07:00:00.000000Z | 2025-02-04T07:00:00.000000Z |
| icsa-25-035-03 | Elber Communications Equipment | 2025-02-04T07:00:00.000000Z | 2025-02-04T07:00:00.000000Z |
| icsa-25-035-02 | Rockwell Automation GuardLogix 5380 and 5580 (Update A) | 2025-02-04T07:00:00.000000Z | 2025-02-18T07:00:00.000000Z |
| icsa-25-035-01 | Western Telematic Inc NPS Series, DSM Series, CPM Series | 2025-02-04T07:00:00.000000Z | 2025-02-04T07:00:00.000000Z |
| icsma-25-030-01 | Contec Health CMS8000 Patient Monitor (Update A) | 2025-01-30T07:00:00.000000Z | 2025-02-25T07:00:00.000000Z |
| icsa-25-030-05 | Rockwell Automation FactoryTalk AssetCentre | 2025-01-30T07:00:00.000000Z | 2025-01-30T07:00:00.000000Z |
| icsa-25-030-04 | Rockwell Automation KEPServer | 2025-01-30T07:00:00.000000Z | 2025-01-30T07:00:00.000000Z |
| icsa-25-030-02 | New Rock Technologies Cloud Connected Devices | 2025-01-30T07:00:00.000000Z | 2025-01-30T07:00:00.000000Z |
| icsa-25-028-05 | Rockwell Automation DataMosaix Private Cloud | 2025-01-28T07:00:00.000000Z | 2025-01-28T07:00:00.000000Z |
| icsa-25-028-04 | Rockwell Automation FactoryTalk View Site Edition | 2025-01-28T07:00:00.000000Z | 2025-01-28T07:00:00.000000Z |
| icsa-25-028-03 | Rockwell Automation FactoryTalk | 2025-01-28T07:00:00.000000Z | 2025-01-28T07:00:00.000000Z |
| icsa-25-028-02 | Schneider Electric Power Logic | 2025-01-28T07:00:00.000000Z | 2025-01-28T07:00:00.000000Z |
| icsa-25-023-06 | HMS Networks Ewon Flexy 202 | 2025-01-23T07:00:00.000000Z | 2025-01-23T07:00:00.000000Z |
| icsa-25-023-01 | mySCADA myPRO Manager | 2025-01-23T07:00:00.000000Z | 2025-01-23T07:00:00.000000Z |
| icsa-25-051-02 | ABB FLXEON Controllers | 2025-01-23T06:30:00.000000Z | 2025-02-14T00:30:00.000000Z |
| va-25-022-01 | ECOVACS lawnmower and vacuum vulnerabilities | 2025-01-23T00:53:24Z | 2025-01-23T00:53:24Z |
| va-25-021-01 | Fedora Repository fedoraIntCallUser default credentials and insecure archive extraction | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-meraki-lsp-7xysn6pj | Cisco Meraki Local Status Page Configuration Hardening | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-ise-injection-2xbog9dg | Cisco Identity Services Engine Command Injection Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-duo-replay-knunkd | Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-06-23T16:48:56+00:00 |
| cisco-sa-cisco-pdng-dos-kmzwey2q | Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-19T20:31:01+00:00 |
| cisco-sa-adeos-mlayecvk | Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-wifi-ffeb-22epcewu | Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues Affecting Multiple Cisco Products | 2023-03-27T05:00:00+00:00 | 2023-03-27T05:00:00+00:00 |
| cisco-sa-webui-pthtrv-es7gsb9v | Cisco IOS XE Software Web UI Path Traversal Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-vman-csrf-76rdbleh | Cisco SD-WAN vManage Software Cluster Mode Cross-Site Request Forgery Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-27T21:11:52+00:00 |
| cisco-sa-ipv4-vfr-dos-cxxtfacb | Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-23T21:42:01+00:00 |
| cisco-sa-iox-priv-escalate-xg8zkypk | Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-05-08T15:01:45+00:00 |
| cisco-sa-iosxe-priv-esc-sabd8hcu | Cisco IOS XE Software Privilege Escalation Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-24T19:59:49+00:00 |
| cisco-sa-ios-xe-sdwan-vqahejyw | Cisco IOS XE SD-WAN Software Command Injection Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ios-gre-crash-p6ne5sq5 | Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ios-dhcpv6-dos-44cmvddk | Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ewlc-dos-wfujbhkw | Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-dnac-privesc-qfxe74rs | Cisco DNA Center Privilege Escalation Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-dnac-infodisc-pe7zabdr | Cisco DNA Center Information Disclosure Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-c9800-apjoin-dos-nxrhkt5 | Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-c9300-spi-ace-yejygnnq | Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-05-11T15:34:52+00:00 |
| cisco-sa-asaftdios-dhcpv6-cli-zf3ztv | Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-asa5500x-entropy-6v9bhvyp | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ap-cli-dos-tc2ekepu | Cisco Access Point Software Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-ap-assoc-dos-d2sunwk2 | Cisco Access Point Software Association Request Denial of Service Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-aironetap-cmdinj-6bjt4fl8 | Cisco Access Point Software Command Injection Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-03-22T16:00:00+00:00 |
| cisco-sa-iosxr-load-infodisc-9rdor5fq | Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability | 2023-03-08T16:00:00+00:00 | 2024-11-13T15:00:06+00:00 |
| cisco-sa-bfd-xmrescbt | Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability | 2023-03-08T16:00:00+00:00 | 2023-03-08T16:00:00+00:00 |
| cisco-sa-webex-xss-yn8hhsmj | Cisco Webex App for Web Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-03-01T16:00:00+00:00 |
| cisco-sa-ip-phone-cmd-inj-kmfynvcp | Cisco IP Phone 6800, 7800, and 8800 Series Web UI Vulnerabilities | 2023-03-01T16:00:00+00:00 | 2023-03-20T20:45:17+00:00 |
| cisco-sa-finesse-proxy-dos-vy5dqhrv | Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-03-02T20:35:00+00:00 |
| cisco-sa-cuic-infodisc-ssrf-84zbmwvk | Cisco Unified Intelligence Center Vulnerabilities | 2023-03-01T16:00:00+00:00 | 2023-03-01T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-23291 | nfc: pn533: properly drop the usb interface reference on disconnect | 2026-03-02T00:00:00.000Z | 2026-03-27T14:42:27.000Z |
| msrc_cve-2026-23290 | net: usb: pegasus: validate USB endpoints | 2026-03-02T00:00:00.000Z | 2026-03-27T14:42:00.000Z |
| msrc_cve-2026-23289 | IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:43:21.000Z |
| msrc_cve-2026-23287 | irqchip/sifive-plic: Fix frozen interrupt due to affinity setting | 2026-03-02T00:00:00.000Z | 2026-03-27T01:37:32.000Z |
| msrc_cve-2026-23286 | atm: lec: fix null-ptr-deref in lec_arp_clear_vccs | 2026-03-02T00:00:00.000Z | 2026-03-27T14:40:48.000Z |
| msrc_cve-2026-23285 | drbd: fix null-pointer dereference on local read error | 2026-03-02T00:00:00.000Z | 2026-03-27T14:40:01.000Z |
| msrc_cve-2026-23284 | net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:44:40.000Z |
| msrc_cve-2026-23281 | wifi: libertas: fix use-after-free in lbs_free_adapter() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:43:00.000Z |
| msrc_cve-2026-23279 | wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:44:20.000Z |
| msrc_cve-2026-23278 | netfilter: nf_tables: always walk all pending catchall elements | 2026-03-02T00:00:00.000Z | 2026-03-31T15:05:04.000Z |
| msrc_cve-2026-23277 | net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit | 2026-03-02T00:00:00.000Z | 2026-03-27T14:38:54.000Z |
| msrc_cve-2026-23276 | net: add xmit recursion limit to tunnel xmit functions | 2026-03-02T00:00:00.000Z | 2026-03-31T15:06:06.000Z |
| msrc_cve-2026-23274 | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels | 2026-03-02T00:00:00.000Z | 2026-03-27T14:38:48.000Z |
| msrc_cve-2026-23272 | netfilter: nf_tables: unconditionally bump set->nelems before insertion | 2026-03-02T00:00:00.000Z | 2026-03-31T15:05:26.000Z |
| msrc_cve-2026-23271 | perf: Fix __perf_event_overflow() vs perf_remove_from_context() race | 2026-03-02T00:00:00.000Z | 2026-03-27T14:39:01.000Z |
| msrc_cve-2026-23269 | apparmor: validate DFA start states are in bounds in unpack_pdb | 2026-03-02T00:00:00.000Z | 2026-03-27T14:38:29.000Z |
| msrc_cve-2026-23268 | apparmor: fix unprivileged local user can do privileged policy management | 2026-03-02T00:00:00.000Z | 2026-03-27T14:38:35.000Z |
| msrc_cve-2026-23267 | f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes | 2026-03-02T00:00:00.000Z | 2026-03-27T01:40:49.000Z |
| msrc_cve-2026-23266 | fbdev: rivafb: fix divide error in nv3_arb() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:38:41.000Z |
| msrc_cve-2026-23265 | f2fs: fix to do sanity check on node footer in {read,write}_end_io | 2026-03-02T00:00:00.000Z | 2026-03-27T01:40:56.000Z |
| msrc_cve-2026-23259 | io_uring/rw: free potentially allocated iovec on cache put failure | 2026-03-02T00:00:00.000Z | 2026-03-20T14:37:49.000Z |
| msrc_cve-2026-23255 | net: add proper RCU protection to /proc/net/ptype | 2026-03-02T00:00:00.000Z | 2026-03-31T14:57:38.000Z |
| msrc_cve-2026-23253 | media: dvb-core: fix wrong reinitialization of ringbuffer on reopen | 2026-03-02T00:00:00.000Z | 2026-03-27T14:38:22.000Z |
| msrc_cve-2026-23248 | perf/core: Fix refcount bug and potential UAF in perf_mmap | 2026-03-02T00:00:00.000Z | 2026-03-20T14:37:08.000Z |
| msrc_cve-2026-23247 | tcp: secure_seq: add back ports to TS offset | 2026-03-02T00:00:00.000Z | 2026-03-31T14:54:35.000Z |
| msrc_cve-2026-23246 | wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration | 2026-03-02T00:00:00.000Z | 2026-03-27T14:37:57.000Z |
| msrc_cve-2026-23245 | net/sched: act_gate: snapshot parameters with RCU on replace | 2026-03-02T00:00:00.000Z | 2026-03-27T14:37:39.000Z |
| msrc_cve-2026-23244 | nvme: fix memory allocation in nvme_pr_read_keys() | 2026-03-02T00:00:00.000Z | 2026-03-27T14:38:04.000Z |
| msrc_cve-2026-23243 | RDMA/umad: Reject negative data_len in ib_umad_write | 2026-03-02T00:00:00.000Z | 2026-03-27T14:38:10.000Z |
| msrc_cve-2026-23242 | RDMA/siw: Fix potential NULL pointer dereference in header processing | 2026-03-02T00:00:00.000Z | 2026-03-27T14:37:32.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0427 | Kwetsbaarheden verholpen in Google Chrome | 2024-10-30T11:36:05.615865Z | 2024-10-30T11:36:05.615865Z |
| ncsc-2024-0426 | Kwetsbaarheden verholpen in Apple MacOS | 2024-10-30T11:26:13.535716Z | 2024-10-30T11:26:13.535716Z |
| ncsc-2024-0425 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2024-10-30T10:53:07.348476Z | 2024-10-30T10:53:07.348476Z |
| ncsc-2024-0424 | Kwetsbaarheden verholpen in Cisco Adaptive Security Appliance en Firepower Threat Defense | 2024-10-24T08:37:15.013231Z | 2024-10-24T08:37:15.013231Z |
| ncsc-2024-0423 | Kwetsbaarheid ontdekt in Fortinet FortiManager | 2024-10-23T16:51:38.477778Z | 2024-11-15T10:52:37.440334Z |
| ncsc-2024-0422 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2024-10-18T09:26:29.690794Z | 2024-10-18T09:26:29.690794Z |
| ncsc-2024-0421 | Kwetsbaarheden verholpen in SolarWinds Serv-U | 2024-10-18T09:10:48.856424Z | 2024-10-18T09:10:48.856424Z |
| ncsc-2024-0420 | Kwetsbaarheden verholpen in Oracle MySQL | 2024-10-17T13:20:42.437738Z | 2024-10-17T13:20:42.437738Z |
| ncsc-2024-0419 | Kwetsbaarheden verholpen in Oracle Java | 2024-10-17T13:20:07.759085Z | 2024-10-17T13:20:07.759085Z |
| ncsc-2024-0418 | Kwetsbaarheden verholpen in Oracle Analytics | 2024-10-17T13:19:50.583299Z | 2024-10-17T13:19:50.583299Z |
| ncsc-2024-0417 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2024-10-17T13:19:16.185510Z | 2024-10-17T13:19:16.185510Z |
| ncsc-2024-0416 | Kwetsbaarheden verholpen in Oracle Financial Services Applications | 2024-10-17T13:18:45.385015Z | 2024-10-17T13:18:45.385015Z |
| ncsc-2024-0415 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2024-10-17T13:18:06.611153Z | 2024-10-17T13:18:06.611153Z |
| ncsc-2024-0414 | Kwetsbaarheden verholpen in Oracle Communications | 2024-10-17T13:17:52.103171Z | 2024-10-17T13:17:52.103171Z |
| ncsc-2024-0413 | Kwetsbaarheden verholpen in Oracle Commerce | 2024-10-17T13:17:19.736602Z | 2024-10-17T13:17:19.736602Z |
| ncsc-2024-0412 | Kwetsbaarheden verholpen in Oracle Peoplesoft | 2024-10-17T13:16:18.175855Z | 2024-10-17T13:16:18.175855Z |
| ncsc-2024-0411 | Kwetsbaarheden verholpen in Oracle Database producten | 2024-10-17T13:15:19.595269Z | 2024-10-17T13:15:19.595269Z |
| ncsc-2024-0410 | Kwetsbaarheden verholpen in Solarwinds Platform | 2024-10-17T06:09:32.053449Z | 2024-10-17T06:09:32.053449Z |
| ncsc-2024-0409 | Kwetsbaarheid verholpen in Solarwinds Web Helpdesk | 2024-10-17T06:08:32.057774Z | 2024-10-17T06:08:32.057774Z |
| ncsc-2024-0408 | Kwetsbaarheden verholpen in Splunk Enterprise | 2024-10-15T15:18:24.694416Z | 2024-10-15T15:18:24.694416Z |
| ncsc-2024-0407 | Kwetsbaarheden verholpen in Moxa systemen | 2024-10-14T12:14:38.572540Z | 2024-10-14T12:14:38.572540Z |
| ncsc-2024-0406 | Kwetsbaarheden verholpen in Gitlab Enterprise Edition en Community Edition | 2024-10-11T08:23:31.975727Z | 2024-10-11T08:23:31.975727Z |
| ncsc-2024-0405 | Kwetsbaarheden verholpen in Palo Alto Expedition | 2024-10-10T12:02:12.890277Z | 2024-10-10T12:02:12.890277Z |
| ncsc-2024-0404 | Kwetsbaarheden verholpen in Juniper JunOS en JunOS Evolved | 2024-10-10T11:19:54.515278Z | 2024-10-10T11:19:54.515278Z |
| ncsc-2024-0403 | Kwetsbaarheid verholpen in Mozilla Firefox | 2024-10-10T07:20:38.171954Z | 2024-10-10T07:20:38.171954Z |
| ncsc-2024-0402 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2024-10-09T13:38:09.912496Z | 2024-10-09T13:38:09.912496Z |
| ncsc-2024-0401 | Kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile | 2024-10-09T11:21:34.434721Z | 2024-10-09T11:21:34.434721Z |
| ncsc-2024-0400 | Kwetsbaarheden verholpen in Ivanti Avalanche | 2024-10-09T10:45:10.558311Z | 2024-10-09T10:45:10.558311Z |
| ncsc-2024-0399 | Kwetsbaarheden verholpen in Ivanti Cloud Services Appliance | 2024-10-09T09:49:35.398654Z | 2024-10-09T09:49:35.398654Z |
| ncsc-2024-0398 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Policy Secure | 2024-10-09T09:47:33.556285Z | 2024-10-11T07:03:14.760313Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:20046-1 | Security update for MozillaThunderbird | 2026-01-16T12:09:04Z | 2026-01-16T12:09:04Z |
| opensuse-su-2026:10057-1 | chromedriver-144.0.7559.59-1.1 on GA media | 2026-01-16T00:00:00Z | 2026-01-16T00:00:00Z |
| opensuse-su-2026:20056-1 | Security update for cpp-httplib | 2026-01-15T22:11:25Z | 2026-01-15T22:11:25Z |
| opensuse-su-2026:20044-1 | Security update for alloy | 2026-01-15T17:56:17Z | 2026-01-15T17:56:17Z |
| opensuse-su-2026:20043-1 | Security update for erlang | 2026-01-15T17:21:23Z | 2026-01-15T17:21:23Z |
| opensuse-su-2026:20041-1 | Security update for MozillaFirefox | 2026-01-15T16:28:43Z | 2026-01-15T16:28:43Z |
| opensuse-su-2026:20039-1 | Security update for bind | 2026-01-15T10:43:49Z | 2026-01-15T10:43:49Z |
| opensuse-su-2026:10056-1 | libwireshark19-4.6.3-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10055-1 | python311-virtualenv-20.36.1-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10054-1 | php-composer2-2.9.3-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10053-1 | ffmpeg-4-4.4.6-11.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10052-1 | avahi-0.8-41.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10051-1 | NetworkManager-applet-l2tp-1.52.0-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:20038-1 | Security update for wget2 | 2026-01-14T13:23:53Z | 2026-01-14T13:23:53Z |
| opensuse-su-2026:20034-1 | Security update for tomcat | 2026-01-14T13:14:54Z | 2026-01-14T13:14:54Z |
| opensuse-su-2026:20031-1 | Security update for curl | 2026-01-14T11:01:44Z | 2026-01-14T11:01:44Z |
| opensuse-su-2026:20032-1 | Security update for haproxy | 2026-01-14T10:56:00Z | 2026-01-14T10:56:00Z |
| opensuse-su-2026:20030-1 | Security update for apache2 | 2026-01-14T10:49:51Z | 2026-01-14T10:49:51Z |
| opensuse-su-2026:20029-1 | Security update for gpg2 | 2026-01-14T10:23:16Z | 2026-01-14T10:23:16Z |
| opensuse-su-2026:20027-1 | Security update for squid | 2026-01-14T08:39:17Z | 2026-01-14T08:39:17Z |
| opensuse-su-2026:10050-1 | rke2-1.34-1.34.3+rke2r1-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10049-1 | python311-urllib3-2.6.3-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10048-1 | openCryptoki-3.26.0-3.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10047-1 | libcryptopp-devel-8.9.0-6.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10046-1 | MozillaFirefox-147.0-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:20026-1 | Security update for python-uv | 2026-01-13T12:48:04Z | 2026-01-13T12:48:04Z |
| opensuse-su-2026:20025-1 | Security update for hawk2 | 2026-01-13T12:41:42Z | 2026-01-13T12:41:42Z |
| opensuse-su-2026:10045-1 | liburiparser1-1.0.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10044-1 | python311-pypdf-6.6.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10043-1 | python311-filelock-3.20.3-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:4063 | Red Hat Security Advisory: postgresql:16 security update | 2026-03-09T13:49:05+00:00 | 2026-04-10T21:16:31+00:00 |
| rhsa-2026:3976 | Red Hat Security Advisory: firefox security update | 2026-03-09T13:21:00+00:00 | 2026-03-23T13:08:47+00:00 |
| rhsa-2026:4059 | Red Hat Security Advisory: postgresql:15 security update | 2026-03-09T13:00:19+00:00 | 2026-04-10T21:16:30+00:00 |
| rhsa-2026:4024 | Red Hat Security Advisory: postgresql:13 security update | 2026-03-09T11:47:59+00:00 | 2026-04-10T21:16:29+00:00 |
| rhsa-2026:4022 | Red Hat Security Advisory: thunderbird security update | 2026-03-09T11:24:48+00:00 | 2026-03-23T13:08:31+00:00 |
| rhsa-2026:4012 | Red Hat Security Advisory: kernel security update | 2026-03-09T10:02:53+00:00 | 2026-04-08T13:33:43+00:00 |
| rhsa-2026:4011 | Red Hat Security Advisory: kernel security update | 2026-03-09T09:38:43+00:00 | 2026-04-13T08:40:23+00:00 |
| rhsa-2026:3975 | Red Hat Security Advisory: freerdp security update | 2026-03-09T07:37:48+00:00 | 2026-03-18T03:19:22+00:00 |
| rhsa-2026:3985 | Red Hat Security Advisory: git-lfs security update | 2026-03-09T02:13:04+00:00 | 2026-04-14T07:58:53+00:00 |
| rhsa-2026:3982 | Red Hat Security Advisory: thunderbird security update | 2026-03-09T02:06:12+00:00 | 2026-03-23T13:08:30+00:00 |
| rhsa-2026:3987 | Red Hat Security Advisory: kpatch-patch-5_14_0-611_9_1 security update | 2026-03-09T02:05:22+00:00 | 2026-03-18T03:18:41+00:00 |
| rhsa-2026:3981 | Red Hat Security Advisory: thunderbird security update | 2026-03-09T02:02:02+00:00 | 2026-03-23T13:08:31+00:00 |
| rhsa-2026:3984 | Red Hat Security Advisory: firefox security update | 2026-03-09T02:00:27+00:00 | 2026-03-23T13:08:30+00:00 |
| rhsa-2026:3980 | Red Hat Security Advisory: thunderbird security update | 2026-03-09T01:57:43+00:00 | 2026-03-23T13:08:37+00:00 |
| rhsa-2026:3968 | Red Hat Security Advisory: libpng15 security update | 2026-03-09T01:56:43+00:00 | 2026-04-09T14:36:04+00:00 |
| rhsa-2026:3979 | Red Hat Security Advisory: thunderbird security update | 2026-03-09T01:56:29+00:00 | 2026-03-23T13:08:33+00:00 |
| rhsa-2026:3972 | Red Hat Security Advisory: git-lfs security update | 2026-03-09T01:55:26+00:00 | 2026-04-14T09:46:39+00:00 |
| rhsa-2026:3978 | Red Hat Security Advisory: thunderbird security update | 2026-03-09T01:52:42+00:00 | 2026-03-23T13:08:34+00:00 |
| rhsa-2026:3977 | Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update | 2026-03-09T01:52:37+00:00 | 2026-04-14T07:58:53+00:00 |
| rhsa-2026:3974 | Red Hat Security Advisory: git-lfs security update | 2026-03-09T01:51:17+00:00 | 2026-04-14T09:46:42+00:00 |
| rhsa-2026:3983 | Red Hat Security Advisory: thunderbird security update | 2026-03-09T01:50:17+00:00 | 2026-03-23T13:08:30+00:00 |
| rhsa-2026:3967 | Red Hat Security Advisory: libvpx security update | 2026-03-09T01:49:02+00:00 | 2026-03-23T13:12:17+00:00 |
| rhsa-2026:3969 | Red Hat Security Advisory: libpng15 security update | 2026-03-09T01:35:17+00:00 | 2026-04-09T14:35:59+00:00 |
| rhsa-2026:3971 | Red Hat Security Advisory: rhc-worker-playbook security update | 2026-03-09T01:33:17+00:00 | 2026-04-14T09:46:39+00:00 |
| rhsa-2026:3973 | Red Hat Security Advisory: git-lfs security update | 2026-03-09T01:30:22+00:00 | 2026-04-14T09:46:40+00:00 |
| rhsa-2026:3970 | Red Hat Security Advisory: rhc-worker-playbook security update | 2026-03-09T01:29:32+00:00 | 2026-04-14T09:46:39+00:00 |
| rhsa-2026:3966 | Red Hat Security Advisory: kernel security update | 2026-03-09T01:03:42+00:00 | 2026-04-08T13:33:37+00:00 |
| rhsa-2026:3963 | Red Hat Security Advisory: kernel security update | 2026-03-09T00:51:57+00:00 | 2026-04-08T13:33:36+00:00 |
| rhsa-2026:3964 | Red Hat Security Advisory: kernel-rt security update | 2026-03-09T00:23:12+00:00 | 2026-04-08T13:33:39+00:00 |
| rhsa-2026:3959 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2026-03-06T16:36:31+00:00 | 2026-04-14T07:58:50+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-163226 | SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-979775 | SSA-979775: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-936080 | SSA-936080: Multiple Vulnerabilities in Third-Party Component libcurl | 2021-03-09T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-783481 | SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM | 2021-03-09T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-715184 | SSA-715184: Multiple File Parsing Vulnerabilities in Solid Edge | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-541018 | SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2) | 2021-03-09T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-296266 | SSA-296266: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-794542 | SSA-794542: Insecure Folder Permissions in SIMARIS Configuration | 2021-02-09T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-663999 | SSA-663999: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.1 | 2021-02-09T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-428051 | SSA-428051: Privilege Escalation Vulnerability in TIA Administrator | 2021-02-09T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-362164 | SSA-362164: Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS | 2021-02-09T00:00:00Z | 2022-11-08T00:00:00Z |
| ssa-646763 | SSA-646763: DNSpooq - Dnsmasq Vulnerabilities in SCALANCE and RUGGEDCOM Devices | 2021-01-19T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-622830 | SSA-622830: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0 | 2021-01-12T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-274900 | SSA-274900: Use of Hardcoded Key in SCALANCE X Devices Under Certain Conditions | 2021-01-12T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-139628 | SSA-139628: Vulnerabilities in Web Server for Scalance X Products | 2021-01-12T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-541017 | SSA-541017: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SENTRON PAC / 3VA Devices | 2020-12-08T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-478893 | SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) | 2020-12-08T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-492828 | SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller | 2020-11-10T00:00:00Z | 2022-08-09T00:00:00Z |
| ssa-542525 | SSA-542525: Authentication Vulnerabilities in SIMATIC HMI Products | 2020-09-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-534763 | SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products | 2020-09-08T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-455843 | SSA-455843: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products | 2020-09-08T00:00:00Z | 2022-02-17T00:00:00Z |
| ssa-689942 | SSA-689942: Denial-of-Service and DLL Hijacking Vulnerabilities in Multiple SIMATIC Software Products | 2020-06-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-312271 | SSA-312271: Unquoted Search Path Vulnerability in Windows-based Industrial Software Applications | 2020-06-09T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-593272 | SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial Devices | 2020-04-14T00:00:00Z | 2025-07-08T00:00:00Z |
| ssa-102233 | SSA-102233: SegmentSmack in VxWorks-based Industrial Devices | 2020-04-14T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-844761 | SSA-844761: Multiple Vulnerabilities in SiNVR/SiVMS Video Server | 2020-03-10T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-978220 | SSA-978220: Denial of Service Vulnerability over SNMP in Multiple Industrial Products | 2020-02-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-951513 | SSA-951513: Clickjacking Vulnerability in SCALANCE S, SCALANCE X-300, X-200IRT, X-200RNA and X-200 Switch Families | 2020-02-11T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-780073 | SSA-780073: Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets | 2020-02-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-591405 | SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family | 2020-02-11T00:00:00Z | 2021-04-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0933-1 | Security update for freerdp | 2026-03-19T10:34:05Z | 2026-03-19T10:34:05Z |
| suse-su-2026:0932-1 | Security update for tomcat | 2026-03-19T10:26:49Z | 2026-03-19T10:26:49Z |
| suse-su-2026:20941-1 | Security update for ucode-intel | 2026-03-19T09:31:38Z | 2026-03-19T09:31:38Z |
| suse-su-2026:20758-1 | Security update for ucode-intel | 2026-03-19T09:31:38Z | 2026-03-19T09:31:38Z |
| suse-su-2026:0931-1 | Security update for jq | 2026-03-19T08:23:28Z | 2026-03-19T08:23:28Z |
| suse-su-2026:20912-1 | Security update for keylime | 2026-03-19T08:18:07Z | 2026-03-19T08:18:07Z |
| suse-su-2026:20913-1 | Security update for libsodium | 2026-03-19T08:17:20Z | 2026-03-19T08:17:20Z |
| suse-su-2026:20756-1 | Security update for libsodium | 2026-03-19T08:17:20Z | 2026-03-19T08:17:20Z |
| suse-su-2026:20911-1 | Security update for poppler | 2026-03-19T08:11:56Z | 2026-03-19T08:11:56Z |
| suse-su-2026:20910-1 | Security update for librsvg | 2026-03-19T08:09:57Z | 2026-03-19T08:09:57Z |
| suse-su-2026:20755-1 | Security update for librsvg | 2026-03-19T08:09:57Z | 2026-03-19T08:09:57Z |
| suse-su-2026:0930-1 | Security update for krb5-appl | 2026-03-18T23:08:02Z | 2026-03-18T23:08:02Z |
| suse-su-2026:20907-1 | Security update for protobuf | 2026-03-18T18:11:52Z | 2026-03-18T18:11:52Z |
| suse-su-2026:20753-1 | Security update for protobuf | 2026-03-18T18:11:52Z | 2026-03-18T18:11:52Z |
| suse-su-2026:20906-1 | Security update for postgresql17 | 2026-03-18T15:32:41Z | 2026-03-18T15:32:41Z |
| suse-su-2026:20905-1 | Security update for busybox | 2026-03-18T15:27:18Z | 2026-03-18T15:27:18Z |
| suse-su-2026:20738-1 | Security update for vim | 2026-03-18T13:40:49Z | 2026-03-18T13:40:49Z |
| suse-su-2026:20737-1 | Security update for libsoup | 2026-03-18T13:39:43Z | 2026-03-18T13:39:43Z |
| suse-su-2026:0928-1 | Security update for the Linux Kernel | 2026-03-18T13:32:23Z | 2026-03-18T13:32:23Z |
| suse-su-2026:20904-1 | Security update for cosign | 2026-03-18T11:27:44Z | 2026-03-18T11:27:44Z |
| suse-su-2026:20903-1 | Security update for libjxl | 2026-03-18T10:12:38Z | 2026-03-18T10:12:38Z |
| suse-su-2026:20902-1 | Security update for libsoup | 2026-03-18T10:01:36Z | 2026-03-18T10:01:36Z |
| suse-su-2026:20752-1 | Security update for libsoup | 2026-03-18T10:01:36Z | 2026-03-18T10:01:36Z |
| suse-su-2026:20901-1 | Security update for net-snmp | 2026-03-18T09:57:15Z | 2026-03-18T09:57:15Z |
| suse-su-2026:20751-1 | Security update for net-snmp | 2026-03-18T09:57:15Z | 2026-03-18T09:57:15Z |
| suse-su-2026:0923-1 | Security update for gvfs | 2026-03-18T09:15:47Z | 2026-03-18T09:15:47Z |
| suse-su-2026:0922-1 | Security update for tomcat | 2026-03-18T09:15:06Z | 2026-03-18T09:15:06Z |
| suse-su-2026:0921-1 | Security update for curl | 2026-03-18T08:52:04Z | 2026-03-18T08:52:04Z |
| suse-su-2026:20194-1 | Security update for postgresql17 and postgresql18 | 2026-03-18T08:31:44Z | 2026-03-18T08:31:44Z |
| suse-su-2026:0917-1 | Security update for kubernetes | 2026-03-18T07:47:08Z | 2026-03-18T07:47:08Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:19927 | Important: runc security update | 2025-11-07T00:00:00Z | 2025-11-10T12:59:59Z |
| alsa-2025:19912 | Important: bind security update | 2025-11-06T00:00:00Z | 2025-11-10T13:13:44Z |
| alsa-2025:19909 | Important: tigervnc security update | 2025-11-06T00:00:00Z | 2025-11-07T13:19:40Z |
| alsa-2025:19906 | Important: mingw-libtiff security update | 2025-11-06T00:00:00Z | 2025-11-07T13:28:57Z |
| alsa-2025:19835 | Important: bind security update | 2025-11-05T00:00:00Z | 2025-11-07T07:49:33Z |
| alsa-2025:19793 | Important: bind9.16 security update | 2025-11-05T00:00:00Z | 2025-11-07T08:08:22Z |
| alsa-2025:19772 | Important: qt6-qtsvg security update | 2025-11-05T00:00:00Z | 2025-11-07T08:19:22Z |
| alsa-2025:19719 | Important: pcs security update | 2025-11-04T00:00:00Z | 2025-11-20T09:07:50Z |
| alsa-2025:19714 | Important: libsoup security update | 2025-11-04T00:00:00Z | 2025-11-07T08:29:27Z |
| alsa-2025:19675 | Important: valkey security update | 2025-11-04T00:00:00Z | 2025-11-07T08:40:54Z |
| alsa-2025:19610 | Important: sssd security update | 2025-11-04T00:00:00Z | 2025-11-07T09:17:41Z |
| alsa-2025:19584 | Moderate: galera and mariadb security update | 2025-11-04T00:00:00Z | 2025-11-07T09:36:35Z |
| alsa-2025:19572 | Moderate: mariadb:10.5 security update | 2025-11-04T00:00:00Z | 2025-11-07T09:54:08Z |
| alsa-2025:19566 | Moderate: osbuild-composer security update | 2025-11-04T00:00:00Z | 2025-11-07T10:05:01Z |
| alsa-2025:19489 | Important: tigervnc security update | 2025-11-03T00:00:00Z | 2025-11-07T10:26:16Z |
| alsa-2025:19469 | Moderate: kernel security update | 2025-11-03T00:00:00Z | 2025-11-07T13:52:08Z |
| alsa-2025:19447 | Moderate: kernel security update | 2025-11-03T00:00:00Z | 2025-11-07T10:53:58Z |
| alsa-2025:19440 | Moderate: kernel-rt security update | 2025-11-03T00:00:00Z | 2025-11-07T11:04:50Z |
| alsa-2025:19435 | Moderate: xorg-x11-server-Xwayland security update | 2025-11-03T00:00:00Z | 2025-11-07T11:12:17Z |
| alsa-2025:19434 | Moderate: xorg-x11-server security update | 2025-11-03T00:00:00Z | 2026-01-05T21:05:53Z |
| alsa-2025:19432 | Moderate: xorg-x11-server-Xwayland security update | 2025-11-03T00:00:00Z | 2025-11-07T11:17:51Z |
| alsa-2025:19409 | Moderate: kernel security update | 2025-11-03T00:00:00Z | 2025-11-07T11:55:27Z |
| alsa-2025:19403 | Important: expat security update | 2025-11-03T00:00:00Z | 2025-11-07T12:04:59Z |
| alsa-2025:19345 | Important: redis:7 security update | 2025-10-30T00:00:00Z | 2025-11-07T12:12:46Z |
| alsa-2025:19276 | Important: libtiff security update | 2025-10-29T00:00:00Z | 2025-10-31T08:23:09Z |
| alsa-2025:19238 | Important: redis:6 security update | 2025-10-29T00:00:00Z | 2025-10-30T07:01:24Z |
| alsa-2025:19237 | Important: redis security update | 2025-10-29T00:00:00Z | 2025-10-30T07:03:54Z |
| alsa-2025:19156 | Important: libtiff security update | 2025-10-28T00:00:00Z | 2025-10-30T10:20:53Z |
| alsa-2025:19113 | Important: libtiff security update | 2025-10-27T00:00:00Z | 2025-10-28T07:58:42Z |
| alsa-2025:19107 | Important: squid:4 security update | 2025-10-27T00:00:00Z | 2025-10-28T09:25:35Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-161 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-11T00:00:35.333844Z | 2024-03-11T00:00:35.334478Z |
| osv-2024-157 | Heap-buffer-overflow in gf_strmemstr | 2024-03-10T00:06:03.489792Z | 2024-04-18T14:20:28.786302Z |
| osv-2024-156 | Stack-buffer-overflow in rtpin_satip_get_server_ip | 2024-03-10T00:01:41.405747Z | 2024-04-18T14:21:00.600694Z |
| osv-2024-153 | Heap-buffer-overflow in od_ec_dec_init | 2024-03-07T00:13:48.067527Z | 2024-04-24T14:26:37.406573Z |
| osv-2024-151 | Heap-buffer-overflow in od_ec_dec_normalize | 2024-03-07T00:04:15.146851Z | 2024-04-24T14:26:12.240231Z |
| osv-2024-149 | Heap-use-after-free in get_ls_tile_buffers | 2024-03-07T00:01:26.874963Z | 2024-04-24T14:25:20.329505Z |
| osv-2024-144 | UNKNOWN READ in spvtools::val::ValidateAccessChain | 2024-02-29T00:12:28.292465Z | 2024-04-23T14:17:09.435427Z |
| osv-2024-142 | Heap-buffer-overflow in gf_gz_decompress_payload_ex | 2024-02-29T00:06:19.763458Z | 2024-04-18T14:20:45.279874Z |
| osv-2024-140 | Container-overflow in WasmEdge::LLVM::Compiler::compile | 2024-02-28T00:12:59.500279Z | 2024-04-29T11:16:32.126190Z |
| osv-2024-138 | Security exception in com.github.javaparser.GeneratedJavaParser.Expression | 2024-02-28T00:05:23.810172Z | 2024-04-04T14:17:31.086359Z |
| osv-2024-137 | Global-buffer-overflow in igraph_dl_yylex | 2024-02-27T00:01:01.786536Z | 2024-04-03T14:17:44.548648Z |
| osv-2024-135 | Heap-buffer-overflow in BS_ReadByte | 2024-02-25T00:05:28.923786Z | 2024-04-18T14:10:11.037617Z |
| osv-2024-123 | Heap-use-after-free in dxf_tables_read | 2024-02-22T00:12:27.847169Z | 2024-04-29T11:24:19.340311Z |
| osv-2024-120 | Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer | 2024-02-21T00:00:31.892843Z | 2024-02-21T00:00:31.893273Z |
| osv-2024-118 | Heap-buffer-overflow in sav_process_row | 2024-02-20T00:01:08.095087Z | 2024-04-29T11:19:02.854462Z |
| osv-2024-117 | Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer | 2024-02-19T00:05:05.793082Z | 2024-02-19T00:05:05.793781Z |
| osv-2024-114 | Segv on unknown address in lj_BC_RET1 | 2024-02-17T00:12:33.617106Z | 2024-04-17T14:24:32.039372Z |
| osv-2024-112 | Stack-overflow in boost::read_graphviz_detail::parser::parse_subgraph | 2024-02-16T00:05:47.896843Z | 2026-03-11T14:26:22.626694Z |
| osv-2024-104 | Heap-buffer-overflow in mrb_memsearch | 2024-02-15T00:00:54.473735Z | 2024-02-15T00:00:54.474295Z |
| osv-2024-103 | Heap-use-after-free in xmlRemoveID | 2024-02-15T00:00:51.271367Z | 2024-02-15T00:00:51.271973Z |
| osv-2024-102 | Heap-buffer-overflow in mrb_memsearch | 2024-02-15T00:00:47.674187Z | 2024-02-15T00:00:47.674761Z |
| osv-2024-98 | UNKNOWN READ in PackLinuxElf32::adjABS | 2024-02-11T00:14:29.715614Z | 2024-04-29T11:31:53.382431Z |
| osv-2024-96 | Heap-buffer-overflow in mrb_memsearch | 2024-02-11T00:00:45.699847Z | 2024-02-14T14:17:20.000446Z |
| osv-2024-89 | Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst | 2024-02-09T00:03:08.288815Z | 2024-04-01T14:22:58.864850Z |
| osv-2024-88 | Heap-use-after-free in fuzzer_execute_ex | 2024-02-09T00:02:29.396272Z | 2024-02-09T00:02:29.396615Z |
| osv-2024-86 | Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse | 2024-02-09T00:00:11.154046Z | 2025-09-25T14:31:01.295253Z |
| osv-2024-85 | Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept | 2024-02-08T00:13:58.690460Z | 2026-01-13T04:47:29.127821Z |
| osv-2024-82 | Heap-use-after-free in xmlValidatePopElement | 2024-02-08T00:02:35.342535Z | 2024-02-08T00:02:35.343044Z |
| osv-2024-81 | Heap-use-after-free in xmlRemoveID | 2024-02-08T00:02:18.078478Z | 2024-02-08T00:02:18.079086Z |
| osv-2024-80 | Stack-buffer-overflow in line_join_points | 2024-02-07T00:03:02.923052Z | 2024-04-29T11:39:24.480321Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2022-0071 | Rusoto is unmaintained | 2022-04-24T12:00:00Z | 2022-12-18T12:08:00Z |
| rustsec-2022-0092 | `rmp-serde` `Raw` and `RawRef` unsound | 2022-04-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0016 | Use after free with `externref`s and epoch interruption in Wasmtime | 2022-03-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0099 | Use after free with `externref`s and epoch interruption in Wasmtime | 2022-03-28T12:00:00Z | 2025-05-02T08:23:27Z |
| rustsec-2022-0015 | pty is unmaintained | 2022-03-22T12:00:00Z | 2022-03-22T14:52:42Z |
| rustsec-2022-0014 | Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates | 2022-03-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0013 | Regexes with large repetitions on empty sub-expressions take a very long time to parse | 2022-03-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0103 | Incorrect signature verification on gzip-compressed install images | 2022-03-04T12:00:00Z | 2025-12-21T13:45:28Z |
| rustsec-2022-0012 | Arrow2 allows double free in `safe` code | 2022-03-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0011 | Miscomputation when performing AES encryption in rust-crypto | 2022-02-28T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0047 | Post-Quantum Signature scheme Rainbow level I parametersets broken | 2022-02-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0096 | Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator | 2022-02-17T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2022-0010 | enum_map macro can cause UB when `Enum` trait is incorrectly implemented | 2022-02-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0009 | Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord` | 2022-02-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0041 | Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64 | 2022-02-05T12:00:00Z | 2022-08-04T13:56:30Z |
| rustsec-2022-0081 | json is unmaintained | 2022-02-01T12:00:00Z | 2023-08-25T17:52:15Z |
| rustsec-2022-0048 | xml-rs is Unmaintained | 2022-01-26T12:00:00Z | 2023-05-05T07:39:54Z |
| rustsec-2022-0040 | Multiple soundness issues in `owning_ref` | 2022-01-26T12:00:00Z | 2023-10-14T21:21:18Z |
| rustsec-2022-0007 | A malicious coder can get unsound access to TCell or TLCell memory | 2022-01-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0006 | Data race in `Iter` and `IterMut` | 2022-01-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0005 | crate has been renamed to `ftdi-embedded-hal` | 2022-01-22T12:00:00Z | 2022-01-22T18:27:42Z |
| rustsec-2022-0043 | Improper validation of Windows paths could lead to directory traversal attack | 2022-01-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0003 | Space bug in `clean_text` | 2022-01-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0044 | `markdown` (1.0.0 and higher) is maintained | 2022-01-17T12:00:00Z | 2025-04-28T10:35:27Z |
| rustsec-2022-0039 | project abandoned | 2022-01-17T12:00:00Z | 2022-08-02T18:15:56Z |
| rustsec-2022-0036 | project abandoned | 2022-01-17T12:00:00Z | 2022-08-02T17:34:36Z |
| rustsec-2022-0082 | Improper validation of Windows paths could lead to directory traversal attack | 2022-01-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0078 | Use-after-free due to a lifetime error in `Vec::into_iter()` | 2022-01-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0002 | Unsoundness in `dashmap` references | 2022-01-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0001 | lmdb is unmaintained, use lmdb-rkv instead | 2022-01-05T12:00:00Z | 2022-01-05T16:02:27Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-node-2025-55131 | 2026-01-26T14:47:51.686Z | 2026-01-26T15:09:56.435Z | |
| bit-node-2025-55130 | 2026-01-26T14:47:49.864Z | 2026-02-04T10:19:33.233Z | |
| bit-libpython-2026-0865 | wsgiref.headers.Headers allows header newline injection | 2026-01-26T14:43:33.890Z | 2026-04-10T09:26:18.172Z |
| bit-libpython-2026-0672 | Header injection in http.cookies.Morsel | 2026-01-26T14:43:32.238Z | 2026-04-10T09:26:18.172Z |
| bit-libpython-2025-15367 | POP3 command injection in user-controlled commands | 2026-01-26T14:43:12.088Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-15366 | IMAP command injection in user-controlled commands | 2026-01-26T14:43:10.455Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-15282 | Header injection via newlines in data URL mediatype | 2026-01-26T14:43:08.856Z | 2026-04-10T09:26:18.172Z |
| bit-libpython-2025-12781 | base64.b64decode() always accepts "+/" characters, despite setting altchars | 2026-01-26T14:43:03.724Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-11468 | Folding email comments of unfoldable characters doesn't preserve parenthesis | 2026-01-26T14:42:59.991Z | 2026-04-10T09:26:18.172Z |
| bit-harbor-2024-22261 | SQL Injection in Harbor scan log API | 2026-01-26T14:40:06.365Z | 2026-01-26T15:09:56.435Z |
| bit-harbor-2022-31666 | Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies | 2026-01-26T14:39:52.521Z | 2026-01-26T15:09:56.435Z |
| bit-crossplane-2023-38495 | Crossplane vulnerable to possible image tampering from missing image validation for Packages | 2026-01-26T14:36:56.233Z | 2026-01-26T15:09:56.435Z |
| bit-crossplane-2023-37900 | Crossplane vulnerable to denial of service from large image | 2026-01-26T14:36:54.817Z | 2026-01-26T15:09:56.435Z |
| bit-gradle-2026-22865 | Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts | 2026-01-21T08:41:11.981Z | 2026-01-21T09:22:22.325Z |
| bit-gradle-2026-22816 | Gradle fails to disable repositories which can expose builds to malicious artifacts | 2026-01-21T08:41:10.153Z | 2026-01-21T09:22:22.325Z |
| bit-airflow-2025-68675 | Apache Airflow: proxy credentials for various providers might leak in task logs | 2026-01-21T08:39:24.383Z | 2026-02-26T09:13:58.886Z |
| bit-airflow-2025-68438 | Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated | 2026-01-21T08:39:22.633Z | 2026-01-21T09:22:22.325Z |
| bit-gitlab-2025-11224 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-16T09:05:53.033Z | 2026-01-22T09:11:07.452Z |
| bit-kibana-2026-0543 | Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation | 2026-01-16T08:42:18.049Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0532 | External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector | 2026-01-16T08:42:16.599Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0531 | Allocation of Resources Without Limits or Throttling in Kibana Fleet | 2026-01-16T08:42:14.963Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0530 | Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation | 2026-01-16T08:42:13.351Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0543 | Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation | 2026-01-16T08:39:07.127Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0532 | External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector | 2026-01-16T08:39:05.407Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0531 | Allocation of Resources Without Limits or Throttling in Kibana Fleet | 2026-01-16T08:39:03.612Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0530 | Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation | 2026-01-16T08:39:01.662Z | 2026-01-16T09:10:29.256Z |
| bit-appsmith-2026-22794 | Account Takeover Vulnerability in Appsmith | 2026-01-14T08:37:00.092Z | 2026-01-22T09:11:07.452Z |
| bit-mastodon-2026-22246 | Local Mastodon users can enumerate and access severed relationships of every other local user | 2026-01-13T11:27:33.626Z | 2026-01-26T15:09:56.435Z |
| bit-mastodon-2026-22245 | Mastodon has SSRF Protection bypass | 2026-01-13T11:27:28.319Z | 2026-01-13T12:01:00.363Z |
| bit-gitlab-2025-9222 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-13T09:09:30.025Z | 2026-01-26T15:09:56.435Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-pa85871 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:42:24.099846Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bv91860 | Within HostnameError | 2026-01-30T15:42:23.881650Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ia37596 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:41:53.874436Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-er42900 | ParseAddress function constructs domain-literal address components through repeated string concatenation | 2026-01-30T15:41:23.817747Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dv06422 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:40:54.415037Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mj51212 | Cancelling a query (e | 2026-01-30T15:40:23.782215Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-so16176 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:39:24.255623Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ru37859 | Cancelling a query (e | 2026-01-30T15:39:24.210234Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-pc16040 | Within HostnameError | 2026-01-30T15:37:23.991168Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dy37532 | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability | 2026-01-30T15:36:23.811582Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rw65075 | Within HostnameError | 2026-01-30T15:35:53.815887Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hg66170 | Cancelling a query (e | 2026-01-30T15:35:23.809128Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-qj89068 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:34:54.378061Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bz92766 | beego is an open-source web framework for the Go programming language | 2026-01-30T15:34:54.149400Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-jm84344 | Within HostnameError | 2026-01-30T15:33:53.700265Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nv07964 | Cancelling a query (e | 2026-01-30T15:33:23.809279Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-do54415 | Within HostnameError | 2026-01-30T15:33:23.703184Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-av38242 | Cancelling a query (e | 2026-01-30T15:33:23.662793Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oi08379 | Cancelling a query (e | 2026-01-30T15:32:54.729863Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-qk01721 | go-redis is the official Redis client library for the Go programming language | 2026-01-30T15:32:54.211133Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rr90125 | Cancelling a query (e | 2026-01-30T15:32:53.790454Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-xx70537 | Cancelling a query (e | 2026-01-30T15:32:24.053481Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-po40318 | go-redis is the official Redis client library for the Go programming language | 2026-01-30T15:31:53.772564Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ry09679 | go-redis is the official Redis client library for the Go programming language | 2026-01-30T15:31:53.660443Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-pg91940 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:31:24.365282Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ct39828 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T15:31:23.928259Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ur80185 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:30:24.609590Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-zo91195 | go-redis is the official Redis client library for the Go programming language | 2026-01-30T15:30:24.594235Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ts42581 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T15:29:23.600518Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-sy95837 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T15:28:53.594094Z | 2026-01-29T18:58:54Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1008 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1007 | Multiples vulnérabilités dans PostgreSQL | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1006 | Vulnérabilité dans Cisco Catalyst Center | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1005 | Multiples vulnérabilités dans les produits Siemens | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| certfr-2025-avi-1004 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| certfr-2025-avi-1003 | Multiples vulnérabilités dans Drupal | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| certfr-2025-avi-1002 | Multiples vulnérabilités dans GitLab | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| certfr-2025-avi-1001 | Multiples vulnérabilités dans Elastic Kibana | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| certfr-2025-avi-1000 | Multiples vulnérabilités dans les produits Splunk | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| certfr-2025-avi-0999 | Vulnérabilité dans les produits Symfony | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| certfr-2025-avi-0998 | Multiples vulnérabilités dans les produits Microsoft | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0997 | Multiples vulnérabilités dans Microsoft Azure | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0996 | Multiples vulnérabilités dans Microsoft Windows | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0995 | Multiples vulnérabilités dans Microsoft Office | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0994 | Multiples vulnérabilités dans Microsoft Edge | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0993 | Multiples vulnérabilités dans les produits Intel | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0992 | Multiples vulnérabilités dans Apache OpenOffice | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0991 | Multiples vulnérabilités dans les produits Mozilla | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0990 | Vulnérabilité dans Google Chrome | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0989 | Vulnérabilité dans Nagios XI | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0988 | Vulnérabilité dans Ivanti Endpoint Manager (EPM) | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0987 | Vulnérabilité dans les produits Citrix | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0986 | Vulnérabilité dans Schneider Electric EcoStruxure | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0985 | Multiples vulnérabilités dans les produits Axis | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0984 | Vulnérabilité dans Bitdefender Endpoint Security Tools pour Mac | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0983 | Vulnérabilité dans Synology BeeStation | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0982 | Multiples vulnérabilités dans les produits SAP | 2025-11-12T00:00:00.000000 | 2025-11-12T00:00:00.000000 |
| certfr-2025-avi-0981 | Multiples vulnérabilités dans les produits Qnap | 2025-11-10T00:00:00.000000 | 2025-11-10T00:00:00.000000 |
| certfr-2025-avi-0980 | Multiples vulnérabilités dans les produits IBM | 2025-11-07T00:00:00.000000 | 2025-11-07T00:00:00.000000 |
| certfr-2025-avi-0979 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-07T00:00:00.000000 | 2025-11-07T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000061 | Chatwork Desktop Application (Mac) vulnerable to code injection | 2023-06-13T13:38+09:00 | 2024-05-24T16:02+09:00 |
| jvndb-2023-000062 | "WPS Office" vulnerable to OS command injection | 2023-06-12T12:57+09:00 | 2024-04-18T17:49+09:00 |
| jvndb-2023-000059 | Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT | 2023-06-09T15:18+09:00 | 2024-05-27T16:38+09:00 |
| jvndb-2023-000048 | ASUS Router RT-AX3000 vulnerable to using sensitive cookies without 'Secure' attribute | 2023-06-09T15:18+09:00 | 2024-04-18T17:44+09:00 |
| jvndb-2023-002072 | Multiple vulnerabilities in Fuji Electric products | 2023-06-09T12:23+09:00 | 2024-05-23T15:33+09:00 |
| jvndb-2023-002055 | Multiple vulnerabilities in KbDevice digital video recorders | 2023-06-07T11:52+09:00 | 2024-05-24T15:57+09:00 |
| jvndb-2023-002022 | Multiple vulnerabilities in FUJI ELECTRIC FRENIC RHC Loader | 2023-06-05T15:55+09:00 | 2024-04-18T17:40+09:00 |
| jvndb-2023-000057 | "Jiyu Kukan Toku-Toku coupon" App vulnerable to improper server certificate verification | 2023-06-01T14:51+09:00 | 2024-05-23T17:19+09:00 |
| jvndb-2023-002002 | Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) | 2023-06-01T13:48+09:00 | 2024-03-19T18:13+09:00 |
| jvndb-2023-000058 | Pleasanter vulnerable to cross-site scripting | 2023-05-31T15:34+09:00 | 2024-03-19T18:17+09:00 |
| jvndb-2023-000052 | DataSpider Servista uses a hard-coded cryptographic key | 2023-05-31T15:34+09:00 | 2024-03-19T17:44+09:00 |
| jvndb-2023-000056 | Starlette vulnerable to directory traversal | 2023-05-30T13:34+09:00 | 2024-03-19T18:08+09:00 |
| jvndb-2023-000055 | ESS REC Agent Server Edition for Linux etc. vulnerable to directory traversal | 2023-05-26T13:58+09:00 | 2024-03-21T17:15+09:00 |
| jvndb-2023-000054 | Wacom Tablet Driver installer for macOS vulnerable to improper link resolution before file access | 2023-05-25T13:40+09:00 | 2023-05-25T13:40+09:00 |
| jvndb-2023-001926 | Cross-site Scripting Vulnerability in Hitachi Ops Center Analyzer | 2023-05-24T11:40+09:00 | 2024-05-24T17:01+09:00 |
| jvndb-2023-000053 | Tornado vulnerable to open redirect | 2023-05-22T13:30+09:00 | 2024-03-21T17:05+09:00 |
| jvndb-2023-001894 | Android App "Brother iPrint&Scan" vulnerable to improper access control | 2023-05-19T15:40+09:00 | 2023-05-19T15:40+09:00 |
| jvndb-2023-000051 | Multiple vulnerabilities in T&D and ESPEC MIC data logger products | 2023-05-19T15:21+09:00 | 2024-05-23T17:03+09:00 |
| jvndb-2023-000026 | Qrio Smart Lock Q-SL2 vulnerable to authentication bypass by capture-replay | 2023-05-18T14:13+09:00 | 2024-05-23T17:18+09:00 |
| jvndb-2023-001852 | OS command injection vulnerability in Inaba Denki Sangyo Wi-Fi AP UNIT | 2023-05-17T15:09+09:00 | 2023-05-17T15:09+09:00 |
| jvndb-2023-000050 | Multiple vulnerabilities in WordPress Plugin "MW WP Form" and "Snow Monkey Forms" | 2023-05-15T14:29+09:00 | 2024-05-29T16:27+09:00 |
| jvndb-2023-000049 | Multiple vulnerabilities in Cybozu Garoon | 2023-05-15T14:29+09:00 | 2024-05-24T15:26+09:00 |
| jvndb-2023-000047 | Beekeeper Studio vulnerable to code injection | 2023-05-12T16:42+09:00 | 2024-05-24T16:17+09:00 |
| jvndb-2023-000043 | Multiple vulnerabilities in MicroEngine Mailform | 2023-05-10T13:57+09:00 | 2024-05-24T17:07+09:00 |
| jvndb-2023-001774 | Multiple vulnerabilities in SolarView Compact | 2023-05-09T16:09+09:00 | 2024-06-27T13:30+09:00 |
| jvndb-2023-000045 | WordPress Plugin "VK Blocks" and "VK All in One Expansion Unit" vulnerable to cross-site scripting | 2023-05-09T15:14+09:00 | 2024-05-24T17:05+09:00 |
| jvndb-2023-000042 | WordPress Plugin "Newsletter" vulnerable to cross-site scripting | 2023-05-09T14:42+09:00 | 2024-06-13T16:14+09:00 |
| jvndb-2023-000046 | SR-7100VN vulnerable to privilege escalation | 2023-05-09T13:58+09:00 | 2024-05-24T16:13+09:00 |
| jvndb-2023-000041 | LINE WORKS Drive Explorer vulnerable to code injection | 2023-05-08T15:16+09:00 | 2024-05-23T17:03+09:00 |
| jvndb-2023-000044 | JINS MEME CORE uses a hard-coded cryptographic key | 2023-05-08T15:13+09:00 | 2024-06-13T16:19+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-12559 | Microsoft Windows Notepad命令注入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12558 | Microsoft Windows Kernel竞争条件漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12557 | Microsoft Outlook信息泄露漏洞(CNVD-2026-12557) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12556 | Microsoft Hyper-V缓冲区溢出漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12555 | Microsoft Hyper-V访问控制错误漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12554 | Microsoft GitHub Copilot for JetBrains命令注入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12553 | Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12553) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12552 | Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12552) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-13786 | IBM Concert信息泄露漏洞(CNVD-2026-13786) | 2026-02-28 | 2026-03-16 |
| cnvd-2026-13785 | IBM Concert跨站脚本漏洞(CNVD-2026-13785) | 2026-02-28 | 2026-03-16 |
| cnvd-2026-12893 | Apache Superset输入验证漏洞 | 2026-02-27 | 2026-03-04 |
| cnvd-2026-15863 | Advantech WISE-6610操作系统命令注入漏洞 | 2026-02-25 | 2026-04-02 |
| cnvd-2026-12871 | Adobe DNG SDK缓冲区溢出漏洞 | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12870 | Adobe After Effects缓冲区溢出漏洞(CNVD-2026-12870) | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12869 | Adobe After Effects资源管理错误漏洞(CNVD-2026-12869) | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12868 | Adobe After Effects资源管理错误漏洞(CNVD-2026-12868) | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12867 | Adobe After Effects资源管理错误漏洞 | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12866 | Adobe After Effects输入验证错误漏洞(CNVD-2026-12866) | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12865 | Adobe After Effects类型混淆漏洞 | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12561 | Microsoft Defender for Linux代码执行漏洞 | 2026-02-25 | 2026-03-04 |
| cnvd-2026-14508 | Adobe Audition越界写入漏洞(CNVD-2026-14508) | 2026-02-24 | 2026-03-23 |
| cnvd-2026-14507 | Adobe Substance3D Designer越界写入漏洞 | 2026-02-24 | 2026-03-23 |
| cnvd-2026-14506 | Adobe Audition越界读取漏洞(CNVD-2026-14506) | 2026-02-24 | 2026-03-23 |
| cnvd-2026-14505 | Adobe Audition缓冲区溢出漏洞(CNVD-2026-14505) | 2026-02-24 | 2026-03-23 |
| cnvd-2026-14504 | Adobe Substance3D Designer缓冲区溢出漏洞(CNVD-2026-14504) | 2026-02-24 | 2026-03-23 |
| cnvd-2026-12875 | Adobe Substance3D Designer缓冲区溢出漏洞(CNVD-2026-12875) | 2026-02-24 | 2026-03-09 |
| cnvd-2026-12874 | Adobe Substance3D Designer代码问题漏洞 | 2026-02-24 | 2026-03-09 |
| cnvd-2026-12873 | Adobe Audition缓冲区溢出漏洞 | 2026-02-24 | 2026-03-09 |
| cnvd-2026-12872 | Adobe Substance3D Designer缓冲区溢出漏洞(CNVD-2026-12872) | 2026-02-24 | 2026-03-09 |
| cnvd-2026-12894 | Apache Druid认证绕过漏洞 | 2026-02-13 | 2026-03-04 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-01067 | Уязвимость функции system() (/boaform/formSysCmd) микропрограммного обеспечения оптически… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01066 | Уязвимость программного обеспечения для настройки и обслуживания сервоприводов ASDA-Soft,… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01065 | Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm, существующая из-за н… | 02.02.2026 | 04.02.2026 |
| bdu:2026-01064 | Уязвимость компонента NVIDIA Virtual GPU Manager драйвера виртуальных графических процесс… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01063 | Уязвимость компонента NVIDIA Virtual GPU Manager драйвера виртуальных графических процесс… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01062 | Уязвимость функции fromAdvSetMacMtuWan микропрограммного обеспечения маршрутизаторов Tend… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01061 | Уязвимость приложения для управления жизненным циклом мобильных устройств и мобильных при… | 02.02.2026 | 02.02.2026 |
| bdu:2026-01060 | Уязвимость функции metadata.checkType() фреймворка для обеспечения безопасности систем об… | 31.01.2026 | 31.01.2026 |
| bdu:2026-01059 | Уязвимость функции metadata.VerifyDelegate() фреймворка для обеспечения безопасности сист… | 31.01.2026 | 31.01.2026 |
| bdu:2026-01058 | Уязвимость конфигурации UPLOAD_DIR и UPLOAD_KEEP_FILENAME=True потокового многокомпонентн… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01057 | Уязвимость функций rt6_uncached_list_del() и rt_del_uncached_list() ядра операционной сис… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01056 | Уязвимость модулей arch/x86/kvm/x86.c и arch/x86/kernel/fpu/core.c ядра операционной сист… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01055 | Уязвимость функции mlx5e_netdev_change_profile() ядра операционной системы Linux, позволя… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01053 | Уязвимость функции hnd_parentalctrl_unblock() микропрограммного обеспечения маршрутизатор… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01052 | Уязвимость микропрограммного обеспечения промышленного контроллера SICK TDC-X401GL, связа… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01051 | Уязвимость микропрограммного обеспечения промышленного контроллера SICK TDC-X401GL, связа… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01050 | Уязвимость функции mlx5_unload_one() модуля drivers/net/ethernet/mellanox/mlx5/core/lag/l… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01049 | Уязвимость функции name_size() ядра операционной системы Linux, позволяющая нарушителю вы… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01048 | Уязвимость функции png_image_read_direct_scaled() библиотеки libpng, позволяющая нарушите… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01047 | Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm, связанная с чтением … | 30.01.2026 | 04.02.2026 |
| bdu:2026-01046 | Уязвимость веб-интерфейса управления микропрограммного обеспечения беспроводных маршрутиз… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01045 | Уязвимость функции unserialize() WebSocket-сервера Laravel Reverb, позволяющая нарушителю… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01044 | Уязвимость компонента systemutil.cgi микропрограммного обеспечения маршрутизаторов Telesq… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01043 | Уязвимость компонента Spring Boot Actuator корпоративного защищённого решения для обмена … | 30.01.2026 | 30.01.2026 |
| bdu:2026-01042 | Уязвимость компонента JSP Application корпоративного защищённого решения для обмена сообщ… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01041 | Уязвимость файла .dylib текстового редактора Sublime Text операционной системы Mac Os, по… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01040 | Уязвимость компонента EnvoyExtensionPolicy программной платформы для управления Envoy Pro… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01039 | Уязвимость реализации механизма аутентификации Polkit утилиты InputPlumber операционной с… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01038 | Уязвимость функции Search и Discovery микропрограммного обеспечения устройств видеонаблюд… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01037 | Уязвимость веб-интерфейса управления микропрограммного обеспечения беспроводных маршрутиз… | 30.01.2026 | 30.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-202112-2539 | vim is vulnerable to Out-of-bounds Read. SourceCoster Online Covid Vaccination Scheduler … | 2026-04-10T21:56:40.329000Z |
| var-200701-0021 | Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possib… | 2026-04-10T21:56:20.947000Z |
| var-201205-0297 | The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial … | 2026-04-10T21:56:19.961000Z |
| var-201110-0450 | The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to c… | 2026-04-10T21:55:48.501000Z |
| var-200102-0075 | IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP … | 2026-04-10T21:55:42.690000Z |
| var-201910-1503 | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_pr… | 2026-04-10T21:55:42.379000Z |
| var-200906-0612 | drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earli… | 2026-04-10T21:55:32.598000Z |
| var-200809-0402 | Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.… | 2026-04-10T21:55:32.474000Z |
| var-201712-0248 | There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponent… | 2026-04-10T21:55:29.740000Z |
| var-201302-0233 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-04-10T21:55:29.656000Z |
| var-202109-1313 | An integer overflow was addressed with improved input validation. This issue is fixed in … | 2026-04-10T21:55:29.210000Z |
| var-201006-1239 | The execCommand JavaScript function in WebKit in Apple Safari before 5.0 on Mac OS X 10.5… | 2026-04-10T21:55:28.813000Z |
| var-202203-0043 | A flaw was found in the way the "flags" member of the new pipe buffer structure was lacki… | 2026-04-10T21:54:57.588000Z |
| var-202004-0345 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2026-04-10T21:54:27.304000Z |
| var-200607-0007 | Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows… | 2026-04-10T21:54:24.497000Z |
| var-202105-0131 | A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packe… | 2026-04-10T21:54:22.923000Z |
| var-202004-1973 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2026-04-10T21:53:55.121000Z |
| var-201112-0123 | Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java … | 2026-04-10T21:53:54.748000Z |
| var-201912-1378 | SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an… | 2026-04-10T21:53:23.395000Z |
| var-201006-1240 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2026-04-10T21:53:21.628000Z |
| var-201912-0586 | This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Moj… | 2026-04-10T21:53:21.034000Z |
| var-200608-0034 | Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to c… | 2026-04-10T21:53:20.249000Z |
| var-201710-0974 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the G… | 2026-04-10T21:53:19.111000Z |
| var-201912-0605 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-04-10T21:52:41.385000Z |
| var-200505-0350 | The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an ap… | 2026-04-10T21:51:58.841000Z |
| var-201110-0476 | Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers… | 2026-04-10T21:51:54.403000Z |
| var-202201-0349 | node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. I… | 2026-04-10T21:51:52.375000Z |
| var-200608-0037 | The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain … | 2026-04-10T21:51:51.293000Z |
| var-200808-0154 | Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.… | 2026-04-10T21:51:50.903000Z |
| var-201112-0047 | The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64… | 2026-04-10T21:50:42.347000Z |