Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27611 |
7.1 (4.0)
|
FileBrowser Quantum: Password Protection Not Enforced … |
gtsteffaniak |
filebrowser |
2026-02-25T02:24:48.357Z | 2026-02-27T17:11:18.122Z |
| CVE-2026-27595 |
9.9 (4.0)
|
Parse Dashboard has incomplete authentication on AI Ag… |
parse-community |
parse-dashboard |
2026-02-25T02:21:33.428Z | 2026-02-27T17:14:07.067Z |
| CVE-2026-27610 |
7 (4.0)
|
Parse Dashboard Has a Cache Key Collision that Leaks M… |
parse-community |
parse-dashboard |
2026-02-25T02:19:56.022Z | 2026-02-27T17:24:10.098Z |
| CVE-2026-27609 |
8.3 (4.0)
|
Parse Dashboard Missing CSRF Protection on Agent Endpoint |
parse-community |
parse-dashboard |
2026-02-25T02:18:28.909Z | 2026-02-27T17:24:51.491Z |
| CVE-2026-27608 |
9.3 (4.0)
|
Parse Dashboard Missing Authorization on Agent Endpoint |
parse-community |
parse-dashboard |
2026-02-25T02:16:30.622Z | 2026-02-25T18:58:39.218Z |
| CVE-2026-27822 |
9.1 (3.1)
|
Rust has Critical Stored XSS in Preview Modal, leading… |
rustfs |
rustfs |
2026-02-25T02:11:57.535Z | 2026-02-25T19:23:50.704Z |
| CVE-2026-27607 |
8.1 (3.1)
|
RustFS's Missing Post Policy Validation leads to Arbit… |
rustfs |
rustfs |
2026-02-25T02:10:28.086Z | 2026-02-25T20:06:03.487Z |
| CVE-2026-27606 |
8.8 (4.0)
|
Rollup 4 has Arbitrary File Write via Path Traversal |
rollup |
rollup |
2026-02-25T02:08:06.682Z | 2026-02-25T20:10:29.816Z |
| CVE-2026-25135 |
4.5 (3.1)
|
OpenEMR's location resource for Group.$export operatio… |
openemr |
openemr |
2026-02-25T02:02:14.203Z | 2026-02-25T20:17:35.710Z |
| CVE-2026-3145 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
libvips matrixload.c vips_foreign_load_matrix_header m… |
n/a |
libvips |
2026-02-25T02:02:10.604Z | 2026-02-25T20:28:56.023Z |
| CVE-2026-25131 |
8.8 (3.1)
|
OpenEMR has Broken Access Control in Procedures Config… |
openemr |
openemr |
2026-02-25T01:55:43.778Z | 2026-02-25T20:34:41.500Z |
| CVE-2026-25127 |
7 (4.0)
|
OpenEMR has Broken Access Control on Care Coordination… |
openemr |
openemr |
2026-02-25T01:53:15.570Z | 2026-02-25T20:44:14.545Z |
| CVE-2026-25124 |
6.5 (3.1)
|
OpenEMR has Broken Access Control in Report/Clients/Me… |
openemr |
openemr |
2026-02-25T01:50:22.146Z | 2026-02-25T20:50:25.100Z |
| CVE-2026-24896 |
6.5 (3.1)
|
OpenEMR has Broken Access Control that allows unauthor… |
openemr |
openemr |
2026-02-25T01:47:59.765Z | 2026-02-25T20:58:20.711Z |
| CVE-2026-24849 |
10 (3.1)
|
OpenEMR Arbitrary File Read Vulnerability |
openemr |
openemr |
2026-02-25T01:44:30.584Z | 2026-02-25T21:05:01.567Z |
| CVE-2026-24847 |
6.1 (3.1)
|
OpenEMR has Open Redirect in Eye Exam Form |
openemr |
openemr |
2026-02-25T01:34:35.364Z | 2026-02-25T21:08:26.424Z |
| CVE-2026-2914 |
8.5 (4.0)
|
CyberArk Endpoint Privilege Manager Agent version… |
CyberArk Software, a Palo Alto Networks Company |
Endpoint Privilege Manager Agent |
2026-02-25T01:33:05.657Z | 2026-02-26T21:42:22.714Z |
| CVE-2026-21443 |
1.2 (4.0)
|
OpenEMR allows inconsistent escaping of translation fu… |
openemr |
openemr |
2026-02-25T01:23:22.052Z | 2026-02-25T21:15:31.995Z |
| CVE-2025-69231 |
8.7 (3.1)
|
OpenEMR has a Stored XSS in GAD-7 Form that Enables Se… |
openemr |
openemr |
2026-02-25T01:18:14.722Z | 2026-02-27T17:25:25.132Z |
| CVE-2025-68277 |
7.2 (4.0)
|
OpenEMR allows links sent via Secure Messaging to be o… |
openemr |
openemr |
2026-02-25T01:13:28.531Z | 2026-02-27T17:27:36.039Z |
| CVE-2025-67752 |
8.1 (3.1)
|
OpenEMR Has Disabled SSL Certificate Verification in H… |
openemr |
openemr |
2026-02-25T01:09:20.946Z | 2026-02-27T17:30:42.203Z |
| CVE-2026-3137 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
CodeAstro Food Ordering System food_ordering.exe stack… |
CodeAstro |
Food Ordering System |
2026-02-25T00:32:07.501Z | 2026-02-27T17:31:16.374Z |
| CVE-2025-67491 |
8.5 (4.0)
|
OpenEMR has Stored XSS in ub04 helper |
openemr |
openemr |
2026-02-25T00:31:11.369Z | 2026-02-27T17:32:18.289Z |
| CVE-2026-27598 |
7.1 (4.0)
|
Dagu: Path traversal in DAG creation allows arbitrary … |
dagu-org |
dagu |
2026-02-25T00:27:40.654Z | 2026-02-26T21:02:19.359Z |
| CVE-2026-3135 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode News Portal Project add-category.php sql … |
itsourcecode |
News Portal Project |
2026-02-25T00:02:08.161Z | 2026-02-26T20:57:10.132Z |
| CVE-2026-26717 |
4.8 (3.1)
|
An issue in OpenFUN Richie (LMS) in src/richie/ap… |
n/a |
n/a |
2026-02-25T00:00:00.000Z | 2026-02-26T19:11:04.934Z |
| CVE-2025-69771 |
9.6 (3.1)
|
An arbitrary file upload vulnerability in the sub… |
n/a |
n/a |
2026-02-25T00:00:00.000Z | 2026-02-26T19:36:16.836Z |
| CVE-2026-3134 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode News Portal Project edit-category.php sql… |
itsourcecode |
News Portal Project |
2026-02-24T23:32:11.537Z | 2026-02-27T18:54:52.791Z |
| CVE-2026-3133 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Document Management System Login loging.p… |
itsourcecode |
Document Management System |
2026-02-24T23:32:08.553Z | 2026-02-27T18:54:25.889Z |
| CVE-2026-26351 |
4.8 (4.0)
|
GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php |
GetSimpleCMS-CE |
GetSimpleCMS-CE |
2026-02-24T22:05:54.420Z | 2026-02-27T20:54:05.464Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27744 |
9.3 (4.0)
9.8 (3.1)
|
SPIP tickets < 4.3.3 Unauthenticated RCE |
SPIP |
tickets |
2026-02-25T03:08:24.714Z | 2026-02-26T19:55:34.974Z |
| CVE-2026-27743 |
9.3 (4.0)
9.8 (3.1)
|
SPIP referer_spam <= 1.2.1 Unauthenticated SQL Injection |
SPIP |
referer_spam |
2026-02-25T03:08:39.325Z | 2026-02-26T19:55:07.890Z |
| CVE-2026-27641 |
9.8 (3.1)
|
Flask-Reuploaded vulnerable to Remote Code Execution v… |
jugmac00 |
flask-reuploaded |
2026-02-25T03:54:54.391Z | 2026-02-25T21:12:45.608Z |
| CVE-2026-27640 |
8.5 (4.0)
|
tfplan2md has Sensitive Value Exposure in Generated Reports |
oocx |
tfplan2md |
2026-02-25T03:52:26.615Z | 2026-02-25T21:21:08.940Z |
| CVE-2026-27639 |
8.5 (4.0)
|
Mercator vulnerable to stored XSS via unescaped Blade … |
dbarzin |
mercator |
2026-02-25T03:44:26.241Z | 2026-02-25T15:20:41.753Z |
| CVE-2026-27637 |
9.8 (3.1)
|
FreeScout's Predictable Authentication Token Enables A… |
freescout-help-desk |
freescout |
2026-02-25T03:41:23.478Z | 2026-02-25T15:21:52.817Z |
| CVE-2026-27636 |
8.8 (3.1)
|
FreeScout: Missing .htaccess in Restricted File Extens… |
freescout-help-desk |
freescout |
2026-02-25T03:41:33.166Z | 2026-02-25T15:25:24.822Z |
| CVE-2026-27627 |
8.2 (3.1)
|
Karakeep's Reddit plugin content bypasses DOMPurify sa… |
karakeep-app |
karakeep |
2026-02-25T03:48:07.431Z | 2026-02-25T21:20:03.257Z |
| CVE-2026-27597 |
10 (3.1)
|
@enclave-vm/core is vulnerable to Sandbox Escape |
agentfront |
enclave |
2026-02-25T03:56:25.927Z | 2026-02-25T21:13:32.747Z |
| CVE-2026-3146 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
libvips matrixload.c vips_foreign_load_matrix_header n… |
n/a |
libvips |
2026-02-25T03:02:09.172Z | 2026-02-25T15:52:33.882Z |
| CVE-2026-3145 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
libvips matrixload.c vips_foreign_load_matrix_header m… |
n/a |
libvips |
2026-02-25T02:02:10.604Z | 2026-02-25T20:28:56.023Z |
| CVE-2026-27822 |
9.1 (3.1)
|
Rust has Critical Stored XSS in Preview Modal, leading… |
rustfs |
rustfs |
2026-02-25T02:11:57.535Z | 2026-02-25T19:23:50.704Z |
| CVE-2026-27632 |
2.6 (3.1)
|
Talishar Vulnerable to Cross-Site Request Forgery (CSRF) |
Talishar |
Talishar |
2026-02-25T02:52:10.061Z | 2026-02-26T21:33:41.129Z |
| CVE-2026-27629 |
5.9 (3.1)
|
InvenTree Vulnerable to Server Side Template Injection… |
inventree |
InvenTree |
2026-02-25T02:48:41.934Z | 2026-02-26T21:33:40.971Z |
| CVE-2026-27628 |
1.2 (4.0)
|
pypdf has a possible infinite loop when loading circul… |
py-pdf |
pypdf |
2026-02-25T02:45:37.543Z | 2026-02-27T19:49:02.019Z |
| CVE-2026-27626 |
10 (3.1)
|
OliveTin vulnerable to OS Command Injection via `passw… |
OliveTin |
OliveTin |
2026-02-25T02:43:08.189Z | 2026-02-27T17:07:28.612Z |
| CVE-2026-27621 |
6.8 (4.0)
|
TypiCMS Core has Stored Cross-Site Scripting (XSS) via… |
TypiCMS |
Core |
2026-02-25T02:36:12.353Z | 2026-02-26T20:59:12.644Z |
| CVE-2026-27615 |
8.8 (4.0)
|
ADB-Explorer: UNC Path Support in ManualAdbPath Leads … |
Alex4SSB |
ADB-Explorer |
2026-02-25T02:33:53.553Z | 2026-02-27T17:09:58.886Z |
| CVE-2026-27614 |
9.3 (3.1)
|
Bugsink is vulnerable to Stored XSS via Pygments fallb… |
bugsink |
bugsink |
2026-02-25T02:31:17.880Z | 2026-02-25T20:01:45.861Z |
| CVE-2026-27612 |
6.1 (3.1)
|
Repostat Vulnerable to Reflected Cross-Site Scripting … |
denpiligrim |
repostat |
2026-02-25T02:38:05.548Z | 2026-02-26T21:33:40.838Z |
| CVE-2026-27611 |
7.1 (4.0)
|
FileBrowser Quantum: Password Protection Not Enforced … |
gtsteffaniak |
filebrowser |
2026-02-25T02:24:48.357Z | 2026-02-27T17:11:18.122Z |
| CVE-2026-27610 |
7 (4.0)
|
Parse Dashboard Has a Cache Key Collision that Leaks M… |
parse-community |
parse-dashboard |
2026-02-25T02:19:56.022Z | 2026-02-27T17:24:10.098Z |
| CVE-2026-27609 |
8.3 (4.0)
|
Parse Dashboard Missing CSRF Protection on Agent Endpoint |
parse-community |
parse-dashboard |
2026-02-25T02:18:28.909Z | 2026-02-27T17:24:51.491Z |
| CVE-2026-27608 |
9.3 (4.0)
|
Parse Dashboard Missing Authorization on Agent Endpoint |
parse-community |
parse-dashboard |
2026-02-25T02:16:30.622Z | 2026-02-25T18:58:39.218Z |
| CVE-2026-27607 |
8.1 (3.1)
|
RustFS's Missing Post Policy Validation leads to Arbit… |
rustfs |
rustfs |
2026-02-25T02:10:28.086Z | 2026-02-25T20:06:03.487Z |
| CVE-2026-27606 |
8.8 (4.0)
|
Rollup 4 has Arbitrary File Write via Path Traversal |
rollup |
rollup |
2026-02-25T02:08:06.682Z | 2026-02-25T20:10:29.816Z |
| CVE-2026-27595 |
9.9 (4.0)
|
Parse Dashboard has incomplete authentication on AI Ag… |
parse-community |
parse-dashboard |
2026-02-25T02:21:33.428Z | 2026-02-27T17:14:07.067Z |
| CVE-2026-25135 |
4.5 (3.1)
|
OpenEMR's location resource for Group.$export operatio… |
openemr |
openemr |
2026-02-25T02:02:14.203Z | 2026-02-25T20:17:35.710Z |
| CVE-2025-5781 |
5.2 (3.1)
|
Information Exposure Vulnerability in Hitachi Configur… |
Hitachi |
Hitachi Ops Center API Configuration Manager |
2026-02-25T03:01:21.623Z | 2026-02-26T17:00:34.754Z |
| CVE-2026-2914 |
8.5 (4.0)
|
CyberArk Endpoint Privilege Manager Agent version… |
CyberArk Software, a Palo Alto Networks Company |
Endpoint Privilege Manager Agent |
2026-02-25T01:33:05.657Z | 2026-02-26T21:42:22.714Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-3wfp-66x3-wgq2 |
7.5 (3.1)
|
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects … | 2026-02-24T15:30:32Z | 2026-02-25T21:31:18Z |
| ghsa-3qgm-jcxp-m9m6 |
10.0 (3.1)
|
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnera… | 2026-02-24T15:30:32Z | 2026-02-25T18:31:35Z |
| ghsa-3px2-2xc4-mxr2 |
9.8 (3.1)
|
Invalid pointer in the JavaScript Engine component. This vulnerability affects Firefox < 148 and Fi… | 2026-02-24T15:30:32Z | 2026-02-25T18:31:35Z |
| ghsa-3922-j2hh-9qcf |
5.4 (3.1)
|
Use-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 148. | 2026-02-24T15:30:32Z | 2026-02-24T18:31:02Z |
| ghsa-x8jx-9xwq-xwq6 |
9.8 (3.1)
|
Use-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 148 a… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:35Z |
| ghsa-wwg9-hv2r-mj8w |
9.8 (3.1)
|
Integer overflow in the Audio/Video component. This vulnerability affects Firefox < 148, Firefox ES… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:35Z |
| ghsa-v49m-r4w3-2p5x |
9.8 (3.1)
|
Integer overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox … | 2026-02-24T15:30:31Z | 2026-02-25T18:31:33Z |
| ghsa-v33x-35cm-8gjc |
10.0 (3.1)
|
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:35Z |
| ghsa-r2q9-885m-j92q |
9.8 (3.1)
|
Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Fire… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:31Z |
| ghsa-qmr7-46p8-4c5r |
9.8 (3.1)
|
Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 148, Firefo… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:34Z |
| ghsa-mg9m-c3pr-5p64 |
8.1 (3.1)
7.6 (4.0)
|
A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and … | 2026-02-24T15:30:31Z | 2026-02-26T18:31:38Z |
| ghsa-m65f-px5x-xq9x |
9.8 (3.1)
|
Undefined behavior in the DOM: Core & HTML component. This vulnerability affects Firefox < 148, Fir… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:35Z |
| ghsa-h67m-x9c3-v9wp |
8.8 (3.1)
|
Use-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox < 148, Firef… | 2026-02-24T15:30:31Z | 2026-02-24T18:31:01Z |
| ghsa-h3qc-gf9h-42g6 |
9.8 (3.1)
|
Mitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox < 148, Fire… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:35Z |
| ghsa-gxg5-574v-j5f6 |
9.8 (3.1)
|
Use-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox < 148, Fi… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:35Z |
| ghsa-gwgg-r543-4wvw |
9.8 (3.1)
|
Malicious scripts could cause desynchronization between the address bar and web content before a re… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:31Z |
| ghsa-g5w7-69g8-vcwp |
10.0 (3.1)
|
Sandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Fire… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:33Z |
| ghsa-99p8-j693-qhpc |
9.8 (3.1)
|
Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 148 and Fir… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:34Z |
| ghsa-8hm4-jmvc-cfg9 |
8.1 (3.1)
7.4 (4.0)
|
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter … | 2026-02-24T15:30:31Z | 2026-02-26T18:31:38Z |
| ghsa-76rw-rj58-mpqc |
10.0 (3.1)
|
Sandbox escape in the Storage: IndexedDB component. This vulnerability affects Firefox < 148 and Fi… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:35Z |
| ghsa-5mg4-r7qx-2frp |
9.8 (3.1)
|
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox < 148, F… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:34Z |
| ghsa-59x3-pvmj-2pw2 |
9.8 (3.1)
|
Use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 148 an… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:35Z |
| ghsa-3jr5-gwfp-7mfw |
9.8 (3.1)
|
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affe… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:34Z |
| ghsa-3hhv-j9r2-hr9c |
9.8 (3.1)
|
Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firef… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:32Z |
| ghsa-3cg8-wjp5-4rm6 |
9.8 (3.1)
|
Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148, Firefox E… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:32Z |
| ghsa-2255-92v8-4pvj |
10.0 (3.1)
|
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vuln… | 2026-02-24T15:30:31Z | 2026-02-25T18:31:32Z |
| ghsa-q2vg-xgjr-32v3 |
7.5 (3.1)
8.7 (4.0)
|
IEC 60870-5-104: Potential Denial of Service impact on reception of invalid U-format frame. Product… | 2026-02-24T15:30:30Z | 2026-02-27T21:31:19Z |
| ghsa-pwpc-5pp8-7qw9 |
5.3 (3.1)
5.3 (4.0)
|
RTU500 web interface: An unprivileged user can read user management information. The information ca… | 2026-02-24T15:30:30Z | 2026-02-27T21:31:19Z |
| ghsa-mwf2-qr4v-94h2 |
7.1 (4.0)
|
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections | 2026-02-24T15:30:30Z | 2026-02-26T15:29:01Z |
| ghsa-h294-8fxm-m2pj |
2.3 (4.0)
|
Apache Superset allows authenticated users to view sensitive data without explicit permissions | 2026-02-24T15:30:30Z | 2026-02-26T15:28:47Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-270 |
2.8 (3.1)
|
A flaw was found in openstack-glance. This issue could allow a remote, authenticated atta… | glance | 2023-03-06T23:15:00Z | 2024-11-25T22:26:00.352650Z |
| pysec-2023-209 |
9.8 (3.1)
|
A vulnerability, which was classified as critical, has been found in json-logic-js 2.0.0.… | json-logic | 2023-03-05T19:15:00+00:00 | 2023-10-20T16:31:18.877419+00:00 |
| pysec-2023-54 |
|
vantage6 is a privacy preserving federated learning infrastructure for secure insight exc… | vantage6 | 2023-03-04T00:15:00Z | 2023-05-04T03:49:48.653810Z |
| pysec-2023-53 |
|
vantage6 is a privacy preserving federated learning infrastructure for secure insight exc… | vantage6 | 2023-03-01T21:15:00Z | 2023-05-04T03:49:48.592158Z |
| pysec-2023-52 |
|
vantage6 is a privacy preserving federated learning infrastructure for secure insight exc… | vantage6 | 2023-03-01T17:15:00Z | 2023-05-04T03:49:48.490711Z |
| pysec-2023-15 |
|
GeoNode is an open source platform that facilitates the creation, sharing, and collaborat… | geonode | 2023-02-27T21:15:00Z | 2023-05-04T03:49:45.721412Z |
| pysec-2023-16 |
|
Gradio is an open-source Python library to build machine learning and data science demos … | gradio | 2023-02-23T22:15:00Z | 2023-05-04T03:49:45.858658Z |
| pysec-2023-24 |
|
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was al… | markdown-it-py | 2023-02-23T00:15:00Z | 2023-05-04T03:49:46.302314Z |
| pysec-2023-23 |
|
Denial of service could be caused to the command line interface of markdown-it-py, before… | markdown-it-py | 2023-02-22T23:15:00Z | 2023-05-04T03:49:46.254022Z |
| pysec-2023-33 |
|
Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5. | modoboa | 2023-02-22T09:15:00Z | 2023-05-04T03:49:46.836234Z |
| pysec-2023-37 |
|
Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nauto… | nautobot | 2023-02-21T21:15:00Z | 2023-05-04T03:49:47.044688Z |
| pysec-2023-10 |
|
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripti… | changedetection-io | 2023-02-17T22:15:00Z | 2023-05-04T03:49:45.088821Z |
| pysec-2023-47 |
|
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute a… | salt | 2023-02-17T18:15:00Z | 2023-05-04T03:49:48.043803Z |
| pysec-2023-289 |
8.8 (3.1)
|
An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3,… | plone | 2023-02-17T18:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2023-49 |
|
Starlite is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 1… | starlite | 2023-02-15T15:15:00Z | 2023-05-04T03:49:48.263994Z |
| pysec-2023-13 |
|
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 … | django | 2023-02-15T01:15:00Z | 2023-05-04T03:49:45.612158Z |
| pysec-2023-58 |
|
Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeu… | werkzeug | 2023-02-14T20:15:00Z | 2023-05-04T03:49:48.987713Z |
| pysec-2023-57 |
|
Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" c… | werkzeug | 2023-02-14T20:15:00Z | 2023-05-04T03:49:48.931463Z |
| pysec-2023-17 |
|
IPython (Interactive Python) is a command shell for interactive computing in multiple pro… | ipython | 2023-02-10T20:15:00Z | 2023-05-04T03:49:45.922825Z |
| pysec-2023-32 |
|
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-02-10T19:15:00Z | 2023-05-04T03:49:46.777940Z |
| pysec-2023-276 |
5.4 (3.1)
|
An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation wa… | mayan-edms | 2023-02-07T22:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2023-11 |
|
cryptography is a package designed to expose cryptographic primitives and recipes to Pyth… | cryptography | 2023-02-07T21:15:00Z | 2023-05-04T03:49:45.221186Z |
| pysec-2023-208 |
4.3 (3.1)
|
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been r… | eve-srp | 2023-02-06T17:15:00+00:00 | 2023-10-20T16:31:18.806057+00:00 |
| pysec-2023-39 |
|
OpenZeppelin Contracts for Cairo is a library for secure smart contract development writt… | openzeppelin-cairo-contracts | 2023-02-03T20:15:00Z | 2023-05-04T03:49:47.155676Z |
| pysec-2023-12 |
|
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of… | django | 2023-02-01T19:15:00Z | 2023-05-04T03:49:45.437728Z |
| pysec-2023-51 |
|
ubireader_extract_files is vulnerable to path traversal when run against specifically cra… | ubi-reader | 2023-01-31T10:15:00Z | 2023-05-04T03:49:48.432460Z |
| pysec-2023-5 |
|
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This iss… | apache-iotdb | 2023-01-31T10:15:00Z | 2023-05-04T03:49:44.792097Z |
| pysec-2023-6 |
|
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This iss… | apache-iotdb | 2023-01-30T17:15:00Z | 2023-05-04T03:49:44.840128Z |
| pysec-2023-298 |
5.3 (3.1)
|
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restri… | safeurl-python | 2023-01-30T05:15:00Z | 2024-11-25T22:26:07.130924Z |
| pysec-2023-43 |
|
A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. … | psiturk | 2023-01-28T23:15:00Z | 2023-05-04T03:49:47.366068Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-498 | Malicious code in instascan-pro (PyPI) | 2026-01-24T16:15:55Z | 2026-01-24T16:15:55Z |
| mal-2026-515 | Malicious code in overstock-jenkins (npm) | 2026-01-23T21:37:36Z | 2026-02-02T05:56:29Z |
| mal-2026-514 | Malicious code in overstock-health-express (npm) | 2026-01-23T21:00:46Z | 2026-02-02T05:56:29Z |
| mal-2026-497 | Malicious code in test-on-other (npm) | 2026-01-23T18:12:42Z | 2026-01-23T18:12:42Z |
| mal-2026-496 | Malicious code in hemi-btc-staking-actions (npm) | 2026-01-23T18:12:42Z | 2026-02-03T04:04:59Z |
| mal-2026-495 | Malicious code in h-jsencrypt (npm) | 2026-01-23T18:12:42Z | 2026-01-28T17:27:44Z |
| mal-2026-494 | Malicious code in eits (npm) | 2026-01-23T18:12:42Z | 2026-01-28T17:27:43Z |
| mal-2026-493 | Malicious code in oxnoxon (npm) | 2026-01-23T17:23:01Z | 2026-01-28T17:27:46Z |
| mal-2026-492 | Malicious code in tableates (PyPI) | 2026-01-23T13:57:05Z | 2026-01-28T19:13:29Z |
| mal-2026-491 | Malicious code in test-on-other-again (npm) | 2026-01-23T12:02:07Z | 2026-01-23T18:48:56Z |
| mal-2026-490 | Malicious code in tabletes (PyPI) | 2026-01-23T10:19:25Z | 2026-01-28T19:13:29Z |
| mal-2026-489 | Malicious code in rank4222wun (npm) | 2026-01-23T08:25:42Z | 2026-01-28T06:49:15Z |
| mal-2026-488 | Malicious code in ntwsx (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| mal-2026-487 | Malicious code in ntwsc (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| mal-2026-486 | Malicious code in a5xm (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:54Z |
| mal-2026-485 | Malicious code in a4wu (npm) | 2026-01-23T06:32:36Z | 2026-01-23T18:48:54Z |
| mal-2026-484 | Malicious code in translation-note (npm) | 2026-01-23T01:13:12Z | 2026-01-28T08:26:42Z |
| mal-2026-483 | Malicious code in public-site-cms-ui (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-482 | Malicious code in public-site-boostmoney-ui (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-481 | Malicious code in oasis-os-provider-messaging (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-480 | Malicious code in kwp-shared-components-production-system (npm) | 2026-01-23T01:13:12Z | 2026-01-27T08:27:32Z |
| mal-2026-479 | Malicious code in integromat-ui (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-478 | Malicious code in domino-elements (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-477 | Malicious code in bttr-devs (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-476 | Malicious code in @transaction-list/transaction-list-xs (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-475 | Malicious code in @transaction-list/transaction-list-sm (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-474 | Malicious code in @transaction-list/transaction-list-md (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-473 | Malicious code in @transaction-list/transaction-list-lg (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-472 | Malicious code in @landing-platform/data-bridge (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| mal-2026-471 | Malicious code in @acqui-calm-library/acqui-hero-carousel-section (npm) | 2026-01-23T01:13:12Z | 2026-01-23T01:13:12Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2464 | OpenSMTP: Schwachstelle ermöglicht Denial of Service | 2025-11-02T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2463 | Mattermost Server: Mehrere Schwachstellen | 2025-11-02T23:00:00.000+00:00 | 2025-11-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2462 | Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2025-11-02T23:00:00.000+00:00 | 2025-12-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2461 | Mehrere ESET Produkte: Schwachstelle ermöglicht Denial of Service | 2025-11-02T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2460 | SonicWall SMA: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-30T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2459 | Nagios Enterprises Nagios XI: Mehrere Schwachstellen | 2025-10-30T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2458 | IBM Tivoli Monitoring: Mehrere Schwachstellen | 2025-10-30T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2457 | Dell EMC Unity: Mehrere Schwachstellen | 2025-10-30T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2456 | Jabra Direct: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-30T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2455 | Liferay Portal: Mehrere Schwachstellen | 2025-10-30T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2454 | Netgate pfSense (Suricata und Snort): Schwachstelle ermöglicht Codeausführung. | 2025-10-30T23:00:00.000+00:00 | 2025-11-06T23:00:00.000+00:00 |
| wid-sec-w-2025-2453 | Chromium-basierte Browser: Schwachstelle ermöglicht Denial of Service | 2025-10-30T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2452 | IBM InfoSphere Information Server: Schwachstelle ermöglicht Privilegieneskalation | 2025-10-30T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2451 | IBM Sterling Connect:Direct: Schwachstelle ermöglicht Privilegieneskalation | 2025-10-30T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2450 | Linux Kernel: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2449 | GIMP: Schwachstelle ermöglicht Codeausführung | 2025-10-29T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2448 | NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Manipulation von Dateien und Offenlegung von Informationen | 2025-10-29T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2447 | Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-29T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2446 | Liferay Portal und DXP: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-29T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2445 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2444 | Dell Secure Connect Gateway: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2443 | Jenkins Plugins: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2442 | Progress Software MOVEit: Schwachstelle ermöglicht Denial of Service | 2025-10-29T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2441 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-29T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2439 | Dovecot IMAP Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen | 2025-10-28T23:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-2438 | Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-28T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2437 | Mozilla Firefox: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-28T23:00:00.000+00:00 | 2025-10-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2436 | Xwayland und X.Org X11: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-10-28T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2435 | D-LINK Aquila Pro AI R15: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-10-28T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2434 | Mattermost Server: Mehrere Schwachstellen ermöglichen die Umgehung von Sicherheitsmaßnahmen | 2025-10-28T23:00:00.000+00:00 | 2025-11-27T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0356 | Kwetsbaarheid verholpen in Zyxel Access Points en Secure Routers | 2024-09-03T09:45:01.012004Z | 2024-09-03T09:45:01.012004Z |
| ncsc-2024-0355 | Kwetsbaarheden verholpen in Progress WhatsUp Gold | 2024-08-30T13:44:34.239519Z | 2024-09-02T11:51:17.688561Z |
| ncsc-2024-0354 | Kwetsbaarheden verholpen in Progress WS_FTP server | 2024-08-30T13:42:50.517100Z | 2024-08-30T13:42:50.517100Z |
| ncsc-2024-0353 | Kwetsbaarheid verholpen in Sonicwall SonicOS | 2024-08-27T12:45:37.679365Z | 2024-09-10T12:34:18.650826Z |
| ncsc-2024-0352 | Kwetsbaarheden verholpen in Solarwinds Web Helpdesk | 2024-08-22T13:05:56.658579Z | 2024-08-22T13:05:56.658579Z |
| ncsc-2024-0351 | Kwetsbaarheden verholpen in Google Chrome, Chromium & Microsoft Edge | 2024-08-22T11:42:49.629133Z | 2024-08-23T12:59:41.787815Z |
| ncsc-2024-0350 | Kwetsbaarheden verholpen in GitHub Enterprise Server | 2024-08-22T11:40:38.472495Z | 2024-08-22T11:40:38.472495Z |
| ncsc-2024-0349 | Kwetsbaarheid verholpen in Kubernetes | 2024-08-19T11:37:30.925578Z | 2024-08-19T11:37:30.925578Z |
| ncsc-2024-0348 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2024-08-14T12:58:38.046219Z | 2024-08-14T12:58:38.046219Z |
| ncsc-2024-0347 | Kwetsbaarheden verholpen in Adobe Acrobat en Acrobat Reader | 2024-08-14T12:52:29.316273Z | 2024-08-14T12:52:29.316273Z |
| ncsc-2024-0346 | Kwetsbaarheden verholpen in Adobe InDesign | 2024-08-14T12:47:08.240249Z | 2024-08-14T12:47:08.240249Z |
| ncsc-2024-0345 | Kwetsbaarheid verholpen in Adobe Photoshop | 2024-08-14T12:44:49.541083Z | 2024-08-14T12:44:49.541083Z |
| ncsc-2024-0344 | Kwetsbaarheden verholpen in Adobe Dimension | 2024-08-14T12:42:00.097800Z | 2024-08-14T12:42:00.097800Z |
| ncsc-2024-0343 | Kwetsbaarheden verholpen in Adobe Illustrator | 2024-08-14T12:38:58.918490Z | 2024-08-14T12:38:58.918490Z |
| ncsc-2024-0342 | Kwetsbaarheden verholpen in Ivanti Avalanche | 2024-08-14T09:56:40.653912Z | 2024-08-14T09:56:40.653912Z |
| ncsc-2024-0341 | Kwetsbaarheden verholpen in Ivanti Neurons for ITSM | 2024-08-14T09:54:26.701111Z | 2024-08-14T09:54:26.701111Z |
| ncsc-2024-0340 | Kwetsbaarheid verholpen in Ivanti Virtual Traffic Manager | 2024-08-14T09:48:46.175634Z | 2024-09-03T11:19:00.763993Z |
| ncsc-2024-0339 | Kwetsbaarheden verholpen in Microsoft Mariner | 2024-08-13T18:23:22.271316Z | 2024-08-13T18:23:22.271316Z |
| ncsc-2024-0338 | Kwetsbaarheden verholpen in Microsoft Dynamics | 2024-08-13T18:22:21.160613Z | 2024-08-13T18:22:21.160613Z |
| ncsc-2024-0337 | Kwetsbaarheden verholpen in Microsoft Office | 2024-08-13T18:21:45.385690Z | 2024-08-13T18:21:45.385690Z |
| ncsc-2024-0336 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2024-08-13T18:21:06.220640Z | 2024-08-13T18:21:06.220640Z |
| ncsc-2024-0335 | Kwetsbaarheden verholpen in Microsoft Azure componenten | 2024-08-13T18:20:23.647785Z | 2024-08-13T18:20:23.647785Z |
| ncsc-2024-0334 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-08-13T18:19:27.728322Z | 2024-08-27T07:59:08.391850Z |
| ncsc-2024-0333 | Kwetsbaarheden verholpen in SAP producten | 2024-08-13T13:47:02.764070Z | 2024-08-13T13:47:02.764070Z |
| ncsc-2024-0332 | Kwetsbaarheden verholpen in Siemens producten | 2024-08-13T09:21:28.381575Z | 2024-08-13T09:21:28.381575Z |
| ncsc-2024-0331 | Kwetsbaarheden verholpen in Zabbix | 2024-08-12T10:34:15.273912Z | 2024-08-12T10:34:15.273912Z |
| ncsc-2024-0330 | Kwetsbaarheid verholpen in Asterisk | 2024-08-12T10:31:33.788930Z | 2024-08-12T10:31:33.788930Z |
| ncsc-2024-0329 | Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition | 2024-08-12T08:24:49.808846Z | 2024-08-12T08:24:49.808846Z |
| ncsc-2024-0328 | Kwetsbaarheden verholpen in IBM InfoSphere | 2024-08-12T08:22:38.701674Z | 2024-08-12T08:22:38.701674Z |
| ncsc-2024-0327 | Kwetsbaarheden verholpen in Cisco Small Business IP Phones | 2024-08-08T08:01:30.827296Z | 2024-08-08T08:01:30.827296Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:0698 | Red Hat Security Advisory: mariadb-devel:10.3 security update | 2026-01-15T11:32:19+00:00 | 2026-01-15T16:01:35+00:00 |
| rhsa-2026:0697 | Red Hat Security Advisory: gnupg2 security update | 2026-01-15T11:30:44+00:00 | 2026-02-11T15:13:13+00:00 |
| rhsa-2026:0685 | Red Hat Security Advisory: Red Hat Update Infrastructure 5 security update | 2026-01-15T10:02:39+00:00 | 2026-02-12T09:17:28+00:00 |
| rhsa-2026:0671 | Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.4 | 2026-01-15T08:34:14+00:00 | 2026-02-17T08:01:02+00:00 |
| rhsa-2026:0667 | Red Hat Security Advisory: firefox security update | 2026-01-15T08:26:09+00:00 | 2026-02-09T13:25:59+00:00 |
| rhsa-2026:0668 | Red Hat Security Advisory: net-snmp security update | 2026-01-15T08:16:08+00:00 | 2026-01-21T15:54:24+00:00 |
| rhsa-2026:0316 | Red Hat Security Advisory: OpenShift Container Platform 4.12.84 bug fix and security update | 2026-01-15T05:12:28+00:00 | 2026-02-17T12:41:07+00:00 |
| rhsa-2026:0643 | Red Hat Security Advisory: kernel security update | 2026-01-15T01:11:08+00:00 | 2026-02-16T19:39:01+00:00 |
| rhsa-2026:0315 | Red Hat Security Advisory: OpenShift Container Platform 4.12.84 packages and security update | 2026-01-15T00:25:18+00:00 | 2026-02-17T12:41:07+00:00 |
| rhsa-2026:0338 | Red Hat Security Advisory: OpenShift Container Platform 4.18.31 bug fix and security update | 2026-01-14T22:29:24+00:00 | 2026-02-17T08:00:52+00:00 |
| rhsa-2026:0629 | Red Hat Security Advisory: satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview | 2026-01-14T19:31:51+00:00 | 2026-02-05T22:04:25+00:00 |
| rhsa-2026:0627 | Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update | 2026-01-14T18:37:52+00:00 | 2026-02-17T12:41:10+00:00 |
| rhsa-2026:0606 | Red Hat Security Advisory: vsftpd security update | 2026-01-14T15:53:51+00:00 | 2026-01-26T14:00:30+00:00 |
| rhsa-2026:0605 | Red Hat Security Advisory: vsftpd security update | 2026-01-14T15:34:31+00:00 | 2026-01-26T14:00:28+00:00 |
| rhsa-2026:0608 | Red Hat Security Advisory: vsftpd security update | 2026-01-14T15:23:47+00:00 | 2026-01-26T14:00:30+00:00 |
| rhsa-2026:0602 | Red Hat Security Advisory: openssl security update | 2026-01-14T14:46:26+00:00 | 2026-02-04T01:03:32+00:00 |
| rhsa-2026:0596 | Red Hat Security Advisory: cups security update | 2026-01-14T14:04:52+00:00 | 2026-01-19T15:57:36+00:00 |
| rhsa-2026:0420 | Red Hat Security Advisory: OpenShift Container Platform 4.20.10 bug fix and security update | 2026-01-14T13:25:27+00:00 | 2026-02-05T19:45:31+00:00 |
| rhsa-2026:0594 | Red Hat Security Advisory: libpq security update | 2026-01-14T12:56:36+00:00 | 2026-02-02T21:27:30+00:00 |
| rhsa-2026:0576 | Red Hat Security Advisory: kernel security update | 2026-01-14T09:53:46+00:00 | 2026-02-12T19:26:01+00:00 |
| rhsa-2026:0545 | Red Hat Security Advisory: podman security update | 2026-01-14T04:08:21+00:00 | 2026-02-17T07:22:49+00:00 |
| rhsa-2026:0535 | Red Hat Security Advisory: kernel security update | 2026-01-14T00:36:59+00:00 | 2026-02-12T19:25:59+00:00 |
| rhsa-2026:0536 | Red Hat Security Advisory: kernel security update | 2026-01-14T00:29:00+00:00 | 2026-02-16T19:38:51+00:00 |
| rhsa-2026:0532 | Red Hat Security Advisory: kernel security update | 2026-01-14T00:26:00+00:00 | 2026-02-11T18:55:15+00:00 |
| rhsa-2026:0533 | Red Hat Security Advisory: kernel security update | 2026-01-14T00:17:49+00:00 | 2026-02-16T19:39:29+00:00 |
| rhsa-2026:0534 | Red Hat Security Advisory: kernel-rt security update | 2026-01-14T00:13:14+00:00 | 2026-02-12T19:25:58+00:00 |
| rhsa-2026:0537 | Red Hat Security Advisory: kernel-rt security update | 2026-01-14T00:10:39+00:00 | 2026-02-12T19:26:05+00:00 |
| rhsa-2026:0531 | Red Hat Security Advisory: Red Hat Developer Hub 1.8.2 release. | 2026-01-13T21:28:08+00:00 | 2026-02-17T08:01:00+00:00 |
| rhsa-2026:0530 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.12 | 2026-01-13T20:48:49+00:00 | 2026-02-17T08:01:00+00:00 |
| rhsa-2026:0524 | Red Hat Security Advisory: postgresql:15 security update | 2026-01-13T17:16:38+00:00 | 2026-02-02T21:27:28+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-347-07 | Siemens Solid Edge SE2024 | 2024-12-10T00:00:00.000000Z | 2024-12-10T00:00:00.000000Z |
| icsa-24-347-06 | Siemens Simcenter Femap | 2024-12-10T00:00:00.000000Z | 2024-12-10T00:00:00.000000Z |
| icsa-24-347-05 | Siemens Siemens Engineering Platforms | 2024-12-10T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-347-04 | Siemens Parasolid | 2024-12-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-347-03 | Siemens RUGGEDCOM ROX II | 2024-12-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-347-02 | Siemens Engineering Platforms | 2024-12-10T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-24-347-01 | Siemens CPCI85 Central Processing/Communication | 2024-12-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-340-02 | Planet Technology Planet WGS-804HPT | 2024-12-05T07:00:00.000000Z | 2024-12-05T07:00:00.000000Z |
| icsa-24-340-01 | AutomationDirect C-More EA9 Programming Software | 2024-12-05T07:00:00.000000Z | 2024-12-05T07:00:00.000000Z |
| icsa-25-182-03 | FESTO CODESYS | 2024-12-03T11:00:00.000000Z | 2024-12-03T11:00:00.000000Z |
| icsa-24-338-06 | Fuji Electric Tellus Lite V-Simulator (Update A) | 2024-12-03T07:00:00.000000Z | 2025-07-29T06:00:00.000000Z |
| icsa-24-338-05 | Fuji Electric Monitouch V-SFT (Update A) | 2024-12-03T07:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-338-04 | Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update A) | 2024-12-03T07:00:00.000000Z | 2026-01-08T07:00:00.000000Z |
| icsa-24-338-03 | Open Automation Software | 2024-12-03T07:00:00.000000Z | 2024-12-03T07:00:00.000000Z |
| icsa-24-338-01 | Ruijie Reyee OS (Update A) | 2024-12-03T07:00:00.000000Z | 2024-12-10T07:00:00.000000Z |
| va-24-331-01 | Valor Apps Easy Folder Listing Pro Joomla! extension deserialization vulnerability | 2024-11-26T18:15:49Z | 2024-11-26T18:15:49Z |
| icsa-24-338-02 | Siemens RUGGEDCOM APE1808 | 2024-11-22T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-24-326-07 | mySCADA myPRO Manager | 2024-11-21T07:00:00.000000Z | 2024-11-21T07:00:00.000000Z |
| icsa-24-326-02 | OSCAT Basic Library | 2024-11-21T07:00:00.000000Z | 2024-11-21T07:00:00.000000Z |
| icsa-24-326-01 | Automated Logic WebCTRL Premium Server | 2024-11-21T07:00:00.000000Z | 2024-11-21T07:00:00.000000Z |
| va-24-325-01 | Versa Networks Versa Director insecure default PostgreSQL configuration | 2024-11-20T18:33:57Z | 2024-11-20T18:33:57Z |
| icsa-24-324-01 | Mitsubishi Electric MELSEC iQ-F Series | 2024-11-19T07:00:00.000000Z | 2024-11-19T07:00:00.000000Z |
| icsma-24-319-01 | Baxter Life2000 Ventilation System | 2024-11-14T07:00:00.000000Z | 2024-11-14T07:00:00.000000Z |
| icsa-24-319-17 | 2N Access Commander (Update A) | 2024-11-14T07:00:00.000000Z | 2025-02-11T07:00:00.000000Z |
| icsa-24-319-16 | Hitachi Energy MSM | 2024-11-14T07:00:00.000000Z | 2024-11-14T07:00:00.000000Z |
| icsa-24-319-15 | Rockwell Automation Arena Input Analyzer | 2024-11-14T07:00:00.000000Z | 2024-11-14T07:00:00.000000Z |
| icsa-24-319-14 | Rockwell Automation FactoryTalk Updater (Update A) | 2024-11-14T07:00:00.000000Z | 2024-11-18T07:00:00.000000Z |
| icsa-24-319-13 | Rockwell Automation Verve Reporting (Update A) | 2024-11-14T07:00:00.000000Z | 2024-11-18T07:00:00.000000Z |
| va-24-317-01 | Ivanti Connect Secure and Ivanti Policy Secure Multiple Vulnerabilities | 2024-11-13T20:32:00Z | 2024-11-13T20:32:00Z |
| icsa-24-317-03 | Rockwell Automation FactoryTalk View ME | 2024-11-12T07:00:00.000000Z | 2024-11-12T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cucm-sql-rppczr8n | Cisco Unified Communications Manager SQL Injection Vulnerability | 2023-01-18T16:00:00+00:00 | 2023-01-18T16:00:00+00:00 |
| cisco-sa-sbr042-multi-vuln-ej76pke5 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2025-03-07T17:33:55+00:00 |
| cisco-sa-sb-rv-rcedos-7hjp74jd | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution and Denial of Service Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-12T16:07:37+00:00 |
| cisco-sa-rv-cmd-exe-n47kjqle | Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-roomos-dkjgfgrk | Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2023-03-07T14:21:36+00:00 |
| cisco-sa-nso-path-trvsl-zjbemkzg | Cisco Network Services Orchestrator Path Traversal Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-02-03T17:57:30+00:00 |
| cisco-sa-lldp-memlk-mcoecpt | Cisco Webex Room Phone and Cisco Webex Share Link Layer Discovery Protocol Memory Leak Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-ip-phone-auth-bypass-psqxzrpr | Cisco IP Phone 7800 and 8800 Series Web Management Interface Authentication Bypass Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-ind-fzyvjjtg | Cisco Industrial Network Director Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-cxagent-goq9qjqz | Cisco CX Cloud Agent Privilege Escalation Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-cuis-xss-omm8jybx | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-05-30T14:22:18+00:00 |
| cisco-sa-bw-xss-ezqdxqg4 | Cisco BroadWorks Application Delivery Platform, Application Server, and Xtended Services Platform Cross-Site Scripting Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-bw-dos-hpkeyzp | Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Denial of Service Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-02-06T18:20:29+00:00 |
| cisco-sa-ipp-oobwrite-8cmf5r7u | Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol Stack Overflow Vulnerability | 2022-12-08T16:00:00+00:00 | 2023-04-27T21:07:18+00:00 |
| cisco-sa-ise-7q4tnyux | Cisco Identity Services Engine Vulnerabilities | 2022-11-16T16:00:00+00:00 | 2023-03-31T20:41:42+00:00 |
| cisco-sa-ssl-client-dos-ccrqpka | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-snort-smb-3nfhjtr | Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-30T21:51:24+00:00 |
| cisco-sa-fw3100-secure-boot-5m8muh26 | Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftdsnort3sip-dos-a4chearc | Cisco Firepower Threat Defense Software SIP and Snort 3 Detection Engine Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftd-tls-bb-rcgtmy2 | Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftd-mgmt-privesc-7gqr2th | Cisco Firepower Threat Defense Software Privilege Escalation Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftd-gre-dos-hmedhqpm | Cisco Firepower Threat Defense Software Generic Routing Encapsulation Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftd-fxos-cmd-inj-q9blnsrk | Cisco Firepower Threat Defense Software and Cisco FXOS Software Command Injection Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmcsfr-snmp-access-6gqgtj4s | Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-xxe-mzpc4byd | Cisco Firepower Management Center Software XML External Entity Injection Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-xss-latzyzxs | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-info-disc-ughnrrhp | Cisco Firepower Management Center Software Information Disclosure Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-dos-oweunwjn | Cisco Firepower Management Center and Firepower Threat Defense Software SSH Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-z3b5my35 | Cisco Firepower Management Center Software Command Injection Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-qsqbnm6x | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-68193 | drm/xe/guc: Add devm release action to safely tear down CT | 2025-12-02T00:00:00.000Z | 2026-01-08T14:44:48.000Z |
| msrc_cve-2025-68190 | drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() | 2025-12-02T00:00:00.000Z | 2026-02-18T14:19:01.000Z |
| msrc_cve-2025-68188 | tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() | 2025-12-02T00:00:00.000Z | 2026-02-19T01:02:00.000Z |
| msrc_cve-2025-68175 | media: nxp: imx8-isi: Fix streaming cleanup on release | 2025-12-02T00:00:00.000Z | 2026-01-13T01:36:58.000Z |
| msrc_cve-2025-68174 | amd/amdkfd: enhance kfd process check in switch partition | 2025-12-02T00:00:00.000Z | 2026-02-18T14:25:01.000Z |
| msrc_cve-2025-68161 | Apache Log4j Core: Missing TLS hostname verification in Socket appender | 2025-12-02T00:00:00.000Z | 2026-01-13T01:40:48.000Z |
| msrc_cve-2025-68156 | Expr has Denial of Service via Unbounded Recursion in Builtin Functions | 2025-12-02T00:00:00.000Z | 2026-01-08T01:39:14.000Z |
| msrc_cve-2025-68146 | filelock has TOCTOU race condition that allows symlink attacks during lock file creation | 2025-12-02T00:00:00.000Z | 2026-01-03T01:41:03.000Z |
| msrc_cve-2025-68114 | Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow | 2025-12-02T00:00:00.000Z | 2026-02-18T02:02:42.000Z |
| msrc_cve-2025-67897 | In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet. | 2025-12-02T00:00:00.000Z | 2026-01-20T14:38:32.000Z |
| msrc_cve-2025-67873 | Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow | 2025-12-02T00:00:00.000Z | 2026-02-18T15:05:33.000Z |
| msrc_cve-2025-66476 | Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability | 2025-12-02T00:00:00.000Z | 2025-12-09T01:37:47.000Z |
| msrc_cve-2025-66471 | urllib3 Streaming API improperly handles highly compressed data | 2025-12-02T00:00:00.000Z | 2026-02-18T14:08:15.000Z |
| msrc_cve-2025-66418 | urllib3 allows an unbounded number of links in the decompression chain | 2025-12-02T00:00:00.000Z | 2026-02-18T14:07:18.000Z |
| msrc_cve-2025-66293 | LIBPNG has an out-of-bounds read in png_image_read_composite | 2025-12-02T00:00:00.000Z | 2026-01-08T01:37:57.000Z |
| msrc_cve-2025-66200 | Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | 2025-12-02T00:00:00.000Z | 2025-12-20T14:35:45.000Z |
| msrc_cve-2025-65637 | A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. | 2025-12-02T00:00:00.000Z | 2026-02-26T14:35:34.000Z |
| msrc_cve-2025-65082 | Apache HTTP Server: CGI environment variable override | 2025-12-02T00:00:00.000Z | 2025-12-20T14:35:39.000Z |
| msrc_cve-2025-62408 | c-ares has a Use After Free vulnerability when connection is cleaned up after error | 2025-12-02T00:00:00.000Z | 2026-01-08T14:43:29.000Z |
| msrc_cve-2025-61729 | Excessive resource consumption when printing error string for host certificate validation in crypto/x509 | 2025-12-02T00:00:00.000Z | 2026-02-21T04:15:18.000Z |
| msrc_cve-2025-61727 | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 | 2025-12-02T00:00:00.000Z | 2026-02-21T03:31:31.000Z |
| msrc_cve-2025-61594 | URI Credential Leakage Bypass over CVE-2025-27221 | 2025-12-02T00:00:00.000Z | 2026-02-18T02:50:06.000Z |
| msrc_cve-2025-59775 | Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF | 2025-12-02T00:00:00.000Z | 2025-12-08T14:37:51.000Z |
| msrc_cve-2025-59529 | simple protocol server ignores accepts unlimited connections and logs failures without limit | 2025-12-02T00:00:00.000Z | 2026-02-18T02:00:05.000Z |
| msrc_cve-2025-58098 | Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | 2025-12-02T00:00:00.000Z | 2025-12-20T14:35:52.000Z |
| msrc_cve-2025-55753 | Apache HTTP Server: mod_md (ACME), unintended retry intervals | 2025-12-02T00:00:00.000Z | 2025-12-20T14:35:58.000Z |
| msrc_cve-2025-48637 | In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | 2025-12-02T00:00:00.000Z | 2026-02-21T03:39:48.000Z |
| msrc_cve-2025-40362 | ceph: fix multifs mds auth caps issue | 2025-12-02T00:00:00.000Z | 2025-12-17T01:02:26.000Z |
| msrc_cve-2025-40355 | sysfs: check visibility before changing group attribute ownership | 2025-12-02T00:00:00.000Z | 2026-02-18T14:25:53.000Z |
| msrc_cve-2025-40354 | drm/amd/display: increase max link count and fix link->enc NULL pointer access | 2025-12-02T00:00:00.000Z | 2026-01-13T01:36:14.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201210-0155 | Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS … | 2025-12-22T22:02:10.798000Z |
| var-200102-0027 | CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of … | 2025-12-22T22:01:40.319000Z |
| var-200608-0035 | Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attack… | 2025-12-22T22:01:03.497000Z |
| var-201108-0076 | Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … | 2025-12-22T22:00:40.931000Z |
| var-201002-0694 | The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on th… | 2025-12-22T22:00:40.403000Z |
| var-202108-1249 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed … | 2025-12-22T22:00:05.518000Z |
| var-201910-1646 | By design, BIND is intended to limit the number of TCP clients that can be connected at a… | 2025-12-22T22:00:03.734000Z |
| var-200808-0011 | Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when … | 2025-12-22T22:00:03.392000Z |
| var-201602-0004 | Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the… | 2025-12-22T22:00:02.674000Z |
| var-201908-0260 | Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, poten… | 2025-12-22T21:59:20.267000Z |
| var-201812-0273 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers … | 2025-12-22T21:59:17.312000Z |
| var-201903-0418 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2025-12-22T21:59:17.243000Z |
| var-201210-0133 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T21:58:47.985000Z |
| var-201202-0206 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T21:58:47.580000Z |
| var-201408-0082 | Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.… | 2025-12-22T21:58:47.245000Z |
| var-201007-0948 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 thro… | 2025-12-22T21:58:46.566000Z |
| var-201912-0627 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T21:58:43.906000Z |
| var-201306-0147 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T21:58:32.387000Z |
| var-201108-0183 | Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … | 2025-12-22T21:58:30.158000Z |
| var-201707-0592 | Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre att… | 2025-12-22T21:58:29.222000Z |
| var-201912-0597 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T21:58:29.050000Z |
| var-201912-1044 | xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak… | 2025-12-22T21:58:28.902000Z |
| var-202112-1782 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not pro… | 2025-12-22T21:58:28.588000Z |
| var-201806-1445 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2025-12-22T21:58:28.438000Z |
| var-201711-0472 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2025-12-22T21:58:26.797000Z |
| var-201212-0268 | libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash… | 2025-12-22T21:58:21.038000Z |
| var-201404-0288 | Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Str… | 2025-12-22T21:58:16.294000Z |
| var-200708-0604 | The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and late… | 2025-12-22T21:58:13.910000Z |
| var-201010-0168 | Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache… | 2025-12-22T21:58:08.441000Z |
| var-201912-0617 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T21:57:36.927000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-001400 | CONPROSYS HMI System(CHS) vulnerable to SQL injection | 2023-04-03T16:19+09:00 | 2023-04-03T16:19+09:00 |
| jvndb-2023-000030 | HAProxy vulnerable to HTTP request/response smuggling | 2023-03-31T15:54+09:00 | 2024-06-04T16:17+09:00 |
| jvndb-2023-000029 | Multiple vulnerabilities in Seiko Solutions SkyBridge MB-A100/A110/A200/A130 SkySpider MB-R210 | 2023-03-31T15:54+09:00 | 2024-05-27T17:08+09:00 |
| jvndb-2023-000028 | baserCMS vulnerable to arbitrary file uploads | 2023-03-27T13:39+09:00 | 2024-06-06T17:31+09:00 |
| jvndb-2023-000027 | ELECOM WAB-MAT registers its windows service executable with an unquoted file path | 2023-03-24T14:35+09:00 | 2024-06-03T17:36+09:00 |
| jvndb-2023-001320 | Multiple vulnerabilities in Contec CONPROSYS IoT Gateway products | 2023-03-22T13:41+09:00 | 2024-06-04T17:00+09:00 |
| jvndb-2023-000025 | TP-Link T2600G-28SQ uses vulnerable SSH host keys | 2023-03-17T12:27+09:00 | 2024-06-04T16:58+09:00 |
| jvndb-2023-000024 | Android App "Wolt Delivery: Food and more" uses a hard-coded API key for an external service | 2023-03-13T12:28+09:00 | 2024-06-03T17:15+09:00 |
| jvndb-2023-001308 | Multiple vulnerabilities in Buffalo network devices | 2023-03-08T15:12+09:00 | 2024-06-04T16:42+09:00 |
| jvndb-2023-000022 | Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config | 2023-03-08T15:09+09:00 | 2024-06-03T17:36+09:00 |
| jvndb-2023-001304 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2023-03-06T15:31+09:00 | 2024-06-07T16:39+09:00 |
| jvndb-2023-000023 | Multiple vulnerabilities in PostgreSQL extension module pg_ivm | 2023-03-06T15:22+09:00 | 2024-06-10T16:41+09:00 |
| jvndb-2023-001291 | Multiple vulnerabilities in Trend Micro Maximum Security | 2023-03-03T11:10+09:00 | 2024-06-13T17:06+09:00 |
| jvndb-2023-001292 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2023-03-02T17:33+09:00 | 2024-06-07T16:59+09:00 |
| jvndb-2023-001269 | File and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center | 2023-03-01T16:59+09:00 | 2024-06-11T16:42+09:00 |
| jvndb-2023-000021 | Multiple vulnerabilities in SS1 and Rakuraku PC Cloud | 2023-03-01T15:57+09:00 | 2024-06-06T18:02+09:00 |
| jvndb-2023-000019 | Multiple cross-site scripting vulnerabilities in EC-CUBE | 2023-02-28T16:38+09:00 | 2024-06-10T17:28+09:00 |
| jvndb-2023-000020 | web2py development tool vulnerable to open redirect | 2023-02-28T15:00+09:00 | 2024-06-07T16:31+09:00 |
| jvndb-2023-000018 | Multiple cross-site scripting vulnerabilities in SHIRASAGI | 2023-02-22T15:16+09:00 | 2024-06-10T17:18+09:00 |
| jvndb-2023-000017 | Improper restriction of XML external entity reference (XXE) vulnerability in tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools | 2023-02-14T17:00+09:00 | 2024-06-12T11:15+09:00 |
| jvndb-2023-000016 | The installers of ELECOM Camera Assistant and QuickFileDealer may insecurely load Dynamic Link Libraries | 2023-02-14T17:00+09:00 | 2023-02-14T17:00+09:00 |
| jvndb-2023-000015 | Multiple vulnerabilities in PLANEX COMMUNICATIONS Network Camera CS-WMV02G | 2023-02-13T14:48+09:00 | 2024-06-12T17:03+09:00 |
| jvndb-2023-001215 | Zuken Elmic KASAGO uses insufficient random values for TCP Initial Sequence Numbers | 2023-02-13T14:18+09:00 | 2024-06-14T15:45+09:00 |
| jvndb-2023-000014 | NEC PC Settings Tool vulnerable to missing authentication for critical function | 2023-02-10T14:43+09:00 | 2024-06-10T18:13+09:00 |
| jvndb-2023-001212 | Multiple vulnerabilities in JTEKT ELECTRONICS Screen Creator Advance 2 | 2023-02-08T12:46+09:00 | 2024-06-10T17:25+09:00 |
| jvndb-2023-000013 | Ichiran App vulnerable to improper server certificate verification | 2023-02-06T14:31+09:00 | 2024-06-12T14:25+09:00 |
| jvndb-2023-000012 | Vulnerability in Driver Distributor where passwords are stored in a recoverable format | 2023-01-31T14:14+09:00 | 2024-06-12T11:07+09:00 |
| jvndb-2023-000011 | SUSHIRO App for Android outputs sensitive information to the log file | 2023-01-31T14:10+09:00 | 2024-06-11T17:35+09:00 |
| jvndb-2023-001110 | Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Motion Pro | 2023-01-25T14:28+09:00 | 2023-01-25T14:28+09:00 |
| jvndb-2023-000010 | pgAdmin 4 vulnerable to directory traversal | 2023-01-24T16:00+09:00 | 2024-06-05T16:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:21197-1 | Security update for binutils | 2025-12-12T15:58:29Z | 2025-12-12T15:58:29Z |
| suse-su-2025:21195-1 | Security update for binutils | 2025-12-12T15:58:29Z | 2025-12-12T15:58:29Z |
| suse-su-2025:4389-1 | Security update for python | 2025-12-12T13:49:14Z | 2025-12-12T13:49:14Z |
| suse-su-2025:4388-1 | Security update for postgresql16 | 2025-12-12T13:36:29Z | 2025-12-12T13:36:29Z |
| suse-su-2025:4387-1 | Security update for postgresql16 | 2025-12-12T13:35:46Z | 2025-12-12T13:35:46Z |
| suse-su-2025:4386-1 | Security update for postgresql16 | 2025-12-12T13:34:19Z | 2025-12-12T13:34:19Z |
| suse-su-2025:4384-1 | Security update for python-Django | 2025-12-12T13:28:27Z | 2025-12-12T13:28:27Z |
| suse-su-2025:4383-1 | Security update for libpng12 | 2025-12-12T13:13:47Z | 2025-12-12T13:13:47Z |
| suse-su-2025:4382-1 | Security update for gegl | 2025-12-12T13:06:54Z | 2025-12-12T13:06:54Z |
| suse-su-2025:4381-1 | Security update for kubernetes-client | 2025-12-12T10:19:11Z | 2025-12-12T10:19:11Z |
| suse-su-2025:4380-1 | Security update for kubernetes-client | 2025-12-12T10:18:54Z | 2025-12-12T10:18:54Z |
| suse-su-2025:21194-1 | Security update for keylime | 2025-12-12T09:45:03Z | 2025-12-12T09:45:03Z |
| suse-su-2025:4373-1 | Security update for container-suseconnect | 2025-12-12T09:05:38Z | 2025-12-12T09:05:38Z |
| suse-su-2025:21193-1 | Security update for go1.24 | 2025-12-12T07:45:36Z | 2025-12-12T07:45:36Z |
| suse-su-2025:21192-1 | Security update for go1.25 | 2025-12-12T07:24:50Z | 2025-12-12T07:24:50Z |
| suse-su-2025:4372-1 | Security update for postgresql15 | 2025-12-11T19:06:38Z | 2025-12-11T19:06:38Z |
| suse-su-2025:4371-1 | Security update for postgresql14 | 2025-12-11T19:04:45Z | 2025-12-11T19:04:45Z |
| suse-su-2025:4370-1 | Security update for postgresql14 | 2025-12-11T19:03:37Z | 2025-12-11T19:03:37Z |
| suse-su-2025:4368-1 | Security update for python3 | 2025-12-11T15:12:31Z | 2025-12-11T15:12:31Z |
| suse-su-2025:4364-1 | Security update for postgresql17, postgresql18 | 2025-12-11T10:12:26Z | 2025-12-11T10:12:26Z |
| suse-su-2025:4363-1 | Security update for postgresql17, postgresql18 | 2025-12-11T10:10:24Z | 2025-12-11T10:10:24Z |
| suse-su-2025:4353-1 | Security update for fontforge | 2025-12-10T18:03:31Z | 2025-12-10T18:03:31Z |
| suse-su-2025:4352-1 | Security update for python310 | 2025-12-10T17:18:21Z | 2025-12-10T17:18:21Z |
| suse-su-2025:4347-1 | Security update for glib2 | 2025-12-10T13:02:34Z | 2025-12-10T13:02:34Z |
| suse-su-2025:4346-1 | Security update for gnutls | 2025-12-10T10:39:49Z | 2025-12-10T10:39:49Z |
| suse-su-2025:1004-2 | Security update for python-Jinja2 | 2025-12-10T10:34:31Z | 2025-12-10T10:34:31Z |
| suse-su-2025:4337-1 | Security update for go1.24 | 2025-12-09T23:51:31Z | 2025-12-09T23:51:31Z |
| suse-su-2025:4336-1 | Security update for go1.25 | 2025-12-09T23:50:12Z | 2025-12-09T23:50:12Z |
| suse-su-2025:4335-1 | Security update for gegl | 2025-12-09T18:19:44Z | 2025-12-09T18:19:44Z |
| suse-su-2025:4334-1 | Security update for postgresql13 | 2025-12-09T18:17:22Z | 2025-12-09T18:17:22Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15738-1 | MozillaThunderbird-140.5.0-1.1 on GA media | 2025-11-17T00:00:00Z | 2025-11-17T00:00:00Z |
| opensuse-su-2025:15737-1 | teleport-17.7.10-1.1 on GA media | 2025-11-14T00:00:00Z | 2025-11-14T00:00:00Z |
| opensuse-su-2025:15736-1 | chromedriver-142.0.7444.162-1.1 on GA media | 2025-11-14T00:00:00Z | 2025-11-14T00:00:00Z |
| opensuse-su-2025:15735-1 | MozillaFirefox-145.0-1.1 on GA media | 2025-11-14T00:00:00Z | 2025-11-14T00:00:00Z |
| opensuse-su-2025:15734-1 | starboard-0.15.28-1.1 on GA media | 2025-11-13T00:00:00Z | 2025-11-13T00:00:00Z |
| opensuse-su-2025:15733-1 | weblate-5.14.3-1.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15732-1 | python-Scrapy-doc-2.13.3-2.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15731-1 | python311-Brotli-1.2.0-1.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15730-1 | helm-3.19.1-1.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15729-1 | go-sendxmpp-0.15.1-1.1 on GA media | 2025-11-12T00:00:00Z | 2025-11-12T00:00:00Z |
| opensuse-su-2025:15728-1 | tcpreplay-4.5.2-1.1 on GA media | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| opensuse-su-2025:15727-1 | python311-pdfminer.six-20251107-1.1 on GA media | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| opensuse-su-2025:15726-1 | containerd-1.7.29-1.1 on GA media | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| opensuse-su-2025:15725-1 | binutils-2.45-2.1 on GA media | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| opensuse-su-2025:20037-1 | Security update for chromium | 2025-11-10T17:22:06Z | 2025-11-10T17:22:06Z |
| opensuse-su-2025:20035-1 | Security update for micropython | 2025-11-10T15:52:16Z | 2025-11-10T15:52:16Z |
| opensuse-su-2025:15724-1 | trivy-0.67.2-1.1 on GA media | 2025-11-10T00:00:00Z | 2025-11-10T00:00:00Z |
| opensuse-su-2025:15723-1 | regclient-0.10.0-1.1 on GA media | 2025-11-10T00:00:00Z | 2025-11-10T00:00:00Z |
| opensuse-su-2025:15722-1 | hauler-1.3.1-1.1 on GA media | 2025-11-10T00:00:00Z | 2025-11-10T00:00:00Z |
| opensuse-su-2025:15721-1 | incus-6.17-2.1 on GA media | 2025-11-09T00:00:00Z | 2025-11-09T00:00:00Z |
| opensuse-su-2025:15720-1 | chromedriver-142.0.7444.134-1.1 on GA media | 2025-11-08T00:00:00Z | 2025-11-08T00:00:00Z |
| opensuse-su-2025:20026-1 | Security update for MozillaThunderbird | 2025-11-07T12:08:41Z | 2025-11-07T12:08:41Z |
| opensuse-su-2025:15719-1 | xen-4.20.1_08-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15718-1 | tomcat11-11.0.13-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15717-1 | tomcat10-10.1.48-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15716-1 | tomcat-9.0.111-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15715-1 | squid-7.3-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15714-1 | libshibsp-lite12-3.5.1-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15713-1 | python315-3.15.0~a1-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15712-1 | python311-Django-5.2.8-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-libpython-2025-6069 | HTMLParser quadratic complexity when processing malformed inputs | 2025-08-11T15:33:31.541Z | 2025-10-10T09:07:15.482Z |
| bit-python-2025-8194 | Tarfile infinite loop during parsing with negative member offset | 2025-08-11T14:00:02.142Z | 2026-02-11T09:09:18.507Z |
| bit-python-2025-6069 | HTMLParser quadratic complexity when processing malformed inputs | 2025-08-11T13:59:58.625Z | 2025-10-10T09:07:15.482Z |
| bit-libphp-2025-6491 | NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix | 2025-08-11T13:54:53.967Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2025-1861 | Stream HTTP wrapper truncates redirect location to 1024 bytes | 2025-08-11T13:54:51.879Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2025-1736 | Stream HTTP wrapper header check might omit basic auth header | 2025-08-11T13:54:49.369Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2025-1735 | pgsql extension does not check for errors during escaping | 2025-08-11T13:54:47.127Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2025-1734 | Streams HTTP wrapper does not fail for headers with invalid name and no colon | 2025-08-11T13:54:44.717Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2025-1220 | Null byte termination in hostnames | 2025-08-11T13:54:42.636Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2025-1219 | libxml streams use wrong content-type header when requesting a redirected resource | 2025-08-11T13:54:40.311Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2025-1217 | Header parser of http stream wrapper does not handle folded headers | 2025-08-11T13:54:37.988Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-9026 | PHP-FPM logs from children may be altered | 2025-08-11T13:54:35.937Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8932 | OOB access in ldap_escape | 2025-08-11T13:54:33.535Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8929 | Leak partial content of the heap through heap buffer over-read in mysqlnd | 2025-08-11T13:54:31.347Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8927 | cgi.force_redirect configuration is bypassable due to the environment variable collision | 2025-08-11T13:54:29.171Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8926 | PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass) | 2025-08-11T13:54:27.013Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8925 | Erroneous parsing of multipart form data | 2025-08-11T13:54:25.174Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-5585 | Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) | 2025-08-11T13:54:23.045Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2024-5458 | Filter bypass in filter_var (FILTER_VALIDATE_URL) | 2025-08-11T13:54:20.794Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-4577 | Argument Injection in PHP-CGI | 2025-08-11T13:54:18.697Z | 2025-10-22T09:08:25.162Z |
| bit-libphp-2024-3096 | PHP function password_verify can erroneously return true when argument contains NUL | 2025-08-11T13:54:16.977Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-2757 | PHP mb_encode_mimeheader runs endlessly for some inputs | 2025-08-11T13:54:14.986Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-2756 | __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix | 2025-08-11T13:54:12.793Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-2408 | PHP is vulnerable to the Marvin Attack | 2025-08-11T13:54:10.823Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2024-1874 | Command injection via array-ish $command parameter of proc_open() | 2025-08-11T13:54:08.513Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11236 | Integer overflow in the firebird and dblib quoters causing OOB writes | 2025-08-11T13:54:06.723Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11235 | Reference counting in php_request_shutdown causes Use-After-Free | 2025-08-11T13:54:04.899Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2024-11234 | Configuring a proxy in a stream context might allow for CRLF injection in URIs | 2025-08-11T13:54:03.025Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11233 | Single byte overread with convert.quoted-printable-decode filter | 2025-08-11T13:54:01.202Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2023-3824 | Buffer overflow and overread in phar_dir_read() | 2025-08-11T13:53:59.498Z | 2025-08-11T14:19:40.295Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-02923 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-02923） | 2025-12-15 | 2026-01-12 |
| cnvd-2026-02922 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-02922） | 2025-12-15 | 2026-01-12 |
| cnvd-2026-02912 | Ivanti Endpoint Manager路径遍历漏洞 | 2025-12-15 | 2026-01-12 |
| cnvd-2026-02911 | Ivanti Endpoint Manager数据伪造问题漏洞 | 2025-12-15 | 2026-01-12 |
| cnvd-2026-02910 | Ivanti Endpoint Manager跨站脚本漏洞 | 2025-12-15 | 2026-01-12 |
| cnvd-2026-02909 | Ivanti Endpoint Manager代码执行漏洞 | 2025-12-15 | 2026-01-12 |
| cnvd-2026-02640 | Employee Profile Management System edit_personnel.php文件SQL注入漏洞 | 2025-12-15 | 2026-01-06 |
| cnvd-2026-00691 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00691） | 2025-12-15 | 2026-01-09 |
| cnvd-2026-00690 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00690） | 2025-12-15 | 2026-01-09 |
| cnvd-2026-00689 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00689） | 2025-12-15 | 2026-01-09 |
| cnvd-2026-00688 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00688） | 2025-12-15 | 2026-01-09 |
| cnvd-2026-00687 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00687） | 2025-12-15 | 2026-01-09 |
| cnvd-2026-00686 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00686） | 2025-12-15 | 2026-01-09 |
| cnvd-2026-00685 | Adobe Experience Manager跨站脚本洞（CNVD-2026-00685） | 2025-12-15 | 2026-01-09 |
| cnvd-2026-00684 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00684） | 2025-12-15 | 2026-01-09 |
| cnvd-2026-00683 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00683） | 2025-12-15 | 2026-01-07 |
| cnvd-2026-00682 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00682） | 2025-12-15 | 2026-01-07 |
| cnvd-2026-00681 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00681） | 2025-12-15 | 2026-01-07 |
| cnvd-2026-00680 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00680） | 2025-12-15 | 2026-01-07 |
| cnvd-2026-00679 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00679） | 2025-12-15 | 2026-01-07 |
| cnvd-2026-00678 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00678） | 2025-12-15 | 2026-01-07 |
| cnvd-2026-00135 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013541） | 2025-12-15 | 2026-01-05 |
| cnvd-2026-00134 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013442） | 2025-12-15 | 2026-01-05 |
| cnvd-2026-00133 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013343） | 2025-12-15 | 2026-01-05 |
| cnvd-2026-00132 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013244） | 2025-12-15 | 2026-01-05 |
| cnvd-2026-00131 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013145） | 2025-12-15 | 2026-01-05 |
| cnvd-2026-00130 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013046） | 2025-12-15 | 2026-01-05 |
| cnvd-2026-00129 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0012948） | 2025-12-15 | 2026-01-05 |
| cnvd-2026-00128 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0012849） | 2025-12-15 | 2026-01-05 |
| cnvd-2026-00127 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0012750） | 2025-12-15 | 2026-01-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0769 | Multiples vulnérabilités dans Google Chrome | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0768 | Multiples vulnérabilités dans les produits Ivanti | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0767 | Vulnérabilité dans les produits Adobe | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0766 | Multiples vulnérabilités dans les produits Liferay | 2025-09-09T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0765 | Multiples vulnérabilités dans les produits Siemens | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0764 | Multiples vulnérabilités dans les produits SAP | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0763 | Vulnérabilité dans Spring Cloud Gateway | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0762 | Vulnérabilité dans SPIP | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| certfr-2025-avi-0761 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| certfr-2025-avi-0760 | Multiples vulnérabilités dans les produits IBM | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0759 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0758 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0757 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0756 | Multiples vulnérabilités dans les produits VMware | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0755 | Vulnérabilité dans les produits Synology | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0754 | Multiples vulnérabilités dans les produits VMware | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| certfr-2025-avi-0753 | Vulnérabilité dans Shibboleth Service Provider | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| certfr-2025-avi-0752 | Multiples vulnérabilités dans Google Pixel | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| certfr-2025-avi-0751 | Multiples vulnérabilités dans les produits VMware | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0750 | Multiples vulnérabilités dans Google Android | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0749 | Multiples vulnérabilités dans Google Chrome | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0748 | Vulnérabilité dans les produits Liferay | 2025-09-02T00:00:00.000000 | 2025-09-02T00:00:00.000000 |
| certfr-2025-avi-0747 | Multiples vulnérabilités dans les produits Qnap | 2025-09-01T00:00:00.000000 | 2025-09-01T00:00:00.000000 |
| certfr-2025-avi-0746 | Multiples vulnérabilités dans les produits IBM | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0745 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0744 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0743 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0742 | Vulnérabilité dans Microsoft Edge | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0741 | Vulnérabilité dans Wireshark | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0740 | Multiples vulnérabilités dans Tenable Security Center | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |