Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-40482 |
7.1 (4.0)
|
ChurchCRM has Authenticated SQL Injection in `/api/fam… |
ChurchCRM |
CRM |
2026-04-17T22:58:48.528Z | 2026-04-20T16:16:32.247Z |
| CVE-2026-40323 |
8.9 (4.0)
|
SP1 V6 Recursion Circuit Row-Count Binding Gap |
succinctlabs |
sp1 |
2026-04-17T22:58:42.580Z | 2026-04-20T16:16:41.143Z |
| CVE-2026-40481 |
8.2 (4.0)
|
monetr: Unauthenticated Stripe webhook reads attacker-… |
monetr |
monetr |
2026-04-17T22:54:57.545Z | 2026-04-20T13:36:05.862Z |
| CVE-2026-40486 |
4.3 (3.1)
|
Kimai's User Preferences API allows standard users to … |
kimai |
kimai |
2026-04-17T22:35:53.543Z | 2026-04-20T14:56:51.165Z |
| CVE-2026-40479 |
5.4 (3.1)
|
Kimai: Stored XSS via Incomplete HTML Attribute Escapi… |
kimai |
kimai |
2026-04-17T22:31:29.930Z | 2026-04-20T16:16:41.880Z |
| CVE-2026-2434 |
6.4 (3.1)
|
Pz-LinkCard <= 2.5.8.1 - Authenticated (Contributor+) … |
poporon |
Pz-LinkCard |
2026-04-17T22:27:13.525Z | 2026-04-20T13:36:06.124Z |
| CVE-2026-40478 |
9.1 (3.1)
|
Improper neutralization of specific syntax patterns fo… |
thymeleaf |
thymeleaf |
2026-04-17T21:57:01.560Z | 2026-04-22T03:55:42.682Z |
| CVE-2026-40477 |
9.1 (3.1)
|
Improper restriction of the scope of accessible object… |
thymeleaf |
thymeleaf |
2026-04-17T21:53:47.271Z | 2026-04-22T03:55:41.093Z |
| CVE-2026-40476 |
6.9 (4.0)
|
graphql-php: Denial of Service via quadratic complexit… |
webonyx |
graphql-php |
2026-04-17T21:42:59.511Z | 2026-04-20T14:56:57.812Z |
| CVE-2026-5720 |
7.1 (4.0)
|
miniupnpd Integer Underflow SOAPAction Header Parsing |
miniupnp project |
miniupnpd |
2026-04-17T21:39:54.818Z | 2026-04-20T16:59:21.060Z |
| CVE-2026-40474 |
7.6 (3.1)
|
wger has Broken Access Control in the Global Gym Confi… |
wger-project |
wger |
2026-04-17T21:39:03.677Z | 2026-04-20T16:08:12.427Z |
| CVE-2026-40353 |
5.1 (4.0)
|
wger: Stored XSS via Unescaped License Attribution Fields |
wger-project |
wger |
2026-04-17T21:16:12.401Z | 2026-04-20T16:17:52.305Z |
| CVE-2026-40258 |
9.1 (3.1)
|
Gramps Web API has Zip Slip Path Traversal in Media Ar… |
gramps-project |
gramps-web-api |
2026-04-17T21:12:54.226Z | 2026-04-20T15:48:41.690Z |
| CVE-2026-29013 |
8.8 (4.0)
|
libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling |
libcoap |
libcoap |
2026-04-17T21:11:38.137Z | 2026-04-20T16:46:56.223Z |
| CVE-2026-40321 |
8.1 (3.1)
|
DotNetNuke.Core has stored cross-site-scripting (XSS) … |
dnnsoftware |
Dnn.Platform |
2026-04-17T21:10:33.192Z | 2026-04-22T03:55:44.141Z |
| CVE-2026-40352 |
8.8 (3.1)
|
FastGPT: NoSQL Injection in updatePasswordByOld Leads … |
labring |
FastGPT |
2026-04-17T21:09:32.913Z | 2026-04-20T13:36:06.464Z |
| CVE-2026-40306 |
6.9 (4.0)
|
DNN has same HostGUID for all new installs |
dnnsoftware |
Dnn.Platform |
2026-04-17T21:09:30.317Z | 2026-04-20T16:18:27.508Z |
| CVE-2026-40305 |
4.3 (3.1)
|
DNN has Force Friend Request Acceptance |
dnnsoftware |
Dnn.Platform |
2026-04-17T21:06:09.237Z | 2026-04-20T13:36:06.644Z |
| CVE-2026-40351 |
9.8 (3.1)
|
FastGPT: NoSQL Injection in loginByPassword leads to A… |
labring |
FastGPT |
2026-04-17T21:05:05.911Z | 2026-04-20T14:57:15.664Z |
| CVE-2026-40304 |
5.3 (3.1)
|
zrok's broken ownership check in DELETE /api/v2/unacce… |
openziti |
zrok |
2026-04-17T21:04:23.648Z | 2026-04-20T14:57:24.486Z |
| CVE-2026-40303 |
7.5 (3.1)
|
zrok allows unauthenticated DoS via unbounded memory a… |
openziti |
zrok |
2026-04-17T21:01:51.899Z | 2026-04-20T16:19:07.291Z |
| CVE-2026-40196 |
8.1 (3.1)
|
HomeBox has Unauthorized API Access via Retained defau… |
sysadminsmedia |
homebox |
2026-04-17T21:01:18.530Z | 2026-04-20T13:36:06.776Z |
| CVE-2026-40302 |
6.1 (3.1)
|
zrok has reflected XSS in GitHub OAuth callback via un… |
openziti |
zrok |
2026-04-17T20:56:08.368Z | 2026-04-18T03:07:10.092Z |
| CVE-2026-40155 |
5.4 (3.1)
|
Auth0 Next.js SDK has Improper Proxy Cache Lookup |
auth0 |
nextjs-auth0 |
2026-04-17T20:54:38.958Z | 2026-04-20T14:57:32.023Z |
| CVE-2026-40301 |
4.7 (3.1)
|
rhukster/dom-sanitizer: SVG <style> tag allows CSS inj… |
rhukster |
dom-sanitizer |
2026-04-17T20:51:37.226Z | 2026-04-20T14:57:39.192Z |
| CVE-2026-40299 |
6.9 (4.0)
|
next-intl has an open redirect vulnerability |
amannn |
next-intl |
2026-04-17T20:49:05.642Z | 2026-04-20T15:58:51.149Z |
| CVE-2026-40293 |
6.5 (3.1)
|
OpenFGA Playground Preshared Key Exposure |
openfga |
openfga |
2026-04-17T20:47:06.804Z | 2026-04-20T16:19:40.914Z |
| CVE-2026-35603 |
5.4 (4.0)
|
Claude Code: Insecure System-Wide Configuration Loadin… |
anthropics |
claude-code |
2026-04-17T20:38:49.901Z | 2026-04-20T14:57:47.669Z |
| CVE-2026-35402 |
2.3 (4.0)
|
mcp-neo4j-cypher: SSRF and Data Modification via read_… |
neo4j-contrib |
mcp-neo4j |
2026-04-17T20:34:06.510Z | 2026-04-20T15:51:06.164Z |
| CVE-2026-33436 |
3.1 (3.1)
|
Stirling-PDF: Reflected XSS through crafted filename i… |
Stirling-Tools |
Stirling-PDF |
2026-04-17T20:29:43.262Z | 2026-04-20T16:20:16.137Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-40481 |
8.2 (4.0)
|
monetr: Unauthenticated Stripe webhook reads attacker-… |
monetr |
monetr |
2026-04-17T22:54:57.545Z | 2026-04-20T13:36:05.862Z |
| CVE-2026-40479 |
5.4 (3.1)
|
Kimai: Stored XSS via Incomplete HTML Attribute Escapi… |
kimai |
kimai |
2026-04-17T22:31:29.930Z | 2026-04-20T16:16:41.880Z |
| CVE-2026-2434 |
6.4 (3.1)
|
Pz-LinkCard <= 2.5.8.1 - Authenticated (Contributor+) … |
poporon |
Pz-LinkCard |
2026-04-17T22:27:13.525Z | 2026-04-20T13:36:06.124Z |
| CVE-2026-5720 |
7.1 (4.0)
|
miniupnpd Integer Underflow SOAPAction Header Parsing |
miniupnp project |
miniupnpd |
2026-04-17T21:39:54.818Z | 2026-04-20T16:59:21.060Z |
| CVE-2026-40478 |
9.1 (3.1)
|
Improper neutralization of specific syntax patterns fo… |
thymeleaf |
thymeleaf |
2026-04-17T21:57:01.560Z | 2026-04-22T03:55:42.682Z |
| CVE-2026-40477 |
9.1 (3.1)
|
Improper restriction of the scope of accessible object… |
thymeleaf |
thymeleaf |
2026-04-17T21:53:47.271Z | 2026-04-22T03:55:41.093Z |
| CVE-2026-40476 |
6.9 (4.0)
|
graphql-php: Denial of Service via quadratic complexit… |
webonyx |
graphql-php |
2026-04-17T21:42:59.511Z | 2026-04-20T14:56:57.812Z |
| CVE-2026-40474 |
7.6 (3.1)
|
wger has Broken Access Control in the Global Gym Confi… |
wger-project |
wger |
2026-04-17T21:39:03.677Z | 2026-04-20T16:08:12.427Z |
| CVE-2026-40353 |
5.1 (4.0)
|
wger: Stored XSS via Unescaped License Attribution Fields |
wger-project |
wger |
2026-04-17T21:16:12.401Z | 2026-04-20T16:17:52.305Z |
| CVE-2026-40352 |
8.8 (3.1)
|
FastGPT: NoSQL Injection in updatePasswordByOld Leads … |
labring |
FastGPT |
2026-04-17T21:09:32.913Z | 2026-04-20T13:36:06.464Z |
| CVE-2026-40351 |
9.8 (3.1)
|
FastGPT: NoSQL Injection in loginByPassword leads to A… |
labring |
FastGPT |
2026-04-17T21:05:05.911Z | 2026-04-20T14:57:15.664Z |
| CVE-2026-40321 |
8.1 (3.1)
|
DotNetNuke.Core has stored cross-site-scripting (XSS) … |
dnnsoftware |
Dnn.Platform |
2026-04-17T21:10:33.192Z | 2026-04-22T03:55:44.141Z |
| CVE-2026-40306 |
6.9 (4.0)
|
DNN has same HostGUID for all new installs |
dnnsoftware |
Dnn.Platform |
2026-04-17T21:09:30.317Z | 2026-04-20T16:18:27.508Z |
| CVE-2026-40305 |
4.3 (3.1)
|
DNN has Force Friend Request Acceptance |
dnnsoftware |
Dnn.Platform |
2026-04-17T21:06:09.237Z | 2026-04-20T13:36:06.644Z |
| CVE-2026-40304 |
5.3 (3.1)
|
zrok's broken ownership check in DELETE /api/v2/unacce… |
openziti |
zrok |
2026-04-17T21:04:23.648Z | 2026-04-20T14:57:24.486Z |
| CVE-2026-40258 |
9.1 (3.1)
|
Gramps Web API has Zip Slip Path Traversal in Media Ar… |
gramps-project |
gramps-web-api |
2026-04-17T21:12:54.226Z | 2026-04-20T15:48:41.690Z |
| CVE-2026-29013 |
8.8 (4.0)
|
libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling |
libcoap |
libcoap |
2026-04-17T21:11:38.137Z | 2026-04-20T16:46:56.223Z |
| CVE-2026-40527 |
8.5 (4.0)
7.8 (3.1)
|
radare2 Command Injection via DWARF Parameter Names |
radareorg |
radare2 |
2026-04-17T20:25:20.143Z | 2026-04-20T14:20:04.639Z |
| CVE-2026-40303 |
7.5 (3.1)
|
zrok allows unauthenticated DoS via unbounded memory a… |
openziti |
zrok |
2026-04-17T21:01:51.899Z | 2026-04-20T16:19:07.291Z |
| CVE-2026-40302 |
6.1 (3.1)
|
zrok has reflected XSS in GitHub OAuth callback via un… |
openziti |
zrok |
2026-04-17T20:56:08.368Z | 2026-04-18T03:07:10.092Z |
| CVE-2026-40301 |
4.7 (3.1)
|
rhukster/dom-sanitizer: SVG <style> tag allows CSS inj… |
rhukster |
dom-sanitizer |
2026-04-17T20:51:37.226Z | 2026-04-20T14:57:39.192Z |
| CVE-2026-40299 |
6.9 (4.0)
|
next-intl has an open redirect vulnerability |
amannn |
next-intl |
2026-04-17T20:49:05.642Z | 2026-04-20T15:58:51.149Z |
| CVE-2026-40293 |
6.5 (3.1)
|
OpenFGA Playground Preshared Key Exposure |
openfga |
openfga |
2026-04-17T20:47:06.804Z | 2026-04-20T16:19:40.914Z |
| CVE-2026-40286 |
7.5 (3.1)
|
WeGIA has Cross-Site Scripting in Controle de Contribuição |
LabRedesCefetRJ |
WeGIA |
2026-04-17T20:27:59.131Z | 2026-04-20T15:49:44.569Z |
| CVE-2026-40285 |
8.8 (3.1)
|
WeGIA has SQL Injection via Session Variable Override … |
LabRedesCefetRJ |
WeGIA |
2026-04-17T20:25:33.185Z | 2026-04-20T16:21:07.084Z |
| CVE-2026-40284 |
6.8 (3.1)
|
WeGIA has stored XSS in listar_despachos.php |
LabRedesCefetRJ |
WeGIA |
2026-04-17T20:24:10.282Z | 2026-04-20T16:26:32.113Z |
| CVE-2026-40282 |
6.4 (4.0)
|
WeGIA has stored XSS in intercorrencia_visualizar.php |
LabRedesCefetRJ |
WeGIA |
2026-04-17T20:16:46.878Z | 2026-04-20T14:57:55.798Z |
| CVE-2026-40196 |
8.1 (3.1)
|
HomeBox has Unauthorized API Access via Retained defau… |
sysadminsmedia |
homebox |
2026-04-17T21:01:18.530Z | 2026-04-20T13:36:06.776Z |
| CVE-2026-40155 |
5.4 (3.1)
|
Auth0 Next.js SDK has Improper Proxy Cache Lookup |
auth0 |
nextjs-auth0 |
2026-04-17T20:54:38.958Z | 2026-04-20T14:57:32.023Z |
| CVE-2026-35603 |
5.4 (4.0)
|
Claude Code: Insecure System-Wide Configuration Loadin… |
anthropics |
claude-code |
2026-04-17T20:38:49.901Z | 2026-04-20T14:57:47.669Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-fv5p-p927-qmxr |
6.5 (3.1)
|
LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass | 2026-04-16T22:53:32Z | 2026-04-16T22:53:32Z |
| ghsa-3g92-f9ch-qjcm |
2.9 (4.0)
|
Plonky3: The sponge construction used to get a hash function from a cryptographic permutation is no… | 2026-04-16T22:52:41Z | 2026-04-16T22:52:41Z |
| ghsa-jp74-mfrx-3qvh |
9.9 (3.1)
|
Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId) | 2026-04-16T22:51:43Z | 2026-04-16T22:51:43Z |
| ghsa-f5v8-v6q3-q4h6 |
7.5 (3.1)
|
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out) | 2026-04-16T22:50:37Z | 2026-04-16T22:50:37Z |
| ghsa-3xx2-mqjm-hg9x |
9.9 (3.1)
|
Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company … | 2026-04-16T22:49:46Z | 2026-04-16T22:49:46Z |
| ghsa-fpw4-p57j-hqmq |
5.4 (3.1)
|
Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-m… | 2026-04-16T22:49:13Z | 2026-04-16T22:49:13Z |
| ghsa-p7mm-r948-4q3q |
4.3 (3.1)
|
Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperc… | 2026-04-16T22:48:46Z | 2026-04-16T22:48:46Z |
| ghsa-47wq-cj9q-wpmp |
9.9 (3.1)
|
Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys | 2026-04-16T22:48:32Z | 2026-04-16T22:48:32Z |
| ghsa-vr7g-88fq-vhq3 |
9.8 (3.1)
|
Paperclip: OS Command Injection via Execution Workspace cleanupCommand | 2026-04-16T22:48:09Z | 2026-04-16T22:48:09Z |
| ghsa-gqqj-85qm-8qhf |
8.7 (3.1)
|
Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email | 2026-04-16T22:47:40Z | 2026-04-16T22:47:40Z |
| ghsa-xfqj-r5qw-8g4j |
8.3 (3.1)
|
Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode | 2026-04-16T22:47:05Z | 2026-04-16T22:47:05Z |
| ghsa-w8hx-hqjv-vjcq |
7.3 (3.1)
|
Paperclip: Malicious skills able to exfiltrate and destroy all user data | 2026-04-16T22:46:52Z | 2026-04-16T22:46:52Z |
| ghsa-265w-rf2w-cjh4 |
8.8 (3.1)
|
Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to … | 2026-04-16T22:45:26Z | 2026-04-16T22:45:26Z |
| ghsa-3pw3-v88x-xj24 |
6.5 (3.1)
|
Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath | 2026-04-16T22:45:14Z | 2026-04-16T22:45:14Z |
| ghsa-xr8f-h2gw-9xh6 |
8.4 (4.0)
|
OAuth 2.1 Provider: Unprivileged users can register OAuth clients | 2026-04-16T22:44:27Z | 2026-04-16T22:44:28Z |
| ghsa-8783-3wgf-jggf |
9.1 (3.1)
|
Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated A… | 2026-04-16T22:40:59Z | 2026-04-16T22:40:59Z |
| ghsa-29qv-4j9f-fjw5 |
8.8 (3.1)
|
Unsafe object property setter in mathjs | 2026-04-16T22:38:43Z | 2026-04-16T22:38:43Z |
| ghsa-jj8c-mmj3-mmgv |
5.4 (3.1)
|
Authlib: Cross-site request forging when using cache | 2026-04-16T22:38:03Z | 2026-04-16T22:38:03Z |
| ghsa-45q2-gjvg-7973 |
8.7 (4.0)
|
Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server | 2026-04-16T22:36:01Z | 2026-04-16T22:36:01Z |
| ghsa-xq3m-2v4x-88gg |
9.4 (4.0)
|
Arbitrary code execution in protobufjs | 2026-04-16T22:34:57Z | 2026-04-18T16:18:23Z |
| ghsa-pr96-94w5-mx2h |
5.3 (3.1)
|
@fastify/static vulnerable to path traversal in directory listing | 2026-04-16T22:34:30Z | 2026-04-16T22:34:30Z |
| ghsa-x428-ghpx-8j92 |
5.9 (3.1)
|
@fastify/static vulnerable to route guard bypass via encoded path separators | 2026-04-16T22:34:03Z | 2026-04-16T22:34:03Z |
| ghsa-72c6-fx6q-fr5w |
9.1 (3.1)
|
@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes | 2026-04-16T22:29:04Z | 2026-04-16T22:29:04Z |
| ghsa-v9ww-2j6r-98q6 |
7.4 (3.1)
|
@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option | 2026-04-16T22:28:54Z | 2026-04-16T22:28:54Z |
| ghsa-f6hc-c5jr-878p |
7.7 (4.0)
|
Flowise: resetPassword Authentication Bypass Vulnerability | 2026-04-16T21:55:18Z | 2026-04-16T21:55:18Z |
| ghsa-28g4-38q8-3cwc |
8.7 (4.0)
|
Flowise: Cypher Injection in GraphCypherQAChain | 2026-04-16T21:54:26Z | 2026-04-16T21:54:26Z |
| ghsa-x5w6-38gp-mrqh |
7.5 (4.0)
|
Flowise: Password Reset Link Sent Over Unsecured HTTP | 2026-04-16T21:53:16Z | 2026-04-16T21:53:16Z |
| ghsa-6f7g-v4pp-r667 |
7.7 (4.0)
|
Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise | 2026-04-16T21:52:46Z | 2026-04-16T21:52:46Z |
| ghsa-6r77-hqx7-7vw8 |
7.1 (3.1)
|
Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains | 2026-04-16T21:52:11Z | 2026-04-16T21:52:11Z |
| ghsa-2x8m-83vc-6wv4 |
7.1 (3.1)
|
Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) | 2026-04-16T21:51:00Z | 2026-04-18T00:15:09Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-298 |
5.3 (3.1)
|
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restri… | safeurl-python | 2023-01-30T05:15:00Z | 2024-11-25T22:26:07.130924Z |
| pysec-2023-43 |
|
A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. … | psiturk | 2023-01-28T23:15:00Z | 2023-05-04T03:49:47.366068Z |
| pysec-2023-31 |
|
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-01-26T23:15:00Z | 2023-05-04T03:49:46.722786Z |
| pysec-2023-30 |
|
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-01-26T22:15:00Z | 2023-05-04T03:49:46.669829Z |
| pysec-2023-21 |
|
LTI Consumer XBlock implements the consumer side of the LTI specification enabling integr… | lti-consumer-xblock | 2023-01-26T21:18:00Z | 2023-05-04T03:49:46.153608Z |
| pysec-2023-38 |
|
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the e… | onnx | 2023-01-26T21:15:00Z | 2023-05-04T03:49:47.105559Z |
| pysec-2023-1 |
|
Adyen has utility methods for validating notification HMAC signatures. The is_valid_hmac … | adyen | 2023-01-24T00:00:00Z | 2023-01-24T00:00:00Z |
| pysec-2023-284 |
6.5 (3.1)
|
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-01-23T14:15:00+00:00 | 2024-11-21T14:22:55.160710+00:00 |
| pysec-2023-290 |
8.8 (3.1)
|
An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaP… | pyassimp | 2023-01-20T19:15:00Z | 2024-11-21T14:22:59.461917Z |
| pysec-2023-283 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-01-19T18:15:00+00:00 | 2024-11-21T14:22:55.105976+00:00 |
| pysec-2023-282 |
6.5 (3.1)
|
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-01-19T09:15:00+00:00 | 2024-11-21T14:22:55.051300+00:00 |
| pysec-2023-25 |
|
mechanize, a library for automatically interacting with HTTP web servers, contains a regu… | mechanize | 2023-01-17T22:15:00Z | 2023-05-04T03:49:46.357040Z |
| pysec-2023-14 |
|
** UNSUPPPORTED WHEN ASSIGNED **** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classifie… | django-ucamlookup | 2023-01-05T09:15:00Z | 2023-05-04T03:49:45.271028Z |
| pysec-2023-19 |
|
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to… | ldapcherry | 2023-01-05T08:15:00Z | 2023-05-04T03:49:46.049521Z |
| pysec-2023-4 |
|
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid… | apache-dolphinscheduler | 2023-01-04T15:15:00Z | 2023-05-04T03:49:44.740629Z |
| pysec-2022-43010 |
|
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. | rdiffweb | 2022-12-27T15:15:00Z | 2023-05-04T03:49:47.879238Z |
| pysec-2022-43009 |
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-12-27T15:15:00Z | 2023-05-04T03:49:47.817934Z |
| pysec-2022-43008 |
|
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5. | rdiffweb | 2022-12-27T15:15:00Z | 2023-05-04T03:49:47.756258Z |
| pysec-2022-43007 |
|
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) i… | rdiffweb | 2022-12-27T15:15:00Z | 2023-05-04T03:49:47.700028Z |
| pysec-2022-43006 |
|
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5. | rdiffweb | 2022-12-27T15:15:00Z | 2023-05-04T03:49:47.643896Z |
| pysec-2022-43005 |
|
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. | rdiffweb | 2022-12-27T15:15:00Z | 2023-05-04T03:49:47.587629Z |
| pysec-2022-43014 |
|
A vulnerability, which was classified as problematic, has been found in cocagne pysrp up … | srp | 2022-12-27T11:15:00Z | 2023-05-04T03:49:48.139972Z |
| pysec-2022-43013 |
|
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an … | slixmpp | 2022-12-25T05:15:00Z | 2023-05-04T04:29:29.928881Z |
| pysec-2022-43017 |
|
An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows … | wheel | 2022-12-23T00:15:00Z | 2023-05-04T03:49:49.039483Z |
| pysec-2022-43012 |
|
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cau… | setuptools | 2022-12-23T00:15:00Z | 2023-05-04T04:29:29.797493Z |
| pysec-2022-42991 |
|
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers … | future | 2022-12-23T00:15:00Z | 2023-05-04T03:49:45.660760Z |
| pysec-2022-43004 |
|
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. | rdiffweb | 2022-12-22T02:15:00Z | 2023-05-04T03:49:47.530589Z |
| pysec-2022-43003 |
|
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4. | rdiffweb | 2022-12-22T01:15:00Z | 2023-05-04T03:49:47.471955Z |
| pysec-2022-42988 |
|
A vulnerability classified as problematic was found in collective.contact.widget up to 1.… | collective-contact-widget | 2022-12-21T22:15:00Z | 2023-05-04T04:29:24.049172Z |
| pysec-2022-43151 |
9.1 (3.1)
|
Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPat… | pypatchelf | 2022-12-19T22:15:00Z | 2024-11-25T22:09:33.909779Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2259 | Malicious code in monolith-twirp-loops-core (RubyGems) | 2026-03-27T13:26:58Z | 2026-03-27T13:26:58Z |
| mal-2026-2261 | Malicious code in monolith-twirp-pullsd-repositories (RubyGems) | 2026-03-27T13:26:55Z | 2026-03-27T13:26:55Z |
| mal-2026-2260 | Malicious code in monolith-twirp-pullsd-pullrequestinfo (RubyGems) | 2026-03-27T13:26:48Z | 2026-03-27T13:26:48Z |
| mal-2026-2264 | Malicious code in monolith-twirp-scribe-scribe (RubyGems) | 2026-03-27T13:26:09Z | 2026-03-27T13:26:09Z |
| mal-2026-2258 | Malicious code in current-context-urn (npm) | 2026-03-27T12:31:02Z | 2026-03-31T03:12:01Z |
| mal-2026-2257 | Malicious code in xpna-context (npm) | 2026-03-27T12:10:43Z | 2026-03-31T03:12:05Z |
| mal-2026-2256 | Malicious code in shenxun162938 (npm) | 2026-03-27T09:40:39Z | 2026-03-31T03:12:04Z |
| mal-2026-2255 | Malicious code in thisismytest123 (PyPI) | 2026-03-27T07:47:07Z | 2026-03-27T14:27:31Z |
| mal-2026-2254 | Malicious code in telnyx (PyPI) | 2026-03-27T04:26:10Z | 2026-03-27T04:26:10Z |
| mal-2026-2253 | Malicious code in dgxeon-soket-buttonx (npm) | 2026-03-27T03:24:37Z | 2026-03-31T03:12:01Z |
| mal-2026-2252 | Malicious code in dgxeon-baileys (npm) | 2026-03-27T03:24:37Z | 2026-03-31T03:12:01Z |
| mal-2026-2249 | Malicious code in chai-as-added (npm) | 2026-03-27T03:12:35Z | 2026-04-16T15:42:08Z |
| mal-2026-2251 | Malicious code in testtestsharp (npm) | 2026-03-27T03:07:31Z | 2026-04-16T15:42:10Z |
| mal-2026-2250 | Malicious code in test1sharp (npm) | 2026-03-27T03:07:31Z | 2026-04-16T15:42:10Z |
| mal-2026-2247 | Malicious code in cua-primitives-server (npm) | 2026-03-27T00:51:36Z | 2026-03-31T03:12:01Z |
| mal-2026-2246 | Malicious code in @ev-tech/eva-container-api (npm) | 2026-03-27T00:51:36Z | 2026-04-16T15:42:07Z |
| mal-2026-2248 | Malicious code in shop-republik-ch (npm) | 2026-03-27T00:51:35Z | 2026-03-31T03:12:04Z |
| mal-2026-2245 | Malicious code in requests-testik111 (PyPI) | 2026-03-26T21:35:07Z | 2026-03-27T17:24:17Z |
| mal-2026-2244 | Malicious code in fluxhttp (PyPI) | 2026-03-26T20:49:03Z | 2026-04-08T20:19:39Z |
| mal-2026-2243 | Malicious code in browserstack-electron-forge-include-package-plugin (npm) | 2026-03-26T20:45:39Z | 2026-03-31T03:12:00Z |
| mal-2026-2242 | Malicious code in somepentest-test-package (PyPI) | 2026-03-26T20:06:44Z | 2026-03-26T20:06:44Z |
| mal-2026-2238 | Malicious code in spr-i18n-labels (npm) | 2026-03-26T16:40:45Z | 2026-03-31T03:12:04Z |
| mal-2026-2239 | Malicious code in chaostoolkit-turbulence (PyPI) | 2026-03-26T16:32:17Z | 2026-03-26T23:47:08Z |
| mal-2026-2240 | Malicious code in magtape (PyPI) | 2026-03-26T16:21:03Z | 2026-03-26T23:47:09Z |
| mal-2026-2241 | Malicious code in pacbot (PyPI) | 2026-03-26T16:21:00Z | 2026-03-26T23:47:09Z |
| mal-2026-2237 | Malicious code in jsonify-builder (npm) | 2026-03-26T14:45:36Z | 2026-04-16T15:42:09Z |
| mal-2026-2236 | Malicious code in onboarding-server (npm) | 2026-03-26T14:15:47Z | 2026-03-31T03:12:03Z |
| mal-2026-2235 | Malicious code in srcsrctest (npm) | 2026-03-26T12:05:48Z | 2026-03-31T03:12:04Z |
| mal-2026-2234 | Malicious code in security-install-analytics (npm) | 2026-03-26T11:24:02Z | 2026-03-31T03:12:04Z |
| mal-2026-2233 | Malicious code in lightmock (PyPI) | 2026-03-26T08:27:10Z | 2026-03-26T08:27:10Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2724 | Golang Go: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2722 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2721 | Mautic: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2720 | Cacti: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2025-12-02T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2719 | vim: Schwachstelle ermöglicht Codeausführung | 2025-12-02T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2718 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-2717 | Django: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2716 | Infoblox NIOS: Mehrere Schwachstellen | 2025-12-01T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2715 | Mattermost Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-01T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2714 | Avast Antivirus: Mehrere Schwachstellen | 2025-12-01T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2713 | OpenVPN: Schwachstelle ermöglicht Denial of Service | 2025-12-01T23:00:00.000+00:00 | 2025-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2712 | Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-01T23:00:00.000+00:00 | 2026-02-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2711 | Android Patchday Dezember 2025: Mehrere Schwachstellen | 2025-12-01T23:00:00.000+00:00 | 2025-12-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2710 | cPanel cPanel/WHM: Schwachstelle ermöglicht Privilegieneskalation | 2025-12-01T23:00:00.000+00:00 | 2025-12-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2709 | Samsung Android: Mehrere Schwachstellen | 2025-12-01T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2708 | Angular: Schwachstelle ermöglicht Cross-Site Scripting | 2025-12-01T23:00:00.000+00:00 | 2025-12-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2707 | Red Hat Enterprise Linux (Quarkus): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-01T23:00:00.000+00:00 | 2025-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2706 | Python: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-01T23:00:00.000+00:00 | 2026-03-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2705 | Kubernetes: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-01T23:00:00.000+00:00 | 2025-12-14T23:00:00.000+00:00 |
| wid-sec-w-2025-2704 | Apache Struts: Schwachstelle ermöglicht Denial of Service | 2025-12-01T23:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-2703 | Zabbix: Mehrere Schwachstellen | 2025-11-30T23:00:00.000+00:00 | 2026-03-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2702 | Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-30T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2701 | xwiki (XJetty): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-30T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2700 | CODESYS Control und Development System: Mehrere Schwachstellen | 2025-11-30T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2699 | Samsung Exynos: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-30T23:00:00.000+00:00 | 2025-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2698 | MISP: Mehrere Schwachstellen | 2025-11-30T23:00:00.000+00:00 | 2025-11-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2697 | Devolutions Remote Desktop Manager und Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-30T23:00:00.000+00:00 | 2025-11-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2696 | expat: Schwachstelle ermöglicht Denial of Service | 2025-11-27T23:00:00.000+00:00 | 2025-11-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2695 | Devolutions Server: Mehrere Schwachstellen | 2025-11-27T23:00:00.000+00:00 | 2025-11-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2694 | MariaDB: Schwachstelle ermöglicht Codeausführung | 2025-11-27T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-021-03 | ZF Roll Stability Support Plus (RSSPlus) | 2025-01-21T07:00:00.000000Z | 2025-01-21T07:00:00.000000Z |
| icsa-25-016-05 | Fuji Electric Alpha5 SMART | 2025-01-16T07:00:00.000000Z | 2025-01-16T07:00:00.000000Z |
| va-25-017-01 | TrueFiling authorization bypass via user-controlled keys | 2025-01-16T00:00:00Z | 2025-02-20T00:00:00Z |
| icsa-25-028-01 | B&R Automation Runtime | 2025-01-15T03:30:00.000000Z | 2025-01-15T03:30:00.000000Z |
| icsa-25-037-02 | Schneider Electric EcoStruxure (Update D) | 2025-01-14T07:00:00.000000Z | 2026-04-02T06:00:00.000000Z |
| icsa-25-014-04 | Belledonne Communications Linphone-Desktop | 2025-01-14T07:00:00.000000Z | 2025-01-14T07:00:00.000000Z |
| icsa-25-035-04 | Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A) | 2025-01-14T05:00:00.000000Z | 2025-04-08T04:00:00.000000Z |
| icsa-25-035-07 | Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A) | 2025-01-14T00:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-035-06 | Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H | 2025-01-14T00:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-028-06 | Schneider Electric RemoteConnect and SCADAPack x70 Utilities (Update A) | 2025-01-14T00:00:00.000000Z | 2026-01-29T07:00:00.000000Z |
| icsa-25-023-05 | Schneider Electric EcoStruxure Power Build Rapsody | 2025-01-14T00:00:00.000000Z | 2025-05-13T04:00:00.000000Z |
| icsa-25-021-02 | Siemens SIMATIC S7-1200 CPUs | 2025-01-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-016-04 | Siemens SIPROTEC 5 Products | 2025-01-14T00:00:00.000000Z | 2025-11-11T00:00:00.000000Z |
| icsa-25-016-03 | Siemens Siveillance Video Camera | 2025-01-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-016-02 | Siemens Industrial Edge Management | 2025-01-14T00:00:00.000000Z | 2025-01-14T00:00:00.000000Z |
| icsa-25-016-01 | Siemens Mendix LDAP | 2025-01-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-25-037-03 | ABB Drive Composer | 2025-01-10T04:30:00.000000Z | 2025-01-10T03:30:00.000000Z |
| icsa-25-010-03 | Delta Electronics DRASimuCAD (Update A) | 2025-01-09T07:00:00.000000Z | 2025-01-16T07:00:00.000000Z |
| icsa-25-007-02 | Nedap Librix Ecoreader | 2025-01-07T07:00:00.000000Z | 2025-01-07T07:00:00.000000Z |
| icsma-24-354-01 | Ossur Mobile Logic Application | 2024-12-19T07:00:00.000000Z | 2024-12-19T07:00:00.000000Z |
| icsa-24-354-07 | Schneider Electric Modicon Controllers (Update A) | 2024-12-19T07:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-24-354-05 | Tibbo AggreGate Network Manager | 2024-12-19T07:00:00.000000Z | 2024-12-19T07:00:00.000000Z |
| icsa-24-354-03 | Delta Electronics DTM Soft | 2024-12-19T07:00:00.000000Z | 2024-12-19T07:00:00.000000Z |
| icsa-24-354-01 | Hitachi Energy RTU500 series CMU | 2024-12-19T07:00:00.000000Z | 2024-12-19T07:00:00.000000Z |
| icsma-24-352-01 | BD Diagnostic Solutions Products (Update A) | 2024-12-17T07:00:00.000000Z | 2025-01-28T07:00:00.000000Z |
| icsa-24-352-03 | Rockwell Automation PowerMonitor 1000 Remote | 2024-12-17T07:00:00.000000Z | 2024-12-17T07:00:00.000000Z |
| icsa-24-352-02 | Hitachi Energy TropOS Devices Series 1400/2400/6400 | 2024-12-17T07:00:00.000000Z | 2024-12-17T07:00:00.000000Z |
| icsa-24-352-01 | ThreatQuotient ThreatQ Platform | 2024-12-17T07:00:00.000000Z | 2024-12-17T07:00:00.000000Z |
| icsa-24-354-04 | Siemens User Management Component | 2024-12-16T00:00:00.000000Z | 2026-01-14T22:05:42.437898Z |
| icsa-24-345-06 | Rockwell Automation Arena (Update B) | 2024-12-10T07:00:00.000000Z | 2026-02-03T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cisco-pi-epnm-xss-mzshh2j | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-04-06T15:31:34+00:00 |
| cisco-sa-ucsm-bkpsky-h8fcqgsa | Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-03-24T18:16:56+00:00 |
| cisco-sa-nxos-x509v3-unsupportedconfig-scrtabuk | Cisco NX-OS Software SSH X.509v3 Certificate Authentication with Unsupported Remote Authorization Method Privilege Escalation Issues | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-nxos-cli-cmdinject-euqvk9u | Cisco NX-OS Software CLI Command Injection Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-nxfp-cmdinj-xxbzjtr | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-elyfex-dos-gfvcbyx | Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects Authentication Bypass Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-capic-csrfv-dmx6kswv | Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-03-29T21:04:31+00:00 |
| cisco-sa-aci-lldp-dos-yscnzopx | Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability | 2023-02-22T16:00:00+00:00 | 2023-02-22T16:00:00+00:00 |
| cisco-sa-nexus-dashboard-xss-xc5bcgsq | Cisco Nexus Dashboard Cross-Site Scripting Vulnerability | 2023-02-15T16:00:00+00:00 | 2023-02-15T16:00:00+00:00 |
| cisco-sa-ndb-dnsdos-bysczosu | Cisco Nexus Dashboard Denial of Service Vulnerability | 2023-02-15T16:00:00+00:00 | 2023-02-15T16:00:00+00:00 |
| cisco-sa-ise-xss-ubfhg75c | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | 2023-02-15T16:00:00+00:00 | 2023-02-15T16:00:00+00:00 |
| cisco-sa-esa-sma-privesc-9dvkfpj8 | Cisco Email Security Appliance and Cisco Secure Email and Web Manager Vulnerabilities | 2023-02-15T16:00:00+00:00 | 2023-02-16T17:32:38+00:00 |
| cisco-sa-clamav-xxe-tcszduhn | ClamAV DMG File Parsing XML Entity Expansion Vulnerability Affecting Cisco Products: February 2023 | 2023-02-15T16:00:00+00:00 | 2023-02-15T20:15:58+00:00 |
| cisco-sa-clamav-q8dthcy | ClamAV HFS+ Partition Scanning Buffer Overflow Vulnerability Affecting Cisco Products: February 2023 | 2023-02-15T16:00:00+00:00 | 2023-02-22T14:09:19+00:00 |
| cisco-sa-sb-rv-afu-exxwa65v | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability | 2023-02-01T16:00:00+00:00 | 2023-02-01T16:00:00+00:00 |
| cisco-sa-ise-xxe-inj-gecehy58 | Cisco Identity Services Engine XML External Entity Injection Vulnerability | 2023-02-01T16:00:00+00:00 | 2023-02-02T14:24:08+00:00 |
| cisco-sa-ise-os-injection-pxhksdm | Cisco Identity Services Engine Privilege Escalation Vulnerabilities | 2023-02-01T16:00:00+00:00 | 2023-02-01T16:00:00+00:00 |
| cisco-sa-iox-8whgn5dl | Cisco IOx Application Hosting Environment Command Injection Vulnerability | 2023-02-01T16:00:00+00:00 | 2023-06-01T15:34:21+00:00 |
| cisco-sa-cisco-pi-xss-pu6dnfd9 | Cisco Prime Infrastructure Reflected Cross-Site Scripting Vulnerability | 2023-02-01T16:00:00+00:00 | 2023-02-01T16:00:00+00:00 |
| cisco-sa-npe-hardening-dkel83jp | Identifying and Mitigating Security Exposures When Using No Payload Encryption Images with Existing Cryptographic Configuration | 2023-01-18T16:00:00+00:00 | 2023-01-18T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-wbmqqnjh | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2023-01-18T16:00:00+00:00 | 2023-02-13T15:30:30+00:00 |
| cisco-sa-cucm-sql-rppczr8n | Cisco Unified Communications Manager SQL Injection Vulnerability | 2023-01-18T16:00:00+00:00 | 2023-01-18T16:00:00+00:00 |
| cisco-sa-sbr042-multi-vuln-ej76pke5 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2025-03-07T17:33:55+00:00 |
| cisco-sa-sb-rv-rcedos-7hjp74jd | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution and Denial of Service Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-12T16:07:37+00:00 |
| cisco-sa-rv-cmd-exe-n47kjqle | Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-roomos-dkjgfgrk | Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2023-03-07T14:21:36+00:00 |
| cisco-sa-nso-path-trvsl-zjbemkzg | Cisco Network Services Orchestrator Path Traversal Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-02-03T17:57:30+00:00 |
| cisco-sa-lldp-memlk-mcoecpt | Cisco Webex Room Phone and Cisco Webex Share Link Layer Discovery Protocol Memory Leak Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-ip-phone-auth-bypass-psqxzrpr | Cisco IP Phone 7800 and 8800 Series Web Management Interface Authentication Bypass Vulnerability | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| cisco-sa-ind-fzyvjjtg | Cisco Industrial Network Director Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2023-01-11T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-23241 | audit: add missing syscalls to read class | 2026-03-02T00:00:00.000Z | 2026-03-20T14:36:27.000Z |
| msrc_cve-2026-23240 | tls: Fix race condition in tls_sw_cancel_work_tx() | 2026-03-02T00:00:00.000Z | 2026-03-31T14:44:27.000Z |
| msrc_cve-2026-23239 | espintcp: Fix race condition in espintcp_close() | 2026-03-02T00:00:00.000Z | 2026-03-26T01:37:49.000Z |
| msrc_cve-2026-23238 | romfs: check sb_set_blocksize() return value | 2026-03-02T00:00:00.000Z | 2026-03-31T01:38:52.000Z |
| msrc_cve-2026-23237 | platform/x86: classmate-laptop: Add missing NULL pointer checks | 2026-03-02T00:00:00.000Z | 2026-03-31T01:38:44.000Z |
| msrc_cve-2026-23236 | fbdev: smscufx: properly copy ioctl memory to kernelspace | 2026-03-02T00:00:00.000Z | 2026-03-31T01:38:02.000Z |
| msrc_cve-2026-23235 | f2fs: fix out-of-bounds access in sysfs attribute read/write | 2026-03-02T00:00:00.000Z | 2026-03-27T01:40:18.000Z |
| msrc_cve-2026-23234 | f2fs: fix to avoid UAF in f2fs_write_end_io() | 2026-03-02T00:00:00.000Z | 2026-03-27T01:40:12.000Z |
| msrc_cve-2026-23233 | f2fs: fix to avoid mapping wrong physical block for swapfile | 2026-03-02T00:00:00.000Z | 2026-03-27T01:40:23.000Z |
| msrc_cve-2026-23231 | netfilter: nf_tables: fix use-after-free in nf_tables_addchain() | 2026-03-02T00:00:00.000Z | 2026-03-31T14:41:12.000Z |
| msrc_cve-2026-2297 | SourcelessFileLoader does not use io.open_code() | 2026-03-02T00:00:00.000Z | 2026-03-31T14:41:37.000Z |
| msrc_cve-2026-21717 | CVE-2026-21717 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:39:45.000Z |
| msrc_cve-2026-21716 | CVE-2026-21716 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:40:06.000Z |
| msrc_cve-2026-21715 | CVE-2026-21715 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:40:20.000Z |
| msrc_cve-2026-21714 | CVE-2026-21714 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:39:59.000Z |
| msrc_cve-2026-21713 | CVE-2026-21713 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:39:52.000Z |
| msrc_cve-2026-21712 | CVE-2026-21712 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:39:07.000Z |
| msrc_cve-2026-21711 | CVE-2026-21711 | 2026-03-02T00:00:00.000Z | 2026-04-14T14:43:40.000Z |
| msrc_cve-2026-21710 | CVE-2026-21710 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:40:13.000Z |
| msrc_cve-2026-2100 | P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters | 2026-03-02T00:00:00.000Z | 2026-04-03T01:39:20.000Z |
| msrc_cve-2026-1965 | bad reuse of HTTP Negotiate connection | 2026-03-02T00:00:00.000Z | 2026-04-14T14:40:28.000Z |
| msrc_cve-2026-1519 | Excessive NSEC3 iterations cause high CPU load during insecure delegation validation | 2026-03-02T00:00:00.000Z | 2026-04-15T01:38:23.000Z |
| msrc_cve-2026-1005 | Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path | 2026-03-02T00:00:00.000Z | 2026-03-31T15:14:58.000Z |
| msrc_cve-2026-0968 | Libssh: libssh: denial of service due to malformed sftp message | 2026-03-02T00:00:00.000Z | 2026-04-14T14:44:45.000Z |
| msrc_cve-2026-0967 | Libssh: libssh: denial of service via inefficient regular expression processing | 2026-03-02T00:00:00.000Z | 2026-04-14T14:43:05.000Z |
| msrc_cve-2026-0966 | Libssh: buffer underflow in ssh_get_hexa() on invalid input | 2026-03-02T00:00:00.000Z | 2026-04-14T14:43:10.000Z |
| msrc_cve-2026-0965 | Libssh: libssh: denial of service via improper configuration file handling | 2026-03-02T00:00:00.000Z | 2026-04-14T14:42:59.000Z |
| msrc_cve-2026-0964 | Libssh: improper sanitation of paths received from scp servers | 2026-03-02T00:00:00.000Z | 2026-04-14T14:43:16.000Z |
| msrc_cve-2026-0819 | Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes | 2026-03-02T00:00:00.000Z | 2026-03-31T15:13:00.000Z |
| msrc_cve-2026-0038 | In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | 2026-03-02T00:00:00.000Z | 2026-03-05T01:09:10.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0397 | Kwetsbaarheden verholpen in Microsoft System Center | 2024-10-08T20:02:55.249830Z | 2024-10-08T20:02:55.249830Z |
| ncsc-2024-0396 | Kwetsbaarheden verholpen in Microsoft Office | 2024-10-08T20:00:57.142744Z | 2024-10-08T20:00:57.142744Z |
| ncsc-2024-0395 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2024-10-08T19:59:28.385237Z | 2024-10-08T19:59:28.385237Z |
| ncsc-2024-0394 | Kwetsbaarheden verholpen in Microsoft SQL Server Power BI Report Server | 2024-10-08T19:58:15.839568Z | 2024-10-08T19:58:15.839568Z |
| ncsc-2024-0393 | Kwetsbaarheden verholpen in Microsoft Azure componenten | 2024-10-08T19:57:08.426643Z | 2024-10-08T19:57:08.426643Z |
| ncsc-2024-0392 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-10-08T19:55:28.028805Z | 2024-10-08T19:55:28.028805Z |
| ncsc-2024-0391 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2024-10-08T13:55:56.095947Z | 2024-10-08T13:55:56.095947Z |
| ncsc-2024-0390 | Kwetsbaarheden verholpen in Siemens producten | 2024-10-08T13:49:37.486004Z | 2024-10-08T13:49:37.486004Z |
| ncsc-2024-0389 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-10-04T10:11:42.963861Z | 2024-10-04T10:11:42.963861Z |
| ncsc-2024-0388 | Kwetsbaarheden verholpen in Draytek Vigor routers | 2024-10-04T09:52:41.945864Z | 2024-10-04T09:52:41.945864Z |
| ncsc-2024-0387 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2024-10-02T09:07:21.241299Z | 2024-10-02T09:07:21.241299Z |
| ncsc-2024-0386 | Kwetsbaarheden verholpen in Zimbra | 2024-10-02T07:02:43.365395Z | 2024-10-10T12:50:25.238470Z |
| ncsc-2024-0385 | Kwetsbaarheden verholpen in Foxit PDF Editor en PDF Reader | 2024-09-30T09:41:20.295003Z | 2024-09-30T09:41:20.295003Z |
| ncsc-2024-0384 | Kwetsbaarheden ontdekt in CUPS | 2024-09-27T08:45:53.798141Z | 2024-10-02T08:45:09.718543Z |
| ncsc-2024-0383 | Kwetsbaarheden verholpen in Aruba Networks ArubaOS | 2024-09-26T09:00:05.136774Z | 2024-09-26T09:00:05.136774Z |
| ncsc-2024-0382 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-09-26T08:52:21.805564Z | 2024-09-26T08:52:21.805564Z |
| ncsc-2024-0381 | Kwetsbaarheden verholpen in Apple MacOS | 2024-09-26T08:48:34.451990Z | 2024-09-26T08:48:34.451990Z |
| ncsc-2024-0380 | Kwetsbaarheid verholpen in pgAdmin | 2024-09-24T06:36:30.438686Z | 2024-09-24T07:31:32.768856Z |
| ncsc-2024-0379 | Kwetsbaarheden verholpen in Ivanti Cloud Services Appliance | 2024-09-20T07:57:16.737952Z | 2024-09-20T07:57:16.737952Z |
| ncsc-2024-0378 | Kwetsbaarheden verholpen in SAP producten | 2024-09-19T11:37:39.757598Z | 2024-09-19T11:37:39.757598Z |
| ncsc-2024-0377 | Kwetsbaarheden verholpen in VMware vCenter Server | 2024-09-18T11:28:43.103000Z | 2024-11-19T09:56:16.772512Z |
| ncsc-2024-0376 | Kwetsbaarheden verholpen in Docker Desktop | 2024-09-18T11:25:01.116345Z | 2024-09-18T11:25:01.116345Z |
| ncsc-2024-0375 | Kwetsbaarheid verholpen in Rockwell Automation FactoryTalk View Site | 2024-09-13T08:52:23.143943Z | 2024-09-13T08:52:23.143943Z |
| ncsc-2024-0374 | Kwetsbaarheid verholpen in Rockwell Automation ThinManager | 2024-09-13T08:46:33.745410Z | 2024-09-13T08:46:33.745410Z |
| ncsc-2024-0373 | Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition | 2024-09-13T08:44:24.003809Z | 2024-09-13T08:44:24.003809Z |
| ncsc-2024-0372 | Kwetsbaarheden verholpen in Citrix Workspace App for Windows | 2024-09-13T08:42:05.882665Z | 2024-09-13T08:42:05.882665Z |
| ncsc-2024-0371 | Kwetsbaarheden verholpen in Cisco IOS XR | 2024-09-13T08:40:26.656280Z | 2024-09-13T08:40:26.656280Z |
| ncsc-2024-0370 | Kwetsbaarheden verholpen in Solarwinds Access Rights Manager | 2024-09-13T08:30:38.806820Z | 2024-09-13T08:30:38.806820Z |
| ncsc-2024-0369 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager | 2024-09-11T09:39:20.224400Z | 2024-09-13T17:00:35.302643Z |
| ncsc-2024-0368 | Kwetsbaarheden verholpen in Adobe producten | 2024-09-11T09:31:21.515977Z | 2024-09-11T09:31:21.515977Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10042-1 | mcphost-0.32.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10041-1 | libsoup-2_4-1-2.74.3-14.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10040-1 | libsoup-3_0-0-3.6.5-11.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10039-1 | kernel-devel-6.18.5-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10038-1 | fluidsynth-2.5.2-2.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10037-1 | firefox-esr-140.7.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10036-1 | cockpit-repos-4.6-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:20018-1 | Security update for glib2 | 2026-01-12T11:52:23Z | 2026-01-12T11:52:23Z |
| opensuse-su-2026:20014-1 | Security update for MozillaFirefox | 2026-01-12T11:35:13Z | 2026-01-12T11:35:13Z |
| opensuse-su-2026:20017-1 | Security update for libpng16 | 2026-01-12T11:14:46Z | 2026-01-12T11:14:46Z |
| opensuse-su-2026:20016-1 | Security update for libmicrohttpd | 2026-01-12T11:14:46Z | 2026-01-12T11:14:46Z |
| opensuse-su-2026:20015-1 | Security update for python-tornado6 | 2026-01-12T10:29:37Z | 2026-01-12T10:29:37Z |
| opensuse-su-2026:10035-1 | teleport-17.7.13-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10034-1 | python311-Authlib-1.6.6-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10033-1 | libtasn1-6-32bit-4.21.0-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10032-1 | libpcap-devel-1.10.6-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10031-1 | kubelogin-0.2.14-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10030-1 | k6-1.5.0-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10029-1 | istioctl-1.28.2-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10028-1 | ffmpeg-7-7.1.3-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10027-1 | ffmpeg-4-4.4.6-10.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:20022-1 | Security update for matio | 2026-01-11T17:15:13Z | 2026-01-11T17:15:13Z |
| opensuse-su-2026:20013-1 | Security update for avahi | 2026-01-11T16:54:00Z | 2026-01-11T16:54:00Z |
| opensuse-su-2026:20020-1 | Security update for chromium | 2026-01-10T02:17:54Z | 2026-01-10T02:17:54Z |
| opensuse-su-2026:10026-1 | python311-urllib3-2.6.2-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10025-1 | python311-aiohttp-3.13.3-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10024-1 | libsoup-2_4-1-2.74.3-13.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10023-1 | libsoup-3_0-0-3.6.5-10.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10022-1 | libsodium-devel-1.0.21-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10021-1 | coredns-1.14.0-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:3962 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2026-03-06T13:33:22+00:00 | 2026-04-13T16:00:32+00:00 |
| rhsa-2026:3960 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update | 2026-03-06T11:24:38+00:00 | 2026-04-14T07:58:51+00:00 |
| rhsa-2026:3958 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update | 2026-03-06T11:00:27+00:00 | 2026-04-14T07:58:53+00:00 |
| rhsa-2026:3941 | Red Hat Security Advisory: nfs-utils security update | 2026-03-06T08:17:05+00:00 | 2026-04-02T16:38:44+00:00 |
| rhsa-2026:3939 | Red Hat Security Advisory: nfs-utils security update | 2026-03-06T08:09:49+00:00 | 2026-04-02T16:38:09+00:00 |
| rhsa-2026:3942 | Red Hat Security Advisory: nfs-utils security update | 2026-03-06T08:05:30+00:00 | 2026-04-02T16:38:45+00:00 |
| rhsa-2026:3957 | Red Hat Security Advisory: Red Hat AMQ Broker 7.13.4 release and security update | 2026-03-06T06:15:07+00:00 | 2026-04-10T09:52:27+00:00 |
| rhsa-2026:3955 | Red Hat Security Advisory: Red Hat AMQ Broker 7.12.6 release and security update | 2026-03-05T21:59:31+00:00 | 2026-04-10T09:52:26+00:00 |
| rhsa-2026:3951 | Red Hat Security Advisory: JBoss EAP XP 5.0 Update 4.0 release. See references for release notes. | 2026-03-05T20:00:33+00:00 | 2026-03-30T15:53:00+00:00 |
| rhsa-2026:3940 | Red Hat Security Advisory: nfs-utils security update | 2026-03-05T19:12:37+00:00 | 2026-04-02T16:38:44+00:00 |
| rhsa-2026:3948 | Red Hat Security Advisory: Red Hat build of Keycloak 26.4.10 Images Update | 2026-03-05T19:09:49+00:00 | 2026-03-24T11:30:12+00:00 |
| rhsa-2026:3947 | Red Hat Security Advisory: Red Hat build of Keycloak 26.4.10 Update | 2026-03-05T19:07:56+00:00 | 2026-03-24T11:30:07+00:00 |
| rhsa-2026:3938 | Red Hat Security Advisory: nfs-utils security update | 2026-03-05T19:05:37+00:00 | 2026-04-02T16:38:51+00:00 |
| rhsa-2026:3929 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T17:28:44+00:00 | 2026-04-14T09:46:38+00:00 |
| rhsa-2026:3930 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T17:14:14+00:00 | 2026-04-14T09:46:38+00:00 |
| rhsa-2026:3928 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T16:42:20+00:00 | 2026-04-14T09:46:38+00:00 |
| rhsa-2026:3931 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T16:12:11+00:00 | 2026-04-14T09:46:39+00:00 |
| rhsa-2026:3932 | Red Hat Security Advisory: git-lfs security update | 2026-03-05T16:08:17+00:00 | 2026-04-14T09:46:39+00:00 |
| rhsa-2026:3925 | Red Hat Security Advisory: Red Hat build of Keycloak 26.2.14 Images Update | 2026-03-05T15:35:42+00:00 | 2026-03-18T03:19:01+00:00 |
| rhsa-2026:3926 | Red Hat Security Advisory: Red Hat build of Keycloak 26.2.14 Update | 2026-03-05T15:33:39+00:00 | 2026-03-18T03:19:01+00:00 |
| rhsa-2026:3896 | Red Hat Security Advisory: postgresql:15 security update | 2026-03-05T14:46:07+00:00 | 2026-04-10T21:16:27+00:00 |
| rhsa-2026:3900 | Red Hat Security Advisory: python3.12 security update | 2026-03-05T14:44:37+00:00 | 2026-03-18T16:34:44+00:00 |
| rhsa-2026:3897 | Red Hat Security Advisory: python3.12 security update | 2026-03-05T14:43:18+00:00 | 2026-03-18T16:34:44+00:00 |
| rhsa-2026:3898 | Red Hat Security Advisory: osbuild-composer security update | 2026-03-05T14:35:19+00:00 | 2026-04-14T07:58:48+00:00 |
| rhsa-2026:3889 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update | 2026-03-05T13:39:46+00:00 | 2026-04-01T13:37:40+00:00 |
| rhsa-2026:3891 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update | 2026-03-05T13:38:01+00:00 | 2026-04-01T13:37:40+00:00 |
| rhsa-2026:3892 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update | 2026-03-05T13:34:15+00:00 | 2026-04-01T13:37:41+00:00 |
| rhsa-2026:3890 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14.4 for Spring Boot release. | 2026-03-05T13:32:44+00:00 | 2026-04-08T13:34:45+00:00 |
| rhsa-2026:3887 | Red Hat Security Advisory: postgresql16 security update | 2026-03-05T13:16:07+00:00 | 2026-04-10T21:16:27+00:00 |
| rhsa-2026:3886 | Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_92_1 security update | 2026-03-05T12:50:24+00:00 | 2026-03-18T03:18:46+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-431678 | SSA-431678: Denial of Service Vulnerability in SIMATIC S7 CPU Families | 2020-02-11T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-270778 | SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software | 2020-02-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-629512 | SSA-629512: Local Privilege Escalation Vulnerability in TIA Portal | 2020-01-14T00:00:00Z | 2022-08-09T00:00:00Z |
| ssa-443566 | SSA-443566: Authentication Bypass in SCALANCE X Switches Families | 2020-01-14T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-761617 | SSA-761617: Authentication Bypass and Information Disclosure Vulnerabilities in SiNVR/SiVMS Video Server | 2019-12-10T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-618620 | SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices | 2019-12-10T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-273799 | SSA-273799: Message Integrity Protection Bypass Vulnerability in SIMATIC Products | 2019-12-10T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-473245 | SSA-473245: Denial of Service Vulnerability in Profinet Devices | 2019-10-08T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-462066 | SSA-462066: Vulnerability known as TCP SACK PANIC in Industrial Products | 2019-09-10T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-232418 | SSA-232418: Vulnerabilities in SIMATIC S7-1200 and SIMATIC S7-1500 CPU Families | 2019-08-13T00:00:00Z | 2022-08-09T00:00:00Z |
| ssa-100232 | SSA-100232: Denial-of-Service vulnerability in SCALANCE X Switches | 2019-08-13T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-480230 | SSA-480230: Denial of Service Vulnerability in Webserver of Industrial Products | 2019-04-09T00:00:00Z | 2023-05-09T00:00:00Z |
| ssa-557804 | SSA-557804: Mirror Port Isolation Vulnerability in SCALANCE X Switches | 2019-03-12T00:00:00Z | 2022-07-12T00:00:00Z |
| ssa-113131 | SSA-113131: Denial of Service Vulnerabilities in SIMATIC S7-400 CPUs | 2018-11-13T00:00:00Z | 2023-05-09T00:00:00Z |
| ssa-480829 | SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches | 2018-06-12T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-348629 | SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software | 2018-03-27T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-592007 | SSA-592007: Denial of Service Vulnerability in Industrial Products | 2018-03-20T00:00:00Z | 2023-05-09T00:00:00Z |
| ssa-203306 | SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families | 2018-03-08T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-824231 | SSA-824231: Unauthenticated Firmware Upload Vulnerability in Desigo PX Controllers | 2018-01-24T00:00:00Z | 2023-06-13T00:00:00Z |
| ssa-346262 | SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products | 2017-11-23T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-148078 | SSA-148078: Multiple Vulnerabilities in APOGEE/TALON Field Panels | 2017-10-12T00:00:00Z | 2022-06-14T00:00:00Z |
| ssa-535640 | SSA-535640: Vulnerability in Industrial Products | 2017-08-30T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-293562 | SSA-293562: Denial of Service Vulnerabilities in PROFINET DCP Implementation of Industrial Products | 2017-05-08T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-603476 | SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs | 2016-11-21T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-672373 | SSA-672373: Vulnerabilities in CP 1543-1 before V2.0.28 | 2016-11-18T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-763427 | SSA-763427: Authentication Bypass Vulnerability in SIMATIC CP and TIM Devices | 2015-11-27T00:00:00Z | 2025-07-08T00:00:00Z |
| ssa-783261 | SSA-783261: Denial of Service Vulnerability in Automation License Manager (ALM) Before V5.2 | 2012-12-12T00:00:00Z | 2026-02-10T00:00:00Z |
| ssa-279823 | SSA-279823: Cross-Site Scripting Vulnerability in SIMATIC S7-1200 CPU V2/V3 Before V3.0.2 | 2012-10-08T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-240718 | SSA-240718: Insecure Storage of HTTPS CA Certificate in SIMATIC S7-1200 CPU V2 | 2012-09-13T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-130874 | SSA-130874: Buffer Overflow Vulnerability in SCALANCE X Switches | 2012-04-05T00:00:00Z | 2026-02-10T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0916-1 | Security update for gvfs | 2026-03-18T07:46:59Z | 2026-03-18T07:46:59Z |
| suse-su-2026:0915-1 | Security update for 389-ds | 2026-03-18T07:46:51Z | 2026-03-18T07:46:51Z |
| suse-su-2026:0914-1 | Security update for 389-ds | 2026-03-18T07:46:33Z | 2026-03-18T07:46:33Z |
| suse-su-2026:0913-1 | Security update for 389-ds | 2026-03-18T07:46:25Z | 2026-03-18T07:46:25Z |
| suse-su-2026:0911-1 | Security update for curl | 2026-03-17T19:56:50Z | 2026-03-17T19:56:50Z |
| suse-su-2026:0909-1 | Security update for container-suseconnect | 2026-03-17T17:34:33Z | 2026-03-17T17:34:33Z |
| suse-su-2026:0908-1 | Security update for xen | 2026-03-17T16:32:40Z | 2026-03-17T16:32:40Z |
| suse-su-2026:0907-1 | Security update for kea | 2026-03-17T16:32:34Z | 2026-03-17T16:32:34Z |
| suse-su-2026:20750-1 | Security update for libpng16 | 2026-03-17T14:49:13Z | 2026-03-17T14:49:13Z |
| suse-su-2026:20748-1 | Security update for python-maturin | 2026-03-17T12:49:51Z | 2026-03-17T12:49:51Z |
| suse-su-2026:0903-1 | Security update for curl | 2026-03-17T10:04:47Z | 2026-03-17T10:04:47Z |
| suse-su-2026:0902-1 | Security update for freerdp | 2026-03-17T09:38:11Z | 2026-03-17T09:38:11Z |
| suse-su-2026:20732-1 | Security update for vim | 2026-03-17T09:23:26Z | 2026-03-17T09:23:26Z |
| suse-su-2026:20744-1 | Security update for rust-keylime | 2026-03-16T15:29:27Z | 2026-03-16T15:29:27Z |
| suse-su-2026:20730-1 | Security update for freetype2 | 2026-03-16T13:23:56Z | 2026-03-16T13:23:56Z |
| suse-su-2026:20726-1 | Security update for freetype2 | 2026-03-16T09:25:21Z | 2026-03-16T09:25:21Z |
| suse-su-2026:0900-1 | Security update for python-black | 2026-03-13T18:33:38Z | 2026-03-13T18:33:38Z |
| suse-su-2026:0898-1 | Security update for libpng15 | 2026-03-13T15:26:30Z | 2026-03-13T15:26:30Z |
| suse-su-2026:0897-1 | Security update for python3 | 2026-03-13T15:26:14Z | 2026-03-13T15:26:14Z |
| suse-su-2026:0896-1 | Security update for glibc | 2026-03-13T15:25:13Z | 2026-03-13T15:25:13Z |
| suse-su-2026:0894-1 | Security update for libsoup | 2026-03-13T13:48:31Z | 2026-03-13T13:48:31Z |
| suse-su-2026:20693-1 | Security update for qemu | 2026-03-13T10:41:36Z | 2026-03-13T10:41:36Z |
| suse-su-2026:20727-1 | Security update for libsoup | 2026-03-13T09:07:20Z | 2026-03-13T09:07:20Z |
| suse-su-2026:0892-1 | Security update for busybox | 2026-03-13T09:05:08Z | 2026-03-13T09:05:08Z |
| suse-su-2026:0891-1 | Security update for python | 2026-03-13T09:04:54Z | 2026-03-13T09:04:54Z |
| suse-su-2026:0890-1 | Security update for tomcat10 | 2026-03-13T08:57:08Z | 2026-03-13T08:57:08Z |
| suse-su-2026:0889-1 | Security update for qemu | 2026-03-13T07:58:55Z | 2026-03-13T07:58:55Z |
| suse-su-2026:0888-1 | Security update for dnsdist | 2026-03-13T07:08:03Z | 2026-03-13T07:08:03Z |
| suse-su-2026:0886-1 | Security update for libsoup2 | 2026-03-12T14:50:32Z | 2026-03-12T14:50:32Z |
| suse-su-2026:0885-1 | Security update for curl | 2026-03-12T14:50:17Z | 2026-03-12T14:50:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:19103 | Moderate: kernel-rt security update | 2025-10-27T00:00:00Z | 2025-10-28T07:51:20Z |
| alsa-2025:19102 | Moderate: kernel security update | 2025-10-27T00:00:00Z | 2025-10-28T07:55:37Z |
| alsa-2025:18983 | Important: thunderbird security update | 2025-10-22T00:00:00Z | 2025-10-27T08:16:53Z |
| alsa-2025:18824 | Moderate: java-21-openjdk security update | 2025-10-22T00:00:00Z | 2025-10-30T07:18:58Z |
| alsa-2025:18821 | Moderate: java-17-openjdk security update | 2025-10-22T00:00:00Z | 2025-10-30T07:23:24Z |
| alsa-2025:18815 | Moderate: java-1.8.0-openjdk security update | 2025-10-22T00:00:00Z | 2025-10-30T12:06:21Z |
| alsa-2025:18321 | Important: thunderbird security update | 2025-10-20T00:00:00Z | 2025-10-22T10:38:17Z |
| alsa-2025:18320 | Important: thunderbird security update | 2025-10-20T00:00:00Z | 2025-10-22T10:33:35Z |
| alsa-2025:18318 | Moderate: kernel security update | 2025-10-20T00:00:00Z | 2025-10-22T10:27:59Z |
| alsa-2025:18298 | Moderate: kernel-rt security update | 2025-10-20T00:00:00Z | 2025-10-20T12:08:20Z |
| alsa-2025:18297 | Moderate: kernel security update | 2025-10-20T00:00:00Z | 2025-10-20T12:01:40Z |
| alsa-2025:18286 | Moderate: libssh security update | 2025-10-20T00:00:00Z | 2025-10-20T11:55:49Z |
| alsa-2025:18285 | Important: firefox security update | 2025-10-20T00:00:00Z | 2025-10-20T11:50:28Z |
| alsa-2025:18281 | Moderate: kernel security update | 2025-10-20T00:00:00Z | 2025-10-22T10:16:53Z |
| alsa-2025:18275 | Moderate: libssh security update | 2025-10-16T00:00:00Z | 2025-10-17T08:04:25Z |
| alsa-2025:18231 | Moderate: libssh security update | 2025-10-16T00:00:00Z | 2025-10-16T14:22:59Z |
| alsa-2025:18183 | Important: libsoup3 security update | 2025-10-15T00:00:00Z | 2025-10-16T08:01:45Z |
| alsa-2025:18155 | Important: firefox security update | 2025-10-15T00:00:00Z | 2025-10-20T12:31:42Z |
| alsa-2025:18154 | Important: firefox security update | 2025-10-15T00:00:00Z | 2025-10-20T12:30:08Z |
| alsa-2025:18153 | Important: .NET 9.0 security update | 2025-10-15T00:00:00Z | 2025-11-03T08:44:34Z |
| alsa-2025:18152 | Important: .NET 8.0 security update | 2025-10-15T00:00:00Z | 2025-11-03T08:46:41Z |
| alsa-2025:18151 | Important: .NET 9.0 security update | 2025-10-15T00:00:00Z | 2025-11-03T08:48:44Z |
| alsa-2025:18150 | Important: .NET 9.0 security update | 2025-10-15T00:00:00Z | 2025-11-03T08:55:12Z |
| alsa-2025:18149 | Important: .NET 8.0 security update | 2025-10-15T00:00:00Z | 2025-10-20T12:28:15Z |
| alsa-2025:18148 | Important: .NET 8.0 security update | 2025-10-15T00:00:00Z | 2025-10-20T12:11:02Z |
| alsa-2025:18097 | Important: webkit2gtk3 security update | 2025-10-15T00:00:00Z | 2025-10-23T12:50:53Z |
| alsa-2025:18070 | Important: webkit2gtk3 security update | 2025-10-15T00:00:00Z | 2025-11-03T08:51:57Z |
| alsa-2025:17913 | Moderate: vim security update | 2025-10-14T00:00:00Z | 2025-10-14T13:33:05Z |
| alsa-2025:17812 | Moderate: kernel-rt security update | 2025-10-13T00:00:00Z | 2025-10-14T07:28:37Z |
| alsa-2025:17802 | Important: webkit2gtk3 security update | 2025-10-13T00:00:00Z | 2025-10-14T10:09:21Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-79 | Heap-double-free in supported_features | 2024-02-07T00:03:00.459996Z | 2024-02-07T00:03:00.460359Z |
| osv-2024-77 | Heap-use-after-free in xmlRemoveID | 2024-02-06T00:06:09.284671Z | 2024-02-06T00:06:09.285249Z |
| osv-2024-74 | Heap-buffer-overflow in hts_log | 2024-02-04T00:02:45.988846Z | 2024-04-29T11:31:45.626304Z |
| osv-2024-73 | Heap-buffer-overflow in pdf_finalize_string | 2024-02-04T00:02:39.648902Z | 2024-04-29T11:36:07.742568Z |
| osv-2024-72 | UNKNOWN READ in LLVMFuzzerRunDriver | 2024-02-03T00:04:56.169161Z | 2024-02-03T00:04:56.169853Z |
| osv-2024-68 | Heap-buffer-overflow in gsfdmx_probe_data | 2024-02-02T00:02:07.804929Z | 2024-04-18T14:26:13.767979Z |
| osv-2024-66 | Heap-buffer-overflow in mrb_memsearch | 2024-02-01T00:13:20.152510Z | 2024-02-14T14:19:50.489803Z |
| osv-2024-65 | Heap-buffer-overflow in mrb_memsearch | 2024-02-01T00:12:19.091201Z | 2024-02-14T14:19:46.707491Z |
| osv-2024-64 | Global-buffer-overflow in ReadVariantArrayBuiltInType | 2024-02-01T00:03:55.790847Z | 2024-02-06T14:18:25.113400Z |
| osv-2024-42 | Heap-double-free in dwg_free_common_entity_data | 2024-01-26T00:03:30.637411Z | 2024-04-27T14:26:04.198487Z |
| osv-2024-39 | Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32 | 2024-01-25T00:05:37.689031Z | 2024-04-29T11:31:05.900312Z |
| osv-2024-38 | Heap-buffer-overflow in json_HEADER | 2024-01-25T00:03:33.797633Z | 2024-04-27T14:25:53.641813Z |
| osv-2024-36 | Heap-use-after-free in LLVMFuzzerRunDriver | 2024-01-24T00:12:37.499127Z | 2024-01-24T00:12:37.499641Z |
| osv-2024-33 | Heap-buffer-overflow in ctxload_probe_data | 2024-01-24T00:05:37.532325Z | 2024-04-18T14:26:43.225909Z |
| osv-2024-30 | Heap-buffer-overflow in mrb_memsearch | 2024-01-22T00:05:20.803259Z | 2024-02-14T14:19:17.217387Z |
| osv-2024-29 | Heap-buffer-overflow in mrb_memsearch | 2024-01-22T00:01:33.424797Z | 2024-02-14T14:18:57.560129Z |
| osv-2024-28 | Security exception in java.base/java.util.Arrays.copyOf | 2024-01-21T00:12:30.613951Z | 2025-12-01T14:21:19.263844Z |
| osv-2024-25 | Stack-buffer-overflow in icu_75::PluralRuleParser::parse | 2024-01-21T00:00:16.253854Z | 2024-04-16T15:30:31.262505Z |
| osv-2024-24 | Security exception in java.base/java.util.Arrays.copyOf | 2024-01-20T00:04:01.700018Z | 2024-03-13T14:21:08.789955Z |
| osv-2024-22 | Heap-use-after-free in ucl_hash_func | 2024-01-19T00:14:18.833531Z | 2024-07-16T04:35:26.847250Z |
| osv-2024-20 | Heap-buffer-overflow in bam_aux_get | 2024-01-19T00:05:05.917557Z | 2024-04-29T11:28:16.496002Z |
| osv-2024-18 | Heap-use-after-free in QPDF::read_xref | 2024-01-19T00:01:09.084916Z | 2025-01-10T05:03:37.159682Z |
| osv-2024-17 | Heap-use-after-free in iasecc_delete_file | 2024-01-17T00:12:20.698997Z | 2024-04-05T14:21:32.049652Z |
| osv-2024-10 | Heap-buffer-overflow in __string | 2024-01-12T00:12:45.528472Z | 2024-04-16T16:14:55.449018Z |
| osv-2024-9 | Stack-buffer-overflow in _canonicalize | 2024-01-11T00:04:20.734197Z | 2024-04-16T15:44:42.424488Z |
| osv-2024-7 | Heap-buffer-overflow in icu_75::Locale::Locale | 2024-01-07T00:11:45.064745Z | 2024-01-07T00:11:45.065397Z |
| osv-2024-6 | Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char> | 2024-01-06T00:11:05.929725Z | 2024-03-08T14:19:24.750958Z |
| osv-2024-4 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-01-04T00:13:53.974088Z | 2024-04-01T14:13:38.051217Z |
| osv-2024-3 | Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames | 2024-01-04T00:03:08.480968Z | 2024-04-17T16:20:49.591813Z |
| osv-2023-1382 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-01-01T00:12:36.633204Z | 2024-01-01T00:12:36.633589Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2022-0008 | Delegate functions are missing `Send` bound | 2022-01-02T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0004 | Stack overflow in rustc_serialize when parsing deeply nested JSON | 2022-01-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0134 | rental is unmaintained, author has moved on | 2021-12-27T12:00:00Z | 2022-03-06T11:02:04Z |
| rustsec-2021-0133 | cargo-download is unmaintained | 2021-12-25T12:00:00Z | 2021-12-25T18:20:22Z |
| rustsec-2021-0142 | dotenv is Unmaintained | 2021-12-24T12:00:00Z | 2022-08-30T19:40:13Z |
| rustsec-2021-0141 | dotenv is Unmaintained | 2021-12-24T12:00:00Z | 2022-08-30T19:40:13Z |
| rustsec-2021-0130 | Use after free in lru crate | 2021-12-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0132 | Integer overflow in the bundled Brotli C library | 2021-12-20T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2021-0131 | Integer overflow in the bundled Brotli C library | 2021-12-20T12:00:00Z | 2021-12-21T20:51:30Z |
| rustsec-2021-0129 | Invalid handling of `X509_verify_cert()` internal errors in libssl | 2021-12-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0128 | Incorrect Lifetime Bounds on Closures in `rusqlite` | 2021-12-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0153 | `encoding` is unmaintained | 2021-12-05T12:00:00Z | 2023-03-12T07:17:34Z |
| rustsec-2021-0155 | Use After Free in lucet-runtime | 2021-11-30T12:00:00Z | 2026-01-17T19:50:19Z |
| rustsec-2021-0126 | RustEmbed generated `get` method allows for directory traversal when reading files from disk | 2021-11-29T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0124 | Data race when sending and receiving after closing a `oneshot` channel | 2021-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0125 | Panic on incorrect date input to `simple_asn1` | 2021-11-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0123 | Converting `NSString` to a String Truncates at Null Bytes | 2021-11-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0122 | Generated code can read and write out of bounds in safe code | 2021-10-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0137 | sodiumoxide is deprecated | 2021-10-22T12:00:00Z | 2022-08-10T04:01:59Z |
| rustsec-2021-0120 | abomonation transmutes &T to and from &[u8] without sufficient constraints | 2021-10-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0138 | Incorrect use of `set_len` allows for un-initialized memory | 2021-10-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0121 | Non-aligned u32 read in Chacha20 encryption and decryption | 2021-10-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0144 | traitobject is Unmaintained | 2021-10-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0119 | Out-of-bounds write in nix::unistd::getgrouplist | 2021-09-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0115 | `#[zeroize(drop)]` doesn't implement `Drop` for `enum`s | 2021-09-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0114 | Aliased mutable references from `tls_rand` & `TlsWyRand` | 2021-09-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0110 | Multiple Vulnerabilities in Wasmtime | 2021-09-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0111 | Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state` | 2021-09-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0118 | `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets | 2021-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0117 | `DecimalArray` does not perform bound checks on accessing values and offsets | 2021-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2025-3950 | Exposure of Private Personal Information to an Unauthorized Actor in GitLab | 2026-01-13T09:08:23.763Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-13781 | Missing Authorization in GitLab | 2026-01-13T09:07:23.273Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-13772 | Missing Authorization in GitLab | 2026-01-13T09:07:21.509Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-13761 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-13T09:07:19.725Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-11246 | Insufficient Granularity of Access Control in GitLab | 2026-01-13T09:06:35.458Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-10569 | Allocation of Resources Without Limits or Throttling in GitLab | 2026-01-13T09:06:21.471Z | 2026-01-13T09:11:00.781Z |
| bit-virtualenv-2026-22702 | virtualenv Has TOCTOU Vulnerabilities in Directory Creation | 2026-01-13T08:53:06.703Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22597 | Ghost has SSRF via External Media Inliner | 2026-01-13T08:40:27.429Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22596 | Ghost has SQL Injection in Members Activity Feed | 2026-01-13T08:40:25.592Z | 2026-01-16T09:10:29.256Z |
| bit-ghost-2026-22595 | Ghost has Staff Token permission bypass | 2026-01-13T08:40:23.758Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22594 | Ghost has Staff 2FA bypass | 2026-01-13T08:40:22.071Z | 2026-01-13T09:11:00.781Z |
| bit-cosign-2026-22703 | Cosign verification accepts any valid Rekor entry under certain conditions | 2026-01-13T08:37:37.120Z | 2026-01-13T09:11:00.781Z |
| bit-php-2025-14180 | NULL Pointer Dereference in PDO quoting | 2026-01-08T11:48:33.482Z | 2026-01-08T12:08:29.041Z |
| bit-php-2025-14178 | Heap buffer overflow in array_merge() | 2026-01-08T11:48:32.142Z | 2026-01-26T15:09:56.435Z |
| bit-php-2025-14177 | Information Leak of Memory in getimagesize | 2026-01-08T11:48:30.537Z | 2026-01-08T12:08:29.041Z |
| bit-libphp-2025-14180 | NULL Pointer Dereference in PDO quoting | 2026-01-08T11:43:29.868Z | 2026-01-08T12:08:29.041Z |
| bit-libphp-2025-14178 | Heap buffer overflow in array_merge() | 2026-01-08T11:43:28.412Z | 2026-01-26T15:09:56.435Z |
| bit-libphp-2025-14177 | Information Leak of Memory in getimagesize | 2026-01-08T11:43:26.820Z | 2026-01-08T12:08:29.041Z |
| bit-discourse-2025-64528 | Users are able to find users by name even when `enable_names` is off | 2026-01-08T11:40:33.666Z | 2026-03-25T09:15:17.567Z |
| bit-composer-2025-67746 | Composer vulnerable to ANSI sequence injection | 2026-01-08T11:35:54.533Z | 2026-01-08T12:08:29.041Z |
| bit-gitea-2025-69413 | 2026-01-07T12:00:07.972Z | 2026-01-07T12:31:01.344Z | |
| bit-pytorch-2025-63396 | 2026-01-03T11:47:28.014Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68942 | 2026-01-03T11:37:48.385Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68941 | 2026-01-03T11:37:46.756Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68940 | 2026-01-03T11:37:45.335Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68939 | 2026-01-03T11:37:43.934Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68938 | 2026-01-03T11:37:42.629Z | 2026-01-03T12:07:32.193Z | |
| bit-pebble-2024-3250 | 2026-01-02T17:44:20.392Z | 2026-01-02T18:06:33.396Z | |
| bit-gitea-2025-68946 | 2026-01-01T11:37:50.117Z | 2026-01-01T12:06:33.381Z | |
| bit-gitea-2025-68945 | 2026-01-01T11:37:48.522Z | 2026-01-01T12:06:33.381Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-fs64938 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:24:53.185811Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hx78047 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:24:23.175483Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-jr37040 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:23:53.534475Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-tl71584 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:23:53.438748Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-el98016 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:23:23.257385Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gs02052 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:22:23.453780Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-cy03855 | tar | 2026-01-30T15:18:53.133348Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ns41924 | Within HostnameError | 2026-01-30T15:18:53.115636Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ts12850 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:17:53.937628Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rq53330 | Within HostnameError | 2026-01-30T15:17:53.658995Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rd08428 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:17:23.554517Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-uu56048 | Within HostnameError | 2026-01-30T15:16:53.077326Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ly33846 | Within HostnameError | 2026-01-30T15:16:23.051630Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oj41940 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:13:53.428815Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mu17611 | tar | 2026-01-30T15:13:23.048582Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-cr41732 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:12:53.150833Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-kc06686 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:10:53.141957Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fn26367 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:10:23.074072Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-pw33232 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:09:53.441606Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-il25782 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:09:53.055759Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-yd51202 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:09:23.124967Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gc72145 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:09:23.061580Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-yu60015 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:08:53.316314Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bl06950 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:08:23.121647Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-tf52804 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:08:23.107112Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fm00685 | Cancelling a query (e | 2026-01-30T15:07:53.091254Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hh74302 | Cancelling a query (e | 2026-01-30T15:07:53.076603Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-iw06531 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:07:23.455235Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ck72347 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:07:23.436298Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-su64392 | Cancelling a query (e | 2026-01-30T15:07:22.975031Z | 2026-01-29T18:58:54Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0978 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-07T00:00:00.000000 | 2025-11-07T00:00:00.000000 |
| certfr-2025-avi-0977 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-07T00:00:00.000000 | 2025-11-07T00:00:00.000000 |
| certfr-2025-avi-0976 | Multiples vulnérabilités dans Microsoft Edge | 2025-11-07T00:00:00.000000 | 2025-11-07T00:00:00.000000 |
| certfr-2025-avi-0975 | Vulnérabilité dans Elastic Defend | 2025-11-07T00:00:00.000000 | 2025-11-07T00:00:00.000000 |
| certfr-2025-avi-0974 | Multiples vulnérabilités dans Apple iOS et iPadOS | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0973 | Multiples vulnérabilités dans Google Chrome | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0972 | Multiples vulnérabilités dans Suricata | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0971 | Vulnérabilité dans Mattermost Server | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0970 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2025-11-06T00:00:00.000000 | 2026-01-23T00:00:00.000000 |
| certfr-2025-avi-0969 | Multiples vulnérabilités dans les produits VMware | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0968 | Multiples vulnérabilités dans les produits Cisco | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0967 | Multiples vulnérabilités dans les produits VMware | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| certfr-2025-avi-0966 | Multiples vulnérabilités dans les produits Microsoft | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| certfr-2025-avi-0965 | Multiples vulnérabilités dans MISP | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| certfr-2025-avi-0964 | Vulnérabilité dans Curl | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| certfr-2025-avi-0963 | Multiples vulnérabilités dans Google Android | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0962 | Vulnérabilité dans Dovecot | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0961 | Multiples vulnérabilités dans les produits Apple | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0960 | Multiples vulnérabilités dans VMware Tanzu | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0959 | Vulnérabilité dans Python | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0958 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0957 | Multiples vulnérabilités dans Moodle | 2025-11-03T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0956 | Multiples vulnérabilités dans MariaDB | 2025-11-03T00:00:00.000000 | 2025-11-03T00:00:00.000000 |
| certfr-2025-avi-0955 | Multiples vulnérabilités dans Microsoft Edge | 2025-11-03T00:00:00.000000 | 2025-11-03T00:00:00.000000 |
| certfr-2025-avi-0954 | Multiples vulnérabilités dans Liferay | 2025-11-03T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-0953 | Vulnérabilité dans Elastic Cloud Enterprise | 2025-11-03T00:00:00.000000 | 2025-11-03T00:00:00.000000 |
| certfr-2025-avi-0952 | Vulnérabilité dans Mattermost Server | 2025-11-03T00:00:00.000000 | 2025-11-03T00:00:00.000000 |
| certfr-2025-avi-0951 | Multiples vulnérabilités dans Axis OS | 2025-11-03T00:00:00.000000 | 2025-11-03T00:00:00.000000 |
| certfr-2025-avi-0950 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0949 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-001639 | Heap-based buffer overflow vulnerability in OMRON CX-Drive | 2023-04-25T14:31+09:00 | 2024-05-27T18:11+09:00 |
| jvndb-2023-000040 | WordPress Plugin "Appointment and Event Booking Calendar for WordPress - Amelia" vulnerable to cross-site scripting | 2023-04-24T13:41+09:00 | 2024-05-28T16:59+09:00 |
| jvndb-2023-000035 | Improper restriction of XML external entity references (XXE) in Shinseiyo Sogo Soft | 2023-04-19T14:49+09:00 | 2024-05-29T16:58+09:00 |
| jvndb-2023-000039 | WordPress plugin "LIQUID SPEECH BALLOON" vulnerable to cross-site request forgery | 2023-04-19T14:24+09:00 | 2024-05-28T16:56+09:00 |
| jvndb-2023-000038 | EC-CUBE plugin "NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)" vulnerable to authentication bypass | 2023-04-19T14:06+09:00 | 2024-05-30T15:11+09:00 |
| jvndb-2023-001534 | Security Issues in FINS protocol | 2023-04-18T13:58+09:00 | 2024-05-23T17:35+09:00 |
| jvndb-2023-000037 | Joruri Gw vulnerable to cross-site scripting | 2023-04-17T14:19+09:00 | 2024-05-30T16:19+09:00 |
| jvndb-2023-000036 | API server of TONE Family vulnerable to authentication bypass using an alternate path | 2023-04-17T14:04+09:00 | 2023-04-17T14:04+09:00 |
| jvndb-2023-000034 | JB Inquiry form vulnerable to exposure of private personal information to an unauthorized actor | 2023-04-14T15:48+09:00 | 2024-05-29T16:44+09:00 |
| jvndb-2023-000033 | Trend Micro Security may insecurely load Dynamic Link Libraries | 2023-04-14T15:44+09:00 | 2024-04-26T17:48+09:00 |
| jvndb-2023-001493 | Multiple mobile printing apps for Android vulnerable to improper intent handling | 2023-04-13T11:09+09:00 | 2024-05-30T15:48+09:00 |
| jvndb-2023-001492 | Vulnerability in JP1/VERITAS | 2023-04-12T15:01+09:00 | 2023-04-12T15:01+09:00 |
| jvndb-2023-001411 | Yokogawa Electric CENTUM series vulnerable to cleartext storage of sensitive information | 2023-04-06T14:59+09:00 | 2024-05-29T18:23+09:00 |
| jvndb-2023-000032 | Improper restriction of XML external entity references (XXE) in National land numerical information data conversion tool | 2023-04-04T15:22+09:00 | 2024-06-04T15:56+09:00 |
| jvndb-2023-000031 | Multiple vulnerabilities in JustSystems products | 2023-04-04T15:22+09:00 | 2024-05-29T17:32+09:00 |
| jvndb-2023-001402 | JTEKT ELECTRONIC Screen Creator Advance 2 vulnerable to improper restriction of operations within the bounds of a memory buffer | 2023-04-03T16:24+09:00 | 2024-06-04T17:15+09:00 |
| jvndb-2023-001400 | CONPROSYS HMI System(CHS) vulnerable to SQL injection | 2023-04-03T16:19+09:00 | 2023-04-03T16:19+09:00 |
| jvndb-2023-000030 | HAProxy vulnerable to HTTP request/response smuggling | 2023-03-31T15:54+09:00 | 2024-06-04T16:17+09:00 |
| jvndb-2023-000029 | Multiple vulnerabilities in Seiko Solutions SkyBridge MB-A100/A110/A200/A130 SkySpider MB-R210 | 2023-03-31T15:54+09:00 | 2024-05-27T17:08+09:00 |
| jvndb-2023-000028 | baserCMS vulnerable to arbitrary file uploads | 2023-03-27T13:39+09:00 | 2024-06-06T17:31+09:00 |
| jvndb-2023-000027 | ELECOM WAB-MAT registers its windows service executable with an unquoted file path | 2023-03-24T14:35+09:00 | 2024-06-03T17:36+09:00 |
| jvndb-2023-001320 | Multiple vulnerabilities in Contec CONPROSYS IoT Gateway products | 2023-03-22T13:41+09:00 | 2024-06-04T17:00+09:00 |
| jvndb-2023-000025 | TP-Link T2600G-28SQ uses vulnerable SSH host keys | 2023-03-17T12:27+09:00 | 2024-06-04T16:58+09:00 |
| jvndb-2023-000024 | Android App "Wolt Delivery: Food and more" uses a hard-coded API key for an external service | 2023-03-13T12:28+09:00 | 2024-06-03T17:15+09:00 |
| jvndb-2023-001308 | Multiple vulnerabilities in Buffalo network devices | 2023-03-08T15:12+09:00 | 2024-06-04T16:42+09:00 |
| jvndb-2023-000022 | Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config | 2023-03-08T15:09+09:00 | 2024-06-03T17:36+09:00 |
| jvndb-2023-001304 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2023-03-06T15:31+09:00 | 2024-06-07T16:39+09:00 |
| jvndb-2023-000023 | Multiple vulnerabilities in PostgreSQL extension module pg_ivm | 2023-03-06T15:22+09:00 | 2024-06-10T16:41+09:00 |
| jvndb-2023-001291 | Multiple vulnerabilities in Trend Micro Maximum Security | 2023-03-03T11:10+09:00 | 2024-06-13T17:06+09:00 |
| jvndb-2023-001292 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2023-03-02T17:33+09:00 | 2024-06-07T16:59+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-16403 | HCL AION信息泄露漏洞(CNVD-2026-16403) | 2026-02-11 | 2026-04-09 |
| cnvd-2026-16402 | HCL AION存在未明漏洞(CNVD-2026-16402) | 2026-02-11 | 2026-04-09 |
| cnvd-2026-16401 | HCL AION跨站请求伪造漏洞 | 2026-02-11 | 2026-04-08 |
| cnvd-2026-16400 | HCL AION跨站脚本漏洞 | 2026-02-11 | 2026-04-08 |
| cnvd-2026-16399 | HCL AION存在未明漏洞(CNVD-2026-16399) | 2026-02-11 | 2026-04-08 |
| cnvd-2026-16398 | HCL AION命令注入漏洞 | 2026-02-11 | 2026-04-08 |
| cnvd-2026-16397 | HCL AION信息泄露漏洞(CNVD-2026-16397) | 2026-02-11 | 2026-04-08 |
| cnvd-2026-16067 | WordPress插件ELEX WordPress HelpDesk & Customer Ticketing System存在未明漏洞 | 2026-02-11 | 2026-04-03 |
| cnvd-2026-15249 | TOTOLINK WA300操作系统命令注入漏洞 | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14679 | IBM Db2拒绝服务漏洞(CNVD-2026-14679) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14678 | IBM Db2拒绝服务漏洞(CNVD-2026-14678) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14677 | IBM Db2存在未明漏洞(CNVD-2026-14677) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14676 | IBM Db2拒绝服务漏洞(CNVD-2026-14676) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14675 | IBM Db2拒绝服务漏洞(CNVD-2026-14675) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14674 | IBM Db2拒绝服务漏洞(CNVD-2026-14674) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14673 | IBM Db2拒绝服务漏洞(CNVD-2026-14673) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14672 | IBM Db2拒绝服务漏洞(CNVD-2026-14672) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14671 | IBM Db2拒绝服务漏洞(CNVD-2026-14671) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14670 | IBM Db2拒绝服务漏洞(CNVD-2026-14670) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14669 | IBM Db2拒绝服务漏洞(CNVD-2026-14669) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14668 | IBM Db2拒绝服务漏洞(CNVD-2026-14668) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14667 | IBM Db2拒绝服务漏洞(CNVD-2026-14667) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14666 | IBM Db2拒绝服务漏洞(CNVD-2026-14666) | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14665 | IBM Db2 Big SQL on Cloud Pak for Data资源管理错误漏洞 | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14653 | Rockwell Automation Studio 5000 Logix Designer代码问题漏洞 | 2026-02-11 | 2026-03-24 |
| cnvd-2026-14409 | UTT 520W goform/formIpGroupConfig文件缓冲区溢出漏洞 | 2026-02-11 | 2026-03-20 |
| cnvd-2026-13789 | IBM Db2资源管理错误漏洞(CNVD-2026-13789) | 2026-02-11 | 2026-03-16 |
| cnvd-2026-13788 | IBM Concert跨站脚本漏洞(CNVD-2026-13788) | 2026-02-11 | 2026-03-16 |
| cnvd-2026-13787 | IBM Concert访问控制错误漏洞(CNVD-2026-13787) | 2026-02-11 | 2026-03-16 |
| cnvd-2026-13431 | OpenClaw访问控制错误漏洞(CNVD-2026-13431) | 2026-02-11 | 2026-03-11 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-01036 | Уязвимость микропрограммного обеспечения беспроводных Wi-Fi маршрутизаторов Tenda W30E, с… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01035 | Уязвимость приложения для обмена мгновенными сообщениями Mattermost, связанная с использо… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01034 | Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с использов… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01033 | Уязвимость микропрограммного обеспечения маршрутизаторов Tenda W30E, связанная с раскрыти… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01032 | Уязвимость веб-интерфейса управления микропрограммного обеспечения маршрутизаторов Tenda … | 30.01.2026 | 30.01.2026 |
| bdu:2026-01031 | Уязвимость веб-интерфейса управления микропрограммного обеспечения маршрутизаторов Tenda … | 30.01.2026 | 30.01.2026 |
| bdu:2026-01030 | Уязвимость менеджера пакетов pnpm, связанная с неверным ограничением имени пути к каталог… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01029 | Уязвимость функций fs.statSync() и fs.readFileSync() сценария store/cafs/src/addFilesFrom… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01028 | Уязвимость функции path.join() менеджера пакетов pnpm, позволяющая нарушителю получить не… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01027 | Уязвимость системы для управления внутренними сервисами и автоматизации бизнес-процессов … | 30.01.2026 | 13.02.2026 |
| bdu:2026-01026 | Уязвимость административной панели платформы управления мобильными устройствами Telpo MDM… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01025 | Уязвимость пользовательского интерфейса платформы управления мобильными устройствами Telp… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01024 | Уязвимость библиотеки клиентских инструментов для платформы мониторинга sentry-sdk, позво… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01023 | Уязвимость демона RGW системы хранения данных Ceph, позволяющая нарушителю вызвать отказ … | 30.01.2026 | 30.01.2026 |
| bdu:2026-01022 | Уязвимость утилиты qemu-img агента для взаимодействия между системой Ironic и физическим … | 30.01.2026 | 30.01.2026 |
| bdu:2026-01021 | Уязвимость библиотеки клиентских инструментов для платформы мониторинга sentry-sdk, позво… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01020 | Уязвимость JWT-библиотеки Jose4j, связанная с неправильной защитой токенов безопасности, … | 30.01.2026 | 30.01.2026 |
| bdu:2026-01019 | Уязвимость ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | 30.01.2026 | 30.01.2026 |
| bdu:2026-01018 | Уязвимость ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | 30.01.2026 | 30.01.2026 |
| bdu:2026-01017 | Уязвимость ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код | 30.01.2026 | 16.02.2026 |
| bdu:2026-01016 | Уязвимость сервера протокола MCP codehooks-mcp-server, связанная с непринятием мер по ней… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01015 | Уязвимость микропрограммного обеспечения IP-камер Reolink WiFi, связанная с незащищённым … | 30.01.2026 | 30.01.2026 |
| bdu:2026-01014 | Уязвимость информационной системы openSIS, связанная с непринятием мер по защите структур… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01013 | Уязвимость компонента Custom Protocol Bluetooth-чипов TWS-наушников Airoha Technology, по… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01012 | Уязвимость компонента BR/EDR Bluetooth-чипов TWS-наушников Airoha Technology, позволяющая… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01011 | Уязвимость службы GATT Bluetooth-чипов TWS-наушников Airoha Technology, связанная с отсут… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01010 | Уязвимость корпоративной системы управления электронной почтой Zimbra Collaboration Suite… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01009 | Уязвимость модуля TDDP микропрограммного обеспечения маршрутизаторов TP-Link Archer C20 и… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01008 | Уязвимость установщика Epson Web Installer микропрограммного обеспечения принтеров и скан… | 30.01.2026 | 30.01.2026 |
| bdu:2026-01007 | Уязвимость компонента Server Infrastructure системы управления взаимоотношениями с клиент… | 30.01.2026 | 30.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201912-0579 | A logic issue existed in the handling of synchronous page loads. This issue was addressed… | 2026-04-10T21:50:08.097000Z |
| var-201903-0418 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2026-04-10T21:48:50.408000Z |
| var-201108-0150 | Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… | 2026-04-10T21:48:42.447000Z |
| var-201912-1044 | xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak… | 2026-04-10T21:48:40.454000Z |
| var-201009-0230 | bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attac… | 2026-04-10T21:48:36.242000Z |
| var-200904-0817 | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS … | 2026-04-10T21:47:03.093000Z |
| var-201804-1162 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2026-04-10T21:46:55.639000Z |
| var-202109-1804 | A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocate… | 2026-04-10T21:46:55.194000Z |
| var-201504-0478 | The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement… | 2026-04-10T21:46:54.664000Z |
| var-202009-0037 | A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP… | 2026-04-10T21:46:54.505000Z |
| var-201210-0133 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-04-10T21:46:53.797000Z |
| var-200905-0505 | Array index error in the insertItemBefore method in WebKit, as used in Apple Safari befor… | 2026-04-10T21:46:53.357000Z |
| var-201912-0497 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-04-10T21:46:52.469000Z |
| var-200507-0034 | Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers… | 2026-04-10T21:46:52.386000Z |
| var-200701-0036 | The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cau… | 2026-04-10T21:46:50.123000Z |
| var-201912-0578 | A memory corruption issue was addressed with improved input validation. This issue is fix… | 2026-04-10T21:46:49.962000Z |
| var-201912-0639 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-04-10T21:46:49.262000Z |
| var-201912-0604 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-04-10T21:46:49.030000Z |
| var-201904-0985 | SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remot… | 2026-04-10T21:46:48.517000Z |
| var-200808-0011 | Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when … | 2026-04-10T21:46:31.521000Z |
| var-201904-0744 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-04-10T21:46:31.358000Z |
| var-201912-0606 | An input validation issue was addressed with improved input validation. This issue is fix… | 2026-04-10T21:46:05.705000Z |
| var-200609-1378 | Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and … | 2026-04-10T21:45:01.461000Z |
| var-200701-0516 | Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denia… | 2026-04-10T21:45:00.783000Z |
| var-202102-1488 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique… | 2026-04-10T21:45:00.714000Z |
| var-202109-1368 | A type confusion issue was addressed with improved state handling. This issue is fixed in… | 2026-04-10T21:45:00.103000Z |
| var-201912-0501 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-04-10T21:44:53.638000Z |
| var-202212-2075 | An out-of-bounds read in Organization Specific TLV was found in various versions of Openv… | 2026-04-10T21:44:51.362000Z |
| var-202006-0946 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a m… | 2026-04-10T21:44:50.876000Z |
| var-201302-0248 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-04-10T21:43:41.610000Z |