Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-26717
4.8 (3.1)
An issue in OpenFUN Richie (LMS) in src/richie/ap… n/a
n/a
2026-02-25T00:00:00.000Z 2026-02-26T19:11:04.934Z
CVE-2025-69771
9.6 (3.1)
An arbitrary file upload vulnerability in the sub… n/a
n/a
2026-02-25T00:00:00.000Z 2026-02-26T19:36:16.836Z
CVE-2026-3134
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
itsourcecode News Portal Project edit-category.php sql… itsourcecode
News Portal Project
2026-02-24T23:32:11.537Z 2026-02-27T18:54:52.791Z
CVE-2026-3133
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
itsourcecode Document Management System Login loging.p… itsourcecode
Document Management System
2026-02-24T23:32:08.553Z 2026-02-27T18:54:25.889Z
CVE-2026-26351
4.8 (4.0)
GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php GetSimpleCMS-CE
GetSimpleCMS-CE
2026-02-24T22:05:54.420Z 2026-02-27T20:54:05.464Z
CVE-2026-27117
5.5 (3.1)
bit7z has a path traversal vulnerability rikyoz
bit7z
2026-02-24T21:46:12.714Z 2026-02-26T21:33:40.678Z
CVE-2026-27593
9.3 (3.1)
Statamic is vulnerable to account takeover via passwor… statamic
cms
2026-02-24T21:38:17.354Z 2026-02-27T20:56:07.561Z
CVE-2026-27572
6.9 (4.0)
Wasmtime can panic when adding excessive fields to a `… bytecodealliance
wasmtime
2026-02-24T21:31:50.186Z 2026-02-27T20:55:29.879Z
CVE-2026-27204
6.9 (4.0)
Wasmtime WASI implementations are vulnerable to guest-… bytecodealliance
wasmtime
2026-02-24T21:23:47.007Z 2026-02-27T20:54:48.839Z
CVE-2026-27195
6.9 (4.0)
Wasmtime is vulnerable to panic when dropping a `[Type… bytecodealliance
wasmtime
2026-02-24T21:15:20.366Z 2026-02-24T21:36:54.122Z
CVE-2026-25899
7.5 (3.1)
Fiber is Vulnerable to Denial of Service via Flash Coo… gofiber
fiber
2026-02-24T21:11:17.804Z 2026-02-24T21:37:33.970Z
CVE-2026-25891
7.7 (4.0)
Fiber has an Arbitrary File Read in Static Middleware … gofiber
fiber
2026-02-24T21:08:48.675Z 2026-02-24T21:39:11.118Z
CVE-2026-25882
5.5 (4.0)
Fiber has a Denial of Service Vulnerability via Route … gofiber
fiber
2026-02-24T21:05:28.211Z 2026-02-24T21:39:51.170Z
CVE-2026-22553
9.8 (3.1)
9.3 (4.0)
InSAT MasterSCADA BUK-TS OS Command Injection InSAT
MasterSCADA BUK-TS
2026-02-24T20:56:14.099Z 2026-02-26T19:39:01.753Z
CVE-2026-21410
9.8 (3.1)
9.3 (4.0)
InSAT MasterSCADA BUK-TS SQL Injection InSAT
MasterSCADA BUK-TS
2026-02-24T20:53:55.150Z 2026-02-26T19:41:40.457Z
CVE-2025-46320
6.1 (3.1)
A cross-site scripting (XSS) vulnerability in a F… Claris
FileMaker Server
2026-02-24T20:30:26.139Z 2026-02-24T21:19:06.285Z
CVE-2026-24443
8.6 (4.0)
EventSentry < 6.0.1.20 Web Reports Unverified Password… NETIKUS.NET ltd
EventSentry
2026-02-24T20:14:44.688Z 2026-02-24T21:40:48.632Z
CVE-2026-23859
2.7 (3.1)
Dell Wyse Management Suite, versions prior to WMS… Dell
Wyse Management Suite
2026-02-24T19:35:02.937Z 2026-02-24T21:41:09.368Z
CVE-2026-23858
5.4 (3.1)
Dell Wyse Management Suite, versions prior to WMS… Dell
Wyse Management Suite
2026-02-24T19:31:31.325Z 2026-02-24T21:45:53.723Z
CVE-2026-22766
7.2 (3.1)
Dell Wyse Management Suite, versions prior to WMS… Dell
Wyse Management Suite
2026-02-24T19:28:14.566Z 2026-02-26T14:44:07.365Z
CVE-2026-22765
8.8 (3.1)
Dell Wyse Management Suite, versions prior to WMS… Dell
Wyse Management Suite
2026-02-24T19:24:21.497Z 2026-02-26T14:44:07.504Z
CVE-2026-3131
6.5 (3.1)
Improper access control in multiple DVLS REST AP… Devolutions
Server
2026-02-24T19:01:29.096Z 2026-02-26T16:09:13.047Z
CVE-2026-1768
4.3 (3.1)
A permission cache poisoning vulnerability in Dev… Devolutions
Devolutions Server
2026-02-24T19:01:07.640Z 2026-02-26T16:12:31.144Z
CVE-2026-27477
4.6 (4.0)
Mastodon has SSRF via unvalidated FASP Provider base_url mastodon
mastodon
2026-02-24T19:00:20.590Z 2026-02-26T19:29:12.052Z
CVE-2025-1789
5.8 (4.0)
Local privilege escalation in Genetec Update Serv… Genetec Inc.
Genetec Update Service
2026-02-24T18:47:24.913Z 2026-02-26T14:44:07.658Z
CVE-2025-1787
5.8 (4.0)
Local admin could to leak information from the Ge… Genetec Inc.
Genetec Update Service
2026-02-24T18:44:36.705Z 2026-02-26T14:44:07.839Z
CVE-2026-24241
4.3 (3.1)
NVIDIA Delegated Licensing Service for all applia… NVIDIA
DLS component of NVIDIA License System
2026-02-24T18:42:56.703Z 2026-02-24T21:26:40.416Z
CVE-2025-33181
7.3 (3.1)
NVIDIA Cumulus Linux and NVOS products contain a … NVIDIA
Cumulus Linux GA
2026-02-24T18:42:04.490Z 2026-02-24T21:29:14.387Z
CVE-2025-33180
8 (3.1)
NVIDIA Cumulus Linux and NVOS products contain a … NVIDIA
Cumulus Linux GA
2026-02-24T18:41:48.632Z 2026-02-24T21:31:41.482Z
CVE-2025-33179
8 (3.1)
NVIDIA Cumulus Linux and NVOS products contain a … NVIDIA
Cumulus Linux GA
2026-02-24T18:41:32.821Z 2026-02-26T19:31:35.173Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-27606
8.8 (4.0)
Rollup 4 has Arbitrary File Write via Path Traversal rollup
rollup
2026-02-25T02:08:06.682Z 2026-02-25T20:10:29.816Z
CVE-2026-27595
9.9 (4.0)
Parse Dashboard has incomplete authentication on AI Ag… parse-community
parse-dashboard
2026-02-25T02:21:33.428Z 2026-02-27T17:14:07.067Z
CVE-2026-25135
4.5 (3.1)
OpenEMR's location resource for Group.$export operatio… openemr
openemr
2026-02-25T02:02:14.203Z 2026-02-25T20:17:35.710Z
CVE-2025-5781
5.2 (3.1)
Information Exposure Vulnerability in Hitachi Configur… Hitachi
Hitachi Ops Center API Configuration Manager
2026-02-25T03:01:21.623Z 2026-02-26T17:00:34.754Z
CVE-2026-2914
8.5 (4.0)
CyberArk Endpoint Privilege Manager Agent version… CyberArk Software, a Palo Alto Networks Company
Endpoint Privilege Manager Agent
2026-02-25T01:33:05.657Z 2026-02-26T21:42:22.714Z
CVE-2026-25131
8.8 (3.1)
OpenEMR has Broken Access Control in Procedures Config… openemr
openemr
2026-02-25T01:55:43.778Z 2026-02-25T20:34:41.500Z
CVE-2026-25127
7 (4.0)
OpenEMR has Broken Access Control on Care Coordination… openemr
openemr
2026-02-25T01:53:15.570Z 2026-02-25T20:44:14.545Z
CVE-2026-25124
6.5 (3.1)
OpenEMR has Broken Access Control in Report/Clients/Me… openemr
openemr
2026-02-25T01:50:22.146Z 2026-02-25T20:50:25.100Z
CVE-2026-24896
6.5 (3.1)
OpenEMR has Broken Access Control that allows unauthor… openemr
openemr
2026-02-25T01:47:59.765Z 2026-02-25T20:58:20.711Z
CVE-2026-24849
10 (3.1)
OpenEMR Arbitrary File Read Vulnerability openemr
openemr
2026-02-25T01:44:30.584Z 2026-02-25T21:05:01.567Z
CVE-2026-24847
6.1 (3.1)
OpenEMR has Open Redirect in Eye Exam Form openemr
openemr
2026-02-25T01:34:35.364Z 2026-02-25T21:08:26.424Z
CVE-2026-21443
1.2 (4.0)
OpenEMR allows inconsistent escaping of translation fu… openemr
openemr
2026-02-25T01:23:22.052Z 2026-02-25T21:15:31.995Z
CVE-2025-69231
8.7 (3.1)
OpenEMR has a Stored XSS in GAD-7 Form that Enables Se… openemr
openemr
2026-02-25T01:18:14.722Z 2026-02-27T17:25:25.132Z
CVE-2025-68277
7.2 (4.0)
OpenEMR allows links sent via Secure Messaging to be o… openemr
openemr
2026-02-25T01:13:28.531Z 2026-02-27T17:27:36.039Z
CVE-2025-67752
8.1 (3.1)
OpenEMR Has Disabled SSL Certificate Verification in H… openemr
openemr
2026-02-25T01:09:20.946Z 2026-02-27T17:30:42.203Z
CVE-2026-3137
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
CodeAstro Food Ordering System food_ordering.exe stack… CodeAstro
Food Ordering System
2026-02-25T00:32:07.501Z 2026-02-27T17:31:16.374Z
CVE-2026-3135
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
itsourcecode News Portal Project add-category.php sql … itsourcecode
News Portal Project
2026-02-25T00:02:08.161Z 2026-02-26T20:57:10.132Z
CVE-2026-27598
7.1 (4.0)
Dagu: Path traversal in DAG creation allows arbitrary … dagu-org
dagu
2026-02-25T00:27:40.654Z 2026-02-26T21:02:19.359Z
CVE-2025-67491
8.5 (4.0)
OpenEMR has Stored XSS in ub04 helper openemr
openemr
2026-02-25T00:31:11.369Z 2026-02-27T17:32:18.289Z
CVE-2026-3134
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
itsourcecode News Portal Project edit-category.php sql… itsourcecode
News Portal Project
2026-02-24T23:32:11.537Z 2026-02-27T18:54:52.791Z
CVE-2026-3133
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
itsourcecode Document Management System Login loging.p… itsourcecode
Document Management System
2026-02-24T23:32:08.553Z 2026-02-27T18:54:25.889Z
CVE-2026-26351
4.8 (4.0)
GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php GetSimpleCMS-CE
GetSimpleCMS-CE
2026-02-24T22:05:54.420Z 2026-02-27T20:54:05.464Z
CVE-2026-27593
9.3 (3.1)
Statamic is vulnerable to account takeover via passwor… statamic
cms
2026-02-24T21:38:17.354Z 2026-02-27T20:56:07.561Z
CVE-2026-27572
6.9 (4.0)
Wasmtime can panic when adding excessive fields to a `… bytecodealliance
wasmtime
2026-02-24T21:31:50.186Z 2026-02-27T20:55:29.879Z
CVE-2026-27204
6.9 (4.0)
Wasmtime WASI implementations are vulnerable to guest-… bytecodealliance
wasmtime
2026-02-24T21:23:47.007Z 2026-02-27T20:54:48.839Z
CVE-2026-27195
6.9 (4.0)
Wasmtime is vulnerable to panic when dropping a `[Type… bytecodealliance
wasmtime
2026-02-24T21:15:20.366Z 2026-02-24T21:36:54.122Z
CVE-2026-27117
5.5 (3.1)
bit7z has a path traversal vulnerability rikyoz
bit7z
2026-02-24T21:46:12.714Z 2026-02-26T21:33:40.678Z
CVE-2026-25899
7.5 (3.1)
Fiber is Vulnerable to Denial of Service via Flash Coo… gofiber
fiber
2026-02-24T21:11:17.804Z 2026-02-24T21:37:33.970Z
CVE-2026-25891
7.7 (4.0)
Fiber has an Arbitrary File Read in Static Middleware … gofiber
fiber
2026-02-24T21:08:48.675Z 2026-02-24T21:39:11.118Z
CVE-2026-25882
5.5 (4.0)
Fiber has a Denial of Service Vulnerability via Route … gofiber
fiber
2026-02-24T21:05:28.211Z 2026-02-24T21:39:51.170Z
ID Severity Description Published Updated
ghsa-gvxg-9hqx-f4rg
5.3 (4.0)
Apache Superset allows privileged users to conduct error-based SQL Injection 2026-02-24T15:30:30Z 2026-02-26T15:28:27Z
ghsa-48m2-v2r8-h23m
5.3 (4.0)
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine 2026-02-24T15:30:30Z 2026-02-26T15:28:10Z
ghsa-3m2g-v7jf-7fxc
7.1 (4.0)
Apache Superset Improper Authorization allows low-privileged users to bypass access controls 2026-02-24T15:30:30Z 2026-02-26T15:28:38Z
ghsa-266v-99c5-7x8c
9.3 (4.0)
Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection. An unauthenticated remote … 2026-02-24T15:30:30Z 2026-02-24T15:30:30Z
ghsa-gm37-qx7w-p258
5.3 (3.1)
ImageMagick: Possible memory leak in ASHLAR encoder 2026-02-24T15:30:16Z 2026-02-24T15:30:16Z
ghsa-jv4p-gjwq-9r2j
5.1 (3.1)
ImageMagick: Out of bounds read in multiple coders read raw pixel data 2026-02-24T15:29:46Z 2026-02-24T15:29:47Z
ghsa-pqgj-2p96-rx85
7.5 (3.1)
ImageMagick: Infinite loop vulnerability when parsing a PCD file 2026-02-24T15:29:12Z 2026-02-24T15:29:12Z
ghsa-wg3g-gvx5-2pmv
5.3 (3.1)
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS 2026-02-24T15:28:17Z 2026-02-24T15:28:17Z
ghsa-96pc-27rx-pr36
7.5 (3.1)
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression 2026-02-24T15:27:28Z 2026-02-24T15:27:28Z
ghsa-x7c5-fjpp-2mcc
7.8 (3.1)
6.8 (4.0)
An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker… 2026-02-24T12:31:40Z 2026-02-27T18:31:01Z
ghsa-r837-hpv7-pc2f
8.4 (3.1)
Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table 2026-02-24T12:31:40Z 2026-02-25T19:20:56Z
ghsa-8r55-rv5w-6pfm
6.5 (3.1)
Apache Airflow exposes sensitive information in its log files 2026-02-24T12:31:40Z 2026-02-25T19:21:33Z
ghsa-x366-cwf7-x9gv
9.1 (3.1)
A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious acto… 2026-02-24T09:31:21Z 2026-02-24T09:31:21Z
ghsa-vh45-gfxf-vr42
9.1 (3.1)
An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gi… 2026-02-24T09:31:21Z 2026-02-24T09:31:21Z
ghsa-p4xj-mrqw-g3f3
7.7 (3.1)
When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider (I… 2026-02-24T09:31:21Z 2026-02-24T09:31:21Z
ghsa-jjx5-vcwr-cwfq
9.1 (3.1)
A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the a… 2026-02-24T09:31:21Z 2026-02-24T09:31:21Z
ghsa-hwvv-m8xc-26x2
9.4 (4.0)
A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows au… 2026-02-24T09:31:21Z 2026-02-24T09:31:21Z
ghsa-8cmg-xf32-xmvr
9.1 (3.1)
A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the a… 2026-02-24T09:31:21Z 2026-02-24T09:31:21Z
ghsa-wgpr-jxrq-2m57
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in itsourcecode Document Management System 1.0. Affected… 2026-02-24T06:31:30Z 2026-02-24T06:31:30Z
ghsa-rx2f-c6vf-gmg2
6.3 (3.1)
2.1 (4.0)
A flaw has been found in HummerRisk up to 1.5.0. This vulnerability affects the function fixedComma… 2026-02-24T06:31:30Z 2026-02-24T06:31:30Z
ghsa-p86v-p9g7-fffw
6.3 (3.1)
2.1 (4.0)
A vulnerability has been found in HummerRisk up to 1.5.0. This issue affects the function extractTa… 2026-02-24T06:31:30Z 2026-02-24T06:31:30Z
ghsa-mcwp-v5q8-7gcp
8.8 (3.1)
The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated… 2026-02-24T06:31:30Z 2026-02-24T18:31:01Z
ghsa-fwq6-2c4r-9g8h
7.3 (3.1)
5.5 (4.0)
A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unkn… 2026-02-24T06:31:30Z 2026-02-24T06:31:30Z
ghsa-cxmx-5wwh-7p77
4.3 (3.1)
2.1 (4.0)
A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulne… 2026-02-24T06:31:30Z 2026-02-24T06:31:31Z
ghsa-83rq-88jr-634x
3.8 (3.1)
2.0 (4.0)
A vulnerability was determined in MuYuCMS 2.7. Affected is the function delete_dir_file of the file… 2026-02-24T06:31:30Z 2026-02-24T06:31:30Z
ghsa-3grc-c2rj-3qj5
4.3 (3.1)
Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to acc… 2026-02-24T06:31:30Z 2026-02-24T06:31:30Z
ghsa-xqg5-5x64-93r9
6.3 (3.1)
2.1 (4.0)
A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the funct… 2026-02-24T03:30:20Z 2026-02-24T03:30:20Z
ghsa-x6c4-87pg-m84f
7.2 (3.1)
A post-authentication command injection vulnerability in the TR-369 certificate download CGI progra… 2026-02-24T03:30:20Z 2026-02-24T03:30:20Z
ghsa-w3pf-j6xr-fj68
7.3 (3.1)
5.5 (4.0)
A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterc… 2026-02-24T03:30:20Z 2026-02-24T03:30:20Z
ghsa-vq86-4hgw-x482
6.3 (3.1)
2.1 (4.0)
A vulnerability was detected in HummerRisk up to 1.5.0. This affects the function CommandUtils.comm… 2026-02-24T03:30:20Z 2026-02-24T03:30:20Z
ID Severity Description Package Published Updated
pysec-2023-31
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. modoboa 2023-01-26T23:15:00Z 2023-05-04T03:49:46.722786Z
pysec-2023-30
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. modoboa 2023-01-26T22:15:00Z 2023-05-04T03:49:46.669829Z
pysec-2023-21
LTI Consumer XBlock implements the consumer side of the LTI specification enabling integr… lti-consumer-xblock 2023-01-26T21:18:00Z 2023-05-04T03:49:46.153608Z
pysec-2023-38
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the e… onnx 2023-01-26T21:15:00Z 2023-05-04T03:49:47.105559Z
pysec-2023-1
Adyen has utility methods for validating notification HMAC signatures. The is_valid_hmac … adyen 2023-01-24T00:00:00Z 2023-01-24T00:00:00Z
pysec-2023-284
6.5 (3.1)
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. modoboa 2023-01-23T14:15:00+00:00 2024-11-21T14:22:55.160710+00:00
pysec-2023-290
8.8 (3.1)
An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaP… pyassimp 2023-01-20T19:15:00Z 2024-11-21T14:22:59.461917Z
pysec-2023-283
4.3 (3.1)
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. modoboa 2023-01-19T18:15:00+00:00 2024-11-21T14:22:55.105976+00:00
pysec-2023-282
6.5 (3.1)
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. modoboa 2023-01-19T09:15:00+00:00 2024-11-21T14:22:55.051300+00:00
pysec-2023-25
mechanize, a library for automatically interacting with HTTP web servers, contains a regu… mechanize 2023-01-17T22:15:00Z 2023-05-04T03:49:46.357040Z
pysec-2023-14
** UNSUPPPORTED WHEN ASSIGNED **** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classifie… django-ucamlookup 2023-01-05T09:15:00Z 2023-05-04T03:49:45.271028Z
pysec-2023-19
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to… ldapcherry 2023-01-05T08:15:00Z 2023-05-04T03:49:46.049521Z
pysec-2023-4
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid… apache-dolphinscheduler 2023-01-04T15:15:00Z 2023-05-04T03:49:44.740629Z
pysec-2022-43010
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. rdiffweb 2022-12-27T15:15:00Z 2023-05-04T03:49:47.879238Z
pysec-2022-43009
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… rdiffweb 2022-12-27T15:15:00Z 2023-05-04T03:49:47.817934Z
pysec-2022-43008
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5. rdiffweb 2022-12-27T15:15:00Z 2023-05-04T03:49:47.756258Z
pysec-2022-43007
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) i… rdiffweb 2022-12-27T15:15:00Z 2023-05-04T03:49:47.700028Z
pysec-2022-43006
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5. rdiffweb 2022-12-27T15:15:00Z 2023-05-04T03:49:47.643896Z
pysec-2022-43005
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. rdiffweb 2022-12-27T15:15:00Z 2023-05-04T03:49:47.587629Z
pysec-2022-43014
A vulnerability, which was classified as problematic, has been found in cocagne pysrp up … srp 2022-12-27T11:15:00Z 2023-05-04T03:49:48.139972Z
pysec-2022-43013
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an … slixmpp 2022-12-25T05:15:00Z 2023-05-04T04:29:29.928881Z
pysec-2022-43017
An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows … wheel 2022-12-23T00:15:00Z 2023-05-04T03:49:49.039483Z
pysec-2022-43012
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cau… setuptools 2022-12-23T00:15:00Z 2023-05-04T04:29:29.797493Z
pysec-2022-42991
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers … future 2022-12-23T00:15:00Z 2023-05-04T03:49:45.660760Z
pysec-2022-43004
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. rdiffweb 2022-12-22T02:15:00Z 2023-05-04T03:49:47.530589Z
pysec-2022-43003
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4. rdiffweb 2022-12-22T01:15:00Z 2023-05-04T03:49:47.471955Z
pysec-2022-42988
A vulnerability classified as problematic was found in collective.contact.widget up to 1.… collective-contact-widget 2022-12-21T22:15:00Z 2023-05-04T04:29:24.049172Z
pysec-2022-43151
9.1 (3.1)
Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPat… pypatchelf 2022-12-19T22:15:00Z 2024-11-25T22:09:33.909779Z
pysec-2022-43144
9.1 (3.1)
Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPat… patchelf 2022-12-19T22:15:00Z 2024-11-25T18:35:18.357593Z
pysec-2022-43016
A vulnerability, which was classified as problematic, has been found in UBI Reader up to … ubi-reader 2022-12-17T02:15:00Z 2023-05-04T04:29:30.474506Z
ID Description Type
ID Description Updated
ID Description Published Updated
mal-2026-484 Malicious code in translation-note (npm) 2026-01-23T01:13:12Z 2026-01-28T08:26:42Z
mal-2026-483 Malicious code in public-site-cms-ui (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-482 Malicious code in public-site-boostmoney-ui (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-481 Malicious code in oasis-os-provider-messaging (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-480 Malicious code in kwp-shared-components-production-system (npm) 2026-01-23T01:13:12Z 2026-01-27T08:27:32Z
mal-2026-479 Malicious code in integromat-ui (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-478 Malicious code in domino-elements (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-477 Malicious code in bttr-devs (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-476 Malicious code in @transaction-list/transaction-list-xs (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-475 Malicious code in @transaction-list/transaction-list-sm (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-474 Malicious code in @transaction-list/transaction-list-md (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-473 Malicious code in @transaction-list/transaction-list-lg (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-472 Malicious code in @landing-platform/data-bridge (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-471 Malicious code in @acqui-calm-library/acqui-hero-carousel-section (npm) 2026-01-23T01:13:12Z 2026-01-23T01:13:12Z
mal-2026-470 Malicious code in urlsssser (PyPI) 2026-01-22T21:34:39Z 2026-02-26T09:50:46Z
mal-2026-469 Malicious code in cflashfiles (PyPI) 2026-01-22T20:58:55Z 2026-01-22T21:00:29Z
mal-2026-468 Malicious code in urlsser (PyPI) 2026-01-22T20:16:29Z 2026-02-26T09:50:46Z
mal-2026-466 Malicious code in uuu8lgd (npm) 2026-01-22T17:51:00Z 2026-01-23T01:39:04Z
mal-2026-467 Malicious code in icloud-recovery (PyPI) 2026-01-22T17:20:06Z 2026-01-22T17:20:06Z
mal-2026-465 Malicious code in @ikeacn/utils (npm) 2026-01-22T15:49:16Z 2026-01-23T01:38:58Z
mal-2026-464 Malicious code in @ikeacn/icons (npm) 2026-01-22T15:49:16Z 2026-01-23T01:38:58Z
mal-2026-461 Malicious code in @corp-front/corporate-filter-company-select (npm) 2026-01-22T12:24:27Z 2026-01-23T01:38:58Z
mal-2026-462 Malicious code in @ikeacn/ui (npm) 2026-01-22T12:23:23Z 2026-01-23T01:38:58Z
mal-2026-463 Malicious code in corporate-blocking (npm) 2026-01-22T12:17:58Z 2026-01-23T01:38:59Z
mal-2026-460 Malicious code in pay-by-bank-dashboard-server (npm) 2026-01-22T11:37:45Z 2026-01-27T03:00:14Z
mal-2026-459 Malicious code in un112 (npm) 2026-01-22T09:55:45Z 2026-01-23T01:39:04Z
mal-2026-456 Malicious code in @mailpoet/eslint-config (npm) 2026-01-22T09:07:20Z 2026-01-23T01:38:58Z
mal-2026-455 Malicious code in @mailpoet/components (npm) 2026-01-22T09:07:20Z 2026-01-23T01:38:58Z
mal-2026-454 Malicious code in @mailpoet/component (npm) 2026-01-22T09:07:20Z 2026-01-23T01:38:58Z
mal-2026-453 Malicious code in @fortinet/fortigate-autoscale (npm) 2026-01-22T09:07:20Z 2026-01-23T01:38:58Z
ID Description Published Updated
wid-sec-w-2025-2433 Google Cloud Platform (Envoy Proxy):: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-28T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2432 Red Hat Ansible Automation Platform: Mehrere Schwachstellen 2025-10-28T23:00:00.000+00:00 2025-12-11T23:00:00.000+00:00
wid-sec-w-2025-2431 Linux Kernel: Mehrere Schwachstellen 2025-10-28T23:00:00.000+00:00 2026-02-23T23:00:00.000+00:00
wid-sec-w-2025-2430 Linux Kernel: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2429 Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-27T23:00:00.000+00:00 2025-11-13T23:00:00.000+00:00
wid-sec-w-2025-2428 FRRouting (ospf_opaque.c): Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-27T23:00:00.000+00:00 2025-10-28T23:00:00.000+00:00
wid-sec-w-2025-2427 strongSwan (eap-mschapv2 plugin): Schwachstelle ermöglicht Codeausführung und DoS 2025-10-27T23:00:00.000+00:00 2025-12-10T23:00:00.000+00:00
wid-sec-w-2025-2426 IBM QRadar SIEM: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2425 Zoho ManageEngine Endpoint Central: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2424 IBM Rational Team Concert: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-28T23:00:00.000+00:00
wid-sec-w-2025-2423 ffmpeg (TensorFlow DNN backend): Schwachstelle ermöglicht Denial of Service 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2422 D-LINK Access Point (AP): Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2421 Docker Desktop: Schwachstelle ermöglicht Privilegieneskalation 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2420 Apache Tomcat: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2419 Liferay Portal und DXP: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2418 Dell Storage Manager: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2417 dnsmasq: Mehrere Schwachstellen 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2416 Proxmox Backup Server: Mehrere Schwachstellen 2025-10-26T23:00:00.000+00:00 2025-11-04T23:00:00.000+00:00
wid-sec-w-2025-2415 Bouncy Castle: Schwachstelle ermöglicht Denial of Service 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2414 Microsoft Configuration Manager: Schwachstelle ermöglicht Erlangen von Administratorrechten 2025-10-26T23:00:00.000+00:00 2025-11-02T23:00:00.000+00:00
wid-sec-w-2025-2413 HP Computer (AMD AIM-T): Mehrere Schwachstellen ermöglichen Privilegieneskalation 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2412 ARM-basierte HP-Computer mit InsydeH2O-UEFI-Firmware: Schwachstelle ermöglicht Codeausführung 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2411 ImageMagick: Schwachstelle ermöglicht Denial of Service 2025-10-26T23:00:00.000+00:00 2025-12-18T23:00:00.000+00:00
wid-sec-w-2025-2410 BusyBox: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2409 Xen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-10-26T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2408 OpenVPN: Schwachstelle ermöglicht Codeausführung 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2407 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-26T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2404 AMD “Zen 5” Prozessoren: Schwachstelle gefährdet Vertraulichkeit und Integrität 2025-10-23T22:00:00.000+00:00 2025-12-16T23:00:00.000+00:00
wid-sec-w-2025-2403 Ubiquiti UniFi: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-10-23T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2402 MongoDB BI Connector ODBC-Treiber: Schwachstelle ermöglicht Privilegieneskalation 2025-10-23T22:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
ID Description Published Updated
ncsc-2024-0326 Kwetsbaarheden verholpen in RoundCube Webmail 2024-08-08T07:45:42.674316Z 2024-08-08T07:45:42.674316Z
ncsc-2024-0325 Kwetsbaarheden verholpen in Aruba Networks ArubaOS en InstantOS 2024-08-07T09:04:14.955844Z 2024-08-07T09:04:14.955844Z
ncsc-2024-0324 Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird 2024-08-07T08:58:12.457235Z 2024-08-07T08:58:12.457235Z
ncsc-2024-0323 Kwetsbaarheden verholpen in Siemens Omnivise 2024-08-06T09:29:53.292433Z 2024-08-06T09:29:53.292433Z
ncsc-2024-0322 Kwetsbaarheden verholpen in Google Android en Samsung Mobile 2024-08-06T09:25:08.253832Z 2024-08-06T09:25:08.253832Z
ncsc-2024-0321 Kwetsbaarheid verholpen in Progress MOVEit Transfer 2024-07-30T08:45:50.286085Z 2024-07-30T08:45:50.286085Z
ncsc-2024-0320 Kwetsbaarheden verholpen in Apple MacOS 2024-07-30T08:42:07.365674Z 2024-07-30T08:42:07.365674Z
ncsc-2024-0319 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2024-07-30T08:39:16.399394Z 2024-07-30T08:39:16.399394Z
ncsc-2024-0318 Kwetsbaarheden verholpen in Docker Moby 2024-07-25T11:28:37.900721Z 2024-07-25T11:28:37.900721Z
ncsc-2024-0317 Kwetsbaarheid gevonden in Ivanti Endpoint Manager 2024-07-24T14:37:09.864241Z 2024-07-24T14:37:09.864241Z
ncsc-2024-0316 Kwetsbaarheid verholpen in Broadcom Symantec Privileged Access Management 2024-07-22T09:17:29.853486Z 2024-07-22T09:17:29.853486Z
ncsc-2024-0315 Kwetsbaarheid verholpen in Cisco Smart Software Manager On-Prem 2024-07-19T13:06:00.004663Z 2024-07-19T13:06:00.004663Z
ncsc-2024-0314 Kwetsbaarheden verholpen in Apache HTTP Server 2024-07-19T07:34:12.997118Z 2024-07-19T07:34:12.997118Z
ncsc-2024-0313 Kwetsbaarheid verholpen in HPE 3PAR Service Processor 2024-07-18T13:58:07.127103Z 2024-07-18T13:58:07.127103Z
ncsc-2024-0312 Kwetsbaarheden verholpen in Solarwinds Platform 2024-07-18T13:23:55.561789Z 2024-07-18T13:23:55.561789Z
ncsc-2024-0311 Kwetsbaarheden verholpen in Cisco Secure Email Gateway 2024-07-18T12:46:34.019785Z 2024-07-18T12:46:34.019785Z
ncsc-2024-0310 Kwetsbaarheid verholpen in SonicOS 2024-07-18T12:25:06.813302Z 2024-07-18T12:25:06.813302Z
ncsc-2024-0309 Kwetsbaarheid gevonden in Ivanti Endpoint Manager 2024-07-18T12:00:25.689314Z 2024-07-18T12:00:25.689314Z
ncsc-2024-0308 Kwetsbaarheden verholpen in Oracle Virtualization 2024-07-17T13:55:57.768494Z 2024-07-17T13:55:57.768494Z
ncsc-2024-0307 Kwetsbaarheden verholpen in Oracle Systems 2024-07-17T13:55:53.343378Z 2024-07-17T13:55:53.343378Z
ncsc-2024-0306 Kwetsbaarheden verholpen in Oracle Supply Chain 2024-07-17T13:55:37.062720Z 2024-07-17T13:55:37.062720Z
ncsc-2024-0305 Kwetsbaarheden verholpen in Oracle Siebel CRM 2024-07-17T13:55:31.923970Z 2024-07-17T13:55:31.923970Z
ncsc-2024-0304 Kwetsbaarheden verholpen in Oracle PeopleSoft 2024-07-17T13:55:12.225033Z 2024-07-17T13:55:12.225033Z
ncsc-2024-0303 Kwetsbaarheden verholpen in Oracle MySQL 2024-07-17T13:54:56.036488Z 2024-07-17T13:54:56.036488Z
ncsc-2024-0302 Kwetsbaarheden verholpen in Oracle JD Edwards 2024-07-17T13:54:52.031796Z 2024-07-17T13:54:52.031796Z
ncsc-2024-0301 Kwetsbaarheden verholpen in Oracle Java SE 2024-07-17T13:54:46.188033Z 2024-07-17T13:54:46.188033Z
ncsc-2024-0300 Kwetsbaarheid verholpen in Oracle Hyperion 2024-07-17T13:54:07.536172Z 2024-07-17T13:54:07.536172Z
ncsc-2024-0299 Kwetsbaarheden verholpen in Oracle Analytics 2024-07-17T13:54:03.545073Z 2024-07-17T13:54:03.545073Z
ncsc-2024-0298 Kwetsbaarheden verholpen in Oracle Fusion Middleware 2024-07-17T13:54:00.411174Z 2024-07-17T13:54:00.411174Z
ncsc-2024-0297 Kwetsbaarheden verholpen in Oracle Financial Services Applications 2024-07-17T13:53:54.655859Z 2024-07-17T13:53:54.655859Z
ID Description Published Updated
rhsa-2026:0523 Red Hat Security Advisory: postgresql:13 security update 2026-01-13T16:54:58+00:00 2026-02-02T21:27:27+00:00
rhsa-2026:0527 Red Hat Security Advisory: VolSync v0.14 security fixes and container updates 2026-01-13T16:52:50+00:00 2026-02-17T08:01:00+00:00
rhsa-2026:0525 Red Hat Security Advisory: postgresql16 security update 2026-01-13T16:46:38+00:00 2026-02-02T21:27:28+00:00
rhsa-2026:0519 Red Hat Security Advisory: postgresql:16 security update 2026-01-13T16:38:28+00:00 2026-02-02T21:27:27+00:00
rhsa-2026:0513 Red Hat Security Advisory: opentelemetry-collector security update 2026-01-13T16:33:48+00:00 2026-02-12T22:49:30+00:00
rhsa-2026:0512 Red Hat Security Advisory: opentelemetry-collector security update 2026-01-13T16:29:33+00:00 2026-02-12T22:49:29+00:00
rhsa-2026:0514 Red Hat Security Advisory: opentelemetry-collector security update 2026-01-13T16:21:59+00:00 2026-02-12T22:49:31+00:00
rhsa-2026:0493 Red Hat Security Advisory: postgresql:16 security update 2026-01-13T16:07:38+00:00 2026-02-02T21:27:27+00:00
rhsa-2026:0518 Red Hat Security Advisory: Red Hat Quay 3.16.1 2026-01-13T16:03:52+00:00 2026-02-16T17:58:09+00:00
rhsa-2026:0492 Red Hat Security Advisory: postgresql:15 security update 2026-01-13T13:14:28+00:00 2026-02-02T21:27:26+00:00
rhsa-2026:0491 Red Hat Security Advisory: postgresql security update 2026-01-13T12:42:28+00:00 2026-02-02T21:27:24+00:00
rhsa-2026:0489 Red Hat Security Advisory: kernel security update 2026-01-13T09:50:17+00:00 2026-02-16T14:14:59+00:00
rhsa-2026:0483 Red Hat Security Advisory: wireshark security update 2026-01-12T21:46:44+00:00 2026-01-13T22:41:55+00:00
rhsa-2026:0481 Red Hat Security Advisory: binutils security update 2026-01-12T21:33:43+00:00 2026-02-12T13:26:51+00:00
rhsa-2026:0482 Red Hat Security Advisory: binutils security update 2026-01-12T21:33:28+00:00 2026-02-12T13:26:51+00:00
rhsa-2026:0480 Red Hat Security Advisory: binutils security update 2026-01-12T21:21:24+00:00 2026-02-12T13:26:54+00:00
rhsa-2026:0479 Red Hat Security Advisory: binutils security update 2026-01-12T21:17:19+00:00 2026-02-12T13:26:52+00:00
rhsa-2026:0477 Red Hat Security Advisory: skopeo security update 2026-01-12T20:03:23+00:00 2026-02-17T08:00:58+00:00
rhsa-2026:0472 Red Hat Security Advisory: git-lfs security update 2026-01-12T18:02:35+00:00 2026-01-13T22:41:51+00:00
rhsa-2026:0470 Red Hat Security Advisory: podman security update 2026-01-12T17:35:15+00:00 2026-02-17T07:20:36+00:00
rhsa-2026:0468 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.1.SP1) 2026-01-12T15:22:38+00:00 2026-02-04T18:56:02+00:00
rhsa-2026:0465 Red Hat Security Advisory: git-lfs security update 2026-01-12T15:07:30+00:00 2026-01-13T22:41:49+00:00
rhsa-2026:0467 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.4.SP1) 2026-01-12T15:04:27+00:00 2026-02-04T18:56:02+00:00
rhsa-2026:0464 Red Hat Security Advisory: cups security update 2026-01-12T14:47:50+00:00 2026-01-19T15:57:08+00:00
rhsa-2026:0457 Red Hat Security Advisory: kernel security update 2026-01-12T13:52:25+00:00 2026-02-10T19:01:22+00:00
rhsa-2026:0458 Red Hat Security Advisory: libpq security update 2026-01-12T13:32:15+00:00 2026-02-02T21:27:24+00:00
rhsa-2026:0459 Red Hat Security Advisory: git-lfs security update 2026-01-12T13:15:55+00:00 2026-01-13T22:41:48+00:00
rhsa-2026:0460 Red Hat Security Advisory: git-lfs security update 2026-01-12T13:07:00+00:00 2026-01-13T22:41:49+00:00
rhsa-2026:0455 Red Hat Security Advisory: postgresql security update 2026-01-12T11:04:04+00:00 2026-02-02T21:27:24+00:00
rhsa-2026:0456 Red Hat Security Advisory: postgresql16 security update 2026-01-12T11:02:06+00:00 2026-02-02T21:27:24+00:00
ID Description Published Updated
icsa-24-317-02 Hitachi Energy TRO600 2024-11-12T07:00:00.000000Z 2024-11-12T07:00:00.000000Z
icsa-24-317-01 Subnet Solutions PowerSYSTEM Center 2024-11-12T07:00:00.000000Z 2024-11-12T07:00:00.000000Z
icsa-24-326-04 Schneider Electric Modicon M340, MC80, and Momentum Unity M1E (Update B) 2024-11-12T05:00:00.000000Z 2026-01-20T15:49:53.166459Z
icsa-24-326-06 Schneider Electric PowerLogic PM5300 Series 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-326-05 Schneider Electric EcoStruxure IT Gateway 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-326-03 Schneider Electric Modicon M340, MC80, and Momentum Unity M1E 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-12 Siemens Mendix Runtime 2024-11-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-24-319-11 Siemens SIMATIC CP 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-10 Siemens TeleControl Server 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-09 Siemens Spectrum Power 7 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-08 Siemens SINEC INS 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-07 Siemens Engineering Platforms 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-06 Siemens SCALANCE M-800 Family 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-05 Siemens Solid Edge 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-04 Siemens SINEC NMS 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-03 Siemens OZW672 and OZW772 Web Server 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-02 Siemens SIPORT 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-01 Siemens RUGGEDCOM CROSSBOW 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-312-03 Bosch Rexroth IndraDrive 2024-11-07T07:00:00.000000Z 2024-11-07T07:00:00.000000Z
icsa-24-312-02 Delta Electronics DIAScreen 2024-11-07T07:00:00.000000Z 2024-11-07T07:00:00.000000Z
icsa-24-312-01 Beckhoff Automation TwinCAT Package Manager 2024-11-07T07:00:00.000000Z 2024-11-07T07:00:00.000000Z
icsa-24-305-01 Rockwell Automation FactoryTalk ThinManager 2024-10-31T06:00:00.000000Z 2024-10-31T06:00:00.000000Z
icsa-24-303-03 Delta Electronics InfraSuite Device Master 2024-10-29T06:00:00.000000Z 2024-10-29T06:00:00.000000Z
icsa-24-303-02 Solar-Log Base 15 2024-10-29T06:00:00.000000Z 2024-10-29T06:00:00.000000Z
icsa-24-298-03 Deep Sea Electronics DSE855 2024-10-24T06:00:00.000000Z 2024-10-24T06:00:00.000000Z
icsa-24-298-02 iniNet Solutions SpiderControl SCADA PC HMI Editor 2024-10-24T06:00:00.000000Z 2024-10-24T06:00:00.000000Z
icsa-24-298-01 VIMESA VHF/FM Transmitter Blue Plus 2024-10-24T06:00:00.000000Z 2024-10-24T06:00:00.000000Z
icsa-24-303-01 Siemens InterMesh Subscriber Devices 2024-10-23T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-296-01 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C) 2024-10-22T06:00:00.000000Z 2026-02-24T07:00:00.000000Z
icsa-24-291-05 Kieback&Peter DDC4000 Series 2024-10-17T06:00:00.000000Z 2024-10-17T06:00:00.000000Z
ID Description Published Updated
cisco-sa-asa-ftd-vp-authz-n2gckjn6 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-asa-ftd-dap-dos-ghyzbxdu Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-umbrella-xss-lfeyqv3 Cisco Umbrella Stored Cross-Site Scripting Vulnerability 2022-11-02T16:00:00+00:00 2022-11-02T16:00:00+00:00
cisco-sa-ise-stor-xss-kprbwxy Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability 2022-11-02T16:00:00+00:00 2022-11-23T15:29:06+00:00
cisco-sa-ise-sec-atk-dos-zw5rcuyp Cisco Identity Services Engine Software Resource Exhaustion Vulnerability 2022-11-02T16:00:00+00:00 2022-11-02T16:00:00+00:00
cisco-sa-ise-path-trav-f6m7cs6r Cisco Identity Services Engine Path Traversal Vulnerability 2022-11-02T16:00:00+00:00 2022-11-23T14:40:22+00:00
cisco-sa-ise-csrf-vgnttpas Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability 2022-11-02T16:00:00+00:00 2022-11-23T15:26:05+00:00
cisco-sa-ise-access-contol-eeufsucx Cisco Identity Services Engine Insufficient Access Control Vulnerability 2022-11-02T16:00:00+00:00 2023-03-31T21:21:42+00:00
cisco-sa-esasmawsa-vulns-yrusw5md Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities 2022-11-02T16:00:00+00:00 2022-11-30T12:49:53+00:00
cisco-sa-esa-http-inject-nvsycumr Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability 2022-11-02T16:00:00+00:00 2022-11-02T16:00:00+00:00
cisco-sa-esa-dos-gdghhmbv Cisco Email Security Appliance Denial of Service Vulnerability 2022-11-02T16:00:00+00:00 2022-11-02T16:00:00+00:00
cisco-sa-cnt-sec-infodiscl-bvkknug Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Information Disclosure Vulnerability 2022-11-02T16:00:00+00:00 2022-11-02T16:00:00+00:00
cisco-sa-broadworks-ssrf-bjeqfpp Cisco BroadWorks CommPilot Application Software Vulnerabilities 2022-11-02T16:00:00+00:00 2023-01-24T17:26:16+00:00
cisco-sa-openssl-w9sdcc2a Vulnerabilities in OpenSSL Affecting Cisco Products: November 2022 2022-10-28T16:00:00+00:00 2022-11-23T20:23:17+00:00
cisco-sa-roomos-trav-befvccyu Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities 2022-10-19T16:00:00+00:00 2022-10-19T16:00:00+00:00
cisco-sa-meraki-mx-vpn-dos-vnesbgbf Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability 2022-10-19T16:00:00+00:00 2022-10-19T19:44:34+00:00
cisco-sa-ise-xss-twlnpy3m Cisco Identity Services Engine Cross-Site Scripting Vulnerability 2022-10-19T16:00:00+00:00 2023-03-31T21:09:40+00:00
cisco-sa-ise-path-trav-dz5dpzym Cisco Identity Services Engine Unauthorized File Access Vulnerability 2022-10-19T16:00:00+00:00 2023-01-24T18:18:32+00:00
cisco-sa-wsa-bypass-bwbfugek Cisco Secure Web Appliance Content Encoding Filter Bypass Vulnerabilities 2022-10-05T16:00:00+00:00 2023-04-03T13:46:35+00:00
cisco-sa-nfvis-isv-bqrvev2h Cisco Enterprise NFV Infrastructure Software Improper Signature Verification Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-jabber-xmpp-ne9scm Cisco Jabber Client Software Extensible Messaging and Presence Protocol Stanza Smuggling Vulnerability 2022-10-05T16:00:00+00:00 2022-10-19T20:47:17+00:00
cisco-sa-expressway-csrf-sqpssfy6 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-ctt-ivv-4a66dsfj Cisco Touch 10 Devices Insufficient Identity Verification Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-ctt-dav-hsvehhet Cisco Touch 10 Devices Downgrade Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-cssm-priv-esc-sejz69dv Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-bw-thinrcpt-xss-gsj4cecu Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-ata19x-multivuln-gezyvvs Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-wlc-udp-dos-xdyewhnz Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-dos-mkgrrscb Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-dhcp-dos-76pcjpxk Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
ID Description Published Updated
msrc_cve-2025-40353 arm64: mte: Do not warn if the page is already tagged in copy_highpage() 2025-12-02T00:00:00.000Z 2025-12-17T01:03:28.000Z
msrc_cve-2025-40345 usb: storage: sddr55: Reject out-of-bound new_pba 2025-12-02T00:00:00.000Z 2026-01-07T14:37:39.000Z
msrc_cve-2025-40343 nvmet-fc: avoid scheduling association deletion twice 2025-12-02T00:00:00.000Z 2025-12-16T14:40:15.000Z
msrc_cve-2025-40342 nvme-fc: use lock accessing port_state and rport state 2025-12-02T00:00:00.000Z 2025-12-16T14:40:34.000Z
msrc_cve-2025-40341 futex: Don't leak robust_list pointer on exec race 2025-12-02T00:00:00.000Z 2025-12-16T14:40:09.000Z
msrc_cve-2025-40340 drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. 2025-12-02T00:00:00.000Z 2025-12-10T01:02:33.000Z
msrc_cve-2025-40339 drm/amdgpu: fix nullptr err of vm_handle_moved 2025-12-02T00:00:00.000Z 2026-02-18T14:04:00.000Z
msrc_cve-2025-40338 ASoC: Intel: avs: Do not share the name pointer between components 2025-12-02T00:00:00.000Z 2025-12-11T01:36:32.000Z
msrc_cve-2025-40337 net: stmmac: Correctly handle Rx checksum offload errors 2025-12-02T00:00:00.000Z 2025-12-16T14:40:54.000Z
msrc_cve-2025-40336 drm/gpusvm: fix hmm_pfn_to_map_order() usage 2025-12-02T00:00:00.000Z 2025-12-11T01:36:26.000Z
msrc_cve-2025-40335 drm/amdgpu: validate userq input args 2025-12-02T00:00:00.000Z 2026-01-20T14:51:11.000Z
msrc_cve-2025-40334 drm/amdgpu: validate userq buffer virtual address and size 2025-12-02T00:00:00.000Z 2025-12-11T01:36:37.000Z
msrc_cve-2025-40333 f2fs: fix infinite loop in __insert_extent_tree() 2025-12-02T00:00:00.000Z 2025-12-16T14:40:47.000Z
msrc_cve-2025-40332 drm/amdkfd: Fix mmap write lock not release 2025-12-02T00:00:00.000Z 2026-01-20T14:51:28.000Z
msrc_cve-2025-40331 sctp: Prevent TOCTOU out-of-bounds write 2025-12-02T00:00:00.000Z 2025-12-16T14:40:22.000Z
msrc_cve-2025-40329 drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb 2025-12-02T00:00:00.000Z 2025-12-16T14:40:41.000Z
msrc_cve-2025-40328 smb: client: fix potential UAF in smb2_close_cached_fid() 2025-12-02T00:00:00.000Z 2025-12-16T14:40:28.000Z
msrc_cve-2025-40324 NFSD: Fix crash in nfsd4_read_release() 2025-12-02T00:00:00.000Z 2025-12-16T14:40:02.000Z
msrc_cve-2025-40323 fbcon: Set fb_display[i]->mode to NULL when the mode is released 2025-12-02T00:00:00.000Z 2025-12-16T14:39:30.000Z
msrc_cve-2025-40322 fbdev: bitblit: bound-check glyph index in bit_putcs* 2025-12-02T00:00:00.000Z 2025-12-16T14:39:43.000Z
msrc_cve-2025-40321 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode 2025-12-02T00:00:00.000Z 2025-12-16T14:38:58.000Z
msrc_cve-2025-40319 bpf: Sync pending IRQ work before freeing ring buffer 2025-12-02T00:00:00.000Z 2025-12-16T14:38:51.000Z
msrc_cve-2025-40317 regmap: slimbus: fix bus_context pointer in regmap init calls 2025-12-02T00:00:00.000Z 2025-12-09T01:02:25.000Z
msrc_cve-2025-40315 usb: gadget: f_fs: Fix epfile null pointer access after ep enable. 2025-12-02T00:00:00.000Z 2025-12-09T01:02:15.000Z
msrc_cve-2025-40314 usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget 2025-12-02T00:00:00.000Z 2025-12-09T01:02:20.000Z
msrc_cve-2025-40313 ntfs3: pretend $Extend records as regular files 2025-12-02T00:00:00.000Z 2025-12-09T01:02:47.000Z
msrc_cve-2025-40312 jfs: Verify inode mode when loading from disk 2025-12-02T00:00:00.000Z 2025-12-09T01:02:09.000Z
msrc_cve-2025-40311 accel/habanalabs: support mapping cb with vmalloc-backed coherent memory 2025-12-02T00:00:00.000Z 2025-12-16T14:39:36.000Z
msrc_cve-2025-40310 amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw 2025-12-02T00:00:00.000Z 2025-12-16T14:39:23.000Z
msrc_cve-2025-40309 Bluetooth: SCO: Fix UAF on sco_conn_free 2025-12-02T00:00:00.000Z 2025-12-09T01:01:37.000Z
ID Description Updated
var-201605-0133 The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo compo… 2025-12-22T21:57:05.201000Z
var-201201-0314 The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x befor… 2025-12-22T21:57:04.516000Z
var-202108-1057 An integer overflow was addressed with improved input validation. This issue is fixed in … 2025-12-22T21:57:04.449000Z
var-202012-1527 The X.509 GeneralName type is a generic type for representing different types of names. O… 2025-12-22T21:57:03.703000Z
var-201912-0124 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2025-12-22T21:56:08.596000Z
var-201411-0450 parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when ent… 2025-12-22T21:56:07.491000Z
var-201507-0303 Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlie… 2025-12-22T21:56:05.938000Z
var-201912-1852 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2025-12-22T21:56:05.251000Z
var-201006-0308 The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1… 2025-12-22T21:55:57.225000Z
var-201911-1627 Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, … 2025-12-22T21:55:25.259000Z
var-201506-0210 The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 befo… 2025-12-22T21:55:25.176000Z
var-201710-0928 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month fi… 2025-12-22T21:54:50.775000Z
var-201702-0198 An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari be… 2025-12-22T21:54:50.625000Z
var-201403-0514 The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certa… 2025-12-22T21:54:19.285000Z
var-202003-1771 A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-pro… 2025-12-22T21:53:47.753000Z
var-200703-0022 Unspecified vulnerability in diskimages-helper in Apple Mac OS X 10.3.9 and 10.4 through … 2025-12-22T21:53:15.963000Z
var-202208-0404 zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in in… 2025-12-22T21:53:11.295000Z
var-201806-1444 An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… 2025-12-22T21:53:10.834000Z
var-200512-0678 The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.8… 2025-12-22T21:53:09.515000Z
var-201302-0147 Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … 2025-12-22T21:53:08.878000Z
var-200810-0137 Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remo… 2025-12-22T21:53:08.811000Z
var-202201-0424 A validation issue was addressed with improved input sanitization. This issue is fixed in… 2025-12-22T21:53:08.743000Z
var-201206-0055 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2025-12-22T21:52:37.582000Z
var-201907-1641 In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recordin… 2025-12-22T21:52:35.010000Z
var-202006-0241 Incomplete cleanup from specific special register read operations in some Intel(R) Proces… 2025-12-22T21:52:34.234000Z
var-201506-0038 Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to exe… 2025-12-22T21:52:34.044000Z
var-201508-0620 The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not … 2025-12-22T21:52:33.870000Z
var-201510-0529 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51;… 2025-12-22T21:52:33.791000Z
var-201804-1179 An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… 2025-12-22T21:52:30.872000Z
var-200707-0577 Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used i… 2025-12-22T21:52:30.780000Z
ID Description Published Updated
jvndb-2023-000010 pgAdmin 4 vulnerable to directory traversal 2023-01-24T16:00+09:00 2024-06-05T16:22+09:00
jvndb-2023-000009 EasyMail vulnerable to cross-site scripting 2023-01-24T16:00+09:00 2023-01-24T16:00+09:00
jvndb-2023-001108 Contec CONPROSYS HMI System (CHS) vulnerable to multiple SQL injections 2023-01-24T13:38+09:00 2023-01-24T13:38+09:00
jvndb-2023-000008 Pgpool-II vulnerable to information disclosure 2023-01-23T16:35+09:00 2024-06-20T17:54+09:00
jvndb-2023-001008 File and Directory Permissions Vulnerability in Hitachi Tuning Manager 2023-01-18T13:51+09:00 2023-01-18T13:51+09:00
jvndb-2023-000007 WordPress plugin "Welcart e-Commerce" vulnerable to directory traversal 2023-01-17T14:17+09:00 2023-01-17T14:17+09:00
jvndb-2023-001005 Active debug code vulnerability in OMRON CP1L-EL20DR-D 2023-01-12T15:53+09:00 2023-01-12T15:53+09:00
jvndb-2023-001003 Access of uninitialized pointer vulnerability in OMRON CX-Motion-MCH 2023-01-12T15:06+09:00 2023-01-12T15:06+09:00
jvndb-2023-000006 Multiple vulnerabilities in PIXELA PIX-RT100 2023-01-12T14:50+09:00 2023-01-12T14:50+09:00
jvndb-2023-001002 OpenAM Web Policy Agent (OpenAM Consortium Edition) vulnerable to path traversal 2023-01-11T17:07+09:00 2023-01-11T17:07+09:00
jvndb-2023-000005 Multiple vulnerabilities in MAHO-PBX NetDevancer series 2023-01-11T16:11+09:00 2023-01-11T16:11+09:00
jvndb-2023-000003 TP-Link SG105PE vulnerable to authentication bypass 2023-01-11T15:04+09:00 2023-01-11T15:04+09:00
jvndb-2023-000004 pgAdmin 4 vulnerable to open redirect 2023-01-11T14:23+09:00 2023-01-11T14:23+09:00
jvndb-2023-000002 Digital Arts m-FILTER vulnerable to improper authentication 2023-01-06T14:57+09:00 2023-01-06T14:57+09:00
jvndb-2023-000001 Multiple code injection vulnerabilities in ruby-git 2023-01-05T15:51+09:00 2023-01-05T15:51+09:00
jvndb-2022-002838 Multiple vulnerabilities in Fuji Electric V-Server 2023-01-04T14:21+09:00 2023-01-04T14:21+09:00
jvndb-2022-002837 Multiple vulnerabilities in Fuji Electric V-SFT and TELLUS 2023-01-04T14:16+09:00 2023-01-04T14:16+09:00
jvndb-2022-002836 Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service 2022-12-26T16:21+09:00 2024-05-30T17:47+09:00
jvndb-2022-000102 Installers generated by Squirrel.Windows may insecurely load Dynamic Link Libraries 2022-12-21T14:23+09:00 2022-12-21T14:23+09:00
jvndb-2022-000101 +Message App improper handling of Unicode control characters 2022-12-21T14:13+09:00 2022-12-21T14:13+09:00
jvndb-2022-002783 Use-after-free vulnerability in Omron CX-Drive 2022-12-20T15:32+09:00 2022-12-20T15:32+09:00
jvndb-2022-002780 Command injection vulnerability in SHARP Multifunctional Products (MFP) 2022-12-20T12:12+09:00 2022-12-20T12:12+09:00
jvndb-2022-000099 Corel Roxio Creator LJB starts a program with an unquoted file path 2022-12-19T13:47+09:00 2022-12-19T13:47+09:00
jvndb-2022-000098 Zenphoto vulnerable to cross-site scripting 2022-12-19T13:39+09:00 2022-12-19T13:39+09:00
jvndb-2022-002779 Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) 2022-12-16T13:29+09:00 2023-01-11T16:55+09:00
jvndb-2022-000097 Multiple vulnerabilities in DENSHI NYUSATSU CORE SYSTEM 2022-12-15T15:18+09:00 2024-05-29T17:40+09:00
jvndb-2022-000096 Redmine vulnerable to cross-site scripting 2022-12-13T14:05+09:00 2024-06-03T16:47+09:00
jvndb-2022-002775 Multiple vulnerabilities in Buffalo network devices 2022-12-12T15:28+09:00 2024-02-14T15:45+09:00
jvndb-2022-002771 Information Exposure Vulnerability in JP1/Automatic Operation 2022-12-07T17:30+09:00 2022-12-07T17:30+09:00
jvndb-2022-002770 Contec SolarView Compact vulnerable to cross-site scripting 2022-12-06T15:08+09:00 2024-06-04T17:13+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:21207-1 Security update for python311 2025-12-09T17:22:29Z 2025-12-09T17:22:29Z
suse-su-2025:21206-1 Security update for curl 2025-12-09T16:41:54Z 2025-12-09T16:41:54Z
suse-su-2025:21189-1 Security update for openexr 2025-12-09T16:32:45Z 2025-12-09T16:32:45Z
suse-su-2025:21202-1 Security update for gnutls 2025-12-09T15:54:41Z 2025-12-09T15:54:41Z
suse-su-2025:21201-1 Security update for glib2 2025-12-09T15:43:38Z 2025-12-09T15:43:38Z
suse-su-2025:21200-1 Security update for libmicrohttpd 2025-12-09T15:28:06Z 2025-12-09T15:28:06Z
suse-su-2025:4333-1 Security update for gegl 2025-12-09T14:42:10Z 2025-12-09T14:42:10Z
suse-su-2025:4330-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container 2025-12-09T11:33:55Z 2025-12-09T11:33:55Z
suse-su-2025:21199-1 Security update for python311 2025-12-09T07:37:33Z 2025-12-09T07:37:33Z
suse-su-2025:21198-1 Security update for curl 2025-12-09T07:19:13Z 2025-12-09T07:19:13Z
suse-su-2025:4325-1 Security update for postgresql13 2025-12-08T18:19:54Z 2025-12-08T18:19:54Z
suse-su-2025:4324-1 Security update for gimp 2025-12-08T18:18:01Z 2025-12-08T18:18:01Z
suse-su-2025:4323-1 Security update for gnutls 2025-12-08T18:14:16Z 2025-12-08T18:14:16Z
suse-su-2025:21170-1 Security update for mozjs128 2025-12-03T20:38:36Z 2025-12-03T20:38:36Z
suse-su-2025:4319-1 Security update for cups 2025-12-03T12:34:14Z 2025-12-03T12:34:14Z
suse-su-2025:21168-1 Security update for python-cbor2 2025-12-02T13:51:54Z 2025-12-02T13:51:54Z
suse-su-2025:21167-1 Security update for strongswan 2025-12-02T13:13:07Z 2025-12-02T13:13:07Z
suse-su-2025:4315-1 Security update for the Linux Kernel 2025-12-01T10:12:39Z 2025-12-01T10:12:39Z
suse-su-2025:4313-1 Security update for python 2025-12-01T09:29:19Z 2025-12-01T09:29:19Z
suse-su-2025:4311-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) 2025-11-28T16:33:27Z 2025-11-28T16:33:27Z
suse-su-2025:4310-1 Security update for libcryptopp 2025-11-28T15:54:32Z 2025-11-28T15:54:32Z
suse-su-2025:4309-1 Security update for curl 2025-11-28T15:40:02Z 2025-11-28T15:40:02Z
suse-su-2025:4308-1 Security update for glib2 2025-11-28T15:38:47Z 2025-11-28T15:38:47Z
suse-su-2025:4306-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) 2025-11-28T14:03:42Z 2025-11-28T14:03:42Z
suse-su-2025:4305-1 Security update for grub2 2025-11-28T13:33:43Z 2025-11-28T13:33:43Z
suse-su-2025:4302-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7) 2025-11-28T13:04:17Z 2025-11-28T13:04:17Z
suse-su-2025:4300-1 Security update for curl 2025-11-28T12:57:53Z 2025-11-28T12:57:53Z
suse-su-2025:21164-1 Security update for java-17-openjdk 2025-11-28T10:42:01Z 2025-11-28T10:42:01Z
suse-su-2025:4297-1 Security update for python311 2025-11-28T10:03:21Z 2025-11-28T10:03:21Z
suse-su-2025:21162-1 Security update for java-21-openjdk 2025-11-28T09:51:39Z 2025-11-28T09:51:39Z
ID Description Published Updated
opensuse-su-2025:15711-1 opentofu-1.10.7-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15710-1 govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15709-1 google-osconfig-agent-20251028.00-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15708-1 python311-Django4-4.2.26-1.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15707-1 ghostscript-10.06.0-2.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15706-1 erlang-28.1.1-1.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15705-1 runc-1.3.3-1.1 on GA media 2025-11-05T00:00:00Z 2025-11-05T00:00:00Z
opensuse-su-2025:15704-1 zellij-0.43.1-2.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15703-1 kubecolor-0.5.3-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15702-1 kernel-devel-6.17.7-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15701-1 java-1_8_0-openjdk-1.8.0.472-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15700-1 OpenSMTPD-7.8.0p0-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15699-1 python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media 2025-11-03T00:00:00Z 2025-11-03T00:00:00Z
opensuse-su-2025:15698-1 redis-8.2.3-1.1 on GA media 2025-11-02T00:00:00Z 2025-11-02T00:00:00Z
opensuse-su-2025:15697-1 kumactl-2.12.3-1.1 on GA media 2025-11-02T00:00:00Z 2025-11-02T00:00:00Z
opensuse-su-2025:15696-1 python311-starlette-0.49.1-1.1 on GA media 2025-11-01T00:00:00Z 2025-11-01T00:00:00Z
opensuse-su-2025:15695-1 govulncheck-vulndb-0.0.20251029T215107-1.1 on GA media 2025-11-01T00:00:00Z 2025-11-01T00:00:00Z
opensuse-su-2025:20022-1 Security update for python-Django 2025-10-31T08:58:03Z 2025-10-31T08:58:03Z
opensuse-su-2025:15694-1 java-25-openj9-25.0.1.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15693-1 java-21-openj9-21.0.9.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15692-1 java-1_8_0-openj9-1.8.0.472-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15691-1 java-17-openj9-17.0.17.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15690-1 java-11-openj9-11.0.29.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15689-1 gomuks-0.3.1-2.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15688-1 libmozjs-140-0-140.4.0-2.1 on GA media 2025-10-30T00:00:00Z 2025-10-30T00:00:00Z
opensuse-su-2025:15687-1 chromedriver-142.0.7444.59-2.1 on GA media 2025-10-30T00:00:00Z 2025-10-30T00:00:00Z
opensuse-su-2025:15686-1 MozillaFirefox-144.0.2-1.1 on GA media 2025-10-30T00:00:00Z 2025-10-30T00:00:00Z
opensuse-su-2025:15685-1 ImageMagick-7.1.2.8-1.1 on GA media 2025-10-30T00:00:00Z 2025-10-30T00:00:00Z
opensuse-su-2025:20021-1 Security update for MozillaThunderbird 2025-10-29T17:54:20Z 2025-10-29T17:54:20Z
opensuse-su-2025:15684-1 xwayland-24.1.8-4.1 on GA media 2025-10-29T00:00:00Z 2025-10-29T00:00:00Z
ID Description Published Updated
bit-libphp-2023-3823 Security issue with external entity loading in XML without enabling it 2025-08-11T13:53:57.829Z 2025-08-11T14:19:40.295Z
bit-libphp-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP 2025-08-11T13:53:55.851Z 2025-08-11T14:19:40.295Z
bit-libphp-2023-0662 DoS vulnerability when parsing multipart request body 2025-08-11T13:53:54.096Z 2025-08-11T14:19:40.295Z
bit-libphp-2023-0568 Array overrun in common path resolve code 2025-08-11T13:53:52.314Z 2025-08-11T14:19:40.295Z
bit-libphp-2023-0567 password_verify() always returns true for some invalid hashes 2025-08-11T13:53:50.380Z 2025-08-11T14:19:40.295Z
bit-libphp-2022-4900 Potential buffer overflow in php_cli_server_startup_workers 2025-08-11T13:53:48.387Z 2026-02-11T09:09:18.507Z
bit-libphp-2022-37454 2025-08-11T13:53:46.722Z 2025-08-11T14:19:40.295Z
bit-libphp-2022-31631 PDO::quote() may return unquoted string 2025-08-11T13:53:44.921Z 2025-08-11T14:19:40.295Z
bit-libphp-2022-31630 OOB read due to insufficient input validation in imageloadfont() 2025-08-11T13:53:43.303Z 2025-08-11T14:19:40.295Z
bit-libphp-2022-31629 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities 2025-08-11T13:53:41.681Z 2025-11-06T13:25:46.476Z
bit-libphp-2022-31628 phar wrapper can occur dos when using quine gzip file 2025-08-11T13:53:40.112Z 2025-08-11T14:19:40.295Z
bit-libphp-2022-31627 Heap buffer overflow in finfo_buffer 2025-08-11T13:53:38.342Z 2025-08-11T14:19:40.295Z
bit-libphp-2022-31626 mysqlnd/pdo password buffer overflow 2025-08-11T13:53:36.527Z 2025-08-11T14:19:40.295Z
bit-libphp-2022-31625 Freeing unallocated memory in php_pgsql_free_params() 2025-08-11T13:53:34.951Z 2025-08-11T14:19:40.295Z
bit-libphp-2021-21708 UAF due to php_filter_float() failing 2025-08-11T13:53:33.524Z 2025-08-11T14:19:40.295Z
bit-libphp-2021-21707 Special characters break path parsing in XML functions 2025-08-11T13:53:31.639Z 2025-08-11T14:19:40.295Z
bit-libphp-2021-21706 ZipArchive::extractTo may extract outside of destination dir 2025-08-11T13:53:29.596Z 2025-08-11T14:19:40.295Z
bit-libphp-2021-21705 Incorrect URL validation in FILTER_VALIDATE_URL 2025-08-11T13:53:27.646Z 2025-08-11T14:19:40.295Z
bit-libphp-2021-21704 Multiple vulnerabilities in Firebird client extension 2025-08-11T13:53:25.524Z 2025-08-11T14:19:40.295Z
bit-libphp-2021-21703 PHP-FPM memory access in root process leading to privilege escalation 2025-08-11T13:53:23.491Z 2025-08-11T14:19:40.295Z
bit-libphp-2021-21702 Null Dereference in SoapClient 2025-08-11T13:53:21.478Z 2025-08-11T14:19:40.295Z
bit-libphp-2020-7071 FILTER_VALIDATE_URL accepts URLs with invalid userinfo 2025-08-11T13:53:19.445Z 2025-08-11T14:19:40.295Z
bit-libphp-2020-7070 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent 2025-08-11T13:53:17.298Z 2025-08-11T14:19:40.295Z
bit-libpython-2025-4517 Arbitrary writes via tarfile realpath overflow 2025-08-11T13:53:16.345Z 2025-08-11T14:19:40.295Z
bit-libphp-2020-7069 Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV 2025-08-11T13:53:15.117Z 2025-08-11T14:19:40.295Z
bit-libpython-2025-4516 Use-after-free in "unicode_escape" decoder with error handler 2025-08-11T13:53:13.759Z 2025-08-11T14:19:40.295Z
bit-libphp-2020-7068 Use of freed hash key in the phar_parse_zipfile function 2025-08-11T13:53:13.129Z 2025-08-11T14:19:40.295Z
bit-libpython-2025-4435 Tarfile extracts filtered members when errorlevel=0 2025-08-11T13:53:11.552Z 2025-08-11T14:19:40.295Z
bit-libphp-2020-7067 OOB Read in urldecode() 2025-08-11T13:53:11.314Z 2025-08-11T14:19:40.295Z
bit-libphp-2020-7066 get_headers() silently truncates after a null byte 2025-08-11T13:53:09.551Z 2025-08-11T14:19:40.295Z
ID Description Published Updated
cnvd-2026-00126 Adobe Experience Manager跨站脚本漏洞 2025-12-15 2026-01-05
cnvd-2026-00046 Siemens SIMATIC CN 4100访问控制错误漏洞 2025-12-15 2026-01-04
cnvd-2026-00021 Siemens SIMATIC CN 4100命令注入漏洞 2025-12-15 2026-01-04
cnvd-2026-00020 Siemens RUGGEDCOM ROX II注入漏洞(CNVD-2026-00020) 2025-12-15 2026-01-04
cnvd-2026-00019 Siemens RUGGEDCOM ROX II注入漏洞(CNVD-2026-00019) 2025-12-15 2026-01-04
cnvd-2026-00018 Siemens RUGGEDCOM ROX II注入漏洞(CNVD-2026-00018) 2025-12-15 2026-01-04
cnvd-2026-00017 Siemens RUGGEDCOM ROX II注入漏洞 2025-12-15 2026-01-04
cnvd-2026-00016 Siemens RUGGEDCOM ROX II命令注入漏洞(CNVD-2026-00016) 2025-12-15 2026-01-04
cnvd-2026-00015 Siemens RUGGEDCOM ROX II命令注入漏洞 2025-12-15 2026-01-04
cnvd-2026-00014 Siemens Gridscale X Prepay信息泄露漏洞 2025-12-15 2026-01-04
cnvd-2026-00013 Siemens Gridscale X Prepay安全绕过漏洞 2025-12-15 2026-01-04
cnvd-2025-30929 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30929) 2025-12-15 2025-12-18
cnvd-2025-30928 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30928) 2025-12-15 2025-12-18
cnvd-2025-30927 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30927) 2025-12-15 2025-12-18
cnvd-2025-30926 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30926) 2025-12-15 2025-12-18
cnvd-2025-30925 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30925) 2025-12-15 2025-12-18
cnvd-2025-30924 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30924) 2025-12-15 2025-12-18
cnvd-2025-30923 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30923) 2025-12-15 2025-12-18
cnvd-2025-30922 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30922) 2025-12-15 2025-12-18
cnvd-2025-30861 AzeoTech DAQFactory越界写入漏洞 2025-12-15 2025-12-17
cnvd-2025-30860 AzeoTech DAQFactory越界读取漏洞 2025-12-15 2025-12-17
cnvd-2025-30859 AzeoTech DAQFactory缓冲区溢出漏洞 2025-12-15 2025-12-17
cnvd-2025-30858 AzeoTech DAQFactory内存损坏漏洞 2025-12-15 2025-12-17
cnvd-2025-30857 AzeoTech DAQFactory释放后使用漏洞 2025-12-15 2025-12-17
cnvd-2025-30856 AzeoTech DAQFactory堆栈缓冲区溢出漏洞 2025-12-15 2025-12-17
cnvd-2026-06337 用友网络科技股份有限公司U8 cloud存在信息泄露漏洞 2025-12-12 2026-01-26
cnvd-2026-06272 用友网络科技股份有限公司U8 cloud存在SQL注入漏洞(CNVD-2026-06272) 2025-12-12 2026-01-26
cnvd-2025-30875 MailEnable WindowContext参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30874 MailEnable代码问题漏洞 2025-12-12 2025-12-17
cnvd-2025-30873 MailEnable theme参数跨站脚本漏洞 2025-12-12 2025-12-17
ID Description Published Updated
certfr-2025-avi-0739 Multiples vulnérabilités dans Asterisk 2025-08-29T00:00:00.000000 2025-08-29T00:00:00.000000
certfr-2025-avi-0738 Multiples vulnérabilités dans les produits Elastic 2025-08-29T00:00:00.000000 2025-08-29T00:00:00.000000
certfr-2025-avi-0737 Multiples vulnérabilités dans les produits Cisco 2025-08-28T00:00:00.000000 2025-08-28T00:00:00.000000
certfr-2025-avi-0736 Multiples vulnérabilités dans GitLab 2025-08-28T00:00:00.000000 2025-08-28T00:00:00.000000
certfr-2025-avi-0735 Vulnérabilité dans GLPI 2025-08-28T00:00:00.000000 2025-08-28T00:00:00.000000
certfr-2025-avi-0734 Vulnérabilité dans ISC Kea DHCP 2025-08-28T00:00:00.000000 2025-08-28T00:00:00.000000
certfr-2025-avi-0733 Vulnérabilité dans Nagios XI 2025-08-28T00:00:00.000000 2025-08-28T00:00:00.000000
certfr-2025-avi-0732 Vulnérabilité dans Google Chrome 2025-08-27T00:00:00.000000 2025-08-27T00:00:00.000000
certfr-2025-avi-0731 Vulnérabilité dans Shibboleth Identity Provider 2025-08-27T00:00:00.000000 2025-08-27T00:00:00.000000
certfr-2025-avi-0730 Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway 2025-08-26T00:00:00.000000 2025-08-26T00:00:00.000000
certfr-2025-avi-0729 Multiples vulnérabilités dans Qnap File Station 2025-08-26T00:00:00.000000 2025-08-26T00:00:00.000000
certfr-2025-avi-0728 Vulnérabilité dans Centreon Web 2025-08-25T00:00:00.000000 2025-08-25T00:00:00.000000
certfr-2025-avi-0727 Multiples vulnérabilités dans les produits ESET 2025-08-25T00:00:00.000000 2025-08-25T00:00:00.000000
certfr-2025-avi-0726 Vulnérabilité dans les produits Moxa 2025-08-25T00:00:00.000000 2025-08-25T00:00:00.000000
certfr-2025-avi-0725 Vulnérabilité dans Liferay 2025-08-25T00:00:00.000000 2025-08-25T00:00:00.000000
certfr-2025-avi-0724 Multiples vulnérabilités dans les produits IBM 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0723 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0722 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0721 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0720 Multiples vulnérabilités dans Microsoft Windows 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0719 Vulnérabilité dans Microsoft Edge 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0718 Multiples vulnérabilités dans les produits Liferay 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0717 Vulnérabilité dans Elastic Beats 2025-08-21T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0716 Vulnérabilité dans les produits Apple 2025-08-21T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0715 Multiples vulnérabilités dans les produits Liferay 2025-08-21T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0714 Multiples vulnérabilités dans les produits Mozilla 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0713 Multiples vulnérabilités dans les produits Liferay 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0712 Vulnérabilité dans Apereo CAS 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0711 Vulnérabilité dans Google Chrome 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0710 Multiples vulnérabilités dans les produits F5 2025-08-19T00:00:00.000000 2025-08-19T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated