Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0531 |
N/A
|
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "An SMTP service supports EXPN, VRFY, HELP, ESMTP, and/or EHLO. | N/A | N/A | 2000-02-04T05:00:00 | 2005-11-02T10:00:00 |
| CVE-1999-0532 |
N/A
|
A DNS server allows zone transfers. |
n/a |
n/a |
2000-02-04T05:00:00.000Z | 2025-03-17T15:03:26.630Z |
| CVE-1999-0533 |
N/A
|
A DNS server allows inverse queries. |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.220Z |
| CVE-1999-0534 |
N/A
|
A Windows NT user has inappropriate rights or pri… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.562Z |
| CVE-1999-0535 |
N/A
|
A Windows NT account policy for passwords has ina… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.607Z |
| CVE-1999-0537 |
N/A
|
A configuration in a web browser such as Internet… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.684Z |
| CVE-1999-0539 |
N/A
|
A trust relationship exists between two Unix hosts. |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.533Z |
| CVE-1999-0541 |
N/A
|
A password for accessing a WWW URL is guessable. |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.483Z |
| CVE-1999-0546 |
N/A
|
The Windows NT guest account is enabled. |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.470Z |
| CVE-1999-0547 |
N/A
|
An SSH server allows authentication through the .… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.708Z |
| CVE-1999-0548 |
N/A
|
A superfluous NFS server is running, but it is no… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.685Z |
| CVE-1999-0549 |
N/A
|
Windows NT automatically logs in an administrator… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.554Z |
| CVE-1999-0550 |
N/A
|
A router's routing tables can be obtained from ar… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.663Z |
| CVE-1999-0554 |
N/A
|
NFS exports system-critical data to the world, e.… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.685Z |
| CVE-1999-0555 |
N/A
|
A Unix account with a name other than "root" has … |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.566Z |
| CVE-1999-0556 |
N/A
|
Two or more Unix accounts have the same UID. |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.487Z |
| CVE-1999-0559 |
N/A
|
A system-critical Unix file or directory has inap… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.643Z |
| CVE-1999-0560 |
N/A
|
A system-critical Windows NT file or directory ha… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.462Z |
| CVE-1999-0561 |
N/A
|
IIS has the #exec function enabled for Server Sid… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.516Z |
| CVE-1999-0562 |
N/A
|
The registry in Windows NT can be accessed remote… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.690Z |
| CVE-1999-0564 |
N/A
|
An attacker can force a printer to print arbitrar… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.562Z |
| CVE-1999-0565 |
N/A
|
A Sendmail alias allows input to be piped to a program. |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.585Z |
| CVE-1999-0568 |
N/A
|
rpc.admind in Solaris is not running in a secure mode. |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.611Z |
| CVE-1999-0569 |
N/A
|
A URL for a WWW directory allows auto-indexing, w… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.540Z |
| CVE-1999-0570 |
N/A
|
Windows NT is not using a password filter utility… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.711Z |
| CVE-1999-0571 |
N/A
|
A router's configuration service or management in… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.638Z |
| CVE-1999-0572 |
N/A
|
.reg files are associated with the Windows NT reg… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.516Z |
| CVE-1999-0575 |
N/A
|
A Windows NT system's user audit policy does not … |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.675Z |
| CVE-1999-0576 |
N/A
|
A Windows NT system's file audit policy does not … |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.649Z |
| CVE-1999-0577 |
N/A
|
A Windows NT system's file audit policy does not … |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:41:45.676Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0332 |
N/A
|
Buffer overflow in NetMeeting allows denial of se… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.949Z |
| CVE-1999-0342 |
N/A
|
Linux PAM modules allow local users to gain root … |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:52.020Z |
| CVE-1999-0385 |
N/A
|
The LDAP bind function in Exchange 5.5 has a buff… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:52.137Z |
| CVE-1999-0463 |
N/A
|
Remote attackers can perform a denial of service … |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:41:44.930Z |
| CVE-1999-0478 |
N/A
|
Denial of service in HP-UX sendmail 8.8.6 related… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:41:44.965Z |
| CVE-1999-0869 |
N/A
|
Internet Explorer 3.x to 4.01 allows a remote att… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:55:28.864Z |
| CVE-1999-0836 |
N/A
|
UnixWare uidadmin allows local users to modify ar… |
n/a |
n/a |
2000-06-02T04:00:00 | 2024-08-01T16:48:38.069Z |
| CVE-1999-0936 |
N/A
|
BNBSurvey survey.cgi program allows remote attack… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:55:29.146Z |
| CVE-1999-0937 |
N/A
|
BNBForm allows remote attackers to read arbitrary… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:55:29.356Z |
| CVE-1999-1280 |
N/A
|
Hummingbird Exceed 6.0.1.0 inadvertently includes… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:11:02.732Z |
| CVE-1999-0798 |
N/A
|
Buffer overflow in bootpd on OpenBSD, FreeBSD, an… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:48:38.129Z |
| CVE-1999-1147 |
N/A
|
Buffer overflow in Platinum Policy Compliance Man… |
n/a |
n/a |
2002-03-09T05:00:00 | 2024-08-01T17:02:53.792Z |
| CVE-1999-1276 |
N/A
|
fte-console in the fte package before 0.46b-4.1 d… |
n/a |
n/a |
2002-03-09T05:00:00 | 2024-08-01T17:11:01.258Z |
| CVE-1999-1282 |
N/A
|
RealSystem G2 server stores the administrator pas… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:11:01.460Z |
| CVE-1999-0139 |
N/A
|
Buffer overflow in Solaris x86 mkcookie allows lo… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:27:57.550Z |
| CVE-1999-0188 |
N/A
|
The passwd command in Solaris can be subjected to… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:27:57.791Z |
| CVE-1999-1173 |
N/A
|
Corel Word Perfect 8 for Linux creates a temporar… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:02:53.753Z |
| CVE-1999-1277 |
N/A
|
BackWeb client stores the username and password i… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:11:01.246Z |
| CVE-1999-1278 |
N/A
|
nlog CGI scripts do not properly filter shell met… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:11:01.671Z |
| CVE-1999-0968 |
N/A
|
Buffer overflow in BNC IRC proxy allows remote at… |
n/a |
n/a |
2002-03-09T05:00:00 | 2024-08-01T16:55:29.271Z |
| CVE-1999-1281 |
N/A
|
Development version of Breeze Network Server allo… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:11:03.176Z |
| CVE-1999-1188 |
N/A
|
mysqld in MySQL 3.21 creates log files with world… |
n/a |
n/a |
2002-03-09T05:00:00 | 2024-08-01T17:02:53.761Z |
| CVE-1999-1285 |
N/A
|
Linux 2.1.132 and earlier allows local users to c… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:11:01.463Z |
| CVE-1999-1159 |
N/A
|
SSH 2.0.11 and earlier allows local users to requ… |
n/a |
n/a |
2002-03-09T05:00:00 | 2024-08-01T17:02:53.757Z |
| CVE-1999-0020 |
N/A
|
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | N/A | N/A | 2000-02-04T05:00:00 | 2005-02-04T00:00:00 |
| CVE-1999-0110 |
N/A
|
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315. Notes: All CVE users should reference CVE-1999-0315 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | N/A | N/A | 2000-02-04T05:00:00 | 2005-02-04T00:00:00 |
| CVE-1999-0187 |
N/A
|
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candidate is a duplicate of CVE-1999-0022. Notes: All CVE users should reference CVE-1999-0022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | N/A | N/A | 2000-02-04T05:00:00 | 2005-02-04T00:00:00 |
| CVE-1999-0197 |
N/A
|
finger 0@host on some systems may print informati… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:27:57.831Z |
| CVE-1999-0198 |
N/A
|
finger .@host on some systems may print informati… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:27:57.847Z |
| CVE-1999-0200 |
N/A
|
Windows NT FTP server (WFTP) with the guest accou… |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:27:57.933Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-84cm-x2q5-8225 |
9.8 (3.1)
|
dojox vulnerable to unescaped string injection | 2018-10-15T22:03:48Z | 2023-09-27T12:57:00Z |
| ghsa-rpch-cqj9-h65r |
7.8 (3.1)
|
High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed | 2018-10-16T17:01:10Z | 2021-09-17T19:23:01Z |
| ghsa-6pcc-3rfx-4gpm |
7.5 (3.1)
|
Dom4j contains a XML Injection vulnerability | 2018-10-16T17:01:25Z | 2022-04-26T18:43:56Z |
| ghsa-7378-6268-4278 |
5.5 (3.1)
|
DotNetZip Zip-Slip Vulnerability | 2018-10-16T17:16:40Z | 2025-05-06T17:56:09Z |
| ghsa-g8j6-m4p7-5rfq |
7.5 (3.1)
|
High severity vulnerability that affects DotNetNuke.Core | 2018-10-16T17:18:12Z | 2021-09-10T20:29:38Z |
| ghsa-qxxx-2pp7-5hmx |
9.8 (3.1)
|
jackson-databind is vulnerable to a deserialization flaw | 2018-10-16T17:21:35Z | 2024-03-01T21:41:47Z |
| ghsa-hvpr-9cr6-q5v7 |
9.8 (3.1)
|
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization | 2018-10-16T17:21:42Z | 2022-11-17T18:54:40Z |
| ghsa-rr3c-f55v-qhv5 |
7.5 (3.1)
|
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents | 2018-10-16T17:34:00Z | 2022-04-27T19:25:26Z |
| ghsa-xpwp-rq3x-x6v7 |
|
Critical severity vulnerability that affects recurly-api-client | 2018-10-16T17:35:04Z | 2020-06-16T22:03:58Z |
| ghsa-898j-5cc8-cmf5 |
5.5 (3.1)
|
ZipSlip in org.apache.storm:storm-core | 2018-10-16T17:35:24Z | 2024-03-20T17:34:55Z |
| ghsa-9gcm-f4x3-8jpw |
5.9 (3.1)
|
Spring Framework Cross Site Tracing (XST) | 2018-10-16T17:35:54Z | 2024-03-05T17:33:42Z |
| ghsa-f26x-pr96-vw86 |
5.9 (3.1)
|
Moderate severity vulnerability that affects org.springframework:spring-core | 2018-10-16T17:43:45Z | 2024-05-15T06:25:53Z |
| ghsa-mwcx-532g-8pq3 |
8.8 (3.1)
|
Access and integrity issue within Eclipse Jetty | 2018-10-16T17:44:11Z | 2022-04-26T18:56:02Z |
| ghsa-xqj7-j8j5-f2xr |
7.5 (3.1)
|
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator | 2018-10-16T17:44:39Z | 2025-09-12T19:26:53Z |
| ghsa-cggj-fvv3-cqwv |
9.8 (3.1)
|
FasterXML jackson-databind allows unauthenticated remote code execution | 2018-10-16T17:45:18Z | 2024-03-15T01:08:04Z |
| ghsa-v76m-f5cx-8rg4 |
|
Moderate severity vulnerability that affects DotNetNuke.Core | 2018-10-16T19:33:25Z | 2020-06-16T21:57:07Z |
| ghsa-x8f7-h444-97w4 |
9.8 (3.1)
|
The installation wizard in DotNetNuke (DNN) allows privilege escalation | 2018-10-16T19:33:42Z | 2022-04-26T18:57:42Z |
| ghsa-5c66-x4wm-rjfx |
5.4 (3.1)
|
Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) | 2018-10-16T19:34:10Z | 2022-04-26T18:58:10Z |
| ghsa-x2rg-fmcv-crq5 |
8.8 (3.1)
|
DNN (aka DotNetNuke) has Remote Code Execution via a cookie | 2018-10-16T19:34:22Z | 2022-04-26T18:58:37Z |
| ghsa-38cr-2ph5-frr9 |
7.5 (3.1)
|
Apache Struts REST Plugin can potentially allow a DoS attack | 2018-10-16T19:35:26Z | 2024-01-05T16:06:12Z |
| ghsa-8fx9-5hx8-crhm |
9.8 (3.1)
|
Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal | 2018-10-16T19:35:40Z | 2024-01-04T21:54:05Z |
| ghsa-xcrm-qpp8-hcw4 |
6.2 (3.1)
|
Moderate severity vulnerability that affects org.apache.struts:struts2-rest-plugin | 2018-10-16T19:35:55Z | 2021-09-21T22:29:46Z |
| ghsa-9gp7-jvm2-r4mx |
5.9 (3.1)
|
Apache Struts Improper Input Validation vulnerability | 2018-10-16T19:36:43Z | 2024-01-04T23:08:58Z |
| ghsa-8mr5-h28g-36qx |
7.5 (3.1)
|
Spring AOP functionality (Struts) vulnerable to DoS attack | 2018-10-16T19:37:07Z | 2022-04-26T19:00:20Z |
| ghsa-vwxj-6m5m-rrvh |
7.5 (3.1)
|
The REST Plugin in Apache Struts is using an outdated XStream library | 2018-10-16T19:37:22Z | 2022-04-26T19:02:10Z |
| ghsa-x5x7-3v85-wpc4 |
7.5 (3.1)
|
Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used | 2018-10-16T19:37:33Z | 2024-01-04T23:26:47Z |
| ghsa-gg9m-fj3v-r58c |
8.1 (3.1)
|
REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization… | 2018-10-16T19:37:56Z | 2025-10-22T17:31:31Z |
| ghsa-49h4-g8p5-jgq6 |
6.1 (3.1)
|
Moderate severity vulnerability that affects org.apache.juddi:juddi-client | 2018-10-16T19:49:32Z | 2021-09-01T14:10:51Z |
| ghsa-q66c-h853-gqw2 |
9.1 (3.1)
|
AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remo… | 2018-10-16T19:49:48Z | 2023-01-18T06:20:33Z |
| ghsa-jj9h-mwhq-8vhm |
5.9 (3.1)
|
Improper Input Validation in org.apache.qpid:qpid-broker | 2018-10-16T19:50:13Z | 2023-05-22T21:30:04Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2018-29 |
|
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.… | salt | 2018-10-24T22:29:00Z | 2021-06-16T00:03:24.871222Z |
| pysec-2018-30 |
|
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to byp… | salt | 2018-10-24T22:29:00Z | 2021-06-10T06:51:17.561337Z |
| pysec-2018-85 |
|
python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a l… | kdcproxy | 2018-10-30T18:29:00Z | 2021-08-27T03:22:05.569463Z |
| pysec-2018-92 |
|
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the … | mistral | 2018-11-02T21:29:00Z | 2021-08-27T03:22:07.552723Z |
| pysec-2018-140 |
6.5 (3.1)
|
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in… | exiv2 | 2018-11-03T04:29:00Z | 2024-11-21T14:22:48.914006Z |
| pysec-2018-74 |
|
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to … | superset | 2018-11-07T14:29:00Z | 2021-08-25T04:30:32.701868Z |
| pysec-2018-141 |
6.5 (3.1)
|
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD… | exiv2 | 2018-11-08T08:29:00Z | 2024-11-21T14:22:48.973676Z |
| pysec-2018-142 |
6.5 (3.1)
|
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may … | exiv2 | 2018-11-08T08:29:00Z | 2024-11-21T14:22:49.03444Z |
| pysec-2018-96 |
|
Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers … | py-evm | 2018-11-12T02:29:00Z | 2021-08-27T03:22:16.474976Z |
| pysec-2018-17 |
|
Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert resp… | notebook | 2018-11-18T17:29:00Z | 2021-06-10T06:51:21.489049Z |
| pysec-2018-18 |
|
Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/st… | notebook | 2018-11-18T17:29:00Z | 2021-06-10T06:52:01.452566Z |
| pysec-2018-77 |
|
The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext … | tryton | 2018-11-22T19:29:00Z | 2021-08-25T04:30:34.252835Z |
| pysec-2018-143 |
6.5 (3.1)
|
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a d… | exiv2 | 2018-11-27T07:29:00Z | 2024-11-21T14:22:49.094932Z |
| pysec-2018-60 |
|
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging a… | ansible | 2018-11-29T18:29:00Z | 2021-08-25T04:29:51.914778Z |
| pysec-2018-12 |
|
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean m… | lxml | 2018-12-02T10:29:00Z | 2021-06-16T00:03:23.627691Z |
| pysec-2018-32 |
|
urllib3 before version 1.23 does not remove the Authorization HTTP header when following … | urllib3 | 2018-12-11T17:29:00Z | 2021-06-10T06:51:03.467032Z |
| pysec-2018-117 |
6.5 (3.1)
|
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.c… | exiv2 | 2018-12-12T10:29:00Z | 2024-01-02T15:20:59.143416Z |
| pysec-2018-118 |
6.5 (3.1)
|
There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.… | exiv2 | 2018-12-12T10:29:00Z | 2024-01-02T15:20:59.201635Z |
| pysec-2018-119 |
6.5 (3.1)
|
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cp… | exiv2 | 2018-12-12T10:29:00Z | 2024-01-02T15:20:59.259575Z |
| pysec-2018-120 |
6.5 (3.1)
|
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.… | exiv2 | 2018-12-12T10:29:00Z | 2024-01-02T15:20:59.318592Z |
| pysec-2018-9 |
|
** DISPUTED ** OpenStack Keystone through 14.0.1 has a user enumeration vulnerability bec… | keystone | 2018-12-17T07:29:00Z | 2021-06-10T06:51:56.696140Z |
| pysec-2018-103 |
|
ymlref allows code injection. | ymlref | 2018-12-17T19:29:00Z | 2021-09-26T23:33:39.795406Z |
| pysec-2018-11 |
|
Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aa… | luigi | 2018-12-20T15:29:00Z | 2021-06-10T06:51:41.493009Z |
| pysec-2018-35 |
|
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability… | aiohttp-session | 2018-12-20T15:29:00Z | 2021-07-02T02:41:32.834524Z |
| pysec-2018-22 |
|
OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management… | pykmip | 2018-12-20T17:29:00Z | 2021-06-10T06:50:52.184344Z |
| pysec-2018-82 |
|
There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner … | definitions | 2018-12-21T23:29:00Z | 2021-08-27T03:21:57.237018Z |
| pysec-2019-141 |
|
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure f… | ansible | 2019-01-03T15:29:00Z | 2021-06-10T06:51:54.692225Z |
| pysec-2019-122 |
|
Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixt… | sqla-yaml-fixtures | 2019-01-03T19:29:00Z | 2019-01-31T18:00:00Z |
| pysec-2019-17 |
|
In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper… | django | 2019-01-09T23:29:00Z | 2019-04-23T13:11:00Z |
| pysec-2019-150 |
|
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection c… | bodhi | 2019-01-10T21:29:00Z | 2021-07-05T00:01:17.244288Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2022-291 | Malicious code in @gmelius/fetlife-assets (npm) | 2022-06-20T18:20:15Z | 2022-06-20T18:20:15Z |
| mal-2022-333 | Malicious code in @hilcorp/fetlife-assets (npm) | 2022-06-20T18:20:15Z | 2022-06-20T18:20:16Z |
| mal-2022-336 | Malicious code in @homebrew/fetlife-assets (npm) | 2022-06-20T18:20:15Z | 2022-06-20T18:20:16Z |
| mal-2022-337 | Malicious code in @honeywell/fetlife-assets (npm) | 2022-06-20T18:20:16Z | 2022-06-20T18:20:16Z |
| mal-2022-339 | Malicious code in @hudapp/fetlife-assets (npm) | 2022-06-20T18:20:16Z | 2022-06-20T18:20:17Z |
| mal-2022-340 | Malicious code in @huji/fetlife-assets (npm) | 2022-06-20T18:20:16Z | 2022-06-20T18:20:17Z |
| mal-2022-341 | Malicious code in @ibb-apache/fetlife-assets (npm) | 2022-06-20T18:20:16Z | 2022-06-20T18:20:18Z |
| mal-2022-343 | Malicious code in @icbc-ltd/fetlife-assets (npm) | 2022-06-20T18:20:17Z | 2022-06-20T18:20:18Z |
| mal-2022-344 | Malicious code in @icmb/fetlife-assets (npm) | 2022-06-20T18:20:18Z | 2022-06-20T18:20:19Z |
| mal-2022-347 | Malicious code in @igame/fetlife-assets (npm) | 2022-06-20T18:20:18Z | 2022-06-20T18:20:19Z |
| mal-2022-355 | Malicious code in @impresscms/fetlife-assets (npm) | 2022-06-20T18:20:19Z | 2022-06-20T18:20:19Z |
| mal-2022-357 | Malicious code in @infogram/fetlife-assets (npm) | 2022-06-20T18:20:19Z | 2022-06-20T18:20:20Z |
| mal-2022-359 | Malicious code in @instagram/fetlife-assets (npm) | 2022-06-20T18:20:20Z | 2022-06-20T18:20:20Z |
| mal-2022-362 | Malicious code in @insulet/fetlife-assets (npm) | 2022-06-20T18:20:20Z | 2022-06-20T18:20:21Z |
| mal-2022-363 | Malicious code in @investnext/fetlife-assets (npm) | 2022-06-20T18:20:20Z | 2022-06-20T18:20:21Z |
| mal-2022-365 | Malicious code in @israelhayom/fetlife-assets (npm) | 2022-06-20T18:20:21Z | 2022-06-20T18:20:21Z |
| mal-2022-368 | Malicious code in @jerusalem/fetlife-assets (npm) | 2022-06-20T18:20:21Z | 2022-06-20T18:20:21Z |
| mal-2022-371 | Malicious code in @jnjmobile/fetlife-assets (npm) | 2022-06-20T18:20:21Z | 2022-06-20T18:20:25Z |
| mal-2022-374 | Malicious code in @justauth/fetlife-assets (npm) | 2022-06-20T18:20:21Z | 2022-06-20T18:20:22Z |
| mal-2022-375 | Malicious code in @kaspersky/fetlife-assets (npm) | 2022-06-20T18:20:22Z | 2022-06-20T18:20:22Z |
| mal-2022-376 | Malicious code in @keybank/fetlife-assets (npm) | 2022-06-20T18:20:22Z | 2022-06-20T18:20:23Z |
| mal-2022-379 | Malicious code in @kimley-horn/fetlife-assets (npm) | 2022-06-20T18:20:22Z | 2022-06-20T18:20:22Z |
| mal-2022-382 | Malicious code in @kindredext/fetlife-assets (npm) | 2022-06-20T18:20:22Z | 2022-06-20T18:20:23Z |
| mal-2022-384 | Malicious code in @kolikkopelit/fetlife-assets (npm) | 2022-06-20T18:20:23Z | 2022-06-20T18:20:23Z |
| mal-2022-389 | Malicious code in @localizejs/fetlife-assets (npm) | 2022-06-20T18:20:23Z | 2022-06-20T18:20:24Z |
| mal-2022-400 | Malicious code in @loofah/fetlife-assets (npm) | 2022-06-20T18:20:23Z | 2022-06-20T18:20:24Z |
| mal-2022-401 | Malicious code in @lowes/fetlife-assets (npm) | 2022-06-20T18:20:23Z | 2022-06-20T18:20:24Z |
| mal-2022-407 | Malicious code in @maariv/fetlife-assets (npm) | 2022-06-20T18:20:24Z | 2022-06-20T18:20:24Z |
| mal-2022-408 | Malicious code in @maccabi4u/fetlife-assets (npm) | 2022-06-20T18:20:24Z | 2022-06-20T18:20:25Z |
| mal-2022-410 | Malicious code in @mainwp/fetlife-assets (npm) | 2022-06-20T18:20:24Z | 2022-06-20T18:20:25Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2180 | Red Hat libmspack: Schwachstelle ermöglicht Offenlegung von Informationen | 2020-04-28T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-3163 | OpenLDAP: Schwachstelle ermöglicht Denial of Service | 2020-04-29T22:00:00.000+00:00 | 2024-10-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2772 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2020-04-29T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2022-1347 | jQuery: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2020-05-03T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-2773 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2020-05-03T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2022-1924 | Linux Kernel: Mehrere Schwachstellen | 2020-05-04T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2024-1449 | SaltStack Salt: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten | 2020-05-04T22:00:00.000+00:00 | 2024-06-25T22:00:00.000+00:00 |
| wid-sec-w-2022-1571 | GraphicsMagick: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2020-05-05T22:00:00.000+00:00 | 2023-03-27T22:00:00.000+00:00 |
| wid-sec-w-2022-1923 | Linux Kernel: Mehrere Schwachstellen | 2020-05-05T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2024-0748 | libvirt: Schwachstelle ermöglicht Denial of Service | 2020-05-05T22:00:00.000+00:00 | 2024-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0450 | Cisco Adaptive Security Appliance (ASA) und Cisco Firepower Threat Defense (FTD): Mehrere Schwachstellen | 2020-05-06T22:00:00.000+00:00 | 2024-02-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2774 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2020-05-07T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2022-1614 | Linux Kernel: Mehrere Schwachstellen | 2020-05-10T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2023-2473 | Ansible: Schwachstelle ermöglicht Offenlegung von Informationen | 2020-05-11T22:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2123 | Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen | 2020-05-11T22:00:00.000+00:00 | 2025-09-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2472 | Ansible Tower: Schwachstelle ermöglicht Offenlegung von Informationen | 2020-05-12T22:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2775 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2020-05-12T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2776 | Linux Kernel: Schwachstelle ermöglichen Umgehen von Sicherheitsvorkehrungen | 2020-05-12T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2777 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2020-05-13T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2023-1517 | VLC: mehrere Schwachstellen | 2020-05-17T22:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2024-1037 | Ansible: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2020-05-17T22:00:00.000+00:00 | 2024-05-06T22:00:00.000+00:00 |
| wid-sec-w-2022-1807 | LibreOffice: Schwachstelle ermöglicht Offenlegung von Informationen | 2020-05-18T22:00:00.000+00:00 | 2024-01-01T23:00:00.000+00:00 |
| wid-sec-w-2023-1093 | Ruby on Rails: Mehrere Schwachstellen | 2020-05-18T22:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-1554 | Bluetooth Spezifikation: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2020-05-18T22:00:00.000+00:00 | 2024-11-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0236 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-05-18T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-1198 | Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-05-18T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-2778 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2020-05-18T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2022-2095 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2020-05-19T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2023-1920 | Wireshark: Schwachstelle ermöglicht Denial of Service | 2020-05-19T22:00:00.000+00:00 | 2023-07-30T22:00:00.000+00:00 |
| wid-sec-w-2024-0978 | Mehrere DNS Server: Schwachstelle ermöglicht Denial of Service | 2020-05-19T22:00:00.000+00:00 | 2024-10-01T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2026-0004 | Kwetsbaarheden verholpen in Trend Micro Apex Central | 2026-01-09T11:14:58.910197Z | 2026-01-09T11:14:58.910197Z |
| ncsc-2026-0005 | Kwetsbaarheden verholpen in Siemens producten | 2026-01-13T12:05:57.353070Z | 2026-01-13T12:05:57.353070Z |
| ncsc-2026-0006 | Kwetsbaarheden verholpen in SAP producten | 2026-01-13T14:42:24.621603Z | 2026-01-13T14:42:24.621603Z |
| ncsc-2026-0007 | Kwetsbaarheden verholpen in Microsoft Windows | 2026-01-13T19:16:30.720079Z | 2026-01-13T19:16:30.720079Z |
| ncsc-2026-0008 | Kwetsbaarheid verholpen in Microsoft SQL Server | 2026-01-13T19:17:18.848673Z | 2026-01-13T19:17:18.848673Z |
| ncsc-2026-0009 | Kwetsbaarheden verholpen in Microsoft Azure | 2026-01-13T19:17:59.629364Z | 2026-01-13T19:17:59.629364Z |
| ncsc-2026-0010 | Kwetsbaarheden verholpen in Microsoft Office | 2026-01-13T19:18:45.984019Z | 2026-01-13T19:18:45.984019Z |
| ncsc-2026-0011 | Kwetsbaarheid verholpen in Microsoft Developer Tools | 2026-01-13T19:19:27.690900Z | 2026-01-13T19:19:27.690900Z |
| ncsc-2026-0012 | Kwetsbaarheden verholpen in Adobe Dreamweaver Desktop | 2026-01-14T13:41:56.261778Z | 2026-01-14T13:41:56.261778Z |
| ncsc-2026-0013 | Kwetsbaarheden verholpen in Adobe InDesign Desktop | 2026-01-14T13:45:48.530782Z | 2026-01-14T13:45:48.530782Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2005:434 | Red Hat Security Advisory: firefox security update | 2005-05-23T09:14:00+00:00 | 2026-01-08T09:18:31+00:00 |
| rhsa-2005:435 | Red Hat Security Advisory: mozilla security update | 2005-05-23T09:42:00+00:00 | 2026-01-08T09:18:32+00:00 |
| rhsa-2005:473 | Red Hat Security Advisory: lesstif security update | 2005-05-24T17:17:00+00:00 | 2025-11-21T17:29:08+00:00 |
| rhsa-2005:427 | Red Hat Security Advisory: ethereal security update | 2005-05-24T17:27:00+00:00 | 2026-01-08T09:18:28+00:00 |
| rhsa-2005:413 | Red Hat Security Advisory: ImageMagick security update | 2005-05-25T16:14:00+00:00 | 2026-01-08T09:18:24+00:00 |
| rhsa-2005:472 | Red Hat Security Advisory: kernel security update | 2005-05-25T16:42:00+00:00 | 2026-01-08T09:18:33+00:00 |
| rhsa-2005:430 | Red Hat Security Advisory: gnutls security update | 2005-06-01T13:11:00+00:00 | 2025-11-21T17:29:06+00:00 |
| rhsa-2005:433 | Red Hat Security Advisory: postgresql security update | 2005-06-01T13:24:00+00:00 | 2026-01-08T09:18:30+00:00 |
| rhsa-2005:476 | Red Hat Security Advisory: openssl security update | 2005-06-01T13:32:00+00:00 | 2025-11-21T17:29:09+00:00 |
| rhsa-2005:480 | Red Hat Security Advisory: ImageMagick security update | 2005-06-02T14:30:00+00:00 | 2025-11-21T17:29:09+00:00 |
| rhsa-2005:481 | Red Hat Security Advisory: openssh security update | 2005-06-02T14:31:00+00:00 | 2025-11-21T17:29:09+00:00 |
| rhsa-2005:416 | Red Hat Security Advisory: kdbg security update | 2005-06-02T14:32:00+00:00 | 2025-11-21T17:29:05+00:00 |
| rhsa-2005:102 | Red Hat Security Advisory: dbus security update. | 2005-06-08T15:00:00+00:00 | 2025-11-21T17:28:27+00:00 |
| rhsa-2005:165 | Red Hat Security Advisory: rsh security update | 2005-06-08T15:01:00+00:00 | 2025-11-21T17:28:36+00:00 |
| rhsa-2005:420 | Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 1 | 2005-06-08T15:12:00+00:00 | 2026-01-08T09:18:28+00:00 |
| rhsa-2005:198 | Red Hat Security Advisory: xorg-x11 security update | 2005-06-08T15:33:00+00:00 | 2025-11-21T17:28:38+00:00 |
| rhsa-2005:505 | Red Hat Security Advisory: tcpdump security update | 2005-06-13T12:03:00+00:00 | 2025-11-21T17:29:12+00:00 |
| rhsa-2005:410 | Red Hat Security Advisory: gftp security update | 2005-06-13T12:07:00+00:00 | 2025-11-21T17:29:03+00:00 |
| rhsa-2005:489 | Red Hat Security Advisory: squid security update | 2005-06-13T12:08:00+00:00 | 2026-01-06T20:20:09+00:00 |
| rhsa-2005:357 | Red Hat Security Advisory: gzip security update | 2005-06-13T12:12:00+00:00 | 2026-01-08T09:18:13+00:00 |
| rhsa-2005:506 | Red Hat Security Advisory: mikmod security update | 2005-06-13T12:18:00+00:00 | 2025-11-21T17:29:12+00:00 |
| rhsa-2005:502 | Red Hat Security Advisory: sysreport security update | 2005-06-13T12:22:00+00:00 | 2026-01-08T09:18:35+00:00 |
| rhsa-2005:495 | Red Hat Security Advisory: rsh security update | 2005-06-13T12:23:00+00:00 | 2025-11-21T17:29:10+00:00 |
| rhsa-2005:499 | Red Hat Security Advisory: gedit security update | 2005-06-13T12:28:00+00:00 | 2026-01-08T09:18:35+00:00 |
| rhsa-2005:415 | Red Hat Security Advisory: squid security update | 2005-06-14T19:40:00+00:00 | 2026-01-08T09:18:25+00:00 |
| rhsa-2005:474 | Red Hat Security Advisory: bzip2 security update | 2005-06-16T17:36:00+00:00 | 2025-11-21T17:29:08+00:00 |
| rhsa-2005:512 | Red Hat Security Advisory: mc security update | 2005-06-16T17:44:00+00:00 | 2025-11-21T17:29:13+00:00 |
| rhsa-2005:498 | Red Hat Security Advisory: spamassassin security update | 2005-06-23T19:19:00+00:00 | 2026-01-08T09:18:35+00:00 |
| rhsa-2005:523 | Red Hat Security Advisory: RealPlayer security update | 2005-06-23T19:21:00+00:00 | 2025-11-21T17:29:14+00:00 |
| rhsa-2005:524 | Red Hat Security Advisory: freeradius security update | 2005-06-23T19:25:00+00:00 | 2026-01-08T09:18:37+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-17-187-03f | ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F) | 2017-07-04T00:00:00.000000Z | 2018-06-12T00:00:00.000000Z |
| icsa-17-187-01 | Siemens OZW672 and OZW772 | 2017-07-06T00:00:00.000000Z | 2017-07-06T00:00:00.000000Z |
| icsa-17-187-02 | Siemens Reyrolle | 2017-07-06T00:00:00.000000Z | 2017-07-06T00:00:00.000000Z |
| icsa-17-187-04 | Schneider Electric Wonderware ArchestrA Logger | 2017-07-06T00:00:00.000000Z | 2017-07-06T00:00:00.000000Z |
| icsa-17-187-05 | Schneider Electric Ampla MES | 2017-07-06T00:00:00.000000Z | 2017-07-06T00:00:00.000000Z |
| icsa-17-192-01 | Siemens SIMATIC Logon | 2017-07-11T00:00:00.000000Z | 2017-07-11T00:00:00.000000Z |
| icsa-17-192-02 | Fuji Electric V-Server | 2017-07-11T00:00:00.000000Z | 2017-07-11T00:00:00.000000Z |
| icsa-17-192-03 | ABB VSN300 WiFi Logger Card | 2017-07-11T00:00:00.000000Z | 2017-07-11T00:00:00.000000Z |
| icsa-17-192-04 | OSIsoft PI Coresight | 2017-07-11T00:00:00.000000Z | 2017-07-11T00:00:00.000000Z |
| icsa-17-192-06 | Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622 | 2017-07-11T00:00:00.000000Z | 2017-07-11T00:00:00.000000Z |
| icsa-17-194-01 | Siemens SiPass integrated | 2017-07-13T00:00:00.000000Z | 2017-07-13T00:00:00.000000Z |
| icsa-17-194-03 | Siemens SIMATIC Sm@rtClient Android App | 2017-07-13T00:00:00.000000Z | 2017-07-13T00:00:00.000000Z |
| icsa-17-201-01 | Schneider Electric PowerSCADA Anywhere and Citect Anywhere | 2017-07-20T00:00:00.000000Z | 2017-07-20T00:00:00.000000Z |
| icsa-17-208-01 | Continental AG Infineon S-Gold 2 (PMB 8876) | 2017-07-27T00:00:00.000000Z | 2017-07-27T00:00:00.000000Z |
| icsa-17-208-02 | Mirion Technologies Telemetry Enabled Devices | 2017-07-27T00:00:00.000000Z | 2017-07-27T00:00:00.000000Z |
| icsa-17-208-03 | PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch | 2017-07-27T00:00:00.000000Z | 2017-07-27T00:00:00.000000Z |
| icsa-17-208-04 | Rockwell Automation Allen-Bradley Stratix and ArmorStratix | 2017-07-27T00:00:00.000000Z | 2017-08-24T00:00:00.000000Z |
| icsa-17-213-01 | Mitsubishi Electric Europe B.V. E-Designer | 2017-08-01T00:00:00.000000Z | 2017-08-01T00:00:00.000000Z |
| icsa-17-215-01 | Schneider Electric Pro-face GP-Pro EX | 2017-08-03T00:00:00.000000Z | 2017-08-03T00:00:00.000000Z |
| icsma-17-215-01 | ICSMA-17-215-01_Siemens Molecular Imaging Vulnerabilities | 2017-08-03T00:00:00.000000Z | 2017-08-03T00:00:00.000000Z |
| icsma-17-215-02 | ICSMA-17-215-02_Siemens Molecular Imaging Vulnerabilities | 2017-08-03T00:00:00.000000Z | 2017-08-03T00:00:00.000000Z |
| icsa-17-220-01 | OSIsoft PI Integrator | 2017-08-08T00:00:00.000000Z | 2017-08-08T00:00:00.000000Z |
| icsa-17-220-02 | Moxa SoftNVR-IA Live Viewer | 2017-08-08T00:00:00.000000Z | 2017-08-08T00:00:00.000000Z |
| icsa-17-222-01 | SIMPlight SCADA Software | 2017-08-10T00:00:00.000000Z | 2017-08-10T00:00:00.000000Z |
| icsa-17-222-02 | Solar Controls Heating Control Downloader (HCDownloader) | 2017-08-10T00:00:00.000000Z | 2017-08-10T00:00:00.000000Z |
| icsa-17-222-03 | Solar Controls WATTConfig M Software | 2017-08-10T00:00:00.000000Z | 2017-08-10T00:00:00.000000Z |
| icsa-17-222-04 | Fuji Electric Monitouch V-SFT | 2017-08-10T00:00:00.000000Z | 2017-08-10T00:00:00.000000Z |
| icsa-17-222-05 | ABB SREA-01 and SREA-50 | 2017-08-10T00:00:00.000000Z | 2017-08-10T00:00:00.000000Z |
| icsa-17-227-01 | Advantech WebOP | 2017-08-15T00:00:00.000000Z | 2017-08-15T00:00:00.000000Z |
| icsma-17-227-01 | ICSMA-17-227-01_BMC Medical and 3B Medical Luna CPAP Machine | 2017-08-15T00:00:00.000000Z | 2017-08-15T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190501-frpwr-dos | Cisco Firepower Threat Defense Software Packet Processing Denial of Service Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-02T17:41:24+00:00 |
| cisco-sa-20190501-frpwr-smb-snort | Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities | 2019-05-01T16:00:00+00:00 | 2019-05-02T17:54:49+00:00 |
| cisco-sa-20190501-ftd-cmd-inject | Cisco Firepower Threat Defense Software Command Injection Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-hyperflex-csrf | Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-nexus9k-rpe | Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-15T13:28:14+00:00 |
| cisco-sa-20190501-nexus9k-sshkey | Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-09T12:49:51+00:00 |
| cisco-sa-20190501-pca-xss | Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-phone-sip-xml-dos | Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-pnr-xss | Cisco Prime Network Registrar Cross-Site Scripting Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-sbr-hijack | Cisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-scbv | Cisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-sd-cpu-dos | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-02T17:57:14+00:00 |
| cisco-sa-20190501-udb-sm | Cisco Umbrella Dashboard Session Management Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-wsa-dos | Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190501-wsa-privesc | Cisco Web Security Appliance Privilege Escalation Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| cisco-sa-20190507-esc-authbypass | Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability | 2019-05-07T16:00:00+00:00 | 2019-05-07T16:00:00+00:00 |
| cisco-sa-20190513-secureboot | Cisco Secure Boot Hardware Tampering Vulnerability | 2019-05-13T17:30:00+00:00 | 2019-11-20T17:23:18+00:00 |
| cisco-sa-20190513-webui | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2019-05-13T17:30:00+00:00 | 2019-05-13T17:30:00+00:00 |
| cisco-sa-20190515-anyconnectclient-oob-read | Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-cuic-cmdinj | Cisco Unified Intelligence Center Remote File Injection Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-06-06T14:42:43+00:00 |
| cisco-sa-20190515-cvsm | Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-ftd-ssltls-bypass | Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-ftdde-poly-bypass | Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-fxos-nxos-cmdinj-1781-1782 | Cisco FXOS and NX-OS Software Command Injection Vulnerabilities (CVE-2019-1781, CVE-2019-1782) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-iosxr-evpn-dos | Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-07-10T16:56:52+00:00 |
| cisco-sa-20190515-iosxr-mpls-dos | Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Denial of Service Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-ise-certcreation | Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-bash-bypass | Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-20T14:00:47+00:00 |
| cisco-sa-20190515-nxos-cmd-inject-1784 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1784) | 2019-05-15T16:00:00+00:00 | 2019-07-18T00:00:26+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1735 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735) | 2019-05-15T16:00:00+00:00 | 2021-07-12T14:24:27+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2020-15112 | Improper Input Validation in etcd | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-15113 | Improper Preservation of Permissions in etcd | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-15114 | Denial of Service in etcd | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-15115 | No minimum password length in etcd | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-15136 | Improper authentication in etcd | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-16092 | In QEMU through 5.0.0 an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c. | 2020-08-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2020-16845 | Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs. | 2020-08-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2020-17507 | An issue was discovered in Qt through 5.12.9 and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read. | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-24241 | In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c. | 2020-08-02T00:00:00.000Z | 2025-09-03T21:30:46.000Z |
| msrc_cve-2020-24330 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user it fails to drop the root gid privilege when no longer needed. | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-24331 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon). | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-24332 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges the creation of the system.data file is prone to symlink attacks. The tss user can be used to create or corrupt existing files which could possibly lead to a DoS attack. | 2020-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-24342 | Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row. | 2020-08-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-24347 | njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c. | 2020-08-02T00:00:00.000Z | 2025-09-03T19:57:39.000Z |
| msrc_cve-2020-24370 | ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal as demonstrated by getlocal(32^31). | 2020-08-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2020-24371 | lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage. | 2020-08-02T00:00:00.000Z | 2025-09-03T22:25:53.000Z |
| msrc_cve-2020-24394 | In the Linux kernel before 5.7.8 fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support aka CID-22cf8419f131. This occurs because the current umask is not considered. | 2020-08-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-7019 | In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index. | 2020-08-02T00:00:00.000Z | 2021-12-01T00:00:00.000Z |
| msrc_cve-2020-8620 | In BIND 9.15.6 -> 9.16.5 9.17.0 -> 9.17.3 An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure causing the server to exit. | 2020-08-02T00:00:00.000Z | 2020-08-26T00:00:00.000Z |
| msrc_cve-2020-8621 | Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c | 2020-08-02T00:00:00.000Z | 2020-08-26T00:00:00.000Z |
| msrc_cve-2020-8622 | A truncated TSIG response can lead to an assertion failure | 2020-08-02T00:00:00.000Z | 2020-08-26T00:00:00.000Z |
| msrc_cve-2020-8623 | A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c | 2020-08-02T00:00:00.000Z | 2020-08-26T00:00:00.000Z |
| msrc_cve-2020-8624 | update-policy rules of type "subdomain" are enforced incorrectly | 2020-08-02T00:00:00.000Z | 2020-08-26T00:00:00.000Z |
| msrc_cve-2020-9490 | Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers. | 2020-08-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2014-10402 | An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401. | 2020-09-02T00:00:00.000Z | 2025-09-03T21:16:29.000Z |
| msrc_cve-2019-20916 | The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command because a Content-Disposition header can have ../ in a filename as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py. | 2020-09-02T00:00:00.000Z | 2020-12-21T00:00:00.000Z |
| msrc_cve-2020-0570 | Uncontrolled search path in the QT Library before 5.14.0 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access. | 2020-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-10733 | The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intended executables. An attacker having permission to add files into one of those directories can use this to execute arbitrary code with the installer's administrative rights. | 2020-09-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-10766 | A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality. | 2020-09-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-10767 | A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This flaw allows a local attacker to perform a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confidentiality. | 2020-09-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201903-1735 | Shenzhen Woshida Technology Co., Ltd. is an enterprise specializing in the development, p… | 2022-05-04T09:10:23.919000Z |
| var-201901-1689 | D-LINK Central WifiManager CWM-100 is D-LINK centralized wireless management software. T… | 2022-05-04T09:10:26.770000Z |
| var-201812-1301 | UNIFI SDN Controller is an SDN controller produced by Ubiquiti Network. A code execution… | 2022-05-04T09:10:28.596000Z |
| var-201810-1605 | DocuPrint C1110 is a laser printer. FUJI XEROX DocuPrint C1110 has a command execution v… | 2022-05-04T09:10:35.359000Z |
| var-201807-2275 | Dr.COM APG Anti-Proxy Gateway is a network behavior analysis and management gateway devic… | 2022-05-04T09:10:42.903000Z |
| var-201805-1239 | Tplink ER5110G, Tplink ER5120G and Tplink WAR1300L are enterprise VPN routers and enterpr… | 2022-05-04T09:10:50.966000Z |
| var-201803-2351 | The Play Library SDK is developed based on Dahua's proprietary stream encapsulation proto… | 2022-05-04T09:10:58.163000Z |
| var-201801-1841 | The Huawei S7700 and S9700 are Huawei's intelligent routing switches. The HuaweiS7700 and… | 2022-05-04T09:11:02.538000Z |
| var-201801-1820 | pelco Sarix Professional is a video camera. A command execution vulnerability exists in … | 2022-05-04T09:11:02.550000Z |
| var-201709-1255 | A vulnerability to denial-of-service attacks was found in JP1 and Hitachi IT Operations D… | 2022-05-04T09:11:15.536000Z |
| var-201709-1234 | MoxaSoftCMSLiveViewer is a video surveillance software designed for industrial automation… | 2022-05-04T09:11:15.549000Z |
| var-201707-1354 | AppEx is a software and hardware product that provides full-line application delivery, WA… | 2022-05-04T09:11:20.549000Z |
| var-201706-1147 | Foscamcamera is a webcam that can push messages to mobile phones and directly implement v… | 2022-05-04T09:11:25.222000Z |
| var-201706-1126 | Foscamcamera is a webcam that can push messages to mobile phones and directly implement v… | 2022-05-04T09:11:25.233000Z |
| var-201704-1631 | LinksysSmartWi-FiRouters are smart Wi-Fi routers. There are multiple denial of service vu… | 2022-05-04T09:11:29.958000Z |
| var-201703-1383 | Apache Struts is an open source framework for creating enterprise Java web applications. … | 2022-05-04T09:11:34.956000Z |
| var-201702-1106 | The D-Link DGS-1510 series is the next generation of intelligent managed switches. There … | 2022-05-04T09:11:37.551000Z |
| var-201612-0641 | MileSight camera is a network camera produced by Xiamen Pulse Vision Digital Technology C… | 2022-05-04T09:11:43.289000Z |
| var-201611-0409 | Beijing Wangkang Technology Co., Ltd. Wangkang Internet Control Gateway is a software and… | 2022-05-04T09:11:44.214000Z |
| var-201610-0733 | AVTECH, founded in 1996, is one of the world's leading manufacturers of CCTV. The main pr… | 2022-05-04T09:11:45.702000Z |
| var-201610-0712 | ZXECS EBG2800 is a converged communications product that integrates data, voice, security… | 2022-05-04T09:11:45.713000Z |
| var-201609-0692 | ASUSRT-N10EWirelessRouter is a wireless router device developed by ASUS. ASUSRT-N10E has … | 2022-05-04T09:11:46.604000Z |
| var-201601-0680 | Hikvision camera has weak password, allowing initial password login | 2022-05-04T09:11:55.051000Z |
| var-201507-0714 | WAS China Mobile Proxy Server is to meet the high informationization group customers 'mob… | 2022-05-04T09:12:01.956000Z |
| var-201506-0568 | Pulian Technology Co., Ltd. is a network equipment research and development and manufactu… | 2022-05-04T09:12:02.416000Z |
| var-201502-0541 | A cross-site scripting vulnerability was found in the online help of JP1/IT Desktop Manag… | 2022-05-04T09:12:08.707000Z |
| var-201411-0522 | The Hikvision DVR is a hard disk recorder. Hikvision DVR DS-7204 has a remote buffer over… | 2022-05-04T09:12:14.607000Z |
| var-201405-0538 | VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VM… | 2022-05-04T09:12:23.053000Z |
| var-201404-0754 | The Comtrend CT-5361T is a router device. The Comtrend CT-5361T ddnsmngr.cmd script faile… | 2022-05-04T09:12:23.577000Z |
| var-201309-0591 | Moxa OnCell G3100 is an industrial grade IP gateway. The Moxa OnCell G3100 has a default … | 2022-05-04T09:12:31.834000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-000056 | Plone vulnerable to cross-site scripting | 2011-07-27T16:17+09:00 | 2011-07-27T16:17+09:00 |
| jvndb-2011-000055 | Mozilla Firefox vulnerability in processing content-length header | 2011-07-28T16:24+09:00 | 2011-07-28T16:24+09:00 |
| jvndb-2011-000057 | Mozilla Firefox vulnerable to denial-of-service (DoS) | 2011-07-28T16:27+09:00 | 2011-07-28T16:27+09:00 |
| jvndb-2011-000058 | Mozilla Firefox vulnerable to cross-site scripting | 2011-07-28T16:29+09:00 | 2011-07-28T16:29+09:00 |
| jvndb-2011-000059 | Mozilla Firefox vulnerable to cross-site scripting | 2011-07-28T16:31+09:00 | 2011-07-28T16:31+09:00 |
| jvndb-2011-000053 | Android vulnerability where an incorrect SSL certificate is displayed | 2011-07-29T14:26+09:00 | 2014-05-19T17:19+09:00 |
| jvndb-2011-001927 | Arbitrary Code Execution Vulnerability in HiRDB Control Manager | 2011-08-09T10:10+09:00 | 2011-08-09T10:10+09:00 |
| jvndb-2011-001928 | JP1/Performance Management - Web Console Cross-Site Scripting Vulnerability | 2011-08-09T10:11+09:00 | 2011-08-09T10:11+09:00 |
| jvndb-2011-000060 | Windows URL Protocol Handler may insecurely load executable files | 2011-08-10T17:17+09:00 | 2011-08-10T17:17+09:00 |
| jvndb-2011-000061 | Internet Explorer window display vulnerability | 2011-08-12T14:06+09:00 | 2011-08-12T14:06+09:00 |
| jvndb-2011-000062 | Aipo vulnerable to cross-site request forgery | 2011-08-16T16:41+09:00 | 2011-08-16T16:41+09:00 |
| jvndb-2011-000063 | Aipo vulnerable to SQL injection | 2011-08-16T16:44+09:00 | 2011-08-16T16:44+09:00 |
| jvndb-2011-000064 | Microsoft Windows XP vulnerable to denial-of-service (DoS) | 2011-08-19T16:32+09:00 | 2011-08-19T16:32+09:00 |
| jvndb-2011-000067 | WebsiteBaker vulnerable to cross-site scripting | 2011-08-26T15:50+09:00 | 2011-08-26T15:50+09:00 |
| jvndb-2011-002110 | Samba Web Administration Tool vulnerable to cross-site request forgery | 2011-08-26T17:12+09:00 | 2012-12-26T11:37+09:00 |
| jvndb-2011-002111 | Samba Web Administration Tool vulnerable to cross-site scripting | 2011-08-26T17:14+09:00 | 2012-12-26T11:42+09:00 |
| jvndb-2011-000068 | Multiple vulnerabilities in Phorum | 2011-09-02T19:11+09:00 | 2011-09-02T19:11+09:00 |
| jvndb-2011-000069 | Sage vulnerable to arbitrary script execution | 2011-09-02T19:14+09:00 | 2011-09-02T19:14+09:00 |
| jvndb-2011-000070 | Sage vulnerable to arbitrary script execution | 2011-09-02T19:19+09:00 | 2011-09-02T19:19+09:00 |
| jvndb-2011-000071 | Juniper Networks IDP ACM vulnerable to cross-site scripting | 2011-09-02T19:22+09:00 | 2011-09-02T19:22+09:00 |
| jvndb-2011-000072 | GTK+ may insecurely load dynamic libraries | 2011-09-02T19:26+09:00 | 2011-09-02T19:26+09:00 |
| jvndb-2011-000073 | Megalith vulnerable to authentication bypass | 2011-09-12T09:19+09:00 | 2011-09-12T09:19+09:00 |
| jvndb-2011-000074 | SemanticScuttle vulnerable to cross-site scripting | 2011-09-16T18:08+09:00 | 2011-09-16T18:08+09:00 |
| jvndb-2011-000065 | BaserCMS vulnerable to cross-site scripting | 2011-09-30T18:39+09:00 | 2011-09-30T18:39+09:00 |
| jvndb-2011-000066 | BaserCMS vulnerable to access restriction | 2011-09-30T18:45+09:00 | 2011-09-30T18:45+09:00 |
| jvndb-2011-000077 | Enkai-kun vulnerable to cross-site scripting | 2011-10-11T09:00+09:00 | 2011-10-11T09:00+09:00 |
| jvndb-2011-000078 | A-Form vulnerable in restricting access | 2011-10-11T09:08+09:00 | 2011-10-11T09:08+09:00 |
| jvndb-2011-000079 | Cybozu Office vulnerable in restricting access | 2011-10-11T09:11+09:00 | 2011-11-28T16:48+09:00 |
| jvndb-2011-000080 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:24+09:00 | 2011-10-25T13:44+09:00 |
| jvndb-2011-000081 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:27+09:00 | 2011-10-25T13:45+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2016:0429-1 | Security update for krb5 | 2016-02-11T10:51:55Z | 2016-02-11T10:51:55Z |
| suse-su-2016:0428-1 | Security update for java-1_6_0-ibm | 2016-02-11T10:52:08Z | 2016-02-11T10:52:08Z |
| suse-su-2016:0433-1 | Security update for java-1_7_0-ibm | 2016-02-11T10:52:24Z | 2016-02-11T10:52:24Z |
| suse-su-2016:0431-1 | Security update for java-1_6_0-ibm | 2016-02-11T10:52:39Z | 2016-02-11T10:52:39Z |
| suse-su-2016:0432-1 | Security update for rubygem-activemodel-4_2 | 2016-02-11T10:52:47Z | 2016-02-11T10:52:47Z |
| suse-su-2016:0434-1 | Security update for kernel live patch 1 | 2016-02-11T16:46:47Z | 2016-02-11T16:46:47Z |
| suse-su-2016:0435-1 | Security update for rubygem-activesupport-4_2 | 2016-02-11T16:47:38Z | 2016-02-11T16:47:38Z |
| suse-su-2016:0455-1 | Security update for libnettle | 2016-02-15T13:25:14Z | 2016-02-15T13:25:14Z |
| suse-su-2016:0456-1 | Security update for rubygem-actionview-4_2 | 2016-02-15T13:25:24Z | 2016-02-15T13:25:24Z |
| suse-su-2016:0458-1 | Security update for rubygem-activerecord-4_2 | 2016-02-15T13:25:30Z | 2016-02-15T13:25:30Z |
| suse-su-2016:0457-1 | Security update for rubygem-actionpack-4_2 | 2016-02-15T13:25:35Z | 2016-02-15T13:25:35Z |
| suse-su-2016:0459-1 | Security update for qemu | 2016-02-15T14:28:30Z | 2016-02-15T14:28:30Z |
| suse-su-2016:0471-1 | Security update for glibc | 2016-02-16T15:19:53Z | 2016-02-16T15:19:53Z |
| suse-su-2016:0473-1 | Security update for glibc | 2016-02-16T15:20:20Z | 2016-02-16T15:20:20Z |
| suse-su-2016:0470-1 | Security update for glibc | 2016-02-16T15:37:56Z | 2016-02-16T15:37:56Z |
| suse-su-2016:0472-1 | Security update for glibc | 2016-02-16T15:39:44Z | 2016-02-16T15:39:44Z |
| suse-su-2016:0482-1 | Security update for postgresql94 | 2016-02-16T17:31:39Z | 2016-02-16T17:31:39Z |
| suse-su-2016:0481-1 | Security update for dhcp | 2016-02-16T17:34:05Z | 2016-02-16T17:34:05Z |
| suse-ru-2016:0496-1 | Recommended update for certification-sles-eal4 | 2016-02-17T16:38:28Z | 2016-02-17T16:38:28Z |
| suse-su-2016:0539-1 | Security update for postgresql93 | 2016-02-22T10:07:15Z | 2016-02-22T10:07:15Z |
| suse-su-2016:0540-1 | Security update for dhcp | 2016-02-22T13:35:56Z | 2016-02-22T13:35:56Z |
| suse-su-2016:0541-1 | Security update for dhcp | 2016-02-22T13:36:16Z | 2016-02-22T13:36:16Z |
| suse-su-2016:0555-1 | Security update for postgresql94 | 2016-02-24T09:01:11Z | 2016-02-24T09:01:11Z |
| suse-su-2016:0554-1 | Security update for MozillaFirefox | 2016-02-24T09:06:06Z | 2016-02-24T09:06:06Z |
| suse-su-2016:0564-1 | Security update for MozillaFirefox | 2016-02-24T13:21:54Z | 2016-02-24T13:21:54Z |
| suse-su-2016:0584-1 | Security update for MozillaFirefox, MozillaFirefox-branding-SLED, MozillaFirefox-branding-SLES-for-VMware, mozilla-nss | 2016-02-25T15:19:11Z | 2016-02-25T15:19:11Z |
| suse-su-2016:0585-1 | Security update for the Linux Kernel | 2016-02-25T16:23:22Z | 2016-02-25T16:23:22Z |
| suse-su-2016:0599-1 | Security update for rubygem-actionview-4_1 | 2016-02-26T15:08:28Z | 2016-02-26T15:08:28Z |
| suse-su-2016:0597-1 | Security update for rubygem-activemodel-4_1 | 2016-02-26T15:08:35Z | 2016-02-26T15:08:35Z |
| suse-su-2016:0598-1 | Security update for rubygem-activerecord-4_1 | 2016-02-26T15:08:40Z | 2016-02-26T15:08:40Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2019:2078-1 | Security update for python-SQLAlchemy | 2019-09-06T08:21:54Z | 2019-09-06T08:21:54Z |
| opensuse-su-2019:2080-1 | Security update for chromium | 2019-09-07T06:57:47Z | 2019-09-07T06:57:47Z |
| opensuse-su-2019:2081-1 | Security update for chromium | 2019-09-07T07:20:18Z | 2019-09-07T07:20:18Z |
| opensuse-su-2019:2083-1 | Security update for srt | 2019-09-07T10:20:42Z | 2019-09-07T10:20:42Z |
| opensuse-su-2019:2085-1 | Security update for go1.12 | 2019-09-07T14:22:30Z | 2019-09-07T14:22:30Z |
| opensuse-su-2019:2089-1 | Security update for httpie | 2019-09-07T14:23:00Z | 2019-09-07T14:23:00Z |
| opensuse-su-2019:2093-1 | Security update for exim | 2019-09-08T14:55:24Z | 2019-09-08T14:55:24Z |
| opensuse-su-2019:2094-1 | Security update for chromium | 2019-09-08T15:07:49Z | 2019-09-08T15:07:49Z |
| opensuse-su-2019:2095-1 | Security update for libmirage | 2019-09-08T16:18:09Z | 2019-09-08T16:18:09Z |
| opensuse-su-2019:2096-1 | Security update for libmirage | 2019-09-08T16:18:21Z | 2019-09-08T16:18:21Z |
| opensuse-su-2019:2107-1 | Recommended update for opera | 2019-09-10T05:28:28Z | 2019-09-10T05:28:28Z |
| opensuse-su-2019:2108-1 | Security update for SDL2_image | 2019-09-10T14:20:24Z | 2019-09-10T14:20:24Z |
| opensuse-su-2019:2109-1 | Security update for SDL_image | 2019-09-10T14:20:33Z | 2019-09-10T14:20:33Z |
| opensuse-su-2019:2110-1 | Security update for python-Twisted | 2019-09-10T14:20:42Z | 2019-09-10T14:20:42Z |
| opensuse-su-2019:2114-1 | Security update for nodejs10 | 2019-09-10T16:22:24Z | 2019-09-10T16:22:24Z |
| opensuse-su-2019:2115-1 | Security update for nodejs8 | 2019-09-10T16:22:52Z | 2019-09-10T16:22:52Z |
| opensuse-su-2019:2118-1 | Security update for python-Werkzeug | 2019-09-10T16:23:43Z | 2019-09-10T16:23:43Z |
| opensuse-su-2019:2120-1 | Security update for nginx | 2019-09-10T18:18:07Z | 2019-09-10T18:18:07Z |
| opensuse-su-2019:2121-1 | Security update for util-linux and shadow | 2019-09-10T18:18:24Z | 2019-09-10T18:18:24Z |
| opensuse-su-2019:2128-1 | Security update for srt | 2019-09-12T16:18:20Z | 2019-09-12T16:18:20Z |
| opensuse-su-2019:2129-1 | Security update for libmirage | 2019-09-14T04:17:39Z | 2019-09-14T04:17:39Z |
| opensuse-su-2019:2130-1 | Security update for go1.12 | 2019-09-14T12:16:57Z | 2019-09-14T12:16:57Z |
| opensuse-su-2019:2131-1 | Security update for python-urllib3 | 2019-09-14T12:17:04Z | 2019-09-14T12:17:04Z |
| opensuse-su-2019:2133-1 | Security update for python-urllib3 | 2019-09-14T16:16:45Z | 2019-09-14T16:16:45Z |
| opensuse-su-2019:2135-1 | Security update for rdesktop | 2019-09-14T16:17:10Z | 2019-09-14T16:17:10Z |
| opensuse-su-2019:2137-1 | Security update for buildah | 2019-09-15T12:16:46Z | 2019-09-15T12:16:46Z |
| opensuse-su-2019:2138-1 | Security update for skopeo | 2019-09-15T12:16:54Z | 2019-09-15T12:16:54Z |
| opensuse-su-2019:2139-1 | Security update for ghostscript | 2019-09-16T04:17:00Z | 2019-09-16T04:17:00Z |
| opensuse-su-2019:2142-1 | Security update for samba | 2019-09-16T16:17:28Z | 2019-09-16T16:17:28Z |
| opensuse-su-2019:2143-1 | Security update for podman | 2019-09-16T18:16:43Z | 2019-09-16T18:16:43Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2015-00673 | pigz目录遍历漏洞 | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00674 | IBM AIX和VIOS提升权限漏洞 | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00675 | Haxx Libcurl中间人攻击漏洞 | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00676 | Oracle PeopleSoft Enterprise HRMS组件存在未明漏洞 | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00677 | Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00677） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00678 | Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00678） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00679 | Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00679） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00680 | Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00680） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00681 | Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00681） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00682 | Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00682） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00683 | Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00683） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00684 | Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00684） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00685 | Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00685） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00686 | Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00686） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00687 | Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00687） | 2015-01-22 | 2015-01-27 |
| cnvd-2015-00599 | Sympa文件泄露漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00600 | Kiwix跨站脚本漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00601 | Defense4all安全绕过漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00602 | xdg-utils Eval注入漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00603 | pax存在未明漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00604 | FFmpeg及Libav 'libavcodec/xface.h'拒绝服务漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00605 | Exponent CMS 'index.php'跨站脚本漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00606 | X-CART 'xcart/cart.php'存在多个跨站脚本漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00607 | osTicket 'tickets.php'跨站脚本漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00608 | Samba权限提升漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00609 | Cisco Unified Communications Manager文件泄露漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00610 | Linux Kernel 'evdev.c'本地信息泄露漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00611 | PHP Calendar Extension远程整数溢出漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00612 | Zend Framework Session Validators安全绕过漏洞 | 2015-01-23 | 2015-01-26 |
| cnvd-2015-00613 | Adobe Flash Player内存破坏漏洞（CNVD-2015-00613） | 2015-01-23 | 2015-01-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2003-avi-118 | Multiples vulnérabilités dans le noyau linux 2.4 | 2003-07-24T00:00:00.000000 | 2003-07-24T00:00:00.000000 |
| certa-2003-avi-119 | Vulnérabilité IPv6 dans Solaris 8 | 2003-07-24T00:00:00.000000 | 2003-07-24T00:00:00.000000 |
| certa-2003-avi-120 | Vulnérabilité dans la suite Oracle E-Business | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-121 | Débordement de mémoire dans le programme FNDWRR de la suite Oracle E-Business | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-122 | Vulnérabilité dans EXTPROC d'Oracle Database Server | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-123 | Vulnérabilité dans les serveurs Novell Netware | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-124 | Vulnérabilité de VMware pour plates-formes Linux | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-125 | Vulnérabilité de Merge de SCO UnixWare | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-126 | Vulnérabilité de Workgroup Manager de MacOS X | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-127 | Vulnérabilité dans l'éditeur de liens dynamiques sur Solaris | 2003-07-31T00:00:00.000000 | 2003-08-01T00:00:00.000000 |
| certa-2003-avi-128 | Vulnérabilité dans CISCO IOS | 2003-07-31T00:00:00.000000 | 2003-07-31T00:00:00.000000 |
| certa-2003-avi-129 | Vulnérabilité du serveur HTTP dans CISCO IOS | 2003-07-31T00:00:00.000000 | 2003-07-31T00:00:00.000000 |
| certa-2003-avi-130 | Vulnérabilité de l'application Stunnel | 2003-07-31T00:00:00.000000 | 2003-07-31T00:00:00.000000 |
| certa-2003-avi-131 | Vulnérabilité sur les gardes-barrières NetScreen | 2003-08-01T00:00:00.000000 | 2003-08-01T00:00:00.000000 |
| certa-2003-avi-132 | Vulnérabilité du serveur wu-ftpd | 2003-08-01T00:00:00.000000 | 2003-09-04T00:00:00.000000 |
| certa-2003-avi-133 | Multiples failles dans McAfee »Security ePolicy Orchestrator» | 2003-08-01T00:00:00.000000 | 2003-08-01T00:00:00.000000 |
| certa-2003-avi-134 | Vulnérabilité de la fonction realpath pour les systèmes BSD | 2003-08-06T00:00:00.000000 | 2003-08-18T00:00:00.000000 |
| certa-2003-avi-135 | Vulnérabilités du serveur de messagerie Postfix | 2003-08-07T00:00:00.000000 | 2003-08-07T00:00:00.000000 |
| certa-2003-avi-136 | Vulnérabilité du serveur in.ftpd sous Solaris 9 | 2003-08-18T00:00:00.000000 | 2003-08-18T00:00:00.000000 |
| certa-2003-avi-137 | Vulnérabilités de l'application CiscoWorks | 2003-08-19T00:00:00.000000 | 2003-08-19T00:00:00.000000 |
| certa-2003-avi-138 | Vulnérabilité de la commande UnZip | 2003-08-20T00:00:00.000000 | 2003-08-20T00:00:00.000000 |
| certa-2003-avi-139 | Multiples vulnérabilités dans Internet Explorer | 2003-08-21T00:00:00.000000 | 2003-08-21T00:00:00.000000 |
| certa-2003-avi-140 | Vulnérabilité de Microsoft Data Access Components | 2003-08-21T00:00:00.000000 | 2003-08-21T00:00:00.000000 |
| certa-2003-avi-141 | Vulnérabilité de sendmail | 2003-08-27T00:00:00.000000 | 2003-09-03T00:00:00.000000 |
| certa-2003-avi-142 | Défaut du client SNTP des routeurs Netgear | 2003-08-28T00:00:00.000000 | 2003-08-28T00:00:00.000000 |
| certa-2003-avi-143 | Vulnérabilités dans XFree86 | 2003-09-03T00:00:00.000000 | 2003-09-03T00:00:00.000000 |
| certa-2003-avi-144 | Vulnérabilité de NetBIOS | 2003-09-04T00:00:00.000000 | 2003-09-04T00:00:00.000000 |
| certa-2003-avi-145 | Vulnérabilité de Microsoft Word | 2003-09-04T00:00:00.000000 | 2003-09-04T00:00:00.000000 |
| certa-2003-avi-146 | Vulnérabilité du convertisseur Microsoft WordPerfect | 2003-09-04T00:00:00.000000 | 2003-09-04T00:00:00.000000 |
| certa-2003-avi-147 | Vulnérabilité dans Visual Basic pour Applications (VBA) | 2003-09-04T00:00:00.000000 | 2003-09-04T00:00:00.000000 |