Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2774 |
8.8 (3.1)
|
Integer overflow in the Audio/Video component |
Mozilla |
Firefox |
2026-02-24T13:33:10.821Z | 2026-02-26T20:21:19.007Z |
| CVE-2026-27498 |
9 (4.0)
|
n8n has Arbitrary Command Execution via File Write and… |
n8n-io |
n8n |
2026-02-25T22:42:21.618Z | 2026-02-26T20:21:05.587Z |
| CVE-2026-2790 |
8.8 (3.1)
|
Same-origin policy bypass in the Networking: JAR component |
Mozilla |
Firefox |
2026-02-24T13:33:21.600Z | 2026-02-26T20:20:36.866Z |
| CVE-2026-2794 |
6.5 (3.1)
|
Information disclosure due to uninitialized memory in … |
Mozilla |
Firefox |
2026-02-24T13:33:25.399Z | 2026-02-26T20:18:07.820Z |
| CVE-2026-27578 |
8.5 (4.0)
|
n8n Vulnerable to Stored XSS via Various Nodes |
n8n-io |
n8n |
2026-02-25T22:40:38.606Z | 2026-02-26T20:16:20.758Z |
| CVE-2026-27577 |
9.4 (4.0)
|
n8n: Expression Sandbox Escape Leads to RCE |
n8n-io |
n8n |
2026-02-25T22:19:44.806Z | 2026-02-26T20:14:30.327Z |
| CVE-2026-2767 |
8.8 (3.1)
|
Use-after-free in the JavaScript: WebAssembly component |
Mozilla |
Firefox |
2026-02-24T13:33:05.551Z | 2026-02-26T20:10:59.598Z |
| CVE-2026-2783 |
6.5 (3.1)
|
Information disclosure due to JIT miscompilation in th… |
Mozilla |
Firefox |
2026-02-24T13:33:16.921Z | 2026-02-26T20:10:05.132Z |
| CVE-2026-2781 |
8.8 (3.1)
|
Integer overflow in the Libraries component in NSS |
Mozilla |
Firefox |
2026-02-24T13:33:15.551Z | 2026-02-26T20:07:34.180Z |
| CVE-2026-3105 |
7.6 (3.1)
|
SQL Injection in Contact Activity API Sorting |
Mautic |
Mautic |
2026-02-24T18:39:03.352Z | 2026-02-26T20:07:06.187Z |
| CVE-2026-2785 |
8.8 (3.1)
|
Invalid pointer in the JavaScript Engine component |
Mozilla |
Firefox |
2026-02-24T13:33:18.254Z | 2026-02-26T20:06:49.232Z |
| CVE-2026-2786 |
8.8 (3.1)
|
Use-after-free in the JavaScript Engine component |
Mozilla |
Firefox |
2026-02-24T13:33:18.980Z | 2026-02-26T20:04:22.957Z |
| CVE-2026-2787 |
8.8 (3.1)
|
Use-after-free in the DOM: Window and Location component |
Mozilla |
Firefox |
2026-02-24T13:33:19.579Z | 2026-02-26T20:02:41.330Z |
| CVE-2026-2803 |
7.5 (3.1)
|
Information disclosure, mitigation bypass in the Setti… |
Mozilla |
Firefox |
2026-02-24T13:33:31.491Z | 2026-02-26T20:01:27.866Z |
| CVE-2026-27152 |
1.3 (4.0)
|
DIscourse has DM communication-preference bypass when … |
discourse |
discourse |
2026-02-26T20:00:33.138Z | 2026-02-26T20:00:33.138Z |
| CVE-2026-26342 |
8.7 (4.0)
|
Tattile Smart+ / Vega / Basic <= 1.181.5 Insufficient … |
Tattile s.r.l. |
Smart+ |
2026-02-24T18:41:09.935Z | 2026-02-26T19:58:40.958Z |
| CVE-2026-27162 |
4.9 (4.0)
|
DIscourse doesn't prevent whispers to leak in excerpts |
discourse |
discourse |
2026-02-26T19:58:33.819Z | 2026-02-26T19:58:33.819Z |
| CVE-2026-27151 |
1.3 (4.0)
|
Discourse doesn't validate destination topic when movi… |
discourse |
discourse |
2026-02-26T19:57:06.920Z | 2026-02-26T19:57:06.920Z |
| CVE-2026-27747 |
7.1 (4.0)
6.5 (3.1)
|
SPIP interface_traduction_objets < 2.2.2 Authenticated… |
SPIP |
interface_traduction_objets |
2026-02-25T03:07:44.532Z | 2026-02-26T19:56:56.048Z |
| CVE-2026-27746 |
5.1 (4.0)
6.1 (3.1)
|
SPIP jeux < 4.1.1 Reflected XSS via index Parameters |
SPIP |
jeux |
2026-02-25T03:07:57.179Z | 2026-02-26T19:56:32.551Z |
| CVE-2026-27745 |
8.7 (4.0)
8.8 (3.1)
|
SPIP interface_traduction_objets < 2.2.2 Authenticated RCE |
SPIP |
interface_traduction_objets |
2026-02-25T03:08:11.502Z | 2026-02-26T19:56:06.952Z |
| CVE-2026-27150 |
1.3 (4.0)
|
Discourse doesn't ensure guardian check when creating … |
discourse |
discourse |
2026-02-26T19:55:35.263Z | 2026-02-26T19:55:35.263Z |
| CVE-2026-27744 |
9.3 (4.0)
9.8 (3.1)
|
SPIP tickets < 4.3.3 Unauthenticated RCE |
SPIP |
tickets |
2026-02-25T03:08:24.714Z | 2026-02-26T19:55:34.974Z |
| CVE-2026-27743 |
9.3 (4.0)
9.8 (3.1)
|
SPIP referer_spam <= 1.2.1 Unauthenticated SQL Injection |
SPIP |
referer_spam |
2026-02-25T03:08:39.325Z | 2026-02-26T19:55:07.890Z |
| CVE-2025-47904 |
5.7 (4.0)
|
Unsigned upgrade package |
Microchip |
Time Provider 4100 |
2026-02-24T15:34:20.905Z | 2026-02-26T19:53:24.404Z |
| CVE-2026-27149 |
4.9 (4.0)
|
Discourse has SQL injection in PM tag filtering |
discourse |
discourse |
2026-02-26T19:52:54.619Z | 2026-02-26T19:52:54.619Z |
| CVE-2025-13776 |
8.6 (4.0)
|
Hard-coded database credentials in Finka software |
TIK-SOFT |
Finka-FK |
2026-02-24T15:58:30.096Z | 2026-02-26T19:49:53.565Z |
| CVE-2026-27516 |
8.6 (4.0)
8.1 (3.1)
|
Binardat 10G08-0800GSM Network Switch Plaintext Passwo… |
Binardat Ltd. |
10G08-0800GSM Network Switch |
2026-02-24T15:05:12.384Z | 2026-02-26T19:45:40.975Z |
| CVE-2026-21410 |
9.8 (3.1)
9.3 (4.0)
|
InSAT MasterSCADA BUK-TS SQL Injection |
InSAT |
MasterSCADA BUK-TS |
2026-02-24T20:53:55.150Z | 2026-02-26T19:41:40.457Z |
| CVE-2026-22553 |
9.8 (3.1)
9.3 (4.0)
|
InSAT MasterSCADA BUK-TS OS Command Injection |
InSAT |
MasterSCADA BUK-TS |
2026-02-24T20:56:14.099Z | 2026-02-26T19:39:01.753Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27653 |
6.7 (3.0)
5.4 (4.0)
|
The installers for multiple products provided by … |
Soliton Systems K.K. |
Soliton SecureBrowser for OneGate |
2026-02-27T05:39:54.060Z | 2026-02-27T18:52:30.918Z |
| CVE-2026-27652 |
7.3 (3.1)
|
CloudCharge cloudcharge.se Insufficient Session Expiration |
CloudCharge |
cloudcharge.se |
2026-02-26T23:36:33.131Z | 2026-02-26T23:36:33.131Z |
| CVE-2026-27647 |
7.3 (3.1)
|
Mobility46 mobility46.se Insufficient Session Expiration |
Mobility46 |
mobility46.se |
2026-02-27T00:23:50.315Z | 2026-02-27T00:23:50.315Z |
| CVE-2026-27449 |
7.5 (3.1)
|
Umbraco.Engage.Forms Allows Unauthorized Access to Mul… |
umbraco |
Umbraco.Engage.Forms |
2026-02-26T21:51:14.512Z | 2026-02-26T21:51:14.512Z |
| CVE-2026-27162 |
4.9 (4.0)
|
DIscourse doesn't prevent whispers to leak in excerpts |
discourse |
discourse |
2026-02-26T19:58:33.819Z | 2026-02-26T19:58:33.819Z |
| CVE-2026-27154 |
1.3 (4.0)
|
Discourse has XSS when editing a malicious post |
discourse |
discourse |
2026-02-26T21:20:25.181Z | 2026-02-26T21:20:25.181Z |
| CVE-2026-27153 |
1.3 (4.0)
|
Discourse doesn't prevent moderators from exporting us… |
discourse |
discourse |
2026-02-26T21:16:41.077Z | 2026-02-26T21:18:26.613Z |
| CVE-2026-27152 |
1.3 (4.0)
|
DIscourse has DM communication-preference bypass when … |
discourse |
discourse |
2026-02-26T20:00:33.138Z | 2026-02-26T20:00:33.138Z |
| CVE-2026-27151 |
1.3 (4.0)
|
Discourse doesn't validate destination topic when movi… |
discourse |
discourse |
2026-02-26T19:57:06.920Z | 2026-02-26T19:57:06.920Z |
| CVE-2026-27150 |
1.3 (4.0)
|
Discourse doesn't ensure guardian check when creating … |
discourse |
discourse |
2026-02-26T19:55:35.263Z | 2026-02-26T19:55:35.263Z |
| CVE-2026-27149 |
4.9 (4.0)
|
Discourse has SQL injection in PM tag filtering |
discourse |
discourse |
2026-02-26T19:52:54.619Z | 2026-02-26T19:52:54.619Z |
| CVE-2026-27028 |
9.4 (3.1)
|
Mobility46 mobility46.se Missing Authentication for Cr… |
Mobility46 |
mobility46.se |
2026-02-27T00:20:52.288Z | 2026-02-27T00:20:52.288Z |
| CVE-2026-27021 |
6.9 (4.0)
|
Discourse: Poll voters endpoint lacked post visibility… |
discourse |
discourse |
2026-02-26T19:50:56.341Z | 2026-02-28T03:25:15.137Z |
| CVE-2026-26979 |
0 (4.0)
|
Discourse: TL4 users are able to change status of rest… |
discourse |
discourse |
2026-02-26T19:25:15.812Z | 2026-02-26T20:38:24.755Z |
| CVE-2026-26973 |
4.3 (3.1)
|
Discourse doesn't scope reviewable notes to user-visib… |
discourse |
discourse |
2026-02-26T19:19:18.139Z | 2026-02-26T20:41:30.698Z |
| CVE-2026-26938 |
8.6 (3.1)
|
Improper Neutralization of Special Elements Used in a … |
Elastic |
Kibana |
2026-02-26T17:56:48.611Z | 2026-02-27T16:03:59.847Z |
| CVE-2026-26937 |
6.5 (3.1)
|
Uncontrolled Resource Consumption in Kibana Leading to… |
Elastic |
Kibana |
2026-02-26T17:51:35.421Z | 2026-02-27T16:04:41.385Z |
| CVE-2026-26936 |
4.9 (3.1)
|
Inefficient Regular Expression Complexity in Kibana Le… |
Elastic |
Kibana |
2026-02-26T17:07:40.604Z | 2026-02-26T18:28:11.114Z |
| CVE-2026-26935 |
6.5 (3.1)
|
Improper Input Validation in Kibana Leading to Denial … |
Elastic |
Kibana |
2026-02-26T17:05:16.619Z | 2026-02-26T18:28:11.607Z |
| CVE-2026-26934 |
6.5 (3.1)
|
Improper Validation of Specified Quantity in Input in … |
Elastic |
Kibana |
2026-02-26T17:03:17.242Z | 2026-02-26T18:28:11.925Z |
| CVE-2026-26932 |
5.7 (3.1)
|
Improper Validation of Array Index in Packetbeat Leadi… |
Elastic |
Packetbeat |
2026-02-26T16:59:55.310Z | 2026-02-26T18:28:12.222Z |
| CVE-2026-2680 |
4.8 (4.0)
|
Multiple vulnerabilities in A3factura software |
A3factura |
A3factura |
2026-02-26T12:18:48.247Z | 2026-02-26T14:04:31.184Z |
| CVE-2026-2679 |
4.8 (4.0)
|
Multiple vulnerabilities in A3factura software |
A3factura |
A3factura |
2026-02-26T12:18:13.402Z | 2026-02-26T14:06:26.035Z |
| CVE-2026-2678 |
4.8 (4.0)
|
Multiple vulnerabilities in A3factura software |
A3factura |
A3factura |
2026-02-26T12:17:17.445Z | 2026-02-26T14:09:15.966Z |
| CVE-2026-2677 |
4.8 (4.0)
|
Multiple vulnerabilities in A3factura software |
A3factura |
A3factura |
2026-02-26T12:16:03.068Z | 2026-02-26T14:13:41.794Z |
| CVE-2026-26682 |
7.8 (3.1)
|
An issue in fastCMS before v.0.1.6 allows a local… |
n/a |
n/a |
2026-02-26T00:00:00.000Z | 2026-02-26T18:53:00.554Z |
| CVE-2026-26305 |
7.5 (3.1)
|
Mobility46 mobility46.se Improper Restriction of Exces… |
Mobility46 |
mobility46.se |
2026-02-27T00:22:24.167Z | 2026-02-27T00:22:24.167Z |
| CVE-2026-26290 |
7.3 (3.1)
|
EV Energy ev.energy Insufficient Session Expiration |
EV Energy |
ev.energy |
2026-02-27T00:13:16.357Z | 2026-02-27T00:13:16.357Z |
| CVE-2026-26265 |
7.5 (3.1)
|
Discourse has IDOR vulnerability in the directory item… |
discourse |
discourse |
2026-02-26T15:10:25.929Z | 2026-02-27T16:17:05.469Z |
| CVE-2026-26207 |
5.4 (3.1)
|
DIscourse's discourse-policy plugin lacks post access check |
discourse |
discourse |
2026-02-26T15:04:14.557Z | 2026-02-26T21:33:42.157Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-27153 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T22:20:47.570 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-27152 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T21:28:54.650 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-27151 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T21:28:54.493 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-27150 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T21:28:54.343 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-27149 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T21:28:54.193 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-27028 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthori… | 2026-02-27T01:16:20.790 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-27021 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T21:28:53.927 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26979 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T20:31:37.833 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26973 | Discourse is an open source discussion platform. Versions prior to 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T20:31:37.327 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26938 | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflow… | 2026-02-26T19:32:39.903 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26937 | Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of … | 2026-02-26T19:32:39.747 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26936 | Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Ki… | 2026-02-26T18:23:07.973 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26935 | Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can… | 2026-02-26T18:23:07.817 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26934 | Improper Validation of Specified Quantity in Input (CWE-1284) in Kibana can allow an authenticated … | 2026-02-26T18:23:07.647 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26932 | Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can le… | 2026-02-26T18:23:07.470 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-2680 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber… | 2026-02-26T13:16:17.253 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-2679 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in… | 2026-02-26T13:16:17.080 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-2678 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter … | 2026-02-26T13:16:16.917 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-2677 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3fact… | 2026-02-26T13:16:16.740 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26682 | An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the Plugin… | 2026-02-26T18:23:07.347 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26305 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication… | 2026-02-27T01:16:20.617 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26290 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows … | 2026-02-27T01:16:20.433 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26265 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T16:24:07.543 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26207 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T16:24:07.163 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26078 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T16:24:06.997 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-26077 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.… | 2026-02-26T15:17:36.653 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-25945 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication… | 2026-02-27T00:16:57.730 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-25851 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthori… | 2026-02-27T00:16:57.550 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-25778 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows … | 2026-02-27T00:16:57.383 | 2026-02-27T14:06:37.987 |
| fkie_cve-2026-25774 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. | 2026-02-27T01:16:20.123 | 2026-02-27T14:06:37.987 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-7p94-766c-hgjp |
10.0 (3.1)
|
NLTK has a Zip Slip Vulnerability | 2026-02-18T18:30:40Z | 2026-02-25T20:23:08Z |
| ghsa-33hj-rcmx-86mv |
7.5 (3.1)
|
Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large Parameter Names | 2026-01-30T15:31:14Z | 2026-02-25T20:20:29Z |
| ghsa-6h4f-pj3g-q8fq |
7.5 (3.1)
|
Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded | 2025-12-03T21:31:04Z | 2026-02-25T20:15:41Z |
| ghsa-wfhp-qgm8-5p5c |
4.3 (3.1)
|
Jenkins has a build information disclosure vulnerability through Run Parameter | 2026-02-18T15:31:27Z | 2026-02-25T20:00:47Z |
| ghsa-85h6-5m3v-gx37 |
8.0 (3.1)
|
Jenkins has a stored XSS vulnerability in node offline cause description | 2026-02-18T15:31:27Z | 2026-02-25T19:58:40Z |
| ghsa-r5j5-q42h-fc93 |
7.6 (3.1)
|
Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting | 2026-02-25T19:28:39Z | 2026-02-25T19:28:39Z |
| ghsa-x43w-ph7m-pfjx |
7.2 (4.0)
|
hexchat crate has a Use After Free vulnerability | 2026-02-25T19:23:47Z | 2026-02-25T19:23:47Z |
| ghsa-8r55-rv5w-6pfm |
6.5 (3.1)
|
Apache Airflow exposes sensitive information in its log files | 2026-02-24T12:31:40Z | 2026-02-25T19:21:33Z |
| ghsa-r837-hpv7-pc2f |
8.4 (3.1)
|
Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table | 2026-02-24T12:31:40Z | 2026-02-25T19:20:56Z |
| ghsa-87xj-ghmc-c3xq |
5.3 (3.1)
5.5 (4.0)
|
PowerJob has Missing Authorization in its /user/list file | 2025-10-10T18:31:23Z | 2026-02-25T19:19:27Z |
| ghsa-q9hv-hpm4-hj6x |
2.9 (4.0)
|
CIRCL has an incorrect calculation in secp384r1 CombinedMult | 2026-02-25T19:17:50Z | 2026-02-25T19:17:50Z |
| ghsa-gq5v-qf8q-fp77 |
3.3 (3.1)
|
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization | 2026-02-25T19:15:56Z | 2026-02-25T19:15:56Z |
| ghsa-wfx3-6g53-9fgc |
3.7 (3.1)
|
ImageMagick: Memory Leak in multiple coders that write raw pixel data | 2026-02-25T19:13:32Z | 2026-02-25T19:13:32Z |
| ghsa-3q5f-gmjc-38r8 |
0.0 (3.1)
|
ImageMagick: Memory leak in coders/txt.c without freetype | 2026-02-25T19:13:08Z | 2026-02-25T19:13:08Z |
| ghsa-xpg8-7m6m-jf56 |
0.0 (3.1)
|
ImageMagick: SVG-to-MVG Command Injection via coders/svg.c | 2026-02-25T19:12:48Z | 2026-02-25T19:12:48Z |
| ghsa-wgxp-q8xq-wpp9 |
3.7 (3.1)
|
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS | 2026-02-25T19:12:23Z | 2026-02-25T19:12:23Z |
| ghsa-3j4x-rwrx-xxj9 |
3.7 (3.1)
|
mageMagick has a possible use-after-free write in its PDB decoder | 2026-02-25T19:12:06Z | 2026-02-25T19:12:07Z |
| ghsa-2gq3-ww97-wfjm |
3.7 (3.1)
|
ImageMagick has a possible heap Use After Free vulnerability in its meta coder | 2026-02-25T19:11:50Z | 2026-02-25T19:11:50Z |
| ghsa-6j87-m5qx-9fqp |
2.3 (4.0)
|
Craft CMS has Stored XSS in Table Field in its "Row Heading" Column Type | 2026-02-25T19:11:31Z | 2026-02-25T19:11:31Z |
| ghsa-3c45-4pj5-ch7m |
8.6 (3.1)
|
changedetection.io is Vulnerable to SSRF via Watch URLs | 2026-02-25T19:08:18Z | 2026-02-25T19:08:18Z |
| ghsa-mw8m-398g-h89w |
6.1 (3.1)
|
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response | 2026-02-25T19:07:44Z | 2026-02-25T19:07:44Z |
| ghsa-65mp-fq8v-56jr |
9.8 (3.1)
|
Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection | 2026-02-25T19:06:50Z | 2026-02-25T19:06:50Z |
| ghsa-jhp4-jvq3-w5xr |
7.0 (4.0)
|
Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions | 2026-02-25T19:00:07Z | 2026-02-25T19:00:07Z |
| ghsa-3534-xp88-25rc |
8.3 (4.0)
|
Parse Dashboard is Missing CSRF Protection for its Agent Endpoint | 2026-02-25T18:59:58Z | 2026-02-25T18:59:58Z |
| ghsa-cvwj-6c9h-jg6v |
9.3 (4.0)
|
Parse Dashboard is Missing Authorization for its Agent Endpoint | 2026-02-25T18:59:44Z | 2026-02-25T18:59:44Z |
| ghsa-rvhr-26g4-p2r8 |
9.9 (3.1)
|
Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud) | 2026-02-25T18:57:39Z | 2026-02-25T18:57:39Z |
| ghsa-h39h-7cvg-q7j6 |
8.1 (3.1)
8.6 (4.0)
|
AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php | 2026-02-25T18:57:05Z | 2026-02-25T18:57:05Z |
| ghsa-qwc3-h9mg-4582 |
9.9 (4.0)
|
Parse Dashboard has incomplete authentication on AI Agent endpoint | 2026-02-25T18:37:53Z | 2026-02-25T18:37:53Z |
| ghsa-rqc2-5fv7-4vrp |
4.5 (3.1)
1.1 (4.0)
|
A flaw has been found in Chia Blockchain 2.1.0. The affected element is the function send_transacti… | 2026-02-25T18:31:38Z | 2026-02-25T18:31:39Z |
| ghsa-2p6h-wfw7-47wv |
3.1 (3.1)
2.3 (4.0)
|
A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This vulnerability … | 2026-02-25T18:31:38Z | 2026-02-25T18:31:39Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-252 |
7.5 (3.1)
|
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. | mlflow | 2023-12-18T04:15:00+00:00 | 2024-02-06T22:20:23.832000+00:00 |
| pysec-2024-26 |
6.5 (3.1)
|
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Security-… | aiohttp | 2024-01-29T23:15:00+00:00 | 2024-02-06T20:20:18.162431+00:00 |
| pysec-2024-25 |
9.8 (3.1)
|
DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extensio… | duckdb | 2024-01-30T01:16:00+00:00 | 2024-02-06T00:25:51.550516+00:00 |
| pysec-2024-24 |
7.5 (3.1)
|
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When usin… | aiohttp | 2024-01-29T23:15:00+00:00 | 2024-02-05T20:20:47.716944+00:00 |
| pysec-2024-23 |
5.3 (3.1)
|
Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limite… | whoogle-search | 2024-01-23T18:15:00+00:00 | 2024-02-02T07:18:33.382718+00:00 |
| pysec-2009-11 |
|
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an includ… | moin | 2009-03-30T01:30:00+00:00 | 2024-02-02T07:18:32.552079+00:00 |
| pysec-2024-22 |
6.1 (3.1)
|
TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese cha… | tuitse-tsusin | 2024-01-23T18:15:00+00:00 | 2024-02-01T22:21:01.486817+00:00 |
| pysec-2024-21 |
8.8 (3.1)
|
A vulnerability classified as critical was found in van_der_Schaar LAB TemporAI 0.0.3. Af… | temporai | 2024-01-26T17:15:00+00:00 | 2024-02-01T18:22:23.971296+00:00 |
| pysec-2024-20 |
9.8 (3.1)
|
Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `eleme… | whoogle-search | 2024-01-23T18:15:00+00:00 | 2024-01-30T18:22:32.803340+00:00 |
| pysec-2024-19 |
6.1 (3.1)
|
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `elem… | whoogle-search | 2024-01-23T18:15:00+00:00 | 2024-01-29T22:21:01.226431+00:00 |
| pysec-2024-18 |
9.8 (3.1)
|
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `wind… | whoogle-search | 2024-01-23T18:15:00+00:00 | 2024-01-29T22:21:01.170723+00:00 |
| pysec-2024-17 |
8.8 (3.1)
|
pyLoad is a free and open-source Download Manager written in pure Python. The `pyload` AP… | pyload-ng | 2024-01-18T00:15:00+00:00 | 2024-01-29T20:20:58.389168+00:00 |
| pysec-2024-16 |
5.4 (3.1)
|
Nautobot is a Network Source of Truth and Network Automation Platform built as a web appl… | nautobot | 2024-01-23T00:15:00+00:00 | 2024-01-29T20:20:58.065227+00:00 |
| pysec-2023-251 |
5.3 (3.1)
|
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper … | aiohttp | 2023-11-29T20:15:00+00:00 | 2024-01-29T16:22:26.513672+00:00 |
| pysec-2023-250 |
5.3 (3.1)
|
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper … | aiohttp | 2023-11-30T07:15:00+00:00 | 2024-01-29T16:22:26.409794+00:00 |
| pysec-2024-15 |
3.7 (3.1)
|
changedetection.io is an open source tool designed to monitor websites for content chang… | changedetection-io | 2024-01-19T20:15:00+00:00 | 2024-01-26T22:21:10.756741+00:00 |
| pysec-2024-5 |
2.8 (3.1)
|
cdo-local-uuid project provides a specialized UUID-generating function that can, on user … | case-utils | 2024-01-11T03:15:00Z | 2024-01-25T14:03:52.279077Z |
| pysec-2024-14 |
|
Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated … | apache-airflow | 2024-01-24T13:15:00+00:00 | 2024-01-24T16:22:57.416385+00:00 |
| pysec-2024-13 |
|
Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attac… | apache-airflow | 2024-01-24T13:15:00+00:00 | 2024-01-24T16:22:57.352530+00:00 |
| pysec-2023-241 |
9.1 (3.1)
|
Piccolo is an object-relational mapping and query builder which supports asyncio. Prior t… | piccolo | 2023-11-10T18:15:00Z | 2024-01-23T23:21:13.409656Z |
| pysec-2024-11 |
9.8 (3.1)
|
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from… | apache-iotdb | 2024-01-15T11:15:00+00:00 | 2024-01-22T22:21:02.620877+00:00 |
| pysec-2024-10 |
9.8 (3.1)
|
In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the st… | portage | 2024-01-12T03:15:00+00:00 | 2024-01-22T18:22:47.599296+00:00 |
| pysec-2024-9 |
|
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCod… | metagpt | 2024-01-22T01:15:00+00:00 | 2024-01-22T07:20:28.329958+00:00 |
| pysec-2024-8 |
|
The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of … | embedchain | 2024-01-21T17:15:00+00:00 | 2024-01-21T20:21:00.544327+00:00 |
| pysec-2024-7 |
|
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code… | embedchain | 2024-01-21T17:15:00+00:00 | 2024-01-21T20:21:00.484037+00:00 |
| pysec-2024-6 |
2.8 (3.1)
|
cdo-local-uuid project provides a specialized UUID-generating function that can, on user … | cdo-local-uuid | 2024-01-11T03:15:00+00:00 | 2024-01-19T22:21:07.454006+00:00 |
| pysec-2024-4 |
7.8 (3.1)
|
GitPython is a python library used to interact with Git repositories. There is an incompl… | gitpython | 2024-01-11T02:15:00+00:00 | 2024-01-18T16:22:52.190857+00:00 |
| pysec-2024-3 |
5.9 (3.1)
|
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decrypti… | pycryptodomex | 2024-01-05T04:15:00+00:00 | 2024-01-17T11:19:18.629304+00:00 |
| pysec-2023-249 |
7.5 (3.1)
|
Gradio is an open-source Python package that allows you to quickly build a demo or web ap… | gradio | 2023-12-22T21:15:00+00:00 | 2024-01-17T11:19:18.252182+00:00 |
| pysec-2023-248 |
6.1 (3.1)
|
An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows at… | flask-security-too | 2023-12-26T22:15:00+00:00 | 2024-01-17T11:19:18.188431+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33010 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741895Z |
| gsd-2024-33411 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741698Z |
| gsd-2024-33463 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741491Z |
| gsd-2024-33250 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741217Z |
| gsd-2024-33266 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741026Z |
| gsd-2024-33478 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.740835Z |
| gsd-2024-33170 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.740641Z |
| gsd-2024-33503 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.740448Z |
| gsd-2024-33094 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.740240Z |
| gsd-2024-33173 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.740036Z |
| gsd-2024-33095 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.739837Z |
| gsd-2024-33124 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.739634Z |
| gsd-2024-33329 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.739430Z |
| gsd-2024-33511 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.739229Z |
| gsd-2024-33305 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.739023Z |
| gsd-2024-33357 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738772Z |
| gsd-2024-33254 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738567Z |
| gsd-2024-33091 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738360Z |
| gsd-2024-33267 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738163Z |
| gsd-2024-33416 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.737967Z |
| gsd-2024-33466 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.737764Z |
| gsd-2024-33510 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.737559Z |
| gsd-2024-33172 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.737358Z |
| gsd-2024-33435 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.737152Z |
| gsd-2024-33123 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.736950Z |
| gsd-2024-33162 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.736744Z |
| gsd-2024-33475 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.736524Z |
| gsd-2024-33392 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.736262Z |
| gsd-2024-33375 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.736057Z |
| gsd-2024-33264 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.735849Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-191900 | Malicious code in time-check-server (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:46Z |
| mal-2025-191887 | Malicious code in tcloud-python-sdks (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:46Z |
| mal-2025-191886 | Malicious code in tclients-sdk (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:46Z |
| mal-2025-191871 | Malicious code in snapshot-photo (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:46Z |
| mal-2025-2950 | Malicious code in credential-python-sdk (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-2929 | Malicious code in acloud-client (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-191721 | Malicious code in enumer-iam (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-191687 | Malicious code in awscloud-clients-core (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-191679 | Malicious code in amzclients-sdk (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-191677 | Malicious code in alicloud-client-sdk (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-191676 | Malicious code in alicloud-client (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-191673 | Malicious code in acloud-clients (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-191672 | Malicious code in acloud-client-uses (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2025-191671 | Malicious code in aclient-sdk (PyPI) | 2025-02-25T18:18:21Z | 2026-01-30T19:45:45Z |
| mal-2026-610 | Malicious code in snapshot-date (PyPI) | 2026-01-30T19:09:41Z | 2026-01-30T19:09:41Z |
| mal-2026-606 | Malicious code in userver-requires-at-least-python-3-10 (PyPI) | 2026-01-30T10:14:10Z | 2026-01-30T10:14:10Z |
| mal-2024-12348 | Malicious code in spiderai (PyPI) | 2024-10-02T09:16:00Z | 2026-01-30T00:34:33Z |
| mal-2026-604 | Malicious code in securedrop-workstation-dom0-config (PyPI) | 2026-01-29T13:50:57Z | 2026-01-29T13:50:57Z |
| mal-2026-603 | Malicious code in mcp-pdftool-plus (PyPI) | 2026-01-29T13:25:53Z | 2026-01-29T13:25:53Z |
| mal-2026-602 | Malicious code in tableasets (PyPI) | 2026-01-29T11:22:50Z | 2026-01-29T11:22:50Z |
| mal-2026-601 | Malicious code in tableautes (PyPI) | 2026-01-29T10:08:47Z | 2026-01-29T11:16:21Z |
| mal-2026-595 | Malicious code in morty-package (PyPI) | 2026-01-28T19:48:56Z | 2026-01-28T19:48:56Z |
| mal-2026-562 | Malicious code in tabullates (PyPI) | 2026-01-28T07:42:32Z | 2026-01-28T19:13:29Z |
| mal-2026-548 | Malicious code in tabletas (PyPI) | 2026-01-27T18:26:01Z | 2026-01-28T19:13:29Z |
| mal-2026-492 | Malicious code in tableates (PyPI) | 2026-01-23T13:57:05Z | 2026-01-28T19:13:29Z |
| mal-2026-490 | Malicious code in tabletes (PyPI) | 2026-01-23T10:19:25Z | 2026-01-28T19:13:29Z |
| mal-2026-441 | Malicious code in spellcheckpy (PyPI) | 2026-01-21T08:10:26Z | 2026-01-28T19:13:29Z |
| mal-2026-375 | Malicious code in spellcheckerpy (PyPI) | 2026-01-20T19:06:25Z | 2026-01-28T19:13:29Z |
| mal-2025-191535 | Malicious code in tableate (PyPI) | 2025-11-25T11:06:37Z | 2026-01-28T19:13:29Z |
| mal-2025-191534 | Malicious code in tablates (PyPI) | 2025-11-26T10:20:42Z | 2026-01-28T19:13:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1569 | Oracle Java SE: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1546 | Red Hat Enterprise Linux (GLib): Schwachstelle ermöglicht Denial of Service | 2025-07-14T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1540 | Apache Commons Lang: Schwachstelle ermöglicht Denial of Service | 2025-07-13T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0698 | Linux Kernel: Mehrere Schwachstellen | 2025-04-02T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0460 | Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen | 2025-02-27T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3725 | Apache Kafka: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-18T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3570 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-12-01T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3565 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2024-11-28T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3497 | Linux Kernel: Mehrere Schwachstellen | 2024-11-18T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1290 | Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-06-04T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1025 | Linux Kernel: Mehrere Schwachstellen | 2024-05-05T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2023-1995 | SCP in mehreren Produkten: Mehrere Schwachstellen | 2019-01-15T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2022-1401 | Red Hat OpenShift (Migration Toolkit for Containers): Mehrere Schwachstellen | 2022-09-12T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2856 | Dell SupportAssist für Home und Business PCs: Schwachstelle ermöglicht Privilegieneskalation | 2025-12-15T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2855 | IBM DataPower Gateway: Mehrere Schwachstellen | 2025-12-15T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2853 | HCL Commerce: Mehrere Schwachstellen | 2025-12-15T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2852 | Red Hat Enterprise Linux (Lightspeed): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-15T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2851 | Moodle: Mehrere Schwachstellen | 2025-12-15T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2850 | HCL Domino und Notes (Apache POI): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-15T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2848 | Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-15T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2845 | LibreOffice: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-14T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2842 | Kibana: Schwachstelle ermöglicht Cross-Site Scripting | 2025-12-14T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2841 | Elasticsearch: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-14T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2821 | Gogs: Schwachstelle ermöglicht Codeausführung | 2025-12-10T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2795 | Fortinet FortiOS, FortiProxy, FortiSwitch und FortiWeb: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-09T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2668 | Red Hat Enterprise Linux (CivetWeb library): Schwachstelle ermöglicht Denial of Service | 2025-11-24T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2529 | QNAP NAS QTS und QTS hero: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-11-09T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2278 | Microsoft Developer Tools: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2275 | Mozilla Firefox: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2241 | binutils: Schwachstelle ermöglicht Denial of Service | 2025-10-08T22:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0298 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2024-07-17T13:54:00.411174Z | 2024-07-17T13:54:00.411174Z |
| ncsc-2024-0297 | Kwetsbaarheden verholpen in Oracle Financial Services Applications | 2024-07-17T13:53:54.655859Z | 2024-07-17T13:53:54.655859Z |
| ncsc-2024-0296 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2024-07-17T13:53:28.440252Z | 2024-07-17T13:53:28.440252Z |
| ncsc-2024-0295 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2024-07-17T13:53:22.662201Z | 2024-07-17T13:53:22.662201Z |
| ncsc-2024-0294 | Kwetsbaarheden verholpen in Oracle Communications | 2024-07-17T13:52:53.293003Z | 2024-07-17T13:52:53.293003Z |
| ncsc-2024-0293 | Kwetsbaarheden verholpen in Oracle Communications Applications | 2024-07-17T13:52:33.045762Z | 2024-07-17T13:52:33.045762Z |
| ncsc-2024-0292 | Kwetsbaarheden verholpen in Oracle Essbase | 2024-07-17T13:52:18.885359Z | 2024-07-17T13:52:18.885359Z |
| ncsc-2024-0291 | Kwetsbaarheden verholpen in Oracle Database Server | 2024-07-17T13:51:54.185475Z | 2024-07-17T13:51:54.185475Z |
| ncsc-2024-0290 | Kwetsbaarheden verholpen in Juniper Junos OS en Junos OS Evolved | 2024-07-12T11:43:27.625950Z | 2024-07-12T11:43:27.625950Z |
| ncsc-2024-0288 | Kwetsbaarheden verholpen in Citrix Workspace, NetScaler ADC en NetScaler Gateway | 2024-07-10T13:54:21.933605Z | 2024-07-11T15:05:36.608570Z |
| ncsc-2024-0289 | Kwetsbaarheid verholpen in GitLab CE/EE | 2024-07-11T08:22:44.417794Z | 2024-07-11T08:22:44.417794Z |
| ncsc-2024-0287 | Kwetsbaarheden verholpen in Fortinet | 2024-07-10T08:27:35.622919Z | 2024-07-10T08:27:35.622919Z |
| ncsc-2024-0286 | Kwetsbaarheid verholpen in Microsoft System Center Defender for IoT | 2024-07-09T19:39:17.911628Z | 2024-07-09T19:39:17.911628Z |
| ncsc-2024-0285 | Kwetsbaarheden verholpen in Microsoft Azure | 2024-07-09T19:38:21.052004Z | 2024-07-09T19:38:21.052004Z |
| ncsc-2024-0284 | Kwetsbaarheden verholpen in Microsoft Office | 2024-07-09T19:37:26.015768Z | 2024-07-09T19:37:26.015768Z |
| ncsc-2024-0283 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2024-07-09T18:46:27.237285Z | 2024-07-09T18:46:27.237285Z |
| ncsc-2024-0282 | Kwetsbaarheden verholpen in Siemens Producten | 2024-07-09T18:40:57.534939Z | 2024-07-09T18:40:57.534939Z |
| ncsc-2024-0281 | Kwetsbaarheden verholpen in Microsoft Windows SQL Server | 2024-07-09T18:40:47.989197Z | 2024-07-09T18:40:47.989197Z |
| ncsc-2024-0280 | Kwetsbaarheid verholpen in Microsoft Dynamics | 2024-07-09T18:40:31.321704Z | 2024-07-09T18:40:31.321704Z |
| ncsc-2024-0279 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-07-09T18:40:21.043319Z | 2024-07-09T18:40:21.043319Z |
| ncsc-2024-0274 | Kwetsbaarheid verholpen in GeoServer | 2024-07-02T11:40:34.048090Z | 2024-07-05T09:41:10.197056Z |
| ncsc-2024-0270 | Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition | 2024-06-27T13:09:06.950898Z | 2024-07-04T06:45:26.935999Z |
| ncsc-2024-0278 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2024-07-03T07:21:50.013074Z | 2024-07-03T07:21:50.013074Z |
| ncsc-2024-0277 | Kwetsbaarheid verholpen in Juniper JunOS | 2024-07-03T07:16:21.498075Z | 2024-07-03T07:16:21.498075Z |
| ncsc-2024-0276 | Kwetsbaarheden verholpen in Splunk | 2024-07-02T13:15:06.374293Z | 2024-07-02T13:15:06.374293Z |
| ncsc-2024-0275 | Kwetsbaarheden verholpen in Apache HHTP-server | 2024-07-02T11:44:22.653047Z | 2024-07-02T11:44:22.653047Z |
| ncsc-2024-0273 | Kwetsbaarheden ontdekt in Kiloview P1 4G Video Encoder en P2 4G Video Encoder | 2024-07-02T07:04:39.395441Z | 2024-07-02T07:04:39.395441Z |
| ncsc-2024-0272 | Kwetsbaarheid verholpen in OpenSSH | 2024-07-01T12:21:57.127505Z | 2024-07-01T15:37:23.231069Z |
| ncsc-2024-0255 | Kwetsbaarheden verholpen in Adobe Commerce | 2024-06-13T13:36:13.246216Z | 2024-07-01T07:10:59.549847Z |
| ncsc-2024-0271 | Kwetsbaarheid verholpen in Juniper Session Smart Router | 2024-06-28T09:55:17.082602Z | 2024-06-28T09:55:17.082602Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:23294 | Red Hat Security Advisory: skopeo security update | 2025-12-18T10:13:42+00:00 | 2026-02-17T07:56:26+00:00 |
| rhsa-2025:23088 | Red Hat Security Advisory: grafana security update | 2025-12-11T00:30:04+00:00 | 2026-02-17T07:56:22+00:00 |
| rhsa-2025:23087 | Red Hat Security Advisory: grafana security update | 2025-12-11T01:00:04+00:00 | 2026-02-17T07:56:20+00:00 |
| rhsa-2025:23080 | Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA) | 2025-12-10T18:26:32+00:00 | 2026-02-17T07:56:20+00:00 |
| rhsa-2025:23079 | Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (ROCm) | 2025-12-10T18:25:33+00:00 | 2026-02-17T07:56:20+00:00 |
| rhsa-2025:23078 | Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA) | 2025-12-10T18:24:36+00:00 | 2026-02-17T07:56:19+00:00 |
| rhsa-2025:23057 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.3.2 | 2025-12-10T15:00:17+00:00 | 2026-02-17T07:56:17+00:00 |
| rhsa-2025:23002 | Red Hat Security Advisory: grafana security update | 2025-12-10T01:12:27+00:00 | 2026-02-17T07:56:16+00:00 |
| rhsa-2025:23001 | Red Hat Security Advisory: grafana security update | 2025-12-10T00:36:02+00:00 | 2026-02-17T07:56:15+00:00 |
| rhsa-2025:22941 | Red Hat Security Advisory: Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2 | 2025-12-09T15:24:58+00:00 | 2026-02-17T07:56:14+00:00 |
| rhsa-2025:22938 | Red Hat Security Advisory: Kiali 2.11.5 for Red Hat OpenShift Service Mesh 3.1 | 2025-12-09T14:59:35+00:00 | 2026-02-17T07:56:14+00:00 |
| rhsa-2025:22937 | Red Hat Security Advisory: Kiali 2.4.11 for Red Hat OpenShift Service Mesh 3.0 | 2025-12-09T14:59:02+00:00 | 2026-02-17T07:56:13+00:00 |
| rhsa-2025:22936 | Red Hat Security Advisory: Kiali 1.73.25 for Red Hat OpenShift Service Mesh 2.6 | 2025-12-09T14:58:58+00:00 | 2026-02-17T07:56:12+00:00 |
| rhsa-2025:22905 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.19.4 | 2025-12-09T10:09:13+00:00 | 2026-02-17T07:56:10+00:00 |
| rhsa-2025:22899 | Red Hat Security Advisory: golang security update | 2025-12-09T08:03:20+00:00 | 2026-02-17T07:56:10+00:00 |
| rhsa-2025:22759 | Red Hat Security Advisory: RHOAI 2.22.3 - Red Hat OpenShift AI | 2025-12-04T13:06:08+00:00 | 2026-02-17T07:56:09+00:00 |
| rhsa-2025:22743 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.1 | 2025-12-04T09:52:50+00:00 | 2026-02-17T07:56:03+00:00 |
| rhsa-2025:22668 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-12-03T14:58:33+00:00 | 2026-02-17T07:56:03+00:00 |
| rhsa-2025:22738 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.5.2 | 2025-12-04T08:53:28+00:00 | 2026-02-17T07:56:01+00:00 |
| rhsa-2025:22345 | Red Hat Security Advisory: Red Hat OpenShift Developer Tools - Source-to-Image 1.5.2 | 2025-11-27T22:06:09+00:00 | 2026-02-17T07:55:59+00:00 |
| rhsa-2025:22255 | Red Hat Security Advisory: OpenShift Container Platform 4.20.6 packages and security update | 2025-12-02T14:45:43+00:00 | 2026-02-17T07:55:56+00:00 |
| rhsa-2025:22181 | Red Hat Security Advisory: golang security update | 2025-11-26T15:05:54+00:00 | 2026-02-17T07:55:55+00:00 |
| rhsa-2025:22014 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.2 | 2025-11-25T05:10:51+00:00 | 2026-02-17T07:55:53+00:00 |
| rhsa-2025:21964 | Red Hat Security Advisory: buildah security update | 2025-11-24T15:01:52+00:00 | 2026-02-17T07:55:51+00:00 |
| rhsa-2025:21856 | Red Hat Security Advisory: golang security update | 2025-11-20T15:48:22+00:00 | 2026-02-17T07:55:51+00:00 |
| rhsa-2025:21816 | Red Hat Security Advisory: delve and golang security update | 2025-11-20T06:24:08+00:00 | 2026-02-17T07:55:49+00:00 |
| rhsa-2025:21815 | Red Hat Security Advisory: delve and golang security update | 2025-11-20T08:45:31+00:00 | 2026-02-17T07:55:49+00:00 |
| rhsa-2025:21779 | Red Hat Security Advisory: golang security update | 2025-11-20T00:22:25+00:00 | 2026-02-17T07:55:45+00:00 |
| rhsa-2025:21778 | Red Hat Security Advisory: golang security update | 2025-11-20T00:35:26+00:00 | 2026-02-17T07:55:45+00:00 |
| rhsa-2025:19594 | Red Hat Security Advisory: osbuild-composer security update | 2025-11-04T08:51:51+00:00 | 2026-02-17T07:55:33+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-16-014-01 | Advantech WebAccess Vulnerabilities | 2016-10-17T06:00:00.000000Z | 2025-06-09T16:31:10.642130Z |
| icsa-15-356-01 | Siemens RUGGEDCOM ROX-based Devices NTP Vulnerabilities | 2015-09-24T06:00:00.000000Z | 2025-06-09T16:30:45.504574Z |
| icsa-15-351-03 | eWON Vulnerabilities | 2015-09-19T06:00:00.000000Z | 2025-06-09T16:30:08.163522Z |
| icsa-15-351-02 | Motorola MOSCAD SCADA IP Gateway Vulnerabilities | 2015-09-19T06:00:00.000000Z | 2025-06-09T16:29:55.412118Z |
| icsa-15-351-01 | Schneider Electric Modicon M340 Buffer Overflow Vulnerability | 2015-09-19T06:00:00.000000Z | 2025-06-09T16:29:49.200182Z |
| icsa-15-349-01 | Adcon Telemetry A840 Vulnerabilities | 2015-09-17T06:00:00.000000Z | 2025-06-09T16:29:24.204966Z |
| icsa-15-344-02 | Open Automation Software OPC Systems NET DLL Hijacking Vulnerability | 2015-09-12T06:00:00.000000Z | 2025-06-09T16:29:17.938829Z |
| icsa-15-344-01b | Advantech EKI Vulnerabilities (Update B) | 2015-09-12T06:00:00.000000Z | 2025-06-09T16:28:52.618727Z |
| icsa-15-342-02 | LOYTEC Router Information Exposure Vulnerability | 2015-09-10T06:00:00.000000Z | 2025-06-09T16:28:46.089562Z |
| icsa-15-337-03 | Pacom 1000 CCU GMS System Cryptographic Implementation Vulnerabilities | 2015-09-05T06:00:00.000000Z | 2025-06-09T16:28:39.850718Z |
| icsa-15-337-02 | Hospira Multiple Products Buffer Overflow Vulnerability | 2015-09-05T06:00:00.000000Z | 2025-06-09T16:28:33.444166Z |
| icsa-15-337-01 | SearchBlox File Exfiltration Vulnerability | 2015-09-05T06:00:00.000000Z | 2025-06-09T16:28:27.223837Z |
| icsa-15-328-01 | Moxa OnCell Central Manager Vulnerabilities | 2015-08-27T06:00:00.000000Z | 2025-06-09T16:28:04.742080Z |
| icsa-15-323-01 | Tibbo AggreGate Platform Vulnerabilities | 2015-08-22T06:00:00.000000Z | 2025-06-09T16:27:52.277295Z |
| icsa-15-321-01 | Exemys Web Server Bypass Vulnerability | 2015-08-20T06:00:00.000000Z | 2025-06-09T16:27:45.949280Z |
| icsa-15-309-02 | Honeywell Midas Gas Detector Vulnerabilities | 2015-08-08T06:00:00.000000Z | 2025-06-09T16:27:33.405162Z |
| icsa-15-309-01 | Advantech EKI Hard-coded SSH Keys Vulnerability | 2015-08-08T06:00:00.000000Z | 2025-06-09T16:27:27.090625Z |
| icsa-15-300-03a | Rockwell Automation Micrologix 1100 and 1400 PLC Systems Vulnerabilities (Update A) | 2015-07-30T06:00:00.000000Z | 2025-06-09T16:26:55.984078Z |
| icsa-15-300-02a | Infinite Automation Systems Mango Automation Vulnerabilities (Update A) | 2015-07-30T06:00:00.000000Z | 2025-06-09T16:26:12.022061Z |
| icsa-15-300-01 | Siemens RuggedCom Improper Ethernet Frame Padding Vulnerability | 2015-07-30T06:00:00.000000Z | 2025-06-09T16:26:05.782495Z |
| icsa-15-295-01 | Eaton's Cooper Devices Improper Ethernet Frame Padding Vulnerability | 2015-07-25T06:00:00.000000Z | 2025-06-09T16:25:59.550069Z |
| icsa-15-293-03 | 3S CODESYS Gateway Null Pointer Exception Vulnerability | 2015-07-23T06:00:00.000000Z | 2025-06-09T16:25:53.323160Z |
| icsa-15-293-02 | IniNet Solutions SCADA Web Server Vulnerabilities | 2015-07-23T06:00:00.000000Z | 2025-06-09T16:25:34.578936Z |
| icsa-15-293-01 | IniNet Solutions embeddedWebServer Cleartext Storage Vulnerability | 2015-07-23T06:00:00.000000Z | 2025-06-09T16:25:28.331705Z |
| icsa-15-288-01 | 3S CODESYS Runtime Toolkit Null Pointer Dereference Vulnerability | 2015-07-18T06:00:00.000000Z | 2025-06-09T16:25:22.103595Z |
| icsa-15-286-01 | Nordex NC2 XSS Vulnerability | 2015-07-16T06:00:00.000000Z | 2025-06-09T16:25:15.861787Z |
| icsa-15-274-02a | Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A) | 2015-07-04T06:00:00.000000Z | 2025-06-09T16:24:57.129200Z |
| icsa-15-274-01 | Omron Multiple Product Vulnerabilities | 2015-07-04T06:00:00.000000Z | 2025-06-09T16:24:38.133706Z |
| icsa-15-272-01 | Honeywell Experion PKS Directory Traversal Vulnerability | 2015-07-02T06:00:00.000000Z | 2025-06-09T16:24:31.906369Z |
| icsa-15-267-01 | Endress+Hauser Fieldcare/CodeWrights HART Comm DTM XML Injection Vulnerability | 2015-06-27T06:00:00.000000Z | 2025-06-09T16:24:25.686094Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180328-smi | Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:43+00:00 |
| cisco-sa-20180328-bfd | Cisco IOS and IOS XE Software Bidirectional Forwarding Detection Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:42+00:00 |
| cisco-sa-20180307-acs2 | Cisco Secure Access Control System Java Deserialization Vulnerability | 2018-03-07T16:00:00+00:00 | 2022-12-15T19:32:31+00:00 |
| cisco-sa-clamav-html-xauok8mr | ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:13:16+00:00 |
| cisco-sa-clamav-dos-zazbwrvg | ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:03:44+00:00 |
| cisco-sa-clamav-dos-prvgchld | ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-14T18:46:44+00:00 |
| cisco-sa-snort-smb-3nfhjtr | Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-30T21:51:24+00:00 |
| cisco-sa-esasmawsa-vulns-yrusw5md | Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities | 2022-11-02T16:00:00+00:00 | 2022-11-30T12:49:53+00:00 |
| cisco-sa-openssl-w9sdcc2a | Vulnerabilities in OpenSSL Affecting Cisco Products: November 2022 | 2022-10-28T16:00:00+00:00 | 2022-11-23T20:23:17+00:00 |
| cisco-sa-ise-stor-xss-kprbwxy | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:29:06+00:00 |
| cisco-sa-ise-csrf-vgnttpas | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:26:05+00:00 |
| cisco-sa-ise-path-trav-f6m7cs6r | Cisco Identity Services Engine Path Traversal Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T14:40:22+00:00 |
| cisco-sa-asafdt-webvpn-dos-tzpsyern | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability | 2022-04-27T16:00:00+00:00 | 2022-11-09T16:02:33+00:00 |
| cisco-sa-ssl-client-dos-ccrqpka | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fw3100-secure-boot-5m8muh26 | Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftdsnort3sip-dos-a4chearc | Cisco Firepower Threat Defense Software SIP and Snort 3 Detection Engine Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftd-tls-bb-rcgtmy2 | Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftd-mgmt-privesc-7gqr2th | Cisco Firepower Threat Defense Software Privilege Escalation Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftd-gre-dos-hmedhqpm | Cisco Firepower Threat Defense Software Generic Routing Encapsulation Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-ftd-fxos-cmd-inj-q9blnsrk | Cisco Firepower Threat Defense Software and Cisco FXOS Software Command Injection Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmcsfr-snmp-access-6gqgtj4s | Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-xxe-mzpc4byd | Cisco Firepower Management Center Software XML External Entity Injection Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-xss-latzyzxs | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-info-disc-ughnrrhp | Cisco Firepower Management Center Software Information Disclosure Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-dos-oweunwjn | Cisco Firepower Management Center and Firepower Threat Defense Software SSH Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-z3b5my35 | Cisco Firepower Management Center Software Command Injection Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-qsqbnm6x | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-asa-ftd-vp-authz-n2gckjn6 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-asa-ftd-dap-dos-ghyzbxdu | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability | 2022-11-09T16:00:00+00:00 | 2022-11-09T16:00:00+00:00 |
| cisco-sa-umbrella-xss-lfeyqv3 | Cisco Umbrella Stored Cross-Site Scripting Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-02T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-47814 | use-after-free when closing buffers in Vim | 2024-10-01T07:00:00.000Z | 2026-02-21T02:06:39.000Z |
| msrc_cve-2024-50088 | btrfs: fix uninitialized pointer free in add_inode_ref() | 2024-10-01T07:00:00.000Z | 2026-02-21T02:06:06.000Z |
| msrc_cve-2024-46798 | ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object | 2024-09-01T07:00:00.000Z | 2026-02-21T02:05:36.000Z |
| msrc_cve-2024-9632 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | 2024-10-01T07:00:00.000Z | 2026-02-21T02:05:16.000Z |
| msrc_cve-2024-8927 | cgi.force_redirect configuration is bypassable due to the environment variable collision | 2024-10-01T07:00:00.000Z | 2026-02-21T02:04:28.000Z |
| msrc_cve-2024-46743 | of/irq: Prevent device address out-of-bounds read in interrupt map walk | 2024-09-01T07:00:00.000Z | 2026-02-21T02:04:21.000Z |
| msrc_cve-2024-31449 | Lua library commands may lead to stack overflow and RCE in Redis | 2024-10-01T07:00:00.000Z | 2026-02-21T02:03:22.000Z |
| msrc_cve-2024-46740 | binder: fix UAF caused by offsets overwrite | 2024-09-01T07:00:00.000Z | 2026-02-21T02:03:03.000Z |
| msrc_cve-2024-31227 | Denial-of-service due to malformed ACL selectors in Redis | 2024-10-01T07:00:00.000Z | 2026-02-21T02:02:54.000Z |
| msrc_cve-2024-47191 | pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because in the context of PAM code running as root it mishandles usersfile access such as by calling fchown in the presence of a symlink. | 2024-10-01T07:00:00.000Z | 2026-02-21T02:02:03.000Z |
| msrc_cve-2024-46742 | smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() | 2024-09-01T07:00:00.000Z | 2026-02-21T02:01:46.000Z |
| msrc_cve-2024-50001 | net/mlx5: Fix error path in multi-packet WQE transmit | 2024-10-01T07:00:00.000Z | 2026-02-21T02:01:32.000Z |
| msrc_cve-2024-49946 | ppp: do not assume bh is held in ppp_channel_bridge_input() | 2024-10-01T07:00:00.000Z | 2026-02-21T02:01:05.000Z |
| msrc_cve-2024-9341 | Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library | 2024-10-01T07:00:00.000Z | 2026-02-21T02:00:53.000Z |
| msrc_cve-2024-46720 | drm/amdgpu: fix dereference after null check | 2024-09-01T07:00:00.000Z | 2026-02-21T02:00:29.000Z |
| msrc_cve-2024-43839 | bna: adjust 'name' buf size of bna_tcb and bna_ccb structures | 2024-08-02T00:00:00.000Z | 2026-02-21T02:00:19.000Z |
| msrc_cve-2024-43834 | xdp: fix invalid wait context of page_pool_destroy() | 2024-08-02T00:00:00.000Z | 2026-02-21T01:59:33.000Z |
| msrc_cve-2024-46675 | usb: dwc3: core: Prevent USB core invalid event buffer address access | 2024-09-01T07:00:00.000Z | 2026-02-21T01:59:21.000Z |
| msrc_cve-2024-9355 | Golang-fips: golang fips zeroed buffer | 2024-10-01T07:00:00.000Z | 2026-02-21T01:59:19.000Z |
| msrc_cve-2024-50002 | static_call: Handle module init failure correctly in static_call_del_module() | 2024-10-01T07:00:00.000Z | 2026-02-21T01:58:49.000Z |
| msrc_cve-2024-46725 | drm/amdgpu: Fix out-of-bounds write warning | 2024-09-01T07:00:00.000Z | 2026-02-21T01:57:59.000Z |
| msrc_cve-2024-43835 | virtio_net: Fix napi_skb_cache_put warning | 2024-08-02T00:00:00.000Z | 2026-02-21T01:57:33.000Z |
| msrc_cve-2024-46791 | can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open | 2024-09-01T07:00:00.000Z | 2026-02-21T01:56:36.000Z |
| msrc_cve-2024-49998 | net: dsa: improve shutdown sequence | 2024-10-01T07:00:00.000Z | 2026-02-21T01:56:26.000Z |
| msrc_cve-2024-50084 | net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() | 2024-10-01T07:00:00.000Z | 2026-02-21T01:55:25.000Z |
| msrc_cve-2024-46719 | usb: typec: ucsi: Fix null pointer dereference in trace | 2024-09-01T07:00:00.000Z | 2026-02-21T01:55:20.000Z |
| msrc_cve-2024-46802 | drm/amd/display: added NULL check at start of dc_validate_stream | 2024-09-01T07:00:00.000Z | 2026-02-21T01:54:58.000Z |
| msrc_cve-2024-50085 | mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow | 2024-10-01T07:00:00.000Z | 2026-02-21T01:54:03.000Z |
| msrc_cve-2024-46749 | Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() | 2024-09-01T07:00:00.000Z | 2026-02-21T01:53:57.000Z |
| msrc_cve-2024-46811 | drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box | 2024-09-01T07:00:00.000Z | 2026-02-21T01:53:49.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201112-0046 | Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remo… | 2025-12-22T21:52:30.608000Z |
| var-200807-0659 | ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS… | 2025-12-22T21:52:30.295000Z |
| var-200705-0681 | Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to… | 2025-12-22T21:51:54.214000Z |
| var-202108-2072 | A race condition was addressed with improved locking. This issue is fixed in Security Upd… | 2025-12-22T21:51:22.025000Z |
| var-201512-0007 | Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 al… | 2025-12-22T21:51:19.576000Z |
| var-201912-0511 | A logic issue existed in the handling of document loads. This issue was addressed with im… | 2025-12-22T21:51:14.924000Z |
| var-201711-0455 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2025-12-22T21:51:14.825000Z |
| var-200706-0666 | Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apac… | 2025-12-22T21:51:14.425000Z |
| var-201710-0207 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GT… | 2025-12-22T21:51:09.603000Z |
| var-200701-0510 | The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote … | 2025-12-22T21:51:08.747000Z |
| var-201801-1708 | The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before… | 2025-12-22T21:51:07.921000Z |
| var-200904-0794 | Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows rem… | 2025-12-22T21:51:06.825000Z |
| var-201103-0114 | The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x be… | 2025-12-22T21:51:04.422000Z |
| var-201903-0388 | An integer overflow flaw which could lead to an out of bounds write was discovered in lib… | 2025-12-22T21:51:03.499000Z |
| var-202203-0043 | A flaw was found in the way the "flags" member of the new pipe buffer structure was lacki… | 2025-12-22T21:51:02.622000Z |
| var-202010-1236 | An access issue existed in Content Security Policy. This issue was addressed with improve… | 2025-12-22T21:51:01.820000Z |
| var-200102-0104 | "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges b… | 2025-12-22T21:51:01.420000Z |
| var-200609-0313 | Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to… | 2025-12-22T21:51:01.300000Z |
| var-201205-0246 | sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI… | 2025-12-22T21:50:52.724000Z |
| var-201904-0985 | SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remot… | 2025-12-22T21:50:52.629000Z |
| var-201203-0191 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2025-12-22T21:50:21.242000Z |
| var-201808-1004 | Bluetooth firmware or operating system software drivers in macOS versions before 10.13, H… | 2025-12-22T21:50:21.160000Z |
| var-201409-1147 | The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remot… | 2025-12-22T21:50:17.644000Z |
| var-202006-1832 | A memory corruption issue was addressed with improved validation. This issue is fixed in … | 2025-12-22T21:50:17.264000Z |
| var-200504-0292 | Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote … | 2025-12-22T21:50:17.195000Z |
| var-202109-1900 | An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be explo… | 2025-12-22T21:50:17.010000Z |
| var-202112-1608 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart par… | 2025-12-22T21:50:16.169000Z |
| var-201110-0291 | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64… | 2025-12-22T21:50:16.091000Z |
| var-200802-0651 | modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunder… | 2025-12-22T21:50:15.170000Z |
| var-201210-0179 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T21:50:08.186000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000082 | EC-CUBE 2 series vulnerable to cross-site scripting | 2023-08-17T15:12+09:00 | 2024-03-25T18:07+09:00 |
| jvndb-2023-000084 | WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting | 2023-08-21T14:05+09:00 | 2024-03-25T17:55+09:00 |
| jvndb-2024-000033 | WordPress Plugin "easy-popup-show" vulnerable to cross-site request forgery | 2024-03-25T13:31+09:00 | 2024-03-25T13:31+09:00 |
| jvndb-2023-000055 | ESS REC Agent Server Edition for Linux etc. vulnerable to directory traversal | 2023-05-26T13:58+09:00 | 2024-03-21T17:15+09:00 |
| jvndb-2023-000053 | Tornado vulnerable to open redirect | 2023-05-22T13:30+09:00 | 2024-03-21T17:05+09:00 |
| jvndb-2023-000058 | Pleasanter vulnerable to cross-site scripting | 2023-05-31T15:34+09:00 | 2024-03-19T18:17+09:00 |
| jvndb-2023-002002 | Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) | 2023-06-01T13:48+09:00 | 2024-03-19T18:13+09:00 |
| jvndb-2023-000072 | Improper restriction of XML external entity references (XXE) in XBRL data create application | 2023-07-18T15:22+09:00 | 2024-03-19T18:11+09:00 |
| jvndb-2023-000056 | Starlette vulnerable to directory traversal | 2023-05-30T13:34+09:00 | 2024-03-19T18:08+09:00 |
| jvndb-2023-000125 | Multiple vulnerabilities in BUFFALO VR-S1000 | 2023-12-26T15:51+09:00 | 2024-03-19T17:56+09:00 |
| jvndb-2023-000123 | Multiple vulnerabilities in GROWI | 2023-12-13T15:30+09:00 | 2024-03-19T17:46+09:00 |
| jvndb-2023-000052 | DataSpider Servista uses a hard-coded cryptographic key | 2023-05-31T15:34+09:00 | 2024-03-19T17:44+09:00 |
| jvndb-2024-000032 | Multiple vulnerabilities in FitNesse | 2024-03-18T14:08+09:00 | 2024-03-19T11:02+09:00 |
| jvndb-2023-014781 | Brother iPrint&Scan Desktop for Windows vulnerable to improper link resolution before file access | 2023-12-26T09:27+09:00 | 2024-03-18T18:05+09:00 |
| jvndb-2023-000126 | Multiple vulnerabilities in PowerCMS | 2023-12-26T16:46+09:00 | 2024-03-18T17:58+09:00 |
| jvndb-2024-000031 | "ABEMA" App for Android fails to restrict access permissions | 2024-03-15T16:37+09:00 | 2024-03-15T16:37+09:00 |
| jvndb-2024-000013 | Android App "Spoon" uses a hard-coded API key for an external service | 2024-01-23T16:53+09:00 | 2024-03-14T17:44+09:00 |
| jvndb-2024-000010 | Improper restriction of XML external entity references (XXE) in "Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version)" | 2024-01-23T15:25+09:00 | 2024-03-14T17:33+09:00 |
| jvndb-2024-001002 | Multiple TP-Link products vulnerable to OS command injection | 2024-01-10T13:57+09:00 | 2024-03-14T13:52+09:00 |
| jvndb-2024-000001 | Improper input validation vulnerability in WordPress Plugin "WordPress Quiz Maker Plugin" | 2024-01-12T13:51+09:00 | 2024-03-14T12:28+09:00 |
| jvndb-2023-003757 | Trend Micro Mobile Security vulnerable to cross-site scripting | 2023-09-26T11:30+09:00 | 2024-03-13T18:07+09:00 |
| jvndb-2023-002796 | Multiple server-side request forgery vulnerabilities in Trend Micro Apex Central (July 2023) | 2023-08-10T16:04+09:00 | 2024-03-13T17:58+09:00 |
| jvndb-2024-000011 | Multiple vulnerabilities in a-blog cms | 2024-01-22T15:08+09:00 | 2024-03-13T17:50+09:00 |
| jvndb-2024-000009 | Improper restriction of XML external entity references (XXE) in Electronic Deliverables Creation Support Tool provided by Ministry of Defense | 2024-01-23T15:13+09:00 | 2024-03-13T17:46+09:00 |
| jvndb-2024-000008 | Improper restriction of XML external entity references (XXE) in MLIT "Electronic Delivery Check System" and "Electronic delivery item Inspection Support System" | 2024-01-23T16:57+09:00 | 2024-03-13T17:40+09:00 |
| jvndb-2024-000012 | Access analysis CGI An-Analyzer vulnerable to open redirect | 2024-01-22T15:57+09:00 | 2024-03-13T17:34+09:00 |
| jvndb-2023-006199 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (November 2023) | 2023-11-13T17:28+09:00 | 2024-03-13T17:28+09:00 |
| jvndb-2024-001062 | Yamaha wireless LAN access point devices vulnerable to active debug code | 2024-01-24T17:16+09:00 | 2024-03-13T17:24+09:00 |
| jvndb-2024-002961 | Information Exposure Vulnerability in Cosminexus Component Container | 2024-03-13T12:10+09:00 | 2024-03-13T12:10+09:00 |
| jvndb-2024-000004 | Drupal vulnerable to improper handling of structural elements | 2024-01-16T13:41+09:00 | 2024-03-12T17:33+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4291-1 | Security update for libmicrohttpd | 2025-11-28T09:06:47Z | 2025-11-28T09:06:47Z |
| suse-su-2025:4290-1 | Security update for cups | 2025-11-28T09:04:34Z | 2025-11-28T09:04:34Z |
| suse-su-2025:4289-1 | Security update for cups | 2025-11-28T08:50:37Z | 2025-11-28T08:50:37Z |
| suse-su-2025:4288-1 | Security update for containerd | 2025-11-28T08:25:49Z | 2025-11-28T08:25:49Z |
| suse-su-2025:4287-1 | Security update for java-25-openjdk | 2025-11-28T08:23:45Z | 2025-11-28T08:23:45Z |
| suse-su-2025:21124-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_12 | 2025-11-28T08:21:31Z | 2025-11-28T08:21:31Z |
| suse-su-2025:21123-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_11 | 2025-11-28T08:21:31Z | 2025-11-28T08:21:31Z |
| suse-su-2025:21104-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_12 | 2025-11-28T08:21:31Z | 2025-11-28T08:21:31Z |
| suse-su-2025:21103-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_11 | 2025-11-28T08:21:31Z | 2025-11-28T08:21:31Z |
| suse-su-2025:21122-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-11-28T08:21:02Z | 2025-11-28T08:21:02Z |
| suse-su-2025:21099-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-11-28T08:21:02Z | 2025-11-28T08:21:02Z |
| suse-su-2025:21115-1 | Security update for kernel-livepatch-MICRO-6-0_Update_12 | 2025-11-28T08:20:42Z | 2025-11-28T08:20:42Z |
| suse-su-2025:21102-1 | Security update for kernel-livepatch-MICRO-6-0_Update_12 | 2025-11-28T08:20:42Z | 2025-11-28T08:20:42Z |
| suse-su-2025:21114-1 | Security update for kernel-livepatch-MICRO-6-0_Update_10 | 2025-11-28T08:20:28Z | 2025-11-28T08:20:28Z |
| suse-su-2025:21100-1 | Security update for kernel-livepatch-MICRO-6-0_Update_10 | 2025-11-28T08:20:28Z | 2025-11-28T08:20:28Z |
| suse-su-2025:21113-1 | Security update for kernel-livepatch-MICRO-6-0_Update_11 | 2025-11-28T08:20:11Z | 2025-11-28T08:20:11Z |
| suse-su-2025:21101-1 | Security update for kernel-livepatch-MICRO-6-0_Update_11 | 2025-11-28T08:20:11Z | 2025-11-28T08:20:11Z |
| suse-su-2025:21121-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21120-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21119-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21118-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21117-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21116-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21091-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21090-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21089-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21088-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21087-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21086-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21112-1 | Security update for kernel-livepatch-MICRO-6-0_Update_9 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15683-1 | xorg-x11-server-21.1.15-7.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15682-1 | libtiff-devel-32bit-4.7.1-3.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15681-1 | strongswan-6.0.3-1.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15680-1 | ongres-scram-3.2-7.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15679-1 | libmozjs-128-0-128.14.0-2.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15678-1 | libmozjs-115-0-115.15.0-6.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15677-1 | kea-3.0.2-1.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15676-1 | dovecot24-2.4.2-1.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15675-1 | coreboot-utils-25.09-2.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:20032-1 | Security update for chromium | 2025-10-28T06:36:32Z | 2025-10-28T06:36:32Z |
| opensuse-su-2025:15674-1 | java-25-openjdk-25.0.1.0-1.1 on GA media | 2025-10-28T00:00:00Z | 2025-10-28T00:00:00Z |
| opensuse-su-2025:20031-1 | Security update for warewulf4 | 2025-10-27T09:58:12Z | 2025-10-27T09:58:12Z |
| opensuse-su-2025:20027-1 | Security update for chromium | 2025-10-27T09:16:17Z | 2025-10-27T09:16:17Z |
| opensuse-su-2025:15673-1 | xen-4.20.1_06-1.1 on GA media | 2025-10-27T00:00:00Z | 2025-10-27T00:00:00Z |
| opensuse-su-2025:15672-1 | libluajit-5_1-2-2.1.20250826-1.1 on GA media | 2025-10-27T00:00:00Z | 2025-10-27T00:00:00Z |
| opensuse-su-2025:15671-1 | kernel-devel-6.17.5-1.1 on GA media | 2025-10-27T00:00:00Z | 2025-10-27T00:00:00Z |
| opensuse-su-2025:15670-1 | java-21-openjdk-21.0.9.0-1.1 on GA media | 2025-10-27T00:00:00Z | 2025-10-27T00:00:00Z |
| opensuse-su-2025:15669-1 | grafana-11.6.7-1.1 on GA media | 2025-10-27T00:00:00Z | 2025-10-27T00:00:00Z |
| opensuse-su-2025:15668-1 | libunbound8-1.24.1-1.1 on GA media | 2025-10-24T00:00:00Z | 2025-10-24T00:00:00Z |
| opensuse-su-2025:15667-1 | netty-4.1.128-1.1 on GA media | 2025-10-24T00:00:00Z | 2025-10-24T00:00:00Z |
| opensuse-su-2025:15666-1 | govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media | 2025-10-24T00:00:00Z | 2025-10-24T00:00:00Z |
| opensuse-su-2025:15665-1 | chromedriver-141.0.7390.122-1.1 on GA media | 2025-10-24T00:00:00Z | 2025-10-24T00:00:00Z |
| opensuse-su-2025:15664-1 | python311-pypdf-6.1.3-1.1 on GA media | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| opensuse-su-2025:15663-1 | openbao-2.4.3-1.1 on GA media | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| opensuse-su-2025:15662-1 | micropython-1.26.0-2.1 on GA media | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| opensuse-su-2025:15661-1 | java-17-openjdk-17.0.17.0-1.1 on GA media | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| opensuse-su-2025:15660-1 | java-11-openjdk-11.0.29.0-1.1 on GA media | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| opensuse-su-2025:15659-1 | bind-9.20.15-1.1 on GA media | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| opensuse-su-2025:15658-1 | python311-uv-0.9.5-1.1 on GA media | 2025-10-22T00:00:00Z | 2025-10-22T00:00:00Z |
| opensuse-su-2025:15657-1 | bleachbit-5.0.0-1.1 on GA media | 2025-10-22T00:00:00Z | 2025-10-22T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-libphp-2024-9026 | PHP-FPM logs from children may be altered | 2025-08-11T13:54:35.937Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8932 | OOB access in ldap_escape | 2025-08-11T13:54:33.535Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8929 | Leak partial content of the heap through heap buffer over-read in mysqlnd | 2025-08-11T13:54:31.347Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8927 | cgi.force_redirect configuration is bypassable due to the environment variable collision | 2025-08-11T13:54:29.171Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8926 | PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass) | 2025-08-11T13:54:27.013Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8925 | Erroneous parsing of multipart form data | 2025-08-11T13:54:25.174Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-5458 | Filter bypass in filter_var (FILTER_VALIDATE_URL) | 2025-08-11T13:54:20.794Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-3096 | PHP function password_verify can erroneously return true when argument contains NUL | 2025-08-11T13:54:16.977Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-2757 | PHP mb_encode_mimeheader runs endlessly for some inputs | 2025-08-11T13:54:14.986Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-2756 | __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix | 2025-08-11T13:54:12.793Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-1874 | Command injection via array-ish $command parameter of proc_open() | 2025-08-11T13:54:08.513Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11236 | Integer overflow in the firebird and dblib quoters causing OOB writes | 2025-08-11T13:54:06.723Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11234 | Configuring a proxy in a stream context might allow for CRLF injection in URIs | 2025-08-11T13:54:03.025Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11233 | Single byte overread with convert.quoted-printable-decode filter | 2025-08-11T13:54:01.202Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2022-31629 | $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities | 2025-08-11T13:53:41.681Z | 2025-11-06T13:25:46.476Z |
| bit-kibana-2025-25018 | Kibana Stored Cross-Site Scripting (XSS) | 2025-10-14T08:43:02.190Z | 2025-11-06T13:25:46.476Z |
| bit-kibana-2025-25017 | Kibana Stored Cross-Site Scripting (XSS) | 2025-10-14T08:43:00.623Z | 2025-11-06T13:25:46.476Z |
| bit-kibana-2025-25009 | Kibana Cross-Site Scripting (XSS) | 2025-10-09T08:43:15.178Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 2025-10-16T09:12:52.562Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 2025-10-08T08:43:23.522Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2024-31228 | Denial-of-service due to unbounded pattern matching in Redis | 2024-10-09T16:30:39.030Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panic | 2024-08-22T19:25:58.150Z | 2025-11-06T13:25:46.476Z |
| bit-joomla-2020-13763 | 2025-04-03T14:10:16.806Z | 2025-11-06T13:25:46.476Z | |
| bit-joomla-2020-13761 | 2025-04-03T14:10:08.600Z | 2025-11-06T13:25:46.476Z | |
| bit-joomla-2020-13760 | 2025-04-03T14:10:04.787Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2025-59476 | 2025-09-19T09:57:11.182Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2025-59475 | 2025-09-19T09:57:09.400Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2025-59474 | 2025-09-19T09:57:07.574Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2021-43859 | Denial of Service by injecting highly recursive collections or maps in XStream | 2025-05-26T07:13:32.699Z | 2025-11-06T13:25:46.476Z |
| bit-harbor-2025-32019 | Harbor's repository description page allows for XSS | 2025-07-29T05:40:29.320Z | 2025-11-06T13:25:46.476Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-04215 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04215） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04214 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04214） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04213 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04213） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04212 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04212） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04211 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04211） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04210 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04210） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04209 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04209） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04208 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04208） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04207 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04207） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04206 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04206） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04205 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04205） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04192 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04192） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04191 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04191） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04190 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04190） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04189 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04189） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04188 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04188） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04187 | WordPress插件Download Manager信息泄露漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04186 | WordPress插件All In One SEO Pack信息泄露漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04185 | D-Link DWR-M920命令注入漏洞 | 2026-01-14 | 2026-01-16 |
| cnvd-2026-04184 | D-Link DSL-124访问控制错误漏洞 | 2026-01-14 | 2026-01-16 |
| cnvd-2026-04863 | Google Android释放后重用漏洞（CNVD-2026-04863） | 2025-11-11 | 2026-01-15 |
| cnvd-2026-04862 | Google Android缺少权限检查漏洞 | 2025-12-10 | 2026-01-15 |
| cnvd-2026-04861 | Google Android输入验证不当漏洞 | 2025-12-10 | 2026-01-15 |
| cnvd-2026-04860 | Google Android越界写入漏洞 | 2025-12-10 | 2026-01-15 |
| cnvd-2026-04859 | Google Android竞争条件漏洞 | 2025-12-10 | 2026-01-15 |
| cnvd-2026-04858 | Google Android越界写入漏洞 | 2025-12-10 | 2026-01-15 |
| cnvd-2026-04857 | Google Android堆缓冲区溢出漏洞 | 2025-12-10 | 2026-01-15 |
| cnvd-2026-04856 | Huawei HarmonyOS特权升级漏洞 | 2024-01-23 | 2026-01-15 |
| cnvd-2026-04855 | Huawei HarmonyOS/EMUI授权漏洞 | 2024-01-23 | 2026-01-15 |
| cnvd-2026-04854 | Huawei HarmonyOS/EMUI拒绝服务漏洞 | 2024-01-23 | 2026-01-15 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0716 | Vulnérabilité dans les produits Apple | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0715 | Multiples vulnérabilités dans les produits Liferay | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0614 | Multiples vulnérabilités dans les produits Mattermost | 2025-07-23T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0714 | Multiples vulnérabilités dans les produits Mozilla | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0713 | Multiples vulnérabilités dans les produits Liferay | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0712 | Vulnérabilité dans Apereo CAS | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0711 | Vulnérabilité dans Google Chrome | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0710 | Multiples vulnérabilités dans les produits F5 | 2025-08-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0709 | Multiples vulnérabilités dans les produits Liferay | 2025-08-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0525 | Multiples vulnérabilités dans Mattermost Server | 2025-06-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0453 | Vulnérabilité dans Mattermost Server | 2025-05-27T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0441 | Vulnérabilité dans Mattermost Server | 2025-05-22T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0355 | Multiples vulnérabilités dans Mattermost Server | 2025-04-30T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0708 | Multiples vulnérabilités dans les produits Cisco | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0706 | Multiples vulnérabilités dans Matrix | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0705 | Multiples vulnérabilités dans Microsoft Edge | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0704 | Vulnérabilité dans les produits Siemens | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0703 | Vulnérabilité dans Synology BeeDrive | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0702 | Multiples vulnérabilités dans PostgreSQL | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0701 | Vulnérabilité dans IBM WebSphere | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0700 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0699 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0698 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0697 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0696 | Vulnérabilité dans Spring Framework | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0695 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0694 | Vulnérabilité dans Apache Tomcat | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0693 | Multiples vulnérabilités dans VMware Tanzu | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0692 | Multiples vulnérabilités dans Ruby on Rails | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0691 | Vulnérabilité dans Nginx | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |