Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-41297
4.8 (4.0)
7.6 (3.1)
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… OpenClaw
OpenClaw
2026-04-20T23:08:10.955Z 2026-04-21T13:41:34.057Z
CVE-2026-41296
8.8 (4.0)
8.2 (3.1)
OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race … OpenClaw
OpenClaw
2026-04-20T23:08:10.194Z 2026-04-21T19:49:41.570Z
CVE-2026-41295
8.5 (4.0)
7.8 (3.1)
OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shad… OpenClaw
OpenClaw
2026-04-20T23:08:09.503Z 2026-04-21T13:35:47.883Z
CVE-2026-41294
8.5 (4.0)
8.6 (3.1)
OpenClaw < 2026.3.28 - Environment Variable Injection … OpenClaw
OpenClaw
2026-04-20T23:08:08.795Z 2026-04-21T13:04:36.188Z
CVE-2026-40045
5.9 (4.0)
5.7 (3.1)
OpenClaw < 2026.4.2 - Cleartext Credential Transmissio… OpenClaw
OpenClaw
2026-04-20T23:08:07.952Z 2026-04-21T13:37:43.951Z
CVE-2026-34082
5.3 (4.0)
Dify has IDOR in deleting someone else's chat conversation langgenius
dify
2026-04-20T23:03:18.158Z 2026-04-21T13:36:45.614Z
CVE-2026-5721
4.7 (3.1)
wpDataTables – WordPress Data Table, Dynamic Tables & … wpdatatables
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin
2026-04-20T22:25:26.695Z 2026-04-21T19:49:47.411Z
CVE-2026-6729
5.3 (4.0)
6.3 (3.1)
HKUDS OpenHarness Session Key Collision Privilege Escalation HKUDS
OpenHarness
2026-04-20T22:01:38.766Z 2026-04-21T17:39:32.967Z
CVE-2026-0930
2.3 (4.0)
Potential wolfSSHd Buffer out-of-bounds Read on Window… wolfSSL
wolfSSH
2026-04-20T21:28:33.227Z 2026-04-21T13:37:15.647Z
CVE-2026-22051
2.3 (4.0)
StorageGRID (formerly StorageGRID Webscale) versi… NETAPP
StorageGRID (formerly StorageGRID Webscale)
2026-04-20T21:27:36.822Z 2026-04-21T13:40:46.948Z
CVE-2026-5450
9.8 (3.1)
scanf %mc off-by-one heap buffer overflow The GNU C Library
glibc
2026-04-20T20:55:41.170Z 2026-04-21T19:49:53.221Z
CVE-2026-5928
7.5 (3.1)
Static buffer overflow in deprecated nis_local_principal The GNU C Library
glibc
2026-04-20T20:37:31.743Z 2026-04-21T19:49:59.071Z
CVE-2026-5358
N/A
REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API can only be called with a trusted server from the pre-populated cache. The use of a trusted server means no trust boundary is crossed and this is therefore considered a normal bug. N/A N/A 2026-04-20T20:37:23.178Z 2026-04-22T13:04:20.656Z
CVE-2026-33626
7.5 (3.1)
LMDeploy Vulnerable to Server-Side Request Forgery (SS… InternLM
lmdeploy
2026-04-20T20:29:19.558Z 2026-04-21T19:50:13.326Z
CVE-2026-4852
6.4 (3.1)
Image Source Control Lite – Show Image Credits and Cap… webzunft
Image Source Control Lite – Show Image Credits and Captions
2026-04-20T20:26:53.256Z 2026-04-21T13:53:14.507Z
CVE-2026-33432
7.7 (4.0)
Roxy-WI has Pre-Authentication LDAP Injection that Lea… roxy-wi
roxy-wi
2026-04-20T20:26:52.217Z 2026-04-21T17:38:09.523Z
CVE-2026-33431
5.7 (4.0)
Roxy-WI Vulnerable to Authenticated Arbitrary File Rea… roxy-wi
roxy-wi
2026-04-20T20:24:15.319Z 2026-04-21T13:42:19.802Z
CVE-2026-34403
5.5 (4.0)
Nginx-UI vulnerable to Cross-Site WebSocket Hijacking … 0xJacky
nginx-ui
2026-04-20T20:16:47.597Z 2026-04-21T13:36:46.510Z
CVE-2026-33031
8.6 (4.0)
Nginx-UI: Disabled users retain full API access throug… 0xJacky
nginx-ui
2026-04-20T20:12:07.905Z 2026-04-21T13:35:20.144Z
CVE-2026-32613
10 (3.1)
Spinnaker vulnerable to RCE via expression parsing due… spinnaker
spinnaker
2026-04-20T20:07:24.697Z 2026-04-22T03:56:18.686Z
CVE-2026-32604
10 (3.1)
Spinnaker vulnerable to RCE when using gitrepo artifac… spinnaker
spinnaker
2026-04-20T20:00:57.517Z 2026-04-22T03:56:17.486Z
CVE-2026-6249
8.7 (4.0)
8.8 (3.1)
Vvveb CMS 1.0.8 Remote Code Execution via Media Upload Vvveb
Vvveb CMS
2026-04-20T19:57:37.655Z 2026-04-21T13:43:17.635Z
CVE-2026-32311
9.3 (4.0)
Command Injection and Docker container escape allows r… reconurge
flowsint
2026-04-20T19:56:32.521Z 2026-04-21T13:44:08.776Z
CVE-2026-5478
8.1 (3.1)
Everest Forms <= 3.4.4 - Unauthenticated Arbitrary Fil… wpeverest
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder
2026-04-20T19:27:08.159Z 2026-04-21T13:33:57.569Z
CVE-2026-32135
7.7 (4.0)
NanoMQ has Heap Buffer Overflow in URI Parameter Parsing nanomq
nanomq
2026-04-20T19:23:09.704Z 2026-04-21T13:33:14.607Z
CVE-2026-6550
4.7 (3.1)
5.7 (4.0)
Key commitment policy bypass via shared key cache in A… AWS
AWS Encryption SDK for Python
2026-04-20T19:20:23.383Z 2026-04-20T19:44:11.685Z
CVE-2026-6257
9.2 (4.0)
9.1 (3.1)
Vvveb CMS v1.0.8 Remote Code Execution via Media Management Vvveb
Vvveb CMS
2026-04-20T19:09:45.927Z 2026-04-21T19:50:26.897Z
CVE-2026-6248
8.1 (3.1)
wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Ar… tomdever
wpForo Forum
2026-04-20T18:31:33.290Z 2026-04-21T17:35:30.317Z
CVE-2026-6060
4.5 (3.1)
Possible DoS via SQL Box OTRS AG
OTRS
2026-04-20T18:20:01.664Z 2026-04-20T18:48:48.185Z
CVE-2026-41389
6.3 (4.0)
5.8 (3.1)
OpenClaw 2026.4.7 < 2026.4.15 - Arbitrary File Read vi… OpenClaw
OpenClaw
2026-04-20T17:48:43.704Z 2026-04-20T18:05:03.103Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-39377
6.5 (3.1)
nbconvert has an Arbitrary File Write via Path Travers… jupyter
nbconvert
2026-04-21T00:14:59.937Z 2026-04-21T19:49:24.475Z
CVE-2026-39320
7.5 (3.1)
Signal K Server has an Unauthenticated Regular Express… SignalK
signalk-server
2026-04-21T00:07:10.371Z 2026-04-21T19:36:54.787Z
CVE-2026-41331
6.9 (4.0)
5.3 (3.1)
OpenClaw < 2026.3.31 - Resource Consumption via Unauth… OpenClaw
OpenClaw
2026-04-20T23:08:17.653Z 2026-04-21T20:27:46.881Z
CVE-2026-41330
2 (4.0)
4.4 (3.1)
OpenClaw < 2026.3.31 - Environment Variable Override v… OpenClaw
OpenClaw
2026-04-20T23:08:16.941Z 2026-04-21T13:39:27.598Z
CVE-2026-41329
9 (4.0)
9.9 (3.1)
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Co… OpenClaw
OpenClaw
2026-04-20T23:08:16.222Z 2026-04-21T19:38:16.140Z
CVE-2026-41303
8.7 (4.0)
8.8 (3.1)
OpenClaw < 2026.3.28 - Authorization Bypass in Discord… OpenClaw
OpenClaw
2026-04-20T23:08:15.511Z 2026-04-21T13:35:55.924Z
CVE-2026-41302
4.8 (4.0)
7.6 (3.1)
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… OpenClaw
OpenClaw
2026-04-20T23:08:14.782Z 2026-04-21T19:49:35.930Z
CVE-2026-41301
6.9 (4.0)
5.3 (3.1)
OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairi… OpenClaw
OpenClaw
2026-04-20T23:08:14.023Z 2026-04-21T13:33:53.554Z
CVE-2026-41300
6.9 (4.0)
6.5 (3.1)
OpenClaw < 2026.3.31 - Attacker-Discovered Endpoint Pr… OpenClaw
OpenClaw
2026-04-20T23:08:13.304Z 2026-04-21T13:03:24.309Z
CVE-2026-41299
7.1 (4.0)
7.1 (3.1)
OpenClaw < 2026.3.28 - Client Identity Spoofing in cha… OpenClaw
OpenClaw
2026-04-20T23:08:12.586Z 2026-04-21T13:38:25.512Z
CVE-2026-41298
5.3 (4.0)
5.4 (3.1)
OpenClaw < 2026.4.2 - Authorization Bypass in Session … OpenClaw
OpenClaw
2026-04-20T23:08:11.787Z 2026-04-21T17:34:23.419Z
CVE-2026-41297
4.8 (4.0)
7.6 (3.1)
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… OpenClaw
OpenClaw
2026-04-20T23:08:10.955Z 2026-04-21T13:41:34.057Z
CVE-2026-41296
8.8 (4.0)
8.2 (3.1)
OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race … OpenClaw
OpenClaw
2026-04-20T23:08:10.194Z 2026-04-21T19:49:41.570Z
CVE-2026-41295
8.5 (4.0)
7.8 (3.1)
OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shad… OpenClaw
OpenClaw
2026-04-20T23:08:09.503Z 2026-04-21T13:35:47.883Z
CVE-2026-41294
8.5 (4.0)
8.6 (3.1)
OpenClaw < 2026.3.28 - Environment Variable Injection … OpenClaw
OpenClaw
2026-04-20T23:08:08.795Z 2026-04-21T13:04:36.188Z
CVE-2026-41285
4.3 (3.1)
In OpenBSD through 7.8, the slaacd and rad daemon… OpenBSD
OpenBSD
2026-04-20T00:00:00.000Z 2026-04-21T13:27:42.310Z
CVE-2026-40045
5.9 (4.0)
5.7 (3.1)
OpenClaw < 2026.4.2 - Cleartext Credential Transmissio… OpenClaw
OpenClaw
2026-04-20T23:08:07.952Z 2026-04-21T13:37:43.951Z
CVE-2026-35588
6.3 (3.1)
Glances has CQL Injection in its Cassandra Export Modu… nicolargo
glances
2026-04-20T23:20:34.998Z 2026-04-21T13:35:04.526Z
CVE-2026-35587
7.3 (4.0)
Glances IP Plugin has SSRF via public_api that leads t… nicolargo
glances
2026-04-20T23:19:02.908Z 2026-04-22T14:01:47.583Z
CVE-2026-35570
8.4 (3.1)
OpenClaude has Sandbox Bypass via Early-Exit Logic Fla… Gitlawb
openclaude
2026-04-20T23:24:08.324Z 2026-04-21T19:49:30.148Z
CVE-2026-34839
7.7 (4.0)
Glances Vulnerable to Cross-Origin Information Disclos… nicolargo
glances
2026-04-20T23:09:02.551Z 2026-04-21T19:37:42.399Z
CVE-2026-5721
4.7 (3.1)
wpDataTables – WordPress Data Table, Dynamic Tables & … wpdatatables
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin
2026-04-20T22:25:26.695Z 2026-04-21T19:49:47.411Z
CVE-2026-34082
5.3 (4.0)
Dify has IDOR in deleting someone else's chat conversation langgenius
dify
2026-04-20T23:03:18.158Z 2026-04-21T13:36:45.614Z
CVE-2026-6729
5.3 (4.0)
6.3 (3.1)
HKUDS OpenHarness Session Key Collision Privilege Escalation HKUDS
OpenHarness
2026-04-20T22:01:38.766Z 2026-04-21T17:39:32.967Z
CVE-2026-29643
7.1 (3.1)
XiangShan (Open-source high-performance RISC-V pr… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-21T19:50:32.463Z
CVE-2026-22051
2.3 (4.0)
StorageGRID (formerly StorageGRID Webscale) versi… NETAPP
StorageGRID (formerly StorageGRID Webscale)
2026-04-20T21:27:36.822Z 2026-04-21T13:40:46.948Z
CVE-2026-0930
2.3 (4.0)
Potential wolfSSHd Buffer out-of-bounds Read on Window… wolfSSL
wolfSSH
2026-04-20T21:28:33.227Z 2026-04-21T13:37:15.647Z
CVE-2026-5928
7.5 (3.1)
Static buffer overflow in deprecated nis_local_principal The GNU C Library
glibc
2026-04-20T20:37:31.743Z 2026-04-21T19:49:59.071Z
CVE-2026-5450
9.8 (3.1)
scanf %mc off-by-one heap buffer overflow The GNU C Library
glibc
2026-04-20T20:55:41.170Z 2026-04-21T19:49:53.221Z
CVE-2026-5358
N/A
REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API can only be called with a trusted server from the pre-populated cache. The use of a trusted server means no trust boundary is crossed and this is therefore considered a normal bug. N/A N/A 2026-04-20T20:37:23.178Z 2026-04-22T13:04:20.656Z
ID Severity Description Published Updated
ghsa-27jw-fcpv-p46x
5.4 (3.1)
5.1 (4.0)
GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports mod… 2026-04-20T18:31:49Z 2026-04-20T18:31:50Z
ghsa-p8w2-3jvp-85x5
6.7 (3.1)
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. … 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-p7mp-86pp-wx7w
4.7 (3.1)
2.0 (4.0)
A vulnerability was identified in Z-BlogPHP 1.7.5. This affects the function App::UnPack of the fil… 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-hmwv-mfjf-w46v
8.8 (3.1)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 throug… 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-h2v9-xpqq-69hx
7.1 (3.1)
ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in t… 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-gv64-vfgp-cgh5
4.7 (3.1)
2.0 (4.0)
A weakness has been identified in Pagekit CMS up to 1.0.18. This issue affects the function evaluat… 2026-04-20T18:31:48Z 2026-04-20T18:31:49Z
ghsa-fxgc-2fpp-hx5w
8.8 (3.1)
8.7 (4.0)
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save… 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-fr6h-4rh3-wc9f
7.7 (3.1)
8.3 (4.0)
Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy acti… 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-chhv-69jq-q952
9.8 (3.1)
9.2 (4.0)
Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where t… 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-82p8-693h-j5x5
2.4 (3.1)
1.9 (4.0)
A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability aff… 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-58qw-9mgm-455v
4.6 (4.0)
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is… 2026-04-20T18:31:48Z 2026-04-20T21:31:43Z
ghsa-49mg-4v6p-32w2
5.4 (3.1)
5.1 (4.0)
Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticat… 2026-04-20T18:31:48Z 2026-04-20T18:31:48Z
ghsa-3gjh-jvm6-6pfg
6.5 (3.1)
A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or… 2026-04-20T18:31:48Z 2026-04-20T18:31:49Z
ghsa-gxrh-c9qf-pf88
7.2 (3.1)
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… 2026-04-20T18:31:47Z 2026-04-20T18:31:47Z
ghsa-x2wv-w39c-7c55
6.3 (3.1)
2.1 (4.0)
A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionalit… 2026-04-20T15:31:52Z 2026-04-20T15:31:52Z
ghsa-wvwg-7g9q-g3v4
8.4 (3.1)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an … 2026-04-20T15:31:52Z 2026-04-20T15:31:52Z
ghsa-wf66-mphr-4c4r
5.3 (3.1)
Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient componen… 2026-04-20T15:31:52Z 2026-04-20T18:31:47Z
ghsa-rw4j-jhfh-fr2h
8.4 (3.1)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an … 2026-04-20T15:31:52Z 2026-04-20T15:31:52Z
ghsa-qhfq-gvvc-5q6q
5.3 (3.1)
Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw… 2026-04-20T15:31:52Z 2026-04-20T18:31:46Z
ghsa-pwx9-99jm-fx95
8.4 (3.1)
OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an a… 2026-04-20T15:31:52Z 2026-04-20T15:31:52Z
ghsa-g4q4-3mm2-2w69
8.4 (3.1)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an … 2026-04-20T15:31:52Z 2026-04-20T15:31:52Z
ghsa-c8hq-8vfh-x23r
5.7 (4.0)
An improper access control vulnerability in the canonical-livepatch snap client prior to version 10… 2026-04-20T15:31:52Z 2026-04-20T15:31:52Z
ghsa-7hc9-pw4r-x45r
3.5 (3.1)
2.0 (4.0)
A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionali… 2026-04-20T15:31:52Z 2026-04-20T15:31:52Z
ghsa-2wm4-697g-pfq8
9.8 (3.1)
SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file con… 2026-04-20T15:31:52Z 2026-04-20T18:31:47Z
ghsa-28jg-cgg7-j4wc
9.1 (3.1)
A possible security vulnerability has been identified in Apache Kafka. By default, the broker prop… 2026-04-20T15:31:52Z 2026-04-20T18:31:46Z
ghsa-xx6p-3747-7pwp
2.4 (3.1)
1.9 (4.0)
A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknow… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-x42f-vq92-fh92
2.4 (3.1)
1.9 (4.0)
A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unkno… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-wj32-w776-h6m2
8.8 (3.1)
7.4 (4.0)
A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGst… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-rgcc-vxwc-jxf9
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vuln… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-q6vj-q94p-g3rc
8.8 (3.1)
7.4 (4.0)
A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the functi… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ID Severity Description Package Published Updated
pysec-2022-43055
7.5 (3.1)
Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by r… hyperledger 2022-11-12T20:15:00+00:00 2023-08-17T03:22:31.453589+00:00
pysec-2022-43018
WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using th… wsgidav 2022-11-11T21:15:00Z 2023-05-04T04:29:31.369774Z
pysec-2022-42985
Arches is a web platform for creating, managing, & visualizing geospatial data. Versions … arches 2022-11-11T04:15:00Z 2023-05-04T04:29:23.524968Z
pysec-2022-43178
7.5 (3.1)
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo … cleo 2022-11-09T20:15:10+00:00 2025-04-09T17:27:24.793038+00:00
pysec-2022-43130
9.8 (3.1)
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… democritus-uuids 2022-11-07T15:15:00Z 2024-11-21T14:22:45.198186Z
pysec-2022-43129
9.8 (3.1)
The d8s-strings for python, as distributed on PyPI, included a potential code-execution b… democritus-uuids 2022-11-07T15:15:00Z 2024-11-21T14:22:45.148199Z
pysec-2022-43128
9.8 (3.1)
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backd… democritus-utility 2022-11-07T15:15:00Z 2024-11-21T14:22:45.091449Z
pysec-2022-43127
9.8 (3.1)
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… democritus-user-agents 2022-11-07T15:15:00Z 2024-11-21T14:22:45.041198Z
pysec-2022-43126
9.8 (3.1)
The d8s-dates for python, as distributed on PyPI, included a potential code-execution bac… democritus-timezones 2022-11-07T15:15:00Z 2024-11-21T14:22:44.991216Z
pysec-2022-43109
9.8 (3.1)
The d8s-stats for python, as distributed on PyPI, included a potential code-execution bac… democritus-math 2022-11-07T15:15:00Z 2024-11-21T14:22:44.122837Z
pysec-2022-43108
9.8 (3.1)
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… democritus-json 2022-11-07T15:15:00Z 2024-11-21T14:22:44.072231Z
pysec-2022-43100
9.8 (3.1)
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… democritus-grammars 2022-11-07T15:15:00Z 2024-11-21T14:22:43.665816Z
pysec-2022-43097
9.8 (3.1)
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… democritus-domains 2022-11-07T15:15:00Z 2024-11-21T14:22:43.511664Z
pysec-2022-43096
8.8 (3.1)
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… democritus-dates 2022-11-07T15:15:00Z 2024-11-21T14:22:43.46136Z
pysec-2022-43094
9.8 (3.1)
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… democritus-algorithms 2022-11-07T15:15:00Z 2024-11-21T14:22:43.361191Z
pysec-2022-43093
9.8 (3.1)
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backd… d8s-xml 2022-11-07T15:15:00Z 2024-11-21T14:22:43.253271Z
pysec-2022-43091
9.8 (3.1)
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… d8s-urls 2022-11-07T15:15:00Z 2024-11-21T14:22:43.149086Z
pysec-2022-43090
8.8 (3.1)
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… d8s-timer 2022-11-07T15:15:00Z 2024-11-21T14:22:43.097689Z
pysec-2022-43089
9.8 (3.1)
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… d8s-timer 2022-11-07T15:15:00Z 2024-11-21T14:22:43.045759Z
pysec-2022-43088
9.8 (3.1)
The d8s-strings for python, as distributed on PyPI, included a potential code-execution b… d8s-strings 2022-11-07T15:15:00Z 2024-11-21T14:22:42.994084Z
pysec-2022-43086
9.8 (3.1)
The d8s-stats for python, as distributed on PyPI, included a potential code-execution bac… d8s-stats 2022-11-07T15:15:00Z 2024-11-21T14:22:42.892924Z
pysec-2022-43085
9.8 (3.1)
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… d8s-python 2022-11-07T15:15:00Z 2024-11-21T14:22:42.829791Z
pysec-2022-43084
9.8 (3.1)
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… d8s-python 2022-11-07T15:15:00Z 2024-11-21T14:22:42.776996Z
pysec-2022-43082
9.8 (3.1)
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… d8s-networking 2022-11-07T15:15:00Z 2024-11-21T14:22:42.668916Z
pysec-2022-43081
9.8 (3.1)
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… d8s-networking 2022-11-07T15:15:00Z 2024-11-21T14:22:42.613124Z
pysec-2022-43075
9.8 (3.1)
The d8s-dates for python, as distributed on PyPI, included a potential code-execution bac… d8s-dates 2022-11-07T15:15:00Z 2024-11-21T14:22:42.280201Z
pysec-2022-43131
6.5 (3.1)
diplib v3.0.0 is vulnerable to Double Free. diplib 2022-11-04T17:15:00Z 2024-12-27T22:48:17.996707Z
pysec-2022-42969
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regu… py 2022-11-04T11:00:00Z 2022-11-04T11:00:00Z
pysec-2022-42971
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's … apache-airflow 2022-11-02T12:15:00Z 2022-11-07T01:10:28.239756Z
pysec-2022-42970
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susce… apache-airflow 2022-11-02T12:15:00Z 2022-11-07T01:10:28.198195Z
ID Description Updated
ID Description Published Updated
mal-2026-2219 Malicious code in @solmasterv3/solana-metadata-sdk (npm) 2026-03-26T00:52:19Z 2026-03-31T03:12:00Z
mal-2026-2218 Malicious code in @solana-ipfs/sdk (npm) 2026-03-26T00:52:19Z 2026-03-31T03:12:00Z
mal-2026-2216 Malicious code in @pumpfun-ipfs/sdk (npm) 2026-03-26T00:52:19Z 2026-03-31T03:12:00Z
mal-2026-2226 Malicious code in node-coremesh (npm) 2026-03-26T00:42:51Z 2026-04-16T15:42:09Z
mal-2026-2222 Malicious code in chain-coremesh (npm) 2026-03-26T00:42:51Z 2026-04-16T15:42:08Z
mal-2026-2215 Malicious code in react-leaflet-marker-layer (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:04Z
mal-2026-2214 Malicious code in react-autolink-text (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:04Z
mal-2026-2213 Malicious code in @virtahealth/substrate-root (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:00Z
mal-2026-2212 Malicious code in @opengov/qa-record-types-api (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:00Z
mal-2026-2211 Malicious code in @opengov/form-renderer (npm) 2026-03-26T00:33:27Z 2026-04-07T23:28:28Z
mal-2026-2210 Malicious code in @opengov/form-builder (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:00Z
mal-2026-2209 Malicious code in @emilgroup/translation-sdk-node (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:00Z
mal-2026-2208 Malicious code in @emilgroup/setting-sdk (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:00Z
mal-2026-2207 Malicious code in @emilgroup/process-manager-sdk-node (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:00Z
mal-2026-2206 Malicious code in @emilgroup/process-manager-sdk (npm) 2026-03-26T00:33:27Z 2026-03-31T03:12:00Z
mal-2026-2205 Malicious code in @emilgroup/partner-sdk (npm) 2026-03-26T00:33:27Z 2026-03-31T03:11:59Z
mal-2026-2204 Malicious code in @emilgroup/numbergenerator-sdk-node (npm) 2026-03-26T00:33:27Z 2026-03-31T03:11:59Z
mal-2026-2203 Malicious code in @emilgroup/discount-sdk-node (npm) 2026-03-26T00:33:27Z 2026-03-31T03:11:59Z
mal-2026-2202 Malicious code in @emilgroup/commission-sdk (npm) 2026-03-26T00:33:27Z 2026-03-31T03:11:59Z
mal-2026-2220 Malicious code in @universeorg/dotenv (npm) 2026-03-26T00:31:20Z 2026-03-31T03:12:00Z
mal-2026-2217 Malicious code in @rexorg/config (npm) 2026-03-26T00:31:20Z 2026-04-16T15:42:07Z
mal-2026-2200 Malicious code in json-lucide (npm) 2026-03-25T16:45:38Z 2026-04-16T15:42:09Z
mal-2026-2199 Malicious code in omicnavigatorwebapp (npm) 2026-03-25T15:03:25Z 2026-03-31T03:12:03Z
mal-2026-2198 Malicious code in omaronsec (npm) 2026-03-25T15:03:25Z 2026-03-31T03:12:03Z
mal-2026-2196 Malicious code in tailwind-compile (npm) 2026-03-25T14:20:59Z 2026-04-16T15:42:10Z
mal-2026-2195 Malicious code in super-alias (npm) 2026-03-25T14:14:18Z 2026-03-31T03:12:04Z
mal-2026-2194 Malicious code in ffsixx (npm) 2026-03-25T14:14:18Z 2026-03-31T03:12:01Z
mal-2026-2193 Malicious code in @sixcore/baileys (npm) 2026-03-25T14:14:18Z 2026-03-31T03:12:00Z
mal-2026-2192 Malicious code in changelog-utils-wrapper (npm) 2026-03-25T12:42:22Z 2026-03-31T03:12:01Z
mal-2026-2191 Malicious code in changelog-utils-logger (npm) 2026-03-25T12:42:22Z 2026-03-31T03:12:01Z
ID Description Published Updated
wid-sec-w-2025-2665 Hashicorp Terraform (Enterprise, Vault Provider): Mehrere Schwachstellen 2025-11-23T23:00:00.000+00:00 2025-11-23T23:00:00.000+00:00
wid-sec-w-2025-2664 HCL BigFix: Schwachstelle ermöglicht Manipulation von Daten 2025-11-23T23:00:00.000+00:00 2025-11-23T23:00:00.000+00:00
wid-sec-w-2025-2663 libpng: Mehrere Schwachstellen 2025-11-23T23:00:00.000+00:00 2026-03-26T23:00:00.000+00:00
wid-sec-w-2025-2662 IBM Informix (Dynamic Server): Schwachstelle ermöglicht Denial of Service 2025-11-23T23:00:00.000+00:00 2025-11-23T23:00:00.000+00:00
wid-sec-w-2025-2661 Google Cloud Platform (Looker): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode 2025-11-23T23:00:00.000+00:00 2025-11-24T23:00:00.000+00:00
wid-sec-w-2025-2659 Synology DiskStation Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-11-23T23:00:00.000+00:00 2025-11-23T23:00:00.000+00:00
wid-sec-w-2025-2658 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-20T23:00:00.000+00:00 2026-03-30T22:00:00.000+00:00
wid-sec-w-2025-2657 WebKitGTK: Mehrere Schwachstellen 2025-11-20T23:00:00.000+00:00 2026-03-30T22:00:00.000+00:00
wid-sec-w-2025-2656 MELDUNG ZURÜCKGEZOGEN 2025-11-20T23:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2655 CUPS-Filters: Schwachstelle ermöglicht Codeausführung 2025-11-20T23:00:00.000+00:00 2025-12-08T23:00:00.000+00:00
wid-sec-w-2025-2654 MongoDB (Server): Schwachstelle ermöglicht Denial of Service 2025-11-20T23:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2653 Microsoft Visual Studio Code: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-11-20T23:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2652 Red Hat Satellite: Schwachstelle ermöglicht Offenlegung von Informationen 2025-11-20T23:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2651 GnuTLS: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-11-19T23:00:00.000+00:00 2026-03-04T23:00:00.000+00:00
wid-sec-w-2025-2650 Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen 2025-11-19T23:00:00.000+00:00 2025-11-25T23:00:00.000+00:00
wid-sec-w-2025-2649 Google Cloud Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-11-19T23:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2648 IBM AIX und VIOS: Mehrere Schwachstellen 2025-11-19T23:00:00.000+00:00 2025-11-19T23:00:00.000+00:00
wid-sec-w-2025-2647 SonicWall Email Security: Mehrere Schwachstellen 2025-11-19T23:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2646 Progress Software MOVEit: Schwachstelle ermöglicht Offenlegung von Informationen 2025-11-19T23:00:00.000+00:00 2025-11-19T23:00:00.000+00:00
wid-sec-w-2025-2645 Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-19T23:00:00.000+00:00 2026-03-03T23:00:00.000+00:00
wid-sec-w-2025-2644 Pega Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-11-19T23:00:00.000+00:00 2025-11-19T23:00:00.000+00:00
wid-sec-w-2025-2643 Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-19T23:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2025-2642 MongoDB: Schwachstelle ermöglicht Offenlegung von Informationen 2025-11-19T23:00:00.000+00:00 2025-11-19T23:00:00.000+00:00
wid-sec-w-2025-2641 Grafana Enterprise: Schwachstelle ermöglicht Privilegieneskalation 2025-11-19T23:00:00.000+00:00 2025-11-23T23:00:00.000+00:00
wid-sec-w-2025-2640 SonicWall SSL-VPN: Schwachstelle ermöglicht Denial of Service 2025-11-19T23:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2639 Arista EOS: Mehrere Schwachstellen 2025-11-18T23:00:00.000+00:00 2025-11-18T23:00:00.000+00:00
wid-sec-w-2025-2638 Grub: Mehrere Schwachstellen 2025-11-18T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2637 Rsync: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-11-18T23:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2025-2636 OpenVPN: Mehrere Schwachstellen 2025-11-18T23:00:00.000+00:00 2026-03-05T23:00:00.000+00:00
wid-sec-w-2025-2635 Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Denial of Service 2025-11-18T23:00:00.000+00:00 2025-12-11T23:00:00.000+00:00
ID Description Published Updated
icsa-24-324-01 Mitsubishi Electric MELSEC iQ-F Series (Update A) 2024-11-19T00:00:00.000Z 2026-03-31T00:00:00.000000Z
icsma-24-319-01 Baxter Life2000 Ventilation System 2024-11-14T07:00:00.000000Z 2024-11-14T07:00:00.000000Z
icsa-24-319-17 2N Access Commander (Update A) 2024-11-14T07:00:00.000000Z 2025-02-11T07:00:00.000000Z
icsa-24-319-16 Hitachi Energy MSM 2024-11-14T07:00:00.000000Z 2024-11-14T07:00:00.000000Z
icsa-24-319-15 Rockwell Automation Arena Input Analyzer 2024-11-14T07:00:00.000000Z 2024-11-14T07:00:00.000000Z
icsa-24-319-14 Rockwell Automation FactoryTalk Updater (Update A) 2024-11-14T07:00:00.000000Z 2024-11-18T07:00:00.000000Z
icsa-24-319-13 Rockwell Automation Verve Reporting (Update A) 2024-11-14T07:00:00.000000Z 2024-11-18T07:00:00.000000Z
va-24-317-01 Ivanti Connect Secure and Ivanti Policy Secure Multiple Vulnerabilities 2024-11-13T20:32:00Z 2024-11-13T20:32:00Z
icsa-24-317-03 Rockwell Automation FactoryTalk View ME 2024-11-12T07:00:00.000000Z 2024-11-12T07:00:00.000000Z
icsa-24-317-02 Hitachi Energy TRO600 2024-11-12T07:00:00.000000Z 2024-11-12T07:00:00.000000Z
icsa-24-317-01 Subnet Solutions PowerSYSTEM Center 2024-11-12T07:00:00.000000Z 2024-11-12T07:00:00.000000Z
icsa-24-326-04 Schneider Electric Modicon M340, MC80, and Momentum Unity M1E (Update B) 2024-11-12T05:00:00.000000Z 2026-01-20T15:49:53.166459Z
icsa-24-326-06 Schneider Electric PowerLogic PM5300 Series 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-326-05 Schneider Electric EcoStruxure IT Gateway 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-326-03 Schneider Electric Modicon M340, MC80, and Momentum Unity M1E 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-12 Siemens Mendix Runtime 2024-11-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-24-319-11 Siemens SIMATIC CP 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-10 Siemens TeleControl Server 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-09 Siemens Spectrum Power 7 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-08 Siemens SINEC INS 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-07 Siemens Engineering Platforms 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-06 Siemens SCALANCE M-800 Family 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-05 Siemens Solid Edge 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-04 Siemens SINEC NMS 2024-11-12T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-319-03 Siemens OZW672 and OZW772 Web Server 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-02 Siemens SIPORT 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-01 Siemens RUGGEDCOM CROSSBOW 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-312-03 Bosch Rexroth IndraDrive 2024-11-07T07:00:00.000000Z 2024-11-07T07:00:00.000000Z
icsa-24-312-02 Delta Electronics DIAScreen 2024-11-07T07:00:00.000000Z 2024-11-07T07:00:00.000000Z
icsa-24-312-01 Beckhoff Automation TwinCAT Package Manager 2024-11-07T07:00:00.000000Z 2024-11-07T07:00:00.000000Z
ID Description Published Updated
cisco-sa-esasmawsa-vulns-yrusw5md Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities 2022-11-02T16:00:00+00:00 2022-11-30T12:49:53+00:00
cisco-sa-esa-http-inject-nvsycumr Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability 2022-11-02T16:00:00+00:00 2022-11-02T16:00:00+00:00
cisco-sa-esa-dos-gdghhmbv Cisco Email Security Appliance Denial of Service Vulnerability 2022-11-02T16:00:00+00:00 2022-11-02T16:00:00+00:00
cisco-sa-cnt-sec-infodiscl-bvkknug Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Information Disclosure Vulnerability 2022-11-02T16:00:00+00:00 2022-11-02T16:00:00+00:00
cisco-sa-broadworks-ssrf-bjeqfpp Cisco BroadWorks CommPilot Application Software Vulnerabilities 2022-11-02T16:00:00+00:00 2023-01-24T17:26:16+00:00
cisco-sa-openssl-w9sdcc2a Vulnerabilities in OpenSSL Affecting Cisco Products: November 2022 2022-10-28T16:00:00+00:00 2022-11-23T20:23:17+00:00
cisco-sa-roomos-trav-befvccyu Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities 2022-10-19T16:00:00+00:00 2022-10-19T16:00:00+00:00
cisco-sa-meraki-mx-vpn-dos-vnesbgbf Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability 2022-10-19T16:00:00+00:00 2022-10-19T19:44:34+00:00
cisco-sa-ise-xss-twlnpy3m Cisco Identity Services Engine Cross-Site Scripting Vulnerability 2022-10-19T16:00:00+00:00 2023-03-31T21:09:40+00:00
cisco-sa-ise-path-trav-dz5dpzym Cisco Identity Services Engine Unauthorized File Access Vulnerability 2022-10-19T16:00:00+00:00 2023-01-24T18:18:32+00:00
cisco-sa-wsa-bypass-bwbfugek Cisco Secure Web Appliance Content Encoding Filter Bypass Vulnerabilities 2022-10-05T16:00:00+00:00 2023-04-03T13:46:35+00:00
cisco-sa-nfvis-isv-bqrvev2h Cisco Enterprise NFV Infrastructure Software Improper Signature Verification Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-jabber-xmpp-ne9scm Cisco Jabber Client Software Extensible Messaging and Presence Protocol Stanza Smuggling Vulnerability 2022-10-05T16:00:00+00:00 2022-10-19T20:47:17+00:00
cisco-sa-expressway-csrf-sqpssfy6 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-ctt-ivv-4a66dsfj Cisco Touch 10 Devices Insufficient Identity Verification Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-ctt-dav-hsvehhet Cisco Touch 10 Devices Downgrade Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-cssm-priv-esc-sejz69dv Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-bw-thinrcpt-xss-gsj4cecu Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-ata19x-multivuln-gezyvvs Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-wlc-udp-dos-xdyewhnz Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-dos-mkgrrscb Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-dhcp-dos-76pcjpxk Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-webui-cmdinj-gje47emn Cisco IOS XE Software Web UI Command Injection Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-ssh-excpt-dos-fzobqtnk Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-sdwan-privesc-cli-xkgwmqku Cisco SD-WAN Software Arbitrary File Corruption Vulnerability 2022-09-28T16:00:00+00:00 2024-01-23T23:05:35+00:00
cisco-sa-sdwan-avc-nddsgb8 Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-sdavc-za5fpxx2 Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-sd-wan-priv-e6e8tedf Cisco SD-WAN Software Privilege Escalation Vulnerabilities 2022-09-28T16:00:00+00:00 2026-02-25T20:29:00+00:00
cisco-sa-iosxe-mpls-dos-ab4oul3 Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-iosxe-info-disc-nrorxjo Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability 2022-09-28T16:00:00+00:00 2023-05-17T18:23:37+00:00
ID Description Published Updated
msrc_cve-2025-66037 OpenSC: Out of Bounds vulnerability 2026-03-02T00:00:00.000Z 2026-04-09T01:39:31.000Z
msrc_cve-2025-49010 OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE 2026-03-02T00:00:00.000Z 2026-04-14T14:43:29.000Z
msrc_cve-2025-13462 tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling 2026-03-02T00:00:00.000Z 2026-04-22T01:39:57.000Z
msrc_cve-2024-14027 xattr: switch to CLASS(fd) 2026-03-02T00:00:00.000Z 2026-03-11T14:36:33.000Z
msrc_cve-2006-10003 XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack 2026-03-02T00:00:00.000Z 2026-04-08T01:40:48.000Z
msrc_cve-2006-10002 XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes 2026-03-02T00:00:00.000Z 2026-03-20T01:04:46.000Z
msrc_cve-2026-26119 Windows Admin Center Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-17T08:00:00.000Z
msrc_cve-2026-24302 Azure Arc Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-04-10T07:00:00.000Z
msrc_cve-2026-24300 Azure Front Door Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-05T08:00:00.000Z
msrc_cve-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21537 Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21535 Microsoft Teams Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-19T08:00:00.000Z
msrc_cve-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21532 Azure Function Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-05T08:00:00.000Z
msrc_cve-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21529 Azure HDInsight Spoofing Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-19T08:00:00.000Z
msrc_cve-2026-21527 Microsoft Exchange Server Spoofing Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21523 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-04-20T07:00:00.000Z
msrc_cve-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21519 Desktop Window Manager Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21518 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability 2026-02-10T08:00:00.000Z 2026-04-01T07:00:00.000Z
msrc_cve-2026-21516 GitHub Copilot for Jetbrains Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21514 Microsoft Word Security Feature Bypass Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21511 Microsoft Outlook Spoofing Vulnerability 2026-02-10T08:00:00.000Z 2026-02-11T08:00:00.000Z
msrc_cve-2026-21510 Windows Shell Security Feature Bypass Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21508 Windows Storage Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
ID Description Published Updated
ncsc-2024-0342 Kwetsbaarheden verholpen in Ivanti Avalanche 2024-08-14T09:56:40.653912Z 2024-08-14T09:56:40.653912Z
ncsc-2024-0341 Kwetsbaarheden verholpen in Ivanti Neurons for ITSM 2024-08-14T09:54:26.701111Z 2024-08-14T09:54:26.701111Z
ncsc-2024-0340 Kwetsbaarheid verholpen in Ivanti Virtual Traffic Manager 2024-08-14T09:48:46.175634Z 2024-09-03T11:19:00.763993Z
ncsc-2024-0339 Kwetsbaarheden verholpen in Microsoft Mariner 2024-08-13T18:23:22.271316Z 2024-08-13T18:23:22.271316Z
ncsc-2024-0338 Kwetsbaarheden verholpen in Microsoft Dynamics 2024-08-13T18:22:21.160613Z 2024-08-13T18:22:21.160613Z
ncsc-2024-0337 Kwetsbaarheden verholpen in Microsoft Office 2024-08-13T18:21:45.385690Z 2024-08-13T18:21:45.385690Z
ncsc-2024-0336 Kwetsbaarheden verholpen in Microsoft Developer Tools 2024-08-13T18:21:06.220640Z 2024-08-13T18:21:06.220640Z
ncsc-2024-0335 Kwetsbaarheden verholpen in Microsoft Azure componenten 2024-08-13T18:20:23.647785Z 2024-08-13T18:20:23.647785Z
ncsc-2024-0334 Kwetsbaarheden verholpen in Microsoft Windows 2024-08-13T18:19:27.728322Z 2024-08-27T07:59:08.391850Z
ncsc-2024-0333 Kwetsbaarheden verholpen in SAP producten 2024-08-13T13:47:02.764070Z 2024-08-13T13:47:02.764070Z
ncsc-2024-0332 Kwetsbaarheden verholpen in Siemens producten 2024-08-13T09:21:28.381575Z 2024-08-13T09:21:28.381575Z
ncsc-2024-0331 Kwetsbaarheden verholpen in Zabbix 2024-08-12T10:34:15.273912Z 2024-08-12T10:34:15.273912Z
ncsc-2024-0330 Kwetsbaarheid verholpen in Asterisk 2024-08-12T10:31:33.788930Z 2024-08-12T10:31:33.788930Z
ncsc-2024-0329 Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition 2024-08-12T08:24:49.808846Z 2024-08-12T08:24:49.808846Z
ncsc-2024-0328 Kwetsbaarheden verholpen in IBM InfoSphere 2024-08-12T08:22:38.701674Z 2024-08-12T08:22:38.701674Z
ncsc-2024-0327 Kwetsbaarheden verholpen in Cisco Small Business IP Phones 2024-08-08T08:01:30.827296Z 2024-08-08T08:01:30.827296Z
ncsc-2024-0326 Kwetsbaarheden verholpen in RoundCube Webmail 2024-08-08T07:45:42.674316Z 2024-08-08T07:45:42.674316Z
ncsc-2024-0325 Kwetsbaarheden verholpen in Aruba Networks ArubaOS en InstantOS 2024-08-07T09:04:14.955844Z 2024-08-07T09:04:14.955844Z
ncsc-2024-0324 Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird 2024-08-07T08:58:12.457235Z 2024-08-07T08:58:12.457235Z
ncsc-2024-0323 Kwetsbaarheden verholpen in Siemens Omnivise 2024-08-06T09:29:53.292433Z 2024-08-06T09:29:53.292433Z
ncsc-2024-0322 Kwetsbaarheden verholpen in Google Android en Samsung Mobile 2024-08-06T09:25:08.253832Z 2024-08-06T09:25:08.253832Z
ncsc-2024-0321 Kwetsbaarheid verholpen in Progress MOVEit Transfer 2024-07-30T08:45:50.286085Z 2024-07-30T08:45:50.286085Z
ncsc-2024-0320 Kwetsbaarheden verholpen in Apple MacOS 2024-07-30T08:42:07.365674Z 2024-07-30T08:42:07.365674Z
ncsc-2024-0319 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2024-07-30T08:39:16.399394Z 2024-07-30T08:39:16.399394Z
ncsc-2024-0318 Kwetsbaarheden verholpen in Docker Moby 2024-07-25T11:28:37.900721Z 2024-07-25T11:28:37.900721Z
ncsc-2024-0317 Kwetsbaarheid gevonden in Ivanti Endpoint Manager 2024-07-24T14:37:09.864241Z 2024-07-24T14:37:09.864241Z
ncsc-2024-0316 Kwetsbaarheid verholpen in Broadcom Symantec Privileged Access Management 2024-07-22T09:17:29.853486Z 2024-07-22T09:17:29.853486Z
ncsc-2024-0315 Kwetsbaarheid verholpen in Cisco Smart Software Manager On-Prem 2024-07-19T13:06:00.004663Z 2024-07-19T13:06:00.004663Z
ncsc-2024-0314 Kwetsbaarheden verholpen in Apache HTTP Server 2024-07-19T07:34:12.997118Z 2024-07-19T07:34:12.997118Z
ncsc-2024-0313 Kwetsbaarheid verholpen in HPE 3PAR Service Processor 2024-07-18T13:58:07.127103Z 2024-07-18T13:58:07.127103Z
ID Description Published Updated
opensuse-su-2026:10014-1 python311-cbor2-5.8.0-2.1 on GA media 2026-01-07T00:00:00Z 2026-01-07T00:00:00Z
opensuse-su-2026:10013-1 apptainer-1.4.5-1.1 on GA media 2026-01-07T00:00:00Z 2026-01-07T00:00:00Z
opensuse-su-2026:10012-1 ImageMagick-7.1.2.12-1.1 on GA media 2026-01-07T00:00:00Z 2026-01-07T00:00:00Z
opensuse-su-2026:10011-1 python314-3.14.2-1.1 on GA media 2026-01-06T00:00:00Z 2026-01-06T00:00:00Z
opensuse-su-2026:10010-1 python311-filelock-3.20.2-1.1 on GA media 2026-01-06T00:00:00Z 2026-01-06T00:00:00Z
opensuse-su-2026:10009-1 log4j-2.20.0-1.1 on GA media 2026-01-06T00:00:00Z 2026-01-06T00:00:00Z
opensuse-su-2026:10008-1 gpsd-3.27.3-1.1 on GA media 2026-01-06T00:00:00Z 2026-01-06T00:00:00Z
opensuse-su-2026:10007-1 c-ares-devel-1.34.6-1.1 on GA media 2026-01-06T00:00:00Z 2026-01-06T00:00:00Z
opensuse-su-2026:10006-1 dcmtk-3.7.0-1.1 on GA media 2026-01-05T00:00:00Z 2026-01-05T00:00:00Z
opensuse-su-2026:10005-1 python312-Django6-6.0-1.1 on GA media 2026-01-03T00:00:00Z 2026-01-03T00:00:00Z
opensuse-su-2026:10004-1 fluidsynth-2.5.2-1.1 on GA media 2026-01-03T00:00:00Z 2026-01-03T00:00:00Z
opensuse-su-2026:20001-1 Security update for sssd 2026-01-02T16:58:16Z 2026-01-02T16:58:16Z
opensuse-su-2026:20002-1 Security update for MozillaThunderbird 2026-01-02T12:14:18Z 2026-01-02T12:14:18Z
opensuse-su-2026:10003-1 python311-marshmallow-3.26.2-1.1 on GA media 2026-01-02T00:00:00Z 2026-01-02T00:00:00Z
opensuse-su-2026:10002-1 libmatio-devel-1.5.29-1.1 on GA media 2026-01-01T00:00:00Z 2026-01-01T00:00:00Z
opensuse-su-2026:10001-1 dirmngr-2.5.16-1.1 on GA media 2026-01-01T00:00:00Z 2026-01-01T00:00:00Z
opensuse-su-2026:10000-1 gnu-recutils-1.9-3.1 on GA media 2026-01-01T00:00:00Z 2026-01-01T00:00:00Z
opensuse-su-2025:15854-1 kepler-0.11.3-1.1 on GA media 2025-12-31T00:00:00Z 2025-12-31T00:00:00Z
opensuse-su-2025:20130-1 Security update for bash-git-prompt 2025-12-30T17:08:26Z 2025-12-30T17:08:26Z
opensuse-su-2025:20121-1 Security update for redis 2025-12-30T17:05:45Z 2025-12-30T17:05:45Z
opensuse-su-2025:20155-1 Security update for exim 2025-12-30T17:02:44Z 2025-12-30T17:02:44Z
opensuse-su-2025:20128-1 Security update for shadowsocks-v2ray-plugin, v2ray-core 2025-12-30T17:02:04Z 2025-12-30T17:02:04Z
opensuse-su-2025:20097-1 Security update for helmfile 2025-12-30T17:00:02Z 2025-12-30T17:00:02Z
opensuse-su-2025:20178-1 Security update for chromium 2025-12-30T16:56:53Z 2025-12-30T16:56:53Z
opensuse-su-2025:15853-1 weblate-5.14.3-2.1 on GA media 2025-12-30T00:00:00Z 2025-12-30T00:00:00Z
opensuse-su-2025:15852-1 trivy-0.68.2-1.1 on GA media 2025-12-29T00:00:00Z 2025-12-29T00:00:00Z
opensuse-su-2025:15851-1 python313-3.13.11-1.1 on GA media 2025-12-29T00:00:00Z 2025-12-29T00:00:00Z
opensuse-su-2025:15850-1 python312-3.12.12-4.1 on GA media 2025-12-29T00:00:00Z 2025-12-29T00:00:00Z
opensuse-su-2025:15849-1 python311-3.11.14-3.1 on GA media 2025-12-29T00:00:00Z 2025-12-29T00:00:00Z
opensuse-su-2025:15848-1 python311-openapi-core-0.22.0-1.1 on GA media 2025-12-28T00:00:00Z 2025-12-28T00:00:00Z
ID Description Published Updated
rhsa-2026:3821 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T06:51:55+00:00 2026-04-14T09:46:31+00:00
rhsa-2026:3817 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T06:25:53+00:00 2026-04-14T09:46:30+00:00
rhsa-2026:3820 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T06:19:06+00:00 2026-04-14T09:46:30+00:00
rhsa-2026:3818 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T06:11:00+00:00 2026-04-14T09:46:34+00:00
rhsa-2026:3816 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T05:42:24+00:00 2026-04-14T09:46:31+00:00
rhsa-2026:3815 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T05:32:24+00:00 2026-04-14T09:46:29+00:00
rhsa-2026:3813 Red Hat Security Advisory: go-rpm-macros security update 2026-03-05T05:30:04+00:00 2026-04-14T07:58:37+00:00
rhsa-2026:3812 Red Hat Security Advisory: grafana-pcp security update 2026-03-05T04:13:33+00:00 2026-04-14T09:46:28+00:00
rhsa-2026:3810 Red Hat Security Advisory: kernel security update 2026-03-05T03:22:49+00:00 2026-03-18T20:55:29+00:00
rhsa-2026:3782 Red Hat Security Advisory: RHOAI 2.25.3 - Red Hat OpenShift AI 2026-03-04T18:23:40+00:00 2026-04-14T09:46:28+00:00
rhsa-2026:3391 Red Hat Security Advisory: OpenShift Container Platform 4.19.25 packages and security update 2026-03-04T15:54:04+00:00 2026-04-14T07:58:29+00:00
rhsa-2026:3753 Red Hat Security Advisory: osbuild-composer security update 2026-03-04T15:52:29+00:00 2026-04-14T09:46:28+00:00
rhsa-2026:3392 Red Hat Security Advisory: OpenShift Container Platform 4.19.25 bug fix and security update 2026-03-04T15:36:49+00:00 2026-04-13T19:35:42+00:00
rhsa-2026:3752 Red Hat Security Advisory: osbuild-composer security update 2026-03-04T15:29:36+00:00 2026-04-14T09:46:28+00:00
rhsa-2026:3751 Red Hat Security Advisory: Red Hat Developer Hub 1.9.0 release. 2026-03-04T15:00:31+00:00 2026-03-18T16:09:25+00:00
rhsa-2026:3730 Red Hat Security Advisory: postgresql security update 2026-03-04T14:32:11+00:00 2026-04-10T21:16:28+00:00
rhsa-2026:3416 Red Hat Security Advisory: OpenShift Container Platform 4.17.50 packages and security update 2026-03-04T09:07:15+00:00 2026-04-14T07:58:29+00:00
rhsa-2026:3723 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 2026-03-04T08:59:26+00:00 2026-04-14T07:58:36+00:00
rhsa-2026:3417 Red Hat Security Advisory: OpenShift Container Platform 4.17.50 bug fix and security update 2026-03-04T08:55:38+00:00 2026-04-13T19:35:41+00:00
rhsa-2026:3418 Red Hat Security Advisory: OpenShift Container Platform 4.17.50 bug fix and security update 2026-03-04T08:33:38+00:00 2026-04-10T21:19:36+00:00
rhsa-2026:3718 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 2026-03-04T07:52:57+00:00 2026-04-14T09:39:13+00:00
rhsa-2026:3419 Red Hat Security Advisory: OpenShift Container Platform 4.17.50 security and extras update 2026-03-04T07:32:52+00:00 2026-04-10T21:19:37+00:00
rhsa-2026:3713 Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI 2026-03-04T07:18:30+00:00 2026-04-14T09:46:28+00:00
rhsa-2026:3712 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 2026-03-04T07:12:04+00:00 2026-04-14T09:16:55+00:00
rhsa-2026:3710 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3 2026-03-04T06:00:07+00:00 2026-04-14T09:16:54+00:00
rhsa-2026:3699 Red Hat Security Advisory: yggdrasil-worker-package-manager security update 2026-03-04T05:15:19+00:00 2026-04-14T07:58:34+00:00
rhsa-2026:3692 Red Hat Security Advisory: kernel security update 2026-03-04T01:01:24+00:00 2026-04-12T16:51:51+00:00
rhsa-2026:3685 Red Hat Security Advisory: kernel security update 2026-03-03T20:57:40+00:00 2026-04-01T19:24:18+00:00
rhsa-2026:3668 Red Hat Security Advisory: go-rpm-macros security update 2026-03-03T16:17:02+00:00 2026-04-14T07:58:34+00:00
rhsa-2026:3669 Red Hat Security Advisory: go-rpm-macros security update 2026-03-03T15:33:23+00:00 2026-04-14T07:58:34+00:00
ID Description Published Updated
suse-su-2026:20906-1 Security update for postgresql17 2026-03-18T15:32:41Z 2026-03-18T15:32:41Z
suse-su-2026:20905-1 Security update for busybox 2026-03-18T15:27:18Z 2026-03-18T15:27:18Z
suse-su-2026:20738-1 Security update for vim 2026-03-18T13:40:49Z 2026-03-18T13:40:49Z
suse-su-2026:20737-1 Security update for libsoup 2026-03-18T13:39:43Z 2026-03-18T13:39:43Z
suse-su-2026:0928-1 Security update for the Linux Kernel 2026-03-18T13:32:23Z 2026-03-18T13:32:23Z
suse-su-2026:20904-1 Security update for cosign 2026-03-18T11:27:44Z 2026-03-18T11:27:44Z
suse-su-2026:20903-1 Security update for libjxl 2026-03-18T10:12:38Z 2026-03-18T10:12:38Z
suse-su-2026:20902-1 Security update for libsoup 2026-03-18T10:01:36Z 2026-03-18T10:01:36Z
suse-su-2026:20752-1 Security update for libsoup 2026-03-18T10:01:36Z 2026-03-18T10:01:36Z
suse-su-2026:20901-1 Security update for net-snmp 2026-03-18T09:57:15Z 2026-03-18T09:57:15Z
suse-su-2026:20751-1 Security update for net-snmp 2026-03-18T09:57:15Z 2026-03-18T09:57:15Z
suse-su-2026:0923-1 Security update for gvfs 2026-03-18T09:15:47Z 2026-03-18T09:15:47Z
suse-su-2026:0922-1 Security update for tomcat 2026-03-18T09:15:06Z 2026-03-18T09:15:06Z
suse-su-2026:0921-1 Security update for curl 2026-03-18T08:52:04Z 2026-03-18T08:52:04Z
suse-su-2026:20194-1 Security update for postgresql17 and postgresql18 2026-03-18T08:31:44Z 2026-03-18T08:31:44Z
suse-su-2026:0917-1 Security update for kubernetes 2026-03-18T07:47:08Z 2026-03-18T07:47:08Z
suse-su-2026:0916-1 Security update for gvfs 2026-03-18T07:46:59Z 2026-03-18T07:46:59Z
suse-su-2026:0915-1 Security update for 389-ds 2026-03-18T07:46:51Z 2026-03-18T07:46:51Z
suse-su-2026:0914-1 Security update for 389-ds 2026-03-18T07:46:33Z 2026-03-18T07:46:33Z
suse-su-2026:0913-1 Security update for 389-ds 2026-03-18T07:46:25Z 2026-03-18T07:46:25Z
suse-su-2026:0911-1 Security update for curl 2026-03-17T19:56:50Z 2026-03-17T19:56:50Z
suse-su-2026:0909-1 Security update for container-suseconnect 2026-03-17T17:34:33Z 2026-03-17T17:34:33Z
suse-su-2026:0908-1 Security update for xen 2026-03-17T16:32:40Z 2026-03-17T16:32:40Z
suse-su-2026:0907-1 Security update for kea 2026-03-17T16:32:34Z 2026-03-17T16:32:34Z
suse-su-2026:20750-1 Security update for libpng16 2026-03-17T14:49:13Z 2026-03-17T14:49:13Z
suse-su-2026:20748-1 Security update for python-maturin 2026-03-17T12:49:51Z 2026-03-17T12:49:51Z
suse-su-2026:0903-1 Security update for curl 2026-03-17T10:04:47Z 2026-03-17T10:04:47Z
suse-su-2026:0902-1 Security update for freerdp 2026-03-17T09:38:11Z 2026-03-17T09:38:11Z
suse-su-2026:20732-1 Security update for vim 2026-03-17T09:23:26Z 2026-03-17T09:23:26Z
suse-su-2026:20744-1 Security update for rust-keylime 2026-03-16T15:29:27Z 2026-03-16T15:29:27Z
ID Description Published Updated
alsa-2025:16398 Moderate: kernel security update 2025-09-22T00:00:00Z 2025-09-29T08:44:37Z
alsa-2025:16373 Moderate: kernel-rt security update 2025-09-22T00:00:00Z 2025-09-24T11:00:38Z
alsa-2025:16372 Moderate: kernel security update 2025-09-22T00:00:00Z 2025-09-24T11:04:13Z
alsa-2025:16354 Moderate: kernel security update 2025-09-22T00:00:00Z 2025-09-29T09:27:52Z
alsa-2025:16260 Important: firefox security update 2025-09-22T00:00:00Z 2025-09-25T15:01:51Z
alsa-2025:16157 Important: thunderbird security update 2025-09-18T00:00:00Z 2025-09-26T09:47:50Z
alsa-2025:16156 Important: thunderbird security update 2025-09-18T00:00:00Z 2025-09-26T11:14:21Z
alsa-2025:16154 Moderate: grub2 security update 2025-09-18T00:00:00Z 2025-09-25T11:34:59Z
alsa-2025:16116 Moderate: gnutls security, bug fix, and enhancement update 2025-09-17T00:00:00Z 2025-09-29T08:47:08Z
alsa-2025:16115 Moderate: gnutls security, bug fix, and enhancement update 2025-09-17T00:00:00Z 2025-09-18T08:34:55Z
alsa-2025:16109 Important: firefox security update 2025-09-17T00:00:00Z 2025-09-25T15:04:05Z
alsa-2025:16108 Important: firefox security update 2025-09-17T00:00:00Z 2025-09-29T08:52:33Z
alsa-2025:16086 Moderate: mysql security update 2025-09-17T00:00:00Z 2025-09-29T08:50:56Z
alsa-2025:16046 Moderate: mysql:8.4 security update 2025-09-17T00:00:00Z 2025-09-18T08:40:08Z
alsa-2025:15904 Important: container-tools:rhel8 security update 2025-09-16T00:00:00Z 2025-09-17T08:50:36Z
alsa-2025:15901 Important: podman security update 2025-09-16T00:00:00Z 2025-09-16T07:54:29Z
alsa-2025:15900 Important: podman security update 2025-09-16T00:00:00Z 2025-09-29T08:49:02Z
alsa-2025:15887 Moderate: opentelemetry-collector security update 2025-09-16T00:00:00Z 2025-09-18T08:42:35Z
alsa-2025:15874 Moderate: python-cryptography security update 2025-09-16T00:00:00Z 2025-09-18T10:25:39Z
alsa-2025:15786 Important: kernel-rt security update 2025-09-15T00:00:00Z 2025-09-15T15:57:02Z
alsa-2025:15785 Important: kernel security update 2025-09-15T00:00:00Z 2025-09-23T12:06:04Z
alsa-2025:15782 Moderate: kernel security update 2025-09-15T00:00:00Z 2025-09-26T10:01:17Z
alsa-2025:15740 Moderate: kernel security update 2025-09-15T00:00:00Z 2025-09-25T08:48:24Z
alsa-2025:15702 Important: cups security update 2025-09-11T00:00:00Z 2025-09-12T09:35:34Z
alsa-2025:15701 Important: cups security update 2025-09-11T00:00:00Z 2025-09-29T09:01:08Z
alsa-2025:15700 Important: cups security update 2025-09-11T00:00:00Z 2025-09-29T08:59:02Z
alsa-2025:15699 Moderate: mysql-selinux and mysql8.4 security update 2025-09-11T00:00:00Z 2025-09-12T10:30:08Z
alsa-2025:15687 Moderate: php:8.2 security update 2025-09-11T00:00:00Z 2025-09-29T08:55:43Z
alsa-2025:15662 Important: kernel security update 2025-09-11T00:00:00Z 2025-09-17T11:09:33Z
alsa-2025:15661 Important: kernel security update 2025-09-11T00:00:00Z 2025-09-16T09:35:20Z
ID Description Published Updated
osv-2023-1320 Heap-use-after-free in memory_bstat 2023-12-17T00:12:41.223755Z 2023-12-17T00:12:41.224161Z
osv-2023-1315 Heap-use-after-free in htmlParseDocument 2023-12-17T00:02:06.164794Z 2023-12-17T00:02:06.165194Z
osv-2023-1313 Heap-buffer-overflow in isvcd_start_of_pic 2023-12-16T00:12:09.531964Z 2024-04-29T11:16:18.966356Z
osv-2023-1312 Heap-buffer-overflow in ih264d_format_convert 2023-12-16T00:11:20.970046Z 2024-04-29T11:16:08.727836Z
osv-2023-1311 Heap-buffer-overflow in ih264d_format_convert 2023-12-16T00:05:49.838718Z 2024-04-29T11:26:02.378788Z
osv-2023-1307 UNKNOWN READ in init_struct_ops_maps 2023-12-15T00:12:51.528155Z 2026-03-17T14:24:53.158428Z
osv-2023-1306 Heap-use-after-free in pcpp::TLVRecordReader<pcpp::DhcpOption>::getTLVRecord 2023-12-15T00:10:21.932370Z 2025-12-22T14:15:50.738544Z
osv-2023-1305 Check failed in CheckUnwind 2023-12-15T00:01:07.183702Z 2024-04-29T11:25:59.083407Z
osv-2023-1303 Heap-use-after-free in htmlCurrentChar 2023-12-15T00:00:06.313566Z 2023-12-15T00:00:06.314002Z
osv-2023-1302 Global-buffer-overflow in pcre_get_compiled_regex_cache_ex 2023-12-14T00:13:52.791976Z 2023-12-14T00:13:52.792479Z
osv-2023-1301 Global-buffer-overflow in xmlDictLookupInternal 2023-12-14T00:13:26.532719Z 2023-12-14T00:13:26.533280Z
osv-2023-1300 Security exception in com.fasterxml.jackson.core.JsonParser.currentName 2023-12-14T00:13:10.208981Z 2023-12-14T00:13:10.209415Z
osv-2023-1299 Global-buffer-overflow in pcre_get_compiled_regex_cache_ex 2023-12-14T00:12:13.097305Z 2023-12-14T00:12:13.097842Z
osv-2023-1298 Heap-buffer-overflow in loongarch_split_args_by_comma 2023-12-14T00:10:40.133892Z 2023-12-14T00:10:40.134313Z
osv-2023-1295 Global-buffer-overflow in libraw_tagtype_dataunit_bytes 2023-12-14T00:03:32.723059Z 2023-12-14T00:03:32.723513Z
osv-2023-1294 Heap-buffer-overflow in ih264d_compute_bs_non_mbaff 2023-12-14T00:00:54.614578Z 2024-04-29T11:26:00.379744Z
osv-2023-1291 Security exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock 2023-12-13T00:03:48.820074Z 2023-12-13T00:03:48.820457Z
osv-2023-1276 Heap-use-after-free in authentic_emu_update_tokeninfo 2023-12-10T00:04:07.333337Z 2023-12-10T00:04:07.333792Z
osv-2023-1272 Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_ 2023-12-09T00:05:42.581782Z 2023-12-09T00:05:42.582124Z
osv-2023-1271 Heap-buffer-overflow in is_decl_requires_met 2023-12-09T00:03:11.119664Z 2023-12-09T00:03:11.120297Z
osv-2023-1268 Stack-buffer-overflow in decNaNs 2023-12-08T00:11:32.086790Z 2023-12-08T00:11:32.087163Z
osv-2023-1267 Heap-buffer-overflow in dwg_free_object 2023-12-08T00:11:02.971903Z 2026-03-16T14:18:18.473266Z
osv-2023-1266 Security exception in java.base/javax.crypto.spec.SecretKeySpec.<init> 2023-12-08T00:10:39.042967Z 2023-12-08T00:10:39.043541Z
osv-2023-1265 Security exception in org.apache.poi.hdgf.streams.ChunkStream.findChunks 2023-12-08T00:02:47.592445Z 2023-12-08T00:02:47.593139Z
osv-2023-1263 Heap-buffer-overflow in js_is_live_code 2023-12-07T00:05:27.754264Z 2023-12-07T00:05:27.754792Z
osv-2023-1259 Use-of-uninitialized-value in std::__1::__stdoutbuf<char>::xsputn 2023-12-06T04:45:58.561174Z 2025-05-14T14:15:48.653022Z
osv-2023-1256 Heap-buffer-overflow in H5T__bit_copy 2023-12-03T13:02:43.376076Z 2026-01-13T04:40:40.198673Z
osv-2023-1247 Heap-buffer-overflow in r_bin_coff_new_buf 2023-12-02T13:00:46.246790Z 2023-12-02T13:00:46.247042Z
osv-2023-1244 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal 2023-12-02T13:00:17.170709Z 2023-12-09T14:11:35.526034Z
osv-2023-1243 Heap-use-after-free in zend_reference_destroy 2023-12-01T13:02:45.270293Z 2023-12-01T13:02:45.270620Z
ID Description Published Updated
rustsec-2021-0145 Potential unaligned read 2021-07-04T12:00:00Z 2023-07-08T12:30:19Z
rustsec-2021-0081 Potential request smuggling capabilities due to lack of input validation 2021-06-16T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0071 `grep-cli` may run arbitrary executables on Windows 2021-06-12T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0070 VecStorage Deserialize Allows Violation of Length Invariant 2021-06-06T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0095 `mopa` is technically unsound 2021-06-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0104 File exposure in pleaser 2021-05-27T12:00:00Z 2021-09-10T16:01:55Z
rustsec-2021-0102 Permissions bypass in pleaser 2021-05-27T12:00:00Z 2021-09-10T15:58:05Z
rustsec-2021-0101 Permissions bypass in pleaser 2021-05-27T12:00:00Z 2021-09-10T15:58:27Z
rustsec-2021-0069 SMTP command injection in body 2021-05-22T12:00:00Z 2021-10-19T19:56:47Z
rustsec-2021-0067 Memory access due to code generation flaw in Cranelift module 2021-05-21T12:00:00Z 2021-10-19T22:14:35Z
rustsec-2021-0146 Crate `twoway` deprecated by the author 2021-05-20T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2021-0068 Soundness issue in `iced-x86` versions <= 1.10.3 2021-05-19T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0066 Denial of service on EVM execution due to memory over-allocation 2021-05-11T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0065 anymap is unmaintained. 2021-05-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0064 `cpuid-bool` has been renamed to `cpufeatures` 2021-05-06T12:00:00Z 2021-05-06T23:45:32Z
rustsec-2021-0063 XSS in `comrak` 2021-05-04T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0058 Null pointer deref in `X509_issuer_and_serial_hash()` 2021-05-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0057 Integer overflow in CipherUpdate 2021-05-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0056 CA certificate check bypass with X509_V_FLAG_X509_STRICT 2021-05-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0055 NULL pointer deref in signature_algorithms processing 2021-05-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0061 `aes-ctr` has been merged into the `aes` crate 2021-04-29T12:00:00Z 2021-05-04T01:28:43Z
rustsec-2021-0060 `aes-soft` has been merged into the `aes` crate 2021-04-29T12:00:00Z 2021-05-04T01:28:43Z
rustsec-2021-0059 `aesni` has been merged into the `aes` crate 2021-04-29T12:00:00Z 2021-05-04T01:28:43Z
rustsec-2021-0054 Archives may contain uninitialized memory 2021-04-28T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0136 `sass-rs` has been deprecated 2021-04-07T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2021-0113 AtomicBucket<T> unconditionally implements Send/Sync 2021-04-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0140 rusttype is Unmaintained 2021-04-01T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2021-0041 Denial of service through parsing payloads with too big exponent 2021-03-18T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0053 'merge_sort::merge()' crashes with double-free for `T: Drop` 2021-03-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2021-0038 Multiple memory safety issues 2021-03-06T12:00:00Z 2023-06-13T13:10:24Z
ID Description Published Updated
bit-parse-2025-68150 Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter 2025-12-18T11:46:18.950Z 2026-01-08T18:07:34.629Z
bit-parse-2025-68115 Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables 2025-12-18T11:46:17.211Z 2026-01-08T18:07:34.629Z
bit-parse-2025-67727 Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management 2025-12-18T11:46:15.637Z 2026-01-08T18:07:34.629Z
bit-kibana-2025-37732 Kibana Cross-site Scripting via the Integration Package Upload Functionality 2025-12-18T11:40:39.003Z 2025-12-18T12:08:20.703Z
bit-elk-2025-37732 Kibana Cross-site Scripting via the Integration Package Upload Functionality 2025-12-18T11:37:43.350Z 2025-12-18T12:08:20.703Z
bit-elasticsearch-2025-37731 Elasticsearch Improper Authentication 2025-12-18T11:37:43.121Z 2025-12-19T12:06:33.755Z
bit-airflow-2025-66388 Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI 2025-12-16T14:37:51.384Z 2025-12-16T15:14:22.118Z
bit-mongodb-2025-12657 Malformed KMIP response may result in access violation 2025-12-13T11:42:23.275Z 2025-12-13T12:05:53.698Z
bit-django-2025-13372 Potential SQL injection in FilteredRelation column aliases on PostgreSQL 2025-12-13T11:36:31.883Z 2025-12-13T12:05:53.698Z
bit-mongodb-2025-14345 Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server 2025-12-12T17:42:48.437Z 2025-12-12T18:06:16.411Z
bit-jenkins-2025-67639 2025-12-12T11:23:52.749Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67638 2025-12-12T11:23:47.516Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67637 2025-12-12T11:23:42.761Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67636 2025-12-12T11:23:36.617Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67635 2025-12-12T11:23:31.286Z 2025-12-12T11:51:34.315Z
bit-mongodb-2025-13644 MongoDB may be susceptible to Invariant Failure due to batched delete 2025-12-12T11:19:13.963Z 2026-01-08T18:07:34.629Z
bit-mongodb-2025-13643 MongoDB Server may allow queries to be terminated by unauthorized users 2025-12-12T11:19:08.903Z 2026-01-08T18:07:34.629Z
bit-mastodon-2025-67500 Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration 2025-12-11T11:41:16.693Z 2026-03-20T09:47:33.381Z
bit-django-2025-64460 Potential denial-of-service vulnerability in XML serializer text extraction 2025-12-11T11:37:12.400Z 2025-12-11T12:06:55.559Z
bit-python-2025-12084 Quadratic complexity in node ID cache clearing 2025-12-10T17:49:06.243Z 2026-01-27T09:14:53.416Z
bit-libpython-2025-12084 Quadratic complexity in node ID cache clearing 2025-12-10T17:41:46.450Z 2026-01-27T09:14:53.416Z
bit-gitlab-2024-9183 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab 2025-12-09T12:02:49.276Z 2025-12-11T12:06:55.559Z
bit-apache-2025-66200 Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo 2025-12-09T11:38:20.150Z 2025-12-09T12:08:00.393Z
bit-apache-2025-65082 Apache HTTP Server: CGI environment variable override 2025-12-09T11:38:18.501Z 2025-12-09T12:08:00.393Z
bit-apache-2025-59775 Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF 2025-12-09T11:38:16.754Z 2025-12-09T12:08:00.393Z
bit-apache-2025-58098 Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... 2025-12-09T11:38:15.033Z 2025-12-09T12:08:00.393Z
bit-apache-2025-55753 Apache HTTP Server: mod_md (ACME), unintended retry intervals 2025-12-09T11:38:13.178Z 2025-12-09T12:08:00.393Z
bit-pgbouncer-2025-12819 Untrusted search path in auth_query connection in PgBouncer 2025-12-06T11:44:20.875Z 2025-12-28T12:07:40.562Z
bit-mongodb-2025-13507 Time-series operations may cause internal BSON size limit to be exceed 2025-12-06T11:42:49.537Z 2025-12-06T12:06:23.267Z
bit-mongodb-2025-12893 Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server 2025-12-06T11:42:47.994Z 2025-12-06T12:06:23.267Z
ID Description Published Updated
cleanstart-2026-aj76138 tar 2026-01-30T14:58:52.957172Z 2026-01-29T18:58:54Z
cleanstart-2026-vf66781 Within HostnameError 2026-01-30T14:57:22.763452Z 2026-01-29T18:58:54Z
cleanstart-2026-kv78041 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input 2026-01-30T14:56:23.125184Z 2026-01-29T18:58:54Z
cleanstart-2026-ez55127 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:54:23.021613Z 2026-01-29T18:58:54Z
cleanstart-2026-ew68942 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:53:53.713652Z 2026-01-29T18:58:54Z
cleanstart-2026-kf66928 Within HostnameError 2026-01-30T14:53:23.030035Z 2026-01-29T18:58:54Z
cleanstart-2026-dd39330 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:53:22.793144Z 2026-01-29T18:58:54Z
cleanstart-2026-ld23143 Cancelling a query (e 2026-01-30T14:52:52.766441Z 2026-01-29T18:58:54Z
cleanstart-2026-fr57243 Cancelling a query (e 2026-01-30T14:52:52.746706Z 2026-01-29T18:58:54Z
cleanstart-2026-nz19387 Within HostnameError 2026-01-30T14:52:23.218213Z 2026-01-29T18:58:54Z
cleanstart-2026-ol60454 Within HostnameError 2026-01-30T14:52:23.086717Z 2026-01-29T18:58:54Z
cleanstart-2026-il55587 Cancelling a query (e 2026-01-30T14:51:52.694658Z 2026-01-29T18:58:54Z
cleanstart-2026-cb20757 Cancelling a query (e 2026-01-30T14:51:22.636956Z 2026-01-29T18:58:54Z
cleanstart-2026-ia26094 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:51:22.634752Z 2026-01-29T18:58:54Z
cleanstart-2026-do68350 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:50:22.886394Z 2026-01-29T18:58:54Z
cleanstart-2026-ph90623 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:49:52.682724Z 2026-01-29T18:58:54Z
cleanstart-2026-xo66167 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:49:52.662006Z 2026-01-29T18:58:54Z
cleanstart-2026-mi26039 Within HostnameError 2026-01-30T14:49:22.768843Z 2026-01-29T18:58:54Z
cleanstart-2026-gn47077 Within HostnameError 2026-01-30T14:48:53.159123Z 2026-01-29T18:58:54Z
cleanstart-2026-uu20906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:48:52.774829Z 2026-01-29T18:58:54Z
cleanstart-2026-kc01126 tar 2026-01-30T14:48:22.721160Z 2026-01-29T18:58:54Z
cleanstart-2026-oo14630 tar 2026-01-30T14:47:23.043882Z 2026-01-29T18:58:54Z
cleanstart-2026-hy43775 Within HostnameError 2026-01-30T14:46:52.607713Z 2026-01-29T18:58:54Z
cleanstart-2026-uy85485 Within HostnameError 2026-01-30T14:45:52.628542Z 2026-01-29T18:58:54Z
cleanstart-2026-ol25917 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:44:22.881508Z 2026-01-29T18:58:54Z
cleanstart-2026-rb28539 Within HostnameError 2026-01-30T14:43:52.571458Z 2026-01-29T18:58:54Z
cleanstart-2026-bx37171 Redis is an open source, in-memory database that persists on disk 2026-01-30T14:43:22.549529Z 2026-01-29T18:58:54Z
cleanstart-2026-gv62494 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:41:53.003431Z 2026-01-29T18:58:54Z
cleanstart-2026-di05920 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:41:22.824254Z 2026-01-29T18:58:54Z
cleanstart-2026-kz63902 tar 2026-01-30T14:41:22.559595Z 2026-01-29T18:58:54Z
ID Description Updated
ID Description Published Updated
certfr-2025-avi-0932 Multiples vulnérabilités dans Liferay 2025-10-28T00:00:00.000000 2025-10-28T00:00:00.000000
certfr-2025-avi-0931 Vulnérabilité dans StrongSwan 2025-10-28T00:00:00.000000 2025-10-28T00:00:00.000000
certfr-2025-avi-0930 Vulnérabilité dans Microsoft Windows Server Update Service 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0929 Vulnérabilité dans le client VPN de TheGreenBow 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0928 Vulnérabilité dans Microsoft Configuration Manager 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0927 Vulnérabilité dans Xen 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0926 Vulnérabilité dans le pilote ODBC de MongoDB 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0925 Vulnérabilité dans les produits Belden 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0924 Multiples vulnérabilités dans les produits IBM 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0923 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0922 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0921 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0920 Multiples vulnérabilités dans les produits Microsoft 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0919 Multiples vulnérabilités dans Microsoft Azure 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0918 Multiples vulnérabilités dans Liferay 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0917 Multiples vulnérabilités dans les produits Moxa 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0916 Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0915 Multiples vulnérabilités dans les produits Microsoft 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
certfr-2025-avi-0914 Multiples vulnérabilités dans les produits Centreon 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
certfr-2025-avi-0913 Multiples vulnérabilités dans ISC BIND 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
certfr-2025-avi-0912 Vulnérabilité dans SolarWinds Observability 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0911 Multiples vulnérabilités dans Oracle Weblogic 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0910 Multiples vulnérabilités dans Oracle Virtualization 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0909 Multiples vulnérabilités dans Oracle Systems 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0908 Multiples vulnérabilités dans Oracle PeopleSoft 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0907 Multiples vulnérabilités dans Oracle MySQL 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0906 Multiples vulnérabilités dans Oracle Java SE 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0905 Multiples vulnérabilités dans Oracle Database Server 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0904 Multiples vulnérabilités dans GitLab 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0903 Multiples vulnérabilités dans les produits Atlassian 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
ID Description Published Updated
jvndb-2023-000004 pgAdmin 4 vulnerable to open redirect 2023-01-11T14:23+09:00 2023-01-11T14:23+09:00
jvndb-2023-000002 Digital Arts m-FILTER vulnerable to improper authentication 2023-01-06T14:57+09:00 2023-01-06T14:57+09:00
jvndb-2023-000001 Multiple code injection vulnerabilities in ruby-git 2023-01-05T15:51+09:00 2023-01-05T15:51+09:00
jvndb-2022-002838 Multiple vulnerabilities in Fuji Electric V-Server 2023-01-04T14:21+09:00 2023-01-04T14:21+09:00
jvndb-2022-002837 Multiple vulnerabilities in Fuji Electric V-SFT and TELLUS 2023-01-04T14:16+09:00 2023-01-04T14:16+09:00
jvndb-2022-002836 Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service 2022-12-26T16:21+09:00 2024-05-30T17:47+09:00
jvndb-2022-000102 Installers generated by Squirrel.Windows may insecurely load Dynamic Link Libraries 2022-12-21T14:23+09:00 2022-12-21T14:23+09:00
jvndb-2022-000101 +Message App improper handling of Unicode control characters 2022-12-21T14:13+09:00 2022-12-21T14:13+09:00
jvndb-2022-002783 Use-after-free vulnerability in Omron CX-Drive 2022-12-20T15:32+09:00 2022-12-20T15:32+09:00
jvndb-2022-002780 Command injection vulnerability in SHARP Multifunctional Products (MFP) 2022-12-20T12:12+09:00 2022-12-20T12:12+09:00
jvndb-2022-000099 Corel Roxio Creator LJB starts a program with an unquoted file path 2022-12-19T13:47+09:00 2022-12-19T13:47+09:00
jvndb-2022-000098 Zenphoto vulnerable to cross-site scripting 2022-12-19T13:39+09:00 2022-12-19T13:39+09:00
jvndb-2022-002779 Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) 2022-12-16T13:29+09:00 2023-01-11T16:55+09:00
jvndb-2022-000097 Multiple vulnerabilities in DENSHI NYUSATSU CORE SYSTEM 2022-12-15T15:18+09:00 2024-05-29T17:40+09:00
jvndb-2022-000096 Redmine vulnerable to cross-site scripting 2022-12-13T14:05+09:00 2024-06-03T16:47+09:00
jvndb-2022-002775 Multiple vulnerabilities in Buffalo network devices 2022-12-12T15:28+09:00 2024-02-14T15:45+09:00
jvndb-2022-002771 Information Exposure Vulnerability in JP1/Automatic Operation 2022-12-07T17:30+09:00 2022-12-07T17:30+09:00
jvndb-2022-002770 Contec SolarView Compact vulnerable to cross-site scripting 2022-12-06T15:08+09:00 2024-06-04T17:13+09:00
jvndb-2022-002768 Multiple vulnerabilities in UNIMO Technology digital video recorders 2022-12-02T14:57+09:00 2024-06-03T16:55+09:00
jvndb-2022-002765 Multiple vulnerabilities in OMRON CX-Programmer 2022-11-28T15:40+09:00 2024-04-05T18:15+09:00
jvndb-2022-000095 Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption 2022-11-25T14:15+09:00 2024-06-03T16:08+09:00
jvndb-2022-000094 Multiple cross-site scripting vulnerabilities in baserCMS 2022-11-25T13:42+09:00 2024-05-31T18:17+09:00
jvndb-2022-000093 TP-Link RE300 V1 tdpServer vulnerable to improper processing of its input 2022-11-24T14:46+09:00 2024-06-03T16:41+09:00
jvndb-2022-002761 Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service 2022-11-21T18:25+09:00 2024-05-31T17:43+09:00
jvndb-2022-000092 Typora fails to properly neutralize JavaScript code. 2022-11-21T15:31+09:00 2024-06-03T15:13+09:00
jvndb-2022-000091 WordPress Plugin "WordPress Popular Posts" accepts untrusted external inputs to update certain internal variables 2022-11-18T15:14+09:00 2022-11-18T15:14+09:00
jvndb-2022-000089 RICOH Aficio SP 4210N vulnerable to cross-site scripting 2022-11-17T11:15+09:00 2022-11-17T11:15+09:00
jvndb-2022-000090 Multiple vulnerabilities in Movable Type 2022-11-16T17:07+09:00 2024-06-03T15:31+09:00
jvndb-2022-000088 TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) vulnerable to ClassLoader manipulation 2022-11-14T16:45+09:00 2024-06-06T16:11+09:00
jvndb-2022-000086 Aiphone Video Multi-Tenant System Entrance Stations vulnerable to information disclosure 2022-11-10T13:40+09:00 2024-06-06T17:37+09:00
ID Description Published Updated
cnvd-2026-12700 Adobe ‌Substance 3D Stager‌存在越界读取漏洞 2026-03-02 2026-03-04
cnvd-2026-12699 Adobe ‌Substance 3D Stager‌存在越界读取漏洞(CNVD-2026-12699) 2026-03-02 2026-03-04
cnvd-2026-12698 Adobe Substance 3D Stager‌存在越界写入漏洞 2026-03-02 2026-03-04
cnvd-2026-12697 Adobe Substance 3D Stager‌存在越界写入漏洞(CNVD-2026-12697) 2026-03-02 2026-03-05
cnvd-2026-12696 Adobe InDesign Desktop存在越界读取漏洞 2026-03-02 2026-03-04
cnvd-2026-12694 Adobe After Effects 25.6及之前版本存在内存释放后使用漏洞 2026-03-02 2026-03-04
cnvd-2026-12693 Adobe After Effects存在越界写入漏洞 2026-03-02 2026-03-04
cnvd-2026-12691 Adobe After Effects存在越界写入漏洞(CNVD-2026-12691) 2026-03-02 2026-03-04
cnvd-2026-12690 Adobe After Effects存在越界读取漏洞 2026-03-02 2026-03-04
cnvd-2026-12689 Adobe After Effects存在越界读取漏洞(CNVD-2026-12689) 2026-03-02 2026-03-04
cnvd-2026-12688 Adobe After Effects存在越界读取漏洞(CNVD-2026-12688) 2026-03-02 2026-03-04
cnvd-2026-12668 IBM webMethods Integration Server存在HTML注入漏洞 2026-03-02 2026-03-05
cnvd-2026-12667 IBM Sterling B2B Integrator和IBM Sterling File Gateway存在信息泄露漏洞 2026-03-02 2026-03-05
cnvd-2026-12666 IBM MQ Operator和IBM‑supplied MQ Advanced container images存在日志注入漏洞 2026-03-02 2026-03-05
cnvd-2026-12665 IBM Db2存在拒绝服务漏洞 2026-03-02 2026-03-05
cnvd-2026-12664 IBM Db2存在XML外部实体注入漏洞 2026-03-02 2026-03-05
cnvd-2026-12663 IBM Concert存在弱密码算法漏洞 2026-03-02 2026-03-05
cnvd-2026-12560 Microsoft Windows资源管理错误漏洞(CNVD-2026-12560) 2026-03-02 2026-03-04
cnvd-2026-12559 Microsoft Windows Notepad命令注入漏洞 2026-03-02 2026-03-04
cnvd-2026-12558 Microsoft Windows Kernel竞争条件漏洞 2026-03-02 2026-03-04
cnvd-2026-12557 Microsoft Outlook信息泄露漏洞(CNVD-2026-12557) 2026-03-02 2026-03-04
cnvd-2026-12556 Microsoft Hyper-V缓冲区溢出漏洞 2026-03-02 2026-03-04
cnvd-2026-12555 Microsoft Hyper-V访问控制错误漏洞 2026-03-02 2026-03-04
cnvd-2026-12554 Microsoft GitHub Copilot for JetBrains命令注入漏洞 2026-03-02 2026-03-04
cnvd-2026-12553 Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12553) 2026-03-02 2026-03-04
cnvd-2026-12552 Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12552) 2026-03-02 2026-03-04
cnvd-2026-13786 IBM Concert信息泄露漏洞(CNVD-2026-13786) 2026-02-28 2026-03-16
cnvd-2026-13785 IBM Concert跨站脚本漏洞(CNVD-2026-13785) 2026-02-28 2026-03-16
cnvd-2026-12893 Apache Superset输入验证漏洞 2026-02-27 2026-03-04
cnvd-2026-15863 Advantech WISE-6610操作系统命令注入漏洞 2026-02-25 2026-04-02
ID Description Published Updated
bdu:2026-00976 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab CE/EE… 30.01.2026 30.01.2026
bdu:2026-00975 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab CE/EE… 30.01.2026 30.01.2026
bdu:2026-00974 Уязвимость функции readGGUFV1String() системы запуска и управления большими языковыми мод… 30.01.2026 30.01.2026
bdu:2026-00973 Уязвимость файла templates/logging_macros.vm платформы создания совместных веб-приложений… 30.01.2026 30.01.2026
bdu:2026-00972 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… 30.01.2026 30.01.2026
bdu:2026-00971 Уязвимость механизма резервирования конфигурационных данных платформы виртуализации zVirt… 30.01.2026 30.01.2026
bdu:2026-00970 Уязвимость компонента Layout: Scrolling and Overflow браузера Mozilla Firefox, позволяюща… 30.01.2026 30.01.2026
bdu:2026-00969 Уязвимость компонента Privacy: Anti-Tracking браузера Mozilla Firefox, позволяющая наруши… 30.01.2026 30.01.2026
bdu:2026-00968 Уязвимость системы аутентификации платформы виртуализации zVirt, позволяющая нарушителю п… 30.01.2026 30.01.2026
bdu:2026-00967 Уязвимость платформы виртуализации zVirt, связанная с непринятием мер по защите структуры… 30.01.2026 30.01.2026
bdu:2026-00966 Уязвимость прикладного программного интерфейса платформы виртуализации zVirt, позволяющая… 30.01.2026 30.01.2026
bdu:2026-00965 Уязвимость прикладного программного интерфейса платформы виртуализации zVirt, позволяющая… 30.01.2026 30.01.2026
bdu:2026-00964 Уязвимость программного интерфейса Background Fetch API браузера Google Chrome, позволяющ… 30.01.2026 30.01.2026
bdu:2026-00963 Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с чрезмерно… 30.01.2026 30.01.2026
bdu:2026-00962 Уязвимость сервера XRDP, связанная с выходом операции за границы буфера в памяти, позволя… 30.01.2026 30.01.2026
bdu:2026-00961 Уязвимость механизма Policy Wizard (/wiz_policy_3_machine.php) веб-интерфейса управления … 30.01.2026 30.01.2026
bdu:2026-00960 Уязвимость библиотеки jabsorb сервлета AjaxProxy программного обеспечения управления ИТ-и… 30.01.2026 04.02.2026
bdu:2026-00959 Уязвимость механизма вычисления выражений платформы для автоматизации рабочих процессов n… 30.01.2026 30.01.2026
bdu:2026-00958 Уязвимость менеджера пакетов pnpm, связанная с неверным ограничением имени пути к каталог… 30.01.2026 30.01.2026
bdu:2026-00957 Уязвимость сценариев fetching/binary-fetcher/src/index.ts и resolving/resolver-base/src/i… 30.01.2026 30.01.2026
bdu:2026-00956 Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с переполне… 29.01.2026 29.01.2026
bdu:2026-00955 Уязвимость реализации протокола DCERPC системы обнаружения и предотвращения вторжений Sur… 29.01.2026 29.01.2026
bdu:2026-00954 Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с чрезмерно… 29.01.2026 29.01.2026
bdu:2026-00953 Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с неогранич… 29.01.2026 29.01.2026
bdu:2026-00952 Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с неконтрол… 29.01.2026 29.01.2026
bdu:2026-00951 Уязвимость функции CloudACMunualUpdateUserdata() сценария /cgi-bin/cstecgi.cgi микропрогр… 29.01.2026 29.01.2026
bdu:2026-00950 Уязвимость функции formSetMacFilterCfg() микропрограммного обеспечения маршрутизаторов Te… 29.01.2026 29.01.2026
bdu:2026-00949 Уязвимость функции sub_72290() микропрограммного обеспечения маршрутизаторов Tenda AX-180… 29.01.2026 29.01.2026
bdu:2026-00948 Уязвимость функции formSetWifiMacFilterCfg() микропрограммного обеспечения маршрутизаторо… 29.01.2026 29.01.2026
bdu:2026-00947 Уязвимость функции form_fast_setting_wifi_set() микропрограммного обеспечения маршрутизат… 29.01.2026 29.01.2026
ID Description Updated
var-202602-3961 A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated,… 2026-03-09T23:40:28.074000Z
var-201908-0863 Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE… 2026-03-09T23:39:31.301000Z
var-202603-0585 Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the… 2026-03-09T23:39:15.050000Z
var-202603-0426 A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC1… 2026-03-09T23:37:26.870000Z
var-202603-0927 This vulnerability allows network-adjacent attackers to bypass authentication on affected… 2026-03-09T23:33:24.163000Z
var-202001-0784 Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network … 2026-03-09T23:28:03.805000Z
var-202503-4044 Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission… 2026-03-09T23:26:01.522000Z
var-201712-0268 An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari be… 2026-03-09T23:25:59.925000Z
var-202204-0596 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle … 2026-03-09T23:25:59.837000Z
var-201211-0366 Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … 2026-03-09T23:25:56.389000Z
var-201503-0055 The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 befor… 2026-03-09T23:25:56.069000Z
var-201108-0183 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … 2026-03-09T23:25:55.642000Z
var-202102-1093 An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The functio… 2026-03-09T23:25:51.226000Z
var-201904-1475 A memory consumption issue was addressed with improved memory handling. This issue affect… 2026-03-09T23:25:50.979000Z
var-201310-0613 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… 2026-03-09T23:25:50.822000Z
var-201809-1153 The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rat… 2026-03-09T23:25:48.354000Z
var-202005-0397 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file… 2026-03-09T23:25:40.415000Z
var-201302-0239 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T23:25:35.925000Z
var-201904-1406 A use after free issue was addressed with improved memory management. This issue affected… 2026-03-09T23:25:32.826000Z
var-200708-0612 The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when us… 2026-03-09T23:25:31.724000Z
var-201904-0347 In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize… 2026-03-09T23:24:28.015000Z
var-200611-0471 Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a … 2026-03-09T23:22:16.486000Z
var-200909-0399 The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass inte… 2026-03-09T23:22:15.623000Z
var-200110-0176 Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox … 2026-03-09T23:21:33.133000Z
var-201904-1362 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2026-03-09T23:21:26.686000Z
var-200704-0229 Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allo… 2026-03-09T23:21:24.658000Z
var-200505-0311 Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows lo… 2026-03-09T23:21:22.603000Z
var-201008-0170 Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before… 2026-03-09T23:21:22.528000Z
var-202205-1314 A memory corruption issue was addressed with improved state management. This issue is fix… 2026-03-09T23:21:21.713000Z
var-201302-0332 The TLS implementation in Mozilla Network Security Services (NSS) does not properly consi… 2026-03-09T23:21:19.394000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated