Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-41297 |
4.8 (4.0)
7.6 (3.1)
|
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:10.955Z | 2026-04-21T13:41:34.057Z |
| CVE-2026-41296 |
8.8 (4.0)
8.2 (3.1)
|
OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race … |
OpenClaw |
OpenClaw |
2026-04-20T23:08:10.194Z | 2026-04-21T19:49:41.570Z |
| CVE-2026-41295 |
8.5 (4.0)
7.8 (3.1)
|
OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shad… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:09.503Z | 2026-04-21T13:35:47.883Z |
| CVE-2026-41294 |
8.5 (4.0)
8.6 (3.1)
|
OpenClaw < 2026.3.28 - Environment Variable Injection … |
OpenClaw |
OpenClaw |
2026-04-20T23:08:08.795Z | 2026-04-21T13:04:36.188Z |
| CVE-2026-40045 |
5.9 (4.0)
5.7 (3.1)
|
OpenClaw < 2026.4.2 - Cleartext Credential Transmissio… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:07.952Z | 2026-04-21T13:37:43.951Z |
| CVE-2026-34082 |
5.3 (4.0)
|
Dify has IDOR in deleting someone else's chat conversation |
langgenius |
dify |
2026-04-20T23:03:18.158Z | 2026-04-21T13:36:45.614Z |
| CVE-2026-5721 |
4.7 (3.1)
|
wpDataTables – WordPress Data Table, Dynamic Tables & … |
wpdatatables |
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin |
2026-04-20T22:25:26.695Z | 2026-04-21T19:49:47.411Z |
| CVE-2026-6729 |
5.3 (4.0)
6.3 (3.1)
|
HKUDS OpenHarness Session Key Collision Privilege Escalation |
HKUDS |
OpenHarness |
2026-04-20T22:01:38.766Z | 2026-04-21T17:39:32.967Z |
| CVE-2026-0930 |
2.3 (4.0)
|
Potential wolfSSHd Buffer out-of-bounds Read on Window… |
wolfSSL |
wolfSSH |
2026-04-20T21:28:33.227Z | 2026-04-21T13:37:15.647Z |
| CVE-2026-22051 |
2.3 (4.0)
|
StorageGRID (formerly StorageGRID Webscale) versi… |
NETAPP |
StorageGRID (formerly StorageGRID Webscale) |
2026-04-20T21:27:36.822Z | 2026-04-21T13:40:46.948Z |
| CVE-2026-5450 |
9.8 (3.1)
|
scanf %mc off-by-one heap buffer overflow |
The GNU C Library |
glibc |
2026-04-20T20:55:41.170Z | 2026-04-21T19:49:53.221Z |
| CVE-2026-5928 |
7.5 (3.1)
|
Static buffer overflow in deprecated nis_local_principal |
The GNU C Library |
glibc |
2026-04-20T20:37:31.743Z | 2026-04-21T19:49:59.071Z |
| CVE-2026-5358 |
N/A
|
REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API can only be called with a trusted server from the pre-populated cache. The use of a trusted server means no trust boundary is crossed and this is therefore considered a normal bug. | N/A | N/A | 2026-04-20T20:37:23.178Z | 2026-04-22T13:04:20.656Z |
| CVE-2026-33626 |
7.5 (3.1)
|
LMDeploy Vulnerable to Server-Side Request Forgery (SS… |
InternLM |
lmdeploy |
2026-04-20T20:29:19.558Z | 2026-04-21T19:50:13.326Z |
| CVE-2026-4852 |
6.4 (3.1)
|
Image Source Control Lite – Show Image Credits and Cap… |
webzunft |
Image Source Control Lite – Show Image Credits and Captions |
2026-04-20T20:26:53.256Z | 2026-04-21T13:53:14.507Z |
| CVE-2026-33432 |
7.7 (4.0)
|
Roxy-WI has Pre-Authentication LDAP Injection that Lea… |
roxy-wi |
roxy-wi |
2026-04-20T20:26:52.217Z | 2026-04-21T17:38:09.523Z |
| CVE-2026-33431 |
5.7 (4.0)
|
Roxy-WI Vulnerable to Authenticated Arbitrary File Rea… |
roxy-wi |
roxy-wi |
2026-04-20T20:24:15.319Z | 2026-04-21T13:42:19.802Z |
| CVE-2026-34403 |
5.5 (4.0)
|
Nginx-UI vulnerable to Cross-Site WebSocket Hijacking … |
0xJacky |
nginx-ui |
2026-04-20T20:16:47.597Z | 2026-04-21T13:36:46.510Z |
| CVE-2026-33031 |
8.6 (4.0)
|
Nginx-UI: Disabled users retain full API access throug… |
0xJacky |
nginx-ui |
2026-04-20T20:12:07.905Z | 2026-04-21T13:35:20.144Z |
| CVE-2026-32613 |
10 (3.1)
|
Spinnaker vulnerable to RCE via expression parsing due… |
spinnaker |
spinnaker |
2026-04-20T20:07:24.697Z | 2026-04-22T03:56:18.686Z |
| CVE-2026-32604 |
10 (3.1)
|
Spinnaker vulnerable to RCE when using gitrepo artifac… |
spinnaker |
spinnaker |
2026-04-20T20:00:57.517Z | 2026-04-22T03:56:17.486Z |
| CVE-2026-6249 |
8.7 (4.0)
8.8 (3.1)
|
Vvveb CMS 1.0.8 Remote Code Execution via Media Upload |
Vvveb |
Vvveb CMS |
2026-04-20T19:57:37.655Z | 2026-04-21T13:43:17.635Z |
| CVE-2026-32311 |
9.3 (4.0)
|
Command Injection and Docker container escape allows r… |
reconurge |
flowsint |
2026-04-20T19:56:32.521Z | 2026-04-21T13:44:08.776Z |
| CVE-2026-5478 |
8.1 (3.1)
|
Everest Forms <= 3.4.4 - Unauthenticated Arbitrary Fil… |
wpeverest |
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder |
2026-04-20T19:27:08.159Z | 2026-04-21T13:33:57.569Z |
| CVE-2026-32135 |
7.7 (4.0)
|
NanoMQ has Heap Buffer Overflow in URI Parameter Parsing |
nanomq |
nanomq |
2026-04-20T19:23:09.704Z | 2026-04-21T13:33:14.607Z |
| CVE-2026-6550 |
4.7 (3.1)
5.7 (4.0)
|
Key commitment policy bypass via shared key cache in A… |
AWS |
AWS Encryption SDK for Python |
2026-04-20T19:20:23.383Z | 2026-04-20T19:44:11.685Z |
| CVE-2026-6257 |
9.2 (4.0)
9.1 (3.1)
|
Vvveb CMS v1.0.8 Remote Code Execution via Media Management |
Vvveb |
Vvveb CMS |
2026-04-20T19:09:45.927Z | 2026-04-21T19:50:26.897Z |
| CVE-2026-6248 |
8.1 (3.1)
|
wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Ar… |
tomdever |
wpForo Forum |
2026-04-20T18:31:33.290Z | 2026-04-21T17:35:30.317Z |
| CVE-2026-6060 |
4.5 (3.1)
|
Possible DoS via SQL Box |
OTRS AG |
OTRS |
2026-04-20T18:20:01.664Z | 2026-04-20T18:48:48.185Z |
| CVE-2026-41389 |
6.3 (4.0)
5.8 (3.1)
|
OpenClaw 2026.4.7 < 2026.4.15 - Arbitrary File Read vi… |
OpenClaw |
OpenClaw |
2026-04-20T17:48:43.704Z | 2026-04-20T18:05:03.103Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-39377 |
6.5 (3.1)
|
nbconvert has an Arbitrary File Write via Path Travers… |
jupyter |
nbconvert |
2026-04-21T00:14:59.937Z | 2026-04-21T19:49:24.475Z |
| CVE-2026-39320 |
7.5 (3.1)
|
Signal K Server has an Unauthenticated Regular Express… |
SignalK |
signalk-server |
2026-04-21T00:07:10.371Z | 2026-04-21T19:36:54.787Z |
| CVE-2026-41331 |
6.9 (4.0)
5.3 (3.1)
|
OpenClaw < 2026.3.31 - Resource Consumption via Unauth… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:17.653Z | 2026-04-21T20:27:46.881Z |
| CVE-2026-41330 |
2 (4.0)
4.4 (3.1)
|
OpenClaw < 2026.3.31 - Environment Variable Override v… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:16.941Z | 2026-04-21T13:39:27.598Z |
| CVE-2026-41329 |
9 (4.0)
9.9 (3.1)
|
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Co… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:16.222Z | 2026-04-21T19:38:16.140Z |
| CVE-2026-41303 |
8.7 (4.0)
8.8 (3.1)
|
OpenClaw < 2026.3.28 - Authorization Bypass in Discord… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:15.511Z | 2026-04-21T13:35:55.924Z |
| CVE-2026-41302 |
4.8 (4.0)
7.6 (3.1)
|
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:14.782Z | 2026-04-21T19:49:35.930Z |
| CVE-2026-41301 |
6.9 (4.0)
5.3 (3.1)
|
OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairi… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:14.023Z | 2026-04-21T13:33:53.554Z |
| CVE-2026-41300 |
6.9 (4.0)
6.5 (3.1)
|
OpenClaw < 2026.3.31 - Attacker-Discovered Endpoint Pr… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:13.304Z | 2026-04-21T13:03:24.309Z |
| CVE-2026-41299 |
7.1 (4.0)
7.1 (3.1)
|
OpenClaw < 2026.3.28 - Client Identity Spoofing in cha… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:12.586Z | 2026-04-21T13:38:25.512Z |
| CVE-2026-41298 |
5.3 (4.0)
5.4 (3.1)
|
OpenClaw < 2026.4.2 - Authorization Bypass in Session … |
OpenClaw |
OpenClaw |
2026-04-20T23:08:11.787Z | 2026-04-21T17:34:23.419Z |
| CVE-2026-41297 |
4.8 (4.0)
7.6 (3.1)
|
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:10.955Z | 2026-04-21T13:41:34.057Z |
| CVE-2026-41296 |
8.8 (4.0)
8.2 (3.1)
|
OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race … |
OpenClaw |
OpenClaw |
2026-04-20T23:08:10.194Z | 2026-04-21T19:49:41.570Z |
| CVE-2026-41295 |
8.5 (4.0)
7.8 (3.1)
|
OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shad… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:09.503Z | 2026-04-21T13:35:47.883Z |
| CVE-2026-41294 |
8.5 (4.0)
8.6 (3.1)
|
OpenClaw < 2026.3.28 - Environment Variable Injection … |
OpenClaw |
OpenClaw |
2026-04-20T23:08:08.795Z | 2026-04-21T13:04:36.188Z |
| CVE-2026-41285 |
4.3 (3.1)
|
In OpenBSD through 7.8, the slaacd and rad daemon… |
OpenBSD |
OpenBSD |
2026-04-20T00:00:00.000Z | 2026-04-21T13:27:42.310Z |
| CVE-2026-40045 |
5.9 (4.0)
5.7 (3.1)
|
OpenClaw < 2026.4.2 - Cleartext Credential Transmissio… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:07.952Z | 2026-04-21T13:37:43.951Z |
| CVE-2026-35588 |
6.3 (3.1)
|
Glances has CQL Injection in its Cassandra Export Modu… |
nicolargo |
glances |
2026-04-20T23:20:34.998Z | 2026-04-21T13:35:04.526Z |
| CVE-2026-35587 |
7.3 (4.0)
|
Glances IP Plugin has SSRF via public_api that leads t… |
nicolargo |
glances |
2026-04-20T23:19:02.908Z | 2026-04-22T14:01:47.583Z |
| CVE-2026-35570 |
8.4 (3.1)
|
OpenClaude has Sandbox Bypass via Early-Exit Logic Fla… |
Gitlawb |
openclaude |
2026-04-20T23:24:08.324Z | 2026-04-21T19:49:30.148Z |
| CVE-2026-34839 |
7.7 (4.0)
|
Glances Vulnerable to Cross-Origin Information Disclos… |
nicolargo |
glances |
2026-04-20T23:09:02.551Z | 2026-04-21T19:37:42.399Z |
| CVE-2026-5721 |
4.7 (3.1)
|
wpDataTables – WordPress Data Table, Dynamic Tables & … |
wpdatatables |
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin |
2026-04-20T22:25:26.695Z | 2026-04-21T19:49:47.411Z |
| CVE-2026-34082 |
5.3 (4.0)
|
Dify has IDOR in deleting someone else's chat conversation |
langgenius |
dify |
2026-04-20T23:03:18.158Z | 2026-04-21T13:36:45.614Z |
| CVE-2026-6729 |
5.3 (4.0)
6.3 (3.1)
|
HKUDS OpenHarness Session Key Collision Privilege Escalation |
HKUDS |
OpenHarness |
2026-04-20T22:01:38.766Z | 2026-04-21T17:39:32.967Z |
| CVE-2026-29643 |
7.1 (3.1)
|
XiangShan (Open-source high-performance RISC-V pr… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-21T19:50:32.463Z |
| CVE-2026-22051 |
2.3 (4.0)
|
StorageGRID (formerly StorageGRID Webscale) versi… |
NETAPP |
StorageGRID (formerly StorageGRID Webscale) |
2026-04-20T21:27:36.822Z | 2026-04-21T13:40:46.948Z |
| CVE-2026-0930 |
2.3 (4.0)
|
Potential wolfSSHd Buffer out-of-bounds Read on Window… |
wolfSSL |
wolfSSH |
2026-04-20T21:28:33.227Z | 2026-04-21T13:37:15.647Z |
| CVE-2026-5928 |
7.5 (3.1)
|
Static buffer overflow in deprecated nis_local_principal |
The GNU C Library |
glibc |
2026-04-20T20:37:31.743Z | 2026-04-21T19:49:59.071Z |
| CVE-2026-5450 |
9.8 (3.1)
|
scanf %mc off-by-one heap buffer overflow |
The GNU C Library |
glibc |
2026-04-20T20:55:41.170Z | 2026-04-21T19:49:53.221Z |
| CVE-2026-5358 |
N/A
|
REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API can only be called with a trusted server from the pre-populated cache. The use of a trusted server means no trust boundary is crossed and this is therefore considered a normal bug. | N/A | N/A | 2026-04-20T20:37:23.178Z | 2026-04-22T13:04:20.656Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-27jw-fcpv-p46x |
5.4 (3.1)
5.1 (4.0)
|
GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports mod… | 2026-04-20T18:31:49Z | 2026-04-20T18:31:50Z |
| ghsa-p8w2-3jvp-85x5 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. … | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-p7mp-86pp-wx7w |
4.7 (3.1)
2.0 (4.0)
|
A vulnerability was identified in Z-BlogPHP 1.7.5. This affects the function App::UnPack of the fil… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-hmwv-mfjf-w46v |
8.8 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 throug… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-h2v9-xpqq-69hx |
7.1 (3.1)
|
ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in t… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-gv64-vfgp-cgh5 |
4.7 (3.1)
2.0 (4.0)
|
A weakness has been identified in Pagekit CMS up to 1.0.18. This issue affects the function evaluat… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:49Z |
| ghsa-fxgc-2fpp-hx5w |
8.8 (3.1)
8.7 (4.0)
|
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-fr6h-4rh3-wc9f |
7.7 (3.1)
8.3 (4.0)
|
Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy acti… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-chhv-69jq-q952 |
9.8 (3.1)
9.2 (4.0)
|
Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where t… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-82p8-693h-j5x5 |
2.4 (3.1)
1.9 (4.0)
|
A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability aff… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-58qw-9mgm-455v |
4.6 (4.0)
|
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is… | 2026-04-20T18:31:48Z | 2026-04-20T21:31:43Z |
| ghsa-49mg-4v6p-32w2 |
5.4 (3.1)
5.1 (4.0)
|
Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticat… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:48Z |
| ghsa-3gjh-jvm6-6pfg |
6.5 (3.1)
|
A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or… | 2026-04-20T18:31:48Z | 2026-04-20T18:31:49Z |
| ghsa-gxrh-c9qf-pf88 |
7.2 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-20T18:31:47Z | 2026-04-20T18:31:47Z |
| ghsa-x2wv-w39c-7c55 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionalit… | 2026-04-20T15:31:52Z | 2026-04-20T15:31:52Z |
| ghsa-wvwg-7g9q-g3v4 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an … | 2026-04-20T15:31:52Z | 2026-04-20T15:31:52Z |
| ghsa-wf66-mphr-4c4r |
5.3 (3.1)
|
Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient componen… | 2026-04-20T15:31:52Z | 2026-04-20T18:31:47Z |
| ghsa-rw4j-jhfh-fr2h |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an … | 2026-04-20T15:31:52Z | 2026-04-20T15:31:52Z |
| ghsa-qhfq-gvvc-5q6q |
5.3 (3.1)
|
Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw… | 2026-04-20T15:31:52Z | 2026-04-20T18:31:46Z |
| ghsa-pwx9-99jm-fx95 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an a… | 2026-04-20T15:31:52Z | 2026-04-20T15:31:52Z |
| ghsa-g4q4-3mm2-2w69 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an … | 2026-04-20T15:31:52Z | 2026-04-20T15:31:52Z |
| ghsa-c8hq-8vfh-x23r |
5.7 (4.0)
|
An improper access control vulnerability in the canonical-livepatch snap client prior to version 10… | 2026-04-20T15:31:52Z | 2026-04-20T15:31:52Z |
| ghsa-7hc9-pw4r-x45r |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionali… | 2026-04-20T15:31:52Z | 2026-04-20T15:31:52Z |
| ghsa-2wm4-697g-pfq8 |
9.8 (3.1)
|
SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file con… | 2026-04-20T15:31:52Z | 2026-04-20T18:31:47Z |
| ghsa-28jg-cgg7-j4wc |
9.1 (3.1)
|
A possible security vulnerability has been identified in Apache Kafka. By default, the broker prop… | 2026-04-20T15:31:52Z | 2026-04-20T18:31:46Z |
| ghsa-xx6p-3747-7pwp |
2.4 (3.1)
1.9 (4.0)
|
A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknow… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-x42f-vq92-fh92 |
2.4 (3.1)
1.9 (4.0)
|
A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unkno… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-wj32-w776-h6m2 |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGst… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-rgcc-vxwc-jxf9 |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vuln… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-q6vj-q94p-g3rc |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the functi… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-43055 |
7.5 (3.1)
|
Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by r… | hyperledger | 2022-11-12T20:15:00+00:00 | 2023-08-17T03:22:31.453589+00:00 |
| pysec-2022-43018 |
|
WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using th… | wsgidav | 2022-11-11T21:15:00Z | 2023-05-04T04:29:31.369774Z |
| pysec-2022-42985 |
|
Arches is a web platform for creating, managing, & visualizing geospatial data. Versions … | arches | 2022-11-11T04:15:00Z | 2023-05-04T04:29:23.524968Z |
| pysec-2022-43178 |
7.5 (3.1)
|
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo … | cleo | 2022-11-09T20:15:10+00:00 | 2025-04-09T17:27:24.793038+00:00 |
| pysec-2022-43130 |
9.8 (3.1)
|
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… | democritus-uuids | 2022-11-07T15:15:00Z | 2024-11-21T14:22:45.198186Z |
| pysec-2022-43129 |
9.8 (3.1)
|
The d8s-strings for python, as distributed on PyPI, included a potential code-execution b… | democritus-uuids | 2022-11-07T15:15:00Z | 2024-11-21T14:22:45.148199Z |
| pysec-2022-43128 |
9.8 (3.1)
|
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backd… | democritus-utility | 2022-11-07T15:15:00Z | 2024-11-21T14:22:45.091449Z |
| pysec-2022-43127 |
9.8 (3.1)
|
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… | democritus-user-agents | 2022-11-07T15:15:00Z | 2024-11-21T14:22:45.041198Z |
| pysec-2022-43126 |
9.8 (3.1)
|
The d8s-dates for python, as distributed on PyPI, included a potential code-execution bac… | democritus-timezones | 2022-11-07T15:15:00Z | 2024-11-21T14:22:44.991216Z |
| pysec-2022-43109 |
9.8 (3.1)
|
The d8s-stats for python, as distributed on PyPI, included a potential code-execution bac… | democritus-math | 2022-11-07T15:15:00Z | 2024-11-21T14:22:44.122837Z |
| pysec-2022-43108 |
9.8 (3.1)
|
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… | democritus-json | 2022-11-07T15:15:00Z | 2024-11-21T14:22:44.072231Z |
| pysec-2022-43100 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | democritus-grammars | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.665816Z |
| pysec-2022-43097 |
9.8 (3.1)
|
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… | democritus-domains | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.511664Z |
| pysec-2022-43096 |
8.8 (3.1)
|
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… | democritus-dates | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.46136Z |
| pysec-2022-43094 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | democritus-algorithms | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.361191Z |
| pysec-2022-43093 |
9.8 (3.1)
|
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backd… | d8s-xml | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.253271Z |
| pysec-2022-43091 |
9.8 (3.1)
|
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… | d8s-urls | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.149086Z |
| pysec-2022-43090 |
8.8 (3.1)
|
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… | d8s-timer | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.097689Z |
| pysec-2022-43089 |
9.8 (3.1)
|
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… | d8s-timer | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.045759Z |
| pysec-2022-43088 |
9.8 (3.1)
|
The d8s-strings for python, as distributed on PyPI, included a potential code-execution b… | d8s-strings | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.994084Z |
| pysec-2022-43086 |
9.8 (3.1)
|
The d8s-stats for python, as distributed on PyPI, included a potential code-execution bac… | d8s-stats | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.892924Z |
| pysec-2022-43085 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | d8s-python | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.829791Z |
| pysec-2022-43084 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | d8s-python | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.776996Z |
| pysec-2022-43082 |
9.8 (3.1)
|
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… | d8s-networking | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.668916Z |
| pysec-2022-43081 |
9.8 (3.1)
|
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… | d8s-networking | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.613124Z |
| pysec-2022-43075 |
9.8 (3.1)
|
The d8s-dates for python, as distributed on PyPI, included a potential code-execution bac… | d8s-dates | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.280201Z |
| pysec-2022-43131 |
6.5 (3.1)
|
diplib v3.0.0 is vulnerable to Double Free. | diplib | 2022-11-04T17:15:00Z | 2024-12-27T22:48:17.996707Z |
| pysec-2022-42969 |
|
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regu… | py | 2022-11-04T11:00:00Z | 2022-11-04T11:00:00Z |
| pysec-2022-42971 |
|
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's … | apache-airflow | 2022-11-02T12:15:00Z | 2022-11-07T01:10:28.239756Z |
| pysec-2022-42970 |
|
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susce… | apache-airflow | 2022-11-02T12:15:00Z | 2022-11-07T01:10:28.198195Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2219 | Malicious code in @solmasterv3/solana-metadata-sdk (npm) | 2026-03-26T00:52:19Z | 2026-03-31T03:12:00Z |
| mal-2026-2218 | Malicious code in @solana-ipfs/sdk (npm) | 2026-03-26T00:52:19Z | 2026-03-31T03:12:00Z |
| mal-2026-2216 | Malicious code in @pumpfun-ipfs/sdk (npm) | 2026-03-26T00:52:19Z | 2026-03-31T03:12:00Z |
| mal-2026-2226 | Malicious code in node-coremesh (npm) | 2026-03-26T00:42:51Z | 2026-04-16T15:42:09Z |
| mal-2026-2222 | Malicious code in chain-coremesh (npm) | 2026-03-26T00:42:51Z | 2026-04-16T15:42:08Z |
| mal-2026-2215 | Malicious code in react-leaflet-marker-layer (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:04Z |
| mal-2026-2214 | Malicious code in react-autolink-text (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:04Z |
| mal-2026-2213 | Malicious code in @virtahealth/substrate-root (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:00Z |
| mal-2026-2212 | Malicious code in @opengov/qa-record-types-api (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:00Z |
| mal-2026-2211 | Malicious code in @opengov/form-renderer (npm) | 2026-03-26T00:33:27Z | 2026-04-07T23:28:28Z |
| mal-2026-2210 | Malicious code in @opengov/form-builder (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:00Z |
| mal-2026-2209 | Malicious code in @emilgroup/translation-sdk-node (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:00Z |
| mal-2026-2208 | Malicious code in @emilgroup/setting-sdk (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:00Z |
| mal-2026-2207 | Malicious code in @emilgroup/process-manager-sdk-node (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:00Z |
| mal-2026-2206 | Malicious code in @emilgroup/process-manager-sdk (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:12:00Z |
| mal-2026-2205 | Malicious code in @emilgroup/partner-sdk (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:11:59Z |
| mal-2026-2204 | Malicious code in @emilgroup/numbergenerator-sdk-node (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:11:59Z |
| mal-2026-2203 | Malicious code in @emilgroup/discount-sdk-node (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:11:59Z |
| mal-2026-2202 | Malicious code in @emilgroup/commission-sdk (npm) | 2026-03-26T00:33:27Z | 2026-03-31T03:11:59Z |
| mal-2026-2220 | Malicious code in @universeorg/dotenv (npm) | 2026-03-26T00:31:20Z | 2026-03-31T03:12:00Z |
| mal-2026-2217 | Malicious code in @rexorg/config (npm) | 2026-03-26T00:31:20Z | 2026-04-16T15:42:07Z |
| mal-2026-2200 | Malicious code in json-lucide (npm) | 2026-03-25T16:45:38Z | 2026-04-16T15:42:09Z |
| mal-2026-2199 | Malicious code in omicnavigatorwebapp (npm) | 2026-03-25T15:03:25Z | 2026-03-31T03:12:03Z |
| mal-2026-2198 | Malicious code in omaronsec (npm) | 2026-03-25T15:03:25Z | 2026-03-31T03:12:03Z |
| mal-2026-2196 | Malicious code in tailwind-compile (npm) | 2026-03-25T14:20:59Z | 2026-04-16T15:42:10Z |
| mal-2026-2195 | Malicious code in super-alias (npm) | 2026-03-25T14:14:18Z | 2026-03-31T03:12:04Z |
| mal-2026-2194 | Malicious code in ffsixx (npm) | 2026-03-25T14:14:18Z | 2026-03-31T03:12:01Z |
| mal-2026-2193 | Malicious code in @sixcore/baileys (npm) | 2026-03-25T14:14:18Z | 2026-03-31T03:12:00Z |
| mal-2026-2192 | Malicious code in changelog-utils-wrapper (npm) | 2026-03-25T12:42:22Z | 2026-03-31T03:12:01Z |
| mal-2026-2191 | Malicious code in changelog-utils-logger (npm) | 2026-03-25T12:42:22Z | 2026-03-31T03:12:01Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2665 | Hashicorp Terraform (Enterprise, Vault Provider): Mehrere Schwachstellen | 2025-11-23T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2664 | HCL BigFix: Schwachstelle ermöglicht Manipulation von Daten | 2025-11-23T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2663 | libpng: Mehrere Schwachstellen | 2025-11-23T23:00:00.000+00:00 | 2026-03-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2662 | IBM Informix (Dynamic Server): Schwachstelle ermöglicht Denial of Service | 2025-11-23T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2661 | Google Cloud Platform (Looker): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2025-11-23T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2659 | Synology DiskStation Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-23T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2658 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2657 | WebKitGTK: Mehrere Schwachstellen | 2025-11-20T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2656 | MELDUNG ZURÜCKGEZOGEN | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2655 | CUPS-Filters: Schwachstelle ermöglicht Codeausführung | 2025-11-20T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2654 | MongoDB (Server): Schwachstelle ermöglicht Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2653 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2652 | Red Hat Satellite: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2651 | GnuTLS: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-19T23:00:00.000+00:00 | 2026-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2650 | Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-19T23:00:00.000+00:00 | 2025-11-25T23:00:00.000+00:00 |
| wid-sec-w-2025-2649 | Google Cloud Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2648 | IBM AIX und VIOS: Mehrere Schwachstellen | 2025-11-19T23:00:00.000+00:00 | 2025-11-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2647 | SonicWall Email Security: Mehrere Schwachstellen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2646 | Progress Software MOVEit: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-19T23:00:00.000+00:00 | 2025-11-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2645 | Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2026-03-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2644 | Pega Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-19T23:00:00.000+00:00 | 2025-11-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2643 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2642 | MongoDB: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-19T23:00:00.000+00:00 | 2025-11-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2641 | Grafana Enterprise: Schwachstelle ermöglicht Privilegieneskalation | 2025-11-19T23:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2640 | SonicWall SSL-VPN: Schwachstelle ermöglicht Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2639 | Arista EOS: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2638 | Grub: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2637 | Rsync: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-18T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2636 | OpenVPN: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2635 | Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Denial of Service | 2025-11-18T23:00:00.000+00:00 | 2025-12-11T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-324-01 | Mitsubishi Electric MELSEC iQ-F Series (Update A) | 2024-11-19T00:00:00.000Z | 2026-03-31T00:00:00.000000Z |
| icsma-24-319-01 | Baxter Life2000 Ventilation System | 2024-11-14T07:00:00.000000Z | 2024-11-14T07:00:00.000000Z |
| icsa-24-319-17 | 2N Access Commander (Update A) | 2024-11-14T07:00:00.000000Z | 2025-02-11T07:00:00.000000Z |
| icsa-24-319-16 | Hitachi Energy MSM | 2024-11-14T07:00:00.000000Z | 2024-11-14T07:00:00.000000Z |
| icsa-24-319-15 | Rockwell Automation Arena Input Analyzer | 2024-11-14T07:00:00.000000Z | 2024-11-14T07:00:00.000000Z |
| icsa-24-319-14 | Rockwell Automation FactoryTalk Updater (Update A) | 2024-11-14T07:00:00.000000Z | 2024-11-18T07:00:00.000000Z |
| icsa-24-319-13 | Rockwell Automation Verve Reporting (Update A) | 2024-11-14T07:00:00.000000Z | 2024-11-18T07:00:00.000000Z |
| va-24-317-01 | Ivanti Connect Secure and Ivanti Policy Secure Multiple Vulnerabilities | 2024-11-13T20:32:00Z | 2024-11-13T20:32:00Z |
| icsa-24-317-03 | Rockwell Automation FactoryTalk View ME | 2024-11-12T07:00:00.000000Z | 2024-11-12T07:00:00.000000Z |
| icsa-24-317-02 | Hitachi Energy TRO600 | 2024-11-12T07:00:00.000000Z | 2024-11-12T07:00:00.000000Z |
| icsa-24-317-01 | Subnet Solutions PowerSYSTEM Center | 2024-11-12T07:00:00.000000Z | 2024-11-12T07:00:00.000000Z |
| icsa-24-326-04 | Schneider Electric Modicon M340, MC80, and Momentum Unity M1E (Update B) | 2024-11-12T05:00:00.000000Z | 2026-01-20T15:49:53.166459Z |
| icsa-24-326-06 | Schneider Electric PowerLogic PM5300 Series | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-326-05 | Schneider Electric EcoStruxure IT Gateway | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-326-03 | Schneider Electric Modicon M340, MC80, and Momentum Unity M1E | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-12 | Siemens Mendix Runtime | 2024-11-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-319-11 | Siemens SIMATIC CP | 2024-11-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-319-10 | Siemens TeleControl Server | 2024-11-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-319-09 | Siemens Spectrum Power 7 | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-08 | Siemens SINEC INS | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-07 | Siemens Engineering Platforms | 2024-11-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-319-06 | Siemens SCALANCE M-800 Family | 2024-11-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-319-05 | Siemens Solid Edge | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-04 | Siemens SINEC NMS | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-03 | Siemens OZW672 and OZW772 Web Server | 2024-11-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-319-02 | Siemens SIPORT | 2024-11-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-319-01 | Siemens RUGGEDCOM CROSSBOW | 2024-11-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-312-03 | Bosch Rexroth IndraDrive | 2024-11-07T07:00:00.000000Z | 2024-11-07T07:00:00.000000Z |
| icsa-24-312-02 | Delta Electronics DIAScreen | 2024-11-07T07:00:00.000000Z | 2024-11-07T07:00:00.000000Z |
| icsa-24-312-01 | Beckhoff Automation TwinCAT Package Manager | 2024-11-07T07:00:00.000000Z | 2024-11-07T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-esasmawsa-vulns-yrusw5md | Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities | 2022-11-02T16:00:00+00:00 | 2022-11-30T12:49:53+00:00 |
| cisco-sa-esa-http-inject-nvsycumr | Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-02T16:00:00+00:00 |
| cisco-sa-esa-dos-gdghhmbv | Cisco Email Security Appliance Denial of Service Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-02T16:00:00+00:00 |
| cisco-sa-cnt-sec-infodiscl-bvkknug | Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Information Disclosure Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-02T16:00:00+00:00 |
| cisco-sa-broadworks-ssrf-bjeqfpp | Cisco BroadWorks CommPilot Application Software Vulnerabilities | 2022-11-02T16:00:00+00:00 | 2023-01-24T17:26:16+00:00 |
| cisco-sa-openssl-w9sdcc2a | Vulnerabilities in OpenSSL Affecting Cisco Products: November 2022 | 2022-10-28T16:00:00+00:00 | 2022-11-23T20:23:17+00:00 |
| cisco-sa-roomos-trav-befvccyu | Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities | 2022-10-19T16:00:00+00:00 | 2022-10-19T16:00:00+00:00 |
| cisco-sa-meraki-mx-vpn-dos-vnesbgbf | Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability | 2022-10-19T16:00:00+00:00 | 2022-10-19T19:44:34+00:00 |
| cisco-sa-ise-xss-twlnpy3m | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2022-10-19T16:00:00+00:00 | 2023-03-31T21:09:40+00:00 |
| cisco-sa-ise-path-trav-dz5dpzym | Cisco Identity Services Engine Unauthorized File Access Vulnerability | 2022-10-19T16:00:00+00:00 | 2023-01-24T18:18:32+00:00 |
| cisco-sa-wsa-bypass-bwbfugek | Cisco Secure Web Appliance Content Encoding Filter Bypass Vulnerabilities | 2022-10-05T16:00:00+00:00 | 2023-04-03T13:46:35+00:00 |
| cisco-sa-nfvis-isv-bqrvev2h | Cisco Enterprise NFV Infrastructure Software Improper Signature Verification Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-jabber-xmpp-ne9scm | Cisco Jabber Client Software Extensible Messaging and Presence Protocol Stanza Smuggling Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-19T20:47:17+00:00 |
| cisco-sa-expressway-csrf-sqpssfy6 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-ctt-ivv-4a66dsfj | Cisco Touch 10 Devices Insufficient Identity Verification Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-ctt-dav-hsvehhet | Cisco Touch 10 Devices Downgrade Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-cssm-priv-esc-sejz69dv | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-bw-thinrcpt-xss-gsj4cecu | Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-ata19x-multivuln-gezyvvs | Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-wlc-udp-dos-xdyewhnz | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-wlc-dos-mkgrrscb | Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-wlc-dhcp-dos-76pcjpxk | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-gje47emn | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-ssh-excpt-dos-fzobqtnk | Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-sdwan-privesc-cli-xkgwmqku | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability | 2022-09-28T16:00:00+00:00 | 2024-01-23T23:05:35+00:00 |
| cisco-sa-sdwan-avc-nddsgb8 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-sdavc-za5fpxx2 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-sd-wan-priv-e6e8tedf | Cisco SD-WAN Software Privilege Escalation Vulnerabilities | 2022-09-28T16:00:00+00:00 | 2026-02-25T20:29:00+00:00 |
| cisco-sa-iosxe-mpls-dos-ab4oul3 | Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-iosxe-info-disc-nrorxjo | Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability | 2022-09-28T16:00:00+00:00 | 2023-05-17T18:23:37+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-66037 | OpenSC: Out of Bounds vulnerability | 2026-03-02T00:00:00.000Z | 2026-04-09T01:39:31.000Z |
| msrc_cve-2025-49010 | OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE | 2026-03-02T00:00:00.000Z | 2026-04-14T14:43:29.000Z |
| msrc_cve-2025-13462 | tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | 2026-03-02T00:00:00.000Z | 2026-04-22T01:39:57.000Z |
| msrc_cve-2024-14027 | xattr: switch to CLASS(fd) | 2026-03-02T00:00:00.000Z | 2026-03-11T14:36:33.000Z |
| msrc_cve-2006-10003 | XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack | 2026-03-02T00:00:00.000Z | 2026-04-08T01:40:48.000Z |
| msrc_cve-2006-10002 | XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes | 2026-03-02T00:00:00.000Z | 2026-03-20T01:04:46.000Z |
| msrc_cve-2026-26119 | Windows Admin Center Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-17T08:00:00.000Z |
| msrc_cve-2026-24302 | Azure Arc Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-04-10T07:00:00.000Z |
| msrc_cve-2026-24300 | Azure Front Door Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-05T08:00:00.000Z |
| msrc_cve-2026-23655 | Microsoft ACI Confidential Containers Information Disclosure Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21537 | Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21535 | Microsoft Teams Information Disclosure Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-19T08:00:00.000Z |
| msrc_cve-2026-21533 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21532 | Azure Function Information Disclosure Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-05T08:00:00.000Z |
| msrc_cve-2026-21531 | Azure SDK for Python Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21529 | Azure HDInsight Spoofing Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21528 | Azure IoT Explorer Information Disclosure Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-19T08:00:00.000Z |
| msrc_cve-2026-21527 | Microsoft Exchange Server Spoofing Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21525 | Windows Remote Access Connection Manager Denial of Service Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21523 | GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-04-20T07:00:00.000Z |
| msrc_cve-2026-21522 | Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21519 | Desktop Window Manager Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21518 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | 2026-02-10T08:00:00.000Z | 2026-04-01T07:00:00.000Z |
| msrc_cve-2026-21516 | GitHub Copilot for Jetbrains Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21514 | Microsoft Word Security Feature Bypass Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21513 | MSHTML Framework Security Feature Bypass Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21512 | Azure DevOps Server Cross-Site Scripting Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21511 | Microsoft Outlook Spoofing Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-11T08:00:00.000Z |
| msrc_cve-2026-21510 | Windows Shell Security Feature Bypass Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21508 | Windows Storage Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0342 | Kwetsbaarheden verholpen in Ivanti Avalanche | 2024-08-14T09:56:40.653912Z | 2024-08-14T09:56:40.653912Z |
| ncsc-2024-0341 | Kwetsbaarheden verholpen in Ivanti Neurons for ITSM | 2024-08-14T09:54:26.701111Z | 2024-08-14T09:54:26.701111Z |
| ncsc-2024-0340 | Kwetsbaarheid verholpen in Ivanti Virtual Traffic Manager | 2024-08-14T09:48:46.175634Z | 2024-09-03T11:19:00.763993Z |
| ncsc-2024-0339 | Kwetsbaarheden verholpen in Microsoft Mariner | 2024-08-13T18:23:22.271316Z | 2024-08-13T18:23:22.271316Z |
| ncsc-2024-0338 | Kwetsbaarheden verholpen in Microsoft Dynamics | 2024-08-13T18:22:21.160613Z | 2024-08-13T18:22:21.160613Z |
| ncsc-2024-0337 | Kwetsbaarheden verholpen in Microsoft Office | 2024-08-13T18:21:45.385690Z | 2024-08-13T18:21:45.385690Z |
| ncsc-2024-0336 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2024-08-13T18:21:06.220640Z | 2024-08-13T18:21:06.220640Z |
| ncsc-2024-0335 | Kwetsbaarheden verholpen in Microsoft Azure componenten | 2024-08-13T18:20:23.647785Z | 2024-08-13T18:20:23.647785Z |
| ncsc-2024-0334 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-08-13T18:19:27.728322Z | 2024-08-27T07:59:08.391850Z |
| ncsc-2024-0333 | Kwetsbaarheden verholpen in SAP producten | 2024-08-13T13:47:02.764070Z | 2024-08-13T13:47:02.764070Z |
| ncsc-2024-0332 | Kwetsbaarheden verholpen in Siemens producten | 2024-08-13T09:21:28.381575Z | 2024-08-13T09:21:28.381575Z |
| ncsc-2024-0331 | Kwetsbaarheden verholpen in Zabbix | 2024-08-12T10:34:15.273912Z | 2024-08-12T10:34:15.273912Z |
| ncsc-2024-0330 | Kwetsbaarheid verholpen in Asterisk | 2024-08-12T10:31:33.788930Z | 2024-08-12T10:31:33.788930Z |
| ncsc-2024-0329 | Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition | 2024-08-12T08:24:49.808846Z | 2024-08-12T08:24:49.808846Z |
| ncsc-2024-0328 | Kwetsbaarheden verholpen in IBM InfoSphere | 2024-08-12T08:22:38.701674Z | 2024-08-12T08:22:38.701674Z |
| ncsc-2024-0327 | Kwetsbaarheden verholpen in Cisco Small Business IP Phones | 2024-08-08T08:01:30.827296Z | 2024-08-08T08:01:30.827296Z |
| ncsc-2024-0326 | Kwetsbaarheden verholpen in RoundCube Webmail | 2024-08-08T07:45:42.674316Z | 2024-08-08T07:45:42.674316Z |
| ncsc-2024-0325 | Kwetsbaarheden verholpen in Aruba Networks ArubaOS en InstantOS | 2024-08-07T09:04:14.955844Z | 2024-08-07T09:04:14.955844Z |
| ncsc-2024-0324 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2024-08-07T08:58:12.457235Z | 2024-08-07T08:58:12.457235Z |
| ncsc-2024-0323 | Kwetsbaarheden verholpen in Siemens Omnivise | 2024-08-06T09:29:53.292433Z | 2024-08-06T09:29:53.292433Z |
| ncsc-2024-0322 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2024-08-06T09:25:08.253832Z | 2024-08-06T09:25:08.253832Z |
| ncsc-2024-0321 | Kwetsbaarheid verholpen in Progress MOVEit Transfer | 2024-07-30T08:45:50.286085Z | 2024-07-30T08:45:50.286085Z |
| ncsc-2024-0320 | Kwetsbaarheden verholpen in Apple MacOS | 2024-07-30T08:42:07.365674Z | 2024-07-30T08:42:07.365674Z |
| ncsc-2024-0319 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-07-30T08:39:16.399394Z | 2024-07-30T08:39:16.399394Z |
| ncsc-2024-0318 | Kwetsbaarheden verholpen in Docker Moby | 2024-07-25T11:28:37.900721Z | 2024-07-25T11:28:37.900721Z |
| ncsc-2024-0317 | Kwetsbaarheid gevonden in Ivanti Endpoint Manager | 2024-07-24T14:37:09.864241Z | 2024-07-24T14:37:09.864241Z |
| ncsc-2024-0316 | Kwetsbaarheid verholpen in Broadcom Symantec Privileged Access Management | 2024-07-22T09:17:29.853486Z | 2024-07-22T09:17:29.853486Z |
| ncsc-2024-0315 | Kwetsbaarheid verholpen in Cisco Smart Software Manager On-Prem | 2024-07-19T13:06:00.004663Z | 2024-07-19T13:06:00.004663Z |
| ncsc-2024-0314 | Kwetsbaarheden verholpen in Apache HTTP Server | 2024-07-19T07:34:12.997118Z | 2024-07-19T07:34:12.997118Z |
| ncsc-2024-0313 | Kwetsbaarheid verholpen in HPE 3PAR Service Processor | 2024-07-18T13:58:07.127103Z | 2024-07-18T13:58:07.127103Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10014-1 | python311-cbor2-5.8.0-2.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10013-1 | apptainer-1.4.5-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10012-1 | ImageMagick-7.1.2.12-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10011-1 | python314-3.14.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10010-1 | python311-filelock-3.20.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10009-1 | log4j-2.20.0-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10008-1 | gpsd-3.27.3-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10007-1 | c-ares-devel-1.34.6-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10006-1 | dcmtk-3.7.0-1.1 on GA media | 2026-01-05T00:00:00Z | 2026-01-05T00:00:00Z |
| opensuse-su-2026:10005-1 | python312-Django6-6.0-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:10004-1 | fluidsynth-2.5.2-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:20001-1 | Security update for sssd | 2026-01-02T16:58:16Z | 2026-01-02T16:58:16Z |
| opensuse-su-2026:20002-1 | Security update for MozillaThunderbird | 2026-01-02T12:14:18Z | 2026-01-02T12:14:18Z |
| opensuse-su-2026:10003-1 | python311-marshmallow-3.26.2-1.1 on GA media | 2026-01-02T00:00:00Z | 2026-01-02T00:00:00Z |
| opensuse-su-2026:10002-1 | libmatio-devel-1.5.29-1.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10001-1 | dirmngr-2.5.16-1.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10000-1 | gnu-recutils-1.9-3.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2025:15854-1 | kepler-0.11.3-1.1 on GA media | 2025-12-31T00:00:00Z | 2025-12-31T00:00:00Z |
| opensuse-su-2025:20130-1 | Security update for bash-git-prompt | 2025-12-30T17:08:26Z | 2025-12-30T17:08:26Z |
| opensuse-su-2025:20121-1 | Security update for redis | 2025-12-30T17:05:45Z | 2025-12-30T17:05:45Z |
| opensuse-su-2025:20155-1 | Security update for exim | 2025-12-30T17:02:44Z | 2025-12-30T17:02:44Z |
| opensuse-su-2025:20128-1 | Security update for shadowsocks-v2ray-plugin, v2ray-core | 2025-12-30T17:02:04Z | 2025-12-30T17:02:04Z |
| opensuse-su-2025:20097-1 | Security update for helmfile | 2025-12-30T17:00:02Z | 2025-12-30T17:00:02Z |
| opensuse-su-2025:20178-1 | Security update for chromium | 2025-12-30T16:56:53Z | 2025-12-30T16:56:53Z |
| opensuse-su-2025:15853-1 | weblate-5.14.3-2.1 on GA media | 2025-12-30T00:00:00Z | 2025-12-30T00:00:00Z |
| opensuse-su-2025:15852-1 | trivy-0.68.2-1.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15851-1 | python313-3.13.11-1.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15850-1 | python312-3.12.12-4.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15849-1 | python311-3.11.14-3.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15848-1 | python311-openapi-core-0.22.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:3821 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T06:51:55+00:00 | 2026-04-14T09:46:31+00:00 |
| rhsa-2026:3817 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T06:25:53+00:00 | 2026-04-14T09:46:30+00:00 |
| rhsa-2026:3820 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T06:19:06+00:00 | 2026-04-14T09:46:30+00:00 |
| rhsa-2026:3818 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T06:11:00+00:00 | 2026-04-14T09:46:34+00:00 |
| rhsa-2026:3816 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T05:42:24+00:00 | 2026-04-14T09:46:31+00:00 |
| rhsa-2026:3815 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T05:32:24+00:00 | 2026-04-14T09:46:29+00:00 |
| rhsa-2026:3813 | Red Hat Security Advisory: go-rpm-macros security update | 2026-03-05T05:30:04+00:00 | 2026-04-14T07:58:37+00:00 |
| rhsa-2026:3812 | Red Hat Security Advisory: grafana-pcp security update | 2026-03-05T04:13:33+00:00 | 2026-04-14T09:46:28+00:00 |
| rhsa-2026:3810 | Red Hat Security Advisory: kernel security update | 2026-03-05T03:22:49+00:00 | 2026-03-18T20:55:29+00:00 |
| rhsa-2026:3782 | Red Hat Security Advisory: RHOAI 2.25.3 - Red Hat OpenShift AI | 2026-03-04T18:23:40+00:00 | 2026-04-14T09:46:28+00:00 |
| rhsa-2026:3391 | Red Hat Security Advisory: OpenShift Container Platform 4.19.25 packages and security update | 2026-03-04T15:54:04+00:00 | 2026-04-14T07:58:29+00:00 |
| rhsa-2026:3753 | Red Hat Security Advisory: osbuild-composer security update | 2026-03-04T15:52:29+00:00 | 2026-04-14T09:46:28+00:00 |
| rhsa-2026:3392 | Red Hat Security Advisory: OpenShift Container Platform 4.19.25 bug fix and security update | 2026-03-04T15:36:49+00:00 | 2026-04-13T19:35:42+00:00 |
| rhsa-2026:3752 | Red Hat Security Advisory: osbuild-composer security update | 2026-03-04T15:29:36+00:00 | 2026-04-14T09:46:28+00:00 |
| rhsa-2026:3751 | Red Hat Security Advisory: Red Hat Developer Hub 1.9.0 release. | 2026-03-04T15:00:31+00:00 | 2026-03-18T16:09:25+00:00 |
| rhsa-2026:3730 | Red Hat Security Advisory: postgresql security update | 2026-03-04T14:32:11+00:00 | 2026-04-10T21:16:28+00:00 |
| rhsa-2026:3416 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 packages and security update | 2026-03-04T09:07:15+00:00 | 2026-04-14T07:58:29+00:00 |
| rhsa-2026:3723 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 | 2026-03-04T08:59:26+00:00 | 2026-04-14T07:58:36+00:00 |
| rhsa-2026:3417 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 bug fix and security update | 2026-03-04T08:55:38+00:00 | 2026-04-13T19:35:41+00:00 |
| rhsa-2026:3418 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 bug fix and security update | 2026-03-04T08:33:38+00:00 | 2026-04-10T21:19:36+00:00 |
| rhsa-2026:3718 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 | 2026-03-04T07:52:57+00:00 | 2026-04-14T09:39:13+00:00 |
| rhsa-2026:3419 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 security and extras update | 2026-03-04T07:32:52+00:00 | 2026-04-10T21:19:37+00:00 |
| rhsa-2026:3713 | Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI | 2026-03-04T07:18:30+00:00 | 2026-04-14T09:46:28+00:00 |
| rhsa-2026:3712 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 | 2026-03-04T07:12:04+00:00 | 2026-04-14T09:16:55+00:00 |
| rhsa-2026:3710 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3 | 2026-03-04T06:00:07+00:00 | 2026-04-14T09:16:54+00:00 |
| rhsa-2026:3699 | Red Hat Security Advisory: yggdrasil-worker-package-manager security update | 2026-03-04T05:15:19+00:00 | 2026-04-14T07:58:34+00:00 |
| rhsa-2026:3692 | Red Hat Security Advisory: kernel security update | 2026-03-04T01:01:24+00:00 | 2026-04-12T16:51:51+00:00 |
| rhsa-2026:3685 | Red Hat Security Advisory: kernel security update | 2026-03-03T20:57:40+00:00 | 2026-04-01T19:24:18+00:00 |
| rhsa-2026:3668 | Red Hat Security Advisory: go-rpm-macros security update | 2026-03-03T16:17:02+00:00 | 2026-04-14T07:58:34+00:00 |
| rhsa-2026:3669 | Red Hat Security Advisory: go-rpm-macros security update | 2026-03-03T15:33:23+00:00 | 2026-04-14T07:58:34+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20906-1 | Security update for postgresql17 | 2026-03-18T15:32:41Z | 2026-03-18T15:32:41Z |
| suse-su-2026:20905-1 | Security update for busybox | 2026-03-18T15:27:18Z | 2026-03-18T15:27:18Z |
| suse-su-2026:20738-1 | Security update for vim | 2026-03-18T13:40:49Z | 2026-03-18T13:40:49Z |
| suse-su-2026:20737-1 | Security update for libsoup | 2026-03-18T13:39:43Z | 2026-03-18T13:39:43Z |
| suse-su-2026:0928-1 | Security update for the Linux Kernel | 2026-03-18T13:32:23Z | 2026-03-18T13:32:23Z |
| suse-su-2026:20904-1 | Security update for cosign | 2026-03-18T11:27:44Z | 2026-03-18T11:27:44Z |
| suse-su-2026:20903-1 | Security update for libjxl | 2026-03-18T10:12:38Z | 2026-03-18T10:12:38Z |
| suse-su-2026:20902-1 | Security update for libsoup | 2026-03-18T10:01:36Z | 2026-03-18T10:01:36Z |
| suse-su-2026:20752-1 | Security update for libsoup | 2026-03-18T10:01:36Z | 2026-03-18T10:01:36Z |
| suse-su-2026:20901-1 | Security update for net-snmp | 2026-03-18T09:57:15Z | 2026-03-18T09:57:15Z |
| suse-su-2026:20751-1 | Security update for net-snmp | 2026-03-18T09:57:15Z | 2026-03-18T09:57:15Z |
| suse-su-2026:0923-1 | Security update for gvfs | 2026-03-18T09:15:47Z | 2026-03-18T09:15:47Z |
| suse-su-2026:0922-1 | Security update for tomcat | 2026-03-18T09:15:06Z | 2026-03-18T09:15:06Z |
| suse-su-2026:0921-1 | Security update for curl | 2026-03-18T08:52:04Z | 2026-03-18T08:52:04Z |
| suse-su-2026:20194-1 | Security update for postgresql17 and postgresql18 | 2026-03-18T08:31:44Z | 2026-03-18T08:31:44Z |
| suse-su-2026:0917-1 | Security update for kubernetes | 2026-03-18T07:47:08Z | 2026-03-18T07:47:08Z |
| suse-su-2026:0916-1 | Security update for gvfs | 2026-03-18T07:46:59Z | 2026-03-18T07:46:59Z |
| suse-su-2026:0915-1 | Security update for 389-ds | 2026-03-18T07:46:51Z | 2026-03-18T07:46:51Z |
| suse-su-2026:0914-1 | Security update for 389-ds | 2026-03-18T07:46:33Z | 2026-03-18T07:46:33Z |
| suse-su-2026:0913-1 | Security update for 389-ds | 2026-03-18T07:46:25Z | 2026-03-18T07:46:25Z |
| suse-su-2026:0911-1 | Security update for curl | 2026-03-17T19:56:50Z | 2026-03-17T19:56:50Z |
| suse-su-2026:0909-1 | Security update for container-suseconnect | 2026-03-17T17:34:33Z | 2026-03-17T17:34:33Z |
| suse-su-2026:0908-1 | Security update for xen | 2026-03-17T16:32:40Z | 2026-03-17T16:32:40Z |
| suse-su-2026:0907-1 | Security update for kea | 2026-03-17T16:32:34Z | 2026-03-17T16:32:34Z |
| suse-su-2026:20750-1 | Security update for libpng16 | 2026-03-17T14:49:13Z | 2026-03-17T14:49:13Z |
| suse-su-2026:20748-1 | Security update for python-maturin | 2026-03-17T12:49:51Z | 2026-03-17T12:49:51Z |
| suse-su-2026:0903-1 | Security update for curl | 2026-03-17T10:04:47Z | 2026-03-17T10:04:47Z |
| suse-su-2026:0902-1 | Security update for freerdp | 2026-03-17T09:38:11Z | 2026-03-17T09:38:11Z |
| suse-su-2026:20732-1 | Security update for vim | 2026-03-17T09:23:26Z | 2026-03-17T09:23:26Z |
| suse-su-2026:20744-1 | Security update for rust-keylime | 2026-03-16T15:29:27Z | 2026-03-16T15:29:27Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:16398 | Moderate: kernel security update | 2025-09-22T00:00:00Z | 2025-09-29T08:44:37Z |
| alsa-2025:16373 | Moderate: kernel-rt security update | 2025-09-22T00:00:00Z | 2025-09-24T11:00:38Z |
| alsa-2025:16372 | Moderate: kernel security update | 2025-09-22T00:00:00Z | 2025-09-24T11:04:13Z |
| alsa-2025:16354 | Moderate: kernel security update | 2025-09-22T00:00:00Z | 2025-09-29T09:27:52Z |
| alsa-2025:16260 | Important: firefox security update | 2025-09-22T00:00:00Z | 2025-09-25T15:01:51Z |
| alsa-2025:16157 | Important: thunderbird security update | 2025-09-18T00:00:00Z | 2025-09-26T09:47:50Z |
| alsa-2025:16156 | Important: thunderbird security update | 2025-09-18T00:00:00Z | 2025-09-26T11:14:21Z |
| alsa-2025:16154 | Moderate: grub2 security update | 2025-09-18T00:00:00Z | 2025-09-25T11:34:59Z |
| alsa-2025:16116 | Moderate: gnutls security, bug fix, and enhancement update | 2025-09-17T00:00:00Z | 2025-09-29T08:47:08Z |
| alsa-2025:16115 | Moderate: gnutls security, bug fix, and enhancement update | 2025-09-17T00:00:00Z | 2025-09-18T08:34:55Z |
| alsa-2025:16109 | Important: firefox security update | 2025-09-17T00:00:00Z | 2025-09-25T15:04:05Z |
| alsa-2025:16108 | Important: firefox security update | 2025-09-17T00:00:00Z | 2025-09-29T08:52:33Z |
| alsa-2025:16086 | Moderate: mysql security update | 2025-09-17T00:00:00Z | 2025-09-29T08:50:56Z |
| alsa-2025:16046 | Moderate: mysql:8.4 security update | 2025-09-17T00:00:00Z | 2025-09-18T08:40:08Z |
| alsa-2025:15904 | Important: container-tools:rhel8 security update | 2025-09-16T00:00:00Z | 2025-09-17T08:50:36Z |
| alsa-2025:15901 | Important: podman security update | 2025-09-16T00:00:00Z | 2025-09-16T07:54:29Z |
| alsa-2025:15900 | Important: podman security update | 2025-09-16T00:00:00Z | 2025-09-29T08:49:02Z |
| alsa-2025:15887 | Moderate: opentelemetry-collector security update | 2025-09-16T00:00:00Z | 2025-09-18T08:42:35Z |
| alsa-2025:15874 | Moderate: python-cryptography security update | 2025-09-16T00:00:00Z | 2025-09-18T10:25:39Z |
| alsa-2025:15786 | Important: kernel-rt security update | 2025-09-15T00:00:00Z | 2025-09-15T15:57:02Z |
| alsa-2025:15785 | Important: kernel security update | 2025-09-15T00:00:00Z | 2025-09-23T12:06:04Z |
| alsa-2025:15782 | Moderate: kernel security update | 2025-09-15T00:00:00Z | 2025-09-26T10:01:17Z |
| alsa-2025:15740 | Moderate: kernel security update | 2025-09-15T00:00:00Z | 2025-09-25T08:48:24Z |
| alsa-2025:15702 | Important: cups security update | 2025-09-11T00:00:00Z | 2025-09-12T09:35:34Z |
| alsa-2025:15701 | Important: cups security update | 2025-09-11T00:00:00Z | 2025-09-29T09:01:08Z |
| alsa-2025:15700 | Important: cups security update | 2025-09-11T00:00:00Z | 2025-09-29T08:59:02Z |
| alsa-2025:15699 | Moderate: mysql-selinux and mysql8.4 security update | 2025-09-11T00:00:00Z | 2025-09-12T10:30:08Z |
| alsa-2025:15687 | Moderate: php:8.2 security update | 2025-09-11T00:00:00Z | 2025-09-29T08:55:43Z |
| alsa-2025:15662 | Important: kernel security update | 2025-09-11T00:00:00Z | 2025-09-17T11:09:33Z |
| alsa-2025:15661 | Important: kernel security update | 2025-09-11T00:00:00Z | 2025-09-16T09:35:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-1320 | Heap-use-after-free in memory_bstat | 2023-12-17T00:12:41.223755Z | 2023-12-17T00:12:41.224161Z |
| osv-2023-1315 | Heap-use-after-free in htmlParseDocument | 2023-12-17T00:02:06.164794Z | 2023-12-17T00:02:06.165194Z |
| osv-2023-1313 | Heap-buffer-overflow in isvcd_start_of_pic | 2023-12-16T00:12:09.531964Z | 2024-04-29T11:16:18.966356Z |
| osv-2023-1312 | Heap-buffer-overflow in ih264d_format_convert | 2023-12-16T00:11:20.970046Z | 2024-04-29T11:16:08.727836Z |
| osv-2023-1311 | Heap-buffer-overflow in ih264d_format_convert | 2023-12-16T00:05:49.838718Z | 2024-04-29T11:26:02.378788Z |
| osv-2023-1307 | UNKNOWN READ in init_struct_ops_maps | 2023-12-15T00:12:51.528155Z | 2026-03-17T14:24:53.158428Z |
| osv-2023-1306 | Heap-use-after-free in pcpp::TLVRecordReader<pcpp::DhcpOption>::getTLVRecord | 2023-12-15T00:10:21.932370Z | 2025-12-22T14:15:50.738544Z |
| osv-2023-1305 | Check failed in CheckUnwind | 2023-12-15T00:01:07.183702Z | 2024-04-29T11:25:59.083407Z |
| osv-2023-1303 | Heap-use-after-free in htmlCurrentChar | 2023-12-15T00:00:06.313566Z | 2023-12-15T00:00:06.314002Z |
| osv-2023-1302 | Global-buffer-overflow in pcre_get_compiled_regex_cache_ex | 2023-12-14T00:13:52.791976Z | 2023-12-14T00:13:52.792479Z |
| osv-2023-1301 | Global-buffer-overflow in xmlDictLookupInternal | 2023-12-14T00:13:26.532719Z | 2023-12-14T00:13:26.533280Z |
| osv-2023-1300 | Security exception in com.fasterxml.jackson.core.JsonParser.currentName | 2023-12-14T00:13:10.208981Z | 2023-12-14T00:13:10.209415Z |
| osv-2023-1299 | Global-buffer-overflow in pcre_get_compiled_regex_cache_ex | 2023-12-14T00:12:13.097305Z | 2023-12-14T00:12:13.097842Z |
| osv-2023-1298 | Heap-buffer-overflow in loongarch_split_args_by_comma | 2023-12-14T00:10:40.133892Z | 2023-12-14T00:10:40.134313Z |
| osv-2023-1295 | Global-buffer-overflow in libraw_tagtype_dataunit_bytes | 2023-12-14T00:03:32.723059Z | 2023-12-14T00:03:32.723513Z |
| osv-2023-1294 | Heap-buffer-overflow in ih264d_compute_bs_non_mbaff | 2023-12-14T00:00:54.614578Z | 2024-04-29T11:26:00.379744Z |
| osv-2023-1291 | Security exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock | 2023-12-13T00:03:48.820074Z | 2023-12-13T00:03:48.820457Z |
| osv-2023-1276 | Heap-use-after-free in authentic_emu_update_tokeninfo | 2023-12-10T00:04:07.333337Z | 2023-12-10T00:04:07.333792Z |
| osv-2023-1272 | Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_ | 2023-12-09T00:05:42.581782Z | 2023-12-09T00:05:42.582124Z |
| osv-2023-1271 | Heap-buffer-overflow in is_decl_requires_met | 2023-12-09T00:03:11.119664Z | 2023-12-09T00:03:11.120297Z |
| osv-2023-1268 | Stack-buffer-overflow in decNaNs | 2023-12-08T00:11:32.086790Z | 2023-12-08T00:11:32.087163Z |
| osv-2023-1267 | Heap-buffer-overflow in dwg_free_object | 2023-12-08T00:11:02.971903Z | 2026-03-16T14:18:18.473266Z |
| osv-2023-1266 | Security exception in java.base/javax.crypto.spec.SecretKeySpec.<init> | 2023-12-08T00:10:39.042967Z | 2023-12-08T00:10:39.043541Z |
| osv-2023-1265 | Security exception in org.apache.poi.hdgf.streams.ChunkStream.findChunks | 2023-12-08T00:02:47.592445Z | 2023-12-08T00:02:47.593139Z |
| osv-2023-1263 | Heap-buffer-overflow in js_is_live_code | 2023-12-07T00:05:27.754264Z | 2023-12-07T00:05:27.754792Z |
| osv-2023-1259 | Use-of-uninitialized-value in std::__1::__stdoutbuf<char>::xsputn | 2023-12-06T04:45:58.561174Z | 2025-05-14T14:15:48.653022Z |
| osv-2023-1256 | Heap-buffer-overflow in H5T__bit_copy | 2023-12-03T13:02:43.376076Z | 2026-01-13T04:40:40.198673Z |
| osv-2023-1247 | Heap-buffer-overflow in r_bin_coff_new_buf | 2023-12-02T13:00:46.246790Z | 2023-12-02T13:00:46.247042Z |
| osv-2023-1244 | Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal | 2023-12-02T13:00:17.170709Z | 2023-12-09T14:11:35.526034Z |
| osv-2023-1243 | Heap-use-after-free in zend_reference_destroy | 2023-12-01T13:02:45.270293Z | 2023-12-01T13:02:45.270620Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2021-0145 | Potential unaligned read | 2021-07-04T12:00:00Z | 2023-07-08T12:30:19Z |
| rustsec-2021-0081 | Potential request smuggling capabilities due to lack of input validation | 2021-06-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0071 | `grep-cli` may run arbitrary executables on Windows | 2021-06-12T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0070 | VecStorage Deserialize Allows Violation of Length Invariant | 2021-06-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0095 | `mopa` is technically unsound | 2021-06-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0104 | File exposure in pleaser | 2021-05-27T12:00:00Z | 2021-09-10T16:01:55Z |
| rustsec-2021-0102 | Permissions bypass in pleaser | 2021-05-27T12:00:00Z | 2021-09-10T15:58:05Z |
| rustsec-2021-0101 | Permissions bypass in pleaser | 2021-05-27T12:00:00Z | 2021-09-10T15:58:27Z |
| rustsec-2021-0069 | SMTP command injection in body | 2021-05-22T12:00:00Z | 2021-10-19T19:56:47Z |
| rustsec-2021-0067 | Memory access due to code generation flaw in Cranelift module | 2021-05-21T12:00:00Z | 2021-10-19T22:14:35Z |
| rustsec-2021-0146 | Crate `twoway` deprecated by the author | 2021-05-20T12:00:00Z | 2023-02-09T03:11:29Z |
| rustsec-2021-0068 | Soundness issue in `iced-x86` versions <= 1.10.3 | 2021-05-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0066 | Denial of service on EVM execution due to memory over-allocation | 2021-05-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0065 | anymap is unmaintained. | 2021-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0064 | `cpuid-bool` has been renamed to `cpufeatures` | 2021-05-06T12:00:00Z | 2021-05-06T23:45:32Z |
| rustsec-2021-0063 | XSS in `comrak` | 2021-05-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0058 | Null pointer deref in `X509_issuer_and_serial_hash()` | 2021-05-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0057 | Integer overflow in CipherUpdate | 2021-05-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0056 | CA certificate check bypass with X509_V_FLAG_X509_STRICT | 2021-05-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0055 | NULL pointer deref in signature_algorithms processing | 2021-05-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0061 | `aes-ctr` has been merged into the `aes` crate | 2021-04-29T12:00:00Z | 2021-05-04T01:28:43Z |
| rustsec-2021-0060 | `aes-soft` has been merged into the `aes` crate | 2021-04-29T12:00:00Z | 2021-05-04T01:28:43Z |
| rustsec-2021-0059 | `aesni` has been merged into the `aes` crate | 2021-04-29T12:00:00Z | 2021-05-04T01:28:43Z |
| rustsec-2021-0054 | Archives may contain uninitialized memory | 2021-04-28T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0136 | `sass-rs` has been deprecated | 2021-04-07T12:00:00Z | 2023-02-09T03:11:29Z |
| rustsec-2021-0113 | AtomicBucket<T> unconditionally implements Send/Sync | 2021-04-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0140 | rusttype is Unmaintained | 2021-04-01T12:00:00Z | 2023-02-09T03:11:29Z |
| rustsec-2021-0041 | Denial of service through parsing payloads with too big exponent | 2021-03-18T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0053 | 'merge_sort::merge()' crashes with double-free for `T: Drop` | 2021-03-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0038 | Multiple memory safety issues | 2021-03-06T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-parse-2025-68150 | Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter | 2025-12-18T11:46:18.950Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-68115 | Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables | 2025-12-18T11:46:17.211Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-67727 | Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management | 2025-12-18T11:46:15.637Z | 2026-01-08T18:07:34.629Z |
| bit-kibana-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:40:39.003Z | 2025-12-18T12:08:20.703Z |
| bit-elk-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:37:43.350Z | 2025-12-18T12:08:20.703Z |
| bit-elasticsearch-2025-37731 | Elasticsearch Improper Authentication | 2025-12-18T11:37:43.121Z | 2025-12-19T12:06:33.755Z |
| bit-airflow-2025-66388 | Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI | 2025-12-16T14:37:51.384Z | 2025-12-16T15:14:22.118Z |
| bit-mongodb-2025-12657 | Malformed KMIP response may result in access violation | 2025-12-13T11:42:23.275Z | 2025-12-13T12:05:53.698Z |
| bit-django-2025-13372 | Potential SQL injection in FilteredRelation column aliases on PostgreSQL | 2025-12-13T11:36:31.883Z | 2025-12-13T12:05:53.698Z |
| bit-mongodb-2025-14345 | Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server | 2025-12-12T17:42:48.437Z | 2025-12-12T18:06:16.411Z |
| bit-jenkins-2025-67639 | 2025-12-12T11:23:52.749Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67638 | 2025-12-12T11:23:47.516Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67637 | 2025-12-12T11:23:42.761Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67636 | 2025-12-12T11:23:36.617Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67635 | 2025-12-12T11:23:31.286Z | 2025-12-12T11:51:34.315Z | |
| bit-mongodb-2025-13644 | MongoDB may be susceptible to Invariant Failure due to batched delete | 2025-12-12T11:19:13.963Z | 2026-01-08T18:07:34.629Z |
| bit-mongodb-2025-13643 | MongoDB Server may allow queries to be terminated by unauthorized users | 2025-12-12T11:19:08.903Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-67500 | Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration | 2025-12-11T11:41:16.693Z | 2026-03-20T09:47:33.381Z |
| bit-django-2025-64460 | Potential denial-of-service vulnerability in XML serializer text extraction | 2025-12-11T11:37:12.400Z | 2025-12-11T12:06:55.559Z |
| bit-python-2025-12084 | Quadratic complexity in node ID cache clearing | 2025-12-10T17:49:06.243Z | 2026-01-27T09:14:53.416Z |
| bit-libpython-2025-12084 | Quadratic complexity in node ID cache clearing | 2025-12-10T17:41:46.450Z | 2026-01-27T09:14:53.416Z |
| bit-gitlab-2024-9183 | Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab | 2025-12-09T12:02:49.276Z | 2025-12-11T12:06:55.559Z |
| bit-apache-2025-66200 | Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | 2025-12-09T11:38:20.150Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-65082 | Apache HTTP Server: CGI environment variable override | 2025-12-09T11:38:18.501Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-59775 | Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF | 2025-12-09T11:38:16.754Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-58098 | Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | 2025-12-09T11:38:15.033Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-55753 | Apache HTTP Server: mod_md (ACME), unintended retry intervals | 2025-12-09T11:38:13.178Z | 2025-12-09T12:08:00.393Z |
| bit-pgbouncer-2025-12819 | Untrusted search path in auth_query connection in PgBouncer | 2025-12-06T11:44:20.875Z | 2025-12-28T12:07:40.562Z |
| bit-mongodb-2025-13507 | Time-series operations may cause internal BSON size limit to be exceed | 2025-12-06T11:42:49.537Z | 2025-12-06T12:06:23.267Z |
| bit-mongodb-2025-12893 | Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server | 2025-12-06T11:42:47.994Z | 2025-12-06T12:06:23.267Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-aj76138 | tar | 2026-01-30T14:58:52.957172Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-vf66781 | Within HostnameError | 2026-01-30T14:57:22.763452Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-kv78041 | processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input | 2026-01-30T14:56:23.125184Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ez55127 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:54:23.021613Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ew68942 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:53:53.713652Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-kf66928 | Within HostnameError | 2026-01-30T14:53:23.030035Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-dd39330 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:53:22.793144Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ld23143 | Cancelling a query (e | 2026-01-30T14:52:52.766441Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-fr57243 | Cancelling a query (e | 2026-01-30T14:52:52.746706Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nz19387 | Within HostnameError | 2026-01-30T14:52:23.218213Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ol60454 | Within HostnameError | 2026-01-30T14:52:23.086717Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-il55587 | Cancelling a query (e | 2026-01-30T14:51:52.694658Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-cb20757 | Cancelling a query (e | 2026-01-30T14:51:22.636956Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ia26094 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:51:22.634752Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-do68350 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:50:22.886394Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ph90623 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:49:52.682724Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-xo66167 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:49:52.662006Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mi26039 | Within HostnameError | 2026-01-30T14:49:22.768843Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gn47077 | Within HostnameError | 2026-01-30T14:48:53.159123Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-uu20906 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:48:52.774829Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-kc01126 | tar | 2026-01-30T14:48:22.721160Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oo14630 | tar | 2026-01-30T14:47:23.043882Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hy43775 | Within HostnameError | 2026-01-30T14:46:52.607713Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-uy85485 | Within HostnameError | 2026-01-30T14:45:52.628542Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ol25917 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:44:22.881508Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-rb28539 | Within HostnameError | 2026-01-30T14:43:52.571458Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-bx37171 | Redis is an open source, in-memory database that persists on disk | 2026-01-30T14:43:22.549529Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gv62494 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:41:53.003431Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-di05920 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:41:22.824254Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-kz63902 | tar | 2026-01-30T14:41:22.559595Z | 2026-01-29T18:58:54Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0932 | Multiples vulnérabilités dans Liferay | 2025-10-28T00:00:00.000000 | 2025-10-28T00:00:00.000000 |
| certfr-2025-avi-0931 | Vulnérabilité dans StrongSwan | 2025-10-28T00:00:00.000000 | 2025-10-28T00:00:00.000000 |
| certfr-2025-avi-0930 | Vulnérabilité dans Microsoft Windows Server Update Service | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0929 | Vulnérabilité dans le client VPN de TheGreenBow | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0928 | Vulnérabilité dans Microsoft Configuration Manager | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0927 | Vulnérabilité dans Xen | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0926 | Vulnérabilité dans le pilote ODBC de MongoDB | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0925 | Vulnérabilité dans les produits Belden | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0924 | Multiples vulnérabilités dans les produits IBM | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0923 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0922 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0921 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0920 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0919 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0918 | Multiples vulnérabilités dans Liferay | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0917 | Multiples vulnérabilités dans les produits Moxa | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0916 | Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0915 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0914 | Multiples vulnérabilités dans les produits Centreon | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0913 | Multiples vulnérabilités dans ISC BIND | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0912 | Vulnérabilité dans SolarWinds Observability | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0911 | Multiples vulnérabilités dans Oracle Weblogic | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0910 | Multiples vulnérabilités dans Oracle Virtualization | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0909 | Multiples vulnérabilités dans Oracle Systems | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0908 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0907 | Multiples vulnérabilités dans Oracle MySQL | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0906 | Multiples vulnérabilités dans Oracle Java SE | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0905 | Multiples vulnérabilités dans Oracle Database Server | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0904 | Multiples vulnérabilités dans GitLab | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0903 | Multiples vulnérabilités dans les produits Atlassian | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000004 | pgAdmin 4 vulnerable to open redirect | 2023-01-11T14:23+09:00 | 2023-01-11T14:23+09:00 |
| jvndb-2023-000002 | Digital Arts m-FILTER vulnerable to improper authentication | 2023-01-06T14:57+09:00 | 2023-01-06T14:57+09:00 |
| jvndb-2023-000001 | Multiple code injection vulnerabilities in ruby-git | 2023-01-05T15:51+09:00 | 2023-01-05T15:51+09:00 |
| jvndb-2022-002838 | Multiple vulnerabilities in Fuji Electric V-Server | 2023-01-04T14:21+09:00 | 2023-01-04T14:21+09:00 |
| jvndb-2022-002837 | Multiple vulnerabilities in Fuji Electric V-SFT and TELLUS | 2023-01-04T14:16+09:00 | 2023-01-04T14:16+09:00 |
| jvndb-2022-002836 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-12-26T16:21+09:00 | 2024-05-30T17:47+09:00 |
| jvndb-2022-000102 | Installers generated by Squirrel.Windows may insecurely load Dynamic Link Libraries | 2022-12-21T14:23+09:00 | 2022-12-21T14:23+09:00 |
| jvndb-2022-000101 | +Message App improper handling of Unicode control characters | 2022-12-21T14:13+09:00 | 2022-12-21T14:13+09:00 |
| jvndb-2022-002783 | Use-after-free vulnerability in Omron CX-Drive | 2022-12-20T15:32+09:00 | 2022-12-20T15:32+09:00 |
| jvndb-2022-002780 | Command injection vulnerability in SHARP Multifunctional Products (MFP) | 2022-12-20T12:12+09:00 | 2022-12-20T12:12+09:00 |
| jvndb-2022-000099 | Corel Roxio Creator LJB starts a program with an unquoted file path | 2022-12-19T13:47+09:00 | 2022-12-19T13:47+09:00 |
| jvndb-2022-000098 | Zenphoto vulnerable to cross-site scripting | 2022-12-19T13:39+09:00 | 2022-12-19T13:39+09:00 |
| jvndb-2022-002779 | Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) | 2022-12-16T13:29+09:00 | 2023-01-11T16:55+09:00 |
| jvndb-2022-000097 | Multiple vulnerabilities in DENSHI NYUSATSU CORE SYSTEM | 2022-12-15T15:18+09:00 | 2024-05-29T17:40+09:00 |
| jvndb-2022-000096 | Redmine vulnerable to cross-site scripting | 2022-12-13T14:05+09:00 | 2024-06-03T16:47+09:00 |
| jvndb-2022-002775 | Multiple vulnerabilities in Buffalo network devices | 2022-12-12T15:28+09:00 | 2024-02-14T15:45+09:00 |
| jvndb-2022-002771 | Information Exposure Vulnerability in JP1/Automatic Operation | 2022-12-07T17:30+09:00 | 2022-12-07T17:30+09:00 |
| jvndb-2022-002770 | Contec SolarView Compact vulnerable to cross-site scripting | 2022-12-06T15:08+09:00 | 2024-06-04T17:13+09:00 |
| jvndb-2022-002768 | Multiple vulnerabilities in UNIMO Technology digital video recorders | 2022-12-02T14:57+09:00 | 2024-06-03T16:55+09:00 |
| jvndb-2022-002765 | Multiple vulnerabilities in OMRON CX-Programmer | 2022-11-28T15:40+09:00 | 2024-04-05T18:15+09:00 |
| jvndb-2022-000095 | Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption | 2022-11-25T14:15+09:00 | 2024-06-03T16:08+09:00 |
| jvndb-2022-000094 | Multiple cross-site scripting vulnerabilities in baserCMS | 2022-11-25T13:42+09:00 | 2024-05-31T18:17+09:00 |
| jvndb-2022-000093 | TP-Link RE300 V1 tdpServer vulnerable to improper processing of its input | 2022-11-24T14:46+09:00 | 2024-06-03T16:41+09:00 |
| jvndb-2022-002761 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-11-21T18:25+09:00 | 2024-05-31T17:43+09:00 |
| jvndb-2022-000092 | Typora fails to properly neutralize JavaScript code. | 2022-11-21T15:31+09:00 | 2024-06-03T15:13+09:00 |
| jvndb-2022-000091 | WordPress Plugin "WordPress Popular Posts" accepts untrusted external inputs to update certain internal variables | 2022-11-18T15:14+09:00 | 2022-11-18T15:14+09:00 |
| jvndb-2022-000089 | RICOH Aficio SP 4210N vulnerable to cross-site scripting | 2022-11-17T11:15+09:00 | 2022-11-17T11:15+09:00 |
| jvndb-2022-000090 | Multiple vulnerabilities in Movable Type | 2022-11-16T17:07+09:00 | 2024-06-03T15:31+09:00 |
| jvndb-2022-000088 | TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) vulnerable to ClassLoader manipulation | 2022-11-14T16:45+09:00 | 2024-06-06T16:11+09:00 |
| jvndb-2022-000086 | Aiphone Video Multi-Tenant System Entrance Stations vulnerable to information disclosure | 2022-11-10T13:40+09:00 | 2024-06-06T17:37+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-12700 | Adobe Substance 3D Stager存在越界读取漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12699 | Adobe Substance 3D Stager存在越界读取漏洞(CNVD-2026-12699) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12698 | Adobe Substance 3D Stager存在越界写入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12697 | Adobe Substance 3D Stager存在越界写入漏洞(CNVD-2026-12697) | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12696 | Adobe InDesign Desktop存在越界读取漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12694 | Adobe After Effects 25.6及之前版本存在内存释放后使用漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12693 | Adobe After Effects存在越界写入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12691 | Adobe After Effects存在越界写入漏洞(CNVD-2026-12691) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12690 | Adobe After Effects存在越界读取漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12689 | Adobe After Effects存在越界读取漏洞(CNVD-2026-12689) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12688 | Adobe After Effects存在越界读取漏洞(CNVD-2026-12688) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12668 | IBM webMethods Integration Server存在HTML注入漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12667 | IBM Sterling B2B Integrator和IBM Sterling File Gateway存在信息泄露漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12666 | IBM MQ Operator和IBM‑supplied MQ Advanced container images存在日志注入漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12665 | IBM Db2存在拒绝服务漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12664 | IBM Db2存在XML外部实体注入漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12663 | IBM Concert存在弱密码算法漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12560 | Microsoft Windows资源管理错误漏洞(CNVD-2026-12560) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12559 | Microsoft Windows Notepad命令注入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12558 | Microsoft Windows Kernel竞争条件漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12557 | Microsoft Outlook信息泄露漏洞(CNVD-2026-12557) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12556 | Microsoft Hyper-V缓冲区溢出漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12555 | Microsoft Hyper-V访问控制错误漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12554 | Microsoft GitHub Copilot for JetBrains命令注入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12553 | Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12553) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12552 | Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12552) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-13786 | IBM Concert信息泄露漏洞(CNVD-2026-13786) | 2026-02-28 | 2026-03-16 |
| cnvd-2026-13785 | IBM Concert跨站脚本漏洞(CNVD-2026-13785) | 2026-02-28 | 2026-03-16 |
| cnvd-2026-12893 | Apache Superset输入验证漏洞 | 2026-02-27 | 2026-03-04 |
| cnvd-2026-15863 | Advantech WISE-6610操作系统命令注入漏洞 | 2026-02-25 | 2026-04-02 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-00976 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab CE/EE… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00975 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab CE/EE… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00974 | Уязвимость функции readGGUFV1String() системы запуска и управления большими языковыми мод… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00973 | Уязвимость файла templates/logging_macros.vm платформы создания совместных веб-приложений… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00972 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00971 | Уязвимость механизма резервирования конфигурационных данных платформы виртуализации zVirt… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00970 | Уязвимость компонента Layout: Scrolling and Overflow браузера Mozilla Firefox, позволяюща… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00969 | Уязвимость компонента Privacy: Anti-Tracking браузера Mozilla Firefox, позволяющая наруши… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00968 | Уязвимость системы аутентификации платформы виртуализации zVirt, позволяющая нарушителю п… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00967 | Уязвимость платформы виртуализации zVirt, связанная с непринятием мер по защите структуры… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00966 | Уязвимость прикладного программного интерфейса платформы виртуализации zVirt, позволяющая… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00965 | Уязвимость прикладного программного интерфейса платформы виртуализации zVirt, позволяющая… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00964 | Уязвимость программного интерфейса Background Fetch API браузера Google Chrome, позволяющ… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00963 | Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с чрезмерно… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00962 | Уязвимость сервера XRDP, связанная с выходом операции за границы буфера в памяти, позволя… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00961 | Уязвимость механизма Policy Wizard (/wiz_policy_3_machine.php) веб-интерфейса управления … | 30.01.2026 | 30.01.2026 |
| bdu:2026-00960 | Уязвимость библиотеки jabsorb сервлета AjaxProxy программного обеспечения управления ИТ-и… | 30.01.2026 | 04.02.2026 |
| bdu:2026-00959 | Уязвимость механизма вычисления выражений платформы для автоматизации рабочих процессов n… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00958 | Уязвимость менеджера пакетов pnpm, связанная с неверным ограничением имени пути к каталог… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00957 | Уязвимость сценариев fetching/binary-fetcher/src/index.ts и resolving/resolver-base/src/i… | 30.01.2026 | 30.01.2026 |
| bdu:2026-00956 | Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с переполне… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00955 | Уязвимость реализации протокола DCERPC системы обнаружения и предотвращения вторжений Sur… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00954 | Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с чрезмерно… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00953 | Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с неогранич… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00952 | Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с неконтрол… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00951 | Уязвимость функции CloudACMunualUpdateUserdata() сценария /cgi-bin/cstecgi.cgi микропрогр… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00950 | Уязвимость функции formSetMacFilterCfg() микропрограммного обеспечения маршрутизаторов Te… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00949 | Уязвимость функции sub_72290() микропрограммного обеспечения маршрутизаторов Tenda AX-180… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00948 | Уязвимость функции formSetWifiMacFilterCfg() микропрограммного обеспечения маршрутизаторо… | 29.01.2026 | 29.01.2026 |
| bdu:2026-00947 | Уязвимость функции form_fast_setting_wifi_set() микропрограммного обеспечения маршрутизат… | 29.01.2026 | 29.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-202602-3961 | A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated,… | 2026-03-09T23:40:28.074000Z |
| var-201908-0863 | Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE… | 2026-03-09T23:39:31.301000Z |
| var-202603-0585 | Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the… | 2026-03-09T23:39:15.050000Z |
| var-202603-0426 | A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC1… | 2026-03-09T23:37:26.870000Z |
| var-202603-0927 | This vulnerability allows network-adjacent attackers to bypass authentication on affected… | 2026-03-09T23:33:24.163000Z |
| var-202001-0784 | Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network … | 2026-03-09T23:28:03.805000Z |
| var-202503-4044 | Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission… | 2026-03-09T23:26:01.522000Z |
| var-201712-0268 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari be… | 2026-03-09T23:25:59.925000Z |
| var-202204-0596 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle … | 2026-03-09T23:25:59.837000Z |
| var-201211-0366 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2026-03-09T23:25:56.389000Z |
| var-201503-0055 | The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 befor… | 2026-03-09T23:25:56.069000Z |
| var-201108-0183 | Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … | 2026-03-09T23:25:55.642000Z |
| var-202102-1093 | An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The functio… | 2026-03-09T23:25:51.226000Z |
| var-201904-1475 | A memory consumption issue was addressed with improved memory handling. This issue affect… | 2026-03-09T23:25:50.979000Z |
| var-201310-0613 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… | 2026-03-09T23:25:50.822000Z |
| var-201809-1153 | The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rat… | 2026-03-09T23:25:48.354000Z |
| var-202005-0397 | json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file… | 2026-03-09T23:25:40.415000Z |
| var-201302-0239 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T23:25:35.925000Z |
| var-201904-1406 | A use after free issue was addressed with improved memory management. This issue affected… | 2026-03-09T23:25:32.826000Z |
| var-200708-0612 | The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when us… | 2026-03-09T23:25:31.724000Z |
| var-201904-0347 | In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize… | 2026-03-09T23:24:28.015000Z |
| var-200611-0471 | Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a … | 2026-03-09T23:22:16.486000Z |
| var-200909-0399 | The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass inte… | 2026-03-09T23:22:15.623000Z |
| var-200110-0176 | Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox … | 2026-03-09T23:21:33.133000Z |
| var-201904-1362 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T23:21:26.686000Z |
| var-200704-0229 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allo… | 2026-03-09T23:21:24.658000Z |
| var-200505-0311 | Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows lo… | 2026-03-09T23:21:22.603000Z |
| var-201008-0170 | Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before… | 2026-03-09T23:21:22.528000Z |
| var-202205-1314 | A memory corruption issue was addressed with improved state management. This issue is fix… | 2026-03-09T23:21:21.713000Z |
| var-201302-0332 | The TLS implementation in Mozilla Network Security Services (NSS) does not properly consi… | 2026-03-09T23:21:19.394000Z |