Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-3057
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
a54552239 pearProjectApi Backend Task.php dateTotalFor… a54552239
pearProjectApi
2026-02-24T02:02:08.977Z 2026-02-24T20:42:56.315Z
CVE-2026-3054
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
Alinto SOGo cross site scripting Alinto
SOGo
2026-02-24T02:02:06.992Z 2026-02-24T20:45:48.226Z
CVE-2026-26983
5.3 (3.1)
ImageMagick: Invalid MSL <map> can result in a use aft… ImageMagick
ImageMagick
2026-02-24T02:01:20.113Z 2026-02-28T02:09:53.161Z
CVE-2026-26284
6.5 (3.1)
ImageMagick has heap overflow in pcd decoder that lead… ImageMagick
ImageMagick
2026-02-24T02:00:19.417Z 2026-02-24T20:46:56.730Z
CVE-2026-26283
6.2 (3.1)
ImageMagick has possible infinite loop in JPEG encoder… ImageMagick
ImageMagick
2026-02-24T01:55:59.350Z 2026-02-24T20:47:41.990Z
CVE-2026-26066
6.2 (3.1)
ImageMagick has infinite loop when writing IPTCTEXT le… ImageMagick
ImageMagick
2026-02-24T01:52:30.870Z 2026-02-26T21:33:40.181Z
CVE-2026-25989
7.5 (3.1)
ImageMagick has integer overflow or wraparound and inc… ImageMagick
ImageMagick
2026-02-24T01:50:12.995Z 2026-02-28T02:09:11.388Z
CVE-2026-25988
5.3 (3.1)
ImageMagick's MSL image stack index not refreshed, lea… ImageMagick
ImageMagick
2026-02-24T01:48:29.928Z 2026-02-28T02:08:29.771Z
CVE-2026-25987
5.3 (3.1)
ImageMagick has heap buffer over-read in MAP image decoder ImageMagick
ImageMagick
2026-02-24T01:46:24.519Z 2026-02-28T02:07:42.005Z
CVE-2026-25986
5.3 (3.1)
ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder ImageMagick
ImageMagick
2026-02-24T01:44:34.711Z 2026-02-28T02:06:51.578Z
CVE-2026-25985
7.5 (3.1)
Memory allocation with excessive without limits in the… ImageMagick
ImageMagick
2026-02-24T01:43:07.076Z 2026-02-28T02:05:55.678Z
CVE-2026-25983
5.3 (3.1)
ImageMagick has Use After Free in MSLStartElement in "… ImageMagick
ImageMagick
2026-02-24T01:41:45.480Z 2026-02-28T02:04:51.222Z
CVE-2026-25982
6.5 (3.1)
ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder… ImageMagick
ImageMagick
2026-02-24T01:40:45.433Z 2026-02-28T02:03:58.629Z
CVE-2026-25971
6.2 (3.1)
ImageMagick's MSL: Stack overflow in ProcessMSLScript ImageMagick
ImageMagick
2026-02-24T01:39:21.685Z 2026-02-26T21:33:39.136Z
CVE-2025-11846
4.9 (3.1)
A null pointer dereference vulnerability in the a… Zyxel
VMG3625-T50B firmware
2026-02-24T01:37:57.257Z 2026-02-24T16:09:10.139Z
CVE-2026-25970
5.3 (3.1)
ImageMagick SIXEL Decoder Has Signed Integer Overflow,… ImageMagick
ImageMagick
2026-02-24T01:35:36.727Z 2026-02-26T21:33:39.346Z
CVE-2026-25969
5.3 (3.1)
ImageMagick has Memory Leak in coders/ashlar.c ImageMagick
ImageMagick
2026-02-24T01:33:00.362Z 2026-02-26T21:33:39.566Z
CVE-2026-3053
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
DataLinkDC dinky OpenAPI Endpoint AppConfig.java addIn… DataLinkDC
dinky
2026-02-24T01:32:10.910Z 2026-02-28T02:02:58.301Z
CVE-2026-3052
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
DataLinkDC dinky Flink Proxy Controller FlinkProxyCont… DataLinkDC
dinky
2026-02-24T01:32:08.595Z 2026-02-28T02:01:53.907Z
CVE-2026-25968
7.4 (3.1)
ImageMagick has MSL attribute stack buffer overflow th… ImageMagick
ImageMagick
2026-02-24T01:30:58.881Z 2026-02-26T21:33:39.723Z
CVE-2025-11845
4.9 (3.1)
A null pointer dereference vulnerability in the c… Zyxel
VMG3625-T50B firmware
2026-02-24T01:30:50.433Z 2026-02-24T16:12:02.942Z
CVE-2026-25967
7.4 (3.1)
ImageMagick has stack buffer overflow in FTXT reader v… ImageMagick
ImageMagick
2026-02-24T01:29:44.758Z 2026-02-26T21:33:39.865Z
CVE-2026-25966
5.9 (3.1)
ImageMagick's Security Policy Bypass through config/po… ImageMagick
ImageMagick
2026-02-24T01:27:53.943Z 2026-02-26T21:33:40.025Z
CVE-2026-25965
8.6 (3.1)
ImageMagick's policy bypass through path traversal all… ImageMagick
ImageMagick
2026-02-24T01:20:44.175Z 2026-02-26T15:29:36.814Z
CVE-2026-25898
6.5 (3.1)
Imagemagick Has Global Buffer Overflow (OOB Read) via … ImageMagick
ImageMagick
2026-02-24T01:18:33.031Z 2026-02-26T15:26:43.363Z
CVE-2026-25897
6.5 (3.1)
ImageMagick has heap overflow in sun decoder on 32-bit… ImageMagick
ImageMagick
2026-02-24T01:16:15.438Z 2026-02-26T15:24:12.905Z
CVE-2026-25799
5.3 (3.1)
ImageMagick has Division-by-Zero in YUV sampling facto… ImageMagick
ImageMagick
2026-02-24T01:05:39.405Z 2026-02-26T15:22:25.612Z
CVE-2026-25798
5.3 (3.1)
ImageMagick has NULL Pointer Dereference in ClonePixel… ImageMagick
ImageMagick
2026-02-24T01:02:30.911Z 2026-02-26T15:21:20.797Z
CVE-2026-3051
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
DataLinkDC dinky Project Name GitRepository.java getPr… DataLinkDC
dinky
2026-02-24T01:02:11.539Z 2026-02-26T15:17:31.925Z
CVE-2026-3050
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
horilla-opensource horilla Leads global.js cross site … horilla-opensource
horilla
2026-02-24T01:02:09.321Z 2026-02-26T15:15:35.848Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-3067
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
HummerRisk Archive Extraction CommandUtils.java extrac… n/a
HummerRisk
2026-02-24T03:32:07.867Z 2026-02-24T18:47:21.803Z
CVE-2026-3066
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
HummerRisk Cloud Compliance Scanning PlatformUtils.jav… n/a
HummerRisk
2026-02-24T03:02:07.364Z 2026-02-24T18:55:12.566Z
CVE-2026-27461
6.9 (4.0)
Pimcore vulnerable to SQL injection via unsanitized fi… pimcore
pimcore
2026-02-24T02:50:48.287Z 2026-02-24T18:58:07.625Z
CVE-2026-3091
6.7 (3.1)
An uncontrolled search path element vulnerability… Synology
Synology Presto Client
2026-02-24T02:31:20.298Z 2026-02-24T20:48:54.091Z
CVE-2026-3065
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
HummerRisk Cloud Task Dry-run CloudTaskService.java Co… n/a
HummerRisk
2026-02-24T02:32:10.391Z 2026-02-28T02:11:08.525Z
CVE-2026-3064
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
HummerRisk Cloud Task Scheduler ResourceCreateService.… n/a
HummerRisk
2026-02-24T02:32:08.524Z 2026-02-24T19:30:05.511Z
CVE-2026-3057
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
a54552239 pearProjectApi Backend Task.php dateTotalFor… a54552239
pearProjectApi
2026-02-24T02:02:08.977Z 2026-02-24T20:42:56.315Z
CVE-2026-3054
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
Alinto SOGo cross site scripting Alinto
SOGo
2026-02-24T02:02:06.992Z 2026-02-24T20:45:48.226Z
CVE-2026-27129
5.7 (4.0)
Cloud Metadata SSRF Protection Bypass via IPv6 Resolution craftcms
cms
2026-02-24T02:45:45.494Z 2026-02-28T02:17:18.957Z
CVE-2026-27128
6.9 (4.0)
Craft CMS's race condition in Token Service potentiall… craftcms
cms
2026-02-24T02:42:53.706Z 2026-02-28T02:13:48.422Z
CVE-2026-27127
7 (4.0)
Craft CMS has Cloud Metadata SSRF Protection Bypass vi… craftcms
cms
2026-02-24T02:39:44.569Z 2026-02-28T02:12:36.723Z
CVE-2026-27126
5.9 (4.0)
Craft CMS has Stored XSS in Table Field via "HTML" Col… craftcms
cms
2026-02-24T02:30:04.882Z 2026-02-24T19:35:38.348Z
CVE-2026-26983
5.3 (3.1)
ImageMagick: Invalid MSL <map> can result in a use aft… ImageMagick
ImageMagick
2026-02-24T02:01:20.113Z 2026-02-28T02:09:53.161Z
CVE-2026-26981
6.5 (3.1)
OpenEXR has heap-buffer-overflow via signed integer un… AcademySoftwareFoundation
openexr
2026-02-24T02:26:16.659Z 2026-02-24T20:03:54.667Z
CVE-2026-26331
8.8 (3.1)
yt-dlp: Arbitrary Command Injection when using the `--… yt-dlp
yt-dlp
2026-02-24T02:23:40.858Z 2026-02-24T20:08:47.720Z
CVE-2026-26284
6.5 (3.1)
ImageMagick has heap overflow in pcd decoder that lead… ImageMagick
ImageMagick
2026-02-24T02:00:19.417Z 2026-02-24T20:46:56.730Z
CVE-2026-26283
6.2 (3.1)
ImageMagick has possible infinite loop in JPEG encoder… ImageMagick
ImageMagick
2026-02-24T01:55:59.350Z 2026-02-24T20:47:41.990Z
CVE-2026-26198
9.8 (3.1)
ormar is vulnerable to SQL Injection through aggregate… collerek
ormar
2026-02-24T02:03:47.094Z 2026-02-24T20:35:44.673Z
CVE-2026-26066
6.2 (3.1)
ImageMagick has infinite loop when writing IPTCTEXT le… ImageMagick
ImageMagick
2026-02-24T01:52:30.870Z 2026-02-26T21:33:40.181Z
CVE-2026-25989
7.5 (3.1)
ImageMagick has integer overflow or wraparound and inc… ImageMagick
ImageMagick
2026-02-24T01:50:12.995Z 2026-02-28T02:09:11.388Z
CVE-2026-1459
7.2 (3.1)
A post-authentication command injection vulnerabi… Zyxel
VMG3625-T50B firmware
2026-02-24T02:48:35.439Z 2026-02-26T14:44:10.011Z
CVE-2025-13943
8.8 (3.1)
A post-authentication command injection vulnerabi… Zyxel
EX3301-T0 firmware
2026-02-24T02:38:05.388Z 2026-02-26T14:44:10.178Z
CVE-2025-13942
9.8 (3.1)
A command injection vulnerability in the UPnP fun… Zyxel
EX3510-B0 firmware
2026-02-24T02:32:18.934Z 2026-02-26T14:44:10.318Z
CVE-2025-11848
4.9 (3.1)
A null pointer dereference vulnerability in the W… Zyxel
VMG3625-T50B firmware
2026-02-24T02:14:18.688Z 2026-02-24T20:25:28.725Z
CVE-2025-11847
4.9 (3.1)
A null pointer dereference vulnerability in the I… Zyxel
VMG3625-T50B firmware
2026-02-24T02:09:44.684Z 2026-02-24T20:27:08.473Z
CVE-2026-3053
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
DataLinkDC dinky OpenAPI Endpoint AppConfig.java addIn… DataLinkDC
dinky
2026-02-24T01:32:10.910Z 2026-02-28T02:02:58.301Z
CVE-2026-3052
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
DataLinkDC dinky Flink Proxy Controller FlinkProxyCont… DataLinkDC
dinky
2026-02-24T01:32:08.595Z 2026-02-28T02:01:53.907Z
CVE-2026-25988
5.3 (3.1)
ImageMagick's MSL image stack index not refreshed, lea… ImageMagick
ImageMagick
2026-02-24T01:48:29.928Z 2026-02-28T02:08:29.771Z
CVE-2026-25987
5.3 (3.1)
ImageMagick has heap buffer over-read in MAP image decoder ImageMagick
ImageMagick
2026-02-24T01:46:24.519Z 2026-02-28T02:07:42.005Z
CVE-2026-25986
5.3 (3.1)
ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder ImageMagick
ImageMagick
2026-02-24T01:44:34.711Z 2026-02-28T02:06:51.578Z
ID Severity Description Published Updated
ghsa-m87m-887p-w3r5
8.8 (3.1)
7.4 (4.0)
A flaw has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4237AC of the file … 2026-02-22T06:30:17Z 2026-02-22T06:30:17Z
ghsa-f565-6pjw-3whr
4.3 (3.1)
The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirec… 2026-02-22T06:30:17Z 2026-02-23T21:31:25Z
ghsa-c8cm-m492-rqr8
8.8 (3.1)
7.4 (4.0)
A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function … 2026-02-22T06:30:17Z 2026-02-22T06:30:17Z
ghsa-c324-4x25-3fp3
8.8 (3.1)
7.4 (4.0)
A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_453140 of t… 2026-02-22T06:30:17Z 2026-02-22T06:30:17Z
ghsa-qf2x-h525-fc86
8.8 (3.1)
7.4 (4.0)
A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown proces… 2026-02-22T06:30:16Z 2026-02-22T06:30:16Z
ghsa-fxq4-96xx-h92h
8.8 (3.1)
7.4 (4.0)
A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /… 2026-02-22T06:30:16Z 2026-02-22T06:30:16Z
ghsa-2hp3-cccc-h69r
8.8 (3.1)
7.4 (4.0)
A security flaw has been discovered in Tenda HG9 300001138. Affected is an unknown function of the … 2026-02-22T03:30:27Z 2026-02-22T03:30:27Z
ghsa-rfh7-7v27-6p9r
2.4 (3.1)
1.9 (4.0)
funadmin: XSS through Value argument in Backend Interface component 2026-02-22T03:30:26Z 2026-02-26T15:33:00Z
ghsa-jgr4-277v-42mv
8.8 (3.1)
7.4 (4.0)
A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown… 2026-02-22T03:30:26Z 2026-02-22T03:30:27Z
ghsa-jcjg-5j5x-r2hc
8.8 (3.1)
7.4 (4.0)
A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the function strcpy of … 2026-02-22T03:30:26Z 2026-02-22T03:30:26Z
ghsa-gcxp-xg77-798j
5.5 (3.1)
2.0 (4.0)
funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function 2026-02-22T03:30:26Z 2026-02-26T15:32:52Z
ghsa-8pgv-26pm-rgm8
8.8 (3.1)
7.4 (4.0)
A vulnerability was detected in Tenda HG9 300001138. This affects an unknown part of the file /boaf… 2026-02-22T03:30:26Z 2026-02-22T03:30:26Z
ghsa-83cp-rj94-v2g2
8.8 (3.1)
7.4 (4.0)
A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file… 2026-02-22T03:30:26Z 2026-02-22T03:30:26Z
ghsa-7948-p5vf-r2m4
3.3 (3.1)
1.9 (4.0)
A flaw has been found in skvadrik re2c up to 4.4. Impacted is the function check_and_merge_special_… 2026-02-22T03:30:26Z 2026-02-22T03:30:26Z
ghsa-2665-m8rg-c7xp
8.8 (3.1)
7.4 (4.0)
A security vulnerability has been detected in Tenda HG9 300001138. Affected by this issue is some u… 2026-02-22T03:30:26Z 2026-02-22T03:30:26Z
ghsa-pc25-pwr8-gpp2
3.3 (3.1)
1.9 (4.0)
A vulnerability was detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in th… 2026-02-22T00:31:01Z 2026-02-22T00:31:01Z
ghsa-fmr2-m7gc-577w
3.7 (3.1)
2.9 (4.0)
funadmin has Weak Password Recovery Mechanism for Forgotten Password 2026-02-22T00:31:01Z 2026-02-26T15:31:41Z
ghsa-8hhx-xq9j-xwfj
5.3 (3.1)
5.5 (4.0)
funadmin exposes sensitive information via getMember function 2026-02-22T00:31:01Z 2026-02-26T15:31:24Z
ghsa-5m2g-4cf6-c3rg
7.3 (3.1)
5.5 (4.0)
funadmin has Incorrect Privilege Assignment in its Configuration Handler 2026-02-22T00:31:01Z 2026-02-26T15:31:55Z
ghsa-w4gp-396m-45pm
8.8 (3.1)
7.4 (4.0)
A vulnerability was identified in D-Link DWR-M960 1.01.07. The affected element is the function sub… 2026-02-21T21:30:27Z 2026-02-21T21:30:27Z
ghsa-vgp4-r46f-r9x7
8.8 (3.1)
7.4 (4.0)
A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_427D74 of t… 2026-02-21T21:30:27Z 2026-02-21T21:30:27Z
ghsa-v43p-pv9w-gqmf
3.3 (3.1)
1.9 (4.0)
A security vulnerability has been detected in aardappel lobster up to 2025.4. This impacts the func… 2026-02-21T21:30:27Z 2026-02-21T21:30:27Z
ghsa-q2r4-399v-qv3c
8.8 (3.1)
7.4 (4.0)
A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function … 2026-02-21T21:30:27Z 2026-02-21T21:30:27Z
ghsa-mr72-9cxv-g662
8.8 (3.1)
7.4 (4.0)
A weakness has been identified in Tenda A21 1.0.0.0. This affects the function set_device_name of t… 2026-02-21T21:30:27Z 2026-02-21T21:30:27Z
ghsa-9j32-rfj4-grgw
8.8 (3.1)
7.4 (4.0)
A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_46385C of… 2026-02-21T21:30:27Z 2026-02-21T21:30:27Z
ghsa-7597-723j-pwr9
8.8 (3.1)
7.4 (4.0)
A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the functio… 2026-02-21T21:30:27Z 2026-02-21T21:30:27Z
ghsa-69vg-2v33-6p2v
8.8 (3.1)
7.4 (4.0)
A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the fi… 2026-02-21T21:30:27Z 2026-02-21T21:30:27Z
ghsa-pg46-g938-p94j
8.8 (3.1)
7.4 (4.0)
A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parse_macfilter_… 2026-02-21T18:31:16Z 2026-02-21T18:31:16Z
ghsa-mq2p-gcxf-x8gf
8.8 (3.1)
7.4 (4.0)
A flaw has been found in Tenda A21 1.0.0.0. Impacted is the function form_fast_setting_wifi_set of … 2026-02-21T18:31:16Z 2026-02-21T18:31:16Z
ghsa-73gf-5w78-3r4q
8.8 (3.1)
7.4 (4.0)
A weakness has been identified in Tenda A21 1.0.0.0. This affects the function fromSetIpMacBind of … 2026-02-21T18:31:16Z 2026-02-21T18:31:16Z
ID Severity Description Package Published Updated
pysec-2022-43099
9.8 (3.1)
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution back… democritus-file-system 2022-09-19T16:15:00Z 2024-11-21T14:22:43.616362Z
pysec-2022-43092
9.8 (3.1)
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backd… d8s-xml 2022-09-19T16:15:00Z 2024-11-21T14:22:43.200942Z
pysec-2022-43087
9.8 (3.1)
The d8s-strings for python, as distributed on PyPI, included a potential code-execution b… d8s-strings 2022-09-19T16:15:00Z 2024-11-21T14:22:42.944804Z
pysec-2022-43083
9.8 (3.1)
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… d8s-python 2022-09-19T16:15:00Z 2024-11-21T14:22:42.723606Z
pysec-2022-43080
9.8 (3.1)
The d8s-netstrings for python, as distributed on PyPI, included a potential code-executio… d8s-netstrings 2022-09-19T16:15:00Z 2024-11-21T14:22:42.556543Z
pysec-2022-43079
9.8 (3.1)
The d8s-math for python, as distributed on PyPI, included a potential code-execution back… d8s-math 2022-09-19T16:15:00Z 2024-11-21T14:22:42.499117Z
pysec-2022-43078
9.8 (3.1)
The d8s-json for python, as distributed on PyPI, included a potential code-execution back… d8s-json 2022-09-19T16:15:00Z 2024-11-21T14:22:42.439723Z
pysec-2022-43076
9.8 (3.1)
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution … d8s-grammars 2022-09-19T16:15:00Z 2024-11-21T14:22:42.333517Z
pysec-2022-43074
9.8 (3.1)
The d8s-archives for python, as distributed on PyPI, included a potential code-execution … d8s-archives 2022-09-19T16:15:00Z 2024-11-21T14:22:42.229096Z
pysec-2022-43113
9.8 (3.1)
The d8s-domains for python, as distributed on PyPI, included a potential code-execution b… democritus-networking 2022-09-19T15:15:00Z 2024-11-21T14:22:44.327837Z
pysec-2022-43110
9.8 (3.1)
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… democritus-networking 2022-09-19T15:15:00Z 2024-11-21T14:22:44.173987Z
pysec-2022-43105
9.8 (3.1)
The d8s-dates for python, as distributed on PyPI, included a potential code-execution bac… democritus-hypothesis 2022-09-19T15:15:00Z 2024-11-21T14:22:43.915613Z
pysec-2022-43104
9.8 (3.1)
The d8s-domains for python, as distributed on PyPI, included a potential code-execution b… democritus-hypothesis 2022-09-19T15:15:00Z 2024-11-21T14:22:43.865878Z
pysec-2022-43103
9.8 (3.1)
The d8s-uuids for python, as distributed on PyPI, included a potential code-execution bac… democritus-hypothesis 2022-09-19T15:15:00Z 2024-11-21T14:22:43.817031Z
pysec-2022-43102
9.8 (3.1)
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-executio… democritus-hypothesis 2022-09-19T15:15:00Z 2024-11-21T14:22:43.766564Z
pysec-2022-43098
9.8 (3.1)
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… democritus-file-system 2022-09-19T15:15:00Z 2024-11-21T14:22:43.564135Z
pysec-2022-43118
9.8 (3.1)
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… democritus-strings 2022-09-19T14:15:00Z 2024-11-21T14:22:44.584448Z
pysec-2022-281
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5. rdiffweb 2022-09-17T20:15:00Z 2022-09-21T10:45:56.877746Z
pysec-2022-278
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3. rdiffweb 2022-09-15T09:15:00Z 2022-09-18T05:55:21.035555Z
pysec-2022-267
OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by an vncap/vnc/protocol.py VN… vncauthproxy 2022-09-14T11:15:00Z 2022-09-14T13:29:43.279847Z
pysec-2022-43137
5.5 (3.1)
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the compone… lief 2022-09-13T21:15:00+00:00 2024-11-21T14:22:53.842904+00:00
pysec-2022-277
LIEF commit 365a16a was discovered to contain a segmentation violation via the component … lief 2022-09-13T21:15:00Z 2022-09-18T05:55:18.935822Z
pysec-2022-276
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function pri… lief 2022-09-13T21:15:00Z 2022-09-18T05:55:18.909680Z
pysec-2022-275
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function L… lief 2022-09-13T21:15:00Z 2022-09-18T05:55:18.884031Z
pysec-2022-274
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /co… lief 2022-09-13T21:15:00Z 2022-09-18T05:55:18.856467Z
pysec-2022-272
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. rdiffweb 2022-09-13T17:15:00Z 2022-09-15T20:40:19.575026Z
pysec-2022-273
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2. rdiffweb 2022-09-13T10:15:00Z 2022-09-15T22:37:42.206790Z
pysec-2022-271
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060… rdiffweb 2022-09-13T10:15:00Z 2022-09-15T20:40:19.500287Z
pysec-2022-269
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAut… oauthlib 2022-09-09T21:15:00Z 2022-09-15T06:38:55.424021Z
pysec-2022-270
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built f… indy-node 2022-09-09T19:15:00Z 2022-09-15T17:00:02.967935Z
ID Description Type
ID Description Updated
ID Description Published Updated
mal-2026-305 Malicious code in sd-ccp-module-client (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:28Z
mal-2026-304 Malicious code in sd-agent-toolbar-module-client (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:28Z
mal-2026-303 Malicious code in sd-active-conversation-module-client (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:28Z
mal-2026-302 Malicious code in s3-cache-handler (npm) 2026-01-16T00:10:24Z 2026-01-16T00:10:24Z
mal-2026-301 Malicious code in react-sitecore-library (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:28Z
mal-2026-300 Malicious code in presentation-test-utilities (npm) 2026-01-16T00:10:24Z 2026-01-21T04:35:15Z
mal-2026-299 Malicious code in origin_response_handler (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:28Z
mal-2026-298 Malicious code in omnicore-ds2-sdk2 (npm) 2026-01-16T00:10:24Z 2026-01-16T00:10:24Z
mal-2026-297 Malicious code in omnicore-ds2-sdk (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:28Z
mal-2026-296 Malicious code in nyse-web-tools-common (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:28Z
mal-2026-295 Malicious code in lusha-widgets (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-294 Malicious code in lusha-ui-components (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-293 Malicious code in lusha-micro-app-messages (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-292 Malicious code in lusha-integrations-widgets (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-291 Malicious code in lead-ion (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-290 Malicious code in kc-fe-cli (npm) 2026-01-16T00:10:24Z 2026-01-21T04:35:13Z
mal-2026-289 Malicious code in js-observability (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-288 Malicious code in insightvm-ui-nav-menus (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-287 Malicious code in idel2-content (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-286 Malicious code in forms-new-design (npm) 2026-01-16T00:10:24Z 2026-01-21T04:35:13Z
mal-2026-285 Malicious code in focus-trap-v2 (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:27Z
mal-2026-284 Malicious code in flag-v211 (npm) 2026-01-16T00:10:24Z 2026-01-16T00:10:24Z
mal-2026-283 Malicious code in flag-v21 (npm) 2026-01-16T00:10:24Z 2026-01-16T00:10:24Z
mal-2026-281 Malicious code in eniram-web-common-ui (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:26Z
mal-2026-280 Malicious code in dws-dx (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:26Z
mal-2026-279 Malicious code in dibels8-content (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:26Z
mal-2026-278 Malicious code in comstrap (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:26Z
mal-2026-277 Malicious code in cognito-auth-plugin (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:26Z
mal-2026-276 Malicious code in closure-net (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:26Z
mal-2026-275 Malicious code in chakra-ui-2--theme-tools (npm) 2026-01-16T00:10:24Z 2026-01-16T17:25:26Z
ID Description Published Updated
wid-sec-w-2025-2250 Liferay Portal: Schwachstelle ermöglicht Cross-Site Scripting 2025-10-09T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2249 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-09T22:00:00.000+00:00 2026-01-27T23:00:00.000+00:00
wid-sec-w-2025-2248 BigBlueButton: Mehrere Schwachstellen 2025-10-09T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2247 Nvidia GPU Display Treiber: Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2246 Linux Kernel: Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2245 Grafana Image Renderer Plugin: Schwachstelle ermöglicht Codeausführung 2025-10-08T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2244 Red Hat Satellite (cJSON, django, rexml): Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2243 Red Hat Enterprise Linux und Oracle Linux (iputils): Schwachstelle ermöglicht Denial of Service 2025-10-08T22:00:00.000+00:00 2025-11-16T23:00:00.000+00:00
wid-sec-w-2025-2242 Wireshark: Schwachstelle ermöglicht Denial of Service 2025-10-08T22:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2025-2241 binutils: Schwachstelle ermöglicht Denial of Service 2025-10-08T22:00:00.000+00:00 2025-12-15T23:00:00.000+00:00
wid-sec-w-2025-2240 Red Hat JBoss A-MQ: Schwachstelle ermöglicht Privilegieneskalation 2025-10-08T22:00:00.000+00:00 2025-10-22T22:00:00.000+00:00
wid-sec-w-2025-2239 Flowise: Schwachstelle ermöglicht Manipulation von Dateien und potenziell Codeausführung 2025-10-08T22:00:00.000+00:00 2025-10-12T22:00:00.000+00:00
wid-sec-w-2025-2238 Juniper JUNOS OS, Space, OS Evolved: Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2237 Palo Alto Networks PAN-OS: Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2236 GitLab: Mehrere Schwachstellen 2025-10-08T22:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2232 Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2025-10-08T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2231 Google Chrome/Microsoft Edge: Mehrere Schwachstellen 2025-10-07T22:00:00.000+00:00 2025-11-24T23:00:00.000+00:00
wid-sec-w-2025-2230 Python (CPython Zipfile Module): Schwachstelle ermöglicht Manipulation von Dateien 2025-10-07T22:00:00.000+00:00 2026-01-08T23:00:00.000+00:00
wid-sec-w-2025-2229 Linux Kernel: Mehrere Schwachstellen 2025-10-07T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2228 ESRI ArcGIS: Schwachstelle ermöglicht SQL injection 2025-10-07T22:00:00.000+00:00 2025-10-22T22:00:00.000+00:00
wid-sec-w-2025-2227 Golang Go: Mehrere Schwachstellen 2025-10-07T22:00:00.000+00:00 2026-02-23T23:00:00.000+00:00
wid-sec-w-2025-2226 binutils: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-07T22:00:00.000+00:00 2025-12-15T23:00:00.000+00:00
wid-sec-w-2025-2225 IBM InfoSphere Data Replication: Schwachstelle ermöglicht Codeausführung 2025-10-07T22:00:00.000+00:00 2025-10-07T22:00:00.000+00:00
wid-sec-w-2025-2224 Keycloak: Mehrere Schwachstellen 2025-10-07T22:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2223 Liferay Portal und DXP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2025-10-07T22:00:00.000+00:00 2025-10-08T22:00:00.000+00:00
wid-sec-w-2025-2222 xwiki: Schwachstelle ermöglicht HQL Injection 2025-10-06T22:00:00.000+00:00 2025-10-06T22:00:00.000+00:00
wid-sec-w-2025-2221 ILIAS: Mehrere Schwachstellen 2025-10-06T22:00:00.000+00:00 2025-10-06T22:00:00.000+00:00
wid-sec-w-2025-2219 Samsung Android: Mehrere Schwachstellen 2025-10-06T22:00:00.000+00:00 2025-10-12T22:00:00.000+00:00
wid-sec-w-2025-2218 Flowise: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-10-06T22:00:00.000+00:00 2025-10-09T22:00:00.000+00:00
wid-sec-w-2025-2217 Elasticsearch: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-06T22:00:00.000+00:00 2025-10-12T22:00:00.000+00:00
ID Description Published Updated
rhsa-2026:0023 Red Hat Security Advisory: thunderbird security update 2026-01-05T01:39:46+00:00 2026-01-06T12:45:56+00:00
rhsa-2026:0017 Red Hat Security Advisory: firefox security update 2026-01-05T01:39:11+00:00 2026-01-06T12:46:03+00:00
rhsa-2026:0014 Red Hat Security Advisory: firefox security update 2026-01-05T01:39:07+00:00 2026-01-06T12:46:02+00:00
rhsa-2026:0009 Red Hat Security Advisory: httpd:2.4 security update 2026-01-05T01:39:00+00:00 2026-01-13T22:09:27+00:00
rhsa-2026:0019 Red Hat Security Advisory: thunderbird security update 2026-01-05T01:38:55+00:00 2026-01-06T12:45:58+00:00
rhsa-2026:0018 Red Hat Security Advisory: firefox security update 2026-01-05T01:37:48+00:00 2026-01-06T12:46:03+00:00
rhsa-2026:0020 Red Hat Security Advisory: thunderbird security update 2026-01-05T01:37:22+00:00 2026-01-06T12:45:58+00:00
rhsa-2026:0007 Red Hat Security Advisory: firefox security update 2026-01-05T01:37:07+00:00 2026-01-06T12:46:01+00:00
rhsa-2026:0015 Red Hat Security Advisory: firefox security update 2026-01-05T01:36:47+00:00 2026-01-06T12:46:02+00:00
rhsa-2026:0025 Red Hat Security Advisory: thunderbird security update 2026-01-05T01:33:48+00:00 2026-01-06T12:43:14+00:00
rhsa-2026:0024 Red Hat Security Advisory: thunderbird security update 2026-01-05T01:32:27+00:00 2026-01-06T12:45:56+00:00
rhsa-2026:0008 Red Hat Security Advisory: brotli security update 2026-01-05T01:26:08+00:00 2026-02-17T09:27:07+00:00
rhsa-2026:0006 Red Hat Security Advisory: firefox security update 2026-01-05T01:23:27+00:00 2026-01-06T12:46:00+00:00
rhsa-2026:0005 Red Hat Security Advisory: firefox security update 2026-01-05T01:17:27+00:00 2026-01-06T12:46:00+00:00
rhsa-2026:0002 Red Hat Security Advisory: tar security update 2026-01-05T00:51:42+00:00 2026-02-03T20:56:50+00:00
rhsa-2026:0001 Red Hat Security Advisory: spice-client-win security update 2026-01-05T00:51:17+00:00 2026-02-10T16:53:20+00:00
rhsa-2025:23975 Red Hat Security Advisory: webkitgtk4 security update 2025-12-24T09:04:13+00:00 2026-01-19T19:12:07+00:00
rhsa-2025:23974 Red Hat Security Advisory: webkit2gtk3 security update 2025-12-24T09:01:38+00:00 2026-01-28T05:51:30+00:00
rhsa-2025:23972 Red Hat Security Advisory: webkit2gtk3 security update 2025-12-24T08:38:43+00:00 2026-01-28T05:51:29+00:00
rhsa-2025:23973 Red Hat Security Advisory: webkit2gtk3 security update 2025-12-24T08:19:08+00:00 2026-01-28T05:51:33+00:00
rhsa-2025:23971 Red Hat Security Advisory: webkit2gtk3 security update 2025-12-24T07:59:13+00:00 2026-01-28T05:51:29+00:00
rhsa-2025:23970 Red Hat Security Advisory: webkit2gtk3 security update 2025-12-24T07:55:33+00:00 2026-01-28T05:51:28+00:00
rhsa-2025:23969 Red Hat Security Advisory: webkit2gtk3 security update 2025-12-24T07:42:23+00:00 2026-01-28T05:51:28+00:00
rhsa-2025:23968 Red Hat Security Advisory: webkit2gtk3 security update 2025-12-24T07:39:38+00:00 2026-01-28T05:51:31+00:00
rhsa-2025:23967 Red Hat Security Advisory: webkit2gtk3 security update 2025-12-24T07:18:48+00:00 2026-01-28T05:51:31+00:00
rhsa-2025:23919 Red Hat Security Advisory: httpd security update 2025-12-22T23:27:16+00:00 2026-01-13T22:14:14+00:00
rhsa-2025:23947 Red Hat Security Advisory: kernel security update 2025-12-22T17:42:52+00:00 2026-02-03T21:42:32+00:00
rhsa-2025:23948 Red Hat Security Advisory: grafana security update 2025-12-22T17:10:29+00:00 2026-02-17T07:56:43+00:00
rhsa-2025:23960 Red Hat Security Advisory: kernel-rt security update 2025-12-22T17:04:29+00:00 2026-02-03T21:42:32+00:00
rhsa-2025:23932 Red Hat Security Advisory: httpd security update 2025-12-22T16:55:54+00:00 2026-01-13T22:10:06+00:00
ID Description Published Updated
icsa-24-191-02 Mitsubishi Electric MELIPC Series MI5122-VW 2024-07-09T06:00:00.000000Z 2024-07-09T06:00:00.000000Z
icsa-24-191-01 Delta Electronics CNCSoft-G2 (Update A) 2024-07-09T06:00:00.000000Z 2025-02-18T07:00:00.000000Z
icsa-25-112-03 Schneider Electric Wiser Home Controller WHC-5918A 2024-07-09T00:00:00.000000Z 2026-01-30T07:00:00.000000Z
icsa-24-345-03 Schneider Electric FoxRTU Station 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-345-02 Schneider Electric EcoStruxure Foxboro DCS Core Control Services 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-17 Siemens SIMATIC STEP 7 (TIA Portal) 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-16 Siemens SIMATIC WinCC 2024-07-09T00:00:00.000000Z 2024-11-12T00:00:00.000000Z
icsa-24-193-15 Siemens SINEMA Remote Connect Server 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-14 Siemens SIPROTEC 2024-07-09T00:00:00.000000Z 2025-11-11T00:00:00.000000Z
icsa-24-193-13 Siemens TIA Portal, SIMATIC, and SIRIUS 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-12 Siemens TIA Portal and SIMATIC STEP 7 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-11 Siemens RUGGEDCOM APE 1808 2024-07-09T00:00:00.000000Z 2026-01-14T22:00:09.701376Z
icsa-24-193-10 Siemens JT Open and PLM XML SDK 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-09 Siemens SINEMA Remote Connect Server 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-08 Siemens Mendix Encryption Module 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-07 Siemens SIMATIC and SIMIT 2024-07-09T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-193-06 Siemens RUGGEDCOM 2024-07-09T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-24-193-05 Siemens SCALANCE, RUGGEDCOM 2024-07-09T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-24-193-04 Siemens Simcenter Femap 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-03 Siemens Teamcenter Visualization and JT2Go 2024-07-09T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-193-02 Siemens RUGGEDCOM APE 1808 2024-07-09T00:00:00.000000Z 2026-01-14T22:00:11.677616Z
icsa-24-193-01 Siemens Remote Connect Server 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-25-007-01 ABB ASPECT System 2024-07-03T00:30:00.000000Z 2024-12-05T00:30:00.000000Z
icsa-24-184-03 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update B) 2024-07-02T06:00:00.000000Z 2026-01-08T07:00:00.000000Z
icsa-24-184-02 mySCADA myPRO 2024-07-02T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-184-01 Johnson Controls Kantech Door Controllers 2024-07-02T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-07 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-06 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-05 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-04 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
ID Description Published Updated
cisco-sa-pi-epnm-xss-p8fbz2fw Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerability 2022-02-16T16:00:00+00:00 2022-02-16T16:00:00+00:00
cisco-sa-esa-dos-mxzvgtgu Cisco Email Security Appliance DNS Verification Denial of Service Vulnerability 2022-02-16T16:00:00+00:00 2022-02-25T19:22:29+00:00
cisco-sa-swg-fbyps-3z4qt7p Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability 2022-02-02T16:00:00+00:00 2022-02-02T16:00:00+00:00
cisco-sa-smb-mult-vuln-ka9pk6d Cisco Small Business RV Series Routers Vulnerabilities 2022-02-02T16:00:00+00:00 2022-02-14T13:54:42+00:00
cisco-sa-dnac-info-disc-8qeynkej Cisco DNA Center Information Disclosure Vulnerability 2022-02-02T16:00:00+00:00 2022-02-04T20:22:37+00:00
cisco-sa-cpsc-info-disc-zkjbdj9f Cisco Prime Service Catalog Information Disclosure Vulnerability 2022-02-02T16:00:00+00:00 2022-02-02T16:00:00+00:00
cisco-sa-webex-xss-fmbpu2pe Cisco Webex Meetings Cross-Site Scripting Vulnerability 2022-01-19T16:00:00+00:00 2022-01-19T16:00:00+00:00
cisco-sa-snort-dos-9d3hjluj Multiple Cisco Products Snort Modbus Denial of Service Vulnerability 2022-01-19T16:00:00+00:00 2022-04-26T19:41:55+00:00
cisco-sa-rcm-vuls-7cs3nuq Cisco Redundancy Configuration Manager for Cisco StarOS Software Multiple Vulnerabilities 2022-01-19T16:00:00+00:00 2022-01-19T16:00:00+00:00
cisco-sa-confdcli-cmdinj-wybqdssh ConfD CLI Command Injection Vulnerability 2022-01-19T16:00:00+00:00 2022-01-19T16:00:00+00:00
cisco-sa-cli-cmdinj-4mttwzpb Multiple Cisco Products CLI Command Injection Vulnerability 2022-01-19T16:00:00+00:00 2022-01-19T16:00:00+00:00
cisco-sa-tetr-cmd-injc-skrwgo Cisco Tetration Command Injection Vulnerability 2022-01-12T16:00:00+00:00 2022-01-31T17:21:31+00:00
cisco-sa-sna-xss-nxoxdhrq Cisco Secure Network Analytics Cross-Site Scripting Vulnerability 2022-01-12T16:00:00+00:00 2022-01-12T16:00:00+00:00
cisco-sa-prime-reg-xss-zloz8pfb Cisco Prime Access Registrar Appliance Cross-Site Scripting Vulnerability 2022-01-12T16:00:00+00:00 2022-01-12T16:00:00+00:00
cisco-sa-pi-epnm-path-trav-zws324yn Cisco Prime Infrastructure and Evolved Programmable Network Manager Vulnerabilities 2022-01-12T16:00:00+00:00 2022-01-12T16:00:00+00:00
cisco-sa-ip-phone-info-disc-frdjfoxa Cisco IP Phones Information Disclosure Vulnerability 2022-01-12T16:00:00+00:00 2022-01-12T16:00:00+00:00
cisco-sa-ece-multivulns-kbk2yvhr Cisco Enterprise Chat and Email Vulnerabilities 2022-01-12T16:00:00+00:00 2022-01-12T16:00:00+00:00
cisco-sa-csm-mult-xss-7hmokqtt Cisco Security Manager Cross-Site Scripting Vulnerabilities 2022-01-12T16:00:00+00:00 2022-01-12T16:00:00+00:00
cisco-sa-ccmp-priv-esc-jzhtflm4 Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability 2022-01-12T16:00:00+00:00 2022-01-12T16:00:00+00:00
cisco-sa-asdm-logging-jnloy422 Cisco Adaptive Security Device Manager Information Disclosure Vulnerability 2022-01-12T16:00:00+00:00 2022-06-29T21:50:47+00:00
cisco-sa-apache-log4j-qruknebd Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021 2021-12-10T18:45:00+00:00 2022-01-31T21:16:10+00:00
cisco-sa-cspc-xss-kjrnbm3p Cisco Common Services Platform Collector Stored Cross-Site Scripting Vulnerability 2021-11-17T16:00:00+00:00 2021-11-18T22:48:14+00:00
cisco-sa-cspc-sqli-unvptn5 Cisco Common Services Platform Collector SQL Injection Vulnerability 2021-11-17T16:00:00+00:00 2021-11-18T22:48:13+00:00
cisco-sa-cspc-ilr-8qmw8y8x Cisco Common Services Platform Collector Improper Logging Restriction Vulnerability 2021-11-17T16:00:00+00:00 2021-11-18T22:48:15+00:00
cisco-sa-webex-activation-3sdnfxcy Cisco Webex Meetings Email Content Injection Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-vmesh-openred-agnrmf5 Cisco Webex Video Mesh Arbitrary Site Redirection Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-videomesh-xss-qjm2bdqf Cisco Webex Video Mesh Cross-Site Scripting Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-umbrella-user-enum-s7xfjwde Cisco Umbrella Email Enumeration Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-ucm-csrf-xrtkdu3h Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-smb-switches-web-dos-xmyffkt8 Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
ID Description Published Updated
msrc_cve-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability 2025-11-11T00:00:00.000Z 2025-11-20T00:00:00.000Z
msrc_cve-2025-59240 Microsoft Excel Information Disclosure Vulnerability 2025-11-11T00:00:00.000Z 2025-11-11T00:00:00.000Z
msrc_cve-2025-49752 Azure Bastion Elevation of Privilege Vulnerability 2025-11-11T00:00:00.000Z 2025-11-21T00:00:00.000Z
msrc_cve-2025-47179 Configuration Manager Elevation of Privilege Vulnerability 2025-11-11T00:00:00.000Z 2025-11-11T00:00:00.000Z
msrc_cve-2025-30398 Nuance PowerScribe 360 Information Disclosure Vulnerability 2025-11-11T00:00:00.000Z 2025-11-11T00:00:00.000Z
msrc_cve-2025-66382 In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time. 2025-11-02T00:00:00.000Z 2026-02-21T03:59:21.000Z
msrc_cve-2025-66221 Werkzeug safe_join() allows Windows special device names 2025-11-02T00:00:00.000Z 2025-12-09T01:37:04.000Z
msrc_cve-2025-66031 node-forge ASN.1 Unbounded Recursion 2025-11-02T00:00:00.000Z 2025-12-04T14:36:01.000Z
msrc_cve-2025-66030 node-forge ASN.1 OID Integer Truncation 2025-11-02T00:00:00.000Z 2025-12-04T14:35:55.000Z
msrc_cve-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` 2025-11-02T00:00:00.000Z 2025-12-02T01:40:36.000Z
msrc_cve-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication 2025-11-02T00:00:00.000Z 2025-12-02T01:40:57.000Z
msrc_cve-2025-64713 WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode 2025-11-02T00:00:00.000Z 2025-12-01T14:38:21.000Z
msrc_cve-2025-64704 WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction 2025-11-02T00:00:00.000Z 2025-12-01T14:38:13.000Z
msrc_cve-2025-64506 LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images 2025-11-02T00:00:00.000Z 2025-12-03T01:38:33.000Z
msrc_cve-2025-64505 LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index 2025-11-02T00:00:00.000Z 2025-12-03T01:38:21.000Z
msrc_cve-2025-64437 KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes 2025-11-02T00:00:00.000Z 2026-01-02T14:39:46.000Z
msrc_cve-2025-64436 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes 2025-11-02T00:00:00.000Z 2026-02-18T03:01:44.000Z
msrc_cve-2025-64435 KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation 2025-11-02T00:00:00.000Z 2026-01-08T14:37:49.000Z
msrc_cve-2025-64434 KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing 2025-11-02T00:00:00.000Z 2026-01-13T01:40:10.000Z
msrc_cve-2025-64433 KubeVirt Arbitrary Container File Read 2025-11-02T00:00:00.000Z 2026-01-02T14:39:25.000Z
msrc_cve-2025-64432 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer 2025-11-02T00:00:00.000Z 2026-01-02T14:39:19.000Z
msrc_cve-2025-64329 containerd CRI server: Host memory exhaustion through Attach goroutine leak 2025-11-02T00:00:00.000Z 2025-12-07T01:47:05.000Z
msrc_cve-2025-64324 KubeVirt Vulnerable to Arbitrary Host File Read and Write 2025-11-02T00:00:00.000Z 2025-12-17T14:35:11.000Z
msrc_cve-2025-62689 NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition. 2025-11-02T00:00:00.000Z 2025-11-25T01:40:58.000Z
msrc_cve-2025-61915 OpenPrinting CUPS vulnerable to stack based out-of-bound write 2025-11-02T00:00:00.000Z 2026-01-02T14:40:04.000Z
msrc_cve-2025-61664 Grub2: missing unregister call for normal_exit command may lead to use-after-free 2025-11-02T00:00:00.000Z 2026-01-08T14:40:13.000Z
msrc_cve-2025-61663 Grub2: missing unregister call for normal commands may lead to use-after-free 2025-11-02T00:00:00.000Z 2026-01-08T14:40:24.000Z
msrc_cve-2025-61662 Grub2: missing unregister call for gettext command may lead to use-after-free 2025-11-02T00:00:00.000Z 2026-01-08T14:40:01.000Z
msrc_cve-2025-61661 Grub2: grub2: out-of-bounds write via malicious usb device 2025-11-02T00:00:00.000Z 2026-01-08T14:40:36.000Z
msrc_cve-2025-60876 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). 2025-11-02T00:00:00.000Z 2026-02-18T14:07:50.000Z
ID Description Updated
var-201207-0370 Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows… 2025-12-22T21:27:57.994000Z
var-201904-1362 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2025-12-22T21:27:57.906000Z
var-202101-0119 The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing… 2025-12-22T21:27:57.360000Z
var-201904-1444 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2025-12-22T21:27:51.726000Z
var-201903-0442 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2025-12-22T21:27:51.555000Z
var-202203-1690 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if th… 2025-12-22T21:27:10.472000Z
var-201109-0201 Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 … 2025-12-22T21:27:10.279000Z
var-201410-1217 Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in c… 2025-12-22T21:27:09.724000Z
var-201912-0626 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2025-12-22T21:27:08.439000Z
var-201109-0211 Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers… 2025-12-22T21:26:58.957000Z
var-200704-0216 Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 al… 2025-12-22T21:26:58.495000Z
var-201905-0709 Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocess… 2025-12-22T21:26:58.427000Z
var-201711-0445 An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… 2025-12-22T21:26:13.807000Z
var-201306-0259 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2025-12-22T21:26:13.668000Z
var-201710-1405 An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… 2025-12-22T21:26:04.812000Z
var-200701-0340 The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428… 2025-12-22T21:25:55.444000Z
var-201704-1589 In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server t… 2025-12-22T21:25:55.110000Z
var-201804-1177 An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… 2025-12-22T21:25:55.031000Z
var-201304-0062 Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, T… 2025-12-22T21:25:53.536000Z
var-201010-0354 Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Lin… 2025-12-22T21:25:53.455000Z
var-200906-0603 Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possi… 2025-12-22T21:25:48.841000Z
var-202101-0222 A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not… 2025-12-22T21:25:48.769000Z
var-202106-0343 Improper isolation of shared resources in some Intel(R) Processors may allow an authentic… 2025-12-22T21:25:47.987000Z
var-201108-0132 The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x thr… 2025-12-22T21:25:46.261000Z
var-202110-1512 This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS… 2025-12-22T21:25:44.068000Z
var-201707-1188 An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … 2025-12-22T21:25:42.250000Z
var-201912-0593 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2025-12-22T21:25:41.941000Z
var-201611-0348 named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-… 2025-12-22T21:25:41.756000Z
var-202203-1400 jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of servic… 2025-12-22T21:25:41.306000Z
var-201906-1175 Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an… 2025-12-22T21:25:41.145000Z
ID Description Published Updated
jvndb-2021-000108 Multiple vulnerabilities in multiple ELECOM LAN routers 2021-11-30T16:23+09:00 2022-03-29T16:18+09:00
jvndb-2021-000107 Wi-Fi STATION SH-52A vulnerable to cross-site scripting 2021-11-30T14:49+09:00 2021-11-30T14:49+09:00
jvndb-2021-004716 Trend Micro Antivirus for MAC vulnerable to improper access controls 2021-11-29T13:52+09:00 2021-11-29T13:52+09:00
jvndb-2021-000106 Multiple vulnerabilities in baserCMS 2021-11-26T14:59+09:00 2021-11-26T14:59+09:00
jvndb-2021-000104 WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery 2021-11-25T14:31+09:00 2021-11-25T14:31+09:00
jvndb-2021-000105 PowerCMS XMLRPC API vulnerable to OS command injection 2021-11-24T15:47+09:00 2024-07-26T15:22+09:00
jvndb-2021-004432 Multiple Vulnerabilities in JP1/Automatic Operation 2021-11-22T16:10+09:00 2021-11-22T16:10+09:00
jvndb-2021-000103 WordPress Plugin "Push Notifications for WordPress (Lite)" vulnerable to cross-site request forgery 2021-11-16T13:42+09:00 2021-11-16T13:42+09:00
jvndb-2021-000102 rwtxt vulnerable to cross-site scripting 2021-11-16T13:38+09:00 2021-11-16T13:38+09:00
jvndb-2021-000101 Unlimited Sitemap Generator vulnerable to cross-site request forgery 2021-11-12T15:07+09:00 2021-11-12T15:07+09:00
jvndb-2021-003840 Cross-site Scripting Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer 2021-11-12T11:41+09:00 2021-11-12T11:41+09:00
jvndb-2021-000100 Multiple vulnerabilities in EC-CUBE 2 series 2021-11-11T15:09+09:00 2021-11-11T15:09+09:00
jvndb-2021-000094 WordPress Plugin "Booking Package - Appointment Booking Calendar System" vulnerable to cross-site scripting 2021-11-10T14:26+09:00 2021-11-10T14:26+09:00
jvndb-2021-003811 File Permission Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center 2021-11-05T15:04+09:00 2021-11-05T15:04+09:00
jvndb-2021-003660 Authentication Bypass Vulnerability in Hitachi Device Manager 2021-11-01T15:56+09:00 2021-11-01T15:56+09:00
jvndb-2021-000097 Multiple vulnerabilities in CLUSTERPRO X and EXPRESSCLUSTER X 2021-10-29T15:22+09:00 2022-04-20T14:03+09:00
jvndb-2021-000096 Android App "Mercari (Merpay) - Marketplace and Mobile Payments App" (Japan version) vulnerable to improper handling of Intent 2021-10-29T15:11+09:00 2021-10-29T15:11+09:00
jvndb-2021-000098 ESET Cyber Security and ESET Endpoint series vulnerable to denial-of-service (DoS) 2021-10-29T14:58+09:00 2021-10-29T14:58+09:00
jvndb-2021-000095 Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter 2021-10-28T15:03+09:00 2021-10-28T15:03+09:00
jvndb-2021-003385 Trend Micro Endpoint security products for enterprises vulnerable to privilege escalation 2021-10-26T12:35+09:00 2021-10-26T12:35+09:00
jvndb-2021-000093 Movable Type XMLRPC API vulnerable to OS command injection 2021-10-20T17:38+09:00 2021-12-17T17:36+09:00
jvndb-2021-003080 OMRON CX-Supervisor vulnerable to out-of-bounds read 2021-10-18T15:26+09:00 2021-11-01T15:37+09:00
jvndb-2021-000091 128 Technology Session Smart Router vulnerable to authentication bypass 2021-10-18T14:58+09:00 2021-10-18T14:58+09:00
jvndb-2021-000090 Apache HTTP Server vulnerable to directory traversal 2021-10-11T18:07+09:00 2021-10-11T18:07+09:00
jvndb-2021-000089 Nike App fails to restrict custom URL schemes properly 2021-10-08T14:32+09:00 2021-10-08T14:32+09:00
jvndb-2021-002810 Information Disclosure Vulnerability in Hitachi Tuning Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer 2021-10-05T15:37+09:00 2021-10-05T15:37+09:00
jvndb-2021-002774 Trend Micro ServerProtect family vulnerable to authentication bypass 2021-10-01T14:42+09:00 2021-10-01T14:42+09:00
jvndb-2021-000088 Multiple vulnerabilities in Cybozu Remote Service 2021-09-30T16:03+09:00 2024-04-08T18:09+09:00
jvndb-2021-002752 Trend Micro HouseCall for Home Networks vulnerable to privilege escalation 2021-09-30T13:56+09:00 2021-09-30T13:56+09:00
jvndb-2021-000085 SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification 2021-09-28T15:18+09:00 2021-09-28T15:18+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:21072-1 Security update for runc 2025-11-20T16:43:58Z 2025-11-20T16:43:58Z
suse-su-2025:21132-1 Security update for poppler 2025-11-20T13:33:08Z 2025-11-20T13:33:08Z
suse-su-2025:21050-1 Security update for unbound 2025-11-20T11:36:47Z 2025-11-20T11:36:47Z
suse-su-2025:4148-1 Security update for ghostscript 2025-11-20T10:14:20Z 2025-11-20T10:14:20Z
suse-su-2025:4143-1 Security update for grub2 2025-11-20T07:54:03Z 2025-11-20T07:54:03Z
suse-su-2025:21021-1 Security update for MozillaFirefox 2025-11-19T18:22:27Z 2025-11-19T18:22:27Z
suse-su-2025:4141-1 Security update for the Linux Kernel 2025-11-19T14:06:18Z 2025-11-19T14:06:18Z
suse-su-2025:21016-1 Security update for ongres-scram 2025-11-19T10:17:29Z 2025-11-19T10:17:29Z
suse-su-2025:4137-1 Security update for gimp 2025-11-19T10:01:00Z 2025-11-19T10:01:00Z
suse-su-2025:21014-1 Security update for openexr 2025-11-19T09:46:11Z 2025-11-19T09:46:11Z
suse-su-2025:21032-1 Security update for tiff 2025-11-19T09:41:55Z 2025-11-19T09:41:55Z
suse-su-2025:21009-1 Security update for tiff 2025-11-19T09:41:55Z 2025-11-19T09:41:55Z
suse-su-2025:21031-1 Security update for libxslt 2025-11-19T09:41:09Z 2025-11-19T09:41:09Z
suse-su-2025:21008-1 Security update for libxslt 2025-11-19T09:41:09Z 2025-11-19T09:41:09Z
suse-su-2025:21028-1 Security update for expat 2025-11-19T09:39:18Z 2025-11-19T09:39:18Z
suse-su-2025:21006-1 Security update for expat 2025-11-19T09:39:18Z 2025-11-19T09:39:18Z
suse-su-2025:21026-1 Security update for samba 2025-11-18T22:57:17Z 2025-11-18T22:57:17Z
suse-su-2025:21005-1 Security update for samba 2025-11-18T22:57:17Z 2025-11-18T22:57:17Z
suse-su-2025:4135-1 Security update for the Linux Kernel 2025-11-18T17:31:49Z 2025-11-18T17:31:49Z
suse-su-2025:4134-1 Security update for unbound 2025-11-18T17:10:58Z 2025-11-18T17:10:58Z
suse-su-2025:4132-1 Security update for the Linux Kernel 2025-11-18T16:45:55Z 2025-11-18T16:45:55Z
suse-ru-2025:4131-1 Recommended update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor 2025-11-18T15:56:53Z 2025-11-18T15:56:53Z
suse-ru-2025:21046-1 Recommended update for afterburn 2025-11-18T09:58:24Z 2025-11-18T09:58:24Z
suse-su-2025:4126-1 Security update for openssl-1_0_0 2025-11-18T09:42:49Z 2025-11-18T09:42:49Z
suse-su-2025:4125-1 Security update for ghostscript 2025-11-18T09:35:13Z 2025-11-18T09:35:13Z
suse-su-2025:4123-1 Security update for the Linux Kernel (Live Patch 61 for SUSE Linux Enterprise 12 SP5) 2025-11-18T02:04:00Z 2025-11-18T02:04:00Z
suse-su-2025:4121-1 Security update for alloy 2025-11-17T12:10:11Z 2025-11-17T12:10:11Z
suse-su-2025:4116-1 Security update for libxml2 2025-11-17T07:26:16Z 2025-11-17T07:26:16Z
suse-su-2025:4115-1 Security update for libxml2 2025-11-17T07:25:57Z 2025-11-17T07:25:57Z
suse-su-2025:4112-1 Security update for openssh 2025-11-15T22:38:42Z 2025-11-15T22:38:42Z
ID Description Published Updated
opensuse-su-2025:15538-1 govulncheck-vulndb-0.0.20250908T141310-1.1 on GA media 2025-09-10T00:00:00Z 2025-09-10T00:00:00Z
opensuse-su-2025:15537-1 warewulf4-4.6.4-1.1 on GA media 2025-09-09T00:00:00Z 2025-09-09T00:00:00Z
opensuse-su-2025:15536-1 python311-deepdiff-8.6.1-1.1 on GA media 2025-09-09T00:00:00Z 2025-09-09T00:00:00Z
opensuse-su-2025:15535-1 perl-JSON-XS-4.40.0-1.1 on GA media 2025-09-09T00:00:00Z 2025-09-09T00:00:00Z
opensuse-su-2025:15534-1 perl-Cpanel-JSON-XS-4.400.0-1.1 on GA media 2025-09-09T00:00:00Z 2025-09-09T00:00:00Z
opensuse-su-2025:15533-1 kernel-devel-6.16.5-1.1 on GA media 2025-09-08T00:00:00Z 2025-09-08T00:00:00Z
opensuse-su-2025:15532-1 java-1_8_0-openjdk-1.8.0.462-1.1 on GA media 2025-09-08T00:00:00Z 2025-09-08T00:00:00Z
opensuse-su-2025:15531-1 libQt5Pdf5-5.15.19-1.1 on GA media 2025-09-06T00:00:00Z 2025-09-06T00:00:00Z
opensuse-su-2025:15530-1 trivy-0.65.0-2.1 on GA media 2025-09-05T00:00:00Z 2025-09-05T00:00:00Z
opensuse-su-2025:15529-1 traefik-3.5.1-1.1 on GA media 2025-09-05T00:00:00Z 2025-09-05T00:00:00Z
opensuse-su-2025:15528-1 python311-Django4-4.2.24-1.1 on GA media 2025-09-05T00:00:00Z 2025-09-05T00:00:00Z
opensuse-su-2025:15527-1 python311-Django-5.2.6-1.1 on GA media 2025-09-05T00:00:00Z 2025-09-05T00:00:00Z
opensuse-su-2025:15526-1 libsixel-bash-completion-1.10.5-2.1 on GA media 2025-09-05T00:00:00Z 2025-09-05T00:00:00Z
opensuse-su-2025:15525-1 go1.25-1.25.1-1.1 on GA media 2025-09-05T00:00:00Z 2025-09-05T00:00:00Z
opensuse-su-2025:15524-1 chromedriver-140.0.7339.80-1.1 on GA media 2025-09-05T00:00:00Z 2025-09-05T00:00:00Z
opensuse-su-2025:15523-1 7zip-25.01-1.1 on GA media 2025-09-05T00:00:00Z 2025-09-05T00:00:00Z
opensuse-su-2025:15522-1 libwireshark18-4.4.9-2.1 on GA media 2025-09-04T00:00:00Z 2025-09-04T00:00:00Z
opensuse-su-2025:15521-1 libpodofo-0_10-devel-0.10.5-1.1 on GA media 2025-09-04T00:00:00Z 2025-09-04T00:00:00Z
opensuse-su-2025:15520-1 netty-4.1.126-1.1 on GA media 2025-09-04T00:00:00Z 2025-09-04T00:00:00Z
opensuse-su-2025:15519-1 python311-ruff-0.12.11-2.1 on GA media 2025-09-03T00:00:00Z 2025-09-03T00:00:00Z
opensuse-su-2025:15518-1 python311-maturin-1.9.4-1.1 on GA media 2025-09-03T00:00:00Z 2025-09-03T00:00:00Z
opensuse-su-2025:15517-1 himmelblau-1.2.2+git.0.2d04bca-1.1 on GA media 2025-09-03T00:00:00Z 2025-09-03T00:00:00Z
opensuse-su-2025:15516-1 MozillaFirefox-142.0.1-1.1 on GA media 2025-09-03T00:00:00Z 2025-09-03T00:00:00Z
opensuse-su-2025:15515-1 regclient-0.9.2-1.1 on GA media 2025-09-02T00:00:00Z 2025-09-02T00:00:00Z
opensuse-su-2025:15514-1 python311-uv-0.8.14-2.1 on GA media 2025-09-02T00:00:00Z 2025-09-02T00:00:00Z
opensuse-su-2025:15513-1 libmupen64plus-devel-2.6.0-2.1 on GA media 2025-09-02T00:00:00Z 2025-09-02T00:00:00Z
opensuse-su-2025:15512-1 bpftop-0.7.1-1.1 on GA media 2025-09-02T00:00:00Z 2025-09-02T00:00:00Z
opensuse-su-2025:15511-1 libudisks2-0-2.10.1-4.1 on GA media 2025-09-01T00:00:00Z 2025-09-01T00:00:00Z
opensuse-su-2025:15510-1 traefik2-2.11.29-1.1 on GA media 2025-09-01T00:00:00Z 2025-09-01T00:00:00Z
opensuse-su-2025:15509-1 sbctl-0.17-2.1 on GA media 2025-09-01T00:00:00Z 2025-09-01T00:00:00Z
ID Description Published Updated
bit-mariadb-2024-27766 2025-07-11T05:52:49.130Z 2025-08-20T09:06:12.327Z
bit-mariadb-2023-39593 2025-07-11T05:52:25.837Z 2025-07-11T06:17:37.698Z
bit-mariadb-2023-26785 2025-07-11T05:52:22.539Z 2025-07-11T06:17:37.698Z
bit-dotnet-2025-30399 .NET and Visual Studio Remote Code Execution Vulnerability 2025-07-11T05:41:36.318Z 2025-07-11T06:17:37.698Z
bit-dotnet-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability 2025-07-11T05:41:32.524Z 2025-07-11T06:17:37.698Z
bit-tomcat-2025-49125 Apache Tomcat: Security constraint bypass for pre/post-resources 2025-07-10T10:47:18.953Z 2025-11-06T13:25:46.476Z
bit-tomcat-2025-48988 Apache Tomcat: FileUpload large number of parts with headers DoS 2025-07-10T10:47:06.961Z 2025-11-06T13:25:46.476Z
bit-tomcat-2025-46701 Apache Tomcat: Security constraint bypass for CGI scripts 2025-07-10T10:47:00.568Z 2025-11-06T13:25:46.476Z
bit-tomcat-2025-31651 Apache Tomcat: Bypass of rules in Rewrite Valve 2025-07-10T10:46:54.240Z 2025-11-06T13:25:46.476Z
bit-tomcat-2025-24813 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 2025-07-10T10:46:47.051Z 2025-11-06T13:25:46.476Z
bit-tomcat-2024-56337 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete 2025-07-10T10:46:39.151Z 2025-11-06T13:25:46.476Z
bit-tomcat-2024-54677 Apache Tomcat: DoS in examples web application 2025-07-10T10:46:30.955Z 2025-11-06T13:25:46.476Z
bit-tomcat-2024-52316 Apache Tomcat: Authentication bypass when using Jakarta Authentication API 2025-07-10T10:46:05.150Z 2025-11-06T13:25:46.476Z
bit-tomcat-2024-50379 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation 2025-07-10T10:45:55.643Z 2025-11-06T13:25:46.476Z
bit-python-2025-4517 Arbitrary writes via tarfile realpath overflow 2025-07-10T09:02:40.800Z 2025-07-10T09:19:12.756Z
bit-python-2025-4435 Tarfile extracts filtered members when errorlevel=0 2025-07-10T09:02:32.309Z 2025-07-10T09:19:12.756Z
bit-python-2025-4330 Extraction filter bypass for linking outside extraction directory 2025-07-10T09:02:28.407Z 2025-07-10T09:19:12.756Z
bit-python-2025-4138 Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory 2025-07-10T09:02:24.495Z 2025-07-10T09:19:12.756Z
bit-python-2024-12718 Bypass extraction filter to modify file metadata outside extraction directory 2025-07-10T09:01:38.394Z 2025-07-10T09:19:12.756Z
bit-moodle-2025-53021 2025-07-10T06:00:29.762Z 2025-08-20T09:06:12.327Z
bit-helm-2025-53547 Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution 2025-07-10T05:43:09.073Z 2025-09-04T09:06:08.228Z
bit-git-2025-48386 Git allows a buffer overflow in 'wincred' credential helper 2025-07-10T05:40:43.979Z 2025-11-06T13:25:46.476Z
bit-git-2025-48385 Git alllows arbitrary file writes via bundle-uri parameter injection 2025-07-10T05:40:40.066Z 2025-11-06T13:25:46.476Z
bit-git-2025-48384 Git allows arbitrary code execution through broken config quoting 2025-07-10T05:40:36.268Z 2025-11-06T13:25:46.476Z
bit-appsmith-2024-55965 2025-07-09T05:35:58.647Z 2025-07-09T06:18:38.715Z
bit-modsecurity2-2025-52891 ModSecurity empty XML tag causes segmentation fault 2025-07-04T07:42:25.055Z 2025-07-04T08:10:20.098Z
bit-modsecurity-2025-52891 ModSecurity empty XML tag causes segmentation fault 2025-07-04T07:41:54.070Z 2025-07-04T08:10:20.098Z
bit-apisix-2025-46647 Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect 2025-07-04T07:28:48.965Z 2025-11-06T13:25:46.476Z
bit-pillow-2025-48379 Pillow Vulnerable to Write Buffer Overflow on BCn encoding 2025-07-03T05:57:27.923Z 2025-10-16T18:08:44.835Z
bit-discourse-2025-48954 Discourse vulnerable to XSS via user-provided query parameter in oauth failure flow 2025-07-01T17:44:46.702Z 2025-11-13T11:23:28.166Z
ID Description Published Updated
cnvd-2025-30593 WordPress插件WebP Express信息泄露漏洞 2025-12-10 2025-12-12
cnvd-2025-30592 WordPress插件MxChat信息泄露漏洞 2025-12-10 2025-12-12
cnvd-2025-30591 WordPress插件SurveyFunnel – Survey Plugin for WordPress信息泄露漏洞 2025-12-10 2025-12-12
cnvd-2025-30590 WordPress插件SSP Debug信息泄露漏洞 2025-12-10 2025-12-12
cnvd-2025-30564 Apache HTTP Server命令注入漏洞 2025-12-10 2025-12-12
cnvd-2025-30563 Tenda Ax3缓冲区溢出漏洞 2025-12-10 2025-12-12
cnvd-2025-30562 Huawei HarmonyOS存在未明漏洞(CNVD-2025-30562) 2025-12-10 2025-12-12
cnvd-2025-30561 Huawei HarmonyOS file management app绕过应用锁校验漏洞 2025-12-10 2025-12-12
cnvd-2025-30560 Huawei HarmonyOS存在未明漏洞(CNVD-2025-30560) 2025-12-10 2025-12-12
cnvd-2025-30559 Huawei HarmonyOS office service拒绝服务漏洞 2025-12-10 2025-12-12
cnvd-2025-30558 Huawei HarmonyOS存在未明漏洞(CNVD-2025-30558) 2025-12-10 2025-12-12
cnvd-2025-30383 Google Chrome信息泄露漏洞(CNVD-2025-3038304) 2025-12-10 2025-12-10
cnvd-2025-30382 FreePBX SQL注入漏洞(CNVD-2025-3038208) 2025-12-10 2025-12-10
cnvd-2026-04888 Google Chrome错误类型转换漏洞 2025-12-09 2026-01-19
cnvd-2025-30364 Billing System password-recovery.php端点SQL注入漏洞 2025-12-09 2025-12-10
cnvd-2025-30363 Billing System admin/index.php端点SQL注入漏洞 2025-12-09 2025-12-10
cnvd-2026-07244 Google Chrome实现不当漏洞 2025-12-08 2026-01-22
cnvd-2026-07243 Google Chrome类型混淆漏洞 2025-12-08 2026-01-22
cnvd-2026-04890 Google Chrome释放后重用漏洞 2025-12-08 2026-01-19
cnvd-2026-04889 Google Chrome竞争条件漏洞 2025-12-08 2026-01-19
cnvd-2026-04469 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-987341) 2025-12-08 2026-01-21
cnvd-2025-30979 Advantech iView SQL注入漏洞 2025-12-08 2025-12-17
cnvd-2025-30385 Google Chrome Media Stream释放后重用漏洞(CNVD-2025-30385) 2025-12-08 2025-12-09
cnvd-2025-30384 Claude Code代码执行漏洞 2025-12-08 2025-12-10
cnvd-2026-04452 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-986300) 2025-12-07 2026-01-21
cnvd-2026-04451 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-986298) 2025-12-07 2026-01-21
cnvd-2026-07245 Google Chrome释放后使用漏洞(CNVD-2026-07245) 2025-12-05 2026-01-22
cnvd-2026-04296 北京邦永科技有限公司PM2项目管理平台存在SQL注入漏洞(CNVD-C-2025-983218) 2025-12-05 2026-01-19
cnvd-2025-30386 Google Chrome权限提升漏洞(CNVD-2025-30386) 2025-12-05 2025-12-09
cnvd-2026-04468 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-980402) 2025-12-04 2026-01-21
ID Description Published Updated
certfr-2025-avi-0559 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-07-04T00:00:00.000000 2025-07-04T00:00:00.000000
certfr-2025-avi-0558 Multiples vulnérabilités dans PHP 2025-07-04T00:00:00.000000 2025-07-04T00:00:00.000000
certfr-2025-avi-0557 Vulnérabilité dans Microsoft Edge 2025-07-03T00:00:00.000000 2025-07-03T00:00:00.000000
certfr-2025-avi-0556 Vulnérabilité dans Citrix XenServer 2025-07-03T00:00:00.000000 2025-07-03T00:00:00.000000
certfr-2025-avi-0555 Multiples vulnérabilités dans Mozilla Thunderbird 2025-07-03T00:00:00.000000 2025-07-03T00:00:00.000000
certfr-2025-avi-0554 Multiples vulnérabilités dans Grafana 2025-07-03T00:00:00.000000 2025-07-03T00:00:00.000000
certfr-2025-avi-0553 Vulnérabilité dans les produits Cisco 2025-07-03T00:00:00.000000 2025-07-03T00:00:00.000000
certfr-2025-avi-0552 Multiples vulnérabilités dans Microsoft Edge 2025-07-02T00:00:00.000000 2025-07-02T00:00:00.000000
certfr-2025-avi-0551 Vulnérabilité dans Xen 2025-07-02T00:00:00.000000 2025-07-02T00:00:00.000000
certfr-2025-avi-0550 Multiples vulnérabilités dans les produits Tenable 2025-07-01T00:00:00.000000 2025-07-01T00:00:00.000000
certfr-2025-avi-0549 Vulnérabilité dans Google Chrome 2025-07-01T00:00:00.000000 2025-07-01T00:00:00.000000
certfr-2025-avi-0548 Multiples vulnérabilités dans MongoDB Server 2025-06-30T00:00:00.000000 2025-06-30T00:00:00.000000
certfr-2025-avi-0547 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-06-27T00:00:00.000000 2025-06-27T00:00:00.000000
certfr-2025-avi-0546 Multiples vulnérabilités dans les produits IBM 2025-06-27T00:00:00.000000 2025-06-27T00:00:00.000000
certfr-2025-avi-0545 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-06-27T00:00:00.000000 2025-06-27T00:00:00.000000
certfr-2025-avi-0544 Multiples vulnérabilités dans les produits Trend Micro 2025-06-27T00:00:00.000000 2025-06-27T00:00:00.000000
certfr-2025-avi-0543 Vulnérabilité dans VMware Tanzu 2025-06-27T00:00:00.000000 2025-06-27T00:00:00.000000
certfr-2025-avi-0542 Multiples vulnérabilités dans Microsoft Edge 2025-06-27T00:00:00.000000 2025-06-27T00:00:00.000000
certfr-2025-avi-0541 Vulnérabilité dans Centreon Map 2025-06-26T00:00:00.000000 2025-06-26T00:00:00.000000
certfr-2025-avi-0540 Multiples vulnérabilités dans les produits Citrix 2025-06-26T00:00:00.000000 2025-06-26T00:00:00.000000
certfr-2025-avi-0539 Multiples vulnérabilités dans Cisco Identity Services Engine 2025-06-26T00:00:00.000000 2025-08-01T00:00:00.000000
certfr-2025-avi-0538 Multiples vulnérabilités dans VMware Tanzu 2025-06-26T00:00:00.000000 2025-06-26T00:00:00.000000
certfr-2025-avi-0537 Multiples vulnérabilités dans GitLab 2025-06-25T00:00:00.000000 2025-06-25T00:00:00.000000
certfr-2025-avi-0536 Multiples vulnérabilités dans les produits Mozilla 2025-06-25T00:00:00.000000 2025-06-25T00:00:00.000000
certfr-2025-avi-0535 Vulnérabilité dans VMware Tanzu 2025-06-25T00:00:00.000000 2025-06-25T00:00:00.000000
certfr-2025-avi-0534 Multiples vulnérabilités dans Google Chrome 2025-06-25T00:00:00.000000 2025-06-25T00:00:00.000000
certfr-2025-avi-0533 Multiples vulnérabilités dans Elastic Kibana 2025-06-25T00:00:00.000000 2025-06-25T00:00:00.000000
certfr-2025-avi-0532 Multiples vulnérabilités dans les produits Splunk 2025-06-24T00:00:00.000000 2025-06-24T00:00:00.000000
certfr-2025-avi-0531 Vulnérabilité dans Bitdefender SecurePass 2025-06-23T00:00:00.000000 2025-06-23T00:00:00.000000
certfr-2025-avi-0530 Multiples vulnérabilités dans les produits IBM 2025-06-20T00:00:00.000000 2025-06-20T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated