Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2024-55542 |
4.4 (3.0)
|
Local privilege escalation due to excessive permi… |
Acronis |
Acronis Cyber Protect 16 |
2025-01-02T15:26:40.928Z | 2026-02-26T19:09:34.461Z |
| CVE-2025-1429 |
7.8 (3.1)
|
MODEL File Parsing Heap-Based Buffer Overflow Vulnerability |
Autodesk |
AutoCAD |
2025-03-13T16:47:42.309Z | 2026-02-26T19:09:34.269Z |
| CVE-2024-43097 |
7.8 (3.1)
|
In resizeToAtLeast of SkRegion.cpp, there is a po… |
Google |
Android |
2025-01-02T23:58:26.791Z | 2026-02-26T19:09:34.125Z |
| CVE-2025-1430 |
7.8 (3.1)
|
SLDPRT File Parsing Memory Corruption Vulnerability |
Autodesk |
AutoCAD |
2025-03-13T16:48:13.960Z | 2026-02-26T19:09:33.953Z |
| CVE-2024-43768 |
7.8 (3.1)
|
In skia_alloc_func of SkDeflate.cpp, there is a p… |
Google |
Android |
2025-01-02T23:58:27.245Z | 2026-02-26T19:09:33.797Z |
| CVE-2025-1431 |
7.8 (3.1)
|
SLDPRT File Parsing Out-of-Bounds Read Vulnerability |
Autodesk |
AutoCAD |
2025-03-13T16:48:51.554Z | 2026-02-26T19:09:33.641Z |
| CVE-2024-20140 |
6.7 (3.1)
|
In power, there is a possible out of bounds write… |
MediaTek, Inc. |
MT6739, MT6761, MT6768, MT6781, MT6833, MT6853, MT6877, MT6885, MT6893, MT8518S, MT8532 |
2025-01-06T03:17:43.276Z | 2026-02-26T19:09:33.507Z |
| CVE-2025-1432 |
7.8 (3.1)
|
3DM File Parsing Use-After-Free Vulnerability |
Autodesk |
AutoCAD |
2025-03-13T16:49:14.298Z | 2026-02-26T19:09:33.339Z |
| CVE-2024-20146 |
8.1 (3.1)
|
In wlan STA driver, there is a possible out of bo… |
MediaTek, Inc. |
MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6990, MT7902, MT7920, MT7922, MT8365, MT8518S, MT8532, MT8666, MT8667, MT8673, MT8755, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8796, MT8798, MT8893 |
2025-01-06T03:17:49.872Z | 2026-02-26T19:09:33.155Z |
| CVE-2025-1649 |
7.8 (3.1)
|
CATPRODUCT File Parsing Uninitialized Variable Vulnerability |
Autodesk |
AutoCAD |
2025-03-13T16:51:13.073Z | 2026-02-26T19:09:32.934Z |
| CVE-2024-20148 |
9.8 (3.1)
|
In wlan STA FW, there is a possible out of bounds… |
MediaTek, Inc. |
MT3603, MT6835, MT6878, MT6886, MT6897, MT7902, MT7920, MT7922, MT8518S, MT8532, MT8766, MT8768, MT8775, MT8796, MT8798 |
2025-01-06T03:17:51.547Z | 2026-02-26T19:09:32.784Z |
| CVE-2024-20105 |
6.7 (3.1)
|
In m4u, there is a possible out of bounds write d… |
MediaTek, Inc. |
MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8666, MT8667, MT8673, MT8768 |
2025-01-06T03:17:53.258Z | 2026-02-26T19:09:32.642Z |
| CVE-2025-1650 |
7.8 (3.1)
|
CATPRODUCT File Parsing Uninitialized Variable Vulnerability |
Autodesk |
AutoCAD |
2025-03-13T16:51:22.108Z | 2026-02-26T19:09:32.498Z |
| CVE-2024-21464 |
8.4 (3.1)
|
Buffer Copy Without Checking Size of Input in Data Net… |
Qualcomm, Inc. |
Snapdragon |
2025-01-06T10:33:12.535Z | 2026-02-26T19:09:32.325Z |
| CVE-2025-1651 |
7.8 (3.1)
|
MODEL File Parsing Heap-Based Buffer Overflow Vulnerability |
Autodesk |
AutoCAD |
2025-03-13T16:51:30.258Z | 2026-02-26T19:09:32.165Z |
| CVE-2024-45553 |
7.8 (3.1)
|
Use After Free in DSP Services |
Qualcomm, Inc. |
Snapdragon |
2025-01-06T10:33:29.773Z | 2026-02-26T19:09:32.017Z |
| CVE-2025-1652 |
7.8 (3.1)
|
MODEL File Parsing Out-of-Bounds Read Vulnerability |
Autodesk |
AutoCAD |
2025-03-13T16:51:36.291Z | 2026-02-26T19:09:31.864Z |
| CVE-2025-0283 |
7 (3.1)
|
A stack-based buffer overflow in Ivanti Connect S… |
Ivanti |
Connect Secure |
2025-01-08T22:15:59.822Z | 2026-02-26T19:09:31.728Z |
| CVE-2025-24855 |
7.8 (3.1)
|
numbers.c in libxslt before 1.1.43 has a use-afte… |
xmlsoft |
libxslt |
2025-03-14T00:00:00.000Z | 2026-02-26T19:09:31.574Z |
| CVE-2024-53704 |
8.2 (3.1)
|
An Improper Authentication vulnerability in the S… |
SonicWall |
SonicOS |
2025-01-09T06:52:16.771Z | 2026-02-26T19:09:31.400Z |
| CVE-2024-53706 |
7.8 (3.1)
|
A vulnerability in the Gen7 SonicOS Cloud platfor… |
SonicWall |
SonicOS |
2025-01-09T07:05:11.185Z | 2026-02-26T19:09:31.247Z |
| CVE-2024-26006 |
6.9 (3.1)
|
An improper neutralization of input during web pa… |
Fortinet |
FortiProxy |
2025-03-14T09:24:56.620Z | 2026-02-26T19:09:31.094Z |
| CVE-2025-23016 |
9.3 (3.1)
|
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an… |
FastCGI |
fcgi |
2025-01-10T00:00:00.000Z | 2026-02-26T19:09:30.942Z |
| CVE-2025-2000 |
9.8 (3.1)
|
Qiskit SDK code execution |
IBM |
Qiskit SDK |
2025-03-14T13:04:46.351Z | 2026-02-26T19:09:30.796Z |
| CVE-2024-55591 |
9.6 (3.1)
|
An Authentication Bypass Using an Alternate Path … |
Fortinet |
FortiOS |
2025-01-14T14:08:34.207Z | 2026-02-26T19:09:30.650Z |
| CVE-2024-45643 |
5.9 (3.1)
|
IBM QRadar EDR information disclosure |
IBM |
QRadar EDR |
2025-03-14T14:49:01.428Z | 2026-02-26T19:09:30.494Z |
| CVE-2024-10630 |
7.8 (3.1)
|
A race condition in Ivanti Application Control En… |
Ivanti |
Application Control Engine |
2025-01-14T16:49:45.799Z | 2026-02-26T19:09:30.350Z |
| CVE-2024-46662 |
8.3 (3.1)
|
A improper neutralization of special elements use… |
Fortinet |
FortiManager |
2025-03-14T15:03:27.830Z | 2026-02-26T19:09:30.163Z |
| CVE-2024-10811 |
9.8 (3.1)
|
Absolute path traversal in Ivanti EPM before the … |
Ivanti |
Endpoint Manager |
2025-01-14T16:59:32.982Z | 2026-02-26T19:09:29.972Z |
| CVE-2024-13158 |
7.2 (3.1)
|
An unbounded resource search path in Ivanti EPM b… |
Ivanti |
Endpoint Manager |
2025-01-14T17:13:29.275Z | 2026-02-26T19:09:29.804Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2022-50550 |
N/A
|
blk-iolatency: Fix memory leak on add_disk() failures |
Linux |
Linux |
2025-10-07T15:21:12.689Z | 2025-10-07T15:21:12.689Z |
| CVE-2022-50549 |
N/A
|
dm thin: Fix ABBA deadlock between shrink_slab and dm_… |
Linux |
Linux |
2025-10-07T15:21:12.006Z | 2025-10-07T15:21:12.006Z |
| CVE-2022-50548 |
N/A
|
media: i2c: hi846: Fix memory leak in hi846_parse_dt() |
Linux |
Linux |
2025-10-07T15:21:11.318Z | 2025-10-07T15:21:11.318Z |
| CVE-2022-50547 |
N/A
|
media: solo6x10: fix possible memory leak in solo_sysf… |
Linux |
Linux |
2025-10-07T15:21:10.620Z | 2025-10-07T15:21:10.620Z |
| CVE-2022-50546 |
N/A
|
ext4: fix uninititialized value in 'ext4_evict_inode' |
Linux |
Linux |
2025-10-07T15:21:09.963Z | 2025-10-07T15:21:09.963Z |
| CVE-2022-50545 |
N/A
|
r6040: Fix kmemleak in probe and remove |
Linux |
Linux |
2025-10-07T15:21:09.288Z | 2025-10-07T15:21:09.288Z |
| CVE-2022-50543 |
N/A
|
RDMA/rxe: Fix mr->map double free |
Linux |
Linux |
2025-10-07T15:21:07.939Z | 2025-10-07T15:21:07.939Z |
| CVE-2022-50544 |
N/A
|
usb: host: xhci: Fix potential memory leak in xhci_all… |
Linux |
Linux |
2025-10-07T15:21:08.629Z | 2025-12-23T13:29:52.195Z |
| CVE-2022-50542 |
N/A
|
media: si470x: Fix use-after-free in si470x_int_in_cal… |
Linux |
Linux |
2025-10-07T15:21:07.236Z | 2025-12-23T13:29:50.736Z |
| CVE-2022-50541 |
N/A
|
dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counte… |
Linux |
Linux |
2025-10-07T15:21:06.548Z | 2025-10-30T19:33:04.866Z |
| CVE-2022-50538 |
N/A
|
vme: Fix error not catched in fake_init() |
Linux |
Linux |
2025-10-07T15:21:04.428Z | 2025-10-07T15:21:04.428Z |
| CVE-2022-50539 |
N/A
|
ARM: OMAP2+: omap4-common: Fix refcount leak bug |
Linux |
Linux |
2025-10-07T15:21:05.152Z | 2025-12-23T13:29:49.261Z |
| CVE-2022-50540 |
N/A
|
dmaengine: qcom-adm: fix wrong sizeof config in slave_config |
Linux |
Linux |
2025-10-07T15:21:05.836Z | 2025-10-07T15:21:05.836Z |
| CVE-2022-50537 |
N/A
|
firmware: raspberrypi: fix possible memory leak in rpi… |
Linux |
Linux |
2025-10-07T15:21:03.749Z | 2025-10-07T15:21:03.749Z |
| CVE-2026-26724 |
7.6 (3.1)
|
Cross Site Scripting vulnerability in Key Systems… |
n/a |
n/a |
2026-02-20T00:00:00.000Z | 2026-02-26T22:06:41.927Z |
| CVE-2026-26464 |
6.1 (3.1)
|
Stored Cross-Site Scripting (XSS) was found in th… |
n/a |
n/a |
2026-02-23T00:00:00.000Z | 2026-02-26T22:06:10.099Z |
| CVE-2026-24953 |
6.5 (3.1)
|
WordPress Simple File List plugin <= 6.1.15 - Arbitrar… |
Mitchell Bennis |
Simple File List |
2026-02-20T15:47:08.637Z | 2026-02-26T22:05:33.879Z |
| CVE-2022-50536 |
N/A
|
bpf, sockmap: Fix repeated calls to sock_put() when ms… |
Linux |
Linux |
2025-10-07T15:21:03.056Z | 2025-10-07T15:21:03.056Z |
| CVE-2026-24946 |
6.5 (3.1)
|
WordPress Print Invoice & Delivery Notes for WooCommer… |
tychesoftwares |
Print Invoice & Delivery Notes for WooCommerce |
2026-02-20T15:47:07.869Z | 2026-02-26T22:04:24.610Z |
| CVE-2025-55131 |
7.1 (3.0)
|
A flaw in Node.js's buffer allocation logic can e… |
nodejs |
node |
2026-01-20T20:41:55.591Z | 2026-02-27T15:11:22.041Z |
| CVE-2024-37227 |
4.3 (3.1)
|
WordPress Newsletters plugin <= 4.9.7 - Cross Site Req… |
Tribulant |
Newsletters |
2024-06-21T13:40:52.608Z | 2026-02-27T15:13:06.498Z |
| CVE-2023-53674 |
N/A
|
clk: Fix memory leak in devm_clk_notifier_register() |
Linux |
Linux |
2025-10-07T15:21:30.320Z | 2025-10-07T15:21:30.320Z |
| CVE-2023-53675 |
N/A
|
scsi: ses: Fix possible desc_ptr out-of-bounds accesses |
Linux |
Linux |
2025-10-07T15:21:31.018Z | 2026-01-05T10:21:48.403Z |
| CVE-2023-53676 |
N/A
|
scsi: target: iscsi: Fix buffer overflow in lio_target… |
Linux |
Linux |
2025-10-07T15:21:31.757Z | 2026-01-05T10:21:49.841Z |
| CVE-2023-53677 |
N/A
|
drm/i915: Fix memory leaks in i915 selftests |
Linux |
Linux |
2025-10-07T15:21:32.551Z | 2025-10-07T15:21:32.551Z |
| CVE-2023-53673 |
N/A
|
Bluetooth: hci_event: call disconnect callback before … |
Linux |
Linux |
2025-10-07T15:21:29.632Z | 2026-02-12T08:19:13.041Z |
| CVE-2023-53671 |
N/A
|
srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL |
Linux |
Linux |
2025-10-07T15:21:28.307Z | 2026-01-05T10:21:45.670Z |
| CVE-2023-53672 |
N/A
|
btrfs: output extra debug info if we failed to find an… |
Linux |
Linux |
2025-10-07T15:21:28.975Z | 2026-01-05T10:21:47.075Z |
| CVE-2023-53670 |
N/A
|
nvme-core: fix dev_pm_qos memleak |
Linux |
Linux |
2025-10-07T15:21:27.626Z | 2025-10-07T15:21:27.626Z |
| CVE-2023-53668 |
N/A
|
ring-buffer: Fix deadloop issue on reading trace_pipe |
Linux |
Linux |
2025-10-07T15:21:26.164Z | 2025-10-07T15:21:26.164Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2022-50543 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix mr->map double f… | 2025-10-07T16:15:38.687 | 2026-02-26T23:17:13.433 |
| fkie_cve-2022-50544 | In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential… | 2025-10-07T16:15:38.823 | 2026-02-26T23:17:08.363 |
| fkie_cve-2022-50542 | In the Linux kernel, the following vulnerability has been resolved: media: si470x: Fix use-after-f… | 2025-10-07T16:15:38.557 | 2026-02-26T23:17:03.400 |
| fkie_cve-2022-50541 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Reset … | 2025-10-07T16:15:38.437 | 2026-02-26T23:16:57.527 |
| fkie_cve-2022-50538 | In the Linux kernel, the following vulnerability has been resolved: vme: Fix error not catched in … | 2025-10-07T16:15:38.067 | 2026-02-26T23:16:52.247 |
| fkie_cve-2022-50539 | In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: omap4-common: Fix… | 2025-10-07T16:15:38.200 | 2026-02-26T23:16:47.367 |
| fkie_cve-2022-50540 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong… | 2025-10-07T16:15:38.320 | 2026-02-26T23:16:43.437 |
| fkie_cve-2022-50537 | In the Linux kernel, the following vulnerability has been resolved: firmware: raspberrypi: fix pos… | 2025-10-07T16:15:37.943 | 2026-02-26T23:16:38.403 |
| fkie_cve-2026-26724 | Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 2023… | 2026-02-20T17:25:55.590 | 2026-02-26T23:16:34.630 |
| fkie_cve-2026-26464 | Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management … | 2026-02-23T18:25:51.630 | 2026-02-26T23:16:34.463 |
| fkie_cve-2026-24953 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mit… | 2026-02-20T16:22:39.547 | 2026-02-26T23:16:34.203 |
| fkie_cve-2022-50536 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated cal… | 2025-10-07T16:15:37.810 | 2026-02-26T23:16:34.007 |
| fkie_cve-2026-24946 | Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerc… | 2026-02-20T16:22:39.023 | 2026-02-26T23:16:33.980 |
| fkie_cve-2025-55131 | A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are in… | 2026-01-20T21:16:03.320 | 2026-02-26T23:16:24.893 |
| fkie_cve-2024-37227 | Cross Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters.This issue affects Newslet… | 2024-06-21T14:15:13.130 | 2026-02-26T23:16:24.407 |
| fkie_cve-2023-53674 | In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_c… | 2025-10-07T16:15:51.370 | 2026-02-26T23:15:35.127 |
| fkie_cve-2023-53675 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible desc_p… | 2025-10-07T16:15:51.503 | 2026-02-26T23:15:30.880 |
| fkie_cve-2023-53676 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffe… | 2025-10-07T16:15:51.653 | 2026-02-26T23:15:26.383 |
| fkie_cve-2023-53677 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leaks in … | 2025-10-07T16:15:51.787 | 2026-02-26T23:15:21.823 |
| fkie_cve-2023-53673 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call dis… | 2025-10-07T16:15:51.247 | 2026-02-26T23:15:14.977 |
| fkie_cve-2023-53671 | In the Linux kernel, the following vulnerability has been resolved: srcu: Delegate work to the boo… | 2025-10-07T16:15:51.000 | 2026-02-26T23:15:00.707 |
| fkie_cve-2023-53672 | In the Linux kernel, the following vulnerability has been resolved: btrfs: output extra debug info… | 2025-10-07T16:15:51.123 | 2026-02-26T23:14:54.960 |
| fkie_cve-2023-53670 | In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix dev_pm_qos meml… | 2025-10-07T16:15:50.880 | 2026-02-26T23:14:36.277 |
| fkie_cve-2023-53668 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix deadloop issu… | 2025-10-07T16:15:50.640 | 2026-02-26T23:14:30.047 |
| fkie_cve-2023-53669 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix skb_copy_ubufs() vs B… | 2025-10-07T16:15:50.770 | 2026-02-26T23:14:23.720 |
| fkie_cve-2023-53667 | In the Linux kernel, the following vulnerability has been resolved: net: cdc_ncm: Deal with too lo… | 2025-10-07T16:15:50.513 | 2026-02-26T23:13:24.757 |
| fkie_cve-2023-53666 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix mis… | 2025-10-07T16:15:50.390 | 2026-02-26T23:13:19.520 |
| fkie_cve-2023-53665 | In the Linux kernel, the following vulnerability has been resolved: md: don't dereference mddev af… | 2025-10-07T16:15:50.280 | 2026-02-26T23:13:15.283 |
| fkie_cve-2023-53663 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Check instead of as… | 2025-10-07T16:15:50.043 | 2026-02-26T23:13:09.007 |
| fkie_cve-2023-53664 | In the Linux kernel, the following vulnerability has been resolved: OPP: Fix potential null ptr de… | 2025-10-07T16:15:50.163 | 2026-02-26T23:13:05.093 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-8p8j-jq9g-4f8j |
8.8 (3.1)
|
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions e… | 2026-02-25T15:31:39Z | 2026-02-25T15:31:39Z |
| ghsa-xx53-6qqj-gr7w |
9.8 (3.1)
|
Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence o… | 2026-02-24T15:30:33Z | 2026-02-25T15:31:37Z |
| ghsa-xchm-7954-5wvg |
9.8 (3.1)
|
Use-after-free in the DOM: Window and Location component. This vulnerability affects Firefox < 148,… | 2026-02-24T15:30:32Z | 2026-02-25T15:31:37Z |
| ghsa-vxjv-c6cq-74m6 |
9.8 (3.1)
|
Mitigation bypass in the Networking: Cache component. This vulnerability affects Firefox < 148 and … | 2026-02-24T15:30:32Z | 2026-02-25T15:31:37Z |
| ghsa-vmmw-c3hw-gvm3 |
9.8 (3.1)
|
Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remo… | 2026-02-24T00:31:34Z | 2026-02-25T15:31:37Z |
| ghsa-qvmx-rqmx-pvfg |
9.1 (3.1)
|
Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to p… | 2026-02-24T00:31:34Z | 2026-02-25T15:31:37Z |
| ghsa-p9m7-fwrr-649p |
9.8 (3.1)
|
TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiag… | 2026-02-23T21:31:27Z | 2026-02-25T15:31:37Z |
| ghsa-jvc5-7j9r-q4m6 |
9.8 (3.1)
|
Same-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox < 14… | 2026-02-24T15:30:32Z | 2026-02-25T15:31:37Z |
| ghsa-jqhg-j5gv-hpmr |
8.8 (3.1)
|
TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSy… | 2026-02-23T21:31:27Z | 2026-02-25T15:31:37Z |
| ghsa-h79p-mfpr-8qm4 |
9.8 (3.1)
|
Use-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox < 148, Firef… | 2026-02-24T15:30:32Z | 2026-02-25T15:31:37Z |
| ghsa-fc3q-vg8h-qrfp |
4.3 (3.1)
|
A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypa… | 2026-02-24T21:31:46Z | 2026-02-25T15:31:37Z |
| ghsa-f8w4-9vp9-7v2q |
9.1 (3.1)
|
Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute … | 2026-02-23T21:31:27Z | 2026-02-25T15:31:37Z |
| ghsa-cgrc-pwqf-64v8 |
9.8 (3.1)
|
Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox… | 2026-02-24T15:30:32Z | 2026-02-25T15:31:37Z |
| ghsa-3fr2-qc88-c4cv |
6.5 (3.1)
|
Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and… | 2026-02-24T21:31:47Z | 2026-02-25T15:31:37Z |
| ghsa-33jq-j95r-2gpj |
5.4 (3.1)
|
Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attack… | 2026-02-24T00:31:34Z | 2026-02-25T15:31:37Z |
| ghsa-j7vj-8xmw-gvff |
8.6 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-17T12:31:07Z | 2026-02-25T15:31:36Z |
| ghsa-3rhf-g27v-qpj7 |
9.9 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in Bravis-Themes Bravis Addons bravis… | 2026-02-20T18:31:38Z | 2026-02-25T15:31:36Z |
| ghsa-23vm-r6m3-8q9g |
6.5 (3.1)
|
Missing Authorization vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template… | 2026-02-20T18:31:38Z | 2026-02-25T15:31:36Z |
| ghsa-5vhq-wv6w-vj48 |
7.8 (3.1)
|
Buffer Over-read in GitHub repository vim/vim prior to 9.0.0217. | 2022-08-18T00:00:17Z | 2026-02-25T15:31:35Z |
| ghsa-353c-4p9g-7m63 |
7.8 (3.1)
|
Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow … | 2022-05-13T01:16:11Z | 2026-02-25T15:31:32Z |
| ghsa-mhc9-48gj-9gp3 |
5.3 (4.0)
|
Fickling has safety check bypass via REDUCE+BUILD opcode sequence | 2026-02-25T15:24:18Z | 2026-02-25T15:24:18Z |
| ghsa-273h-m46v-96q4 |
3.7 (3.1)
|
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for… | 2026-02-25T15:20:15Z | 2026-02-25T15:20:16Z |
| ghsa-j7j6-7hfx-5522 |
7.5 (3.1)
|
Duplicate Advisory: Inconsistent Interpretation of HTTP Requests in Waitress | 2022-05-24T17:07:06Z | 2026-02-25T14:07:30Z |
| ghsa-qvwr-8759-6g2c |
6.5 (3.1)
|
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The… | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-pgjf-9qg9-f4gv |
7.0 (4.0)
|
An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a … | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-hpp6-437r-vmvj |
6.4 (3.1)
|
The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored… | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-hjgq-ff5j-5v2m |
5.5 (3.1)
|
A flaw was found in the udisks storage management daemon that allows unprivileged users to back up … | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-fw7p-cggr-9xm6 |
7.1 (3.1)
|
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for re… | 2026-02-25T12:30:29Z | 2026-02-25T12:30:29Z |
| ghsa-4qpc-c9r6-9jrx |
4.3 (3.1)
|
The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cros… | 2026-02-25T12:30:28Z | 2026-02-25T12:30:29Z |
| ghsa-x4x7-v8wj-3952 |
4.3 (3.1)
|
The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a miss… | 2026-02-25T12:30:28Z | 2026-02-25T12:30:28Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-101 |
|
A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to… | selenium | 2023-07-05T18:15:00Z | 2023-08-31T20:11:41.543920Z |
| pysec-2023-153 |
6.1 (3.1)
|
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_u… | horizon | 2023-08-22T19:16:00+00:00 | 2023-08-30T18:28:45.068261+00:00 |
| pysec-2023-92 |
|
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt. | langchain | 2023-06-20T15:15:00Z | 2023-08-29T18:59:00.000000Z |
| pysec-2023-145 |
9.8 (3.1)
|
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via th… | langchain | 2023-08-15T17:15:00Z | 2023-08-29T18:47:00.000000Z |
| pysec-2023-152 |
8.1 (3.1)
|
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be… | apache-airflow | 2023-08-23T16:15:00+00:00 | 2023-08-29T18:28:28.180958+00:00 |
| pysec-2023-109 |
|
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the… | langchain | 2023-07-06T14:15:00Z | 2023-08-29T16:42:00.000000Z |
| pysec-2023-98 |
|
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALC… | langchain | 2023-07-03T21:15:00Z | 2023-08-29T16:40:00.000000Z |
| pysec-2023-151 |
9.8 (3.1)
|
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via th… | langchain | 2023-08-22T19:16:00Z | 2023-08-29T15:11:37.047967Z |
| pysec-2023-91 |
|
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution. | langchain | 2023-06-14T15:15:00Z | 2023-08-28T16:50:25.676144Z |
| pysec-2023-110 |
|
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sens… | langchain | 2023-07-06T14:15:00Z | 2023-08-28T16:50:24.862628Z |
| pysec-2023-150 |
7.8 (3.1)
|
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 a… | exiv2 | 2023-08-22T19:15:00+00:00 | 2023-08-25T18:28:13.546911+00:00 |
| pysec-2023-149 |
|
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabl… | json2xml | 2023-08-22T19:16:00+00:00 | 2023-08-22T20:23:14.541580+00:00 |
| pysec-2023-148 |
9.8 (3.1)
|
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary… | llama-index | 2023-08-15T17:15:00+00:00 | 2023-08-22T18:27:29.213194+00:00 |
| pysec-2023-147 |
9.8 (3.1)
|
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execu… | langchain | 2023-08-15T17:15:00+00:00 | 2023-08-22T18:27:28.580705+00:00 |
| pysec-2023-138 |
9.8 (3.1)
|
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary co… | langchain | 2023-08-05T03:15:00Z | 2023-08-22T15:51:39.650271Z |
| pysec-2023-146 |
9.8 (3.1)
|
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to exe… | langchain | 2023-08-15T17:15:00+00:00 | 2023-08-22T14:25:42.963301+00:00 |
| pysec-2023-112 |
|
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have c… | cryptography | 2023-07-14T20:15:00+00:00 | 2023-08-21T15:28:13.372385+00:00 |
| pysec-2023-102 |
|
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8… | scipy | 2023-07-05T17:15:00Z | 2023-08-17T13:32:44.929651Z |
| pysec-2023-144 |
8.8 (3.1)
|
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.… | wger | 2023-08-08T16:15:00+00:00 | 2023-08-17T03:22:34.520767+00:00 |
| pysec-2023-143 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows … | wger | 2023-08-08T16:15:00+00:00 | 2023-08-17T03:22:34.437974+00:00 |
| pysec-2023-142 |
5.9 (3.1)
|
Vyer is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In ver… | vyper | 2023-08-07T19:15:00+00:00 | 2023-08-17T03:22:33.953997+00:00 |
| pysec-2022-43058 |
7.5 (3.1)
|
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i… | pywasm3 | 2022-09-20T18:15:00+00:00 | 2023-08-17T03:22:33.607469+00:00 |
| pysec-2022-43057 |
5.5 (3.1)
|
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Mem… | pywasm3 | 2022-07-27T14:15:00+00:00 | 2023-08-17T03:22:33.522615+00:00 |
| pysec-2023-140 |
6.5 (3.1)
|
MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasou… | mindsdb | 2023-08-04T18:15:00+00:00 | 2023-08-17T03:22:32.744229+00:00 |
| pysec-2023-139 |
5.3 (3.1)
|
Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5… | matrix-sydent | 2023-08-04T16:15:00+00:00 | 2023-08-17T03:22:32.583512+00:00 |
| pysec-2022-43056 |
9.8 (3.1)
|
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted … | keep | 2022-06-08T18:15:00+00:00 | 2023-08-17T03:22:31.636090+00:00 |
| pysec-2022-43055 |
7.5 (3.1)
|
Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by r… | hyperledger | 2022-11-12T20:15:00+00:00 | 2023-08-17T03:22:31.453589+00:00 |
| pysec-2023-137 |
|
GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from… | gitpython | 2023-08-11T07:15:00+00:00 | 2023-08-17T03:22:31.332731+00:00 |
| pysec-2022-43054 |
7.5 (3.1)
|
An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 a… | freetakserver | 2022-03-11T00:15:00+00:00 | 2023-08-17T03:22:31.240214+00:00 |
| pysec-2023-136 |
|
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… | apache-airflow | 2023-08-11T08:15:00+00:00 | 2023-08-17T03:22:30.530556+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33236 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.705030Z |
| gsd-2024-33257 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.704832Z |
| gsd-2024-33154 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.704633Z |
| gsd-2024-33320 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.704431Z |
| gsd-2024-33395 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.704229Z |
| gsd-2024-33391 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.703996Z |
| gsd-2024-33146 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.703789Z |
| gsd-2024-33429 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.703541Z |
| gsd-2024-33452 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.703341Z |
| gsd-2024-33294 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.703136Z |
| gsd-2024-33075 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.702915Z |
| gsd-2024-33008 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.702713Z |
| gsd-2024-33385 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.702499Z |
| gsd-2024-33187 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.702289Z |
| gsd-2024-33231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.702080Z |
| gsd-2024-33302 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.701883Z |
| gsd-2024-33483 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.701680Z |
| gsd-2024-33518 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.701479Z |
| gsd-2024-33476 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.701273Z |
| gsd-2024-33339 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.701010Z |
| gsd-2024-33381 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700809Z |
| gsd-2024-33401 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700617Z |
| gsd-2024-33226 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700419Z |
| gsd-2024-33209 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700226Z |
| gsd-2024-33026 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700031Z |
| gsd-2024-33079 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.699832Z |
| gsd-2024-33098 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.699609Z |
| gsd-2024-33325 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.699409Z |
| gsd-2024-33471 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.699196Z |
| gsd-2024-33130 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.698885Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-323 | Malicious code in eslint-plugin-fuel-react (npm) | 2026-01-17T21:37:23Z | 2026-01-23T01:39:00Z |
| mal-2026-321 | Malicious code in flip-prx (npm) | 2026-01-16T11:12:53Z | 2026-01-23T01:39:00Z |
| mal-2026-463 | Malicious code in corporate-blocking (npm) | 2026-01-22T12:17:58Z | 2026-01-23T01:38:59Z |
| mal-2026-458 | Malicious code in csv-parsing-xz (npm) | 2026-01-22T09:02:30Z | 2026-01-23T01:38:59Z |
| mal-2026-457 | Malicious code in csv-parsing-xx (npm) | 2026-01-22T09:02:29Z | 2026-01-23T01:38:59Z |
| mal-2026-435 | Malicious code in aligntype (npm) | 2026-01-21T06:49:59Z | 2026-01-23T01:38:59Z |
| mal-2026-414 | Malicious code in debox-rn (npm) | 2026-01-21T04:46:05Z | 2026-01-23T01:38:59Z |
| mal-2026-413 | Malicious code in coopshares-webcomponent (npm) | 2026-01-21T04:39:38Z | 2026-01-23T01:38:59Z |
| mal-2026-412 | Malicious code in connect-web (npm) | 2026-01-21T04:39:39Z | 2026-01-23T01:38:59Z |
| mal-2026-411 | Malicious code in collaborate (npm) | 2026-01-21T04:39:39Z | 2026-01-23T01:38:59Z |
| mal-2026-410 | Malicious code in clerk-js (npm) | 2026-01-21T04:39:39Z | 2026-01-23T01:38:59Z |
| mal-2026-409 | Malicious code in chai-async-test (npm) | 2026-01-21T04:51:11Z | 2026-01-23T01:38:59Z |
| mal-2026-408 | Malicious code in bitbot (npm) | 2026-01-21T04:39:38Z | 2026-01-23T01:38:59Z |
| mal-2026-407 | Malicious code in babel-js (npm) | 2026-01-21T04:48:23Z | 2026-01-23T01:38:59Z |
| mal-2026-406 | Malicious code in aws-crt-nodejs (npm) | 2026-01-21T04:46:06Z | 2026-01-23T01:38:59Z |
| mal-2026-405 | Malicious code in anthropic-sdk (npm) | 2026-01-21T04:34:17Z | 2026-01-23T01:38:59Z |
| mal-2026-388 | Malicious code in charlie_charlie_kirky (npm) | 2026-01-21T04:00:58Z | 2026-01-23T01:38:59Z |
| mal-2026-387 | Malicious code in chai-dex (npm) | 2026-01-21T04:24:06Z | 2026-01-23T01:38:59Z |
| mal-2026-386 | Malicious code in chai-chain-async (npm) | 2026-01-21T04:23:01Z | 2026-01-23T01:38:59Z |
| mal-2026-385 | Malicious code in blocks-builder-manifest-generator (npm) | 2026-01-21T03:56:28Z | 2026-01-23T01:38:59Z |
| mal-2026-357 | Malicious code in chai-bin (npm) | 2026-01-20T03:57:46Z | 2026-01-23T01:38:59Z |
| mal-2026-337 | Malicious code in chai-as-executed (npm) | 2026-01-19T00:56:45Z | 2026-01-23T01:38:59Z |
| mal-2026-331 | Malicious code in cyrpto (npm) | 2026-01-19T00:43:31Z | 2026-01-23T01:38:59Z |
| mal-2026-465 | Malicious code in @ikeacn/utils (npm) | 2026-01-22T15:49:16Z | 2026-01-23T01:38:58Z |
| mal-2026-464 | Malicious code in @ikeacn/icons (npm) | 2026-01-22T15:49:16Z | 2026-01-23T01:38:58Z |
| mal-2026-462 | Malicious code in @ikeacn/ui (npm) | 2026-01-22T12:23:23Z | 2026-01-23T01:38:58Z |
| mal-2026-461 | Malicious code in @corp-front/corporate-filter-company-select (npm) | 2026-01-22T12:24:27Z | 2026-01-23T01:38:58Z |
| mal-2026-456 | Malicious code in @mailpoet/eslint-config (npm) | 2026-01-22T09:07:20Z | 2026-01-23T01:38:58Z |
| mal-2026-455 | Malicious code in @mailpoet/components (npm) | 2026-01-22T09:07:20Z | 2026-01-23T01:38:58Z |
| mal-2026-454 | Malicious code in @mailpoet/component (npm) | 2026-01-22T09:07:20Z | 2026-01-23T01:38:58Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2794 | Fortinet FortiVoice: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2793 | Adobe Creative Cloud: Schwachstelle ermöglicht Denial of Service | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2792 | Fortinet FortiWeb: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2791 | Fortinet FortiSandbox: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2790 | Fortinet FortiPortal: Schwachstelle ermöglicht Denial of Service | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2788 | Siemens SIMATIC S7 Produkte: Schwachstelle ermöglicht Denial of Service | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2787 | Fortinet FortiOS SSLVPN: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2786 | Mehrere Fortinet Produkte: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2785 | Fortinet FortiOS und FortiProxy: Schwachstelle ermöglicht Privilegieneskalation | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2784 | Red Hat OpenStack Platform (Wallaby): Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2783 | Microsoft Office Produkte: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2782 | Microsoft GitHub Copilot für for Jetbrains: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2780 | Microsoft Exchange Server: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2779 | Microsoft Azure Monitor Agent: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2778 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2020-05-18T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2777 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2020-05-13T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2776 | Linux Kernel: Schwachstelle ermöglichen Umgehen von Sicherheitsvorkehrungen | 2020-05-12T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2775 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2020-05-12T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2774 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2020-05-07T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2773 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2020-05-03T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2772 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2020-04-29T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2771 | Linux Kernel: Mehrere Schwachstellen | 2019-11-20T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2770 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2019-11-04T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2769 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2019-05-01T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2766 | Google Cloud Platform: Schwachstelle ermöglicht Codeausführung | 2025-12-08T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2761 | Rockwell Automation FactoryTalk (DataMosaix Private Cloud): Schwachstelle ermöglicht SQL-Injection | 2025-12-08T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2760 | Phoenix Contact FL SWITCH: Mehrere Schwachstellen | 2025-12-08T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2758 | PowerDNS: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-08T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2719 | vim: Schwachstelle ermöglicht Codeausführung | 2025-12-02T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2532 | IBM DB2: Mehrere Schwachstellen | 2025-11-09T23:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhea-2025:3039 | Red Hat Enhancement Advisory: RHEA: Submariner 0.19.3 - bug fix and enhancement update | 2025-03-19T15:37:55+00:00 | 2026-02-17T07:50:24+00:00 |
| rhea-2024:7870 | Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.16.0 release | 2024-10-09T14:44:53+00:00 | 2026-02-17T07:50:21+00:00 |
| rhba-2024:9054 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.1 bugfix release | 2024-11-11T01:39:34+00:00 | 2026-02-17T07:50:19+00:00 |
| rhba-2024:7523 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.0 release | 2024-10-02T15:29:03+00:00 | 2026-02-17T07:50:17+00:00 |
| rhba-2024:11265 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.4.0 release. | 2024-12-17T15:12:17+00:00 | 2026-02-17T07:50:17+00:00 |
| rhba-2024:10184 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.5 bugfix release | 2024-11-21T22:06:56+00:00 | 2026-02-17T07:50:15+00:00 |
| rhsa-2025:1985 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.12 | 2025-03-05T13:15:01+00:00 | 2026-02-17T07:39:21+00:00 |
| rhsa-2025:9430 | Red Hat Security Advisory: krb5 security update | 2025-06-24T08:42:13+00:00 | 2026-02-17T07:33:22+00:00 |
| rhsa-2025:9418 | Red Hat Security Advisory: krb5 security update | 2025-06-24T00:42:44+00:00 | 2026-02-17T07:33:22+00:00 |
| rhsa-2025:8411 | Red Hat Security Advisory: krb5 security update | 2025-06-03T01:28:14+00:00 | 2026-02-17T07:33:20+00:00 |
| rhsa-2025:4238 | Red Hat Security Advisory: Red Hat Ceph Storage 6.1 bug fix update | 2025-04-28T05:31:42+00:00 | 2026-02-17T07:33:19+00:00 |
| rhsa-2025:15004 | Red Hat Security Advisory: krb5 security update | 2025-09-02T03:57:04+00:00 | 2026-02-17T07:33:19+00:00 |
| rhsa-2025:15003 | Red Hat Security Advisory: krb5 security update | 2025-09-02T02:59:04+00:00 | 2026-02-17T07:33:17+00:00 |
| rhsa-2025:15002 | Red Hat Security Advisory: krb5 security update | 2025-09-02T03:00:09+00:00 | 2026-02-17T07:33:17+00:00 |
| rhsa-2025:15001 | Red Hat Security Advisory: krb5 security update | 2025-09-02T04:13:59+00:00 | 2026-02-17T07:33:16+00:00 |
| rhsa-2025:15000 | Red Hat Security Advisory: krb5 security update | 2025-09-02T03:01:09+00:00 | 2026-02-17T07:33:16+00:00 |
| rhsa-2025:13904 | Red Hat Security Advisory: RHOAI 2.23.0 - Red Hat OpenShift AI | 2025-08-14T16:11:10+00:00 | 2026-02-17T07:33:15+00:00 |
| rhsa-2025:13777 | Red Hat Security Advisory: krb5 security update | 2025-08-13T05:03:10+00:00 | 2026-02-17T07:33:14+00:00 |
| rhsa-2025:13664 | Red Hat Security Advisory: krb5 security update | 2025-08-12T01:10:37+00:00 | 2026-02-17T07:33:11+00:00 |
| rhsa-2025:11487 | Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage | 2025-07-21T19:25:21+00:00 | 2026-02-17T07:33:11+00:00 |
| rhsa-2024:10957 | Red Hat Security Advisory: Updated 8.0 container image is now available in the Red Hat Ecosystem Catalog. | 2024-12-11T14:25:52+00:00 | 2026-02-17T07:33:09+00:00 |
| rhsa-2024:10956 | Red Hat Security Advisory: Red Hat Ceph Storage 8.0 security update | 2024-12-11T16:07:32+00:00 | 2026-02-17T07:33:08+00:00 |
| rhsa-2024:2010 | Red Hat Security Advisory: Satellite 6.15.0 release | 2024-04-23T17:18:21+00:00 | 2026-02-17T07:32:10+00:00 |
| rhsa-2024:1878 | Red Hat Security Advisory: RHUI 4.8 Release - Security Updates, Bug Fixes, and Enhancements | 2024-04-18T01:56:24+00:00 | 2026-02-17T07:32:10+00:00 |
| rhsa-2024:1640 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-04-02T19:34:39+00:00 | 2026-02-17T07:32:09+00:00 |
| rhsa-2024:1536 | Red Hat Security Advisory: Satellite 6.14.3 Async Security Update | 2024-03-27T13:22:31+00:00 | 2026-02-17T07:32:07+00:00 |
| rhsa-2025:7256 | Red Hat Security Advisory: git-lfs security update | 2025-05-13T08:49:39+00:00 | 2026-02-17T07:31:37+00:00 |
| rhsa-2025:4664 | Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates | 2025-05-07T12:48:57+00:00 | 2026-02-17T07:31:37+00:00 |
| rhsa-2025:4240 | Red Hat Security Advisory: Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog. | 2025-04-28T05:29:21+00:00 | 2026-02-17T07:31:36+00:00 |
| rhsa-2025:1747 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update | 2025-02-24T00:08:38+00:00 | 2026-02-17T07:31:36+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-15-160-02 | Sinapsi eSolar Light Plaintext Passwords Vulnerability | 2015-03-12T06:00:00.000000Z | 2025-06-06T21:42:24.744905Z |
| icsa-15-160-01a | N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A) | 2015-03-12T06:00:00.000000Z | 2025-06-06T21:42:18.275644Z |
| icsa-15-155-01 | XZERES 442SR Wind Turbine CSRF Vulnerability | 2015-03-07T07:00:00.000000Z | 2025-06-06T21:42:11.814604Z |
| icsa-15-153-02 | Moxa SoftCMS Buffer Overflow Vulnerability | 2015-03-05T07:00:00.000000Z | 2025-06-06T21:42:05.109005Z |
| icsa-15-148-01 | IDS RTU 850 Directory Traversal Vulnerability | 2015-02-28T07:00:00.000000Z | 2025-06-06T21:41:52.181609Z |
| icsa-15-141-01a | Schneider Electric OFS Server Vulnerability (Update A) | 2015-02-21T07:00:00.000000Z | 2025-06-06T21:41:39.275086Z |
| icsa-15-132-02 | Rockwell Automation RSView32 Weak Encryption Algorithm on Passwords | 2015-02-12T07:00:00.000000Z | 2025-06-06T21:41:32.834568Z |
| icsa-15-132-01 | Hospira LifeCare PCA Infusion System Vulnerabilities | 2015-02-12T07:00:00.000000Z | 2025-06-06T21:41:26.200883Z |
| icsa-15-125-01 | Hospira LifeCare PCA Infusion System Vulnerabilities | 2015-02-05T07:00:00.000000Z | 2025-06-06T21:41:19.746904Z |
| icsa-15-120-01 | Opto 22 Multiple Product Vulnerabilities | 2015-01-31T07:00:00.000000Z | 2025-06-06T21:41:13.287112Z |
| icsa-15-111-02 | Rockwell Automation RSLinx Classic Vulnerability | 2015-01-22T07:00:00.000000Z | 2025-06-06T21:41:06.693068Z |
| icsa-15-111-01 | Emerson AMS Device Manager SQL Injection Vulnerability | 2015-01-22T07:00:00.000000Z | 2025-06-06T21:41:00.174231Z |
| icsa-15-097-01 | Moxa VPort ActiveX SDK Plus Stack-Based Buffer Overflow Vulnerability | 2015-01-08T07:00:00.000000Z | 2025-06-06T21:40:40.543597Z |
| icsa-15-092-01 | Schneider Electric VAMPSET Software Buffer Overflow Vulnerability | 2015-01-03T07:00:00.000000Z | 2025-06-06T21:40:34.059444Z |
| icsa-15-090-03 | Hospira MedNet Vulnerabilitie | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:27.581727Z |
| icsa-15-090-02 | Ecava IntegraXor DLL Vulnerabilities | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:21.136198Z |
| icsa-15-090-01 | Inductive Automation Ignition Vulnerabilities | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:14.674541Z |
| icsa-15-085-01a | Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities (Update A) | 2015-12-27T07:00:00.000000Z | 2025-06-06T21:40:08.191186Z |
| icsa-15-076-02 | Honeywell XL Web Controller Directory Traversal Vulnerability | 2015-12-18T07:00:00.000000Z | 2025-06-06T21:40:01.723578Z |
| icsa-15-076-01 | XZERES 442SR Wind Turbine Vulnerability | 2015-12-18T07:00:00.000000Z | 2025-06-06T21:39:55.283613Z |
| icsa-15-071-01 | Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability | 2015-12-13T07:00:00.000000Z | 2025-06-06T21:39:48.399594Z |
| icsa-15-027-02 | Schneider Electric Multiple Products Buffer Overflow Vulnerability | 2015-10-30T06:00:00.000000Z | 2025-06-06T18:47:40.171170Z |
| icsa-15-006-01 | Eaton Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet Vulnerability | 2015-10-09T06:00:00.000000Z | 2025-06-06T18:47:33.703835Z |
| icsa-14-353-01c | Network Time Protocol Vulnerabilities | 2014-09-21T06:00:00.000000Z | 2025-06-06T18:46:55.063437Z |
| icsa-14-273-01 | SchneiderWEB Server Directory Traversal Vulnerability | 2014-07-03T06:00:00.000000Z | 2025-06-06T18:46:48.565481Z |
| icsa-14-269-01a | Bash Command Injection Vulnerability | 2014-06-29T06:00:00.000000Z | 2025-06-06T18:46:41.883464Z |
| icsa-14-238-02 | Schneider Electric Wonderware Vulnerabilities | 2014-05-29T06:00:00.000000Z | 2025-06-06T18:46:09.707282Z |
| icsa-14-205-01 | Morpho Itemiser 3 Hard-Coded Credential | 2014-04-26T06:00:00.000000Z | 2025-06-06T18:46:03.252742Z |
| icsa-14-202-01a | OleumTech WIO Family Vulnerabilities | 2014-04-23T06:00:00.000000Z | 2025-06-06T18:45:43.946744Z |
| icsa-14-114-02 | Siemens SIMATIC S7-1200 CPU Web Vulnerabilities | 2014-01-25T07:00:00.000000Z | 2025-06-06T18:45:30.985803Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ucm-csrf-jrkp4ent | Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-imp-sqlinj-grpuuqej | Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-cucm-xss-6mce4kpf | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-cucm-arb-write-74qzruuu | Cisco Unified Communications Products Arbitrary File Write Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-ce-roomos-dos-c65x2qf2 | Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-bgpevpn-zwtrtpbb | Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-19T14:12:27+00:00 |
| cisco-sa-java-spring-scf-rce-dqrhhjxh | Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022 | 2022-04-01T23:45:00+00:00 | 2022-04-15T15:31:28+00:00 |
| cisco-sa-wlc-auth-bypass-jrnhv4ff | Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-webuiapi-inj-nyrq92od | Cisco IOS XE Software Web UI API Injection Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-csrf-rxql4txr | Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vman-infodis-73shjneq | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vedge-dos-jervm4bb | Cisco SD-WAN vEdge Routers Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-privesc-vman-tejfpbsl | Cisco SD-WAN vManage Software Privilege Escalation Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-qfp-ipsec-gqmqvtqv | Cisco IOS XE Software IPSec Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-ncossh-dos-zakfodq8 | Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-iosxe-rpki-dos-2egcneke | Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-iosxe-priv-esc-grbtubu | Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-http-dos-svodkdbs | Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-cgr1k-ap-dos-mszr4qvh | Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-cdb-cmicr-vulns-kjjftnb | Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-c9800-snmp-trap-dos-mjent3ey | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-c9800-fnf-dos-bol5vlge | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-c9800-capwap-mdns-6psn7gku | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-appnav-xe-dos-j5mxtr4 | Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-ap-ip-flood-dos-6hxxenvq | Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-wsa-stored-xss-xpsjghmy | Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-webex-java-mvx6crh9 | Cisco Webex Meetings Java Deserialization Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-swa-filter-bypass-xxxtu3x | Cisco Web Security Appliance Filter Bypass Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-sna-xss-mca9tqnj | Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-info-exp-yxawyp3s | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-52160 | The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks. | 2024-02-02T08:00:00.000Z | 2026-02-20T23:31:36.000Z |
| msrc_cve-2024-45310 | runc can be confused to create empty files/directories on the host | 2024-09-01T07:00:00.000Z | 2026-02-20T23:29:51.000Z |
| msrc_cve-2024-26458 | Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. | 2024-02-02T08:00:00.000Z | 2026-02-20T23:29:33.000Z |
| msrc_cve-2024-26461 | Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. | 2024-02-02T08:00:00.000Z | 2026-02-20T23:27:38.000Z |
| msrc_cve-2024-27982 | The team has identified a critical vulnerability in the http server of the most recent version of Node where malformed headers can lead to HTTP request smuggling. Specifically if a space is placed before a content-length header it is not interpreted correctly enabling attackers to smuggle in a second request within the body of the first. | 2024-05-02T07:00:00.000Z | 2026-02-20T23:27:00.000Z |
| msrc_cve-2023-52447 | bpf: Defer the free of inner map when necessary | 2024-02-02T08:00:00.000Z | 2026-02-20T23:25:39.000Z |
| msrc_cve-2024-2746 | Incomplete fix for CVE-2024-1929 | 2024-05-02T07:00:00.000Z | 2026-02-20T23:24:51.000Z |
| msrc_cve-2024-26594 | ksmbd: validate mech token in session setup | 2024-02-02T08:00:00.000Z | 2026-02-20T23:23:43.000Z |
| msrc_cve-2024-1930 | No Limit on Number of Open Sessions / Bad Session Close Behaviour | 2024-05-02T07:00:00.000Z | 2026-02-20T23:23:00.000Z |
| msrc_cve-2024-26581 | netfilter: nft_set_rbtree: skip end interval element from gc | 2024-02-02T08:00:00.000Z | 2026-02-20T23:22:21.000Z |
| msrc_cve-2024-1929 | Local Root Exploit via Configuration Dictionary | 2024-05-02T07:00:00.000Z | 2026-02-20T23:21:13.000Z |
| msrc_cve-2024-26455 | fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c. | 2024-02-02T08:00:00.000Z | 2026-02-20T23:19:30.000Z |
| msrc_cve-2023-7207 | Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames. | 2024-01-01T08:00:00.000Z | 2026-02-20T23:17:19.000Z |
| msrc_cve-2024-27099 | Azure IoT Platform Device SDK Double Free Vulnerability | 2024-02-02T08:00:00.000Z | 2026-02-20T23:16:43.000Z |
| msrc_cve-2023-45803 | Request body not stripped after redirect in urllib3 | 2023-10-01T00:00:00.000Z | 2026-02-20T23:15:38.000Z |
| msrc_cve-2023-43804 | `Cookie` HTTP header isn't stripped on cross-origin redirects | 2023-10-01T00:00:00.000Z | 2026-02-20T23:12:56.000Z |
| msrc_cve-2024-20328 | ClamAV VirusEvent File Processing Command Injection Vulnerability | 2024-03-02T08:00:00.000Z | 2026-02-20T23:10:58.000Z |
| msrc_cve-2023-50658 | The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value. | 2023-12-01T08:00:00.000Z | 2026-02-20T23:09:57.000Z |
| msrc_cve-2024-21885 | Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent | 2024-02-02T08:00:00.000Z | 2026-02-20T23:08:55.000Z |
| msrc_cve-2024-21886 | Xorg-x11-server: heap buffer overflow in disabledevice | 2024-02-02T08:00:00.000Z | 2026-02-20T23:08:14.000Z |
| msrc_cve-2023-31975 | yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy. | 2023-05-01T00:00:00.000Z | 2026-02-20T23:04:56.000Z |
| msrc_cve-2023-27043 | The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python. | 2023-04-01T00:00:00.000Z | 2026-02-20T23:00:09.000Z |
| msrc_cve-2021-33454 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c. | 2022-07-02T00:00:00.000Z | 2026-02-20T22:58:55.000Z |
| msrc_cve-2023-1393 | A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW) the Xserver would leave a dangling pointer to that window in the CompScreen structure which will trigger a use-after-free later. | 2023-03-10T00:00:00.000Z | 2026-02-20T22:57:32.000Z |
| msrc_cve-2018-1000035 | A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution. | 2018-02-02T00:00:00.000Z | 2026-02-20T22:52:19.000Z |
| msrc_cve-2016-9844 | Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header. | 2017-01-02T00:00:00.000Z | 2026-02-20T22:51:40.000Z |
| msrc_cve-2015-7697 | Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 data in a ZIP archive. | 2015-11-02T00:00:00.000Z | 2026-02-20T22:51:02.000Z |
| msrc_cve-2015-7696 | Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive possibly related to an Extra-Field size value. | 2015-11-02T00:00:00.000Z | 2026-02-20T22:50:36.000Z |
| msrc_cve-2014-9913 | Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method. | 2017-01-02T00:00:00.000Z | 2026-02-20T22:50:20.000Z |
| msrc_cve-2014-8141 | Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command. | 2020-01-02T00:00:00.000Z | 2026-02-20T22:49:49.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201207-0370 | Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows… | 2025-12-22T21:27:57.994000Z |
| var-201904-1362 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T21:27:57.906000Z |
| var-202101-0119 | The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing… | 2025-12-22T21:27:57.360000Z |
| var-201904-1444 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T21:27:51.726000Z |
| var-201903-0442 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T21:27:51.555000Z |
| var-202203-1690 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if th… | 2025-12-22T21:27:10.472000Z |
| var-201109-0201 | Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 … | 2025-12-22T21:27:10.279000Z |
| var-201410-1217 | Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in c… | 2025-12-22T21:27:09.724000Z |
| var-201912-0626 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T21:27:08.439000Z |
| var-201109-0211 | Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers… | 2025-12-22T21:26:58.957000Z |
| var-200704-0216 | Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 al… | 2025-12-22T21:26:58.495000Z |
| var-201905-0709 | Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocess… | 2025-12-22T21:26:58.427000Z |
| var-201711-0445 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2025-12-22T21:26:13.807000Z |
| var-201306-0259 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T21:26:13.668000Z |
| var-201710-1405 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2025-12-22T21:26:04.812000Z |
| var-200701-0340 | The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428… | 2025-12-22T21:25:55.444000Z |
| var-201704-1589 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server t… | 2025-12-22T21:25:55.110000Z |
| var-201804-1177 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2025-12-22T21:25:55.031000Z |
| var-201304-0062 | Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, T… | 2025-12-22T21:25:53.536000Z |
| var-201010-0354 | Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Lin… | 2025-12-22T21:25:53.455000Z |
| var-200906-0603 | Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possi… | 2025-12-22T21:25:48.841000Z |
| var-202101-0222 | A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not… | 2025-12-22T21:25:48.769000Z |
| var-202106-0343 | Improper isolation of shared resources in some Intel(R) Processors may allow an authentic… | 2025-12-22T21:25:47.987000Z |
| var-201108-0132 | The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x thr… | 2025-12-22T21:25:46.261000Z |
| var-202110-1512 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS… | 2025-12-22T21:25:44.068000Z |
| var-201707-1188 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … | 2025-12-22T21:25:42.250000Z |
| var-201912-0593 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T21:25:41.941000Z |
| var-201611-0348 | named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-… | 2025-12-22T21:25:41.756000Z |
| var-202203-1400 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of servic… | 2025-12-22T21:25:41.306000Z |
| var-201906-1175 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an… | 2025-12-22T21:25:41.145000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-001382 | File Permission Vulnerability in Hitachi Command Suite | 2022-03-07T15:35+09:00 | 2022-03-07T15:35+09:00 |
| jvndb-2022-000008 | i-FILTER vulnerable to improper check for certificate revocation | 2022-03-04T14:12+09:00 | 2022-03-04T14:12+09:00 |
| jvndb-2022-000017 | Norton Security for Mac improperly processes ICMP packets | 2022-03-03T14:32+09:00 | 2022-03-03T14:32+09:00 |
| jvndb-2022-001380 | Multiples security updates for Trend Micro Endpoint security products for enterprises (March 2022) | 2022-03-02T17:07+09:00 | 2022-03-02T17:07+09:00 |
| jvndb-2021-000109 | Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields" | 2021-12-02T15:02+09:00 | 2022-02-18T16:18+09:00 |
| jvndb-2022-000014 | Multiple vulnerabilities in a-blog cms | 2022-02-18T15:55+09:00 | 2022-02-18T15:55+09:00 |
| jvndb-2022-000012 | Multiple vulnerabilities in phpUploader | 2022-02-17T15:20+09:00 | 2022-02-17T15:20+09:00 |
| jvndb-2022-000011 | HPE Agentless Management registers unquoted service paths | 2022-02-09T15:49+09:00 | 2022-02-09T15:49+09:00 |
| jvndb-2022-001299 | Cross-site Scripting Vulnerability in JP1/IT Desktop Management 2 | 2022-02-08T17:15+09:00 | 2022-02-08T17:15+09:00 |
| jvndb-2022-000009 | CSV+ vulnerable to cross-site scripting | 2022-02-08T16:33+09:00 | 2022-02-08T16:33+09:00 |
| jvndb-2022-000010 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2022-02-08T16:13+09:00 | 2022-02-08T16:13+09:00 |
| jvndb-2016-008013 | Multiple ESET products for macOS vulnerable to improper server certificate verification | 2022-02-07T14:18+09:00 | 2022-02-07T14:18+09:00 |
| jvndb-2022-000007 | Multiple vulnerabilities in TransmitMail | 2022-01-25T15:31+09:00 | 2022-01-25T15:31+09:00 |
| jvndb-2022-001097 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux | 2022-01-25T13:35+09:00 | 2022-01-25T13:35+09:00 |
| jvndb-2022-001087 | GROWI vulnerable to authorization bypass through user-controlled key | 2022-01-24T14:07+09:00 | 2022-01-24T14:07+09:00 |
| jvndb-2022-000006 | Multiple cross-site scripting vulnerabilities in php_mailform | 2022-01-20T15:42+09:00 | 2022-01-20T15:42+09:00 |
| jvndb-2022-000001 | Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting | 2022-01-19T14:00+09:00 | 2022-01-19T14:00+09:00 |
| jvndb-2022-000005 | PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption | 2022-01-13T15:26+09:00 | 2022-01-13T15:26+09:00 |
| jvndb-2022-000004 | Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials | 2022-01-13T15:21+09:00 | 2022-01-13T15:21+09:00 |
| jvndb-2022-000003 | Jimoty App for Android uses a hard-coded API key for an external service | 2022-01-12T15:37+09:00 | 2022-01-12T15:37+09:00 |
| jvndb-2022-000002 | Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" | 2022-01-12T15:33+09:00 | 2022-01-12T15:33+09:00 |
| jvndb-2021-006117 | Multiple vulnerabilities in IDEC PLCs | 2021-12-27T16:54+09:00 | 2022-01-11T16:36+09:00 |
| jvndb-2021-006146 | Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems | 2021-12-28T11:51+09:00 | 2021-12-28T11:51+09:00 |
| jvndb-2021-006026 | TP-Link TL-WR802N V4(JP) vulnerable to OS command injection | 2021-12-24T15:31+09:00 | 2021-12-24T15:31+09:00 |
| jvndb-2021-005998 | Multiple vulnerabilities in QNAP VioStar NVR | 2021-12-24T10:58+09:00 | 2021-12-24T10:58+09:00 |
| jvndb-2021-003929 | Multiple vulnerabilities in multiple Yamaha routers | 2021-12-24T10:51+09:00 | 2021-12-24T10:51+09:00 |
| jvndb-2021-000112 | Android Apps developed using Yappli fails to restrict custom URL schemes properly | 2021-12-22T15:07+09:00 | 2021-12-22T15:07+09:00 |
| jvndb-2021-000111 | Multiple vulnerabilities in GroupSession | 2021-12-20T14:53+09:00 | 2021-12-21T14:20+09:00 |
| jvndb-2021-000022 | Multiple vulnerabilities in Cybozu Office | 2021-03-15T15:56+09:00 | 2021-12-17T17:51+09:00 |
| jvndb-2021-000093 | Movable Type XMLRPC API vulnerable to OS command injection | 2021-10-20T17:38+09:00 | 2021-12-17T17:36+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:21072-1 | Security update for runc | 2025-11-20T16:43:58Z | 2025-11-20T16:43:58Z |
| suse-su-2025:21132-1 | Security update for poppler | 2025-11-20T13:33:08Z | 2025-11-20T13:33:08Z |
| suse-su-2025:21050-1 | Security update for unbound | 2025-11-20T11:36:47Z | 2025-11-20T11:36:47Z |
| suse-su-2025:4148-1 | Security update for ghostscript | 2025-11-20T10:14:20Z | 2025-11-20T10:14:20Z |
| suse-su-2025:4143-1 | Security update for grub2 | 2025-11-20T07:54:03Z | 2025-11-20T07:54:03Z |
| suse-su-2025:21021-1 | Security update for MozillaFirefox | 2025-11-19T18:22:27Z | 2025-11-19T18:22:27Z |
| suse-su-2025:4141-1 | Security update for the Linux Kernel | 2025-11-19T14:06:18Z | 2025-11-19T14:06:18Z |
| suse-su-2025:21016-1 | Security update for ongres-scram | 2025-11-19T10:17:29Z | 2025-11-19T10:17:29Z |
| suse-su-2025:4137-1 | Security update for gimp | 2025-11-19T10:01:00Z | 2025-11-19T10:01:00Z |
| suse-su-2025:21014-1 | Security update for openexr | 2025-11-19T09:46:11Z | 2025-11-19T09:46:11Z |
| suse-su-2025:21032-1 | Security update for tiff | 2025-11-19T09:41:55Z | 2025-11-19T09:41:55Z |
| suse-su-2025:21009-1 | Security update for tiff | 2025-11-19T09:41:55Z | 2025-11-19T09:41:55Z |
| suse-su-2025:21031-1 | Security update for libxslt | 2025-11-19T09:41:09Z | 2025-11-19T09:41:09Z |
| suse-su-2025:21008-1 | Security update for libxslt | 2025-11-19T09:41:09Z | 2025-11-19T09:41:09Z |
| suse-su-2025:21028-1 | Security update for expat | 2025-11-19T09:39:18Z | 2025-11-19T09:39:18Z |
| suse-su-2025:21006-1 | Security update for expat | 2025-11-19T09:39:18Z | 2025-11-19T09:39:18Z |
| suse-su-2025:21026-1 | Security update for samba | 2025-11-18T22:57:17Z | 2025-11-18T22:57:17Z |
| suse-su-2025:21005-1 | Security update for samba | 2025-11-18T22:57:17Z | 2025-11-18T22:57:17Z |
| suse-su-2025:4135-1 | Security update for the Linux Kernel | 2025-11-18T17:31:49Z | 2025-11-18T17:31:49Z |
| suse-su-2025:4134-1 | Security update for unbound | 2025-11-18T17:10:58Z | 2025-11-18T17:10:58Z |
| suse-su-2025:4132-1 | Security update for the Linux Kernel | 2025-11-18T16:45:55Z | 2025-11-18T16:45:55Z |
| suse-ru-2025:4131-1 | Recommended update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor | 2025-11-18T15:56:53Z | 2025-11-18T15:56:53Z |
| suse-ru-2025:21046-1 | Recommended update for afterburn | 2025-11-18T09:58:24Z | 2025-11-18T09:58:24Z |
| suse-su-2025:4126-1 | Security update for openssl-1_0_0 | 2025-11-18T09:42:49Z | 2025-11-18T09:42:49Z |
| suse-su-2025:4125-1 | Security update for ghostscript | 2025-11-18T09:35:13Z | 2025-11-18T09:35:13Z |
| suse-su-2025:4123-1 | Security update for the Linux Kernel (Live Patch 61 for SUSE Linux Enterprise 12 SP5) | 2025-11-18T02:04:00Z | 2025-11-18T02:04:00Z |
| suse-su-2025:4121-1 | Security update for alloy | 2025-11-17T12:10:11Z | 2025-11-17T12:10:11Z |
| suse-su-2025:4116-1 | Security update for libxml2 | 2025-11-17T07:26:16Z | 2025-11-17T07:26:16Z |
| suse-su-2025:4115-1 | Security update for libxml2 | 2025-11-17T07:25:57Z | 2025-11-17T07:25:57Z |
| suse-su-2025:4112-1 | Security update for openssh | 2025-11-15T22:38:42Z | 2025-11-15T22:38:42Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15538-1 | govulncheck-vulndb-0.0.20250908T141310-1.1 on GA media | 2025-09-10T00:00:00Z | 2025-09-10T00:00:00Z |
| opensuse-su-2025:15537-1 | warewulf4-4.6.4-1.1 on GA media | 2025-09-09T00:00:00Z | 2025-09-09T00:00:00Z |
| opensuse-su-2025:15536-1 | python311-deepdiff-8.6.1-1.1 on GA media | 2025-09-09T00:00:00Z | 2025-09-09T00:00:00Z |
| opensuse-su-2025:15535-1 | perl-JSON-XS-4.40.0-1.1 on GA media | 2025-09-09T00:00:00Z | 2025-09-09T00:00:00Z |
| opensuse-su-2025:15534-1 | perl-Cpanel-JSON-XS-4.400.0-1.1 on GA media | 2025-09-09T00:00:00Z | 2025-09-09T00:00:00Z |
| opensuse-su-2025:15533-1 | kernel-devel-6.16.5-1.1 on GA media | 2025-09-08T00:00:00Z | 2025-09-08T00:00:00Z |
| opensuse-su-2025:15532-1 | java-1_8_0-openjdk-1.8.0.462-1.1 on GA media | 2025-09-08T00:00:00Z | 2025-09-08T00:00:00Z |
| opensuse-su-2025:15531-1 | libQt5Pdf5-5.15.19-1.1 on GA media | 2025-09-06T00:00:00Z | 2025-09-06T00:00:00Z |
| opensuse-su-2025:15530-1 | trivy-0.65.0-2.1 on GA media | 2025-09-05T00:00:00Z | 2025-09-05T00:00:00Z |
| opensuse-su-2025:15529-1 | traefik-3.5.1-1.1 on GA media | 2025-09-05T00:00:00Z | 2025-09-05T00:00:00Z |
| opensuse-su-2025:15528-1 | python311-Django4-4.2.24-1.1 on GA media | 2025-09-05T00:00:00Z | 2025-09-05T00:00:00Z |
| opensuse-su-2025:15527-1 | python311-Django-5.2.6-1.1 on GA media | 2025-09-05T00:00:00Z | 2025-09-05T00:00:00Z |
| opensuse-su-2025:15526-1 | libsixel-bash-completion-1.10.5-2.1 on GA media | 2025-09-05T00:00:00Z | 2025-09-05T00:00:00Z |
| opensuse-su-2025:15525-1 | go1.25-1.25.1-1.1 on GA media | 2025-09-05T00:00:00Z | 2025-09-05T00:00:00Z |
| opensuse-su-2025:15524-1 | chromedriver-140.0.7339.80-1.1 on GA media | 2025-09-05T00:00:00Z | 2025-09-05T00:00:00Z |
| opensuse-su-2025:15523-1 | 7zip-25.01-1.1 on GA media | 2025-09-05T00:00:00Z | 2025-09-05T00:00:00Z |
| opensuse-su-2025:15522-1 | libwireshark18-4.4.9-2.1 on GA media | 2025-09-04T00:00:00Z | 2025-09-04T00:00:00Z |
| opensuse-su-2025:15521-1 | libpodofo-0_10-devel-0.10.5-1.1 on GA media | 2025-09-04T00:00:00Z | 2025-09-04T00:00:00Z |
| opensuse-su-2025:15520-1 | netty-4.1.126-1.1 on GA media | 2025-09-04T00:00:00Z | 2025-09-04T00:00:00Z |
| opensuse-su-2025:15519-1 | python311-ruff-0.12.11-2.1 on GA media | 2025-09-03T00:00:00Z | 2025-09-03T00:00:00Z |
| opensuse-su-2025:15518-1 | python311-maturin-1.9.4-1.1 on GA media | 2025-09-03T00:00:00Z | 2025-09-03T00:00:00Z |
| opensuse-su-2025:15517-1 | himmelblau-1.2.2+git.0.2d04bca-1.1 on GA media | 2025-09-03T00:00:00Z | 2025-09-03T00:00:00Z |
| opensuse-su-2025:15516-1 | MozillaFirefox-142.0.1-1.1 on GA media | 2025-09-03T00:00:00Z | 2025-09-03T00:00:00Z |
| opensuse-su-2025:15515-1 | regclient-0.9.2-1.1 on GA media | 2025-09-02T00:00:00Z | 2025-09-02T00:00:00Z |
| opensuse-su-2025:15514-1 | python311-uv-0.8.14-2.1 on GA media | 2025-09-02T00:00:00Z | 2025-09-02T00:00:00Z |
| opensuse-su-2025:15513-1 | libmupen64plus-devel-2.6.0-2.1 on GA media | 2025-09-02T00:00:00Z | 2025-09-02T00:00:00Z |
| opensuse-su-2025:15512-1 | bpftop-0.7.1-1.1 on GA media | 2025-09-02T00:00:00Z | 2025-09-02T00:00:00Z |
| opensuse-su-2025:15511-1 | libudisks2-0-2.10.1-4.1 on GA media | 2025-09-01T00:00:00Z | 2025-09-01T00:00:00Z |
| opensuse-su-2025:15510-1 | traefik2-2.11.29-1.1 on GA media | 2025-09-01T00:00:00Z | 2025-09-01T00:00:00Z |
| opensuse-su-2025:15509-1 | sbctl-0.17-2.1 on GA media | 2025-09-01T00:00:00Z | 2025-09-01T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-discourse-2025-58055 | Discourse AI Suggestions Contain Insecure Direct Object Reference | 2025-10-05T23:40:58.710Z | 2025-10-24T15:07:36.996Z |
| bit-discourse-2025-58054 | Discourse is vulnerable to XSS when quoting chat messages | 2025-10-05T23:40:57.314Z | 2025-10-24T15:07:36.996Z |
| bit-tomcat-2020-1938 | 2024-03-06T11:11:29.670Z | 2025-10-22T09:08:25.162Z | |
| bit-superset-2023-27524 | Apache Superset: Session validation vulnerability when using provided default SECRET_KEY | 2025-02-05T07:28:32.393Z | 2025-10-22T09:08:25.162Z |
| bit-spark-2022-33891 | Apache Spark shell command injection vulnerability via Spark UI | 2024-03-06T11:05:29.361Z | 2025-10-22T09:08:25.162Z |
| bit-php-2024-4577 | Argument Injection in PHP-CGI | 2024-06-12T07:30:56.913Z | 2025-10-22T09:08:25.162Z |
| bit-minio-2023-28434 | MinIO is vulnerable to privilege escalation on Linux/MacOS | 2024-03-06T10:56:17.000Z | 2025-10-22T09:08:25.162Z |
| bit-minio-2023-28432 | Minio Information Disclosure in Cluster Deployment | 2024-03-06T10:56:38.283Z | 2025-10-22T09:08:25.162Z |
| bit-libphp-2024-4577 | Argument Injection in PHP-CGI | 2025-08-11T13:54:18.697Z | 2025-10-22T09:08:25.162Z |
| bit-joomla-2023-23752 | [20230201] - Core - Improper access check in webservice endpoints | 2025-04-03T14:15:54.999Z | 2025-10-22T09:08:25.162Z |
| bit-jenkins-2024-23897 | 2024-03-06T10:53:54.098Z | 2025-10-22T09:08:25.162Z | |
| bit-grafana-2021-43798 | Grafana path traversal | 2024-03-06T10:59:06.588Z | 2025-10-22T09:08:25.162Z |
| bit-golang-2020-0601 | 2024-03-06T11:08:38.203Z | 2025-10-22T09:08:25.162Z | |
| bit-gitlab-2023-7028 | Weak Password Recovery Mechanism for Forgotten Password in GitLab | 2024-03-06T10:53:45.400Z | 2025-10-22T09:08:25.162Z |
| bit-gitlab-2021-22205 | 2024-03-06T11:20:01.948Z | 2025-10-22T09:08:25.162Z | |
| bit-flink-2020-17519 | Apache Flink directory traversal attack: reading remote files through the REST API | 2024-03-06T10:51:56.799Z | 2025-10-22T09:08:25.162Z |
| bit-drupal-2020-36193 | 2024-03-06T10:55:50.196Z | 2025-10-22T09:08:25.162Z | |
| bit-drupal-2020-28949 | 2024-03-06T10:56:00.687Z | 2025-10-22T09:08:25.162Z | |
| bit-drupal-2020-13671 | 2024-03-06T10:57:20.872Z | 2025-10-22T09:08:25.162Z | |
| bit-drupal-2020-11023 | Potential XSS vulnerability in jQuery | 2024-03-06T10:59:06.711Z | 2025-10-22T09:08:25.162Z |
| bit-dotnet-2023-38180 | .NET and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:52:18.075Z | 2025-10-22T09:08:25.162Z |
| bit-couchdb-2022-24706 | Remote Code Execution Vulnerability in Packaging | 2024-03-06T10:51:24.067Z | 2025-10-22T09:08:25.162Z |
| bit-apisix-2022-24112 | apisix/batch-requests plugin allows overwriting the X-REAL-IP header | 2024-03-06T10:51:05.969Z | 2025-10-22T09:08:25.162Z |
| bit-apache-2021-42013 | Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) | 2024-03-06T10:54:27.969Z | 2025-10-22T09:08:25.162Z |
| bit-apache-2021-40438 | mod_proxy SSRF | 2024-03-06T10:55:02.200Z | 2025-10-22T09:08:25.162Z |
| bit-airflow-2020-13927 | 2024-03-06T11:00:56.284Z | 2025-10-22T09:08:25.162Z | |
| bit-airflow-2020-11978 | 2024-03-06T11:01:37.264Z | 2025-10-22T09:08:25.162Z | |
| bit-powershell-2025-25004 | PowerShell Elevation of Privilege Vulnerability | 2025-10-21T08:49:11.753Z | 2025-10-21T09:07:40.239Z |
| bit-gitlab-2025-2934 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-11T09:05:29.864Z | 2025-10-21T09:07:40.239Z |
| bit-envoy-2025-62409 | Envoy allows large requests and responses to cause TCP connection pool crash | 2025-10-21T08:41:16.273Z | 2025-10-21T09:07:40.239Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-03163 | Online Security Guards Hiring System edit-guard-detail.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03162 | Online Security Guards Hiring System changeimage.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03161 | Men Salon Management System search-invoices.php 文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03160 | Men Salon Management System appointment.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03159 | Men Salon Management System add-customer-services.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03158 | Men Salon Management System add-customer.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03157 | Men Salon Management System about-us.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03156 | Men Salon Management System add-services.php文件SQL注入漏洞 | 2025-04-16 | 2026-01-14 |
| cnvd-2026-03155 | Men Salon Management System admin-profile.php文件SQL注入漏洞 | 2025-04-18 | 2026-01-14 |
| cnvd-2026-03154 | Men Salon Management System view-appointment.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03153 | Men Salon Management System /search-appointment.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03152 | Men Salon Management System sales-reports-detail.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03151 | Men Salon Management System forgot-password.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03150 | Men Salon Management System contact-us.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03149 | Men Salon Management System change-password.php文件SQL注入漏洞 | 2025-05-14 | 2026-01-14 |
| cnvd-2026-03148 | Student Result Management System /editmyexp.php文件SQL注入漏洞 | 2025-06-06 | 2026-01-14 |
| cnvd-2026-03147 | Student Management System using PHP and MySQL password-recovery.php文件SQL注入漏洞 | 2025-06-06 | 2026-01-14 |
| cnvd-2026-03146 | Student Management System using PHP and MySQL SQL注入漏洞 | 2025-06-06 | 2026-01-14 |
| cnvd-2026-03084 | Huawei HarmonyOS/EMUI接口权限管控漏洞 | 2023-12-07 | 2026-01-14 |
| cnvd-2026-03058 | Google Android混淆代理漏洞 | 2025-12-10 | 2026-01-14 |
| cnvd-2026-05016 | UTT 520W formUser函数缓冲区溢出漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-05015 | UTT 512W formConfigCliForEngineerOnly函数缓冲区溢出漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-04543 | Tenda AC23缓冲区溢出漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-03261 | Echo Specto CM跨站脚本漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-03011 | Mozilla Firefox代码执行漏洞(CNVD-2026-03011) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02992 | Mozilla Firefox for iOS欺骗漏洞(CNVD-2026-02992) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02991 | Mozilla Firefox内存错误引用漏洞(CNVD-2026-02991) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02980 | WordPress插件Shortcodes and extra features for Phlox theme信息泄露漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-02976 | Google Android权限提升漏洞(CNVD-2026-02976) | 2025-12-10 | 2026-01-13 |
| cnvd-2026-02975 | Google Android拒绝服务漏洞(CNVD-2026-02975) | 2025-12-10 | 2026-01-13 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0568 | Multiples vulnérabilités dans les produits Citrix | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0567 | Multiples vulnérabilités dans HPE Aruba Networking Instant On | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0566 | Multiples vulnérabilités dans les produits Siemens | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0565 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0564 | Multiples vulnérabilités dans les produits SAP | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0563 | Multiples vulnérabilités dans les produits Splunk | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0562 | Multiples vulnérabilités dans les produits IBM | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0561 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0560 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0559 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0558 | Multiples vulnérabilités dans PHP | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0557 | Vulnérabilité dans Microsoft Edge | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0556 | Vulnérabilité dans Citrix XenServer | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0555 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0554 | Multiples vulnérabilités dans Grafana | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0553 | Vulnérabilité dans les produits Cisco | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0552 | Multiples vulnérabilités dans Microsoft Edge | 2025-07-02T00:00:00.000000 | 2025-07-02T00:00:00.000000 |
| certfr-2025-avi-0551 | Vulnérabilité dans Xen | 2025-07-02T00:00:00.000000 | 2025-07-02T00:00:00.000000 |
| certfr-2025-avi-0550 | Multiples vulnérabilités dans les produits Tenable | 2025-07-01T00:00:00.000000 | 2025-07-01T00:00:00.000000 |
| certfr-2025-avi-0549 | Vulnérabilité dans Google Chrome | 2025-07-01T00:00:00.000000 | 2025-07-01T00:00:00.000000 |
| certfr-2025-avi-0548 | Multiples vulnérabilités dans MongoDB Server | 2025-06-30T00:00:00.000000 | 2025-06-30T00:00:00.000000 |
| certfr-2025-avi-0547 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0546 | Multiples vulnérabilités dans les produits IBM | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0545 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0544 | Multiples vulnérabilités dans les produits Trend Micro | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0543 | Vulnérabilité dans VMware Tanzu | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0542 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0541 | Vulnérabilité dans Centreon Map | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0540 | Multiples vulnérabilités dans les produits Citrix | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0538 | Multiples vulnérabilités dans VMware Tanzu | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |