Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-3317 |
5.1 (4.0)
|
Reflected Cross-Site Scripting in Navigate CMS application |
Navigate |
Navigate CMS |
2026-04-21T09:03:59.773Z | 2026-04-21T13:22:03.438Z |
| CVE-2025-13826 |
8.2 (4.0)
|
Incorrect input validation on the Zervit portable HTTP… |
Zervit |
portable HTTP/Web server |
2026-04-21T08:19:57.983Z | 2026-04-21T13:23:30.712Z |
| CVE-2026-6711 |
6.1 (3.1)
|
Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting |
ryhowa |
Website LLMs.txt |
2026-04-21T06:43:59.951Z | 2026-04-21T13:51:33.148Z |
| CVE-2026-6712 |
4.4 (3.1)
|
Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Sto… |
ryhowa |
Website LLMs.txt |
2026-04-21T06:43:59.539Z | 2026-04-21T13:47:53.867Z |
| CVE-2026-6703 |
4.3 (3.1)
|
Responsive Blocks <= 2.2.1 - Missing Authorization to … |
cyberchimps |
Responsive Blocks – Page Builder for Blocks & Patterns |
2026-04-21T06:43:58.955Z | 2026-04-21T16:36:19.694Z |
| CVE-2026-31368 |
7.8 (3.1)
|
Privilege Bypass in AiAssistant |
Honor |
AIAssistant |
2026-04-21T06:40:08.446Z | 2026-04-21T13:23:57.396Z |
| CVE-2026-31370 |
6.3 (3.1)
|
Information Leak Vulnerability in Honor E |
Honor |
Honor E |
2026-04-21T06:30:53.883Z | 2026-04-21T13:25:53.570Z |
| CVE-2026-31369 |
3.2 (3.1)
|
Privilege Bypass in PcManager |
Honor |
PcManager |
2026-04-21T06:26:52.403Z | 2026-04-21T13:18:27.938Z |
| CVE-2026-5965 |
9.3 (4.0)
9.8 (3.1)
|
NewSoft|NewSoftOA - OS Command Injection |
NewSoft |
NewSoftOA |
2026-04-21T03:32:55.138Z | 2026-04-21T13:20:58.795Z |
| CVE-2026-6674 |
6.5 (3.1)
|
Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authen… |
tholstkabelbwde |
Plugin: CMS für Motorrad Werkstätten |
2026-04-21T02:25:40.676Z | 2026-04-21T12:58:21.763Z |
| CVE-2026-6675 |
5.3 (3.1)
|
Responsive Blocks <= 2.2.0 - Unauthenticated Open Emai… |
cyberchimps |
Responsive Blocks – Page Builder for Blocks & Patterns |
2026-04-21T02:25:39.847Z | 2026-04-21T13:22:00.182Z |
| CVE-2026-40497 |
8.1 (3.1)
|
FreeScout Vulnerable to CSS Injection via Stored Style… |
freescout-help-desk |
freescout |
2026-04-21T01:45:55.492Z | 2026-04-21T13:25:21.103Z |
| CVE-2026-6058 |
4.5 (3.1)
|
** UNSUPPORTED WHEN ASSIGNED ** An improper encod… |
Zyxel |
WRE6505 v2 firmware |
2026-04-21T01:42:07.433Z | 2026-04-21T13:26:29.283Z |
| CVE-2026-40496 |
8.8 (4.0)
|
FreeScout has Predictable Attachment Token that Allows… |
freescout-help-desk |
freescout |
2026-04-21T01:38:50.117Z | 2026-04-21T13:50:39.454Z |
| CVE-2026-39973 |
7.1 (3.1)
|
Apktool: Path Traversal to Arbitrary File Write |
iBotPeaches |
Apktool |
2026-04-21T01:35:22.396Z | 2026-04-23T03:56:04.482Z |
| CVE-2026-40250 |
8.4 (4.0)
|
OpenEXR has integer overflow in DWA decoder outBufferE… |
AcademySoftwareFoundation |
openexr |
2026-04-21T01:33:00.212Z | 2026-04-23T03:55:57.543Z |
| CVE-2026-40244 |
8.4 (4.0)
|
OpenEXR has integer overflow in DWA setupChannelData p… |
AcademySoftwareFoundation |
openexr |
2026-04-21T01:30:55.061Z | 2026-04-23T03:55:56.354Z |
| CVE-2026-39886 |
5.3 (3.1)
|
OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl() |
AcademySoftwareFoundation |
openexr |
2026-04-21T01:27:01.371Z | 2026-04-21T13:49:21.573Z |
| CVE-2026-39866 |
7.4 (4.0)
|
Lawnchair vulnerable to Command Injection via unquoted… |
LawnchairLauncher |
lawnchair |
2026-04-21T01:19:47.510Z | 2026-04-23T03:55:58.650Z |
| CVE-2026-39861 |
7.7 (4.0)
|
Claude Code: Sandbox Escape via Symlink Following Allo… |
anthropics |
claude-code |
2026-04-21T00:56:39.062Z | 2026-04-21T13:44:49.618Z |
| CVE-2026-39386 |
8.8 (3.1)
|
Neko has Self-service Privilege Escalation for Authent… |
m1k1o |
neko |
2026-04-21T00:50:34.656Z | 2026-04-22T03:56:19.795Z |
| CVE-2026-40264 |
2 (4.0)
|
OpenBao's Token Store Allows Cross-Namespace Renewal, … |
openbao |
openbao |
2026-04-21T00:47:38.156Z | 2026-04-21T19:30:51.975Z |
| CVE-2026-39396 |
3.1 (3.1)
|
OpenBao has Decompression Bomb via Unbounded Copy in O… |
openbao |
openbao |
2026-04-21T00:44:53.943Z | 2026-04-21T19:49:18.821Z |
| CVE-2026-39388 |
2 (4.0)
|
OpenBao's Certificate Authentication Allows Token Rene… |
openbao |
openbao |
2026-04-21T00:43:22.920Z | 2026-04-21T19:36:07.865Z |
| CVE-2026-39946 |
4.6 (4.0)
|
OpenBao allows SQL Injection in PostgreSQL database se… |
openbao |
openbao |
2026-04-21T00:19:39.578Z | 2026-04-21T13:34:21.088Z |
| CVE-2026-39378 |
6.5 (3.1)
|
nbconvert has an Arbitrary File Read via Path Traversa… |
jupyter |
nbconvert |
2026-04-21T00:17:00.684Z | 2026-04-21T13:43:29.081Z |
| CVE-2026-39377 |
6.5 (3.1)
|
nbconvert has an Arbitrary File Write via Path Travers… |
jupyter |
nbconvert |
2026-04-21T00:14:59.937Z | 2026-04-21T19:49:24.475Z |
| CVE-2026-39320 |
7.5 (3.1)
|
Signal K Server has an Unauthenticated Regular Express… |
SignalK |
signalk-server |
2026-04-21T00:07:10.371Z | 2026-04-21T19:36:54.787Z |
| CVE-2026-41527 |
6.9 (3.1)
|
KDE Kleopatra before 26.08.0 on Windows allows lo… |
KDE |
Kleopatra |
2026-04-21T00:00:00.000Z | 2026-04-22T15:35:24.571Z |
| CVE-2026-40706 |
8.4 (3.1)
|
In NTFS-3G 2022.10.3 before 2026.2.25, a heap buf… |
Tuxera |
NTFS-3G |
2026-04-21T00:00:00.000Z | 2026-04-22T15:35:30.245Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-6765 |
5.3 (3.1)
|
Information disclosure in the Form Autofill component |
Mozilla |
Firefox |
2026-04-21T12:40:58.955Z | 2026-04-21T23:34:58.377Z |
| CVE-2026-6764 |
6.5 (3.1)
|
Incorrect boundary conditions in the DOM: Device Inter… |
Mozilla |
Firefox |
2026-04-21T12:40:58.297Z | 2026-04-21T23:34:57.148Z |
| CVE-2026-6763 |
6.5 (3.1)
|
Mitigation bypass in the File Handling component |
Mozilla |
Firefox |
2026-04-21T12:40:57.591Z | 2026-04-21T23:34:56.036Z |
| CVE-2026-6762 |
6.3 (3.1)
|
Spoofing issue in the DOM: Core & HTML component |
Mozilla |
Firefox |
2026-04-21T12:40:56.838Z | 2026-04-22T15:34:52.494Z |
| CVE-2026-6761 |
8.8 (3.1)
|
Privilege escalation in the Networking component |
Mozilla |
Firefox |
2026-04-21T12:40:56.138Z | 2026-04-23T03:56:00.979Z |
| CVE-2026-6760 |
9.8 (3.1)
|
Mitigation bypass in the Networking: Cookies component |
Mozilla |
Firefox |
2026-04-21T12:40:55.131Z | 2026-04-22T15:34:58.133Z |
| CVE-2026-6759 |
7.5 (3.1)
|
Use-after-free in the Widget: Cocoa component |
Mozilla |
Firefox |
2026-04-21T12:40:54.329Z | 2026-04-22T15:06:13.308Z |
| CVE-2026-6758 |
7.5 (3.1)
|
Use-after-free in the JavaScript: WebAssembly component |
Mozilla |
Firefox |
2026-04-21T12:40:53.661Z | 2026-04-22T15:06:33.849Z |
| CVE-2026-6757 |
6.3 (3.1)
|
Invalid pointer in the JavaScript: WebAssembly component |
Mozilla |
Firefox |
2026-04-21T12:40:52.961Z | 2026-04-22T15:35:04.751Z |
| CVE-2026-6756 |
7.5 (3.1)
|
Mitigation bypass in Firefox for Android |
Mozilla |
Firefox |
2026-04-21T12:40:52.082Z | 2026-04-22T15:35:12.113Z |
| CVE-2026-6755 |
6.5 (3.1)
|
Mitigation bypass in the DOM: postMessage component |
Mozilla |
Firefox |
2026-04-21T12:40:51.382Z | 2026-04-21T23:34:47.512Z |
| CVE-2026-6754 |
7.5 (3.1)
|
Use-after-free in the JavaScript Engine component |
Mozilla |
Firefox |
2026-04-21T12:40:50.577Z | 2026-04-22T15:06:53.853Z |
| CVE-2026-6753 |
7.3 (3.1)
|
Incorrect boundary conditions in the WebRTC component |
Mozilla |
Firefox |
2026-04-21T12:40:49.893Z | 2026-04-22T15:35:18.745Z |
| CVE-2026-6752 |
7.3 (3.1)
|
Incorrect boundary conditions in the WebRTC component |
Mozilla |
Firefox |
2026-04-21T12:40:49.079Z | 2026-04-21T23:34:44.029Z |
| CVE-2026-6751 |
7.3 (3.1)
|
Uninitialized memory in the Audio/Video: Web Codecs co… |
Mozilla |
Firefox |
2026-04-21T12:40:48.315Z | 2026-04-21T23:34:42.935Z |
| CVE-2026-6750 |
9.8 (3.1)
|
Privilege escalation in the Graphics: WebRender component |
Mozilla |
Firefox |
2026-04-21T12:40:47.476Z | 2026-04-23T03:55:59.793Z |
| CVE-2026-6749 |
7.5 (3.1)
|
Information disclosure due to uninitialized memory in … |
Mozilla |
Firefox |
2026-04-21T12:40:46.800Z | 2026-04-22T15:07:52.051Z |
| CVE-2026-6748 |
9.8 (3.1)
|
Uninitialized memory in the Audio/Video: Web Codecs co… |
Mozilla |
Firefox |
2026-04-21T12:40:45.923Z | 2026-04-21T23:34:39.302Z |
| CVE-2026-6747 |
7.5 (3.1)
|
Use-after-free in the WebRTC component |
Mozilla |
Firefox |
2026-04-21T12:40:45.203Z | 2026-04-22T15:08:13.152Z |
| CVE-2026-6746 |
7.5 (3.1)
|
Use-after-free in the DOM: Core & HTML component |
Mozilla |
Firefox |
2026-04-21T12:40:44.148Z | 2026-04-22T15:08:34.207Z |
| CVE-2026-40520 |
8.6 (4.0)
7.2 (3.1)
|
FreePBX api module Command Injection via GraphQL |
FreePBX |
api |
2026-04-21T12:41:05.281Z | 2026-04-21T13:32:06.116Z |
| CVE-2026-32147 |
5.3 (4.0)
|
SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT |
Erlang |
OTP |
2026-04-21T12:01:20.350Z | 2026-04-22T04:13:25.005Z |
| CVE-2026-41039 |
8.7 (4.0)
|
Information Disclosure Vulnerability in Quantum Networ… |
Quantum Networks |
Router QN-I-470 |
2026-04-21T10:28:24.521Z | 2026-04-21T13:13:59.843Z |
| CVE-2026-41038 |
7.6 (4.0)
|
Weak Password Policy Vulnerability in Quantum Networks… |
Quantum Networks |
Router QN-I-470 |
2026-04-21T10:22:09.254Z | 2026-04-21T13:14:55.975Z |
| CVE-2026-6553 |
7.3 (4.0)
|
TYPO3 CMS Stores Cleartext Password in User Settings Module |
TYPO3 |
TYPO3 CMS |
2026-04-21T10:04:02.525Z | 2026-04-21T13:20:23.515Z |
| CVE-2026-41037 |
8.7 (4.0)
|
Missing Rate Limiting Vulnerability in Quantum Network… |
Quantum Networks |
Router QN-I-470 |
2026-04-21T10:04:56.462Z | 2026-04-21T13:19:09.396Z |
| CVE-2026-41036 |
8.7 (4.0)
|
Command Injection Vulnerability in Quantum Networks Ro… |
Quantum Networks |
Router QN-I-470 |
2026-04-21T10:07:47.488Z | 2026-04-21T13:17:54.592Z |
| CVE-2026-3317 |
5.1 (4.0)
|
Reflected Cross-Site Scripting in Navigate CMS application |
Navigate |
Navigate CMS |
2026-04-21T09:03:59.773Z | 2026-04-21T13:22:03.438Z |
| CVE-2026-39467 |
7.2 (3.1)
|
WordPress Responsive Slider by MetaSlider plugin <= 3.… |
MetaSlider |
Responsive Slider by MetaSlider |
2026-04-21T09:35:29.246Z | 2026-04-21T09:35:29.246Z |
| CVE-2025-13826 |
8.2 (4.0)
|
Incorrect input validation on the Zervit portable HTTP… |
Zervit |
portable HTTP/Web server |
2026-04-21T08:19:57.983Z | 2026-04-21T13:23:30.712Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-wj32-w776-h6m2 |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGst… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-rgcc-vxwc-jxf9 |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vuln… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-q6vj-q94p-g3rc |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the functi… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-gqp3-hfc3-8q54 |
6.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_acce… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-9r7w-j29g-xqx8 |
2.1 (4.0)
|
When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-9qc9-mh55-7xp5 |
6.3 (3.1)
2.1 (4.0)
|
A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput … | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-7gjf-f5f3-qqxw |
3.5 (3.1)
2.0 (4.0)
|
A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-6c34-3mhj-jwxw |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the fu… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-5pv2-86qj-5jf9 |
6.3 (3.1)
2.1 (4.0)
|
Cockpit has NoSQL Injection Through Content Aggregation Pipelines | 2026-04-20T12:32:01Z | 2026-04-23T21:47:54Z |
| ghsa-42cc-jrr3-ghpw |
4.3 (3.1)
2.1 (4.0)
|
A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b. Affect… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-38x4-r8qv-j5v2 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-293r-hxw5-cfmj |
2.4 (3.1)
4.8 (4.0)
|
A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an … | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-2836-hmqw-wf98 |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebEx… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-vqjc-m5xh-jhx3 |
|
In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free… | 2026-04-20T12:32:00Z | 2026-04-20T12:32:00Z |
| ghsa-q7h9-pvj5-g9fp |
|
In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds acces… | 2026-04-20T12:32:00Z | 2026-04-20T12:32:00Z |
| ghsa-x858-8gr5-586m |
5.1 (4.0)
|
Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain … | 2026-04-20T12:31:59Z | 2026-04-20T12:31:59Z |
| ghsa-vrr8-h7fq-ghr8 |
4.0 (3.1)
|
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-va… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-vr46-pfqh-wpf8 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unkno… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-q2rh-xrfv-8x3m |
9.8 (3.1)
9.3 (4.0)
|
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remo… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-p78m-rc6g-qfwc |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the functio… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-jp7c-75vm-9jwh |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewT… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-f5h4-jpqg-93m3 |
9.8 (3.1)
9.3 (4.0)
|
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remo… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-8v5m-jghx-mmxr |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the fu… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-7gm3-fv82-7h98 |
6.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affect… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-5qr4-57wv-4r2w |
7.3 (3.1)
5.5 (4.0)
|
A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue … | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-544v-v93w-x43g |
8.1 (3.1)
7.2 (4.0)
|
ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authe… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-49hc-46g6-4c47 |
8.8 (3.1)
8.7 (4.0)
|
ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenti… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-337w-xf2q-h5w2 |
6.3 (3.1)
2.1 (4.0)
|
A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-32w9-6rwg-p96w |
9.1 (3.1)
9.4 (4.0)
|
A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability a… | 2026-04-20T09:30:45Z | 2026-04-22T15:31:33Z |
| ghsa-3224-28wc-whrh |
7.8 (3.1)
8.5 (4.0)
|
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-269 |
|
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAut… | oauthlib | 2022-09-09T21:15:00Z | 2022-09-15T06:38:55.424021Z |
| pysec-2022-270 |
|
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built f… | indy-node | 2022-09-09T19:15:00Z | 2022-09-15T17:00:02.967935Z |
| pysec-2022-268 |
|
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-09-08T19:15:00Z | 2022-09-14T17:03:43.275428Z |
| pysec-2022-264 |
|
mangadex-downloader is a command-line tool to download manga from MangaDex. When using `f… | mangadex-downloader | 2022-09-07T22:15:00Z | 2022-09-12T20:38:21.585718Z |
| pysec-2022-43179 |
7.3 (3.1)
|
Poetry is a dependency manager for Python. To handle dependencies that come from a Git re… | poetry | 2022-09-07T19:15:08+00:00 | 2025-04-09T17:27:27.255151+00:00 |
| pysec-2022-266 |
|
Poetry is a dependency manager for Python. When handling dependencies that come from a Gi… | poetry | 2022-09-07T19:15:00Z | 2022-09-13T18:50:19.361398Z |
| pysec-2022-260 |
|
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when u… | mako | 2022-09-07T13:15:00Z | 2022-09-07T14:38:27.809318Z |
| pysec-2022-43149 |
6.5 (3.1)
|
Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentatio… | pyassimp | 2022-09-06T23:15:00Z | 2024-11-21T14:22:59.412324Z |
| pysec-2022-265 |
|
Indy Node is the server portion of a distributed ledger purpose-built for decentralized i… | indy-node | 2022-09-06T17:15:00Z | 2022-09-13T17:01:18.154930Z |
| pysec-2022-43064 |
8.8 (3.1)
|
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a que… | pytigergraph | 2022-09-05T16:15:00+00:00 | 2023-11-07T20:24:26.101389+00:00 |
| pysec-2022-43070 |
7.5 (3.1)
|
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization… | apache-iotdb | 2022-09-05T10:15:00Z | 2024-11-21T14:22:40.90699Z |
| pysec-2022-43069 |
8.8 (3.1)
|
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to v… | apache-iotdb | 2022-09-05T10:15:00Z | 2024-11-25T22:25:52.941293Z |
| pysec-2022-262 |
|
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… | matrix-synapse | 2022-09-02T20:15:00Z | 2022-09-09T06:19:32.373264Z |
| pysec-2022-263 |
|
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend … | apache-airflow | 2022-09-02T07:15:00Z | 2022-09-09T14:35:42.886118Z |
| pysec-2022-261 |
|
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow c… | apache-airflow | 2022-09-02T07:15:00Z | 2022-09-08T22:36:09.971521Z |
| pysec-2022-259 |
|
An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secr… | python-jwt | 2022-09-01T18:51:51Z | 2022-09-05T01:24:44.773501Z |
| pysec-2022-43152 |
7.4 (3.1)
|
A flaw was found in the python-scciclient when making an HTTPS connection to a server whe… | python-scciclient | 2022-09-01T18:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2022-258 |
|
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double q… | oslo-utils | 2022-08-29T15:15:00Z | 2022-09-01T22:32:57.246318Z |
| pysec-2022-257 |
|
NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrus… | nvflare | 2022-08-29T03:15:00Z | 2022-09-01T20:35:14.493490Z |
| pysec-2022-43134 |
9.8 (3.1)
|
The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor… | exotel | 2022-08-27T20:15:00Z | 2024-11-25T22:09:33.909779Z |
| pysec-2022-252 |
|
The deep-translator project on PyPI was taken over via user account compromise via a phis… | deep-translator | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-251 |
|
The spam project on PyPI was taken over via user account compromise via a phishing attack… | spam | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-250 |
|
The exotel project on PyPI was taken over via user account compromise via a phishing atta… | exotel | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-256 |
|
The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from … | deluge | 2022-08-26T16:15:00Z | 2022-08-31T20:34:06.230496Z |
| pysec-2022-255 |
|
There is a NULL pointer dereference vulnerability in VTK, and it lies in IO/Infovis/vtkXM… | vtk | 2022-08-25T18:15:00Z | 2022-08-31T18:46:05.259402Z |
| pysec-2022-254 |
|
A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a reque… | mod-wsgi | 2022-08-25T18:15:00Z | 2022-08-31T18:46:04.047573Z |
| pysec-2022-253 |
|
A flaw was found in ansible-runner. An improper escaping of the shell command, while call… | ansible-runner | 2022-08-24T16:15:00Z | 2022-08-29T16:56:41.591821Z |
| pysec-2022-43068 |
6.3 (3.1)
|
A race condition flaw was found in ansible-runner, where an attacker could watch for rapi… | ansible-runner | 2022-08-23T16:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43067 |
6.6 (3.1)
|
A flaw was found in ansible-runner where the default temporary files configuration in ans… | ansible-runner | 2022-08-23T16:15:00Z | 2024-11-25T18:33:04.123836Z |
| pysec-2022-43142 |
7.8 (3.1)
|
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. | octoprint | 2022-08-22T12:15:00+00:00 | 2024-11-21T14:22:57.145370+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2355 | Malicious code in ecto-spirit (npm) | 2026-03-24T15:43:45Z | 2026-04-07T14:41:21Z |
| mal-2026-2354 | Malicious code in ecto-registry (npm) | 2026-03-24T15:43:44Z | 2026-04-07T14:41:21Z |
| mal-2026-2353 | Malicious code in ecto-engine (npm) | 2026-03-24T15:43:43Z | 2026-04-07T14:41:21Z |
| mal-2026-2352 | Malicious code in ecto-corsair-lwirz (npm) | 2026-03-24T15:43:43Z | 2026-04-07T14:41:21Z |
| mal-2026-2351 | Malicious code in dotenv-xtend (npm) | 2026-03-24T15:43:16Z | 2026-04-07T14:41:21Z |
| mal-2026-2350 | Malicious code in dotenv-express (npm) | 2026-03-24T15:43:15Z | 2026-04-07T14:41:21Z |
| mal-2026-2349 | Malicious code in deriv_ppetest (npm) | 2026-03-24T15:42:44Z | 2026-04-07T14:41:21Z |
| mal-2026-2348 | Malicious code in cursed-module (npm) | 2026-03-24T15:41:56Z | 2026-04-07T14:41:21Z |
| mal-2026-2347 | Malicious code in ctf-package-onetimeuseforctf (npm) | 2026-03-24T15:41:46Z | 2026-04-07T14:41:21Z |
| mal-2026-2346 | Malicious code in corsair-module (npm) | 2026-03-24T15:41:15Z | 2026-04-07T14:41:21Z |
| mal-2026-2345 | Malicious code in codecoverage-tools (npm) | 2026-03-24T15:40:45Z | 2026-04-07T14:41:21Z |
| mal-2026-2344 | Malicious code in codeanalysis-common (npm) | 2026-03-24T15:40:44Z | 2026-04-07T14:41:21Z |
| mal-2026-2343 | Malicious code in chain-multer (npm) | 2026-03-24T15:40:17Z | 2026-04-07T14:41:20Z |
| mal-2026-2342 | Malicious code in chai-set (npm) | 2026-03-24T15:40:16Z | 2026-04-07T14:41:20Z |
| mal-2026-2341 | Malicious code in chai-chain-cognivault (npm) | 2026-03-24T15:40:13Z | 2026-04-07T14:41:20Z |
| mal-2026-2340 | Malicious code in chai-chain-argon (npm) | 2026-03-24T15:40:12Z | 2026-04-07T14:41:20Z |
| mal-2026-2339 | Malicious code in chai-as-chains (npm) | 2026-03-24T15:39:59Z | 2026-04-07T14:41:20Z |
| mal-2026-2338 | Malicious code in chai-as-attached (npm) | 2026-03-24T15:39:58Z | 2026-04-07T14:41:20Z |
| mal-2026-2337 | Malicious code in chai-as-aligned (npm) | 2026-03-24T15:39:57Z | 2026-04-07T14:41:20Z |
| mal-2026-2336 | Malicious code in cdnjavacss (npm) | 2026-03-24T15:39:45Z | 2026-04-07T14:41:20Z |
| mal-2026-2335 | Malicious code in azurestack-common (npm) | 2026-03-24T15:38:26Z | 2026-04-07T14:41:20Z |
| mal-2026-2334 | Malicious code in argon-node (npm) | 2026-03-24T15:37:43Z | 2026-04-07T14:41:20Z |
| mal-2026-2333 | Malicious code in @pansycareful/github-helper (npm) | 2026-03-24T15:30:17Z | 2026-04-07T14:41:20Z |
| mal-2026-2332 | Malicious code in @hsbc-mfe/host (npm) | 2026-03-24T15:28:47Z | 2026-04-07T14:41:19Z |
| mal-2026-2331 | Malicious code in @girirajravichandran/corp-build-utils-poc (npm) | 2026-03-24T15:28:29Z | 2026-04-16T15:42:07Z |
| mal-2026-2330 | Malicious code in @fyxer-ai/shared (npm) | 2026-03-24T15:28:28Z | 2026-04-07T14:41:19Z |
| mal-2026-2329 | Malicious code in @abi-labs-frontend/standards (npm) | 2026-03-24T15:23:58Z | 2026-04-07T14:41:19Z |
| mal-2026-2402 | Malicious code in plugin-gem-example (RubyGems) | 2026-03-24T15:23:48Z | 2026-03-24T15:23:48Z |
| mal-2026-2401 | Malicious code in rocketpill (PyPI) | 2026-03-24T15:22:46Z | 2026-03-24T15:22:46Z |
| mal-2026-2399 | Malicious code in flycalc (PyPI) | 2026-03-24T15:22:05Z | 2026-03-24T15:22:05Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2499 | IBM WebSphere Application Server: Schwachstelle ermöglicht Manipulation von Dateien und potenziell Umgehen von Sicherheitsvorkehrungen | 2025-11-05T23:00:00.000+00:00 | 2026-01-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2498 | Cisco Identity Services Engine (ISE): Mehrere Schwachstellen | 2025-11-05T23:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2497 | libarchive: Schwachstelle ermöglicht Denial of Service | 2025-11-05T23:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2496 | Samsung Android: Mehrere Schwachstellen | 2025-11-05T23:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2495 | Django: Mehrere Schwachstellen ermöglichen Denial of Service und SQL-Injection | 2025-11-05T23:00:00.000+00:00 | 2026-01-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2494 | HCL BigFix: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-05T23:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2493 | ownCloud Guests: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-05T23:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2492 | Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Denial of Service | 2025-11-05T23:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2491 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-11-05T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2489 | cURL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-04T23:00:00.000+00:00 | 2026-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2488 | Red Hat Enterprise Linux (SSSD, libsoup): Mehrere Schwachstellen | 2025-11-04T23:00:00.000+00:00 | 2026-03-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2487 | ILIAS: Mehrere Schwachstellen | 2025-11-04T23:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2486 | Red Hat Satellite: Schwachstelle ermöglicht Codeausführung | 2025-11-04T23:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2485 | cURL (wcurl): Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-03T23:00:00.000+00:00 | 2026-03-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2484 | Proofpoint Insider Threat Management: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-03T23:00:00.000+00:00 | 2025-11-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2483 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-11-03T23:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2482 | Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-03T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2481 | Apple Xcode: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2480 | Apple Safari: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2479 | IBM InfoSphere Information Server: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2025-11-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2478 | IGEL OS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-03T23:00:00.000+00:00 | 2025-11-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2477 | lighttpd: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-03T23:00:00.000+00:00 | 2025-11-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2476 | Absolute Secure Access: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-03T23:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2475 | Apple macOS: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2026-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2474 | Android Patchday November 2025: Multiple Vulnerabilities | 2025-11-03T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2473 | Apple iOS: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2026-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2472 | Samsung Android: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2470 | Liferay Portal und DXP: Mehrere Schwachstellen | 2025-11-02T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2469 | Redis: Schwachstelle ermöglicht Codeausführung | 2025-11-02T23:00:00.000+00:00 | 2025-11-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2468 | CPython: Schwachstelle ermöglicht Denial of Service | 2025-11-02T23:00:00.000+00:00 | 2026-03-26T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-226-07 | Rockwell Automation Micro850/870 | 2024-08-13T06:00:00.000000Z | 2024-08-13T06:00:00.000000Z |
| icsa-24-226-06 | Rockwell Automation FactoryTalk View Site Edition (Update A) | 2024-08-13T06:00:00.000000Z | 2024-08-29T06:00:00.000000Z |
| icsa-24-226-05 | Rockwell Automation DataMosaix Private Cloud | 2024-08-13T06:00:00.000000Z | 2024-08-13T06:00:00.000000Z |
| icsa-24-226-04 | Rockwell Automation Pavilion8 | 2024-08-13T06:00:00.000000Z | 2024-08-13T06:00:00.000000Z |
| icsa-24-226-03 | Rockwell Automation GuardLogix/ControlLogix 5580 Controller | 2024-08-13T06:00:00.000000Z | 2024-08-13T06:00:00.000000Z |
| icsa-24-226-02 | Rockwell Automation AADvance Standalone OPC-DA Server | 2024-08-13T06:00:00.000000Z | 2024-08-13T06:00:00.000000Z |
| icsa-24-226-01 | AVEVA SuiteLink Server | 2024-08-13T06:00:00.000000Z | 2024-08-13T06:00:00.000000Z |
| icsa-24-354-06 | Schneider Electric Accutech Manager | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-228-09 | Siemens NX | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-228-08 | Siemens COMOS | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-228-07 | Siemens Location Intelligence | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-228-06 | Siemens SINEC NMS | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-228-05 | Siemens LOGO! V8.3 BM Devices | 2024-08-13T00:00:00.000000Z | 2024-10-08T00:00:00.000000Z |
| icsa-24-228-04 | Siemens SINEC Traffic Analyzer | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-228-03 | Siemens Teamcenter Visualization and JT2Go | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-228-02 | Siemens INTRALOG WMS | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-228-01 | Siemens SCALANCE M-800, RUGGEDCOM RM1224 | 2024-08-13T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-221-01 | Dorsett Controls InfoScan | 2024-08-08T06:00:00.000000Z | 2024-08-08T06:00:00.000000Z |
| icsa-24-219-01 | Delta Electronics DIAScreen | 2024-08-06T06:00:00.000000Z | 2024-08-06T06:00:00.000000Z |
| icsa-24-214-09 | Rockwell Automation Logix Controllers | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-214-08 | Vonets WiFi Bridges | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-214-07 | AVTECH IP camera | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-214-06 | Johnson Controls exacqVision Web Service | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-214-05 | Johnson Controls exacqVision Server | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-214-04 | Johnson Controls exacqVision Web Service | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-214-03 | Johnson Controls exacqVision Web Service | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-214-02 | Johnson Controls exacqVision Server web service | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-214-01 | Johnson Controls exacqVision client and exacqVision server | 2024-08-01T06:00:00.000000Z | 2024-08-01T06:00:00.000000Z |
| icsa-24-207-02 | Positron Broadcast Signal Processor | 2024-07-25T06:00:00.000000Z | 2024-07-25T06:00:00.000000Z |
| icsa-24-205-03 | National Instruments LabVIEW | 2024-07-23T06:00:00.000000Z | 2024-07-23T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-c9800-fnf-dos-bol5vlge | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-c9800-capwap-mdns-6psn7gku | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-bgpevpn-zwtrtpbb | Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-19T14:12:27+00:00 |
| cisco-sa-appnav-xe-dos-j5mxtr4 | Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-ap-ip-flood-dos-6hxxenvq | Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-wsa-stored-xss-xpsjghmy | Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-webex-java-mvx6crh9 | Cisco Webex Meetings Java Deserialization Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-voip-phone-csrf-k56vxvvx | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-10-28T14:20:37+00:00 |
| cisco-sa-swa-filter-bypass-xxxtu3x | Cisco Web Security Appliance Filter Bypass Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-sna-xss-mca9tqnj | Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-info-exp-yxawyp3s | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-esa-snmp-jlajkswk | Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-04-06T16:00:00+00:00 |
| cisco-sa-java-spring-scf-rce-dqrhhjxh | Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022 | 2022-04-01T23:45:00+00:00 | 2022-04-15T15:31:28+00:00 |
| cisco-sa-java-spring-rce-zx9guc67 | Vulnerability in Spring Framework Affecting Cisco Products: March 2022 | 2022-04-01T23:45:00+00:00 | 2023-02-09T15:14:14+00:00 |
| cisco-sa-uccsmi-prvesc-bqhge4cm | Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability | 2022-03-02T16:00:00+00:00 | 2022-03-02T16:00:00+00:00 |
| cisco-sa-staros-cmdinj-759mnt4n | Cisco StarOS Command Injection Vulnerability | 2022-03-02T16:00:00+00:00 | 2022-03-02T16:00:00+00:00 |
| cisco-sa-ise-dos-jlh9txbp | Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability | 2022-03-02T16:00:00+00:00 | 2022-03-03T18:35:40+00:00 |
| cisco-sa-expressway-filewrite-87q5yrk | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | 2022-03-02T16:00:00+00:00 | 2022-03-02T16:00:00+00:00 |
| cisco-sa-nxos-nxapi-cmdinject-uluknmz2 | Cisco NX-OS Software NX-API Command Injection Vulnerability | 2022-02-23T16:00:00+00:00 | 2022-02-23T16:00:00+00:00 |
| cisco-sa-nxos-bfd-dos-wgqxrzxn | Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability | 2022-02-23T16:00:00+00:00 | 2022-03-23T15:41:48+00:00 |
| cisco-sa-cfsoip-dos-tpykydr | Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability | 2022-02-23T16:00:00+00:00 | 2022-02-23T16:00:00+00:00 |
| cisco-sa-cdp-dos-g8dplwyg | Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability | 2022-02-23T16:00:00+00:00 | 2022-03-01T17:35:44+00:00 |
| cisco-sa-rcm-tcp-dos-2wh8xjaq | Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability | 2022-02-16T16:00:00+00:00 | 2022-02-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-xss-p8fbz2fw | Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerability | 2022-02-16T16:00:00+00:00 | 2022-02-16T16:00:00+00:00 |
| cisco-sa-esa-dos-mxzvgtgu | Cisco Email Security Appliance DNS Verification Denial of Service Vulnerability | 2022-02-16T16:00:00+00:00 | 2022-02-25T19:22:29+00:00 |
| cisco-sa-swg-fbyps-3z4qt7p | Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability | 2022-02-02T16:00:00+00:00 | 2022-02-02T16:00:00+00:00 |
| cisco-sa-smb-mult-vuln-ka9pk6d | Cisco Small Business RV Series Routers Vulnerabilities | 2022-02-02T16:00:00+00:00 | 2022-02-14T13:54:42+00:00 |
| cisco-sa-dnac-info-disc-8qeynkej | Cisco DNA Center Information Disclosure Vulnerability | 2022-02-02T16:00:00+00:00 | 2022-02-04T20:22:37+00:00 |
| cisco-sa-cpsc-info-disc-zkjbdj9f | Cisco Prime Service Catalog Information Disclosure Vulnerability | 2022-02-02T16:00:00+00:00 | 2022-02-02T16:00:00+00:00 |
| cisco-sa-webex-xss-fmbpu2pe | Cisco Webex Meetings Cross-Site Scripting Vulnerability | 2022-01-19T16:00:00+00:00 | 2022-01-19T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-21244 | Windows Hyper-V Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21243 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21242 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21241 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21240 | Windows HTTP.sys Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21239 | Windows Kernel Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21238 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21237 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21236 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21235 | Windows Graphics Component Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21232 | Windows HTTP.sys Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21229 | Power BI Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21228 | Azure Local Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21222 | Windows Kernel Information Disclosure Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21218 | .NET Spoofing Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-20846 | GDI+ Denial of Service Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-20841 | Windows Notepad App Remote Code Execution Vulnerability | 2026-02-10T08:00:00.000Z | 2026-03-12T07:00:00.000Z |
| msrc_cve-2026-0391 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-05T08:00:00.000Z |
| msrc_cve-2026-0102 | Microsoft Edge (Chromium-based) Defense in Depth Vulnerability | 2026-02-10T08:00:00.000Z | 2026-02-17T08:00:00.000Z |
| msrc_cve-2023-2804 | Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo | 2026-02-10T08:00:00.000Z | 2026-02-10T08:00:00.000Z |
| msrc_cve-2026-21517 | Windows App for Mac Installer Elevation of Privilege Vulnerability | 2026-02-10T00:00:00.000Z | 2026-02-13T08:00:00.000Z |
| msrc_cve-2026-28422 | Vim has stack-buffer-overflow in build_stl_str_hl() | 2026-02-02T00:00:00.000Z | 2026-03-10T01:37:19.000Z |
| msrc_cve-2026-28421 | Vim has a heap-buffer-overflow and a segmentation fault | 2026-02-02T00:00:00.000Z | 2026-03-10T01:37:08.000Z |
| msrc_cve-2026-28420 | Vim has Heap-based Buffer Overflow and OOB Read in :terminal | 2026-02-02T00:00:00.000Z | 2026-03-10T01:36:59.000Z |
| msrc_cve-2026-28419 | Vim has Heap-based Buffer Underflow in Emacs tags parsing | 2026-02-02T00:00:00.000Z | 2026-03-10T01:36:50.000Z |
| msrc_cve-2026-28418 | Vim has Heap-based Buffer Overflow in Emacs tags parsing | 2026-02-02T00:00:00.000Z | 2026-03-10T01:36:41.000Z |
| msrc_cve-2026-28417 | Vim has OS Command Injection in netrw | 2026-02-02T00:00:00.000Z | 2026-03-10T01:36:31.000Z |
| msrc_cve-2026-28364 | In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock() function, which performs unbounded memcpy() operations using attacker-controlled lengths from crafted Marshal data. | 2026-02-02T00:00:00.000Z | 2026-03-11T14:35:49.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15767-1 | openbao-2.4.4-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15766-1 | libsoup-3_0-0-3.6.5-9.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15765-1 | gnutls-3.8.11-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15764-1 | etcd-for-k8s1.32-3.5.24-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15763-1 | cloudflared-2025.11.1-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15762-1 | librnp0-0.18.1-1.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15761-1 | rclone-1.72.0-1.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15760-1 | python311-3.11.14-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15759-1 | libIex-3_4-33-3.4.3-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15758-1 | fontforge-20251009-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15757-1 | curl-8.17.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15756-1 | blender-5.0-5.0.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15755-1 | blender-4.5-4.5.4-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15754-1 | ansible-core-2.19-2.19.4-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15753-1 | ansible-12-12.2.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15752-1 | act-0.2.82-2.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:20073-1 | Security update for alloy | 2025-11-20T17:26:16Z | 2025-11-20T17:26:16Z |
| opensuse-su-2025:20072-1 | Security update for runc | 2025-11-20T16:44:20Z | 2025-11-20T16:44:20Z |
| opensuse-su-2025:20068-1 | Security update for poppler | 2025-11-20T13:33:03Z | 2025-11-20T13:33:03Z |
| opensuse-su-2025:20076-1 | Security update for chromium | 2025-11-20T10:12:51Z | 2025-11-20T10:12:51Z |
| opensuse-su-2025:15751-1 | libipa_hbac-devel-2.11.1-2.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:15750-1 | python313-3.13.9-2.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:15749-1 | grub2-2.12-67.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:20065-1 | Security update for MozillaFirefox | 2025-11-19T16:45:48Z | 2025-11-19T16:45:48Z |
| opensuse-su-2025:20059-1 | Security update for ongres-scram | 2025-11-19T10:33:44Z | 2025-11-19T10:33:44Z |
| opensuse-su-2025:20056-1 | Security update for openexr | 2025-11-19T09:45:59Z | 2025-11-19T09:45:59Z |
| opensuse-su-2025:20050-1 | Security update for libxslt | 2025-11-19T09:40:24Z | 2025-11-19T09:40:24Z |
| opensuse-su-2025:20049-1 | Security update for tiff | 2025-11-19T09:40:24Z | 2025-11-19T09:40:24Z |
| opensuse-su-2025:20055-1 | Security update for expat | 2025-11-19T09:37:50Z | 2025-11-19T09:37:50Z |
| opensuse-su-2025:20074-1 | Security update for certbot | 2025-11-19T09:30:46Z | 2025-11-19T09:30:46Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:3088 | Red Hat Security Advisory: kernel security update | 2026-02-23T15:20:37+00:00 | 2026-04-12T16:51:46+00:00 |
| rhsa-2026:3089 | Red Hat Security Advisory: Red Hat Developer Hub 1.8.4 release. | 2026-02-23T14:46:08+00:00 | 2026-04-14T07:58:25+00:00 |
| rhsa-2026:3087 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-23T13:35:49+00:00 | 2026-04-14T09:46:22+00:00 |
| rhsa-2026:3083 | Red Hat Security Advisory: kernel security update | 2026-02-23T13:25:32+00:00 | 2026-04-13T08:34:25+00:00 |
| rhsa-2026:3077 | Red Hat Security Advisory: qemu-kvm security update | 2026-02-23T11:47:18+00:00 | 2026-03-24T13:02:44+00:00 |
| rhsa-2026:3078 | Red Hat Security Advisory: grafana security update | 2026-02-23T11:43:01+00:00 | 2026-03-24T14:16:21+00:00 |
| rhsa-2026:3067 | Red Hat Security Advisory: freerdp security update | 2026-02-23T10:55:26+00:00 | 2026-03-18T03:18:50+00:00 |
| rhsa-2026:3066 | Red Hat Security Advisory: kernel security update | 2026-02-23T10:50:56+00:00 | 2026-04-13T08:35:47+00:00 |
| rhsa-2026:3068 | Red Hat Security Advisory: freerdp security update | 2026-02-23T10:17:46+00:00 | 2026-03-18T03:18:50+00:00 |
| rhsa-2026:3059 | Red Hat Security Advisory: protobuf security update | 2026-02-23T08:32:48+00:00 | 2026-04-13T19:35:37+00:00 |
| rhsa-2026:3058 | Red Hat Security Advisory: ImageMagick security update | 2026-02-23T06:48:41+00:00 | 2026-03-18T03:18:04+00:00 |
| rhsa-2026:3053 | Red Hat Security Advisory: butane security update | 2026-02-23T06:47:46+00:00 | 2026-04-14T09:46:26+00:00 |
| rhsa-2026:3034 | Red Hat Security Advisory: munge security update | 2026-02-23T02:17:05+00:00 | 2026-03-18T03:18:48+00:00 |
| rhsa-2026:3040 | Red Hat Security Advisory: grafana-pcp security update | 2026-02-23T02:14:35+00:00 | 2026-04-14T09:46:21+00:00 |
| rhsa-2026:3042 | Red Hat Security Advisory: openssl security update | 2026-02-23T02:11:15+00:00 | 2026-04-09T23:05:04+00:00 |
| rhsa-2026:3037 | Red Hat Security Advisory: freerdp security update | 2026-02-23T01:59:00+00:00 | 2026-03-18T03:18:47+00:00 |
| rhsa-2026:3032 | Red Hat Security Advisory: munge security update | 2026-02-23T01:53:05+00:00 | 2026-03-18T03:18:52+00:00 |
| rhsa-2026:3031 | Red Hat Security Advisory: libpng15 security update | 2026-02-23T01:47:30+00:00 | 2026-04-09T14:35:49+00:00 |
| rhsa-2026:3041 | Red Hat Security Advisory: freerdp security update | 2026-02-23T01:46:55+00:00 | 2026-03-18T03:18:36+00:00 |
| rhsa-2026:3036 | Red Hat Security Advisory: freerdp security update | 2026-02-23T01:45:20+00:00 | 2026-03-18T03:18:48+00:00 |
| rhsa-2026:2746 | Red Hat Security Advisory: Red Hat build of MicroShift 4.17.49 security update | 2026-02-23T01:36:40+00:00 | 2026-04-10T21:19:30+00:00 |
| rhsa-2026:3039 | Red Hat Security Advisory: freerdp security update | 2026-02-23T01:35:55+00:00 | 2026-03-18T03:18:43+00:00 |
| rhsa-2026:3038 | Red Hat Security Advisory: freerdp security update | 2026-02-23T01:35:10+00:00 | 2026-03-18T03:18:47+00:00 |
| rhsa-2026:3033 | Red Hat Security Advisory: munge security update | 2026-02-23T01:32:20+00:00 | 2026-03-18T03:18:48+00:00 |
| rhsa-2026:3035 | Red Hat Security Advisory: grafana-pcp security update | 2026-02-23T01:30:21+00:00 | 2026-04-14T09:46:21+00:00 |
| rhsa-2026:3010 | Red Hat Security Advisory: munge security update | 2026-02-19T16:47:00+00:00 | 2026-03-18T03:18:44+00:00 |
| rhsa-2026:3013 | Red Hat Security Advisory: munge security update | 2026-02-19T16:24:11+00:00 | 2026-03-18T03:18:40+00:00 |
| rhsa-2026:3012 | Red Hat Security Advisory: munge security update | 2026-02-19T16:22:01+00:00 | 2026-03-18T03:18:40+00:00 |
| rhsa-2026:3011 | Red Hat Security Advisory: munge security update | 2026-02-19T15:48:55+00:00 | 2026-03-18T03:18:39+00:00 |
| rhsa-2026:2670 | Red Hat Security Advisory: OpenShift Container Platform 4.17.49 packages and security update | 2026-02-18T21:28:12+00:00 | 2026-04-10T21:19:25+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0813-1 | Security update for mozilla-nss | 2026-03-05T08:34:14Z | 2026-03-05T08:34:14Z |
| suse-su-2026:0812-1 | Security update for MozillaFirefox | 2026-03-05T08:31:43Z | 2026-03-05T08:31:43Z |
| suse-su-2026:0811-1 | Security update for libsoup2 | 2026-03-05T03:05:23Z | 2026-03-05T03:05:23Z |
| suse-su-2026:20648-1 | Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) | 2026-03-04T20:07:36Z | 2026-03-04T20:07:36Z |
| suse-su-2026:20637-1 | Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) | 2026-03-04T20:07:36Z | 2026-03-04T20:07:36Z |
| suse-su-2026:0810-1 | Security update for wireshark | 2026-03-04T19:33:44Z | 2026-03-04T19:33:44Z |
| suse-su-2026:0806-1 | Security update for wicked2nm,suse-migration-services,suse-migration-sle16-activation,SLES16-Migration,SLES16-SAP_Migration | 2026-03-04T15:46:27Z | 2026-03-04T15:46:27Z |
| suse-su-2026:20653-1 | Security update for cockpit | 2026-03-04T15:44:19Z | 2026-03-04T15:44:19Z |
| suse-ru-2026:20677-1 | Recommended update for open-vm-tools | 2026-03-04T15:30:53Z | 2026-03-04T15:30:53Z |
| suse-su-2026:0805-1 | Security update for python-pip | 2026-03-04T12:58:41Z | 2026-03-04T12:58:41Z |
| suse-su-2026:0803-1 | Security update for util-linux | 2026-03-04T12:57:40Z | 2026-03-04T12:57:40Z |
| suse-su-2026:0802-1 | Security update for python | 2026-03-04T12:34:53Z | 2026-03-04T12:34:53Z |
| suse-su-2026:0801-1 | Security update for libxslt | 2026-03-04T12:33:35Z | 2026-03-04T12:33:35Z |
| suse-su-2026:0800-1 | Security update for ocaml | 2026-03-04T12:33:10Z | 2026-03-04T12:33:10Z |
| suse-su-2026:20647-1 | Security update for libxml2, libxslt | 2026-03-04T10:51:03Z | 2026-03-04T10:51:03Z |
| suse-su-2026:20631-1 | Security update for libxml2, libxslt | 2026-03-04T10:51:03Z | 2026-03-04T10:51:03Z |
| suse-su-2026:20646-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-03-04T10:44:08Z | 2026-03-04T10:44:08Z |
| suse-su-2026:20636-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-03-04T10:44:08Z | 2026-03-04T10:44:08Z |
| suse-su-2026:20645-1 | Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-03-04T10:13:56Z | 2026-03-04T10:13:56Z |
| suse-su-2026:20644-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-03-04T09:41:19Z | 2026-03-04T09:41:19Z |
| suse-su-2026:20635-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-03-04T09:41:19Z | 2026-03-04T09:41:19Z |
| suse-su-2026:20652-1 | Security update for ca-certificates-mozilla | 2026-03-04T09:36:46Z | 2026-03-04T09:36:46Z |
| suse-su-2026:0796-1 | Security update for libsoup | 2026-03-04T09:33:40Z | 2026-03-04T09:33:40Z |
| suse-su-2026:20643-1 | Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) | 2026-03-04T09:20:51Z | 2026-03-04T09:20:51Z |
| suse-su-2026:20634-1 | Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) | 2026-03-04T09:20:51Z | 2026-03-04T09:20:51Z |
| suse-su-2026:20696-1 | Security update for ca-certificates-mozilla | 2026-03-04T08:37:59Z | 2026-03-04T08:37:59Z |
| suse-su-2026:20651-1 | Security update for docker | 2026-03-04T06:50:07Z | 2026-03-04T06:50:07Z |
| suse-su-2026:20695-1 | Security update for cockpit-machines | 2026-03-04T06:24:37Z | 2026-03-04T06:24:37Z |
| suse-su-2026:20694-1 | Security update for docker | 2026-03-04T06:24:37Z | 2026-03-04T06:24:37Z |
| suse-su-2026:0792-1 | Security update for libsoup | 2026-03-04T01:04:14Z | 2026-03-04T01:04:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:11534 | Important: git security update | 2025-07-22T00:00:00Z | 2025-07-23T08:07:31Z |
| alsa-2025:11533 | Important: git security update | 2025-07-22T00:00:00Z | 2025-07-24T09:25:29Z |
| alsa-2025:11463 | Moderate: fence-agents security update | 2025-07-21T00:00:00Z | 2025-07-22T13:35:00Z |
| alsa-2025:11462 | Important: git security update | 2025-07-21T00:00:00Z | 2025-07-22T10:34:40Z |
| alsa-2025:11456 | Moderate: kernel-rt security update | 2025-07-21T00:00:00Z | 2025-07-23T07:31:24Z |
| alsa-2025:11455 | Moderate: kernel security update | 2025-07-21T00:00:00Z | 2025-08-04T11:36:19Z |
| alsa-2025:11428 | Important: kernel security update | 2025-07-21T00:00:00Z | 2025-07-30T08:22:07Z |
| alsa-2025:11411 | Important: kernel security update | 2025-07-21T00:00:00Z | 2025-07-23T07:42:35Z |
| alsa-2025:11401 | Important: valkey security update | 2025-07-21T00:00:00Z | 2025-07-28T15:46:39Z |
| alsa-2025:10862 | Important: java-1.8.0-openjdk security update | 2025-07-17T00:00:00Z | 2025-07-21T09:43:41Z |
| alsa-2025:11335 | Important: tomcat security update | 2025-07-16T00:00:00Z | 2025-07-17T08:49:49Z |
| alsa-2025:11333 | Important: tomcat security update | 2025-07-16T00:00:00Z | 2025-07-17T08:17:04Z |
| alsa-2025:11332 | Important: tomcat9 security update | 2025-07-16T00:00:00Z | 2025-07-21T10:03:39Z |
| alsa-2025:11327 | Moderate: glib2 security update | 2025-07-16T00:00:00Z | 2025-07-17T08:13:56Z |
| alsa-2025:11324 | Important: cloud-init security update | 2025-07-16T00:00:00Z | 2025-07-17T08:11:16Z |
| alsa-2025:11299 | Moderate: kernel-rt security update | 2025-07-16T00:00:00Z | 2025-07-16T12:42:40Z |
| alsa-2025:11298 | Moderate: kernel security update | 2025-07-16T00:00:00Z | 2025-07-16T12:39:32Z |
| alsa-2025:10873 | Important: java-21-openjdk security update | 2025-07-16T00:00:00Z | 2025-07-30T13:13:20Z |
| alsa-2025:11140 | Moderate: glib2 security update | 2025-07-15T00:00:00Z | 2025-07-16T12:44:37Z |
| alsa-2025:11066 | Moderate: glibc security update | 2025-07-15T00:00:00Z | 2025-07-18T06:49:51Z |
| alsa-2025:11047 | Moderate: pcs security update | 2025-07-15T00:00:00Z | 2026-04-09T15:41:47Z |
| alsa-2025:11044 | Moderate: python3.12-setuptools security update | 2025-07-15T00:00:00Z | 2025-07-16T08:04:17Z |
| alsa-2025:11043 | Moderate: python3.11-setuptools security update | 2025-07-15T00:00:00Z | 2025-07-16T08:02:22Z |
| alsa-2025:11042 | Moderate: socat security update | 2025-07-15T00:00:00Z | 2025-07-16T08:00:21Z |
| alsa-2025:11036 | Moderate: python-setuptools security update | 2025-07-15T00:00:00Z | 2025-08-04T11:32:31Z |
| alsa-2025:11035 | Moderate: lz4 security update | 2025-07-15T00:00:00Z | 2025-08-02T13:24:46Z |
| alsa-2025:11030 | Moderate: emacs security update | 2025-07-15T00:00:00Z | 2025-07-16T07:58:14Z |
| alsa-2025:10867 | Important: java-17-openjdk security update | 2025-07-15T00:00:00Z | 2025-07-16T12:49:47Z |
| alsa-2025:10991 | Moderate: microcode_ctl security update | 2025-07-14T00:00:00Z | 2025-07-16T07:55:26Z |
| alsa-2025:10854 | Important: kernel security update | 2025-07-14T00:00:00Z | 2025-07-24T10:26:09Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-899 | Heap-buffer-overflow in cosm_create_key | 2023-09-23T14:00:56.859961Z | 2023-09-23T14:00:56.860254Z |
| osv-2023-896 | UNKNOWN READ in deliver_chunked_chunks | 2023-09-23T14:00:44.781770Z | 2023-09-23T14:00:44.782064Z |
| osv-2023-894 | Heap-double-free in dwg_free_object | 2023-09-22T14:01:18.317891Z | 2023-09-22T14:01:18.318214Z |
| osv-2023-890 | Heap-use-after-free in dwarf_dealloc | 2023-09-21T14:01:03.576514Z | 2023-09-21T14:01:03.576815Z |
| osv-2023-889 | Heap-double-free in regcomp | 2023-09-21T14:00:59.739088Z | 2023-09-21T14:00:59.739382Z |
| osv-2023-885 | UNKNOWN READ in bytes1_char_at | 2023-09-20T14:02:30.557328Z | 2023-09-20T14:02:30.557630Z |
| osv-2023-883 | Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray | 2023-09-20T14:01:10.331831Z | 2023-09-20T14:01:10.332151Z |
| osv-2023-881 | Heap-buffer-overflow in read_tmpl | 2023-09-19T14:01:22.611246Z | 2023-09-19T14:01:22.611560Z |
| osv-2023-877 | Heap-buffer-overflow in btf_ensure_modifiable | 2023-09-18T14:02:44.989260Z | 2026-04-10T14:13:13.162417Z |
| osv-2023-874 | Memcpy-param-overlap in bit_u_expand | 2023-09-18T14:01:11.020858Z | 2023-09-18T14:01:11.021190Z |
| osv-2023-873 | UNKNOWN WRITE in icu_74::Calendar::set | 2023-09-18T14:00:31.769072Z | 2023-09-18T14:00:31.769380Z |
| osv-2023-872 | Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal | 2023-09-18T14:00:10.451327Z | 2023-09-18T14:00:10.451623Z |
| osv-2023-870 | Heap-buffer-overflow in icu_74::SimpleDateFormat::subFormat | 2023-09-17T14:01:25.114159Z | 2023-09-17T14:01:25.114447Z |
| osv-2023-869 | Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser | 2023-09-17T14:01:25.028324Z | 2026-01-25T14:13:45.937535Z |
| osv-2023-867 | Negative-size-param in http_cb | 2023-09-16T14:02:46.648990Z | 2023-09-16T14:02:46.649266Z |
| osv-2023-865 | UNKNOWN in WasmEdge::Loader::SharedLibrary::load | 2023-09-16T14:02:40.468661Z | 2023-09-16T14:02:40.468956Z |
| osv-2023-862 | Heap-use-after-free in g_datalist_get_flags | 2023-09-16T14:01:07.280790Z | 2025-01-10T05:49:31.753574Z |
| osv-2023-857 | Segv on unknown address in FunctionCompiler::compileReturn | 2023-09-15T14:02:42.221599Z | 2023-09-15T14:02:42.222010Z |
| osv-2023-855 | Heap-double-free in dwg_free_common_entity_data | 2023-09-15T14:01:06.818081Z | 2024-04-27T14:22:00.114824Z |
| osv-2023-850 | Heap-buffer-overflow in bit_TV_to_utf8 | 2023-09-15T14:00:33.303768Z | 2023-09-15T14:00:33.304088Z |
| osv-2023-849 | Stack-buffer-overflow in ulocimp_toLanguageTag_74 | 2023-09-15T14:00:28.699483Z | 2023-09-15T14:00:28.699782Z |
| osv-2023-844 | Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame | 2023-09-14T14:00:27.712533Z | 2023-09-14T14:00:27.712843Z |
| osv-2023-840 | Null-dereference READ in isvcd_parse_inter_slice_data_cavlc_enh_lyr | 2023-09-13T14:01:19.214532Z | 2023-09-13T14:01:19.214860Z |
| osv-2023-839 | Global-buffer-overflow in iusace_quantize_lines | 2023-09-12T14:01:48.491847Z | 2023-09-12T14:01:48.492091Z |
| osv-2023-838 | Use-of-uninitialized-value in wabt::BinaryReaderIR::OnOpcode | 2023-09-12T14:01:08.316035Z | 2025-07-22T14:22:12.701561Z |
| osv-2023-837 | Heap-buffer-overflow in uint7_get_64 | 2023-09-12T14:00:46.512961Z | 2023-09-12T14:00:46.513217Z |
| osv-2023-819 | Heap-buffer-overflow in ucl_object_dtor_unref_single | 2023-09-09T14:01:07.368928Z | 2026-02-17T14:21:16.973749Z |
| osv-2023-813 | UNKNOWN READ in parse_priv_value | 2023-09-09T14:00:12.875572Z | 2023-12-09T14:23:28.975076Z |
| osv-2023-811 | Invalid-free in bit_chain_alloc_size | 2023-09-08T14:03:02.684720Z | 2023-09-08T14:03:02.684999Z |
| osv-2023-806 | Heap-buffer-overflow in H5F__accum_free | 2023-09-08T14:00:12.468140Z | 2025-03-18T00:47:11.270073Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2020-0087 | TryMutex<T> allows sending non-Send type across threads | 2020-11-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0151 | Generators can cause data races if non-Send types are used in their generator functions | 2020-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0115 | Singleton lacks bounds on Send and Sync. | 2020-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0149 | Data race and memory safety issue in `Index` | 2020-11-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0136 | CopyCell lacks bounds on its Send trait allowing for data races | 2020-11-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0133 | Queue<T> should have a Send bound on its Send/Sync traits | 2020-11-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0126 | SyncChannel<T> can move 'T: !Send' to other threads | 2020-11-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0116 | PinSlab<T> and Unordered<T, S> need bounds on their Send/Sync traits | 2020-11-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0134 | `LockWeak<T>` allows to create data race to `T`. | 2020-11-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0131 | Send/Sync bound needed on T for Send/Sync impl of RcuCell<T> | 2020-11-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0092 | Send/Sync bound needed on V in `impl Send/Sync for ARCache<K, V>` | 2020-11-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0080 | `miow` invalidly assumes the memory layout of std::net::SocketAddr | 2020-11-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0130 | Bunch<T> unconditionally implements Send/Sync | 2020-11-12T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0073 | Mutable reference with immutable provenance | 2020-11-12T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0069 | Argument injection in sendmail transport | 2020-11-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0159 | Potential segfault in `localtime_r` invocations | 2020-11-10T12:00:00Z | 2022-08-04T19:52:46Z |
| rustsec-2020-0140 | `Shared` can cause a data race | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0138 | ReaderResult should be bounded by Sync | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0137 | AtomicBox<T> lacks bound on its Send and Sync traits allowing data races | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0121 | AtomicBox<T> implements Send/Sync for any `T: Sized` | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0120 | `Decoder<R>` can carry `R: !Send` to other threads | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0111 | may_queue's Queue lacks Send/Sync bound for its Send/Sync trait. | 2020-11-10T12:00:00Z | 2024-10-25T18:45:36Z |
| rustsec-2020-0107 | hashconsing's HConsed lacks Send/Sync bound for its Send/Sync trait. | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0102 | LateStatic has incorrect Sync bound | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0096 | TreeFocus lacks bounds on its Send and Sync traits | 2020-11-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0070 | Some lock_api lock guard objects can cause data races | 2020-11-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0068 | Unexpected panic in multihash `from_slice` parsing code | 2020-11-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0078 | `net2` invalidly assumes the memory layout of std::net::SocketAddr | 2020-11-07T12:00:00Z | 2023-07-08T12:30:19Z |
| rustsec-2020-0079 | `socket2` invalidly assumes the memory layout of std::net::SocketAddr | 2020-11-06T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2020-0163 | `term_size` is unmaintained; use `terminal_size` instead | 2020-11-03T12:00:00Z | 2022-08-02T14:03:23Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-valkey-2025-48367 | Redis DoS Vulnerability due to bad connection error handling | 2025-10-16T12:08:13.783Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-32023 | Redis allows out of bounds writes in hyperloglog commands leading to RCE | 2025-10-16T12:07:58.321Z | 2026-02-05T09:10:30.960Z |
| bit-redis-2025-48367 | Redis DoS Vulnerability due to bad connection error handling | 2025-10-16T12:07:00.720Z | 2025-10-16T12:31:38.153Z |
| bit-redis-2025-32023 | Redis allows out of bounds writes in hyperloglog commands leading to RCE | 2025-10-16T12:06:41.782Z | 2026-02-05T09:10:30.960Z |
| bit-keydb-2025-48367 | Redis DoS Vulnerability due to bad connection error handling | 2025-10-16T12:00:55.638Z | 2025-10-16T12:31:38.153Z |
| bit-keydb-2025-32023 | Redis allows out of bounds writes in hyperloglog commands leading to RCE | 2025-10-16T12:00:41.031Z | 2026-02-05T09:10:30.960Z |
| bit-valkey-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 2025-10-16T09:19:55.260Z | 2026-03-21T09:12:01.983Z |
| bit-valkey-2025-49112 | 2025-10-16T09:19:52.847Z | 2026-02-11T09:09:18.507Z | |
| bit-redis-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 2025-10-16T09:18:53.323Z | 2026-03-21T09:12:01.983Z |
| bit-keydb-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 2025-10-16T09:12:52.562Z | 2026-03-21T09:12:01.983Z |
| bit-wildfly-2025-23367 | Org.wildfly.core:wildfly-server: wildfly improper rbac permission | 2025-10-15T08:51:55.776Z | 2026-02-11T09:09:18.507Z |
| bit-pytorch-2025-55560 | 2025-10-15T08:50:02.845Z | 2025-10-15T09:08:35.035Z | |
| bit-mastodon-2025-62176 | Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels | 2025-10-15T08:44:06.235Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62175 | Mastodon streaming API fails to disconnect disabled and suspended users | 2025-10-15T08:44:04.530Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62174 | Mastodon allows continued access after password reset via CLI | 2025-10-15T08:44:02.890Z | 2026-01-08T18:07:34.629Z |
| bit-python-2025-8291 | ZIP64 End of Central Directory (EOCD) Locator record offset not checked | 2025-10-14T09:30:19.669Z | 2025-12-04T12:07:39.656Z |
| bit-python-2024-5642 | Buffer overread when using an empty list with SSLContext.set_npn_protocols() | 2025-10-14T09:29:29.557Z | 2025-10-14T09:53:39.450Z |
| bit-libpython-2025-8291 | ZIP64 End of Central Directory (EOCD) Locator record offset not checked | 2025-10-14T09:25:48.465Z | 2025-12-04T12:07:39.656Z |
| bit-libpython-2024-5642 | Buffer overread when using an empty list with SSLContext.set_npn_protocols() | 2025-10-14T09:24:35.254Z | 2025-10-14T09:53:39.450Z |
| bit-kibana-2025-25018 | Kibana Stored Cross-Site Scripting (XSS) | 2025-10-14T08:43:02.190Z | 2025-11-06T13:25:46.476Z |
| bit-kibana-2025-25017 | Kibana Stored Cross-Site Scripting (XSS) | 2025-10-14T08:43:00.623Z | 2025-11-06T13:25:46.476Z |
| bit-elk-2025-25018 | Kibana Stored Cross-Site Scripting (XSS) | 2025-10-14T08:39:59.187Z | 2025-11-06T13:25:46.476Z |
| bit-elk-2025-25017 | Kibana Stored Cross-Site Scripting (XSS) | 2025-10-14T08:39:57.577Z | 2025-11-06T13:25:46.476Z |
| bit-elasticsearch-2025-37727 | Elasticsearch Insertion of sensitive information in log file | 2025-10-14T08:39:50.514Z | 2025-10-14T09:09:11.030Z |
| bit-gitlab-2025-2934 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-11T09:05:29.864Z | 2025-10-21T09:07:40.239Z |
| bit-gitlab-2025-11340 | Incorrect Authorization in GitLab | 2025-10-11T09:04:34.616Z | 2025-10-11T09:07:57.990Z |
| bit-gitlab-2025-10004 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-11T09:04:16.301Z | 2025-10-11T09:07:57.990Z |
| bit-ejbca-2025-3027 | Open Redirect vulnerability in EJBCA | 2025-10-10T08:38:43.953Z | 2025-10-10T09:07:15.482Z |
| bit-ejbca-2025-3026 | Improper Neutralization of Special Elements vulnerability in EJBCA | 2025-10-10T08:38:42.126Z | 2025-10-10T09:07:15.482Z |
| bit-kibana-2025-37728 | Kibana Insufficiently Protected Credentials in the CrowdStrike Connector | 2025-10-09T08:43:25.053Z | 2025-10-09T09:08:03.236Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0789 | Multiples vulnérabilités dans les produits IBM | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0788 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0787 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0786 | Multiples vulnérabilités dans Zabbix | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0785 | Multiples vulnérabilités dans Liferay | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0784 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0783 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0782 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-09-11T00:00:00.000000 | 2025-09-11T00:00:00.000000 |
| certfr-2025-avi-0781 | Multiples vulnérabilités dans Cisco IOS XR | 2025-09-11T00:00:00.000000 | 2025-09-11T00:00:00.000000 |
| certfr-2025-avi-0780 | Multiples vulnérabilités dans les produits Microsoft | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0779 | Multiples vulnérabilités dans Microsoft Azure | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0778 | Multiples vulnérabilités dans Microsoft Windows | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0777 | Multiples vulnérabilités dans Microsoft Office | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0776 | Multiples vulnérabilités dans GitLab | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0775 | Multiples vulnérabilités dans Curl | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0774 | Vulnérabilité dans Liferay | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0773 | Multiples vulnérabilités dans les produits Fortinet | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0772 | Vulnérabilité dans les points d'accès Sophos AP6 | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0771 | Multiples vulnérabilités dans Xen | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0770 | Multiples vulnérabilités dans les produits Adobe | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0769 | Multiples vulnérabilités dans Google Chrome | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0768 | Multiples vulnérabilités dans les produits Ivanti | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0767 | Vulnérabilité dans les produits Adobe | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0766 | Multiples vulnérabilités dans les produits Liferay | 2025-09-09T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0765 | Multiples vulnérabilités dans les produits Siemens | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0764 | Multiples vulnérabilités dans les produits SAP | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0763 | Vulnérabilité dans Spring Cloud Gateway | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0762 | Vulnérabilité dans SPIP | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| certfr-2025-avi-0761 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| certfr-2025-avi-0760 | Multiples vulnérabilités dans les produits IBM | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000010 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2022-02-08T16:13+09:00 | 2022-02-08T16:13+09:00 |
| jvndb-2016-008013 | Multiple ESET products for macOS vulnerable to improper server certificate verification | 2022-02-07T14:18+09:00 | 2022-02-07T14:18+09:00 |
| jvndb-2022-000007 | Multiple vulnerabilities in TransmitMail | 2022-01-25T15:31+09:00 | 2022-01-25T15:31+09:00 |
| jvndb-2022-001097 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux | 2022-01-25T13:35+09:00 | 2022-01-25T13:35+09:00 |
| jvndb-2022-001087 | GROWI vulnerable to authorization bypass through user-controlled key | 2022-01-24T14:07+09:00 | 2022-01-24T14:07+09:00 |
| jvndb-2022-000006 | Multiple cross-site scripting vulnerabilities in php_mailform | 2022-01-20T15:42+09:00 | 2022-01-20T15:42+09:00 |
| jvndb-2022-000001 | Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting | 2022-01-19T14:00+09:00 | 2022-01-19T14:00+09:00 |
| jvndb-2022-000005 | PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption | 2022-01-13T15:26+09:00 | 2022-01-13T15:26+09:00 |
| jvndb-2022-000004 | Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials | 2022-01-13T15:21+09:00 | 2022-01-13T15:21+09:00 |
| jvndb-2022-000003 | Jimoty App for Android uses a hard-coded API key for an external service | 2022-01-12T15:37+09:00 | 2022-01-12T15:37+09:00 |
| jvndb-2022-000002 | Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" | 2022-01-12T15:33+09:00 | 2022-01-12T15:33+09:00 |
| jvndb-2021-006146 | Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems | 2021-12-28T11:51+09:00 | 2021-12-28T11:51+09:00 |
| jvndb-2021-006117 | Multiple vulnerabilities in IDEC PLCs | 2021-12-27T16:54+09:00 | 2022-01-11T16:36+09:00 |
| jvndb-2021-006026 | TP-Link TL-WR802N V4(JP) vulnerable to OS command injection | 2021-12-24T15:31+09:00 | 2021-12-24T15:31+09:00 |
| jvndb-2021-005998 | Multiple vulnerabilities in QNAP VioStar NVR | 2021-12-24T10:58+09:00 | 2021-12-24T10:58+09:00 |
| jvndb-2021-003929 | Multiple vulnerabilities in multiple Yamaha routers | 2021-12-24T10:51+09:00 | 2021-12-24T10:51+09:00 |
| jvndb-2021-000112 | Android Apps developed using Yappli fails to restrict custom URL schemes properly | 2021-12-22T15:07+09:00 | 2021-12-22T15:07+09:00 |
| jvndb-2021-000111 | Multiple vulnerabilities in GroupSession | 2021-12-20T14:53+09:00 | 2021-12-21T14:20+09:00 |
| jvndb-2021-000110 | UNIVERGE DT Series vulnerable to missing encryption of sensitive data | 2021-12-17T16:57+09:00 | 2021-12-17T16:57+09:00 |
| jvndb-2021-005174 | Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer) | 2021-12-09T13:43+09:00 | 2021-12-09T13:43+09:00 |
| jvndb-2021-004912 | Multiple vulnerabilities in multiple ELECOM routers | 2021-12-02T17:16+09:00 | 2022-03-30T16:11+09:00 |
| jvndb-2021-000109 | Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields" | 2021-12-02T15:02+09:00 | 2022-02-18T16:18+09:00 |
| jvndb-2021-000108 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2021-11-30T16:23+09:00 | 2022-03-29T16:18+09:00 |
| jvndb-2021-000107 | Wi-Fi STATION SH-52A vulnerable to cross-site scripting | 2021-11-30T14:49+09:00 | 2021-11-30T14:49+09:00 |
| jvndb-2021-004716 | Trend Micro Antivirus for MAC vulnerable to improper access controls | 2021-11-29T13:52+09:00 | 2021-11-29T13:52+09:00 |
| jvndb-2021-000106 | Multiple vulnerabilities in baserCMS | 2021-11-26T14:59+09:00 | 2021-11-26T14:59+09:00 |
| jvndb-2021-000104 | WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery | 2021-11-25T14:31+09:00 | 2021-11-25T14:31+09:00 |
| jvndb-2021-000105 | PowerCMS XMLRPC API vulnerable to OS command injection | 2021-11-24T15:47+09:00 | 2024-07-26T15:22+09:00 |
| jvndb-2021-004432 | Multiple Vulnerabilities in JP1/Automatic Operation | 2021-11-22T16:10+09:00 | 2021-11-22T16:10+09:00 |
| jvndb-2021-000103 | WordPress Plugin "Push Notifications for WordPress (Lite)" vulnerable to cross-site request forgery | 2021-11-16T13:42+09:00 | 2021-11-16T13:42+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-16671 | WordPress插件ABG Rich Pins跨站脚本漏洞 | 2026-01-30 | 2026-04-10 |
| cnvd-2026-16638 | Oracle MySQL存在未明漏洞(CNVD-2026-16638) | 2026-01-30 | 2026-04-09 |
| cnvd-2026-16631 | Oracle MySQL存在未明漏洞(CNVD-2026-16631) | 2026-01-30 | 2026-04-09 |
| cnvd-2026-16630 | Oracle MySQL存在未明漏洞(CNVD-2026-16630) | 2026-01-30 | 2026-04-09 |
| cnvd-2026-16629 | Oracle MySQL存在未明漏洞(CNVD-2026-16629) | 2026-01-30 | 2026-04-09 |
| cnvd-2026-16628 | Oracle MySQL存在未明漏洞(CNVD-2026-16628) | 2026-01-30 | 2026-04-09 |
| cnvd-2026-16627 | Oracle MySQL存在未明漏洞(CNVD-2026-16627) | 2026-01-30 | 2026-04-09 |
| cnvd-2026-16161 | Microsoft Office代码执行漏洞(CNVD-2026-16161) | 2026-01-30 | 2026-04-07 |
| cnvd-2026-12366 | NVIDIA CUDA toolkit代码问题漏洞 | 2026-01-30 | 2026-03-03 |
| cnvd-2026-12365 | NVIDIA CUDA toolkit gfx_hotspot模块命令注入漏洞 | 2026-01-30 | 2026-03-03 |
| cnvd-2026-11798 | IBM Licensing Operator权限提升漏洞 | 2026-01-30 | 2026-02-28 |
| cnvd-2026-11755 | Google Chrome安全绕过漏洞(CNVD-2026-11755) | 2026-01-30 | 2026-02-25 |
| cnvd-2026-11754 | Google Chrome安全绕过漏洞(CNVD-2026-11754) | 2026-01-30 | 2026-02-25 |
| cnvd-2026-11753 | Google Chrome安全绕过漏洞(CNVD-2026-11753) | 2026-01-30 | 2026-02-25 |
| cnvd-2026-11752 | Google Chrome安全绕过漏洞(CNVD-2026-11752) | 2026-01-30 | 2026-02-25 |
| cnvd-2026-11751 | Google Chrome代码执行漏洞(CNVD-2026-11751) | 2026-01-30 | 2026-02-25 |
| cnvd-2026-11750 | Google Chrome安全绕过漏洞(CNVD-2026-11750) | 2026-01-30 | 2026-02-25 |
| cnvd-2026-11736 | TOTOLINK NR1800X命令注入漏洞(CNVD-2026-11736) | 2026-01-30 | 2026-02-24 |
| cnvd-2026-11735 | Tenda W30E信息泄露漏洞 | 2026-01-30 | 2026-02-24 |
| cnvd-2026-11734 | Tenda AX1806 sub_4C408函数堆栈溢出漏洞 | 2026-01-30 | 2026-02-24 |
| cnvd-2026-10893 | WordPress插件WP FullCalendar信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10892 | WordPress插件WP Directory Kit信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10891 | WordPress插件CubeWP – All-in-One Dynamic Content Framework信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10890 | WordPress插件Contact Form 7 GetResponse Extension信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10889 | WordPress插件Cargus信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10888 | WordPress插件Booking Ultra Pro信息泄露漏洞 | 2026-01-30 | 2026-02-14 |
| cnvd-2026-10855 | Rockwell Automation CompactLogix 5370拒绝服务漏洞 | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10854 | Rockwell Automation ArmorStart LT拒绝服务漏洞(CNVD-2026-10854) | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10852 | Rockwell Automation ArmorStart LT拒绝服务漏洞(CNVD-2026-10852) | 2026-01-30 | 2026-02-10 |
| cnvd-2026-10851 | Rockwell Automation ArmorStart LT拒绝服务漏洞(CNVD-2026-10851) | 2026-01-30 | 2026-02-10 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-00814 | Уязвимость функции sub_403010() сценария /cgi-bin/wireless.cgi микропрограммного обеспече… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00813 | Уязвимость функции sub_4012A0() сценария /cgi-bin/login.cgi микропрограммного обеспечения… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00812 | Уязвимость программного обеспечения автоматической организации и сортировки файлов Qfilin… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00811 | Уязвимость графического интерфейса веб-приложения QGIS QWC2, позволяющая нарушителю выпол… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00810 | Уязвимость веб-приложения QGIS QWC2, связанная с непринятием мер по защите структуры веб-… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00809 | Уязвимость компонента Packet Handler операционной системы PAN-OS, позволяющая нарушителю… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00808 | Уязвимость программного обеспечения для управления и мониторинга печати NDD Print Agent, … | 26.01.2026 | 26.01.2026 |
| bdu:2026-00807 | Уязвимость метода LaunchUpdateCmdElevatedAndWait привилегированного COM-интерфейса IEleva… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00806 | Уязвимость пакетов программ Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Ent… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00805 | Уязвимость клиентской библиотеки Azure Core для Python, связанная с недостатками механизм… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00804 | Уязвимость пакетов программ Microsoft SharePoint Server, Microsoft SharePoint Enterprise … | 26.01.2026 | 26.01.2026 |
| bdu:2026-00803 | Уязвимость компонента mariadb-dump системы управления базами данных MariaDB, позволяющая … | 26.01.2026 | 26.01.2026 |
| bdu:2026-00802 | Уязвимость виртуальной машины Ethereum Cosmos EVM, связанная с неверным управлением генер… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00801 | Уязвимость программного средства мониторинга компьютерной сети NETMRI, связанная с недост… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00800 | Уязвимость библиотеки ANGLE браузера Google Chrome, позволяющая нарушителю вызвать отказ … | 26.01.2026 | 26.01.2026 |
| bdu:2026-00799 | Уязвимость почтового клиента Microsoft Outlook, связанная с включением функций из недосто… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00798 | Уязвимость почтового клиента Microsoft Outlook, связанная с включением функций из недосто… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00797 | Уязвимость почтового клиента Microsoft Outlook, связанная с непринятием мер по защите стр… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00796 | Уязвимость почтового клиента Microsoft Outlook, связанная с непринятием мер по защите стр… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00795 | Уязвимость почтового клиента Microsoft Outlook, связанная с непринятием мер по защите стр… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00794 | Уязвимость почтового клиента Microsoft Outlook, связанная с неограниченной загрузкой файл… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00793 | Уязвимость функции save_virtualser_data() микропрограммного обеспечения маршрутизаторов T… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00792 | Уязвимость функции set_qosMib_list() микропрограммного обеспечения маршрутизаторов Tenda … | 26.01.2026 | 26.01.2026 |
| bdu:2026-00791 | Уязвимость функции setSmartPowerManagement() микропрограммного обеспечения маршрутизаторо… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00790 | Уязвимость функции setSchedWifi() микропрограммного обеспечения маршрутизаторов Tenda AC8… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00789 | Уязвимость функции sscanf() микропрограммного обеспечения маршрутизаторов Tenda AC8, позв… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00788 | Уязвимость функции fromSetRouteStatic() микропрограммного обеспечения маршрутизаторов Ten… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00787 | Уязвимость функции fromSetRouteStatic() микропрограммного обеспечения маршрутизаторов Ten… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00786 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… | 26.01.2026 | 26.01.2026 |
| bdu:2026-00785 | Уязвимость ядра программного средства виртуализации Oracle VM VirtualBox, связанная с нед… | 25.01.2026 | 26.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201002-0694 | The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on th… | 2026-03-09T22:45:33.745000Z |
| var-201505-0337 | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorit… | 2026-03-09T22:44:51.374000Z |
| var-201702-0869 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … | 2026-03-09T22:44:48.769000Z |
| var-201904-1473 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T22:44:44.087000Z |
| var-201302-0224 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T22:44:38.882000Z |
| var-202105-1469 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(… | 2026-03-09T22:44:02.607000Z |
| var-201106-0034 | Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.… | 2026-03-09T22:43:52.133000Z |
| var-201104-0082 | dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and … | 2026-03-09T22:43:44.086000Z |
| var-200512-0633 | passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 al… | 2026-03-09T22:43:10.969000Z |
| var-200810-0643 | Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in ne… | 2026-03-09T22:43:10.783000Z |
| var-201106-0192 | The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.… | 2026-03-09T22:42:39.401000Z |
| var-200603-0276 | Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to r… | 2026-03-09T22:42:38.967000Z |
| var-201408-0094 | Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before… | 2026-03-09T22:42:38.608000Z |
| var-201904-1405 | A consistency issue existed in the handling of application snapshots. The issue was addre… | 2026-03-09T22:42:38.275000Z |
| var-201905-0095 | A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execut… | 2026-03-09T22:42:35.251000Z |
| var-201711-0473 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2026-03-09T22:42:34.233000Z |
| var-201210-0155 | Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS … | 2026-03-09T22:42:33.505000Z |
| var-201512-0483 | crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remo… | 2026-03-09T22:42:25.354000Z |
| var-201210-0272 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T22:42:25.193000Z |
| var-200701-0518 | The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS … | 2026-03-09T22:42:21.420000Z |
| var-201211-0319 | Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote … | 2026-03-09T22:42:08.807000Z |
| var-201904-0746 | A race condition was addressed with additional validation. This issue affected versions p… | 2026-03-09T22:41:00.561000Z |
| var-202112-1608 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart par… | 2026-03-09T22:40:59.062000Z |
| var-202203-0072 | Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are e… | 2026-03-09T22:40:58.795000Z |
| var-200708-0604 | The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and late… | 2026-03-09T22:40:51.814000Z |
| var-202105-1430 | An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL … | 2026-03-09T22:40:18.479000Z |
| var-201408-0212 | The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows re… | 2026-03-09T22:39:17.757000Z |
| var-201210-0457 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T22:39:09.262000Z |
| var-200810-0010 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windo… | 2026-03-09T22:39:06.400000Z |
| var-201904-1460 | A cross-site scripting issue existed in Safari. This issue was addressed with improved UR… | 2026-03-09T22:39:05.592000Z |