Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-3317
5.1 (4.0)
Reflected Cross-Site Scripting in Navigate CMS application Navigate
Navigate CMS
2026-04-21T09:03:59.773Z 2026-04-21T13:22:03.438Z
CVE-2025-13826
8.2 (4.0)
Incorrect input validation on the Zervit portable HTTP… Zervit
portable HTTP/Web server
2026-04-21T08:19:57.983Z 2026-04-21T13:23:30.712Z
CVE-2026-6711
6.1 (3.1)
Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting ryhowa
Website LLMs.txt
2026-04-21T06:43:59.951Z 2026-04-21T13:51:33.148Z
CVE-2026-6712
4.4 (3.1)
Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Sto… ryhowa
Website LLMs.txt
2026-04-21T06:43:59.539Z 2026-04-21T13:47:53.867Z
CVE-2026-6703
4.3 (3.1)
Responsive Blocks <= 2.2.1 - Missing Authorization to … cyberchimps
Responsive Blocks – Page Builder for Blocks & Patterns
2026-04-21T06:43:58.955Z 2026-04-21T16:36:19.694Z
CVE-2026-31368
7.8 (3.1)
Privilege Bypass in AiAssistant Honor
AIAssistant
2026-04-21T06:40:08.446Z 2026-04-21T13:23:57.396Z
CVE-2026-31370
6.3 (3.1)
Information Leak Vulnerability in Honor E Honor
Honor E
2026-04-21T06:30:53.883Z 2026-04-21T13:25:53.570Z
CVE-2026-31369
3.2 (3.1)
Privilege Bypass in PcManager Honor
PcManager
2026-04-21T06:26:52.403Z 2026-04-21T13:18:27.938Z
CVE-2026-5965
9.3 (4.0)
9.8 (3.1)
NewSoft|NewSoftOA - OS Command Injection NewSoft
NewSoftOA
2026-04-21T03:32:55.138Z 2026-04-21T13:20:58.795Z
CVE-2026-6674
6.5 (3.1)
Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authen… tholstkabelbwde
Plugin: CMS für Motorrad Werkstätten
2026-04-21T02:25:40.676Z 2026-04-21T12:58:21.763Z
CVE-2026-6675
5.3 (3.1)
Responsive Blocks <= 2.2.0 - Unauthenticated Open Emai… cyberchimps
Responsive Blocks – Page Builder for Blocks & Patterns
2026-04-21T02:25:39.847Z 2026-04-21T13:22:00.182Z
CVE-2026-40497
8.1 (3.1)
FreeScout Vulnerable to CSS Injection via Stored Style… freescout-help-desk
freescout
2026-04-21T01:45:55.492Z 2026-04-21T13:25:21.103Z
CVE-2026-6058
4.5 (3.1)
** UNSUPPORTED WHEN ASSIGNED ** An improper encod… Zyxel
WRE6505 v2 firmware
2026-04-21T01:42:07.433Z 2026-04-21T13:26:29.283Z
CVE-2026-40496
8.8 (4.0)
FreeScout has Predictable Attachment Token that Allows… freescout-help-desk
freescout
2026-04-21T01:38:50.117Z 2026-04-21T13:50:39.454Z
CVE-2026-39973
7.1 (3.1)
Apktool: Path Traversal to Arbitrary File Write iBotPeaches
Apktool
2026-04-21T01:35:22.396Z 2026-04-23T03:56:04.482Z
CVE-2026-40250
8.4 (4.0)
OpenEXR has integer overflow in DWA decoder outBufferE… AcademySoftwareFoundation
openexr
2026-04-21T01:33:00.212Z 2026-04-23T03:55:57.543Z
CVE-2026-40244
8.4 (4.0)
OpenEXR has integer overflow in DWA setupChannelData p… AcademySoftwareFoundation
openexr
2026-04-21T01:30:55.061Z 2026-04-23T03:55:56.354Z
CVE-2026-39886
5.3 (3.1)
OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl() AcademySoftwareFoundation
openexr
2026-04-21T01:27:01.371Z 2026-04-21T13:49:21.573Z
CVE-2026-39866
7.4 (4.0)
Lawnchair vulnerable to Command Injection via unquoted… LawnchairLauncher
lawnchair
2026-04-21T01:19:47.510Z 2026-04-23T03:55:58.650Z
CVE-2026-39861
7.7 (4.0)
Claude Code: Sandbox Escape via Symlink Following Allo… anthropics
claude-code
2026-04-21T00:56:39.062Z 2026-04-21T13:44:49.618Z
CVE-2026-39386
8.8 (3.1)
Neko has Self-service Privilege Escalation for Authent… m1k1o
neko
2026-04-21T00:50:34.656Z 2026-04-22T03:56:19.795Z
CVE-2026-40264
2 (4.0)
OpenBao's Token Store Allows Cross-Namespace Renewal, … openbao
openbao
2026-04-21T00:47:38.156Z 2026-04-21T19:30:51.975Z
CVE-2026-39396
3.1 (3.1)
OpenBao has Decompression Bomb via Unbounded Copy in O… openbao
openbao
2026-04-21T00:44:53.943Z 2026-04-21T19:49:18.821Z
CVE-2026-39388
2 (4.0)
OpenBao's Certificate Authentication Allows Token Rene… openbao
openbao
2026-04-21T00:43:22.920Z 2026-04-21T19:36:07.865Z
CVE-2026-39946
4.6 (4.0)
OpenBao allows SQL Injection in PostgreSQL database se… openbao
openbao
2026-04-21T00:19:39.578Z 2026-04-21T13:34:21.088Z
CVE-2026-39378
6.5 (3.1)
nbconvert has an Arbitrary File Read via Path Traversa… jupyter
nbconvert
2026-04-21T00:17:00.684Z 2026-04-21T13:43:29.081Z
CVE-2026-39377
6.5 (3.1)
nbconvert has an Arbitrary File Write via Path Travers… jupyter
nbconvert
2026-04-21T00:14:59.937Z 2026-04-21T19:49:24.475Z
CVE-2026-39320
7.5 (3.1)
Signal K Server has an Unauthenticated Regular Express… SignalK
signalk-server
2026-04-21T00:07:10.371Z 2026-04-21T19:36:54.787Z
CVE-2026-41527
6.9 (3.1)
KDE Kleopatra before 26.08.0 on Windows allows lo… KDE
Kleopatra
2026-04-21T00:00:00.000Z 2026-04-22T15:35:24.571Z
CVE-2026-40706
8.4 (3.1)
In NTFS-3G 2022.10.3 before 2026.2.25, a heap buf… Tuxera
NTFS-3G
2026-04-21T00:00:00.000Z 2026-04-22T15:35:30.245Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-6765
5.3 (3.1)
Information disclosure in the Form Autofill component Mozilla
Firefox
2026-04-21T12:40:58.955Z 2026-04-21T23:34:58.377Z
CVE-2026-6764
6.5 (3.1)
Incorrect boundary conditions in the DOM: Device Inter… Mozilla
Firefox
2026-04-21T12:40:58.297Z 2026-04-21T23:34:57.148Z
CVE-2026-6763
6.5 (3.1)
Mitigation bypass in the File Handling component Mozilla
Firefox
2026-04-21T12:40:57.591Z 2026-04-21T23:34:56.036Z
CVE-2026-6762
6.3 (3.1)
Spoofing issue in the DOM: Core & HTML component Mozilla
Firefox
2026-04-21T12:40:56.838Z 2026-04-22T15:34:52.494Z
CVE-2026-6761
8.8 (3.1)
Privilege escalation in the Networking component Mozilla
Firefox
2026-04-21T12:40:56.138Z 2026-04-23T03:56:00.979Z
CVE-2026-6760
9.8 (3.1)
Mitigation bypass in the Networking: Cookies component Mozilla
Firefox
2026-04-21T12:40:55.131Z 2026-04-22T15:34:58.133Z
CVE-2026-6759
7.5 (3.1)
Use-after-free in the Widget: Cocoa component Mozilla
Firefox
2026-04-21T12:40:54.329Z 2026-04-22T15:06:13.308Z
CVE-2026-6758
7.5 (3.1)
Use-after-free in the JavaScript: WebAssembly component Mozilla
Firefox
2026-04-21T12:40:53.661Z 2026-04-22T15:06:33.849Z
CVE-2026-6757
6.3 (3.1)
Invalid pointer in the JavaScript: WebAssembly component Mozilla
Firefox
2026-04-21T12:40:52.961Z 2026-04-22T15:35:04.751Z
CVE-2026-6756
7.5 (3.1)
Mitigation bypass in Firefox for Android Mozilla
Firefox
2026-04-21T12:40:52.082Z 2026-04-22T15:35:12.113Z
CVE-2026-6755
6.5 (3.1)
Mitigation bypass in the DOM: postMessage component Mozilla
Firefox
2026-04-21T12:40:51.382Z 2026-04-21T23:34:47.512Z
CVE-2026-6754
7.5 (3.1)
Use-after-free in the JavaScript Engine component Mozilla
Firefox
2026-04-21T12:40:50.577Z 2026-04-22T15:06:53.853Z
CVE-2026-6753
7.3 (3.1)
Incorrect boundary conditions in the WebRTC component Mozilla
Firefox
2026-04-21T12:40:49.893Z 2026-04-22T15:35:18.745Z
CVE-2026-6752
7.3 (3.1)
Incorrect boundary conditions in the WebRTC component Mozilla
Firefox
2026-04-21T12:40:49.079Z 2026-04-21T23:34:44.029Z
CVE-2026-6751
7.3 (3.1)
Uninitialized memory in the Audio/Video: Web Codecs co… Mozilla
Firefox
2026-04-21T12:40:48.315Z 2026-04-21T23:34:42.935Z
CVE-2026-6750
9.8 (3.1)
Privilege escalation in the Graphics: WebRender component Mozilla
Firefox
2026-04-21T12:40:47.476Z 2026-04-23T03:55:59.793Z
CVE-2026-6749
7.5 (3.1)
Information disclosure due to uninitialized memory in … Mozilla
Firefox
2026-04-21T12:40:46.800Z 2026-04-22T15:07:52.051Z
CVE-2026-6748
9.8 (3.1)
Uninitialized memory in the Audio/Video: Web Codecs co… Mozilla
Firefox
2026-04-21T12:40:45.923Z 2026-04-21T23:34:39.302Z
CVE-2026-6747
7.5 (3.1)
Use-after-free in the WebRTC component Mozilla
Firefox
2026-04-21T12:40:45.203Z 2026-04-22T15:08:13.152Z
CVE-2026-6746
7.5 (3.1)
Use-after-free in the DOM: Core & HTML component Mozilla
Firefox
2026-04-21T12:40:44.148Z 2026-04-22T15:08:34.207Z
CVE-2026-40520
8.6 (4.0)
7.2 (3.1)
FreePBX api module Command Injection via GraphQL FreePBX
api
2026-04-21T12:41:05.281Z 2026-04-21T13:32:06.116Z
CVE-2026-32147
5.3 (4.0)
SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT Erlang
OTP
2026-04-21T12:01:20.350Z 2026-04-22T04:13:25.005Z
CVE-2026-41039
8.7 (4.0)
Information Disclosure Vulnerability in Quantum Networ… Quantum Networks
Router QN-I-470
2026-04-21T10:28:24.521Z 2026-04-21T13:13:59.843Z
CVE-2026-41038
7.6 (4.0)
Weak Password Policy Vulnerability in Quantum Networks… Quantum Networks
Router QN-I-470
2026-04-21T10:22:09.254Z 2026-04-21T13:14:55.975Z
CVE-2026-6553
7.3 (4.0)
TYPO3 CMS Stores Cleartext Password in User Settings Module TYPO3
TYPO3 CMS
2026-04-21T10:04:02.525Z 2026-04-21T13:20:23.515Z
CVE-2026-41037
8.7 (4.0)
Missing Rate Limiting Vulnerability in Quantum Network… Quantum Networks
Router QN-I-470
2026-04-21T10:04:56.462Z 2026-04-21T13:19:09.396Z
CVE-2026-41036
8.7 (4.0)
Command Injection Vulnerability in Quantum Networks Ro… Quantum Networks
Router QN-I-470
2026-04-21T10:07:47.488Z 2026-04-21T13:17:54.592Z
CVE-2026-3317
5.1 (4.0)
Reflected Cross-Site Scripting in Navigate CMS application Navigate
Navigate CMS
2026-04-21T09:03:59.773Z 2026-04-21T13:22:03.438Z
CVE-2026-39467
7.2 (3.1)
WordPress Responsive Slider by MetaSlider plugin <= 3.… MetaSlider
Responsive Slider by MetaSlider
2026-04-21T09:35:29.246Z 2026-04-21T09:35:29.246Z
CVE-2025-13826
8.2 (4.0)
Incorrect input validation on the Zervit portable HTTP… Zervit
portable HTTP/Web server
2026-04-21T08:19:57.983Z 2026-04-21T13:23:30.712Z
ID Severity Description Published Updated
ghsa-wj32-w776-h6m2
8.8 (3.1)
7.4 (4.0)
A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGst… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-rgcc-vxwc-jxf9
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vuln… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-q6vj-q94p-g3rc
8.8 (3.1)
7.4 (4.0)
A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the functi… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-gqp3-hfc3-8q54
6.3 (3.1)
2.1 (4.0)
A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_acce… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-9r7w-j29g-xqx8
2.1 (4.0)
When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-9qc9-mh55-7xp5
6.3 (3.1)
2.1 (4.0)
A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput … 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-7gjf-f5f3-qqxw
3.5 (3.1)
2.0 (4.0)
A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-6c34-3mhj-jwxw
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the fu… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-5pv2-86qj-5jf9
6.3 (3.1)
2.1 (4.0)
Cockpit has NoSQL Injection Through Content Aggregation Pipelines 2026-04-20T12:32:01Z 2026-04-23T21:47:54Z
ghsa-42cc-jrr3-ghpw
4.3 (3.1)
2.1 (4.0)
A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b. Affect… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-38x4-r8qv-j5v2
7.3 (3.1)
5.5 (4.0)
A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-293r-hxw5-cfmj
2.4 (3.1)
4.8 (4.0)
A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an … 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-2836-hmqw-wf98
8.8 (3.1)
7.4 (4.0)
A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebEx… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-vqjc-m5xh-jhx3
In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free… 2026-04-20T12:32:00Z 2026-04-20T12:32:00Z
ghsa-q7h9-pvj5-g9fp
In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds acces… 2026-04-20T12:32:00Z 2026-04-20T12:32:00Z
ghsa-x858-8gr5-586m
5.1 (4.0)
Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain … 2026-04-20T12:31:59Z 2026-04-20T12:31:59Z
ghsa-vrr8-h7fq-ghr8
4.0 (3.1)
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-va… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-vr46-pfqh-wpf8
7.3 (3.1)
5.5 (4.0)
A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unkno… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-q2rh-xrfv-8x3m
9.8 (3.1)
9.3 (4.0)
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remo… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-p78m-rc6g-qfwc
6.3 (3.1)
2.1 (4.0)
A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the functio… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-jp7c-75vm-9jwh
3.5 (3.1)
2.0 (4.0)
A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewT… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-f5h4-jpqg-93m3
9.8 (3.1)
9.3 (4.0)
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remo… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-8v5m-jghx-mmxr
6.3 (3.1)
2.1 (4.0)
A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the fu… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-7gm3-fv82-7h98
6.3 (3.1)
2.1 (4.0)
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affect… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-5qr4-57wv-4r2w
7.3 (3.1)
5.5 (4.0)
A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue … 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-544v-v93w-x43g
8.1 (3.1)
7.2 (4.0)
ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authe… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-49hc-46g6-4c47
8.8 (3.1)
8.7 (4.0)
ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenti… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-337w-xf2q-h5w2
6.3 (3.1)
2.1 (4.0)
A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-32w9-6rwg-p96w
9.1 (3.1)
9.4 (4.0)
A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability a… 2026-04-20T09:30:45Z 2026-04-22T15:31:33Z
ghsa-3224-28wc-whrh
7.8 (3.1)
8.5 (4.0)
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ID Severity Description Package Published Updated
pysec-2022-269
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAut… oauthlib 2022-09-09T21:15:00Z 2022-09-15T06:38:55.424021Z
pysec-2022-270
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built f… indy-node 2022-09-09T19:15:00Z 2022-09-15T17:00:02.967935Z
pysec-2022-268
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffwe… rdiffweb 2022-09-08T19:15:00Z 2022-09-14T17:03:43.275428Z
pysec-2022-264
mangadex-downloader is a command-line tool to download manga from MangaDex. When using `f… mangadex-downloader 2022-09-07T22:15:00Z 2022-09-12T20:38:21.585718Z
pysec-2022-43179
7.3 (3.1)
Poetry is a dependency manager for Python. To handle dependencies that come from a Git re… poetry 2022-09-07T19:15:08+00:00 2025-04-09T17:27:27.255151+00:00
pysec-2022-266
Poetry is a dependency manager for Python. When handling dependencies that come from a Gi… poetry 2022-09-07T19:15:00Z 2022-09-13T18:50:19.361398Z
pysec-2022-260
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when u… mako 2022-09-07T13:15:00Z 2022-09-07T14:38:27.809318Z
pysec-2022-43149
6.5 (3.1)
Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentatio… pyassimp 2022-09-06T23:15:00Z 2024-11-21T14:22:59.412324Z
pysec-2022-265
Indy Node is the server portion of a distributed ledger purpose-built for decentralized i… indy-node 2022-09-06T17:15:00Z 2022-09-13T17:01:18.154930Z
pysec-2022-43064
8.8 (3.1)
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a que… pytigergraph 2022-09-05T16:15:00+00:00 2023-11-07T20:24:26.101389+00:00
pysec-2022-43070
7.5 (3.1)
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization… apache-iotdb 2022-09-05T10:15:00Z 2024-11-21T14:22:40.90699Z
pysec-2022-43069
8.8 (3.1)
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to v… apache-iotdb 2022-09-05T10:15:00Z 2024-11-25T22:25:52.941293Z
pysec-2022-262
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… matrix-synapse 2022-09-02T20:15:00Z 2022-09-09T06:19:32.373264Z
pysec-2022-263
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend … apache-airflow 2022-09-02T07:15:00Z 2022-09-09T14:35:42.886118Z
pysec-2022-261
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow c… apache-airflow 2022-09-02T07:15:00Z 2022-09-08T22:36:09.971521Z
pysec-2022-259
An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secr… python-jwt 2022-09-01T18:51:51Z 2022-09-05T01:24:44.773501Z
pysec-2022-43152
7.4 (3.1)
A flaw was found in the python-scciclient when making an HTTPS connection to a server whe… python-scciclient 2022-09-01T18:15:00Z 2024-11-25T18:35:18.357593Z
pysec-2022-258
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double q… oslo-utils 2022-08-29T15:15:00Z 2022-09-01T22:32:57.246318Z
pysec-2022-257
NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrus… nvflare 2022-08-29T03:15:00Z 2022-09-01T20:35:14.493490Z
pysec-2022-43134
9.8 (3.1)
The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor… exotel 2022-08-27T20:15:00Z 2024-11-25T22:09:33.909779Z
pysec-2022-252
The deep-translator project on PyPI was taken over via user account compromise via a phis… deep-translator 2022-08-26T17:55:00.000000Z 2022-08-26T17:55:00.000000Z
pysec-2022-251
The spam project on PyPI was taken over via user account compromise via a phishing attack… spam 2022-08-26T17:55:00.000000Z 2022-08-26T17:55:00.000000Z
pysec-2022-250
The exotel project on PyPI was taken over via user account compromise via a phishing atta… exotel 2022-08-26T17:55:00.000000Z 2022-08-26T17:55:00.000000Z
pysec-2022-256
The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from … deluge 2022-08-26T16:15:00Z 2022-08-31T20:34:06.230496Z
pysec-2022-255
There is a NULL pointer dereference vulnerability in VTK, and it lies in IO/Infovis/vtkXM… vtk 2022-08-25T18:15:00Z 2022-08-31T18:46:05.259402Z
pysec-2022-254
A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a reque… mod-wsgi 2022-08-25T18:15:00Z 2022-08-31T18:46:04.047573Z
pysec-2022-253
A flaw was found in ansible-runner. An improper escaping of the shell command, while call… ansible-runner 2022-08-24T16:15:00Z 2022-08-29T16:56:41.591821Z
pysec-2022-43068
6.3 (3.1)
A race condition flaw was found in ansible-runner, where an attacker could watch for rapi… ansible-runner 2022-08-23T16:15:00Z 2024-11-25T18:33:04.123836Z
pysec-2022-43067
6.6 (3.1)
A flaw was found in ansible-runner where the default temporary files configuration in ans… ansible-runner 2022-08-23T16:15:00Z 2024-11-25T18:33:04.123836Z
pysec-2022-43142
7.8 (3.1)
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. octoprint 2022-08-22T12:15:00+00:00 2024-11-21T14:22:57.145370+00:00
ID Description Updated
ID Description Published Updated
mal-2026-2355 Malicious code in ecto-spirit (npm) 2026-03-24T15:43:45Z 2026-04-07T14:41:21Z
mal-2026-2354 Malicious code in ecto-registry (npm) 2026-03-24T15:43:44Z 2026-04-07T14:41:21Z
mal-2026-2353 Malicious code in ecto-engine (npm) 2026-03-24T15:43:43Z 2026-04-07T14:41:21Z
mal-2026-2352 Malicious code in ecto-corsair-lwirz (npm) 2026-03-24T15:43:43Z 2026-04-07T14:41:21Z
mal-2026-2351 Malicious code in dotenv-xtend (npm) 2026-03-24T15:43:16Z 2026-04-07T14:41:21Z
mal-2026-2350 Malicious code in dotenv-express (npm) 2026-03-24T15:43:15Z 2026-04-07T14:41:21Z
mal-2026-2349 Malicious code in deriv_ppetest (npm) 2026-03-24T15:42:44Z 2026-04-07T14:41:21Z
mal-2026-2348 Malicious code in cursed-module (npm) 2026-03-24T15:41:56Z 2026-04-07T14:41:21Z
mal-2026-2347 Malicious code in ctf-package-onetimeuseforctf (npm) 2026-03-24T15:41:46Z 2026-04-07T14:41:21Z
mal-2026-2346 Malicious code in corsair-module (npm) 2026-03-24T15:41:15Z 2026-04-07T14:41:21Z
mal-2026-2345 Malicious code in codecoverage-tools (npm) 2026-03-24T15:40:45Z 2026-04-07T14:41:21Z
mal-2026-2344 Malicious code in codeanalysis-common (npm) 2026-03-24T15:40:44Z 2026-04-07T14:41:21Z
mal-2026-2343 Malicious code in chain-multer (npm) 2026-03-24T15:40:17Z 2026-04-07T14:41:20Z
mal-2026-2342 Malicious code in chai-set (npm) 2026-03-24T15:40:16Z 2026-04-07T14:41:20Z
mal-2026-2341 Malicious code in chai-chain-cognivault (npm) 2026-03-24T15:40:13Z 2026-04-07T14:41:20Z
mal-2026-2340 Malicious code in chai-chain-argon (npm) 2026-03-24T15:40:12Z 2026-04-07T14:41:20Z
mal-2026-2339 Malicious code in chai-as-chains (npm) 2026-03-24T15:39:59Z 2026-04-07T14:41:20Z
mal-2026-2338 Malicious code in chai-as-attached (npm) 2026-03-24T15:39:58Z 2026-04-07T14:41:20Z
mal-2026-2337 Malicious code in chai-as-aligned (npm) 2026-03-24T15:39:57Z 2026-04-07T14:41:20Z
mal-2026-2336 Malicious code in cdnjavacss (npm) 2026-03-24T15:39:45Z 2026-04-07T14:41:20Z
mal-2026-2335 Malicious code in azurestack-common (npm) 2026-03-24T15:38:26Z 2026-04-07T14:41:20Z
mal-2026-2334 Malicious code in argon-node (npm) 2026-03-24T15:37:43Z 2026-04-07T14:41:20Z
mal-2026-2333 Malicious code in @pansycareful/github-helper (npm) 2026-03-24T15:30:17Z 2026-04-07T14:41:20Z
mal-2026-2332 Malicious code in @hsbc-mfe/host (npm) 2026-03-24T15:28:47Z 2026-04-07T14:41:19Z
mal-2026-2331 Malicious code in @girirajravichandran/corp-build-utils-poc (npm) 2026-03-24T15:28:29Z 2026-04-16T15:42:07Z
mal-2026-2330 Malicious code in @fyxer-ai/shared (npm) 2026-03-24T15:28:28Z 2026-04-07T14:41:19Z
mal-2026-2329 Malicious code in @abi-labs-frontend/standards (npm) 2026-03-24T15:23:58Z 2026-04-07T14:41:19Z
mal-2026-2402 Malicious code in plugin-gem-example (RubyGems) 2026-03-24T15:23:48Z 2026-03-24T15:23:48Z
mal-2026-2401 Malicious code in rocketpill (PyPI) 2026-03-24T15:22:46Z 2026-03-24T15:22:46Z
mal-2026-2399 Malicious code in flycalc (PyPI) 2026-03-24T15:22:05Z 2026-03-24T15:22:05Z
ID Description Published Updated
wid-sec-w-2025-2499 IBM WebSphere Application Server: Schwachstelle ermöglicht Manipulation von Dateien und potenziell Umgehen von Sicherheitsvorkehrungen 2025-11-05T23:00:00.000+00:00 2026-01-01T23:00:00.000+00:00
wid-sec-w-2025-2498 Cisco Identity Services Engine (ISE): Mehrere Schwachstellen 2025-11-05T23:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2497 libarchive: Schwachstelle ermöglicht Denial of Service 2025-11-05T23:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2496 Samsung Android: Mehrere Schwachstellen 2025-11-05T23:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2495 Django: Mehrere Schwachstellen ermöglichen Denial of Service und SQL-Injection 2025-11-05T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2025-2494 HCL BigFix: Schwachstelle ermöglicht Offenlegung von Informationen 2025-11-05T23:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2493 ownCloud Guests: Schwachstelle ermöglicht Offenlegung von Informationen 2025-11-05T23:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2492 Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Denial of Service 2025-11-05T23:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2491 Google Chrome/Microsoft Edge: Mehrere Schwachstellen 2025-11-05T23:00:00.000+00:00 2025-11-24T23:00:00.000+00:00
wid-sec-w-2025-2489 cURL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-11-04T23:00:00.000+00:00 2026-01-27T23:00:00.000+00:00
wid-sec-w-2025-2488 Red Hat Enterprise Linux (SSSD, libsoup): Mehrere Schwachstellen 2025-11-04T23:00:00.000+00:00 2026-03-03T23:00:00.000+00:00
wid-sec-w-2025-2487 ILIAS: Mehrere Schwachstellen 2025-11-04T23:00:00.000+00:00 2025-11-04T23:00:00.000+00:00
wid-sec-w-2025-2486 Red Hat Satellite: Schwachstelle ermöglicht Codeausführung 2025-11-04T23:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2485 cURL (wcurl): Schwachstelle ermöglicht Manipulation von Dateien 2025-11-03T23:00:00.000+00:00 2026-03-03T23:00:00.000+00:00
wid-sec-w-2025-2484 Proofpoint Insider Threat Management: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-11-03T23:00:00.000+00:00 2025-11-03T23:00:00.000+00:00
wid-sec-w-2025-2483 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2025-11-03T23:00:00.000+00:00 2026-03-05T23:00:00.000+00:00
wid-sec-w-2025-2482 Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-03T23:00:00.000+00:00 2025-12-08T23:00:00.000+00:00
wid-sec-w-2025-2481 Apple Xcode: Mehrere Schwachstellen 2025-11-03T23:00:00.000+00:00 2025-11-04T23:00:00.000+00:00
wid-sec-w-2025-2480 Apple Safari: Mehrere Schwachstellen 2025-11-03T23:00:00.000+00:00 2025-11-13T23:00:00.000+00:00
wid-sec-w-2025-2479 IBM InfoSphere Information Server: Mehrere Schwachstellen 2025-11-03T23:00:00.000+00:00 2025-11-03T23:00:00.000+00:00
wid-sec-w-2025-2478 IGEL OS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-11-03T23:00:00.000+00:00 2025-11-03T23:00:00.000+00:00
wid-sec-w-2025-2477 lighttpd: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-11-03T23:00:00.000+00:00 2025-11-03T23:00:00.000+00:00
wid-sec-w-2025-2476 Absolute Secure Access: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-03T23:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2475 Apple macOS: Mehrere Schwachstellen 2025-11-03T23:00:00.000+00:00 2026-02-02T23:00:00.000+00:00
wid-sec-w-2025-2474 Android Patchday November 2025: Multiple Vulnerabilities 2025-11-03T23:00:00.000+00:00 2025-11-17T23:00:00.000+00:00
wid-sec-w-2025-2473 Apple iOS: Mehrere Schwachstellen 2025-11-03T23:00:00.000+00:00 2026-02-02T23:00:00.000+00:00
wid-sec-w-2025-2472 Samsung Android: Mehrere Schwachstellen 2025-11-03T23:00:00.000+00:00 2025-12-08T23:00:00.000+00:00
wid-sec-w-2025-2470 Liferay Portal und DXP: Mehrere Schwachstellen 2025-11-02T23:00:00.000+00:00 2025-11-02T23:00:00.000+00:00
wid-sec-w-2025-2469 Redis: Schwachstelle ermöglicht Codeausführung 2025-11-02T23:00:00.000+00:00 2025-11-27T23:00:00.000+00:00
wid-sec-w-2025-2468 CPython: Schwachstelle ermöglicht Denial of Service 2025-11-02T23:00:00.000+00:00 2026-03-26T23:00:00.000+00:00
ID Description Published Updated
icsa-24-226-07 Rockwell Automation Micro850/870 2024-08-13T06:00:00.000000Z 2024-08-13T06:00:00.000000Z
icsa-24-226-06 Rockwell Automation FactoryTalk View Site Edition (Update A) 2024-08-13T06:00:00.000000Z 2024-08-29T06:00:00.000000Z
icsa-24-226-05 Rockwell Automation DataMosaix Private Cloud 2024-08-13T06:00:00.000000Z 2024-08-13T06:00:00.000000Z
icsa-24-226-04 Rockwell Automation Pavilion8 2024-08-13T06:00:00.000000Z 2024-08-13T06:00:00.000000Z
icsa-24-226-03 Rockwell Automation GuardLogix/ControlLogix 5580 Controller 2024-08-13T06:00:00.000000Z 2024-08-13T06:00:00.000000Z
icsa-24-226-02 Rockwell Automation AADvance Standalone OPC-DA Server 2024-08-13T06:00:00.000000Z 2024-08-13T06:00:00.000000Z
icsa-24-226-01 AVEVA SuiteLink Server 2024-08-13T06:00:00.000000Z 2024-08-13T06:00:00.000000Z
icsa-24-354-06 Schneider Electric Accutech Manager 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-228-09 Siemens NX 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-228-08 Siemens COMOS 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-228-07 Siemens Location Intelligence 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-228-06 Siemens SINEC NMS 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-228-05 Siemens LOGO! V8.3 BM Devices 2024-08-13T00:00:00.000000Z 2024-10-08T00:00:00.000000Z
icsa-24-228-04 Siemens SINEC Traffic Analyzer 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-228-03 Siemens Teamcenter Visualization and JT2Go 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-228-02 Siemens INTRALOG WMS 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-228-01 Siemens SCALANCE M-800, RUGGEDCOM RM1224 2024-08-13T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-221-01 Dorsett Controls InfoScan 2024-08-08T06:00:00.000000Z 2024-08-08T06:00:00.000000Z
icsa-24-219-01 Delta Electronics DIAScreen 2024-08-06T06:00:00.000000Z 2024-08-06T06:00:00.000000Z
icsa-24-214-09 Rockwell Automation Logix Controllers 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-214-08 Vonets WiFi Bridges 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-214-07 AVTECH IP camera 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-214-06 Johnson Controls exacqVision Web Service 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-214-05 Johnson Controls exacqVision Server 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-214-04 Johnson Controls exacqVision Web Service 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-214-03 Johnson Controls exacqVision Web Service 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-214-02 Johnson Controls exacqVision Server web service 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-214-01 Johnson Controls exacqVision client and exacqVision server 2024-08-01T06:00:00.000000Z 2024-08-01T06:00:00.000000Z
icsa-24-207-02 Positron Broadcast Signal Processor 2024-07-25T06:00:00.000000Z 2024-07-25T06:00:00.000000Z
icsa-24-205-03 National Instruments LabVIEW 2024-07-23T06:00:00.000000Z 2024-07-23T06:00:00.000000Z
ID Description Published Updated
cisco-sa-c9800-fnf-dos-bol5vlge Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-c9800-capwap-mdns-6psn7gku Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-bgpevpn-zwtrtpbb Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-19T14:12:27+00:00
cisco-sa-appnav-xe-dos-j5mxtr4 Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-ap-ip-flood-dos-6hxxenvq Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-wsa-stored-xss-xpsjghmy Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-webex-java-mvx6crh9 Cisco Webex Meetings Java Deserialization Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-voip-phone-csrf-k56vxvvx Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability 2022-04-06T16:00:00+00:00 2022-10-28T14:20:37+00:00
cisco-sa-swa-filter-bypass-xxxtu3x Cisco Web Security Appliance Filter Bypass Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-sna-xss-mca9tqnj Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-info-exp-yxawyp3s Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-esa-snmp-jlajkswk Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-java-spring-scf-rce-dqrhhjxh Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022 2022-04-01T23:45:00+00:00 2022-04-15T15:31:28+00:00
cisco-sa-java-spring-rce-zx9guc67 Vulnerability in Spring Framework Affecting Cisco Products: March 2022 2022-04-01T23:45:00+00:00 2023-02-09T15:14:14+00:00
cisco-sa-uccsmi-prvesc-bqhge4cm Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability 2022-03-02T16:00:00+00:00 2022-03-02T16:00:00+00:00
cisco-sa-staros-cmdinj-759mnt4n Cisco StarOS Command Injection Vulnerability 2022-03-02T16:00:00+00:00 2022-03-02T16:00:00+00:00
cisco-sa-ise-dos-jlh9txbp Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability 2022-03-02T16:00:00+00:00 2022-03-03T18:35:40+00:00
cisco-sa-expressway-filewrite-87q5yrk Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities 2022-03-02T16:00:00+00:00 2022-03-02T16:00:00+00:00
cisco-sa-nxos-nxapi-cmdinject-uluknmz2 Cisco NX-OS Software NX-API Command Injection Vulnerability 2022-02-23T16:00:00+00:00 2022-02-23T16:00:00+00:00
cisco-sa-nxos-bfd-dos-wgqxrzxn Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability 2022-02-23T16:00:00+00:00 2022-03-23T15:41:48+00:00
cisco-sa-cfsoip-dos-tpykydr Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability 2022-02-23T16:00:00+00:00 2022-02-23T16:00:00+00:00
cisco-sa-cdp-dos-g8dplwyg Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability 2022-02-23T16:00:00+00:00 2022-03-01T17:35:44+00:00
cisco-sa-rcm-tcp-dos-2wh8xjaq Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability 2022-02-16T16:00:00+00:00 2022-02-16T16:00:00+00:00
cisco-sa-pi-epnm-xss-p8fbz2fw Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerability 2022-02-16T16:00:00+00:00 2022-02-16T16:00:00+00:00
cisco-sa-esa-dos-mxzvgtgu Cisco Email Security Appliance DNS Verification Denial of Service Vulnerability 2022-02-16T16:00:00+00:00 2022-02-25T19:22:29+00:00
cisco-sa-swg-fbyps-3z4qt7p Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability 2022-02-02T16:00:00+00:00 2022-02-02T16:00:00+00:00
cisco-sa-smb-mult-vuln-ka9pk6d Cisco Small Business RV Series Routers Vulnerabilities 2022-02-02T16:00:00+00:00 2022-02-14T13:54:42+00:00
cisco-sa-dnac-info-disc-8qeynkej Cisco DNA Center Information Disclosure Vulnerability 2022-02-02T16:00:00+00:00 2022-02-04T20:22:37+00:00
cisco-sa-cpsc-info-disc-zkjbdj9f Cisco Prime Service Catalog Information Disclosure Vulnerability 2022-02-02T16:00:00+00:00 2022-02-02T16:00:00+00:00
cisco-sa-webex-xss-fmbpu2pe Cisco Webex Meetings Cross-Site Scripting Vulnerability 2022-01-19T16:00:00+00:00 2022-01-19T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-21244 Windows Hyper-V Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21243 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21239 Windows Kernel Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21232 Windows HTTP.sys Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21231 Windows Kernel Elevation of Privilege Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21229 Power BI Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21228 Azure Local Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21222 Windows Kernel Information Disclosure Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21218 .NET Spoofing Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-20846 GDI+ Denial of Service Vulnerability 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-20841 Windows Notepad App Remote Code Execution Vulnerability 2026-02-10T08:00:00.000Z 2026-03-12T07:00:00.000Z
msrc_cve-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability 2026-02-10T08:00:00.000Z 2026-02-05T08:00:00.000Z
msrc_cve-2026-0102 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability 2026-02-10T08:00:00.000Z 2026-02-17T08:00:00.000Z
msrc_cve-2023-2804 Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
msrc_cve-2026-21517 Windows App for Mac Installer Elevation of Privilege Vulnerability 2026-02-10T00:00:00.000Z 2026-02-13T08:00:00.000Z
msrc_cve-2026-28422 Vim has stack-buffer-overflow in build_stl_str_hl() 2026-02-02T00:00:00.000Z 2026-03-10T01:37:19.000Z
msrc_cve-2026-28421 Vim has a heap-buffer-overflow and a segmentation fault 2026-02-02T00:00:00.000Z 2026-03-10T01:37:08.000Z
msrc_cve-2026-28420 Vim has Heap-based Buffer Overflow and OOB Read in :terminal 2026-02-02T00:00:00.000Z 2026-03-10T01:36:59.000Z
msrc_cve-2026-28419 Vim has Heap-based Buffer Underflow in Emacs tags parsing 2026-02-02T00:00:00.000Z 2026-03-10T01:36:50.000Z
msrc_cve-2026-28418 Vim has Heap-based Buffer Overflow in Emacs tags parsing 2026-02-02T00:00:00.000Z 2026-03-10T01:36:41.000Z
msrc_cve-2026-28417 Vim has OS Command Injection in netrw 2026-02-02T00:00:00.000Z 2026-03-10T01:36:31.000Z
msrc_cve-2026-28364 In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock() function, which performs unbounded memcpy() operations using attacker-controlled lengths from crafted Marshal data. 2026-02-02T00:00:00.000Z 2026-03-11T14:35:49.000Z
ID Description Published Updated
opensuse-su-2025:15767-1 openbao-2.4.4-1.1 on GA media 2025-11-25T00:00:00Z 2025-11-25T00:00:00Z
opensuse-su-2025:15766-1 libsoup-3_0-0-3.6.5-9.1 on GA media 2025-11-25T00:00:00Z 2025-11-25T00:00:00Z
opensuse-su-2025:15765-1 gnutls-3.8.11-1.1 on GA media 2025-11-25T00:00:00Z 2025-11-25T00:00:00Z
opensuse-su-2025:15764-1 etcd-for-k8s1.32-3.5.24-1.1 on GA media 2025-11-25T00:00:00Z 2025-11-25T00:00:00Z
opensuse-su-2025:15763-1 cloudflared-2025.11.1-1.1 on GA media 2025-11-25T00:00:00Z 2025-11-25T00:00:00Z
opensuse-su-2025:15762-1 librnp0-0.18.1-1.1 on GA media 2025-11-24T00:00:00Z 2025-11-24T00:00:00Z
opensuse-su-2025:15761-1 rclone-1.72.0-1.1 on GA media 2025-11-24T00:00:00Z 2025-11-24T00:00:00Z
opensuse-su-2025:15760-1 python311-3.11.14-2.1 on GA media 2025-11-24T00:00:00Z 2025-11-24T00:00:00Z
opensuse-su-2025:15759-1 libIex-3_4-33-3.4.3-2.1 on GA media 2025-11-24T00:00:00Z 2025-11-24T00:00:00Z
opensuse-su-2025:15758-1 fontforge-20251009-2.1 on GA media 2025-11-24T00:00:00Z 2025-11-24T00:00:00Z
opensuse-su-2025:15757-1 curl-8.17.0-1.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:15756-1 blender-5.0-5.0.0-1.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:15755-1 blender-4.5-4.5.4-1.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:15754-1 ansible-core-2.19-2.19.4-1.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:15753-1 ansible-12-12.2.0-1.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:15752-1 act-0.2.82-2.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:20073-1 Security update for alloy 2025-11-20T17:26:16Z 2025-11-20T17:26:16Z
opensuse-su-2025:20072-1 Security update for runc 2025-11-20T16:44:20Z 2025-11-20T16:44:20Z
opensuse-su-2025:20068-1 Security update for poppler 2025-11-20T13:33:03Z 2025-11-20T13:33:03Z
opensuse-su-2025:20076-1 Security update for chromium 2025-11-20T10:12:51Z 2025-11-20T10:12:51Z
opensuse-su-2025:15751-1 libipa_hbac-devel-2.11.1-2.1 on GA media 2025-11-20T00:00:00Z 2025-11-20T00:00:00Z
opensuse-su-2025:15750-1 python313-3.13.9-2.1 on GA media 2025-11-20T00:00:00Z 2025-11-20T00:00:00Z
opensuse-su-2025:15749-1 grub2-2.12-67.1 on GA media 2025-11-20T00:00:00Z 2025-11-20T00:00:00Z
opensuse-su-2025:20065-1 Security update for MozillaFirefox 2025-11-19T16:45:48Z 2025-11-19T16:45:48Z
opensuse-su-2025:20059-1 Security update for ongres-scram 2025-11-19T10:33:44Z 2025-11-19T10:33:44Z
opensuse-su-2025:20056-1 Security update for openexr 2025-11-19T09:45:59Z 2025-11-19T09:45:59Z
opensuse-su-2025:20050-1 Security update for libxslt 2025-11-19T09:40:24Z 2025-11-19T09:40:24Z
opensuse-su-2025:20049-1 Security update for tiff 2025-11-19T09:40:24Z 2025-11-19T09:40:24Z
opensuse-su-2025:20055-1 Security update for expat 2025-11-19T09:37:50Z 2025-11-19T09:37:50Z
opensuse-su-2025:20074-1 Security update for certbot 2025-11-19T09:30:46Z 2025-11-19T09:30:46Z
ID Description Published Updated
rhsa-2026:3088 Red Hat Security Advisory: kernel security update 2026-02-23T15:20:37+00:00 2026-04-12T16:51:46+00:00
rhsa-2026:3089 Red Hat Security Advisory: Red Hat Developer Hub 1.8.4 release. 2026-02-23T14:46:08+00:00 2026-04-14T07:58:25+00:00
rhsa-2026:3087 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-02-23T13:35:49+00:00 2026-04-14T09:46:22+00:00
rhsa-2026:3083 Red Hat Security Advisory: kernel security update 2026-02-23T13:25:32+00:00 2026-04-13T08:34:25+00:00
rhsa-2026:3077 Red Hat Security Advisory: qemu-kvm security update 2026-02-23T11:47:18+00:00 2026-03-24T13:02:44+00:00
rhsa-2026:3078 Red Hat Security Advisory: grafana security update 2026-02-23T11:43:01+00:00 2026-03-24T14:16:21+00:00
rhsa-2026:3067 Red Hat Security Advisory: freerdp security update 2026-02-23T10:55:26+00:00 2026-03-18T03:18:50+00:00
rhsa-2026:3066 Red Hat Security Advisory: kernel security update 2026-02-23T10:50:56+00:00 2026-04-13T08:35:47+00:00
rhsa-2026:3068 Red Hat Security Advisory: freerdp security update 2026-02-23T10:17:46+00:00 2026-03-18T03:18:50+00:00
rhsa-2026:3059 Red Hat Security Advisory: protobuf security update 2026-02-23T08:32:48+00:00 2026-04-13T19:35:37+00:00
rhsa-2026:3058 Red Hat Security Advisory: ImageMagick security update 2026-02-23T06:48:41+00:00 2026-03-18T03:18:04+00:00
rhsa-2026:3053 Red Hat Security Advisory: butane security update 2026-02-23T06:47:46+00:00 2026-04-14T09:46:26+00:00
rhsa-2026:3034 Red Hat Security Advisory: munge security update 2026-02-23T02:17:05+00:00 2026-03-18T03:18:48+00:00
rhsa-2026:3040 Red Hat Security Advisory: grafana-pcp security update 2026-02-23T02:14:35+00:00 2026-04-14T09:46:21+00:00
rhsa-2026:3042 Red Hat Security Advisory: openssl security update 2026-02-23T02:11:15+00:00 2026-04-09T23:05:04+00:00
rhsa-2026:3037 Red Hat Security Advisory: freerdp security update 2026-02-23T01:59:00+00:00 2026-03-18T03:18:47+00:00
rhsa-2026:3032 Red Hat Security Advisory: munge security update 2026-02-23T01:53:05+00:00 2026-03-18T03:18:52+00:00
rhsa-2026:3031 Red Hat Security Advisory: libpng15 security update 2026-02-23T01:47:30+00:00 2026-04-09T14:35:49+00:00
rhsa-2026:3041 Red Hat Security Advisory: freerdp security update 2026-02-23T01:46:55+00:00 2026-03-18T03:18:36+00:00
rhsa-2026:3036 Red Hat Security Advisory: freerdp security update 2026-02-23T01:45:20+00:00 2026-03-18T03:18:48+00:00
rhsa-2026:2746 Red Hat Security Advisory: Red Hat build of MicroShift 4.17.49 security update 2026-02-23T01:36:40+00:00 2026-04-10T21:19:30+00:00
rhsa-2026:3039 Red Hat Security Advisory: freerdp security update 2026-02-23T01:35:55+00:00 2026-03-18T03:18:43+00:00
rhsa-2026:3038 Red Hat Security Advisory: freerdp security update 2026-02-23T01:35:10+00:00 2026-03-18T03:18:47+00:00
rhsa-2026:3033 Red Hat Security Advisory: munge security update 2026-02-23T01:32:20+00:00 2026-03-18T03:18:48+00:00
rhsa-2026:3035 Red Hat Security Advisory: grafana-pcp security update 2026-02-23T01:30:21+00:00 2026-04-14T09:46:21+00:00
rhsa-2026:3010 Red Hat Security Advisory: munge security update 2026-02-19T16:47:00+00:00 2026-03-18T03:18:44+00:00
rhsa-2026:3013 Red Hat Security Advisory: munge security update 2026-02-19T16:24:11+00:00 2026-03-18T03:18:40+00:00
rhsa-2026:3012 Red Hat Security Advisory: munge security update 2026-02-19T16:22:01+00:00 2026-03-18T03:18:40+00:00
rhsa-2026:3011 Red Hat Security Advisory: munge security update 2026-02-19T15:48:55+00:00 2026-03-18T03:18:39+00:00
rhsa-2026:2670 Red Hat Security Advisory: OpenShift Container Platform 4.17.49 packages and security update 2026-02-18T21:28:12+00:00 2026-04-10T21:19:25+00:00
ID Description Published Updated
suse-su-2026:0813-1 Security update for mozilla-nss 2026-03-05T08:34:14Z 2026-03-05T08:34:14Z
suse-su-2026:0812-1 Security update for MozillaFirefox 2026-03-05T08:31:43Z 2026-03-05T08:31:43Z
suse-su-2026:0811-1 Security update for libsoup2 2026-03-05T03:05:23Z 2026-03-05T03:05:23Z
suse-su-2026:20648-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) 2026-03-04T20:07:36Z 2026-03-04T20:07:36Z
suse-su-2026:20637-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) 2026-03-04T20:07:36Z 2026-03-04T20:07:36Z
suse-su-2026:0810-1 Security update for wireshark 2026-03-04T19:33:44Z 2026-03-04T19:33:44Z
suse-su-2026:0806-1 Security update for wicked2nm,suse-migration-services,suse-migration-sle16-activation,SLES16-Migration,SLES16-SAP_Migration 2026-03-04T15:46:27Z 2026-03-04T15:46:27Z
suse-su-2026:20653-1 Security update for cockpit 2026-03-04T15:44:19Z 2026-03-04T15:44:19Z
suse-ru-2026:20677-1 Recommended update for open-vm-tools 2026-03-04T15:30:53Z 2026-03-04T15:30:53Z
suse-su-2026:0805-1 Security update for python-pip 2026-03-04T12:58:41Z 2026-03-04T12:58:41Z
suse-su-2026:0803-1 Security update for util-linux 2026-03-04T12:57:40Z 2026-03-04T12:57:40Z
suse-su-2026:0802-1 Security update for python 2026-03-04T12:34:53Z 2026-03-04T12:34:53Z
suse-su-2026:0801-1 Security update for libxslt 2026-03-04T12:33:35Z 2026-03-04T12:33:35Z
suse-su-2026:0800-1 Security update for ocaml 2026-03-04T12:33:10Z 2026-03-04T12:33:10Z
suse-su-2026:20647-1 Security update for libxml2, libxslt 2026-03-04T10:51:03Z 2026-03-04T10:51:03Z
suse-su-2026:20631-1 Security update for libxml2, libxslt 2026-03-04T10:51:03Z 2026-03-04T10:51:03Z
suse-su-2026:20646-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) 2026-03-04T10:44:08Z 2026-03-04T10:44:08Z
suse-su-2026:20636-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) 2026-03-04T10:44:08Z 2026-03-04T10:44:08Z
suse-su-2026:20645-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T10:13:56Z 2026-03-04T10:13:56Z
suse-su-2026:20644-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T09:41:19Z 2026-03-04T09:41:19Z
suse-su-2026:20635-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T09:41:19Z 2026-03-04T09:41:19Z
suse-su-2026:20652-1 Security update for ca-certificates-mozilla 2026-03-04T09:36:46Z 2026-03-04T09:36:46Z
suse-su-2026:0796-1 Security update for libsoup 2026-03-04T09:33:40Z 2026-03-04T09:33:40Z
suse-su-2026:20643-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) 2026-03-04T09:20:51Z 2026-03-04T09:20:51Z
suse-su-2026:20634-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) 2026-03-04T09:20:51Z 2026-03-04T09:20:51Z
suse-su-2026:20696-1 Security update for ca-certificates-mozilla 2026-03-04T08:37:59Z 2026-03-04T08:37:59Z
suse-su-2026:20651-1 Security update for docker 2026-03-04T06:50:07Z 2026-03-04T06:50:07Z
suse-su-2026:20695-1 Security update for cockpit-machines 2026-03-04T06:24:37Z 2026-03-04T06:24:37Z
suse-su-2026:20694-1 Security update for docker 2026-03-04T06:24:37Z 2026-03-04T06:24:37Z
suse-su-2026:0792-1 Security update for libsoup 2026-03-04T01:04:14Z 2026-03-04T01:04:14Z
ID Description Published Updated
alsa-2025:11534 Important: git security update 2025-07-22T00:00:00Z 2025-07-23T08:07:31Z
alsa-2025:11533 Important: git security update 2025-07-22T00:00:00Z 2025-07-24T09:25:29Z
alsa-2025:11463 Moderate: fence-agents security update 2025-07-21T00:00:00Z 2025-07-22T13:35:00Z
alsa-2025:11462 Important: git security update 2025-07-21T00:00:00Z 2025-07-22T10:34:40Z
alsa-2025:11456 Moderate: kernel-rt security update 2025-07-21T00:00:00Z 2025-07-23T07:31:24Z
alsa-2025:11455 Moderate: kernel security update 2025-07-21T00:00:00Z 2025-08-04T11:36:19Z
alsa-2025:11428 Important: kernel security update 2025-07-21T00:00:00Z 2025-07-30T08:22:07Z
alsa-2025:11411 Important: kernel security update 2025-07-21T00:00:00Z 2025-07-23T07:42:35Z
alsa-2025:11401 Important: valkey security update 2025-07-21T00:00:00Z 2025-07-28T15:46:39Z
alsa-2025:10862 Important: java-1.8.0-openjdk security update 2025-07-17T00:00:00Z 2025-07-21T09:43:41Z
alsa-2025:11335 Important: tomcat security update 2025-07-16T00:00:00Z 2025-07-17T08:49:49Z
alsa-2025:11333 Important: tomcat security update 2025-07-16T00:00:00Z 2025-07-17T08:17:04Z
alsa-2025:11332 Important: tomcat9 security update 2025-07-16T00:00:00Z 2025-07-21T10:03:39Z
alsa-2025:11327 Moderate: glib2 security update 2025-07-16T00:00:00Z 2025-07-17T08:13:56Z
alsa-2025:11324 Important: cloud-init security update 2025-07-16T00:00:00Z 2025-07-17T08:11:16Z
alsa-2025:11299 Moderate: kernel-rt security update 2025-07-16T00:00:00Z 2025-07-16T12:42:40Z
alsa-2025:11298 Moderate: kernel security update 2025-07-16T00:00:00Z 2025-07-16T12:39:32Z
alsa-2025:10873 Important: java-21-openjdk security update 2025-07-16T00:00:00Z 2025-07-30T13:13:20Z
alsa-2025:11140 Moderate: glib2 security update 2025-07-15T00:00:00Z 2025-07-16T12:44:37Z
alsa-2025:11066 Moderate: glibc security update 2025-07-15T00:00:00Z 2025-07-18T06:49:51Z
alsa-2025:11047 Moderate: pcs security update 2025-07-15T00:00:00Z 2026-04-09T15:41:47Z
alsa-2025:11044 Moderate: python3.12-setuptools security update 2025-07-15T00:00:00Z 2025-07-16T08:04:17Z
alsa-2025:11043 Moderate: python3.11-setuptools security update 2025-07-15T00:00:00Z 2025-07-16T08:02:22Z
alsa-2025:11042 Moderate: socat security update 2025-07-15T00:00:00Z 2025-07-16T08:00:21Z
alsa-2025:11036 Moderate: python-setuptools security update 2025-07-15T00:00:00Z 2025-08-04T11:32:31Z
alsa-2025:11035 Moderate: lz4 security update 2025-07-15T00:00:00Z 2025-08-02T13:24:46Z
alsa-2025:11030 Moderate: emacs security update 2025-07-15T00:00:00Z 2025-07-16T07:58:14Z
alsa-2025:10867 Important: java-17-openjdk security update 2025-07-15T00:00:00Z 2025-07-16T12:49:47Z
alsa-2025:10991 Moderate: microcode_ctl security update 2025-07-14T00:00:00Z 2025-07-16T07:55:26Z
alsa-2025:10854 Important: kernel security update 2025-07-14T00:00:00Z 2025-07-24T10:26:09Z
ID Description Published Updated
osv-2023-899 Heap-buffer-overflow in cosm_create_key 2023-09-23T14:00:56.859961Z 2023-09-23T14:00:56.860254Z
osv-2023-896 UNKNOWN READ in deliver_chunked_chunks 2023-09-23T14:00:44.781770Z 2023-09-23T14:00:44.782064Z
osv-2023-894 Heap-double-free in dwg_free_object 2023-09-22T14:01:18.317891Z 2023-09-22T14:01:18.318214Z
osv-2023-890 Heap-use-after-free in dwarf_dealloc 2023-09-21T14:01:03.576514Z 2023-09-21T14:01:03.576815Z
osv-2023-889 Heap-double-free in regcomp 2023-09-21T14:00:59.739088Z 2023-09-21T14:00:59.739382Z
osv-2023-885 UNKNOWN READ in bytes1_char_at 2023-09-20T14:02:30.557328Z 2023-09-20T14:02:30.557630Z
osv-2023-883 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray 2023-09-20T14:01:10.331831Z 2023-09-20T14:01:10.332151Z
osv-2023-881 Heap-buffer-overflow in read_tmpl 2023-09-19T14:01:22.611246Z 2023-09-19T14:01:22.611560Z
osv-2023-877 Heap-buffer-overflow in btf_ensure_modifiable 2023-09-18T14:02:44.989260Z 2026-04-10T14:13:13.162417Z
osv-2023-874 Memcpy-param-overlap in bit_u_expand 2023-09-18T14:01:11.020858Z 2023-09-18T14:01:11.021190Z
osv-2023-873 UNKNOWN WRITE in icu_74::Calendar::set 2023-09-18T14:00:31.769072Z 2023-09-18T14:00:31.769380Z
osv-2023-872 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal 2023-09-18T14:00:10.451327Z 2023-09-18T14:00:10.451623Z
osv-2023-870 Heap-buffer-overflow in icu_74::SimpleDateFormat::subFormat 2023-09-17T14:01:25.114159Z 2023-09-17T14:01:25.114447Z
osv-2023-869 Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser 2023-09-17T14:01:25.028324Z 2026-01-25T14:13:45.937535Z
osv-2023-867 Negative-size-param in http_cb 2023-09-16T14:02:46.648990Z 2023-09-16T14:02:46.649266Z
osv-2023-865 UNKNOWN in WasmEdge::Loader::SharedLibrary::load 2023-09-16T14:02:40.468661Z 2023-09-16T14:02:40.468956Z
osv-2023-862 Heap-use-after-free in g_datalist_get_flags 2023-09-16T14:01:07.280790Z 2025-01-10T05:49:31.753574Z
osv-2023-857 Segv on unknown address in FunctionCompiler::compileReturn 2023-09-15T14:02:42.221599Z 2023-09-15T14:02:42.222010Z
osv-2023-855 Heap-double-free in dwg_free_common_entity_data 2023-09-15T14:01:06.818081Z 2024-04-27T14:22:00.114824Z
osv-2023-850 Heap-buffer-overflow in bit_TV_to_utf8 2023-09-15T14:00:33.303768Z 2023-09-15T14:00:33.304088Z
osv-2023-849 Stack-buffer-overflow in ulocimp_toLanguageTag_74 2023-09-15T14:00:28.699483Z 2023-09-15T14:00:28.699782Z
osv-2023-844 Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame 2023-09-14T14:00:27.712533Z 2023-09-14T14:00:27.712843Z
osv-2023-840 Null-dereference READ in isvcd_parse_inter_slice_data_cavlc_enh_lyr 2023-09-13T14:01:19.214532Z 2023-09-13T14:01:19.214860Z
osv-2023-839 Global-buffer-overflow in iusace_quantize_lines 2023-09-12T14:01:48.491847Z 2023-09-12T14:01:48.492091Z
osv-2023-838 Use-of-uninitialized-value in wabt::BinaryReaderIR::OnOpcode 2023-09-12T14:01:08.316035Z 2025-07-22T14:22:12.701561Z
osv-2023-837 Heap-buffer-overflow in uint7_get_64 2023-09-12T14:00:46.512961Z 2023-09-12T14:00:46.513217Z
osv-2023-819 Heap-buffer-overflow in ucl_object_dtor_unref_single 2023-09-09T14:01:07.368928Z 2026-02-17T14:21:16.973749Z
osv-2023-813 UNKNOWN READ in parse_priv_value 2023-09-09T14:00:12.875572Z 2023-12-09T14:23:28.975076Z
osv-2023-811 Invalid-free in bit_chain_alloc_size 2023-09-08T14:03:02.684720Z 2023-09-08T14:03:02.684999Z
osv-2023-806 Heap-buffer-overflow in H5F__accum_free 2023-09-08T14:00:12.468140Z 2025-03-18T00:47:11.270073Z
ID Description Published Updated
rustsec-2020-0087 TryMutex<T> allows sending non-Send type across threads 2020-11-17T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0151 Generators can cause data races if non-Send types are used in their generator functions 2020-11-16T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0115 Singleton lacks bounds on Send and Sync. 2020-11-16T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0149 Data race and memory safety issue in `Index` 2020-11-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0136 CopyCell lacks bounds on its Send trait allowing for data races 2020-11-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0133 Queue<T> should have a Send bound on its Send/Sync traits 2020-11-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0126 SyncChannel<T> can move 'T: !Send' to other threads 2020-11-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0116 PinSlab<T> and Unordered<T, S> need bounds on their Send/Sync traits 2020-11-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0134 `LockWeak<T>` allows to create data race to `T`. 2020-11-14T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0131 Send/Sync bound needed on T for Send/Sync impl of RcuCell<T> 2020-11-14T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0092 Send/Sync bound needed on V in `impl Send/Sync for ARCache<K, V>` 2020-11-13T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0080 `miow` invalidly assumes the memory layout of std::net::SocketAddr 2020-11-13T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0130 Bunch<T> unconditionally implements Send/Sync 2020-11-12T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0073 Mutable reference with immutable provenance 2020-11-12T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0069 Argument injection in sendmail transport 2020-11-11T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0159 Potential segfault in `localtime_r` invocations 2020-11-10T12:00:00Z 2022-08-04T19:52:46Z
rustsec-2020-0140 `Shared` can cause a data race 2020-11-10T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0138 ReaderResult should be bounded by Sync 2020-11-10T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0137 AtomicBox<T> lacks bound on its Send and Sync traits allowing data races 2020-11-10T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0121 AtomicBox<T> implements Send/Sync for any `T: Sized` 2020-11-10T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0120 `Decoder<R>` can carry `R: !Send` to other threads 2020-11-10T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0111 may_queue's Queue lacks Send/Sync bound for its Send/Sync trait. 2020-11-10T12:00:00Z 2024-10-25T18:45:36Z
rustsec-2020-0107 hashconsing's HConsed lacks Send/Sync bound for its Send/Sync trait. 2020-11-10T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0102 LateStatic has incorrect Sync bound 2020-11-10T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0096 TreeFocus lacks bounds on its Send and Sync traits 2020-11-09T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0070 Some lock_api lock guard objects can cause data races 2020-11-08T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0068 Unexpected panic in multihash `from_slice` parsing code 2020-11-08T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0078 `net2` invalidly assumes the memory layout of std::net::SocketAddr 2020-11-07T12:00:00Z 2023-07-08T12:30:19Z
rustsec-2020-0079 `socket2` invalidly assumes the memory layout of std::net::SocketAddr 2020-11-06T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2020-0163 `term_size` is unmaintained; use `terminal_size` instead 2020-11-03T12:00:00Z 2022-08-02T14:03:23Z
ID Description Published Updated
bit-valkey-2025-48367 Redis DoS Vulnerability due to bad connection error handling 2025-10-16T12:08:13.783Z 2025-11-06T13:25:46.476Z
bit-valkey-2025-32023 Redis allows out of bounds writes in hyperloglog commands leading to RCE 2025-10-16T12:07:58.321Z 2026-02-05T09:10:30.960Z
bit-redis-2025-48367 Redis DoS Vulnerability due to bad connection error handling 2025-10-16T12:07:00.720Z 2025-10-16T12:31:38.153Z
bit-redis-2025-32023 Redis allows out of bounds writes in hyperloglog commands leading to RCE 2025-10-16T12:06:41.782Z 2026-02-05T09:10:30.960Z
bit-keydb-2025-48367 Redis DoS Vulnerability due to bad connection error handling 2025-10-16T12:00:55.638Z 2025-10-16T12:31:38.153Z
bit-keydb-2025-32023 Redis allows out of bounds writes in hyperloglog commands leading to RCE 2025-10-16T12:00:41.031Z 2026-02-05T09:10:30.960Z
bit-valkey-2025-49844 Redis Lua Use-After-Free may lead to remote code execution 2025-10-16T09:19:55.260Z 2026-03-21T09:12:01.983Z
bit-valkey-2025-49112 2025-10-16T09:19:52.847Z 2026-02-11T09:09:18.507Z
bit-redis-2025-49844 Redis Lua Use-After-Free may lead to remote code execution 2025-10-16T09:18:53.323Z 2026-03-21T09:12:01.983Z
bit-keydb-2025-49844 Redis Lua Use-After-Free may lead to remote code execution 2025-10-16T09:12:52.562Z 2026-03-21T09:12:01.983Z
bit-wildfly-2025-23367 Org.wildfly.core:wildfly-server: wildfly improper rbac permission 2025-10-15T08:51:55.776Z 2026-02-11T09:09:18.507Z
bit-pytorch-2025-55560 2025-10-15T08:50:02.845Z 2025-10-15T09:08:35.035Z
bit-mastodon-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels 2025-10-15T08:44:06.235Z 2026-01-08T18:07:34.629Z
bit-mastodon-2025-62175 Mastodon streaming API fails to disconnect disabled and suspended users 2025-10-15T08:44:04.530Z 2026-01-08T18:07:34.629Z
bit-mastodon-2025-62174 Mastodon allows continued access after password reset via CLI 2025-10-15T08:44:02.890Z 2026-01-08T18:07:34.629Z
bit-python-2025-8291 ZIP64 End of Central Directory (EOCD) Locator record offset not checked 2025-10-14T09:30:19.669Z 2025-12-04T12:07:39.656Z
bit-python-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols() 2025-10-14T09:29:29.557Z 2025-10-14T09:53:39.450Z
bit-libpython-2025-8291 ZIP64 End of Central Directory (EOCD) Locator record offset not checked 2025-10-14T09:25:48.465Z 2025-12-04T12:07:39.656Z
bit-libpython-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols() 2025-10-14T09:24:35.254Z 2025-10-14T09:53:39.450Z
bit-kibana-2025-25018 Kibana Stored Cross-Site Scripting (XSS) 2025-10-14T08:43:02.190Z 2025-11-06T13:25:46.476Z
bit-kibana-2025-25017 Kibana Stored Cross-Site Scripting (XSS) 2025-10-14T08:43:00.623Z 2025-11-06T13:25:46.476Z
bit-elk-2025-25018 Kibana Stored Cross-Site Scripting (XSS) 2025-10-14T08:39:59.187Z 2025-11-06T13:25:46.476Z
bit-elk-2025-25017 Kibana Stored Cross-Site Scripting (XSS) 2025-10-14T08:39:57.577Z 2025-11-06T13:25:46.476Z
bit-elasticsearch-2025-37727 Elasticsearch Insertion of sensitive information in log file 2025-10-14T08:39:50.514Z 2025-10-14T09:09:11.030Z
bit-gitlab-2025-2934 Allocation of Resources Without Limits or Throttling in GitLab 2025-10-11T09:05:29.864Z 2025-10-21T09:07:40.239Z
bit-gitlab-2025-11340 Incorrect Authorization in GitLab 2025-10-11T09:04:34.616Z 2025-10-11T09:07:57.990Z
bit-gitlab-2025-10004 Allocation of Resources Without Limits or Throttling in GitLab 2025-10-11T09:04:16.301Z 2025-10-11T09:07:57.990Z
bit-ejbca-2025-3027 Open Redirect vulnerability in EJBCA 2025-10-10T08:38:43.953Z 2025-10-10T09:07:15.482Z
bit-ejbca-2025-3026 Improper Neutralization of Special Elements vulnerability in EJBCA 2025-10-10T08:38:42.126Z 2025-10-10T09:07:15.482Z
bit-kibana-2025-37728 Kibana Insufficiently Protected Credentials in the CrowdStrike Connector 2025-10-09T08:43:25.053Z 2025-10-09T09:08:03.236Z
ID Description Updated
ID Description Published Updated
certfr-2025-avi-0789 Multiples vulnérabilités dans les produits IBM 2025-09-12T00:00:00.000000 2025-09-12T00:00:00.000000
certfr-2025-avi-0788 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-09-12T00:00:00.000000 2025-09-12T00:00:00.000000
certfr-2025-avi-0787 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-09-12T00:00:00.000000 2025-09-12T00:00:00.000000
certfr-2025-avi-0786 Multiples vulnérabilités dans Zabbix 2025-09-12T00:00:00.000000 2025-09-12T00:00:00.000000
certfr-2025-avi-0785 Multiples vulnérabilités dans Liferay 2025-09-12T00:00:00.000000 2025-09-12T00:00:00.000000
certfr-2025-avi-0784 Vulnérabilité dans Microsoft Visual Studio Code 2025-09-12T00:00:00.000000 2025-09-12T00:00:00.000000
certfr-2025-avi-0783 Multiples vulnérabilités dans Microsoft Edge 2025-09-12T00:00:00.000000 2025-09-12T00:00:00.000000
certfr-2025-avi-0782 Multiples vulnérabilités dans les produits Palo Alto Networks 2025-09-11T00:00:00.000000 2025-09-11T00:00:00.000000
certfr-2025-avi-0781 Multiples vulnérabilités dans Cisco IOS XR 2025-09-11T00:00:00.000000 2025-09-11T00:00:00.000000
certfr-2025-avi-0780 Multiples vulnérabilités dans les produits Microsoft 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0779 Multiples vulnérabilités dans Microsoft Azure 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0778 Multiples vulnérabilités dans Microsoft Windows 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0777 Multiples vulnérabilités dans Microsoft Office 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0776 Multiples vulnérabilités dans GitLab 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0775 Multiples vulnérabilités dans Curl 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0774 Vulnérabilité dans Liferay 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0773 Multiples vulnérabilités dans les produits Fortinet 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0772 Vulnérabilité dans les points d'accès Sophos AP6 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0771 Multiples vulnérabilités dans Xen 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0770 Multiples vulnérabilités dans les produits Adobe 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0769 Multiples vulnérabilités dans Google Chrome 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0768 Multiples vulnérabilités dans les produits Ivanti 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0767 Vulnérabilité dans les produits Adobe 2025-09-09T00:00:00.000000 2025-09-09T00:00:00.000000
certfr-2025-avi-0766 Multiples vulnérabilités dans les produits Liferay 2025-09-09T00:00:00.000000 2025-09-19T00:00:00.000000
certfr-2025-avi-0765 Multiples vulnérabilités dans les produits Siemens 2025-09-09T00:00:00.000000 2025-09-09T00:00:00.000000
certfr-2025-avi-0764 Multiples vulnérabilités dans les produits SAP 2025-09-09T00:00:00.000000 2025-09-09T00:00:00.000000
certfr-2025-avi-0763 Vulnérabilité dans Spring Cloud Gateway 2025-09-09T00:00:00.000000 2025-09-09T00:00:00.000000
certfr-2025-avi-0762 Vulnérabilité dans SPIP 2025-09-08T00:00:00.000000 2025-09-08T00:00:00.000000
certfr-2025-avi-0761 Multiples vulnérabilités dans Microsoft Edge 2025-09-08T00:00:00.000000 2025-09-08T00:00:00.000000
certfr-2025-avi-0760 Multiples vulnérabilités dans les produits IBM 2025-09-05T00:00:00.000000 2025-09-05T00:00:00.000000
ID Description Published Updated
jvndb-2022-000010 Multiple vulnerabilities in multiple ELECOM LAN routers 2022-02-08T16:13+09:00 2022-02-08T16:13+09:00
jvndb-2016-008013 Multiple ESET products for macOS vulnerable to improper server certificate verification 2022-02-07T14:18+09:00 2022-02-07T14:18+09:00
jvndb-2022-000007 Multiple vulnerabilities in TransmitMail 2022-01-25T15:31+09:00 2022-01-25T15:31+09:00
jvndb-2022-001097 Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux 2022-01-25T13:35+09:00 2022-01-25T13:35+09:00
jvndb-2022-001087 GROWI vulnerable to authorization bypass through user-controlled key 2022-01-24T14:07+09:00 2022-01-24T14:07+09:00
jvndb-2022-000006 Multiple cross-site scripting vulnerabilities in php_mailform 2022-01-20T15:42+09:00 2022-01-20T15:42+09:00
jvndb-2022-000001 Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting 2022-01-19T14:00+09:00 2022-01-19T14:00+09:00
jvndb-2022-000005 PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption 2022-01-13T15:26+09:00 2022-01-13T15:26+09:00
jvndb-2022-000004 Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials 2022-01-13T15:21+09:00 2022-01-13T15:21+09:00
jvndb-2022-000003 Jimoty App for Android uses a hard-coded API key for an external service 2022-01-12T15:37+09:00 2022-01-12T15:37+09:00
jvndb-2022-000002 Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" 2022-01-12T15:33+09:00 2022-01-12T15:33+09:00
jvndb-2021-006146 Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems 2021-12-28T11:51+09:00 2021-12-28T11:51+09:00
jvndb-2021-006117 Multiple vulnerabilities in IDEC PLCs 2021-12-27T16:54+09:00 2022-01-11T16:36+09:00
jvndb-2021-006026 TP-Link TL-WR802N V4(JP) vulnerable to OS command injection 2021-12-24T15:31+09:00 2021-12-24T15:31+09:00
jvndb-2021-005998 Multiple vulnerabilities in QNAP VioStar NVR 2021-12-24T10:58+09:00 2021-12-24T10:58+09:00
jvndb-2021-003929 Multiple vulnerabilities in multiple Yamaha routers 2021-12-24T10:51+09:00 2021-12-24T10:51+09:00
jvndb-2021-000112 Android Apps developed using Yappli fails to restrict custom URL schemes properly 2021-12-22T15:07+09:00 2021-12-22T15:07+09:00
jvndb-2021-000111 Multiple vulnerabilities in GroupSession 2021-12-20T14:53+09:00 2021-12-21T14:20+09:00
jvndb-2021-000110 UNIVERGE DT Series vulnerable to missing encryption of sensitive data 2021-12-17T16:57+09:00 2021-12-17T16:57+09:00
jvndb-2021-005174 Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer) 2021-12-09T13:43+09:00 2021-12-09T13:43+09:00
jvndb-2021-004912 Multiple vulnerabilities in multiple ELECOM routers 2021-12-02T17:16+09:00 2022-03-30T16:11+09:00
jvndb-2021-000109 Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields" 2021-12-02T15:02+09:00 2022-02-18T16:18+09:00
jvndb-2021-000108 Multiple vulnerabilities in multiple ELECOM LAN routers 2021-11-30T16:23+09:00 2022-03-29T16:18+09:00
jvndb-2021-000107 Wi-Fi STATION SH-52A vulnerable to cross-site scripting 2021-11-30T14:49+09:00 2021-11-30T14:49+09:00
jvndb-2021-004716 Trend Micro Antivirus for MAC vulnerable to improper access controls 2021-11-29T13:52+09:00 2021-11-29T13:52+09:00
jvndb-2021-000106 Multiple vulnerabilities in baserCMS 2021-11-26T14:59+09:00 2021-11-26T14:59+09:00
jvndb-2021-000104 WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery 2021-11-25T14:31+09:00 2021-11-25T14:31+09:00
jvndb-2021-000105 PowerCMS XMLRPC API vulnerable to OS command injection 2021-11-24T15:47+09:00 2024-07-26T15:22+09:00
jvndb-2021-004432 Multiple Vulnerabilities in JP1/Automatic Operation 2021-11-22T16:10+09:00 2021-11-22T16:10+09:00
jvndb-2021-000103 WordPress Plugin "Push Notifications for WordPress (Lite)" vulnerable to cross-site request forgery 2021-11-16T13:42+09:00 2021-11-16T13:42+09:00
ID Description Published Updated
cnvd-2026-16671 WordPress插件ABG Rich Pins跨站脚本漏洞 2026-01-30 2026-04-10
cnvd-2026-16638 Oracle MySQL存在未明漏洞(CNVD-2026-16638) 2026-01-30 2026-04-09
cnvd-2026-16631 Oracle MySQL存在未明漏洞(CNVD-2026-16631) 2026-01-30 2026-04-09
cnvd-2026-16630 Oracle MySQL存在未明漏洞(CNVD-2026-16630) 2026-01-30 2026-04-09
cnvd-2026-16629 Oracle MySQL存在未明漏洞(CNVD-2026-16629) 2026-01-30 2026-04-09
cnvd-2026-16628 Oracle MySQL存在未明漏洞(CNVD-2026-16628) 2026-01-30 2026-04-09
cnvd-2026-16627 Oracle MySQL存在未明漏洞(CNVD-2026-16627) 2026-01-30 2026-04-09
cnvd-2026-16161 Microsoft Office代码执行漏洞(CNVD-2026-16161) 2026-01-30 2026-04-07
cnvd-2026-12366 NVIDIA CUDA toolkit代码问题漏洞 2026-01-30 2026-03-03
cnvd-2026-12365 NVIDIA CUDA toolkit gfx_hotspot模块命令注入漏洞 2026-01-30 2026-03-03
cnvd-2026-11798 IBM Licensing Operator权限提升漏洞 2026-01-30 2026-02-28
cnvd-2026-11755 Google Chrome安全绕过漏洞(CNVD-2026-11755) 2026-01-30 2026-02-25
cnvd-2026-11754 Google Chrome安全绕过漏洞(CNVD-2026-11754) 2026-01-30 2026-02-25
cnvd-2026-11753 Google Chrome安全绕过漏洞(CNVD-2026-11753) 2026-01-30 2026-02-25
cnvd-2026-11752 Google Chrome安全绕过漏洞(CNVD-2026-11752) 2026-01-30 2026-02-25
cnvd-2026-11751 Google Chrome代码执行漏洞(CNVD-2026-11751) 2026-01-30 2026-02-25
cnvd-2026-11750 Google Chrome安全绕过漏洞(CNVD-2026-11750) 2026-01-30 2026-02-25
cnvd-2026-11736 TOTOLINK NR1800X命令注入漏洞(CNVD-2026-11736) 2026-01-30 2026-02-24
cnvd-2026-11735 Tenda W30E信息泄露漏洞 2026-01-30 2026-02-24
cnvd-2026-11734 Tenda AX1806 sub_4C408函数堆栈溢出漏洞 2026-01-30 2026-02-24
cnvd-2026-10893 WordPress插件WP FullCalendar信息泄露漏洞 2026-01-30 2026-02-14
cnvd-2026-10892 WordPress插件WP Directory Kit信息泄露漏洞 2026-01-30 2026-02-14
cnvd-2026-10891 WordPress插件CubeWP – All-in-One Dynamic Content Framework信息泄露漏洞 2026-01-30 2026-02-14
cnvd-2026-10890 WordPress插件Contact Form 7 GetResponse Extension信息泄露漏洞 2026-01-30 2026-02-14
cnvd-2026-10889 WordPress插件Cargus信息泄露漏洞 2026-01-30 2026-02-14
cnvd-2026-10888 WordPress插件Booking Ultra Pro信息泄露漏洞 2026-01-30 2026-02-14
cnvd-2026-10855 Rockwell Automation CompactLogix 5370拒绝服务漏洞 2026-01-30 2026-02-10
cnvd-2026-10854 Rockwell Automation ArmorStart LT拒绝服务漏洞(CNVD-2026-10854) 2026-01-30 2026-02-10
cnvd-2026-10852 Rockwell Automation ArmorStart LT拒绝服务漏洞(CNVD-2026-10852) 2026-01-30 2026-02-10
cnvd-2026-10851 Rockwell Automation ArmorStart LT拒绝服务漏洞(CNVD-2026-10851) 2026-01-30 2026-02-10
ID Description Published Updated
bdu:2026-00814 Уязвимость функции sub_403010() сценария /cgi-bin/wireless.cgi микропрограммного обеспече… 26.01.2026 26.01.2026
bdu:2026-00813 Уязвимость функции sub_4012A0() сценария /cgi-bin/login.cgi микропрограммного обеспечения… 26.01.2026 26.01.2026
bdu:2026-00812 Уязвимость программного обеспечения автоматической организации и сортировки файлов Qfilin… 26.01.2026 26.01.2026
bdu:2026-00811 Уязвимость графического интерфейса веб-приложения QGIS QWC2, позволяющая нарушителю выпол… 26.01.2026 26.01.2026
bdu:2026-00810 Уязвимость веб-приложения QGIS QWC2, связанная с непринятием мер по защите структуры веб-… 26.01.2026 26.01.2026
bdu:2026-00809 Уязвимость компонента Packet Handler операционной системы PAN-OS, позволяющая нарушителю… 26.01.2026 26.01.2026
bdu:2026-00808 Уязвимость программного обеспечения для управления и мониторинга печати NDD Print Agent, … 26.01.2026 26.01.2026
bdu:2026-00807 Уязвимость метода LaunchUpdateCmdElevatedAndWait привилегированного COM-интерфейса IEleva… 26.01.2026 26.01.2026
bdu:2026-00806 Уязвимость пакетов программ Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Ent… 26.01.2026 26.01.2026
bdu:2026-00805 Уязвимость клиентской библиотеки Azure Core для Python, связанная с недостатками механизм… 26.01.2026 26.01.2026
bdu:2026-00804 Уязвимость пакетов программ Microsoft SharePoint Server, Microsoft SharePoint Enterprise … 26.01.2026 26.01.2026
bdu:2026-00803 Уязвимость компонента mariadb-dump системы управления базами данных MariaDB, позволяющая … 26.01.2026 26.01.2026
bdu:2026-00802 Уязвимость виртуальной машины Ethereum Cosmos EVM, связанная с неверным управлением генер… 26.01.2026 26.01.2026
bdu:2026-00801 Уязвимость программного средства мониторинга компьютерной сети NETMRI, связанная с недост… 26.01.2026 26.01.2026
bdu:2026-00800 Уязвимость библиотеки ANGLE браузера Google Chrome, позволяющая нарушителю вызвать отказ … 26.01.2026 26.01.2026
bdu:2026-00799 Уязвимость почтового клиента Microsoft Outlook, связанная с включением функций из недосто… 26.01.2026 26.01.2026
bdu:2026-00798 Уязвимость почтового клиента Microsoft Outlook, связанная с включением функций из недосто… 26.01.2026 26.01.2026
bdu:2026-00797 Уязвимость почтового клиента Microsoft Outlook, связанная с непринятием мер по защите стр… 26.01.2026 26.01.2026
bdu:2026-00796 Уязвимость почтового клиента Microsoft Outlook, связанная с непринятием мер по защите стр… 26.01.2026 26.01.2026
bdu:2026-00795 Уязвимость почтового клиента Microsoft Outlook, связанная с непринятием мер по защите стр… 26.01.2026 26.01.2026
bdu:2026-00794 Уязвимость почтового клиента Microsoft Outlook, связанная с неограниченной загрузкой файл… 26.01.2026 26.01.2026
bdu:2026-00793 Уязвимость функции save_virtualser_data() микропрограммного обеспечения маршрутизаторов T… 26.01.2026 26.01.2026
bdu:2026-00792 Уязвимость функции set_qosMib_list() микропрограммного обеспечения маршрутизаторов Tenda … 26.01.2026 26.01.2026
bdu:2026-00791 Уязвимость функции setSmartPowerManagement() микропрограммного обеспечения маршрутизаторо… 26.01.2026 26.01.2026
bdu:2026-00790 Уязвимость функции setSchedWifi() микропрограммного обеспечения маршрутизаторов Tenda AC8… 26.01.2026 26.01.2026
bdu:2026-00789 Уязвимость функции sscanf() микропрограммного обеспечения маршрутизаторов Tenda AC8, позв… 26.01.2026 26.01.2026
bdu:2026-00788 Уязвимость функции fromSetRouteStatic() микропрограммного обеспечения маршрутизаторов Ten… 26.01.2026 26.01.2026
bdu:2026-00787 Уязвимость функции fromSetRouteStatic() микропрограммного обеспечения маршрутизаторов Ten… 26.01.2026 26.01.2026
bdu:2026-00786 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… 26.01.2026 26.01.2026
bdu:2026-00785 Уязвимость ядра программного средства виртуализации Oracle VM VirtualBox, связанная с нед… 25.01.2026 26.01.2026
ID Description Updated
var-201002-0694 The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on th… 2026-03-09T22:45:33.745000Z
var-201505-0337 The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorit… 2026-03-09T22:44:51.374000Z
var-201702-0869 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … 2026-03-09T22:44:48.769000Z
var-201904-1473 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2026-03-09T22:44:44.087000Z
var-201302-0224 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T22:44:38.882000Z
var-202105-1469 A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(… 2026-03-09T22:44:02.607000Z
var-201106-0034 Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.… 2026-03-09T22:43:52.133000Z
var-201104-0082 dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and … 2026-03-09T22:43:44.086000Z
var-200512-0633 passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 al… 2026-03-09T22:43:10.969000Z
var-200810-0643 Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in ne… 2026-03-09T22:43:10.783000Z
var-201106-0192 The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.… 2026-03-09T22:42:39.401000Z
var-200603-0276 Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to r… 2026-03-09T22:42:38.967000Z
var-201408-0094 Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before… 2026-03-09T22:42:38.608000Z
var-201904-1405 A consistency issue existed in the handling of application snapshots. The issue was addre… 2026-03-09T22:42:38.275000Z
var-201905-0095 A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execut… 2026-03-09T22:42:35.251000Z
var-201711-0473 An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… 2026-03-09T22:42:34.233000Z
var-201210-0155 Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS … 2026-03-09T22:42:33.505000Z
var-201512-0483 crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remo… 2026-03-09T22:42:25.354000Z
var-201210-0272 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T22:42:25.193000Z
var-200701-0518 The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS … 2026-03-09T22:42:21.420000Z
var-201211-0319 Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote … 2026-03-09T22:42:08.807000Z
var-201904-0746 A race condition was addressed with additional validation. This issue affected versions p… 2026-03-09T22:41:00.561000Z
var-202112-1608 A carefully crafted request body can cause a buffer overflow in the mod_lua multipart par… 2026-03-09T22:40:59.062000Z
var-202203-0072 Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are e… 2026-03-09T22:40:58.795000Z
var-200708-0604 The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and late… 2026-03-09T22:40:51.814000Z
var-202105-1430 An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL … 2026-03-09T22:40:18.479000Z
var-201408-0212 The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows re… 2026-03-09T22:39:17.757000Z
var-201210-0457 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T22:39:09.262000Z
var-200810-0010 The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windo… 2026-03-09T22:39:06.400000Z
var-201904-1460 A cross-site scripting issue existed in Safari. This issue was addressed with improved UR… 2026-03-09T22:39:05.592000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated