Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-24550
6.5 (3.1)
WordPress Blockons plugin <= 1.2.19 - Cross Site Scrip… Kaira
Blockons
2026-01-23T14:28:53.038Z 2026-04-24T18:17:28.117Z
CVE-2026-24551
5.4 (3.1)
WordPress Monetag Official Plugin plugin <= 1.1.3 - Br… monetagwp
Monetag Official Plugin
2026-01-23T14:28:53.243Z 2026-04-24T18:17:27.830Z
CVE-2026-24555
6.5 (3.1)
WordPress ArtPlacer Widget plugin <= 2.23.2 - Cross Si… artplacer
ArtPlacer Widget
2026-01-23T14:28:53.602Z 2026-04-24T18:17:26.948Z
CVE-2026-24556
5.3 (3.1)
WordPress ElementCamp plugin <= 2.3.2 - Broken Access … wpdive
ElementCamp
2026-01-23T14:28:53.780Z 2026-04-24T18:17:26.764Z
CVE-2026-24558
6.5 (3.1)
WordPress ABG Rich Pins plugin <= 1.1 - Cross Site Scr… antoniobg
ABG Rich Pins
2026-01-23T14:28:54.415Z 2026-04-24T18:17:26.554Z
CVE-2026-24559
5.3 (3.1)
WordPress Integration for Contact Form 7 HubSpot plugi… CRM Perks
Integration for Contact Form 7 HubSpot
2026-01-23T14:28:54.762Z 2026-04-24T18:17:26.317Z
CVE-2026-41043
N/A
Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Con… Apache Software Foundation
Apache ActiveMQ
2026-04-24T10:16:23.810Z 2026-04-24T18:17:14.457Z
CVE-2026-5367
8.6 (3.1)
Ovn: ovn: information disclosure via crafted dhcpv6 packets Red Hat
Fast Datapath for RHEL 7
2026-04-24T12:25:05.024Z 2026-04-24T18:17:08.701Z
CVE-2026-39920
9.3 (4.0)
9.8 (3.1)
BridgeHead FileStore < 24A Apache Axis2 Default Creden… BridgeHead Software
FileStore
2026-04-24T15:48:26.059Z 2026-04-24T18:17:02.370Z
CVE-2026-41067
6.1 (3.1)
Astro: XSS via incomplete `</script>` sanitization in … withastro
astro
2026-04-24T16:57:22.940Z 2026-04-24T18:16:55.536Z
CVE-2026-42039
6.9 (4.0)
Axios: unbounded recursion in toFormData causes DoS vi… axios
axios
2026-04-24T18:01:30.775Z 2026-04-24T18:14:37.802Z
CVE-2026-42034
5.3 (3.1)
Axios: HTTP adapter streamed uploads bypass maxBodyLen… axios
axios
2026-04-24T17:59:47.802Z 2026-04-24T18:13:14.474Z
CVE-2026-42044
6.5 (3.1)
Axios: Invisible JSON Response Tampering via Prototype… axios
axios
2026-04-24T17:49:49.517Z 2026-04-24T18:12:13.920Z
CVE-2026-41907
8.1 (4.0)
uuid: Missing buffer bounds check in `v3`/`v5`/`v6` wh… uuidjs
uuid
2026-04-24T18:09:24.744Z 2026-04-24T18:09:24.744Z
CVE-2026-24564
4.3 (3.1)
WordPress Textmetrics plugin <= 3.6.5 - Content Inject… Israpil
Textmetrics
2026-01-23T14:28:55.667Z 2026-04-24T18:07:23.569Z
CVE-2026-24567
4.3 (3.1)
WordPress Anything Order by Terms plugin <= 1.4.0 - Br… briarinc
Anything Order by Terms
2026-01-23T14:28:56.196Z 2026-04-24T18:07:23.401Z
CVE-2026-24568
5.3 (3.1)
WordPress WP Travel plugin <= 11.1.0 - Broken Access C… WP Travel
WP Travel
2026-01-23T14:28:56.433Z 2026-04-24T18:07:23.224Z
CVE-2026-24569
4.3 (3.1)
WordPress Media Library File Size plugin <= 1.6.7 - Br… Sully
Media Library File Size
2026-01-23T14:28:56.622Z 2026-04-24T18:07:23.058Z
CVE-2026-24570
5.4 (3.1)
WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Acce… WisdmLabs
Edwiser Bridge
2026-01-23T14:28:56.795Z 2026-04-24T18:07:22.890Z
CVE-2026-24571
4.3 (3.1)
WordPress BOX NOW Delivery plugin <= 3.0.2 - Broken Ac… boxnow
BOX NOW Delivery
2026-01-23T14:28:56.952Z 2026-04-24T18:07:22.726Z
CVE-2026-24572
8.5 (3.1)
WordPress Nelio Content plugin <= 4.2.0 - SQL Injectio… Nelio Software
Nelio Content
2026-01-23T14:28:57.109Z 2026-04-24T18:07:22.550Z
CVE-2026-24576
6.5 (3.1)
WordPress UX Flat plugin <= 5.4.0 - Cross Site Scripti… COP
UX Flat
2026-01-23T14:28:57.282Z 2026-04-24T18:07:22.363Z
CVE-2026-24577
5.3 (3.1)
WordPress Pie Register plugin <= 3.8.4.8 - Broken Acce… Genetech Products
Pie Register
2026-01-23T14:28:57.456Z 2026-04-24T18:07:22.199Z
CVE-2026-24578
4.3 (3.1)
WordPress Admin login URL Change plugin <= 1.1.5 - Bro… Jahid Hasan
Admin login URL Change
2026-01-23T14:28:58.618Z 2026-04-24T18:07:22.038Z
CVE-2026-24579
4.3 (3.1)
WordPress Ai Image Alt Text Generator for WP plugin <=… WP Messiah
Ai Image Alt Text Generator for WP
2026-01-23T14:28:58.842Z 2026-04-24T18:07:21.868Z
CVE-2026-24580
4.3 (3.1)
WordPress Ecwid Shopping Cart plugin <= 7.0.5 - Broken… Ecwid by Lightspeed Ecommerce Shopping Cart
Ecwid Shopping Cart
2026-01-23T14:28:59.009Z 2026-04-24T18:07:21.707Z
CVE-2026-24581
5.4 (3.1)
WordPress Points and Rewards for WooCommerce plugin <=… WP Swings
Points and Rewards for WooCommerce
2026-01-23T14:28:59.230Z 2026-04-24T18:07:21.536Z
CVE-2026-24583
5.3 (3.1)
WordPress SumUp Payment Gateway For WooCommerce plugin… sumup
SumUp Payment Gateway For WooCommerce
2026-01-23T14:28:59.442Z 2026-04-24T18:07:21.332Z
CVE-2026-24591
6.5 (3.1)
WordPress Turn Yoast SEO FAQ Block to Accordion plugin… yasir129
Turn Yoast SEO FAQ Block to Accordion
2026-01-23T14:29:00.969Z 2026-04-24T18:07:21.103Z
CVE-2026-24594
5.9 (3.1)
WordPress Livemesh Addons for WPBakery Page Builder pl… livemesh
Livemesh Addons for WPBakery Page Builder
2026-01-23T14:29:01.518Z 2026-04-24T18:07:20.830Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-31577
N/A
nilfs2: fix NULL i_assoc_inode dereference in nilfs_md… Linux
Linux
2026-04-24T14:42:08.879Z 2026-04-24T14:42:08.879Z
CVE-2026-31576
N/A
media: hackrf: fix to not free memory after the device… Linux
Linux
2026-04-24T14:42:08.188Z 2026-04-24T14:42:08.188Z
CVE-2026-31575
N/A
mm/userfaultfd: fix hugetlb fault mutex hash calculation Linux
Linux
2026-04-24T14:42:07.502Z 2026-04-24T14:42:07.502Z
CVE-2026-31574
N/A
clockevents: Add missing resets of the next_event_forc… Linux
Linux
2026-04-24T14:42:06.707Z 2026-04-24T14:42:06.707Z
CVE-2026-31573
N/A
media: verisilicon: Fix kernel panic due to __initcons… Linux
Linux
2026-04-24T14:35:51.421Z 2026-04-24T14:35:51.421Z
CVE-2026-31572
N/A
i2c: designware: amdisp: Fix resume-probe race conditi… Linux
Linux
2026-04-24T14:35:50.736Z 2026-04-24T14:35:50.736Z
CVE-2026-31571
N/A
drm/i915: Unlink NV12 planes earlier Linux
Linux
2026-04-24T14:35:50.094Z 2026-04-24T14:35:50.094Z
CVE-2026-31570
N/A
can: gw: fix OOB heap access in cgw_csum_crc8_rel() Linux
Linux
2026-04-24T14:35:49.435Z 2026-04-24T14:35:49.435Z
CVE-2026-31569
N/A
LoongArch: KVM: Handle the case that EIOINTC's coremap… Linux
Linux
2026-04-24T14:35:48.768Z 2026-04-24T14:35:48.768Z
CVE-2026-31568
N/A
s390/mm: Add missing secure storage access fixups for … Linux
Linux
2026-04-24T14:35:48.125Z 2026-04-24T14:35:48.125Z
CVE-2026-31567
N/A
PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp… Linux
Linux
2026-04-24T14:35:47.453Z 2026-04-24T14:35:47.453Z
CVE-2026-31566
N/A
drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd… Linux
Linux
2026-04-24T14:35:46.740Z 2026-04-24T14:35:46.740Z
CVE-2026-31565
N/A
RDMA/irdma: Fix deadlock during netdev reset with acti… Linux
Linux
2026-04-24T14:35:46.006Z 2026-04-24T14:35:46.006Z
CVE-2026-31564
N/A
LoongArch: KVM: Fix base address calculation in kvm_ei… Linux
Linux
2026-04-24T14:35:45.302Z 2026-04-24T14:35:45.302Z
CVE-2026-31563
N/A
net: macb: Use dev_consume_skb_any() to free TX SKBs Linux
Linux
2026-04-24T14:35:44.610Z 2026-04-24T14:35:44.610Z
CVE-2026-31562
N/A
drm/mediatek: dsi: Store driver data before invoking m… Linux
Linux
2026-04-24T14:35:43.950Z 2026-04-24T14:35:43.950Z
CVE-2026-31561
N/A
x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Linux
Linux
2026-04-24T14:35:43.302Z 2026-04-24T14:35:43.302Z
CVE-2026-31560
N/A
spi: spi-dw-dma: fix print error log when wait finish … Linux
Linux
2026-04-24T14:35:42.634Z 2026-04-25T05:48:14.807Z
CVE-2026-31559
N/A
LoongArch: Fix missing NULL checks for kstrdup() Linux
Linux
2026-04-24T14:35:41.961Z 2026-04-25T05:48:13.693Z
CVE-2026-31558
N/A
LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Linux
Linux
2026-04-24T14:35:41.209Z 2026-04-24T14:35:41.209Z
CVE-2026-31557
N/A
nvmet: move async event work off nvmet-wq Linux
Linux
2026-04-24T14:35:40.544Z 2026-04-25T05:48:12.438Z
CVE-2026-31556
N/A
xfs: scrub: unlock dquot before early return in quota scrub Linux
Linux
2026-04-24T14:35:39.880Z 2026-04-24T14:35:39.880Z
CVE-2026-31555
N/A
futex: Clear stale exiting pointer in futex_lock_pi() … Linux
Linux
2026-04-24T14:35:39.211Z 2026-04-24T14:35:39.211Z
CVE-2026-31554
N/A
futex: Require sys_futex_requeue() to have identical flags Linux
Linux
2026-04-24T14:35:38.527Z 2026-04-24T14:35:38.527Z
CVE-2026-31553
N/A
KVM: arm64: Fix the descriptor address in __kvm_at_swa… Linux
Linux
2026-04-24T14:35:37.828Z 2026-04-24T14:35:37.828Z
CVE-2026-31552
N/A
wifi: wlcore: Return -ENOMEM instead of -EAGAIN if the… Linux
Linux
2026-04-24T14:33:19.065Z 2026-04-24T14:33:19.065Z
CVE-2026-31551
N/A
wifi: mac80211: Fix static_branch_dec() underflow for … Linux
Linux
2026-04-24T14:33:18.230Z 2026-04-24T14:33:18.230Z
CVE-2026-31550
N/A
pmdomain: bcm: bcm2835-power: Increase ASB control timeout Linux
Linux
2026-04-24T14:33:17.508Z 2026-04-24T14:33:17.508Z
CVE-2026-31549
N/A
i2c: cp2615: fix serial string NULL-deref at probe Linux
Linux
2026-04-24T14:33:16.814Z 2026-04-24T14:33:16.814Z
CVE-2026-31548
N/A
wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_w… Linux
Linux
2026-04-24T14:33:16.021Z 2026-04-24T14:33:16.021Z
ID Description Published Updated
fkie_cve-2026-31577 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL i_assoc_inode… 2026-04-24T15:16:32.347 2026-04-24T17:51:40.810
fkie_cve-2026-31576 In the Linux kernel, the following vulnerability has been resolved: media: hackrf: fix to not free… 2026-04-24T15:16:32.230 2026-04-24T17:51:40.810
fkie_cve-2026-31575 In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix hugetlb fa… 2026-04-24T15:16:32.123 2026-04-24T17:51:40.810
fkie_cve-2026-31574 In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing reset… 2026-04-24T15:16:32.020 2026-04-24T17:51:40.810
fkie_cve-2026-31573 In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Fix kernel… 2026-04-24T15:16:31.857 2026-04-24T17:51:40.810
fkie_cve-2026-31572 In the Linux kernel, the following vulnerability has been resolved: i2c: designware: amdisp: Fix r… 2026-04-24T15:16:31.757 2026-04-24T17:51:40.810
fkie_cve-2026-31571 In the Linux kernel, the following vulnerability has been resolved: drm/i915: Unlink NV12 planes e… 2026-04-24T15:16:31.653 2026-04-24T17:51:40.810
fkie_cve-2026-31570 In the Linux kernel, the following vulnerability has been resolved: can: gw: fix OOB heap access i… 2026-04-24T15:16:31.520 2026-04-24T17:51:40.810
fkie_cve-2026-31569 In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Handle the cas… 2026-04-24T15:16:31.420 2026-04-24T17:51:40.810
fkie_cve-2026-31568 In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure st… 2026-04-24T15:16:31.313 2026-04-24T17:51:40.810
fkie_cve-2026-31567 In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Drop spurious WARN_… 2026-04-24T15:16:31.197 2026-04-24T17:51:40.810
fkie_cve-2026-31566 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix fence put befo… 2026-04-24T15:16:31.077 2026-04-24T17:51:40.810
fkie_cve-2026-31565 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock durin… 2026-04-24T15:16:30.950 2026-04-24T17:51:40.810
fkie_cve-2026-31564 In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix base addre… 2026-04-24T15:16:30.850 2026-04-24T17:51:40.810
fkie_cve-2026-31563 In the Linux kernel, the following vulnerability has been resolved: net: macb: Use dev_consume_skb… 2026-04-24T15:16:30.720 2026-04-24T17:51:40.810
fkie_cve-2026-31562 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store drive… 2026-04-24T15:16:30.610 2026-04-24T17:51:40.810
fkie_cve-2026-31561 In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Remove X86_CR4_FRED f… 2026-04-24T15:16:30.500 2026-04-24T17:51:40.810
fkie_cve-2026-31560 In the Linux kernel, the following vulnerability has been resolved: spi: spi-dw-dma: fix print err… 2026-04-24T15:16:30.403 2026-04-24T17:51:40.810
fkie_cve-2026-31559 In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing NULL ch… 2026-04-24T15:16:30.300 2026-04-24T17:51:40.810
fkie_cve-2026-31558 In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Make kvm_get_v… 2026-04-24T15:16:30.200 2026-04-24T17:51:40.810
fkie_cve-2026-31557 In the Linux kernel, the following vulnerability has been resolved: nvmet: move async event work o… 2026-04-24T15:16:30.080 2026-04-24T17:51:40.810
fkie_cve-2026-31556 In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot befor… 2026-04-24T15:16:29.977 2026-04-24T17:51:40.810
fkie_cve-2026-31555 In the Linux kernel, the following vulnerability has been resolved: futex: Clear stale exiting poi… 2026-04-24T15:16:29.837 2026-04-24T17:51:40.810
fkie_cve-2026-31554 In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_reque… 2026-04-24T15:16:29.730 2026-04-24T17:51:40.810
fkie_cve-2026-31553 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix the descriptor… 2026-04-24T15:16:29.633 2026-04-24T17:51:40.810
fkie_cve-2026-31552 In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Return -ENOMEM i… 2026-04-24T15:16:29.497 2026-04-24T17:51:40.810
fkie_cve-2026-31551 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix static_bra… 2026-04-24T15:16:29.350 2026-04-24T17:51:40.810
fkie_cve-2026-31550 In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: … 2026-04-24T15:16:29.207 2026-04-24T17:51:40.810
fkie_cve-2026-31549 In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string… 2026-04-24T15:16:29.060 2026-04-24T17:51:40.810
fkie_cve-2026-31548 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsr_fr… 2026-04-24T15:16:28.930 2026-04-24T17:51:40.810
ID Severity Description Published Updated
ghsa-44p5-527f-xg43
6.5 (3.1)
Missing Authorization vulnerability in CoSchedule Headline Analyzer allows Exploiting Incorrectly C… 2025-01-02T12:32:13Z 2026-04-23T15:34:13Z
ghsa-23vc-r48x-wwpp
5.4 (3.1)
Missing Authorization vulnerability in RumbleTalk Ltd RumbleTalk Live Group Chat allows Exploiting … 2025-01-02T12:32:13Z 2026-04-23T15:34:13Z
ghsa-x39g-98hm-frjw
4.3 (3.1)
Missing Authorization vulnerability in gVectors Team wpDiscuz allows Exploiting Incorrectly Configu… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-x322-j5qj-m76r
6.5 (3.1)
Missing Authorization vulnerability in Kali Forms Contact Form builder with drag & drop - Kali Form… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-wgg3-6fhx-57cc
5.3 (3.1)
Missing Authorization vulnerability in AWSM Innovations WP Job Openings allows Exploiting Incorrect… 2025-01-02T12:32:12Z 2026-04-23T15:34:12Z
ghsa-prw5-xj65-rw25
4.3 (3.1)
Missing Authorization vulnerability in BoldThemes Bold Timeline Lite allows Exploiting Incorrectly … 2025-01-02T12:32:12Z 2026-04-23T15:34:12Z
ghsa-jcfm-5jqr-9j9r
5.4 (3.1)
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Inc… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-gjpw-5w4x-fpq5
5.3 (3.1)
Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Con… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-c2x9-j4mv-ggw3
5.4 (3.1)
Missing Authorization vulnerability in Kishor Khambu WP Custom Widget area allows Exploiting Incorr… 2025-01-02T12:32:12Z 2026-04-23T15:34:12Z
ghsa-8vfh-c58r-php5
4.3 (3.1)
Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce allows Exploiting In… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-7wvc-68qr-wgqx
4.3 (3.1)
Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Expl… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-6rrq-cw26-cgx2
4.3 (3.1)
Missing Authorization vulnerability in WowStore Team ProductX – Gutenberg WooCommerce Blocks allows… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-6mjj-949w-m965
4.3 (3.1)
Missing Authorization vulnerability in weDevs WP ERP allows Exploiting Incorrectly Configured Acces… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-5g8m-6vgv-qm45
5.3 (3.1)
Missing Authorization vulnerability in CodePeople Appointment Hour Booking allows Exploiting Incorr… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-3px9-vgqj-48v9
7.3 (3.1)
Missing Authorization vulnerability in WPDeveloper BetterLinks allows Exploiting Incorrectly Config… 2025-01-02T12:32:13Z 2026-04-23T15:34:12Z
ghsa-vj29-vrh9-6589
4.3 (3.1)
Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly … 2024-12-31T15:30:44Z 2026-04-23T15:34:11Z
ghsa-cq22-f7mv-9c42
5.3 (3.1)
Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configure… 2024-12-31T15:30:44Z 2026-04-23T15:34:11Z
ghsa-86fm-wq4c-m3q9
4.3 (3.1)
Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting In… 2025-01-02T12:32:12Z 2026-04-23T15:34:11Z
ghsa-7grv-gxhv-f4pm
4.3 (3.1)
Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Config… 2025-01-02T12:32:12Z 2026-04-23T15:34:11Z
ghsa-398x-j3p9-ffhp
5.3 (3.1)
Missing Authorization vulnerability in Schema App Schema App Structured Data allows Exploiting Inco… 2025-01-02T12:32:12Z 2026-04-23T15:34:11Z
ghsa-8w8w-88r2-6w5q
7.1 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Tom Royal Stop Registration Spam allows Stored X… 2024-12-17T00:31:18Z 2026-04-23T15:34:06Z
ghsa-wx24-g8wj-27rf
7.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-12-16T18:31:09Z 2026-04-23T15:34:05Z
ghsa-v8f4-pqh6-gjpr
7.6 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2024-12-16T18:31:09Z 2026-04-23T15:34:05Z
ghsa-f8wm-cjfc-xpmm
7.6 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2024-12-16T18:31:09Z 2026-04-23T15:34:05Z
ghsa-f44c-8fc3-c52q
7.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-12-16T18:31:09Z 2026-04-23T15:34:05Z
ghsa-8j65-hvp5-w9jp
9.1 (3.1)
Unrestricted Upload of File with Dangerous Type vulnerability in SeedProd LLC SeedProd Pro allows U… 2024-12-16T18:31:09Z 2026-04-23T15:34:05Z
ghsa-7v7x-8p54-6fgp
7.1 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in John Godley Tidy Up allows Reflected XSS.This is… 2024-12-16T15:31:37Z 2026-04-23T15:34:05Z
ghsa-x9w4-cxmc-832m
6.5 (3.1)
Path Traversal vulnerability in FULL. FULL Customer allows Path Traversal.This issue affects FULL C… 2024-12-13T15:30:44Z 2026-04-23T15:33:57Z
ghsa-p83f-5g8v-2prf
6.5 (3.1)
Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO … 2024-12-13T15:30:43Z 2026-04-23T15:33:54Z
ghsa-m3vm-c2qr-hmgv
6.5 (3.1)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DEL… 2024-12-13T15:30:43Z 2026-04-23T15:33:54Z
ID Severity Description Package Published Updated
pysec-2023-105
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an atta… apache-airflow 2023-07-12T10:15:00+00:00 2023-07-12T12:59:56.733680+00:00
pysec-2023-104
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an atta… apache-airflow 2023-07-12T10:15:00+00:00 2023-07-12T12:59:56.649145+00:00
pysec-2023-103
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unau… apache-airflow 2023-07-12T10:15:00+00:00 2023-07-12T12:59:56.564522+00:00
pysec-2023-100
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and UR… django 2023-07-03T13:15:00+00:00 2023-07-11T16:37:11.407533+00:00
pysec-2023-99
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary… pipreqs 2023-06-30T20:15:00+00:00 2023-07-10T18:33:06.804092+00:00
pysec-2023-97
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnera… easy-parse 2023-06-29T21:15:00+00:00 2023-07-07T02:41:36.549732+00:00
pysec-2023-96
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vuln… requests-xml 2023-06-29T21:15:00+00:00 2023-07-06T22:29:19.818007+00:00
pysec-2023-95
py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerabilit… py-xml 2023-06-29T21:15:00+00:00 2023-07-06T22:29:19.184837+00:00
pysec-2022-43052
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… request-util 2022-03-01T21:15:00+00:00 2023-07-03T20:33:00+00:00
pysec-2022-43051
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… pyquest 2022-03-01T21:15:00+00:00 2023-07-03T20:33:00+00:00
pysec-2023-94
Flask-AppBuilder is an application development framework, built on top of Flask. Prior to… flask-appbuilder 2023-06-22T23:15:00+00:00 2023-07-03T20:28:23.811646+00:00
pysec-2023-93
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly … pacparser 2023-06-30T18:15:00+00:00 2023-06-30T20:25:46.450877+00:00
pysec-2023-73
redis-7.0.10 was discovered to contain a segmentation violation. redis 2023-05-18T20:15:00Z 2023-06-27T18:49:56.911238Z
pysec-2020-221
A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no … ansible 2020-10-05T13:15:00Z 2023-06-22T16:29:43.777510Z
pysec-2023-90
Gradio is an open-source Python library that is used to build machine learning and data s… gradio 2023-06-08T00:15:00Z 2023-06-21T05:27:13.352872Z
pysec-2023-89
In Apache Airflow, some potentially sensitive values were being shown to the user in cert… apache-airflow 2023-06-19T09:15:00Z 2023-06-19T10:29:28.607914Z
pysec-2023-88
The Snowflake Connector for Python provides an interface for developing Python applicatio… snowflake-connector-python 2023-06-08T21:15:00Z 2023-06-16T18:28:10.272383Z
pysec-2023-81
A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. T… mindspore 2023-05-30T06:16:00Z 2023-06-16T08:29:55.937187Z
pysec-2023-87
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL p… sqlparse 2023-04-18T22:15:00Z 2023-06-14T20:24:17.342510Z
pysec-2023-86
OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) w… owslib 2023-03-08T00:15:00Z 2023-06-14T18:28:54.683011Z
pysec-2023-85
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A d… matrix-synapse 2023-06-06T19:15:00Z 2023-06-13T20:24:13.764030Z
pysec-2023-84
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In … matrix-synapse 2023-06-06T19:15:00Z 2023-06-13T18:28:46.812103Z
pysec-2023-83
Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.2… starlette 2023-06-01T02:15:00Z 2023-06-08T05:25:54.818459Z
pysec-2023-82
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail… django-ses 2023-05-26T21:15:00Z 2023-06-06T20:23:42.892470Z
pysec-2023-80
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contract… vyper 2023-05-19T20:15:00Z 2023-06-05T01:13:03.140034Z
pysec-2023-79
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… vyper 2023-05-11T22:15:00Z 2023-06-05T01:13:03.051477Z
pysec-2023-78
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… vyper 2023-05-11T21:15:00Z 2023-06-05T01:13:02.949990Z
pysec-2023-77
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… vyper 2023-05-11T21:15:00Z 2023-06-05T01:13:02.500642Z
pysec-2023-76
Vyper is a pythonic smart contract language for the EVM. The storage allocator does not g… vyper 2023-05-08T17:15:00Z 2023-06-05T01:13:02.407312Z
pysec-2023-75
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthe… tornado 2023-05-25T10:15:00Z 2023-06-05T01:13:01.694311Z
ID Description Updated
gsd-2024-33459 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.692449Z
gsd-2024-33003 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.692247Z
gsd-2024-33007 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.692026Z
gsd-2024-33256 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.691816Z
gsd-2024-33176 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.691588Z
gsd-2024-33163 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.691394Z
gsd-2024-33304 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.691194Z
gsd-2024-33140 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.690890Z
gsd-2024-33012 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.690513Z
gsd-2024-33201 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.690170Z
gsd-2024-33186 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.689798Z
gsd-2024-33438 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.689433Z
gsd-2024-33166 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.689082Z
gsd-2024-33371 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.688740Z
gsd-2024-33460 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.688393Z
gsd-2024-33158 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.688050Z
gsd-2024-33171 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.687655Z
gsd-2024-33513 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.687157Z
gsd-2024-33393 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.686503Z
gsd-2024-33076 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.685675Z
gsd-2024-33311 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.685067Z
gsd-2024-33198 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.684409Z
gsd-2024-33462 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.683814Z
gsd-2024-33239 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.683200Z
gsd-2024-33021 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.682562Z
gsd-2024-33179 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.682083Z
gsd-2024-33263 QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(… 2024-04-24T05:02:09.681513Z
gsd-2024-33500 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.681053Z
gsd-2024-33103 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.680571Z
gsd-2024-33058 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.680057Z
ID Description Published Updated
mal-2026-2330 Malicious code in @fyxer-ai/shared (npm) 2026-03-24T15:28:28Z 2026-04-07T14:41:19Z
mal-2026-2329 Malicious code in @abi-labs-frontend/standards (npm) 2026-03-24T15:23:58Z 2026-04-07T14:41:19Z
mal-2026-2318 Malicious code in @logcore/pino-pretty-logger (npm) 2026-04-01T09:10:18Z 2026-04-07T14:41:19Z
mal-2026-2314 Malicious code in @c8o/nimbus-core (npm) 2026-03-31T18:13:08Z 2026-04-07T14:41:19Z
mal-2026-2503 Malicious code in genesis-1p-tools-rpm-bundle (PyPI) 2026-04-07T09:41:03Z 2026-04-07T09:41:03Z
mal-2026-2488 Malicious code in photo-extractor (PyPI) 2026-04-04T16:41:48Z 2026-04-04T16:41:48Z
mal-2026-2487 Malicious code in discord-request (PyPI) 2026-04-04T12:56:18Z 2026-04-04T12:56:18Z
mal-2026-2486 Malicious code in gangomodule (PyPI) 2026-04-04T12:01:55Z 2026-04-04T12:01:55Z
mal-2026-2448 Malicious code in supervisors (PyPI) 2026-04-03T11:40:59Z 2026-04-03T11:40:59Z
mal-2026-2432 Malicious code in nwin64tls (PyPI) 2026-04-02T20:28:37Z 2026-04-02T20:28:37Z
mal-2026-2431 Malicious code in nwin32tls (PyPI) 2026-04-02T20:26:19Z 2026-04-02T20:26:19Z
mal-2026-2405 Malicious code in eht-account (PyPI) 2026-04-01T17:49:00Z 2026-04-01T17:49:00Z
mal-2026-2404 Malicious code in ether-account (PyPI) 2026-04-01T16:32:11Z 2026-04-01T16:32:11Z
mal-2026-2403 Malicious code in polymarkets-sdk (PyPI) 2026-04-01T15:30:14Z 2026-04-01T16:27:32Z
mal-2026-870 Malicious code in b10connoisseur (PyPI) 2026-02-12T12:10:26Z 2026-04-01T12:28:04Z
mal-2026-1407 Malicious code in thief-utils (PyPI) 2026-03-13T08:43:52Z 2026-04-01T12:28:04Z
mal-2026-1406 Malicious code in makenotion-ppetest (PyPI) 2026-03-13T08:13:53Z 2026-04-01T12:28:04Z
mal-2026-1365 Malicious code in unibody (npm) 2026-03-12T02:18:38Z 2026-04-01T12:28:04Z
mal-2026-1274 Malicious code in test-mal-npm-pkg-not-local (npm) 2026-03-06T14:26:46Z 2026-04-01T12:28:04Z
mal-2026-1273 Malicious code in test-mal-npm-pkg-local (npm) 2026-03-06T14:26:46Z 2026-04-01T12:28:04Z
mal-2026-1163 Malicious code in xpack-video-submission (npm) 2026-03-03T04:08:35Z 2026-04-01T12:28:04Z
mal-2026-1161 Malicious code in xpack-sui (npm) 2026-03-03T04:08:34Z 2026-04-01T12:28:04Z
mal-2026-1160 Malicious code in xpack-subscription (npm) 2026-03-03T04:08:34Z 2026-04-01T12:28:04Z
mal-2026-1159 Malicious code in xpack-per-device (npm) 2026-03-03T04:08:34Z 2026-04-01T12:28:04Z
mal-2026-1158 Malicious code in xpack-arc-gateway (npm) 2026-03-03T04:08:35Z 2026-04-01T12:28:04Z
mal-2026-1143 Malicious code in wisecloudsecrets (PyPI) 2026-03-02T18:48:25Z 2026-04-01T12:28:04Z
mal-2026-1142 Malicious code in wisecloudcyberark (PyPI) 2026-03-02T18:48:31Z 2026-04-01T12:28:04Z
mal-2026-1141 Malicious code in identityapi (PyPI) 2026-03-02T18:47:02Z 2026-04-01T12:28:04Z
mal-2026-1140 Malicious code in heimdal-credentials (PyPI) 2026-03-02T18:48:28Z 2026-04-01T12:28:04Z
mal-2026-1139 Malicious code in fwk-amigapython-rest-server (PyPI) 2026-03-02T18:48:10Z 2026-04-01T12:28:04Z
ID Description Published Updated
wid-sec-w-2025-0562 expat: Schwachstelle ermöglicht Denial of Service 2025-03-13T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2025-0500 Django: Schwachstelle ermöglicht Denial of Service 2025-03-06T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2025-0401 ffmpeg: Mehrere Schwachstellen 2025-02-18T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2025-0302 GnuTLS: Schwachstelle ermöglicht Denial of Service 2025-02-09T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2025-0294 libtasn1: Schwachstelle ermöglicht Denial of Service 2025-02-06T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2025-0063 Django: Schwachstelle ermöglicht Denial of Service 2025-01-14T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2024-3609 Django: Mehrere Schwachstellen 2024-12-04T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2024-2044 Django: Mehrere Schwachstellen 2024-09-03T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2024-2040 OpenSSL: Schwachstelle ermöglicht Denial of Service 2024-09-03T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2024-1775 Django: Mehrere Schwachstellen 2024-08-06T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2024-1569 Django: Mehrere Schwachstellen 2024-07-09T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2024-0538 Django: Schwachstelle ermöglicht Denial of Service 2024-03-03T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2024-0306 Django: Schwachstelle ermöglicht Denial of Service 2024-02-06T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2023-2853 Red Hat Enterprise Linux: Mehrere Schwachstellen 2023-11-07T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2023-2571 Django: Schwachstelle ermöglicht Denial of Service 2023-10-04T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2023-2259 Django: Schwachstelle ermöglicht Denial of Service 2023-09-04T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2023-1629 Django: Schwachstelle ermöglicht Denial of Service 2023-07-02T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2023-1203 PostgreSQL: Mehrere Schwachstellen 2023-05-11T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2023-1137 Django: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2023-05-03T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2023-0352 Django: Schwachstelle ermöglicht Denial of Service 2023-02-13T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2023-0262 Django: Schwachstelle ermöglicht Denial of Service 2023-02-01T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2022-0283 GIMP: Schwachstelle ermöglicht Denial of Service 2022-05-17T22:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2026-0002 Moxa NPort: Mehrere Schwachstellen 2026-01-01T23:00:00.000+00:00 2026-01-01T23:00:00.000+00:00
wid-sec-w-2026-0001 Gitea: Schwachstelle ermöglicht Offenlegung von Informationen 2026-01-01T23:00:00.000+00:00 2026-01-01T23:00:00.000+00:00
wid-sec-w-2025-2833 ESRI ArcGIS Server: Mehrere Schwachstellen 2025-12-11T23:00:00.000+00:00 2026-01-01T23:00:00.000+00:00
wid-sec-w-2025-2499 IBM WebSphere Application Server: Schwachstelle ermöglicht Manipulation von Dateien und potenziell Umgehen von Sicherheitsvorkehrungen 2025-11-05T23:00:00.000+00:00 2026-01-01T23:00:00.000+00:00
wid-sec-w-2024-1578 RADIUS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-07-09T22:00:00.000+00:00 2026-01-01T23:00:00.000+00:00
wid-sec-w-2025-2940 Pega Platform: Schwachstelle ermöglicht Codeausführung 2025-12-30T23:00:00.000+00:00 2025-12-30T23:00:00.000+00:00
wid-sec-w-2025-2939 Dell Computer: Mehrere Schwachstellen 2025-12-30T23:00:00.000+00:00 2025-12-30T23:00:00.000+00:00
wid-sec-w-2025-2937 Moxa NPort 5000 Series: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-12-30T23:00:00.000+00:00 2025-12-30T23:00:00.000+00:00
ID Description Published Updated
icsa-15-012-01c CodeWrights GmbH HART Device DTM Vulnerability (Update C) 2015-10-15T06:00:00.000000Z 2025-06-06T22:32:06.053252Z
icsa-15-012-01b CodeWrights GmbH HART DTM Vulnerability (Update B) 2015-10-15T06:00:00.000000Z 2025-06-06T22:31:59.580273Z
icsa-15-012-01a CodeWrights GmbH HART DTM Vulnerability (Update A) 2015-10-15T06:00:00.000000Z 2025-06-06T22:31:53.116696Z
icsa-15-012-01 CodeWrights GmbH HART DTM Vulnerability 2015-10-15T06:00:00.000000Z 2025-06-06T22:31:46.333944Z
icsa-12-129-01 WellinTech KingSCADA Insecure Password Encryption 2012-02-09T07:00:00.000000Z 2025-06-06T21:45:26.636405Z
icsa-12-122-01 WellinTech KingView DLL Hijack Vulnerability 2012-02-02T07:00:00.000000Z 2025-06-06T21:45:20.208792Z
icsa-12-102-05 Siemens Scalance S Multiple Security Vulnerabilities 2012-01-13T07:00:00.000000Z 2025-06-06T21:45:13.758298Z
icsa-12-102-04 Siemens Scalance X Buffer Overflow Vulnerability 2012-01-13T07:00:00.000000Z 2025-06-06T21:45:07.306451Z
icsa-12-102-03 MICROSYS PROMOTIC Use After Free Vulnerability 2012-01-13T07:00:00.000000Z 2025-06-06T21:45:00.844061Z
icsa-12-102-02 Koyo Ecom Modules Vulnerabilities 2012-01-13T07:00:00.000000Z 2025-06-06T21:44:54.405200Z
icsa-12-102-01 Certec atvise webMI2ADS Vulnerabilities 2012-01-13T07:00:00.000000Z 2025-06-06T21:44:47.952815Z
icsa-12-095-01a ABB Multiple Components Buffer Overflow 2012-01-06T07:00:00.000000Z 2025-06-06T21:44:41.492952Z
icsa-12-088-01a Rockwell Automation FactoryTalk RNADiagReceiver 2012-12-30T07:00:00.000000Z 2025-06-06T21:44:35.026913Z
icsa-12-083-01 Ecava IntegraXor ActiveX Directory Traversal 2012-12-25T07:00:00.000000Z 2025-06-06T21:44:28.588784Z
icsa-12-032-02 GE Intelligent Platforms Proficy Plant Applications Memory Corruption Vulnerabilities 2012-11-04T06:00:00.000000Z 2025-06-06T21:44:08.900302Z
icsa-12-032-01 GE Proficy Historian ihDataArchiver 2012-11-04T06:00:00.000000Z 2025-06-06T21:44:02.422128Z
icsa-15-223-01 Schneider Electric IMT25 DTM Vulnerability 2015-05-14T06:00:00.000000Z 2025-06-06T21:43:55.748554Z
icsa-15-211-01 Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Password Storage Vulnerability 2015-05-02T06:00:00.000000Z 2025-06-06T21:43:48.989760Z
icsa-15-202-03b Siemens RUGGEDCOM ROS and ROX-based Devices TLS POODLE Vulnerability (Update B) 2015-04-23T06:00:00.000000Z 2025-06-06T21:43:42.534859Z
icsa-15-195-01 Siemens SICAM MIC Authentication Bypass Vulnerability 2015-04-16T06:00:00.000000Z 2025-06-06T21:43:23.165608Z
icsa-15-181-01 Baxter SIGMA Spectrum Infusion System Vulnerabilities 2015-04-02T06:00:00.000000Z 2025-06-06T21:43:16.616537Z
icsa-15-176-02 PACTware Exceptional Conditions Vulnerability 2015-03-28T06:00:00.000000Z 2025-06-06T21:43:10.139031Z
icsa-15-176-01 Siemens Climatix BACnet/IP Communication Module Cross-site Scripting Vulnerability 2015-03-28T06:00:00.000000Z 2025-06-06T21:43:03.687724Z
icsa-15-174-01 Hospira Symbiq Infusion System Vulnerability 2015-03-26T06:00:00.000000Z 2025-06-06T21:42:57.240178Z
icsa-15-167-01 Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability 2015-03-19T06:00:00.000000Z 2025-06-06T21:42:37.652958Z
icsa-15-162-01a RLE Nova-Wind Turbine HMI Unsecure Credentials Vulnerability (Update A) 2015-03-14T06:00:00.000000Z 2025-06-06T21:42:31.195189Z
icsa-15-160-02 Sinapsi eSolar Light Plaintext Passwords Vulnerability 2015-03-12T06:00:00.000000Z 2025-06-06T21:42:24.744905Z
icsa-15-160-01a N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A) 2015-03-12T06:00:00.000000Z 2025-06-06T21:42:18.275644Z
icsa-15-155-01 XZERES 442SR Wind Turbine CSRF Vulnerability 2015-03-07T07:00:00.000000Z 2025-06-06T21:42:11.814604Z
icsa-15-153-02 Moxa SoftCMS Buffer Overflow Vulnerability 2015-03-05T07:00:00.000000Z 2025-06-06T21:42:05.109005Z
ID Description Published Updated
cisco-sa-wlc-auth-bypass-jrnhv4ff Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-webuiapi-inj-nyrq92od Cisco IOS XE Software Web UI API Injection Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-sdwan-vmanage-csrf-rxql4txr Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-sdwan-vman-infodis-73shjneq Cisco SD-WAN vManage Software Information Disclosure Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-sdwan-vedge-dos-jervm4bb Cisco SD-WAN vEdge Routers Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-sdwan-privesc-vman-tejfpbsl Cisco SD-WAN vManage Software Privilege Escalation Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-qfp-ipsec-gqmqvtqv Cisco IOS XE Software IPSec Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-ncossh-dos-zakfodq8 Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-iosxe-rpki-dos-2egcneke Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-iosxe-priv-esc-grbtubu Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-http-dos-svodkdbs Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-cgr1k-ap-dos-mszr4qvh Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-cdb-cmicr-vulns-kjjftnb Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-c9800-snmp-trap-dos-mjent3ey Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-c9800-fnf-dos-bol5vlge Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-c9800-capwap-mdns-6psn7gku Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-appnav-xe-dos-j5mxtr4 Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-ap-ip-flood-dos-6hxxenvq Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability 2022-04-13T16:00:00+00:00 2022-04-13T16:00:00+00:00
cisco-sa-wsa-stored-xss-xpsjghmy Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-webex-java-mvx6crh9 Cisco Webex Meetings Java Deserialization Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-swa-filter-bypass-xxxtu3x Cisco Web Security Appliance Filter Bypass Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-sna-xss-mca9tqnj Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-info-exp-yxawyp3s Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-esa-snmp-jlajkswk Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability 2022-04-06T16:00:00+00:00 2022-04-06T16:00:00+00:00
cisco-sa-nxos-bfd-dos-wgqxrzxn Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability 2022-02-23T16:00:00+00:00 2022-03-23T15:41:48+00:00
cisco-sa-capic-mdvul-hbsjbuvw Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities 2021-08-25T16:00:00+00:00 2022-03-08T16:52:49+00:00
cisco-sa-capic-frw-nt3ryxr2 Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability 2021-08-25T16:00:00+00:00 2022-03-08T16:52:47+00:00
cisco-sa-ise-dos-jlh9txbp Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability 2022-03-02T16:00:00+00:00 2022-03-03T18:35:40+00:00
cisco-sa-uccsmi-prvesc-bqhge4cm Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability 2022-03-02T16:00:00+00:00 2022-03-02T16:00:00+00:00
cisco-sa-staros-cmdinj-759mnt4n Cisco StarOS Command Injection Vulnerability 2022-03-02T16:00:00+00:00 2022-03-02T16:00:00+00:00
ID Description Published Updated
msrc_cve-2024-35995 ACPI: CPPC: Use access_width over bit_width for system memory accesses 2024-05-02T07:00:00.000Z 2026-03-31T15:12:06.000Z
msrc_cve-2025-37745 PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() 2025-05-02T00:00:00.000Z 2026-03-31T15:12:03.000Z
msrc_cve-2026-23213 drm/amd/pm: Disable MMIO access during SMU Mode 1 reset 2026-02-02T00:00:00.000Z 2026-03-31T15:12:00.000Z
msrc_cve-2024-46749 Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() 2024-09-01T07:00:00.000Z 2026-03-31T15:11:57.000Z
msrc_cve-2025-37920 xsk: Fix race condition in AF_XDP generic RX path 2025-05-02T00:00:00.000Z 2026-03-31T15:11:55.000Z
msrc_cve-2024-56782 ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() 2025-01-02T00:00:00.000Z 2026-03-31T15:11:52.000Z
msrc_cve-2024-35971 net: ks8851: Handle softirqs at the end of IRQ thread to fix hang 2024-05-02T07:00:00.000Z 2026-03-31T15:11:43.000Z
msrc_cve-2023-53254 cacheinfo: Fix shared_cpu_map to handle shared caches at different levels 2025-09-02T00:00:00.000Z 2026-03-31T15:11:40.000Z
msrc_cve-2023-52920 bpf: support non-r10 register spill/fill to/from stack in precision tracking 2024-11-02T00:00:00.000Z 2026-03-31T15:11:40.000Z
msrc_cve-2024-46726 drm/amd/display: Ensure index calculation will not overflow 2024-09-01T07:00:00.000Z 2026-03-31T15:11:33.000Z
msrc_cve-2024-58237 bpf: consider that tail calls invalidate packet pointers 2025-05-02T00:00:00.000Z 2026-03-31T15:11:32.000Z
msrc_cve-2025-21885 RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers 2025-03-02T00:00:00.000Z 2026-03-31T15:11:29.000Z
msrc_cve-2025-39770 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM 2025-09-02T00:00:00.000Z 2026-03-31T15:11:27.000Z
msrc_cve-2024-35951 drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() 2024-05-02T07:00:00.000Z 2026-03-31T15:11:21.000Z
msrc_cve-2024-49968 ext4: filesystems without casefold feature cannot be mounted with siphash 2024-10-01T07:00:00.000Z 2026-03-31T15:11:19.000Z
msrc_cve-2023-53248 drm/amdgpu: install stub fence into potential unused fence pointers 2025-09-02T00:00:00.000Z 2026-03-31T15:11:19.000Z
msrc_cve-2024-56775 drm/amd/display: Fix handling of plane refcount 2025-01-02T00:00:00.000Z 2026-03-31T15:11:16.000Z
msrc_cve-2024-58100 bpf: check changes_pkt_data property for extension programs 2025-05-02T00:00:00.000Z 2026-03-31T15:11:12.000Z
msrc_cve-2025-21714 RDMA/mlx5: Fix implicit ODP use after free 2025-02-02T00:00:00.000Z 2026-03-31T15:11:05.000Z
msrc_cve-2022-50467 scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID 2025-10-02T00:00:00.000Z 2026-03-31T15:11:04.000Z
msrc_cve-2024-50073 tty: n_gsm: Fix use-after-free in gsm_cleanup_mux 2024-10-01T07:00:00.000Z 2026-03-31T15:10:59.000Z
msrc_cve-2024-35939 dma-direct: Leak pages on dma_set_decrypted() failure 2024-05-02T07:00:00.000Z 2026-03-31T15:10:58.000Z
msrc_cve-2023-53247 btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand 2025-09-02T00:00:00.000Z 2026-03-31T15:10:58.000Z
msrc_cve-2024-57804 scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs 2025-01-02T00:00:00.000Z 2026-03-31T15:10:57.000Z
msrc_cve-2024-58098 bpf: track changes_pkt_data property for global functions 2025-05-02T00:00:00.000Z 2026-03-31T15:10:48.000Z
msrc_cve-2024-53201 drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe 2024-12-02T00:00:00.000Z 2026-03-31T15:10:43.000Z
msrc_cve-2026-0716 Libsoup: out-of-bounds read in libsoup websocket frame processing 2026-01-02T00:00:00.000Z 2026-03-31T15:10:42.000Z
msrc_cve-2024-49897 drm/amd/display: Check phantom_stream before it is used 2024-10-01T07:00:00.000Z 2026-03-31T15:10:36.000Z
msrc_cve-2023-52732 ceph: blocklist the kclient when receiving corrupted snap trace 2024-05-02T07:00:00.000Z 2026-03-31T15:10:36.000Z
msrc_cve-2025-21892 RDMA/mlx5: Fix the recovery flow of the UMR QP 2025-03-02T00:00:00.000Z 2026-03-31T15:10:35.000Z
ID Description Published Updated
opensuse-su-2025:15754-1 ansible-core-2.19-2.19.4-1.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:15753-1 ansible-12-12.2.0-1.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:15752-1 act-0.2.82-2.1 on GA media 2025-11-21T00:00:00Z 2025-11-21T00:00:00Z
opensuse-su-2025:20073-1 Security update for alloy 2025-11-20T17:26:16Z 2025-11-20T17:26:16Z
opensuse-su-2025:20072-1 Security update for runc 2025-11-20T16:44:20Z 2025-11-20T16:44:20Z
opensuse-su-2025:20068-1 Security update for poppler 2025-11-20T13:33:03Z 2025-11-20T13:33:03Z
opensuse-su-2025:20076-1 Security update for chromium 2025-11-20T10:12:51Z 2025-11-20T10:12:51Z
opensuse-su-2025:15751-1 libipa_hbac-devel-2.11.1-2.1 on GA media 2025-11-20T00:00:00Z 2025-11-20T00:00:00Z
opensuse-su-2025:15750-1 python313-3.13.9-2.1 on GA media 2025-11-20T00:00:00Z 2025-11-20T00:00:00Z
opensuse-su-2025:15749-1 grub2-2.12-67.1 on GA media 2025-11-20T00:00:00Z 2025-11-20T00:00:00Z
opensuse-su-2025:20065-1 Security update for MozillaFirefox 2025-11-19T16:45:48Z 2025-11-19T16:45:48Z
opensuse-su-2025:20059-1 Security update for ongres-scram 2025-11-19T10:33:44Z 2025-11-19T10:33:44Z
opensuse-su-2025:20056-1 Security update for openexr 2025-11-19T09:45:59Z 2025-11-19T09:45:59Z
opensuse-su-2025:20050-1 Security update for libxslt 2025-11-19T09:40:24Z 2025-11-19T09:40:24Z
opensuse-su-2025:20049-1 Security update for tiff 2025-11-19T09:40:24Z 2025-11-19T09:40:24Z
opensuse-su-2025:20055-1 Security update for expat 2025-11-19T09:37:50Z 2025-11-19T09:37:50Z
opensuse-su-2025:20074-1 Security update for certbot 2025-11-19T09:30:46Z 2025-11-19T09:30:46Z
opensuse-su-2025:15748-1 python314-3.14.0-3.1 on GA media 2025-11-19T00:00:00Z 2025-11-19T00:00:00Z
opensuse-su-2025:15747-1 libeverest-3.6.5-1.1 on GA media 2025-11-19T00:00:00Z 2025-11-19T00:00:00Z
opensuse-su-2025:15746-1 libvirt-11.9.0-2.1 on GA media 2025-11-19T00:00:00Z 2025-11-19T00:00:00Z
opensuse-su-2025:15745-1 chromedriver-142.0.7444.175-1.1 on GA media 2025-11-19T00:00:00Z 2025-11-19T00:00:00Z
opensuse-su-2025:15744-1 amazon-ssm-agent-3.3.3270.0-2.1 on GA media 2025-11-19T00:00:00Z 2025-11-19T00:00:00Z
opensuse-su-2025:20048-1 Security update for samba 2025-11-18T23:14:26Z 2025-11-18T23:14:26Z
opensuse-su-2025:15743-1 sbctl-0.18-2.1 on GA media 2025-11-18T00:00:00Z 2025-11-18T00:00:00Z
opensuse-su-2025:15742-1 python312-3.12.12-2.1 on GA media 2025-11-18T00:00:00Z 2025-11-18T00:00:00Z
opensuse-su-2025:15741-1 libIex-3_4-33-3.4.3-1.1 on GA media 2025-11-18T00:00:00Z 2025-11-18T00:00:00Z
opensuse-su-2025:15740-1 erlang27-27.1.3-1.1 on GA media 2025-11-18T00:00:00Z 2025-11-18T00:00:00Z
opensuse-su-2025:15739-1 itextpdf-5.5.13.4-1.1 on GA media 2025-11-17T00:00:00Z 2025-11-17T00:00:00Z
opensuse-su-2025:15738-1 MozillaThunderbird-140.5.0-1.1 on GA media 2025-11-17T00:00:00Z 2025-11-17T00:00:00Z
opensuse-su-2025:15737-1 teleport-17.7.10-1.1 on GA media 2025-11-14T00:00:00Z 2025-11-14T00:00:00Z
ID Description Published Updated
rhsa-2023:6402 Red Hat Security Advisory: containernetworking-plugins security and bug fix update 2023-11-07T09:01:07+00:00 2026-04-14T07:40:02+00:00
rhsa-2023:6363 Red Hat Security Advisory: skopeo security update 2023-11-07T08:33:26+00:00 2026-04-14T07:40:01+00:00
rhsa-2023:6346 Red Hat Security Advisory: toolbox security and bug fix update 2023-11-07T09:12:30+00:00 2026-04-14T07:40:01+00:00
rhsa-2023:6305 Red Hat Security Advisory: Migration Toolkit for Applications security update 2023-11-06T11:24:51+00:00 2026-04-14T07:40:01+00:00
rhsa-2023:6298 Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.30.2 security update 2023-11-03T08:48:21+00:00 2026-04-14T07:40:00+00:00
rhsa-2023:6296 Red Hat Security Advisory: Release of OpenShift Serverless 1.30.2 2023-11-02T19:16:02+00:00 2026-04-14T07:39:59+00:00
rhsa-2023:6280 Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update 2023-11-02T10:25:06+00:00 2026-04-14T07:39:59+00:00
rhsa-2023:6279 Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.11.5 2023-11-15T01:08:30+00:00 2026-04-14T07:39:58+00:00
rhsa-2023:6276 Red Hat Security Advisory: OpenShift Container Platform 4.12.42 bug fix and security update 2023-11-08T10:40:48+00:00 2026-04-14T07:39:57+00:00
rhsa-2023:6275 Red Hat Security Advisory: OpenShift Container Platform 4.12.42 security and extras update 2023-11-08T10:25:29+00:00 2026-04-14T07:39:57+00:00
rhsa-2023:6272 Red Hat Security Advisory: OpenShift Container Platform 4.11.53 bug fix and security update 2023-11-08T10:41:09+00:00 2026-04-14T07:39:55+00:00
rhsa-2023:6271 Red Hat Security Advisory: OpenShift Container Platform 4.11.53 security and extras update 2023-11-08T09:43:47+00:00 2026-04-14T07:39:55+00:00
rhsa-2023:6269 Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.12.1 2023-11-15T03:12:52+00:00 2026-04-14T07:39:55+00:00
rhsa-2023:6257 Red Hat Security Advisory: OpenShift Container Platform 4.13.21 bug fix and security update 2023-11-08T08:43:21+00:00 2026-04-14T07:39:55+00:00
rhsa-2023:6256 Red Hat Security Advisory: OpenShift Container Platform 4.13.21 security and extras update 2023-11-08T08:40:09+00:00 2026-04-14T07:39:55+00:00
rhsa-2023:6251 Red Hat Security Advisory: OpenShift Virtualization 4.11.7 Images security and bug fix update 2023-11-01T16:14:42+00:00 2026-04-14T07:39:50+00:00
rhsa-2023:6248 Red Hat Security Advisory: OpenShift Virtualization 4.12.8 Images security update 2023-11-01T14:42:20+00:00 2026-04-14T07:39:49+00:00
rhsa-2023:6243 Red Hat Security Advisory: openshift-gitops-kam security update 2023-11-01T14:08:03+00:00 2026-04-14T07:39:48+00:00
rhsa-2023:6233 Red Hat Security Advisory: Red Hat OpenShift Enterprise security update 2023-11-01T11:34:35+00:00 2026-04-14T07:39:48+00:00
rhsa-2023:6240 Red Hat Security Advisory: OpenShift Container Platform 4.13 low-latency extras security update 2023-11-01T13:41:55+00:00 2026-04-14T07:39:47+00:00
rhsa-2023:6235 Red Hat Security Advisory: OpenShift Virtualization 4.13.5 Images security update 2023-11-01T12:04:35+00:00 2026-04-14T07:39:47+00:00
rhsa-2023:6220 Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.10.1 security update 2023-10-31T18:22:09+00:00 2026-04-14T07:39:46+00:00
rhsa-2023:6171 Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update 2023-10-30T11:10:10+00:00 2026-04-14T07:39:45+00:00
rhsa-2023:6179 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update 2023-10-30T13:03:06+00:00 2026-04-14T07:39:44+00:00
rhsa-2023:6217 Red Hat Security Advisory: Red Hat OpenShift Enterprise security update 2023-10-31T14:40:40+00:00 2026-04-14T07:39:43+00:00
rhsa-2023:6202 Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.8 security and bug fix updates 2023-10-30T20:13:48+00:00 2026-04-14T07:39:43+00:00
rhsa-2023:6200 Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.1.9 security updates and bug fixes 2023-10-30T18:15:21+00:00 2026-04-14T07:39:42+00:00
rhsa-2023:6172 Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update 2023-10-30T11:24:00+00:00 2026-04-14T07:39:41+00:00
rhsa-2023:6165 Red Hat Security Advisory: skupper-cli and skupper-router security update 2023-10-30T08:22:15+00:00 2026-04-14T07:39:40+00:00
rhsa-2023:6161 Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.14 security and bug fix update 2023-10-30T02:16:18+00:00 2026-04-14T07:39:36+00:00
ID Description Published Updated
suse-su-2026:0847-1 Security update for libsoup 2026-03-07T01:34:36Z 2026-03-07T01:34:36Z
suse-su-2026:0846-1 Security update for python-Markdown 2026-03-06T17:04:39Z 2026-03-06T17:04:39Z
suse-su-2026:20682-1 Security update for ucode-intel 2026-03-06T13:29:07Z 2026-03-06T13:29:07Z
suse-su-2026:20708-1 Security update for gnutls 2026-03-06T12:11:09Z 2026-03-06T12:11:09Z
suse-su-2026:20707-1 Security update for libxslt, libxml2 2026-03-06T11:53:41Z 2026-03-06T11:53:41Z
suse-su-2026:20657-1 Security update for libxslt, libxml2 2026-03-06T11:37:27Z 2026-03-06T11:37:27Z
suse-su-2026:0840-1 Security update for grpc 2026-03-06T11:36:18Z 2026-03-06T11:36:18Z
suse-su-2026:20656-1 Security update for docker-compose 2026-03-06T11:34:20Z 2026-03-06T11:34:20Z
suse-su-2026:0838-1 Security update for python-tornado 2026-03-06T08:15:16Z 2026-03-06T08:15:16Z
suse-su-2026:0834-1 Security update for libsoup2 2026-03-05T20:00:24Z 2026-03-05T20:00:24Z
suse-su-2026:0833-1 Security update for libsoup 2026-03-05T19:55:51Z 2026-03-05T19:55:51Z
suse-su-2026:0832-1 Security update for qemu 2026-03-05T16:38:47Z 2026-03-05T16:38:47Z
suse-su-2026:20686-1 Security update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer 2026-03-05T15:55:51Z 2026-03-05T15:55:51Z
suse-su-2026:0831-1 Security update for openvpn 2026-03-05T15:18:06Z 2026-03-05T15:18:06Z
suse-su-2026:0830-1 Security update for ocaml 2026-03-05T15:17:30Z 2026-03-05T15:17:30Z
suse-su-2026:0829-1 Security update for gnutls 2026-03-05T15:17:09Z 2026-03-05T15:17:09Z
suse-su-2026:0828-1 Security update for python-Authlib 2026-03-05T15:16:58Z 2026-03-05T15:16:58Z
suse-su-2026:0827-1 Security update for glibc-livepatches 2026-03-05T15:16:49Z 2026-03-05T15:16:49Z
suse-su-2026:0826-1 Security update for expat 2026-03-05T15:16:40Z 2026-03-05T15:16:40Z
suse-su-2026:0825-1 Security update for php-composer2 2026-03-05T15:16:16Z 2026-03-05T15:16:16Z
suse-su-2026:0824-1 Security update for openCryptoki 2026-03-05T15:16:07Z 2026-03-05T15:16:07Z
suse-su-2026:20685-1 Security update for helm 2026-03-05T14:28:21Z 2026-03-05T14:28:21Z
suse-su-2026:20655-1 Security update for python-cryptography 2026-03-05T14:25:02Z 2026-03-05T14:25:02Z
suse-su-2026:20684-1 Security update for virtiofsd 2026-03-05T14:24:46Z 2026-03-05T14:24:46Z
suse-ru-2026:20683-1 Recommended update for shim 2026-03-05T14:21:04Z 2026-03-05T14:21:04Z
suse-su-2026:20706-1 Security update for python-cryptography 2026-03-05T13:08:52Z 2026-03-05T13:08:52Z
suse-su-2026:0821-1 Security update for python-Django 2026-03-05T11:43:12Z 2026-03-05T11:43:12Z
suse-su-2026:20705-1 Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) 2026-03-05T11:13:05Z 2026-03-05T11:13:05Z
suse-su-2026:20681-1 Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) 2026-03-05T11:13:05Z 2026-03-05T11:13:05Z
suse-su-2026:20704-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0) 2026-03-05T11:11:45Z 2026-03-05T11:11:45Z
ID Description Published Updated
alsa-2025:3262 Moderate: nginx:1.24 security update 2025-03-26T00:00:00Z 2025-07-24T13:36:44Z
alsa-2025:10854 Important: kernel security update 2025-07-14T00:00:00Z 2025-07-24T10:26:09Z
alsa-2025:11533 Important: git security update 2025-07-22T00:00:00Z 2025-07-24T09:25:29Z
alsa-2025:11537 Important: sudo security update 2025-07-22T00:00:00Z 2025-07-24T09:20:42Z
alsa-2025:11534 Important: git security update 2025-07-22T00:00:00Z 2025-07-23T08:07:31Z
alsa-2025:11411 Important: kernel security update 2025-07-21T00:00:00Z 2025-07-23T07:42:35Z
alsa-2025:11456 Moderate: kernel-rt security update 2025-07-21T00:00:00Z 2025-07-23T07:31:24Z
alsa-2025:10848 Important: cloud-init security update 2025-07-14T00:00:00Z 2025-07-22T13:36:59Z
alsa-2025:11463 Moderate: fence-agents security update 2025-07-21T00:00:00Z 2025-07-22T13:35:00Z
alsa-2025:11462 Important: git security update 2025-07-21T00:00:00Z 2025-07-22T10:34:40Z
alsa-2025:11332 Important: tomcat9 security update 2025-07-16T00:00:00Z 2025-07-21T10:03:39Z
alsa-2025:10862 Important: java-1.8.0-openjdk security update 2025-07-17T00:00:00Z 2025-07-21T09:43:41Z
alsa-2025:10844 Important: cloud-init security update 2025-07-14T00:00:00Z 2025-07-18T06:52:34Z
alsa-2025:11066 Moderate: glibc security update 2025-07-15T00:00:00Z 2025-07-18T06:49:51Z
alsa-2025:11335 Important: tomcat security update 2025-07-16T00:00:00Z 2025-07-17T08:49:49Z
alsa-2025:10837 Moderate: kernel security update 2025-07-14T00:00:00Z 2025-07-17T08:21:12Z
alsa-2025:11333 Important: tomcat security update 2025-07-16T00:00:00Z 2025-07-17T08:17:04Z
alsa-2025:11327 Moderate: glib2 security update 2025-07-16T00:00:00Z 2025-07-17T08:13:56Z
alsa-2025:11324 Important: cloud-init security update 2025-07-16T00:00:00Z 2025-07-17T08:11:16Z
alsa-2025:10867 Important: java-17-openjdk security update 2025-07-15T00:00:00Z 2025-07-16T12:49:47Z
alsa-2025:11140 Moderate: glib2 security update 2025-07-15T00:00:00Z 2025-07-16T12:44:37Z
alsa-2025:11299 Moderate: kernel-rt security update 2025-07-16T00:00:00Z 2025-07-16T12:42:40Z
alsa-2025:11298 Moderate: kernel security update 2025-07-16T00:00:00Z 2025-07-16T12:39:32Z
alsa-2025:11044 Moderate: python3.12-setuptools security update 2025-07-15T00:00:00Z 2025-07-16T08:04:17Z
alsa-2025:11043 Moderate: python3.11-setuptools security update 2025-07-15T00:00:00Z 2025-07-16T08:02:22Z
alsa-2025:11042 Moderate: socat security update 2025-07-15T00:00:00Z 2025-07-16T08:00:21Z
alsa-2025:11030 Moderate: emacs security update 2025-07-15T00:00:00Z 2025-07-16T07:58:14Z
alsa-2025:10991 Moderate: microcode_ctl security update 2025-07-14T00:00:00Z 2025-07-16T07:55:26Z
alsa-2025:10672 Moderate: go-toolset:rhel8 security update 2025-07-09T00:00:00Z 2025-07-11T09:05:26Z
alsa-2025:10676 Moderate: golang security update 2025-07-09T00:00:00Z 2025-07-10T22:02:04Z
ID Description Published Updated
osv-2023-1365 Heap-use-after-free in xmlStaticCopyNode 2023-12-28T00:07:29.258949Z 2023-12-28T00:07:29.259296Z
osv-2023-1364 Heap-buffer-overflow in processClientServerHello 2023-12-28T00:01:38.624999Z 2023-12-28T00:01:38.625414Z
osv-2023-1361 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2023-12-27T00:01:27.841254Z 2023-12-27T00:01:27.841623Z
osv-2023-1360 Heap-buffer-overflow in NetworkInterface::dissectPacket 2023-12-27T00:00:10.846266Z 2023-12-27T00:00:10.846829Z
osv-2023-1358 Heap-buffer-overflow in js_free_function_def 2023-12-26T00:04:18.300258Z 2023-12-26T00:04:18.300779Z
osv-2023-1357 Heap-buffer-overflow in processClientServerHello 2023-12-25T00:13:45.414227Z 2023-12-25T00:13:45.414669Z
osv-2023-1356 Heap-buffer-overflow in rawspeed::DngDecoder::parseWhiteBalance 2023-12-25T00:10:36.482844Z 2023-12-25T00:10:36.483166Z
osv-2023-1354 Heap-buffer-overflow in processClientServerHello 2023-12-25T00:03:08.530303Z 2023-12-25T00:03:08.530510Z
osv-2023-1353 Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields 2023-12-25T00:03:02.003193Z 2023-12-25T00:03:02.003829Z
osv-2023-1352 Heap-buffer-overflow in Flow::dissectMDNS 2023-12-24T00:05:23.975196Z 2023-12-24T00:05:23.975551Z
osv-2023-756 Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal 2023-08-28T14:02:10.741602Z 2023-12-23T14:16:41.470280Z
osv-2022-896 Segv on unknown address in Sass::unifyComplex 2022-09-15T00:02:01.621945Z 2023-12-22T14:15:53.864807Z
osv-2021-508 Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs 2021-03-09T00:02:18.581527Z 2023-12-22T14:10:14.701082Z
osv-2020-1420 Bad-cast to Sass::PreValue from Sass::Unary_Expression 2020-07-28T00:00:14.887375Z 2023-12-22T14:07:59.765838Z
osv-2020-862 Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext 2020-07-14T22:13:48.731457Z 2023-12-22T14:06:49.113213Z
osv-2023-1343 Heap-buffer-overflow in _libssh2_kex_agree_instr 2023-12-22T00:10:36.346763Z 2023-12-22T00:10:36.347283Z
osv-2023-276 Heap-use-after-free in aiScene::~aiScene 2023-04-04T14:01:47.666563Z 2023-12-21T14:16:54.547364Z
osv-2023-736 Heap-buffer-overflow in HeifContext::interpret_heif_file 2023-08-25T14:00:14.487219Z 2023-12-20T14:12:01.243209Z
osv-2023-1327 Security exception in com.github.javaparser.CommentsInserter.insertComments 2023-12-18T00:10:41.666920Z 2023-12-18T00:10:41.667465Z
osv-2023-1325 UNKNOWN WRITE in zero 2023-12-18T00:04:49.365880Z 2023-12-18T00:04:49.366308Z
osv-2023-1324 Heap-use-after-free in memory_bclose 2023-12-18T00:03:27.139777Z 2023-12-18T00:03:27.140220Z
osv-2023-1320 Heap-use-after-free in memory_bstat 2023-12-17T00:12:41.223755Z 2023-12-17T00:12:41.224161Z
osv-2023-1315 Heap-use-after-free in htmlParseDocument 2023-12-17T00:02:06.164794Z 2023-12-17T00:02:06.165194Z
osv-2023-42 Heap-buffer-overflow in bit_read_BB 2023-02-02T13:00:40.999896Z 2023-12-16T14:20:07.644053Z
osv-2023-1303 Heap-use-after-free in htmlCurrentChar 2023-12-15T00:00:06.313566Z 2023-12-15T00:00:06.314002Z
osv-2023-1302 Global-buffer-overflow in pcre_get_compiled_regex_cache_ex 2023-12-14T00:13:52.791976Z 2023-12-14T00:13:52.792479Z
osv-2023-1301 Global-buffer-overflow in xmlDictLookupInternal 2023-12-14T00:13:26.532719Z 2023-12-14T00:13:26.533280Z
osv-2023-1300 Security exception in com.fasterxml.jackson.core.JsonParser.currentName 2023-12-14T00:13:10.208981Z 2023-12-14T00:13:10.209415Z
osv-2023-1299 Global-buffer-overflow in pcre_get_compiled_regex_cache_ex 2023-12-14T00:12:13.097305Z 2023-12-14T00:12:13.097842Z
osv-2023-1298 Heap-buffer-overflow in loongarch_split_args_by_comma 2023-12-14T00:10:40.133892Z 2023-12-14T00:10:40.134313Z
ID Description Published Updated
rustsec-2019-0005 Format string vulnerabilities in `pancurses` 2019-06-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0004 Failure to properly verify ed25519 signatures makes any signature valid 2019-05-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0003 Out of Memory in stream::read_raw_bytes_into() 2019-06-08T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0002 Bug in SliceDeque::move_head_unchecked corrupts its memory 2019-05-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0001 Uncontrolled recursion leads to abort in HTML serialization 2019-04-27T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0022 Use of uninitialized memory in temporary 2018-08-22T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0021 Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods 2018-06-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0019 Multiple memory safety issues 2018-06-08T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0018 smallvec creates uninitialized value of any type 2018-09-25T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0013 Vec-to-vec transmutations could lead to heap overflow/corruption 2018-11-27T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0012 Flaw in streaming state reset() functions can create incorrect results. 2018-12-20T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0011 Enum repr causing potential memory corruption 2018-12-18T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0010 Use after free in CMS Signing 2018-06-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0009 MsQueue and SegQueue suffer from double-free 2018-12-09T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0008 Bug in SliceDeque::move_head_unchecked allows read of corrupted memory 2018-12-05T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0007 Stack overflow when parsing malicious DNS packet 2018-10-09T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0006 Uncontrolled recursion leads to abort in deserialization 2018-09-17T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0005 Uncontrolled recursion leads to abort in deserialization 2018-09-17T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0004 Malicious input could cause uninitialized memory to be exposed 2018-08-25T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0003 Possible double free during unwinding in SmallVec::insert_many 2018-07-19T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0002 Links in archives can overwrite any existing file 2018-06-29T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0001 An integer underflow could lead to panic 2018-06-21T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2017-0006 Unchecked vector pre-allocation 2017-11-21T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2017-0005 Large cookie Max-Age values can cause a denial of service 2017-05-06T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2017-0004 Integer overflow leads to heap-based buffer overflow in encode_config_buf 2017-05-03T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2017-0003 Hostname verification skipped when custom root certs used 2017-03-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2017-0002 headers containing newline characters can split messages 2017-01-23T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2017-0001 scalarmult() vulnerable to degenerate public keys 2017-01-26T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2016-0003 HTTP download and execution allows MitM RCE 2016-08-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2016-0002 HTTPS MitM vulnerability due to lack of hostname verification 2016-05-09T12:00:00Z 2023-06-13T13:10:24Z
ID Description Published Updated
bit-parse-2025-68150 Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter 2025-12-18T11:46:18.950Z 2026-01-08T18:07:34.629Z
bit-parse-2025-68115 Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables 2025-12-18T11:46:17.211Z 2026-01-08T18:07:34.629Z
bit-parse-2025-67727 Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management 2025-12-18T11:46:15.637Z 2026-01-08T18:07:34.629Z
bit-parse-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details 2025-11-12T11:45:03.650Z 2026-01-08T18:07:34.629Z
bit-openldap-2021-27212 2024-03-06T11:00:07.978Z 2026-01-08T18:07:34.629Z
bit-mongodb-2025-13644 MongoDB may be susceptible to Invariant Failure due to batched delete 2025-12-12T11:19:13.963Z 2026-01-08T18:07:34.629Z
bit-mongodb-2025-13643 MongoDB Server may allow queries to be terminated by unauthorized users 2025-12-12T11:19:08.903Z 2026-01-08T18:07:34.629Z
bit-mastodon-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels 2025-10-15T08:44:06.235Z 2026-01-08T18:07:34.629Z
bit-mastodon-2025-62175 Mastodon streaming API fails to disconnect disabled and suspended users 2025-10-15T08:44:04.530Z 2026-01-08T18:07:34.629Z
bit-mastodon-2025-62174 Mastodon allows continued access after password reset via CLI 2025-10-15T08:44:02.890Z 2026-01-08T18:07:34.629Z
bit-lua-2020-24370 2024-03-06T10:56:50.799Z 2026-01-08T18:07:34.629Z
bit-kyverno-2025-46342 Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements 2025-09-12T11:43:04.352Z 2026-01-08T18:07:34.629Z
bit-kyverno-2025-29778 Kyverno ignores subjectRegExp and IssuerRegExp 2025-09-12T11:43:02.825Z 2026-01-08T18:07:34.629Z
bit-wordpress-2024-31210 PHP file upload bypass via Plugin installer 2024-04-06T18:33:59.181Z 2026-01-08T12:08:29.041Z
bit-php-2025-14180 NULL Pointer Dereference in PDO quoting 2026-01-08T11:48:33.482Z 2026-01-08T12:08:29.041Z
bit-php-2025-14177 Information Leak of Memory in getimagesize 2026-01-08T11:48:30.537Z 2026-01-08T12:08:29.041Z
bit-libphp-2025-14180 NULL Pointer Dereference in PDO quoting 2026-01-08T11:43:29.868Z 2026-01-08T12:08:29.041Z
bit-libphp-2025-14177 Information Leak of Memory in getimagesize 2026-01-08T11:43:26.820Z 2026-01-08T12:08:29.041Z
bit-composer-2025-67746 Composer vulnerable to ANSI sequence injection 2026-01-08T11:35:54.533Z 2026-01-08T12:08:29.041Z
bit-gitea-2025-69413 2026-01-07T12:00:07.972Z 2026-01-07T12:31:01.344Z
bit-git-2024-32020 Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will 2024-05-24T07:18:47.345Z 2026-01-07T12:31:01.344Z
bit-git-2024-32004 Git vulnerable to Remote Code Execution while cloning special-crafted local repositories 2024-05-24T07:19:02.349Z 2026-01-07T12:31:01.344Z
bit-wordpress-2024-4439 2024-05-14T07:38:44.185Z 2026-01-06T12:06:51.467Z
bit-git-2024-32465 Git's protections for cloning untrusted repositories can be bypassed 2024-05-24T07:18:19.848Z 2026-01-06T12:06:51.467Z
bit-git-2024-32021 Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory 2024-05-24T07:18:34.045Z 2026-01-06T12:06:51.467Z
bit-wordpress-2024-31211 Remote Code Execution in `WP_HTML_Token` 2024-04-06T18:33:49.785Z 2026-01-03T12:07:32.193Z
bit-pytorch-2025-63396 2026-01-03T11:47:28.014Z 2026-01-03T12:07:32.193Z
bit-gitea-2025-68942 2026-01-03T11:37:48.385Z 2026-01-03T12:07:32.193Z
bit-gitea-2025-68941 2026-01-03T11:37:46.756Z 2026-01-03T12:07:32.193Z
bit-gitea-2025-68940 2026-01-03T11:37:45.335Z 2026-01-03T12:07:32.193Z
ID Description Updated
ID Description Published Updated
certfr-2025-avi-0776 Multiples vulnérabilités dans GitLab 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0775 Multiples vulnérabilités dans Curl 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0774 Vulnérabilité dans Liferay 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0773 Multiples vulnérabilités dans les produits Fortinet 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0772 Vulnérabilité dans les points d'accès Sophos AP6 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0771 Multiples vulnérabilités dans Xen 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0770 Multiples vulnérabilités dans les produits Adobe 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0769 Multiples vulnérabilités dans Google Chrome 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0768 Multiples vulnérabilités dans les produits Ivanti 2025-09-10T00:00:00.000000 2025-09-10T00:00:00.000000
certfr-2025-avi-0767 Vulnérabilité dans les produits Adobe 2025-09-09T00:00:00.000000 2025-09-09T00:00:00.000000
certfr-2025-avi-0765 Multiples vulnérabilités dans les produits Siemens 2025-09-09T00:00:00.000000 2025-09-09T00:00:00.000000
certfr-2025-avi-0764 Multiples vulnérabilités dans les produits SAP 2025-09-09T00:00:00.000000 2025-09-09T00:00:00.000000
certfr-2025-avi-0763 Vulnérabilité dans Spring Cloud Gateway 2025-09-09T00:00:00.000000 2025-09-09T00:00:00.000000
certfr-2025-avi-0762 Vulnérabilité dans SPIP 2025-09-08T00:00:00.000000 2025-09-08T00:00:00.000000
certfr-2025-avi-0761 Multiples vulnérabilités dans Microsoft Edge 2025-09-08T00:00:00.000000 2025-09-08T00:00:00.000000
certfr-2025-avi-0760 Multiples vulnérabilités dans les produits IBM 2025-09-05T00:00:00.000000 2025-09-05T00:00:00.000000
certfr-2025-avi-0759 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-09-05T00:00:00.000000 2025-09-05T00:00:00.000000
certfr-2025-avi-0758 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-09-05T00:00:00.000000 2025-09-05T00:00:00.000000
certfr-2025-avi-0757 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-09-05T00:00:00.000000 2025-09-05T00:00:00.000000
certfr-2025-avi-0756 Multiples vulnérabilités dans les produits VMware 2025-09-05T00:00:00.000000 2025-09-05T00:00:00.000000
certfr-2025-avi-0755 Vulnérabilité dans les produits Synology 2025-09-05T00:00:00.000000 2025-09-05T00:00:00.000000
certfr-2025-avi-0754 Multiples vulnérabilités dans les produits VMware 2025-09-04T00:00:00.000000 2025-09-04T00:00:00.000000
certfr-2025-avi-0753 Vulnérabilité dans Shibboleth Service Provider 2025-09-04T00:00:00.000000 2025-09-04T00:00:00.000000
certfr-2025-avi-0752 Multiples vulnérabilités dans Google Pixel 2025-09-04T00:00:00.000000 2025-09-04T00:00:00.000000
certfr-2025-avi-0751 Multiples vulnérabilités dans les produits VMware 2025-09-03T00:00:00.000000 2025-09-03T00:00:00.000000
certfr-2025-avi-0750 Multiples vulnérabilités dans Google Android 2025-09-03T00:00:00.000000 2025-09-03T00:00:00.000000
certfr-2025-avi-0749 Multiples vulnérabilités dans Google Chrome 2025-09-03T00:00:00.000000 2025-09-03T00:00:00.000000
certfr-2025-avi-0748 Vulnérabilité dans les produits Liferay 2025-09-02T00:00:00.000000 2025-09-02T00:00:00.000000
certfr-2025-avi-0747 Multiples vulnérabilités dans les produits Qnap 2025-09-01T00:00:00.000000 2025-09-01T00:00:00.000000
certfr-2025-avi-0746 Multiples vulnérabilités dans les produits IBM 2025-08-29T00:00:00.000000 2025-08-29T00:00:00.000000
ID Description Published Updated
jvndb-2022-000011 HPE Agentless Management registers unquoted service paths 2022-02-09T15:49+09:00 2022-02-09T15:49+09:00
jvndb-2022-001299 Cross-site Scripting Vulnerability in JP1/IT Desktop Management 2 2022-02-08T17:15+09:00 2022-02-08T17:15+09:00
jvndb-2022-000009 CSV+ vulnerable to cross-site scripting 2022-02-08T16:33+09:00 2022-02-08T16:33+09:00
jvndb-2022-000010 Multiple vulnerabilities in multiple ELECOM LAN routers 2022-02-08T16:13+09:00 2022-02-08T16:13+09:00
jvndb-2016-008013 Multiple ESET products for macOS vulnerable to improper server certificate verification 2022-02-07T14:18+09:00 2022-02-07T14:18+09:00
jvndb-2022-000007 Multiple vulnerabilities in TransmitMail 2022-01-25T15:31+09:00 2022-01-25T15:31+09:00
jvndb-2022-001097 Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux 2022-01-25T13:35+09:00 2022-01-25T13:35+09:00
jvndb-2022-001087 GROWI vulnerable to authorization bypass through user-controlled key 2022-01-24T14:07+09:00 2022-01-24T14:07+09:00
jvndb-2022-000006 Multiple cross-site scripting vulnerabilities in php_mailform 2022-01-20T15:42+09:00 2022-01-20T15:42+09:00
jvndb-2022-000001 Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting 2022-01-19T14:00+09:00 2022-01-19T14:00+09:00
jvndb-2022-000005 PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption 2022-01-13T15:26+09:00 2022-01-13T15:26+09:00
jvndb-2022-000004 Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials 2022-01-13T15:21+09:00 2022-01-13T15:21+09:00
jvndb-2022-000003 Jimoty App for Android uses a hard-coded API key for an external service 2022-01-12T15:37+09:00 2022-01-12T15:37+09:00
jvndb-2022-000002 Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" 2022-01-12T15:33+09:00 2022-01-12T15:33+09:00
jvndb-2021-006117 Multiple vulnerabilities in IDEC PLCs 2021-12-27T16:54+09:00 2022-01-11T16:36+09:00
jvndb-2021-006146 Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems 2021-12-28T11:51+09:00 2021-12-28T11:51+09:00
jvndb-2021-006026 TP-Link TL-WR802N V4(JP) vulnerable to OS command injection 2021-12-24T15:31+09:00 2021-12-24T15:31+09:00
jvndb-2021-005998 Multiple vulnerabilities in QNAP VioStar NVR 2021-12-24T10:58+09:00 2021-12-24T10:58+09:00
jvndb-2021-003929 Multiple vulnerabilities in multiple Yamaha routers 2021-12-24T10:51+09:00 2021-12-24T10:51+09:00
jvndb-2021-000112 Android Apps developed using Yappli fails to restrict custom URL schemes properly 2021-12-22T15:07+09:00 2021-12-22T15:07+09:00
jvndb-2021-000111 Multiple vulnerabilities in GroupSession 2021-12-20T14:53+09:00 2021-12-21T14:20+09:00
jvndb-2021-000022 Multiple vulnerabilities in Cybozu Office 2021-03-15T15:56+09:00 2021-12-17T17:51+09:00
jvndb-2021-000093 Movable Type XMLRPC API vulnerable to OS command injection 2021-10-20T17:38+09:00 2021-12-17T17:36+09:00
jvndb-2021-000110 UNIVERGE DT Series vulnerable to missing encryption of sensitive data 2021-12-17T16:57+09:00 2021-12-17T16:57+09:00
jvndb-2021-005174 Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer) 2021-12-09T13:43+09:00 2021-12-09T13:43+09:00
jvndb-2021-000107 Wi-Fi STATION SH-52A vulnerable to cross-site scripting 2021-11-30T14:49+09:00 2021-11-30T14:49+09:00
jvndb-2021-004716 Trend Micro Antivirus for MAC vulnerable to improper access controls 2021-11-29T13:52+09:00 2021-11-29T13:52+09:00
jvndb-2021-000106 Multiple vulnerabilities in baserCMS 2021-11-26T14:59+09:00 2021-11-26T14:59+09:00
jvndb-2021-000104 WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery 2021-11-25T14:31+09:00 2021-11-25T14:31+09:00
jvndb-2021-004432 Multiple Vulnerabilities in JP1/Automatic Operation 2021-11-22T16:10+09:00 2021-11-22T16:10+09:00
ID Description Published Updated
cnvd-2026-12772 WordPress插件Uncanny Automator信息泄露漏洞 2025-11-25 2026-03-06
cnvd-2026-12770 WordPress插件Web Accessibility by accessiBe信息泄露漏洞 2026-03-02 2026-03-06
cnvd-2026-12769 WordPress插件Simple Ajax Chat信息泄露漏洞 2026-03-02 2026-03-06
cnvd-2026-12768 WordPress插件Context Blog信息泄露漏洞 2026-03-02 2026-03-06
cnvd-2026-12767 D-Link DWR-M960 formDdns文件缓冲区溢出漏洞 2026-03-02 2026-03-06
cnvd-2026-12766 Huawei EMUI和Huawei HarmonyOS通信模块地址读取漏洞 2026-02-11 2026-03-06
cnvd-2026-12765 Huawei EMUI和Huawei HarmonyOS AMS模块权限控制类漏洞 2026-02-11 2026-03-06
cnvd-2026-12764 Huawei HarmonyOS HDC模块缓冲区溢出漏洞 2026-02-11 2026-03-06
cnvd-2026-12763 Google Chrome缓冲区溢出漏洞(CNVD-2026-12763) 2026-03-02 2026-03-06
cnvd-2026-12697 Adobe Substance 3D Stager‌存在越界写入漏洞(CNVD-2026-12697) 2026-03-02 2026-03-05
cnvd-2026-12687 IBM PowerVM Hypervisor存在未明漏洞 2026-02-11 2026-03-05
cnvd-2026-12685 IBM Concert存在信息泄露漏洞 2026-02-11 2026-03-05
cnvd-2026-12684 Cisco NX-OS Software操作系统命令注入漏洞 2025-09-09 2026-03-05
cnvd-2026-12683 Cisco IOS XE Software跨站脚本漏洞 2025-09-28 2026-03-05
cnvd-2026-12682 Cisco IOS XE Software代码问题漏洞 2025-09-28 2026-03-05
cnvd-2026-12681 Cisco Unified Contact Center Express代码问题漏洞 2025-11-10 2026-03-05
cnvd-2026-12680 Cisco Unified Contact Center Express路径遍历漏洞 2025-11-10 2026-03-05
cnvd-2026-12679 Cisco Unified Contact Center Express代码问题漏洞 2025-11-10 2026-03-05
cnvd-2026-12678 Cisco Unified Contact Center Express代码问题漏洞 2025-11-10 2026-03-05
cnvd-2026-12677 Cisco Catalyst Center操作系统命令注入漏洞 2025-11-28 2026-03-05
cnvd-2026-12676 Cisco Catalyst Center跨站脚本漏洞 2025-11-28 2026-03-05
cnvd-2026-12675 Cisco Catalyst Center Virtual Appliance输入验证错误漏洞 2025-11-28 2026-03-05
cnvd-2026-12674 Cisco Identity Services Engine跨站脚本漏洞(CNVD-2026-12674) 2026-02-04 2026-03-05
cnvd-2026-12673 Cisco Meeting Management(CMM)代码问题漏洞 2026-02-06 2026-03-05
cnvd-2026-12672 IBM Cloud Pak for Business Automation存在XSS漏洞 2026-02-11 2026-03-05
cnvd-2026-12671 IBM Concert存在弱密码算法漏洞 2026-02-11 2026-03-05
cnvd-2026-12670 IBM Cloud Pak for Business Automation存在拒绝服务漏洞 2026-02-11 2026-03-05
cnvd-2026-12669 IBM Business Automation Workflow containers和IBM Business Automation Workflow traditional存… 2026-02-11 2026-03-05
cnvd-2026-12668 IBM webMethods Integration Server存在HTML注入漏洞 2026-03-02 2026-03-05
cnvd-2026-12667 IBM Sterling B2B Integrator和IBM Sterling File Gateway存在信息泄露漏洞 2026-03-02 2026-03-05
ID Description Published Updated
bdu:2025-07122 Уязвимость компонента romfs загрузчика операционных систем Grub2, позволяющая нарушителю … 20.06.2025 16.02.2026
bdu:2025-07119 Уязвимость компонента hfs загрузчика операционных систем Grub2, позволяющая нарушителю вы… 20.06.2025 16.02.2026
bdu:2025-07116 Уязвимость компонента fs Filesystem Handler загрузчика операционных систем Grub2, позволя… 20.06.2025 16.02.2026
bdu:2025-07084 Уязвимость библиотеки libblockdev, связанная с возможностью монтирования файловой системы… 07.08.2025 16.02.2026
bdu:2025-07022 Уязвимость функции RRChangeProviderProperty() сервера X Window System Xorg-server, позвол… 19.06.2025 16.02.2026
bdu:2025-07020 Уязвимость функции RecordSanityCheckRegisterClients() сервера X Window System Xorg-server… 19.06.2025 16.02.2026
bdu:2025-06968 Уязвимость JBIG2Bitmap::combine() библиотеки для отображения PDF-файлов Poppler, позволяю… 19.06.2025 16.02.2026
bdu:2025-06803 Уязвимость функции net_dm_monitor_start() ядра операционной системы Linux, позволяющая на… 16.06.2025 16.02.2026
bdu:2025-06694 Уязвимость службы systemd-coredump демона Systemd, позволяющая нарушителю оказать воздейс… 13.06.2025 16.02.2026
bdu:2025-06686 Уязвимость функции jv_string_vfmt функционального языка программирования jq, позволяющая … 13.06.2025 16.02.2026
bdu:2025-06570 Уязвимость функции sample_conv_regsub серверного программного обеспечения HAProxy, связан… 09.06.2025 16.02.2026
bdu:2025-06564 Уязвимость функции xmlSchemaIDCFillNodeTables() файла xmlschemas.c библиотеки libxml2, по… 09.06.2025 16.02.2026
bdu:2025-06562 Уязвимость компилятора инструмента для html-шаблонизации jinja, связанная с непринятием м… 09.06.2025 16.02.2026
bdu:2025-06494 Уязвимость функции TarFile.extractall() и TarFile.extract() модуля tarfile интерпретатора… 09.06.2025 16.02.2026
bdu:2025-06490 Уязвимость модуля net/sched/sch_hfsc.c ядра операционной системы Linux, позволяющая наруш… 06.06.2025 16.02.2026
bdu:2025-06438 Уязвимость функций xmlSchemaIDCFillNodeTables, xmlSchemaBubbleIDCNodeTables (xmlschemas.c… 05.06.2025 16.02.2026
bdu:2025-06411 Уязвимость функции sqlite3_db_config() файла sqlite3.c системы управления базами данных S… 05.06.2025 16.02.2026
bdu:2025-06312 Уязвимость функции krb_authenticate() модуля fs/smb/server/smb2pdu.c ядра операционной си… 03.06.2025 16.02.2026
bdu:2025-06251 Уязвимость библиотеки h11, связанная с недостатками обработки HTTP-запросов, позволяющая … 02.06.2025 16.02.2026
bdu:2025-06078 Уязвимость библиотеки для отображения PDF-файлов Poppler, связанная с чтением за границам… 28.05.2025 16.02.2026
bdu:2025-06077 Уязвимость библиотеки для отображения PDF-файлов Poppler, связанная с целочисленным переп… 28.05.2025 16.02.2026
bdu:2025-06076 Уязвимость компонента adbe.pkcs7.sha1 библиотеки для отображения PDF-файлов Poppler, позв… 28.05.2025 16.02.2026
bdu:2025-06050 Уязвимость функции php_request_shutdown интерпретатора языка программирования PHP, позвол… 28.05.2025 16.02.2026
bdu:2025-06026 Уязвимость функции smb2_sess_setup модуля fs/smb/server/smb2pdu.c компонента ksmbd ядра о… 27.05.2025 16.02.2026
bdu:2025-05975 Уязвимость функции overflow_allocation_test() ядра операционной системы Linux, позволяюща… 26.05.2025 16.02.2026
bdu:2025-05974 Уязвимость функции amdgpu_dm_initialize_drm_device() драйвера поддержки инфраструктуры пр… 26.05.2025 16.02.2026
bdu:2025-05922 Уязвимость функции dcn315_populate_dml_pipes_from_context() драйвера поддержки инфраструк… 23.05.2025 16.02.2026
bdu:2025-05918 Уязвимость функции btrfs_lookup_extent_info() файловой системы btrfs ядра операционной си… 23.05.2025 16.02.2026
bdu:2025-05914 Уязвимость функции create_lease_buf() подсистемы SMB ядра операционной системы Linux, поз… 23.05.2025 16.02.2026
bdu:2025-05909 Уязвимость модуля Net::IMAP языка программирования Ruby, позволяющая нарушителю вызвать о… 23.05.2025 16.02.2026
ID Description Updated
var-200703-0009 Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating sys… 2026-03-09T22:38:01.862000Z
var-201504-0479 The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle … 2026-03-09T22:37:53.832000Z
var-201108-0146 Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before … 2026-03-09T22:37:49.732000Z
var-201912-1863 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2026-03-09T22:37:48.791000Z
var-201108-0285 Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allow… 2026-03-09T22:37:47.044000Z
var-200803-0013 Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other vers… 2026-03-09T22:37:11.844000Z
var-201110-0392 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… 2026-03-09T22:36:41.290000Z
var-202205-2059 Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. Vim is a cross-platform te… 2026-03-09T22:36:40.818000Z
var-202010-1296 A use after free issue was addressed with improved memory management. This issue is fixed… 2026-03-09T22:36:01.746000Z
var-202202-0081 In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. ----… 2026-03-09T22:35:30.057000Z
var-201912-0617 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2026-03-09T22:34:38.139000Z
var-201203-0194 Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … 2026-03-09T22:34:31.672000Z
var-200810-0392 Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer … 2026-03-09T22:34:20.426000Z
var-201412-0614 util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes… 2026-03-09T22:34:20.218000Z
var-202006-1636 An input validation issue was addressed with improved input validation. This issue is fix… 2026-03-09T22:34:12.704000Z
var-200803-0016 CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure web… 2026-03-09T22:34:12.559000Z
var-200107-0045 Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location… 2026-03-09T22:33:41.483000Z
var-201210-0343 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T22:33:40.999000Z
var-202009-1442 A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker … 2026-03-09T22:33:28.877000Z
var-201102-0095 Google Chrome before 9.0.597.94 does not properly perform event handling for animations, … 2026-03-09T22:32:03.829000Z
var-202104-0334 curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Info… 2026-03-09T22:32:03.190000Z
var-202207-0588 The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does no… 2026-03-09T22:32:01.908000Z
var-202102-1092 An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_a… 2026-03-09T22:31:31.307000Z
var-201708-0212 The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 all… 2026-03-09T22:31:06.390000Z
var-200503-0010 Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers… 2026-03-09T22:31:01.611000Z
var-202012-1547 A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel thr… 2026-03-09T22:31:00.956000Z
var-202109-1790 A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when … 2026-03-09T22:30:44.639000Z
var-202104-0160 An out-of-bounds write issue was addressed with improved bounds checking. This issue is f… 2026-03-09T22:30:44.119000Z
var-201503-0389 The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP th… 2026-03-09T22:30:41.363000Z
var-201111-0222 FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arb… 2026-03-09T22:30:40.273000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated