Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-38835
9.8 (3.1)
Tenda W30E V2.0 V16.01.0.21 was found to contain … n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-22T15:35:41.189Z
CVE-2026-38834
7.3 (3.1)
Tenda W30E V2.0 V16.01.0.21 was found to contain … n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-21T19:23:17.157Z
CVE-2026-37748
7.2 (3.1)
Visitor Management System 1.0 by sanjay1313 is vu… n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-21T18:25:24.762Z
CVE-2026-31019
8.8 (3.1)
In the Website module of Dolibarr ERP & CRM 22.0.… n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-21T18:23:33.693Z
CVE-2026-31018
8.8 (3.1)
In Dolibarr ERP & CRM <= 22.0.4, PHP code detecti… n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-21T15:31:23.441Z
CVE-2026-31014
6.3 (3.1)
Dovestones Softwares AD Self Update <4.0.0.5 is v… n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-21T18:21:08.828Z
CVE-2026-31013
6.1 (3.1)
Dovestones Softwares ADPhonebook <4.0.1.1 has a r… n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-21T18:19:12.306Z
CVE-2026-30452
6.5 (3.1)
Textpattern CMS 4.9.0 contains a Broken Access Co… n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-22T15:35:46.859Z
CVE-2026-29644
5.3 (3.1)
XiangShan (open-source high-performance RISC-V pr… n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-21T17:59:06.506Z
CVE-2025-70420
8.8 (3.1)
A SQL injection vulnerability exists in Genesys L… n/a
n/a
2026-04-21T00:00:00.000Z 2026-04-22T15:35:35.730Z
CVE-2026-35570
8.4 (3.1)
OpenClaude has Sandbox Bypass via Early-Exit Logic Fla… Gitlawb
openclaude
2026-04-20T23:24:08.324Z 2026-04-21T19:49:30.148Z
CVE-2026-35588
6.3 (3.1)
Glances has CQL Injection in its Cassandra Export Modu… nicolargo
glances
2026-04-20T23:20:34.998Z 2026-04-21T13:35:04.526Z
CVE-2026-35587
7.3 (4.0)
Glances IP Plugin has SSRF via public_api that leads t… nicolargo
glances
2026-04-20T23:19:02.908Z 2026-04-22T14:01:47.583Z
CVE-2026-34839
7.7 (4.0)
Glances Vulnerable to Cross-Origin Information Disclos… nicolargo
glances
2026-04-20T23:09:02.551Z 2026-04-21T19:37:42.399Z
CVE-2026-41331
6.9 (4.0)
5.3 (3.1)
OpenClaw < 2026.3.31 - Resource Consumption via Unauth… OpenClaw
OpenClaw
2026-04-20T23:08:17.653Z 2026-04-21T20:27:46.881Z
CVE-2026-41330
2 (4.0)
4.4 (3.1)
OpenClaw < 2026.3.31 - Environment Variable Override v… OpenClaw
OpenClaw
2026-04-20T23:08:16.941Z 2026-04-21T13:39:27.598Z
CVE-2026-41329
9 (4.0)
9.9 (3.1)
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Co… OpenClaw
OpenClaw
2026-04-20T23:08:16.222Z 2026-04-21T19:38:16.140Z
CVE-2026-41303
8.7 (4.0)
8.8 (3.1)
OpenClaw < 2026.3.28 - Authorization Bypass in Discord… OpenClaw
OpenClaw
2026-04-20T23:08:15.511Z 2026-04-21T13:35:55.924Z
CVE-2026-41302
4.8 (4.0)
7.6 (3.1)
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… OpenClaw
OpenClaw
2026-04-20T23:08:14.782Z 2026-04-21T19:49:35.930Z
CVE-2026-41301
6.9 (4.0)
5.3 (3.1)
OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairi… OpenClaw
OpenClaw
2026-04-20T23:08:14.023Z 2026-04-21T13:33:53.554Z
CVE-2026-41300
6.9 (4.0)
6.5 (3.1)
OpenClaw < 2026.3.31 - Attacker-Discovered Endpoint Pr… OpenClaw
OpenClaw
2026-04-20T23:08:13.304Z 2026-04-21T13:03:24.309Z
CVE-2026-41299
7.1 (4.0)
7.1 (3.1)
OpenClaw < 2026.3.28 - Client Identity Spoofing in cha… OpenClaw
OpenClaw
2026-04-20T23:08:12.586Z 2026-04-21T13:38:25.512Z
CVE-2026-41298
5.3 (4.0)
5.4 (3.1)
OpenClaw < 2026.4.2 - Authorization Bypass in Session … OpenClaw
OpenClaw
2026-04-20T23:08:11.787Z 2026-04-21T17:34:23.419Z
CVE-2026-41297
4.8 (4.0)
7.6 (3.1)
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… OpenClaw
OpenClaw
2026-04-20T23:08:10.955Z 2026-04-21T13:41:34.057Z
CVE-2026-41296
8.8 (4.0)
8.2 (3.1)
OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race … OpenClaw
OpenClaw
2026-04-20T23:08:10.194Z 2026-04-21T19:49:41.570Z
CVE-2026-41295
8.5 (4.0)
7.8 (3.1)
OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shad… OpenClaw
OpenClaw
2026-04-20T23:08:09.503Z 2026-04-21T13:35:47.883Z
CVE-2026-41294
8.5 (4.0)
8.6 (3.1)
OpenClaw < 2026.3.28 - Environment Variable Injection … OpenClaw
OpenClaw
2026-04-20T23:08:08.795Z 2026-04-21T13:04:36.188Z
CVE-2026-40045
5.9 (4.0)
5.7 (3.1)
OpenClaw < 2026.4.2 - Cleartext Credential Transmissio… OpenClaw
OpenClaw
2026-04-20T23:08:07.952Z 2026-04-21T13:37:43.951Z
CVE-2026-34082
5.3 (4.0)
Dify has IDOR in deleting someone else's chat conversation langgenius
dify
2026-04-20T23:03:18.158Z 2026-04-21T13:36:45.614Z
CVE-2026-5721
4.7 (3.1)
wpDataTables – WordPress Data Table, Dynamic Tables & … wpdatatables
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin
2026-04-20T22:25:26.695Z 2026-04-21T19:49:47.411Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-6712
4.4 (3.1)
Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Sto… ryhowa
Website LLMs.txt
2026-04-21T06:43:59.539Z 2026-04-21T13:47:53.867Z
CVE-2026-6711
6.1 (3.1)
Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting ryhowa
Website LLMs.txt
2026-04-21T06:43:59.951Z 2026-04-21T13:51:33.148Z
CVE-2026-6703
4.3 (3.1)
Responsive Blocks <= 2.2.1 - Missing Authorization to … cyberchimps
Responsive Blocks – Page Builder for Blocks & Patterns
2026-04-21T06:43:58.955Z 2026-04-21T16:36:19.694Z
CVE-2026-31370
6.3 (3.1)
Information Leak Vulnerability in Honor E Honor
Honor E
2026-04-21T06:30:53.883Z 2026-04-21T13:25:53.570Z
CVE-2026-31369
3.2 (3.1)
Privilege Bypass in PcManager Honor
PcManager
2026-04-21T06:26:52.403Z 2026-04-21T13:18:27.938Z
CVE-2026-31368
7.8 (3.1)
Privilege Bypass in AiAssistant Honor
AIAssistant
2026-04-21T06:40:08.446Z 2026-04-21T13:23:57.396Z
CVE-2026-5965
9.3 (4.0)
9.8 (3.1)
NewSoft|NewSoftOA - OS Command Injection NewSoft
NewSoftOA
2026-04-21T03:32:55.138Z 2026-04-21T13:20:58.795Z
CVE-2026-6675
5.3 (3.1)
Responsive Blocks <= 2.2.0 - Unauthenticated Open Emai… cyberchimps
Responsive Blocks – Page Builder for Blocks & Patterns
2026-04-21T02:25:39.847Z 2026-04-21T13:22:00.182Z
CVE-2026-6674
6.5 (3.1)
Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authen… tholstkabelbwde
Plugin: CMS für Motorrad Werkstätten
2026-04-21T02:25:40.676Z 2026-04-21T12:58:21.763Z
CVE-2026-40497
8.1 (3.1)
FreeScout Vulnerable to CSS Injection via Stored Style… freescout-help-desk
freescout
2026-04-21T01:45:55.492Z 2026-04-21T13:25:21.103Z
CVE-2026-6058
4.5 (3.1)
** UNSUPPORTED WHEN ASSIGNED ** An improper encod… Zyxel
WRE6505 v2 firmware
2026-04-21T01:42:07.433Z 2026-04-21T13:26:29.283Z
CVE-2026-40496
8.8 (4.0)
FreeScout has Predictable Attachment Token that Allows… freescout-help-desk
freescout
2026-04-21T01:38:50.117Z 2026-04-21T13:50:39.454Z
CVE-2026-40250
8.4 (4.0)
OpenEXR has integer overflow in DWA decoder outBufferE… AcademySoftwareFoundation
openexr
2026-04-21T01:33:00.212Z 2026-04-23T03:55:57.543Z
CVE-2026-40244
8.4 (4.0)
OpenEXR has integer overflow in DWA setupChannelData p… AcademySoftwareFoundation
openexr
2026-04-21T01:30:55.061Z 2026-04-23T03:55:56.354Z
CVE-2026-39973
7.1 (3.1)
Apktool: Path Traversal to Arbitrary File Write iBotPeaches
Apktool
2026-04-21T01:35:22.396Z 2026-04-23T03:56:04.482Z
CVE-2026-39886
5.3 (3.1)
OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl() AcademySoftwareFoundation
openexr
2026-04-21T01:27:01.371Z 2026-04-21T13:49:21.573Z
CVE-2026-39866
7.4 (4.0)
Lawnchair vulnerable to Command Injection via unquoted… LawnchairLauncher
lawnchair
2026-04-21T01:19:47.510Z 2026-04-23T03:55:58.650Z
CVE-2026-40264
2 (4.0)
OpenBao's Token Store Allows Cross-Namespace Renewal, … openbao
openbao
2026-04-21T00:47:38.156Z 2026-04-21T19:30:51.975Z
CVE-2026-39946
4.6 (4.0)
OpenBao allows SQL Injection in PostgreSQL database se… openbao
openbao
2026-04-21T00:19:39.578Z 2026-04-21T13:34:21.088Z
CVE-2026-39861
7.7 (4.0)
Claude Code: Sandbox Escape via Symlink Following Allo… anthropics
claude-code
2026-04-21T00:56:39.062Z 2026-04-21T13:44:49.618Z
CVE-2026-39396
3.1 (3.1)
OpenBao has Decompression Bomb via Unbounded Copy in O… openbao
openbao
2026-04-21T00:44:53.943Z 2026-04-21T19:49:18.821Z
CVE-2026-39388
2 (4.0)
OpenBao's Certificate Authentication Allows Token Rene… openbao
openbao
2026-04-21T00:43:22.920Z 2026-04-21T19:36:07.865Z
CVE-2026-39386
8.8 (3.1)
Neko has Self-service Privilege Escalation for Authent… m1k1o
neko
2026-04-21T00:50:34.656Z 2026-04-22T03:56:19.795Z
CVE-2026-39378
6.5 (3.1)
nbconvert has an Arbitrary File Read via Path Traversa… jupyter
nbconvert
2026-04-21T00:17:00.684Z 2026-04-21T13:43:29.081Z
CVE-2026-39377
6.5 (3.1)
nbconvert has an Arbitrary File Write via Path Travers… jupyter
nbconvert
2026-04-21T00:14:59.937Z 2026-04-21T19:49:24.475Z
CVE-2026-39320
7.5 (3.1)
Signal K Server has an Unauthenticated Regular Express… SignalK
signalk-server
2026-04-21T00:07:10.371Z 2026-04-21T19:36:54.787Z
CVE-2026-41331
6.9 (4.0)
5.3 (3.1)
OpenClaw < 2026.3.31 - Resource Consumption via Unauth… OpenClaw
OpenClaw
2026-04-20T23:08:17.653Z 2026-04-21T20:27:46.881Z
CVE-2026-41330
2 (4.0)
4.4 (3.1)
OpenClaw < 2026.3.31 - Environment Variable Override v… OpenClaw
OpenClaw
2026-04-20T23:08:16.941Z 2026-04-21T13:39:27.598Z
CVE-2026-41329
9 (4.0)
9.9 (3.1)
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Co… OpenClaw
OpenClaw
2026-04-20T23:08:16.222Z 2026-04-21T19:38:16.140Z
CVE-2026-41303
8.7 (4.0)
8.8 (3.1)
OpenClaw < 2026.3.28 - Authorization Bypass in Discord… OpenClaw
OpenClaw
2026-04-20T23:08:15.511Z 2026-04-21T13:35:55.924Z
ID Severity Description Published Updated
ghsa-6c34-3mhj-jwxw
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the fu… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-5pv2-86qj-5jf9
6.3 (3.1)
2.1 (4.0)
Cockpit has NoSQL Injection Through Content Aggregation Pipelines 2026-04-20T12:32:01Z 2026-04-23T21:47:54Z
ghsa-42cc-jrr3-ghpw
4.3 (3.1)
2.1 (4.0)
A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b. Affect… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-38x4-r8qv-j5v2
7.3 (3.1)
5.5 (4.0)
A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-293r-hxw5-cfmj
2.4 (3.1)
4.8 (4.0)
A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an … 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-2836-hmqw-wf98
8.8 (3.1)
7.4 (4.0)
A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebEx… 2026-04-20T12:32:01Z 2026-04-20T12:32:01Z
ghsa-vqjc-m5xh-jhx3
In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free… 2026-04-20T12:32:00Z 2026-04-20T12:32:00Z
ghsa-q7h9-pvj5-g9fp
In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds acces… 2026-04-20T12:32:00Z 2026-04-20T12:32:00Z
ghsa-x858-8gr5-586m
5.1 (4.0)
Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain … 2026-04-20T12:31:59Z 2026-04-20T12:31:59Z
ghsa-vrr8-h7fq-ghr8
4.0 (3.1)
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-va… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-vr46-pfqh-wpf8
7.3 (3.1)
5.5 (4.0)
A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unkno… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-q2rh-xrfv-8x3m
9.8 (3.1)
9.3 (4.0)
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remo… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-p78m-rc6g-qfwc
6.3 (3.1)
2.1 (4.0)
A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the functio… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-jp7c-75vm-9jwh
3.5 (3.1)
2.0 (4.0)
A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewT… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-f5h4-jpqg-93m3
9.8 (3.1)
9.3 (4.0)
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remo… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-8v5m-jghx-mmxr
6.3 (3.1)
2.1 (4.0)
A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the fu… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-7gm3-fv82-7h98
6.3 (3.1)
2.1 (4.0)
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affect… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-5qr4-57wv-4r2w
7.3 (3.1)
5.5 (4.0)
A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue … 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-544v-v93w-x43g
8.1 (3.1)
7.2 (4.0)
ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authe… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-49hc-46g6-4c47
8.8 (3.1)
8.7 (4.0)
ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenti… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-337w-xf2q-h5w2
6.3 (3.1)
2.1 (4.0)
A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-32w9-6rwg-p96w
9.1 (3.1)
9.4 (4.0)
A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability a… 2026-04-20T09:30:45Z 2026-04-22T15:31:33Z
ghsa-3224-28wc-whrh
7.8 (3.1)
8.5 (4.0)
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-2chg-78hj-c2w2
6.3 (3.1)
2.1 (4.0)
A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14. Affected by this v… 2026-04-20T09:30:45Z 2026-04-20T09:30:45Z
ghsa-pg76-qgmq-mvpq
6.3 (3.1)
2.1 (4.0)
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Affected is the functio… 2026-04-20T09:30:44Z 2026-04-20T09:30:44Z
ghsa-hq9j-qh3w-qvg3
3.1 (3.1)
1.3 (4.0)
A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown functio… 2026-04-20T09:30:44Z 2026-04-20T09:30:44Z
ghsa-9772-r9rh-h65v
3.5 (3.1)
The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings,… 2026-04-20T09:30:44Z 2026-04-20T15:31:52Z
ghsa-6fpm-qhmq-mwq8
6.3 (3.1)
2.1 (4.0)
A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This impacts the functi… 2026-04-20T09:30:44Z 2026-04-20T09:30:44Z
ghsa-46vm-f48w-xhvv
9.9 (3.1)
8.6 (4.0)
A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stem… 2026-04-20T09:30:44Z 2026-04-22T15:31:33Z
ghsa-q2v9-jfqm-jfw4
6.3 (3.1)
2.1 (4.0)
A flaw has been found in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is the functio… 2026-04-20T06:31:28Z 2026-04-20T06:31:28Z
ID Severity Description Package Published Updated
pysec-2022-232
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAM… nvflare 2022-07-01T18:15:00Z 2023-06-05T01:12:56.865026Z
pysec-2022-231
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation modu… nvflare 2022-07-01T18:15:00Z 2023-06-05T01:12:56.789968Z
pysec-2022-224
Synapse is an open source home server implementation for the Matrix chat network. In vers… matrix-synapse 2022-06-28T17:15:00Z 2022-07-14T05:11:53.027228Z
pysec-2022-222
The Security Team noticed that the termination condition of the for loop in the readExter… systemds 2022-06-27T18:15:00Z 2022-07-14T05:11:54.728743Z
pysec-2022-43176
9.8 (3.1)
The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. Thi… zibal 2022-06-24T21:15:00Z 2024-11-21T14:23:03.404044Z
pysec-2022-43172
9.8 (3.1)
The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor… watertools 2022-06-24T21:15:00Z 2024-11-21T14:23:03.143453Z
pysec-2022-43169
9.8 (3.1)
The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution bac… togglee 2022-06-24T21:15:00Z 2024-11-21T14:23:01.740031Z
pysec-2022-43168
9.8 (3.1)
The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backd… sixfab-tool 2022-06-24T21:15:00Z 2022-07-06T19:30:00Z
pysec-2022-43165
9.8 (3.1)
The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution b… scoptrial 2022-06-24T21:15:00Z 2024-11-21T14:23:01.181819Z
pysec-2022-43164
9.8 (3.1)
The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution … rondolu-yt-concate 2022-06-24T21:15:00Z 2024-11-21T14:23:00.996865Z
pysec-2022-43133
9.8 (3.1)
The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor v… drxhello 2022-06-24T21:15:00Z 2024-11-21T14:22:45.663614Z
pysec-2022-43132
9.8 (3.1)
The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution bac… dr-web-engine 2022-06-24T21:15:00Z 2024-11-21T14:22:45.610409Z
pysec-2022-43073
9.8 (3.1)
The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backd… cloudlabeling 2022-06-24T21:15:00Z 2024-11-21T14:22:42.118573Z
pysec-2022-43066
9.8 (3.1)
The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor vi… aamiles 2022-06-24T21:15:00Z 2024-11-21T14:22:40.256677Z
pysec-2022-221
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code exe… catly-translate 2022-06-24T21:15:00Z 2022-07-06T20:32:04.087337Z
pysec-2022-220
** Reserved ** The pyesasky for python, as distributed on PyPI, included a code-execution… pyesasky 2022-06-24T21:15:00Z 2022-07-06T18:41:16.470294Z
pysec-2022-219
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code … rootinteractive 2022-06-24T21:15:00Z 2022-07-05T20:48:00Z
pysec-2022-218
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code ex… django-navbar-client 2022-06-24T21:15:00Z 2022-07-05T20:48:00Z
pysec-2022-217
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contai… cryptoasset-data-downloader 2022-06-24T21:15:00Z 2022-07-05T22:30:15.999007Z
pysec-2022-216
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution b… perdido 2022-06-24T21:15:00Z 2022-07-05T19:16:00Z
pysec-2022-215
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code executio… ml-scanner 2022-06-24T21:15:00Z 2022-07-05T20:33:43.190558Z
pysec-2022-214
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution … beginner 2022-06-24T21:15:00Z 2022-07-05T20:33:42.390810Z
pysec-2022-43162
7.5 (3.1)
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. redis 2022-06-23T17:15:00Z 2024-12-23T11:33:23.546447Z
pysec-2022-43059
5.5 (3.1)
AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a De… aiohttp 2022-06-23T17:15:00Z 2024-02-16T13:47:54.655573Z
pysec-2022-210
An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM … salt 2022-06-23T17:15:00Z 2022-06-23T18:47:26.936484Z
pysec-2022-211
Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) fo… jupyter-server 2022-06-14T21:15:00Z 2022-06-24T18:46:20.115761Z
pysec-2022-212
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to … notebook 2022-06-14T18:15:00Z 2022-08-24T20:50:33.251121Z
pysec-2022-209
Command Injection in GitHub repository nuitka/nuitka prior to 0.9. nuitka 2022-06-12T14:15:00Z 2022-06-23T11:27:14.332916Z
pysec-2022-207
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are… couchbase 2022-06-10T12:15:00Z 2022-06-17T16:54:24.107616Z
pysec-2022-206
OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthent… oauthenticator 2022-06-09T13:15:00Z 2022-06-16T05:33:11.901142Z
ID Description Updated
ID Description Published Updated
mal-2026-2407 Malicious code in @ceeferenderer/itg-renderer-sdk (npm) 2026-03-24T09:03:48Z 2026-04-07T14:41:19Z
mal-2026-2406 Malicious code in @ceeferenderer/fe-renderer-sdk (npm) 2026-03-24T09:03:41Z 2026-04-07T14:41:19Z
mal-2026-2413 Malicious code in cclr-component-resources (npm) 2026-03-24T09:03:35Z 2026-04-07T14:41:20Z
mal-2026-2124 Malicious code in mgrcfg (PyPI) 2026-03-24T04:31:48Z 2026-03-24T05:53:36Z
mal-2026-2123 Malicious code in yelp-mobile-site-common (npm) 2026-03-24T02:26:13Z 2026-03-31T03:12:05Z
mal-2026-2122 Malicious code in rowrapee (PyPI) 2026-03-23T23:17:18Z 2026-03-24T00:33:52Z
mal-2026-2121 Malicious code in roboat (PyPI) 2026-03-23T23:09:44Z 2026-03-24T20:18:33Z
mal-2026-2120 Malicious code in logutilkit (PyPI) 2026-03-23T22:53:57Z 2026-04-08T20:19:39Z
mal-2026-2119 Malicious code in apachelicense (PyPI) 2026-03-23T20:41:45Z 2026-04-08T20:19:39Z
mal-2026-2118 Malicious code in hash-utils-py (PyPI) 2026-03-23T15:38:29Z 2026-03-23T15:38:29Z
mal-2026-2112 Malicious code in apply-hive-table (PyPI) 2026-03-23T14:19:12Z 2026-03-23T20:18:41Z
mal-2026-2111 Malicious code in tailwind-font-inter (npm) 2026-03-23T14:17:29Z 2026-03-31T03:12:05Z
mal-2026-2110 Malicious code in react-tailwindcss-style (npm) 2026-03-23T14:17:29Z 2026-03-31T03:12:04Z
mal-2026-2109 Malicious code in pyregions-snowflake (PyPI) 2026-03-23T14:08:04Z 2026-03-23T20:18:41Z
mal-2026-2106 Malicious code in dmclc (PyPI) 2026-03-23T14:05:43Z 2026-03-23T20:18:41Z
mal-2026-2108 Malicious code in modelconftranslator (PyPI) 2026-03-23T14:03:21Z 2026-03-23T20:18:41Z
mal-2026-2107 Malicious code in financial-crimes-general-utils (PyPI) 2026-03-23T13:56:01Z 2026-03-23T20:18:41Z
mal-2026-2105 Malicious code in ty-search-suggestion (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:13Z
mal-2026-2101 Malicious code in sidebar-basket (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:18Z
mal-2026-2100 Malicious code in shakti-pwa (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:13Z
mal-2026-2095 Malicious code in pulse-shop-section (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:14Z
mal-2026-2094 Malicious code in pulse-scroll-triggered-list-items (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:13Z
mal-2026-2093 Malicious code in pulse-rsvp-card-entity (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:13Z
mal-2026-2089 Malicious code in milla-migration (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:14Z
mal-2026-2088 Malicious code in internal-linking (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:14Z
mal-2026-2087 Malicious code in in-app-marketing (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:18Z
mal-2026-2086 Malicious code in falcor-server (npm) 2026-03-23T13:47:10Z 2026-03-23T13:47:12Z
mal-2026-2104 Malicious code in ty-fragment-core (npm) 2026-03-23T13:47:09Z 2026-03-23T13:47:10Z
mal-2026-2103 Malicious code in ty-config-provider (npm) 2026-03-23T13:47:09Z 2026-03-23T13:47:11Z
mal-2026-2102 Malicious code in storefront-logger (npm) 2026-03-23T13:47:09Z 2026-03-23T13:47:12Z
ID Description Published Updated
wid-sec-w-2025-2436 Xwayland und X.Org X11: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-10-28T23:00:00.000+00:00 2026-02-12T23:00:00.000+00:00
wid-sec-w-2025-2435 D-LINK Aquila Pro AI R15: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten 2025-10-28T23:00:00.000+00:00 2025-12-02T23:00:00.000+00:00
wid-sec-w-2025-2434 Mattermost Server: Mehrere Schwachstellen ermöglichen die Umgehung von Sicherheitsmaßnahmen 2025-10-28T23:00:00.000+00:00 2025-11-27T23:00:00.000+00:00
wid-sec-w-2025-2433 Google Cloud Platform (Envoy Proxy):: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-28T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2432 Red Hat Ansible Automation Platform: Mehrere Schwachstellen 2025-10-28T23:00:00.000+00:00 2026-03-30T22:00:00.000+00:00
wid-sec-w-2025-2431 Linux Kernel: Mehrere Schwachstellen 2025-10-28T23:00:00.000+00:00 2026-03-30T22:00:00.000+00:00
wid-sec-w-2025-2430 Linux Kernel: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2026-03-05T23:00:00.000+00:00
wid-sec-w-2025-2429 Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-27T23:00:00.000+00:00 2025-11-13T23:00:00.000+00:00
wid-sec-w-2025-2428 FRRouting (ospf_opaque.c): Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-27T23:00:00.000+00:00 2026-03-26T23:00:00.000+00:00
wid-sec-w-2025-2427 strongSwan (eap-mschapv2 plugin): Schwachstelle ermöglicht Codeausführung und DoS 2025-10-27T23:00:00.000+00:00 2026-03-04T23:00:00.000+00:00
wid-sec-w-2025-2426 IBM QRadar SIEM: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2425 Zoho ManageEngine Endpoint Central: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2424 IBM Rational Team Concert: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-28T23:00:00.000+00:00
wid-sec-w-2025-2423 ffmpeg (TensorFlow DNN backend): Schwachstelle ermöglicht Denial of Service 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2422 D-LINK Access Point (AP): Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2421 Docker Desktop: Schwachstelle ermöglicht Privilegieneskalation 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2420 Apache Tomcat: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2026-03-26T23:00:00.000+00:00
wid-sec-w-2025-2419 Liferay Portal und DXP: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2418 Dell Storage Manager: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2417 dnsmasq: Mehrere Schwachstellen 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2416 Proxmox Backup Server: Mehrere Schwachstellen 2025-10-26T23:00:00.000+00:00 2025-11-04T23:00:00.000+00:00
wid-sec-w-2025-2415 Bouncy Castle: Schwachstelle ermöglicht Denial of Service 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2414 Microsoft Configuration Manager: Schwachstelle ermöglicht Erlangen von Administratorrechten 2025-10-26T23:00:00.000+00:00 2025-11-02T23:00:00.000+00:00
wid-sec-w-2025-2413 HP Computer (AMD AIM-T): Mehrere Schwachstellen ermöglichen Privilegieneskalation 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2412 ARM-basierte HP-Computer mit InsydeH2O-UEFI-Firmware: Schwachstelle ermöglicht Codeausführung 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2411 ImageMagick: Schwachstelle ermöglicht Denial of Service 2025-10-26T23:00:00.000+00:00 2025-12-18T23:00:00.000+00:00
wid-sec-w-2025-2410 BusyBox: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2409 Xen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-10-26T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2408 OpenVPN: Schwachstelle ermöglicht Codeausführung 2025-10-26T23:00:00.000+00:00 2025-10-26T23:00:00.000+00:00
wid-sec-w-2025-2407 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-26T23:00:00.000+00:00 2026-03-30T22:00:00.000+00:00
ID Description Published Updated
icsa-24-193-06 Siemens RUGGEDCOM 2024-07-09T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-24-193-05 Siemens SCALANCE, RUGGEDCOM 2024-07-09T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-24-193-04 Siemens Simcenter Femap 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-193-03 Siemens Teamcenter Visualization and JT2Go 2024-07-09T00:00:00.000000Z 2024-08-13T00:00:00.000000Z
icsa-24-193-02 Siemens RUGGEDCOM APE 1808 2024-07-09T00:00:00.000000Z 2026-01-14T22:00:11.677616Z
icsa-24-193-01 Siemens Remote Connect Server 2024-07-09T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-25-007-01 ABB ASPECT System 2024-07-03T00:30:00.000000Z 2024-12-05T00:30:00.000000Z
icsa-24-184-03 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update D) 2024-07-02T06:00:00.000000Z 2026-04-07T06:00:00.000000Z
icsa-24-184-02 mySCADA myPRO 2024-07-02T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-184-01 Johnson Controls Kantech Door Controllers 2024-07-02T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-07 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-06 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-05 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-04 Johnson Controls Illustra Essentials Gen 4 (Update A) 2024-06-27T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-179-03 Yokogawa FAST/TOOLS and CI Server 2024-06-27T06:00:00.000000Z 2024-06-27T06:00:00.000000Z
icsa-24-179-02 SDG Technologies PnPSCADA 2024-06-27T06:00:00.000000Z 2024-06-27T06:00:00.000000Z
icsa-24-179-01 TELSAT marKoni FM Transmitter 2024-06-27T06:00:00.000000Z 2024-06-27T06:00:00.000000Z
icsa-24-177-02 PTC Creo Elements/Direct License Server (Update A) 2024-06-25T06:00:00.000000Z 2024-07-02T06:00:00.000000Z
icsa-24-177-01 ABB 800xA Base 2024-06-25T06:00:00.000000Z 2024-06-25T06:00:00.000000Z
icsa-24-172-03 Westermo L210-F2G 2024-06-20T06:00:00.000000Z 2024-06-20T06:00:00.000000Z
icsa-24-172-02 CAREL Boss-Mini 2024-06-20T06:00:00.000000Z 2024-06-20T06:00:00.000000Z
icsa-24-172-01 Yokogawa CENTUM 2024-06-20T06:00:00.000000Z 2024-06-20T06:00:00.000000Z
icsa-24-170-01 RAD Data Communications SecFlow-2 2024-06-18T06:00:00.000000Z 2024-06-18T06:00:00.000000Z
icsa-24-165-19 Motorola Solutions Vigilant License Plate Readers 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-165-18 Rockwell Automation FactoryTalk View SE 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-165-17 Rockwell Automation FactoryTalk View SE 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-165-16 Rockwell Automation FactoryTalk View SE 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-24-165-14 Fuji Electric Tellus Lite V-Simulator 2024-06-13T06:00:00.000000Z 2024-06-13T06:00:00.000000Z
icsa-25-063-05 Hitachi Energy UNEM/ECST 2024-06-11T12:30:00.000000Z 2024-06-11T12:30:00.000000Z
icsa-25-063-04 Hitachi Energy XMC20 2024-06-11T12:30:00.000000Z 2024-06-11T12:30:00.000000Z
ID Description Published Updated
cisco-sa-cpar-strd-xss-a4dcvetg Cisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-catpon-multivulns-ce3dsygr Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-anyconnect-nam-priv-ycsrnugt Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-snort-dos-s2r7w9uu Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-29T14:07:40+00:00
cisco-sa-snort-dos-rywh7ezm Multiple Cisco Products Snort Rule Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-natalg-bypass-cpkgqkng Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-ftd-tls-decrypt-dos-bmxyjm8m Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-ftd-file-write-shvcmqvc Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability 2021-10-27T16:00:00+00:00 2023-05-26T11:54:17+00:00
cisco-sa-ftd-enip-bypass-efsxd8kp Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-ftd-dos-rudsew3r Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-ftd-cmdinject-fmzsln8 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-fmc-xss-openredir-tvpmwjyg Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-fmc-infodisc-ft2wvmnu Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-fmc-dir-traversal-95uyw5tk Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-asaftd-xss-webui-gqlsfypm Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-asaftd-snmpaccess-m6yoweq3 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-asaftd-rule-bypass-ejjogqey Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-asaftd-ikev2-dos-g4cmrr7c Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-29T13:51:25+00:00
cisco-sa-asaftd-dos-4ygzlku9 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-asafdt-webvpn-dos-ksqjakpa Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-asa-ftd-dos-unk689xy Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-asa-ftd-dos-jxywmjyl Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-webex-2fmkd7t Cisco Webex Software Application Authorization Bypass Vulnerability 2021-10-20T16:00:00+00:00 2021-10-20T16:00:00+00:00
cisco-sa-tms-xss-cwjzjsqc Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability 2021-10-20T16:00:00+00:00 2021-10-20T16:00:00+00:00
cisco-sa-sec-work-xss-t6sytu8q Cisco Tetration Stored Cross-Site Scripting Vulnerability 2021-10-20T16:00:00+00:00 2021-10-20T16:00:00+00:00
cisco-sa-sd-wan-rhpbe34a Cisco IOS XE SD-WAN Software Command Injection Vulnerability 2021-10-20T16:00:00+00:00 2022-02-17T18:13:49+00:00
cisco-sa-ise-xss1-rgxyry2v Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities 2021-10-20T16:00:00+00:00 2021-11-12T18:15:57+00:00
cisco-sa-ise-file-download-b3br5kqa Cisco Identity Services Engine File Download Vulnerability 2021-10-20T16:00:00+00:00 2021-10-20T16:00:00+00:00
cisco-sa-imc-gui-dos-tzjrfyzh Cisco Integrated Management Controller GUI Denial of Service Vulnerability 2021-10-20T16:00:00+00:00 2021-10-20T16:00:00+00:00
cisco-sa-cms-lahe8z5v Cisco Meeting Server Call Bridge Denial of Service Vulnerability 2021-10-20T16:00:00+00:00 2021-12-22T17:29:02+00:00
ID Description Published Updated
msrc_cve-2026-23212 bonding: annotate data-races around slave->last_rx 2026-02-02T00:00:00.000Z 2026-03-31T15:03:25.000Z
msrc_cve-2026-23208 ALSA: usb-audio: Prevent excessive number of frames 2026-02-02T00:00:00.000Z 2026-03-31T15:03:03.000Z
msrc_cve-2026-23207 spi: tegra210-quad: Protect curr_xfer check in IRQ handler 2026-02-02T00:00:00.000Z 2026-03-31T14:59:32.000Z
msrc_cve-2026-23204 net/sched: cls_u32: use skb_header_pointer_careful() 2026-02-02T00:00:00.000Z 2026-03-31T15:04:14.000Z
msrc_cve-2026-23191 ALSA: aloop: Fix racy access at PCM trigger 2026-02-02T00:00:00.000Z 2026-03-31T15:02:41.000Z
msrc_cve-2026-23171 bonding: fix use-after-free due to enslave fail after slave array update 2026-02-02T00:00:00.000Z 2026-03-31T15:02:13.000Z
msrc_cve-2026-23169 mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() 2026-02-02T00:00:00.000Z 2026-03-31T01:40:05.000Z
msrc_cve-2026-23157 btrfs: do not strictly require dirty metadata threshold for metadata writepages 2026-02-02T00:00:00.000Z 2026-03-31T15:01:50.000Z
msrc_cve-2026-23154 net: fix segmentation of forwarding fraglist GRO 2026-02-02T00:00:00.000Z 2026-03-31T15:01:27.000Z
msrc_cve-2026-23141 btrfs: send: check for inline extents in range_is_hole_in_parent() 2026-02-02T00:00:00.000Z 2026-03-31T14:52:41.000Z
msrc_cve-2026-23138 tracing: Add recursion protection in kernel stack trace recording 2026-02-02T00:00:00.000Z 2026-03-31T14:52:17.000Z
msrc_cve-2026-23137 of: unittest: Fix memory leak in unittest_data_add() 2026-02-02T00:00:00.000Z 2026-03-31T14:51:49.000Z
msrc_cve-2026-23126 netdevsim: fix a race issue related to the operation on bpf_bound_progs list 2026-02-02T00:00:00.000Z 2026-03-31T15:01:02.000Z
msrc_cve-2026-23118 rxrpc: Fix data-race warning and potential load/store tearing 2026-02-02T00:00:00.000Z 2026-03-31T15:00:41.000Z
msrc_cve-2026-23113 io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop 2026-02-02T00:00:00.000Z 2026-03-31T15:00:18.000Z
msrc_cve-2026-23110 scsi: core: Wake up the error handler when final completions race against each other 2026-02-02T00:00:00.000Z 2026-03-31T14:59:54.000Z
msrc_cve-2026-23100 mm/hugetlb: fix hugetlb_pmd_shared() 2026-02-02T00:00:00.000Z 2026-03-31T15:10:18.000Z
msrc_cve-2026-23088 tracing: Fix crash on synthetic stacktrace field usage 2026-02-02T00:00:00.000Z 2026-03-31T14:51:26.000Z
msrc_cve-2026-23086 vsock/virtio: cap TX credit to local buffer size 2026-02-02T00:00:00.000Z 2026-03-31T14:51:03.000Z
msrc_cve-2026-23069 vsock/virtio: fix potential underflow in virtio_transport_get_credit() 2026-02-02T00:00:00.000Z 2026-03-31T14:45:13.000Z
msrc_cve-2026-23068 spi: spi-sprd-adi: Fix double free in probe error path 2026-02-02T00:00:00.000Z 2026-03-27T01:39:46.000Z
msrc_cve-2026-23066 rxrpc: Fix recvmsg() unconditional requeue 2026-02-02T00:00:00.000Z 2026-03-31T14:44:50.000Z
msrc_cve-2026-2243 Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing 2026-02-02T00:00:00.000Z 2026-02-24T14:04:04.000Z
msrc_cve-2026-21863 Malformed Valkey Cluster bus message can lead to Remote DoS 2026-02-02T00:00:00.000Z 2026-02-26T14:36:37.000Z
msrc_cve-2026-21620 TFTP Path Traversal 2026-02-02T00:00:00.000Z 2026-03-31T15:15:42.000Z
msrc_cve-2026-1979 mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free 2026-02-02T00:00:00.000Z 2026-03-03T01:37:17.000Z
msrc_cve-2026-1703 Limited path traversal when installing wheel archives 2026-02-02T00:00:00.000Z 2026-03-31T15:14:40.000Z
msrc_cve-2025-71237 nilfs2: Fix potential block overflow that cause system hang 2026-02-02T00:00:00.000Z 2026-03-31T01:39:58.000Z
msrc_cve-2025-71236 scsi: qla2xxx: Validate sp before freeing associated memory 2026-02-02T00:00:00.000Z 2026-03-31T01:39:52.000Z
msrc_cve-2025-71235 scsi: qla2xxx: Delay module unload while fabric scan in progress 2026-02-02T00:00:00.000Z 2026-03-31T01:39:45.000Z
ID Description Published Updated
opensuse-su-2025:15721-1 incus-6.17-2.1 on GA media 2025-11-09T00:00:00Z 2025-11-09T00:00:00Z
opensuse-su-2025:15720-1 chromedriver-142.0.7444.134-1.1 on GA media 2025-11-08T00:00:00Z 2025-11-08T00:00:00Z
opensuse-su-2025:20026-1 Security update for MozillaThunderbird 2025-11-07T12:08:41Z 2025-11-07T12:08:41Z
opensuse-su-2025:15719-1 xen-4.20.1_08-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15718-1 tomcat11-11.0.13-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15717-1 tomcat10-10.1.48-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15716-1 tomcat-9.0.111-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15715-1 squid-7.3-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15714-1 libshibsp-lite12-3.5.1-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15713-1 python315-3.15.0~a1-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15712-1 python311-Django-5.2.8-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15711-1 opentofu-1.10.7-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15710-1 govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15709-1 google-osconfig-agent-20251028.00-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15708-1 python311-Django4-4.2.26-1.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15707-1 ghostscript-10.06.0-2.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15706-1 erlang-28.1.1-1.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15705-1 runc-1.3.3-1.1 on GA media 2025-11-05T00:00:00Z 2025-11-05T00:00:00Z
opensuse-su-2025:15704-1 zellij-0.43.1-2.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15703-1 kubecolor-0.5.3-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15702-1 kernel-devel-6.17.7-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15701-1 java-1_8_0-openjdk-1.8.0.472-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15700-1 OpenSMTPD-7.8.0p0-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15699-1 python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media 2025-11-03T00:00:00Z 2025-11-03T00:00:00Z
opensuse-su-2025:15698-1 redis-8.2.3-1.1 on GA media 2025-11-02T00:00:00Z 2025-11-02T00:00:00Z
opensuse-su-2025:15697-1 kumactl-2.12.3-1.1 on GA media 2025-11-02T00:00:00Z 2025-11-02T00:00:00Z
opensuse-su-2025:15696-1 python311-starlette-0.49.1-1.1 on GA media 2025-11-01T00:00:00Z 2025-11-01T00:00:00Z
opensuse-su-2025:15695-1 govulncheck-vulndb-0.0.20251029T215107-1.1 on GA media 2025-11-01T00:00:00Z 2025-11-01T00:00:00Z
opensuse-su-2025:20022-1 Security update for python-Django 2025-10-31T08:58:03Z 2025-10-31T08:58:03Z
opensuse-su-2025:15694-1 java-25-openj9-25.0.1.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
ID Description Published Updated
rhsa-2026:2900 Red Hat Security Advisory: Network Observability 1.11.0 for OpenShift 2026-02-18T08:39:41+00:00 2026-04-14T09:16:54+00:00
rhsa-2026:2864 Red Hat Security Advisory: nodejs:22 security update 2026-02-18T02:32:25+00:00 2026-04-13T20:02:47+00:00
rhsa-2026:2866 Red Hat Security Advisory: python3.12-wheel security update 2026-02-18T02:23:14+00:00 2026-04-10T15:33:21+00:00
rhsa-2026:2865 Red Hat Security Advisory: python-wheel security update 2026-02-18T01:51:46+00:00 2026-04-10T15:33:20+00:00
rhsa-2026:2852 Red Hat Security Advisory: OpenShift Security Profiles Operator bug fix and enhancement update 2026-02-17T23:04:21+00:00 2026-04-14T07:58:23+00:00
rhsa-2026:2673 Red Hat Security Advisory: OpenShift Container Platform 4.17.49 security and extras update 2026-02-17T21:05:24+00:00 2026-04-10T21:19:27+00:00
rhsa-2026:2652 Red Hat Security Advisory: OpenShift Container Platform 4.19.24 security and extras update 2026-02-17T20:05:59+00:00 2026-04-10T21:19:23+00:00
rhsa-2026:2844 Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.1 Release. 2026-02-17T18:20:32+00:00 2026-04-14T07:58:22+00:00
rhsa-2026:2824 Red Hat Security Advisory: freerdp security update 2026-02-17T15:59:52+00:00 2026-03-18T03:18:38+00:00
rhsa-2026:2823 Red Hat Security Advisory: Updated discovery-cli release RPM versions 2.4.3 2026-02-17T15:39:37+00:00 2026-04-10T15:33:20+00:00
rhsa-2026:2821 Red Hat Security Advisory: kernel-rt security update 2026-02-17T12:52:16+00:00 2026-04-08T04:27:08+00:00
rhsa-2026:2817 Red Hat Security Advisory: pcs security update 2026-02-17T12:40:37+00:00 2026-04-13T16:00:16+00:00
rhsa-2026:2819 Red Hat Security Advisory: pcs security update 2026-02-17T12:38:16+00:00 2026-04-13T16:00:18+00:00
rhsa-2026:2816 Red Hat Security Advisory: pcs security update 2026-02-17T12:26:26+00:00 2026-04-13T16:00:16+00:00
rhsa-2026:2818 Red Hat Security Advisory: pcs security update 2026-02-17T12:24:53+00:00 2026-04-13T16:00:17+00:00
rhsa-2026:2799 Red Hat Security Advisory: php security update 2026-02-17T10:51:41+00:00 2026-04-08T16:37:56+00:00
rhsa-2026:2786 Red Hat Security Advisory: glibc security update 2026-02-17T10:36:36+00:00 2026-04-09T18:07:52+00:00
rhsa-2026:2782 Red Hat Security Advisory: nodejs:22 security update 2026-02-17T09:33:08+00:00 2026-04-13T20:02:44+00:00
rhsa-2026:2781 Red Hat Security Advisory: nodejs:24 security update 2026-02-17T09:33:08+00:00 2026-04-13T20:02:44+00:00
rhsa-2026:2783 Red Hat Security Advisory: nodejs:20 security update 2026-02-17T09:32:33+00:00 2026-04-13T20:02:46+00:00
rhsa-2026:2776 Red Hat Security Advisory: edk2 security update 2026-02-17T09:30:25+00:00 2026-04-13T20:02:43+00:00
rhsa-2026:2800 Red Hat Security Advisory: Red Hat Ceph Storage 2026-02-17T09:23:04+00:00 2026-04-11T01:58:12+00:00
rhsa-2026:2771 Red Hat Security Advisory: edk2 security update 2026-02-17T09:15:10+00:00 2026-04-13T20:02:43+00:00
rhsa-2026:2770 Red Hat Security Advisory: freerdp security update 2026-02-17T03:29:34+00:00 2026-03-18T03:18:32+00:00
rhsa-2026:2768 Red Hat Security Advisory: nodejs:20 security update 2026-02-17T01:05:30+00:00 2026-04-13T20:02:41+00:00
rhsa-2026:2766 Red Hat Security Advisory: kernel security update 2026-02-17T01:03:19+00:00 2026-04-01T20:03:05+00:00
rhsa-2026:2769 Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates 2026-02-17T00:55:59+00:00 2026-04-14T09:46:19+00:00
rhsa-2026:2767 Red Hat Security Advisory: nodejs:20 security update 2026-02-17T00:48:09+00:00 2026-04-13T20:02:40+00:00
rhsa-2026:2765 Red Hat Security Advisory: Satellite 6.16.6.1 Async Update 2026-02-16T21:33:28+00:00 2026-04-12T14:07:42+00:00
rhsa-2026:2764 Red Hat Security Advisory: Satellite 6.17.6.3 Async Update 2026-02-16T19:06:28+00:00 2026-04-12T14:07:47+00:00
ID Description Published Updated
suse-su-2026:0766-1 Security update for gnome-remote-desktop 2026-03-03T13:02:47Z 2026-03-03T13:02:47Z
suse-su-2026:0765-1 Security update for smc-tools 2026-03-03T12:59:51Z 2026-03-03T12:59:51Z
suse-su-2026:0763-1 Security update for freerdp 2026-03-03T12:49:14Z 2026-03-03T12:49:14Z
suse-su-2026:0762-1 Security update for freerdp 2026-03-03T12:41:19Z 2026-03-03T12:41:19Z
suse-su-2026:0761-1 Security update for freerdp 2026-03-03T12:40:21Z 2026-03-03T12:40:21Z
suse-su-2026:0760-1 Security update for go1.25-openssl 2026-03-03T12:38:06Z 2026-03-03T12:38:06Z
suse-su-2026:0759-1 Security update for busybox 2026-03-03T12:16:46Z 2026-03-03T12:16:46Z
suse-su-2026:0758-1 Security update for busybox 2026-03-03T12:16:05Z 2026-03-03T12:16:05Z
suse-su-2026:20623-1 Security update for go1.25-openssl 2026-03-03T09:05:27Z 2026-03-03T09:05:27Z
suse-su-2026:20604-1 Security update for assertj-core 2026-03-02T16:00:39Z 2026-03-02T16:00:39Z
suse-su-2026:20603-1 Security update for rhino 2026-03-02T16:00:39Z 2026-03-02T16:00:39Z
suse-su-2026:20536-1 Security update for glibc 2026-03-02T14:49:34Z 2026-03-02T14:49:34Z
suse-su-2026:20535-1 Security update for cups 2026-03-02T14:17:19Z 2026-03-02T14:17:19Z
suse-su-2026:20534-1 Security update for rust-keylime 2026-03-02T14:16:07Z 2026-03-02T14:16:07Z
suse-su-2026:20529-1 Security update for libsoup 2026-03-02T13:19:17Z 2026-03-02T13:19:17Z
suse-su-2026:20528-1 Security update for cups 2026-03-02T13:19:17Z 2026-03-02T13:19:17Z
suse-su-2026:0748-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7) 2026-03-02T12:04:07Z 2026-03-02T12:04:07Z
suse-su-2026:20600-1 Security update for cpp-httplib 2026-03-02T10:16:12Z 2026-03-02T10:16:12Z
suse-su-2026:20558-1 Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) 2026-03-02T10:01:23Z 2026-03-02T10:01:23Z
suse-su-2026:0745-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP6) 2026-03-02T09:34:17Z 2026-03-02T09:34:17Z
suse-su-2026:0741-1 Security update for shim 2026-03-02T08:11:15Z 2026-03-02T08:11:15Z
suse-su-2026:0740-1 Security update for mozilla-nss 2026-03-02T08:10:37Z 2026-03-02T08:10:37Z
suse-su-2026:0736-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) 2026-03-02T07:04:29Z 2026-03-02T07:04:29Z
suse-su-2026:0734-1 Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) 2026-03-01T19:33:48Z 2026-03-01T19:33:48Z
suse-su-2026:0731-1 Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) 2026-03-01T16:35:28Z 2026-03-01T16:35:28Z
suse-su-2026:20621-1 Security update for python-azure-core 2026-03-01T16:00:33Z 2026-03-01T16:00:33Z
suse-su-2026:20617-1 Security update for python-azure-core 2026-03-01T15:59:58Z 2026-03-01T15:59:58Z
suse-su-2026:0727-1 Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) 2026-03-01T12:04:27Z 2026-03-01T12:04:27Z
suse-su-2026:0725-1 Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) 2026-03-01T10:04:27Z 2026-03-01T10:04:27Z
suse-su-2026:0713-1 Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5) 2026-03-01T07:33:38Z 2026-03-01T07:33:38Z
ID Description Published Updated
alsa-2025:10136 Important: python3.9 security update 2025-07-01T00:00:00Z 2025-07-02T06:48:36Z
alsa-2025:10128 Important: python3 security update 2025-07-01T00:00:00Z 2025-07-02T07:44:25Z
alsa-2025:10110 Important: sudo security update 2025-07-01T00:00:00Z 2025-07-02T07:33:23Z
alsa-2025:10074 Important: firefox security update 2025-07-01T00:00:00Z 2025-07-01T19:42:56Z
alsa-2025:10073 Important: firefox security update 2025-07-01T00:00:00Z 2025-07-01T19:42:01Z
alsa-2025:10072 Important: firefox security update 2025-07-01T00:00:00Z 2025-07-01T19:40:59Z
alsa-2025:10031 Important: python3.12 security update 2025-07-01T00:00:00Z 2025-07-01T19:39:28Z
alsa-2025:10027 Important: pam security update 2025-07-01T00:00:00Z 2025-07-01T19:37:31Z
alsa-2025:10026 Important: python3.11 security update 2025-07-01T00:00:00Z 2025-07-01T19:35:29Z
alsa-2025:9978 Important: sudo security update 2025-06-30T00:00:00Z 2025-07-01T19:33:15Z
alsa-2025:9940 Moderate: python-setuptools security update 2025-06-30T00:00:00Z 2025-07-01T20:38:28Z
alsa-2025:9896 Moderate: kernel security update 2025-06-30T00:00:00Z 2025-07-08T16:43:34Z
alsa-2025:9880 Moderate: kernel security update 2025-06-30T00:00:00Z 2025-07-02T07:28:52Z
alsa-2025:9878 Important: libblockdev security update 2025-06-30T00:00:00Z 2025-07-01T22:08:46Z
alsa-2025:9877 Moderate: glibc security update 2025-06-30T00:00:00Z 2025-06-30T12:53:53Z
alsa-2025:9845 Moderate: weldr-client security update 2025-06-26T00:00:00Z 2025-06-30T12:56:17Z
alsa-2025:9844 Moderate: osbuild-composer security update 2025-06-26T00:00:00Z 2025-06-30T12:59:48Z
alsa-2025:9635 Moderate: weldr-client security update 2025-06-25T00:00:00Z 2025-06-30T13:02:02Z
alsa-2025:9634 Moderate: osbuild-composer security update 2025-06-25T00:00:00Z 2025-06-30T13:03:46Z
alsa-2025:9623 Moderate: osbuild-composer security update 2025-06-25T00:00:00Z 2025-07-28T08:31:22Z
alsa-2025:9605 Important: perl-File-Find-Rule security update 2025-06-25T00:00:00Z 2025-06-26T18:41:23Z
alsa-2025:9581 Moderate: kernel-rt security update 2025-06-25T00:00:00Z 2025-07-02T07:09:02Z
alsa-2025:9580 Moderate: kernel security update 2025-06-25T00:00:00Z 2025-06-26T18:38:42Z
alsa-2025:9526 Important: pam security update 2025-06-24T00:00:00Z 2025-06-26T18:29:59Z
alsa-2025:9517 Important: perl-File-Find-Rule security update 2025-06-24T00:00:00Z 2025-06-30T13:05:26Z
alsa-2025:9486 Moderate: qt6-qtbase security update 2025-06-24T00:00:00Z 2025-07-28T08:35:47Z
alsa-2025:9466 Moderate: mod_proxy_cluster security update 2025-06-24T00:00:00Z 2025-06-25T13:23:38Z
alsa-2025:9462 Moderate: qt5-qtbase security update 2025-06-24T00:00:00Z 2025-06-30T13:07:19Z
alsa-2025:9448 Moderate: emacs security update 2025-06-24T00:00:00Z 2025-06-30T13:09:25Z
alsa-2025:9434 Moderate: mod_proxy_cluster security update 2025-06-24T00:00:00Z 2025-06-30T13:11:00Z
ID Description Published Updated
osv-2023-719 Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString 2023-08-21T14:02:38.497581Z 2023-08-21T14:02:38.497866Z
osv-2023-717 Heap-buffer-overflow in bit_TV_to_utf8_codepage 2023-08-21T14:00:28.036480Z 2023-12-01T14:22:18.777534Z
osv-2023-715 Stack-use-after-scope in ulocimp_addLikelySubtags_74 2023-08-21T14:00:19.885505Z 2023-08-23T15:32:00.801902Z
osv-2023-714 Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields 2023-08-19T14:02:15.130219Z 2023-08-19T14:02:15.130475Z
osv-2023-710 Heap-buffer-overflow in Flow::dissectMDNS 2023-08-19T14:00:12.746394Z 2023-08-19T14:00:12.746652Z
osv-2023-709 Heap-buffer-overflow in QOIHandler::read 2023-08-18T14:02:53.146275Z 2023-08-20T14:15:45.069773Z
osv-2023-705 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton 2023-08-17T14:00:59.717535Z 2023-08-19T14:26:28.816770Z
osv-2023-697 Heap-buffer-overflow in IEC104Stats::processPacket 2023-08-15T14:01:02.977387Z 2023-08-15T14:01:02.977646Z
osv-2023-696 Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone 2023-08-14T14:00:47.094365Z 2023-08-14T14:00:47.094611Z
osv-2023-693 Security exception in org.json.JSONArray.writeTo 2023-08-13T14:00:24.146135Z 2023-08-13T14:00:24.146368Z
osv-2023-692 Invalid-free in reset_context 2023-08-13T14:00:16.114233Z 2024-09-01T14:21:14.987075Z
osv-2023-689 Use-of-uninitialized-value 2023-08-12T14:02:14.530750Z 2023-08-12T14:02:14.531027Z
osv-2023-688 Invalid-free in Flow::~Flow 2023-08-12T14:00:58.558753Z 2023-08-12T14:00:58.559035Z
osv-2023-685 Invalid-free in reset_context 2023-08-11T14:02:10.018940Z 2024-09-01T14:21:29.336035Z
osv-2023-684 Heap-use-after-free in __xmlRaiseError 2023-08-11T14:02:03.986718Z 2023-08-11T14:02:03.986997Z
osv-2023-680 Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren 2023-08-11T14:00:29.963332Z 2023-08-11T14:00:29.963569Z
osv-2023-675 Heap-use-after-free in parse_options 2023-08-09T14:02:25.748940Z 2024-04-29T14:13:24.917092Z
osv-2023-674 Heap-buffer-overflow in get_grouplength 2023-08-09T14:02:09.770996Z 2023-08-09T14:02:09.771217Z
osv-2023-673 Heap-buffer-overflow in match 2023-08-09T14:01:09.834447Z 2023-08-09T14:01:09.834676Z
osv-2023-665 Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren 2023-08-08T14:02:01.481029Z 2023-08-08T14:02:01.481263Z
osv-2023-663 Segv on unknown address in decUnitCompare 2023-08-08T14:00:59.624933Z 2023-08-08T14:00:59.625154Z
osv-2023-662 Security exception in org.apache.commons.io.IOUtils.byteArray 2023-08-08T14:00:57.801101Z 2023-08-08T14:00:57.801377Z
osv-2023-660 Security exception in org.apache.poi.hwpf.model.StyleSheet.createPap 2023-08-08T14:00:31.168112Z 2023-08-08T14:00:31.168352Z
osv-2023-645 Segv on unknown address in decUnitCompare 2023-08-04T14:02:38.270949Z 2023-08-04T14:02:38.271192Z
osv-2023-640 Stack-buffer-overflow in initialize_encryption_key 2023-08-04T14:00:55.352181Z 2023-08-17T14:21:56.675468Z
osv-2022-1280 Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode 2023-08-04T14:00:41.927304Z 2023-08-04T14:00:41.927544Z
osv-2023-636 Security exception in jflex.core.NFA.insertNFA 2023-08-03T14:00:58.919043Z 2023-08-03T14:00:58.919497Z
osv-2023-634 Heap-buffer-overflow in bit_read_BB 2023-08-02T14:02:44.231233Z 2023-11-01T14:21:43.594840Z
osv-2023-631 Heap-buffer-overflow in test_verify 2023-08-01T14:02:11.454420Z 2023-08-01T14:02:11.454673Z
osv-2023-627 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton 2023-07-31T14:00:58.902209Z 2023-07-31T14:00:58.902458Z
ID Description Published Updated
rustsec-2020-0164 `cell-project` used incorrect variance when projecting through `&Cell<T>` 2020-08-27T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0035 Chunk API does not respect align requirement 2020-08-25T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0034 Multiple security issues including data race, buffer overflow, and uninitialized memory drop 2020-08-25T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0033 Matrix::new() drops uninitialized memory 2020-08-25T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0032 StrcCtx deallocates a memory region that it doesn't own 2020-08-20T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0030 Missing sanitization in mozwire allows local file overwrite of files ending in .conf 2020-08-18T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0168 mach is unmaintained 2020-07-14T12:00:00Z 2023-03-12T06:59:25Z
rustsec-2020-0024 Improper uniqueness verification of signature threshold 2020-07-09T12:00:00Z 2021-10-19T22:14:35Z
rustsec-2020-0165 mozjpeg DecompressScanlines::read_scanlines is Unsound 2020-07-04T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0022 Ozone contains several memory safety issues 2020-07-04T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0052 Undefined Behavior in bounded channel 2020-06-26T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0026 linked-hash-map creates uninitialized NonNull pointer 2020-06-23T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0167 `pnet_packet` buffer overrun in `set_payload` setters 2020-06-19T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0031 HTTP Request smuggling through malformed Transfer Encoding headers 2020-06-16T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0029 Allows viewing and modifying arbitrary structs as bytes 2020-06-14T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0157 Improper Synchronization and Race Condition in vm-memory 2020-06-02T12:00:00Z 2021-09-10T15:50:27Z
rustsec-2020-0027 traitobject assumes the layout of fat pointers 2020-06-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0100 Double free when calling `sys_info::disk_info` from multiple threads 2020-05-31T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0017 Use after free in ArcIntern::drop 2020-05-28T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0028 `LocalRequest::clone` creates multiple mutable references to the same object 2020-05-27T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0018 crate has been renamed to `block-cipher` 2020-05-26T12:00:00Z 2020-10-02T01:29:11Z
rustsec-2020-0019 tokio-rustls reads may cause excessive memory usage 2020-05-19T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0021 rio allows a use-after-free buffer access when a future is leaked 2020-05-11T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0161 `array!` macro is unsound in presence of traits that implement methods it calls internally 2020-05-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0025 bigint is unmaintained, use uint instead 2020-05-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0056 stdweb is unmaintained 2020-05-04T12:00:00Z 2020-10-25T18:57:46Z
rustsec-2020-0061 futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer 2020-05-03T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2020-0036 failure is officially deprecated/unmaintained 2020-05-02T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2020-0016 `net2` crate has been deprecated; use `socket2` instead 2020-05-01T12:00:00Z 2020-10-02T01:29:11Z
rustsec-2020-0015 Crash causing Denial of Service attack 2020-04-25T12:00:00Z 2023-06-13T13:10:24Z
ID Description Published Updated
bit-mongodb-2025-6711 Incomplete Redaction of Sensitive Information in MongoDB Server Logs 2025-10-05T23:44:13.320Z 2025-10-06T00:06:00.502Z
bit-discourse-2025-59337 Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments 2025-10-05T23:41:00.220Z 2025-10-06T00:06:00.502Z
bit-discourse-2025-58055 Discourse AI Suggestions Contain Insecure Direct Object Reference 2025-10-05T23:40:58.710Z 2025-10-24T15:07:36.996Z
bit-discourse-2025-58054 Discourse is vulnerable to XSS when quoting chat messages 2025-10-05T23:40:57.314Z 2025-10-24T15:07:36.996Z
bit-powershell-2025-49734 PowerShell Direct Elevation of Privilege Vulnerability 2025-10-03T08:49:03.988Z 2025-10-03T09:07:39.166Z
bit-mongodb-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server 2025-10-02T14:44:36.017Z 2025-10-02T15:07:00.184Z
bit-mongoose-2024-53900 2025-10-02T14:44:18.222Z 2025-11-06T13:25:46.476Z
bit-gitlab-2025-9958 Insertion of Sensitive Information Into Sent Data in GitLab 2025-10-01T15:13:13.235Z 2025-11-07T09:06:54.375Z
bit-gitlab-2025-9642 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-10-01T15:13:11.350Z 2025-10-01T15:14:38.852Z
bit-gitlab-2025-8014 Allocation of Resources Without Limits or Throttling in GitLab 2025-10-01T15:13:07.496Z 2025-10-01T15:14:38.852Z
bit-gitlab-2025-7691 Privilege Defined With Unsafe Actions in GitLab 2025-10-01T15:13:01.621Z 2025-10-01T15:14:38.852Z
bit-gitlab-2025-5069 Incorrect Ownership Assignment in GitLab 2025-10-01T15:12:30.475Z 2025-10-01T15:14:38.852Z
bit-gitlab-2025-11042 Allocation of Resources Without Limits or Throttling in GitLab 2025-10-01T15:11:04.156Z 2025-10-01T15:14:38.852Z
bit-gitlab-2025-10871 Missing Authorization in GitLab 2025-10-01T15:11:02.199Z 2025-10-01T15:14:38.852Z
bit-gitlab-2025-10868 Business Logic Errors in GitLab 2025-10-01T15:11:00.230Z 2025-10-01T15:14:38.852Z
bit-gitlab-2025-10867 Allocation of Resources Without Limits or Throttling in GitLab 2025-10-01T15:10:58.294Z 2025-10-01T15:14:38.852Z
bit-gitlab-2025-10858 Allocation of Resources Without Limits or Throttling in GitLab 2025-10-01T15:10:56.334Z 2025-10-01T15:14:38.852Z
bit-mongodb-2024-3374 MongoDB Server (mongod) may crash when generating ftdc 2025-10-01T14:49:48.814Z 2025-10-01T15:14:38.852Z
bit-jupyterlab-2025-59842 JupyterLab LaTeX typesetter links did not enforce `noopener` attribute 2025-10-01T14:43:22.333Z 2025-10-01T15:14:38.852Z
bit-airflow-2025-54831 Apache Airflow: Connection sensitive details exposed to users with READ permissions 2025-10-01T14:39:16.556Z 2025-11-06T13:25:46.476Z
bit-zookeeper-2025-58457 Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands 2025-09-26T08:51:26.070Z 2025-11-06T13:25:46.476Z
bit-pip-2025-8869 Fallback tar extraction in pip doesn't check symbolic links point to extraction directory 2025-09-26T08:48:13.610Z 2025-11-06T13:25:46.476Z
bit-wordpress-2025-58674 WordPress core <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability 2025-09-25T08:55:10.378Z 2026-04-23T18:12:09.750Z
bit-wordpress-2025-58246 WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability 2025-09-25T08:55:08.592Z 2025-10-02T15:07:00.184Z
bit-valkey-2025-46686 2025-09-25T08:53:41.270Z 2025-09-25T09:09:38.625Z
bit-redis-2025-46686 2025-09-25T08:52:27.726Z 2025-10-03T15:12:57.579Z
bit-mlflow-2025-52967 2025-09-25T08:47:37.376Z 2025-09-25T09:09:38.625Z
bit-mongodb-2025-3085 MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked 2025-09-25T08:47:27.812Z 2025-09-25T09:09:38.625Z
bit-mongodb-2025-3084 MongoDB Server may crash due to improper validation of explain command 2025-09-25T08:47:26.320Z 2025-09-25T09:09:38.625Z
bit-mongoose-2025-23061 2025-09-25T08:46:40.232Z 2025-10-06T00:06:00.502Z
ID Description Updated
ID Description Published Updated
certfr-2025-avi-0729 Multiples vulnérabilités dans Qnap File Station 2025-08-26T00:00:00.000000 2025-08-26T00:00:00.000000
certfr-2025-avi-0728 Vulnérabilité dans Centreon Web 2025-08-25T00:00:00.000000 2025-08-25T00:00:00.000000
certfr-2025-avi-0727 Multiples vulnérabilités dans les produits ESET 2025-08-25T00:00:00.000000 2025-08-25T00:00:00.000000
certfr-2025-avi-0726 Vulnérabilité dans les produits Moxa 2025-08-25T00:00:00.000000 2025-08-25T00:00:00.000000
certfr-2025-avi-0725 Vulnérabilité dans Liferay 2025-08-25T00:00:00.000000 2025-08-25T00:00:00.000000
certfr-2025-avi-0724 Multiples vulnérabilités dans les produits IBM 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0723 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0722 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0721 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0720 Multiples vulnérabilités dans Microsoft Windows 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0719 Vulnérabilité dans Microsoft Edge 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0718 Multiples vulnérabilités dans les produits Liferay 2025-08-22T00:00:00.000000 2025-08-22T00:00:00.000000
certfr-2025-avi-0717 Vulnérabilité dans Elastic Beats 2025-08-21T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0716 Vulnérabilité dans les produits Apple 2025-08-21T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0715 Multiples vulnérabilités dans les produits Liferay 2025-08-21T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0714 Multiples vulnérabilités dans les produits Mozilla 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0713 Multiples vulnérabilités dans les produits Liferay 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0712 Vulnérabilité dans Apereo CAS 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0711 Vulnérabilité dans Google Chrome 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0710 Multiples vulnérabilités dans les produits F5 2025-08-19T00:00:00.000000 2025-08-19T00:00:00.000000
certfr-2025-avi-0709 Multiples vulnérabilités dans les produits Liferay 2025-08-19T00:00:00.000000 2025-08-19T00:00:00.000000
certfr-2025-avi-0708 Multiples vulnérabilités dans les produits Cisco 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0707 Multiples vulnérabilités dans Mattermost Server 2025-08-18T00:00:00.000000 2025-09-16T00:00:00.000000
certfr-2025-avi-0706 Multiples vulnérabilités dans Matrix 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0705 Multiples vulnérabilités dans Microsoft Edge 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0704 Vulnérabilité dans les produits Siemens 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0703 Vulnérabilité dans Synology BeeDrive 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0702 Multiples vulnérabilités dans PostgreSQL 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0701 Vulnérabilité dans IBM WebSphere 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0700 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
ID Description Published Updated
jvndb-2021-000079 Multiple cross-site scripting vulnerabilities in Movable Type 2021-08-25T14:54+09:00 2021-08-25T14:54+09:00
jvndb-2021-000078 The installers of multiple Sony products may insecurely load Dynamic Link Libraries 2021-08-24T14:30+09:00 2021-08-24T14:30+09:00
jvndb-2021-002282 Multiple vulnerabilities in Navigate CMS 2021-08-20T14:25+09:00 2021-08-20T14:25+09:00
jvndb-2021-002279 Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises 2021-08-19T15:01+09:00 2021-08-19T15:01+09:00
jvndb-2021-000077 Huawei EchoLife HG8045Q vulnerable to OS command injection 2021-08-17T14:24+09:00 2021-08-17T14:24+09:00
jvndb-2021-002273 Multiple vulnerabilities in D-Link router DSL-2750U 2021-08-17T14:09+09:00 2021-08-17T14:09+09:00
jvndb-2021-000076 Plone vulnerable to open redirect 2021-08-12T14:05+09:00 2021-08-12T14:05+09:00
jvndb-2021-000075 WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting 2021-08-10T14:40+09:00 2021-08-10T14:40+09:00
jvndb-2021-002077 Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises 2021-08-04T11:15+09:00 2021-08-04T11:15+09:00
jvndb-2021-000073 Multiple vulnerabilities in Cybozu Garoon 2021-08-02T16:42+09:00 2022-05-24T15:16+09:00
jvndb-2021-000072 Minecraft Java Edition vulnerable to directory traversal 2021-07-21T15:12+09:00 2021-07-21T15:12+09:00
jvndb-2021-002005 Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting 2021-07-19T16:53+09:00 2021-07-19T16:53+09:00
jvndb-2021-000070 Multiple vulnerabilities in GroupSession 2021-07-19T15:41+09:00 2023-03-08T17:02+09:00
jvndb-2021-000069 Optical BB unit E-WMTA2.3 vulnerable to cross-site request forgery 2021-07-14T17:13+09:00 2021-07-14T17:13+09:00
jvndb-2021-000068 Multiple vulnerabilities in Retty App 2021-07-13T14:34+09:00 2023-03-08T17:02+09:00
jvndb-2021-000067 voidtools "Everything" vulnerable to HTTP header injection 2021-07-09T14:40+09:00 2021-07-09T14:40+09:00
jvndb-2021-000065 WordPress Plugin "WordPress Meta Data Filter & Taxonomies Filter" vulnerable to cross-site request forgery 2021-07-08T14:29+09:00 2021-07-08T14:29+09:00
jvndb-2021-000066 WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery 2021-07-08T13:45+09:00 2021-07-08T13:45+09:00
jvndb-2021-001977 Multiple vulnerabilities in Elecom routers 2021-07-07T14:03+09:00 2021-07-12T16:04+09:00
jvndb-2021-000064 GU App for Android fails to restrict access permissions 2021-07-07T13:16+09:00 2021-07-07T13:16+09:00
jvndb-2021-001968 Multiple vulnerabilities in Trend Micro Password Manager 2021-07-06T16:08+09:00 2021-07-06T16:08+09:00
jvndb-2021-000063 WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery 2021-07-06T14:50+09:00 2021-07-06T14:50+09:00
jvndb-2021-000062 WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery 2021-07-06T14:11+09:00 2021-07-06T14:11+09:00
jvndb-2021-000061 A-Stage SCT-40CM01SR and AT-40CM01SR vulnerable to authentication bypass 2021-07-05T14:28+09:00 2021-07-05T14:28+09:00
jvndb-2021-000059 EC-CUBE fails to restrict access permissions 2021-07-01T15:49+09:00 2021-07-01T15:49+09:00
jvndb-2007-002102 boastMachine vulnerable to cross-site scripting 2021-06-30T14:32+09:00 2021-06-30T14:32+09:00
jvndb-2021-000058 IkaIka RSS Reader vulnerable to cross-site scripting 2021-06-30T14:21+09:00 2021-06-30T14:21+09:00
jvndb-2021-000056 WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting 2021-06-30T11:36+09:00 2021-06-30T11:36+09:00
jvndb-2021-000057 Multiple cross-site scripting vulnerabilities in EC-CUBE 2021-06-23T15:15+09:00 2021-06-23T15:15+09:00
jvndb-2021-000055 WordPress plugin "Fudousan plugin" series vulnerable to cross-site scripting 2021-06-22T15:06+09:00 2021-06-22T15:06+09:00
ID Description Published Updated
cnvd-2026-09629 MedDream PACS Premium modifyEmail功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09628 MedDream PACS Premium modifyCoercion功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09627 MedDream PACS Premium modifyAutopurgeFilter功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09626 MedDream PACS Premium modifyAeTitle功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09625 MedDream PACS Premium ldapUser功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09624 MedDream PACS Premium fetchPriorStudies功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09623 MedDream PACS Premium existingUser功能跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09622 MedDream PACS Premium encapsulatedDoc功能跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09621 MedDream PACS Premium config.php功能worklistsrc参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09620 MedDream PACS Premium config.php功能uploaddir参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09619 MedDream PACS Premium config.php功能thumbnaildir参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09618 MedDream PACS Premium config.php功能status参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09617 MedDream PACS Premium config.php功能phpexe参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09616 MedDream PACS Premium config.php功能phpdir参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09615 MedDream PACS Premium config.php功能longtermdir参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09614 MedDream PACS Premium config.php功能imagedir参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09461 WordPress插件AWP Classifieds信息泄露漏洞 2026-01-30 2026-02-02
cnvd-2026-16410 HCL AION存在未明漏洞(CNVD-2026-16410) 2026-01-29 2026-04-09
cnvd-2026-16409 HCL AION信息泄露漏洞(CNVD-2026-16409) 2026-01-29 2026-04-09
cnvd-2026-16408 HCL AION文件上传漏洞 2026-01-29 2026-04-09
cnvd-2026-16407 HCL AION存在未明漏洞(CNVD-2026-16407) 2026-01-29 2026-04-09
cnvd-2026-16406 HCL AION存在未明漏洞(CNVD-2026-16406) 2026-01-29 2026-04-09
cnvd-2026-16405 HCL AION信息泄露漏洞(CNVD-2026-16405) 2026-01-29 2026-04-09
cnvd-2026-16404 HCL AION安全绕过漏洞(CNVD-2026-16404) 2026-01-29 2026-04-08
cnvd-2026-10667 MedDream PACS Premium跨站脚本漏洞(CNVD-2026-10667) 2026-01-29 2026-02-11
cnvd-2026-09794 Apache bRPC远程命令注入漏洞 2026-01-29 2026-01-30
cnvd-2026-12367 NVIDIA Merlin Transformers4Rec代码注入漏洞 2026-01-26 2026-03-03
cnvd-2026-11738 MedDream PACS Premium跨站脚本漏洞(CNVD-2026-11738) 2026-01-26 2026-02-24
cnvd-2026-11737 MedDream PACS Premium跨站脚本漏洞(CNVD-2026-11737) 2026-01-26 2026-02-24
cnvd-2026-10670 MedDream PACS Premium跨站脚本漏洞(CNVD-2026-10670) 2026-01-26 2026-02-11
ID Description Published Updated
bdu:2026-00754 Уязвимость платформы хранения данных Dell ECS, связанная с передачей данных в открытом ви… 23.01.2026 23.01.2026
bdu:2026-00753 Уязвимость платформы хранения данных Dell ECS, связанная с использованием учетных данных … 23.01.2026 23.01.2026
bdu:2026-00752 Уязвимость платформы хранения данных Dell ECS, связанная с передачей данных в открытом ви… 23.01.2026 23.01.2026
bdu:2026-00751 Уязвимость функции fsl_otg_remove() модуля drivers/usb/phy/phy-fsl-usb.c ядра операционно… 23.01.2026 27.01.2026
bdu:2026-00750 Уязвимость функции hfs_bnode_get() модуля fs/hfsplus/bnode.c набора инструментов в Linux … 23.01.2026 27.01.2026
bdu:2026-00749 Уязвимость функции f2fs_write_cache_pages() модуля fs/f2fs/data.c поддержки файловой сист… 23.01.2026 27.01.2026
bdu:2026-00748 Уязвимость модуля drivers/spi/spi-fsl-spi.c драйвера процессора коммуникаций Freescale (C… 23.01.2026 27.01.2026
bdu:2026-00747 Уязвимость функции ocfs2_find_victim_chain() компонента fs/ocfs2/suballoc.c поддержки фай… 23.01.2026 27.01.2026
bdu:2026-00746 Уязвимость компонента drivers/input/touchscreen/ti_am335x_tsc.c драйвера для интерфейса с… 23.01.2026 27.01.2026
bdu:2026-00745 Уязвимость компонента net/mlx5e драйвера поддержки сетевых адаптеров Ethernet Mellanox яд… 23.01.2026 23.01.2026
bdu:2026-00744 Уязвимость функции f2fs_recover_fsync_data() модуля fs/f2fs/super.c поддержки файловой си… 23.01.2026 27.01.2026
bdu:2026-00743 Уязвимость функции check_lock_range() модуля fs/smb/server/vfs.c ядра операционной систем… 23.01.2026 27.01.2026
bdu:2026-00742 Уязвимость пакета для работы с файловой системой HFS+ hfsplus ядра операционной системы L… 23.01.2026 27.01.2026
bdu:2026-00741 Уязвимость функции nr_sendmsg() модуля net/netrom/nr_out.c ядра операционной системы Linu… 23.01.2026 27.01.2026
bdu:2026-00740 Уязвимость модулей kernel/sched/cpudeadline.c, kernel/sched/cpudeadline.h, kernel/sched/d… 23.01.2026 27.01.2026
bdu:2026-00739 Уязвимость функции xchk_setup_xattr_buf() модуля fs/xfs/scrub/attr_repair.c ядра операцио… 23.01.2026 27.01.2026
bdu:2026-00738 Уязвимость функции fqdir_pre_exit() модуля include/net/inet_frag.h ядра операционной сист… 23.01.2026 23.01.2026
bdu:2026-00737 Уязвимость функции remove_pending() компонента net/handshake реализации механизма установ… 23.01.2026 27.01.2026
bdu:2026-00736 Уязвимость компонента Core виртуальной машины Oracle VM VirtualBox, позволяющая нарушител… 23.01.2026 23.01.2026
bdu:2026-00735 Уязвимость функции bnxt_rx_xdp() компонента drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c… 23.01.2026 27.01.2026
bdu:2026-00734 Уязвимость функции prp_get_untagged_frame() модуля net/hsr реализации протокола бесшовног… 23.01.2026 27.01.2026
bdu:2026-00733 Уязвимость модуля fs/notify/fsnotify.c ядра операционной системы Linux, позволяющая наруш… 23.01.2026 27.01.2026
bdu:2026-00732 Уязвимость функции ibmpex_high_low_store() модуля drivers/hwmon/ibmpex.c ядра операционно… 23.01.2026 27.01.2026
bdu:2026-00731 Уязвимость функции get_meter_levels_from_urb() модуля sound/usb/mixer_us16x08.c ядра опер… 23.01.2026 27.01.2026
bdu:2026-00730 Уязвимость модуля drivers/target/target_core_transport.c драйвера поддержки устройств SCS… 23.01.2026 27.01.2026
bdu:2026-00729 Уязвимость HTML-редактора Adobe Dreamweaver, связанная с непринятием мер по нейтрализации… 23.01.2026 23.01.2026
bdu:2026-00728 Уязвимость HTML-редактора Adobe Dreamweaver, связанная с недостаточной проверкой вводимых… 23.01.2026 23.01.2026
bdu:2026-00727 Уязвимость HTML-редактора Adobe Dreamweaver, связанная с недостаточной проверкой вводимых… 23.01.2026 23.01.2026
bdu:2026-00726 Уязвимость HTML-редактора Adobe Dreamweaver, связанная с недостаточной проверкой вводимых… 23.01.2026 23.01.2026
bdu:2026-00725 Уязвимость HTML-редактора Adobe Dreamweaver, связанная с недостатками процедуры авторизац… 23.01.2026 23.01.2026
ID Description Updated
var-201501-0338 The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1… 2026-03-09T22:30:39.973000Z
var-201904-0753 A memory corruption issue was addressed with improved validation. This issue affected ver… 2026-03-09T22:30:07.612000Z
var-202201-0104 In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtt… 2026-03-09T22:28:24.624000Z
var-201107-0102 Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execut… 2026-03-09T22:28:22.774000Z
var-201910-1509 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_pri… 2026-03-09T22:28:20.384000Z
var-202001-1433 When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data sm… 2026-03-09T22:28:09.316000Z
var-201007-0318 WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… 2026-03-09T22:27:31.330000Z
var-202101-1926 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer o… 2026-03-09T22:27:02.630000Z
var-201910-1485 The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. tcpdum… 2026-03-09T22:27:02.199000Z
var-201006-1169 Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… 2026-03-09T22:26:28.773000Z
var-202207-1485 An out-of-bounds write issue was addressed with improved input validation. This issue is … 2026-03-09T22:25:55.091000Z
var-201609-0593 Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.… 2026-03-09T22:25:31.902000Z
var-200310-0072 The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code… 2026-03-09T22:25:30.128000Z
var-200809-0009 ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attack… 2026-03-09T22:24:49.793000Z
var-201609-0225 xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tv… 2026-03-09T22:24:08.880000Z
var-200711-0560 Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matc… 2026-03-09T22:23:54.588000Z
var-200703-0018 Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to… 2026-03-09T22:23:52.792000Z
var-200910-0505 Use-after-free vulnerability in the abstract file-descriptor handling interface in the cu… 2026-03-09T22:23:19.643000Z
var-201809-0668 An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An… 2026-03-09T22:22:45.467000Z
var-201310-0614 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… 2026-03-09T22:22:44.802000Z
var-202105-1306 The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-… 2026-03-09T22:22:11.321000Z
var-200901-0742 WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM object… 2026-03-09T22:21:27.082000Z
var-201605-0491 The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, … 2026-03-09T22:21:26.998000Z
var-200603-0282 Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 1… 2026-03-09T22:21:17.860000Z
var-200106-0168 Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows lo… 2026-03-09T22:21:16.532000Z
var-201306-0250 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T22:21:15.728000Z
var-201806-1456 An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS befor… 2026-03-09T22:21:09.704000Z
var-202210-1526 The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macO… 2026-03-09T22:20:33.832000Z
var-201711-0480 An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… 2026-03-09T22:19:49.936000Z
var-201605-0145 Expat allows context-dependent attackers to cause a denial of service (crash) or possibly… 2026-03-09T22:19:46.968000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated