Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-38835 |
9.8 (3.1)
|
Tenda W30E V2.0 V16.01.0.21 was found to contain … |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-22T15:35:41.189Z |
| CVE-2026-38834 |
7.3 (3.1)
|
Tenda W30E V2.0 V16.01.0.21 was found to contain … |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-21T19:23:17.157Z |
| CVE-2026-37748 |
7.2 (3.1)
|
Visitor Management System 1.0 by sanjay1313 is vu… |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-21T18:25:24.762Z |
| CVE-2026-31019 |
8.8 (3.1)
|
In the Website module of Dolibarr ERP & CRM 22.0.… |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-21T18:23:33.693Z |
| CVE-2026-31018 |
8.8 (3.1)
|
In Dolibarr ERP & CRM <= 22.0.4, PHP code detecti… |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-21T15:31:23.441Z |
| CVE-2026-31014 |
6.3 (3.1)
|
Dovestones Softwares AD Self Update <4.0.0.5 is v… |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-21T18:21:08.828Z |
| CVE-2026-31013 |
6.1 (3.1)
|
Dovestones Softwares ADPhonebook <4.0.1.1 has a r… |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-21T18:19:12.306Z |
| CVE-2026-30452 |
6.5 (3.1)
|
Textpattern CMS 4.9.0 contains a Broken Access Co… |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-22T15:35:46.859Z |
| CVE-2026-29644 |
5.3 (3.1)
|
XiangShan (open-source high-performance RISC-V pr… |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-21T17:59:06.506Z |
| CVE-2025-70420 |
8.8 (3.1)
|
A SQL injection vulnerability exists in Genesys L… |
n/a |
n/a |
2026-04-21T00:00:00.000Z | 2026-04-22T15:35:35.730Z |
| CVE-2026-35570 |
8.4 (3.1)
|
OpenClaude has Sandbox Bypass via Early-Exit Logic Fla… |
Gitlawb |
openclaude |
2026-04-20T23:24:08.324Z | 2026-04-21T19:49:30.148Z |
| CVE-2026-35588 |
6.3 (3.1)
|
Glances has CQL Injection in its Cassandra Export Modu… |
nicolargo |
glances |
2026-04-20T23:20:34.998Z | 2026-04-21T13:35:04.526Z |
| CVE-2026-35587 |
7.3 (4.0)
|
Glances IP Plugin has SSRF via public_api that leads t… |
nicolargo |
glances |
2026-04-20T23:19:02.908Z | 2026-04-22T14:01:47.583Z |
| CVE-2026-34839 |
7.7 (4.0)
|
Glances Vulnerable to Cross-Origin Information Disclos… |
nicolargo |
glances |
2026-04-20T23:09:02.551Z | 2026-04-21T19:37:42.399Z |
| CVE-2026-41331 |
6.9 (4.0)
5.3 (3.1)
|
OpenClaw < 2026.3.31 - Resource Consumption via Unauth… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:17.653Z | 2026-04-21T20:27:46.881Z |
| CVE-2026-41330 |
2 (4.0)
4.4 (3.1)
|
OpenClaw < 2026.3.31 - Environment Variable Override v… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:16.941Z | 2026-04-21T13:39:27.598Z |
| CVE-2026-41329 |
9 (4.0)
9.9 (3.1)
|
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Co… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:16.222Z | 2026-04-21T19:38:16.140Z |
| CVE-2026-41303 |
8.7 (4.0)
8.8 (3.1)
|
OpenClaw < 2026.3.28 - Authorization Bypass in Discord… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:15.511Z | 2026-04-21T13:35:55.924Z |
| CVE-2026-41302 |
4.8 (4.0)
7.6 (3.1)
|
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:14.782Z | 2026-04-21T19:49:35.930Z |
| CVE-2026-41301 |
6.9 (4.0)
5.3 (3.1)
|
OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairi… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:14.023Z | 2026-04-21T13:33:53.554Z |
| CVE-2026-41300 |
6.9 (4.0)
6.5 (3.1)
|
OpenClaw < 2026.3.31 - Attacker-Discovered Endpoint Pr… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:13.304Z | 2026-04-21T13:03:24.309Z |
| CVE-2026-41299 |
7.1 (4.0)
7.1 (3.1)
|
OpenClaw < 2026.3.28 - Client Identity Spoofing in cha… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:12.586Z | 2026-04-21T13:38:25.512Z |
| CVE-2026-41298 |
5.3 (4.0)
5.4 (3.1)
|
OpenClaw < 2026.4.2 - Authorization Bypass in Session … |
OpenClaw |
OpenClaw |
2026-04-20T23:08:11.787Z | 2026-04-21T17:34:23.419Z |
| CVE-2026-41297 |
4.8 (4.0)
7.6 (3.1)
|
OpenClaw < 2026.3.31 - Server-Side Request Forgery via… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:10.955Z | 2026-04-21T13:41:34.057Z |
| CVE-2026-41296 |
8.8 (4.0)
8.2 (3.1)
|
OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race … |
OpenClaw |
OpenClaw |
2026-04-20T23:08:10.194Z | 2026-04-21T19:49:41.570Z |
| CVE-2026-41295 |
8.5 (4.0)
7.8 (3.1)
|
OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shad… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:09.503Z | 2026-04-21T13:35:47.883Z |
| CVE-2026-41294 |
8.5 (4.0)
8.6 (3.1)
|
OpenClaw < 2026.3.28 - Environment Variable Injection … |
OpenClaw |
OpenClaw |
2026-04-20T23:08:08.795Z | 2026-04-21T13:04:36.188Z |
| CVE-2026-40045 |
5.9 (4.0)
5.7 (3.1)
|
OpenClaw < 2026.4.2 - Cleartext Credential Transmissio… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:07.952Z | 2026-04-21T13:37:43.951Z |
| CVE-2026-34082 |
5.3 (4.0)
|
Dify has IDOR in deleting someone else's chat conversation |
langgenius |
dify |
2026-04-20T23:03:18.158Z | 2026-04-21T13:36:45.614Z |
| CVE-2026-5721 |
4.7 (3.1)
|
wpDataTables – WordPress Data Table, Dynamic Tables & … |
wpdatatables |
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin |
2026-04-20T22:25:26.695Z | 2026-04-21T19:49:47.411Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-6712 |
4.4 (3.1)
|
Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Sto… |
ryhowa |
Website LLMs.txt |
2026-04-21T06:43:59.539Z | 2026-04-21T13:47:53.867Z |
| CVE-2026-6711 |
6.1 (3.1)
|
Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting |
ryhowa |
Website LLMs.txt |
2026-04-21T06:43:59.951Z | 2026-04-21T13:51:33.148Z |
| CVE-2026-6703 |
4.3 (3.1)
|
Responsive Blocks <= 2.2.1 - Missing Authorization to … |
cyberchimps |
Responsive Blocks – Page Builder for Blocks & Patterns |
2026-04-21T06:43:58.955Z | 2026-04-21T16:36:19.694Z |
| CVE-2026-31370 |
6.3 (3.1)
|
Information Leak Vulnerability in Honor E |
Honor |
Honor E |
2026-04-21T06:30:53.883Z | 2026-04-21T13:25:53.570Z |
| CVE-2026-31369 |
3.2 (3.1)
|
Privilege Bypass in PcManager |
Honor |
PcManager |
2026-04-21T06:26:52.403Z | 2026-04-21T13:18:27.938Z |
| CVE-2026-31368 |
7.8 (3.1)
|
Privilege Bypass in AiAssistant |
Honor |
AIAssistant |
2026-04-21T06:40:08.446Z | 2026-04-21T13:23:57.396Z |
| CVE-2026-5965 |
9.3 (4.0)
9.8 (3.1)
|
NewSoft|NewSoftOA - OS Command Injection |
NewSoft |
NewSoftOA |
2026-04-21T03:32:55.138Z | 2026-04-21T13:20:58.795Z |
| CVE-2026-6675 |
5.3 (3.1)
|
Responsive Blocks <= 2.2.0 - Unauthenticated Open Emai… |
cyberchimps |
Responsive Blocks – Page Builder for Blocks & Patterns |
2026-04-21T02:25:39.847Z | 2026-04-21T13:22:00.182Z |
| CVE-2026-6674 |
6.5 (3.1)
|
Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authen… |
tholstkabelbwde |
Plugin: CMS für Motorrad Werkstätten |
2026-04-21T02:25:40.676Z | 2026-04-21T12:58:21.763Z |
| CVE-2026-40497 |
8.1 (3.1)
|
FreeScout Vulnerable to CSS Injection via Stored Style… |
freescout-help-desk |
freescout |
2026-04-21T01:45:55.492Z | 2026-04-21T13:25:21.103Z |
| CVE-2026-6058 |
4.5 (3.1)
|
** UNSUPPORTED WHEN ASSIGNED ** An improper encod… |
Zyxel |
WRE6505 v2 firmware |
2026-04-21T01:42:07.433Z | 2026-04-21T13:26:29.283Z |
| CVE-2026-40496 |
8.8 (4.0)
|
FreeScout has Predictable Attachment Token that Allows… |
freescout-help-desk |
freescout |
2026-04-21T01:38:50.117Z | 2026-04-21T13:50:39.454Z |
| CVE-2026-40250 |
8.4 (4.0)
|
OpenEXR has integer overflow in DWA decoder outBufferE… |
AcademySoftwareFoundation |
openexr |
2026-04-21T01:33:00.212Z | 2026-04-23T03:55:57.543Z |
| CVE-2026-40244 |
8.4 (4.0)
|
OpenEXR has integer overflow in DWA setupChannelData p… |
AcademySoftwareFoundation |
openexr |
2026-04-21T01:30:55.061Z | 2026-04-23T03:55:56.354Z |
| CVE-2026-39973 |
7.1 (3.1)
|
Apktool: Path Traversal to Arbitrary File Write |
iBotPeaches |
Apktool |
2026-04-21T01:35:22.396Z | 2026-04-23T03:56:04.482Z |
| CVE-2026-39886 |
5.3 (3.1)
|
OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl() |
AcademySoftwareFoundation |
openexr |
2026-04-21T01:27:01.371Z | 2026-04-21T13:49:21.573Z |
| CVE-2026-39866 |
7.4 (4.0)
|
Lawnchair vulnerable to Command Injection via unquoted… |
LawnchairLauncher |
lawnchair |
2026-04-21T01:19:47.510Z | 2026-04-23T03:55:58.650Z |
| CVE-2026-40264 |
2 (4.0)
|
OpenBao's Token Store Allows Cross-Namespace Renewal, … |
openbao |
openbao |
2026-04-21T00:47:38.156Z | 2026-04-21T19:30:51.975Z |
| CVE-2026-39946 |
4.6 (4.0)
|
OpenBao allows SQL Injection in PostgreSQL database se… |
openbao |
openbao |
2026-04-21T00:19:39.578Z | 2026-04-21T13:34:21.088Z |
| CVE-2026-39861 |
7.7 (4.0)
|
Claude Code: Sandbox Escape via Symlink Following Allo… |
anthropics |
claude-code |
2026-04-21T00:56:39.062Z | 2026-04-21T13:44:49.618Z |
| CVE-2026-39396 |
3.1 (3.1)
|
OpenBao has Decompression Bomb via Unbounded Copy in O… |
openbao |
openbao |
2026-04-21T00:44:53.943Z | 2026-04-21T19:49:18.821Z |
| CVE-2026-39388 |
2 (4.0)
|
OpenBao's Certificate Authentication Allows Token Rene… |
openbao |
openbao |
2026-04-21T00:43:22.920Z | 2026-04-21T19:36:07.865Z |
| CVE-2026-39386 |
8.8 (3.1)
|
Neko has Self-service Privilege Escalation for Authent… |
m1k1o |
neko |
2026-04-21T00:50:34.656Z | 2026-04-22T03:56:19.795Z |
| CVE-2026-39378 |
6.5 (3.1)
|
nbconvert has an Arbitrary File Read via Path Traversa… |
jupyter |
nbconvert |
2026-04-21T00:17:00.684Z | 2026-04-21T13:43:29.081Z |
| CVE-2026-39377 |
6.5 (3.1)
|
nbconvert has an Arbitrary File Write via Path Travers… |
jupyter |
nbconvert |
2026-04-21T00:14:59.937Z | 2026-04-21T19:49:24.475Z |
| CVE-2026-39320 |
7.5 (3.1)
|
Signal K Server has an Unauthenticated Regular Express… |
SignalK |
signalk-server |
2026-04-21T00:07:10.371Z | 2026-04-21T19:36:54.787Z |
| CVE-2026-41331 |
6.9 (4.0)
5.3 (3.1)
|
OpenClaw < 2026.3.31 - Resource Consumption via Unauth… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:17.653Z | 2026-04-21T20:27:46.881Z |
| CVE-2026-41330 |
2 (4.0)
4.4 (3.1)
|
OpenClaw < 2026.3.31 - Environment Variable Override v… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:16.941Z | 2026-04-21T13:39:27.598Z |
| CVE-2026-41329 |
9 (4.0)
9.9 (3.1)
|
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Co… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:16.222Z | 2026-04-21T19:38:16.140Z |
| CVE-2026-41303 |
8.7 (4.0)
8.8 (3.1)
|
OpenClaw < 2026.3.28 - Authorization Bypass in Discord… |
OpenClaw |
OpenClaw |
2026-04-20T23:08:15.511Z | 2026-04-21T13:35:55.924Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-6c34-3mhj-jwxw |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the fu… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-5pv2-86qj-5jf9 |
6.3 (3.1)
2.1 (4.0)
|
Cockpit has NoSQL Injection Through Content Aggregation Pipelines | 2026-04-20T12:32:01Z | 2026-04-23T21:47:54Z |
| ghsa-42cc-jrr3-ghpw |
4.3 (3.1)
2.1 (4.0)
|
A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b. Affect… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-38x4-r8qv-j5v2 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-293r-hxw5-cfmj |
2.4 (3.1)
4.8 (4.0)
|
A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an … | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-2836-hmqw-wf98 |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebEx… | 2026-04-20T12:32:01Z | 2026-04-20T12:32:01Z |
| ghsa-vqjc-m5xh-jhx3 |
|
In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free… | 2026-04-20T12:32:00Z | 2026-04-20T12:32:00Z |
| ghsa-q7h9-pvj5-g9fp |
|
In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds acces… | 2026-04-20T12:32:00Z | 2026-04-20T12:32:00Z |
| ghsa-x858-8gr5-586m |
5.1 (4.0)
|
Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain … | 2026-04-20T12:31:59Z | 2026-04-20T12:31:59Z |
| ghsa-vrr8-h7fq-ghr8 |
4.0 (3.1)
|
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-va… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-vr46-pfqh-wpf8 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unkno… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-q2rh-xrfv-8x3m |
9.8 (3.1)
9.3 (4.0)
|
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remo… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-p78m-rc6g-qfwc |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the functio… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-jp7c-75vm-9jwh |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewT… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-f5h4-jpqg-93m3 |
9.8 (3.1)
9.3 (4.0)
|
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remo… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-8v5m-jghx-mmxr |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the fu… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-7gm3-fv82-7h98 |
6.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affect… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-5qr4-57wv-4r2w |
7.3 (3.1)
5.5 (4.0)
|
A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue … | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-544v-v93w-x43g |
8.1 (3.1)
7.2 (4.0)
|
ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authe… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-49hc-46g6-4c47 |
8.8 (3.1)
8.7 (4.0)
|
ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenti… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-337w-xf2q-h5w2 |
6.3 (3.1)
2.1 (4.0)
|
A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-32w9-6rwg-p96w |
9.1 (3.1)
9.4 (4.0)
|
A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability a… | 2026-04-20T09:30:45Z | 2026-04-22T15:31:33Z |
| ghsa-3224-28wc-whrh |
7.8 (3.1)
8.5 (4.0)
|
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-2chg-78hj-c2w2 |
6.3 (3.1)
2.1 (4.0)
|
A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14. Affected by this v… | 2026-04-20T09:30:45Z | 2026-04-20T09:30:45Z |
| ghsa-pg76-qgmq-mvpq |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Affected is the functio… | 2026-04-20T09:30:44Z | 2026-04-20T09:30:44Z |
| ghsa-hq9j-qh3w-qvg3 |
3.1 (3.1)
1.3 (4.0)
|
A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown functio… | 2026-04-20T09:30:44Z | 2026-04-20T09:30:44Z |
| ghsa-9772-r9rh-h65v |
3.5 (3.1)
|
The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings,… | 2026-04-20T09:30:44Z | 2026-04-20T15:31:52Z |
| ghsa-6fpm-qhmq-mwq8 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This impacts the functi… | 2026-04-20T09:30:44Z | 2026-04-20T09:30:44Z |
| ghsa-46vm-f48w-xhvv |
9.9 (3.1)
8.6 (4.0)
|
A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stem… | 2026-04-20T09:30:44Z | 2026-04-22T15:31:33Z |
| ghsa-q2v9-jfqm-jfw4 |
6.3 (3.1)
2.1 (4.0)
|
A flaw has been found in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is the functio… | 2026-04-20T06:31:28Z | 2026-04-20T06:31:28Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-232 |
|
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAM… | nvflare | 2022-07-01T18:15:00Z | 2023-06-05T01:12:56.865026Z |
| pysec-2022-231 |
|
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation modu… | nvflare | 2022-07-01T18:15:00Z | 2023-06-05T01:12:56.789968Z |
| pysec-2022-224 |
|
Synapse is an open source home server implementation for the Matrix chat network. In vers… | matrix-synapse | 2022-06-28T17:15:00Z | 2022-07-14T05:11:53.027228Z |
| pysec-2022-222 |
|
The Security Team noticed that the termination condition of the for loop in the readExter… | systemds | 2022-06-27T18:15:00Z | 2022-07-14T05:11:54.728743Z |
| pysec-2022-43176 |
9.8 (3.1)
|
The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. Thi… | zibal | 2022-06-24T21:15:00Z | 2024-11-21T14:23:03.404044Z |
| pysec-2022-43172 |
9.8 (3.1)
|
The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor… | watertools | 2022-06-24T21:15:00Z | 2024-11-21T14:23:03.143453Z |
| pysec-2022-43169 |
9.8 (3.1)
|
The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution bac… | togglee | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.740031Z |
| pysec-2022-43168 |
9.8 (3.1)
|
The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backd… | sixfab-tool | 2022-06-24T21:15:00Z | 2022-07-06T19:30:00Z |
| pysec-2022-43165 |
9.8 (3.1)
|
The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution b… | scoptrial | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.181819Z |
| pysec-2022-43164 |
9.8 (3.1)
|
The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution … | rondolu-yt-concate | 2022-06-24T21:15:00Z | 2024-11-21T14:23:00.996865Z |
| pysec-2022-43133 |
9.8 (3.1)
|
The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor v… | drxhello | 2022-06-24T21:15:00Z | 2024-11-21T14:22:45.663614Z |
| pysec-2022-43132 |
9.8 (3.1)
|
The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution bac… | dr-web-engine | 2022-06-24T21:15:00Z | 2024-11-21T14:22:45.610409Z |
| pysec-2022-43073 |
9.8 (3.1)
|
The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backd… | cloudlabeling | 2022-06-24T21:15:00Z | 2024-11-21T14:22:42.118573Z |
| pysec-2022-43066 |
9.8 (3.1)
|
The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor vi… | aamiles | 2022-06-24T21:15:00Z | 2024-11-21T14:22:40.256677Z |
| pysec-2022-221 |
|
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code exe… | catly-translate | 2022-06-24T21:15:00Z | 2022-07-06T20:32:04.087337Z |
| pysec-2022-220 |
|
** Reserved ** The pyesasky for python, as distributed on PyPI, included a code-execution… | pyesasky | 2022-06-24T21:15:00Z | 2022-07-06T18:41:16.470294Z |
| pysec-2022-219 |
|
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code … | rootinteractive | 2022-06-24T21:15:00Z | 2022-07-05T20:48:00Z |
| pysec-2022-218 |
|
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code ex… | django-navbar-client | 2022-06-24T21:15:00Z | 2022-07-05T20:48:00Z |
| pysec-2022-217 |
|
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contai… | cryptoasset-data-downloader | 2022-06-24T21:15:00Z | 2022-07-05T22:30:15.999007Z |
| pysec-2022-216 |
|
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution b… | perdido | 2022-06-24T21:15:00Z | 2022-07-05T19:16:00Z |
| pysec-2022-215 |
|
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code executio… | ml-scanner | 2022-06-24T21:15:00Z | 2022-07-05T20:33:43.190558Z |
| pysec-2022-214 |
|
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution … | beginner | 2022-06-24T21:15:00Z | 2022-07-05T20:33:42.390810Z |
| pysec-2022-43162 |
7.5 (3.1)
|
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. | redis | 2022-06-23T17:15:00Z | 2024-12-23T11:33:23.546447Z |
| pysec-2022-43059 |
5.5 (3.1)
|
AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a De… | aiohttp | 2022-06-23T17:15:00Z | 2024-02-16T13:47:54.655573Z |
| pysec-2022-210 |
|
An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM … | salt | 2022-06-23T17:15:00Z | 2022-06-23T18:47:26.936484Z |
| pysec-2022-211 |
|
Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) fo… | jupyter-server | 2022-06-14T21:15:00Z | 2022-06-24T18:46:20.115761Z |
| pysec-2022-212 |
|
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to … | notebook | 2022-06-14T18:15:00Z | 2022-08-24T20:50:33.251121Z |
| pysec-2022-209 |
|
Command Injection in GitHub repository nuitka/nuitka prior to 0.9. | nuitka | 2022-06-12T14:15:00Z | 2022-06-23T11:27:14.332916Z |
| pysec-2022-207 |
|
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are… | couchbase | 2022-06-10T12:15:00Z | 2022-06-17T16:54:24.107616Z |
| pysec-2022-206 |
|
OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthent… | oauthenticator | 2022-06-09T13:15:00Z | 2022-06-16T05:33:11.901142Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2407 | Malicious code in @ceeferenderer/itg-renderer-sdk (npm) | 2026-03-24T09:03:48Z | 2026-04-07T14:41:19Z |
| mal-2026-2406 | Malicious code in @ceeferenderer/fe-renderer-sdk (npm) | 2026-03-24T09:03:41Z | 2026-04-07T14:41:19Z |
| mal-2026-2413 | Malicious code in cclr-component-resources (npm) | 2026-03-24T09:03:35Z | 2026-04-07T14:41:20Z |
| mal-2026-2124 | Malicious code in mgrcfg (PyPI) | 2026-03-24T04:31:48Z | 2026-03-24T05:53:36Z |
| mal-2026-2123 | Malicious code in yelp-mobile-site-common (npm) | 2026-03-24T02:26:13Z | 2026-03-31T03:12:05Z |
| mal-2026-2122 | Malicious code in rowrapee (PyPI) | 2026-03-23T23:17:18Z | 2026-03-24T00:33:52Z |
| mal-2026-2121 | Malicious code in roboat (PyPI) | 2026-03-23T23:09:44Z | 2026-03-24T20:18:33Z |
| mal-2026-2120 | Malicious code in logutilkit (PyPI) | 2026-03-23T22:53:57Z | 2026-04-08T20:19:39Z |
| mal-2026-2119 | Malicious code in apachelicense (PyPI) | 2026-03-23T20:41:45Z | 2026-04-08T20:19:39Z |
| mal-2026-2118 | Malicious code in hash-utils-py (PyPI) | 2026-03-23T15:38:29Z | 2026-03-23T15:38:29Z |
| mal-2026-2112 | Malicious code in apply-hive-table (PyPI) | 2026-03-23T14:19:12Z | 2026-03-23T20:18:41Z |
| mal-2026-2111 | Malicious code in tailwind-font-inter (npm) | 2026-03-23T14:17:29Z | 2026-03-31T03:12:05Z |
| mal-2026-2110 | Malicious code in react-tailwindcss-style (npm) | 2026-03-23T14:17:29Z | 2026-03-31T03:12:04Z |
| mal-2026-2109 | Malicious code in pyregions-snowflake (PyPI) | 2026-03-23T14:08:04Z | 2026-03-23T20:18:41Z |
| mal-2026-2106 | Malicious code in dmclc (PyPI) | 2026-03-23T14:05:43Z | 2026-03-23T20:18:41Z |
| mal-2026-2108 | Malicious code in modelconftranslator (PyPI) | 2026-03-23T14:03:21Z | 2026-03-23T20:18:41Z |
| mal-2026-2107 | Malicious code in financial-crimes-general-utils (PyPI) | 2026-03-23T13:56:01Z | 2026-03-23T20:18:41Z |
| mal-2026-2105 | Malicious code in ty-search-suggestion (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:13Z |
| mal-2026-2101 | Malicious code in sidebar-basket (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:18Z |
| mal-2026-2100 | Malicious code in shakti-pwa (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:13Z |
| mal-2026-2095 | Malicious code in pulse-shop-section (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:14Z |
| mal-2026-2094 | Malicious code in pulse-scroll-triggered-list-items (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:13Z |
| mal-2026-2093 | Malicious code in pulse-rsvp-card-entity (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:13Z |
| mal-2026-2089 | Malicious code in milla-migration (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:14Z |
| mal-2026-2088 | Malicious code in internal-linking (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:14Z |
| mal-2026-2087 | Malicious code in in-app-marketing (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:18Z |
| mal-2026-2086 | Malicious code in falcor-server (npm) | 2026-03-23T13:47:10Z | 2026-03-23T13:47:12Z |
| mal-2026-2104 | Malicious code in ty-fragment-core (npm) | 2026-03-23T13:47:09Z | 2026-03-23T13:47:10Z |
| mal-2026-2103 | Malicious code in ty-config-provider (npm) | 2026-03-23T13:47:09Z | 2026-03-23T13:47:11Z |
| mal-2026-2102 | Malicious code in storefront-logger (npm) | 2026-03-23T13:47:09Z | 2026-03-23T13:47:12Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2436 | Xwayland und X.Org X11: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-10-28T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2435 | D-LINK Aquila Pro AI R15: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-10-28T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2434 | Mattermost Server: Mehrere Schwachstellen ermöglichen die Umgehung von Sicherheitsmaßnahmen | 2025-10-28T23:00:00.000+00:00 | 2025-11-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2433 | Google Cloud Platform (Envoy Proxy):: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-28T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2432 | Red Hat Ansible Automation Platform: Mehrere Schwachstellen | 2025-10-28T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2431 | Linux Kernel: Mehrere Schwachstellen | 2025-10-28T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2430 | Linux Kernel: Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2429 | Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-27T23:00:00.000+00:00 | 2025-11-13T23:00:00.000+00:00 |
| wid-sec-w-2025-2428 | FRRouting (ospf_opaque.c): Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-27T23:00:00.000+00:00 | 2026-03-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2427 | strongSwan (eap-mschapv2 plugin): Schwachstelle ermöglicht Codeausführung und DoS | 2025-10-27T23:00:00.000+00:00 | 2026-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2426 | IBM QRadar SIEM: Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2025-10-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2425 | Zoho ManageEngine Endpoint Central: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-27T23:00:00.000+00:00 | 2025-10-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2424 | IBM Rational Team Concert: Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2025-10-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2423 | ffmpeg (TensorFlow DNN backend): Schwachstelle ermöglicht Denial of Service | 2025-10-27T23:00:00.000+00:00 | 2025-10-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2422 | D-LINK Access Point (AP): Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2025-10-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2421 | Docker Desktop: Schwachstelle ermöglicht Privilegieneskalation | 2025-10-27T23:00:00.000+00:00 | 2025-10-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2420 | Apache Tomcat: Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2026-03-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2419 | Liferay Portal und DXP: Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2025-10-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2418 | Dell Storage Manager: Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2025-10-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2417 | dnsmasq: Mehrere Schwachstellen | 2025-10-26T23:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2416 | Proxmox Backup Server: Mehrere Schwachstellen | 2025-10-26T23:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2415 | Bouncy Castle: Schwachstelle ermöglicht Denial of Service | 2025-10-26T23:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2414 | Microsoft Configuration Manager: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-10-26T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2413 | HP Computer (AMD AIM-T): Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-10-26T23:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2412 | ARM-basierte HP-Computer mit InsydeH2O-UEFI-Firmware: Schwachstelle ermöglicht Codeausführung | 2025-10-26T23:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2411 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-10-26T23:00:00.000+00:00 | 2025-12-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2410 | BusyBox: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-10-26T23:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2409 | Xen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-26T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2408 | OpenVPN: Schwachstelle ermöglicht Codeausführung | 2025-10-26T23:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2407 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-26T23:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-193-06 | Siemens RUGGEDCOM | 2024-07-09T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-193-05 | Siemens SCALANCE, RUGGEDCOM | 2024-07-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-24-193-04 | Siemens Simcenter Femap | 2024-07-09T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-193-03 | Siemens Teamcenter Visualization and JT2Go | 2024-07-09T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-193-02 | Siemens RUGGEDCOM APE 1808 | 2024-07-09T00:00:00.000000Z | 2026-01-14T22:00:11.677616Z |
| icsa-24-193-01 | Siemens Remote Connect Server | 2024-07-09T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-25-007-01 | ABB ASPECT System | 2024-07-03T00:30:00.000000Z | 2024-12-05T00:30:00.000000Z |
| icsa-24-184-03 | Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update D) | 2024-07-02T06:00:00.000000Z | 2026-04-07T06:00:00.000000Z |
| icsa-24-184-02 | mySCADA myPRO | 2024-07-02T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-184-01 | Johnson Controls Kantech Door Controllers | 2024-07-02T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-07 | Johnson Controls Illustra Essentials Gen 4 (Update A) | 2024-06-27T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-06 | Johnson Controls Illustra Essentials Gen 4 (Update A) | 2024-06-27T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-05 | Johnson Controls Illustra Essentials Gen 4 (Update A) | 2024-06-27T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-04 | Johnson Controls Illustra Essentials Gen 4 (Update A) | 2024-06-27T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-03 | Yokogawa FAST/TOOLS and CI Server | 2024-06-27T06:00:00.000000Z | 2024-06-27T06:00:00.000000Z |
| icsa-24-179-02 | SDG Technologies PnPSCADA | 2024-06-27T06:00:00.000000Z | 2024-06-27T06:00:00.000000Z |
| icsa-24-179-01 | TELSAT marKoni FM Transmitter | 2024-06-27T06:00:00.000000Z | 2024-06-27T06:00:00.000000Z |
| icsa-24-177-02 | PTC Creo Elements/Direct License Server (Update A) | 2024-06-25T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-177-01 | ABB 800xA Base | 2024-06-25T06:00:00.000000Z | 2024-06-25T06:00:00.000000Z |
| icsa-24-172-03 | Westermo L210-F2G | 2024-06-20T06:00:00.000000Z | 2024-06-20T06:00:00.000000Z |
| icsa-24-172-02 | CAREL Boss-Mini | 2024-06-20T06:00:00.000000Z | 2024-06-20T06:00:00.000000Z |
| icsa-24-172-01 | Yokogawa CENTUM | 2024-06-20T06:00:00.000000Z | 2024-06-20T06:00:00.000000Z |
| icsa-24-170-01 | RAD Data Communications SecFlow-2 | 2024-06-18T06:00:00.000000Z | 2024-06-18T06:00:00.000000Z |
| icsa-24-165-19 | Motorola Solutions Vigilant License Plate Readers | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-24-165-18 | Rockwell Automation FactoryTalk View SE | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-24-165-17 | Rockwell Automation FactoryTalk View SE | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-24-165-16 | Rockwell Automation FactoryTalk View SE | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-24-165-14 | Fuji Electric Tellus Lite V-Simulator | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| icsa-25-063-05 | Hitachi Energy UNEM/ECST | 2024-06-11T12:30:00.000000Z | 2024-06-11T12:30:00.000000Z |
| icsa-25-063-04 | Hitachi Energy XMC20 | 2024-06-11T12:30:00.000000Z | 2024-06-11T12:30:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cpar-strd-xss-a4dcvetg | Cisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-catpon-multivulns-ce3dsygr | Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-anyconnect-nam-priv-ycsrnugt | Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-snort-dos-s2r7w9uu | Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-29T14:07:40+00:00 |
| cisco-sa-snort-dos-rywh7ezm | Multiple Cisco Products Snort Rule Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-natalg-bypass-cpkgqkng | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-ftd-tls-decrypt-dos-bmxyjm8m | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-ftd-file-write-shvcmqvc | Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability | 2021-10-27T16:00:00+00:00 | 2023-05-26T11:54:17+00:00 |
| cisco-sa-ftd-enip-bypass-efsxd8kp | Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-ftd-dos-rudsew3r | Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-ftd-cmdinject-fmzsln8 | Cisco Firepower Threat Defense Software Command Injection Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-fmc-xss-openredir-tvpmwjyg | Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-fmc-infodisc-ft2wvmnu | Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-fmc-dir-traversal-95uyw5tk | Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asaftd-xss-webui-gqlsfypm | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asaftd-snmpaccess-m6yoweq3 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asaftd-rule-bypass-ejjogqey | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asaftd-ikev2-dos-g4cmrr7c | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-29T13:51:25+00:00 |
| cisco-sa-asaftd-dos-4ygzlku9 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asafdt-webvpn-dos-ksqjakpa | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asa-ftd-dos-unk689xy | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-asa-ftd-dos-jxywmjyl | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-27T16:00:00+00:00 |
| cisco-sa-webex-2fmkd7t | Cisco Webex Software Application Authorization Bypass Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-tms-xss-cwjzjsqc | Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-sec-work-xss-t6sytu8q | Cisco Tetration Stored Cross-Site Scripting Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-sd-wan-rhpbe34a | Cisco IOS XE SD-WAN Software Command Injection Vulnerability | 2021-10-20T16:00:00+00:00 | 2022-02-17T18:13:49+00:00 |
| cisco-sa-ise-xss1-rgxyry2v | Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities | 2021-10-20T16:00:00+00:00 | 2021-11-12T18:15:57+00:00 |
| cisco-sa-ise-file-download-b3br5kqa | Cisco Identity Services Engine File Download Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-imc-gui-dos-tzjrfyzh | Cisco Integrated Management Controller GUI Denial of Service Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-10-20T16:00:00+00:00 |
| cisco-sa-cms-lahe8z5v | Cisco Meeting Server Call Bridge Denial of Service Vulnerability | 2021-10-20T16:00:00+00:00 | 2021-12-22T17:29:02+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-23212 | bonding: annotate data-races around slave->last_rx | 2026-02-02T00:00:00.000Z | 2026-03-31T15:03:25.000Z |
| msrc_cve-2026-23208 | ALSA: usb-audio: Prevent excessive number of frames | 2026-02-02T00:00:00.000Z | 2026-03-31T15:03:03.000Z |
| msrc_cve-2026-23207 | spi: tegra210-quad: Protect curr_xfer check in IRQ handler | 2026-02-02T00:00:00.000Z | 2026-03-31T14:59:32.000Z |
| msrc_cve-2026-23204 | net/sched: cls_u32: use skb_header_pointer_careful() | 2026-02-02T00:00:00.000Z | 2026-03-31T15:04:14.000Z |
| msrc_cve-2026-23191 | ALSA: aloop: Fix racy access at PCM trigger | 2026-02-02T00:00:00.000Z | 2026-03-31T15:02:41.000Z |
| msrc_cve-2026-23171 | bonding: fix use-after-free due to enslave fail after slave array update | 2026-02-02T00:00:00.000Z | 2026-03-31T15:02:13.000Z |
| msrc_cve-2026-23169 | mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() | 2026-02-02T00:00:00.000Z | 2026-03-31T01:40:05.000Z |
| msrc_cve-2026-23157 | btrfs: do not strictly require dirty metadata threshold for metadata writepages | 2026-02-02T00:00:00.000Z | 2026-03-31T15:01:50.000Z |
| msrc_cve-2026-23154 | net: fix segmentation of forwarding fraglist GRO | 2026-02-02T00:00:00.000Z | 2026-03-31T15:01:27.000Z |
| msrc_cve-2026-23141 | btrfs: send: check for inline extents in range_is_hole_in_parent() | 2026-02-02T00:00:00.000Z | 2026-03-31T14:52:41.000Z |
| msrc_cve-2026-23138 | tracing: Add recursion protection in kernel stack trace recording | 2026-02-02T00:00:00.000Z | 2026-03-31T14:52:17.000Z |
| msrc_cve-2026-23137 | of: unittest: Fix memory leak in unittest_data_add() | 2026-02-02T00:00:00.000Z | 2026-03-31T14:51:49.000Z |
| msrc_cve-2026-23126 | netdevsim: fix a race issue related to the operation on bpf_bound_progs list | 2026-02-02T00:00:00.000Z | 2026-03-31T15:01:02.000Z |
| msrc_cve-2026-23118 | rxrpc: Fix data-race warning and potential load/store tearing | 2026-02-02T00:00:00.000Z | 2026-03-31T15:00:41.000Z |
| msrc_cve-2026-23113 | io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop | 2026-02-02T00:00:00.000Z | 2026-03-31T15:00:18.000Z |
| msrc_cve-2026-23110 | scsi: core: Wake up the error handler when final completions race against each other | 2026-02-02T00:00:00.000Z | 2026-03-31T14:59:54.000Z |
| msrc_cve-2026-23100 | mm/hugetlb: fix hugetlb_pmd_shared() | 2026-02-02T00:00:00.000Z | 2026-03-31T15:10:18.000Z |
| msrc_cve-2026-23088 | tracing: Fix crash on synthetic stacktrace field usage | 2026-02-02T00:00:00.000Z | 2026-03-31T14:51:26.000Z |
| msrc_cve-2026-23086 | vsock/virtio: cap TX credit to local buffer size | 2026-02-02T00:00:00.000Z | 2026-03-31T14:51:03.000Z |
| msrc_cve-2026-23069 | vsock/virtio: fix potential underflow in virtio_transport_get_credit() | 2026-02-02T00:00:00.000Z | 2026-03-31T14:45:13.000Z |
| msrc_cve-2026-23068 | spi: spi-sprd-adi: Fix double free in probe error path | 2026-02-02T00:00:00.000Z | 2026-03-27T01:39:46.000Z |
| msrc_cve-2026-23066 | rxrpc: Fix recvmsg() unconditional requeue | 2026-02-02T00:00:00.000Z | 2026-03-31T14:44:50.000Z |
| msrc_cve-2026-2243 | Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing | 2026-02-02T00:00:00.000Z | 2026-02-24T14:04:04.000Z |
| msrc_cve-2026-21863 | Malformed Valkey Cluster bus message can lead to Remote DoS | 2026-02-02T00:00:00.000Z | 2026-02-26T14:36:37.000Z |
| msrc_cve-2026-21620 | TFTP Path Traversal | 2026-02-02T00:00:00.000Z | 2026-03-31T15:15:42.000Z |
| msrc_cve-2026-1979 | mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free | 2026-02-02T00:00:00.000Z | 2026-03-03T01:37:17.000Z |
| msrc_cve-2026-1703 | Limited path traversal when installing wheel archives | 2026-02-02T00:00:00.000Z | 2026-03-31T15:14:40.000Z |
| msrc_cve-2025-71237 | nilfs2: Fix potential block overflow that cause system hang | 2026-02-02T00:00:00.000Z | 2026-03-31T01:39:58.000Z |
| msrc_cve-2025-71236 | scsi: qla2xxx: Validate sp before freeing associated memory | 2026-02-02T00:00:00.000Z | 2026-03-31T01:39:52.000Z |
| msrc_cve-2025-71235 | scsi: qla2xxx: Delay module unload while fabric scan in progress | 2026-02-02T00:00:00.000Z | 2026-03-31T01:39:45.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15721-1 | incus-6.17-2.1 on GA media | 2025-11-09T00:00:00Z | 2025-11-09T00:00:00Z |
| opensuse-su-2025:15720-1 | chromedriver-142.0.7444.134-1.1 on GA media | 2025-11-08T00:00:00Z | 2025-11-08T00:00:00Z |
| opensuse-su-2025:20026-1 | Security update for MozillaThunderbird | 2025-11-07T12:08:41Z | 2025-11-07T12:08:41Z |
| opensuse-su-2025:15719-1 | xen-4.20.1_08-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15718-1 | tomcat11-11.0.13-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15717-1 | tomcat10-10.1.48-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15716-1 | tomcat-9.0.111-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15715-1 | squid-7.3-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15714-1 | libshibsp-lite12-3.5.1-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15713-1 | python315-3.15.0~a1-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15712-1 | python311-Django-5.2.8-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15711-1 | opentofu-1.10.7-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15710-1 | govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15709-1 | google-osconfig-agent-20251028.00-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15708-1 | python311-Django4-4.2.26-1.1 on GA media | 2025-11-06T00:00:00Z | 2025-11-06T00:00:00Z |
| opensuse-su-2025:15707-1 | ghostscript-10.06.0-2.1 on GA media | 2025-11-06T00:00:00Z | 2025-11-06T00:00:00Z |
| opensuse-su-2025:15706-1 | erlang-28.1.1-1.1 on GA media | 2025-11-06T00:00:00Z | 2025-11-06T00:00:00Z |
| opensuse-su-2025:15705-1 | runc-1.3.3-1.1 on GA media | 2025-11-05T00:00:00Z | 2025-11-05T00:00:00Z |
| opensuse-su-2025:15704-1 | zellij-0.43.1-2.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15703-1 | kubecolor-0.5.3-1.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15702-1 | kernel-devel-6.17.7-1.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15701-1 | java-1_8_0-openjdk-1.8.0.472-1.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15700-1 | OpenSMTPD-7.8.0p0-1.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15699-1 | python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media | 2025-11-03T00:00:00Z | 2025-11-03T00:00:00Z |
| opensuse-su-2025:15698-1 | redis-8.2.3-1.1 on GA media | 2025-11-02T00:00:00Z | 2025-11-02T00:00:00Z |
| opensuse-su-2025:15697-1 | kumactl-2.12.3-1.1 on GA media | 2025-11-02T00:00:00Z | 2025-11-02T00:00:00Z |
| opensuse-su-2025:15696-1 | python311-starlette-0.49.1-1.1 on GA media | 2025-11-01T00:00:00Z | 2025-11-01T00:00:00Z |
| opensuse-su-2025:15695-1 | govulncheck-vulndb-0.0.20251029T215107-1.1 on GA media | 2025-11-01T00:00:00Z | 2025-11-01T00:00:00Z |
| opensuse-su-2025:20022-1 | Security update for python-Django | 2025-10-31T08:58:03Z | 2025-10-31T08:58:03Z |
| opensuse-su-2025:15694-1 | java-25-openj9-25.0.1.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:2900 | Red Hat Security Advisory: Network Observability 1.11.0 for OpenShift | 2026-02-18T08:39:41+00:00 | 2026-04-14T09:16:54+00:00 |
| rhsa-2026:2864 | Red Hat Security Advisory: nodejs:22 security update | 2026-02-18T02:32:25+00:00 | 2026-04-13T20:02:47+00:00 |
| rhsa-2026:2866 | Red Hat Security Advisory: python3.12-wheel security update | 2026-02-18T02:23:14+00:00 | 2026-04-10T15:33:21+00:00 |
| rhsa-2026:2865 | Red Hat Security Advisory: python-wheel security update | 2026-02-18T01:51:46+00:00 | 2026-04-10T15:33:20+00:00 |
| rhsa-2026:2852 | Red Hat Security Advisory: OpenShift Security Profiles Operator bug fix and enhancement update | 2026-02-17T23:04:21+00:00 | 2026-04-14T07:58:23+00:00 |
| rhsa-2026:2673 | Red Hat Security Advisory: OpenShift Container Platform 4.17.49 security and extras update | 2026-02-17T21:05:24+00:00 | 2026-04-10T21:19:27+00:00 |
| rhsa-2026:2652 | Red Hat Security Advisory: OpenShift Container Platform 4.19.24 security and extras update | 2026-02-17T20:05:59+00:00 | 2026-04-10T21:19:23+00:00 |
| rhsa-2026:2844 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.1 Release. | 2026-02-17T18:20:32+00:00 | 2026-04-14T07:58:22+00:00 |
| rhsa-2026:2824 | Red Hat Security Advisory: freerdp security update | 2026-02-17T15:59:52+00:00 | 2026-03-18T03:18:38+00:00 |
| rhsa-2026:2823 | Red Hat Security Advisory: Updated discovery-cli release RPM versions 2.4.3 | 2026-02-17T15:39:37+00:00 | 2026-04-10T15:33:20+00:00 |
| rhsa-2026:2821 | Red Hat Security Advisory: kernel-rt security update | 2026-02-17T12:52:16+00:00 | 2026-04-08T04:27:08+00:00 |
| rhsa-2026:2817 | Red Hat Security Advisory: pcs security update | 2026-02-17T12:40:37+00:00 | 2026-04-13T16:00:16+00:00 |
| rhsa-2026:2819 | Red Hat Security Advisory: pcs security update | 2026-02-17T12:38:16+00:00 | 2026-04-13T16:00:18+00:00 |
| rhsa-2026:2816 | Red Hat Security Advisory: pcs security update | 2026-02-17T12:26:26+00:00 | 2026-04-13T16:00:16+00:00 |
| rhsa-2026:2818 | Red Hat Security Advisory: pcs security update | 2026-02-17T12:24:53+00:00 | 2026-04-13T16:00:17+00:00 |
| rhsa-2026:2799 | Red Hat Security Advisory: php security update | 2026-02-17T10:51:41+00:00 | 2026-04-08T16:37:56+00:00 |
| rhsa-2026:2786 | Red Hat Security Advisory: glibc security update | 2026-02-17T10:36:36+00:00 | 2026-04-09T18:07:52+00:00 |
| rhsa-2026:2782 | Red Hat Security Advisory: nodejs:22 security update | 2026-02-17T09:33:08+00:00 | 2026-04-13T20:02:44+00:00 |
| rhsa-2026:2781 | Red Hat Security Advisory: nodejs:24 security update | 2026-02-17T09:33:08+00:00 | 2026-04-13T20:02:44+00:00 |
| rhsa-2026:2783 | Red Hat Security Advisory: nodejs:20 security update | 2026-02-17T09:32:33+00:00 | 2026-04-13T20:02:46+00:00 |
| rhsa-2026:2776 | Red Hat Security Advisory: edk2 security update | 2026-02-17T09:30:25+00:00 | 2026-04-13T20:02:43+00:00 |
| rhsa-2026:2800 | Red Hat Security Advisory: Red Hat Ceph Storage | 2026-02-17T09:23:04+00:00 | 2026-04-11T01:58:12+00:00 |
| rhsa-2026:2771 | Red Hat Security Advisory: edk2 security update | 2026-02-17T09:15:10+00:00 | 2026-04-13T20:02:43+00:00 |
| rhsa-2026:2770 | Red Hat Security Advisory: freerdp security update | 2026-02-17T03:29:34+00:00 | 2026-03-18T03:18:32+00:00 |
| rhsa-2026:2768 | Red Hat Security Advisory: nodejs:20 security update | 2026-02-17T01:05:30+00:00 | 2026-04-13T20:02:41+00:00 |
| rhsa-2026:2766 | Red Hat Security Advisory: kernel security update | 2026-02-17T01:03:19+00:00 | 2026-04-01T20:03:05+00:00 |
| rhsa-2026:2769 | Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates | 2026-02-17T00:55:59+00:00 | 2026-04-14T09:46:19+00:00 |
| rhsa-2026:2767 | Red Hat Security Advisory: nodejs:20 security update | 2026-02-17T00:48:09+00:00 | 2026-04-13T20:02:40+00:00 |
| rhsa-2026:2765 | Red Hat Security Advisory: Satellite 6.16.6.1 Async Update | 2026-02-16T21:33:28+00:00 | 2026-04-12T14:07:42+00:00 |
| rhsa-2026:2764 | Red Hat Security Advisory: Satellite 6.17.6.3 Async Update | 2026-02-16T19:06:28+00:00 | 2026-04-12T14:07:47+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0766-1 | Security update for gnome-remote-desktop | 2026-03-03T13:02:47Z | 2026-03-03T13:02:47Z |
| suse-su-2026:0765-1 | Security update for smc-tools | 2026-03-03T12:59:51Z | 2026-03-03T12:59:51Z |
| suse-su-2026:0763-1 | Security update for freerdp | 2026-03-03T12:49:14Z | 2026-03-03T12:49:14Z |
| suse-su-2026:0762-1 | Security update for freerdp | 2026-03-03T12:41:19Z | 2026-03-03T12:41:19Z |
| suse-su-2026:0761-1 | Security update for freerdp | 2026-03-03T12:40:21Z | 2026-03-03T12:40:21Z |
| suse-su-2026:0760-1 | Security update for go1.25-openssl | 2026-03-03T12:38:06Z | 2026-03-03T12:38:06Z |
| suse-su-2026:0759-1 | Security update for busybox | 2026-03-03T12:16:46Z | 2026-03-03T12:16:46Z |
| suse-su-2026:0758-1 | Security update for busybox | 2026-03-03T12:16:05Z | 2026-03-03T12:16:05Z |
| suse-su-2026:20623-1 | Security update for go1.25-openssl | 2026-03-03T09:05:27Z | 2026-03-03T09:05:27Z |
| suse-su-2026:20604-1 | Security update for assertj-core | 2026-03-02T16:00:39Z | 2026-03-02T16:00:39Z |
| suse-su-2026:20603-1 | Security update for rhino | 2026-03-02T16:00:39Z | 2026-03-02T16:00:39Z |
| suse-su-2026:20536-1 | Security update for glibc | 2026-03-02T14:49:34Z | 2026-03-02T14:49:34Z |
| suse-su-2026:20535-1 | Security update for cups | 2026-03-02T14:17:19Z | 2026-03-02T14:17:19Z |
| suse-su-2026:20534-1 | Security update for rust-keylime | 2026-03-02T14:16:07Z | 2026-03-02T14:16:07Z |
| suse-su-2026:20529-1 | Security update for libsoup | 2026-03-02T13:19:17Z | 2026-03-02T13:19:17Z |
| suse-su-2026:20528-1 | Security update for cups | 2026-03-02T13:19:17Z | 2026-03-02T13:19:17Z |
| suse-su-2026:0748-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7) | 2026-03-02T12:04:07Z | 2026-03-02T12:04:07Z |
| suse-su-2026:20600-1 | Security update for cpp-httplib | 2026-03-02T10:16:12Z | 2026-03-02T10:16:12Z |
| suse-su-2026:20558-1 | Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-03-02T10:01:23Z | 2026-03-02T10:01:23Z |
| suse-su-2026:0745-1 | Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP6) | 2026-03-02T09:34:17Z | 2026-03-02T09:34:17Z |
| suse-su-2026:0741-1 | Security update for shim | 2026-03-02T08:11:15Z | 2026-03-02T08:11:15Z |
| suse-su-2026:0740-1 | Security update for mozilla-nss | 2026-03-02T08:10:37Z | 2026-03-02T08:10:37Z |
| suse-su-2026:0736-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) | 2026-03-02T07:04:29Z | 2026-03-02T07:04:29Z |
| suse-su-2026:0734-1 | Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) | 2026-03-01T19:33:48Z | 2026-03-01T19:33:48Z |
| suse-su-2026:0731-1 | Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) | 2026-03-01T16:35:28Z | 2026-03-01T16:35:28Z |
| suse-su-2026:20621-1 | Security update for python-azure-core | 2026-03-01T16:00:33Z | 2026-03-01T16:00:33Z |
| suse-su-2026:20617-1 | Security update for python-azure-core | 2026-03-01T15:59:58Z | 2026-03-01T15:59:58Z |
| suse-su-2026:0727-1 | Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) | 2026-03-01T12:04:27Z | 2026-03-01T12:04:27Z |
| suse-su-2026:0725-1 | Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) | 2026-03-01T10:04:27Z | 2026-03-01T10:04:27Z |
| suse-su-2026:0713-1 | Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5) | 2026-03-01T07:33:38Z | 2026-03-01T07:33:38Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:10136 | Important: python3.9 security update | 2025-07-01T00:00:00Z | 2025-07-02T06:48:36Z |
| alsa-2025:10128 | Important: python3 security update | 2025-07-01T00:00:00Z | 2025-07-02T07:44:25Z |
| alsa-2025:10110 | Important: sudo security update | 2025-07-01T00:00:00Z | 2025-07-02T07:33:23Z |
| alsa-2025:10074 | Important: firefox security update | 2025-07-01T00:00:00Z | 2025-07-01T19:42:56Z |
| alsa-2025:10073 | Important: firefox security update | 2025-07-01T00:00:00Z | 2025-07-01T19:42:01Z |
| alsa-2025:10072 | Important: firefox security update | 2025-07-01T00:00:00Z | 2025-07-01T19:40:59Z |
| alsa-2025:10031 | Important: python3.12 security update | 2025-07-01T00:00:00Z | 2025-07-01T19:39:28Z |
| alsa-2025:10027 | Important: pam security update | 2025-07-01T00:00:00Z | 2025-07-01T19:37:31Z |
| alsa-2025:10026 | Important: python3.11 security update | 2025-07-01T00:00:00Z | 2025-07-01T19:35:29Z |
| alsa-2025:9978 | Important: sudo security update | 2025-06-30T00:00:00Z | 2025-07-01T19:33:15Z |
| alsa-2025:9940 | Moderate: python-setuptools security update | 2025-06-30T00:00:00Z | 2025-07-01T20:38:28Z |
| alsa-2025:9896 | Moderate: kernel security update | 2025-06-30T00:00:00Z | 2025-07-08T16:43:34Z |
| alsa-2025:9880 | Moderate: kernel security update | 2025-06-30T00:00:00Z | 2025-07-02T07:28:52Z |
| alsa-2025:9878 | Important: libblockdev security update | 2025-06-30T00:00:00Z | 2025-07-01T22:08:46Z |
| alsa-2025:9877 | Moderate: glibc security update | 2025-06-30T00:00:00Z | 2025-06-30T12:53:53Z |
| alsa-2025:9845 | Moderate: weldr-client security update | 2025-06-26T00:00:00Z | 2025-06-30T12:56:17Z |
| alsa-2025:9844 | Moderate: osbuild-composer security update | 2025-06-26T00:00:00Z | 2025-06-30T12:59:48Z |
| alsa-2025:9635 | Moderate: weldr-client security update | 2025-06-25T00:00:00Z | 2025-06-30T13:02:02Z |
| alsa-2025:9634 | Moderate: osbuild-composer security update | 2025-06-25T00:00:00Z | 2025-06-30T13:03:46Z |
| alsa-2025:9623 | Moderate: osbuild-composer security update | 2025-06-25T00:00:00Z | 2025-07-28T08:31:22Z |
| alsa-2025:9605 | Important: perl-File-Find-Rule security update | 2025-06-25T00:00:00Z | 2025-06-26T18:41:23Z |
| alsa-2025:9581 | Moderate: kernel-rt security update | 2025-06-25T00:00:00Z | 2025-07-02T07:09:02Z |
| alsa-2025:9580 | Moderate: kernel security update | 2025-06-25T00:00:00Z | 2025-06-26T18:38:42Z |
| alsa-2025:9526 | Important: pam security update | 2025-06-24T00:00:00Z | 2025-06-26T18:29:59Z |
| alsa-2025:9517 | Important: perl-File-Find-Rule security update | 2025-06-24T00:00:00Z | 2025-06-30T13:05:26Z |
| alsa-2025:9486 | Moderate: qt6-qtbase security update | 2025-06-24T00:00:00Z | 2025-07-28T08:35:47Z |
| alsa-2025:9466 | Moderate: mod_proxy_cluster security update | 2025-06-24T00:00:00Z | 2025-06-25T13:23:38Z |
| alsa-2025:9462 | Moderate: qt5-qtbase security update | 2025-06-24T00:00:00Z | 2025-06-30T13:07:19Z |
| alsa-2025:9448 | Moderate: emacs security update | 2025-06-24T00:00:00Z | 2025-06-30T13:09:25Z |
| alsa-2025:9434 | Moderate: mod_proxy_cluster security update | 2025-06-24T00:00:00Z | 2025-06-30T13:11:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-719 | Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString | 2023-08-21T14:02:38.497581Z | 2023-08-21T14:02:38.497866Z |
| osv-2023-717 | Heap-buffer-overflow in bit_TV_to_utf8_codepage | 2023-08-21T14:00:28.036480Z | 2023-12-01T14:22:18.777534Z |
| osv-2023-715 | Stack-use-after-scope in ulocimp_addLikelySubtags_74 | 2023-08-21T14:00:19.885505Z | 2023-08-23T15:32:00.801902Z |
| osv-2023-714 | Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields | 2023-08-19T14:02:15.130219Z | 2023-08-19T14:02:15.130475Z |
| osv-2023-710 | Heap-buffer-overflow in Flow::dissectMDNS | 2023-08-19T14:00:12.746394Z | 2023-08-19T14:00:12.746652Z |
| osv-2023-709 | Heap-buffer-overflow in QOIHandler::read | 2023-08-18T14:02:53.146275Z | 2023-08-20T14:15:45.069773Z |
| osv-2023-705 | Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton | 2023-08-17T14:00:59.717535Z | 2023-08-19T14:26:28.816770Z |
| osv-2023-697 | Heap-buffer-overflow in IEC104Stats::processPacket | 2023-08-15T14:01:02.977387Z | 2023-08-15T14:01:02.977646Z |
| osv-2023-696 | Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone | 2023-08-14T14:00:47.094365Z | 2023-08-14T14:00:47.094611Z |
| osv-2023-693 | Security exception in org.json.JSONArray.writeTo | 2023-08-13T14:00:24.146135Z | 2023-08-13T14:00:24.146368Z |
| osv-2023-692 | Invalid-free in reset_context | 2023-08-13T14:00:16.114233Z | 2024-09-01T14:21:14.987075Z |
| osv-2023-689 | Use-of-uninitialized-value | 2023-08-12T14:02:14.530750Z | 2023-08-12T14:02:14.531027Z |
| osv-2023-688 | Invalid-free in Flow::~Flow | 2023-08-12T14:00:58.558753Z | 2023-08-12T14:00:58.559035Z |
| osv-2023-685 | Invalid-free in reset_context | 2023-08-11T14:02:10.018940Z | 2024-09-01T14:21:29.336035Z |
| osv-2023-684 | Heap-use-after-free in __xmlRaiseError | 2023-08-11T14:02:03.986718Z | 2023-08-11T14:02:03.986997Z |
| osv-2023-680 | Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren | 2023-08-11T14:00:29.963332Z | 2023-08-11T14:00:29.963569Z |
| osv-2023-675 | Heap-use-after-free in parse_options | 2023-08-09T14:02:25.748940Z | 2024-04-29T14:13:24.917092Z |
| osv-2023-674 | Heap-buffer-overflow in get_grouplength | 2023-08-09T14:02:09.770996Z | 2023-08-09T14:02:09.771217Z |
| osv-2023-673 | Heap-buffer-overflow in match | 2023-08-09T14:01:09.834447Z | 2023-08-09T14:01:09.834676Z |
| osv-2023-665 | Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren | 2023-08-08T14:02:01.481029Z | 2023-08-08T14:02:01.481263Z |
| osv-2023-663 | Segv on unknown address in decUnitCompare | 2023-08-08T14:00:59.624933Z | 2023-08-08T14:00:59.625154Z |
| osv-2023-662 | Security exception in org.apache.commons.io.IOUtils.byteArray | 2023-08-08T14:00:57.801101Z | 2023-08-08T14:00:57.801377Z |
| osv-2023-660 | Security exception in org.apache.poi.hwpf.model.StyleSheet.createPap | 2023-08-08T14:00:31.168112Z | 2023-08-08T14:00:31.168352Z |
| osv-2023-645 | Segv on unknown address in decUnitCompare | 2023-08-04T14:02:38.270949Z | 2023-08-04T14:02:38.271192Z |
| osv-2023-640 | Stack-buffer-overflow in initialize_encryption_key | 2023-08-04T14:00:55.352181Z | 2023-08-17T14:21:56.675468Z |
| osv-2022-1280 | Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode | 2023-08-04T14:00:41.927304Z | 2023-08-04T14:00:41.927544Z |
| osv-2023-636 | Security exception in jflex.core.NFA.insertNFA | 2023-08-03T14:00:58.919043Z | 2023-08-03T14:00:58.919497Z |
| osv-2023-634 | Heap-buffer-overflow in bit_read_BB | 2023-08-02T14:02:44.231233Z | 2023-11-01T14:21:43.594840Z |
| osv-2023-631 | Heap-buffer-overflow in test_verify | 2023-08-01T14:02:11.454420Z | 2023-08-01T14:02:11.454673Z |
| osv-2023-627 | Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton | 2023-07-31T14:00:58.902209Z | 2023-07-31T14:00:58.902458Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2020-0164 | `cell-project` used incorrect variance when projecting through `&Cell<T>` | 2020-08-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0035 | Chunk API does not respect align requirement | 2020-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0034 | Multiple security issues including data race, buffer overflow, and uninitialized memory drop | 2020-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0033 | Matrix::new() drops uninitialized memory | 2020-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0032 | StrcCtx deallocates a memory region that it doesn't own | 2020-08-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0030 | Missing sanitization in mozwire allows local file overwrite of files ending in .conf | 2020-08-18T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0168 | mach is unmaintained | 2020-07-14T12:00:00Z | 2023-03-12T06:59:25Z |
| rustsec-2020-0024 | Improper uniqueness verification of signature threshold | 2020-07-09T12:00:00Z | 2021-10-19T22:14:35Z |
| rustsec-2020-0165 | mozjpeg DecompressScanlines::read_scanlines is Unsound | 2020-07-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0022 | Ozone contains several memory safety issues | 2020-07-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0052 | Undefined Behavior in bounded channel | 2020-06-26T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0026 | linked-hash-map creates uninitialized NonNull pointer | 2020-06-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0167 | `pnet_packet` buffer overrun in `set_payload` setters | 2020-06-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0031 | HTTP Request smuggling through malformed Transfer Encoding headers | 2020-06-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0029 | Allows viewing and modifying arbitrary structs as bytes | 2020-06-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0157 | Improper Synchronization and Race Condition in vm-memory | 2020-06-02T12:00:00Z | 2021-09-10T15:50:27Z |
| rustsec-2020-0027 | traitobject assumes the layout of fat pointers | 2020-06-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0100 | Double free when calling `sys_info::disk_info` from multiple threads | 2020-05-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0017 | Use after free in ArcIntern::drop | 2020-05-28T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0028 | `LocalRequest::clone` creates multiple mutable references to the same object | 2020-05-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0018 | crate has been renamed to `block-cipher` | 2020-05-26T12:00:00Z | 2020-10-02T01:29:11Z |
| rustsec-2020-0019 | tokio-rustls reads may cause excessive memory usage | 2020-05-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0021 | rio allows a use-after-free buffer access when a future is leaked | 2020-05-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0161 | `array!` macro is unsound in presence of traits that implement methods it calls internally | 2020-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0025 | bigint is unmaintained, use uint instead | 2020-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0056 | stdweb is unmaintained | 2020-05-04T12:00:00Z | 2020-10-25T18:57:46Z |
| rustsec-2020-0061 | futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer | 2020-05-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0036 | failure is officially deprecated/unmaintained | 2020-05-02T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2020-0016 | `net2` crate has been deprecated; use `socket2` instead | 2020-05-01T12:00:00Z | 2020-10-02T01:29:11Z |
| rustsec-2020-0015 | Crash causing Denial of Service attack | 2020-04-25T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mongodb-2025-6711 | Incomplete Redaction of Sensitive Information in MongoDB Server Logs | 2025-10-05T23:44:13.320Z | 2025-10-06T00:06:00.502Z |
| bit-discourse-2025-59337 | Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments | 2025-10-05T23:41:00.220Z | 2025-10-06T00:06:00.502Z |
| bit-discourse-2025-58055 | Discourse AI Suggestions Contain Insecure Direct Object Reference | 2025-10-05T23:40:58.710Z | 2025-10-24T15:07:36.996Z |
| bit-discourse-2025-58054 | Discourse is vulnerable to XSS when quoting chat messages | 2025-10-05T23:40:57.314Z | 2025-10-24T15:07:36.996Z |
| bit-powershell-2025-49734 | PowerShell Direct Elevation of Privilege Vulnerability | 2025-10-03T08:49:03.988Z | 2025-10-03T09:07:39.166Z |
| bit-mongodb-2024-10921 | Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server | 2025-10-02T14:44:36.017Z | 2025-10-02T15:07:00.184Z |
| bit-mongoose-2024-53900 | 2025-10-02T14:44:18.222Z | 2025-11-06T13:25:46.476Z | |
| bit-gitlab-2025-9958 | Insertion of Sensitive Information Into Sent Data in GitLab | 2025-10-01T15:13:13.235Z | 2025-11-07T09:06:54.375Z |
| bit-gitlab-2025-9642 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-10-01T15:13:11.350Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-8014 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-01T15:13:07.496Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-7691 | Privilege Defined With Unsafe Actions in GitLab | 2025-10-01T15:13:01.621Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-5069 | Incorrect Ownership Assignment in GitLab | 2025-10-01T15:12:30.475Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-11042 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-01T15:11:04.156Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-10871 | Missing Authorization in GitLab | 2025-10-01T15:11:02.199Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-10868 | Business Logic Errors in GitLab | 2025-10-01T15:11:00.230Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-10867 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-01T15:10:58.294Z | 2025-10-01T15:14:38.852Z |
| bit-gitlab-2025-10858 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-10-01T15:10:56.334Z | 2025-10-01T15:14:38.852Z |
| bit-mongodb-2024-3374 | MongoDB Server (mongod) may crash when generating ftdc | 2025-10-01T14:49:48.814Z | 2025-10-01T15:14:38.852Z |
| bit-jupyterlab-2025-59842 | JupyterLab LaTeX typesetter links did not enforce `noopener` attribute | 2025-10-01T14:43:22.333Z | 2025-10-01T15:14:38.852Z |
| bit-airflow-2025-54831 | Apache Airflow: Connection sensitive details exposed to users with READ permissions | 2025-10-01T14:39:16.556Z | 2025-11-06T13:25:46.476Z |
| bit-zookeeper-2025-58457 | Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands | 2025-09-26T08:51:26.070Z | 2025-11-06T13:25:46.476Z |
| bit-pip-2025-8869 | Fallback tar extraction in pip doesn't check symbolic links point to extraction directory | 2025-09-26T08:48:13.610Z | 2025-11-06T13:25:46.476Z |
| bit-wordpress-2025-58674 | WordPress core <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability | 2025-09-25T08:55:10.378Z | 2026-04-23T18:12:09.750Z |
| bit-wordpress-2025-58246 | WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability | 2025-09-25T08:55:08.592Z | 2025-10-02T15:07:00.184Z |
| bit-valkey-2025-46686 | 2025-09-25T08:53:41.270Z | 2025-09-25T09:09:38.625Z | |
| bit-redis-2025-46686 | 2025-09-25T08:52:27.726Z | 2025-10-03T15:12:57.579Z | |
| bit-mlflow-2025-52967 | 2025-09-25T08:47:37.376Z | 2025-09-25T09:09:38.625Z | |
| bit-mongodb-2025-3085 | MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked | 2025-09-25T08:47:27.812Z | 2025-09-25T09:09:38.625Z |
| bit-mongodb-2025-3084 | MongoDB Server may crash due to improper validation of explain command | 2025-09-25T08:47:26.320Z | 2025-09-25T09:09:38.625Z |
| bit-mongoose-2025-23061 | 2025-09-25T08:46:40.232Z | 2025-10-06T00:06:00.502Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0729 | Multiples vulnérabilités dans Qnap File Station | 2025-08-26T00:00:00.000000 | 2025-08-26T00:00:00.000000 |
| certfr-2025-avi-0728 | Vulnérabilité dans Centreon Web | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0727 | Multiples vulnérabilités dans les produits ESET | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0726 | Vulnérabilité dans les produits Moxa | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0725 | Vulnérabilité dans Liferay | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0724 | Multiples vulnérabilités dans les produits IBM | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0723 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0722 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0721 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0720 | Multiples vulnérabilités dans Microsoft Windows | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0719 | Vulnérabilité dans Microsoft Edge | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0718 | Multiples vulnérabilités dans les produits Liferay | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0717 | Vulnérabilité dans Elastic Beats | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0716 | Vulnérabilité dans les produits Apple | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0715 | Multiples vulnérabilités dans les produits Liferay | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0714 | Multiples vulnérabilités dans les produits Mozilla | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0713 | Multiples vulnérabilités dans les produits Liferay | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0712 | Vulnérabilité dans Apereo CAS | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0711 | Vulnérabilité dans Google Chrome | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0710 | Multiples vulnérabilités dans les produits F5 | 2025-08-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0709 | Multiples vulnérabilités dans les produits Liferay | 2025-08-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0708 | Multiples vulnérabilités dans les produits Cisco | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0707 | Multiples vulnérabilités dans Mattermost Server | 2025-08-18T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0706 | Multiples vulnérabilités dans Matrix | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0705 | Multiples vulnérabilités dans Microsoft Edge | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0704 | Vulnérabilité dans les produits Siemens | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0703 | Vulnérabilité dans Synology BeeDrive | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0702 | Multiples vulnérabilités dans PostgreSQL | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0701 | Vulnérabilité dans IBM WebSphere | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0700 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000079 | Multiple cross-site scripting vulnerabilities in Movable Type | 2021-08-25T14:54+09:00 | 2021-08-25T14:54+09:00 |
| jvndb-2021-000078 | The installers of multiple Sony products may insecurely load Dynamic Link Libraries | 2021-08-24T14:30+09:00 | 2021-08-24T14:30+09:00 |
| jvndb-2021-002282 | Multiple vulnerabilities in Navigate CMS | 2021-08-20T14:25+09:00 | 2021-08-20T14:25+09:00 |
| jvndb-2021-002279 | Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises | 2021-08-19T15:01+09:00 | 2021-08-19T15:01+09:00 |
| jvndb-2021-000077 | Huawei EchoLife HG8045Q vulnerable to OS command injection | 2021-08-17T14:24+09:00 | 2021-08-17T14:24+09:00 |
| jvndb-2021-002273 | Multiple vulnerabilities in D-Link router DSL-2750U | 2021-08-17T14:09+09:00 | 2021-08-17T14:09+09:00 |
| jvndb-2021-000076 | Plone vulnerable to open redirect | 2021-08-12T14:05+09:00 | 2021-08-12T14:05+09:00 |
| jvndb-2021-000075 | WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting | 2021-08-10T14:40+09:00 | 2021-08-10T14:40+09:00 |
| jvndb-2021-002077 | Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises | 2021-08-04T11:15+09:00 | 2021-08-04T11:15+09:00 |
| jvndb-2021-000073 | Multiple vulnerabilities in Cybozu Garoon | 2021-08-02T16:42+09:00 | 2022-05-24T15:16+09:00 |
| jvndb-2021-000072 | Minecraft Java Edition vulnerable to directory traversal | 2021-07-21T15:12+09:00 | 2021-07-21T15:12+09:00 |
| jvndb-2021-002005 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting | 2021-07-19T16:53+09:00 | 2021-07-19T16:53+09:00 |
| jvndb-2021-000070 | Multiple vulnerabilities in GroupSession | 2021-07-19T15:41+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000069 | Optical BB unit E-WMTA2.3 vulnerable to cross-site request forgery | 2021-07-14T17:13+09:00 | 2021-07-14T17:13+09:00 |
| jvndb-2021-000068 | Multiple vulnerabilities in Retty App | 2021-07-13T14:34+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000067 | voidtools "Everything" vulnerable to HTTP header injection | 2021-07-09T14:40+09:00 | 2021-07-09T14:40+09:00 |
| jvndb-2021-000065 | WordPress Plugin "WordPress Meta Data Filter & Taxonomies Filter" vulnerable to cross-site request forgery | 2021-07-08T14:29+09:00 | 2021-07-08T14:29+09:00 |
| jvndb-2021-000066 | WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery | 2021-07-08T13:45+09:00 | 2021-07-08T13:45+09:00 |
| jvndb-2021-001977 | Multiple vulnerabilities in Elecom routers | 2021-07-07T14:03+09:00 | 2021-07-12T16:04+09:00 |
| jvndb-2021-000064 | GU App for Android fails to restrict access permissions | 2021-07-07T13:16+09:00 | 2021-07-07T13:16+09:00 |
| jvndb-2021-001968 | Multiple vulnerabilities in Trend Micro Password Manager | 2021-07-06T16:08+09:00 | 2021-07-06T16:08+09:00 |
| jvndb-2021-000063 | WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery | 2021-07-06T14:50+09:00 | 2021-07-06T14:50+09:00 |
| jvndb-2021-000062 | WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery | 2021-07-06T14:11+09:00 | 2021-07-06T14:11+09:00 |
| jvndb-2021-000061 | A-Stage SCT-40CM01SR and AT-40CM01SR vulnerable to authentication bypass | 2021-07-05T14:28+09:00 | 2021-07-05T14:28+09:00 |
| jvndb-2021-000059 | EC-CUBE fails to restrict access permissions | 2021-07-01T15:49+09:00 | 2021-07-01T15:49+09:00 |
| jvndb-2007-002102 | boastMachine vulnerable to cross-site scripting | 2021-06-30T14:32+09:00 | 2021-06-30T14:32+09:00 |
| jvndb-2021-000058 | IkaIka RSS Reader vulnerable to cross-site scripting | 2021-06-30T14:21+09:00 | 2021-06-30T14:21+09:00 |
| jvndb-2021-000056 | WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting | 2021-06-30T11:36+09:00 | 2021-06-30T11:36+09:00 |
| jvndb-2021-000057 | Multiple cross-site scripting vulnerabilities in EC-CUBE | 2021-06-23T15:15+09:00 | 2021-06-23T15:15+09:00 |
| jvndb-2021-000055 | WordPress plugin "Fudousan plugin" series vulnerable to cross-site scripting | 2021-06-22T15:06+09:00 | 2021-06-22T15:06+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-09629 | MedDream PACS Premium modifyEmail功能跨站脚本漏洞 | 2026-01-30 | 2026-02-04 |
| cnvd-2026-09628 | MedDream PACS Premium modifyCoercion功能跨站脚本漏洞 | 2026-01-30 | 2026-02-04 |
| cnvd-2026-09627 | MedDream PACS Premium modifyAutopurgeFilter功能跨站脚本漏洞 | 2026-01-30 | 2026-02-04 |
| cnvd-2026-09626 | MedDream PACS Premium modifyAeTitle功能跨站脚本漏洞 | 2026-01-30 | 2026-02-04 |
| cnvd-2026-09625 | MedDream PACS Premium ldapUser功能跨站脚本漏洞 | 2026-01-30 | 2026-02-04 |
| cnvd-2026-09624 | MedDream PACS Premium fetchPriorStudies功能跨站脚本漏洞 | 2026-01-30 | 2026-02-04 |
| cnvd-2026-09623 | MedDream PACS Premium existingUser功能跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09622 | MedDream PACS Premium encapsulatedDoc功能跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09621 | MedDream PACS Premium config.php功能worklistsrc参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09620 | MedDream PACS Premium config.php功能uploaddir参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09619 | MedDream PACS Premium config.php功能thumbnaildir参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09618 | MedDream PACS Premium config.php功能status参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09617 | MedDream PACS Premium config.php功能phpexe参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09616 | MedDream PACS Premium config.php功能phpdir参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09615 | MedDream PACS Premium config.php功能longtermdir参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09614 | MedDream PACS Premium config.php功能imagedir参数跨站脚本漏洞 | 2026-01-30 | 2026-02-03 |
| cnvd-2026-09461 | WordPress插件AWP Classifieds信息泄露漏洞 | 2026-01-30 | 2026-02-02 |
| cnvd-2026-16410 | HCL AION存在未明漏洞(CNVD-2026-16410) | 2026-01-29 | 2026-04-09 |
| cnvd-2026-16409 | HCL AION信息泄露漏洞(CNVD-2026-16409) | 2026-01-29 | 2026-04-09 |
| cnvd-2026-16408 | HCL AION文件上传漏洞 | 2026-01-29 | 2026-04-09 |
| cnvd-2026-16407 | HCL AION存在未明漏洞(CNVD-2026-16407) | 2026-01-29 | 2026-04-09 |
| cnvd-2026-16406 | HCL AION存在未明漏洞(CNVD-2026-16406) | 2026-01-29 | 2026-04-09 |
| cnvd-2026-16405 | HCL AION信息泄露漏洞(CNVD-2026-16405) | 2026-01-29 | 2026-04-09 |
| cnvd-2026-16404 | HCL AION安全绕过漏洞(CNVD-2026-16404) | 2026-01-29 | 2026-04-08 |
| cnvd-2026-10667 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-10667) | 2026-01-29 | 2026-02-11 |
| cnvd-2026-09794 | Apache bRPC远程命令注入漏洞 | 2026-01-29 | 2026-01-30 |
| cnvd-2026-12367 | NVIDIA Merlin Transformers4Rec代码注入漏洞 | 2026-01-26 | 2026-03-03 |
| cnvd-2026-11738 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-11738) | 2026-01-26 | 2026-02-24 |
| cnvd-2026-11737 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-11737) | 2026-01-26 | 2026-02-24 |
| cnvd-2026-10670 | MedDream PACS Premium跨站脚本漏洞(CNVD-2026-10670) | 2026-01-26 | 2026-02-11 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-00754 | Уязвимость платформы хранения данных Dell ECS, связанная с передачей данных в открытом ви… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00753 | Уязвимость платформы хранения данных Dell ECS, связанная с использованием учетных данных … | 23.01.2026 | 23.01.2026 |
| bdu:2026-00752 | Уязвимость платформы хранения данных Dell ECS, связанная с передачей данных в открытом ви… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00751 | Уязвимость функции fsl_otg_remove() модуля drivers/usb/phy/phy-fsl-usb.c ядра операционно… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00750 | Уязвимость функции hfs_bnode_get() модуля fs/hfsplus/bnode.c набора инструментов в Linux … | 23.01.2026 | 27.01.2026 |
| bdu:2026-00749 | Уязвимость функции f2fs_write_cache_pages() модуля fs/f2fs/data.c поддержки файловой сист… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00748 | Уязвимость модуля drivers/spi/spi-fsl-spi.c драйвера процессора коммуникаций Freescale (C… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00747 | Уязвимость функции ocfs2_find_victim_chain() компонента fs/ocfs2/suballoc.c поддержки фай… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00746 | Уязвимость компонента drivers/input/touchscreen/ti_am335x_tsc.c драйвера для интерфейса с… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00745 | Уязвимость компонента net/mlx5e драйвера поддержки сетевых адаптеров Ethernet Mellanox яд… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00744 | Уязвимость функции f2fs_recover_fsync_data() модуля fs/f2fs/super.c поддержки файловой си… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00743 | Уязвимость функции check_lock_range() модуля fs/smb/server/vfs.c ядра операционной систем… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00742 | Уязвимость пакета для работы с файловой системой HFS+ hfsplus ядра операционной системы L… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00741 | Уязвимость функции nr_sendmsg() модуля net/netrom/nr_out.c ядра операционной системы Linu… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00740 | Уязвимость модулей kernel/sched/cpudeadline.c, kernel/sched/cpudeadline.h, kernel/sched/d… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00739 | Уязвимость функции xchk_setup_xattr_buf() модуля fs/xfs/scrub/attr_repair.c ядра операцио… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00738 | Уязвимость функции fqdir_pre_exit() модуля include/net/inet_frag.h ядра операционной сист… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00737 | Уязвимость функции remove_pending() компонента net/handshake реализации механизма установ… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00736 | Уязвимость компонента Core виртуальной машины Oracle VM VirtualBox, позволяющая нарушител… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00735 | Уязвимость функции bnxt_rx_xdp() компонента drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00734 | Уязвимость функции prp_get_untagged_frame() модуля net/hsr реализации протокола бесшовног… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00733 | Уязвимость модуля fs/notify/fsnotify.c ядра операционной системы Linux, позволяющая наруш… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00732 | Уязвимость функции ibmpex_high_low_store() модуля drivers/hwmon/ibmpex.c ядра операционно… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00731 | Уязвимость функции get_meter_levels_from_urb() модуля sound/usb/mixer_us16x08.c ядра опер… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00730 | Уязвимость модуля drivers/target/target_core_transport.c драйвера поддержки устройств SCS… | 23.01.2026 | 27.01.2026 |
| bdu:2026-00729 | Уязвимость HTML-редактора Adobe Dreamweaver, связанная с непринятием мер по нейтрализации… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00728 | Уязвимость HTML-редактора Adobe Dreamweaver, связанная с недостаточной проверкой вводимых… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00727 | Уязвимость HTML-редактора Adobe Dreamweaver, связанная с недостаточной проверкой вводимых… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00726 | Уязвимость HTML-редактора Adobe Dreamweaver, связанная с недостаточной проверкой вводимых… | 23.01.2026 | 23.01.2026 |
| bdu:2026-00725 | Уязвимость HTML-редактора Adobe Dreamweaver, связанная с недостатками процедуры авторизац… | 23.01.2026 | 23.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201501-0338 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1… | 2026-03-09T22:30:39.973000Z |
| var-201904-0753 | A memory corruption issue was addressed with improved validation. This issue affected ver… | 2026-03-09T22:30:07.612000Z |
| var-202201-0104 | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtt… | 2026-03-09T22:28:24.624000Z |
| var-201107-0102 | Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execut… | 2026-03-09T22:28:22.774000Z |
| var-201910-1509 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_pri… | 2026-03-09T22:28:20.384000Z |
| var-202001-1433 | When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data sm… | 2026-03-09T22:28:09.316000Z |
| var-201007-0318 | WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… | 2026-03-09T22:27:31.330000Z |
| var-202101-1926 | Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer o… | 2026-03-09T22:27:02.630000Z |
| var-201910-1485 | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. tcpdum… | 2026-03-09T22:27:02.199000Z |
| var-201006-1169 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2026-03-09T22:26:28.773000Z |
| var-202207-1485 | An out-of-bounds write issue was addressed with improved input validation. This issue is … | 2026-03-09T22:25:55.091000Z |
| var-201609-0593 | Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.… | 2026-03-09T22:25:31.902000Z |
| var-200310-0072 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code… | 2026-03-09T22:25:30.128000Z |
| var-200809-0009 | ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attack… | 2026-03-09T22:24:49.793000Z |
| var-201609-0225 | xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tv… | 2026-03-09T22:24:08.880000Z |
| var-200711-0560 | Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matc… | 2026-03-09T22:23:54.588000Z |
| var-200703-0018 | Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to… | 2026-03-09T22:23:52.792000Z |
| var-200910-0505 | Use-after-free vulnerability in the abstract file-descriptor handling interface in the cu… | 2026-03-09T22:23:19.643000Z |
| var-201809-0668 | An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An… | 2026-03-09T22:22:45.467000Z |
| var-201310-0614 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… | 2026-03-09T22:22:44.802000Z |
| var-202105-1306 | The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-… | 2026-03-09T22:22:11.321000Z |
| var-200901-0742 | WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM object… | 2026-03-09T22:21:27.082000Z |
| var-201605-0491 | The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, … | 2026-03-09T22:21:26.998000Z |
| var-200603-0282 | Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 1… | 2026-03-09T22:21:17.860000Z |
| var-200106-0168 | Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows lo… | 2026-03-09T22:21:16.532000Z |
| var-201306-0250 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T22:21:15.728000Z |
| var-201806-1456 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS befor… | 2026-03-09T22:21:09.704000Z |
| var-202210-1526 | The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macO… | 2026-03-09T22:20:33.832000Z |
| var-201711-0480 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2026-03-09T22:19:49.936000Z |
| var-201605-0145 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly… | 2026-03-09T22:19:46.968000Z |