Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-39920
9.3 (4.0)
9.8 (3.1)
BridgeHead FileStore < 24A Apache Axis2 Default Creden… BridgeHead Software
FileStore
2026-04-24T15:48:26.059Z 2026-04-24T18:17:02.370Z
CVE-2026-41067
6.1 (3.1)
Astro: XSS via incomplete `</script>` sanitization in … withastro
astro
2026-04-24T16:57:22.940Z 2026-04-24T18:16:55.536Z
CVE-2026-42039
6.9 (4.0)
Axios: unbounded recursion in toFormData causes DoS vi… axios
axios
2026-04-24T18:01:30.775Z 2026-04-24T18:14:37.802Z
CVE-2026-42034
5.3 (3.1)
Axios: HTTP adapter streamed uploads bypass maxBodyLen… axios
axios
2026-04-24T17:59:47.802Z 2026-04-24T18:13:14.474Z
CVE-2026-42044
6.5 (3.1)
Axios: Invisible JSON Response Tampering via Prototype… axios
axios
2026-04-24T17:49:49.517Z 2026-04-24T18:12:13.920Z
CVE-2026-41907
8.1 (4.0)
uuid: Missing buffer bounds check in `v3`/`v5`/`v6` wh… uuidjs
uuid
2026-04-24T18:09:24.744Z 2026-04-24T18:09:24.744Z
CVE-2026-24564
4.3 (3.1)
WordPress Textmetrics plugin <= 3.6.5 - Content Inject… Israpil
Textmetrics
2026-01-23T14:28:55.667Z 2026-04-24T18:07:23.569Z
CVE-2026-24567
4.3 (3.1)
WordPress Anything Order by Terms plugin <= 1.4.0 - Br… briarinc
Anything Order by Terms
2026-01-23T14:28:56.196Z 2026-04-24T18:07:23.401Z
CVE-2026-24568
5.3 (3.1)
WordPress WP Travel plugin <= 11.1.0 - Broken Access C… WP Travel
WP Travel
2026-01-23T14:28:56.433Z 2026-04-24T18:07:23.224Z
CVE-2026-24569
4.3 (3.1)
WordPress Media Library File Size plugin <= 1.6.7 - Br… Sully
Media Library File Size
2026-01-23T14:28:56.622Z 2026-04-24T18:07:23.058Z
CVE-2026-24570
5.4 (3.1)
WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Acce… WisdmLabs
Edwiser Bridge
2026-01-23T14:28:56.795Z 2026-04-24T18:07:22.890Z
CVE-2026-24571
4.3 (3.1)
WordPress BOX NOW Delivery plugin <= 3.0.2 - Broken Ac… boxnow
BOX NOW Delivery
2026-01-23T14:28:56.952Z 2026-04-24T18:07:22.726Z
CVE-2026-24572
8.5 (3.1)
WordPress Nelio Content plugin <= 4.2.0 - SQL Injectio… Nelio Software
Nelio Content
2026-01-23T14:28:57.109Z 2026-04-24T18:07:22.550Z
CVE-2026-24576
6.5 (3.1)
WordPress UX Flat plugin <= 5.4.0 - Cross Site Scripti… COP
UX Flat
2026-01-23T14:28:57.282Z 2026-04-24T18:07:22.363Z
CVE-2026-24577
5.3 (3.1)
WordPress Pie Register plugin <= 3.8.4.8 - Broken Acce… Genetech Products
Pie Register
2026-01-23T14:28:57.456Z 2026-04-24T18:07:22.199Z
CVE-2026-24578
4.3 (3.1)
WordPress Admin login URL Change plugin <= 1.1.5 - Bro… Jahid Hasan
Admin login URL Change
2026-01-23T14:28:58.618Z 2026-04-24T18:07:22.038Z
CVE-2026-24579
4.3 (3.1)
WordPress Ai Image Alt Text Generator for WP plugin <=… WP Messiah
Ai Image Alt Text Generator for WP
2026-01-23T14:28:58.842Z 2026-04-24T18:07:21.868Z
CVE-2026-24580
4.3 (3.1)
WordPress Ecwid Shopping Cart plugin <= 7.0.5 - Broken… Ecwid by Lightspeed Ecommerce Shopping Cart
Ecwid Shopping Cart
2026-01-23T14:28:59.009Z 2026-04-24T18:07:21.707Z
CVE-2026-24581
5.4 (3.1)
WordPress Points and Rewards for WooCommerce plugin <=… WP Swings
Points and Rewards for WooCommerce
2026-01-23T14:28:59.230Z 2026-04-24T18:07:21.536Z
CVE-2026-24583
5.3 (3.1)
WordPress SumUp Payment Gateway For WooCommerce plugin… sumup
SumUp Payment Gateway For WooCommerce
2026-01-23T14:28:59.442Z 2026-04-24T18:07:21.332Z
CVE-2026-24591
6.5 (3.1)
WordPress Turn Yoast SEO FAQ Block to Accordion plugin… yasir129
Turn Yoast SEO FAQ Block to Accordion
2026-01-23T14:29:00.969Z 2026-04-24T18:07:21.103Z
CVE-2026-24594
5.9 (3.1)
WordPress Livemesh Addons for WPBakery Page Builder pl… livemesh
Livemesh Addons for WPBakery Page Builder
2026-01-23T14:29:01.518Z 2026-04-24T18:07:20.830Z
CVE-2026-24595
5.4 (3.1)
WordPress Zoho CRM Lead Magnet plugin <= 1.8.1.9 - Bro… zohocrm
Zoho CRM Lead Magnet
2026-01-23T14:29:01.997Z 2026-04-24T18:07:20.593Z
CVE-2026-24596
4.3 (3.1)
WordPress Related Posts Thumbnails plugin for WordPres… marynixie
Related Posts Thumbnails Plugin for WordPress
2026-01-23T14:29:02.365Z 2026-04-24T18:07:20.161Z
CVE-2026-24600
6.5 (3.1)
WordPress Penci Review plugin <= 3.5 - Cross Site Scri… PenciDesign
Penci Review
2026-01-23T14:29:02.944Z 2026-04-24T18:07:19.989Z
CVE-2026-24601
6.5 (3.1)
WordPress Penci Pay Writer plugin <= 1.5 - Cross Site … PenciDesign
Penci Pay Writer
2026-01-23T14:29:03.210Z 2026-04-24T18:07:19.815Z
CVE-2026-24607
5.3 (3.1)
WordPress Travel Monster theme <= 1.3.3 - Broken Acces… wptravelengine
Travel Monster
2026-01-23T14:29:04.281Z 2026-04-24T18:07:19.644Z
CVE-2026-24612
5.3 (3.1)
WordPress Orchid Store theme <= 1.5.15 - Broken Access… themebeez
Orchid Store
2026-01-23T14:29:04.803Z 2026-04-24T18:07:19.473Z
CVE-2026-24613
5.3 (3.1)
WordPress Ecwid Shopping Cart plugin <= 7.0.6 - Broken… Ecwid by Lightspeed Ecommerce Shopping Cart
Ecwid Shopping Cart
2026-01-23T14:29:04.954Z 2026-04-24T18:07:19.279Z
CVE-2026-24615
5.3 (3.1)
WordPress Cream Magazine theme <= 2.1.10 - Broken Acce… themebeez
Cream Magazine
2026-01-23T14:29:05.288Z 2026-04-24T18:07:19.114Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-31576
N/A
media: hackrf: fix to not free memory after the device… Linux
Linux
2026-04-24T14:42:08.188Z 2026-04-24T14:42:08.188Z
CVE-2026-31575
N/A
mm/userfaultfd: fix hugetlb fault mutex hash calculation Linux
Linux
2026-04-24T14:42:07.502Z 2026-04-24T14:42:07.502Z
CVE-2026-31574
N/A
clockevents: Add missing resets of the next_event_forc… Linux
Linux
2026-04-24T14:42:06.707Z 2026-04-24T14:42:06.707Z
CVE-2026-31573
N/A
media: verisilicon: Fix kernel panic due to __initcons… Linux
Linux
2026-04-24T14:35:51.421Z 2026-04-24T14:35:51.421Z
CVE-2026-31572
N/A
i2c: designware: amdisp: Fix resume-probe race conditi… Linux
Linux
2026-04-24T14:35:50.736Z 2026-04-24T14:35:50.736Z
CVE-2026-31571
N/A
drm/i915: Unlink NV12 planes earlier Linux
Linux
2026-04-24T14:35:50.094Z 2026-04-24T14:35:50.094Z
CVE-2026-31570
N/A
can: gw: fix OOB heap access in cgw_csum_crc8_rel() Linux
Linux
2026-04-24T14:35:49.435Z 2026-04-24T14:35:49.435Z
CVE-2026-31569
N/A
LoongArch: KVM: Handle the case that EIOINTC's coremap… Linux
Linux
2026-04-24T14:35:48.768Z 2026-04-24T14:35:48.768Z
CVE-2026-31568
N/A
s390/mm: Add missing secure storage access fixups for … Linux
Linux
2026-04-24T14:35:48.125Z 2026-04-24T14:35:48.125Z
CVE-2026-31567
N/A
PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp… Linux
Linux
2026-04-24T14:35:47.453Z 2026-04-24T14:35:47.453Z
CVE-2026-31566
N/A
drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd… Linux
Linux
2026-04-24T14:35:46.740Z 2026-04-24T14:35:46.740Z
CVE-2026-31565
N/A
RDMA/irdma: Fix deadlock during netdev reset with acti… Linux
Linux
2026-04-24T14:35:46.006Z 2026-04-24T14:35:46.006Z
CVE-2026-31564
N/A
LoongArch: KVM: Fix base address calculation in kvm_ei… Linux
Linux
2026-04-24T14:35:45.302Z 2026-04-24T14:35:45.302Z
CVE-2026-31563
N/A
net: macb: Use dev_consume_skb_any() to free TX SKBs Linux
Linux
2026-04-24T14:35:44.610Z 2026-04-24T14:35:44.610Z
CVE-2026-31562
N/A
drm/mediatek: dsi: Store driver data before invoking m… Linux
Linux
2026-04-24T14:35:43.950Z 2026-04-24T14:35:43.950Z
CVE-2026-31561
N/A
x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Linux
Linux
2026-04-24T14:35:43.302Z 2026-04-24T14:35:43.302Z
CVE-2026-31560
N/A
spi: spi-dw-dma: fix print error log when wait finish … Linux
Linux
2026-04-24T14:35:42.634Z 2026-04-25T05:48:14.807Z
CVE-2026-31559
N/A
LoongArch: Fix missing NULL checks for kstrdup() Linux
Linux
2026-04-24T14:35:41.961Z 2026-04-25T05:48:13.693Z
CVE-2026-31558
N/A
LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Linux
Linux
2026-04-24T14:35:41.209Z 2026-04-24T14:35:41.209Z
CVE-2026-31557
N/A
nvmet: move async event work off nvmet-wq Linux
Linux
2026-04-24T14:35:40.544Z 2026-04-25T05:48:12.438Z
CVE-2026-31556
N/A
xfs: scrub: unlock dquot before early return in quota scrub Linux
Linux
2026-04-24T14:35:39.880Z 2026-04-24T14:35:39.880Z
CVE-2026-31555
N/A
futex: Clear stale exiting pointer in futex_lock_pi() … Linux
Linux
2026-04-24T14:35:39.211Z 2026-04-24T14:35:39.211Z
CVE-2026-31554
N/A
futex: Require sys_futex_requeue() to have identical flags Linux
Linux
2026-04-24T14:35:38.527Z 2026-04-24T14:35:38.527Z
CVE-2026-31553
N/A
KVM: arm64: Fix the descriptor address in __kvm_at_swa… Linux
Linux
2026-04-24T14:35:37.828Z 2026-04-24T14:35:37.828Z
CVE-2026-31552
N/A
wifi: wlcore: Return -ENOMEM instead of -EAGAIN if the… Linux
Linux
2026-04-24T14:33:19.065Z 2026-04-24T14:33:19.065Z
CVE-2026-31551
N/A
wifi: mac80211: Fix static_branch_dec() underflow for … Linux
Linux
2026-04-24T14:33:18.230Z 2026-04-24T14:33:18.230Z
CVE-2026-31550
N/A
pmdomain: bcm: bcm2835-power: Increase ASB control timeout Linux
Linux
2026-04-24T14:33:17.508Z 2026-04-24T14:33:17.508Z
CVE-2026-31549
N/A
i2c: cp2615: fix serial string NULL-deref at probe Linux
Linux
2026-04-24T14:33:16.814Z 2026-04-24T14:33:16.814Z
CVE-2026-31548
N/A
wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_w… Linux
Linux
2026-04-24T14:33:16.021Z 2026-04-24T14:33:16.021Z
CVE-2026-31547
N/A
drm/xe: Fix missing runtime PM reference in ccs_mode_store Linux
Linux
2026-04-24T14:33:15.262Z 2026-04-24T14:33:15.262Z
ID Description Published Updated
fkie_cve-2026-5600 A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a s… 2026-04-08T13:16:43.543 2026-04-24T17:46:14.777
fkie_cve-2026-23353 In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in ethtool offl… 2026-03-25T11:16:33.817 2026-04-24T17:45:52.567
fkie_cve-2026-26165 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. 2026-04-14T18:16:49.807 2026-04-24T17:39:24.420
fkie_cve-2026-26166 Double free in Windows Shell allows an authorized attacker to elevate privileges locally. 2026-04-14T18:16:50.060 2026-04-24T17:38:47.053
fkie_cve-2026-26167 Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… 2026-04-14T18:16:50.297 2026-04-24T17:37:09.967
fkie_cve-2026-26168 Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… 2026-04-14T18:16:50.607 2026-04-24T17:35:18.193
fkie_cve-2016-7119 Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) … 2016-08-31T14:59:01.190 2026-04-24T17:34:37.240
fkie_cve-2015-2794 The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the a… 2017-02-06T15:59:00.137 2026-04-24T17:34:37.240
fkie_cve-2015-1566 Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers t… 2015-02-09T17:59:10.687 2026-04-24T17:34:37.240
fkie_cve-2013-7335 Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote att… 2014-03-12T14:55:30.740 2026-04-24T17:34:37.240
fkie_cve-2013-4649 Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allo… 2014-03-12T14:55:30.677 2026-04-24T17:34:37.240
fkie_cve-2013-3943 Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allo… 2014-03-12T14:55:30.647 2026-04-24T17:34:37.240
fkie_cve-2012-1036 Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and … 2012-04-11T10:39:26.387 2026-04-24T17:34:37.240
fkie_cve-2012-1030 Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remot… 2012-04-11T10:39:26.340 2026-04-24T17:34:37.240
fkie_cve-2010-4514 Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.… 2010-12-09T21:00:01.540 2026-04-24T17:34:37.240
fkie_cve-2009-4110 Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.… 2009-11-29T13:08:29.640 2026-04-24T17:34:37.240
fkie_cve-2009-4109 The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing … 2009-11-29T13:08:29.610 2026-04-24T17:34:37.240
fkie_cve-2009-1366 Cross-site scripting (XSS) vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke (DNN) … 2009-04-22T21:30:13.127 2026-04-24T17:34:37.240
fkie_cve-2008-7102 DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and… 2009-08-27T20:30:00.547 2026-04-24T17:34:37.240
fkie_cve-2008-7101 Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain… 2009-08-27T20:30:00.530 2026-04-24T17:34:37.240
fkie_cve-2008-7100 Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to by… 2009-08-27T20:30:00.500 2026-04-24T17:34:37.240
fkie_cve-2008-6733 Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8… 2009-04-21T18:30:00.250 2026-04-24T17:34:37.240
fkie_cve-2008-6732 Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 all… 2009-04-21T18:30:00.217 2026-04-24T17:34:37.240
fkie_cve-2008-6644 Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows rem… 2009-04-07T14:17:17.827 2026-04-24T17:34:37.240
fkie_cve-2008-6542 Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticate… 2009-03-30T01:30:00.377 2026-04-24T17:34:37.240
fkie_cve-2008-6541 Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows… 2009-03-30T01:30:00.360 2026-04-24T17:34:37.240
fkie_cve-2008-6540 DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the d… 2009-03-30T01:30:00.327 2026-04-24T17:34:37.240
fkie_cve-2008-6399 Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additiona… 2009-03-05T20:30:00.407 2026-04-24T17:34:37.240
fkie_cve-2006-4973 Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems Do… 2006-09-25T01:07:00.000 2026-04-24T17:34:37.240
fkie_cve-2006-3601 ** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (… 2006-07-18T15:37:00.000 2026-04-24T17:34:37.240
ID Severity Description Published Updated
ghsa-phf4-w5j6-499q
5.3 (3.1)
Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows Functionalit… 2024-12-13T15:30:42Z 2026-04-23T15:33:50Z
ghsa-89p6-5p4m-h2pv
4.3 (3.1)
Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Confi… 2024-12-13T15:30:42Z 2026-04-23T15:33:50Z
ghsa-685g-7w4h-726p
8.1 (3.1)
Missing Authorization vulnerability in Premmerce Premmerce User Roles allows Exploiting Incorrectly… 2024-12-13T15:30:42Z 2026-04-23T15:33:50Z
ghsa-476h-737f-mc4w
4.3 (3.1)
Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Inc… 2024-12-13T15:30:42Z 2026-04-23T15:33:50Z
ghsa-q966-x4v8-whfm
4.3 (3.1)
Missing Authorization vulnerability in Mateusz Czardybon Justified Gallery allows Exploiting Incorr… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-pfw8-vjxx-7qhh
5.4 (3.1)
Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Inc… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-mvr3-fvpv-v5pf
4.3 (3.1)
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Portfolio and Projects al… 2024-12-13T15:30:41Z 2026-04-23T15:33:49Z
ghsa-mv8m-8gw4-6jh3
4.3 (3.1)
Missing Authorization vulnerability in SolidWP iThemes Sync allows Exploiting Incorrectly Configure… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-m9cr-g8p8-8x4r
6.5 (3.1)
Missing Authorization vulnerability in weDevs WP Project Manager allows Exploiting Incorrectly Conf… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-j6f4-g5vh-36v8
5.3 (3.1)
Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrect… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-c4vc-qwpj-cgw6
5.3 (3.1)
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion S… 2024-12-13T15:30:41Z 2026-04-23T15:33:49Z
ghsa-5hgq-g4w5-rwmf
7.5 (3.1)
Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 allows Exploiting I… 2024-12-13T15:30:41Z 2026-04-23T15:33:49Z
ghsa-485q-m5hh-2rqx
5.3 (3.1)
Missing Authorization vulnerability in Easy Digital Downloads Easy Digital Downloads allows Exploit… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-xx6h-c2fx-v78f
5.4 (3.1)
Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Config… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-wm3h-3hjp-64v8
5.4 (3.1)
Missing Authorization vulnerability in Suresh Chand CHP Ads Block Detector allows Exploiting Incorr… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-w9vc-q9hh-6g37
4.3 (3.1)
Missing Authorization vulnerability in ExpressTech Quiz And Survey Master allows Exploiting Incorre… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-w4r8-222j-w435
5.3 (3.1)
Missing Authorization vulnerability in YetAnotherStarsRating.com Yet Another Stars Rating allows Ex… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-w43h-737f-6x4q
6.5 (3.1)
Missing Authorization vulnerability in miniOrange YourMembership Single Sign On allows Exploiting I… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-r235-444x-j59r
6.5 (3.1)
Missing Authorization vulnerability in WPSchoolPress Team WPSchoolPress allows Exploiting Incorrect… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-qv2x-7mqw-c4mf
4.3 (3.1)
Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Bran… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-p77r-v683-34m4
4.3 (3.1)
Missing Authorization vulnerability in social share pro Social Share Icons & Social Share Buttons a… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-jf99-j3rv-qp5p
4.3 (3.1)
Missing Authorization vulnerability in Hugh Lashbrooke Post Hit Counter allows Exploiting Incorrect… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-j5q9-7xqm-r9fg
5.3 (3.1)
Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows E… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-j3qr-gw2j-fj2r
5.3 (3.1)
Missing Authorization vulnerability in Codents Simple Googlebot Visit allows Exploiting Incorrectly… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-gvpq-4fvc-8q2q
5.4 (3.1)
Missing Authorization vulnerability in Easyship Easyship WooCommerce Shipping Rates allows Exploiti… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-gq4m-hx6p-2rp5
5.4 (3.1)
Missing Authorization vulnerability in wpthemego SW Product Bundles allows Exploiting Incorrectly C… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-8fg5-f59f-ph4f
6.5 (3.1)
Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly C… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-8f9w-g33v-vmxc
5.3 (3.1)
Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incor… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-8f38-9x5m-gx9w
7.3 (3.1)
Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploit… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-7v6h-292g-jmmf
5.4 (3.1)
Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Con… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ID Severity Description Package Published Updated
pysec-2022-43037
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execu… democritus-dicts 2022-10-11T22:15:00Z 2023-06-05T01:12:50.022993Z
pysec-2022-43036
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… democritus-csv 2022-10-11T22:15:00Z 2023-06-05T01:12:49.913597Z
pysec-2022-43035
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execut… democritus-csv 2022-10-11T22:15:00Z 2023-06-05T01:12:49.835906Z
pysec-2022-43034
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execut… d8s-yaml 2022-10-11T22:15:00Z 2023-06-05T01:12:49.718747Z
pysec-2022-43033
The d8s-xml package for Python, as distributed on PyPI, included a potential code-executi… d8s-xml 2022-10-11T22:15:00Z 2023-06-05T01:12:49.587712Z
pysec-2022-43032
The d8s-utility package for Python, as distributed on PyPI, included a potential code-exe… d8s-utility 2022-10-11T22:15:00Z 2023-06-05T01:12:49.473097Z
pysec-2022-43031
The d8s-utility package for Python, as distributed on PyPI, included a potential code-exe… d8s-utility 2022-10-11T22:15:00Z 2023-06-05T01:12:49.395893Z
pysec-2022-43030
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execut… d8s-urls 2022-10-11T22:15:00Z 2023-06-05T01:12:49.291206Z
pysec-2022-43029
The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execut… d8s-pdfs 2022-10-11T22:15:00Z 2023-06-05T01:12:49.177857Z
pysec-2022-43028
The d8s-networking package for Python, as distributed on PyPI, included a potential code-… d8s-networking 2022-10-11T22:15:00Z 2023-06-05T01:12:49.075232Z
pysec-2022-43027
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execu… d8s-lists 2022-10-11T22:15:00Z 2023-06-05T01:12:48.913872Z
pysec-2022-43026
The d8s-json package for Python, as distributed on PyPI, included a potential code-execut… d8s-json 2022-10-11T22:15:00Z 2023-06-05T01:12:48.769675Z
pysec-2022-43025
The d8s-html package for Python, as distributed on PyPI, included a potential code-execut… d8s-html 2022-10-11T22:15:00Z 2023-06-05T01:12:48.578719Z
pysec-2022-43024
The d8s-file-system package for Python, as distributed on PyPI, included a potential code… d8s-file-system 2022-10-11T22:15:00Z 2023-06-05T01:12:48.460219Z
pysec-2022-43023
The d8s-domains package for Python, as distributed on PyPI, included a potential code-exe… d8s-domains 2022-10-11T22:15:00Z 2023-06-05T01:12:48.349619Z
pysec-2022-43022
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… d8s-asns 2022-10-11T22:15:00Z 2023-06-05T01:12:48.247277Z
pysec-2022-43021
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… d8s-asns 2022-10-11T22:15:00Z 2023-06-05T01:12:48.172299Z
pysec-2022-43020
The d8s-archives package for Python, as distributed on PyPI, included a potential code-ex… d8s-archives 2022-10-11T22:15:00Z 2023-06-05T01:12:48.057391Z
pysec-2022-43019
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-… d8s-algorithms 2022-10-11T22:15:00Z 2023-06-05T01:12:47.946780Z
pysec-2023-60
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apa… apache-airflow 2023-05-08T10:15:00Z 2023-06-05T01:12:45.763850Z
pysec-2023-59
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airf… apache-airflow 2023-05-08T12:15:00Z 2023-06-05T01:12:45.655810Z
pysec-2021-427
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.… mpmath 2021-06-21T20:15:00Z 2023-05-31T06:15:00Z
pysec-2022-42980
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. pillow 2022-11-14T07:15:00Z 2023-05-25T05:07:00Z
pysec-2022-234
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes t… poetry 2022-03-21T22:15:00Z 2023-05-25T05:07:00Z
pysec-2022-233
openssh_key_parser is an open source Python package providing utilities to parse and pack… openssh-key-parser 2022-07-06T18:15:00Z 2023-05-25T05:07:00Z
pysec-2022-230
NULL Pointer Dereference allows attackers to cause a denial of service (or application cr… lxml 2022-07-05T10:15:00Z 2023-05-25T05:07:00Z
pysec-2022-229
`gradio` is an open source framework for building interactive machine learning models and… gradio 2022-03-17T21:15:00Z 2023-05-25T05:07:00Z
pysec-2022-228
An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in projec… gerapy 2022-03-10T21:15:00Z 2023-05-25T05:07:00Z
pysec-2022-227
Bottle before 0.12.20 mishandles errors during early request binding. bottle 2022-06-02T14:15:00Z 2023-05-25T05:07:00Z
pysec-2021-874
pytorch-lightning is vulnerable to Deserialization of Untrusted Data pytorch-lightning 2021-12-23T18:15:00Z 2023-05-25T05:07:00Z
ID Description Updated
gsd-2024-33318 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.663332Z
gsd-2024-33153 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.662915Z
gsd-2024-33032 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.662376Z
gsd-2024-33484 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.661953Z
gsd-2024-33219 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.661517Z
gsd-2024-33117 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.660987Z
gsd-2024-33315 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.660426Z
gsd-2024-33306 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.659851Z
gsd-2024-33467 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.659390Z
gsd-2024-33051 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.658888Z
gsd-2024-33446 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.658390Z
gsd-2024-33367 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.657978Z
gsd-2024-33199 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.657538Z
gsd-2024-33043 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.657078Z
gsd-2024-33340 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.656659Z
gsd-2024-33034 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.656229Z
gsd-2024-33455 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.655789Z
gsd-2024-33477 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.655326Z
gsd-2024-33245 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.654902Z
gsd-2024-33296 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.654274Z
gsd-2024-33436 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.653792Z
gsd-2024-33444 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.653354Z
gsd-2024-33426 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.652912Z
gsd-2024-33419 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.652384Z
gsd-2024-33384 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.651908Z
gsd-2024-33402 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.651479Z
gsd-2024-33454 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.650999Z
gsd-2024-33303 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.649918Z
gsd-2024-33494 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.649122Z
gsd-2024-33281 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.648581Z
ID Description Published Updated
mal-2026-1149 Malicious code in hackpreinstall (npm) 2026-03-03T04:02:41Z 2026-04-01T12:28:02Z
mal-2026-1116 Malicious code in js-nodecat (npm) 2026-03-02T14:33:45Z 2026-04-01T12:28:02Z
mal-2026-1074 Malicious code in dgxeon-soket (npm) 2026-02-27T16:29:27Z 2026-04-01T12:28:02Z
mal-2026-1356 Malicious code in b2b-common-cb-lib (npm) 2026-03-12T01:56:30Z 2026-04-01T12:28:01Z
mal-2026-1265 Malicious code in aaaaaxxxxx (npm) 2026-03-06T14:18:06Z 2026-04-01T12:28:01Z
mal-2026-1192 Malicious code in chai-as-proofed (npm) 2026-03-03T06:51:52Z 2026-04-01T12:28:01Z
mal-2026-1191 Malicious code in chai-as-mock (npm) 2026-03-03T06:50:52Z 2026-04-01T12:28:01Z
mal-2026-1034 Malicious code in chai-lite-lib (npm) 2026-02-25T17:42:40Z 2026-04-01T12:28:01Z
mal-2025-192725 Malicious code in chai-pack (npm) 2025-12-23T08:02:18Z 2026-04-01T12:28:01Z
mal-2025-191567 Malicious code in chai-sync (npm) 2025-12-01T13:05:09Z 2026-04-01T12:28:01Z
mal-2026-1302 Malicious code in @platform-growth/guidance-channel-provider (npm) 2026-03-10T01:04:15Z 2026-04-01T12:28:00Z
mal-2026-1247 Malicious code in @imhuman/corp-build-utils-poc (npm) 2026-03-05T16:49:33Z 2026-04-01T12:28:00Z
mal-2026-1187 Malicious code in @twilio-client/twilio-client (npm) 2026-03-03T06:32:39Z 2026-04-01T12:28:00Z
mal-2026-1170 Malicious code in @global-dax-ad-platform/dax-utils (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1169 Malicious code in @global-dax-ad-platform/dax-types (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1168 Malicious code in @global-dax-ad-platform/dax-styles (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1167 Malicious code in @global-dax-ad-platform/dax-modules (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1166 Malicious code in @global-dax-ad-platform/dax-hooks (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1165 Malicious code in @global-dax-ad-platform/dax-components (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-2316 Malicious code in openai-async-helpers (PyPI) 2026-04-01T06:00:26Z 2026-04-01T06:00:27Z
mal-2026-2317 Malicious code in pygithub-async-utils (PyPI) 2026-04-01T05:58:39Z 2026-04-01T05:58:40Z
mal-2026-2315 Malicious code in latinum-wallet-mcp (PyPI) 2026-03-31T20:37:05Z 2026-03-31T21:18:58Z
mal-2026-2313 Malicious code in coredxloader (PyPI) 2026-03-31T17:07:08Z 2026-03-31T17:07:08Z
mal-2026-2274 Malicious code in autoshipment-public-front (npm) 2026-03-28T10:54:19Z 2026-03-31T11:35:12Z
mal-2026-2311 Malicious code in officepyai (PyPI) 2026-03-31T09:26:34Z 2026-03-31T09:28:16Z
mal-2026-2310 Malicious code in lakeflow-community-connectors (PyPI) 2026-03-31T05:36:24Z 2026-03-31T05:36:24Z
mal-2026-2306 Malicious code in plain-crypto-js (npm) 2026-03-31T02:07:58Z 2026-03-31T05:26:30Z
mal-2026-2309 Malicious code in zzzzthisisitwantsafecheckitzzzz (PyPI) 2026-03-31T03:35:47Z 2026-03-31T05:19:14Z
mal-2026-2308 Malicious code in workingitme (PyPI) 2026-03-31T03:40:48Z 2026-03-31T05:19:14Z
mal-2026-2257 Malicious code in xpna-context (npm) 2026-03-27T12:10:43Z 2026-03-31T03:12:05Z
ID Description Published Updated
wid-sec-w-2025-1231 Python: Mehrere Schwachstellen 2025-06-03T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2025-1171 GStreamer: Mehrere Schwachstellen 2025-05-29T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2025-1080 CPython: Schwachstelle ermöglicht Denial of Service 2025-05-15T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2025-0729 Red Hat JBoss Enterprise Application Platform und WildFly: Schwachstelle ermöglicht Codeausführung 2025-04-07T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2025-0233 Python: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-02-02T23:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2024-3463 Python: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-11-13T23:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2024-3270 Python: Schwachstelle ermöglicht Codeausführung 2024-10-24T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2024-1504 Apache HTTP Server: Mehrere Schwachstellen 2024-07-01T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2024-0801 Apache HTTP Server: Mehrere Schwachstellen ermöglichen Manipulation von Daten 2024-04-04T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2023-2712 Apache HTTP Server: Mehrere Schwachstellen ermöglichen Denial of Service 2023-10-18T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2023-2618 http/2 Implementierungen: Schwachstelle ermöglicht Denial of Service 2023-10-10T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2023-1238 Red Hat Enterprise Linux: Mehrere Schwachstellen in verschiedenen Komponenten 2023-05-16T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2023-0583 Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting 2023-03-07T23:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2023-0167 MariaDB: Schwachstelle ermöglicht Denial of Service 2023-01-22T23:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2023-0035 PHP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2023-01-05T23:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2022-1934 PHP: Schwachstelle ermöglicht Offenlegung von Informationen 2022-11-01T23:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2022-1816 SHA-3 Implementierungen: Schwachstelle ermöglicht Codeausführung 2022-10-23T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2022-1567 PHP: Mehrere Schwachstellen 2022-09-28T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2022-1504 expat: Schwachstelle ermöglicht Codeausführung 2022-09-22T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2022-1258 MariaDB: Schwachstelle ermöglicht Denial of Service 2022-09-01T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2022-0727 Apache HTTP Server: Mehrere Schwachstellen 2021-12-19T23:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2022-0641 MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service 2022-07-11T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2022-0005 zlib: Schwachstelle ermöglicht Codeausführung 2022-04-03T22:00:00.000+00:00 2025-12-28T23:00:00.000+00:00
wid-sec-w-2025-2918 Linksys E5600 Router: Mehrere Schwachstellen ermöglichen Codeausführung 2025-12-23T23:00:00.000+00:00 2025-12-23T23:00:00.000+00:00
wid-sec-w-2025-2917 Linksys E9450-SG Router: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Ausführen von beliebigem Programmcode mit Administratorrechten 2025-12-23T23:00:00.000+00:00 2025-12-23T23:00:00.000+00:00
wid-sec-w-2025-2910 Hitachi Ops Center: Mehrere Schwachstellen 2025-12-22T23:00:00.000+00:00 2025-12-23T23:00:00.000+00:00
wid-sec-w-2025-2677 OPNsense: Schwachstelle ermöglicht Manipulation von Dateien 2025-11-25T23:00:00.000+00:00 2025-12-23T23:00:00.000+00:00
wid-sec-w-2025-0627 Vercel Next.js: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-03-24T23:00:00.000+00:00 2025-12-23T23:00:00.000+00:00
wid-sec-w-2025-2913 Mattermost: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-12-22T23:00:00.000+00:00 2025-12-22T23:00:00.000+00:00
wid-sec-w-2025-2912 D-LINK Router: Schwachstelle ermöglicht Offenlegung von Informationen 2025-12-22T23:00:00.000+00:00 2025-12-22T23:00:00.000+00:00
ID Description Published Updated
icsa-14-014-01 Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability 2014-10-17T06:00:00.000000Z 2025-06-06T18:44:45.696445Z
icsa-14-010-01 MatrikonOPC Improper Input Validation 2014-10-13T06:00:00.000000Z 2025-06-06T18:44:39.268482Z
icsa-14-008-01 Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability 2014-10-11T06:00:00.000000Z 2025-06-06T18:44:32.855266Z
icsa-14-007-01b Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B) 2014-10-10T06:00:00.000000Z 2025-06-06T18:44:19.916379Z
icsa-14-006-01 Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability 2014-10-09T06:00:00.000000Z 2025-06-06T18:44:13.497573Z
icsa-13-350-01a Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A) 2013-09-18T06:00:00.000000Z 2025-06-06T18:43:53.863083Z
icsa-13-347-01 Siemens COMOS Privilege Escalation 2013-09-15T06:00:00.000000Z 2025-06-06T18:43:47.381681Z
icsa-13-346-02 Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation 2013-09-14T06:00:00.000000Z 2025-06-06T18:43:40.964007Z
icsa-13-346-01 Cooper Power Systems Improper Input Validation Vulnerability 2013-09-14T06:00:00.000000Z 2025-06-06T18:43:28.031039Z
icsa-13-340-01 RuggedCom ROS Multiple Vulnerabilities 2013-09-08T06:00:00.000000Z 2025-06-06T18:43:15.047736Z
icsa-13-338-01 Siemens SINAMICS S/G Authentication Bypass Vulnerability 2013-09-06T06:00:00.000000Z 2025-06-06T18:43:08.603348Z
icsa-13-337-01 Elecsys Director Gateway Improper Input Validation Vulnerability 2013-09-05T06:00:00.000000Z 2025-06-06T18:43:02.174857Z
icsa-13-329-01 Triangle Research Nano-10 PLC Improper Input Validation 2013-08-28T06:00:00.000000Z 2025-06-06T18:42:55.702902Z
icsa-13-297-02 GE Proficy DNP3 Improper Input Validation 2013-07-27T06:00:00.000000Z 2025-06-06T18:42:42.774163Z
icsa-13-297-01 Catapult Software DNP3 Driver Improper Input Validation 2013-07-27T06:00:00.000000Z 2025-06-06T18:42:29.914784Z
icsa-13-295-01 WellinTech KingView ActiveX Vulnerabilities 2013-07-25T06:00:00.000000Z 2025-06-06T18:42:17.056042Z
icsa-13-282-01a Alstom e-Terracontrol DNP3 Master Improper Input Validation (Update A) 2013-07-12T06:00:00.000000Z 2025-06-06T18:42:03.985605Z
icsa-13-277-01 Philips Xper Buffer Overflow Vulnerability 2013-07-07T06:00:00.000000Z 2025-06-06T18:41:57.477223Z
icsa-13-276-01 Invensys Wonderware InTouch Improper Input Validation Vulnerability 2013-07-06T06:00:00.000000Z 2025-06-06T18:41:51.044803Z
icsa-13-274-01 Siemens SCALANCE X-200 Authentication Bypass Vulnerability 2013-07-04T06:00:00.000000Z 2025-06-06T18:41:44.564454Z
icsa-13-259-01b Emerson ROC800 Multiple Vulnerabilities (Update B) 2013-06-19T06:00:00.000000Z 2025-06-06T18:41:12.361598Z
icsa-13-259-01a Emerson ROC800 Multiple Vulnerabilities (Update A) 2013-06-19T06:00:00.000000Z 2025-06-06T18:40:40.005036Z
icsa-13-252-01 SUBNET Solutions Inc. SubSTATION Server DNP3 Outstation Improper Input Validation 2013-06-12T06:00:00.000000Z 2025-06-06T18:40:27.160098Z
icsa-13-248-01 ProSoft Technology RadioLinx ControlScape PRNG Vulnerability 2013-06-08T06:00:00.000000Z 2025-06-06T18:40:20.749066Z
icsa-13-240-01 Triangle MicroWorks Improper Input Validation 2013-05-31T06:00:00.000000Z 2025-06-06T18:40:07.718354Z
icsa-13-234-02 Top Server OPC Improper Input Validation Vulnerability 2013-05-25T06:00:00.000000Z 2025-06-06T18:40:01.237007Z
icsa-13-234-01 Schneider Electric Trio J-Series Radio Encryption 2013-05-25T06:00:00.000000Z 2025-06-06T18:39:54.739781Z
icsa-13-233-01 Siemens COMOS Privilege Escalation Vulnerability 2013-05-24T06:00:00.000000Z 2025-06-06T18:39:48.283414Z
icsa-13-231-01b Sixnet Universal Protocol Undocumented Function Codes (Update B) 2013-05-22T06:00:00.000000Z 2025-06-06T18:39:41.836043Z
icsa-13-226-01 Kepware Technologies Improper Input Validation Vulnerability 2013-05-17T06:00:00.000000Z 2025-06-06T18:39:35.172067Z
ID Description Published Updated
cisco-sa-pi-sql-inj-kgllsfw8 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager SQL Injection Vulnerability 2020-06-03T16:00:00+00:00 2022-01-06T17:41:46+00:00
cisco-sa-cms-lahe8z5v Cisco Meeting Server Call Bridge Denial of Service Vulnerability 2021-10-20T16:00:00+00:00 2021-12-22T17:29:02+00:00
cisco-sa-wifi-faf-22epcewu Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021 2021-05-11T18:00:00+00:00 2021-12-15T15:47:26+00:00
cisco-sa-cspc-ilr-8qmw8y8x Cisco Common Services Platform Collector Improper Logging Restriction Vulnerability 2021-11-17T16:00:00+00:00 2021-11-18T22:48:15+00:00
cisco-sa-cspc-xss-kjrnbm3p Cisco Common Services Platform Collector Stored Cross-Site Scripting Vulnerability 2021-11-17T16:00:00+00:00 2021-11-18T22:48:14+00:00
cisco-sa-cspc-sqli-unvptn5 Cisco Common Services Platform Collector SQL Injection Vulnerability 2021-11-17T16:00:00+00:00 2021-11-18T22:48:13+00:00
cisco-sa-ise-xss1-rgxyry2v Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities 2021-10-20T16:00:00+00:00 2021-11-12T18:15:57+00:00
cisco-sa-cps-static-key-jms92hnv Cisco Policy Suite Static SSH Keys Vulnerability 2021-11-03T16:00:00+00:00 2021-11-04T17:32:39+00:00
cisco-sa-webex-activation-3sdnfxcy Cisco Webex Meetings Email Content Injection Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-vmesh-openred-agnrmf5 Cisco Webex Video Mesh Arbitrary Site Redirection Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-videomesh-xss-qjm2bdqf Cisco Webex Video Mesh Cross-Site Scripting Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-umbrella-user-enum-s7xfjwde Cisco Umbrella Email Enumeration Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-ucm-csrf-xrtkdu3h Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-smb-switches-web-dos-xmyffkt8 Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-smb-switches-tokens-uzwpr4e5 Cisco Small Business Series Switches Session Credentials Replay Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-sbrv-cmdinjection-z5cwfdk Cisco Small Business RV Series Routers Command Injection Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-pi-epnm-xss-u2jk537j Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-esa-dos-jom9etfo Cisco Email Security Appliance Denial of Service Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-cucm-path-trav-dkcvktvo Cisco Unified Communications Products Path Traversal Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-cpar-strd-xss-a4dcvetg Cisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-catpon-multivulns-ce3dsygr Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-anyconnect-nam-priv-ycsrnugt Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability 2021-11-03T16:00:00+00:00 2021-11-03T16:00:00+00:00
cisco-sa-snort-dos-s2r7w9uu Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-29T14:07:40+00:00
cisco-sa-asaftd-ikev2-dos-g4cmrr7c Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-29T13:51:25+00:00
cisco-sa-snort-dos-rywh7ezm Multiple Cisco Products Snort Rule Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-natalg-bypass-cpkgqkng Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-ftd-tls-decrypt-dos-bmxyjm8m Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-ftd-enip-bypass-efsxd8kp Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-ftd-dos-rudsew3r Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
cisco-sa-ftd-cmdinject-fmzsln8 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities 2021-10-27T16:00:00+00:00 2021-10-27T16:00:00+00:00
ID Description Published Updated
msrc_cve-2023-53292 blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none 2025-09-02T00:00:00.000Z 2026-03-31T15:09:08.000Z
msrc_cve-2024-56722 RDMA/hns: Fix cpu stuck caused by printings during reset 2024-12-02T00:00:00.000Z 2026-03-31T15:09:06.000Z
msrc_cve-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation 2026-01-02T00:00:00.000Z 2026-03-31T15:09:02.000Z
msrc_cve-2024-57984 i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition 2025-02-02T00:00:00.000Z 2026-03-31T15:09:02.000Z
msrc_cve-2022-49803 netdevsim: Fix memory leak of nsim_dev->fa_cookie 2025-05-02T00:00:00.000Z 2026-03-31T15:08:53.000Z
msrc_cve-2022-50266 kprobes: Fix check for probe enabled in kill_kprobe() 2025-09-02T00:00:00.000Z 2026-03-31T15:08:48.000Z
msrc_cve-2024-46715 driver: iio: add missing checks on iio_info's callback access 2024-09-01T07:00:00.000Z 2026-03-31T15:08:46.000Z
msrc_cve-2024-35932 drm/vc4: don't check if plane->state->fb == state->fb 2024-05-02T07:00:00.000Z 2026-03-31T15:08:46.000Z
msrc_cve-2024-45010 mptcp: pm: only mark 'subflow' endp as available 2024-09-01T07:00:00.000Z 2026-03-31T15:08:45.000Z
msrc_cve-2024-41932 sched: fix warning in sched_setaffinity 2025-01-02T00:00:00.000Z 2026-03-31T15:08:44.000Z
msrc_cve-2024-49972 drm/amd/display: Deallocate DML memory if allocation fails 2024-10-01T07:00:00.000Z 2026-03-31T15:08:43.000Z
msrc_cve-2024-57857 RDMA/siw: Remove direct link to net_device 2025-01-02T00:00:00.000Z 2026-03-31T15:08:39.000Z
msrc_cve-2026-30922 pyasn1 Vulnerable to Denial of Service via Unbounded Recursion 2026-03-02T00:00:00.000Z 2026-03-31T15:08:36.000Z
msrc_cve-2025-39759 btrfs: qgroup: fix race between quota disable and quota rescan ioctl 2025-09-02T00:00:00.000Z 2026-03-31T15:08:35.000Z
msrc_cve-2025-37750 smb: client: fix UAF in decryption with multichannel 2025-05-02T00:00:00.000Z 2026-03-31T15:08:31.000Z
msrc_cve-2024-56588 scsi: hisi_sas: Create all dump files during debugfs initialization 2024-12-02T00:00:00.000Z 2026-03-31T15:08:27.000Z
msrc_cve-2025-38643 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() 2025-08-02T00:00:00.000Z 2026-03-31T15:08:25.000Z
msrc_cve-2022-49178 memstick/mspro_block: fix handling of read-only devices 2025-02-02T00:00:00.000Z 2026-03-31T15:08:25.000Z
msrc_cve-2024-57875 block: RCU protect disk->conv_zones_bitmap 2025-01-02T00:00:00.000Z 2026-03-31T15:08:21.000Z
msrc_cve-2024-45015 drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() 2024-09-01T07:00:00.000Z 2026-03-31T15:08:21.000Z
msrc_cve-2024-58240 tls: separate no-async decryption request handling from async 2025-08-02T00:00:00.000Z 2026-03-31T15:08:16.000Z
msrc_cve-2025-39989 x86/mce: use is_copy_from_user() to determine copy-from-user context 2025-04-02T00:00:00.000Z 2026-03-31T15:08:12.000Z
msrc_cve-2022-49651 srcu: Tighten cleanup_srcu_struct() GP checks 2025-02-02T00:00:00.000Z 2026-03-31T15:08:07.000Z
msrc_cve-2024-42107 ice: Don't process extts if PTP is disabled 2024-07-01T07:00:00.000Z 2026-03-31T15:08:05.000Z
msrc_cve-2023-53187 btrfs: fix use-after-free of new block group that became unused 2025-09-02T00:00:00.000Z 2026-03-31T15:08:03.000Z
msrc_cve-2022-49138 Bluetooth: hci_event: Ignore multiple conn complete events 2025-02-02T00:00:00.000Z 2026-03-31T15:08:01.000Z
msrc_cve-2023-52912 drm/amdgpu: Fixed bug on error when unloading amdgpu 2024-08-02T00:00:00.000Z 2026-03-31T15:07:58.000Z
msrc_cve-2025-38728 smb3: fix for slab out of bounds on mount to ksmbd 2025-09-02T00:00:00.000Z 2026-03-31T15:07:55.000Z
msrc_cve-2024-56591 Bluetooth: hci_conn: Use disable_delayed_work_sync 2024-12-02T00:00:00.000Z 2026-03-31T15:07:51.000Z
msrc_cve-2022-49766 netlink: Bounds-check struct nlmsgerr creation 2025-05-02T00:00:00.000Z 2026-03-31T15:07:49.000Z
ID Description Published Updated
opensuse-su-2025:15709-1 google-osconfig-agent-20251028.00-1.1 on GA media 2025-11-07T00:00:00Z 2025-11-07T00:00:00Z
opensuse-su-2025:15708-1 python311-Django4-4.2.26-1.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15707-1 ghostscript-10.06.0-2.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15706-1 erlang-28.1.1-1.1 on GA media 2025-11-06T00:00:00Z 2025-11-06T00:00:00Z
opensuse-su-2025:15705-1 runc-1.3.3-1.1 on GA media 2025-11-05T00:00:00Z 2025-11-05T00:00:00Z
opensuse-su-2025:15704-1 zellij-0.43.1-2.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15703-1 kubecolor-0.5.3-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15702-1 kernel-devel-6.17.7-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15701-1 java-1_8_0-openjdk-1.8.0.472-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15700-1 OpenSMTPD-7.8.0p0-1.1 on GA media 2025-11-04T00:00:00Z 2025-11-04T00:00:00Z
opensuse-su-2025:15699-1 python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media 2025-11-03T00:00:00Z 2025-11-03T00:00:00Z
opensuse-su-2025:15698-1 redis-8.2.3-1.1 on GA media 2025-11-02T00:00:00Z 2025-11-02T00:00:00Z
opensuse-su-2025:15697-1 kumactl-2.12.3-1.1 on GA media 2025-11-02T00:00:00Z 2025-11-02T00:00:00Z
opensuse-su-2025:15696-1 python311-starlette-0.49.1-1.1 on GA media 2025-11-01T00:00:00Z 2025-11-01T00:00:00Z
opensuse-su-2025:15695-1 govulncheck-vulndb-0.0.20251029T215107-1.1 on GA media 2025-11-01T00:00:00Z 2025-11-01T00:00:00Z
opensuse-su-2025:20022-1 Security update for python-Django 2025-10-31T08:58:03Z 2025-10-31T08:58:03Z
opensuse-su-2025:15694-1 java-25-openj9-25.0.1.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15693-1 java-21-openj9-21.0.9.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15692-1 java-1_8_0-openj9-1.8.0.472-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15691-1 java-17-openj9-17.0.17.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15690-1 java-11-openj9-11.0.29.0-1.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15689-1 gomuks-0.3.1-2.1 on GA media 2025-10-31T00:00:00Z 2025-10-31T00:00:00Z
opensuse-su-2025:15688-1 libmozjs-140-0-140.4.0-2.1 on GA media 2025-10-30T00:00:00Z 2025-10-30T00:00:00Z
opensuse-su-2025:15687-1 chromedriver-142.0.7444.59-2.1 on GA media 2025-10-30T00:00:00Z 2025-10-30T00:00:00Z
opensuse-su-2025:15686-1 MozillaFirefox-144.0.2-1.1 on GA media 2025-10-30T00:00:00Z 2025-10-30T00:00:00Z
opensuse-su-2025:15685-1 ImageMagick-7.1.2.8-1.1 on GA media 2025-10-30T00:00:00Z 2025-10-30T00:00:00Z
opensuse-su-2025:20021-1 Security update for MozillaThunderbird 2025-10-29T17:54:20Z 2025-10-29T17:54:20Z
opensuse-su-2025:15684-1 xwayland-24.1.8-4.1 on GA media 2025-10-29T00:00:00Z 2025-10-29T00:00:00Z
opensuse-su-2025:15683-1 xorg-x11-server-21.1.15-7.1 on GA media 2025-10-29T00:00:00Z 2025-10-29T00:00:00Z
opensuse-su-2025:15682-1 libtiff-devel-32bit-4.7.1-3.1 on GA media 2025-10-29T00:00:00Z 2025-10-29T00:00:00Z
ID Description Published Updated
rhsa-2023:5970 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (collectd-libpod-stats) security update 2023-10-20T14:51:03+00:00 2026-04-14T07:39:21+00:00
rhsa-2023:5969 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 security update 2023-10-20T14:51:03+00:00 2026-04-14T07:39:20+00:00
rhsa-2023:5967 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update 2023-10-20T14:51:43+00:00 2026-04-14T07:39:20+00:00
rhsa-2023:5965 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats, etcd) security update 2023-10-20T14:54:26+00:00 2026-04-14T07:39:19+00:00
rhsa-2023:5964 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats) security update 2023-10-20T14:54:29+00:00 2026-04-14T07:39:19+00:00
rhsa-2023:5952 Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.4.4 security update 2023-10-19T22:22:44+00:00 2026-04-14T07:39:19+00:00
rhsa-2023:5951 Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.3.8 security update 2023-10-19T22:22:22+00:00 2026-04-14T07:39:18+00:00
rhsa-2023:5950 Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.2.11 security update 2023-10-19T22:22:20+00:00 2026-04-14T07:39:18+00:00
rhsa-2023:5947 Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.0.1 security update 2023-10-26T00:47:43+00:00 2026-04-14T07:39:17+00:00
rhsa-2023:5935 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 security update 2023-10-19T16:50:07+00:00 2026-04-14T07:39:17+00:00
rhsa-2023:5933 Red Hat Security Advisory: Openshift Secondary Scheduler Operator 1.1.3 security update 2023-10-26T01:04:37+00:00 2026-04-14T07:39:16+00:00
rhsa-2023:5931 Red Hat Security Advisory: Satellite 6.13.5 Async Security Update 2023-10-19T13:15:21+00:00 2026-04-14T07:39:15+00:00
rhsa-2023:5866 Red Hat Security Advisory: grafana security update 2023-10-18T22:54:48+00:00 2026-04-14T07:39:15+00:00
rhsa-2023:5895 Red Hat Security Advisory: OpenShift Container Platform 4.12.40 security and extras update 2023-10-25T00:59:06+00:00 2026-04-14T07:39:14+00:00
rhsa-2023:5867 Red Hat Security Advisory: grafana security update 2023-10-18T22:59:29+00:00 2026-04-14T07:39:14+00:00
rhsa-2023:5864 Red Hat Security Advisory: grafana security update 2023-10-18T22:56:50+00:00 2026-04-14T07:39:14+00:00
rhsa-2023:5865 Red Hat Security Advisory: grafana security update 2023-10-18T22:55:59+00:00 2026-04-14T07:39:13+00:00
rhsa-2023:5863 Red Hat Security Advisory: grafana security update 2023-10-18T23:01:34+00:00 2026-04-14T07:39:12+00:00
rhsa-2023:5851 Red Hat Security Advisory: RHACS 4.1 enhancement and security update 2023-10-18T16:23:22+00:00 2026-04-14T07:39:12+00:00
rhsa-2023:5835 Red Hat Security Advisory: rhc-worker-script enhancement and security update 2023-10-18T07:59:41+00:00 2026-04-14T07:39:11+00:00
rhsa-2023:5810 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update 2023-10-17T18:50:43+00:00 2026-04-14T07:39:11+00:00
rhsa-2023:5809 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2.2 Product Security and Bug Fix Update 2023-10-17T18:47:29+00:00 2026-04-14T07:39:10+00:00
rhsa-2023:5805 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update 2023-10-17T17:43:43+00:00 2026-04-14T07:39:09+00:00
rhsa-2023:5738 Red Hat Security Advisory: go-toolset and golang security and bug fix update 2023-10-16T14:00:36+00:00 2026-04-14T07:39:09+00:00
rhsa-2023:5721 Red Hat Security Advisory: go-toolset:rhel8 security update 2023-10-16T12:38:36+00:00 2026-04-14T07:39:08+00:00
rhsa-2023:5697 Red Hat Security Advisory: OpenShift Container Platform 4.11.52 bug fix and security update 2023-10-18T14:47:28+00:00 2026-04-14T07:39:08+00:00
rhsa-2023:5719 Red Hat Security Advisory: go-toolset-1.19 and go-toolset-1.19-golang security update 2023-10-16T11:30:56+00:00 2026-04-14T07:39:06+00:00
rhsa-2023:5717 Red Hat Security Advisory: OpenShift Container Platform 4.11.52 packages and security update 2023-10-18T15:07:12+00:00 2026-04-14T07:39:05+00:00
rhsa-2023:5679 Red Hat Security Advisory: OpenShift Container Platform 4.12.39 packages and security update 2023-10-18T03:19:26+00:00 2026-04-14T07:39:03+00:00
rhsa-2023:5677 Red Hat Security Advisory: OpenShift Container Platform 4.12.39 bug fix and security update 2023-10-18T03:01:21+00:00 2026-04-14T07:39:01+00:00
ID Description Published Updated
suse-su-2026:20647-1 Security update for libxml2, libxslt 2026-03-04T10:51:03Z 2026-03-04T10:51:03Z
suse-su-2026:20631-1 Security update for libxml2, libxslt 2026-03-04T10:51:03Z 2026-03-04T10:51:03Z
suse-su-2026:20646-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) 2026-03-04T10:44:08Z 2026-03-04T10:44:08Z
suse-su-2026:20636-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) 2026-03-04T10:44:08Z 2026-03-04T10:44:08Z
suse-su-2026:20645-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T10:13:56Z 2026-03-04T10:13:56Z
suse-su-2026:20644-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T09:41:19Z 2026-03-04T09:41:19Z
suse-su-2026:20635-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T09:41:19Z 2026-03-04T09:41:19Z
suse-su-2026:20652-1 Security update for ca-certificates-mozilla 2026-03-04T09:36:46Z 2026-03-04T09:36:46Z
suse-su-2026:0796-1 Security update for libsoup 2026-03-04T09:33:40Z 2026-03-04T09:33:40Z
suse-su-2026:20643-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) 2026-03-04T09:20:51Z 2026-03-04T09:20:51Z
suse-su-2026:20634-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) 2026-03-04T09:20:51Z 2026-03-04T09:20:51Z
suse-su-2026:20696-1 Security update for ca-certificates-mozilla 2026-03-04T08:37:59Z 2026-03-04T08:37:59Z
suse-su-2026:20651-1 Security update for docker 2026-03-04T06:50:07Z 2026-03-04T06:50:07Z
suse-su-2026:20695-1 Security update for cockpit-machines 2026-03-04T06:24:37Z 2026-03-04T06:24:37Z
suse-su-2026:20694-1 Security update for docker 2026-03-04T06:24:37Z 2026-03-04T06:24:37Z
suse-su-2026:0792-1 Security update for libsoup 2026-03-04T01:04:14Z 2026-03-04T01:04:14Z
suse-su-2026:20629-1 Security update for go1.24-openssl 2026-03-03T17:51:15Z 2026-03-03T17:51:15Z
suse-su-2026:20642-1 Security update for expat 2026-03-03T16:04:58Z 2026-03-03T16:04:58Z
suse-su-2026:20641-1 Security update for podman 2026-03-03T16:04:58Z 2026-03-03T16:04:58Z
suse-su-2026:20627-1 Security update for expat 2026-03-03T16:04:58Z 2026-03-03T16:04:58Z
suse-su-2026:20626-1 Security update for podman 2026-03-03T16:04:58Z 2026-03-03T16:04:58Z
suse-su-2026:0790-1 Security update for go1.25-openssl 2026-03-03T15:52:22Z 2026-03-03T15:52:22Z
suse-su-2026:0789-1 Security update for go1.24-openssl 2026-03-03T15:51:34Z 2026-03-03T15:51:34Z
suse-su-2026:0788-1 Security update for libsoup 2026-03-03T15:15:16Z 2026-03-03T15:15:16Z
suse-su-2026:20650-1 Security update for cockpit-machines 2026-03-03T15:11:38Z 2026-03-03T15:11:38Z
suse-su-2026:20649-1 Security update for libsoup 2026-03-03T15:01:12Z 2026-03-03T15:01:12Z
suse-su-2026:0787-1 Security update for postgresql17 2026-03-03T14:48:34Z 2026-03-03T14:48:34Z
suse-su-2026:0786-1 Security update for postgresql14 2026-03-03T14:47:10Z 2026-03-03T14:47:10Z
suse-su-2026:0785-1 Security update for postgresql18 2026-03-03T14:01:35Z 2026-03-03T14:01:35Z
suse-su-2026:0784-1 Security update for postgresql16 2026-03-03T13:42:32Z 2026-03-03T13:42:32Z
ID Description Published Updated
alsa-2025:10140 Important: python3.12 security update 2025-07-01T00:00:00Z 2025-07-03T07:53:50Z
alsa-2025:10189 Important: python3.12 security update 2025-07-02T00:00:00Z 2025-07-02T13:57:56Z
alsa-2025:10148 Important: python3.11 security update 2025-07-01T00:00:00Z 2025-07-02T13:55:59Z
alsa-2025:6977 Moderate: python3.9 security update 2025-05-13T00:00:00Z 2025-07-02T13:51:48Z
alsa-2025:6990 Moderate: grub2 security update 2025-05-13T00:00:00Z 2025-07-02T13:49:48Z
alsa-2025:7043 Moderate: microcode_ctl security update 2025-05-13T00:00:00Z 2025-07-02T13:47:48Z
alsa-2025:7049 Moderate: python-requests security update 2025-05-13T00:00:00Z 2025-07-02T13:46:12Z
alsa-2025:7050 Moderate: rsync security update 2025-05-13T00:00:00Z 2025-07-02T13:44:15Z
alsa-2025:7064 Moderate: iptraf-ng security update 2025-05-13T00:00:00Z 2025-07-02T13:42:29Z
alsa-2025:7067 Moderate: krb5 security update 2025-05-13T00:00:00Z 2025-07-02T13:41:00Z
alsa-2025:7076 Moderate: gnutls security update 2025-05-13T00:00:00Z 2025-07-02T13:39:03Z
alsa-2025:7077 Moderate: libtasn1 security update 2025-05-13T00:00:00Z 2025-07-02T13:37:08Z
alsa-2025:7107 Moderate: python3.12 security update 2025-05-13T00:00:00Z 2025-07-02T13:35:29Z
alsa-2025:7094 Moderate: aardvark-dns security update 2025-05-13T00:00:00Z 2025-07-02T13:33:31Z
alsa-2025:7109 Moderate: python3.11 security update 2025-05-13T00:00:00Z 2025-07-02T13:32:00Z
alsa-2025:7118 Important: osbuild and osbuild-composer security update 2025-05-13T00:00:00Z 2025-07-02T13:30:04Z
alsa-2025:7138 Moderate: protobuf security update 2025-05-13T00:00:00Z 2025-07-02T13:27:31Z
alsa-2025:7147 Moderate: rpm-ostree security update 2025-05-13T00:00:00Z 2025-07-02T13:25:32Z
alsa-2025:7160 Moderate: bootc security update 2025-05-13T00:00:00Z 2025-07-02T13:23:57Z
alsa-2025:7165 Moderate: xorg-x11-server-Xwayland security update 2025-05-13T00:00:00Z 2025-07-02T13:22:24Z
alsa-2025:7163 Moderate: xorg-x11-server security update 2025-05-13T00:00:00Z 2025-07-02T13:20:45Z
alsa-2025:7178 Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update 2025-05-13T00:00:00Z 2025-07-02T13:18:46Z
alsa-2025:7201 Moderate: corosync security update 2025-05-13T00:00:00Z 2025-07-02T13:16:42Z
alsa-2025:7241 Moderate: rust-bootupd security update 2025-05-13T00:00:00Z 2025-07-02T13:14:49Z
alsa-2025:7242 Moderate: gstreamer1-plugins-good security update 2025-05-13T00:00:00Z 2025-07-02T13:13:21Z
alsa-2025:7243 Moderate: gstreamer1-plugins-base security update 2025-05-13T00:00:00Z 2025-07-02T13:11:45Z
alsa-2025:7256 Moderate: git-lfs security update 2025-05-13T00:00:00Z 2025-07-02T13:09:54Z
alsa-2025:7309 Moderate: openjpeg2 security update 2025-05-13T00:00:00Z 2025-07-02T13:08:12Z
alsa-2025:7313 Moderate: keylime-agent-rust security update 2025-05-13T00:00:00Z 2025-07-02T13:06:35Z
alsa-2025:7317 Moderate: python3.12-cryptography security update 2025-05-13T00:00:00Z 2025-07-02T13:05:05Z
ID Description Published Updated
osv-2023-1203 Global-buffer-overflow in dissect_zcl_read_attr_struct 2023-11-23T13:02:42.762508Z 2023-11-23T13:02:42.762762Z
osv-2023-1184 Global-buffer-overflow in dissect_zcl_read_attr_struct 2023-11-20T13:00:42.304213Z 2023-11-20T13:00:42.304481Z
osv-2023-1180 Heap-buffer-overflow in ih264d_sev 2023-11-19T13:01:31.125934Z 2023-11-19T13:01:31.126224Z
osv-2023-1179 Index-out-of-bounds in iaace_calc_sfb_dist 2023-11-18T13:02:51.211821Z 2023-11-18T13:02:51.213081Z
osv-2023-1177 Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes 2023-11-18T13:01:39.155430Z 2023-11-18T13:01:39.155768Z
osv-2023-1174 Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch 2023-11-17T13:00:58.541560Z 2023-11-17T13:00:58.541823Z
osv-2023-1173 Heap-buffer-overflow in fill_lines 2023-11-17T13:00:49.902117Z 2023-11-17T13:00:49.902383Z
osv-2023-1172 Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord 2023-11-16T13:03:00.976378Z 2023-11-16T13:03:00.976647Z
osv-2023-1171 Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer 2023-11-16T13:02:56.384461Z 2023-11-16T13:02:56.384702Z
osv-2023-1169 Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key 2023-11-16T13:02:37.833543Z 2023-11-16T13:02:37.833956Z
osv-2023-1163 Invalid-free in sc_file_clear_acl_entries 2023-11-15T13:00:41.204460Z 2023-11-15T13:00:41.204717Z
osv-2023-1160 Heap-buffer-overflow in IEC104Stats::processPacket 2023-11-14T13:03:05.864884Z 2023-11-14T13:03:05.865182Z
osv-2023-1154 Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry 2023-11-13T13:03:20.948897Z 2023-11-13T13:03:20.949199Z
osv-2023-1153 Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite 2023-11-13T13:03:01.636510Z 2023-11-13T13:03:01.636801Z
osv-2023-1152 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2023-11-13T13:02:00.256484Z 2023-11-13T13:02:00.256878Z
osv-2023-1149 Heap-buffer-overflow in bit_read_fixed 2023-11-13T13:01:37.087461Z 2023-11-13T13:01:37.087873Z
osv-2023-1146 Negative-size-param in pcpp::RawPacket::insertData 2023-11-13T13:00:39.716145Z 2023-11-13T13:00:39.716577Z
osv-2023-1145 Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields 2023-11-13T13:00:35.546722Z 2023-11-13T13:00:35.547021Z
osv-2023-1136 Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord 2023-11-11T13:00:42.865311Z 2023-11-11T13:00:42.865622Z
osv-2023-1122 Stack-buffer-overflow in dxf_header_read 2023-11-07T13:01:32.550733Z 2023-11-10T14:16:56.272618Z
osv-2023-1126 Heap-buffer-overflow in iasecc_parse_acls 2023-11-08T13:03:19.402769Z 2023-11-08T13:03:19.403118Z
osv-2023-1124 UNKNOWN READ in cmsIT8GetDataRowColDbl 2023-11-08T13:00:59.655386Z 2023-11-08T13:00:59.655691Z
osv-2023-1119 Segv on unknown address in FunctionCompiler::compileReturn 2023-11-06T13:02:57.494372Z 2023-11-06T13:02:57.494689Z
osv-2023-1117 Heap-buffer-overflow in cmsMLUsetWide 2023-11-05T13:02:43.507558Z 2023-11-05T13:02:43.507897Z
osv-2023-1115 Use-of-uninitialized-value in fp_uninit 2023-11-05T13:01:21.842426Z 2023-11-05T13:01:21.842714Z
osv-2023-1075 Segv on unknown address in cleanup_live_vars 2023-10-27T13:01:43.631205Z 2023-11-04T18:09:50.793423Z
osv-2023-1110 Stack-buffer-overflow in dynapi_set_helper 2023-11-04T13:01:06.700754Z 2023-11-04T13:01:06.701003Z
osv-2023-507 Heap-buffer-overflow in IEC104Stats::processPacket 2023-06-24T14:00:16.342283Z 2023-11-03T14:22:10.838616Z
osv-2023-1104 Heap-buffer-overflow in bit_read_RC 2023-11-03T13:00:39.940872Z 2023-11-03T13:00:39.941107Z
osv-2023-1103 Heap-buffer-overflow in OpenType::be_u32 2023-11-03T13:00:16.931853Z 2023-11-03T13:00:16.932069Z
ID Description Published Updated
rustsec-2023-0004 bzip2 Denial of Service (DoS) 2023-01-09T12:00:00Z 2023-02-04T13:29:07Z
rustsec-2022-0077 `claim` is Unmaintained 2022-12-04T12:00:00Z 2023-02-04T10:58:43Z
rustsec-2022-0087 Slack Webhooks secrets leak in debug logs 2022-10-10T12:00:00Z 2023-02-02T11:45:24Z
rustsec-2022-0086 Slack OAuth Secrets leak in debug logs 2022-07-22T12:00:00Z 2023-02-02T11:43:48Z
rustsec-2022-0085 matrix-sdk Impersonation of room keys 2022-09-29T12:00:00Z 2023-02-02T11:35:31Z
rustsec-2022-0084 libp2p Lack of resource management DoS 2022-07-12T12:00:00Z 2023-02-02T11:22:51Z
rustsec-2022-0083 evm incorrect state transition 2022-10-25T12:00:00Z 2023-02-02T11:20:42Z
rustsec-2020-0166 personnummer Input validation error 2020-09-04T12:00:00Z 2023-02-02T10:57:52Z
rustsec-2023-0003 git2 does not verify SSH keys by default 2023-01-20T12:00:00Z 2023-01-20T23:06:55Z
rustsec-2022-0080 parity-util-mem Unmaintained 2022-11-30T12:00:00Z 2023-01-16T09:26:23Z
rustsec-2022-0075 Bug in pooling instance allocator 2022-11-10T12:00:00Z 2023-01-14T00:56:30Z
rustsec-2022-0073 crate has been renamed to `embedded-alloc` 2022-12-21T12:00:00Z 2022-12-23T16:46:57Z
rustsec-2022-0071 Rusoto is unmaintained 2022-04-24T12:00:00Z 2022-12-18T12:08:00Z
rustsec-2022-0068 out-of-bounds read possible when setting list-of-pointers 2022-11-30T12:00:00Z 2022-11-30T22:16:39Z
rustsec-2019-0024 Test advisory with associated example crate 2019-10-08T12:00:00Z 2022-11-05T17:45:24Z
rustsec-2022-0066 Denial of Service from unchecked request length 2022-10-30T12:00:00Z 2022-11-02T22:38:38Z
rustsec-2022-0061 Crate `parity-wasm` deprecated by the author 2022-10-01T12:00:00Z 2022-10-23T11:05:06Z
rustsec-2022-0060 orbtk is Unmaintained 2022-10-13T12:00:00Z 2022-10-19T01:14:12Z
rustsec-2022-0058 Library exclusively intended to inject UB into safe Rust. 2022-09-28T12:00:00Z 2022-10-11T10:32:22Z
rustsec-2022-0056 clipboard is Unmaintained 2022-06-25T12:00:00Z 2022-09-24T11:52:27Z
rustsec-2021-0143 kamadak-exif DoS with untrusted PNG data 2021-01-04T12:00:00Z 2022-09-08T10:52:02Z
rustsec-2021-0142 dotenv is Unmaintained 2021-12-24T12:00:00Z 2022-08-30T19:40:13Z
rustsec-2021-0141 dotenv is Unmaintained 2021-12-24T12:00:00Z 2022-08-30T19:40:13Z
rustsec-2020-0077 memmap is unmaintained 2020-12-02T12:00:00Z 2022-08-25T07:09:30Z
rustsec-2022-0050 Interledger is Unmaintained 2022-08-04T12:00:00Z 2022-08-19T05:34:11Z
rustsec-2020-0055 Please see RUSTSEC-2018-0020 2020-10-21T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2020-0054 directories is unmaintained, use directories-next instead 2020-10-16T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2020-0053 dirs is unmaintained, use dirs-next instead 2020-10-16T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2019-0031 spin is no longer actively maintained 2019-11-21T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2021-0137 sodiumoxide is deprecated 2021-10-22T12:00:00Z 2022-08-10T04:01:59Z
ID Description Published Updated
bit-gitlab-2025-12716 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-12-18T12:04:33.134Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-12562 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-18T12:04:25.675Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-12029 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-12-18T12:04:20.332Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-11984 Authentication Bypass Using an Alternate Path or Channel in GitLab 2025-12-18T12:04:14.698Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-11247 Authorization Bypass Through User-Controlled Key in GitLab 2025-12-18T12:03:59.823Z 2025-12-18T12:08:20.703Z
bit-elk-2025-37732 Kibana Cross-site Scripting via the Integration Package Upload Functionality 2025-12-18T11:37:43.350Z 2025-12-18T12:08:20.703Z
bit-vault-2025-6013 Vault LDAP MFA Enforcement Bypass When Using Username As Alias 2025-08-08T06:04:14.175Z 2025-12-16T15:14:22.118Z
bit-airflow-2025-66388 Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI 2025-12-16T14:37:51.384Z 2025-12-16T15:14:22.118Z
bit-mongodb-2025-12657 Malformed KMIP response may result in access violation 2025-12-13T11:42:23.275Z 2025-12-13T12:05:53.698Z
bit-django-2025-13372 Potential SQL injection in FilteredRelation column aliases on PostgreSQL 2025-12-13T11:36:31.883Z 2025-12-13T12:05:53.698Z
bit-mongodb-2025-14345 Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server 2025-12-12T17:42:48.437Z 2025-12-12T18:06:16.411Z
bit-jenkins-2025-67639 2025-12-12T11:23:52.749Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67638 2025-12-12T11:23:47.516Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67637 2025-12-12T11:23:42.761Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67636 2025-12-12T11:23:36.617Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67635 2025-12-12T11:23:31.286Z 2025-12-12T11:51:34.315Z
bit-gitlab-2025-7449 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-02T12:05:42.978Z 2025-12-11T12:06:55.559Z
bit-gitlab-2025-6195 Direct Request ('Forced Browsing') in GitLab 2025-12-02T12:05:25.518Z 2025-12-11T12:06:55.559Z
bit-gitlab-2025-12653 Authentication Bypass by Spoofing in GitLab 2025-12-02T12:03:41.060Z 2025-12-11T12:06:55.559Z
bit-gitlab-2025-12571 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-02T12:03:39.208Z 2025-12-11T12:06:55.559Z
bit-gitlab-2024-9183 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab 2025-12-09T12:02:49.276Z 2025-12-11T12:06:55.559Z
bit-django-2025-64460 Potential denial-of-service vulnerability in XML serializer text extraction 2025-12-11T11:37:12.400Z 2025-12-11T12:06:55.559Z
bit-golang-2025-61725 Excessive CPU consumption in ParseAddress in net/mail 2025-11-06T12:58:41.872Z 2025-12-10T12:06:24.101Z
bit-pgbouncer-2025-2291 PgBouncer default auth_query does not take Postgres password expiry into account 2025-04-18T19:19:16.416Z 2025-12-09T12:08:00.393Z
bit-envoy-2025-66220 Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte 2025-12-06T11:38:21.122Z 2025-12-09T12:08:00.393Z
bit-envoy-2025-64763 Envoy forwards early CONNECT data in TCP proxy mode 2025-12-06T11:38:19.488Z 2025-12-09T12:08:00.393Z
bit-envoy-2025-64527 Envoy crashes when JWT authentication is configured with the remote JWKS fetching 2025-12-06T11:38:17.923Z 2025-12-09T12:08:00.393Z
bit-apache-2025-66200 Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo 2025-12-09T11:38:20.150Z 2025-12-09T12:08:00.393Z
bit-apache-2025-65082 Apache HTTP Server: CGI environment variable override 2025-12-09T11:38:18.501Z 2025-12-09T12:08:00.393Z
bit-apache-2025-59775 Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF 2025-12-09T11:38:16.754Z 2025-12-09T12:08:00.393Z
ID Description Updated
ID Description Published Updated
certfr-2025-avi-0716 Vulnérabilité dans les produits Apple 2025-08-21T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0715 Multiples vulnérabilités dans les produits Liferay 2025-08-21T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0614 Multiples vulnérabilités dans les produits Mattermost 2025-07-23T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0714 Multiples vulnérabilités dans les produits Mozilla 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0713 Multiples vulnérabilités dans les produits Liferay 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0712 Vulnérabilité dans Apereo CAS 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0711 Vulnérabilité dans Google Chrome 2025-08-20T00:00:00.000000 2025-08-20T00:00:00.000000
certfr-2025-avi-0710 Multiples vulnérabilités dans les produits F5 2025-08-19T00:00:00.000000 2025-08-19T00:00:00.000000
certfr-2025-avi-0709 Multiples vulnérabilités dans les produits Liferay 2025-08-19T00:00:00.000000 2025-08-19T00:00:00.000000
certfr-2025-avi-0525 Multiples vulnérabilités dans Mattermost Server 2025-06-19T00:00:00.000000 2025-08-19T00:00:00.000000
certfr-2025-avi-0453 Vulnérabilité dans Mattermost Server 2025-05-27T00:00:00.000000 2025-08-19T00:00:00.000000
certfr-2025-avi-0441 Vulnérabilité dans Mattermost Server 2025-05-22T00:00:00.000000 2025-08-19T00:00:00.000000
certfr-2025-avi-0355 Multiples vulnérabilités dans Mattermost Server 2025-04-30T00:00:00.000000 2025-08-19T00:00:00.000000
certfr-2025-avi-0708 Multiples vulnérabilités dans les produits Cisco 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0706 Multiples vulnérabilités dans Matrix 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0705 Multiples vulnérabilités dans Microsoft Edge 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0704 Vulnérabilité dans les produits Siemens 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0703 Vulnérabilité dans Synology BeeDrive 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0702 Multiples vulnérabilités dans PostgreSQL 2025-08-18T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-avi-0701 Vulnérabilité dans IBM WebSphere 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0700 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0699 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0698 Multiples vulnérabilités dans le noyau Linux de Debian 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0697 Multiples vulnérabilités dans le noyau Linux de Debian LTS 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0696 Vulnérabilité dans Spring Framework 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0695 Multiples vulnérabilités dans les produits Palo Alto Networks 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0694 Vulnérabilité dans Apache Tomcat 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0693 Multiples vulnérabilités dans VMware Tanzu 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0692 Multiples vulnérabilités dans Ruby on Rails 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
certfr-2025-avi-0691 Vulnérabilité dans Nginx 2025-08-14T00:00:00.000000 2025-08-14T00:00:00.000000
ID Description Published Updated
jvndb-2021-000078 The installers of multiple Sony products may insecurely load Dynamic Link Libraries 2021-08-24T14:30+09:00 2021-08-24T14:30+09:00
jvndb-2021-002282 Multiple vulnerabilities in Navigate CMS 2021-08-20T14:25+09:00 2021-08-20T14:25+09:00
jvndb-2021-002279 Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises 2021-08-19T15:01+09:00 2021-08-19T15:01+09:00
jvndb-2021-000077 Huawei EchoLife HG8045Q vulnerable to OS command injection 2021-08-17T14:24+09:00 2021-08-17T14:24+09:00
jvndb-2021-002273 Multiple vulnerabilities in D-Link router DSL-2750U 2021-08-17T14:09+09:00 2021-08-17T14:09+09:00
jvndb-2021-000076 Plone vulnerable to open redirect 2021-08-12T14:05+09:00 2021-08-12T14:05+09:00
jvndb-2021-000075 WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting 2021-08-10T14:40+09:00 2021-08-10T14:40+09:00
jvndb-2021-002077 Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises 2021-08-04T11:15+09:00 2021-08-04T11:15+09:00
jvndb-2020-000071 Cybozu Garoon vulnerable to improper input validation 2020-11-05T11:43+09:00 2021-08-02T11:08+09:00
jvndb-2020-000087 Management software for NEC Storage disk array system vulnerable to improper server certificate verification 2020-12-18T17:00+09:00 2021-07-21T16:21+09:00
jvndb-2021-000072 Minecraft Java Edition vulnerable to directory traversal 2021-07-21T15:12+09:00 2021-07-21T15:12+09:00
jvndb-2021-002005 Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting 2021-07-19T16:53+09:00 2021-07-19T16:53+09:00
jvndb-2021-000069 Optical BB unit E-WMTA2.3 vulnerable to cross-site request forgery 2021-07-14T17:13+09:00 2021-07-14T17:13+09:00
jvndb-2021-001977 Multiple vulnerabilities in Elecom routers 2021-07-07T14:03+09:00 2021-07-12T16:04+09:00
jvndb-2021-000067 voidtools "Everything" vulnerable to HTTP header injection 2021-07-09T14:40+09:00 2021-07-09T14:40+09:00
jvndb-2021-000065 WordPress Plugin "WordPress Meta Data Filter & Taxonomies Filter" vulnerable to cross-site request forgery 2021-07-08T14:29+09:00 2021-07-08T14:29+09:00
jvndb-2021-000066 WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery 2021-07-08T13:45+09:00 2021-07-08T13:45+09:00
jvndb-2021-000064 GU App for Android fails to restrict access permissions 2021-07-07T13:16+09:00 2021-07-07T13:16+09:00
jvndb-2021-001968 Multiple vulnerabilities in Trend Micro Password Manager 2021-07-06T16:08+09:00 2021-07-06T16:08+09:00
jvndb-2021-000063 WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery 2021-07-06T14:50+09:00 2021-07-06T14:50+09:00
jvndb-2021-000062 WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery 2021-07-06T14:11+09:00 2021-07-06T14:11+09:00
jvndb-2021-000061 A-Stage SCT-40CM01SR and AT-40CM01SR vulnerable to authentication bypass 2021-07-05T14:28+09:00 2021-07-05T14:28+09:00
jvndb-2021-000059 EC-CUBE fails to restrict access permissions 2021-07-01T15:49+09:00 2021-07-01T15:49+09:00
jvndb-2007-002102 boastMachine vulnerable to cross-site scripting 2021-06-30T14:32+09:00 2021-06-30T14:32+09:00
jvndb-2021-000058 IkaIka RSS Reader vulnerable to cross-site scripting 2021-06-30T14:21+09:00 2021-06-30T14:21+09:00
jvndb-2021-000056 WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting 2021-06-30T11:36+09:00 2021-06-30T11:36+09:00
jvndb-2021-000057 Multiple cross-site scripting vulnerabilities in EC-CUBE 2021-06-23T15:15+09:00 2021-06-23T15:15+09:00
jvndb-2021-000055 WordPress plugin "Fudousan plugin" series vulnerable to cross-site scripting 2021-06-22T15:06+09:00 2021-06-22T15:06+09:00
jvndb-2021-000054 Inkdrop vulnerable to OS command injection 2021-06-22T15:06+09:00 2021-06-22T15:06+09:00
jvndb-2021-000053 Hitachi Virtual File Platform vulnerable to OS command injection 2021-06-18T15:45+09:00 2021-06-18T15:45+09:00
ID Description Published Updated
cnvd-2026-12556 Microsoft Hyper-V缓冲区溢出漏洞 2026-03-02 2026-03-04
cnvd-2026-12555 Microsoft Hyper-V访问控制错误漏洞 2026-03-02 2026-03-04
cnvd-2026-12554 Microsoft GitHub Copilot for JetBrains命令注入漏洞 2026-03-02 2026-03-04
cnvd-2026-12553 Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12553) 2026-03-02 2026-03-04
cnvd-2026-12552 Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12552) 2026-03-02 2026-03-04
cnvd-2026-12374 NVIDIA NVTabular反序列化漏洞 2025-12-15 2026-03-03
cnvd-2026-12373 NVIDIA Merlin Transformers4Rec反序列化漏洞 2025-12-15 2026-03-03
cnvd-2026-12372 NVIDIA Nemo Framework代码问题漏洞(CNVD-2026-1237200) 2025-12-25 2026-03-03
cnvd-2026-12371 NVIDIA Nemo Framework代码问题漏洞 2025-12-25 2026-03-03
cnvd-2026-12370 NVIDIA Isaac Launchable信任管理问题漏洞 2025-12-29 2026-03-03
cnvd-2026-12369 NVIDIA Isaac Launchable任意代码执行漏洞 2025-12-29 2026-03-03
cnvd-2026-12368 NVIDIA NSIGHT Graphics操作系统命令注入漏洞 2026-01-23 2026-03-03
cnvd-2026-12367 NVIDIA Merlin Transformers4Rec代码注入漏洞 2026-01-26 2026-03-03
cnvd-2026-12366 NVIDIA CUDA toolkit代码问题漏洞 2026-01-30 2026-03-03
cnvd-2026-12365 NVIDIA CUDA toolkit gfx_hotspot模块命令注入漏洞 2026-01-30 2026-03-03
cnvd-2026-12363 WordPress FAPI Member plugin授权绕过漏洞 2025-12-22 2026-03-02
cnvd-2026-12362 Scholars Tracking System delete_user.php文件SQL注入漏洞 2025-12-25 2026-03-02
cnvd-2026-12361 WordPress Vimeotheque跨站请求伪造漏洞 2025-12-26 2026-03-02
cnvd-2026-12360 WordPress Fast User Switching跨站请求伪造漏洞 2025-12-26 2026-03-02
cnvd-2026-12359 WordPress Funnelforms Free缺少授权漏洞 2025-12-26 2026-03-02
cnvd-2026-12357 WordPress My auctions allegro跨站脚本漏洞 2025-12-26 2026-03-02
cnvd-2026-12356 WordPress Category Icon跨站脚本漏洞 2025-12-26 2026-03-02
cnvd-2026-12355 WordPress Spiffy Calendar缺少授权漏洞 2025-12-26 2026-03-02
cnvd-2026-12354 WordPress WpStream缺少授权漏洞 2025-12-26 2026-03-02
cnvd-2026-12353 WordPress WC Builder跨站脚本漏洞 2025-12-30 2026-03-02
cnvd-2026-12205 用友网络科技股份有限公司U8 Cloud存在远程代码执行漏洞 2025-11-04 2026-02-28
cnvd-2026-12149 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞(CNVD-2026-12149) 2025-11-26 2026-02-28
cnvd-2026-12146 深圳极速创想科技有限公司FastAdmin任意文件读取漏洞 2025-11-27 2026-02-28
cnvd-2026-11810 Microsoft Windows Routing and Remote Access Service远程代码执行漏洞(CNVD-2026-11810) 2025-08-15 2026-02-28
cnvd-2026-11809 Microsoft Windows Routing and Remote Access Service远程代码执行漏洞 2025-12-12 2026-02-28
ID Description Published Updated
bdu:2025-04573 Уязвимость библиотеки для анализа XML-файлов libexpat, связанная с переполнением буфера в… 15.04.2025 16.02.2026
bdu:2025-04572 Уязвимость функций urllib.parse.urlsplit() и urlparse() интерпретатора языка программиров… 15.04.2025 16.02.2026
bdu:2025-04488 Уязвимость компонента ftrace функции function_stat_show ядра операционной системы Linux, … 14.04.2025 16.02.2026
bdu:2025-04477 Уязвимость компонента hugetlb функции try_get_folio() ядра операционной системы Linux, по… 14.04.2025 16.02.2026
bdu:2025-04396 Уязвимость функции get_firmware_info_v3_2() модуля drivers/gpu/drm/amd/display/dc/bios/bi… 14.04.2025 16.02.2026
bdu:2025-04386 Уязвимость компонента tracing функции event_trigger_write ядра операционной системы Linux… 14.04.2025 16.02.2026
bdu:2025-04089 Уязвимость функции slim_do_transfer() драйвера (drivers/slimbus/messaging.c) ядра операци… 09.04.2025 16.02.2026
bdu:2025-04088 Уязвимость функции usbhsc_notify_hotplug() драйвера USB (drivers/usb/renesas_usbhs/common… 09.04.2025 16.02.2026
bdu:2025-04087 Уязвимость драйвера USB (drivers/usb/typec/ucsi/ucsi.c) ядра операционных систем Linux, п… 09.04.2025 16.02.2026
bdu:2025-03890 Уязвимость функции usb_find_common_endpoints() драйвера USB (drivers/usb/atm/cxacru.c) яд… 08.04.2025 16.02.2026
bdu:2025-03888 Уязвимость функции amd_get_mmconfig_range() модуля arch/x86/kernel/amd_nb.c ядра операцио… 09.06.2025 16.02.2026
bdu:2025-03866 Уязвимость функции lzma_stream_decoder_mt() библиотеки liblzma пакета для сжатия данных X… 09.06.2025 16.02.2026
bdu:2025-03840 Уязвимость файла fs/hfs.c компонента hfs загрузчика операционных систем Grub2, позволяюща… 07.04.2025 16.02.2026
bdu:2025-03816 Уязвимость функции !defined() (kernel/sched/core.c) ядра операционной системы Linux, позв… 07.04.2025 16.02.2026
bdu:2025-03812 Уязвимость функции npcm_i2c_probe_bus() (drivers/i2c/busses/i2c-npcm7xx.c) ядра операцион… 07.04.2025 16.02.2026
bdu:2025-03811 Уязвимость функции optee_supp_thrd_req() (drivers/tee/optee/supp.c) ядра операционной сис… 07.04.2025 16.02.2026
bdu:2025-03809 Уязвимость функции mptcp_nl_remove_subflow_and_signal_addr() (net/mptcp/pm_netlink.c) ядр… 07.04.2025 16.02.2026
bdu:2025-03742 Уязвимость функции genelink_bind() (drivers/net/usb/gl620a.c) ядра операционной системы L… 03.04.2025 16.02.2026
bdu:2025-03711 Уязвимость функции txt_get_unicode() файла devices/vector/doc_common.c набора программног… 02.04.2025 16.02.2026
bdu:2025-03710 Уязвимость файлов base/write_t1.c и psi/zfapi.c компонента DollarBlend набора программног… 02.04.2025 16.02.2026
bdu:2025-03707 Уязвимость функции bj10v_print_page() файла contrib/japanese/gdev10v.c компонента BJ10V D… 02.04.2025 16.02.2026
bdu:2025-03706 Уязвимость файла psi/zbfont.c набора программного обеспечения для обработки, преобразован… 02.04.2025 16.02.2026
bdu:2025-03705 Уязвимость файла contrib/japanese/gdevnpdl.c компонента NPDL Device набора программного … 02.04.2025 16.02.2026
bdu:2025-03704 Уязвимость функции Type 4 файла pdf/pdf_func.c набора программного обеспечения для обрабо… 02.04.2025 16.02.2026
bdu:2025-03683 Уязвимость функции uprobe_write_opcode() модуля kernel/events/uprobes.c ядра операционных… 02.04.2025 16.02.2026
bdu:2025-03641 Уязвимость функции xsltGetInheritedNsList библиотеки libxslt, позволяющая нарушителю оказ… 01.04.2025 16.02.2026
bdu:2025-03640 Уязвимость файла numbers.ct библиотеки libxslt, позволяющая нарушителю выполнить произвол… 01.04.2025 16.02.2026
bdu:2025-03534 Уязвимость почтового сервера Exim, связанная с использованием памяти после ее освобождени… 23.04.2025 16.02.2026
bdu:2025-03465 Уязвимость библиотеки для кодирования и декодирования изображений OpenJPEG, связанная с п… 27.03.2025 16.02.2026
bdu:2025-03459 Уязвимость компонента Hash Handler пакета 389-ds-base, позволяющая нарушителю вызвать отк… 27.03.2025 16.02.2026
ID Description Updated
var-200809-0185 Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user ma… 2026-03-09T22:19:43.940000Z
var-201303-0312 libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.… 2026-03-09T22:19:33.363000Z
var-202106-0345 Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allo… 2026-03-09T22:19:33.160000Z
var-201903-0440 A type confusion issue was addressed with improved memory handling. This issue is fixed i… 2026-03-09T22:19:26.852000Z
var-200703-0030 Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 all… 2026-03-09T22:19:26.790000Z
var-202301-0598 Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider… 2026-03-09T22:19:25.332000Z
var-201210-0063 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T22:18:53.760000Z
var-201904-1409 A use after free issue was addressed with improved memory management. This issue affected… 2026-03-09T22:18:47.082000Z
var-202105-1432 The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired… 2026-03-09T22:18:40.984000Z
var-200609-0312 Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to … 2026-03-09T22:18:39.330000Z
var-202110-1684 This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Bi… 2026-03-09T22:18:38.176000Z
var-201904-1407 A use after free issue was addressed with improved memory management. This issue affected… 2026-03-09T22:18:36.782000Z
var-201304-0352 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T22:18:35.136000Z
var-202103-1001 An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G… 2026-03-09T22:18:34.688000Z
var-201111-0207 The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64… 2026-03-09T22:18:26.875000Z
var-200911-0398 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Int… 2026-03-09T22:17:46.450000Z
var-202206-1157 Incomplete cleanup in specific special register write operations for some Intel(R) Proces… 2026-03-09T22:17:15.468000Z
var-201012-0193 OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_… 2026-03-09T22:17:13.959000Z
var-200102-0001 Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source co… 2026-03-09T22:17:13.635000Z
var-201601-0495 Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x bef… 2026-03-09T22:17:04.787000Z
var-201205-0393 Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow re… 2026-03-09T22:17:04.698000Z
var-202106-1921 A security issue in nginx resolver was identified, which might allow an attacker who is a… 2026-03-09T22:17:03.931000Z
var-200511-0062 The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe so… 2026-03-09T22:16:18.317000Z
var-201912-0496 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2026-03-09T22:16:17.653000Z
var-201504-0361 The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x befor… 2026-03-09T22:16:16.027000Z
var-201302-0247 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T22:16:10.032000Z
var-201904-1408 A memory corruption issue was addressed with improved state management. This issue affect… 2026-03-09T22:16:09.594000Z
var-201912-0480 A type confusion issue was addressed with improved memory handling. This issue is fixed i… 2026-03-09T22:16:09.219000Z
var-200810-0004 The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1,… 2026-03-09T22:15:21.078000Z
var-201806-1462 An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… 2026-03-09T22:15:20.611000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated