Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2000-0202
N/A
Microsoft SQL Server 7.0 and Microsoft Data Engin… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.147Z
CVE-2000-0207
N/A
SGI InfoSearch CGI program infosrch.cgi allows re… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.274Z
CVE-2000-0208
N/A
The htdig (ht://Dig) CGI program htsearch allows … n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.071Z
CVE-2000-0209
N/A
Buffer overflow in Lynx 2.x allows remote attacke… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.164Z
CVE-2000-0210
N/A
The lit program in Sun Flex License Manager (Flex… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.211Z
CVE-2000-0211
N/A
The Windows Media server allows remote attackers … n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.110Z
CVE-2000-0212
N/A
InterAccess TelnetD Server 4.0 allows remote atta… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.165Z
CVE-2000-0215
N/A
Vulnerability in SCO cu program in UnixWare 7.x a… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.168Z
CVE-2000-0217
N/A
The default configuration of SSH allows X forward… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.163Z
CVE-2000-0218
N/A
Buffer overflow in Linux mount and umount allows … n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.208Z
CVE-2000-0221
N/A
The Nautica Marlin bridge allows remote attackers… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.074Z
CVE-2000-0222
N/A
The installation for Windows 2000 does not activa… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.210Z
CVE-2000-0224
N/A
ARCserve agent in SCO UnixWare 7.x allows local a… n/a
n/a
2000-04-10T04:00:00.000Z 2024-08-08T05:05:54.219Z
CVE-2000-0227
N/A
The Linux 2.2.x kernel does not restrict the numb… n/a
n/a
2000-04-12T04:00:00.000Z 2024-08-08T05:05:54.166Z
CVE-2000-0239
N/A
Buffer overflow in the MERCUR WebView WebMail ser… n/a
n/a
2000-04-12T04:00:00.000Z 2024-08-08T05:14:20.443Z
CVE-2000-0241
N/A
vqSoft vqServer stores sensitive information such… n/a
n/a
2000-04-12T04:00:00.000Z 2024-08-08T05:14:20.691Z
CVE-2000-0242
N/A
WindMail allows remote attackers to read arbitrar… n/a
n/a
2000-04-12T04:00:00.000Z 2024-08-08T05:14:20.516Z
CVE-2000-0244
N/A
The Citrix ICA (Independent Computing Architectur… n/a
n/a
2000-04-12T04:00:00.000Z 2024-08-08T05:14:20.552Z
CVE-1999-0676
N/A
sdtcm_convert in Solaris 2.6 allows a local user … n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:37.049Z
CVE-1999-0711
N/A
The oratclsh interpreter in Oracle 8.x Intelligen… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:37.597Z
CVE-1999-0720
N/A
The pt_chown command in Linux allows local users … n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:37.948Z
CVE-1999-0747
N/A
Denial of service in BSDi Symmetric Multiprocessi… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:38.145Z
CVE-1999-0773
N/A
Buffer overflow in Solaris lpset program allows l… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:37.735Z
CVE-1999-0790
N/A
A remote attacker can read information from a Net… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:38.097Z
CVE-1999-0799
N/A
Buffer overflow in bootpd 2.4.3 and earlier via a… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:37.980Z
CVE-1999-0813
N/A
Cfingerd with ALLOW_EXECUTION enabled does not pr… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:38.080Z
CVE-1999-0888
N/A
dbsnmp in Oracle Intelligent Agent allows local u… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:55:29.139Z
CVE-1999-0903
N/A
genfilt in the AIX Packet Filtering Module does n… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:55:28.915Z
CVE-1999-0906
N/A
Buffer overflow in sccw allows local users to gai… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:55:29.323Z
CVE-1999-0958
N/A
sudo 1.5.x allows local users to execute arbitrar… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:55:29.316Z
ID CVSS Description Vendor Product Published Updated
CVE-1999-0475
N/A
A race condition in how procmail handles .procmai… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:45.003Z
CVE-1999-1245
N/A
vacm ucd-snmp SNMP server, version 3.52, does not… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:02:53.918Z
CVE-1999-0472
N/A
The SNMP default community name "public" is not p… n/a
n/a
1999-09-29T04:00:00.000Z 2025-03-17T15:03:17.703Z
CVE-1999-0473
N/A
The rsync command before rsync 2.3.1 may inadvert… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:44.981Z
CVE-1999-1196
N/A
Hummingbird Exceed X version 5 allows remote atta… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:02:53.885Z
CVE-1999-0287
N/A
Vulnerability in the Wguest CGI program. n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:34:51.837Z
CVE-1999-0468
8.2 (3.1)
Internet Explorer 5.0 allows a remote server to r… n/a
n/a
1999-09-29T04:00:00.000Z 2025-08-25T18:51:48.046Z
CVE-1999-0470
N/A
A weak encryption algorithm is used for passwords… n/a
n/a
2000-01-04T05:00:00.000Z 2024-08-01T16:41:44.977Z
CVE-1999-0471
N/A
The remote proxy server in Winroute allows a remo… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:45.031Z
CVE-1999-0801
N/A
BMC Patrol allows remote attackers to gain access… n/a
n/a
2002-03-09T05:00:00.000Z 2024-08-01T16:48:38.097Z
CVE-1999-1323
N/A
Norton AntiVirus for Internet Email Gateways (NAV… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:11:02.692Z
CVE-1999-0444
N/A
Remote attackers can perform a denial of service … n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:41:44.701Z
CVE-1999-0446
N/A
Local users can perform a denial of service in Ne… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:44.840Z
CVE-1999-1369
N/A
Real Media RealServer (rmserver) 6.0.3.353 stores… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:11:02.913Z
CVE-1999-1244
N/A
IPFilter 3.2.3 through 3.2.10 allows local users … n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:02:53.813Z
CVE-1999-0684
N/A
Denial of service in Sendmail 8.8.6 in HPUX. n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.040Z
CVE-1999-0491
N/A
The prompt parsing in bash allows a local user to… n/a
n/a
2000-06-02T04:00:00.000Z 2024-08-01T16:41:45.463Z
CVE-1999-0604
N/A
An incorrect configuration of the WebStore 1.0 sh… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:41:45.678Z
CVE-1999-0607
N/A
quikstore.cgi in QuikStore shopping cart stores q… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:41:45.677Z
CVE-1999-0466
N/A
The SVR4 /dev/wabi special device file in NetBSD … n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:45.248Z
CVE-1999-0488
N/A
Internet Explorer 4.0 and 5.0 allows a remote att… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:41:45.487Z
CVE-1999-0490
N/A
MSHTML.DLL in Internet Explorer 5.0 allows a remo… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:41:45.320Z
CVE-1999-0492
N/A
The ffingerd 1.19 allows remote attackers to iden… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:41:45.483Z
CVE-1999-0712
N/A
A vulnerability in Caldera Open Administration Sy… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.560Z
CVE-1999-0711
N/A
The oratclsh interpreter in Oracle 8.x Intelligen… n/a
n/a
2000-04-18T04:00:00.000Z 2024-08-01T16:48:37.597Z
CVE-1999-0194
N/A
Denial of service in in.comsat allows attackers t… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:27:57.881Z
CVE-1999-0487
N/A
The DHTML Edit ActiveX control in Internet Explor… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:45.569Z
CVE-1999-0763
N/A
NetBSD on a multi-homed host allows ARP packets o… n/a
n/a
2000-01-04T05:00:00.000Z 2024-08-01T16:48:38.061Z
CVE-1999-0764
N/A
NetBSD allows ARP packets to overwrite static ARP… n/a
n/a
2000-01-04T05:00:00.000Z 2024-08-01T16:48:37.936Z
CVE-1999-0807
N/A
The Netscape Directory Server installation proced… n/a
n/a
2000-01-04T05:00:00.000Z 2024-08-01T16:48:37.995Z
ID Severity Description Published Updated
ghsa-gfv6-cj92-g3hx
6.5 (3.1)
7.1 (4.0)
PyKMIP Denial of service vulnerability 2018-12-21T17:46:39Z 2024-10-23T15:56:53Z
ghsa-h4x4-5qp2-wp46
6.5 (3.1)
Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353 2018-12-21T17:46:54Z 2021-09-13T15:14:09Z
ghsa-fvm3-cfvj-gxqq
7.5 (3.1)
High severity vulnerability that affects commons-fileupload:commons-fileupload 2018-12-21T17:47:47Z 2021-07-19T15:57:47Z
ghsa-8p8g-f9vg-r7xr
7.5 (3.1)
Directory Traversal vulnerability in Square Retrofit 2018-12-21T17:48:19Z 2022-09-14T22:25:15Z
ghsa-j379-9jr9-w5cq
9.1 (3.1)
XML External Entity (XXE) vulnerability in Square Retrofit 2018-12-21T17:48:26Z 2022-09-14T22:25:34Z
ghsa-gf2j-7qwg-4f5x
8.1 (3.1)
Improper Authentication in Keycloak 2018-12-21T17:48:45Z 2022-09-14T22:26:11Z
ghsa-9448-c9wq-jg9v
8.8 (3.1)
Improper Privilege Management in Apache Karaf 2018-12-21T17:49:33Z 2022-09-14T22:28:00Z
ghsa-99qr-9cc9-fv2x
7.8 (3.1)
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main 2018-12-21T17:50:03Z 2021-09-07T21:13:38Z
ghsa-3v44-382q-55f4
6.5 (3.1)
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main 2018-12-21T17:50:13Z 2021-08-31T21:30:36Z
ghsa-mq8p-h798-xcrp
9.8 (3.1)
Exposure of Sensitive Information in Hadoop 2018-12-21T17:50:20Z 2022-09-14T22:26:37Z
ghsa-rqj9-cq6j-958r
8.8 (3.1)
Arbitrary Command Execution in Hadoop 2018-12-21T17:50:26Z 2022-09-14T22:27:02Z
ghsa-6x48-j4x4-cqw3
8.8 (3.1)
Path Traversal in Hadoop 2018-12-21T17:50:29Z 2024-03-04T22:55:10Z
ghsa-xx68-jfcg-xmmf
Commons FileUpload Denial of service vulnerability 2018-12-21T17:51:42Z 2024-03-05T19:13:45Z
ghsa-7x9j-7223-rg5m
9.8 (3.1)
Improper Access Control in commons-fileupload 2018-12-21T17:51:51Z 2022-09-14T22:24:42Z
ghsa-3448-vfvv-xp9g
6.5 (3.1)
Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser 2018-12-26T17:45:07Z 2023-09-27T11:10:06Z
ghsa-v4x4-98cg-wr4g
9.8 (3.1)
8.1 (4.0)
Code injection in Danijar Definitions 2018-12-26T17:45:19Z 2024-09-13T20:11:10Z
ghsa-cf66-xwfp-gvc4
7.5 (3.1)
Missing Origin Validation in webpack-dev-server 2019-01-04T17:40:59Z 2022-04-06T20:39:38Z
ghsa-29gp-92wp-94q8
react-dev-utils on Windows vulnerable to Remote Code Execution 2019-01-04T17:41:20Z 2022-08-03T19:36:45Z
ghsa-4q69-q4q7-x82c
7.5 (3.1)
rendertron can remotely shut down Chrome instance 2019-01-04T17:41:46Z 2023-09-06T20:01:34Z
ghsa-j87c-cj65-vmh5
7.5 (3.1)
rendertron LFI vulnerability 2019-01-04T17:41:51Z 2023-09-06T20:06:31Z
ghsa-4rm3-4mq4-mfwr
8.8 (3.1)
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons 2019-01-04T17:43:22Z 2022-09-14T22:29:42Z
ghsa-qqv6-5w6p-3pgr
6.1 (3.1)
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons 2019-01-04T17:43:30Z 2021-09-16T20:04:03Z
ghsa-45r8-3495-x6rm
5.3 (3.1)
Jinjava calls getClass 2019-01-04T17:43:36Z 2022-09-17T00:06:13Z
ghsa-2x54-j4m3-r6wx
7.8 (3.1)
8.7 (4.0)
sqla-yaml-fixtures is vulnerable to Code Injection 2019-01-04T17:44:48Z 2024-10-28T14:23:42Z
ghsa-rprw-h62v-c2w7
9.8 (3.1)
PyYAML insecurely deserializes YAML strings leading to arbitrary code execution 2019-01-04T17:45:26Z 2024-10-16T20:51:25Z
ghsa-42fp-4hm3-j8r7
6.1 (3.1)
5.1 (4.0)
Moderate severity vulnerability that affects moin 2019-01-04T17:46:08Z 2024-09-27T19:46:59Z
ghsa-m9mq-p2f9-cfqv
9.8 (3.1)
9.3 (4.0)
Bleach URI Scheme Restriction Bypass 2019-01-04T17:46:30Z 2024-09-04T19:41:50Z
ghsa-xvwv-6wvx-px9x
6.1 (3.1)
5.3 (4.0)
Plone Open Redirect 2019-01-04T17:47:21Z 2024-10-18T21:54:05Z
ghsa-98gj-wwxm-cj3h
6.1 (3.1)
5.1 (4.0)
mistune Cross-site scripting (XSS) vulnerability 2019-01-04T17:47:50Z 2024-09-24T21:24:30Z
ghsa-38rv-5jqc-m2cv
9.8 (3.1)
9.3 (4.0)
Recurly vulnerable to SSRF 2019-01-04T17:48:09Z 2024-10-26T18:40:02Z
ID Severity Description Package Published Updated
pysec-2020-216
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted … beaker 2020-06-26T20:15:00Z 2021-07-25T23:34:27.636176Z
pysec-2020-39
Django Two-Factor Authentication before 1.12, stores the user's password in clear text in… django-two-factor-auth 2020-07-10T21:15:00Z 2020-07-21T18:06:00Z
pysec-2020-232
In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, … freewvs 2020-07-14T20:15:00Z 2021-08-27T03:22:04.199703Z
pysec-2020-233
In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can i… freewvs 2020-07-14T22:15:00Z 2021-08-27T03:22:04.227798Z
pysec-2020-14
An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command in… apache-airflow 2020-07-17T00:15:00Z 2020-07-22T17:15:00Z
pysec-2020-15
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecuto… apache-airflow 2020-07-17T00:15:00Z 2020-07-24T18:19:00Z
pysec-2020-16
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecuto… apache-airflow 2020-07-17T00:15:00Z 2020-07-24T18:22:00Z
pysec-2020-17
An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that m… apache-airflow 2020-07-17T00:15:00Z 2020-07-21T18:45:00Z
pysec-2020-23
An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerabili… apache-airflow 2020-07-17T00:15:00Z 2020-07-21T18:38:00Z
pysec-2020-51
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular… jupyterhub-kubespawner 2020-07-17T21:15:00Z 2020-07-22T20:28:00Z
pysec-2020-154
In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wa… wagtail 2020-07-20T18:15:00Z 2020-07-28T12:29:00Z
pysec-2020-30
A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to w… bsdiff4 2020-07-22T23:15:00Z 2020-07-31T16:15:00Z
pysec-2020-150
This affects all versions of package uvicorn. The request logger provided by the package … uvicorn 2020-07-27T12:15:00Z 2020-08-04T18:05:00Z
pysec-2020-151
Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not es… uvicorn 2020-07-27T12:15:00Z 2020-07-29T19:15:00Z
pysec-2020-264
In "I hate money" before version 4.1.5, an authenticated member of one project can modify… ihatemoney 2020-07-27T18:15:00Z 2021-11-16T03:58:44.236145Z
pysec-2020-44
This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen,… gerapy 2020-07-29T13:15:00Z 2020-07-31T14:59:00Z
pysec-2020-342
9.8 (3.1)
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL i… apache-skywalking 2020-08-05T14:15:00+00:00 2023-11-07T20:24:23.946863+00:00
pysec-2020-38
django-celery-results through 1.2.1 stores task results in the database. Among the data i… django-celery-results 2020-08-11T21:15:00Z 2020-08-14T20:09:00Z
pysec-2020-24
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute … asyncpg 2020-08-12T16:15:00Z 2020-09-03T01:15:00Z
pysec-2020-70
In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. I… openapi-python-client 2020-08-14T17:15:00Z 2020-08-20T18:02:00Z
pysec-2020-71
In openapi-python-client before version 0.5.3, clients generated with a maliciously craft… openapi-python-client 2020-08-14T17:15:00Z 2020-08-20T18:11:00Z
pysec-2020-265
In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia… red-discordbot 2020-08-21T17:15:00Z 2021-11-16T03:58:45.413825Z
pysec-2020-266
Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability … red-discordbot 2020-08-21T18:15:00Z 2021-11-16T03:58:45.466484Z
pysec-2020-161
A flaw was found in the solaris_zone module from the Ansible Community modules. When sett… ansible 2020-08-26T03:15:00Z 2021-01-28T18:00:00Z
pysec-2020-243
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova befor… nova 2020-08-26T19:15:00Z 2021-08-27T03:22:09.410263Z
pysec-2020-251
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some ci… scalyr-agent-2 2020-08-27T22:15:00Z 2021-08-27T03:22:21.123825Z
pysec-2020-252
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some ci… scalyr-agent-2 2020-08-27T22:15:00Z 2021-08-27T03:22:21.152325Z
pysec-2020-43
An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It al… flask-cors 2020-08-31T04:15:00Z 2020-10-21T12:15:00Z
pysec-2020-33
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.… django 2020-09-01T13:15:00Z 2021-01-20T15:15:00Z
pysec-2020-34
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.… django 2020-09-01T13:15:00Z 2021-01-20T15:15:00Z
ID Description Updated
ID Description Published Updated
mal-2022-6172 Malicious code in small_11931193 (npm) 2022-06-20T20:09:38Z 2022-06-20T20:09:38Z
mal-2022-6496 Malicious code in test2_11931193 (npm) 2022-06-20T20:09:38Z 2022-06-20T20:09:39Z
mal-2022-4553 Malicious code in meoconlonton-vhx-cricle (npm) 2022-06-20T20:09:39Z 2022-06-20T20:09:40Z
mal-2022-4816 Malicious code in new-random-test (npm) 2022-06-20T20:09:39Z 2022-06-20T20:09:39Z
mal-2022-5581 Malicious code in random-testing-npm (npm) 2022-06-20T20:09:39Z 2022-06-20T20:09:40Z
mal-2022-6520 Malicious code in testing-npm-random (npm) 2022-06-20T20:09:39Z 2022-06-20T20:09:39Z
mal-2022-4552 Malicious code in meoconlonton-vhx (npm) 2022-06-20T20:09:40Z 2022-06-20T20:09:40Z
mal-2022-4554 Malicious code in meoconlonton-vhx-fresh (npm) 2022-06-20T20:09:40Z 2022-06-20T20:09:40Z
mal-2022-5722 Malicious code in redocoem-bamm (npm) 2022-06-20T20:09:40Z 2022-06-20T20:09:41Z
mal-2022-7271 Malicious code in xenolith (npm) 2022-06-20T20:09:40Z 2022-06-20T20:09:41Z
mal-2022-4681 Malicious code in monday-ui-react-core-vibe (npm) 2022-06-20T20:09:41Z 2022-06-20T20:09:42Z
mal-2022-5022 Malicious code in odesk.bpa-tsf-calc-bundle (npm) 2022-06-20T20:09:41Z 2022-06-20T20:09:42Z
mal-2022-5142 Malicious code in ot-react-jed (npm) 2022-06-20T20:09:41Z 2022-06-20T20:09:41Z
mal-2022-5833 Malicious code in roblox-es6-migration-helper (npm) 2022-06-20T20:09:41Z 2022-06-20T20:09:41Z
mal-2022-2594 Malicious code in dropins-components (npm) 2022-06-20T20:09:42Z 2022-06-20T20:09:43Z
mal-2022-2990 Malicious code in fe-fabric-react (npm) 2022-06-20T20:09:42Z 2022-06-20T20:09:43Z
mal-2022-3312 Malicious code in gd-ldc (npm) 2022-06-20T20:09:42Z 2022-06-20T20:09:42Z
mal-2022-4455 Malicious code in mailduli (npm) 2022-06-20T20:09:42Z 2022-06-20T20:09:42Z
mal-2022-1048 Malicious code in apinitro (npm) 2022-06-20T20:09:43Z 2022-06-20T20:09:44Z
mal-2022-1500 Malicious code in bender-event-definition-loader (npm) 2022-06-20T20:09:43Z 2022-06-20T20:09:44Z
mal-2022-2008 Malicious code in colors-2.0.0 (npm) 2022-06-20T20:09:43Z 2022-06-20T20:09:44Z
mal-2022-2270 Malicious code in ctct-helpers (npm) 2022-06-20T20:09:43Z 2022-06-20T20:09:43Z
mal-2022-856 Malicious code in adiostcheusia (npm) 2022-06-20T20:09:43Z 2022-06-20T20:09:44Z
mal-2022-1000 Malicious code in angieslist-styles (npm) 2022-06-20T20:09:44Z 2022-06-20T20:09:44Z
mal-2022-181 Malicious code in @contrast-security-inc/design-system-foundations (npm) 2022-06-20T20:09:44Z 2022-06-20T20:09:45Z
mal-2022-2000 Malicious code in color2.0.0 (npm) 2022-06-20T20:09:44Z 2022-06-20T20:09:44Z
mal-2022-373 Malicious code in @jumpstart-ui/utils (npm) 2022-06-20T20:09:44Z 2022-06-20T20:09:45Z
mal-2022-5306 Malicious code in perulema (npm) 2022-06-20T20:09:45Z 2022-06-20T20:09:46Z
mal-2022-563 Malicious code in @rnps-ppr/gensen-gotham (npm) 2022-06-20T20:09:45Z 2022-06-20T20:09:45Z
mal-2022-564 Malicious code in @rnps-ppr/ppr-gensenjs (npm) 2022-06-20T20:09:45Z 2022-06-20T20:09:46Z
ID Description Published Updated
wid-sec-w-2022-1355 Ansible: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und Offenlegung von Daten 2021-06-07T22:00:00.000+00:00 2025-11-23T23:00:00.000+00:00
wid-sec-w-2024-3588 Ansible: Schwachstelle ermöglicht Offenlegung von Informationen 2021-06-07T22:00:00.000+00:00 2025-11-23T23:00:00.000+00:00
wid-sec-w-2024-1463 Intel Prozessoren: Mehrere Schwachstellen 2021-06-08T22:00:00.000+00:00 2024-06-26T22:00:00.000+00:00
wid-sec-w-2022-0438 Apache HTTP Server: Mehrere Schwachstellen 2021-06-09T22:00:00.000+00:00 2024-05-26T22:00:00.000+00:00
wid-sec-w-2022-1051 libxml2: Schwachstelle ermöglicht Denial of Service 2021-06-09T22:00:00.000+00:00 2025-06-30T22:00:00.000+00:00
wid-sec-w-2022-1113 GStreamer: Schwachstelle ermöglicht Denial of Service 2021-06-09T22:00:00.000+00:00 2025-02-04T23:00:00.000+00:00
wid-sec-w-2022-1595 Eclipse Jetty: Schwachstelle ermöglicht Offenlegung von Informationen 2021-06-09T22:00:00.000+00:00 2025-05-29T22:00:00.000+00:00
wid-sec-w-2024-1049 Rsync: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2021-06-09T22:00:00.000+00:00 2024-05-07T22:00:00.000+00:00
wid-sec-w-2023-0619 ImageMagick: Schwachstelle ermöglicht Denial of Service 2021-06-10T22:00:00.000+00:00 2023-09-20T22:00:00.000+00:00
wid-sec-w-2023-0765 MongoDB: Schwachstelle ermöglicht Manipulation von Dateien 2021-06-13T22:00:00.000+00:00 2024-01-21T23:00:00.000+00:00
wid-sec-w-2023-2729 Red Hat Ceph Storage: Mehrere Schwachstellen 2021-06-15T22:00:00.000+00:00 2023-10-23T22:00:00.000+00:00
wid-sec-w-2023-2219 OTRS: Mehrere Schwachstellen 2021-06-16T22:00:00.000+00:00 2023-08-30T22:00:00.000+00:00
wid-sec-w-2022-1114 QEMU: Mehrere Schwachstellen ermöglichen Denial of Service 2021-06-17T22:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2023-0663 PHPMailer: Mehrere Schwachstellen ermöglichen Codeausführung 2021-06-17T22:00:00.000+00:00 2023-03-15T23:00:00.000+00:00
wid-sec-w-2022-1115 QEMU: Schwachstelle ermöglicht Denial of Service 2021-06-20T22:00:00.000+00:00 2025-02-11T23:00:00.000+00:00
wid-sec-w-2023-1633 ImageMagick: Schwachstelle ermöglicht Denial of Service 2021-06-20T22:00:00.000+00:00 2024-08-05T22:00:00.000+00:00
wid-sec-w-2022-1536 Dovecot: Mehrere Schwachstellen 2021-06-21T22:00:00.000+00:00 2025-02-02T23:00:00.000+00:00
wid-sec-w-2022-1596 Eclipse Jetty: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2021-06-22T22:00:00.000+00:00 2025-05-13T22:00:00.000+00:00
wid-sec-w-2022-1219 QEMU: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2021-06-23T22:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2022-1356 Ansible: Schwachstelle ermöglicht Offenlegung von Informationen 2021-06-24T22:00:00.000+00:00 2024-01-23T23:00:00.000+00:00
wid-sec-w-2022-0243 Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation 2021-06-27T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2022-1646 Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Codeausführung 2021-06-28T22:00:00.000+00:00 2022-12-19T23:00:00.000+00:00
wid-sec-w-2022-2258 RabbitMQ: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2021-06-28T22:00:00.000+00:00 2024-12-09T23:00:00.000+00:00
wid-sec-w-2022-0721 Red Hat Enterprise Linux: Mehrere Schwachstellen 2021-06-29T22:00:00.000+00:00 2024-12-19T23:00:00.000+00:00
wid-sec-w-2022-1577 PHP: Mehrere Schwachstellen 2021-06-30T22:00:00.000+00:00 2023-09-13T22:00:00.000+00:00
wid-sec-w-2022-1725 libvirt: Schwachstelle ermöglicht Offenlegung von Informationen 2021-06-30T22:00:00.000+00:00 2024-04-01T22:00:00.000+00:00
wid-sec-w-2024-0042 Node.js: Mehrere Schwachstellen 2021-07-01T22:00:00.000+00:00 2024-05-09T22:00:00.000+00:00
wid-sec-w-2024-3632 Cacti RRDtool: Mehrere Schwachstellen 2021-07-05T22:00:00.000+00:00 2024-12-08T23:00:00.000+00:00
wid-sec-w-2022-0609 Linux Kernel: Schwachstelle ermöglicht Erlangen von Systemrechten 2021-07-07T22:00:00.000+00:00 2025-10-12T22:00:00.000+00:00
wid-sec-w-2022-1305 Ruby: Mehrere Schwachstellen 2021-07-07T22:00:00.000+00:00 2025-04-22T22:00:00.000+00:00
ID Description Published Updated
icsa-19-043-06 ICSA-19-043-06 Siemens CP1604 and CP1616 (Update A) 2019-01-08T00:00:00.000000Z 2019-07-09T00:00:00.000000Z
icsa-19-010-01 Emerson DeltaV 2019-01-10T00:00:00.000000Z 2019-01-10T00:00:00.000000Z
icsa-19-010-02 Omron CX-One CX-Protocol 2019-01-10T00:00:00.000000Z 2019-01-10T00:00:00.000000Z
icsa-19-010-03 Pilz PNOZmulti Configurator 2019-01-10T00:00:00.000000Z 2019-01-10T00:00:00.000000Z
icsa-19-015-01 LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA 2019-01-15T00:00:00.000000Z 2019-01-15T00:00:00.000000Z
icsa-19-017-01 Omron CX-Supervisor (Update A) 2019-01-17T00:00:00.000000Z 2019-02-07T00:00:00.000000Z
icsa-19-017-02 ABB CP400 Panel Builder TextEditor 2.0 2019-01-17T00:00:00.000000Z 2019-01-17T00:00:00.000000Z
icsa-19-017-03 ControlByWeb X-320M 2019-01-17T00:00:00.000000Z 2019-01-17T00:00:00.000000Z
icsa-19-022-01 Johnson Controls Facility Explorer 2019-01-22T00:00:00.000000Z 2019-01-22T00:00:00.000000Z
icsma-19-022-01 Dräger Infinity Delta 2019-01-22T00:00:00.000000Z 2019-01-22T00:00:00.000000Z
icsa-19-024-01 Advantech WebAccess/SCADA 2019-01-24T00:00:00.000000Z 2019-01-24T00:00:00.000000Z
icsa-19-024-02 PHOENIX CONTACT FL SWITCH 2019-01-24T00:00:00.000000Z 2019-01-24T00:00:00.000000Z
icsa-19-029-01 Yokogawa License Manager Service 2019-01-29T00:00:00.000000Z 2019-01-29T00:00:00.000000Z
icsa-19-029-03 AVEVA Wonderware System Platform 2019-01-29T00:00:00.000000Z 2019-01-29T00:00:00.000000Z
icsma-19-029-01 Stryker Medical Beds 2019-01-29T00:00:00.000000Z 2019-01-29T00:00:00.000000Z
icsma-19-029-02 BD FACSLyric (Update A) 2019-01-29T00:00:00.000000Z 2019-02-05T00:00:00.000000Z
icsa-19-029-02 Mitsubishi Electric MELSEC-Q Series PLCs 2019-01-29T07:00:00.000000Z 2025-06-24T06:00:00.000000Z
icsa-19-031-01 Schneider Electric EVLink Parking 2019-01-31T00:00:00.000000Z 2019-01-31T00:00:00.000000Z
icsa-19-031-02 IDenticard PremiSys (Update A) 2019-01-31T00:00:00.000000Z 2019-04-04T00:00:00.000000Z
icsa-19-036-01 AVEVA InduSoft Web Studio and InTouch Edge HMI 2019-02-05T00:00:00.000000Z 2019-02-05T00:00:00.000000Z
icsa-19-036-02 Rockwell Automation EtherNet/IP Web Server Modules 2019-02-05T00:00:00.000000Z 2019-02-05T00:00:00.000000Z
icsa-19-036-03 WECON LeviStudioU (Update A) 2019-02-05T00:00:00.000000Z 2019-09-19T00:00:00.000000Z
icsa-19-036-05 Kunbus PR100088 Modbus Gateway (Update B) 2019-02-05T00:00:00.000000Z 2019-02-28T00:00:00.000000Z
icsa-19-043-01 OSIsoft PI Vision 2019-02-12T00:00:00.000000Z 2019-02-12T00:00:00.000000Z
icsa-19-043-02 ICSA-19-043-02 Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays 2019-02-12T00:00:00.000000Z 2019-02-12T00:00:00.000000Z
icsa-19-043-03 WIBU SYSTEMS AG WibuKey Digital Rights Management (Update D) 2019-02-12T00:00:00.000000Z 2019-05-14T00:00:00.000000Z
icsa-19-043-05 Siemens Intel Active Management Technology of SIMATIC IPCs 2019-02-12T00:00:00.000000Z 2020-02-10T00:00:00.000000Z
icsa-19-045-01 Pangea Communications Internet FAX ATA 2019-02-14T00:00:00.000000Z 2019-02-14T00:00:00.000000Z
icsa-19-050-01 Intel Data Center Manager SDK 2019-02-19T00:00:00.000000Z 2019-02-19T00:00:00.000000Z
icsa-19-050-02 Delta Industrial Automation CNCSoft 2019-02-19T00:00:00.000000Z 2019-02-19T00:00:00.000000Z
ID Description Published Updated
cisco-sa-20200108-anyconnect-hijack Cisco AnyConnect Secure Mobility Client for Android Service Hijack Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-cnca-xss Cisco Crosswork Change Automation Cross-Site Scripting Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-cvp-direct-obj-ref Cisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-dcaf-xss Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-er-xss Cisco Emergency Responder Stored Cross-Site Scripting Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-finesse-xss Cisco Finesse Cross-Site Scripting Vulnerability 2020-01-08T16:00:00+00:00 2020-03-30T21:00:57+00:00
cisco-sa-20200108-ios-csrf Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability 2020-01-08T16:00:00+00:00 2020-04-28T17:46:50+00:00
cisco-sa-20200108-iphone-xss Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Scripting Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-ise-auth-bypass Cisco Identity Services Engine Authorization Bypass Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-mme-dos Cisco Mobility Management Entity Denial of Service Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-ucs-dir-infodis Cisco UCS Director Information Disclosure Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-vdsd-auth-bypass Cisco Vision Dynamic Signage Director Authentication Bypass Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-webex-centers-dos Cisco Webex Centers Denial of Service Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200108-webex-video Cisco Webex Video Mesh Node Command Injection Vulnerability 2020-01-08T16:00:00+00:00 2020-01-08T16:00:00+00:00
cisco-sa-20200122-cuc-info-disclosure Cisco Unified Communications Manager Information Disclosure Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-fmc-auth Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-hcm-f-csrf Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-ios-xr-bgp-dos Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-ios-xr-dos Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability 2020-01-22T16:00:00+00:00 2020-02-19T18:42:41+00:00
cisco-sa-20200122-ios-xr-evpn Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities 2020-01-22T16:00:00+00:00 2020-02-07T16:48:01+00:00
cisco-sa-20200122-ios-xr-routes Cisco IOS XR Software BGP EVPN Operational Routes Denial of Service Vulnerability 2020-01-22T16:00:00+00:00 2020-01-24T16:22:50+00:00
cisco-sa-20200122-on-prem-dos Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-sbsms-xss Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability 2020-01-22T16:00:00+00:00 2021-02-18T22:59:12+00:00
cisco-sa-20200122-sdwan-cmd-inject Cisco SD-WAN vManage Command Injection Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-sdwan-priv-esc Cisco SD-WAN Solution Local Privilege Escalation Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-sdwan-sql-inject Cisco SD-WAN Solution SQL Injection Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-sdwan-sqlinj Cisco SD-WAN Solution SQL Injection Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-uc-xss Cisco Unity Connection Stored Cross-Site Scripting Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-umbrella-msi-install Cisco Umbrella Roaming Client for Windows Install Vulnerability 2020-01-22T16:00:00+00:00 2020-01-22T16:00:00+00:00
cisco-sa-20200122-wsa-sma-header-inject Cisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header Injection Vulnerability 2020-01-22T16:00:00+00:00 2020-02-03T16:50:10+00:00
ID Description Published Updated
msrc_cve-2021-20232 A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-20233 A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters while it actually requires 4 characters which allows an attacker to corrupt memory by one byte for each quote in the input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2021-03-02T00:00:00.000Z 2026-02-26T01:01:23.000Z
msrc_cve-2021-20255 A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability. 2021-03-02T00:00:00.000Z 2026-02-18T01:37:00.000Z
msrc_cve-2021-20268 An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality integrity as well as system availability. 2021-03-02T00:00:00.000Z 2021-03-25T00:00:00.000Z
msrc_cve-2021-20270 An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file as demonstrated by input that only contains the "exception" keyword. 2021-03-02T00:00:00.000Z 2026-02-18T01:30:54.000Z
msrc_cve-2021-20271 A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package whose signature header was modified to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity confidentiality and system availability. 2021-03-02T00:00:00.000Z 2021-04-01T00:00:00.000Z
msrc_cve-2021-20286 A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service. 2021-03-02T00:00:00.000Z 2026-02-18T02:09:47.000Z
msrc_cve-2021-21334 environment variable leak 2021-03-02T00:00:00.000Z 2026-02-18T14:57:59.000Z
msrc_cve-2021-22134 A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions when executing a query against a recently updated document. This affects documents that have been updated and not yet refreshed in the index. This could result in the search disclosing the existence of documents and fields the attacker should not be able to view. 2021-03-02T00:00:00.000Z 2021-12-01T00:00:00.000Z
msrc_cve-2021-23358 Arbitrary Code Injection 2021-03-02T00:00:00.000Z 2026-02-18T14:38:25.000Z
msrc_cve-2021-24032 Beginning in v1.4.1 and prior to v1.4.9 due to an incomplete fix for CVE-2021-24031 the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties. 2021-03-02T00:00:00.000Z 2026-02-18T14:35:35.000Z
msrc_cve-2021-27291 In pygments 1.1+ fixed in 2.7.4 the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input an attacker can cause a denial of service. 2021-03-02T00:00:00.000Z 2026-02-18T01:31:33.000Z
msrc_cve-2021-27363 An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem the transport's handle is available to unprivileged users via the sysfs file system at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27364 An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27365 An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI and has a length up to the maximum length of a Netlink message. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27506 The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19 3.11.7 and 4.2.1. 2021-03-02T00:00:00.000Z 2021-03-25T00:00:00.000Z
msrc_cve-2021-27918 encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode DecodeElement or Skip method. 2021-03-02T00:00:00.000Z 2026-02-18T14:03:28.000Z
msrc_cve-2021-27928 A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product. 2021-03-02T00:00:00.000Z 2021-03-27T00:00:00.000Z
msrc_cve-2021-28041 ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios such as unconstrained agent-socket access on a legacy operating system or the forwarding of an agent to an attacker-controlled host. 2021-03-02T00:00:00.000Z 2021-03-10T00:00:00.000Z
msrc_cve-2021-28153 An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink it incorrectly also creates the target of the symlink as an empty file which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists then the contents of that file correctly remain unchanged.) 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28361 An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected) the iSCSI target can crash with a NULL pointer dereference. 2021-03-02T00:00:00.000Z 2026-02-18T14:23:26.000Z
msrc_cve-2021-28375 An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages aka CID-20c40794eb85. This is a related issue to CVE-2019-2308. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28543 Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, an assertion failure or NULL pointer dereference can be triggered in Varnish Cache through the varnish-modules header.append() and header.copy() functions. For some Varnish Configuration Language (VCL) files, this gives remote clients an opportunity to cause a Varnish Cache restart. A restart reduces overall availability and performance due to an increased number of cache misses, and may cause higher load on backend servers. 2021-03-02T00:00:00.000Z 2025-10-01T23:11:09.000Z
msrc_cve-2021-28660 rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases CVE IDs are not normally used for drivers/staging/* (unfinished work); however system integrators may have situations in which a drivers/staging issue is relevant to their own customer base. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28831 decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer with a resultant invalid free or segmentation fault via malformed gzip data. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28950 An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode aka CID-775c5033a0d1. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28951 An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread but concurrently that SQPOLL thread is waiting for a signal to start aka CID-3ebba796fa25. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28952 An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.) 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28957 An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28964 A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation aka CID-dbcc7d57bffc. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
ID Description Published Updated
opensuse-su-2020:0160-1 Security update for python-reportlab 2020-02-04T09:13:30Z 2020-02-04T09:13:30Z
opensuse-su-2020:0162-1 Security update for ucl 2020-02-04T09:13:42Z 2020-02-04T09:13:42Z
opensuse-su-2020:0163-1 Security update for upx 2020-02-04T09:13:50Z 2020-02-04T09:13:50Z
opensuse-su-2020:0165-1 Security update for wicked 2020-02-04T17:13:11Z 2020-02-04T17:13:11Z
opensuse-su-2020:0166-1 Security update for e2fsprogs 2020-02-04T17:13:21Z 2020-02-04T17:13:21Z
opensuse-su-2020:0170-1 Security update for ImageMagick 2020-02-05T11:13:10Z 2020-02-05T11:13:10Z
opensuse-su-2020:0179-1 Security update for ucl 2020-02-06T14:42:15Z 2020-02-06T14:42:15Z
opensuse-su-2020:0180-1 Security update for upx 2020-02-06T14:46:47Z 2020-02-06T14:46:47Z
opensuse-su-2020:0187-1 Security update for ceph 2020-02-08T15:12:58Z 2020-02-08T15:12:58Z
opensuse-su-2020:0189-1 Security update for chromium 2020-02-08T23:11:40Z 2020-02-08T23:11:40Z
opensuse-su-2020:0204-1 Security update for nginx 2020-02-11T17:12:54Z 2020-02-11T17:12:54Z
opensuse-su-2020:0207-1 Security update for wicked 2020-02-11T17:13:21Z 2020-02-11T17:13:21Z
opensuse-su-2020:0208-1 Security update for systemd 2020-02-11T19:12:44Z 2020-02-11T19:12:44Z
opensuse-su-2020:0209-1 Security update for libqt5-qtbase 2020-02-11T19:12:57Z 2020-02-11T19:12:57Z
opensuse-su-2020:0210-1 Security update for chromium 2020-02-12T05:12:32Z 2020-02-12T05:12:32Z
opensuse-su-2020:0213-1 Security update for pcp 2020-02-12T15:13:29Z 2020-02-12T15:13:29Z
opensuse-su-2020:0214-1 Security update for rubygem-rack 2020-02-12T15:13:37Z 2020-02-12T15:13:37Z
opensuse-su-2020:0219-1 Security update for docker-runc 2020-02-13T19:13:24Z 2020-02-13T19:13:24Z
opensuse-su-2020:0220-1 Security update for nextcloud 2020-02-15T19:09:47Z 2020-02-15T19:09:47Z
opensuse-su-2020:0222-1 Security update for hostapd 2020-02-15T19:10:10Z 2020-02-15T19:10:10Z
opensuse-su-2020:0229-1 Security update for nextcloud 2020-02-17T12:31:04Z 2020-02-17T12:31:04Z
opensuse-su-2020:0230-1 Security update for MozillaFirefox 2020-02-18T05:11:46Z 2020-02-18T05:11:46Z
opensuse-su-2020:0231-1 Security update for MozillaThunderbird 2020-02-18T05:12:00Z 2020-02-18T05:12:00Z
opensuse-su-2020:0233-1 Security update for chromium, re2 2020-02-19T09:14:43Z 2020-02-19T09:14:43Z
opensuse-su-2020:0234-1 Security update for inn 2020-02-19T19:13:36Z 2020-02-19T19:13:36Z
opensuse-su-2020:0235-1 Security update for rmt-server 2020-02-19T19:13:45Z 2020-02-19T19:13:45Z
opensuse-su-2020:0242-1 Security update for inn 2020-02-24T17:19:16Z 2020-02-24T17:19:16Z
opensuse-su-2020:0244-1 Security update for sudo 2020-02-25T09:29:12Z 2020-02-25T09:29:12Z
opensuse-su-2020:0245-1 Security update for chromium 2020-02-26T13:18:34Z 2020-02-26T13:18:34Z
opensuse-su-2020:0247-1 Security update for ipmitool 2020-02-27T13:17:29Z 2020-02-27T13:17:29Z
ID Description Published Updated
rhsa-2007:0089 Red Hat Security Advisory: php security update for Stronghold 2007-02-26T09:49:00+00:00 2025-11-21T17:31:18+00:00
rhsa-2007:0085 Red Hat Security Advisory: kernel security update 2007-02-27T07:41:00+00:00 2025-11-21T17:31:17+00:00
rhsa-2007:0078 Red Hat Security Advisory: thunderbird security update 2007-03-02T18:27:00+00:00 2025-11-21T17:31:15+00:00
rhsa-2007:0096 Red Hat Security Advisory: mod_jk security update 2007-03-02T18:30:00+00:00 2025-11-21T17:31:23+00:00
rhsa-2007:0106 Red Hat Security Advisory: gnupg security update 2007-03-06T09:15:00+00:00 2025-11-21T17:31:20+00:00
rhsa-2007:0075 Red Hat Security Advisory: spamassassin security update 2007-03-13T23:23:00+00:00 2025-11-21T17:31:18+00:00
rhsa-2007:0107 Red Hat Security Advisory: gnupg security update 2007-03-14T00:18:00+00:00 2025-11-21T17:31:20+00:00
rhsa-2007:0108 Red Hat Security Advisory: thunderbird security update 2007-03-14T00:24:00+00:00 2025-11-21T17:31:20+00:00
rhsa-2007:0087 Red Hat Security Advisory: ekiga security update 2007-03-14T00:47:00+00:00 2025-11-21T17:31:18+00:00
rhsa-2007:0082 Red Hat Security Advisory: php security update 2007-03-14T02:01:00+00:00 2025-11-21T17:31:17+00:00
rhsa-2007:0057 Red Hat Security Advisory: bind security update 2007-03-14T04:51:00+00:00 2025-11-21T17:31:09+00:00
rhsa-2007:0061 Red Hat Security Advisory: samba security update 2007-03-14T04:55:00+00:00 2025-11-21T17:31:09+00:00
rhsa-2007:0097 Red Hat Security Advisory: firefox security update 2007-03-14T05:02:00+00:00 2025-11-21T17:31:20+00:00
rhsa-2007:0114 Red Hat Security Advisory: xen security update 2007-03-14T05:06:00+00:00 2025-11-21T17:31:20+00:00
rhsa-2007:0068 Red Hat Security Advisory: postgresql security update 2007-03-14T05:07:00+00:00 2025-11-21T17:31:12+00:00
rhsa-2007:0099 Red Hat Security Advisory: kernel security and bug fix update 2007-03-14T05:22:00+00:00 2025-11-21T17:31:20+00:00
rhsa-2007:0066 Red Hat Security Advisory: wireshark security update 2007-03-14T16:29:00+00:00 2025-11-21T17:31:10+00:00
rhsa-2007:0055 Red Hat Security Advisory: libwpd security update 2007-03-16T14:18:00+00:00 2025-11-21T17:31:08+00:00
rhsa-2007:0033 Red Hat Security Advisory: openoffice.org security update 2007-03-22T10:37:00+00:00 2025-11-21T17:31:07+00:00
rhsa-2007:0069 Red Hat Security Advisory: openoffice.org security update 2007-03-22T13:40:00+00:00 2025-11-21T17:31:12+00:00
rhsa-2007:0124 Red Hat Security Advisory: file security update 2007-03-23T10:08:00+00:00 2025-11-21T17:31:22+00:00
rhsa-2007:0095 Red Hat Security Advisory: krb5 security update 2007-04-03T18:20:00+00:00 2025-11-21T17:31:19+00:00
rhsa-2007:0132 Red Hat Security Advisory: libXfont security update 2007-04-03T18:30:00+00:00 2025-11-21T17:31:23+00:00
rhsa-2007:0127 Red Hat Security Advisory: xorg-x11-server security update 2007-04-03T18:43:00+00:00 2025-11-21T17:31:22+00:00
rhsa-2007:0126 Red Hat Security Advisory: xorg-x11 security update 2007-04-03T18:48:00+00:00 2025-11-21T17:31:22+00:00
rhsa-2007:0131 Red Hat Security Advisory: squid security update 2007-04-03T18:53:00+00:00 2025-11-21T17:31:22+00:00
rhsa-2007:0152 Red Hat Security Advisory: mysql security update 2007-04-03T18:58:00+00:00 2025-11-21T17:31:25+00:00
rhsa-2007:0125 Red Hat Security Advisory: XFree86 security update 2007-04-03T19:10:00+00:00 2025-11-21T17:31:22+00:00
rhsa-2007:0164 Red Hat Security Advisory: mod_jk security update 2007-04-12T23:31:00+00:00 2025-11-21T17:31:27+00:00
rhsa-2007:0162 Red Hat Security Advisory: php security update 2007-04-16T11:24:00+00:00 2025-11-21T17:31:26+00:00
ID Description Published Updated
suse-su-2016:2079-1 Security update for libidn 2016-08-16T07:29:11Z 2016-08-16T07:29:11Z
suse-su-2016:2089-1 Security update for squid3 2016-08-16T12:56:03Z 2016-08-16T12:56:03Z
suse-su-2016:2090-1 Security update for apache2 2016-08-17T07:33:22Z 2016-08-17T07:33:22Z
suse-su-2016:2093-1 Security update for xen 2016-08-17T12:22:27Z 2016-08-17T12:22:27Z
suse-su-2016:2097-1 Security update for ctags 2016-08-18T09:52:38Z 2016-08-18T09:52:38Z
suse-su-2016:2100-1 Security update for xen 2016-08-18T12:48:09Z 2016-08-18T12:48:09Z
suse-su-2016:2106-1 Security update for python 2016-08-19T08:31:23Z 2016-08-19T08:31:23Z
suse-su-2016:2105-1 Security update for the Linux Kernel 2016-08-19T08:48:37Z 2016-08-19T08:48:37Z
suse-su-2016:2107-1 Security update for cracklib 2016-08-19T10:58:52Z 2016-08-19T10:58:52Z
suse-su-2016:2131-1 Security update for MozillaFirefox 2016-08-22T14:37:43Z 2016-08-22T14:37:43Z
suse-su-2016:2136-1 Security update for krb5 2016-08-23T13:21:32Z 2016-08-23T13:21:32Z
suse-su-2016:2143-1 Security update for several openstack-components 2016-08-23T15:49:42Z 2016-08-23T15:49:42Z
suse-su-2016:2146-1 Security update for dosfstools 2016-08-24T11:55:12Z 2016-08-24T11:55:12Z
suse-su-2016:2145-1 Security update for dosfstools 2016-08-24T11:55:45Z 2016-08-24T11:55:45Z
suse-su-2016:2147-1 Security update for squid 2016-08-24T12:03:27Z 2016-08-24T12:03:27Z
suse-su-2016:2151-1 Security update for rsync 2016-08-24T13:43:54Z 2016-08-24T13:43:54Z
suse-su-2016:2154-1 Security update for xerces-c 2016-08-25T10:58:13Z 2016-08-25T10:58:13Z
suse-su-2016:2156-1 Security update for glibc 2016-08-25T13:04:20Z 2016-08-25T13:04:20Z
suse-su-2016:2155-1 Security update for curl 2016-08-25T13:04:29Z 2016-08-25T13:04:29Z
suse-su-2016:2175-1 Security update for Linux Kernel Live Patch 6 for SLE 12 SP1 2016-08-29T09:25:38Z 2016-08-29T09:25:38Z
suse-su-2016:2177-1 Security update for Linux Kernel Live Patch 5 for SLE 12 SP1 2016-08-29T09:25:46Z 2016-08-29T09:25:46Z
suse-su-2016:2180-1 Security update for Linux Kernel Live Patch 4 for SLE 12 SP1 2016-08-29T09:25:55Z 2016-08-29T09:25:55Z
suse-su-2016:2178-1 Security update for Linux Kernel Live Patch 3 for SLE 12 SP1 2016-08-29T09:26:04Z 2016-08-29T09:26:04Z
suse-su-2016:2179-1 Security update for Linux Kernel Live Patch 2 for SLE 12 SP1 2016-08-29T09:26:12Z 2016-08-29T09:26:12Z
suse-su-2016:2174-1 Security update for Linux Kernel Live Patch 0 for SLE 12 SP1 2016-08-29T09:26:24Z 2016-08-29T09:26:24Z
suse-su-2016:2181-1 Security update for Linux Kernel Live Patch 1 for SLE 12 SP1 2016-08-29T09:26:33Z 2016-08-29T09:26:33Z
suse-su-2016:2186-1 Security update for fontconfig 2016-08-30T07:31:20Z 2016-08-30T07:31:20Z
suse-su-2016:2189-1 Security update for libstorage 2016-08-30T07:48:38Z 2016-08-30T07:48:38Z
suse-su-2016:2188-1 Security update for tomcat 2016-08-30T07:49:43Z 2016-08-30T07:49:43Z
suse-su-2016:2190-1 Security update for fontconfig 2016-08-30T07:52:30Z 2016-08-30T07:52:30Z
ID Description Published Updated
alsa-2023:3582 Important: .NET 6.0 security, bug fix, and enhancement update 2023-06-14T00:00:00Z 2023-06-24T08:08:38Z
alsa-2023:3584 Important: c-ares security update 2023-06-14T00:00:00Z 2023-06-22T12:18:47Z
alsa-2023:3585 Important: python3.11 security update 2023-06-14T00:00:00Z 2023-06-23T19:05:41Z
alsa-2023:3586 Important: nodejs security update 2023-06-14T00:00:00Z 2023-06-23T18:57:05Z
alsa-2023:3587 Important: thunderbird security update 2023-06-14T00:00:00Z 2023-06-21T23:59:22Z
alsa-2023:3588 Important: thunderbird security update 2023-06-14T00:00:00Z 2023-06-21T14:34:35Z
alsa-2023:3589 Important: firefox security update 2023-06-14T00:00:00Z 2023-06-21T23:53:31Z
alsa-2023:3590 Important: firefox security update 2023-06-14T00:00:00Z 2023-06-21T14:26:36Z
alsa-2023:3591 Important: python3 security update 2023-06-14T00:00:00Z 2023-06-22T16:18:00Z
alsa-2023:3592 Important: .NET 7.0 security, bug fix, and enhancement update 2023-06-14T00:00:00Z 2023-06-23T18:38:25Z
alsa-2023:3593 Important: .NET 7.0 security, bug fix, and enhancement update 2023-06-14T00:00:00Z 2023-06-23T14:06:07Z
alsa-2023:3594 Important: python3.11 security update 2023-06-14T00:00:00Z 2023-06-22T12:05:15Z
alsa-2023:3595 Important: python3.9 security update 2023-06-14T00:00:00Z 2023-06-23T18:37:49Z
alsa-2023:3661 Important: texlive security update 2023-06-19T00:00:00Z 2023-06-23T18:28:21Z
alsa-2023:3708 Important: kernel-rt security and bug fix update 2023-06-21T00:00:00Z 2023-07-11T21:09:45Z
alsa-2023:3711 Moderate: libtiff security update 2023-06-21T00:00:00Z 2023-06-23T15:36:11Z
alsa-2023:3714 Moderate: postgresql security update 2023-06-21T00:00:00Z 2023-06-23T15:06:55Z
alsa-2023:3715 Moderate: libvirt security update 2023-06-21T00:00:00Z 2023-06-23T14:54:17Z
alsa-2023:3722 Moderate: openssl security and bug fix update 2023-06-21T00:00:00Z 2023-06-23T14:32:27Z
alsa-2023:3723 Important: kernel security and bug fix update 2023-06-21T00:00:00Z 2023-07-11T20:32:33Z
alsa-2023:3725 Moderate: less security update 2023-06-21T00:00:00Z 2023-06-23T14:22:39Z
alsa-2023:3780 Important: python27:2.7 security update 2023-06-22T00:00:00Z 2023-06-30T19:49:00Z
alsa-2023:3781 Important: python38:3.8 and python38-devel:3.8 security update 2023-06-22T00:00:00Z 2023-06-30T15:17:20Z
alsa-2023:3811 Important: python39:3.9 and python39-devel:3.9 security update 2023-06-27T00:00:00Z 2023-06-30T15:49:54Z
alsa-2023:3819 Moderate: kernel-rt security and bug fix update 2023-06-27T00:00:00Z 2023-07-24T14:38:04Z
alsa-2023:3821 Moderate: ruby:2.7 security, bug fix, and enhancement update 2023-06-27T00:00:00Z 2023-06-30T22:58:43Z
alsa-2023:3822 Moderate: virt:rhel and virt-devel:rhel security and bug fix update 2023-06-27T00:00:00Z 2023-07-15T00:08:41Z
alsa-2023:3827 Moderate: libtiff security update 2023-06-27T00:00:00Z 2023-06-29T13:24:43Z
alsa-2023:3837 Moderate: systemd security and bug fix update 2023-06-27T00:00:00Z 2023-06-30T11:32:02Z
alsa-2023:3839 Moderate: libssh security update 2023-06-27T00:00:00Z 2023-06-30T11:12:56Z
ID Description Published Updated
osv-2020-2179 Heap-buffer-overflow in arrow::internal::ValidateUTF8 2020-11-23T00:00:07.508800Z 2022-04-13T03:04:32.035032Z
osv-2020-2180 UNKNOWN READ in helper_be_stl_mmu_armeb 2020-11-23T00:00:58.574949Z 2022-04-13T03:20:55.766524Z
osv-2020-2183 Heap-buffer-overflow in Lizard_decompress_safe 2020-11-25T00:00:12.713716Z 2022-04-13T03:04:40.174785Z
osv-2020-2184 Heap-buffer-overflow in frame_get_usermeta 2020-11-25T00:00:17.879160Z 2022-04-13T03:04:40.275647Z
osv-2020-2188 Heap-buffer-overflow in ih264d_parse_pslice 2020-11-26T00:00:03.791789Z 2022-04-13T03:04:35.473895Z
osv-2020-2192 Heap-buffer-overflow in decompress_smooth_data 2020-11-26T00:00:47.446491Z 2022-04-13T03:04:37.699400Z
osv-2020-2197 Heap-use-after-free in decode_NXAST_RAW_ENCAP 2020-11-27T00:01:16.495329Z 2022-04-13T03:04:40.738536Z
osv-2020-2200 Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder> 2020-11-28T00:00:21.818545Z 2022-04-13T03:04:42.779534Z
osv-2020-2205 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock 2020-11-28T00:01:12.405006Z 2022-04-13T03:04:39.528978Z
osv-2020-2206 Segv on unknown address in ndpi_free 2020-11-29T00:00:04.133863Z 2022-04-13T03:04:36.047885Z
osv-2020-2212 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice 2020-11-30T00:00:44.518285Z 2022-04-13T03:04:35.380766Z
osv-2020-2217 Heap-buffer-overflow in std::__1::pair<int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0> 2020-12-04T00:00:01.928228Z 2022-04-13T03:04:41.047024Z
osv-2020-2220 Heap-buffer-overflow in mk_rconf_read 2020-12-04T00:00:07.219620Z 2022-04-13T03:22:34.172257Z
osv-2020-2221 UNKNOWN READ in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0 2020-12-04T00:00:11.822761Z 2022-04-13T03:04:40.965864Z
osv-2020-2222 Heap-double-free in sc_pkcs15_free_tokeninfo 2020-12-04T00:00:16.472882Z 2022-04-13T03:04:41.564448Z
osv-2020-2223 Heap-use-after-free in e1000e_write_packet_to_guest 2020-12-04T00:00:19.497055Z 2022-04-13T03:04:33.332274Z
osv-2020-2227 Heap-buffer-overflow in ieeeNUMBER_fragment_hash 2020-12-04T00:00:30.414831Z 2023-02-24T02:37:08.122111Z
osv-2020-2230 Heap-buffer-overflow in _zend_is_inconsistent 2020-12-04T00:01:16.269909Z 2022-04-13T03:04:33.406070Z
osv-2020-2233 Heap-buffer-overflow in flb_sds_cat_utf8 2020-12-04T00:01:24.065614Z 2022-04-13T03:36:15.406207Z
osv-2020-2238 Heap-buffer-overflow in dotnet_parse_tilde_2 2020-12-05T00:00:17.081850Z 2022-04-13T03:04:42.200424Z
osv-2020-2239 Heap-buffer-overflow in flb_http_do 2020-12-05T00:00:32.824865Z 2022-04-13T03:23:34.051218Z
osv-2020-2240 Heap-buffer-overflow in process_chunked_data 2020-12-05T00:00:47.996292Z 2022-04-13T03:27:42.987211Z
osv-2020-2241 Heap-buffer-overflow in mk_string_copy_substr 2020-12-05T00:00:48.941441Z 2022-04-13T03:04:38.424624Z
osv-2020-2242 Heap-buffer-overflow in tinfl_decompress 2020-12-05T00:00:50.659183Z 2022-04-13T03:38:11.059900Z
osv-2020-2245 Heap-buffer-overflow in Pl_ASCII85Decoder::write 2020-12-06T00:00:11.834199Z 2022-04-13T03:04:31.555525Z
osv-2020-2247 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize 2020-12-06T00:00:26.193153Z 2022-04-13T03:04:39.024692Z
osv-2020-2251 Heap-buffer-overflow in blosc_run_decompression_with_context 2020-12-09T00:00:09.835730Z 2022-04-13T03:04:40.343034Z
osv-2020-2253 Global-buffer-overflow in g_date_time_get_ymd 2020-12-10T00:00:08.953434Z 2022-04-13T03:04:32.557673Z
osv-2020-2254 Stack-use-after-return in insert_pin 2020-12-10T00:00:49.551956Z 2022-04-13T03:04:41.554103Z
osv-2020-2259 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask 2020-12-13T00:00:10.196605Z 2022-04-13T03:04:39.014179Z
ID Description Published Updated
rustsec-2026-0049 CRLs not considered authoritative by Distribution Point due to faulty matching logic 2026-03-20T12:00:00Z 2026-03-24T08:22:29Z
rustsec-2026-0050 `tokio-uds` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0051 `tokio-threadpool` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0052 `tokio-sync` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0053 `tokio-tls` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0054 `tokio-current-thread` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0055 `tokio-process` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0056 `tokio-codec` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0057 `tokio-reactor` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0058 `tokio-io` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0059 `tokio-tcp` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0060 `tokio-timer` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0061 `tokio-fs` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0062 `tokio-compat` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0063 `tokio-executor` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0064 `tokio-udp` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0065 `tokio-signal` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0078 Symbol confusion after hasher panic in `intaglio` interners 2026-03-30T12:00:00Z 2026-03-30T21:40:18Z
rustsec-2026-0081 `logtrace` was removed from crates.io for malicious code 2026-04-05T12:00:00Z 2026-04-05T23:52:05Z
rustsec-2026-0082 zantetsu-ffi is unmaintained 2026-04-07T12:00:00Z 2026-04-08T08:55:27Z
rustsec-2026-0083 zantetsu-trainer is unmaintained 2026-04-07T12:00:00Z 2026-04-08T08:55:27Z
rustsec-2026-0084 `logprinter` was removed from crates.io for malicious code 2026-04-09T12:00:00Z 2026-04-09T11:23:07Z
rustsec-2026-0085 Panic when lifting `flags` component value 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0086 Host data leakage with 64-bit tables and Winch 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0087 Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on Cranelift x86-64 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0088 Data leakage between pooling allocator instances 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0089 Host panic when Winch compiler executes `table.fill` 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0090 Use-after-free bug after cloning `wasmtime::Linker` 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0091 Out-of-bounds write or crash when transcoding component model strings 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0092 Panic when transcoding misaligned component model UTF-16 strings 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
ID Description Published Updated
bit-mariadb-2022-27380 2024-03-06T11:01:22.608Z 2025-04-03T14:40:37.652Z
bit-parse-2022-41878 Parse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers 2024-03-06T11:01:23.072Z 2025-05-20T10:02:07.006Z
bit-grafana-2020-12458 2024-03-06T11:01:23.376Z 2025-04-03T14:40:37.652Z
bit-gitlab-2023-3964 Incorrect Authorization in GitLab 2024-03-06T11:01:24.492Z 2025-05-20T10:02:07.006Z
bit-moodle-2023-23921 Moodle: reflected xss risk in some returnurl parameters 2024-03-06T11:01:25.162Z 2025-05-20T10:02:07.006Z
bit-odoo-2021-23178 2024-03-06T11:01:25.901Z 2025-04-03T14:40:37.652Z
bit-airflow-2020-11981 2024-03-06T11:01:26.575Z 2025-04-03T14:40:37.652Z
bit-phpmyadmin-2023-25727 2024-03-06T11:01:27.502Z 2025-11-06T13:25:46.476Z
bit-phpmailer-2021-3603 Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer 2024-03-06T11:01:27.687Z 2025-05-20T10:02:07.006Z
bit-node-2023-30585 2024-03-06T11:01:27.978Z 2025-11-06T13:25:46.476Z
bit-golang-2022-28327 2024-03-06T11:01:28.062Z 2025-04-03T14:40:37.652Z
bit-discourse-2023-22468 Discourse vulnerable to Cross-site Scripting in local oneboxes 2024-03-06T11:01:29.175Z 2025-05-20T10:02:07.006Z
bit-magento-2021-21018 Magnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution 2024-03-06T11:01:30.875Z 2026-03-20T09:47:33.381Z
bit-jenkins-2021-21682 2024-03-06T11:01:30.901Z 2025-04-03T14:40:37.652Z
bit-php-2023-3823 Security issue with external entity loading in XML without enabling it 2024-03-06T11:01:30.975Z 2025-05-20T10:02:07.006Z
bit-pillow-2023-50447 2024-03-06T11:01:31.102Z 2025-04-03T14:40:37.652Z
bit-openldap-2020-36223 2024-03-06T11:01:33.181Z 2025-04-03T14:40:37.652Z
bit-parse-2022-39396 Parse Server vulnerable to Remote Code Execution via prototype pollution in MongoDB BSON parser 2024-03-06T11:01:33.483Z 2025-05-20T10:02:07.006Z
bit-grafana-2020-12245 2024-03-06T11:01:33.687Z 2025-04-03T14:40:37.652Z
bit-gitlab-2023-3950 Cleartext Storage of Sensitive Information in GitLab 2024-03-06T11:01:33.975Z 2025-05-20T10:02:07.006Z
bit-mariadb-2022-27379 2024-03-06T11:01:34.082Z 2025-04-03T14:40:37.652Z
bit-moodle-2023-1402 Moodle: course participation report shows roles the user should not see 2024-03-06T11:01:34.997Z 2025-05-20T10:02:07.006Z
bit-airflow-2020-11978 2024-03-06T11:01:37.264Z 2025-10-22T09:08:25.162Z
bit-golang-2022-28131 Stack exhaustion from deeply nested XML documents in encoding/xml 2024-03-06T11:01:37.507Z 2025-05-20T10:02:07.006Z
bit-odoo-2021-23176 2024-03-06T11:01:37.700Z 2025-04-03T14:40:37.652Z
bit-phpmailer-2021-34551 2024-03-06T11:01:38.365Z 2025-04-03T14:40:37.652Z
bit-phpmyadmin-2022-23808 2024-03-06T11:01:38.671Z 2025-04-03T14:40:37.652Z
bit-node-2023-30581 2024-03-06T11:01:38.980Z 2025-11-06T13:25:46.476Z
bit-php-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP 2024-03-06T11:01:40.502Z 2025-05-20T10:02:07.006Z
bit-pillow-2023-44271 2024-03-06T11:01:40.663Z 2025-04-03T14:40:37.652Z
ID Description Updated
ID Description Published Updated
certa-2004-avi-228 Vulnérabilités dans Ethereal 2004-07-07T00:00:00.000000 2004-08-06T00:00:00.000000
certa-2004-avi-229 Vulnérabilité de nCipher netHSM 2004-07-07T00:00:00.000000 2004-07-07T00:00:00.000000
certa-2004-avi-230 Vulnérabilité dans le module de sécurité BSM sur Solaris 2004-07-07T00:00:00.000000 2004-07-07T00:00:00.000000
certa-2004-avi-231 Vulnérabilité de plusieurs navigateurs 2004-07-08T00:00:00.000000 2004-07-26T00:00:00.000000
certa-2004-avi-232 Vulnérabilité de la suite Mozilla sous Windows XP 2004-07-09T00:00:00.000000 2004-07-09T00:00:00.000000
certa-2004-avi-233 Vulnérabilité dans Shorewall 2004-07-09T00:00:00.000000 2004-07-09T00:00:00.000000
certa-2004-avi-234 Faille dans le serveur SSLtelnet 2004-07-09T00:00:00.000000 2004-07-19T00:00:00.000000
certa-2004-avi-235 Vulnérabilité d'Adobe Acrobat et d'Adobe Reader 2004-07-13T00:00:00.000000 2004-07-13T00:00:00.000000
certa-2004-avi-236 Vulnérabilité dans Microsoft Outlook Express 2004-07-15T00:00:00.000000 2004-07-15T00:00:00.000000
certa-2004-avi-237 Vulnérabilité dans Utility Manager sous Windows 2004-07-15T00:00:00.000000 2004-07-15T00:00:00.000000
certa-2004-avi-238 Vulnérabilité du composant POSIX de Microsoft 2004-07-15T00:00:00.000000 2004-07-15T00:00:00.000000
certa-2004-avi-239 Vulnérabilité dans Microsoft Internet Information Server (IIS) 4.0 2004-07-15T00:00:00.000000 2004-07-15T00:00:00.000000
certa-2004-avi-240 Vulnérabilité dans Microsoft Windows Task Scheduler 2004-07-15T00:00:00.000000 2004-07-16T00:00:00.000000
certa-2004-avi-241 Vulnérabilités dans les fichiers d'aide HTML de Microsoft 2004-07-15T00:00:00.000000 2004-07-15T00:00:00.000000
certa-2004-avi-242 Vulnérabilité dans l'interpréteur de commandes Windows 2004-07-15T00:00:00.000000 2004-07-15T00:00:00.000000
certa-2004-avi-243 Vulnérabilité de la bibliothèque wv 2004-07-15T00:00:00.000000 2004-07-30T00:00:00.000000
certa-2004-avi-244 Vulnérabilité de PHP 2004-07-15T00:00:00.000000 2005-03-01T00:00:00.000000
certa-2004-avi-245 Vulnérabilité dans FreeS/Wan, Openswan, StrongSwan et Super FreeS/Wan 2004-07-15T00:00:00.000000 2004-07-15T00:00:00.000000
certa-2004-avi-246 Vulnérabilité dans Novell BorderManager 2004-07-16T00:00:00.000000 2004-07-16T00:00:00.000000
certa-2004-avi-247 Vulnérabilité du module Apache mod_ssl 2004-07-16T00:00:00.000000 2005-01-20T00:00:00.000000
certa-2004-avi-248 Vulnérabilité de l2tpd 2004-07-19T00:00:00.000000 2004-07-22T00:00:00.000000
certa-2004-avi-249 Vulnérabilité de Solaris Volume Manager 2004-07-20T00:00:00.000000 2004-07-20T00:00:00.000000
certa-2004-avi-250 Vulnérabilités dans Cisco ONS 15000 2004-07-22T00:00:00.000000 2004-07-22T00:00:00.000000
certa-2004-avi-251 Vulnérabilité de Samba 2004-07-23T00:00:00.000000 2004-07-30T00:00:00.000000
certa-2004-avi-252 Vulnérabilité de Courier MTA, Courier-IMAP et Courier SqWebMail 2004-07-23T00:00:00.000000 2004-07-23T00:00:00.000000
certa-2004-avi-253 Vulnérabilité du service RPC DCE 2004-07-23T00:00:00.000000 2004-07-23T00:00:00.000000
certa-2004-avi-254 Multiples vulnérabilités sous HP-UX 2004-07-27T00:00:00.000000 2004-07-27T00:00:00.000000
certa-2004-avi-255 Vulnérabilité de Pavuk 2004-07-28T00:00:00.000000 2005-01-17T00:00:00.000000
certa-2004-avi-256 Vulnérabilité de subversion 2004-07-28T00:00:00.000000 2004-07-28T00:00:00.000000
certa-2004-avi-257 Vulnérabilité de SoX 2004-07-29T00:00:00.000000 2005-02-22T00:00:00.000000
ID Description Published Updated
jvndb-2014-000004 NeoFiler vulnerable to directory traversal 2014-01-10T14:44+09:00 2014-01-15T12:32+09:00
jvndb-2014-000005 EC-CUBE vulnerable to information alteration 2014-01-22T15:27+09:00 2014-01-27T09:51+09:00
jvndb-2014-000006 EC-CUBE vulnerable to authorization bypass 2014-01-22T15:28+09:00 2024-05-15T14:59+09:00
jvndb-2014-000007 Information disclosure vulnerability in Sleipnir Mobile for Android 2014-01-22T15:29+09:00 2014-01-27T09:47+09:00
jvndb-2014-001203 A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software 2014-01-22T18:06+09:00 2015-03-03T16:59+09:00
jvndb-2014-000008 SimZip (Simple Zip Viewer) vulnerable to directory traversal 2014-01-24T12:34+09:00 2014-01-28T18:03+09:00
jvndb-2014-000009 OpenPNE vulnerable to PHP Object Injection 2014-01-24T12:36+09:00 2014-01-28T18:02+09:00
jvndb-2014-000010 Multiple SQL injection vulnerabilities in Cybozu Garoon 2014-01-28T14:40+09:00 2014-01-30T14:22+09:00
jvndb-2014-000011 Sanshiro Series vulnerable to arbitrary code execution 2014-01-28T14:48+09:00 2014-01-30T14:24+09:00
jvndb-2014-000013 Joyful Note vulnerable to cross-site scripting 2014-01-31T13:41+09:00 2014-02-04T17:38+09:00
jvndb-2014-000014 Opera browser for Android issue in handling intent scheme URL's 2014-02-06T12:20+09:00 2014-02-10T19:09+09:00
jvndb-2014-000015 phpMyFAQ vulnerable to cross-site scripting 2014-02-07T12:25+09:00 2014-02-20T14:00+09:00
jvndb-2014-000016 phpMyFAQ vulnerable to cross-site request forgery 2014-02-07T12:26+09:00 2014-02-20T13:58+09:00
jvndb-2014-000017 Apache Commons FileUpload vulnerable to denial-of-service (DoS) 2014-02-10T17:21+09:00 2016-12-27T11:49+09:00
jvndb-2014-000012 Blackboard Vista/CE vulnerable to cross-site scripting 2014-02-21T14:12+09:00 2014-02-25T16:40+09:00
jvndb-2014-000019 AutoCAD vulnerable to arbitrary VBScript execution 2014-02-21T14:16+09:00 2014-02-25T16:39+09:00
jvndb-2014-000020 AutoCAD may insecurely load dynamic libraries 2014-02-21T14:19+09:00 2014-02-25T16:38+09:00
jvndb-2014-000025 XooNIps vulnerable to cross-site scripting 2014-02-26T15:19+09:00 2014-03-03T18:50+09:00
jvndb-2014-000026 Norman Security Suite vulnerable to privilege escalation 2014-02-26T15:20+09:00 2014-03-03T18:47+09:00
jvndb-2014-000021 Cybozu Garoon vulnerable to session management 2014-02-26T15:21+09:00 2014-03-03T18:45+09:00
jvndb-2014-000022 Denny's App for Android. contains an issue where it fails to verify SSL server certificates 2014-02-26T15:21+09:00 2014-03-03T18:49+09:00
jvndb-2014-000023 Cybozu Garoon vulnerable to directory traversal 2014-02-26T15:22+09:00 2014-03-03T18:44+09:00
jvndb-2014-000024 Cybozu Garoon vulnerable to SQL injection 2014-02-26T15:23+09:00 2014-03-03T18:42+09:00
jvndb-2014-001593 JP1/Integrated Management - Service Support vulnerable to cross-site scripting 2014-03-11T15:54+09:00 2015-03-03T16:59+09:00
jvndb-2014-001594 JP1/File Transmission Server / FTP vulnerable to access control violation 2014-03-11T16:33+09:00 2015-03-03T16:59+09:00
jvndb-2014-000030 Demaecan for Android. contains an issue where it fails to verify SSL server certificates 2014-03-17T13:43+09:00 2014-03-19T15:14+09:00
jvndb-2014-000031 Unzipper vulnerable to directory traversal 2014-03-17T13:45+09:00 2014-03-19T15:15+09:00
jvndb-2014-000027 sp mode mail issue when accessing attachments in incoming mail 2014-03-18T14:07+09:00 2014-03-24T19:04+09:00
jvndb-2014-000028 sp mode mail issue where emails in the process of creation may be accessed 2014-03-18T14:08+09:00 2014-03-25T19:24+09:00
jvndb-2014-000029 sp mode mail vulnerability where Java methods may be executed 2014-03-18T14:09+09:00 2014-03-25T19:25+09:00
ID Description Published Updated
cnvd-2015-01110 Adobe Reader Acrobat拒绝服务漏洞 2015-02-05 2015-02-12
cnvd-2015-00941 Adobe Flash Player存在未明空指针引用漏洞(CNVD-2015-00941) 2015-02-06 2015-02-09
cnvd-2015-00942 Adobe Flash Player存在未明堆缓冲区溢出漏洞(CNVD-2015-00942) 2015-02-06 2015-02-09
cnvd-2015-00943 Google Chrome for Android内存错误引用漏洞 2015-02-06 2015-02-09
cnvd-2015-00944 Google Chrome for Android存在未明漏洞(CNVD-2015-00944) 2015-02-06 2015-02-09
cnvd-2015-00945 Google Chrome for Android跨域绕过漏洞 2015-02-06 2015-02-09
cnvd-2015-00946 Google Chrome for Android特权提升漏洞 2015-02-06 2015-02-09
cnvd-2015-00947 Apache ActiveMQ Apollo XML外部实体注入漏洞 2015-02-06 2015-02-09
cnvd-2015-00948 Apache ActiveMQ XML外部实体注入漏洞 2015-02-06 2015-02-09
cnvd-2015-00949 Adobe Flash Player存在未明空指针引用漏洞(CNVD-2015-00949) 2015-02-06 2015-02-09
cnvd-2015-00950 Adobe Flash Player存在未明缓冲区溢出漏洞(CNVD-2015-00950) 2015-02-06 2015-02-09
cnvd-2015-00951 Adobe Flash Player存在未明空指针引用漏洞 2015-02-06 2015-02-09
cnvd-2015-00952 Adobe Flash Player存在未明堆缓冲区溢出漏洞(CNVD-2015-00952) 2015-02-06 2015-02-09
cnvd-2015-00953 Adobe Flash Player存在未明内存错误引用漏洞(CNVD-2015-00953) 2015-02-06 2015-02-09
cnvd-2015-00954 Adobe Flash Player存在未明内存破坏漏洞(CNVD-2015-00954) 2015-02-06 2015-02-09
cnvd-2015-00955 Adobe Flash Player存在未明内存错误引用漏洞(CNVD-2015-00955) 2015-02-06 2015-02-09
cnvd-2015-00956 Adobe Flash Player存在未明类型混淆漏洞(CNVD-2015-00956) 2015-02-06 2015-02-09
cnvd-2015-00957 Adobe Flash Player存在未明内存破坏漏洞(CNVD-2015-00957) 2015-02-06 2015-02-09
cnvd-2015-00958 Adobe Flash Player存在未明类型混淆漏洞 2015-02-06 2015-02-09
cnvd-2015-00959 Microsoft Internet Explorer同源策略安全绕过漏洞 2015-02-06 2015-02-09
cnvd-2015-00960 Cisco WebEx Meetings Server命令注入漏洞 2015-02-06 2015-02-09
cnvd-2015-00961 Adobe Flash Player存在未明内存破坏漏洞(CNVD-2015-00961) 2015-02-06 2015-02-09
cnvd-2015-00962 Adobe Flash Player存在未明内存错误引用漏洞(CNVD-2015-00962) 2015-02-06 2015-02-09
cnvd-2015-00963 Adobe Flash Player存在未明内存破坏漏洞(CNVD-2015-00963) 2015-02-06 2015-02-09
cnvd-2015-00964 Adobe Flash Player存在未明内存破坏漏洞(CNVD-2015-00964) 2015-02-06 2015-02-09
cnvd-2015-00965 Ektron CMS 'ServerControlWS.asmx' XML外部实体注入漏洞 2015-02-06 2015-02-09
cnvd-2015-00966 Ektron CMS XML外部实体注入漏洞 2015-02-06 2015-02-09
cnvd-2015-00967 Topline Systems Opportunity Form信息泄露漏洞 2015-02-06 2015-02-09
cnvd-2015-00968 file 'readelf.c'越界读取漏洞 2015-02-06 2015-02-09
cnvd-2015-00969 Libmspack CHM解压缩指针算术拒绝服务漏洞(CNVD-2015-00969) 2015-02-06 2015-02-09
ID Description Published Updated
bdu:2015-03381 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03382 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03383 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03384 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03385 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03386 Уязвимости операционной системы Debian GNU/Linux, позволяющие локальному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03387 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03388 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03389 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03390 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03391 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03392 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03393 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03394 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03395 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03396 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03397 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03398 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03399 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03400 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03401 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03402 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03403 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03404 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03405 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 05.07.2024
bdu:2015-03406 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03407 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03408 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03409 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03410 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
ID Description Updated
var-202001-1252 A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the m… 2022-05-04T09:26:12.722000Z
var-200312-0225 Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of … 2022-05-04T09:27:10.210000Z
var-200312-0227 The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that … 2022-05-04T09:27:10.240000Z
var-202112-2480 Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privile… 2022-05-04T09:27:27.309000Z
var-202112-2350 Certain NETGEAR devices are affected by command injection by an authenticated user. This … 2022-05-04T09:27:27.423000Z
var-202112-1089 The ioLogik E1242 series are daisy-chain Ethernet switches that support the most commonly… 2022-05-04T09:27:31.098000Z
var-202108-2569 207W Network Camera is a network camera. AXIS 207W Network Camera has an unauthorized… 2022-05-04T09:27:35.688000Z
var-202108-2548 Hangzhou Hikvision System Technology Co., Ltd. is a smart IoT solution provider and opera… 2022-05-04T09:27:35.702000Z
var-202108-2527 Shenzhen Airspace Technology Co., Ltd. ("Airspace Technology" for short) is a network com… 2022-05-04T09:27:35.713000Z
var-202108-2506 Lexmark (NYSE: LXK) is an American company that is a developer and manufacturer of laser … 2022-05-04T09:27:35.725000Z
var-202108-2485 Axis is an IT company that specializes in providing network video solutions. AXIS P55… 2022-05-04T09:27:35.736000Z
var-202108-2464 SCX-8123 is a multifunction printer of Samsung (China) Investment Co., Ltd. Samsung (… 2022-05-04T09:27:35.745000Z
var-202108-2443 SCX-8025 is a multi-function printer of Samsung (China) Investment Co., Ltd. Samsung … 2022-05-04T09:27:35.756000Z
var-202108-2422 Cisco Systems (China) Network Technology Co., Ltd., business scope: research and developm… 2022-05-04T09:27:35.768000Z
var-202108-2401 Matsushita Electric (China) Co., Ltd. is a manufacturer mainly responsible for the sales … 2022-05-04T09:27:35.781000Z
var-202108-2380 Fuji Xerox (China) Co., Ltd. was established on January 3, 1995. It is a wholly-owned hol… 2022-05-04T09:27:35.793000Z
var-202108-2359 SL-M4075FR is a printer device of Samsung (China) Investment Co., Ltd. Samsung (China… 2022-05-04T09:27:35.804000Z
var-202108-2338 Sharp Trading (China) Co., Ltd. is a foreign-funded enterprise that distributes and whole… 2022-05-04T09:27:35.816000Z
var-202108-2317 PRTG Network Monitor is a computer network monitor that can monitor network computers, ro… 2022-05-04T09:27:35.827000Z
var-202108-2296 NR255G is a router of Shenzhen Leike Industrial Co., Ltd. Shenzhen Leike Industrial C… 2022-05-04T09:27:35.838000Z
var-202107-1905 Seiko Cloud MES is mainly aimed at on-site management of small and medium-sized manufactu… 2022-05-04T09:27:40.408000Z
var-202107-1884 Axis is an IT company that specializes in providing network video solutions. AXIS 241… 2022-05-04T09:27:40.420000Z
var-202107-1863 HP LaserJet Pro M706n is a printer of Hewlett-Packard Trading (Shanghai) Co., Ltd. Th… 2022-05-04T09:27:40.433000Z
var-202107-1842 TRENDnet is one of the world's major data network professional manufacturers, headquarter… 2022-05-04T09:27:40.444000Z
var-202107-1821 Razer Phone2 is a smart phone of the Razer brand series. Razer Phone2 has an informat… 2022-05-04T09:27:40.455000Z
var-202107-1800 Shenzhen Huashi Meida Information Technology Co., Ltd. is a smart hotel IT service provid… 2022-05-04T09:27:40.470000Z
var-202107-1779 FWB, FAC series is a router of Shenzhen Xunjie Communication Technology Co., Ltd., includ… 2022-05-04T09:27:40.482000Z
var-202107-1758 Hewlett-Packard Trading (Shanghai) Co., Ltd. is a company whose business scope includes c… 2022-05-04T09:27:40.493000Z
var-202107-1737 P1355 is a network camera of Axis Communications AB. Axis Communications AB P1355 has… 2022-05-04T09:27:40.502000Z
var-202107-1716 Huawei HG659 is a home gateway. Huawei HG659 has arbitrary file reading vulnerabiliti… 2022-05-04T09:27:40.512000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated