Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-26944 |
8.8 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T15:51:30.118Z | 2026-04-22T03:55:56.073Z |
| CVE-2026-24468 |
5.3 (3.1)
|
OpenAEV Vulnerable to Username/Email Enumeration Throu… |
OpenAEV-Platform |
openaev |
2026-04-20T15:45:48.572Z | 2026-04-20T16:24:44.061Z |
| CVE-2026-24467 |
9.1 (3.1)
|
OpenAEV's Improper Password Reset Token Management Lea… |
OpenAEV-Platform |
openaev |
2026-04-20T15:40:56.203Z | 2026-04-20T16:21:50.299Z |
| CVE-2026-6066 |
7.1 (3.1)
|
Unencrypted Client‑Server Communication in ConnectWise… |
ConnectWise |
Automate |
2026-04-20T15:26:31.843Z | 2026-04-20T16:13:06.767Z |
| CVE-2026-41245 |
5.9 (3.1)
|
Junrar: Path Traversal (Zip-Slip) via Sibling Director… |
junrar |
junrar |
2026-04-20T15:15:24.540Z | 2026-04-20T16:35:09.317Z |
| CVE-2026-40896 |
6.5 (3.1)
|
OpenProject has Cross-Project Meeting Agenda Item Inje… |
opf |
openproject |
2026-04-20T15:12:52.279Z | 2026-04-20T16:13:10.714Z |
| CVE-2026-6652 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
Pagekit CMS StringStorage Template PhpEngine.php evalu… |
Pagekit |
CMS |
2026-04-20T15:00:22.525Z | 2026-04-20T16:14:56.950Z |
| CVE-2026-3219 |
4.6 (4.0)
|
pip doesn't reject concatenated ZIP and tar archives |
Python Packaging Authority |
pip |
2026-04-20T14:55:38.282Z | 2026-04-20T20:15:23.710Z |
| CVE-2026-39918 |
9.2 (4.0)
9.8 (3.1)
|
Vvveb < 1.0.8.1 Code Injection via Installation Endpoint |
givanz |
Vvveb |
2026-04-20T14:46:33.549Z | 2026-04-20T15:36:55.619Z |
| CVE-2026-6651 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
erponline.xyz ERP Online Inventory Edit Item cross sit… |
erponline.xyz |
ERP Online |
2026-04-20T14:45:11.560Z | 2026-04-20T15:21:57.084Z |
| CVE-2026-6650 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
Z-BlogPHP ZBA File app_upload.php UnPack unrestricted upload |
n/a |
Z-BlogPHP |
2026-04-20T14:30:13.825Z | 2026-04-20T16:23:25.105Z |
| CVE-2026-34428 |
8.3 (4.0)
7.7 (3.1)
|
Vvveb < 1.0.8.1 SSRF via oEmbedProxy |
givanz |
Vvveb |
2026-04-20T13:55:36.802Z | 2026-04-20T14:49:33.646Z |
| CVE-2026-34427 |
8.7 (4.0)
8.8 (3.1)
|
Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save |
givanz |
Vvveb |
2026-04-20T13:55:15.311Z | 2026-04-20T14:51:12.245Z |
| CVE-2026-34429 |
5.1 (4.0)
5.4 (3.1)
|
Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename |
givanz |
Vvveb |
2026-04-20T13:54:37.019Z | 2026-04-20T14:56:19.205Z |
| CVE-2026-5760 |
9.8 (3.1)
|
CVE-2026-5760 |
SGLang |
SGLang |
2026-04-20T13:46:23.603Z | 2026-04-20T15:29:54.098Z |
| CVE-2026-6369 |
5.7 (4.0)
|
Exposed Session Token in canonical-livepatch client snap |
Canonical |
canonical-livepatch |
2026-04-20T13:38:13.691Z | 2026-04-20T14:06:18.537Z |
| CVE-2026-4048 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerabili… |
Progress Software |
LoadMaster |
2026-04-20T13:36:49.475Z | 2026-04-22T03:55:54.495Z |
| CVE-2026-3519 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerabili… |
Progress Software |
LoadMaster |
2026-04-20T13:32:50.259Z | 2026-04-22T03:55:53.355Z |
| CVE-2026-6649 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Qibo CMS headers server-side request forgery |
Qibo |
CMS |
2026-04-20T13:30:41.191Z | 2026-04-20T14:14:18.603Z |
| CVE-2026-3518 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerabili… |
Progress Software |
LoadMaster |
2026-04-20T13:29:33.794Z | 2026-04-22T03:55:52.242Z |
| CVE-2026-33557 |
N/A
|
Apache Kafka: Missing JWT token validation in OAUTHBEA… |
Apache Software Foundation |
Apache Kafka |
2026-04-20T13:28:43.669Z | 2026-04-20T14:30:30.936Z |
| CVE-2025-66335 |
N/A
|
Apache Doris MCP Server: MCP SQL inject |
Apache Software Foundation |
Apache Doris MCP Server |
2026-04-20T13:27:27.764Z | 2026-04-20T14:17:11.395Z |
| CVE-2026-3517 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerabili… |
Progress Software |
LoadMaster |
2026-04-20T13:22:54.867Z | 2026-04-22T03:55:51.123Z |
| CVE-2026-33558 |
N/A
|
Apache Kafka, Apache Kafka Clients: Information Exposu… |
Apache Software Foundation |
Apache Kafka |
2026-04-20T13:20:38.059Z | 2026-04-20T14:20:41.640Z |
| CVE-2026-6648 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
Qibo CMS Internal Message cross site scripting |
Qibo |
CMS |
2026-04-20T13:00:44.627Z | 2026-04-20T14:51:00.368Z |
| CVE-2026-6636 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
p2r3 convert API buildCache.js Bun.serve path traversal |
p2r3 |
convert |
2026-04-20T12:00:17.473Z | 2026-04-20T14:58:24.131Z |
| CVE-2026-5958 |
2.1 (4.0)
|
Race Condition in GNU Sed |
GNU |
Sed |
2026-04-20T11:59:32.214Z | 2026-04-20T13:25:59.530Z |
| CVE-2026-6635 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
rowboatlabs rowboat tools_webhook app.py tool_call imp… |
rowboatlabs |
rowboat |
2026-04-20T11:45:12.769Z | 2026-04-20T13:26:31.802Z |
| CVE-2026-6634 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
usememos UpdateInstanceSetting App.tsx memos_access_to… |
usememos |
memos |
2026-04-20T11:30:13.847Z | 2026-04-20T15:02:48.499Z |
| CVE-2026-6633 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
Yifang CMS Extended Management L_rbac_admin.php store … |
Yifang |
CMS |
2026-04-20T11:15:11.127Z | 2026-04-20T13:01:44.244Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-11249 |
N/A
|
This CVE id was assigned as a duplicate of CVE-2025-66414. | N/A | N/A | 2026-04-20T18:52:18.108Z | |
| CVE-2026-41389 |
6.3 (4.0)
5.8 (3.1)
|
OpenClaw 2026.4.7 < 2026.4.15 - Arbitrary File Read vi… |
OpenClaw |
OpenClaw |
2026-04-20T17:48:43.704Z | 2026-04-20T18:05:03.103Z |
| CVE-2026-39112 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in Apartment V… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:07:53.479Z |
| CVE-2026-39111 |
7.5 (3.1)
|
SQL Injection vulnerability in Apartment Visitors… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:12:54.038Z |
| CVE-2026-39110 |
8.2 (3.1)
|
SQL Injection vulnerability in Apartment Visitors… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:34:55.729Z |
| CVE-2026-39109 |
9.4 (3.1)
|
SQL Injection vulnerability in Apartment Visitors… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:31:04.461Z |
| CVE-2026-26399 |
5.3 (3.1)
|
A stack-use-after-return issue exists in the Ardu… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-22T19:53:16.622Z |
| CVE-2026-23758 |
5.1 (4.0)
6.4 (4.0)
|
GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter |
GFI Software |
HelpDesk |
2026-04-20T17:30:06.853Z | 2026-04-20T17:45:55.788Z |
| CVE-2026-23757 |
5.1 (4.0)
5.4 (3.1)
|
GFI HelpDesk < 4.99.10 Stored XSS via Reports Module |
GFI Software |
HelpDesk |
2026-04-20T17:27:56.067Z | 2026-04-20T18:07:01.630Z |
| CVE-2026-23756 |
5.1 (4.0)
5.4 (3.1)
|
GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter St… |
GFI Software |
HelpDesk |
2026-04-20T17:30:51.162Z | 2026-04-20T18:08:49.925Z |
| CVE-2026-23753 |
4.8 (4.0)
4.8 (3.1)
|
GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter |
GFI Software |
HelpDesk |
2026-04-20T17:33:59.134Z | 2026-04-21T13:31:13.580Z |
| CVE-2026-23752 |
4.8 (4.0)
4.8 (3.1)
|
GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter |
GFI Software |
HelpDesk |
2026-04-20T17:33:23.424Z | 2026-04-20T18:09:59.603Z |
| CVE-2026-6662 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
ericc-ch copilot-api Token Endpoint server.ts cors cro… |
ericc-ch |
copilot-api |
2026-04-20T17:00:17.800Z | 2026-04-20T18:09:27.691Z |
| CVE-2026-41445 |
8.7 (4.0)
8.8 (3.1)
|
KissFFT Integer Overflow Heap Buffer Overflow via kiss… |
mborgerding |
kissfft |
2026-04-20T16:18:50.371Z | 2026-04-20T17:57:10.156Z |
| CVE-2026-40488 |
8.7 (4.0)
|
OpenMage LTS has Customer File Upload Extension Blockl… |
OpenMage |
magento-lts |
2026-04-20T16:23:07.429Z | 2026-04-20T16:55:05.724Z |
| CVE-2026-40098 |
5.3 (4.0)
|
OpenMage LTS imports cross-user wishlist item via shar… |
OpenMage |
magento-lts |
2026-04-20T16:19:55.157Z | 2026-04-20T18:10:44.490Z |
| CVE-2026-35154 |
6.3 (3.1)
|
Dell PowerProtect Data Domain appliances, version… |
Dell |
PowerProtect Data Domain appliances |
2026-04-20T16:50:56.856Z | 2026-04-22T03:56:08.697Z |
| CVE-2026-30269 |
9.9 (3.1)
|
Improper access control in Doorman v0.1.0 and v1.… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:23:39.346Z |
| CVE-2026-30266 |
7.8 (3.1)
|
Insecure Permissions vulnerability in DeepCool De… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-23T13:40:34.695Z |
| CVE-2026-28684 |
6.6 (3.1)
|
python-dotenv: Symlink following in set_key allows arb… |
theskumar |
python-dotenv |
2026-04-20T16:25:12.302Z | 2026-04-20T17:43:09.477Z |
| CVE-2026-26951 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:44:49.612Z | 2026-04-22T03:56:07.580Z |
| CVE-2026-26943 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:28:53.110Z | 2026-04-22T03:56:04.147Z |
| CVE-2026-26942 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 8.5 throu… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:34:43.219Z | 2026-04-22T03:56:05.261Z |
| CVE-2026-25525 |
4.9 (3.1)
|
OpenMage LTS has Path Traversal Filter Bypass in Dataf… |
OpenMage |
magento-lts |
2026-04-20T16:14:14.366Z | 2026-04-21T13:27:55.707Z |
| CVE-2026-25524 |
8.1 (3.1)
|
OpenMage LTS's Phar Deserialization leads to Remote Co… |
OpenMage |
magento-lts |
2026-04-20T16:11:16.922Z | 2026-04-20T16:54:43.603Z |
| CVE-2026-24506 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:22:37.689Z | 2026-04-22T03:56:02.944Z |
| CVE-2026-24505 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 8.5 throu… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:15:46.863Z | 2026-04-22T03:56:00.561Z |
| CVE-2026-24504 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:08:35.314Z | 2026-04-22T03:55:59.007Z |
| CVE-2026-22761 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 8.5 throu… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:39:40.268Z | 2026-04-22T03:56:06.445Z |
| CVE-2025-66954 |
6.5 (3.1)
|
A vulnerability exists in the Buffalo Link Statio… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T16:54:28.824Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vqmj-h423-xx64 |
4.3 (3.1)
2.1 (4.0)
|
A vulnerability was found in EMQ EMQX Enterprise up to 6.1.0. The impacted element is an unknown fu… | 2026-04-19T12:31:15Z | 2026-04-19T12:31:15Z |
| ghsa-rgfh-mp7v-25f9 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.… | 2026-04-19T12:31:15Z | 2026-04-19T12:31:15Z |
| ghsa-m9r6-cg89-ghg2 |
8.8 (3.1)
7.4 (4.0)
|
A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affect… | 2026-04-19T09:30:13Z | 2026-04-19T09:30:13Z |
| ghsa-fjp8-jqj5-cwp2 |
4.7 (3.1)
2.0 (4.0)
|
A vulnerability was detected in EyouCMS up to 1.7.1. This issue affects the function edit_adminlogo… | 2026-04-19T09:30:13Z | 2026-04-19T09:30:13Z |
| ghsa-8q43-5p52-h357 |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function … | 2026-04-19T09:30:13Z | 2026-04-19T09:30:13Z |
| ghsa-7786-mqff-chgr |
7.3 (3.1)
5.5 (4.0)
|
A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage of… | 2026-04-19T09:30:13Z | 2026-04-19T09:30:13Z |
| ghsa-x8cm-r99c-gv26 |
4.3 (3.1)
5.3 (4.0)
|
A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 o… | 2026-04-19T06:31:22Z | 2026-04-19T06:31:22Z |
| ghsa-w3fc-f758-c6x7 |
6.4 (3.1)
|
The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cr… | 2026-04-19T06:31:22Z | 2026-04-19T06:31:22Z |
| ghsa-gwjg-rpxc-39ph |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-04-19T00:31:23Z | 2026-04-19T00:31:23Z |
| ghsa-5w6h-pjw6-wvc6 |
5.4 (3.1)
|
apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session … | 2026-04-18T15:34:15Z | 2026-04-22T17:36:41Z |
| ghsa-vpmc-9q98-4qjf |
6.4 (3.1)
|
The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … | 2026-04-18T12:30:17Z | 2026-04-18T12:30:17Z |
| ghsa-jx47-j339-6qpw |
5.4 (3.1)
|
The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions… | 2026-04-18T12:30:17Z | 2026-04-18T12:30:17Z |
| ghsa-23v6-h45q-rxch |
6.4 (3.1)
|
The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scr… | 2026-04-18T12:30:17Z | 2026-04-18T12:30:17Z |
| ghsa-w9r4-94fj-xp69 |
3.7 (3.1)
|
Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries | 2026-04-18T09:30:20Z | 2026-04-22T17:25:55Z |
| ghsa-w7cf-2pmc-5m4c |
5.3 (3.1)
|
Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false | 2026-04-18T09:30:20Z | 2026-04-22T17:17:28Z |
| ghsa-hc77-37fq-x324 |
4.0 (3.1)
|
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflo… | 2026-04-18T09:30:20Z | 2026-04-18T09:30:20Z |
| ghsa-h97w-pm3w-mwmc |
7.5 (3.1)
|
Apache Airflow allows users with asset materialize permissions to trigger DAGs outside of their per… | 2026-04-18T09:30:20Z | 2026-04-22T17:25:30Z |
| ghsa-6ffj-2wg2-w45j |
9.8 (3.1)
|
Apache Airflow allows code execution through crafted XCom payloads | 2026-04-18T09:30:20Z | 2026-04-21T22:50:35Z |
| ghsa-6337-2587-f2jq |
8.8 (3.1)
|
An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the … | 2026-04-18T09:30:20Z | 2026-04-20T18:31:45Z |
| ghsa-vf7g-wm62-vfxh |
6.4 (3.1)
|
The Flipbox Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… | 2026-04-18T06:30:14Z | 2026-04-18T06:30:14Z |
| ghsa-cwq2-35x4-44pq |
8.8 (3.1)
|
The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arb… | 2026-04-18T06:30:14Z | 2026-04-18T06:30:14Z |
| ghsa-7m2j-268v-rc6r |
6.4 (3.1)
|
The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Sit… | 2026-04-18T06:30:14Z | 2026-04-18T06:30:14Z |
| ghsa-5pgv-4jf4-9r43 |
6.9 (3.1)
|
In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 … | 2026-04-18T06:30:14Z | 2026-04-18T06:30:14Z |
| ghsa-jxx9-cx33-fcm4 |
6.1 (3.1)
|
The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode_… | 2026-04-18T03:31:06Z | 2026-04-18T03:31:06Z |
| ghsa-5v87-p3g9-j392 |
6.4 (3.1)
|
The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkin_plac… | 2026-04-18T03:31:06Z | 2026-04-18T03:31:06Z |
| ghsa-8m29-fpq5-89jj |
9.3 (4.0)
|
Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling | 2026-04-18T01:15:24Z | 2026-04-18T01:15:24Z |
| ghsa-29x4-r6jv-ff4w |
6.9 (4.0)
|
Zebra Vulnerable to Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients | 2026-04-18T01:15:10Z | 2026-04-18T01:15:10Z |
| ghsa-452v-w3gx-72wg |
9.2 (4.0)
|
Zebra has rk Identity Point Panic in Transaction Verification | 2026-04-18T01:14:57Z | 2026-04-18T01:14:57Z |
| ghsa-9j88-vvj5-vhgr |
6.5 (3.1)
|
MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade | 2026-04-18T01:13:46Z | 2026-04-18T01:13:46Z |
| ghsa-cjcx-jfp2-f7m2 |
8.7 (3.1)
|
pretalx vulnerable to stored cross-site scripting in organizer search typeahead | 2026-04-18T01:11:38Z | 2026-04-18T01:11:38Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-43170 |
6.5 (3.1)
|
An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6… | tryton | 2022-03-10T17:47:00+00:00 | 2024-11-21T14:23:02.248212+00:00 |
| pysec-2022-186 |
|
Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" a… | pyspark | 2022-03-10T09:15:00Z | 2022-05-17T21:40:53.336457Z |
| pysec-2022-34 |
|
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which… | httpie | 2022-03-07T23:15:00Z | 2022-03-08T02:44:28.415437Z |
| pysec-2022-161 |
|
Open Redirect in GitHub repository archivy/archivy prior to 1.7.0. | archivy | 2022-03-06T23:15:00Z | 2022-03-11T17:31:40.885093Z |
| pysec-2022-181 |
|
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0. | pytorch-lightning | 2022-03-05T22:15:00Z | 2022-04-11T00:47:32.240193Z |
| pysec-2022-31 |
|
The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE… | weblate | 2022-03-04T20:15:00Z | 2022-03-04T21:31:07.631627Z |
| pysec-2022-162 |
|
Weblate is a web based localization tool with tight version control integration. Prior to… | weblate | 2022-03-04T17:15:00Z | 2022-03-11T17:35:01.661733Z |
| pysec-2022-160 |
|
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Pr… | twisted | 2022-03-03T21:15:00Z | 2022-03-10T17:35:00.079970Z |
| pysec-2022-164 |
|
A flaw was found in Ansible Engine's ansible-connection module, where sensitive informati… | ansible | 2022-03-03T19:15:00Z | 2022-03-15T14:28:02.422806Z |
| pysec-2022-159 |
|
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/sc… | scrapy | 2022-03-02T04:15:00Z | 2022-03-09T19:24:19.981012Z |
| pysec-2022-43052 |
|
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… | request-util | 2022-03-01T21:15:00+00:00 | 2023-07-03T20:33:00+00:00 |
| pysec-2022-43051 |
|
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… | pyquest | 2022-03-01T21:15:00+00:00 | 2023-07-03T20:33:00+00:00 |
| pysec-2022-35 |
|
Weblate is a copyleft software web-based continuous localization system. Versions prior t… | weblate | 2022-02-25T21:15:00Z | 2022-03-08T17:35:37.351702Z |
| pysec-2022-30 |
|
In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize us… | apache-airflow | 2022-02-25T09:15:00Z | 2022-03-04T21:27:14.083744Z |
| pysec-2022-29 |
|
It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attack… | apache-airflow | 2022-02-25T09:15:00Z | 2022-03-04T21:27:14.014874Z |
| pysec-2022-33 |
|
b2-sdk-python is a python library to access cloud storage provided by backblaze. Linux an… | b2sdk | 2022-02-23T23:15:00Z | 2022-03-07T17:33:46.032301Z |
| pysec-2022-32 |
|
B2 Command Line Tool is the official command line tool for the backblaze cloud storage se… | b2 | 2022-02-23T23:15:00Z | 2022-03-07T17:33:45.997096Z |
| pysec-2022-28 |
|
Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1. | mlflow | 2022-02-23T09:15:00Z | 2022-03-02T06:39:30.836439Z |
| pysec-2022-38 |
|
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable… | cobbler | 2022-02-20T18:15:00Z | 2022-03-09T00:15:58.984313Z |
| pysec-2022-37 |
|
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function che… | cobbler | 2022-02-19T00:15:00Z | 2022-03-09T00:15:58.932039Z |
| pysec-2022-27 |
|
twisted is an event-driven networking engine written in Python. In affected versions twis… | twisted | 2022-02-07T22:15:00Z | 2022-02-15T06:31:29.205025Z |
| pysec-2022-99 |
|
Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-05-23T17:22:06.927466Z |
| pysec-2022-98 |
|
Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grapple… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-03-09T00:17:36.051133Z |
| pysec-2022-97 |
|
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a den… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-03-09T00:17:35.928489Z |
| pysec-2022-96 |
|
Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grapple… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-03-09T00:17:35.797116Z |
| pysec-2022-95 |
|
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a den… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-03-09T00:17:35.674710Z |
| pysec-2022-94 |
|
Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorF… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-03-09T00:17:35.562344Z |
| pysec-2022-93 |
|
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-03-09T00:17:35.438139Z |
| pysec-2022-92 |
|
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a den… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-03-09T00:17:35.311751Z |
| pysec-2022-91 |
|
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a den… | tensorflow-cpu | 2022-02-04T23:15:00Z | 2022-03-09T00:17:35.169396Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2036 | Malicious code in @emilgroup/auth-sdk (npm) | 2026-03-22T17:49:17Z | 2026-03-26T00:50:43Z |
| mal-2026-2033 | Malicious code in @emilgroup/accounting-sdk (npm) | 2026-03-22T17:48:24Z | 2026-03-26T00:50:43Z |
| mal-2026-2031 | Malicious code in @emilgroup/account-sdk (npm) | 2026-03-22T17:45:33Z | 2026-03-26T00:50:43Z |
| mal-2026-2067 | Malicious code in babel-plugin-react-pure-component (npm) | 2026-03-22T17:43:09Z | 2026-03-26T00:50:44Z |
| mal-2026-2030 | Malicious code in @pypestream/floating-ui-dom (npm) | 2026-03-22T17:11:18Z | 2026-03-26T00:50:43Z |
| mal-2026-2028 | Malicious code in pipinpeace-bind (PyPI) | 2026-03-22T16:56:09Z | 2026-03-22T16:56:09Z |
| mal-2026-2029 | Malicious code in pipinpeace-reverse (PyPI) | 2026-03-22T16:50:18Z | 2026-03-22T16:50:18Z |
| mal-2026-2027 | Malicious code in opengov-k6-core (npm) | 2026-03-22T16:22:33Z | 2026-03-26T00:50:47Z |
| mal-2026-2026 | Malicious code in pipinpeace-env (PyPI) | 2026-03-22T15:49:50Z | 2026-03-22T15:49:50Z |
| mal-2026-2025 | Malicious code in remitly-blog (npm) | 2026-03-22T07:20:42Z | 2026-03-23T05:16:30Z |
| mal-2026-2024 | Malicious code in @mesh-helpers/themehelper (npm) | 2026-03-22T06:07:52Z | 2026-03-23T05:16:24Z |
| mal-2026-2022 | Malicious code in @mesh-components/card (npm) | 2026-03-22T05:55:53Z | 2026-03-23T05:16:24Z |
| mal-2026-2023 | Malicious code in @mesh-components/customthemeprovider (npm) | 2026-03-22T05:55:36Z | 2026-03-23T05:16:24Z |
| mal-2026-2021 | Malicious code in @mesh-helpers/common (npm) | 2026-03-22T05:30:41Z | 2026-03-23T05:16:24Z |
| mal-2026-2018 | Malicious code in @modals/blockchain (npm) | 2026-03-21T22:54:09Z | 2026-03-23T05:16:24Z |
| mal-2026-2019 | Malicious code in @modals/layout (npm) | 2026-03-21T22:54:07Z | 2026-03-23T05:16:24Z |
| mal-2026-2020 | Malicious code in aiolrucache (PyPI) | 2026-03-21T22:53:52Z | 2026-03-21T22:53:52Z |
| mal-2026-2017 | Malicious code in thisismytest (PyPI) | 2026-03-21T18:24:07Z | 2026-03-22T23:12:31Z |
| mal-2026-2016 | Malicious code in qyrm-pipinject4 (PyPI) | 2026-03-21T15:46:26Z | 2026-03-21T15:46:26Z |
| mal-2026-2015 | Malicious code in lingewindows (npm) | 2026-03-21T15:46:11Z | 2026-03-23T05:16:28Z |
| mal-2026-2014 | Malicious code in address-autocompletetest (npm) | 2026-03-21T15:30:37Z | 2026-03-23T05:16:25Z |
| mal-2026-2013 | Malicious code in nump (PyPI) | 2026-03-21T14:34:04Z | 2026-03-21T14:34:15Z |
| mal-2026-2012 | Malicious code in characterai-poc (npm) | 2026-03-21T13:28:49Z | 2026-03-24T13:50:58Z |
| mal-2026-2011 | Malicious code in cms-catalogue (npm) | 2026-03-21T10:35:35Z | 2026-03-23T05:16:26Z |
| mal-2026-2010 | Malicious code in yelp-react-component-badge (npm) | 2026-03-21T09:50:35Z | 2026-03-24T13:51:03Z |
| mal-2026-2009 | Malicious code in repo-typescript-config (npm) | 2026-03-21T06:08:24Z | 2026-03-24T13:51:02Z |
| mal-2026-2008 | Malicious code in nintendoamerica-ncom (npm) | 2026-03-21T05:40:41Z | 2026-03-24T13:51:01Z |
| mal-2026-2007 | Malicious code in uniswap-info (npm) | 2026-03-21T04:51:35Z | 2026-03-23T05:16:31Z |
| mal-2026-2006 | Malicious code in mangrove-sdk (PyPI) | 2026-03-20T21:03:39Z | 2026-03-20T21:03:40Z |
| mal-2026-2005 | Malicious code in efghr-honeybee-sdk (PyPI) | 2026-03-20T20:54:43Z | 2026-03-20T20:54:43Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2343 | SolarWinds SWOSH: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-20T22:00:00.000+00:00 | 2025-10-20T22:00:00.000+00:00 |
| wid-sec-w-2025-2342 | MongoDB: Schwachstelle ermöglicht Denial of Service | 2025-10-20T22:00:00.000+00:00 | 2025-10-20T22:00:00.000+00:00 |
| wid-sec-w-2025-2341 | MediaWiki Extensions: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-10-20T22:00:00.000+00:00 | 2025-10-22T22:00:00.000+00:00 |
| wid-sec-w-2025-2340 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-19T22:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2339 | ImageMagick (BMP decoder): Schwachstelle ermöglicht Denial of Service | 2025-10-19T22:00:00.000+00:00 | 2025-12-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2338 | IBM Sterling Connect:Direct: Schwachstelle ermöglicht Denial of Service | 2025-10-19T22:00:00.000+00:00 | 2025-10-19T22:00:00.000+00:00 |
| wid-sec-w-2025-2337 | Flowise: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-10-19T22:00:00.000+00:00 | 2025-10-19T22:00:00.000+00:00 |
| wid-sec-w-2025-2336 | MediaWiki Extensions: Mehrere Schwachstellen | 2025-10-19T22:00:00.000+00:00 | 2025-10-22T22:00:00.000+00:00 |
| wid-sec-w-2025-2335 | Synacor Zimbra: Schwachstelle ermöglicht Manipulation von Dateien | 2025-10-16T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2334 | Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen | 2025-10-16T22:00:00.000+00:00 | 2025-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2333 | Pega Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-16T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2332 | Strapi: Mehrere Schwachstellen | 2025-10-16T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2331 | MinIO: Schwachstelle ermöglicht Privilegieneskalation | 2025-10-16T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2330 | Moxa Router: Mehrere Schwachstellen | 2025-10-16T22:00:00.000+00:00 | 2025-10-19T22:00:00.000+00:00 |
| wid-sec-w-2025-2329 | cPanel/WHM (PostgreSQL, Perl): Mehrere Schwachstellen | 2025-10-16T22:00:00.000+00:00 | 2025-10-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2328 | IBM MQ: Schwachstelle ermöglicht Denial of Service | 2025-10-16T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2327 | binutils: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-16T22:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2326 | Icinga: Mehrere Schwachstellen | 2025-10-16T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2325 | xpdf: Schwachstelle ermöglicht Denial of Service | 2025-10-16T22:00:00.000+00:00 | 2025-12-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2324 | HCL BigFix Modern Client Management (MCM) and BigFix Mobile: Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen | 2025-10-15T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2323 | Cisco IP Phone: Mehrere Schwachstellen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2322 | Samba: Mehrere Schwachstellen | 2025-10-15T22:00:00.000+00:00 | 2025-11-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2321 | Devolutions Server: Schwachstelle ermöglicht Manipulation von Dateien | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2320 | VMware Tanzu Spring Framework: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-15T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2319 | Apache ActiveMQ: Schwachstelle ermöglicht Codeausführung | 2025-10-15T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-2318 | VMware Tanzu Spring Cloud: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2317 | Ubiquiti UniFi: Schwachstelle ermöglicht Ausführung von Debug-Funktionen | 2025-10-15T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2316 | Nextcloud "Tables" App: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2315 | Mattermost Server und Mobile: Mehrere Schwachstellen | 2025-10-15T22:00:00.000+00:00 | 2025-11-27T23:00:00.000+00:00 |
| wid-sec-w-2025-2314 | HCL BigFix: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-10-15T22:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-128-02 | SUBNET Substation Server | 2024-05-07T06:00:00.000000Z | 2024-05-07T06:00:00.000000Z |
| icsa-24-128-01 | PTC Codebeamer | 2024-05-07T06:00:00.000000Z | 2024-05-07T06:00:00.000000Z |
| icsa-24-123-02 | Delta Electronics DIAEnergie | 2024-05-02T06:00:00.000000Z | 2024-05-02T06:00:00.000000Z |
| icsa-24-123-01 | CyberPower PowerPanel Business | 2024-05-02T06:00:00.000000Z | 2025-08-07T06:00:00.000000Z |
| icsa-24-354-02 | Hitachi Energy SDM600 | 2024-04-30T12:30:00.000000Z | 2024-04-30T12:30:00.000000Z |
| icsa-24-121-01 | Delta Electronics CNCSoft-G2 DOPSoft (Update A) | 2024-04-30T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-023-02 | Hitachi Energy RTU500 Series Product (Update B) | 2024-04-30T00:00:00.000000Z | 2026-03-03T07:00:00.000000Z |
| icsa-24-116-04 | Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC | 2024-04-25T06:00:00.000000Z | 2024-04-25T06:00:00.000000Z |
| icsa-24-116-01 | Hitachi Energy RTU500 Series | 2024-04-25T06:00:00.000000Z | 2024-04-25T06:00:00.000000Z |
| icsa-24-116-03 | Siemens RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW | 2024-04-19T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-109-01 | Unitronics Vision Legacy series (Update A) | 2024-04-18T06:00:00.000000Z | 2024-04-30T06:00:00.000000Z |
| icsa-24-107-04 | RoboDK RoboDK | 2024-04-16T06:00:00.000000Z | 2024-04-16T06:00:00.000000Z |
| icsa-24-107-03 | Rockwell Automation ControlLogix and GuardLogix (Update A) | 2024-04-16T06:00:00.000000Z | 2024-05-09T06:00:00.000000Z |
| icsa-24-107-02 | Electrolink FM/DAB/TV Transmitter | 2024-04-16T06:00:00.000000Z | 2024-04-16T06:00:00.000000Z |
| icsa-24-107-01 | Measuresoft ScadaPro | 2024-04-16T06:00:00.000000Z | 2024-04-16T06:00:00.000000Z |
| icsa-24-102-09 | Rockwell Automation 5015-AENFTXT (Update A) | 2024-04-11T06:00:00.000000Z | 2024-04-25T06:00:00.000000Z |
| icsa-24-100-01 | SUBNET PowerSYSTEM Server and Substation Server | 2024-04-09T06:00:00.000000Z | 2024-04-09T06:00:00.000000Z |
| icsa-24-102-07 | Siemens SINEC NMS | 2024-04-09T00:00:00.000000Z | 2024-04-09T00:00:00.000000Z |
| icsa-24-102-06 | Siemens Parasolid | 2024-04-09T00:00:00.000000Z | 2024-04-09T00:00:00.000000Z |
| icsa-24-102-05 | Siemens Scalance W1750D | 2024-04-09T00:00:00.000000Z | 2024-04-09T00:00:00.000000Z |
| icsa-24-102-04 | Siemens RUGGEDCOM APE1808 | 2024-04-09T00:00:00.000000Z | 2025-05-13T00:00:00.000000Z |
| icsa-24-102-03 | Siemens RUGGEDCOM APE1808 | 2024-04-09T00:00:00.000000Z | 2024-12-10T00:00:00.000000Z |
| icsa-24-102-02 | Siemens SIMATIC WinCC | 2024-04-09T00:00:00.000000Z | 2025-01-14T00:00:00.000000Z |
| icsa-24-102-01 | Siemens SIMATIC S7-1500 | 2024-04-09T00:00:00.000000Z | 2026-02-12T07:00:00.000000Z |
| icsa-24-095-02 | Schweitzer Engineering Laboratories SEL 700 series relays | 2024-04-04T06:00:00.000000Z | 2024-04-04T06:00:00.000000Z |
| icsa-24-095-01 | Hitachi Energy Asset Suite 9 | 2024-04-04T06:00:00.000000Z | 2024-04-04T06:00:00.000000Z |
| icsa-24-093-01 | IOSIX IO-1020 Micro ELD | 2024-04-02T06:00:00.000000Z | 2024-04-02T06:00:00.000000Z |
| icsa-24-116-02 | Hitachi Energy MACH SCM (Update A) | 2024-03-26T11:32:43.000000Z | 2025-09-30T11:32:43.000000Z |
| icsa-24-086-04 | Rockwell Automation FactoryTalk View ME | 2024-03-26T06:00:00.000000Z | 2024-03-26T06:00:00.000000Z |
| icsa-24-086-03 | Rockwell Automation Arena Simulation | 2024-03-26T06:00:00.000000Z | 2024-03-26T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-nfvis-g2dmvvh | Cisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability | 2021-09-01T16:00:00+00:00 | 2021-09-01T16:00:00+00:00 |
| cisco-sa-ise-xss-4hnzfewr | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2021-09-01T16:00:00+00:00 | 2021-09-01T16:00:00+00:00 |
| cisco-sa-insight-infodis-2by2zpbb | Cisco Nexus Insights Authenticated Information Disclosure Vulnerability | 2021-09-01T16:00:00+00:00 | 2021-09-01T16:00:00+00:00 |
| cisco-sa-ucs-ssh-dos-mgvmyrqy | Cisco UCS Manager Software SSH Sessions Denial of Service Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-nxos-ngoam-dos-ltdb9hv | Cisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-nxos-mpls-oam-dos-sgo9x5gm | Cisco NX-OS Software MPLS OAM Denial of Service Vulnerability | 2021-08-25T16:00:00+00:00 | 2022-09-02T17:41:51+00:00 |
| cisco-sa-nxos-login-blockfor-rwjgvecu | Cisco NX-OS Software system login block-for Denial of Service Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-nexus-acl-vrvqypve | Cisco Nexus 9500 Series Switches Access Control List Bypass Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-naci-mdvul-vrkvgnu | Cisco Nexus 9000 Series Fabric Switches ACI Mode Privilege Escalation Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-naci-afr-utjfo2d7 | Cisco Nexus 9000 Series Fabric Switches ACI Mode Arbitrary File Read Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-n9kaci-tcp-dos-yxukt6gm | Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP Denial of Service Vulnerability | 2021-08-25T16:00:00+00:00 | 2022-02-23T15:56:25+00:00 |
| cisco-sa-n9kaci-queue-wedge-clddefkf | Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-capic-scss-bft75yrm | Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-capic-pesc-pkmgk4j | Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | 2021-08-25T16:00:00+00:00 | 2021-08-25T16:00:00+00:00 |
| cisco-sa-capic-mdvul-hbsjbuvw | Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities | 2021-08-25T16:00:00+00:00 | 2022-03-08T16:52:49+00:00 |
| cisco-sa-capic-frw-nt3ryxr2 | Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability | 2021-08-25T16:00:00+00:00 | 2022-03-08T16:52:47+00:00 |
| cisco-sa-capic-chvul-ckfgybh8 | Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability | 2021-08-25T16:00:00+00:00 | 2022-06-07T17:29:33+00:00 |
| cisco-sa-sni-data-exfil-mfgzxqln | Multiple Cisco Products Server Name Identification Data Exfiltration Vulnerability | 2021-08-18T16:00:00+00:00 | 2021-09-27T16:31:35+00:00 |
| cisco-sa-sma-spam-jpxuxmk | Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability | 2021-08-18T16:00:00+00:00 | 2021-08-18T16:00:00+00:00 |
| cisco-sa-qnx-toxjvpdl | BlackBerry QNX-2021-001 Vulnerability Affecting Cisco Products: August 2021 | 2021-08-18T16:00:00+00:00 | 2021-08-25T14:44:04+00:00 |
| cisco-sa-ipcamera-lldp-dos-ofp7j9j | Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service Vulnerability | 2021-08-18T16:00:00+00:00 | 2021-08-18T16:00:00+00:00 |
| cisco-sa-ewver-c6wzpxrx | Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability | 2021-08-18T16:00:00+00:00 | 2021-08-18T16:00:00+00:00 |
| cisco-sa-ewrce-qpynncjh | Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability | 2021-08-18T16:00:00+00:00 | 2021-08-18T16:00:00+00:00 |
| cisco-sa-cisco-sb-rv-overflow-htpymmb5 | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability | 2021-08-18T16:00:00+00:00 | 2021-08-18T16:00:00+00:00 |
| cisco-sa-rv340-cmdinj-rcedos-py8j3qfy | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities | 2021-08-04T16:00:00+00:00 | 2021-08-04T16:00:00+00:00 |
| cisco-sa-rv-code-execution-9uvjr7k4 | Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerability | 2021-08-04T16:00:00+00:00 | 2021-08-04T16:00:00+00:00 |
| cisco-sa-packettracer-dll-inj-qv8mk5jx | Cisco Packet Tracer for Windows DLL Injection Vulnerability | 2021-08-04T16:00:00+00:00 | 2021-08-04T16:00:00+00:00 |
| cisco-sa-nso-priv-esc-xxqrttft | Cisco Network Services Orchestrator CLI Secure Shell Server Privilege Escalation Vulnerability | 2021-08-04T16:00:00+00:00 | 2023-10-25T16:01:08+00:00 |
| cisco-sa-epnm-info-disc-pjtz5r6c | Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability | 2021-08-04T16:00:00+00:00 | 2021-08-04T16:00:00+00:00 |
| cisco-sa-confd-priv-esc-lsgtcrx4 | ConfD CLI Secure Shell Server Privilege Escalation Vulnerability | 2021-08-04T16:00:00+00:00 | 2023-10-04T16:00:12+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-20941 | Host Process for Windows Tasks Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20940 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20939 | Windows File Explorer Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20938 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20937 | Windows File Explorer Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20936 | Windows NDIS Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20935 | Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20934 | Windows SMB Server Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20932 | Windows File Explorer Information Disclosure Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20931 | Windows Telephony Service Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20929 | Windows HTTP.sys Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20927 | Windows SMB Server Denial of Service Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20926 | Windows SMB Server Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20925 | NTLM Hash Disclosure Spoofing Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20924 | Windows Management Services Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20923 | Windows Management Services Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20922 | Windows NTFS Remote Code Execution Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20921 | Windows SMB Server Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20920 | Win32k Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20919 | Windows SMB Server Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20918 | Windows Management Services Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20877 | Windows Management Services Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20876 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20875 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20874 | Windows Management Services Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20873 | Windows Management Services Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20872 | NTLM Hash Disclosure Spoofing Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20871 | Desktop Windows Manager Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20870 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| msrc_cve-2026-20869 | Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability | 2026-01-13T08:00:00.000Z | 2026-01-13T08:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15654-1 | git-bug-0.10.1-2.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15653-1 | fetchmail-6.5.6-1.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15652-1 | cargo-audit-advisory-db-20251021-1.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15651-1 | binutils-2.45-1.2 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15650-1 | ImageMagick-7.1.2.7-1.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15649-1 | ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15648-1 | libpoppler-cpp2-25.09.1-2.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15647-1 | ollama-0.12.6-1.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15646-1 | MozillaThunderbird-140.4.0-1.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15645-1 | MozillaFirefox-144.0-1.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15644-1 | icinga2-2.15.1-1.1 on GA media | 2025-10-17T00:00:00Z | 2025-10-17T00:00:00Z |
| opensuse-su-2025:15643-1 | git-lfs-3.7.1-1.1 on GA media | 2025-10-17T00:00:00Z | 2025-10-17T00:00:00Z |
| opensuse-su-2025:15642-1 | ruby3.4-rubygem-rack-2.2-2.2.20-1.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15641-1 | libexslt0-1.1.43-4.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15640-1 | ffmpeg-4-4.4.6-9.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15639-1 | chromedriver-141.0.7390.107-1.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15638-1 | ansible-core-2.18-2.18.10-2.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:20020-1 | Security update for chromium | 2025-10-15T13:33:21Z | 2025-10-15T13:33:21Z |
| opensuse-su-2025:20013-1 | Recommended update of flake-pilot | 2025-10-15T12:01:21Z | 2025-10-15T12:01:21Z |
| opensuse-su-2025:15637-1 | python311-ldap-3.4.5-1.1 on GA media | 2025-10-15T00:00:00Z | 2025-10-15T00:00:00Z |
| opensuse-su-2025:15636-1 | libwireshark18-4.4.10-2.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15635-1 | libtiff-devel-32bit-4.7.1-2.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15634-1 | python3-gi-docgen-2025.5-1.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15633-1 | libsoup-3_0-0-3.6.5-7.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15632-1 | firefox-esr-140.4.0-1.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15631-1 | alloy-1.11.2-2.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15630-1 | libQt6Svg6-6.10.0-1.1 on GA media | 2025-10-13T00:00:00Z | 2025-10-13T00:00:00Z |
| opensuse-su-2025:15629-1 | python311-Authlib-1.6.5-1.1 on GA media | 2025-10-13T00:00:00Z | 2025-10-13T00:00:00Z |
| opensuse-su-2025:15628-1 | lsd-1.2.0-1.1 on GA media | 2025-10-13T00:00:00Z | 2025-10-13T00:00:00Z |
| opensuse-su-2025:15627-1 | libcryptopp-devel-8.9.0-4.1 on GA media | 2025-10-13T00:00:00Z | 2025-10-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:2558 | Red Hat Security Advisory: kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, kpatch-patch-4_18_0-372_145_1, kpatch-patch-4_18_0-372_158_1, and kpatch-patch-4_18_0-372_170_1 security update | 2026-02-11T14:03:56+00:00 | 2026-03-18T03:17:39+00:00 |
| rhsa-2026:2535 | Red Hat Security Advisory: kernel security update | 2026-02-11T11:58:06+00:00 | 2026-04-08T13:32:46+00:00 |
| rhsa-2026:2528 | Red Hat Security Advisory: spice-client-win security update | 2026-02-11T10:36:01+00:00 | 2026-03-19T14:40:17+00:00 |
| rhsa-2026:2529 | Red Hat Security Advisory: spice-client-win security update | 2026-02-11T10:35:21+00:00 | 2026-03-19T14:40:17+00:00 |
| rhsa-2026:2520 | Red Hat Security Advisory: toolbox security update | 2026-02-11T09:49:41+00:00 | 2026-04-10T21:19:22+00:00 |
| rhsa-2026:2519 | Red Hat Security Advisory: toolbox security update | 2026-02-11T09:37:40+00:00 | 2026-04-10T21:19:21+00:00 |
| rhsa-2026:2514 | Red Hat Security Advisory: spice-client-win security update | 2026-02-11T08:06:25+00:00 | 2026-03-19T14:40:17+00:00 |
| rhsa-2026:2512 | Red Hat Security Advisory: libsoup security update | 2026-02-11T07:51:37+00:00 | 2026-03-19T14:40:15+00:00 |
| rhsa-2026:2513 | Red Hat Security Advisory: spice-client-win security update | 2026-02-11T07:51:25+00:00 | 2026-03-19T14:40:16+00:00 |
| rhsa-2026:2446 | Red Hat Security Advisory: kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update | 2026-02-11T07:31:25+00:00 | 2026-03-18T03:17:44+00:00 |
| rhsa-2026:2500 | Red Hat Security Advisory: Red Hat multicluster global hub 1.4.4 security update | 2026-02-11T05:02:44+00:00 | 2026-04-14T09:16:54+00:00 |
| rhsa-2026:2071 | Red Hat Security Advisory: OpenShift Container Platform 4.18.33 packages and security update | 2026-02-11T04:55:25+00:00 | 2026-04-14T07:57:59+00:00 |
| rhsa-2026:2072 | Red Hat Security Advisory: OpenShift Container Platform 4.18.33 bug fix and security update | 2026-02-11T04:49:09+00:00 | 2026-04-13T20:14:22+00:00 |
| rhsa-2026:2077 | Red Hat Security Advisory: OpenShift Container Platform 4.20.14 bug fix and security update | 2026-02-11T04:41:05+00:00 | 2026-04-09T23:01:05+00:00 |
| rhsa-2026:2079 | Red Hat Security Advisory: OpenShift Container Platform 4.18.33 security and extras update | 2026-02-11T04:27:43+00:00 | 2026-04-10T21:19:15+00:00 |
| rhsa-2026:2078 | Red Hat Security Advisory: OpenShift Container Platform 4.18.33 bug fix and security update | 2026-02-11T04:27:02+00:00 | 2026-04-14T09:16:38+00:00 |
| rhsa-2026:2119 | Red Hat Security Advisory: OpenShift Container Platform 4.20.14 bug fix and security update | 2026-02-11T04:25:53+00:00 | 2026-04-13T15:59:54+00:00 |
| rhsa-2026:2120 | Red Hat Security Advisory: OpenShift Container Platform 4.20.14 security and extras update | 2026-02-11T02:51:09+00:00 | 2026-04-10T21:19:19+00:00 |
| rhsa-2026:2490 | Red Hat Security Advisory: kernel security update | 2026-02-11T00:25:39+00:00 | 2026-03-30T23:21:05+00:00 |
| rhsa-2026:2486 | Red Hat Security Advisory: fence-agents security update | 2026-02-10T21:02:35+00:00 | 2026-03-24T10:03:10+00:00 |
| rhsa-2026:2485 | Red Hat Security Advisory: Insights proxy Container Image | 2026-02-10T20:29:13+00:00 | 2026-04-13T20:14:22+00:00 |
| rhsa-2026:2483 | Red Hat Security Advisory: fence-agents security update | 2026-02-10T20:28:54+00:00 | 2026-03-24T10:03:10+00:00 |
| rhsa-2026:2470 | Red Hat Security Advisory: php:7.4 security update | 2026-02-10T20:28:13+00:00 | 2026-04-08T16:37:55+00:00 |
| rhsa-2026:2484 | Red Hat Security Advisory: pcs security update | 2026-02-10T20:17:03+00:00 | 2026-04-13T16:00:04+00:00 |
| rhsa-2026:2469 | Red Hat Security Advisory: pcs security update | 2026-02-10T19:17:43+00:00 | 2026-04-13T16:00:05+00:00 |
| rhsa-2026:2455 | Red Hat Security Advisory: brotli security update | 2026-02-10T18:32:23+00:00 | 2026-04-13T19:35:36+00:00 |
| rhsa-2026:2465 | Red Hat Security Advisory: pcs security update | 2026-02-10T18:26:38+00:00 | 2026-04-13T16:00:02+00:00 |
| rhsa-2026:2462 | Red Hat Security Advisory: pcs security update | 2026-02-10T17:54:59+00:00 | 2026-04-13T16:00:01+00:00 |
| rhsa-2026:2460 | Red Hat Security Advisory: resource-agents security update | 2026-02-10T17:46:24+00:00 | 2026-03-24T10:03:09+00:00 |
| rhsa-2026:2456 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.0 Release. | 2026-02-10T17:06:01+00:00 | 2026-04-14T09:46:15+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0683-1 | Security update for freerdp2 | 2026-02-27T10:42:32Z | 2026-02-27T10:42:32Z |
| suse-su-2026:0680-1 | Security update for glibc | 2026-02-27T10:17:05Z | 2026-02-27T10:17:05Z |
| suse-su-2026:20551-1 | Security update for kubevirt | 2026-02-27T08:51:11Z | 2026-02-27T08:51:11Z |
| suse-su-2026:20610-1 | Security update for kubevirt | 2026-02-27T08:49:48Z | 2026-02-27T08:49:48Z |
| suse-su-2026:0674-1 | Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7) | 2026-02-27T07:04:14Z | 2026-02-27T07:04:14Z |
| suse-su-2026:20550-1 | Security update for containerized-data-importer | 2026-02-26T16:03:48Z | 2026-02-26T16:03:48Z |
| suse-su-2026:0670-1 | Security update for ucode-intel | 2026-02-26T15:21:41Z | 2026-02-26T15:21:41Z |
| suse-su-2026:0669-1 | Security update for ucode-intel | 2026-02-26T15:21:31Z | 2026-02-26T15:21:31Z |
| suse-su-2026:0668-1 | Security update for ucode-intel | 2026-02-26T15:21:13Z | 2026-02-26T15:21:13Z |
| suse-su-2026:0667-1 | Security update for redis7 | 2026-02-26T15:19:55Z | 2026-02-26T15:19:55Z |
| suse-su-2026:0666-1 | Security update for docker | 2026-02-26T15:17:25Z | 2026-02-26T15:17:25Z |
| suse-su-2026:0665-1 | Security update for frr | 2026-02-26T15:16:24Z | 2026-02-26T15:16:24Z |
| suse-su-2026:0664-1 | Security update for python3 | 2026-02-26T15:15:20Z | 2026-02-26T15:15:20Z |
| suse-su-2026:0663-1 | Security update for python | 2026-02-26T15:13:11Z | 2026-02-26T15:13:11Z |
| suse-su-2026:0662-1 | Security update for qemu | 2026-02-26T15:12:26Z | 2026-02-26T15:12:26Z |
| suse-su-2026:0661-1 | Security update for erlang | 2026-02-26T15:10:09Z | 2026-02-26T15:10:09Z |
| suse-su-2026:0659-1 | Security update for docker-stable | 2026-02-26T15:08:37Z | 2026-02-26T15:08:37Z |
| suse-su-2026:0658-1 | Security update for libsoup | 2026-02-26T15:07:42Z | 2026-02-26T15:07:42Z |
| suse-su-2026:0657-1 | Security update for libsoup2 | 2026-02-26T15:07:11Z | 2026-02-26T15:07:11Z |
| suse-su-2026:0656-1 | Security update for freerdp | 2026-02-26T15:06:36Z | 2026-02-26T15:06:36Z |
| suse-su-2026:20592-1 | Security update for 7zip | 2026-02-26T13:17:48Z | 2026-02-26T13:17:48Z |
| suse-su-2026:0642-1 | Security update for python313 | 2026-02-26T11:53:34Z | 2026-02-26T11:53:34Z |
| suse-su-2026:20527-1 | Security update for glibc | 2026-02-26T11:33:53Z | 2026-02-26T11:33:53Z |
| suse-su-2026:20531-1 | Security update for libssh | 2026-02-26T11:27:41Z | 2026-02-26T11:27:41Z |
| suse-su-2026:20530-1 | Security update for libpng16 | 2026-02-26T11:26:10Z | 2026-02-26T11:26:10Z |
| suse-su-2026:20526-1 | Security update for rust-keylime | 2026-02-26T11:08:16Z | 2026-02-26T11:08:16Z |
| suse-su-2026:20524-1 | Security update for libssh | 2026-02-26T11:08:16Z | 2026-02-26T11:08:16Z |
| suse-su-2026:20525-1 | Security update for avahi | 2026-02-26T10:54:54Z | 2026-02-26T10:54:54Z |
| suse-su-2026:20523-1 | Security update for libpng16 | 2026-02-26T10:51:48Z | 2026-02-26T10:51:48Z |
| suse-su-2026:20522-1 | Security update for ucode-intel | 2026-02-26T10:48:45Z | 2026-02-26T10:48:45Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:8744 | Moderate: kernel-rt security update | 2025-06-10T00:00:00Z | 2025-06-10T09:59:43Z |
| alsa-2025:8743 | Moderate: kernel security update | 2025-06-10T00:00:00Z | 2025-06-11T11:37:25Z |
| alsa-2025:8696 | Important: perl-FCGI:0.78 security update | 2025-06-09T00:00:00Z | 2025-07-02T11:34:27Z |
| alsa-2025:8686 | Moderate: glibc security update | 2025-06-09T00:00:00Z | 2025-06-11T11:32:14Z |
| alsa-2025:8682 | Moderate: grafana security update | 2025-06-09T00:00:00Z | 2025-07-02T11:36:36Z |
| alsa-2025:8676 | Moderate: libxslt security update | 2025-06-09T00:00:00Z | 2025-06-11T11:34:52Z |
| alsa-2025:8667 | Moderate: grafana security update | 2025-06-09T00:00:00Z | 2025-06-10T08:21:19Z |
| alsa-2025:8666 | Moderate: grafana security update | 2025-06-09T00:00:00Z | 2025-07-28T14:55:22Z |
| alsa-2025:8655 | Moderate: glibc security update | 2025-06-09T00:00:00Z | 2025-06-10T08:33:19Z |
| alsa-2025:8643 | Important: kernel security update | 2025-06-09T00:00:00Z | 2025-06-12T13:36:53Z |
| alsa-2025:8636 | Important: perl-FCGI security update | 2025-06-09T00:00:00Z | 2025-07-02T11:38:12Z |
| alsa-2025:8635 | Important: perl-FCGI security update | 2025-06-09T00:00:00Z | 2025-07-02T11:39:26Z |
| alsa-2025:8608 | Important: thunderbird security update | 2025-06-05T00:00:00Z | 2025-06-16T12:37:33Z |
| alsa-2025:8607 | Important: thunderbird security update | 2025-06-05T00:00:00Z | 2025-07-02T11:41:03Z |
| alsa-2025:8550 | Important: varnish security update | 2025-06-04T00:00:00Z | 2025-06-16T12:36:44Z |
| alsa-2025:8514 | Important: nodejs:20 security update | 2025-06-04T00:00:00Z | 2025-06-05T14:09:44Z |
| alsa-2025:8506 | Important: nodejs:22 security update | 2025-06-04T00:00:00Z | 2025-06-05T14:07:26Z |
| alsa-2025:8493 | Important: nodejs22 security update | 2025-06-04T00:00:00Z | 2025-06-06T07:24:27Z |
| alsa-2025:8478 | Moderate: go-toolset:rhel8 security update | 2025-06-04T00:00:00Z | 2025-06-05T13:57:38Z |
| alsa-2025:8477 | Moderate: golang security update | 2025-06-04T00:00:00Z | 2025-06-06T07:26:26Z |
| alsa-2025:8476 | Moderate: golang security update | 2025-06-04T00:00:00Z | 2025-06-05T14:16:57Z |
| alsa-2025:8468 | Important: nodejs:20 security update | 2025-06-03T00:00:00Z | 2025-06-05T14:15:30Z |
| alsa-2025:8467 | Important: nodejs:22 security update | 2025-06-03T00:00:00Z | 2025-06-05T14:11:55Z |
| alsa-2025:8432 | Moderate: perl-CPAN security update | 2025-06-03T00:00:00Z | 2025-06-03T15:12:15Z |
| alsa-2025:8427 | Moderate: pandoc security update | 2025-06-03T00:00:00Z | 2025-07-02T11:42:55Z |
| alsa-2025:8421 | Moderate: ghostscript security update | 2025-06-03T00:00:00Z | 2025-07-02T11:45:46Z |
| alsa-2025:8419 | Low: python36:3.6 security update | 2025-06-03T00:00:00Z | 2025-06-05T14:04:55Z |
| alsa-2025:8414 | Moderate: git security update | 2025-06-03T00:00:00Z | 2025-06-03T09:37:46Z |
| alsa-2025:8411 | Moderate: krb5 security update | 2025-06-03T00:00:00Z | 2025-06-03T09:34:58Z |
| alsa-2025:8395 | Low: rsync security update | 2025-06-02T00:00:00Z | 2025-06-03T09:32:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-452 | Heap-buffer-overflow in json_write_TF | 2023-06-03T14:02:13.459131Z | 2023-10-31T14:21:55.530747Z |
| osv-2023-451 | Heap-buffer-overflow in BundlePacket | 2023-06-02T14:02:19.303950Z | 2023-06-22T14:25:02.611556Z |
| osv-2023-445 | Heap-buffer-overflow in LossyDctDecoder_execute | 2023-06-01T14:00:09.278335Z | 2023-06-01T14:00:09.278588Z |
| osv-2023-444 | Heap-buffer-overflow in opj_jp2_apply_pclr | 2023-05-31T14:02:00.753503Z | 2025-12-31T14:18:46.286556Z |
| osv-2023-443 | Use-after-poison in file_is_simh | 2023-05-31T14:00:37.979797Z | 2023-05-31T14:00:37.980057Z |
| osv-2023-440 | Heap-double-free in dwg_free_object | 2023-05-30T14:01:20.251610Z | 2023-09-19T14:20:36.212389Z |
| osv-2023-437 | Heap-buffer-overflow in internal_huf_decompress | 2023-05-29T14:00:22.989224Z | 2023-05-29T14:00:22.989493Z |
| osv-2023-436 | Heap-buffer-overflow in ndpi_check_punycode_string | 2023-05-29T14:00:17.226789Z | 2023-05-29T14:00:17.227055Z |
| osv-2022-1275 | Security exception in java.desktop/java.awt.image.DataBufferInt.<init> | 2023-05-28T14:00:35.487433Z | 2024-08-27T14:11:30.518706Z |
| osv-2023-430 | Heap-buffer-overflow in H5MM_xstrdup | 2023-05-26T14:00:26.078002Z | 2026-03-24T14:48:04.919113Z |
| osv-2023-426 | Heap-buffer-overflow in libdeflate_zlib_decompress_ex | 2023-05-25T14:00:33.323239Z | 2023-05-25T14:00:33.323513Z |
| osv-2023-425 | Heap-buffer-overflow in ICMPinfo::dissectICMP | 2023-05-23T14:01:00.402025Z | 2023-05-23T14:01:00.402221Z |
| osv-2023-423 | Heap-buffer-overflow in NetworkInterface::dissectPacket | 2023-05-23T14:00:31.211803Z | 2023-05-23T14:00:31.212007Z |
| osv-2023-422 | Heap-use-after-free in wmem_memdup | 2023-05-22T14:01:21.886121Z | 2023-05-22T14:01:21.886307Z |
| osv-2023-421 | Global-buffer-overflow in hf_adjustment | 2023-05-22T14:01:06.910126Z | 2023-05-22T14:01:06.910307Z |
| osv-2023-420 | Heap-use-after-free in fragment_addresses_equal | 2023-05-22T14:00:41.156918Z | 2023-05-22T14:00:41.157099Z |
| osv-2023-418 | Heap-buffer-overflow in bfd_getl32 | 2023-05-21T14:02:30.263252Z | 2023-05-21T14:02:30.263496Z |
| osv-2023-416 | UNKNOWN READ in dxf_fixup_string | 2023-05-20T14:01:12.859492Z | 2023-06-11T14:21:08.017435Z |
| osv-2023-415 | UNKNOWN READ in dxf_fixup_string | 2023-05-20T14:01:02.465780Z | 2023-06-11T14:15:45.072848Z |
| osv-2023-412 | UNKNOWN READ in dxf_fixup_string | 2023-05-20T14:00:35.493084Z | 2023-06-11T14:14:00.715264Z |
| osv-2023-409 | Heap-use-after-free in zval_call_destructor | 2023-05-19T14:02:26.026882Z | 2023-05-19T14:02:26.027150Z |
| osv-2023-408 | Security exception in org.apache.lucene.util.ArrayUtil.growExact | 2023-05-19T14:02:24.308895Z | 2023-05-19T14:02:24.309176Z |
| osv-2023-407 | Stack-buffer-overflow in DwaCompressor_readChannelRules | 2023-05-19T14:02:24.198097Z | 2023-05-19T14:02:24.198372Z |
| osv-2023-405 | Heap-buffer-overflow in _lou_stringHash | 2023-05-19T14:00:18.190498Z | 2024-08-31T14:18:34.306703Z |
| osv-2023-404 | Invalid-free in Assimp::FBX::Scope::Scope | 2023-05-19T14:00:12.710256Z | 2023-05-19T14:00:12.710610Z |
| osv-2023-402 | Heap-use-after-free in Assimp::FBXExporter::WriteObjects | 2023-05-18T14:01:38.415215Z | 2023-05-18T14:01:38.415480Z |
| osv-2023-399 | Heap-use-after-free in get_got_entry | 2023-05-15T14:01:19.849514Z | 2023-05-15T14:01:19.849790Z |
| osv-2023-397 | Heap-buffer-overflow in json_write_TF | 2023-05-14T14:02:14.802227Z | 2023-11-02T14:21:15.660519Z |
| osv-2023-396 | Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal | 2023-05-14T14:02:12.108286Z | 2023-05-14T14:02:12.108548Z |
| osv-2023-395 | Stack-buffer-overflow in sc_path_print | 2023-05-14T14:00:57.078498Z | 2026-03-31T14:04:53.759303Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2019-0037 | Compiler optimisation for next_with_timeout in pnet::transport::IcmpTransportChannelIterator flaws to SEGFAULT | 2019-06-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0003 | Out of Memory in stream::read_raw_bytes_into() | 2019-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0009 | Double-free and use-after-free in SmallVec::grow() | 2019-06-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0015 | Flaw in generativity allows out-of-bounds access | 2019-05-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0004 | Failure to properly verify ed25519 signatures makes any signature valid | 2019-05-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0002 | Bug in SliceDeque::move_head_unchecked corrupts its memory | 2019-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0001 | Uncontrolled recursion leads to abort in HTML serialization | 2019-04-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0035 | Unaligned memory access | 2019-04-19T12:00:00Z | 2021-10-19T22:14:35Z |
| rustsec-2019-0039 | typemap is Unmaintained | 2019-04-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0038 | Fix for UB in failure to catch panics crossing FFI boundaries | 2019-03-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0020 | Possible use-after-free with `proplist::Iterator` | 2018-12-22T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2018-0012 | Flaw in streaming state reset() functions can create incorrect results. | 2018-12-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0011 | Enum repr causing potential memory corruption | 2018-12-18T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0009 | MsQueue and SegQueue suffer from double-free | 2018-12-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0008 | Bug in SliceDeque::move_head_unchecked allows read of corrupted memory | 2018-12-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0013 | Vec-to-vec transmutations could lead to heap overflow/corruption | 2018-11-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0015 | term is looking for a new maintainer | 2018-11-19T12:00:00Z | 2020-10-02T01:29:11Z |
| rustsec-2018-0007 | Stack overflow when parsing malicious DNS packet | 2018-10-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0018 | smallvec creates uninitialized value of any type | 2018-09-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0006 | Uncontrolled recursion leads to abort in deserialization | 2018-09-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0005 | Uncontrolled recursion leads to abort in deserialization | 2018-09-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0004 | Malicious input could cause uninitialized memory to be exposed | 2018-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0022 | Use of uninitialized memory in temporary | 2018-08-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0014 | chan is end-of-life; use crossbeam-channel instead | 2018-07-31T12:00:00Z | 2020-10-02T01:29:11Z |
| rustsec-2018-0003 | Possible double free during unwinding in SmallVec::insert_many | 2018-07-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0016 | quickersort is deprecated and unmaintained | 2018-06-30T12:00:00Z | 2020-10-02T01:29:11Z |
| rustsec-2018-0002 | Links in archives can overwrite any existing file | 2018-06-29T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0001 | An integer underflow could lead to panic | 2018-06-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0021 | Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods | 2018-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0019 | Multiple memory safety issues | 2018-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-powershell-2025-21171 | .NET Remote Code Execution Vulnerability | 2025-09-04T17:48:57.882Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2024-30045 | .NET and Visual Studio Remote Code Execution Vulnerability | 2025-09-04T17:48:56.455Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2024-26190 | Microsoft QUIC Denial of Service Vulnerability | 2025-09-04T17:48:54.862Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2024-21409 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | 2025-09-04T17:48:53.456Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2024-21392 | .NET and Visual Studio Denial of Service Vulnerability | 2025-09-04T17:48:52.052Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2024-0057 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability | 2025-09-04T17:48:50.396Z | 2025-10-10T12:11:18.225Z |
| bit-powershell-2023-36013 | PowerShell Information Disclosure Vulnerability | 2025-09-04T17:48:49.020Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2023-21538 | .NET Denial of Service Vulnerability | 2025-09-04T17:48:47.524Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2022-41121 | Windows Graphics Component Elevation of Privilege Vulnerability | 2025-09-04T17:48:45.951Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2022-41076 | PowerShell Remote Code Execution Vulnerability | 2025-09-04T17:48:44.658Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2022-34716 | .NET Spoofing Vulnerability | 2025-09-04T17:48:43.155Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2022-26788 | PowerShell Elevation of Privilege Vulnerability | 2025-09-04T17:48:41.821Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2022-24512 | .NET and Visual Studio Remote Code Execution Vulnerability | 2025-09-04T17:48:40.428Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2022-23267 | .NET and Visual Studio Denial of Service Vulnerability | 2025-09-04T17:48:39.121Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2021-43896 | Microsoft PowerShell Spoofing Vulnerability | 2025-09-04T17:48:37.745Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2021-41355 | .NET Core and Visual Studio Information Disclosure Vulnerability | 2025-09-04T17:48:36.166Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2020-8927 | Buffer overflow in Brotli library | 2025-09-04T17:48:34.485Z | 2025-09-04T18:07:55.535Z |
| bit-powershell-2020-1108 | 2025-09-04T17:48:33.089Z | 2025-09-04T18:07:55.535Z | |
| bit-powershell-2020-0951 | Windows Defender Application Control Security Feature Bypass Vulnerability | 2025-09-04T17:48:31.593Z | 2025-09-04T18:07:55.535Z |
| bit-envoy-2025-54588 | Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults | 2025-09-04T08:40:05.078Z | 2025-09-17T15:49:32.815Z |
| bit-gitlab-2025-5101 | Improper Control of Generation of Code ('Code Injection') in GitLab | 2025-08-30T09:04:23.084Z | 2025-08-30T09:06:08.850Z |
| bit-gitlab-2025-4225 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-08-30T09:04:10.462Z | 2025-09-03T09:06:51.338Z |
| bit-gitlab-2025-3601 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-08-30T09:04:08.676Z | 2025-08-30T09:06:08.850Z |
| bit-gitlab-2025-2246 | Missing Authorization in GitLab | 2025-08-30T09:03:36.978Z | 2025-09-03T09:06:51.338Z |
| bit-vault-2025-6203 | Vault unauthenticated denial of service through complex json payload | 2025-08-30T08:51:09.044Z | 2025-08-30T09:06:08.850Z |
| bit-kibana-2025-25010 | Kibana privilege escalation via reporting_user role | 2025-08-30T08:41:00.026Z | 2025-09-04T09:06:08.228Z |
| bit-elk-2025-25010 | Kibana privilege escalation via reporting_user role | 2025-08-30T08:38:09.297Z | 2025-09-04T09:06:08.228Z |
| bit-cassandra-2025-26467 | Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) | 2025-08-27T08:36:32.891Z | 2025-08-27T09:06:48.117Z |
| bit-discourse-2025-54411 | Discourse welcome banner user name XSS | 2025-08-21T09:26:15.988Z | 2025-08-21T09:51:17.688Z |
| bit-gitlab-2025-8770 | Authorization Bypass Through User-Controlled Key in GitLab | 2025-08-18T08:34:36.886Z | 2025-08-18T08:35:59.174Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0639 | Multiples vulnérabilités dans Google Chrome | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0638 | Vulnérabilité dans les produits Sonicwall | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0637 | Vulnérabilité dans SolarWinds Web Help Desk | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0636 | Multiples vulnérabilités dans les produits Elastic | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0635 | Vulnérabilité dans VMware vCenter | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0634 | Vulnérabilité dans Python | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0633 | Vulnérabilité dans Tenable Patch Management | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0632 | Multiples vulnérabilités dans GLPI | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0631 | Vulnérabilité dans SolarWinds SWOSH | 2025-07-29T00:00:00.000000 | 2025-07-29T00:00:00.000000 |
| certfr-2025-avi-0630 | Vulnérabilité dans Palo Alto Networks GlobalProtect App | 2025-07-29T00:00:00.000000 | 2025-07-29T00:00:00.000000 |
| certfr-2025-avi-0629 | Multiples vulnérabilités dans Microsoft Edge | 2025-07-28T00:00:00.000000 | 2025-07-28T00:00:00.000000 |
| certfr-2025-avi-0628 | Multiples vulnérabilités dans Synology BeeDrive | 2025-07-28T00:00:00.000000 | 2025-07-28T00:00:00.000000 |
| certfr-2025-avi-0627 | Multiples vulnérabilités dans les produits IBM | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0626 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0625 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0624 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0623 | Multiples vulnérabilités dans les produits ESET | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0622 | Multiples vulnérabilités dans les produits VMware | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0621 | Multiples vulnérabilités dans les produits Tenable | 2025-07-24T00:00:00.000000 | 2025-07-24T00:00:00.000000 |
| certfr-2025-avi-0620 | Vulnérabilité dans Apache HTTP Server | 2025-07-24T00:00:00.000000 | 2025-07-24T00:00:00.000000 |
| certfr-2025-avi-0619 | Multiples vulnérabilités dans GitLab | 2025-07-24T00:00:00.000000 | 2025-07-24T00:00:00.000000 |
| certfr-2025-avi-0618 | Multiples vulnérabilités dans les produits Mitel | 2025-07-24T00:00:00.000000 | 2026-01-28T00:00:00.000000 |
| certfr-2025-avi-0617 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-07-24T00:00:00.000000 | 2025-07-24T00:00:00.000000 |
| certfr-2025-avi-0616 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access | 2025-07-23T00:00:00.000000 | 2025-07-23T00:00:00.000000 |
| certfr-2025-avi-0615 | Multiples vulnérabilités dans les produits Mozilla | 2025-07-23T00:00:00.000000 | 2025-07-23T00:00:00.000000 |
| certfr-2025-avi-0614 | Multiples vulnérabilités dans les produits Mattermost | 2025-07-23T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0613 | Multiples vulnérabilités dans Google Chrome | 2025-07-23T00:00:00.000000 | 2025-07-23T00:00:00.000000 |
| certfr-2025-avi-0612 | Multiples vulnérabilités dans Sophos Firewall | 2025-07-22T00:00:00.000000 | 2025-07-22T00:00:00.000000 |
| certfr-2025-avi-0611 | Multiples vulnérabilités dans les produits Microsoft | 2025-07-21T00:00:00.000000 | 2025-07-22T00:00:00.000000 |
| certfr-2025-avi-0610 | Multiples vulnérabilités dans Microsoft Azure | 2025-07-21T00:00:00.000000 | 2025-07-21T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000014 | Calsos CSDJ fails to restrict access permissions | 2021-02-15T15:52+09:00 | 2021-02-15T15:52+09:00 |
| jvndb-2021-000013 | Wekan vulnerable to cross-site scripting | 2021-02-10T14:01+09:00 | 2021-02-10T14:01+09:00 |
| jvndb-2021-001022 | Cross-site Scripting Vulnerability in Hitachi Application Server Help | 2021-02-09T15:08+09:00 | 2021-02-09T15:08+09:00 |
| jvndb-2021-001021 | Improper access control vulnerability in JP1/IT Desktop Management 2 - Manager and JP1/NETM/Asset Information Manager | 2021-02-09T15:08+09:00 | 2021-02-09T15:08+09:00 |
| jvndb-2021-000012 | WordPress Plugin "Name Directory" vulnerable to cross-site request forgery | 2021-02-05T16:24+09:00 | 2021-02-05T16:24+09:00 |
| jvndb-2021-001017 | Trend Micro HouseCall for Home Networks (Windows Edition) may insecurely load Dynamic Link Libraries | 2021-02-04T15:42+09:00 | 2021-02-04T15:42+09:00 |
| jvndb-2021-000011 | Panasonic Video Insight VMS vulnerable to arbitrary code execution | 2021-02-04T15:39+09:00 | 2021-02-04T15:39+09:00 |
| jvndb-2021-001014 | Vulnerability in JP1/VERITAS | 2021-02-01T16:49+09:00 | 2021-02-01T16:49+09:00 |
| jvndb-2021-000007 | OS command injection vulnerability in multiple Infoscience Corporation log management tools | 2021-01-27T18:31+09:00 | 2022-07-26T15:53+09:00 |
| jvndb-2021-000009 | Android App "ELECOM File Manager" vulnerable to directory traversal | 2021-01-27T17:38+09:00 | 2021-01-27T17:38+09:00 |
| jvndb-2021-000008 | Multiple vulnerabilities in multiple ELECOM products | 2021-01-26T16:33+09:00 | 2021-01-26T16:33+09:00 |
| jvndb-2021-000010 | Multiple vulnerabilities in multiple LOGITEC products | 2021-01-26T16:26+09:00 | 2021-01-26T16:26+09:00 |
| jvndb-2021-001010 | TP-Link TL-WR841N V13 (JP) vulnerable to OS command injection | 2021-01-25T16:21+09:00 | 2021-01-25T16:21+09:00 |
| jvndb-2021-000006 | Multiple vulnerabilities in Aterm WF800HP, Aterm WG2600HP, and Aterm WG2600HP2 | 2021-01-22T17:55+09:00 | 2021-02-03T12:05+09:00 |
| jvndb-2021-000005 | GROWI vulnerable to cross-site scripting | 2021-01-19T14:05+09:00 | 2021-01-19T14:05+09:00 |
| jvndb-2021-000004 | Multiple vulnerabilities in acmailer | 2021-01-14T16:22+09:00 | 2021-01-14T16:22+09:00 |
| jvndb-2021-000003 | The installer of SKYSEA Client View may insecurely load Dynamic Link Libraries | 2021-01-12T15:53+09:00 | 2021-01-12T15:53+09:00 |
| jvndb-2021-000002 | Multiple NEC Products vulnerable to authentication bypass | 2021-01-04T17:24+09:00 | 2021-01-08T12:22+09:00 |
| jvndb-2021-000001 | Multiple vulnerabilities in UNIVERGE SV9500/SV8500 series | 2021-01-04T14:37+09:00 | 2021-01-04T14:37+09:00 |
| jvndb-2020-009965 | Cleartext Transmission of Sensitive Information Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2020-12-21T17:48+09:00 | 2020-12-21T17:48+09:00 |
| jvndb-2020-009964 | Improper certificate validation vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2020-12-21T17:48+09:00 | 2020-12-21T17:48+09:00 |
| jvndb-2020-010072 | Cross-site Scripting Vulnerability in Hitachi Command Suite | 2020-12-21T14:20+09:00 | 2020-12-21T14:20+09:00 |
| jvndb-2020-000087 | Management software for NEC Storage disk array system vulnerable to improper server certificate verification | 2020-12-18T17:00+09:00 | 2021-07-21T16:21+09:00 |
| jvndb-2020-000086 | Self-Extracting files created by multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries | 2020-12-18T16:47+09:00 | 2020-12-18T16:47+09:00 |
| jvndb-2020-000085 | Multiple vulnerabilities in GROWI | 2020-12-15T15:41+09:00 | 2021-08-30T16:29+09:00 |
| jvndb-2020-000083 | Multiple vulnerabilities in Aterm SA3500G | 2020-12-11T16:59+09:00 | 2020-12-11T16:59+09:00 |
| jvndb-2020-000084 | Apache Struts 2 vulnerable to remote code execution (S2-061) | 2020-12-11T15:09+09:00 | 2022-08-09T13:55+09:00 |
| jvndb-2020-000082 | FileZen vulnerable to directory traversal | 2020-12-10T15:21+09:00 | 2020-12-10T15:21+09:00 |
| jvndb-2020-009771 | ServerProtect for Linux vulnerable to heap-based buffer overflow | 2020-12-08T12:34+09:00 | 2020-12-08T12:34+09:00 |
| jvndb-2020-000081 | Apache Cordova Plugin camera vulnerable to information exposure | 2020-12-07T16:34+09:00 | 2020-12-07T16:34+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-10674 | Microsoft Windows File Explorer信息泄露漏洞(CNVD-2026-10674) | 2026-01-19 | 2026-02-11 |
| cnvd-2026-10673 | Microsoft Windows File Explorer信息泄露漏洞(CNVD-2026-10673) | 2026-01-19 | 2026-02-11 |
| cnvd-2026-10672 | Microsoft Windows File Explorer信息泄露漏洞 | 2026-01-19 | 2026-02-11 |
| cnvd-2026-10639 | D-Link DI-8200G命令注入漏洞 | 2026-01-19 | 2026-02-09 |
| cnvd-2026-09802 | Adobe Dreamweaver命令注入漏洞 | 2026-01-19 | 2026-01-30 |
| cnvd-2026-09801 | Adobe Substance 3D Sampler缓冲区溢出漏洞 | 2026-01-19 | 2026-01-30 |
| cnvd-2026-09800 | Adobe Substance 3D Painter缓冲区溢出漏洞(CNVD-2026-09800) | 2026-01-19 | 2026-01-30 |
| cnvd-2026-09799 | Adobe InCopy缓冲区溢出漏洞(CNVD-2026-09799) | 2026-01-19 | 2026-01-30 |
| cnvd-2026-09796 | Apache Uniffle信任管理问题漏洞 | 2026-01-19 | 2026-01-30 |
| cnvd-2026-09795 | Apache NimBLE代码问题漏洞 | 2026-01-19 | 2026-02-04 |
| cnvd-2026-08750 | Microsoft Graphics Kernel竞争条件问题漏洞 | 2026-01-19 | 2026-01-22 |
| cnvd-2026-08749 | Microsoft Graphics Component资源管理错误漏洞 | 2026-01-19 | 2026-01-22 |
| cnvd-2026-08748 | Microsoft Excel访问控制错误漏洞 | 2026-01-19 | 2026-01-22 |
| cnvd-2026-08747 | Microsoft Excel代码执行漏洞(CNVD-2026-08747) | 2026-01-19 | 2026-01-22 |
| cnvd-2026-08746 | Microsoft Excel代码执行漏洞(CNVD-2026-08746) | 2026-01-19 | 2026-01-22 |
| cnvd-2026-08444 | Online Course Registration System /manage-students.php文件SQL注入漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08443 | Online Course Registration System /enroll.php文件SQL注入漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08435 | iccDEV CIccSingleSampledeCurveXml类的类型混淆漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08434 | iccDEV CIccCLUT::Init函数未定义行为漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08433 | iccDEV未定义行为漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08432 | iccDEV内存泄漏漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08431 | iccDEV CIccXmlArrayType::ParseTextCountNum函数整数溢出漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08430 | iccDEV CIccXform::Create函数释放后重用漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08429 | iccDEV Unicode缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08428 | iccDEV CIccTagText::Read函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08427 | iccDEV CIccTagLut8::Validate函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08426 | iccDEV CIccTagLut16::Validate函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08425 | iccDEV CIccSparseMatrix::CIccSparseMatrix函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08424 | iccDEV CIccProfile::LoadTag函数输入验证不当漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-08423 | iccDEV CIccMBB::Validate函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-00661 | Уязвимость функции update_pointer_new() RDP-клиента FreeRDP, позволяющая нарушителю выпол… | 21.01.2026 | 27.01.2026 |
| bdu:2026-00660 | Уязвимость функции Glyph_Alloc() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отка… | 21.01.2026 | 27.01.2026 |
| bdu:2026-00659 | Уязвимость функции clear_decompress_bands_data() RDP-клиента FreeRDP, позволяющая нарушит… | 21.01.2026 | 27.01.2026 |
| bdu:2026-00658 | Уязвимость функции clear_decompress_residual_data() RDP-клиента FreeRDP, позволяющая нару… | 21.01.2026 | 27.01.2026 |
| bdu:2026-00657 | Уязвимость функции gdi_SurfaceToSurface() RDP-клиента FreeRDP, позволяющая нарушителю вып… | 21.01.2026 | 27.01.2026 |
| bdu:2026-00656 | Уязвимость функции clear_decompress() RDP-клиента FreeRDP, позволяющая нарушителю выполни… | 21.01.2026 | 27.01.2026 |
| bdu:2026-00655 | Уязвимость функции planar_decompress_plane_rle() RDP-клиента FreeRDP, позволяющая нарушит… | 21.01.2026 | 27.01.2026 |
| bdu:2026-00654 | Уязвимость пакетов программ Microsoft Office, Microsoft 365 Apps for Enterprise, связанна… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00653 | Уязвимость веб-интерфейса управления программно-аппаратного средства управления программн… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00652 | Уязвимость веб-интерфейса управления программно-аппаратного средства управления программн… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00651 | Уязвимость веб-интерфейса управления программно-аппаратного средства управления программн… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00650 | Уязвимость веб-интерфейса управления программно-аппаратного средства управления программн… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00649 | Уязвимость диспетчера окон рабочего стола (Desktop Window Manager) операционных систем Wi… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00648 | Уязвимость операционной системы Dell PowerScale OneFS, связанная с неправильным присвоени… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00647 | Уязвимость операционной системы Dell PowerScale OneFS, связанная с недостаточным ограниче… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00646 | Уязвимость операционной системы Dell PowerScale OneFS, связанная с ошибками синхронизации… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00645 | Уязвимость функции ReadXBMImage() консольного графического редактора ImageMagick, позволя… | 21.01.2026 | 30.01.2026 |
| bdu:2026-00644 | Уязвимость метода BilateralBlurImage функции AcquireBilateralTLS() консольного графическо… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00643 | Уязвимость команды MSL (Magick Scripting Language) <write> консольного графического редак… | 21.01.2026 | 30.01.2026 |
| bdu:2026-00642 | Уязвимость компонента Win32k (Win32k.sys) операционных систем Windows, позволяющая наруши… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00641 | Уязвимость инструмента управления службами Windows Management Services операционных систе… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00640 | Уязвимость службы диспетчера доступа к возможностям Capability Access Management Service … | 21.01.2026 | 21.01.2026 |
| bdu:2026-00639 | Уязвимость службы диспетчера доступа к возможностям Capability Access Management Service … | 21.01.2026 | 21.01.2026 |
| bdu:2026-00638 | Уязвимость пакетов программ Microsoft SharePoint Server и SharePoint Enterprise Server, с… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00637 | Уязвимость интерфейса Network Driver Interface Standard (NDIS) операционных систем Window… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00636 | Уязвимость модуля crypto среды выполнения для JavaScript и TypeScript Deno, позволяющая н… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00635 | Уязвимость пакетов программ Microsoft Office, Microsoft 365 Apps for Enterprise, связанна… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00634 | Уязвимость функции strcpy() микропрограммного обеспечения маршрутизаторов UTT 520W, позво… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00633 | Уязвимость пакетов программ Microsoft Office, Microsoft 365 Apps for Enterprise, связанна… | 21.01.2026 | 21.01.2026 |
| bdu:2026-00632 | Уязвимость установщика программы для управления SSD-дисками Samsung Magician, позволяющая… | 20.01.2026 | 20.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201903-0926 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9… | 2026-03-09T22:05:55.135000Z |
| var-201708-0038 | The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 al… | 2026-03-09T22:04:39.944000Z |
| var-200704-0225 | Buffer overflow in the AirPortDriver module for AirPort in Apple Mac OS X 10.3.9 through … | 2026-03-09T22:04:39.551000Z |
| var-202012-1278 | curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stac… | 2026-03-09T22:04:04.260000Z |
| var-201409-0340 | Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x… | 2026-03-09T22:03:47.944000Z |
| var-201310-0351 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, a… | 2026-03-09T22:03:47.460000Z |
| var-202205-1291 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2026-03-09T22:03:07.530000Z |
| var-201606-0478 | OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary check… | 2026-03-09T22:02:04.960000Z |
| var-201503-0388 | Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c i… | 2026-03-09T22:02:04.618000Z |
| var-201504-0166 | Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earli… | 2026-03-09T22:01:34.175000Z |
| var-201006-1183 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2026-03-09T22:01:33.689000Z |
| var-202110-1685 | This issue was addressed with improved checks. This issue is fixed in Security Update 202… | 2026-03-09T22:01:31.914000Z |
| var-201907-0806 | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typ… | 2026-03-09T22:00:24.213000Z |
| var-202202-0906 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. - - - -… | 2026-03-09T22:00:24.071000Z |
| var-201006-1245 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2026-03-09T22:00:23.140000Z |
| var-201805-0963 | Systems with microprocessors utilizing speculative execution and speculative execution of… | 2026-03-09T22:00:22.852000Z |
| var-202206-1186 | Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may all… | 2026-03-09T22:00:02.790000Z |
| var-202101-0221 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded qu… | 2026-03-09T21:59:56.744000Z |
| var-201204-0112 | The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before … | 2026-03-09T21:59:21.890000Z |
| var-201008-0172 | Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType befor… | 2026-03-09T21:59:11.053000Z |
| var-201902-0360 | In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popov… | 2026-03-09T21:59:10.534000Z |
| var-200407-0196 | Floating point information leak in the context switch code for Linux 2.4.x only checks th… | 2026-03-09T21:59:10.269000Z |
| var-200609-0707 | The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will cra… | 2026-03-09T21:57:50.996000Z |
| var-200810-0139 | Buffer overflow in ColorSync in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to ca… | 2026-03-09T21:57:18.265000Z |
| var-201006-1144 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2026-03-09T21:56:44.414000Z |
| var-200905-0155 | Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denia… | 2026-03-09T21:56:41.294000Z |
| var-201912-1864 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T21:56:22.102000Z |
| var-202212-1523 | The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2… | 2026-03-09T21:55:47.417000Z |
| var-200803-0028 | The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unu… | 2026-03-09T21:54:38.148000Z |
| var-201901-0389 | BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, l… | 2026-03-09T21:54:34.274000Z |