Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-26944
8.8 (3.1)
Dell PowerProtect Data Domain, versions 7.7.1.0 t… Dell
PowerProtect Data Domain
2026-04-20T15:51:30.118Z 2026-04-22T03:55:56.073Z
CVE-2026-24468
5.3 (3.1)
OpenAEV Vulnerable to Username/Email Enumeration Throu… OpenAEV-Platform
openaev
2026-04-20T15:45:48.572Z 2026-04-20T16:24:44.061Z
CVE-2026-24467
9.1 (3.1)
OpenAEV's Improper Password Reset Token Management Lea… OpenAEV-Platform
openaev
2026-04-20T15:40:56.203Z 2026-04-20T16:21:50.299Z
CVE-2026-6066
7.1 (3.1)
Unencrypted Client‑Server Communication in ConnectWise… ConnectWise
Automate
2026-04-20T15:26:31.843Z 2026-04-20T16:13:06.767Z
CVE-2026-41245
5.9 (3.1)
Junrar: Path Traversal (Zip-Slip) via Sibling Director… junrar
junrar
2026-04-20T15:15:24.540Z 2026-04-20T16:35:09.317Z
CVE-2026-40896
6.5 (3.1)
OpenProject has Cross-Project Meeting Agenda Item Inje… opf
openproject
2026-04-20T15:12:52.279Z 2026-04-20T16:13:10.714Z
CVE-2026-6652
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
Pagekit CMS StringStorage Template PhpEngine.php evalu… Pagekit
CMS
2026-04-20T15:00:22.525Z 2026-04-20T16:14:56.950Z
CVE-2026-3219
4.6 (4.0)
pip doesn't reject concatenated ZIP and tar archives Python Packaging Authority
pip
2026-04-20T14:55:38.282Z 2026-04-20T20:15:23.710Z
CVE-2026-39918
9.2 (4.0)
9.8 (3.1)
Vvveb < 1.0.8.1 Code Injection via Installation Endpoint givanz
Vvveb
2026-04-20T14:46:33.549Z 2026-04-20T15:36:55.619Z
CVE-2026-6651
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
erponline.xyz ERP Online Inventory Edit Item cross sit… erponline.xyz
ERP Online
2026-04-20T14:45:11.560Z 2026-04-20T15:21:57.084Z
CVE-2026-6650
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
Z-BlogPHP ZBA File app_upload.php UnPack unrestricted upload n/a
Z-BlogPHP
2026-04-20T14:30:13.825Z 2026-04-20T16:23:25.105Z
CVE-2026-34428
8.3 (4.0)
7.7 (3.1)
Vvveb < 1.0.8.1 SSRF via oEmbedProxy givanz
Vvveb
2026-04-20T13:55:36.802Z 2026-04-20T14:49:33.646Z
CVE-2026-34427
8.7 (4.0)
8.8 (3.1)
Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save givanz
Vvveb
2026-04-20T13:55:15.311Z 2026-04-20T14:51:12.245Z
CVE-2026-34429
5.1 (4.0)
5.4 (3.1)
Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename givanz
Vvveb
2026-04-20T13:54:37.019Z 2026-04-20T14:56:19.205Z
CVE-2026-5760
9.8 (3.1)
CVE-2026-5760 SGLang
SGLang
2026-04-20T13:46:23.603Z 2026-04-20T15:29:54.098Z
CVE-2026-6369
5.7 (4.0)
Exposed Session Token in canonical-livepatch client snap Canonical
canonical-livepatch
2026-04-20T13:38:13.691Z 2026-04-20T14:06:18.537Z
CVE-2026-4048
8.4 (3.1)
OS Command Injection Remote Code Execution Vulnerabili… Progress Software
LoadMaster
2026-04-20T13:36:49.475Z 2026-04-22T03:55:54.495Z
CVE-2026-3519
8.4 (3.1)
OS Command Injection Remote Code Execution Vulnerabili… Progress Software
LoadMaster
2026-04-20T13:32:50.259Z 2026-04-22T03:55:53.355Z
CVE-2026-6649
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
Qibo CMS headers server-side request forgery Qibo
CMS
2026-04-20T13:30:41.191Z 2026-04-20T14:14:18.603Z
CVE-2026-3518
8.4 (3.1)
OS Command Injection Remote Code Execution Vulnerabili… Progress Software
LoadMaster
2026-04-20T13:29:33.794Z 2026-04-22T03:55:52.242Z
CVE-2026-33557
N/A
Apache Kafka: Missing JWT token validation in OAUTHBEA… Apache Software Foundation
Apache Kafka
2026-04-20T13:28:43.669Z 2026-04-20T14:30:30.936Z
CVE-2025-66335
N/A
Apache Doris MCP Server: MCP SQL inject Apache Software Foundation
Apache Doris MCP Server
2026-04-20T13:27:27.764Z 2026-04-20T14:17:11.395Z
CVE-2026-3517
8.4 (3.1)
OS Command Injection Remote Code Execution Vulnerabili… Progress Software
LoadMaster
2026-04-20T13:22:54.867Z 2026-04-22T03:55:51.123Z
CVE-2026-33558
N/A
Apache Kafka, Apache Kafka Clients: Information Exposu… Apache Software Foundation
Apache Kafka
2026-04-20T13:20:38.059Z 2026-04-20T14:20:41.640Z
CVE-2026-6648
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
Qibo CMS Internal Message cross site scripting Qibo
CMS
2026-04-20T13:00:44.627Z 2026-04-20T14:51:00.368Z
CVE-2026-6636
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
p2r3 convert API buildCache.js Bun.serve path traversal p2r3
convert
2026-04-20T12:00:17.473Z 2026-04-20T14:58:24.131Z
CVE-2026-5958
2.1 (4.0)
Race Condition in GNU Sed GNU
Sed
2026-04-20T11:59:32.214Z 2026-04-20T13:25:59.530Z
CVE-2026-6635
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
rowboatlabs rowboat tools_webhook app.py tool_call imp… rowboatlabs
rowboat
2026-04-20T11:45:12.769Z 2026-04-20T13:26:31.802Z
CVE-2026-6634
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
usememos UpdateInstanceSetting App.tsx memos_access_to… usememos
memos
2026-04-20T11:30:13.847Z 2026-04-20T15:02:48.499Z
CVE-2026-6633
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
Yifang CMS Extended Management L_rbac_admin.php store … Yifang
CMS
2026-04-20T11:15:11.127Z 2026-04-20T13:01:44.244Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-11249
N/A
This CVE id was assigned as a duplicate of CVE-2025-66414. N/A N/A 2026-04-20T18:52:18.108Z
CVE-2026-41389
6.3 (4.0)
5.8 (3.1)
OpenClaw 2026.4.7 < 2026.4.15 - Arbitrary File Read vi… OpenClaw
OpenClaw
2026-04-20T17:48:43.704Z 2026-04-20T18:05:03.103Z
CVE-2026-39112
5.4 (3.1)
Cross Site Scripting vulnerability in Apartment V… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-20T18:07:53.479Z
CVE-2026-39111
7.5 (3.1)
SQL Injection vulnerability in Apartment Visitors… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-20T18:12:54.038Z
CVE-2026-39110
8.2 (3.1)
SQL Injection vulnerability in Apartment Visitors… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-20T18:34:55.729Z
CVE-2026-39109
9.4 (3.1)
SQL Injection vulnerability in Apartment Visitors… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-20T18:31:04.461Z
CVE-2026-26399
5.3 (3.1)
A stack-use-after-return issue exists in the Ardu… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-22T19:53:16.622Z
CVE-2026-23758
5.1 (4.0)
6.4 (4.0)
GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter GFI Software
HelpDesk
2026-04-20T17:30:06.853Z 2026-04-20T17:45:55.788Z
CVE-2026-23757
5.1 (4.0)
5.4 (3.1)
GFI HelpDesk < 4.99.10 Stored XSS via Reports Module GFI Software
HelpDesk
2026-04-20T17:27:56.067Z 2026-04-20T18:07:01.630Z
CVE-2026-23756
5.1 (4.0)
5.4 (3.1)
GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter St… GFI Software
HelpDesk
2026-04-20T17:30:51.162Z 2026-04-20T18:08:49.925Z
CVE-2026-23753
4.8 (4.0)
4.8 (3.1)
GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter GFI Software
HelpDesk
2026-04-20T17:33:59.134Z 2026-04-21T13:31:13.580Z
CVE-2026-23752
4.8 (4.0)
4.8 (3.1)
GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter GFI Software
HelpDesk
2026-04-20T17:33:23.424Z 2026-04-20T18:09:59.603Z
CVE-2026-6662
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
ericc-ch copilot-api Token Endpoint server.ts cors cro… ericc-ch
copilot-api
2026-04-20T17:00:17.800Z 2026-04-20T18:09:27.691Z
CVE-2026-41445
8.7 (4.0)
8.8 (3.1)
KissFFT Integer Overflow Heap Buffer Overflow via kiss… mborgerding
kissfft
2026-04-20T16:18:50.371Z 2026-04-20T17:57:10.156Z
CVE-2026-40488
8.7 (4.0)
OpenMage LTS has Customer File Upload Extension Blockl… OpenMage
magento-lts
2026-04-20T16:23:07.429Z 2026-04-20T16:55:05.724Z
CVE-2026-40098
5.3 (4.0)
OpenMage LTS imports cross-user wishlist item via shar… OpenMage
magento-lts
2026-04-20T16:19:55.157Z 2026-04-20T18:10:44.490Z
CVE-2026-35154
6.3 (3.1)
Dell PowerProtect Data Domain appliances, version… Dell
PowerProtect Data Domain appliances
2026-04-20T16:50:56.856Z 2026-04-22T03:56:08.697Z
CVE-2026-30269
9.9 (3.1)
Improper access control in Doorman v0.1.0 and v1.… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-20T18:23:39.346Z
CVE-2026-30266
7.8 (3.1)
Insecure Permissions vulnerability in DeepCool De… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-23T13:40:34.695Z
CVE-2026-28684
6.6 (3.1)
python-dotenv: Symlink following in set_key allows arb… theskumar
python-dotenv
2026-04-20T16:25:12.302Z 2026-04-20T17:43:09.477Z
CVE-2026-26951
6.7 (3.1)
Dell PowerProtect Data Domain, versions 7.7.1.0 t… Dell
PowerProtect Data Domain
2026-04-20T16:44:49.612Z 2026-04-22T03:56:07.580Z
CVE-2026-26943
7.2 (3.1)
Dell PowerProtect Data Domain, versions 7.7.1.0 t… Dell
PowerProtect Data Domain
2026-04-20T16:28:53.110Z 2026-04-22T03:56:04.147Z
CVE-2026-26942
6.7 (3.1)
Dell PowerProtect Data Domain, versions 8.5 throu… Dell
PowerProtect Data Domain
2026-04-20T16:34:43.219Z 2026-04-22T03:56:05.261Z
CVE-2026-25525
4.9 (3.1)
OpenMage LTS has Path Traversal Filter Bypass in Dataf… OpenMage
magento-lts
2026-04-20T16:14:14.366Z 2026-04-21T13:27:55.707Z
CVE-2026-25524
8.1 (3.1)
OpenMage LTS's Phar Deserialization leads to Remote Co… OpenMage
magento-lts
2026-04-20T16:11:16.922Z 2026-04-20T16:54:43.603Z
CVE-2026-24506
7.2 (3.1)
Dell PowerProtect Data Domain, versions 7.7.1.0 t… Dell
PowerProtect Data Domain
2026-04-20T16:22:37.689Z 2026-04-22T03:56:02.944Z
CVE-2026-24505
7.2 (3.1)
Dell PowerProtect Data Domain, versions 8.5 throu… Dell
PowerProtect Data Domain
2026-04-20T16:15:46.863Z 2026-04-22T03:56:00.561Z
CVE-2026-24504
7.2 (3.1)
Dell PowerProtect Data Domain, versions 7.7.1.0 t… Dell
PowerProtect Data Domain
2026-04-20T16:08:35.314Z 2026-04-22T03:55:59.007Z
CVE-2026-22761
6.7 (3.1)
Dell PowerProtect Data Domain, versions 8.5 throu… Dell
PowerProtect Data Domain
2026-04-20T16:39:40.268Z 2026-04-22T03:56:06.445Z
CVE-2025-66954
6.5 (3.1)
A vulnerability exists in the Buffalo Link Statio… n/a
n/a
2026-04-20T00:00:00.000Z 2026-04-20T16:54:28.824Z
ID Severity Description Published Updated
ghsa-vqmj-h423-xx64
4.3 (3.1)
2.1 (4.0)
A vulnerability was found in EMQ EMQX Enterprise up to 6.1.0. The impacted element is an unknown fu… 2026-04-19T12:31:15Z 2026-04-19T12:31:15Z
ghsa-rgfh-mp7v-25f9
7.3 (3.1)
5.5 (4.0)
A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.… 2026-04-19T12:31:15Z 2026-04-19T12:31:15Z
ghsa-m9r6-cg89-ghg2
8.8 (3.1)
7.4 (4.0)
A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affect… 2026-04-19T09:30:13Z 2026-04-19T09:30:13Z
ghsa-fjp8-jqj5-cwp2
4.7 (3.1)
2.0 (4.0)
A vulnerability was detected in EyouCMS up to 1.7.1. This issue affects the function edit_adminlogo… 2026-04-19T09:30:13Z 2026-04-19T09:30:13Z
ghsa-8q43-5p52-h357
8.8 (3.1)
7.4 (4.0)
A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function … 2026-04-19T09:30:13Z 2026-04-19T09:30:13Z
ghsa-7786-mqff-chgr
7.3 (3.1)
5.5 (4.0)
A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage of… 2026-04-19T09:30:13Z 2026-04-19T09:30:13Z
ghsa-x8cm-r99c-gv26
4.3 (3.1)
5.3 (4.0)
A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 o… 2026-04-19T06:31:22Z 2026-04-19T06:31:22Z
ghsa-w3fc-f758-c6x7
6.4 (3.1)
The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cr… 2026-04-19T06:31:22Z 2026-04-19T06:31:22Z
ghsa-gwjg-rpxc-39ph
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-04-19T00:31:23Z 2026-04-19T00:31:23Z
ghsa-5w6h-pjw6-wvc6
5.4 (3.1)
apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session … 2026-04-18T15:34:15Z 2026-04-22T17:36:41Z
ghsa-vpmc-9q98-4qjf
6.4 (3.1)
The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … 2026-04-18T12:30:17Z 2026-04-18T12:30:17Z
ghsa-jx47-j339-6qpw
5.4 (3.1)
The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions… 2026-04-18T12:30:17Z 2026-04-18T12:30:17Z
ghsa-23v6-h45q-rxch
6.4 (3.1)
The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scr… 2026-04-18T12:30:17Z 2026-04-18T12:30:17Z
ghsa-w9r4-94fj-xp69
3.7 (3.1)
Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries 2026-04-18T09:30:20Z 2026-04-22T17:25:55Z
ghsa-w7cf-2pmc-5m4c
5.3 (3.1)
Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false 2026-04-18T09:30:20Z 2026-04-22T17:17:28Z
ghsa-hc77-37fq-x324
4.0 (3.1)
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflo… 2026-04-18T09:30:20Z 2026-04-18T09:30:20Z
ghsa-h97w-pm3w-mwmc
7.5 (3.1)
Apache Airflow allows users with asset materialize permissions to trigger DAGs outside of their per… 2026-04-18T09:30:20Z 2026-04-22T17:25:30Z
ghsa-6ffj-2wg2-w45j
9.8 (3.1)
Apache Airflow allows code execution through crafted XCom payloads 2026-04-18T09:30:20Z 2026-04-21T22:50:35Z
ghsa-6337-2587-f2jq
8.8 (3.1)
An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the … 2026-04-18T09:30:20Z 2026-04-20T18:31:45Z
ghsa-vf7g-wm62-vfxh
6.4 (3.1)
The Flipbox Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… 2026-04-18T06:30:14Z 2026-04-18T06:30:14Z
ghsa-cwq2-35x4-44pq
8.8 (3.1)
The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arb… 2026-04-18T06:30:14Z 2026-04-18T06:30:14Z
ghsa-7m2j-268v-rc6r
6.4 (3.1)
The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Sit… 2026-04-18T06:30:14Z 2026-04-18T06:30:14Z
ghsa-5pgv-4jf4-9r43
6.9 (3.1)
In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 … 2026-04-18T06:30:14Z 2026-04-18T06:30:14Z
ghsa-jxx9-cx33-fcm4
6.1 (3.1)
The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode_… 2026-04-18T03:31:06Z 2026-04-18T03:31:06Z
ghsa-5v87-p3g9-j392
6.4 (3.1)
The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkin_plac… 2026-04-18T03:31:06Z 2026-04-18T03:31:06Z
ghsa-8m29-fpq5-89jj
9.3 (4.0)
Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling 2026-04-18T01:15:24Z 2026-04-18T01:15:24Z
ghsa-29x4-r6jv-ff4w
6.9 (4.0)
Zebra Vulnerable to Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients 2026-04-18T01:15:10Z 2026-04-18T01:15:10Z
ghsa-452v-w3gx-72wg
9.2 (4.0)
Zebra has rk Identity Point Panic in Transaction Verification 2026-04-18T01:14:57Z 2026-04-18T01:14:57Z
ghsa-9j88-vvj5-vhgr
6.5 (3.1)
MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade 2026-04-18T01:13:46Z 2026-04-18T01:13:46Z
ghsa-cjcx-jfp2-f7m2
8.7 (3.1)
pretalx vulnerable to stored cross-site scripting in organizer search typeahead 2026-04-18T01:11:38Z 2026-04-18T01:11:38Z
ID Severity Description Package Published Updated
pysec-2022-43170
6.5 (3.1)
An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6… tryton 2022-03-10T17:47:00+00:00 2024-11-21T14:23:02.248212+00:00
pysec-2022-186
Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" a… pyspark 2022-03-10T09:15:00Z 2022-05-17T21:40:53.336457Z
pysec-2022-34
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which… httpie 2022-03-07T23:15:00Z 2022-03-08T02:44:28.415437Z
pysec-2022-161
Open Redirect in GitHub repository archivy/archivy prior to 1.7.0. archivy 2022-03-06T23:15:00Z 2022-03-11T17:31:40.885093Z
pysec-2022-181
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0. pytorch-lightning 2022-03-05T22:15:00Z 2022-04-11T00:47:32.240193Z
pysec-2022-31
The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE… weblate 2022-03-04T20:15:00Z 2022-03-04T21:31:07.631627Z
pysec-2022-162
Weblate is a web based localization tool with tight version control integration. Prior to… weblate 2022-03-04T17:15:00Z 2022-03-11T17:35:01.661733Z
pysec-2022-160
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Pr… twisted 2022-03-03T21:15:00Z 2022-03-10T17:35:00.079970Z
pysec-2022-164
A flaw was found in Ansible Engine's ansible-connection module, where sensitive informati… ansible 2022-03-03T19:15:00Z 2022-03-15T14:28:02.422806Z
pysec-2022-159
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/sc… scrapy 2022-03-02T04:15:00Z 2022-03-09T19:24:19.981012Z
pysec-2022-43052
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… request-util 2022-03-01T21:15:00+00:00 2023-07-03T20:33:00+00:00
pysec-2022-43051
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… pyquest 2022-03-01T21:15:00+00:00 2023-07-03T20:33:00+00:00
pysec-2022-35
Weblate is a copyleft software web-based continuous localization system. Versions prior t… weblate 2022-02-25T21:15:00Z 2022-03-08T17:35:37.351702Z
pysec-2022-30
In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize us… apache-airflow 2022-02-25T09:15:00Z 2022-03-04T21:27:14.083744Z
pysec-2022-29
It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attack… apache-airflow 2022-02-25T09:15:00Z 2022-03-04T21:27:14.014874Z
pysec-2022-33
b2-sdk-python is a python library to access cloud storage provided by backblaze. Linux an… b2sdk 2022-02-23T23:15:00Z 2022-03-07T17:33:46.032301Z
pysec-2022-32
B2 Command Line Tool is the official command line tool for the backblaze cloud storage se… b2 2022-02-23T23:15:00Z 2022-03-07T17:33:45.997096Z
pysec-2022-28
Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1. mlflow 2022-02-23T09:15:00Z 2022-03-02T06:39:30.836439Z
pysec-2022-38
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable… cobbler 2022-02-20T18:15:00Z 2022-03-09T00:15:58.984313Z
pysec-2022-37
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function che… cobbler 2022-02-19T00:15:00Z 2022-03-09T00:15:58.932039Z
pysec-2022-27
twisted is an event-driven networking engine written in Python. In affected versions twis… twisted 2022-02-07T22:15:00Z 2022-02-15T06:31:29.205025Z
pysec-2022-99
Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `… tensorflow-cpu 2022-02-04T23:15:00Z 2022-05-23T17:22:06.927466Z
pysec-2022-98
Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grapple… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:36.051133Z
pysec-2022-97
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a den… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:35.928489Z
pysec-2022-96
Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grapple… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:35.797116Z
pysec-2022-95
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a den… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:35.674710Z
pysec-2022-94
Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorF… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:35.562344Z
pysec-2022-93
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:35.438139Z
pysec-2022-92
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a den… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:35.311751Z
pysec-2022-91
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a den… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:35.169396Z
ID Description Updated
ID Description Published Updated
mal-2026-2036 Malicious code in @emilgroup/auth-sdk (npm) 2026-03-22T17:49:17Z 2026-03-26T00:50:43Z
mal-2026-2033 Malicious code in @emilgroup/accounting-sdk (npm) 2026-03-22T17:48:24Z 2026-03-26T00:50:43Z
mal-2026-2031 Malicious code in @emilgroup/account-sdk (npm) 2026-03-22T17:45:33Z 2026-03-26T00:50:43Z
mal-2026-2067 Malicious code in babel-plugin-react-pure-component (npm) 2026-03-22T17:43:09Z 2026-03-26T00:50:44Z
mal-2026-2030 Malicious code in @pypestream/floating-ui-dom (npm) 2026-03-22T17:11:18Z 2026-03-26T00:50:43Z
mal-2026-2028 Malicious code in pipinpeace-bind (PyPI) 2026-03-22T16:56:09Z 2026-03-22T16:56:09Z
mal-2026-2029 Malicious code in pipinpeace-reverse (PyPI) 2026-03-22T16:50:18Z 2026-03-22T16:50:18Z
mal-2026-2027 Malicious code in opengov-k6-core (npm) 2026-03-22T16:22:33Z 2026-03-26T00:50:47Z
mal-2026-2026 Malicious code in pipinpeace-env (PyPI) 2026-03-22T15:49:50Z 2026-03-22T15:49:50Z
mal-2026-2025 Malicious code in remitly-blog (npm) 2026-03-22T07:20:42Z 2026-03-23T05:16:30Z
mal-2026-2024 Malicious code in @mesh-helpers/themehelper (npm) 2026-03-22T06:07:52Z 2026-03-23T05:16:24Z
mal-2026-2022 Malicious code in @mesh-components/card (npm) 2026-03-22T05:55:53Z 2026-03-23T05:16:24Z
mal-2026-2023 Malicious code in @mesh-components/customthemeprovider (npm) 2026-03-22T05:55:36Z 2026-03-23T05:16:24Z
mal-2026-2021 Malicious code in @mesh-helpers/common (npm) 2026-03-22T05:30:41Z 2026-03-23T05:16:24Z
mal-2026-2018 Malicious code in @modals/blockchain (npm) 2026-03-21T22:54:09Z 2026-03-23T05:16:24Z
mal-2026-2019 Malicious code in @modals/layout (npm) 2026-03-21T22:54:07Z 2026-03-23T05:16:24Z
mal-2026-2020 Malicious code in aiolrucache (PyPI) 2026-03-21T22:53:52Z 2026-03-21T22:53:52Z
mal-2026-2017 Malicious code in thisismytest (PyPI) 2026-03-21T18:24:07Z 2026-03-22T23:12:31Z
mal-2026-2016 Malicious code in qyrm-pipinject4 (PyPI) 2026-03-21T15:46:26Z 2026-03-21T15:46:26Z
mal-2026-2015 Malicious code in lingewindows (npm) 2026-03-21T15:46:11Z 2026-03-23T05:16:28Z
mal-2026-2014 Malicious code in address-autocompletetest (npm) 2026-03-21T15:30:37Z 2026-03-23T05:16:25Z
mal-2026-2013 Malicious code in nump (PyPI) 2026-03-21T14:34:04Z 2026-03-21T14:34:15Z
mal-2026-2012 Malicious code in characterai-poc (npm) 2026-03-21T13:28:49Z 2026-03-24T13:50:58Z
mal-2026-2011 Malicious code in cms-catalogue (npm) 2026-03-21T10:35:35Z 2026-03-23T05:16:26Z
mal-2026-2010 Malicious code in yelp-react-component-badge (npm) 2026-03-21T09:50:35Z 2026-03-24T13:51:03Z
mal-2026-2009 Malicious code in repo-typescript-config (npm) 2026-03-21T06:08:24Z 2026-03-24T13:51:02Z
mal-2026-2008 Malicious code in nintendoamerica-ncom (npm) 2026-03-21T05:40:41Z 2026-03-24T13:51:01Z
mal-2026-2007 Malicious code in uniswap-info (npm) 2026-03-21T04:51:35Z 2026-03-23T05:16:31Z
mal-2026-2006 Malicious code in mangrove-sdk (PyPI) 2026-03-20T21:03:39Z 2026-03-20T21:03:40Z
mal-2026-2005 Malicious code in efghr-honeybee-sdk (PyPI) 2026-03-20T20:54:43Z 2026-03-20T20:54:43Z
ID Description Published Updated
wid-sec-w-2025-2343 SolarWinds SWOSH: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-20T22:00:00.000+00:00 2025-10-20T22:00:00.000+00:00
wid-sec-w-2025-2342 MongoDB: Schwachstelle ermöglicht Denial of Service 2025-10-20T22:00:00.000+00:00 2025-10-20T22:00:00.000+00:00
wid-sec-w-2025-2341 MediaWiki Extensions: Mehrere Schwachstellen ermöglichen Codeausführung 2025-10-20T22:00:00.000+00:00 2025-10-22T22:00:00.000+00:00
wid-sec-w-2025-2340 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-19T22:00:00.000+00:00 2026-03-05T23:00:00.000+00:00
wid-sec-w-2025-2339 ImageMagick (BMP decoder): Schwachstelle ermöglicht Denial of Service 2025-10-19T22:00:00.000+00:00 2025-12-18T23:00:00.000+00:00
wid-sec-w-2025-2338 IBM Sterling Connect:Direct: Schwachstelle ermöglicht Denial of Service 2025-10-19T22:00:00.000+00:00 2025-10-19T22:00:00.000+00:00
wid-sec-w-2025-2337 Flowise: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten 2025-10-19T22:00:00.000+00:00 2025-10-19T22:00:00.000+00:00
wid-sec-w-2025-2336 MediaWiki Extensions: Mehrere Schwachstellen 2025-10-19T22:00:00.000+00:00 2025-10-22T22:00:00.000+00:00
wid-sec-w-2025-2335 Synacor Zimbra: Schwachstelle ermöglicht Manipulation von Dateien 2025-10-16T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2334 Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen 2025-10-16T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2333 Pega Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-10-16T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2332 Strapi: Mehrere Schwachstellen 2025-10-16T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2331 MinIO: Schwachstelle ermöglicht Privilegieneskalation 2025-10-16T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2330 Moxa Router: Mehrere Schwachstellen 2025-10-16T22:00:00.000+00:00 2025-10-19T22:00:00.000+00:00
wid-sec-w-2025-2329 cPanel/WHM (PostgreSQL, Perl): Mehrere Schwachstellen 2025-10-16T22:00:00.000+00:00 2025-10-27T23:00:00.000+00:00
wid-sec-w-2025-2328 IBM MQ: Schwachstelle ermöglicht Denial of Service 2025-10-16T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2327 binutils: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-16T22:00:00.000+00:00 2025-12-01T23:00:00.000+00:00
wid-sec-w-2025-2326 Icinga: Mehrere Schwachstellen 2025-10-16T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2325 xpdf: Schwachstelle ermöglicht Denial of Service 2025-10-16T22:00:00.000+00:00 2025-12-17T23:00:00.000+00:00
wid-sec-w-2025-2324 HCL BigFix Modern Client Management (MCM) and BigFix Mobile: Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen 2025-10-15T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2323 Cisco IP Phone: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2322 Samba: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-11-27T23:00:00.000+00:00
wid-sec-w-2025-2321 Devolutions Server: Schwachstelle ermöglicht Manipulation von Dateien 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2320 VMware Tanzu Spring Framework: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-10-15T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2319 Apache ActiveMQ: Schwachstelle ermöglicht Codeausführung 2025-10-15T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2318 VMware Tanzu Spring Cloud: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2317 Ubiquiti UniFi: Schwachstelle ermöglicht Ausführung von Debug-Funktionen 2025-10-15T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2316 Nextcloud "Tables" App: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2315 Mattermost Server und Mobile: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-11-27T23:00:00.000+00:00
wid-sec-w-2025-2314 HCL BigFix: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
ID Description Published Updated
icsa-24-128-02 SUBNET Substation Server 2024-05-07T06:00:00.000000Z 2024-05-07T06:00:00.000000Z
icsa-24-128-01 PTC Codebeamer 2024-05-07T06:00:00.000000Z 2024-05-07T06:00:00.000000Z
icsa-24-123-02 Delta Electronics DIAEnergie 2024-05-02T06:00:00.000000Z 2024-05-02T06:00:00.000000Z
icsa-24-123-01 CyberPower PowerPanel Business 2024-05-02T06:00:00.000000Z 2025-08-07T06:00:00.000000Z
icsa-24-354-02 Hitachi Energy SDM600 2024-04-30T12:30:00.000000Z 2024-04-30T12:30:00.000000Z
icsa-24-121-01 Delta Electronics CNCSoft-G2 DOPSoft (Update A) 2024-04-30T06:00:00.000000Z 2025-10-16T06:00:00.000000Z
icsa-25-023-02 Hitachi Energy RTU500 Series Product (Update B) 2024-04-30T00:00:00.000000Z 2026-03-03T07:00:00.000000Z
icsa-24-116-04 Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC 2024-04-25T06:00:00.000000Z 2024-04-25T06:00:00.000000Z
icsa-24-116-01 Hitachi Energy RTU500 Series 2024-04-25T06:00:00.000000Z 2024-04-25T06:00:00.000000Z
icsa-24-116-03 Siemens RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW 2024-04-19T00:00:00.000000Z 2024-07-09T00:00:00.000000Z
icsa-24-109-01 Unitronics Vision Legacy series (Update A) 2024-04-18T06:00:00.000000Z 2024-04-30T06:00:00.000000Z
icsa-24-107-04 RoboDK RoboDK 2024-04-16T06:00:00.000000Z 2024-04-16T06:00:00.000000Z
icsa-24-107-03 Rockwell Automation ControlLogix and GuardLogix (Update A) 2024-04-16T06:00:00.000000Z 2024-05-09T06:00:00.000000Z
icsa-24-107-02 Electrolink FM/DAB/TV Transmitter 2024-04-16T06:00:00.000000Z 2024-04-16T06:00:00.000000Z
icsa-24-107-01 Measuresoft ScadaPro 2024-04-16T06:00:00.000000Z 2024-04-16T06:00:00.000000Z
icsa-24-102-09 Rockwell Automation 5015-AENFTXT (Update A) 2024-04-11T06:00:00.000000Z 2024-04-25T06:00:00.000000Z
icsa-24-100-01 SUBNET PowerSYSTEM Server and Substation Server 2024-04-09T06:00:00.000000Z 2024-04-09T06:00:00.000000Z
icsa-24-102-07 Siemens SINEC NMS 2024-04-09T00:00:00.000000Z 2024-04-09T00:00:00.000000Z
icsa-24-102-06 Siemens Parasolid 2024-04-09T00:00:00.000000Z 2024-04-09T00:00:00.000000Z
icsa-24-102-05 Siemens Scalance W1750D 2024-04-09T00:00:00.000000Z 2024-04-09T00:00:00.000000Z
icsa-24-102-04 Siemens RUGGEDCOM APE1808 2024-04-09T00:00:00.000000Z 2025-05-13T00:00:00.000000Z
icsa-24-102-03 Siemens RUGGEDCOM APE1808 2024-04-09T00:00:00.000000Z 2024-12-10T00:00:00.000000Z
icsa-24-102-02 Siemens SIMATIC WinCC 2024-04-09T00:00:00.000000Z 2025-01-14T00:00:00.000000Z
icsa-24-102-01 Siemens SIMATIC S7-1500 2024-04-09T00:00:00.000000Z 2026-02-12T07:00:00.000000Z
icsa-24-095-02 Schweitzer Engineering Laboratories SEL 700 series relays 2024-04-04T06:00:00.000000Z 2024-04-04T06:00:00.000000Z
icsa-24-095-01 Hitachi Energy Asset Suite 9 2024-04-04T06:00:00.000000Z 2024-04-04T06:00:00.000000Z
icsa-24-093-01 IOSIX IO-1020 Micro ELD 2024-04-02T06:00:00.000000Z 2024-04-02T06:00:00.000000Z
icsa-24-116-02 Hitachi Energy MACH SCM (Update A) 2024-03-26T11:32:43.000000Z 2025-09-30T11:32:43.000000Z
icsa-24-086-04 Rockwell Automation FactoryTalk View ME 2024-03-26T06:00:00.000000Z 2024-03-26T06:00:00.000000Z
icsa-24-086-03 Rockwell Automation Arena Simulation 2024-03-26T06:00:00.000000Z 2024-03-26T06:00:00.000000Z
ID Description Published Updated
cisco-sa-nfvis-g2dmvvh Cisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability 2021-09-01T16:00:00+00:00 2021-09-01T16:00:00+00:00
cisco-sa-ise-xss-4hnzfewr Cisco Identity Services Engine Cross-Site Scripting Vulnerability 2021-09-01T16:00:00+00:00 2021-09-01T16:00:00+00:00
cisco-sa-insight-infodis-2by2zpbb Cisco Nexus Insights Authenticated Information Disclosure Vulnerability 2021-09-01T16:00:00+00:00 2021-09-01T16:00:00+00:00
cisco-sa-ucs-ssh-dos-mgvmyrqy Cisco UCS Manager Software SSH Sessions Denial of Service Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-nxos-ngoam-dos-ltdb9hv Cisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-nxos-mpls-oam-dos-sgo9x5gm Cisco NX-OS Software MPLS OAM Denial of Service Vulnerability 2021-08-25T16:00:00+00:00 2022-09-02T17:41:51+00:00
cisco-sa-nxos-login-blockfor-rwjgvecu Cisco NX-OS Software system login block-for Denial of Service Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-nexus-acl-vrvqypve Cisco Nexus 9500 Series Switches Access Control List Bypass Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-naci-mdvul-vrkvgnu Cisco Nexus 9000 Series Fabric Switches ACI Mode Privilege Escalation Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-naci-afr-utjfo2d7 Cisco Nexus 9000 Series Fabric Switches ACI Mode Arbitrary File Read Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-n9kaci-tcp-dos-yxukt6gm Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP Denial of Service Vulnerability 2021-08-25T16:00:00+00:00 2022-02-23T15:56:25+00:00
cisco-sa-n9kaci-queue-wedge-clddefkf Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-capic-scss-bft75yrm Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-capic-pesc-pkmgk4j Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability 2021-08-25T16:00:00+00:00 2021-08-25T16:00:00+00:00
cisco-sa-capic-mdvul-hbsjbuvw Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities 2021-08-25T16:00:00+00:00 2022-03-08T16:52:49+00:00
cisco-sa-capic-frw-nt3ryxr2 Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability 2021-08-25T16:00:00+00:00 2022-03-08T16:52:47+00:00
cisco-sa-capic-chvul-ckfgybh8 Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability 2021-08-25T16:00:00+00:00 2022-06-07T17:29:33+00:00
cisco-sa-sni-data-exfil-mfgzxqln Multiple Cisco Products Server Name Identification Data Exfiltration Vulnerability 2021-08-18T16:00:00+00:00 2021-09-27T16:31:35+00:00
cisco-sa-sma-spam-jpxuxmk Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability 2021-08-18T16:00:00+00:00 2021-08-18T16:00:00+00:00
cisco-sa-qnx-toxjvpdl BlackBerry QNX-2021-001 Vulnerability Affecting Cisco Products: August 2021 2021-08-18T16:00:00+00:00 2021-08-25T14:44:04+00:00
cisco-sa-ipcamera-lldp-dos-ofp7j9j Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service Vulnerability 2021-08-18T16:00:00+00:00 2021-08-18T16:00:00+00:00
cisco-sa-ewver-c6wzpxrx Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability 2021-08-18T16:00:00+00:00 2021-08-18T16:00:00+00:00
cisco-sa-ewrce-qpynncjh Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability 2021-08-18T16:00:00+00:00 2021-08-18T16:00:00+00:00
cisco-sa-cisco-sb-rv-overflow-htpymmb5 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability 2021-08-18T16:00:00+00:00 2021-08-18T16:00:00+00:00
cisco-sa-rv340-cmdinj-rcedos-py8j3qfy Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities 2021-08-04T16:00:00+00:00 2021-08-04T16:00:00+00:00
cisco-sa-rv-code-execution-9uvjr7k4 Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerability 2021-08-04T16:00:00+00:00 2021-08-04T16:00:00+00:00
cisco-sa-packettracer-dll-inj-qv8mk5jx Cisco Packet Tracer for Windows DLL Injection Vulnerability 2021-08-04T16:00:00+00:00 2021-08-04T16:00:00+00:00
cisco-sa-nso-priv-esc-xxqrttft Cisco Network Services Orchestrator CLI Secure Shell Server Privilege Escalation Vulnerability 2021-08-04T16:00:00+00:00 2023-10-25T16:01:08+00:00
cisco-sa-epnm-info-disc-pjtz5r6c Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability 2021-08-04T16:00:00+00:00 2021-08-04T16:00:00+00:00
cisco-sa-confd-priv-esc-lsgtcrx4 ConfD CLI Secure Shell Server Privilege Escalation Vulnerability 2021-08-04T16:00:00+00:00 2023-10-04T16:00:12+00:00
ID Description Published Updated
msrc_cve-2026-20941 Host Process for Windows Tasks Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20940 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20939 Windows File Explorer Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20938 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20937 Windows File Explorer Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20936 Windows NDIS Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20935 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20934 Windows SMB Server Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20932 Windows File Explorer Information Disclosure Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20931 Windows Telephony Service Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20929 Windows HTTP.sys Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20927 Windows SMB Server Denial of Service Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20926 Windows SMB Server Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20925 NTLM Hash Disclosure Spoofing Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20924 Windows Management Services Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20923 Windows Management Services Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20922 Windows NTFS Remote Code Execution Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20921 Windows SMB Server Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20920 Win32k Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20919 Windows SMB Server Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20918 Windows Management Services Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20877 Windows Management Services Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20876 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20875 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20874 Windows Management Services Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20873 Windows Management Services Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20872 NTLM Hash Disclosure Spoofing Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20871 Desktop Windows Manager Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20870 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
msrc_cve-2026-20869 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
ID Description Published Updated
opensuse-su-2025:15654-1 git-bug-0.10.1-2.1 on GA media 2025-10-21T00:00:00Z 2025-10-21T00:00:00Z
opensuse-su-2025:15653-1 fetchmail-6.5.6-1.1 on GA media 2025-10-21T00:00:00Z 2025-10-21T00:00:00Z
opensuse-su-2025:15652-1 cargo-audit-advisory-db-20251021-1.1 on GA media 2025-10-21T00:00:00Z 2025-10-21T00:00:00Z
opensuse-su-2025:15651-1 binutils-2.45-1.2 on GA media 2025-10-21T00:00:00Z 2025-10-21T00:00:00Z
opensuse-su-2025:15650-1 ImageMagick-7.1.2.7-1.1 on GA media 2025-10-21T00:00:00Z 2025-10-21T00:00:00Z
opensuse-su-2025:15649-1 ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media 2025-10-18T00:00:00Z 2025-10-18T00:00:00Z
opensuse-su-2025:15648-1 libpoppler-cpp2-25.09.1-2.1 on GA media 2025-10-18T00:00:00Z 2025-10-18T00:00:00Z
opensuse-su-2025:15647-1 ollama-0.12.6-1.1 on GA media 2025-10-18T00:00:00Z 2025-10-18T00:00:00Z
opensuse-su-2025:15646-1 MozillaThunderbird-140.4.0-1.1 on GA media 2025-10-18T00:00:00Z 2025-10-18T00:00:00Z
opensuse-su-2025:15645-1 MozillaFirefox-144.0-1.1 on GA media 2025-10-18T00:00:00Z 2025-10-18T00:00:00Z
opensuse-su-2025:15644-1 icinga2-2.15.1-1.1 on GA media 2025-10-17T00:00:00Z 2025-10-17T00:00:00Z
opensuse-su-2025:15643-1 git-lfs-3.7.1-1.1 on GA media 2025-10-17T00:00:00Z 2025-10-17T00:00:00Z
opensuse-su-2025:15642-1 ruby3.4-rubygem-rack-2.2-2.2.20-1.1 on GA media 2025-10-16T00:00:00Z 2025-10-16T00:00:00Z
opensuse-su-2025:15641-1 libexslt0-1.1.43-4.1 on GA media 2025-10-16T00:00:00Z 2025-10-16T00:00:00Z
opensuse-su-2025:15640-1 ffmpeg-4-4.4.6-9.1 on GA media 2025-10-16T00:00:00Z 2025-10-16T00:00:00Z
opensuse-su-2025:15639-1 chromedriver-141.0.7390.107-1.1 on GA media 2025-10-16T00:00:00Z 2025-10-16T00:00:00Z
opensuse-su-2025:15638-1 ansible-core-2.18-2.18.10-2.1 on GA media 2025-10-16T00:00:00Z 2025-10-16T00:00:00Z
opensuse-su-2025:20020-1 Security update for chromium 2025-10-15T13:33:21Z 2025-10-15T13:33:21Z
opensuse-su-2025:20013-1 Recommended update of flake-pilot 2025-10-15T12:01:21Z 2025-10-15T12:01:21Z
opensuse-su-2025:15637-1 python311-ldap-3.4.5-1.1 on GA media 2025-10-15T00:00:00Z 2025-10-15T00:00:00Z
opensuse-su-2025:15636-1 libwireshark18-4.4.10-2.1 on GA media 2025-10-14T00:00:00Z 2025-10-14T00:00:00Z
opensuse-su-2025:15635-1 libtiff-devel-32bit-4.7.1-2.1 on GA media 2025-10-14T00:00:00Z 2025-10-14T00:00:00Z
opensuse-su-2025:15634-1 python3-gi-docgen-2025.5-1.1 on GA media 2025-10-14T00:00:00Z 2025-10-14T00:00:00Z
opensuse-su-2025:15633-1 libsoup-3_0-0-3.6.5-7.1 on GA media 2025-10-14T00:00:00Z 2025-10-14T00:00:00Z
opensuse-su-2025:15632-1 firefox-esr-140.4.0-1.1 on GA media 2025-10-14T00:00:00Z 2025-10-14T00:00:00Z
opensuse-su-2025:15631-1 alloy-1.11.2-2.1 on GA media 2025-10-14T00:00:00Z 2025-10-14T00:00:00Z
opensuse-su-2025:15630-1 libQt6Svg6-6.10.0-1.1 on GA media 2025-10-13T00:00:00Z 2025-10-13T00:00:00Z
opensuse-su-2025:15629-1 python311-Authlib-1.6.5-1.1 on GA media 2025-10-13T00:00:00Z 2025-10-13T00:00:00Z
opensuse-su-2025:15628-1 lsd-1.2.0-1.1 on GA media 2025-10-13T00:00:00Z 2025-10-13T00:00:00Z
opensuse-su-2025:15627-1 libcryptopp-devel-8.9.0-4.1 on GA media 2025-10-13T00:00:00Z 2025-10-13T00:00:00Z
ID Description Published Updated
rhsa-2026:2558 Red Hat Security Advisory: kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, kpatch-patch-4_18_0-372_145_1, kpatch-patch-4_18_0-372_158_1, and kpatch-patch-4_18_0-372_170_1 security update 2026-02-11T14:03:56+00:00 2026-03-18T03:17:39+00:00
rhsa-2026:2535 Red Hat Security Advisory: kernel security update 2026-02-11T11:58:06+00:00 2026-04-08T13:32:46+00:00
rhsa-2026:2528 Red Hat Security Advisory: spice-client-win security update 2026-02-11T10:36:01+00:00 2026-03-19T14:40:17+00:00
rhsa-2026:2529 Red Hat Security Advisory: spice-client-win security update 2026-02-11T10:35:21+00:00 2026-03-19T14:40:17+00:00
rhsa-2026:2520 Red Hat Security Advisory: toolbox security update 2026-02-11T09:49:41+00:00 2026-04-10T21:19:22+00:00
rhsa-2026:2519 Red Hat Security Advisory: toolbox security update 2026-02-11T09:37:40+00:00 2026-04-10T21:19:21+00:00
rhsa-2026:2514 Red Hat Security Advisory: spice-client-win security update 2026-02-11T08:06:25+00:00 2026-03-19T14:40:17+00:00
rhsa-2026:2512 Red Hat Security Advisory: libsoup security update 2026-02-11T07:51:37+00:00 2026-03-19T14:40:15+00:00
rhsa-2026:2513 Red Hat Security Advisory: spice-client-win security update 2026-02-11T07:51:25+00:00 2026-03-19T14:40:16+00:00
rhsa-2026:2446 Red Hat Security Advisory: kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update 2026-02-11T07:31:25+00:00 2026-03-18T03:17:44+00:00
rhsa-2026:2500 Red Hat Security Advisory: Red Hat multicluster global hub 1.4.4 security update 2026-02-11T05:02:44+00:00 2026-04-14T09:16:54+00:00
rhsa-2026:2071 Red Hat Security Advisory: OpenShift Container Platform 4.18.33 packages and security update 2026-02-11T04:55:25+00:00 2026-04-14T07:57:59+00:00
rhsa-2026:2072 Red Hat Security Advisory: OpenShift Container Platform 4.18.33 bug fix and security update 2026-02-11T04:49:09+00:00 2026-04-13T20:14:22+00:00
rhsa-2026:2077 Red Hat Security Advisory: OpenShift Container Platform 4.20.14 bug fix and security update 2026-02-11T04:41:05+00:00 2026-04-09T23:01:05+00:00
rhsa-2026:2079 Red Hat Security Advisory: OpenShift Container Platform 4.18.33 security and extras update 2026-02-11T04:27:43+00:00 2026-04-10T21:19:15+00:00
rhsa-2026:2078 Red Hat Security Advisory: OpenShift Container Platform 4.18.33 bug fix and security update 2026-02-11T04:27:02+00:00 2026-04-14T09:16:38+00:00
rhsa-2026:2119 Red Hat Security Advisory: OpenShift Container Platform 4.20.14 bug fix and security update 2026-02-11T04:25:53+00:00 2026-04-13T15:59:54+00:00
rhsa-2026:2120 Red Hat Security Advisory: OpenShift Container Platform 4.20.14 security and extras update 2026-02-11T02:51:09+00:00 2026-04-10T21:19:19+00:00
rhsa-2026:2490 Red Hat Security Advisory: kernel security update 2026-02-11T00:25:39+00:00 2026-03-30T23:21:05+00:00
rhsa-2026:2486 Red Hat Security Advisory: fence-agents security update 2026-02-10T21:02:35+00:00 2026-03-24T10:03:10+00:00
rhsa-2026:2485 Red Hat Security Advisory: Insights proxy Container Image 2026-02-10T20:29:13+00:00 2026-04-13T20:14:22+00:00
rhsa-2026:2483 Red Hat Security Advisory: fence-agents security update 2026-02-10T20:28:54+00:00 2026-03-24T10:03:10+00:00
rhsa-2026:2470 Red Hat Security Advisory: php:7.4 security update 2026-02-10T20:28:13+00:00 2026-04-08T16:37:55+00:00
rhsa-2026:2484 Red Hat Security Advisory: pcs security update 2026-02-10T20:17:03+00:00 2026-04-13T16:00:04+00:00
rhsa-2026:2469 Red Hat Security Advisory: pcs security update 2026-02-10T19:17:43+00:00 2026-04-13T16:00:05+00:00
rhsa-2026:2455 Red Hat Security Advisory: brotli security update 2026-02-10T18:32:23+00:00 2026-04-13T19:35:36+00:00
rhsa-2026:2465 Red Hat Security Advisory: pcs security update 2026-02-10T18:26:38+00:00 2026-04-13T16:00:02+00:00
rhsa-2026:2462 Red Hat Security Advisory: pcs security update 2026-02-10T17:54:59+00:00 2026-04-13T16:00:01+00:00
rhsa-2026:2460 Red Hat Security Advisory: resource-agents security update 2026-02-10T17:46:24+00:00 2026-03-24T10:03:09+00:00
rhsa-2026:2456 Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.0 Release. 2026-02-10T17:06:01+00:00 2026-04-14T09:46:15+00:00
ID Description Published Updated
suse-su-2026:0683-1 Security update for freerdp2 2026-02-27T10:42:32Z 2026-02-27T10:42:32Z
suse-su-2026:0680-1 Security update for glibc 2026-02-27T10:17:05Z 2026-02-27T10:17:05Z
suse-su-2026:20551-1 Security update for kubevirt 2026-02-27T08:51:11Z 2026-02-27T08:51:11Z
suse-su-2026:20610-1 Security update for kubevirt 2026-02-27T08:49:48Z 2026-02-27T08:49:48Z
suse-su-2026:0674-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7) 2026-02-27T07:04:14Z 2026-02-27T07:04:14Z
suse-su-2026:20550-1 Security update for containerized-data-importer 2026-02-26T16:03:48Z 2026-02-26T16:03:48Z
suse-su-2026:0670-1 Security update for ucode-intel 2026-02-26T15:21:41Z 2026-02-26T15:21:41Z
suse-su-2026:0669-1 Security update for ucode-intel 2026-02-26T15:21:31Z 2026-02-26T15:21:31Z
suse-su-2026:0668-1 Security update for ucode-intel 2026-02-26T15:21:13Z 2026-02-26T15:21:13Z
suse-su-2026:0667-1 Security update for redis7 2026-02-26T15:19:55Z 2026-02-26T15:19:55Z
suse-su-2026:0666-1 Security update for docker 2026-02-26T15:17:25Z 2026-02-26T15:17:25Z
suse-su-2026:0665-1 Security update for frr 2026-02-26T15:16:24Z 2026-02-26T15:16:24Z
suse-su-2026:0664-1 Security update for python3 2026-02-26T15:15:20Z 2026-02-26T15:15:20Z
suse-su-2026:0663-1 Security update for python 2026-02-26T15:13:11Z 2026-02-26T15:13:11Z
suse-su-2026:0662-1 Security update for qemu 2026-02-26T15:12:26Z 2026-02-26T15:12:26Z
suse-su-2026:0661-1 Security update for erlang 2026-02-26T15:10:09Z 2026-02-26T15:10:09Z
suse-su-2026:0659-1 Security update for docker-stable 2026-02-26T15:08:37Z 2026-02-26T15:08:37Z
suse-su-2026:0658-1 Security update for libsoup 2026-02-26T15:07:42Z 2026-02-26T15:07:42Z
suse-su-2026:0657-1 Security update for libsoup2 2026-02-26T15:07:11Z 2026-02-26T15:07:11Z
suse-su-2026:0656-1 Security update for freerdp 2026-02-26T15:06:36Z 2026-02-26T15:06:36Z
suse-su-2026:20592-1 Security update for 7zip 2026-02-26T13:17:48Z 2026-02-26T13:17:48Z
suse-su-2026:0642-1 Security update for python313 2026-02-26T11:53:34Z 2026-02-26T11:53:34Z
suse-su-2026:20527-1 Security update for glibc 2026-02-26T11:33:53Z 2026-02-26T11:33:53Z
suse-su-2026:20531-1 Security update for libssh 2026-02-26T11:27:41Z 2026-02-26T11:27:41Z
suse-su-2026:20530-1 Security update for libpng16 2026-02-26T11:26:10Z 2026-02-26T11:26:10Z
suse-su-2026:20526-1 Security update for rust-keylime 2026-02-26T11:08:16Z 2026-02-26T11:08:16Z
suse-su-2026:20524-1 Security update for libssh 2026-02-26T11:08:16Z 2026-02-26T11:08:16Z
suse-su-2026:20525-1 Security update for avahi 2026-02-26T10:54:54Z 2026-02-26T10:54:54Z
suse-su-2026:20523-1 Security update for libpng16 2026-02-26T10:51:48Z 2026-02-26T10:51:48Z
suse-su-2026:20522-1 Security update for ucode-intel 2026-02-26T10:48:45Z 2026-02-26T10:48:45Z
ID Description Published Updated
alsa-2025:8744 Moderate: kernel-rt security update 2025-06-10T00:00:00Z 2025-06-10T09:59:43Z
alsa-2025:8743 Moderate: kernel security update 2025-06-10T00:00:00Z 2025-06-11T11:37:25Z
alsa-2025:8696 Important: perl-FCGI:0.78 security update 2025-06-09T00:00:00Z 2025-07-02T11:34:27Z
alsa-2025:8686 Moderate: glibc security update 2025-06-09T00:00:00Z 2025-06-11T11:32:14Z
alsa-2025:8682 Moderate: grafana security update 2025-06-09T00:00:00Z 2025-07-02T11:36:36Z
alsa-2025:8676 Moderate: libxslt security update 2025-06-09T00:00:00Z 2025-06-11T11:34:52Z
alsa-2025:8667 Moderate: grafana security update 2025-06-09T00:00:00Z 2025-06-10T08:21:19Z
alsa-2025:8666 Moderate: grafana security update 2025-06-09T00:00:00Z 2025-07-28T14:55:22Z
alsa-2025:8655 Moderate: glibc security update 2025-06-09T00:00:00Z 2025-06-10T08:33:19Z
alsa-2025:8643 Important: kernel security update 2025-06-09T00:00:00Z 2025-06-12T13:36:53Z
alsa-2025:8636 Important: perl-FCGI security update 2025-06-09T00:00:00Z 2025-07-02T11:38:12Z
alsa-2025:8635 Important: perl-FCGI security update 2025-06-09T00:00:00Z 2025-07-02T11:39:26Z
alsa-2025:8608 Important: thunderbird security update 2025-06-05T00:00:00Z 2025-06-16T12:37:33Z
alsa-2025:8607 Important: thunderbird security update 2025-06-05T00:00:00Z 2025-07-02T11:41:03Z
alsa-2025:8550 Important: varnish security update 2025-06-04T00:00:00Z 2025-06-16T12:36:44Z
alsa-2025:8514 Important: nodejs:20 security update 2025-06-04T00:00:00Z 2025-06-05T14:09:44Z
alsa-2025:8506 Important: nodejs:22 security update 2025-06-04T00:00:00Z 2025-06-05T14:07:26Z
alsa-2025:8493 Important: nodejs22 security update 2025-06-04T00:00:00Z 2025-06-06T07:24:27Z
alsa-2025:8478 Moderate: go-toolset:rhel8 security update 2025-06-04T00:00:00Z 2025-06-05T13:57:38Z
alsa-2025:8477 Moderate: golang security update 2025-06-04T00:00:00Z 2025-06-06T07:26:26Z
alsa-2025:8476 Moderate: golang security update 2025-06-04T00:00:00Z 2025-06-05T14:16:57Z
alsa-2025:8468 Important: nodejs:20 security update 2025-06-03T00:00:00Z 2025-06-05T14:15:30Z
alsa-2025:8467 Important: nodejs:22 security update 2025-06-03T00:00:00Z 2025-06-05T14:11:55Z
alsa-2025:8432 Moderate: perl-CPAN security update 2025-06-03T00:00:00Z 2025-06-03T15:12:15Z
alsa-2025:8427 Moderate: pandoc security update 2025-06-03T00:00:00Z 2025-07-02T11:42:55Z
alsa-2025:8421 Moderate: ghostscript security update 2025-06-03T00:00:00Z 2025-07-02T11:45:46Z
alsa-2025:8419 Low: python36:3.6 security update 2025-06-03T00:00:00Z 2025-06-05T14:04:55Z
alsa-2025:8414 Moderate: git security update 2025-06-03T00:00:00Z 2025-06-03T09:37:46Z
alsa-2025:8411 Moderate: krb5 security update 2025-06-03T00:00:00Z 2025-06-03T09:34:58Z
alsa-2025:8395 Low: rsync security update 2025-06-02T00:00:00Z 2025-06-03T09:32:49Z
ID Description Published Updated
osv-2023-452 Heap-buffer-overflow in json_write_TF 2023-06-03T14:02:13.459131Z 2023-10-31T14:21:55.530747Z
osv-2023-451 Heap-buffer-overflow in BundlePacket 2023-06-02T14:02:19.303950Z 2023-06-22T14:25:02.611556Z
osv-2023-445 Heap-buffer-overflow in LossyDctDecoder_execute 2023-06-01T14:00:09.278335Z 2023-06-01T14:00:09.278588Z
osv-2023-444 Heap-buffer-overflow in opj_jp2_apply_pclr 2023-05-31T14:02:00.753503Z 2025-12-31T14:18:46.286556Z
osv-2023-443 Use-after-poison in file_is_simh 2023-05-31T14:00:37.979797Z 2023-05-31T14:00:37.980057Z
osv-2023-440 Heap-double-free in dwg_free_object 2023-05-30T14:01:20.251610Z 2023-09-19T14:20:36.212389Z
osv-2023-437 Heap-buffer-overflow in internal_huf_decompress 2023-05-29T14:00:22.989224Z 2023-05-29T14:00:22.989493Z
osv-2023-436 Heap-buffer-overflow in ndpi_check_punycode_string 2023-05-29T14:00:17.226789Z 2023-05-29T14:00:17.227055Z
osv-2022-1275 Security exception in java.desktop/java.awt.image.DataBufferInt.<init> 2023-05-28T14:00:35.487433Z 2024-08-27T14:11:30.518706Z
osv-2023-430 Heap-buffer-overflow in H5MM_xstrdup 2023-05-26T14:00:26.078002Z 2026-03-24T14:48:04.919113Z
osv-2023-426 Heap-buffer-overflow in libdeflate_zlib_decompress_ex 2023-05-25T14:00:33.323239Z 2023-05-25T14:00:33.323513Z
osv-2023-425 Heap-buffer-overflow in ICMPinfo::dissectICMP 2023-05-23T14:01:00.402025Z 2023-05-23T14:01:00.402221Z
osv-2023-423 Heap-buffer-overflow in NetworkInterface::dissectPacket 2023-05-23T14:00:31.211803Z 2023-05-23T14:00:31.212007Z
osv-2023-422 Heap-use-after-free in wmem_memdup 2023-05-22T14:01:21.886121Z 2023-05-22T14:01:21.886307Z
osv-2023-421 Global-buffer-overflow in hf_adjustment 2023-05-22T14:01:06.910126Z 2023-05-22T14:01:06.910307Z
osv-2023-420 Heap-use-after-free in fragment_addresses_equal 2023-05-22T14:00:41.156918Z 2023-05-22T14:00:41.157099Z
osv-2023-418 Heap-buffer-overflow in bfd_getl32 2023-05-21T14:02:30.263252Z 2023-05-21T14:02:30.263496Z
osv-2023-416 UNKNOWN READ in dxf_fixup_string 2023-05-20T14:01:12.859492Z 2023-06-11T14:21:08.017435Z
osv-2023-415 UNKNOWN READ in dxf_fixup_string 2023-05-20T14:01:02.465780Z 2023-06-11T14:15:45.072848Z
osv-2023-412 UNKNOWN READ in dxf_fixup_string 2023-05-20T14:00:35.493084Z 2023-06-11T14:14:00.715264Z
osv-2023-409 Heap-use-after-free in zval_call_destructor 2023-05-19T14:02:26.026882Z 2023-05-19T14:02:26.027150Z
osv-2023-408 Security exception in org.apache.lucene.util.ArrayUtil.growExact 2023-05-19T14:02:24.308895Z 2023-05-19T14:02:24.309176Z
osv-2023-407 Stack-buffer-overflow in DwaCompressor_readChannelRules 2023-05-19T14:02:24.198097Z 2023-05-19T14:02:24.198372Z
osv-2023-405 Heap-buffer-overflow in _lou_stringHash 2023-05-19T14:00:18.190498Z 2024-08-31T14:18:34.306703Z
osv-2023-404 Invalid-free in Assimp::FBX::Scope::Scope 2023-05-19T14:00:12.710256Z 2023-05-19T14:00:12.710610Z
osv-2023-402 Heap-use-after-free in Assimp::FBXExporter::WriteObjects 2023-05-18T14:01:38.415215Z 2023-05-18T14:01:38.415480Z
osv-2023-399 Heap-use-after-free in get_got_entry 2023-05-15T14:01:19.849514Z 2023-05-15T14:01:19.849790Z
osv-2023-397 Heap-buffer-overflow in json_write_TF 2023-05-14T14:02:14.802227Z 2023-11-02T14:21:15.660519Z
osv-2023-396 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal 2023-05-14T14:02:12.108286Z 2023-05-14T14:02:12.108548Z
osv-2023-395 Stack-buffer-overflow in sc_path_print 2023-05-14T14:00:57.078498Z 2026-03-31T14:04:53.759303Z
ID Description Published Updated
rustsec-2019-0037 Compiler optimisation for next_with_timeout in pnet::transport::IcmpTransportChannelIterator flaws to SEGFAULT 2019-06-11T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0003 Out of Memory in stream::read_raw_bytes_into() 2019-06-08T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0009 Double-free and use-after-free in SmallVec::grow() 2019-06-06T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0015 Flaw in generativity allows out-of-bounds access 2019-05-21T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0004 Failure to properly verify ed25519 signatures makes any signature valid 2019-05-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0002 Bug in SliceDeque::move_head_unchecked corrupts its memory 2019-05-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0001 Uncontrolled recursion leads to abort in HTML serialization 2019-04-27T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0035 Unaligned memory access 2019-04-19T12:00:00Z 2021-10-19T22:14:35Z
rustsec-2019-0039 typemap is Unmaintained 2019-04-06T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2019-0038 Fix for UB in failure to catch panics crossing FFI boundaries 2019-03-10T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0020 Possible use-after-free with `proplist::Iterator` 2018-12-22T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2018-0012 Flaw in streaming state reset() functions can create incorrect results. 2018-12-20T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0011 Enum repr causing potential memory corruption 2018-12-18T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0009 MsQueue and SegQueue suffer from double-free 2018-12-09T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0008 Bug in SliceDeque::move_head_unchecked allows read of corrupted memory 2018-12-05T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0013 Vec-to-vec transmutations could lead to heap overflow/corruption 2018-11-27T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0015 term is looking for a new maintainer 2018-11-19T12:00:00Z 2020-10-02T01:29:11Z
rustsec-2018-0007 Stack overflow when parsing malicious DNS packet 2018-10-09T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0018 smallvec creates uninitialized value of any type 2018-09-25T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0006 Uncontrolled recursion leads to abort in deserialization 2018-09-17T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0005 Uncontrolled recursion leads to abort in deserialization 2018-09-17T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0004 Malicious input could cause uninitialized memory to be exposed 2018-08-25T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0022 Use of uninitialized memory in temporary 2018-08-22T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0014 chan is end-of-life; use crossbeam-channel instead 2018-07-31T12:00:00Z 2020-10-02T01:29:11Z
rustsec-2018-0003 Possible double free during unwinding in SmallVec::insert_many 2018-07-19T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0016 quickersort is deprecated and unmaintained 2018-06-30T12:00:00Z 2020-10-02T01:29:11Z
rustsec-2018-0002 Links in archives can overwrite any existing file 2018-06-29T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0001 An integer underflow could lead to panic 2018-06-21T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0021 Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods 2018-06-15T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2018-0019 Multiple memory safety issues 2018-06-08T12:00:00Z 2023-06-13T13:10:24Z
ID Description Published Updated
bit-powershell-2025-21171 .NET Remote Code Execution Vulnerability 2025-09-04T17:48:57.882Z 2025-09-04T18:07:55.535Z
bit-powershell-2024-30045 .NET and Visual Studio Remote Code Execution Vulnerability 2025-09-04T17:48:56.455Z 2025-09-04T18:07:55.535Z
bit-powershell-2024-26190 Microsoft QUIC Denial of Service Vulnerability 2025-09-04T17:48:54.862Z 2025-09-04T18:07:55.535Z
bit-powershell-2024-21409 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability 2025-09-04T17:48:53.456Z 2025-09-04T18:07:55.535Z
bit-powershell-2024-21392 .NET and Visual Studio Denial of Service Vulnerability 2025-09-04T17:48:52.052Z 2025-09-04T18:07:55.535Z
bit-powershell-2024-0057 NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability 2025-09-04T17:48:50.396Z 2025-10-10T12:11:18.225Z
bit-powershell-2023-36013 PowerShell Information Disclosure Vulnerability 2025-09-04T17:48:49.020Z 2025-09-04T18:07:55.535Z
bit-powershell-2023-21538 .NET Denial of Service Vulnerability 2025-09-04T17:48:47.524Z 2025-09-04T18:07:55.535Z
bit-powershell-2022-41121 Windows Graphics Component Elevation of Privilege Vulnerability 2025-09-04T17:48:45.951Z 2025-09-04T18:07:55.535Z
bit-powershell-2022-41076 PowerShell Remote Code Execution Vulnerability 2025-09-04T17:48:44.658Z 2025-09-04T18:07:55.535Z
bit-powershell-2022-34716 .NET Spoofing Vulnerability 2025-09-04T17:48:43.155Z 2025-09-04T18:07:55.535Z
bit-powershell-2022-26788 PowerShell Elevation of Privilege Vulnerability 2025-09-04T17:48:41.821Z 2025-09-04T18:07:55.535Z
bit-powershell-2022-24512 .NET and Visual Studio Remote Code Execution Vulnerability 2025-09-04T17:48:40.428Z 2025-09-04T18:07:55.535Z
bit-powershell-2022-23267 .NET and Visual Studio Denial of Service Vulnerability 2025-09-04T17:48:39.121Z 2025-09-04T18:07:55.535Z
bit-powershell-2021-43896 Microsoft PowerShell Spoofing Vulnerability 2025-09-04T17:48:37.745Z 2025-09-04T18:07:55.535Z
bit-powershell-2021-41355 .NET Core and Visual Studio Information Disclosure Vulnerability 2025-09-04T17:48:36.166Z 2025-09-04T18:07:55.535Z
bit-powershell-2020-8927 Buffer overflow in Brotli library 2025-09-04T17:48:34.485Z 2025-09-04T18:07:55.535Z
bit-powershell-2020-1108 2025-09-04T17:48:33.089Z 2025-09-04T18:07:55.535Z
bit-powershell-2020-0951 Windows Defender Application Control Security Feature Bypass Vulnerability 2025-09-04T17:48:31.593Z 2025-09-04T18:07:55.535Z
bit-envoy-2025-54588 Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults 2025-09-04T08:40:05.078Z 2025-09-17T15:49:32.815Z
bit-gitlab-2025-5101 Improper Control of Generation of Code ('Code Injection') in GitLab 2025-08-30T09:04:23.084Z 2025-08-30T09:06:08.850Z
bit-gitlab-2025-4225 Allocation of Resources Without Limits or Throttling in GitLab 2025-08-30T09:04:10.462Z 2025-09-03T09:06:51.338Z
bit-gitlab-2025-3601 Allocation of Resources Without Limits or Throttling in GitLab 2025-08-30T09:04:08.676Z 2025-08-30T09:06:08.850Z
bit-gitlab-2025-2246 Missing Authorization in GitLab 2025-08-30T09:03:36.978Z 2025-09-03T09:06:51.338Z
bit-vault-2025-6203 Vault unauthenticated denial of service through complex json payload 2025-08-30T08:51:09.044Z 2025-08-30T09:06:08.850Z
bit-kibana-2025-25010 Kibana privilege escalation via reporting_user role 2025-08-30T08:41:00.026Z 2025-09-04T09:06:08.228Z
bit-elk-2025-25010 Kibana privilege escalation via reporting_user role 2025-08-30T08:38:09.297Z 2025-09-04T09:06:08.228Z
bit-cassandra-2025-26467 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) 2025-08-27T08:36:32.891Z 2025-08-27T09:06:48.117Z
bit-discourse-2025-54411 Discourse welcome banner user name XSS 2025-08-21T09:26:15.988Z 2025-08-21T09:51:17.688Z
bit-gitlab-2025-8770 Authorization Bypass Through User-Controlled Key in GitLab 2025-08-18T08:34:36.886Z 2025-08-18T08:35:59.174Z
ID Description Updated
ID Description Published Updated
certfr-2025-avi-0639 Multiples vulnérabilités dans Google Chrome 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0638 Vulnérabilité dans les produits Sonicwall 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0637 Vulnérabilité dans SolarWinds Web Help Desk 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0636 Multiples vulnérabilités dans les produits Elastic 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0635 Vulnérabilité dans VMware vCenter 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0634 Vulnérabilité dans Python 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0633 Vulnérabilité dans Tenable Patch Management 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0632 Multiples vulnérabilités dans GLPI 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0631 Vulnérabilité dans SolarWinds SWOSH 2025-07-29T00:00:00.000000 2025-07-29T00:00:00.000000
certfr-2025-avi-0630 Vulnérabilité dans Palo Alto Networks GlobalProtect App 2025-07-29T00:00:00.000000 2025-07-29T00:00:00.000000
certfr-2025-avi-0629 Multiples vulnérabilités dans Microsoft Edge 2025-07-28T00:00:00.000000 2025-07-28T00:00:00.000000
certfr-2025-avi-0628 Multiples vulnérabilités dans Synology BeeDrive 2025-07-28T00:00:00.000000 2025-07-28T00:00:00.000000
certfr-2025-avi-0627 Multiples vulnérabilités dans les produits IBM 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0626 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0625 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0624 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0623 Multiples vulnérabilités dans les produits ESET 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0622 Multiples vulnérabilités dans les produits VMware 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0621 Multiples vulnérabilités dans les produits Tenable 2025-07-24T00:00:00.000000 2025-07-24T00:00:00.000000
certfr-2025-avi-0620 Vulnérabilité dans Apache HTTP Server 2025-07-24T00:00:00.000000 2025-07-24T00:00:00.000000
certfr-2025-avi-0619 Multiples vulnérabilités dans GitLab 2025-07-24T00:00:00.000000 2025-07-24T00:00:00.000000
certfr-2025-avi-0618 Multiples vulnérabilités dans les produits Mitel 2025-07-24T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2025-avi-0617 Vulnérabilité dans Sonicwall Secure Mobile Access 2025-07-24T00:00:00.000000 2025-07-24T00:00:00.000000
certfr-2025-avi-0616 Multiples vulnérabilités dans Sonicwall Secure Mobile Access 2025-07-23T00:00:00.000000 2025-07-23T00:00:00.000000
certfr-2025-avi-0615 Multiples vulnérabilités dans les produits Mozilla 2025-07-23T00:00:00.000000 2025-07-23T00:00:00.000000
certfr-2025-avi-0614 Multiples vulnérabilités dans les produits Mattermost 2025-07-23T00:00:00.000000 2025-08-21T00:00:00.000000
certfr-2025-avi-0613 Multiples vulnérabilités dans Google Chrome 2025-07-23T00:00:00.000000 2025-07-23T00:00:00.000000
certfr-2025-avi-0612 Multiples vulnérabilités dans Sophos Firewall 2025-07-22T00:00:00.000000 2025-07-22T00:00:00.000000
certfr-2025-avi-0611 Multiples vulnérabilités dans les produits Microsoft 2025-07-21T00:00:00.000000 2025-07-22T00:00:00.000000
certfr-2025-avi-0610 Multiples vulnérabilités dans Microsoft Azure 2025-07-21T00:00:00.000000 2025-07-21T00:00:00.000000
ID Description Published Updated
jvndb-2021-000014 Calsos CSDJ fails to restrict access permissions 2021-02-15T15:52+09:00 2021-02-15T15:52+09:00
jvndb-2021-000013 Wekan vulnerable to cross-site scripting 2021-02-10T14:01+09:00 2021-02-10T14:01+09:00
jvndb-2021-001022 Cross-site Scripting Vulnerability in Hitachi Application Server Help 2021-02-09T15:08+09:00 2021-02-09T15:08+09:00
jvndb-2021-001021 Improper access control vulnerability in JP1/IT Desktop Management 2 - Manager and JP1/NETM/Asset Information Manager 2021-02-09T15:08+09:00 2021-02-09T15:08+09:00
jvndb-2021-000012 WordPress Plugin "Name Directory" vulnerable to cross-site request forgery 2021-02-05T16:24+09:00 2021-02-05T16:24+09:00
jvndb-2021-001017 Trend Micro HouseCall for Home Networks (Windows Edition) may insecurely load Dynamic Link Libraries 2021-02-04T15:42+09:00 2021-02-04T15:42+09:00
jvndb-2021-000011 Panasonic Video Insight VMS vulnerable to arbitrary code execution 2021-02-04T15:39+09:00 2021-02-04T15:39+09:00
jvndb-2021-001014 Vulnerability in JP1/VERITAS 2021-02-01T16:49+09:00 2021-02-01T16:49+09:00
jvndb-2021-000007 OS command injection vulnerability in multiple Infoscience Corporation log management tools 2021-01-27T18:31+09:00 2022-07-26T15:53+09:00
jvndb-2021-000009 Android App "ELECOM File Manager" vulnerable to directory traversal 2021-01-27T17:38+09:00 2021-01-27T17:38+09:00
jvndb-2021-000008 Multiple vulnerabilities in multiple ELECOM products 2021-01-26T16:33+09:00 2021-01-26T16:33+09:00
jvndb-2021-000010 Multiple vulnerabilities in multiple LOGITEC products 2021-01-26T16:26+09:00 2021-01-26T16:26+09:00
jvndb-2021-001010 TP-Link TL-WR841N V13 (JP) vulnerable to OS command injection 2021-01-25T16:21+09:00 2021-01-25T16:21+09:00
jvndb-2021-000006 Multiple vulnerabilities in Aterm WF800HP, Aterm WG2600HP, and Aterm WG2600HP2 2021-01-22T17:55+09:00 2021-02-03T12:05+09:00
jvndb-2021-000005 GROWI vulnerable to cross-site scripting 2021-01-19T14:05+09:00 2021-01-19T14:05+09:00
jvndb-2021-000004 Multiple vulnerabilities in acmailer 2021-01-14T16:22+09:00 2021-01-14T16:22+09:00
jvndb-2021-000003 The installer of SKYSEA Client View may insecurely load Dynamic Link Libraries 2021-01-12T15:53+09:00 2021-01-12T15:53+09:00
jvndb-2021-000002 Multiple NEC Products vulnerable to authentication bypass 2021-01-04T17:24+09:00 2021-01-08T12:22+09:00
jvndb-2021-000001 Multiple vulnerabilities in UNIVERGE SV9500/SV8500 series 2021-01-04T14:37+09:00 2021-01-04T14:37+09:00
jvndb-2020-009965 Cleartext Transmission of Sensitive Information Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer 2020-12-21T17:48+09:00 2020-12-21T17:48+09:00
jvndb-2020-009964 Improper certificate validation vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer 2020-12-21T17:48+09:00 2020-12-21T17:48+09:00
jvndb-2020-010072 Cross-site Scripting Vulnerability in Hitachi Command Suite 2020-12-21T14:20+09:00 2020-12-21T14:20+09:00
jvndb-2020-000087 Management software for NEC Storage disk array system vulnerable to improper server certificate verification 2020-12-18T17:00+09:00 2021-07-21T16:21+09:00
jvndb-2020-000086 Self-Extracting files created by multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries 2020-12-18T16:47+09:00 2020-12-18T16:47+09:00
jvndb-2020-000085 Multiple vulnerabilities in GROWI 2020-12-15T15:41+09:00 2021-08-30T16:29+09:00
jvndb-2020-000083 Multiple vulnerabilities in Aterm SA3500G 2020-12-11T16:59+09:00 2020-12-11T16:59+09:00
jvndb-2020-000084 Apache Struts 2 vulnerable to remote code execution (S2-061) 2020-12-11T15:09+09:00 2022-08-09T13:55+09:00
jvndb-2020-000082 FileZen vulnerable to directory traversal 2020-12-10T15:21+09:00 2020-12-10T15:21+09:00
jvndb-2020-009771 ServerProtect for Linux vulnerable to heap-based buffer overflow 2020-12-08T12:34+09:00 2020-12-08T12:34+09:00
jvndb-2020-000081 Apache Cordova Plugin camera vulnerable to information exposure 2020-12-07T16:34+09:00 2020-12-07T16:34+09:00
ID Description Published Updated
cnvd-2026-10674 Microsoft Windows File Explorer信息泄露漏洞(CNVD-2026-10674) 2026-01-19 2026-02-11
cnvd-2026-10673 Microsoft Windows File Explorer信息泄露漏洞(CNVD-2026-10673) 2026-01-19 2026-02-11
cnvd-2026-10672 Microsoft Windows File Explorer信息泄露漏洞 2026-01-19 2026-02-11
cnvd-2026-10639 D-Link DI-8200G命令注入漏洞 2026-01-19 2026-02-09
cnvd-2026-09802 Adobe Dreamweaver命令注入漏洞 2026-01-19 2026-01-30
cnvd-2026-09801 Adobe Substance 3D Sampler缓冲区溢出漏洞 2026-01-19 2026-01-30
cnvd-2026-09800 Adobe Substance 3D Painter缓冲区溢出漏洞(CNVD-2026-09800) 2026-01-19 2026-01-30
cnvd-2026-09799 Adobe InCopy缓冲区溢出漏洞(CNVD-2026-09799) 2026-01-19 2026-01-30
cnvd-2026-09796 Apache Uniffle信任管理问题漏洞 2026-01-19 2026-01-30
cnvd-2026-09795 Apache NimBLE代码问题漏洞 2026-01-19 2026-02-04
cnvd-2026-08750 Microsoft Graphics Kernel竞争条件问题漏洞 2026-01-19 2026-01-22
cnvd-2026-08749 Microsoft Graphics Component资源管理错误漏洞 2026-01-19 2026-01-22
cnvd-2026-08748 Microsoft Excel访问控制错误漏洞 2026-01-19 2026-01-22
cnvd-2026-08747 Microsoft Excel代码执行漏洞(CNVD-2026-08747) 2026-01-19 2026-01-22
cnvd-2026-08746 Microsoft Excel代码执行漏洞(CNVD-2026-08746) 2026-01-19 2026-01-22
cnvd-2026-08444 Online Course Registration System /manage-students.php文件SQL注入漏洞 2026-01-19 2026-01-27
cnvd-2026-08443 Online Course Registration System /enroll.php文件SQL注入漏洞 2026-01-19 2026-01-27
cnvd-2026-08435 iccDEV CIccSingleSampledeCurveXml类的类型混淆漏洞 2026-01-19 2026-01-26
cnvd-2026-08434 iccDEV CIccCLUT::Init函数未定义行为漏洞 2026-01-19 2026-01-27
cnvd-2026-08433 iccDEV未定义行为漏洞 2026-01-19 2026-01-27
cnvd-2026-08432 iccDEV内存泄漏漏洞 2026-01-19 2026-01-27
cnvd-2026-08431 iccDEV CIccXmlArrayType::ParseTextCountNum函数整数溢出漏洞 2026-01-19 2026-01-27
cnvd-2026-08430 iccDEV CIccXform::Create函数释放后重用漏洞 2026-01-19 2026-01-27
cnvd-2026-08429 iccDEV Unicode缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08428 iccDEV CIccTagText::Read函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08427 iccDEV CIccTagLut8::Validate函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08426 iccDEV CIccTagLut16::Validate函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08425 iccDEV CIccSparseMatrix::CIccSparseMatrix函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
cnvd-2026-08424 iccDEV CIccProfile::LoadTag函数输入验证不当漏洞 2026-01-19 2026-01-26
cnvd-2026-08423 iccDEV CIccMBB::Validate函数堆缓冲区溢出漏洞 2026-01-19 2026-01-26
ID Description Published Updated
bdu:2026-00661 Уязвимость функции update_pointer_new() RDP-клиента FreeRDP, позволяющая нарушителю выпол… 21.01.2026 27.01.2026
bdu:2026-00660 Уязвимость функции Glyph_Alloc() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отка… 21.01.2026 27.01.2026
bdu:2026-00659 Уязвимость функции clear_decompress_bands_data() RDP-клиента FreeRDP, позволяющая нарушит… 21.01.2026 27.01.2026
bdu:2026-00658 Уязвимость функции clear_decompress_residual_data() RDP-клиента FreeRDP, позволяющая нару… 21.01.2026 27.01.2026
bdu:2026-00657 Уязвимость функции gdi_SurfaceToSurface() RDP-клиента FreeRDP, позволяющая нарушителю вып… 21.01.2026 27.01.2026
bdu:2026-00656 Уязвимость функции clear_decompress() RDP-клиента FreeRDP, позволяющая нарушителю выполни… 21.01.2026 27.01.2026
bdu:2026-00655 Уязвимость функции planar_decompress_plane_rle() RDP-клиента FreeRDP, позволяющая нарушит… 21.01.2026 27.01.2026
bdu:2026-00654 Уязвимость пакетов программ Microsoft Office, Microsoft 365 Apps for Enterprise, связанна… 21.01.2026 21.01.2026
bdu:2026-00653 Уязвимость веб-интерфейса управления программно-аппаратного средства управления программн… 21.01.2026 21.01.2026
bdu:2026-00652 Уязвимость веб-интерфейса управления программно-аппаратного средства управления программн… 21.01.2026 21.01.2026
bdu:2026-00651 Уязвимость веб-интерфейса управления программно-аппаратного средства управления программн… 21.01.2026 21.01.2026
bdu:2026-00650 Уязвимость веб-интерфейса управления программно-аппаратного средства управления программн… 21.01.2026 21.01.2026
bdu:2026-00649 Уязвимость диспетчера окон рабочего стола (Desktop Window Manager) операционных систем Wi… 21.01.2026 21.01.2026
bdu:2026-00648 Уязвимость операционной системы Dell PowerScale OneFS, связанная с неправильным присвоени… 21.01.2026 21.01.2026
bdu:2026-00647 Уязвимость операционной системы Dell PowerScale OneFS, связанная с недостаточным ограниче… 21.01.2026 21.01.2026
bdu:2026-00646 Уязвимость операционной системы Dell PowerScale OneFS, связанная с ошибками синхронизации… 21.01.2026 21.01.2026
bdu:2026-00645 Уязвимость функции ReadXBMImage() консольного графического редактора ImageMagick, позволя… 21.01.2026 30.01.2026
bdu:2026-00644 Уязвимость метода BilateralBlurImage функции AcquireBilateralTLS() консольного графическо… 21.01.2026 21.01.2026
bdu:2026-00643 Уязвимость команды MSL (Magick Scripting Language) <write> консольного графического редак… 21.01.2026 30.01.2026
bdu:2026-00642 Уязвимость компонента Win32k (Win32k.sys) операционных систем Windows, позволяющая наруши… 21.01.2026 21.01.2026
bdu:2026-00641 Уязвимость инструмента управления службами Windows Management Services операционных систе… 21.01.2026 21.01.2026
bdu:2026-00640 Уязвимость службы диспетчера доступа к возможностям Capability Access Management Service … 21.01.2026 21.01.2026
bdu:2026-00639 Уязвимость службы диспетчера доступа к возможностям Capability Access Management Service … 21.01.2026 21.01.2026
bdu:2026-00638 Уязвимость пакетов программ Microsoft SharePoint Server и SharePoint Enterprise Server, с… 21.01.2026 21.01.2026
bdu:2026-00637 Уязвимость интерфейса Network Driver Interface Standard (NDIS) операционных систем Window… 21.01.2026 21.01.2026
bdu:2026-00636 Уязвимость модуля crypto среды выполнения для JavaScript и TypeScript Deno, позволяющая н… 21.01.2026 21.01.2026
bdu:2026-00635 Уязвимость пакетов программ Microsoft Office, Microsoft 365 Apps for Enterprise, связанна… 21.01.2026 21.01.2026
bdu:2026-00634 Уязвимость функции strcpy() микропрограммного обеспечения маршрутизаторов UTT 520W, позво… 21.01.2026 21.01.2026
bdu:2026-00633 Уязвимость пакетов программ Microsoft Office, Microsoft 365 Apps for Enterprise, связанна… 21.01.2026 21.01.2026
bdu:2026-00632 Уязвимость установщика программы для управления SSD-дисками Samsung Magician, позволяющая… 20.01.2026 20.01.2026
ID Description Updated
var-201903-0926 An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9… 2026-03-09T22:05:55.135000Z
var-201708-0038 The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 al… 2026-03-09T22:04:39.944000Z
var-200704-0225 Buffer overflow in the AirPortDriver module for AirPort in Apple Mac OS X 10.3.9 through … 2026-03-09T22:04:39.551000Z
var-202012-1278 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stac… 2026-03-09T22:04:04.260000Z
var-201409-0340 Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x… 2026-03-09T22:03:47.944000Z
var-201310-0351 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, a… 2026-03-09T22:03:47.460000Z
var-202205-1291 A use after free issue was addressed with improved memory management. This issue is fixed… 2026-03-09T22:03:07.530000Z
var-201606-0478 OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary check… 2026-03-09T22:02:04.960000Z
var-201503-0388 Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c i… 2026-03-09T22:02:04.618000Z
var-201504-0166 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earli… 2026-03-09T22:01:34.175000Z
var-201006-1183 WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… 2026-03-09T22:01:33.689000Z
var-202110-1685 This issue was addressed with improved checks. This issue is fixed in Security Update 202… 2026-03-09T22:01:31.914000Z
var-201907-0806 SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typ… 2026-03-09T22:00:24.213000Z
var-202202-0906 valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. - - - -… 2026-03-09T22:00:24.071000Z
var-201006-1245 WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… 2026-03-09T22:00:23.140000Z
var-201805-0963 Systems with microprocessors utilizing speculative execution and speculative execution of… 2026-03-09T22:00:22.852000Z
var-202206-1186 Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may all… 2026-03-09T22:00:02.790000Z
var-202101-0221 A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded qu… 2026-03-09T21:59:56.744000Z
var-201204-0112 The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before … 2026-03-09T21:59:21.890000Z
var-201008-0172 Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType befor… 2026-03-09T21:59:11.053000Z
var-201902-0360 In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popov… 2026-03-09T21:59:10.534000Z
var-200407-0196 Floating point information leak in the context switch code for Linux 2.4.x only checks th… 2026-03-09T21:59:10.269000Z
var-200609-0707 The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will cra… 2026-03-09T21:57:50.996000Z
var-200810-0139 Buffer overflow in ColorSync in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to ca… 2026-03-09T21:57:18.265000Z
var-201006-1144 WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… 2026-03-09T21:56:44.414000Z
var-200905-0155 Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denia… 2026-03-09T21:56:41.294000Z
var-201912-1864 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2026-03-09T21:56:22.102000Z
var-202212-1523 The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2… 2026-03-09T21:55:47.417000Z
var-200803-0028 The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unu… 2026-03-09T21:54:38.148000Z
var-201901-0389 BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, l… 2026-03-09T21:54:34.274000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated