Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2000-0370 |
N/A
|
The debug option in Caldera Linux smail allows re… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.488Z |
| CVE-2000-0371 |
N/A
|
The libmediatool library used for the KDE mediato… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.473Z |
| CVE-2000-0372 |
N/A
|
Vulnerability in Caldera rmt command in the dump … |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.419Z |
| CVE-2000-0373 |
N/A
|
Vulnerabilities in the KDE kvt terminal program a… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.499Z |
| CVE-2000-0376 |
N/A
|
Buffer overflow in the HTTP proxy server for the … |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.476Z |
| CVE-2000-0377 |
N/A
|
The Remote Registry server in Windows NT 4.0 allo… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.453Z |
| CVE-2000-0379 |
N/A
|
The Netopia R9100 router does not prevent authent… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.471Z |
| CVE-2000-0380 |
N/A
|
The IOS HTTP service in Cisco routers and switche… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.476Z |
| CVE-2000-0381 |
N/A
|
The Gossamer Threads DBMan db.cgi CGI script allo… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.557Z |
| CVE-2000-0382 |
N/A
|
ColdFusion ClusterCATS appends stale query string… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.452Z |
| CVE-2000-0387 |
N/A
|
The makelev program in the golddig game from the … |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.454Z |
| CVE-2000-0388 |
N/A
|
Buffer overflow in FreeBSD libmytinfo library all… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.477Z |
| CVE-2000-0389 |
N/A
|
Buffer overflow in krb_rd_req function in Kerbero… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.479Z |
| CVE-2000-0390 |
N/A
|
Buffer overflow in krb425_conv_principal function… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.484Z |
| CVE-2000-0391 |
N/A
|
Buffer overflow in krshd in Kerberos 5 allows rem… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.492Z |
| CVE-2000-0392 |
N/A
|
Buffer overflow in ksu in Kerberos 5 allows local… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.512Z |
| CVE-2000-0393 |
N/A
|
The KDE kscd program does not drop privileges whe… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.539Z |
| CVE-2000-0394 |
N/A
|
NetProwler 3.0 allows remote attackers to cause a… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.540Z |
| CVE-2000-0395 |
N/A
|
Buffer overflow in CProxy 3.3 allows remote users… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.539Z |
| CVE-2000-0396 |
N/A
|
The add.exe program in the Carello shopping cart … |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.502Z |
| CVE-2000-0397 |
N/A
|
The EMURL web-based email account software encode… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.541Z |
| CVE-2000-0398 |
N/A
|
Buffer overflow in wconsole.dll in Rockliffe Mail… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.555Z |
| CVE-2000-0399 |
N/A
|
Buffer overflow in MDaemon POP server allows remo… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.508Z |
| CVE-2000-0402 |
N/A
|
The Mixed Mode authentication capability in Micro… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.524Z |
| CVE-2000-0403 |
N/A
|
The CIFS Computer Browser service on Windows NT 4… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.540Z |
| CVE-2000-0404 |
N/A
|
The CIFS Computer Browser service allows remote a… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.544Z |
| CVE-2000-0405 |
N/A
|
Buffer overflow in L0pht AntiSniff allows remote … |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.522Z |
| CVE-2000-0406 |
N/A
|
Netscape Communicator before version 4.73 and Nav… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.543Z |
| CVE-2000-0407 |
N/A
|
Buffer overflow in Solaris netpr program allows l… |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.541Z |
| CVE-2000-0408 |
N/A
|
IIS 4.05 and 5.0 allow remote attackers to cause … |
n/a |
n/a |
2000-07-12T04:00:00 | 2024-08-08T05:14:21.520Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0750 |
N/A
|
Hotmail allows Javascript to be executed via the … |
n/a |
n/a |
2000-02-04T05:00:00 | 2024-08-01T16:48:37.595Z |
| CVE-1999-0751 |
N/A
|
Buffer overflow in Accept command in Netscape Ent… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:38.021Z |
| CVE-1999-0759 |
N/A
|
Buffer overflow in FuseMAIL POP service via long … |
n/a |
n/a |
2000-10-13T04:00:00 | 2024-08-01T16:48:37.653Z |
| CVE-1999-1014 |
N/A
|
Buffer overflow in mail command in Solaris 2.7 an… |
n/a |
n/a |
2002-03-09T05:00:00 | 2024-08-01T16:55:29.467Z |
| CVE-1999-1053 |
N/A
|
guestbook.pl cleanses user-inserted SSI commands … |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T16:55:29.483Z |
| CVE-1999-0817 |
N/A
|
Lynx WWW client allows a remote attacker to speci… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:38.205Z |
| CVE-1999-0704 |
N/A
|
Buffer overflow in Berkeley automounter daemon (a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.805Z |
| CVE-1999-0890 |
N/A
|
iHTML Merchant allows remote attackers to obtain … |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-01T16:55:28.969Z |
| CVE-1999-0907 |
N/A
|
sccw allows local users to read arbitrary files. |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:55:29.347Z |
| CVE-1999-0953 |
N/A
|
WWWBoard stores encrypted passwords in a password… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:55:29.397Z |
| CVE-1999-0954 |
N/A
|
WWWBoard has a default username and default password. |
n/a |
n/a |
2000-10-13T04:00:00 | 2024-08-01T16:55:29.379Z |
| CVE-1999-0787 |
N/A
|
The SSH authentication agent follows symlinks via… |
n/a |
n/a |
2000-10-13T04:00:00 | 2024-08-01T16:48:38.126Z |
| CVE-1999-0886 |
N/A
|
The security descriptor for RASMAN allows users t… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:55:28.954Z |
| CVE-1999-0909 |
N/A
|
Multihomed Windows systems allow a remote attacke… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:55:29.379Z |
| CVE-1999-0708 |
N/A
|
Buffer overflow in cfingerd allows local users to… |
n/a |
n/a |
2000-01-18T05:00:00 | 2024-08-01T16:48:37.532Z |
| CVE-1999-0786 |
N/A
|
The dynamic linker in Solaris allows a local user… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-01T16:48:37.680Z |
| CVE-1999-0912 |
N/A
|
FreeBSD VFS cache (vfs_cache) allows local users … |
n/a |
n/a |
2000-10-13T04:00:00 | 2024-08-01T16:55:29.308Z |
| CVE-1999-0777 |
N/A
|
IIS FTP servers may allow a remote attacker to re… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.994Z |
| CVE-1999-0906 |
N/A
|
Buffer overflow in sccw allows local users to gai… |
n/a |
n/a |
2000-04-18T04:00:00 | 2024-08-01T16:55:29.323Z |
| CVE-1999-0908 |
N/A
|
Denial of service in Solaris TCP streams driver v… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-01T16:55:28.907Z |
| CVE-1999-1013 |
N/A
|
named-xfer in AIX 4.1.5 and 4.2.1 allows members … |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T16:55:29.424Z |
| CVE-1999-1477 |
N/A
|
Buffer overflow in GNOME libraries 1.0.8 allows l… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:18:07.333Z |
| CVE-1999-1534 |
N/A
|
Buffer overflow in (1) nlservd and (2) rnavc in K… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:18:07.404Z |
| CVE-1999-1351 |
N/A
|
Directory traversal vulnerability in KVIrc IRC cl… |
n/a |
n/a |
2002-03-09T05:00:00 | 2024-08-01T17:11:02.977Z |
| CVE-1999-1484 |
N/A
|
Buffer overflow in MSN Setup BBS 4.71.0.10 Active… |
n/a |
n/a |
2001-09-12T04:00:00 | 2024-08-01T17:18:07.436Z |
| CVE-1999-1578 |
N/A
|
Buffer overflow in Registration Wizard ActiveX co… |
n/a |
n/a |
2005-04-21T04:00:00 | 2024-08-01T17:18:07.669Z |
| CVE-1999-0788 |
N/A
|
Arkiea nlservd allows remote attackers to conduct… |
n/a |
n/a |
2000-10-13T04:00:00 | 2024-08-01T16:48:38.020Z |
| CVE-1999-0940 |
N/A
|
Buffer overflow in mutt mail client allows remote… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:55:29.400Z |
| CVE-1999-1576 |
N/A
|
Buffer overflow in Adobe Acrobat ActiveX control … |
n/a |
n/a |
2005-04-21T04:00:00 | 2024-08-01T17:18:07.668Z |
| CVE-1999-0789 |
N/A
|
Buffer overflow in AIX ftpd in the libc library. |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-01T16:48:38.121Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-pfwp-8pq4-g7pv |
9.8 (3.1)
|
Incomplete List of Disallowed Inputs in SOFA-Hessian | 2019-03-06T17:36:08Z | 2024-03-21T16:02:59Z |
| ghsa-p2xq-vcm7-xjj6 |
7.5 (3.1)
|
Stack Overflow in Apache Mesos | 2019-03-06T17:36:22Z | 2022-09-14T22:44:16Z |
| ghsa-wg37-7mrv-cfwm |
9.8 (3.1)
|
Unauthenticated Remote Code Execution in Apache JMeter | 2019-03-07T18:47:57Z | 2022-09-14T22:45:15Z |
| ghsa-c9h6-xhg9-xxrv |
7.5 (3.1)
|
Improper Input Validation in Apache Qpid Broker-J | 2019-03-07T18:48:08Z | 2022-09-14T22:45:43Z |
| ghsa-8554-jxcw-454q |
8.1 (3.1)
8.2 (4.0)
|
Webargs mishandles concurrent JSON parsing | 2019-03-12T15:16:12Z | 2025-08-04T21:03:04Z |
| ghsa-m63j-wh5w-c252 |
7.5 (3.1)
|
Denial of Service Vulnerability in Action View | 2019-03-13T17:25:55Z | 2023-08-08T16:46:59Z |
| ghsa-86g5-2wh3-gc9j |
7.5 (3.1)
|
Path Traversal in Action View | 2019-03-13T17:26:59Z | 2025-10-22T17:42:49Z |
| ghsa-m42h-mh85-4qgc |
9.8 (3.1)
|
Use of Insufficiently Random Values in Railties Allows Remote Code Execution | 2019-03-13T17:28:35Z | 2023-07-05T20:28:26Z |
| ghsa-2j5v-fc74-j9q2 |
6.1 (3.1)
|
Cross-Site Scripting in editor.md | 2019-03-14T15:38:56Z | 2021-08-30T21:58:23Z |
| ghsa-gp32-7h29-rpxm |
5.3 (3.1)
|
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle | 2019-03-14T15:39:14Z | 2021-09-13T12:37:35Z |
| ghsa-77rv-6vfw-x4gc |
6.5 (3.1)
|
spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability | 2019-03-14T15:39:30Z | 2023-06-20T18:31:23Z |
| ghsa-xhcq-fv7x-grr2 |
9.8 (3.1)
|
Critical severity vulnerability that affects org.apache.solr:solr-core | 2019-03-14T15:39:45Z | 2021-09-21T22:33:16Z |
| ghsa-vrh8-27q8-fr8f |
7.5 (3.1)
|
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core | 2019-03-14T15:39:56Z | 2022-09-17T00:09:39Z |
| ghsa-2g9q-chq2-w8qw |
4.3 (3.1)
|
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and o… | 2019-03-14T15:40:16Z | 2021-08-30T21:36:58Z |
| ghsa-gf2v-9hp6-44qg |
7.5 (3.1)
|
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Imp… | 2019-03-14T15:40:32Z | 2022-09-17T00:32:32Z |
| ghsa-5gvm-hrw5-h6xf |
7.3 (3.1)
|
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hiv… | 2019-03-14T15:40:44Z | 2022-09-17T01:07:49Z |
| ghsa-8cw6-5qvp-q3wj |
5.4 (3.1)
|
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL | 2019-03-14T15:40:57Z | 2022-09-14T22:49:01Z |
| ghsa-6mqq-8r44-vmjc |
4.7 (3.1)
6.0 (4.0)
|
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark | 2019-03-14T15:41:04Z | 2024-10-21T21:07:39Z |
| ghsa-h436-432x-8fvx |
5.5 (3.1)
|
Apache Commons Compress vulnerable to denial of service due to infinite loop | 2019-03-14T15:41:12Z | 2024-02-27T18:28:56Z |
| ghsa-xmc8-cjfr-phx3 |
7.5 (3.1)
|
Regular Expression Denial of Service in highcharts | 2019-03-18T15:59:32Z | 2021-09-21T22:36:57Z |
| ghsa-73rf-6mrf-759q |
|
devise Time-of-check Time-of-use Race Condition vulnerability | 2019-03-19T18:03:25Z | 2023-01-23T20:46:50Z |
| ghsa-vv4c-g6q7-p3q7 |
6.1 (3.1)
|
Doorkeeper-openid_connect contains Open Redirect | 2019-03-25T16:15:54Z | 2023-03-13T23:56:32Z |
| ghsa-573x-jhqh-jg36 |
7.5 (3.1)
|
Improper Certificate Validation in chloride | 2019-03-25T16:16:27Z | 2022-09-17T00:57:41Z |
| ghsa-869j-5855-hjpm |
6.5 (3.1)
|
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf | 2019-03-25T16:16:44Z | 2021-09-03T22:59:29Z |
| ghsa-gcm4-q2pg-xw89 |
9.6 (3.1)
9.4 (4.0)
|
ipycache is vulnerable to Code Injection | 2019-03-25T16:16:55Z | 2024-09-23T16:03:52Z |
| ghsa-qwj8-p662-3m7x |
7.5 (3.1)
|
Path Traversal in localhost-now | 2019-03-25T16:17:05Z | 2023-09-11T18:38:48Z |
| ghsa-pmv6-gf98-p3r5 |
8.1 (3.1)
|
Command Injection in kill-port | 2019-03-25T16:17:18Z | 2023-09-08T19:57:04Z |
| ghsa-5cf4-jqwp-584g |
7.4 (3.1)
|
Improper Privilege Management in org.apache.hadoop:hadoop-main | 2019-03-25T16:17:32Z | 2022-09-17T00:58:23Z |
| ghsa-2fch-jvg5-crf6 |
7.5 (3.1)
|
Improper Input Validation python-gnupg | 2019-03-25T16:17:53Z | 2022-09-17T00:03:45Z |
| ghsa-f58w-649r-qjr9 |
8.1 (3.1)
9.2 (4.0)
|
splunk-sdk does not properly verify untrusted TLS server certificates | 2019-03-25T16:18:04Z | 2024-10-27T15:34:51Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-891 |
7.8 (3.1)
|
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 S… | salt | 2021-03-03T10:15:13+00:00 | 2025-04-09T17:27:27.582884+00:00 |
| pysec-2021-20 |
|
markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of servi… | markdown2 | 2021-03-03T16:15:00Z | 2021-05-10T03:15:00Z |
| pysec-2021-127 |
|
Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component o… | apache-superset | 2021-03-05T12:15:00Z | 2021-08-27T03:21:55.702415Z |
| pysec-2021-44 |
|
Products.PluggableAuthService is a pluggable Zope authentication and authorization framew… | products-pluggableauthservice | 2021-03-08T21:15:00Z | 2021-03-12T13:22:00Z |
| pysec-2021-45 |
|
Products.PluggableAuthService is a pluggable Zope authentication and authorization framew… | products-pluggableauthservice | 2021-03-08T21:15:00Z | 2021-03-12T13:48:00Z |
| pysec-2021-43 |
|
Products.GenericSetup is a mini-framework for expressing the configured state of a Zope S… | products-genericsetup | 2021-03-09T01:15:00Z | 2021-03-12T18:05:00Z |
| pysec-2021-60 |
|
Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerabilit… | tenable-jira-cloud | 2021-03-10T22:15:00Z | 2021-03-18T20:38:00Z |
| pysec-2021-59 |
|
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in s… | urllib3 | 2021-03-15T18:15:00Z | 2021-03-23T16:47:00Z |
| pysec-2021-141 |
|
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely hea… | pygments | 2021-03-17T13:15:00Z | 2021-08-27T03:22:17.331175Z |
| pysec-2021-35 |
|
An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overfl… | pillow | 2021-03-19T04:15:00Z | 2021-03-26T14:06:00Z |
| pysec-2021-36 |
|
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offs… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:11:00Z |
| pysec-2021-37 |
|
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bound… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:09:00Z |
| pysec-2021-38 |
|
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expressio… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:03:00Z |
| pysec-2021-39 |
|
An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleD… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T13:36:00Z |
| pysec-2021-19 |
|
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. … | lxml | 2021-03-21T05:15:00Z | 2021-03-30T18:47:00Z |
| pysec-2021-31 |
|
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web… | omero-web | 2021-03-23T16:15:00Z | 2021-03-27T01:59:00Z |
| pysec-2021-32 |
|
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web… | omero-web | 2021-03-23T16:15:00Z | 2021-03-27T02:20:00Z |
| pysec-2021-140 |
|
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of serv… | pygments | 2021-03-23T17:15:00Z | 2021-08-27T03:22:17.263376Z |
| pysec-2021-432 |
|
Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before v… | nanopb | 2021-03-23T18:15:00Z | 2021-11-24T22:47:12.152718Z |
| pysec-2021-889 |
5.4 (3.1)
|
A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-contr… | plone | 2021-03-24T15:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2021-133 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.660066Z |
| pysec-2021-134 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.710356Z |
| pysec-2021-107 |
|
A flaw was found in several ansible modules, where parameters containing credentials, suc… | ansible | 2021-04-01T18:15:00Z | 2021-07-02T02:41:35.257212Z |
| pysec-2021-34 |
|
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when … | pikepdf | 2021-04-01T20:15:00Z | 2021-04-09T19:15:00Z |
| pysec-2021-11 |
|
django-registration is a user registration package for Django. The django-registration pa… | django-registration | 2021-04-01T22:15:00Z | 2021-04-06T18:40:00Z |
| pysec-2021-6 |
|
In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser all… | django | 2021-04-06T15:15:00Z | 2021-05-12T08:15:00Z |
| pysec-2021-111 |
|
`projen` is a project generation tool that synthesizes project configuration files such a… | projen | 2021-04-06T19:15:00Z | 2021-07-08T03:14:29.411085Z |
| pysec-2021-18 |
|
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link. | indico | 2021-04-07T14:15:00Z | 2021-04-15T14:13:00Z |
| pysec-2021-58 |
|
sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some … | sopel-plugins-channelmgnt | 2021-04-09T16:15:00Z | 2021-05-04T13:59:00Z |
| pysec-2021-147 |
|
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting… | sickrage | 2021-04-12T14:15:00Z | 2021-08-27T03:22:21.507681Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2022-1360 | Malicious code in azure-output-customization-samples-ts (npm) | 2022-06-20T20:10:49Z | 2022-06-20T20:10:50Z |
| mal-2022-1385 | Malicious code in azure-synapse-access-control-samples-js (npm) | 2022-06-20T20:10:49Z | 2022-06-20T20:10:49Z |
| mal-2022-1388 | Malicious code in azure-template-samples-ts-beta (npm) | 2022-06-20T20:10:49Z | 2022-06-20T20:10:50Z |
| mal-2022-4721 | Malicious code in msal-node (npm) | 2022-06-20T20:10:49Z | 2022-06-20T20:10:50Z |
| mal-2022-1251 | Malicious code in azure-arm-machinelearningexperimentation-samples-ts-beta (npm) | 2022-06-20T20:10:50Z | 2022-06-20T20:10:51Z |
| mal-2022-1285 | Malicious code in azure-arm-servicemap-samples-js-beta (npm) | 2022-06-20T20:10:50Z | 2022-06-20T20:10:51Z |
| mal-2022-1316 | Malicious code in azure-core-tracing-samples-js (npm) | 2022-06-20T20:10:50Z | 2022-06-20T20:10:50Z |
| mal-2022-1317 | Malicious code in azure-core-tracing-samples-ts (npm) | 2022-06-20T20:10:50Z | 2022-06-20T20:10:50Z |
| mal-2022-5873 | Malicious code in rush-cpy (npm) | 2022-06-20T20:10:50Z | 2022-06-20T20:10:51Z |
| mal-2022-1250 | Malicious code in azure-arm-machinelearningexperimentation-samples-js-beta (npm) | 2022-06-20T20:10:51Z | 2022-06-20T20:10:52Z |
| mal-2022-1249 | Malicious code in azure-arm-labservices-samples-ts-beta (npm) | 2022-06-20T20:10:52Z | 2022-06-20T20:10:56Z |
| mal-2022-1248 | Malicious code in azure-arm-labservices-samples-js-beta (npm) | 2022-06-20T20:10:56Z | 2022-06-20T20:10:57Z |
| mal-2022-1381 | Malicious code in azure-storage-file-datalake-samples-ts (npm) | 2022-06-20T20:10:56Z | 2022-06-20T20:10:57Z |
| mal-2022-1047 | Malicious code in apimanagementclient (npm) | 2022-06-20T20:10:57Z | 2022-06-20T20:10:57Z |
| mal-2022-1609 | Malicious code in blobindexfunc (npm) | 2022-06-20T20:10:57Z | 2022-06-20T20:10:57Z |
| mal-2022-4237 | Malicious code in kubernetes-ingest (npm) | 2022-06-20T20:10:57Z | 2022-06-20T20:10:58Z |
| mal-2022-6272 | Malicious code in sql-action (npm) | 2022-06-20T20:10:57Z | 2022-06-20T20:10:58Z |
| mal-2022-1379 | Malicious code in azure-storage-common-cpp (npm) | 2022-06-20T20:10:58Z | 2022-06-20T20:10:59Z |
| mal-2022-1939 | Malicious code in cloudjob (npm) | 2022-06-20T20:10:58Z | 2022-06-20T20:10:58Z |
| mal-2022-3945 | Malicious code in iotc-migrator (npm) | 2022-06-20T20:10:58Z | 2022-06-20T20:10:58Z |
| mal-2022-4043 | Malicious code in jobspecification (npm) | 2022-06-20T20:10:58Z | 2022-06-20T20:10:58Z |
| mal-2022-1311 | Malicious code in azure-container-registry-samples-js (npm) | 2022-06-20T20:10:59Z | 2022-06-20T20:11:00Z |
| mal-2022-1312 | Malicious code in azure-container-registry-samples-ts (npm) | 2022-06-20T20:10:59Z | 2022-06-20T20:10:59Z |
| mal-2022-1387 | Malicious code in azure-template-cpp (npm) | 2022-06-20T20:10:59Z | 2022-06-20T20:10:59Z |
| mal-2022-4099 | Malicious code in kakakaakaaa11aaa3_returns_hello_jfrog2 (npm) | 2022-06-20T20:10:59Z | 2022-06-20T20:11:00Z |
| mal-2022-4100 | Malicious code in kakakaakaaa11aaa3_returns_hello_jfrog2a (npm) | 2022-06-20T20:10:59Z | 2022-06-20T20:11:00Z |
| mal-2022-3234 | Malicious code in fstream-package-2 (npm) | 2022-06-20T20:11:00Z | 2022-06-20T20:11:01Z |
| mal-2022-3235 | Malicious code in fstream-pirlalala (npm) | 2022-06-20T20:11:00Z | 2022-06-20T20:11:01Z |
| mal-2022-3236 | Malicious code in fstreamlalala (npm) | 2022-06-20T20:11:00Z | 2022-06-20T20:11:00Z |
| mal-2022-6091 | Malicious code in shitshit12 (npm) | 2022-06-20T20:11:00Z | 2022-06-20T20:11:01Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-0063 | Juniper Junos Space: Mehrere Schwachstellen | 2022-01-12T23:00:00.000+00:00 | 2025-10-08T22:00:00.000+00:00 |
| wid-sec-w-2022-0050 | vim: Schwachstellen ermöglichen nicht spezifizierten Angriff | 2022-01-13T23:00:00.000+00:00 | 2023-04-18T22:00:00.000+00:00 |
| wid-sec-w-2022-0138 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2022-01-13T23:00:00.000+00:00 | 2024-11-25T23:00:00.000+00:00 |
| wid-sec-w-2022-0772 | ClamAV: Schwachstelle ermöglicht Denial of Service | 2022-01-13T23:00:00.000+00:00 | 2023-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-1512 | MediaWiki: Mehrere Schwachstellen | 2022-01-13T23:00:00.000+00:00 | 2023-05-21T22:00:00.000+00:00 |
| wid-sec-w-2022-1220 | GNU libc: Mehrere Schwachstellen ermöglichen Codeausführung und Denial of Service | 2022-01-16T23:00:00.000+00:00 | 2025-10-15T22:00:00.000+00:00 |
| wid-sec-w-2022-0246 | expat: Mehrere Schwachstellen | 2022-01-17T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2022-0100 | Oracle Java SE und OpenJDK: Mehrere Schwachstellen | 2022-01-18T23:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2022-0406 | Grafana: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-01-18T23:00:00.000+00:00 | 2024-01-23T23:00:00.000+00:00 |
| wid-sec-w-2022-0521 | Apache log4j: Mehrere Schwachstellen | 2022-01-18T23:00:00.000+00:00 | 2025-06-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2384 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Privilegieneskalation | 2022-01-18T23:00:00.000+00:00 | 2025-10-22T22:00:00.000+00:00 |
| wid-sec-w-2022-0102 | H2: Schwachstelle ermöglicht Codeausführung | 2022-01-19T23:00:00.000+00:00 | 2024-06-13T22:00:00.000+00:00 |
| wid-sec-w-2025-2191 | F5 BIG-IP: Mehrere Schwachstellen | 2022-01-19T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2022-0052 | vim: Mehrere Schwachstellen | 2022-01-23T23:00:00.000+00:00 | 2023-04-18T22:00:00.000+00:00 |
| wid-sec-w-2022-0247 | phpMyAdmin: Mehrere Schwachstellen | 2022-01-23T23:00:00.000+00:00 | 2023-11-26T23:00:00.000+00:00 |
| wid-sec-w-2022-0498 | expat: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2022-01-23T23:00:00.000+00:00 | 2023-05-09T22:00:00.000+00:00 |
| wid-sec-w-2022-0103 | Node.js: Mehrere Schwachstellen | 2022-01-24T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2022-0248 | vim: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2022-01-24T23:00:00.000+00:00 | 2025-03-30T22:00:00.000+00:00 |
| wid-sec-w-2022-0279 | util-linux: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2022-01-24T23:00:00.000+00:00 | 2024-01-07T23:00:00.000+00:00 |
| wid-sec-w-2022-1206 | GNU libc: Mehrere Schwachstellen | 2022-01-24T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-1023 | strongSwan: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-01-24T23:00:00.000+00:00 | 2024-05-05T22:00:00.000+00:00 |
| wid-sec-w-2024-1076 | npm: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-01-24T23:00:00.000+00:00 | 2024-10-09T22:00:00.000+00:00 |
| wid-sec-w-2022-0198 | Varnish HTTP Cache: Schwachstelle ermöglicht Offenlegung von Informationen und Cache Poisoning | 2022-01-25T23:00:00.000+00:00 | 2022-11-28T23:00:00.000+00:00 |
| wid-sec-w-2022-0421 | QEMU: Schwachstelle ermöglicht Privilegieneskalation | 2022-01-25T23:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2022-1483 | PolicyKit: Schwachstelle ermöglicht Privilegieneskalation | 2022-01-25T23:00:00.000+00:00 | 2024-01-08T23:00:00.000+00:00 |
| wid-sec-w-2022-1868 | Apache Tomcat: Schwachstelle ermöglicht Privilegieneskalation | 2022-01-25T23:00:00.000+00:00 | 2024-08-01T22:00:00.000+00:00 |
| wid-sec-w-2022-0054 | vim: Mehrere Schwachstellen | 2022-01-26T23:00:00.000+00:00 | 2025-03-30T22:00:00.000+00:00 |
| wid-sec-w-2022-0499 | expat: Schwachstelle ermöglicht Codeausführung | 2022-01-26T23:00:00.000+00:00 | 2025-12-29T23:00:00.000+00:00 |
| wid-sec-w-2022-2046 | gcc: Schwachstelle ermöglicht Denial of Service | 2022-01-26T23:00:00.000+00:00 | 2022-11-29T23:00:00.000+00:00 |
| wid-sec-w-2023-1213 | Apple macOS (Monterey): Mehrere Schwachstellen | 2022-01-26T23:00:00.000+00:00 | 2023-05-14T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2007:1016 | Red Hat Security Advisory: samba security update | 2007-11-15T16:25:00+00:00 | 2026-01-13T22:32:25+00:00 |
| rhsa-2007:1017 | Red Hat Security Advisory: samba security update | 2007-11-15T16:29:00+00:00 | 2026-01-13T22:41:12+00:00 |
| rhsa-2007:1038 | Red Hat Security Advisory: openldap security and enhancement update | 2007-11-15T16:45:00+00:00 | 2025-11-21T17:32:35+00:00 |
| rhsa-2007:1045 | Red Hat Security Advisory: net-snmp security update | 2007-11-15T17:11:00+00:00 | 2025-11-21T17:32:36+00:00 |
| rhsa-2007:0983 | Red Hat Security Advisory: conga security, bug fix, and enhancement update | 2007-11-21T21:51:00+00:00 | 2025-11-21T17:32:28+00:00 |
| rhsa-2007:1069 | Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server | 2007-11-26T13:56:00+00:00 | 2026-01-06T20:20:31+00:00 |
| rhsa-2007:1041 | Red Hat Security Advisory: java-1.5.0-ibm security update | 2007-11-26T16:37:00+00:00 | 2025-11-21T17:32:35+00:00 |
| rhsa-2007:1084 | Red Hat Security Advisory: seamonkey security update | 2007-11-26T22:53:00+00:00 | 2025-11-21T17:32:40+00:00 |
| rhsa-2007:1082 | Red Hat Security Advisory: firefox security update | 2007-11-26T23:04:00+00:00 | 2025-11-21T17:32:40+00:00 |
| rhsa-2007:0993 | Red Hat Security Advisory: kernel security update | 2007-11-29T14:46:00+00:00 | 2026-01-13T22:35:17+00:00 |
| rhsa-2007:1059 | Red Hat Security Advisory: pcre security update | 2007-11-29T14:50:00+00:00 | 2025-11-21T17:32:37+00:00 |
| rhsa-2007:1063 | Red Hat Security Advisory: pcre security update | 2007-11-29T14:56:00+00:00 | 2025-11-21T17:32:37+00:00 |
| rhsa-2007:1065 | Red Hat Security Advisory: pcre security update | 2007-11-29T14:58:00+00:00 | 2025-11-21T17:32:38+00:00 |
| rhsa-2007:1068 | Red Hat Security Advisory: pcre security update | 2007-11-29T15:06:00+00:00 | 2025-11-21T17:32:39+00:00 |
| rhsa-2007:1078 | Red Hat Security Advisory: cairo security update | 2007-11-29T15:22:00+00:00 | 2025-11-21T17:32:39+00:00 |
| rhsa-2007:1049 | Red Hat Security Advisory: kernel security and bug fix update | 2007-12-03T15:26:00+00:00 | 2025-11-21T17:32:36+00:00 |
| rhsa-2007:1095 | Red Hat Security Advisory: htdig security update | 2007-12-03T15:46:00+00:00 | 2025-11-21T17:32:42+00:00 |
| rhsa-2007:1048 | Red Hat Security Advisory: openoffice.org, hsqldb security update | 2007-12-05T14:34:00+00:00 | 2026-01-13T20:58:18+00:00 |
| rhsa-2007:1090 | Red Hat Security Advisory: openoffice.org2 security update | 2007-12-05T14:44:00+00:00 | 2026-01-13T22:17:21+00:00 |
| rhsa-2007:1117 | Red Hat Security Advisory: samba security update | 2007-12-10T15:59:00+00:00 | 2025-11-21T17:32:42+00:00 |
| rhsa-2007:1114 | Red Hat Security Advisory: samba security and bug fix update | 2007-12-10T16:36:00+00:00 | 2025-11-21T17:32:41+00:00 |
| rhsa-2007:1077 | Red Hat Security Advisory: python security update | 2007-12-10T17:57:00+00:00 | 2025-11-21T17:32:39+00:00 |
| rhsa-2007:1076 | Red Hat Security Advisory: python security update | 2007-12-10T18:20:00+00:00 | 2026-01-13T22:28:14+00:00 |
| rhsa-2007:1086 | Red Hat Security Advisory: java-1.4.2-bea security update | 2007-12-12T12:27:00+00:00 | 2026-01-13T22:35:29+00:00 |
| rhsa-2007:1128 | Red Hat Security Advisory: autofs security update | 2007-12-12T12:31:00+00:00 | 2025-11-21T17:32:42+00:00 |
| rhsa-2007:1129 | Red Hat Security Advisory: autofs5 security update | 2007-12-12T12:38:00+00:00 | 2025-11-21T17:32:42+00:00 |
| rhsa-2007:1130 | Red Hat Security Advisory: squid security update | 2007-12-18T16:12:00+00:00 | 2025-11-21T17:32:43+00:00 |
| rhsa-2007:1155 | Red Hat Security Advisory: mysql security update | 2007-12-18T16:30:00+00:00 | 2025-11-21T17:32:44+00:00 |
| rhsa-2007:1126 | Red Hat Security Advisory: flash-plugin security update | 2007-12-18T23:52:00+00:00 | 2026-01-13T22:32:56+00:00 |
| rhsa-2007:1165 | Red Hat Security Advisory: libexif security update | 2007-12-19T15:34:00+00:00 | 2025-11-21T17:32:44+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-044-01 | Schneider Electric Modicon Ethernet Serial RTU | 2020-02-13T00:00:00.000000Z | 2020-02-13T00:00:00.000000Z |
| icsa-20-044-02 | Schneider Electric Magelis HMI Panels | 2020-02-13T00:00:00.000000Z | 2020-02-13T00:00:00.000000Z |
| icsa-20-049-01 | Honeywell INNCOM INNControl 3 | 2020-02-18T00:00:00.000000Z | 2020-02-18T00:00:00.000000Z |
| icsa-20-049-02 | Emerson OpenEnterprise | 2020-02-18T00:00:00.000000Z | 2020-02-18T00:00:00.000000Z |
| icsma-20-049-01 | Spacelabs Xhibit Telemetry Receiver (XTR) | 2020-02-18T00:00:00.000000Z | 2020-02-18T00:00:00.000000Z |
| icsma-20-049-02 | GE Healthcare Ultrasound products (Update A) | 2020-02-18T07:00:00.000000Z | 2024-05-16T06:00:00.000000Z |
| icsa-20-051-01 | ICSA-20-051-01_B&R Automation Studio and Automation Runtime | 2020-02-20T00:00:00.000000Z | 2020-02-20T00:00:00.000000Z |
| icsa-20-051-02 | Rockwell Automation FactoryTalk Diagnostics | 2020-02-20T00:00:00.000000Z | 2020-02-20T00:00:00.000000Z |
| icsa-20-051-03 | Honeywell NOTI-FIRE-NET Web Server (NWS-3) | 2020-02-20T00:00:00.000000Z | 2020-02-20T00:00:00.000000Z |
| icsa-20-051-04 | Auto-Maskin RP210E, DCU210E, and Marine Observer Pro (Android App) | 2020-02-20T00:00:00.000000Z | 2020-02-20T00:00:00.000000Z |
| icsa-20-056-01 | Moxa MB3xxx Series Protocol Gateways | 2020-02-25T00:00:00.000000Z | 2020-02-25T00:00:00.000000Z |
| icsa-20-056-02 | Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility | 2020-02-25T00:00:00.000000Z | 2020-02-25T00:00:00.000000Z |
| icsa-20-056-03 | Moxa PT-7528 and PT-7828 Series Ethernet Switches | 2020-02-25T00:00:00.000000Z | 2020-02-25T00:00:00.000000Z |
| icsa-20-056-04 | Moxa EDS-G516E and EDS-510E Series Ethernet Switches | 2020-02-25T00:00:00.000000Z | 2020-02-25T00:00:00.000000Z |
| icsa-20-056-05 | Honeywell WIN-PAK | 2020-02-25T00:00:00.000000Z | 2020-02-25T00:00:00.000000Z |
| icsa-20-063-01 | Emerson ValveLink | 2020-03-03T00:00:00.000000Z | 2020-03-03T00:00:00.000000Z |
| icsa-20-063-02 | ICSA-20-063-02_PHOENIX CONTACT Emalytics Controller ILC | 2020-03-03T00:00:00.000000Z | 2020-03-03T00:00:00.000000Z |
| icsa-20-063-03 | Omron PLC CJ Series | 2020-03-03T00:00:00.000000Z | 2020-03-03T00:00:00.000000Z |
| icsa-20-063-04 | Moxa AWK-3131A Series Industrial AP/Bridge/Client | 2020-03-03T00:00:00.000000Z | 2020-03-03T00:00:00.000000Z |
| icsa-20-065-01 | WAGO I/O-CHECK | 2020-03-05T00:00:00.000000Z | 2020-03-05T00:00:00.000000Z |
| icsa-20-070-02 | Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A) | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-070-03 | Siemens Spectrum Power 5 | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-070-04 | ICSA-20-070-04_Johnson Controls Kantech EntraPass | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-070-05 | Johnson Controls Metasys | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-070-06 | Rockwell Automation MicroLogix Controllers and RSLogix 500 Software | 2020-03-10T00:00:00.000000Z | 2020-03-10T00:00:00.000000Z |
| icsa-20-072-01 | ICSA-20-072-01_ABB eSOMS | 2020-03-12T00:00:00.000000Z | 2020-03-12T00:00:00.000000Z |
| icsa-20-072-02 | ABB Asset Suite | 2020-03-12T00:00:00.000000Z | 2020-03-12T00:00:00.000000Z |
| icsa-20-072-03 | Rockwell Automation Allen-Bradley Stratix 5950 | 2020-03-12T00:00:00.000000Z | 2020-03-12T00:00:00.000000Z |
| icsa-20-077-01 | Delta Electronics Industrial Automation CNCSoft ScreenEditor | 2020-03-17T00:00:00.000000Z | 2020-03-17T00:00:00.000000Z |
| icsa-20-079-01 | Systech NDS-5000 Terminal Server | 2020-03-19T00:00:00.000000Z | 2020-03-19T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-sdscred-hfwwfqbj | Cisco SD-WAN Solution Software Static Credentials Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sdw-dos-kwodyhnb | Cisco SD-WAN Solution Software Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-sivm-m8wugr9o | Cisco SD-WAN vManage Software SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vedgfpdos-pkqqrnwv | Cisco SD-WAN vEdge Routers Denial of Service Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-visio-dir-sql-inj-fpm3mpft | Cisco Vision Dynamic Signage Director SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanage-v78fubgv | Cisco SD-WAN vManage Software SQL Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T20:56:20+00:00 |
| cisco-sa-vmandowndir-cvgvdkm3 | Cisco SD-WAN vManage Software Path Traversal Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanrce-4jtwt28p | Cisco SD-WAN vManage Software Remote Code Execution Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanwebid-5qwmccvt | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanxml-aj4gfekd | Cisco SD-WAN vManage Software XML External Entity Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmanxss-z7bhvhpy | Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmdirtrav-efdaxsjg | Cisco SD-WAN vManage Software Directory Traversal Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-vmpresc-syzcs4kc | Cisco SD-WAN Solution Software Privilege Escalation Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-15T16:00:00+00:00 |
| cisco-sa-webex-html-bj4y9tx | Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability | 2020-07-15T16:00:00+00:00 | 2020-07-20T14:31:42+00:00 |
| cisco-sa-asaftd-ro-path-kjuqhb86 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability | 2020-07-22T16:00:00+00:00 | 2020-08-27T14:33:49+00:00 |
| cisco-sa-dcnm-auth-bypass-jkubgpu3 | Cisco Data Center Network Manager Authentication Bypass Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-bypass-dyeejums | Cisco Data Center Network Manager Authentication Bypass Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-improper-auth-7krd9tdt | Cisco Data Center Network Manager Improper Authorization Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-info-disclosure-tfx3kerc | Cisco Data Center Network Manager Information Disclosure Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-path-trav-2xzonjdr | Cisco Data Center Network Manager Path Traversal Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-rest-inj-bct8pwaj | Cisco Data Center Network Manager Command Injection Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-sql-inject-8hk6pwmf | Cisco Data Center Network Manager SQL Injection Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-dcnm-xss-3jkdlslv | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-devmgr-cmd-inj-umc8rhnh | Cisco Data Center Network Manager Command Injection Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-sdbufof-h5f5vsel | Cisco SD-WAN Solution Software Buffer Overflow Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-30T17:13:13+00:00 |
| cisco-sa-uabvman-sygzt8bv | Cisco SD-WAN vManage Software Authorization Bypass Vulnerability | 2020-07-29T16:00:00+00:00 | 2020-07-29T16:00:00+00:00 |
| cisco-sa-racerts-wvuypxew | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Trustpoint Configuration Defaults | 2020-07-31T16:00:00+00:00 | 2020-07-31T22:35:48+00:00 |
| cisco-sa-grub2-code-exec-xlepcapy | GRUB2 Arbitrary Code Execution Vulnerability | 2020-08-04T23:00:00+00:00 | 2020-08-10T15:49:28+00:00 |
| cisco-sa-anyconnect-dll-f26wwjw | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 2020-08-05T16:00:00+00:00 | 2022-10-25T13:15:17+00:00 |
| cisco-sa-anyconnect-dos-fexq4tav | Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability | 2020-08-05T16:00:00+00:00 | 2020-08-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-32714 | Integer Overflow in Chunked Transfer-Encoding | 2021-07-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-32715 | Lenient Parsing of Content-Length Header When Prefixed with Plus Sign | 2021-07-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-32740 | Regular Expression Denial of Service in Addressable templates | 2021-07-02T00:00:00.000Z | 2021-07-30T00:00:00.000Z |
| msrc_cve-2021-32760 | Archive package allows chmod of file outside of unpack target directory | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-32761 | Integer overflow issues with *BIT commands on 32-bit systems | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-32785 | Format string bug in the Redis cache implementation | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-32786 | Open Redirect in oidc_validate_redirect_url() | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-32791 | Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-32792 | XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-33909 | fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations leading to an integer overflow an Out-of-bounds Write and escalation to root by an unprivileged user aka CID-8cae8cd89f05. | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-33910 | basic/unit-name.c in systemd prior to 246.15 247.8 248.5 and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash. | 2021-07-02T00:00:00.000Z | 2021-07-30T00:00:00.000Z |
| msrc_cve-2021-34558 | The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange allowing a malicious TLS server to cause a TLS client to panic. | 2021-07-02T00:00:00.000Z | 2021-07-31T00:00:00.000Z |
| msrc_cve-2021-35039 | kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG verification that a kernel module is signed for loading via init_module does not occur for a module.sig_enforce=1 command-line argument. | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3571 | A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1. | 2021-07-02T00:00:00.000Z | 2025-10-01T23:11:10.000Z |
| msrc_cve-2021-35942 | The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted crafted pattern potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations. | 2021-07-02T00:00:00.000Z | 2021-08-03T00:00:00.000Z |
| msrc_cve-2021-36222 | ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation. | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-36230 | HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed using the run token allowing privilege escalation to organization owner. Fixed in v202107-1. | 2021-07-02T00:00:00.000Z | 2022-04-02T00:00:00.000Z |
| msrc_cve-2021-3636 | It was found in OpenShift before version 4.8 that the generated certificate for the in-cluster Service CA incorrectly included additional certificates. The Service CA is automatically mounted into all pods allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service. | 2021-07-02T00:00:00.000Z | 2024-04-15T00:00:00.000Z |
| msrc_cve-2021-36373 | Apache Ant TAR archive denial of service vulnerability | 2021-07-02T00:00:00.000Z | 2025-03-04T00:00:00.000Z |
| msrc_cve-2021-36374 | Apache Ant ZIP and ZIP based archive denial of service vulerability | 2021-07-02T00:00:00.000Z | 2025-03-04T00:00:00.000Z |
| msrc_cve-2021-36386 | report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user. | 2021-07-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-36980 | Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-37159 | hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state leading to a use-after-free and a double free. | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-37576 | arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs aka CID-f62f3c20647e. | 2021-07-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-37600 | An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments and possibly in all realistic environments. | 2021-07-02T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| msrc_cve-2020-24742 | An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory allowing attackers to execute arbitrary code via crafted files. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-36475 | An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs. | 2021-08-02T00:00:00.000Z | 2025-09-03T22:06:18.000Z |
| msrc_cve-2020-36476 | An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory. | 2021-08-02T00:00:00.000Z | 2025-09-04T02:31:03.000Z |
| msrc_cve-2020-36477 | An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though). | 2021-08-02T00:00:00.000Z | 2025-09-03T22:03:28.000Z |
| msrc_cve-2020-36478 | An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid. | 2021-08-02T00:00:00.000Z | 2025-09-04T05:05:02.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202007-1489 | Xiamen Haiwei Technology Co., Ltd. is a high-tech enterprise integrating independent rese… | 2022-05-04T09:32:46.284000Z |
| var-202006-1896 | Ruijie RG-RSR20-14E is a multi-service router. The RG-RSR20-14E router has an unautho… | 2022-05-04T09:32:50.551000Z |
| var-202005-1104 | DView2.6.2 is a Windows-based operating system, a data monitoring system software develop… | 2022-05-04T09:32:52.621000Z |
| var-202005-1062 | Apstar focuses on ultra-high-definition, ultra-telephoto, multi-spectral, thermal imaging… | 2022-05-04T09:32:52.632000Z |
| var-202004-2291 | ZTE ZXR10 1800-2S is a multi-service intelligent router produced by ZTE Corporation. … | 2022-05-04T09:32:53.582000Z |
| var-202004-2270 | Suzhou Keda Technology Co., Ltd. (hereinafter referred to as Keda) is a provider of video… | 2022-05-04T09:32:53.594000Z |
| var-202002-1697 | Schneider Electric SA is a global electrical company headquartered in France. There i… | 2022-05-04T09:33:00.912000Z |
| var-202001-1996 | ZXR10 1800-2S is a router product of ZTE Corporation of China. ZTE ZXR10 1800-2S has … | 2022-05-04T09:33:02.157000Z |
| var-202001-1975 | KPS2204-2T4D-L3-L3 is a protocol converter device that integrates Ethernet and serial dat… | 2022-05-04T09:33:02.172000Z |
| var-201911-1946 | The streaming media server is the core system of the streaming media application and the … | 2022-05-04T09:33:07.827000Z |
| var-201909-1662 | Zhejiang Nuclear New Flush Network Information Co., Ltd. is the first listed company in t… | 2022-05-04T09:33:11.467000Z |
| var-201908-2192 | Beijing Wenwang Yilian Technology Co., Ltd. is a network environment security service pro… | 2022-05-04T09:33:12.903000Z |
| var-201906-1350 | MPSec ISG1000 Internet Behavior Manager is an Internet behavior management device from Ma… | 2022-05-04T09:33:19.507000Z |
| var-201905-1428 | Aviosoft DVD X Player Standard is a DVD player from Aviosoft, USA. An elevation of privi… | 2022-05-04T09:33:20.651000Z |
| var-201903-1639 | ZTE Video Conference MCU Device is stored XSS Vulnerability, no user action required, acc… | 2022-05-04T09:33:25.909000Z |
| var-201902-0923 | The Fixon K2 wireless router is a wireless router for home use. The Fidelity K2 wireless… | 2022-05-04T09:33:27.682000Z |
| var-201901-1694 | Shenzhen Qiao An Technology Co., Ltd., as a research and development manufacturer of surv… | 2022-05-04T09:33:28.379000Z |
| var-201810-1600 | LG Network Storage N1A1DD1 is a network storage product (NAS). There is a remote command… | 2022-05-04T09:33:35.075000Z |
| var-201809-1340 | The HP LaserJet 5200 series is a printer from HP China. The HP LaserJet 5200 series prin… | 2022-05-04T09:33:36.392000Z |
| var-201806-1892 | Yestv camera is a smart monitor for wireless network wifi. There is an anonymous access … | 2022-05-04T09:33:44.264000Z |
| var-201804-1733 | XMSWR-W18M is an intelligent wireless router of Shanghai Simo Communication Technology Co… | 2022-05-04T09:33:50.346000Z |
| var-201803-2367 | The Play Library SDK is developed based on Dahua's proprietary stream encapsulation proto… | 2022-05-04T09:33:52.021000Z |
| var-201802-1412 | Geovision is a Taiwan-based company that specializes in digital security surveillance sys… | 2022-05-04T09:33:54.240000Z |
| var-201801-1830 | IP-COM enterprise router is a high-performance router and deep Internet behavior manageme… | 2022-05-04T09:33:55.344000Z |
| var-201712-1126 | DGND3700 / DGN2200 is a wireless router from Netgear. An information disclosure vulnerab… | 2022-05-04T09:33:59.935000Z |
| var-201711-1238 | Fluorite Studio is the supporting client software for the fluorite cloud video webcam. It… | 2022-05-04T09:34:01.638000Z |
| var-201710-1443 | The Fixon K2 wireless router is a wireless router for home use. Shanghai Feixun Data Com… | 2022-05-04T09:34:03.185000Z |
| var-201709-1242 | Arris Modems is a modem produced by telecommunications equipment manufacturer Arris, a ne… | 2022-05-04T09:34:04.710000Z |
| var-201707-1355 | The HP OfficeJet Pro 8210 is an all-in-one printer from Hewlett Packard. A remote command… | 2022-05-04T09:34:10.039000Z |
| var-201706-1142 | Ambowtone Application Gateway is an inter-network device developed by Beijing Ableton Tec… | 2022-05-04T09:34:11.779000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000094 | Cacti vulnerable to cross-site scripting | 2015-07-09T14:41+09:00 | 2015-07-14T18:03+09:00 |
| jvndb-2015-000096 | Simple Oekaki BBS vulnerable to cross-site scripting | 2015-07-10T13:57+09:00 | 2015-07-14T18:09+09:00 |
| jvndb-2015-000097 | Simple Oekaki BBS vulnerability where arbitrary files may be deleted | 2015-07-10T13:57+09:00 | 2015-07-14T18:11+09:00 |
| jvndb-2015-000095 | LINE@ vulnerable to script injection | 2015-07-10T14:50+09:00 | 2024-05-09T18:05+09:00 |
| jvndb-2015-000098 | acmailer vulnerable to directory traversal | 2015-07-15T15:53+09:00 | 2015-07-27T15:12+09:00 |
| jvndb-2015-000099 | Thetis vulnerable to SQL injection | 2015-07-15T15:54+09:00 | 2015-07-27T15:07+09:00 |
| jvndb-2015-000101 | PHP for Windows vulnerable to OS command injection | 2015-07-17T14:44+09:00 | 2016-05-19T17:43+09:00 |
| jvndb-2015-000103 | Welcart vulnerable to cross-site scripting | 2015-07-24T14:33+09:00 | 2015-07-28T17:51+09:00 |
| jvndb-2015-000104 | Research Artisan Lite vulnerable to cross-site scripting | 2015-07-24T14:36+09:00 | 2015-07-28T17:29+09:00 |
| jvndb-2015-000105 | Research Artisan Lite does not properly perform authentication | 2015-07-24T14:46+09:00 | 2015-07-28T17:22+09:00 |
| jvndb-2014-007612 | Welcart vulnerable to SQL injection | 2015-07-24T14:52+09:00 | 2015-07-24T14:52+09:00 |
| jvndb-2015-000106 | Gazou BBS plus vulnerability in file upload processing | 2015-07-28T13:47+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000107 | yoyaku_v41 vulnerable to arbitrary file creation | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000108 | yoyaku_v41 vulnerable to authentication bypass | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000109 | yoyaku_v41 vulnerable to OS command injection | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000110 | Yodobashi App for Android vulnerable to arbitrary Java method execution | 2015-08-07T13:50+09:00 | 2015-08-11T12:22+09:00 |
| jvndb-2015-000111 | Yodobashi App for Android fails to verify SSL server certificates | 2015-08-07T13:50+09:00 | 2018-04-04T12:28+09:00 |
| jvndb-2015-000112 | Microsoft Office discloses a file path of a local file | 2015-08-12T15:13+09:00 | 2015-08-12T15:13+09:00 |
| jvndb-2015-000113 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site scripting | 2015-08-12T15:13+09:00 | 2015-08-26T17:38+09:00 |
| jvndb-2015-000114 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery | 2015-08-12T15:13+09:00 | 2015-08-26T17:28+09:00 |
| jvndb-2015-000117 | Multiple I-O DATA LAN routers vulnerable in UPnP functionality | 2015-08-18T15:21+09:00 | 2015-08-28T17:29+09:00 |
| jvndb-2015-000118 | Apache Tapestry deserializes untrusted data | 2015-08-20T15:53+09:00 | 2015-08-26T17:51+09:00 |
| jvndb-2015-000119 | File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted | 2015-08-27T15:03+09:00 | 2015-09-02T17:57+09:00 |
| jvndb-2015-000122 | desknet's NEO vulnerable to directory traversal | 2015-09-01T12:36+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000120 | Rakuten card App for iOS fails to verify SSL server certificates | 2015-09-01T14:18+09:00 | 2018-03-14T12:30+09:00 |
| jvndb-2015-000121 | Twit BBS vulnerable to cross-site scripting | 2015-09-01T14:18+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000123 | NScripter vulnerable to buffer overflow | 2015-09-02T15:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000302 | hitSuji (rktSNS2) vulnetable to cross-site scripting | 2015-09-03T14:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000301 | BBS X102 vulnerable to cross-site scripting | 2015-09-03T15:00+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000124 | Apache Struts vulnerable to cross-site scripting | 2015-09-04T15:12+09:00 | 2015-12-25T13:45+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2016:3046-1 | Security update for w3m | 2016-12-07T15:45:29Z | 2016-12-07T15:45:29Z |
| suse-su-2016:3043-1 | Security update for java-1_7_1-ibm | 2016-12-07T15:46:24Z | 2016-12-07T15:46:24Z |
| suse-su-2016:3048-1 | Security update for MozillaFirefox | 2016-12-07T16:36:01Z | 2016-12-07T16:36:01Z |
| suse-su-2016:3049-1 | Security update for the Linux Kernel | 2016-12-07T18:29:31Z | 2016-12-07T18:29:31Z |
| suse-su-2016:3052-1 | Security update for perl-SOAP-Lite | 2016-12-08T10:05:32Z | 2016-12-08T10:05:32Z |
| suse-su-2016:3053-1 | Security update for w3m | 2016-12-08T10:06:04Z | 2016-12-08T10:06:04Z |
| suse-su-2016:3057-1 | Security update for gc | 2016-12-08T10:06:58Z | 2016-12-08T10:06:58Z |
| suse-su-2016:3054-1 | Security update for xorg-x11-libX11 | 2016-12-08T10:07:59Z | 2016-12-08T10:07:59Z |
| suse-su-2016:3056-1 | Security update for crowbar-barclamp-trove | 2016-12-08T10:09:06Z | 2016-12-08T10:09:06Z |
| suse-su-2016:3063-1 | Security update for the Linux Kernel | 2016-12-09T08:13:47Z | 2016-12-09T08:13:47Z |
| suse-su-2016:3067-1 | Security update for xen | 2016-12-09T13:13:04Z | 2016-12-09T13:13:04Z |
| suse-su-2016:3068-1 | Security update for java-1_7_0-ibm | 2016-12-09T13:13:58Z | 2016-12-09T13:13:58Z |
| suse-su-2016:3069-1 | Security update for the Linux Kernel | 2016-12-09T13:20:33Z | 2016-12-09T13:20:33Z |
| suse-su-2016:3081-1 | Security update for tomcat | 2016-12-10T18:18:15Z | 2016-12-10T18:18:15Z |
| suse-su-2016:3079-1 | Security update for tomcat | 2016-12-10T18:18:26Z | 2016-12-10T18:18:26Z |
| suse-su-2016:3078-1 | Security update for java-1_8_0-ibm | 2016-12-10T18:19:12Z | 2016-12-10T18:19:12Z |
| suse-su-2016:3080-1 | Security update for MozillaFirefox, mozilla-nss | 2016-12-10T18:21:00Z | 2016-12-10T18:21:00Z |
| suse-su-2016:3084-1 | Security update for Docker and dependencies | 2016-12-12T08:35:04Z | 2016-12-12T08:35:04Z |
| suse-su-2016:3083-1 | Security update for xen | 2016-12-12T08:36:28Z | 2016-12-12T08:36:28Z |
| suse-su-2016:3094-1 | Security update for Linux Kernel Live Patch 0 for SLE 12 SP1 | 2016-12-12T14:51:03Z | 2016-12-12T14:51:03Z |
| suse-su-2016:3100-1 | Security update for Linux Kernel Live Patch 1 for SLE 12 SP1 | 2016-12-12T14:51:22Z | 2016-12-12T14:51:22Z |
| suse-su-2016:3093-1 | Security update for Linux Kernel Live Patch 2 for SLE 12 SP1 | 2016-12-12T14:51:42Z | 2016-12-12T14:51:42Z |
| suse-su-2016:3098-1 | Security update for Linux Kernel Live Patch 3 for SLE 12 SP1 | 2016-12-12T14:52:02Z | 2016-12-12T14:52:02Z |
| suse-su-2016:3104-1 | Security update for Linux Kernel Live Patch 4 for SLE 12 SP1 | 2016-12-12T15:05:13Z | 2016-12-12T15:05:13Z |
| suse-su-2016:3096-1 | Security update for Linux Kernel Live Patch 6 for SLE 12 SP1 | 2016-12-12T15:05:33Z | 2016-12-12T15:05:33Z |
| suse-su-2016:3105-1 | Security update for MozillaFirefox, mozilla-nss | 2016-12-13T08:18:24Z | 2016-12-13T08:18:24Z |
| suse-su-2016:3107-1 | Security update for libass | 2016-12-13T08:19:14Z | 2016-12-13T08:19:14Z |
| suse-su-2016:3111-1 | Security update for Linux Kernel Live Patch 9 for SLE 12 | 2016-12-13T11:50:07Z | 2016-12-13T11:50:07Z |
| suse-su-2016:3112-1 | Security update for Linux Kernel Live Patch 12 for SLE 12 | 2016-12-13T11:50:28Z | 2016-12-13T11:50:28Z |
| suse-su-2016:3113-1 | Security update for Linux Kernel Live Patch 14 for SLE 12 | 2016-12-13T11:50:46Z | 2016-12-13T11:50:46Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2020:0831-1 | Security update for libEMF | 2020-06-17T16:19:43Z | 2020-06-17T16:19:43Z |
| opensuse-su-2020:0832-1 | Security update for chromium | 2020-06-18T16:17:43Z | 2020-06-18T16:17:43Z |
| opensuse-su-2020:0836-1 | Security update for rmt-server | 2020-06-19T04:15:39Z | 2020-06-19T04:15:39Z |
| opensuse-su-2020:0845-1 | Security update for chromium | 2020-06-22T18:17:35Z | 2020-06-22T18:17:35Z |
| opensuse-su-2020:0846-1 | Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork | 2020-06-22T18:17:50Z | 2020-06-22T18:17:50Z |
| opensuse-su-2020:0847-1 | Security update for php7 | 2020-06-22T18:17:59Z | 2020-06-22T18:17:59Z |
| opensuse-su-2020:0849-1 | Security update for fwupd | 2020-06-22T18:18:12Z | 2020-06-22T18:18:12Z |
| opensuse-su-2020:0850-1 | Security update for perl | 2020-06-22T18:18:20Z | 2020-06-22T18:18:20Z |
| opensuse-su-2020:0851-1 | Security update for xmlgraphics-batik | 2020-06-22T18:18:29Z | 2020-06-22T18:18:29Z |
| opensuse-su-2020:0852-1 | Security update for osc | 2020-06-22T18:18:35Z | 2020-06-22T18:18:35Z |
| opensuse-su-2020:0854-1 | Security update for mozilla-nspr, mozilla-nss | 2020-06-24T04:17:54Z | 2020-06-24T04:17:54Z |
| opensuse-su-2020:0856-1 | Security update for chromium | 2020-06-24T08:19:53Z | 2020-06-24T08:19:53Z |
| opensuse-su-2020:0861-1 | Security update for rubygem-bundler | 2020-06-24T16:42:43Z | 2020-06-24T16:42:43Z |
| opensuse-su-2020:0865-1 | Security update for uftpd | 2020-06-25T12:18:25Z | 2020-06-25T12:18:25Z |
| opensuse-su-2020:0869-1 | Security update for mercurial | 2020-06-26T12:17:22Z | 2020-06-26T12:17:22Z |
| opensuse-su-2020:0870-1 | Security update for mariadb | 2020-06-26T14:20:30Z | 2020-06-26T14:20:30Z |
| opensuse-su-2020:0872-1 | Security update for bluez | 2020-06-26T14:20:41Z | 2020-06-26T14:20:41Z |
| opensuse-su-2020:0876-1 | Security update for graphviz | 2020-06-26T16:18:12Z | 2020-06-26T16:18:12Z |
| opensuse-su-2020:0880-1 | Security update for mercurial | 2020-06-27T08:16:39Z | 2020-06-27T08:16:39Z |
| opensuse-su-2020:0883-1 | Security update for curl | 2020-06-27T16:16:16Z | 2020-06-27T16:16:16Z |
| opensuse-su-2020:0887-1 | Security update for chromium | 2020-06-27T22:17:18Z | 2020-06-27T22:17:18Z |
| opensuse-su-2020:0892-1 | Security update for grafana, grafana-piechart-panel, grafana-status-panel | 2020-06-28T04:20:52Z | 2020-06-28T04:20:52Z |
| opensuse-su-2020:0893-1 | Security update for chromium | 2020-06-28T12:16:33Z | 2020-06-28T12:16:33Z |
| opensuse-su-2020:0898-1 | Security update for ceph | 2020-06-29T04:16:41Z | 2020-06-29T04:16:41Z |
| opensuse-su-2020:0902-1 | Security update for chromium | 2020-06-29T04:17:22Z | 2020-06-29T04:17:22Z |
| opensuse-su-2020:0903-1 | Security update for mutt | 2020-06-29T10:17:03Z | 2020-06-29T10:17:03Z |
| opensuse-su-2020:0906-1 | Security update for graphviz | 2020-06-29T18:19:47Z | 2020-06-29T18:19:47Z |
| opensuse-su-2020:0908-1 | Security update for curl | 2020-06-29T18:19:59Z | 2020-06-29T18:19:59Z |
| opensuse-su-2020:0910-1 | Security update for squid | 2020-06-29T18:20:12Z | 2020-06-29T18:20:12Z |
| opensuse-su-2020:0911-1 | Security update for tomcat | 2020-06-29T18:20:18Z | 2020-06-29T18:20:18Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2015-01210 | Piwigo 'admin.php' SQL注入漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01211 | Cisco Hosted Collaboration Solution信息泄露漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01212 | Cisco Web Security Appliance跨站脚本漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01213 | Cisco Wireless LAN Controller拒绝服务漏洞(CNVD-2015-01213) | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01214 | Cisco Web Security Appliance远程安全绕过漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01215 | OpenStack Glance拒绝服务漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01216 | GNU glibc 'strxfrm()'函数整数溢出漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01217 | Cisco TelePresence Multipoint Control Unit拒绝服务漏洞 | 2015-02-21 | 2015-02-26 |
| cnvd-2015-01218 | Cisco TelePresence Management Suite XML外部实体注入漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01220 | Cisco Intrusion Prevention System密钥生成HTTPS拒绝服务漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01221 | Cisco ASR 5000 Series Software拒绝服务漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01222 | Cisco Desktop Collaboration Experience DX650命令注入漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01223 | Cisco Adaptive Security Appliance (ASA) Software远程安全绕过漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01224 | WordPress Photo Gallery插件任意文件上传漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01225 | WordPress Image Metadata Cruncher跨站请求和HTML注入漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01226 | Moodle跨站脚本漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01227 | Moodle Glossary跨站请求伪造漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01228 | Moodle信息泄露漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01229 | Moodle 'calendar/externallib.php'信息泄露漏洞 | 2015-02-21 | 2015-02-26 |
| cnvd-2015-01230 | Moodle multimedia过滤器拒绝服务漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01231 | Moodle Shibboleth验证插件强制退出漏洞 | 2015-02-21 | 2015-02-26 |
| cnvd-2015-01232 | Moodle LTI模块不充分访问检查漏洞 | 2015-02-21 | 2015-02-26 |
| cnvd-2015-01233 | GNU glibc 'strcoll()'函数栈缓冲区溢出漏洞 | 2015-02-21 | 2015-02-26 |
| cnvd-2015-01238 | Red Hat oVirt Engine信息泄露漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01239 | vBulletin Forum Component 'forum/help'页面跨站脚本漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01240 | SolarWinds Server and Application Monitor缓冲区溢出漏洞(CNVD-2015-01240) | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01241 | SolarWinds Server and Application Monitor缓冲区溢出漏洞(CNVD-2015-01241) | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01245 | IBM Tivoli Storage Manager Backup-Archive client身份验证绕过漏洞 | 2015-02-21 | 2015-02-27 |
| cnvd-2015-01246 | Phusion Passenger符号链接攻击漏洞(CNVD-2015-01246) | 2015-02-21 | 2015-02-26 |
| cnvd-2015-01248 | WordPress插件Google Doc Embedder跨站脚本漏洞 | 2015-02-21 | 2015-02-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-avi-052 | Vulnérabilités sur le traitement des objets OLE et COM | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-053 | Vulnérabilité dans le traitements des images PNG pour plusieurs applications Microsoft | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-054 | Vulnérabilité de l'interpréteur de commandes Windows | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-055 | Vulnérabilité d'authentification dans ASP.NET | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-056 | Vulnérabilité dans le traitement des hyperliens sous Windows | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-057 | Vulnérabilités dans les services SharePoint de Microsoft | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-058 | Vulnérabilité de SMB dans Microsoft Windows | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-059 | Vulnérabilité dans le composant ActiveX DHTML | 2005-02-10T00:00:00.000000 | 2005-02-10T00:00:00.000000 |
| certa-2005-avi-060 | Multiples Vulnérabilités dans Internet Explorer | 2005-02-10T00:00:00.000000 | 2005-02-10T00:00:00.000000 |
| certa-2005-avi-061 | Vulnérabilité dans la gestion des "tubes nommés" du système Windows XP | 2005-02-10T00:00:00.000000 | 2005-02-10T00:00:00.000000 |
| certa-2005-avi-062 | Vulnérabilités dans les produits Symantec | 2005-02-10T00:00:00.000000 | 2005-02-10T00:00:00.000000 |
| certa-2005-avi-063 | Vulnérabilité de Python | 2005-02-10T00:00:00.000000 | 2005-02-17T00:00:00.000000 |
| certa-2005-avi-064 | Vulnérabilité des systèmes AIX de IBM | 2005-02-10T00:00:00.000000 | 2005-02-10T00:00:00.000000 |
| certa-2005-avi-065 | Vulnérabilité dans les produits F-Secure | 2005-02-11T00:00:00.000000 | 2005-02-14T00:00:00.000000 |
| certa-2005-avi-066 | Vulnérabilité de Mailman | 2005-02-11T00:00:00.000000 | 2005-02-17T00:00:00.000000 |
| certa-2005-avi-067 | Vulnérabilité de Emacs et XEmacs | 2005-02-11T00:00:00.000000 | 2005-02-24T00:00:00.000000 |
| certa-2005-avi-068 | Vulnérabilité dans vim | 2005-02-11T00:00:00.000000 | 2005-03-01T00:00:00.000000 |
| certa-2005-avi-069 | Vulnérabilité de cpio | 2005-02-14T00:00:00.000000 | 2005-10-06T00:00:00.000000 |
| certa-2005-avi-070 | Vulnérabilité de GNU enscript | 2005-02-14T00:00:00.000000 | 2005-02-17T00:00:00.000000 |
| certa-2005-avi-071 | Vulnérabilité dans les produits ZoneAlarm & Check Point Integrity | 2005-02-14T00:00:00.000000 | 2005-02-14T00:00:00.000000 |
| certa-2005-avi-072 | Vulnérabilité du module Apache mod_python | 2005-02-14T00:00:00.000000 | 2005-03-01T00:00:00.000000 |
| certa-2005-avi-073 | Vulnérabilité de ht://Dig | 2005-02-14T00:00:00.000000 | 2005-09-19T00:00:00.000000 |
| certa-2005-avi-074 | Vulnérabilité de PowerDNS | 2005-02-14T00:00:00.000000 | 2005-02-14T00:00:00.000000 |
| certa-2005-avi-075 | Multiples vulnérabilités des systèmes AIX de IBM | 2005-02-14T00:00:00.000000 | 2005-02-14T00:00:00.000000 |
| certa-2005-avi-076 | Vulnérabilité de IBM Websphere Application Server | 2005-02-15T00:00:00.000000 | 2005-02-15T00:00:00.000000 |
| certa-2005-avi-077 | Multiples vulnérabilités dans IBM DB2 | 2005-02-15T00:00:00.000000 | 2005-02-15T00:00:00.000000 |
| certa-2005-avi-078 | Vulnérabilité de l'application sympa | 2005-02-15T00:00:00.000000 | 2005-06-10T00:00:00.000000 |
| certa-2005-avi-079 | Vulnérabilité de MySQL | 2005-02-15T00:00:00.000000 | 2005-02-18T00:00:00.000000 |
| certa-2005-avi-080 | Multiples vulnérabilités de Solaris | 2005-02-16T00:00:00.000000 | 2005-02-16T00:00:00.000000 |
| certa-2005-avi-081 | Vulnérabilité de Midnight Commander | 2005-02-18T00:00:00.000000 | 2005-06-17T00:00:00.000000 |