Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-6651 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
erponline.xyz ERP Online Inventory Edit Item cross sit… |
erponline.xyz |
ERP Online |
2026-04-20T14:45:11.560Z | 2026-04-20T15:21:57.084Z |
| CVE-2026-6650 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
Z-BlogPHP ZBA File app_upload.php UnPack unrestricted upload |
n/a |
Z-BlogPHP |
2026-04-20T14:30:13.825Z | 2026-04-20T16:23:25.105Z |
| CVE-2026-34428 |
8.3 (4.0)
7.7 (3.1)
|
Vvveb < 1.0.8.1 SSRF via oEmbedProxy |
givanz |
Vvveb |
2026-04-20T13:55:36.802Z | 2026-04-20T14:49:33.646Z |
| CVE-2026-34427 |
8.7 (4.0)
8.8 (3.1)
|
Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save |
givanz |
Vvveb |
2026-04-20T13:55:15.311Z | 2026-04-20T14:51:12.245Z |
| CVE-2026-34429 |
5.1 (4.0)
5.4 (3.1)
|
Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename |
givanz |
Vvveb |
2026-04-20T13:54:37.019Z | 2026-04-20T14:56:19.205Z |
| CVE-2026-5760 |
9.8 (3.1)
|
CVE-2026-5760 |
SGLang |
SGLang |
2026-04-20T13:46:23.603Z | 2026-04-20T15:29:54.098Z |
| CVE-2026-6369 |
5.7 (4.0)
|
Exposed Session Token in canonical-livepatch client snap |
Canonical |
canonical-livepatch |
2026-04-20T13:38:13.691Z | 2026-04-20T14:06:18.537Z |
| CVE-2026-4048 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerabili… |
Progress Software |
LoadMaster |
2026-04-20T13:36:49.475Z | 2026-04-22T03:55:54.495Z |
| CVE-2026-3519 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerabili… |
Progress Software |
LoadMaster |
2026-04-20T13:32:50.259Z | 2026-04-22T03:55:53.355Z |
| CVE-2026-6649 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Qibo CMS headers server-side request forgery |
Qibo |
CMS |
2026-04-20T13:30:41.191Z | 2026-04-20T14:14:18.603Z |
| CVE-2026-3518 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerabili… |
Progress Software |
LoadMaster |
2026-04-20T13:29:33.794Z | 2026-04-22T03:55:52.242Z |
| CVE-2026-33557 |
N/A
|
Apache Kafka: Missing JWT token validation in OAUTHBEA… |
Apache Software Foundation |
Apache Kafka |
2026-04-20T13:28:43.669Z | 2026-04-20T14:30:30.936Z |
| CVE-2025-66335 |
N/A
|
Apache Doris MCP Server: MCP SQL inject |
Apache Software Foundation |
Apache Doris MCP Server |
2026-04-20T13:27:27.764Z | 2026-04-20T14:17:11.395Z |
| CVE-2026-3517 |
8.4 (3.1)
|
OS Command Injection Remote Code Execution Vulnerabili… |
Progress Software |
LoadMaster |
2026-04-20T13:22:54.867Z | 2026-04-22T03:55:51.123Z |
| CVE-2026-33558 |
N/A
|
Apache Kafka, Apache Kafka Clients: Information Exposu… |
Apache Software Foundation |
Apache Kafka |
2026-04-20T13:20:38.059Z | 2026-04-20T14:20:41.640Z |
| CVE-2026-6648 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
Qibo CMS Internal Message cross site scripting |
Qibo |
CMS |
2026-04-20T13:00:44.627Z | 2026-04-20T14:51:00.368Z |
| CVE-2026-6636 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
p2r3 convert API buildCache.js Bun.serve path traversal |
p2r3 |
convert |
2026-04-20T12:00:17.473Z | 2026-04-20T14:58:24.131Z |
| CVE-2026-5958 |
2.1 (4.0)
|
Race Condition in GNU Sed |
GNU |
Sed |
2026-04-20T11:59:32.214Z | 2026-04-20T13:25:59.530Z |
| CVE-2026-6635 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
rowboatlabs rowboat tools_webhook app.py tool_call imp… |
rowboatlabs |
rowboat |
2026-04-20T11:45:12.769Z | 2026-04-20T13:26:31.802Z |
| CVE-2026-6634 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
usememos UpdateInstanceSetting App.tsx memos_access_to… |
usememos |
memos |
2026-04-20T11:30:13.847Z | 2026-04-20T15:02:48.499Z |
| CVE-2026-6633 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
Yifang CMS Extended Management L_rbac_admin.php store … |
Yifang |
CMS |
2026-04-20T11:15:11.127Z | 2026-04-20T13:01:44.244Z |
| CVE-2026-6632 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F451 httpd SafeClientFilter fromSafeClientFilter… |
Tenda |
F451 |
2026-04-20T11:00:19.795Z | 2026-04-20T15:05:42.179Z |
| CVE-2026-6631 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F451 httpd webExcptypemanFilter fromwebExcptypem… |
Tenda |
F451 |
2026-04-20T10:45:12.978Z | 2026-04-20T15:07:58.242Z |
| CVE-2026-6630 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F451 httpd GstDhcpSetSer fromGstDhcpSetSer buffe… |
Tenda |
F451 |
2026-04-20T10:30:15.493Z | 2026-04-20T13:27:03.711Z |
| CVE-2026-6629 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.exec… |
Metasoft 美特软件 |
MetaCRM |
2026-04-20T10:15:19.931Z | 2026-04-20T15:21:18.092Z |
| CVE-2026-6654 |
5.1 (3.1)
|
Use-After-Free and Double-Free in IntoIter::drop when … |
Mozilla |
thin-vec |
2026-04-20T10:05:52.339Z | 2026-04-20T13:14:37.846Z |
| CVE-2026-6628 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
phili67 Ecclesia CRM Query Viewer view ValidateInput s… |
phili67 |
Ecclesia CRM |
2026-04-20T10:00:16.739Z | 2026-04-20T10:54:35.730Z |
| CVE-2026-6626 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Cockpit-HQ Cockpit Asset Handler/Aggregate data query … |
Cockpit-HQ |
Cockpit |
2026-04-20T09:45:12.067Z | 2026-04-20T15:23:47.915Z |
| CVE-2026-31430 |
N/A
|
X.509: Fix out-of-bounds access when parsing extensions |
Linux |
Linux |
2026-04-20T09:43:03.919Z | 2026-04-20T09:43:03.919Z |
| CVE-2026-31429 |
N/A
|
net: skb: fix cross-cache free of KFENCE-allocated skb head |
Linux |
Linux |
2026-04-20T09:43:03.194Z | 2026-04-20T09:43:03.194Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-23758 |
5.1 (4.0)
6.4 (4.0)
|
GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter |
GFI Software |
HelpDesk |
2026-04-20T17:30:06.853Z | 2026-04-20T17:45:55.788Z |
| CVE-2026-23757 |
5.1 (4.0)
5.4 (3.1)
|
GFI HelpDesk < 4.99.10 Stored XSS via Reports Module |
GFI Software |
HelpDesk |
2026-04-20T17:27:56.067Z | 2026-04-20T18:07:01.630Z |
| CVE-2026-23756 |
5.1 (4.0)
5.4 (3.1)
|
GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter St… |
GFI Software |
HelpDesk |
2026-04-20T17:30:51.162Z | 2026-04-20T18:08:49.925Z |
| CVE-2026-23753 |
4.8 (4.0)
4.8 (3.1)
|
GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter |
GFI Software |
HelpDesk |
2026-04-20T17:33:59.134Z | 2026-04-21T13:31:13.580Z |
| CVE-2026-23752 |
4.8 (4.0)
4.8 (3.1)
|
GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter |
GFI Software |
HelpDesk |
2026-04-20T17:33:23.424Z | 2026-04-20T18:09:59.603Z |
| CVE-2026-6662 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
ericc-ch copilot-api Token Endpoint server.ts cors cro… |
ericc-ch |
copilot-api |
2026-04-20T17:00:17.800Z | 2026-04-20T18:09:27.691Z |
| CVE-2026-41445 |
8.7 (4.0)
8.8 (3.1)
|
KissFFT Integer Overflow Heap Buffer Overflow via kiss… |
mborgerding |
kissfft |
2026-04-20T16:18:50.371Z | 2026-04-20T17:57:10.156Z |
| CVE-2026-40488 |
8.7 (4.0)
|
OpenMage LTS has Customer File Upload Extension Blockl… |
OpenMage |
magento-lts |
2026-04-20T16:23:07.429Z | 2026-04-20T16:55:05.724Z |
| CVE-2026-40098 |
5.3 (4.0)
|
OpenMage LTS imports cross-user wishlist item via shar… |
OpenMage |
magento-lts |
2026-04-20T16:19:55.157Z | 2026-04-20T18:10:44.490Z |
| CVE-2026-35154 |
6.3 (3.1)
|
Dell PowerProtect Data Domain appliances, version… |
Dell |
PowerProtect Data Domain appliances |
2026-04-20T16:50:56.856Z | 2026-04-22T03:56:08.697Z |
| CVE-2026-30269 |
9.9 (3.1)
|
Improper access control in Doorman v0.1.0 and v1.… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:23:39.346Z |
| CVE-2026-30266 |
7.8 (3.1)
|
Insecure Permissions vulnerability in DeepCool De… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-23T13:40:34.695Z |
| CVE-2026-28684 |
6.6 (3.1)
|
python-dotenv: Symlink following in set_key allows arb… |
theskumar |
python-dotenv |
2026-04-20T16:25:12.302Z | 2026-04-20T17:43:09.477Z |
| CVE-2026-26951 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:44:49.612Z | 2026-04-22T03:56:07.580Z |
| CVE-2026-26943 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:28:53.110Z | 2026-04-22T03:56:04.147Z |
| CVE-2026-26942 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 8.5 throu… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:34:43.219Z | 2026-04-22T03:56:05.261Z |
| CVE-2026-25525 |
4.9 (3.1)
|
OpenMage LTS has Path Traversal Filter Bypass in Dataf… |
OpenMage |
magento-lts |
2026-04-20T16:14:14.366Z | 2026-04-21T13:27:55.707Z |
| CVE-2026-25524 |
8.1 (3.1)
|
OpenMage LTS's Phar Deserialization leads to Remote Co… |
OpenMage |
magento-lts |
2026-04-20T16:11:16.922Z | 2026-04-20T16:54:43.603Z |
| CVE-2026-24506 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:22:37.689Z | 2026-04-22T03:56:02.944Z |
| CVE-2026-24505 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 8.5 throu… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:15:46.863Z | 2026-04-22T03:56:00.561Z |
| CVE-2026-24504 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:08:35.314Z | 2026-04-22T03:55:59.007Z |
| CVE-2026-22761 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 8.5 throu… |
Dell |
PowerProtect Data Domain |
2026-04-20T16:39:40.268Z | 2026-04-22T03:56:06.445Z |
| CVE-2025-66954 |
6.5 (3.1)
|
A vulnerability exists in the Buffalo Link Statio… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T16:54:28.824Z |
| CVE-2026-6652 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
Pagekit CMS StringStorage Template PhpEngine.php evalu… |
Pagekit |
CMS |
2026-04-20T15:00:22.525Z | 2026-04-20T16:14:56.950Z |
| CVE-2026-6651 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
erponline.xyz ERP Online Inventory Edit Item cross sit… |
erponline.xyz |
ERP Online |
2026-04-20T14:45:11.560Z | 2026-04-20T15:21:57.084Z |
| CVE-2026-6650 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
Z-BlogPHP ZBA File app_upload.php UnPack unrestricted upload |
n/a |
Z-BlogPHP |
2026-04-20T14:30:13.825Z | 2026-04-20T16:23:25.105Z |
| CVE-2026-6066 |
7.1 (3.1)
|
Unencrypted Client‑Server Communication in ConnectWise… |
ConnectWise |
Automate |
2026-04-20T15:26:31.843Z | 2026-04-20T16:13:06.767Z |
| CVE-2026-41245 |
5.9 (3.1)
|
Junrar: Path Traversal (Zip-Slip) via Sibling Director… |
junrar |
junrar |
2026-04-20T15:15:24.540Z | 2026-04-20T16:35:09.317Z |
| CVE-2026-40896 |
6.5 (3.1)
|
OpenProject has Cross-Project Meeting Agenda Item Inje… |
opf |
openproject |
2026-04-20T15:12:52.279Z | 2026-04-20T16:13:10.714Z |
| CVE-2026-3219 |
4.6 (4.0)
|
pip doesn't reject concatenated ZIP and tar archives |
Python Packaging Authority |
pip |
2026-04-20T14:55:38.282Z | 2026-04-20T20:15:23.710Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vw3h-q6xq-jjm5 |
8.7 (4.0)
|
OpenClaw: Voice-call realtime WebSocket accepted oversized frames | 2026-04-17T21:48:36Z | 2026-04-17T21:48:36Z |
| ghsa-g2hm-779g-vm32 |
6.0 (4.0)
|
OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events | 2026-04-17T21:48:25Z | 2026-04-17T21:48:25Z |
| ghsa-c4qm-58hj-j6pj |
6.0 (4.0)
|
OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation | 2026-04-17T21:47:36Z | 2026-04-17T21:47:36Z |
| ghsa-8372-7vhw-cm6q |
7.1 (4.0)
|
OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases | 2026-04-17T21:47:15Z | 2026-04-17T21:47:15Z |
| ghsa-jwrq-8g5x-5fhm |
5.3 (4.0)
|
OpenClaw: Collect-mode queue batches could reuse the last sender authorization context | 2026-04-17T21:35:35Z | 2026-04-17T21:35:35Z |
| ghsa-5fw2-mwhh-9947 |
8.2 (4.0)
|
Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse v… | 2026-04-17T21:35:14Z | 2026-04-17T21:35:14Z |
| ghsa-w47f-j8rh-wx87 |
8.7 (4.0)
|
Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwo… | 2026-04-17T21:34:30Z | 2026-04-17T21:34:30Z |
| ghsa-3prp-9gf7-4rxx |
7.6 (4.0)
|
Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) | 2026-04-17T21:34:16Z | 2026-04-17T21:34:16Z |
| ghsa-4c3q-x735-j3r5 |
8.4 (3.1)
|
Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing | 2026-04-17T21:32:59Z | 2026-04-17T21:32:59Z |
| ghsa-4pc8-6qgf-fgv2 |
7.8 (3.1)
8.5 (4.0)
|
radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj comman… | 2026-04-17T21:31:48Z | 2026-04-17T21:31:48Z |
| ghsa-wh3w-c78x-9663 |
8.8 (3.1)
|
Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The devi… | 2026-04-17T21:31:47Z | 2026-04-17T21:31:47Z |
| ghsa-w67w-38wc-vr97 |
7.5 (3.1)
|
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings … | 2026-04-17T21:31:47Z | 2026-04-17T21:31:47Z |
| ghsa-vh49-38wc-6wqp |
5.3 (3.1)
|
Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo wi… | 2026-04-17T21:31:47Z | 2026-04-17T21:31:47Z |
| ghsa-qg37-cwrh-945r |
8.1 (3.1)
|
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP pack… | 2026-04-17T21:31:47Z | 2026-04-17T21:31:47Z |
| ghsa-pxw3-r2m4-c5m3 |
6.5 (3.1)
|
Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to snif… | 2026-04-17T21:31:47Z | 2026-04-17T21:31:47Z |
| ghsa-9q53-p4m8-gm9v |
5.3 (3.1)
|
Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved wi… | 2026-04-17T21:31:47Z | 2026-04-17T21:31:47Z |
| ghsa-98hc-x583-4p47 |
9.8 (3.1)
|
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted arc… | 2026-04-17T21:31:47Z | 2026-04-17T21:31:47Z |
| ghsa-5j27-2fpm-q949 |
8.8 (3.1)
|
Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that e… | 2026-04-17T21:31:47Z | 2026-04-17T21:31:47Z |
| ghsa-q6pr-mghj-3fjx |
7.5 (3.1)
|
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable e… | 2026-04-17T21:31:46Z | 2026-04-17T21:31:46Z |
| ghsa-p7jp-59qp-fjf3 |
5.3 (3.1)
|
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration… | 2026-04-17T21:31:46Z | 2026-04-17T21:31:46Z |
| ghsa-jgq2-vq69-gr6h |
9.1 (3.1)
9.1 (4.0)
|
OpenViking prior to commit c7bb167 contains an authentication bypass vulnerability in the VikingBot… | 2026-04-17T21:31:46Z | 2026-04-21T15:32:18Z |
| ghsa-fwx6-6883-xr45 |
4.9 (3.1)
|
Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to ove… | 2026-04-17T21:31:46Z | 2026-04-17T21:31:46Z |
| ghsa-6625-m396-m7cp |
7.7 (3.1)
|
Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material… | 2026-04-17T21:31:46Z | 2026-04-17T21:31:46Z |
| ghsa-x3cv-r3g3-fpg9 |
2.3 (4.0)
|
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures | 2026-04-17T21:30:50Z | 2026-04-17T21:30:50Z |
| ghsa-ggmg-cqg6-j45g |
9.1 (3.1)
|
Sentry: Improper authentication on SAML SSO process allows user identity linking | 2026-04-17T21:25:37Z | 2026-04-17T21:25:37Z |
| ghsa-w5j3-8fcr-h87w |
9.4 (4.0)
|
Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration | 2026-04-17T21:24:48Z | 2026-04-17T21:24:48Z |
| ghsa-92jp-89mq-4374 |
6.9 (4.0)
|
OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials | 2026-04-17T20:08:01Z | 2026-04-17T20:08:01Z |
| ghsa-xj7v-jqv6-v48w |
8.1 (3.1)
|
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arb… | 2026-04-17T18:31:54Z | 2026-04-17T18:31:54Z |
| ghsa-j54c-rr2x-ff86 |
7.5 (3.1)
|
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Pat… | 2026-04-17T18:31:53Z | 2026-04-17T18:31:53Z |
| ghsa-785m-9q28-jp3m |
8.3 (3.1)
7.8 (4.0)
|
OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_f… | 2026-04-17T18:31:53Z | 2026-04-17T18:31:53Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-626 |
|
TensorFlow is an open source platform for machine learning. In affected versions the proc… | tensorflow-cpu | 2021-11-05T21:15:00Z | 2021-12-09T06:35:09.978431Z |
| pysec-2021-624 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow-cpu | 2021-11-05T21:15:00Z | 2021-12-09T06:35:09.664583Z |
| pysec-2021-623 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow-cpu | 2021-11-05T21:15:00Z | 2021-12-09T06:35:09.506027Z |
| pysec-2021-621 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow-cpu | 2021-11-05T21:15:00Z | 2021-12-09T06:35:09.206142Z |
| pysec-2021-620 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow-cpu | 2021-11-05T21:15:00Z | 2021-12-09T06:35:09.057312Z |
| pysec-2021-615 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow-cpu | 2021-11-05T21:15:00Z | 2021-12-09T06:35:08.369063Z |
| pysec-2021-614 |
|
TensorFlow is an open source platform for machine learning. In affected versions during T… | tensorflow-cpu | 2021-11-05T21:15:00Z | 2021-12-09T06:35:08.218423Z |
| pysec-2021-613 |
|
TensorFlow is an open source platform for machine learning. In affected versions an attac… | tensorflow-cpu | 2021-11-05T21:15:00Z | 2021-12-09T06:35:08.067216Z |
| pysec-2021-418 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:46.070716Z |
| pysec-2021-416 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:45.767410Z |
| pysec-2021-415 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:45.621437Z |
| pysec-2021-411 |
|
TensorFlow is an open source platform for machine learning. In affected versions the code… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:45.099185Z |
| pysec-2021-409 |
|
TensorFlow is an open source platform for machine learning. In affected versions the proc… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:44.799831Z |
| pysec-2021-407 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:44.476075Z |
| pysec-2021-406 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:44.328170Z |
| pysec-2021-404 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:43.991676Z |
| pysec-2021-403 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:43.843277Z |
| pysec-2021-398 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:43.104468Z |
| pysec-2021-397 |
|
TensorFlow is an open source platform for machine learning. In affected versions during T… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:42.949977Z |
| pysec-2021-396 |
|
TensorFlow is an open source platform for machine learning. In affected versions an attac… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:42.793363Z |
| pysec-2021-846 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow-gpu | 2021-11-05T20:15:00Z | 2021-12-13T06:20:52.754328Z |
| pysec-2021-844 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow-cpu | 2021-11-05T20:15:00Z | 2021-12-13T06:20:24.247166Z |
| pysec-2021-842 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T20:15:00Z | 2021-12-13T06:21:24.676324Z |
| pysec-2021-817 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow-gpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:42.682170Z |
| pysec-2021-809 |
|
TensorFlow is an open source platform for machine learning. In affeced versions during ex… | tensorflow-gpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:41.402625Z |
| pysec-2021-808 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.s… | tensorflow-gpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:41.245758Z |
| pysec-2021-807 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.i… | tensorflow-gpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:41.080668Z |
| pysec-2021-806 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.t… | tensorflow-gpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:40.903537Z |
| pysec-2021-805 |
|
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… | tensorflow-gpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:40.728775Z |
| pysec-2021-804 |
|
TensorFlow is an open source platform for machine learning. In affected versions the Kera… | tensorflow-gpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:40.561915Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1748 | Malicious code in initial-path21 (npm) | 2026-03-18T12:54:42Z | 2026-03-23T05:16:28Z |
| mal-2026-1747 | Malicious code in iconicwp-website (npm) | 2026-03-18T12:54:26Z | 2026-03-23T05:16:27Z |
| mal-2026-1746 | Malicious code in hydra-node-consent-sdk (npm) | 2026-03-18T12:54:22Z | 2026-03-23T05:16:27Z |
| mal-2026-1745 | Malicious code in hydra-consent-sdk (npm) | 2026-03-18T12:54:21Z | 2026-03-23T05:16:27Z |
| mal-2026-1744 | Malicious code in house-click (npm) | 2026-03-18T12:54:07Z | 2026-03-23T05:16:27Z |
| mal-2026-1743 | Malicious code in haodesk-ui (npm) | 2026-03-18T12:53:39Z | 2026-03-23T05:16:27Z |
| mal-2026-1742 | Malicious code in google-audit-tool (npm) | 2026-03-18T12:53:06Z | 2026-03-23T05:16:27Z |
| mal-2026-1741 | Malicious code in frontastic (npm) | 2026-03-18T12:52:10Z | 2026-03-23T05:16:27Z |
| mal-2026-1740 | Malicious code in fixerpabo_jkbts (npm) | 2026-03-18T12:51:38Z | 2026-03-23T05:16:27Z |
| mal-2026-1739 | Malicious code in fhgfhgfhfghhffhfgh (npm) | 2026-03-18T12:51:21Z | 2026-03-23T05:16:27Z |
| mal-2026-1738 | Malicious code in fe-prop-types (npm) | 2026-03-18T12:51:12Z | 2026-03-23T05:16:27Z |
| mal-2026-1737 | Malicious code in fe-lib-theme (npm) | 2026-03-18T12:51:11Z | 2026-03-23T05:16:27Z |
| mal-2026-1736 | Malicious code in fe-lib-singleton (npm) | 2026-03-18T12:51:11Z | 2026-03-23T05:16:27Z |
| mal-2026-1735 | Malicious code in fe-lib-sequences (npm) | 2026-03-18T12:51:10Z | 2026-03-23T05:16:27Z |
| mal-2026-1734 | Malicious code in fdir3 (npm) | 2026-03-18T12:51:08Z | 2026-03-23T05:16:27Z |
| mal-2026-1733 | Malicious code in express-security-suite-2024 (npm) | 2026-03-18T12:50:50Z | 2026-03-23T05:16:27Z |
| mal-2026-1732 | Malicious code in express-ranges (npm) | 2026-03-18T12:50:42Z | 2026-03-23T05:16:27Z |
| mal-2026-1731 | Malicious code in express-http-validator (npm) | 2026-03-18T12:50:41Z | 2026-03-23T05:16:27Z |
| mal-2026-1730 | Malicious code in express-configers (npm) | 2026-03-18T12:50:37Z | 2026-03-23T05:16:27Z |
| mal-2026-1729 | Malicious code in eslint-plugin-superhuman-custom-rules (npm) | 2026-03-18T12:49:38Z | 2026-03-23T05:16:27Z |
| mal-2026-1728 | Malicious code in escaux (npm) | 2026-03-18T12:49:21Z | 2026-03-23T05:16:27Z |
| mal-2026-1727 | Malicious code in es1int-configer (npm) | 2026-03-18T12:49:09Z | 2026-03-23T05:16:27Z |
| mal-2026-1726 | Malicious code in ersagent-frontend (npm) | 2026-03-18T12:49:08Z | 2026-03-23T05:16:27Z |
| mal-2026-1725 | Malicious code in env-workflow-test (npm) | 2026-03-18T12:48:56Z | 2026-03-23T05:16:27Z |
| mal-2026-1724 | Malicious code in engineers (npm) | 2026-03-18T12:48:54Z | 2026-03-23T05:16:27Z |
| mal-2026-1723 | Malicious code in elf-stats-velvet-ledger-928 (npm) | 2026-03-18T12:48:42Z | 2026-03-23T05:16:27Z |
| mal-2026-1722 | Malicious code in ehance-assistant33 (npm) | 2026-03-18T12:48:24Z | 2026-03-23T05:16:27Z |
| mal-2026-1721 | Malicious code in ehance-assistant (npm) | 2026-03-18T12:48:24Z | 2026-03-23T05:16:27Z |
| mal-2026-1720 | Malicious code in dubbo-web-example (npm) | 2026-03-18T12:48:05Z | 2026-03-23T05:16:26Z |
| mal-2026-1719 | Malicious code in dstny (npm) | 2026-03-18T12:47:57Z | 2026-03-23T05:16:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2056 | Mattermost Desktop: Schwachstellen ermöglichten Denial of Service | 2025-09-15T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2055 | Flowise: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-15T22:00:00.000+00:00 | 2025-09-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2054 | MongoDB: Schwachstelle ermöglicht Codeausführung | 2025-09-15T22:00:00.000+00:00 | 2025-09-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2053 | Linux Kernel: Mehrere Schwachstellen | 2025-09-15T22:00:00.000+00:00 | 2026-03-26T23:00:00.000+00:00 |
| wid-sec-w-2025-2052 | Liferay Portal: Schwachstelle ermöglicht Cross-Site Scripting | 2025-09-14T22:00:00.000+00:00 | 2025-09-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2051 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-14T22:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2050 | Liferay Portal und DXP: Mehrere Schwachstellen | 2025-09-14T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2049 | gdk-pixbuf: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-14T22:00:00.000+00:00 | 2025-09-28T22:00:00.000+00:00 |
| wid-sec-w-2025-2048 | Flowise: Mehrere Schwachstellen | 2025-09-14T22:00:00.000+00:00 | 2025-09-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2047 | Palo Alto Networks User-ID Agent: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2025-09-14T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2046 | cPanel cPanel/WHM: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-14T22:00:00.000+00:00 | 2025-09-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2045 | expat: Schwachstelle ermöglicht Denial of Service | 2025-09-14T22:00:00.000+00:00 | 2026-03-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2044 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Codeausführung | 2025-09-14T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2043 | IBM QRadar SIEM: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2042 | Zabbix: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2041 | Liferay Portal: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2040 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-11T22:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2039 | CUPS: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2026-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2038 | Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting | 2025-09-10T22:00:00.000+00:00 | 2025-09-10T22:00:00.000+00:00 |
| wid-sec-w-2025-2037 | NetApp StorageGRID: Mehrere Schwachstellen | 2025-09-10T22:00:00.000+00:00 | 2025-09-21T22:00:00.000+00:00 |
| wid-sec-w-2025-2036 | IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-10T22:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2035 | Palo Alto Networks Cortex XDR: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-10T22:00:00.000+00:00 | 2025-09-11T22:00:00.000+00:00 |
| wid-sec-w-2025-2034 | Erlang/OTP: Mehrere Schwachstellen | 2025-09-10T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2033 | Zoom Video Communications Workplace: Schwachstelle ermöglicht Denial of Service | 2025-09-10T22:00:00.000+00:00 | 2025-09-10T22:00:00.000+00:00 |
| wid-sec-w-2025-2032 | Cisco IOS XR: Mehrere Schwachstellen | 2025-09-10T22:00:00.000+00:00 | 2025-09-10T22:00:00.000+00:00 |
| wid-sec-w-2025-2031 | Shibboleth Service Provider: Schwachstelle ermöglicht SQL Injection | 2025-09-10T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2030 | Liferay Portal und DXPL: Mehrere Schwachstellen | 2025-09-10T22:00:00.000+00:00 | 2025-09-10T22:00:00.000+00:00 |
| wid-sec-w-2025-2029 | Angular: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-10T22:00:00.000+00:00 | 2025-09-10T22:00:00.000+00:00 |
| wid-sec-w-2025-2028 | Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Codeausführung | 2025-09-10T22:00:00.000+00:00 | 2025-12-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2026 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2025-09-10T22:00:00.000+00:00 | 2025-10-21T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-222-12 | Siemens RUGGEDCOM ROS | 2023-08-08T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-23-222-11 | Siemens Solid Edge SE2023 | 2023-08-08T00:00:00.000000Z | 2023-08-08T00:00:00.000000Z |
| icsa-23-222-10 | Siemens SICAM TOOLBOX II | 2023-08-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-222-09 | Siemens SIMATIC | 2023-08-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-222-08 | Siemens RUGGEDCOM ROS Devices | 2023-08-08T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-23-222-07 | Siemens SIMATIC | 2023-08-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-222-06 | Siemens Parasolid and Teamcenter Visualization | 2023-08-08T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-23-222-05 | Siemens RUGGEDCOM CROSSBOW | 2023-08-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-222-04 | ​Siemens Software Center | 2023-08-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-222-03 | ​Siemens JT Open, JT Utilities, and Parasolid | 2023-08-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-222-02 | Siemens Parasolid Installer | 2023-08-08T00:00:00.000000Z | 2023-08-08T00:00:00.000000Z |
| icsa-23-222-01 | Siemens Solid Edge, JT2Go, and Teamcenter Visualization | 2023-08-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-215-04 | Sensormatic Electronics VideoEdge | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-03 | TEL-STER TelWin SCADA WebInterface | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-02 | Mitsubishi Electric GT and GOT Series Products | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-01 | Mitsubishi Electric GOT2000 and GOT SIMPLE | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-213-01 | APSystems Altenergy Power Control | 2023-08-01T06:00:00.000000Z | 2023-08-01T06:00:00.000000Z |
| icsa-23-208-03 | Mitsubishi Electric CNC Series (Update E) | 2023-07-27T06:00:00.000000Z | 2024-01-30T07:00:00.000000Z |
| icsa-23-208-02 | PTC KEPServerEX | 2023-07-27T00:00:00.000000Z | 2023-07-27T00:00:00.000000Z |
| icsa-23-208-01 | ETIC Telecom RAS Authentication | 2023-07-27T00:00:00.000000Z | 2023-07-27T00:00:00.000000Z |
| icsa-23-206-04 | Johnson Controls IQ Wifi 6 | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-03 | Emerson ROC800 Series RTU and DL8000 Preset Controller | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-02 | Rockwell Automation ThinManager ThinServer | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-01 | AXIS A1001 | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-229-04 | Walchem Intuition 9 | 2023-07-21T06:00:00.000000Z | 2023-07-21T06:00:00.000000Z |
| icsa-23-201-01 | Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers | 2023-07-20T06:00:00.000000Z | 2023-07-20T06:00:00.000000Z |
| icsa-23-199-07 | WellinTech KingHistorian | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-06 | GE Digital CIMPLICITY | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-05 | GeoVision GV-ADR2701 | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-04 | Weintek Weincloud | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-fmc-infodisc-rjdktm6f | Cisco Firepower Management Center Information Disclosure Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-dnac-xss-hfv73cs3 | Cisco DNA Center Cross-Site Scripting Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-cucm-logging-6qswkryz | Cisco Unified Communications Products Information Disclosure Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-cmxpe-75asy9k | Cisco Connected Mobile Experiences Privilege Escalation Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-cmxapi-kskwcmfp | Cisco Connected Mobile Experiences User Enumeration Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-anyconnect-fileread-pbhbghmj | Cisco AnyConnect Secure Mobility Client Arbitrary File Read Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-02-23T21:11:48+00:00 |
| cisco-sa-anyconnect-dll-injec-pqnryxlf | Cisco AnyConnect Secure Mobility Client for Windows DLL Injection Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-14T15:20:06+00:00 |
| cisco-sa-jabber-zktzjpgo | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities | 2020-12-10T16:00:00+00:00 | 2020-12-10T16:00:00+00:00 |
| cisco-sa-wsa-prv-esc-npzwzrqj | Cisco Secure Web Appliance Privilege Escalation Vulnerability | 2020-11-18T16:00:00+00:00 | 2021-01-21T14:53:26+00:00 |
| cisco-sa-webex-meetings-xss-mx56prer | Cisco Webex Meetings API Cross-Site Scripting Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-webex-infodisc-4tvqzn4 | Cisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-23T21:59:11+00:00 |
| cisco-sa-webex-info-leak-phpzb3sg | Cisco Webex Meetings and Cisco Webex Meetings Server Unauthorized Audio Information Exposure Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-23T21:59:36+00:00 |
| cisco-sa-webex-auth-token-3vg57a5r | Cisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-12-10T16:10:07+00:00 |
| cisco-sa-ucs-api-rce-uxwpedhd | Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-tp-uathracc-jwnesufm | Cisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-xss-nzopcgec | Cisco IoT Field Network Director Cross-Site Scripting Vulnerabilities | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-upwd-dcrpuq78 | Cisco IoT Field Network Director Improper Domain Access Control Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-ssi-v2mywx9y | Cisco IoT Field Network Director Information Disclosure Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-sql-zekbnl2h | Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-pwh-yca6m7p | Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-ovw-shzoe3pd | Cisco IoT Field Network Director File Overwrite Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-lv-he4rntet | Cisco IoT Field Network Director Improper Access Control Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-bck-ghkpnz5f | Cisco IoT Field Network Director Unauthenticated REST API Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-auth-veypbmmr | Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-fnd-apia-xzntfs2v | Cisco IoT Field Network Director Missing API Authentication Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-expressway-8j3yz7hv | Cisco Expressway Software TURN Server Configuration Issue | 2020-11-18T16:00:00+00:00 | 2021-01-20T20:41:10+00:00 |
| cisco-sa-dna-cmd-injection-rrayzowc | Cisco DNA Spaces Connector Command Injection Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-csm-rce-8gjuz9fw | Cisco Security Manager Static Credential Vulnerability | 2020-11-16T23:00:00+00:00 | 2020-11-16T23:00:00+00:00 |
| cisco-sa-csm-path-trav-ngernqgr | Cisco Security Manager Path Traversal Vulnerability | 2020-11-16T23:00:00+00:00 | 2020-11-20T17:49:26+00:00 |
| cisco-sa-csm-java-rce-mwjeedcd | Cisco Security Manager Java Deserialization Vulnerabilities | 2020-11-16T23:00:00+00:00 | 2021-02-08T22:00:53+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-65037 | Azure Container Apps Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64680 | Windows DWM Core Library Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-23T00:00:00.000Z |
| msrc_cve-2025-64679 | Windows DWM Core Library Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2026-01-14T00:00:00.000Z |
| msrc_cve-2025-64678 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2026-01-14T00:00:00.000Z |
| msrc_cve-2025-64677 | Office Out-of-Box Experience Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64676 | Microsoft Purview eDiscovery Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64675 | Azure Cosmos DB Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64673 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64672 | Microsoft SharePoint Server Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64671 | GitHub Copilot for Jetbrains Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64670 | Windows DirectX Information Disclosure Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64669 | Windows Admin Center Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2026-04-16T07:00:00.000Z |
| msrc_cve-2025-64667 | Microsoft Exchange Server Spoofing Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64666 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64663 | Custom Question Answering Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-64661 | Windows Shell Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-64658 | Windows File Explorer Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62573 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62572 | Application Information Service Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62571 | Windows Installer Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62570 | Windows Camera Frame Server Monitor Information Disclosure Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62569 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62567 | Windows Hyper-V Denial of Service Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62565 | Windows File Explorer Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62564 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62563 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-62562 | Microsoft Outlook Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62561 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62560 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| msrc_cve-2025-62559 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-17T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15386-1 | MozillaFirefox-141.0-1.1 on GA media | 2025-07-26T00:00:00Z | 2025-07-26T00:00:00Z |
| opensuse-su-2025:15385-1 | perl-Authen-SASL-2.180.0-2.1 on GA media | 2025-07-25T00:00:00Z | 2025-07-25T00:00:00Z |
| opensuse-su-2025:15384-1 | apache2-2.4.65-1.1 on GA media | 2025-07-25T00:00:00Z | 2025-07-25T00:00:00Z |
| opensuse-su-2025:15383-1 | MozillaThunderbird-140.1.0-1.1 on GA media | 2025-07-25T00:00:00Z | 2025-07-25T00:00:00Z |
| opensuse-su-2025:15382-1 | ruby3.4-rubygem-thor-1.4.0-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15381-1 | python311-starlette-0.47.2-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15380-1 | jupyter-nbdime-7.0.2-21.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15379-1 | minio-client-20250721T052808Z-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15378-1 | javamail-1.6.2-3.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15377-1 | grype-db-0.35.0-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15376-1 | cloud-init-25.1.3-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15375-1 | chromedriver-138.0.7204.168-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15374-1 | viewvc-1.3.0~dev20250722-1.1 on GA media | 2025-07-23T00:00:00Z | 2025-07-23T00:00:00Z |
| opensuse-su-2025:15373-1 | jupyter-jupyterlab-templates-0.5.2-3.1 on GA media | 2025-07-23T00:00:00Z | 2025-07-23T00:00:00Z |
| opensuse-su-2025:15372-1 | grafana-11.6.3+security01-1.1 on GA media | 2025-07-23T00:00:00Z | 2025-07-23T00:00:00Z |
| opensuse-su-2025:15371-1 | firefox-esr-140.1.0-1.1 on GA media | 2025-07-23T00:00:00Z | 2025-07-23T00:00:00Z |
| opensuse-su-2025:15370-1 | hauler-1.2.5-1.1 on GA media | 2025-07-21T00:00:00Z | 2025-07-21T00:00:00Z |
| opensuse-su-2025:15369-1 | cyradm-3.8.6-1.1 on GA media | 2025-07-21T00:00:00Z | 2025-07-21T00:00:00Z |
| opensuse-su-2025:15368-1 | lemon-3.50.3-1.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15367-1 | python313-3.13.5-3.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15366-1 | python312-3.12.11-3.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15365-1 | python311-3.11.13-3.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15364-1 | libexslt0-1.1.43-2.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15363-1 | libxml2-2-2.13.8-3.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15362-1 | java-21-openjdk-21.0.8.0-1.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15361-1 | busybox-1.37.0-5.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15360-1 | apache2-2.4.64-1.1 on GA media | 2025-07-20T00:00:00Z | 2025-07-20T00:00:00Z |
| opensuse-su-2025:15359-1 | valkey-8.1.3-1.1 on GA media | 2025-07-18T00:00:00Z | 2025-07-18T00:00:00Z |
| opensuse-su-2025:15358-1 | java-24-openjdk-24.0.2.0-1.1 on GA media | 2025-07-18T00:00:00Z | 2025-07-18T00:00:00Z |
| opensuse-su-2025:15357-1 | java-17-openjdk-17.0.16.0-1.1 on GA media | 2025-07-18T00:00:00Z | 2025-07-18T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1623 | Red Hat Security Advisory: kernel-rt security update | 2026-02-02T01:17:00+00:00 | 2026-04-13T14:36:23+00:00 |
| rhsa-2026:1610 | Red Hat Security Advisory: Red Hat OpenShift Lightspeed 1.0.9 security update | 2026-01-30T18:51:47+00:00 | 2026-03-23T17:12:12+00:00 |
| rhsa-2026:1609 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2026-01-30T15:48:57+00:00 | 2026-04-13T19:37:49+00:00 |
| rhsa-2026:0995 | Red Hat Security Advisory: OpenShift Container Platform 4.14.61 packages and security update | 2026-01-30T15:14:34+00:00 | 2026-04-14T02:03:21+00:00 |
| rhsa-2026:0996 | Red Hat Security Advisory: OpenShift Container Platform 4.14.61 bug fix and security update | 2026-01-30T14:21:04+00:00 | 2026-04-13T20:14:17+00:00 |
| rhsa-2026:0985 | Red Hat Security Advisory: OpenShift Container Platform 4.16.56 bug fix and security update | 2026-01-30T13:58:09+00:00 | 2026-04-13T20:14:17+00:00 |
| rhsa-2026:1004 | Red Hat Security Advisory: OpenShift Container Platform 4.14.61 security and extras update | 2026-01-30T09:50:08+00:00 | 2026-04-10T21:19:06+00:00 |
| rhsa-2026:1600 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2026-01-29T19:41:57+00:00 | 2026-04-08T20:47:32+00:00 |
| rhsa-2026:1599 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update | 2026-01-29T19:16:21+00:00 | 2026-04-13T19:37:49+00:00 |
| rhsa-2026:1597 | Red Hat Security Advisory: iperf3 security update | 2026-01-29T18:54:32+00:00 | 2026-03-18T03:16:51+00:00 |
| rhsa-2026:1596 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update | 2026-01-29T18:40:37+00:00 | 2026-04-14T09:16:34+00:00 |
| rhsa-2026:1595 | Red Hat Security Advisory: iperf3 security update | 2026-01-29T18:34:21+00:00 | 2026-03-18T03:17:12+00:00 |
| rhsa-2026:1594 | Red Hat Security Advisory: openssl security update | 2026-01-29T17:22:14+00:00 | 2026-04-09T23:04:55+00:00 |
| rhsa-2026:1592 | Red Hat Security Advisory: iperf3 security update | 2026-01-29T16:46:50+00:00 | 2026-03-18T03:17:12+00:00 |
| rhsa-2026:1586 | Red Hat Security Advisory: gimp security update | 2026-01-29T16:33:33+00:00 | 2026-03-18T03:17:17+00:00 |
| rhsa-2026:1583 | Red Hat Security Advisory: python3.12 security update | 2026-01-29T16:33:33+00:00 | 2026-04-13T20:01:53+00:00 |
| rhsa-2026:1582 | Red Hat Security Advisory: python3.12 security update | 2026-01-29T14:28:17+00:00 | 2026-04-13T20:00:54+00:00 |
| rhsa-2026:1590 | Red Hat Security Advisory: gimp security update | 2026-01-29T14:17:57+00:00 | 2026-03-18T03:16:43+00:00 |
| rhsa-2026:1588 | Red Hat Security Advisory: gimp:2.8 security update | 2026-01-29T14:17:19+00:00 | 2026-03-18T03:17:06+00:00 |
| rhsa-2026:1589 | Red Hat Security Advisory: gimp:2.8 security update | 2026-01-29T14:15:05+00:00 | 2026-03-18T03:17:06+00:00 |
| rhsa-2026:1584 | Red Hat Security Advisory: gimp:2.8 security update | 2026-01-29T14:14:40+00:00 | 2026-03-18T03:17:04+00:00 |
| rhsa-2026:1591 | Red Hat Security Advisory: gimp:2.8 security update | 2026-01-29T14:14:17+00:00 | 2026-03-18T03:17:09+00:00 |
| rhsa-2026:1587 | Red Hat Security Advisory: gimp security update | 2026-01-29T14:13:02+00:00 | 2026-03-18T03:17:17+00:00 |
| rhsa-2026:1585 | Red Hat Security Advisory: gimp security update | 2026-01-29T13:59:32+00:00 | 2026-03-18T03:17:17+00:00 |
| rhsa-2026:1581 | Red Hat Security Advisory: kernel security update | 2026-01-29T13:44:23+00:00 | 2026-04-13T14:36:44+00:00 |
| rhsa-2026:1574 | Red Hat Security Advisory: gimp:2.8 security update | 2026-01-29T12:03:06+00:00 | 2026-03-18T03:17:18+00:00 |
| rhsa-2026:1569 | Red Hat Security Advisory: spice-client-win security update | 2026-01-29T11:29:52+00:00 | 2026-03-19T14:37:02+00:00 |
| rhsa-2026:1570 | Red Hat Security Advisory: spice-client-win security update | 2026-01-29T11:28:02+00:00 | 2026-03-19T14:37:02+00:00 |
| rhsa-2026:1572 | Red Hat Security Advisory: spice-client-win security update | 2026-01-29T11:23:57+00:00 | 2026-03-19T14:37:02+00:00 |
| rhsa-2026:1571 | Red Hat Security Advisory: spice-client-win security update | 2026-01-29T11:17:55+00:00 | 2026-03-19T14:37:02+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0496-1 | Security update for the Linux Kernel | 2026-02-13T10:52:18Z | 2026-02-13T10:52:18Z |
| suse-su-2026:0495-1 | Security update for the Linux Kernel | 2026-02-13T10:52:00Z | 2026-02-13T10:52:00Z |
| suse-su-2026:20428-1 | Security update for go1.25 | 2026-02-13T10:08:20Z | 2026-02-13T10:08:20Z |
| suse-su-2026:0494-1 | Security update for curl | 2026-02-13T09:59:28Z | 2026-02-13T09:59:28Z |
| suse-su-2026:0491-1 | Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7) | 2026-02-13T06:04:19Z | 2026-02-13T06:04:19Z |
| suse-su-2026:0490-1 | Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7) | 2026-02-13T06:04:16Z | 2026-02-13T06:04:16Z |
| suse-su-2026:0489-1 | Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7) | 2026-02-13T06:04:12Z | 2026-02-13T06:04:12Z |
| suse-su-2026:0487-1 | Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7) | 2026-02-13T06:04:09Z | 2026-02-13T06:04:09Z |
| suse-su-2026:0484-1 | Security update for munge | 2026-02-12T18:22:45Z | 2026-02-12T18:22:45Z |
| suse-su-2026:0483-1 | Security update for zabbix | 2026-02-12T16:34:19Z | 2026-02-12T16:34:19Z |
| suse-su-2026:0482-1 | Security update for libsodium | 2026-02-12T16:04:29Z | 2026-02-12T16:04:29Z |
| suse-su-2026:0481-1 | Security update for openCryptoki | 2026-02-12T16:04:14Z | 2026-02-12T16:04:14Z |
| suse-su-2026:0480-1 | Security update for helm | 2026-02-12T15:35:07Z | 2026-02-12T15:35:07Z |
| suse-su-2026:0479-1 | Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container, virt-synchronization-controller-container | 2026-02-12T15:34:08Z | 2026-02-12T15:34:08Z |
| suse-su-2026:20426-1 | Security update for rust1.93 | 2026-02-12T15:15:49Z | 2026-02-12T15:15:49Z |
| suse-su-2026:20349-1 | Security update for openssl-3 | 2026-02-12T14:47:03Z | 2026-02-12T14:47:03Z |
| suse-su-2026:20347-1 | Security update for curl | 2026-02-12T14:05:28Z | 2026-02-12T14:05:28Z |
| suse-su-2026:20425-1 | Security update for python-aiohttp, python-Brotli | 2026-02-12T13:59:27Z | 2026-02-12T13:59:27Z |
| suse-su-2026:20346-1 | Security update for util-linux | 2026-02-12T13:57:47Z | 2026-02-12T13:57:47Z |
| suse-su-2026:0477-1 | Security update for xrdp | 2026-02-12T11:45:18Z | 2026-02-12T11:45:18Z |
| suse-su-2026:0476-1 | Security update for python-azure-core | 2026-02-12T11:44:24Z | 2026-02-12T11:44:24Z |
| suse-su-2026:0475-1 | Security update for the Linux Kernel | 2026-02-12T11:32:54Z | 2026-02-12T11:32:54Z |
| suse-su-2026:0474-1 | Security update for the Linux Kernel | 2026-02-12T11:28:48Z | 2026-02-12T11:28:48Z |
| suse-su-2026:0473-1 | Security update for the Linux Kernel | 2026-02-12T11:26:33Z | 2026-02-12T11:26:33Z |
| suse-su-2026:0472-1 | Security update for the Linux Kernel | 2026-02-12T11:26:05Z | 2026-02-12T11:26:05Z |
| suse-su-2026:0471-1 | Security update for the Linux Kernel | 2026-02-12T11:25:44Z | 2026-02-12T11:25:44Z |
| suse-su-2026:0470-1 | Security update for rust-keylime | 2026-02-12T11:22:07Z | 2026-02-12T11:22:07Z |
| suse-su-2026:0469-1 | Security update for libsoup | 2026-02-12T11:21:36Z | 2026-02-12T11:21:36Z |
| suse-su-2026:0460-1 | Security update for python-wheel | 2026-02-11T23:30:06Z | 2026-02-11T23:30:06Z |
| suse-su-2026:0459-1 | Security update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda | 2026-02-11T23:29:36Z | 2026-02-11T23:29:36Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:1611 | Important: nodejs:22 security update | 2025-02-17T00:00:00Z | 2025-02-18T12:07:58Z |
| alsa-2025:1582 | Moderate: nodejs:18 security update | 2025-02-17T00:00:00Z | 2025-02-18T12:10:34Z |
| alsa-2025:1517 | Moderate: libxml2 security update | 2025-02-17T00:00:00Z | 2025-02-17T07:27:23Z |
| alsa-2025:1446 | Moderate: nodejs:18 security update | 2025-02-13T00:00:00Z | 2025-02-14T11:49:35Z |
| alsa-2025:1443 | Important: nodejs:20 security update | 2025-02-13T00:00:00Z | 2025-02-14T09:36:53Z |
| alsa-2025:1372 | Important: container-tools:rhel8 security update | 2025-02-13T00:00:00Z | 2025-02-14T07:55:12Z |
| alsa-2025:1351 | Important: nodejs:20 security update | 2025-02-12T00:00:00Z | 2025-02-14T07:51:57Z |
| alsa-2025:1350 | Important: libxml2 security update | 2025-02-12T00:00:00Z | 2025-02-13T11:20:45Z |
| alsa-2025:1346 | Moderate: gcc security update | 2025-02-12T00:00:00Z | 2025-02-14T07:49:42Z |
| alsa-2025:1338 | Moderate: gcc-toolset-14-gcc security update | 2025-02-12T00:00:00Z | 2025-02-18T12:49:22Z |
| alsa-2025:1330 | Important: openssl security update | 2025-02-11T00:00:00Z | 2025-02-12T17:22:37Z |
| alsa-2025:1329 | Moderate: doxygen security update | 2025-02-11T00:00:00Z | 2025-02-12T12:17:42Z |
| alsa-2025:1314 | Moderate: doxygen security update | 2025-02-11T00:00:00Z | 2025-02-13T11:23:34Z |
| alsa-2025:1309 | Moderate: gcc-toolset-13-gcc security update | 2025-02-11T00:00:00Z | 2025-02-13T11:25:36Z |
| alsa-2025:1306 | Moderate: gcc-toolset-13-gcc security update | 2025-02-11T00:00:00Z | 2025-02-12T12:19:57Z |
| alsa-2025:1301 | Moderate: gcc security update | 2025-02-11T00:00:00Z | 2025-02-17T07:24:16Z |
| alsa-2025:1300 | Moderate: gcc-toolset-14-gcc security update | 2025-02-11T00:00:00Z | 2025-02-13T16:34:43Z |
| alsa-2025:1292 | Important: thunderbird security update | 2025-02-11T00:00:00Z | 2025-02-11T22:09:00Z |
| alsa-2025:1283 | Important: firefox security update | 2025-02-11T00:00:00Z | 2025-02-11T22:06:46Z |
| alsa-2025:1266 | Important: kernel security update | 2025-02-11T00:00:00Z | 2025-02-11T11:55:48Z |
| alsa-2025:1262 | Important: kernel security update | 2025-02-11T00:00:00Z | 2025-02-13T16:32:05Z |
| alsa-2025:1230 | Important: kernel-rt security update | 2025-02-10T00:00:00Z | 2025-02-10T16:54:11Z |
| alsa-2025:1215 | Moderate: tbb security update | 2025-02-10T00:00:00Z | 2025-02-11T12:06:07Z |
| alsa-2025:1210 | Moderate: tbb security update | 2025-02-10T00:00:00Z | 2025-02-10T16:55:32Z |
| alsa-2025:1184 | Important: thunderbird security update | 2025-02-10T00:00:00Z | 2025-02-10T15:18:00Z |
| alsa-2025:1068 | Moderate: kernel security update | 2025-02-05T00:00:00Z | 2025-02-08T20:01:29Z |
| alsa-2025:1067 | Moderate: kernel-rt security update | 2025-02-05T00:00:00Z | 2025-02-08T19:59:16Z |
| alsa-2025:1066 | Important: firefox security update | 2025-02-05T00:00:00Z | 2025-02-08T19:53:08Z |
| alsa-2025:0936 | Moderate: mingw-glib2 security update | 2025-02-04T00:00:00Z | 2025-02-06T08:49:20Z |
| alsa-2025:0925 | Moderate: bzip2 security update | 2025-02-04T00:00:00Z | 2025-02-05T09:34:21Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2022-1157 | Stack-buffer-overflow in merge_utf16be_ascii | 2022-11-10T13:00:16.300150Z | 2022-11-10T13:00:16.300418Z |
| osv-2022-1155 | UNKNOWN WRITE in wasmtime_fuzzing::oracles::instantiate_many::h1a28dda90c13f877 | 2022-11-08T13:02:21.272721Z | 2023-02-24T02:06:23.397295Z |
| osv-2022-1154 | UNKNOWN READ in pcpp::SomeIpSdLayer::SomeIpSdLayer | 2022-11-08T13:00:45.917220Z | 2023-06-07T14:06:52.453987Z |
| osv-2022-1153 | Heap-buffer-overflow in parse_via_param | 2022-11-08T13:00:06.384152Z | 2022-11-09T04:08:50.426121Z |
| osv-2022-1151 | Heap-buffer-overflow in mg_mqtt_parse | 2022-11-06T00:02:38.065165Z | 2022-11-06T00:02:38.065390Z |
| osv-2022-1150 | Heap-buffer-overflow in js_free_function_def | 2022-11-06T00:02:37.597350Z | 2022-11-06T00:02:37.597550Z |
| osv-2022-1149 | Heap-buffer-overflow in gbNUMBER_mbc_enc_len | 2022-11-06T00:02:33.238692Z | 2022-11-06T00:02:33.238946Z |
| osv-2022-1148 | Stack-buffer-underflow in gs_type2_interpret | 2022-11-06T00:02:24.119500Z | 2022-11-06T00:02:24.119722Z |
| osv-2022-1145 | Heap-buffer-overflow in gbNUMBER_mbc_enc_len | 2022-11-06T00:01:05.747777Z | 2022-11-06T00:01:05.748011Z |
| osv-2022-1144 | Heap-buffer-overflow in onigenc_mbn_mbc_case_fold | 2022-11-06T00:00:40.796078Z | 2022-11-06T00:00:40.796330Z |
| osv-2022-1143 | UNKNOWN READ in Ins_MSIRP | 2022-11-06T00:00:25.171482Z | 2022-11-06T00:00:25.171703Z |
| osv-2022-1142 | Heap-buffer-overflow in onigenc_unicode_mbc_case_fold | 2022-11-06T00:00:24.469442Z | 2022-11-06T00:00:24.469652Z |
| osv-2022-1141 | Heap-buffer-overflow in LibRaw::phase_one_correct | 2022-11-06T00:00:12.813664Z | 2025-02-08T14:21:03.512078Z |
| osv-2022-1137 | Heap-buffer-overflow in io_memory_read | 2022-11-05T00:00:44.243862Z | 2026-04-13T14:16:27.408482Z |
| osv-2022-1136 | Heap-buffer-overflow in rx_ip | 2022-11-05T00:00:11.545292Z | 2022-11-05T00:00:11.545557Z |
| osv-2022-1134 | Heap-buffer-overflow in ndlz8_decompress | 2022-11-04T00:02:11.463429Z | 2026-04-23T14:10:23.311160Z |
| osv-2022-1133 | Security exception in org.codehaus.janino.Parser.parseAssignmentExpression | 2022-11-04T00:01:16.930555Z | 2022-11-04T00:01:16.930773Z |
| osv-2022-1132 | Heap-buffer-overflow in add_compile_string | 2022-11-04T00:01:02.762454Z | 2022-11-04T00:01:02.762704Z |
| osv-2022-1131 | Heap-use-after-free in gs_font_finalize | 2022-11-04T00:00:42.594752Z | 2022-11-04T00:00:42.595012Z |
| osv-2022-1129 | UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue | 2022-11-03T00:00:05.582301Z | 2023-06-27T14:09:22.733005Z |
| osv-2022-1128 | Heap-buffer-overflow in void rawspeed::DngOpcodes::PixelOpcode::applyOP<unsigned short, rawspeed::DngOpc | 2022-11-02T00:02:45.378194Z | 2022-11-02T00:02:45.378451Z |
| osv-2022-1126 | Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString | 2022-11-02T00:00:25.597410Z | 2022-11-02T00:00:25.597684Z |
| osv-2022-1122 | Heap-buffer-overflow in LibRaw::phase_one_correct | 2022-10-31T00:02:41.800433Z | 2022-10-31T00:02:41.800685Z |
| osv-2022-1121 | Global-buffer-overflow in get_unpack_proc | 2022-10-31T00:01:58.006119Z | 2022-11-04T00:38:08.490845Z |
| osv-2022-1120 | Heap-use-after-free in xmlXIncludeDoProcess | 2022-10-31T00:01:06.205897Z | 2022-10-31T00:01:06.206161Z |
| osv-2022-1119 | Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor | 2022-10-31T00:00:28.775967Z | 2023-01-10T07:03:44.497651Z |
| osv-2022-1114 | Heap-buffer-overflow in g_strchug | 2022-10-29T00:02:16.621855Z | 2022-10-29T00:02:16.622144Z |
| osv-2022-1113 | Heap-buffer-overflow in ForceZero | 2022-10-29T00:02:15.234535Z | 2022-10-29T00:02:15.234747Z |
| osv-2022-1112 | Heap-buffer-overflow in wmem_strbuf_append_vprintf | 2022-10-29T00:02:08.475185Z | 2022-10-29T00:02:08.475437Z |
| osv-2022-1111 | Heap-buffer-overflow in expert_set_info_vformat | 2022-10-29T00:01:00.172919Z | 2022-10-29T00:01:00.173162Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-dotnet-2025-26646 | .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability | 2025-07-11T05:41:32.524Z | 2025-07-11T06:17:37.698Z |
| bit-tomcat-2025-49125 | Apache Tomcat: Security constraint bypass for pre/post-resources | 2025-07-10T10:47:18.953Z | 2026-03-20T13:43:29.174Z |
| bit-tomcat-2025-48988 | Apache Tomcat: FileUpload large number of parts with headers DoS | 2025-07-10T10:47:06.961Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-46701 | Apache Tomcat: Security constraint bypass for CGI scripts | 2025-07-10T10:47:00.568Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-31651 | Apache Tomcat: Bypass of rules in Rewrite Valve | 2025-07-10T10:46:54.240Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2025-24813 | Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT | 2025-07-10T10:46:47.051Z | 2026-03-20T13:43:29.174Z |
| bit-tomcat-2024-56337 | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete | 2025-07-10T10:46:39.151Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-54677 | Apache Tomcat: DoS in examples web application | 2025-07-10T10:46:30.955Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2024-52316 | Apache Tomcat: Authentication bypass when using Jakarta Authentication API | 2025-07-10T10:46:05.150Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-50379 | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation | 2025-07-10T10:45:55.643Z | 2026-03-20T09:47:33.381Z |
| bit-python-2025-4517 | Arbitrary writes via tarfile realpath overflow | 2025-07-10T09:02:40.800Z | 2025-07-10T09:19:12.756Z |
| bit-python-2025-4435 | Tarfile extracts filtered members when errorlevel=0 | 2025-07-10T09:02:32.309Z | 2025-07-10T09:19:12.756Z |
| bit-python-2025-4330 | Extraction filter bypass for linking outside extraction directory | 2025-07-10T09:02:28.407Z | 2025-07-10T09:19:12.756Z |
| bit-python-2025-4138 | Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory | 2025-07-10T09:02:24.495Z | 2025-07-10T09:19:12.756Z |
| bit-python-2024-12718 | Bypass extraction filter to modify file metadata outside extraction directory | 2025-07-10T09:01:38.394Z | 2025-07-10T09:19:12.756Z |
| bit-moodle-2025-53021 | 2025-07-10T06:00:29.762Z | 2025-08-20T09:06:12.327Z | |
| bit-helm-2025-53547 | Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution | 2025-07-10T05:43:09.073Z | 2025-09-04T09:06:08.228Z |
| bit-git-2025-48386 | Git allows a buffer overflow in 'wincred' credential helper | 2025-07-10T05:40:43.979Z | 2025-11-06T13:25:46.476Z |
| bit-git-2025-48385 | Git alllows arbitrary file writes via bundle-uri parameter injection | 2025-07-10T05:40:40.066Z | 2025-11-06T13:25:46.476Z |
| bit-git-2025-48384 | Git allows arbitrary code execution through broken config quoting | 2025-07-10T05:40:36.268Z | 2025-11-06T13:25:46.476Z |
| bit-appsmith-2024-55965 | 2025-07-09T05:35:58.647Z | 2025-07-09T06:18:38.715Z | |
| bit-modsecurity2-2025-52891 | ModSecurity empty XML tag causes segmentation fault | 2025-07-04T07:42:25.055Z | 2025-07-04T08:10:20.098Z |
| bit-modsecurity-2025-52891 | ModSecurity empty XML tag causes segmentation fault | 2025-07-04T07:41:54.070Z | 2025-07-04T08:10:20.098Z |
| bit-apisix-2025-46647 | Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect | 2025-07-04T07:28:48.965Z | 2025-11-06T13:25:46.476Z |
| bit-pillow-2025-48379 | Pillow Vulnerable to Write Buffer Overflow on BCn encoding | 2025-07-03T05:57:27.923Z | 2025-10-16T18:08:44.835Z |
| bit-discourse-2025-48954 | Discourse vulnerable to XSS via user-provided query parameter in oauth failure flow | 2025-07-01T17:44:46.702Z | 2025-11-13T11:23:28.166Z |
| bit-discourse-2025-49845 | Discourse users are able to see their own whispers even after being removed from a group that has been configured to see whispers | 2025-07-01T08:03:12.143Z | 2025-07-01T08:34:59.038Z |
| bit-gitlab-2025-5846 | Missing Authorization in GitLab | 2025-06-30T15:16:31.446Z | 2025-08-13T06:08:53.695Z |
| bit-gitlab-2025-5315 | Missing Authorization in GitLab | 2025-06-30T15:16:30.030Z | 2025-06-30T15:17:30.405Z |
| bit-gitlab-2025-3279 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-06-30T15:16:22.902Z | 2025-06-30T15:17:30.405Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0379 | Multiples vulnérabilités dans les produits SonicWall | 2025-05-09T00:00:00.000000 | 2025-05-09T00:00:00.000000 |
| certfr-2025-avi-0378 | Multiples vulnérabilités dans les produits Cisco | 2025-05-09T00:00:00.000000 | 2025-05-09T00:00:00.000000 |
| certfr-2025-avi-0377 | Multiples vulnérabilités dans les produits Elastic | 2025-05-07T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2025-avi-0376 | Vulnérabilité dans Google Chrome | 2025-05-07T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2025-avi-0375 | Vulnérabilité dans Liferay Portal et Liferay DXP | 2025-05-07T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2025-avi-0374 | Multiples vulnérabilités dans Tenable Security Center | 2025-05-07T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2025-avi-0373 | Multiples vulnérabilités dans MariaDB | 2025-05-07T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2025-avi-0372 | Multiples vulnérabilités dans Google Pixel | 2025-05-07T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2025-avi-0371 | Multiples vulnérabilités dans Google Android | 2025-05-06T00:00:00.000000 | 2025-05-06T00:00:00.000000 |
| certfr-2025-avi-0370 | Multiples vulnérabilités dans les produits IBM | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0369 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0368 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0367 | Vulnérabilité dans le noyau Linux de Red Hat | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0366 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0365 | Vulnérabilité dans les produits Microsoft | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0364 | Multiples vulnérabilités dans Microsoft Azure | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0363 | Multiples vulnérabilités dans Microsoft Edge | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0362 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0361 | Multiples vulnérabilités dans les produits Mozilla | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0360 | Multiples vulnérabilités dans les produits Tenable | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0359 | Multiples vulnérabilités dans les produits Elastic | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0358 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-30T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0357 | Vulnérabilité dans les produits Symantec | 2025-04-30T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0356 | Multiples vulnérabilités dans Splunk User Behavior Analytics (UBA) | 2025-04-30T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0355 | Multiples vulnérabilités dans Mattermost Server | 2025-04-30T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0354 | Multiples vulnérabilités dans Google Chrome | 2025-04-30T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0353 | Multiples vulnérabilités dans les produits VMware | 2025-04-29T00:00:00.000000 | 2025-04-29T00:00:00.000000 |
| certfr-2025-avi-0352 | Multiples vulnérabilités dans Apache Tomcat | 2025-04-29T00:00:00.000000 | 2025-04-29T00:00:00.000000 |
| certfr-2025-avi-0351 | Vulnérabilité dans LibreOffice | 2025-04-28T00:00:00.000000 | 2025-04-28T00:00:00.000000 |
| certfr-2025-avi-0350 | Vulnérabilité dans SAP NetWeaver | 2025-04-25T00:00:00.000000 | 2025-05-19T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-008573 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor | 2018-10-23T15:15+09:00 | 2018-11-20T18:15+09:00 |
| jvndb-2018-008547 | Clickjacking Vulnerability in Hitachi Device Manager | 2018-10-23T13:53+09:00 | 2018-11-20T18:14+09:00 |
| jvndb-2018-000110 | Web Isolation vulnerable to cross-site scripting | 2018-10-19T14:45+09:00 | 2019-07-26T14:06+09:00 |
| jvndb-2018-000109 | Multiple vulnerabilities in YukiWiki | 2018-10-19T14:31+09:00 | 2019-08-27T10:32+09:00 |
| jvndb-2018-000104 | Multiple vulnerabilities in FileZen | 2018-10-15T15:26+09:00 | 2019-07-26T17:00+09:00 |
| jvndb-2018-000107 | OpenAM (Open Source Edition) vulnerable to session management | 2018-10-12T14:44+09:00 | 2019-09-26T18:10+09:00 |
| jvndb-2018-000105 | Metabase vulnerable to cross-site scripting | 2018-10-11T15:54+09:00 | 2019-07-26T17:49+09:00 |
| jvndb-2018-000106 | User-friendly SVN vulnerable to cross-site scripting | 2018-10-09T16:27+09:00 | 2019-07-11T18:00+09:00 |
| jvndb-2018-000103 | Music Center for PC improperly verifies software update files | 2018-10-09T16:22+09:00 | 2019-07-26T15:57+09:00 |
| jvndb-2018-000102 | Multiple vulnerabilities in Denbun | 2018-10-04T16:11+09:00 | 2019-07-11T16:02+09:00 |
| jvndb-2018-000101 | The installer of Baidu Browser may insecurely load Dynamic Link Libraries | 2018-10-03T15:02+09:00 | 2019-08-27T10:39+09:00 |
| jvndb-2018-000100 | +Message App fails to verify SSL server certificates | 2018-09-27T16:52+09:00 | 2019-08-27T17:22+09:00 |
| jvndb-2018-000097 | Multiple FXC network devices vulnerable to cross-site scripting | 2018-09-13T13:57+09:00 | 2019-08-27T11:30+09:00 |
| jvndb-2018-000099 | Cybozu Garoon vulnerable to directory traversal | 2018-09-10T14:01+09:00 | 2019-07-26T15:28+09:00 |
| jvndb-2018-000092 | Multiple vulnerabilities in INplc | 2018-09-07T16:49+09:00 | 2019-08-28T09:51+09:00 |
| jvndb-2018-000095 | AttacheCase vulnerable to arbitrary script execution | 2018-08-31T15:59+09:00 | 2019-07-26T12:19+09:00 |
| jvndb-2018-000096 | QNAP Photo Station vulnerable to cross-site scripting | 2018-08-31T15:48+09:00 | 2019-07-25T16:09+09:00 |
| jvndb-2018-000094 | Movable Type vulnerable to cross-site scripting | 2018-08-30T17:34+09:00 | 2019-07-25T14:25+09:00 |
| jvndb-2018-000093 | Multiple script injection vulnerabilities in multiple Yamaha network devices | 2018-08-29T18:01+09:00 | 2019-08-27T17:53+09:00 |
| jvndb-2018-006460 | Path Traversal Vulnerability in Hitachi Automation Director | 2018-08-22T17:11+09:00 | 2018-08-22T17:11+09:00 |
| jvndb-2018-006459 | Path Traversal Vulnerability in JP1/Automatic Operation | 2018-08-22T17:11+09:00 | 2018-08-22T17:11+09:00 |
| jvndb-2018-000087 | The installer of Digital Paper App may insecurely load Dynamic Link Libraries | 2018-08-21T15:59+09:00 | 2019-07-25T16:17+09:00 |
| jvndb-2018-000091 | NoMachine App for Android vulnerable to environment variables alteration | 2018-08-17T13:49+09:00 | 2019-07-25T17:17+09:00 |
| jvndb-2018-006236 | Information Disclosure Vulnerability in Hitachi Command Suite | 2018-08-14T10:04+09:00 | 2019-07-24T17:02+09:00 |
| jvndb-2018-000086 | Multiple vulnerabilities in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE | 2018-08-09T16:43+09:00 | 2018-08-09T16:43+09:00 |
| jvndb-2018-000089 | Multiple vulnerabilities in multiple I-O DATA network camera products | 2018-08-07T14:33+09:00 | 2019-07-25T16:00+09:00 |
| jvndb-2018-000090 | Multiple directory traversal vulnerabilities in AttacheCase | 2018-08-06T14:10+09:00 | 2019-07-25T14:32+09:00 |
| jvndb-2018-000085 | Multiple cross-site scripting vulnerabilities in GROWI | 2018-08-03T15:04+09:00 | 2019-07-05T17:13+09:00 |
| jvndb-2018-000084 | LINE MUSIC for Android fails to verify SSL server certificates | 2018-07-26T14:58+09:00 | 2019-07-25T17:28+09:00 |
| jvndb-2018-000083 | The installers of multiple Canon IT Solutions Inc. software programs may insecurely load Dynamic Link Libraries | 2018-07-24T14:43+09:00 | 2019-07-26T12:05+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-05355 | ChurchCRM代码执行漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05354 | ChurchCRM跨站脚本漏洞(CNVD-2026-0535400) | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05353 | ChurchCRM跨站脚本漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05352 | ChurchCRM UserEditor.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05351 | ChurchCRM ListEvents.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05350 | ChurchCRM GroupEditor.php页面跨站脚本漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05349 | ChurchCRM eGive.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05348 | ChurchCRM CartToFamily.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05344 | RiteCMS存在未明漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05343 | RiteCMS文件包含漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05342 | RiteCMS访问控制不当漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05341 | RiteCMS跨站请求伪造漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05340 | RiteCMS跨站脚本漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05339 | RiteCMS代码执行漏洞 | 2025-12-25 | 2026-01-19 |
| cnvd-2026-05332 | Complete Online Beauty Parlor Management System /bwdates-reports-details.php文件跨站脚本漏洞 | 2025-12-25 | 2026-01-21 |
| cnvd-2026-05331 | Complete Online Beauty Parlor Management System /search-invoices.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-21 |
| cnvd-2026-05330 | Complete Online Beauty Parlor Management System /view-appointment.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-21 |
| cnvd-2026-05130 | Kentico Xperience信息泄露漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05129 | Kentico Xperience文件上传漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05128 | Kentico Xperience HTML注入漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05127 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05127) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05126 | Kentico Xperience富文本编辑器组件跨站脚本漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05125 | Kentico Xperience电子邮件营销模板跨站脚本漏洞 | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05124 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05124) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05123 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05123) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05122 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05122) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05121 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05121) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05120 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05120) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05119 | Kentico Xperience跨站脚本漏洞(CNVD-2026-05119) | 2025-12-25 | 2026-01-20 |
| cnvd-2026-05019 | TOTOLINK T10缓冲区溢出漏洞 | 2025-12-25 | 2026-01-14 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-00389 | Уязвимость пакетов программ Microsoft Office и Microsoft 365 Apps for Enterprise, связанн… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00388 | Уязвимость редактора электронных таблиц Microsoft Excel пакетов программ Microsoft Office… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00387 | Уязвимость пакета программ Microsoft SharePoint Server, связанная с недостаточной проверк… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00386 | Уязвимость пакета программ Microsoft Office, связанная с возможностью использования памят… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00385 | Уязвимость службы Routing and Remote Access Service (RRAS) операционных систем Windows, п… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00384 | Уязвимость компонента SMB Server операционной системы Windows, позволяющая нарушителю пов… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00383 | Уязвимость платформы Solar appScreener, связанная с некорректной реализацией механизмов а… | 14.01.2026 | 13.02.2026 |
| bdu:2026-00382 | Уязвимость платформы Solar appScreener, связанная с недостаточной проверкой поступающих з… | 14.01.2026 | 13.02.2026 |
| bdu:2026-00381 | Уязвимость демона cw_acd локальной платформы управления FortiSwitchManager и операционных… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00380 | Уязвимость функции поиска и обнаружения микропрограммного обеспечения беспроводных точек … | 14.01.2026 | 14.01.2026 |
| bdu:2026-00379 | Уязвимость программной платформы Apache Struts, связанная с отсутствием проверки подлинно… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00378 | Уязвимость драйвера Agere Modem Driver операционных систем Windows, позволяющая нарушител… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00377 | Уязвимость платформы управления политиками соединений Cisco Identity Services Engine (ISE… | 14.01.2026 | 13.02.2026 |
| bdu:2026-00376 | Уязвимость функции TGZfname() утилиты untgz библиотеки сжатия zlib, позволяющая нарушител… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00375 | Уязвимость диспетчера окон рабочего стола Desktop Window Manager (DWM) операционных систе… | 14.01.2026 | 16.01.2026 |
| bdu:2026-00374 | Уязвимость npm-библиотеки Debug, связанная с наличием недекларированных возможностей, поз… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00373 | Уязвимость службы развертывания Windows Deployment Services операционных систем Windows, … | 14.01.2026 | 14.01.2026 |
| bdu:2026-00372 | Уязвимость реализации протокола Kerberos операционных систем Windows, позволяющая нарушит… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00371 | Уязвимость службы WalletService операционных систем Windows, позволяющая нарушителю повыс… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00370 | Уязвимость функции strcpy() файла /goform/formUserStatusRemark микропрограммного обеспече… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00369 | Уязвимость компонента phMonitor системы управления безопасностью FortiSIEM, позволяющая н… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00368 | Уязвимость программной платформы SAP S/4HANA, связанная с непринятием мер по защите струк… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00367 | Уязвимость микропрограммного обеспечения релейных плат Dingtian DT-R002, связанная с недо… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00366 | Уязвимость функции strcpy() файла /goform/formFtpServerDirConfig микропрограммного обеспе… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00365 | Уязвимость микропрограммного обеспечения релейных плат Dingtian DT-R002, связанная с недо… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00364 | Уязвимость компонента HTTP Handler файла /goform/set_hidessid_cfg микропрограммного обесп… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00363 | Уязвимость функции strcpy() файла /goform/formConfigCliForEngineerOnly микропрограммного … | 14.01.2026 | 14.01.2026 |
| bdu:2026-00362 | Уязвимость компонента User Management Engine (UME) сервера веб-приложений SAP NetWeaver J… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00361 | Уязвимость интерфейса REST Interface Version 2 средства для управления идентификацией пол… | 14.01.2026 | 14.01.2026 |
| bdu:2026-00360 | Уязвимость микропрограммного обеспечения промышленных сотовых шлюзов ICG-2510WG-LTE и ICG… | 14.01.2026 | 14.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201304-0379 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T20:35:08.233000Z |
| var-200906-0617 | The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly ini… | 2026-03-09T20:35:07.096000Z |
| var-202203-1690 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if th… | 2026-03-09T20:35:07.026000Z |
| var-201110-0443 | The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote a… | 2026-03-09T20:35:04.336000Z |
| var-201506-0497 | The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 … | 2026-03-09T20:35:03.342000Z |
| var-200609-0787 | The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Appl… | 2026-03-09T20:34:59.190000Z |
| var-201903-0441 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T20:33:43.343000Z |
| var-200809-0008 | Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in … | 2026-03-09T20:33:02.977000Z |
| var-201403-0387 | Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python … | 2026-03-09T20:33:02.813000Z |
| var-201904-1444 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T20:32:59.519000Z |
| var-201708-0039 | Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows re… | 2026-03-09T20:32:56.842000Z |
| var-200102-0098 | FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a … | 2026-03-09T20:31:46.314000Z |
| var-201201-0312 | OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows rem… | 2026-03-09T20:30:42.112000Z |
| var-200809-0187 | Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial … | 2026-03-09T20:30:41.025000Z |
| var-202104-1670 | An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module … | 2026-03-09T20:30:32.569000Z |
| var-201609-0347 | The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider… | 2026-03-09T20:30:32.496000Z |
| var-200904-0818 | Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 a… | 2026-03-09T20:29:30.085000Z |
| var-201912-1851 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T20:29:29.379000Z |
| var-201302-0020 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T20:29:25.214000Z |
| var-201912-0575 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T20:29:23.539000Z |
| var-201302-0306 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2026-03-09T20:29:22.520000Z |
| var-201801-0036 | jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-doma… | 2026-03-09T20:29:22.127000Z |
| var-200706-0660 | cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabl… | 2026-03-09T20:29:20.415000Z |
| var-200909-0789 | libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when Open… | 2026-03-09T20:29:11.060000Z |
| var-201806-1449 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2026-03-09T20:28:37.679000Z |
| var-200904-0808 | Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 an… | 2026-03-09T20:27:24.258000Z |
| var-202004-1972 | A race condition was addressed with additional validation. This issue is fixed in iOS 13.… | 2026-03-09T20:27:10.870000Z |
| var-200505-0163 | Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when h… | 2026-03-09T20:27:07.828000Z |
| var-201408-0092 | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, … | 2026-03-09T20:27:07.536000Z |
| var-201511-0101 | The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows … | 2026-03-09T20:27:06.495000Z |