Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-15502 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Sangfor Operation and Maintenance Management System se… |
Sangfor |
Operation and Maintenance Management System |
2026-01-10T08:02:06.438Z | 2026-01-12T14:38:32.534Z |
| CVE-2025-14948 |
5.3 (3.1)
|
miniOrange OTP Verification and SMS Notification for W… |
cyberlord92 |
miniOrange OTP Verification and SMS Notification for WooCommerce |
2026-01-10T07:03:55.561Z | 2026-01-12T13:08:10.342Z |
| CVE-2026-22777 |
7.5 (3.1)
|
ComfyUI-Manager is Vulnerable to CRLF Injection in Con… |
Comfy-Org |
ComfyUI-Manager |
2026-01-10T06:43:21.579Z | 2026-01-12T13:22:32.833Z |
| CVE-2026-22773 |
6.5 (3.1)
|
vLLM is vulnerable to DoS in Idefics3 vision models vi… |
vllm-project |
vllm |
2026-01-10T06:39:02.276Z | 2026-01-12T13:22:52.666Z |
| CVE-2025-14943 |
4.3 (3.1)
|
Blog2Social: Social Media Auto Post & Scheduler <= 8.7… |
pr-gateway |
Blog2Social: Social Media Auto Post & Scheduler |
2026-01-10T06:32:34.320Z | 2026-01-12T13:40:35.845Z |
| CVE-2026-22704 |
8.1 (3.1)
|
HAXcms Has Stored XSS Vulnerability that May Lead to A… |
haxtheweb |
issues |
2026-01-10T06:22:45.076Z | 2026-01-13T15:09:03.814Z |
| CVE-2026-22705 |
6.4 (3.1)
|
RustCrypto: Signatures has timing side-channel in ML-D… |
RustCrypto |
signatures |
2026-01-10T06:14:20.292Z | 2026-01-12T16:43:06.463Z |
| CVE-2026-22703 |
5.5 (3.1)
|
Cosign verification accepts any valid Rekor entry unde… |
sigstore |
cosign |
2026-01-10T06:11:09.426Z | 2026-01-12T16:43:57.302Z |
| CVE-2026-22702 |
4.5 (3.1)
|
virtualenv Has TOCTOU Vulnerabilities in Directory Creation |
pypa |
virtualenv |
2026-01-10T06:05:53.281Z | 2026-01-12T16:44:12.734Z |
| CVE-2026-22701 |
5.3 (3.1)
|
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vu… |
tox-dev |
filelock |
2026-01-10T05:59:28.872Z | 2026-01-12T16:45:50.638Z |
| CVE-2026-22693 |
5.3 (3.1)
|
Null Pointer Dereference in SubtableUnicodesCache::cre… |
harfbuzz |
harfbuzz |
2026-01-10T05:53:21.019Z | 2026-01-12T16:47:17.715Z |
| CVE-2026-22689 |
6.5 (3.1)
|
Mailpit is vulnerable to Cross-Site WebSocket Hijackin… |
axllent |
mailpit |
2026-01-10T05:46:13.771Z | 2026-01-12T16:47:34.722Z |
| CVE-2026-22685 |
8.8 (3.1)
|
DevToys Path Traversal (“Zip Slip”) Vulnerability in D… |
DevToys-app |
DevToys |
2026-01-10T05:43:19.856Z | 2026-01-12T14:39:28.330Z |
| CVE-2026-22611 |
3.7 (3.1)
|
AWS SDK for .NET V4 adopted defense in depth enhanceme… |
aws |
aws-sdk-net |
2026-01-10T05:37:08.297Z | 2026-01-12T14:39:57.770Z |
| CVE-2026-22700 |
7.5 (3.1)
|
RustCrypto Has Insufficient Length Validation in decry… |
RustCrypto |
elliptic-curves |
2026-01-10T05:17:25.583Z | 2026-01-12T14:46:46.227Z |
| CVE-2026-22699 |
7.5 (3.1)
|
RustCrypto SM2-PKE has Unchecked AffinePoint Decoding … |
RustCrypto |
elliptic-curves |
2026-01-10T05:17:22.818Z | 2026-01-12T14:59:18.634Z |
| CVE-2026-22698 |
8.7 (4.0)
|
RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability |
RustCrypto |
elliptic-curves |
2026-01-10T05:17:19.993Z | 2026-01-12T16:48:30.706Z |
| CVE-2026-22691 |
2.7 (4.0)
|
pypdf has possible long runtimes for malformed startxref |
py-pdf |
pypdf |
2026-01-10T04:46:12.423Z | 2026-01-12T16:48:53.503Z |
| CVE-2026-22690 |
2.7 (4.0)
|
pypdf has possible long runtimes for missing /Root obj… |
py-pdf |
pypdf |
2026-01-10T04:41:20.773Z | 2026-01-12T17:07:00.323Z |
| CVE-2026-22688 |
10 (3.1)
|
WeKnora has Command Injection in MCP stdio test |
Tencent |
WeKnora |
2026-01-10T03:41:59.952Z | 2026-01-12T17:20:43.431Z |
| CVE-2026-22687 |
8.1 (3.1)
|
WeKnora vulnerable to SQL Injection |
Tencent |
WeKnora |
2026-01-10T03:41:43.862Z | 2026-01-12T17:21:25.675Z |
| CVE-2026-22610 |
8.5 (4.0)
|
Angular has XSS Vulnerability via Unsanitized SVG Scri… |
angular |
angular |
2026-01-10T03:35:40.727Z | 2026-01-13T04:55:48.905Z |
| CVE-2025-13457 |
7.5 (3.1)
|
WooCommerce Square <= 5.1.1 - Unauthenticated Insecure… |
woocommerce |
WooCommerce Square |
2026-01-10T03:21:01.113Z | 2026-01-12T16:49:14.896Z |
| CVE-2026-22589 |
7.5 (3.1)
|
Spree API has Unauthenticated IDOR - Guest Address |
spree |
spree |
2026-01-10T03:17:58.494Z | 2026-01-12T17:32:46.777Z |
| CVE-2025-61674 |
6.1 (3.1)
|
October CMS Vulnerable to Stored XSS via Editor and Br… |
octobercms |
october |
2026-01-10T03:14:11.185Z | 2026-01-12T17:33:33.662Z |
| CVE-2025-61676 |
6.1 (3.1)
|
October CMS Vulnerable to Stored XSS via Branding Styles |
octobercms |
october |
2026-01-10T03:14:00.708Z | 2026-01-12T17:34:13.595Z |
| CVE-2025-65091 |
10 (3.1)
|
XWiki Full Calendar Macro vulnerable to SQL injection … |
xwiki-contrib |
macro-fullcalendar |
2026-01-10T03:06:16.775Z | 2026-01-12T17:35:19.706Z |
| CVE-2025-65090 |
5.3 (3.1)
|
XWiki Full Calendar Macro vulnerable to data leak thro… |
xwiki-contrib |
macro-fullcalendar |
2026-01-10T03:05:06.531Z | 2026-01-12T17:36:38.233Z |
| CVE-2026-22597 |
5.1 (4.0)
|
Ghost has SSRF via External Media Inliner |
TryGhost |
Ghost |
2026-01-10T02:57:36.898Z | 2026-01-12T16:23:47.163Z |
| CVE-2026-22596 |
6.7 (3.1)
|
Ghost has SQL Injection in Members Activity Feed |
TryGhost |
Ghost |
2026-01-10T02:57:19.792Z | 2026-01-12T17:37:41.086Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-69267 |
8.8 (4.0)
|
Spectrum directory path traversal |
Broadcom |
DX NetOps Spectrum |
2026-01-12T03:53:00.624Z | 2026-01-12T15:53:40.392Z |
| CVE-2026-0853 |
6.9 (4.0)
5.3 (3.1)
|
A-Plus Video Technologies｜NVR - Sensitive Data Exposure |
A-Plus Video Technologies |
AP-RM864P |
2026-01-12T03:26:47.546Z | 2026-01-12T15:54:38.969Z |
| CVE-2025-52694 |
10 (3.1)
|
Execution of arbitrary SQL commands |
Advantech |
IoTSuite and IoT Edge Products |
2026-01-12T02:27:16.744Z | 2026-01-15T09:32:25.933Z |
| CVE-2026-0852 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Music Site AdminUpdateUser.php sq… |
code-projects |
Online Music Site |
2026-01-12T00:02:06.128Z | 2026-01-12T15:58:49.390Z |
| CVE-2026-0851 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Music Site AdminAddUser.php sql i… |
code-projects |
Online Music Site |
2026-01-11T23:32:07.010Z | 2026-01-12T16:37:46.944Z |
| CVE-2026-0850 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
code-projects Intern Membership Management System dele… |
code-projects |
Intern Membership Management System |
2026-01-11T23:02:06.162Z | 2026-01-12T16:50:15.555Z |
| CVE-2025-68493 |
N/A
|
Apache Struts, Apache Struts: XXE vulnerability in out… |
Apache Software Foundation |
Apache Struts |
2026-01-11T13:05:36.894Z | 2026-01-12T13:52:58.210Z |
| CVE-2025-15506 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
AcademySoftwareFoundation OpenColorIO FileRules.cpp Co… |
AcademySoftwareFoundation |
OpenColorIO |
2026-01-11T11:02:09.187Z | 2026-01-12T17:03:17.278Z |
| CVE-2026-0843 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
jiujiujia/victor123/wxw850227 jjjfood/jjjshop_food ind… |
jiujiujia |
jjjfood |
2026-01-11T09:02:05.907Z | 2026-01-12T17:09:55.150Z |
| CVE-2026-0842 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Flycatcher Toys smART Sketcher Bluetooth Low Energy mi… |
Flycatcher Toys |
smART Sketcher |
2026-01-11T08:02:06.221Z | 2026-01-12T17:50:26.288Z |
| CVE-2026-0841 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formPictureUrl strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T07:32:07.736Z | 2026-01-12T14:33:15.407Z |
| CVE-2026-0840 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T06:32:06.734Z | 2026-01-12T14:34:38.435Z |
| CVE-2026-0839 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W APSecurity strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T06:02:05.798Z | 2026-01-12T14:35:14.535Z |
| CVE-2026-0838 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W ConfigWirelessBase strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T05:32:06.225Z | 2026-01-12T14:35:49.763Z |
| CVE-2026-0837 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formFireWall strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T05:02:06.048Z | 2026-01-12T14:36:14.234Z |
| CVE-2026-0836 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formConfigFastDirectionW strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T04:32:06.535Z | 2026-01-12T18:13:16.566Z |
| CVE-2025-15505 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
Luxul XWR-600 Web Administration cross site scripting |
Luxul |
XWR-600 |
2026-01-11T01:32:07.400Z | 2026-01-12T18:15:20.196Z |
| CVE-2026-0824 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
questdb ui Web Console cross site scripting |
questdb |
ui |
2026-01-10T14:32:08.724Z | 2026-01-12T18:26:21.294Z |
| CVE-2026-0822 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
quickjs-ng quickjs quickjs.c js_typed_array_sort heap-… |
quickjs-ng |
quickjs |
2026-01-10T13:32:08.881Z | 2026-01-12T18:30:50.158Z |
| CVE-2025-13393 |
4.3 (3.1)
|
Featured Image from URL (FIFU) <= 5.3.1 - Authenticate… |
marceljm |
Featured Image from URL (FIFU) |
2026-01-10T13:47:35.750Z | 2026-01-12T18:28:15.408Z |
| CVE-2025-12379 |
6.4 (3.1)
|
Shortcodes and extra features for Phlox theme <= 2.17.… |
averta |
Shortcodes and extra features for Phlox theme |
2026-01-10T13:47:35.146Z | 2026-01-12T18:29:20.473Z |
| CVE-2026-0821 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
quickjs-ng quickjs quickjs.c js_typed_array_constructo… |
quickjs-ng |
quickjs |
2026-01-10T13:02:07.698Z | 2026-01-12T14:36:51.911Z |
| CVE-2025-14555 |
6.4 (3.1)
|
Countdown Timer - Widget Countdown <= 2.7.7 - Authenti… |
wpdevart |
Countdown Timer – Widget Countdown |
2026-01-10T12:23:16.588Z | 2026-01-12T13:10:31.231Z |
| CVE-2025-15504 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
lief-project LIEF ELF Binary Parser.tcc parse_binary n… |
lief-project |
LIEF |
2026-01-10T11:32:06.771Z | 2026-01-12T14:45:44.884Z |
| CVE-2025-14506 |
6.4 (3.1)
|
ConvertForce Popup Builder <= 0.0.7 - Stored Cross-Sit… |
imtiazrayhan |
ConvertForce Popup Builder |
2026-01-10T11:22:38.947Z | 2026-01-12T13:10:20.692Z |
| CVE-2026-0831 |
5.3 (3.1)
|
Templately <= 3.4.8 - Unauthenticated Limited Arbitrar… |
wpdevteam |
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! |
2026-01-10T09:22:18.126Z | 2026-01-12T13:09:57.883Z |
| CVE-2025-62235 |
N/A
|
Apache Mynewt NimBLE: Incorrect handling of SMP Securi… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:42:30.446Z | 2026-01-12T16:45:27.886Z |
| CVE-2025-53477 |
N/A
|
Apache Mynewt NimBLE: NULL Pointer Dereference in NimB… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:45:27.630Z | 2026-01-12T16:54:48.496Z |
| CVE-2025-53470 |
N/A
|
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerabilit… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:46:35.789Z | 2026-01-12T19:12:52.715Z |
| CVE-2025-52435 |
N/A
|
Apache Mynewt NimBLE: Invalid error handling in pause … |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:47:10.568Z | 2026-01-12T19:07:07.593Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-cpp7-6w4h-pg23 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was found in PHPGurukul Online Course Registration System up to 3.1. This affects a… | 2026-01-09T18:31:36Z | 2026-01-09T18:31:37Z |
| ghsa-9w9h-4qfh-f6m6 |
6.5 (3.1)
|
An Information Disclosure vulnerability in CouchCMS 2.4 allow an Admin user to read arbitrary files… | 2026-01-09T18:31:36Z | 2026-01-12T18:30:29Z |
| ghsa-8hfg-wp8c-fvqv |
6.5 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-01-09T18:31:36Z | 2026-01-09T18:31:37Z |
| ghsa-6c7p-3rhg-7wgj |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability has been found in RainyGao DocSys up to 2.02.37. This affects an unknown function o… | 2026-01-09T18:31:36Z | 2026-01-09T18:31:36Z |
| ghsa-5v56-6x55-vhpv |
5.3 (3.1)
|
Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension al… | 2026-01-09T18:31:36Z | 2026-01-09T18:31:36Z |
| ghsa-348h-xmhf-cxqc |
5.4 (3.1)
|
In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilitie… | 2026-01-09T18:31:36Z | 2026-01-09T18:31:36Z |
| ghsa-2388-fgq3-x3rp |
5.4 (3.1)
|
In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple SQL injection vulnerabilities exists which allow … | 2026-01-09T18:31:36Z | 2026-01-09T18:31:36Z |
| ghsa-xg8w-4mgh-rwxq |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was detected in RainyGao DocSys up to 2.02.36. The affected element is an unknown f… | 2026-01-09T18:31:35Z | 2026-01-09T18:31:35Z |
| ghsa-mqfq-rfg7-86wc |
6.0 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-01-09T18:31:35Z | 2026-01-09T18:31:35Z |
| ghsa-96v6-28qx-cr4q |
2.3 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-01-09T18:31:35Z | 2026-01-09T18:31:35Z |
| ghsa-gxxc-m74c-f48x |
6.1 (3.1)
|
October CMS Vulnerable to Stored XSS via Editor and Branding Styles | 2026-01-09T18:12:58Z | 2026-01-11T14:55:29Z |
| ghsa-w3fc-rm7j-qh7j |
9.8 (3.1)
|
BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionali… | 2026-01-09T15:30:23Z | 2026-01-09T18:31:35Z |
| ghsa-x2rg-q7qq-q3c7 |
6.5 (3.1)
|
The WP Page Permalink Extension plugin for WordPress is vulnerable to Missing Authorization in all … | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-wc63-83rx-8qcg |
6.4 (3.1)
|
The Woodpecker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-vcxh-46f5-vx6r |
7.5 (3.1)
8.7 (4.0)
|
Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue … | 2026-01-09T12:32:26Z | 2026-01-14T18:31:17Z |
| ghsa-pc52-v769-jjvw |
6.4 (3.1)
|
The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-m6m8-c4cv-c66j |
8.8 (4.0)
|
This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-hfqg-hpcg-h9rx |
6.4 (3.1)
|
The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' … | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-gfjh-r2j2-6qf3 |
6.1 (3.1)
|
The MG AdvancedOptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-gcqp-g44c-653f |
6.4 (3.1)
|
The PullQuote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'p… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-g36m-9jqw-jhm4 |
6.1 (3.1)
|
The Lesson Plan Book plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-c822-wpv5-67r8 |
6.4 (3.1)
|
The Menu Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `category` … | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-c223-65f8-3p5p |
9.3 (4.0)
|
The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (sh… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-7h86-xp6g-v5h6 |
9.8 (3.1)
9.3 (4.0)
|
Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any passwor… | 2026-01-09T12:32:26Z | 2026-01-14T18:31:17Z |
| ghsa-6hj7-3vmc-gm54 |
7.2 (3.1)
8.6 (4.0)
|
Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "sy… | 2026-01-09T12:32:26Z | 2026-01-14T18:31:17Z |
| ghsa-6352-39rh-mx5f |
6.4 (3.1)
|
The The Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's … | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-4x85-44wj-rgh5 |
6.4 (3.1)
|
The Autogen Headers Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-4f2m-4qcx-27xf |
8.8 (4.0)
|
This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-4873-9vgw-wq49 |
6.4 (3.1)
|
The Debt.com Business in a Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-22q2-ww3p-hj7f |
6.5 (3.1)
6.9 (4.0)
|
Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible f… | 2026-01-09T12:32:26Z | 2026-01-14T18:31:17Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-609 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.i… | tensorflow-cpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:07.452136Z |
| pysec-2021-608 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.t… | tensorflow-cpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:07.301547Z |
| pysec-2021-607 |
|
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… | tensorflow-cpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:07.147316Z |
| pysec-2021-606 |
|
TensorFlow is an open source platform for machine learning. In affected versions the Kera… | tensorflow-cpu | 2021-11-05T20:15:00Z | 2021-12-09T06:35:06.985505Z |
| pysec-2021-402 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:43.758467Z |
| pysec-2021-394 |
|
TensorFlow is an open source platform for machine learning. In affeced versions during ex… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:42.499515Z |
| pysec-2021-393 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.s… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:42.348013Z |
| pysec-2021-392 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.i… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:42.174686Z |
| pysec-2021-391 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.t… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:42.007550Z |
| pysec-2021-390 |
|
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:41.833730Z |
| pysec-2021-389 |
|
TensorFlow is an open source platform for machine learning. In affected versions the Kera… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:41.665281Z |
| pysec-2021-386 |
|
JupyterHub is an open source multi-user server for Jupyter notebooks. In affected version… | jupyterhub | 2021-11-04T18:15:00Z | 2021-11-10T19:23:06.087408Z |
| pysec-2021-428 |
|
nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions … | nbdime | 2021-11-03T18:15:00Z | 2021-11-16T21:20:29.137127Z |
| pysec-2021-388 |
|
The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE… | easy-xml | 2021-10-31T20:15:00Z | 2021-11-11T13:06:47.875432Z |
| pysec-2021-384 |
|
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their passwo… | jupyterhub-firstuseauthenticator | 2021-10-28T20:15:00Z | 2021-11-03T14:26:52.434933Z |
| pysec-2021-383 |
|
Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deseri… | nameko | 2021-10-26T13:15:00Z | 2021-10-29T05:27:28.492888Z |
| pysec-2021-872 |
|
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Sing… | distributed | 2021-10-26T11:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2021-871 |
|
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Sing… | distributed | 2021-10-26T11:15:00Z | 2022-07-14T05:11:51.739830Z |
| pysec-2021-387 |
|
An issue was discovered in Dask (aka python-dask) through 2021.09.1. Single machine Dask … | dask | 2021-10-26T11:15:00Z | 2021-11-11T13:06:47.756280Z |
| pysec-2021-381 |
|
Rasa is an open source machine learning framework to automate text-and voice-based conver… | rasa | 2021-10-21T21:15:00Z | 2021-10-24T23:24:39.410729Z |
| pysec-2021-382 |
|
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with … | qutebrowser | 2021-10-21T18:15:00Z | 2021-10-28T05:27:07.120992Z |
| pysec-2021-421 |
|
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (… | babel | 2021-10-20T21:15:00Z | 2021-11-16T03:58:43.401152Z |
| pysec-2021-376 |
|
python-tuf is a Python reference implementation of The Update Framework (TUF). In both cl… | tuf | 2021-10-19T18:15:00Z | 2021-10-22T22:29:45.339771Z |
| pysec-2021-849 |
|
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemond… | pybluemonday | 2021-10-18T15:15:00Z | 2021-12-14T08:18:23.339515Z |
| pysec-2021-378 |
|
Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING… | apache-superset | 2021-10-18T15:15:00Z | 2021-10-24T23:24:36.552552Z |
| pysec-2021-377 |
|
Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore… | apache-superset | 2021-10-18T15:15:00Z | 2021-10-24T23:24:36.503366Z |
| pysec-2021-380 |
|
Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vu… | ops-cli | 2021-10-15T15:15:00Z | 2021-10-24T23:24:39.018050Z |
| pysec-2021-379 |
|
OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.1… | omero-figure | 2021-10-14T16:15:00Z | 2021-10-24T23:24:38.547709Z |
| pysec-2021-372 |
|
OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.1… | omero-web | 2021-10-14T16:15:00Z | 2021-10-17T22:58:18.538383Z |
| pysec-2021-369 |
|
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this iss… | django-unicorn | 2021-10-11T01:15:00Z | 2021-10-11T05:26:07.255634Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192070 | Malicious code in elf-stats-joyous-sled-261 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192069 | Malicious code in elf-stats-joyous-pinecone-528 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192068 | Malicious code in elf-stats-joyous-mailbag-164 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192067 | Malicious code in elf-stats-joyous-hollyberry-379 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192066 | Malicious code in elf-stats-joyous-fireplace-187 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192065 | Malicious code in elf-stats-jolly-toolkit-984 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192064 | Malicious code in elf-stats-holly-stockpile-968 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192063 | Malicious code in elf-stats-holly-hammer-741 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192062 | Malicious code in elf-stats-glittering-wishlist-537 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192061 | Malicious code in elf-stats-glittering-nutcracker-591 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192060 | Malicious code in elf-stats-glittering-marshmallow-217 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192059 | Malicious code in elf-stats-glittering-lantern-418 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192058 | Malicious code in elf-stats-glittering-cookie-772 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192057 | Malicious code in elf-stats-gingersnap-sparkler-768 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192056 | Malicious code in elf-stats-gingersnap-reindeer-987 (npm) | 2025-12-03T15:59:29Z | 2025-12-16T07:25:30Z |
| mal-2025-192055 | Malicious code in elf-stats-gingersnap-pinecone-440 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192054 | Malicious code in elf-stats-ginger-workshop-948 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192053 | Malicious code in elf-stats-ginger-ledger-106 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192052 | Malicious code in elf-stats-ginger-icicle-707 (npm) | 2025-12-03T15:59:29Z | 2025-12-04T10:25:39Z |
| mal-2025-192051 | Malicious code in elf-stats-ginger-cookiejar-383 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192050 | Malicious code in elf-stats-ginger-bell-819 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192049 | Malicious code in elf-stats-fuzzy-sparkler-922 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192048 | Malicious code in elf-stats-fuzzy-pantry-827 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192047 | Malicious code in elf-stats-fuzzy-ornament-236 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192046 | Malicious code in elf-stats-fuzzy-mitten-891 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192045 | Malicious code in elf-stats-fuzzy-marshmallow-280 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:09:23Z |
| mal-2025-192044 | Malicious code in elf-stats-fuzzy-cushion-615 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192043 | Malicious code in elf-stats-frosty-toy-870 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192042 | Malicious code in elf-stats-frosty-candy-152 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192041 | Malicious code in elf-stats-frostbitten-wishlist-794 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1626 | Devolutions Server: Mehrere Schwachstellen | 2025-07-22T22:00:00.000+00:00 | 2025-07-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1625 | Mattermost Server und Plugins: Mehrere Schwachstellen | 2025-07-22T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1624 | Arista EOS: Mehrere Schwachstellen | 2025-07-22T22:00:00.000+00:00 | 2025-08-25T22:00:00.000+00:00 |
| wid-sec-w-2025-1623 | Mozilla Firefox , Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2025-07-22T22:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-1622 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-07-22T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1621 | TYPO3 Extensions: Mehrere Schwachstellen | 2025-07-21T22:00:00.000+00:00 | 2025-07-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1620 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-07-21T22:00:00.000+00:00 | 2025-12-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1619 | Dell PowerScale: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-21T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1618 | Kubernetes Image Builder: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-07-21T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1617 | IBM Cognos Analytics: Mehrere Schwachstellen | 2025-07-21T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1616 | Dell BIOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-07-21T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1615 | Sophos Firewall: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-07-21T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1614 | PowerDNS: Schwachstelle ermöglicht Denial of Service | 2025-07-21T22:00:00.000+00:00 | 2025-08-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1613 | Linux Kernel: Mehrere Schwachstellen | 2025-07-20T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1612 | WordPress: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-20T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1611 | Dell Avamar: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-20T22:00:00.000+00:00 | 2025-08-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1610 | Acronis Cyber Protect Cloud Agent: Schwachstelle ermöglicht Privilegieneskalation | 2025-07-20T22:00:00.000+00:00 | 2025-08-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1609 | Trellix Endpoint Security (HX) Agent: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-07-20T22:00:00.000+00:00 | 2025-09-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1608 | CrushFTP: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-07-20T22:00:00.000+00:00 | 2025-07-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1607 | Keycloak: Schwachstelle ermöglicht Privilegieneskalation | 2025-07-20T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1606 | Joomla Extensions: Mehrere Schwachstellen | 2025-07-20T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1605 | OpenCTI: Schwachstelle ermöglicht Manipulation von Dateien | 2025-07-20T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1604 | ESET Endpoint Security: Schwachstelle ermöglicht Manipulation von Dateien | 2025-07-20T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1598 | Microsoft SharePoint (On-premises): Mehrere Schwachstellen | 2025-07-20T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1596 | Linux Kernel: Schwachstelle ermöglicht Denial of Service und nicht spezifizierten Angriff | 2025-07-17T22:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1595 | IBM AIX und VIOS (SQLite): Mehrere Schwachstellen | 2025-07-17T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1594 | IBM Tivoli Netcool/OMNIbus (Eclipse OMR): Mehrere Schwachstellen | 2025-07-17T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1593 | Grafana: Mehrere Schwachstellen | 2025-07-17T22:00:00.000+00:00 | 2025-12-18T23:00:00.000+00:00 |
| wid-sec-w-2025-1592 | Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-17T22:00:00.000+00:00 | 2025-08-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1591 | IBM WebSphere Application Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-17T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:16166 | Red Hat Security Advisory: OpenShift Container Platform 4.14.57 security and extras update | 2025-09-25T04:00:42+00:00 | 2025-12-03T23:59:44+00:00 |
| rhsa-2025:16669 | Red Hat Security Advisory: kernel security update | 2025-09-25T00:40:46+00:00 | 2025-12-22T22:32:26+00:00 |
| rhsa-2025:16667 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.15 security update | 2025-09-25T00:09:21+00:00 | 2026-01-19T03:54:49+00:00 |
| rhsa-2025:16668 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.12 on RHEL 7 security update | 2025-09-25T00:09:06+00:00 | 2026-01-19T03:54:49+00:00 |
| rhsa-2025:16592 | Red Hat Security Advisory: cups security update | 2025-09-24T16:34:55+00:00 | 2025-12-16T21:25:00+00:00 |
| rhsa-2025:16591 | Red Hat Security Advisory: cups security update | 2025-09-24T15:50:17+00:00 | 2025-12-16T21:25:08+00:00 |
| rhsa-2025:16590 | Red Hat Security Advisory: cups security update | 2025-09-24T15:40:20+00:00 | 2025-12-16T21:25:05+00:00 |
| rhsa-2025:16595 | Red Hat Security Advisory: VolSync v0.13 security fixes and container updates | 2025-09-24T15:33:41+00:00 | 2026-01-19T22:23:23+00:00 |
| rhsa-2025:16589 | Red Hat Security Advisory: thunderbird security update | 2025-09-24T14:11:45+00:00 | 2025-11-21T19:27:12+00:00 |
| rhsa-2025:16583 | Red Hat Security Advisory: kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update | 2025-09-24T13:10:55+00:00 | 2026-01-13T22:39:40+00:00 |
| rhsa-2025:16582 | Red Hat Security Advisory: kpatch-patch-4_18_0-553_16_1, kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, and kpatch-patch-4_18_0-553_72_1 security update | 2025-09-24T13:06:20+00:00 | 2026-01-13T22:39:39+00:00 |
| rhsa-2025:16580 | Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, and kpatch-patch-4_18_0-372_145_1 security update | 2025-09-24T12:53:25+00:00 | 2026-01-13T22:39:38+00:00 |
| rhsa-2025:16538 | Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1 security update | 2025-09-24T00:37:28+00:00 | 2026-01-13T22:39:36+00:00 |
| rhsa-2025:16540 | Red Hat Security Advisory: kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update | 2025-09-24T00:31:03+00:00 | 2026-01-13T22:39:37+00:00 |
| rhsa-2025:16541 | Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, and kpatch-patch-5_14_0-70_132_1 security update | 2025-09-24T00:22:33+00:00 | 2026-01-13T22:39:38+00:00 |
| rhsa-2025:16539 | Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1 security update | 2025-09-24T00:22:33+00:00 | 2026-01-13T22:39:36+00:00 |
| rhsa-2025:16514 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2025-09-23T21:34:31+00:00 | 2025-12-08T12:45:12+00:00 |
| rhsa-2025:16535 | Red Hat Security Advisory: OpenShift Container Platform 4.19 ztp-site-generate container | 2025-09-23T21:08:55+00:00 | 2025-12-03T23:59:46+00:00 |
| rhsa-2025:16534 | Red Hat Security Advisory: OpenShift Container Platform 4.12 ztp-site-generate container | 2025-09-23T21:08:07+00:00 | 2026-01-19T14:19:05+00:00 |
| rhsa-2025:16530 | Red Hat Security Advisory: OpenShift Container Platform 4.18 ztp-site-generate container | 2025-09-23T21:00:41+00:00 | 2026-01-19T14:19:03+00:00 |
| rhsa-2025:16529 | Red Hat Security Advisory: OpenShift Container Platform 4.17 ztp-site-generate container | 2025-09-23T20:50:52+00:00 | 2026-01-19T14:19:03+00:00 |
| rhsa-2025:16527 | Red Hat Security Advisory: OpenShift Container Platform 4.16 ztp-site-generate container | 2025-09-23T20:37:14+00:00 | 2026-01-19T14:19:03+00:00 |
| rhsa-2025:16526 | Red Hat Security Advisory: OpenShift Container Platform 4.14 ztp-site-generate container | 2025-09-23T19:55:07+00:00 | 2026-01-19T14:19:03+00:00 |
| rhsa-2025:16524 | Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage | 2025-09-23T19:28:34+00:00 | 2026-01-15T18:48:31+00:00 |
| rhsa-2025:16515 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-09-23T18:32:48+00:00 | 2025-12-16T15:20:26+00:00 |
| rhsa-2025:16487 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2025-09-23T18:04:58+00:00 | 2025-12-08T12:45:05+00:00 |
| rhsa-2025:16488 | Red Hat Security Advisory: podman security update | 2025-09-23T16:48:17+00:00 | 2025-12-16T15:20:22+00:00 |
| rhsa-2025:16504 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update | 2025-09-23T15:46:00+00:00 | 2025-11-21T19:38:37+00:00 |
| rhsa-2025:16482 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-09-23T15:24:48+00:00 | 2025-12-16T15:20:17+00:00 |
| rhsa-2025:16481 | Red Hat Security Advisory: podman security update | 2025-09-23T15:19:02+00:00 | 2025-12-16T15:20:12+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-054-01 | PTC ThingWorx Edge | 2023-02-27T20:46:39.753316Z | 2023-02-27T20:46:39.753316Z |
| icsa-23-052-01 | Mitsubishi Electric MELSOFT iQ AppPortal | 2023-02-27T20:46:39.744091Z | 2023-02-27T20:46:39.744091Z |
| icsa-23-047-13 | Sub-IoT DASH 7 Alliance Protocol stack implementation | 2023-02-20T23:30:33.558518Z | 2023-02-20T23:30:33.558518Z |
| icsa-23-045-01 | Weintek EasyBuilder Pro cMT Series | 2023-02-20T16:33:49.721285Z | 2023-02-20T16:33:49.721285Z |
| icsma-23-047-01 | BD Alaris Infusion Central | 2023-02-16T00:00:00.000000Z | 2023-02-27T13:27:41.553636Z |
| icsa-23-089-01 | Hitachi Energy IEC 61850 MMS-Server | 2023-02-14T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-23-047-12 | Siemens JT Open, JT Utilities, and Parasolid | 2023-02-14T00:00:00.000000Z | 2023-02-14T00:00:00.000000Z |
| icsa-23-047-11 | Siemens Mendix | 2023-02-14T00:00:00.000000Z | 2023-02-14T00:00:00.000000Z |
| icsa-23-047-10 | Siemens COMOS | 2023-02-14T00:00:00.000000Z | 2023-02-14T00:00:00.000000Z |
| icsa-23-047-09 | Siemens SIMATIC Industrial Products | 2023-02-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-047-08 | Siemens RUGGEDCOM APE1808 | 2023-02-14T00:00:00.000000Z | 2023-09-12T00:00:00.000000Z |
| icsa-23-047-07 | Siemens TIA Project-Server formerly known as TIA Multiuser Server | 2023-02-14T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-23-047-06 | Siemens Simcenter Femap before V2023.1 | 2023-02-14T00:00:00.000000Z | 2023-02-14T00:00:00.000000Z |
| icsa-23-047-05 | Siemens SiPass integrated AC5102 / ACC-G2 and ACC-AP | 2023-02-14T00:00:00.000000Z | 2023-02-14T00:00:00.000000Z |
| icsa-23-047-04 | Siemens Brownfield Connectivity Gateway | 2023-02-14T00:00:00.000000Z | 2023-02-14T00:00:00.000000Z |
| icsa-23-047-03 | Siemens Brownfield Connectivity Client | 2023-02-14T00:00:00.000000Z | 2023-02-14T00:00:00.000000Z |
| icsa-23-047-02 | Siemens SCALANCE X200 IRT | 2023-02-14T00:00:00.000000Z | 2023-02-14T00:00:00.000000Z |
| icsa-23-047-01 | Siemens Solid Edge | 2023-02-14T00:00:00.000000Z | 2023-03-14T00:00:00.000000Z |
| icsa-23-040-04 | Horner Automation Cscape Envision RV | 2023-02-09T00:00:00.000000Z | 2023-02-09T00:00:00.000000Z |
| icsa-23-040-03 | Johnson Controls System Configuration Tool (SCT) | 2023-02-09T00:00:00.000000Z | 2023-02-09T00:00:00.000000Z |
| icsa-23-040-02 | LS ELECTRIC XBC-DN32U | 2023-02-09T00:00:00.000000Z | 2023-02-09T00:00:00.000000Z |
| icsa-23-040-01 | Control By Web X-400, X-600M | 2023-02-09T00:00:00.000000Z | 2023-02-09T00:00:00.000000Z |
| icsa-23-037-01 | EnOcean SmartServer | 2023-02-07T00:00:00.000000Z | 2023-02-07T00:00:00.000000Z |
| icsa-23-033-03 | Baicells Nova | 2023-02-02T07:00:00.000000Z | 2023-02-02T07:00:00.000000Z |
| icsa-23-033-05 | Delta Electronics DX-2100-L1-CN | 2023-02-02T00:00:00.000000Z | 2023-02-02T00:00:00.000000Z |
| icsa-23-033-04 | Delta Electronics DVW-W02W2-E2 | 2023-02-02T00:00:00.000000Z | 2023-02-02T00:00:00.000000Z |
| icsa-23-033-02 | Mitsubishi Electric GOT2000 Series and GT SoftGOT2000 | 2023-02-02T00:00:00.000000Z | 2023-02-02T00:00:00.000000Z |
| icsa-23-033-01 | Delta Electronics DIAScreen | 2023-02-02T00:00:00.000000Z | 2023-02-02T00:00:00.000000Z |
| icsa-23-031-01 | Delta Electronics DOPSoft | 2023-01-31T00:00:00.000000Z | 2023-01-31T00:00:00.000000Z |
| icsa-23-026-02 | Econolite EOS (Update A) | 2023-01-26T07:00:00.000000Z | 2023-06-22T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-staros-privilege-esc-pyb7ytd | Cisco StarOS Privilege Escalation Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-staros-priv-esc-ggcumfxv | Cisco StarOS Privilege Escalation Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-sdwan-xss-xxelfpc3 | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ndb-path-traversal-wvdyxzpy | Cisco Nexus Data Broker Software Path Traversal Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ise-xxs-mf5cbyx5 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ise-auth-bypass-ujwqltzm | Cisco Identity Services Engine Authorization Bypass Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ind-dos-bwg634zn | Cisco Industrial Network Director Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-fmc-xss-ylrjqqu | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-expressway-vcs-dos-n6xxtmzb | Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-zztugtg3 | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cvdsd-missing-auth-rqo88rnj | Cisco Vision Dynamic Signage Director Missing Authentication Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cdp-rcedos-mahr8vnx | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cdp-memleak-heyebx9 | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-zbfw-94ckg4g | Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-xbace-oncebys | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-11-02T15:15:42+00:00 |
| cisco-sa-wpa-dos-cxshjerc | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-webui-auth-bypass-6j2byuc7 | Cisco IOS XE Software Web UI Authorization Bypass Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-web-ui-exnfmcpo | Cisco IOS XE Software Web UI Improper Input Validation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-unauth-file-access-ebtwkkvw | Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-splitdns-spwqpdgw | Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-rommon-secboot-7jgvlvyc | Cisco IOS XE ROM Monitor Software Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-profinet-j9qmchpb | Cisco IOS and IOS XE Software PROFINET Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-12-09T15:09:18+00:00 |
| cisco-sa-mdns-dos-3th6ca9j | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-le-drtob625 | Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-jp-dos-g5ffgm8y | Cisco Catalyst 9200 Series Switches Jumbo Frame Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-isr4461-gkkurohx | Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-ipsla-jw2djmsv | Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iox-usb-guestshell-wmevscdj | Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-wlc-fnfv9-evraqpnx | Cisco IOS XE Software for Catalyst 9800 Series and Cisco AireOS Software for Cisco WLC Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-iosxe-umbrella-dos-t2qmux37 | Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38716 | hfs: fix general protection fault in hfs_find_init() | 2025-09-02T00:00:00.000Z | 2025-12-03T01:37:33.000Z |
| msrc_cve-2025-38715 | hfs: fix slab-out-of-bounds in hfs_bnode_read() | 2025-09-02T00:00:00.000Z | 2025-09-06T01:05:31.000Z |
| msrc_cve-2025-38714 | hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() | 2025-09-02T00:00:00.000Z | 2025-09-06T01:05:58.000Z |
| msrc_cve-2025-38713 | hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() | 2025-09-02T00:00:00.000Z | 2025-09-06T01:14:32.000Z |
| msrc_cve-2025-38712 | hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() | 2025-09-02T00:00:00.000Z | 2025-09-06T01:10:07.000Z |
| msrc_cve-2025-38711 | smb/server: avoid deadlock when linking with ReplaceIfExists | 2025-09-02T00:00:00.000Z | 2025-09-06T01:10:53.000Z |
| msrc_cve-2025-38710 | gfs2: Validate i_depth for exhash directories | 2025-09-02T00:00:00.000Z | 2025-12-03T01:37:29.000Z |
| msrc_cve-2025-38709 | loop: Avoid updating block size under exclusive owner | 2025-09-02T00:00:00.000Z | 2025-12-05T01:02:51.000Z |
| msrc_cve-2025-38708 | drbd: add missing kref_get in handle_write_conflicts | 2025-09-02T00:00:00.000Z | 2025-09-06T01:05:12.000Z |
| msrc_cve-2025-38707 | fs/ntfs3: Add sanity check for file name | 2025-09-02T00:00:00.000Z | 2025-09-06T01:07:31.000Z |
| msrc_cve-2025-38706 | ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() | 2025-09-02T00:00:00.000Z | 2025-09-06T01:13:41.000Z |
| msrc_cve-2025-38705 | drm/amd/pm: fix null pointer access | 2025-09-02T00:00:00.000Z | 2026-01-08T14:45:17.000Z |
| msrc_cve-2025-38704 | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access | 2025-09-02T00:00:00.000Z | 2026-01-08T14:45:44.000Z |
| msrc_cve-2025-38703 | drm/xe: Make dma-fences compliant with the safe access rules | 2025-09-02T00:00:00.000Z | 2025-09-06T01:11:40.000Z |
| msrc_cve-2025-38702 | fbdev: fix potential buffer overflow in do_register_framebuffer() | 2025-09-02T00:00:00.000Z | 2025-09-06T01:08:54.000Z |
| msrc_cve-2025-38701 | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 2025-09-02T00:00:00.000Z | 2025-09-06T01:14:03.000Z |
| msrc_cve-2025-38700 | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 2025-09-02T00:00:00.000Z | 2025-09-06T01:14:54.000Z |
| msrc_cve-2025-38699 | scsi: bfa: Double-free fix | 2025-09-02T00:00:00.000Z | 2025-09-06T01:07:53.000Z |
| msrc_cve-2025-38698 | jfs: Regular file corruption check | 2025-09-02T00:00:00.000Z | 2025-09-06T01:04:52.000Z |
| msrc_cve-2025-38697 | jfs: upper bound check of tree index in dbAllocAG | 2025-09-02T00:00:00.000Z | 2025-09-06T01:06:21.000Z |
| msrc_cve-2025-38696 | MIPS: Don't crash in stack_top() for tasks without ABI or vDSO | 2025-09-02T00:00:00.000Z | 2025-09-06T01:01:49.000Z |
| msrc_cve-2025-38695 | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 2025-09-02T00:00:00.000Z | 2025-09-06T01:04:14.000Z |
| msrc_cve-2025-38692 | exfat: add cluster chain loop check for dir | 2025-09-02T00:00:00.000Z | 2025-12-03T01:37:24.000Z |
| msrc_cve-2025-38691 | pNFS: Fix uninited ptr deref in block/scsi layout | 2025-09-02T00:00:00.000Z | 2025-09-06T01:02:01.000Z |
| msrc_cve-2025-38688 | iommufd: Prevent ALIGN() overflow | 2025-09-02T00:00:00.000Z | 2025-09-06T01:01:17.000Z |
| msrc_cve-2025-38687 | comedi: fix race between polling and detaching | 2025-09-02T00:00:00.000Z | 2025-09-06T01:09:14.000Z |
| msrc_cve-2025-38685 | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | 2025-09-02T00:00:00.000Z | 2025-09-06T01:01:41.000Z |
| msrc_cve-2025-38684 | net/sched: ets: use old 'nbands' while purging unused classes | 2025-09-02T00:00:00.000Z | 2025-09-06T01:06:52.000Z |
| msrc_cve-2025-38681 | mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() | 2025-09-02T00:00:00.000Z | 2025-09-06T01:03:45.000Z |
| msrc_cve-2025-38680 | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 2025-09-02T00:00:00.000Z | 2025-09-06T01:02:38.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201511-0126 | Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpn… | 2025-12-22T20:06:59.011000Z |
| var-200809-0007 | slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users… | 2025-12-22T20:06:58.939000Z |
| var-201706-0361 | The error page mechanism of the Java Servlet Specification requires that, when an error o… | 2025-12-22T20:06:27.629000Z |
| var-201208-0344 | libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not pro… | 2025-12-22T20:06:27.560000Z |
| var-201111-0129 | Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted re… | 2025-12-22T20:06:26.762000Z |
| var-201910-1499 | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find(… | 2025-12-22T20:06:23.936000Z |
| var-202006-1640 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 a… | 2025-12-22T20:06:18.309000Z |
| var-201904-1407 | A use after free issue was addressed with improved memory management. This issue affected… | 2025-12-22T20:04:49.491000Z |
| var-200505-0162 | Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based … | 2025-12-22T20:04:48.916000Z |
| var-202108-1268 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in… | 2025-12-22T20:04:41.184000Z |
| var-202203-0083 | Non-transparent sharing of branch predictor within a context in some Intel(R) Processors … | 2025-12-22T20:04:39.685000Z |
| var-200309-0035 | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may… | 2025-12-22T20:04:36.698000Z |
| var-200703-0029 | Stack-based buffer overflow in the Apple-specific Samba module (SMB File Server) in Apple… | 2025-12-22T20:04:34.806000Z |
| var-201912-0496 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T20:04:32.429000Z |
| var-202105-1457 | A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in … | 2025-12-22T20:04:30.853000Z |
| var-201110-0379 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2025-12-22T20:04:30.755000Z |
| var-200809-0183 | The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentia… | 2025-12-22T20:04:30.613000Z |
| var-201912-0646 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T20:04:29.745000Z |
| var-201201-0025 | Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers … | 2025-12-22T20:04:19.661000Z |
| var-201903-0423 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2025-12-22T20:03:48.461000Z |
| var-202203-0131 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2025-12-22T20:03:48.202000Z |
| var-202109-1804 | A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocate… | 2025-12-22T20:03:39.417000Z |
| var-202203-0129 | A cookie management issue was addressed with improved state management. This issue is fix… | 2025-12-22T20:03:21.650000Z |
| var-201408-0095 | d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n… | 2025-12-22T20:03:21.289000Z |
| var-201206-0117 | Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and o… | 2025-12-22T20:03:20.669000Z |
| var-200506-0133 | Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow r… | 2025-12-22T20:03:19.985000Z |
| var-202108-2039 | A logic issue was addressed with improved state management. This issue is fixed in macOS … | 2025-12-22T20:02:44.613000Z |
| var-201912-1378 | SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an… | 2025-12-22T20:02:43.545000Z |
| var-200703-0023 | Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assi… | 2025-12-22T20:02:43.388000Z |
| var-200503-0010 | Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers… | 2025-12-22T20:02:41.926000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-010584 | AssetView and AssetView PLATINUM contain multiple vulnerabilities | 2018-01-12T15:32+09:00 | 2018-01-12T15:32+09:00 |
| jvndb-2017-010236 | Cross-site Scripting Vulnerability in Fujitsu NetCOBOL | 2018-01-12T15:07+09:00 | 2018-01-12T15:07+09:00 |
| jvndb-2017-004687 | Cross-site Scripting Vulnerability in Fujitsu Interstage List Works | 2018-01-12T14:58+09:00 | 2018-01-12T14:58+09:00 |
| jvndb-2018-000001 | Lhaplus vulnerable to improper verification when expanding ZIP64 archives | 2018-01-11T14:18+09:00 | 2018-04-04T12:33+09:00 |
| jvndb-2017-000252 | MQTT.js issue in handling PUBLISH packets | 2017-12-25T14:00+09:00 | 2018-04-04T14:02+09:00 |
| jvndb-2017-000251 | The installer of Content Manager Assistant for PlayStation may insecurely load Dynamic Link Libraries | 2017-12-22T15:50+09:00 | 2018-04-04T14:04+09:00 |
| jvndb-2017-000250 | The installer of Music Center for PC may insecurely load Dynamic Link Libraries | 2017-12-22T15:50+09:00 | 2018-04-04T13:53+09:00 |
| jvndb-2017-000248 | OneThird CMS vulnerable to directory traversal | 2017-12-19T13:48+09:00 | 2018-04-04T13:58+09:00 |
| jvndb-2017-000249 | Multiple vulnerabilities in H2O | 2017-12-18T15:17+09:00 | 2018-04-04T13:49+09:00 |
| jvndb-2017-010280 | Fluentd vulenrable to escape sequence injection | 2017-12-11T14:13+09:00 | 2017-12-11T14:13+09:00 |
| jvndb-2017-000247 | Qt for Android environment variables alteration | 2017-12-11T13:40+09:00 | 2018-03-14T13:44+09:00 |
| jvndb-2017-000246 | Qt for Android vulnerable to OS command injection | 2017-12-11T13:40+09:00 | 2018-03-14T13:48+09:00 |
| jvndb-2017-010275 | Cross-site Scripting Vulnerability in JP1/Service Support and JP1/Integrated Management - Service Support | 2017-12-11T11:46+09:00 | 2017-12-20T11:09+09:00 |
| jvndb-2017-000245 | The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries | 2017-12-06T14:42+09:00 | 2018-03-14T14:07+09:00 |
| jvndb-2017-000244 | Multiple vulnerabilities in multiple Buffalo broadband routers | 2017-12-01T16:17+09:00 | 2018-03-14T14:15+09:00 |
| jvndb-2017-010043 | Cross-site Scripting Vulnerability in JP1/Operations Analytics | 2017-12-01T14:59+09:00 | 2017-12-20T11:09+09:00 |
| jvndb-2017-000243 | Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection | 2017-11-30T15:50+09:00 | 2018-03-14T14:20+09:00 |
| jvndb-2017-000241 | Multiple vulnerabilities in Wireless mobile storage "Digizo ShAirDisk" PTW-WMS1 | 2017-11-30T15:45+09:00 | 2018-03-14T14:13+09:00 |
| jvndb-2017-000242 | StreamRelay.net.exe and sDNSProxy.exe vulnerable to denial-of-service (DoS) | 2017-11-29T14:54+09:00 | 2018-03-14T14:26+09:00 |
| jvndb-2017-009884 | QND Advance/Standard vulnerable to directory traversal | 2017-11-28T11:26+09:00 | 2018-03-14T14:17+09:00 |
| jvndb-2017-000240 | PWR-Q200 vulnerable to DNS cache poisoning attacks | 2017-11-22T13:51+09:00 | 2018-03-14T14:19+09:00 |
| jvndb-2017-000239 | The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries | 2017-11-21T15:40+09:00 | 2018-03-14T14:25+09:00 |
| jvndb-2017-000238 | Robotic appliance COCOROBO vulnerable to session management | 2017-11-16T14:03+09:00 | 2018-03-14T14:09+09:00 |
| jvndb-2017-000237 | Multiple vulnerabilities in BOOK WALKER for Windows/Mac | 2017-11-14T15:19+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000236 | WordPress plugin "TablePress" vulnerable to improper restriction of XML external entity (XXE) references | 2017-11-14T13:26+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000235 | CS-Cart Japanese Edition vulnerable to cross-site scripting | 2017-11-13T15:30+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000234 | Installer of HYPER SBI may insecurely load Dynamic Link Libraries | 2017-11-09T12:29+09:00 | 2018-03-07T14:01+09:00 |
| jvndb-2017-000233 | I-O DATA LAN DISK Connect vulnerable to denial-of-service (DoS) | 2017-11-06T13:48+09:00 | 2018-03-07T14:01+09:00 |
| jvndb-2017-000232 | Wi-Fi STATION L-02F vulnerable to buffer overflow | 2017-11-06T13:48+09:00 | 2018-03-07T14:00+09:00 |
| jvndb-2017-000213 | Installer of "Flets Easy Setup Tool" may insecurely load Dynamic Link Libraries | 2017-11-02T13:57+09:00 | 2018-03-14T13:48+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20637-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-08-29T14:01:57Z | 2025-08-29T14:01:57Z |
| suse-su-2025:03029-1 | Security update for python-future | 2025-08-29T13:49:15Z | 2025-08-29T13:49:15Z |
| suse-su-2025:03028-1 | Security update for python-future | 2025-08-29T13:49:02Z | 2025-08-29T13:49:02Z |
| suse-su-2025:20687-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-08-29T13:42:59Z | 2025-08-29T13:42:59Z |
| suse-su-2025:20686-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-08-29T13:42:59Z | 2025-08-29T13:42:59Z |
| suse-su-2025:20636-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-08-29T13:42:59Z | 2025-08-29T13:42:59Z |
| suse-su-2025:20635-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-08-29T13:42:59Z | 2025-08-29T13:42:59Z |
| suse-su-2025:20685-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-08-29T13:36:25Z | 2025-08-29T13:36:25Z |
| suse-su-2025:20634-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-08-29T13:36:25Z | 2025-08-29T13:36:25Z |
| suse-su-2025:20684-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-08-29T13:31:00Z | 2025-08-29T13:31:00Z |
| suse-su-2025:20633-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-08-29T13:31:00Z | 2025-08-29T13:31:00Z |
| suse-su-2025:03026-1 | Security update for libsoup | 2025-08-29T12:42:45Z | 2025-08-29T12:42:45Z |
| suse-su-2025:03025-1 | Security update for javamail | 2025-08-29T12:42:21Z | 2025-08-29T12:42:21Z |
| suse-su-2025:03024-1 | Security update for tomcat | 2025-08-29T12:40:19Z | 2025-08-29T12:40:19Z |
| suse-su-2025:03023-1 | Security update for the Linux Kernel | 2025-08-29T11:54:08Z | 2025-08-29T11:54:08Z |
| suse-su-2025:03022-1 | Security update for git | 2025-08-29T11:51:56Z | 2025-08-29T11:51:56Z |
| suse-su-2025:03021-1 | Security update for netty | 2025-08-29T09:42:17Z | 2025-08-29T09:42:17Z |
| suse-su-2025:20665-1 | Security update for gnutls | 2025-08-29T09:03:56Z | 2025-08-29T09:03:56Z |
| suse-su-2025:20664-1 | Security update for Mesa | 2025-08-29T08:57:25Z | 2025-08-29T08:57:25Z |
| suse-su-2025:20663-1 | Security update for jbigkit | 2025-08-29T08:57:25Z | 2025-08-29T08:57:25Z |
| suse-su-2025:03020-1 | Security update for postgresql14 | 2025-08-29T08:32:23Z | 2025-08-29T08:32:23Z |
| suse-su-2025:03019-1 | Security update for postgresql14 | 2025-08-29T08:31:52Z | 2025-08-29T08:31:52Z |
| suse-su-2025:03018-1 | Security update for postgresql15 | 2025-08-29T08:31:14Z | 2025-08-29T08:31:14Z |
| suse-su-2025:03017-1 | Security update for udisks2 | 2025-08-29T08:29:57Z | 2025-08-29T08:29:57Z |
| suse-su-2025:03016-1 | Security update for udisks2 | 2025-08-29T08:28:26Z | 2025-08-29T08:28:26Z |
| suse-su-2025:03015-1 | Security update for udisks2 | 2025-08-29T08:28:07Z | 2025-08-29T08:28:07Z |
| suse-su-2025:20662-1 | Security update for polkit | 2025-08-29T07:50:47Z | 2025-08-29T07:50:47Z |
| suse-su-2025:20661-1 | Security update for libxslt | 2025-08-29T07:49:11Z | 2025-08-29T07:49:11Z |
| suse-su-2025:03012-1 | security update for git, git-lfs, obs-scm-bridge, python-PyYAML | 2025-08-29T00:07:40Z | 2025-08-29T00:07:40Z |
| suse-su-2025:20660-1 | Security update for coreutils | 2025-08-28T15:14:37Z | 2025-08-28T15:14:37Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14710-1 | govulncheck-vulndb-0.0.20250128T150132-1.1 on GA media | 2025-01-29T00:00:00Z | 2025-01-29T00:00:00Z |
| opensuse-su-2025:14709-1 | fake-gcs-server-1.52.1-1.1 on GA media | 2025-01-29T00:00:00Z | 2025-01-29T00:00:00Z |
| opensuse-su-2025:14708-1 | owasp-modsecurity-crs-4.9.0-1.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14707-1 | openvpn-2.6.10-5.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14706-1 | corepack22-22.13.0-1.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14705-1 | kernel-devel-longterm-6.12.11-1.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14704-1 | govulncheck-vulndb-0.0.20250117T214834-1.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14703-1 | apache2-mod_security2-2.9.8-2.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:0034-1 | Security update for chromium | 2025-01-27T07:28:18Z | 2025-01-27T07:28:18Z |
| opensuse-su-2025:14702-1 | python311-sentry-sdk-2.20.0-1.1 on GA media | 2025-01-27T00:00:00Z | 2025-01-27T00:00:00Z |
| opensuse-su-2025:14701-1 | python311-asteval-1.0.6-1.1 on GA media | 2025-01-27T00:00:00Z | 2025-01-27T00:00:00Z |
| opensuse-su-2025:14700-1 | iperf-3.18-1.1 on GA media | 2025-01-27T00:00:00Z | 2025-01-27T00:00:00Z |
| opensuse-su-2025:14699-1 | gstreamer-plugins-good-1.24.11-2.1 on GA media | 2025-01-27T00:00:00Z | 2025-01-27T00:00:00Z |
| opensuse-su-2025:14698-1 | chromedriver-132.0.6834.110-1.1 on GA media | 2025-01-26T00:00:00Z | 2025-01-26T00:00:00Z |
| opensuse-su-2025:0033-1 | Security update for qt6-connectivity | 2025-01-25T17:01:16Z | 2025-01-25T17:01:16Z |
| opensuse-su-2025:14697-1 | ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media | 2025-01-25T00:00:00Z | 2025-01-25T00:00:00Z |
| opensuse-su-2025:14696-1 | libopenssl-3-devel-3.2.3-4.1 on GA media | 2025-01-25T00:00:00Z | 2025-01-25T00:00:00Z |
| opensuse-su-2025:14695-1 | go1.23-1.23.5-1.1 on GA media | 2025-01-25T00:00:00Z | 2025-01-25T00:00:00Z |
| opensuse-su-2025:14694-1 | go1.22-1.22.11-1.1 on GA media | 2025-01-25T00:00:00Z | 2025-01-25T00:00:00Z |
| opensuse-su-2025:14693-1 | go1.24-1.24rc2-1.1 on GA media | 2025-01-24T00:00:00Z | 2025-01-24T00:00:00Z |
| opensuse-su-2025:0030-1 | Security update for dante | 2025-01-23T19:01:59Z | 2025-01-23T19:01:59Z |
| opensuse-su-2025:0025-1 | Security update for cheat | 2025-01-23T19:01:34Z | 2025-01-23T19:01:34Z |
| opensuse-su-2025:0024-1 | Security update for qt6-webengine | 2025-01-23T09:21:43Z | 2025-01-23T09:21:43Z |
| opensuse-su-2025:14692-1 | libQt6Bluetooth6-6.8.1-2.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14691-1 | python313-3.13.1-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14690-1 | python311-azure-storage-blob-12.24.1-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14689-1 | podman-5.3.2-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14688-1 | phpMyAdmin-5.2.2-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14687-1 | nodejs-electron-33.3.2-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14686-1 | java-21-openjdk-21.0.6.0-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24142 | fortinet FortiADC信息泄露漏洞 | 2025-10-16 | 2025-10-17 |
| cnvd-2025-31403 | ERPNEXT group_by参数SQL注入漏洞 | 2025-10-15 | 2025-12-26 |
| cnvd-2025-31402 | ERPNext get_rfq_containing_supplier函数SQL注入漏洞 | 2025-10-15 | 2025-12-26 |
| cnvd-2025-31401 | ERPNext filters.disabled参数SQL注入漏洞 | 2025-10-15 | 2025-12-26 |
| cnvd-2025-31400 | ERPNext import_coa函数SQL注入漏洞 | 2025-10-15 | 2025-12-26 |
| cnvd-2025-30291 | QNAP Qsync Central资源消耗不受控制漏洞 | 2025-10-15 | 2025-12-09 |
| cnvd-2025-30290 | QNAP Qsync Central资源分配无限制漏洞（CNVD-2025-30290） | 2025-10-15 | 2025-12-09 |
| cnvd-2025-30289 | QNAP Qsync Central资源分配无限制漏洞（CNVD-2025-30289） | 2025-10-15 | 2025-12-09 |
| cnvd-2025-30288 | QNAP Qsync Central资源分配无限制漏洞（CNVD-2025-30288） | 2025-10-15 | 2025-12-09 |
| cnvd-2025-30287 | QNAP Qsync Central资源分配无限制漏洞 | 2025-10-15 | 2025-12-09 |
| cnvd-2025-28847 | Tenda W12空指针取消引用漏洞 | 2025-10-15 | 2025-11-19 |
| cnvd-2025-27906 | Simple Online Hotel Reservation System跨站脚本漏洞 | 2025-10-15 | 2025-11-14 |
| cnvd-2025-27801 | QNAP Qsync Central SQL注入漏洞（CNVD-2025-27801） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27800 | QNAP Qsync Central SQL注入漏洞 | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27745 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27745） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27744 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27744） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27743 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27743） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27742 | QNAP QTS和QuTS hero格式化字符串错误漏洞 | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27741 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27741） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27740 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27740） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27739 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27739） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27738 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27738） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27737 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27737） | 2025-10-15 | 2025-11-12 |
| cnvd-2025-27566 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27566） | 2025-10-15 | 2025-11-10 |
| cnvd-2025-27565 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27565） | 2025-10-15 | 2025-11-10 |
| cnvd-2025-27564 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27564） | 2025-10-15 | 2025-11-10 |
| cnvd-2025-27563 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27563） | 2025-10-15 | 2025-11-10 |
| cnvd-2025-27562 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27562） | 2025-10-15 | 2025-11-10 |
| cnvd-2025-27561 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27561） | 2025-10-15 | 2025-11-10 |
| cnvd-2025-27560 | QNAP QTS和QuTS hero空指针取消引用漏洞（CNVD-2025-27560） | 2025-10-15 | 2025-11-10 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-1026 | Multiples vulnérabilités dans les produits Synology | 2024-11-28T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2024-avi-1025 | Multiples vulnérabilités dans les produits Mozilla | 2024-11-27T00:00:00.000000 | 2024-11-27T00:00:00.000000 |
| certfr-2024-avi-1024 | Multiples vulnérabilités dans les produits Microsoft | 2024-11-27T00:00:00.000000 | 2024-11-27T00:00:00.000000 |
| certfr-2024-avi-1023 | Vulnérabilité dans Microsoft Azure | 2024-11-27T00:00:00.000000 | 2024-11-27T00:00:00.000000 |
| certfr-2024-avi-1022 | Multiples vulnérabilités dans les produits Splunk | 2024-11-27T00:00:00.000000 | 2024-11-27T00:00:00.000000 |
| certfr-2024-avi-1021 | Multiples vulnérabilités dans GitLab | 2024-11-27T00:00:00.000000 | 2024-11-27T00:00:00.000000 |
| certfr-2024-avi-1020 | Vulnérabilité dans Palo Alto Networks GlobalProtect App | 2024-11-26T00:00:00.000000 | 2024-11-26T00:00:00.000000 |
| certfr-2024-avi-1019 | Multiples vulnérabilités dans Netgate pfSense | 2024-11-26T00:00:00.000000 | 2024-11-26T00:00:00.000000 |
| certfr-2024-avi-1018 | Multiples vulnérabilités dans les produits Qnap | 2024-11-25T00:00:00.000000 | 2024-11-25T00:00:00.000000 |
| certfr-2024-avi-1017 | Multiples vulnérabilités dans Centreon Central server | 2024-11-25T00:00:00.000000 | 2024-11-25T00:00:00.000000 |
| certfr-2024-avi-1016 | Vulnérabilité dans NetApp Brocade SAN Navigator | 2024-11-25T00:00:00.000000 | 2024-11-25T00:00:00.000000 |
| certfr-2024-avi-1015 | Multiples vulnérabilités dans les produits IBM | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1014 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1013 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1012 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1011 | Vulnérabilité dans Centreon Web | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1010 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1009 | Multiples vulnérabilités dans Drupal | 2024-11-21T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-avi-1008 | Multiples vulnérabilités dans Wireshark | 2024-11-21T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-avi-1007 | Multiples vulnérabilités dans PHP | 2024-11-21T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-avi-1006 | Multiples vulnérabilités dans les produits Atlassian | 2024-11-20T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-1005 | Multiples vulnérabilités dans les produits Spring | 2024-11-20T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-1004 | Multiples vulnérabilités dans les produits Apple | 2024-11-20T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-1003 | Vulnérabilité dans Google Chrome | 2024-11-20T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-1002 | Vulnérabilité dans les produits Trend Micro | 2024-11-19T00:00:00.000000 | 2024-11-19T00:00:00.000000 |
| certfr-2024-avi-1001 | Vulnérabilité dans les produits Palo Alto Networks | 2024-11-19T00:00:00.000000 | 2024-11-19T00:00:00.000000 |
| certfr-2024-avi-1000 | Multiples vulnérabilités dans Apache Tomcat | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0999 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0998 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0997 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |