Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2025-69071
8.1 (3.1)
WordPress TanTum theme <= 1.1.13 - Local File Inclusio… AncoraThemes
TanTum
2026-01-22T16:52:24.186Z 2026-04-28T16:14:35.776Z
CVE-2025-69056
7.1 (3.1)
WordPress Hotel Listing plugin <= 1.4.0 - Reflected Cr… e-plugins
Hotel Listing
2026-01-22T16:52:21.460Z 2026-04-28T16:14:35.754Z
CVE-2025-69068
8.1 (3.1)
WordPress Muji theme <= 1.2.0 - Local File Inclusion v… AncoraThemes
Muji
2026-01-22T16:52:23.772Z 2026-04-28T16:14:35.723Z
CVE-2025-69058
8.1 (3.1)
WordPress PartyMaker theme <= 1.1.15 - Local File Incl… AncoraThemes
PartyMaker
2026-01-22T16:52:21.863Z 2026-04-28T16:14:35.681Z
CVE-2025-69070
8.1 (3.1)
WordPress Tornados theme <= 2.1 - Local File Inclusion… AncoraThemes
Tornados
2026-01-22T16:52:23.978Z 2026-04-28T16:14:35.679Z
CVE-2025-69055
6.5 (3.1)
WordPress BM Content Builder plugin < 3.16.3.3 - Arbit… SeaTheme
BM Content Builder
2026-01-22T16:52:21.243Z 2026-04-28T16:14:35.671Z
CVE-2025-69067
8.1 (3.1)
WordPress Tails theme <= 1.4.12 - Local File Inclusion… AncoraThemes
Tails
2026-01-22T16:52:23.509Z 2026-04-28T16:14:35.665Z
CVE-2025-69043
8.1 (3.1)
WordPress Rashy theme <= 1.1.3 - Local File Inclusion … goalthemes
Rashy
2026-01-22T16:52:18.567Z 2026-04-28T16:14:35.625Z
CVE-2025-69052
9.8 (3.1)
WordPress Registration & Login with Mobile Phone Numbe… FmeAddons
Registration & Login with Mobile Phone Number for WooCommerce
2026-01-22T16:52:20.494Z 2026-04-28T16:14:35.624Z
CVE-2025-69065
8.1 (3.1)
WordPress Snow Mountain theme <= 1.4.3 - Local File In… AncoraThemes
Snow Mountain
2026-01-22T16:52:23.109Z 2026-04-28T16:14:35.617Z
CVE-2025-69062
8.1 (3.1)
WordPress Weedles theme <= 1.1.12 - Local File Inclusi… AncoraThemes
Weedles
2026-01-22T16:52:22.689Z 2026-04-28T16:14:35.616Z
CVE-2025-69066
8.1 (3.1)
WordPress Indoor Plants theme <= 1.2.7 - Local File In… AncoraThemes
Indoor Plants
2026-01-22T16:52:23.315Z 2026-04-28T16:14:35.604Z
CVE-2025-69057
8.1 (3.1)
WordPress Eldon theme <= 1.0 - Local File Inclusion vu… Edge-Themes
Eldon
2026-01-22T16:52:21.683Z 2026-04-28T16:14:35.597Z
CVE-2025-69059
8.1 (3.1)
WordPress DiveIt theme <= 1.4.3 - Local File Inclusion… AncoraThemes
DiveIt
2026-01-22T16:52:22.064Z 2026-04-28T16:14:35.593Z
CVE-2025-69064
8.1 (3.1)
WordPress Pets Land theme <= 1.2.8 - Local File Inclus… AncoraThemes
Pets Land
2026-01-22T16:52:22.874Z 2026-04-28T16:14:35.575Z
CVE-2025-69063
8.6 (3.1)
WordPress New User Approve plugin <= 3.2.0 - Broken Ac… Saad Iqbal
New User Approve
2026-02-20T15:46:45.384Z 2026-04-28T16:14:35.569Z
CVE-2025-69060
8.1 (3.1)
WordPress uReach theme <= 1.3.3 - Local File Inclusion… AncoraThemes
uReach
2026-01-22T16:52:22.253Z 2026-04-28T16:14:35.539Z
CVE-2025-69061
8.1 (3.1)
WordPress MoveMe theme <= 1.2.15 - Local File Inclusio… AncoraThemes
MoveMe
2026-01-22T16:52:22.452Z 2026-04-28T16:14:35.538Z
CVE-2025-69053
7.1 (3.1)
WordPress Universal Video Player plugin <= 3.8.4 - Ref… LambertGroup
Universal Video Player
2026-01-22T16:52:20.738Z 2026-04-28T16:14:35.525Z
CVE-2025-69054
7.1 (3.1)
WordPress Super Logos Showcase plugin <= 2.8 - Reflect… highwarden
Super Logos Showcase
2026-01-22T16:52:20.929Z 2026-04-28T16:14:35.508Z
CVE-2025-69050
8.1 (3.1)
WordPress Overworld theme <= 1.3 - Local File Inclusio… Edge-Themes
Overworld
2026-01-22T16:52:20.020Z 2026-04-28T16:14:35.400Z
CVE-2025-69049
8.1 (3.1)
WordPress Töbel theme <= 1.6 - Local File Inclusion vu… Elated-Themes
Töbel
2026-01-22T16:52:19.830Z 2026-04-28T16:14:35.299Z
CVE-2025-69051
7.1 (3.1)
WordPress ListingPro Reviews theme <= 1.7 - Reflected … CridioStudio
ListingPro Reviews
2026-01-22T16:52:20.254Z 2026-04-28T16:14:35.269Z
CVE-2025-69044
8.1 (3.1)
WordPress Vango theme <= 1.3.3 - Local File Inclusion … goalthemes
Vango
2026-01-22T16:52:18.806Z 2026-04-28T16:14:35.235Z
CVE-2025-69045
8.5 (3.1)
WordPress FooEvents for WooCommerce plugin <= 1.20.4 -… FooEvents
FooEvents for WooCommerce
2026-01-22T16:52:19.002Z 2026-04-28T16:14:35.221Z
CVE-2025-69047
8.1 (3.1)
WordPress MaxShop theme <= 3.6.20 - Local File Inclusi… magentech
MaxShop
2026-01-22T16:52:19.420Z 2026-04-28T16:14:35.213Z
CVE-2025-69048
7.1 (3.1)
WordPress Universal Video Player plugin <= 3.8.4 - Ref… LambertGroup
Universal Video Player
2026-01-22T16:52:19.621Z 2026-04-28T16:14:35.209Z
CVE-2025-69046
8.1 (3.1)
WordPress iRecco Core plugin <= 1.3.6 - Local File Inc… WebGeniusLab
iRecco Core
2026-01-22T16:52:19.210Z 2026-04-28T16:14:35.188Z
CVE-2025-69042
8.1 (3.1)
WordPress Lindo theme <= 1.2.5 - Local File Inclusion … goalthemes
Lindo
2026-01-22T16:52:18.326Z 2026-04-28T16:14:35.158Z
CVE-2025-69041
8.1 (3.1)
WordPress Dekoro theme <= 1.0.7 - Local File Inclusion… goalthemes
Dekoro
2026-01-22T16:52:18.140Z 2026-04-28T16:14:35.157Z
ID CVSS Description Vendor Product Published Updated
CVE-2024-31241
7.6 (3.1)
WordPress LearnPress Export Import plugin <= 4.0.3 - A… ThimPress
LearnPress Export Import
2024-04-07T18:00:12.191Z 2026-04-28T16:09:28.916Z
CVE-2024-31240
7.7 (3.1)
WordPress WP Poll Maker plugin <= 3.1 - Auth. Arbitrar… InfoTheme
WP Poll Maker
2024-04-10T16:03:15.257Z 2026-04-28T16:09:28.854Z
CVE-2024-31239
4.3 (3.1)
WordPress Nudgify Social Proof, Sales Popup & FOMO plu… Nudgify
Nudgify Social Proof, Sales Popup & FOMO
2024-04-12T12:58:09.385Z 2026-04-28T16:09:28.827Z
CVE-2024-31238
5.4 (3.1)
WordPress Smart Online Order for Clover plugin <= 1.5.… Zaytech
Smart Online Order for Clover
2024-04-12T13:00:26.659Z 2026-04-28T16:09:28.832Z
CVE-2024-31236
6.5 (3.1)
WordPress Royal Elementor Addons plugin <= 1.3.93 - Cr… WP Royal
Royal Elementor Addons
2024-04-07T17:52:48.081Z 2026-04-28T16:09:28.756Z
CVE-2024-31235
4.3 (3.1)
WordPress Comments Import & Export plugin <= 2.3.5 - C… WebToffee
WordPress Comments Import & Export
2024-04-12T13:01:53.767Z 2026-04-28T16:09:28.752Z
CVE-2024-31234
8.5 (3.1)
WordPress REHub Framework plugin < 19.6.2 - SQL Inject… Sizam
REHub Framework
2024-04-07T18:02:13.427Z 2026-04-28T16:09:28.766Z
CVE-2024-31233
8.5 (3.1)
WordPress Rehub theme <= 19.6.1 - Auth. SQL Injection … Sizam
Rehub
2024-04-07T18:05:08.404Z 2026-04-28T16:09:28.759Z
CVE-2024-31229
5.5 (3.1)
WordPress Really Simple SSL plugin <= 7.2.3 - Server S… Really Simple Plugins
Really Simple SSL
2024-04-18T10:28:28.168Z 2026-04-28T16:09:28.776Z
CVE-2024-31123
7.1 (3.1)
WordPress SpiderFAQ plugin <= 1.3.2 - Cross Site Scrip… WebDorado
SpiderFAQ
2024-03-31T18:42:34.651Z 2026-04-28T16:09:28.606Z
CVE-2024-31122
5.8 (3.1)
WordPress User Rights Access Manager plugin <= 1.1.2 -… Prism IT Systems
User Rights Access Manager
2024-03-31T18:44:58.852Z 2026-04-28T16:09:28.296Z
CVE-2024-31120
6.5 (3.1)
WordPress Gallery – Image and Video Gallery with Thumb… wpdevart
Responsive Image Gallery, Gallery Album
2024-03-31T18:48:30.646Z 2026-04-28T16:09:28.272Z
CVE-2024-31117
6.5 (3.1)
WordPress WooCommerce Bookings Calendar plugin <= 1.0.… Moises Heberle
WooCommerce Bookings Calendar
2024-03-31T18:51:16.950Z 2026-04-28T16:09:28.248Z
CVE-2024-31116
7.6 (3.1)
WordPress 10Web Map Builder for Google Maps plugin <= … 10Web
10Web Map Builder for Google Maps
2024-03-31T18:15:03.860Z 2026-04-28T16:09:28.299Z
CVE-2024-31115
10 (3.1)
WordPress Chauffeur Taxi Booking System for WordPress … QuanticaLabs
Chauffeur Taxi Booking System for WordPress
2024-03-31T18:05:03.522Z 2026-04-28T16:09:28.242Z
CVE-2024-31114
9.1 (3.1)
WordPress Shortcode Addons <= 3.2.5 - Arbitrary File U… biplob018
Shortcode Addons
2024-03-31T18:07:16.586Z 2026-04-28T16:09:28.284Z
CVE-2024-31113
4.3 (3.1)
WordPress Easy Digital Downloads plugin <= 3.2.11 - Cr… Easy Digital Downloads
Easy Digital Downloads
2024-05-10T08:34:08.674Z 2026-04-28T16:09:28.294Z
CVE-2024-31112
7.1 (3.1)
WordPress Convert Post Types plugin <= 1.4 - Reflected… Stephanie Leary
Convert Post Types
2024-03-31T18:56:40.660Z 2026-04-28T16:09:28.264Z
CVE-2024-31109
7.1 (3.1)
WordPress Woocommerce Social Media Share Buttons plugi… Toastie Studio
Woocommerce Social Media Share Buttons
2024-04-02T17:31:31.219Z 2026-04-28T16:09:27.647Z
CVE-2024-31106
7.1 (3.1)
WordPress Yoo Slider – Image Slider & Video Slider plu… Yooslider
Yoo Slider
2024-03-31T19:06:47.446Z 2026-04-28T16:09:27.593Z
CVE-2024-31105
7.1 (3.1)
WordPress Tax Rate Upload plugin <= 2.4.5 - CSRF leadi… Adam Bowen
Tax Rate Upload
2024-04-02T17:33:57.578Z 2026-04-28T16:09:27.620Z
CVE-2024-31104
6.5 (3.1)
WordPress GetResponse for WordPress plugin <= 5.5.33 -… GetResponse
GetResponse for WordPress
2024-03-31T19:08:18.633Z 2026-04-28T16:09:27.611Z
CVE-2026-41078
5.9 (3.1)
OpenTelemetry dotnet: Potential memory exhaustion via … open-telemetry
opentelemetry-dotnet
2026-04-23T18:05:41.367Z 2026-04-23T18:52:26.466Z
CVE-2024-31103
7.1 (3.1)
WordPress Kanban Boards for WordPress plugin <= 2.5.21… Kanban for WordPress
Kanban Boards for WordPress
2024-03-31T19:10:12.859Z 2026-04-28T16:09:27.572Z
CVE-2024-31102
5.9 (3.1)
WordPress Prenotazioni plugin <= 1.7.4 - Cross Site Sc… Scimone Ignazio
Prenotazioni
2024-03-31T19:12:31.280Z 2026-04-28T16:09:27.602Z
CVE-2024-31101
6.5 (3.1)
WordPress AI Twitter Feeds (Twitter widget & shortcode… August Infotech
AI Twitter Feeds (Twitter widget & shortcode)
2024-03-31T19:14:51.917Z 2026-04-28T16:09:27.598Z
CVE-2024-31100
5.4 (3.1)
WordPress Popup Cart Lite for WooCommerce plugin <= 1.… Festi-Team
Popup Cart Lite for WooCommerce
2024-03-31T18:26:31.355Z 2026-04-28T16:09:27.885Z
CVE-2024-31097
7.1 (3.1)
WordPress SEO Title Tag plugin <= 3.5.9 - Reflected Cr… Stephan Spencer
SEO Title Tag
2024-03-31T19:18:52.909Z 2026-04-28T16:09:27.600Z
CVE-2024-31096
4.3 (3.1)
WordPress Nictitate theme <= 1.1.4 - Cross Site Reques… kopatheme
Nictitate
2024-03-31T18:29:03.838Z 2026-04-28T16:09:27.640Z
CVE-2024-31095
5.3 (3.1)
WordPress Thumbs Rating plugin <= 5.1.0 - Insecure Dir… Ricard Torres
Thumbs Rating
2024-03-31T18:21:53.982Z 2026-04-28T16:09:27.027Z
ID Description Published Updated
fkie_cve-2024-30241 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2024-03-28T05:15:52.460 2026-04-28T19:23:59.137
fkie_cve-2024-30240 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2024-03-28T05:15:52.273 2026-04-28T19:23:59.027
fkie_cve-2024-30239 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2024-03-28T05:15:52.077 2026-04-28T19:23:58.927
fkie_cve-2024-30237 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2024-03-28T05:15:51.880 2026-04-28T19:23:58.767
fkie_cve-2024-30235 Missing Authorization vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue af… 2024-03-26T13:15:46.153 2026-04-28T19:23:58.600
fkie_cve-2024-30234 Missing Authorization vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: fro… 2024-03-26T13:15:45.927 2026-04-28T19:23:58.490
fkie_cve-2024-30233 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wholesale Team Wholesal… 2024-03-26T13:15:45.710 2026-04-28T19:23:58.380
fkie_cve-2024-30232 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-26T12:15:50.610 2026-04-28T19:23:58.270
fkie_cve-2024-30231 Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export fo… 2024-03-26T12:15:50.410 2026-04-28T19:23:58.157
fkie_cve-2024-30230 Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCo… 2024-03-28T05:15:51.500 2026-04-28T19:23:58.047
fkie_cve-2024-30228 Deserialization of Untrusted Data vulnerability in Hercules Design Hercules Core.This issue affects… 2024-03-28T05:15:51.113 2026-04-28T19:23:57.870
fkie_cve-2024-30227 Deserialization of Untrusted Data vulnerability in INFINITUM FORM Geo Controller.This issue affects… 2024-03-28T05:15:50.923 2026-04-28T19:23:57.770
fkie_cve-2024-30226 Deserialization of Untrusted Data vulnerability in WPDeveloper BetterDocs.This issue affects Better… 2024-03-28T05:15:50.733 2026-04-28T19:23:57.657
fkie_cve-2024-30225 Deserialization of Untrusted Data vulnerability in WPENGINE, INC. WP Migrate.This issue affects WP … 2024-03-28T05:15:50.533 2026-04-28T19:23:57.530
fkie_cve-2024-30224 Deserialization of Untrusted Data vulnerability in Wholesale Team WholesaleX.This issue affects Who… 2024-03-28T05:15:50.323 2026-04-28T19:23:57.393
fkie_cve-2024-30223 Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects A… 2024-03-28T05:15:50.140 2026-04-28T19:23:57.287
fkie_cve-2024-30222 Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects A… 2024-03-28T05:15:49.920 2026-04-28T19:23:57.177
fkie_cve-2024-30201 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T07:15:59.157 2026-04-28T19:23:56.967
fkie_cve-2024-30200 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-28T06:15:13.960 2026-04-28T19:23:56.840
fkie_cve-2024-30198 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T07:15:57.827 2026-04-28T19:23:56.670
fkie_cve-2024-30196 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T07:15:56.197 2026-04-28T19:23:56.513
fkie_cve-2024-30195 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T07:15:55.567 2026-04-28T19:23:56.410
fkie_cve-2024-30192 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T07:15:54.717 2026-04-28T19:23:56.150
fkie_cve-2024-30186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T12:15:14.173 2026-04-28T19:23:56.040
fkie_cve-2024-30185 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T12:15:13.710 2026-04-28T19:23:55.923
fkie_cve-2024-30184 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T12:15:13.260 2026-04-28T19:23:55.820
fkie_cve-2024-30183 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T12:15:12.780 2026-04-28T19:23:55.730
fkie_cve-2024-30181 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T12:15:11.840 2026-04-28T19:23:55.577
fkie_cve-2024-30180 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T12:15:11.357 2026-04-28T19:23:55.470
fkie_cve-2024-30179 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T12:15:10.883 2026-04-28T19:23:55.353
ID Severity Description Published Updated
ghsa-r6x6-g36w-q7qm
7.5 (3.1)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Serv… 2026-04-23T00:31:19Z 2026-04-23T00:31:19Z
ghsa-chwf-7mw9-8249
6.5 (3.1)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 … 2026-04-23T00:31:19Z 2026-04-23T00:31:19Z
ghsa-8pjf-p5gm-5gq6
7.5 (3.1)
8.7 (4.0)
A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier. A remote unauthenticated… 2026-04-23T00:31:19Z 2026-04-23T00:31:19Z
ghsa-88m7-mxf9-v644
4.9 (3.1)
IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the… 2026-04-23T00:31:19Z 2026-04-23T00:31:19Z
ghsa-67vv-8p72-p8fq
4.9 (3.1)
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerab… 2026-04-23T00:31:19Z 2026-04-23T00:31:19Z
ghsa-x5p6-3hjj-3r3g
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-04-23T00:31:18Z 2026-04-23T00:31:18Z
ghsa-w9g3-hc6p-qwh3
5.5 (3.1)
IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory cou… 2026-04-23T00:31:18Z 2026-04-23T00:31:18Z
ghsa-rr6g-4537-6ppf
2.7 (3.1)
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulner… 2026-04-23T00:31:18Z 2026-04-23T00:31:18Z
ghsa-qvhh-2f8h-hqgp
8.5 (3.1)
6.3 (4.0)
WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL h… 2026-04-23T00:31:18Z 2026-04-23T00:31:18Z
ghsa-f2hf-mr43-85mv
8.3 (3.1)
8.7 (4.0)
WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoi… 2026-04-23T00:31:18Z 2026-04-23T00:31:18Z
ghsa-8vp7-4rmv-4868
7.8 (3.1)
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to e… 2026-04-14T18:30:43Z 2026-04-23T00:31:17Z
ghsa-3xv9-7r7g-8q6f
7.8 (3.1)
8.4 (4.0)
radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars()… 2026-04-23T00:31:17Z 2026-04-23T00:31:17Z
ghsa-q6v4-fwc8-3mpc
5.6 (3.1)
5.9 (4.0)
The response coming from TP-Link Archer MR200 v5.2, C20 v6, TL-WR850N v3, and TL-WR845N v4 for any … 2026-02-05T18:30:32Z 2026-04-23T00:31:12Z
ghsa-wv79-2fc4-v4hj
7.0 (3.1)
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the … 2025-05-27T21:32:17Z 2026-04-23T00:31:11Z
ghsa-5j4q-7r76-c92w
6.9 (4.0)
Use of Hard-coded Credentials in TP-Link Archer C50 V3( <= 180703)/V4( <= 250117 )/V5( <=… 2025-07-16T21:30:36Z 2026-04-23T00:31:11Z
ghsa-ffq5-qpvf-xq7x
4.6 (3.1)
OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender 2026-04-22T22:22:28Z 2026-04-22T22:22:28Z
ghsa-4jvx-93h3-f45h
4.3 (3.1)
OpenC3 COSMOS allows arbitrary writes to plugins directory via path-traversed config filenames 2026-04-22T22:22:02Z 2026-04-22T22:22:03Z
ghsa-wgx6-g857-jjf7
8.1 (3.1)
OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence 2026-04-22T22:13:10Z 2026-04-22T22:13:10Z
ghsa-jxpf-xq2m-q525
6.2 (3.1)
OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle 2026-04-22T22:09:01Z 2026-04-22T22:09:01Z
ghsa-r466-rxw4-3j9j
8.1 (3.1)
Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write 2026-04-22T22:06:15Z 2026-04-22T22:06:15Z
ghsa-j5w5-568x-rq53
9.8 (3.1)
Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution 2026-04-22T22:06:03Z 2026-04-22T22:06:03Z
ghsa-2cjr-5v3h-v2w4
5.2 (3.1)
Evolver has Prototype Pollution via `Object.assign()` in its mailbox store operations 2026-04-22T22:05:28Z 2026-04-22T22:05:28Z
ghsa-2hp7-65r3-wv54
9.8 (3.1)
NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access 2026-04-22T22:03:43Z 2026-04-22T22:03:43Z
ghsa-95ww-475f-pr4f
6.3 (3.1)
2.1 (4.0)
RAGAS has SSRF via Multi-Modal Faithfulness Collections Module 2026-04-20T00:30:13Z 2026-04-22T22:02:02Z
ghsa-fgxh-7qw6-7wg3
4.6 (4.0)
An authenticated attacker can persist crafted values in multiple field types and trigger client-sid… 2026-04-22T21:32:12Z 2026-04-22T21:32:12Z
ghsa-vqrw-x4h2-5cgp
5.2 (3.1)
5.1 (4.0)
Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loadi… 2026-04-22T21:32:11Z 2026-04-22T21:32:11Z
ghsa-rc26-p9p7-95f8
8.7 (3.1)
9.3 (4.0)
Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandb… 2026-04-22T21:32:11Z 2026-04-22T21:32:11Z
ghsa-qmm4-q4hj-r5cm
7.1 (3.1)
7.1 (4.0)
Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in … 2026-04-22T21:32:11Z 2026-04-22T21:32:11Z
ghsa-qg6x-fw6m-9qrp
4.6 (4.0)
An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execut… 2026-04-22T21:32:11Z 2026-04-22T21:32:11Z
ghsa-67j3-r63p-59hf
9.8 (3.1)
9.3 (4.0)
Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerabilit… 2026-04-22T21:32:11Z 2026-04-22T21:32:11Z
ID Severity Description Package Published Updated
pysec-2022-88
Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in Tensor… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:34.776924Z
pysec-2022-87
Tensorflow is an Open Source Machine Learning Framework. If a graph node is invalid, Tens… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:34.646320Z
pysec-2022-86
Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:34.536542Z
pysec-2022-85
Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCo… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:34.416658Z
pysec-2022-84
Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCo… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:34.290009Z
pysec-2022-83
Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's … tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:34.161202Z
pysec-2022-82
Tensorflow is an Open Source Machine Learning Framework. The implementation of `AssignOp`… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:34.035553Z
pysec-2022-81
Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorF… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:33.923211Z
pysec-2022-80
Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from prot… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:33.801262Z
pysec-2022-79
Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from prot… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:33.672987Z
pysec-2022-78
Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlo… tensorflow-cpu 2022-02-03T13:15:00Z 2022-03-09T00:17:33.554776Z
pysec-2022-77
Tensorflow is an Open Source Machine Learning Framework. The implementation of `AddManySp… tensorflow-cpu 2022-02-03T12:15:00Z 2022-03-09T00:17:33.439630Z
pysec-2022-76
Tensorflow is an Open Source Machine Learning Framework. The implementations of `Sparse*C… tensorflow-cpu 2022-02-03T12:15:00Z 2022-03-09T00:17:33.310692Z
pysec-2022-75
Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a he… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:33.179728Z
pysec-2022-74
Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial o… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:33.047887Z
pysec-2022-73
Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle … tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:32.923545Z
pysec-2022-72
Tensorflow is an Open Source Machine Learning Framework. In multiple places, TensorFlow u… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:32.797622Z
pysec-2022-71
Tensorflow is an Open Source Machine Learning Framework. The implementation of `Range` su… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:32.679005Z
pysec-2022-70
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite m… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:32.561735Z
pysec-2022-69
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite m… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:32.438434Z
pysec-2022-68
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite m… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:32.298949Z
pysec-2022-67
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite m… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:32.167293Z
pysec-2022-66
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite m… tensorflow-cpu 2022-02-04T23:15:00Z 2022-03-09T00:17:32.048410Z
pysec-2022-65
Tensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft… tensorflow-cpu 2022-02-03T15:15:00Z 2022-03-09T00:17:31.924375Z
pysec-2022-64
Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCou… tensorflow-cpu 2022-02-03T15:15:00Z 2022-03-09T00:17:31.800762Z
pysec-2022-63
Tensorflow is an Open Source Machine Learning Framework. The implementation of `Quantized… tensorflow-cpu 2022-02-03T14:15:00Z 2022-03-09T00:17:31.682282Z
pysec-2022-62
Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCou… tensorflow-cpu 2022-02-03T14:15:00Z 2022-03-09T00:17:31.553710Z
pysec-2022-61
Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount… tensorflow-cpu 2022-02-03T14:15:00Z 2022-03-09T00:17:31.433747Z
pysec-2022-60
Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTen… tensorflow-cpu 2022-02-03T12:15:00Z 2022-03-09T00:17:31.305252Z
pysec-2022-59
Tensorflow is an Open Source Machine Learning Framework. The implementation of `Fractiona… tensorflow-cpu 2022-02-03T13:15:00Z 2022-03-09T00:17:31.174803Z
ID Description Updated
gsd-2024-4013 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:01.108244Z
gsd-2024-4005 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:01.108059Z
gsd-2024-4003 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:01.107869Z
gsd-2024-4009 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:01.107679Z
gsd-2024-4002 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:01.107469Z
gsd-2024-32873 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.527327Z
gsd-2024-32900 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.524250Z
gsd-2024-32879 Python Social Auth is a social authentication/registration mechanism. Prior to version 5.… 2024-04-20T05:02:00.519400Z
gsd-2024-32890 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.508098Z
gsd-2024-32867 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.506215Z
gsd-2024-32886 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.502340Z
gsd-2024-32868 ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One… 2024-04-20T05:02:00.501884Z
gsd-2024-32897 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.501683Z
gsd-2024-32875 Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.125.3… 2024-04-20T05:02:00.498945Z
gsd-2024-32930 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.498740Z
gsd-2024-32924 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.490789Z
gsd-2024-32874 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.489476Z
gsd-2024-32923 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.483420Z
gsd-2024-32933 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.482670Z
gsd-2024-32937 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.480785Z
gsd-2024-32903 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.473336Z
gsd-2024-32912 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.472406Z
gsd-2024-32902 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.471532Z
gsd-2024-32880 pyload is an open-source Download Manager written in pure Python. An authenticated user c… 2024-04-20T05:02:00.467829Z
gsd-2024-32899 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.462646Z
gsd-2024-32870 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.461722Z
gsd-2024-32856 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.451904Z
gsd-2024-32920 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.450518Z
gsd-2024-32910 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.448423Z
gsd-2024-32919 The format of the source doesn't require a description, click on the link for more details. 2024-04-20T05:02:00.445455Z
ID Description Published Updated
mal-2026-2035 Malicious code in @emilgroup/api-documentation (npm) 2026-03-22T18:14:02Z 2026-03-26T00:50:43Z
mal-2026-2034 Malicious code in @emilgroup/accounting-sdk-node (npm) 2026-03-22T18:11:51Z 2026-03-26T00:50:43Z
mal-2026-2033 Malicious code in @emilgroup/accounting-sdk (npm) 2026-03-22T17:48:24Z 2026-03-26T00:50:43Z
mal-2026-2032 Malicious code in @emilgroup/account-sdk-node (npm) 2026-03-22T18:17:58Z 2026-03-26T00:50:43Z
mal-2026-2031 Malicious code in @emilgroup/account-sdk (npm) 2026-03-22T17:45:33Z 2026-03-26T00:50:43Z
mal-2026-2030 Malicious code in @pypestream/floating-ui-dom (npm) 2026-03-22T17:11:18Z 2026-03-26T00:50:43Z
mal-2026-2187 Malicious code in vision-service-python-client-internal (PyPI) 2026-03-25T06:58:31Z 2026-03-25T06:58:31Z
mal-2026-2186 Malicious code in vision-service-python-client (PyPI) 2026-03-25T06:56:22Z 2026-03-25T06:56:22Z
mal-2026-2185 Malicious code in hy-api-utilities (PyPI) 2026-03-25T06:54:07Z 2026-03-25T06:54:07Z
mal-2026-2184 Malicious code in auth0-ai-ms-agent (PyPI) 2026-03-25T06:52:53Z 2026-03-25T06:52:53Z
mal-2026-2172 Malicious code in v2-8-3 (PyPI) 2026-03-25T05:05:45Z 2026-03-25T05:54:06Z
mal-2026-2171 Malicious code in globally (PyPI) 2026-03-25T05:05:53Z 2026-03-25T05:54:06Z
mal-2026-2170 Malicious code in fairness-bias (PyPI) 2026-03-25T05:05:53Z 2026-03-25T05:54:06Z
mal-2026-2177 Malicious code in linting (PyPI) 2026-03-25T05:07:06Z 2026-03-25T05:07:06Z
mal-2026-2175 Malicious code in facebookresearch (PyPI) 2026-03-25T05:06:56Z 2026-03-25T05:07:03Z
mal-2026-2183 Malicious code in yeshsurya (PyPI) 2026-03-25T05:06:58Z 2026-03-25T05:06:58Z
mal-2026-2178 Malicious code in lm-sys (PyPI) 2026-03-25T05:04:34Z 2026-03-25T05:05:02Z
mal-2026-2180 Malicious code in sonic-config-engine (PyPI) 2026-03-25T05:04:52Z 2026-03-25T05:04:52Z
mal-2026-2182 Malicious code in sonic-yang-mgmt (PyPI) 2026-03-25T05:04:50Z 2026-03-25T05:04:50Z
mal-2026-2176 Malicious code in kusto (PyPI) 2026-03-25T05:04:47Z 2026-03-25T05:04:47Z
mal-2026-2181 Malicious code in sonic-platform-common (PyPI) 2026-03-25T05:04:44Z 2026-03-25T05:04:44Z
mal-2026-2174 Malicious code in batch-shipyard (PyPI) 2026-03-25T05:04:42Z 2026-03-25T05:04:42Z
mal-2026-2173 Malicious code in aristanetworks (PyPI) 2026-03-25T05:04:39Z 2026-03-25T05:04:39Z
mal-2026-2179 Malicious code in python-glue (PyPI) 2026-03-25T05:04:37Z 2026-03-25T05:04:37Z
mal-2026-2158 Malicious code in torchunmix (PyPI) 2026-03-25T01:23:44Z 2026-03-25T01:40:59Z
mal-2026-1423 Malicious code in test_pkg_forppe (npm) 2026-03-14T07:17:39Z 2026-03-25T00:55:57Z
mal-2026-1481 Malicious code in revolut-merchant-widget (npm) 2026-03-16T20:46:00Z 2026-03-25T00:55:56Z
mal-2026-2150 Malicious code in snooty (PyPI) 2026-03-24T22:23:01Z 2026-03-24T23:14:27Z
mal-2026-2145 Malicious code in compose-rl (PyPI) 2026-03-24T22:21:23Z 2026-03-24T23:14:27Z
mal-2026-2148 Malicious code in mattermost-data-warehouse (PyPI) 2026-03-24T22:23:16Z 2026-03-24T22:23:16Z
ID Description Published Updated
wid-sec-w-2024-3338 Red Hat OpenShift: Mehrere Schwachstelle 2024-11-05T23:00:00.000+00:00 2025-12-04T23:00:00.000+00:00
wid-sec-w-2024-1337 Red Hat Enterprise Linux (c-ares): Schwachstelle ermöglicht Denial of Service 2024-06-11T22:00:00.000+00:00 2025-12-04T23:00:00.000+00:00
wid-sec-w-2024-0126 EDK2 NetworkPkg IP stack implementation: Mehrere Schwachstellen 2024-01-16T23:00:00.000+00:00 2025-12-04T23:00:00.000+00:00
wid-sec-w-2022-1964 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2022-11-06T23:00:00.000+00:00 2025-12-04T23:00:00.000+00:00
wid-sec-w-2025-2735 Splunk Enterprise: Mehrere Schwachstellen 2025-12-03T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2733 Drupal-Module: Mehrere Schwachstellen 2025-12-03T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2713 OpenVPN: Schwachstelle ermöglicht Denial of Service 2025-12-01T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2707 Red Hat Enterprise Linux (Quarkus): Schwachstelle ermöglicht Offenlegung von Informationen 2025-12-01T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2699 Samsung Exynos: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-30T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2568 Red Hat Enterprise Linux (kea): Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-11T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2334 Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen 2025-10-16T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2209 HAProxy und HAProxy ALOHA: Schwachstelle ermöglicht Denial of Service 2025-10-05T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2205 QT: Mehrere Schwachstellen 2025-10-05T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2164 Red Hat Enterprise Linux (FreeIPA): Schwachstelle ermöglicht Erlangen von Administratorrechten 2025-09-30T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2101 Ghostscript: Schwachstellen ermöglichen Codeausführung 2025-09-21T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-1463 Redis: Mehrere Schwachstellen 2025-07-06T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-1293 IBM DataPower Gateway: Mehrere Schwachstellen 2025-06-10T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-1150 Redis: Schwachstelle ermöglicht Denial of Service 2025-05-27T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2024-3429 Icinga: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-11-12T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2024-0518 Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2024-02-29T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2023-2933 GIMP: Mehrere Schwachstellen ermöglichen Codeausführung 2023-11-15T23:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2023-2655 Node.js: Mehrere Schwachstellen 2023-10-15T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2022-0069 Red Hat OpenShift Logging Subsystem: Mehrere Schwachstellen 2022-04-21T22:00:00.000+00:00 2025-12-03T23:00:00.000+00:00
wid-sec-w-2025-2732 Dell BSAFE SSL-J: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-12-02T23:00:00.000+00:00 2025-12-02T23:00:00.000+00:00
wid-sec-w-2025-2731 HCL BigFix: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-12-02T23:00:00.000+00:00 2025-12-02T23:00:00.000+00:00
wid-sec-w-2025-2728 Proxmox Virtual Environment: Schwachstelle ermöglicht Denial of Service 2025-12-02T23:00:00.000+00:00 2025-12-02T23:00:00.000+00:00
wid-sec-w-2025-2727 Red Hat OpenShift Container Platform: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-02T23:00:00.000+00:00 2025-12-02T23:00:00.000+00:00
wid-sec-w-2025-2725 Red Hat OpenShift Dev Spaces: Schwachstelle ermöglicht Codeausführung 2025-12-02T23:00:00.000+00:00 2025-12-02T23:00:00.000+00:00
wid-sec-w-2025-2723 phpMyAdmin: Schwachstelle ermöglicht SQL-Injection 2020-01-07T23:00:00.000+00:00 2025-12-02T23:00:00.000+00:00
wid-sec-w-2025-2721 Mautic: Mehrere Schwachstellen 2025-12-02T23:00:00.000+00:00 2025-12-02T23:00:00.000+00:00
ID Description Published Updated
icsa-23-103-11 Siemens Teamcenter Visualization and JT2Go 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-103-10 Siemens Industrial Products 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-103-09 Siemens SCALANCE XCM332 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-103-08 Siemens Mendix Forgot Password Module 2023-04-18T19:27:35.031502Z 2025-05-06T06:00:00.000000Z
icsa-23-103-05 Siemens SCALANCE X-200IRT Devices 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-103-03 Siemens in OPC Foundation Local Discovery Server 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-103-02 Siemens JT Open and JT Utilities 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-075-05 Siemens Mendix SAML Module 2023-03-14T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-047-09 Siemens SIMATIC Industrial Products 2023-02-14T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-20 Siemens Teamcenter Visualization and JT2Go 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-16 Siemens APOGEE and TALON 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-14 Siemens SISCO MMS-EASE Third Party Component 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-12 Siemens Parasolid 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-10 Siemens APOGEE/TALON Field Panels 2022-12-15T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-08 Siemens Polarion ALM 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-07 Siemens Simcenter STAR-CCM+ 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-04 Siemens SCALANCE Products 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-03 Siemens Multiple Denial of Service Vulnerabilities in Industrial Products 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-314-09 Siemens Teamcenter Visualization and JT2Go 2022-11-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-314-06 Siemens QMS Automotive 2022-11-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-314-02 Siemens Web Server Login Page of Industrial Controllers 2022-11-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-286-09 Siemens SICAM P850 and P855 Devices 2022-10-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-286-08 Siemens SCALANCE and RUGGEDCOM Devices 2022-10-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-258-03 Siemens RUGGEDCOM ROS 2022-09-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-195-01 Siemens SCALANCE X Switch Devices 2022-07-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-167-11 Siemens Xpedition Designer 2022-06-14T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-15 Siemens OpenV2G 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-14 Siemens Simcenter Femap 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-12 Siemens Industrial Products 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-11 Siemens SIMATIC CP 44x-1 RNA 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
ID Description Published Updated
cisco-sa-dcnm-ssrf-f2vx6q5p Cisco Data Center Network Manager Server-Side Request Forgery Vulnerability 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-dcnm-sql-inj-oaqoobp Cisco Data Center Network Manager SQL Injection Vulnerabilities 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-dcnm-info-disc-qcsjb6yg Cisco Data Center Network Manager Information Disclosure Vulnerability 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-dcnm-cert-check-bdzzv9t3 Cisco Data Center Network Manager Certificate Validation Vulnerabilities 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-dcnm-authbypass-ohbpbxu Cisco Data Center Network Manager Authorization Bypass Vulnerabilities 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-dcnm-api-path-tptapx2p Cisco Data Center Network Manager REST API Vulnerabilities 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-cssmor-mdcwkt2x Cisco Smart Software Manager Satellite Open Redirect Vulnerability 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-cssm-sqi-h5fdvzwp Cisco Smart Software Manager Satellite SQL Injection Vulnerability 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-cssm-sc-jd42d4tq Cisco Smart Software Manager Satellite Static Credential Vulnerability 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-cssm-multici-pgg5wm5a Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-asr-mem-leak-dos-mtwghkk3 Cisco StarOS IPv4 Denial of Service Vulnerability 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-amp-imm-dll-5paz3hrv Cisco Advanced Malware Protection for Endpoints and Immunet for Windows DLL Hijacking Vulnerability 2021-01-20T16:00:00+00:00 2021-01-20T16:00:00+00:00
cisco-sa-voip-phone-flood-dos-ynu9exov Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability 2020-11-04T16:00:00+00:00 2021-01-19T17:34:56+00:00
cisco-sa-rv-overflow-wunugv4u Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities 2021-01-13T16:00:00+00:00 2021-01-19T16:21:32+00:00
cisco-sa-rv-stored-xss-lptq3eqc Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities 2021-01-13T16:00:00+00:00 2021-01-14T15:25:16+00:00
cisco-sa-anyconnect-dll-injec-pqnryxlf Cisco AnyConnect Secure Mobility Client for Windows DLL Injection Vulnerability 2021-01-13T16:00:00+00:00 2021-01-14T15:20:06+00:00
cisco-sa-webex-open-redirect-pwvbq2q Cisco Webex Meetings Open Redirect Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-webex-brutef-hostkey-fwrmxvf Cisco Webex Meetings and Cisco Webex Meetings Server Host Key Brute Forcing Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-staros-file-read-l3rdvtey Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-rv-command-inject-lbdq2krn Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection Vulnerabilities 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-proximity-dll-uvw4vhpm Cisco Proximity Desktop for Windows DLL Hijacking Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-nfvis-xss-smsz5vhb Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-ipcameras-dos-9zdzcufq Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Denial of Service Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-fmc-xee-dfzardcs Cisco Firepower Management Center XML Entity Expansion Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-fmc-stored-xss-djkfczf2 Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerabilities 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-fmc-infodisc-rjdktm6f Cisco Firepower Management Center Information Disclosure Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-dnac-xss-hfv73cs3 Cisco DNA Center Cross-Site Scripting Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-cucm-logging-6qswkryz Cisco Unified Communications Products Information Disclosure Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-cmxpe-75asy9k Cisco Connected Mobile Experiences Privilege Escalation Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
cisco-sa-cmxapi-kskwcmfp Cisco Connected Mobile Experiences User Enumeration Vulnerability 2021-01-13T16:00:00+00:00 2021-01-13T16:00:00+00:00
ID Description Published Updated
msrc_cve-2024-41076 NFSv4: Fix memory leak in nfs4_set_security_label 2024-07-01T07:00:00.000Z 2026-03-31T14:51:19.000Z
msrc_cve-2025-38208 smb: client: add NULL check in automount_fullpath 2025-07-02T00:00:00.000Z 2026-03-31T14:51:16.000Z
msrc_cve-2024-49906 drm/amd/display: Check null pointer before try to access it 2024-10-01T07:00:00.000Z 2026-03-31T14:51:06.000Z
msrc_cve-2025-38717 net: kcm: Fix race condition in kcm_unattach() 2025-09-02T00:00:00.000Z 2026-03-31T14:51:04.000Z
msrc_cve-2026-23086 vsock/virtio: cap TX credit to local buffer size 2026-02-02T00:00:00.000Z 2026-03-31T14:51:03.000Z
msrc_cve-2025-37959 bpf: Scrub packet on bpf_redirect_peer 2025-05-02T00:00:00.000Z 2026-03-31T14:51:03.000Z
msrc_cve-2025-40065 RISC-V: KVM: Write hgatp register with valid mode bits 2025-10-02T00:00:00.000Z 2026-03-31T14:51:00.000Z
msrc_cve-2024-50183 scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance 2024-11-02T00:00:00.000Z 2026-03-31T14:50:59.000Z
msrc_cve-2024-41001 io_uring/sqpoll: work around a potential audit memory leak 2024-07-01T07:00:00.000Z 2026-03-31T14:50:54.000Z
msrc_cve-2025-38201 netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX 2025-07-02T00:00:00.000Z 2026-03-31T14:50:52.000Z
msrc_cve-2025-37860 sfc: fix NULL dereferences in ef100_process_design_param() 2025-04-02T00:00:00.000Z 2026-03-31T14:50:45.000Z
msrc_cve-2024-49909 drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func 2024-10-01T07:00:00.000Z 2026-03-31T14:50:41.000Z
msrc_cve-2025-71202 iommu/sva: invalidate stale IOTLB entries for kernel address space 2026-02-02T00:00:00.000Z 2026-03-31T14:50:40.000Z
msrc_cve-2025-68188 tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() 2025-12-02T00:00:00.000Z 2026-03-31T14:50:38.000Z
msrc_cve-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev(). 2025-10-02T00:00:00.000Z 2026-03-31T14:50:38.000Z
msrc_cve-2024-50177 drm/amd/display: fix a UBSAN warning in DML2.1 2024-11-02T00:00:00.000Z 2026-03-31T14:50:35.000Z
msrc_cve-2024-40997 cpufreq: amd-pstate: fix memory leak on CPU EPP exit 2024-07-01T07:00:00.000Z 2026-03-31T14:50:30.000Z
msrc_cve-2025-38722 habanalabs: fix UAF in export_dmabuf() 2025-09-02T00:00:00.000Z 2026-03-31T14:50:28.000Z
msrc_cve-2022-50116 tty: n_gsm: fix deadlock and link starvation in outgoing data path 2025-06-02T00:00:00.000Z 2026-03-31T14:50:28.000Z
msrc_cve-2025-46394 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. 2025-04-02T00:00:00.000Z 2026-03-31T14:50:23.000Z
msrc_cve-2024-56703 ipv6: Fix soft lockups in fib6_select_path under high next hop churn 2024-12-02T00:00:00.000Z 2026-03-31T14:50:18.000Z
msrc_cve-2025-40074 ipv4: start using dst_dev_rcu() 2025-10-02T00:00:00.000Z 2026-03-31T14:50:15.000Z
msrc_cve-2025-68209 mlx5: Fix default values in create CQ 2025-12-02T00:00:00.000Z 2026-03-31T14:50:13.000Z
msrc_cve-2024-42239 bpf: Fail bpf_timer_cancel when callback is being cancelled 2024-08-02T00:00:00.000Z 2026-03-31T14:50:07.000Z
msrc_cve-2025-38705 drm/amd/pm: fix null pointer access 2025-09-02T00:00:00.000Z 2026-03-31T14:50:03.000Z
msrc_cve-2025-37945 net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY 2025-05-02T00:00:00.000Z 2026-03-31T14:50:00.000Z
msrc_cve-2024-42151 bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable 2024-07-01T07:00:00.000Z 2026-03-31T14:50:00.000Z
msrc_cve-2024-58251 In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. 2025-04-02T00:00:00.000Z 2026-03-31T14:49:59.000Z
msrc_cve-2024-36921 wifi: iwlwifi: mvm: guard against invalid STA ID on removal 2024-05-02T07:00:00.000Z 2026-03-31T14:49:53.000Z
msrc_cve-2025-21816 hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING 2025-02-02T00:00:00.000Z 2026-03-31T14:49:50.000Z
ID Description Published Updated
opensuse-su-2025:15371-1 firefox-esr-140.1.0-1.1 on GA media 2025-07-23T00:00:00Z 2025-07-23T00:00:00Z
opensuse-su-2025:15370-1 hauler-1.2.5-1.1 on GA media 2025-07-21T00:00:00Z 2025-07-21T00:00:00Z
opensuse-su-2025:15369-1 cyradm-3.8.6-1.1 on GA media 2025-07-21T00:00:00Z 2025-07-21T00:00:00Z
opensuse-su-2025:15368-1 lemon-3.50.3-1.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15367-1 python313-3.13.5-3.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15366-1 python312-3.12.11-3.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15365-1 python311-3.11.13-3.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15364-1 libexslt0-1.1.43-2.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15363-1 libxml2-2-2.13.8-3.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15362-1 java-21-openjdk-21.0.8.0-1.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15361-1 busybox-1.37.0-5.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15360-1 apache2-2.4.64-1.1 on GA media 2025-07-20T00:00:00Z 2025-07-20T00:00:00Z
opensuse-su-2025:15359-1 valkey-8.1.3-1.1 on GA media 2025-07-18T00:00:00Z 2025-07-18T00:00:00Z
opensuse-su-2025:15358-1 java-24-openjdk-24.0.2.0-1.1 on GA media 2025-07-18T00:00:00Z 2025-07-18T00:00:00Z
opensuse-su-2025:15357-1 java-17-openjdk-17.0.16.0-1.1 on GA media 2025-07-18T00:00:00Z 2025-07-18T00:00:00Z
opensuse-su-2025:15356-1 java-11-openjdk-11.0.28.0-1.1 on GA media 2025-07-18T00:00:00Z 2025-07-18T00:00:00Z
opensuse-su-2025:15355-1 cosign-2.5.3-1.1 on GA media 2025-07-18T00:00:00Z 2025-07-18T00:00:00Z
opensuse-su-2025:15354-1 bind-9.20.11-1.1 on GA media 2025-07-18T00:00:00Z 2025-07-18T00:00:00Z
opensuse-su-2025:15353-1 rustup-1.28.2~0-1.1 on GA media 2025-07-17T00:00:00Z 2025-07-17T00:00:00Z
opensuse-su-2025:15352-1 kubelogin-0.2.10-1.1 on GA media 2025-07-17T00:00:00Z 2025-07-17T00:00:00Z
opensuse-su-2025:15351-1 fractal-12.beta+14-1.1 on GA media 2025-07-17T00:00:00Z 2025-07-17T00:00:00Z
opensuse-su-2025:15350-1 chromedriver-138.0.7204.157-1.1 on GA media 2025-07-17T00:00:00Z 2025-07-17T00:00:00Z
opensuse-su-2025:15349-1 ImageMagick-7.1.2.0-1.1 on GA media 2025-07-17T00:00:00Z 2025-07-17T00:00:00Z
opensuse-su-2025:15348-1 FastCGI-2.4.6-1.1 on GA media 2025-07-17T00:00:00Z 2025-07-17T00:00:00Z
opensuse-su-2025:15347-1 apache-commons-lang3-3.18.0-1.1 on GA media 2025-07-16T00:00:00Z 2025-07-16T00:00:00Z
opensuse-su-2025:15346-1 keylime-ima-policy-0.2.7+117-1.1 on GA media 2025-07-15T00:00:00Z 2025-07-15T00:00:00Z
opensuse-su-2025:15345-1 libQt6Concurrent6-6.9.1-2.1 on GA media 2025-07-15T00:00:00Z 2025-07-15T00:00:00Z
opensuse-su-2025:15344-1 mailman3-3.3.10-2.1 on GA media 2025-07-15T00:00:00Z 2025-07-15T00:00:00Z
opensuse-su-2025:15343-1 ggml-devel-5889-1.1 on GA media 2025-07-15T00:00:00Z 2025-07-15T00:00:00Z
opensuse-su-2025:15342-1 xen-4.20.1_02-1.1 on GA media 2025-07-11T00:00:00Z 2025-07-11T00:00:00Z
ID Description Published Updated
rhsa-2025:22175 Red Hat Security Advisory: expat security update 2025-11-26T11:07:19+00:00 2026-04-13T20:13:38+00:00
rhsa-2025:22163 Red Hat Security Advisory: libxml2 security update 2025-11-26T05:49:49+00:00 2026-04-13T20:13:37+00:00
rhsa-2025:22162 Red Hat Security Advisory: libxml2 security update 2025-11-26T05:26:29+00:00 2026-04-13T20:13:37+00:00
rhsa-2025:22063 Red Hat Security Advisory: cups security update 2025-11-25T10:25:49+00:00 2026-04-13T20:13:36+00:00
rhsa-2025:22035 Red Hat Security Advisory: expat security update 2025-11-25T07:17:39+00:00 2026-04-13T20:13:36+00:00
rhsa-2025:22034 Red Hat Security Advisory: expat security update 2025-11-25T07:36:20+00:00 2026-04-13T20:13:36+00:00
rhsa-2025:22033 Red Hat Security Advisory: expat security update 2025-11-25T08:03:54+00:00 2026-04-13T20:13:36+00:00
rhsa-2025:21994 Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage 2025-11-24T19:34:28+00:00 2026-04-13T20:13:36+00:00
rhsa-2025:21974 Red Hat Security Advisory: mingw-expat security update 2025-11-24T16:17:17+00:00 2026-04-13T20:13:35+00:00
rhsa-2025:21939 Red Hat Security Advisory: bind9.16 security update 2025-11-24T10:36:41+00:00 2026-04-13T20:13:35+00:00
rhsa-2025:21889 Red Hat Security Advisory: bind security update 2025-11-20T21:12:54+00:00 2026-04-13T20:13:34+00:00
rhsa-2025:21887 Red Hat Security Advisory: bind security update 2025-11-20T20:47:47+00:00 2026-04-13T20:13:34+00:00
rhsa-2025:21817 Red Hat Security Advisory: bind security update 2025-11-20T08:05:31+00:00 2026-04-13T20:13:34+00:00
rhsa-2025:21776 Red Hat Security Advisory: expat security update 2025-11-19T22:11:45+00:00 2026-04-13T20:13:33+00:00
rhsa-2025:21773 Red Hat Security Advisory: expat security update 2025-11-19T20:10:25+00:00 2026-04-13T20:13:33+00:00
rhsa-2025:21741 Red Hat Security Advisory: bind security update 2025-11-19T06:20:03+00:00 2026-04-13T20:13:32+00:00
rhsa-2025:21740 Red Hat Security Advisory: bind security update 2025-11-19T06:27:53+00:00 2026-04-13T20:13:32+00:00
rhsa-2025:21736 Red Hat Security Advisory: bind security update 2025-11-19T05:30:03+00:00 2026-04-13T20:13:32+00:00
rhsa-2025:21735 Red Hat Security Advisory: bind security update 2025-11-19T04:04:48+00:00 2026-04-13T20:13:31+00:00
rhsa-2025:21694 Red Hat Security Advisory: haproxy security update 2025-11-18T14:01:06+00:00 2026-04-13T20:13:31+00:00
rhsa-2025:19951 Red Hat Security Advisory: bind security update 2025-11-10T02:58:07+00:00 2026-04-13T20:13:31+00:00
rhsa-2025:21693 Red Hat Security Advisory: haproxy security update 2025-11-18T13:56:41+00:00 2026-04-13T20:13:30+00:00
rhsa-2025:21692 Red Hat Security Advisory: haproxy security update 2025-11-18T13:44:31+00:00 2026-04-13T20:13:30+00:00
rhsa-2025:21691 Red Hat Security Advisory: haproxy security update 2025-11-18T13:44:12+00:00 2026-04-13T20:13:29+00:00
rhsa-2025:21111 Red Hat Security Advisory: bind9.18 security update 2025-11-12T10:44:58+00:00 2026-04-13T20:13:29+00:00
rhsa-2025:21110 Red Hat Security Advisory: bind security update 2025-11-12T10:49:03+00:00 2026-04-13T20:13:29+00:00
rhsa-2025:21034 Red Hat Security Advisory: bind security update 2025-11-11T19:58:12+00:00 2026-04-13T20:13:28+00:00
rhsa-2025:21030 Red Hat Security Advisory: expat security update 2025-11-11T19:57:21+00:00 2026-04-13T20:13:28+00:00
rhsa-2025:19950 Red Hat Security Advisory: bind9.18 security update 2025-11-10T02:50:17+00:00 2026-04-13T20:13:27+00:00
rhsa-2025:19912 Red Hat Security Advisory: bind security update 2025-11-06T15:50:53+00:00 2026-04-13T20:13:27+00:00
ID Description Published Updated
suse-su-2026:0556-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7) 2026-02-16T10:03:47Z 2026-02-16T10:03:47Z
suse-su-2026:20374-1 Security update for python311 2026-02-16T09:45:48Z 2026-02-16T09:45:48Z
suse-su-2026:0555-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7) 2026-02-16T09:04:29Z 2026-02-16T09:04:29Z
suse-su-2026:20373-1 Security update for openssl-3 2026-02-16T08:54:36Z 2026-02-16T08:54:36Z
suse-su-2026:0554-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7) 2026-02-16T08:33:36Z 2026-02-16T08:33:36Z
suse-su-2026:20353-1 Security update for libxml2 2026-02-16T08:28:24Z 2026-02-16T08:28:24Z
suse-su-2026:20372-1 Security update for libxml2 2026-02-16T08:19:48Z 2026-02-16T08:19:48Z
suse-su-2026:0551-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6) 2026-02-16T06:33:35Z 2026-02-16T06:33:35Z
suse-su-2026:0550-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6) 2026-02-16T05:33:34Z 2026-02-16T05:33:34Z
suse-su-2026:0548-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6) 2026-02-16T03:33:34Z 2026-02-16T03:33:34Z
suse-su-2026:0546-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) 2026-02-15T19:33:42Z 2026-02-15T19:33:42Z
suse-su-2026:0544-1 Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) 2026-02-15T18:03:51Z 2026-02-15T18:03:51Z
suse-su-2026:0543-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6) 2026-02-15T17:33:36Z 2026-02-15T17:33:36Z
suse-su-2026:0542-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) 2026-02-15T16:03:51Z 2026-02-15T16:03:51Z
suse-su-2026:0539-1 Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5) 2026-02-15T13:33:40Z 2026-02-15T13:33:40Z
suse-su-2026:0535-1 Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5) 2026-02-15T11:04:06Z 2026-02-15T11:04:06Z
suse-su-2026:20436-1 Security update for nodejs22 2026-02-15T08:45:21Z 2026-02-15T08:45:21Z
suse-su-2026:0528-1 Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) 2026-02-15T06:33:50Z 2026-02-15T06:33:50Z
suse-su-2026:0533-1 Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4) 2026-02-15T06:33:38Z 2026-02-15T06:33:38Z
suse-su-2026:20435-1 Security update for fontforge 2026-02-14T21:30:08Z 2026-02-14T21:30:08Z
suse-su-2026:0526-1 Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4) 2026-02-14T19:33:43Z 2026-02-14T19:33:43Z
suse-su-2026:0525-1 Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5) 2026-02-14T17:04:03Z 2026-02-14T17:04:03Z
suse-su-2026:0524-1 Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) 2026-02-14T17:03:57Z 2026-02-14T17:03:57Z
suse-su-2026:0521-1 Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5) 2026-02-14T12:03:47Z 2026-02-14T12:03:47Z
suse-su-2026:0518-1 Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5) 2026-02-14T09:03:51Z 2026-02-14T09:03:51Z
suse-su-2026:0517-1 Security update for protobuf 2026-02-14T08:25:01Z 2026-02-14T08:25:01Z
suse-su-2026:0515-1 Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5) 2026-02-13T23:04:09Z 2026-02-13T23:04:09Z
suse-su-2026:20434-1 Security update for openCryptoki 2026-02-13T17:44:22Z 2026-02-13T17:44:22Z
suse-su-2026:20345-1 Security update for openCryptoki 2026-02-13T17:42:31Z 2026-02-13T17:42:31Z
suse-su-2026:20352-1 Security update for protobuf 2026-02-13T16:56:15Z 2026-02-13T16:56:15Z
ID Description Published Updated
alsa-2025:1215 Moderate: tbb security update 2025-02-10T00:00:00Z 2025-02-11T12:06:07Z
alsa-2025:1266 Important: kernel security update 2025-02-11T00:00:00Z 2025-02-11T11:55:48Z
alsa-2025:1210 Moderate: tbb security update 2025-02-10T00:00:00Z 2025-02-10T16:55:32Z
alsa-2025:1230 Important: kernel-rt security update 2025-02-10T00:00:00Z 2025-02-10T16:54:11Z
alsa-2025:1184 Important: thunderbird security update 2025-02-10T00:00:00Z 2025-02-10T15:18:00Z
alsa-2025:1068 Moderate: kernel security update 2025-02-05T00:00:00Z 2025-02-08T20:01:29Z
alsa-2025:1067 Moderate: kernel-rt security update 2025-02-05T00:00:00Z 2025-02-08T19:59:16Z
alsa-2025:1066 Important: firefox security update 2025-02-05T00:00:00Z 2025-02-08T19:53:08Z
alsa-2025:0936 Moderate: mingw-glib2 security update 2025-02-04T00:00:00Z 2025-02-06T08:49:20Z
alsa-2025:0912 Moderate: mariadb:10.11 security update 2025-02-04T00:00:00Z 2025-02-05T09:51:11Z
alsa-2025:0914 Moderate: galera and mariadb security update 2025-02-04T00:00:00Z 2025-02-05T09:49:44Z
alsa-2025:0917 Moderate: keepalived security update 2025-02-04T00:00:00Z 2025-02-05T09:48:19Z
alsa-2025:0922 Important: podman security update 2025-02-04T00:00:00Z 2025-02-05T09:43:54Z
alsa-2025:0923 Important: buildah security update 2025-02-04T00:00:00Z 2025-02-05T09:36:37Z
alsa-2025:0925 Moderate: bzip2 security update 2025-02-04T00:00:00Z 2025-02-05T09:34:21Z
alsa-2025:0837 Important: unbound security update 2025-01-30T00:00:00Z 2025-01-31T11:22:16Z
alsa-2025:0838 Important: libsoup security update 2025-01-30T00:00:00Z 2025-01-31T11:19:09Z
alsa-2025:0845 Important: git-lfs security update 2025-01-30T00:00:00Z 2025-01-31T11:16:49Z
alsa-2025:0791 Important: libsoup security update 2025-01-29T00:00:00Z 2025-01-29T19:59:25Z
alsa-2025:0746 Important: gimp:2.8 security update 2025-01-28T00:00:00Z 2025-01-29T11:22:23Z
alsa-2025:0739 Moderate: mariadb:10.5 security update 2025-01-28T00:00:00Z 2025-01-29T11:20:21Z
alsa-2025:0737 Moderate: mariadb:10.11 security update 2025-01-28T00:00:00Z 2025-01-29T11:18:23Z
alsa-2025:0693 Important: redis security update 2025-01-27T00:00:00Z 2025-01-29T11:16:55Z
alsa-2025:0711 Important: python-jinja2 security update 2025-01-27T00:00:00Z 2025-01-29T11:15:13Z
alsa-2025:0743 Moderate: keepalived security update 2025-01-28T00:00:00Z 2025-01-29T10:53:29Z
alsa-2025:0733 Moderate: bzip2 security update 2025-01-28T00:00:00Z 2025-01-29T10:51:02Z
alsa-2025:0692 Important: redis:7 security update 2025-01-27T00:00:00Z 2025-01-29T10:47:52Z
alsa-2025:0578 Moderate: kernel security update 2025-01-22T00:00:00Z 2025-01-25T20:34:05Z
alsa-2025:0667 Important: python-jinja2 security update 2025-01-23T00:00:00Z 2025-01-24T10:11:30Z
alsa-2025:0673 Important: git-lfs security update 2025-01-23T00:00:00Z 2025-01-24T10:09:41Z
ID Description Published Updated
osv-2023-279 Heap-use-after-free in filename_cmp 2023-04-05T14:00:58.581945Z 2023-04-05T14:00:58.582171Z
osv-2023-278 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32 2023-04-05T14:00:45.731081Z 2023-04-05T14:00:45.731310Z
osv-2023-272 Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16< 2023-04-03T14:00:08.697953Z 2023-04-04T14:10:41.334668Z
osv-2023-273 Heap-buffer-overflow in add_complete_typeobj 2023-04-03T14:02:08.154670Z 2023-04-03T14:02:08.154918Z
osv-2023-271 Heap-buffer-overflow in bit_utf8_to_TU 2023-04-02T14:01:58.656302Z 2023-04-02T14:01:58.656539Z
osv-2023-270 Heap-buffer-overflow in bit_utf8_to_TU 2023-04-02T14:01:04.734545Z 2023-04-02T14:01:04.734833Z
osv-2023-269 Heap-buffer-overflow in bit_utf8_to_TU 2023-04-02T14:01:01.834337Z 2023-04-02T14:01:01.834603Z
osv-2023-265 Heap-double-free in xmlHashDefaultDeallocator 2023-04-01T13:02:22.848837Z 2023-04-01T13:02:22.849084Z
osv-2023-252 UNKNOWN READ in iv_put 2023-03-30T13:00:35.046945Z 2023-03-30T13:00:35.047201Z
osv-2023-251 Stack-buffer-overflow in ext11_work_out_bundles 2023-03-30T13:00:33.543215Z 2023-03-30T13:00:33.543462Z
osv-2023-249 Global-buffer-overflow in xmlStrndup 2023-03-28T13:00:29.942556Z 2023-03-28T13:00:29.942832Z
osv-2023-222 Heap-buffer-overflow in hb_subset_plan_t::hb_subset_plan_t 2023-03-24T13:00:38.968605Z 2023-03-27T14:20:39.491568Z
osv-2023-248 Heap-double-free in _dwarf_read_line_table_header 2023-03-27T13:01:51.351691Z 2023-03-27T13:01:51.351903Z
osv-2023-246 Heap-double-free in _dwarf_read_line_table_header 2023-03-27T13:00:51.152187Z 2023-03-27T13:00:51.152441Z
osv-2023-243 UNKNOWN WRITE in processCertificateElements 2023-03-27T13:00:39.112912Z 2023-03-27T13:00:39.113130Z
osv-2023-242 Use-of-uninitialized-value in xmlSwitchEncoding 2023-03-27T13:00:27.197749Z 2023-03-27T13:00:27.197986Z
osv-2023-240 Invalid-free in fuzz_die_cu_attrs.c 2023-03-27T13:00:21.287359Z 2023-03-27T13:00:21.287635Z
osv-2023-229 Heap-buffer-overflow in ndpi_workflow_process_packet 2023-03-25T13:00:30.521932Z 2023-03-25T13:00:30.522156Z
osv-2023-221 Heap-use-after-free in flac__analyze_frame 2023-03-24T13:00:26.024981Z 2023-03-24T13:00:26.025239Z
osv-2023-219 UNKNOWN WRITE in processCertificateElements 2023-03-23T13:02:18.996765Z 2023-03-23T13:02:18.996982Z
osv-2023-215 Global-buffer-overflow in htmlParsePI 2023-03-23T13:00:45.604359Z 2023-03-23T13:00:45.604628Z
osv-2023-213 Global-buffer-overflow in htmlParseDocument 2023-03-22T13:01:53.257203Z 2023-03-22T13:01:53.257458Z
osv-2023-212 Global-buffer-overflow in xmlParseEntityDecl 2023-03-22T13:01:34.391238Z 2023-03-22T13:01:34.391485Z
osv-2023-211 Global-buffer-overflow in xmlStrndup 2023-03-22T13:00:29.358592Z 2023-03-22T13:00:29.358840Z
osv-2023-184 UNKNOWN READ in LibRaw::sget4 2023-03-17T13:00:06.635055Z 2023-03-20T14:21:04.285680Z
osv-2023-206 Global-buffer-overflow in xmlParseContentInternal 2023-03-19T13:02:12.599313Z 2023-03-19T13:02:12.599543Z
osv-2023-205 Global-buffer-overflow in base_C_MessageSignFinal 2023-03-19T13:02:10.709112Z 2023-03-19T13:02:10.709360Z
osv-2023-204 Global-buffer-overflow in htmlParseChunk 2023-03-19T13:02:08.092138Z 2023-03-19T13:02:08.092478Z
osv-2023-200 Segv on unknown address in mrb_vm_find_method 2023-03-18T13:02:09.375268Z 2023-03-18T13:02:09.375493Z
osv-2023-199 Global-buffer-overflow in xmlParseQName 2023-03-18T13:02:06.280323Z 2023-03-18T13:02:06.280552Z
ID Description Published Updated
bit-discourse-2023-43814 Exposure of poll options and votes to unauthorized users in Discourse 2024-03-06T10:53:52.288Z 2025-11-06T13:25:46.476Z
bit-discourse-2023-43659 Cross-site Scripting via email preview when CSP disabled in Discourse 2024-03-06T10:54:02.887Z 2025-11-06T13:25:46.476Z
bit-discourse-2023-23615 Malicious users in Discourse can create spam topics as any user due to improper access control 2024-03-06T11:00:56.201Z 2025-11-06T13:25:46.476Z
bit-discourse-2022-46159 Any authenticated Discourse user can create an unlisted topic 2024-03-06T11:02:38.003Z 2025-11-06T13:25:46.476Z
bit-discourse-2022-46148 Discourse allows self-XSS through malicious composer message 2024-03-06T11:02:57.788Z 2025-11-06T13:25:46.476Z
bit-discourse-2022-41944 Discourse users can see notifications for topics they no longer have access to 2024-03-06T11:03:09.082Z 2025-11-06T13:25:46.476Z
bit-discourse-2022-31184 Email activation route can be abused by spammers in Discourse 2024-03-06T11:05:15.202Z 2025-11-06T13:25:46.476Z
bit-discourse-2022-31096 Invites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse 2024-03-06T11:05:41.566Z 2025-11-06T13:25:46.476Z
bit-discourse-2022-21677 Group advanced search option may leak group and group's members visibility 2024-03-06T11:08:07.875Z 2025-11-06T13:25:46.476Z
bit-discourse-2021-41271 Cache poisoning via maliciously-formed request in discourse 2024-03-06T11:09:07.503Z 2025-11-06T13:25:46.476Z
bit-discourse-2021-41095 XSS via blocked watched word in error message 2024-03-06T11:09:23.967Z 2025-11-06T13:25:46.476Z
bit-discourse-2021-32764 YouTube Onebox susceptible to XSS 2024-03-06T11:10:07.487Z 2025-11-06T13:25:46.476Z
bit-discourse-2021-3138 2024-03-06T11:10:13.104Z 2025-11-06T13:25:46.476Z
bit-consul-2025-11375 Consul's event endpoint is vulnerable to denial of service 2025-11-06T12:49:11.554Z 2025-11-06T13:25:46.476Z
bit-consul-2025-11374 Consul's KV endpoint is vulnerable to denial of service 2025-11-06T12:49:05.940Z 2025-11-06T13:25:46.476Z
bit-consul-2023-3518 JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access 2024-03-06T10:51:07.390Z 2025-11-06T13:25:46.476Z
bit-apisix-2025-62232 Apache APISIX: basic-auth logs plaintext credentials at info level 2025-11-06T12:47:05.456Z 2025-11-06T13:25:46.476Z
bit-apisix-2025-46647 Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect 2025-07-04T07:28:48.965Z 2025-11-06T13:25:46.476Z
bit-apisix-2025-27446 Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges 2025-07-16T07:50:40.089Z 2025-11-06T13:25:46.476Z
bit-apache-2025-54090 Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 2025-07-29T05:38:18.535Z 2025-11-06T13:25:46.476Z
bit-apache-2025-53020 Apache HTTP Server: HTTP/2 DoS by Memory Increase 2025-07-16T07:56:41.763Z 2025-11-06T13:25:46.476Z
bit-apache-2025-49812 Apache HTTP Server: mod_ssl TLS upgrade attack 2025-07-16T07:56:35.377Z 2025-11-06T13:25:46.476Z
bit-apache-2025-49630 Apache HTTP Server: mod_proxy_http2 denial of service 2025-07-16T07:56:28.763Z 2025-11-06T13:25:46.476Z
bit-apache-2025-23048 Apache HTTP Server: mod_ssl access control bypass with session resumption 2025-07-16T07:56:19.860Z 2025-11-06T13:25:46.476Z
bit-apache-2024-47252 Apache HTTP Server: mod_ssl error log variable escaping 2025-07-16T07:56:11.862Z 2025-11-06T13:25:46.476Z
bit-apache-2024-43394 Apache HTTP Server: SSRF on Windows due to UNC paths 2025-07-16T07:56:03.162Z 2025-11-06T13:25:46.476Z
bit-apache-2024-43204 Apache HTTP Server: SSRF with mod_headers setting Content-Type header 2025-07-16T07:55:53.967Z 2025-11-06T13:25:46.476Z
bit-apache-2024-42516 Apache HTTP Server: HTTP response splitting 2025-07-16T07:55:45.463Z 2025-11-06T13:25:46.476Z
bit-apache-2024-39573 Apache HTTP Server: mod_rewrite proxy handler substitution 2024-07-03T07:16:17.249Z 2025-11-06T13:25:46.476Z
bit-apache-2024-38477 Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request 2024-07-03T07:16:30.955Z 2025-11-06T13:25:46.476Z
ID Description Updated
ID Description Published Updated
certfr-2025-avi-0363 Multiples vulnérabilités dans Microsoft Edge 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
certfr-2025-avi-0362 Vulnérabilité dans Sonicwall Secure Mobile Access 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
certfr-2025-avi-0361 Multiples vulnérabilités dans les produits Mozilla 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
certfr-2025-avi-0360 Multiples vulnérabilités dans les produits Tenable 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
certfr-2025-avi-0359 Multiples vulnérabilités dans les produits Elastic 2025-05-02T00:00:00.000000 2025-05-02T00:00:00.000000
certfr-2025-avi-0358 Multiples vulnérabilités dans les produits Mozilla 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0357 Vulnérabilité dans les produits Symantec 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0356 Multiples vulnérabilités dans Splunk User Behavior Analytics (UBA) 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0354 Multiples vulnérabilités dans Google Chrome 2025-04-30T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0258 Multiples vulnérabilités dans les produits Apple 2025-04-01T00:00:00.000000 2025-04-30T00:00:00.000000
certfr-2025-avi-0353 Multiples vulnérabilités dans les produits VMware 2025-04-29T00:00:00.000000 2025-04-29T00:00:00.000000
certfr-2025-avi-0352 Multiples vulnérabilités dans Apache Tomcat 2025-04-29T00:00:00.000000 2025-04-29T00:00:00.000000
certfr-2025-avi-0351 Vulnérabilité dans LibreOffice 2025-04-28T00:00:00.000000 2025-04-28T00:00:00.000000
certfr-2025-avi-0074 Vulnérabilité dans Synacor Zimbra Collaboration 2025-01-28T00:00:00.000000 2025-04-28T00:00:00.000000
certfr-2025-avi-0349 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-04-25T00:00:00.000000 2025-04-25T00:00:00.000000
certfr-2025-avi-0348 Vulnérabilité dans Spring Boot 2025-04-25T00:00:00.000000 2025-04-25T00:00:00.000000
certfr-2025-avi-0347 Vulnérabilité dans Sophos Taegis Endpoint Agent 2025-04-25T00:00:00.000000 2025-04-25T00:00:00.000000
certfr-2025-avi-0285 Multiples vulnérabilités dans les produits SAP 2025-04-08T00:00:00.000000 2025-04-25T00:00:00.000000
certfr-2025-avi-0346 Multiples vulnérabilités dans GitLab 2025-04-24T00:00:00.000000 2025-04-24T00:00:00.000000
certfr-2025-avi-0345 Vulnérabilité dans Sonicwall SonicOS 2025-04-24T00:00:00.000000 2025-04-24T00:00:00.000000
certfr-2025-avi-0344 Multiples vulnérabilités dans Grafana 2025-04-23T00:00:00.000000 2025-04-23T00:00:00.000000
certfr-2025-avi-0343 Vulnérabilité dans Spring Security 2025-04-23T00:00:00.000000 2025-04-23T00:00:00.000000
certfr-2025-avi-0342 Multiples vulnérabilités dans Google Chrome 2025-04-23T00:00:00.000000 2025-04-23T00:00:00.000000
certfr-2025-avi-0341 Multiples vulnérabilités dans Traefik 2025-04-22T00:00:00.000000 2025-04-22T00:00:00.000000
certfr-2025-avi-0340 Multiples vulnérabilités dans Moodle 2025-04-22T00:00:00.000000 2025-04-22T00:00:00.000000
certfr-2025-avi-0339 Vulnérabilité dans PostgreSQL PgBouncer 2025-04-22T00:00:00.000000 2025-04-22T00:00:00.000000
certfr-2025-avi-0338 Vulnérabilité dans Tenable Security Center 2025-04-22T00:00:00.000000 2025-04-22T00:00:00.000000
certfr-2025-avi-0337 Multiples vulnérabilités dans les produits IBM 2025-04-18T00:00:00.000000 2025-04-18T00:00:00.000000
certfr-2025-avi-0336 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-04-18T00:00:00.000000 2025-04-18T00:00:00.000000
certfr-2025-avi-0335 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-04-18T00:00:00.000000 2025-04-18T00:00:00.000000
ID Description Published Updated
jvndb-2018-000067 Mailman vulnerable to cross-site scripting 2018-06-28T12:30+09:00 2019-07-24T15:21+09:00
jvndb-2018-000068 Multiple vulnerabilities in Calsos CSDX and CSDJ series products 2018-07-02T15:22+09:00 2019-07-24T14:31+09:00
jvndb-2018-000106 User-friendly SVN vulnerable to cross-site scripting 2018-10-09T16:27+09:00 2019-07-11T18:00+09:00
jvndb-2018-000102 Multiple vulnerabilities in Denbun 2018-10-04T16:11+09:00 2019-07-11T16:02+09:00
jvndb-2019-000046 Intel Dual Band Wireless-AC 8260 vulnerable to denial-of-service (DoS) 2019-07-10T14:07+09:00 2019-07-10T14:07+09:00
jvndb-2018-000066 MemoCGI vulnerable to directory traversal 2018-06-27T14:44+09:00 2019-07-05T17:58+09:00
jvndb-2018-000069 Cybozu Garoon vulnerable to SQL injection 2018-07-02T15:22+09:00 2019-07-05T17:55+09:00
jvndb-2018-000070 Installer of Glary Utilities may insecurely load Dynamic Link Libraries 2018-07-03T13:42+09:00 2019-07-05T17:52+09:00
jvndb-2018-000072 The installers of multiple Logicool software programs may insecurely load Dynamic Link Libraries 2018-07-06T14:36+09:00 2019-07-05T17:38+09:00
jvndb-2018-000071 DHC Online Shop App for Android fails to verify SSL server certificates 2018-07-06T14:36+09:00 2019-07-05T17:35+09:00
jvndb-2018-000085 Multiple cross-site scripting vulnerabilities in GROWI 2018-08-03T15:04+09:00 2019-07-05T17:13+09:00
jvndb-2018-000051 The installer of Visual C++ Redistributable may insecurely load Dynamic Link Libraries 2018-05-17T14:57+09:00 2019-07-05T16:41+09:00
jvndb-2018-000049 Multiple Microsoft Windows applications and installers may insecurely load Dynamic Link Libraries 2018-05-17T15:18+09:00 2019-07-05T16:40+09:00
jvndb-2019-000045 Multiple vulnerabilities in Access analysis CGI An-Analyzer 2019-07-05T15:28+09:00 2019-07-05T15:28+09:00
jvndb-2018-000056 Susie plug-in "axpdfium" may insecurely load Dynamic Link Libraries 2018-05-24T15:15+09:00 2019-07-02T14:53+09:00
jvndb-2018-000058 WordPress plugin "Email Subscribers & Newsletters" vulnerable to cross-site scripting 2018-05-28T14:11+09:00 2019-07-02T14:50+09:00
jvndb-2018-000046 The installer of PlayMemories Home for Windows may insecurely load Dynamic Link Libraries 2018-05-24T15:25+09:00 2019-07-02T14:31+09:00
jvndb-2018-000059 WordPress plugin "Site Reviews" vulnerable to cross-site scripting 2018-05-28T14:11+09:00 2019-07-02T14:25+09:00
jvndb-2019-004441 Vulnerability in Cosminexus HTTP Server and Hitachi Web Server 2019-06-03T13:55+09:00 2019-06-03T13:55+09:00
jvndb-2019-003539 DoS Vulnerability in Hitachi IT Operations Director, JP1/IT Desktop Management - Manager and JP1/IT Desktop Management 2 - Manager 2019-05-20T15:38+09:00 2019-05-20T15:38+09:00
jvndb-2019-003194 Multiple Vulnerabilities in Hitachi Command Suite and Hitachi Infrastructure Analytics Advisor 2019-05-13T15:25+09:00 2019-05-13T15:25+09:00
jvndb-2019-002892 Multiple Vulnerabilities in Cosminexus 2019-04-25T15:13+09:00 2019-04-25T15:13+09:00
jvndb-2019-000021 API server used by JR East Japan train operation information push notification App for Android fails to restrict access permissions 2019-04-01T15:42+09:00 2019-04-01T15:42+09:00
jvndb-2019-001285 DoS Vulnerability in JP1/Base 2019-02-25T17:13+09:00 2019-02-25T17:13+09:00
jvndb-2019-000010 azure-umqtt-c vulnerable to denial-of-service (DoS) 2019-02-20T16:59+09:00 2019-02-20T16:59+09:00
jvndb-2019-000008 A vulnerability in V20 PRO L-01J that may cause a crash 2019-02-12T17:23+09:00 2019-02-12T17:23+09:00
jvndb-2019-001094 Information Disclosure Vulnerability in Hitachi Command Suite and Hitachi Infrastructure Analytics Advisor 2019-01-22T11:47+09:00 2019-01-24T18:39+09:00
jvndb-2019-001095 Cross-site Scripting Vulnerability in Hitachi Device Manager 2019-01-22T11:47+09:00 2019-01-24T18:38+09:00
jvndb-2018-010851 Clickjacking Vulnerability in Hitachi Automation Director 2018-12-26T12:09+09:00 2019-01-24T18:37+09:00
jvndb-2018-010027 Problem with directory permissions in JP1/Operations Analytics 2018-12-04T16:53+09:00 2019-01-24T18:36+09:00
ID Description Published Updated
cnvd-2026-10321 Google Pixel代码执行漏洞(CNVD-2026-1032114) 2025-12-18 2026-02-06
cnvd-2026-10358 Digilent DASYLab越界写入漏洞(CNVD-2026-10358) 2025-09-04 2026-02-05
cnvd-2026-10357 Digilent DASYLab越界写入漏洞 2025-09-04 2026-02-05
cnvd-2026-10356 TOTOLINK X6000R命令注入漏洞(CNVD-2026-10356) 2026-02-05 2026-02-05
cnvd-2026-10355 D-Link DIR-860L命令注入漏洞 2025-08-26 2026-02-05
cnvd-2026-10343 D-Link DAP-1325访问控制错误漏洞 2025-12-25 2026-02-05
cnvd-2026-10318 Tenda AX1806 fromSetSysTime函数堆栈溢出漏洞 2026-01-30 2026-02-05
cnvd-2026-10317 Oracle MySQL Server存在未明漏洞(CNVD-2026-10317) 2026-01-30 2026-02-05
cnvd-2026-10316 Tenda AX1806 deviceList参数堆栈溢出漏洞 2026-01-30 2026-02-05
cnvd-2026-10313 Oracle MySQL Server存在未明漏洞(CNVD-2026-10313) 2026-01-30 2026-02-05
cnvd-2026-10312 Oracle MySQL Server存在未明漏洞(CNVD-2026-10312) 2026-01-30 2026-02-05
cnvd-2026-09798 Apache NiFi代码问题漏洞(CNVD-2026-09798) 2026-01-14 2026-02-04
cnvd-2026-09797 Apache SIS XML外部实体注入漏洞 2026-01-15 2026-02-04
cnvd-2026-09795 Apache NimBLE代码问题漏洞 2026-01-19 2026-02-04
cnvd-2026-09634 MedDream PACS Premium notifynewstudy功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09633 MedDream PACS Premium modifyTranscript功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09632 MedDream PACS Premium modifyRoute功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09631 MedDream PACS Premium modifyHL7Route功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09629 MedDream PACS Premium modifyEmail功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09628 MedDream PACS Premium modifyCoercion功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09627 MedDream PACS Premium modifyAutopurgeFilter功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09626 MedDream PACS Premium modifyAeTitle功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09625 MedDream PACS Premium ldapUser功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09624 MedDream PACS Premium fetchPriorStudies功能跨站脚本漏洞 2026-01-30 2026-02-04
cnvd-2026-09630 MedDream PACS Premium modifyHL7App功能跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09623 MedDream PACS Premium existingUser功能跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09622 MedDream PACS Premium encapsulatedDoc功能跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09621 MedDream PACS Premium config.php功能worklistsrc参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09620 MedDream PACS Premium config.php功能uploaddir参数跨站脚本漏洞 2026-01-30 2026-02-03
cnvd-2026-09619 MedDream PACS Premium config.php功能thumbnaildir参数跨站脚本漏洞 2026-01-30 2026-02-03
ID Description Published Updated
bdu:2020-04038 Уязвимость реализации функции new org.dom4j.io.SAXReader() библиотеки для работы с XML, X… 26.08.2020 10.02.2026
bdu:2020-03317 Уязвимость набора Java-библиотек Google Guava, связанная с неограниченным выделением памя… 15.07.2020 10.02.2026
bdu:2020-02355 Уязвимость библиотеки журналирования Java-программ Log4j, связанная с восстановлением в п… 26.05.2020 10.02.2026
bdu:2020-01729 Уязвимость плагина rustdoc языка программирования Rust, позволяющая нарушителю выполнить … 23.04.2020 10.02.2026
bdu:2019-02509 Уязвимость функции _asn1_expand_object_id (p_tree) библиотеки Libtasn1 операционной систе… 16.07.2019 10.02.2026
bdu:2019-01880 Уязвимость средства криптографической защиты Bouncy Castle, связанная с восстановлением в… 31.05.2019 10.02.2026
bdu:2018-00147 Уязвимость анализатора XML-файлов Xerces2 Java, связанная с ошибками управления ресурсом,… 02.02.2018 10.02.2026
bdu:2015-04033 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 10.02.2026
bdu:2015-04032 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 10.02.2026
bdu:2015-04031 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 10.02.2026
bdu:2026-01516 Уязвимость функции convert___skb_to_skb() ядра операционной системы Linux, позволяющая на… 09.02.2026 09.02.2026
bdu:2026-01515 Уязвимость операционной системы HPE Alletra, системы хранения данных HPE Nimble Storage A… 09.02.2026 09.02.2026
bdu:2026-01514 Уязвимость функции optc1_enable_optc_clock() ядра операционной системы Linux, позволяющая… 09.02.2026 09.02.2026
bdu:2026-01510 Уязвимость функции __ieee80211_scan_completed() ядра операционной системы Linux, позволяю… 09.02.2026 09.02.2026
bdu:2026-01509 Уязвимость функций nilfs_relax_pressure_in_lock() и nilfs_construct_segment() ядра операц… 09.02.2026 09.02.2026
bdu:2026-01508 Уязвимость функции cpe_mime_handlers() микропрограммного обеспечения маршрутизаторов Link… 09.02.2026 09.02.2026
bdu:2026-01507 Уязвимость функции ntfs_read_inode_mount() ядра операционной системы Linux, позволяющая н… 09.02.2026 09.02.2026
bdu:2026-01506 Уязвимость функции formSetWanDiag() микропрограммного обеспечения маршрутизаторов Tenda G… 09.02.2026 09.02.2026
bdu:2026-01505 Уязвимость функции null_init_tag_set() модуля drivers/block/null_blk/main.c драйвера блоч… 09.02.2026 09.02.2026
bdu:2026-01504 Уязвимость функции pot_hole() ядра операционной системы Linux, позволяющая нарушителю ока… 09.02.2026 09.02.2026
bdu:2026-01503 Уязвимость функции usbnet_probe () модуля drivers/net/usb/usbnet.c драйвера сетевых адапт… 09.02.2026 09.02.2026
bdu:2026-01502 Уязвимость функции bcmgenet_desc_rx() модуля drivers/net/ethernet/broadcom/genet/bcmgenet… 09.02.2026 09.02.2026
bdu:2026-01501 Уязвимость функции snd_pcm_oss_period_size() ядра операционной системы Linux, позволяющая… 09.02.2026 09.02.2026
bdu:2026-01500 Уязвимость функции sja1105_table_delete_entry() модуля drivers/net/dsa/sja1105/sja1105_st… 09.02.2026 09.02.2026
bdu:2026-01499 Уязвимость функции jfs_link() модуля fs/jfs/namei.c файловой системы JFS ядра операционно… 09.02.2026 09.02.2026
bdu:2026-01498 Уязвимость функции si_parse_power_table() ядра операционной системы Linux, позволяющая на… 09.02.2026 09.02.2026
bdu:2026-01497 Уязвимость плагина Rule Based Authorization Plugin поискового сервера Apache Solr, позвол… 09.02.2026 09.02.2026
bdu:2026-01496 Уязвимость функции radeon_atombios_fini() модуля drivers/gpu/drm/radeon/radeon_device.c д… 09.02.2026 09.02.2026
bdu:2026-01495 Уязвимость функции fromSetWifiGusetBasic() микропрограммного обеспечения маршрутизаторов … 09.02.2026 09.02.2026
bdu:2026-01494 Уязвимость функции type_show() ядра операционной системы Linux, позволяющая нарушителю ок… 09.02.2026 09.02.2026
ID Description Updated
var-201108-0217 Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before … 2026-03-09T20:27:02.750000Z
var-201601-0029 The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x … 2026-03-09T20:26:57.074000Z
var-201904-1325 A memory corruption issue was addressed with improved memory handling. This issue affecte… 2026-03-09T20:26:56.538000Z
var-201306-0254 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T20:26:53.028000Z
var-201701-1135 NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin t… 2026-03-09T20:26:51.696000Z
var-201404-0377 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51,… 2026-03-09T20:26:16.493000Z
var-201110-0442 ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial… 2026-03-09T20:26:16.402000Z
var-202112-0562 It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete… 2026-03-09T20:26:10.055000Z
var-200505-0162 Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based … 2026-03-09T20:24:54.159000Z
var-201904-0742 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2026-03-09T20:24:23.184000Z
var-202206-1428 In addition to the c_rehash shell command injection identified in CVE-2022-1292, further … 2026-03-09T20:23:37.685000Z
var-201006-1188 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in … 2026-03-09T20:23:32.294000Z
var-200611-0487 com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions,… 2026-03-09T20:23:31.321000Z
var-201302-0184 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T20:23:28.672000Z
var-201304-0375 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T20:23:18.448000Z
var-201004-1006 Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder be… 2026-03-09T20:23:16.624000Z
var-201302-0308 Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … 2026-03-09T20:23:04.725000Z
var-200608-0029 AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of… 2026-03-09T20:23:04.309000Z
var-201705-3790 In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod Ope… 2026-03-09T20:23:01.519000Z
var-201806-1485 An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… 2026-03-09T20:22:56.854000Z
var-202103-1463 The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates p… 2026-03-09T20:22:49.581000Z
var-201605-0492 Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in… 2026-03-09T20:22:48.390000Z
var-201103-0291 Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in Im… 2026-03-09T20:22:48.116000Z
var-201507-0017 The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x be… 2026-03-09T20:22:44.382000Z
var-201912-0596 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2026-03-09T20:22:44.230000Z
var-202302-1097 A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.… 2026-03-09T20:21:43.402000Z
var-202004-2200 A memory corruption issue was addressed with improved memory handling. This issue is fixe… 2026-03-09T20:20:55.787000Z
var-201912-0552 A memory corruption issue was addressed with improved memory handling. This issue is fixe… 2026-03-09T20:20:25.533000Z
var-201302-0236 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-09T20:20:08.684000Z
var-201711-0007 A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1… 2026-03-09T20:19:58.494000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated