Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-6610 |
6.3 (4.0)
3.7 (3.1)
3.7 (3.0)
|
liangliangyy DjangoBlog Setting settings.py hard-coded… |
liangliangyy |
DjangoBlog |
2026-04-20T05:45:18.671Z | 2026-04-20T16:03:06.598Z |
| CVE-2026-6609 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
liangliangyy DjangoBlog views.py form_valid improper a… |
liangliangyy |
DjangoBlog |
2026-04-20T05:30:16.620Z | 2026-04-20T13:51:42.600Z |
| CVE-2026-6608 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
lm-sys fastchat Arena Side-by-Side View add_text contr… |
lm-sys |
fastchat |
2026-04-20T05:15:12.337Z | 2026-04-20T14:57:55.071Z |
| CVE-2026-6607 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
lm-sys fastchat Worker API Endpoint api_generate resou… |
lm-sys |
fastchat |
2026-04-20T05:00:23.135Z | 2026-04-20T11:37:05.103Z |
| CVE-2026-6606 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
modelscope agentscope _agent_base.py _process_audio_bl… |
modelscope |
agentscope |
2026-04-20T04:45:11.806Z | 2026-04-20T16:07:08.458Z |
| CVE-2026-6605 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
modelscope agentscope Internal Service _common.py _get… |
modelscope |
agentscope |
2026-04-20T04:30:13.482Z | 2026-04-20T14:58:30.070Z |
| CVE-2026-6604 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
modelscope agentscope Cloud Metadata Endpoint _openai_… |
modelscope |
agentscope |
2026-04-20T04:15:11.588Z | 2026-04-20T13:53:04.341Z |
| CVE-2026-6603 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
modelscope agentscope _python.py execute_shell_command… |
modelscope |
agentscope |
2026-04-20T04:00:20.462Z | 2026-04-20T14:59:13.475Z |
| CVE-2026-6602 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
rickxy Hospital Management System his_admin_account.ph… |
rickxy |
Hospital Management System |
2026-04-20T03:45:12.100Z | 2026-04-20T11:38:41.514Z |
| CVE-2026-6601 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Lagom WHMCS Template Datatables resource consumption |
Lagom |
WHMCS Template |
2026-04-20T03:30:14.978Z | 2026-04-20T16:09:24.835Z |
| CVE-2026-32956 |
9.8 (3.1)
9.3 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:20:01.225Z | 2026-04-20T13:36:04.476Z |
| CVE-2026-32955 |
8.8 (3.1)
8.7 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:19:47.937Z | 2026-04-20T13:36:04.747Z |
| CVE-2026-32957 |
5.3 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:19:35.581Z | 2026-04-20T13:36:04.975Z |
| CVE-2026-32958 |
6.5 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:19:16.492Z | 2026-04-20T13:19:40.008Z |
| CVE-2026-32959 |
5.9 (3.1)
8.2 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:56.184Z | 2026-04-20T13:56:27.714Z |
| CVE-2026-32960 |
6.5 (3.1)
7.1 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:47.538Z | 2026-04-20T13:57:13.495Z |
| CVE-2026-32961 |
5.3 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:37.055Z | 2026-04-20T13:57:57.283Z |
| CVE-2026-32962 |
5.3 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:25.122Z | 2026-04-20T14:52:15.598Z |
| CVE-2026-32963 |
6.1 (3.0)
5.1 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:07.431Z | 2026-04-20T14:04:22.838Z |
| CVE-2026-32964 |
6.5 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:17:52.839Z | 2026-04-20T14:08:52.559Z |
| CVE-2026-32965 |
7.5 (3.1)
8.7 (4.0)
|
Initialization of a resource with an insecure def… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:17:33.917Z | 2026-04-20T14:23:36.842Z |
| CVE-2026-6600 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
langflow-ai langflow Frontend React Component Renderin… |
langflow-ai |
langflow |
2026-04-20T03:15:12.169Z | 2026-04-20T14:54:42.453Z |
| CVE-2026-6599 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
langflow-ai langflow Model Context Protocol Configurat… |
langflow-ai |
langflow |
2026-04-20T03:00:15.645Z | 2026-04-20T14:24:36.870Z |
| CVE-2026-6598 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
langflow-ai langflow Project Creation Endpoint project… |
langflow-ai |
langflow |
2026-04-20T02:45:15.874Z | 2026-04-20T16:19:18.233Z |
| CVE-2026-6597 |
5.1 (4.0)
2.7 (3.1)
2.7 (3.0)
|
langflow-ai langflow Flow Using API core.py has_api_te… |
langflow-ai |
langflow |
2026-04-20T02:30:14.803Z | 2026-04-20T11:42:32.582Z |
| CVE-2026-6596 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
langflow-ai langflow API Endpoint endpoints.py create_… |
langflow-ai |
langflow |
2026-04-20T02:15:13.863Z | 2026-04-20T14:54:40.530Z |
| CVE-2026-6595 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
ProjectsAndPrograms School Management System HTTP GET … |
ProjectsAndPrograms |
School Management System |
2026-04-20T02:00:49.226Z | 2026-04-20T14:54:50.760Z |
| CVE-2026-6594 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
brikcss merge prototype pollution |
brikcss |
merge |
2026-04-20T01:45:12.099Z | 2026-04-20T14:53:13.499Z |
| CVE-2026-6593 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
ComfyUI View Endpoint server.py cross site scripting |
n/a |
ComfyUI |
2026-04-20T01:30:17.995Z | 2026-04-20T16:18:25.910Z |
| CVE-2026-6592 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
ComfyUI userdata Endpoint user_manager.py getuserdata … |
n/a |
ComfyUI |
2026-04-20T01:15:14.548Z | 2026-04-20T11:59:44.227Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-5958 |
2.1 (4.0)
|
Race Condition in GNU Sed |
GNU |
Sed |
2026-04-20T11:59:32.214Z | 2026-04-20T13:25:59.530Z |
| CVE-2026-6654 |
5.1 (3.1)
|
Use-After-Free and Double-Free in IntoIter::drop when … |
Mozilla |
thin-vec |
2026-04-20T10:05:52.339Z | 2026-04-20T13:14:37.846Z |
| CVE-2026-6632 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F451 httpd SafeClientFilter fromSafeClientFilter… |
Tenda |
F451 |
2026-04-20T11:00:19.795Z | 2026-04-20T15:05:42.179Z |
| CVE-2026-6631 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F451 httpd webExcptypemanFilter fromwebExcptypem… |
Tenda |
F451 |
2026-04-20T10:45:12.978Z | 2026-04-20T15:07:58.242Z |
| CVE-2026-6630 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F451 httpd GstDhcpSetSer fromGstDhcpSetSer buffe… |
Tenda |
F451 |
2026-04-20T10:30:15.493Z | 2026-04-20T13:27:03.711Z |
| CVE-2026-6629 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.exec… |
Metasoft 美特软件 |
MetaCRM |
2026-04-20T10:15:19.931Z | 2026-04-20T15:21:18.092Z |
| CVE-2026-6628 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
phili67 Ecclesia CRM Query Viewer view ValidateInput s… |
phili67 |
Ecclesia CRM |
2026-04-20T10:00:16.739Z | 2026-04-20T10:54:35.730Z |
| CVE-2026-6626 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Cockpit-HQ Cockpit Asset Handler/Aggregate data query … |
Cockpit-HQ |
Cockpit |
2026-04-20T09:45:12.067Z | 2026-04-20T15:23:47.915Z |
| CVE-2026-6625 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
moxi624 Mogu Blog v2 Picture Storage Service LocalFile… |
moxi624 |
Mogu Blog v2 |
2026-04-20T09:30:16.835Z | 2026-04-20T15:27:00.317Z |
| CVE-2026-6624 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
BichitroGan ISP Billing Software Pool List add cross s… |
BichitroGan |
ISP Billing Software |
2026-04-20T09:15:17.533Z | 2026-04-20T13:27:39.595Z |
| CVE-2026-6623 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
BichitroGan ISP Billing Software Profile users-view cr… |
BichitroGan |
ISP Billing Software |
2026-04-20T09:00:20.118Z | 2026-04-20T15:29:21.949Z |
| CVE-2026-6622 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
BichitroGan ISP Billing Software Customer edit cross s… |
BichitroGan |
ISP Billing Software |
2026-04-20T08:45:20.512Z | 2026-04-20T11:10:22.776Z |
| CVE-2026-31430 |
N/A
|
X.509: Fix out-of-bounds access when parsing extensions |
Linux |
Linux |
2026-04-20T09:43:03.919Z | 2026-04-20T09:43:03.919Z |
| CVE-2026-31429 |
N/A
|
net: skb: fix cross-cache free of KFENCE-allocated skb head |
Linux |
Linux |
2026-04-20T09:43:03.194Z | 2026-04-20T09:43:03.194Z |
| CVE-2025-13480 |
5.1 (4.0)
|
Incorrect authorization in Fudo Enterprise |
Fudo Security |
Fudo Enterprise |
2026-04-20T09:00:16.259Z | 2026-04-20T13:28:18.280Z |
| CVE-2026-6621 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
1024bit extend-deep index.js prototype pollution |
1024bit |
extend-deep |
2026-04-20T08:30:14.457Z | 2026-04-20T15:33:04.684Z |
| CVE-2026-6620 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
SonicCloudOrg sonic-server File Upload Endpoint FileTo… |
SonicCloudOrg |
sonic-server |
2026-04-20T08:15:18.329Z | 2026-04-20T15:35:54.833Z |
| CVE-2026-6619 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
langgenius dify ImagePreview image-preview.tsx openInN… |
langgenius |
dify |
2026-04-20T08:00:17.267Z | 2026-04-20T13:29:29.634Z |
| CVE-2026-6618 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
langgenius dify ApiBasedToolSchemaParser parser.py par… |
langgenius |
dify |
2026-04-20T07:45:16.985Z | 2026-04-20T16:21:30.799Z |
| CVE-2026-5967 |
8.7 (4.0)
8.8 (3.1)
|
TeamT5|ThreatSonar Anti-Ransomware - Privilege Escalation |
TeamT5 |
ThreatSonar Anti-Ransomware |
2026-04-20T07:44:19.754Z | 2026-04-20T13:29:59.132Z |
| CVE-2026-39454 |
7.8 (3.0)
8.5 (4.0)
|
SKYSEA Client View and SKYMEC IT Manager provided… |
Sky Co.,LTD. |
SKYSEA Client View |
2026-04-20T08:04:56.595Z | 2026-04-20T13:28:56.536Z |
| CVE-2026-6617 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
langgenius dify ApiToolManageService api_tools_manage_… |
langgenius |
dify |
2026-04-20T07:30:12.357Z | 2026-04-20T11:12:15.089Z |
| CVE-2026-6616 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
TransformerOptimus SuperAGI WebScraperTool webpage_ext… |
TransformerOptimus |
SuperAGI |
2026-04-20T07:15:12.269Z | 2026-04-20T15:54:33.904Z |
| CVE-2026-6615 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
TransformerOptimus SuperAGI Multipart Upload resources… |
TransformerOptimus |
SuperAGI |
2026-04-20T07:00:16.486Z | 2026-04-20T15:56:36.960Z |
| CVE-2026-5966 |
7.2 (4.0)
8.1 (3.1)
|
TeamT5|ThreatSonar Anti-Ransomware - Arbitrary File Deletion |
TeamT5 |
ThreatSonar Anti-Ransomware |
2026-04-20T07:40:33.323Z | 2026-04-20T13:30:25.604Z |
| CVE-2026-5964 |
9.3 (4.0)
9.8 (3.1)
|
Digiwin|EasyFlow .NET - SQL Injection |
Digiwin |
EasyFlow .NET |
2026-04-20T07:36:58.476Z | 2026-04-20T13:38:08.600Z |
| CVE-2026-5963 |
9.3 (4.0)
9.8 (3.1)
|
Digiwin|EasyFlow .NET - SQL Injection |
Digiwin |
EasyFlow .NET |
2026-04-20T07:32:20.443Z | 2026-04-20T13:42:03.062Z |
| CVE-2026-41282 |
4 (3.1)
|
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL… |
ProjectDiscovery |
Nuclei |
2026-04-20T07:10:30.246Z | 2026-04-21T00:59:19.998Z |
| CVE-2026-6644 |
9.4 (4.0)
|
A command injection vulnerability was found in the PPT… |
ASUSTOR Inc. |
ADM |
2026-04-20T06:54:42.989Z | 2026-04-20T13:50:31.828Z |
| CVE-2026-6643 |
8.6 (4.0)
|
A stack-based buffer overflow vulnerability in the VPN… |
ASUSTOR Inc. |
ADM |
2026-04-20T06:34:27.511Z | 2026-04-20T13:46:07.764Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mrmx-7hg5-pj7x |
4.3 (3.1)
2.1 (4.0)
|
A flaw has been found in Qihui jtbc5 CMS 5.0.3.6. Affected is an unknown function of the file /dev/… | 2026-04-17T15:31:17Z | 2026-04-17T15:31:18Z |
| ghsa-mh4x-rmrx-3hp4 |
6.5 (3.1)
|
Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail … | 2026-04-17T15:31:17Z | 2026-04-17T15:31:17Z |
| ghsa-m7cf-4gh2-v4qg |
6.8 (3.1)
|
Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail … | 2026-04-17T15:31:17Z | 2026-04-17T15:31:17Z |
| ghsa-gcf8-4gjc-v7ff |
7.5 (3.1)
|
Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers… | 2026-04-17T15:31:17Z | 2026-04-17T15:31:17Z |
| ghsa-c97m-vxhj-p7j6 |
6.1 (3.1)
5.1 (4.0)
|
goldmark vulnerable to Cross-site Scripting (XSS) | 2026-04-17T15:31:17Z | 2026-04-18T01:02:42Z |
| ghsa-5f43-3gvm-hhjm |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. Thi… | 2026-04-17T15:31:17Z | 2026-04-17T15:31:17Z |
| ghsa-376w-pjjp-jrvj |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability was detected in classroombookings up to 2.17.0. This impacts the function read of t… | 2026-04-17T15:31:17Z | 2026-04-17T15:31:18Z |
| ghsa-xgpm-2v6j-vx8q |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 t… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-x63q-987j-jrv7 |
4.3 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-wx63-92xj-ggq5 |
6.2 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-w6h6-qc6q-q65w |
6.6 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-r9x4-2726-c64m |
6.2 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-pc4q-wmj3-q7jg |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 t… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-jh98-4jxg-c74j |
7.2 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-f2cg-3cww-mcq8 |
6.9 (4.0)
|
GREENmod uses named pipes for communication between plugins, the web portal, and the system service… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-7rfm-rcv9-66r2 |
7.2 (3.1)
7.3 (4.0)
|
A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function s… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-7g82-gmhh-22cx |
6.7 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-6w3g-2v88-h993 |
5.9 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-53vq-962v-f9cq |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 t… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-536m-vwvg-ggr6 |
6.6 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-4229-xrvq-qm47 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 t… | 2026-04-17T12:31:25Z | 2026-04-17T12:31:25Z |
| ghsa-xpp5-4hhp-6qhr |
7.2 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-w42r-7hmw-4854 |
7.6 (3.1)
|
Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Relea… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-q846-2w2g-p6v6 |
7.8 (3.1)
|
Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, L… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-gc8m-6q8j-fh75 |
4.4 (3.1)
|
The VideoZen plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to an… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-cpjc-5x9w-83h8 |
9.5 (4.0)
|
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database i… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-c63q-7gvc-8xq3 |
5.3 (3.1)
|
A flaw was found in the AAP MCP server. An unauthenticated remote attacker can exploit a log inject… | 2026-04-17T09:31:20Z | 2026-04-17T09:31:20Z |
| ghsa-mqmv-fjj3-cwjx |
9.3 (4.0)
|
Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System I… | 2026-04-17T09:31:19Z | 2026-04-17T09:31:19Z |
| ghsa-g7j3-235h-9jvv |
6.2 (4.0)
|
Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd. Sparx Enterprise Archi… | 2026-04-17T09:31:19Z | 2026-04-17T09:31:19Z |
| ghsa-9gf7-444h-6v98 |
9.3 (4.0)
|
Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In… | 2026-04-17T09:31:19Z | 2026-04-17T09:31:19Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-379 |
|
OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.1… | omero-figure | 2021-10-14T16:15:00Z | 2021-10-24T23:24:38.547709Z |
| pysec-2021-372 |
|
OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.1… | omero-web | 2021-10-14T16:15:00Z | 2021-10-17T22:58:18.538383Z |
| pysec-2021-369 |
|
The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this iss… | django-unicorn | 2021-10-11T01:15:00Z | 2021-10-11T05:26:07.255634Z |
| pysec-2021-878 |
7.5 (3.1)
|
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enab… | mkdocs | 2021-10-07T14:15:00Z | 2024-01-17T10:53:34.840029Z |
| pysec-2021-357 |
|
The Unicorn framework through 0.35.3 for Django allows XSS via component.name. | django-unicorn | 2021-10-07T06:15:00Z | 2021-10-08T02:27:35.256995Z |
| pysec-2021-365 |
|
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when perfor… | vyper | 2021-10-06T18:15:00Z | 2021-10-11T01:16:43.176882Z |
| pysec-2021-363 |
|
Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAu… | scrapy | 2021-10-06T18:15:00Z | 2021-10-11T01:16:42.905582Z |
| pysec-2021-423 |
|
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by t… | gateone | 2021-10-06T13:15:00Z | 2021-11-16T03:58:44.124463Z |
| pysec-2021-366 |
|
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external fu… | vyper | 2021-10-05T23:15:00Z | 2021-10-11T01:16:43.215640Z |
| pysec-2021-364 |
|
Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected … | scrapy-splash | 2021-10-05T21:15:00Z | 2021-10-11T01:16:42.816754Z |
| pysec-2021-881 |
7.5 (3.1)
|
The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIB… | eftl | 2021-10-05T18:15:00Z | 2024-11-21T14:22:45.803448Z |
| pysec-2021-429 |
|
SLO generator allows for loading of YAML files that if crafted in a specific format can a… | slo-generator | 2021-10-04T10:15:00Z | 2021-11-16T21:20:29.712720Z |
| pysec-2021-375 |
|
Cobbler before 3.3.0 allows authorization bypass for modification of settings. | cobbler | 2021-10-04T06:15:00Z | 2021-10-19T21:47:31.769581Z |
| pysec-2021-374 |
|
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. | cobbler | 2021-10-04T06:15:00Z | 2021-10-19T21:47:31.730339Z |
| pysec-2021-373 |
|
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XM… | cobbler | 2021-10-04T06:15:00Z | 2021-10-19T21:47:31.690816Z |
| pysec-2021-350 |
|
In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting … | shuup | 2021-09-30T08:15:00Z | 2021-09-30T10:32:36.636402Z |
| pysec-2021-355 |
|
“Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vu… | shuup | 2021-09-29T14:15:00Z | 2021-09-30T23:26:29.598032Z |
| pysec-2021-351 |
|
ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP… | esphome | 2021-09-28T16:15:00Z | 2021-09-30T23:26:26.067991Z |
| pysec-2021-356 |
|
nltk is vulnerable to Inefficient Regular Expression Complexity | nltk | 2021-09-27T13:15:00Z | 2021-10-01T22:29:03.465380Z |
| pysec-2021-354 |
|
furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrar… | openvpn-monitor | 2021-09-27T06:15:00Z | 2021-09-30T23:26:26.851532Z |
| pysec-2021-353 |
|
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN manag… | openvpn-monitor | 2021-09-27T06:15:00Z | 2021-09-30T23:26:26.808242Z |
| pysec-2021-352 |
|
furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client. | openvpn-monitor | 2021-09-27T06:15:00Z | 2021-09-30T23:26:26.774511Z |
| pysec-2021-338 |
|
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS… | leo | 2021-09-22T20:15:00Z | 2021-09-26T23:50:00.616119Z |
| pysec-2021-358 |
|
A flaw was found in Ansible, where a user's controller is vulnerable to template injectio… | ansible | 2021-09-22T12:15:00Z | 2021-10-11T01:16:39.746753Z |
| pysec-2021-327 |
|
Apprise is an open source library which allows you to send a notification to almost all o… | apprise | 2021-09-20T22:15:00Z | 2021-09-23T00:10:35.209283Z |
| pysec-2021-325 |
|
Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flas… | flask-restx | 2021-09-20T18:15:00Z | 2021-09-20T20:31:06.092661Z |
| pysec-2021-333 |
|
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and… | sqlparse | 2021-09-20T17:15:00Z | 2023-04-09T10:46:38.256842Z |
| pysec-2021-324 |
|
An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the func… | lief | 2021-09-20T16:15:00Z | 2021-09-20T18:35:23.431537Z |
| pysec-2021-321 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.… | wasmtime | 2021-09-17T21:15:00Z | 2021-09-17T22:30:49.898970Z |
| pysec-2021-322 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0… | wasmtime | 2021-09-17T20:15:00Z | 2021-09-17T22:30:49.947373Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1690 | Malicious code in chain-promised-cli (npm) | 2026-03-18T12:43:51Z | 2026-03-23T05:16:26Z |
| mal-2026-1689 | Malicious code in chain-promised-async (npm) | 2026-03-18T12:43:41Z | 2026-03-23T05:16:26Z |
| mal-2026-1688 | Malicious code in chain-promised (npm) | 2026-03-18T12:43:40Z | 2026-03-23T05:16:26Z |
| mal-2026-1687 | Malicious code in chain-cli-promised (npm) | 2026-03-18T12:43:40Z | 2026-03-23T05:16:26Z |
| mal-2026-1686 | Malicious code in chain-argon (npm) | 2026-03-18T12:43:39Z | 2026-03-23T05:16:26Z |
| mal-2026-1685 | Malicious code in chai-types (npm) | 2026-03-18T12:43:37Z | 2026-03-23T05:16:26Z |
| mal-2026-1684 | Malicious code in chai-proxy (npm) | 2026-03-18T12:43:24Z | 2026-03-23T05:16:26Z |
| mal-2026-1683 | Malicious code in chai-promised-tools (npm) | 2026-03-18T12:43:22Z | 2026-03-23T05:16:26Z |
| mal-2026-1682 | Malicious code in chai-promised-plugin (npm) | 2026-03-18T12:43:21Z | 2026-03-23T05:16:26Z |
| mal-2026-1681 | Malicious code in chai-promised-cli (npm) | 2026-03-18T12:43:20Z | 2026-03-23T05:16:26Z |
| mal-2026-1680 | Malicious code in chai-promised-await (npm) | 2026-03-18T12:43:11Z | 2026-03-23T05:16:26Z |
| mal-2026-1679 | Malicious code in chai-promised-async (npm) | 2026-03-18T12:43:10Z | 2026-03-23T05:16:26Z |
| mal-2026-1678 | Malicious code in chai-conf (npm) | 2026-03-18T12:42:56Z | 2026-03-23T05:16:26Z |
| mal-2026-1677 | Malicious code in chai-cli-async (npm) | 2026-03-18T12:42:56Z | 2026-03-23T05:16:26Z |
| mal-2026-1676 | Malicious code in chai-chai-chain-promised (npm) | 2026-03-18T12:42:54Z | 2026-03-23T05:16:26Z |
| mal-2026-1675 | Malicious code in chai-await-promised (npm) | 2026-03-18T12:42:53Z | 2026-03-23T05:16:26Z |
| mal-2026-1674 | Malicious code in chai-await-cli (npm) | 2026-03-18T12:42:52Z | 2026-03-23T05:16:26Z |
| mal-2026-1673 | Malicious code in chai-await-chain (npm) | 2026-03-18T12:42:51Z | 2026-03-23T05:16:26Z |
| mal-2026-1672 | Malicious code in chai-as-sync (npm) | 2026-03-18T12:42:37Z | 2026-03-23T05:16:26Z |
| mal-2026-1671 | Malicious code in chai-as-resolved (npm) | 2026-03-18T12:42:37Z | 2026-03-23T05:16:26Z |
| mal-2026-1670 | Malicious code in chai-as-prop (npm) | 2026-03-18T12:42:35Z | 2026-03-23T05:16:26Z |
| mal-2026-1669 | Malicious code in chai-as-prompt (npm) | 2026-03-18T12:42:26Z | 2026-03-23T05:16:26Z |
| mal-2026-1668 | Malicious code in chai-as-produced (npm) | 2026-03-18T12:42:25Z | 2026-03-23T05:16:26Z |
| mal-2026-1667 | Malicious code in cat-ecommerce-alloy (npm) | 2026-03-18T12:41:55Z | 2026-03-23T05:16:26Z |
| mal-2026-1666 | Malicious code in carbon-mac-copy-cloner (npm) | 2026-03-18T12:41:53Z | 2026-04-16T15:42:08Z |
| mal-2026-1665 | Malicious code in browser-compat-data (npm) | 2026-03-18T12:41:26Z | 2026-03-23T05:16:25Z |
| mal-2026-1664 | Malicious code in brisk-web-ssr (npm) | 2026-03-18T12:41:25Z | 2026-03-23T05:16:25Z |
| mal-2026-1663 | Malicious code in braze-content-card-island (npm) | 2026-03-18T12:41:25Z | 2026-03-23T05:16:25Z |
| mal-2026-1662 | Malicious code in blob-internal-security-test-f63eabf7 (npm) | 2026-03-18T12:41:08Z | 2026-03-23T05:16:25Z |
| mal-2026-1661 | Malicious code in blackstone-core (npm) | 2026-03-18T12:41:06Z | 2026-03-23T05:16:25Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1995 | IBM Power Hardware Management Console: Schwachstelle ermöglicht Cross-Site Scripting | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1994 | D-LINK Router DIR-852: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-08T22:00:00.000+00:00 | 2025-09-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1993 | Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1992 | Dell PowerScale: Schwachstelle ermöglicht Privilegieneskalation | 2025-09-08T22:00:00.000+00:00 | 2025-09-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1991 | xwiki: Schwachstelle ermöglicht Privilegieneskalation | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1990 | Liferay Portal: Mehrere Schwachstellen | 2025-09-08T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1989 | SAP Patchday September 2025: Mehrere Schwachstellen | 2025-09-08T22:00:00.000+00:00 | 2025-09-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1988 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-07T22:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1987 | Keycloak: Mehrere Schwachstellen | 2025-09-07T22:00:00.000+00:00 | 2025-11-09T23:00:00.000+00:00 |
| wid-sec-w-2025-1986 | Apache Jackrabbit: Schwachstelle ermöglicht Codeausführung | 2025-09-07T22:00:00.000+00:00 | 2025-09-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1985 | D-LINK DIR-825 Router: Schwachstelle ermöglicht Codeausführung | 2025-09-07T22:00:00.000+00:00 | 2025-09-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1984 | Nvidia Cumulus Linux: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-07T22:00:00.000+00:00 | 2025-09-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1983 | MongoDB Server: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-07T22:00:00.000+00:00 | 2025-09-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1982 | Microsoft Edge: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-07T22:00:00.000+00:00 | 2025-09-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1981 | ImageMagick (MagickCore blob): Schwachstelle ermöglicht Codeausführung | 2025-09-04T22:00:00.000+00:00 | 2025-12-18T23:00:00.000+00:00 |
| wid-sec-w-2025-1980 | IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-04T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1979 | HCL Commerce (IBM Security Verify Directory): Schwachstelle ermöglicht Cross-Site Scripting | 2025-09-04T22:00:00.000+00:00 | 2025-09-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1978 | Red Hat OpenShift GitOps (Argo CD): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-04T22:00:00.000+00:00 | 2025-09-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1977 | Red Hat Enterprise Linux (assimp): Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-04T22:00:00.000+00:00 | 2025-09-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1976 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-04T22:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1975 | Kubernetes: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-04T22:00:00.000+00:00 | 2025-09-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1974 | Podman: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-04T22:00:00.000+00:00 | 2026-03-08T23:00:00.000+00:00 |
| wid-sec-w-2025-1973 | Google Cloud Platform: Schwachstelle ermöglicht Manipulation | 2025-09-04T22:00:00.000+00:00 | 2025-09-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1972 | Microsoft Dynamics 365 FastTrack Implementation: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-04T22:00:00.000+00:00 | 2025-09-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1971 | Microsoft Azure: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-09-04T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1968 | pgAdmin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1967 | xwiki: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1966 | Jenkins Plugins: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1965 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-09-03T22:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-1964 | Pixel Patchday September 2025: Mehrere Schwachstellen | 2025-09-03T22:00:00.000+00:00 | 2025-09-04T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-164-04 | Rockwell Automation FactoryTalk Transaction Manager | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-03 | Rockwell Automation FactoryTalk Edge Gateway | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-02 | Rockwell Automation FactoryTalk Services Platform | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-01 | Datalogics Library Third-Party | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-166-14 | Siemens Teamcenter Visualization and JT2Go | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-166-13 | Siemens SICAM A8000 Devices | 2023-06-13T00:00:00.000000Z | 2023-06-13T00:00:00.000000Z |
| icsa-23-166-12 | Siemens SINAMICS Medium Voltage Products | 2023-06-13T00:00:00.000000Z | 2023-06-14T00:00:00.000000Z |
| icsa-23-166-11 | Siemens SIMATIC S7-1500 TM MFP Linux Kernel | 2023-06-13T00:00:00.000000Z | 2024-04-09T00:00:00.000000Z |
| icsa-23-166-10 | Siemens SIMATIC S7-1500 TM MFP BIOS | 2023-06-13T00:00:00.000000Z | 2024-04-09T00:00:00.000000Z |
| icsa-23-166-09 | Siemens Solid Edge | 2023-06-13T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-166-08 | Siemens SIMATIC STEP 7 and Derived Products | 2023-06-13T00:00:00.000000Z | 2024-05-14T00:00:00.000000Z |
| icsa-23-166-07 | Siemens SIMATIC WinCC V7 | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-166-06 | Siemens TIA Portal | 2023-06-13T00:00:00.000000Z | 2024-12-10T00:00:00.000000Z |
| icsa-23-166-05 | Siemens SIMATIC WinCC | 2023-06-13T00:00:00.000000Z | 2023-06-13T00:00:00.000000Z |
| icsa-23-166-04 | Siemens SIMOTION | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-166-03 | Siemens SICAM Q200 Devices | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-159-02 | Sensormatic Electronics Illustra Pro Gen 4 | 2023-06-08T06:00:00.000000Z | 2023-06-08T06:00:00.000000Z |
| icsa-23-159-01 | Atlas Copco Power Focus 6000 | 2023-06-08T06:00:00.000000Z | 2023-06-08T06:00:00.000000Z |
| icsa-23-157-02 | Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update C) | 2023-06-06T06:00:00.000000Z | 2025-12-02T07:00:00.000000Z |
| icsa-23-157-01 | Delta Electronics CNCSoft-B DOPSoft | 2023-06-06T06:00:00.000000Z | 2023-09-07T06:00:00.000000Z |
| icsa-23-152-02 | HID Global SAFE | 2023-06-01T06:00:00.000000Z | 2023-06-01T06:00:00.000000Z |
| icsa-23-152-01 | Advantech WebAccess/SCADA | 2023-06-01T06:00:00.000000Z | 2023-06-01T06:00:00.000000Z |
| icsa-23-143-01 | Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products | 2023-05-31T20:26:29.765074Z | 2023-05-31T20:26:29.765074Z |
| icsa-23-145-01 | Moxa MXsecurity Series | 2023-05-31T20:26:29.755020Z | 2023-05-31T20:26:29.755020Z |
| icsa-23-143-04 | Horner Automation Cscape | 2023-05-31T20:26:29.732849Z | 2023-05-31T20:26:29.732849Z |
| icsa-23-150-01 | Advantech WebAccess/SCADA | 2023-05-25T06:00:00.000000Z | 2023-05-25T06:00:00.000000Z |
| icsa-23-143-03 | Mitsubishi Electric MELSEC Series CPU module (Update D) | 2023-05-23T06:00:00.000000Z | 2024-04-25T06:00:00.000000Z |
| icsa-23-138-04 | Johnson Controls OpenBlue Enterprise Manager Data Collector | 2023-05-22T14:17:19.565087Z | 2023-05-22T14:17:19.565087Z |
| icsa-23-138-01 | Carlo Gavazzi Powersoft | 2023-05-18T19:01:59.436599Z | 2023-05-18T19:01:59.436599Z |
| icsa-23-136-02 | Rockwell ArmorStart | 2023-05-18T19:01:59.428226Z | 2023-05-18T19:01:59.428226Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cimc-enum-cyhep3b7 | Cisco Integrated Management Controller Username Enumeration Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-cimc-civ-pkdbe9x5 | Cisco Integrated Management Controller Command Injection Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-cimc-auth-zwkppjxl | Cisco Integrated Management Controller Authorization Bypass Vulnerability | 2020-11-04T16:00:00+00:00 | 2021-02-26T15:37:04+00:00 |
| cisco-sa-cedge-filt-bypass-y6wzmqm4 | Cisco SD-WAN Software Packet Filtering Bypass Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-12-14T21:43:02+00:00 |
| cisco-sa-anyconnect-ipc-kfqo9qhk | Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability | 2020-11-04T16:00:00+00:00 | 2021-05-21T18:06:37+00:00 |
| cisco-sa-anyconnect-file-read-lsvdd6uh | Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-asa-ssl-dos-7uzwwsey | Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability | 2020-10-22T16:00:00+00:00 | 2020-10-27T20:31:40+00:00 |
| cisco-sa-tcp-intercept-bypass-xg9m3pby | Cisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxosfcm-csrf-uho4e5bz | Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-sbbyp-kqp6ngre | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:31:44+00:00 |
| cisco-sa-fxos-sbbp-xtupkytn | Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-cmdinj-pqzvmxcr | Cisco FXOS Software Command Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:21:04+00:00 |
| cisco-sa-fxos-cmdinj-b63rwkpm | Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-sft-mitm-tc8azfs2 | Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dos-njyvdcla | Cisco Firepower Management Center Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dirtrav-nw8xcusb | Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-tcp-dos-gdczdqaf | Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-ssl-mf3822z | Cisco Firepower Threat Defense Software SSL Input Validation Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-ssl-dcrpt-dos-ryekx4yy | Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-snmp-dos-r8enpbos | Cisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-inline-dos-nxquyeqm | Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-icmp-dos-hxxcycm | Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-hidcmd-pfdewvbd | Cisco Firepower Threat Defense Software Hidden Commands Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-container-esc-fmyqfbqv | Cisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-bypass-3ecfd24j | Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-xss-6vqh4rpz | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-redirect-nyduseqn | Cisco Firepower Management Center Software Open Redirect Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-dos-3wymywkh | Cisco Firepower Management Center Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-cacauthbyp-nclgzm3q | Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-asaftd-xss-multiple-fcb3vpze | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities | 2020-10-21T16:00:00+00:00 | 2021-06-28T15:14:27+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-59516 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-55233 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-09T00:00:00.000Z |
| msrc_cve-2025-54100 | PowerShell Remote Code Execution Vulnerability | 2025-12-09T00:00:00.000Z | 2025-12-18T00:00:00.000Z |
| msrc_cve-2025-69277 | libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. | 2025-12-02T00:00:00.000Z | 2026-02-18T02:48:42.000Z |
| msrc_cve-2025-68973 | In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.) | 2025-12-02T00:00:00.000Z | 2026-02-25T01:36:51.000Z |
| msrc_cve-2025-68972 | In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an "invalid armor" message is printed during verification). This is related to use of \f as a marker to denote truncation of a long plaintext line. | 2025-12-02T00:00:00.000Z | 2026-03-03T14:52:31.000Z |
| msrc_cve-2025-68746 | spi: tegra210-quad: Fix timeout handling | 2025-12-02T00:00:00.000Z | 2026-02-18T02:29:02.000Z |
| msrc_cve-2025-68745 | scsi: qla2xxx: Clear cmds after chip reset | 2025-12-02T00:00:00.000Z | 2026-03-31T15:01:55.000Z |
| msrc_cve-2025-68744 | bpf: Free special fields when update [lru_,]percpu_hash maps | 2025-12-02T00:00:00.000Z | 2026-02-18T02:26:56.000Z |
| msrc_cve-2025-68742 | bpf: Fix invalid prog->stats access when update_effective_progs fails | 2025-12-02T00:00:00.000Z | 2026-02-18T02:30:39.000Z |
| msrc_cve-2025-68741 | scsi: qla2xxx: Fix improper freeing of purex item | 2025-12-02T00:00:00.000Z | 2026-02-18T02:21:57.000Z |
| msrc_cve-2025-68740 | ima: Handle error code returned by ima_filter_rule_match() | 2025-12-02T00:00:00.000Z | 2026-02-18T02:34:12.000Z |
| msrc_cve-2025-68736 | landlock: Fix handling of disconnected directories | 2025-12-02T00:00:00.000Z | 2026-03-31T15:01:33.000Z |
| msrc_cve-2025-68733 | smack: fix bug: unprivileged task can create labels | 2025-12-02T00:00:00.000Z | 2026-02-18T02:39:17.000Z |
| msrc_cve-2025-68732 | gpu: host1x: Fix race in syncpt alloc/free | 2025-12-02T00:00:00.000Z | 2026-02-18T02:22:51.000Z |
| msrc_cve-2025-68729 | wifi: ath12k: Fix MSDU buffer types handling in RX error path | 2025-12-02T00:00:00.000Z | 2026-01-08T14:37:51.000Z |
| msrc_cve-2025-68728 | ntfs3: fix uninit memory after failed mi_read in mi_format_new | 2025-12-02T00:00:00.000Z | 2026-01-13T01:43:26.000Z |
| msrc_cve-2025-68727 | ntfs3: Fix uninit buffer allocated by __getname() | 2025-12-02T00:00:00.000Z | 2026-01-13T01:43:46.000Z |
| msrc_cve-2025-68725 | bpf: Do not let BPF test infra emit invalid GSO types to stack | 2025-12-02T00:00:00.000Z | 2026-03-03T15:00:44.000Z |
| msrc_cve-2025-68724 | crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id | 2025-12-02T00:00:00.000Z | 2026-02-18T02:38:05.000Z |
| msrc_cve-2025-68615 | Net-SNMP snmptrapd crash | 2025-12-02T00:00:00.000Z | 2025-12-31T01:37:13.000Z |
| msrc_cve-2025-68476 | KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential | 2025-12-02T00:00:00.000Z | 2026-01-08T01:39:41.000Z |
| msrc_cve-2025-68390 | Elasticsearch Allocation of Resources Without Limits or Throttling | 2025-12-02T00:00:00.000Z | 2025-12-23T01:37:15.000Z |
| msrc_cve-2025-68384 | Elasticsearch Allocation of Resources Without Limits or Throttling | 2025-12-02T00:00:00.000Z | 2025-12-23T01:37:09.000Z |
| msrc_cve-2025-68380 | wifi: ath11k: fix peer HE MCS assignment | 2025-12-02T00:00:00.000Z | 2026-01-08T14:41:22.000Z |
| msrc_cve-2025-68379 | RDMA/rxe: Fix null deref on srq->rq.queue after resize failure | 2025-12-02T00:00:00.000Z | 2026-02-18T02:35:33.000Z |
| msrc_cve-2025-68378 | bpf: Fix stackmap overflow check in __bpf_get_stackid() | 2025-12-02T00:00:00.000Z | 2026-03-31T15:02:43.000Z |
| msrc_cve-2025-68376 | coresight: ETR: Fix ETR buffer use-after-free issue | 2025-12-02T00:00:00.000Z | 2026-01-13T01:43:52.000Z |
| msrc_cve-2025-68374 | md: fix rcu protection in md_wakeup_thread | 2025-12-02T00:00:00.000Z | 2026-03-31T15:03:08.000Z |
| msrc_cve-2025-68372 | nbd: defer config put in recv_work | 2025-12-02T00:00:00.000Z | 2026-02-18T02:32:55.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15326-1 | chmlib-devel-0.40-26.1 on GA media | 2025-07-09T00:00:00Z | 2025-07-09T00:00:00Z |
| opensuse-su-2025:15325-1 | MozillaFirefox-140.0.2-1.1 on GA media | 2025-07-09T00:00:00Z | 2025-07-09T00:00:00Z |
| opensuse-su-2025:15324-1 | python311-pycares-4.9.0-1.1 on GA media | 2025-07-08T00:00:00Z | 2025-07-08T00:00:00Z |
| opensuse-su-2025:15323-1 | libpoppler-cpp2-25.06.0-1.1 on GA media | 2025-07-08T00:00:00Z | 2025-07-08T00:00:00Z |
| opensuse-su-2025:15322-1 | libPocoActiveRecord112-1.14.2-1.1 on GA media | 2025-07-08T00:00:00Z | 2025-07-08T00:00:00Z |
| opensuse-su-2025:15321-1 | libxml2-2-2.13.8-2.1 on GA media | 2025-07-08T00:00:00Z | 2025-07-08T00:00:00Z |
| opensuse-su-2025:15320-1 | avif-tools-1.3.0-2.1 on GA media | 2025-07-08T00:00:00Z | 2025-07-08T00:00:00Z |
| opensuse-su-2025:15319-1 | djvulibre-3.5.29-1.1 on GA media | 2025-07-08T00:00:00Z | 2025-07-08T00:00:00Z |
| opensuse-su-2025:15318-1 | redis-8.0.3-1.1 on GA media | 2025-07-07T00:00:00Z | 2025-07-07T00:00:00Z |
| opensuse-su-2025:15317-1 | incus-6.14-1.1 on GA media | 2025-07-07T00:00:00Z | 2025-07-07T00:00:00Z |
| opensuse-su-2025:15316-1 | python311-Pillow-11.3.0-1.1 on GA media | 2025-07-06T00:00:00Z | 2025-07-06T00:00:00Z |
| opensuse-su-2025:15315-1 | libmozjs-128-0-128.12.0-1.1 on GA media | 2025-07-06T00:00:00Z | 2025-07-06T00:00:00Z |
| opensuse-su-2025:15314-1 | dpkg-1.22.21-1.1 on GA media | 2025-07-06T00:00:00Z | 2025-07-06T00:00:00Z |
| opensuse-su-2025:15313-1 | apache2-mod_security2-2.9.11-1.1 on GA media | 2025-07-06T00:00:00Z | 2025-07-06T00:00:00Z |
| opensuse-su-2025:15312-1 | MozillaThunderbird-128.12.0-1.1 on GA media | 2025-07-06T00:00:00Z | 2025-07-06T00:00:00Z |
| opensuse-su-2025:15311-1 | xwayland-24.1.8-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15310-1 | xorg-x11-server-21.1.15-6.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15309-1 | libwx_gtk2u_adv-suse16_0_0-3.2.8-4.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15308-1 | libwireshark18-4.4.7-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15307-1 | velociraptor-0.7.0.4.git163.87ee3570-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15306-1 | valkey-8.1.2-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15305-1 | traefik2-2.11.26-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15304-1 | traefik-3.4.3-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15303-1 | tomcat11-11.0.8-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15302-1 | tomcat10-10.1.42-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15301-1 | tomcat-9.0.106-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15300-1 | teleport-17.5.3-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15299-1 | libsystemd0-257.7-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15298-1 | sudo-1.9.17p1-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15297-1 | libspdlog1_15-1.15.3-2.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1461 | Red Hat Security Advisory: thunderbird security update | 2026-01-28T04:08:15+00:00 | 2026-03-18T17:26:54+00:00 |
| rhsa-2026:1444 | Red Hat Security Advisory: kernel security update | 2026-01-28T00:57:25+00:00 | 2026-03-18T03:16:03+00:00 |
| rhsa-2026:1442 | Red Hat Security Advisory: kernel security update | 2026-01-28T00:42:29+00:00 | 2026-03-18T03:16:07+00:00 |
| rhsa-2026:1441 | Red Hat Security Advisory: kernel security update | 2026-01-28T00:38:19+00:00 | 2026-03-30T23:21:02+00:00 |
| rhsa-2026:1445 | Red Hat Security Advisory: kernel security update | 2026-01-28T00:33:29+00:00 | 2026-04-01T19:29:20+00:00 |
| rhsa-2026:1443 | Red Hat Security Advisory: kernel-rt security update | 2026-01-28T00:26:44+00:00 | 2026-03-30T23:21:02+00:00 |
| rhsa-2026:1431 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.8.2 release | 2026-01-27T20:01:40+00:00 | 2026-04-14T09:46:06+00:00 |
| rhsa-2026:1429 | Red Hat Security Advisory: php:8.3 security update | 2026-01-27T19:37:59+00:00 | 2026-04-08T16:37:51+00:00 |
| rhsa-2026:1409 | Red Hat Security Advisory: php:8.2 security update | 2026-01-27T18:07:34+00:00 | 2026-04-08T16:37:49+00:00 |
| rhsa-2026:1412 | Red Hat Security Advisory: php:8.2 security update | 2026-01-27T17:44:24+00:00 | 2026-04-08T16:37:49+00:00 |
| rhsa-2026:0978 | Red Hat Security Advisory: OpenShift Container Platform 4.20.12 bug fix and security update | 2026-01-27T17:40:19+00:00 | 2026-04-13T20:14:15+00:00 |
| rhsa-2026:1410 | Red Hat Security Advisory: python3.11 security update | 2026-01-27T17:32:53+00:00 | 2026-04-13T20:00:52+00:00 |
| rhsa-2026:1408 | Red Hat Security Advisory: python3.12 security update | 2026-01-27T17:29:58+00:00 | 2026-04-13T20:00:50+00:00 |
| rhsa-2026:1414 | Red Hat Security Advisory: thunderbird security update | 2026-01-27T17:28:09+00:00 | 2026-03-18T17:26:53+00:00 |
| rhsa-2026:1415 | Red Hat Security Advisory: thunderbird security update | 2026-01-27T17:16:19+00:00 | 2026-03-18T17:26:54+00:00 |
| rhsa-2026:1413 | Red Hat Security Advisory: thunderbird security update | 2026-01-27T17:10:39+00:00 | 2026-03-18T17:26:53+00:00 |
| rhsa-2026:1416 | Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.8.2 release | 2026-01-27T16:53:57+00:00 | 2026-04-14T09:46:05+00:00 |
| rhsa-2026:1377 | Red Hat Security Advisory: image-builder security update | 2026-01-27T16:34:13+00:00 | 2026-04-14T07:57:54+00:00 |
| rhsa-2026:1381 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T16:31:53+00:00 | 2026-04-14T07:57:55+00:00 |
| rhsa-2026:1379 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T16:11:53+00:00 | 2026-04-14T07:57:55+00:00 |
| rhsa-2026:1380 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T16:02:11+00:00 | 2026-04-14T07:57:55+00:00 |
| rhsa-2026:1359 | Red Hat Security Advisory: gcc-toolset-15-binutils security update | 2026-01-27T15:59:55+00:00 | 2026-04-13T20:00:50+00:00 |
| rhsa-2026:1378 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T15:37:28+00:00 | 2026-04-14T07:57:55+00:00 |
| rhsa-2026:1350 | Red Hat Security Advisory: curl security update | 2026-01-27T15:26:43+00:00 | 2026-04-13T20:00:48+00:00 |
| rhsa-2026:1374 | Red Hat Security Advisory: python3.11 security update | 2026-01-27T15:21:04+00:00 | 2026-04-13T20:00:50+00:00 |
| rhsa-2026:1000 | Red Hat Security Advisory: OpenShift Container Platform 4.20.12 bug fix and security update | 2026-01-27T14:30:57+00:00 | 2026-04-14T09:16:31+00:00 |
| rhsa-2026:1349 | Red Hat Security Advisory: openssl security update | 2026-01-27T14:02:32+00:00 | 2026-04-13T20:00:47+00:00 |
| rhsa-2026:1344 | Red Hat Security Advisory: grafana security update | 2026-01-27T11:37:52+00:00 | 2026-04-14T09:46:05+00:00 |
| rhsa-2026:1338 | Red Hat Security Advisory: resource-agents security update | 2026-01-27T09:52:33+00:00 | 2026-04-11T01:57:46+00:00 |
| rhsa-2026:1340 | Red Hat Security Advisory: resource-agents security update | 2026-01-27T09:35:26+00:00 | 2026-04-11T01:57:47+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0425-1 | Security update for python313-wheel | 2026-02-11T08:30:17Z | 2026-02-11T08:30:17Z |
| suse-su-2026:0424-1 | Security update for python-wheel | 2026-02-11T08:30:02Z | 2026-02-11T08:30:02Z |
| suse-su-2026:0423-1 | Security update for python-brotlipy | 2026-02-11T08:29:42Z | 2026-02-11T08:29:42Z |
| suse-su-2026:0422-1 | Security update for avahi | 2026-02-11T06:50:43Z | 2026-02-11T06:50:43Z |
| suse-su-2026:0421-1 | Security update for freerdp | 2026-02-10T15:28:56Z | 2026-02-10T15:28:56Z |
| suse-su-2026:0420-1 | Security update for python-pip | 2026-02-10T14:18:13Z | 2026-02-10T14:18:13Z |
| suse-su-2026:0419-1 | Security update for libsoup2 | 2026-02-10T14:15:53Z | 2026-02-10T14:15:53Z |
| suse-su-2026:0418-1 | Security update for libsoup2 | 2026-02-10T14:15:42Z | 2026-02-10T14:15:42Z |
| suse-su-2026:0417-1 | Security update for freerdp | 2026-02-10T14:14:15Z | 2026-02-10T14:14:15Z |
| suse-su-2026:0415-1 | Security update for java-17-openjdk | 2026-02-10T08:35:23Z | 2026-02-10T08:35:23Z |
| suse-su-2026:0414-1 | Security update for java-11-openjdk | 2026-02-10T08:33:15Z | 2026-02-10T08:33:15Z |
| suse-su-2026:0412-1 | Security update for abseil-cpp | 2026-02-10T06:43:35Z | 2026-02-10T06:43:35Z |
| suse-su-2026:0411-1 | Security update for the Linux Kernel | 2026-02-09T14:51:43Z | 2026-02-09T14:51:43Z |
| suse-su-2026:0404-1 | Security update for xrdp | 2026-02-06T16:58:44Z | 2026-02-06T16:58:44Z |
| suse-su-2026:0399-1 | Security update for kubernetes-old | 2026-02-06T12:06:39Z | 2026-02-06T12:06:39Z |
| suse-su-2026:20339-1 | Security update for libsoup | 2026-02-06T11:13:39Z | 2026-02-06T11:13:39Z |
| suse-su-2026:20238-1 | Security update for libsoup | 2026-02-06T11:13:39Z | 2026-02-06T11:13:39Z |
| suse-su-2026:20338-1 | Security update for cockpit-packages | 2026-02-06T09:35:34Z | 2026-02-06T09:35:34Z |
| suse-su-2026:0397-1 | Security update for cockpit-machines | 2026-02-06T08:02:32Z | 2026-02-06T08:02:32Z |
| suse-su-2026:0396-1 | Security update for cockpit-machines | 2026-02-06T08:02:20Z | 2026-02-06T08:02:20Z |
| suse-su-2026:0395-1 | Security update for sqlite3 | 2026-02-06T08:02:10Z | 2026-02-06T08:02:10Z |
| suse-su-2026:20337-1 | Security update for cockpit | 2026-02-06T03:13:42Z | 2026-02-06T03:13:42Z |
| suse-su-2026:20237-1 | Security update for cockpit | 2026-02-06T03:13:42Z | 2026-02-06T03:13:42Z |
| suse-su-2026:20336-1 | Security update for cockpit-subscriptions | 2026-02-06T02:52:09Z | 2026-02-06T02:52:09Z |
| suse-su-2026:20236-1 | Security update for cockpit-subscriptions | 2026-02-06T02:52:09Z | 2026-02-06T02:52:09Z |
| suse-su-2026:20335-1 | Security update for python-maturin | 2026-02-05T20:51:34Z | 2026-02-05T20:51:34Z |
| suse-su-2026:20235-1 | Security update for python-maturin | 2026-02-05T20:51:34Z | 2026-02-05T20:51:34Z |
| suse-su-2026:0394-1 | Security update for xen | 2026-02-05T15:42:11Z | 2026-02-05T15:42:11Z |
| suse-su-2026:0391-1 | Security update for libxml2 | 2026-02-05T14:23:47Z | 2026-02-05T14:23:47Z |
| suse-su-2026:0390-1 | Security update for java-1_8_0-ibm | 2026-02-05T14:23:06Z | 2026-02-05T14:23:06Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:0314 | Important: raptor2 security update | 2025-01-14T00:00:00Z | 2025-01-15T13:08:37Z |
| alsa-2025:0312 | Important: raptor2 security update | 2025-01-14T00:00:00Z | 2025-01-15T13:10:24Z |
| alsa-2025:0308 | Important: fence-agents security update | 2025-01-14T00:00:00Z | 2025-01-15T13:11:53Z |
| alsa-2025:0288 | Moderate: Bug fix of NetworkManager | 2025-01-13T00:00:00Z | 2025-01-13T21:27:29Z |
| alsa-2025:0281 | Important: thunderbird security update | 2025-01-13T00:00:00Z | 2025-01-13T20:20:37Z |
| alsa-2025:0222 | Important: dpdk security update | 2025-01-09T00:00:00Z | 2025-01-10T12:45:25Z |
| alsa-2025:0210 | Important: dpdk security update | 2025-01-09T00:00:00Z | 2025-01-10T12:48:01Z |
| alsa-2025:0168 | Important: iperf3 security update | 2025-01-09T00:00:00Z | 2025-01-10T12:50:47Z |
| alsa-2025:0161 | Important: iperf3 security update | 2025-01-09T00:00:00Z | 2025-01-10T12:52:16Z |
| alsa-2025:0147 | Important: thunderbird security update | 2025-01-09T00:00:00Z | 2025-01-10T12:53:13Z |
| alsa-2025:0146 | Important: webkit2gtk3 security update | 2025-01-09T00:00:00Z | 2025-01-10T13:20:24Z |
| alsa-2025:0145 | Important: webkit2gtk3 security update | 2025-01-09T00:00:00Z | 2025-01-10T12:54:21Z |
| alsa-2025:0144 | Important: firefox security update | 2025-01-09T00:00:00Z | 2025-01-10T12:55:50Z |
| alsa-2025:0083 | Low: cups security update | 2025-01-08T00:00:00Z | 2025-01-08T17:48:06Z |
| alsa-2025:0080 | Important: firefox security update | 2025-01-08T00:00:00Z | 2025-01-10T12:57:48Z |
| alsa-2025:0066 | Important: kernel-rt security update | 2025-01-08T00:00:00Z | 2025-01-08T21:24:50Z |
| alsa-2025:0065 | Important: kernel security update | 2025-01-08T00:00:00Z | 2025-01-08T21:27:08Z |
| alsa-2025:0059 | Important: kernel security update | 2025-01-08T00:00:00Z | 2025-01-13T20:08:32Z |
| alsa-2025:0012 | Moderate: python-requests security update | 2025-01-02T00:00:00Z | 2025-01-06T19:40:48Z |
| alsa-2024:11486 | Moderate: kernel security update | 2024-12-19T00:00:00Z | 2025-01-13T20:05:04Z |
| alsa-2024:11345 | Important: gstreamer1-plugins-base security update | 2024-12-18T00:00:00Z | 2024-12-18T12:39:10Z |
| alsa-2024:11299 | Important: gstreamer1-plugins-good security update | 2024-12-17T00:00:00Z | 2024-12-18T12:41:06Z |
| alsa-2024:11250 | Moderate: pam security update | 2024-12-17T00:00:00Z | 2024-12-23T10:50:39Z |
| alsa-2024:11242 | Moderate: mpg123:1.32.9 security update | 2024-12-17T00:00:00Z | 2024-12-23T08:21:50Z |
| alsa-2024:11238 | Moderate: python3.11-urllib3 security update | 2024-12-17T00:00:00Z | 2024-12-23T08:22:56Z |
| alsa-2024:11237 | Moderate: libsndfile:1.0.31 security update | 2024-12-17T00:00:00Z | 2024-12-23T08:24:26Z |
| alsa-2024:11232 | Moderate: unbound:1.16.2 security update | 2024-12-17T00:00:00Z | 2024-12-23T08:25:34Z |
| alsa-2024:11219 | Moderate: edk2:20240524 security update | 2024-12-17T00:00:00Z | 2024-12-23T08:27:02Z |
| alsa-2024:11217 | Important: skopeo security update | 2024-12-17T00:00:00Z | 2024-12-23T08:28:36Z |
| alsa-2024:11216 | Moderate: containernetworking-plugins security update | 2024-12-17T00:00:00Z | 2024-12-23T08:20:47Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2022-1054 | Heap-buffer-overflow in AffixMgr::cpdpat_check | 2022-10-16T00:02:10.291789Z | 2022-10-16T00:02:10.292123Z |
| osv-2022-1053 | Heap-buffer-overflow in flb_parser_create | 2022-10-16T00:01:05.875790Z | 2022-10-16T00:01:05.876055Z |
| osv-2022-1052 | UNKNOWN READ in loadSymbol | 2022-10-16T00:00:23.768636Z | 2022-10-16T00:00:23.768922Z |
| osv-2022-1049 | Stack-buffer-overflow in AffixMgr::suffix_check | 2022-10-15T00:00:20.566290Z | 2022-10-15T00:00:20.566512Z |
| osv-2022-1046 | Stack-buffer-overflow in Curl_output_aws_sigv4 | 2022-10-14T00:02:17.849957Z | 2022-10-14T00:02:17.850216Z |
| osv-2022-1045 | Heap-buffer-overflow in onigenc_unicode_mbc_case_fold | 2022-10-13T00:00:26.744265Z | 2023-01-21T00:17:36.250595Z |
| osv-2022-1044 | Heap-buffer-overflow in parse_via | 2022-10-13T00:00:07.663671Z | 2023-02-24T01:50:40.817007Z |
| osv-2022-1042 | Heap-buffer-overflow in AffixMgr::compound_check | 2022-10-12T00:02:31.635608Z | 2022-10-12T00:02:31.635924Z |
| osv-2022-1041 | Heap-buffer-overflow in msyylex | 2022-10-12T00:00:25.867793Z | 2022-10-12T00:00:25.868062Z |
| osv-2022-1040 | Heap-buffer-overflow in onig_node_str_cat | 2022-10-11T00:02:05.093425Z | 2023-01-21T00:15:48.643777Z |
| osv-2022-1032 | Stack-buffer-overflow in check_content_type_and_change_protocol | 2022-10-09T00:02:06.732752Z | 2022-10-09T00:02:06.733041Z |
| osv-2022-1029 | Heap-buffer-overflow in dprint | 2022-10-09T00:00:07.034677Z | 2022-10-11T00:46:25.271009Z |
| osv-2022-1028 | Heap-buffer-overflow in AffixMgr::compound_check | 2022-10-08T00:02:22.648562Z | 2022-10-08T00:02:22.648821Z |
| osv-2022-1026 | Heap-buffer-overflow in msSetError | 2022-10-08T00:00:17.417038Z | 2022-10-08T00:00:17.417303Z |
| osv-2022-1025 | Heap-buffer-overflow in ndpi_search_irc_tcp | 2022-10-08T00:00:16.207555Z | 2022-10-08T00:00:16.207858Z |
| osv-2022-1022 | Stack-buffer-overflow in check_content_type_and_change_protocol | 2022-10-07T00:01:07.705075Z | 2022-10-07T00:01:07.705333Z |
| osv-2022-1021 | Stack-buffer-underflow in gs_type2_interpret | 2022-10-07T00:00:55.357561Z | 2022-10-07T00:00:55.357836Z |
| osv-2022-1018 | Index-out-of-bounds in LibRaw::kodak_radc_load_raw | 2022-10-06T00:02:27.511658Z | 2026-04-10T14:06:59.896524Z |
| osv-2022-1017 | Null-dereference READ in AlertJson | 2022-10-06T00:00:53.118743Z | 2022-10-06T00:00:53.118993Z |
| osv-2022-1015 | Heap-use-after-free in msFreeMap | 2022-10-05T00:02:07.658791Z | 2022-10-05T00:02:07.659039Z |
| osv-2022-1013 | Heap-buffer-overflow in msyylex | 2022-10-04T00:00:17.451905Z | 2022-10-04T00:00:17.452178Z |
| osv-2022-1011 | Heap-buffer-overflow in Exiv2::MemIo::read | 2022-10-03T00:00:51.463080Z | 2022-10-03T00:00:51.463338Z |
| osv-2022-1009 | Heap-buffer-overflow in parse_line | 2022-10-03T00:00:30.185111Z | 2022-10-04T00:26:49.172226Z |
| osv-2022-1004 | Heap-buffer-overflow in AffixMgr::cpdcase_check | 2022-10-01T00:00:32.101673Z | 2022-10-01T00:00:32.101942Z |
| osv-2022-1003 | Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab | 2022-09-30T00:02:10.026151Z | 2026-01-31T14:08:33.420267Z |
| osv-2022-1002 | Segv on unknown address in upb_MiniTable_SetSubEnum | 2022-09-30T00:01:07.221190Z | 2022-09-30T00:01:07.221455Z |
| osv-2022-1001 | Heap-buffer-overflow in SkRect::setBoundsCheck | 2022-09-30T00:01:01.919389Z | 2022-09-30T00:01:01.919640Z |
| osv-2022-999 | Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch | 2022-09-30T00:00:30.047511Z | 2022-09-30T00:00:30.047752Z |
| osv-2022-996 | Use-of-uninitialized-value in GrTriangulator::sanitizeContours | 2022-09-29T00:02:33.179764Z | 2022-09-29T00:02:33.180018Z |
| osv-2022-994 | Heap-buffer-overflow in onig_node_str_cat | 2022-09-29T00:02:22.486759Z | 2023-01-21T00:18:40.646102Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2025-0673 | Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab | 2025-06-14T06:14:51.122Z | 2025-06-14T06:16:31.200Z |
| bit-gitlab-2024-9512 | Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab | 2025-06-14T06:14:22.639Z | 2025-08-11T00:06:06.142Z |
| bit-moodle-2024-37674 | 2025-06-14T05:58:57.591Z | 2025-08-20T09:06:12.327Z | |
| bit-golang-2025-4673 | Sensitive headers not cleared on cross-origin redirect in net/http | 2025-06-14T05:46:50.602Z | 2025-07-11T17:31:26.637Z |
| bit-golang-2025-22874 | Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | 2025-06-14T05:46:46.992Z | 2025-07-09T16:46:18.959Z |
| bit-golang-2025-0913 | Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall | 2025-06-14T05:46:34.191Z | 2025-07-11T17:31:26.637Z |
| bit-kibana-2024-43706 | Kibana Improper Authorization | 2025-06-14T05:44:15.801Z | 2025-10-02T15:07:00.184Z |
| bit-kafka-2025-27819 | Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration | 2025-06-14T05:43:46.786Z | 2025-06-14T06:16:31.200Z |
| bit-kafka-2025-27818 | Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration | 2025-06-14T05:43:43.718Z | 2025-06-14T06:16:31.200Z |
| bit-elk-2024-43706 | Kibana Improper Authorization | 2025-06-14T05:38:22.709Z | 2025-10-02T15:07:00.184Z |
| bit-setuptools-2025-47273 | setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write | 2025-06-13T06:13:15.751Z | 2025-06-13T06:33:01.663Z |
| bit-moodle-2024-48900 | Moodle: idor when accessing list of badge recipients | 2025-06-13T06:12:34.451Z | 2025-06-13T06:33:01.663Z |
| bit-discourse-2025-48877 | Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframe | 2025-06-11T11:45:07.067Z | 2025-06-11T12:17:36.925Z |
| bit-discourse-2025-48062 | Discourse vulnerable to HTML injection when inviting to topic via email | 2025-06-11T11:45:04.167Z | 2025-08-26T06:08:52.180Z |
| bit-discourse-2025-48053 | Discourse vulnerable to DoS via large URL payload in PM to a bot | 2025-06-11T11:45:01.073Z | 2025-06-11T12:17:36.925Z |
| bit-pytorch-2024-31583 | 2025-06-11T05:57:26.054Z | 2025-06-11T06:16:36.747Z | |
| bit-pytorch-2024-31580 | 2025-06-11T05:57:22.768Z | 2025-06-11T06:16:36.747Z | |
| bit-joomla-2025-25227 | [20250402] - Joomla Core - MFA Authentication Bypass | 2025-06-05T05:48:56.271Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2025-25226 | [20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package | 2025-06-05T05:48:52.765Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-40749 | [20250103] - Core - Read ACL violation in multiple core views | 2025-06-05T05:48:49.350Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-40748 | [20250102] - Core - XSS vector in the id attribute of menu lists | 2025-06-05T05:48:45.980Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-40747 | [20250101] - Core - XSS vectors in module chromes | 2025-06-05T05:48:42.573Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-40743 | [20240805] - Core - XSS vectors in Outputfilter::strip* methods | 2025-06-05T05:48:39.250Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-27187 | [20240804] - Core - Improper ACL for backend profile view | 2025-06-05T05:48:35.583Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-27186 | [20240803] - Core - XSS in HTML Mail Templates | 2025-06-05T05:48:32.052Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-27185 | [20240802] - Core - Cache Poisoning in Pagination | 2025-06-05T05:48:28.569Z | 2025-06-05T06:15:32.323Z |
| bit-joomla-2024-27184 | [20240801] - Core - Inadequate validation of internal URLs | 2025-06-05T05:48:25.183Z | 2025-06-05T06:15:32.323Z |
| bit-pytorch-2024-31584 | 2025-06-04T14:56:56.215Z | 2025-06-04T15:15:46.482Z | |
| bit-modsecurity2-2025-48866 | ModSecurity has possible DoS vulnerability in sanitiseArg action | 2025-06-04T14:48:01.890Z | 2025-06-10T07:53:49.719Z |
| bit-modsecurity-2025-48866 | ModSecurity has possible DoS vulnerability in sanitiseArg action | 2025-06-04T14:47:59.719Z | 2025-06-10T07:53:49.719Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0319 | Multiples vulnérabilités dans Oracle Java SE | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0318 | Multiples vulnérabilités dans Oracle Database Server | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0317 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0316 | Multiples vulnérabilités dans les produits Atlassian | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0315 | Multiples vulnérabilités dans Google Chrome | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0314 | Vulnérabilité dans les produits Microsoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0313 | Vulnérabilité dans SolarWinds Serv-U | 2025-04-15T00:00:00.000000 | 2025-04-15T00:00:00.000000 |
| certfr-2025-avi-0312 | Multiples vulnérabilités dans les produits Mattermost | 2025-04-15T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0311 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-04-14T00:00:00.000000 | 2025-04-14T00:00:00.000000 |
| certfr-2025-avi-0310 | Vulnérabilité dans Microsoft Edge | 2025-04-14T00:00:00.000000 | 2025-04-14T00:00:00.000000 |
| certfr-2025-avi-0309 | Multiples vulnérabilités dans les produits IBM | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0308 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0307 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0306 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0305 | Multiples vulnérabilités dans Google Pixel | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0304 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0303 | Multiples vulnérabilités dans les produits Splunk | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0302 | Multiples vulnérabilités dans Sonicwall NetExtender | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0301 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0300 | Multiples vulnérabilités dans GitLab | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0299 | Multiples vulnérabilités dans les produits Bitdefender | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0298 | Multiples vulnérabilités dans les produits Elastic | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0297 | Vulnérabilité dans Spring Cloud Config | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0296 | Multiples vulnérabilités dans Joomla! | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0295 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0294 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-04-09T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0293 | Multiples vulnérabilités dans les produits Fortinet | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0292 | Multiples vulnérabilités dans les produits Adobe | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0291 | Multiples vulnérabilités dans les produits Microsoft | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0290 | Multiples vulnérabilités dans Microsoft Azure | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-000055 | Multiple vulnerabilities in baserCMS | 2018-05-22T14:53+09:00 | 2019-12-27T18:10+09:00 |
| jvndb-2018-000053 | Multiple vulnerabilities in Cybozu Office | 2018-05-22T14:30+09:00 | 2018-08-30T16:03+09:00 |
| jvndb-2018-000052 | Nessus vulnerable to cross-site scripting | 2018-05-21T13:39+09:00 | 2018-08-30T13:47+09:00 |
| jvndb-2018-000049 | Multiple Microsoft Windows applications and installers may insecurely load Dynamic Link Libraries | 2018-05-17T15:18+09:00 | 2019-07-05T16:40+09:00 |
| jvndb-2018-000051 | The installer of Visual C++ Redistributable may insecurely load Dynamic Link Libraries | 2018-05-17T14:57+09:00 | 2019-07-05T16:41+09:00 |
| jvndb-2018-000050 | Self-Extracting Archive files created by IExpress may insecurely load Dynamic Link Libraries | 2018-05-17T14:57+09:00 | 2018-08-21T16:40+09:00 |
| jvndb-2018-000048 | KINEPASS App fails to verify SSL server certificates | 2018-05-11T14:34+09:00 | 2018-08-30T15:01+09:00 |
| jvndb-2018-000047 | IIJ SmartKey App for Android vulnerable to authentication bypass | 2018-05-11T14:34+09:00 | 2019-12-27T18:11+09:00 |
| jvndb-2018-003030 | Access Control Vulnerability in Hitachi Infrastructure Analytics Advisor | 2018-05-10T15:30+09:00 | 2018-07-31T12:12+09:00 |
| jvndb-2018-000045 | Multiple vulnerabilities in WordPress plugin "Ultimate Member" | 2018-05-10T13:44+09:00 | 2018-08-30T18:11+09:00 |
| jvndb-2018-000044 | RT-AC68U vulnerable to cross-site scripting | 2018-05-09T15:38+09:00 | 2018-08-30T12:20+09:00 |
| jvndb-2018-000043 | RT-AC1200HP vulnerable to cross-site scripting | 2018-05-09T15:37+09:00 | 2018-08-30T12:15+09:00 |
| jvndb-2018-000042 | RT-AC87U vulnerable to cross-site scripting | 2018-05-09T15:37+09:00 | 2018-08-30T12:32+09:00 |
| jvndb-2018-000041 | The installers of multiple CELSYS,Inc. software may insecurely load Dynamic Link Libraries | 2018-04-27T15:19+09:00 | 2018-08-30T14:12+09:00 |
| jvndb-2018-000040 | WordPress plugin "Open Graph for Facebook, Google+ and Twitter Card Tags" vulnerable to cross-site scripting | 2018-04-27T15:01+09:00 | 2018-08-30T13:54+09:00 |
| jvndb-2018-000039 | WordPress plugin "PixelYourSite" vulnerable to cross-site scripting | 2018-04-27T14:24+09:00 | 2018-08-30T11:55+09:00 |
| jvndb-2018-000038 | WordPress plugin "WP Google Map Plugin" vulnerable to cross-site scripting | 2018-04-27T14:15+09:00 | 2018-08-30T12:00+09:00 |
| jvndb-2018-000037 | WordPress plugin "Events Manager" vulnerable to cross-site scripting | 2018-04-27T14:00+09:00 | 2018-08-30T11:48+09:00 |
| jvndb-2018-000036 | Joruri Gw vulnerable to arbitrary file upload | 2018-04-26T15:19+09:00 | 2018-08-30T14:02+09:00 |
| jvndb-2018-000035 | EC-CUBE vulnerable to session fixation | 2018-04-17T13:39+09:00 | 2018-08-22T17:42+09:00 |
| jvndb-2018-000030 | Installer of SoundEngine Free may insecurely load Dynamic Link Libraries | 2018-04-13T13:52+09:00 | 2018-06-14T14:16+09:00 |
| jvndb-2018-000034 | Tenable Appliance vulnerable to cross-site scripting | 2018-04-12T14:33+09:00 | 2018-06-14T14:20+09:00 |
| jvndb-2018-000033 | The installer of PhishWall Client Internet Explorer edition may insecurely load Dynamic Link Libraries | 2018-04-12T14:27+09:00 | 2018-04-12T14:27+09:00 |
| jvndb-2018-000032 | Hatena Bookmark App for iOS contains an address bar spoofing vulnerability | 2018-04-10T13:39+09:00 | 2018-04-10T13:39+09:00 |
| jvndb-2018-000031 | Multiple vulnerabilities in Cybozu Garoon | 2018-04-09T14:27+09:00 | 2018-06-14T14:33+09:00 |
| jvndb-2018-002257 | DoS Vulnerability in JP1/ServerConductor/Deployment Manager and Hitachi Compute Systems Manager | 2018-04-05T10:22+09:00 | 2018-04-10T10:55+09:00 |
| jvndb-2018-000029 | Safari vulnerable to script injection | 2018-03-30T13:39+09:00 | 2018-06-14T14:02+09:00 |
| jvndb-2018-000028 | LXR vulnerable to OS command injection | 2018-03-29T14:00+09:00 | 2018-06-14T14:08+09:00 |
| jvndb-2018-000027 | Multiple vulnerabilities in WZR-1750DHP2 | 2018-03-29T13:52+09:00 | 2018-06-14T14:12+09:00 |
| jvndb-2018-000026 | iRemoconWiFi App for Android fails to verify SSL server certificates | 2018-03-27T13:40+09:00 | 2018-06-14T14:29+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-03174 | Growatt ShineLan-X硬编码漏洞(CNVD-2026-0317468) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03173 | Growatt ShineLan-X硬编码漏洞 | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03172 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0317271) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03171 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0317172) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03170 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0317073) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03169 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0316975) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03168 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0316876) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03167 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0316777) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03166 | Foxit PDF Editor Cloud跨站脚本漏洞 | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03011 | Mozilla Firefox代码执行漏洞(CNVD-2026-03011) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02992 | Mozilla Firefox for iOS欺骗漏洞(CNVD-2026-02992) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02991 | Mozilla Firefox内存错误引用漏洞(CNVD-2026-02991) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-00837 | Online Appointment Booking System clinic参数SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00836 | ChurchCRM特权提升漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00835 | Student File Management System跨站脚本漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00834 | Student File Management System user_id参数SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00833 | Student File Management System update_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00832 | Student File Management System save_user.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00831 | Student File Management System /save_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00830 | Student File Management System stud_no参数SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00829 | Student File Management System login_query.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00828 | Student File Management System /delete_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00827 | Prison Management System search1.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00826 | Prison Management System search.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00825 | Online Appointment Booking System deletemanager.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00794 | UTT 进取 512W内存损坏漏洞 | 2025-12-25 | 2026-01-08 |
| cnvd-2026-00694 | Computer Laboratory System文件上传漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00677 | WordPress插件VikBooking Hotel Booking Engine & PMS信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00676 | WordPress插件Ultimate Member Widgets for Elementor信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00675 | WordPress插件Restaurant Menu by MotoPress信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-00327 | Уязвимость службы Firmware Update Service микропрограммного обеспечения камер видеонаблюд… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00326 | Уязвимость функции formSetRemoteInternetLanInfo() (/goform/setInternetLanInfo) микропрогр… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00325 | Уязвимость функции formSetAdInfoDetails() (/goform/setAdInfoDetail) микропрограммного обе… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00324 | Уязвимость функции Idle пакетного менеджера PackageKit, позволяющая нарушителю оказать во… | 13.01.2026 | 27.01.2026 |
| bdu:2026-00323 | Уязвимость функции Options::fontFamily консольного графического редактора ImageMagick, по… | 13.01.2026 | 27.01.2026 |
| bdu:2026-00322 | Уязвимость программного обеспечения управления, контроля и организации процессов печати V… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00321 | Уязвимость программного обеспечения управления, контроля и организации процессов печати V… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00320 | Уязвимость программного обеспечения управления, контроля и организации процессов печати V… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00319 | Уязвимость функции ping утилиты iputils, позволяющая нарушителю вызвать отказ в обслуживании | 13.01.2026 | 27.01.2026 |
| bdu:2026-00318 | Уязвимость функции apply_substitution библиотеки libarchive, позволяющая нарушителю вызва… | 13.01.2026 | 27.01.2026 |
| bdu:2026-00317 | Уязвимость службы SAML Assertion Consumer Service (ACS) сервера OpenVPN Access, позволяющ… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00316 | Уязвимость сайта cockpit-project.org системы управления серверами Cockpit, позволяющая на… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00315 | Уязвимость сервера автоматизации Jenkins, позволяющая нарушителю получить несанкционирова… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00314 | Уязвимость сервера автоматизации Jenkins, позволяющая нарушителю осуществить CSRF-атаку | 13.01.2026 | 13.01.2026 |
| bdu:2026-00313 | Уязвимость модуля zipfile интерпретатора языка программирования Python (CPython), позволя… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00312 | Уязвимость компонента HttpFoundation программной платформы для разработки и управления ве… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00311 | Уязвимость библиотеки libxslt, связанная с разыменованием указателя с истекшим сроком дей… | 13.01.2026 | 13.01.2026 |
| bdu:2026-00310 | Уязвимость службы Telephony Service операционных систем Windows, позволяющая нарушителю п… | 12.01.2026 | 26.01.2026 |
| bdu:2026-00309 | Уязвимость функции formSetAdPushInfo() (/goform/setAdPushInfo) микропрограммного обеспече… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00308 | Уязвимость функции strcpy() файла /goform/formTaskEdit микропрограммного обеспечения марш… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00307 | Уязвимость функции fromDhcpListClient() микропрограммного обеспечения маршрутизаторов Ten… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00306 | Уязвимость микропрограммного обеспечения сетевых устройств UTT 1200GW и UTT 1250GW, связа… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00305 | Уязвимость компонента formPictureUrl микропрограммного обеспечения маршрутизаторов UTT Hi… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00304 | Уязвимость компонента websWhiteList микропрограммного обеспечения маршрутизаторов UTT HiP… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00303 | Уязвимость средства для обнаружения и реагирования на угрозы ThreatSonar Anti-Ransomware,… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00302 | Уязвимость агента безопасности CI/CD Harden-Runner, связанная с некорректным присвоением … | 12.01.2026 | 12.01.2026 |
| bdu:2026-00301 | Уязвимость систем управления контентом Sitecore Experience Manager (XM), Experience Platf… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00300 | Уязвимость систем управления контентом Sitecore Experience Manager (XM) и Experience Plat… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00299 | Уязвимость компонента Special Character Handler брандмауэра программного обеспечения Radw… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00298 | Уязвимость компонента HTTP GET Request Handler брандмауэра программного обеспечения Radwa… | 12.01.2026 | 12.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201712-1100 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari be… | 2026-03-09T20:19:55.292000Z |
| var-200703-0027 | Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files … | 2026-03-09T20:19:55.235000Z |
| var-201912-0621 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T20:19:18.666000Z |
| var-202004-1974 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2026-03-09T20:19:16.121000Z |
| var-202201-0567 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2026-03-09T20:19:07.948000Z |
| var-201901-1006 | In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 1… | 2026-03-09T20:19:07.793000Z |
| var-200609-0889 | The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple … | 2026-03-09T20:19:02.388000Z |
| var-201202-0066 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T20:18:59.654000Z |
| var-201302-0262 | Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… | 2026-03-09T20:18:57.903000Z |
| var-200801-0204 | Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other… | 2026-03-09T20:18:56.804000Z |
| var-202001-1866 | xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certai… | 2026-03-09T20:18:55.809000Z |
| var-200904-0813 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.1… | 2026-03-09T20:18:53.047000Z |
| var-201109-0190 | Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allow… | 2026-03-09T20:18:52.614000Z |
| var-201905-1057 | Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux b… | 2026-03-09T20:18:18.148000Z |
| var-200110-0182 | Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2026-03-09T20:18:13.663000Z |
| var-201302-0304 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2026-03-09T20:18:12.209000Z |
| var-202004-1994 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 a… | 2026-03-09T20:18:12.136000Z |
| var-201011-0043 | The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in Web… | 2026-03-09T20:18:10.116000Z |
| var-202208-0404 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in in… | 2026-03-09T20:18:09.441000Z |
| var-201310-0370 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 an… | 2026-03-09T20:18:05.473000Z |
| var-201310-0343 | Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and ear… | 2026-03-09T20:16:20.702000Z |
| var-200703-0016 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… | 2026-03-09T20:16:19.234000Z |
| var-201302-0142 | Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… | 2026-03-09T20:16:13.829000Z |
| var-201205-0058 | Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 updat… | 2026-03-09T20:16:12.858000Z |
| var-201903-0417 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2026-03-09T20:16:12.383000Z |
| var-202108-1057 | An integer overflow was addressed with improved input validation. This issue is fixed in … | 2026-03-09T20:16:08.312000Z |
| var-201008-1004 | The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not p… | 2026-03-09T20:16:07.120000Z |
| var-200609-0803 | Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user… | 2026-03-09T20:16:04.159000Z |
| var-201203-0198 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2026-03-09T20:16:03.519000Z |
| var-201904-1344 | Multiple memory corruption issues were addressed with improved input validation. This iss… | 2026-03-09T20:15:45.483000Z |