Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-6592 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
ComfyUI userdata Endpoint user_manager.py getuserdata … |
n/a |
ComfyUI |
2026-04-20T01:15:14.548Z | 2026-04-20T11:59:44.227Z |
| CVE-2026-6591 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
ComfyUI LoadImage Node folder_paths.py folder_paths.ge… |
n/a |
ComfyUI |
2026-04-20T01:00:18.496Z | 2026-04-20T16:29:10.370Z |
| CVE-2026-6590 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
ComfyUI Model Preview Endpoint model_manager.py get_mo… |
n/a |
ComfyUI |
2026-04-20T00:45:11.883Z | 2026-04-20T14:54:57.999Z |
| CVE-2026-6589 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
ComfyUI server.py create_origin_only_middleware cross-… |
n/a |
ComfyUI |
2026-04-20T00:30:21.353Z | 2026-04-20T15:02:44.809Z |
| CVE-2026-6588 |
6.9 (4.0)
6.5 (3.1)
6.5 (3.0)
|
serge-chat serge Model API Endpoint model.py delete_mo… |
serge-chat |
serge |
2026-04-20T00:15:12.174Z | 2026-04-20T16:15:13.000Z |
| CVE-2026-6587 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
vibrantlabsai RAGAS Collections util.py _try_process_u… |
vibrantlabsai |
RAGAS |
2026-04-20T00:00:19.515Z | 2026-04-20T12:35:42.222Z |
| CVE-2026-41285 |
4.3 (3.1)
|
In OpenBSD through 7.8, the slaacd and rad daemon… |
OpenBSD |
OpenBSD |
2026-04-20T00:00:00.000Z | 2026-04-21T13:27:42.310Z |
| CVE-2026-39112 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in Apartment V… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:07:53.479Z |
| CVE-2026-39111 |
7.5 (3.1)
|
SQL Injection vulnerability in Apartment Visitors… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:12:54.038Z |
| CVE-2026-39110 |
8.2 (3.1)
|
SQL Injection vulnerability in Apartment Visitors… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:34:55.729Z |
| CVE-2026-39109 |
9.4 (3.1)
|
SQL Injection vulnerability in Apartment Visitors… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:31:04.461Z |
| CVE-2026-30269 |
9.9 (3.1)
|
Improper access control in Doorman v0.1.0 and v1.… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T18:23:39.346Z |
| CVE-2026-30266 |
7.8 (3.1)
|
Insecure Permissions vulnerability in DeepCool De… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-23T13:40:34.695Z |
| CVE-2026-29649 |
9.8 (3.1)
|
NEMU contains an implementation flaw in its RISC-… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-21T19:51:00.279Z |
| CVE-2026-29648 |
8.8 (3.1)
|
In OpenXiangShan NEMU, when Smstateen is enabled,… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-21T19:50:38.197Z |
| CVE-2026-29647 |
6.5 (3.1)
|
In OpenXiangShan NEMU, insufficient Smstateen per… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-21T19:50:43.685Z |
| CVE-2026-29646 |
9.8 (3.1)
|
In OpenXiangShan NEMU prior to 55295c4, when runn… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-21T19:50:49.314Z |
| CVE-2026-29645 |
7.5 (3.1)
|
NEMU (OpenXiangShan/NEMU) before v2025.12.r2 cont… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-21T19:51:06.424Z |
| CVE-2026-29643 |
7.1 (3.1)
|
XiangShan (Open-source high-performance RISC-V pr… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-21T19:50:32.463Z |
| CVE-2026-29642 |
7.8 (3.1)
|
A local attacker who can execute privileged CSR o… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-21T19:50:54.758Z |
| CVE-2026-26399 |
5.3 (3.1)
|
A stack-use-after-return issue exists in the Ardu… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-22T19:53:16.622Z |
| CVE-2025-66954 |
6.5 (3.1)
|
A vulnerability exists in the Buffalo Link Statio… |
n/a |
n/a |
2026-04-20T00:00:00.000Z | 2026-04-20T16:54:28.824Z |
| CVE-2026-6586 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
TransformerOptimus SuperAGI Budget Endpoint budget.py … |
TransformerOptimus |
SuperAGI |
2026-04-19T23:45:12.377Z | 2026-04-20T16:33:28.763Z |
| CVE-2026-6585 |
5.3 (4.0)
5.4 (3.1)
5.4 (3.0)
|
TransformerOptimus SuperAGI Organisation Update Endpoi… |
TransformerOptimus |
SuperAGI |
2026-04-19T23:30:14.085Z | 2026-04-20T14:55:07.060Z |
| CVE-2026-6584 |
5.3 (4.0)
5.4 (3.1)
5.4 (3.0)
|
TransformerOptimus SuperAGI User Update Endpoint user.… |
TransformerOptimus |
SuperAGI |
2026-04-19T23:15:16.091Z | 2026-04-20T15:07:48.363Z |
| CVE-2026-6583 |
5.3 (4.0)
5.4 (3.1)
5.4 (3.0)
|
TransformerOptimus SuperAGI API Key Management Endpoin… |
TransformerOptimus |
SuperAGI |
2026-04-19T23:00:20.450Z | 2026-04-20T16:14:10.062Z |
| CVE-2026-6582 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
TransformerOptimus SuperAGI Vector Database Management… |
TransformerOptimus |
SuperAGI |
2026-04-19T22:45:11.780Z | 2026-04-20T14:06:22.007Z |
| CVE-2026-6581 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow |
H3C |
Magic B1 |
2026-04-19T22:30:15.766Z | 2026-04-20T16:30:27.926Z |
| CVE-2026-6580 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
liangliangyy DjangoBlog Amap API Call views.py hard-co… |
liangliangyy |
DjangoBlog |
2026-04-19T22:15:12.387Z | 2026-04-20T14:55:13.830Z |
| CVE-2026-6579 |
6.9 (4.0)
6.5 (3.1)
6.5 (3.0)
|
liangliangyy DjangoBlog Clean Endpoint views.py missin… |
liangliangyy |
DjangoBlog |
2026-04-19T22:00:17.503Z | 2026-04-20T15:18:38.633Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-6643 |
8.6 (4.0)
|
A stack-based buffer overflow vulnerability in the VPN… |
ASUSTOR Inc. |
ADM |
2026-04-20T06:34:27.511Z | 2026-04-20T13:46:07.764Z |
| CVE-2026-6614 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
TransformerOptimus SuperAGI project.py get_projects_or… |
TransformerOptimus |
SuperAGI |
2026-04-20T06:45:11.801Z | 2026-04-20T13:51:06.467Z |
| CVE-2026-6613 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
TransformerOptimus SuperAGI agent.py get_schedule_data… |
TransformerOptimus |
SuperAGI |
2026-04-20T06:30:14.889Z | 2026-04-20T14:57:19.410Z |
| CVE-2026-6612 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
TransformerOptimus SuperAGI Agent Execution Endpoint a… |
TransformerOptimus |
SuperAGI |
2026-04-20T06:15:10.393Z | 2026-04-20T11:24:09.255Z |
| CVE-2026-6611 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
liangliangyy DjangoBlog File Upload Endpoint settings.… |
liangliangyy |
DjangoBlog |
2026-04-20T06:00:18.066Z | 2026-04-20T16:00:23.582Z |
| CVE-2024-7083 |
3.5 (3.1)
|
Email Encoder < 2.3.4 - Admin+ Stored XSS |
Unknown |
Email Encoder |
2026-04-20T06:00:07.030Z | 2026-04-20T13:16:26.285Z |
| CVE-2026-6610 |
6.3 (4.0)
3.7 (3.1)
3.7 (3.0)
|
liangliangyy DjangoBlog Setting settings.py hard-coded… |
liangliangyy |
DjangoBlog |
2026-04-20T05:45:18.671Z | 2026-04-20T16:03:06.598Z |
| CVE-2026-6609 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
liangliangyy DjangoBlog views.py form_valid improper a… |
liangliangyy |
DjangoBlog |
2026-04-20T05:30:16.620Z | 2026-04-20T13:51:42.600Z |
| CVE-2026-6608 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
lm-sys fastchat Arena Side-by-Side View add_text contr… |
lm-sys |
fastchat |
2026-04-20T05:15:12.337Z | 2026-04-20T14:57:55.071Z |
| CVE-2026-6607 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
lm-sys fastchat Worker API Endpoint api_generate resou… |
lm-sys |
fastchat |
2026-04-20T05:00:23.135Z | 2026-04-20T11:37:05.103Z |
| CVE-2026-6606 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
modelscope agentscope _agent_base.py _process_audio_bl… |
modelscope |
agentscope |
2026-04-20T04:45:11.806Z | 2026-04-20T16:07:08.458Z |
| CVE-2026-6605 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
modelscope agentscope Internal Service _common.py _get… |
modelscope |
agentscope |
2026-04-20T04:30:13.482Z | 2026-04-20T14:58:30.070Z |
| CVE-2026-6604 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
modelscope agentscope Cloud Metadata Endpoint _openai_… |
modelscope |
agentscope |
2026-04-20T04:15:11.588Z | 2026-04-20T13:53:04.341Z |
| CVE-2026-6603 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
modelscope agentscope _python.py execute_shell_command… |
modelscope |
agentscope |
2026-04-20T04:00:20.462Z | 2026-04-20T14:59:13.475Z |
| CVE-2026-6602 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
rickxy Hospital Management System his_admin_account.ph… |
rickxy |
Hospital Management System |
2026-04-20T03:45:12.100Z | 2026-04-20T11:38:41.514Z |
| CVE-2026-6601 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Lagom WHMCS Template Datatables resource consumption |
Lagom |
WHMCS Template |
2026-04-20T03:30:14.978Z | 2026-04-20T16:09:24.835Z |
| CVE-2026-6600 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
langflow-ai langflow Frontend React Component Renderin… |
langflow-ai |
langflow |
2026-04-20T03:15:12.169Z | 2026-04-20T14:54:42.453Z |
| CVE-2026-6599 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
langflow-ai langflow Model Context Protocol Configurat… |
langflow-ai |
langflow |
2026-04-20T03:00:15.645Z | 2026-04-20T14:24:36.870Z |
| CVE-2026-6598 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
langflow-ai langflow Project Creation Endpoint project… |
langflow-ai |
langflow |
2026-04-20T02:45:15.874Z | 2026-04-20T16:19:18.233Z |
| CVE-2026-32965 |
7.5 (3.1)
8.7 (4.0)
|
Initialization of a resource with an insecure def… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:17:33.917Z | 2026-04-20T14:23:36.842Z |
| CVE-2026-32964 |
6.5 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:17:52.839Z | 2026-04-20T14:08:52.559Z |
| CVE-2026-32963 |
6.1 (3.0)
5.1 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:07.431Z | 2026-04-20T14:04:22.838Z |
| CVE-2026-32962 |
5.3 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:25.122Z | 2026-04-20T14:52:15.598Z |
| CVE-2026-32961 |
5.3 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:37.055Z | 2026-04-20T13:57:57.283Z |
| CVE-2026-32960 |
6.5 (3.1)
7.1 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:47.538Z | 2026-04-20T13:57:13.495Z |
| CVE-2026-32959 |
5.9 (3.1)
8.2 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:18:56.184Z | 2026-04-20T13:56:27.714Z |
| CVE-2026-32958 |
6.5 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:19:16.492Z | 2026-04-20T13:19:40.008Z |
| CVE-2026-32957 |
5.3 (3.1)
6.9 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:19:35.581Z | 2026-04-20T13:36:04.975Z |
| CVE-2026-32956 |
9.8 (3.1)
9.3 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:20:01.225Z | 2026-04-20T13:36:04.476Z |
| CVE-2026-32955 |
8.8 (3.1)
8.7 (4.0)
|
SD-330AC and AMC Manager provided by silex techno… |
silex technology, Inc. |
SD-330AC |
2026-04-20T03:19:47.937Z | 2026-04-20T13:36:04.747Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-8mf7-m4px-v9qq |
4.3 (3.1)
|
The cms-fuer-motorrad-werkstaetten plugin for WordPress is vulnerable to Cross-Site Request Forgery… | 2026-04-17T09:31:19Z | 2026-04-17T09:31:19Z |
| ghsa-rq4p-44h8-crv3 |
7.2 (3.1)
|
In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass | 2026-04-17T09:31:18Z | 2026-04-17T09:31:18Z |
| ghsa-fwp9-f988-69xr |
5.0 (3.1)
|
Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigg… | 2026-04-17T09:31:18Z | 2026-04-17T09:31:18Z |
| ghsa-ch84-4cgh-f3fc |
8.4 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions… | 2026-04-17T09:31:18Z | 2026-04-17T09:31:18Z |
| ghsa-c8jg-hc58-jrx2 |
9.8 (3.1)
|
The Accordion and Accordion Slider plugin for WordPress is vulnerable to an injected backdoor in ve… | 2026-04-17T09:31:18Z | 2026-04-17T09:31:18Z |
| ghsa-fx9j-cj6r-vf5m |
7.5 (3.1)
|
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via … | 2026-04-17T09:31:17Z | 2026-04-17T09:31:17Z |
| ghsa-8pj7-rr49-2c47 |
4.3 (3.1)
|
The Canto plugin for WordPress is vulnerable to Missing Authorization in versions up to and includi… | 2026-04-17T09:31:17Z | 2026-04-17T09:31:17Z |
| ghsa-xhph-rh45-hg46 |
5.3 (3.1)
|
The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all version… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-wcw2-cv2c-x8cm |
5.3 (3.1)
|
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-mj52-hprj-j8xh |
7.2 (3.1)
8.6 (4.0)
|
An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user wit… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-hfjg-jhg9-mrvf |
6.3 (3.1)
5.1 (4.0)
|
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to ex… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-hf75-j846-hmxr |
7.0 (3.1)
6.4 (4.0)
|
A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknow… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-g57h-5974-fhw4 |
6.5 (3.1)
|
The Tutor LMS plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-88v5-9hxc-f85r |
7.5 (3.1)
|
HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Ope… | 2026-04-17T06:31:08Z | 2026-04-18T00:53:47Z |
| ghsa-7rv8-2hr2-39f9 |
5.3 (3.1)
|
The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in v… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-6rgm-mxx7-qxmc |
8.5 (4.0)
|
The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack … | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-69wp-qf6q-mf28 |
5.3 (3.1)
|
The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and includi… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-4p7p-gf39-gmhp |
2.7 (3.1)
5.1 (4.0)
|
A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an ad… | 2026-04-17T06:31:08Z | 2026-04-17T06:31:08Z |
| ghsa-m2w4-8ggf-rj47 |
8.1 (3.1)
|
HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service | 2026-04-17T06:31:07Z | 2026-04-18T00:51:48Z |
| ghsa-gq2v-mwv7-cvm2 |
6.5 (3.1)
|
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ghsa-8r5m-3f66-qpr3 |
5.3 (3.1)
|
HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS | 2026-04-17T06:31:07Z | 2026-04-18T00:53:25Z |
| ghsa-8cfg-qq42-h3w8 |
4.9 (3.1)
|
The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal lead… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ghsa-88f4-qv6h-wgph |
4.9 (3.1)
|
The Form Maker by 10Web plugin for WordPress is vulnerable to SQL Injection via the 'ip_search', 's… | 2026-04-17T06:31:07Z | 2026-04-17T06:31:07Z |
| ghsa-72gw-fmmr-c4r4 |
7.5 (3.1)
|
HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization | 2026-04-17T06:31:07Z | 2026-04-18T00:53:01Z |
| ghsa-v77j-mp3m-5c9v |
6.5 (3.1)
|
The WP Statistics plugin for WordPress is vulnerable to Missing Authorization in all versions up to… | 2026-04-17T03:30:52Z | 2026-04-17T03:30:52Z |
| ghsa-mw2x-833r-j7mf |
6.5 (3.1)
|
The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulne… | 2026-04-17T03:30:52Z | 2026-04-17T03:30:52Z |
| ghsa-58f8-jw5x-898x |
7.2 (3.1)
|
The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_so… | 2026-04-17T03:30:52Z | 2026-04-17T03:30:52Z |
| ghsa-22fc-qj5h-4gpq |
6.4 (3.1)
|
The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… | 2026-04-17T03:30:52Z | 2026-04-17T03:30:52Z |
| ghsa-vp68-f85j-5gw3 |
8.6 (3.1)
|
Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user … | 2026-04-17T03:30:51Z | 2026-04-17T03:30:51Z |
| ghsa-j23v-33r7-63rx |
8.1 (3.1)
|
sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshost… | 2026-04-17T00:31:02Z | 2026-04-18T21:31:00Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-320 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.… | wasmtime | 2021-09-17T20:15:00Z | 2021-09-17T22:30:49.852358Z |
| pysec-2021-328 |
|
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and b… | mitmproxy | 2021-09-16T15:15:00Z | 2021-09-23T00:11:00.900340Z |
| pysec-2021-334 |
|
parlai is a framework for training and evaluating AI models on a variety of openly availa… | parlai | 2021-09-10T23:15:00Z | 2021-09-23T16:57:40.954858Z |
| pysec-2021-330 |
|
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify l… | parlai | 2021-09-10T22:15:00Z | 2021-09-23T00:11:05.455785Z |
| pysec-2021-319 |
|
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attack… | postorius | 2021-09-10T19:15:00Z | 2021-09-10T20:31:12.904905Z |
| pysec-2021-345 |
|
The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding… | rencode | 2021-09-10T02:15:00Z | 2021-09-26T23:32:54.963571Z |
| pysec-2021-326 |
|
The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1… | apache-airflow | 2021-09-09T15:15:00Z | 2021-09-21T14:26:17.443988Z |
| pysec-2021-329 |
|
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x… | neutron | 2021-09-08T20:15:00Z | 2021-09-23T00:11:02.378195Z |
| pysec-2021-359 |
|
Flask-AppBuilder is an application development framework, built on top of Flask. In affec… | flask-appbuilder | 2021-09-08T18:15:00Z | 2021-10-11T01:16:40.573932Z |
| pysec-2021-346 |
|
An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will a… | salt | 2021-09-08T15:15:00Z | 2022-06-21T15:53:31.228842Z |
| pysec-2021-318 |
|
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the so… | salt | 2021-09-08T15:15:00Z | 2022-06-21T15:53:31.158376Z |
| pysec-2021-332 |
|
This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive … | sqlite-web | 2021-09-08T11:15:00Z | 2021-10-14T13:17:51.118876Z |
| pysec-2021-317 |
|
The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of… | pillow | 2021-09-03T16:15:00Z | 2021-09-03T18:35:52.828411Z |
| pysec-2021-342 |
|
A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows att… | lxdui | 2021-09-03T02:15:00Z | 2021-09-26T23:32:34.569818Z |
| pysec-2021-361 |
|
An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x … | neutron | 2021-08-31T18:15:00Z | 2021-10-11T01:16:41.242054Z |
| pysec-2021-425 |
|
Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In version… | matrix-synapse | 2021-08-31T17:15:00Z | 2021-11-16T03:58:44.571857Z |
| pysec-2021-424 |
|
Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In version… | matrix-synapse | 2021-08-31T16:15:00Z | 2021-11-16T03:58:44.500451Z |
| pysec-2021-348 |
|
Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitra… | simiki | 2021-08-27T19:15:00Z | 2021-09-26T23:33:04.328365Z |
| pysec-2021-347 |
|
Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execut… | simiki | 2021-08-27T19:15:00Z | 2021-09-26T23:33:04.295133Z |
| pysec-2021-343 |
|
Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitra… | mezzanine | 2021-08-27T19:15:00Z | 2022-02-23T20:45:43.686053Z |
| pysec-2021-371 |
|
BinderHub is a kubernetes-based cloud service that allows users to share reproducible int… | binderhub | 2021-08-25T19:15:00Z | 2021-09-01T12:23:00Z |
| pysec-2021-315 |
|
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local pat… | nbgitpuller | 2021-08-25T18:15:00Z | 2021-08-30T18:40:30.558311Z |
| pysec-2021-884 |
6.5 (3.1)
|
A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allo… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:50.034285Z |
| pysec-2021-883 |
6.5 (3.1)
|
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows att… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:49.973408Z |
| pysec-2021-882 |
8.1 (3.1)
|
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:49.911764Z |
| pysec-2021-360 |
|
OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address i… | neutron | 2021-08-23T05:15:00Z | 2021-10-11T01:16:41.119513Z |
| pysec-2021-121 |
|
An XML external entity (XXE) injection in PyWPS before 4.5.0 allows an attacker to view f… | pywps | 2021-08-23T01:15:00Z | 2021-08-23T05:26:18.647869Z |
| pysec-2021-885 |
6.5 (3.1)
|
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote at… | exiv2 | 2021-08-19T22:15:00Z | 2024-11-21T14:22:50.094265Z |
| pysec-2021-879 |
6.5 (3.1)
|
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of E… | exiv2 | 2021-08-19T22:15:00+00:00 | 2024-10-15T17:22:01.866867+00:00 |
| pysec-2021-120 |
|
Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates… | pywb | 2021-08-18T18:15:00Z | 2021-08-18T20:29:26.806388Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1660 | Malicious code in bis-schemas (npm) | 2026-03-18T12:40:56Z | 2026-03-23T05:16:25Z |
| mal-2026-1659 | Malicious code in bcp-security-updates (npm) | 2026-03-18T12:40:39Z | 2026-03-23T05:16:25Z |
| mal-2026-1658 | Malicious code in bcp-security-update (npm) | 2026-03-18T12:40:39Z | 2026-03-23T05:16:25Z |
| mal-2026-1657 | Malicious code in backstage-plugin-wpe-catalog (npm) | 2026-03-18T12:40:09Z | 2026-03-23T05:16:25Z |
| mal-2026-1656 | Malicious code in argonnode (npm) | 2026-03-18T12:39:10Z | 2026-03-23T05:16:25Z |
| mal-2026-1655 | Malicious code in aligntyper (npm) | 2026-03-18T12:38:38Z | 2026-03-23T05:16:25Z |
| mal-2026-1654 | Malicious code in aligntypeer (npm) | 2026-03-18T12:38:36Z | 2026-03-23T05:16:25Z |
| mal-2026-1653 | Malicious code in align-configer (npm) | 2026-03-18T12:38:26Z | 2026-03-23T05:16:25Z |
| mal-2026-1652 | Malicious code in alfasec (npm) | 2026-03-18T12:38:23Z | 2026-03-23T05:16:25Z |
| mal-2026-1651 | Malicious code in ai-fast-auto-trader (npm) | 2026-03-18T12:37:54Z | 2026-04-16T15:42:07Z |
| mal-2026-1650 | Malicious code in advertising-shared (npm) | 2026-03-18T12:37:51Z | 2026-03-23T05:16:25Z |
| mal-2026-1649 | Malicious code in advertising-podlet (npm) | 2026-03-18T12:37:50Z | 2026-03-23T05:16:25Z |
| mal-2026-1648 | Malicious code in advertising-events (npm) | 2026-03-18T12:37:42Z | 2026-03-23T05:16:25Z |
| mal-2026-1647 | Malicious code in adobe-tracking (npm) | 2026-03-18T12:37:40Z | 2026-03-23T05:16:25Z |
| mal-2026-1646 | Malicious code in abstract-http-request (npm) | 2026-03-18T12:37:23Z | 2026-03-23T05:16:25Z |
| mal-2026-1645 | Malicious code in aboba-initial (npm) | 2026-03-18T12:37:21Z | 2026-03-23T05:16:25Z |
| mal-2026-1644 | Malicious code in aboba-docker-check (npm) | 2026-03-18T12:37:20Z | 2026-03-23T05:16:25Z |
| mal-2026-1643 | Malicious code in @vampirchik147/libxmljs2 (npm) | 2026-03-18T12:35:09Z | 2026-03-23T05:16:25Z |
| mal-2026-1642 | Malicious code in @upstashed/context7-mcp (npm) | 2026-03-18T12:34:59Z | 2026-03-23T05:16:25Z |
| mal-2026-1641 | Malicious code in @uc-platform/user-service-client-ts (npm) | 2026-03-18T12:34:57Z | 2026-03-23T05:16:25Z |
| mal-2026-1640 | Malicious code in @uc-platform/auth (npm) | 2026-03-18T12:34:57Z | 2026-03-23T05:16:25Z |
| mal-2026-1639 | Malicious code in @uc-platform/advertisement-service-client (npm) | 2026-03-18T12:34:56Z | 2026-03-23T05:16:25Z |
| mal-2026-1638 | Malicious code in @tl-icons/core (npm) | 2026-03-18T12:34:09Z | 2026-03-23T05:16:25Z |
| mal-2026-1637 | Malicious code in @spot-dapp/web (npm) | 2026-03-18T12:33:39Z | 2026-03-23T05:16:25Z |
| mal-2026-1636 | Malicious code in @sommos/create-leaverule-or-terminationrule-form-data (npm) | 2026-03-18T12:33:36Z | 2026-03-23T05:16:25Z |
| mal-2026-1635 | Malicious code in @polymarket-developers/clob-client (npm) | 2026-03-18T12:30:32Z | 2026-03-23T05:16:24Z |
| mal-2026-1634 | Malicious code in @panopto/api-core (npm) | 2026-03-18T12:30:22Z | 2026-03-23T05:16:24Z |
| mal-2026-1633 | Malicious code in @nxt-costco-com/forge-icons (npm) | 2026-03-18T12:29:58Z | 2026-03-23T05:16:24Z |
| mal-2026-1632 | Malicious code in @nxt-costco-com/forge-design-tokens (npm) | 2026-03-18T12:29:57Z | 2026-03-23T05:16:24Z |
| mal-2026-1631 | Malicious code in @nxt-costco-com/forge-components (npm) | 2026-03-18T12:29:56Z | 2026-03-23T05:16:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1963 | Golang Go: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1962 | Google Cloud Platform Looker Studio: Mehrere Schwachstellen | 2025-09-03T22:00:00.000+00:00 | 2025-11-10T23:00:00.000+00:00 |
| wid-sec-w-2025-1961 | Django (FilteredRelation): Schwachstelle ermöglicht SQL injection | 2025-09-03T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1960 | Cisco WebEx Meeting Center: Mehrere Schwachstellen | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1959 | Cisco Evolved Programmable Network Manager: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1958 | Cisco IP Phone 7800, 8800 und 8821: Mehrere Schwachstellen | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1957 | Cisco EPNM and Prime Infrastructure: Mehrere Schwachstellen | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1956 | Cisco Unified CM and Unified CM IM&P: Mehrere Schwachstellen | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1955 | Vaadin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-09-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1954 | Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1953 | Sitecore Experience Manager: Schwachstelle ermöglicht Codeausführung | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1952 | Liferay Portal: Schwachstelle ermöglicht Denial of Service | 2025-09-03T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1948 | libxml2 (exsltDynMapFunction): Schwachstelle ermöglicht Denial of Service | 2025-09-02T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1947 | Rancher Fleet: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-02T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1946 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-09-02T22:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1945 | Google Cloud Platform (Service Mesh): Schwachstelle ermöglicht Denial of Service | 2025-09-02T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1944 | Android Patchday September 2025: Multiple Vulnerabilities | 2025-09-02T22:00:00.000+00:00 | 2025-09-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1943 | Samsung Android: Mehrere Schwachstellen | 2025-09-02T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1942 | Pega Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-02T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1941 | TYPO3 Extension (Backup Plus): Schwachstelle ermöglicht Codeausführung | 2025-09-01T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1940 | Liferay Portal: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2025-09-01T22:00:00.000+00:00 | 2025-12-14T23:00:00.000+00:00 |
| wid-sec-w-2025-1939 | IBM App Connect Enterprise: Schwachstelle ermöglicht das Ausspähen von Informationen | 2025-09-01T22:00:00.000+00:00 | 2025-09-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1938 | Dell Computer (Qualcomm Adreno): Schwachstelle ermöglicht Codeausführung | 2025-09-01T22:00:00.000+00:00 | 2025-09-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1937 | Samsung Exynos: Schwachstelle ermöglicht Denial of Service | 2025-08-31T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1936 | QNAP NAS QTS und QTS hero: Mehrere Schwachstellen | 2025-08-31T22:00:00.000+00:00 | 2025-08-31T22:00:00.000+00:00 |
| wid-sec-w-2025-1935 | Liferay Portal: Schwachstelle ermöglicht das Umgehen von Sicherheitsmaßnahmen | 2025-08-31T22:00:00.000+00:00 | 2025-08-31T22:00:00.000+00:00 |
| wid-sec-w-2025-1934 | Vercel Next.js: Mehrere Schwachstellen | 2025-08-31T22:00:00.000+00:00 | 2025-10-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1933 | Linux Kernel: Eine Schwachstelle ermöglicht einen Denial of Service | 2025-08-31T22:00:00.000+00:00 | 2026-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1932 | Wireshark: Schwachstelle ermöglicht Denial of Service | 2025-08-28T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1931 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-28T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-138-03 | Hitachi Energy’s MicroSCADA Pro/X SYS600 Products | 2023-05-18T19:01:59.415885Z | 2023-05-18T19:01:59.415885Z |
| icsa-23-138-02 | Mitsubishi Electric MELSEC WS Series | 2023-05-18T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-136-03 | Rockwell Automation FactoryTalk Vantagepoint | 2023-05-16T19:48:44.881188Z | 2023-05-16T19:48:44.881188Z |
| icsa-23-136-01 | Snap One OvrC Cloud (Update A) | 2023-05-16T06:00:00.000000Z | 2024-11-12T07:00:00.000000Z |
| icsa-23-131-12 | SDG PnPSCADA | 2023-05-12T18:09:09.435069Z | 2023-05-12T18:09:09.435069Z |
| icsa-23-131-13 | PTC Vuforia Studio | 2023-05-12T18:09:09.420860Z | 2023-05-12T18:09:09.420860Z |
| icsa-23-131-10 | Rockwell Automation Arena Simulation Software | 2023-05-12T15:07:40.899704Z | 2023-05-12T15:07:40.899704Z |
| icsa-23-131-15 | Rockwell Automation ThinManager | 2023-05-11T22:14:23.629560Z | 2023-05-11T22:14:23.629560Z |
| icsa-23-131-14 | Rockwell Automation PanelView 800 | 2023-05-11T22:14:23.620441Z | 2023-05-11T22:14:23.620441Z |
| icsa-23-131-09 | Rockwell Automation Kinetix 5500 | 2023-05-11T22:14:23.610081Z | 2023-05-11T22:14:23.610081Z |
| icsa-23-131-08 | Teltonika Remote Management System and RUT Model Routers | 2023-05-11T06:00:00.000000Z | 2023-05-11T06:00:00.000000Z |
| icsa-23-131-07 | Sierra Wireless AirVantage | 2023-05-10T21:14:08.895031Z | 2023-05-10T21:14:08.895031Z |
| icsa-23-129-02 | Hitachi Energy MSM | 2023-05-10T21:13:09.601070Z | 2023-05-10T21:13:09.601070Z |
| icsa-23-131-11 | BirdDog Cameras & Encoders | 2023-05-10T20:52:45.090469Z | 2023-05-10T20:52:45.090469Z |
| icsa-23-131-06 | Siemens SCALANCE LPE9403 | 2023-05-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-131-05 | Siemens SINEC NMS Third-Party | 2023-05-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-131-04 | Siemens SIMATIC Cloud Connect 7 | 2023-05-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-131-03 | Siemens Siveillance | 2023-05-09T00:00:00.000000Z | 2023-05-09T00:00:00.000000Z |
| icsa-23-131-02 | Siemens SCALANCE W1750D | 2023-05-09T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-23-131-01 | Siemens Solid Edge | 2023-05-09T00:00:00.000000Z | 2023-08-08T00:00:00.000000Z |
| icsa-23-143-02 | Hitachi Energy's RTU500 Series Product (UPDATE B) | 2023-05-05T06:00:00.000000Z | 2023-10-19T06:00:00.000000Z |
| icsa-23-122-01 | Mitsubishi Electric Factory Automation Products | 2023-05-02T18:41:30.488188Z | 2023-05-02T18:41:30.488188Z |
| icsma-23-117-01 | Illumina Universal Copy Service | 2023-04-28T18:53:19.854977Z | 2023-04-28T18:53:19.854977Z |
| icsa-23-115-02 | Scada-LTS Third Party Component | 2023-04-28T18:53:19.821723Z | 2023-04-28T18:53:19.821723Z |
| icsa-23-115-01 | Keysight N8844A Data Analytics Web Service (Update A) | 2023-04-25T06:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-103-14 | Datakit CrossCAD-WARE | 2023-04-20T19:52:36.700072Z | 2023-04-20T19:52:36.700072Z |
| icsa-23-110-01 | INEA ME RTU | 2023-04-20T15:30:49.225865Z | 2023-04-20T15:30:49.225865Z |
| icsa-23-108-01 | Omron CS/CJ Series | 2023-04-20T15:30:49.210862Z | 2023-04-20T15:30:49.210862Z |
| icsa-23-103-08 | Siemens Mendix Forgot Password Module | 2023-04-18T19:27:35.031502Z | 2025-05-06T06:00:00.000000Z |
| icsma-23-103-01 | B. Braun Battery Pack SP with Wi-Fi | 2023-04-18T19:27:35.022998Z | 2023-04-18T19:27:35.022998Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asaftd-webdos-fbzm5ynw | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-tls-bb-2g9uwkp | Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-asaftd-sslvpndma-dos-hrrqb9yx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-sipdos-3dgvdjvg | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:14+00:00 |
| cisco-sa-asaftd-rule-bypass-p73abnwq | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:54+00:00 |
| cisco-sa-asaftd-ospflls-37xy2q6r | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:55+00:00 |
| cisco-sa-asaftd-ftpbypass-hy3utxyu | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:09+00:00 |
| cisco-sa-asaftd-frag-memleak-mctqdp9n | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:05+00:00 |
| cisco-sa-asaftd-fileup-dos-zvc7wtys | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:04+00:00 |
| cisco-sa-asaftd-dos-qfcnepfx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:16:34+00:00 |
| cisco-sa-asa-rxss-l54htxp | Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:19+00:00 |
| cisco-sa-asa-ftd-tcp-dos-n3dmnu4t | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-22T23:49:39+00:00 |
| cisco-sa-asa-ftd-crlf-inj-bx9urwsn | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:24+00:00 |
| cisco-sa-webex-teams-dll-drsnh5an | Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-staros-privilege-esc-pyb7ytd | Cisco StarOS Privilege Escalation Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-staros-priv-esc-ggcumfxv | Cisco StarOS Privilege Escalation Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-sdwan-xss-xxelfpc3 | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ndb-path-traversal-wvdyxzpy | Cisco Nexus Data Broker Software Path Traversal Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ise-xxs-mf5cbyx5 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ise-auth-bypass-ujwqltzm | Cisco Identity Services Engine Authorization Bypass Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ind-dos-bwg634zn | Cisco Industrial Network Director Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-fmc-xss-ylrjqqu | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-expressway-vcs-dos-n6xxtmzb | Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-zztugtg3 | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cvdsd-missing-auth-rqo88rnj | Cisco Vision Dynamic Signage Director Missing Authentication Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cdp-rcedos-mahr8vnx | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cdp-memleak-heyebx9 | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-zbfw-94ckg4g | Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-xbace-oncebys | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-11-02T15:15:42+00:00 |
| cisco-sa-wpa-dos-cxshjerc | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-68371 | scsi: smartpqi: Fix device resources accessed after device removal | 2025-12-02T00:00:00.000Z | 2026-02-18T02:17:01.000Z |
| msrc_cve-2025-68367 | macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse | 2025-12-02T00:00:00.000Z | 2026-01-08T14:39:03.000Z |
| msrc_cve-2025-68366 | nbd: defer config unlock in nbd_genl_connect | 2025-12-02T00:00:00.000Z | 2026-02-18T02:24:10.000Z |
| msrc_cve-2025-68365 | fs/ntfs3: Initialize allocated memory before use | 2025-12-02T00:00:00.000Z | 2026-03-03T15:00:23.000Z |
| msrc_cve-2025-68364 | ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() | 2025-12-02T00:00:00.000Z | 2026-01-13T01:43:41.000Z |
| msrc_cve-2025-68363 | bpf: Check skb->transport_header is set in bpf_skb_check_mtu | 2025-12-02T00:00:00.000Z | 2026-02-18T02:34:53.000Z |
| msrc_cve-2025-68362 | wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() | 2025-12-02T00:00:00.000Z | 2026-02-18T02:20:04.000Z |
| msrc_cve-2025-68358 | btrfs: fix racy bitfield write in btrfs_clear_space_info_full() | 2025-12-02T00:00:00.000Z | 2026-03-31T01:37:52.000Z |
| msrc_cve-2025-68357 | iomap: allocate s_dio_done_wq for async reads as well | 2025-12-02T00:00:00.000Z | 2026-03-27T14:36:38.000Z |
| msrc_cve-2025-68356 | gfs2: Prevent recursive memory reclaim | 2025-12-02T00:00:00.000Z | 2026-03-31T15:02:20.000Z |
| msrc_cve-2025-68354 | regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex | 2025-12-02T00:00:00.000Z | 2026-02-18T02:19:05.000Z |
| msrc_cve-2025-68349 | NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid | 2025-12-02T00:00:00.000Z | 2026-02-18T02:18:05.000Z |
| msrc_cve-2025-68347 | ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events | 2025-12-02T00:00:00.000Z | 2026-02-18T02:27:52.000Z |
| msrc_cve-2025-68346 | ALSA: dice: fix buffer overflow in detect_stream_formats() | 2025-12-02T00:00:00.000Z | 2026-01-08T14:40:32.000Z |
| msrc_cve-2025-68345 | ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() | 2025-12-02T00:00:00.000Z | 2026-02-18T02:21:04.000Z |
| msrc_cve-2025-68344 | ALSA: wavefront: Fix integer overflow in sample size validation | 2025-12-02T00:00:00.000Z | 2026-01-13T01:43:07.000Z |
| msrc_cve-2025-68343 | can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header | 2025-12-02T00:00:00.000Z | 2026-01-07T14:41:20.000Z |
| msrc_cve-2025-68342 | can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data | 2025-12-02T00:00:00.000Z | 2026-01-07T14:41:13.000Z |
| msrc_cve-2025-68340 | team: Move team device type change at the end of team_port_add | 2025-12-02T00:00:00.000Z | 2026-03-03T14:59:45.000Z |
| msrc_cve-2025-68339 | atm/fore200e: Fix possible data race in fore200e_open() | 2025-12-02T00:00:00.000Z | 2026-01-07T14:41:07.000Z |
| msrc_cve-2025-68338 | net: dsa: microchip: Don't free uninitialized ksz_irq | 2025-12-02T00:00:00.000Z | 2026-03-31T14:59:18.000Z |
| msrc_cve-2025-68337 | jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted | 2025-12-02T00:00:00.000Z | 2026-02-18T02:05:22.000Z |
| msrc_cve-2025-68336 | locking/spinlock/debug: Fix data-race in do_raw_write_lock | 2025-12-02T00:00:00.000Z | 2026-02-18T02:08:21.000Z |
| msrc_cve-2025-68335 | comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() | 2025-12-02T00:00:00.000Z | 2026-01-13T01:41:16.000Z |
| msrc_cve-2025-68334 | platform/x86/amd/pmc: Add support for Van Gogh SoC | 2025-12-02T00:00:00.000Z | 2026-03-27T14:36:30.000Z |
| msrc_cve-2025-68333 | sched_ext: Fix possible deadlock in the deferred_irq_workfn() | 2025-12-02T00:00:00.000Z | 2026-01-13T14:37:47.000Z |
| msrc_cve-2025-68332 | comedi: c6xdigio: Fix invalid PNP driver unregistration | 2025-12-02T00:00:00.000Z | 2026-01-13T01:41:09.000Z |
| msrc_cve-2025-68331 | usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer | 2025-12-02T00:00:00.000Z | 2026-01-07T14:40:40.000Z |
| msrc_cve-2025-68330 | iio: accel: bmc150: Fix irq assumption regression | 2025-12-02T00:00:00.000Z | 2026-01-13T01:41:31.000Z |
| msrc_cve-2025-68328 | firmware: stratix10-svc: fix bug in saving controller data | 2025-12-02T00:00:00.000Z | 2026-01-13T01:41:38.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15296-1 | ctdb-4.22.2+git.396.c752843dcf4-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15295-1 | python311-salt-3006.0-41.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15294-1 | keylime-ima-policy-0.2.7+70-2.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15293-1 | redis-8.0.2-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15292-1 | radare2-5.9.8-3.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15291-1 | erlang-rabbitmq-client-3.13.7-4.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15290-1 | python39-3.9.23-3.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15289-1 | python314-3.14.0~b3-3.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15288-1 | python313-3.13.5-2.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15287-1 | python312-3.12.11-2.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15286-1 | python311-3.11.13-2.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15285-1 | python310-3.10.18-3.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15284-1 | python311-urllib3_1-1.26.20-3.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15283-1 | python311-urllib3-2.5.0-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15282-1 | python311-rfc3161-client-1.0.3-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15281-1 | python311-requests-2.32.4-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15280-1 | python311-pytest-html-4.1.1-6.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15279-1 | python311-pydata-sphinx-theme-0.16.1-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15278-1 | jupyter-plotly-6.1.2-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15277-1 | jupyter-panel-1.7.1-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15276-1 | jupyter-nbdime-7.0.2-20.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15275-1 | jupyter-nbclassic-1.3.1-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15274-1 | jupyter-jupyterlab-templates-0.5.2-2.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15273-1 | python311-jupyter-ydoc-3.1.0-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15272-1 | python311-jupyter-core-5.8.1-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15271-1 | jupyter-matplotlib-0.11.4-15.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15270-1 | python-furo-doc-2024.8.6-3.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15269-1 | jupyter-bqplot-jupyterlab-0.5.44-10.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15268-1 | python311-Django4-4.2.22-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| opensuse-su-2025:15267-1 | python311-Django-5.2.2-1.1 on GA media | 2025-07-03T00:00:00Z | 2025-07-03T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1339 | Red Hat Security Advisory: resource-agents security update | 2026-01-27T09:35:23+00:00 | 2026-04-11T01:57:46+00:00 |
| rhsa-2026:1336 | Red Hat Security Advisory: resource-agents security update | 2026-01-27T09:34:28+00:00 | 2026-04-11T01:57:44+00:00 |
| rhsa-2026:1337 | Red Hat Security Advisory: python-s3transfer security update | 2026-01-27T09:32:38+00:00 | 2026-04-11T01:57:45+00:00 |
| rhsa-2026:1334 | Red Hat Security Advisory: glibc security update | 2026-01-27T09:17:01+00:00 | 2026-04-09T18:07:40+00:00 |
| rhsa-2026:1332 | Red Hat Security Advisory: fence-agents security update | 2026-01-27T09:10:08+00:00 | 2026-04-11T01:57:47+00:00 |
| rhsa-2026:1331 | Red Hat Security Advisory: fence-agents security update | 2026-01-27T09:04:37+00:00 | 2026-04-11T01:57:43+00:00 |
| rhsa-2026:1329 | Red Hat Security Advisory: fence-agents security update | 2026-01-27T08:39:01+00:00 | 2026-04-11T01:57:41+00:00 |
| rhsa-2026:1330 | Red Hat Security Advisory: fence-agents security update | 2026-01-27T08:38:11+00:00 | 2026-04-11T01:57:41+00:00 |
| rhsa-2026:1326 | Red Hat Security Advisory: glib2 security update | 2026-01-27T07:46:31+00:00 | 2026-04-13T20:14:18+00:00 |
| rhsa-2026:1327 | Red Hat Security Advisory: glib2 security update | 2026-01-27T07:32:51+00:00 | 2026-04-13T20:14:18+00:00 |
| rhsa-2026:1324 | Red Hat Security Advisory: glib2 security update | 2026-01-27T07:16:01+00:00 | 2026-04-13T20:14:17+00:00 |
| rhsa-2026:1323 | Red Hat Security Advisory: glib2 security update | 2026-01-27T07:08:41+00:00 | 2026-04-13T20:14:21+00:00 |
| rhsa-2026:1320 | Red Hat Security Advisory: thunderbird security update | 2026-01-27T06:58:16+00:00 | 2026-03-18T17:26:50+00:00 |
| rhsa-2026:1254 | Red Hat Security Advisory: python-urllib3 security update | 2026-01-26T20:52:30+00:00 | 2026-04-12T14:07:09+00:00 |
| rhsa-2026:1249 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update | 2026-01-26T19:58:10+00:00 | 2026-04-14T09:46:05+00:00 |
| rhsa-2026:1248 | Red Hat Security Advisory: MTV RHEL9 Images | 2026-01-26T18:31:11+00:00 | 2026-04-09T02:07:32+00:00 |
| rhsa-2026:1240 | Red Hat Security Advisory: fence-agents security update | 2026-01-26T18:30:35+00:00 | 2026-04-12T14:07:08+00:00 |
| rhsa-2026:1239 | Red Hat Security Advisory: fence-agents security update | 2026-01-26T18:09:09+00:00 | 2026-04-12T14:07:08+00:00 |
| rhsa-2026:1241 | Red Hat Security Advisory: resource-agents security update | 2026-01-26T18:01:29+00:00 | 2026-04-12T14:07:08+00:00 |
| rhsa-2026:1236 | Red Hat Security Advisory: kernel security update | 2026-01-26T16:39:04+00:00 | 2026-03-18T16:07:18+00:00 |
| rhsa-2026:0932 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2026-01-26T16:34:29+00:00 | 2026-04-13T20:00:46+00:00 |
| rhsa-2026:1229 | Red Hat Security Advisory: gnupg2 security update | 2026-01-26T16:26:39+00:00 | 2026-04-02T23:30:14+00:00 |
| rhsa-2026:1230 | Red Hat Security Advisory: gnupg2 security update | 2026-01-26T16:16:34+00:00 | 2026-04-02T23:30:12+00:00 |
| rhsa-2026:0933 | Red Hat Security Advisory: java-25-openjdk security update | 2026-01-26T16:09:29+00:00 | 2026-04-13T20:00:45+00:00 |
| rhsa-2026:1226 | Red Hat Security Advisory: python3.12-urllib3 security update | 2026-01-26T15:35:09+00:00 | 2026-04-12T14:07:07+00:00 |
| rhsa-2026:1224 | Red Hat Security Advisory: python3.11-urllib3 security update | 2026-01-26T15:03:40+00:00 | 2026-04-12T14:07:07+00:00 |
| rhsa-2026:1143 | Red Hat Security Advisory: kernel security update | 2026-01-26T14:47:56+00:00 | 2026-03-30T23:21:04+00:00 |
| rhsa-2026:1194 | Red Hat Security Advisory: kernel security update | 2026-01-26T14:32:56+00:00 | 2026-03-18T03:15:02+00:00 |
| rhsa-2026:1084 | Red Hat Security Advisory: podman security update | 2026-01-26T14:25:50+00:00 | 2026-04-02T16:47:05+00:00 |
| rhsa-2026:0931 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2026-01-26T14:21:52+00:00 | 2026-03-18T03:16:51+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0389-1 | Security update for java-1_8_0-openj9 | 2026-02-05T14:22:20Z | 2026-02-05T14:22:20Z |
| suse-su-2026:20234-1 | Security update for libxml2 | 2026-02-05T11:26:16Z | 2026-02-05T11:26:16Z |
| suse-su-2026:20233-1 | Security update for libxml2 | 2026-02-05T11:26:16Z | 2026-02-05T11:26:16Z |
| suse-su-2026:0388-1 | Security update for MozillaThunderbird | 2026-02-05T11:14:22Z | 2026-02-05T11:14:22Z |
| suse-su-2026:20232-1 | Security update for golang-github-prometheus-prometheus | 2026-02-05T10:43:17Z | 2026-02-05T10:43:17Z |
| suse-su-2026:0386-1 | Security update for expat | 2026-02-05T08:30:37Z | 2026-02-05T08:30:37Z |
| suse-su-2026:0385-1 | Security update for the Linux Kernel | 2026-02-04T12:55:07Z | 2026-02-04T12:55:07Z |
| suse-su-2026:0384-1 | Security update for ImageMagick | 2026-02-04T12:46:45Z | 2026-02-04T12:46:45Z |
| suse-su-2026:0383-1 | Security update for rekor | 2026-02-04T12:46:28Z | 2026-02-04T12:46:28Z |
| suse-su-2026:0382-1 | Security update for java-1_8_0-ibm | 2026-02-04T12:45:58Z | 2026-02-04T12:45:58Z |
| suse-su-2026:20231-1 | Security update for cups | 2026-02-04T11:40:11Z | 2026-02-04T11:40:11Z |
| suse-su-2026:20229-1 | Security update for cups | 2026-02-04T11:40:11Z | 2026-02-04T11:40:11Z |
| suse-su-2026:0381-1 | Security update for abseil-cpp | 2026-02-04T09:34:53Z | 2026-02-04T09:34:53Z |
| suse-su-2026:0379-1 | Security update for cockpit-podman | 2026-02-04T07:38:28Z | 2026-02-04T07:38:28Z |
| suse-su-2026:0378-1 | Security update for gpg2 | 2026-02-04T07:38:13Z | 2026-02-04T07:38:13Z |
| suse-su-2026:0377-1 | Security update for libheif | 2026-02-04T07:37:59Z | 2026-02-04T07:37:59Z |
| suse-su-2026:0375-1 | Security update for libvirt | 2026-02-04T07:37:40Z | 2026-02-04T07:37:40Z |
| suse-su-2026:0374-1 | Security update for protobuf | 2026-02-04T07:03:36Z | 2026-02-04T07:03:36Z |
| suse-su-2026:0373-1 | Security update for glib2 | 2026-02-04T02:50:42Z | 2026-02-04T02:50:42Z |
| suse-su-2026:0372-1 | Security update for glib2 | 2026-02-04T01:43:44Z | 2026-02-04T01:43:44Z |
| suse-su-2026:0371-1 | Security update for glibc | 2026-02-03T18:08:50Z | 2026-02-03T18:08:50Z |
| suse-su-2026:0369-1 | Security update for the Linux Kernel | 2026-02-03T13:42:47Z | 2026-02-03T13:42:47Z |
| suse-su-2026:0368-1 | Security update for libsodium | 2026-02-03T13:40:57Z | 2026-02-03T13:40:57Z |
| suse-su-2026:0367-1 | Security update for python-urllib3 | 2026-02-03T13:09:47Z | 2026-02-03T13:09:47Z |
| suse-su-2026:0366-1 | Security update for util-linux | 2026-02-03T12:53:11Z | 2026-02-03T12:53:11Z |
| suse-su-2026:0364-1 | Security update for libpng16 | 2026-02-03T09:50:54Z | 2026-02-03T09:50:54Z |
| suse-su-2026:0363-1 | Security update for java-21-openjdk | 2026-02-03T09:39:18Z | 2026-02-03T09:39:18Z |
| suse-su-2026:0361-1 | Security update for logback | 2026-02-02T13:20:41Z | 2026-02-02T13:20:41Z |
| suse-su-2026:20223-1 | Security update for openssl-3 | 2026-02-02T12:59:47Z | 2026-02-02T12:59:47Z |
| suse-su-2026:20211-1 | Security update for openssl-3 | 2026-02-02T12:59:47Z | 2026-02-02T12:59:47Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2024:11193 | Moderate: mpg123 security update | 2024-12-17T00:00:00Z | 2024-12-18T12:42:45Z |
| alsa-2024:11192 | Moderate: libsndfile security update | 2024-12-17T00:00:00Z | 2024-12-18T12:44:46Z |
| alsa-2024:11189 | Moderate: python3.11-urllib3 security update | 2024-12-17T00:00:00Z | 2024-12-18T12:47:55Z |
| alsa-2024:11185 | Moderate: edk2:20220126gitbb1bba3d77 security update | 2024-12-17T00:00:00Z | 2024-12-18T12:49:28Z |
| alsa-2024:11161 | Moderate: tuned security update | 2024-12-17T00:00:00Z | 2024-12-18T12:52:15Z |
| alsa-2024:11154 | Moderate: bluez security update | 2024-12-17T00:00:00Z | 2024-12-18T12:54:00Z |
| alsa-2024:11123 | Important: gstreamer1-plugins-base security update | 2024-12-16T00:00:00Z | 2024-12-23T08:19:57Z |
| alsa-2024:11122 | Important: gstreamer1-plugins-good security update | 2024-12-16T00:00:00Z | 2024-12-23T08:18:58Z |
| alsa-2024:11111 | Moderate: python3.11 security update | 2024-12-16T00:00:00Z | 2024-12-23T08:17:01Z |
| alsa-2024:10987 | Moderate: pcs security update | 2024-12-12T00:00:00Z | 2026-04-09T19:04:08Z |
| alsa-2024:10983 | Moderate: python3.9:3.9.21 security update | 2024-12-12T00:00:00Z | 2024-12-16T14:38:01Z |
| alsa-2024:10980 | Important: python3.12 security update | 2024-12-12T00:00:00Z | 2024-12-16T14:40:29Z |
| alsa-2024:10979 | Moderate: python3.11 security update | 2024-12-12T00:00:00Z | 2024-12-16T14:43:13Z |
| alsa-2024:10978 | Important: python3.12 security update | 2024-12-12T00:00:00Z | 2024-12-16T14:45:42Z |
| alsa-2024:10953 | Important: python36:3.6 security update | 2024-12-11T00:00:00Z | 2024-12-16T14:49:29Z |
| alsa-2024:10952 | Moderate: php:7.4 security update | 2024-12-11T00:00:00Z | 2024-12-16T14:52:18Z |
| alsa-2024:10951 | Moderate: php:8.2 security update | 2024-12-11T00:00:00Z | 2024-12-16T14:55:04Z |
| alsa-2024:10950 | Moderate: php:8.1 security update | 2024-12-11T00:00:00Z | 2024-12-16T14:57:36Z |
| alsa-2024:10949 | Moderate: php:8.2 security update | 2024-12-11T00:00:00Z | 2024-12-16T14:59:31Z |
| alsa-2024:10944 | Moderate: kernel-rt security update | 2024-12-11T00:00:00Z | 2024-12-16T15:00:33Z |
| alsa-2024:10943 | Moderate: kernel security update | 2024-12-11T00:00:00Z | 2024-12-16T15:02:24Z |
| alsa-2024:10939 | Moderate: kernel security update | 2024-12-11T00:00:00Z | 2024-12-16T15:05:28Z |
| alsa-2024:10869 | Moderate: redis:7 security update | 2024-12-05T00:00:00Z | 2024-12-09T09:53:39Z |
| alsa-2024:10860 | Important: ruby:3.1 security update | 2024-12-05T00:00:00Z | 2024-12-09T09:52:36Z |
| alsa-2024:10858 | Important: ruby security update | 2024-12-05T00:00:00Z | 2024-12-09T09:39:24Z |
| alsa-2024:10850 | Important: ruby:2.5 security update | 2024-12-05T00:00:00Z | 2024-12-09T09:43:47Z |
| alsa-2024:10834 | Important: ruby:3.1 security update | 2024-12-05T00:00:00Z | 2024-12-09T09:48:33Z |
| alsa-2024:10832 | Important: postgresql:13 security update | 2024-12-05T00:00:00Z | 2024-12-05T14:20:24Z |
| alsa-2024:10831 | Important: postgresql:16 security update | 2024-12-05T00:00:00Z | 2024-12-10T01:10:57Z |
| alsa-2024:10830 | Important: postgresql:15 security update | 2024-12-05T00:00:00Z | 2024-12-10T09:13:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2022-993 | Stack-use-after-return in check_buffer | 2022-09-29T00:02:10.256639Z | 2026-04-13T14:16:10.642347Z |
| osv-2022-989 | Use-of-uninitialized-value in SkPathStroker::CheckCubicLinear | 2022-09-29T00:01:08.152321Z | 2022-09-29T00:01:08.152613Z |
| osv-2022-988 | Heap-buffer-overflow in onig_vsnprintf_with_pattern | 2022-09-29T00:01:07.751712Z | 2023-01-21T00:21:18.857380Z |
| osv-2022-986 | Heap-buffer-overflow in SkEdgeClipper::ClipPath | 2022-09-29T00:01:04.899655Z | 2022-09-29T00:01:04.899909Z |
| osv-2022-983 | Heap-buffer-overflow in SkPathPriv::IsRectContour | 2022-09-29T00:00:56.891739Z | 2022-09-29T00:00:56.891992Z |
| osv-2022-981 | Heap-buffer-overflow in SkPath::Iter::next | 2022-09-29T00:00:52.919923Z | 2022-09-29T00:00:52.920179Z |
| osv-2022-978 | Heap-buffer-overflow in SkPath::Iter::next | 2022-09-29T00:00:28.869674Z | 2022-09-29T00:00:28.869906Z |
| osv-2022-976 | Heap-buffer-overflow in SkPath::Iter::next | 2022-09-29T00:00:20.329874Z | 2022-09-29T00:00:20.330121Z |
| osv-2022-972 | Use-of-uninitialized-value in SkFindQuadMaxCurvature | 2022-09-28T00:02:05.739495Z | 2023-06-09T14:32:53.192675Z |
| osv-2022-970 | Heap-buffer-overflow in SkPath::reverseAddPath | 2022-09-28T00:00:31.136491Z | 2022-09-28T00:00:31.136722Z |
| osv-2022-969 | Heap-buffer-overflow in SkPath::Iter::next | 2022-09-28T00:00:26.095263Z | 2022-09-28T00:00:26.095493Z |
| osv-2022-968 | Heap-buffer-overflow in SkMatrix::Persp_pts | 2022-09-28T00:00:10.038366Z | 2022-09-28T00:00:10.038613Z |
| osv-2022-964 | Use-of-uninitialized-value in cmsMLUgetASCII | 2022-09-27T00:01:05.734529Z | 2022-09-27T00:01:05.734772Z |
| osv-2022-963 | Security exception in org.codehaus.janino.Parser.parseConditionalExpression | 2022-09-27T00:01:03.909243Z | 2022-09-27T00:01:03.909482Z |
| osv-2022-962 | Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec | 2022-09-27T00:00:53.795832Z | 2022-09-27T00:00:53.796119Z |
| osv-2022-961 | Heap-double-free in sc_pkcs15_encode_df | 2022-09-27T00:00:30.390093Z | 2022-09-27T00:00:30.390355Z |
| osv-2022-955 | Use-of-uninitialized-value in FileWrite | 2022-09-26T00:00:25.284903Z | 2024-10-02T23:55:28.115739Z |
| osv-2022-953 | Dynamic-stack-buffer-overflow in rx_icmp | 2022-09-25T00:03:37.541324Z | 2022-09-25T00:03:37.541603Z |
| osv-2022-952 | UNKNOWN WRITE in regcomp | 2022-09-25T00:03:20.623473Z | 2022-09-25T00:03:20.623718Z |
| osv-2022-949 | Heap-use-after-free in s_file_write_flush | 2022-09-24T00:02:32.305628Z | 2022-09-24T00:02:32.305859Z |
| osv-2022-945 | Heap-buffer-overflow in Exiv2::MemIo::read | 2022-09-24T00:01:09.420683Z | 2022-09-24T00:01:09.420915Z |
| osv-2022-943 | UNKNOWN WRITE in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor | 2022-09-24T00:00:47.318199Z | 2023-04-20T22:58:12.414397Z |
| osv-2022-937 | Use-after-poison in rx_ip | 2022-09-23T00:02:21.434097Z | 2026-04-01T14:27:42.367988Z |
| osv-2022-934 | Index-out-of-bounds in LibRaw::parse_tiff_ifd | 2022-09-23T00:01:02.344763Z | 2022-09-23T00:01:02.345005Z |
| osv-2022-926 | Heap-buffer-overflow in Ins_PUSHW | 2022-09-22T00:00:37.096302Z | 2022-09-22T00:00:37.096583Z |
| osv-2022-924 | Heap-buffer-overflow in file_zmagic | 2022-09-21T00:02:48.427165Z | 2022-09-21T00:02:48.427412Z |
| osv-2022-923 | Heap-buffer-overflow in file_magwarn | 2022-09-21T00:01:36.581644Z | 2022-09-21T00:01:36.581887Z |
| osv-2022-916 | Container-overflow in wabt::interp::BinaryReaderInterp::BeginFunctionBody | 2022-09-20T00:00:42.122902Z | 2026-03-11T14:23:47.282795Z |
| osv-2022-915 | Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec | 2022-09-20T00:00:18.394774Z | 2022-09-20T00:00:18.395206Z |
| osv-2022-908 | Heap-buffer-overflow in element_end | 2022-09-18T00:02:08.324002Z | 2025-08-20T14:46:01.613271Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-grafana-2025-3454 | 2025-06-04T14:44:58.591Z | 2025-06-04T15:15:46.482Z | |
| bit-grafana-2025-3260 | 2025-06-04T14:44:55.391Z | 2025-06-04T15:15:46.482Z | |
| bit-gitlab-2025-1763 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-06-03T15:14:55.173Z | 2025-06-03T15:16:07.023Z |
| bit-superset-2025-48912 | Apache Superset: Improper authorization bypass on row level security via SQL Injection | 2025-06-03T15:03:14.788Z | 2025-06-03T15:16:07.023Z |
| bit-moodle-2024-48899 | Moodle: idor when accessing list of course badges | 2025-06-03T14:59:22.068Z | 2025-06-03T15:16:07.023Z |
| bit-moodle-2024-45691 | Moodle: lesson activity password bypass through php loose comparison | 2025-06-03T14:59:09.259Z | 2025-06-03T15:16:07.023Z |
| bit-moodle-2024-45690 | Moodle: idor when deleting oauth2 linked accounts | 2025-06-03T14:59:05.874Z | 2025-06-03T15:16:07.023Z |
| bit-moodle-2024-45689 | Moodle: unprotected access to sensitive information via dynamic tables | 2025-06-03T14:59:02.378Z | 2025-06-03T15:16:07.023Z |
| bit-joomla-2024-21726 | [20240205] - Core - Inadequate content filtering within the filter code | 2025-06-03T14:48:46.964Z | 2025-08-20T09:06:12.327Z |
| bit-joomla-2024-21725 | [20240204] - Core - XSS in mail address outputs | 2025-06-03T14:48:43.681Z | 2025-06-03T15:16:07.023Z |
| bit-joomla-2024-21723 | [20240202] - Core - Open redirect in installation application | 2025-06-03T14:48:37.081Z | 2025-06-03T15:16:07.023Z |
| bit-joomla-2024-21722 | [20240201] - Core - Insufficient session expiration in MFA management views | 2025-06-03T14:48:33.767Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2025-31675 | Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 | 2025-06-03T14:41:48.563Z | 2026-04-06T08:26:41.107Z |
| bit-drupal-2025-31673 | Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002 | 2025-06-03T14:41:39.975Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2024-55638 | Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008 | 2025-06-03T14:41:31.768Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2024-55637 | Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007 | 2025-06-03T14:41:27.578Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2024-55636 | Drupal core - Less critical - Gadget chain - SA-CORE-2024-006 | 2025-06-03T14:41:23.754Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2024-55635 | Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 | 2025-06-03T14:41:19.575Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2024-55634 | Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004 | 2025-06-03T14:41:15.479Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2024-12393 | Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003 | 2025-06-03T14:41:06.473Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2024-11942 | Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 | 2025-06-03T14:41:02.265Z | 2025-06-03T15:16:07.023Z |
| bit-drupal-2024-11941 | Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001 | 2025-06-03T14:40:58.183Z | 2025-06-03T15:16:07.023Z |
| bit-valkey-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | 2025-05-31T06:02:22.962Z | 2025-11-06T13:25:46.476Z |
| bit-redis-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | 2025-05-31T05:59:53.747Z | 2025-08-22T06:06:45.932Z |
| bit-moodle-2024-34009 | moodle: ReCAPTCHA can be bypassed on the login page | 2025-05-31T05:57:48.365Z | 2025-05-31T06:15:48.797Z |
| bit-moodle-2024-34007 | moodle: logout CSRF in admin/tool/mfa/auth.php | 2025-05-31T05:57:41.568Z | 2025-05-31T06:15:48.797Z |
| bit-moodle-2024-34006 | moodle: unsanitized HTML in site log for config_log_created | 2025-05-31T05:57:38.163Z | 2025-05-31T06:15:48.797Z |
| bit-moodle-2024-34001 | moodle: CSRF risk in admin preset tool management of presets | 2025-05-31T05:57:21.248Z | 2025-05-31T06:15:48.797Z |
| bit-moodle-2024-34000 | moodle: stored XSS in lesson overview report via user ID number | 2025-05-31T05:57:17.759Z | 2025-05-31T06:15:48.797Z |
| bit-moodle-2024-33999 | moodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php | 2025-05-31T05:57:14.246Z | 2025-05-31T06:15:48.797Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0289 | Vulnérabilité dans Microsoft .Net | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0288 | Multiples vulnérabilités dans Microsoft Windows | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0287 | Multiples vulnérabilités dans Microsoft Office | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0286 | Vulnérabilité dans Google Chrome | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0285 | Multiples vulnérabilités dans les produits SAP | 2025-04-08T00:00:00.000000 | 2025-04-25T00:00:00.000000 |
| certfr-2025-avi-0284 | Multiples vulnérabilités dans les produits Siemens | 2025-04-08T00:00:00.000000 | 2025-04-08T00:00:00.000000 |
| certfr-2025-avi-0283 | Multiples vulnérabilités dans VMware Tanzu Greenplum | 2025-04-08T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0282 | Multiples vulnérabilités dans Schneider Electric ConneXium Network Manager | 2025-04-08T00:00:00.000000 | 2025-04-08T00:00:00.000000 |
| certfr-2025-avi-0281 | Multiples vulnérabilités dans Google Android | 2025-04-08T00:00:00.000000 | 2025-04-08T00:00:00.000000 |
| certfr-2025-avi-0280 | Vulnérabilité dans les produits ESET | 2025-04-07T00:00:00.000000 | 2025-04-07T00:00:00.000000 |
| certfr-2025-avi-0279 | Multiples vulnérabilités dans les produits IBM | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0278 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0277 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0276 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0275 | Multiples vulnérabilités dans Microsoft Edge | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0274 | Multiples vulnérabilités dans MISP | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0273 | Vulnérabilité dans les produits Ivanti | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0272 | Multiples vulnérabilités dans les produits Splunk | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0271 | Vulnérabilité dans Tenable Nessus Agent | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0270 | Multiples vulnérabilités dans les produits Cisco | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0269 | Multiples vulnérabilités dans les produits Moxa | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0268 | Vulnérabilité dans les produits VMware | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0267 | Multiples vulnérabilités dans MongoDB Server | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0266 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0265 | Multiples vulnérabilités dans Google Chrome | 2025-04-02T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0264 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0263 | Multiples vulnérabilités dans HPE Aruba Networking Virtual Intranet Access | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0262 | Multiples vulnérabilités dans les produits Kaspersky | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0261 | Multiples vulnérabilités dans Microsoft Azure | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0260 | Multiples vulnérabilités dans Zabbix | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-000025 | The installer of PhishWall Client Firefox and Chrome edition for Windows may insecurely load Dynamic Link Libraries | 2018-03-15T13:38+09:00 | 2018-06-14T13:43+09:00 |
| jvndb-2018-000908 | WebProxy vulnerable to directory traversal | 2018-03-13T16:48+09:00 | 2018-06-14T13:51+09:00 |
| jvndb-2018-000906 | TinyFTP Daemon vulnerable to buffer overflow | 2018-03-13T16:48+09:00 | 2018-06-14T14:12+09:00 |
| jvndb-2018-000905 | ViX may insecurely load Dynamic Link Libraries | 2018-03-13T16:48+09:00 | 2018-06-14T13:52+09:00 |
| jvndb-2018-000904 | PHP 2chBBS vulnerable to cross-site scripting | 2018-03-13T16:47+09:00 | 2018-06-14T13:55+09:00 |
| jvndb-2018-000900 | ArsenoL vulnerable to cross-site scripting | 2018-03-13T16:46+09:00 | 2018-06-14T13:58+09:00 |
| jvndb-2018-000907 | QQQ SYSTEMS vulnerable to arbitrary command injection | 2018-03-13T16:43+09:00 | 2018-06-14T13:53+09:00 |
| jvndb-2018-000903 | QQQ SYSTEMS vulnerable to cross-site scripting | 2018-03-13T16:43+09:00 | 2018-06-14T14:03+09:00 |
| jvndb-2018-000902 | QQQ SYSTEMS vulnerable to cross-site scripting | 2018-03-13T16:43+09:00 | 2018-06-14T13:39+09:00 |
| jvndb-2018-000901 | QQQ SYSTEMS vulnerable to cross-site scripting | 2018-03-13T16:43+09:00 | 2018-06-14T12:31+09:00 |
| jvndb-2018-000024 | Multiple vulnerabilities in CG-WGR1200 | 2018-03-09T13:56+09:00 | 2018-06-14T13:54+09:00 |
| jvndb-2018-000023 | WordPress plugin "WP All Import" vulnerable to cross-site scripting | 2018-03-08T14:10+09:00 | 2018-06-14T12:27+09:00 |
| jvndb-2018-000022 | WordPress plugin "WP All Import" vulnerable to cross-site scripting | 2018-03-08T14:10+09:00 | 2018-06-14T12:26+09:00 |
| jvndb-2018-000021 | Installer of WinShot may insecurely load Dynamic Link Libraries | 2018-03-05T15:10+09:00 | 2018-06-14T13:43+09:00 |
| jvndb-2018-000020 | Installer of JTrim may insecurely load Dynamic Link Libraries | 2018-03-05T14:07+09:00 | 2018-06-14T13:46+09:00 |
| jvndb-2018-000019 | Multiple vulnerabilities in Jubatus | 2018-03-02T13:45+09:00 | 2018-06-14T13:57+09:00 |
| jvndb-2018-000017 | Multiple vulnerabilities in WXR-1900DHP2 | 2018-02-26T14:10+09:00 | 2018-06-14T13:49+09:00 |
| jvndb-2018-000016 | LINE for iOS fails to verify SSL server certificates | 2018-02-22T15:29+09:00 | 2018-06-14T12:23+09:00 |
| jvndb-2018-000015 | Multiple vulnerabilities in FS010W | 2018-02-22T15:29+09:00 | 2018-04-11T12:31+09:00 |
| jvndb-2018-000013 | Insecure DLL Loading issue in multiple Trend Micro products | 2018-02-15T16:39+09:00 | 2018-04-11T12:23+09:00 |
| jvndb-2018-001389 | XXE Vulnerability in Hitachi Device Manager | 2018-02-14T14:59+09:00 | 2018-03-01T15:20+09:00 |
| jvndb-2018-001388 | Multiple Vulnerabilities in Hitachi Command Suite | 2018-02-14T14:58+09:00 | 2018-03-01T15:20+09:00 |
| jvndb-2018-000014 | Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" may insecurely load Dynamic Link Libraries | 2018-02-13T15:43+09:00 | 2018-04-11T12:28+09:00 |
| jvndb-2018-000012 | Installer of "FLET'S Azukeru Backup Tool" may insecurely load Dynamic Link Libraries | 2018-02-13T15:37+09:00 | 2018-04-11T12:25+09:00 |
| jvndb-2018-000011 | MP Form Mail CGI eCommerce Edition vulnerable to OS command injection | 2018-02-08T12:21+09:00 | 2018-04-11T11:57+09:00 |
| jvndb-2018-000009 | The installer of Anshin net security for Windows may insecurely load Dynamic Link Libraries | 2018-02-06T15:05+09:00 | 2018-04-11T12:13+09:00 |
| jvndb-2018-000007 | Multiple I-O DATA network devices incorporating "MagicalFinder" vulnerable to OS command injection | 2018-02-06T14:22+09:00 | 2018-04-11T11:51+09:00 |
| jvndb-2018-000010 | WordPress plugin "MTS Simple Booking C" vulnerable to cross-site scripting | 2018-02-02T13:39+09:00 | 2018-04-11T11:53+09:00 |
| jvndb-2018-000008 | Spring Security and Spring Framework vulnerable to authentication bypass | 2018-02-02T12:28+09:00 | 2018-06-14T13:48+09:00 |
| jvndb-2018-000006 | Multiple vulnerabilities in epg search result viewer(kkcald) | 2018-02-01T13:58+09:00 | 2018-04-11T11:49+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-00012 | Microsoft Azure Cosmos DB欺骗漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00011 | Microsoft Azure Cognitive Service for Language权限提升漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00010 | Microsoft Edge (Chromium-based)欺骗漏洞(CNVD-2026-00010) | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00009 | WordPress插件MasterStudy LMS Pro信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00008 | WordPress插件Follow My Blog Post息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00007 | Apache StreamPark安全绕过漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00006 | Apache Fineract信息泄露漏洞(CNVD-2026-00006) | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00005 | Apache Fineract信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00004 | Apache Fineract安全绕过漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00003 | Apache Airflow信息泄露漏洞(CNVD-2026-00003) | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00002 | WordPress插件myCred信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00001 | WordPress插件Appointment Booking Calendar信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2025-31388 | Apache StreamPark弱算法漏洞 | 2025-12-25 | 2025-12-25 |
| cnvd-2025-31387 | Apache HugeGraph-Server反序列化漏洞 | 2025-12-25 | 2025-12-25 |
| cnvd-2026-11785 | Advantech WebAccess/SCADA目录遍历漏洞 | 2025-12-24 | 2026-02-27 |
| cnvd-2026-11784 | Advantech WebAccess/SCADA SQL注入漏洞 | 2025-12-24 | 2026-02-27 |
| cnvd-2026-11783 | Advantech WebAccess/SCADA目录遍历漏洞(CNVD-2026-11783) | 2025-12-24 | 2026-02-27 |
| cnvd-2026-11782 | Advantech WebAccess/SCADA代码问题漏洞 | 2025-12-24 | 2026-02-27 |
| cnvd-2026-06416 | 深圳市广联智通科技有限公司AR300M16路由器存在命令执行漏洞(CNVD-C-2025-1171570) | 2025-12-24 | 2026-02-07 |
| cnvd-2026-06411 | 杭州飞致云信息科技有限公司SQLBot存在命令执行漏洞 | 2025-12-24 | 2026-02-01 |
| cnvd-2026-12363 | WordPress FAPI Member plugin授权绕过漏洞 | 2025-12-22 | 2026-03-02 |
| cnvd-2026-07559 | WordPress Brizy – Page Builder plugin信息泄露漏洞 | 2025-12-22 | 2026-01-28 |
| cnvd-2026-07558 | WordPress插件Ultimate Auction信息泄露漏洞 | 2025-12-22 | 2026-01-28 |
| cnvd-2026-07557 | WordPress插件SendPulse Email Marketing Newsletter信息泄露漏洞 | 2025-12-22 | 2026-01-28 |
| cnvd-2026-07556 | WordPress插件Export WP Page to Static HTML & PDF信息泄露漏洞 | 2025-12-22 | 2026-01-28 |
| cnvd-2026-04454 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-1134083) | 2025-12-22 | 2026-01-21 |
| cnvd-2025-31336 | WordPress Hide Email Address plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-24 |
| cnvd-2025-31335 | WordPress HelloLeads CRM Form Shortcode plugin缺少授权漏洞 | 2025-12-22 | 2025-12-24 |
| cnvd-2025-31334 | WordPress Header Footer Script Adder plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31333 | WordPress Grider for Elementor plugin缺少授权漏洞 | 2025-12-22 | 2025-12-25 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2026-00297 | Уязвимость библиотеки crypto++ языка программирования C++, связанная с неправильной автор… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00296 | Уязвимость службы Remote Access Connection Manager (RASMan) операционных систем Windows, … | 12.01.2026 | 12.01.2026 |
| bdu:2026-00295 | Уязвимость платформы управления сетью MICROSENS NMP Web+, связанная с неверным ограничени… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00294 | Уязвимость платформы управления сетью MICROSENS NMP Web+, связанная с использованием пред… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00293 | Уязвимость системы контроля доступа и мониторинга событий LenelS2 NetBox, связанная с неп… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00292 | Уязвимость системы контроля доступа и мониторинга событий LenelS2 NetBox, связанная с неп… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00291 | Уязвимость системы контроля доступа и мониторинга событий LenelS2 NetBox, связанная с неп… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00290 | Уязвимость функции makeProcessFunction() файла /applications/core/modules/front/system/th… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00289 | Уязвимость программного обеспечения веб-конференцсвязи Cisco Webex Meetings, связанная с … | 12.01.2026 | 12.01.2026 |
| bdu:2026-00288 | Уязвимость функции formSetPPTPUserList() микропрограммного обеспечения маршрутизаторов Te… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00287 | Уязвимость пользовательского интерфейса программного обеспечения веб-конференцсвязи Cisco… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00286 | Уязвимость функции ate_ifconfig_set() микропрограммного обеспечения маршрутизаторов Tenda… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00285 | Уязвимость ядра операционной системы Linux, связанная с ошибками при обновлении счетчика … | 12.01.2026 | 20.01.2026 |
| bdu:2026-00284 | Уязвимость функции ate_iwpriv_set() микропрограммного обеспечения маршрутизаторов Tenda A… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00283 | Уязвимость пользовательского интерфейса Headlamp программного средства управления кластер… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00282 | Уязвимость микропрограммного обеспечения контроллеров DVP-12SE11T, связанная с обходом ау… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00281 | Уязвимость компонента JWT Signing Key Handler программного обеспечения OneLogin AD Connec… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00280 | Уязвимость компонента JWT Signing Key Handler программного обеспечения OneLogin AD Connec… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00279 | Уязвимость системы управления контентом на основе технологии Java OFCMS, связаная с подде… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00278 | Уязвимость микропрограммного обеспечения контроллеров DVP-12SE11T, связанная с недостаточ… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00277 | Уязвимость микропрограммного обеспечения контроллеров DVP-12SE11T, связанная с недостаточ… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00276 | Уязвимость пакета 389-ds-base операционных систем Debian GNU/Linux и Red Hat Enterprise L… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00275 | Уязвимость корпоративной системы управления электронной почтой Zimbra Collaboration Suite… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00274 | Уязвимость функций bind_interdomain_evtchn_to_irq_lateeoi(), find_virq() и bind_virq_to_i… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00273 | Уязвимость функции Create User (Создание пользователя) программного средства мониторинга … | 12.01.2026 | 12.01.2026 |
| bdu:2026-00272 | Уязвимость модуля Snapshots (Снимки) программного средства мониторинга и анализа логов Na… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00271 | Уязвимость браузера Google Chrome, связанная с некорректной защитой физических сторонних … | 12.01.2026 | 20.01.2026 |
| bdu:2026-00270 | Уязвимость сервера системы управления базами данных MongoDB, позволяющая нарушителю вызва… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00269 | Уязвимость сервера системы управления базами данных MongoDB, позволяющая нарушителю вызва… | 12.01.2026 | 12.01.2026 |
| bdu:2026-00268 | Уязвимость языка программирования Go, связанная с недостатками процедуры авторизации, поз… | 12.01.2026 | 12.01.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201302-0407 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T20:15:14.947000Z |
| var-201904-1426 | A memory corruption issue was addressed with improved memory handling. This issue affecte… | 2026-03-09T20:14:46.173000Z |
| var-202109-0277 | A logic issue was addressed with improved state management. This issue is fixed in iTunes… | 2026-03-09T20:14:44.918000Z |
| var-201205-0406 | WebKit in Apple iOS before 5.1.1 allows remote attackers to execute arbitrary code or cau… | 2026-03-09T20:14:44.728000Z |
| var-200906-0591 | The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util befor… | 2026-03-09T20:13:39.286000Z |
| var-202108-2221 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. T… | 2026-03-09T20:13:33.055000Z |
| var-200609-0808 | The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely cre… | 2026-03-09T20:13:10.776000Z |
| var-202112-1654 | A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a … | 2026-03-09T20:13:04.546000Z |
| var-201001-0692 | The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on… | 2026-03-09T20:13:01.478000Z |
| var-201302-0264 | Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.… | 2026-03-09T20:13:00.734000Z |
| var-200611-0210 | The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through … | 2026-03-09T20:12:57.197000Z |
| var-201806-1437 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2026-03-09T20:12:16.131000Z |
| var-201203-0197 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2026-03-09T20:11:20.589000Z |
| var-201710-0211 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GT… | 2026-03-09T20:10:48.478000Z |
| var-201403-0508 | The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.… | 2026-03-09T20:10:44.297000Z |
| var-202108-2087 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mont… | 2026-03-09T20:10:43.210000Z |
| var-201412-0519 | The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j … | 2026-03-09T20:10:05.776000Z |
| var-202109-1900 | An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be explo… | 2026-03-09T20:09:59.372000Z |
| var-201705-3649 | There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1… | 2026-03-09T20:09:59.018000Z |
| var-202108-2039 | A logic issue was addressed with improved state management. This issue is fixed in macOS … | 2026-03-09T20:09:56.972000Z |
| var-201111-0129 | Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted re… | 2026-03-09T20:09:56.353000Z |
| var-201710-1408 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2026-03-09T20:09:55.718000Z |
| var-201306-0257 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2026-03-09T20:09:51.945000Z |
| var-201808-0957 | Systems with microprocessors utilizing speculative execution and address translations may… | 2026-03-09T20:08:15.928000Z |
| var-201804-1225 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2026-03-09T20:08:13.428000Z |
| var-201806-1467 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2026-03-09T20:08:09.049000Z |
| var-201009-0241 | Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10… | 2026-03-09T20:08:08.711000Z |
| var-201103-0294 | Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800… | 2026-03-09T20:08:08.105000Z |
| var-201804-1210 | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS b… | 2026-03-09T20:08:07.492000Z |
| var-200704-0227 | Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4… | 2026-03-09T20:07:45.799000Z |