Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-41254
4 (3.1)
Little CMS (lcms2) through 2.18 has an integer ov… littlecms
 little cms color engine
 2026-04-18T06:43:13.741Z 2026-04-20T16:09:45.530Z
CVE-2026-32690
N/A
Apache Airflow: 3.x - Nested Variable Secret Values By… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:22:26.081Z 2026-04-20T16:11:33.956Z
CVE-2026-30898
N/A
Apache Airflow: Bad example of BashOperator shell inje… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:20:48.647Z 2026-04-22T03:55:38.783Z
CVE-2026-30912
N/A
Apache Airflow: Exposing stack trace in case of constr… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:20:30.254Z 2026-04-20T16:26:07.128Z
CVE-2026-25917
N/A
Apache Airflow: API extra-links triggers XCom deserial… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:20:11.187Z 2026-04-22T13:58:49.807Z
CVE-2026-32228
N/A
Apache Airflow: Users with asset materialization permi… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:19:47.512Z 2026-04-20T15:54:05.072Z
CVE-2026-41253
6.9 (3.1)
In iTerm2 through 3.6.9, displaying a .txt file c… iTerm2
 iTerm2
 2026-04-18T05:27:08.202Z 2026-04-20T15:52:10.357Z
CVE-2026-6048
6.4 (3.1)
Flipbox Addon for Elementor <= 2.1.1 - Authenticated (… dragwyb
 Flipbox Addon for Elementor
 2026-04-18T03:37:05.751Z 2026-04-20T13:46:08.081Z
CVE-2026-6518
8.8 (3.1)
CMP – Coming Soon & Maintenance Plugin by NiteoThemes … niteo
 CMP – Coming Soon & Maintenance Plugin by NiteoThemes
 2026-04-18T03:37:04.707Z 2026-04-20T13:46:08.222Z
CVE-2026-4801
6.4 (3.1)
Page Builder Gutenberg Blocks <= 3.1.16 - Authenticate… godaddy
 Page Builder Gutenberg Blocks – CoBlocks
 2026-04-18T03:37:03.859Z 2026-04-20T14:42:38.120Z
CVE-2026-40494
9.8 (3.1)
SAIL has heap buffer overflow in TGA RLE decoder — raw… HappySeaFox
 sail
 2026-04-18T01:42:48.830Z 2026-04-20T14:55:42.859Z
CVE-2026-40493
9.8 (3.1)
SAIL has heap buffer overflow in PSD decoder — bpp mis… HappySeaFox
 sail
 2026-04-18T01:41:14.664Z 2026-04-20T16:15:22.120Z
CVE-2026-40492
9.8 (3.1)
SAIL has heap buffer overflow in XWD decoder — bits_pe… HappySeaFox
 sail
 2026-04-18T01:39:48.056Z 2026-04-20T15:24:42.029Z
CVE-2026-40491
6.5 (3.1)
gdown Affected by Arbitrary File Write via Path Traver… wkentaro
 gdown
 2026-04-18T01:36:47.659Z 2026-04-20T15:50:02.983Z
CVE-2026-40490
6.8 (3.1)
AsyncHttpClient leaks authorization credentials to unt… AsyncHttpClient
 async-http-client
 2026-04-18T01:31:13.860Z 2026-04-20T14:55:50.254Z
CVE-2026-1559
6.4 (3.1)
Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored … youzify
 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
 2026-04-18T01:26:05.210Z 2026-04-20T13:46:08.353Z
CVE-2026-1838
6.1 (3.1)
Hostel <= 1.1.6 - Reflected Cross-Site Scripting via '… prasunsen
 Hostel
 2026-04-18T01:26:04.643Z 2026-04-20T14:19:29.627Z
CVE-2026-40489
8.6 (4.0)
editorconfig-core-c has incomplete fix for CVE-2023-0341 editorconfig
 editorconfig-core-c
 2026-04-18T01:24:57.278Z 2026-04-20T16:15:31.570Z
CVE-2026-40487
8.9 (3.1)
Postiz Has Unrestricted File Upload via MIME Type Spoo… gitroomhq
 postiz-app
 2026-04-18T01:19:06.588Z 2026-04-20T15:25:40.893Z
CVE-2026-35582
8.8 (3.1)
Emissary has an OS Command Injection via Unvalidated I… NationalSecurityAgency
 emissary
 2026-04-18T01:16:27.661Z 2026-04-20T15:48:51.543Z
CVE-2026-35465
7.5 (3.1)
SecureDrop Client has path injection in read_gzip_head… freedomofpress
 securedrop-client
 2026-04-18T00:41:16.594Z 2026-04-20T15:47:43.822Z
CVE-2026-40572
9 (3.1)
NovumOS has Arbitrary Memory Mapping via Syscall 15 (M… MinecAnton209
 NovumOS
 2026-04-18T00:16:02.590Z 2026-04-20T14:55:57.521Z
CVE-2026-40317
9.4 (3.1)
NovumOS has Privilege Escalation in the Syscall Interface MinecAnton209
 NovumOS
 2026-04-18T00:12:10.368Z 2026-04-20T15:26:25.222Z
CVE-2026-40350
8.8 (3.1)
Movary User Management (/settings/users) has Authoriza… leepeuker
 movary
 2026-04-18T00:07:33.324Z 2026-04-20T16:15:39.915Z
CVE-2026-40349
8.8 (3.1)
Authenticated Movary User Can Self-Escalate to Adminis… leepeuker
 movary
 2026-04-18T00:05:46.360Z 2026-04-20T16:15:49.844Z
CVE-2026-40593
4.8 (3.1)
ChurchCRM: Stored XSS in UserEditor.php via Login Name Field ChurchCRM
 CRM
 2026-04-18T00:02:59.606Z 2026-04-20T14:56:05.666Z
CVE-2026-40348
7.7 (3.1)
Movary has Authenticated SSRF via Jellyfin Server URL … leepeuker
 movary
 2026-04-18T00:01:09.725Z 2026-04-20T16:11:32.779Z
CVE-2026-40347
5.3 (3.1)
Python-Multipart affected by Denial of Service via lar… Kludex
 python-multipart
 2026-04-17T23:56:50.777Z 2026-04-20T15:46:40.011Z
CVE-2026-40346
6.4 (4.0)
NocoBase has SSRF in Workflow HTTP Request and Custom … nocobase
 @nocobase/plugin-workflow-request
 2026-04-17T23:54:34.829Z 2026-04-20T14:56:12.829Z
CVE-2026-40581
8.1 (3.1)
ChurchCRM: Cross-Site Request Forgery (CSRF) in Select… ChurchCRM
 CRM
 2026-04-17T23:51:32.765Z 2026-04-20T16:15:58.183Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-6559
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scripting Wavlink
 WL-WN579A3
 2026-04-19T05:15:15.503Z 2026-04-20T16:07:54.597Z
CVE-2026-0868
6.4 (3.1)
EMC Scheduling Manager <= 4.4 - Authenticated (Contrib… turn2honey
 EMC – Easily Embed Calendly Scheduling
 2026-04-19T03:26:14.765Z 2026-04-20T16:53:24.024Z
CVE-2026-6056
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. N/A N/A 2026-04-18T22:19:26.698Z
CVE-2026-41242
9.4 (4.0)
protobufjs has an arbitrary code execution issue protobufjs
 protobuf.js
 2026-04-18T16:18:10.652Z 2026-04-20T16:03:57.689Z
CVE-2026-40948
N/A
Apache Airflow Providers Keycloak: OAuth Login CSRF — … Apache Software Foundation
 Apache Airflow Providers Keycloak
 2026-04-18T13:22:41.577Z 2026-04-20T16:17:53.543Z
CVE-2026-2986
6.4 (3.1)
Contextual Related Posts <= 4.2.1 - Authenticated (Con… ajay
 Contextual Related Posts
 2026-04-18T11:16:10.980Z 2026-04-20T14:19:06.323Z
CVE-2026-2505
5.4 (3.1)
Categories Images <= 3.3.1 - Authenticated (Contributo… elzahlan
 Categories Images
 2026-04-18T09:26:52.654Z 2026-04-20T13:46:07.918Z
CVE-2026-0894
6.4 (3.1)
Content Blocks (Custom Post Widget) <= 3.3.9 - Authent… vanderwijk
 Content Blocks (Custom Post Widget)
 2026-04-18T09:26:52.078Z 2026-04-20T13:48:40.598Z
CVE-2026-41254
4 (3.1)
Little CMS (lcms2) through 2.18 has an integer ov… littlecms
 little cms color engine
 2026-04-18T06:43:13.741Z 2026-04-20T16:09:45.530Z
CVE-2026-32690
N/A
Apache Airflow: 3.x - Nested Variable Secret Values By… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:22:26.081Z 2026-04-20T16:11:33.956Z
CVE-2026-32228
N/A
Apache Airflow: Users with asset materialization permi… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:19:47.512Z 2026-04-20T15:54:05.072Z
CVE-2026-30912
N/A
Apache Airflow: Exposing stack trace in case of constr… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:20:30.254Z 2026-04-20T16:26:07.128Z
CVE-2026-30898
N/A
Apache Airflow: Bad example of BashOperator shell inje… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:20:48.647Z 2026-04-22T03:55:38.783Z
CVE-2026-25917
N/A
Apache Airflow: API extra-links triggers XCom deserial… Apache Software Foundation
 Apache Airflow
 2026-04-18T06:20:11.187Z 2026-04-22T13:58:49.807Z
CVE-2026-41253
6.9 (3.1)
In iTerm2 through 3.6.9, displaying a .txt file c… iTerm2
 iTerm2
 2026-04-18T05:27:08.202Z 2026-04-20T15:52:10.357Z
CVE-2026-6518
8.8 (3.1)
CMP – Coming Soon & Maintenance Plugin by NiteoThemes … niteo
 CMP – Coming Soon & Maintenance Plugin by NiteoThemes
 2026-04-18T03:37:04.707Z 2026-04-20T13:46:08.222Z
CVE-2026-6048
6.4 (3.1)
Flipbox Addon for Elementor <= 2.1.1 - Authenticated (… dragwyb
 Flipbox Addon for Elementor
 2026-04-18T03:37:05.751Z 2026-04-20T13:46:08.081Z
CVE-2026-4801
6.4 (3.1)
Page Builder Gutenberg Blocks <= 3.1.16 - Authenticate… godaddy
 Page Builder Gutenberg Blocks – CoBlocks
 2026-04-18T03:37:03.859Z 2026-04-20T14:42:38.120Z
CVE-2026-40494
9.8 (3.1)
SAIL has heap buffer overflow in TGA RLE decoder — raw… HappySeaFox
 sail
 2026-04-18T01:42:48.830Z 2026-04-20T14:55:42.859Z
CVE-2026-40493
9.8 (3.1)
SAIL has heap buffer overflow in PSD decoder — bpp mis… HappySeaFox
 sail
 2026-04-18T01:41:14.664Z 2026-04-20T16:15:22.120Z
CVE-2026-40492
9.8 (3.1)
SAIL has heap buffer overflow in XWD decoder — bits_pe… HappySeaFox
 sail
 2026-04-18T01:39:48.056Z 2026-04-20T15:24:42.029Z
CVE-2026-40491
6.5 (3.1)
gdown Affected by Arbitrary File Write via Path Traver… wkentaro
 gdown
 2026-04-18T01:36:47.659Z 2026-04-20T15:50:02.983Z
CVE-2026-40490
6.8 (3.1)
AsyncHttpClient leaks authorization credentials to unt… AsyncHttpClient
 async-http-client
 2026-04-18T01:31:13.860Z 2026-04-20T14:55:50.254Z
CVE-2026-40489
8.6 (4.0)
editorconfig-core-c has incomplete fix for CVE-2023-0341 editorconfig
 editorconfig-core-c
 2026-04-18T01:24:57.278Z 2026-04-20T16:15:31.570Z
CVE-2026-40487
8.9 (3.1)
Postiz Has Unrestricted File Upload via MIME Type Spoo… gitroomhq
 postiz-app
 2026-04-18T01:19:06.588Z 2026-04-20T15:25:40.893Z
CVE-2026-35582
8.8 (3.1)
Emissary has an OS Command Injection via Unvalidated I… NationalSecurityAgency
 emissary
 2026-04-18T01:16:27.661Z 2026-04-20T15:48:51.543Z
CVE-2026-1838
6.1 (3.1)
Hostel <= 1.1.6 - Reflected Cross-Site Scripting via '… prasunsen
 Hostel
 2026-04-18T01:26:04.643Z 2026-04-20T14:19:29.627Z
CVE-2026-1559
6.4 (3.1)
Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored … youzify
 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
 2026-04-18T01:26:05.210Z 2026-04-20T13:46:08.353Z
CVE-2026-40572
9 (3.1)
NovumOS has Arbitrary Memory Mapping via Syscall 15 (M… MinecAnton209
 NovumOS
 2026-04-18T00:16:02.590Z 2026-04-20T14:55:57.521Z
CVE-2026-40350
8.8 (3.1)
Movary User Management (/settings/users) has Authoriza… leepeuker
 movary
 2026-04-18T00:07:33.324Z 2026-04-20T16:15:39.915Z
ID Description Published Updated
ID Severity Description Published Updated
ghsa-6cjg-w4wg-37mh
9.8 (3.1)
The Riaxe Product Customizer plugin for WordPress is vulnerable to Privilege Escalation in all vers… 2026-04-16T06:31:23Z 2026-04-16T06:31:23Z
ghsa-4xx2-h7jh-g7ph
4.4 (3.1)
The Custom New User Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting … 2026-04-16T06:31:23Z 2026-04-16T06:31:23Z
ghsa-4g9p-x8vm-f7qg
5.3 (3.1)
The Riaxe Product Customizer plugin for WordPress is vulnerable to authorization bypass in all vers… 2026-04-16T06:31:23Z 2026-04-16T06:31:23Z
ghsa-45x5-433g-pc2h
5.3 (3.1)
The Basic Google Maps Placemarks plugin for WordPress is vulnerable to authorization bypass in vers… 2026-04-16T06:31:23Z 2026-04-16T06:31:23Z
ghsa-3phr-p473-vc8q
8.8 (3.1)
The AcyMailing plugin for WordPress is vulnerable to privilege escalation in all versions From 9.11… 2026-04-16T06:31:23Z 2026-04-16T06:31:23Z
ghsa-wxm2-x9x9-x5mj
9.3 (3.1)
Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod. 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-wc72-m63f-4pcv
6.4 (3.1)
The WP YouTube Lyte plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-vmw6-xgxq-pw9v
5.4 (4.0)
An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-v352-gq4q-9qjf
7.4 (3.1)
radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB nam… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-ppm7-9255-8gmf
8.8 (3.1)
9.3 (4.0)
WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowin… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-mgwx-w2xc-pjq7
7.5 (3.1)
8.7 (4.0)
MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthentica… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-hx2j-xhcm-gv72
9.8 (3.1)
10.0 (4.0)
The  iSherlock developed by HGiga  has an OS Command Injection vulnerability, allowing unauthentica… 2026-04-16T03:31:06Z 2026-04-24T09:30:29Z
ghsa-hj44-m5xv-x75q
3.3 (3.1)
4.8 (4.0)
MuPDF mutool does not sanitize PDF metadata fields before writing them to terminal output, allowing… 2026-04-16T03:31:06Z 2026-04-17T18:31:50Z
ghsa-fwhx-4vqr-m9gj
6.5 (3.1)
7.1 (4.0)
OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gate… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-99qg-46r6-v9px
6.4 (3.1)
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-S… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-6v5j-prr3-phf9
9.8 (3.1)
9.3 (4.0)
MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-6v58-5584-rv99
8.1 (3.1)
Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least o… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-49h6-4qj3-4f42
5.4 (4.0)
A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Cente… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-48wr-p98v-9w5h
4.9 (3.1)
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryp… 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-3r49-76f3-pf2m
9.8 (3.1)
9.3 (4.0)
Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec … 2026-04-16T03:31:06Z 2026-04-16T03:31:06Z
ghsa-9w66-jgph-vx6j
8.8 (3.1)
8.7 (4.0)
OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote g… 2026-04-16T03:31:05Z 2026-04-16T03:31:05Z
ghsa-7rhq-9q45-5gm4
8.4 (4.0)
radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print… 2026-04-16T03:31:05Z 2026-04-16T03:31:05Z
ghsa-6f54-qjvm-wwq3
5.1 (4.0)
wger has Stored XSS via Unescaped License Attribution Fields 2026-04-16T01:37:21Z 2026-04-16T01:37:21Z
ghsa-xppv-4jrx-qf8m
7.6 (3.1)
wger has Broken Access Control in Global Gym Configuration Update Endpoint 2026-04-16T01:35:16Z 2026-04-16T01:35:16Z
ghsa-5vjq-5jmg-39xq
6.3 (3.1)
Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers… 2026-04-16T01:34:39Z 2026-04-16T01:34:40Z
ghsa-hm2w-vr2p-hq7w
9.8 (3.1)
UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen 2026-04-16T01:31:09Z 2026-04-16T01:31:09Z
ghsa-2689-5p89-6j3j
9.8 (3.1)
UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable 2026-04-16T01:30:48Z 2026-04-16T01:30:48Z
ghsa-mp82-fmj6-f22v
4.8 (3.1)
pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Glo… 2026-04-16T01:20:49Z 2026-04-16T01:21:32Z
ghsa-rr7j-v2q5-chgv
5.3 (3.1)
LangSmith SDK: Streaming token events bypass output redaction 2026-04-16T01:20:37Z 2026-04-16T01:20:37Z
ghsa-vp22-38m5-r39r
6.9 (4.0)
PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.valid… 2026-04-16T01:09:17Z 2026-04-16T01:09:17Z
ID Severity Description Package Published Updated
pysec-2021-282
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… tensorflow 2021-08-12T18:15:00Z 2021-08-27T03:22:44.908068Z
pysec-2021-275
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… tensorflow 2021-08-12T18:15:00Z 2021-08-27T03:22:44.260808Z
pysec-2021-264
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… tensorflow 2021-08-12T18:15:00Z 2021-08-27T03:22:43.277267Z
pysec-2021-262
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… tensorflow 2021-08-12T18:15:00Z 2021-08-27T03:22:43.107664Z
pysec-2021-258
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… tensorflow 2021-08-12T18:15:00Z 2021-08-27T03:22:42.737707Z
pysec-2021-130
JupyterLab is a user interface for Project Jupyter which will eventually replace the clas… jupyterlab 2021-08-09T21:15:00Z 2021-08-27T03:22:05.377903Z
pysec-2021-119
23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a craft… yamale 2021-08-09T21:15:00Z 2021-08-17T20:30:12.776802Z
pysec-2021-118
The Jupyter notebook is a web-based notebook environment for interactive computing. In af… notebook 2021-08-09T21:15:00Z 2021-08-17T18:40:19.674164Z
pysec-2021-370
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and … accesscontrol 2021-08-02T22:15:00Z 2021-10-12T02:55:32.357329Z
pysec-2021-368
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and … zope 2021-08-02T22:15:00Z 2021-10-12T02:55:36.218662Z
pysec-2021-323
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Pr… products-isurlinportal 2021-08-02T19:15:00Z 2021-09-20T14:26:43.785985Z
pysec-2021-875
The module `AccessControl` defines security policies for Python code used in restricted c… zope 2021-07-30T22:15:00Z 2023-05-04T04:29:31.501472Z
pysec-2021-335
The module `AccessControl` defines security policies for Python code used in restricted c… accesscontrol 2021-07-30T22:15:00Z 2021-09-26T23:32:08.989778Z
pysec-2021-115
The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection vi… glances 2021-07-29T18:15:00Z 2021-07-29T20:29:05.800424Z
pysec-2021-877
7.5 (3.1)
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a… exiv2 2021-07-26T17:15:00Z 2024-01-02T15:20:59.375619Z
pysec-2021-888
7.8 (3.1)
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (call… gdal 2021-07-20T07:15:00+00:00 2024-11-21T14:22:50.934313+00:00
pysec-2021-886
6.5 (3.1)
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 lea… exiv2 2021-07-13T22:15:00Z 2024-11-21T14:22:50.153222Z
pysec-2021-331
Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker… pillow 2021-07-13T17:15:00Z 2021-09-23T00:11:05.797411Z
pysec-2021-112
An integer overflow exists in pywin32 prior to version b301 when adding an access control… pywin32 2021-07-06T12:15:00Z 2021-07-08T03:14:30.948663Z
pysec-2021-337
This affects all versions of package Flask-User. When using the make_safe_url function, i… flask-user 2021-07-05T11:15:00Z 2021-09-26T23:32:30.327481Z
pysec-2021-109
Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection … django 2021-07-02T10:15:00Z 2021-07-08T03:14:19.151485Z
pysec-2021-349
XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service. xml2dict 2021-06-30T12:15:00Z 2021-09-26T23:33:39.694828Z
pysec-2021-110
In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if… plone 2021-06-30T01:15:00Z 2021-07-08T03:14:29.124687Z
pysec-2021-108
An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing man… urllib3 2021-06-29T11:15:00Z 2021-07-02T18:56:20.858344Z
pysec-2021-427
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.… mpmath 2021-06-21T20:15:00Z 2023-05-31T06:15:00Z
pysec-2021-103
Wagtail is an open source content management system built on Django. A cross-site scripti… wagtail 2021-06-17T17:15:00Z 2021-06-22T04:54:57.540693Z
pysec-2021-96
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redir… flask-unchained 2021-06-11T00:15:00Z 2021-06-15T05:47:49.199835Z
pysec-2021-97
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that lead… thefuck 2021-06-10T11:15:00Z 2021-06-16T00:03:24.982635Z
pysec-2021-100
FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python ty… fastapi 2021-06-09T18:15:00Z 2021-06-22T04:54:55.863034Z
pysec-2021-126
A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory o… ansible 2021-06-09T12:15:00Z 2022-11-10T04:31:24.270376Z
ID Description Updated
ID Description Published Updated
mal-2026-1540 Malicious code in typescript-type-graphql (npm) 2026-03-18T05:14:11Z 2026-03-23T05:16:31Z
mal-2026-1537 Malicious code in typescript-rtk-query (npm) 2026-03-18T04:05:48Z 2026-03-23T05:16:31Z
mal-2026-1536 Malicious code in typescript-resolvers (npm) 2026-03-18T04:05:28Z 2026-03-23T05:16:31Z
mal-2026-1518 Malicious code in ignore-html-and-css-imports (npm) 2026-03-18T04:04:58Z 2026-03-23T05:16:28Z
mal-2026-1535 Malicious code in transform-dev-warning (npm) 2026-03-18T04:04:38Z 2026-03-23T05:16:31Z
mal-2026-1534 Malicious code in transform-dev (npm) 2026-03-18T04:04:22Z 2026-03-23T05:16:31Z
mal-2026-1516 Malicious code in es6-recommended (npm) 2026-03-18T04:04:07Z 2026-03-23T05:16:27Z
mal-2026-1522 Malicious code in minify-mangle-names (npm) 2026-03-18T04:03:32Z 2026-03-23T05:16:29Z
mal-2026-1515 Malicious code in developit (npm) 2026-03-18T04:02:57Z 2026-03-23T05:16:26Z
mal-2026-1531 Malicious code in syntax-decorators (npm) 2026-03-18T04:02:22Z 2026-03-23T05:16:31Z
mal-2026-1532 Malicious code in syntax-exponentiation-operator (npm) 2026-03-18T04:02:07Z 2026-03-23T05:16:31Z
mal-2026-1526 Malicious code in prefer-let (npm) 2026-03-18T04:01:32Z 2026-03-23T05:16:30Z
mal-2026-1520 Malicious code in jam3 (npm) 2026-03-18T04:00:57Z 2026-03-23T05:16:28Z
mal-2026-1525 Malicious code in peer-deps-external (npm) 2026-03-18T04:00:23Z 2026-03-23T05:16:29Z
mal-2026-1514 Malicious code in declaration-block-no-ignored-properties (npm) 2026-03-18T04:00:23Z 2026-03-23T05:16:26Z
mal-2026-1529 Malicious code in require-in-package (npm) 2026-03-18T03:59:51Z 2026-03-23T05:16:30Z
mal-2026-1528 Malicious code in react-you-might-not-need-an-effect (npm) 2026-03-18T03:59:51Z 2026-03-23T05:16:30Z
mal-2026-1519 Malicious code in import-newlines (npm) 2026-03-18T03:59:51Z 2026-03-23T05:16:28Z
mal-2026-1527 Malicious code in proposal-typescript (npm) 2026-03-18T03:58:41Z 2026-03-23T05:16:30Z
mal-2026-1517 Malicious code in filenames-simple (npm) 2026-03-18T03:58:41Z 2026-03-23T05:16:27Z
mal-2026-1523 Malicious code in monorepo-cop (npm) 2026-03-18T03:58:23Z 2026-03-23T05:16:29Z
mal-2026-1533 Malicious code in todo-plz (npm) 2026-03-18T03:57:50Z 2026-03-23T05:16:31Z
mal-2026-1521 Malicious code in lit-a11y (npm) 2026-03-18T03:57:50Z 2026-03-23T05:16:28Z
mal-2026-1538 Malicious code in vue-scoped-css (npm) 2026-03-18T03:36:02Z 2026-03-23T05:16:31Z
mal-2026-1530 Malicious code in styled-components-a11y (npm) 2026-03-18T03:36:02Z 2026-03-23T05:16:30Z
mal-2026-1524 Malicious code in no-type-assertion (npm) 2026-03-18T03:36:02Z 2026-03-23T05:16:29Z
mal-2026-1512 Malicious code in undeclared-variables-check (npm) 2026-03-18T02:38:00Z 2026-03-23T05:16:31Z
mal-2026-1511 Malicious code in transform-undefined-to-void (npm) 2026-03-18T02:38:00Z 2026-03-23T05:16:31Z
mal-2026-1509 Malicious code in transform-remove-debugger (npm) 2026-03-18T02:38:00Z 2026-03-23T05:16:31Z
mal-2026-1505 Malicious code in transform-jscript (npm) 2026-03-18T02:38:00Z 2026-03-23T05:16:31Z
ID Description Published Updated
ID Description Published Updated
wid-sec-w-2025-1748 libarchive: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung 2025-08-07T22:00:00.000+00:00 2026-03-03T23:00:00.000+00:00
wid-sec-w-2025-1747 HCL DominoIQ (llama.cpp): Mehrere Schwachstellen ermöglichen Codeausführung 2025-08-07T22:00:00.000+00:00 2025-08-07T22:00:00.000+00:00
wid-sec-w-2025-1746 Microsoft 365 Copilot: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2025-08-07T22:00:00.000+00:00 2025-08-10T22:00:00.000+00:00
wid-sec-w-2025-1745 Microsoft Azure: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2025-08-07T22:00:00.000+00:00 2025-08-10T22:00:00.000+00:00
wid-sec-w-2025-1744 OpenJPEG: Schwachstelle ermöglicht Denial of Service 2025-08-07T22:00:00.000+00:00 2025-12-29T23:00:00.000+00:00
wid-sec-w-2025-1743 Docker Desktop: Schwachstelle ermöglicht Privilegieneskalation 2025-08-06T22:00:00.000+00:00 2025-08-11T22:00:00.000+00:00
wid-sec-w-2025-1742 Microsoft Exchange Server: Schwachstelle ermöglicht Privilegieneskalation 2025-08-06T22:00:00.000+00:00 2025-08-06T22:00:00.000+00:00
wid-sec-w-2025-1741 TianoCore EDK2: Schwachstelle ermöglicht Privilegieneskalation 2025-08-06T22:00:00.000+00:00 2025-12-11T23:00:00.000+00:00
wid-sec-w-2025-1740 Golang Go: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2025-08-06T22:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-1739 Keycloak: Schwachstelle ermöglicht Manipulation von Dateien 2025-08-06T22:00:00.000+00:00 2025-09-03T22:00:00.000+00:00
wid-sec-w-2025-1738 Drupal (AI SEO Link Advisor): Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-08-06T22:00:00.000+00:00 2025-08-17T22:00:00.000+00:00
wid-sec-w-2025-1737 Cisco Identity Services Engine (ISE): Mehrere Schwachstellen 2025-08-06T22:00:00.000+00:00 2025-08-06T22:00:00.000+00:00
wid-sec-w-2025-1736 IBM Security Guardium: Schwachstelle ermöglicht Offenlegung von Informationen 2025-08-06T22:00:00.000+00:00 2025-08-06T22:00:00.000+00:00
wid-sec-w-2025-1735 Ubiquiti UniFi: Mehrere Schwachstellen 2025-08-06T22:00:00.000+00:00 2025-08-24T22:00:00.000+00:00
wid-sec-w-2025-1734 Hashicorp Vault: Schwachstelle ermöglicht Offenlegung von Informationen 2025-08-06T22:00:00.000+00:00 2025-08-06T22:00:00.000+00:00
wid-sec-w-2025-1733 Cisco WebEx Meeting Center: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-08-06T22:00:00.000+00:00 2025-08-06T22:00:00.000+00:00
wid-sec-w-2025-1732 Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht Codeausführung 2025-08-06T22:00:00.000+00:00 2025-12-15T23:00:00.000+00:00
wid-sec-w-2025-1731 Eaton Power Distribution Unit: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2025-08-05T22:00:00.000+00:00 2025-08-06T22:00:00.000+00:00
wid-sec-w-2025-1730 Hashicorp Vault: Schwachstelle ermöglicht Umgehen der MFA 2025-08-05T22:00:00.000+00:00 2025-08-07T22:00:00.000+00:00
wid-sec-w-2025-1729 xwiki: Mehrere Schwachstellen 2025-08-05T22:00:00.000+00:00 2025-08-05T22:00:00.000+00:00
wid-sec-w-2025-1728 libav: Mehrere Schwachstellen 2025-08-05T22:00:00.000+00:00 2025-08-05T22:00:00.000+00:00
wid-sec-w-2025-1727 Trend Micro Apex One: Schwachstelle ermöglicht Codeausführung 2025-08-05T22:00:00.000+00:00 2025-08-21T22:00:00.000+00:00
wid-sec-w-2025-1726 Dell Computer: Mehrere Schwachstellen 2025-08-05T22:00:00.000+00:00 2025-08-07T22:00:00.000+00:00
wid-sec-w-2025-1725 IBM Tivoli Monitoring: Mehrere Schwachstellen 2025-08-05T22:00:00.000+00:00 2025-08-06T22:00:00.000+00:00
wid-sec-w-2025-1724 DENX U-Boot: Schwachstelle ermöglicht Codeausführung 2025-08-05T22:00:00.000+00:00 2025-08-05T22:00:00.000+00:00
wid-sec-w-2025-1723 Google Chrome / Microsoft Edge: Mehrere Schwachstellen 2025-08-05T22:00:00.000+00:00 2025-08-21T22:00:00.000+00:00
wid-sec-w-2025-1722 OpenJPEG: Schwachstelle ermöglicht Codeausführung 2025-08-05T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-1721 OWASP ModSecurity: Schwachstelle ermöglicht Cross-Site Scripting 2025-08-05T22:00:00.000+00:00 2025-11-04T23:00:00.000+00:00
wid-sec-w-2025-1720 Adobe Experience Manager Forms: Mehrere Schwachstellen 2025-08-05T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-1719 Red Hat Enterprise Linux (ncurses): Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-08-04T22:00:00.000+00:00 2025-12-01T23:00:00.000+00:00
ID Description Published Updated
icsa-22-307-01 ETIC Telecom Remote Access Server (RAS) (Update B) 2022-11-03T06:00:00.000000Z 2024-12-03T07:00:00.000000Z
icsa-22-307-03 Delta Industrial Automation DIALink 2022-11-03T00:00:00.000000Z 2022-11-03T00:00:00.000000Z
icsa-22-300-03 Rockwell Automation Stratix Devices Containing Cisco IOS 2022-10-27T06:00:00.000000Z 2022-10-27T06:00:00.000000Z
icsa-22-300-04 Trihedral VTScada 2022-10-27T00:00:00.000000Z 2022-10-27T00:00:00.000000Z
icsa-22-300-02 SAUTER Controls moduWeb 2022-10-27T00:00:00.000000Z 2022-10-27T00:00:00.000000Z
icsa-22-300-01 Rockwell Automation FactoryTalk Alarm and Events Server 2022-10-27T00:00:00.000000Z 2022-10-27T00:00:00.000000Z
icsma-22-298-01 AliveCor KardiaMobile 2022-10-25T06:00:00.000000Z 2022-10-25T06:00:00.000000Z
icsa-22-298-02 HEIDENHAIN Controller TNC (Update A) 2022-10-25T06:00:00.000000Z 2025-09-30T06:00:00.000000Z
icsa-22-298-07 Delta Electronics InfraSuite Device Master 2022-10-25T00:00:00.000000Z 2023-01-18T00:00:00.000000Z
icsa-22-298-05 Johnson Controls CKS CEVAS 2022-10-25T00:00:00.000000Z 2022-10-25T00:00:00.000000Z
icsa-22-298-04 Hitachi Energy MicroSCADA X DMS600 2022-10-25T00:00:00.000000Z 2022-10-25T00:00:00.000000Z
icsa-22-298-01 Haas Controller 2022-10-25T00:00:00.000000Z 2022-10-25T00:00:00.000000Z
icsa-22-298-03 Siemens Siveillance Video Mobile Server 2022-10-21T00:00:00.000000Z 2022-10-21T00:00:00.000000Z
icsa-22-293-01 Bentley Systems MicroStation Connect 2022-10-20T00:00:00.000000Z 2022-10-20T00:00:00.000000Z
icsa-22-291-01 Advantech R-SeeNet 2022-10-18T00:00:00.000000Z 2022-10-18T00:00:00.000000Z
icsa-22-286-05 Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service 2022-10-13T00:00:00.000000Z 2022-10-13T00:00:00.000000Z
icsa-22-286-02 Siemens Industrial Edge Management 2022-10-13T00:00:00.000000Z 2022-10-13T00:00:00.000000Z
icsa-22-286-16 Siemens Desigo CC and Cerberus DMS 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-286-15 Siemens SCALANCE X-200 and X-200IRT Families (Update A) 2022-10-11T00:00:00.000000Z 2022-11-08T00:00:00.000000Z
icsa-22-286-14 Siemens SIMATIC HMI Panels 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-286-13 Siemens LOGO! 8 BM Devices 2022-10-11T00:00:00.000000Z 2024-10-08T00:00:00.000000Z
icsa-22-286-12 Siemens APOGEE, TALON and Desigo PXC/PXM Products 2022-10-11T00:00:00.000000Z 2025-05-13T00:00:00.000000Z
icsa-22-286-11 Siemens SCALANCE and RUGGEDCOM Products 2022-10-11T00:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-22-286-10 Siemens JT Open Toolkit and Simcenter Femap 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-286-09 Siemens SICAM P850 and P855 Devices 2022-10-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-286-08 Siemens SCALANCE and RUGGEDCOM Devices 2022-10-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-286-07 Siemens Nucleus RTOS FTP Server 2022-10-11T00:00:00.000000Z 2023-02-14T00:00:00.000000Z
icsa-22-286-06 Siemens Desigo PXM Devices 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-286-04 Siemens SIMATIC S7-1200 and S7-1500 CPU Families 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-286-03 Siemens Solid Edge 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
ID Description Published Updated
cisco-sa-dcnm-stored-xss-vye4bnah Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability 2020-06-17T16:00:00+00:00 2020-06-17T16:00:00+00:00
cisco-sa-dcnm-stored-xss-euygpqxm Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability 2020-06-17T16:00:00+00:00 2020-06-17T16:00:00+00:00
cisco-sa-asr5k-ecs-bypass-2lqfpcl Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability 2020-06-17T16:00:00+00:00 2020-06-17T16:00:00+00:00
cisco-sa-webui-unauthprxy-kxxsbwh Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-webui-pzgqxjfg Cisco IOS XE Software Web UI Privilege Escalation Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-webui-filerd-hngndygk Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-webui-cmdinj-zm283zdw Cisco IOS XE Software Web UI Command Injection Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-web-cmdinj4-s2tmh7ga Cisco IOS XE Software Web UI Command Injection Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-web-cmdinj3-44st5cca Cisco IOS XE Software Web UI Command Injection Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-web-cmdinj2-fonjk2ld Cisco IOS XE Software Web UI Command Injection Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-uccx-api-auth-wsx4v7sb Cisco Unified Contact Center Express Improper API Authorization Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-tcl-dos-mazqunmf Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-08T20:41:10+00:00
cisco-sa-tcl-ace-c9kuvkmm Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-sxp-68tevzr Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ssh-dos-un22sd2a Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-snmp-dos-usxsytk5 Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-sip-cv28sqw2 Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-priv-esc3-gmgngchx Cisco IOS XE Software Privilege Escalation Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-priv-esc2-a6jvru7c Cisco IOS XE Software Privilege Escalation Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-priv-esc1-okmkfrhv Cisco IOS XE Software Privilege Escalation Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-pi-sql-inj-kgllsfw8 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager SQL Injection Vulnerability 2020-06-03T16:00:00+00:00 2022-01-06T17:41:46+00:00
cisco-sa-ngwc-cmdinj-kewwvwr Cisco IOS XE Software Command Injection Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ise-dos-qnzq39k7 Cisco Identity Services Engine Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ioxxss-wc6cquws Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ioxpe-kggvcaf9 Cisco IOx for IOS XE Software Privilege Escalation Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-iosxe-webui-rce-uk8bxcud Cisco IOS XE Software Web UI Remote Code Execution Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-iosxe-vpn-dos-edomw28z Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-iosxe-fnfv9-dos-hnd6fc9u Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-iosxe-ewlc-dos-tkupvmzn Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-iosxe-digsig-bypass-fyq3bmvq Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
ID Description Published Updated
msrc_cve-2025-68198 crash: fix crashkernel resource shrink 2025-12-02T00:00:00.000Z 2026-01-07T14:37:45.000Z
msrc_cve-2025-68196 drm/amd/display: Cache streams targeting link when performing LT automation 2025-12-02T00:00:00.000Z 2026-01-20T14:36:06.000Z
msrc_cve-2025-68193 drm/xe/guc: Add devm release action to safely tear down CT 2025-12-02T00:00:00.000Z 2026-01-08T14:44:48.000Z
msrc_cve-2025-68190 drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() 2025-12-02T00:00:00.000Z 2026-03-31T14:47:46.000Z
msrc_cve-2025-68188 tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() 2025-12-02T00:00:00.000Z 2026-03-31T14:50:38.000Z
msrc_cve-2025-68175 media: nxp: imx8-isi: Fix streaming cleanup on release 2025-12-02T00:00:00.000Z 2026-01-13T01:36:58.000Z
msrc_cve-2025-68174 amd/amdkfd: enhance kfd process check in switch partition 2025-12-02T00:00:00.000Z 2026-03-31T14:48:59.000Z
msrc_cve-2025-68161 Apache Log4j Core: Missing TLS hostname verification in Socket appender 2025-12-02T00:00:00.000Z 2026-01-13T01:40:48.000Z
msrc_cve-2025-68156 Expr has Denial of Service via Unbounded Recursion in Builtin Functions 2025-12-02T00:00:00.000Z 2026-01-08T01:39:14.000Z
msrc_cve-2025-68146 filelock has TOCTOU race condition that allows symlink attacks during lock file creation 2025-12-02T00:00:00.000Z 2026-03-07T01:01:15.000Z
msrc_cve-2025-68114 Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow 2025-12-02T00:00:00.000Z 2026-03-04T14:36:09.000Z
msrc_cve-2025-67897 In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet. 2025-12-02T00:00:00.000Z 2026-01-20T14:38:32.000Z
msrc_cve-2025-67873 Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow 2025-12-02T00:00:00.000Z 2026-03-04T14:36:46.000Z
msrc_cve-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability 2025-12-02T00:00:00.000Z 2025-12-09T01:37:47.000Z
msrc_cve-2025-66471 urllib3 Streaming API improperly handles highly compressed data 2025-12-02T00:00:00.000Z 2026-02-18T14:08:15.000Z
msrc_cve-2025-66418 urllib3 allows an unbounded number of links in the decompression chain 2025-12-02T00:00:00.000Z 2026-02-18T14:07:18.000Z
msrc_cve-2025-66293 LIBPNG has an out-of-bounds read in png_image_read_composite 2025-12-02T00:00:00.000Z 2026-01-08T01:37:57.000Z
msrc_cve-2025-66200 Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo 2025-12-02T00:00:00.000Z 2025-12-20T14:35:45.000Z
msrc_cve-2025-65637 A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. 2025-12-02T00:00:00.000Z 2026-02-26T14:35:34.000Z
msrc_cve-2025-65082 Apache HTTP Server: CGI environment variable override 2025-12-02T00:00:00.000Z 2025-12-20T14:35:39.000Z
msrc_cve-2025-62408 c-ares has a Use After Free vulnerability when connection is cleaned up after error 2025-12-02T00:00:00.000Z 2026-01-08T14:43:29.000Z
msrc_cve-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509 2025-12-02T00:00:00.000Z 2026-04-15T01:39:31.000Z
msrc_cve-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 2025-12-02T00:00:00.000Z 2026-04-14T14:39:26.000Z
msrc_cve-2025-61594 URI Credential Leakage Bypass over CVE-2025-27221 2025-12-02T00:00:00.000Z 2026-02-18T02:50:06.000Z
msrc_cve-2025-59775 Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF 2025-12-02T00:00:00.000Z 2025-12-08T14:37:51.000Z
msrc_cve-2025-59529 simple protocol server ignores accepts unlimited connections and logs failures without limit 2025-12-02T00:00:00.000Z 2026-04-14T14:39:38.000Z
msrc_cve-2025-58098 Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... 2025-12-02T00:00:00.000Z 2025-12-20T14:35:52.000Z
msrc_cve-2025-55753 Apache HTTP Server: mod_md (ACME), unintended retry intervals 2025-12-02T00:00:00.000Z 2025-12-20T14:35:58.000Z
msrc_cve-2025-48637 In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2025-12-02T00:00:00.000Z 2026-02-21T03:39:48.000Z
msrc_cve-2025-40362 ceph: fix multifs mds auth caps issue 2025-12-02T00:00:00.000Z 2025-12-17T01:02:26.000Z
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
opensuse-su-2025:15101-1 python311-py7zr-0.20.8-2.6 on GA media 2025-05-17T00:00:00Z 2025-05-17T00:00:00Z
opensuse-su-2025:15100-1 python311-oauthlib-3.2.2-5.4 on GA media 2025-05-17T00:00:00Z 2025-05-17T00:00:00Z
opensuse-su-2025:15099-1 python311-nltk-3.9.1-2.4 on GA media 2025-05-17T00:00:00Z 2025-05-17T00:00:00Z
opensuse-su-2025:15098-1 python311-mechanize-0.4.10-1.4 on GA media 2025-05-17T00:00:00Z 2025-05-17T00:00:00Z
opensuse-su-2025:15097-1 python311-loguru-0.7.2-2.5 on GA media 2025-05-17T00:00:00Z 2025-05-17T00:00:00Z
opensuse-su-2025:15096-1 python311-jwcrypto-1.5.6-2.5 on GA media 2025-05-17T00:00:00Z 2025-05-17T00:00:00Z
opensuse-su-2025:15095-1 python311-httptools-0.6.1-1.9 on GA media 2025-05-17T00:00:00Z 2025-05-17T00:00:00Z
opensuse-su-2025:15094-1 python311-cramjam-2.9.1-1.3 on GA media 2025-05-17T00:00:00Z 2025-05-17T00:00:00Z
opensuse-su-2025:15093-1 ucode-intel-20250512-1.1 on GA media 2025-05-15T00:00:00Z 2025-05-15T00:00:00Z
opensuse-su-2025:15092-1 pnpm-10.11.0-1.1 on GA media 2025-05-15T00:00:00Z 2025-05-15T00:00:00Z
opensuse-su-2025:15091-1 openssh-10.0p2-2.1 on GA media 2025-05-15T00:00:00Z 2025-05-15T00:00:00Z
opensuse-su-2025:15090-1 libvmtools-devel-12.5.2-1.1 on GA media 2025-05-15T00:00:00Z 2025-05-15T00:00:00Z
opensuse-su-2025:15089-1 iputils-20240905-3.1 on GA media 2025-05-15T00:00:00Z 2025-05-15T00:00:00Z
opensuse-su-2025:15088-1 nbdkit-1.42.3-1.1 on GA media 2025-05-14T00:00:00Z 2025-05-14T00:00:00Z
opensuse-su-2025:15087-1 python311-Django-5.2.1-1.1 on GA media 2025-05-13T00:00:00Z 2025-05-13T00:00:00Z
opensuse-su-2025:15086-1 kernel-devel-6.14.6-1.1 on GA media 2025-05-13T00:00:00Z 2025-05-13T00:00:00Z
opensuse-su-2025:15085-1 grub2-2.12-50.1 on GA media 2025-05-13T00:00:00Z 2025-05-13T00:00:00Z
opensuse-su-2025:15084-1 cpp-httplib-devel-0.20.1-1.1 on GA media 2025-05-13T00:00:00Z 2025-05-13T00:00:00Z
opensuse-su-2025:0153-1 Security update for git-lfs 2025-05-12T16:01:51Z 2025-05-12T16:01:51Z
opensuse-su-2025:0152-1 Security update for kanidm 2025-05-12T16:01:48Z 2025-05-12T16:01:48Z
opensuse-su-2025:15083-1 rke2-1.32-1.32.4+rke2r1-1.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:15082-1 python311-Django4-4.2.21-1.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:15081-1 libxmp-devel-4.6.3-1.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:15080-1 java-21-openj9-21.0.7.0-1.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:15079-1 java-1_8_0-openj9-1.8.0.452-1.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:15078-1 java-17-openj9-17.0.15.0-1.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:15077-1 java-11-openj9-11.0.27.0-1.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:15076-1 dirmngr-2.5.6-1.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:15075-1 golang-github-prometheus-node_exporter-1.9.1-3.1 on GA media 2025-05-12T00:00:00Z 2025-05-12T00:00:00Z
opensuse-su-2025:0148-1 Security update for chromium 2025-05-09T08:46:23Z 2025-05-09T08:46:23Z
ID Description Published Updated
ID Description Published Updated
rhsa-2026:0491 Red Hat Security Advisory: postgresql security update 2026-01-13T12:42:28+00:00 2026-04-13T20:14:07+00:00
rhsa-2026:0489 Red Hat Security Advisory: kernel security update 2026-01-13T09:50:17+00:00 2026-03-18T03:11:16+00:00
rhsa-2026:0483 Red Hat Security Advisory: wireshark security update 2026-01-12T21:46:44+00:00 2026-03-18T03:15:02+00:00
rhsa-2026:0481 Red Hat Security Advisory: binutils security update 2026-01-12T21:33:43+00:00 2026-04-13T20:00:38+00:00
rhsa-2026:0482 Red Hat Security Advisory: binutils security update 2026-01-12T21:33:28+00:00 2026-04-13T20:00:38+00:00
rhsa-2026:0480 Red Hat Security Advisory: binutils security update 2026-01-12T21:21:24+00:00 2026-04-13T20:00:37+00:00
rhsa-2026:0479 Red Hat Security Advisory: binutils security update 2026-01-12T21:17:19+00:00 2026-04-13T20:00:37+00:00
rhsa-2026:0477 Red Hat Security Advisory: skopeo security update 2026-01-12T20:03:23+00:00 2026-04-14T07:57:47+00:00
rhsa-2026:0472 Red Hat Security Advisory: git-lfs security update 2026-01-12T18:02:35+00:00 2026-03-18T03:15:29+00:00
rhsa-2026:0470 Red Hat Security Advisory: podman security update 2026-01-12T17:35:15+00:00 2026-04-02T16:47:03+00:00
rhsa-2026:0468 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.1.SP1) 2026-01-12T15:22:38+00:00 2026-03-18T03:15:55+00:00
rhsa-2026:0465 Red Hat Security Advisory: git-lfs security update 2026-01-12T15:07:30+00:00 2026-03-18T03:15:31+00:00
rhsa-2026:0467 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.4.SP1) 2026-01-12T15:04:27+00:00 2026-03-18T03:15:55+00:00
rhsa-2026:0464 Red Hat Security Advisory: cups security update 2026-01-12T14:47:50+00:00 2026-04-13T20:14:04+00:00
rhsa-2026:0457 Red Hat Security Advisory: kernel security update 2026-01-12T13:52:25+00:00 2026-03-18T03:11:13+00:00
rhsa-2026:0458 Red Hat Security Advisory: libpq security update 2026-01-12T13:32:15+00:00 2026-04-13T20:14:04+00:00
rhsa-2026:0459 Red Hat Security Advisory: git-lfs security update 2026-01-12T13:15:55+00:00 2026-03-18T03:15:30+00:00
rhsa-2026:0460 Red Hat Security Advisory: git-lfs security update 2026-01-12T13:07:00+00:00 2026-03-18T03:15:30+00:00
rhsa-2026:0455 Red Hat Security Advisory: postgresql security update 2026-01-12T11:04:04+00:00 2026-04-13T20:14:04+00:00
rhsa-2026:0456 Red Hat Security Advisory: postgresql16 security update 2026-01-12T11:02:06+00:00 2026-04-13T20:14:04+00:00
rhsa-2026:0454 Red Hat Security Advisory: wireshark security update 2026-01-12T10:50:54+00:00 2026-03-18T03:15:04+00:00
rhsa-2026:0453 Red Hat Security Advisory: kernel security update 2026-01-12T09:30:19+00:00 2026-04-08T13:32:30+00:00
rhsa-2026:0452 Red Hat Security Advisory: wireshark security update 2026-01-12T09:13:04+00:00 2026-03-18T03:15:04+00:00
rhsa-2026:0445 Red Hat Security Advisory: kernel security update 2026-01-12T05:08:44+00:00 2026-04-08T13:32:45+00:00
rhsa-2026:0431 Red Hat Security Advisory: libssh security update 2026-01-12T03:55:43+00:00 2026-03-20T20:06:03+00:00
rhsa-2026:0437 Red Hat Security Advisory: buildah security update 2026-01-12T03:51:03+00:00 2026-04-02T16:47:03+00:00
rhsa-2026:0432 Red Hat Security Advisory: wireshark security update 2026-01-12T03:46:43+00:00 2026-03-18T03:15:05+00:00
rhsa-2026:0425 Red Hat Security Advisory: runc security update 2026-01-12T03:43:04+00:00 2026-04-14T02:03:15+00:00
rhsa-2026:0444 Red Hat Security Advisory: kernel security update 2026-01-12T03:40:43+00:00 2026-04-08T13:32:45+00:00
rhsa-2026:0426 Red Hat Security Advisory: buildah security update 2026-01-12T03:32:03+00:00 2026-04-14T07:57:47+00:00
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
suse-su-2026:0234-1 Security update for libpng16 2026-01-22T12:24:45Z 2026-01-22T12:24:45Z
suse-su-2026:0233-1 Security update for python-virtualenv 2026-01-22T12:24:32Z 2026-01-22T12:24:32Z
suse-su-2026:0232-1 Security update for pgadmin4 2026-01-22T12:24:10Z 2026-01-22T12:24:10Z
suse-su-2026:0231-1 Security update for exiv2-0_26 2026-01-22T12:22:53Z 2026-01-22T12:22:53Z
suse-su-2026:0230-1 Security update for util-linux 2026-01-22T12:22:40Z 2026-01-22T12:22:40Z
suse-su-2026:0229-1 Security update for ffmpeg-4 2026-01-22T12:22:22Z 2026-01-22T12:22:22Z
suse-su-2026:0228-1 Security update for net-snmp 2026-01-22T12:21:52Z 2026-01-22T12:21:52Z
suse-su-2026:0227-1 Security update for net-snmp 2026-01-22T12:21:35Z 2026-01-22T12:21:35Z
suse-su-2026:0226-1 Security update for python-marshmallow 2026-01-22T12:20:21Z 2026-01-22T12:20:21Z
suse-su-2026:0225-1 Security update for net-snmp 2026-01-22T12:19:54Z 2026-01-22T12:19:54Z
suse-su-2026:0224-1 Security update for libtasn1 2026-01-22T12:18:33Z 2026-01-22T12:18:33Z
suse-su-2026:0223-1 Security update for libsodium 2026-01-22T12:18:02Z 2026-01-22T12:18:02Z
suse-su-2026:0222-1 Security update for python-tornado 2026-01-22T12:16:49Z 2026-01-22T12:16:49Z
suse-su-2026:0221-1 Security update for curl 2026-01-22T12:15:38Z 2026-01-22T12:15:38Z
suse-su-2026:0220-1 Security update for python-filelock 2026-01-22T12:15:26Z 2026-01-22T12:15:26Z
suse-su-2026:0219-1 Security update for go1.24 2026-01-22T12:13:47Z 2026-01-22T12:13:47Z
suse-su-2026:0218-1 Security update for go1.25 2026-01-22T12:12:47Z 2026-01-22T12:12:47Z
suse-su-2026:0217-1 Security update for keylime 2026-01-22T12:11:40Z 2026-01-22T12:11:40Z
suse-su-2026:0216-1 Security update for kernel-firmware 2026-01-22T12:11:01Z 2026-01-22T12:11:01Z
suse-su-2026:0215-1 Security update for gpg2 2026-01-22T12:10:17Z 2026-01-22T12:10:17Z
suse-su-2026:0214-1 Security update for gpg2 2026-01-22T12:09:32Z 2026-01-22T12:09:32Z
suse-su-2026:0213-1 Security update for ovmf 2026-01-22T12:08:49Z 2026-01-22T12:08:49Z
suse-su-2026:0212-1 Security update for ovmf 2026-01-22T12:08:32Z 2026-01-22T12:08:32Z
suse-su-2026:0211-1 Security update for libsoup 2026-01-22T12:08:07Z 2026-01-22T12:08:07Z
suse-su-2026:20121-1 Security update for libheif 2026-01-22T10:59:15Z 2026-01-22T10:59:15Z
suse-su-2026:20153-1 Security update for libpcap 2026-01-22T10:14:02Z 2026-01-22T10:14:02Z
suse-su-2026:20120-1 Security update for libpcap 2026-01-22T10:14:02Z 2026-01-22T10:14:02Z
suse-su-2026:0210-1 Security update for python3 2026-01-22T09:07:42Z 2026-01-22T09:07:42Z
suse-su-2026:0209-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) 2026-01-21T18:03:57Z 2026-01-21T18:03:57Z
suse-su-2026:0206-1 Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5) 2026-01-21T15:38:11Z 2026-01-21T15:38:11Z
ID Description Published Updated
alsa-2024:6969 Moderate: container-tools:rhel8 security update 2024-09-24T00:00:00Z 2024-09-24T14:49:47Z
alsa-2024:6964 Moderate: virt:rhel and virt-devel:rhel security update 2024-09-24T00:00:00Z 2024-09-24T14:46:49Z
alsa-2024:6963 Moderate: gtk3 security update 2024-09-24T00:00:00Z 2024-09-24T11:32:39Z
alsa-2024:6962 Moderate: python3.11 security update 2024-09-24T00:00:00Z 2024-09-24T09:21:42Z
alsa-2024:6961 Moderate: python3.12 security update 2024-09-24T00:00:00Z 2024-09-24T09:28:35Z
alsa-2024:6947 Important: grafana security update 2024-09-23T00:00:00Z 2024-09-24T09:31:38Z
alsa-2024:6946 Important: grafana-pcp security update 2024-09-23T00:00:00Z 2024-09-24T09:33:36Z
alsa-2024:6913 Important: golang security update 2024-09-23T00:00:00Z 2024-09-24T09:37:21Z
alsa-2024:6908 Important: go-toolset:rhel8 security update 2024-09-23T00:00:00Z 2024-09-24T09:39:43Z
alsa-2024:6848 Important: pcp security update 2024-09-19T00:00:00Z 2024-09-20T14:08:36Z
alsa-2024:6837 Important: pcp security update 2024-09-19T00:00:00Z 2024-09-20T12:01:19Z
alsa-2024:6785 Moderate: ruby:3.3 security update 2024-09-18T00:00:00Z 2024-09-19T16:36:01Z
alsa-2024:6784 Moderate: ruby:3.3 security update 2024-09-18T00:00:00Z 2024-09-19T16:41:12Z
alsa-2024:6783 Moderate: openssl security update 2024-09-18T00:00:00Z 2024-09-19T07:29:22Z
alsa-2024:6757 Moderate: libnbd security update 2024-09-18T00:00:00Z 2024-09-20T13:13:38Z
alsa-2024:6754 Moderate: expat security update 2024-09-18T00:00:00Z 2024-09-19T07:30:58Z
alsa-2024:6726 Important: fence-agents security update 2024-09-17T00:00:00Z 2024-09-18T14:50:53Z
alsa-2024:6684 Important: thunderbird security update 2024-09-16T00:00:00Z 2024-09-19T12:52:12Z
alsa-2024:6683 Important: thunderbird security update 2024-09-16T00:00:00Z 2024-09-20T18:06:46Z
alsa-2024:6682 Important: firefox security update 2024-09-16T00:00:00Z 2024-09-19T12:53:41Z
alsa-2024:6681 Important: firefox security update 2024-09-16T00:00:00Z 2024-09-20T18:08:29Z
alsa-2024:6670 Moderate: pcs security update 2024-09-16T00:00:00Z 2024-09-17T09:59:44Z
alsa-2024:6569 Moderate: 389-ds:1.4 security update 2024-09-11T00:00:00Z 2024-09-11T09:50:16Z
alsa-2024:6567 Moderate: kernel security update 2024-09-11T00:00:00Z 2024-11-03T22:31:56Z
alsa-2024:6529 Moderate: dovecot security update 2024-09-10T00:00:00Z 2024-09-11T09:48:12Z
alsa-2024:6510 Moderate: emacs security update 2024-09-09T00:00:00Z 2024-09-10T06:22:14Z
alsa-2024:6464 Moderate: glib2 security update 2024-09-09T00:00:00Z 2024-09-10T06:20:35Z
alsa-2024:6422 Important: bubblewrap and flatpak security update 2024-09-05T00:00:00Z 2024-09-06T07:42:22Z
alsa-2024:6356 Important: bubblewrap and flatpak security update 2024-09-04T00:00:00Z 2024-09-05T06:55:37Z
alsa-2024:6311 Moderate: resource-agents security update 2024-09-04T00:00:00Z 2024-09-05T06:29:03Z
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
osv-2022-571 Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset 2022-07-11T00:01:33.842818Z 2022-07-11T00:01:33.843061Z
osv-2022-564 Heap-buffer-overflow in sc_pkcs15_allocate_object_content 2022-07-10T00:01:59.838881Z 2022-07-10T00:01:59.839151Z
osv-2022-563 Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx 2022-07-10T00:01:51.341319Z 2022-07-10T00:01:51.341599Z
osv-2022-562 UNKNOWN WRITE in udiv 2022-07-10T00:01:06.487981Z 2022-07-10T00:01:06.488225Z
osv-2022-558 Segv on unknown address in onig_free_body 2022-07-10T00:00:10.411359Z 2023-02-24T01:43:22.078175Z
osv-2022-557 Heap-buffer-overflow in emit_goto 2022-07-10T00:00:08.803034Z 2022-07-10T00:00:08.803287Z
osv-2022-556 UNKNOWN READ in mrb_bint_cmp 2022-07-09T00:01:42.436937Z 2022-07-09T00:01:42.437163Z
osv-2022-551 Heap-buffer-overflow in fixup_pcap_pkthdr 2022-07-09T00:00:45.162171Z 2022-07-09T00:00:45.162417Z
osv-2022-550 Heap-use-after-free in mrb_bint_new_str 2022-07-09T00:00:43.820059Z 2022-07-09T00:00:43.820285Z
osv-2022-549 Invalid-free in round_trip_fuzzer.c 2022-07-09T00:00:25.413389Z 2022-07-09T00:00:25.413619Z
osv-2022-543 Index-out-of-bounds in decode_coefs 2022-07-08T00:00:44.687010Z 2022-07-08T00:00:44.687286Z
osv-2022-538 Memcpy-param-overlap in FT_Stream_TryRead 2022-07-06T00:02:00.992133Z 2022-07-06T00:02:00.992436Z
osv-2022-536 Segv on unknown address in gs_heap_free_object 2022-07-06T00:00:18.033578Z 2022-07-06T00:00:18.033911Z
osv-2022-534 Heap-buffer-overflow in json_parse 2022-07-06T00:00:06.437541Z 2022-07-06T00:00:06.437773Z
osv-2022-533 Check failed in CheckUnwind 2022-07-05T00:01:52.897160Z 2022-07-05T00:01:52.897506Z
osv-2022-531 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor 2022-07-05T00:00:15.936407Z 2023-04-20T22:42:42.108104Z
osv-2022-530 Heap-buffer-overflow in string_decoder_getc_utf_8 2022-07-03T00:00:53.116791Z 2022-07-03T00:00:53.117024Z
osv-2022-529 Heap-buffer-overflow in init_mt 2022-07-03T00:00:48.434255Z 2022-07-03T00:00:48.434484Z
osv-2022-525 Heap-buffer-overflow in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators 2022-07-01T00:01:50.518518Z 2023-02-24T01:57:25.025789Z
osv-2022-524 Heap-buffer-overflow in Ins_JROF 2022-07-01T00:01:43.353257Z 2026-03-18T14:22:41.236746Z
osv-2022-523 Segv on unknown address in chunk_free_object 2022-07-01T00:00:44.956471Z 2022-07-01T00:00:44.956710Z
osv-2022-522 Heap-buffer-overflow in Interp 2022-07-01T00:00:28.835558Z 2022-07-01T00:00:28.835798Z
osv-2022-520 Stack-buffer-overflow in sc_asn1_read_tag 2022-06-29T00:01:56.068398Z 2022-06-29T00:01:56.068707Z
osv-2022-519 Stack-buffer-overflow in LookupThousands 2022-06-29T00:00:24.107785Z 2026-02-08T14:10:55.777894Z
osv-2022-515 Uncaught exception in com.github.javaparser.CommentsInserter.insertComments 2022-06-27T00:01:52.994345Z 2022-06-27T00:01:52.994584Z
osv-2022-514 Heap-use-after-free in AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_for 2022-06-27T00:01:40.437362Z 2022-06-27T00:01:40.437595Z
osv-2022-511 UNKNOWN READ in zfp_getcell 2022-06-26T00:00:31.850695Z 2023-10-04T14:10:02.526571Z
osv-2022-510 Heap-buffer-overflow in read_blob_signed 2022-06-26T00:00:24.389136Z 2022-06-26T00:00:24.389364Z
osv-2022-508 Heap-buffer-overflow in coap_split_uri_sub 2022-06-26T00:00:06.153307Z 2023-02-24T01:52:09.275484Z
osv-2022-507 Heap-use-after-free in psi_device_ref_finalize 2022-06-25T00:01:55.696626Z 2022-06-25T00:01:55.696857Z
ID Description Published Updated
ID Description Published Updated
bit-joomla-2021-23130 [20210304] - Core - XSS within the feed parser library 2025-04-03T14:12:34.298Z 2025-05-20T10:02:07.006Z
bit-joomla-2021-23129 [20210303] - Core - XSS within alert messages showed to users 2025-04-03T14:12:29.004Z 2025-05-20T10:02:07.006Z
bit-joomla-2021-23128 [20210302] - Core - Potential Insecure FOFEncryptRandval 2025-04-03T14:12:23.598Z 2025-05-20T10:02:07.006Z
bit-joomla-2021-23127 [20210301] - Core - Insecure randomness within 2FA secret generation 2025-04-03T14:12:18.004Z 2025-05-20T10:02:07.006Z
bit-joomla-2021-23126 [20210301] - Core - Insecure randomness within 2FA secret generation 2025-04-03T14:12:11.991Z 2025-05-20T10:02:07.006Z
bit-joomla-2021-23125 [20210103] - Core - XSS in com_tags image parameters 2025-04-03T14:12:05.496Z 2025-05-20T10:02:07.006Z
bit-joomla-2021-23124 [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute 2025-04-03T14:11:58.394Z 2025-05-20T10:02:07.006Z
bit-joomla-2021-23123 [20210101] - Core - com_modules exposes module names 2025-04-03T14:11:51.992Z 2025-05-20T10:02:07.006Z
bit-joomla-2020-8421 2025-04-03T14:11:45.995Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-8420 2025-04-03T14:11:39.892Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-8419 2025-04-03T14:11:34.094Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-35616 [20201107] - Core - Write ACL violation in multiple core views 2025-04-03T14:11:28.887Z 2025-05-20T10:02:07.006Z
bit-joomla-2020-35615 [20201106] - Core - CSRF in com_privacy emailexport feature 2025-04-03T14:11:23.403Z 2025-05-20T10:02:07.006Z
bit-joomla-2020-35614 [20201105] - Core - User Enumeration in backend login 2025-04-03T14:11:17.990Z 2025-05-20T10:02:07.006Z
bit-joomla-2020-35613 [20201104] - Core - SQL injection in com_users list view 2025-04-03T14:11:12.595Z 2025-05-20T10:02:07.006Z
bit-joomla-2020-35612 [20201103] - Core - Path traversal in mod_random_image 2025-04-03T14:11:07.391Z 2025-05-20T10:02:07.006Z
bit-joomla-2020-35611 [20201102] - Core - Disclosure of secrets in Global Configuration page 2025-04-03T14:11:02.105Z 2025-05-20T10:02:07.006Z
bit-joomla-2020-35610 [20201101] - Core - com_finder ignores access levels on autosuggest 2025-04-03T14:10:57.605Z 2025-05-20T10:02:07.006Z
bit-joomla-2020-24599 2025-04-03T14:10:52.691Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-24598 2025-04-03T14:10:47.806Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-15700 2025-04-03T14:10:42.396Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-15699 2025-04-03T14:10:37.487Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-15698 2025-04-03T14:10:33.102Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-15697 2025-04-03T14:10:28.588Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-15696 2025-04-03T14:10:24.507Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-15695 2025-04-03T14:10:20.603Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-13763 2025-04-03T14:10:16.806Z 2025-11-06T13:25:46.476Z
bit-joomla-2020-13762 2025-04-03T14:10:12.607Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-13761 2025-04-03T14:10:08.600Z 2025-11-06T13:25:46.476Z
bit-joomla-2020-13760 2025-04-03T14:10:04.787Z 2025-11-06T13:25:46.476Z
ID Description Published Updated
ID Description Published Updated
ID Description Updated
ID Description Published Updated
ID Description Published Updated
certfr-2025-avi-0079 Multiples vulnérabilités dans Google Chrome 2025-01-29T00:00:00.000000 2025-01-29T00:00:00.000000
certfr-2025-avi-0078 Vulnérabilité dans VMware Avi Load Balancer 2025-01-29T00:00:00.000000 2025-01-29T00:00:00.000000
certfr-2025-avi-0077 Multiples vulnérabilités dans HPE Aruba Networking Fabric Composer 2025-01-29T00:00:00.000000 2025-01-29T00:00:00.000000
certfr-2025-avi-0076 Vulnérabilité dans NetApp ONTAP 2025-01-28T00:00:00.000000 2025-01-28T00:00:00.000000
certfr-2025-avi-0075 Multiples vulnérabilités dans les produits Apple 2025-01-28T00:00:00.000000 2025-01-28T00:00:00.000000
certfr-2025-avi-0074 Vulnérabilité dans Synacor Zimbra Collaboration 2025-01-28T00:00:00.000000 2025-04-28T00:00:00.000000
certfr-2025-avi-0073 Multiples vulnérabilités dans Microsoft Edge 2025-01-27T00:00:00.000000 2025-01-28T00:00:00.000000
certfr-2025-avi-0072 Multiples vulnérabilités dans Juniper Secure Analytics 2025-01-27T00:00:00.000000 2025-01-27T00:00:00.000000
certfr-2025-avi-0071 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-01-24T00:00:00.000000 2025-01-24T00:00:00.000000
certfr-2025-avi-0070 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-01-24T00:00:00.000000 2025-01-24T00:00:00.000000
certfr-2025-avi-0069 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-01-24T00:00:00.000000 2025-01-24T00:00:00.000000
certfr-2025-avi-0068 Vulnérabilité dans ClamAV 2025-01-24T00:00:00.000000 2025-01-24T00:00:00.000000
certfr-2025-avi-0067 Multiples vulnérabilités dans Qnap HBS 3 Hybrid Backup Sync 2025-01-24T00:00:00.000000 2025-01-24T00:00:00.000000
certfr-2025-avi-0066 Vulnérabilité dans Sonicwall Secure Mobile Access 2025-01-23T00:00:00.000000 2025-01-23T00:00:00.000000
certfr-2025-avi-0065 Multiples vulnérabilités dans les produits Mitel 2025-01-23T00:00:00.000000 2025-01-23T00:00:00.000000
certfr-2025-avi-0064 Multiples vulnérabilités dans les produits Cisco 2025-01-23T00:00:00.000000 2025-01-23T00:00:00.000000
certfr-2025-avi-0063 Multiples vulnérabilités dans GitLab 2025-01-23T00:00:00.000000 2025-02-13T00:00:00.000000
certfr-2025-avi-0062 Multiples vulnérabilités dans les produits Elastic 2025-01-23T00:00:00.000000 2025-01-23T00:00:00.000000
certfr-2025-avi-0061 Multiples vulnérabilités dans Google Chrome 2025-01-23T00:00:00.000000 2025-01-23T00:00:00.000000
certfr-2025-avi-0060 Multiples vulnérabilités dans Node.js 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0059 Multiples vulnérabilités dans les produits Atlassian 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0058 Multiples vulnérabilités dans Oracle Weblogic 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0057 Multiples vulnérabilités dans Oracle Virtualization 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0056 Vulnérabilité dans Oracle Systems 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0055 Multiples vulnérabilités dans Oracle PeopleSoft 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0054 Multiples vulnérabilités dans Oracle MySQL 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0053 Multiples vulnérabilités dans Oracle Java SE 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0052 Multiples vulnérabilités dans Oracle Database Server 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0051 Multiples vulnérabilités dans phpMyAdmin 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0050 Multiples vulnérabilités dans les produits Elastic 2025-01-21T00:00:00.000000 2025-01-21T00:00:00.000000
ID Description Published Updated
jvndb-2017-000093 WordPress plugin "MaxButtons" vulnerable to cross-site scripting 2017-05-16T13:59+09:00 2018-01-17T12:28+09:00
jvndb-2017-000092 WordPress plugin "WP Booking System" vulnerable to cross-site scripting 2017-05-16T13:58+09:00 2018-01-17T11:46+09:00
jvndb-2017-000080 PrimeDrive Desktop Application Installer may insecurely load executable files 2017-05-12T13:36+09:00 2017-11-27T16:55+09:00
jvndb-2017-000079 The installer of SOY CMS vulnerable to cross-site scripting 2017-05-11T13:37+09:00 2017-11-27T17:23+09:00
jvndb-2017-000078 SOY CMS vulnerable to directory traversal 2017-05-11T13:36+09:00 2017-11-27T17:23+09:00
jvndb-2017-000083 The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries 2017-05-09T13:52+09:00 2017-11-27T17:23+09:00
jvndb-2017-000082 Nessus vulnerable to cross-site scripting 2017-05-09T13:52+09:00 2017-11-27T16:55+09:00
jvndb-2017-000077 Installer of Vivaldi for Windows may insecurely load executable files 2017-04-25T13:36+09:00 2017-06-06T15:04+09:00
jvndb-2017-000072 WNC01WH vulnerable to OS command injection 2017-04-21T13:44+09:00 2017-06-01T13:53+09:00
jvndb-2017-000076 Multiple JustSystems products including Hanako may insecurely load Dynamic Link Libraries 2017-04-20T15:11+09:00 2017-06-01T13:40+09:00
jvndb-2017-000074 WordPress plugin "Booking Calendar" vulnerable to cross-site scripting 2017-04-20T15:11+09:00 2017-06-01T13:53+09:00
jvndb-2017-000073 WordPress plugin "Booking Calendar" vulnerable to directory traversal 2017-04-20T15:11+09:00 2017-06-01T13:53+09:00
jvndb-2017-000075 Hoozin Viewer vulnerable to buffer overflow 2017-04-20T14:48+09:00 2017-06-01T13:40+09:00
jvndb-2017-000071 SEIL Series routers vulnerable to denial-of-service (DoS) 2017-04-19T14:43+09:00 2017-06-06T14:50+09:00
jvndb-2017-000055 NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control 2017-04-18T13:42+09:00 2017-06-01T15:24+09:00
jvndb-2017-000069 Multiple installers of Toshiba memory card related software may insecurely load Dynamic Link Libraries 2017-04-14T14:09+09:00 2017-12-21T17:50+09:00
jvndb-2017-000070 WN-AC1167GR vulnerable to cross-site scripting 2017-04-14T13:55+09:00 2017-06-01T13:53+09:00
jvndb-2017-000068 WordPress plugin "WP Statistics" vulnerable to cross-site scripting 2017-04-13T13:49+09:00 2017-06-01T13:53+09:00
jvndb-2017-000067 WordPress plugin "WP Statistics" vulnerable to cross-site scripting 2017-04-13T13:49+09:00 2017-06-01T15:23+09:00
jvndb-2017-000066 The API in Cybozu Office vulnerable to denial-of-service (DoS) 2017-04-11T16:05+09:00 2017-04-11T16:05+09:00
jvndb-2017-000065 Cybozu Office fails to restrict access permission in the templates delete function in "customapp" 2017-04-11T16:05+09:00 2017-06-01T12:18+09:00
jvndb-2017-000064 Cybozu Office fails to restrict access permission in the file export function in "customapp" 2017-04-11T16:05+09:00 2017-06-01T11:30+09:00
jvndb-2017-000063 The design setting screen in Cybozu Office vulnerable to cross-site scripting 2017-04-11T16:05+09:00 2017-06-01T11:30+09:00
jvndb-2017-000054 ASSETBASE vulnerable to cross-site scripting 2017-04-11T13:37+09:00 2017-06-01T17:16+09:00
jvndb-2017-000057 CS-Cart Japanese Edition vulnerable to cross-site request forgery 2017-04-10T18:13+09:00 2018-01-24T13:49+09:00
jvndb-2017-000056 CS-Cart Japanese Edition fails to restrict access permissions 2017-04-10T18:13+09:00 2017-06-01T17:39+09:00
jvndb-2017-000062 WordPress plugin "WP Statistics" vulnerable to cross-site scripting 2017-04-10T13:47+09:00 2017-06-01T15:24+09:00
jvndb-2017-000061 CS-Cart Japanese Edition fails to restrict access permissions 2017-04-10T13:47+09:00 2017-06-06T11:52+09:00
jvndb-2017-000060 WN-G300R3 vulnerable to stack based buffer overflow 2017-04-10T13:40+09:00 2017-06-01T13:53+09:00
jvndb-2017-000059 WN-G300R3 vulnerable to OS command injection 2017-04-10T13:36+09:00 2017-06-01T15:24+09:00
ID Description Published Updated
cnvd-2026-00681 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00681） 2025-12-15 2026-01-07
cnvd-2026-00680 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00680） 2025-12-15 2026-01-07
cnvd-2026-00679 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00679） 2025-12-15 2026-01-07
cnvd-2026-00678 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-00678） 2025-12-15 2026-01-07
cnvd-2026-00135 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013541） 2025-12-15 2026-01-05
cnvd-2026-00134 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013442） 2025-12-15 2026-01-05
cnvd-2026-00133 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013343） 2025-12-15 2026-01-05
cnvd-2026-00132 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013244） 2025-12-15 2026-01-05
cnvd-2026-00131 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013145） 2025-12-15 2026-01-05
cnvd-2026-00130 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0013046） 2025-12-15 2026-01-05
cnvd-2026-00129 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0012948） 2025-12-15 2026-01-05
cnvd-2026-00128 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0012849） 2025-12-15 2026-01-05
cnvd-2026-00127 Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0012750） 2025-12-15 2026-01-05
cnvd-2026-00126 Adobe Experience Manager跨站脚本漏洞 2025-12-15 2026-01-05
cnvd-2026-00046 Siemens SIMATIC CN 4100访问控制错误漏洞 2025-12-15 2026-01-04
cnvd-2026-00021 Siemens SIMATIC CN 4100命令注入漏洞 2025-12-15 2026-01-04
cnvd-2026-00020 Siemens RUGGEDCOM ROX II注入漏洞（CNVD-2026-00020） 2025-12-15 2026-01-04
cnvd-2026-00019 Siemens RUGGEDCOM ROX II注入漏洞（CNVD-2026-00019） 2025-12-15 2026-01-04
cnvd-2026-00018 Siemens RUGGEDCOM ROX II注入漏洞（CNVD-2026-00018） 2025-12-15 2026-01-04
cnvd-2026-00017 Siemens RUGGEDCOM ROX II注入漏洞 2025-12-15 2026-01-04
cnvd-2026-00016 Siemens RUGGEDCOM ROX II命令注入漏洞（CNVD-2026-00016） 2025-12-15 2026-01-04
cnvd-2026-00015 Siemens RUGGEDCOM ROX II命令注入漏洞 2025-12-15 2026-01-04
cnvd-2026-00014 Siemens Gridscale X Prepay信息泄露漏洞 2025-12-15 2026-01-04
cnvd-2026-00013 Siemens Gridscale X Prepay安全绕过漏洞 2025-12-15 2026-01-04
cnvd-2025-30929 Adobe Experience Manager跨站脚本漏洞（CNVD-2025-30929） 2025-12-15 2025-12-18
cnvd-2025-30928 Adobe Experience Manager跨站脚本漏洞（CNVD-2025-30928） 2025-12-15 2025-12-18
cnvd-2025-30927 Adobe Experience Manager跨站脚本漏洞（CNVD-2025-30927） 2025-12-15 2025-12-18
cnvd-2025-30926 Adobe Experience Manager跨站脚本漏洞（CNVD-2025-30926） 2025-12-15 2025-12-18
cnvd-2025-30925 Adobe Experience Manager跨站脚本漏洞（CNVD-2025-30925） 2025-12-15 2025-12-18
cnvd-2025-30924 Adobe Experience Manager跨站脚本漏洞（CNVD-2025-30924） 2025-12-15 2025-12-18
ID Description Published Updated
bdu:2026-00088 Уязвимость инструмента для комплексного управления сетевыми устройствами Quest KACE Syste… 06.01.2026 06.01.2026
bdu:2026-00087 Уязвимость инструмента для комплексного управления сетевыми устройствами Quest KACE Syste… 06.01.2026 06.01.2026
bdu:2026-00086 Уязвимость инструмента для комплексного управления сетевыми устройствами Quest KACE Syste… 06.01.2026 06.01.2026
bdu:2026-00085 Уязвимость платформы для управления бизнесом ConnectWise PSA, связанная с раскрытием инфо… 06.01.2026 06.01.2026
bdu:2026-00084 Уязвимость компонента Manifest File Handler антивирусного программного обеспечения Comodo… 06.01.2026 06.01.2026
bdu:2026-00083 Уязвимость программных продуктов CODESYS, связанная с некорректно используемыми стандартн… 06.01.2026 06.01.2026
bdu:2026-00082 Уязвимость программных продуктов CODESYS, связанная с разыменованием нулевого указателя, … 06.01.2026 06.01.2026
bdu:2026-00081 Уязвимость программных продуктов CODESYS, связанная с неверным назначением разрешений для… 06.01.2026 06.01.2026
bdu:2026-00080 Уязвимость программного обеспечения для совместной работы в офисеYWOA (Yunwang OA), связа… 06.01.2026 06.01.2026
bdu:2026-00079 Уязвимость компонента Bootguard микропрограммного обеспечения UEFI-прошивок ноутбуокв Cle… 06.01.2026 06.01.2026
bdu:2026-00078 Уязвимость приложения для управления системами безопасности Check Point SmartConsole, свя… 06.01.2026 06.01.2026
bdu:2026-00077 Уязвимость компонента Invite Request Handler программного обеспечения для мониторинга раб… 06.01.2026 06.01.2026
bdu:2026-00076 Уязвимость микропрограммного обеспечения IP-камер, цифровых и сетевых видеорегистраторов … 06.01.2026 06.01.2026
bdu:2026-00075 Уязвимость программного обеспечения для интеграции данных PI Integrator for Business Anal… 06.01.2026 06.01.2026
bdu:2026-00074 Уязвимость программного обеспечения для интеграции данных PI Integrator for Business Anal… 06.01.2026 06.01.2026
bdu:2026-00073 Уязвимость микропрограммного обеспечения зарядных станций для электромобилей ABB Terra AC… 06.01.2026 06.01.2026
bdu:2026-00072 Уязвимость функции system.exec текстового редактора Lite XL Text Editor, позволяющая нару… 06.01.2026 06.01.2026
bdu:2026-00071 Уязвимость файла .lite_project.lua текстового редактора Lite XL Text Editor, позволяющая … 06.01.2026 06.01.2026
bdu:2026-00070 Уязвимость компонента webhook Git-сервера Soft Serve, позволяющая нарушителю осуществить … 06.01.2026 06.01.2026
bdu:2026-00069 Уязвимость пакета cockpit-hq системы управления серверами Cockpit, позволяющая нарушителю… 06.01.2026 06.01.2026
bdu:2026-00068 Уязвимость компонента .innerHtml веб-интерфейса на базе искуственного интеллекта Open Web… 06.01.2026 06.01.2026
bdu:2026-00067 Уязвимость клиентской библиотеки libmysqlclient программного инструмента логического резе… 06.01.2026 06.01.2026
bdu:2026-00066 Уязвимость пакета changed-files программного обеспечения для автоматизации процессов CI/C… 06.01.2026 06.01.2026
bdu:2026-00065 Уязвимость заголовка HTTP Proxy-Authorization прокси-сервера Vproxy, позволяющая нарушите… 06.01.2026 06.01.2026
bdu:2026-00064 Уязвимость компонента HTTP GET Request Handler файла /app/sae/design/desktop/flat програм… 06.01.2026 06.01.2026
bdu:2026-00063 Уязвимость микропрограммного обеспечения реле дифференциальной защиты трансформатора IDF … 06.01.2026 06.01.2026
bdu:2026-00062 Уязвимость функции searchByPage системы управления контентом Novel-Plus, позволяющая нару… 06.01.2026 06.01.2026
bdu:2026-00061 Уязвимость функции file upload программной платформы для проведения аудиозвонков и видеоз… 06.01.2026 06.01.2026
bdu:2026-00060 Уязвимость системы управления контентом Umbraco CMS, связанная с ошибками в обработке отн… 06.01.2026 06.01.2026
bdu:2026-00059 Уязвимость программного обеспечения для проведения онлайн-экзаменов Tecnick TCExam, связа… 06.01.2026 06.01.2026
ID Description Updated
var-201703-0328 The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0… 2026-03-05T19:47:49.200000Z
var-202602-0254 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. … 2026-03-05T19:41:57.216000Z
var-202602-0255 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. … 2026-03-05T19:41:57.198000Z
var-202602-0265 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. … 2026-03-05T19:41:57.178000Z
var-202602-0257 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. … 2026-03-05T19:41:57.160000Z
var-202602-0259 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. … 2026-03-05T19:41:57.137000Z
var-202602-0264 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. … 2026-03-05T19:41:57.110000Z
var-202602-2386 A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the func… 2026-03-04T23:40:33.738000Z
var-202404-2634 A vulnerability exists in the RTU500 that allows for authenticated and authorized users t… 2026-03-04T23:33:28.158000Z
var-202602-3258 A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, former… 2026-03-04T23:22:00.943000Z
var-200609-0995 OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key… 2026-03-04T22:55:31.796000Z
var-200609-1091 The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to c… 2026-03-04T22:53:00.856000Z
var-201310-0135 Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Ja… 2026-03-04T22:24:24.389000Z
var-200609-1402 The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will cra… 2026-03-04T22:19:47.127000Z
var-200609-0940 The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… 2026-03-04T22:12:13.581000Z
var-200609-1142 Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user… 2026-03-04T22:10:29.807000Z
var-201302-0253 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-04T21:37:43.607000Z
var-201605-0078 The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote a… 2026-03-04T21:37:03.354000Z
var-200609-0843 Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and … 2026-03-04T21:28:11.524000Z
var-200609-1214 The Installer application in Apple Mac OS X 10.4.8 and earlier, when used by a user with … 2026-03-04T21:06:18.339000Z
var-201210-0270 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-04T21:01:16.003000Z
var-200110-0207 The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.… 2026-03-04T20:59:34.450000Z
var-201704-1397 The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certa… 2026-03-04T20:56:51.196000Z
var-200609-1249 The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not prope… 2026-03-04T20:36:56.164000Z
var-200609-0932 The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Appl… 2026-03-04T20:36:41.536000Z
var-201302-0230 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-04T20:28:25.067000Z
var-201208-0108 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-04T20:22:49.459000Z
var-201408-0095 d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n… 2026-03-04T20:22:32.588000Z
var-200609-0998 OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… 2026-03-04T19:54:50.365000Z
var-200609-1351 The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely cre… 2026-03-04T19:45:07.272000Z
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated