Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-40348
7.7 (3.1)
Movary has Authenticated SSRF via Jellyfin Server URL … leepeuker
movary
2026-04-18T00:01:09.725Z 2026-04-20T16:11:32.779Z
CVE-2026-40347
5.3 (3.1)
Python-Multipart affected by Denial of Service via lar… Kludex
python-multipart
2026-04-17T23:56:50.777Z 2026-04-20T15:46:40.011Z
CVE-2026-40346
6.4 (4.0)
NocoBase has SSRF in Workflow HTTP Request and Custom … nocobase
@nocobase/plugin-workflow-request
2026-04-17T23:54:34.829Z 2026-04-20T14:56:12.829Z
CVE-2026-40581
8.1 (3.1)
ChurchCRM: Cross-Site Request Forgery (CSRF) in Select… ChurchCRM
CRM
2026-04-17T23:51:32.765Z 2026-04-20T16:15:58.183Z
CVE-2026-40337
5.1 (3.1)
Sentry kernel has incomplete ownership check for IRQ l… camelot-os
sentry-kernel
2026-04-17T23:51:09.866Z 2026-04-20T16:13:48.908Z
CVE-2026-40341
3.5 (3.1)
libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx gphoto
libgphoto2
2026-04-17T23:48:36.644Z 2026-04-20T16:14:19.107Z
CVE-2026-40340
6.1 (3.1)
libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack… gphoto
libgphoto2
2026-04-17T23:45:17.467Z 2026-04-20T13:36:05.149Z
CVE-2026-40339
5.2 (3.1)
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormF… gphoto
libgphoto2
2026-04-17T23:42:32.586Z 2026-04-20T14:56:21.979Z
CVE-2026-40338
5.2 (3.1)
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enume… gphoto
libgphoto2
2026-04-17T23:40:10.097Z 2026-04-20T16:16:08.585Z
CVE-2026-40485
5.3 (3.1)
ChurchCRM: Username Enumeration via Differential Respo… ChurchCRM
CRM
2026-04-17T23:29:35.884Z 2026-04-20T13:36:05.319Z
CVE-2026-40336
2.4 (3.1)
libgphoto2 has memory leak in ptp_unpack_Sony_DPD() se… gphoto
libgphoto2
2026-04-17T23:27:42.868Z 2026-04-20T16:14:53.071Z
CVE-2026-2262
7.5 (3.1)
Easy Appointments <= 3.12.21 - Unauthenticated Sensiti… easyappointments
Easy Appointments
2026-04-17T23:26:48.863Z 2026-04-20T13:51:28.513Z
CVE-2026-40484
9.1 (3.1)
ChurchCRM: Authenticated Remote Code Execution via Unr… ChurchCRM
CRM
2026-04-17T23:25:06.319Z 2026-04-20T14:56:29.684Z
CVE-2026-40483
5.4 (3.1)
ChurchCRM: Stored XSS in PledgeEditor.php via Donation… ChurchCRM
CRM
2026-04-17T23:20:44.900Z 2026-04-20T16:16:17.841Z
CVE-2026-40335
5.2 (3.1)
libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/IN… gphoto
libgphoto2
2026-04-17T23:19:16.935Z 2026-04-20T13:36:05.542Z
CVE-2026-40334
3.5 (3.1)
libgphoto2 missing null termination in ptp_unpack_Cano… gphoto
libgphoto2
2026-04-17T23:16:38.751Z 2026-04-20T13:36:05.703Z
CVE-2026-40582
9.1 (4.0)
ChurchCRM: Authentication Bypass in `/api/public/user/… ChurchCRM
CRM
2026-04-17T23:16:13.862Z 2026-04-20T14:56:36.921Z
CVE-2026-40333
6.1 (3.1)
libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat(… gphoto
libgphoto2
2026-04-17T23:11:11.073Z 2026-04-20T14:56:44.091Z
CVE-2026-40480
7.1 (4.0)
ChurchCRM has Missing Object-Level Authorization / IDO… ChurchCRM
CRM
2026-04-17T23:07:30.126Z 2026-04-20T16:16:00.433Z
CVE-2026-40324
9.1 (3.1)
Hot Chocolate's Utf8GraphQLParser has Stack Overflow v… ChilliCream
graphql-platform
2026-04-17T23:05:26.217Z 2026-04-20T16:16:25.151Z
CVE-2026-40482
7.1 (4.0)
ChurchCRM has Authenticated SQL Injection in `/api/fam… ChurchCRM
CRM
2026-04-17T22:58:48.528Z 2026-04-20T16:16:32.247Z
CVE-2026-40323
8.9 (4.0)
SP1 V6 Recursion Circuit Row-Count Binding Gap succinctlabs
sp1
2026-04-17T22:58:42.580Z 2026-04-20T16:16:41.143Z
CVE-2026-40481
8.2 (4.0)
monetr: Unauthenticated Stripe webhook reads attacker-… monetr
monetr
2026-04-17T22:54:57.545Z 2026-04-20T13:36:05.862Z
CVE-2026-40486
4.3 (3.1)
Kimai's User Preferences API allows standard users to … kimai
kimai
2026-04-17T22:35:53.543Z 2026-04-20T14:56:51.165Z
CVE-2026-40479
5.4 (3.1)
Kimai: Stored XSS via Incomplete HTML Attribute Escapi… kimai
kimai
2026-04-17T22:31:29.930Z 2026-04-20T16:16:41.880Z
CVE-2026-2434
6.4 (3.1)
Pz-LinkCard <= 2.5.8.1 - Authenticated (Contributor+) … poporon
Pz-LinkCard
2026-04-17T22:27:13.525Z 2026-04-20T13:36:06.124Z
CVE-2026-40478
9.1 (3.1)
Improper neutralization of specific syntax patterns fo… thymeleaf
thymeleaf
2026-04-17T21:57:01.560Z 2026-04-22T03:55:42.682Z
CVE-2026-40477
9.1 (3.1)
Improper restriction of the scope of accessible object… thymeleaf
thymeleaf
2026-04-17T21:53:47.271Z 2026-04-22T03:55:41.093Z
CVE-2026-40476
6.9 (4.0)
graphql-php: Denial of Service via quadratic complexit… webonyx
graphql-php
2026-04-17T21:42:59.511Z 2026-04-20T14:56:57.812Z
CVE-2026-5720
7.1 (4.0)
miniupnpd Integer Underflow SOAPAction Header Parsing miniupnp project
miniupnpd
2026-04-17T21:39:54.818Z 2026-04-20T16:59:21.060Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-30898
N/A
Apache Airflow: Bad example of BashOperator shell inje… Apache Software Foundation
Apache Airflow
2026-04-18T06:20:48.647Z 2026-04-22T03:55:38.783Z
CVE-2026-25917
N/A
Apache Airflow: API extra-links triggers XCom deserial… Apache Software Foundation
Apache Airflow
2026-04-18T06:20:11.187Z 2026-04-22T13:58:49.807Z
CVE-2026-41253
6.9 (3.1)
In iTerm2 through 3.6.9, displaying a .txt file c… iTerm2
iTerm2
2026-04-18T05:27:08.202Z 2026-04-20T15:52:10.357Z
CVE-2026-6518
8.8 (3.1)
CMP – Coming Soon & Maintenance Plugin by NiteoThemes … niteo
CMP – Coming Soon & Maintenance Plugin by NiteoThemes
2026-04-18T03:37:04.707Z 2026-04-20T13:46:08.222Z
CVE-2026-6048
6.4 (3.1)
Flipbox Addon for Elementor <= 2.1.1 - Authenticated (… dragwyb
Flipbox Addon for Elementor
2026-04-18T03:37:05.751Z 2026-04-20T13:46:08.081Z
CVE-2026-4801
6.4 (3.1)
Page Builder Gutenberg Blocks <= 3.1.16 - Authenticate… godaddy
Page Builder Gutenberg Blocks – CoBlocks
2026-04-18T03:37:03.859Z 2026-04-20T14:42:38.120Z
CVE-2026-40494
9.8 (3.1)
SAIL has heap buffer overflow in TGA RLE decoder — raw… HappySeaFox
sail
2026-04-18T01:42:48.830Z 2026-04-20T14:55:42.859Z
CVE-2026-40493
9.8 (3.1)
SAIL has heap buffer overflow in PSD decoder — bpp mis… HappySeaFox
sail
2026-04-18T01:41:14.664Z 2026-04-20T16:15:22.120Z
CVE-2026-40492
9.8 (3.1)
SAIL has heap buffer overflow in XWD decoder — bits_pe… HappySeaFox
sail
2026-04-18T01:39:48.056Z 2026-04-20T15:24:42.029Z
CVE-2026-40491
6.5 (3.1)
gdown Affected by Arbitrary File Write via Path Traver… wkentaro
gdown
2026-04-18T01:36:47.659Z 2026-04-20T15:50:02.983Z
CVE-2026-40490
6.8 (3.1)
AsyncHttpClient leaks authorization credentials to unt… AsyncHttpClient
async-http-client
2026-04-18T01:31:13.860Z 2026-04-20T14:55:50.254Z
CVE-2026-40489
8.6 (4.0)
editorconfig-core-c has incomplete fix for CVE-2023-0341 editorconfig
editorconfig-core-c
2026-04-18T01:24:57.278Z 2026-04-20T16:15:31.570Z
CVE-2026-40487
8.9 (3.1)
Postiz Has Unrestricted File Upload via MIME Type Spoo… gitroomhq
postiz-app
2026-04-18T01:19:06.588Z 2026-04-20T15:25:40.893Z
CVE-2026-35582
8.8 (3.1)
Emissary has an OS Command Injection via Unvalidated I… NationalSecurityAgency
emissary
2026-04-18T01:16:27.661Z 2026-04-20T15:48:51.543Z
CVE-2026-1838
6.1 (3.1)
Hostel <= 1.1.6 - Reflected Cross-Site Scripting via '… prasunsen
Hostel
2026-04-18T01:26:04.643Z 2026-04-20T14:19:29.627Z
CVE-2026-1559
6.4 (3.1)
Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored … youzify
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
2026-04-18T01:26:05.210Z 2026-04-20T13:46:08.353Z
CVE-2026-40572
9 (3.1)
NovumOS has Arbitrary Memory Mapping via Syscall 15 (M… MinecAnton209
NovumOS
2026-04-18T00:16:02.590Z 2026-04-20T14:55:57.521Z
CVE-2026-40350
8.8 (3.1)
Movary User Management (/settings/users) has Authoriza… leepeuker
movary
2026-04-18T00:07:33.324Z 2026-04-20T16:15:39.915Z
CVE-2026-40317
9.4 (3.1)
NovumOS has Privilege Escalation in the Syscall Interface MinecAnton209
NovumOS
2026-04-18T00:12:10.368Z 2026-04-20T15:26:25.222Z
CVE-2026-35465
7.5 (3.1)
SecureDrop Client has path injection in read_gzip_head… freedomofpress
securedrop-client
2026-04-18T00:41:16.594Z 2026-04-20T15:47:43.822Z
CVE-2026-40593
4.8 (3.1)
ChurchCRM: Stored XSS in UserEditor.php via Login Name Field ChurchCRM
CRM
2026-04-18T00:02:59.606Z 2026-04-20T14:56:05.666Z
CVE-2026-40582
9.1 (4.0)
ChurchCRM: Authentication Bypass in `/api/public/user/… ChurchCRM
CRM
2026-04-17T23:16:13.862Z 2026-04-20T14:56:36.921Z
CVE-2026-40581
8.1 (3.1)
ChurchCRM: Cross-Site Request Forgery (CSRF) in Select… ChurchCRM
CRM
2026-04-17T23:51:32.765Z 2026-04-20T16:15:58.183Z
CVE-2026-40485
5.3 (3.1)
ChurchCRM: Username Enumeration via Differential Respo… ChurchCRM
CRM
2026-04-17T23:29:35.884Z 2026-04-20T13:36:05.319Z
CVE-2026-40484
9.1 (3.1)
ChurchCRM: Authenticated Remote Code Execution via Unr… ChurchCRM
CRM
2026-04-17T23:25:06.319Z 2026-04-20T14:56:29.684Z
CVE-2026-40483
5.4 (3.1)
ChurchCRM: Stored XSS in PledgeEditor.php via Donation… ChurchCRM
CRM
2026-04-17T23:20:44.900Z 2026-04-20T16:16:17.841Z
CVE-2026-40482
7.1 (4.0)
ChurchCRM has Authenticated SQL Injection in `/api/fam… ChurchCRM
CRM
2026-04-17T22:58:48.528Z 2026-04-20T16:16:32.247Z
CVE-2026-40480
7.1 (4.0)
ChurchCRM has Missing Object-Level Authorization / IDO… ChurchCRM
CRM
2026-04-17T23:07:30.126Z 2026-04-20T16:16:00.433Z
CVE-2026-40349
8.8 (3.1)
Authenticated Movary User Can Self-Escalate to Adminis… leepeuker
movary
2026-04-18T00:05:46.360Z 2026-04-20T16:15:49.844Z
CVE-2026-40348
7.7 (3.1)
Movary has Authenticated SSRF via Jellyfin Server URL … leepeuker
movary
2026-04-18T00:01:09.725Z 2026-04-20T16:11:32.779Z
ID Severity Description Published Updated
ghsa-gvvw-8j96-8g5r
9.8 (3.1)
MsQuic has a Remote Elevation of Privilege Vulnerability 2026-04-16T01:04:03Z 2026-04-16T01:04:03Z
ghsa-6hw5-45gm-fj88
9.1 (4.0)
@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slash… 2026-04-16T01:03:46Z 2026-04-16T01:03:46Z
ghsa-hrwm-hgmj-7p9c
9.1 (3.1)
@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes 2026-04-16T01:03:25Z 2026-04-16T01:03:25Z
ghsa-gwhp-pf74-vj37
9.0 (4.0)
Fastify's connection header abuse enables stripping of proxy-added headers 2026-04-16T01:02:59Z 2026-04-16T01:02:59Z
ghsa-33r3-4whc-44c2
8.4 (4.0)
Path traversal in vite-plus/binding downloadPackageManager() writes outside VP_HOME 2026-04-16T01:02:48Z 2026-04-16T01:02:48Z
ghsa-458j-xx4x-4375
4.3 (3.1)
hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR 2026-04-16T01:02:24Z 2026-04-16T01:02:24Z
ghsa-w59f-67xm-rxx7
9.9 (3.1)
Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote… 2026-04-16T01:02:12Z 2026-04-16T01:02:12Z
ghsa-r35r-mrc6-xgfp
5.4 (4.0)
Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allo… 2026-04-16T00:54:04Z 2026-04-16T00:54:04Z
ghsa-p8x8-wgf2-jrjm
9.8 (3.1)
The Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale… 2026-04-16T00:54:04Z 2026-04-16T00:54:04Z
ghsa-mx9c-q7m4-fm97
9.1 (3.1)
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions t… 2026-04-16T00:54:04Z 2026-04-16T00:54:04Z
ghsa-hm98-22vr-c62v
4.8 (3.1)
5.1 (4.0)
Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a us… 2026-04-16T00:54:04Z 2026-04-23T21:31:19Z
ghsa-gmwr-9j4p-96vm
6.8 (3.1)
6.1 (4.0)
ProcessWire: server-side request forgery vulnerability in the admin panel's 'Add Module From URL' feature 2026-04-16T00:54:04Z 2026-04-16T22:28:24Z
ghsa-9wp3-36f6-c335
4.3 (3.1)
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict … 2026-04-16T00:54:04Z 2026-04-16T00:54:04Z
ghsa-6vgr-gf7r-f3jc
2.9 (3.1)
Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an … 2026-04-16T00:54:04Z 2026-04-16T00:54:04Z
ghsa-332r-xc5m-v45j
4.8 (3.1)
4.8 (4.0)
Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerabi… 2026-04-16T00:54:04Z 2026-04-23T21:31:19Z
ghsa-gc9w-cc93-rjv8
9.1 (3.1)
Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlS… 2026-04-16T00:50:00Z 2026-04-16T00:50:00Z
ghsa-47hf-23pw-3m8c
8.5 (3.1)
Froxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add() 2026-04-16T00:47:26Z 2026-04-16T00:47:26Z
ghsa-75h4-c557-j89r
7.5 (3.1)
Froxlor has Incomplete Symlink Validation in DataDump.add() Allows Arbitrary Directory Ownership Ta… 2026-04-16T00:47:18Z 2026-04-16T00:47:18Z
ghsa-vmjj-qr7v-pxm6
5.0 (3.1)
Froxlor has an Email Sender Alias Domain Ownership Bypass via Wrong Array Index Allows Cross-Custom… 2026-04-16T00:47:05Z 2026-04-16T00:47:05Z
ghsa-jvx4-xv3m-hrj4
5.4 (3.1)
Froxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add() 2026-04-16T00:46:47Z 2026-04-16T00:46:47Z
ghsa-39q2-94rc-95cp
5.3 (4.0)
DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation 2026-04-16T00:46:35Z 2026-04-16T00:46:35Z
ghsa-xm65-r32w-c46p
6.5 (3.1)
Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to ob… 2026-04-15T21:30:19Z 2026-04-16T15:31:32Z
ghsa-xhc9-2rpq-wh58
8.3 (3.1)
Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had c… 2026-04-15T21:30:19Z 2026-04-15T21:30:19Z
ghsa-wrr6-q4vw-3g77
8.8 (3.1)
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to exec… 2026-04-15T21:30:19Z 2026-04-16T12:31:39Z
ghsa-vm22-5c7q-8w8h
8.3 (3.1)
Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had co… 2026-04-15T21:30:19Z 2026-04-15T21:30:19Z
ghsa-vhh6-f54w-x5gw
8.3 (3.1)
Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a re… 2026-04-15T21:30:19Z 2026-04-15T21:30:19Z
ghsa-qwmx-478f-c8cp
8.8 (3.1)
Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execu… 2026-04-15T21:30:19Z 2026-04-15T21:30:19Z
ghsa-qhxw-36rq-x2m4
8.3 (3.1)
Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who h… 2026-04-15T21:30:19Z 2026-04-15T21:30:19Z
ghsa-qh37-w9pg-j55f
7.3 (3.1)
A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `… 2026-04-15T21:30:19Z 2026-04-15T21:30:19Z
ghsa-qg3c-xm7q-9c4x
3.1 (3.1)
Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a rem… 2026-04-15T21:30:19Z 2026-04-15T21:30:19Z
ID Severity Description Package Published Updated
pysec-2021-125
A flaw was found in Ansible where the secret information present in async_files are getti… ansible 2021-06-09T12:15:00Z 2024-12-03T18:23:29.400148Z
pysec-2021-99
In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, valid… django 2021-06-08T18:15:00Z 2021-06-22T04:54:55.488063Z
pysec-2021-98
Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory… django 2021-06-08T18:15:00Z 2021-06-22T04:54:55.381670Z
pysec-2021-104
Zope is an open-source web application server. This advisory extends the previous advisor… zope 2021-06-08T18:15:00Z 2021-06-22T04:54:57.652841Z
pysec-2021-89
Datasette is an open source multi-tool for exploring and publishing data. The `?_trace=1`… datasette 2021-06-07T22:15:00Z 2021-06-09T05:01:28.246179Z
pysec-2021-90
Flask-AppBuilder is a development framework, built on top of Flask. User enumeration in d… flask-appbuilder 2021-06-07T19:15:00Z 2021-06-09T05:01:12.347920Z
pysec-2021-95
The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepan… websockets 2021-06-06T15:15:00Z 2021-06-09T05:01:36.173811Z
pysec-2021-94
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not prop… pillow 2021-06-02T16:15:00Z 2021-06-09T05:01:24.292350Z
pysec-2021-93
An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation… pillow 2021-06-02T16:15:00Z 2021-06-09T05:00:59.042287Z
pysec-2021-92
An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly … pillow 2021-06-02T16:15:00Z 2021-06-09T05:01:16.347355Z
pysec-2021-138
An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDeco… pillow 2021-06-02T16:15:00Z 2021-08-27T03:22:10.437557Z
pysec-2021-137
An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDeco… pillow 2021-06-02T16:15:00Z 2021-08-27T03:22:10.375655Z
pysec-2021-139
An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sani… pillow 2021-06-02T15:15:00Z 2021-08-27T03:22:10.501313Z
pysec-2021-136
A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending c… neutron 2021-05-28T19:15:00Z 2021-08-27T03:22:08.884816Z
pysec-2021-105
A flaw was found in the use of insufficiently random values in Ansible. Two random passwo… ansible 2021-05-27T19:15:00Z 2021-07-02T02:41:34.811883Z
pysec-2021-887
9.8 (3.1)
GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/ga… gattlib-py 2021-05-27T11:15:00Z 2024-11-21T14:22:50.881327Z
pysec-2021-124
A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console… ansible 2021-05-26T21:15:00Z 2021-08-27T03:21:53.214122Z
pysec-2021-77
An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through… hyperkitty 2021-05-26T14:15:00Z 2021-06-09T05:01:08.351404Z
pysec-2021-106
A flaw was found in ansible module where credentials are disclosed in the console log by … ansible 2021-05-26T12:15:00Z 2021-07-02T02:41:35.206595Z
pysec-2021-87
Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates… wasmtime 2021-05-24T16:15:00Z 2021-06-02T03:48:07.159295Z
pysec-2021-85
Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool. plone 2021-05-21T22:15:00Z 2021-06-09T05:00:54.946731Z
pysec-2021-84
Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or H… plone 2021-05-21T22:15:00Z 2021-06-02T03:48:11.504291Z
pysec-2021-83
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity … plone 2021-05-21T22:15:00Z 2021-06-02T03:48:05.392145Z
pysec-2021-82
Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an e… plone 2021-05-21T22:15:00Z 2021-06-09T05:01:20.334920Z
pysec-2021-81
Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted … plone 2021-05-21T22:15:00Z 2021-06-02T03:48:09.722168Z
pysec-2021-80
Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the… plone 2021-05-21T22:15:00Z 2021-06-09T05:01:40.464417Z
pysec-2021-79
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as use… plone 2021-05-21T22:15:00Z 2021-06-02T03:48:01.619218Z
pysec-2021-88
Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, use… zope 2021-05-21T14:15:00Z 2021-06-02T03:47:57.190321Z
pysec-2021-78
Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in th… plone 2021-05-20T16:15:00Z 2021-06-09T05:00:50.662546Z
pysec-2021-123
The Python "Flask-Security-Too" package is used for adding security features to your Flas… flask-security-too 2021-05-17T18:15:00Z 2021-08-25T04:30:09.653075Z
ID Description Updated
ID Description Published Updated
mal-2026-1503 Malicious code in minify-replace (npm) 2026-03-18T02:38:00Z 2026-03-23T05:16:29Z
mal-2026-1501 Malicious code in @storylane/uikit (npm) 2026-03-18T02:37:27Z 2026-03-23T05:16:25Z
mal-2026-1500 Malicious code in @storylane/shared-packages (npm) 2026-03-18T02:37:27Z 2026-03-23T05:16:25Z
mal-2026-1513 Malicious code in vitest-globals (npm) 2026-03-18T02:20:28Z 2026-03-23T05:16:31Z
mal-2026-1507 Malicious code in transform-property-literals (npm) 2026-03-18T02:20:28Z 2026-03-23T05:16:31Z
mal-2026-1510 Malicious code in transform-simplify-comparison-operators (npm) 2026-03-18T02:20:27Z 2026-03-23T05:16:31Z
mal-2026-1506 Malicious code in transform-minify-booleans (npm) 2026-03-18T02:20:27Z 2026-03-23T05:16:31Z
mal-2026-1504 Malicious code in transform-jsbi-to-bigint (npm) 2026-03-18T02:18:55Z 2026-03-23T05:16:31Z
mal-2026-1502 Malicious code in better-styled-components (npm) 2026-03-18T02:18:55Z 2026-03-23T05:16:25Z
mal-2026-1508 Malicious code in transform-react-jsx (npm) 2026-03-18T02:09:47Z 2026-03-23T05:16:31Z
mal-2026-1499 Malicious code in anistream (PyPI) 2026-03-17T23:11:06Z 2026-03-17T23:11:06Z
mal-2026-1498 Malicious code in telegramdatas (PyPI) 2026-03-17T16:16:37Z 2026-03-17T16:16:37Z
mal-2026-1497 Malicious code in robloxapi-test (PyPI) 2026-03-17T09:06:42Z 2026-03-17T09:06:43Z
mal-2026-1496 Malicious code in robloxapi-testy (PyPI) 2026-03-17T06:44:38Z 2026-03-17T06:44:38Z
mal-2026-1495 Malicious code in whatfix-icons (npm) 2026-03-17T06:25:55Z 2026-03-23T05:16:32Z
mal-2026-1494 Malicious code in navi-design-system (npm) 2026-03-17T06:15:39Z 2026-03-23T05:16:29Z
mal-2026-1493 Malicious code in pino-logger-utils (npm) 2026-03-17T04:46:23Z 2026-04-16T15:42:09Z
mal-2026-1492 Malicious code in strapi-plugin-workspace-plugin (npm) 2026-03-17T03:09:34Z 2026-03-23T05:16:30Z
mal-2026-1490 Malicious code in ember-power-calendar-utils (npm) 2026-03-17T03:09:34Z 2026-03-23T05:16:27Z
mal-2026-1489 Malicious code in asset-delivery (npm) 2026-03-17T03:09:32Z 2026-03-23T05:16:25Z
mal-2026-1491 Malicious code in graphlib-js (npm) 2026-03-17T02:54:20Z 2026-04-16T15:42:08Z
mal-2026-1481 Malicious code in revolut-merchant-widget (npm) 2026-03-16T20:46:00Z 2026-03-25T00:55:56Z
mal-2026-1482 Malicious code in chacha-lite-encrypt (PyPI) 2026-03-16T20:09:47Z 2026-03-16T20:09:47Z
mal-2026-1480 Malicious code in pretty-tabulate (PyPI) 2026-03-16T18:04:10Z 2026-03-16T18:04:10Z
mal-2026-1479 Malicious code in color-list (PyPI) 2026-03-16T18:03:13Z 2026-03-16T18:03:13Z
mal-2026-1488 Malicious code in codeshouhu (PyPI) 2026-03-16T18:00:09Z 2026-03-16T18:00:09Z
mal-2026-1478 Malicious code in wordpecker-fx (npm) 2026-03-16T15:51:36Z 2026-03-23T05:16:32Z
mal-2026-1477 Malicious code in supply-hx (npm) 2026-03-16T15:51:36Z 2026-03-23T05:16:30Z
mal-2026-1476 Malicious code in jalalstealer (npm) 2026-03-16T15:51:36Z 2026-03-23T05:16:28Z
mal-2026-1475 Malicious code in delta666 (npm) 2026-03-16T15:51:36Z 2026-03-23T05:16:26Z
ID Description Published Updated
wid-sec-w-2025-1718 Red Hat Enterprise Linux (gdk-pixbuf): Schwachstelle ermöglicht Denial of Service 2025-08-04T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-1717 libTIFF (tiff2ps): Schwachstelle ermöglicht Denial of Service 2025-08-04T22:00:00.000+00:00 2025-11-27T23:00:00.000+00:00
wid-sec-w-2025-1716 Apache OFBiz: Schwachstelle ermöglicht Codeausführung 2025-08-04T22:00:00.000+00:00 2025-08-17T22:00:00.000+00:00
wid-sec-w-2025-1715 Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Offenlegung von Informationen 2025-08-04T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1714 Dell PowerProtect Data Domain: Mehrere Schwachstellen 2025-08-04T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1713 Netgate pfSense (OpenVPN Dashboard): Schwachstelle ermöglicht Stored Cross-Site Scripting 2025-08-04T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1712 Dell Unity: Mehrere Schwachstellen 2025-08-04T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1711 Ubiquiti UniFi: Schwachstelle ermöglicht Codeausführung 2025-08-04T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1710 Samsung Android: Mehrere Schwachstellen 2025-08-04T22:00:00.000+00:00 2025-08-05T22:00:00.000+00:00
wid-sec-w-2025-1709 Android Patchday August 2025: Multiple Vulnerabilities 2025-08-04T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1708 Liferay Portal und Liferay DXP: Mehrere Schwachstellen 2025-08-04T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1707 Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Denial of Service 2025-08-04T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1706 poppler: Mehrere Schwachstellen 2025-08-04T22:00:00.000+00:00 2025-11-04T23:00:00.000+00:00
wid-sec-w-2025-1705 CODESYS: Mehrere Schwachstellen 2025-08-03T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1704 Grafana (Infinity datasource plugin): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-08-03T22:00:00.000+00:00 2025-08-04T22:00:00.000+00:00
wid-sec-w-2025-1703 WebKitGTK: Mehrere Schwachstellen 2025-08-03T22:00:00.000+00:00 2025-11-30T23:00:00.000+00:00
wid-sec-w-2025-1702 Hashicorp Vault Community und Enterprise: Mehrere Schwachstellen 2025-08-03T22:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2025-1701 IBM QRadar SIEM: Schwachstelle ermöglicht Cross-Site Scripting 2025-08-03T22:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2025-1700 libTIFF: Schwachstelle ermöglicht einen Denial of Service 2025-08-03T22:00:00.000+00:00 2025-11-27T23:00:00.000+00:00
wid-sec-w-2025-1699 Red Hat Enterprise Linux (requests): Schwachstelle ermöglicht das Ausspähen von Informationen 2025-08-03T22:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-1698 IBM Operational Decision Manager: Mehrere Schwachstellen 2025-07-31T22:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2025-1697 Asterisk: Mehrere Schwachstellen 2025-07-31T22:00:00.000+00:00 2025-10-12T22:00:00.000+00:00
wid-sec-w-2025-1696 Squid: Schwachstelle ermöglicht Codeausführung 2025-07-31T22:00:00.000+00:00 2025-11-18T23:00:00.000+00:00
wid-sec-w-2025-1691 Apache Struts: Schwachstelle ermöglicht Manipulation 2025-07-30T22:00:00.000+00:00 2025-07-30T22:00:00.000+00:00
wid-sec-w-2025-1690 Acronis Cyber Protect Cloud Agent: Schwachstelle ermöglicht Offenlegung von Informationen 2025-07-30T22:00:00.000+00:00 2026-03-05T23:00:00.000+00:00
wid-sec-w-2025-1689 Mattermost Server: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-07-30T22:00:00.000+00:00 2025-07-30T22:00:00.000+00:00
wid-sec-w-2025-1688 SUSE Manager: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten 2025-07-30T22:00:00.000+00:00 2025-07-30T22:00:00.000+00:00
wid-sec-w-2025-1687 Devolutions Server: Mehrere Schwachstellen 2025-07-30T22:00:00.000+00:00 2025-07-30T22:00:00.000+00:00
wid-sec-w-2025-1686 Ruby SAML: Schwachstelle ermöglicht Denial of Service 2025-07-30T22:00:00.000+00:00 2025-08-31T22:00:00.000+00:00
wid-sec-w-2025-1685 HP LaserJet: Schwachstelle ermöglicht Offenlegung von Informationen 2025-07-30T22:00:00.000+00:00 2025-07-30T22:00:00.000+00:00
ID Description Published Updated
icsa-22-286-01 Siemens LOGO! 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-284-03 Sensormatic Electronics C-CURE 9000 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-284-02 Daikin Holdings Singapore 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-284-01 Altair HyperView Player 2022-10-11T00:00:00.000000Z 2022-10-11T00:00:00.000000Z
icsa-22-279-02 HIWIN Robot System Software (HRSS) 2022-10-06T00:00:00.000000Z 2022-10-06T00:00:00.000000Z
icsa-22-279-01 Rockwell Automation FactoryTalk VantagePoint 2022-10-06T00:00:00.000000Z 2022-10-06T00:00:00.000000Z
icsa-22-277-03 Horner Automation Cscape 2022-10-04T06:00:00.000000Z 2022-10-04T06:00:00.000000Z
icsma-22-277-01 BD Totalys MultiProcessor 2022-10-04T00:00:00.000000Z 2022-10-04T00:00:00.000000Z
icsa-22-277-04 OMRON CX-Programmer 2022-10-04T00:00:00.000000Z 2022-10-04T00:00:00.000000Z
icsa-22-277-02 Hitachi Energy Modular Switchgear Monitoring (MSM) 2022-10-04T00:00:00.000000Z 2022-10-04T00:00:00.000000Z
icsa-22-277-01 Johnson Controls Metasys ADX Server 2022-10-04T00:00:00.000000Z 2022-10-04T00:00:00.000000Z
icsa-22-272-02 Hitachi Energy MicroSCADA Pro X SYS600 2022-09-29T00:00:00.000000Z 2022-09-29T00:00:00.000000Z
icsa-22-272-01 Hitachi Energy MicroSCADA Pro X SYS600 2022-09-29T00:00:00.000000Z 2022-09-29T00:00:00.000000Z
icsa-22-270-03 Rockwell Automation ThinManager ThinServer 2022-09-27T00:00:00.000000Z 2022-09-27T00:00:00.000000Z
icsa-22-270-02 Hitachi Energy APM Edge 2022-09-27T00:00:00.000000Z 2022-09-27T00:00:00.000000Z
icsa-22-270-01 Hitachi Energy AFS660/AFS665 2022-09-27T00:00:00.000000Z 2022-09-27T00:00:00.000000Z
icsa-22-265-01 Measuresoft ScadaPro Server 2022-09-22T00:00:00.000000Z 2022-09-22T00:00:00.000000Z
icsa-25-273-03 Festo CPX-CEC-C1 and CPX-CMXX 2022-09-20T10:00:00.000000Z 2025-07-28T10:00:00.000000Z
icsa-22-263-03 Dataprobe iBoot-PDU 2022-09-20T06:00:00.000000Z 2023-05-04T23:12:37.028223Z
icsma-22-263-01 Medtronic NGP 600 Series Insulin Pumps 2022-09-20T00:00:00.000000Z 2022-09-20T00:00:00.000000Z
icsa-22-263-04 Host Engineering Communications Module 2022-09-20T00:00:00.000000Z 2022-09-20T00:00:00.000000Z
icsa-22-263-02 Hitachi Energy AFF660/665 Series 2022-09-20T00:00:00.000000Z 2022-09-20T00:00:00.000000Z
icsa-22-263-01 Hitachi Energy PROMOD IV 2022-09-20T00:00:00.000000Z 2022-09-20T00:00:00.000000Z
icsa-22-256-03 Delta Electronics DIAEnergie 2022-09-19T06:00:00.000000Z 2023-06-01T06:00:00.000000Z
icsa-22-258-05 Siemens SINEC INS 2022-09-13T00:00:00.000000Z 2022-09-13T00:00:00.000000Z
icsa-22-258-04 Siemens Mendix SAML Module 2022-09-13T00:00:00.000000Z 2022-12-13T00:00:00.000000Z
icsa-22-258-03 Siemens RUGGEDCOM ROS 2022-09-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-258-02 Siemens Simcenter Femap and Parasolid 2022-09-13T00:00:00.000000Z 2022-09-13T00:00:00.000000Z
icsa-22-258-01 Siemens Mobility CoreShield OWG Software 2022-09-13T00:00:00.000000Z 2022-09-13T00:00:00.000000Z
icsa-22-256-04 Kingspan TMS300 CS 2022-09-13T00:00:00.000000Z 2022-09-13T00:00:00.000000Z
ID Description Published Updated
cisco-sa-ios-nxos-onepk-rce-6hhyt4dc Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ios-ir800-img-verif-whhlyhjk Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ios-iot-vds-cred-upmp9zby Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ios-iot-vds-cmd-inj-vfjtqghe Cisco IOS Software for Cisco Industrial Routers Virtual Device Server CLI Command Injection Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ios-iot-udp-vds-inj-f2d5jzrt Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Inter-VM Channel Command Injection Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ios-iot-rce-xyrsemnh Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ios-iot-gos-vuln-s9qs8kyl Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ikev2-9p23jj2a Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-ewlc-dos-anvkvmxr Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-dnac-audit-log-59rbdwb6 Cisco Digital Network Architecture Center Information Disclosure Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-cipdos-hkftzxex Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service Vulnerabilities 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-caf-file-mvnpqkw9 Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-caf-3dxm8exv Cisco IOx Application Framework Arbitrary File Creation Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-c2960l-dpwa9re4 Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X Authentication Bypass Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-auth-b-nzwhjhh7 Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-asr920-abjclmef Cisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-apic-ksv-3wzbhyt4 Cisco Application Services Engine Software Authorization Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-apic-epu-f8y5kuop Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability 2020-06-03T16:00:00+00:00 2020-06-03T16:00:00+00:00
cisco-sa-nxos-ipip-dos-kct9x4 Cisco NX-OS Software Unexpected IP in IP Packet Processing Vulnerability 2020-06-01T16:00:00+00:00 2020-06-01T16:00:00+00:00
cisco-sa-salt-2vx545ag SaltStack FrameWork Vulnerabilities Affecting Cisco Products 2020-05-28T16:00:00+00:00 2020-06-16T15:17:35+00:00
cisco-sa-uccx-rce-gmsc6rkn Cisco Unified Contact Center Express Remote Code Execution Vulnerability 2020-05-20T16:00:00+00:00 2020-05-20T16:00:00+00:00
cisco-sa-pcp-sql-inj-22auwt66 Cisco Prime Collaboration Provisioning Software SQL Injection Vulnerability 2020-05-20T16:00:00+00:00 2020-05-20T16:00:00+00:00
cisco-sa-cpnr-dhcp-dos-bkezfhlp Cisco Prime Network Registrar DHCP Denial of Service Vulnerability 2020-05-20T16:00:00+00:00 2020-05-20T16:00:00+00:00
cisco-sa-amp4emac-dos-kfkjugtm Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service Vulnerability 2020-05-20T16:00:00+00:00 2020-05-20T16:00:00+00:00
cisco-sa-amp4elinux-h33dkrvb Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability 2020-05-20T16:00:00+00:00 2020-05-20T16:00:00+00:00
cisco-sa-xpftd-gydxyn8h Cisco Firepower Device Manager On-Box Software XML Parsing Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-umbrella-head-inject-n4qarjh Cisco Umbrella Carriage Return Line Feed Injection Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-ucsd-ar6baguz Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-ssl-bypass-o5tgum2n Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-snort_filepolbypass-m4x5dgop Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability 2020-05-06T16:00:00+00:00 2020-05-08T15:54:59+00:00
ID Description Published Updated
msrc_cve-2025-40355 sysfs: check visibility before changing group attribute ownership 2025-12-02T00:00:00.000Z 2026-03-31T14:49:21.000Z
msrc_cve-2025-40354 drm/amd/display: increase max link count and fix link->enc NULL pointer access 2025-12-02T00:00:00.000Z 2026-01-13T01:36:14.000Z
msrc_cve-2025-40353 arm64: mte: Do not warn if the page is already tagged in copy_highpage() 2025-12-02T00:00:00.000Z 2025-12-17T01:03:28.000Z
msrc_cve-2025-40345 usb: storage: sddr55: Reject out-of-bound new_pba 2025-12-02T00:00:00.000Z 2026-01-07T14:37:39.000Z
msrc_cve-2025-40343 nvmet-fc: avoid scheduling association deletion twice 2025-12-02T00:00:00.000Z 2025-12-16T14:40:15.000Z
msrc_cve-2025-40342 nvme-fc: use lock accessing port_state and rport state 2025-12-02T00:00:00.000Z 2025-12-16T14:40:34.000Z
msrc_cve-2025-40341 futex: Don't leak robust_list pointer on exec race 2025-12-02T00:00:00.000Z 2025-12-16T14:40:09.000Z
msrc_cve-2025-40340 drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. 2025-12-02T00:00:00.000Z 2025-12-10T01:02:33.000Z
msrc_cve-2025-40339 drm/amdgpu: fix nullptr err of vm_handle_moved 2025-12-02T00:00:00.000Z 2026-03-31T15:15:25.000Z
msrc_cve-2025-40338 ASoC: Intel: avs: Do not share the name pointer between components 2025-12-02T00:00:00.000Z 2025-12-11T01:36:32.000Z
msrc_cve-2025-40337 net: stmmac: Correctly handle Rx checksum offload errors 2025-12-02T00:00:00.000Z 2025-12-16T14:40:54.000Z
msrc_cve-2025-40336 drm/gpusvm: fix hmm_pfn_to_map_order() usage 2025-12-02T00:00:00.000Z 2025-12-11T01:36:26.000Z
msrc_cve-2025-40335 drm/amdgpu: validate userq input args 2025-12-02T00:00:00.000Z 2026-01-20T14:51:11.000Z
msrc_cve-2025-40334 drm/amdgpu: validate userq buffer virtual address and size 2025-12-02T00:00:00.000Z 2025-12-11T01:36:37.000Z
msrc_cve-2025-40333 f2fs: fix infinite loop in __insert_extent_tree() 2025-12-02T00:00:00.000Z 2025-12-16T14:40:47.000Z
msrc_cve-2025-40332 drm/amdkfd: Fix mmap write lock not release 2025-12-02T00:00:00.000Z 2026-01-20T14:51:28.000Z
msrc_cve-2025-40331 sctp: Prevent TOCTOU out-of-bounds write 2025-12-02T00:00:00.000Z 2025-12-16T14:40:22.000Z
msrc_cve-2025-40329 drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb 2025-12-02T00:00:00.000Z 2025-12-16T14:40:41.000Z
msrc_cve-2025-40328 smb: client: fix potential UAF in smb2_close_cached_fid() 2025-12-02T00:00:00.000Z 2025-12-16T14:40:28.000Z
msrc_cve-2025-40324 NFSD: Fix crash in nfsd4_read_release() 2025-12-02T00:00:00.000Z 2025-12-16T14:40:02.000Z
msrc_cve-2025-40323 fbcon: Set fb_display[i]->mode to NULL when the mode is released 2025-12-02T00:00:00.000Z 2025-12-16T14:39:30.000Z
msrc_cve-2025-40322 fbdev: bitblit: bound-check glyph index in bit_putcs* 2025-12-02T00:00:00.000Z 2025-12-16T14:39:43.000Z
msrc_cve-2025-40321 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode 2025-12-02T00:00:00.000Z 2025-12-16T14:38:58.000Z
msrc_cve-2025-40319 bpf: Sync pending IRQ work before freeing ring buffer 2025-12-02T00:00:00.000Z 2025-12-16T14:38:51.000Z
msrc_cve-2025-40317 regmap: slimbus: fix bus_context pointer in regmap init calls 2025-12-02T00:00:00.000Z 2025-12-09T01:02:25.000Z
msrc_cve-2025-40315 usb: gadget: f_fs: Fix epfile null pointer access after ep enable. 2025-12-02T00:00:00.000Z 2025-12-09T01:02:15.000Z
msrc_cve-2025-40314 usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget 2025-12-02T00:00:00.000Z 2025-12-09T01:02:20.000Z
msrc_cve-2025-40313 ntfs3: pretend $Extend records as regular files 2025-12-02T00:00:00.000Z 2025-12-09T01:02:47.000Z
msrc_cve-2025-40312 jfs: Verify inode mode when loading from disk 2025-12-02T00:00:00.000Z 2025-12-09T01:02:09.000Z
msrc_cve-2025-40311 accel/habanalabs: support mapping cb with vmalloc-backed coherent memory 2025-12-02T00:00:00.000Z 2025-12-16T14:39:36.000Z
ID Description Published Updated
opensuse-su-2025:0147-1 Security update for mozjs102 2025-05-09T08:01:38Z 2025-05-09T08:01:38Z
opensuse-su-2025:15074-1 libmosquitto1-2.0.21-2.1 on GA media 2025-05-09T00:00:00Z 2025-05-09T00:00:00Z
opensuse-su-2025:15073-1 chromedriver-136.0.7103.92-1.1 on GA media 2025-05-09T00:00:00Z 2025-05-09T00:00:00Z
opensuse-su-2025:15072-1 bird3-3.1.0-1.1 on GA media 2025-05-09T00:00:00Z 2025-05-09T00:00:00Z
opensuse-su-2025:15071-1 afterburn-5.7.0.git103.bae893c-1.1 on GA media 2025-05-09T00:00:00Z 2025-05-09T00:00:00Z
opensuse-su-2025:15070-1 libevtlog-4_8-0-4.8.2-1.1 on GA media 2025-05-08T00:00:00Z 2025-05-08T00:00:00Z
opensuse-su-2025:15069-1 sslh-2.2.3-1.1 on GA media 2025-05-08T00:00:00Z 2025-05-08T00:00:00Z
opensuse-su-2025:15068-1 sequoia-octopus-librnp-1.11.0-2.1 on GA media 2025-05-08T00:00:00Z 2025-05-08T00:00:00Z
opensuse-su-2025:15067-1 ruby3.4-rubygem-rack-2.2-2.2.14-1.1 on GA media 2025-05-08T00:00:00Z 2025-05-08T00:00:00Z
opensuse-su-2025:15066-1 ldap-proxy-0.1.0~90-1.1 on GA media 2025-05-08T00:00:00Z 2025-05-08T00:00:00Z
opensuse-su-2025:15065-1 wasm-bindgen-0.2.97~0-3.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15064-1 transfig-3.2.9a-2.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15063-1 tealdeer-1.7.1-2.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15062-1 sccache-0.9.1~22-2.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15061-1 rustup-1.28.1~0-2.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15060-1 kanidm-1.6.0~git0.d7ae0f336-1.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15059-1 govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15058-1 go1.24-1.24.3-1.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15057-1 cargo-c-0.10.3~git0.ee7d7ef-3.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:15056-1 389-ds-3.1.2~git90.2bc7250be-1.1 on GA media 2025-05-07T00:00:00Z 2025-05-07T00:00:00Z
opensuse-su-2025:0145-1 Security update for chromium 2025-05-06T06:05:59Z 2025-05-06T06:05:59Z
opensuse-su-2025:15055-1 weblate-5.11.3-1.1 on GA media 2025-05-06T00:00:00Z 2025-05-06T00:00:00Z
opensuse-su-2025:15054-1 rclone-1.69.2-1.1 on GA media 2025-05-05T00:00:00Z 2025-05-05T00:00:00Z
opensuse-su-2025:15053-1 java-1_8_0-openjdk-1.8.0.452-1.1 on GA media 2025-05-05T00:00:00Z 2025-05-05T00:00:00Z
opensuse-su-2025:15052-1 grafana-11.5.4-1.1 on GA media 2025-05-05T00:00:00Z 2025-05-05T00:00:00Z
opensuse-su-2025:15051-1 chromedriver-136.0.7103.59-1.1 on GA media 2025-05-04T00:00:00Z 2025-05-04T00:00:00Z
opensuse-su-2025:15050-1 audiofile-0.3.6-15.1 on GA media 2025-05-03T00:00:00Z 2025-05-03T00:00:00Z
opensuse-su-2025:15049-1 tomcat10-10.1.40-1.1 on GA media 2025-05-02T00:00:00Z 2025-05-02T00:00:00Z
opensuse-su-2025:15048-1 tomcat-9.0.104-1.1 on GA media 2025-05-02T00:00:00Z 2025-05-02T00:00:00Z
opensuse-su-2025:15047-1 hauler-1.2.4-1.1 on GA media 2025-05-02T00:00:00Z 2025-05-02T00:00:00Z
ID Description Published Updated
rhsa-2026:0422 Red Hat Security Advisory: libsoup security update 2026-01-12T02:53:33+00:00 2026-03-19T14:36:58+00:00
rhsa-2026:0443 Red Hat Security Advisory: kernel-rt security update 2026-01-12T02:42:33+00:00 2026-04-08T13:32:44+00:00
rhsa-2026:0435 Red Hat Security Advisory: tar security update 2026-01-12T02:39:28+00:00 2026-03-18T03:14:49+00:00
rhsa-2026:0428 Red Hat Security Advisory: libssh security update 2026-01-12T02:35:33+00:00 2026-03-20T20:06:02+00:00
rhsa-2026:0434 Red Hat Security Advisory: tar security update 2026-01-12T02:30:08+00:00 2026-03-18T03:14:57+00:00
rhsa-2026:0424 Red Hat Security Advisory: podman security update 2026-01-12T02:26:08+00:00 2026-04-14T07:57:46+00:00
rhsa-2026:0421 Red Hat Security Advisory: libsoup security update 2026-01-12T02:24:03+00:00 2026-03-19T14:36:58+00:00
rhsa-2026:0427 Red Hat Security Advisory: libssh security update 2026-01-12T02:12:23+00:00 2026-03-20T20:06:02+00:00
rhsa-2026:0430 Red Hat Security Advisory: libssh security update 2026-01-12T02:08:48+00:00 2026-03-20T20:06:03+00:00
rhsa-2026:0436 Red Hat Security Advisory: buildah security update 2026-01-12T02:06:04+00:00 2026-04-02T16:47:02+00:00
rhsa-2026:0429 Red Hat Security Advisory: keylime security update 2026-01-12T02:05:04+00:00 2026-03-19T15:40:07+00:00
rhsa-2026:0433 Red Hat Security Advisory: wireshark security update 2026-01-12T02:00:34+00:00 2026-03-18T03:15:03+00:00
rhsa-2026:0423 Red Hat Security Advisory: libsoup3 security update 2026-01-12T01:38:59+00:00 2026-03-19T14:36:59+00:00
rhsa-2026:0304 Red Hat Security Advisory: mariadb:10.3 security update 2026-01-09T08:07:12+00:00 2026-04-13T20:00:32+00:00
rhsa-2026:0414 Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage 2026-01-08T22:34:17+00:00 2026-04-14T09:16:29+00:00
rhsa-2026:0409 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update 2026-01-08T19:41:55+00:00 2026-03-23T17:11:53+00:00
rhsa-2026:0408 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update 2026-01-08T19:38:23+00:00 2026-03-23T17:11:53+00:00
rhsa-2026:0406 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update 2026-01-08T19:34:46+00:00 2026-03-23T17:11:54+00:00
rhsa-2026:0384 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.3 security update 2026-01-08T16:57:30+00:00 2026-04-01T13:37:38+00:00
rhsa-2026:0383 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.3 security update 2026-01-08T16:57:24+00:00 2026-04-01T13:37:37+00:00
rhsa-2026:0386 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.3 security update 2026-01-08T16:53:51+00:00 2026-04-01T13:37:38+00:00
rhsa-2026:0376 Red Hat Security Advisory: mariadb10.11 security update 2026-01-08T16:41:25+00:00 2026-04-14T09:46:01+00:00
rhsa-2026:0367 Red Hat Security Advisory: mariadb security update 2026-01-08T15:48:20+00:00 2026-04-13T20:00:36+00:00
rhsa-2026:0355 Red Hat Security Advisory: python3.12 security update 2026-01-08T14:45:29+00:00 2026-04-13T20:00:36+00:00
rhsa-2026:0354 Red Hat Security Advisory: python3.12 security update 2026-01-08T14:33:54+00:00 2026-04-13T20:00:35+00:00
rhsa-2026:0356 Red Hat Security Advisory: gimp:2.8 security update 2026-01-08T14:27:05+00:00 2026-03-18T03:14:09+00:00
rhsa-2026:0361 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security Update 2026-01-08T14:13:04+00:00 2026-03-18T03:14:52+00:00
rhsa-2026:0360 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security Update 2026-01-08T14:12:09+00:00 2026-03-18T03:14:53+00:00
rhsa-2026:0357 Red Hat Security Advisory: mariadb:10.3 security update 2026-01-08T14:07:19+00:00 2026-04-13T20:00:36+00:00
rhsa-2026:0341 Red Hat Security Advisory: gcc-toolset-14-binutils security update 2026-01-08T13:54:39+00:00 2026-04-13T20:00:34+00:00
ID Description Published Updated
suse-su-2026:0202-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7) 2026-01-21T14:35:49Z 2026-01-21T14:35:49Z
suse-su-2026:20365-1 Security update for util-linux 2026-01-21T13:48:05Z 2026-01-21T13:48:05Z
suse-su-2026:20364-1 Security update for python-urllib3 2026-01-21T13:44:58Z 2026-01-21T13:44:58Z
suse-su-2026:0204-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6) 2026-01-21T13:33:35Z 2026-01-21T13:33:35Z
suse-su-2026:0203-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6) 2026-01-21T13:04:03Z 2026-01-21T13:04:03Z
suse-su-2026:20270-1 Security update for python-urllib3 2026-01-21T13:01:37Z 2026-01-21T13:01:37Z
suse-su-2026:0200-1 Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5) 2026-01-21T12:17:09Z 2026-01-21T12:17:09Z
suse-su-2026:20116-1 Security update for podman 2026-01-21T11:08:51Z 2026-01-21T11:08:51Z
suse-su-2026:20103-1 Security update for podman 2026-01-21T11:08:51Z 2026-01-21T11:08:51Z
suse-su-2026:0199-1 Security update for python-FontTools 2026-01-21T11:03:55Z 2026-01-21T11:03:55Z
suse-su-2026:0198-1 Security update for ffmpeg-4 2026-01-21T10:16:19Z 2026-01-21T10:16:19Z
suse-su-2026:0197-1 Security update for postgresql17, postgresql18 2026-01-21T09:31:57Z 2026-01-21T09:31:57Z
suse-su-2026:0196-1 Security update for ovmf 2026-01-21T09:05:26Z 2026-01-21T09:05:26Z
suse-su-2026:0195-1 Security update for net-snmp 2026-01-21T09:05:17Z 2026-01-21T09:05:17Z
suse-su-2026:0194-1 Security update for libsodium 2026-01-21T09:05:11Z 2026-01-21T09:05:11Z
suse-su-2026:0193-1 Security update for libvirt 2026-01-21T08:04:55Z 2026-01-21T08:04:55Z
suse-su-2026:0192-1 Security update for libpng16 2026-01-21T03:33:46Z 2026-01-21T03:33:46Z
suse-su-2026:0191-1 Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4) 2026-01-20T21:05:44Z 2026-01-20T21:05:44Z
suse-su-2026:0188-1 Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) 2026-01-20T14:06:23Z 2026-01-20T14:06:23Z
suse-su-2026:0187-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) 2026-01-20T12:46:06Z 2026-01-20T12:46:06Z
suse-su-2026:0186-1 Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5) 2026-01-20T12:45:55Z 2026-01-20T12:45:55Z
suse-su-2026:20102-1 Security update for webkit2gtk3 2026-01-20T12:37:33Z 2026-01-20T12:37:33Z
suse-su-2026:0185-1 Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4) 2026-01-20T11:08:06Z 2026-01-20T11:08:06Z
suse-su-2026:20114-1 Security update of open-vm-tools 2026-01-20T11:00:32Z 2026-01-20T11:00:32Z
suse-su-2026:20100-1 Security update of open-vm-tools 2026-01-20T11:00:32Z 2026-01-20T11:00:32Z
suse-su-2026:20361-1 Security update for abseil-cpp 2026-01-20T09:46:41Z 2026-01-20T09:46:41Z
suse-su-2026:20268-1 Security update for abseil-cpp 2026-01-20T09:41:09Z 2026-01-20T09:41:09Z
suse-su-2026:0184-1 Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) 2026-01-20T09:34:00Z 2026-01-20T09:34:00Z
suse-su-2026:20267-1 Security update for net-snmp 2026-01-20T08:52:45Z 2026-01-20T08:52:45Z
suse-su-2026:0180-1 Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) 2026-01-20T07:04:14Z 2026-01-20T07:04:14Z
ID Description Published Updated
alsa-2024:6309 Moderate: fence-agents security update 2024-09-04T00:00:00Z 2024-09-05T06:39:10Z
alsa-2024:6197 Moderate: ghostscript security update 2024-09-03T00:00:00Z 2024-09-04T08:17:53Z
alsa-2024:6195 Moderate: skopeo security update 2024-09-03T00:00:00Z 2024-09-03T13:22:48Z
alsa-2024:6194 Important: podman security update 2024-09-03T00:00:00Z 2024-09-04T08:19:33Z
alsa-2024:6192 Moderate: wget security update 2024-09-03T00:00:00Z 2024-09-04T08:20:54Z
alsa-2024:6189 Moderate: buildah security update 2024-09-03T00:00:00Z 2024-09-03T13:24:13Z
alsa-2024:6188 Moderate: runc security update 2024-09-03T00:00:00Z 2024-09-04T08:22:18Z
alsa-2024:6187 Moderate: gvisor-tap-vsock security update 2024-09-03T00:00:00Z 2024-09-03T13:25:37Z
alsa-2024:6186 Moderate: containernetworking-plugins security update 2024-09-03T00:00:00Z 2024-09-04T08:23:09Z
alsa-2024:6184 Moderate: orc security update 2024-09-03T00:00:00Z 2024-09-04T09:13:16Z
alsa-2024:6179 Moderate: python3.11 security update 2024-09-03T00:00:00Z 2024-09-04T08:24:24Z
alsa-2024:6166 Moderate: krb5 security update 2024-09-03T00:00:00Z 2024-09-04T08:26:08Z
alsa-2024:6163 Moderate: python3.9 security update 2024-09-03T00:00:00Z 2024-09-04T08:28:04Z
alsa-2024:6162 Moderate: python-urllib3 security update 2024-09-03T00:00:00Z 2024-09-03T13:27:19Z
alsa-2024:6148 Moderate: nodejs:18 security update 2024-09-03T00:00:00Z 2024-09-03T13:11:49Z
alsa-2024:6147 Moderate: nodejs:18 security update 2024-09-03T00:00:00Z 2024-09-03T13:09:23Z
alsa-2024:6146 Moderate: python3.12 security update 2024-09-03T00:00:00Z 2024-09-03T07:39:19Z
alsa-2024:6020 Important: postgresql:15 security update 2024-08-29T00:00:00Z 2024-08-29T13:44:43Z
alsa-2024:6018 Important: postgresql:13 security update 2024-08-29T00:00:00Z 2024-08-29T13:41:13Z
alsa-2024:6001 Important: postgresql:15 security update 2024-08-29T00:00:00Z 2024-08-29T13:39:16Z
alsa-2024:6000 Important: postgresql:12 security update 2024-08-29T00:00:00Z 2024-08-29T13:46:13Z
alsa-2024:5999 Important: postgresql security update 2024-08-29T00:00:00Z 2024-08-29T13:54:02Z
alsa-2024:5962 Moderate: python39:3.9 and python39-devel:3.9 security update 2024-08-28T00:00:00Z 2024-08-29T08:29:21Z
alsa-2024:5941 Moderate: libvpx security update 2024-08-28T00:00:00Z 2024-08-29T08:25:04Z
alsa-2024:5929 Important: postgresql:16 security update 2024-08-28T00:00:00Z 2024-08-28T15:25:58Z
alsa-2024:5928 Important: kernel security update 2024-08-28T00:00:00Z 2024-11-03T22:29:00Z
alsa-2024:5927 Important: postgresql:16 security update 2024-08-28T00:00:00Z 2024-08-30T12:36:27Z
alsa-2024:5815 Moderate: nodejs:20 security update 2024-08-26T00:00:00Z 2024-08-26T18:11:55Z
alsa-2024:5814 Moderate: nodejs:20 security update 2024-08-26T00:00:00Z 2024-08-26T18:53:15Z
alsa-2024:5694 Important: tomcat security update 2024-08-21T00:00:00Z 2024-08-21T13:21:48Z
ID Description Published Updated
osv-2022-507 Heap-use-after-free in psi_device_ref_finalize 2022-06-25T00:01:55.696626Z 2022-06-25T00:01:55.696857Z
osv-2022-501 UNKNOWN WRITE in grk::TileLengthMarkers::seek 2022-06-24T00:01:56.977425Z 2022-06-27T00:04:10.724141Z
osv-2022-497 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec 2022-06-23T00:01:42.392060Z 2022-06-23T00:01:42.392303Z
osv-2022-496 Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner 2022-06-23T00:00:48.826856Z 2022-06-23T00:00:48.827258Z
osv-2022-494 Heap-buffer-overflow in ucl_hash_search 2022-06-22T00:01:16.539035Z 2025-06-05T14:39:06.351080Z
osv-2022-493 Segv on unknown address in jxl::N_AVX2::XYBStage<jxl::N_AVX2::PerChannelOp<jxl::N_AVX2::Op709> >::ProcessRo 2022-06-21T00:01:55.187291Z 2022-06-21T00:01:55.187587Z
osv-2022-492 Heap-buffer-overflow in jxl::BitsCoder::Read 2022-06-20T00:01:36.686599Z 2022-06-20T00:01:36.686881Z
osv-2021-1820 Heap-buffer-overflow in r_str_utf8_codepoint 2022-06-19T00:00:52.240583Z 2022-06-19T00:00:52.240913Z
osv-2022-490 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct 2022-06-17T00:01:02.205743Z 2022-06-17T00:01:02.206010Z
osv-2022-489 Heap-buffer-overflow in fr_size_from_str 2022-06-17T00:00:29.738821Z 2022-06-17T00:00:29.739073Z
osv-2022-487 Heap-use-after-free in duckdb::Planner::CreatePlan 2022-06-17T00:00:15.351733Z 2022-06-17T00:00:15.351999Z
osv-2022-486 Heap-buffer-overflow in frame_get_vlmetalayers 2022-06-17T00:00:08.687092Z 2024-10-02T14:11:20.344165Z
osv-2022-485 Segv on unknown address in duckdb::ExpressionBinder::BindExpression 2022-06-16T00:00:15.479357Z 2022-06-16T00:00:15.479757Z
osv-2022-483 Heap-buffer-overflow in ndpi_search_dns 2022-06-15T00:01:56.102357Z 2022-06-15T00:01:56.102595Z
osv-2022-481 UNKNOWN READ in ndpi_strdup 2022-06-15T00:01:12.654297Z 2022-06-15T00:01:12.654543Z
osv-2022-480 Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process 2022-06-15T00:00:47.673415Z 2022-06-15T00:00:47.673708Z
osv-2022-478 Segv on unknown address 2022-06-14T00:01:10.335839Z 2023-10-09T14:11:11.908246Z
osv-2022-476 Stack-buffer-overflow in simple_str_to_doublestr 2022-06-13T00:01:55.785660Z 2022-06-13T00:01:55.785861Z
osv-2022-475 Heap-double-free in nft_set_context_free_many 2022-06-13T00:01:49.208216Z 2022-06-13T00:01:49.208454Z
osv-2022-474 Heap-double-free in config_parse_nft_set_context 2022-06-13T00:00:44.235758Z 2022-06-13T00:00:44.236019Z
osv-2022-473 Stack-buffer-overflow in input_osc_52 2022-06-13T00:00:43.680059Z 2022-06-13T00:00:43.680337Z
osv-2022-472 Heap-double-free in nft_set_context_free_many 2022-06-12T00:02:00.632767Z 2022-06-12T00:02:00.632977Z
osv-2022-468 Heap-buffer-overflow in json_parse 2022-06-12T00:00:08.434300Z 2022-06-12T00:00:08.434602Z
osv-2022-467 Security exception in jaz.Zer.<clinit> 2022-06-10T00:00:30.386864Z 2022-06-10T00:00:30.387111Z
osv-2022-463 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec 2022-06-08T00:00:50.179167Z 2022-06-08T00:00:50.179440Z
osv-2022-462 Stack-buffer-overflow in strcat 2022-06-07T00:01:47.521548Z 2026-02-08T14:10:42.909724Z
osv-2022-460 Heap-use-after-free in inflate 2022-06-06T00:01:38.349008Z 2022-06-09T00:43:11.909085Z
osv-2022-458 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec 2022-06-04T00:01:54.560493Z 2022-06-04T00:01:54.560720Z
osv-2022-457 Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map 2022-06-04T00:01:52.823074Z 2022-06-04T00:01:52.823308Z
osv-2022-456 Null-dereference READ in load_glyph 2022-06-04T00:01:31.294896Z 2022-06-04T00:01:31.295128Z
ID Description Published Updated
bit-joomla-2020-11891 2025-04-03T14:10:00.912Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-11890 2025-04-03T14:09:56.804Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-11889 2025-04-03T14:09:52.491Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-10243 2025-04-03T14:09:48.487Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-10242 2025-04-03T14:09:45.193Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-10241 2025-04-03T14:09:41.599Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-10240 2025-04-03T14:09:37.802Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-10239 2025-04-03T14:09:34.111Z 2025-04-03T14:40:37.652Z
bit-joomla-2020-10238 2025-04-03T14:09:30.406Z 2025-04-03T14:40:37.652Z
bit-mlflow-2025-0453 Denial of Service through Batched Queries in GraphQL in mlflow/mlflow 2025-04-03T09:02:58.147Z 2025-05-20T10:02:07.006Z
bit-mlflow-2024-6838 Uncontrolled Resource Consumption in mlflow/mlflow 2025-04-02T07:17:05.688Z 2025-05-20T10:02:07.006Z
bit-appsmith-2024-55963 2025-04-02T07:06:56.893Z 2025-04-03T14:40:37.652Z
bit-appsmith-2024-55964 2025-04-02T07:06:54.525Z 2025-04-03T14:40:37.652Z
bit-gitlab-2024-10307 Allocation of Resources Without Limits or Throttling in GitLab 2025-04-01T08:18:31.847Z 2025-08-13T06:08:53.695Z
bit-gitlab-2024-12619 Insufficient Granularity of Access Control in GitLab 2025-04-01T08:16:40.753Z 2025-08-13T06:08:53.695Z
bit-gitlab-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab 2025-03-29T07:12:34.592Z 2025-08-13T06:08:53.695Z
bit-gitlab-2025-0811 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-03-29T07:11:18.091Z 2025-08-13T06:08:53.695Z
bit-gitlab-2025-2242 Incorrect Authorization in GitLab 2025-03-29T07:10:26.493Z 2025-08-13T06:08:53.695Z
bit-gitlab-2025-2255 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-03-29T07:10:19.692Z 2025-08-13T06:08:53.695Z
bit-discourse-2025-24808 Discourse has race condition when adding users to a group DM 2025-03-28T09:46:39.640Z 2025-08-26T06:08:52.180Z
bit-discourse-2025-24972 Discourse may bypass user preference when adding users to chat groups 2025-03-28T09:46:35.742Z 2025-05-20T10:02:07.006Z
bit-mlflow-2025-1474 Weak Password Requirements in mlflow/mlflow 2025-03-28T07:22:47.450Z 2025-05-20T10:02:07.006Z
bit-rabbitmq-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI 2025-03-27T07:51:20.693Z 2025-05-20T10:02:07.006Z
bit-cilium-2025-30162 East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers 2025-03-26T07:08:03.178Z 2025-09-09T06:08:46.021Z
bit-cilium-2025-30163 Node based network policies may incorrectly allow workload traffic 2025-03-26T07:07:58.967Z 2025-09-09T06:08:46.021Z
bit-varnish-2025-30346 2025-03-25T07:44:36.946Z 2025-04-03T14:40:37.652Z
bit-parse-2025-30168 Parse Server has an OAuth login vulnerability 2025-03-25T07:27:47.242Z 2025-05-20T10:02:07.006Z
bit-envoy-2025-30157 Envoy crashes when HTTP ext_proc processes local replies 2025-03-25T07:10:09.552Z 2025-05-20T10:02:07.006Z
bit-gitlab-2024-12380 Generation of Error Message Containing Sensitive Information in GitLab 2025-03-15T07:42:28.195Z 2025-08-07T09:23:45.368Z
bit-gitlab-2024-13054 Allocation of Resources Without Limits or Throttling in GitLab 2025-03-15T07:41:20.300Z 2025-05-20T10:02:07.006Z
ID Description Updated
ID Description Published Updated
certfr-2025-avi-0055 Multiples vulnérabilités dans Oracle PeopleSoft 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0054 Multiples vulnérabilités dans Oracle MySQL 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0053 Multiples vulnérabilités dans Oracle Java SE 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0052 Multiples vulnérabilités dans Oracle Database Server 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0051 Multiples vulnérabilités dans phpMyAdmin 2025-01-22T00:00:00.000000 2025-01-22T00:00:00.000000
certfr-2025-avi-0050 Multiples vulnérabilités dans les produits Elastic 2025-01-21T00:00:00.000000 2025-01-21T00:00:00.000000
certfr-2025-avi-0049 Multiples vulnérabilités dans Microsoft Edge 2025-01-20T00:00:00.000000 2025-01-20T00:00:00.000000
certfr-2025-avi-0048 Vulnérabilité dans Microsoft Windows 2025-01-17T00:00:00.000000 2025-01-17T00:00:00.000000
certfr-2025-avi-0047 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-01-17T00:00:00.000000 2025-01-17T00:00:00.000000
certfr-2025-avi-0046 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-01-17T00:00:00.000000 2025-01-17T00:00:00.000000
certfr-2025-avi-0045 Multiples vulnérabilités dans les produits IBM 2025-01-17T00:00:00.000000 2025-01-17T00:00:00.000000
certfr-2025-avi-0044 Vulnérabilité dans les produits Moxa 2025-01-17T00:00:00.000000 2025-01-17T00:00:00.000000
certfr-2025-avi-0043 Multiples vulnérabilités dans SPIP 2025-01-17T00:00:00.000000 2026-02-25T00:00:00.000000
certfr-2025-avi-0042 Vulnérabilité dans le greffon Splunk Supporting pour Active Directory 2025-01-16T00:00:00.000000 2025-01-16T00:00:00.000000
certfr-2025-avi-0041 Multiples vulnérabilités dans les produits Microsoft 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0040 Multiples vulnérabilités dans Microsoft .Net 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0039 Multiples vulnérabilités dans Microsoft Windows 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0038 Multiples vulnérabilités dans Microsoft Office 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0037 Vulnérabilité dans Microsoft Edge 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0036 Multiples vulnérabilités dans les produits Moxa 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0035 Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0034 Multiples vulnérabilités dans les produits Schneider Electric 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0033 Multiples vulnérabilités dans Google Chrome 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0032 Multiples vulnérabilités dans HPE Aruba Networking AOS 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0031 Multiples vulnérabilités dans les produits Fortinet 2025-01-15T00:00:00.000000 2025-01-15T00:00:00.000000
certfr-2025-avi-0030 Multiples vulnérabilités dans les produits Fortinet 2025-01-14T00:00:00.000000 2025-02-12T00:00:00.000000
certfr-2025-avi-0029 Multiples vulnérabilités dans les produits Siemens 2025-01-14T00:00:00.000000 2025-01-14T00:00:00.000000
certfr-2025-avi-0028 Multiples vulnérabilités dans Typo3 2025-01-14T00:00:00.000000 2025-01-14T00:00:00.000000
certfr-2025-avi-0027 Multiples vulnérabilités dans les produits SAP 2025-01-14T00:00:00.000000 2025-01-14T00:00:00.000000
certfr-2025-avi-0026 Vulnérabilité dans Veeam Backup pour Microsoft Azure 2025-01-14T00:00:00.000000 2025-01-14T00:00:00.000000
ID Description Published Updated
jvndb-2017-000058 Tablacus Explorer vulnerable to script injection 2017-04-07T14:47+09:00 2017-06-01T15:24+09:00
jvndb-2016-006450 Vulnerability in JP1/Cm2/Network Node Manager i 2017-03-30T15:01+09:00 2017-03-30T15:01+09:00
jvndb-2017-000044 CentreCOM AR260S V2 vulnerable to privilege escalation 2017-03-30T14:37+09:00 2017-06-05T10:51+09:00
jvndb-2017-000050 WordPress plugin "YOP Poll" vulnerable to cross-site scripting 2017-03-23T12:23+09:00 2017-06-01T15:08+09:00
jvndb-2017-000049 Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries 2017-03-22T14:43+09:00 2017-06-01T17:16+09:00
jvndb-2017-000047 Security guide for website operators vulnerable to OS command injection 2017-03-16T13:32+09:00 2017-06-01T15:08+09:00
jvndb-2017-000045 Cybozu KUNAI for Android information management vulnerability 2017-03-13T13:42+09:00 2017-06-02T18:04+09:00
jvndb-2017-000043 OneThird CMS vulnerable to cross-site scripting 2017-03-08T09:57+09:00 2017-06-01T15:08+09:00
jvndb-2017-000042 OneThird CMS vulnerable to cross-site scripting 2017-03-08T09:57+09:00 2017-06-01T12:28+09:00
jvndb-2017-000041 Multiple I-O DATA network camera products vulnerable to buffer overflow 2017-03-02T14:36+09:00 2017-06-05T11:10+09:00
jvndb-2017-000040 Multiple I-O DATA network camera products vulnerable to OS command injection 2017-03-02T14:36+09:00 2017-06-06T15:52+09:00
jvndb-2017-000039 Multiple I-O DATA network camera products vulnerable to HTTP header injection 2017-03-02T14:36+09:00 2017-06-06T15:52+09:00
jvndb-2017-000034 Access CX App fails to verify SSL server certificates 2017-03-01T16:31+09:00 2017-06-05T11:26+09:00
jvndb-2017-000033 PrimeDrive Desktop Application Installer may insecurely load Dynamic Link Libraries 2017-03-01T15:53+09:00 2017-05-15T11:27+09:00
jvndb-2017-000037 WBCE CMS vulnerable to SQL injection 2017-02-28T14:22+09:00 2017-06-01T12:28+09:00
jvndb-2017-000036 WBCE CMS vulnerable to directory traversal 2017-02-28T14:21+09:00 2017-06-01T12:28+09:00
jvndb-2017-000035 WBCE CMS vulnerable to cross-site scripting 2017-02-28T14:21+09:00 2017-06-01T12:28+09:00
jvndb-2017-000038 CubeCart vulnerable to directory traversal 2017-02-28T14:13+09:00 2017-06-01T12:18+09:00
jvndb-2017-000032 Cybozu Garoon fails to restrict access permission in the mail function 2017-02-20T15:40+09:00 2017-06-01T15:05+09:00
jvndb-2017-000031 Cybozu Garoon fails to restrict access permission in Workflow and the function "MultiReport" 2017-02-20T15:40+09:00 2017-06-01T15:05+09:00
jvndb-2017-000030 Cybozu Garoon vulnerable to information disclosure 2017-02-20T15:40+09:00 2017-06-01T15:05+09:00
jvndb-2017-000029 Cybozu Garoon vulnerable to cross-site scripting 2017-02-20T15:38+09:00 2017-06-01T15:05+09:00
jvndb-2017-000028 Cybozu Garoon fails to restrict access permission in the Phone Messages function 2017-02-20T15:38+09:00 2017-06-01T15:05+09:00
jvndb-2017-000027 Cybozu Garoon vulnerable to SQL injection 2017-02-20T15:38+09:00 2017-06-01T15:05+09:00
jvndb-2017-000024 Self-Extracting Archives created by 7-ZIP32.DLL may insecurely load Dynamic Link Libraries 2017-02-17T15:13+09:00 2017-06-05T11:55+09:00
jvndb-2017-000026 Apache Brooklyn vulnerable to cross-site request forgery 2017-02-15T16:20+09:00 2018-03-07T14:35+09:00
jvndb-2017-000025 Apache Brooklyn vulnerable to cross-site scripting 2017-02-15T16:20+09:00 2017-02-15T16:20+09:00
jvndb-2017-000023 TVer App for Android fails to verify SSL server certificates 2017-02-10T15:14+09:00 2017-06-06T11:52+09:00
jvndb-2017-000015 Norton Download Manager may insecurely load Dynamic Link Libraries 2017-02-10T14:58+09:00 2017-02-10T14:58+09:00
jvndb-2017-000019 Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to DNS rebinding 2017-02-09T14:47+09:00 2017-06-01T11:30+09:00
ID Description Published Updated
cnvd-2025-30923 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30923) 2025-12-15 2025-12-18
cnvd-2025-30922 Adobe Experience Manager跨站脚本漏洞(CNVD-2025-30922) 2025-12-15 2025-12-18
cnvd-2025-30861 AzeoTech DAQFactory越界写入漏洞 2025-12-15 2025-12-17
cnvd-2025-30860 AzeoTech DAQFactory越界读取漏洞 2025-12-15 2025-12-17
cnvd-2025-30859 AzeoTech DAQFactory缓冲区溢出漏洞 2025-12-15 2025-12-17
cnvd-2025-30858 AzeoTech DAQFactory内存损坏漏洞 2025-12-15 2025-12-17
cnvd-2025-30857 AzeoTech DAQFactory释放后使用漏洞 2025-12-15 2025-12-17
cnvd-2025-30856 AzeoTech DAQFactory堆栈缓冲区溢出漏洞 2025-12-15 2025-12-17
cnvd-2026-17160 Microsoft Hyper-V拒绝服务漏洞(CNVD-2026-17160) 2025-12-12 2026-04-14
cnvd-2026-14410 Microsoft Exchange Server欺骗漏洞(CNVD-2026-14410) 2025-12-12 2026-03-20
cnvd-2026-11809 Microsoft Windows Routing and Remote Access Service远程代码执行漏洞 2025-12-12 2026-02-28
cnvd-2026-06337 用友网络科技股份有限公司U8 cloud存在信息泄露漏洞 2025-12-12 2026-01-26
cnvd-2026-06272 用友网络科技股份有限公司U8 cloud存在SQL注入漏洞(CNVD-2026-06272) 2025-12-12 2026-01-26
cnvd-2025-30875 MailEnable WindowContext参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30874 MailEnable代码问题漏洞 2025-12-12 2025-12-17
cnvd-2025-30873 MailEnable theme参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30872 MailEnable Id参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30871 MailEnable Message参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30870 MailEnable InstanceScope参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30869 MailEnable FieldTo参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30868 MailEnable FieldCc参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30867 MailEnable FieldBcc参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30866 MailEnable AddressesTo参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30865 MailEnable AddressesCc参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30864 MailEnable AddressesBcc参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30863 MailEnable Failed参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30862 MailEnable Added参数跨站脚本漏洞 2025-12-12 2025-12-17
cnvd-2025-30770 Tenda CH22缓冲区溢出漏洞(CNVD-2025-30770) 2025-12-12 2025-12-15
cnvd-2025-30741 WordPress Essential Widgets plugin跨站脚本漏洞 2025-12-12 2025-12-15
cnvd-2025-30740 WordPress Donation Thermometer plugin跨站脚本漏洞 2025-12-12 2025-12-15
ID Description Published Updated
bdu:2026-00058 Уязвимость программного обеспечения для проведения онлайн-экзаменов Tecnick TCExam, связа… 06.01.2026 06.01.2026
bdu:2026-00057 Уязвимость сетевой файловой системы Network File System (NFS) операционной систем Synolog… 06.01.2026 06.01.2026
bdu:2026-00056 Уязвимость системы управления контентом Sitecore Experience Platform (XP) и Sitecore Expe… 06.01.2026 06.01.2026
bdu:2026-00055 Уязвимость приложения для хранения мультимедийных файлов QuMagie для QNAP NAS, связанная … 06.01.2026 06.01.2026
bdu:2026-00054 Уязвимость беспроводного модемного модуля SIMCom SIM7600G, связанная с наличием недокумен… 06.01.2026 06.01.2026
bdu:2026-00053 Уязвимость микропрограммного обеспечения программируемого логических контроллеров Siemens… 06.01.2026 06.01.2026
bdu:2026-00052 Уязвимость микропрограммного обеспечения программируемого логических контроллеров Siemens… 06.01.2026 06.01.2026
bdu:2026-00051 Уязвимость микропрограммного обеспечения программируемого логических контроллеров Siemens… 06.01.2026 06.01.2026
bdu:2026-00050 Уязвимость набора инструментов конвертации файлов между различными форматами PS/IGES Para… 06.01.2026 06.01.2026
bdu:2026-00049 Уязвимость веб-интерфейса микропрограммного обеспечения маршрутизатора LB-Link BL-CPE300M… 06.01.2026 06.01.2026
bdu:2026-00048 Уязвимость компонента API Endpoint бэк-офисного приложения Rising Technosoft CAP Back Off… 06.01.2026 06.01.2026
bdu:2026-00047 Уязвимость реализации механизма OTP бэк-офисного приложения Rising Technosoft CAP Back Of… 06.01.2026 06.01.2026
bdu:2026-00046 Уязвимость компонента API Endpoint бэк-офисного приложения Rising Technosoft CAP Back Off… 06.01.2026 06.01.2026
bdu:2026-00045 Уязвимость компонента API Endpoint бэк-офисного приложения Rising Technosoft CAP Back Off… 06.01.2026 06.01.2026
bdu:2026-00044 Уязвимость компонента API Endpoint бэк-офисного приложения Rising Technosoft CAP Back Off… 06.01.2026 06.01.2026
bdu:2026-00043 Уязвимость программной платформы для управления вики Requarks Wiki.js, связанная с неверн… 03.01.2026 03.01.2026
bdu:2026-00042 Уязвимость aap-шлюза системы управления конфигурациями Ansible, позволяющая нарушителю по… 03.01.2026 03.01.2026
bdu:2026-00041 Уязвимость операционной системы NVIDIA DGX OS рабочих станций для искусственного интеллек… 03.01.2026 03.01.2026
bdu:2026-00040 Уязвимость компонента Director NBR системы резервного копирования, репликации и восстанов… 03.01.2026 03.01.2026
bdu:2026-00039 Уязвимость микропрограммного обеспечения дорожного блока связи Kapsch TrafficCom RIS-9260… 03.01.2026 03.01.2026
bdu:2026-00038 Уязвимость debug-интерфейса микропрограммного обеспечения логических контроллеров JUMO v… 03.01.2026 03.01.2026
bdu:2026-00037 Уязвимость микропрограммного обеспечения маршрутизатора I-O Data Device UD-LT2, существую… 03.01.2026 03.01.2026
bdu:2026-00036 Уязвимость библиотеки Go Getter, связанная с некорректным определением символических ссыл… 03.01.2026 03.01.2026
bdu:2026-00035 Уязвимость реализации модуля httpd микропрограммного обеспечения усилителя беспроводного … 03.01.2026 03.01.2026
bdu:2026-00034 Уязвимость реализации модуля httpd микропрограммного обеспечения усилителя беспроводного … 03.01.2026 03.01.2026
bdu:2026-00033 Уязвимость программного обеспечения для работы с PDF-файлами UPDF операционных систем Win… 03.01.2026 03.01.2026
bdu:2026-00032 Уязвимость программного обеспечения для работы с PDF-файлами UPDF операционных систем Win… 03.01.2026 03.01.2026
bdu:2026-00031 Уязвимость программного обеспечения для работы с PDF-файлами UPDF операционных систем Win… 03.01.2026 03.01.2026
bdu:2026-00030 Уязвимость компонента управления пользователями User Management Component (UMC) веб-систе… 03.01.2026 03.01.2026
bdu:2026-00029 Уязвимость компонента управления пользователями User Management Component (UMC) веб-систе… 03.01.2026 03.01.2026
ID Description Updated
var-202602-3107 Tenda FH1203 V2.0.1.6 contains a stack-based buffer overflow vulnerability in the modify_… 2026-03-03T23:36:58.023000Z
var-202602-3168 Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1,… 2026-03-03T23:27:02.870000Z
var-202602-3216 Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1,… 2026-03-03T23:25:23.865000Z
var-200609-1587 The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Appl… 2026-03-03T22:40:50.747000Z
var-201206-0062 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-03T22:28:03.447000Z
var-200609-1245 Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and … 2026-03-03T22:21:35.197000Z
var-201304-0106 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2026-03-03T22:08:23.709000Z
var-200609-0699 Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user… 2026-03-03T22:00:56.312000Z
var-201601-0016 Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before … 2026-03-03T21:51:15.603000Z
var-201410-1144 Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0… 2026-03-03T21:24:07.760000Z
var-200110-0214 The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely cre… 2026-03-03T21:12:00.858000Z
var-201201-0170 Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK i… 2026-03-03T21:08:19.245000Z
var-200609-0680 The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not prope… 2026-03-03T20:40:03.198000Z
var-200609-1236 Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, whe… 2026-03-03T20:37:31.545000Z
var-200110-0349 OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… 2026-03-03T20:35:26.896000Z
var-202302-0482 A timing based side channel exists in the OpenSSL RSA Decryption implementation which cou… 2026-03-03T20:13:38.229000Z
var-200609-1080 WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote atta… 2026-03-03T20:08:38.362000Z
var-200609-0718 The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… 2026-03-03T19:44:00.179000Z
var-200609-1389 Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user… 2026-03-02T23:29:33.338000Z
var-200609-0686 Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, whe… 2026-03-02T23:18:03.399000Z
var-200110-0440 2026-03-02T22:40:52.535000Z
var-200110-0446 OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… 2026-03-02T22:15:59.056000Z
var-200609-1096 Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 throug… 2026-03-02T22:00:06.242000Z
var-200609-1724 WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote atta… 2026-03-02T20:59:44.423000Z
var-200609-1189 The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Appl… 2026-03-02T20:37:38.954000Z
var-200609-0988 The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.… 2026-03-02T20:12:22.401000Z
var-200609-1034 The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… 2026-03-02T20:09:26.715000Z
var-200110-0429 Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox … 2025-12-22T23:19:47.551000Z
var-201505-0233 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server bu… 2025-12-22T23:16:33.731000Z
var-200609-1325 Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted … 2025-12-22T23:04:56.358000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated