Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-3605 |
8.1 (3.1)
|
Vault KVv2 Metadata and Secret Deletion Policy Bypass … |
HashiCorp |
Vault |
2026-04-17T02:44:42.032Z | 2026-04-17T17:57:55.431Z |
| CVE-2026-4666 |
6.5 (3.1)
|
wpForo Forum <= 2.4.16 - Missing Authorization to Auth… |
tomdever |
wpForo Forum |
2026-04-17T02:25:04.892Z | 2026-04-20T14:59:31.196Z |
| CVE-2026-3488 |
6.5 (3.1)
|
WP Statistics <= 14.16.4 - Missing Authorization to Au… |
veronalabs |
WP Statistics – Simple, privacy-friendly Google Analytics alternative |
2026-04-17T01:24:37.967Z | 2026-04-17T12:25:12.232Z |
| CVE-2026-5231 |
7.2 (3.1)
|
WP Statistics <= 14.16.4 - Unauthenticated Stored Cros… |
veronalabs |
WP Statistics – Simple, privacy-friendly Google Analytics alternative |
2026-04-17T01:24:37.573Z | 2026-04-17T14:30:43.119Z |
| CVE-2026-4817 |
6.5 (3.1)
|
MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+… |
stylemix |
MasterStudy LMS WordPress Plugin – for Online Courses and Education |
2026-04-17T01:24:37.193Z | 2026-04-17T18:39:48.201Z |
| CVE-2026-5162 |
6.4 (3.1)
|
Royal Addons for Elementor <= 1.7.1056 - Authenticated… |
wproyal |
Royal Addons for Elementor – Addons and Templates Kit for Elementor |
2026-04-17T01:24:36.629Z | 2026-04-17T18:48:24.671Z |
| CVE-2026-37749 |
9.8 (3.1)
|
A SQL injection vulnerability in CodeAstro Simple… |
n/a |
n/a |
2026-04-17T00:00:00.000Z | 2026-04-17T15:23:39.696Z |
| CVE-2026-31317 |
7.5 (3.1)
|
Craftql v1.3.7 and before is vulnerable to Server… |
n/a |
n/a |
2026-04-17T00:00:00.000Z | 2026-04-20T14:59:43.878Z |
| CVE-2025-70795 |
5.5 (3.1)
|
STProcessMonitor 11.11.4.0, part of the Safetica … |
n/a |
n/a |
2026-04-17T00:00:00.000Z | 2026-04-17T14:58:56.485Z |
| CVE-2026-40265 |
5.9 (3.1)
|
Note Mark has Broken Access Control on Asset Download |
enchant97 |
note-mark |
2026-04-16T23:56:02.961Z | 2026-04-17T18:40:45.157Z |
| CVE-2026-40263 |
3.7 (3.1)
|
Note Mark: Username Enumeration via Login Endpoint Tim… |
enchant97 |
note-mark |
2026-04-16T23:53:50.195Z | 2026-04-17T12:23:42.042Z |
| CVE-2026-40262 |
8.7 (3.1)
|
Note Mark has Stored XSS via Unrestricted Asset Upload |
enchant97 |
note-mark |
2026-04-16T23:51:38.679Z | 2026-04-18T02:51:02.474Z |
| CVE-2026-22734 |
8.6 (3.1)
|
Cloud Foundry UAA SAML 2.0 Signature Bypass |
Cloud Foundry |
UUA |
2026-04-16T23:33:43.596Z | 2026-04-17T13:21:04.331Z |
| CVE-2026-40260 |
6.9 (4.0)
|
pypdf: Manipulated XMP metadata entity declarations ca… |
py-pdf |
pypdf |
2026-04-16T23:18:26.687Z | 2026-04-17T18:42:05.059Z |
| CVE-2026-40922 |
5.3 (4.0)
|
SiYuan: Incomplete sanitization of bazaar README allow… |
siyuan-note |
siyuan |
2026-04-16T23:14:00.592Z | 2026-04-20T14:59:52.008Z |
| CVE-2026-40322 |
9.1 (3.1)
|
SiYuan: Mermaid `javascript:` Link Injection Leads to … |
siyuan-note |
siyuan |
2026-04-16T23:00:07.719Z | 2026-04-17T12:26:06.118Z |
| CVE-2026-40318 |
8.5 (3.1)
|
SiYuan: Publish Reader Path Traversal Delete via `remo… |
siyuan-note |
siyuan |
2026-04-16T22:54:47.881Z | 2026-04-18T02:48:57.193Z |
| CVE-2026-40259 |
8.1 (3.1)
|
SiYuan: Publish Reader Can Arbitrarily Delete Attribut… |
siyuan-note |
siyuan |
2026-04-16T22:49:36.992Z | 2026-04-20T14:59:59.417Z |
| CVE-2024-58343 |
4.3 (3.1)
|
Vision Helpdesk before 5.7.0 (patched in 5.6.10) … |
Vision |
Helpdesk |
2026-04-16T22:27:03.084Z | 2026-04-17T13:31:05.652Z |
| CVE-2026-40255 |
6.1 (3.1)
|
@adonisjs/http-server has an Open Redirect vulnerability |
adonisjs |
http-server |
2026-04-16T22:25:38.155Z | 2026-04-17T18:43:10.697Z |
| CVE-2026-40253 |
6.8 (3.1)
|
openCryptoki: Memory safety vulnerabilities in BER/DER… |
opencryptoki |
opencryptoki |
2026-04-16T22:04:44.005Z | 2026-04-17T12:27:41.682Z |
| CVE-2026-41113 |
8.1 (3.1)
|
sagredo qmail before 2026.04.07 allows tls_quit r… |
sagredo |
qmail |
2026-04-16T22:02:10.225Z | 2026-04-18T20:09:47.901Z |
| CVE-2026-40249 |
6.9 (4.0)
|
free5gc UDR fail-open request handling in PolicyDataSu… |
free5gc |
free5gc |
2026-04-16T21:59:36.282Z | 2026-04-18T02:47:28.094Z |
| CVE-2026-40248 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:57:13.101Z | 2026-04-20T15:00:17.552Z |
| CVE-2026-40247 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:54:04.151Z | 2026-04-17T18:44:09.831Z |
| CVE-2026-40246 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:40:03.598Z | 2026-04-18T02:46:14.355Z |
| CVE-2026-40170 |
7.5 (3.1)
|
ngtcp2 has a qlog transport parameter serialization st… |
ngtcp2 |
ngtcp2 |
2026-04-16T21:34:07.610Z | 2026-04-20T15:00:26.193Z |
| CVE-2026-40308 |
8.8 (4.0)
|
My Calendar: Unauthenticated Information Disclosure (I… |
joedolson |
my-calendar |
2026-04-16T21:30:52.401Z | 2026-04-17T12:32:26.622Z |
| CVE-2026-39313 |
8.7 (4.0)
|
MCP-Framework: Unbounded memory allocation in readRequ… |
QuantGeekDev |
mcp-framework |
2026-04-16T21:24:27.328Z | 2026-04-17T18:46:07.726Z |
| CVE-2026-35469 |
8.7 (4.0)
|
SpdyStream: DOS on CRI |
moby |
spdystream |
2026-04-16T21:19:23.516Z | 2026-04-17T12:37:27.329Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-36568 |
7.8 (3.1)
|
Dell PowerProtect Data Domain BoostFS for client … |
Dell |
PowerProtect Data Domain BoostFS |
2026-04-17T08:12:17.696Z | 2026-04-18T03:55:51.109Z |
| CVE-2025-15625 |
9.5 (4.0)
|
Unauthenticated execution of arbitrary SQL queries in … |
Sparx Systems Pty Ltd. |
Sparx Pro Cloud Server |
2026-04-17T08:38:59.972Z | 2026-04-17T11:46:37.537Z |
| CVE-2025-15624 |
9.3 (4.0)
|
Plaintext Storage of a Password in Sparx Pro Cloud Server. |
Sparx Systems Pty Ltd. |
Sparx Pro Cloud Server |
2026-04-17T08:38:36.968Z | 2026-04-17T11:58:38.118Z |
| CVE-2025-15623 |
9.3 (4.0)
|
Sparx Pro Cloud Server reveals sensitive information t… |
Sparx Systems Pty Ltd. |
Sparx Pro Cloud Server |
2026-04-17T08:37:27.611Z | 2026-04-17T12:19:21.714Z |
| CVE-2025-15622 |
6.2 (4.0)
|
Sparx Enterprise Architect Client reveals plaintext OA… |
Sparx Systems Pty Ltd. |
Sparx Enterprise Architect |
2026-04-17T08:35:05.019Z | 2026-04-17T12:56:53.740Z |
| CVE-2026-6451 |
4.3 (3.1)
|
CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Req… |
tholstkabelbwde |
Plugin: CMS für Motorrad Werkstätten |
2026-04-17T07:45:57.242Z | 2026-04-17T14:21:59.771Z |
| CVE-2026-40002 |
5 (3.1)
|
ZTE Red Magic 11 Pro (NX809J) contains a vulnerability… |
ZTE |
Red Magic 11 Pro (NX809J) |
2026-04-17T07:40:58.277Z | 2026-04-17T12:11:37.153Z |
| CVE-2026-33392 |
7.2 (3.1)
|
In JetBrains YouTrack before 2025.3.131383 high p… |
JetBrains |
YouTrack |
2026-04-17T07:46:11.710Z | 2026-04-18T03:55:54.262Z |
| CVE-2026-23853 |
8.4 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain |
2026-04-17T07:16:26.138Z | 2026-04-18T03:55:52.619Z |
| CVE-2026-6443 |
9.8 (3.1)
|
Essentialplugin Plugins (Various Versions) - Injected … |
essentialplugin |
Accordion and Accordion Slider |
2026-04-17T06:44:49.128Z | 2026-04-21T19:53:07.705Z |
| CVE-2026-6441 |
4.3 (3.1)
|
Canto <= 3.1.1 - Missing Authorization to Authenticate… |
flightbycanto |
Canto |
2026-04-17T06:44:50.145Z | 2026-04-17T16:39:26.532Z |
| CVE-2026-4659 |
7.5 (3.1)
|
Unlimited Elements For Elementor <= 2.0.6 - Authentica… |
unitecms |
Unlimited Elements For Elementor |
2026-04-17T06:44:49.739Z | 2026-04-17T12:14:39.811Z |
| CVE-2026-6482 |
8.5 (4.0)
|
Local Privilege Escalation via OpenSSL configuration f… |
Rapid7 |
Insight Agent |
2026-04-17T05:19:20.485Z | 2026-04-18T03:55:55.477Z |
| CVE-2026-6421 |
7.3 (4.0)
7 (3.1)
7 (3.0)
|
Mobatek MobaXterm Home Edition msimg32.dll uncontrolle… |
Mobatek |
MobaXterm Home Edition |
2026-04-17T05:45:11.921Z | 2026-04-17T18:37:21.676Z |
| CVE-2026-5797 |
5.3 (3.1)
|
Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticat… |
expresstech |
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker |
2026-04-17T05:29:26.679Z | 2026-04-17T11:14:55.597Z |
| CVE-2026-35496 |
2.7 (3.0)
5.1 (4.0)
|
A path traversal vulnerability exists in CubeCart… |
CubeCart Limited |
CubeCart |
2026-04-17T04:33:49.813Z | 2026-04-17T12:18:33.735Z |
| CVE-2026-34018 |
6.3 (3.0)
5.1 (4.0)
|
An SQL injection vulnerability exists in CubeCart… |
CubeCart Limited |
CubeCart |
2026-04-17T04:33:35.768Z | 2026-04-17T12:20:12.217Z |
| CVE-2026-21719 |
7.2 (3.0)
8.6 (4.0)
|
An OS command injection vulnerability exists in C… |
CubeCart Limited |
CubeCart |
2026-04-17T04:33:17.708Z | 2026-04-17T12:21:48.770Z |
| CVE-2026-6080 |
6.5 (3.1)
|
Tutor LMS <= 3.9.8 - Authenticated (Admin+) SQL Inject… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-04-17T03:36:44.234Z | 2026-04-20T14:59:23.108Z |
| CVE-2026-5807 |
7.5 (3.1)
|
Vault Vulnerable to Denial-of-Service via Unauthentica… |
HashiCorp |
Vault |
2026-04-17T03:22:13.816Z | 2026-04-17T17:57:55.504Z |
| CVE-2026-5502 |
5.3 (3.1)
|
Tutor LMS <= 3.9.8 - Authenticated (Subscriber+) Arbit… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-04-17T03:36:45.463Z | 2026-04-17T14:28:01.492Z |
| CVE-2026-5427 |
5.3 (3.1)
|
Kubio AI Page Builder <= 2.7.2 - Missing Authorization… |
extendthemes |
Kubio AI Page Builder |
2026-04-17T03:36:44.993Z | 2026-04-17T18:48:57.774Z |
| CVE-2026-5234 |
5.3 (3.1)
|
LatePoint <= 5.3.2 - Insecure Direct Object Reference … |
latepoint |
LatePoint – Calendar Booking Plugin for Appointments and Events |
2026-04-17T03:36:44.618Z | 2026-04-17T18:38:40.183Z |
| CVE-2026-4853 |
4.9 (3.1)
|
JetBackup <= 3.1.19.8 - Authenticated (Administrator+)… |
backupguard |
JetBackup – Backup, Restore & Migrate |
2026-04-17T03:36:43.041Z | 2026-04-17T12:23:01.736Z |
| CVE-2026-3330 |
4.9 (3.1)
|
Form Maker by 10Web <= 1.15.40 - Authenticated (Admini… |
10web |
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder |
2026-04-17T03:36:43.818Z | 2026-04-17T11:15:39.808Z |
| CVE-2026-5052 |
5.3 (3.1)
|
Vault Vulnerable to Server-Side Request Forgery in ACM… |
HashiCorp |
Vault |
2026-04-17T02:55:25.080Z | 2026-04-17T17:57:55.377Z |
| CVE-2026-4666 |
6.5 (3.1)
|
wpForo Forum <= 2.4.16 - Missing Authorization to Auth… |
tomdever |
wpForo Forum |
2026-04-17T02:25:04.892Z | 2026-04-20T14:59:31.196Z |
| CVE-2026-4525 |
7.5 (3.1)
|
Vault Token Leaked to Backends via Authorization: Bear… |
HashiCorp |
Vault |
2026-04-17T03:00:47.561Z | 2026-04-17T17:22:41.255Z |
| CVE-2026-3605 |
8.1 (3.1)
|
Vault KVv2 Metadata and Secret Deletion Policy Bypass … |
HashiCorp |
Vault |
2026-04-17T02:44:42.032Z | 2026-04-17T17:57:55.431Z |
| CVE-2026-5231 |
7.2 (3.1)
|
WP Statistics <= 14.16.4 - Unauthenticated Stored Cros… |
veronalabs |
WP Statistics – Simple, privacy-friendly Google Analytics alternative |
2026-04-17T01:24:37.573Z | 2026-04-17T14:30:43.119Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-4p6q-866h-54p2 |
5.5 (3.1)
|
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an autho… | 2026-04-14T18:30:40Z | 2026-04-14T18:30:40Z |
| ghsa-49pj-8x2g-xv47 |
7.0 (3.1)
|
Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker … | 2026-04-14T18:30:40Z | 2026-04-14T18:30:40Z |
| ghsa-39cm-frwr-45jg |
7.0 (3.1)
|
Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:40Z | 2026-04-14T18:30:40Z |
| ghsa-2h57-5ppx-7x34 |
7.8 (3.1)
|
Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges l… | 2026-04-14T18:30:40Z | 2026-04-14T18:30:40Z |
| ghsa-xmhh-m2j3-cr44 |
7.8 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-wjm4-8wvf-p2wh |
7.0 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-vc2v-8x68-8543 |
7.8 (3.1)
|
Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-r922-wwg3-2m7q |
7.8 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-r6mh-9cf6-57vw |
7.0 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-pp9c-r6jh-wg6j |
6.5 (3.1)
|
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacke… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-p4gm-5fr5-gvj4 |
7.8 (3.1)
|
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an autho… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-mfwr-mq7p-278f |
7.5 (3.1)
|
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an un… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-fqv3-v28j-57fx |
7.0 (3.1)
|
Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-f87h-4vjg-9h8c |
6.2 (3.1)
|
Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoo… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-7jv6-2jq8-rjx4 |
5.5 (3.1)
|
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-7gjh-p2g3-x272 |
5.5 (3.1)
|
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-72h2-6w4v-2j9w |
7.8 (3.1)
|
Improper access control in Microsoft Management Console allows an authorized attacker to elevate pr… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-6qx2-q8q2-jv3c |
8.7 (3.1)
|
Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security fea… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-6m73-7rxg-5fwh |
7.8 (3.1)
|
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an autho… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-5xwg-ccc9-x2gp |
7.8 (3.1)
|
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-5fcq-5c4c-pv57 |
7.8 (3.1)
|
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate pr… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-4v66-3jc4-3xm5 |
7.8 (3.1)
|
Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-465v-48jm-5p9p |
7.0 (3.1)
|
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pr… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-44pc-wvm3-296c |
7.0 (3.1)
|
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to el… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-38cc-gg86-24ch |
7.0 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-2qwh-pgh7-pj9g |
7.0 (3.1)
|
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to el… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-2jf6-4m5x-vv8v |
7.8 (3.1)
|
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an autho… | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-2hhc-69mg-j8fr |
7.0 (3.1)
|
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker … | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-2h4c-cjph-5cr5 |
7.8 (3.1)
|
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:39Z | 2026-04-14T18:30:39Z |
| ghsa-xqjx-4x4r-crvq |
7.8 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:39Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-102 |
|
A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6. | localstack | 2021-05-07T05:15:00Z | 2021-06-22T04:54:56.108960Z |
| pysec-2021-101 |
|
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitra… | localstack | 2021-05-07T05:15:00Z | 2021-06-22T04:54:56.080124Z |
| pysec-2021-8 |
|
In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+)… | django | 2021-05-06T16:15:00Z | 2021-05-12T08:15:00Z |
| pysec-2021-7 |
|
In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, Upl… | django | 2021-05-05T15:15:00Z | 2021-05-13T13:41:00Z |
| pysec-2021-17 |
|
Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22.… | impacket | 2021-05-05T11:15:00Z | 2021-09-01T08:19:03.897095Z |
| pysec-2021-4 |
|
The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to … | apache-airflow | 2021-05-02T08:15:00Z | 2021-05-10T20:07:00Z |
| pysec-2021-64 |
|
django-filter is a generic system for filtering Django QuerySets based on user selections… | django-filter | 2021-04-29T21:15:00Z | 2021-05-10T17:55:00Z |
| pysec-2021-1 |
|
A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by defa… | ansible | 2021-04-29T16:15:00Z | 2021-05-03T20:43:00Z |
| pysec-2021-128 |
|
Apache Superset up to and including 1.0.1 allowed for the creation of an external URL tha… | apache-superset | 2021-04-27T10:15:00Z | 2021-08-27T03:21:55.733407Z |
| pysec-2021-56 |
|
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the … | salt | 2021-04-23T06:15:00Z | 2022-06-21T15:53:31.288525Z |
| pysec-2021-114 |
|
Wagtail is a Django content management system. In affected versions of Wagtail, when savi… | wagtail | 2021-04-19T19:15:00Z | 2021-04-29T14:24:00Z |
| pysec-2021-23 |
|
Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send… | matrix-sydent | 2021-04-15T21:15:00Z | 2021-04-22T15:25:00Z |
| pysec-2021-22 |
|
Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requ… | matrix-sydent | 2021-04-15T21:15:00Z | 2021-04-22T15:27:00Z |
| pysec-2021-21 |
|
Sydent is a reference Matrix identity server. Sydent does not limit the size of requests … | matrix-sydent | 2021-04-15T21:15:00Z | 2021-04-22T17:19:00Z |
| pysec-2021-24 |
|
### Impact Missing input validation of some parameters on the endpoints used to confirm t… | matrix-sydent | 2021-04-15T18:15:00Z | 2021-04-22T17:17:00Z |
| pysec-2021-10 |
|
A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.… | django-debug-toolbar | 2021-04-14T18:15:00Z | 2021-04-21T15:05:00Z |
| pysec-2021-26 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-04-12T22:15:00Z | 2021-04-21T16:45:00Z |
| pysec-2021-25 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-04-12T22:15:00Z | 2021-04-26T18:40:00Z |
| pysec-2021-27 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-04-12T21:15:00Z | 2021-04-21T17:02:00Z |
| pysec-2021-148 |
|
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-… | sickrage | 2021-04-12T14:15:00Z | 2021-08-27T03:22:21.656706Z |
| pysec-2021-147 |
|
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting… | sickrage | 2021-04-12T14:15:00Z | 2021-08-27T03:22:21.507681Z |
| pysec-2021-58 |
|
sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some … | sopel-plugins-channelmgnt | 2021-04-09T16:15:00Z | 2021-05-04T13:59:00Z |
| pysec-2021-18 |
|
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link. | indico | 2021-04-07T14:15:00Z | 2021-04-15T14:13:00Z |
| pysec-2021-111 |
|
`projen` is a project generation tool that synthesizes project configuration files such a… | projen | 2021-04-06T19:15:00Z | 2021-07-08T03:14:29.411085Z |
| pysec-2021-6 |
|
In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser all… | django | 2021-04-06T15:15:00Z | 2021-05-12T08:15:00Z |
| pysec-2021-11 |
|
django-registration is a user registration package for Django. The django-registration pa… | django-registration | 2021-04-01T22:15:00Z | 2021-04-06T18:40:00Z |
| pysec-2021-34 |
|
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when … | pikepdf | 2021-04-01T20:15:00Z | 2021-04-09T19:15:00Z |
| pysec-2021-107 |
|
A flaw was found in several ansible modules, where parameters containing credentials, suc… | ansible | 2021-04-01T18:15:00Z | 2021-07-02T02:41:35.257212Z |
| pysec-2021-134 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.710356Z |
| pysec-2021-133 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.660066Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1166 | Malicious code in @global-dax-ad-platform/dax-hooks (npm) | 2026-03-03T05:13:37Z | 2026-04-01T12:28:00Z |
| mal-2026-1165 | Malicious code in @global-dax-ad-platform/dax-components (npm) | 2026-03-03T05:13:37Z | 2026-04-01T12:28:00Z |
| mal-2026-1178 | Malicious code in hiagentevilmcp (npm) | 2026-03-03T05:11:36Z | 2026-03-08T01:39:45Z |
| mal-2026-1172 | Malicious code in @zakhaevv/envai (npm) | 2026-03-03T05:09:55Z | 2026-03-08T01:39:42Z |
| mal-2026-1171 | Malicious code in @snazaah/davey (npm) | 2026-03-03T05:08:31Z | 2026-03-08T01:39:42Z |
| mal-2026-1177 | Malicious code in graph-dynamic (npm) | 2026-03-03T05:06:50Z | 2026-04-01T12:28:02Z |
| mal-2026-1179 | Malicious code in magala (npm) | 2026-03-03T05:04:43Z | 2026-03-08T01:39:45Z |
| mal-2026-1151 | Malicious code in openclaw-droid (npm) | 2026-03-03T04:20:34Z | 2026-03-08T01:39:46Z |
| mal-2026-1157 | Malicious code in token-discord-encryptation (npm) | 2026-03-03T04:09:27Z | 2026-03-08T01:39:48Z |
| mal-2026-1156 | Malicious code in solongnerds (npm) | 2026-03-03T04:08:55Z | 2026-03-08T01:39:47Z |
| mal-2026-1164 | Malicious code in yazxzpedia-libsignal (npm) | 2026-03-03T04:08:41Z | 2026-03-08T01:39:48Z |
| mal-2026-1155 | Malicious code in rullzdigital-libsignal (npm) | 2026-03-03T04:08:41Z | 2026-03-08T01:39:47Z |
| mal-2026-1154 | Malicious code in rullzdigital (npm) | 2026-03-03T04:08:41Z | 2026-03-08T01:39:47Z |
| mal-2026-1153 | Malicious code in primexuu-libsignal (npm) | 2026-03-03T04:08:41Z | 2026-03-08T01:39:46Z |
| mal-2026-1150 | Malicious code in libsignal-yazxz (npm) | 2026-03-03T04:08:41Z | 2026-03-08T01:39:45Z |
| mal-2026-1147 | Malicious code in danzxoffc74-libsignal (npm) | 2026-03-03T04:08:41Z | 2026-03-08T01:39:43Z |
| mal-2026-1146 | Malicious code in danzxoffc74 (npm) | 2026-03-03T04:08:41Z | 2026-03-08T01:39:43Z |
| mal-2026-1145 | Malicious code in @yazxzpedia/baileys (npm) | 2026-03-03T04:08:41Z | 2026-03-08T01:39:42Z |
| mal-2026-1163 | Malicious code in xpack-video-submission (npm) | 2026-03-03T04:08:35Z | 2026-04-01T12:28:04Z |
| mal-2026-1162 | Malicious code in xpack-test-3.0 (npm) | 2026-03-03T04:08:35Z | 2026-03-08T01:39:48Z |
| mal-2026-1158 | Malicious code in xpack-arc-gateway (npm) | 2026-03-03T04:08:35Z | 2026-04-01T12:28:04Z |
| mal-2026-1148 | Malicious code in ethglobal-finale (npm) | 2026-03-03T04:08:35Z | 2026-03-08T01:39:44Z |
| mal-2026-1161 | Malicious code in xpack-sui (npm) | 2026-03-03T04:08:34Z | 2026-04-01T12:28:04Z |
| mal-2026-1160 | Malicious code in xpack-subscription (npm) | 2026-03-03T04:08:34Z | 2026-04-01T12:28:04Z |
| mal-2026-1159 | Malicious code in xpack-per-device (npm) | 2026-03-03T04:08:34Z | 2026-04-01T12:28:04Z |
| mal-2026-1152 | Malicious code in pool-check (npm) | 2026-03-03T04:07:11Z | 2026-03-08T01:39:46Z |
| mal-2026-1149 | Malicious code in hackpreinstall (npm) | 2026-03-03T04:02:41Z | 2026-04-01T12:28:02Z |
| mal-2026-1144 | Malicious code in roku-aihub (PyPI) | 2026-03-02T23:51:19Z | 2026-04-10T15:51:21Z |
| mal-2026-1136 | Malicious code in amigapythonupdater (PyPI) | 2026-03-02T18:49:05Z | 2026-04-01T12:28:04Z |
| mal-2026-1142 | Malicious code in wisecloudcyberark (PyPI) | 2026-03-02T18:48:31Z | 2026-04-01T12:28:04Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1333 | Erlang/OTP: Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-16T22:00:00.000+00:00 | 2025-12-07T23:00:00.000+00:00 |
| wid-sec-w-2025-1332 | D-LINK Router: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-16T22:00:00.000+00:00 | 2025-06-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1331 | BeyondTrust Remote Support: Schwachstelle ermöglicht Codeausführung | 2025-06-16T22:00:00.000+00:00 | 2025-06-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1330 | IBM App Connect Enterprise: Schwachstelle ermöglicht Manipulation der Konfiguration | 2025-06-16T22:00:00.000+00:00 | 2025-06-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1329 | OTRS: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-06-15T22:00:00.000+00:00 | 2025-06-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1328 | PostgreSQL JDBC Treiber: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-15T22:00:00.000+00:00 | 2025-11-09T23:00:00.000+00:00 |
| wid-sec-w-2025-1327 | Grafana: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-15T22:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1326 | M-Files Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-15T22:00:00.000+00:00 | 2025-06-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1325 | libxml2: Schwachstelle ermöglicht Denial of Service | 2025-06-15T22:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1324 | xwiki: Mehrere Schwachstellen | 2025-06-12T22:00:00.000+00:00 | 2025-06-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1323 | Red Hat Satellite: Schwachstelle ermöglicht Denial of Service | 2025-06-12T22:00:00.000+00:00 | 2025-06-26T22:00:00.000+00:00 |
| wid-sec-w-2025-1322 | GIMP: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung | 2025-06-12T22:00:00.000+00:00 | 2025-10-28T23:00:00.000+00:00 |
| wid-sec-w-2025-1321 | SaltStack Salt: Mehrere Schwachstellen | 2025-06-12T22:00:00.000+00:00 | 2025-12-07T23:00:00.000+00:00 |
| wid-sec-w-2025-1320 | Tenable Security Nessus: Mehrere Schwachstellen | 2025-06-12T22:00:00.000+00:00 | 2025-06-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1319 | VMware Tanzu Spring Framework: Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-12T22:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1318 | Python: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-12T22:00:00.000+00:00 | 2025-12-28T23:00:00.000+00:00 |
| wid-sec-w-2025-1317 | xwiki: Schwachstelle ermöglicht SQL Injection | 2025-06-12T22:00:00.000+00:00 | 2025-06-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1316 | Dell integrated Dell Remote Access Controller: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-12T22:00:00.000+00:00 | 2025-06-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1315 | GitLab: Mehrere Schwachstellen | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1314 | Apple Produkte: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1313 | PaloAlto Networks PAN-OS: Mehrere Schwachstellen | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1312 | libxml2: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-11T22:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1311 | QT: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1310 | PaloAlto Networks GlobalProtect: Mehrere Schwachstellen | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1309 | IBM Tivoli Netcool/OMNIbus: Schwachstelle ermöglicht Denial of Service | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1308 | Mitel MiCollab: Schwachstelle ermöglicht Offenlegung von Informationen und Administrative Zugriffe | 2025-06-11T22:00:00.000+00:00 | 2025-06-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1307 | Mitel OpenScape Accounting Management: Schwachstelle ermöglicht Codeausführung | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1306 | PaloAlto Networks Cortex XSOAR: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1305 | Microsoft 365 Copilot: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1304 | IBM Security Guardium: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-11T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-313-01 | Schneider Electric NMC cards and Embedded Devices | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-25-065-02 | Hitachi Energy Relion 670/650/SAM600-IO | 2021-11-04T13:30:00.000000Z | 2025-02-25T13:30:00.000000Z |
| icsa-21-336-05 | Hitachi Energy Relion 670/650/SAM600-IO | 2021-11-04T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsma-21-308-01 | Philips Tasy EMR | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-308-02 | AzeoTech DAQFactory | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-308-01 | VISAM VBASE Editor | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-306-01 | Sensormatic Electronics VideoEdge | 2021-11-02T00:00:00.000000Z | 2021-11-02T00:00:00.000000Z |
| icsa-21-301-01 | Sensormatic Electronics victor | 2021-10-28T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-299-01 | Fuji Electric Tellus Lite V-Simulator and V-Server Lite | 2021-10-26T00:00:00.000000Z | 2021-10-26T00:00:00.000000Z |
| icsma-21-294-01 | B. Braun Infusomat Space Large Volume Pump | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-03 | ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-02 | Delta Electronics DIALink | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-01 | ICONICS GENESIS64 and Mitsubishi Electric MC Works64 | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-292-02 | Trane HVAC Systems Controls | 2021-10-19T00:00:00.000000Z | 2021-10-19T00:00:00.000000Z |
| icsa-21-292-01 | AUVESY Versiondog | 2021-10-19T00:00:00.000000Z | 2021-10-19T00:00:00.000000Z |
| icsa-21-287-02 | Uffizio GPS Tracker | 2021-10-14T00:00:00.000000Z | 2021-10-14T00:00:00.000000Z |
| icsa-21-287-01 | Schneider Electric CNM | 2021-10-14T00:00:00.000000Z | 2021-10-14T00:00:00.000000Z |
| icsa-21-287-09 | Siemens SIMATIC Process Historian | 2021-10-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-287-08 | Siemens RUGGEDCOM ROX Devices | 2021-10-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-287-07 | Siemens SCALANCE | 2021-10-12T00:00:00.000000Z | 2022-10-11T00:00:00.000000Z |
| icsa-21-287-05 | Siemens SINEC NMS | 2021-10-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-287-04 | Siemens SINUMERIK | 2021-10-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-285-03 | Schneider Electric IGSS | 2021-10-12T00:00:00.000000Z | 2021-10-12T00:00:00.000000Z |
| icsa-21-285-02 | Advantech WebAccess | 2021-10-12T00:00:00.000000Z | 2021-10-12T00:00:00.000000Z |
| icsa-21-285-01 | Advantech WebAccess SCADA | 2021-10-12T00:00:00.000000Z | 2021-10-12T00:00:00.000000Z |
| icsa-21-280-07 | FATEK Automation Communication Server | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsa-21-280-06 | FATEK Automation WinProladder | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsa-21-280-05 | InHand Networks IR615 Router (Update A) | 2021-10-07T00:00:00.000000Z | 2021-11-30T00:00:00.000000Z |
| icsa-21-280-04 | Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B) | 2021-10-07T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-280-03 | Johnson Controls exacqVision | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190807-esm-inject | Cisco Email Security Appliance Header Injection Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-09-26T20:01:12+00:00 |
| cisco-sa-20190807-asa-privescala | Cisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-07T16:00:00+00:00 |
| cisco-sa-20190807-asa-multi | Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities | 2019-08-07T16:00:00+00:00 | 2019-08-29T13:00:21+00:00 |
| cisco-sa-20190806-sb220-rce | Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities | 2019-08-06T14:00:00+00:00 | 2019-08-21T14:27:53+00:00 |
| cisco-sa-20190806-sb220-inject | Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability | 2019-08-06T14:00:00+00:00 | 2019-08-21T14:20:46+00:00 |
| cisco-sa-20190806-sb220-auth_bypass | Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability | 2019-08-06T14:00:00+00:00 | 2019-08-21T14:24:09+00:00 |
| cisco-sa-20190731-nxos-bo | Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability | 2019-07-31T16:00:00+00:00 | 2019-09-26T17:35:34+00:00 |
| cisco-sa-20190717-wsma-info | Cisco Industrial Network Director Web Services Management Agent Unauthorized Information Disclosure Vulnerability | 2019-07-17T16:00:00+00:00 | 2019-07-17T16:00:00+00:00 |
| cisco-sa-20190717-spa500-command | Cisco Small Business SPA500 Series IP Phones Local Command Execution Vulnerability | 2019-07-17T16:00:00+00:00 | 2019-07-17T16:00:00+00:00 |
| cisco-sa-20190717-sbss-redirect | Cisco Small Business Series Switches Open Redirect Vulnerability | 2019-07-17T16:00:00+00:00 | 2019-07-17T16:00:00+00:00 |
| cisco-sa-20190717-ise-xss | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2019-07-17T16:00:00+00:00 | 2019-08-06T17:39:12+00:00 |
| cisco-sa-20190717-ise-sql-inject | Cisco Identity Services Engine Blind SQL Injection Vulnerability | 2019-07-17T16:00:00+00:00 | 2019-07-17T16:00:00+00:00 |
| cisco-sa-20190717-cvdsd-wmauth | Cisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability | 2019-07-17T16:00:00+00:00 | 2019-07-17T16:00:00+00:00 |
| cisco-sa-20190717-cfnm-statcred | Cisco FindIT Network Management Software Static Credentials Vulnerability | 2019-07-17T16:00:00+00:00 | 2019-07-17T16:00:00+00:00 |
| cisco-sa-20190717-aironet-dos | Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability | 2019-07-17T16:00:00+00:00 | 2019-07-17T16:00:00+00:00 |
| cisco-sa-20190710-asa-ftd-dos | Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability | 2019-07-10T16:00:00+00:00 | 2019-07-11T21:11:00+00:00 |
| cisco-sa-20190703-wsa-dos | Cisco Web Security Appliance HTTPS Certificate Denial of Service Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-sbss-memcorrupt | Cisco Small Business Series Switches Memory Corruption Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-sbss-dos | Cisco Small Business Series Switches HTTP Denial of Service Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-nfvis-file-readwrite | Cisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-nfvis-commandinj | Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-n9kaci-bypass | Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-jabber-dll | Cisco Jabber for Windows DLL Preloading Vulnerability | 2019-07-03T16:00:00+00:00 | 2021-04-01T22:11:38+00:00 |
| cisco-sa-20190703-ip-phone-sip-dos | Cisco IP Phone 7800 and 8800 Series Session Initiation Protocol Denial of Service Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-08T16:16:46+00:00 |
| cisco-sa-20190703-iosxr-bgp-dos | Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability | 2019-07-03T16:00:00+00:00 | 2020-01-22T16:01:55+00:00 |
| cisco-sa-20190703-fmc-xss | Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-esa-filterpass | Cisco Email Security Appliance Content Filter Bypass Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-esa-bypass | Cisco Email Security Appliance Content Filter Bypass Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-cucm-dos | Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-08T22:30:23+00:00 |
| cisco-sa-20190703-cucdm-rsh | Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-59209 | Windows Push Notification Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59208 | Windows MapUrlToZone Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59207 | Windows Kernel Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59206 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59205 | Windows Graphics Component Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59204 | Windows Management Services Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59203 | Windows State Repository API Server File Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59202 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59201 | Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59200 | Data Sharing Service Spoofing Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59199 | Software Protection Platform (SPP) Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59198 | Windows Search Service Denial of Service Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59197 | Windows ETL Channel Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59196 | Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59195 | Windows Graphics Component Denial of Service Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59194 | Windows Kernel Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59193 | Windows Management Services Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59192 | Storport.sys Driver Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59191 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59190 | Windows Search Service Denial of Service Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59189 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59188 | Microsoft Failover Cluster Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59187 | Windows Kernel Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59186 | Windows Kernel Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59185 | NTLM Hash Disclosure Spoofing Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59184 | Storage Spaces Direct Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2026-01-02T08:00:00.000Z |
| msrc_cve-2025-58739 | Microsoft Windows File Explorer Spoofing Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58738 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58737 | Remote Desktop Protocol Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58736 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14746-1 | go1.23-1.23.6-1.1 on GA media | 2025-02-08T00:00:00Z | 2025-02-08T00:00:00Z |
| opensuse-su-2025:14745-1 | go1.22-1.22.12-1.1 on GA media | 2025-02-08T00:00:00Z | 2025-02-08T00:00:00Z |
| opensuse-su-2025:14744-1 | flannel-0.26.4-1.1 on GA media | 2025-02-08T00:00:00Z | 2025-02-08T00:00:00Z |
| opensuse-su-2025:0056-1 | Security update for trivy | 2025-02-07T11:01:31Z | 2025-02-07T11:01:31Z |
| opensuse-su-2025:14743-1 | python311-numba-0.61.0-1.1 on GA media | 2025-02-07T00:00:00Z | 2025-02-07T00:00:00Z |
| opensuse-su-2025:14742-1 | chromedriver-133.0.6943.53-1.1 on GA media | 2025-02-07T00:00:00Z | 2025-02-07T00:00:00Z |
| opensuse-su-2025:0053-1 | Security update for dcmtk | 2025-02-06T12:02:04Z | 2025-02-06T12:02:04Z |
| opensuse-su-2025:14741-1 | ruby3.4-rubygem-http-cookie-1.0.8-1.1 on GA media | 2025-02-06T00:00:00Z | 2025-02-06T00:00:00Z |
| opensuse-su-2025:14740-1 | python311-cryptography-vectors-44.0.0-1.1 on GA media | 2025-02-06T00:00:00Z | 2025-02-06T00:00:00Z |
| opensuse-su-2025:14739-1 | python311-cryptography-44.0.0-1.1 on GA media | 2025-02-06T00:00:00Z | 2025-02-06T00:00:00Z |
| opensuse-su-2025:14738-1 | pam_pkcs11-0.6.13-1.1 on GA media | 2025-02-06T00:00:00Z | 2025-02-06T00:00:00Z |
| opensuse-su-2025:14737-1 | nginx-1.27.4-1.1 on GA media | 2025-02-06T00:00:00Z | 2025-02-06T00:00:00Z |
| opensuse-su-2025:14736-1 | krb5-1.21.3-2.1 on GA media | 2025-02-06T00:00:00Z | 2025-02-06T00:00:00Z |
| opensuse-su-2025:14735-1 | go1.24-1.24rc3-1.1 on GA media | 2025-02-06T00:00:00Z | 2025-02-06T00:00:00Z |
| opensuse-su-2025:14734-1 | weechat-4.5.1-1.1 on GA media | 2025-02-05T00:00:00Z | 2025-02-05T00:00:00Z |
| opensuse-su-2025:14733-1 | python311-cbor2-5.6.5-2.1 on GA media | 2025-02-05T00:00:00Z | 2025-02-05T00:00:00Z |
| opensuse-su-2025:14732-1 | govulncheck-vulndb-0.0.20250204T220613-1.1 on GA media | 2025-02-05T00:00:00Z | 2025-02-05T00:00:00Z |
| opensuse-su-2025:14731-1 | MozillaThunderbird-128.7.0-1.1 on GA media | 2025-02-05T00:00:00Z | 2025-02-05T00:00:00Z |
| opensuse-su-2025:14730-1 | MozillaFirefox-135.0-1.1 on GA media | 2025-02-05T00:00:00Z | 2025-02-05T00:00:00Z |
| opensuse-su-2025:14729-1 | python311-scikit-learn-1.6.1-1.1 on GA media | 2025-02-04T00:00:00Z | 2025-02-04T00:00:00Z |
| opensuse-su-2025:14728-1 | govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media | 2025-02-04T00:00:00Z | 2025-02-04T00:00:00Z |
| opensuse-su-2025:14727-1 | firefox-esr-128.7.0-1.1 on GA media | 2025-02-04T00:00:00Z | 2025-02-04T00:00:00Z |
| opensuse-su-2025:14726-1 | cargo-audit-advisory-db-20250204-1.1 on GA media | 2025-02-04T00:00:00Z | 2025-02-04T00:00:00Z |
| opensuse-su-2025:0052-1 | Security update for python-asteval | 2025-02-03T19:01:08Z | 2025-02-03T19:01:08Z |
| opensuse-su-2025:14725-1 | helm-3.17.0-2.1 on GA media | 2025-02-03T00:00:00Z | 2025-02-03T00:00:00Z |
| opensuse-su-2025:14724-1 | grafana-11.3.3-1.1 on GA media | 2025-02-03T00:00:00Z | 2025-02-03T00:00:00Z |
| opensuse-su-2025:14723-1 | google-osconfig-agent-20250115.01-1.1 on GA media | 2025-02-03T00:00:00Z | 2025-02-03T00:00:00Z |
| opensuse-su-2025:14722-1 | rime-schema-all-20230603+git.5fdd2d6-3.1 on GA media | 2025-02-03T00:00:00Z | 2025-02-03T00:00:00Z |
| opensuse-su-2025:0041-1 | Security update for libjxl | 2025-01-31T19:01:05Z | 2025-01-31T19:01:05Z |
| opensuse-su-2025:0039-1 | Security update for stb | 2025-01-31T15:01:17Z | 2025-01-31T15:01:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:23033 | Red Hat Security Advisory: abrt security update | 2025-12-10T12:18:17+00:00 | 2026-03-18T03:12:23+00:00 |
| rhsa-2025:23031 | Red Hat Security Advisory: abrt security update | 2025-12-10T12:10:47+00:00 | 2026-03-18T03:12:23+00:00 |
| rhsa-2025:23030 | Red Hat Security Advisory: abrt security update | 2025-12-10T11:09:27+00:00 | 2026-03-18T03:12:22+00:00 |
| rhsa-2025:23024 | Red Hat Security Advisory: libssh security update | 2025-12-10T10:23:22+00:00 | 2026-04-07T08:30:22+00:00 |
| rhsa-2025:23028 | Red Hat Security Advisory: Red Hat Quay 3.12 | 2025-12-10T10:20:44+00:00 | 2026-04-03T22:45:18+00:00 |
| rhsa-2025:23023 | Red Hat Security Advisory: postgresql:15 security update | 2025-12-10T09:59:37+00:00 | 2026-04-13T20:13:46+00:00 |
| rhsa-2025:23022 | Red Hat Security Advisory: postgresql:15 security update | 2025-12-10T09:44:22+00:00 | 2026-04-13T20:13:49+00:00 |
| rhsa-2025:23009 | Red Hat Security Advisory: kernel security update | 2025-12-10T07:37:02+00:00 | 2026-03-18T03:12:36+00:00 |
| rhsa-2025:23002 | Red Hat Security Advisory: grafana security update | 2025-12-10T01:12:27+00:00 | 2026-04-14T07:56:36+00:00 |
| rhsa-2025:23000 | Red Hat Security Advisory: kernel security update | 2025-12-10T01:02:52+00:00 | 2026-03-18T03:12:19+00:00 |
| rhsa-2025:22996 | Red Hat Security Advisory: kernel security update | 2025-12-10T01:02:45+00:00 | 2026-03-18T03:12:06+00:00 |
| rhsa-2025:22999 | Red Hat Security Advisory: kernel security update | 2025-12-10T00:59:12+00:00 | 2026-03-18T03:12:16+00:00 |
| rhsa-2025:22998 | Red Hat Security Advisory: kernel security update | 2025-12-10T00:56:12+00:00 | 2026-03-18T03:12:11+00:00 |
| rhsa-2025:23001 | Red Hat Security Advisory: grafana security update | 2025-12-10T00:36:02+00:00 | 2026-04-14T07:56:34+00:00 |
| rhsa-2025:22995 | Red Hat Security Advisory: kernel-rt security update | 2025-12-10T00:29:02+00:00 | 2026-03-18T03:11:37+00:00 |
| rhsa-2025:22997 | Red Hat Security Advisory: kernel-rt security update | 2025-12-10T00:26:17+00:00 | 2026-03-18T03:12:21+00:00 |
| rhsa-2025:22982 | Red Hat Security Advisory: python-kdcproxy security update | 2025-12-09T22:26:17+00:00 | 2026-03-18T03:14:26+00:00 |
| rhsa-2025:22969 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (libwebsockets) security update | 2025-12-09T18:20:01+00:00 | 2026-03-18T03:14:25+00:00 |
| rhsa-2025:22955 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.12 director Operator container images | 2025-12-09T16:44:15+00:00 | 2026-04-02T16:46:57+00:00 |
| rhsa-2025:22944 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.4 | 2025-12-09T15:41:43+00:00 | 2026-03-06T11:29:59+00:00 |
| rhsa-2025:22925 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update | 2025-12-09T15:25:26+00:00 | 2026-04-13T20:13:45+00:00 |
| rhsa-2025:22941 | Red Hat Security Advisory: Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2 | 2025-12-09T15:24:58+00:00 | 2026-04-14T02:01:49+00:00 |
| rhsa-2025:22924 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update | 2025-12-09T15:22:27+00:00 | 2026-04-13T20:13:45+00:00 |
| rhsa-2025:22939 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.7 | 2025-12-09T15:08:18+00:00 | 2026-03-06T11:29:57+00:00 |
| rhsa-2025:22938 | Red Hat Security Advisory: Kiali 2.11.5 for Red Hat OpenShift Service Mesh 3.1 | 2025-12-09T14:59:35+00:00 | 2026-04-14T02:01:49+00:00 |
| rhsa-2025:22937 | Red Hat Security Advisory: Kiali 2.4.11 for Red Hat OpenShift Service Mesh 3.0 | 2025-12-09T14:59:02+00:00 | 2026-04-14T02:01:48+00:00 |
| rhsa-2025:22936 | Red Hat Security Advisory: Kiali 1.73.25 for Red Hat OpenShift Service Mesh 2.6 | 2025-12-09T14:58:58+00:00 | 2026-04-14T02:01:48+00:00 |
| rhsa-2025:22935 | Red Hat Security Advisory: Red Hat Update Infrastructure 5 security update | 2025-12-09T14:40:14+00:00 | 2026-04-13T20:13:45+00:00 |
| rhsa-2025:22914 | Red Hat Security Advisory: kernel-rt security update | 2025-12-09T12:20:30+00:00 | 2026-03-18T03:12:24+00:00 |
| rhsa-2025:22910 | Red Hat Security Advisory: kernel security update | 2025-12-09T11:59:40+00:00 | 2026-03-30T10:32:23+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4466-1 | Security update 5.0.6 for Multi-Linux Manager Salt Bundle | 2025-12-18T11:59:53Z | 2025-12-18T11:59:53Z |
| suse-su-2025:4458-1 | Security update 5.0.6 for Multi-Linux Manager Client Tools | 2025-12-18T11:57:30Z | 2025-12-18T11:57:30Z |
| suse-su-2025:4457-1 | Security update 5.0.6 for Multi-Linux Manager Client Tools | 2025-12-18T11:56:34Z | 2025-12-18T11:56:34Z |
| suse-su-2025:4450-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:50:27Z | 2025-12-18T08:50:27Z |
| suse-su-2025:4449-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:50:22Z | 2025-12-18T08:50:22Z |
| suse-su-2025:4448-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:50:16Z | 2025-12-18T08:50:16Z |
| suse-su-2025:4447-1 | Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle | 2025-12-18T08:50:09Z | 2025-12-18T08:50:09Z |
| suse-su-2025:4446-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:49:58Z | 2025-12-18T08:49:58Z |
| suse-su-2025:4445-1 | Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle | 2025-12-18T08:49:43Z | 2025-12-18T08:49:43Z |
| suse-su-2025:4444-1 | Security update 5.1.1.1 for Multi-Linux Manager Client Tools | 2025-12-18T08:49:35Z | 2025-12-18T08:49:35Z |
| suse-su-2025:4442-1 | Security update for glib2 | 2025-12-17T16:17:51Z | 2025-12-17T16:17:51Z |
| suse-su-2025:4441-1 | Security update for glib2 | 2025-12-17T16:15:21Z | 2025-12-17T16:15:21Z |
| suse-su-2025:4440-1 | Security update for wireshark | 2025-12-17T15:44:39Z | 2025-12-17T15:44:39Z |
| suse-su-2025:4439-1 | Security update for poppler | 2025-12-17T15:44:25Z | 2025-12-17T15:44:25Z |
| suse-su-2025:4438-1 | Security update for mariadb | 2025-12-17T15:43:51Z | 2025-12-17T15:43:51Z |
| suse-su-2025:4437-1 | Security update for helm | 2025-12-17T14:44:51Z | 2025-12-17T14:44:51Z |
| suse-su-2025:4436-1 | Security update for libpng16 | 2025-12-17T13:56:16Z | 2025-12-17T13:56:16Z |
| suse-su-2025:4435-1 | Security update for usbmuxd | 2025-12-17T13:32:55Z | 2025-12-17T13:32:55Z |
| suse-su-2025:4434-1 | Security update for poppler | 2025-12-17T13:31:05Z | 2025-12-17T13:31:05Z |
| suse-su-2025:4433-1 | Security update for python39 | 2025-12-17T13:20:25Z | 2025-12-17T13:20:25Z |
| suse-su-2025:4432-1 | Security update for libpng12 | 2025-12-17T13:07:22Z | 2025-12-17T13:07:22Z |
| suse-su-2025:4429-1 | Security update for ImageMagick | 2025-12-17T11:26:56Z | 2025-12-17T11:26:56Z |
| suse-su-2025:4428-1 | Security update for ImageMagick | 2025-12-17T11:26:21Z | 2025-12-17T11:26:21Z |
| suse-su-2025:4427-1 | Security update for ImageMagick | 2025-12-17T11:24:34Z | 2025-12-17T11:24:34Z |
| suse-su-2025:4426-1 | Security update for xkbcomp | 2025-12-17T11:22:42Z | 2025-12-17T11:22:42Z |
| suse-su-2025:4425-1 | Security update for cups | 2025-12-17T11:20:16Z | 2025-12-17T11:20:16Z |
| suse-su-2025:4424-1 | Security update for MozillaFirefox | 2025-12-17T11:09:15Z | 2025-12-17T11:09:15Z |
| suse-su-2025:4423-1 | Security update for webkit2gtk3 | 2025-12-17T11:01:39Z | 2025-12-17T11:01:39Z |
| suse-su-2025:4422-1 | Security update for the Linux Kernel | 2025-12-17T10:52:47Z | 2025-12-17T10:52:47Z |
| suse-su-2025:4421-1 | Security update for buildah | 2025-12-17T09:04:20Z | 2025-12-17T09:04:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2024:2033 | Moderate: libreswan security and bug fix update | 2024-04-24T00:00:00Z | 2024-04-29T07:55:12Z |
| alsa-2024:1998 | Moderate: libreswan security update | 2024-04-23T00:00:00Z | 2024-04-29T07:54:15Z |
| alsa-2024:1963 | Important: golang security update | 2024-04-23T00:00:00Z | 2024-04-29T07:53:24Z |
| alsa-2024:1962 | Important: go-toolset:rhel8 security update | 2024-04-23T00:00:00Z | 2024-04-29T07:51:17Z |
| alsa-2024:1940 | Low: thunderbird security update | 2024-04-22T00:00:00Z | 2024-04-29T07:48:43Z |
| alsa-2024:1939 | Low: thunderbird security update | 2024-04-22T00:00:00Z | 2024-04-29T07:46:06Z |
| alsa-2024:1822 | Moderate: java-11-openjdk security update | 2024-04-22T00:00:00Z | 2024-04-29T11:02:41Z |
| alsa-2024:1912 | Important: firefox security update | 2024-04-18T00:00:00Z | 2024-04-22T08:21:39Z |
| alsa-2024:1908 | Important: firefox security update | 2024-04-18T00:00:00Z | 2024-04-22T08:24:12Z |
| alsa-2024:1903 | Important: shim bug fix update | 2024-04-18T00:00:00Z | 2024-05-10T18:01:28Z |
| alsa-2024:1902 | Important: shim security update | 2024-04-18T00:00:00Z | 2024-05-10T20:36:43Z |
| alsa-2024:1879 | Moderate: gnutls security update | 2024-04-18T00:00:00Z | 2024-04-18T10:27:16Z |
| alsa-2024:1872 | Important: mod_http2 security update | 2024-04-18T00:00:00Z | 2024-04-18T10:28:16Z |
| alsa-2024:1828 | Moderate: java-21-openjdk security update | 2024-04-18T00:00:00Z | 2024-04-29T11:04:54Z |
| alsa-2024:1825 | Moderate: java-17-openjdk security update | 2024-04-18T00:00:00Z | 2024-04-18T13:44:08Z |
| alsa-2024:1818 | Moderate: java-1.8.0-openjdk security update | 2024-04-18T00:00:00Z | 2024-04-19T13:00:41Z |
| alsa-2024:1782 | Important: bind and dhcp security update | 2024-04-12T00:00:00Z | 2024-04-12T17:11:23Z |
| alsa-2024:1789 | Important: bind security update | 2024-04-11T00:00:00Z | 2024-04-12T12:58:56Z |
| alsa-2024:1786 | Important: httpd:2.4/mod_http2 security update | 2024-04-11T00:00:00Z | 2024-04-12T13:00:18Z |
| alsa-2024:1784 | Moderate: gnutls security update | 2024-04-11T00:00:00Z | 2024-04-12T11:48:24Z |
| alsa-2024:1781 | Important: bind9.16 security update | 2024-04-11T00:00:00Z | 2024-04-12T18:44:24Z |
| alsa-2024:1751 | Important: unbound security update | 2024-04-11T00:00:00Z | 2024-04-12T11:50:26Z |
| alsa-2024:1750 | Important: unbound security update | 2024-04-10T00:00:00Z | 2024-04-12T11:51:36Z |
| alsa-2024:1719 | Moderate: rear security update | 2024-04-09T00:00:00Z | 2024-04-10T08:54:24Z |
| alsa-2024:1692 | Moderate: less security update | 2024-04-08T00:00:00Z | 2024-04-09T06:49:32Z |
| alsa-2024:1691 | Important: varnish security update | 2024-04-08T00:00:00Z | 2024-04-09T06:48:30Z |
| alsa-2024:1690 | Important: varnish security update | 2024-04-08T00:00:00Z | 2024-04-10T14:16:19Z |
| alsa-2024:1688 | Important: nodejs:20 security update | 2024-04-08T00:00:00Z | 2024-04-09T14:51:34Z |
| alsa-2024:1687 | Important: nodejs:20 security update | 2024-04-08T00:00:00Z | 2024-04-09T14:54:02Z |
| alsa-2024:1646 | Important: grafana security and bug fix update | 2024-04-02T00:00:00Z | 2024-04-03T15:14:05Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2020-2324 | Heap-buffer-overflow in archive_read_format_cpio_read_header | 2021-12-04T00:01:03.220230Z | 2022-04-13T03:32:31.871963Z |
| osv-2020-2320 | UNKNOWN WRITE in cpu_arm_exec_arm | 2021-12-04T00:00:54.942609Z | 2022-04-13T03:04:39.176437Z |
| osv-2021-1644 | Container-overflow in void jxl::CopyImageTo<int> | 2021-12-04T00:00:20.702471Z | 2022-04-13T03:04:41.848813Z |
| osv-2021-1641 | Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch | 2021-12-03T00:00:36.651134Z | 2022-07-26T00:05:41.916400Z |
| osv-2021-1640 | Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder> | 2021-12-02T00:01:06.640577Z | 2022-07-08T00:09:36.686740Z |
| osv-2021-1636 | Stack-buffer-overflow in MatchRule | 2021-12-01T00:00:23.705541Z | 2022-04-13T03:04:34.232231Z |
| osv-2021-1634 | Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem | 2021-11-30T00:00:09.401031Z | 2022-04-13T03:04:32.759081Z |
| osv-2021-1633 | Heap-buffer-overflow in mk_string_copy_substr | 2021-11-29T00:00:13.762470Z | 2022-04-13T03:04:38.256357Z |
| osv-2021-1631 | Stack-buffer-overflow in TranslateNumber | 2021-11-28T00:01:42.891431Z | 2022-04-13T03:04:34.248880Z |
| osv-2021-1629 | Heap-buffer-overflow in Curl_sasl_decode_mech | 2021-11-27T00:01:35.152286Z | 2022-04-13T03:04:42.952015Z |
| osv-2021-1628 | Stack-buffer-overflow in sprint_realloc_hinted_integer | 2021-11-27T00:01:21.208846Z | 2022-08-10T00:21:22.382635Z |
| osv-2021-1627 | Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute | 2021-11-27T00:00:35.244395Z | 2022-04-13T03:21:28.115569Z |
| osv-2021-1625 | Heap-buffer-overflow in junkscan | 2021-11-26T00:01:33.118188Z | 2022-04-13T03:04:42.946027Z |
| osv-2021-1615 | Heap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup | 2021-11-24T00:00:37.422188Z | 2022-04-13T03:04:38.071614Z |
| osv-2021-1612 | Heap-buffer-overflow in MqttDecode_Props | 2021-11-24T00:00:12.425812Z | 2022-04-13T03:04:34.038824Z |
| osv-2021-1607 | Container-overflow in void jxl::CopyImageTo<int> | 2021-11-22T00:01:39.687600Z | 2022-04-13T03:04:41.817334Z |
| osv-2021-1606 | Segv on unknown address in jxl::N_AVX2::SingleFromSingle | 2021-11-22T00:00:41.045135Z | 2022-04-13T03:04:41.806651Z |
| osv-2021-1605 | Heap-use-after-free in perfetto::trace_processor::SliceTracker::GetStackHash | 2021-11-22T00:00:36.355325Z | 2022-04-13T03:04:42.003237Z |
| osv-2021-1604 | Heap-buffer-overflow in jxl::N_AVX2::SingleFromSingle | 2021-11-22T00:00:35.889328Z | 2022-04-13T03:34:28.146597Z |
| osv-2021-1601 | Heap-buffer-overflow in parquet::DeltaByteArrayDecoder::GetInternal | 2021-11-22T00:00:06.055274Z | 2022-04-13T03:04:32.077733Z |
| osv-2021-1597 | UNKNOWN READ in void jxl::CopyImageTo<int> | 2021-11-21T00:00:11.620406Z | 2022-04-13T03:28:21.999954Z |
| osv-2021-1595 | UNKNOWN WRITE in sprint_realloc_hinted_integer | 2021-11-21T00:00:06.936393Z | 2022-08-10T00:20:17.544182Z |
| osv-2021-1592 | Heap-buffer-overflow in arrow::internal::ValidateArrayImpl::Visit | 2021-11-20T00:00:17.804875Z | 2022-04-13T03:04:32.029669Z |
| osv-2021-1589 | Heap-buffer-overflow in inflate | 2021-11-19T00:00:42.702380Z | 2022-06-16T00:04:02.814797Z |
| osv-2021-1585 | Heap-buffer-overflow in _parse_to | 2021-11-18T00:00:17.931643Z | 2023-02-24T01:59:34.563727Z |
| osv-2021-1580 | Heap-buffer-overflow in H5G__node_found | 2021-11-15T00:00:41.528810Z | 2023-10-22T14:05:32.861272Z |
| osv-2021-1577 | Heap-buffer-overflow in apreq_header_attribute | 2021-11-14T00:01:26.531147Z | 2022-04-13T03:04:35.778838Z |
| osv-2021-1576 | Heap-buffer-overflow in __bpf_object__open | 2021-11-14T00:01:18.685915Z | 2022-12-14T22:22:31.473646Z |
| osv-2021-1568 | Heap-use-after-free in MqttDecode_Props | 2021-11-12T00:00:42.998549Z | 2022-04-13T03:04:34.027054Z |
| osv-2021-1565 | Memcpy-param-overlap in parquet::DeltaByteArrayDecoder::GetInternal | 2021-11-12T00:00:22.286310Z | 2022-11-07T00:00:00.061851Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-python-2021-3177 | 2024-10-04T16:39:59.739Z | 2025-04-03T14:40:37.652Z | |
| bit-python-2022-26488 | 2024-10-04T16:38:49.929Z | 2025-04-03T14:40:37.652Z | |
| bit-python-2022-45061 | 2024-10-04T16:38:13.524Z | 2026-02-11T09:09:18.507Z | |
| bit-python-2023-41105 | 2024-10-04T16:35:59.533Z | 2025-04-03T14:40:37.652Z | |
| bit-python-2023-6507 | Groups not dropped before running subprocess when using empty 'extra_groups' parameter | 2024-10-04T16:35:46.829Z | 2025-05-20T10:02:07.006Z |
| bit-prestashop-2024-41651 | 2024-10-04T07:18:17.936Z | 2025-09-03T11:06:29.028Z | |
| bit-jenkins-2024-47803 | 2024-10-04T07:09:20.135Z | 2025-04-03T14:40:37.652Z | |
| bit-jenkins-2024-47804 | 2024-10-04T07:09:09.019Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2023-3441 | Exposure of Sensitive Information Due to Incompatible Policies in GitLab | 2024-10-03T07:38:54.069Z | 2025-05-20T10:02:07.006Z |
| bit-vault-2024-7594 | Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default | 2024-09-30T09:10:31.036Z | 2025-08-11T00:06:06.142Z |
| bit-gitlab-2024-8974 | Incorrect Provision of Specified Functionality in GitLab | 2024-09-30T08:53:12.028Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4278 | Incorrect Synchronization in GitLab | 2024-09-27T07:24:05.639Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2024-7207 | 2024-09-26T07:10:09.460Z | 2024-09-26T07:51:02.528Z | |
| bit-gitlab-2024-45409 | The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector | 2024-09-21T07:19:08.053Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2024-45806 | Potential manipulate `x-envoy` headers from external sources in envoy | 2024-09-21T07:10:58.550Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2024-45807 | oghttp2 crash on OnBeginHeadersForStream in envoy | 2024-09-21T07:10:45.353Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2024-45808 | Malicious log injection via access logs in envoy | 2024-09-21T07:10:31.256Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2024-45809 | Jwt filter crash in the clear route cache with remote JWKs in envoy | 2024-09-21T07:10:18.152Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2024-45810 | Envoy crashes for LocalReply in http async client | 2024-09-21T07:10:05.550Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2024-7553 | Accessing Untrusted Directory May Allow Local Privilege Escalation | 2024-09-20T07:17:59.251Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4283 | URL Redirection to Untrusted Site ('Open Redirect') in GitLab | 2024-09-18T07:23:19.137Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6685 | Authorization Bypass Through User-Controlled Key in GitLab | 2024-09-18T07:17:55.746Z | 2025-05-20T10:02:07.006Z |
| bit-python-2024-6232 | Regular-expression DoS when parsing TarFile headers | 2024-09-16T12:04:20.671Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-7592 | Quadratic complexity parsing cookies with backslashes | 2024-09-16T12:03:55.576Z | 2025-11-06T13:25:46.476Z |
| bit-gitlab-2024-2743 | Incorrect Authorization in GitLab | 2024-09-14T07:17:52.830Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4472 | Insertion of Sensitive Information into Log File in GitLab | 2024-09-14T07:13:58.424Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4612 | URL Redirection to Untrusted Site ('Open Redirect') in GitLab | 2024-09-14T07:13:08.316Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4660 | Missing Authorization in GitLab | 2024-09-14T07:12:55.540Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5435 | Generation of Error Message Containing Sensitive Information in GitLab | 2024-09-14T07:10:53.429Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6389 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab | 2024-09-14T07:09:28.429Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0807 | Multiples vulnérabilités dans Nessus Network Monitor | 2024-09-25T00:00:00.000000 | 2024-09-25T00:00:00.000000 |
| certfr-2024-avi-0806 | Multiples vulnérabilités dans Google Chrome | 2024-09-25T00:00:00.000000 | 2024-09-25T00:00:00.000000 |
| certfr-2024-avi-0805 | Vulnérabilité dans Nagios XI | 2024-09-25T00:00:00.000000 | 2024-09-25T00:00:00.000000 |
| certfr-2024-avi-0804 | Multiples vulnérabilités dans Stormshield Network Security | 2024-09-25T00:00:00.000000 | 2024-09-25T00:00:00.000000 |
| certfr-2024-avi-0803 | Vulnérabilité dans TheGreenBow VPN Client | 2024-09-24T00:00:00.000000 | 2024-09-24T00:00:00.000000 |
| certfr-2024-avi-0802 | Multiples vulnérabilités dans les produits Moxa | 2024-09-23T00:00:00.000000 | 2024-09-23T00:00:00.000000 |
| certfr-2024-avi-0801 | Multiples vulnérabilités dans les produits ESET | 2024-09-23T00:00:00.000000 | 2024-09-23T00:00:00.000000 |
| certfr-2024-avi-0800 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0799 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0798 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0797 | Multiples vulnérabilités dans les produits IBM | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0796 | Vulnérabilité dans Ivanti Cloud Services Appliance | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0795 | Vulnérabilité dans les produits Microsoft | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0794 | Vulnérabilité dans Microsoft Office | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0793 | Multiples vulnérabilités dans Microsoft Edge | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0792 | Multiples vulnérabilités dans VMware vCenter Server | 2024-09-18T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0791 | Vulnérabilité dans GitLab | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0790 | Multiples vulnérabilités dans Google Chrome | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0789 | Vulnérabilité dans Mozilla Firefox pour Android | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0788 | Multiples vulnérabilités dans les produits Atlassian | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0787 | Vulnérabilité dans LibreOffice | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0786 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0785 | Multiples vulnérabilités dans les produits Apple | 2024-09-17T00:00:00.000000 | 2024-09-17T00:00:00.000000 |
| certfr-2024-avi-0784 | Vulnérabilité dans Ivanti Cloud Service Appliance | 2024-09-17T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0783 | Vulnérabilité dans MISP | 2024-09-16T00:00:00.000000 | 2024-09-16T00:00:00.000000 |
| certfr-2024-avi-0782 | Vulnérabilité dans SolarWinds Access Rights Manager | 2024-09-16T00:00:00.000000 | 2024-09-16T00:00:00.000000 |
| certfr-2024-avi-0781 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-09-16T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| certfr-2024-avi-0780 | Multiples vulnérabilités dans les produits IBM | 2024-09-13T00:00:00.000000 | 2024-09-13T00:00:00.000000 |
| certfr-2024-avi-0779 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-09-13T00:00:00.000000 | 2024-09-13T00:00:00.000000 |
| certfr-2024-avi-0778 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-09-13T00:00:00.000000 | 2024-09-13T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000139 | baserCMS vulnerable to SQL injection | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000138 | baserCMS fails to restrict access permissions | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000137 | niconico App for iOS fails to verify SSL server certificates | 2015-09-29T14:05+09:00 | 2018-03-07T12:26+09:00 |
| jvndb-2015-000142 | Apache Cordova plugin cordova-plugin-file-transfer vulnerable to HTTP header injection | 2015-09-29T14:04+09:00 | 2015-12-21T17:45+09:00 |
| jvndb-2015-000136 | H2O vulnerable to directory traversal | 2015-09-17T13:36+09:00 | 2015-10-05T17:32+09:00 |
| jvndb-2015-000135 | Photon vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:15+09:00 |
| jvndb-2015-000134 | Reversi vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:18+09:00 |
| jvndb-2015-000133 | Koritore vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| jvndb-2015-000132 | MEGAPHONE MUSIC vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| jvndb-2015-000131 | Auction Camera vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-09-16T16:58+09:00 |
| jvndb-2015-000130 | applican vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-14T16:30+09:00 |
| jvndb-2015-000129 | PIXMA MG7500 Series vulnerable to cross-site request forgery | 2015-09-11T14:17+09:00 | 2015-09-15T17:17+09:00 |
| jvndb-2015-000116 | Japan Connected-free Wi-Fi vulnerable to script injection | 2015-09-11T14:17+09:00 | 2015-09-15T17:17+09:00 |
| jvndb-2015-000115 | Japan Connected-free Wi-Fi vulnerable to allow URL whitelist bypass | 2015-09-11T14:16+09:00 | 2016-05-27T14:32+09:00 |
| jvndb-2015-000127 | ELPhoneBtnV6 ActiveX control vulnerable to buffer overflow | 2015-09-07T13:38+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000128 | OpenDocMan vulnerable to cross-site scripting | 2015-09-04T18:13+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000125 | Apache Struts vulnerable to cross-site scripting | 2015-09-04T15:12+09:00 | 2017-10-02T12:08+09:00 |
| jvndb-2015-000124 | Apache Struts vulnerable to cross-site scripting | 2015-09-04T15:12+09:00 | 2015-12-25T13:45+09:00 |
| jvndb-2015-000301 | BBS X102 vulnerable to cross-site scripting | 2015-09-03T15:00+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000302 | hitSuji (rktSNS2) vulnetable to cross-site scripting | 2015-09-03T14:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000123 | NScripter vulnerable to buffer overflow | 2015-09-02T15:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000121 | Twit BBS vulnerable to cross-site scripting | 2015-09-01T14:18+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000120 | Rakuten card App for iOS fails to verify SSL server certificates | 2015-09-01T14:18+09:00 | 2018-03-14T12:30+09:00 |
| jvndb-2015-000122 | desknet's NEO vulnerable to directory traversal | 2015-09-01T12:36+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000119 | File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted | 2015-08-27T15:03+09:00 | 2015-09-02T17:57+09:00 |
| jvndb-2015-000118 | Apache Tapestry deserializes untrusted data | 2015-08-20T15:53+09:00 | 2015-08-26T17:51+09:00 |
| jvndb-2015-000117 | Multiple I-O DATA LAN routers vulnerable in UPnP functionality | 2015-08-18T15:21+09:00 | 2015-08-28T17:29+09:00 |
| jvndb-2015-000114 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery | 2015-08-12T15:13+09:00 | 2015-08-26T17:28+09:00 |
| jvndb-2015-000113 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site scripting | 2015-08-12T15:13+09:00 | 2015-08-26T17:38+09:00 |
| jvndb-2015-000112 | Microsoft Office discloses a file path of a local file | 2015-08-12T15:13+09:00 | 2015-08-12T15:13+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-04449 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976472) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04448 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976469) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04447 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976466) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04446 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976462) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04445 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976459) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04444 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976458) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04443 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976457) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04442 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-976455) | 2025-12-03 | 2026-01-21 |
| cnvd-2026-03544 | Blood Bank Management System rprofile.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03543 | Blood Bank Management System receiverLogin.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03542 | Blood Bank Management System login.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03541 | Blood Bank Management System hprofile.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03540 | Blood Bank Management System cancel.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03539 | Blood Bank Management System blooddinfo.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03538 | Blood Bank Management System abs.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03537 | Blood Bank Management System abs.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-00140 | Huawei HarmonyOS/EMUI释放后重用漏洞 | 2025-12-03 | 2026-01-05 |
| cnvd-2026-00139 | Huawei HarmonyOS/EMUI访问无效内存漏洞 | 2025-12-03 | 2026-01-05 |
| cnvd-2026-00138 | Huawei HarmonyOS/EMUI权限控制漏洞(CNVD-2026-00138) | 2025-12-03 | 2026-01-05 |
| cnvd-2026-00023 | Apache Kvrocks权限提升漏洞 | 2025-12-03 | 2026-01-04 |
| cnvd-2026-00022 | Apache bRPC拒绝服务漏洞(CNVD-2026-00022) | 2025-12-03 | 2026-01-04 |
| cnvd-2025-30579 | Apache Kvrocks信息泄露漏洞 | 2025-12-03 | 2025-12-12 |
| cnvd-2025-30566 | Apache SkyWalking跨站脚本漏洞(CNVD-2025-30566) | 2025-12-03 | 2025-12-12 |
| cnvd-2025-30565 | Apache CloudStack访问控制错误漏洞(CNVD-2025-30565) | 2025-12-03 | 2025-12-12 |
| cnvd-2025-30511 | LIVE555 Streaming Media空指针取消引用漏洞 | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30510 | LIVE555 Streaming Media释放后重用漏洞(CNVD-2025-30510) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30509 | LIVE555 Streaming Media堆缓冲区溢出漏洞(CNVD-2025-30509) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30508 | LIVE555 Streaming Media缓冲区溢出漏洞 | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30507 | LIVE555 Streaming Media释放后重用漏洞 | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30463 | Socomec Easy Config System身份认证绕过漏洞 | 2025-12-03 | 2025-12-11 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-16168 | Уязвимость реализации протокола AVRCP стека протоколов Bluetooth для ОС Linux BlueZ, позв… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16167 | Уязвимость драйвера TEE SOC микропрограммного обеспечения процессоров AMD, позволяющая на… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16166 | Уязвимость реализации протокола AVRCP стека протоколов Bluetooth для ОС Linux BlueZ, позв… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16165 | Уязвимость функции bgp_capability_llgr() программного средства реализации сетевой маршрут… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16164 | Уязвимость функции resolveSubtable библиотеки для перевода текста в шрифт Брайля Liblouis… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16163 | Уязвимость функции __wrap_pthread_create() библиотеки Libcap, позволяющая нарушителю вызв… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16162 | Уязвимость функции WavpackPackSamples аудиокодека WavPack, позволяющая нарушителю вызвать… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16161 | Уязвимость функции extract_slice() программного обеспечения для анализа сетевого трафика … | 22.12.2025 | 22.12.2025 |
| bdu:2025-16160 | Уязвимость decompress_smooth_data() библиотеки для работы с изображениями libjpeg-turbo, … | 22.12.2025 | 22.12.2025 |
| bdu:2025-16158 | Уязвимость функции read_samples() аудиокодека Speex, позволяющая нарушителю вызвать отказ… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16157 | Уязвимость функции zzip_disk_entry_to_file_header файла mmapped.c библиотеки архивировани… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16156 | Уязвимость функции dl_server_start() файла kernel/sched/deadline.c ядра операционной сист… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16155 | Уязвимость функции tls_strp_msg_hold() ядра операционной системы Linux, позволяющая наруш… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16154 | Уязвимость функции probe() ядра операционной системы Linux, позволяющая нарушителю вызват… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16153 | Уязвимость функции kvmalloc() ядра операционной системы Linux, позволяющая нарушителю выз… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16152 | Уязвимость функции pid_nr_ns() ядра операционной системы Linux, позволяющая нарушителю вы… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16151 | Уязвимость модуля drivers/mailbox/zynqmp-ipi-mailbox.c ядра операционной системы Linux, п… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16150 | Уязвимость функции ioremap_cache() ядра операционной системы Linux, позволяющая нарушител… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16149 | Уязвимость функции __sk_dst_get() ядра операционной системы Linux, позволяющая нарушителю… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16148 | Уязвимость функции __dm_suspend() ядра операционной системы Linux, позволяющая нарушителю… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16147 | Уязвимость функции ip6_xmit() ядра операционной системы Linux, позволяющая нарушителю выз… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16146 | Уязвимость функции f2fs_truncate() ядра операционной системы Linux, позволяющая нарушител… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16145 | Уязвимость консоли управления микропрограммного обеспечения межсетевых экранов SonicWall … | 22.12.2025 | 22.12.2025 |
| bdu:2025-16144 | Уязвимость модуля net/smc/smc_clc.c ядра операционной системы Linux, позволяющая нарушите… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16143 | Уязвимость функции blk_should_throtl() ядра операционной системы Linux, позволяющая наруш… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16142 | Уязвимость демона iked операционной системы WatchGuard Fireware OS, позволяющая нарушител… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16141 | Уязвимость функции devm_add_action_or_reset() ядра операционной системы Linux, позволяюща… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16140 | Уязвимость функции f2fs_check_quota_consistency() ядра операционной системы Linux, позвол… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16139 | Уязвимость модуля drivers/crypto/hisilicon/qm.c ядра операционной системы Linux, позволяю… | 22.12.2025 | 22.12.2025 |
| bdu:2025-16137 | Уязвимость модуля drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2_core/dml2_core_share… | 19.12.2025 | 19.12.2025 |
| ID | Description | Updated |
|---|---|---|
| var-202510-3385 | Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5… | 2025-11-23T23:49:02.655000Z |
| var-202211-1393 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_w… | 2025-11-23T23:47:13.699000Z |
| var-202510-0313 | A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the functio… | 2025-11-23T23:47:07.513000Z |
| var-202510-2976 | Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/jso… | 2025-11-23T23:47:07.417000Z |
| var-202303-2025 | Shenzhen Tenda Technology Co.,Ltd. of AX3 An out-of-bounds write vulnerability exists in … | 2025-11-23T23:44:53.092000Z |
| var-202510-3185 | SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC… | 2025-11-23T23:44:46.498000Z |
| var-202305-0317 | Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerabi… | 2025-11-23T23:43:43.564000Z |
| var-202403-1075 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter … | 2025-11-23T23:41:34.853000Z |
| var-202508-2414 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function… | 2025-11-23T23:41:28.512000Z |
| var-202510-2770 | Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability… | 2025-11-23T23:41:28.189000Z |
| var-202510-4200 | Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1… | 2025-11-23T23:41:28.132000Z |
| var-202510-4199 | Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affect… | 2025-11-23T23:39:42.791000Z |
| var-202511-1167 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed … | 2025-11-23T23:39:42.733000Z |
| var-202511-2049 | Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter … | 2025-11-23T23:39:42.669000Z |
| var-202308-3363 | Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function for… | 2025-11-23T23:37:50.056000Z |
| var-202508-2324 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo f… | 2025-11-23T23:37:42.374000Z |
| var-202510-3393 | Undocumented administrative accounts were getting created to facilitate access for applic… | 2025-11-23T23:37:42.038000Z |
| var-202211-1323 | Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName. … | 2025-11-23T23:33:15.964000Z |
| var-202510-0217 | A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affecte… | 2025-11-23T23:32:03.076000Z |
| var-202510-2544 | Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.1… | 2025-11-23T23:32:02.971000Z |
| var-202510-3993 | Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through… | 2025-11-23T23:32:02.916000Z |
| var-202510-4098 | Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.… | 2025-11-23T23:32:02.897000Z |
| var-202403-1040 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAd… | 2025-11-23T23:25:30.940000Z |
| var-200609-0701 | WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote atta… | 2025-11-23T22:46:17.219000Z |
| var-200609-1205 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2025-11-23T21:48:25.347000Z |
| var-202510-2768 | Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.… | 2025-11-23T19:40:27.512000Z |
| var-202510-3188 | HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading … | 2025-11-23T19:40:27.485000Z |
| var-202510-3902 | Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through… | 2025-11-23T19:40:27.450000Z |
| var-202511-0367 | Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto… | 2025-11-23T19:40:27.393000Z |
| var-202511-0385 | An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router … | 2025-11-22T23:39:14.318000Z |