Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-40262 |
8.7 (3.1)
|
Note Mark has Stored XSS via Unrestricted Asset Upload |
enchant97 |
note-mark |
2026-04-16T23:51:38.679Z | 2026-04-18T02:51:02.474Z |
| CVE-2026-22734 |
8.6 (3.1)
|
Cloud Foundry UAA SAML 2.0 Signature Bypass |
Cloud Foundry |
UUA |
2026-04-16T23:33:43.596Z | 2026-04-17T13:21:04.331Z |
| CVE-2026-40260 |
6.9 (4.0)
|
pypdf: Manipulated XMP metadata entity declarations ca… |
py-pdf |
pypdf |
2026-04-16T23:18:26.687Z | 2026-04-17T18:42:05.059Z |
| CVE-2026-40922 |
5.3 (4.0)
|
SiYuan: Incomplete sanitization of bazaar README allow… |
siyuan-note |
siyuan |
2026-04-16T23:14:00.592Z | 2026-04-20T14:59:52.008Z |
| CVE-2026-40322 |
9.1 (3.1)
|
SiYuan: Mermaid `javascript:` Link Injection Leads to … |
siyuan-note |
siyuan |
2026-04-16T23:00:07.719Z | 2026-04-17T12:26:06.118Z |
| CVE-2026-40318 |
8.5 (3.1)
|
SiYuan: Publish Reader Path Traversal Delete via `remo… |
siyuan-note |
siyuan |
2026-04-16T22:54:47.881Z | 2026-04-18T02:48:57.193Z |
| CVE-2026-40259 |
8.1 (3.1)
|
SiYuan: Publish Reader Can Arbitrarily Delete Attribut… |
siyuan-note |
siyuan |
2026-04-16T22:49:36.992Z | 2026-04-20T14:59:59.417Z |
| CVE-2024-58343 |
4.3 (3.1)
|
Vision Helpdesk before 5.7.0 (patched in 5.6.10) … |
Vision |
Helpdesk |
2026-04-16T22:27:03.084Z | 2026-04-17T13:31:05.652Z |
| CVE-2026-40255 |
6.1 (3.1)
|
@adonisjs/http-server has an Open Redirect vulnerability |
adonisjs |
http-server |
2026-04-16T22:25:38.155Z | 2026-04-17T18:43:10.697Z |
| CVE-2026-40253 |
6.8 (3.1)
|
openCryptoki: Memory safety vulnerabilities in BER/DER… |
opencryptoki |
opencryptoki |
2026-04-16T22:04:44.005Z | 2026-04-17T12:27:41.682Z |
| CVE-2026-41113 |
8.1 (3.1)
|
sagredo qmail before 2026.04.07 allows tls_quit r… |
sagredo |
qmail |
2026-04-16T22:02:10.225Z | 2026-04-18T20:09:47.901Z |
| CVE-2026-40249 |
6.9 (4.0)
|
free5gc UDR fail-open request handling in PolicyDataSu… |
free5gc |
free5gc |
2026-04-16T21:59:36.282Z | 2026-04-18T02:47:28.094Z |
| CVE-2026-40248 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:57:13.101Z | 2026-04-20T15:00:17.552Z |
| CVE-2026-40247 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:54:04.151Z | 2026-04-17T18:44:09.831Z |
| CVE-2026-40246 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:40:03.598Z | 2026-04-18T02:46:14.355Z |
| CVE-2026-40170 |
7.5 (3.1)
|
ngtcp2 has a qlog transport parameter serialization st… |
ngtcp2 |
ngtcp2 |
2026-04-16T21:34:07.610Z | 2026-04-20T15:00:26.193Z |
| CVE-2026-40308 |
8.8 (4.0)
|
My Calendar: Unauthenticated Information Disclosure (I… |
joedolson |
my-calendar |
2026-04-16T21:30:52.401Z | 2026-04-17T12:32:26.622Z |
| CVE-2026-39313 |
8.7 (4.0)
|
MCP-Framework: Unbounded memory allocation in readRequ… |
QuantGeekDev |
mcp-framework |
2026-04-16T21:24:27.328Z | 2026-04-17T18:46:07.726Z |
| CVE-2026-35469 |
8.7 (4.0)
|
SpdyStream: DOS on CRI |
moby |
spdystream |
2026-04-16T21:19:23.516Z | 2026-04-17T12:37:27.329Z |
| CVE-2026-34164 |
4.9 (3.1)
|
Valtimo: Sensitive data exposure through inbox message… |
valtimo-platform |
valtimo |
2026-04-16T21:17:35.472Z | 2026-04-18T02:44:44.369Z |
| CVE-2026-33472 |
4.8 (3.1)
|
Cryptomator Hub OAuth token exchange HTTP downgrade vi… |
cryptomator |
cryptomator |
2026-04-16T21:12:37.076Z | 2026-04-20T15:00:33.905Z |
| CVE-2026-40901 |
7.5 (4.0)
|
DataEase: Quartz Deserialization → Remote Code Execution |
dataease |
dataease |
2026-04-16T20:57:45.978Z | 2026-04-17T18:47:00.448Z |
| CVE-2026-40900 |
8.7 (4.0)
|
DataEase has SQL Injection via Stacked Queries |
dataease |
dataease |
2026-04-16T20:53:27.788Z | 2026-04-17T12:38:32.676Z |
| CVE-2026-40899 |
8.3 (4.0)
|
DataEase has an Arbitrary File Read Vulnerability |
dataease |
dataease |
2026-04-16T19:48:44.201Z | 2026-04-18T02:43:14.720Z |
| CVE-2026-33207 |
8.6 (4.0)
|
DataEase SQL Injection Vulnerability |
dataease |
dataease |
2026-04-16T19:37:36.197Z | 2026-04-20T15:00:41.415Z |
| CVE-2026-33122 |
8.6 (4.0)
|
DataEase has SQL Injection via Datasource Management |
dataease |
dataease |
2026-04-16T19:24:03.195Z | 2026-04-17T18:47:44.791Z |
| CVE-2025-54502 |
7.1 (4.0)
|
Incorrect use of boot service in the AMD Platform… |
AMD |
AMD EPYC™ 9004 Series Processors |
2026-04-16T18:46:13.377Z | 2026-04-17T03:55:16.268Z |
| CVE-2025-54510 |
5.9 (4.0)
|
A missing lock verification in AMD Secure Process… |
AMD |
AMD EPYC™ 9004 Series Processors |
2026-04-16T18:44:10.182Z | 2026-04-16T19:10:19.002Z |
| CVE-2026-6442 |
8.3 (3.1)
|
Improper Command Detection Logic Allows RCE in Cortex … |
Snowflake |
Cortex Code CLI |
2026-04-16T18:43:21.181Z | 2026-04-16T18:54:58.366Z |
| CVE-2023-20585 |
5.6 (4.0)
|
Insufficient checks of the RMP on host buffer acc… |
AMD |
AMD EPYC™ 7003 Series Processors |
2026-04-16T18:42:28.281Z | 2026-04-16T19:12:06.991Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-34018 |
6.3 (3.0)
5.1 (4.0)
|
An SQL injection vulnerability exists in CubeCart… |
CubeCart Limited |
CubeCart |
2026-04-17T04:33:35.768Z | 2026-04-17T12:20:12.217Z |
| CVE-2026-21719 |
7.2 (3.0)
8.6 (4.0)
|
An OS command injection vulnerability exists in C… |
CubeCart Limited |
CubeCart |
2026-04-17T04:33:17.708Z | 2026-04-17T12:21:48.770Z |
| CVE-2026-6080 |
6.5 (3.1)
|
Tutor LMS <= 3.9.8 - Authenticated (Admin+) SQL Inject… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-04-17T03:36:44.234Z | 2026-04-20T14:59:23.108Z |
| CVE-2026-5807 |
7.5 (3.1)
|
Vault Vulnerable to Denial-of-Service via Unauthentica… |
HashiCorp |
Vault |
2026-04-17T03:22:13.816Z | 2026-04-17T17:57:55.504Z |
| CVE-2026-5502 |
5.3 (3.1)
|
Tutor LMS <= 3.9.8 - Authenticated (Subscriber+) Arbit… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-04-17T03:36:45.463Z | 2026-04-17T14:28:01.492Z |
| CVE-2026-5427 |
5.3 (3.1)
|
Kubio AI Page Builder <= 2.7.2 - Missing Authorization… |
extendthemes |
Kubio AI Page Builder |
2026-04-17T03:36:44.993Z | 2026-04-17T18:48:57.774Z |
| CVE-2026-5234 |
5.3 (3.1)
|
LatePoint <= 5.3.2 - Insecure Direct Object Reference … |
latepoint |
LatePoint – Calendar Booking Plugin for Appointments and Events |
2026-04-17T03:36:44.618Z | 2026-04-17T18:38:40.183Z |
| CVE-2026-4853 |
4.9 (3.1)
|
JetBackup <= 3.1.19.8 - Authenticated (Administrator+)… |
backupguard |
JetBackup – Backup, Restore & Migrate |
2026-04-17T03:36:43.041Z | 2026-04-17T12:23:01.736Z |
| CVE-2026-3330 |
4.9 (3.1)
|
Form Maker by 10Web <= 1.15.40 - Authenticated (Admini… |
10web |
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder |
2026-04-17T03:36:43.818Z | 2026-04-17T11:15:39.808Z |
| CVE-2026-5052 |
5.3 (3.1)
|
Vault Vulnerable to Server-Side Request Forgery in ACM… |
HashiCorp |
Vault |
2026-04-17T02:55:25.080Z | 2026-04-17T17:57:55.377Z |
| CVE-2026-4666 |
6.5 (3.1)
|
wpForo Forum <= 2.4.16 - Missing Authorization to Auth… |
tomdever |
wpForo Forum |
2026-04-17T02:25:04.892Z | 2026-04-20T14:59:31.196Z |
| CVE-2026-4525 |
7.5 (3.1)
|
Vault Token Leaked to Backends via Authorization: Bear… |
HashiCorp |
Vault |
2026-04-17T03:00:47.561Z | 2026-04-17T17:22:41.255Z |
| CVE-2026-3605 |
8.1 (3.1)
|
Vault KVv2 Metadata and Secret Deletion Policy Bypass … |
HashiCorp |
Vault |
2026-04-17T02:44:42.032Z | 2026-04-17T17:57:55.431Z |
| CVE-2026-5231 |
7.2 (3.1)
|
WP Statistics <= 14.16.4 - Unauthenticated Stored Cros… |
veronalabs |
WP Statistics – Simple, privacy-friendly Google Analytics alternative |
2026-04-17T01:24:37.573Z | 2026-04-17T14:30:43.119Z |
| CVE-2026-5162 |
6.4 (3.1)
|
Royal Addons for Elementor <= 1.7.1056 - Authenticated… |
wproyal |
Royal Addons for Elementor – Addons and Templates Kit for Elementor |
2026-04-17T01:24:36.629Z | 2026-04-17T18:48:24.671Z |
| CVE-2026-4817 |
6.5 (3.1)
|
MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+… |
stylemix |
MasterStudy LMS WordPress Plugin – for Online Courses and Education |
2026-04-17T01:24:37.193Z | 2026-04-17T18:39:48.201Z |
| CVE-2026-3488 |
6.5 (3.1)
|
WP Statistics <= 14.16.4 - Missing Authorization to Au… |
veronalabs |
WP Statistics – Simple, privacy-friendly Google Analytics alternative |
2026-04-17T01:24:37.967Z | 2026-04-17T12:25:12.232Z |
| CVE-2026-40922 |
5.3 (4.0)
|
SiYuan: Incomplete sanitization of bazaar README allow… |
siyuan-note |
siyuan |
2026-04-16T23:14:00.592Z | 2026-04-20T14:59:52.008Z |
| CVE-2026-40265 |
5.9 (3.1)
|
Note Mark has Broken Access Control on Asset Download |
enchant97 |
note-mark |
2026-04-16T23:56:02.961Z | 2026-04-17T18:40:45.157Z |
| CVE-2026-40263 |
3.7 (3.1)
|
Note Mark: Username Enumeration via Login Endpoint Tim… |
enchant97 |
note-mark |
2026-04-16T23:53:50.195Z | 2026-04-17T12:23:42.042Z |
| CVE-2026-40262 |
8.7 (3.1)
|
Note Mark has Stored XSS via Unrestricted Asset Upload |
enchant97 |
note-mark |
2026-04-16T23:51:38.679Z | 2026-04-18T02:51:02.474Z |
| CVE-2026-40260 |
6.9 (4.0)
|
pypdf: Manipulated XMP metadata entity declarations ca… |
py-pdf |
pypdf |
2026-04-16T23:18:26.687Z | 2026-04-17T18:42:05.059Z |
| CVE-2026-22734 |
8.6 (3.1)
|
Cloud Foundry UAA SAML 2.0 Signature Bypass |
Cloud Foundry |
UUA |
2026-04-16T23:33:43.596Z | 2026-04-17T13:21:04.331Z |
| CVE-2026-40322 |
9.1 (3.1)
|
SiYuan: Mermaid `javascript:` Link Injection Leads to … |
siyuan-note |
siyuan |
2026-04-16T23:00:07.719Z | 2026-04-17T12:26:06.118Z |
| CVE-2026-40318 |
8.5 (3.1)
|
SiYuan: Publish Reader Path Traversal Delete via `remo… |
siyuan-note |
siyuan |
2026-04-16T22:54:47.881Z | 2026-04-18T02:48:57.193Z |
| CVE-2026-40259 |
8.1 (3.1)
|
SiYuan: Publish Reader Can Arbitrarily Delete Attribut… |
siyuan-note |
siyuan |
2026-04-16T22:49:36.992Z | 2026-04-20T14:59:59.417Z |
| CVE-2026-40255 |
6.1 (3.1)
|
@adonisjs/http-server has an Open Redirect vulnerability |
adonisjs |
http-server |
2026-04-16T22:25:38.155Z | 2026-04-17T18:43:10.697Z |
| CVE-2026-40253 |
6.8 (3.1)
|
openCryptoki: Memory safety vulnerabilities in BER/DER… |
opencryptoki |
opencryptoki |
2026-04-16T22:04:44.005Z | 2026-04-17T12:27:41.682Z |
| CVE-2024-58343 |
4.3 (3.1)
|
Vision Helpdesk before 5.7.0 (patched in 5.6.10) … |
Vision |
Helpdesk |
2026-04-16T22:27:03.084Z | 2026-04-17T13:31:05.652Z |
| CVE-2026-41113 |
8.1 (3.1)
|
sagredo qmail before 2026.04.07 allows tls_quit r… |
sagredo |
qmail |
2026-04-16T22:02:10.225Z | 2026-04-18T20:09:47.901Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-x23f-9g5c-6qmp |
7.0 (3.1)
|
Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-whvh-93vh-g249 |
8.8 (3.1)
|
Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized at… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-w9q8-v7fh-ff6x |
7.8 (3.1)
|
Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-rhgr-5jwv-9hcr |
7.8 (3.1)
|
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker … | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-qqjc-23pp-wrrm |
4.4 (3.1)
|
Improper input validation in Windows Hello allows an authorized attacker to bypass a security featu… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-px9p-mm95-78ww |
9.3 (3.1)
|
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-p98g-6f6c-423f |
7.8 (3.1)
|
Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized at… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-p85r-hffw-65q4 |
9.6 (3.1)
|
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Dat… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-m4p2-m73g-c9h4 |
5.4 (3.1)
|
Adobe Experience Manager versions FP11.7 and earlier are affected by a stored Cross-Site Scripting … | 2026-04-14T18:30:38Z | 2026-04-14T21:31:46Z |
| ghsa-jmgc-3mxg-m5mr |
7.8 (3.1)
|
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privi… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-hxjp-pw3h-w6qr |
4.6 (3.1)
|
Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a s… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-hm2p-4g74-cx7c |
8.0 (3.1)
|
Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-gc27-55qr-7cqv |
7.0 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-fm65-7j3c-jcv3 |
9.3 (3.1)
|
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-cxcv-8mqv-f8wf |
7.0 (3.1)
|
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to el… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-c95w-cq44-cgc5 |
7.8 (3.1)
|
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-9g78-wccg-v453 |
7.7 (3.1)
|
Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-9cr5-9f63-xhxx |
7.8 (3.1)
|
Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized att… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-8gh5-q362-whfc |
7.8 (3.1)
|
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-85g7-96qr-w5x4 |
5.5 (3.1)
|
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that c… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-68mm-8x63-m87j |
7.0 (3.1)
|
Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized att… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:39Z |
| ghsa-65v5-rhmh-vvjr |
7.8 (3.1)
|
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker … | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-55g2-jw6p-6xg8 |
7.8 (3.1)
|
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileg… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-4gmq-qmqj-mjvf |
7.8 (3.1)
|
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileg… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-4c2f-hvf5-4jwv |
9.3 (3.1)
|
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-3wgf-ccpx-rv72 |
7.8 (3.1)
|
Improper handling of insufficient permissions or privileges in Windows Installer allows an authoriz… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-35fw-6mhj-pxpw |
7.0 (3.1)
|
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to el… | 2026-04-14T18:30:38Z | 2026-04-14T18:30:38Z |
| ghsa-xm9h-x34f-j9hj |
7.5 (3.1)
|
Improper input validation in Windows Server Update Service allows an unauthorized attacker to perfo… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-xgxp-5498-vvcw |
7.8 (3.1)
|
Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileg… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-xgvv-w3j6-fcfq |
7.0 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-889 |
5.4 (3.1)
|
A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-contr… | plone | 2021-03-24T15:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2021-432 |
|
Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before v… | nanopb | 2021-03-23T18:15:00Z | 2021-11-24T22:47:12.152718Z |
| pysec-2021-140 |
|
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of serv… | pygments | 2021-03-23T17:15:00Z | 2021-08-27T03:22:17.263376Z |
| pysec-2021-32 |
|
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web… | omero-web | 2021-03-23T16:15:00Z | 2021-03-27T02:20:00Z |
| pysec-2021-31 |
|
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web… | omero-web | 2021-03-23T16:15:00Z | 2021-03-27T01:59:00Z |
| pysec-2021-19 |
|
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. … | lxml | 2021-03-21T05:15:00Z | 2021-03-30T18:47:00Z |
| pysec-2021-39 |
|
An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleD… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T13:36:00Z |
| pysec-2021-38 |
|
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expressio… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:03:00Z |
| pysec-2021-37 |
|
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bound… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:09:00Z |
| pysec-2021-36 |
|
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offs… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:11:00Z |
| pysec-2021-35 |
|
An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overfl… | pillow | 2021-03-19T04:15:00Z | 2021-03-26T14:06:00Z |
| pysec-2021-141 |
|
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely hea… | pygments | 2021-03-17T13:15:00Z | 2021-08-27T03:22:17.331175Z |
| pysec-2021-59 |
|
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in s… | urllib3 | 2021-03-15T18:15:00Z | 2021-03-23T16:47:00Z |
| pysec-2021-60 |
|
Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerabilit… | tenable-jira-cloud | 2021-03-10T22:15:00Z | 2021-03-18T20:38:00Z |
| pysec-2021-43 |
|
Products.GenericSetup is a mini-framework for expressing the configured state of a Zope S… | products-genericsetup | 2021-03-09T01:15:00Z | 2021-03-12T18:05:00Z |
| pysec-2021-45 |
|
Products.PluggableAuthService is a pluggable Zope authentication and authorization framew… | products-pluggableauthservice | 2021-03-08T21:15:00Z | 2021-03-12T13:48:00Z |
| pysec-2021-44 |
|
Products.PluggableAuthService is a pluggable Zope authentication and authorization framew… | products-pluggableauthservice | 2021-03-08T21:15:00Z | 2021-03-12T13:22:00Z |
| pysec-2021-127 |
|
Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component o… | apache-superset | 2021-03-05T12:15:00Z | 2021-08-27T03:21:55.702415Z |
| pysec-2021-20 |
|
markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of servi… | markdown2 | 2021-03-03T16:15:00Z | 2021-05-10T03:15:00Z |
| pysec-2021-891 |
7.8 (3.1)
|
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 S… | salt | 2021-03-03T10:15:13+00:00 | 2025-04-09T17:27:27.582884+00:00 |
| pysec-2021-42 |
|
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… | pillow | 2021-03-03T09:15:00Z | 2021-03-23T19:48:00Z |
| pysec-2021-41 |
|
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… | pillow | 2021-03-03T09:15:00Z | 2021-03-23T19:49:00Z |
| pysec-2021-40 |
|
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… | pillow | 2021-03-03T09:15:00Z | 2021-03-23T19:49:00Z |
| pysec-2021-75 |
|
In SaltStack Salt before 3002.5, when authenticating to services using certain modules, t… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-74 |
|
In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi serv… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-73 |
|
An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vul… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-57 |
|
An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vul… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-55 |
|
An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to … | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-54 |
|
In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They mi… | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-53 |
|
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can … | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1142 | Malicious code in wisecloudcyberark (PyPI) | 2026-03-02T18:48:31Z | 2026-04-01T12:28:04Z |
| mal-2026-1140 | Malicious code in heimdal-credentials (PyPI) | 2026-03-02T18:48:28Z | 2026-04-01T12:28:04Z |
| mal-2026-1143 | Malicious code in wisecloudsecrets (PyPI) | 2026-03-02T18:48:25Z | 2026-04-01T12:28:04Z |
| mal-2026-1137 | Malicious code in fwk-amigapython (PyPI) | 2026-03-02T18:48:22Z | 2026-04-01T12:28:04Z |
| mal-2026-1138 | Malicious code in fwk-amigapython-amigamlserver (PyPI) | 2026-03-02T18:48:18Z | 2026-04-01T12:28:04Z |
| mal-2026-1139 | Malicious code in fwk-amigapython-rest-server (PyPI) | 2026-03-02T18:48:10Z | 2026-04-01T12:28:04Z |
| mal-2026-1141 | Malicious code in identityapi (PyPI) | 2026-03-02T18:47:02Z | 2026-04-01T12:28:04Z |
| mal-2026-1128 | Malicious code in colorize-console (npm) | 2026-03-02T15:56:58Z | 2026-03-08T01:39:43Z |
| mal-2026-1120 | Malicious code in @nazi-team/libsignal-node (npm) | 2026-03-02T15:56:58Z | 2026-03-08T01:39:42Z |
| mal-2026-1119 | Malicious code in @nazi-team/baileys (npm) | 2026-03-02T15:56:58Z | 2026-03-08T01:39:42Z |
| mal-2026-1122 | Malicious code in @sanzxcode/libsignal-node (npm) | 2026-03-02T15:55:38Z | 2026-03-08T01:39:42Z |
| mal-2026-1121 | Malicious code in @sanzxcode/baileys (npm) | 2026-03-02T15:55:38Z | 2026-03-08T01:39:42Z |
| mal-2026-1118 | Malicious code in @daffadeveloper/libsignal-node (npm) | 2026-03-02T15:54:17Z | 2026-03-08T01:39:42Z |
| mal-2026-1117 | Malicious code in @daffadeveloper/baileys (npm) | 2026-03-02T15:54:17Z | 2026-03-08T01:39:42Z |
| mal-2026-1135 | Malicious code in yuji-baileys (npm) | 2026-03-02T15:48:43Z | 2026-03-08T01:39:48Z |
| mal-2026-1133 | Malicious code in sukuna-baileys (npm) | 2026-03-02T15:48:43Z | 2026-03-08T01:39:47Z |
| mal-2026-1131 | Malicious code in ngaturkids (npm) | 2026-03-02T15:48:43Z | 2026-03-08T01:39:46Z |
| mal-2026-1129 | Malicious code in danzxz (npm) | 2026-03-02T15:48:43Z | 2026-03-08T01:39:43Z |
| mal-2026-1130 | Malicious code in kazumarii (npm) | 2026-03-02T15:48:42Z | 2026-03-08T01:39:45Z |
| mal-2026-1134 | Malicious code in ts-big-number (npm) | 2026-03-02T15:46:42Z | 2026-03-08T01:39:48Z |
| mal-2026-1132 | Malicious code in npm-doc-builder (npm) | 2026-03-02T15:46:42Z | 2026-03-08T01:39:46Z |
| mal-2026-1127 | Malicious code in @yaoii-bails/yaoii-baileys (npm) | 2026-03-02T15:45:27Z | 2026-03-08T01:39:42Z |
| mal-2026-1126 | Malicious code in @yaoii-bails/socket (npm) | 2026-03-02T15:45:27Z | 2026-03-08T01:39:42Z |
| mal-2026-1125 | Malicious code in @yaoii-bails/libsignall-node (npm) | 2026-03-02T15:45:27Z | 2026-03-08T01:39:42Z |
| mal-2026-1124 | Malicious code in @yaoii-bails/libsignal-node (npm) | 2026-03-02T15:45:27Z | 2026-03-08T01:39:42Z |
| mal-2026-1123 | Malicious code in @yaoii-bails/baileys (npm) | 2026-03-02T15:45:27Z | 2026-03-08T01:39:42Z |
| mal-2026-1115 | Malicious code in chai-vest (npm) | 2026-03-02T14:33:46Z | 2026-03-08T01:39:43Z |
| mal-2026-1116 | Malicious code in js-nodecat (npm) | 2026-03-02T14:33:45Z | 2026-04-01T12:28:02Z |
| mal-2026-1108 | Malicious code in hapi-lint (npm) | 2026-03-02T02:31:20Z | 2026-03-08T01:39:44Z |
| mal-2026-1102 | Malicious code in bcryptance (npm) | 2026-03-02T02:30:45Z | 2026-03-08T01:39:43Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1303 | Perl (IBM AIX): Schwachstelle ermöglicht Codeausführung | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1302 | Kibana: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1301 | Mozilla Thunderbird: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-06-10T22:00:00.000+00:00 | 2025-07-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1300 | Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-06-10T22:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-1299 | Apache CloudStack: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1298 | AMD Prozessoren: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-10T22:00:00.000+00:00 | 2025-10-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1297 | Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1296 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-06-10T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1295 | Fortinet FortiOS und FortiProxy: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1294 | GeoServer: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1293 | IBM DataPower Gateway: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-1292 | Trend Micro Apex Central: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1291 | Pixel Patchday Juni 2025: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-09-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1290 | Fortinet FortiOS, FortiProxy, FortiWeb: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1289 | Fortinet FortiClient EMS: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1288 | IBM Security Verify Access: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1287 | Adobe Creative Cloud Anwendungen: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1286 | Fortinet FortiClient Windows: Schwachstelle ermöglicht Manipulation | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1285 | Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-06-10T22:00:00.000+00:00 | 2025-08-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1284 | Adobe Magento: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1283 | Fortinet FortiOS: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1282 | Fortinet FortiPortal: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1281 | Adobe: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1280 | Intel Firmware: Schwachstelle ermöglicht Denial of Service | 2025-06-10T22:00:00.000+00:00 | 2025-07-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1279 | Broadcom Fabric OS: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1278 | AMD Prozessoren: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-06-10T22:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-1277 | Microsoft Windows: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-10-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1276 | Microsoft Office Produkte: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-06-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1275 | Microsoft Azure: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-06-10T22:00:00.000+00:00 | 2025-06-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1274 | Microsoft Developer Tools: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-06-30T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-280-02 | Mobile Industrial Robots Vehicles and MiR Fleet Software | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsa-21-280-01 | Johnson Controls exacqVision Server Bundle | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsa-21-278-04 | Honeywell Experion PKS and ACE Controllers | 2021-10-05T00:00:00.000000Z | 2021-10-05T00:00:00.000000Z |
| icsa-21-278-03 | Moxa MXview Network Management Software | 2021-10-05T00:00:00.000000Z | 2021-10-05T00:00:00.000000Z |
| icsa-21-278-02 | Emerson WirelessHART Gateway | 2021-10-05T00:00:00.000000Z | 2021-10-05T00:00:00.000000Z |
| icsa-21-278-01 | Mitsubishi Electric GOT and Tension Controller (Update A) | 2021-10-05T00:00:00.000000Z | 2022-04-07T00:00:00.000000Z |
| icsma-21-273-01 | Boston Scientific Zoom Latitude | 2021-09-30T00:00:00.000000Z | 2021-09-30T00:00:00.000000Z |
| icsa-21-287-06 | Siemens Solid Edge | 2021-09-28T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-266-02 | Trane Tracer | 2021-09-23T00:00:00.000000Z | 2021-09-23T00:00:00.000000Z |
| icsa-21-266-01 | Trane Symbio (Update B) | 2021-09-23T00:00:00.000000Z | 2022-01-13T00:00:00.000000Z |
| icsa-25-273-02 | Festo SBRD-Q/SBOC-Q/SBOI-Q | 2021-09-22T11:13:00.000000Z | 2025-08-26T10:00:00.000000Z |
| icsa-21-259-02 | Schneider Electric EcoStruxure and SCADAPack | 2021-09-16T00:00:00.000000Z | 2021-09-16T00:00:00.000000Z |
| icsa-21-259-01 | Siemens RUGGEDCOM ROX (Update A) | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-22 | Siemens Teamcenter Active Workspace | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-21 | Siemens Industrial Edge | 2021-09-14T00:00:00.000000Z | 2021-09-14T00:00:00.000000Z |
| icsa-21-257-20 | Siemens LOGO! CMR and SIMATIC RTU 3000 | 2021-09-14T00:00:00.000000Z | 2021-09-14T00:00:00.000000Z |
| icsa-21-257-19 | Siemens SINEMA Remote Connect Server | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-18 | Siemens Siveillance OIS | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-17 | Siemens Desigo CC Family | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-16 | Siemens SIPROTEC 5 (Update A) | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-15 | Siemens SIMATIC NET CP Modules | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-14 | Siemens SINEC NMS | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-13 | Siemens LOGO! CMR and SIMATIC RTU 3000 (Update A) | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-12 | Siemens SINEMA Server | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-11 | Siemens SIMATIC RFID | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-10 | Siemens SIPROTEC 5 relays (Update A) | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-09 | Siemens NX | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-08 | Siemens Teamcenter | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-07 | Siemens APOGEE and TALON | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-06 | Siemens SIMATIC CP (Update A) | 2021-09-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190703-ccapic-restapi | Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability | 2019-07-03T16:00:00+00:00 | 2020-01-16T15:25:04+00:00 |
| cisco-sa-20190703-asyncos-wsa | Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190703-amp-commandinj | Cisco Advanced Malware Protection for Endpoints Windows Command Injection Vulnerability | 2019-07-03T16:00:00+00:00 | 2019-07-03T16:00:00+00:00 |
| cisco-sa-20190626-dcnm-infodiscl | Cisco Data Center Network Manager Information Disclosure Vulnerability | 2019-06-26T16:00:00+00:00 | 2019-09-19T16:08:39+00:00 |
| cisco-sa-20190626-dcnm-file-dwnld | Cisco Data Center Network Manager Arbitrary File Download Vulnerability | 2019-06-26T16:00:00+00:00 | 2019-09-19T16:08:38+00:00 |
| cisco-sa-20190626-dcnm-codex | Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability | 2019-06-26T16:00:00+00:00 | 2019-09-19T16:08:38+00:00 |
| cisco-sa-20190626-dcnm-bypass | Cisco Data Center Network Manager Authentication Bypass Vulnerability | 2019-06-26T16:00:00+00:00 | 2019-09-19T16:08:37+00:00 |
| cisco-sa-20190619-waas-authbypass | Cisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-tele-shell-inj | Cisco TelePresence Endpoint Command Shell Injection Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-25T13:24:12+00:00 |
| cisco-sa-20190619-staros-asr-dos | Cisco StarOS Denial of Service Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-sdwan-privilescal | Cisco SD-WAN Solution Privilege Escalation Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-sdwan-privesca | Cisco SD-WAN Solution Privilege Escalation Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-sdwan-cmdinj | Cisco SD-WAN Solution Command Injection Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-rvrouters-dos | Cisco RV110W, RV130W, and RV215W Routers Management Interface Denial of Service Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-rv-infodis | Cisco RV110W, RV130W, and RV215W Routers Information Disclosure Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-rv-fileaccess | Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-rv-dos | Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-psc-xss | Cisco Prime Service Catalog Cross-Site Scripting Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-20T15:39:29+00:00 |
| cisco-sa-20190619-psc-csrf | Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-20T15:37:52+00:00 |
| cisco-sa-20190619-prime-privescal | Cisco Prime Infrastructure and Evolved Programmable Network Manager Virtual Domain Privilege Escalation Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-07-03T15:48:44+00:00 |
| cisco-sa-20190619-imc-infodisclos | Cisco Integrated Management Controller Information Disclosure Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-imc-infodiscl | Cisco Integrated Management Controller Information Disclosure Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-imc-frmwr-dos | Cisco Integrated Management Controller Denial of Service Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-imc-filewrite | Cisco Integrated Management Controller Arbitrary File Write Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-imc-dos | Cisco Integrated Management Controller Denial of Service Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-imc-csrf | Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-esa-bypass | Cisco Email Security Appliance GZIP Content Filter Bypass Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-ecea-dwnload | Cisco Enterprise Chat and Email Attachment Download Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-dnac-bypass | Cisco DNA Center Authentication Bypass Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-27T17:34:37+00:00 |
| cisco-sa-20190619-csm-xml | Cisco Security Manager XML Entity Expansion Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-58735 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58734 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58733 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58732 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58731 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58730 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58729 | Windows Local Session Manager (LSM) Denial of Service Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58728 | Windows Bluetooth Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58727 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58726 | Windows SMB Server Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58725 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58724 | Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-15T07:00:00.000Z |
| msrc_cve-2025-58722 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58720 | Windows Cryptographic Services Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58719 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58718 | Remote Desktop Client Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58717 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58716 | Windows Speech Runtime Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58715 | Windows Speech Runtime Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-58714 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55701 | Windows Authentication Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55700 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55699 | Windows Kernel Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55698 | DirectX Graphics Kernel Denial of Service Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55697 | Azure Local Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55696 | NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55695 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55694 | Windows Error Reporting Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55693 | Windows Kernel Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55692 | Windows Error Reporting Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14721-1 | kubelogin-0.1.7-1.1 on GA media | 2025-01-31T00:00:00Z | 2025-01-31T00:00:00Z |
| opensuse-su-2025:14720-1 | chromedriver-132.0.6834.159-1.1 on GA media | 2025-01-31T00:00:00Z | 2025-01-31T00:00:00Z |
| opensuse-su-2025:14719-1 | bind-9.20.5-1.1 on GA media | 2025-01-31T00:00:00Z | 2025-01-31T00:00:00Z |
| opensuse-su-2025:0037-1 | Security update for SDL2_sound | 2025-01-30T16:22:36Z | 2025-01-30T16:22:36Z |
| opensuse-su-2025:0036-1 | Security update for chromium | 2025-01-30T12:22:26Z | 2025-01-30T12:22:26Z |
| opensuse-su-2025:14718-1 | python311-ipython-8.31.0-1.1 on GA media | 2025-01-30T00:00:00Z | 2025-01-30T00:00:00Z |
| opensuse-su-2025:14717-1 | owasp-modsecurity-crs-4.10.0-1.1 on GA media | 2025-01-30T00:00:00Z | 2025-01-30T00:00:00Z |
| opensuse-su-2025:14716-1 | libQt5Bluetooth5-32bit-5.15.16+kde2-1.1 on GA media | 2025-01-30T00:00:00Z | 2025-01-30T00:00:00Z |
| opensuse-su-2025:14715-1 | dovecot24-2.4.0-1.1 on GA media | 2025-01-30T00:00:00Z | 2025-01-30T00:00:00Z |
| opensuse-su-2025:14714-1 | apptainer-1.3.6-4.1 on GA media | 2025-01-30T00:00:00Z | 2025-01-30T00:00:00Z |
| opensuse-su-2025:14713-1 | trivy-0.58.2-1.1 on GA media | 2025-01-29T00:00:00Z | 2025-01-29T00:00:00Z |
| opensuse-su-2025:14712-1 | python311-pydantic-2.10.6-1.1 on GA media | 2025-01-29T00:00:00Z | 2025-01-29T00:00:00Z |
| opensuse-su-2025:14711-1 | hauler-1.1.1-2.1 on GA media | 2025-01-29T00:00:00Z | 2025-01-29T00:00:00Z |
| opensuse-su-2025:14710-1 | govulncheck-vulndb-0.0.20250128T150132-1.1 on GA media | 2025-01-29T00:00:00Z | 2025-01-29T00:00:00Z |
| opensuse-su-2025:14709-1 | fake-gcs-server-1.52.1-1.1 on GA media | 2025-01-29T00:00:00Z | 2025-01-29T00:00:00Z |
| opensuse-su-2025:14708-1 | owasp-modsecurity-crs-4.9.0-1.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14707-1 | openvpn-2.6.10-5.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14706-1 | corepack22-22.13.0-1.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14705-1 | kernel-devel-longterm-6.12.11-1.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14704-1 | govulncheck-vulndb-0.0.20250117T214834-1.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:14703-1 | apache2-mod_security2-2.9.8-2.1 on GA media | 2025-01-28T00:00:00Z | 2025-01-28T00:00:00Z |
| opensuse-su-2025:0034-1 | Security update for chromium | 2025-01-27T07:28:18Z | 2025-01-27T07:28:18Z |
| opensuse-su-2025:14702-1 | python311-sentry-sdk-2.20.0-1.1 on GA media | 2025-01-27T00:00:00Z | 2025-01-27T00:00:00Z |
| opensuse-su-2025:14701-1 | python311-asteval-1.0.6-1.1 on GA media | 2025-01-27T00:00:00Z | 2025-01-27T00:00:00Z |
| opensuse-su-2025:14700-1 | iperf-3.18-1.1 on GA media | 2025-01-27T00:00:00Z | 2025-01-27T00:00:00Z |
| opensuse-su-2025:14699-1 | gstreamer-plugins-good-1.24.11-2.1 on GA media | 2025-01-27T00:00:00Z | 2025-01-27T00:00:00Z |
| opensuse-su-2025:14698-1 | chromedriver-132.0.6834.110-1.1 on GA media | 2025-01-26T00:00:00Z | 2025-01-26T00:00:00Z |
| opensuse-su-2025:0033-1 | Security update for qt6-connectivity | 2025-01-25T17:01:16Z | 2025-01-25T17:01:16Z |
| opensuse-su-2025:14697-1 | ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media | 2025-01-25T00:00:00Z | 2025-01-25T00:00:00Z |
| opensuse-su-2025:14696-1 | libopenssl-3-devel-3.2.3-4.1 on GA media | 2025-01-25T00:00:00Z | 2025-01-25T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:22905 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.19.4 | 2025-12-09T10:09:13+00:00 | 2026-04-14T02:01:48+00:00 |
| rhsa-2025:22865 | Red Hat Security Advisory: kernel security update | 2025-12-09T08:56:00+00:00 | 2026-03-18T03:12:32+00:00 |
| rhsa-2025:22854 | Red Hat Security Advisory: kernel security update | 2025-12-09T08:51:05+00:00 | 2026-04-02T10:56:23+00:00 |
| rhsa-2025:22866 | Red Hat Security Advisory: gimp security update | 2025-12-09T08:34:00+00:00 | 2026-03-18T03:13:24+00:00 |
| rhsa-2025:22869 | Red Hat Security Advisory: ghostscript security update | 2025-12-09T08:33:50+00:00 | 2026-03-18T03:11:40+00:00 |
| rhsa-2025:22871 | Red Hat Security Advisory: expat security update | 2025-12-09T08:32:00+00:00 | 2026-04-13T20:13:44+00:00 |
| rhsa-2025:22899 | Red Hat Security Advisory: golang security update | 2025-12-09T08:03:20+00:00 | 2026-04-14T07:56:34+00:00 |
| rhsa-2025:22883 | Red Hat Security Advisory: thunderbird security update | 2025-12-09T07:58:10+00:00 | 2026-03-18T03:11:03+00:00 |
| rhsa-2025:22882 | Red Hat Security Advisory: thunderbird security update | 2025-12-09T07:56:48+00:00 | 2026-03-18T03:11:03+00:00 |
| rhsa-2025:22802 | Red Hat Security Advisory: kernel security update | 2025-12-09T07:41:49+00:00 | 2026-03-18T03:12:35+00:00 |
| rhsa-2025:22842 | Red Hat Security Advisory: expat security update | 2025-12-09T07:23:09+00:00 | 2026-04-13T20:13:43+00:00 |
| rhsa-2025:22868 | Red Hat Security Advisory: Insights proxy Container Image | 2025-12-08T18:05:34+00:00 | 2026-04-13T20:13:44+00:00 |
| rhsa-2025:22863 | Red Hat Security Advisory: OpenShift Container Platform 4.17.45 CNF IBU extras update | 2025-12-08T16:08:23+00:00 | 2026-02-18T08:39:20+00:00 |
| rhsa-2025:22861 | Red Hat Security Advisory: Red Hat Developer Hub 1.8.1 release. | 2025-12-08T15:17:40+00:00 | 2026-04-08T20:43:14+00:00 |
| rhsa-2025:22801 | Red Hat Security Advisory: kernel security update | 2025-12-08T03:20:22+00:00 | 2026-03-25T06:06:24+00:00 |
| rhsa-2025:22800 | Red Hat Security Advisory: kernel-rt security update | 2025-12-08T03:01:46+00:00 | 2026-03-25T06:06:16+00:00 |
| rhsa-2025:22790 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-12-08T01:59:46+00:00 | 2026-04-13T08:44:47+00:00 |
| rhsa-2025:22789 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-12-08T01:55:51+00:00 | 2026-04-13T08:44:46+00:00 |
| rhsa-2025:22794 | Red Hat Security Advisory: openssl security update | 2025-12-08T01:44:01+00:00 | 2026-04-13T19:59:55+00:00 |
| rhsa-2025:22791 | Red Hat Security Advisory: thunderbird security update | 2025-12-08T01:37:31+00:00 | 2026-03-18T03:11:02+00:00 |
| rhsa-2025:22792 | Red Hat Security Advisory: thunderbird security update | 2025-12-08T01:26:01+00:00 | 2026-03-18T03:11:02+00:00 |
| rhsa-2025:22275 | Red Hat Security Advisory: OpenShift Container Platform 4.13.62 bug fix and security update | 2025-12-05T13:28:34+00:00 | 2026-04-14T02:01:46+00:00 |
| rhsa-2025:22284 | Red Hat Security Advisory: OpenShift Container Platform 4.13.62 bug fix and security update | 2025-12-05T00:05:11+00:00 | 2026-03-18T02:50:58+00:00 |
| rhsa-2025:22785 | Red Hat Security Advisory: expat security update | 2025-12-04T23:12:47+00:00 | 2026-04-13T20:13:42+00:00 |
| rhsa-2025:22784 | Red Hat Security Advisory: Submariner v0.22 security fixes and container updates | 2025-12-04T22:51:38+00:00 | 2026-04-03T15:02:00+00:00 |
| rhsa-2025:22773 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.11 security update | 2025-12-04T18:04:02+00:00 | 2026-04-01T13:32:42+00:00 |
| rhsa-2025:22775 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.11 security update | 2025-12-04T18:03:52+00:00 | 2026-04-01T13:32:42+00:00 |
| rhsa-2025:22777 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.11 security update | 2025-12-04T15:56:54+00:00 | 2026-04-01T13:32:43+00:00 |
| rhsa-2025:22765 | Red Hat Security Advisory: HawtIO 4.3.0 for Red Hat build of Apache Camel 4 Release and security update. | 2025-12-04T15:07:27+00:00 | 2026-03-24T13:16:46+00:00 |
| rhsa-2025:22760 | Red Hat Security Advisory: abrt security update | 2025-12-04T14:46:57+00:00 | 2026-03-18T03:11:35+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4419-1 | Security update for xen | 2025-12-16T18:57:18Z | 2025-12-16T18:57:18Z |
| suse-su-2025:4416-1 | Security update for webkit2gtk3 | 2025-12-16T15:57:50Z | 2025-12-16T15:57:50Z |
| suse-su-2025:4411-1 | Security update for librsvg | 2025-12-16T11:35:35Z | 2025-12-16T11:35:35Z |
| suse-su-2025:21222-1 | Security update for gnutls | 2025-12-16T08:43:18Z | 2025-12-16T08:43:18Z |
| suse-su-2025:21217-1 | Security update for libpng16 | 2025-12-16T08:31:52Z | 2025-12-16T08:31:52Z |
| suse-su-2025:21221-1 | Security update for helm | 2025-12-16T08:29:28Z | 2025-12-16T08:29:28Z |
| suse-su-2025:21220-1 | Security update for libpng16 | 2025-12-16T08:25:26Z | 2025-12-16T08:25:26Z |
| suse-su-2025:21218-1 | Security update for salt | 2025-12-16T08:19:40Z | 2025-12-16T08:19:40Z |
| suse-su-2025:21216-1 | Security update 5.0.6 for Multi-Linux Manager Client Tools, Salt and Salt Bundle | 2025-12-16T07:20:56Z | 2025-12-16T07:20:56Z |
| suse-su-2025:21224-1 | Security update for openssl-3 | 2025-12-15T18:22:57Z | 2025-12-15T18:22:57Z |
| suse-su-2025:21213-1 | Security update for openssl-3 | 2025-12-15T18:22:57Z | 2025-12-15T18:22:57Z |
| suse-su-2025:4408-1 | Security update for libssh | 2025-12-15T16:56:44Z | 2025-12-15T16:56:44Z |
| suse-su-2025:4407-1 | Security update for xkbcomp | 2025-12-15T16:54:15Z | 2025-12-15T16:54:15Z |
| suse-su-2025:4406-1 | Security update for postgresql15 | 2025-12-15T14:22:59Z | 2025-12-15T14:22:59Z |
| suse-su-2025:21223-1 | Security update for grub2 | 2025-12-15T12:49:56Z | 2025-12-15T12:49:56Z |
| suse-su-2025:21212-1 | Security update for grub2 | 2025-12-15T12:49:56Z | 2025-12-15T12:49:56Z |
| suse-su-2025:4398-1 | Security update for python3 | 2025-12-15T11:30:55Z | 2025-12-15T11:30:55Z |
| suse-su-2025:4397-1 | Security update for MozillaThunderbird | 2025-12-15T11:26:39Z | 2025-12-15T11:26:39Z |
| suse-su-2025:4396-1 | Security update for MozillaFirefox | 2025-12-15T11:24:28Z | 2025-12-15T11:24:28Z |
| suse-su-2025:4393-1 | Security update for the Linux Kernel | 2025-12-15T11:09:08Z | 2025-12-15T11:09:08Z |
| suse-su-2025:4391-1 | Security update for unbound | 2025-12-15T10:34:10Z | 2025-12-15T10:34:10Z |
| suse-su-2025:4257-2 | Security update for python311 | 2025-12-15T10:33:51Z | 2025-12-15T10:33:51Z |
| suse-su-2025:21211-1 | Security update for ImageMagick | 2025-12-15T09:56:13Z | 2025-12-15T09:56:13Z |
| suse-su-2025:4390-1 | Security update for rhino | 2025-12-12T16:18:03Z | 2025-12-12T16:18:03Z |
| suse-su-2025:21197-1 | Security update for binutils | 2025-12-12T15:58:29Z | 2025-12-12T15:58:29Z |
| suse-su-2025:21195-1 | Security update for binutils | 2025-12-12T15:58:29Z | 2025-12-12T15:58:29Z |
| suse-su-2025:4389-1 | Security update for python | 2025-12-12T13:49:14Z | 2025-12-12T13:49:14Z |
| suse-su-2025:4388-1 | Security update for postgresql16 | 2025-12-12T13:36:29Z | 2025-12-12T13:36:29Z |
| suse-su-2025:4387-1 | Security update for postgresql16 | 2025-12-12T13:35:46Z | 2025-12-12T13:35:46Z |
| suse-su-2025:4386-1 | Security update for postgresql16 | 2025-12-12T13:34:19Z | 2025-12-12T13:34:19Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2024:1644 | Important: grafana-pcp security and bug fix update | 2024-04-02T00:00:00Z | 2024-04-03T14:02:46Z |
| alsa-2024:1615 | Moderate: expat security update | 2024-04-02T00:00:00Z | 2024-04-03T08:51:24Z |
| alsa-2024:1610 | Moderate: less security update | 2024-04-02T00:00:00Z | 2024-04-02T22:26:38Z |
| alsa-2024:1608 | Moderate: opencryptoki security update | 2024-04-02T00:00:00Z | 2024-04-03T18:46:18Z |
| alsa-2024:1607 | Important: kernel security, bug fix, and enhancement update | 2024-04-02T00:00:00Z | 2024-04-09T14:56:37Z |
| alsa-2024:1601 | Moderate: curl security and bug fix update | 2024-04-02T00:00:00Z | 2024-04-02T22:28:33Z |
| alsa-2024:1576 | Moderate: ruby:3.1 security, bug fix, and enhancement update | 2024-04-01T00:00:00Z | 2024-04-02T16:11:56Z |
| alsa-2024:1530 | Moderate: expat security update | 2024-03-26T00:00:00Z | 2024-04-02T08:32:06Z |
| alsa-2024:1514 | Important: libreoffice security fix update | 2024-03-26T00:00:00Z | 2024-04-09T07:00:18Z |
| alsa-2024:1510 | Important: nodejs:18 security update | 2024-03-26T00:00:00Z | 2024-04-02T11:46:33Z |
| alsa-2024:1503 | Important: nodejs:18 security update | 2024-03-25T00:00:00Z | 2024-04-04T09:21:15Z |
| alsa-2024:1502 | Important: grafana-pcp security update | 2024-03-25T00:00:00Z | 2024-04-02T08:30:28Z |
| alsa-2024:1501 | Important: grafana security update | 2024-03-25T00:00:00Z | 2024-04-02T08:28:41Z |
| alsa-2024:1494 | Moderate: thunderbird security update | 2024-03-25T00:00:00Z | 2024-04-04T14:02:37Z |
| alsa-2024:1493 | Moderate: thunderbird security update | 2024-03-25T00:00:00Z | 2024-04-10T08:56:31Z |
| alsa-2024:1485 | Critical: firefox security update | 2024-03-25T00:00:00Z | 2024-04-03T14:53:57Z |
| alsa-2024:1484 | Critical: firefox security update | 2024-03-25T00:00:00Z | 2024-04-03T14:52:34Z |
| alsa-2024:1472 | Important: go-toolset:rhel8 security update | 2024-03-21T00:00:00Z | 2024-03-22T09:53:39Z |
| alsa-2024:1462 | Important: golang security update | 2024-03-21T00:00:00Z | 2024-03-22T14:43:50Z |
| alsa-2024:1444 | Important: nodejs:16 security update | 2024-03-20T00:00:00Z | 2024-03-21T14:33:22Z |
| alsa-2024:1438 | Important: nodejs security update | 2024-03-20T00:00:00Z | 2024-03-21T07:09:06Z |
| alsa-2024:1436 | Important: postgresql-jdbc security update | 2024-03-20T00:00:00Z | 2024-03-21T12:39:08Z |
| alsa-2024:1435 | Important: postgresql-jdbc security update | 2024-03-20T00:00:00Z | 2024-03-21T08:51:52Z |
| alsa-2024:1431 | Moderate: ruby:3.1 security, bug fix, and enhancement update | 2024-03-19T00:00:00Z | 2024-03-21T12:51:00Z |
| alsa-2024:1427 | Important: libreoffice security update | 2024-03-19T00:00:00Z | 2024-03-22T14:57:34Z |
| alsa-2024:1376 | Important: squid security update | 2024-03-19T00:00:00Z | 2024-04-12T18:57:26Z |
| alsa-2024:1375 | Important: squid:4 security update | 2024-03-19T00:00:00Z | 2024-04-12T18:59:09Z |
| alsa-2024:1335 | Important: dnsmasq security update | 2024-03-14T00:00:00Z | 2024-03-18T08:24:00Z |
| alsa-2024:1334 | Important: dnsmasq security update | 2024-03-14T00:00:00Z | 2024-03-18T08:20:39Z |
| alsa-2024:1311 | Moderate: .NET 8.0 security update | 2024-03-13T00:00:00Z | 2024-03-14T09:41:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2021-1562 | Heap-buffer-overflow in __bpf_object__open | 2021-11-11T00:01:42.735141Z | 2022-12-14T22:22:31.473646Z |
| osv-2021-1559 | Heap-buffer-overflow in ih264d_mark_err_slice_skip | 2021-11-10T00:01:37.617431Z | 2023-02-24T01:57:33.198621Z |
| osv-2021-1554 | UNKNOWN READ in helper_uc_tracecode | 2021-11-09T00:00:29.449611Z | 2022-04-13T03:04:39.199365Z |
| osv-2021-1549 | Uncaught exception in com.google.gson.internal.bind.TypeAdapters$27.read | 2021-11-09T00:00:09.004185Z | 2022-11-06T23:48:30.706011Z |
| osv-2021-1546 | Heap-buffer-overflow in pn_buffer_append | 2021-11-07T00:01:30.451093Z | 2022-04-13T03:04:36.943886Z |
| osv-2021-1540 | Heap-buffer-overflow in consume_list | 2021-11-06T00:01:33.530210Z | 2022-04-13T03:04:36.938644Z |
| osv-2021-1527 | UNKNOWN READ in exif_mnote_data_canon_load | 2021-11-04T00:00:08.421183Z | 2022-04-13T03:04:40.852633Z |
| osv-2021-1526 | Global-buffer-overflow in fr_unix_time_from_tm | 2021-11-03T00:01:47.818771Z | 2022-04-13T03:04:40.136376Z |
| osv-2021-1524 | Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode | 2021-11-03T00:00:37.119532Z | 2022-04-13T03:04:32.475264Z |
| osv-2021-1521 | Heap-buffer-overflow in exif_data_load_data_content | 2021-11-03T00:00:07.006490Z | 2022-04-13T03:04:40.842031Z |
| osv-2021-1518 | UNKNOWN READ in bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_c | 2021-11-01T00:01:38.720506Z | 2022-04-13T03:04:32.836473Z |
| osv-2021-1514 | Container-overflow in m3d_load | 2021-11-01T00:00:10.146855Z | 2022-04-13T03:28:14.100774Z |
| osv-2021-1510 | Heap-buffer-overflow in WriteRingBuffer | 2021-10-30T00:01:37.386031Z | 2022-04-13T03:04:41.838573Z |
| osv-2021-1509 | Heap-buffer-overflow in handle_gets | 2021-10-30T00:01:19.289143Z | 2022-04-13T03:29:14.526232Z |
| osv-2021-1507 | Heap-buffer-overflow in handle_gets | 2021-10-30T00:00:17.677101Z | 2022-04-13T03:37:23.737071Z |
| osv-2021-1505 | Heap-buffer-overflow in asn_build_string | 2021-10-29T00:01:41.651682Z | 2022-04-13T03:04:35.837626Z |
| osv-2021-1502 | Heap-buffer-overflow in asn_realloc_rbuild_string | 2021-10-29T00:01:25.958637Z | 2022-04-13T03:04:35.795166Z |
| osv-2021-1500 | Heap-buffer-overflow in parse_microsoft_mangled_name | 2021-10-28T00:01:38.205304Z | 2022-08-25T03:31:16.805065Z |
| osv-2021-1496 | Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process | 2021-10-28T00:00:18.879739Z | 2022-04-13T03:04:41.801326Z |
| osv-2021-1489 | UNKNOWN READ in __bpf_object__open | 2021-10-26T00:01:29.852624Z | 2022-04-13T03:04:36.763265Z |
| osv-2021-1482 | Heap-buffer-overflow in generic_unpack | 2021-10-24T00:01:22.728134Z | 2022-04-13T03:31:05.823477Z |
| osv-2021-1479 | Heap-buffer-overflow in hufDecode | 2021-10-24T00:00:36.769120Z | 2022-04-13T03:26:51.845851Z |
| osv-2021-1477 | UNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend | 2021-10-22T00:01:25.430987Z | 2022-04-13T03:04:36.895614Z |
| osv-2021-1476 | Heap-buffer-overflow in processClientServerHello | 2021-10-22T00:00:06.100367Z | 2022-04-13T03:04:35.966630Z |
| osv-2021-1475 | Heap-buffer-overflow in derive_spatial_luma_vector_prediction | 2021-10-21T00:01:39.891638Z | 2022-09-01T00:08:33.459779Z |
| osv-2021-1473 | Global-buffer-overflow in fr_unix_time_from_tm | 2021-10-21T00:01:32.674721Z | 2022-04-13T03:04:40.131117Z |
| osv-2021-1472 | UNKNOWN WRITE in h3NeighborRotations | 2021-10-21T00:01:21.968011Z | 2022-04-13T03:04:32.469807Z |
| osv-2021-1470 | Heap-buffer-overflow in hufDecode | 2021-10-21T00:00:36.107139Z | 2022-04-13T03:04:37.218942Z |
| osv-2021-1463 | UNKNOWN READ in helper_be_stw_mmu_armeb | 2021-10-19T00:00:32.912410Z | 2022-04-13T03:21:10.822311Z |
| osv-2021-1458 | Global-buffer-overflow in fr_base16_decode_nstd | 2021-10-17T00:01:42.599206Z | 2022-04-13T03:04:40.141941Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2024-6446 | Business Logic Errors in GitLab | 2024-09-14T07:09:14.036Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6678 | Authentication Bypass by Spoofing in GitLab | 2024-09-14T07:08:36.238Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8124 | Inefficient Regular Expression Complexity in GitLab | 2024-09-14T07:06:46.628Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8311 | Improper Protection of Alternate Path in GitLab | 2024-09-14T07:06:34.533Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8631 | Privilege Defined With Unsafe Actions in GitLab | 2024-09-14T07:06:22.032Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8635 | Server-Side Request Forgery (SSRF) in GitLab | 2024-09-14T07:06:09.828Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8640 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab | 2024-09-14T07:05:58.226Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8641 | Privilege Context Switching Error in GitLab | 2024-09-14T07:05:45.323Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8754 | External Control of Critical State Data in GitLab | 2024-09-14T07:05:32.625Z | 2025-05-20T10:02:07.006Z |
| bit-node-2023-46809 | 2024-09-11T07:20:44.318Z | 2025-11-06T13:25:46.476Z | |
| bit-kibana-2024-37288 | 2024-09-11T07:14:18.128Z | 2025-04-03T14:40:37.652Z | |
| bit-elk-2024-37288 | 2024-09-11T07:10:22.120Z | 2025-04-03T14:40:37.652Z | |
| bit-node-2023-30582 | 2024-09-10T07:19:56.526Z | 2025-04-03T14:40:37.652Z | |
| bit-node-2023-30583 | 2024-09-10T07:19:44.533Z | 2025-04-03T14:40:37.652Z | |
| bit-node-2023-30584 | 2024-09-10T07:19:33.426Z | 2025-04-03T14:40:37.652Z | |
| bit-node-2023-30587 | 2024-09-10T07:18:58.037Z | 2025-04-03T14:40:37.652Z | |
| bit-node-2023-39333 | 2024-09-10T07:16:15.926Z | 2025-11-06T13:25:46.476Z | |
| bit-node-2024-36137 | 2024-09-10T07:13:50.127Z | 2025-04-03T14:40:37.652Z | |
| bit-node-2024-36138 | 2024-09-10T07:13:39.524Z | 2026-02-11T09:09:18.507Z | |
| bit-golang-2024-34155 | Stack exhaustion in all Parse functions in go/parser | 2024-09-10T07:06:41.834Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2024-34156 | Stack exhaustion in Decoder.Decode in encoding/gob | 2024-09-10T07:06:29.133Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2024-34158 | Stack exhaustion in Parse in go/build/constraint | 2024-09-10T07:06:15.527Z | 2025-05-20T10:02:07.006Z |
| bit-airflow-2024-45034 | Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes | 2024-09-10T07:04:17.732Z | 2025-05-20T10:02:07.006Z |
| bit-airflow-2024-45498 | Apache Airflow: Command Injection in an example DAG | 2024-09-10T07:04:05.933Z | 2025-05-20T10:02:07.006Z |
| bit-ghost-2024-23724 | 2024-09-06T07:10:49.367Z | 2025-08-20T09:06:12.327Z | |
| bit-vault-2024-8365 | Vault Leaks AppRole Client Tokens And Accessor in Audit Log | 2024-09-04T07:26:12.647Z | 2025-08-05T09:07:53.274Z |
| bit-mongodb-2024-8207 | MongoDB Server binaries may load potentially insecure shared libraries from specific relative paths | 2024-08-31T07:15:12.317Z | 2025-05-20T10:02:07.006Z |
| bit-jupyterlab-2024-43805 | HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering | 2024-08-30T07:13:49.180Z | 2025-05-20T10:02:07.006Z |
| bit-apr-2023-49582 | Apache Portable Runtime (APR): Unexpected lax shared memory permissions | 2024-08-28T07:08:33.525Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3127 | Improper Access Control in GitLab | 2024-08-26T08:32:29.904Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0777 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-09-13T00:00:00.000000 | 2024-09-13T00:00:00.000000 |
| certfr-2024-avi-0776 | Vulnérabilité dans Spring Framework | 2024-09-13T00:00:00.000000 | 2024-09-13T00:00:00.000000 |
| certfr-2024-avi-0775 | Multiples vulnérabilités dans Microsoft Edge | 2024-09-13T00:00:00.000000 | 2024-09-13T00:00:00.000000 |
| certfr-2024-avi-0774 | Vulnérabilité dans les produits Juniper Networks | 2024-09-12T00:00:00.000000 | 2024-09-12T00:00:00.000000 |
| certfr-2024-avi-0773 | Multiples vulnérabilités dans Microsoft Edge | 2024-09-12T00:00:00.000000 | 2024-09-12T00:00:00.000000 |
| certfr-2024-avi-0772 | Multiples vulnérabilités dans les produits Cisco | 2024-09-12T00:00:00.000000 | 2024-09-12T00:00:00.000000 |
| certfr-2024-avi-0771 | Multiples vulnérabilités dans les produits Tenable | 2024-09-12T00:00:00.000000 | 2024-09-12T00:00:00.000000 |
| certfr-2024-avi-0770 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-09-12T00:00:00.000000 | 2024-09-12T00:00:00.000000 |
| certfr-2024-avi-0769 | Multiples vulnérabilités dans GitLab | 2024-09-12T00:00:00.000000 | 2024-09-12T00:00:00.000000 |
| certfr-2024-avi-0768 | Multiples vulnérabilités dans les produits Intel | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0767 | Multiples vulnérabilités dans Ivanti Endpoint Manager | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0766 | Multiples vulnérabilités dans Google Chrome | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0765 | Vulnérabilité dans MongoDB Server | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0764 | Multiples vulnérabilités dans les produits Adobe | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0763 | Multiples vulnérabilités dans les produits Fortinet | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0762 | Multiples vulnérabilités dans les produits Citrix | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0761 | Multiples vulnérabilités dans les produits Microsoft | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0760 | Multiples vulnérabilités dans Microsoft Azure | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0759 | Multiples vulnérabilités dans Microsoft Windows | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0758 | Multiples vulnérabilités dans Microsoft Office | 2024-09-11T00:00:00.000000 | 2024-09-11T00:00:00.000000 |
| certfr-2024-avi-0757 | Multiples vulnérabilités dans les produits Siemens | 2024-09-10T00:00:00.000000 | 2024-09-10T00:00:00.000000 |
| certfr-2024-avi-0756 | Multiples vulnérabilités dans Moodle | 2024-09-10T00:00:00.000000 | 2024-09-10T00:00:00.000000 |
| certfr-2024-avi-0755 | Vulnérabilité dans Synology SRM | 2024-09-10T00:00:00.000000 | 2024-09-10T00:00:00.000000 |
| certfr-2024-avi-0754 | Multiples vulnérabilités dans les produits SAP | 2024-09-10T00:00:00.000000 | 2024-09-10T00:00:00.000000 |
| certfr-2024-avi-0753 | Multiples vulnérabilités dans les produits OwnCloud | 2024-09-10T00:00:00.000000 | 2024-09-10T00:00:00.000000 |
| certfr-2024-avi-0752 | Multiples vulnérabilités dans les produits Qnap | 2024-09-09T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| certfr-2024-avi-0751 | Multiples vulnérabilités dans les produits Mozilla | 2024-09-09T00:00:00.000000 | 2024-09-09T00:00:00.000000 |
| certfr-2024-avi-0750 | Multiples vulnérabilités dans les produits IBM | 2024-09-06T00:00:00.000000 | 2024-09-06T00:00:00.000000 |
| certfr-2024-avi-0749 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-09-06T00:00:00.000000 | 2024-09-06T00:00:00.000000 |
| certfr-2024-avi-0748 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-09-06T00:00:00.000000 | 2024-09-06T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000111 | Yodobashi App for Android fails to verify SSL server certificates | 2015-08-07T13:50+09:00 | 2018-04-04T12:28+09:00 |
| jvndb-2015-000110 | Yodobashi App for Android vulnerable to arbitrary Java method execution | 2015-08-07T13:50+09:00 | 2015-08-11T12:22+09:00 |
| jvndb-2015-000109 | yoyaku_v41 vulnerable to OS command injection | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000108 | yoyaku_v41 vulnerable to authentication bypass | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000107 | yoyaku_v41 vulnerable to arbitrary file creation | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000106 | Gazou BBS plus vulnerability in file upload processing | 2015-07-28T13:47+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2014-007612 | Welcart vulnerable to SQL injection | 2015-07-24T14:52+09:00 | 2015-07-24T14:52+09:00 |
| jvndb-2015-000105 | Research Artisan Lite does not properly perform authentication | 2015-07-24T14:46+09:00 | 2015-07-28T17:22+09:00 |
| jvndb-2015-000104 | Research Artisan Lite vulnerable to cross-site scripting | 2015-07-24T14:36+09:00 | 2015-07-28T17:29+09:00 |
| jvndb-2015-000103 | Welcart vulnerable to cross-site scripting | 2015-07-24T14:33+09:00 | 2015-07-28T17:51+09:00 |
| jvndb-2015-000101 | PHP for Windows vulnerable to OS command injection | 2015-07-17T14:44+09:00 | 2016-05-19T17:43+09:00 |
| jvndb-2015-000099 | Thetis vulnerable to SQL injection | 2015-07-15T15:54+09:00 | 2015-07-27T15:07+09:00 |
| jvndb-2015-000098 | acmailer vulnerable to directory traversal | 2015-07-15T15:53+09:00 | 2015-07-27T15:12+09:00 |
| jvndb-2015-000095 | LINE@ vulnerable to script injection | 2015-07-10T14:50+09:00 | 2024-05-09T18:05+09:00 |
| jvndb-2015-000097 | Simple Oekaki BBS vulnerability where arbitrary files may be deleted | 2015-07-10T13:57+09:00 | 2015-07-14T18:11+09:00 |
| jvndb-2015-000096 | Simple Oekaki BBS vulnerable to cross-site scripting | 2015-07-10T13:57+09:00 | 2015-07-14T18:09+09:00 |
| jvndb-2015-000094 | Cacti vulnerable to cross-site scripting | 2015-07-09T14:41+09:00 | 2015-07-14T18:03+09:00 |
| jvndb-2014-002239 | Cacti vulnerable to cross-site request forgery | 2015-07-09T14:41+09:00 | 2015-07-09T14:41+09:00 |
| jvndb-2009-003901 | Cacti vulnerable to cross-site scripting | 2015-07-09T14:41+09:00 | 2015-07-09T14:41+09:00 |
| jvndb-2015-000093 | Explorer+ File Manager vulnerable to directory traversal | 2015-06-30T13:56+09:00 | 2015-07-02T15:04+09:00 |
| jvndb-2015-000092 | OpenEMR vulnerable to authentication bypass | 2015-06-30T13:55+09:00 | 2015-07-14T17:16+09:00 |
| jvndb-2015-000091 | osCommerce Japanese version vulnerable to directory traversal | 2015-06-25T15:53+09:00 | 2015-06-30T11:53+09:00 |
| jvndb-2015-000090 | namshi/jose fails to verify token signatures | 2015-06-25T15:00+09:00 | 2015-07-14T17:18+09:00 |
| jvndb-2015-000089 | Symfony vulnerable to code injection | 2015-06-23T12:29+09:00 | 2015-06-25T17:34+09:00 |
| jvndb-2015-000088 | Ruby on Rails library Paperclip vulnerable to cross-site scripting | 2015-06-18T14:14+09:00 | 2015-07-14T18:15+09:00 |
| jvndb-2015-000077 | MilkyStep fails to restrict access permissions | 2015-06-12T14:13+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000087 | BloBee vulnerable to arbitrary file creation | 2015-06-12T14:12+09:00 | 2015-06-16T16:51+09:00 |
| jvndb-2015-000086 | LoadLibrary function in Microsoft Windows fails to validate input properly | 2015-06-12T14:11+09:00 | 2015-06-12T14:11+09:00 |
| jvndb-2015-000083 | MilkyStep fails to restrict access permissions | 2015-06-09T14:16+09:00 | 2015-06-16T16:51+09:00 |
| jvndb-2015-000082 | MilkyStep vulnerable to cross-site scripting | 2015-06-09T14:15+09:00 | 2015-06-16T16:52+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-30462 | Socomec DIRIS Digiware M-70明文传输漏洞 | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30461 | Socomec DIRIS Digiware M-70跨站请求伪造漏洞 | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30460 | Socomec DIRIS Digiware M-70缓冲区溢出漏洞 | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30459 | Socomec DIRIS Digiware M-70拒绝服务漏洞(CNVD-2025-30459) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30458 | Socomec DIRIS Digiware M-70拒绝服务漏洞(CNVD-2025-30458) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30457 | Socomec DIRIS Digiware M-70拒绝服务漏洞(CNVD-2025-30457) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30456 | Socomec DIRIS Digiware M-70拒绝服务漏洞(CNVD-2025-30456) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30455 | Socomec DIRIS Digiware M-70拒绝服务漏洞(CNVD-2025-30455) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30454 | Socomec DIRIS Digiware M-70拒绝服务漏洞(CNVD-2025-30454) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30453 | Socomec DIRIS Digiware M-70拒绝服务漏洞(CNVD-2025-30453) | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30452 | Socomec DIRIS Digiware M-70拒绝服务漏洞 | 2025-12-03 | 2025-12-11 |
| cnvd-2025-30355 | Grav资源管理错误漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30354 | Grav权限提升漏洞(CNVD-2025-30354) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30353 | Grav路径遍历漏洞(CNVD-2025-30353) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30352 | Grav服务端模板注入漏洞(CNVD-2025-30352) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30351 | Grav授权问题漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30350 | Grav路径遍历漏洞(CNVD-2025-30350) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30349 | Grav路径遍历漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30348 | Grav跨站脚本漏洞(CNVD-2025-30348) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30347 | Grav跨站脚本漏洞(CNVD-2025-30347) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30346 | Grav跨站脚本漏洞(CNVD-2025-30346) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30345 | Grav跨站脚本漏洞(CNVD-2025-30345) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30344 | Grav跨站脚本漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30343 | Grav拒绝服务漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30342 | Grav服务器端模板注入漏洞(CNVD-2025-30342) | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30341 | Grav代码执行漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30340 | Grav用户枚举和电子邮件泄露漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30339 | Grav服务器端模板注入漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30338 | Grav权限提升漏洞 | 2025-12-03 | 2025-12-09 |
| cnvd-2025-30337 | Grav不安全的直接对象引用漏洞 | 2025-12-03 | 2025-12-09 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-16136 | Уязвимость функции gpiod_get_label() модуля drivers/gpio/gpiolib.c драйвера поддержки GPI… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16135 | Уязвимость функции ksmbd_conn_free() модуля fs/smb/server/connection.c подсистемы SMB ядр… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16134 | Уязвимость функции tcp4_gso_segment() модуля net/ipv4/tcp_offload.c ядра операционной сис… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16133 | Уязвимость функции dcn401_stream_encoder_create() модуля drivers/gpu/drm/amd/display/dc/r… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16132 | Уязвимость функции memfd_pin_folios() модуля mm/gup.c подсистемы управления памятью ядра … | 19.12.2025 | 19.12.2025 |
| bdu:2025-16131 | Уязвимость функции ext4_feature_set_ok() модуля fs/ext4/super.c поддержки файловой систем… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16130 | Уязвимость функции gfs2_gl_hash_clear() модуля fs/gfs2/glock.c поддержки файловой системы… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16129 | Уязвимость функции guc_submit_wedged_fini() модуля drivers/gpu/drm/xe/xe_guc_submit.c дра… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16128 | Уязвимость функции ncsi_unregister_dev() модуля net/ncsi/ncsi-manage.c ядра операционной … | 19.12.2025 | 19.12.2025 |
| bdu:2025-16127 | Уязвимость функции relocate_one_folio() модуля fs/btrfs/relocation.c поддержки файловой с… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16126 | Уязвимость функции l2tp_v3_session_get() модуля net/l2tp/l2tp_core.c ядра операционной си… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16125 | Уязвимость функции dce11_pplib_apply_display_requirements() модуля drivers/gpu/drm/amd/di… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16124 | Уязвимость функции dcn20_fast_validate_bw() модуля drivers/gpu/drm/amd/display/dc/dcn20/d… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16123 | Уязвимость функции dcn201_acquire_free_pipe_for_layer() модуля drivers/gpu/drm/amd/displa… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16122 | Уязвимость функции decode_message() ядра операционной системы Linux, позволяющая нарушите… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16121 | Уязвимость программного обеспечения управления копированием данных для систем хранения да… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16120 | Уязвимость функции Spam Quarantine операционной системы Cisco AsyncOS средств защиты Cisc… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16119 | Уязвимость инструмента автоматизации на основе искусственного интеллекта IBM Concert Soft… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16118 | Уязвимость инструмента автоматизации на основе искусственного интеллекта IBM Concert Soft… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16117 | Уязвимость системы управления ИТ-инфраструктурой HPE OneView, связанная с неверным управл… | 19.12.2025 | 12.01.2026 |
| bdu:2025-16116 | Уязвимость платформы управления рисками на предприятии IBM OpenPages, связанная с неприня… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16115 | Уязвимость механизма синхронизации приложения "Календарь" операционной системы Аврора, по… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16114 | Уязвимость системы управления контейнерами и менеджера виртуальных машин Incus, связанная… | 19.12.2025 | 12.01.2026 |
| bdu:2025-16113 | Уязвимость среды выполнения контейнеров containerd, связанная с отсутствием освобождения … | 19.12.2025 | 19.12.2025 |
| bdu:2025-16112 | Уязвимость консольного графического редактора ImageMagick, связанная с целочисленным пере… | 19.12.2025 | 27.01.2026 |
| bdu:2025-16111 | Уязвимость функции ERR_bugcheck_msg() модуля err.cpp системы управления базами данных «Ре… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16110 | Уязвимость SSH-сервера библиотеки для языка программирования Go crypto, связанная с реали… | 19.12.2025 | 12.01.2026 |
| bdu:2025-16109 | Уязвимость графического редактора GraphicsMagick, связанная с чтением за границами буфера… | 19.12.2025 | 30.01.2026 |
| bdu:2025-16108 | Уязвимость программного обеспечения для создания графиков GNUPlot, связанная с разыменова… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16107 | Уязвимость программного обеспечения для создания графиков GNUPlot, связанная с разыменова… | 19.12.2025 | 19.12.2025 |
| ID | Description | Updated |
|---|---|---|
| var-202511-0872 | A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V… | 2025-11-22T23:37:52.488000Z |
| var-202510-0072 | A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown fun… | 2025-11-22T23:35:35.531000Z |
| var-202405-1802 | A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected… | 2025-11-22T23:35:12.904000Z |
| var-202508-0985 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Releas… | 2025-11-22T23:35:10.306000Z |
| var-202509-3799 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'… | 2025-11-22T23:35:10.003000Z |
| var-202511-1191 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_F… | 2025-11-22T23:34:42.724000Z |
| var-202508-1700 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Releas… | 2025-11-22T23:34:21.439000Z |
| var-202509-3974 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'… | 2025-11-22T23:31:48.486000Z |
| var-202511-0548 | A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Fir… | 2025-11-22T23:30:25.367000Z |
| var-202511-2179 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process … | 2025-11-22T23:30:24.687000Z |
| var-202510-0169 | A weakness has been identified in D-Link DI-7001 MINI 24.04.18B1. Impacted is an unknown … | 2025-11-22T23:27:39.290000Z |
| var-202511-1199 | A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco L… | 2025-11-22T23:26:36.598000Z |
| var-202511-1325 | An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router … | 2025-11-22T23:26:36.564000Z |
| var-202509-3258 | Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless e… | 2025-11-22T23:25:23.581000Z |
| var-202511-1189 | A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW10… | 2025-11-22T23:25:23.014000Z |
| var-202508-3053 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Releas… | 2025-11-22T23:23:47.731000Z |
| var-202511-0413 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain an Imprope… | 2025-11-22T23:23:10.315000Z |
| var-202510-0241 | A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506… | 2025-11-22T23:21:53.827000Z |
| var-202511-1035 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_F… | 2025-11-22T23:21:15.413000Z |
| var-202508-1481 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Releas… | 2025-11-22T23:19:09.981000Z |
| var-202511-0383 | A stack-based buffer overflow exists in the validate_static_route function of the httpd b… | 2025-11-22T23:19:08.073000Z |
| var-202412-0853 | WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerabilit… | 2025-11-22T23:16:38.198000Z |
| var-202511-0579 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detectio… | 2025-11-22T23:16:34.682000Z |
| var-202510-0243 | A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailF… | 2025-11-22T23:12:01.470000Z |
| var-202510-0482 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected … | 2025-11-22T23:12:01.430000Z |
| var-202510-0483 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected … | 2025-11-22T23:12:01.394000Z |
| var-202510-0484 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected … | 2025-11-22T23:11:59.394000Z |
| var-202511-1177 | A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-… | 2025-11-22T23:11:58.993000Z |
| var-202511-1324 | A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.… | 2025-11-22T23:11:58.945000Z |
| var-202405-1813 | A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affect… | 2025-11-22T23:05:38.293000Z |