Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-33121 |
8.7 (4.0)
|
DataEase has SQL Injection via Datasource Save Flow |
dataease |
dataease |
2026-04-16T18:16:02.485Z | 2026-04-16T18:34:54.187Z |
| CVE-2026-33084 |
8.7 (4.0)
|
DataEase has SQL Injection through its getFieldEnumObj… |
dataease |
dataease |
2026-04-16T18:14:07.316Z | 2026-04-18T02:40:47.771Z |
| CVE-2025-43937 |
6.6 (3.1)
|
Dell PowerScale OneFS, versions prior to 9.12.0.0… |
Dell |
PowerScale OneFS |
2026-04-16T18:03:08.750Z | 2026-04-16T18:51:41.562Z |
| CVE-2025-43935 |
4.4 (3.1)
|
Dell PowerScale OneFS, versions prior to 9.12.0.0… |
Dell |
PowerScale OneFS |
2026-04-16T17:59:04.315Z | 2026-04-16T19:38:28.840Z |
| CVE-2025-43883 |
4.1 (3.1)
|
Dell PowerScale OneFS, versions prior to 9.12.0.0… |
Dell |
PowerScale OneFS |
2026-04-16T17:54:09.831Z | 2026-04-18T02:39:20.246Z |
| CVE-2026-33083 |
8.7 (4.0)
|
DataEase has SQL Injection in Order By Clause |
dataease |
dataease |
2026-04-16T17:52:37.255Z | 2026-04-16T19:39:25.443Z |
| CVE-2026-33082 |
8.7 (4.0)
|
DataEase: SQL Injection in v2 Dataset Export |
dataease |
dataease |
2026-04-16T17:39:37.894Z | 2026-04-16T18:41:46.111Z |
| CVE-2026-41082 |
7.3 (3.1)
|
In OCaml opam before 2.5.1, a .install field cont… |
OCaml |
opam |
2026-04-16T17:32:40.068Z | 2026-04-21T09:32:52.152Z |
| CVE-2026-27820 |
1.7 (4.0)
|
zlib: Buffer Overflow in Zlib::GzipReader ungetc via l… |
ruby |
zlib |
2026-04-16T17:27:48.944Z | 2026-04-16T18:20:21.451Z |
| CVE-2026-24749 |
5.3 (3.1)
|
Silverstripe Assets Module has a DBFile::getURL() perm… |
silverstripe |
silverstripe-assets |
2026-04-16T17:08:59.133Z | 2026-04-18T02:36:26.887Z |
| CVE-2026-2336 |
8.7 (4.0)
|
Weak webstax_auth Cookie Authentication Allows Privile… |
Microchip |
IStaX |
2026-04-16T17:02:06.352Z | 2026-04-16T17:34:39.672Z |
| CVE-2026-41080 |
2.9 (3.1)
|
libexpat before 2.8.0 uses insufficient entropy, … |
libexpat project |
libexpat |
2026-04-16T16:52:01.177Z | 2026-04-27T05:59:38.490Z |
| CVE-2025-36579 |
5.1 (3.1)
|
Dell Client Platform BIOS contains a Weak Passwor… |
Dell |
Dell Pro 14 Essential PV14250 |
2026-04-16T16:05:32.561Z | 2026-04-16T18:32:52.672Z |
| CVE-2026-5426 |
7.5 (3.1)
|
KnowledgeDeliver deployments before February 24, 2026 … |
Digital Knowledge |
KnowledgeDeliver |
2026-04-16T15:18:46.224Z | 2026-04-18T02:31:32.234Z |
| CVE-2026-3324 |
8.2 (3.1)
|
Authentication Bypass |
Zohocorp |
ManageEngine Log360 |
2026-04-16T14:30:55.130Z | 2026-04-16T15:21:19.911Z |
| CVE-2026-6409 |
7.1 (4.0)
|
Denial of Service (DoS) vulnerability exists in the Pr… |
Protocol Buffers |
Protobuf-php (Pecl) |
2026-04-16T14:30:51.568Z | 2026-04-16T15:24:43.164Z |
| CVE-2026-2840 |
6.4 (3.1)
|
Email Encoder – Protect Email Addresses and Phone Numb… |
onlineoptimisation |
Email Encoder – Protect Email Addresses and Phone Numbers |
2026-04-16T14:10:29.114Z | 2026-04-16T14:42:53.905Z |
| CVE-2026-33804 |
7.4 (3.1)
|
@fastify/middie vulnerable to middleware bypass via de… |
@fastify/middie |
@fastify/middie |
2026-04-16T13:56:56.176Z | 2026-04-16T14:41:48.659Z |
| CVE-2026-5785 |
8.1 (3.1)
|
SQL Injection |
Zohocorp |
ManageEngine PAM360 |
2026-04-16T13:46:28.313Z | 2026-04-17T03:55:15.059Z |
| CVE-2026-6270 |
9.1 (3.1)
|
@fastify/middie vulnerable to middleware authenticatio… |
@fastify/middie |
@fastify/middie |
2026-04-16T13:44:46.322Z | 2026-04-16T14:24:26.764Z |
| CVE-2026-31987 |
N/A
|
Apache Airflow: JWT token appearing in logs |
Apache Software Foundation |
Apache Airflow |
2026-04-16T13:31:52.336Z | 2026-04-18T02:28:44.770Z |
| CVE-2026-6410 |
5.3 (3.1)
|
@fastify/static vulnerable to path traversal in direct… |
@fastify/static |
@fastify/static |
2026-04-16T13:29:08.120Z | 2026-04-16T14:19:36.780Z |
| CVE-2026-4160 |
5.3 (3.1)
|
Fluent Forms – Customizable Contact Forms, Survey, Qui… |
techjewel |
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder |
2026-04-16T13:27:09.207Z | 2026-04-16T14:12:35.951Z |
| CVE-2026-6414 |
5.9 (3.1)
|
@fastify/static vulnerable to route guard bypass via e… |
@fastify/static |
@fastify/static |
2026-04-16T13:09:03.526Z | 2026-04-16T13:48:52.393Z |
| CVE-2026-31843 |
10 (4.0)
9.8 (3.1)
|
The goodoneuz/pay-uz Laravel package (<= 2.2.24) … |
goodoneuz |
pay-uz |
2026-04-16T13:02:55.701Z | 2026-04-16T19:30:21.203Z |
| CVE-2025-15621 |
5.7 (4.0)
|
Sparx Enterprise Architect Client does not verify the … |
Sparx Systems Pty Ltd. |
Sparx Enterprise Architect |
2026-04-16T12:40:08.962Z | 2026-04-16T12:51:51.633Z |
| CVE-2026-3155 |
3.1 (3.1)
|
OneSignal – Web Push Notifications <= 3.8.0 - Missing … |
onesignal |
OneSignal – Web Push Notifications |
2026-04-16T11:21:22.226Z | 2026-04-16T14:00:56.681Z |
| CVE-2026-3369 |
5.4 (3.1)
|
Better Find and Replace – AI-Powered Suggestions <= 1.… |
codesolz |
Better Find and Replace – AI-Powered Suggestions |
2026-04-16T11:21:21.822Z | 2026-04-16T14:04:23.811Z |
| CVE-2026-3489 |
7.5 (3.1)
|
DirectoryPress – Business Directory And Classified Ad … |
designinvento |
DirectoryPress – Business Directory And Classified Ad Listing |
2026-04-16T11:21:21.179Z | 2026-04-16T14:05:03.740Z |
| CVE-2025-12624 |
6 (3.1)
|
Improper Token Invalidation in WSO2 Identity Server Al… |
WSO2 |
WSO2 Identity Server |
2026-04-16T10:25:19.789Z | 2026-04-16T12:30:14.886Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-40259 |
8.1 (3.1)
|
SiYuan: Publish Reader Can Arbitrarily Delete Attribut… |
siyuan-note |
siyuan |
2026-04-16T22:49:36.992Z | 2026-04-20T14:59:59.417Z |
| CVE-2026-40255 |
6.1 (3.1)
|
@adonisjs/http-server has an Open Redirect vulnerability |
adonisjs |
http-server |
2026-04-16T22:25:38.155Z | 2026-04-17T18:43:10.697Z |
| CVE-2026-40253 |
6.8 (3.1)
|
openCryptoki: Memory safety vulnerabilities in BER/DER… |
opencryptoki |
opencryptoki |
2026-04-16T22:04:44.005Z | 2026-04-17T12:27:41.682Z |
| CVE-2024-58343 |
4.3 (3.1)
|
Vision Helpdesk before 5.7.0 (patched in 5.6.10) … |
Vision |
Helpdesk |
2026-04-16T22:27:03.084Z | 2026-04-17T13:31:05.652Z |
| CVE-2026-41113 |
8.1 (3.1)
|
sagredo qmail before 2026.04.07 allows tls_quit r… |
sagredo |
qmail |
2026-04-16T22:02:10.225Z | 2026-04-18T20:09:47.901Z |
| CVE-2026-40308 |
8.8 (4.0)
|
My Calendar: Unauthenticated Information Disclosure (I… |
joedolson |
my-calendar |
2026-04-16T21:30:52.401Z | 2026-04-17T12:32:26.622Z |
| CVE-2026-40249 |
6.9 (4.0)
|
free5gc UDR fail-open request handling in PolicyDataSu… |
free5gc |
free5gc |
2026-04-16T21:59:36.282Z | 2026-04-18T02:47:28.094Z |
| CVE-2026-40248 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:57:13.101Z | 2026-04-20T15:00:17.552Z |
| CVE-2026-40247 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:54:04.151Z | 2026-04-17T18:44:09.831Z |
| CVE-2026-40246 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:40:03.598Z | 2026-04-18T02:46:14.355Z |
| CVE-2026-40170 |
7.5 (3.1)
|
ngtcp2 has a qlog transport parameter serialization st… |
ngtcp2 |
ngtcp2 |
2026-04-16T21:34:07.610Z | 2026-04-20T15:00:26.193Z |
| CVE-2026-39313 |
8.7 (4.0)
|
MCP-Framework: Unbounded memory allocation in readRequ… |
QuantGeekDev |
mcp-framework |
2026-04-16T21:24:27.328Z | 2026-04-17T18:46:07.726Z |
| CVE-2026-35469 |
8.7 (4.0)
|
SpdyStream: DOS on CRI |
moby |
spdystream |
2026-04-16T21:19:23.516Z | 2026-04-17T12:37:27.329Z |
| CVE-2026-34164 |
4.9 (3.1)
|
Valtimo: Sensitive data exposure through inbox message… |
valtimo-platform |
valtimo |
2026-04-16T21:17:35.472Z | 2026-04-18T02:44:44.369Z |
| CVE-2026-33472 |
4.8 (3.1)
|
Cryptomator Hub OAuth token exchange HTTP downgrade vi… |
cryptomator |
cryptomator |
2026-04-16T21:12:37.076Z | 2026-04-20T15:00:33.905Z |
| CVE-2026-40901 |
7.5 (4.0)
|
DataEase: Quartz Deserialization → Remote Code Execution |
dataease |
dataease |
2026-04-16T20:57:45.978Z | 2026-04-17T18:47:00.448Z |
| CVE-2026-40900 |
8.7 (4.0)
|
DataEase has SQL Injection via Stacked Queries |
dataease |
dataease |
2026-04-16T20:53:27.788Z | 2026-04-17T12:38:32.676Z |
| CVE-2026-40899 |
8.3 (4.0)
|
DataEase has an Arbitrary File Read Vulnerability |
dataease |
dataease |
2026-04-16T19:48:44.201Z | 2026-04-18T02:43:14.720Z |
| CVE-2026-33207 |
8.6 (4.0)
|
DataEase SQL Injection Vulnerability |
dataease |
dataease |
2026-04-16T19:37:36.197Z | 2026-04-20T15:00:41.415Z |
| CVE-2026-33122 |
8.6 (4.0)
|
DataEase has SQL Injection via Datasource Management |
dataease |
dataease |
2026-04-16T19:24:03.195Z | 2026-04-17T18:47:44.791Z |
| CVE-2025-54502 |
7.1 (4.0)
|
Incorrect use of boot service in the AMD Platform… |
AMD |
AMD EPYC™ 9004 Series Processors |
2026-04-16T18:46:13.377Z | 2026-04-17T03:55:16.268Z |
| CVE-2026-6442 |
8.3 (3.1)
|
Improper Command Detection Logic Allows RCE in Cortex … |
Snowflake |
Cortex Code CLI |
2026-04-16T18:43:21.181Z | 2026-04-16T18:54:58.366Z |
| CVE-2026-33121 |
8.7 (4.0)
|
DataEase has SQL Injection via Datasource Save Flow |
dataease |
dataease |
2026-04-16T18:16:02.485Z | 2026-04-16T18:34:54.187Z |
| CVE-2026-33084 |
8.7 (4.0)
|
DataEase has SQL Injection through its getFieldEnumObj… |
dataease |
dataease |
2026-04-16T18:14:07.316Z | 2026-04-18T02:40:47.771Z |
| CVE-2025-54510 |
5.9 (4.0)
|
A missing lock verification in AMD Secure Process… |
AMD |
AMD EPYC™ 9004 Series Processors |
2026-04-16T18:44:10.182Z | 2026-04-16T19:10:19.002Z |
| CVE-2025-43937 |
6.6 (3.1)
|
Dell PowerScale OneFS, versions prior to 9.12.0.0… |
Dell |
PowerScale OneFS |
2026-04-16T18:03:08.750Z | 2026-04-16T18:51:41.562Z |
| CVE-2025-43935 |
4.4 (3.1)
|
Dell PowerScale OneFS, versions prior to 9.12.0.0… |
Dell |
PowerScale OneFS |
2026-04-16T17:59:04.315Z | 2026-04-16T19:38:28.840Z |
| CVE-2023-20585 |
5.6 (4.0)
|
Insufficient checks of the RMP on host buffer acc… |
AMD |
AMD EPYC™ 7003 Series Processors |
2026-04-16T18:42:28.281Z | 2026-04-16T19:12:06.991Z |
| CVE-2026-41082 |
7.3 (3.1)
|
In OCaml opam before 2.5.1, a .install field cont… |
OCaml |
opam |
2026-04-16T17:32:40.068Z | 2026-04-21T09:32:52.152Z |
| CVE-2026-33083 |
8.7 (4.0)
|
DataEase has SQL Injection in Order By Clause |
dataease |
dataease |
2026-04-16T17:52:37.255Z | 2026-04-16T19:39:25.443Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-xgrj-5fxr-f35m |
7.8 (3.1)
|
Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally. | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-x4rw-mm5h-f6gr |
8.8 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-wgw8-32pr-g2q8 |
7.1 (3.1)
|
Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized at… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-vjmm-j3p2-hmvf |
6.1 (3.1)
|
Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-rqqg-mmqf-949h |
7.0 (3.1)
|
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-p6hv-7pmh-g23g |
7.8 (3.1)
|
Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized a… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-j3c6-g69p-4h39 |
7.8 (3.1)
|
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-hrhr-pv8r-9v24 |
7.8 (3.1)
|
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an … | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-hrfw-jjgv-mg38 |
7.8 (3.1)
|
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a secur… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-hc87-mxqm-j296 |
7.0 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Appl… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-grqv-qmhw-8pwc |
9.0 (3.1)
|
Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an aut… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-fvc9-q887-5p2h |
7.5 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-cq7p-pgp3-4rj8 |
7.8 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-9jjg-8mxf-5rr7 |
7.8 (3.1)
|
Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to eleva… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-9j2x-hvfg-jjrf |
7.8 (3.1)
|
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an … | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-8whp-grc8-h7wp |
6.5 (3.1)
|
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-8vhf-v9xm-2339 |
7.0 (3.1)
|
Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized at… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-7hwm-34ch-hpvc |
7.8 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-6hvh-5rrp-396c |
7.0 (3.1)
|
Double free in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-4x89-432c-cm9x |
5.7 (3.1)
|
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an auth… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-4wh4-v696-2r7r |
7.8 (3.1)
|
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-2p4j-rf5v-mxpv |
7.8 (3.1)
|
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate… | 2026-04-14T18:30:37Z | 2026-04-14T18:30:37Z |
| ghsa-xgg7-8m7r-jmgv |
7.8 (3.1)
|
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vul… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-wfg3-6grc-fqv3 |
4.6 (3.1)
|
Improper removal of sensitive information before storage or transfer in Windows Recovery Environmen… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-vhf9-597v-53mq |
6.1 (3.1)
|
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-vf2h-7fg9-fhfj |
4.9 (3.1)
|
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-rrmf-6vf5-86v9 |
8.5 (4.0)
|
A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific con… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-r9v7-9p75-jjw3 |
5.5 (3.1)
|
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vul… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-qwjq-mqc6-9q3h |
8.8 (3.1)
|
A improper neutralization of special elements used in an sql command ('sql injection') vulnerabilit… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-qf67-wfx4-7jww |
8.6 (3.1)
|
Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Imp… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-52 |
|
An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does … | salt | 2021-02-27T05:15:00Z | 2021-03-31T14:15:00Z |
| pysec-2021-51 |
|
An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_ro… | salt | 2021-02-27T05:15:00Z | 2021-04-01T17:15:00Z |
| pysec-2021-50 |
|
An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor … | salt | 2021-02-27T05:15:00Z | 2021-04-01T17:15:00Z |
| pysec-2021-132 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-02-26T18:15:00Z | 2021-08-27T03:22:06.616674Z |
| pysec-2021-131 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-02-26T18:15:00Z | 2021-08-27T03:22:06.569635Z |
| pysec-2021-76 |
|
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohtt… | aiohttp | 2021-02-26T03:15:00Z | 2021-03-26T20:01:00Z |
| pysec-2021-113 |
|
Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information … | channels | 2021-02-22T03:15:00Z | 2021-02-26T12:36:00Z |
| pysec-2021-146 |
|
All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) vi… | reportlab | 2021-02-18T16:15:00Z | 2021-08-27T03:22:19.297131Z |
| pysec-2021-65 |
|
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use… | gramaddict | 2021-02-17T22:15:00Z | 2021-02-24T13:58:00Z |
| pysec-2021-3 |
|
The lineage endpoint of the deprecated Experimental API was not protected by authenticati… | apache-airflow | 2021-02-17T15:15:00Z | 2021-02-23T17:59:00Z |
| pysec-2021-2 |
|
Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow a… | apache-airflow | 2021-02-17T15:15:00Z | 2021-02-23T17:48:00Z |
| pysec-2021-68 |
|
An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correct… | nfstream | 2021-02-16T15:15:00Z | 2021-02-19T21:11:00Z |
| pysec-2021-86 |
|
This affects all versions of package qlib. The workflow function in cli part of qlib was … | pyqlib | 2021-02-15T16:15:00Z | 2021-06-09T05:01:32.318077Z |
| pysec-2021-142 |
|
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is … | pyyaml | 2021-02-09T21:15:00Z | 2021-08-27T03:22:18.913334Z |
| pysec-2021-16 |
|
httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.… | httplib2 | 2021-02-08T20:15:00Z | 2021-02-12T14:56:00Z |
| pysec-2021-63 |
|
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to… | cryptography | 2021-02-07T20:15:00Z | 2021-02-19T17:23:00Z |
| pysec-2021-33 |
|
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of t… | oncall | 2021-02-05T18:15:00Z | 2021-02-08T20:54:00Z |
| pysec-2021-865 |
|
In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with ma… | bleach | 2021-02-02T17:58:00Z | 2022-01-05T02:16:13.001009Z |
| pysec-2021-9 |
|
In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.ar… | django | 2021-02-02T07:15:00Z | 2021-03-05T19:19:00Z |
| pysec-2021-66 |
|
This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is … | jinja2 | 2021-02-01T20:15:00Z | 2021-03-22T16:34:00Z |
| pysec-2021-49 |
|
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 … | pysaml2 | 2021-01-21T15:15:00Z | 2021-03-10T21:00:00Z |
| pysec-2021-48 |
|
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 … | pysaml2 | 2021-01-21T15:15:00Z | 2021-01-29T17:58:00Z |
| pysec-2021-129 |
|
The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by usi… | bottle | 2021-01-18T12:15:00Z | 2021-08-27T03:21:56.437494Z |
| pysec-2021-15 |
|
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code ex… | git-big-picture | 2021-01-13T17:15:00Z | 2021-01-19T14:43:00Z |
| pysec-2021-67 |
|
JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, … | jupyterhub | 2021-01-13T04:15:00Z | 2021-01-19T19:58:00Z |
| pysec-2021-422 |
|
Bot Framework SDK Information Disclosure Vulnerability | botframework-connector | 2021-01-12T20:15:00Z | 2021-11-16T03:58:43.637745Z |
| pysec-2021-71 |
|
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted … | pillow | 2021-01-12T09:15:00Z | 2021-01-29T00:46:00Z |
| pysec-2021-70 |
|
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted… | pillow | 2021-01-12T09:15:00Z | 2021-03-22T15:48:00Z |
| pysec-2021-69 |
|
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file… | pillow | 2021-01-12T09:15:00Z | 2021-01-29T00:47:00Z |
| pysec-2021-91 |
|
The Python "Flask-Security-Too" package is used for adding security features to your Flas… | flask-security-too | 2021-01-11T21:15:00Z | 2021-06-09T05:01:03.786366Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1102 | Malicious code in bcryptance (npm) | 2026-03-02T02:30:45Z | 2026-03-08T01:39:43Z |
| mal-2026-1101 | Malicious code in argonist (npm) | 2026-03-02T02:29:29Z | 2026-03-08T01:39:42Z |
| mal-2026-1113 | Malicious code in typoriem (npm) | 2026-03-02T02:29:09Z | 2026-03-08T01:39:48Z |
| mal-2026-1114 | Malicious code in vitetest-lint (npm) | 2026-03-02T02:28:29Z | 2026-03-08T01:39:48Z |
| mal-2026-1110 | Malicious code in loadash-lint (npm) | 2026-03-02T02:27:10Z | 2026-03-08T01:39:45Z |
| mal-2026-1106 | Malicious code in expressjs-lint (npm) | 2026-03-02T02:26:34Z | 2026-03-08T01:39:44Z |
| mal-2026-1112 | Malicious code in sequelization (npm) | 2026-03-02T02:25:55Z | 2026-03-08T01:39:47Z |
| mal-2026-1109 | Malicious code in jsnwebapptoken (npm) | 2026-03-02T02:24:58Z | 2026-03-08T01:39:45Z |
| mal-2026-1105 | Malicious code in daytonjs (npm) | 2026-03-02T02:24:03Z | 2026-03-08T01:39:43Z |
| mal-2026-1103 | Malicious code in bee-quarl (npm) | 2026-03-02T02:22:23Z | 2026-03-08T01:39:43Z |
| mal-2026-1111 | Malicious code in mqttoken (npm) | 2026-03-02T02:21:08Z | 2026-03-08T01:39:46Z |
| mal-2026-1104 | Malicious code in bubble-core (npm) | 2026-03-02T02:20:33Z | 2026-03-08T01:39:43Z |
| mal-2026-1107 | Malicious code in formmiderable (npm) | 2026-03-02T02:20:12Z | 2026-03-08T01:39:44Z |
| mal-2026-1100 | Malicious code in ng-vzbootstrap (npm) | 2026-03-01T17:14:48Z | 2026-04-01T12:28:03Z |
| mal-2026-1099 | Malicious code in pyclogger (PyPI) | 2026-03-01T13:28:57Z | 2026-03-19T12:23:26Z |
| mal-2026-1098 | Malicious code in noteasonfnsource (PyPI) | 2026-03-01T10:11:34Z | 2026-03-01T10:11:34Z |
| mal-2026-1097 | Malicious code in botbooster (PyPI) | 2026-03-01T10:00:17Z | 2026-03-01T10:45:09Z |
| mal-2026-1096 | Malicious code in sketch-measure (npm) | 2026-03-01T07:15:34Z | 2026-03-01T20:43:47Z |
| mal-2026-1095 | Malicious code in jquery-display (npm) | 2026-03-01T06:55:34Z | 2026-03-01T20:43:45Z |
| mal-2026-1094 | Malicious code in dc-web-app (npm) | 2026-03-01T06:45:23Z | 2026-03-06T14:29:08Z |
| mal-2026-1093 | Malicious code in naughty-package (npm) | 2026-03-01T05:38:31Z | 2026-03-03T06:50:38Z |
| mal-2026-1092 | Malicious code in jwrincident (PyPI) | 2026-02-28T22:36:00Z | 2026-03-19T12:23:25Z |
| mal-2026-1091 | Malicious code in myproject-bola (PyPI) | 2026-02-28T20:25:57Z | 2026-03-19T12:23:25Z |
| mal-2026-1090 | Malicious code in isb (PyPI) | 2026-02-28T20:22:13Z | 2026-03-19T12:23:25Z |
| mal-2026-1089 | Malicious code in randomstringgen (PyPI) | 2026-02-28T16:48:52Z | 2026-02-28T16:48:52Z |
| mal-2026-1088 | Malicious code in bladebit (PyPI) | 2026-02-28T16:43:25Z | 2026-02-28T16:43:25Z |
| mal-2026-1087 | Malicious code in bps-design-system (npm) | 2026-02-28T12:53:59Z | 2026-03-01T20:43:43Z |
| mal-2026-1086 | Malicious code in tchap-bot (PyPI) | 2026-02-28T11:55:40Z | 2026-03-19T12:23:26Z |
| mal-2026-1085 | Malicious code in ctf-toolkit (PyPI) | 2026-02-28T11:25:17Z | 2026-02-28T12:14:27Z |
| mal-2026-1084 | Malicious code in socketxio (PyPI) | 2026-02-28T10:44:48Z | 2026-02-28T10:44:48Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1273 | Perl: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-09T22:00:00.000+00:00 | 2025-11-26T23:00:00.000+00:00 |
| wid-sec-w-2025-1272 | QNAP NAS Software und Anwendungen: Mehrere Schwachstellen | 2025-06-09T22:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1271 | Linux Kernel: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-06-09T22:00:00.000+00:00 | 2025-08-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1270 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-09T22:00:00.000+00:00 | 2026-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1269 | Apache Kafka: Mehrere Schwachstellen | 2025-06-09T22:00:00.000+00:00 | 2026-01-06T23:00:00.000+00:00 |
| wid-sec-w-2025-1268 | Trend Micro Apex One: Mehrere Schwachstellen | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1267 | GeoServer: Mehrere Schwachstellen | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1266 | libarchive: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-09T22:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2025-1265 | Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-09T22:00:00.000+00:00 | 2025-09-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1264 | SAP Software: Mehrere Schwachstellen | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1263 | Jenkins "Gatling" Plugin: Schwachstelle ermöglicht Cross-Site Scripting | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1262 | FasterXML Jackson: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-09T22:00:00.000+00:00 | 2025-06-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1261 | CoreDNS: Schwachstelle ermöglicht Denial of Service | 2025-06-09T22:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-1260 | Trend Micro Internet Security: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1259 | Trend Micro Maximum Security: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1258 | KDE "Konsole": Schwachstelle ermöglicht Codeausführung | 2025-06-09T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1257 | SolarWinds Platform: Mehrere Schwachstellen | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1256 | Google Cloud Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1255 | Trend Micro Worry-Free Business Security: Mehrere Schwachstellen | 2025-06-09T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1254 | Microsoft Power Automate Desktop: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-05T22:00:00.000+00:00 | 2025-06-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1253 | QT: Schwachstelle ermöglicht Denial of Service | 2025-06-05T22:00:00.000+00:00 | 2025-06-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1252 | GNU libc: Mehrere Schwachstellen ermöglichen Manipulation von Daten | 2025-06-05T22:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-1251 | Devolutions Server: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-06-05T22:00:00.000+00:00 | 2025-06-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1250 | Checkmk : Mehrere Schwachstellen | 2025-06-05T22:00:00.000+00:00 | 2025-06-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1249 | Acronis Cyber Protect: Mehrere Schwachstellen | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1248 | HPE StoreOnce: Mehrere Schwachstellen | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1247 | VMware NSX: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1246 | Cisco Unified Contact Center Express (UCCX): Mehrere Schwachstellen | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1245 | Django: Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-04T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1244 | Wireshark: Schwachstelle ermöglicht Denial of Service | 2025-06-04T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-257-05 | Siemens Simcenter STAR-CCM+ Viewer | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-04 | Siemens Simcenter Femap | 2021-09-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-257-03 | Schneider Electric Struxureware Data Center Expert | 2021-09-14T00:00:00.000000Z | 2021-09-14T00:00:00.000000Z |
| icsa-21-257-02 | Johnson Controls Sensormatic Electronics KT-1 | 2021-09-14T00:00:00.000000Z | 2021-09-14T00:00:00.000000Z |
| icsa-21-257-01 | Digi PortServer TS 16 | 2021-09-14T00:00:00.000000Z | 2021-09-14T00:00:00.000000Z |
| icsa-21-252-03 | Mitsubishi Electric Europe B.V. smartRTU and INEA ME-RTU | 2021-09-09T00:00:00.000000Z | 2021-09-09T00:00:00.000000Z |
| icsa-21-252-02 | Delta Electronics DOPSoft 2 (Update A) | 2021-09-09T00:00:00.000000Z | 2021-09-09T00:00:00.000000Z |
| icsa-21-252-01 | AVEVA PCS Portal | 2021-09-09T00:00:00.000000Z | 2021-09-09T00:00:00.000000Z |
| icsa-21-250-01 | Mitsubishi Electric MELSEC iQ-R Series | 2021-09-07T06:00:00.000000Z | 2024-04-18T06:00:00.000000Z |
| icsa-21-250-02 | Hitachi ABB Power Grids System Data Manager | 2021-09-07T00:00:00.000000Z | 2021-09-07T00:00:00.000000Z |
| icsa-21-245-03 | Advantech WebAccess | 2021-09-02T00:00:00.000000Z | 2021-09-02T00:00:00.000000Z |
| icsa-21-245-02 | JTEKT TOYOPUC Products | 2021-09-02T00:00:00.000000Z | 2021-09-02T00:00:00.000000Z |
| icsa-21-245-01 | Johnson Controls Sensormatic Electronics Illustra | 2021-09-02T00:00:00.000000Z | 2021-09-02T00:00:00.000000Z |
| icsa-21-243-02 | FANUC Robot Controllers (Update A) | 2021-08-31T00:00:00.000000Z | 2022-02-03T00:00:00.000000Z |
| icsa-21-238-04 | Delta Electronics DOPSoft (Update A) | 2021-08-26T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-238-03 | Delta Electronics DIAEnergie (Update C) | 2021-08-26T00:00:00.000000Z | 2022-03-22T00:00:00.000000Z |
| icsa-21-238-02 | Annke Network Video Recorder | 2021-08-26T00:00:00.000000Z | 2021-08-26T00:00:00.000000Z |
| icsa-21-238-01 | Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000 | 2021-08-26T00:00:00.000000Z | 2021-08-26T00:00:00.000000Z |
| icsa-21-236-03 | Delta Electronics TPEditor | 2021-08-24T00:00:00.000000Z | 2021-08-24T00:00:00.000000Z |
| icsa-21-236-02 | Hitachi ABB Power Grids Retail Operations and CSB Products | 2021-08-24T00:00:00.000000Z | 2021-08-24T00:00:00.000000Z |
| icsa-21-236-01 | Hitachi ABB Power Grids TropOS | 2021-08-24T00:00:00.000000Z | 2021-08-24T00:00:00.000000Z |
| icsa-21-231-02 | Baker Hughes Bently Nevada 3500 | 2021-08-19T00:00:00.000000Z | 2022-02-24T00:00:00.000000Z |
| icsa-21-231-01 | ICSA-21-231-01_AVEVA SuiteLink Server | 2021-08-19T00:00:00.000000Z | 2021-08-19T00:00:00.000000Z |
| icsa-21-229-03 | xArrow SCADA | 2021-08-17T00:00:00.000000Z | 2021-08-17T00:00:00.000000Z |
| icsa-21-229-02 | Advantech WebAccess/NMS | 2021-08-17T00:00:00.000000Z | 2021-08-17T00:00:00.000000Z |
| icsa-21-229-01 | ThroughTek Kalay P2P SDK | 2021-08-17T00:00:00.000000Z | 2021-08-17T00:00:00.000000Z |
| icsa-21-224-02 | Horner Automation Cscape | 2021-08-12T00:00:00.000000Z | 2021-08-12T00:00:00.000000Z |
| icsa-21-224-01 | Cognex In-Sight OPC Server | 2021-08-12T00:00:00.000000Z | 2021-08-12T00:00:00.000000Z |
| icsa-21-257-23 | Siemens SIMATIC and TIM | 2021-08-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-222-09 | Siemens SIMATIC S7-1200 (Update A) | 2021-08-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190619-cms-codex | Cisco Meeting Server CLI Command Injection Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190619-cimc-cli-cmdinj | Cisco Integrated Management Controller CLI Command Injection Vulnerability | 2019-06-19T16:00:00+00:00 | 2019-06-19T16:00:00+00:00 |
| cisco-sa-20190612-iosxe-csrf | Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability | 2019-06-12T16:00:00+00:00 | 2019-07-16T15:51:20+00:00 |
| cisco-sa-20190605-webexmeetings-id | Cisco Webex Meetings Server Information Disclosure Vulnerability | 2019-06-05T16:00:00+00:00 | 2019-06-05T16:00:00+00:00 |
| cisco-sa-20190605-vcs | Cisco TelePresence Video Communication Server and Cisco Expressway Series Server-Side Request Forgery Vulnerability | 2019-06-05T16:00:00+00:00 | 2019-06-05T16:00:00+00:00 |
| cisco-sa-20190605-iosxr-ssh | Cisco IOS XR Software Secure Shell Authentication Vulnerability | 2019-06-05T16:00:00+00:00 | 2019-06-05T16:00:00+00:00 |
| cisco-sa-20190605-ind-xss | Cisco Industrial Network Director Stored Cross-Site Scripting Vulnerability | 2019-06-05T16:00:00+00:00 | 2019-06-05T16:00:00+00:00 |
| cisco-sa-20190605-ind-rce | Cisco Industrial Network Director Remote Code Execution Vulnerability | 2019-06-05T16:00:00+00:00 | 2019-06-05T16:00:00+00:00 |
| cisco-sa-20190605-ind-csrf | Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability | 2019-06-05T16:00:00+00:00 | 2019-06-11T19:14:15+00:00 |
| cisco-sa-20190605-ece-xss | Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability | 2019-06-05T16:00:00+00:00 | 2019-06-05T16:00:00+00:00 |
| cisco-sa-20190605-cucm-imp-dos | Cisco Unified Communications Manager IM&P Service, Cisco TelePresence VCS, and Cisco Expressway Series Denial of Service Vulnerability | 2019-06-05T16:00:00+00:00 | 2019-06-24T13:49:49+00:00 |
| cisco-sa-20190515-nxos-cli-bypass | Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability | 2019-05-16T16:00:00+00:00 | 2021-05-19T20:31:16+00:00 |
| cisco-sa-20190515-webex-player | Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-sb300sms-dhcp | Cisco Small Business 300 Series Managed Switches DHCP Denial of Service Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-sb-snmpdos | Cisco Small Business Series Switches Simple Network Management Protocol Denial of Service Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-pi-sqlinject | Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-pi-rce | Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities | 2019-05-15T16:00:00+00:00 | 2019-05-15T22:58:48+00:00 |
| cisco-sa-20190515-pi-pathtrav-1820 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-pi-pathtrav-1819 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-pi-pathtrav-1818 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-ssh-info | Cisco NX-OS Software SSH Key Information Disclosure Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-16T15:49:37+00:00 |
| cisco-sa-20190515-nxos-spsv | Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-snmp-dos | Cisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnerability | 2019-05-15T16:00:00+00:00 | 2021-07-12T14:24:24+00:00 |
| cisco-sa-20190515-nxos-sisv2 | Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-sisv | Cisco Nexus 3000 Series and 9000 Series Switches in NX-OS Mode CLI Command Software Image Signature Verification Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-rpm-injec | Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-pyth-escal | Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability | 2019-05-15T16:00:00+00:00 | 2021-08-25T15:49:16+00:00 |
| cisco-sa-20190515-nxos-psvb | Cisco NX-OS Software Patch Signature Verification Bypass Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-overflow-inj | Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-nxapi-xss | Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-55691 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55690 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55689 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55688 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55687 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55686 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55685 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55684 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55683 | Windows Kernel Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2026-01-02T08:00:00.000Z |
| msrc_cve-2025-55682 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55681 | Desktop Window Manager Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55680 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55679 | Windows Kernel Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55678 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55677 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55676 | Windows USB Video Class System Driver Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-23T07:00:00.000Z |
| msrc_cve-2025-55340 | Windows Remote Desktop Protocol Security Feature Bypass | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55339 | Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55337 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55336 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55335 | Windows NTFS Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55334 | Windows Kernel Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55333 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55332 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55331 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55330 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55328 | Windows Hyper-V Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55326 | Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55325 | Windows Storage Management Provider Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55321 | Azure Monitor Log Analytics Spoofing Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-09T07:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14695-1 | go1.23-1.23.5-1.1 on GA media | 2025-01-25T00:00:00Z | 2025-01-25T00:00:00Z |
| opensuse-su-2025:14694-1 | go1.22-1.22.11-1.1 on GA media | 2025-01-25T00:00:00Z | 2025-01-25T00:00:00Z |
| opensuse-su-2025:14693-1 | go1.24-1.24rc2-1.1 on GA media | 2025-01-24T00:00:00Z | 2025-01-24T00:00:00Z |
| opensuse-su-2025:0030-1 | Security update for dante | 2025-01-23T19:01:59Z | 2025-01-23T19:01:59Z |
| opensuse-su-2025:0025-1 | Security update for cheat | 2025-01-23T19:01:34Z | 2025-01-23T19:01:34Z |
| opensuse-su-2025:0024-1 | Security update for qt6-webengine | 2025-01-23T09:21:43Z | 2025-01-23T09:21:43Z |
| opensuse-su-2025:14692-1 | libQt6Bluetooth6-6.8.1-2.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14691-1 | python313-3.13.1-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14690-1 | python311-azure-storage-blob-12.24.1-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14689-1 | podman-5.3.2-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14688-1 | phpMyAdmin-5.2.2-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14687-1 | nodejs-electron-33.3.2-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14686-1 | java-21-openjdk-21.0.6.0-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14685-1 | java-11-openjdk-11.0.26.0-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14684-1 | helmfile-0.170.1-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:14683-1 | clamav-1.4.2-1.1 on GA media | 2025-01-23T00:00:00Z | 2025-01-23T00:00:00Z |
| opensuse-su-2025:0021-1 | Security update for gh | 2025-01-22T10:02:08Z | 2025-01-22T10:02:08Z |
| opensuse-su-2025:14682-1 | java-17-openjdk-17.0.14.0-1.1 on GA media | 2025-01-22T00:00:00Z | 2025-01-22T00:00:00Z |
| opensuse-su-2025:14681-1 | grafana-11.3.2-1.1 on GA media | 2025-01-22T00:00:00Z | 2025-01-22T00:00:00Z |
| opensuse-su-2025:14680-1 | ruby3.4-rubygem-railties-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14679-1 | ruby3.4-rubygem-rails-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14678-1 | ruby3.4-rubygem-activesupport-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14677-1 | ruby3.4-rubygem-activestorage-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14676-1 | ruby3.4-rubygem-activerecord-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14675-1 | ruby3.4-rubygem-activemodel-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14674-1 | ruby3.4-rubygem-activejob-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14673-1 | ruby3.4-rubygem-actionview-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14672-1 | ruby3.4-rubygem-actiontext-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14671-1 | ruby3.4-rubygem-actionpack-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14670-1 | ruby3.4-rubygem-actionmailer-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:22759 | Red Hat Security Advisory: RHOAI 2.22.3 - Red Hat OpenShift AI | 2025-12-04T13:06:08+00:00 | 2026-04-14T07:56:34+00:00 |
| rhsa-2025:22753 | Red Hat Security Advisory: xorg-x11-server security update | 2025-12-04T12:51:21+00:00 | 2026-03-18T03:13:21+00:00 |
| rhsa-2025:22752 | Red Hat Security Advisory: kernel security update | 2025-12-04T12:50:07+00:00 | 2026-03-25T18:09:27+00:00 |
| rhsa-2025:22622 | Red Hat Security Advisory: Red Hat build of Quarkus 3.27.1 release and security update | 2025-12-04T11:30:16+00:00 | 2026-03-24T13:16:43+00:00 |
| rhsa-2025:22742 | Red Hat Security Advisory: xorg-x11-server security update | 2025-12-04T10:25:56+00:00 | 2026-03-18T03:13:11+00:00 |
| rhsa-2025:22743 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.1 | 2025-12-04T09:52:50+00:00 | 2026-04-14T07:56:34+00:00 |
| rhsa-2025:22738 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.5.2 | 2025-12-04T08:53:28+00:00 | 2026-04-14T07:56:34+00:00 |
| rhsa-2025:22728 | Red Hat Security Advisory: postgresql:15 security update | 2025-12-04T07:59:25+00:00 | 2026-04-13T20:13:42+00:00 |
| rhsa-2025:22729 | Red Hat Security Advisory: xorg-x11-server security update | 2025-12-04T07:41:26+00:00 | 2026-03-18T03:13:19+00:00 |
| rhsa-2025:22684 | Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update | 2025-12-03T23:53:32+00:00 | 2026-04-14T07:42:47+00:00 |
| rhsa-2025:22683 | Red Hat Security Advisory: multicluster engine for Kubernetes v2.7.7 security update | 2025-12-03T22:50:31+00:00 | 2026-04-14T07:42:47+00:00 |
| rhsa-2025:22672 | Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update | 2025-12-03T20:49:54+00:00 | 2026-03-18T03:12:14+00:00 |
| rhsa-2025:22668 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-12-03T14:58:33+00:00 | 2026-04-14T07:56:32+00:00 |
| rhsa-2025:22667 | Red Hat Security Advisory: tigervnc security update | 2025-12-03T14:29:43+00:00 | 2026-03-18T03:12:19+00:00 |
| rhsa-2025:22661 | Red Hat Security Advisory: kernel security update | 2025-12-03T13:03:39+00:00 | 2026-03-18T03:11:46+00:00 |
| rhsa-2025:22663 | Red Hat Security Advisory: qt6-qtquick3d security update | 2025-12-03T12:46:38+00:00 | 2026-03-18T03:13:18+00:00 |
| rhsa-2025:22660 | Red Hat Security Advisory: systemd security update | 2025-12-03T11:55:40+00:00 | 2026-03-26T18:41:37+00:00 |
| rhsa-2025:22277 | Red Hat Security Advisory: OpenShift Container Platform 4.19.20 bug fix and security update | 2025-12-03T11:07:35+00:00 | 2026-03-19T17:31:15+00:00 |
| rhsa-2025:22265 | Red Hat Security Advisory: OpenShift Container Platform 4.17.45 bug fix and security update | 2025-12-03T10:35:45+00:00 | 2026-03-19T17:31:15+00:00 |
| rhsa-2025:22256 | Red Hat Security Advisory: OpenShift Container Platform 4.20.6 bug fix and security update | 2025-12-03T04:59:10+00:00 | 2026-03-19T17:31:14+00:00 |
| rhsa-2025:22652 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.23.1 Release. | 2025-12-02T21:45:24+00:00 | 2026-01-21T23:29:04+00:00 |
| rhsa-2025:22623 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.1 Release. | 2025-12-02T15:28:44+00:00 | 2026-01-21T23:29:03+00:00 |
| rhsa-2025:22620 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.22.1 Release. | 2025-12-02T15:22:33+00:00 | 2026-01-21T23:29:03+00:00 |
| rhsa-2025:22618 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.8.0 release | 2025-12-02T15:17:18+00:00 | 2026-04-13T20:13:42+00:00 |
| rhsa-2025:22255 | Red Hat Security Advisory: OpenShift Container Platform 4.20.6 packages and security update | 2025-12-02T14:45:43+00:00 | 2026-04-14T07:56:32+00:00 |
| rhsa-2025:22607 | Red Hat Security Advisory: expat security update | 2025-12-02T14:22:18+00:00 | 2026-04-13T20:13:42+00:00 |
| rhsa-2025:22257 | Red Hat Security Advisory: OpenShift Container Platform 4.20.6 bug fix and security update | 2025-12-02T14:01:47+00:00 | 2026-02-10T09:43:44+00:00 |
| rhsa-2025:22571 | Red Hat Security Advisory: kernel security update | 2025-12-02T11:12:52+00:00 | 2026-04-13T11:13:50+00:00 |
| rhsa-2025:22549 | Red Hat Security Advisory: qt5-qt3d security update | 2025-12-02T08:04:37+00:00 | 2026-03-18T03:12:25+00:00 |
| rhsa-2025:22548 | Red Hat Security Advisory: Red Hat Ceph Storage | 2025-12-02T02:21:05+00:00 | 2026-04-13T20:13:41+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4384-1 | Security update for python-Django | 2025-12-12T13:28:27Z | 2025-12-12T13:28:27Z |
| suse-su-2025:4383-1 | Security update for libpng12 | 2025-12-12T13:13:47Z | 2025-12-12T13:13:47Z |
| suse-su-2025:4382-1 | Security update for gegl | 2025-12-12T13:06:54Z | 2025-12-12T13:06:54Z |
| suse-su-2025:4381-1 | Security update for kubernetes-client | 2025-12-12T10:19:11Z | 2025-12-12T10:19:11Z |
| suse-su-2025:4380-1 | Security update for kubernetes-client | 2025-12-12T10:18:54Z | 2025-12-12T10:18:54Z |
| suse-su-2025:21194-1 | Security update for keylime | 2025-12-12T09:45:03Z | 2025-12-12T09:45:03Z |
| suse-su-2025:4373-1 | Security update for container-suseconnect | 2025-12-12T09:05:38Z | 2025-12-12T09:05:38Z |
| suse-su-2025:21193-1 | Security update for go1.24 | 2025-12-12T07:45:36Z | 2025-12-12T07:45:36Z |
| suse-su-2025:21192-1 | Security update for go1.25 | 2025-12-12T07:24:50Z | 2025-12-12T07:24:50Z |
| suse-su-2025:4372-1 | Security update for postgresql15 | 2025-12-11T19:06:38Z | 2025-12-11T19:06:38Z |
| suse-su-2025:4371-1 | Security update for postgresql14 | 2025-12-11T19:04:45Z | 2025-12-11T19:04:45Z |
| suse-su-2025:4370-1 | Security update for postgresql14 | 2025-12-11T19:03:37Z | 2025-12-11T19:03:37Z |
| suse-su-2025:4368-1 | Security update for python3 | 2025-12-11T15:12:31Z | 2025-12-11T15:12:31Z |
| suse-su-2025:4364-1 | Security update for postgresql17, postgresql18 | 2025-12-11T10:12:26Z | 2025-12-11T10:12:26Z |
| suse-su-2025:4363-1 | Security update for postgresql17, postgresql18 | 2025-12-11T10:10:24Z | 2025-12-11T10:10:24Z |
| suse-su-2025:4353-1 | Security update for fontforge | 2025-12-10T18:03:31Z | 2025-12-10T18:03:31Z |
| suse-su-2025:4352-1 | Security update for python310 | 2025-12-10T17:18:21Z | 2025-12-10T17:18:21Z |
| suse-su-2025:4347-1 | Security update for glib2 | 2025-12-10T13:02:34Z | 2025-12-10T13:02:34Z |
| suse-su-2025:4346-1 | Security update for gnutls | 2025-12-10T10:39:49Z | 2025-12-10T10:39:49Z |
| suse-su-2025:1004-2 | Security update for python-Jinja2 | 2025-12-10T10:34:31Z | 2025-12-10T10:34:31Z |
| suse-su-2025:4337-1 | Security update for go1.24 | 2025-12-09T23:51:31Z | 2025-12-09T23:51:31Z |
| suse-su-2025:4336-1 | Security update for go1.25 | 2025-12-09T23:50:12Z | 2025-12-09T23:50:12Z |
| suse-su-2025:4335-1 | Security update for gegl | 2025-12-09T18:19:44Z | 2025-12-09T18:19:44Z |
| suse-su-2025:4334-1 | Security update for postgresql13 | 2025-12-09T18:17:22Z | 2025-12-09T18:17:22Z |
| suse-su-2025:21207-1 | Security update for python311 | 2025-12-09T17:22:29Z | 2025-12-09T17:22:29Z |
| suse-su-2025:21206-1 | Security update for curl | 2025-12-09T16:41:54Z | 2025-12-09T16:41:54Z |
| suse-su-2025:21189-1 | Security update for openexr | 2025-12-09T16:32:45Z | 2025-12-09T16:32:45Z |
| suse-su-2025:21202-1 | Security update for gnutls | 2025-12-09T15:54:41Z | 2025-12-09T15:54:41Z |
| suse-su-2025:21201-1 | Security update for glib2 | 2025-12-09T15:43:38Z | 2025-12-09T15:43:38Z |
| suse-su-2025:21200-1 | Security update for libmicrohttpd | 2025-12-09T15:28:06Z | 2025-12-09T15:28:06Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2024:1310 | Moderate: .NET 8.0 security update | 2024-03-13T00:00:00Z | 2024-03-14T12:45:30Z |
| alsa-2024:1309 | Moderate: .NET 7.0 security update | 2024-03-13T00:00:00Z | 2024-03-14T10:35:33Z |
| alsa-2024:1308 | Moderate: .NET 7.0 security update | 2024-03-13T00:00:00Z | 2024-03-14T09:56:35Z |
| alsa-2024:1239 | Moderate: opencryptoki security update | 2024-03-07T00:00:00Z | 2024-03-11T11:17:26Z |
| alsa-2024:1150 | Moderate: buildah security update | 2024-03-05T00:00:00Z | 2024-03-06T13:54:57Z |
| alsa-2024:1149 | Moderate: skopeo security update | 2024-03-05T00:00:00Z | 2024-03-06T14:02:51Z |
| alsa-2024:1147 | Moderate: rear security update | 2024-03-05T00:00:00Z | 2024-03-06T14:11:21Z |
| alsa-2024:1142 | Moderate: haproxy security update | 2024-03-05T00:00:00Z | 2024-03-06T14:17:10Z |
| alsa-2024:1141 | Moderate: mysql security update | 2024-03-05T00:00:00Z | 2024-03-07T19:03:22Z |
| alsa-2024:1139 | Low: keylime security update | 2024-03-05T00:00:00Z | 2024-03-06T14:41:49Z |
| alsa-2024:1134 | Important: tomcat security update | 2024-03-05T00:00:00Z | 2024-03-07T08:46:26Z |
| alsa-2024:1131 | Moderate: golang security update | 2024-03-05T00:00:00Z | 2024-03-06T14:56:47Z |
| alsa-2024:1130 | Moderate: openssh security update | 2024-03-05T00:00:00Z | 2024-03-06T15:16:35Z |
| alsa-2024:1129 | Moderate: curl security update | 2024-03-05T00:00:00Z | 2024-03-06T19:57:43Z |
| alsa-2024:1075 | Important: edk2 security update | 2024-03-05T00:00:00Z | 2024-03-05T14:53:03Z |
| alsa-2024:1063 | Important: edk2 security update | 2024-03-04T00:00:00Z | 2024-03-05T14:59:22Z |
| alsa-2024:0977 | Important: unbound security update | 2024-02-26T00:00:00Z | 2024-02-28T14:41:33Z |
| alsa-2024:0975 | Important: postgresql:13 security update | 2024-02-26T00:00:00Z | 2024-02-28T14:50:39Z |
| alsa-2024:0974 | Important: postgresql:12 security update | 2024-02-26T00:00:00Z | 2024-02-28T14:58:47Z |
| alsa-2024:0973 | Important: postgresql:15 security update | 2024-02-26T00:00:00Z | 2024-02-28T15:04:35Z |
| alsa-2024:0967 | Moderate: opensc security update | 2024-02-26T00:00:00Z | 2024-02-28T15:09:26Z |
| alsa-2024:0966 | Moderate: opensc security update | 2024-02-26T00:00:00Z | 2024-02-28T15:18:29Z |
| alsa-2024:0965 | Important: unbound security update | 2024-02-26T00:00:00Z | 2024-02-28T15:24:26Z |
| alsa-2024:0964 | Important: thunderbird security update | 2024-02-26T00:00:00Z | 2024-02-28T15:29:38Z |
| alsa-2024:0963 | Important: thunderbird security update | 2024-02-26T00:00:00Z | 2024-02-28T15:36:17Z |
| alsa-2024:0956 | Important: postgresql:10 security update | 2024-02-26T00:00:00Z | 2024-02-28T15:41:58Z |
| alsa-2024:0955 | Important: firefox security update | 2024-02-26T00:00:00Z | 2024-02-28T15:49:38Z |
| alsa-2024:0952 | Important: firefox security update | 2024-02-22T00:00:00Z | 2024-02-28T15:59:36Z |
| alsa-2024:0951 | Important: postgresql security update | 2024-02-22T00:00:00Z | 2024-02-28T16:06:25Z |
| alsa-2024:0950 | Important: postgresql:15 security update | 2024-02-22T00:00:00Z | 2024-02-28T16:18:57Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2021-1457 | Heap-buffer-overflow in generic_unpack | 2021-10-17T00:01:33.875064Z | 2022-04-13T03:04:37.206944Z |
| osv-2021-1455 | Heap-buffer-overflow in mrb_funcall_with_block | 2021-10-15T00:01:46.019413Z | 2022-04-13T03:04:39.708713Z |
| osv-2021-1454 | Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process | 2021-10-15T00:01:43.342560Z | 2022-04-13T03:04:35.127914Z |
| osv-2021-1453 | Heap-buffer-overflow in mrb_funcall_with_block | 2021-10-15T00:01:35.956841Z | 2022-04-13T03:04:39.754811Z |
| osv-2021-1452 | Heap-buffer-overflow in mrb_funcall_with_block | 2021-10-15T00:00:40.001741Z | 2022-04-13T03:04:39.698442Z |
| osv-2021-1451 | Heap-buffer-overflow in Imf_3_1::memstream_read | 2021-10-15T00:00:15.606456Z | 2022-04-13T03:04:37.061710Z |
| osv-2021-1450 | UNKNOWN READ in helper_uc_tracecode | 2021-10-15T00:00:10.072597Z | 2022-04-13T03:21:09.148255Z |
| osv-2021-1449 | UNKNOWN WRITE in void QtPrivate::QPodArrayOps<QPainterPath::Element>::emplace<QPainterPath::Eleme | 2021-10-15T00:00:09.550775Z | 2022-04-13T03:04:36.901754Z |
| osv-2021-1448 | Heap-buffer-overflow in mrb_vm_exec | 2021-10-15T00:00:09.256436Z | 2022-04-13T03:04:39.723899Z |
| osv-2021-1447 | UNKNOWN READ | 2021-10-14T00:00:18.116118Z | 2022-04-13T03:04:35.553810Z |
| osv-2021-1442 | Heap-use-after-free in find_es_header | 2021-10-12T00:01:42.721228Z | 2022-04-13T03:04:32.366279Z |
| osv-2021-1440 | Heap-buffer-overflow in internal_huf_decompress | 2021-10-12T00:01:30.701207Z | 2022-04-13T03:04:37.072969Z |
| osv-2021-1437 | Heap-buffer-overflow in unpack_32bit | 2021-10-11T00:01:37.363287Z | 2022-04-13T03:38:15.105099Z |
| osv-2021-1430 | Heap-buffer-overflow in diagnosticInfoOrder | 2021-10-10T00:01:34.859517Z | 2022-04-13T03:04:41.309026Z |
| osv-2021-1429 | Heap-buffer-overflow in unpack_16bit | 2021-10-10T00:00:16.052480Z | 2022-04-13T03:30:44.800436Z |
| osv-2021-1427 | Global-buffer-overflow in fr_base16_decode_nstd | 2021-10-09T00:01:36.586243Z | 2022-04-13T03:04:40.147266Z |
| osv-2021-1425 | Heap-buffer-overflow in fr_dns_label_to_value_box | 2021-10-09T00:00:09.054154Z | 2022-04-13T03:04:40.120596Z |
| osv-2021-1423 | Heap-buffer-overflow in fr_struct_from_network | 2021-10-08T00:00:48.266734Z | 2022-04-13T03:04:40.157848Z |
| osv-2021-1422 | Heap-buffer-overflow in fr_dns_label_uncompressed_length | 2021-10-08T00:00:31.482387Z | 2022-04-13T03:04:40.125934Z |
| osv-2021-1420 | Heap-buffer-overflow in unpack_16bit | 2021-10-07T00:00:43.569481Z | 2022-04-13T03:34:40.643008Z |
| osv-2021-1418 | Heap-buffer-overflow in spvTextEncodeOperand | 2021-10-07T00:00:34.846656Z | 2022-04-13T03:04:34.855789Z |
| osv-2021-1417 | Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress | 2021-10-07T00:00:22.505600Z | 2022-04-13T03:04:39.598070Z |
| osv-2021-1415 | Heap-buffer-overflow in Imf_3_1::memstream_read | 2021-10-07T00:00:14.846615Z | 2023-02-24T01:51:34.418760Z |
| osv-2021-1414 | Heap-buffer-overflow in internal_huf_decompress | 2021-10-06T00:01:27.953116Z | 2022-04-13T03:34:37.364531Z |
| osv-2021-1413 | UNKNOWN READ in helper_uc_tracecode | 2021-10-05T00:01:45.386128Z | 2022-04-13T03:26:07.599894Z |
| osv-2021-1410 | Heap-buffer-overflow in generic_unpack | 2021-10-05T00:00:18.081765Z | 2022-04-13T03:32:30.366609Z |
| osv-2021-1409 | Heap-buffer-overflow in unpack_16bit_4chan_planar | 2021-10-04T00:01:39.306375Z | 2022-04-13T03:27:34.652723Z |
| osv-2021-1408 | Heap-buffer-overflow in unpack_16bit_4chan_planar | 2021-10-04T00:01:38.482183Z | 2022-04-13T03:33:32.096613Z |
| osv-2021-1406 | Heap-buffer-overflow in Imf_3_1::memstream_read | 2021-10-04T00:00:13.690629Z | 2022-04-13T03:22:04.516243Z |
| osv-2021-1400 | Heap-buffer-overflow in unpack_16bit | 2021-10-02T00:00:18.051551Z | 2022-04-13T03:37:32.465332Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2024-6502 | Incorrect Provision of Specified Functionality in GitLab | 2024-08-26T08:29:33.838Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7110 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab | 2024-08-26T08:28:53.762Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8041 | Uncontrolled Resource Consumption in GitLab | 2024-08-26T08:28:32.807Z | 2025-05-20T10:02:07.006Z |
| bit-grafana-2024-6322 | 2024-08-23T07:19:28.601Z | 2025-04-03T14:40:37.652Z | |
| bit-ghost-2024-43409 | Ghost's improper authentication allows access to member information and actions | 2024-08-23T07:18:19.005Z | 2026-03-20T09:47:33.381Z |
| bit-airflow-2024-41937 | Apache Airflow: Stored XSS Vulnerability on provider link | 2024-08-23T07:16:07.397Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2021-31294 | 2024-08-22T19:46:26.156Z | 2025-04-03T14:40:37.652Z | |
| bit-valkey-2021-32626 | Lua scripts can overflow the heap-based Lua stack in Redis | 2024-08-22T19:46:16.053Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2021-32627 | Integer overflow issue with Streams in Redis | 2024-08-22T19:46:05.459Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2021-32628 | Vulnerability in handling large ziplists | 2024-08-22T19:45:55.549Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2021-32672 | Vulnerability in Lua Debugger in Redis | 2024-08-22T19:45:46.062Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2021-32675 | DoS vulnerability in Redis | 2024-08-22T19:45:35.756Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2021-32687 | Integer overflow issue with intsets in Redis | 2024-08-22T19:45:25.149Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2021-32762 | Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms | 2024-08-22T19:45:14.548Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2021-41099 | Integer overflow issue with strings in Redis | 2024-08-22T19:45:03.756Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2022-24735 | Lua scripts can be manipulated to overcome ACL rules in Redis | 2024-08-22T19:44:38.954Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2022-24736 | A Malformed Lua script can crash Redis | 2024-08-22T19:44:28.248Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2022-24834 | Heap overflow issue with the Lua cjson library used by Redis | 2024-08-22T19:44:16.255Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2022-31144 | Potential heap overflow in Redis | 2024-08-22T19:44:03.854Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2022-33105 | 2024-08-22T19:43:51.752Z | 2025-04-03T14:40:37.652Z | |
| bit-valkey-2022-35951 | Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow | 2024-08-22T19:43:36.658Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panic | 2024-08-22T19:43:23.652Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2022-36021 | Redis string pattern matching can be abused to achieve Denial of Service | 2024-08-22T19:43:08.460Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2022-3647 | Redis Crash Report debug.c sigsegvHandler denial of service | 2024-08-22T19:42:54.056Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2023-22458 | Integer overflow in multiple Redis commands can lead to denial-of-service | 2024-08-22T19:42:35.050Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2023-25155 | Integer Overflow in several Redis commands can lead to denial of service. | 2024-08-22T19:42:16.960Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2023-28425 | Specially crafted MSETNX command can lead to denial-of-service | 2024-08-22T19:42:01.850Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2023-28856 | `HINCRBYFLOAT` can be used to crash a redis-server process | 2024-08-22T19:41:46.749Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2023-31655 | 2024-08-22T19:41:30.849Z | 2025-04-03T14:40:37.652Z | |
| bit-valkey-2023-36824 | Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis | 2024-08-22T19:41:15.161Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0747 | Vulnérabilité dans le noyau Linux de SUSE | 2024-09-06T00:00:00.000000 | 2024-09-06T00:00:00.000000 |
| certfr-2024-avi-0746 | Multiples vulnérabilités dans Elastic Kibana | 2024-09-06T00:00:00.000000 | 2024-09-06T00:00:00.000000 |
| certfr-2024-avi-0745 | Vulnérabilité dans les produits Asterisk | 2024-09-06T00:00:00.000000 | 2024-09-06T00:00:00.000000 |
| certfr-2024-avi-0744 | Multiples vulnérabilités dans ClamAV | 2024-09-05T00:00:00.000000 | 2024-09-05T00:00:00.000000 |
| certfr-2024-avi-0743 | Multiples vulnérabilités dans Centreon Web | 2024-09-05T00:00:00.000000 | 2024-09-05T00:00:00.000000 |
| certfr-2024-avi-0742 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-09-05T00:00:00.000000 | 2024-09-05T00:00:00.000000 |
| certfr-2024-avi-0741 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-09-05T00:00:00.000000 | 2024-10-15T00:00:00.000000 |
| certfr-2024-avi-0740 | Multiples vulnérabilités dans les produits Veeam | 2024-09-05T00:00:00.000000 | 2024-09-05T00:00:00.000000 |
| certfr-2024-avi-0739 | Multiples vulnérabilités dans les produits Cisco | 2024-09-05T00:00:00.000000 | 2024-09-05T00:00:00.000000 |
| certfr-2024-avi-0738 | Vulnérabilité dans Synacor Zimbra Desktop | 2024-09-04T00:00:00.000000 | 2024-09-04T00:00:00.000000 |
| certfr-2024-avi-0737 | Multiples vulnérabilités dans Moxa OnCell 3120-LTE-1 Series | 2024-09-04T00:00:00.000000 | 2024-09-04T00:00:00.000000 |
| certfr-2024-avi-0736 | Vulnérabilité dans OpenSSL | 2024-09-04T00:00:00.000000 | 2024-09-04T00:00:00.000000 |
| certfr-2024-avi-0735 | Multiples vulnérabilités dans les produits Mozilla | 2024-09-04T00:00:00.000000 | 2024-09-04T00:00:00.000000 |
| certfr-2024-avi-0734 | Vulnérabilité dans CPython | 2024-09-04T00:00:00.000000 | 2024-09-04T00:00:00.000000 |
| certfr-2024-avi-0733 | Multiples vulnérabilités dans les produits Google | 2024-09-04T00:00:00.000000 | 2024-09-05T00:00:00.000000 |
| certfr-2024-avi-0732 | Vulnérabilité dans les produits VMware | 2024-09-03T00:00:00.000000 | 2024-09-03T00:00:00.000000 |
| certfr-2024-avi-0731 | Multiples vulnérabilités dans Google Chrome | 2024-09-03T00:00:00.000000 | 2024-09-03T00:00:00.000000 |
| certfr-2024-avi-0730 | Multiples vulnérabilités dans MISP | 2024-09-02T00:00:00.000000 | 2024-09-02T00:00:00.000000 |
| certfr-2024-avi-0729 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-08-30T00:00:00.000000 | 2024-08-30T00:00:00.000000 |
| certfr-2024-avi-0728 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-08-30T00:00:00.000000 | 2024-08-30T00:00:00.000000 |
| certfr-2024-avi-0727 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-08-30T00:00:00.000000 | 2024-08-30T00:00:00.000000 |
| certfr-2024-avi-0726 | Multiples vulnérabilités dans les produits IBM | 2024-08-30T00:00:00.000000 | 2024-08-30T00:00:00.000000 |
| certfr-2024-avi-0725 | Vulnérabilité dans Wireshark | 2024-08-29T00:00:00.000000 | 2024-08-30T00:00:00.000000 |
| certfr-2024-avi-0724 | Multiples vulnérabilités dans Google Chrome | 2024-08-29T00:00:00.000000 | 2024-08-29T00:00:00.000000 |
| certfr-2024-avi-0723 | Vulnérabilité dans les produits Cisco Nexus | 2024-08-29T00:00:00.000000 | 2024-08-29T00:00:00.000000 |
| certfr-2024-avi-0722 | Vulnérabilité dans MongoDB Server | 2024-08-28T00:00:00.000000 | 2024-08-28T00:00:00.000000 |
| certfr-2024-avi-0721 | Vulnérabilité dans Microsoft Edge | 2024-08-26T00:00:00.000000 | 2024-08-26T00:00:00.000000 |
| certfr-2024-avi-0720 | Multiples vulnérabilités dans IBM QRadar SIEM | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| certfr-2024-avi-0719 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| certfr-2024-avi-0718 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000081 | MilkyStep vulnerable to SQL injection | 2015-06-09T14:15+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000080 | MilkyStep vulnerable to OS command injection | 2015-06-09T14:02+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000079 | MilkyStep vulnerable to cross-site request forgery | 2015-06-09T13:45+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000078 | MilkyStep fails to restrict access permissions | 2015-06-09T13:43+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000085 | Multiple Buffalo wireless LAN routers vulnerable to OS command injection | 2015-06-05T14:16+09:00 | 2015-06-10T17:54+09:00 |
| jvndb-2015-000076 | NetFlow Analyzer vulnerable to cross-site request forgery | 2015-06-05T14:14+09:00 | 2015-06-10T16:14+09:00 |
| jvndb-2015-000075 | NetFlow Analyzer fails to restrict access permissions | 2015-06-05T14:02+09:00 | 2015-06-10T16:10+09:00 |
| jvndb-2015-000074 | NetFlow Analyzer vulnerable to cross-site scripting | 2015-06-05T13:59+09:00 | 2015-06-10T16:06+09:00 |
| jvndb-2015-000073 | F21 JWT fails to verify token signatures | 2015-06-03T15:01+09:00 | 2015-06-08T12:04+09:00 |
| jvndb-2015-000072 | "Open Explorer Beta" App for Android vulnerable to directory traversal | 2015-06-03T14:59+09:00 | 2015-06-08T12:25+09:00 |
| jvndb-2015-000071 | ZenPhoto20 vulnerable to cross-site scripting | 2015-05-28T13:42+09:00 | 2015-06-03T18:06+09:00 |
| jvndb-2015-000070 | Zenphoto vulnerable to cross-site scripting | 2015-05-28T13:42+09:00 | 2015-06-03T18:06+09:00 |
| jvndb-2015-000069 | Apache Sling API and Servlets Post components vulnerable to cross-site scripting | 2015-05-27T14:43+09:00 | 2015-06-04T15:39+09:00 |
| jvndb-2015-000068 | SXF Common Library vulnerable to buffer overflow | 2015-05-22T14:15+09:00 | 2015-05-28T18:14+09:00 |
| jvndb-2015-002706 | Information Disclosure Vulnerability in JP1/Integrated Management - Universal CMDB | 2015-05-21T16:37+09:00 | 2015-05-21T16:37+09:00 |
| jvndb-2015-002705 | Problem with directory permissions in JP1/Automatic Operation | 2015-05-21T16:36+09:00 | 2015-05-21T16:36+09:00 |
| jvndb-2015-000067 | mt-phpincgi vulnerable to PHP object injection | 2015-05-20T14:34+09:00 | 2015-05-28T18:05+09:00 |
| jvndb-2015-000066 | BGA32.DLL and QBga32.DLL contain multiple vulnerabilities | 2015-05-19T13:40+09:00 | 2015-05-22T14:26+09:00 |
| jvndb-2015-000065 | "Honda Moto LINC" App for Android fails to verify SSL server certificates | 2015-05-15T12:23+09:00 | 2018-02-28T14:36+09:00 |
| jvndb-2015-000064 | Cacti vulnerable to SQL injection | 2015-05-14T13:39+09:00 | 2015-05-25T15:29+09:00 |
| jvndb-2015-000063 | MailDealer vulnerable to cross-site scripting | 2015-05-12T14:07+09:00 | 2015-05-12T14:07+09:00 |
| jvndb-2015-000062 | EasyCTF vulnerable to session management | 2015-05-01T14:00+09:00 | 2015-05-07T16:03+09:00 |
| jvndb-2015-000061 | EasyCTF vulnerable to cross-site scripting | 2015-05-01T13:49+09:00 | 2015-05-07T16:02+09:00 |
| jvndb-2015-000060 | EasyCTF vulnerable to arbitrary file creation | 2015-05-01T13:37+09:00 | 2015-05-07T16:00+09:00 |
| jvndb-2015-000055 | TransmitMail vulnerable to directory traversal | 2015-04-23T14:12+09:00 | 2015-04-27T16:12+09:00 |
| jvndb-2015-000054 | TransmitMail vulnerable to cross-site scripting | 2015-04-23T13:47+09:00 | 2015-04-27T16:13+09:00 |
| jvndb-2015-001959 | JBoss RichFaces vulnerable to remote Java code execution | 2015-04-14T13:24+09:00 | 2015-04-14T13:24+09:00 |
| jvndb-2015-000052 | Seasar S2Struts vulnerable to input validation bypass | 2015-04-10T14:38+09:00 | 2016-08-26T16:39+09:00 |
| jvndb-2015-000051 | Lhaplus vulnerable to remote code execution | 2015-04-09T13:59+09:00 | 2015-04-16T18:00+09:00 |
| jvndb-2015-000050 | Lhaplus vulnerable to directory traversal | 2015-04-09T13:57+09:00 | 2015-04-16T18:00+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-30302 | Huawei HarmonyOS权限控制漏洞(CNVD-2025-30302) | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30301 | Huawei HarmonyOS身份认证绕过漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30300 | Huawei HarmonyOS权限控制漏洞(CNVD-2025-30300) | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30299 | Huawei HarmonyOS权限控制漏洞(CNVD-2025-30299) | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30298 | Huawei HarmonyOS配置缺陷漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30297 | Huawei HarmonyOS安全检查标准不当漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30296 | Huawei HarmonyOS权限控制漏洞(CNVD-2025-30296) | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30295 | Huawei HarmonyOS权限控制漏洞(CNVD-2025-30295) | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30294 | Huawei HarmonyOS权限控制漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30293 | Huawei HarmonyOS拒绝服务漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30256 | Huawei HarmonyOS file management模块权限控制漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30255 | Huawei HarmonyOS App Lock模块权限控制漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30254 | Huawei HarmonyOS screen recording framework模块内存错误引用漏洞(CNVD-2025-30254) | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30253 | Huawei HarmonyOS file management模块权限控制漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30252 | Huawei HarmonyOS video-related system service模块拒绝服务漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30251 | Huawei HarmonyOS screen recording framework模块内存错误引用漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30126 | Devolutions Server存在未明漏洞(CNVD-2025-30126) | 2025-12-03 | 2025-12-05 |
| cnvd-2025-30125 | Devolutions Server存在未明漏洞 | 2025-12-03 | 2025-12-05 |
| cnvd-2025-30124 | Devolutions Server SQL注入漏洞 | 2025-12-03 | 2025-12-05 |
| cnvd-2025-29955 | WordPress StreamTube Core plugin任意用户密码更改漏洞 | 2025-12-03 | 2025-12-04 |
| cnvd-2025-29954 | WordPress Nextend Social Login and Register plugin跨站请求伪造漏洞 | 2025-12-03 | 2025-12-04 |
| cnvd-2025-29953 | WordPress Arconix Shortcodes plugin跨站脚本漏洞 | 2025-12-03 | 2025-12-04 |
| cnvd-2026-04574 | 畅捷通信息技术股份有限公司畅捷通T+存在SQL注入漏洞(CNVD-C-2025-448742) | 2025-12-02 | 2026-01-22 |
| cnvd-2026-04467 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-948730) | 2025-12-01 | 2026-01-22 |
| cnvd-2026-15861 | ZTE ElasticNet UME R32 on Linux权限管理不当漏洞 | 2025-11-28 | 2026-04-02 |
| cnvd-2026-14684 | TRENDnet TEW-657BRM命令注入漏洞 | 2025-11-28 | 2026-03-24 |
| cnvd-2026-12677 | Cisco Catalyst Center操作系统命令注入漏洞 | 2025-11-28 | 2026-03-05 |
| cnvd-2026-12676 | Cisco Catalyst Center跨站脚本漏洞 | 2025-11-28 | 2026-03-05 |
| cnvd-2026-12675 | Cisco Catalyst Center Virtual Appliance输入验证错误漏洞 | 2025-11-28 | 2026-03-05 |
| cnvd-2025-31389 | Apache Hive SQL注入漏洞 | 2025-11-28 | 2025-12-24 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-16106 | Уязвимость программного обеспечения для создания графиков GNUPlot, связанная с разыменова… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16105 | Уязвимость графического редактора GraphicsMagick, связанная с использованием неинициализи… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16104 | Уязвимость библиотеки для обработки изображений Gimp, связанная с целочисленным переполне… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16103 | Уязвимость библиотеки для обработки изображений Gimp, связанная с переполнением буфера в … | 19.12.2025 | 19.12.2025 |
| bdu:2025-16102 | Уязвимость библиотеки для обработки изображений Gimp, связанная с целочисленным переполне… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16101 | Уязвимость программного средства для реализации гипертекстовой среды MediaWiki, связанная… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16100 | Уязвимость пакета qt/qtbase библиотеки Qt, позволяющая нарушителю выполнить произвольный код | 19.12.2025 | 19.12.2025 |
| bdu:2025-16099 | Уязвимость программного обеспечения для создания графиков GNUPlot, связанная с недостаточ… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16098 | Уязвимость функции ParamsCalculator::getTextUTF8() модуля ParamsCalculator.cpp системы уп… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16097 | Уязвимость программного обеспечения для удаленного администрирования клиентских машин Apa… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16096 | Уязвимость кэш-сервера Varnish, связанная с недостатками обработки http-запросов, позволя… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16095 | Уязвимость системы управления базами данных MongoDB, связанная с некорректной блокировкой… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16094 | Уязвимость поисковой системы Elasticsearch, связанная с неконтролируемым расходом ресурсо… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16093 | Уязвимость веб-инструмента администрирования LDAP phpLDAPadmin, позволяющая нарушителю вы… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16092 | Уязвимость утилиты переупаковки архивов AdvanceCOMP, связанная с недостаточной проверкой … | 19.12.2025 | 19.12.2025 |
| bdu:2025-16091 | Уязвимость функции ParamsCalculator::makeFromValues() модуля ParamsCalculator.cpp системы… | 19.12.2025 | 19.12.2025 |
| bdu:2025-16090 | Уязвимость пакета qt/qtbase библиотеки Qt, позволяющая нарушителю вызвать отказ в обслуживании | 19.12.2025 | 19.12.2025 |
| bdu:2025-16089 | Уязвимость функций find_user_groups(), get_user_info() и find_user() модуля AuthLdap.cpp … | 19.12.2025 | 19.12.2025 |
| bdu:2025-16088 | Уязвимость функции prepare_update() модуля vio.cpp системы управления базами данных «Ред … | 19.12.2025 | 19.12.2025 |
| bdu:2025-16087 | Уязвимость функции DPM_scan_pages() модуля dpm.epp системы управления базами данных «Ред … | 19.12.2025 | 19.12.2025 |
| bdu:2025-16086 | Уязвимость модуля arch/riscv/net/bpf_jit_comp64.c ядра операционной системы Linux, позвол… | 18.12.2025 | 26.12.2025 |
| bdu:2025-16085 | Уязвимость функции generic_handle_domain_irq() компонента PCI ядра операционной системы L… | 18.12.2025 | 18.12.2025 |
| bdu:2025-16084 | Уязвимость функции nic_valid_size() ядра операционной системы Linux, позволяющая нарушите… | 18.12.2025 | 26.12.2025 |
| bdu:2025-16083 | Уязвимость сценария cstecgi.cgi микропрограммного обеспечения маршрутизаторов Totolink N6… | 18.12.2025 | 18.12.2025 |
| bdu:2025-16082 | Уязвимость инструмента Service Data Control Center (SDCCN) программных интеграционных пла… | 18.12.2025 | 18.12.2025 |
| bdu:2025-16081 | Уязвимость набора инструментов для проектирования и моделирования Siemens Solid Edge, свя… | 18.12.2025 | 18.12.2025 |
| bdu:2025-16080 | Уязвимость функции add_tuning_control компонента sound/pci/hda/patch_ca0132.c ядра операц… | 18.12.2025 | 26.12.2025 |
| bdu:2025-16079 | Уязвимость функции write_same() драйвера SCSI ядра операционной системы Linux, позволяюща… | 18.12.2025 | 26.12.2025 |
| bdu:2025-16078 | Уязвимость сервера Modbus TCP микропрограммного обеспечения программируемых логических ко… | 18.12.2025 | 18.12.2025 |
| bdu:2025-16077 | Уязвимость функции close_ctree() ядра операционной системы Linux, позволяющая нарушителю … | 18.12.2025 | 18.12.2025 |
| ID | Description | Updated |
|---|---|---|
| var-202504-0963 | Unauthenticated attackers can query information about total energy consumed by EV charger… | 2025-11-22T23:05:35.556000Z |
| var-202504-0985 | Unauthenticated attackers can send configuration settings to device and possible perform … | 2025-11-22T23:05:35.479000Z |
| var-202504-0976 | Unauthenticated attackers can query an API endpoint and get device details. Growatt New E… | 2025-11-22T23:05:35.438000Z |
| var-202504-0986 | An unauthenticated attacker can obtain a list of smart devices by knowing a valid usernam… | 2025-11-22T23:05:35.340000Z |
| var-202509-3975 | Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File… | 2025-11-22T23:05:27.736000Z |
| var-200609-1521 | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2025-11-22T21:53:11.486000Z |
| var-200609-1261 | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… | 2025-11-22T21:51:12.186000Z |
| var-201112-0167 | Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and ear… | 2025-11-22T21:18:56.186000Z |
| var-202511-1342 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecu… | 2025-11-22T19:37:46.249000Z |
| var-201707-1348 | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.… | 2025-11-21T23:24:14.983000Z |
| var-201402-0700 | An OS command injection vulnerability exists in various models of E-Series Linksys router… | 2025-11-21T23:16:42.461000Z |
| var-202506-1087 | An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware versi… | 2025-11-21T23:11:10.174000Z |
| var-202506-1088 | An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.… | 2025-11-21T23:11:10.158000Z |
| var-201401-0373 | Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x befo… | 2025-11-21T23:09:19.974000Z |
| var-200609-1283 | Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, whe… | 2025-11-21T22:14:34.555000Z |
| var-202203-1506 | A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote … | 2025-11-21T21:36:38.238000Z |
| var-201507-0105 | Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) imple… | 2025-11-21T20:00:01.534000Z |
| var-202511-0322 | A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects th… | 2025-11-20T23:34:31.931000Z |
| var-202508-3776 | The NPort 5150 is a device server from Moxa. The MOXA NPort 5150 has an unauthorized acc… | 2025-11-20T23:33:08.035000Z |
| var-202510-2696 | A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.… | 2025-11-20T23:33:07.566000Z |
| var-202511-1434 | A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B2023… | 2025-11-20T23:33:06.802000Z |
| var-202309-1941 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2025-11-20T23:32:53.079000Z |
| var-202309-2025 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2025-11-20T23:32:53.055000Z |
| var-202309-2361 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2025-11-20T23:32:53.021000Z |
| var-202509-4540 | The WAGO 750-890 is a Modbus TCP controller suitable for industrial automation systems an… | 2025-11-20T23:32:45.127000Z |
| var-202510-4303 | Chung-Chi Technology Co., Ltd., founded in 1986, offers a series of industry-leading DOCS… | 2025-11-20T23:32:44.546000Z |
| var-202309-2269 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multi… | 2025-11-20T23:32:29.216000Z |
| var-202309-2192 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2025-11-20T23:32:06.943000Z |
| var-202309-2360 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2025-11-20T23:32:06.918000Z |
| var-202509-4526 | The 750-880 is a third-generation programmable fieldbus controller with Ethernet communic… | 2025-11-20T23:32:03.190000Z |