Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-6024 |
6.1 (3.1)
|
Cross-Site Scripting via Authentication Endpoint in Mu… |
WSO2 |
WSO2 API Manager |
2026-04-16T09:48:45.244Z | 2026-04-16T12:30:22.824Z |
| CVE-2024-10242 |
6.1 (3.1)
|
Reflected Cross-Site Scripting via Authentication Endp… |
WSO2 |
WSO2 API Manager |
2026-04-16T09:45:46.115Z | 2026-04-16T12:30:30.619Z |
| CVE-2024-8010 |
3.5 (3.1)
|
XML External Entity Injection via Publisher in WSO2 AP… |
WSO2 |
WSO2 API Manager |
2026-04-16T09:39:20.130Z | 2026-04-16T12:30:36.466Z |
| CVE-2024-4867 |
5.4 (3.1)
|
Cross-Site Scripting via Developer Portal in WSO2 API … |
WSO2 |
WSO2 API Manager |
2026-04-16T09:32:40.941Z | 2026-04-16T12:30:42.568Z |
| CVE-2026-23772 |
7.3 (3.1)
|
Dell Storage Manager - Replay Manager for Microso… |
Dell |
Storage Manager |
2026-04-16T08:30:56.774Z | 2026-04-17T03:55:13.852Z |
| CVE-2024-2374 |
7.5 (3.1)
|
XML External Entity Injection in Multiple WSO2 Product… |
WSO2 |
WSO2 API Manager |
2026-04-16T08:12:58.247Z | 2026-04-16T12:30:49.250Z |
| CVE-2026-0718 |
5.3 (3.1)
|
Post Grid Gutenberg Blocks for News, Magazines, Blog W… |
wpxpo |
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX |
2026-04-16T07:39:50.799Z | 2026-04-16T12:55:16.326Z |
| CVE-2025-14868 |
8.8 (3.1)
|
Career Section <= 1.6 - Cross-Site Request Forgery to … |
shahinurislam |
Career Section |
2026-04-16T07:39:49.576Z | 2026-04-16T12:52:42.034Z |
| CVE-2026-41035 |
7.4 (3.1)
|
In rsync 3.0.1 through 3.4.1, receive_xattr relie… |
Samba |
rsync |
2026-04-16T06:53:05.237Z | 2026-04-22T03:03:52.565Z |
| CVE-2026-3876 |
7.2 (3.1)
|
Prismatic <= 3.7.3 - Unauthenticated Stored Cross-Site… |
specialk |
Prismatic |
2026-04-16T06:44:53.787Z | 2026-04-16T14:13:20.711Z |
| CVE-2026-3355 |
6.1 (3.1)
|
Customer Reviews for WooCommerce <= 5.101.0 - Reflecte… |
ivole |
Customer Reviews for WooCommerce |
2026-04-16T06:44:53.276Z | 2026-04-16T14:25:11.362Z |
| CVE-2025-13364 |
6.4 (3.1)
|
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapb… |
flippercode |
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters |
2026-04-16T06:44:52.144Z | 2026-04-16T12:04:16.719Z |
| CVE-2026-3875 |
6.4 (3.1)
|
BetterDocs <= 4.3.8 - Authenticated (Contributor+) Sto… |
wpdevteam |
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor |
2026-04-16T06:44:51.744Z | 2026-04-16T13:41:59.186Z |
| CVE-2026-3995 |
4.4 (3.1)
|
OPEN-BRAIN <= 0.5.0 - Authenticated (Administrator+) S… |
faridsaniee |
OPEN-BRAIN |
2026-04-16T06:44:51.340Z | 2026-04-16T12:04:24.073Z |
| CVE-2026-1572 |
6.4 (3.1)
|
Livemesh Addons by Elementor <= 9.0 - Missing Authoriz… |
livemesh |
Livemesh Addons by Elementor |
2026-04-16T06:44:50.911Z | 2026-04-16T12:55:37.314Z |
| CVE-2026-1620 |
8.8 (3.1)
|
Livemesh Addons by Elementor <= 9.0 - Authenticated (C… |
livemesh |
Livemesh Addons by Elementor |
2026-04-16T06:44:50.305Z | 2026-04-16T12:55:49.055Z |
| CVE-2026-41034 |
5 (3.1)
|
ONLYOFFICE DocumentServer before 9.3.0 has an unt… |
Ascensio |
ONLYOFFICE DocumentServer |
2026-04-16T06:06:44.570Z | 2026-04-16T12:31:05.251Z |
| CVE-2026-3861 |
6.5 (3.1)
|
LINE client for iOS versions prior to 26.3.0 cont… |
LINE Corporation |
LINE client for iOS |
2026-04-16T05:54:05.194Z | 2026-04-16T12:31:11.953Z |
| CVE-2026-41030 |
6.2 (3.1)
|
In ONLYOFFICE DesktopEditors before 9.3.0, the up… |
Ascensio |
ONLYOFFICE DesktopEditors |
2026-04-16T05:51:21.338Z | 2026-04-16T12:31:19.989Z |
| CVE-2026-3581 |
5.3 (3.1)
|
Basic Google Maps Placemarks <= 1.10.7 - Missing Autho… |
iandunn |
Basic Google Maps Placemarks |
2026-04-16T05:29:55.137Z | 2026-04-16T13:44:00.613Z |
| CVE-2026-3773 |
6.5 (3.1)
|
Accessibility Suite by Ability, Inc <= 4.20 - Authenti… |
onlineada |
Accessibility Suite by Ability, Inc |
2026-04-16T05:29:54.754Z | 2026-04-16T13:42:08.243Z |
| CVE-2026-3614 |
8.8 (3.1)
|
AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to … |
acyba |
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress |
2026-04-16T05:29:54.350Z | 2026-04-16T13:42:14.595Z |
| CVE-2026-3599 |
7.5 (3.1)
|
Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQ… |
imprintnext |
Riaxe Product Customizer |
2026-04-16T05:29:53.971Z | 2026-04-16T12:58:22.965Z |
| CVE-2026-5050 |
7.5 (3.1)
|
Payment Gateway for Redsys & WooCommerce Lite <= 7.0.0… |
jconti |
Payment Gateway for Redsys & WooCommerce Lite |
2026-04-16T05:29:53.590Z | 2026-04-16T13:42:20.364Z |
| CVE-2026-3551 |
4.4 (3.1)
|
Custom New User Notification <= 1.2.0 - Authenticated … |
rafasashi |
Custom New User Notification |
2026-04-16T05:29:53.185Z | 2026-04-16T13:42:26.444Z |
| CVE-2026-3595 |
5.3 (3.1)
|
Riaxe Product Customizer <= 2.1.2 - Unauthenticated Ar… |
imprintnext |
Riaxe Product Customizer |
2026-04-16T05:29:52.794Z | 2026-04-16T12:04:31.317Z |
| CVE-2026-3596 |
9.8 (3.1)
|
Riaxe Product Customizer <= 2.1.2 - Missing Authorizat… |
imprintnext |
Riaxe Product Customizer |
2026-04-16T05:29:52.265Z | 2026-04-16T12:56:20.193Z |
| CVE-2026-22619 |
7.8 (3.1)
|
Eaton Intelligent Power Protector (IPP) is affect… |
Eaton |
IPP software |
2026-04-16T05:26:48.952Z | 2026-04-16T12:59:37.700Z |
| CVE-2026-22618 |
5.9 (3.1)
|
A security misconfiguration was identified in Eat… |
Eaton |
IPP software |
2026-04-16T05:11:06.548Z | 2026-04-16T13:10:01.651Z |
| CVE-2026-22617 |
5.7 (3.1)
|
Eaton Intelligent Power Protector (IPP) uses an i… |
Eaton |
IPP Software |
2026-04-16T05:02:07.710Z | 2026-04-16T13:23:29.510Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-33082 |
8.7 (4.0)
|
DataEase: SQL Injection in v2 Dataset Export |
dataease |
dataease |
2026-04-16T17:39:37.894Z | 2026-04-16T18:41:46.111Z |
| CVE-2026-2336 |
8.7 (4.0)
|
Weak webstax_auth Cookie Authentication Allows Privile… |
Microchip |
IStaX |
2026-04-16T17:02:06.352Z | 2026-04-16T17:34:39.672Z |
| CVE-2026-27820 |
1.7 (4.0)
|
zlib: Buffer Overflow in Zlib::GzipReader ungetc via l… |
ruby |
zlib |
2026-04-16T17:27:48.944Z | 2026-04-16T18:20:21.451Z |
| CVE-2026-24749 |
5.3 (3.1)
|
Silverstripe Assets Module has a DBFile::getURL() perm… |
silverstripe |
silverstripe-assets |
2026-04-16T17:08:59.133Z | 2026-04-18T02:36:26.887Z |
| CVE-2025-43883 |
4.1 (3.1)
|
Dell PowerScale OneFS, versions prior to 9.12.0.0… |
Dell |
PowerScale OneFS |
2026-04-16T17:54:09.831Z | 2026-04-18T02:39:20.246Z |
| CVE-2026-41080 |
2.9 (3.1)
|
libexpat before 2.8.0 uses insufficient entropy, … |
libexpat project |
libexpat |
2026-04-16T16:52:01.177Z | 2026-04-27T05:59:38.490Z |
| CVE-2025-36579 |
5.1 (3.1)
|
Dell Client Platform BIOS contains a Weak Passwor… |
Dell |
Dell Pro 14 Essential PV14250 |
2026-04-16T16:05:32.561Z | 2026-04-16T18:32:52.672Z |
| CVE-2026-5426 |
7.5 (3.1)
|
KnowledgeDeliver deployments before February 24, 2026 … |
Digital Knowledge |
KnowledgeDeliver |
2026-04-16T15:18:46.224Z | 2026-04-18T02:31:32.234Z |
| CVE-2026-37100 |
6.5 (3.1)
|
An issue in the Bluetooth Low Energy (BLE) contro… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-18T02:26:33.302Z |
| CVE-2026-6409 |
7.1 (4.0)
|
Denial of Service (DoS) vulnerability exists in the Pr… |
Protocol Buffers |
Protobuf-php (Pecl) |
2026-04-16T14:30:51.568Z | 2026-04-16T15:24:43.164Z |
| CVE-2026-3324 |
8.2 (3.1)
|
Authentication Bypass |
Zohocorp |
ManageEngine Log360 |
2026-04-16T14:30:55.130Z | 2026-04-16T15:21:19.911Z |
| CVE-2026-37347 |
9.1 (3.1)
|
SourceCodester Payroll Management and Information… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T15:38:38.249Z |
| CVE-2026-37346 |
4.7 (3.1)
|
SourceCodester Payroll Management and Information… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T15:44:44.805Z |
| CVE-2026-37345 |
9.8 (3.1)
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T15:42:56.413Z |
| CVE-2026-37344 |
7.2 (3.1)
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-18T02:24:10.031Z |
| CVE-2026-37343 |
7.2 (3.1)
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-18T02:21:26.859Z |
| CVE-2026-37342 |
7.2 (3.1)
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-18T02:18:42.566Z |
| CVE-2026-37341 |
7.2 (3.1)
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-18T02:16:24.628Z |
| CVE-2026-37340 |
9.8 (3.1)
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-18T02:14:04.538Z |
| CVE-2026-37339 |
9.8 (3.1)
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-18T02:11:23.662Z |
| CVE-2026-37338 |
9.4 (3.1)
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T15:49:41.995Z |
| CVE-2026-37337 |
7.3 (3.1)
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T17:26:11.625Z |
| CVE-2026-37336 |
7.3 (3.1)
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T17:28:46.565Z |
| CVE-2026-33804 |
7.4 (3.1)
|
@fastify/middie vulnerable to middleware bypass via de… |
@fastify/middie |
@fastify/middie |
2026-04-16T13:56:56.176Z | 2026-04-16T14:41:48.659Z |
| CVE-2026-30656 |
7.5 (3.1)
|
A NULL pointer dereference vulnerability exists i… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T17:33:52.962Z |
| CVE-2026-30459 |
7.1 (3.1)
|
An issue in the Forgot Password feature of Daylig… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T15:16:57.348Z |
| CVE-2026-2840 |
6.4 (3.1)
|
Email Encoder – Protect Email Addresses and Phone Numb… |
onlineoptimisation |
Email Encoder – Protect Email Addresses and Phone Numbers |
2026-04-16T14:10:29.114Z | 2026-04-16T14:42:53.905Z |
| CVE-2026-6410 |
5.3 (3.1)
|
@fastify/static vulnerable to path traversal in direct… |
@fastify/static |
@fastify/static |
2026-04-16T13:29:08.120Z | 2026-04-16T14:19:36.780Z |
| CVE-2026-6270 |
9.1 (3.1)
|
@fastify/middie vulnerable to middleware authenticatio… |
@fastify/middie |
@fastify/middie |
2026-04-16T13:44:46.322Z | 2026-04-16T14:24:26.764Z |
| CVE-2026-5785 |
8.1 (3.1)
|
SQL Injection |
Zohocorp |
ManageEngine PAM360 |
2026-04-16T13:46:28.313Z | 2026-04-17T03:55:15.059Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-pw2f-q928-88j2 |
9.8 (3.1)
|
An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transl… | 2026-04-14T18:30:36Z | 2026-04-16T15:31:31Z |
| ghsa-pgp9-vrph-v4j2 |
6.0 (3.1)
|
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 … | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-mc2w-phmv-5vhg |
5.5 (3.1)
|
Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized a… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-m5xm-mx43-q65f |
6.3 (3.1)
|
Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Imp… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-jhcx-2f94-4747 |
6.9 (4.0)
|
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies ea… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-gvx9-4v4m-4c43 |
7.8 (3.1)
|
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerabi… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-ghqv-73vw-x3j9 |
5.7 (3.1)
|
Improper neutralization of special elements used in a command ('command injection') in GitHub Copil… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-gf64-fpq6-hc6f |
6.9 (4.0)
|
CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to … | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-fvjj-hmp9-fr4c |
7.8 (3.1)
|
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerabil… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-crrm-44jr-89j8 |
6.7 (3.1)
|
Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized att… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-cmqx-5qcp-h6x2 |
5.5 (3.1)
|
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vul… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-9q3x-6267-mffc |
4.8 (3.1)
|
A improper neutralization of input during web page generation ('cross-site scripting') vulnerabilit… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-6q7w-cjq4-j969 |
6.7 (3.1)
|
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 th… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-6896-87qw-x945 |
7.8 (3.1)
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-5f64-p6cf-vvqg |
9.8 (3.1)
|
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSan… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-565x-2q82-2jr2 |
7.8 (3.1)
|
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability t… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-2w92-jcqh-43jc |
5.3 (4.0)
|
The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "py… | 2026-04-14T18:30:36Z | 2026-04-15T18:31:52Z |
| ghsa-2c76-42fg-9f8g |
4.6 (3.1)
|
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft O… | 2026-04-14T18:30:36Z | 2026-04-14T18:30:36Z |
| ghsa-wwhp-g3gj-wh3p |
6.5 (3.1)
|
A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 th… | 2026-04-14T18:30:35Z | 2026-04-14T18:30:35Z |
| ghsa-wfjv-vrx5-2cf2 |
9.8 (3.1)
|
A improper neutralization of special elements used in an os command ('os command injection') vulner… | 2026-04-14T18:30:35Z | 2026-04-22T15:31:32Z |
| ghsa-vx8h-6mfq-gv3p |
5.3 (3.1)
6.9 (4.0)
|
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection… | 2026-04-14T18:30:35Z | 2026-04-22T15:31:32Z |
| ghsa-v2cv-5hx2-p7w9 |
4.3 (3.1)
5.3 (4.0)
|
CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause E… | 2026-04-14T18:30:35Z | 2026-04-22T15:31:32Z |
| ghsa-rm5f-3c25-p4cw |
8.1 (3.1)
|
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadControl… | 2026-04-14T18:30:35Z | 2026-04-16T01:31:36Z |
| ghsa-r9hg-f94w-656h |
6.5 (3.1)
|
An improper authorization vulnerability in the /api/v1/users/{id} endpoint of Snipe-IT v8.4.0 allow… | 2026-04-14T18:30:35Z | 2026-04-16T15:31:31Z |
| ghsa-r8rp-5f55-5j9x |
8.8 (3.1)
|
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php | 2026-04-14T18:30:35Z | 2026-04-16T01:31:46Z |
| ghsa-p356-hfrx-f579 |
4.6 (3.1)
|
An improper neutralization of input during web page generation ('cross-site scripting') vulnerabili… | 2026-04-14T18:30:35Z | 2026-04-14T18:30:35Z |
| ghsa-jp5m-x7cp-gj98 |
2.7 (3.1)
|
A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, … | 2026-04-14T18:30:35Z | 2026-04-14T18:30:35Z |
| ghsa-j8gj-mw5g-642g |
9.9 (3.1)
|
An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webku… | 2026-04-14T18:30:35Z | 2026-04-14T18:30:35Z |
| ghsa-j3x3-rc9w-wf4m |
6.7 (3.1)
|
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in F… | 2026-04-14T18:30:35Z | 2026-04-14T18:30:35Z |
| ghsa-hjjv-j557-q7r3 |
7.1 (3.1)
|
Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead param… | 2026-04-14T18:30:35Z | 2026-04-14T18:30:35Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-62 |
|
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decrypt… | cryptography | 2021-01-11T16:15:00Z | 2021-01-19T21:48:00Z |
| pysec-2021-876 |
6.5 (3.1)
|
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any ten… | apache-dolphinscheduler | 2021-01-11T10:15:00+00:00 | 2023-11-07T20:24:23.899306+00:00 |
| pysec-2021-46 |
|
before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 a… | proxy-py | 2021-01-11T05:15:00Z | 2021-01-14T15:09:00Z |
| pysec-2021-72 |
|
This affects the package pwntools before 4.3.1. The shellcraft generator for affected ver… | pwntools | 2021-01-08T12:15:00Z | 2021-01-12T19:55:00Z |
| pysec-2021-5 |
|
CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In Cair… | cairosvg | 2021-01-06T17:15:00Z | 2021-01-13T15:43:00Z |
| pysec-2021-61 |
|
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or… | clickhouse-driver | 2021-01-06T13:15:00Z | 2021-01-08T21:19:00Z |
| pysec-2020-248 |
|
Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied per… | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.576448Z |
| pysec-2020-247 |
|
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the … | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.505885Z |
| pysec-2020-246 |
|
Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to … | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.436437Z |
| pysec-2020-25 |
|
Autobahn|Python before 20.12.3 allows redirect header injection. | autobahn | 2020-12-27T00:15:00Z | 2020-12-30T15:37:00Z |
| pysec-2020-48 |
|
Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for dec… | indy-node | 2020-12-24T20:15:00Z | 2020-12-31T19:25:00Z |
| pysec-2020-50 |
|
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints… | jupyter-server | 2020-12-21T18:15:00Z | 2021-03-30T19:15:00Z |
| pysec-2020-22 |
|
Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with d… | apache-airflow | 2020-12-21T17:15:00Z | 2020-12-22T21:23:00Z |
| pysec-2020-143 |
|
tlslite-ng is an open source python library that implements SSL and TLS cryptographic pro… | tlslite-ng | 2020-12-21T17:15:00Z | 2020-12-23T16:09:00Z |
| pysec-2020-72 |
|
OpenSlides is a free, Web-based presentation and assembly system for managing and project… | openslides | 2020-12-18T19:15:00Z | 2020-12-22T20:11:00Z |
| pysec-2020-49 |
|
** DISPUTED ** jsonpickle through 1.4.1 allows remote code execution during deserializati… | jsonpickle | 2020-12-17T16:15:00Z | 2020-12-23T15:38:00Z |
| pysec-2020-262 |
|
In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the passwor… | apache-airflow | 2020-12-14T10:15:00Z | 2021-11-16T03:58:43.269619Z |
| pysec-2020-20 |
|
In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-… | apache-airflow | 2020-12-14T10:15:00Z | 2020-12-15T15:40:00Z |
| pysec-2020-21 |
|
The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to … | apache-airflow | 2020-12-11T14:15:00Z | 2021-05-04T00:15:00Z |
| pysec-2020-336 |
|
In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer rec… | tensorflow-gpu | 2020-12-10T23:15:00Z | 2021-12-09T06:35:16.648712Z |
| pysec-2020-335 |
|
In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matchin… | tensorflow-gpu | 2020-12-10T23:15:00Z | 2020-12-14T17:42:00Z |
| pysec-2020-334 |
|
In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a cons… | tensorflow-gpu | 2020-12-10T23:15:00Z | 2021-12-09T06:35:16.406292Z |
| pysec-2020-333 |
|
In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not valid… | tensorflow-gpu | 2020-12-10T23:15:00Z | 2021-12-09T06:35:16.197426Z |
| pysec-2020-332 |
|
In affected versions of TensorFlow under certain cases a saved model can trigger use of u… | tensorflow-gpu | 2020-12-10T23:15:00Z | 2021-12-09T06:35:15.994631Z |
| pysec-2020-301 |
|
In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer rec… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.825248Z |
| pysec-2020-300 |
|
In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matchin… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2020-12-14T17:42:00Z |
| pysec-2020-299 |
|
In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a cons… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.590878Z |
| pysec-2020-298 |
|
In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not valid… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.408160Z |
| pysec-2020-297 |
|
In affected versions of TensorFlow under certain cases a saved model can trigger use of u… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.221678Z |
| pysec-2020-256 |
|
In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer rec… | tensorflow | 2020-12-10T23:15:00Z | 2021-08-27T03:22:23.120464Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1084 | Malicious code in socketxio (PyPI) | 2026-02-28T10:44:48Z | 2026-02-28T10:44:48Z |
| mal-2026-1083 | Malicious code in dc-mobx (npm) | 2026-02-28T06:03:02Z | 2026-03-03T15:34:36Z |
| mal-2026-1082 | Malicious code in cdf-clients (PyPI) | 2026-02-27T21:33:39Z | 2026-03-19T12:23:25Z |
| mal-2026-1081 | Malicious code in marionette-react-view (npm) | 2026-02-27T20:57:39Z | 2026-03-03T15:34:37Z |
| mal-2026-1080 | Malicious code in hashtools32 (PyPI) | 2026-02-27T19:50:28Z | 2026-03-19T12:23:25Z |
| mal-2026-1078 | Malicious code in socket-dgxeon (npm) | 2026-02-27T16:29:28Z | 2026-03-01T20:43:47Z |
| mal-2026-1072 | Malicious code in @dgxeon/libsignal-node (npm) | 2026-02-27T16:29:28Z | 2026-03-01T20:43:42Z |
| mal-2026-1079 | Malicious code in sokettry (npm) | 2026-02-27T16:29:27Z | 2026-03-01T20:43:47Z |
| mal-2026-1077 | Malicious code in dgxeon-soket4 (npm) | 2026-02-27T16:29:27Z | 2026-03-01T20:43:44Z |
| mal-2026-1076 | Malicious code in dgxeon-soket3 (npm) | 2026-02-27T16:29:27Z | 2026-03-01T20:43:44Z |
| mal-2026-1075 | Malicious code in dgxeon-soket2 (npm) | 2026-02-27T16:29:27Z | 2026-03-01T20:43:44Z |
| mal-2026-1074 | Malicious code in dgxeon-soket (npm) | 2026-02-27T16:29:27Z | 2026-04-01T12:28:02Z |
| mal-2026-1073 | Malicious code in baileys-xeonbot (npm) | 2026-02-27T16:29:27Z | 2026-03-01T20:43:43Z |
| mal-2026-1071 | Malicious code in libsignal-skyzopedia (npm) | 2026-02-27T16:13:46Z | 2026-03-01T20:43:45Z |
| mal-2026-1070 | Malicious code in @skyzopedia/ubot (npm) | 2026-02-27T16:13:46Z | 2026-03-01T20:43:42Z |
| mal-2026-1069 | Malicious code in @skyzopedia/libsignal-node (npm) | 2026-02-27T16:13:46Z | 2026-03-01T20:43:42Z |
| mal-2026-1068 | Malicious code in @skyzopedia/brat (npm) | 2026-02-27T16:13:46Z | 2026-03-01T20:43:42Z |
| mal-2026-1067 | Malicious code in @skyzopedia/baileys-pro (npm) | 2026-02-27T16:13:46Z | 2026-03-01T20:43:42Z |
| mal-2026-1066 | Malicious code in @skyzopedia/baileys-mod (npm) | 2026-02-27T16:13:46Z | 2026-03-01T20:43:42Z |
| mal-2026-1065 | Malicious code in @skyzopedia/baileys (npm) | 2026-02-27T16:13:46Z | 2026-03-01T20:43:42Z |
| mal-2026-1064 | Malicious code in cicd-ppe-redteam-test02 (PyPI) | 2026-02-27T13:50:48Z | 2026-03-19T12:23:25Z |
| mal-2026-1063 | Malicious code in cicd-ppe-redteam-test01 (PyPI) | 2026-02-27T13:42:21Z | 2026-03-19T12:23:25Z |
| mal-2026-1060 | Malicious code in @zinley/orion (npm) | 2026-02-27T12:04:26Z | 2026-03-01T20:43:43Z |
| mal-2026-1061 | Malicious code in newman-reporter-genuinepoc (npm) | 2026-02-27T11:55:41Z | 2026-03-01T20:43:46Z |
| mal-2026-1062 | Malicious code in express-core-validator (npm) | 2026-02-27T11:51:42Z | 2026-03-01T20:43:44Z |
| mal-2026-1059 | Malicious code in nuget-task-common (npm) | 2026-02-27T09:55:28Z | 2026-03-01T20:43:46Z |
| mal-2026-1052 | Malicious code in foundry-toolkit (npm) | 2026-02-26T20:50:45Z | 2026-03-02T00:35:44Z |
| mal-2026-1050 | Malicious code in launch-darkly-js (npm) | 2026-02-26T20:10:47Z | 2026-04-01T12:28:03Z |
| mal-2026-1057 | Malicious code in windowston (npm) | 2026-02-26T17:51:38Z | 2026-03-02T03:15:31Z |
| mal-2026-1049 | Malicious code in flycord (PyPI) | 2026-02-26T15:38:34Z | 2026-02-26T15:38:34Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1243 | Synology DiskStation Manager: Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1242 | Cisco Unified Communications Produkte: Schwachstelle ermöglicht Codeausführung mit Root Rechten | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1241 | Cisco Nexus Dashboard: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1240 | Cisco Integrated Management Controller: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1239 | Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Unsicheres Erzeugen von temporären Dateien | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1238 | Cisco Identity Services Engine (ISE) Cloud Platforms: Schwachstelle ermöglicht erlangen von Admin Rechten | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1237 | Cisco Unified Intelligent Contact Management Enterprise: Schwachstelle ermöglicht Cross-Site Scripting | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1236 | Dell PowerScale: Mehrere Schwachstellen | 2025-06-03T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1231 | Python: Mehrere Schwachstellen | 2025-06-03T22:00:00.000+00:00 | 2025-12-28T23:00:00.000+00:00 |
| wid-sec-w-2025-1230 | libxml2: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-03T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1229 | ZScaler Client Connector für MacOS: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-03T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1228 | cURL: Schwachstelle ermöglicht Denial of Service | 2025-06-03T22:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1227 | Samsung Android: Mehrere Schwachstellen | 2025-06-03T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1226 | Axis Axis OS: Mehrere Schwachstellen | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1225 | Android Patchday Juni 2025: Mehrere Schwachstellen | 2025-06-02T22:00:00.000+00:00 | 2025-09-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1224 | Extreme Networks HiveOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1223 | Linksys Router: Mehrere Schwachstellen ermöglichen Ausführen von Kommandos mit Administratorrechten | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1222 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-06-02T22:00:00.000+00:00 | 2025-09-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1221 | Samba: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-02T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1220 | QT: Schwachstelle ermöglicht Denial of Service | 2025-06-02T22:00:00.000+00:00 | 2025-10-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1219 | Splunk Splunk Enterprise: Mehrere Schwachstellen | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1218 | Dell Computer: Schwachstelle ermöglicht Privilegieneskalation und Manipulation | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1217 | Red Hat Enterprise Linux pymongo: Schwachstelle ermöglicht Denial of Service und Offenlegung | 2025-06-02T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1216 | SolarWinds Dameware: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1215 | OWASP ModSecurity: Schwachstelle ermöglicht Denial of Service | 2025-06-02T22:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1214 | Cisco Meraki MX: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1213 | Red Hat Enterprise Linux (cmark-gfm): Schwachstelle ermöglicht Denial of Service | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1209 | IGEL OS 10: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-02T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1208 | Roundcube: Schwachstelle ermöglicht Codeausführung | 2025-06-01T22:00:00.000+00:00 | 2026-02-22T23:00:00.000+00:00 |
| wid-sec-w-2025-1207 | Samsung Exynos: Mehrere Schwachstellen | 2025-06-01T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-222-08 | ICSA-21-222-08_Siemens Solid Edge | 2021-08-10T00:00:00.000000Z | 2021-08-10T00:00:00.000000Z |
| icsa-21-222-07 | Siemens SIMATIC CP (Update A) | 2021-08-10T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-21-222-06 | Siemens Energy AGT and SGT Solutions | 2021-08-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-222-05 | Siemens Industrial Products Intel CPUs (Update F) | 2021-08-10T00:00:00.000000Z | 2024-02-13T00:00:00.000000Z |
| icsa-21-222-04 | Siemens SINEC NMS | 2021-08-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-222-03 | Siemens JT2Go and Teamcenter Visualization (Update A) | 2021-08-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-222-02 | Siemens Automation License Manager | 2021-08-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-222-01 | Siemens JT2Go and Teamcenter Visualization products | 2021-08-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-287-03 | Mitsubishi Electric MELSEC iQ-R Series | 2021-08-06T06:00:00.000000Z | 2024-04-18T06:00:00.000000Z |
| icsa-21-217-04 | Advantech WebAccess SCADA | 2021-08-05T00:00:00.000000Z | 2021-08-05T00:00:00.000000Z |
| icsa-21-217-03 | ICSA-21-217-03_mySCADA myPRO | 2021-08-05T00:00:00.000000Z | 2021-08-05T00:00:00.000000Z |
| icsa-21-217-02 | FATEK Automation FvDesigner | 2021-08-05T00:00:00.000000Z | 2021-08-05T00:00:00.000000Z |
| icsa-21-217-01 | HCC Embedded InterNiche TCP/IP stack, NicheLite (Update B) | 2021-08-05T00:00:00.000000Z | 2021-12-16T00:00:00.000000Z |
| icsma-21-215-01 | Swisslog Healthcare Translogic PTS | 2021-08-03T00:00:00.000000Z | 2021-08-03T00:00:00.000000Z |
| icsa-21-210-01 | Hitachi ABB Power Grids eSOMS | 2021-07-29T00:00:00.000000Z | 2021-07-29T00:00:00.000000Z |
| icsa-21-208-05 | Delta Electronics DIAScreen | 2021-07-27T00:00:00.000000Z | 2021-07-27T00:00:00.000000Z |
| icsa-21-208-04 | LCDS LAquis SCADA | 2021-07-27T00:00:00.000000Z | 2021-07-27T00:00:00.000000Z |
| icsa-21-208-03 | Geutebrück G-Cam E2 and G-Code | 2021-07-27T00:00:00.000000Z | 2021-07-27T00:00:00.000000Z |
| icsa-21-208-02 | Mitsubishi Electric GOT2000 series and GT SoftGOT2000 | 2021-07-27T00:00:00.000000Z | 2021-07-27T00:00:00.000000Z |
| icsa-21-208-01 | KUKA KR C4 | 2021-07-27T00:00:00.000000Z | 2021-07-27T00:00:00.000000Z |
| icsa-21-201-01 | Mitsubishi Electric MELSEC-F Series | 2021-07-20T00:00:00.000000Z | 2021-07-20T00:00:00.000000Z |
| icsma-21-196-01 | ICSMA-21-196-01_Ypsomed mylife | 2021-07-15T00:00:00.000000Z | 2021-07-15T00:00:00.000000Z |
| icsa-22-104-05 | Siemens OpenSSL Vulnerabilities in Industrial Products | 2021-07-13T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-22-104-04 | Siemens SCALANCE FragAttacks | 2021-07-13T00:00:00.000000Z | 2026-04-16T06:00:00.000000Z |
| icsa-21-210-02 | Wibu-Systems CodeMeter Runtime | 2021-07-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-194-17 | Siemens SINUMERIK ONE and SINUMERIK MC (Update A) | 2021-07-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-194-16 | Siemens Mendix | 2021-07-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-194-15 | ICSA-21-194-15_Siemens JT2Go and Teamcenter Visualization | 2021-07-13T00:00:00.000000Z | 2021-07-13T00:00:00.000000Z |
| icsa-21-194-14 | Siemens RWG Universal Controllers | 2021-07-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-194-13 | Siemens SINAMICS PERFECT HARMONY GH180 (Update A) | 2021-07-13T00:00:00.000000Z | 2021-09-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190515-nxos-linecardinj-1769 | Cisco NX-OS Software Line Card Command Injection Vulnerability (CVE-2019-1769) | 2019-05-15T16:00:00+00:00 | 2019-05-28T15:20:22+00:00 |
| cisco-sa-20190515-nxos-fxos-info | Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-fxos-cmdinj-1780 | Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1780) | 2019-05-15T16:00:00+00:00 | 2019-05-21T13:55:18+00:00 |
| cisco-sa-20190515-nxos-fxos-cmdinj-1779 | Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1779) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-file-write | Cisco NX-OS Software Arbitrary File Overwrite Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-conf-bypass | Cisco FXOS and NX-OS Software Secure Configuration Bypass Vulnerability | 2019-05-15T16:00:00+00:00 | 2021-07-12T14:24:25+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1795 | Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1795) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1791 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1791) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1790 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1790) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1783 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1783) | 2019-05-15T16:00:00+00:00 | 2019-07-18T00:00:27+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1778 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1778) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1776 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1776) | 2019-05-15T16:00:00+00:00 | 2019-07-18T00:00:28+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1774-1775 | Cisco NX-OS Software Command Injection Vulnerabilities (CVE-2019-1774, CVE-2019-1775) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1770 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1770) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-nxos-cmdinj-1735 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735) | 2019-05-15T16:00:00+00:00 | 2021-07-12T14:24:27+00:00 |
| cisco-sa-20190515-nxos-cmd-inject-1784 | Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1784) | 2019-05-15T16:00:00+00:00 | 2019-07-18T00:00:26+00:00 |
| cisco-sa-20190515-nxos-bash-bypass | Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-20T14:00:47+00:00 |
| cisco-sa-20190515-ise-certcreation | Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-iosxr-mpls-dos | Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Denial of Service Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-iosxr-evpn-dos | Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-07-10T16:56:52+00:00 |
| cisco-sa-20190515-fxos-nxos-cmdinj-1781-1782 | Cisco FXOS and NX-OS Software Command Injection Vulnerabilities (CVE-2019-1781, CVE-2019-1782) | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-ftdde-poly-bypass | Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-ftd-ssltls-bypass | Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-cvsm | Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190515-cuic-cmdinj | Cisco Unified Intelligence Center Remote File Injection Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-06-06T14:42:43+00:00 |
| cisco-sa-20190515-anyconnectclient-oob-read | Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability | 2019-05-15T16:00:00+00:00 | 2019-05-15T16:00:00+00:00 |
| cisco-sa-20190513-webui | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2019-05-13T17:30:00+00:00 | 2019-05-13T17:30:00+00:00 |
| cisco-sa-20190513-secureboot | Cisco Secure Boot Hardware Tampering Vulnerability | 2019-05-13T17:30:00+00:00 | 2019-11-20T17:23:18+00:00 |
| cisco-sa-20190507-esc-authbypass | Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability | 2019-05-07T16:00:00+00:00 | 2019-05-07T16:00:00+00:00 |
| cisco-sa-20190501-wsa-privesc | Cisco Web Security Appliance Privilege Escalation Vulnerability | 2019-05-01T16:00:00+00:00 | 2019-05-01T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-55320 | Configuration Manager Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-17T07:00:00.000Z |
| msrc_cve-2025-55315 | ASP.NET Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-22T07:00:00.000Z |
| msrc_cve-2025-55248 | .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55247 | .NET Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-55240 | Visual Studio Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-53782 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-53768 | Xbox IStorageService Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-53717 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-53150 | Windows Digital Media Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-53139 | Windows Hello Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-50175 | Windows Digital Media Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-50174 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-50152 | Windows Kernel Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-49708 | Microsoft Graphics Component Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-48813 | Virtual Secure Mode Spoofing Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-48004 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-47989 | Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-15T07:00:00.000Z |
| msrc_cve-2025-47979 | Microsoft Failover Cluster Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-25004 | PowerShell Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-21T07:00:00.000Z |
| msrc_cve-2025-24990 | Windows Agere Modem Driver Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-24052 | Windows Agere Modem Driver Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-59213 | Configuration Manager Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2026-02-13T08:00:00.000Z |
| msrc_cve-2025-55338 | Windows BitLocker Security Feature Bypass Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T07:00:00.000Z |
| msrc_cve-2025-8677 | Resource exhaustion via malformed DNSKEY handling | 2025-10-02T00:00:00.000Z | 2025-11-25T01:38:30.000Z |
| msrc_cve-2025-8291 | ZIP64 End of Central Directory (EOCD) Locator record offset not checked | 2025-10-02T00:00:00.000Z | 2025-10-10T01:02:05.000Z |
| msrc_cve-2025-62813 | LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in lib/lz4frame.c mishandles NULL checks. | 2025-10-02T00:00:00.000Z | 2026-01-21T01:43:26.000Z |
| msrc_cve-2025-62518 | astral-tokio-tar Vulnerable to PAX Header Desynchronization | 2025-10-02T00:00:00.000Z | 2026-01-20T14:45:03.000Z |
| msrc_cve-2025-62231 | Xorg: xmayland: value overflow in xkbsetcompatmap() | 2025-10-02T00:00:00.000Z | 2025-12-24T01:02:28.000Z |
| msrc_cve-2025-62230 | Xorg: xwayland: use-after-free in xkb client resource removal | 2025-10-02T00:00:00.000Z | 2025-12-24T01:02:33.000Z |
| msrc_cve-2025-62229 | Xorg: xmayland: use-after-free in xpresentnotify structure creation | 2025-10-02T00:00:00.000Z | 2025-12-24T01:02:23.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14669-1 | ruby3.4-rubygem-actionmailbox-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14668-1 | ruby3.4-rubygem-actioncable-8.0-8.0.1-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14667-1 | nvidia-modprobe-565.77-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:14666-1 | helmfile-0.170.0-1.1 on GA media | 2025-01-21T00:00:00Z | 2025-01-21T00:00:00Z |
| opensuse-su-2025:0018-1 | Security update for chromium | 2025-01-20T09:59:01Z | 2025-01-20T09:59:01Z |
| opensuse-su-2025:14665-1 | rsync-3.4.1-1.1 on GA media | 2025-01-18T00:00:00Z | 2025-01-18T00:00:00Z |
| opensuse-su-2025:14664-1 | python311-httpx-0.28.1-2.1 on GA media | 2025-01-18T00:00:00Z | 2025-01-18T00:00:00Z |
| opensuse-su-2025:14663-1 | velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media | 2025-01-17T00:00:00Z | 2025-01-17T00:00:00Z |
| opensuse-su-2025:14662-1 | python311-Django-5.1.5-1.1 on GA media | 2025-01-17T00:00:00Z | 2025-01-17T00:00:00Z |
| opensuse-su-2025:14661-1 | nvidia-open-driver-G06-signed-default-devel-550.144.03-1.1 on GA media | 2025-01-17T00:00:00Z | 2025-01-17T00:00:00Z |
| opensuse-su-2025:14660-1 | golang-github-prometheus-prometheus-3.1.0-1.1 on GA media | 2025-01-17T00:00:00Z | 2025-01-17T00:00:00Z |
| opensuse-su-2025:14659-1 | chromedriver-132.0.6834.83-1.1 on GA media | 2025-01-17T00:00:00Z | 2025-01-17T00:00:00Z |
| opensuse-su-2025:14658-1 | amazon-ssm-agent-3.3.1611.0-1.1 on GA media | 2025-01-17T00:00:00Z | 2025-01-17T00:00:00Z |
| opensuse-su-2025:14657-1 | perl-IO-Compress-2.213.0-1.1 on GA media | 2025-01-16T00:00:00Z | 2025-01-16T00:00:00Z |
| opensuse-su-2025:14656-1 | perl-Compress-Raw-Zlib-2.213-1.1 on GA media | 2025-01-16T00:00:00Z | 2025-01-16T00:00:00Z |
| opensuse-su-2025:14655-1 | hplip-3.24.4-4.1 on GA media | 2025-01-16T00:00:00Z | 2025-01-16T00:00:00Z |
| opensuse-su-2025:14654-1 | grafana-11.3.0-5.1 on GA media | 2025-01-16T00:00:00Z | 2025-01-16T00:00:00Z |
| opensuse-su-2025:14653-1 | govulncheck-vulndb-0.0.20250115T172141-1.1 on GA media | 2025-01-16T00:00:00Z | 2025-01-16T00:00:00Z |
| opensuse-su-2025:14652-1 | git-2.48.1-1.1 on GA media | 2025-01-16T00:00:00Z | 2025-01-16T00:00:00Z |
| opensuse-su-2025:0012-1 | Security update for opera | 2025-01-15T12:36:20Z | 2025-01-15T12:36:20Z |
| opensuse-su-2025:14651-1 | python311-Django4-4.2.18-1.1 on GA media | 2025-01-15T00:00:00Z | 2025-01-15T00:00:00Z |
| opensuse-su-2025:14650-1 | pam_u2f-1.3.1-1.1 on GA media | 2025-01-15T00:00:00Z | 2025-01-15T00:00:00Z |
| opensuse-su-2025:14649-1 | git-lfs-3.6.1-1.1 on GA media | 2025-01-15T00:00:00Z | 2025-01-15T00:00:00Z |
| opensuse-su-2025:14648-1 | MozillaThunderbird-128.6.0-1.1 on GA media | 2025-01-15T00:00:00Z | 2025-01-15T00:00:00Z |
| opensuse-su-2025:14647-1 | python311-translate-toolkit-3.14.5-1.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| opensuse-su-2025:14646-1 | libraptor-devel-2.0.16-4.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| opensuse-su-2025:14645-1 | python311-Pillow-11.1.0-1.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| opensuse-su-2025:14644-1 | govulncheck-vulndb-0.0.20250109T194159-1.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| opensuse-su-2025:14643-1 | dcmtk-3.6.9-1.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| opensuse-su-2025:14642-1 | SDL2_sound-devel-2.0.4-1.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:22496 | Red Hat Security Advisory: gimp security update | 2025-12-02T00:20:01+00:00 | 2026-03-18T03:12:26+00:00 |
| rhsa-2025:22529 | Red Hat Security Advisory: Red Hat Ceph Storage | 2025-12-01T21:59:44+00:00 | 2026-04-14T10:05:07+00:00 |
| rhsa-2025:22498 | Red Hat Security Advisory: gimp security update | 2025-12-01T21:21:36+00:00 | 2026-03-18T03:12:27+00:00 |
| rhsa-2025:22497 | Red Hat Security Advisory: gimp security update | 2025-12-01T21:05:45+00:00 | 2026-03-18T03:12:26+00:00 |
| rhsa-2025:22195 | Red Hat Security Advisory: Red Hat build of Quarkus 3.20.4 release and security update | 2025-12-01T21:02:54+00:00 | 2026-03-24T13:16:41+00:00 |
| rhsa-2025:22449 | Red Hat Security Advisory: thunderbird security update | 2025-12-01T19:54:41+00:00 | 2026-03-18T03:11:01+00:00 |
| rhsa-2025:22445 | Red Hat Security Advisory: gimp security update | 2025-12-01T19:44:30+00:00 | 2026-03-18T03:12:26+00:00 |
| rhsa-2025:22451 | Red Hat Security Advisory: thunderbird security update | 2025-12-01T18:58:15+00:00 | 2026-03-18T03:11:01+00:00 |
| rhsa-2025:22450 | Red Hat Security Advisory: thunderbird security update | 2025-12-01T18:54:44+00:00 | 2026-03-18T03:11:01+00:00 |
| rhsa-2025:22426 | Red Hat Security Advisory: xorg-x11-server security update | 2025-12-01T14:41:40+00:00 | 2026-03-18T03:12:23+00:00 |
| rhsa-2025:22427 | Red Hat Security Advisory: xorg-x11-server security update | 2025-12-01T14:41:06+00:00 | 2026-03-18T03:12:24+00:00 |
| rhsa-2025:22428 | Red Hat Security Advisory: Cost Management Metrics Operator Update | 2025-12-01T14:29:00+00:00 | 2026-04-13T19:59:53+00:00 |
| rhsa-2025:22422 | Red Hat Security Advisory: haproxy security update | 2025-12-01T13:15:10+00:00 | 2026-04-13T20:13:41+00:00 |
| rhsa-2025:22417 | Red Hat Security Advisory: gimp:2.8 security update | 2025-12-01T12:35:09+00:00 | 2026-03-18T03:12:31+00:00 |
| rhsa-2025:22420 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14 security, enhancement & bug fix update | 2025-12-01T12:14:05+00:00 | 2026-04-01T18:56:27+00:00 |
| rhsa-2025:22418 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15 security, enhancement & bug fix update | 2025-12-01T12:10:52+00:00 | 2026-04-01T18:56:23+00:00 |
| rhsa-2025:22416 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16 security, enhancement & bug fix update | 2025-12-01T12:00:04+00:00 | 2026-04-01T18:56:22+00:00 |
| rhsa-2025:22415 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17 security, enhancement & bug fix update | 2025-12-01T11:59:39+00:00 | 2026-04-01T18:56:22+00:00 |
| rhsa-2025:22413 | Red Hat Security Advisory: qt5-qt3d security update | 2025-12-01T11:49:57+00:00 | 2026-03-18T03:12:26+00:00 |
| rhsa-2025:22414 | Red Hat Security Advisory: qt5-qt3d security update | 2025-12-01T11:44:57+00:00 | 2026-03-18T03:12:26+00:00 |
| rhsa-2025:22405 | Red Hat Security Advisory: kernel security update | 2025-12-01T11:06:22+00:00 | 2026-03-18T03:11:47+00:00 |
| rhsa-2025:22392 | Red Hat Security Advisory: kernel security update | 2025-12-01T10:11:52+00:00 | 2026-03-18T03:08:46+00:00 |
| rhsa-2025:22399 | Red Hat Security Advisory: haproxy security update | 2025-12-01T10:00:22+00:00 | 2026-04-13T20:13:41+00:00 |
| rhsa-2025:22395 | Red Hat Security Advisory: kernel security update | 2025-12-01T09:41:22+00:00 | 2026-04-13T11:13:49+00:00 |
| rhsa-2025:22398 | Red Hat Security Advisory: haproxy security update | 2025-12-01T09:38:18+00:00 | 2026-04-13T20:13:45+00:00 |
| rhsa-2025:22404 | Red Hat Security Advisory: Red Hat Developer Hub 1.7.3 release. | 2025-12-01T09:19:00+00:00 | 2025-12-08T15:20:07+00:00 |
| rhsa-2025:22394 | Red Hat Security Advisory: qt6-qtsvg security update | 2025-12-01T08:55:07+00:00 | 2026-03-18T03:12:21+00:00 |
| rhsa-2025:22393 | Red Hat Security Advisory: qt6-qtsvg security update | 2025-12-01T08:51:13+00:00 | 2026-03-18T03:12:21+00:00 |
| rhsa-2025:22388 | Red Hat Security Advisory: kernel security update | 2025-12-01T06:11:52+00:00 | 2026-03-18T03:12:01+00:00 |
| rhsa-2025:22387 | Red Hat Security Advisory: kernel-rt security update | 2025-12-01T05:31:33+00:00 | 2026-03-18T03:12:03+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4333-1 | Security update for gegl | 2025-12-09T14:42:10Z | 2025-12-09T14:42:10Z |
| suse-su-2025:4330-1 | Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container | 2025-12-09T11:33:55Z | 2025-12-09T11:33:55Z |
| suse-su-2025:21199-1 | Security update for python311 | 2025-12-09T07:37:33Z | 2025-12-09T07:37:33Z |
| suse-su-2025:21198-1 | Security update for curl | 2025-12-09T07:19:13Z | 2025-12-09T07:19:13Z |
| suse-su-2025:4325-1 | Security update for postgresql13 | 2025-12-08T18:19:54Z | 2025-12-08T18:19:54Z |
| suse-su-2025:4324-1 | Security update for gimp | 2025-12-08T18:18:01Z | 2025-12-08T18:18:01Z |
| suse-su-2025:4323-1 | Security update for gnutls | 2025-12-08T18:14:16Z | 2025-12-08T18:14:16Z |
| suse-su-2025:4320-1 | Security update for the Linux Kernel | 2025-12-04T10:04:32Z | 2025-12-04T10:04:32Z |
| suse-su-2025:21170-1 | Security update for mozjs128 | 2025-12-03T20:38:36Z | 2025-12-03T20:38:36Z |
| suse-su-2025:4319-1 | Security update for cups | 2025-12-03T12:34:14Z | 2025-12-03T12:34:14Z |
| suse-su-2025:21168-1 | Security update for python-cbor2 | 2025-12-02T13:51:54Z | 2025-12-02T13:51:54Z |
| suse-su-2025:21167-1 | Security update for strongswan | 2025-12-02T13:13:07Z | 2025-12-02T13:13:07Z |
| suse-su-2025:4315-1 | Security update for the Linux Kernel | 2025-12-01T10:12:39Z | 2025-12-01T10:12:39Z |
| suse-su-2025:4313-1 | Security update for python | 2025-12-01T09:29:19Z | 2025-12-01T09:29:19Z |
| suse-su-2025:4311-1 | Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) | 2025-11-28T16:33:27Z | 2025-11-28T16:33:27Z |
| suse-su-2025:4310-1 | Security update for libcryptopp | 2025-11-28T15:54:32Z | 2025-11-28T15:54:32Z |
| suse-su-2025:4309-1 | Security update for curl | 2025-11-28T15:40:02Z | 2025-11-28T15:40:02Z |
| suse-su-2025:4308-1 | Security update for glib2 | 2025-11-28T15:38:47Z | 2025-11-28T15:38:47Z |
| suse-su-2025:4306-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) | 2025-11-28T14:03:42Z | 2025-11-28T14:03:42Z |
| suse-su-2025:4305-1 | Security update for grub2 | 2025-11-28T13:33:43Z | 2025-11-28T13:33:43Z |
| suse-su-2025:4302-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7) | 2025-11-28T13:04:17Z | 2025-11-28T13:04:17Z |
| suse-su-2025:4301-1 | Security update for the Linux Kernel | 2025-11-28T12:59:04Z | 2025-11-28T12:59:04Z |
| suse-su-2025:4300-1 | Security update for curl | 2025-11-28T12:57:53Z | 2025-11-28T12:57:53Z |
| suse-su-2025:21164-1 | Security update for java-17-openjdk | 2025-11-28T10:42:01Z | 2025-11-28T10:42:01Z |
| suse-su-2025:4297-1 | Security update for python311 | 2025-11-28T10:03:21Z | 2025-11-28T10:03:21Z |
| suse-su-2025:21162-1 | Security update for java-21-openjdk | 2025-11-28T09:51:39Z | 2025-11-28T09:51:39Z |
| suse-su-2025:4291-1 | Security update for libmicrohttpd | 2025-11-28T09:06:47Z | 2025-11-28T09:06:47Z |
| suse-su-2025:4290-1 | Security update for cups | 2025-11-28T09:04:34Z | 2025-11-28T09:04:34Z |
| suse-su-2025:4289-1 | Security update for cups | 2025-11-28T08:50:37Z | 2025-11-28T08:50:37Z |
| suse-su-2025:4288-1 | Security update for containerd | 2025-11-28T08:25:49Z | 2025-11-28T08:25:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2024:0897 | Important: kernel security update | 2024-02-20T00:00:00Z | 2024-02-22T19:10:17Z |
| alsa-2024:0894 | Moderate: mysql:8.0 security update | 2024-02-20T00:00:00Z | 2024-02-28T16:26:23Z |
| alsa-2024:0893 | Important: python-pillow security update | 2024-02-20T00:00:00Z | 2024-02-22T19:24:04Z |
| alsa-2024:0889 | Moderate: oniguruma security update | 2024-02-20T00:00:00Z | 2024-02-22T19:31:39Z |
| alsa-2024:0888 | Low: edk2 security update | 2024-02-20T00:00:00Z | 2024-02-22T19:52:37Z |
| alsa-2024:0887 | Moderate: go-toolset:rhel8 security update | 2024-02-20T00:00:00Z | 2024-02-22T20:03:22Z |
| alsa-2024:0861 | Important: gimp:2.8 security update | 2024-02-19T00:00:00Z | 2024-02-22T20:14:15Z |
| alsa-2024:0848 | Important: .NET 8.0 security update | 2024-02-15T00:00:00Z | 2024-02-16T11:50:40Z |
| alsa-2024:0827 | Important: .NET 8.0 security update | 2024-02-15T00:00:00Z | 2024-02-16T10:14:33Z |
| alsa-2024:0811 | Moderate: sudo security update | 2024-02-14T00:00:00Z | 2024-02-14T10:26:35Z |
| alsa-2024:0808 | Important: dotnet6.0 security update | 2024-02-13T00:00:00Z | 2024-02-15T09:08:21Z |
| alsa-2024:0807 | Important: dotnet6.0 security update | 2024-02-13T00:00:00Z | 2024-02-15T09:13:23Z |
| alsa-2024:0806 | Important: dotnet7.0 security update | 2024-02-13T00:00:00Z | 2024-02-15T10:05:08Z |
| alsa-2024:0805 | Important: dotnet7.0 security update | 2024-02-13T00:00:00Z | 2024-02-15T09:17:54Z |
| alsa-2024:0790 | Moderate: nss security update | 2024-02-12T00:00:00Z | 2024-02-14T10:34:33Z |
| alsa-2024:0786 | Moderate: nss security update | 2024-02-12T00:00:00Z | 2024-02-14T10:42:15Z |
| alsa-2024:0769 | Moderate: tcpdump security update | 2024-02-12T00:00:00Z | 2024-02-12T12:35:42Z |
| alsa-2024:0768 | Moderate: libmaxminddb security update | 2024-02-12T00:00:00Z | 2024-02-12T10:04:42Z |
| alsa-2024:0752 | Important: container-tools:rhel8 security update | 2024-02-08T00:00:00Z | 2024-02-12T09:52:45Z |
| alsa-2024:0748 | Important: container-tools:4.0 security update | 2024-02-08T00:00:00Z | 2024-02-12T10:53:48Z |
| alsa-2024:0675 | Important: gimp security update | 2024-02-05T00:00:00Z | 2024-02-09T15:50:21Z |
| alsa-2024:0670 | Important: runc security update | 2024-02-02T00:00:00Z | 2024-02-06T05:57:05Z |
| alsa-2024:0647 | Moderate: rpm security update | 2024-02-01T00:00:00Z | 2024-02-01T17:32:00Z |
| alsa-2024:0628 | Moderate: libssh security update | 2024-01-31T00:00:00Z | 2024-02-01T09:02:43Z |
| alsa-2024:0627 | Moderate: gnutls security update | 2024-01-31T00:00:00Z | 2024-02-01T09:14:29Z |
| alsa-2024:0609 | Important: thunderbird security update | 2024-01-30T00:00:00Z | 2024-02-01T09:44:40Z |
| alsa-2024:0608 | Important: firefox security update | 2024-01-30T00:00:00Z | 2024-02-01T09:58:53Z |
| alsa-2024:0607 | Important: tigervnc security update | 2024-01-30T00:00:00Z | 2024-01-31T10:11:00Z |
| alsa-2024:0606 | Moderate: openssh security update | 2024-01-30T00:00:00Z | 2024-01-31T10:16:15Z |
| alsa-2024:0603 | Important: firefox security update | 2024-01-30T00:00:00Z | 2024-02-01T10:06:48Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2021-1395 | Heap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace | 2021-09-29T00:01:29.961504Z | 2022-04-13T03:04:32.396666Z |
| osv-2021-1394 | Use-after-poison in JS::Reference::put_value | 2021-09-29T00:00:38.765609Z | 2022-04-13T03:04:32.247868Z |
| osv-2021-1392 | Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false> | 2021-09-28T00:01:42.602963Z | 2022-04-13T03:04:41.041539Z |
| osv-2021-1390 | Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false> | 2021-09-28T00:01:10.882637Z | 2022-04-13T03:04:40.976434Z |
| osv-2021-1389 | Negative-size-param in Imf_3_1::memstream_read | 2021-09-28T00:00:34.073331Z | 2022-04-13T03:29:41.784324Z |
| osv-2021-1387 | Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL | 2021-09-28T00:00:13.656995Z | 2022-04-13T03:04:40.992316Z |
| osv-2021-1386 | Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>:: | 2021-09-28T00:00:12.139414Z | 2022-04-13T03:04:40.960397Z |
| osv-2021-1385 | Heap-buffer-overflow in Assimp::BaseImporter::ConvertToUTF8 | 2021-09-28T00:00:07.486971Z | 2022-04-13T03:04:42.673761Z |
| osv-2021-1381 | Heap-buffer-overflow in OT::MathValueRecord::copy | 2021-09-27T00:01:25.282839Z | 2022-04-13T03:04:32.963380Z |
| osv-2021-1380 | Negative-size-param in ntfs_attr_walk_special | 2021-09-27T00:01:19.023732Z | 2022-04-13T03:04:36.431420Z |
| osv-2021-1378 | Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL | 2021-09-27T00:00:27.699638Z | 2022-04-13T03:04:41.008888Z |
| osv-2021-1373 | Global-buffer-overflow in vte_write_debug | 2021-09-27T00:00:07.177410Z | 2022-04-13T03:04:40.010197Z |
| osv-2021-1371 | Heap-use-after-free in dispatch_print_error | 2021-09-26T00:00:10.966065Z | 2022-04-13T03:20:58.017345Z |
| osv-2021-1370 | Heap-buffer-overflow in OT::MathGlyphConstruction::subset | 2021-09-25T00:01:37.745585Z | 2022-04-13T03:04:33.093067Z |
| osv-2021-1368 | Stack-buffer-overflow in dispatch_print_error | 2021-09-25T00:00:17.537038Z | 2022-04-13T03:32:35.569980Z |
| osv-2021-1367 | Uncaught exception in org.jsoup.parser.HtmlTreeBuilderState$18.process | 2021-09-25T00:00:14.555492Z | 2022-04-13T03:04:35.134132Z |
| osv-2021-1361 | Heap-buffer-overflow in MqttClient_DecodePacket | 2021-09-23T00:01:42.884344Z | 2022-04-13T03:04:34.056088Z |
| osv-2021-1358 | Heap-buffer-overflow in MqttClient_DecodePacket | 2021-09-23T00:01:36.076855Z | 2022-04-13T03:04:34.032966Z |
| osv-2021-1354 | Stack-buffer-underflow in InterpretPhoneme | 2021-09-22T00:01:41.604762Z | 2022-04-13T03:04:34.173939Z |
| osv-2021-1353 | Heap-buffer-overflow in MqttClient_DecodePacket | 2021-09-22T00:01:32.692141Z | 2022-04-13T03:04:34.005024Z |
| osv-2021-1352 | UNKNOWN READ in MqttProps_Free | 2021-09-22T00:01:28.525327Z | 2022-04-13T03:04:33.999639Z |
| osv-2021-1349 | Heap-buffer-overflow in MqttClient_DecodePacket | 2021-09-22T00:00:39.971371Z | 2022-04-13T03:04:34.010392Z |
| osv-2021-1348 | Heap-buffer-overflow in MqttDecode_Disconnect | 2021-09-22T00:00:38.608969Z | 2022-04-13T03:04:34.015885Z |
| osv-2021-1347 | Invalid-free in generic specialization <Swift.Int> of Swift.Array.subscript.getter : | 2021-09-22T00:00:35.224651Z | 2022-04-13T03:04:35.872621Z |
| osv-2021-1346 | UNKNOWN READ in state_VLC_dec::load_bytes | 2021-09-22T00:00:11.187759Z | 2022-04-13T03:04:39.517865Z |
| osv-2021-1344 | Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress | 2021-09-21T00:01:35.030626Z | 2023-07-22T14:06:09.433208Z |
| osv-2021-1343 | Heap-buffer-overflow in get_next_owned_entity | 2021-09-21T00:01:33.177403Z | 2026-04-28T14:08:44.941324Z |
| osv-2021-1340 | Heap-buffer-overflow in mrb_vm_exec | 2021-09-21T00:00:36.045422Z | 2022-04-13T03:04:39.739013Z |
| osv-2021-1338 | Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process | 2021-09-21T00:00:09.779054Z | 2022-04-13T03:04:35.140499Z |
| osv-2021-1333 | Heap-buffer-overflow in pe_get_section_full_name | 2021-09-20T00:00:16.641649Z | 2022-04-13T03:04:42.265452Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-valkey-2023-41053 | Redis SORT_RO may bypass ACL configuration | 2024-08-22T19:40:58.154Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2023-41056 | Redis vulnerable to integer overflow in certain payloads | 2024-08-22T19:40:41.350Z | 2025-05-20T10:02:07.006Z |
| bit-valkey-2023-45145 | Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. | 2024-08-22T19:40:22.448Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2021-31294 | 2024-08-22T19:30:36.651Z | 2025-04-03T14:40:37.652Z | |
| bit-keydb-2021-32626 | Lua scripts can overflow the heap-based Lua stack in Redis | 2024-08-22T19:30:18.060Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2021-32627 | Integer overflow issue with Streams in Redis | 2024-08-22T19:30:03.650Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2021-32628 | Vulnerability in handling large ziplists | 2024-08-22T19:29:45.549Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2021-32672 | Vulnerability in Lua Debugger in Redis | 2024-08-22T19:29:26.350Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2021-32675 | DoS vulnerability in Redis | 2024-08-22T19:29:09.056Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2021-32687 | Integer overflow issue with intsets in Redis | 2024-08-22T19:28:52.055Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2021-32762 | Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms | 2024-08-22T19:28:35.562Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2021-41099 | Integer overflow issue with strings in Redis | 2024-08-22T19:28:22.058Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2022-24735 | Lua scripts can be manipulated to overcome ACL rules in Redis | 2024-08-22T19:27:40.959Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2022-24736 | A Malformed Lua script can crash Redis | 2024-08-22T19:27:22.053Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2022-24834 | Heap overflow issue with the Lua cjson library used by Redis | 2024-08-22T19:27:04.151Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2022-31144 | Potential heap overflow in Redis | 2024-08-22T19:26:49.452Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2022-33105 | 2024-08-22T19:26:31.054Z | 2025-04-03T14:40:37.652Z | |
| bit-keydb-2022-35951 | Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow | 2024-08-22T19:26:14.253Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panic | 2024-08-22T19:25:58.150Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2022-36021 | Redis string pattern matching can be abused to achieve Denial of Service | 2024-08-22T19:25:41.457Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2022-3647 | Redis Crash Report debug.c sigsegvHandler denial of service | 2024-08-22T19:25:26.151Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2023-22458 | Integer overflow in multiple Redis commands can lead to denial-of-service | 2024-08-22T19:25:05.961Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2023-25155 | Integer Overflow in several Redis commands can lead to denial of service. | 2024-08-22T19:24:48.358Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2023-28425 | Specially crafted MSETNX command can lead to denial-of-service | 2024-08-22T19:24:32.454Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2023-28856 | `HINCRBYFLOAT` can be used to crash a redis-server process | 2024-08-22T19:24:15.254Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2023-31655 | 2024-08-22T19:23:57.657Z | 2025-04-03T14:40:37.652Z | |
| bit-keydb-2023-36824 | Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis | 2024-08-22T19:23:41.759Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2023-41053 | Redis SORT_RO may bypass ACL configuration | 2024-08-22T19:23:23.662Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2023-41056 | Redis vulnerable to integer overflow in certain payloads | 2024-08-22T19:23:05.762Z | 2025-05-20T10:02:07.006Z |
| bit-keydb-2023-45145 | Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. | 2024-08-22T19:22:46.458Z | 2026-03-20T09:47:33.381Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0717 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| certfr-2024-avi-0716 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| certfr-2024-avi-0715 | Vulnérabilité dans Spring Boot | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| certfr-2024-avi-0714 | Vulnérabilité dans SolarWinds Web Help Desk | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| certfr-2024-avi-0713 | Multiples vulnérabilités dans les produits VMware | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| certfr-2024-avi-0712 | Vulnérabilité dans les produits Sonicwall | 2024-08-23T00:00:00.000000 | 2024-09-06T00:00:00.000000 |
| certfr-2024-avi-0711 | Multiples vulnérabilités dans Microsoft Edge | 2024-08-23T00:00:00.000000 | 2024-08-23T00:00:00.000000 |
| certfr-2024-avi-0710 | Multiples vulnérabilités dans Dovecot | 2024-08-22T00:00:00.000000 | 2024-08-22T00:00:00.000000 |
| certfr-2024-avi-0709 | Multiples vulnérabilités dans GitLab | 2024-08-22T00:00:00.000000 | 2024-08-22T00:00:00.000000 |
| certfr-2024-avi-0708 | Vulnérabilité dans les produits Cisco | 2024-08-22T00:00:00.000000 | 2024-08-22T00:00:00.000000 |
| certfr-2024-avi-0707 | Vulnérabilité dans Mitel MiContact Center Business | 2024-08-22T00:00:00.000000 | 2024-08-22T00:00:00.000000 |
| certfr-2024-avi-0706 | Multiples vulnérabilités dans Google Chrome | 2024-08-22T00:00:00.000000 | 2024-08-22T00:00:00.000000 |
| certfr-2024-avi-0705 | Vulnérabilité dans MongoDB | 2024-08-21T00:00:00.000000 | 2024-08-21T00:00:00.000000 |
| certfr-2024-avi-0704 | Vulnérabilité dans Microsoft Azure | 2024-08-21T00:00:00.000000 | 2024-08-21T00:00:00.000000 |
| certfr-2024-avi-0703 | Multiples vulnérabilités dans les produits Atlassian | 2024-08-21T00:00:00.000000 | 2024-08-21T00:00:00.000000 |
| certfr-2024-avi-0702 | Vulnérabilité dans SPIP | 2024-08-21T00:00:00.000000 | 2024-09-16T00:00:00.000000 |
| certfr-2024-avi-0701 | Multiples vulnérabilités dans Joomla! | 2024-08-21T00:00:00.000000 | 2024-08-21T00:00:00.000000 |
| certfr-2024-avi-0700 | Vulnérabilité dans Spring Security | 2024-08-20T00:00:00.000000 | 2024-08-20T00:00:00.000000 |
| certfr-2024-avi-0699 | Multiples vulnérabilités dans les produits F5 et Nginx | 2024-08-19T00:00:00.000000 | 2024-08-19T00:00:00.000000 |
| certfr-2024-avi-0698 | Vulnérabilité dans Microsoft Office | 2024-08-19T00:00:00.000000 | 2024-08-19T00:00:00.000000 |
| certfr-2024-avi-0697 | Vulnérabilité dans Microsoft Edge | 2024-08-19T00:00:00.000000 | 2024-08-19T00:00:00.000000 |
| certfr-2024-avi-0696 | Multiples vulnérabilités dans Moodle | 2024-08-19T00:00:00.000000 | 2024-08-19T00:00:00.000000 |
| certfr-2024-avi-0695 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-08-16T00:00:00.000000 | 2024-08-16T00:00:00.000000 |
| certfr-2024-avi-0694 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-08-16T00:00:00.000000 | 2024-08-16T00:00:00.000000 |
| certfr-2024-avi-0693 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-08-16T00:00:00.000000 | 2024-08-16T00:00:00.000000 |
| certfr-2024-avi-0692 | Multiples vulnérabilités dans les produits IBM | 2024-08-16T00:00:00.000000 | 2024-08-16T00:00:00.000000 |
| certfr-2024-avi-0691 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-08-16T00:00:00.000000 | 2024-08-16T00:00:00.000000 |
| certfr-2024-avi-0690 | Vulnérabilité dans Elastic APM Server | 2024-08-16T00:00:00.000000 | 2024-08-16T00:00:00.000000 |
| certfr-2024-avi-0689 | Multiples vulnérabilités dans Spring Framework | 2024-08-16T00:00:00.000000 | 2024-08-16T00:00:00.000000 |
| certfr-2024-avi-0688 | Vulnérabilité dans Grafana | 2024-08-16T00:00:00.000000 | 2024-08-16T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000047 | bBlog vulnerable to cross-site request forgery | 2015-04-07T12:12+09:00 | 2015-04-09T14:05+09:00 |
| jvndb-2015-000049 | "Restaurant Karaoke SHIDAX" App for Android fails to verify SSL server certificates | 2015-04-03T13:36+09:00 | 2018-01-24T14:03+09:00 |
| jvndb-2015-000048 | Maruo Editor vulnerable to buffer overflow | 2015-04-02T12:30+09:00 | 2015-04-07T17:28+09:00 |
| jvndb-2015-000046 | All in One SEO Pack information management vulnerability | 2015-03-31T13:48+09:00 | 2015-04-07T17:27+09:00 |
| jvndb-2015-000045 | Android OS may behave as an open resolver | 2015-03-27T14:12+09:00 | 2015-03-27T14:12+09:00 |
| jvndb-2015-000044 | WordPress theme flashy vulnerable to cross-site scripting | 2015-03-26T14:04+09:00 | 2015-04-07T17:25+09:00 |
| jvndb-2015-000043 | Fumy Teacher's Schedule Board vulnerable to cross-site scripting | 2015-03-26T14:00+09:00 | 2015-04-07T17:25+09:00 |
| jvndb-2015-000042 | The Validator in TERASOLUNA Server Framework for Java(WEB) vulnerable to input validation bypass | 2015-03-24T14:10+09:00 | 2016-08-26T16:37+09:00 |
| jvndb-2015-000040 | LINE vulnerable to script injection | 2015-03-20T16:16+09:00 | 2024-05-09T18:15+09:00 |
| jvndb-2015-000041 | MP Form Mail CGI eCommerce edition vulnerable to code injection | 2015-03-20T12:30+09:00 | 2015-03-24T15:11+09:00 |
| jvndb-2015-000039 | eXtplorer vulnerable to cross-site scripting | 2015-03-17T13:41+09:00 | 2015-03-20T14:30+09:00 |
| jvndb-2015-000038 | All In One WP Security & Firewall vulnerable to cross-site request forgery | 2015-03-06T13:46+09:00 | 2015-03-11T17:42+09:00 |
| jvndb-2015-000037 | All In One WP Security & Firewall vulnerable to SQL injection | 2015-03-06T13:45+09:00 | 2015-03-11T17:55+09:00 |
| jvndb-2015-000036 | Maroyaka Relay Novel vulnerable to cross-site scripting | 2015-03-04T14:49+09:00 | 2015-03-06T15:30+09:00 |
| jvndb-2015-000035 | Maroyaka Image Album vulnerable to cross-site scripting | 2015-03-04T14:49+09:00 | 2015-03-06T15:21+09:00 |
| jvndb-2015-000034 | Maroyaka Simple Board vulnerable to cross-site scripting | 2015-03-04T14:48+09:00 | 2015-03-06T15:07+09:00 |
| jvndb-2015-000030 | Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass | 2015-03-03T13:39+09:00 | 2015-03-04T15:23+09:00 |
| jvndb-2015-000029 | BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass | 2015-03-03T13:38+09:00 | 2015-03-04T15:22+09:00 |
| jvndb-2015-001558 | Cross-site Scripting Vulnerability in Hitachi IT Operations Analyzer | 2015-02-27T15:57+09:00 | 2015-02-27T15:57+09:00 |
| jvndb-2015-001557 | Cross-site Scripting Vulnerability in JP1/IT Desktop Management - Manager and Hitachi IT Operations Director | 2015-02-27T15:56+09:00 | 2015-02-27T15:56+09:00 |
| jvndb-2015-001556 | Multiple Cross-site Scripting Vulnerabilities in Hitachi Compute Systems Manager | 2015-02-27T15:55+09:00 | 2015-02-27T15:55+09:00 |
| jvndb-2015-000031 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2015-02-27T15:39+09:00 | 2015-03-05T15:42+09:00 |
| jvndb-2015-000033 | Vulnerability in the jBCrypt key stretching process | 2015-02-27T14:03+09:00 | 2015-03-03T15:58+09:00 |
| jvndb-2015-000028 | KENT-WEB Clip Board vulnerability where arbitary files may be deleted | 2015-02-27T14:02+09:00 | 2015-03-03T15:59+09:00 |
| jvndb-2015-000024 | Joyful Note vulnerability in handling files | 2015-02-27T13:57+09:00 | 2015-03-03T15:59+09:00 |
| jvndb-2015-000032 | checkpw vulnerable to denial-of-service (DoS) | 2015-02-27T12:30+09:00 | 2015-03-03T15:57+09:00 |
| jvndb-2015-000027 | Zen Cart Japanese version vulnerable to cross-site scripting | 2015-02-25T15:09+09:00 | 2015-03-02T14:19+09:00 |
| jvndb-2015-000026 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to remote code execution | 2015-02-25T15:00+09:00 | 2015-03-02T14:23+09:00 |
| jvndb-2015-000023 | Speed Software Root Explorer and Explorer vulnerable to directory traversal | 2015-02-24T14:35+09:00 | 2015-02-26T17:18+09:00 |
| jvndb-2015-000022 | AL-Mail32 vulnerable to buffer overflow | 2015-02-20T14:55+09:00 | 2015-02-24T16:36+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-30215 | Wireshark缓冲区溢出漏洞(CNVD-2025-30215) | 2025-11-28 | 2025-12-04 |
| cnvd-2025-30214 | Cisco Catalyst Center Virtual Appliance访问控制错误漏洞 | 2025-11-28 | 2025-12-04 |
| cnvd-2025-29956 | WordPress TAX SERVICE Electronic HDM缺少授权漏洞 | 2025-11-28 | 2025-12-04 |
| cnvd-2025-29934 | WordPress houzez跨站脚本漏洞 | 2025-11-28 | 2025-12-03 |
| cnvd-2026-12146 | 深圳极速创想科技有限公司FastAdmin任意文件读取漏洞 | 2025-11-27 | 2026-02-28 |
| cnvd-2025-30580 | Apache Syncope信任管理问题漏洞 | 2025-11-27 | 2025-12-12 |
| cnvd-2025-30365 | Online Shopping Portal不安全的直接对象引用漏洞 | 2025-11-27 | 2025-12-10 |
| cnvd-2025-30359 | Hostel Management System register-complaint.php文件跨站脚本漏洞 | 2025-11-27 | 2025-12-09 |
| cnvd-2025-30258 | WordPress插件YouTube Subscribe跨站脚本漏洞 | 2025-11-27 | 2025-12-08 |
| cnvd-2025-30257 | WordPress插件Zweb Social Mobile跨站脚本漏洞 | 2025-11-27 | 2025-12-08 |
| cnvd-2025-30208 | Blog Site admin.php文件授权不当漏洞 | 2025-11-27 | 2025-12-05 |
| cnvd-2025-30207 | Blog Site blog.php文件SQL注入漏洞 | 2025-11-27 | 2025-12-05 |
| cnvd-2025-29967 | WordPress插件Blog2Social: Social Media Auto Post & Scheduler存在未明漏洞 | 2025-11-27 | 2025-12-04 |
| cnvd-2025-29966 | WordPress插件atec Duplicate Page & Post存在未明漏洞 | 2025-11-27 | 2025-12-04 |
| cnvd-2025-29959 | WordPress Refund Request for WooCommerce plugin未经授权的数据修改漏洞 | 2025-11-27 | 2025-12-04 |
| cnvd-2025-29958 | WordPress ProjectList plugin任意文件上传漏洞 | 2025-11-27 | 2025-12-04 |
| cnvd-2025-29957 | WordPress ProjectList plugin SQL注入漏洞 | 2025-11-27 | 2025-12-04 |
| cnvd-2025-29938 | ASUS Router堆栈缓冲区溢出漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29937 | ASUS Router路径遍历漏洞(CNVD-2025-29937) | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29936 | ASUS Router身份验证绕过漏洞(CNVD-2025-29936) | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29935 | ASUS Router整数下溢漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29870 | Library System return.php文件SQL注入漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29869 | Library System index.php文件SQL注入漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29868 | Library System mail.php文件SQL注入漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29783 | ASUS Router路径遍历漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29782 | ASUS Router命令注入漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29781 | ASUS Router身份验证绕过漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29780 | ASUS Router SQL注入漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29744 | AMD XOCL driver输入验证不当漏洞(CNVD-2025-29744) | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29743 | AMD Xilinx Run Time权限提升漏洞 | 2025-11-27 | 2025-12-03 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-16076 | Уязвимость модуля drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c ядра операцио… | 18.12.2025 | 18.12.2025 |
| bdu:2025-16075 | Уязвимость функции do_secure_storage_access() ядра операционной системы Linux, позволяюща… | 18.12.2025 | 18.12.2025 |
| bdu:2025-16074 | Уязвимость функции elf_link_add_object_symbols компонента bfd/elflink.c программного сред… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16073 | Уязвимость функции _bfd_x86_elf_late_size_sections компонента bfd/elfxx-x86.c программног… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16072 | Уязвимость функции PdfParserObject::ParseFileComplete() компонента PdfParserObject.cpp пр… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16071 | Уязвимость системы управления конфигурациями Ansible, связанная с неправильной обработкой… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16070 | Уязвимость функции der_decode_utf8_string() компонента der_decode_utf8_string.c криптогра… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16069 | Уязвимость функции parseQuota компонента dcmqrscp библиотеки для работы с форматом DICOM … | 18.12.2025 | 12.01.2026 |
| bdu:2025-16068 | Уязвимость функций PdfTokenizer::ReadArray(), PdfTokenizer::GetNextVariant(), PdfTokenize… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16067 | Уязвимость функции PdfNamesTree::AddToDictionary компонента src/podofo/doc/PdfNamesTree.c… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16066 | Уязвимость функции DcmQueryRetrieveConfig::readPeerList компонента dcmqrscp библиотеки дл… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16065 | Уязвимость библиотеки для обработки изображений GEGL, связанная с выходом операции за гра… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16064 | Уязвимость графического редактора GIMP, связанная с выходом операции за границы буфера в … | 18.12.2025 | 20.01.2026 |
| bdu:2025-16063 | Уязвимость эмулятора аппаратного обеспечения QEMU, связанная с использованием памяти посл… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16062 | Уязвимость функции elf_x86_64_relocate_section компонента elf64-x86-64.c программного сре… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16061 | Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая наруши… | 18.12.2025 | 20.01.2026 |
| bdu:2025-16060 | Уязвимость компонента arch/arm/mach-rockchip ядра операционной системы Linux, позволяющая… | 18.12.2025 | 26.12.2025 |
| bdu:2025-16059 | Уязвимость компонента arch/arm/mach-tegra/reset.c ядра операционной системы Linux, позвол… | 18.12.2025 | 26.12.2025 |
| bdu:2025-16058 | Уязвимость компонента crypto/af_alg.c ядра операционной системы Linux, позволяющая наруши… | 18.12.2025 | 12.01.2026 |
| bdu:2025-16048 | Уязвимость платформы для операционного анализа Splunk Enterprise, связанная с недостаточн… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16047 | Уязвимость компонента Logendpoint платформы для операционного анализа Splunk Enterprise, … | 17.12.2025 | 17.12.2025 |
| bdu:2025-16046 | Уязвимость веб-интерфейса Splunk Web платформы для операционного анализа Splunk Enterpris… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16045 | Уязвимость компонента REST API платформы для операционного анализа Splunk Enterprise, поз… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16044 | Уязвимость веб-интерфейса Splunk Web платформы для операционного анализа Splunk Enterpris… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16043 | Уязвимость программных продуктов Schneider Electric ATV, ILC, VW Series, связанная с непр… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16042 | Уязвимость компонента 5G NRMM Packet Handler микропрограммного обеспечения процессоров Sa… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16041 | Уязвимость программного обеспечения системы автоматизации FactoryTalk Linx, связанная с н… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16040 | Уязвимость программного обеспечения системы автоматизации FactoryTalk Linx, связанная с н… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16039 | Уязвимость программного обеспечения создания и управления графическим интерфейсом операто… | 17.12.2025 | 17.12.2025 |
| bdu:2025-16038 | Уязвимость промышленной сетевой точки доступа Wi-Fi Rockwell Automation 1783-NATR, связан… | 17.12.2025 | 17.12.2025 |
| ID | Description | Updated |
|---|---|---|
| var-202309-1781 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2025-11-20T23:31:44.451000Z |
| var-202509-4527 | The WAGO 750-891 is a fourth-generation Modbus TCP controller that supports Ethernet comm… | 2025-11-20T23:30:06.633000Z |
| var-202510-3742 | The Brother DCP-T536DW is a full-featured color inkjet multifunction printer. The Brothe… | 2025-11-20T23:30:06.367000Z |
| var-202509-4525 | The AC20 is a wireless router. The Tenda AC20 router, manufactured by Shenzhen Tenda Tec… | 2025-11-20T23:28:11.138000Z |
| var-202509-4546 | The CX2550 M2 is a 2U rackmount server node designed for high-performance computing, mana… | 2025-11-20T23:28:11.128000Z |
| var-202511-1774 | In Modem, there is a possible out of bounds write due to a heap buffer overflow. This cou… | 2025-11-20T23:28:09.740000Z |
| var-202404-2106 | A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This v… | 2025-11-20T23:27:52.157000Z |
| var-202508-3777 | The RICOH M C251FW is an A4 color laser multifunction printer that supports Wi-Fi Direct … | 2025-11-20T23:26:43.421000Z |
| var-202509-4536 | The Moxa ioLogik Remote I/O Server E1214 is a network device for industrial automation an… | 2025-11-20T23:26:43.250000Z |
| var-202509-4522 | The WAGO 750-889 is a PLC module that supports KNX IP and Modbus protocols and is suitabl… | 2025-11-20T23:26:14.392000Z |
| var-202510-3654 | The RG-MA2862 is a gigabit dual-band router. The RG-MA2862 router, manufactured by Beiji… | 2025-11-20T23:26:14.136000Z |
| var-202404-1757 | Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the… | 2025-11-20T23:23:01.387000Z |
| var-202509-4521 | The AC21 is a router product. The AC21 router produced by Shenzhen Jixiang Tengda Techno… | 2025-11-20T23:22:58.423000Z |
| var-202403-3324 | Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the… | 2025-11-20T23:21:54.082000Z |
| var-202510-4302 | The Canon MF745C/746C is a color laser multifunction printer that supports printing, copy… | 2025-11-20T23:21:50.564000Z |
| var-202511-1650 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecu… | 2025-11-20T23:21:49.787000Z |
| var-202510-3917 | The COMELIT IPCAM723A is a webcam. The COMELIT IPCAM723A has a weak password vulnerabili… | 2025-11-20T23:19:46.016000Z |
| var-202309-2113 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2025-11-20T23:18:51.207000Z |
| var-202509-4516 | The WAGO 750-890 is a Modbus TCP controller suitable for industrial automation systems an… | 2025-11-20T23:17:01.653000Z |
| var-202510-0030 | A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects th… | 2025-11-20T23:17:01.627000Z |
| var-202510-3540 | The Brother (China) Commercial Co., Ltd. DCP-T730DW is a color inkjet multifunction print… | 2025-11-20T23:17:00.877000Z |
| var-202511-0262 | A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the functio… | 2025-11-20T23:13:32.824000Z |
| var-202309-2435 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2025-11-20T23:10:30.044000Z |
| var-202509-4523 | The DWR-M961 is a 4G LTE router. The D-Link DWR-M961 has a command execution vulnerabili… | 2025-11-20T23:10:25.325000Z |
| var-202511-0038 | A vulnerability was detected in D-Link DIR-816L 2_06_b09_beta. Affected by this vulnerabi… | 2025-11-20T23:10:24.143000Z |
| var-202511-1256 | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This … | 2025-11-20T23:10:23.896000Z |
| var-202509-4534 | The MOXA NPort 5230 is an industrial-grade serial communication server, belonging to the … | 2025-11-20T23:08:23.542000Z |
| var-202509-4545 | The Lexmark CX921de is a color laser printer designed for the commercial market. A vulne… | 2025-11-20T23:01:24.517000Z |
| var-202511-1433 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_F… | 2025-11-20T19:40:19.370000Z |
| var-202308-3228 | The get_parentControl_list_Info function does not verify the parameters entered by the us… | 2025-11-19T23:33:09.536000Z |