Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-33083 |
8.7 (4.0)
|
DataEase has SQL Injection in Order By Clause |
dataease |
dataease |
2026-04-16T17:52:37.255Z | 2026-04-16T19:39:25.443Z |
| CVE-2026-33082 |
8.7 (4.0)
|
DataEase: SQL Injection in v2 Dataset Export |
dataease |
dataease |
2026-04-16T17:39:37.894Z | 2026-04-16T18:41:46.111Z |
| CVE-2026-41082 |
7.3 (3.1)
|
In OCaml opam before 2.5.1, a .install field cont… |
OCaml |
opam |
2026-04-16T17:32:40.068Z | 2026-04-21T09:32:52.152Z |
| CVE-2026-27820 |
1.7 (4.0)
|
zlib: Buffer Overflow in Zlib::GzipReader ungetc via l… |
ruby |
zlib |
2026-04-16T17:27:48.944Z | 2026-04-16T18:20:21.451Z |
| CVE-2026-24749 |
5.3 (3.1)
|
Silverstripe Assets Module has a DBFile::getURL() perm… |
silverstripe |
silverstripe-assets |
2026-04-16T17:08:59.133Z | 2026-04-18T02:36:26.887Z |
| CVE-2026-2336 |
8.7 (4.0)
|
Weak webstax_auth Cookie Authentication Allows Privile… |
Microchip |
IStaX |
2026-04-16T17:02:06.352Z | 2026-04-16T17:34:39.672Z |
| CVE-2026-41080 |
2.9 (3.1)
|
libexpat before 2.8.0 uses insufficient entropy, … |
libexpat project |
libexpat |
2026-04-16T16:52:01.177Z | 2026-04-27T05:59:38.490Z |
| CVE-2025-36579 |
5.1 (3.1)
|
Dell Client Platform BIOS contains a Weak Passwor… |
Dell |
Dell Pro 14 Essential PV14250 |
2026-04-16T16:05:32.561Z | 2026-04-16T18:32:52.672Z |
| CVE-2026-5426 |
7.5 (3.1)
|
KnowledgeDeliver deployments before February 24, 2026 … |
Digital Knowledge |
KnowledgeDeliver |
2026-04-16T15:18:46.224Z | 2026-04-18T02:31:32.234Z |
| CVE-2026-3324 |
8.2 (3.1)
|
Authentication Bypass |
Zohocorp |
ManageEngine Log360 |
2026-04-16T14:30:55.130Z | 2026-04-16T15:21:19.911Z |
| CVE-2026-6409 |
7.1 (4.0)
|
Denial of Service (DoS) vulnerability exists in the Pr… |
Protocol Buffers |
Protobuf-php (Pecl) |
2026-04-16T14:30:51.568Z | 2026-04-16T15:24:43.164Z |
| CVE-2026-2840 |
6.4 (3.1)
|
Email Encoder – Protect Email Addresses and Phone Numb… |
onlineoptimisation |
Email Encoder – Protect Email Addresses and Phone Numbers |
2026-04-16T14:10:29.114Z | 2026-04-16T14:42:53.905Z |
| CVE-2026-33804 |
7.4 (3.1)
|
@fastify/middie vulnerable to middleware bypass via de… |
@fastify/middie |
@fastify/middie |
2026-04-16T13:56:56.176Z | 2026-04-16T14:41:48.659Z |
| CVE-2026-5785 |
8.1 (3.1)
|
SQL Injection |
Zohocorp |
ManageEngine PAM360 |
2026-04-16T13:46:28.313Z | 2026-04-17T03:55:15.059Z |
| CVE-2026-6270 |
9.1 (3.1)
|
@fastify/middie vulnerable to middleware authenticatio… |
@fastify/middie |
@fastify/middie |
2026-04-16T13:44:46.322Z | 2026-04-16T14:24:26.764Z |
| CVE-2026-31987 |
N/A
|
Apache Airflow: JWT token appearing in logs |
Apache Software Foundation |
Apache Airflow |
2026-04-16T13:31:52.336Z | 2026-04-18T02:28:44.770Z |
| CVE-2026-6410 |
5.3 (3.1)
|
@fastify/static vulnerable to path traversal in direct… |
@fastify/static |
@fastify/static |
2026-04-16T13:29:08.120Z | 2026-04-16T14:19:36.780Z |
| CVE-2026-4160 |
5.3 (3.1)
|
Fluent Forms – Customizable Contact Forms, Survey, Qui… |
techjewel |
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder |
2026-04-16T13:27:09.207Z | 2026-04-16T14:12:35.951Z |
| CVE-2026-6414 |
5.9 (3.1)
|
@fastify/static vulnerable to route guard bypass via e… |
@fastify/static |
@fastify/static |
2026-04-16T13:09:03.526Z | 2026-04-16T13:48:52.393Z |
| CVE-2026-31843 |
10 (4.0)
9.8 (3.1)
|
The goodoneuz/pay-uz Laravel package (<= 2.2.24) … |
goodoneuz |
pay-uz |
2026-04-16T13:02:55.701Z | 2026-04-16T19:30:21.203Z |
| CVE-2025-15621 |
5.7 (4.0)
|
Sparx Enterprise Architect Client does not verify the … |
Sparx Systems Pty Ltd. |
Sparx Enterprise Architect |
2026-04-16T12:40:08.962Z | 2026-04-16T12:51:51.633Z |
| CVE-2026-3155 |
3.1 (3.1)
|
OneSignal – Web Push Notifications <= 3.8.0 - Missing … |
onesignal |
OneSignal – Web Push Notifications |
2026-04-16T11:21:22.226Z | 2026-04-16T14:00:56.681Z |
| CVE-2026-3369 |
5.4 (3.1)
|
Better Find and Replace – AI-Powered Suggestions <= 1.… |
codesolz |
Better Find and Replace – AI-Powered Suggestions |
2026-04-16T11:21:21.822Z | 2026-04-16T14:04:23.811Z |
| CVE-2026-3489 |
7.5 (3.1)
|
DirectoryPress – Business Directory And Classified Ad … |
designinvento |
DirectoryPress – Business Directory And Classified Ad Listing |
2026-04-16T11:21:21.179Z | 2026-04-16T14:05:03.740Z |
| CVE-2025-12624 |
6 (3.1)
|
Improper Token Invalidation in WSO2 Identity Server Al… |
WSO2 |
WSO2 Identity Server |
2026-04-16T10:25:19.789Z | 2026-04-16T12:30:14.886Z |
| CVE-2025-6024 |
6.1 (3.1)
|
Cross-Site Scripting via Authentication Endpoint in Mu… |
WSO2 |
WSO2 API Manager |
2026-04-16T09:48:45.244Z | 2026-04-16T12:30:22.824Z |
| CVE-2024-10242 |
6.1 (3.1)
|
Reflected Cross-Site Scripting via Authentication Endp… |
WSO2 |
WSO2 API Manager |
2026-04-16T09:45:46.115Z | 2026-04-16T12:30:30.619Z |
| CVE-2024-8010 |
3.5 (3.1)
|
XML External Entity Injection via Publisher in WSO2 AP… |
WSO2 |
WSO2 API Manager |
2026-04-16T09:39:20.130Z | 2026-04-16T12:30:36.466Z |
| CVE-2024-4867 |
5.4 (3.1)
|
Cross-Site Scripting via Developer Portal in WSO2 API … |
WSO2 |
WSO2 API Manager |
2026-04-16T09:32:40.941Z | 2026-04-16T12:30:42.568Z |
| CVE-2026-23772 |
7.3 (3.1)
|
Dell Storage Manager - Replay Manager for Microso… |
Dell |
Storage Manager |
2026-04-16T08:30:56.774Z | 2026-04-17T03:55:13.852Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-41113 |
8.1 (3.1)
|
sagredo qmail before 2026.04.07 allows tls_quit r… |
sagredo |
qmail |
2026-04-16T22:02:10.225Z | 2026-04-18T20:09:47.901Z |
| CVE-2026-40308 |
8.8 (4.0)
|
My Calendar: Unauthenticated Information Disclosure (I… |
joedolson |
my-calendar |
2026-04-16T21:30:52.401Z | 2026-04-17T12:32:26.622Z |
| CVE-2026-40249 |
6.9 (4.0)
|
free5gc UDR fail-open request handling in PolicyDataSu… |
free5gc |
free5gc |
2026-04-16T21:59:36.282Z | 2026-04-18T02:47:28.094Z |
| CVE-2026-40248 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:57:13.101Z | 2026-04-20T15:00:17.552Z |
| CVE-2026-40247 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:54:04.151Z | 2026-04-17T18:44:09.831Z |
| CVE-2026-40246 |
8.7 (4.0)
|
free5gc UDR improper path validation allows unauthenti… |
free5gc |
free5gc |
2026-04-16T21:40:03.598Z | 2026-04-18T02:46:14.355Z |
| CVE-2026-40170 |
7.5 (3.1)
|
ngtcp2 has a qlog transport parameter serialization st… |
ngtcp2 |
ngtcp2 |
2026-04-16T21:34:07.610Z | 2026-04-20T15:00:26.193Z |
| CVE-2026-39313 |
8.7 (4.0)
|
MCP-Framework: Unbounded memory allocation in readRequ… |
QuantGeekDev |
mcp-framework |
2026-04-16T21:24:27.328Z | 2026-04-17T18:46:07.726Z |
| CVE-2026-35469 |
8.7 (4.0)
|
SpdyStream: DOS on CRI |
moby |
spdystream |
2026-04-16T21:19:23.516Z | 2026-04-17T12:37:27.329Z |
| CVE-2026-34164 |
4.9 (3.1)
|
Valtimo: Sensitive data exposure through inbox message… |
valtimo-platform |
valtimo |
2026-04-16T21:17:35.472Z | 2026-04-18T02:44:44.369Z |
| CVE-2026-33472 |
4.8 (3.1)
|
Cryptomator Hub OAuth token exchange HTTP downgrade vi… |
cryptomator |
cryptomator |
2026-04-16T21:12:37.076Z | 2026-04-20T15:00:33.905Z |
| CVE-2026-40901 |
7.5 (4.0)
|
DataEase: Quartz Deserialization → Remote Code Execution |
dataease |
dataease |
2026-04-16T20:57:45.978Z | 2026-04-17T18:47:00.448Z |
| CVE-2026-40900 |
8.7 (4.0)
|
DataEase has SQL Injection via Stacked Queries |
dataease |
dataease |
2026-04-16T20:53:27.788Z | 2026-04-17T12:38:32.676Z |
| CVE-2026-40899 |
8.3 (4.0)
|
DataEase has an Arbitrary File Read Vulnerability |
dataease |
dataease |
2026-04-16T19:48:44.201Z | 2026-04-18T02:43:14.720Z |
| CVE-2026-33207 |
8.6 (4.0)
|
DataEase SQL Injection Vulnerability |
dataease |
dataease |
2026-04-16T19:37:36.197Z | 2026-04-20T15:00:41.415Z |
| CVE-2026-33122 |
8.6 (4.0)
|
DataEase has SQL Injection via Datasource Management |
dataease |
dataease |
2026-04-16T19:24:03.195Z | 2026-04-17T18:47:44.791Z |
| CVE-2025-54502 |
7.1 (4.0)
|
Incorrect use of boot service in the AMD Platform… |
AMD |
AMD EPYC™ 9004 Series Processors |
2026-04-16T18:46:13.377Z | 2026-04-17T03:55:16.268Z |
| CVE-2026-6442 |
8.3 (3.1)
|
Improper Command Detection Logic Allows RCE in Cortex … |
Snowflake |
Cortex Code CLI |
2026-04-16T18:43:21.181Z | 2026-04-16T18:54:58.366Z |
| CVE-2026-33121 |
8.7 (4.0)
|
DataEase has SQL Injection via Datasource Save Flow |
dataease |
dataease |
2026-04-16T18:16:02.485Z | 2026-04-16T18:34:54.187Z |
| CVE-2026-33084 |
8.7 (4.0)
|
DataEase has SQL Injection through its getFieldEnumObj… |
dataease |
dataease |
2026-04-16T18:14:07.316Z | 2026-04-18T02:40:47.771Z |
| CVE-2025-54510 |
5.9 (4.0)
|
A missing lock verification in AMD Secure Process… |
AMD |
AMD EPYC™ 9004 Series Processors |
2026-04-16T18:44:10.182Z | 2026-04-16T19:10:19.002Z |
| CVE-2025-43937 |
6.6 (3.1)
|
Dell PowerScale OneFS, versions prior to 9.12.0.0… |
Dell |
PowerScale OneFS |
2026-04-16T18:03:08.750Z | 2026-04-16T18:51:41.562Z |
| CVE-2025-43935 |
4.4 (3.1)
|
Dell PowerScale OneFS, versions prior to 9.12.0.0… |
Dell |
PowerScale OneFS |
2026-04-16T17:59:04.315Z | 2026-04-16T19:38:28.840Z |
| CVE-2023-20585 |
5.6 (4.0)
|
Insufficient checks of the RMP on host buffer acc… |
AMD |
AMD EPYC™ 7003 Series Processors |
2026-04-16T18:42:28.281Z | 2026-04-16T19:12:06.991Z |
| CVE-2026-41082 |
7.3 (3.1)
|
In OCaml opam before 2.5.1, a .install field cont… |
OCaml |
opam |
2026-04-16T17:32:40.068Z | 2026-04-21T09:32:52.152Z |
| CVE-2026-33083 |
8.7 (4.0)
|
DataEase has SQL Injection in Order By Clause |
dataease |
dataease |
2026-04-16T17:52:37.255Z | 2026-04-16T19:39:25.443Z |
| CVE-2026-33082 |
8.7 (4.0)
|
DataEase: SQL Injection in v2 Dataset Export |
dataease |
dataease |
2026-04-16T17:39:37.894Z | 2026-04-16T18:41:46.111Z |
| CVE-2026-2336 |
8.7 (4.0)
|
Weak webstax_auth Cookie Authentication Allows Privile… |
Microchip |
IStaX |
2026-04-16T17:02:06.352Z | 2026-04-16T17:34:39.672Z |
| CVE-2026-27820 |
1.7 (4.0)
|
zlib: Buffer Overflow in Zlib::GzipReader ungetc via l… |
ruby |
zlib |
2026-04-16T17:27:48.944Z | 2026-04-16T18:20:21.451Z |
| CVE-2026-24749 |
5.3 (3.1)
|
Silverstripe Assets Module has a DBFile::getURL() perm… |
silverstripe |
silverstripe-assets |
2026-04-16T17:08:59.133Z | 2026-04-18T02:36:26.887Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mh3g-vpxv-m2cr |
4.3 (3.1)
|
The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPre… | 2026-04-14T09:30:45Z | 2026-04-14T09:30:45Z |
| ghsa-jv22-34xc-w9x6 |
9.1 (3.1)
|
Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain config… | 2026-04-14T09:30:45Z | 2026-04-16T15:31:29Z |
| ghsa-j648-xxf5-44cv |
7.5 (3.1)
|
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can occur due… | 2026-04-14T09:30:45Z | 2026-04-14T21:31:45Z |
| ghsa-gcj8-76p4-g2fq |
4.3 (3.1)
|
Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code | 2026-04-14T09:30:45Z | 2026-04-14T23:42:00Z |
| ghsa-24c7-prh7-m3g7 |
7.1 (3.1)
5.1 (4.0)
|
A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < … | 2026-04-14T09:30:45Z | 2026-04-14T09:30:45Z |
| ghsa-vv4w-99g8-93pp |
3.7 (3.1)
6.3 (4.0)
|
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter… | 2026-04-14T09:30:44Z | 2026-04-14T09:30:44Z |
| ghsa-qw84-4pc7-fxvw |
8.8 (3.1)
8.7 (4.0)
|
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do no… | 2026-04-14T09:30:44Z | 2026-04-14T09:30:44Z |
| ghsa-7f3f-wq83-6q76 |
7.3 (3.1)
6.9 (4.0)
|
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected a… | 2026-04-14T09:30:44Z | 2026-04-14T09:30:44Z |
| ghsa-3969-r7gw-3f9q |
6.5 (3.1)
|
The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execut… | 2026-04-14T09:30:44Z | 2026-04-14T09:30:44Z |
| ghsa-vw96-fcx4-fx55 |
7.2 (3.1)
|
The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPre… | 2026-04-14T06:31:19Z | 2026-04-14T06:31:19Z |
| ghsa-rxq5-998f-fp45 |
6.4 (3.1)
|
The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the woolentor_… | 2026-04-14T06:31:19Z | 2026-04-14T06:31:19Z |
| ghsa-gpxf-gw3r-8vx4 |
4.4 (3.1)
|
The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to… | 2026-04-14T06:31:19Z | 2026-04-14T06:31:19Z |
| ghsa-99qg-rjrm-54j5 |
6.4 (3.1)
|
The Surbma | Booking.com Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… | 2026-04-14T06:31:18Z | 2026-04-14T06:31:18Z |
| ghsa-rvmc-gf2q-j9mw |
5.0 (3.1)
|
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-fwjv-3fw4-7x83 |
6.1 (3.1)
|
Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated … | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-fg5q-rjfh-rr88 |
6.5 (3.1)
|
Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authe… | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-fcmf-hc7m-63gh |
9.1 (3.1)
|
The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing ca… | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-9jcw-cw9q-r69r |
7.1 (3.1)
|
Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an … | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-73v2-xp42-4vcq |
7.2 (3.1)
|
The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the M… | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-6gj4-hcqg-pjc8 |
7.2 (3.1)
|
The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the `block_name` parame… | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-4c58-m4cg-6h2f |
6.5 (3.1)
|
During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns spe… | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-3fpc-x8cf-v594 |
7.5 (3.1)
|
The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT)… | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-2m83-cjg7-5x73 |
9.8 (3.1)
|
A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote c… | 2026-04-14T03:31:40Z | 2026-04-14T03:31:40Z |
| ghsa-76hw-p97h-883f |
6.5 (3.1)
|
gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall | 2026-04-14T01:11:30Z | 2026-04-15T21:00:58Z |
| ghsa-r4q5-vmmm-2653 |
6.9 (4.0)
|
follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets | 2026-04-14T01:11:11Z | 2026-04-14T01:11:11Z |
| ghsa-527g-3w9m-29hv |
4.8 (3.1)
|
mitmproxy has an LDAP Injection | 2026-04-14T01:08:52Z | 2026-04-15T21:14:34Z |
| ghsa-cmxv-58fp-fm3g |
6.8 (3.1)
|
AsyncHttpClient leaks authorization credentialsto untrusted domains on cross-origin redirects | 2026-04-14T01:07:42Z | 2026-04-15T21:00:53Z |
| ghsa-9pm8-vwc5-w2hm |
2.1 (4.0)
|
Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and dele… | 2026-04-14T01:07:01Z | 2026-04-14T01:07:01Z |
| ghsa-rh42-6rj2-xwmc |
2.0 (3.1)
|
Kimai leaks API Token Hash via Invoice Twig Template | 2026-04-14T01:06:25Z | 2026-04-14T01:06:25Z |
| ghsa-3jp4-mhh4-gcgr |
0.0 (3.1)
|
Kimai has an Open Redirect via Unvalidated RelayState in SAML ACS Handler | 2026-04-14T01:06:06Z | 2026-04-14T01:06:06Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-324 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLit… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:15.002754Z |
| pysec-2020-323 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determinin… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:14.801373Z |
| pysec-2020-322 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:14.570909Z |
| pysec-2020-321 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorF… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:14.366685Z |
| pysec-2020-320 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` ar… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:14.101977Z |
| pysec-2020-319 |
|
In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not … | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:13.891462Z |
| pysec-2020-318 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:13.671465Z |
| pysec-2020-317 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in T… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:13.455948Z |
| pysec-2020-316 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:13.253783Z |
| pysec-2020-315 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:13.201827Z |
| pysec-2020-314 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` does not validate that … | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:13.149576Z |
| pysec-2020-313 |
|
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:13.097348Z |
| pysec-2020-312 |
|
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:13.010994Z |
| pysec-2020-311 |
|
In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` … | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:12.960487Z |
| pysec-2020-310 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation o… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:12.907152Z |
| pysec-2020-309 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmpty… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:12.701793Z |
| pysec-2020-308 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` c… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:12.446415Z |
| pysec-2020-307 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlp… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:12.356862Z |
| pysec-2020-306 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `d… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:12.260463Z |
| pysec-2020-305 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Swit… | tensorflow-gpu | 2020-09-25T19:15:00Z | 2021-12-09T06:35:12.169887Z |
| pysec-2020-294 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.930382Z |
| pysec-2020-293 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.849481Z |
| pysec-2020-292 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.741009Z |
| pysec-2020-291 |
|
In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.650264Z |
| pysec-2020-290 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite sav… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.437178Z |
| pysec-2020-289 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLit… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.227280Z |
| pysec-2020-288 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determinin… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.041754Z |
| pysec-2020-287 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.836592Z |
| pysec-2020-286 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorF… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.621580Z |
| pysec-2020-285 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` ar… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.433318Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-1012 | Malicious code in ultimates-express (npm) | 2026-02-24T14:01:31Z | 2026-03-19T12:23:24Z |
| mal-2026-1009 | Malicious code in express-soaps (npm) | 2026-02-24T14:01:31Z | 2026-03-19T12:23:20Z |
| mal-2026-1004 | Malicious code in request-httpx-9 (PyPI) | 2026-02-24T09:11:42Z | 2026-02-24T09:11:42Z |
| mal-2026-1040 | Malicious code in react-markdown-canvas (npm) | 2026-02-23T22:01:02Z | 2026-03-04T00:15:19Z |
| mal-2026-1002 | Malicious code in newrubylogger (RubyGems) | 2026-02-23T20:50:29Z | 2026-02-23T20:50:29Z |
| mal-2026-1003 | Malicious code in cnnct-eaas-corre (PyPI) | 2026-02-23T16:00:12Z | 2026-02-23T16:00:12Z |
| mal-2026-1001 | Malicious code in request-httpx-4 (PyPI) | 2026-02-23T12:37:17Z | 2026-02-23T12:37:17Z |
| mal-2026-1041 | Malicious code in secure-monkey (npm) | 2026-02-23T11:30:57Z | 2026-03-01T20:43:47Z |
| mal-2026-1000 | Malicious code in scraper-npm (PyPI) | 2026-02-23T08:59:49Z | 2026-02-23T09:51:45Z |
| mal-2026-999 | Malicious code in react-dropzone-truffle (npm) | 2026-02-23T02:22:35Z | 2026-03-19T12:23:22Z |
| mal-2026-997 | Malicious code in npm-security-testing (npm) | 2026-02-23T02:20:31Z | 2026-02-23T04:21:34Z |
| mal-2026-998 | Malicious code in rbxm-tools (npm) | 2026-02-23T02:14:37Z | 2026-02-23T04:21:35Z |
| mal-2026-986 | Malicious code in en-thrift-internal (npm) | 2026-02-22T21:50:01Z | 2026-02-26T01:40:03Z |
| mal-2026-985 | Malicious code in conduit-utils (npm) | 2026-02-22T20:45:43Z | 2026-02-23T04:21:32Z |
| mal-2026-994 | Malicious code in vl-ui-code-preview (npm) | 2026-02-22T20:44:05Z | 2026-02-23T04:21:36Z |
| mal-2026-995 | Malicious code in vl-ui-contact-card (npm) | 2026-02-22T20:34:24Z | 2026-02-23T04:21:36Z |
| mal-2026-988 | Malicious code in vl-ui-action-group (npm) | 2026-02-22T20:34:16Z | 2026-02-23T04:21:36Z |
| mal-2026-992 | Malicious code in vl-ui-button (npm) | 2026-02-22T20:34:14Z | 2026-02-23T04:21:36Z |
| mal-2026-991 | Malicious code in vl-ui-breadcrumb (npm) | 2026-02-22T20:34:10Z | 2026-02-23T04:21:36Z |
| mal-2026-990 | Malicious code in vl-ui-body (npm) | 2026-02-22T20:34:10Z | 2026-02-23T04:21:36Z |
| mal-2026-993 | Malicious code in vl-ui-checkbox (npm) | 2026-02-22T20:34:08Z | 2026-02-23T04:21:36Z |
| mal-2026-987 | Malicious code in vl-ui-accessibility (npm) | 2026-02-22T20:10:05Z | 2026-02-23T04:21:36Z |
| mal-2026-989 | Malicious code in vl-ui-alert (npm) | 2026-02-22T19:59:59Z | 2026-02-23T04:21:36Z |
| mal-2026-984 | Malicious code in myasicapi (PyPI) | 2026-02-22T19:42:08Z | 2026-02-22T19:42:08Z |
| mal-2026-983 | Malicious code in tensorflow-opt (PyPI) | 2026-02-22T16:53:45Z | 2026-02-22T16:53:45Z |
| mal-2026-982 | Malicious code in trunket-dev-driver (PyPI) | 2026-02-22T14:51:28Z | 2026-02-22T14:51:28Z |
| mal-2026-981 | Malicious code in dt-fe-t2d-marketplace (npm) | 2026-02-22T07:22:23Z | 2026-02-23T04:21:32Z |
| mal-2026-980 | Malicious code in the-storyverse (npm) | 2026-02-22T06:15:43Z | 2026-02-23T04:21:36Z |
| mal-2026-979 | Malicious code in home-robot (PyPI) | 2026-02-22T04:48:51Z | 2026-02-22T04:48:51Z |
| mal-2026-978 | Malicious code in microsoft-cms-client (npm) | 2026-02-21T17:38:28Z | 2026-02-25T16:43:01Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1120 | Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial of Service | 2025-05-21T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1119 | Drupal Produkte: Mehrere Schwachstellen | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1118 | OWASP ModSecurity: Schwachstelle ermöglicht Denial of Service | 2025-05-21T22:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1117 | GitLab: Mehrere Schwachstellen | 2025-05-21T22:00:00.000+00:00 | 2025-05-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1116 | Cisco Unified Communications Produkte: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1115 | Mattermost: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-05-21T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1114 | Linux Kernel: Mehrere Schwachstellen | 2025-05-20T22:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-1113 | VMware Produkte: Mehrere Schwachstellen | 2025-05-20T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1112 | Arista EOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-20T22:00:00.000+00:00 | 2025-05-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1111 | Atlassian Jira: Mehrere Schwachstellen | 2025-05-20T22:00:00.000+00:00 | 2025-05-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1110 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-05-20T22:00:00.000+00:00 | 2025-05-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1109 | Mitel OpenScape Xpressions: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-20T22:00:00.000+00:00 | 2025-05-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1108 | Atlassian Crucible: Schwachstelle ermöglicht Denial of Service | 2025-05-20T22:00:00.000+00:00 | 2025-05-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1107 | TYPO3 Extensions: Mehrere Schwachstellen | 2025-05-19T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1106 | TYPO3 Core: Mehrere Schwachstellen | 2025-05-19T22:00:00.000+00:00 | 2025-05-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1105 | VMware Cloud Foundation: Mehrere Schwachstellen | 2025-05-19T22:00:00.000+00:00 | 2025-05-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1104 | Ivanti Neurons for ITSM: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-05-19T22:00:00.000+00:00 | 2025-05-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1103 | Broadcom Automic Automation: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-19T22:00:00.000+00:00 | 2025-05-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1102 | OpenCTI: Schwachstelle ermöglicht Denial of Service | 2025-05-19T22:00:00.000+00:00 | 2025-05-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1101 | IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service | 2025-05-19T22:00:00.000+00:00 | 2025-05-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1100 | Lexmark Multifunction Printer: Schwachstelle ermöglicht Codeausführung | 2025-05-19T22:00:00.000+00:00 | 2025-05-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1099 | VMware Tanzu Spring Security: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-19T22:00:00.000+00:00 | 2025-06-26T22:00:00.000+00:00 |
| wid-sec-w-2025-1098 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-05-18T22:00:00.000+00:00 | 2026-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1097 | Mozilla Firefox / Thunderbird: Mehrere Schwachstellen | 2025-05-18T22:00:00.000+00:00 | 2025-06-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1096 | Grafana: Schwachstelle ermöglicht Cross-Site Scripting | 2025-05-18T22:00:00.000+00:00 | 2025-06-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1095 | HCL Domino Volt und Leap: Mehrere Schwachstellen | 2025-05-18T22:00:00.000+00:00 | 2025-05-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1094 | QT: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-18T22:00:00.000+00:00 | 2025-05-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1093 | IBM Security Guardium: Schwachstelle ermöglicht Manipulation von Dateien | 2025-05-18T22:00:00.000+00:00 | 2025-05-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1092 | D-LINK DAP-2695 Router: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-05-18T22:00:00.000+00:00 | 2025-05-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1091 | Netgate pfSense: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-05-18T22:00:00.000+00:00 | 2025-05-18T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-147-04 | Siemens JT2Go and Teamcenter Visualization | 2021-05-27T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| icsa-21-147-03 | MesaLabs AmegaView | 2021-05-27T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| icsa-21-147-02 | Johnson Controls Sensormatic Electronics VideoEdge | 2021-05-27T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| icsa-21-147-01 | GENIVI Alliance DLT | 2021-05-27T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| icsa-21-145-02 | Rockwell Automation Micro800 and MicroLogix 1400 | 2021-05-25T00:00:00.000000Z | 2021-05-25T00:00:00.000000Z |
| icsa-21-145-01 | Datakit Libraries bundled in Luxion KeyShot | 2021-05-25T00:00:00.000000Z | 2021-05-25T00:00:00.000000Z |
| icsa-21-138-01 | ICSA-21-138-01_Emerson Rosemount X-STREAM | 2021-05-18T00:00:00.000000Z | 2021-05-18T00:00:00.000000Z |
| icsa-21-040-06 | ICSA-21-040-06_Siemens JT2Go and Teamcenter Visualization (Update A) | 2021-05-17T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-133-04 | OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5 | 2021-05-13T00:00:00.000000Z | 2021-05-13T00:00:00.000000Z |
| icsa-21-133-03 | OPC Foundation UA Products Built with .NET Framework | 2021-05-13T00:00:00.000000Z | 2021-05-13T00:00:00.000000Z |
| icsa-21-133-02 | Johnson Controls Sensormatic Tyco AI | 2021-05-13T00:00:00.000000Z | 2021-05-13T00:00:00.000000Z |
| icsa-21-133-01 | Rockwell Automation Connected Components Workbench | 2021-05-13T00:00:00.000000Z | 2021-05-13T00:00:00.000000Z |
| icsa-22-132-05 | Siemens Industrial PCs and CNC devices | 2021-05-11T00:00:00.000000Z | 2022-12-13T00:00:00.000000Z |
| icsa-21-131-15 | Siemens SIMATIC S7-1500 | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-14 | Siemens SCALANCE W1750D (Update B) | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-13 | Siemens SINAMICS Medium Voltage Products Telnet (Update A) | 2021-05-11T00:00:00.000000Z | 2021-08-10T00:00:00.000000Z |
| icsa-21-131-12 | Siemens SIMATIC SmartVNC HMI WinCC Products (Update B) | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-11 | Siemens SIMATIC UltraVNC HMI WinCC Products | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-10 | Siemens SCALANCE XM-400 and XR-500 Devices | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-09 | Siemens Mendix Excel Importer Module | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-08 | Siemens Tecnomatix Plant Simulation | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-07 | Siemens SIMATIC NET CP343-1 | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-06 | Siemens SNMP Implementation of WinCC Runtime | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-05 | Siemens Mendix Database Replication Module | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-04 | Siemens SINAMICS Medium Voltage Products Remote Access (Update B) | 2021-05-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-131-03 | Siemens Linux-based Products (Update J) | 2021-05-11T00:00:00.000000Z | 2023-03-14T00:00:00.000000Z |
| icsa-21-131-02 | Mitsubishi Electric GOT and Tension Controller (Update A) | 2021-05-11T00:00:00.000000Z | 2022-01-20T00:00:00.000000Z |
| icsa-21-131-01 | Omron CX-One | 2021-05-11T00:00:00.000000Z | 2021-05-11T00:00:00.000000Z |
| icsa-21-124-02 | Delta Electronics CNCSoft ScreenEditor | 2021-05-04T00:00:00.000000Z | 2021-05-04T00:00:00.000000Z |
| icsa-21-124-01 | Advantech WISE-PaaS RMM | 2021-05-04T00:00:00.000000Z | 2021-05-04T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190417-ces-tvcs-dos | Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Service Vulnerability | 2019-04-17T16:00:00+00:00 | 2019-04-17T16:00:00+00:00 |
| cisco-sa-20190417-cdc-hijack | Cisco Directory Connector Search Order Hijacking Vulnerability | 2019-04-17T16:00:00+00:00 | 2019-04-17T16:00:00+00:00 |
| cisco-sa-20190417-asr9k-exr | Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability | 2019-04-17T16:00:00+00:00 | 2019-04-17T16:00:00+00:00 |
| cisco-sa-20190417-aironet-shell | Cisco Aironet Series Access Points Development Shell Access Vulnerability | 2019-04-17T16:00:00+00:00 | 2019-04-17T16:00:00+00:00 |
| cisco-sa-20190417-air-ap-traversal | Cisco Aironet Series Access Points Directory Traversal Vulnerability | 2019-04-17T16:00:00+00:00 | 2019-04-17T16:00:00+00:00 |
| cisco-sa-20190417-air-ap-dos | Cisco Aironet Series Access Points Denial of Service Vulnerability | 2019-04-17T16:00:00+00:00 | 2020-05-11T15:39:50+00:00 |
| cisco-sa-20190417-air-ap-cmdinj | Cisco Aironet Series Access Points Command Injection Vulnerability | 2019-04-17T16:00:00+00:00 | 2019-04-17T16:00:00+00:00 |
| cisco-sa-20190417-aap-dos | Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability | 2019-04-17T16:00:00+00:00 | 2019-04-17T16:00:00+00:00 |
| cisco-sa-20190404-rv-xss | Cisco Small Business RV320 and RV325 Routers Online Help Reflected Cross-Site Scripting Vulnerability | 2019-04-04T14:00:00+00:00 | 2019-04-15T17:27:44+00:00 |
| cisco-sa-20190404-rv-weak-encrypt | Cisco Small Business RV320 and RV325 Routers Weak Credential Encryption Vulnerability | 2019-04-04T14:00:00+00:00 | 2019-04-04T14:00:00+00:00 |
| cisco-sa-20190327-xeid | Cisco IOS XE Software Information Disclosure Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-xecmd | Cisco IOS XE Software Command Injection Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-sms-dos | Cisco IOS and IOS XE Software Short Message Service Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-rsp3-ospf | Cisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-pnp-cert | Cisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-pfrv3 | Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-nbar | Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-nat64 | Cisco IOS Software NAT64 Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-mgmtacl | Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-isdn | Cisco IOS and IOS XE Software ISDN Interface Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-ipsla-dos | Cisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-iosxe-privesc | Cisco IOS XE Software Privilege Escalation Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-iosxe-pe | Cisco IOS XE Software Privilege Escalation Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-iosxe-cmdinject | Cisco IOS XE Software Command Injection Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-iosxe-cmdinj | Cisco IOS XE Software Command Injection Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-ios-infoleak | Cisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-04-01T15:45:00+00:00 |
| cisco-sa-20190327-info | Cisco IOS and IOS XE Software Information Disclosure Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-evss | Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-eta-dos | Cisco IOS XE Software Encrypted Traffic Analytics Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| cisco-sa-20190327-cmp-dos | Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability | 2019-03-27T16:00:00+00:00 | 2019-03-27T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-40079 | riscv, bpf: Sign extend struct ops return values properly | 2025-10-02T00:00:00.000Z | 2025-10-29T01:05:01.000Z |
| msrc_cve-2025-40078 | bpf: Explicitly check accesses to bpf_sock_addr | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:11.000Z |
| msrc_cve-2025-40077 | f2fs: fix to avoid overflow while left shift operation | 2025-10-02T00:00:00.000Z | 2025-10-29T01:03:32.000Z |
| msrc_cve-2025-40075 | tcp_metrics: use dst_dev_net_rcu() | 2025-10-02T00:00:00.000Z | 2026-03-31T14:51:25.000Z |
| msrc_cve-2025-40074 | ipv4: start using dst_dev_rcu() | 2025-10-02T00:00:00.000Z | 2026-03-31T14:50:15.000Z |
| msrc_cve-2025-40071 | tty: n_gsm: Don't block input queue by waiting MSC | 2025-10-02T00:00:00.000Z | 2025-10-29T01:05:06.000Z |
| msrc_cve-2025-40068 | fs: ntfs3: Fix integer overflow in run_unpack() | 2025-10-02T00:00:00.000Z | 2025-10-29T01:04:55.000Z |
| msrc_cve-2025-40065 | RISC-V: KVM: Write hgatp register with valid mode bits | 2025-10-02T00:00:00.000Z | 2026-03-31T14:51:00.000Z |
| msrc_cve-2025-40064 | smc: Fix use-after-free in __pnet_find_base_ndev(). | 2025-10-02T00:00:00.000Z | 2026-03-31T14:50:38.000Z |
| msrc_cve-2025-40061 | RDMA/rxe: Fix race in do_task() when draining | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:05.000Z |
| msrc_cve-2025-40060 | coresight: trbe: Return NULL pointer for allocation failures | 2025-10-02T00:00:00.000Z | 2025-10-29T01:03:16.000Z |
| msrc_cve-2025-40057 | ptp: Add a upper bound on max_vclocks | 2025-10-02T00:00:00.000Z | 2026-03-31T14:51:50.000Z |
| msrc_cve-2025-40056 | vhost: vringh: Fix copy_to_iter return value check | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:59.000Z |
| msrc_cve-2025-40055 | ocfs2: fix double free in user_cluster_connect() | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:49.000Z |
| msrc_cve-2025-40053 | net: dlink: handle copy_thresh allocation failure | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:38.000Z |
| msrc_cve-2025-40052 | smb: client: fix crypto buffers in non-linear memory | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:22.000Z |
| msrc_cve-2025-40051 | vhost: vringh: Modify the return value check | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:54.000Z |
| msrc_cve-2025-40049 | Squashfs: fix uninit-value in squashfs_get_parent | 2025-10-02T00:00:00.000Z | 2025-10-29T01:04:20.000Z |
| msrc_cve-2025-40048 | uio_hv_generic: Let userspace take care of interrupt mask | 2025-10-02T00:00:00.000Z | 2025-10-29T01:04:10.000Z |
| msrc_cve-2025-40044 | fs: udf: fix OOB read in lengthAllocDescs handling | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:16.000Z |
| msrc_cve-2025-40043 | net: nfc: nci: Add parameter validation for packet data | 2025-10-02T00:00:00.000Z | 2025-10-29T01:03:54.000Z |
| msrc_cve-2025-40042 | tracing: Fix race condition in kprobe initialization causing NULL pointer dereference | 2025-10-02T00:00:00.000Z | 2025-12-07T01:39:37.000Z |
| msrc_cve-2025-40040 | mm/ksm: fix flag-dropping behavior in ksm_madvise | 2025-10-02T00:00:00.000Z | 2026-03-03T14:57:39.000Z |
| msrc_cve-2025-40039 | ksmbd: Fix race condition in RPC handle list access | 2025-10-02T00:00:00.000Z | 2026-03-31T15:16:27.000Z |
| msrc_cve-2025-40038 | KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid | 2025-10-02T00:00:00.000Z | 2025-10-29T01:01:49.000Z |
| msrc_cve-2025-40036 | misc: fastrpc: fix possible map leak in fastrpc_put_args | 2025-10-02T00:00:00.000Z | 2025-10-29T01:04:04.000Z |
| msrc_cve-2025-40035 | Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:33.000Z |
| msrc_cve-2025-40033 | remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() | 2025-10-02T00:00:00.000Z | 2025-10-29T01:03:37.000Z |
| msrc_cve-2025-40032 | PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release | 2025-10-02T00:00:00.000Z | 2025-10-29T01:03:26.000Z |
| msrc_cve-2025-40030 | pinctrl: check the return value of pinmux_ops::get_function_name() | 2025-10-02T00:00:00.000Z | 2025-10-29T01:02:27.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14587-1 | libmozjs-115-0-115.15.0-3.1 on GA media | 2024-12-16T00:00:00Z | 2024-12-16T00:00:00Z |
| opensuse-su-2024:14586-1 | gstreamer-plugins-good-1.24.10-3.1 on GA media | 2024-12-16T00:00:00Z | 2024-12-16T00:00:00Z |
| opensuse-su-2024:14585-1 | cloudflared-2024.12.1-1.1 on GA media | 2024-12-16T00:00:00Z | 2024-12-16T00:00:00Z |
| opensuse-su-2024:14584-1 | MozillaThunderbird-128.5.2-1.1 on GA media | 2024-12-16T00:00:00Z | 2024-12-16T00:00:00Z |
| opensuse-su-2024:14583-1 | MozillaFirefox-133.0.3-1.1 on GA media | 2024-12-16T00:00:00Z | 2024-12-16T00:00:00Z |
| opensuse-su-2024:14582-1 | socat-1.8.0.2-1.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:14581-1 | python312-3.12.8-1.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:14580-1 | liboqs-devel-0.12.0-1.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:14579-1 | gdk-pixbuf-loader-libheif-1.19.5-2.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:14578-1 | gstreamer-plugins-good-1.24.10-2.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:14577-1 | gstreamer-plugins-base-1.24.10-2.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:14576-1 | gstreamer-1.24.10-2.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:14575-1 | curl-8.11.1-1.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:14574-1 | chromedriver-131.0.6778.139-1.1 on GA media | 2024-12-13T00:00:00Z | 2024-12-13T00:00:00Z |
| opensuse-su-2024:0406-1 | Security update for chromium | 2024-12-12T10:40:34Z | 2024-12-12T10:40:34Z |
| opensuse-su-2024:0405-1 | Security update for chromium | 2024-12-12T10:36:26Z | 2024-12-12T10:36:26Z |
| opensuse-su-2024:14573-1 | teleport-17.0.5-1.1 on GA media | 2024-12-12T00:00:00Z | 2024-12-12T00:00:00Z |
| opensuse-su-2024:14572-1 | firefox-esr-128.5.1-1.1 on GA media | 2024-12-12T00:00:00Z | 2024-12-12T00:00:00Z |
| opensuse-su-2024:14571-1 | docker-stable-24.0.9_ce-4.1 on GA media | 2024-12-12T00:00:00Z | 2024-12-12T00:00:00Z |
| opensuse-su-2024:14570-1 | libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 on GA media | 2024-12-11T00:00:00Z | 2024-12-11T00:00:00Z |
| opensuse-su-2024:14569-1 | radare2-5.9.8-1.1 on GA media | 2024-12-11T00:00:00Z | 2024-12-11T00:00:00Z |
| opensuse-su-2024:14568-1 | python310-Django-5.1.4-1.1 on GA media | 2024-12-11T00:00:00Z | 2024-12-11T00:00:00Z |
| opensuse-su-2024:14567-1 | govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media | 2024-12-11T00:00:00Z | 2024-12-11T00:00:00Z |
| opensuse-su-2024:0402-1 | Security update for qt6-webengine | 2024-12-09T17:02:08Z | 2024-12-09T17:02:08Z |
| opensuse-su-2024:0400-1 | Security update for nanopb | 2024-12-09T11:02:14Z | 2024-12-09T11:02:14Z |
| opensuse-su-2024:0397-1 | Security update for radare2 | 2024-12-09T10:44:56Z | 2024-12-09T10:44:56Z |
| opensuse-su-2024:0396-1 | Security update for radare2 | 2024-12-09T10:44:54Z | 2024-12-09T10:44:54Z |
| opensuse-su-2024:14566-1 | squid-6.12-1.1 on GA media | 2024-12-09T00:00:00Z | 2024-12-09T00:00:00Z |
| opensuse-su-2024:14565-1 | python310-Django4-4.2.17-1.1 on GA media | 2024-12-09T00:00:00Z | 2024-12-09T00:00:00Z |
| opensuse-su-2024:14564-1 | lxd-5.21.1-2.1 on GA media | 2024-12-09T00:00:00Z | 2024-12-09T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:22014 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.2 | 2025-11-25T05:10:51+00:00 | 2026-03-26T12:22:05+00:00 |
| rhsa-2025:22012 | Red Hat Security Advisory: buildah security update | 2025-11-25T05:03:24+00:00 | 2026-04-14T07:56:35+00:00 |
| rhsa-2025:21148 | Red Hat Security Advisory: Red Hat build of Cryostat 4.1.0: new RHEL 9 container image security update | 2025-11-25T02:09:04+00:00 | 2026-04-09T14:28:03+00:00 |
| rhsa-2025:22005 | Red Hat Security Advisory: go-rpm-macros security update | 2025-11-25T01:21:20+00:00 | 2026-03-24T13:16:39+00:00 |
| rhsa-2025:22004 | Red Hat Security Advisory: go-rpm-macros security update | 2025-11-25T01:11:08+00:00 | 2026-03-24T13:16:37+00:00 |
| rhsa-2025:22006 | Red Hat Security Advisory: kernel security update | 2025-11-25T00:47:13+00:00 | 2026-03-19T17:34:05+00:00 |
| rhsa-2025:21994 | Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage | 2025-11-24T19:34:28+00:00 | 2026-04-13T20:13:36+00:00 |
| rhsa-2025:21988 | Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release | 2025-11-24T17:31:18+00:00 | 2026-03-19T17:31:13+00:00 |
| rhsa-2025:21984 | Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release | 2025-11-24T17:11:01+00:00 | 2026-03-19T17:31:13+00:00 |
| rhsa-2025:21977 | Red Hat Security Advisory: libssh security update | 2025-11-24T17:08:07+00:00 | 2026-04-07T08:30:22+00:00 |
| rhsa-2025:21981 | Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release | 2025-11-24T16:47:41+00:00 | 2026-03-19T17:31:15+00:00 |
| rhsa-2025:21974 | Red Hat Security Advisory: mingw-expat security update | 2025-11-24T16:17:17+00:00 | 2026-04-13T20:13:35+00:00 |
| rhsa-2025:21976 | Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release | 2025-11-24T16:14:59+00:00 | 2026-03-19T17:31:12+00:00 |
| rhsa-2025:21968 | Red Hat Security Advisory: gimp security update | 2025-11-24T15:50:17+00:00 | 2026-03-18T03:12:08+00:00 |
| rhsa-2025:21964 | Red Hat Security Advisory: buildah security update | 2025-11-24T15:01:52+00:00 | 2026-04-14T07:56:31+00:00 |
| rhsa-2025:21933 | Red Hat Security Advisory: kernel security update | 2025-11-24T10:44:17+00:00 | 2026-04-13T11:13:47+00:00 |
| rhsa-2025:21939 | Red Hat Security Advisory: bind9.16 security update | 2025-11-24T10:36:41+00:00 | 2026-04-13T20:13:35+00:00 |
| rhsa-2025:21926 | Red Hat Security Advisory: kernel security update | 2025-11-24T10:33:16+00:00 | 2026-03-18T03:11:39+00:00 |
| rhsa-2025:21936 | Red Hat Security Advisory: valkey security update | 2025-11-24T09:46:26+00:00 | 2026-03-18T03:06:56+00:00 |
| rhsa-2025:21931 | Red Hat Security Advisory: kernel security update | 2025-11-24T09:38:32+00:00 | 2026-03-18T03:11:36+00:00 |
| rhsa-2025:21929 | Red Hat Security Advisory: RHSA 4.9.1 security and bug fix update | 2025-11-24T08:28:34+00:00 | 2026-03-23T15:46:38+00:00 |
| rhsa-2025:21920 | Red Hat Security Advisory: kernel-rt security update | 2025-11-24T06:25:11+00:00 | 2026-04-13T11:13:51+00:00 |
| rhsa-2025:21917 | Red Hat Security Advisory: kernel security update | 2025-11-24T02:50:01+00:00 | 2026-04-13T11:13:44+00:00 |
| rhsa-2025:21916 | Red Hat Security Advisory: valkey security update | 2025-11-24T02:05:30+00:00 | 2026-03-18T03:11:04+00:00 |
| rhsa-2025:21915 | Red Hat Security Advisory: ghostscript security update | 2025-11-24T02:04:55+00:00 | 2026-03-18T03:11:11+00:00 |
| rhsa-2025:21913 | Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update | 2025-11-21T21:19:46+00:00 | 2026-04-14T10:01:47+00:00 |
| rhsa-2025:21897 | Red Hat Security Advisory: Satellite 6.15.5.7 Async Update | 2025-11-20T21:27:37+00:00 | 2026-03-24T11:29:49+00:00 |
| rhsa-2025:21894 | Red Hat Security Advisory: Satellite 6.16.5.6 Async Update | 2025-11-20T21:22:30+00:00 | 2026-03-24T11:29:46+00:00 |
| rhsa-2025:21893 | Red Hat Security Advisory: Satellite 6.17.6.1 Async Update | 2025-11-20T21:18:54+00:00 | 2026-03-24T11:29:45+00:00 |
| rhsa-2025:21889 | Red Hat Security Advisory: bind security update | 2025-11-20T21:12:54+00:00 | 2026-04-13T20:13:34+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4268-1 | Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T19:33:47Z | 2025-11-26T19:33:47Z |
| suse-su-2025:4265-1 | Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T19:33:40Z | 2025-11-26T19:33:40Z |
| suse-su-2025:21147-1 | Security update for the Linux Kernel | 2025-11-26T15:59:00Z | 2025-11-26T15:59:00Z |
| suse-su-2025:21080-1 | Security update for the Linux Kernel | 2025-11-26T15:59:00Z | 2025-11-26T15:59:00Z |
| suse-su-2025:4264-1 | Security update for ruby2.5 | 2025-11-26T15:52:44Z | 2025-11-26T15:52:44Z |
| suse-su-2025:21180-1 | Security update for the Linux Kernel | 2025-11-26T15:35:38Z | 2025-11-26T15:35:38Z |
| suse-su-2025:4262-1 | Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T15:07:47Z | 2025-11-26T15:07:47Z |
| suse-su-2025:4261-1 | Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T15:07:28Z | 2025-11-26T15:07:28Z |
| suse-su-2025:2169-1 | Security update for yelp | 2025-11-26T14:47:36Z | 2025-11-26T14:47:36Z |
| suse-su-2025:21145-1 | Security update for curl | 2025-11-26T14:28:47Z | 2025-11-26T14:28:47Z |
| suse-su-2025:21077-1 | Security update for curl | 2025-11-26T14:28:47Z | 2025-11-26T14:28:47Z |
| suse-su-2025:21066-1 | Security update for sssd | 2025-11-26T14:26:51Z | 2025-11-26T14:26:51Z |
| suse-su-2025:21065-1 | Security update for unbound | 2025-11-26T14:26:20Z | 2025-11-26T14:26:20Z |
| suse-su-2025:4258-1 | Security update for python312 | 2025-11-26T13:44:40Z | 2025-11-26T13:44:40Z |
| suse-su-2025:4257-1 | Security update for python311 | 2025-11-26T13:43:01Z | 2025-11-26T13:43:01Z |
| suse-su-2025:4256-1 | Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) | 2025-11-26T13:04:23Z | 2025-11-26T13:04:23Z |
| suse-su-2025:4254-1 | Security update for dpdk | 2025-11-26T11:33:12Z | 2025-11-26T11:33:12Z |
| suse-su-2025:4255-1 | Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5) | 2025-11-26T09:35:19Z | 2025-11-26T09:35:19Z |
| suse-su-2025:4247-1 | Security update for sssd | 2025-11-26T08:56:55Z | 2025-11-26T08:56:55Z |
| suse-su-2025:4245-1 | Security update for buildah | 2025-11-26T08:39:12Z | 2025-11-26T08:39:12Z |
| suse-su-2025:4244-1 | Security update for amazon-ssm-agent | 2025-11-26T08:38:47Z | 2025-11-26T08:38:47Z |
| suse-su-2025:21144-1 | Security update for mysql-connector-java | 2025-11-26T08:13:19Z | 2025-11-26T08:13:19Z |
| suse-su-2025:4243-1 | Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP5) | 2025-11-25T22:06:17Z | 2025-11-25T22:06:17Z |
| suse-su-2025:4242-1 | Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4) | 2025-11-25T21:11:35Z | 2025-11-25T21:11:35Z |
| suse-su-2025:21052-1 | Security update for the Linux Kernel | 2025-11-25T18:51:32Z | 2025-11-25T18:51:32Z |
| suse-su-2025:4239-1 | Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP4) | 2025-11-25T17:04:05Z | 2025-11-25T17:04:05Z |
| suse-su-2025:21064-1 | Security update for the Linux Kernel | 2025-11-25T16:39:37Z | 2025-11-25T16:39:37Z |
| suse-su-2025:4237-1 | Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4) | 2025-11-25T16:04:17Z | 2025-11-25T16:04:17Z |
| suse-su-2025:4236-1 | Security update for curl | 2025-11-25T16:02:20Z | 2025-11-25T16:02:20Z |
| suse-su-2025:4233-1 | Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP4) | 2025-11-25T14:33:49Z | 2025-11-25T14:33:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2023:7876 | Moderate: opensc security update | 2023-12-19T00:00:00Z | 2023-12-20T12:50:29Z |
| alsa-2023:7841 | Important: gstreamer1-plugins-bad-free security update | 2023-12-14T00:00:00Z | 2023-12-15T09:13:53Z |
| alsa-2023:7836 | Moderate: avahi security update | 2023-12-14T00:00:00Z | 2023-12-15T09:22:34Z |
| alsa-2023:7791 | Important: gstreamer1-plugins-bad-free security update | 2023-12-13T00:00:00Z | 2023-12-14T09:39:25Z |
| alsa-2023:7790 | Important: postgresql:10 security update | 2023-12-13T00:00:00Z | 2023-12-22T09:34:58Z |
| alsa-2023:7785 | Important: postgresql:15 security update | 2023-12-13T00:00:00Z | 2023-12-22T09:57:59Z |
| alsa-2023:7784 | Important: postgresql security update | 2023-12-13T00:00:00Z | 2023-12-14T11:47:47Z |
| alsa-2023:7766 | Moderate: containernetworking-plugins security update | 2023-12-12T00:00:00Z | 2023-12-14T09:39:21Z |
| alsa-2023:7765 | Moderate: podman security update | 2023-12-12T00:00:00Z | 2023-12-14T09:39:39Z |
| alsa-2023:7764 | Moderate: buildah security update | 2023-12-12T00:00:00Z | 2023-12-14T09:39:24Z |
| alsa-2023:7763 | Moderate: runc security update | 2023-12-12T00:00:00Z | 2023-12-14T09:39:21Z |
| alsa-2023:7762 | Moderate: skopeo security update | 2023-12-12T00:00:00Z | 2023-12-14T09:39:24Z |
| alsa-2023:7754 | Moderate: pixman security update | 2023-12-12T00:00:00Z | 2023-12-14T09:39:30Z |
| alsa-2023:7753 | Moderate: fence-agents security update | 2023-12-12T00:00:00Z | 2023-12-15T09:52:30Z |
| alsa-2023:7747 | Moderate: libxml2 security update | 2023-12-12T00:00:00Z | 2023-12-14T09:39:26Z |
| alsa-2023:7732 | Important: tracker-miners security update | 2023-12-12T00:00:00Z | 2023-12-14T09:39:22Z |
| alsa-2023:7716 | Important: webkit2gtk3 security update | 2023-12-11T00:00:00Z | 2023-12-14T08:49:17Z |
| alsa-2023:7715 | Important: webkit2gtk3 security update | 2023-12-11T00:00:00Z | 2023-12-12T07:49:58Z |
| alsa-2023:7714 | Important: postgresql:12 security update | 2023-12-11T00:00:00Z | 2023-12-22T09:40:19Z |
| alsa-2023:7712 | Important: tracker-miners security update | 2023-12-11T00:00:00Z | 2023-12-12T07:53:08Z |
| alsa-2023:7711 | Moderate: apr security update | 2023-12-11T00:00:00Z | 2023-12-11T13:16:59Z |
| alsa-2023:7668 | Important: squid:4 security update | 2023-12-06T00:00:00Z | 2023-12-14T08:59:00Z |
| alsa-2023:7581 | Important: postgresql:13 security update | 2023-11-29T00:00:00Z | 2023-12-04T16:38:00Z |
| alsa-2023:7549 | Important: kernel security and bug fix update | 2023-11-28T00:00:00Z | 2023-12-04T01:02:19Z |
| alsa-2023:7508 | Important: firefox security update | 2023-11-27T00:00:00Z | 2023-11-29T17:25:43Z |
| alsa-2023:7507 | Important: firefox security update | 2023-11-27T00:00:00Z | 2023-11-29T17:30:13Z |
| alsa-2023:7501 | Important: thunderbird security update | 2023-11-27T00:00:00Z | 2023-11-29T17:32:56Z |
| alsa-2023:7500 | Important: thunderbird security update | 2023-11-27T00:00:00Z | 2023-11-29T17:38:00Z |
| alsa-2023:7467 | Moderate: samba security update | 2023-11-22T00:00:00Z | 2023-11-24T10:04:36Z |
| alsa-2023:7465 | Important: squid security update | 2023-11-22T00:00:00Z | 2023-11-23T08:38:27Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2021-1186 | Segv on unknown address in helper_uc_tracecode | 2021-09-01T00:00:37.265526Z | 2022-04-13T03:21:33.922164Z |
| osv-2021-1184 | UNKNOWN READ in ucl_array_append | 2021-09-01T00:00:25.788562Z | 2022-04-13T03:04:41.758531Z |
| osv-2021-1183 | UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi | 2021-09-01T00:00:21.323146Z | 2022-07-08T00:09:38.379641Z |
| osv-2021-1181 | Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco | 2021-08-31T00:00:29.155871Z | 2022-07-08T00:09:36.944195Z |
| osv-2021-1179 | UNKNOWN READ | 2021-08-30T00:00:39.163462Z | 2022-04-13T03:04:35.832327Z |
| osv-2021-1177 | Stack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector | 2021-08-29T00:01:18.789522Z | 2022-07-08T00:09:39.559498Z |
| osv-2021-1176 | Index-out-of-bounds in draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol | 2021-08-29T00:00:08.242884Z | 2022-07-08T00:09:40.094418Z |
| osv-2021-1174 | Heap-use-after-free in zend_string_release | 2021-08-28T00:00:14.689674Z | 2022-04-13T03:04:33.395251Z |
| osv-2021-1173 | UNKNOWN READ in luaG_getfuncline | 2021-08-28T00:00:12.122245Z | 2022-04-13T03:04:30.697967Z |
| osv-2021-1172 | UNKNOWN WRITE in snmp_add_var | 2021-08-27T00:00:41.017168Z | 2022-04-13T03:04:35.816547Z |
| osv-2021-1171 | Heap-buffer-overflow in luaG_runerror | 2021-08-27T00:00:11.241923Z | 2022-04-13T03:04:30.719580Z |
| osv-2021-1170 | Heap-buffer-overflow in exif_get_slong | 2021-08-26T00:00:49.024688Z | 2022-04-13T03:04:40.873645Z |
| osv-2021-1169 | UNKNOWN READ in exif_mnote_data_apple_load | 2021-08-26T00:00:07.418159Z | 2022-04-13T03:04:40.893998Z |
| osv-2021-1168 | Heap-buffer-overflow in exif_get_slong | 2021-08-25T00:01:25.325827Z | 2022-04-13T03:04:40.883862Z |
| osv-2021-1167 | Heap-buffer-overflow in snmp_add_var | 2021-08-25T00:01:21.513657Z | 2022-04-13T03:04:35.811191Z |
| osv-2021-1166 | Use-of-uninitialized-value in H5F_addr_decode_len | 2021-08-25T00:01:19.023498Z | 2022-04-13T03:04:43.193034Z |
| osv-2021-1161 | UNKNOWN READ in decode_ise | 2021-08-22T00:01:29.796636Z | 2022-04-13T03:04:40.493955Z |
| osv-2021-1160 | Heap-buffer-overflow in pe_valid_dll_name | 2021-08-22T00:01:21.561957Z | 2022-04-13T03:04:42.166443Z |
| osv-2021-1159 | UNKNOWN WRITE in hb_bit_set_invertible_t::set | 2021-08-22T00:00:24.931714Z | 2022-04-13T03:04:33.060992Z |
| osv-2021-1157 | Heap-use-after-free in TranslateRules | 2021-08-21T00:01:35.555020Z | 2022-07-03T00:04:14.728795Z |
| osv-2021-1153 | Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned | 2021-08-20T00:00:40.299081Z | 2022-04-13T03:27:39.250416Z |
| osv-2021-1152 | UNKNOWN READ in exif_mnote_data_apple_load | 2021-08-20T00:00:16.563182Z | 2022-04-13T03:04:40.863460Z |
| osv-2021-1150 | Heap-buffer-overflow in H5O__cont_decode | 2021-08-19T00:01:42.011700Z | 2022-04-13T03:04:43.171848Z |
| osv-2021-1149 | Heap-buffer-overflow in JS::Lexer::consume | 2021-08-19T00:01:39.960686Z | 2022-04-13T03:04:32.170615Z |
| osv-2021-1145 | Use-after-poison in JS::Reference::put_value | 2021-08-19T00:01:22.170463Z | 2022-04-13T03:04:32.186428Z |
| osv-2021-1143 | UNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend | 2021-08-19T00:00:37.149406Z | 2023-02-24T01:34:15.652409Z |
| osv-2021-1142 | Heap-buffer-overflow in exif_get_slong | 2021-08-17T00:02:03.206223Z | 2022-04-13T03:04:40.888904Z |
| osv-2021-1141 | Heap-use-after-free in TranslateLetter | 2021-08-17T00:01:54.252372Z | 2022-07-03T00:04:11.807830Z |
| osv-2021-1139 | UNKNOWN READ in exif_mnote_data_apple_load | 2021-08-17T00:00:46.311888Z | 2022-04-13T03:21:26.357825Z |
| osv-2021-1138 | Heap-buffer-overflow in exif_get_sshort | 2021-08-17T00:00:23.379322Z | 2022-04-13T03:04:40.836876Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-vault-2024-6468 | Vault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior | 2024-07-17T07:39:35.824Z | 2025-11-06T13:25:46.476Z |
| bit-gitlab-2024-2880 | Improper Access Control in GitLab | 2024-07-13T07:23:46.684Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5257 | Improper Access Control in GitLab | 2024-07-13T07:20:36.387Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5470 | Improper Access Control in GitLab | 2024-07-13T07:19:23.283Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6385 | Improper Access Control in GitLab | 2024-07-13T07:18:39.985Z | 2025-05-20T10:02:07.006Z |
| bit-node-2024-22018 | 2024-07-12T07:29:02.117Z | 2026-02-11T09:09:18.507Z | |
| bit-dotnet-2024-38095 | .NET and Visual Studio Denial of Service Vulnerability | 2024-07-12T07:17:04.616Z | 2025-05-20T10:02:07.006Z |
| bit-node-2024-22020 | 2024-07-11T07:28:44.706Z | 2026-02-11T09:09:18.507Z | |
| bit-gitlab-2024-2177 | Improper Restriction of Rendered UI Layers or Frames in GitLab | 2024-07-11T07:25:19.401Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-35227 | Discourse vulnerable to DoS through Onebox | 2024-07-09T08:44:00.861Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-35234 | Discourse vulnerable to stored-dom XSS via Facebook Oneboxes | 2024-07-09T08:43:42.054Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-36113 | Discourse missing authorization checks for suspending admins/moderators | 2024-07-09T08:43:25.553Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-36122 | Discourse doesn't limit reviewable user serializer payload | 2024-07-09T08:43:07.853Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-37157 | Discourse vulnerable to Server-Side Request Forgery via FastImage | 2024-07-09T08:42:49.752Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2024-37903 | Mastodon has improper authorship check on audience extension for existing posts | 2024-07-09T07:24:52.373Z | 2025-05-20T10:02:07.006Z |
| bit-apache-2024-39884 | Apache HTTP Server: source code disclosure with handlers configured via AddType | 2024-07-09T07:16:13.078Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24531 | Output of "go env" does not sanitize values in cmd/go | 2024-07-04T07:29:14.949Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2024-6375 | Missing authorization check may lead to shard key refinement | 2024-07-04T07:26:49.343Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2024-24791 | Denial of service due to improper 100-continue handling in net/http | 2024-07-04T07:19:32.455Z | 2025-05-20T10:02:07.006Z |
| bit-parse-2024-39309 | ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability | 2024-07-03T07:30:26.360Z | 2025-05-20T10:02:07.006Z |
| bit-apache-2024-36387 | Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2 | 2024-07-03T07:18:02.756Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2024-39305 | Envoy Proxy use after free when route hash policy is configured with cookie attributes | 2024-07-03T07:17:43.459Z | 2025-09-03T09:06:51.338Z |
| bit-apache-2024-38473 | Apache HTTP Server proxy encoding problem | 2024-07-03T07:17:33.455Z | 2025-05-20T10:02:07.006Z |
| bit-apache-2024-38474 | Apache HTTP Server weakness with encoded question marks in backreferences | 2024-07-03T07:17:14.955Z | 2025-05-20T10:02:07.006Z |
| bit-apache-2024-38475 | Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. | 2024-07-03T07:17:00.654Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2024-38476 | Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect | 2024-07-03T07:16:44.458Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2024-38477 | Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request | 2024-07-03T07:16:30.955Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2024-39573 | Apache HTTP Server: mod_rewrite proxy handler substitution | 2024-07-03T07:16:17.249Z | 2025-11-06T13:25:46.476Z |
| bit-pillow-2024-28219 | 2024-07-02T07:31:57.223Z | 2026-02-11T09:09:18.507Z | |
| bit-django-2024-27351 | 2024-07-02T07:16:49.319Z | 2026-02-11T09:09:18.507Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0627 | Multiples vulnérabilités dans les produits VMware | 2024-07-26T00:00:00.000000 | 2024-07-26T00:00:00.000000 |
| certfr-2024-avi-0626 | Multiples vulnérabilités dans les produits Mitel | 2024-07-25T00:00:00.000000 | 2024-07-25T00:00:00.000000 |
| certfr-2024-avi-0625 | Multiples vulnérabilités dans GitLab | 2024-07-25T00:00:00.000000 | 2024-07-25T00:00:00.000000 |
| certfr-2024-avi-0624 | Vulnérabilité dans Spring Cloud Skipper | 2024-07-25T00:00:00.000000 | 2024-07-25T00:00:00.000000 |
| certfr-2024-avi-0623 | Multiples vulnérabilités Microsoft GroupMe | 2024-07-24T00:00:00.000000 | 2024-07-24T00:00:00.000000 |
| certfr-2024-avi-0622 | Multiples vulnérabilités dans Google Chrome | 2024-07-24T00:00:00.000000 | 2024-07-24T00:00:00.000000 |
| certfr-2024-avi-0621 | Vulnérabilité dans Nagios XI | 2024-07-24T00:00:00.000000 | 2024-07-24T00:00:00.000000 |
| certfr-2024-avi-0620 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-07-24T00:00:00.000000 | 2024-07-24T00:00:00.000000 |
| certfr-2024-avi-0619 | Multiples vulnérabilités dans les produits VMware | 2024-07-24T00:00:00.000000 | 2024-07-24T00:00:00.000000 |
| certfr-2024-avi-0618 | Multiples vulnérabilités dans ISC BIND | 2024-07-24T00:00:00.000000 | 2024-07-24T00:00:00.000000 |
| certfr-2024-avi-0617 | Multiples vulnérabilités dans les produits Siemens | 2024-07-23T00:00:00.000000 | 2024-07-23T00:00:00.000000 |
| certfr-2024-avi-0616 | Vulnérabilité dans les produits Atlassian | 2024-07-22T00:00:00.000000 | 2024-07-22T00:00:00.000000 |
| certfr-2024-avi-0615 | Vulnérabilité dans les produits NetApp | 2024-07-22T00:00:00.000000 | 2024-07-22T00:00:00.000000 |
| certfr-2024-avi-0614 | Vulnérabilité dans IBM MaaS360 | 2024-07-19T00:00:00.000000 | 2024-07-19T00:00:00.000000 |
| certfr-2024-avi-0613 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-07-19T00:00:00.000000 | 2024-07-19T00:00:00.000000 |
| certfr-2024-avi-0612 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-07-19T00:00:00.000000 | 2024-07-19T00:00:00.000000 |
| certfr-2024-avi-0611 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-07-19T00:00:00.000000 | 2024-07-19T00:00:00.000000 |
| certfr-2024-avi-0610 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-07-19T00:00:00.000000 | 2024-07-19T00:00:00.000000 |
| certfr-2024-avi-0609 | Multiples vulnérabilités dans SolarWinds Access Rights Manager | 2024-07-19T00:00:00.000000 | 2024-07-19T00:00:00.000000 |
| certfr-2024-avi-0608 | Vulnérabilité dans VMware Tanzu | 2024-07-19T00:00:00.000000 | 2024-07-19T00:00:00.000000 |
| certfr-2024-avi-0607 | Multiples vulnérabilités dans Microsoft Edge | 2024-07-19T00:00:00.000000 | 2024-07-19T00:00:00.000000 |
| certfr-2024-avi-0606 | Multiples vulnérabilités dans les produits Ivanti | 2024-07-18T00:00:00.000000 | 2024-07-18T00:00:00.000000 |
| certfr-2024-avi-0605 | Vulnérabilité dans les produits Sonicwall | 2024-07-18T00:00:00.000000 | 2024-07-18T00:00:00.000000 |
| certfr-2024-avi-0604 | Vulnérabilité dans Microsoft Edge | 2024-07-18T00:00:00.000000 | 2024-07-18T00:00:00.000000 |
| certfr-2024-avi-0603 | Multiples vulnérabilités dans Apache HTTP Server | 2024-07-18T00:00:00.000000 | 2024-07-18T00:00:00.000000 |
| certfr-2024-avi-0602 | Multiples vulnérabilités dans les produits Cisco | 2024-07-18T00:00:00.000000 | 2024-07-18T00:00:00.000000 |
| certfr-2024-avi-0601 | Multiples vulnérabilités dans les produits Mitel | 2024-07-18T00:00:00.000000 | 2025-01-31T00:00:00.000000 |
| certfr-2024-avi-0600 | Vulnérabilité dans Sonicwall NetExtender | 2024-07-17T00:00:00.000000 | 2024-07-17T00:00:00.000000 |
| certfr-2024-avi-0599 | Multiples vulnérabilités dans Oracle Weblogic | 2024-07-17T00:00:00.000000 | 2024-07-17T00:00:00.000000 |
| certfr-2024-avi-0598 | Multiples vulnérabilités dans Oracle Virtualization | 2024-07-17T00:00:00.000000 | 2024-07-17T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000107 | SLFileManager for Android vulnerable to directory traversal | 2014-09-25T14:52+09:00 | 2015-07-31T16:30+09:00 |
| jvndb-2014-000111 | Yuko Yuko App for Android fails to verify SSL server certificates | 2014-09-22T13:50+09:00 | 2014-09-22T13:50+09:00 |
| jvndb-2014-000110 | Dotclear vulnerable to cross-site scripting | 2014-09-19T13:42+09:00 | 2014-09-25T17:52+09:00 |
| jvndb-2014-000109 | Bump for Android vulnerable in handling of implicit intents | 2014-09-19T13:41+09:00 | 2014-09-25T17:44+09:00 |
| jvndb-2014-000114 | FileMaker Pro fails to verify SSL server certificates | 2014-09-18T20:36+09:00 | 2014-09-24T18:47+09:00 |
| jvndb-2014-000113 | FileMaker Pro vulnerable to cross-site scripting | 2014-09-18T20:36+09:00 | 2015-05-22T11:37+09:00 |
| jvndb-2014-000106 | 365 Links series vulnerable to cross-site scripting | 2014-09-17T15:23+09:00 | 2014-09-19T13:33+09:00 |
| jvndb-2014-000105 | Help Page in multiple Adobe products vulnerable to cross-site scripting | 2014-09-12T14:00+09:00 | 2014-09-29T11:42+09:00 |
| jvndb-2014-000104 | Movable Type vulnerable to cross-site scripting | 2014-09-09T15:02+09:00 | 2014-09-11T16:56+09:00 |
| jvndb-2014-000084 | WisePoint vulnerable to session fixation | 2014-09-04T16:46+09:00 | 2014-09-09T15:02+09:00 |
| jvndb-2014-000103 | EmFTP may insecurely load executable files | 2014-09-04T16:36+09:00 | 2014-09-09T15:15+09:00 |
| jvndb-2014-000102 | Kindle App for Android fails to verify SSL server certificates | 2014-08-29T13:38+09:00 | 2014-09-03T18:25+09:00 |
| jvndb-2014-000101 | MailPoet Newsletters vulnerable to cross-site request forgery | 2014-08-26T13:33+09:00 | 2014-08-28T18:13+09:00 |
| jvndb-2014-000099 | Advance-Flow vulnerable to SQL injection | 2014-08-19T12:35+09:00 | 2014-08-20T16:26+09:00 |
| jvndb-2014-000100 | Cakifo vulnerable to cross-site scripting | 2014-08-18T13:32+09:00 | 2014-08-20T16:30+09:00 |
| jvndb-2014-000096 | Shutter vulnerable to cross-site scripting | 2014-08-15T13:27+09:00 | 2014-08-19T16:27+09:00 |
| jvndb-2014-000095 | Shutter vulnerable to SQL injection | 2014-08-15T13:24+09:00 | 2015-01-15T17:47+09:00 |
| jvndb-2014-000098 | Ameba for Android contains an issue where it fails to verify SSL server certificates | 2014-08-14T12:32+09:00 | 2014-08-18T12:22+09:00 |
| jvndb-2014-000097 | Dominion KX2-101 vulnerable to denial-of-service (DoS) | 2014-08-12T14:03+09:00 | 2014-08-18T09:44+09:00 |
| jvndb-2014-000094 | Piwigo vulnerable to SQL injection | 2014-08-08T13:57+09:00 | 2014-08-08T13:57+09:00 |
| jvndb-2014-000093 | Piwigo vulnerable to cross-site scripting | 2014-08-08T13:52+09:00 | 2014-08-19T16:48+09:00 |
| jvndb-2014-000092 | Piwigo vulnerable to cross-site scripting | 2014-08-08T13:49+09:00 | 2014-08-15T13:35+09:00 |
| jvndb-2014-000085 | GOM Player vulnerable to denial-of-service (DoS) | 2014-08-06T15:22+09:00 | 2014-08-13T18:29+09:00 |
| jvndb-2014-000091 | ServerView Operations Manager vulnerable to cross-site scripting | 2014-08-01T15:42+09:00 | 2014-08-18T10:05+09:00 |
| jvndb-2014-000086 | Outlook.com for Android contains an issue where it fails to verify SSL server certificates | 2014-07-30T15:11+09:00 | 2014-08-18T10:09+09:00 |
| jvndb-2014-000087 | Multiple I-O DATA IP Cameras vulnerable to authentication bypass | 2014-07-29T14:24+09:00 | 2014-08-01T18:30+09:00 |
| jvndb-2014-000088 | PerlMailer vulnerable to cross-site scripting | 2014-07-29T14:20+09:00 | 2014-08-01T18:28+09:00 |
| jvndb-2014-000089 | acmailer contains a cross-site request forgery vulnerability | 2014-07-29T14:15+09:00 | 2014-08-01T18:29+09:00 |
| jvndb-2013-002240 | Arbitrary program execution vulnerability in TrendLink ActiveX control | 2014-07-25T14:44+09:00 | 2014-07-25T14:44+09:00 |
| jvndb-2014-000082 | FuelPHP vulnerable to remote code execution | 2014-07-18T13:50+09:00 | 2014-07-23T11:03+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-30130 | WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin未经授权的数据修改漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30129 | WordPress ELEX WordPress HelpDesk&Customer Ticketing System plugin缺少权限检查漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-29748 | AMD StoreMI DLL劫持漏洞 | 2025-11-25 | 2025-12-03 |
| cnvd-2025-29747 | AMD StoreMI默认权限配置不当漏洞 | 2025-11-25 | 2025-12-03 |
| cnvd-2025-29746 | AMD CPU存在未明漏洞 | 2025-11-25 | 2025-12-03 |
| cnvd-2025-29745 | AMD CPU熵处理不当漏洞 | 2025-11-25 | 2025-12-03 |
| cnvd-2025-29508 | WordPress BrightTALK Shortcode plugin跨站脚本漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29507 | WordPress Booking Calendar Contact Form Plugin缺少授权漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29506 | WordPress Bold Page Builder plugin跨站脚本漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29505 | WordPress BigBuy Dropshipping Connector for WooCommerce pluginIP地址伪造漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29504 | WordPress Better Chat Support for Messenger plugin缺少授权漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29503 | WordPress AuthorSure plugin跨站请求伪造漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29502 | WordPress AudioTube plugin跨站脚本漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29501 | WordPress Arconix Shortcodes plugin缺失授权漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29500 | WordPress Appointment Booking Calendar plugin缺失授权漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2025-29499 | WordPress Affiliate AI Lite plugin跨站脚本漏洞 | 2025-11-25 | 2025-11-28 |
| cnvd-2026-07114 | IBM Concert信息泄露漏洞(CNVD-2026-07114) | 2025-11-24 | 2026-01-23 |
| cnvd-2026-06813 | D-Link DWR-M920 sub_41C7FC函数缓冲区溢出漏洞 | 2025-11-24 | 2026-01-23 |
| cnvd-2026-06289 | 用友网络科技股份有限公司用友U9多组织企业互联网应用平台存在任意文件下载漏洞 | 2025-11-24 | 2026-01-23 |
| cnvd-2026-05333 | Complete Online Beauty Parlor Management System /customer-list.php文件跨站脚本漏洞 | 2025-11-24 | 2026-01-21 |
| cnvd-2026-00801 | UTT 进取 750W命令注入漏洞 | 2025-11-24 | 2026-01-08 |
| cnvd-2025-30581 | Apache Causeway反序列化漏洞 | 2025-11-24 | 2025-12-12 |
| cnvd-2025-29916 | Microsoft Application Gateway权限提升漏洞 | 2025-11-24 | 2025-12-04 |
| cnvd-2025-29670 | IBM Concert跨站脚本漏洞 | 2025-11-24 | 2025-12-01 |
| cnvd-2025-29669 | IBM Concert加密问题漏洞(CNVD-2025-29669) | 2025-11-24 | 2025-12-01 |
| cnvd-2025-29668 | IBM Concert信息泄露漏洞 | 2025-11-24 | 2025-12-01 |
| cnvd-2025-29667 | IBM Concert输出中和不当漏洞 | 2025-11-24 | 2025-12-01 |
| cnvd-2025-29594 | COVID Tracking System SQL注入漏洞 | 2025-11-24 | 2025-12-01 |
| cnvd-2025-29428 | Tenda AC21 SetIpMacBind文件栈缓冲区溢出漏洞 | 2025-11-24 | 2025-11-26 |
| cnvd-2025-29427 | Tenda AC21 SetSysTimeCfg文件栈缓冲区溢出漏洞 | 2025-11-24 | 2025-11-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-15977 | Уязвимость функции cfFilterImageToRaster сервера печати CUPS, позволяющая нарушителю оказ… | 16.12.2025 | 21.01.2026 |
| bdu:2025-15976 | Уязвимость пакета npm React Router, связанная с недостаточной обработкой исключительных с… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15975 | Уязвимость функции import_flow фреймворка для разработки приложений на основе больших язы… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15974 | Уязвимость программного средства мониторинга и анализа сетевого трафика Nagios Network An… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15973 | Уязвимость программного средства мониторинга и анализа сетевого трафика Nagios Network An… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15972 | Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15971 | Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15970 | Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15969 | Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15968 | Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15967 | Уязвимость программного средства мониторинга и анализа сетевого трафика Nagios Network An… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15966 | Уязвимость конечной точки API system/stop службы Elasticsearch программного средства мони… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15965 | Уязвимость компонента Toolbar браузера Google Chrome, позволяющая нарушителю раскрыть защ… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15964 | Уязвимость компонента Password Manager браузера Google Chrome, позволяющая нарушителю рас… | 16.12.2025 | 29.01.2026 |
| bdu:2025-15963 | Уязвимость плагина Jenkins HashiCorp Vault Plugin, связанная с недостатками разграничения… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15962 | Уязвимость плагина для работы с репозиториями Git Jenkins Git client Plugin, связанная с … | 16.12.2025 | 16.12.2025 |
| bdu:2025-15961 | Уязвимость сервера автоматизации Jenkins, связанная с хранением информации в открытом вид… | 16.12.2025 | 12.01.2026 |
| bdu:2025-15960 | Уязвимость сервера автоматизации Jenkins, связанная с хранением информации в открытом вид… | 16.12.2025 | 12.01.2026 |
| bdu:2025-15959 | Уязвимость сервера автоматизации Jenkins, связанная с некорректной зачисткой или освобожд… | 16.12.2025 | 12.01.2026 |
| bdu:2025-15958 | Уязвимость инструмента блокировки несанкционированного исходящего трафика в рабочих проце… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15957 | Уязвимость функции dsa_switch_shutdown() модуля net/dsa/dsa2.c поддержки коммутаторов с р… | 16.12.2025 | 20.01.2026 |
| bdu:2025-15956 | Уязвимость функции ivpu_ipc_receive() модуля drivers/accel/ivpu/ivpu_ipc.c - драйвера под… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15955 | Уязвимость функции hclge_ptp_set_tx_info() модуля drivers/net/ethernet/hisilicon/hns3/hns… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15954 | Уязвимость функции ls_recover() модуля fs/dlm/recoverd.c поддержки распределенного менедж… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15953 | Уязвимость функции hx83102_get_modes() модуля drivers/gpu/drm/panel/panel-himax-hx83102.c… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15952 | Уязвимость функции amdgpu_discovery_get_nps_info() модуля drivers/gpu/drm/amd/amdgpu/amdg… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15951 | Уязвимость функции truncate_node() модуля fs/f2fs/node.c поддержки файловой системы F2FS … | 16.12.2025 | 16.12.2025 |
| bdu:2025-15950 | Уязвимость функции virtnet_enable_queue_pair() модуля drivers/net/virtio_net.c - драйвера… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15949 | Уязвимость определения структуры rx_agg_cmp{} модуля drivers/net/ethernet/broadcom/bnxt/b… | 16.12.2025 | 16.12.2025 |
| bdu:2025-15948 | Уязвимость функции imx_pgc_power_up() модуля drivers/pmdomain/imx/gpcv2.c ядра операционн… | 16.12.2025 | 16.12.2025 |
| ID | Description | Updated |
|---|---|---|
| var-202310-0077 | D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability.… | 2025-11-19T23:27:45.258000Z |
| var-202403-0814 | A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18. Affected b… | 2025-11-19T23:27:44.590000Z |
| var-202509-1065 | An issue in TP-Link AX10 Ax1500 v.1.3.10 Build (20230130) allows a remote attacker to obt… | 2025-11-19T23:27:41.424000Z |
| var-202509-4465 | The AC20 is a wireless router. The AC20 router developed by Shenzhen Jixiang Tengda Tech… | 2025-11-19T23:27:41.248000Z |
| var-202509-4507 | The X18 is a wireless router manufactured by TOTOLINK, a Chinese company. The TOTOLINK X… | 2025-11-19T23:27:41.230000Z |
| var-202510-0885 | A vulnerability exists in the iHealth command that may allow an authenticated attacker wi… | 2025-11-19T23:27:41.136000Z |
| var-202510-2082 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the … | 2025-11-19T23:27:41.009000Z |
| var-202510-2145 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page paramet… | 2025-11-19T23:27:40.984000Z |
| var-202510-2187 | A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the… | 2025-11-19T23:27:40.966000Z |
| var-202510-2250 | Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allow… | 2025-11-19T23:27:40.928000Z |
| var-202510-2334 | A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fro… | 2025-11-19T23:27:40.831000Z |
| var-202510-2355 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T23:27:40.807000Z |
| var-202511-0056 | A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the … | 2025-11-19T23:27:40.167000Z |
| var-202511-0245 | /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-… | 2025-11-19T23:27:40.067000Z |
| var-202508-0592 | A vulnerability was determined in Tenda AC20 up to 16.03.08.12. Affected is an unknown fu… | 2025-11-19T23:27:12.191000Z |
| var-202509-1655 | A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function … | 2025-11-19T23:27:11.906000Z |
| var-202509-4458 | The EDR-810-VPN-2GSFP is an industrial multi-port security router. The EDR-810-VPN-2GSFP… | 2025-11-19T23:27:11.731000Z |
| var-202509-4500 | The A720R is a dual-band gigabit wireless router. The ZEON Electronics (Shenzhen) Co., L… | 2025-11-19T23:27:11.711000Z |
| var-202510-0048 | A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this iss… | 2025-11-19T23:27:11.695000Z |
| var-202510-0111 | A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the … | 2025-11-19T23:27:11.671000Z |
| var-202510-1592 | When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are con… | 2025-11-19T23:27:11.545000Z |
| var-202510-2306 | A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown … | 2025-11-19T23:27:11.395000Z |
| var-202511-0003 | Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: t… | 2025-11-19T23:27:10.516000Z |
| var-202304-0357 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid para… | 2025-11-19T23:25:05.288000Z |
| var-202308-3331 | Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function. She… | 2025-11-19T23:25:04.637000Z |
| var-202308-3583 | In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do… | 2025-11-19T23:25:04.602000Z |
| var-202309-2840 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function. D-L… | 2025-11-19T23:25:04.440000Z |
| var-202312-0971 | TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFil… | 2025-11-19T23:25:04.180000Z |
| var-202403-0865 | A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20_multi and classified as… | 2025-11-19T23:25:03.788000Z |
| var-202507-0652 | A vulnerability of plugin openid-connect in Apache APISIX. This vulnerability will only… | 2025-11-19T23:25:01.002000Z |