Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-33083
8.7 (4.0)
DataEase has SQL Injection in Order By Clause dataease
dataease
2026-04-16T17:52:37.255Z 2026-04-16T19:39:25.443Z
CVE-2026-33082
8.7 (4.0)
DataEase: SQL Injection in v2 Dataset Export dataease
dataease
2026-04-16T17:39:37.894Z 2026-04-16T18:41:46.111Z
CVE-2026-41082
7.3 (3.1)
In OCaml opam before 2.5.1, a .install field cont… OCaml
opam
2026-04-16T17:32:40.068Z 2026-04-21T09:32:52.152Z
CVE-2026-27820
1.7 (4.0)
zlib: Buffer Overflow in Zlib::GzipReader ungetc via l… ruby
zlib
2026-04-16T17:27:48.944Z 2026-04-16T18:20:21.451Z
CVE-2026-24749
5.3 (3.1)
Silverstripe Assets Module has a DBFile::getURL() perm… silverstripe
silverstripe-assets
2026-04-16T17:08:59.133Z 2026-04-18T02:36:26.887Z
CVE-2026-2336
8.7 (4.0)
Weak webstax_auth Cookie Authentication Allows Privile… Microchip
IStaX
2026-04-16T17:02:06.352Z 2026-04-16T17:34:39.672Z
CVE-2026-41080
2.9 (3.1)
libexpat before 2.8.0 uses insufficient entropy, … libexpat project
libexpat
2026-04-16T16:52:01.177Z 2026-04-27T05:59:38.490Z
CVE-2025-36579
5.1 (3.1)
Dell Client Platform BIOS contains a Weak Passwor… Dell
Dell Pro 14 Essential PV14250
2026-04-16T16:05:32.561Z 2026-04-16T18:32:52.672Z
CVE-2026-5426
7.5 (3.1)
KnowledgeDeliver deployments before February 24, 2026 … Digital Knowledge
KnowledgeDeliver
2026-04-16T15:18:46.224Z 2026-04-18T02:31:32.234Z
CVE-2026-3324
8.2 (3.1)
Authentication Bypass Zohocorp
ManageEngine Log360
2026-04-16T14:30:55.130Z 2026-04-16T15:21:19.911Z
CVE-2026-6409
7.1 (4.0)
Denial of Service (DoS) vulnerability exists in the Pr… Protocol Buffers
Protobuf-php (Pecl)
2026-04-16T14:30:51.568Z 2026-04-16T15:24:43.164Z
CVE-2026-2840
6.4 (3.1)
Email Encoder – Protect Email Addresses and Phone Numb… onlineoptimisation
Email Encoder – Protect Email Addresses and Phone Numbers
2026-04-16T14:10:29.114Z 2026-04-16T14:42:53.905Z
CVE-2026-33804
7.4 (3.1)
@fastify/middie vulnerable to middleware bypass via de… @fastify/middie
@fastify/middie
2026-04-16T13:56:56.176Z 2026-04-16T14:41:48.659Z
CVE-2026-5785
8.1 (3.1)
SQL Injection Zohocorp
ManageEngine PAM360
2026-04-16T13:46:28.313Z 2026-04-17T03:55:15.059Z
CVE-2026-6270
9.1 (3.1)
@fastify/middie vulnerable to middleware authenticatio… @fastify/middie
@fastify/middie
2026-04-16T13:44:46.322Z 2026-04-16T14:24:26.764Z
CVE-2026-31987
N/A
Apache Airflow: JWT token appearing in logs Apache Software Foundation
Apache Airflow
2026-04-16T13:31:52.336Z 2026-04-18T02:28:44.770Z
CVE-2026-6410
5.3 (3.1)
@fastify/static vulnerable to path traversal in direct… @fastify/static
@fastify/static
2026-04-16T13:29:08.120Z 2026-04-16T14:19:36.780Z
CVE-2026-4160
5.3 (3.1)
Fluent Forms – Customizable Contact Forms, Survey, Qui… techjewel
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
2026-04-16T13:27:09.207Z 2026-04-16T14:12:35.951Z
CVE-2026-6414
5.9 (3.1)
@fastify/static vulnerable to route guard bypass via e… @fastify/static
@fastify/static
2026-04-16T13:09:03.526Z 2026-04-16T13:48:52.393Z
CVE-2026-31843
10 (4.0)
9.8 (3.1)
The goodoneuz/pay-uz Laravel package (<= 2.2.24) … goodoneuz
pay-uz
2026-04-16T13:02:55.701Z 2026-04-16T19:30:21.203Z
CVE-2025-15621
5.7 (4.0)
Sparx Enterprise Architect Client does not verify the … Sparx Systems Pty Ltd.
Sparx Enterprise Architect
2026-04-16T12:40:08.962Z 2026-04-16T12:51:51.633Z
CVE-2026-3155
3.1 (3.1)
OneSignal – Web Push Notifications <= 3.8.0 - Missing … onesignal
OneSignal – Web Push Notifications
2026-04-16T11:21:22.226Z 2026-04-16T14:00:56.681Z
CVE-2026-3369
5.4 (3.1)
Better Find and Replace – AI-Powered Suggestions <= 1.… codesolz
Better Find and Replace – AI-Powered Suggestions
2026-04-16T11:21:21.822Z 2026-04-16T14:04:23.811Z
CVE-2026-3489
7.5 (3.1)
DirectoryPress – Business Directory And Classified Ad … designinvento
DirectoryPress – Business Directory And Classified Ad Listing
2026-04-16T11:21:21.179Z 2026-04-16T14:05:03.740Z
CVE-2025-12624
6 (3.1)
Improper Token Invalidation in WSO2 Identity Server Al… WSO2
WSO2 Identity Server
2026-04-16T10:25:19.789Z 2026-04-16T12:30:14.886Z
CVE-2025-6024
6.1 (3.1)
Cross-Site Scripting via Authentication Endpoint in Mu… WSO2
WSO2 API Manager
2026-04-16T09:48:45.244Z 2026-04-16T12:30:22.824Z
CVE-2024-10242
6.1 (3.1)
Reflected Cross-Site Scripting via Authentication Endp… WSO2
WSO2 API Manager
2026-04-16T09:45:46.115Z 2026-04-16T12:30:30.619Z
CVE-2024-8010
3.5 (3.1)
XML External Entity Injection via Publisher in WSO2 AP… WSO2
WSO2 API Manager
2026-04-16T09:39:20.130Z 2026-04-16T12:30:36.466Z
CVE-2024-4867
5.4 (3.1)
Cross-Site Scripting via Developer Portal in WSO2 API … WSO2
WSO2 API Manager
2026-04-16T09:32:40.941Z 2026-04-16T12:30:42.568Z
CVE-2026-23772
7.3 (3.1)
Dell Storage Manager - Replay Manager for Microso… Dell
Storage Manager
2026-04-16T08:30:56.774Z 2026-04-17T03:55:13.852Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-41113
8.1 (3.1)
sagredo qmail before 2026.04.07 allows tls_quit r… sagredo
qmail
2026-04-16T22:02:10.225Z 2026-04-18T20:09:47.901Z
CVE-2026-40308
8.8 (4.0)
My Calendar: Unauthenticated Information Disclosure (I… joedolson
my-calendar
2026-04-16T21:30:52.401Z 2026-04-17T12:32:26.622Z
CVE-2026-40249
6.9 (4.0)
free5gc UDR fail-open request handling in PolicyDataSu… free5gc
free5gc
2026-04-16T21:59:36.282Z 2026-04-18T02:47:28.094Z
CVE-2026-40248
8.7 (4.0)
free5gc UDR improper path validation allows unauthenti… free5gc
free5gc
2026-04-16T21:57:13.101Z 2026-04-20T15:00:17.552Z
CVE-2026-40247
8.7 (4.0)
free5gc UDR improper path validation allows unauthenti… free5gc
free5gc
2026-04-16T21:54:04.151Z 2026-04-17T18:44:09.831Z
CVE-2026-40246
8.7 (4.0)
free5gc UDR improper path validation allows unauthenti… free5gc
free5gc
2026-04-16T21:40:03.598Z 2026-04-18T02:46:14.355Z
CVE-2026-40170
7.5 (3.1)
ngtcp2 has a qlog transport parameter serialization st… ngtcp2
ngtcp2
2026-04-16T21:34:07.610Z 2026-04-20T15:00:26.193Z
CVE-2026-39313
8.7 (4.0)
MCP-Framework: Unbounded memory allocation in readRequ… QuantGeekDev
mcp-framework
2026-04-16T21:24:27.328Z 2026-04-17T18:46:07.726Z
CVE-2026-35469
8.7 (4.0)
SpdyStream: DOS on CRI moby
spdystream
2026-04-16T21:19:23.516Z 2026-04-17T12:37:27.329Z
CVE-2026-34164
4.9 (3.1)
Valtimo: Sensitive data exposure through inbox message… valtimo-platform
valtimo
2026-04-16T21:17:35.472Z 2026-04-18T02:44:44.369Z
CVE-2026-33472
4.8 (3.1)
Cryptomator Hub OAuth token exchange HTTP downgrade vi… cryptomator
cryptomator
2026-04-16T21:12:37.076Z 2026-04-20T15:00:33.905Z
CVE-2026-40901
7.5 (4.0)
DataEase: Quartz Deserialization → Remote Code Execution dataease
dataease
2026-04-16T20:57:45.978Z 2026-04-17T18:47:00.448Z
CVE-2026-40900
8.7 (4.0)
DataEase has SQL Injection via Stacked Queries dataease
dataease
2026-04-16T20:53:27.788Z 2026-04-17T12:38:32.676Z
CVE-2026-40899
8.3 (4.0)
DataEase has an Arbitrary File Read Vulnerability dataease
dataease
2026-04-16T19:48:44.201Z 2026-04-18T02:43:14.720Z
CVE-2026-33207
8.6 (4.0)
DataEase SQL Injection Vulnerability dataease
dataease
2026-04-16T19:37:36.197Z 2026-04-20T15:00:41.415Z
CVE-2026-33122
8.6 (4.0)
DataEase has SQL Injection via Datasource Management dataease
dataease
2026-04-16T19:24:03.195Z 2026-04-17T18:47:44.791Z
CVE-2025-54502
7.1 (4.0)
Incorrect use of boot service in the AMD Platform… AMD
AMD EPYC™ 9004 Series Processors
2026-04-16T18:46:13.377Z 2026-04-17T03:55:16.268Z
CVE-2026-6442
8.3 (3.1)
Improper Command Detection Logic Allows RCE in Cortex … Snowflake
Cortex Code CLI
2026-04-16T18:43:21.181Z 2026-04-16T18:54:58.366Z
CVE-2026-33121
8.7 (4.0)
DataEase has SQL Injection via Datasource Save Flow dataease
dataease
2026-04-16T18:16:02.485Z 2026-04-16T18:34:54.187Z
CVE-2026-33084
8.7 (4.0)
DataEase has SQL Injection through its getFieldEnumObj… dataease
dataease
2026-04-16T18:14:07.316Z 2026-04-18T02:40:47.771Z
CVE-2025-54510
5.9 (4.0)
A missing lock verification in AMD Secure Process… AMD
AMD EPYC™ 9004 Series Processors
2026-04-16T18:44:10.182Z 2026-04-16T19:10:19.002Z
CVE-2025-43937
6.6 (3.1)
Dell PowerScale OneFS, versions prior to 9.12.0.0… Dell
PowerScale OneFS
2026-04-16T18:03:08.750Z 2026-04-16T18:51:41.562Z
CVE-2025-43935
4.4 (3.1)
Dell PowerScale OneFS, versions prior to 9.12.0.0… Dell
PowerScale OneFS
2026-04-16T17:59:04.315Z 2026-04-16T19:38:28.840Z
CVE-2023-20585
5.6 (4.0)
Insufficient checks of the RMP on host buffer acc… AMD
AMD EPYC™ 7003 Series Processors
2026-04-16T18:42:28.281Z 2026-04-16T19:12:06.991Z
CVE-2026-41082
7.3 (3.1)
In OCaml opam before 2.5.1, a .install field cont… OCaml
opam
2026-04-16T17:32:40.068Z 2026-04-21T09:32:52.152Z
CVE-2026-33083
8.7 (4.0)
DataEase has SQL Injection in Order By Clause dataease
dataease
2026-04-16T17:52:37.255Z 2026-04-16T19:39:25.443Z
CVE-2026-33082
8.7 (4.0)
DataEase: SQL Injection in v2 Dataset Export dataease
dataease
2026-04-16T17:39:37.894Z 2026-04-16T18:41:46.111Z
CVE-2026-2336
8.7 (4.0)
Weak webstax_auth Cookie Authentication Allows Privile… Microchip
IStaX
2026-04-16T17:02:06.352Z 2026-04-16T17:34:39.672Z
CVE-2026-27820
1.7 (4.0)
zlib: Buffer Overflow in Zlib::GzipReader ungetc via l… ruby
zlib
2026-04-16T17:27:48.944Z 2026-04-16T18:20:21.451Z
CVE-2026-24749
5.3 (3.1)
Silverstripe Assets Module has a DBFile::getURL() perm… silverstripe
silverstripe-assets
2026-04-16T17:08:59.133Z 2026-04-18T02:36:26.887Z
ID Severity Description Published Updated
ghsa-mh3g-vpxv-m2cr
4.3 (3.1)
The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPre… 2026-04-14T09:30:45Z 2026-04-14T09:30:45Z
ghsa-jv22-34xc-w9x6
9.1 (3.1)
Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain config… 2026-04-14T09:30:45Z 2026-04-16T15:31:29Z
ghsa-j648-xxf5-44cv
7.5 (3.1)
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can occur due… 2026-04-14T09:30:45Z 2026-04-14T21:31:45Z
ghsa-gcj8-76p4-g2fq
4.3 (3.1)
Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code 2026-04-14T09:30:45Z 2026-04-14T23:42:00Z
ghsa-24c7-prh7-m3g7
7.1 (3.1)
5.1 (4.0)
A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < … 2026-04-14T09:30:45Z 2026-04-14T09:30:45Z
ghsa-vv4w-99g8-93pp
3.7 (3.1)
6.3 (4.0)
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter… 2026-04-14T09:30:44Z 2026-04-14T09:30:44Z
ghsa-qw84-4pc7-fxvw
8.8 (3.1)
8.7 (4.0)
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do no… 2026-04-14T09:30:44Z 2026-04-14T09:30:44Z
ghsa-7f3f-wq83-6q76
7.3 (3.1)
6.9 (4.0)
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected a… 2026-04-14T09:30:44Z 2026-04-14T09:30:44Z
ghsa-3969-r7gw-3f9q
6.5 (3.1)
The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execut… 2026-04-14T09:30:44Z 2026-04-14T09:30:44Z
ghsa-vw96-fcx4-fx55
7.2 (3.1)
The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPre… 2026-04-14T06:31:19Z 2026-04-14T06:31:19Z
ghsa-rxq5-998f-fp45
6.4 (3.1)
The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the woolentor_… 2026-04-14T06:31:19Z 2026-04-14T06:31:19Z
ghsa-gpxf-gw3r-8vx4
4.4 (3.1)
The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to… 2026-04-14T06:31:19Z 2026-04-14T06:31:19Z
ghsa-99qg-rjrm-54j5
6.4 (3.1)
The Surbma | Booking.com Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… 2026-04-14T06:31:18Z 2026-04-14T06:31:18Z
ghsa-rvmc-gf2q-j9mw
5.0 (3.1)
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-fwjv-3fw4-7x83
6.1 (3.1)
Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated … 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-fg5q-rjfh-rr88
6.5 (3.1)
Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authe… 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-fcmf-hc7m-63gh
9.1 (3.1)
The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing ca… 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-9jcw-cw9q-r69r
7.1 (3.1)
Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an … 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-73v2-xp42-4vcq
7.2 (3.1)
The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the M… 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-6gj4-hcqg-pjc8
7.2 (3.1)
The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the `block_name` parame… 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-4c58-m4cg-6h2f
6.5 (3.1)
During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns spe… 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-3fpc-x8cf-v594
7.5 (3.1)
The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT)… 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-2m83-cjg7-5x73
9.8 (3.1)
A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote c… 2026-04-14T03:31:40Z 2026-04-14T03:31:40Z
ghsa-76hw-p97h-883f
6.5 (3.1)
gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall 2026-04-14T01:11:30Z 2026-04-15T21:00:58Z
ghsa-r4q5-vmmm-2653
6.9 (4.0)
follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets 2026-04-14T01:11:11Z 2026-04-14T01:11:11Z
ghsa-527g-3w9m-29hv
4.8 (3.1)
mitmproxy has an LDAP Injection 2026-04-14T01:08:52Z 2026-04-15T21:14:34Z
ghsa-cmxv-58fp-fm3g
6.8 (3.1)
AsyncHttpClient leaks authorization credentialsto untrusted domains on cross-origin redirects 2026-04-14T01:07:42Z 2026-04-15T21:00:53Z
ghsa-9pm8-vwc5-w2hm
2.1 (4.0)
Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and dele… 2026-04-14T01:07:01Z 2026-04-14T01:07:01Z
ghsa-rh42-6rj2-xwmc
2.0 (3.1)
Kimai leaks API Token Hash via Invoice Twig Template 2026-04-14T01:06:25Z 2026-04-14T01:06:25Z
ghsa-3jp4-mhh4-gcgr
0.0 (3.1)
Kimai has an Open Redirect via Unvalidated RelayState in SAML ACS Handler 2026-04-14T01:06:06Z 2026-04-14T01:06:06Z
ID Severity Description Package Published Updated
pysec-2020-324
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLit… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:15.002754Z
pysec-2020-323
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determinin… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:14.801373Z
pysec-2020-322
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:14.570909Z
pysec-2020-321
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorF… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:14.366685Z
pysec-2020-320
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` ar… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:14.101977Z
pysec-2020-319
In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not … tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.891462Z
pysec-2020-318
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.671465Z
pysec-2020-317
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in T… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.455948Z
pysec-2020-316
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.253783Z
pysec-2020-315
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.201827Z
pysec-2020-314
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` does not validate that … tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.149576Z
pysec-2020-313
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.097348Z
pysec-2020-312
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:13.010994Z
pysec-2020-311
In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` … tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.960487Z
pysec-2020-310
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation o… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.907152Z
pysec-2020-309
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmpty… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.701793Z
pysec-2020-308
In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` c… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.446415Z
pysec-2020-307
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlp… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.356862Z
pysec-2020-306
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `d… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.260463Z
pysec-2020-305
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Swit… tensorflow-gpu 2020-09-25T19:15:00Z 2021-12-09T06:35:12.169887Z
pysec-2020-294
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:43.930382Z
pysec-2020-293
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:43.849481Z
pysec-2020-292
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:43.741009Z
pysec-2020-291
In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in… tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:43.650264Z
pysec-2020-290
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite sav… tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:43.437178Z
pysec-2020-289
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLit… tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:43.227280Z
pysec-2020-288
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determinin… tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:43.041754Z
pysec-2020-287
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python… tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:42.836592Z
pysec-2020-286
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorF… tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:42.621580Z
pysec-2020-285
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` ar… tensorflow-cpu 2020-09-25T19:15:00Z 2021-12-09T06:34:42.433318Z
ID Description Updated
ID Description Published Updated
mal-2026-1012 Malicious code in ultimates-express (npm) 2026-02-24T14:01:31Z 2026-03-19T12:23:24Z
mal-2026-1009 Malicious code in express-soaps (npm) 2026-02-24T14:01:31Z 2026-03-19T12:23:20Z
mal-2026-1004 Malicious code in request-httpx-9 (PyPI) 2026-02-24T09:11:42Z 2026-02-24T09:11:42Z
mal-2026-1040 Malicious code in react-markdown-canvas (npm) 2026-02-23T22:01:02Z 2026-03-04T00:15:19Z
mal-2026-1002 Malicious code in newrubylogger (RubyGems) 2026-02-23T20:50:29Z 2026-02-23T20:50:29Z
mal-2026-1003 Malicious code in cnnct-eaas-corre (PyPI) 2026-02-23T16:00:12Z 2026-02-23T16:00:12Z
mal-2026-1001 Malicious code in request-httpx-4 (PyPI) 2026-02-23T12:37:17Z 2026-02-23T12:37:17Z
mal-2026-1041 Malicious code in secure-monkey (npm) 2026-02-23T11:30:57Z 2026-03-01T20:43:47Z
mal-2026-1000 Malicious code in scraper-npm (PyPI) 2026-02-23T08:59:49Z 2026-02-23T09:51:45Z
mal-2026-999 Malicious code in react-dropzone-truffle (npm) 2026-02-23T02:22:35Z 2026-03-19T12:23:22Z
mal-2026-997 Malicious code in npm-security-testing (npm) 2026-02-23T02:20:31Z 2026-02-23T04:21:34Z
mal-2026-998 Malicious code in rbxm-tools (npm) 2026-02-23T02:14:37Z 2026-02-23T04:21:35Z
mal-2026-986 Malicious code in en-thrift-internal (npm) 2026-02-22T21:50:01Z 2026-02-26T01:40:03Z
mal-2026-985 Malicious code in conduit-utils (npm) 2026-02-22T20:45:43Z 2026-02-23T04:21:32Z
mal-2026-994 Malicious code in vl-ui-code-preview (npm) 2026-02-22T20:44:05Z 2026-02-23T04:21:36Z
mal-2026-995 Malicious code in vl-ui-contact-card (npm) 2026-02-22T20:34:24Z 2026-02-23T04:21:36Z
mal-2026-988 Malicious code in vl-ui-action-group (npm) 2026-02-22T20:34:16Z 2026-02-23T04:21:36Z
mal-2026-992 Malicious code in vl-ui-button (npm) 2026-02-22T20:34:14Z 2026-02-23T04:21:36Z
mal-2026-991 Malicious code in vl-ui-breadcrumb (npm) 2026-02-22T20:34:10Z 2026-02-23T04:21:36Z
mal-2026-990 Malicious code in vl-ui-body (npm) 2026-02-22T20:34:10Z 2026-02-23T04:21:36Z
mal-2026-993 Malicious code in vl-ui-checkbox (npm) 2026-02-22T20:34:08Z 2026-02-23T04:21:36Z
mal-2026-987 Malicious code in vl-ui-accessibility (npm) 2026-02-22T20:10:05Z 2026-02-23T04:21:36Z
mal-2026-989 Malicious code in vl-ui-alert (npm) 2026-02-22T19:59:59Z 2026-02-23T04:21:36Z
mal-2026-984 Malicious code in myasicapi (PyPI) 2026-02-22T19:42:08Z 2026-02-22T19:42:08Z
mal-2026-983 Malicious code in tensorflow-opt (PyPI) 2026-02-22T16:53:45Z 2026-02-22T16:53:45Z
mal-2026-982 Malicious code in trunket-dev-driver (PyPI) 2026-02-22T14:51:28Z 2026-02-22T14:51:28Z
mal-2026-981 Malicious code in dt-fe-t2d-marketplace (npm) 2026-02-22T07:22:23Z 2026-02-23T04:21:32Z
mal-2026-980 Malicious code in the-storyverse (npm) 2026-02-22T06:15:43Z 2026-02-23T04:21:36Z
mal-2026-979 Malicious code in home-robot (PyPI) 2026-02-22T04:48:51Z 2026-02-22T04:48:51Z
mal-2026-978 Malicious code in microsoft-cms-client (npm) 2026-02-21T17:38:28Z 2026-02-25T16:43:01Z
ID Description Published Updated
wid-sec-w-2025-1120 Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial of Service 2025-05-21T22:00:00.000+00:00 2025-06-01T22:00:00.000+00:00
wid-sec-w-2025-1119 Drupal Produkte: Mehrere Schwachstellen 2025-05-21T22:00:00.000+00:00 2025-05-21T22:00:00.000+00:00
wid-sec-w-2025-1118 OWASP ModSecurity: Schwachstelle ermöglicht Denial of Service 2025-05-21T22:00:00.000+00:00 2025-11-04T23:00:00.000+00:00
wid-sec-w-2025-1117 GitLab: Mehrere Schwachstellen 2025-05-21T22:00:00.000+00:00 2025-05-22T22:00:00.000+00:00
wid-sec-w-2025-1116 Cisco Unified Communications Produkte: Schwachstelle ermöglicht Privilegieneskalation 2025-05-21T22:00:00.000+00:00 2025-05-21T22:00:00.000+00:00
wid-sec-w-2025-1115 Mattermost: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-05-21T22:00:00.000+00:00 2025-05-21T22:00:00.000+00:00
wid-sec-w-2025-1114 Linux Kernel: Mehrere Schwachstellen 2025-05-20T22:00:00.000+00:00 2026-03-05T23:00:00.000+00:00
wid-sec-w-2025-1113 VMware Produkte: Mehrere Schwachstellen 2025-05-20T22:00:00.000+00:00 2025-08-11T22:00:00.000+00:00
wid-sec-w-2025-1112 Arista EOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-05-20T22:00:00.000+00:00 2025-05-20T22:00:00.000+00:00
wid-sec-w-2025-1111 Atlassian Jira: Mehrere Schwachstellen 2025-05-20T22:00:00.000+00:00 2025-05-20T22:00:00.000+00:00
wid-sec-w-2025-1110 JetBrains TeamCity: Mehrere Schwachstellen 2025-05-20T22:00:00.000+00:00 2025-05-20T22:00:00.000+00:00
wid-sec-w-2025-1109 Mitel OpenScape Xpressions: Schwachstelle ermöglicht Offenlegung von Informationen 2025-05-20T22:00:00.000+00:00 2025-05-20T22:00:00.000+00:00
wid-sec-w-2025-1108 Atlassian Crucible: Schwachstelle ermöglicht Denial of Service 2025-05-20T22:00:00.000+00:00 2025-05-20T22:00:00.000+00:00
wid-sec-w-2025-1107 TYPO3 Extensions: Mehrere Schwachstellen 2025-05-19T22:00:00.000+00:00 2025-05-21T22:00:00.000+00:00
wid-sec-w-2025-1106 TYPO3 Core: Mehrere Schwachstellen 2025-05-19T22:00:00.000+00:00 2025-05-20T22:00:00.000+00:00
wid-sec-w-2025-1105 VMware Cloud Foundation: Mehrere Schwachstellen 2025-05-19T22:00:00.000+00:00 2025-05-20T22:00:00.000+00:00
wid-sec-w-2025-1104 Ivanti Neurons for ITSM: Schwachstelle ermöglicht Erlangen von Administratorrechten 2025-05-19T22:00:00.000+00:00 2025-05-20T22:00:00.000+00:00
wid-sec-w-2025-1103 Broadcom Automic Automation: Schwachstelle ermöglicht Privilegieneskalation 2025-05-19T22:00:00.000+00:00 2025-05-19T22:00:00.000+00:00
wid-sec-w-2025-1102 OpenCTI: Schwachstelle ermöglicht Denial of Service 2025-05-19T22:00:00.000+00:00 2025-05-19T22:00:00.000+00:00
wid-sec-w-2025-1101 IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service 2025-05-19T22:00:00.000+00:00 2025-05-19T22:00:00.000+00:00
wid-sec-w-2025-1100 Lexmark Multifunction Printer: Schwachstelle ermöglicht Codeausführung 2025-05-19T22:00:00.000+00:00 2025-05-19T22:00:00.000+00:00
wid-sec-w-2025-1099 VMware Tanzu Spring Security: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-05-19T22:00:00.000+00:00 2025-06-26T22:00:00.000+00:00
wid-sec-w-2025-1098 Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-05-18T22:00:00.000+00:00 2026-03-04T23:00:00.000+00:00
wid-sec-w-2025-1097 Mozilla Firefox / Thunderbird: Mehrere Schwachstellen 2025-05-18T22:00:00.000+00:00 2025-06-30T22:00:00.000+00:00
wid-sec-w-2025-1096 Grafana: Schwachstelle ermöglicht Cross-Site Scripting 2025-05-18T22:00:00.000+00:00 2025-06-30T22:00:00.000+00:00
wid-sec-w-2025-1095 HCL Domino Volt und Leap: Mehrere Schwachstellen 2025-05-18T22:00:00.000+00:00 2025-05-18T22:00:00.000+00:00
wid-sec-w-2025-1094 QT: Schwachstelle ermöglicht Privilegieneskalation 2025-05-18T22:00:00.000+00:00 2025-05-18T22:00:00.000+00:00
wid-sec-w-2025-1093 IBM Security Guardium: Schwachstelle ermöglicht Manipulation von Dateien 2025-05-18T22:00:00.000+00:00 2025-05-18T22:00:00.000+00:00
wid-sec-w-2025-1092 D-LINK DAP-2695 Router: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2025-05-18T22:00:00.000+00:00 2025-05-18T22:00:00.000+00:00
wid-sec-w-2025-1091 Netgate pfSense: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2025-05-18T22:00:00.000+00:00 2025-05-18T22:00:00.000+00:00
ID Description Published Updated
icsa-21-147-04 Siemens JT2Go and Teamcenter Visualization 2021-05-27T00:00:00.000000Z 2021-05-27T00:00:00.000000Z
icsa-21-147-03 MesaLabs AmegaView 2021-05-27T00:00:00.000000Z 2021-05-27T00:00:00.000000Z
icsa-21-147-02 Johnson Controls Sensormatic Electronics VideoEdge 2021-05-27T00:00:00.000000Z 2021-05-27T00:00:00.000000Z
icsa-21-147-01 GENIVI Alliance DLT 2021-05-27T00:00:00.000000Z 2021-05-27T00:00:00.000000Z
icsa-21-145-02 Rockwell Automation Micro800 and MicroLogix 1400 2021-05-25T00:00:00.000000Z 2021-05-25T00:00:00.000000Z
icsa-21-145-01 Datakit Libraries bundled in Luxion KeyShot 2021-05-25T00:00:00.000000Z 2021-05-25T00:00:00.000000Z
icsa-21-138-01 ICSA-21-138-01_Emerson Rosemount X-STREAM 2021-05-18T00:00:00.000000Z 2021-05-18T00:00:00.000000Z
icsa-21-040-06 ICSA-21-040-06_Siemens JT2Go and Teamcenter Visualization (Update A) 2021-05-17T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-133-04 OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5 2021-05-13T00:00:00.000000Z 2021-05-13T00:00:00.000000Z
icsa-21-133-03 OPC Foundation UA Products Built with .NET Framework 2021-05-13T00:00:00.000000Z 2021-05-13T00:00:00.000000Z
icsa-21-133-02 Johnson Controls Sensormatic Tyco AI 2021-05-13T00:00:00.000000Z 2021-05-13T00:00:00.000000Z
icsa-21-133-01 Rockwell Automation Connected Components Workbench 2021-05-13T00:00:00.000000Z 2021-05-13T00:00:00.000000Z
icsa-22-132-05 Siemens Industrial PCs and CNC devices 2021-05-11T00:00:00.000000Z 2022-12-13T00:00:00.000000Z
icsa-21-131-15 Siemens SIMATIC S7-1500 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-14 Siemens SCALANCE W1750D (Update B) 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-13 Siemens SINAMICS Medium Voltage Products Telnet (Update A) 2021-05-11T00:00:00.000000Z 2021-08-10T00:00:00.000000Z
icsa-21-131-12 Siemens SIMATIC SmartVNC HMI WinCC Products (Update B) 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-11 Siemens SIMATIC UltraVNC HMI WinCC Products 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-10 Siemens SCALANCE XM-400 and XR-500 Devices 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-09 Siemens Mendix Excel Importer Module 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-08 Siemens Tecnomatix Plant Simulation 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-07 Siemens SIMATIC NET CP343-1 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-06 Siemens SNMP Implementation of WinCC Runtime 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-05 Siemens Mendix Database Replication Module 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-04 Siemens SINAMICS Medium Voltage Products Remote Access (Update B) 2021-05-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-21-131-03 Siemens Linux-based Products (Update J) 2021-05-11T00:00:00.000000Z 2023-03-14T00:00:00.000000Z
icsa-21-131-02 Mitsubishi Electric GOT and Tension Controller (Update A) 2021-05-11T00:00:00.000000Z 2022-01-20T00:00:00.000000Z
icsa-21-131-01 Omron CX-One 2021-05-11T00:00:00.000000Z 2021-05-11T00:00:00.000000Z
icsa-21-124-02 Delta Electronics CNCSoft ScreenEditor 2021-05-04T00:00:00.000000Z 2021-05-04T00:00:00.000000Z
icsa-21-124-01 Advantech WISE-PaaS RMM 2021-05-04T00:00:00.000000Z 2021-05-04T00:00:00.000000Z
ID Description Published Updated
cisco-sa-20190417-ces-tvcs-dos Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Service Vulnerability 2019-04-17T16:00:00+00:00 2019-04-17T16:00:00+00:00
cisco-sa-20190417-cdc-hijack Cisco Directory Connector Search Order Hijacking Vulnerability 2019-04-17T16:00:00+00:00 2019-04-17T16:00:00+00:00
cisco-sa-20190417-asr9k-exr Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability 2019-04-17T16:00:00+00:00 2019-04-17T16:00:00+00:00
cisco-sa-20190417-aironet-shell Cisco Aironet Series Access Points Development Shell Access Vulnerability 2019-04-17T16:00:00+00:00 2019-04-17T16:00:00+00:00
cisco-sa-20190417-air-ap-traversal Cisco Aironet Series Access Points Directory Traversal Vulnerability 2019-04-17T16:00:00+00:00 2019-04-17T16:00:00+00:00
cisco-sa-20190417-air-ap-dos Cisco Aironet Series Access Points Denial of Service Vulnerability 2019-04-17T16:00:00+00:00 2020-05-11T15:39:50+00:00
cisco-sa-20190417-air-ap-cmdinj Cisco Aironet Series Access Points Command Injection Vulnerability 2019-04-17T16:00:00+00:00 2019-04-17T16:00:00+00:00
cisco-sa-20190417-aap-dos Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability 2019-04-17T16:00:00+00:00 2019-04-17T16:00:00+00:00
cisco-sa-20190404-rv-xss Cisco Small Business RV320 and RV325 Routers Online Help Reflected Cross-Site Scripting Vulnerability 2019-04-04T14:00:00+00:00 2019-04-15T17:27:44+00:00
cisco-sa-20190404-rv-weak-encrypt Cisco Small Business RV320 and RV325 Routers Weak Credential Encryption Vulnerability 2019-04-04T14:00:00+00:00 2019-04-04T14:00:00+00:00
cisco-sa-20190327-xeid Cisco IOS XE Software Information Disclosure Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-xecmd Cisco IOS XE Software Command Injection Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-sms-dos Cisco IOS and IOS XE Software Short Message Service Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-rsp3-ospf Cisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-pnp-cert Cisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-pfrv3 Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-nbar Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-nat64 Cisco IOS Software NAT64 Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-mgmtacl Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-isdn Cisco IOS and IOS XE Software ISDN Interface Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-ipsla-dos Cisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-iosxe-privesc Cisco IOS XE Software Privilege Escalation Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-iosxe-pe Cisco IOS XE Software Privilege Escalation Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-iosxe-cmdinject Cisco IOS XE Software Command Injection Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-iosxe-cmdinj Cisco IOS XE Software Command Injection Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-ios-infoleak Cisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak Vulnerability 2019-03-27T16:00:00+00:00 2019-04-01T15:45:00+00:00
cisco-sa-20190327-info Cisco IOS and IOS XE Software Information Disclosure Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-evss Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-eta-dos Cisco IOS XE Software Encrypted Traffic Analytics Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
cisco-sa-20190327-cmp-dos Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability 2019-03-27T16:00:00+00:00 2019-03-27T16:00:00+00:00
ID Description Published Updated
msrc_cve-2025-40079 riscv, bpf: Sign extend struct ops return values properly 2025-10-02T00:00:00.000Z 2025-10-29T01:05:01.000Z
msrc_cve-2025-40078 bpf: Explicitly check accesses to bpf_sock_addr 2025-10-02T00:00:00.000Z 2025-10-29T01:02:11.000Z
msrc_cve-2025-40077 f2fs: fix to avoid overflow while left shift operation 2025-10-02T00:00:00.000Z 2025-10-29T01:03:32.000Z
msrc_cve-2025-40075 tcp_metrics: use dst_dev_net_rcu() 2025-10-02T00:00:00.000Z 2026-03-31T14:51:25.000Z
msrc_cve-2025-40074 ipv4: start using dst_dev_rcu() 2025-10-02T00:00:00.000Z 2026-03-31T14:50:15.000Z
msrc_cve-2025-40071 tty: n_gsm: Don't block input queue by waiting MSC 2025-10-02T00:00:00.000Z 2025-10-29T01:05:06.000Z
msrc_cve-2025-40068 fs: ntfs3: Fix integer overflow in run_unpack() 2025-10-02T00:00:00.000Z 2025-10-29T01:04:55.000Z
msrc_cve-2025-40065 RISC-V: KVM: Write hgatp register with valid mode bits 2025-10-02T00:00:00.000Z 2026-03-31T14:51:00.000Z
msrc_cve-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev(). 2025-10-02T00:00:00.000Z 2026-03-31T14:50:38.000Z
msrc_cve-2025-40061 RDMA/rxe: Fix race in do_task() when draining 2025-10-02T00:00:00.000Z 2025-10-29T01:02:05.000Z
msrc_cve-2025-40060 coresight: trbe: Return NULL pointer for allocation failures 2025-10-02T00:00:00.000Z 2025-10-29T01:03:16.000Z
msrc_cve-2025-40057 ptp: Add a upper bound on max_vclocks 2025-10-02T00:00:00.000Z 2026-03-31T14:51:50.000Z
msrc_cve-2025-40056 vhost: vringh: Fix copy_to_iter return value check 2025-10-02T00:00:00.000Z 2025-10-29T01:02:59.000Z
msrc_cve-2025-40055 ocfs2: fix double free in user_cluster_connect() 2025-10-02T00:00:00.000Z 2025-10-29T01:02:49.000Z
msrc_cve-2025-40053 net: dlink: handle copy_thresh allocation failure 2025-10-02T00:00:00.000Z 2025-10-29T01:02:38.000Z
msrc_cve-2025-40052 smb: client: fix crypto buffers in non-linear memory 2025-10-02T00:00:00.000Z 2025-10-29T01:02:22.000Z
msrc_cve-2025-40051 vhost: vringh: Modify the return value check 2025-10-02T00:00:00.000Z 2025-10-29T01:02:54.000Z
msrc_cve-2025-40049 Squashfs: fix uninit-value in squashfs_get_parent 2025-10-02T00:00:00.000Z 2025-10-29T01:04:20.000Z
msrc_cve-2025-40048 uio_hv_generic: Let userspace take care of interrupt mask 2025-10-02T00:00:00.000Z 2025-10-29T01:04:10.000Z
msrc_cve-2025-40044 fs: udf: fix OOB read in lengthAllocDescs handling 2025-10-02T00:00:00.000Z 2025-10-29T01:02:16.000Z
msrc_cve-2025-40043 net: nfc: nci: Add parameter validation for packet data 2025-10-02T00:00:00.000Z 2025-10-29T01:03:54.000Z
msrc_cve-2025-40042 tracing: Fix race condition in kprobe initialization causing NULL pointer dereference 2025-10-02T00:00:00.000Z 2025-12-07T01:39:37.000Z
msrc_cve-2025-40040 mm/ksm: fix flag-dropping behavior in ksm_madvise 2025-10-02T00:00:00.000Z 2026-03-03T14:57:39.000Z
msrc_cve-2025-40039 ksmbd: Fix race condition in RPC handle list access 2025-10-02T00:00:00.000Z 2026-03-31T15:16:27.000Z
msrc_cve-2025-40038 KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid 2025-10-02T00:00:00.000Z 2025-10-29T01:01:49.000Z
msrc_cve-2025-40036 misc: fastrpc: fix possible map leak in fastrpc_put_args 2025-10-02T00:00:00.000Z 2025-10-29T01:04:04.000Z
msrc_cve-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak 2025-10-02T00:00:00.000Z 2025-10-29T01:02:33.000Z
msrc_cve-2025-40033 remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() 2025-10-02T00:00:00.000Z 2025-10-29T01:03:37.000Z
msrc_cve-2025-40032 PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release 2025-10-02T00:00:00.000Z 2025-10-29T01:03:26.000Z
msrc_cve-2025-40030 pinctrl: check the return value of pinmux_ops::get_function_name() 2025-10-02T00:00:00.000Z 2025-10-29T01:02:27.000Z
ID Description Published Updated
opensuse-su-2024:14587-1 libmozjs-115-0-115.15.0-3.1 on GA media 2024-12-16T00:00:00Z 2024-12-16T00:00:00Z
opensuse-su-2024:14586-1 gstreamer-plugins-good-1.24.10-3.1 on GA media 2024-12-16T00:00:00Z 2024-12-16T00:00:00Z
opensuse-su-2024:14585-1 cloudflared-2024.12.1-1.1 on GA media 2024-12-16T00:00:00Z 2024-12-16T00:00:00Z
opensuse-su-2024:14584-1 MozillaThunderbird-128.5.2-1.1 on GA media 2024-12-16T00:00:00Z 2024-12-16T00:00:00Z
opensuse-su-2024:14583-1 MozillaFirefox-133.0.3-1.1 on GA media 2024-12-16T00:00:00Z 2024-12-16T00:00:00Z
opensuse-su-2024:14582-1 socat-1.8.0.2-1.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:14581-1 python312-3.12.8-1.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:14580-1 liboqs-devel-0.12.0-1.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:14579-1 gdk-pixbuf-loader-libheif-1.19.5-2.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:14578-1 gstreamer-plugins-good-1.24.10-2.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:14577-1 gstreamer-plugins-base-1.24.10-2.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:14576-1 gstreamer-1.24.10-2.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:14575-1 curl-8.11.1-1.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:14574-1 chromedriver-131.0.6778.139-1.1 on GA media 2024-12-13T00:00:00Z 2024-12-13T00:00:00Z
opensuse-su-2024:0406-1 Security update for chromium 2024-12-12T10:40:34Z 2024-12-12T10:40:34Z
opensuse-su-2024:0405-1 Security update for chromium 2024-12-12T10:36:26Z 2024-12-12T10:36:26Z
opensuse-su-2024:14573-1 teleport-17.0.5-1.1 on GA media 2024-12-12T00:00:00Z 2024-12-12T00:00:00Z
opensuse-su-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media 2024-12-12T00:00:00Z 2024-12-12T00:00:00Z
opensuse-su-2024:14571-1 docker-stable-24.0.9_ce-4.1 on GA media 2024-12-12T00:00:00Z 2024-12-12T00:00:00Z
opensuse-su-2024:14570-1 libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 on GA media 2024-12-11T00:00:00Z 2024-12-11T00:00:00Z
opensuse-su-2024:14569-1 radare2-5.9.8-1.1 on GA media 2024-12-11T00:00:00Z 2024-12-11T00:00:00Z
opensuse-su-2024:14568-1 python310-Django-5.1.4-1.1 on GA media 2024-12-11T00:00:00Z 2024-12-11T00:00:00Z
opensuse-su-2024:14567-1 govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media 2024-12-11T00:00:00Z 2024-12-11T00:00:00Z
opensuse-su-2024:0402-1 Security update for qt6-webengine 2024-12-09T17:02:08Z 2024-12-09T17:02:08Z
opensuse-su-2024:0400-1 Security update for nanopb 2024-12-09T11:02:14Z 2024-12-09T11:02:14Z
opensuse-su-2024:0397-1 Security update for radare2 2024-12-09T10:44:56Z 2024-12-09T10:44:56Z
opensuse-su-2024:0396-1 Security update for radare2 2024-12-09T10:44:54Z 2024-12-09T10:44:54Z
opensuse-su-2024:14566-1 squid-6.12-1.1 on GA media 2024-12-09T00:00:00Z 2024-12-09T00:00:00Z
opensuse-su-2024:14565-1 python310-Django4-4.2.17-1.1 on GA media 2024-12-09T00:00:00Z 2024-12-09T00:00:00Z
opensuse-su-2024:14564-1 lxd-5.21.1-2.1 on GA media 2024-12-09T00:00:00Z 2024-12-09T00:00:00Z
ID Description Published Updated
rhsa-2025:22014 Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.2 2025-11-25T05:10:51+00:00 2026-03-26T12:22:05+00:00
rhsa-2025:22012 Red Hat Security Advisory: buildah security update 2025-11-25T05:03:24+00:00 2026-04-14T07:56:35+00:00
rhsa-2025:21148 Red Hat Security Advisory: Red Hat build of Cryostat 4.1.0: new RHEL 9 container image security update 2025-11-25T02:09:04+00:00 2026-04-09T14:28:03+00:00
rhsa-2025:22005 Red Hat Security Advisory: go-rpm-macros security update 2025-11-25T01:21:20+00:00 2026-03-24T13:16:39+00:00
rhsa-2025:22004 Red Hat Security Advisory: go-rpm-macros security update 2025-11-25T01:11:08+00:00 2026-03-24T13:16:37+00:00
rhsa-2025:22006 Red Hat Security Advisory: kernel security update 2025-11-25T00:47:13+00:00 2026-03-19T17:34:05+00:00
rhsa-2025:21994 Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage 2025-11-24T19:34:28+00:00 2026-04-13T20:13:36+00:00
rhsa-2025:21988 Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release 2025-11-24T17:31:18+00:00 2026-03-19T17:31:13+00:00
rhsa-2025:21984 Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release 2025-11-24T17:11:01+00:00 2026-03-19T17:31:13+00:00
rhsa-2025:21977 Red Hat Security Advisory: libssh security update 2025-11-24T17:08:07+00:00 2026-04-07T08:30:22+00:00
rhsa-2025:21981 Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release 2025-11-24T16:47:41+00:00 2026-03-19T17:31:15+00:00
rhsa-2025:21974 Red Hat Security Advisory: mingw-expat security update 2025-11-24T16:17:17+00:00 2026-04-13T20:13:35+00:00
rhsa-2025:21976 Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release 2025-11-24T16:14:59+00:00 2026-03-19T17:31:12+00:00
rhsa-2025:21968 Red Hat Security Advisory: gimp security update 2025-11-24T15:50:17+00:00 2026-03-18T03:12:08+00:00
rhsa-2025:21964 Red Hat Security Advisory: buildah security update 2025-11-24T15:01:52+00:00 2026-04-14T07:56:31+00:00
rhsa-2025:21933 Red Hat Security Advisory: kernel security update 2025-11-24T10:44:17+00:00 2026-04-13T11:13:47+00:00
rhsa-2025:21939 Red Hat Security Advisory: bind9.16 security update 2025-11-24T10:36:41+00:00 2026-04-13T20:13:35+00:00
rhsa-2025:21926 Red Hat Security Advisory: kernel security update 2025-11-24T10:33:16+00:00 2026-03-18T03:11:39+00:00
rhsa-2025:21936 Red Hat Security Advisory: valkey security update 2025-11-24T09:46:26+00:00 2026-03-18T03:06:56+00:00
rhsa-2025:21931 Red Hat Security Advisory: kernel security update 2025-11-24T09:38:32+00:00 2026-03-18T03:11:36+00:00
rhsa-2025:21929 Red Hat Security Advisory: RHSA 4.9.1 security and bug fix update 2025-11-24T08:28:34+00:00 2026-03-23T15:46:38+00:00
rhsa-2025:21920 Red Hat Security Advisory: kernel-rt security update 2025-11-24T06:25:11+00:00 2026-04-13T11:13:51+00:00
rhsa-2025:21917 Red Hat Security Advisory: kernel security update 2025-11-24T02:50:01+00:00 2026-04-13T11:13:44+00:00
rhsa-2025:21916 Red Hat Security Advisory: valkey security update 2025-11-24T02:05:30+00:00 2026-03-18T03:11:04+00:00
rhsa-2025:21915 Red Hat Security Advisory: ghostscript security update 2025-11-24T02:04:55+00:00 2026-03-18T03:11:11+00:00
rhsa-2025:21913 Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update 2025-11-21T21:19:46+00:00 2026-04-14T10:01:47+00:00
rhsa-2025:21897 Red Hat Security Advisory: Satellite 6.15.5.7 Async Update 2025-11-20T21:27:37+00:00 2026-03-24T11:29:49+00:00
rhsa-2025:21894 Red Hat Security Advisory: Satellite 6.16.5.6 Async Update 2025-11-20T21:22:30+00:00 2026-03-24T11:29:46+00:00
rhsa-2025:21893 Red Hat Security Advisory: Satellite 6.17.6.1 Async Update 2025-11-20T21:18:54+00:00 2026-03-24T11:29:45+00:00
rhsa-2025:21889 Red Hat Security Advisory: bind security update 2025-11-20T21:12:54+00:00 2026-04-13T20:13:34+00:00
ID Description Published Updated
suse-su-2025:4268-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) 2025-11-26T19:33:47Z 2025-11-26T19:33:47Z
suse-su-2025:4265-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6) 2025-11-26T19:33:40Z 2025-11-26T19:33:40Z
suse-su-2025:21147-1 Security update for the Linux Kernel 2025-11-26T15:59:00Z 2025-11-26T15:59:00Z
suse-su-2025:21080-1 Security update for the Linux Kernel 2025-11-26T15:59:00Z 2025-11-26T15:59:00Z
suse-su-2025:4264-1 Security update for ruby2.5 2025-11-26T15:52:44Z 2025-11-26T15:52:44Z
suse-su-2025:21180-1 Security update for the Linux Kernel 2025-11-26T15:35:38Z 2025-11-26T15:35:38Z
suse-su-2025:4262-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6) 2025-11-26T15:07:47Z 2025-11-26T15:07:47Z
suse-su-2025:4261-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6) 2025-11-26T15:07:28Z 2025-11-26T15:07:28Z
suse-su-2025:2169-1 Security update for yelp 2025-11-26T14:47:36Z 2025-11-26T14:47:36Z
suse-su-2025:21145-1 Security update for curl 2025-11-26T14:28:47Z 2025-11-26T14:28:47Z
suse-su-2025:21077-1 Security update for curl 2025-11-26T14:28:47Z 2025-11-26T14:28:47Z
suse-su-2025:21066-1 Security update for sssd 2025-11-26T14:26:51Z 2025-11-26T14:26:51Z
suse-su-2025:21065-1 Security update for unbound 2025-11-26T14:26:20Z 2025-11-26T14:26:20Z
suse-su-2025:4258-1 Security update for python312 2025-11-26T13:44:40Z 2025-11-26T13:44:40Z
suse-su-2025:4257-1 Security update for python311 2025-11-26T13:43:01Z 2025-11-26T13:43:01Z
suse-su-2025:4256-1 Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) 2025-11-26T13:04:23Z 2025-11-26T13:04:23Z
suse-su-2025:4254-1 Security update for dpdk 2025-11-26T11:33:12Z 2025-11-26T11:33:12Z
suse-su-2025:4255-1 Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5) 2025-11-26T09:35:19Z 2025-11-26T09:35:19Z
suse-su-2025:4247-1 Security update for sssd 2025-11-26T08:56:55Z 2025-11-26T08:56:55Z
suse-su-2025:4245-1 Security update for buildah 2025-11-26T08:39:12Z 2025-11-26T08:39:12Z
suse-su-2025:4244-1 Security update for amazon-ssm-agent 2025-11-26T08:38:47Z 2025-11-26T08:38:47Z
suse-su-2025:21144-1 Security update for mysql-connector-java 2025-11-26T08:13:19Z 2025-11-26T08:13:19Z
suse-su-2025:4243-1 Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP5) 2025-11-25T22:06:17Z 2025-11-25T22:06:17Z
suse-su-2025:4242-1 Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4) 2025-11-25T21:11:35Z 2025-11-25T21:11:35Z
suse-su-2025:21052-1 Security update for the Linux Kernel 2025-11-25T18:51:32Z 2025-11-25T18:51:32Z
suse-su-2025:4239-1 Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP4) 2025-11-25T17:04:05Z 2025-11-25T17:04:05Z
suse-su-2025:21064-1 Security update for the Linux Kernel 2025-11-25T16:39:37Z 2025-11-25T16:39:37Z
suse-su-2025:4237-1 Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4) 2025-11-25T16:04:17Z 2025-11-25T16:04:17Z
suse-su-2025:4236-1 Security update for curl 2025-11-25T16:02:20Z 2025-11-25T16:02:20Z
suse-su-2025:4233-1 Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP4) 2025-11-25T14:33:49Z 2025-11-25T14:33:49Z
ID Description Published Updated
alsa-2023:7876 Moderate: opensc security update 2023-12-19T00:00:00Z 2023-12-20T12:50:29Z
alsa-2023:7841 Important: gstreamer1-plugins-bad-free security update 2023-12-14T00:00:00Z 2023-12-15T09:13:53Z
alsa-2023:7836 Moderate: avahi security update 2023-12-14T00:00:00Z 2023-12-15T09:22:34Z
alsa-2023:7791 Important: gstreamer1-plugins-bad-free security update 2023-12-13T00:00:00Z 2023-12-14T09:39:25Z
alsa-2023:7790 Important: postgresql:10 security update 2023-12-13T00:00:00Z 2023-12-22T09:34:58Z
alsa-2023:7785 Important: postgresql:15 security update 2023-12-13T00:00:00Z 2023-12-22T09:57:59Z
alsa-2023:7784 Important: postgresql security update 2023-12-13T00:00:00Z 2023-12-14T11:47:47Z
alsa-2023:7766 Moderate: containernetworking-plugins security update 2023-12-12T00:00:00Z 2023-12-14T09:39:21Z
alsa-2023:7765 Moderate: podman security update 2023-12-12T00:00:00Z 2023-12-14T09:39:39Z
alsa-2023:7764 Moderate: buildah security update 2023-12-12T00:00:00Z 2023-12-14T09:39:24Z
alsa-2023:7763 Moderate: runc security update 2023-12-12T00:00:00Z 2023-12-14T09:39:21Z
alsa-2023:7762 Moderate: skopeo security update 2023-12-12T00:00:00Z 2023-12-14T09:39:24Z
alsa-2023:7754 Moderate: pixman security update 2023-12-12T00:00:00Z 2023-12-14T09:39:30Z
alsa-2023:7753 Moderate: fence-agents security update 2023-12-12T00:00:00Z 2023-12-15T09:52:30Z
alsa-2023:7747 Moderate: libxml2 security update 2023-12-12T00:00:00Z 2023-12-14T09:39:26Z
alsa-2023:7732 Important: tracker-miners security update 2023-12-12T00:00:00Z 2023-12-14T09:39:22Z
alsa-2023:7716 Important: webkit2gtk3 security update 2023-12-11T00:00:00Z 2023-12-14T08:49:17Z
alsa-2023:7715 Important: webkit2gtk3 security update 2023-12-11T00:00:00Z 2023-12-12T07:49:58Z
alsa-2023:7714 Important: postgresql:12 security update 2023-12-11T00:00:00Z 2023-12-22T09:40:19Z
alsa-2023:7712 Important: tracker-miners security update 2023-12-11T00:00:00Z 2023-12-12T07:53:08Z
alsa-2023:7711 Moderate: apr security update 2023-12-11T00:00:00Z 2023-12-11T13:16:59Z
alsa-2023:7668 Important: squid:4 security update 2023-12-06T00:00:00Z 2023-12-14T08:59:00Z
alsa-2023:7581 Important: postgresql:13 security update 2023-11-29T00:00:00Z 2023-12-04T16:38:00Z
alsa-2023:7549 Important: kernel security and bug fix update 2023-11-28T00:00:00Z 2023-12-04T01:02:19Z
alsa-2023:7508 Important: firefox security update 2023-11-27T00:00:00Z 2023-11-29T17:25:43Z
alsa-2023:7507 Important: firefox security update 2023-11-27T00:00:00Z 2023-11-29T17:30:13Z
alsa-2023:7501 Important: thunderbird security update 2023-11-27T00:00:00Z 2023-11-29T17:32:56Z
alsa-2023:7500 Important: thunderbird security update 2023-11-27T00:00:00Z 2023-11-29T17:38:00Z
alsa-2023:7467 Moderate: samba security update 2023-11-22T00:00:00Z 2023-11-24T10:04:36Z
alsa-2023:7465 Important: squid security update 2023-11-22T00:00:00Z 2023-11-23T08:38:27Z
ID Description Published Updated
osv-2021-1186 Segv on unknown address in helper_uc_tracecode 2021-09-01T00:00:37.265526Z 2022-04-13T03:21:33.922164Z
osv-2021-1184 UNKNOWN READ in ucl_array_append 2021-09-01T00:00:25.788562Z 2022-04-13T03:04:41.758531Z
osv-2021-1183 UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi 2021-09-01T00:00:21.323146Z 2022-07-08T00:09:38.379641Z
osv-2021-1181 Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco 2021-08-31T00:00:29.155871Z 2022-07-08T00:09:36.944195Z
osv-2021-1179 UNKNOWN READ 2021-08-30T00:00:39.163462Z 2022-04-13T03:04:35.832327Z
osv-2021-1177 Stack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector 2021-08-29T00:01:18.789522Z 2022-07-08T00:09:39.559498Z
osv-2021-1176 Index-out-of-bounds in draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol 2021-08-29T00:00:08.242884Z 2022-07-08T00:09:40.094418Z
osv-2021-1174 Heap-use-after-free in zend_string_release 2021-08-28T00:00:14.689674Z 2022-04-13T03:04:33.395251Z
osv-2021-1173 UNKNOWN READ in luaG_getfuncline 2021-08-28T00:00:12.122245Z 2022-04-13T03:04:30.697967Z
osv-2021-1172 UNKNOWN WRITE in snmp_add_var 2021-08-27T00:00:41.017168Z 2022-04-13T03:04:35.816547Z
osv-2021-1171 Heap-buffer-overflow in luaG_runerror 2021-08-27T00:00:11.241923Z 2022-04-13T03:04:30.719580Z
osv-2021-1170 Heap-buffer-overflow in exif_get_slong 2021-08-26T00:00:49.024688Z 2022-04-13T03:04:40.873645Z
osv-2021-1169 UNKNOWN READ in exif_mnote_data_apple_load 2021-08-26T00:00:07.418159Z 2022-04-13T03:04:40.893998Z
osv-2021-1168 Heap-buffer-overflow in exif_get_slong 2021-08-25T00:01:25.325827Z 2022-04-13T03:04:40.883862Z
osv-2021-1167 Heap-buffer-overflow in snmp_add_var 2021-08-25T00:01:21.513657Z 2022-04-13T03:04:35.811191Z
osv-2021-1166 Use-of-uninitialized-value in H5F_addr_decode_len 2021-08-25T00:01:19.023498Z 2022-04-13T03:04:43.193034Z
osv-2021-1161 UNKNOWN READ in decode_ise 2021-08-22T00:01:29.796636Z 2022-04-13T03:04:40.493955Z
osv-2021-1160 Heap-buffer-overflow in pe_valid_dll_name 2021-08-22T00:01:21.561957Z 2022-04-13T03:04:42.166443Z
osv-2021-1159 UNKNOWN WRITE in hb_bit_set_invertible_t::set 2021-08-22T00:00:24.931714Z 2022-04-13T03:04:33.060992Z
osv-2021-1157 Heap-use-after-free in TranslateRules 2021-08-21T00:01:35.555020Z 2022-07-03T00:04:14.728795Z
osv-2021-1153 Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned 2021-08-20T00:00:40.299081Z 2022-04-13T03:27:39.250416Z
osv-2021-1152 UNKNOWN READ in exif_mnote_data_apple_load 2021-08-20T00:00:16.563182Z 2022-04-13T03:04:40.863460Z
osv-2021-1150 Heap-buffer-overflow in H5O__cont_decode 2021-08-19T00:01:42.011700Z 2022-04-13T03:04:43.171848Z
osv-2021-1149 Heap-buffer-overflow in JS::Lexer::consume 2021-08-19T00:01:39.960686Z 2022-04-13T03:04:32.170615Z
osv-2021-1145 Use-after-poison in JS::Reference::put_value 2021-08-19T00:01:22.170463Z 2022-04-13T03:04:32.186428Z
osv-2021-1143 UNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend 2021-08-19T00:00:37.149406Z 2023-02-24T01:34:15.652409Z
osv-2021-1142 Heap-buffer-overflow in exif_get_slong 2021-08-17T00:02:03.206223Z 2022-04-13T03:04:40.888904Z
osv-2021-1141 Heap-use-after-free in TranslateLetter 2021-08-17T00:01:54.252372Z 2022-07-03T00:04:11.807830Z
osv-2021-1139 UNKNOWN READ in exif_mnote_data_apple_load 2021-08-17T00:00:46.311888Z 2022-04-13T03:21:26.357825Z
osv-2021-1138 Heap-buffer-overflow in exif_get_sshort 2021-08-17T00:00:23.379322Z 2022-04-13T03:04:40.836876Z
ID Description Published Updated
bit-vault-2024-6468 Vault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior 2024-07-17T07:39:35.824Z 2025-11-06T13:25:46.476Z
bit-gitlab-2024-2880 Improper Access Control in GitLab 2024-07-13T07:23:46.684Z 2025-05-20T10:02:07.006Z
bit-gitlab-2024-5257 Improper Access Control in GitLab 2024-07-13T07:20:36.387Z 2025-05-20T10:02:07.006Z
bit-gitlab-2024-5470 Improper Access Control in GitLab 2024-07-13T07:19:23.283Z 2025-05-20T10:02:07.006Z
bit-gitlab-2024-6385 Improper Access Control in GitLab 2024-07-13T07:18:39.985Z 2025-05-20T10:02:07.006Z
bit-node-2024-22018 2024-07-12T07:29:02.117Z 2026-02-11T09:09:18.507Z
bit-dotnet-2024-38095 .NET and Visual Studio Denial of Service Vulnerability 2024-07-12T07:17:04.616Z 2025-05-20T10:02:07.006Z
bit-node-2024-22020 2024-07-11T07:28:44.706Z 2026-02-11T09:09:18.507Z
bit-gitlab-2024-2177 Improper Restriction of Rendered UI Layers or Frames in GitLab 2024-07-11T07:25:19.401Z 2025-05-20T10:02:07.006Z
bit-discourse-2024-35227 Discourse vulnerable to DoS through Onebox 2024-07-09T08:44:00.861Z 2025-05-20T10:02:07.006Z
bit-discourse-2024-35234 Discourse vulnerable to stored-dom XSS via Facebook Oneboxes 2024-07-09T08:43:42.054Z 2025-05-20T10:02:07.006Z
bit-discourse-2024-36113 Discourse missing authorization checks for suspending admins/moderators 2024-07-09T08:43:25.553Z 2025-05-20T10:02:07.006Z
bit-discourse-2024-36122 Discourse doesn't limit reviewable user serializer payload 2024-07-09T08:43:07.853Z 2025-05-20T10:02:07.006Z
bit-discourse-2024-37157 Discourse vulnerable to Server-Side Request Forgery via FastImage 2024-07-09T08:42:49.752Z 2025-05-20T10:02:07.006Z
bit-mastodon-2024-37903 Mastodon has improper authorship check on audience extension for existing posts 2024-07-09T07:24:52.373Z 2025-05-20T10:02:07.006Z
bit-apache-2024-39884 Apache HTTP Server: source code disclosure with handlers configured via AddType 2024-07-09T07:16:13.078Z 2025-05-20T10:02:07.006Z
bit-golang-2023-24531 Output of "go env" does not sanitize values in cmd/go 2024-07-04T07:29:14.949Z 2025-05-20T10:02:07.006Z
bit-mongodb-2024-6375 Missing authorization check may lead to shard key refinement 2024-07-04T07:26:49.343Z 2025-05-20T10:02:07.006Z
bit-golang-2024-24791 Denial of service due to improper 100-continue handling in net/http 2024-07-04T07:19:32.455Z 2025-05-20T10:02:07.006Z
bit-parse-2024-39309 ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability 2024-07-03T07:30:26.360Z 2025-05-20T10:02:07.006Z
bit-apache-2024-36387 Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2 2024-07-03T07:18:02.756Z 2025-05-20T10:02:07.006Z
bit-envoy-2024-39305 Envoy Proxy use after free when route hash policy is configured with cookie attributes 2024-07-03T07:17:43.459Z 2025-09-03T09:06:51.338Z
bit-apache-2024-38473 Apache HTTP Server proxy encoding problem 2024-07-03T07:17:33.455Z 2025-05-20T10:02:07.006Z
bit-apache-2024-38474 Apache HTTP Server weakness with encoded question marks in backreferences 2024-07-03T07:17:14.955Z 2025-05-20T10:02:07.006Z
bit-apache-2024-38475 Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. 2024-07-03T07:17:00.654Z 2025-11-06T13:25:46.476Z
bit-apache-2024-38476 Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect 2024-07-03T07:16:44.458Z 2025-11-06T13:25:46.476Z
bit-apache-2024-38477 Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request 2024-07-03T07:16:30.955Z 2025-11-06T13:25:46.476Z
bit-apache-2024-39573 Apache HTTP Server: mod_rewrite proxy handler substitution 2024-07-03T07:16:17.249Z 2025-11-06T13:25:46.476Z
bit-pillow-2024-28219 2024-07-02T07:31:57.223Z 2026-02-11T09:09:18.507Z
bit-django-2024-27351 2024-07-02T07:16:49.319Z 2026-02-11T09:09:18.507Z
ID Description Updated
ID Description Published Updated
certfr-2024-avi-0627 Multiples vulnérabilités dans les produits VMware 2024-07-26T00:00:00.000000 2024-07-26T00:00:00.000000
certfr-2024-avi-0626 Multiples vulnérabilités dans les produits Mitel 2024-07-25T00:00:00.000000 2024-07-25T00:00:00.000000
certfr-2024-avi-0625 Multiples vulnérabilités dans GitLab 2024-07-25T00:00:00.000000 2024-07-25T00:00:00.000000
certfr-2024-avi-0624 Vulnérabilité dans Spring Cloud Skipper 2024-07-25T00:00:00.000000 2024-07-25T00:00:00.000000
certfr-2024-avi-0623 Multiples vulnérabilités Microsoft GroupMe 2024-07-24T00:00:00.000000 2024-07-24T00:00:00.000000
certfr-2024-avi-0622 Multiples vulnérabilités dans Google Chrome 2024-07-24T00:00:00.000000 2024-07-24T00:00:00.000000
certfr-2024-avi-0621 Vulnérabilité dans Nagios XI 2024-07-24T00:00:00.000000 2024-07-24T00:00:00.000000
certfr-2024-avi-0620 Multiples vulnérabilités dans les produits HPE Aruba Networking 2024-07-24T00:00:00.000000 2024-07-24T00:00:00.000000
certfr-2024-avi-0619 Multiples vulnérabilités dans les produits VMware 2024-07-24T00:00:00.000000 2024-07-24T00:00:00.000000
certfr-2024-avi-0618 Multiples vulnérabilités dans ISC BIND 2024-07-24T00:00:00.000000 2024-07-24T00:00:00.000000
certfr-2024-avi-0617 Multiples vulnérabilités dans les produits Siemens 2024-07-23T00:00:00.000000 2024-07-23T00:00:00.000000
certfr-2024-avi-0616 Vulnérabilité dans les produits Atlassian 2024-07-22T00:00:00.000000 2024-07-22T00:00:00.000000
certfr-2024-avi-0615 Vulnérabilité dans les produits NetApp 2024-07-22T00:00:00.000000 2024-07-22T00:00:00.000000
certfr-2024-avi-0614 Vulnérabilité dans IBM MaaS360 2024-07-19T00:00:00.000000 2024-07-19T00:00:00.000000
certfr-2024-avi-0613 Multiples vulnérabilités dans le noyau Linux de Debian 2024-07-19T00:00:00.000000 2024-07-19T00:00:00.000000
certfr-2024-avi-0612 Multiples vulnérabilités dans le noyau Linux de Red Hat 2024-07-19T00:00:00.000000 2024-07-19T00:00:00.000000
certfr-2024-avi-0611 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2024-07-19T00:00:00.000000 2024-07-19T00:00:00.000000
certfr-2024-avi-0610 Multiples vulnérabilités dans le noyau Linux de SUSE 2024-07-19T00:00:00.000000 2024-07-19T00:00:00.000000
certfr-2024-avi-0609 Multiples vulnérabilités dans SolarWinds Access Rights Manager 2024-07-19T00:00:00.000000 2024-07-19T00:00:00.000000
certfr-2024-avi-0608 Vulnérabilité dans VMware Tanzu 2024-07-19T00:00:00.000000 2024-07-19T00:00:00.000000
certfr-2024-avi-0607 Multiples vulnérabilités dans Microsoft Edge 2024-07-19T00:00:00.000000 2024-07-19T00:00:00.000000
certfr-2024-avi-0606 Multiples vulnérabilités dans les produits Ivanti 2024-07-18T00:00:00.000000 2024-07-18T00:00:00.000000
certfr-2024-avi-0605 Vulnérabilité dans les produits Sonicwall 2024-07-18T00:00:00.000000 2024-07-18T00:00:00.000000
certfr-2024-avi-0604 Vulnérabilité dans Microsoft Edge 2024-07-18T00:00:00.000000 2024-07-18T00:00:00.000000
certfr-2024-avi-0603 Multiples vulnérabilités dans Apache HTTP Server 2024-07-18T00:00:00.000000 2024-07-18T00:00:00.000000
certfr-2024-avi-0602 Multiples vulnérabilités dans les produits Cisco 2024-07-18T00:00:00.000000 2024-07-18T00:00:00.000000
certfr-2024-avi-0601 Multiples vulnérabilités dans les produits Mitel 2024-07-18T00:00:00.000000 2025-01-31T00:00:00.000000
certfr-2024-avi-0600 Vulnérabilité dans Sonicwall NetExtender 2024-07-17T00:00:00.000000 2024-07-17T00:00:00.000000
certfr-2024-avi-0599 Multiples vulnérabilités dans Oracle Weblogic 2024-07-17T00:00:00.000000 2024-07-17T00:00:00.000000
certfr-2024-avi-0598 Multiples vulnérabilités dans Oracle Virtualization 2024-07-17T00:00:00.000000 2024-07-17T00:00:00.000000
ID Description Published Updated
jvndb-2014-000107 SLFileManager for Android vulnerable to directory traversal 2014-09-25T14:52+09:00 2015-07-31T16:30+09:00
jvndb-2014-000111 Yuko Yuko App for Android fails to verify SSL server certificates 2014-09-22T13:50+09:00 2014-09-22T13:50+09:00
jvndb-2014-000110 Dotclear vulnerable to cross-site scripting 2014-09-19T13:42+09:00 2014-09-25T17:52+09:00
jvndb-2014-000109 Bump for Android vulnerable in handling of implicit intents 2014-09-19T13:41+09:00 2014-09-25T17:44+09:00
jvndb-2014-000114 FileMaker Pro fails to verify SSL server certificates 2014-09-18T20:36+09:00 2014-09-24T18:47+09:00
jvndb-2014-000113 FileMaker Pro vulnerable to cross-site scripting 2014-09-18T20:36+09:00 2015-05-22T11:37+09:00
jvndb-2014-000106 365 Links series vulnerable to cross-site scripting 2014-09-17T15:23+09:00 2014-09-19T13:33+09:00
jvndb-2014-000105 Help Page in multiple Adobe products vulnerable to cross-site scripting 2014-09-12T14:00+09:00 2014-09-29T11:42+09:00
jvndb-2014-000104 Movable Type vulnerable to cross-site scripting 2014-09-09T15:02+09:00 2014-09-11T16:56+09:00
jvndb-2014-000084 WisePoint vulnerable to session fixation 2014-09-04T16:46+09:00 2014-09-09T15:02+09:00
jvndb-2014-000103 EmFTP may insecurely load executable files 2014-09-04T16:36+09:00 2014-09-09T15:15+09:00
jvndb-2014-000102 Kindle App for Android fails to verify SSL server certificates 2014-08-29T13:38+09:00 2014-09-03T18:25+09:00
jvndb-2014-000101 MailPoet Newsletters vulnerable to cross-site request forgery 2014-08-26T13:33+09:00 2014-08-28T18:13+09:00
jvndb-2014-000099 Advance-Flow vulnerable to SQL injection 2014-08-19T12:35+09:00 2014-08-20T16:26+09:00
jvndb-2014-000100 Cakifo vulnerable to cross-site scripting 2014-08-18T13:32+09:00 2014-08-20T16:30+09:00
jvndb-2014-000096 Shutter vulnerable to cross-site scripting 2014-08-15T13:27+09:00 2014-08-19T16:27+09:00
jvndb-2014-000095 Shutter vulnerable to SQL injection 2014-08-15T13:24+09:00 2015-01-15T17:47+09:00
jvndb-2014-000098 Ameba for Android contains an issue where it fails to verify SSL server certificates 2014-08-14T12:32+09:00 2014-08-18T12:22+09:00
jvndb-2014-000097 Dominion KX2-101 vulnerable to denial-of-service (DoS) 2014-08-12T14:03+09:00 2014-08-18T09:44+09:00
jvndb-2014-000094 Piwigo vulnerable to SQL injection 2014-08-08T13:57+09:00 2014-08-08T13:57+09:00
jvndb-2014-000093 Piwigo vulnerable to cross-site scripting 2014-08-08T13:52+09:00 2014-08-19T16:48+09:00
jvndb-2014-000092 Piwigo vulnerable to cross-site scripting 2014-08-08T13:49+09:00 2014-08-15T13:35+09:00
jvndb-2014-000085 GOM Player vulnerable to denial-of-service (DoS) 2014-08-06T15:22+09:00 2014-08-13T18:29+09:00
jvndb-2014-000091 ServerView Operations Manager vulnerable to cross-site scripting 2014-08-01T15:42+09:00 2014-08-18T10:05+09:00
jvndb-2014-000086 Outlook.com for Android contains an issue where it fails to verify SSL server certificates 2014-07-30T15:11+09:00 2014-08-18T10:09+09:00
jvndb-2014-000087 Multiple I-O DATA IP Cameras vulnerable to authentication bypass 2014-07-29T14:24+09:00 2014-08-01T18:30+09:00
jvndb-2014-000088 PerlMailer vulnerable to cross-site scripting 2014-07-29T14:20+09:00 2014-08-01T18:28+09:00
jvndb-2014-000089 acmailer contains a cross-site request forgery vulnerability 2014-07-29T14:15+09:00 2014-08-01T18:29+09:00
jvndb-2013-002240 Arbitrary program execution vulnerability in TrendLink ActiveX control 2014-07-25T14:44+09:00 2014-07-25T14:44+09:00
jvndb-2014-000082 FuelPHP vulnerable to remote code execution 2014-07-18T13:50+09:00 2014-07-23T11:03+09:00
ID Description Published Updated
cnvd-2025-30130 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin未经授权的数据修改漏洞 2025-11-25 2025-12-05
cnvd-2025-30129 WordPress ELEX WordPress HelpDesk&Customer Ticketing System plugin缺少权限检查漏洞 2025-11-25 2025-12-05
cnvd-2025-29748 AMD StoreMI DLL劫持漏洞 2025-11-25 2025-12-03
cnvd-2025-29747 AMD StoreMI默认权限配置不当漏洞 2025-11-25 2025-12-03
cnvd-2025-29746 AMD CPU存在未明漏洞 2025-11-25 2025-12-03
cnvd-2025-29745 AMD CPU熵处理不当漏洞 2025-11-25 2025-12-03
cnvd-2025-29508 WordPress BrightTALK Shortcode plugin跨站脚本漏洞 2025-11-25 2025-11-28
cnvd-2025-29507 WordPress Booking Calendar Contact Form Plugin缺少授权漏洞 2025-11-25 2025-11-28
cnvd-2025-29506 WordPress Bold Page Builder plugin跨站脚本漏洞 2025-11-25 2025-11-28
cnvd-2025-29505 WordPress BigBuy Dropshipping Connector for WooCommerce pluginIP地址伪造漏洞 2025-11-25 2025-11-28
cnvd-2025-29504 WordPress Better Chat Support for Messenger plugin缺少授权漏洞 2025-11-25 2025-11-28
cnvd-2025-29503 WordPress AuthorSure plugin跨站请求伪造漏洞 2025-11-25 2025-11-28
cnvd-2025-29502 WordPress AudioTube plugin跨站脚本漏洞 2025-11-25 2025-11-28
cnvd-2025-29501 WordPress Arconix Shortcodes plugin缺失授权漏洞 2025-11-25 2025-11-28
cnvd-2025-29500 WordPress Appointment Booking Calendar plugin缺失授权漏洞 2025-11-25 2025-11-28
cnvd-2025-29499 WordPress Affiliate AI Lite plugin跨站脚本漏洞 2025-11-25 2025-11-28
cnvd-2026-07114 IBM Concert信息泄露漏洞(CNVD-2026-07114) 2025-11-24 2026-01-23
cnvd-2026-06813 D-Link DWR-M920 sub_41C7FC函数缓冲区溢出漏洞 2025-11-24 2026-01-23
cnvd-2026-06289 用友网络科技股份有限公司用友U9多组织企业互联网应用平台存在任意文件下载漏洞 2025-11-24 2026-01-23
cnvd-2026-05333 Complete Online Beauty Parlor Management System /customer-list.php文件跨站脚本漏洞 2025-11-24 2026-01-21
cnvd-2026-00801 UTT 进取 750W命令注入漏洞 2025-11-24 2026-01-08
cnvd-2025-30581 Apache Causeway反序列化漏洞 2025-11-24 2025-12-12
cnvd-2025-29916 Microsoft Application Gateway权限提升漏洞 2025-11-24 2025-12-04
cnvd-2025-29670 IBM Concert跨站脚本漏洞 2025-11-24 2025-12-01
cnvd-2025-29669 IBM Concert加密问题漏洞(CNVD-2025-29669) 2025-11-24 2025-12-01
cnvd-2025-29668 IBM Concert信息泄露漏洞 2025-11-24 2025-12-01
cnvd-2025-29667 IBM Concert输出中和不当漏洞 2025-11-24 2025-12-01
cnvd-2025-29594 COVID Tracking System SQL注入漏洞 2025-11-24 2025-12-01
cnvd-2025-29428 Tenda AC21 SetIpMacBind文件栈缓冲区溢出漏洞 2025-11-24 2025-11-26
cnvd-2025-29427 Tenda AC21 SetSysTimeCfg文件栈缓冲区溢出漏洞 2025-11-24 2025-11-26
ID Description Published Updated
bdu:2025-15977 Уязвимость функции cfFilterImageToRaster сервера печати CUPS, позволяющая нарушителю оказ… 16.12.2025 21.01.2026
bdu:2025-15976 Уязвимость пакета npm React Router, связанная с недостаточной обработкой исключительных с… 16.12.2025 16.12.2025
bdu:2025-15975 Уязвимость функции import_flow фреймворка для разработки приложений на основе больших язы… 16.12.2025 16.12.2025
bdu:2025-15974 Уязвимость программного средства мониторинга и анализа сетевого трафика Nagios Network An… 16.12.2025 16.12.2025
bdu:2025-15973 Уязвимость программного средства мониторинга и анализа сетевого трафика Nagios Network An… 16.12.2025 16.12.2025
bdu:2025-15972 Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… 16.12.2025 16.12.2025
bdu:2025-15971 Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… 16.12.2025 16.12.2025
bdu:2025-15970 Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… 16.12.2025 16.12.2025
bdu:2025-15969 Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… 16.12.2025 16.12.2025
bdu:2025-15968 Уязвимость программного средства визуализации рабочего состояния ИТ-инфраструктуры предпр… 16.12.2025 16.12.2025
bdu:2025-15967 Уязвимость программного средства мониторинга и анализа сетевого трафика Nagios Network An… 16.12.2025 16.12.2025
bdu:2025-15966 Уязвимость конечной точки API system/stop службы Elasticsearch программного средства мони… 16.12.2025 16.12.2025
bdu:2025-15965 Уязвимость компонента Toolbar браузера Google Chrome, позволяющая нарушителю раскрыть защ… 16.12.2025 16.12.2025
bdu:2025-15964 Уязвимость компонента Password Manager браузера Google Chrome, позволяющая нарушителю рас… 16.12.2025 29.01.2026
bdu:2025-15963 Уязвимость плагина Jenkins HashiCorp Vault Plugin, связанная с недостатками разграничения… 16.12.2025 16.12.2025
bdu:2025-15962 Уязвимость плагина для работы с репозиториями Git Jenkins Git client Plugin, связанная с … 16.12.2025 16.12.2025
bdu:2025-15961 Уязвимость сервера автоматизации Jenkins, связанная с хранением информации в открытом вид… 16.12.2025 12.01.2026
bdu:2025-15960 Уязвимость сервера автоматизации Jenkins, связанная с хранением информации в открытом вид… 16.12.2025 12.01.2026
bdu:2025-15959 Уязвимость сервера автоматизации Jenkins, связанная с некорректной зачисткой или освобожд… 16.12.2025 12.01.2026
bdu:2025-15958 Уязвимость инструмента блокировки несанкционированного исходящего трафика в рабочих проце… 16.12.2025 16.12.2025
bdu:2025-15957 Уязвимость функции dsa_switch_shutdown() модуля net/dsa/dsa2.c поддержки коммутаторов с р… 16.12.2025 20.01.2026
bdu:2025-15956 Уязвимость функции ivpu_ipc_receive() модуля drivers/accel/ivpu/ivpu_ipc.c - драйвера под… 16.12.2025 16.12.2025
bdu:2025-15955 Уязвимость функции hclge_ptp_set_tx_info() модуля drivers/net/ethernet/hisilicon/hns3/hns… 16.12.2025 16.12.2025
bdu:2025-15954 Уязвимость функции ls_recover() модуля fs/dlm/recoverd.c поддержки распределенного менедж… 16.12.2025 16.12.2025
bdu:2025-15953 Уязвимость функции hx83102_get_modes() модуля drivers/gpu/drm/panel/panel-himax-hx83102.c… 16.12.2025 16.12.2025
bdu:2025-15952 Уязвимость функции amdgpu_discovery_get_nps_info() модуля drivers/gpu/drm/amd/amdgpu/amdg… 16.12.2025 16.12.2025
bdu:2025-15951 Уязвимость функции truncate_node() модуля fs/f2fs/node.c поддержки файловой системы F2FS … 16.12.2025 16.12.2025
bdu:2025-15950 Уязвимость функции virtnet_enable_queue_pair() модуля drivers/net/virtio_net.c - драйвера… 16.12.2025 16.12.2025
bdu:2025-15949 Уязвимость определения структуры rx_agg_cmp{} модуля drivers/net/ethernet/broadcom/bnxt/b… 16.12.2025 16.12.2025
bdu:2025-15948 Уязвимость функции imx_pgc_power_up() модуля drivers/pmdomain/imx/gpcv2.c ядра операционн… 16.12.2025 16.12.2025
ID Description Updated
var-202310-0077 D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability.… 2025-11-19T23:27:45.258000Z
var-202403-0814 A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18. Affected b… 2025-11-19T23:27:44.590000Z
var-202509-1065 An issue in TP-Link AX10 Ax1500 v.1.3.10 Build (20230130) allows a remote attacker to obt… 2025-11-19T23:27:41.424000Z
var-202509-4465 The AC20 is a wireless router. The AC20 router developed by Shenzhen Jixiang Tengda Tech… 2025-11-19T23:27:41.248000Z
var-202509-4507 The X18 is a wireless router manufactured by TOTOLINK, a Chinese company. The TOTOLINK X… 2025-11-19T23:27:41.230000Z
var-202510-0885 A vulnerability exists in the iHealth command that may allow an authenticated attacker wi… 2025-11-19T23:27:41.136000Z
var-202510-2082 Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the … 2025-11-19T23:27:41.009000Z
var-202510-2145 Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page paramet… 2025-11-19T23:27:40.984000Z
var-202510-2187 A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the… 2025-11-19T23:27:40.966000Z
var-202510-2250 Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allow… 2025-11-19T23:27:40.928000Z
var-202510-2334 A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fro… 2025-11-19T23:27:40.831000Z
var-202510-2355 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … 2025-11-19T23:27:40.807000Z
var-202511-0056 A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the … 2025-11-19T23:27:40.167000Z
var-202511-0245 /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-… 2025-11-19T23:27:40.067000Z
var-202508-0592 A vulnerability was determined in Tenda AC20 up to 16.03.08.12. Affected is an unknown fu… 2025-11-19T23:27:12.191000Z
var-202509-1655 A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function … 2025-11-19T23:27:11.906000Z
var-202509-4458 The EDR-810-VPN-2GSFP is an industrial multi-port security router. The EDR-810-VPN-2GSFP… 2025-11-19T23:27:11.731000Z
var-202509-4500 The A720R is a dual-band gigabit wireless router. The ZEON Electronics (Shenzhen) Co., L… 2025-11-19T23:27:11.711000Z
var-202510-0048 A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this iss… 2025-11-19T23:27:11.695000Z
var-202510-0111 A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the … 2025-11-19T23:27:11.671000Z
var-202510-1592 When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are con… 2025-11-19T23:27:11.545000Z
var-202510-2306 A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown … 2025-11-19T23:27:11.395000Z
var-202511-0003 Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: t… 2025-11-19T23:27:10.516000Z
var-202304-0357 Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid para… 2025-11-19T23:25:05.288000Z
var-202308-3331 Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function. She… 2025-11-19T23:25:04.637000Z
var-202308-3583 In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do… 2025-11-19T23:25:04.602000Z
var-202309-2840 D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function. D-L… 2025-11-19T23:25:04.440000Z
var-202312-0971 TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFil… 2025-11-19T23:25:04.180000Z
var-202403-0865 A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20_multi and classified as… 2025-11-19T23:25:03.788000Z
var-202507-0652 A vulnerability of plugin openid-connect in Apache APISIX. This vulnerability will only… 2025-11-19T23:25:01.002000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated