Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-37337 |
7.3 (3.1)
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T17:26:11.625Z |
| CVE-2026-37336 |
7.3 (3.1)
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T17:28:46.565Z |
| CVE-2026-37100 |
6.5 (3.1)
|
An issue in the Bluetooth Low Energy (BLE) contro… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-18T02:26:33.302Z |
| CVE-2026-30656 |
7.5 (3.1)
|
A NULL pointer dereference vulnerability exists i… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T17:33:52.962Z |
| CVE-2026-30459 |
7.1 (3.1)
|
An issue in the Forgot Password feature of Daylig… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T15:16:57.348Z |
| CVE-2026-5363 |
5.4 (4.0)
|
Use of weak cryptographic key in TP-Link Archer C7 |
TP-Link Systems Inc. |
Archer C7 v5 and v5.8 |
2026-04-15T23:45:54.271Z | 2026-04-16T23:10:46.170Z |
| CVE-2026-4880 |
9.8 (3.1)
|
Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthentica… |
ukrsolution |
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) |
2026-04-15T23:25:49.596Z | 2026-04-16T14:20:50.654Z |
| CVE-2026-40245 |
7.5 (3.1)
|
Free5GC: UDR nudr-dr influenceData/subs-to-notify leak… |
free5gc |
free5gc |
2026-04-15T23:25:11.589Z | 2026-04-16T12:04:46.694Z |
| CVE-2026-40193 |
8.2 (3.1)
|
Maddy Mail Server: LDAP Filter Injection via Unsanitiz… |
foxcpp |
maddy |
2026-04-15T23:15:25.011Z | 2026-04-16T14:23:52.438Z |
| CVE-2026-40947 |
2.9 (3.1)
|
Yubico libfido2 before 1.17.0, python-fido2 befor… |
Yubico |
libfido2 |
2026-04-15T23:13:38.977Z | 2026-04-16T13:18:13.069Z |
| CVE-2026-40192 |
8.7 (4.0)
|
Pillow is vulnerable to a FITS GZIP decompression bomb |
python-pillow |
Pillow |
2026-04-15T22:53:56.147Z | 2026-04-16T13:37:19.918Z |
| CVE-2026-40316 |
8.8 (3.1)
|
OWASP BLT has RCE in Github Actions via untrusted Djan… |
OWASP-BLT |
BLT |
2026-04-15T22:49:18.636Z | 2026-04-16T14:18:12.374Z |
| CVE-2026-39350 |
5.4 (3.1)
|
Istio AuthorizationPolicy Incorrect Regex Matching of … |
istio |
istio |
2026-04-15T22:42:24.216Z | 2026-04-16T12:04:54.038Z |
| CVE-2026-40179 |
5.3 (4.0)
|
Prometheus: Stored XSS via metric names and label valu… |
prometheus |
prometheus |
2026-04-15T22:26:46.909Z | 2026-04-16T14:21:42.130Z |
| CVE-2026-4949 |
4.3 (3.1)
|
ProfilePress <= 4.16.12 - Missing Authorization to Aut… |
properfraction |
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress |
2026-04-15T22:26:05.515Z | 2026-04-16T14:19:21.197Z |
| CVE-2026-6388 |
9.1 (3.1)
|
Argocd-image-updater: argocd image updater: cross-name… |
Red Hat |
Red Hat OpenShift GitOps |
2026-04-15T21:34:07.022Z | 2026-04-16T14:26:23.879Z |
| CVE-2026-1711 |
4.8 (4.0)
|
Pega Platform versions 8.1.0 through 25.1.1 are affect… |
Pegasystems |
Pega Infinity |
2026-04-15T21:32:51.821Z | 2026-04-16T14:17:53.761Z |
| CVE-2026-1564 |
5.1 (4.0)
|
Pega Platform versions 8.1.0 through 25.1.1 are affect… |
Pegasystems |
Pega Infinity |
2026-04-15T21:31:19.982Z | 2026-04-16T14:16:54.925Z |
| CVE-2026-40500 |
6.1 (4.0)
6.8 (3.1)
|
ProcessWire CMS SSRF via Add Module From URL |
processwire |
processwire |
2026-04-15T21:25:53.214Z | 2026-04-16T13:38:15.341Z |
| CVE-2026-40261 |
8.8 (3.1)
|
Composer has Command Injection via Malicious Perforce … |
composer |
composer |
2026-04-15T20:56:32.182Z | 2026-04-16T13:41:12.977Z |
| CVE-2026-40176 |
7.8 (3.1)
|
Composer is vulnerable to Command Injection via Malici… |
composer |
composer |
2026-04-15T20:47:39.839Z | 2026-04-16T14:16:39.968Z |
| CVE-2026-22676 |
8.5 (4.0)
7.8 (3.1)
|
Barracuda RMM < 2025.2.2 Privilege Escalation via Inse… |
Barracuda Networks |
RMM |
2026-04-15T20:45:23.918Z | 2026-04-16T12:05:01.880Z |
| CVE-2026-40173 |
9.4 (3.1)
|
Dgraph: Unauthenticated pprof endpoint leaks admin aut… |
dgraph-io |
dgraph |
2026-04-15T20:40:47.186Z | 2026-04-16T12:05:10.186Z |
| CVE-2026-40186 |
6.1 (3.1)
|
ApostropheCMS: sanitize-html allowedTags Bypass via En… |
apostrophecms |
apostrophe |
2026-04-15T20:15:12.333Z | 2026-04-16T14:15:41.275Z |
| CVE-2026-39857 |
5.3 (3.1)
|
Information Disclosure via `choices`/`counts` Query Pa… |
apostrophecms |
apostrophe |
2026-04-15T19:38:57.564Z | 2026-04-16T13:40:17.710Z |
| CVE-2026-35569 |
8.7 (3.1)
|
ApostropheCMS: Stored XSS in SEO Fields Leads to Authe… |
apostrophecms |
apostrophe |
2026-04-15T19:34:23.648Z | 2026-04-16T14:14:58.325Z |
| CVE-2026-33889 |
5.4 (3.1)
|
ApostropheCMS: Stored XSS via CSS Custom Property Inje… |
apostrophecms |
apostrophe |
2026-04-15T19:29:50.899Z | 2026-04-16T12:05:17.734Z |
| CVE-2026-33888 |
5.3 (3.1)
|
ApostropheCMS: publicApiProjection Bypass via `project… |
apostrophecms |
apostrophe |
2026-04-15T19:25:46.262Z | 2026-04-15T20:03:30.594Z |
| CVE-2026-21726 |
5.3 (3.1)
|
Loki Path Traversal - CVE-2021-36156 Bypass |
Grafana |
Loki |
2026-04-15T19:24:31.268Z | 2026-04-24T08:00:46.291Z |
| CVE-2026-6385 |
6.5 (3.1)
|
Ffmpeg: ffmpeg: denial of service and potential arbitr… |
Red Hat |
Lightspeed Core |
2026-04-15T19:18:39.354Z | 2026-04-15T20:01:15.671Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-3596 |
9.8 (3.1)
|
Riaxe Product Customizer <= 2.1.2 - Missing Authorizat… |
imprintnext |
Riaxe Product Customizer |
2026-04-16T05:29:52.265Z | 2026-04-16T12:56:20.193Z |
| CVE-2026-3595 |
5.3 (3.1)
|
Riaxe Product Customizer <= 2.1.2 - Unauthenticated Ar… |
imprintnext |
Riaxe Product Customizer |
2026-04-16T05:29:52.794Z | 2026-04-16T12:04:31.317Z |
| CVE-2026-3581 |
5.3 (3.1)
|
Basic Google Maps Placemarks <= 1.10.7 - Missing Autho… |
iandunn |
Basic Google Maps Placemarks |
2026-04-16T05:29:55.137Z | 2026-04-16T13:44:00.613Z |
| CVE-2026-3551 |
4.4 (3.1)
|
Custom New User Notification <= 1.2.0 - Authenticated … |
rafasashi |
Custom New User Notification |
2026-04-16T05:29:53.185Z | 2026-04-16T13:42:26.444Z |
| CVE-2026-22619 |
7.8 (3.1)
|
Eaton Intelligent Power Protector (IPP) is affect… |
Eaton |
IPP software |
2026-04-16T05:26:48.952Z | 2026-04-16T12:59:37.700Z |
| CVE-2026-22618 |
5.9 (3.1)
|
A security misconfiguration was identified in Eat… |
Eaton |
IPP software |
2026-04-16T05:11:06.548Z | 2026-04-16T13:10:01.651Z |
| CVE-2026-22617 |
5.7 (3.1)
|
Eaton Intelligent Power Protector (IPP) uses an i… |
Eaton |
IPP Software |
2026-04-16T05:02:07.710Z | 2026-04-16T13:23:29.510Z |
| CVE-2026-40118 |
6.3 (3.0)
5.1 (4.0)
|
UDP Console provided by Arcserve contains an inco… |
Arcserve |
UDP Console |
2026-04-16T04:19:27.326Z | 2026-04-16T13:00:56.282Z |
| CVE-2026-22616 |
6.5 (3.1)
|
Eaton Intelligent Power Protector (IPP) software … |
Eaton |
IPP Software |
2026-04-16T04:54:48.148Z | 2026-04-16T13:30:12.024Z |
| CVE-2026-22615 |
6 (3.1)
|
Due to improper input validation in one of the Ea… |
Eaton |
IPP Software |
2026-04-16T04:45:58.055Z | 2026-04-16T12:59:58.829Z |
| CVE-2023-5872 |
4.3 (3.1)
|
Wago: Vulnerability in Smart Designer Web-Application |
Wago |
Smart Designer |
2026-04-16T04:55:36.146Z | 2026-04-16T12:59:27.608Z |
| CVE-2023-3634 |
8.8 (3.1)
|
Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation … |
Festo |
MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGD |
2026-04-16T04:40:29.960Z | 2026-04-16T13:51:55.114Z |
| CVE-2026-5070 |
6.4 (3.1)
|
Vantage <= 1.20.32 - Authenticated (Contributor+) Stor… |
siteorigin |
Vantage |
2026-04-16T03:36:36.878Z | 2026-04-16T14:16:34.761Z |
| CVE-2026-4032 |
6.1 (3.1)
|
CodeColorer <= 0.10.1 - Unauthenticated Stored Cross-S… |
kpumuk |
CodeColorer |
2026-04-16T03:36:35.757Z | 2026-04-16T13:01:34.884Z |
| CVE-2026-3878 |
6.4 (3.1)
|
WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored … |
fahadmahmood |
WP Docs |
2026-04-16T03:36:36.430Z | 2026-04-16T13:44:27.331Z |
| CVE-2026-6351 |
8.7 (4.0)
7.5 (3.1)
|
Openfind|MailGates/MailAudit - CRLF Injection |
Openfind |
MailGates |
2026-04-16T02:39:02.015Z | 2026-04-16T13:02:24.951Z |
| CVE-2026-6350 |
9.3 (4.0)
9.8 (3.1)
|
Openfind|MailGates/MailAudit - Stack-based Buffer Overflow |
Openfind |
MailGates |
2026-04-16T02:30:17.942Z | 2026-04-16T13:16:52.215Z |
| CVE-2026-6349 |
9.3 (4.0)
9.8 (3.1)
|
HGiga|iSherlock - OS Command Injection |
HGiga |
iSherlock-base-4.5 |
2026-04-16T02:24:45.258Z | 2026-04-24T07:23:51.324Z |
| CVE-2026-6348 |
9.3 (4.0)
8.8 (3.1)
|
Simopro Technology|WinMatrix - Missing Authentication |
Simopro Technology |
WinMatrix |
2026-04-16T01:53:07.148Z | 2026-04-16T12:31:42.790Z |
| CVE-2026-41015 |
7.4 (3.1)
|
radare2 before 9236f44, when configured on UNIX w… |
radare |
radare2 |
2026-04-16T02:35:47.196Z | 2026-04-16T13:15:26.207Z |
| CVE-2026-3885 |
6.4 (3.1)
|
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.9 - … |
gn_themes |
WP Shortcodes Plugin — Shortcodes Ultimate |
2026-04-16T02:25:17.471Z | 2026-04-16T12:04:38.531Z |
| CVE-2026-3428 |
5.4 (4.0)
|
A Download of Code Without Integrity Check vulner… |
ASUS |
Member Center(华硕大厅) |
2026-04-16T02:02:41.534Z | 2026-04-16T12:31:27.657Z |
| CVE-2026-1880 |
5.4 (4.0)
|
An Incorrect Permission Assignment for Critical R… |
ASUS |
DriverHub |
2026-04-16T02:00:36.112Z | 2026-04-16T12:31:34.003Z |
| CVE-2026-40962 |
4.9 (3.1)
|
FFmpeg before 8.1 has an integer overflow and res… |
FFmpeg |
FFmpeg |
2026-04-16T01:33:37.018Z | 2026-04-16T12:31:48.767Z |
| CVE-2026-40505 |
4.8 (4.0)
3.3 (3.1)
|
MuPDF < 1.27 mutool ANSI Injection via Metadata |
Artifex Software Inc. |
MuPDF |
2026-04-16T01:20:08.397Z | 2026-04-17T16:32:45.810Z |
| CVE-2026-40504 |
9.3 (4.0)
9.8 (3.1)
|
Creolabs Gravity < 0.9.6 Heap Buffer Overflow via grav… |
marcobambini |
gravity |
2026-04-16T01:10:27.364Z | 2026-04-16T13:45:35.255Z |
| CVE-2026-3299 |
6.4 (3.1)
|
WP YouTube Lyte <= 1.7.29 - Authenticated (Contributor… |
futtta |
WP YouTube Lyte |
2026-04-16T01:24:34.807Z | 2026-04-16T13:42:32.504Z |
| CVE-2026-40960 |
8.1 (3.1)
|
Luanti 5 before 5.15.2 sometimes allows unintende… |
Luanti |
Luanti |
2026-04-16T00:54:45.935Z | 2026-04-16T12:31:57.082Z |
| CVE-2026-40959 |
9.3 (3.1)
|
Luanti 5 before 5.15.2, when LuaJIT is used, allo… |
Luanti |
Luanti |
2026-04-16T00:51:19.520Z | 2026-04-16T12:32:04.767Z |
| CVE-2026-40503 |
7.1 (4.0)
6.5 (3.1)
|
OpenHarness Path Traversal Information Disclosure via … |
HKUDS |
OpenHarness |
2026-04-16T00:08:09.535Z | 2026-04-16T13:42:38.789Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-p5w6-75f9-cc2p |
5.9 (3.1)
|
Note Mark has Broken Access Control on Asset Download | 2026-04-13T19:31:57Z | 2026-04-13T19:31:57Z |
| ghsa-w6m9-39cv-2fwp |
3.7 (3.1)
|
Note Mark: Username Enumeration via Login Endpoint Timing Side-Channel | 2026-04-13T19:31:50Z | 2026-04-13T19:31:50Z |
| ghsa-9pr4-rf97-79qh |
8.7 (3.1)
|
Note Mark has Stored XSS via Unrestricted Asset Upload | 2026-04-13T19:23:08Z | 2026-04-13T19:23:08Z |
| ghsa-5835-4gvc-32pc |
8.2 (3.1)
|
Maddy Mail Server has an LDAP Filter Injection via Unsanitized Username | 2026-04-13T19:22:52Z | 2026-04-16T21:57:25Z |
| ghsa-whj4-6x5x-4v2j |
8.7 (4.0)
|
FITS GZIP decompression bomb in Pillow | 2026-04-13T19:22:35Z | 2026-04-16T21:56:27Z |
| ghsa-26qp-ffjh-2x4v |
5.1 (3.1)
|
ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit… | 2026-04-13T19:10:03Z | 2026-04-13T19:10:03Z |
| ghsa-v67w-737x-v2c9 |
5.9 (3.1)
|
ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds | 2026-04-13T19:09:58Z | 2026-04-15T20:56:28Z |
| ghsa-x9rc-hqj2-wh76 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element … | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-wcjg-f74r-f452 |
8.8 (3.1)
7.4 (4.0)
|
A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability i… | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-w9xg-4wh5-v94m |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the… | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-pjj5-xh8h-6xp3 |
9.8 (3.1)
8.9 (4.0)
|
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by th… | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-pg25-7cx5-cvcm |
9.1 (4.0)
|
Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.… | 2026-04-13T18:30:42Z | 2026-04-14T15:30:34Z |
| ghsa-h84p-pw6f-c6p6 |
6.5 (3.1)
7.1 (4.0)
|
A vulnerability exists in the command handling of the IEC 61850 communication stack included in the… | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-f7v4-47q7-f3fq |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affec… | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-6jfp-5ggc-pgmx |
3.3 (3.1)
1.9 (4.0)
|
A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_… | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-4qrv-q9xg-qj66 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an … | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-4pq4-q672-hqmr |
7.3 (3.1)
5.5 (4.0)
|
A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an… | 2026-04-13T18:30:42Z | 2026-04-13T18:30:42Z |
| ghsa-xqmq-m74q-gr4q |
7.2 (3.1)
7.5 (4.0)
|
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command I… | 2026-04-13T18:30:41Z | 2026-04-22T15:31:32Z |
| ghsa-xqc8-jwv2-x9c2 |
8.8 (3.1)
8.7 (4.0)
|
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command I… | 2026-04-13T18:30:41Z | 2026-04-22T15:31:32Z |
| ghsa-w6pw-7fv8-jw27 |
2.7 (3.1)
|
Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects… | 2026-04-13T18:30:41Z | 2026-04-14T18:30:33Z |
| ghsa-qprq-3xhq-p84p |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue … | 2026-04-13T18:30:41Z | 2026-04-13T18:30:41Z |
| ghsa-q869-m422-4qcv |
4.3 (3.1)
5.3 (4.0)
|
The bson_validate function may return early on specific inputs and incorrectly report success. This… | 2026-04-13T18:30:41Z | 2026-04-13T18:30:41Z |
| ghsa-mf3r-jr4m-5wv2 |
7.3 (3.1)
|
Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/… | 2026-04-13T18:30:41Z | 2026-04-14T15:30:33Z |
| ghsa-m9vq-hc45-mf4h |
6.5 (3.1)
8.4 (4.0)
|
Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endp… | 2026-04-13T18:30:41Z | 2026-04-22T15:31:32Z |
| ghsa-m6x7-6x59-cxc6 |
2.7 (3.1)
|
Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas… | 2026-04-13T18:30:41Z | 2026-04-14T18:30:33Z |
| ghsa-fmfj-qhvp-84vr |
2.7 (3.1)
|
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/r… | 2026-04-13T18:30:41Z | 2026-04-13T21:30:43Z |
| ghsa-f5v3-ff4w-cjrp |
8.8 (3.1)
7.4 (4.0)
|
A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerabili… | 2026-04-13T18:30:41Z | 2026-04-13T18:30:41Z |
| ghsa-cx9r-fvxf-cxvg |
2.7 (3.1)
|
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/r… | 2026-04-13T18:30:41Z | 2026-04-13T21:30:43Z |
| ghsa-chf8-3p4x-rchj |
8.8 (3.1)
8.7 (4.0)
|
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injecti… | 2026-04-13T18:30:41Z | 2026-04-22T15:31:32Z |
| ghsa-c46f-5cvg-v8f7 |
7.3 (3.1)
5.5 (4.0)
|
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unk… | 2026-04-13T18:30:41Z | 2026-04-13T18:30:41Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-70 |
|
In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. I… | openapi-python-client | 2020-08-14T17:15:00Z | 2020-08-20T18:02:00Z |
| pysec-2020-24 |
|
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute … | asyncpg | 2020-08-12T16:15:00Z | 2020-09-03T01:15:00Z |
| pysec-2020-38 |
|
django-celery-results through 1.2.1 stores task results in the database. Among the data i… | django-celery-results | 2020-08-11T21:15:00Z | 2020-08-14T20:09:00Z |
| pysec-2020-342 |
9.8 (3.1)
|
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL i… | apache-skywalking | 2020-08-05T14:15:00+00:00 | 2023-11-07T20:24:23.946863+00:00 |
| pysec-2020-44 |
|
This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen,… | gerapy | 2020-07-29T13:15:00Z | 2020-07-31T14:59:00Z |
| pysec-2020-264 |
|
In "I hate money" before version 4.1.5, an authenticated member of one project can modify… | ihatemoney | 2020-07-27T18:15:00Z | 2021-11-16T03:58:44.236145Z |
| pysec-2020-151 |
|
Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not es… | uvicorn | 2020-07-27T12:15:00Z | 2020-07-29T19:15:00Z |
| pysec-2020-150 |
|
This affects all versions of package uvicorn. The request logger provided by the package … | uvicorn | 2020-07-27T12:15:00Z | 2020-08-04T18:05:00Z |
| pysec-2020-30 |
|
A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to w… | bsdiff4 | 2020-07-22T23:15:00Z | 2020-07-31T16:15:00Z |
| pysec-2020-154 |
|
In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wa… | wagtail | 2020-07-20T18:15:00Z | 2020-07-28T12:29:00Z |
| pysec-2020-51 |
|
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular… | jupyterhub-kubespawner | 2020-07-17T21:15:00Z | 2020-07-22T20:28:00Z |
| pysec-2020-23 |
|
An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerabili… | apache-airflow | 2020-07-17T00:15:00Z | 2020-07-21T18:38:00Z |
| pysec-2020-17 |
|
An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that m… | apache-airflow | 2020-07-17T00:15:00Z | 2020-07-21T18:45:00Z |
| pysec-2020-16 |
|
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecuto… | apache-airflow | 2020-07-17T00:15:00Z | 2020-07-24T18:22:00Z |
| pysec-2020-15 |
|
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecuto… | apache-airflow | 2020-07-17T00:15:00Z | 2020-07-24T18:19:00Z |
| pysec-2020-14 |
|
An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command in… | apache-airflow | 2020-07-17T00:15:00Z | 2020-07-22T17:15:00Z |
| pysec-2020-233 |
|
In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can i… | freewvs | 2020-07-14T22:15:00Z | 2021-08-27T03:22:04.227798Z |
| pysec-2020-232 |
|
In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, … | freewvs | 2020-07-14T20:15:00Z | 2021-08-27T03:22:04.199703Z |
| pysec-2020-39 |
|
Django Two-Factor Authentication before 1.12, stores the user's password in clear text in… | django-two-factor-auth | 2020-07-10T21:15:00Z | 2020-07-21T18:06:00Z |
| pysec-2020-216 |
|
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted … | beaker | 2020-06-26T20:15:00Z | 2021-07-25T23:34:27.636176Z |
| pysec-2020-80 |
|
In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exi… | pillow | 2020-06-25T19:15:00Z | 2020-07-27T19:15:00Z |
| pysec-2020-79 |
|
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds rea… | pillow | 2020-06-25T19:15:00Z | 2020-07-27T19:15:00Z |
| pysec-2020-78 |
|
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c. | pillow | 2020-06-25T19:15:00Z | 2020-07-27T19:15:00Z |
| pysec-2020-77 |
|
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when re… | pillow | 2020-06-25T19:15:00Z | 2020-07-27T19:15:00Z |
| pysec-2020-76 |
|
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. | pillow | 2020-06-25T19:15:00Z | 2020-08-08T20:15:00Z |
| pysec-2020-37 |
|
In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websi… | django-basic-auth-ip-whitelist | 2020-06-24T13:15:00Z | 2020-07-09T14:11:00Z |
| pysec-2020-95 |
|
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configur… | pyspark | 2020-06-23T22:15:00Z | 2021-04-02T12:15:00Z |
| pysec-2020-112 |
|
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. | tendenci | 2020-06-21T15:15:00Z | 2020-06-26T19:34:00Z |
| pysec-2020-250 |
|
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json … | rtslib-fb | 2020-06-19T11:15:00Z | 2021-08-27T03:22:19.931800Z |
| pysec-2020-244 |
|
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to… | omero-web | 2020-06-17T17:15:00Z | 2021-08-27T03:22:09.833484Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-911 | Malicious code in malpkgv2-0 (PyPI) | 2026-02-16T00:00:09Z | 2026-02-16T00:00:09Z |
| mal-2026-910 | Malicious code in dns-execution-test (PyPI) | 2026-02-15T23:20:54Z | 2026-02-17T11:48:47Z |
| mal-2026-909 | Malicious code in clawdist (PyPI) | 2026-02-15T21:58:17Z | 2026-02-26T09:50:46Z |
| mal-2026-943 | Malicious code in ethereums-lint (npm) | 2026-02-15T16:24:02Z | 2026-03-03T06:33:28Z |
| mal-2026-942 | Malicious code in ethereum-lint (npm) | 2026-02-15T16:20:05Z | 2026-03-03T06:33:28Z |
| mal-2026-908 | Malicious code in hops-preset-jest (npm) | 2026-02-15T15:57:34Z | 2026-03-03T05:38:25Z |
| mal-2026-907 | Malicious code in tronpad (PyPI) | 2026-02-15T15:24:18Z | 2026-02-15T15:24:18Z |
| mal-2026-906 | Malicious code in cucumber_json_schema (RubyGems) | 2026-02-15T14:20:25Z | 2026-02-15T14:20:25Z |
| mal-2026-905 | Malicious code in marshmellows (PyPI) | 2026-02-15T09:25:56Z | 2026-02-19T22:47:48Z |
| mal-2026-904 | Malicious code in strands-agents-anthropic (PyPI) | 2026-02-15T07:34:00Z | 2026-02-15T07:34:00Z |
| mal-2026-903 | Malicious code in requests-toolkit (PyPI) | 2026-02-15T00:02:57Z | 2026-02-15T00:02:57Z |
| mal-2026-902 | Malicious code in crc32fast (PyPI) | 2026-02-14T13:26:41Z | 2026-02-14T14:13:09Z |
| mal-2026-900 | Malicious code in cubaflixdownload (PyPI) | 2026-02-14T12:34:41Z | 2026-02-14T12:34:41Z |
| mal-2026-901 | Malicious code in platforms (PyPI) | 2026-02-14T12:29:36Z | 2026-02-14T12:29:36Z |
| mal-2026-899 | Malicious code in dzuseragents (PyPI) | 2026-02-14T11:56:39Z | 2026-02-14T11:56:39Z |
| mal-2024-12375 | Malicious code in langraph (PyPI) | 2026-02-14T05:25:23Z | 2026-02-14T18:48:58Z |
| mal-2026-898 | Malicious code in magicwolf (PyPI) | 2026-02-14T02:02:26Z | 2026-02-26T09:50:46Z |
| mal-2026-897 | Malicious code in clawdest (PyPI) | 2026-02-13T23:10:47Z | 2026-02-26T09:50:46Z |
| mal-2026-896 | Malicious code in sinon-web3-chain (npm) | 2026-02-13T17:36:45Z | 2026-03-19T12:23:23Z |
| mal-2026-895 | Malicious code in json-mapping-src (npm) | 2026-02-13T17:34:17Z | 2026-02-23T04:21:33Z |
| mal-2026-894 | Malicious code in troncloud (PyPI) | 2026-02-13T17:22:10Z | 2026-02-13T18:20:45Z |
| mal-2026-890 | Malicious code in responsible-ai (npm) | 2026-02-13T14:01:25Z | 2026-02-23T04:21:35Z |
| mal-2026-881 | Malicious code in contosoapp (npm) | 2026-02-13T14:01:25Z | 2026-02-23T04:21:32Z |
| mal-2026-879 | Malicious code in codexworld (npm) | 2026-02-13T14:01:25Z | 2026-02-23T04:21:32Z |
| mal-2026-889 | Malicious code in responses-starter-app (npm) | 2026-02-13T14:01:24Z | 2026-02-23T04:21:35Z |
| mal-2026-888 | Malicious code in pyright-root (npm) | 2026-02-13T14:01:24Z | 2026-02-23T04:21:35Z |
| mal-2026-887 | Malicious code in pyrefly (npm) | 2026-02-13T14:01:24Z | 2026-02-23T04:21:35Z |
| mal-2026-886 | Malicious code in open-answer-engine-frontend (npm) | 2026-02-13T14:01:24Z | 2026-02-23T04:21:35Z |
| mal-2026-883 | Malicious code in ecosystem_ui (npm) | 2026-02-13T14:01:24Z | 2026-03-19T12:23:19Z |
| mal-2026-884 | Malicious code in hxz-protection (npm) | 2026-02-13T13:57:39Z | 2026-02-23T04:21:33Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1026 | Fortinet FortiOS, FortiProxy und FortiSwitch: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1025 | Fortinet FortiOS: Mehrere Schwachstellen ermöglicht Denial of Service | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1024 | Fortinet FortiPortal: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1023 | Phoenix Technologies BIOS (SCT4): Schwachstelle ermöglicht Denial of Service | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1022 | Red Hat OpenStack (python-h11): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-13T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1021 | Fortinet FortiClient Mac, Windows, EMS und FortiVoice: Mehrere Schwachstellen | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1020 | Red Hat Enterprise Linux (libjpeg-turbo): Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-05-13T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1019 | Checkmk: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1018 | Fortinet FortiManager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1017 | Microsoft Office: Mehrere Schwachstellen | 2025-05-13T22:00:00.000+00:00 | 2025-05-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1016 | Microsoft Dataverse: Mehrere Schwachstellen | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1015 | Microsoft Developer Tools: Mehrere Schwachstellen | 2025-05-13T22:00:00.000+00:00 | 2025-07-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1014 | Microsoft Azure: Mehrere Schwachstellen | 2025-05-13T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1013 | Microsoft PC Manager App: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-13T22:00:00.000+00:00 | 2025-05-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1012 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1011 | Dell PowerScale InsightIQ: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-05-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1010 | Apple Safari: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-05-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1009 | Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-05-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1008 | Apache Superset: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen | 2025-05-12T22:00:00.000+00:00 | 2025-05-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1007 | Apple macOS: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-1006 | Mattermost: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-05-12T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1005 | Varnish HTTP Cache: Schwachstelle ermöglicht Manipulation von Dateien | 2025-05-12T22:00:00.000+00:00 | 2025-07-31T22:00:00.000+00:00 |
| wid-sec-w-2025-1004 | VMware Cloud Foundation: Schwachstelle ermöglicht Cross-Site Scripting | 2025-05-12T22:00:00.000+00:00 | 2025-05-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1003 | Apple iOS und iPadOS: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-11-23T23:00:00.000+00:00 |
| wid-sec-w-2025-1002 | SAP Patchday Mai 2025: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-05-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1001 | Intel Prozessoren: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-05-12T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1000 | VMware Tools: Schwachstelle ermöglicht Manipulation von Dateien | 2025-05-11T22:00:00.000+00:00 | 2025-06-30T22:00:00.000+00:00 |
| wid-sec-w-2025-0999 | Linux Kernel: Mehrere Schwachstellen | 2025-05-11T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0998 | IBM App Connect Enterprise Certified Container: Mehrere Schwachstellen | 2025-05-11T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-0997 | Apache Commons Configuration: Schwachstelle ermöglicht Denial of Service | 2025-05-11T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-056-03 | Rockwell Automation Logix Controllers (Update A) | 2021-02-25T00:00:00.000000Z | 2021-03-18T00:00:00.000000Z |
| icsa-21-056-02 | FATEK Automation FvDesigner | 2021-02-25T00:00:00.000000Z | 2021-02-25T00:00:00.000000Z |
| icsa-21-056-01 | PerFact OpenVPN-Client | 2021-02-25T00:00:00.000000Z | 2021-02-25T00:00:00.000000Z |
| icsa-21-054-04 | Ovarro TBox (Update A) | 2021-02-23T00:00:00.000000Z | 2021-09-23T00:00:00.000000Z |
| icsa-21-054-03 | Advantech Spectre RT Industrial Routers | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-054-02 | Advantech BB-ESWGP506-2SFP-T | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-054-01 | Rockwell Automation FactoryTalk Services Platform | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-049-02 | Mitsubishi Electric FA Engineering Software Products (Update H) | 2021-02-18T07:00:00.000000Z | 2025-06-05T06:00:00.000000Z |
| icsa-21-049-01 | Johnson Controls Metasys Reporting Engine (MRE) Web Services | 2021-02-18T00:00:00.000000Z | 2021-02-18T00:00:00.000000Z |
| icsma-21-047-01 | Hamilton-T1 | 2021-02-16T00:00:00.000000Z | 2021-02-16T00:00:00.000000Z |
| icsa-21-047-02 | Rockwell Automation Allen-Bradley Micrologix 1100 | 2021-02-16T00:00:00.000000Z | 2021-02-16T00:00:00.000000Z |
| icsa-21-042-02 | Rockwell Automation DriveTools SP and Drives AOP | 2021-02-11T00:00:00.000000Z | 2021-02-11T00:00:00.000000Z |
| icsa-21-042-01 | Multiple Embedded TCP/IP Stacks (Update B) | 2021-02-11T00:00:00.000000Z | 2021-11-11T00:00:00.000000Z |
| icsa-21-047-01 | Open Design Alliance Drawings SDK (Update A) | 2021-02-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-040-10 | Siemens DIGSI 4 | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-09 | SIMATIC WinCC Graphics Designer | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-08 | Siemens SIMARIS Configuration (Update A) | 2021-02-09T00:00:00.000000Z | 2021-05-11T00:00:00.000000Z |
| icsa-21-040-07 | Siemens SCALANCE W780 and W740 | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-05 | Siemens TIA Administrator (Update A) | 2021-02-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-040-04 | Siemens RUGGEDCOM ROX II | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-03 | Siemens SINEMA Server & SINEC NMS | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-02 | Advantech iView | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-01 | GE Digital HMI/SCADA iFIX | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-035-02 | Horner Automation Cscape | 2021-02-04T00:00:00.000000Z | 2021-02-04T00:00:00.000000Z |
| icsa-21-035-01 | Luxion KeyShot (Update A) | 2021-02-04T00:00:00.000000Z | 2021-03-09T00:00:00.000000Z |
| icsa-21-033-01 | Rockwell Automation MicroLogix 1400 (Update A) | 2021-02-02T00:00:00.000000Z | 2021-03-23T00:00:00.000000Z |
| icsa-21-033-02 | Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels | 2021-01-28T00:00:00.000000Z | 2021-01-28T00:00:00.000000Z |
| icsa-21-028-01 | Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform | 2021-01-28T00:00:00.000000Z | 2021-01-28T00:00:00.000000Z |
| icsa-21-026-02 | All Bachmann M1 System Processor Modules | 2021-01-26T00:00:00.000000Z | 2021-07-01T00:00:00.000000Z |
| icsa-21-026-01 | Fuji Electric Tellus Lite V-Simulator and V-Server Lite | 2021-01-26T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190212-nae-dos | Cisco Network Assurance Engine CLI Access with Default Password Vulnerability | 2019-02-12T16:00:00+00:00 | 2019-02-12T16:00:00+00:00 |
| cisco-sa-20190206-wsa-bypass | Cisco Web Security Appliance Decryption Policy Bypass Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-webex-injection | Cisco Webex Meetings Online Content Injection Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-20T23:23:00+00:00 |
| cisco-sa-20190206-webex-andro-xss | Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-tms-xss | Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-tms-soap | Cisco TelePresence Management Suite Web Services | 2019-02-06T16:00:00+00:00 | 2020-07-29T16:24:11+00:00 |
| cisco-sa-20190206-rest-api-ssrf | Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-meeting-sipdos | Cisco Meeting Server SIP Processing Denial of Service Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-ise-xss | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-fmc-xss | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-cuic-xss | Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-cms-dos | Cisco Meeting Server Denial of Service Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-aas-creds | Cisco Aironet Active Sensor Static Credentials Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190123-webex-teams | Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-04-03T20:00:00+00:00 |
| cisco-sa-20190123-webex-rce | Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities | 2019-01-23T16:00:00+00:00 | 2019-01-30T20:17:00+00:00 |
| cisco-sa-20190123-uic-csrf | Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-threat-grid | Cisco AMP Threat Grid API Key Information Disclosure Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-sdwan-unaccess | Cisco SD-WAN Solution Unauthorized Access Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-25T17:26:00+00:00 |
| cisco-sa-20190123-sdwan-sol-escal | Cisco SD-WAN Solution Privilege Escalation Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-sdwan-file-write | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-sdwan-escal | Multiple Privilege Escalation Vulnerabilities in Cisco SD-WAN Solution | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-sdwan-bo | Cisco SD-WAN Solution Buffer Overflow Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-25T17:26:00+00:00 |
| cisco-sa-20190123-rv-inject | Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-04-04T14:00:00+00:00 |
| cisco-sa-20190123-rv-info | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-04-04T14:00:00+00:00 |
| cisco-sa-20190123-nfvis-shell-access | Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-miner-chat-xss | Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerabilities | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-meetings-xss | Cisco Webex Meetings Server Cross-Site Scripting Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-isel-xss | Cisco Identity Services Engine Logging Cross-Site Scripting Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-ise-privilege | Cisco Identity Services Engine Privilege Escalation Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-09-18T15:48:42+00:00 |
| cisco-sa-20190123-ise-info-disclosure | Cisco Identity Services Engine Privileged Account Sensitive Information Disclosure Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-06-06T20:32:44+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-39932 | smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) | 2025-10-02T00:00:00.000Z | 2026-03-31T15:18:35.000Z |
| msrc_cve-2025-39931 | crypto: af_alg - Set merge to zero early in af_alg_sendmsg | 2025-10-02T00:00:00.000Z | 2025-10-05T01:03:19.000Z |
| msrc_cve-2025-39929 | smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path | 2025-10-02T00:00:00.000Z | 2025-10-05T01:02:06.000Z |
| msrc_cve-2025-39927 | ceph: fix race condition validating r_parent before applying state | 2025-10-02T00:00:00.000Z | 2026-03-31T15:16:04.000Z |
| msrc_cve-2025-39925 | can: j1939: implement NETDEV_UNREGISTER notification handler | 2025-10-02T00:00:00.000Z | 2025-12-16T01:37:16.000Z |
| msrc_cve-2025-39923 | dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees | 2025-10-02T00:00:00.000Z | 2026-02-24T14:42:37.000Z |
| msrc_cve-2025-39920 | pcmcia: Add error handling for add_interval() in do_validate_mem() | 2025-10-02T00:00:00.000Z | 2026-02-19T01:36:19.000Z |
| msrc_cve-2025-39916 | mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() | 2025-10-02T00:00:00.000Z | 2025-10-02T01:07:03.000Z |
| msrc_cve-2025-39914 | tracing: Silence warning when chunk allocation fails in trace_pid_write | 2025-10-02T00:00:00.000Z | 2025-10-02T01:07:27.000Z |
| msrc_cve-2025-39913 | tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. | 2025-10-02T00:00:00.000Z | 2026-02-24T14:41:37.000Z |
| msrc_cve-2025-39911 | i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path | 2025-10-02T00:00:00.000Z | 2026-02-24T14:41:30.000Z |
| msrc_cve-2025-39910 | mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() | 2025-10-02T00:00:00.000Z | 2025-10-02T01:06:52.000Z |
| msrc_cve-2025-39909 | mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() | 2025-10-02T00:00:00.000Z | 2025-10-02T01:06:47.000Z |
| msrc_cve-2025-39907 | mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer | 2025-10-02T00:00:00.000Z | 2026-02-19T01:36:38.000Z |
| msrc_cve-2025-39905 | net: phylink: add lock for serializing concurrent pl->phydev writes with resolver | 2025-10-02T00:00:00.000Z | 2026-03-31T15:16:52.000Z |
| msrc_cve-2025-39902 | mm/slub: avoid accessing metadata when pointer is invalid in object_err() | 2025-10-02T00:00:00.000Z | 2026-02-21T03:42:40.000Z |
| msrc_cve-2025-39901 | i40e: remove read access to debugfs files | 2025-10-02T00:00:00.000Z | 2026-03-31T15:16:28.000Z |
| msrc_cve-2025-39898 | e1000e: fix heap overflow in e1000_set_eeprom | 2025-10-02T00:00:00.000Z | 2025-10-02T01:07:22.000Z |
| msrc_cve-2025-39895 | sched: Fix sched_numa_find_nth_cpu() if mask offline | 2025-10-02T00:00:00.000Z | 2025-10-02T01:06:30.000Z |
| msrc_cve-2025-39894 | netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm | 2025-10-02T00:00:00.000Z | 2026-02-24T14:41:23.000Z |
| msrc_cve-2025-39891 | wifi: mwifiex: Initialize the chan_stats array to zero | 2025-10-02T00:00:00.000Z | 2025-10-02T01:06:37.000Z |
| msrc_cve-2025-37727 | Elasticsearch Insertion of sensitive information in log file | 2025-10-02T00:00:00.000Z | 2025-10-11T01:03:07.000Z |
| msrc_cve-2025-12464 | Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode | 2025-10-02T00:00:00.000Z | 2025-12-07T01:46:15.000Z |
| msrc_cve-2025-12105 | Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion | 2025-10-02T00:00:00.000Z | 2025-12-24T01:38:08.000Z |
| msrc_cve-2025-12060 | Keras keras.utils.get_file Utility Path Traversal Vulnerability | 2025-10-02T00:00:00.000Z | 2025-11-01T01:01:19.000Z |
| msrc_cve-2025-12058 | Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF | 2025-10-02T00:00:00.000Z | 2026-02-18T01:52:30.000Z |
| msrc_cve-2025-11840 | GNU Binutils ldmisc.c vfinfo out-of-bounds | 2025-10-02T00:00:00.000Z | 2025-10-29T01:04:28.000Z |
| msrc_cve-2025-11839 | GNU Binutils prdbg.c tg_tag_type return value | 2025-10-02T00:00:00.000Z | 2026-04-14T14:38:38.000Z |
| msrc_cve-2025-11731 | Libxslt: type confusion in exsltfuncresultcompfunction of libxslt | 2025-10-02T00:00:00.000Z | 2025-12-07T01:38:20.000Z |
| msrc_cve-2025-11495 | GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow | 2025-10-02T00:00:00.000Z | 2025-10-11T01:02:13.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14513-1 | govulncheck-vulndb-0.0.20241119T173509-1.1 on GA media | 2024-11-20T00:00:00Z | 2024-11-20T00:00:00Z |
| opensuse-su-2024:14512-1 | cobbler-3.3.7-1.1 on GA media | 2024-11-20T00:00:00Z | 2024-11-20T00:00:00Z |
| opensuse-su-2024:14511-1 | chromedriver-131.0.6778.69-1.1 on GA media | 2024-11-20T00:00:00Z | 2024-11-20T00:00:00Z |
| opensuse-su-2024:14510-1 | nodejs-electron-31.7.5-1.1 on GA media | 2024-11-19T00:00:00Z | 2024-11-19T00:00:00Z |
| opensuse-su-2024:14509-1 | gh-2.62.0-1.1 on GA media | 2024-11-18T00:00:00Z | 2024-11-18T00:00:00Z |
| opensuse-su-2024:14508-1 | python39-3.9.20-6.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14507-1 | python310-3.10.15-5.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14506-1 | libecpg6-17.1-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14505-1 | postgresql16-16.5-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14504-1 | postgresql15-15.9-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14503-1 | postgresql14-14.14-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14502-1 | postgresql13-13.17-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14501-1 | postgresql12-12.21-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14500-1 | kernel-devel-6.11.8-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14499-1 | ansible-core-2.16-2.16.13-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14498-1 | ansible-core-2.17.6-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14497-1 | MozillaThunderbird-128.4.3-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14496-1 | ucode-intel-20241112-1.1 on GA media | 2024-11-14T00:00:00Z | 2024-11-14T00:00:00Z |
| opensuse-su-2024:14495-1 | rclone-1.68.1-2.1 on GA media | 2024-11-14T00:00:00Z | 2024-11-14T00:00:00Z |
| opensuse-su-2024:14494-1 | nodejs-electron-31.7.4-1.1 on GA media | 2024-11-14T00:00:00Z | 2024-11-14T00:00:00Z |
| opensuse-su-2024:14493-1 | icinga2-2.14.3-1.1 on GA media | 2024-11-14T00:00:00Z | 2024-11-14T00:00:00Z |
| opensuse-su-2024:14492-1 | wget-1.25.0-1.1 on GA media | 2024-11-13T00:00:00Z | 2024-11-13T00:00:00Z |
| opensuse-su-2024:14491-1 | libnghttp2-14-1.64.0-1.1 on GA media | 2024-11-13T00:00:00Z | 2024-11-13T00:00:00Z |
| opensuse-su-2024:14490-1 | libvirt-10.9.0-3.1 on GA media | 2024-11-13T00:00:00Z | 2024-11-13T00:00:00Z |
| opensuse-su-2024:14489-1 | libsoup-2_4-1-2.74.3-4.1 on GA media | 2024-11-13T00:00:00Z | 2024-11-13T00:00:00Z |
| opensuse-su-2024:14488-1 | libsoup-3_0-0-3.6.0-2.1 on GA media | 2024-11-13T00:00:00Z | 2024-11-13T00:00:00Z |
| opensuse-su-2024:14487-1 | gio-branding-upstream-2.82.2-2.1 on GA media | 2024-11-13T00:00:00Z | 2024-11-13T00:00:00Z |
| opensuse-su-2024:0366-1 | Security update for python-PyPDF2 | 2024-11-12T17:01:19Z | 2024-11-12T17:01:19Z |
| opensuse-su-2024:14486-1 | switchboard-plug-bluetooth-8.0.1-1.1 on GA media | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| opensuse-su-2024:14485-1 | jujutsu-0.23.0-1.1 on GA media | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:21469 | Red Hat Security Advisory: kernel security update | 2025-11-17T09:52:08+00:00 | 2026-04-13T11:13:42+00:00 |
| rhsa-2025:21463 | Red Hat Security Advisory: kernel security update | 2025-11-17T08:34:08+00:00 | 2026-03-18T03:09:48+00:00 |
| rhsa-2025:21462 | Red Hat Security Advisory: lasso security update | 2025-11-17T08:20:47+00:00 | 2026-03-18T03:11:27+00:00 |
| rhsa-2025:21452 | Red Hat Security Advisory: lasso security update | 2025-11-17T07:38:07+00:00 | 2026-03-18T03:11:28+00:00 |
| rhsa-2025:21448 | Red Hat Security Advisory: python-kdcproxy security update | 2025-11-17T06:19:12+00:00 | 2026-03-18T03:11:11+00:00 |
| rhsa-2025:21407 | Red Hat Security Advisory: libtiff security update | 2025-11-17T01:24:48+00:00 | 2026-04-13T18:40:57+00:00 |
| rhsa-2025:21398 | Red Hat Security Advisory: kernel security update | 2025-11-17T00:57:51+00:00 | 2026-03-18T03:09:46+00:00 |
| rhsa-2025:21403 | Red Hat Security Advisory: lasso security update | 2025-11-17T00:56:21+00:00 | 2026-03-18T03:10:37+00:00 |
| rhsa-2025:21406 | Red Hat Security Advisory: lasso security update | 2025-11-17T00:50:51+00:00 | 2026-03-18T03:10:38+00:00 |
| rhsa-2025:21404 | Red Hat Security Advisory: lasso security update | 2025-11-17T00:48:11+00:00 | 2026-03-18T03:10:37+00:00 |
| rhsa-2025:21400 | Red Hat Security Advisory: lasso security update | 2025-11-17T00:47:22+00:00 | 2026-03-18T03:10:34+00:00 |
| rhsa-2025:21405 | Red Hat Security Advisory: lasso security update | 2025-11-17T00:45:08+00:00 | 2026-03-18T03:10:37+00:00 |
| rhsa-2025:21401 | Red Hat Security Advisory: lasso security update | 2025-11-17T00:45:06+00:00 | 2026-03-18T03:10:39+00:00 |
| rhsa-2025:21402 | Red Hat Security Advisory: lasso security update | 2025-11-17T00:42:01+00:00 | 2026-03-18T03:10:35+00:00 |
| rhsa-2025:21397 | Red Hat Security Advisory: kernel-rt security update | 2025-11-17T00:41:31+00:00 | 2026-03-18T03:09:46+00:00 |
| rhsa-2025:21399 | Red Hat Security Advisory: lasso security update | 2025-11-17T00:37:42+00:00 | 2026-03-18T03:10:33+00:00 |
| rhsa-2025:21371 | Red Hat Security Advisory: Red Hat build of Keycloak 26.4.4 Images Security Update | 2025-11-13T19:30:13+00:00 | 2026-03-18T03:10:39+00:00 |
| rhsa-2025:21384 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-11-13T19:03:20+00:00 | 2026-04-09T14:28:07+00:00 |
| rhsa-2025:21382 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-11-13T19:01:04+00:00 | 2026-04-09T14:28:05+00:00 |
| rhsa-2025:21385 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-11-13T18:57:18+00:00 | 2026-04-09T14:28:08+00:00 |
| rhsa-2025:21383 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-11-13T18:53:38+00:00 | 2026-04-09T14:28:06+00:00 |
| rhsa-2025:21378 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update | 2025-11-13T18:21:41+00:00 | 2026-04-01T18:56:22+00:00 |
| rhsa-2025:21370 | Red Hat Security Advisory: Red Hat build of Keycloak 26.4.4 Security Update | 2025-11-13T17:51:13+00:00 | 2026-03-18T03:10:39+00:00 |
| rhsa-2025:21368 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update | 2025-11-13T17:36:32+00:00 | 2026-04-01T18:56:22+00:00 |
| rhsa-2025:21337 | Red Hat Security Advisory: golang security update | 2025-11-13T15:20:08+00:00 | 2026-04-09T14:28:05+00:00 |
| rhsa-2025:21336 | Red Hat Security Advisory: golang security update | 2025-11-13T15:16:28+00:00 | 2026-04-09T14:28:03+00:00 |
| rhsa-2025:21280 | Red Hat Security Advisory: firefox security update | 2025-11-13T12:37:21+00:00 | 2026-03-18T03:10:55+00:00 |
| rhsa-2025:21281 | Red Hat Security Advisory: firefox security update | 2025-11-13T12:21:37+00:00 | 2026-03-18T03:10:55+00:00 |
| rhsa-2025:21255 | Red Hat Security Advisory: openssl security update | 2025-11-13T11:40:46+00:00 | 2026-04-13T19:59:50+00:00 |
| rhsa-2025:21248 | Red Hat Security Advisory: openssl security update | 2025-11-13T11:15:16+00:00 | 2026-04-13T19:59:50+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:21132-1 | Security update for poppler | 2025-11-20T13:33:08Z | 2025-11-20T13:33:08Z |
| suse-su-2025:21050-1 | Security update for unbound | 2025-11-20T11:36:47Z | 2025-11-20T11:36:47Z |
| suse-su-2025:4148-1 | Security update for ghostscript | 2025-11-20T10:14:20Z | 2025-11-20T10:14:20Z |
| suse-su-2025:4143-1 | Security update for grub2 | 2025-11-20T07:54:03Z | 2025-11-20T07:54:03Z |
| suse-su-2025:21021-1 | Security update for MozillaFirefox | 2025-11-19T18:22:27Z | 2025-11-19T18:22:27Z |
| suse-su-2025:4141-1 | Security update for the Linux Kernel | 2025-11-19T14:06:18Z | 2025-11-19T14:06:18Z |
| suse-su-2025:4140-1 | Security update for the Linux Kernel | 2025-11-19T13:15:27Z | 2025-11-19T13:15:27Z |
| suse-su-2025:4139-1 | Security update for the Linux Kernel | 2025-11-19T13:12:14Z | 2025-11-19T13:12:14Z |
| suse-su-2025:21016-1 | Security update for ongres-scram | 2025-11-19T10:17:29Z | 2025-11-19T10:17:29Z |
| suse-su-2025:4137-1 | Security update for gimp | 2025-11-19T10:01:00Z | 2025-11-19T10:01:00Z |
| suse-su-2025:21014-1 | Security update for openexr | 2025-11-19T09:46:11Z | 2025-11-19T09:46:11Z |
| suse-su-2025:21032-1 | Security update for tiff | 2025-11-19T09:41:55Z | 2025-11-19T09:41:55Z |
| suse-su-2025:21009-1 | Security update for tiff | 2025-11-19T09:41:55Z | 2025-11-19T09:41:55Z |
| suse-su-2025:21031-1 | Security update for libxslt | 2025-11-19T09:41:09Z | 2025-11-19T09:41:09Z |
| suse-su-2025:21008-1 | Security update for libxslt | 2025-11-19T09:41:09Z | 2025-11-19T09:41:09Z |
| suse-su-2025:21028-1 | Security update for expat | 2025-11-19T09:39:18Z | 2025-11-19T09:39:18Z |
| suse-su-2025:21006-1 | Security update for expat | 2025-11-19T09:39:18Z | 2025-11-19T09:39:18Z |
| suse-su-2025:21026-1 | Security update for samba | 2025-11-18T22:57:17Z | 2025-11-18T22:57:17Z |
| suse-su-2025:21005-1 | Security update for samba | 2025-11-18T22:57:17Z | 2025-11-18T22:57:17Z |
| suse-su-2025:4135-1 | Security update for the Linux Kernel | 2025-11-18T17:31:49Z | 2025-11-18T17:31:49Z |
| suse-su-2025:4134-1 | Security update for unbound | 2025-11-18T17:10:58Z | 2025-11-18T17:10:58Z |
| suse-su-2025:4132-1 | Security update for the Linux Kernel | 2025-11-18T16:45:55Z | 2025-11-18T16:45:55Z |
| suse-ru-2025:4131-1 | Recommended update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor | 2025-11-18T15:56:53Z | 2025-11-18T15:56:53Z |
| suse-su-2025:4128-1 | Security update for the Linux Kernel | 2025-11-18T13:51:55Z | 2025-11-18T13:51:55Z |
| suse-ru-2025:21046-1 | Recommended update for afterburn | 2025-11-18T09:58:24Z | 2025-11-18T09:58:24Z |
| suse-su-2025:4126-1 | Security update for openssl-1_0_0 | 2025-11-18T09:42:49Z | 2025-11-18T09:42:49Z |
| suse-su-2025:4125-1 | Security update for ghostscript | 2025-11-18T09:35:13Z | 2025-11-18T09:35:13Z |
| suse-su-2025:4123-1 | Security update for the Linux Kernel (Live Patch 61 for SUSE Linux Enterprise 12 SP5) | 2025-11-18T02:04:00Z | 2025-11-18T02:04:00Z |
| suse-su-2025:4121-1 | Security update for alloy | 2025-11-17T12:10:11Z | 2025-11-17T12:10:11Z |
| suse-su-2025:4116-1 | Security update for libxml2 | 2025-11-17T07:26:16Z | 2025-11-17T07:26:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2023:6917 | Moderate: xorg-x11-server-Xwayland security and bug fix update | 2023-11-14T00:00:00Z | 2023-11-23T10:18:42Z |
| alsa-2023:6916 | Moderate: xorg-x11-server security and bug fix update | 2023-11-14T00:00:00Z | 2023-11-23T10:22:40Z |
| alsa-2023:6914 | Moderate: python3.11-pip security update | 2023-11-14T00:00:00Z | 2023-11-23T08:38:25Z |
| alsa-2023:6887 | Moderate: java-21-openjdk security and bug fix update | 2023-11-14T00:00:00Z | 2023-11-24T10:51:48Z |
| alsa-2023:6748 | Critical: squid security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:29Z |
| alsa-2023:6746 | Important: nghttp2 security update | 2023-11-07T00:00:00Z | 2023-11-14T12:07:08Z |
| alsa-2023:6745 | Important: curl security update | 2023-11-07T00:00:00Z | 2023-11-14T12:08:01Z |
| alsa-2023:6744 | Moderate: samba security update | 2023-11-07T00:00:00Z | 2023-11-14T12:12:32Z |
| alsa-2023:6738 | Moderate: java-21-openjdk security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:09:57Z |
| alsa-2023:6732 | Important: ghostscript security update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:44Z |
| alsa-2023:6712 | Moderate: python-wheel security update | 2023-11-07T00:00:00Z | 2023-11-14T12:12:22Z |
| alsa-2023:6707 | Moderate: avahi security update | 2023-11-07T00:00:00Z | 2023-11-14T12:09:38Z |
| alsa-2023:6705 | Low: procps-ng security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:06Z |
| alsa-2023:6699 | Moderate: krb5 security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:09:25Z |
| alsa-2023:6698 | Moderate: ncurses security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:21Z |
| alsa-2023:6694 | Moderate: python-pip security update | 2023-11-07T00:00:00Z | 2023-11-14T12:10:44Z |
| alsa-2023:6685 | Low: tpm2-tss security and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:52Z |
| alsa-2023:6679 | Moderate: curl security update | 2023-11-07T00:00:00Z | 2023-11-15T11:24:09Z |
| alsa-2023:6667 | Moderate: samba security, bug fix, and enhancement update | 2023-11-07T00:00:00Z | 2023-11-15T11:44:56Z |
| alsa-2023:6661 | Low: gmp security and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:07:54Z |
| alsa-2023:6659 | Moderate: python3.9 security update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:13Z |
| alsa-2023:6643 | Moderate: libssh security update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:04Z |
| alsa-2023:6635 | Moderate: c-ares security, bug fix, and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:49Z |
| alsa-2023:6632 | Low: shadow-utils security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:06:24Z |
| alsa-2023:6631 | Low: glib2 security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:13Z |
| alsa-2023:6621 | Moderate: protobuf-c security update | 2023-11-07T00:00:00Z | 2023-11-14T12:06:55Z |
| alsa-2023:6615 | Moderate: python-cryptography security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:19Z |
| alsa-2023:6596 | Moderate: cups security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:43Z |
| alsa-2023:6595 | Important: linux-firmware security, bug fix, and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:15:32Z |
| alsa-2023:6593 | Moderate: binutils security update | 2023-11-07T00:00:00Z | 2023-11-14T12:06:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2021-950 | Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter | 2021-07-10T00:01:24.552480Z | 2022-04-13T03:04:30.774343Z |
| osv-2021-948 | Use-of-uninitialized-value in residual_coding | 2021-07-10T00:01:12.890029Z | 2026-04-10T14:06:45.638294Z |
| osv-2021-947 | Dynamic-stack-buffer-overflow in hsql::SQLParserResult::addStatement | 2021-07-10T00:01:12.069383Z | 2022-04-13T03:04:30.768366Z |
| osv-2021-940 | Heap-buffer-overflow in json_string_unescape | 2021-07-09T00:01:28.772223Z | 2022-04-13T03:04:37.827671Z |
| osv-2021-939 | Segv on unknown address in helper_uc_tracecode | 2021-07-09T00:01:18.848024Z | 2023-02-24T01:32:43.286841Z |
| osv-2021-935 | Heap-buffer-overflow in answer_request | 2021-07-09T00:00:11.076648Z | 2022-04-13T03:04:31.129678Z |
| osv-2021-934 | Heap-buffer-overflow in extract_addresses | 2021-07-08T00:01:26.898533Z | 2022-04-13T03:04:31.116826Z |
| osv-2021-933 | Heap-buffer-overflow in print_mac | 2021-07-08T00:01:26.369555Z | 2022-04-13T03:04:31.143462Z |
| osv-2021-932 | Heap-buffer-overflow in resize_packet | 2021-07-08T00:01:25.139349Z | 2022-04-13T03:04:31.204327Z |
| osv-2021-931 | Heap-buffer-overflow in extract_name | 2021-07-08T00:00:46.211999Z | 2022-04-13T03:04:31.173917Z |
| osv-2021-929 | Heap-buffer-overflow in extract_name | 2021-07-08T00:00:32.006993Z | 2022-04-13T03:04:31.161444Z |
| osv-2021-927 | Heap-buffer-overflow in dhcp_reply | 2021-07-08T00:00:29.994570Z | 2022-04-13T03:34:44.550863Z |
| osv-2021-926 | Heap-use-after-free in zend_gc_addref | 2021-07-08T00:00:29.564756Z | 2022-04-13T03:04:33.657097Z |
| osv-2021-925 | Stack-buffer-overflow in is_same_net6 | 2021-07-08T00:00:18.003362Z | 2022-04-13T03:30:15.025589Z |
| osv-2021-924 | Heap-buffer-overflow in check_bad_address | 2021-07-08T00:00:12.086205Z | 2022-04-13T03:04:31.167687Z |
| osv-2021-921 | Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true> | 2021-07-06T00:01:05.257431Z | 2022-04-13T03:04:36.453614Z |
| osv-2021-919 | UNKNOWN READ in v_FindFunction | 2021-07-05T00:01:12.283873Z | 2022-04-15T00:05:24.837855Z |
| osv-2021-916 | Use-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadata | 2021-07-04T00:00:13.274805Z | 2022-04-13T03:04:41.822581Z |
| osv-2021-915 | Stack-buffer-overflow in sc_asn1_read_tag | 2021-07-04T00:00:09.087329Z | 2022-04-13T03:04:41.686139Z |
| osv-2021-914 | UNKNOWN READ in mrb_vm_ci_env | 2021-07-03T00:01:26.278614Z | 2022-04-13T03:04:39.759907Z |
| osv-2021-913 | Heap-buffer-overflow in dispatch | 2021-07-03T00:00:29.297612Z | 2022-04-13T03:04:39.790952Z |
| osv-2021-912 | Heap-buffer-overflow in mrb_vm_exec | 2021-07-03T00:00:06.973804Z | 2022-04-13T03:04:39.677891Z |
| osv-2021-909 | Heap-buffer-overflow in OT::CPALV1Tail::serialize | 2021-07-01T00:00:58.474357Z | 2022-04-13T03:04:32.830977Z |
| osv-2021-908 | Heap-use-after-free in tsk_fs_attr_set_run | 2021-07-01T00:00:24.935073Z | 2022-04-13T03:04:36.436826Z |
| osv-2021-907 | Heap-buffer-overflow in decode_header_value_literal | 2021-07-01T00:00:08.550315Z | 2022-04-13T03:04:35.146504Z |
| osv-2021-904 | UNKNOWN READ in helper_uc_tracecode | 2021-06-27T00:01:32.667386Z | 2022-04-13T03:04:39.109056Z |
| osv-2021-903 | UNKNOWN WRITE in QOutlineMapper::convertPath | 2021-06-27T00:01:31.379142Z | 2023-02-24T02:21:32.965558Z |
| osv-2021-902 | Heap-buffer-overflow in ebitmap_match_any | 2021-06-27T00:01:23.702334Z | 2022-04-13T03:04:42.344343Z |
| osv-2021-900 | Negative-size-param in WebPRescalerInit | 2021-06-27T00:00:31.134360Z | 2022-04-13T03:04:41.775376Z |
| osv-2021-897 | Heap-buffer-overflow in ZSTD_decompressMultiFrame | 2021-06-26T00:00:37.934284Z | 2022-06-16T00:04:17.202124Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-nginx-2024-24989 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:31.007Z | 2025-05-20T10:02:07.006Z |
| bit-node-2024-21896 | 2024-06-04T09:50:22.403Z | 2026-02-11T09:09:18.507Z | |
| bit-nginx-2024-24990 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:17.408Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-31079 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:02.910Z | 2025-05-20T10:02:07.006Z |
| bit-node-2024-22025 | 2024-06-04T09:49:52.511Z | 2026-02-11T09:09:18.507Z | |
| bit-nginx-2024-32760 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:49:48.003Z | 2025-05-20T10:02:07.006Z |
| bit-node-2024-27982 | 2024-06-04T09:49:37.511Z | 2026-02-11T09:09:18.507Z | |
| bit-nginx-2024-34161 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:49:32.908Z | 2025-05-20T10:02:07.006Z |
| bit-node-2024-27983 | 2024-06-04T09:49:21.510Z | 2026-02-11T09:09:18.507Z | |
| bit-nginx-2024-35200 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:49:17.615Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2024-36107 | Information disclosure in minio | 2024-06-04T09:46:16.011Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-21392 | .NET and Visual Studio Denial of Service Vulnerability | 2024-06-04T09:39:52.406Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-21409 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | 2024-06-04T09:39:37.204Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-26190 | Microsoft QUIC Denial of Service Vulnerability | 2024-06-04T09:39:22.706Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-30045 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-06-04T09:39:07.406Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-30046 | Visual Studio Denial of Service Vulnerability | 2024-06-04T09:38:50.507Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-6502 | Inefficient Regular Expression Complexity in GitLab | 2024-05-29T07:32:46.972Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-7045 | Cross-Site Request Forgery (CSRF) in GitLab | 2024-05-29T07:29:24.176Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-1947 | Improper Handling of Highly Compressed Data (Data Amplification) in GitLab | 2024-05-29T07:25:38.659Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2874 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-05-29T07:22:20.064Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4835 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-05-29T07:19:26.961Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5258 | Authorization Bypass Through User-Controlled Key in GitLab | 2024-05-29T07:19:02.770Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5318 | Missing Authorization in GitLab | 2024-05-29T07:18:35.469Z | 2025-05-20T10:02:07.006Z |
| bit-prestashop-2024-34716 | PrestaShop vulnerable to XSS via customer contact form in FO, through file upload | 2024-05-24T07:31:41.856Z | 2025-05-20T10:02:07.006Z |
| bit-prestashop-2024-34717 | Anonymous PrestaShop customer can download other customers' invoices | 2024-05-24T07:31:26.248Z | 2025-05-20T10:02:07.006Z |
| bit-postgresql-2024-4317 | PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks | 2024-05-24T07:31:18.950Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-6682 | Inefficient Regular Expression Complexity in GitLab | 2024-05-24T07:29:06.845Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-6688 | Inefficient Regular Expression Complexity in GitLab | 2024-05-24T07:28:37.252Z | 2025-05-20T10:02:07.006Z |
| bit-node-2024-21892 | 2024-05-24T07:27:13.552Z | 2026-02-11T09:09:18.507Z | |
| bit-node-2024-22019 | 2024-05-24T07:26:57.950Z | 2026-02-11T09:09:18.507Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0536 | Multiples vulnérabilités dans Google Android | 2024-07-03T00:00:00.000000 | 2024-07-03T00:00:00.000000 |
| certfr-2024-avi-0535 | Multiples vulnérabilités dans les produits Splunk | 2024-07-02T00:00:00.000000 | 2024-07-02T00:00:00.000000 |
| certfr-2024-avi-0534 | Vulnérabilité dans Juniper Networks Junos OS | 2024-07-02T00:00:00.000000 | 2024-07-02T00:00:00.000000 |
| certfr-2024-avi-0533 | Multiples vulnérabilités dans Apache HTTP Server | 2024-07-02T00:00:00.000000 | 2024-07-02T00:00:00.000000 |
| certfr-2024-avi-0532 | Vulnérabilité dans Cisco NX-OS | 2024-07-02T00:00:00.000000 | 2024-07-02T00:00:00.000000 |
| certfr-2024-avi-0531 | Multiples vulnérabilités dans OpenSSH | 2024-07-01T00:00:00.000000 | 2024-07-01T00:00:00.000000 |
| certfr-2024-avi-0530 | Multiples vulnérabilités dans les produits NetApp | 2024-07-01T00:00:00.000000 | 2024-07-01T00:00:00.000000 |
| certfr-2024-avi-0529 | Multiples vulnérabilités dans les produits IBM | 2024-06-28T00:00:00.000000 | 2024-06-28T00:00:00.000000 |
| certfr-2024-avi-0528 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-06-28T00:00:00.000000 | 2024-06-28T00:00:00.000000 |
| certfr-2024-avi-0527 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2024-06-28T00:00:00.000000 | 2024-06-28T00:00:00.000000 |
| certfr-2024-avi-0526 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-06-28T00:00:00.000000 | 2024-06-28T00:00:00.000000 |
| certfr-2024-avi-0525 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-06-28T00:00:00.000000 | 2024-06-28T00:00:00.000000 |
| certfr-2024-avi-0524 | Multiples vulnérabilités dans les produits VMware | 2024-06-28T00:00:00.000000 | 2024-06-28T00:00:00.000000 |
| certfr-2024-avi-0523 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-28T00:00:00.000000 | 2024-06-28T00:00:00.000000 |
| certfr-2024-avi-0522 | Vulnérabilité dans OpenSSL | 2024-06-27T00:00:00.000000 | 2024-06-27T00:00:00.000000 |
| certfr-2024-avi-0521 | Multiples vulnérabilités dans GitLab | 2024-06-27T00:00:00.000000 | 2024-06-27T00:00:00.000000 |
| certfr-2024-avi-0520 | Multiples vulnérabilités dans les produits Progress | 2024-06-26T00:00:00.000000 | 2024-06-26T00:00:00.000000 |
| certfr-2024-avi-0519 | Multiples vulnérabilités dans les produits VMware | 2024-06-26T00:00:00.000000 | 2024-06-26T00:00:00.000000 |
| certfr-2024-avi-0518 | Vulnérabilité dans LibreOffice | 2024-06-25T00:00:00.000000 | 2024-06-25T00:00:00.000000 |
| certfr-2024-avi-0517 | Vulnérabilité dans Citrix Secure Access client | 2024-06-25T00:00:00.000000 | 2024-06-25T00:00:00.000000 |
| certfr-2024-avi-0516 | Multiples vulnérabilités dans WordPress | 2024-06-25T00:00:00.000000 | 2024-06-25T00:00:00.000000 |
| certfr-2024-avi-0515 | Multiples vulnérabilités dans Google Chrome | 2024-06-25T00:00:00.000000 | 2024-06-25T00:00:00.000000 |
| certfr-2024-avi-0514 | Multiples vulnérabilités dans les produits IBM | 2024-06-21T00:00:00.000000 | 2024-06-21T00:00:00.000000 |
| certfr-2024-avi-0513 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-06-21T00:00:00.000000 | 2024-06-21T00:00:00.000000 |
| certfr-2024-avi-0512 | Multiples vulnérabilités dans les produits Moxa | 2024-06-21T00:00:00.000000 | 2024-06-21T00:00:00.000000 |
| certfr-2024-avi-0511 | Vulnérabilité dans les produits ESET | 2024-06-21T00:00:00.000000 | 2024-06-21T00:00:00.000000 |
| certfr-2024-avi-0510 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-21T00:00:00.000000 | 2024-06-21T00:00:00.000000 |
| certfr-2024-avi-0509 | Multiples vulnérabilités dans SonicWall SonicOS | 2024-06-20T00:00:00.000000 | 2024-06-20T00:00:00.000000 |
| certfr-2024-avi-0508 | Multiples vulnérabilités dans les produits Moxa | 2024-06-20T00:00:00.000000 | 2024-06-20T00:00:00.000000 |
| certfr-2024-avi-0507 | Vulnérabilité dans Spring Cloud Function | 2024-06-20T00:00:00.000000 | 2024-06-20T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000020 | AutoCAD may insecurely load dynamic libraries | 2014-02-21T14:19+09:00 | 2014-02-25T16:38+09:00 |
| jvndb-2014-000019 | AutoCAD vulnerable to arbitrary VBScript execution | 2014-02-21T14:16+09:00 | 2014-02-25T16:39+09:00 |
| jvndb-2014-000012 | Blackboard Vista/CE vulnerable to cross-site scripting | 2014-02-21T14:12+09:00 | 2014-02-25T16:40+09:00 |
| jvndb-2014-000017 | Apache Commons FileUpload vulnerable to denial-of-service (DoS) | 2014-02-10T17:21+09:00 | 2016-12-27T11:49+09:00 |
| jvndb-2014-000016 | phpMyFAQ vulnerable to cross-site request forgery | 2014-02-07T12:26+09:00 | 2014-02-20T13:58+09:00 |
| jvndb-2014-000015 | phpMyFAQ vulnerable to cross-site scripting | 2014-02-07T12:25+09:00 | 2014-02-20T14:00+09:00 |
| jvndb-2014-000014 | Opera browser for Android issue in handling intent scheme URL's | 2014-02-06T12:20+09:00 | 2014-02-10T19:09+09:00 |
| jvndb-2014-000013 | Joyful Note vulnerable to cross-site scripting | 2014-01-31T13:41+09:00 | 2014-02-04T17:38+09:00 |
| jvndb-2014-000011 | Sanshiro Series vulnerable to arbitrary code execution | 2014-01-28T14:48+09:00 | 2014-01-30T14:24+09:00 |
| jvndb-2014-000010 | Multiple SQL injection vulnerabilities in Cybozu Garoon | 2014-01-28T14:40+09:00 | 2014-01-30T14:22+09:00 |
| jvndb-2014-000009 | OpenPNE vulnerable to PHP Object Injection | 2014-01-24T12:36+09:00 | 2014-01-28T18:02+09:00 |
| jvndb-2014-000008 | SimZip (Simple Zip Viewer) vulnerable to directory traversal | 2014-01-24T12:34+09:00 | 2014-01-28T18:03+09:00 |
| jvndb-2014-001203 | A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software | 2014-01-22T18:06+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-000007 | Information disclosure vulnerability in Sleipnir Mobile for Android | 2014-01-22T15:29+09:00 | 2014-01-27T09:47+09:00 |
| jvndb-2014-000006 | EC-CUBE vulnerable to authorization bypass | 2014-01-22T15:28+09:00 | 2024-05-15T14:59+09:00 |
| jvndb-2014-000005 | EC-CUBE vulnerable to information alteration | 2014-01-22T15:27+09:00 | 2014-01-27T09:51+09:00 |
| jvndb-2014-000004 | NeoFiler vulnerable to directory traversal | 2014-01-10T14:44+09:00 | 2014-01-15T12:32+09:00 |
| jvndb-2014-000003 | Security File Manager vulnerable to directory traversal | 2014-01-10T14:42+09:00 | 2014-01-10T14:42+09:00 |
| jvndb-2014-000002 | tetra filer vulnerable to directory traversal | 2014-01-10T14:41+09:00 | 2014-01-10T14:41+09:00 |
| jvndb-2014-000001 | ZIP with Pass vulnerable to directory traversal | 2014-01-10T14:34+09:00 | 2014-01-10T14:34+09:00 |
| jvndb-2013-000126 | HP Autonomy Ultraseek vulnerable to cross-site scripting | 2013-12-26T12:32+09:00 | 2013-12-26T12:32+09:00 |
| jvndb-2013-005669 | Xml eXternal Entity Vulnerability in Hitachi Cosminexus | 2013-12-25T19:13+09:00 | 2013-12-25T19:13+09:00 |
| jvndb-2013-000125 | Cybozu Garoon Keitai vulnerable to authentication bypass | 2013-12-25T12:22+09:00 | 2014-01-07T16:12+09:00 |
| jvndb-2013-000124 | Cybozu Garoon vulnerable to SQL injection | 2013-12-25T12:21+09:00 | 2014-01-07T19:22+09:00 |
| jvndb-2013-000123 | VMware ESX and ESXi may allow access to arbitrary files | 2013-12-24T15:02+09:00 | 2013-12-25T14:01+09:00 |
| jvndb-2013-000120 | IrfanView vulnerable to buffer overflow | 2013-12-24T15:02+09:00 | 2014-01-07T19:25+09:00 |
| jvndb-2013-000111 | Android OS vulnerable to arbitrary Java method execution | 2013-12-17T13:57+09:00 | 2014-03-05T17:27+09:00 |
| jvndb-2013-000119 | Juniper ScreenOS vulnerable to denial-of-service (DoS) | 2013-12-13T12:23+09:00 | 2013-12-18T15:23+09:00 |
| jvndb-2013-000118 | Cybozu Dezie vulnerable to cross-site scripting | 2013-12-10T14:13+09:00 | 2013-12-18T14:51+09:00 |
| jvndb-2013-000117 | Cybozu Garoon vulnerable to session fixation | 2013-12-03T13:51+09:00 | 2013-12-06T10:52+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-29439 | Web-Based Internet Laboratory Management System /user/controller.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-27 |
| cnvd-2025-29438 | Web-Based Internet Laboratory Management System /subject/controller.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-27 |
| cnvd-2025-29437 | Web-Based Internet Laboratory Management System /settings/controller.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-27 |
| cnvd-2025-29436 | Web-Based Internet Laboratory Management System /enrollment/controller.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-27 |
| cnvd-2025-29435 | Web-Based Internet Laboratory Management System controller.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-27 |
| cnvd-2025-29369 | Small CRM manage-tickets.php文件跨站脚本漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29368 | Small CRM quote-details.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29367 | Small CRM manage-tickets.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29366 | Small CRM change-password.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29365 | Online Shopping Portal my-cart.php文件跨站脚本漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29364 | Online Shopping Portal search-result.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29363 | Online Shopping Portal product-details.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29362 | Online Shopping Portal login.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29361 | Online Shopping Portal forgot-password.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29360 | Online Shopping Portal admin页面SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29359 | Complaint Management System user-search.php文件跨站脚本漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29358 | Complaint Management System subcategory.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29357 | Complaint Management System reset-password.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29356 | Complaint Management System between-date-userreport.php文件跨站脚本漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29355 | Complaint Management System between-date-userreport.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-25 |
| cnvd-2025-29301 | WordPress Live sales notification for WooCommerce plugin缺少授权漏洞 | 2025-11-20 | 2025-11-24 |
| cnvd-2025-29300 | WordPress Icon List Block plugin服务端请求伪造漏洞 | 2025-11-20 | 2025-11-24 |
| cnvd-2025-29299 | WordPress Element Pack Addons for Elementor plugin跨站脚本漏洞 | 2025-11-20 | 2025-11-24 |
| cnvd-2025-29298 | WordPress Cryptocurrency Payment Gateway for WooCommerce plugin未经授权的数据修改漏洞 | 2025-11-20 | 2025-11-24 |
| cnvd-2025-29297 | WordPress Checkout Files Upload for WooCommerce plugin跨站脚本漏洞 | 2025-11-20 | 2025-11-24 |
| cnvd-2025-29296 | WordPress Broken Link Checker by AIOSEO plugin缺少授权漏洞 | 2025-11-20 | 2025-11-24 |
| cnvd-2025-29295 | WordPress AI Engine plugin服务端请求伪造漏洞 | 2025-11-20 | 2025-11-24 |
| cnvd-2025-29167 | Apache OpenOffice安全绕过漏洞(CNVD-2025-29167) | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29166 | Apache OpenOffice安全绕过漏洞(CNVD-2025-29166) | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29165 | Apache OpenOffice信息泄露漏洞 | 2025-11-20 | 2025-11-21 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-15884 | Уязвимость функции nfs_open_local_fh() модуля fs/nfs_common/nfslocalio.c ядра операционно… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15883 | Уязвимость функции usb9pfs_alloc_instance() модуля net/9p/trans_usbg.c ядра операционной … | 15.12.2025 | 15.12.2025 |
| bdu:2025-15882 | Уязвимость программы для просмотра документов Foxit PDF Reader (ранее Foxit Reader) и про… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15881 | Уязвимость функции has_meta_commands() инструмента управления базами данных pgAdmin 4, по… | 15.12.2025 | 29.01.2026 |
| bdu:2025-15880 | Уязвимость функции pqm_clean_queue_resource() модуля drivers/gpu/drm/amd/amdkfd/kfd_proce… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15879 | Уязвимость функции sanity_check_pinned_pages() модуля mm/gup.c подсистемы управления памя… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15878 | Уязвимость функции binder_release_work() модуля drivers/android/binder.c ядра операционно… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15877 | Уязвимость функции erofs_bread() модуля fs/erofs/data.c поддержки файловой системы EROFS … | 15.12.2025 | 15.12.2025 |
| bdu:2025-15876 | Уязвимость сценария cstecgi.cgi микропрограммного обеспечения маршрутизаторов TOTOLINK NR… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15875 | Уязвимость компонента Agent системы мониторинга ИТ-инфраструктуры Zabbix, позволяющая нар… | 15.12.2025 | 13.01.2026 |
| bdu:2025-15874 | Уязвимость системы мониторинга ИТ-инфраструктуры Zabbix, связанная с недостаточной провер… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15873 | Уязвимость сценария imgstore.php системы мониторинга ИТ-инфраструктуры Zabbix, позволяюща… | 15.12.2025 | 13.01.2026 |
| bdu:2025-15872 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15871 | Уязвимость компонента InnoDB системы управления базами данных MySQL Server, позволяющая н… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15870 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15869 | Уязвимость компонента Object and Environment Tech системы управления ресурсами предприяти… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15868 | Уязвимость компонента Kernel операционной системы Solaris, позволяющая нарушителю вызвать… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15867 | Уязвимость интерфейса Swagger UI программной платформы на базе git для совместной работы … | 15.12.2025 | 15.12.2025 |
| bdu:2025-15866 | Уязвимость компонента Web Runtime SEC системы управления ресурсами предприятия JD Edwards… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15865 | Уязвимость компонента OpenSearch Dashboards пакета бизнес-приложений Oracle PeopleSoft En… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15864 | Уязвимость компонента Server: DML системы управления базами данных MySQL Server, позволяю… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15863 | Уязвимость компонента Performance Monitor пакета бизнес-приложений Oracle PeopleSoft Ente… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15862 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15861 | Уязвимость компонента Java VM системы управления базами данных Oracle Database Server, по… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15860 | Уязвимость ядра сервера приложения Oracle WebLogic Server, позволяющая нарушителю получит… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15859 | Уязвимость ядра виртуальной машины Oracle VM VirtualBox, позволяющая нарушителю получить … | 15.12.2025 | 19.12.2025 |
| bdu:2025-15858 | Уязвимость ядра сервера приложений Oracle WebLogic Server, позволяющая нарушителю вызвать… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15857 | Уязвимость компонента Upload Attachments программной платформы Oracle Applications Framew… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15856 | Уязвимость оптимизатора системы управления базами данных MySQL Server, позволяющая наруши… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15855 | Уязвимость службы компонентов системы управления базами данных MySQL Server, позволяющая … | 15.12.2025 | 15.12.2025 |
| ID | Description | Updated |
|---|---|---|
| var-202403-0816 | A vulnerability was found in Tenda AC15 15.03.20_multi and classified as critical. Affect… | 2025-11-19T23:18:27.438000Z |
| var-202403-2494 | News functionality in Schoolbox application before version 23.1.3 is vulnerable to store… | 2025-11-19T23:18:27.347000Z |
| var-202403-0832 | A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15… | 2025-11-19T23:18:27.324000Z |
| var-202509-0172 | A weakness has been identified in D-Link DI-8400 16.07.26A1. The affected element is the … | 2025-11-19T23:17:54.110000Z |
| var-202509-0235 | There is a possible escalation of privilege due to test/debugging code left in a producti… | 2025-11-19T23:17:54.088000Z |
| var-202510-1837 | Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 al… | 2025-11-19T23:17:53.734000Z |
| var-202510-2089 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T23:17:53.710000Z |
| var-202510-2152 | The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access … | 2025-11-19T23:17:53.667000Z |
| var-202510-2194 | ASDA-Soft Stack-based Buffer Overflow Vulnerability. This vulnerability allows remote att… | 2025-11-19T23:17:53.633000Z |
| var-202510-2215 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid paramet… | 2025-11-19T23:17:53.616000Z |
| var-202510-2278 | Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allo… | 2025-11-19T23:17:53.572000Z |
| var-202510-3242 | The COMELIT IPCAM768ZA is a webcam. The COMELIT IPCAM768ZA has a weak password vulnerabi… | 2025-11-19T23:17:53.082000Z |
| var-202511-0057 | A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability … | 2025-11-19T23:17:52.944000Z |
| var-201501-0439 | GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier a… | 2025-11-19T23:16:34.117000Z |
| var-201501-0438 | GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier a… | 2025-11-19T23:16:34.076000Z |
| var-202403-0815 | A vulnerability was found in Tenda AC15 15.03.20_multi. It has been rated as critical. Th… | 2025-11-19T23:16:15.288000Z |
| var-202403-0920 | A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classifie… | 2025-11-19T23:16:15.262000Z |
| var-202509-0357 | Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function … | 2025-11-19T23:16:12.236000Z |
| var-202509-4515 | The AC10 is a high-performance router with gigabit ports on both the WAN and LAN sides. … | 2025-11-19T23:16:11.835000Z |
| var-202510-0325 | Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user … | 2025-11-19T23:16:11.798000Z |
| var-202510-0326 | Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user … | 2025-11-19T23:16:11.771000Z |
| var-202510-0324 | Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user … | 2025-11-19T23:16:11.744000Z |
| var-202510-1250 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU paramet… | 2025-11-19T23:16:11.681000Z |
| var-202510-2090 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T23:16:11.595000Z |
| var-202510-2132 | A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRoute… | 2025-11-19T23:16:11.563000Z |
| var-202510-2153 | Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwo… | 2025-11-19T23:16:11.551000Z |
| var-202510-2216 | A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability… | 2025-11-19T23:16:11.511000Z |
| var-202510-2279 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T23:16:11.469000Z |
| var-202510-2384 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the … | 2025-11-19T23:16:11.403000Z |
| var-201409-0722 | Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SC… | 2025-11-19T23:15:03.200000Z |