Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-41118 |
9.1 (3.1)
|
Sensitive COS `SecretKey` exposed in plaintext via con… |
Grafana |
Pyroscope |
2026-04-15T19:15:17.689Z | 2026-04-24T08:00:52.045Z |
| CVE-2026-33877 |
3.7 (3.1)
|
ApostropheCMS: User Enumeration via Timing Side Channe… |
apostrophecms |
apostrophe |
2026-04-15T19:11:06.796Z | 2026-04-15T19:30:53.040Z |
| CVE-2026-6384 |
7.3 (3.1)
|
Gimp: gimp: arbitrary code execution or denial of serv… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-04-15T19:09:10.587Z | 2026-04-28T18:43:53.633Z |
| CVE-2026-6364 |
6.5 (3.1)
|
Out of bounds read in Skia in Google Chrome prior… |
Google |
Chrome |
2026-04-15T19:04:59.385Z | 2026-04-16T13:53:06.236Z |
| CVE-2026-6319 |
7.5 (3.1)
|
Use after free in Payments in Google Chrome on An… |
Google |
Chrome |
2026-04-15T19:04:58.945Z | 2026-04-16T09:58:55.486Z |
| CVE-2026-6318 |
8.8 (3.1)
|
Use after free in Codecs in Google Chrome prior t… |
Google |
Chrome |
2026-04-15T19:04:58.495Z | 2026-04-16T09:58:26.278Z |
| CVE-2026-6363 |
8.8 (3.1)
|
Type Confusion in V8 in Google Chrome prior to 14… |
Google |
Chrome |
2026-04-15T19:04:57.982Z | 2026-04-16T03:55:45.999Z |
| CVE-2026-6317 |
8.8 (3.1)
|
Use after free in Cast in Google Chrome prior to … |
Google |
Chrome |
2026-04-15T19:04:57.557Z | 2026-04-16T03:55:47.518Z |
| CVE-2026-6362 |
6.3 (3.1)
|
Use after free in Codecs in Google Chrome prior t… |
Google |
Chrome |
2026-04-15T19:04:57.143Z | 2026-04-16T13:23:13.559Z |
| CVE-2026-6361 |
7.2 (3.1)
|
Heap buffer overflow in PDFium in Google Chrome o… |
Google |
Chrome |
2026-04-15T19:04:56.740Z | 2026-04-16T10:00:46.711Z |
| CVE-2026-6316 |
8.8 (3.1)
|
Use after free in Forms in Google Chrome prior to… |
Google |
Chrome |
2026-04-15T19:04:56.345Z | 2026-04-16T03:55:49.002Z |
| CVE-2026-6315 |
8.8 (3.1)
|
Use after free in Permissions in Google Chrome on… |
Google |
Chrome |
2026-04-15T19:04:55.935Z | 2026-04-16T03:55:50.553Z |
| CVE-2026-6314 |
8.3 (3.1)
|
Out of bounds write in GPU in Google Chrome prior… |
Google |
Chrome |
2026-04-15T19:04:55.460Z | 2026-04-16T03:56:07.922Z |
| CVE-2026-6313 |
3.1 (3.1)
|
Insufficient policy enforcement in CORS in Google… |
Google |
Chrome |
2026-04-15T19:04:54.889Z | 2026-04-15T20:00:40.125Z |
| CVE-2026-6312 |
3.1 (3.1)
|
Insufficient policy enforcement in Passwords in G… |
Google |
Chrome |
2026-04-15T19:04:54.385Z | 2026-04-15T19:59:44.768Z |
| CVE-2026-6311 |
8.3 (3.1)
|
Uninitialized Use in Accessibility in Google Chro… |
Google |
Chrome |
2026-04-15T19:04:53.973Z | 2026-04-16T03:56:12.695Z |
| CVE-2026-6310 |
8.3 (3.1)
|
Use after free in Dawn in Google Chrome prior to … |
Google |
Chrome |
2026-04-15T19:04:53.589Z | 2026-04-16T03:56:06.808Z |
| CVE-2026-6360 |
8.8 (3.1)
|
Use after free in FileSystem in Google Chrome pri… |
Google |
Chrome |
2026-04-15T19:04:53.135Z | 2026-04-16T03:56:09.052Z |
| CVE-2026-6309 |
8.3 (3.1)
|
Use after free in Viz in Google Chrome prior to 1… |
Google |
Chrome |
2026-04-15T19:04:52.730Z | 2026-04-16T03:56:05.365Z |
| CVE-2026-6308 |
7.5 (3.1)
|
Out of bounds read in Media in Google Chrome prio… |
Google |
Chrome |
2026-04-15T19:04:52.265Z | 2026-04-16T09:57:13.931Z |
| CVE-2026-6307 |
8.8 (3.1)
|
Type Confusion in Turbofan in Google Chrome prior… |
Google |
Chrome |
2026-04-15T19:04:51.835Z | 2026-04-16T03:55:59.049Z |
| CVE-2026-6306 |
8.8 (3.1)
|
Heap buffer overflow in PDFium in Google Chrome p… |
Google |
Chrome |
2026-04-15T19:04:51.372Z | 2026-04-16T09:56:40.048Z |
| CVE-2026-6305 |
8.8 (3.1)
|
Heap buffer overflow in PDFium in Google Chrome p… |
Google |
Chrome |
2026-04-15T19:04:50.926Z | 2026-04-16T03:56:17.490Z |
| CVE-2026-6304 |
8.3 (3.1)
|
Use after free in Graphite in Google Chrome prior… |
Google |
Chrome |
2026-04-15T19:04:50.503Z | 2026-04-16T03:56:03.915Z |
| CVE-2026-6303 |
8.8 (3.1)
|
Use after free in Codecs in Google Chrome prior t… |
Google |
Chrome |
2026-04-15T19:04:50.052Z | 2026-04-16T09:57:48.474Z |
| CVE-2026-6302 |
8.8 (3.1)
|
Use after free in Video in Google Chrome prior to… |
Google |
Chrome |
2026-04-15T19:04:49.608Z | 2026-04-16T03:56:00.581Z |
| CVE-2026-6301 |
8.8 (3.1)
|
Type Confusion in Turbofan in Google Chrome prior… |
Google |
Chrome |
2026-04-15T19:04:49.077Z | 2026-04-16T03:55:57.939Z |
| CVE-2026-6300 |
8.8 (3.1)
|
Use after free in CSS in Google Chrome prior to 1… |
Google |
Chrome |
2026-04-15T19:04:48.606Z | 2026-04-16T03:55:56.815Z |
| CVE-2026-6359 |
8.8 (3.1)
|
Use after free in Video in Google Chrome on Windo… |
Google |
Chrome |
2026-04-15T19:04:48.203Z | 2026-04-16T03:55:55.574Z |
| CVE-2026-6358 |
8.8 (3.1)
|
Use after free in XR in Google Chrome on Android … |
Google |
Chrome |
2026-04-15T19:04:47.677Z | 2026-04-16T03:55:54.349Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-40502 |
8.7 (4.0)
8.8 (3.1)
|
OpenHarness Remote Administrative Command Injection vi… |
HKUDS |
OpenHarness |
2026-04-16T00:08:34.463Z | 2026-04-16T14:19:24.128Z |
| CVE-2026-5363 |
5.4 (4.0)
|
Use of weak cryptographic key in TP-Link Archer C7 |
TP-Link Systems Inc. |
Archer C7 v5 and v5.8 |
2026-04-15T23:45:54.271Z | 2026-04-16T23:10:46.170Z |
| CVE-2026-4880 |
9.8 (3.1)
|
Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthentica… |
ukrsolution |
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) |
2026-04-15T23:25:49.596Z | 2026-04-16T14:20:50.654Z |
| CVE-2026-40947 |
2.9 (3.1)
|
Yubico libfido2 before 1.17.0, python-fido2 befor… |
Yubico |
libfido2 |
2026-04-15T23:13:38.977Z | 2026-04-16T13:18:13.069Z |
| CVE-2026-40245 |
7.5 (3.1)
|
Free5GC: UDR nudr-dr influenceData/subs-to-notify leak… |
free5gc |
free5gc |
2026-04-15T23:25:11.589Z | 2026-04-16T12:04:46.694Z |
| CVE-2026-40193 |
8.2 (3.1)
|
Maddy Mail Server: LDAP Filter Injection via Unsanitiz… |
foxcpp |
maddy |
2026-04-15T23:15:25.011Z | 2026-04-16T14:23:52.438Z |
| CVE-2026-4949 |
4.3 (3.1)
|
ProfilePress <= 4.16.12 - Missing Authorization to Aut… |
properfraction |
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress |
2026-04-15T22:26:05.515Z | 2026-04-16T14:19:21.197Z |
| CVE-2026-40316 |
8.8 (3.1)
|
OWASP BLT has RCE in Github Actions via untrusted Djan… |
OWASP-BLT |
BLT |
2026-04-15T22:49:18.636Z | 2026-04-16T14:18:12.374Z |
| CVE-2026-40192 |
8.7 (4.0)
|
Pillow is vulnerable to a FITS GZIP decompression bomb |
python-pillow |
Pillow |
2026-04-15T22:53:56.147Z | 2026-04-16T13:37:19.918Z |
| CVE-2026-40179 |
5.3 (4.0)
|
Prometheus: Stored XSS via metric names and label valu… |
prometheus |
prometheus |
2026-04-15T22:26:46.909Z | 2026-04-16T14:21:42.130Z |
| CVE-2026-39350 |
5.4 (3.1)
|
Istio AuthorizationPolicy Incorrect Regex Matching of … |
istio |
istio |
2026-04-15T22:42:24.216Z | 2026-04-16T12:04:54.038Z |
| CVE-2026-6388 |
9.1 (3.1)
|
Argocd-image-updater: argocd image updater: cross-name… |
Red Hat |
Red Hat OpenShift GitOps |
2026-04-15T21:34:07.022Z | 2026-04-16T14:26:23.879Z |
| CVE-2026-40500 |
6.1 (4.0)
6.8 (3.1)
|
ProcessWire CMS SSRF via Add Module From URL |
processwire |
processwire |
2026-04-15T21:25:53.214Z | 2026-04-16T13:38:15.341Z |
| CVE-2026-1711 |
4.8 (4.0)
|
Pega Platform versions 8.1.0 through 25.1.1 are affect… |
Pegasystems |
Pega Infinity |
2026-04-15T21:32:51.821Z | 2026-04-16T14:17:53.761Z |
| CVE-2026-1564 |
5.1 (4.0)
|
Pega Platform versions 8.1.0 through 25.1.1 are affect… |
Pegasystems |
Pega Infinity |
2026-04-15T21:31:19.982Z | 2026-04-16T14:16:54.925Z |
| CVE-2026-6398 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-04-15T20:24:11.160Z | |
| CVE-2026-40261 |
8.8 (3.1)
|
Composer has Command Injection via Malicious Perforce … |
composer |
composer |
2026-04-15T20:56:32.182Z | 2026-04-16T13:41:12.977Z |
| CVE-2026-40186 |
6.1 (3.1)
|
ApostropheCMS: sanitize-html allowedTags Bypass via En… |
apostrophecms |
apostrophe |
2026-04-15T20:15:12.333Z | 2026-04-16T14:15:41.275Z |
| CVE-2026-40176 |
7.8 (3.1)
|
Composer is vulnerable to Command Injection via Malici… |
composer |
composer |
2026-04-15T20:47:39.839Z | 2026-04-16T14:16:39.968Z |
| CVE-2026-40173 |
9.4 (3.1)
|
Dgraph: Unauthenticated pprof endpoint leaks admin aut… |
dgraph-io |
dgraph |
2026-04-15T20:40:47.186Z | 2026-04-16T12:05:10.186Z |
| CVE-2026-22676 |
8.5 (4.0)
7.8 (3.1)
|
Barracuda RMM < 2025.2.2 Privilege Escalation via Inse… |
Barracuda Networks |
RMM |
2026-04-15T20:45:23.918Z | 2026-04-16T12:05:01.880Z |
| CVE-2026-6385 |
6.5 (3.1)
|
Ffmpeg: ffmpeg: denial of service and potential arbitr… |
Red Hat |
Lightspeed Core |
2026-04-15T19:18:39.354Z | 2026-04-15T20:01:15.671Z |
| CVE-2026-6384 |
7.3 (3.1)
|
Gimp: gimp: arbitrary code execution or denial of serv… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-04-15T19:09:10.587Z | 2026-04-28T18:43:53.633Z |
| CVE-2026-6364 |
6.5 (3.1)
|
Out of bounds read in Skia in Google Chrome prior… |
Google |
Chrome |
2026-04-15T19:04:59.385Z | 2026-04-16T13:53:06.236Z |
| CVE-2026-6363 |
8.8 (3.1)
|
Type Confusion in V8 in Google Chrome prior to 14… |
Google |
Chrome |
2026-04-15T19:04:57.982Z | 2026-04-16T03:55:45.999Z |
| CVE-2026-6362 |
6.3 (3.1)
|
Use after free in Codecs in Google Chrome prior t… |
Google |
Chrome |
2026-04-15T19:04:57.143Z | 2026-04-16T13:23:13.559Z |
| CVE-2026-6361 |
7.2 (3.1)
|
Heap buffer overflow in PDFium in Google Chrome o… |
Google |
Chrome |
2026-04-15T19:04:56.740Z | 2026-04-16T10:00:46.711Z |
| CVE-2026-6360 |
8.8 (3.1)
|
Use after free in FileSystem in Google Chrome pri… |
Google |
Chrome |
2026-04-15T19:04:53.135Z | 2026-04-16T03:56:09.052Z |
| CVE-2026-6359 |
8.8 (3.1)
|
Use after free in Video in Google Chrome on Windo… |
Google |
Chrome |
2026-04-15T19:04:48.203Z | 2026-04-16T03:55:55.574Z |
| CVE-2026-6358 |
8.8 (3.1)
|
Use after free in XR in Google Chrome on Android … |
Google |
Chrome |
2026-04-15T19:04:47.677Z | 2026-04-16T03:55:54.349Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-65hr-68mj-9crm |
2.4 (3.1)
1.9 (4.0)
|
A weakness has been identified in code-projects Simple Content Management System 1.0. This affects … | 2026-04-13T18:30:41Z | 2026-04-13T18:30:41Z |
| ghsa-5mp8-rq5m-pj7m |
4.0 (3.1)
|
An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received… | 2026-04-13T18:30:41Z | 2026-04-22T18:31:38Z |
| ghsa-4hgf-5jwc-7v3g |
8.8 (3.1)
8.7 (4.0)
|
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injecti… | 2026-04-13T18:30:41Z | 2026-04-22T15:31:32Z |
| ghsa-4g9c-4vrc-qw29 |
5.4 (3.1)
2.1 (4.0)
|
Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site … | 2026-04-13T18:30:41Z | 2026-04-22T15:31:32Z |
| ghsa-rrjx-h7jp-ggmg |
7.5 (3.1)
|
Nitro PDF Pro for Windows 14.41.1.4 contains a NULL pointer dereference vulnerability in the JavaSc… | 2026-04-13T18:30:40Z | 2026-04-13T21:30:43Z |
| ghsa-qvcf-9h3q-2cwq |
7.2 (3.1)
8.6 (4.0)
|
Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file… | 2026-04-13T18:30:40Z | 2026-04-22T15:31:32Z |
| ghsa-phj3-hcm2-mjhc |
8.4 (3.1)
|
Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementat… | 2026-04-13T18:30:40Z | 2026-04-14T18:30:33Z |
| ghsa-j6p7-6pjc-rwmh |
5.4 (3.1)
|
Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up a… | 2026-04-13T18:30:40Z | 2026-04-14T15:30:33Z |
| ghsa-hf73-7qvc-m78v |
7.5 (3.1)
|
A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Deni… | 2026-04-13T18:30:40Z | 2026-04-13T21:30:43Z |
| ghsa-9w52-f5xp-pq4c |
8.8 (3.1)
8.7 (4.0)
|
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command I… | 2026-04-13T18:30:40Z | 2026-04-22T15:31:32Z |
| ghsa-3gpw-5r2f-ch38 |
6.8 (3.1)
|
Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocit… | 2026-04-13T18:30:40Z | 2026-04-13T18:30:40Z |
| ghsa-vffh-x6r8-xx99 |
5.3 (4.0)
|
Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metri… | 2026-04-13T16:39:16Z | 2026-04-16T21:56:19Z |
| ghsa-3p24-9x7v-7789 |
8.8 (3.1)
|
Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix | 2026-04-13T16:38:25Z | 2026-04-13T16:38:25Z |
| ghsa-r2pg-r6h7-crf3 |
7.1 (4.0)
|
External Secrets Operator has DNS-based secret exfiltration via getHostByName in External Secrets v… | 2026-04-13T16:36:36Z | 2026-04-15T20:58:30Z |
| ghsa-48m6-486p-9j8p |
5.3 (3.1)
|
nimiq-consensus panics via RequestMacroChain micro-block locator | 2026-04-13T16:36:00Z | 2026-04-15T20:56:41Z |
| ghsa-jcxm-m3jx-f287 |
8.1 (3.1)
|
simple-git Affected by Command Execution via Option-Parsing Bypass | 2026-04-13T16:35:37Z | 2026-04-14T16:30:46Z |
| ghsa-fc46-r95f-hq7g |
9.3 (4.0)
|
Decidim has a cross-site scripting (XSS) in user name | 2026-04-13T16:35:13Z | 2026-04-15T20:52:29Z |
| ghsa-x98w-r76w-r6x8 |
2.7 (3.1)
|
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injectio… | 2026-04-13T15:31:43Z | 2026-04-13T21:30:43Z |
| ghsa-rvx7-v6v9-w87p |
2.7 (3.1)
|
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orm… | 2026-04-13T15:31:43Z | 2026-04-13T21:30:42Z |
| ghsa-mc4f-r875-v87w |
8.8 (3.1)
|
Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API | 2026-04-13T15:31:43Z | 2026-04-14T23:17:35Z |
| ghsa-jj28-p98r-mwqj |
7.5 (3.1)
|
A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to ca… | 2026-04-13T15:31:43Z | 2026-04-13T21:30:42Z |
| ghsa-hgv6-fj79-5p66 |
2.7 (3.1)
|
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injectio… | 2026-04-13T15:31:43Z | 2026-04-13T21:30:43Z |
| ghsa-h2c3-7q37-gjwp |
9.8 (3.1)
|
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the … | 2026-04-13T15:31:43Z | 2026-04-14T18:30:33Z |
| ghsa-8rvg-748c-85h2 |
8.0 (3.1)
|
Totara LMS v19.1.5 and before is vulnerable to HTLM Injection. An attacker can inject malicious HTL… | 2026-04-13T15:31:43Z | 2026-04-14T18:30:33Z |
| ghsa-7g9v-cc93-2w5g |
2.7 (3.1)
|
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orm… | 2026-04-13T15:31:43Z | 2026-04-13T21:30:43Z |
| ghsa-66h2-jv8h-987w |
7.3 (3.1)
5.5 (4.0)
|
A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected… | 2026-04-13T15:31:43Z | 2026-04-13T15:31:43Z |
| ghsa-2pmg-wxw5-4334 |
2.7 (3.1)
|
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection… | 2026-04-13T15:31:43Z | 2026-04-13T21:30:43Z |
| ghsa-2969-3f7h-gmhq |
9.8 (3.1)
|
Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. The login page code can be… | 2026-04-13T15:31:43Z | 2026-04-14T18:30:33Z |
| ghsa-225p-6j6c-7793 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by t… | 2026-04-13T15:31:43Z | 2026-04-13T15:31:43Z |
| ghsa-w9rr-8fx7-936w |
|
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: f… | 2026-04-13T15:31:42Z | 2026-04-18T09:30:20Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-240 |
|
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to an… | mistral | 2020-06-15T15:15:00Z | 2021-08-27T03:22:07.520532Z |
| pysec-2020-47 |
|
In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy No… | indy-node | 2020-06-11T00:15:00Z | 2020-06-22T16:36:00Z |
| pysec-2020-228 |
|
An insecure-credentials flaw was found in all openstack-cinder versions before openstack-… | cinder | 2020-06-10T17:15:00Z | 2021-08-27T03:21:56.949334Z |
| pysec-2020-32 |
|
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameter… | django | 2020-06-03T14:15:00Z | 2021-01-20T15:15:00Z |
| pysec-2020-31 |
|
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where … | django | 2020-06-03T14:15:00Z | 2021-01-20T15:15:00Z |
| pysec-2020-42 |
|
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the… | fastecdsa | 2020-06-02T21:15:00Z | 2020-06-03T13:47:00Z |
| pysec-2020-99 |
|
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This co… | rsa | 2020-06-01T19:15:00Z | 2020-09-02T16:15:00Z |
| pysec-2020-341 |
|
An exploitable vulnerability exists in the configuration-loading functionality of the jw.… | jw.util | 2020-05-22T17:15:00Z | 2022-01-05T02:16:25.743194Z |
| pysec-2020-239 |
|
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues a… | meinheld | 2020-05-22T16:15:00Z | 2021-08-27T03:22:06.793758Z |
| pysec-2020-242 |
|
netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues a… | netius | 2020-05-21T15:15:00Z | 2021-11-23T06:07:22.013113Z |
| pysec-2020-46 |
|
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `htt… | httplib2 | 2020-05-20T16:15:00Z | 2020-08-19T18:56:00Z |
| pysec-2020-73 |
|
** DISPUTED ** pandas through 1.0.3 can unserialize and execute commands from an untruste… | pandas | 2020-05-15T19:15:00Z | 2020-05-19T19:12:00Z |
| pysec-2020-107 |
|
** DISPUTED ** scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute comm… | scikit-learn | 2020-05-15T19:15:00Z | 2020-05-19T19:05:00Z |
| pysec-2020-66 |
|
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-tra… | misp-maltego | 2020-05-15T18:15:00Z | 2020-05-19T13:38:00Z |
| pysec-2020-208 |
|
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure tempo… | ansible | 2020-05-15T14:15:00Z | 2021-07-02T02:41:34.927743Z |
| pysec-2020-13 |
|
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7… | ansible | 2020-05-12T18:15:00Z | 2020-05-26T17:38:00Z |
| pysec-2020-1 |
|
A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 … | ansible | 2020-05-11T14:15:00Z | 2020-06-13T04:15:00Z |
| pysec-2020-97 |
|
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows … | qutebrowser | 2020-05-07T21:15:00Z | 2020-09-21T02:15:00Z |
| pysec-2020-56 |
|
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API does… | keystone | 2020-05-07T00:15:00Z | 2020-09-02T16:15:00Z |
| pysec-2020-55 |
|
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticate… | keystone | 2020-05-07T00:15:00Z | 2020-09-02T16:15:00Z |
| pysec-2020-54 |
|
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of role… | keystone | 2020-05-07T00:15:00Z | 2020-09-02T16:15:00Z |
| pysec-2020-53 |
|
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authent… | keystone | 2020-05-07T00:15:00Z | 2020-09-02T16:15:00Z |
| pysec-2020-304 |
|
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possib… | tensorflow-gpu | 2020-05-04T15:15:00Z | 2021-12-09T06:35:11.657729Z |
| pysec-2020-269 |
|
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possib… | tensorflow-cpu | 2020-05-04T15:15:00Z | 2021-08-27T03:22:22.195752Z |
| pysec-2020-253 |
|
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possib… | tensorflow | 2020-05-04T15:15:00Z | 2021-08-27T03:22:22.195752Z |
| pysec-2020-153 |
|
In Wagtail before versions 2.7.2 and 2.8.2, a potential timing attack exists on pages or … | wagtail | 2020-04-30T23:15:00Z | 2020-05-08T15:57:00Z |
| pysec-2020-2 |
|
An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, … | ansible | 2020-04-30T17:15:00Z | 2020-05-21T14:49:00Z |
| pysec-2020-103 |
|
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The sal… | salt | 2020-04-30T17:15:00Z | 2020-08-20T01:17:00Z |
| pysec-2020-102 |
|
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The sal… | salt | 2020-04-30T17:15:00Z | 2020-08-20T01:17:00Z |
| pysec-2020-144 |
|
In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have b… | tortoise-orm | 2020-04-20T22:15:00Z | 2020-04-28T17:16:00Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-891 | Malicious code in wropz-6module (npm) | 2026-02-13T13:57:38Z | 2026-02-23T04:21:36Z |
| mal-2026-892 | Malicious code in wropz-module (npm) | 2026-02-13T13:57:37Z | 2026-02-23T04:21:36Z |
| mal-2026-893 | Malicious code in xsstesting (npm) | 2026-02-13T13:50:54Z | 2026-02-23T04:21:37Z |
| mal-2026-885 | Malicious code in metadata-stripper (npm) | 2026-02-13T13:50:54Z | 2026-02-23T04:21:34Z |
| mal-2026-882 | Malicious code in despicable-me (npm) | 2026-02-13T13:50:54Z | 2026-02-23T04:21:32Z |
| mal-2026-880 | Malicious code in console-style-pro0o0o0o (npm) | 2026-02-13T13:50:54Z | 2026-02-23T04:21:32Z |
| mal-2026-878 | Malicious code in magichat (PyPI) | 2026-02-13T10:56:11Z | 2026-02-26T09:50:46Z |
| mal-2026-875 | Malicious code in displaydoc (PyPI) | 2026-02-13T10:45:53Z | 2026-02-13T11:45:52Z |
| mal-2026-876 | Malicious code in acpi-tables (PyPI) | 2026-02-13T10:35:04Z | 2026-02-13T10:35:04Z |
| mal-2026-877 | Malicious code in arrayvec (PyPI) | 2026-02-13T10:27:10Z | 2026-02-13T10:27:10Z |
| mal-2026-874 | Malicious code in google-search-result (PyPI) | 2026-02-12T23:27:54Z | 2026-02-13T00:38:45Z |
| mal-2026-873 | Malicious code in @depro0x/despicable-me (npm) | 2026-02-12T20:40:54Z | 2026-02-23T04:21:31Z |
| mal-2026-872 | Malicious code in stylelint-recommended (npm) | 2026-02-12T18:18:29Z | 2026-03-19T12:23:23Z |
| mal-2026-871 | Malicious code in envoy1 (npm) | 2026-02-12T16:50:57Z | 2026-02-23T04:21:32Z |
| mal-2026-941 | Malicious code in ether-lint (npm) | 2026-02-12T16:02:40Z | 2026-03-02T03:15:27Z |
| mal-2026-870 | Malicious code in b10connoisseur (PyPI) | 2026-02-12T12:10:26Z | 2026-04-01T12:28:04Z |
| mal-2026-869 | Malicious code in ritch (PyPI) | 2026-02-12T08:10:35Z | 2026-02-19T22:47:48Z |
| mal-2026-866 | Malicious code in oraceldb (PyPI) | 2026-02-12T08:03:03Z | 2026-02-19T22:47:48Z |
| mal-2026-863 | Malicious code in krbutils (PyPI) | 2026-02-12T08:00:39Z | 2026-02-19T22:47:48Z |
| mal-2026-868 | Malicious code in pydantics (PyPI) | 2026-02-12T07:55:49Z | 2026-02-19T22:47:48Z |
| mal-2026-867 | Malicious code in pandaai (PyPI) | 2026-02-12T07:51:33Z | 2026-02-19T22:47:48Z |
| mal-2026-865 | Malicious code in opentelematry-api (PyPI) | 2026-02-12T07:30:47Z | 2026-02-19T22:47:48Z |
| mal-2026-864 | Malicious code in marshmellow (PyPI) | 2026-02-12T07:10:57Z | 2026-02-19T22:47:48Z |
| mal-2026-946 | Malicious code in lala6992 (PyPI) | 2026-02-12T05:30:51Z | 2026-02-19T22:47:48Z |
| mal-2026-862 | Malicious code in get-incorrect-name-bob (PyPI) | 2026-02-12T00:01:39Z | 2026-02-12T00:01:39Z |
| mal-2026-861 | Malicious code in express-gueues (npm) | 2026-02-11T16:43:01Z | 2026-03-19T12:23:20Z |
| mal-2026-860 | Malicious code in osopackagepy (PyPI) | 2026-02-11T15:50:58Z | 2026-02-11T16:53:59Z |
| mal-2026-859 | Malicious code in systemtest-network (npm) | 2026-02-11T15:13:28Z | 2026-02-23T04:21:36Z |
| mal-2026-858 | Malicious code in systemtest-information (npm) | 2026-02-11T15:13:28Z | 2026-02-23T04:21:36Z |
| mal-2026-857 | Malicious code in osopackage (npm) | 2026-02-11T15:13:28Z | 2026-02-23T04:21:35Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0996 | IBM Storage Scale: Mehrere Schwachstellen | 2025-05-11T22:00:00.000+00:00 | 2025-05-11T22:00:00.000+00:00 |
| wid-sec-w-2025-0995 | Grub: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-11T22:00:00.000+00:00 | 2025-10-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0994 | Kong Insomnia: Schwachstelle ermöglicht Codeausführung | 2025-05-11T22:00:00.000+00:00 | 2025-05-12T22:00:00.000+00:00 |
| wid-sec-w-2025-0991 | Linux Kernel: Mehrere Schwachstellen | 2025-05-08T22:00:00.000+00:00 | 2026-03-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0990 | Checkmk: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-08T22:00:00.000+00:00 | 2025-05-08T22:00:00.000+00:00 |
| wid-sec-w-2025-0989 | Erlang/OTP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-08T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0988 | IBM TXSeries Multiplatforms: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-05-08T22:00:00.000+00:00 | 2025-05-08T22:00:00.000+00:00 |
| wid-sec-w-2025-0987 | Eclipse Jetty: Mehrere Schwachstellen | 2025-05-08T22:00:00.000+00:00 | 2025-12-07T23:00:00.000+00:00 |
| wid-sec-w-2025-0986 | PostgreSQL: Schwachstelle ermöglicht Denial of Service | 2025-05-08T22:00:00.000+00:00 | 2025-11-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0985 | F5 BIG-IP: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-05-12T22:00:00.000+00:00 |
| wid-sec-w-2025-0984 | SonicWall SMA: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0983 | Cisco IOS XE SD-WAN Software: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0982 | GitLab: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0981 | SysAid Technologies Ltd SysAid: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-05-07T22:00:00.000+00:00 | 2025-07-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0980 | Cisco IOS, IOS XE und IOS XR (TWAMP): Schwachstelle ermöglicht Denial of Service | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0979 | Cisco IOS XE Software: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0978 | Drupal Erweiterungen: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-05-19T22:00:00.000+00:00 |
| wid-sec-w-2025-0977 | Cisco IOS XE Software Web-Based Management Interface: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0976 | Cisco IOS und Cisco IOS XE: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0975 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-05-07T22:00:00.000+00:00 | 2026-03-30T22:00:00.000+00:00 |
| wid-sec-w-2025-0974 | Cisco Industrial Ethernet Switches IOS/IOx Management Software: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0973 | Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers: Schwachstelle ermöglicht Denial of Service | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0972 | Cisco IOS-Software für Cisco Catalyst Switches: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0971 | Cisco IOS XE Wireless Controller: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0970 | Cisco IOS XE Software for WLC Wireless IPv6 Clients: Schwachstelle ermöglicht Denial of Service | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0969 | Cisco IOS, IOS XE, NX-OS and WLC AireOS Software (SISF): Schwachstelle ermöglicht Denial of Service | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0968 | Cisco ASA, FTD, IOS und IOS XE Software (IKEv2): Schwachstelle ermöglicht Denial of Service | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0967 | Mitel SIP Phone: Mehrere Schwachstellen | 2025-05-07T22:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0966 | Dropbear SSH: Schwachstelle ermöglicht Codeausführung | 2025-05-07T22:00:00.000+00:00 | 2025-05-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0965 | Cisco Catalyst Center: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-05-07T22:00:00.000+00:00 | 2025-05-07T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-021-05 | WAGO M&M Software fdtCONTAINER (Update C) | 2021-01-21T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsa-21-021-04 | Mitsubishi Electric MELFA (Update A) | 2021-01-21T00:00:00.000000Z | 2021-05-18T00:00:00.000000Z |
| icsa-21-021-03 | Honeywell OPC UA Tunneller | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsa-21-021-02 | Delta Electronics TPEditor | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsa-21-021-01 | Delta Electronics ISPSoft | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsma-21-019-01 | Philips Interventional Workstations | 2021-01-19T00:00:00.000000Z | 2021-01-19T00:00:00.000000Z |
| icsa-21-019-02 | Reolink P2P Cameras | 2021-01-19T00:00:00.000000Z | 2021-01-19T00:00:00.000000Z |
| icsa-21-019-01 | dnsmasq by Simon Kelley (Update A) | 2021-01-19T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsma-21-012-01 | SOOIL Dana Diabecare RS Products | 2021-01-12T00:00:00.000000Z | 2021-01-12T00:00:00.000000Z |
| icsa-21-012-05 | Siemens SCALANCE X Products (Update B) | 2021-01-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-21-012-04 | Siemens Solid Edge | 2021-01-12T00:00:00.000000Z | 2021-01-15T00:00:00.000000Z |
| icsa-21-012-03 | Siemens JT2Go and Teamcenter Visualization (Update B) | 2021-01-12T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| icsa-21-012-02 | Siemens SCALANCE X Switches (Update B) | 2021-01-12T00:00:00.000000Z | 2022-12-13T00:00:00.000000Z |
| icsa-21-012-01 | Schneider Electric EcoStruxure Power Build-Rapsody (Update A) | 2021-01-12T00:00:00.000000Z | 2021-02-18T00:00:00.000000Z |
| icsma-21-007-01 | Innokas Yhtymä Oy Vital Signs Monitor | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-04 | Delta Electronics CNCSoft-B | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-03 | Eaton EASYsoft (Update A) | 2021-01-07T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| icsa-21-007-02 | Omron CX-One | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-01 | Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-005-06 | Delta Electronics CNCSoft ScreenEditor | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-05 | Delta Electronics DOPSoft | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-04 | Red Lion Crimson 3.1 | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-03 | GE Reason RT43X Clocks | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-02 | Panasonic FPWIN Pro | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-01 | Schneider Electric Web Server on Modicon M340 | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-353-01 | Treck TCP/IP Stack (Update A) | 2020-12-18T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| icsa-20-352-03 | PTC Kepware LinkMaster | 2020-12-17T00:00:00.000000Z | 2020-12-17T00:00:00.000000Z |
| icsa-20-352-02 | PTC Kepware KEPServerEX (Update A) | 2020-12-17T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-352-01 | Emerson Rosemount X-STREAM | 2020-12-17T00:00:00.000000Z | 2020-12-17T00:00:00.000000Z |
| icsa-20-345-02 | Host Engineering H2-ECOM100 Module | 2020-12-10T00:00:00.000000Z | 2020-12-10T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190123-iot-fnd-dos | Cisco IoT Field Network Director Resource Exhaustion Denial of Service Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-frpwr-mc-xss | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-cpi-xss | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-cmx-info-discl | Cisco Connected Mobile Experiences Information Disclosure Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-firepowertds-bypass | Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability | 2019-01-23T14:00:00+00:00 | 2019-01-23T14:00:00+00:00 |
| cisco-sa-20190109-webex-bs-xss | Cisco Webex Business Suite Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-tms-xss | Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-tcp | Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-pnc-stored-xss | Cisco Prime Network Control System Stored Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-phone-script-injection | Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-jabr-mac-permissions | Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-ise-passwd | Cisco Identity Services Engine Password Recovery Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-03-22T19:43:00+00:00 |
| cisco-sa-20190109-ise-multi-xss | Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities | 2019-01-09T16:00:00+00:00 | 2019-02-06T14:10:00+00:00 |
| cisco-sa-20190109-ios-ssh-vrf | Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-fpwr-mc-dos | Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-esa-url-dos | Cisco Email Security Appliance URL Filtering Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-03-13T14:25:00+00:00 |
| cisco-sa-20190109-esa-dos | Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-cucm-creds-disclosr | Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-cps-redis | Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent Software Redis Server Unauthenticated Access Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-cps-graphite-access | Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-cpi-xss | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-asr900-dos | Cisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20181219-asa-privesc | Cisco Adaptive Security Appliance Software Privilege Escalation Vulnerability | 2018-12-19T16:00:00+00:00 | 2019-05-01T15:30:16+00:00 |
| cisco-sa-20181204-ems-sql-passwrd | Cisco Energy Management Suite Default PostgreSQL Password Vulnerability | 2018-12-04T16:00:00+00:00 | 2018-12-04T16:00:00+00:00 |
| cisco-sa-20181128-plm-sql-inject | Cisco Prime License Manager SQL Injection Vulnerability | 2018-11-28T16:00:00+00:00 | 2018-12-20T15:33:00+00:00 |
| cisco-sa-20181107-vsms-dos | Cisco Video Surveillance Media Server Denial of Service Vulnerability | 2018-11-07T16:00:00+00:00 | 2018-11-07T16:00:00+00:00 |
| cisco-sa-20181107-smc-auth-bypass | Cisco Stealthwatch Management Console Authentication Bypass Vulnerability | 2018-11-07T16:00:00+00:00 | 2018-11-08T18:28:00+00:00 |
| cisco-sa-20181107-sma-xss | Cisco Content Security Management Appliance Cross-Site Scripting Vulnerability | 2018-11-07T16:00:00+00:00 | 2019-07-15T19:24:47+00:00 |
| cisco-sa-20181107-sbsw-privacc | Cisco Small Business Switches Privileged Access Vulnerability | 2018-11-07T16:00:00+00:00 | 2019-01-16T22:24:00+00:00 |
| cisco-sa-20181107-res-info-disc | Cisco Registered Envelope Service Information Disclosure Vulnerability | 2018-11-07T16:00:00+00:00 | 2018-11-07T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-11494 | GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds | 2025-10-02T00:00:00.000Z | 2025-12-03T01:39:19.000Z |
| msrc_cve-2025-11414 | GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds | 2025-10-02T00:00:00.000Z | 2025-10-11T01:02:35.000Z |
| msrc_cve-2025-11413 | GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds | 2025-10-02T00:00:00.000Z | 2025-10-11T01:02:24.000Z |
| msrc_cve-2025-11412 | GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds | 2025-10-02T00:00:00.000Z | 2025-10-11T01:02:46.000Z |
| msrc_cve-2025-11411 | Possible domain hijacking via promiscuous records in the authority section | 2025-10-02T00:00:00.000Z | 2025-12-07T01:39:13.000Z |
| msrc_cve-2025-11234 | Qemu-kvm: vnc websocket handshake use-after-free | 2025-10-02T00:00:00.000Z | 2025-10-07T01:01:16.000Z |
| msrc_cve-2025-10729 | Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG | 2025-10-02T00:00:00.000Z | 2025-10-07T01:01:34.000Z |
| msrc_cve-2025-10728 | Uncontrolled recursion in Qt SVG module | 2025-10-02T00:00:00.000Z | 2025-10-07T01:01:25.000Z |
| msrc_cve-2024-31573 | XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled. | 2025-10-02T00:00:00.000Z | 2025-10-19T01:01:21.000Z |
| msrc_cve-2023-53642 | x86: fix clear_user_rep_good() exception handling annotation | 2025-10-02T00:00:00.000Z | 2026-02-18T14:46:26.000Z |
| msrc_cve-2023-53543 | vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check | 2025-10-02T00:00:00.000Z | 2026-03-31T15:15:22.000Z |
| msrc_cve-2023-53469 | af_unix: Fix null-ptr-deref in unix_stream_sendpage(). | 2025-10-02T00:00:00.000Z | 2025-10-02T01:07:32.000Z |
| msrc_cve-2023-53466 | wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit | 2025-10-02T00:00:00.000Z | 2026-02-18T15:01:35.000Z |
| msrc_cve-2023-53460 | wifi: rtw88: fix memory leak in rtw_usb_probe() | 2025-10-02T00:00:00.000Z | 2026-02-18T14:52:29.000Z |
| msrc_cve-2022-50502 | mm: /proc/pid/smaps_rollup: fix no vma's null-deref | 2025-10-02T00:00:00.000Z | 2025-10-06T01:38:02.000Z |
| msrc_cve-2022-50467 | scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID | 2025-10-02T00:00:00.000Z | 2026-03-31T15:11:04.000Z |
| msrc_cve-2022-50464 | mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() | 2025-10-02T00:00:00.000Z | 2026-02-18T14:51:48.000Z |
| msrc_cve-2022-50461 | net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65_cpsw_nuss_ndo_slave_open() | 2025-10-02T00:00:00.000Z | 2026-02-18T14:51:22.000Z |
| msrc_cve-2025-59251 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-25T00:00:00.000Z |
| msrc_cve-2025-59220 | Windows Bluetooth Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-10-10T00:00:00.000Z |
| msrc_cve-2025-59216 | Windows Graphics Component Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-18T00:00:00.000Z |
| msrc_cve-2025-59215 | Windows Graphics Component Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-18T00:00:00.000Z |
| msrc_cve-2025-55322 | OmniParser Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-24T00:00:00.000Z |
| msrc_cve-2025-55319 | Agentic AI and Visual Studio Code Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2026-02-20T08:00:00.000Z |
| msrc_cve-2025-55317 | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-55316 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-55245 | Xbox Gaming Services Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-55244 | Azure Bot Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-04T00:00:00.000Z |
| msrc_cve-2025-55243 | Microsoft OfficePlus Spoofing Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-55242 | Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-04T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14484-1 | govulncheck-vulndb-0.0.20241112T145010-1.1 on GA media | 2024-11-12T00:00:00Z | 2024-11-12T00:00:00Z |
| opensuse-su-2024:14483-1 | MozillaFirefox-132.0.1-1.1 on GA media | 2024-11-11T00:00:00Z | 2024-11-11T00:00:00Z |
| opensuse-su-2024:0364-1 | Security update for virtualbox | 2024-11-10T09:55:36Z | 2024-11-10T09:55:36Z |
| opensuse-su-2024:14482-1 | govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media | 2024-11-09T00:00:00Z | 2024-11-09T00:00:00Z |
| opensuse-su-2024:14481-1 | coredns-1.11.3+git129.387f34d-1.1 on GA media | 2024-11-09T00:00:00Z | 2024-11-09T00:00:00Z |
| opensuse-su-2024:0358-1 | Security update for qbittorrent | 2024-11-08T15:01:42Z | 2024-11-08T15:01:42Z |
| opensuse-su-2024:0357-1 | Security update for chromium | 2024-11-08T08:42:46Z | 2024-11-08T08:42:46Z |
| opensuse-su-2024:0356-1 | Security update for chromium | 2024-11-08T08:41:21Z | 2024-11-08T08:41:21Z |
| opensuse-su-2024:14480-1 | xstream-1.4.21-1.1 on GA media | 2024-11-08T00:00:00Z | 2024-11-08T00:00:00Z |
| opensuse-su-2024:14479-1 | ruby3.3-rubygem-rails-7.0-7.0.8.6-1.1 on GA media | 2024-11-08T00:00:00Z | 2024-11-08T00:00:00Z |
| opensuse-su-2024:14478-1 | httpcomponents-client-4.5.14-1.1 on GA media | 2024-11-08T00:00:00Z | 2024-11-08T00:00:00Z |
| opensuse-su-2024:14477-1 | expat-2.6.4-1.1 on GA media | 2024-11-08T00:00:00Z | 2024-11-08T00:00:00Z |
| opensuse-su-2024:14476-1 | curl-8.11.0-1.1 on GA media | 2024-11-08T00:00:00Z | 2024-11-08T00:00:00Z |
| opensuse-su-2024:14475-1 | Mesa-24.2.6-392.1 on GA media | 2024-11-08T00:00:00Z | 2024-11-08T00:00:00Z |
| opensuse-su-2024:14474-1 | ruby3.3-rubygem-puma-6.4.3-1.1 on GA media | 2024-11-07T00:00:00Z | 2024-11-07T00:00:00Z |
| opensuse-su-2024:14473-1 | ruby3.3-rubygem-actiontext-7.0-7.0.8.6-1.1 on GA media | 2024-11-07T00:00:00Z | 2024-11-07T00:00:00Z |
| opensuse-su-2024:14472-1 | ruby3.3-rubygem-actionpack-7.0-7.0.8.6-1.1 on GA media | 2024-11-07T00:00:00Z | 2024-11-07T00:00:00Z |
| opensuse-su-2024:14471-1 | ruby3.3-rubygem-actionmailer-7.0-7.0.8.6-1.1 on GA media | 2024-11-07T00:00:00Z | 2024-11-07T00:00:00Z |
| opensuse-su-2024:14470-1 | govulncheck-vulndb-0.0.20241106T172143-1.1 on GA media | 2024-11-07T00:00:00Z | 2024-11-07T00:00:00Z |
| opensuse-su-2024:14469-1 | chromedriver-130.0.6723.116-1.1 on GA media | 2024-11-07T00:00:00Z | 2024-11-07T00:00:00Z |
| opensuse-su-2024:14468-1 | IPAddress-5.5.1-1.1 on GA media | 2024-11-07T00:00:00Z | 2024-11-07T00:00:00Z |
| opensuse-su-2024:0353-1 | Security update for kmail-account-wizard | 2024-11-06T19:01:29Z | 2024-11-06T19:01:29Z |
| opensuse-su-2024:0352-1 | Security update for python-jupyterlab | 2024-11-06T19:01:24Z | 2024-11-06T19:01:24Z |
| opensuse-su-2024:0351-1 | Security update for python-mysql-connector-python | 2024-11-06T17:13:19Z | 2024-11-06T17:13:19Z |
| opensuse-su-2024:14467-1 | xwayland-24.1.4-1.1 on GA media | 2024-11-06T00:00:00Z | 2024-11-06T00:00:00Z |
| opensuse-su-2024:14466-1 | xorg-x11-server-21.1.14-1.1 on GA media | 2024-11-06T00:00:00Z | 2024-11-06T00:00:00Z |
| opensuse-su-2024:14465-1 | java-1_8_0-openjdk-1.8.0.432-1.1 on GA media | 2024-11-06T00:00:00Z | 2024-11-06T00:00:00Z |
| opensuse-su-2024:14464-1 | grub2-2.12-28.1 on GA media | 2024-11-06T00:00:00Z | 2024-11-06T00:00:00Z |
| opensuse-su-2024:0350-1 | Security update for govulncheck-vulndb | 2024-11-05T14:52:20Z | 2024-11-05T14:52:20Z |
| opensuse-su-2024:0349-1 | Security update for htmldoc | 2024-11-05T13:41:07Z | 2024-11-05T13:41:07Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:21232 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-11-13T10:51:18+00:00 | 2026-04-14T02:01:15+00:00 |
| rhsa-2025:19894 | Red Hat Security Advisory: OpenShift Container Platform 4.12.82 bug fix and security update | 2025-11-13T09:46:03+00:00 | 2026-04-14T09:56:09+00:00 |
| rhsa-2025:21220 | Red Hat Security Advisory: podman security update | 2025-11-13T09:10:41+00:00 | 2026-04-14T02:01:15+00:00 |
| rhsa-2025:19895 | Red Hat Security Advisory: OpenShift Container Platform 4.12.82 bug fix and security update | 2025-11-13T09:09:20+00:00 | 2026-03-18T02:50:56+00:00 |
| rhsa-2025:21174 | Red Hat Security Advisory: openssl security update | 2025-11-12T22:37:55+00:00 | 2026-04-13T19:59:49+00:00 |
| rhsa-2025:21203 | Red Hat Security Advisory: Red Hat Ceph Storage | 2025-11-12T21:27:55+00:00 | 2026-03-21T02:03:38+00:00 |
| rhsa-2025:21140 | Red Hat Security Advisory: idm:DL1 security update | 2025-11-12T18:01:16+00:00 | 2026-03-18T03:09:36+00:00 |
| rhsa-2025:21138 | Red Hat Security Advisory: python-kdcproxy security update | 2025-11-12T16:32:24+00:00 | 2026-03-18T03:09:36+00:00 |
| rhsa-2025:21146 | Red Hat Security Advisory: Cluster Observability Operator 1.3.0 | 2025-11-12T16:21:08+00:00 | 2026-04-09T02:05:26+00:00 |
| rhsa-2025:21139 | Red Hat Security Advisory: python-kdcproxy security update | 2025-11-12T16:20:43+00:00 | 2026-03-18T03:09:35+00:00 |
| rhsa-2025:21142 | Red Hat Security Advisory: python-kdcproxy security update | 2025-11-12T15:26:34+00:00 | 2026-03-18T03:09:35+00:00 |
| rhsa-2025:21141 | Red Hat Security Advisory: python-kdcproxy security update | 2025-11-12T15:26:24+00:00 | 2026-03-18T03:09:35+00:00 |
| rhsa-2025:21136 | Red Hat Security Advisory: kernel-rt security update | 2025-11-12T15:08:24+00:00 | 2026-03-18T03:07:17+00:00 |
| rhsa-2025:21132 | Red Hat Security Advisory: Release of containers for RHOSO 18.0.14 | 2025-11-12T14:09:23+00:00 | 2026-04-09T14:28:00+00:00 |
| rhsa-2025:21128 | Red Hat Security Advisory: kernel-rt security update | 2025-11-12T13:52:24+00:00 | 2026-03-18T03:07:17+00:00 |
| rhsa-2025:21121 | Red Hat Security Advisory: firefox security update | 2025-11-12T12:49:38+00:00 | 2026-03-18T03:10:55+00:00 |
| rhsa-2025:21118 | Red Hat Security Advisory: kernel security update | 2025-11-12T12:41:03+00:00 | 2026-03-19T17:33:57+00:00 |
| rhsa-2025:21120 | Red Hat Security Advisory: firefox security update | 2025-11-12T12:31:49+00:00 | 2026-03-18T03:10:53+00:00 |
| rhsa-2025:21112 | Red Hat Security Advisory: kernel security update | 2025-11-12T11:50:59+00:00 | 2026-03-19T17:33:54+00:00 |
| rhsa-2025:21110 | Red Hat Security Advisory: bind security update | 2025-11-12T10:49:03+00:00 | 2026-04-13T20:13:29+00:00 |
| rhsa-2025:21111 | Red Hat Security Advisory: bind9.18 security update | 2025-11-12T10:44:58+00:00 | 2026-04-13T20:13:29+00:00 |
| rhsa-2025:21117 | Red Hat Security Advisory: RHOAI 3.0 - Red Hat OpenShift AI | 2025-11-12T10:03:26+00:00 | 2025-11-21T19:38:58+00:00 |
| rhsa-2025:21091 | Red Hat Security Advisory: kernel security update | 2025-11-12T08:15:53+00:00 | 2026-03-18T03:07:16+00:00 |
| rhsa-2025:21090 | Red Hat Security Advisory: squid:4 security update | 2025-11-12T08:03:19+00:00 | 2026-03-18T03:08:40+00:00 |
| rhsa-2025:21084 | Red Hat Security Advisory: kernel security update | 2025-11-12T05:26:07+00:00 | 2026-03-18T03:09:03+00:00 |
| rhsa-2025:21083 | Red Hat Security Advisory: kernel security update | 2025-11-12T05:21:13+00:00 | 2026-03-18T03:08:51+00:00 |
| rhsa-2025:21082 | Red Hat Security Advisory: kernel-rt security update | 2025-11-12T04:28:37+00:00 | 2026-03-18T03:09:07+00:00 |
| rhsa-2025:21067 | Red Hat Security Advisory: sssd security update | 2025-11-12T03:39:07+00:00 | 2026-03-19T17:31:11+00:00 |
| rhsa-2025:21066 | Red Hat Security Advisory: squid security update | 2025-11-12T02:47:02+00:00 | 2026-03-18T03:08:36+00:00 |
| rhsa-2025:21063 | Red Hat Security Advisory: kernel security update | 2025-11-12T02:44:58+00:00 | 2026-03-18T03:09:04+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4115-1 | Security update for libxml2 | 2025-11-17T07:25:57Z | 2025-11-17T07:25:57Z |
| suse-su-2025:4112-1 | Security update for openssh | 2025-11-15T22:38:42Z | 2025-11-15T22:38:42Z |
| suse-su-2025:4111-1 | Security update for the Linux Kernel | 2025-11-15T18:38:56Z | 2025-11-15T18:38:56Z |
| suse-su-2025:4110-1 | Security update for bind | 2025-11-14T15:56:20Z | 2025-11-14T15:56:20Z |
| suse-su-2025:4109-1 | Security update for bind | 2025-11-14T15:56:05Z | 2025-11-14T15:56:05Z |
| suse-su-2025:4108-1 | Security update for bind | 2025-11-14T15:55:13Z | 2025-11-14T15:55:13Z |
| suse-su-2025:4107-1 | Security update for bind | 2025-11-14T15:54:30Z | 2025-11-14T15:54:30Z |
| suse-su-2025:21057-1 | Security update for containerd | 2025-11-14T10:08:48Z | 2025-11-14T10:08:48Z |
| suse-su-2025:4104-1 | Security update for libxml2 | 2025-11-14T10:04:07Z | 2025-11-14T10:04:07Z |
| suse-su-2025:4103-1 | Security update for tomcat10 | 2025-11-14T09:56:37Z | 2025-11-14T09:56:37Z |
| suse-su-2025:21044-1 | Security update for openssh | 2025-11-14T09:46:19Z | 2025-11-14T09:46:19Z |
| suse-su-2025:4100-1 | Security update for python-Django | 2025-11-14T09:03:32Z | 2025-11-14T09:03:32Z |
| suse-su-2025:21043-1 | Security update for helm | 2025-11-14T08:40:12Z | 2025-11-14T08:40:12Z |
| suse-su-2025:21042-1 | Security update for containerd | 2025-11-14T08:36:43Z | 2025-11-14T08:36:43Z |
| suse-su-2025:4099-1 | Security update for squid | 2025-11-14T08:23:10Z | 2025-11-14T08:23:10Z |
| suse-su-2025:4098-1 | Security update for openssh8.4 | 2025-11-14T08:22:50Z | 2025-11-14T08:22:50Z |
| suse-su-2025:4097-1 | Security update for openssh | 2025-11-14T08:22:38Z | 2025-11-14T08:22:38Z |
| suse-su-2025:4096-1 | Security update for binutils | 2025-11-14T08:07:40Z | 2025-11-14T08:07:40Z |
| suse-su-2025:4094-1 | Security update for lasso | 2025-11-13T23:34:47Z | 2025-11-13T23:34:47Z |
| suse-su-2025:4091-1 | Security update for cargo-packaging, rust-bindgen | 2025-11-13T16:30:39Z | 2025-11-13T16:30:39Z |
| suse-su-2025:21040-1 | Security update for the Linux Kernel | 2025-11-13T15:32:12Z | 2025-11-13T15:32:12Z |
| suse-su-2025:21056-1 | Security update for the Linux Kernel | 2025-11-13T14:22:56Z | 2025-11-13T14:22:56Z |
| suse-su-2025:4090-1 | Security update for lasso | 2025-11-13T13:02:47Z | 2025-11-13T13:02:47Z |
| suse-su-2025:4087-1 | Security update for netty, netty-tcnative | 2025-11-12T19:35:11Z | 2025-11-12T19:35:11Z |
| suse-su-2025:4086-1 | Security update for tomcat11 | 2025-11-12T15:02:26Z | 2025-11-12T15:02:26Z |
| suse-su-2025:4081-1 | Security update for podman | 2025-11-12T12:49:35Z | 2025-11-12T12:49:35Z |
| suse-su-2025:4080-1 | Security update for podman | 2025-11-12T12:49:06Z | 2025-11-12T12:49:06Z |
| suse-su-2025:4079-1 | Security update for podman | 2025-11-12T12:48:51Z | 2025-11-12T12:48:51Z |
| suse-su-2025:4078-1 | Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5) | 2025-11-12T11:09:52Z | 2025-11-12T11:09:52Z |
| suse-su-2025:4077-1 | Security update for runc | 2025-11-12T10:36:08Z | 2025-11-12T10:36:08Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2023:6587 | Low: opensc security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:45Z |
| alsa-2023:6578 | Moderate: libqb security update | 2023-11-07T00:00:00Z | 2023-11-14T12:06:20Z |
| alsa-2023:6575 | Moderate: libtiff security update | 2023-11-07T00:00:00Z | 2023-11-14T12:06:49Z |
| alsa-2023:6570 | Moderate: tomcat security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:13:43Z |
| alsa-2023:6569 | Moderate: sysstat security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:16Z |
| alsa-2023:6566 | Moderate: libmicrohttpd security update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:02Z |
| alsa-2023:6551 | Moderate: yajl security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:42Z |
| alsa-2023:6549 | Moderate: libreswan security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:15Z |
| alsa-2023:6544 | Moderate: ghostscript security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-15T12:07:52Z |
| alsa-2023:6542 | Moderate: perl-HTTP-Tiny security update | 2023-11-07T00:00:00Z | 2023-11-14T12:10:42Z |
| alsa-2023:6539 | Moderate: perl-CPAN security update | 2023-11-07T00:00:00Z | 2023-11-14T12:10:41Z |
| alsa-2023:6535 | Important: webkit2gtk3 security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:09:33Z |
| alsa-2023:6524 | Moderate: dnsmasq security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:40Z |
| alsa-2023:6523 | Moderate: python-tornado security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:14Z |
| alsa-2023:6518 | Moderate: flatpak security, bug fix, and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:19Z |
| alsa-2023:6508 | Moderate: libreoffice security update | 2023-11-07T00:00:00Z | 2023-11-14T12:17:52Z |
| alsa-2023:6497 | Moderate: libX11 security update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:38Z |
| alsa-2023:6496 | Moderate: haproxy security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:13Z |
| alsa-2023:6494 | Moderate: python3.11 security update | 2023-11-07T00:00:00Z | 2023-11-14T12:08:31Z |
| alsa-2023:6492 | Moderate: tang security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:12Z |
| alsa-2023:6482 | Moderate: librabbitmq security update | 2023-11-07T00:00:00Z | 2023-11-14T12:06:12Z |
| alsa-2023:6474 | Moderate: podman security, bug fix, and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:10:49Z |
| alsa-2023:6473 | Moderate: buildah security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:37Z |
| alsa-2023:6469 | Moderate: wireshark security update | 2023-11-07T00:00:00Z | 2023-11-14T12:06:10Z |
| alsa-2023:6434 | Moderate: frr security and bug fix update | 2023-11-07T00:00:00Z | 2023-11-14T12:10:49Z |
| alsa-2023:6431 | Moderate: libfastjson security update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:35Z |
| alsa-2023:6429 | Low: libpq security update | 2023-11-07T00:00:00Z | 2023-11-14T12:06:39Z |
| alsa-2023:6420 | Moderate: grafana security and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:05:09Z |
| alsa-2023:6409 | Moderate: libvirt security, bug fix, and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:11:42Z |
| alsa-2023:6403 | Moderate: httpd and mod_http2 security, bug fix, and enhancement update | 2023-11-07T00:00:00Z | 2023-11-14T12:12:35Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2021-895 | Segv on unknown address in helper_uc_tracecode | 2021-06-25T00:01:11.105162Z | 2022-04-13T03:04:39.292252Z |
| osv-2021-892 | Heap-buffer-overflow in explicit_bzero | 2021-06-24T00:01:20.018361Z | 2022-04-13T03:04:36.933273Z |
| osv-2021-891 | Heap-buffer-overflow in __cil_cat_expr_range_to_bitmap_helper | 2021-06-24T00:00:40.542962Z | 2022-04-13T03:04:42.328918Z |
| osv-2021-887 | Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr | 2021-06-22T00:01:25.243822Z | 2022-04-13T03:04:32.211472Z |
| osv-2021-882 | Uncaught exception | 2021-06-21T00:01:24.710703Z | 2022-04-13T03:04:31.098666Z |
| osv-2021-875 | Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr | 2021-06-19T00:00:39.638228Z | 2022-04-13T03:04:32.221691Z |
| osv-2021-872 | Heap-buffer-overflow in ndpi_set_detected_protocol | 2021-06-18T00:01:21.964353Z | 2022-04-13T03:04:36.226617Z |
| osv-2021-871 | Heap-use-after-free in jxl::ImageBlender::PrepareBlending | 2021-06-18T00:01:06.679821Z | 2022-04-13T03:04:41.854039Z |
| osv-2021-868 | Heap-buffer-overflow in ndpi_set_detected_protocol | 2021-06-18T00:00:07.405397Z | 2022-04-13T03:04:36.145859Z |
| osv-2021-863 | Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr | 2021-06-16T00:00:33.701228Z | 2022-04-13T03:04:32.237808Z |
| osv-2021-861 | Use-of-uninitialized-value in jxl::N_AVX2::FloatToRGBA8 | 2021-06-15T00:01:22.972854Z | 2022-04-13T03:04:41.790968Z |
| osv-2021-859 | Heap-buffer-overflow in FSE_writeNCount_generic | 2021-06-15T00:00:25.249054Z | 2022-04-13T03:04:31.643603Z |
| osv-2021-858 | Use-of-uninitialized-value in jxl::N_SCALAR::Epf0Row | 2021-06-15T00:00:08.687009Z | 2022-04-13T03:04:41.833490Z |
| osv-2021-857 | Heap-buffer-overflow in mk_string_copy_substr | 2021-06-14T00:00:34.638360Z | 2023-04-20T22:43:27.883030Z |
| osv-2021-855 | Heap-buffer-overflow in mk_rconf_read | 2021-06-14T00:00:18.084172Z | 2023-04-20T22:43:29.858337Z |
| osv-2021-853 | Heap-buffer-overflow in jxl::ThreadPool::RunCallState<jxl::ConvertToExternal | 2021-06-13T00:00:30.089891Z | 2022-04-13T03:04:41.811984Z |
| osv-2021-850 | Heap-buffer-overflow in proto_item_append_text | 2021-06-11T00:01:24.261978Z | 2022-04-13T03:04:37.806635Z |
| osv-2021-849 | Negative-size-param in mrb_str_format | 2021-06-11T00:01:20.115204Z | 2022-04-13T03:04:39.728879Z |
| osv-2021-847 | Heap-buffer-overflow in frame_get_vlmetalayers | 2021-06-10T00:01:13.857277Z | 2022-04-13T03:04:40.375178Z |
| osv-2021-843 | Use-after-poison in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator-> | 2021-06-09T00:00:19.914318Z | 2022-04-13T03:04:32.165655Z |
| osv-2021-841 | Heap-use-after-free in AK::StringImpl::create | 2021-06-07T00:01:31.914915Z | 2022-04-13T03:04:32.191299Z |
| osv-2021-840 | Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr | 2021-06-07T00:00:35.428789Z | 2022-04-13T03:04:32.175811Z |
| osv-2021-838 | Heap-use-after-free in multiline_parser_conf_file | 2021-06-07T00:00:33.275043Z | 2022-04-13T03:04:38.291023Z |
| osv-2021-830 | Heap-use-after-free in AK::Utf8CodePointIterator::operator* | 2021-06-05T00:00:36.391254Z | 2022-04-13T03:04:32.206558Z |
| osv-2021-823 | UNKNOWN READ in FuzzedFileProvider::seek | 2021-06-03T00:01:12.500483Z | 2023-02-24T02:08:50.638741Z |
| osv-2021-822 | Heap-buffer-overflow in AK::Formatter<char const*, void>::format | 2021-06-03T00:00:53.648543Z | 2022-04-13T03:04:32.201464Z |
| osv-2021-821 | Stack-buffer-overflow in jsoncons::bson::decimal128_to_chars | 2021-06-02T00:00:55.316399Z | 2022-04-13T03:04:39.615002Z |
| osv-2021-820 | UNKNOWN READ in virtio_gpu_disable_scanout | 2021-06-02T00:00:31.619765Z | 2026-04-22T14:32:37.244679Z |
| osv-2021-814 | UNKNOWN WRITE in dwg_free_BLOCK_private | 2021-05-30T00:00:24.550464Z | 2022-04-13T03:04:41.089284Z |
| osv-2021-813 | Use-of-uninitialized-value in StandardSecurityHandler::StandardSecurityHandler | 2021-05-30T00:00:05.737839Z | 2022-04-13T03:04:37.224604Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2024-2454 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-05-24T07:22:42.950Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2651 | Inefficient Regular Expression Complexity in GitLab | 2024-05-24T07:22:10.554Z | 2025-05-20T10:02:07.006Z |
| bit-git-2024-32002 | Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution | 2024-05-24T07:19:17.151Z | 2025-11-06T13:25:46.476Z |
| bit-gitlab-2024-4539 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-05-24T07:19:07.246Z | 2025-05-20T10:02:07.006Z |
| bit-git-2024-32004 | Git vulnerable to Remote Code Execution while cloning special-crafted local repositories | 2024-05-24T07:19:02.349Z | 2026-01-07T12:31:01.344Z |
| bit-git-2024-32020 | Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will | 2024-05-24T07:18:47.345Z | 2026-01-07T12:31:01.344Z |
| bit-git-2024-32021 | Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory | 2024-05-24T07:18:34.045Z | 2026-01-06T12:06:51.467Z |
| bit-gitlab-2024-4597 | Cross-Site Request Forgery (CSRF) in GitLab | 2024-05-24T07:18:32.743Z | 2025-05-20T10:02:07.006Z |
| bit-git-2024-32465 | Git's protections for cloning untrusted repositories can be bypassed | 2024-05-24T07:18:19.848Z | 2026-01-06T12:06:51.467Z |
| bit-airflow-2024-32077 | Apache Airflow: XSS vulnerability in Task Instance Log/Log Details | 2024-05-24T07:15:55.746Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2022-29178 | Incorrect Default Permissions in Cilium | 2024-05-15T12:09:01.883Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2022-29179 | Improper Privilege Management in Cilium | 2024-05-15T12:08:46.378Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-27593 | cilium-agent container can access the host via `hostPath` mount | 2024-05-15T12:08:31.683Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-27594 | Cilium vulnerable to potential network policy bypass when routing IPv6 traffic | 2024-05-15T12:08:16.078Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-27595 | Cilium eBPF filters may be temporarily removed during agent restart | 2024-05-15T12:08:00.872Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-29002 | Debug mode leaks confidential data in Cilium | 2024-05-15T12:07:46.778Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-30851 | Potential HTTP policy bypass when using header rules in Cilium | 2024-05-15T12:07:32.074Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-34242 | Cilium vulnerable to information leakage via incorrect ReferenceGrant handling | 2024-05-15T12:07:15.578Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-39347 | Cilium NetworkPolicy bypass via pod labels | 2024-05-15T12:07:00.681Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-41332 | Denial of service via Kubernetes annotations in specific Cilium configurations | 2024-05-15T12:06:45.287Z | 2025-05-20T10:02:07.006Z |
| bit-cilium-2023-41333 | Bypass of namespace restrictions in CiliumNetworkPolicy | 2024-05-15T12:06:29.973Z | 2025-05-20T10:02:07.006Z |
| bit-scylladb-2023-33972 | Privilege escalation from having CREATE access on a keyspace in Scylladb | 2024-05-14T14:38:04.732Z | 2025-05-20T10:02:07.006Z |
| bit-wordpress-2024-4439 | 2024-05-14T07:38:44.185Z | 2026-01-06T12:06:51.467Z | |
| bit-php-2024-1874 | Command injection via array-ish $command parameter of proc_open() | 2024-05-14T07:29:52.385Z | 2025-11-06T13:25:46.476Z |
| bit-php-2024-2756 | __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix | 2024-05-14T07:29:36.784Z | 2025-11-06T13:25:46.476Z |
| bit-php-2024-2757 | PHP mb_encode_mimeheader runs endlessly for some inputs | 2024-05-14T07:29:20.782Z | 2025-11-06T13:25:46.476Z |
| bit-php-2024-3096 | PHP function password_verify can erroneously return true when argument contains NUL | 2024-05-14T07:29:06.888Z | 2025-11-06T13:25:46.476Z |
| bit-golang-2024-24787 | Arbitrary code execution during build on Darwin in cmd/go | 2024-05-14T07:18:33.392Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2024-24788 | Malformed DNS message can cause infinite loop in net | 2024-05-14T07:18:19.682Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-23449 | Elasticsearch Uncaught Exception | 2024-05-14T07:17:25.293Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0506 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0505 | Multiples vulnérabilités dans Moodle | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0504 | Multiples vulnérabilités dans les produits Atlassian | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0503 | Multiples vulnérabilités dans Google Chrome | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0502 | Multiples vulnérabilités dans les produits VMware | 2024-06-18T00:00:00.000000 | 2024-06-18T00:00:00.000000 |
| certfr-2024-avi-0501 | Multiples vulnérabilités dans les produits Nextcloud | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0500 | Multiples vulnérabilités dans Elastic Kibana | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0499 | Vulnérabilité dans NetApp StorageGRID | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0498 | Multiples vulnérabilités dans les produits IBM | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0497 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0496 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0495 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0494 | Vulnérabilité dans FreeRADIUS | 2024-06-14T00:00:00.000000 | 2024-06-21T00:00:00.000000 |
| certfr-2024-avi-0493 | Multiples vulnérabilités dans les produits Mozilla | 2024-06-14T00:00:00.000000 | 2024-06-24T00:00:00.000000 |
| certfr-2024-avi-0492 | Multiples vulnérabilités dans Google Android et Pixel | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0491 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0490 | Multiples vulnérabilités dans GitLab | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0489 | Multiples vulnérabilités dans les produits Microsoft | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0488 | Multiples vulnérabilités dans Microsoft Azure | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0487 | Multiples vulnérabilités dans Microsoft .Net | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0486 | Multiples vulnérabilités dans Microsoft Windows | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0485 | Multiples vulnérabilités dans Microsoft Office | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0484 | Multiples vulnérabilités dans les produits Fortinet | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0483 | Multiples vulnérabilités dans les produits Adobe | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0482 | Multiples vulnérabilités dans Mozilla Firefox | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0481 | Multiples vulnérabilités dans Google Chrome | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0480 | Vulnérabilité dans les produits Citrix | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0479 | Multiples vulnérabilités dans HPE Aruba Networking AirWave Management Platform | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0478 | Multiples vulnérabilités dans les produits Siemens | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0477 | Multiples vulnérabilités dans les produits SAP | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000116 | Cybozu Garoon vulnerable to mail header injection | 2013-12-03T13:49+09:00 | 2013-12-06T10:50+09:00 |
| jvndb-2013-000115 | Cybozu Garoon vulnerable to denial-of-service (DoS) | 2013-12-03T13:46+09:00 | 2013-12-06T10:48+09:00 |
| jvndb-2013-000114 | Cybozu Garoon vulnerable to SQL injection | 2013-12-03T13:45+09:00 | 2013-12-06T10:47+09:00 |
| jvndb-2013-000113 | Multiple cross-site scripting vulnerabilities in Cybozu Garoon | 2013-12-03T13:37+09:00 | 2013-12-06T10:42+09:00 |
| jvndb-2013-000112 | TOWN (modified version) vulnerable to directory traversal | 2013-11-29T14:23+09:00 | 2013-12-06T10:38+09:00 |
| jvndb-2013-005262 | Buffer Overflow Vulnerability in the log function of Interstage HTTP Server | 2013-11-28T16:38+09:00 | 2013-12-18T16:16+09:00 |
| jvndb-2013-000108 | KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates | 2013-11-22T17:39+09:00 | 2013-11-26T16:02+09:00 |
| jvndb-2013-000110 | D-Link DES-3800 Series vulnerable to denial-of-service (DoS) | 2013-11-22T14:51+09:00 | 2013-11-26T16:15+09:00 |
| jvndb-2013-000109 | D-Link DES-3800 Series vulnerable to denial-of-service (DoS) | 2013-11-22T14:50+09:00 | 2013-11-26T16:09+09:00 |
| jvndb-2013-000106 | EC-CUBE information disclosure vulnerability | 2013-11-20T16:14+09:00 | 2013-11-22T14:18+09:00 |
| jvndb-2013-000107 | EC-CUBE vulnerable to cross-site scripting | 2013-11-20T15:56+09:00 | 2013-11-22T13:57+09:00 |
| jvndb-2013-000098 | EC-CUBE information disclosure vulnerability | 2013-11-20T15:48+09:00 | 2013-11-22T14:35+09:00 |
| jvndb-2013-000097 | EC-CUBE vulnerable to cross-site request forgery | 2013-11-20T15:40+09:00 | 2013-11-22T14:37+09:00 |
| jvndb-2013-000105 | EC-CUBE vulnerable to cross-site scripting | 2013-11-20T15:34+09:00 | 2013-11-22T14:40+09:00 |
| jvndb-2013-000104 | EC-CUBE vulnerable to information disclosure | 2013-11-20T15:19+09:00 | 2013-11-22T14:42+09:00 |
| jvndb-2011-003557 | ASP.NET vulnerable to open redirect | 2013-11-15T15:54+09:00 | 2013-11-15T15:54+09:00 |
| jvndb-2013-000103 | Ichitaro series vulnerable to arbitrary code execution | 2013-11-12T14:33+09:00 | 2013-11-15T10:22+09:00 |
| jvndb-2013-000102 | Page Scroller vulnerable to cross-site scripting | 2013-11-07T14:03+09:00 | 2013-11-07T14:03+09:00 |
| jvndb-2013-000101 | TOWN (modified version) vulnerable to cross-site scripting | 2013-11-07T13:59+09:00 | 2013-11-11T16:34+09:00 |
| jvndb-2013-000100 | Tiki Wiki CMS Groupware vulnerable to SQL injection | 2013-11-05T15:11+09:00 | 2013-11-07T17:57+09:00 |
| jvndb-2013-000099 | Tiki Wiki CMS Groupware vulnerable to cross-site scripting | 2013-11-05T15:05+09:00 | 2013-11-07T17:55+09:00 |
| jvndb-2013-004446 | Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU) | 2013-10-30T16:32+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2013-001665 | Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS) | 2013-10-30T16:08+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2013-000096 | RockDisk vulnerable to cross-site scripting | 2013-10-29T14:40+09:00 | 2014-07-02T14:36+09:00 |
| jvndb-2013-000095 | HDL-A and HDL2-A Series vulnerable in session management | 2013-10-18T14:30+09:00 | 2013-10-22T17:56+09:00 |
| jvndb-2013-000094 | Accela BizSearch vulnerable to cross-site scripting | 2013-10-04T12:36+09:00 | 2013-10-08T14:56+09:00 |
| jvndb-2013-004410 | Arbitrary Commands Execution Vulnerability in JP1/Base | 2013-10-03T19:26+09:00 | 2013-10-03T19:26+09:00 |
| jvndb-2013-004409 | Arbitrary Commands Execution Vulnerability in JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2 | 2013-10-03T19:24+09:00 | 2013-10-03T19:24+09:00 |
| jvndb-2013-004319 | Multiple vulnerabilities in Java bundled with Hitachi JP1/Cm2/Network Node Manager i | 2013-09-27T14:51+09:00 | 2013-09-27T14:51+09:00 |
| jvndb-2013-004318 | Multiple vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i | 2013-09-27T14:49+09:00 | 2013-09-27T14:49+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-29164 | Apache OpenOffice安全绕过漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29162 | Dell SmartFabric OS10 Software命令注入漏洞(CNVD-2025-29162) | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29161 | Dell SmartFabric OS10 Software命令注入漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29160 | Dell SmartFabric OS10 Software代码注入漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29159 | Fortinet FortiWeb信任管理问题漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29158 | Fortinet FortiExtender缓冲区溢出漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29157 | Fortinet FortiClientWindows访问控制错误漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29156 | Fortinet FortiADC缓冲区溢出漏洞(CNVD-2025-29156) | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29136 | WordPress Like-it plugin跨站请求伪造漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29135 | WordPress Gutenify plugin跨站脚本漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29134 | WordPress everviz plugin跨站脚本漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29133 | WordPress Download Panel plugin未经授权的设置修改漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29132 | WordPress CSV to SortTable plugin跨站脚本漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29131 | WordPress Coil Web Monetization plugin跨站请求伪造漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29130 | WordPress Category and Product Woocommerce Tabs plugin文件包含漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29129 | WordPress ArtiBot Free Chat Bot for WebSites plugin跨站脚本漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29118 | Responsive Hotel Site usersettingdel.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29117 | Responsive Hotel Site usersetting.php文件SQL注入漏洞 | 2025-11-20 | 2025-11-21 |
| cnvd-2025-29019 | Siemens PS/IGES Parasolid Translator Component越界读取漏洞 | 2025-11-20 | 2025-11-17 |
| cnvd-2025-28982 | Siemens Mendix Rich Text组件跨站脚本漏洞 | 2025-11-20 | 2025-11-17 |
| cnvd-2026-04425 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-891462) | 2025-11-19 | 2026-01-22 |
| cnvd-2026-14656 | Rockwell Automation Arena堆栈缓冲区溢出漏洞 | 2025-11-18 | 2026-03-24 |
| cnvd-2026-14144 | WordPress插件Comment Edit Core – Simple Comment Editing信息泄露漏洞 | 2025-11-18 | 2026-03-18 |
| cnvd-2026-11786 | Advantech TP-3250拒绝服务漏洞 | 2025-11-18 | 2026-02-27 |
| cnvd-2026-10881 | mall-swarm授权问题漏洞(CNVD-2026-10881) | 2025-11-18 | 2026-02-13 |
| cnvd-2026-10880 | mall-swarm存在未明漏洞 | 2025-11-18 | 2026-02-13 |
| cnvd-2026-10879 | mall-swarm授权问题漏洞(CNVD-2026-10879) | 2025-11-18 | 2026-02-13 |
| cnvd-2026-10878 | mall-swarm授权问题漏洞(CNVD-2026-10878) | 2025-11-18 | 2026-02-13 |
| cnvd-2026-10877 | mall-swarm授权问题漏洞(CNVD-2026-10877) | 2025-11-18 | 2026-02-13 |
| cnvd-2026-06823 | D-Link DIR-823G命令注入漏洞 | 2025-11-18 | 2026-01-23 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-15854 | Уязвимость персонализации программной платформы Oracle Applications Framework системы авт… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15853 | Уязвимость компонента InnoDB системы управления базами данных MySQL Server, позволяющая н… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15852 | Уязвимость компонента RDBMS Functional Index системы управления базами данных Oracle Data… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15851 | Уязвимость компонента Analytics Web Administration программной платформы Oracle Business … | 15.12.2025 | 15.12.2025 |
| bdu:2025-15850 | Уязвимость компонента Workflow Notification Mailer системы управления рабочим процессом O… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15849 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15848 | Уязвимость компонента Rich Text Editor пакета бизнес-приложений Oracle PeopleSoft Enterpr… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15847 | Уязвимость файловой системы операционной системы Solaris, позволяющая нарушителю вызвать … | 15.12.2025 | 15.12.2025 |
| bdu:2025-15846 | Уязвимость компонента Portable Clusterware системы управления базами данных Oracle Databa… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15845 | Уязвимость компонента Application Logging Interfaces средства управления приложениями Ora… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15844 | Уязвимость программного обеспечения для настройки безопасности astra-safepolicy, связанна… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15843 | Уязвимость модулей ядра Linux Astra Modules, связанная с недостаточной проверкой вводимых… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15842 | Уязвимость модулей ядра Linux Astra Modules, связанная с недостаточной проверкой подлинно… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15841 | Уязвимость модулей ядра Linux Astra Modules, связанная с ошибками при блокировке потоков,… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15840 | Уязвимость модулей ядра Linux Astra Modules, связанная с неправильной передачей данных во… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15839 | Уязвимость модулей ядра Linux Astra Modules, связанная с выделением неограниченной памяти… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15838 | Уязвимость программного обеспечения для настройки безопасности astra-safepolicy, связанна… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15837 | Уязвимость программного обеспечения для настройки безопасности astra-safepolicy, связанна… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15836 | Уязвимость программного обеспечения для настройки безопасности astra-safepolicy, связанна… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15835 | Уязвимость программного обеспечения для настройки безопасности astra-safepolicy, связанна… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15834 | Уязвимость программного обеспечения для настройки безопасности astra-safepolicy, связанна… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15833 | Уязвимость программного обеспечения для настройки безопасности astra-safepolicy, связанна… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15832 | Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15831 | Уязвимость программного обеспечения для настройки безопасности astra-safepolicy, связанна… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15830 | Уязвимость компонента net ядра операционной системы Linux, позволяющая нарушителю вызвать… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15829 | Уязвимость системы управления базами данных MySQL и MariaDB, связанная с раскрытием инфор… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15828 | Уязвимость микрокода процессоров Intel Microcode, связанная с ошибками реализации проверк… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15827 | Уязвимость интерфейса Commits API программной платформы на базе git для совместной работы… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15826 | Уязвимость компонентов crypto ядра операционной системы Linux, позволяющая нарушителю пол… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15825 | Уязвимость компонентов mm ядра операционной системы Linux, позволяющая нарушителю получит… | 15.12.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201409-0724 | Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the … | 2025-11-19T23:15:03.156000Z |
| var-202309-2816 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function.… | 2025-11-19T23:14:51.317000Z |
| var-202310-0115 | D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution… | 2025-11-19T23:14:51.284000Z |
| var-202503-1498 | An improper neutralization of special elements used in an OS Command vulnerability [CWE-7… | 2025-11-19T23:14:44.851000Z |
| var-202509-1061 | In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds… | 2025-11-19T23:14:43.469000Z |
| var-202509-2491 | OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jh… | 2025-11-19T23:14:43.383000Z |
| var-202510-0095 | A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is t… | 2025-11-19T23:14:43.222000Z |
| var-202510-0946 | When a virtual server, network address translation (NAT) object, or secure network addres… | 2025-11-19T23:14:42.938000Z |
| var-202510-1429 | Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user … | 2025-11-19T23:14:42.859000Z |
| var-202510-2080 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the … | 2025-11-19T23:14:42.817000Z |
| var-202510-2248 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page paramet… | 2025-11-19T23:14:42.682000Z |
| var-202510-2269 | A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The affected element is … | 2025-11-19T23:14:42.666000Z |
| var-202510-2332 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the… | 2025-11-19T23:14:42.613000Z |
| var-202510-3025 | The NPort IA5250AI is an industrial-grade serial port device networking server. Mosa Tec… | 2025-11-19T23:14:42.280000Z |
| var-202308-3430 | In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters e… | 2025-11-19T23:12:06.707000Z |
| var-202402-2672 | A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.0… | 2025-11-19T23:12:05.724000Z |
| var-202509-4467 | The WAGO 750-841 is a fieldbus adapter in the WAGO-I/O-SYSTEM series, primarily used for … | 2025-11-19T23:11:58.629000Z |
| var-202509-4509 | The AC7 is a wireless router. The AC7 router developed by Shenzhen Jixiang Tengda Techno… | 2025-11-19T23:11:58.608000Z |
| var-202510-0057 | A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown f… | 2025-11-19T23:11:58.587000Z |
| var-202510-0099 | A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown p… | 2025-11-19T23:11:58.563000Z |
| var-202510-0168 | A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affect… | 2025-11-19T23:11:58.540000Z |
| var-202510-2084 | A vulnerability was determined in Tenda O3 1.0.0.10(2478). Affected is the function SetVa… | 2025-11-19T23:11:58.333000Z |
| var-202510-2147 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T23:11:58.184000Z |
| var-202510-2189 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the … | 2025-11-19T23:11:58.151000Z |
| var-202510-2210 | A security flaw has been discovered in Tenda O3 1.0.0.10(2478). Affected by this issue is… | 2025-11-19T23:11:58.135000Z |
| var-202510-2252 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T23:11:58.119000Z |
| var-202510-2336 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T23:11:58.067000Z |
| var-202510-2357 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T23:11:58.051000Z |
| var-202511-0769 | In ims service, there is a possible out of bounds write due to a missing bounds check. Th… | 2025-11-19T23:11:56.226000Z |
| var-202305-0215 | D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This v… | 2025-11-19T23:10:12.734000Z |