Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-6290 |
8 (3.1)
|
Velociraptor Query() Plugin Misapplies Permissions To Orgs |
Rapid7 |
Velociraptor |
2026-04-15T17:29:04.306Z | 2026-04-16T03:55:38.112Z |
| CVE-2026-32631 |
7.4 (3.1)
|
Git for Windows: `git clone` from manipulated reposito… |
git-for-windows |
git |
2026-04-15T17:26:44.154Z | 2026-04-15T18:44:04.155Z |
| CVE-2026-5758 |
6.5 (3.1)
|
Mafintosh's protocol-buffers-schema is vulnerable to p… |
Mafintosh |
Protocol-buffers-schema parser |
2026-04-15T17:20:13.551Z | 2026-04-15T18:55:45.526Z |
| CVE-2025-15610 |
9.3 (4.0)
|
Deserialization of untrusted data vulnerability i… |
OpenText, Inc |
RightFax |
2026-04-15T16:31:53.959Z | 2026-04-15T17:32:31.254Z |
| CVE-2025-63029 |
7.6 (3.1)
|
WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injec… |
WC Lovers |
WCFM Marketplace |
2026-04-15T16:21:23.512Z | 2026-04-28T16:14:08.877Z |
| CVE-2026-6372 |
7.5 (3.1)
|
WordPress Accept Cryptocurrencies with Plisio plugin <… |
Plisio |
Accept Cryptocurrencies with Plisio |
2026-04-15T16:16:46.970Z | 2026-04-16T14:06:37.842Z |
| CVE-2026-20136 |
6 (3.1)
|
Cisco Identity Services Engine Authenticated Privilege… |
Cisco |
Cisco Identity Services Engine Software |
2026-04-15T16:11:29.398Z | 2026-04-16T03:55:30.918Z |
| CVE-2026-20059 |
6.1 (3.1)
|
Cisco Unity Connection Reflected Cross-Site Scripting … |
Cisco |
Cisco Unity Connection |
2026-04-15T16:11:22.828Z | 2026-04-15T16:56:33.949Z |
| CVE-2026-20061 |
4.3 (3.1)
|
Cisco Unity Connection SQL Injection Vulnerability |
Cisco |
Cisco Unity Connection |
2026-04-15T16:11:20.865Z | 2026-04-15T16:56:34.089Z |
| CVE-2026-20060 |
4.7 (3.1)
|
Cisco Unity Connection Open Redirect Vulnerability |
Cisco |
Cisco Unity Connection |
2026-04-15T16:11:20.842Z | 2026-04-15T16:56:34.222Z |
| CVE-2026-20170 |
6.1 (3.1)
|
A vulnerability in the Desktop Agent functionalit… |
Cisco |
Cisco Webex Contact Center |
2026-04-15T16:10:03.920Z | 2026-04-15T16:56:34.563Z |
| CVE-2026-20184 |
9.8 (3.1)
|
Cisco Webex Meetings Certificate Validation Vulnerability |
Cisco |
Cisco Webex Meetings |
2026-04-15T16:03:59.646Z | 2026-04-16T19:07:14.461Z |
| CVE-2026-20180 |
9.9 (3.1)
|
Cisco Identity Services Engine Multiple Remote Code Ex… |
Cisco |
Cisco Identity Services Engine Software |
2026-04-15T16:03:51.335Z | 2026-04-16T03:55:33.630Z |
| CVE-2026-20152 |
5.3 (3.1)
|
Cisco Secure Web Appliance Authentication Service Traf… |
Cisco |
Cisco Secure Web Appliance |
2026-04-15T16:03:43.828Z | 2026-04-16T19:05:18.524Z |
| CVE-2026-20161 |
5.5 (3.1)
|
Cisco ThousandEyes Enterprise Agent Arbitrary File Ove… |
Cisco |
Cisco ThousandEyes Enterprise Agent |
2026-04-15T16:03:43.769Z | 2026-04-15T16:56:35.191Z |
| CVE-2026-20186 |
9.9 (3.1)
|
Cisco Identity Services Engine Multiple Authenticated … |
Cisco |
Cisco Identity Services Engine Software |
2026-04-15T16:03:35.310Z | 2026-04-16T03:55:36.590Z |
| CVE-2026-20148 |
4.9 (3.1)
|
Cisco Identity Services Engine Path Traversal Vulnerability |
Cisco |
Cisco Identity Services Engine Software |
2026-04-15T16:03:31.727Z | 2026-04-15T16:56:35.471Z |
| CVE-2026-20147 |
9.9 (3.1)
|
Cisco Identity Services Engine Remote Code Execution V… |
Cisco |
Cisco Identity Services Engine Software |
2026-04-15T16:03:25.648Z | 2026-04-16T03:55:35.113Z |
| CVE-2026-20081 |
6.5 (3.1)
|
Cisco Unity Connection Arbitrary File Download Vulnerability |
Cisco |
Cisco Unity Connection |
2026-04-15T16:03:23.282Z | 2026-04-15T17:06:37.914Z |
| CVE-2026-20078 |
6.5 (3.1)
|
Cisco Unity Connection Arbitrary File Download Vulnerability |
Cisco |
Cisco Unity Connection |
2026-04-15T16:03:16.698Z | 2026-04-15T17:06:38.080Z |
| CVE-2026-20132 |
4.8 (3.1)
|
Cisco Identity Services Engine Multiple Cross-Site Scr… |
Cisco |
Cisco Identity Services Engine Software |
2026-04-15T16:03:14.842Z | 2026-04-15T17:06:38.222Z |
| CVE-2026-6370 |
5.9 (3.1)
|
WordPress Mini Ajax Cart for WooCommerce plugin <= 1.3… |
HashThemes |
Mini Ajax Cart for WooCommerce |
2026-04-15T16:02:14.957Z | 2026-04-16T14:09:47.438Z |
| CVE-2025-15636 |
6.5 (3.1)
|
WordPress YouTube Showcase plugin <= 3.5.1 - Cross Sit… |
emarket-design |
YouTube Showcase |
2026-04-15T15:55:51.930Z | 2026-04-28T16:10:57.676Z |
| CVE-2025-15635 |
4.3 (3.1)
|
WordPress Smart Online Order for Clover plugin <= 1.6.… |
ZAYTECH |
Smart Online Order for Clover |
2026-04-15T15:49:53.280Z | 2026-04-28T16:10:57.603Z |
| CVE-2025-53444 |
4.3 (3.1)
|
WordPress Userpro plugin < 5.1.11 - Cross Site Request… |
DeluxeThemes |
Userpro |
2026-04-15T15:43:21.294Z | 2026-04-28T16:13:24.932Z |
| CVE-2026-5387 |
9.3 (4.0)
|
AVEVA Pipeline Simulation Missing Authorization |
AVEVA |
Pipeline Simulation 2025 |
2026-04-15T15:24:15.623Z | 2026-04-15T17:38:50.678Z |
| CVE-2026-20205 |
7.2 (3.1)
|
Sensitive Information Disclosure in ''_internal'' inde… |
Splunk |
Splunk MCP Server |
2026-04-15T15:17:58.202Z | 2026-04-15T17:39:19.517Z |
| CVE-2026-20203 |
4.3 (3.1)
|
Improper Access Control in Data Model Acceleration in … |
Splunk |
Splunk Enterprise |
2026-04-15T15:17:56.261Z | 2026-04-15T17:40:36.484Z |
| CVE-2026-20204 |
7.1 (3.1)
|
Improper Handling and Insufficient Isolation of Specif… |
Splunk |
Splunk Enterprise |
2026-04-15T15:17:54.019Z | 2026-04-16T03:55:29.794Z |
| CVE-2026-20202 |
6.6 (3.1)
|
Improper Input Validation during User Account Creation… |
Splunk |
Splunk Enterprise |
2026-04-15T15:17:43.871Z | 2026-04-16T03:55:28.582Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-40917 |
5 (3.1)
|
Gimp: gimp: application crashes or information disclos… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-04-15T18:59:09.003Z | 2026-04-28T18:45:50.251Z |
| CVE-2026-40916 |
5 (3.1)
|
Gimp: gimp: denial of service due to stack buffer over… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-04-15T18:58:57.615Z | 2026-04-28T18:45:49.746Z |
| CVE-2026-40915 |
5.5 (3.1)
|
Gimp: gimp: heap buffer overflow due to integer overfl… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-04-15T18:58:52.059Z | 2026-04-28T17:38:22.042Z |
| CVE-2026-39857 |
5.3 (3.1)
|
Information Disclosure via `choices`/`counts` Query Pa… |
apostrophecms |
apostrophe |
2026-04-15T19:38:57.564Z | 2026-04-16T13:40:17.710Z |
| CVE-2026-35569 |
8.7 (3.1)
|
ApostropheCMS: Stored XSS in SEO Fields Leads to Authe… |
apostrophecms |
apostrophe |
2026-04-15T19:34:23.648Z | 2026-04-16T14:14:58.325Z |
| CVE-2026-33889 |
5.4 (3.1)
|
ApostropheCMS: Stored XSS via CSS Custom Property Inje… |
apostrophecms |
apostrophe |
2026-04-15T19:29:50.899Z | 2026-04-16T12:05:17.734Z |
| CVE-2026-33888 |
5.3 (3.1)
|
ApostropheCMS: publicApiProjection Bypass via `project… |
apostrophecms |
apostrophe |
2026-04-15T19:25:46.262Z | 2026-04-15T20:03:30.594Z |
| CVE-2026-33877 |
3.7 (3.1)
|
ApostropheCMS: User Enumeration via Timing Side Channe… |
apostrophecms |
apostrophe |
2026-04-15T19:11:06.796Z | 2026-04-15T19:30:53.040Z |
| CVE-2026-21727 |
3.3 (3.1)
|
Grafana Correlations: Cross-Tenant Data Disclosure and… |
Grafana |
Grafana Correlations |
2026-04-15T18:57:25.185Z | 2026-04-24T08:00:49.460Z |
| CVE-2026-21726 |
5.3 (3.1)
|
Loki Path Traversal - CVE-2021-36156 Bypass |
Grafana |
Loki |
2026-04-15T19:24:31.268Z | 2026-04-24T08:00:46.291Z |
| CVE-2025-41118 |
9.1 (3.1)
|
Sensitive COS `SecretKey` exposed in plaintext via con… |
Grafana |
Pyroscope |
2026-04-15T19:15:17.689Z | 2026-04-24T08:00:52.045Z |
| CVE-2026-6383 |
5.4 (3.1)
|
Kubevirt: kubevirt: unauthorized subresource access du… |
Red Hat |
Red Hat OpenShift Virtualization 4 |
2026-04-15T18:22:30.589Z | 2026-04-15T18:40:31.052Z |
| CVE-2026-6245 |
5.5 (3.1)
|
Sssd: out-of-bounds read in the sssd |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-04-15T18:35:19.401Z | 2026-04-15T20:01:50.488Z |
| CVE-2026-5189 |
9.2 (4.0)
|
Nexus Repository 3 - Hardcoded Credential in Internal … |
Sonatype |
Nexus Repository |
2026-04-15T18:43:32.166Z | 2026-04-16T10:01:24.305Z |
| CVE-2026-4857 |
8.4 (3.1)
|
SailPoint IdentityIQ Debug UI Incorrect Authorization |
SailPoint Technologies |
IdentityIQ |
2026-04-15T18:08:45.737Z | 2026-04-16T03:55:39.481Z |
| CVE-2026-40256 |
5 (3.1)
|
Weblate: Prefix-Based Repository Boundary Check Bypass… |
WeblateOrg |
weblate |
2026-04-15T18:36:44.975Z | 2026-04-16T14:11:15.386Z |
| CVE-2026-39845 |
4.1 (3.1)
|
Weblate: SSRF via the webhook add-on using unprotected… |
WeblateOrg |
weblate |
2026-04-15T18:26:51.706Z | 2026-04-15T20:01:56.793Z |
| CVE-2026-34632 |
8.2 (3.1)
|
Photoshop Installer | CWE-427: Uncontrolled Search Pat… |
Adobe |
Adobe Photoshop Installer |
2026-04-15T18:35:52.192Z | 2026-04-22T16:23:58.307Z |
| CVE-2026-34393 |
8.8 (3.1)
|
Weblate: Privilege escalation in the user API endpoint |
WeblateOrg |
weblate |
2026-04-15T18:24:30.813Z | 2026-04-15T18:38:53.920Z |
| CVE-2026-34244 |
5 (3.1)
|
Weblate: SSRF via Project-Level Machinery Configuration |
WeblateOrg |
weblate |
2026-04-15T18:22:42.551Z | 2026-04-15T18:50:10.569Z |
| CVE-2026-34242 |
7.7 (3.1)
|
Weblate: Arbitrary File Read via Symlink |
WeblateOrg |
weblate |
2026-04-15T18:19:59.552Z | 2026-04-15T20:02:06.899Z |
| CVE-2026-33667 |
7.4 (3.1)
|
OpenProject: 2FA OTP Verification Missing Rate Limiting |
opf |
openproject |
2026-04-15T18:43:14.130Z | 2026-04-15T20:00:14.503Z |
| CVE-2026-33440 |
5 (3.1)
|
Weblate: Authenticated SSRF via redirect bypass of ALL… |
WeblateOrg |
weblate |
2026-04-15T18:15:12.560Z | 2026-04-15T18:49:25.077Z |
| CVE-2026-33435 |
8.1 (3.1)
|
Weblate: Remote code execution during backup restoration |
WeblateOrg |
weblate |
2026-04-15T18:13:07.568Z | 2026-04-15T18:40:27.204Z |
| CVE-2026-33220 |
6.8 (3.1)
|
Weblate: JavaScript localization CDN add-on allows arb… |
WeblateOrg |
weblate |
2026-04-15T18:03:40.728Z | 2026-04-16T14:10:15.340Z |
| CVE-2026-6290 |
8 (3.1)
|
Velociraptor Query() Plugin Misapplies Permissions To Orgs |
Rapid7 |
Velociraptor |
2026-04-15T17:29:04.306Z | 2026-04-16T03:55:38.112Z |
| CVE-2026-5758 |
6.5 (3.1)
|
Mafintosh's protocol-buffers-schema is vulnerable to p… |
Mafintosh |
Protocol-buffers-schema parser |
2026-04-15T17:20:13.551Z | 2026-04-15T18:55:45.526Z |
| CVE-2026-33214 |
4.3 (3.1)
|
Weblate has improper access control for the translatio… |
WeblateOrg |
weblate |
2026-04-15T17:51:46.812Z | 2026-04-15T20:02:14.057Z |
| CVE-2026-33212 |
3.1 (3.1)
|
Weblate: Improper access control for pending tasks in API |
WeblateOrg |
weblate |
2026-04-15T17:48:17.842Z | 2026-04-15T18:09:01.991Z |
| CVE-2026-32631 |
7.4 (3.1)
|
Git for Windows: `git clone` from manipulated reposito… |
git-for-windows |
git |
2026-04-15T17:26:44.154Z | 2026-04-15T18:44:04.155Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-jx24-j485-cqwm |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of … | 2026-04-13T12:31:15Z | 2026-04-13T12:31:15Z |
| ghsa-jf89-3q6q-vcgr |
8.8 (3.1)
|
Apache Storm: Deserialization of Untrusted Data vulnerability | 2026-04-13T12:31:15Z | 2026-04-14T22:51:32Z |
| ghsa-f2hp-qw27-8wfq |
5.4 (3.1)
|
Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata | 2026-04-13T12:31:15Z | 2026-04-14T22:50:39Z |
| ghsa-7549-ggpq-22w8 |
8.5 (4.0)
|
Duplicate Advisory: LibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write | 2026-04-13T12:31:15Z | 2026-04-14T22:51:57Z |
| ghsa-xvjp-783h-vvhp |
5.1 (3.1)
|
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnera… | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-xq5v-qh4w-535c |
8.5 (3.1)
|
An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server t… | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-w48x-mvpf-jfc3 |
7.2 (4.0)
|
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex… | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-rg7c-g689-fr3x |
9.3 (4.0)
|
Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability | 2026-04-13T09:31:33Z | 2026-04-14T22:29:08Z |
| ghsa-qc8x-v7mj-j62g |
7.1 (3.1)
|
The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management o… | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-m5f5-cq9j-vhwf |
8.8 (3.1)
7.4 (4.0)
|
A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the function se… | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-hvx7-jqjg-r7r7 |
4.0 (4.0)
|
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows … | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-f3fr-gvgx-x9gh |
9.1 (3.1)
10.0 (4.0)
|
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnera… | 2026-04-13T09:31:33Z | 2026-04-17T21:31:43Z |
| ghsa-cr46-frvv-mfcg |
8.6 (3.1)
|
The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escap… | 2026-04-13T09:31:33Z | 2026-04-13T15:31:41Z |
| ghsa-83p9-7gqh-59qj |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown… | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-5h3p-j6gw-765v |
6.8 (3.1)
|
The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when… | 2026-04-13T09:31:33Z | 2026-04-13T18:30:39Z |
| ghsa-4g94-jfqp-p4f7 |
9.1 (3.1)
|
Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSe… | 2026-04-13T09:31:33Z | 2026-04-13T18:30:39Z |
| ghsa-34g8-8p3v-fxw2 |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0.… | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-2cp9-2r3x-xx3f |
2.0 (4.0)
|
A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager … | 2026-04-13T09:31:33Z | 2026-04-13T09:31:33Z |
| ghsa-rqvj-x8vr-qv55 |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an… | 2026-04-13T06:30:31Z | 2026-04-13T06:30:31Z |
| ghsa-r343-v546-p2ch |
5.3 (3.1)
5.5 (4.0)
|
A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the functi… | 2026-04-13T06:30:31Z | 2026-04-13T06:30:31Z |
| ghsa-mjx3-57hm-4rw6 |
2.8 (3.1)
5.1 (4.0)
|
Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to acce… | 2026-04-13T06:30:31Z | 2026-04-16T18:31:21Z |
| ghsa-mfwr-v65c-m55q |
6.8 (3.1)
4.4 (4.0)
|
Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows phy… | 2026-04-13T06:30:31Z | 2026-04-13T21:30:42Z |
| ghsa-jphw-6w8r-xh4r |
6.9 (3.1)
|
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source … | 2026-04-13T06:30:31Z | 2026-04-13T06:30:31Z |
| ghsa-hh82-cfxx-fmf9 |
4.3 (3.1)
2.1 (4.0)
|
A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerab… | 2026-04-13T06:30:31Z | 2026-04-13T06:30:31Z |
| ghsa-hgj3-xj27-6wfp |
6.5 (3.1)
5.1 (4.0)
|
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attack… | 2026-04-13T06:30:31Z | 2026-04-13T21:30:42Z |
| ghsa-h9qc-47v9-vqv2 |
2.4 (3.1)
4.7 (4.0)
|
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to… | 2026-04-13T06:30:31Z | 2026-04-13T21:30:42Z |
| ghsa-gp9q-xqfw-39jw |
6.7 (3.1)
8.4 (4.0)
|
Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vulnerabilit… | 2026-04-13T06:30:31Z | 2026-04-13T06:30:31Z |
| ghsa-gcjq-vfr8-9cjw |
7.3 (3.1)
5.5 (4.0)
|
A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affe… | 2026-04-13T06:30:31Z | 2026-04-13T06:30:31Z |
| ghsa-g4gg-273v-hrq5 |
7.3 (3.1)
5.5 (4.0)
|
A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulner… | 2026-04-13T06:30:31Z | 2026-04-13T06:30:31Z |
| ghsa-ff89-7r94-6q4q |
3.3 (3.1)
6.8 (4.0)
|
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local… | 2026-04-13T06:30:31Z | 2026-04-13T18:30:39Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-6 |
|
A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, whe… | ansible | 2020-03-03T22:15:00Z | 2020-05-29T14:11:00Z |
| pysec-2020-201 |
|
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local user… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.195519Z |
| pysec-2020-200 |
|
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or mod… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.150700Z |
| pysec-2020-199 |
|
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.107799Z |
| pysec-2020-203 |
|
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset… | ansible | 2020-02-20T03:15:00Z | 2021-07-02T02:41:33.286907Z |
| pysec-2020-202 |
|
Ansible before 1.5.5 constructs filenames containing user and password fields on the basi… | ansible | 2020-02-20T03:15:00Z | 2021-07-02T02:41:33.239912Z |
| pysec-2020-176 |
|
PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions… | pyyaml | 2020-02-19T04:15:00Z | 2020-03-01T00:15:00Z |
| pysec-2020-205 |
|
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attacker… | ansible | 2020-02-18T15:15:00Z | 2021-07-02T02:41:33.376176Z |
| pysec-2020-204 |
|
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, a… | ansible | 2020-02-18T15:15:00Z | 2021-07-02T02:41:33.333300Z |
| pysec-2020-217 |
|
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x… | mercurial | 2020-02-12T02:15:00Z | 2021-07-25T23:34:39.934367Z |
| pysec-2020-147 |
|
TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographi… | tuf | 2020-02-05T16:15:00Z | 2020-02-07T19:19:00Z |
| pysec-2020-155 |
|
Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains … | waitress | 2020-02-04T03:15:00Z | 2020-02-06T18:46:00Z |
| pysec-2020-35 |
|
Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection … | django | 2020-02-03T12:15:00Z | 2020-06-19T03:15:00Z |
| pysec-2020-212 |
|
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote… | roundup | 2020-01-30T21:15:00Z | 2021-07-05T00:01:25.863651Z |
| pysec-2020-156 |
|
flaskparser.py in Webargs 5.x through 5.5.2 doesn't check that the Content-Type header is… | webargs | 2020-01-29T15:15:00Z | 2020-02-03T16:36:00Z |
| pysec-2020-231 |
|
Feedgen (python feedgen) before 0.9.0 is susceptible to XML Denial of Service attacks. Th… | feedgen | 2020-01-28T23:15:00Z | 2021-08-27T03:22:03.690780Z |
| pysec-2020-338 |
|
In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 … | tensorflow-gpu | 2020-01-28T22:15:00Z | 2021-12-09T06:35:16.944663Z |
| pysec-2020-303 |
|
In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 … | tensorflow-cpu | 2020-01-28T22:15:00Z | 2021-12-09T06:34:45.123200Z |
| pysec-2020-258 |
|
In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 … | tensorflow | 2020-01-28T22:15:00Z | 2021-08-27T03:22:23.423115Z |
| pysec-2020-211 |
|
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators … | pyrad | 2020-01-28T16:15:00Z | 2021-07-05T00:01:25.072912Z |
| pysec-2020-249 |
|
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory acc… | py-bcrypt | 2020-01-28T15:15:00Z | 2021-08-27T03:22:16.441551Z |
| pysec-2020-224 |
|
An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and … | apache-superset | 2020-01-28T01:15:00Z | 2021-09-02T01:10:59.006282Z |
| pysec-2020-344 |
7.5 (3.1)
|
In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in … | exiv2 | 2020-01-27T05:15:00Z | 2024-11-21T14:22:49.729892Z |
| pysec-2020-230 |
|
In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow use… | django-user-sessions | 2020-01-24T20:15:00Z | 2021-08-27T03:21:57.616152Z |
| pysec-2020-213 |
|
Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be… | tornado | 2020-01-24T18:15:00Z | 2021-07-05T00:01:27.333585Z |
| pysec-2020-90 |
|
A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows … | plone | 2020-01-23T21:15:00Z | 2020-01-24T22:44:00Z |
| pysec-2020-89 |
|
Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to … | plone | 2020-01-23T21:15:00Z | 2020-01-24T22:52:00Z |
| pysec-2020-88 |
|
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to… | plone | 2020-01-23T21:15:00Z | 2020-01-24T23:00:00Z |
| pysec-2020-87 |
|
plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to… | plone | 2020-01-23T21:15:00Z | 2020-01-24T23:03:00Z |
| pysec-2020-86 |
|
An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain pr… | plone | 2020-01-23T21:15:00Z | 2020-01-24T23:07:00Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-829 | Malicious code in @uniconvex/dotenv (npm) | 2026-02-10T16:30:16Z | 2026-02-23T04:21:31Z |
| mal-2026-828 | Malicious code in @reimorg/config (npm) | 2026-02-10T16:30:16Z | 2026-02-23T04:21:31Z |
| mal-2026-833 | Malicious code in express-configer (npm) | 2026-02-10T16:15:42Z | 2026-03-19T12:23:20Z |
| mal-2026-830 | Malicious code in aligners (npm) | 2026-02-10T16:05:06Z | 2026-03-19T12:23:18Z |
| mal-2026-835 | Malicious code in sap-code-style-guides (npm) | 2026-02-10T15:58:34Z | 2026-03-19T12:23:23Z |
| mal-2026-832 | Malicious code in chai-as-approved (npm) | 2026-02-10T15:56:44Z | 2026-03-19T12:23:19Z |
| mal-2026-831 | Malicious code in bigmathix (npm) | 2026-02-10T15:48:53Z | 2026-04-16T15:42:07Z |
| mal-2026-834 | Malicious code in graphflowx (npm) | 2026-02-10T15:46:43Z | 2026-04-16T15:42:08Z |
| mal-2026-827 | Malicious code in narrow-array (npm) | 2026-02-10T13:49:16Z | 2026-03-19T12:23:22Z |
| mal-2026-826 | Malicious code in testppe-pkg (PyPI) | 2026-02-10T08:38:48Z | 2026-02-10T08:38:48Z |
| mal-2026-824 | Malicious code in dev-pipline-test (PyPI) | 2026-02-10T07:48:33Z | 2026-02-10T07:48:33Z |
| mal-2026-825 | Malicious code in devtools-webhook-cicd-utils (PyPI) | 2026-02-10T07:42:45Z | 2026-02-10T07:42:45Z |
| mal-2026-823 | Malicious code in ntoutils (PyPI) | 2026-02-10T07:25:38Z | 2026-02-10T07:25:38Z |
| mal-2026-821 | Malicious code in jwtdotenv (npm) | 2026-02-09T17:27:19Z | 2026-02-23T04:21:33Z |
| mal-2026-820 | Malicious code in json-web-sources (npm) | 2026-02-09T17:25:32Z | 2026-02-23T04:21:33Z |
| mal-2026-819 | Malicious code in json-mapping-sources (npm) | 2026-02-09T17:25:32Z | 2026-03-19T12:23:21Z |
| mal-2026-822 | Malicious code in react-svg-handler (npm) | 2026-02-09T17:16:37Z | 2026-02-23T04:21:35Z |
| mal-2026-818 | Malicious code in thecorrectjames (PyPI) | 2026-02-09T16:25:34Z | 2026-02-09T16:25:50Z |
| mal-2026-817 | Malicious code in ctf-pipline-test (PyPI) | 2026-02-09T15:35:47Z | 2026-02-09T16:28:03Z |
| mal-2026-816 | Malicious code in @skyeng/libs (npm) | 2026-02-09T15:12:24Z | 2026-03-19T12:23:18Z |
| mal-2026-814 | Malicious code in http-notifier-test (PyPI) | 2026-02-09T09:29:06Z | 2026-02-09T09:29:06Z |
| mal-2026-815 | Malicious code in skydeo (PyPI) | 2026-02-09T09:12:05Z | 2026-02-09T09:12:05Z |
| mal-2026-813 | Malicious code in teligram (PyPI) | 2026-02-08T22:19:04Z | 2026-02-08T22:19:04Z |
| mal-2026-812 | Malicious code in hardixx-code (PyPI) | 2026-02-08T21:21:34Z | 2026-02-08T22:46:48Z |
| mal-2026-811 | Malicious code in grokwrapper (PyPI) | 2026-02-08T10:34:16Z | 2026-02-26T09:50:46Z |
| mal-2026-809 | Malicious code in ccxt-bullish (PyPI) | 2026-02-08T07:47:19Z | 2026-02-08T07:47:19Z |
| mal-2026-810 | Malicious code in thread-pipeline-test (PyPI) | 2026-02-08T07:41:19Z | 2026-02-08T07:41:19Z |
| mal-2026-808 | Malicious code in carcent (PyPI) | 2026-02-06T15:23:01Z | 2026-02-06T15:23:01Z |
| mal-2026-807 | Malicious code in web3-sinon (npm) | 2026-02-06T14:44:08Z | 2026-02-06T18:21:39Z |
| mal-2026-806 | Malicious code in web3-chain-sinon (npm) | 2026-02-06T14:44:08Z | 2026-02-06T18:21:39Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0934 | poppler: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-04T22:00:00.000+00:00 | 2025-05-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0933 | Hashicorp Vault: Mehrere Schwachstellen | 2025-05-04T22:00:00.000+00:00 | 2025-05-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0932 | Linux Kernel: Mehrere Schwachstellen | 2025-05-04T22:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0931 | Red Hat Enterprise Linux (yelp): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-04T22:00:00.000+00:00 | 2025-11-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0930 | IBM Business Automation Workflow: Mehrere Schwachstellen | 2025-05-04T22:00:00.000+00:00 | 2025-05-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0929 | Webmin: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-04T22:00:00.000+00:00 | 2025-05-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0928 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2025-05-04T22:00:00.000+00:00 | 2025-05-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0927 | NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-04T22:00:00.000+00:00 | 2025-05-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0926 | IBM MQ: Schwachstelle ermöglicht Denial of Service | 2025-05-04T22:00:00.000+00:00 | 2025-05-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0925 | Microsoft Edge: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0924 | IBM Cognos Analytics: Mehrere Schwachstellen | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0923 | Elasticsearch: Schwachstelle ermöglicht Denial of Service | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0922 | Linux Kernel: Mehrere Schwachstellen | 2025-05-01T22:00:00.000+00:00 | 2026-03-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0921 | Microsoft Azure: Mehrere Schwachstellen | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0920 | Symantec Endpoint Protection (ERASER Engine): Schwachstelle ermöglicht Privilegieneskalation | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0919 | LogStash: Schwachstelle ermöglicht Codeausführung | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0918 | SonicWall SMA1000 Appliance: Schwachstelle ermöglicht Manipulation von Daten | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0917 | Kibana: Mehrere Schwachstellen | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0916 | Microsoft Dynamics 365: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0915 | Debian Linux (libuv und Node.js): Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-05-01T22:00:00.000+00:00 | 2025-08-31T22:00:00.000+00:00 |
| wid-sec-w-2025-0914 | Ruby: Schwachstelle ermöglicht Denial of Service | 2025-05-01T22:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0913 | Mozilla Firefox Focus für iOS: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-05-01T22:00:00.000+00:00 | 2025-05-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0912 | IBM DB2: Schwachstelle ermöglicht Denial of Service | 2025-05-01T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0910 | IBM Operational Decision Manager: Schwachstelle ermöglicht Cross-Site Scripting | 2025-04-29T22:00:00.000+00:00 | 2025-04-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0909 | Docker Desktop: Mehrere Schwachstellen | 2025-04-29T22:00:00.000+00:00 | 2025-04-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0908 | Keycloack: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-04-29T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0907 | xwiki: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-04-29T22:00:00.000+00:00 | 2025-04-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0906 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2025-04-29T22:00:00.000+00:00 | 2025-05-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0905 | Mattermost: Mehrere Schwachstellen | 2025-04-29T22:00:00.000+00:00 | 2025-06-11T22:00:00.000+00:00 |
| wid-sec-w-2025-0904 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-04-29T22:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-310-02 | Mitsubishi Electric GT14 Model of GOT1000 Series | 2020-11-05T00:00:00.000000Z | 2020-11-05T00:00:00.000000Z |
| icsa-20-310-01 | WECON PLC Editor | 2020-11-05T00:00:00.000000Z | 2020-11-05T00:00:00.000000Z |
| icsa-20-308-03 | ARC Informatique PcVue (Update A) | 2020-11-03T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-308-02 | NEXCOM NIO50 | 2020-11-03T00:00:00.000000Z | 2020-11-03T00:00:00.000000Z |
| icsa-20-308-01 | WAGO Series 750-88x and 750-352 (Update A) | 2020-11-03T00:00:00.000000Z | 2020-12-15T00:00:00.000000Z |
| icsa-20-303-01 | Mitsubishi Electric MELSEC iQ-R, Q, and L Series (Update E) | 2020-10-29T06:00:00.000000Z | 2024-09-05T06:00:00.000000Z |
| icsa-20-303-02 | Mitsubishi Electric MELSEC iQ-R | 2020-10-29T00:00:00.000000Z | 2020-10-29T00:00:00.000000Z |
| icsa-20-301-01 | SHUN HU Technology JUUKO Industrial Radio Remote Control | 2020-10-27T00:00:00.000000Z | 2020-10-27T00:00:00.000000Z |
| icsma-20-296-02 | B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus | 2020-10-22T00:00:00.000000Z | 2020-10-22T00:00:00.000000Z |
| icsma-20-296-01 | B. Braun OnlineSuite | 2020-10-22T00:00:00.000000Z | 2020-10-22T00:00:00.000000Z |
| icsa-20-294-02 | Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer | 2020-10-20T00:00:00.000000Z | 2020-10-20T00:00:00.000000Z |
| icsa-20-294-01 | Rockwell Automation 1794-AENT Flex I/O Series B | 2020-10-20T00:00:00.000000Z | 2020-10-20T00:00:00.000000Z |
| icsa-20-289-02 | Advantech R-SeeNet | 2020-10-15T00:00:00.000000Z | 2020-10-15T00:00:00.000000Z |
| icsa-20-289-01 | Advantech WebAccess/SCADA | 2020-10-15T00:00:00.000000Z | 2020-10-15T00:00:00.000000Z |
| icsa-20-287-06 | Siemens SIPORT MP | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-05 | Siemens Desigo Insight | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-04 | Fieldcomm Group HART-IP and hipserver | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-03 | Flexera InstallShield | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-02 | LCDS LAquis SCADA | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-287-01 | MOXA NPort IAW5000A-I/O Series | 2020-10-13T00:00:00.000000Z | 2020-10-13T00:00:00.000000Z |
| icsa-20-282-01 | Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A) | 2020-10-08T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-280-01 | Rockwell Automation ISaGRAF5 Runtime (Update A) | 2020-10-06T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsa-20-273-03 | B&R Automation SiteManager and GateManager | 2020-09-29T00:00:00.000000Z | 2020-09-29T00:00:00.000000Z |
| icsa-20-273-02 | Yokogawa WideField3 | 2020-09-29T00:00:00.000000Z | 2020-09-29T00:00:00.000000Z |
| icsa-20-273-01 | ICSA-20-273-01_MB Connect line mbCONNECT24, mymbCONNECT24 | 2020-09-29T00:00:00.000000Z | 2020-09-29T00:00:00.000000Z |
| icsa-20-266-02 | GE Reason S20 Ethernet Switch | 2020-09-22T00:00:00.000000Z | 2020-09-22T00:00:00.000000Z |
| icsa-20-266-01 | GE Digital APM Classic | 2020-09-22T00:00:00.000000Z | 2020-09-22T00:00:00.000000Z |
| icsma-20-261-01 | ICSMA-20-261-01_Philips Clinical Collaboration Platform | 2020-09-17T00:00:00.000000Z | 2020-09-17T00:00:00.000000Z |
| icsa-20-261-01 | Advantech WebAccess Node | 2020-09-17T00:00:00.000000Z | 2020-09-17T00:00:00.000000Z |
| icsma-20-254-01 | Philips Patient Monitoring Devices (Update C) | 2020-09-10T06:00:00.000000Z | 2023-12-14T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20181017-aironet-dos | Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability | 2018-10-17T16:00:00+00:00 | 2018-10-17T16:00:00+00:00 |
| cisco-sa-20181003-webex-xss | Cisco Webex Centers Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-webex-rce | Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities | 2018-10-03T16:00:00+00:00 | 2018-10-10T15:16:00+00:00 |
| cisco-sa-20181003-unity-dos | Cisco Unity Connection File Upload Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-uipp-7900-xss | Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ucsd-xss | Cisco UCS Director Stored Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-uc-xss | Cisco Unity Connection Stored Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-sd-wan-bypass | Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-prime-id | Cisco Prime Infrastructure Information Disclosure Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-pi-tftp | Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-pi-id | Cisco Prime Infrastructure Information Disclosure Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-phy-ipv4-dos | Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T21:00:00+00:00 |
| cisco-sa-20181003-ise-mult-vulns | Multiple Vulnerabilities in Cisco Identity Services Engine | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-iosxr-dos | Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ind-dos | Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ind-csrf | Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-imcs-ucsd-id | Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-imcs-ucsd-dos | Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hyperflex-uda | Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hyperflex-secret | Cisco HyperFlex Software Static Signing Key Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hyperflex-info | Cisco HyperFlex World-Readable Sensitive Information Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hyperflex-clickjacking | Cisco HyperFlex UI Clickjacking Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hcmf-csrf | Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ftd-inspect-dos | Cisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-fp-smb-snort | Cisco Firepower System Software Detection Engine Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-fp-cmd-injection | Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-express-vcs-rce | Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-er-ucm-redirect | Multiple Cisco Unified Communications Products Open Redirect Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-dna-unauth-access | Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-dna-auth-bypass | Cisco Digital Network Architecture Center Authentication Bypass Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-54899 | Microsoft Excel Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-16T00:00:00.000Z |
| msrc_cve-2025-54898 | Microsoft Excel Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-16T00:00:00.000Z |
| msrc_cve-2025-54897 | Microsoft SharePoint Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54896 | Microsoft Excel Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-16T00:00:00.000Z |
| msrc_cve-2025-54895 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54894 | Local Security Authority Subsystem Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54116 | Windows MultiPoint Services Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54115 | Windows Hyper-V Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54114 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-11-21T00:00:00.000Z |
| msrc_cve-2025-54113 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54112 | Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-54111 | Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54110 | Windows Kernel Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54109 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54108 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54107 | MapUrlToZone Security Feature Bypass Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54106 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54105 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54104 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54103 | Windows Management Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54102 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54101 | Windows SMB Client Remote Code Execution Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54099 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-11-20T00:00:00.000Z |
| msrc_cve-2025-54098 | Windows Hyper-V Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54097 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54096 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54095 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54094 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54093 | Windows TCP/IP Driver Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| msrc_cve-2025-54092 | Windows Hyper-V Elevation of Privilege Vulnerability | 2025-09-09T00:00:00.000Z | 2025-09-09T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14437-1 | python310-Werkzeug-3.0.6-1.1 on GA media | 2024-10-29T00:00:00Z | 2024-10-29T00:00:00Z |
| opensuse-su-2024:14436-1 | openvpn-2.6.10-2.1 on GA media | 2024-10-29T00:00:00Z | 2024-10-29T00:00:00Z |
| opensuse-su-2024:14435-1 | corepack22-22.10.0-1.1 on GA media | 2024-10-29T00:00:00Z | 2024-10-29T00:00:00Z |
| opensuse-su-2024:0341-1 | Security update for chromium | 2024-10-28T15:20:35Z | 2024-10-28T15:20:35Z |
| opensuse-su-2024:14434-1 | python314-3.14.0~a1-1.1 on GA media | 2024-10-28T00:00:00Z | 2024-10-28T00:00:00Z |
| opensuse-su-2024:14433-1 | python310-pytest-html-4.1.1-3.1 on GA media | 2024-10-28T00:00:00Z | 2024-10-28T00:00:00Z |
| opensuse-su-2024:14432-1 | java-11-openjdk-11.0.25.0-1.1 on GA media | 2024-10-28T00:00:00Z | 2024-10-28T00:00:00Z |
| opensuse-su-2024:14431-1 | grafana-11.3.0-1.1 on GA media | 2024-10-28T00:00:00Z | 2024-10-28T00:00:00Z |
| opensuse-su-2024:14430-1 | python313-3.13.0-3.1 on GA media | 2024-10-27T00:00:00Z | 2024-10-27T00:00:00Z |
| opensuse-su-2024:14429-1 | Botan-3.6.0-1.1 on GA media | 2024-10-27T00:00:00Z | 2024-10-27T00:00:00Z |
| opensuse-su-2024:14428-1 | python39-3.9.20-4.1 on GA media | 2024-10-25T00:00:00Z | 2024-10-25T00:00:00Z |
| opensuse-su-2024:14427-1 | python310-3.10.15-2.1 on GA media | 2024-10-25T00:00:00Z | 2024-10-25T00:00:00Z |
| opensuse-su-2024:14426-1 | python310-virtualenv-20.26.6-1.1 on GA media | 2024-10-25T00:00:00Z | 2024-10-25T00:00:00Z |
| opensuse-su-2024:14425-1 | nodejs-electron-31.7.2-1.1 on GA media | 2024-10-25T00:00:00Z | 2024-10-25T00:00:00Z |
| opensuse-su-2024:14424-1 | gitoxide-0.38.0-1.1 on GA media | 2024-10-23T00:00:00Z | 2024-10-23T00:00:00Z |
| opensuse-su-2024:14423-1 | ghostscript-10.04.0-1.1 on GA media | 2024-10-23T00:00:00Z | 2024-10-23T00:00:00Z |
| opensuse-su-2024:14422-1 | NetworkManager-applet-libreswan-1.2.24-1.1 on GA media | 2024-10-23T00:00:00Z | 2024-10-23T00:00:00Z |
| opensuse-su-2024:14421-1 | python310-mysql-connector-python-9.1.0-1.1 on GA media | 2024-10-22T00:00:00Z | 2024-10-22T00:00:00Z |
| opensuse-su-2024:14420-1 | podman-5.2.4-3.1 on GA media | 2024-10-22T00:00:00Z | 2024-10-22T00:00:00Z |
| opensuse-su-2024:14419-1 | libeverest-3.6.2-1.1 on GA media | 2024-10-21T00:00:00Z | 2024-10-21T00:00:00Z |
| opensuse-su-2024:14418-1 | buildah-1.37.5-1.1 on GA media | 2024-10-21T00:00:00Z | 2024-10-21T00:00:00Z |
| opensuse-su-2024:14417-1 | python310-starlette-0.41.0-1.1 on GA media | 2024-10-20T00:00:00Z | 2024-10-20T00:00:00Z |
| opensuse-su-2024:14416-1 | libopenssl-3-devel-3.1.4-15.1 on GA media | 2024-10-20T00:00:00Z | 2024-10-20T00:00:00Z |
| opensuse-su-2024:14415-1 | MozillaFirefox-131.0.3-1.1 on GA media | 2024-10-20T00:00:00Z | 2024-10-20T00:00:00Z |
| opensuse-su-2024:14414-1 | chromedriver-130.0.6723.58-1.1 on GA media | 2024-10-19T00:00:00Z | 2024-10-19T00:00:00Z |
| opensuse-su-2024:0337-1 | Security update for chromium | 2024-10-18T13:29:47Z | 2024-10-18T13:29:47Z |
| opensuse-su-2024:14413-1 | python3-virtualbox-7.1.4-1.1 on GA media | 2024-10-18T00:00:00Z | 2024-10-18T00:00:00Z |
| opensuse-su-2024:14412-1 | valkey-8.0.1-1.1 on GA media | 2024-10-18T00:00:00Z | 2024-10-18T00:00:00Z |
| opensuse-su-2024:14411-1 | qemu-9.1.0-2.1 on GA media | 2024-10-18T00:00:00Z | 2024-10-18T00:00:00Z |
| opensuse-su-2024:14410-1 | nodejs-electron-31.7.1-1.1 on GA media | 2024-10-18T00:00:00Z | 2024-10-18T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:20961 | Red Hat Security Advisory: xorg-x11-server security update | 2025-11-11T15:10:03+00:00 | 2026-03-18T03:09:32+00:00 |
| rhsa-2025:20960 | Red Hat Security Advisory: xorg-x11-server-Xwayland security update | 2025-11-11T15:09:24+00:00 | 2026-03-18T03:09:30+00:00 |
| rhsa-2025:20956 | Red Hat Security Advisory: libtiff security update | 2025-11-11T15:08:53+00:00 | 2026-04-13T18:40:54+00:00 |
| rhsa-2025:20958 | Red Hat Security Advisory: tigervnc security update | 2025-11-11T15:07:34+00:00 | 2026-03-18T03:09:13+00:00 |
| rhsa-2025:20955 | Red Hat Security Advisory: redis:7 security update | 2025-11-11T15:07:28+00:00 | 2026-03-18T03:09:07+00:00 |
| rhsa-2025:20957 | Red Hat Security Advisory: runc security update | 2025-11-11T15:07:24+00:00 | 2026-04-14T02:01:14+00:00 |
| rhsa-2025:20959 | Red Hat Security Advisory: libsoup security update | 2025-11-11T15:07:23+00:00 | 2026-03-19T17:33:53+00:00 |
| rhsa-2025:20963 | Red Hat Security Advisory: qt5-qt3d security update | 2025-11-11T15:06:58+00:00 | 2026-03-18T03:09:42+00:00 |
| rhsa-2025:20962 | Red Hat Security Advisory: pcs security update | 2025-11-11T15:05:08+00:00 | 2026-04-08T07:55:29+00:00 |
| rhsa-2025:20945 | Red Hat Security Advisory: vim security update | 2025-11-11T14:14:42+00:00 | 2026-03-18T03:07:53+00:00 |
| rhsa-2025:20943 | Red Hat Security Advisory: libssh security update | 2025-11-11T14:12:42+00:00 | 2026-03-18T03:07:51+00:00 |
| rhba-2025:20916 | Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update | 2025-11-11T14:10:19+00:00 | 2026-04-13T17:25:55+00:00 |
| rhsa-2025:20936 | Red Hat Security Advisory: sqlite security update | 2025-11-11T14:06:37+00:00 | 2026-04-02T23:26:42+00:00 |
| rhsa-2025:20928 | Red Hat Security Advisory: ipa security update | 2025-11-11T14:05:57+00:00 | 2026-03-19T17:33:52+00:00 |
| rhsa-2025:20935 | Red Hat Security Advisory: squid security update | 2025-11-11T14:05:53+00:00 | 2026-03-18T03:08:33+00:00 |
| rhsa-2025:20909 | Red Hat Security Advisory: podman security update | 2025-11-11T13:58:42+00:00 | 2026-04-13T19:59:46+00:00 |
| rhsa-2025:20926 | Red Hat Security Advisory: redis security update | 2025-11-11T13:58:33+00:00 | 2026-03-18T03:07:50+00:00 |
| rhsa-2025:20922 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-11-11T13:58:27+00:00 | 2026-04-02T19:16:30+00:00 |
| rhsa-2025:19890 | Red Hat Security Advisory: OpenShift Container Platform 4.20.3 bug fix and security update | 2025-11-11T13:19:56+00:00 | 2026-01-26T12:01:13+00:00 |
| rhsa-2025:20478 | Red Hat Security Advisory: zziplib security update | 2025-11-11T11:39:12+00:00 | 2026-03-18T03:05:13+00:00 |
| rhsa-2025:20838 | Red Hat Security Advisory: zziplib security update | 2025-11-11T09:45:24+00:00 | 2026-03-18T03:04:55+00:00 |
| rhsa-2025:20801 | Red Hat Security Advisory: libtiff security update | 2025-11-11T09:33:14+00:00 | 2026-04-09T20:37:23+00:00 |
| rhba-2025:20841 | Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update | 2025-11-11T09:19:58+00:00 | 2026-01-22T12:57:00+00:00 |
| rhsa-2025:20518 | Red Hat Security Advisory: kernel security update | 2025-11-11T09:13:24+00:00 | 2026-04-11T13:26:59+00:00 |
| rhsa-2025:20559 | Red Hat Security Advisory: shadow-utils security update | 2025-11-11T09:01:50+00:00 | 2026-03-18T03:00:38+00:00 |
| rhsa-2025:20532 | Red Hat Security Advisory: grub2 security update | 2025-11-11T08:55:23+00:00 | 2026-03-18T02:58:33+00:00 |
| rhsa-2025:20155 | Red Hat Security Advisory: binutils security update | 2025-11-11T08:32:02+00:00 | 2026-03-18T03:01:51+00:00 |
| rhsa-2025:20126 | Red Hat Security Advisory: openssh security update | 2025-11-11T08:30:01+00:00 | 2026-04-03T22:28:33+00:00 |
| rhsa-2025:20181 | Red Hat Security Advisory: pam security update | 2025-11-11T08:27:02+00:00 | 2026-03-18T03:03:03+00:00 |
| rhsa-2025:20095 | Red Hat Security Advisory: kernel security update | 2025-11-11T08:21:57+00:00 | 2026-04-04T06:22:19+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4029-1 | Security update for squid | 2025-11-10T11:44:34Z | 2025-11-10T11:44:34Z |
| suse-su-2025:4026-1 | Security update for squid | 2025-11-10T09:12:43Z | 2025-11-10T09:12:43Z |
| suse-su-2025:4024-1 | Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) | 2025-11-10T08:14:25Z | 2025-11-10T08:14:25Z |
| suse-su-2025:4016-1 | Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP3) | 2025-11-10T08:13:30Z | 2025-11-10T08:13:30Z |
| suse-su-2025:4031-1 | Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) | 2025-11-10T08:12:19Z | 2025-11-10T08:12:19Z |
| suse-su-2025:4006-1 | Security update for MozillaThunderbird | 2025-11-10T08:00:18Z | 2025-11-10T08:00:18Z |
| suse-su-2025:4005-1 | Security update for java-1_8_0-openj9 | 2025-11-10T01:04:17Z | 2025-11-10T01:04:17Z |
| suse-su-2025:4004-1 | Security update for the Linux Kernel (Live Patch 61 for SLE 15 SP3) | 2025-11-09T07:03:51Z | 2025-11-09T07:03:51Z |
| suse-su-2025:4003-1 | Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5) | 2025-11-09T05:04:13Z | 2025-11-09T05:04:13Z |
| suse-su-2025:4001-1 | Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7) | 2025-11-09T01:33:43Z | 2025-11-09T01:33:43Z |
| suse-su-2025:4000-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-11-07T17:04:39Z | 2025-11-07T17:04:39Z |
| suse-su-2025:3998-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP7) | 2025-11-07T16:04:09Z | 2025-11-07T16:04:09Z |
| suse-su-2025:3997-1 | Security update for java-17-openjdk | 2025-11-07T15:50:20Z | 2025-11-07T15:50:20Z |
| suse-su-2025:3996-1 | Security update for java-11-openjdk | 2025-11-07T15:48:31Z | 2025-11-07T15:48:31Z |
| suse-su-2025:3995-1 | Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7) | 2025-11-07T15:33:40Z | 2025-11-07T15:33:40Z |
| suse-su-2025:3989-1 | Security update for tiff | 2025-11-07T13:44:29Z | 2025-11-07T13:44:29Z |
| suse-su-2025:3987-1 | Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP7) | 2025-11-07T13:03:43Z | 2025-11-07T13:03:43Z |
| suse-su-2025:3986-1 | Security update for gpg2 | 2025-11-07T10:31:06Z | 2025-11-07T10:31:06Z |
| suse-su-2025:3985-1 | Security update for ImageMagick | 2025-11-07T10:30:54Z | 2025-11-07T10:30:54Z |
| suse-su-2025:3983-1 | Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6) | 2025-11-06T21:33:47Z | 2025-11-06T21:33:47Z |
| suse-su-2025:3978-1 | Security update for ImageMagick | 2025-11-06T15:43:10Z | 2025-11-06T15:43:10Z |
| suse-su-2025:3976-1 | Security update for bind | 2025-11-06T13:14:37Z | 2025-11-06T13:14:37Z |
| suse-su-2025:3970-1 | Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP6) | 2025-11-06T12:03:46Z | 2025-11-06T12:03:46Z |
| suse-su-2025:20991-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-11-06T11:20:15Z | 2025-11-06T11:20:15Z |
| suse-su-2025:20960-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-11-06T11:20:15Z | 2025-11-06T11:20:15Z |
| suse-su-2025:20959-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-11-06T11:20:15Z | 2025-11-06T11:20:15Z |
| suse-su-2025:20971-1 | Security update for tiff | 2025-11-06T11:07:55Z | 2025-11-06T11:07:55Z |
| suse-su-2025:3966-1 | Security update for fetchmail | 2025-11-06T10:48:18Z | 2025-11-06T10:48:18Z |
| suse-su-2025:3965-1 | Security update for java-1_8_0-ibm | 2025-11-06T10:47:33Z | 2025-11-06T10:47:33Z |
| suse-su-2025:3964-1 | Security update for java-1_8_0-ibm | 2025-11-06T10:46:49Z | 2025-11-06T10:46:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2023:6077 | Moderate: toolbox security update | 2023-10-24T00:00:00Z | 2023-10-25T11:22:46Z |
| alsa-2023:5998 | Important: python39:3.9 and python39-devel:3.9 security update | 2023-10-23T00:00:00Z | 2023-10-25T07:21:28Z |
| alsa-2023:5997 | Important: python3 security update | 2023-10-23T00:00:00Z | 2023-10-25T09:13:18Z |
| alsa-2023:5994 | Important: python27:2.7 security update | 2023-10-23T00:00:00Z | 2023-10-25T13:28:45Z |
| alsa-2023:5989 | Important: varnish security update | 2023-10-23T00:00:00Z | 2023-10-25T14:24:57Z |
| alsa-2023:5929 | Important: tomcat security update | 2023-10-19T00:00:00Z | 2023-10-20T08:48:10Z |
| alsa-2023:5928 | Important: tomcat security update | 2023-10-19T00:00:00Z | 2023-10-20T11:16:25Z |
| alsa-2023:5927 | Important: php:8.0 security update | 2023-10-19T00:00:00Z | 2023-10-20T08:26:26Z |
| alsa-2023:5926 | Important: php security update | 2023-10-19T00:00:00Z | 2023-10-20T08:08:04Z |
| alsa-2023:5924 | Important: varnish security update | 2023-10-19T00:00:00Z | 2023-10-20T07:42:51Z |
| alsa-2023:5869 | Important: nodejs:18 security update | 2023-10-18T00:00:00Z | 2023-10-19T15:44:31Z |
| alsa-2023:5867 | Moderate: grafana security update | 2023-10-18T00:00:00Z | 2023-10-19T15:22:29Z |
| alsa-2023:5863 | Moderate: grafana security update | 2023-10-18T00:00:00Z | 2023-10-19T14:58:07Z |
| alsa-2023:5850 | Important: nodejs:16 security update | 2023-10-18T00:00:00Z | 2023-10-19T14:20:28Z |
| alsa-2023:5849 | Important: nodejs:18 security update | 2023-10-18T00:00:00Z | 2023-10-19T14:05:01Z |
| alsa-2023:5838 | Important: nghttp2 security update | 2023-10-18T00:00:00Z | 2023-10-19T06:29:05Z |
| alsa-2023:5837 | Important: nghttp2 security update | 2023-10-18T00:00:00Z | 2023-10-19T08:08:20Z |
| alsa-2023:5753 | Moderate: java-17-openjdk security and bug fix update | 2023-10-18T00:00:00Z | 2023-10-20T19:28:46Z |
| alsa-2023:5751 | Moderate: java-17-openjdk security and bug fix update | 2023-10-18T00:00:00Z | 2023-10-20T13:55:00Z |
| alsa-2023:5744 | Moderate: java-11-openjdk security and bug fix update | 2023-10-18T00:00:00Z | 2023-10-20T19:54:50Z |
| alsa-2023:5742 | Moderate: java-11-openjdk security and bug fix update | 2023-10-18T00:00:00Z | 2023-10-20T14:22:56Z |
| alsa-2023:5733 | Moderate: java-1.8.0-openjdk security update | 2023-10-18T00:00:00Z | 2023-10-20T20:16:40Z |
| alsa-2023:5731 | Moderate: java-1.8.0-openjdk security update | 2023-10-18T00:00:00Z | 2023-10-20T14:50:09Z |
| alsa-2023:5790 | Important: python-reportlab security update | 2023-10-17T00:00:00Z | 2023-10-18T18:52:58Z |
| alsa-2023:5765 | Important: nodejs security update | 2023-10-17T00:00:00Z | 2023-10-17T15:18:51Z |
| alsa-2023:5763 | Important: curl security update | 2023-10-17T00:00:00Z | 2023-10-17T14:51:19Z |
| alsa-2023:5749 | Important: .NET 7.0 security update | 2023-10-16T00:00:00Z | 2023-10-17T10:14:29Z |
| alsa-2023:5738 | Important: go-toolset and golang security and bug fix update | 2023-10-16T00:00:00Z | 2023-10-17T06:57:01Z |
| alsa-2023:5721 | Important: go-toolset:rhel8 security update | 2023-10-16T00:00:00Z | 2023-10-17T10:46:53Z |
| alsa-2023:5713 | Moderate: nginx:1.22 security update | 2023-10-16T00:00:00Z | 2023-10-17T11:05:23Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2021-764 | Stack-buffer-overflow in TranslateNumber_1 | 2021-05-15T00:00:11.841899Z | 2022-04-13T03:04:34.216007Z |
| osv-2021-760 | Heap-buffer-overflow in std::__1::char_traits<char>::length | 2021-05-14T00:00:07.433655Z | 2022-04-13T03:04:42.685258Z |
| osv-2021-757 | Use-of-uninitialized-value in nn_check_initialized | 2021-05-12T00:01:05.638739Z | 2022-04-13T03:04:31.416903Z |
| osv-2021-750 | Heap-double-free in flb_free | 2021-05-11T00:01:09.150660Z | 2022-04-13T03:04:38.361302Z |
| osv-2021-745 | Heap-buffer-overflow in skip_to_next_entry | 2021-05-11T00:00:17.714291Z | 2022-04-13T03:04:42.392317Z |
| osv-2021-739 | Stack-buffer-overflow in flb_sds_cat | 2021-05-08T00:01:15.452663Z | 2022-04-13T03:04:38.249988Z |
| osv-2021-736 | Stack-use-after-return in zend_fiber_suspend_context | 2021-05-08T00:00:26.963755Z | 2023-02-24T04:50:30.323847Z |
| osv-2021-735 | Use-of-uninitialized-value in decode_CABAC_FL_bypass | 2021-05-08T00:00:14.355747Z | 2026-04-10T14:06:44.826192Z |
| osv-2021-732 | Heap-buffer-overflow in readstat_convert | 2021-05-06T00:00:30.987446Z | 2023-02-21T00:31:59.857368Z |
| osv-2021-731 | Heap-use-after-free in cleanup_live_vars | 2021-05-05T00:01:09.411211Z | 2022-04-13T03:04:33.400422Z |
| osv-2021-729 | Global-buffer-overflow in libfsext_inode_read_data | 2021-05-05T00:00:31.360258Z | 2022-04-13T03:04:41.902360Z |
| osv-2021-728 | UNKNOWN WRITE in _fini | 2021-05-05T00:00:31.085366Z | 2022-04-13T03:04:30.671774Z |
| osv-2021-727 | UNKNOWN READ in MEM_read32 | 2021-05-05T00:00:30.975717Z | 2022-04-13T03:04:31.680876Z |
| osv-2021-725 | UNKNOWN READ in libfsext_directory_entry_read_data | 2021-05-05T00:00:09.753732Z | 2022-04-13T03:04:41.897348Z |
| osv-2021-719 | Heap-buffer-overflow in tt_face_get_paint_layers | 2021-05-02T00:01:07.686676Z | 2022-04-13T03:04:34.916720Z |
| osv-2021-717 | Heap-use-after-free in real_param | 2021-05-02T00:00:44.749274Z | 2022-04-13T04:13:00.289724Z |
| osv-2021-713 | Heap-use-after-free in AK::StringView::StringView | 2021-05-02T00:00:26.435557Z | 2022-04-13T03:04:32.258179Z |
| osv-2021-710 | Heap-use-after-free in iov_from_buf_full | 2021-05-01T00:00:22.994253Z | 2022-07-09T00:39:34.474998Z |
| osv-2021-703 | Container-overflow in unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_ | 2021-04-29T00:00:31.595556Z | 2022-04-13T03:04:39.609564Z |
| osv-2021-702 | Heap-double-free in flb_free | 2021-04-29T00:00:25.185079Z | 2022-04-13T03:36:08.894942Z |
| osv-2021-701 | Heap-use-after-free in m3_FreeRuntime | 2021-04-29T00:00:23.083315Z | 2022-04-13T03:04:30.646328Z |
| osv-2021-700 | UNKNOWN READ in ReadLEB_u32 | 2021-04-29T00:00:12.162949Z | 2022-04-13T03:04:30.651451Z |
| osv-2021-699 | UNKNOWN WRITE in m3_FreeModule | 2021-04-28T00:01:11.169950Z | 2022-04-13T03:04:30.676815Z |
| osv-2021-698 | UNKNOWN READ in m3_Realloc | 2021-04-28T00:01:10.793206Z | 2022-04-13T03:04:30.686964Z |
| osv-2021-696 | UNKNOWN READ in ntlm_decode_type2_target | 2021-04-28T00:00:54.883431Z | 2022-04-13T03:04:42.867684Z |
| osv-2021-695 | Stack-buffer-overflow in XCFImageFormat::loadTileRLE | 2021-04-28T00:00:28.555303Z | 2022-04-13T03:04:42.517182Z |
| osv-2021-689 | UNKNOWN WRITE in Runtime_Release | 2021-04-27T00:01:03.314259Z | 2022-04-13T03:04:30.620813Z |
| osv-2021-688 | Segv on unknown address in std::__Fuzzer::basic_string<char, std::__Fuzzer::char_traits<char>, std::__Fuzze | 2021-04-27T00:01:02.966143Z | 2022-04-13T03:04:30.661693Z |
| osv-2021-687 | UNKNOWN WRITE in InitDataSegments | 2021-04-26T00:00:14.214692Z | 2022-04-13T03:04:30.636114Z |
| osv-2021-679 | Heap-buffer-overflow in strlcpy | 2021-04-23T00:01:10.860169Z | 2022-04-13T03:04:40.899383Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-jupyterhub-2024-28233 | XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing | 2024-04-03T10:52:35.170Z | 2025-09-03T09:06:51.338Z |
| bit-gitlab-2024-2818 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-04-03T10:50:50.059Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-24748 | Disclosure of the existence of secret subcategories in Discourse | 2024-04-01T14:04:47.201Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-24827 | No rate limits on POST /uploads endpoint in Discourse | 2024-04-01T14:04:36.691Z | 2025-08-27T09:06:48.117Z |
| bit-discourse-2024-27085 | Denial of service through invites in Discourse | 2024-04-01T14:04:24.759Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-27100 | Denial of service via Staff Actions in Discourse | 2024-04-01T14:04:13.082Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-28242 | Disclosure of the existence of secret categories with custom backgrounds in Discourse | 2024-04-01T14:04:02.275Z | 2025-08-27T09:06:48.117Z |
| bit-zookeeper-2024-23944 | Apache ZooKeeper: Information disclosure in persistent watcher handling | 2024-03-31T18:32:55.925Z | 2025-05-20T10:02:07.006Z |
| bit-prestashop-2024-26129 | Prestashop vulnerable to path disclosure in JavaScript variable | 2024-03-31T18:26:56.335Z | 2025-05-20T10:02:07.006Z |
| bit-parse-2024-27298 | Parse Server literalizeRegexPart SQL Injection | 2024-03-31T18:25:01.637Z | 2026-03-11T18:56:50.865Z |
| bit-moodle-2024-25978 | Msa-24-0001: denial of service risk in file picker unzip functionality | 2024-03-31T18:22:52.148Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-25979 | Msa-24-0002: forum search accepted random parameters in its url | 2024-03-31T18:22:42.352Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-25980 | Msa-24-0003: h5p attempts report did not respect activity group settings | 2024-03-31T18:22:30.148Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-25981 | Msa-24-0004: forum export did not respect activity group settings | 2024-03-31T18:22:20.962Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-25982 | Msa-24-0005: csrf risk in language import utility | 2024-03-31T18:22:12.259Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-25983 | Msa-24-0006: idor on dashboard comments block | 2024-03-31T18:22:02.363Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-27132 | Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. | 2024-03-31T18:21:50.638Z | 2026-02-11T09:09:18.507Z |
| bit-mlflow-2024-27133 | Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. | 2024-03-31T18:21:40.530Z | 2026-02-11T09:09:18.507Z |
| bit-mastodon-2024-25618 | External OpenID Connect Account Takeover by E-Mail Change in mastodon | 2024-03-31T18:21:20.227Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2024-25619 | Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon | 2024-03-31T18:21:09.827Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2024-25623 | Lack of media type verification of Activity Streams objects allows impersonation of remote accounts | 2024-03-31T18:20:59.562Z | 2025-05-20T10:02:07.006Z |
| bit-helm-2024-25620 | Dependency management path traversal in helm | 2024-03-31T18:18:57.477Z | 2025-05-20T10:02:07.006Z |
| bit-helm-2024-26147 | Helm's Missing YAML Content Leads To Panic | 2024-03-31T18:18:46.734Z | 2025-05-20T10:02:07.006Z |
| bit-airflow-2024-26280 | Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs) | 2024-03-31T18:16:59.178Z | 2025-05-20T10:02:07.006Z |
| bit-airflow-2024-27906 | Apache Airflow: Dag Code and Import Error Permissions Ignored | 2024-03-31T18:16:47.034Z | 2025-05-20T10:02:07.006Z |
| bit-airflow-2024-28746 | Apache Airflow: Ignored Airflow Permissions | 2024-03-31T18:16:36.634Z | 2025-05-20T10:02:07.006Z |
| bit-grafana-2024-1313 | Users outside an organization can delete a snapshot with its key | 2024-03-28T07:19:10.064Z | 2025-05-20T10:02:07.006Z |
| bit-airflow-2024-29735 | Apache Airflow: Potentially harmful permission changing by log task handler | 2024-03-28T07:16:52.369Z | 2025-05-20T10:02:07.006Z |
| bit-parse-2024-29027 | Parse Server crash and RCE via invalid Cloud Function or Cloud Job name | 2024-03-21T07:25:25.649Z | 2026-03-11T18:56:50.865Z |
| bit-gitlab-2024-0199 | Incorrect Authorization in GitLab | 2024-03-12T08:25:54.981Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0446 | Vulnérabilité dans OpenSSL | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0445 | Vulnérabilité dans Spring Cloud Skipper | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0444 | Vulnérabilité dans Citrix Workspace app pour Mac | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0443 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-27T00:00:00.000000 | 2024-05-27T00:00:00.000000 |
| certfr-2024-avi-0442 | Multiples vulnérabilités dans les produits IBM | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0441 | Vulnérabilité dans les produits WithSecure | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0440 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0439 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0438 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0437 | Vulnérabilité dans Google Chrome | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0436 | Multiples vulnérabilités dans les produits Mitel | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0435 | Multiples vulnérabilités dans les produits Cisco | 2024-05-23T00:00:00.000000 | 2024-05-23T00:00:00.000000 |
| certfr-2024-avi-0434 | Multiples vulnérabilités dans les produits Ivanti | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0433 | Multiples vulnérabilités dans GitLab | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0432 | Multiples vulnérabilités dans les produits Atlassian | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0431 | Multiples vulnérabilités dans les produits Veeam | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0430 | Multiples vulnérabilités dans Google Chrome | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0429 | Vulnérabilité dans les produits SolarWinds | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0428 | Multiples vulnérabilités dans les produits Qnap | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0427 | Multiples vulnérabilités dans les produits VMware | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0426 | Multiples vulnérabilités dans Roundcube | 2024-05-21T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0425 | Vulnérabilité dans Ruby on Rails | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0424 | Vulnérabilité dans Asterisk | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0423 | Multiples vulnérabilités dans les produits NetApp | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0422 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0421 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0420 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0419 | Multiples vulnérabilités dans les produits IBM | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0418 | Vulnérabilité dans Microsoft Azure Monitor Agent | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0417 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000063 | EC-CUBE vulnerable to cross-site scripting | 2013-06-27T14:31+09:00 | 2013-07-02T16:06+09:00 |
| jvndb-2013-000062 | EC-CUBE vulnerable to code injection | 2013-06-27T14:29+09:00 | 2013-07-02T16:01+09:00 |
| jvndb-2013-000061 | EC-CUBE vulnerable to directory traversal | 2013-06-27T14:29+09:00 | 2013-07-02T15:57+09:00 |
| jvndb-2013-003074 | Cross-site Scripting Vulnerability in Hitachi Command Suite Products | 2013-06-20T14:37+09:00 | 2013-06-20T14:37+09:00 |
| jvndb-2013-003073 | Vulnerability in JP1/HIBUN Advanced Edition Information Cypher Removable Media Encryption | 2013-06-20T14:24+09:00 | 2013-06-20T14:24+09:00 |
| jvndb-2013-000060 | Cybozu Live for Android vulnerable in the WebView class | 2013-06-18T15:20+09:00 | 2013-06-26T14:43+09:00 |
| jvndb-2013-000059 | Cybozu Live for Android vulnerable to arbitrary Java method execution | 2013-06-18T15:19+09:00 | 2013-06-26T14:46+09:00 |
| jvndb-2013-000058 | Ichitaro series vulnerable to arbitrary code execution | 2013-06-18T15:17+09:00 | 2013-06-26T14:49+09:00 |
| jvndb-2013-000057 | Orchard vulnerable to cross-site scripting | 2013-06-13T13:49+09:00 | 2013-06-17T12:01+09:00 |
| jvndb-2013-000056 | Galapagos Browser vulnerable in the WebView class | 2013-06-11T13:48+09:00 | 2013-06-18T17:55+09:00 |
| jvndb-2013-000055 | Angel Browser vulnerable in the WebView class | 2013-06-11T13:40+09:00 | 2013-06-18T17:52+09:00 |
| jvndb-2013-000054 | Pizza Hut Japan Official Order App for Android. contains an issue where it fails to verify SSL server certificates | 2013-06-07T15:03+09:00 | 2013-06-07T15:03+09:00 |
| jvndb-2013-000053 | Internet Explorer vulnerable to information disclosure | 2013-06-07T13:59+09:00 | 2013-06-07T13:59+09:00 |
| jvndb-2013-000052 | HP ProCurve 1700 series switches vulnerable to cross-site request forgery | 2013-06-03T14:28+09:00 | 2013-06-03T14:28+09:00 |
| jvndb-2013-000051 | Adobe Reader X vulnerable to sandbox bypass | 2013-05-31T15:44+09:00 | 2013-05-31T15:44+09:00 |
| jvndb-2013-000050 | Safari information disclosure vulnerability | 2013-05-31T15:44+09:00 | 2013-05-31T15:44+09:00 |
| jvndb-2013-000049 | FileMaker Pro vulnerable to cross-site scripting | 2013-05-31T15:43+09:00 | 2015-05-22T11:34+09:00 |
| jvndb-2013-000048 | FileMaker Pro fails to verify SSL server certificates | 2013-05-31T15:43+09:00 | 2014-09-18T21:08+09:00 |
| jvndb-2013-000047 | Content Provider in MovatwiTouch fails to restrict access permissions | 2013-05-29T15:32+09:00 | 2013-05-29T15:32+09:00 |
| jvndb-2013-000046 | Sleipnir Mobile for Android vulnerable to address bar spoofing | 2013-05-29T15:19+09:00 | 2013-05-29T15:19+09:00 |
| jvndb-2013-000045 | Yahoo! Browser vulnerable to address bar spoofing | 2013-05-27T15:04+09:00 | 2013-05-27T15:04+09:00 |
| jvndb-2013-002796 | Arbitrary Commands Execution Vulnerability in JP1/Integrated Management - TELstaff Alarm View | 2013-05-24T14:37+09:00 | 2013-05-24T14:37+09:00 |
| jvndb-2013-000044 | EC-CUBE vulnerable to information disclosure as a result of improper input checking | 2013-05-23T15:46+09:00 | 2013-05-23T15:46+09:00 |
| jvndb-2013-000043 | EC-CUBE fails to restrict access permissions | 2013-05-23T15:42+09:00 | 2013-06-03T16:13+09:00 |
| jvndb-2013-000042 | EC-CUBE vulnerable to session fixation | 2013-05-23T14:15+09:00 | 2013-05-23T14:15+09:00 |
| jvndb-2013-000041 | EC-CUBE vulnerable to cross-site scripting | 2013-05-23T14:11+09:00 | 2013-05-23T14:11+09:00 |
| jvndb-2013-002770 | Cross-site Scripting Vulnerability in JP1/Automatic Operation | 2013-05-21T15:45+09:00 | 2013-05-21T15:45+09:00 |
| jvndb-2013-000040 | Cross-site scripting vulnerability in the web2py social bookmarking widget | 2013-05-20T15:16+09:00 | 2013-05-20T15:16+09:00 |
| jvndb-2013-000039 | Wi-Fi Spot Configuration Software vulnerability in the connection process | 2013-05-15T14:25+09:00 | 2013-06-19T09:58+09:00 |
| jvndb-2013-000038 | OpenPNE vulnerable to cross-site scripting | 2013-05-13T13:39+09:00 | 2013-06-19T09:56+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-29433 | Desktop Alert PingAlert路径遍历漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29432 | Desktop Alert PingAlert跨站脚本漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29431 | Desktop Alert PingAlert服务端请求伪造漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29430 | Desktop Alert PingAlert访问控制不当漏洞(CNVD-2025-29430) | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29429 | Desktop Alert PingAlert存在未明漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29404 | Desktop Alert PingAlert信息泄露漏洞(CNVD-2025-29404) | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29403 | Desktop Alert PingAlert跨站脚本漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29402 | Desktop Alert PingAlert权限提升漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29401 | Desktop Alert PingAlert信息泄露漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29400 | Desktop Alert PingAlert访问控制不当漏洞 | 2025-11-18 | 2025-11-26 |
| cnvd-2025-29241 | Google Chrome代码问题漏洞(CNVD-2025-29241) | 2025-11-18 | 2025-11-21 |
| cnvd-2025-29240 | Google Chrome代码问题漏洞(CNVD-2025-29240) | 2025-11-18 | 2025-11-21 |
| cnvd-2025-29239 | Google Chrome代码问题漏洞(CNVD-2025-29239) | 2025-11-18 | 2025-11-21 |
| cnvd-2025-29238 | Google Chrome代码问题漏洞(CNVD-2025-29238) | 2025-11-18 | 2025-11-21 |
| cnvd-2025-29237 | Google Chrome缓冲区溢出漏洞(CNVD-2025-29237) | 2025-11-18 | 2025-11-21 |
| cnvd-2025-29138 | Simple Online Hotel Reservation System add_query_reserve.php文件SQL注入漏洞 | 2025-11-18 | 2025-11-21 |
| cnvd-2025-29137 | Simple Online Hotel Reservation System edit_account.php文件SQL注入漏洞 | 2025-11-18 | 2025-11-21 |
| cnvd-2025-29113 | WordPress WPKoi Templates for Elementor plugin缺少授权漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29112 | WordPress WP Manager plugin跨站请求伪造漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29111 | WordPress WP Headless CMS Framework plugin绕过保护机制漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29110 | WordPress WP Content Pilot plugin缺少授权漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29109 | WordPress Content Flipper plugin跨站脚本漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29108 | WordPress WooCommerce Ultimate Points And Rewards plugin信息泄露漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29107 | WordPress WooCommerce PDF Invoice Builder plugin缺少授权漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29106 | WordPress Welcart e-Commerce Plugin未授权访问漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29105 | WordPress ChatBot plugin缺少授权漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29104 | WordPress Booster for WooCommerce Plugin跨站脚本漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29103 | WordPress Booster for WooCommerce Plugin缺少授权漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-29102 | WordPress Booking Manager plugin跨站脚本漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-28949 | Simple Cafe Ordering System login.php文件SQL注入漏洞 | 2025-11-18 | 2025-11-20 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-15794 | Уязвимость компонента dtpm_cpu ядра операционной системы Linux, позволяющая нарушителю вы… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15793 | Уязвимость компонента fbtft ядра операционной системы Linux, позволяющая нарушителю вызва… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15792 | Уязвимость компонента net/tls ядра операционной системы Linux, позволяющая нарушителю выз… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15791 | Уязвимость компонента net/packet/af_packet.c ядра операционной системы Linux, позволяющая… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15790 | Уязвимость компонента net ядра операционной системы Linux, позволяющая нарушителю вызвать… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15789 | Уязвимость компонента pnv_php операционной системы Linux, позволяющая нарушителю вызвать … | 15.12.2025 | 16.02.2026 |
| bdu:2025-15788 | Уязвимость компонента pnv_php ядра операционной системы Linux, позволяющая нарушителю выз… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15787 | Уязвимость компонента vfio/pds ядра операционной системы Linux, позволяющая нарушителю вы… | 15.12.2025 | 26.12.2025 |
| bdu:2025-15786 | Уязвимость компонента vdpa/mlx5 ядра операционной системы Linux, нарушить их целостность,… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15785 | Уязвимость компонента imxfb ядра операционной системы Linux, позволяющая нарушителю вызва… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15784 | Уязвимость компонента imx95-blk-ctl ядра операционной системы Linux, позволяющая нарушите… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15783 | Уязвимость компонента pinmux ядра операционной системы Linux, позволяющая нарушителю вызв… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15782 | Уязвимость компонента cpcap-charger ядра операционной системы Linux, позволяющая нарушите… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15781 | Уязвимость компонента davinci ядра операционной системы Linux, позволяющая нарушителю выз… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15780 | Уязвимость компонента net/netfilter/xt_nfacct.c ядра операционной системы Linux, позволяю… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15779 | Уязвимость компонента net/mac80211/tdls.c ядра операционной системы Linux, позволяющая на… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15778 | Уязвимость компонента net/mlx5 ядра операционной системы Linux, позволяющая нарушителю вы… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15777 | Уязвимость компонента stm32 ядра операционной системы Linux, позволяющая нарушителю получ… | 15.12.2025 | 26.12.2025 |
| bdu:2025-15776 | Уязвимость компонента fs/f2fs/f2fs.h ядра операционной системы Linux, позволяющая нарушит… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15775 | Уязвимость компонента fs/ceph/crypto.c ядра операционной системы Linux, позволяющая наруш… | 15.12.2025 | 26.12.2025 |
| bdu:2025-15774 | Уязвимость компонента mediatek ядра операционной системы Linux, позволяющая нарушителю по… | 15.12.2025 | 15.12.2025 |
| bdu:2025-15773 | Уязвимость компонента ice/ice_ddp.c ядра операционной системы Linux, позволяющая нарушите… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15772 | Уязвимость компонента netlink ядра операционной системы Linux, позволяющая нарушителю выз… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15771 | Уязвимость компонента drivers/regulator/core.c ядра операционной системы Linux, позволяющ… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15770 | Уязвимость компонента arm64/entry ядра операционной системы Linux, позволяющая нарушителю… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15769 | Уязвимость компонента drivers/i2c/busses/i2c-qup.c ядра операционной системы Linux, позво… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15768 | Уязвимость компонента net/xfrm/xfrm_state.c ядра операционной системы Linux, позволяющая … | 15.12.2025 | 15.12.2025 |
| bdu:2025-15767 | Уязвимость ядра операционной системы Linux, связанная с чтением за границами буфера памят… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15766 | Уязвимость компонента venus ядра операционной системы Linux, позволяющая нарушителю вызва… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15765 | Уязвимость компонента uvcvideo ядра операционной системы Linux, позволяющая нарушителю вы… | 15.12.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-202412-2326 | Delta Electronics DTM Soft deserializes objects, which could allow an attacker to execute… | 2025-11-19T23:02:40.490000Z |
| var-202412-2386 | Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulner… | 2025-11-19T23:02:40.462000Z |
| var-202506-0683 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user… | 2025-11-19T23:02:39.200000Z |
| var-200609-1196 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2025-11-19T20:25:11.048000Z |
| var-202509-4456 | The ADAM-3600 is an intelligent remote terminal device developed by Advantech for remote … | 2025-11-19T19:40:47.682000Z |
| var-202510-0025 | A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerab… | 2025-11-19T19:40:47.628000Z |
| var-202510-2136 | A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function … | 2025-11-19T19:40:47.218000Z |
| var-202510-2178 | A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetV… | 2025-11-19T19:40:47.176000Z |
| var-202510-2220 | A denial-of-service security issue exists in the affected product and version. The securi… | 2025-11-19T19:40:47.149000Z |
| var-202510-2241 | A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Thi… | 2025-11-19T19:40:47.132000Z |
| var-202510-2283 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime … | 2025-11-19T19:40:47.101000Z |
| var-201709-1071 | A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3… | 2025-11-18T15:38:15.028000Z |
| var-201803-2171 | A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS … | 2025-11-18T15:38:14.546000Z |
| var-202007-0079 | An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0… | 2025-11-18T15:38:12.479000Z |
| var-202208-0666 | The SystemUI module has a privilege escalation vulnerability. Successful exploitation of … | 2025-11-18T15:38:10.292000Z |
| var-202402-0660 | A post authentication command injection vulnerability exists in the ipsec policy function… | 2025-11-18T15:38:07.436000Z |
| var-202505-2727 | The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated … | 2025-11-18T15:37:58.455000Z |
| var-202007-0064 | The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote a… | 2025-11-18T15:37:03.104000Z |
| var-202010-1187 | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Se… | 2025-11-18T15:37:02.810000Z |
| var-202208-0222 | D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage pa… | 2025-11-18T15:37:01.044000Z |
| var-202211-1888 | Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authent… | 2025-11-18T15:37:00.526000Z |
| var-202303-1330 | A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03… | 2025-11-18T15:36:59.980000Z |
| var-202407-0285 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.64), S… | 2025-11-18T15:36:53.367000Z |
| var-202408-2335 | A remote code execution vulnerability exists in the Rockwell Automation ThinManager® Thin… | 2025-11-18T15:36:52.882000Z |
| var-202508-0436 | A vulnerability was identified in Tenda TX3 16.03.13.11_multi_TDE01. Affected by this vul… | 2025-11-18T15:36:47.678000Z |
| var-202509-3117 | A local privilege escalation vulnerability exists in the safe_asterisk script included wi… | 2025-11-18T15:36:47.081000Z |
| var-201708-0246 | (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet dia… | 2025-11-18T15:35:35.097000Z |
| var-202008-0768 | TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the… | 2025-11-18T15:35:32.175000Z |
| var-202010-0585 | NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the fu… | 2025-11-18T15:35:32.021000Z |
| var-202202-1281 | A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link … | 2025-11-18T15:35:30.660000Z |