Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27588 |
7.7 (4.0)
|
Caddy: MatchHost becomes case-sensitive for large host… |
caddyserver |
caddy |
2026-02-24T16:28:28.106Z | 2026-02-27T20:47:36.164Z |
| CVE-2026-27738 |
6.9 (4.0)
|
Angular SSR has an Open Redirect via X-Forwarded-Prefix |
angular |
angular-cli |
2026-02-25T16:40:44.724Z | 2026-02-27T20:46:26.917Z |
| CVE-2026-28288 |
5.5 (4.0)
|
Dify has a user enumeration issue |
langgenius |
dify |
2026-02-27T20:25:24.599Z | 2026-02-27T20:45:44.126Z |
| CVE-2026-28338 |
6.8 (3.1)
|
PMD Designer has Stored XSS in VBHTMLRenderer and YAHT… |
pmd |
pmd |
2026-02-27T20:28:05.739Z | 2026-02-27T20:28:05.739Z |
| CVE-2026-26997 |
2 (4.0)
|
ClipBucket v5 has Stored XSS via Collection name |
MacWarrior |
clipbucket-v5 |
2026-02-27T19:15:11.123Z | 2026-02-27T20:24:08.947Z |
| CVE-2026-28354 |
5.7 (4.0)
|
ClipBucket v5 has IDOR in Collection Item Management |
MacWarrior |
clipbucket-v5 |
2026-02-27T19:18:25.500Z | 2026-02-27T20:23:22.876Z |
| CVE-2026-28272 |
8.1 (3.1)
|
Kiteworks Email Protection Gateway has a Cross-site Sc… |
kiteworks |
security-advisories |
2026-02-27T20:22:59.656Z | 2026-02-27T20:22:59.656Z |
| CVE-2026-27707 |
7.3 (3.1)
|
Plex-configured Seerr instances vulnerable to unauthen… |
seerr-team |
seerr |
2026-02-27T19:29:18.768Z | 2026-02-27T20:22:24.091Z |
| CVE-2026-28271 |
6.5 (3.1)
|
Kiteworks Core is vulnerable to Server-Side Request Fo… |
kiteworks |
security-advisories |
2026-02-27T20:21:12.194Z | 2026-02-27T20:21:29.444Z |
| CVE-2026-28270 |
4.9 (3.1)
|
Kiteworks Core has an Unrestricted Upload of File with… |
kiteworks |
security-advisories |
2026-02-27T20:19:54.611Z | 2026-02-27T20:19:54.611Z |
| CVE-2026-27792 |
5.4 (3.1)
|
Seerr missing authentication on pushSubscription endpoints |
seerr-team |
seerr |
2026-02-27T19:33:18.469Z | 2026-02-27T20:19:07.348Z |
| CVE-2026-28268 |
9.8 (3.1)
|
Vikunja Vulnerable to Account Takeover via Password Re… |
go-vikunja |
vikunja |
2026-02-27T20:16:29.842Z | 2026-02-27T20:16:29.842Z |
| CVE-2026-22717 |
2.7 (3.1)
|
VMware Workstation out-of-bound read vulnerability |
VMware |
Workstation |
2026-02-27T19:11:54.924Z | 2026-02-27T20:14:10.400Z |
| CVE-2026-28231 |
5.5 (4.0)
|
pillow_heif Has Integer Overflow in Encode Path Buffer… |
bigcat88 |
pillow_heif |
2026-02-27T20:13:45.195Z | 2026-02-27T20:13:45.195Z |
| CVE-2026-22206 |
8.7 (4.0)
8.8 (3.1)
|
SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags |
SPIP |
SPIP |
2026-02-26T20:17:58.443Z | 2026-02-27T20:08:48.214Z |
| CVE-2026-22205 |
8.7 (4.0)
7.5 (3.1)
|
SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling |
SPIP |
SPIP |
2026-02-26T20:18:14.748Z | 2026-02-27T20:06:38.973Z |
| CVE-2026-3264 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
go2ismail Free-CRM Administrative redirect |
go2ismail |
Free-CRM |
2026-02-26T22:02:07.996Z | 2026-02-27T20:02:33.352Z |
| CVE-2026-3269 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
psi-probe PSI Probe Session ExpireSessionsController.j… |
psi-probe |
PSI Probe |
2026-02-26T23:32:07.430Z | 2026-02-27T19:57:57.822Z |
| CVE-2026-3270 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
psi-probe PSI Probe Whois Whois.java lookup server-sid… |
psi-probe |
PSI Probe |
2026-02-26T23:32:09.687Z | 2026-02-27T19:55:03.743Z |
| CVE-2026-27836 |
7.5 (3.1)
|
phpMyFAQ Allows Unauthenticated Account Creation via W… |
thorsten |
phpMyFAQ |
2026-02-27T19:54:51.992Z | 2026-02-27T19:54:51.992Z |
| CVE-2026-27947 |
9.4 (4.0)
|
Group-Office Vulnerable to Remote Code Execution (RCE) |
Intermesh |
groupoffice |
2026-02-27T19:52:41.592Z | 2026-02-27T19:52:41.592Z |
| CVE-2026-27832 |
7.1 (4.0)
|
Group-Office Has Authenticated SQL Injection in advanc… |
Intermesh |
groupoffice |
2026-02-27T19:49:57.867Z | 2026-02-27T19:49:57.867Z |
| CVE-2026-27628 |
1.2 (4.0)
|
pypdf has a possible infinite loop when loading circul… |
py-pdf |
pypdf |
2026-02-25T02:45:37.543Z | 2026-02-27T19:49:02.019Z |
| CVE-2025-69437 |
8.7 (3.1)
|
PublicCMS v5.202506.d and earlier is vulnerable t… |
n/a |
n/a |
2026-02-27T00:00:00.000Z | 2026-02-27T19:47:56.667Z |
| CVE-2026-27824 |
5.3 (3.1)
|
calibre has IP Ban Bypass via X-Forwarded-For Header S… |
kovidgoyal |
calibre |
2026-02-27T19:46:07.612Z | 2026-02-27T19:46:07.612Z |
| CVE-2026-27810 |
6.4 (3.1)
|
calibre Vulnerable to HTTP Response Header Injection |
kovidgoyal |
calibre |
2026-02-27T19:44:39.106Z | 2026-02-27T19:44:39.106Z |
| CVE-2026-26861 |
8.3 (3.1)
|
CleverTap Web SDK version 1.15.2 and earlier is v… |
n/a |
n/a |
2026-02-27T00:00:00.000Z | 2026-02-27T19:42:58.097Z |
| CVE-2026-27734 |
6.5 (3.1)
|
Beszel Vulnerable to Docker API Path Traversal via Uns… |
henrygd |
beszel |
2026-02-27T19:41:30.418Z | 2026-02-27T19:41:30.418Z |
| CVE-2026-26862 |
8.3 (3.1)
|
CleverTap Web SDK version 1.15.2 and earlier is v… |
n/a |
n/a |
2026-02-27T00:00:00.000Z | 2026-02-27T19:39:16.900Z |
| CVE-2026-27793 |
6.5 (3.1)
|
Seerr has Broken Object-Level Authorization in User Pr… |
seerr-team |
seerr |
2026-02-27T19:38:49.589Z | 2026-02-27T19:38:49.589Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27824 |
5.3 (3.1)
|
calibre has IP Ban Bypass via X-Forwarded-For Header S… |
kovidgoyal |
calibre |
2026-02-27T19:46:07.612Z | 2026-02-27T19:46:07.612Z |
| CVE-2026-27810 |
6.4 (3.1)
|
calibre Vulnerable to HTTP Response Header Injection |
kovidgoyal |
calibre |
2026-02-27T19:44:39.106Z | 2026-02-27T19:44:39.106Z |
| CVE-2026-27793 |
6.5 (3.1)
|
Seerr has Broken Object-Level Authorization in User Pr… |
seerr-team |
seerr |
2026-02-27T19:38:49.589Z | 2026-02-27T19:38:49.589Z |
| CVE-2026-27792 |
5.4 (3.1)
|
Seerr missing authentication on pushSubscription endpoints |
seerr-team |
seerr |
2026-02-27T19:33:18.469Z | 2026-02-27T20:19:07.348Z |
| CVE-2026-27734 |
6.5 (3.1)
|
Beszel Vulnerable to Docker API Path Traversal via Uns… |
henrygd |
beszel |
2026-02-27T19:41:30.418Z | 2026-02-27T19:41:30.418Z |
| CVE-2026-27707 |
7.3 (3.1)
|
Plex-configured Seerr instances vulnerable to unauthen… |
seerr-team |
seerr |
2026-02-27T19:29:18.768Z | 2026-02-27T20:22:24.091Z |
| CVE-2026-27628 |
1.2 (4.0)
|
pypdf has a possible infinite loop when loading circul… |
py-pdf |
pypdf |
2026-02-25T02:45:37.543Z | 2026-02-27T19:49:02.019Z |
| CVE-2026-27583 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:11:46.699Z | |
| CVE-2026-27582 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:11:40.783Z | |
| CVE-2026-27581 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:11:34.862Z | |
| CVE-2026-27580 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:11:28.138Z | |
| CVE-2026-27573 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:11:07.121Z | |
| CVE-2026-27501 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:11:20.985Z | |
| CVE-2026-27500 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:11:15.207Z | |
| CVE-2026-27201 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:10:44.191Z | |
| CVE-2026-27200 |
N/A
|
Further research determined the situation described is not a vulnerability. | N/A | N/A | 2026-02-27T19:11:00.450Z | |
| CVE-2026-27141 |
7.5 (3.1)
|
Sending certain HTTP/2 frames can cause a server to pa… |
golang.org/x/net |
golang.org/x/net/http2 |
2026-02-26T18:50:31.830Z | 2026-02-27T19:11:57.260Z |
| CVE-2026-26997 |
2 (4.0)
|
ClipBucket v5 has Stored XSS via Collection name |
MacWarrior |
clipbucket-v5 |
2026-02-27T19:15:11.123Z | 2026-02-27T20:24:08.947Z |
| CVE-2026-26862 |
8.3 (3.1)
|
CleverTap Web SDK version 1.15.2 and earlier is v… |
n/a |
n/a |
2026-02-27T00:00:00.000Z | 2026-02-27T19:39:16.900Z |
| CVE-2026-26861 |
8.3 (3.1)
|
CleverTap Web SDK version 1.15.2 and earlier is v… |
n/a |
n/a |
2026-02-27T00:00:00.000Z | 2026-02-27T19:42:58.097Z |
| CVE-2026-22717 |
2.7 (3.1)
|
VMware Workstation out-of-bound read vulnerability |
VMware |
Workstation |
2026-02-27T19:11:54.924Z | 2026-02-27T20:14:10.400Z |
| CVE-2026-22716 |
5 (3.1)
|
VMware Workstation out-of-bounds write vulnerability |
VMware |
Workstation |
2026-02-27T19:01:44.248Z | 2026-02-27T19:19:19.576Z |
| CVE-2025-69437 |
8.7 (3.1)
|
PublicCMS v5.202506.d and earlier is vulnerable t… |
n/a |
n/a |
2026-02-27T00:00:00.000Z | 2026-02-27T19:47:56.667Z |
| CVE-2026-25518 |
5.9 (3.1)
|
cert-manager-controller DoS via Specially Crafted DNS … |
cert-manager |
cert-manager |
2026-02-04T21:18:06.681Z | 2026-02-05T14:31:52.478Z |
| CVE-2026-25541 |
5.5 (4.0)
|
Bytes is vulnerable to integer overflow in BytesMut::reserve |
tokio-rs |
bytes |
2026-02-04T22:03:53.554Z | 2026-02-05T15:13:34.031Z |
| CVE-2026-1978 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
kalyan02 NanoCMS User Information pagesdata.txt direct… |
kalyan02 |
NanoCMS |
2026-02-06T04:02:07.172Z | 2026-02-23T09:20:50.974Z |
| CVE-2026-27128 |
6.9 (4.0)
|
Craft CMS's race condition in Token Service potentiall… |
craftcms |
cms |
2026-02-24T02:42:53.706Z | 2026-02-28T02:13:48.422Z |
| CVE-2026-27126 |
5.9 (4.0)
|
Craft CMS has Stored XSS in Table Field via "HTML" Col… |
craftcms |
cms |
2026-02-24T02:30:04.882Z | 2026-02-24T19:35:38.348Z |
| CVE-2026-26222 |
10 (4.0)
|
DocLink .NET Remoting Unauthenticated Arbitrary File R… |
Beyond Limits Inc. |
Altec DocLink |
2026-02-24T17:33:12.136Z | 2026-02-27T20:53:32.186Z |
| CVE-2025-33179 |
8 (3.1)
|
NVIDIA Cumulus Linux and NVOS products contain a … |
NVIDIA |
Cumulus Linux GA |
2026-02-24T18:41:32.821Z | 2026-02-26T19:31:35.173Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-27793 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to … | 2026-02-27T20:21:39.587 | 2026-02-27T20:21:39.587 |
| fkie_cve-2026-27792 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. A missing… | 2026-02-27T20:21:39.403 | 2026-02-27T20:21:39.403 |
| fkie_cve-2026-27734 | Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoi… | 2026-02-27T20:21:38.950 | 2026-02-27T20:21:38.950 |
| fkie_cve-2026-27707 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Starting … | 2026-02-27T20:21:38.760 | 2026-02-27T20:21:38.760 |
| fkie_cve-2026-27628 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this … | 2026-02-25T03:16:06.513 | 2026-02-27T20:21:38.617 |
| fkie_cve-2026-27583 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:38.550 | 2026-02-27T20:21:38.550 |
| fkie_cve-2026-27582 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:38.483 | 2026-02-27T20:21:38.483 |
| fkie_cve-2026-27581 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:38.423 | 2026-02-27T20:21:38.423 |
| fkie_cve-2026-27580 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:38.360 | 2026-02-27T20:21:38.360 |
| fkie_cve-2026-27573 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:38.300 | 2026-02-27T20:21:38.300 |
| fkie_cve-2026-27501 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:38.163 | 2026-02-27T20:21:38.163 |
| fkie_cve-2026-27500 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:38.100 | 2026-02-27T20:21:38.100 |
| fkie_cve-2026-27201 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:38.033 | 2026-02-27T20:21:38.033 |
| fkie_cve-2026-27200 | Rejected reason: Further research determined the situation described is not a vulnerability. | 2026-02-27T20:21:37.950 | 2026-02-27T20:21:37.950 |
| fkie_cve-2026-27141 | Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic | 2026-02-26T20:31:38.017 | 2026-02-27T20:21:37.657 |
| fkie_cve-2026-26997 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authen… | 2026-02-27T20:21:37.503 | 2026-02-27T20:21:37.503 |
| fkie_cve-2026-26862 | CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) … | 2026-02-27T18:16:12.163 | 2026-02-27T20:21:37.327 |
| fkie_cve-2026-26861 | CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window… | 2026-02-27T18:16:12.043 | 2026-02-27T20:21:37.167 |
| fkie_cve-2026-22717 | Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an acto… | 2026-02-27T20:21:36.713 | 2026-02-27T20:21:36.713 |
| fkie_cve-2026-22716 | Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an act… | 2026-02-27T19:16:07.200 | 2026-02-27T20:21:36.540 |
| fkie_cve-2025-69437 | PublicCMS v5.202506.d and earlier is vulnerable to stored XSS. Uploaded PDFs can contain JavaScript… | 2026-02-27T17:16:26.007 | 2026-02-27T20:21:25.847 |
| fkie_cve-2026-25518 | cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, an… | 2026-02-04T22:15:58.990 | 2026-02-27T20:20:22.113 |
| fkie_cve-2026-25541 | Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vu… | 2026-02-04T22:16:00.383 | 2026-02-27T20:13:28.537 |
| fkie_cve-2026-1978 | A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown … | 2026-02-06T05:16:10.170 | 2026-02-27T20:10:36.533 |
| fkie_cve-2026-27128 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 thr… | 2026-02-24T03:16:02.623 | 2026-02-27T20:06:52.050 |
| fkie_cve-2026-27126 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 thr… | 2026-02-24T03:16:02.267 | 2026-02-27T20:06:03.410 |
| fkie_cve-2026-26222 | Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoti… | 2026-02-24T18:29:33.293 | 2026-02-27T20:05:06.970 |
| fkie_cve-2025-33179 | NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-p… | 2026-02-24T20:27:42.733 | 2026-02-27T20:03:29.513 |
| fkie_cve-2025-33180 | NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-p… | 2026-02-24T20:27:42.943 | 2026-02-27T20:03:04.990 |
| fkie_cve-2025-33181 | NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-p… | 2026-02-24T20:27:43.127 | 2026-02-27T20:02:38.613 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-4xrr-hq4w-6vf4 |
6.9 (4.0)
|
Caddy: Improper sanitization of glob characters in file matcher may lead to bypassing security prot… | 2026-02-24T20:16:55Z | 2026-02-27T19:51:57Z |
| ghsa-qmjj-p7m9-wjrv |
5.7 (4.0)
|
@actual-app/sync-server: Missing authorization in sync endpoints allows cross-user budget file acce… | 2026-02-27T19:29:46Z | 2026-02-27T19:29:46Z |
| ghsa-2x45-7fc3-mxwq |
6.5 (3.1)
2.7 (4.0)
|
php-jwt contains weak encryption | 2025-07-31T21:31:53Z | 2026-02-27T18:57:12Z |
| ghsa-86vq-ccwf-rm62 |
7.5 (3.1)
|
Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints | 2026-02-27T18:35:57Z | 2026-02-27T18:35:57Z |
| ghsa-prjf-86w9-mfqv |
6.1 (3.1)
7.0 (4.0)
|
Angular i18n vulnerable to Cross-Site Scripting | 2026-02-27T18:33:16Z | 2026-02-27T18:33:16Z |
| ghsa-xxc3-jv86-6hxx |
8.2 (3.1)
8.8 (4.0)
|
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to … | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-xp4w-rp7m-jgwq |
5.9 (3.1)
8.2 (4.0)
|
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-pr7p-x9q9-qph3 |
8.2 (3.1)
8.8 (4.0)
|
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to … | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-p7f5-m66f-fmfw |
8.2 (3.1)
8.8 (4.0)
|
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manip… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-jw6x-gh8v-8x7w |
8.2 (3.1)
8.8 (4.0)
|
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manip… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-jq67-r98p-22qp |
6.5 (3.1)
6.9 (4.0)
|
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnera… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-j48f-gjx4-8g9f |
9.8 (3.1)
9.3 (4.0)
|
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerabil… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-gg87-rfp4-hx5w |
8.2 (3.1)
8.8 (4.0)
|
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipu… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-7vh4-6xxj-cp37 |
8.2 (3.1)
8.8 (4.0)
|
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipu… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-7q64-3rg2-h9pf |
8.2 (4.0)
|
A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorizatio… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-659v-qhqp-595j |
8.2 (3.1)
8.8 (4.0)
|
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to … | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-3vq4-2c4v-g9jf |
8.2 (3.1)
8.8 (4.0)
|
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manip… | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-22p3-cw83-672h |
8.2 (3.1)
8.8 (4.0)
|
Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows … | 2026-02-27T18:31:06Z | 2026-02-27T18:31:06Z |
| ghsa-vrv3-8mcq-ppf5 |
|
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 sto… | 2026-02-27T18:31:05Z | 2026-02-27T18:31:05Z |
| ghsa-p9c8-78v7-93hh |
9.9 (3.1)
|
Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket mo… | 2026-02-27T18:31:05Z | 2026-02-27T18:31:05Z |
| ghsa-74gw-c73g-6fq2 |
6.1 (3.1)
5.1 (4.0)
|
Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious… | 2026-02-27T12:31:25Z | 2026-02-27T18:31:05Z |
| ghsa-6xjh-63ff-92mc |
6.5 (3.1)
|
Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may hav… | 2026-02-27T03:30:26Z | 2026-02-27T18:31:05Z |
| ghsa-34c9-25wc-q378 |
9.1 (3.1)
|
Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linu… | 2026-02-27T18:31:05Z | 2026-02-27T18:31:05Z |
| ghsa-r6f6-7cf6-c3cg |
5.9 (3.1)
|
VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known at… | 2026-02-26T21:31:30Z | 2026-02-27T18:31:04Z |
| ghsa-827f-mrm2-f6xh |
6.5 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements… | 2026-02-26T09:30:27Z | 2026-02-27T18:31:04Z |
| ghsa-x7c5-fjpp-2mcc |
7.8 (3.1)
6.8 (4.0)
|
An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker… | 2026-02-24T12:31:40Z | 2026-02-27T18:31:01Z |
| ghsa-wqpx-frj2-7xmj |
7.8 (3.1)
8.5 (4.0)
|
Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation … | 2026-02-20T18:31:39Z | 2026-02-27T18:31:01Z |
| ghsa-vxf7-pjj6-wh93 |
9.9 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in WesternDeal WPForms Goog… | 2026-02-20T18:31:34Z | 2026-02-27T18:31:01Z |
| ghsa-rr5p-xfmq-r2vx |
7.8 (3.1)
8.5 (4.0)
|
Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation … | 2026-02-20T18:31:39Z | 2026-02-27T18:31:01Z |
| ghsa-r222-jjm5-r49x |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff St… | 2026-02-23T21:31:28Z | 2026-02-27T18:31:01Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-172 |
3.7 (3.1)
|
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in … | streampipes | 2024-07-17T09:15:02+00:00 | 2025-01-18T22:21:43.557516+00:00 |
| pysec-2024-171 |
8.0 (3.1)
|
Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, mult… | strawberry-graphql | 2024-09-25T18:15:05+00:00 | 2025-01-18T22:21:43.412172+00:00 |
| pysec-2024-170 |
4.8 (3.1)
|
A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml re… | zenml | 2024-06-06T19:15:53+00:00 | 2025-01-18T19:19:08.253212+00:00 |
| pysec-2024-169 |
6.5 (3.1)
|
An improper authorization vulnerability exists in the zenml-io/zenml repository, specific… | zenml | 2024-06-06T19:15:53+00:00 | 2025-01-18T19:19:08.205431+00:00 |
| pysec-2024-168 |
6.5 (3.1)
|
Taipy is an open-source Python library for easy, end-to-end application development for d… | taipy | 2024-10-09T19:15:14+00:00 | 2025-01-18T19:19:07.718423+00:00 |
| pysec-2024-167 |
|
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python… | nltk | 2024-06-27T22:15:10+00:00 | 2025-01-18T19:19:06.317325+00:00 |
| pysec-2024-166 |
|
Nautobot is a Network Source of Truth and Network Automation Platform. A user with permis… | nautobot | 2024-05-28T23:15:17+00:00 | 2025-01-18T19:19:06.277166+00:00 |
| pysec-2024-165 |
7.5 (3.1)
|
The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on W… | jupyter-server | 2024-06-06T16:15:11+00:00 | 2025-01-18T19:19:04.842426+00:00 |
| pysec-2024-164 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an exces… | vyper | 2024-02-26T20:19:05+00:00 | 2025-01-16T21:21:41.436934+00:00 |
| pysec-2025-1 |
|
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2… | django | 2025-01-14T19:15:32+00:00 | 2025-01-14T21:22:18.665005+00:00 |
| pysec-2024-163 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Prior to ve… | vyper | 2024-04-25T18:15:09+00:00 | 2025-01-14T05:22:23.036505+00:00 |
| pysec-2024-162 |
6.5 (3.1)
|
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider … | scrapy | 2024-02-28T00:15:53+00:00 | 2025-01-14T05:22:21.870348+00:00 |
| pysec-2024-161 |
|
Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R packag… | pyarrow | 2024-11-28T17:15:48+00:00 | 2025-01-14T05:22:20.554292+00:00 |
| pysec-2024-160 |
6.1 (3.1)
|
lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.cle… | lxml-html-clean | 2024-11-19T22:15:21+00:00 | 2025-01-14T05:22:17.244267+00:00 |
| pysec-2024-159 |
|
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Arc… | luigi | 2024-12-10T05:15:07+00:00 | 2025-01-14T05:22:17.204098+00:00 |
| pysec-2024-158 |
|
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when … | djoser | 2024-12-13T05:15:07+00:00 | 2025-01-14T05:22:11.856636+00:00 |
| pysec-2024-157 |
|
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2… | django | 2024-12-06T12:15:18+00:00 | 2025-01-14T05:22:11.817473+00:00 |
| pysec-2024-156 |
|
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2… | django | 2024-12-06T12:15:17+00:00 | 2025-01-14T05:22:11.736011+00:00 |
| pysec-2024-155 |
7.5 (3.1)
|
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) … | cbor2 | 2024-02-19T23:15:07+00:00 | 2025-01-14T05:22:09.226388+00:00 |
| pysec-2019-255 |
6.1 (3.1)
|
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex userna… | tautulli | 2019-02-19T16:29:00Z | 2025-01-12T05:34:20.550037Z |
| pysec-2019-254 |
6.5 (3.1)
|
In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote m… | tautulli | 2019-12-18T18:15:00Z | 2025-01-12T05:34:20.505254Z |
| pysec-2022-43131 |
6.5 (3.1)
|
diplib v3.0.0 is vulnerable to Double Free. | diplib | 2022-11-04T17:15:00Z | 2024-12-27T22:48:17.996707Z |
| pysec-2022-43162 |
7.5 (3.1)
|
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. | redis | 2022-06-23T17:15:00Z | 2024-12-23T11:33:23.546447Z |
| pysec-2019-253 |
7.4 (3.1)
|
Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutab… | tahoe-lafs | 2019-11-07T18:15:00Z | 2024-12-19T05:47:49.035329Z |
| pysec-2020-343 |
7.8 (3.1)
|
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when the… | blosc2 | 2020-11-27T20:15:00Z | 2024-12-12T14:22:45.450508Z |
| pysec-2024-154 |
8.6 (3.1)
8.7 (4.0)
|
Ultralytics has identified a supply chain attack affecting affecting multiple versions of… | ultralytics | 2024-12-10T19:20:27.097505+00:00 | |
| pysec-2015-42 |
|
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.… | ipsilon | 2015-11-17T15:59:00Z | 2024-12-05T09:35:27.751929Z |
| pysec-2015-41 |
|
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.… | ipsilon | 2015-11-17T15:59:00Z | 2024-12-05T09:35:27.711043Z |
| pysec-2021-125 |
|
A flaw was found in Ansible where the secret information present in async_files are getti… | ansible | 2021-06-09T12:15:00Z | 2024-12-03T18:23:29.400148Z |
| pysec-2019-251 |
7.5 (3.1)
|
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Inject… | modoboa | 2019-12-10T20:15:00Z | 2024-12-02T10:49:36.349040Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33844 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.384822Z |
| gsd-2024-33728 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.380564Z |
| gsd-2024-33754 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.379823Z |
| gsd-2024-33837 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.377806Z |
| gsd-2024-33746 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.376327Z |
| gsd-2024-33691 | Cross-Site Request Forgery (CSRF) vulnerability in OptinMonster Popup Builder Team OptinM… | 2024-04-27T05:02:18.375458Z |
| gsd-2024-33828 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.373189Z |
| gsd-2024-33826 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.371945Z |
| gsd-2024-33800 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.371673Z |
| gsd-2024-33716 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.371227Z |
| gsd-2024-33751 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.370177Z |
| gsd-2024-33803 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.369211Z |
| gsd-2024-33812 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.367474Z |
| gsd-2024-33771 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.366201Z |
| gsd-2024-33762 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.364877Z |
| gsd-2024-33723 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.361754Z |
| gsd-2024-33718 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.360853Z |
| gsd-2024-33821 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.360168Z |
| gsd-2024-33846 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.353086Z |
| gsd-2024-33819 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.351158Z |
| gsd-2024-33823 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.350433Z |
| gsd-2024-33764 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.348731Z |
| gsd-2024-33798 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.346901Z |
| gsd-2024-33736 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.346507Z |
| gsd-2024-33739 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.344696Z |
| gsd-2024-33719 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.344333Z |
| gsd-2024-33802 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.336079Z |
| gsd-2024-33763 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.335356Z |
| gsd-2024-33820 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.334156Z |
| gsd-2024-33834 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.333945Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-887 | Malicious code in pyrefly (npm) | 2026-02-13T14:01:24Z | 2026-02-23T04:21:35Z |
| mal-2026-886 | Malicious code in open-answer-engine-frontend (npm) | 2026-02-13T14:01:24Z | 2026-02-23T04:21:35Z |
| mal-2026-857 | Malicious code in osopackage (npm) | 2026-02-11T15:13:28Z | 2026-02-23T04:21:35Z |
| mal-2026-854 | Malicious code in sinon-node (npm) | 2026-02-11T10:54:37Z | 2026-02-23T04:21:35Z |
| mal-2026-840 | Malicious code in search-savedsearch-podlet (npm) | 2026-02-10T17:06:06Z | 2026-02-23T04:21:35Z |
| mal-2026-839 | Malicious code in search-newfrontier-podlet (npm) | 2026-02-10T17:16:51Z | 2026-02-23T04:21:35Z |
| mal-2026-838 | Malicious code in realestate-atlas (npm) | 2026-02-10T17:06:02Z | 2026-02-23T04:21:35Z |
| mal-2026-835 | Malicious code in sap-code-style-guides (npm) | 2026-02-10T15:58:34Z | 2026-02-23T04:21:35Z |
| mal-2026-822 | Malicious code in react-svg-handler (npm) | 2026-02-09T17:16:37Z | 2026-02-23T04:21:35Z |
| mal-2026-997 | Malicious code in npm-security-testing (npm) | 2026-02-23T02:20:31Z | 2026-02-23T04:21:34Z |
| mal-2026-965 | Malicious code in node-native-bridge (npm) | 2026-02-20T16:56:12Z | 2026-02-23T04:21:34Z |
| mal-2026-964 | Malicious code in naniod (npm) | 2026-02-20T16:59:55Z | 2026-02-23T04:21:34Z |
| mal-2026-963 | Malicious code in locale-loader-pro (npm) | 2026-02-20T16:59:55Z | 2026-02-23T04:21:34Z |
| mal-2026-919 | Malicious code in mds-webcomponents (npm) | 2026-02-16T15:20:34Z | 2026-02-23T04:21:34Z |
| mal-2026-885 | Malicious code in metadata-stripper (npm) | 2026-02-13T13:50:54Z | 2026-02-23T04:21:34Z |
| mal-2026-853 | Malicious code in node-dotenv-cli (npm) | 2026-02-11T10:54:37Z | 2026-02-23T04:21:34Z |
| mal-2026-848 | Malicious code in npm_cimetadata (npm) | 2026-02-11T03:35:51Z | 2026-02-23T04:21:34Z |
| mal-2026-837 | Malicious code in notification-saved-search-settings-podlet (npm) | 2026-02-10T17:06:08Z | 2026-02-23T04:21:34Z |
| mal-2026-836 | Malicious code in myads-layout (npm) | 2026-02-10T17:06:04Z | 2026-02-23T04:21:34Z |
| mal-2026-827 | Malicious code in narrow-array (npm) | 2026-02-10T13:49:16Z | 2026-02-23T04:21:34Z |
| mal-2026-962 | Malicious code in iruchache (npm) | 2026-02-20T16:56:11Z | 2026-02-23T04:21:33Z |
| mal-2026-961 | Malicious code in iru-caches (npm) | 2026-02-20T16:56:11Z | 2026-02-23T04:21:33Z |
| mal-2026-960 | Malicious code in hardhta (npm) | 2026-02-20T16:56:12Z | 2026-02-23T04:21:33Z |
| mal-2026-959 | Malicious code in format-defaults (npm) | 2026-02-20T16:56:12Z | 2026-02-23T04:21:33Z |
| mal-2026-908 | Malicious code in hops-preset-jest (npm) | 2026-02-15T15:57:34Z | 2026-02-23T04:21:33Z |
| mal-2026-895 | Malicious code in json-mapping-src (npm) | 2026-02-13T17:34:17Z | 2026-02-23T04:21:33Z |
| mal-2026-884 | Malicious code in hxz-protection (npm) | 2026-02-13T13:57:39Z | 2026-02-23T04:21:33Z |
| mal-2026-834 | Malicious code in graphflowx (npm) | 2026-02-10T15:46:43Z | 2026-02-23T04:21:33Z |
| mal-2026-821 | Malicious code in jwtdotenv (npm) | 2026-02-09T17:27:19Z | 2026-02-23T04:21:33Z |
| mal-2026-820 | Malicious code in json-web-sources (npm) | 2026-02-09T17:25:32Z | 2026-02-23T04:21:33Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1114 | Linux Kernel: Mehrere Schwachstellen | 2025-05-20T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1098 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-05-18T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1001 | Intel Prozessoren: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-05-12T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0999 | Linux Kernel: Mehrere Schwachstellen | 2025-05-11T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0991 | Linux Kernel: Mehrere Schwachstellen | 2025-05-08T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0975 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-05-07T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0964 | Django: Schwachstelle ermöglicht Denial of Service | 2025-05-07T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0945 | Linux Kernel: Mehrere Schwachstellen | 2025-05-05T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-0895 | Apache Tomcat: Mehrere Schwachstellen | 2025-04-28T22:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0407 | OPNsense: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2026-02-12T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0406 | Nagios Enterprises Nagios XI: Mehrere Schwachstellen ermöglichen Codeausführung | 2026-02-12T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0383 | AMD Radeon: Mehrere Schwachstellen | 2026-02-10T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0377 | Ivanti Endpoint Manager: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2026-02-10T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0369 | Microsoft Windows: Mehrere Schwachstellen | 2026-02-10T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0309 | NGINX OSS und NGINX Plus: Schwachstelle ermöglicht Manipulation von Dateien | 2026-02-04T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0194 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2026-01-21T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0184 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2026-01-20T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0080 | Microsoft Azure: Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2026-0009 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2026-01-04T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2914 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-22T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2904 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-18T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2737 | libpng: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-12-03T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2436 | Xwayland und X.Org X11: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-10-28T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2312 | Cisco Mehrere Produkte: Mehrere Schwachstellen | 2025-10-15T22:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2144 | binutils: Mehrere Schwachstellen | 2025-09-28T22:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-2112 | DNSdist: Schwachstelle ermöglicht Denial of Service | 2025-09-23T22:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0922 | Linux Kernel: Mehrere Schwachstellen | 2025-05-01T22:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0844 | Linux Kernel: Mehrere Schwachstellen | 2025-04-16T22:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0649 | Linux Kernel: Mehrere Schwachstellen | 2025-03-27T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0453 | Linux Kernel: Mehrere Schwachstellen | 2025-02-26T23:00:00.000+00:00 | 2026-02-12T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0300 | Kwetsbaarheden verholpen in GitLab EE & CE | 2025-09-29T09:40:53.033373Z | 2025-09-29T09:40:53.033373Z |
| ncsc-2025-0299 | Kwetsbaarheden verholpen in Zenitel ICX500 en ICX510 Gateway | 2025-09-26T07:00:18.729367Z | 2025-09-26T07:00:18.729367Z |
| ncsc-2025-0298 | Kwetsbaarheden verholpen in Cisco Secure Firewall ASA en FTD | 2025-09-25T18:17:20.040958Z | 2025-09-25T18:17:20.040958Z |
| ncsc-2025-0297 | Kwetsbaarheden verholpen in Cisco IOS en Cisco IOS XE Software | 2025-09-25T09:20:07.678881Z | 2025-09-25T10:42:19.129323Z |
| ncsc-2025-0295 | Kwetsbaarheid verholpen in Fortra's GoAnywhere MFT | 2025-09-19T12:26:42.186246Z | 2025-09-19T12:26:42.186246Z |
| ncsc-2025-0294 | Kwetsbaarheden verholpen in HPE Aruba Networking EdgeConnect SD-WAN Gateways | 2025-09-18T12:02:45.239087Z | 2025-09-18T12:02:45.239087Z |
| ncsc-2025-0293 | Kwetsbaarheden verholpen in Spring Framework | 2025-09-16T13:38:44.960337Z | 2025-09-16T13:38:44.960337Z |
| ncsc-2025-0292 | Kwetsbaarheden verholpen in Ivanti producten | 2025-09-16T12:21:50.959347Z | 2025-09-16T12:21:50.959347Z |
| ncsc-2025-0291 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2025-09-16T11:17:27.365694Z | 2025-09-16T11:17:27.365694Z |
| ncsc-2025-0290 | Kwetsbaarheden verholpen in Apple macOS | 2025-09-16T11:16:20.572265Z | 2025-09-16T11:16:20.572265Z |
| ncsc-2025-0289 | Kwetsbaarheden verholpen in Omnissa Workspace ONE UEM | 2025-09-12T15:23:20.359090Z | 2025-09-12T15:23:20.359090Z |
| ncsc-2025-0288 | Kwetsbaarheden verholpen in GitLab CE/EE | 2025-09-12T14:49:52.285990Z | 2025-09-12T14:49:52.285990Z |
| ncsc-2025-0287 | Kwetsbaarheden verholpen in Cisco NX-OS Software | 2025-09-11T08:18:37.706725Z | 2025-09-11T08:18:37.706725Z |
| ncsc-2025-0286 | Kwetsbaarheden verholpen in Cisco IOS XR Software | 2025-09-11T08:14:36.960621Z | 2025-09-11T08:14:36.960621Z |
| ncsc-2025-0285 | Kwetsbaarheden verholpen in Adobe Acrobat Reader | 2025-09-10T11:01:43.415733Z | 2025-09-10T11:01:43.415733Z |
| ncsc-2025-0284 | Kwetsbaarheid verholpen in Adobe Commerce en Magento | 2025-09-10T10:49:56.787627Z | 2025-09-10T10:49:56.787627Z |
| ncsc-2025-0283 | Kwetsbaarheden verholpen in Adobe Experience Manager | 2025-09-10T10:46:54.808276Z | 2025-09-10T10:46:54.808276Z |
| ncsc-2025-0282 | Kwetsbaarheid verholpen in Adobe Dreamweaver | 2025-09-10T10:38:24.553749Z | 2025-09-10T10:38:24.553749Z |
| ncsc-2025-0281 | Kwetsbaarheid verholpen in Adobe ColdFusion | 2025-09-10T10:24:09.409410Z | 2025-09-10T10:24:09.409410Z |
| ncsc-2025-0280 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2025-09-09T18:27:39.956624Z | 2025-09-09T18:27:39.956624Z |
| ncsc-2025-0279 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-09-09T18:25:53.539582Z | 2025-09-09T18:25:53.539582Z |
| ncsc-2025-0278 | Kwetsbaarheden verholpen in Microsoft Office | 2025-09-09T18:23:23.763765Z | 2025-09-09T18:23:23.763765Z |
| ncsc-2025-0277 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-09-09T18:22:30.766030Z | 2025-09-09T18:22:30.766030Z |
| ncsc-2025-0276 | Kwetsbaarheden verholpen in Schneider Electric Saitel | 2025-09-09T15:16:00.122647Z | 2025-09-09T15:16:00.122647Z |
| ncsc-2025-0275 | Kwetsbaarheden verholpen in SAP producten | 2025-09-09T11:12:22.945466Z | 2025-09-09T11:12:22.945466Z |
| ncsc-2025-0274 | Kwetsbaarheden verholpen in Siemens producten | 2025-09-09T11:06:34.785987Z | 2025-09-09T11:06:34.785987Z |
| ncsc-2025-0245 | Kwetsbaarheden verholpen in SAP producten | 2025-08-12T11:10:21.111816Z | 2025-09-05T11:12:05.722381Z |
| ncsc-2025-0273 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-09-04T08:15:14.806733Z | 2025-09-04T08:15:14.806733Z |
| ncsc-2025-0272 | Kwetsbaarheid verholpen in FreePBX | 2025-08-29T08:37:54.893549Z | 2025-08-29T08:37:54.893549Z |
| ncsc-2025-0271 | Kwetsbaarheden verholpen in Arcserve Unified Data Protection | 2025-08-28T12:56:02.228992Z | 2025-08-28T12:56:02.228992Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-093430 | SSA-093430: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V3.0 | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-035466 | SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS | 2023-10-10T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-024584 | SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-976324 | SSA-976324: Multiple IGS File Parsing Vulnerabilities in PS/IGES Parasolid Translator Component before V27.1.215 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-968170 | SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products | 2023-06-13T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-953710 | SSA-953710: Vulnerabilities in the Network Communication Stack in Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-925850 | SSA-925850: Improper Access Control in Polarion ALM | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-923361 | SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-916916 | SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-871717 | SSA-871717: Multiple Vulnerabilities in Polarion ALM | 2024-02-13T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-665034 | SSA-665034: Vulnerability in Nozomi Guardian/CMC before 23.3.0 on RUGGEDCOM APE1808 devices | 2024-02-13T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-661579 | SSA-661579: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-647455 | SSA-647455: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.2 on RUGGEDCOM APE1808 devices | 2023-10-10T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-592380 | SSA-592380: Denial of Service Vulnerability in SIMATIC S7-1500 CPUs and related products | 2023-12-12T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-589937 | SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-489698 | SSA-489698: X_T File Parsing Vulnerability in Parasolid | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-382651 | SSA-382651: File Parsing Vulnerability in Solid Edge | 2024-03-12T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-292063 | SSA-292063: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.3 and 23.1.0 on RUGGEDCOM APE1808 devices | 2023-11-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-292022 | SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-273900 | SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-258494 | SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:2145 | Red Hat Security Advisory: Kiali 1.73.26 for Red Hat OpenShift Service Mesh 2.6 | 2026-02-05T15:53:57+00:00 | 2026-02-17T12:26:50+00:00 |
| rhsa-2026:2119 | Red Hat Security Advisory: OpenShift Container Platform 4.20.14 bug fix and security update | 2026-02-11T04:25:53+00:00 | 2026-02-17T12:26:48+00:00 |
| rhsa-2026:2078 | Red Hat Security Advisory: OpenShift Container Platform 4.18.33 bug fix and security update | 2026-02-11T04:27:02+00:00 | 2026-02-17T12:26:47+00:00 |
| rhsa-2026:2568 | Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update | 2026-02-11T15:09:41+00:00 | 2026-02-17T11:15:40+00:00 |
| rhsa-2026:2350 | Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update | 2026-02-09T15:50:42+00:00 | 2026-02-17T11:15:40+00:00 |
| rhsa-2026:1517 | Red Hat Security Advisory: RHACS 4.8.8 security and bug fix update | 2026-01-28T22:40:02+00:00 | 2026-02-17T11:15:38+00:00 |
| rhsa-2026:1049 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.0 | 2026-01-22T21:04:37+00:00 | 2026-02-17T11:15:36+00:00 |
| rhsa-2025:23449 | Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (ROCm) | 2025-12-17T08:22:31+00:00 | 2026-02-17T11:15:29+00:00 |
| rhsa-2025:23209 | Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (TPU) | 2025-12-15T15:50:15+00:00 | 2026-02-17T11:15:28+00:00 |
| rhsa-2025:23205 | Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (ROCm) | 2025-12-15T15:38:07+00:00 | 2026-02-17T11:15:28+00:00 |
| rhsa-2025:23204 | Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (CUDA) | 2025-12-15T15:38:04+00:00 | 2026-02-17T11:15:28+00:00 |
| rhsa-2025:23202 | Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.5 (CUDA) | 2025-12-15T15:29:01+00:00 | 2026-02-17T11:15:27+00:00 |
| rhsa-2026:2786 | Red Hat Security Advisory: glibc security update | 2026-02-17T10:36:36+00:00 | 2026-02-17T10:37:35+00:00 |
| rhsa-2026:1334 | Red Hat Security Advisory: glibc security update | 2026-01-27T09:17:01+00:00 | 2026-02-17T10:37:35+00:00 |
| rhsa-2026:1610 | Red Hat Security Advisory: Red Hat OpenShift Lightspeed 1.0.9 security update | 2026-01-30T18:51:47+00:00 | 2026-02-17T09:57:37+00:00 |
| rhsa-2026:0409 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2026-01-08T19:41:55+00:00 | 2026-02-17T09:57:37+00:00 |
| rhsa-2026:0408 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update | 2026-01-08T19:38:23+00:00 | 2026-02-17T09:57:37+00:00 |
| rhsa-2026:0406 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update | 2026-01-08T19:34:46+00:00 | 2026-02-17T09:57:37+00:00 |
| rhsa-2026:2783 | Red Hat Security Advisory: nodejs:20 security update | 2026-02-17T09:32:33+00:00 | 2026-02-17T09:33:24+00:00 |
| rhsa-2026:2768 | Red Hat Security Advisory: nodejs:20 security update | 2026-02-17T01:05:30+00:00 | 2026-02-17T09:33:24+00:00 |
| rhsa-2026:2767 | Red Hat Security Advisory: nodejs:20 security update | 2026-02-17T00:48:09+00:00 | 2026-02-17T09:33:24+00:00 |
| rhsa-2026:2422 | Red Hat Security Advisory: nodejs:20 security update | 2026-02-10T12:54:32+00:00 | 2026-02-17T09:33:22+00:00 |
| rhsa-2026:2421 | Red Hat Security Advisory: nodejs:22 security update | 2026-02-10T12:58:58+00:00 | 2026-02-17T09:33:21+00:00 |
| rhsa-2026:1842 | Red Hat Security Advisory: nodejs24 security update | 2026-02-05T16:03:11+00:00 | 2026-02-17T09:33:20+00:00 |
| rhsa-2026:2420 | Red Hat Security Advisory: nodejs:24 security update | 2026-02-10T12:54:52+00:00 | 2026-02-17T09:33:19+00:00 |
| rhsa-2026:1843 | Red Hat Security Advisory: nodejs22 security update | 2026-02-05T16:03:36+00:00 | 2026-02-17T09:33:18+00:00 |
| rhsa-2026:2800 | Red Hat Security Advisory: Red Hat Ceph Storage | 2026-02-17T09:23:04+00:00 | 2026-02-17T09:28:06+00:00 |
| rhsa-2026:2737 | Red Hat Security Advisory: Red Hat Ceph Storage | 2026-02-16T12:56:05+00:00 | 2026-02-17T09:28:02+00:00 |
| rhsa-2026:2711 | Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update | 2026-02-16T10:49:01+00:00 | 2026-02-17T09:27:59+00:00 |
| rhsa-2026:2399 | Red Hat Security Advisory: brotli security update | 2026-02-10T09:11:31+00:00 | 2026-02-17T09:27:59+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-329-05 | Festo Compact Vision System, Control Block, Controller, and Operator Unit products | 2025-11-25T07:00:00.000000Z | 2025-11-25T07:00:00.000000Z |
| icsa-25-329-03 | Zenitel TCIV-3+ | 2025-11-25T07:00:00.000000Z | 2025-11-25T07:00:00.000000Z |
| icsa-25-329-02 | Rockwell Automation Arena Simulation | 2025-11-25T07:00:00.000000Z | 2025-11-25T07:00:00.000000Z |
| icsa-25-329-01 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share | 2025-11-25T07:00:00.000000Z | 2025-11-25T07:00:00.000000Z |
| icsa-22-333-05 | Mitsubishi Electric FA Engineering Software (Update C) | 2022-12-05T07:00:00.000000Z | 2025-11-25T07:00:00.000000Z |
| icsa-25-329-04 | Opto 22 groov View | 2025-11-25T06:00:00.000000Z | 2025-11-25T06:00:00.000000Z |
| icsa-25-324-06 | Emerson Appleton UPSMON-PRO | 2025-11-20T07:00:00.000000Z | 2025-11-20T07:00:00.000000Z |
| icsa-25-324-01 | Automated Logic WebCTRL Premium Server | 2025-11-20T07:00:00.000000Z | 2025-11-20T07:00:00.000000Z |
| icsa-25-324-03 | Opto 22 GRV-EPIC and groov RIO | 2025-11-20T06:00:00.000000Z | 2025-11-20T06:00:00.000000Z |
| icsa-25-324-02 | ICAM365 CCTV Camera Multiple Models | 2025-11-20T06:00:00.000000Z | 2025-11-20T06:00:00.000000Z |
| icsa-25-322-05 | METZ CONNECT EWIO2 | 2025-11-18T12:00:00.000000Z | 2025-11-18T12:00:00.000000Z |
| icsa-25-322-03 | Shelly Pro 3EM | 2025-11-18T07:00:00.000000Z | 2025-11-18T07:00:00.000000Z |
| icsa-25-322-02 | Shelly Pro 4PM | 2025-11-18T07:00:00.000000Z | 2025-11-18T07:00:00.000000Z |
| icsa-25-317-12 | Siemens Spectrum Power 4 | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-11 | Siemens SICAM P850 family and SICAM P855 family | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-10 | *Rockwell Automation AADvance-Trusted SIS Workstation * | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-09 | Rockwell Automation FactoryTalk Policy Manager | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-08 | General Industrial Controls Lynx+ Gateway | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-07 | Rockwell Automation FactoryTalk DataMosaix Private Cloud | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-06 | Rockwell Automation Studio 5000 Simulation Interface | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-05 | Rockwell Automation Verve Asset Manager | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-04 | Brightpick Mission Control / Internal Logic Control | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-03 | AVEVA Edge | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-02 | AVEVA Application Server IDE | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-317-01 | Mitsubishi Electric MELSEC iQ-F Series | 2025-11-13T07:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-273-04 | Festo Controller CECC-S,-LK,-D Family Firmware (Update A) | 2025-09-30T06:00:00.000000Z | 2025-11-13T07:00:00.000000Z |
| icsa-25-322-04 | Schneider Electric PowerChute Serial Shutdown | 2025-11-11T08:00:00.000000Z | 2025-11-11T08:00:00.000000Z |
| icsa-25-322-01 | Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio | 2025-11-11T08:00:00.000000Z | 2025-11-11T08:00:00.000000Z |
| icsa-25-224-03 | Schneider Electric EcoStruxure Power Monitoring Expert | 2025-08-12T04:00:00.000000Z | 2025-11-11T08:00:00.000000Z |
| icsa-25-317-17 | Siemens Software Center and Solid Edge | 2025-11-11T00:00:00.000000Z | 2025-11-11T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-webex-credexp-xmn85y6 | Cisco Webex for BroadWorks Credential Exposure Vulnerability | 2025-03-04T16:00:00+00:00 | 2025-04-01T13:40:00+00:00 |
| cisco-sa-sdwan-xss-zq4kpvyd | Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability | 2024-09-25T16:00:00+00:00 | 2025-03-28T18:38:53+00:00 |
| cisco-sa-dnac-api-nbpzcjcm | Cisco Catalyst Center Unauthenticated API Access Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-03-26T16:00:00+00:00 |
| cisco-sa-xrike-9wygprgq | Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-xr792-bwfvdpy | Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-sb-lkm-znerzjbz | Cisco IOS XR Software Secure Boot Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ncs-hybridacl-crmzffkq | Cisco IOS XR Software Hybrid Access Control List Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-multicast-ermrsvq7 | Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-modular-acl-u5mepxmm | Cisco IOS XR Software Access Control List Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ipv4uni-lfm3cfbu | Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-iosxr-priv-esc-gfqjxvof | Cisco IOS XR Software CLI Privilege Escalation Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-iosxr-bgp-dos-o7stephx | Cisco IOS XR Software Border Gateway Protocol Confederation Denial of Service Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-ios-xr-verii-bypass-hhpwqrvx | Cisco IOS XR Software Image Verification Bypass Vulnerability | 2025-03-12T16:00:00+00:00 | 2025-03-12T16:00:00+00:00 |
| cisco-sa-snmp-dos-sdxnsucw | Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-03-12T15:22:33+00:00 |
| cisco-sa-sbr042-multi-vuln-ej76pke5 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Vulnerabilities | 2023-01-11T16:00:00+00:00 | 2025-03-07T17:33:55+00:00 |
| cisco-sa-tms-xss-vuln-wbtcywxg | Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability | 2025-03-05T16:00:00+00:00 | 2025-03-05T16:44:57+00:00 |
| cisco-sa-secure-dll-injection-aoyzeqsg | Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability | 2025-03-05T16:00:00+00:00 | 2025-03-05T16:00:00+00:00 |
| cisco-sa-nxos-ici-dpojbwxk | Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| cisco-sa-n3kn9k-healthdos-eoqswk4g | Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| cisco-sa-apic-multi-vulns-9ummtg5 | Cisco Application Policy Infrastructure Controller Vulnerabilities | 2025-02-26T16:00:00+00:00 | 2025-02-26T16:00:00+00:00 |
| cisco-sa-phone-info-disc-yyxswstk | Cisco Video Phone 8875 and Desk Phone 9800 Series Information Disclosure Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-esa-mailpol-bypass-5nvcjzmw | Cisco Secure Email Gateway Email Filter Bypass Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-broadworks-xss-gdpgj58p | Cisco BroadWorks Application Delivery Platform Cross-Site Scripting Vulnerability | 2025-02-19T16:00:00+00:00 | 2025-02-19T16:00:00+00:00 |
| cisco-sa-ise-multivuls-ftw9aoxf | Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-10T20:23:50+00:00 |
| cisco-sa-esa-sma-wsa-multi-ykujhs34 | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-07T19:21:57+00:00 |
| cisco-sa-swa-range-bypass-2bsehysu | Cisco Secure Web Appliance Range Request Bypass Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-ise-xss-42tgsdmg | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-expressway-xss-uexuzrew | Cisco Expressway Series Cross-Site Scripting Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-esa-sma-xss-wck2wcug | Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| cisco-sa-esa-sma-wsa-snmp-inf-fqpvl8sx | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance SNMP Polling Information Disclosure Vulnerability | 2025-02-05T16:00:00+00:00 | 2025-02-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2022-50327 | ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value | 2025-09-02T00:00:00.000Z | 2026-02-24T14:39:07.000Z |
| msrc_cve-2025-38458 | atm: clip: Fix NULL pointer dereference in vcc_sendmsg() | 2025-07-02T00:00:00.000Z | 2026-02-24T14:39:05.000Z |
| msrc_cve-2025-39730 | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:59.000Z |
| msrc_cve-2025-38457 | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 2025-07-02T00:00:00.000Z | 2026-02-24T14:38:57.000Z |
| msrc_cve-2025-39724 | serial: 8250: fix panic due to PSLVERR | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:52.000Z |
| msrc_cve-2025-38445 | md/raid1: Fix stack memory use after return in raid1_reshape | 2025-07-02T00:00:00.000Z | 2026-02-24T14:38:50.000Z |
| msrc_cve-2025-39766 | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:45.000Z |
| msrc_cve-2025-38444 | raid10: cleanup memleak at raid10_make_request | 2025-07-02T00:00:00.000Z | 2026-02-24T14:38:43.000Z |
| msrc_cve-2025-39757 | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:38.000Z |
| msrc_cve-2025-38443 | nbd: fix uaf in nbd_genl_connect() error path | 2025-07-02T00:00:00.000Z | 2026-02-24T14:38:35.000Z |
| msrc_cve-2025-39752 | ARM: rockchip: fix kernel hang during smp initialization | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:30.000Z |
| msrc_cve-2025-38441 | netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() | 2025-07-02T00:00:00.000Z | 2026-02-24T14:38:28.000Z |
| msrc_cve-2025-39749 | rcu: Protect ->defer_qs_iw_pending from data race | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:23.000Z |
| msrc_cve-2025-38439 | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT | 2025-07-02T00:00:00.000Z | 2026-02-24T14:38:21.000Z |
| msrc_cve-2025-39738 | btrfs: do not allow relocation of partially dropped subvolumes | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:16.000Z |
| msrc_cve-2025-38347 | f2fs: fix to do sanity check on ino and xnid | 2025-07-02T00:00:00.000Z | 2026-02-24T14:38:13.000Z |
| msrc_cve-2025-38732 | netfilter: nf_reject: don't leak dst refcount for loopback packets | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:08.000Z |
| msrc_cve-2025-37932 | sch_htb: make htb_qlen_notify() idempotent | 2025-05-02T00:00:00.000Z | 2026-02-24T14:38:05.000Z |
| msrc_cve-2025-38700 | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 2025-09-02T00:00:00.000Z | 2026-02-24T14:38:00.000Z |
| msrc_cve-2025-38262 | tty: serial: uartlite: register uart driver in init | 2025-07-02T00:00:00.000Z | 2026-02-24T14:37:58.000Z |
| msrc_cve-2025-38695 | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 2025-09-02T00:00:00.000Z | 2026-02-24T14:37:53.000Z |
| msrc_cve-2025-38251 | atm: clip: prevent NULL deref in clip_push() | 2025-07-02T00:00:00.000Z | 2026-02-24T14:37:51.000Z |
| msrc_cve-2025-38693 | media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar | 2025-09-02T00:00:00.000Z | 2026-02-24T14:37:46.000Z |
| msrc_cve-2025-38249 | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 2025-07-02T00:00:00.000Z | 2026-02-24T14:37:43.000Z |
| msrc_cve-2025-38691 | pNFS: Fix uninited ptr deref in block/scsi layout | 2025-09-02T00:00:00.000Z | 2026-02-24T14:37:39.000Z |
| msrc_cve-2025-38245 | atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). | 2025-07-02T00:00:00.000Z | 2026-02-24T14:37:36.000Z |
| msrc_cve-2025-38721 | netfilter: ctnetlink: fix refcount leak on table dump | 2025-09-02T00:00:00.000Z | 2026-02-24T14:37:31.000Z |
| msrc_cve-2025-38236 | af_unix: Don't leave consecutive consumed OOB skbs. | 2025-07-02T00:00:00.000Z | 2026-02-24T14:37:28.000Z |
| msrc_cve-2025-38718 | sctp: linearize cloned gso packets in sctp_rcv | 2025-09-02T00:00:00.000Z | 2026-02-24T14:37:24.000Z |
| msrc_cve-2025-38177 | sch_hfsc: make hfsc_qlen_notify() idempotent | 2025-07-02T00:00:00.000Z | 2026-02-24T14:37:21.000Z |
| ID | Description | Updated |
|---|---|---|
| var-200609-0685 | The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does no… | 2025-12-22T23:15:16.225000Z |
| var-201310-0596 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, a… | 2025-12-22T23:14:41.119000Z |
| var-201702-0469 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari be… | 2025-12-22T23:14:10.671000Z |
| var-201711-0923 | There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL b… | 2025-12-22T23:13:10.973000Z |
| var-201801-1711 | Systems with microprocessors utilizing speculative execution and indirect branch predicti… | 2025-12-22T23:12:36.305000Z |
| var-202109-1315 | A memory corruption issue was addressed with improved state management. This issue is fix… | 2025-12-22T23:11:59.868000Z |
| var-200712-0433 | Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) f… | 2025-12-22T23:11:27.191000Z |
| var-200901-0726 | Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0… | 2025-12-22T23:11:26.210000Z |
| var-201003-1114 | The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9,… | 2025-12-22T23:11:26.032000Z |
| var-202207-0381 | A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5… | 2025-12-22T23:11:19.217000Z |
| var-201909-0695 | A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kern… | 2025-12-22T23:11:12.635000Z |
| var-201108-0217 | Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before … | 2025-12-22T23:10:40.997000Z |
| var-201109-0200 | Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers… | 2025-12-22T23:10:39.510000Z |
| var-201504-0166 | Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earli… | 2025-12-22T23:10:05.860000Z |
| var-200102-0007 | WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood… | 2025-12-22T23:10:02.954000Z |
| var-201604-0129 | Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 … | 2025-12-22T23:08:47.658000Z |
| var-200608-0036 | Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to ca… | 2025-12-22T23:08:41.976000Z |
| var-200102-0075 | IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP … | 2025-12-22T23:08:40.730000Z |
| var-200808-0470 | Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Ap… | 2025-12-22T23:08:39.429000Z |
| var-202212-2277 | An integer underflow in Organization Specific TLV was found in various versions of OpenvS… | 2025-12-22T23:08:38.384000Z |
| var-201306-0256 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T23:08:37.705000Z |
| var-201806-1460 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2025-12-22T23:08:37.463000Z |
| var-200712-0599 | Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in M… | 2025-12-22T23:08:37.405000Z |
| var-201501-0435 | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attack… | 2025-12-22T23:08:37.087000Z |
| var-200811-0321 | The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from… | 2025-12-22T23:08:28.869000Z |
| var-201203-0177 | Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy… | 2025-12-22T23:08:28.352000Z |
| var-201702-0466 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari be… | 2025-12-22T23:08:11.427000Z |
| var-202004-0530 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean e… | 2025-12-22T23:08:10.438000Z |
| var-201806-1456 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS befor… | 2025-12-22T23:08:04.281000Z |
| var-200909-0399 | The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass inte… | 2025-12-22T23:07:56.757000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000032 | Mailform Pro CGI generating error messages containing sensitive information | 2025-05-26T14:22+09:00 | 2025-05-26T14:22+09:00 |
| jvndb-2025-000033 | Improper pattern file validation in i-FILTER optional feature 'Anti-Virus & Sandbox' | 2025-05-23T15:36+09:00 | 2025-05-23T15:36+09:00 |
| jvndb-2025-005467 | Passback vulnerabilities in Canon Production Printers, Office/Small Office Multifunction Printers, and Laser Printers | 2025-05-22T15:03+09:00 | 2025-05-22T15:03+09:00 |
| jvndb-2024-000117 | Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2024-10-31T16:44+09:00 | 2025-05-19T17:59+09:00 |
| jvndb-2025-005107 | Multiple vulnerabilities in V-SFT | 2025-05-16T14:32+09:00 | 2025-05-16T14:32+09:00 |
| jvndb-2025-005057 | Multiple vulnerabilities in I-O DATA network attached hard disk 'HDL-T Series' | 2025-05-15T18:27+09:00 | 2025-05-15T18:27+09:00 |
| jvndb-2025-005050 | Multiple vulnerabilities in a-blog cms | 2025-05-15T18:11+09:00 | 2025-05-15T18:11+09:00 |
| jvndb-2025-000031 | Pgpool-II vulnerable to authentication bypass by primary weakness | 2025-05-15T16:14+09:00 | 2025-05-15T16:14+09:00 |
| jvndb-2025-004863 | Panasonic IR Control Hub vulnerable to Unauthorised firmware loading | 2025-05-14T11:30+09:00 | 2025-05-14T11:30+09:00 |
| jvndb-2025-004671 | Multiple vulnerabilities in GL-MT2500 and GL-MT2500A | 2025-05-12T17:52+09:00 | 2025-05-12T17:52+09:00 |
| jvndb-2025-001016 | OMRON NJ/NX series vulnerable to path traversal | 2025-02-06T18:27+09:00 | 2025-05-08T17:44+09:00 |
| jvndb-2025-004079 | Improper access permission settings in multiple SEIKO EPSON printer drivers for Windows OS | 2025-04-30T11:46+09:00 | 2025-04-30T11:46+09:00 |
| jvndb-2025-004076 | Security Update for Trend Micro Trend Vision One (April 2025) | 2025-04-30T10:38+09:00 | 2025-04-30T10:38+09:00 |
| jvndb-2025-000029 | Multiple vulnerabilities in Quick Agent | 2025-04-25T13:49+09:00 | 2025-04-25T13:49+09:00 |
| jvndb-2025-000028 | i-PRO Configuration Tool vulnerable to use of hard-coded cryptographic key | 2025-04-24T13:50+09:00 | 2025-04-24T13:50+09:00 |
| jvndb-2025-000027 | Active! mail vulnerable to stack-based buffer overflow | 2025-04-18T16:50+09:00 | 2025-04-18T16:50+09:00 |
| jvndb-2016-000129 | Android OS issue where it is affected by the CRIME attack | 2016-07-25T11:15+09:00 | 2025-04-18T16:36+09:00 |
| jvndb-2025-003213 | TP-Link Deco BE65 Pro vulnerable to OS command injection | 2025-04-11T13:52+09:00 | 2025-04-11T13:52+09:00 |
| jvndb-2025-000026 | Multiple vulnerabilities in BizRobo! | 2025-04-10T15:36+09:00 | 2025-04-10T15:36+09:00 |
| jvndb-2025-003091 | Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (April 2025) | 2025-04-09T14:55+09:00 | 2025-04-09T14:55+09:00 |
| jvndb-2025-002990 | Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT 'AC-WPS-11ac series' | 2025-04-07T17:44+09:00 | 2025-04-07T17:44+09:00 |
| jvndb-2025-002714 | Improper symbolic link file handling in FutureNet NXR series, VXR series and WXR series routers | 2025-03-31T16:59+09:00 | 2025-04-03T15:19+09:00 |
| jvndb-2025-000025 | WinRAR vulnerable to the symbolic link based "Mark of the Web" check bypass | 2025-04-03T12:29+09:00 | 2025-04-03T12:29+09:00 |
| jvndb-2025-000022 | Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products | 2025-04-02T15:12+09:00 | 2025-04-02T15:12+09:00 |
| jvndb-2025-002790 | Out-of-bounds Write vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers | 2025-04-02T15:05+09:00 | 2025-04-02T15:05+09:00 |
| jvndb-2025-000023 | WordPress plugin "Welcart e-Commerce" vulnerable to untrusted data deserialization | 2025-04-01T14:20+09:00 | 2025-04-01T14:20+09:00 |
| jvndb-2024-003016 | Multiple vulnerabilities in home gateway HGW BL1500HM | 2024-03-25T17:28+09:00 | 2025-03-28T12:01+09:00 |
| jvndb-2025-000018 | Multiple vulnerabilities in home gateway HGW-BL1500HM | 2025-03-19T15:33+09:00 | 2025-03-28T11:48+09:00 |
| jvndb-2025-000024 | a-blog cms vulnerable to untrusted data deserialization | 2025-03-28T10:46+09:00 | 2025-03-28T10:46+09:00 |
| jvndb-2025-000021 | Multiple vulnerabilities in PowerCMS | 2025-03-26T18:13+09:00 | 2025-03-26T18:13+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0317-1 | Security update for the Linux Kernel | 2026-01-28T14:37:02Z | 2026-01-28T14:37:02Z |
| suse-su-2026:0316-1 | Security update for the Linux Kernel | 2026-01-28T14:35:14Z | 2026-01-28T14:35:14Z |
| suse-su-2026:0315-1 | Security update for the Linux Kernel | 2026-01-28T14:34:30Z | 2026-01-28T14:34:30Z |
| suse-su-2026:0314-1 | Security update for python311 | 2026-01-28T13:28:48Z | 2026-01-28T13:28:48Z |
| suse-su-2026:20202-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-01-28T10:27:58Z | 2026-01-28T10:27:58Z |
| suse-su-2026:20171-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-01-28T10:27:58Z | 2026-01-28T10:27:58Z |
| suse-su-2026:0313-1 | Security update for gimp | 2026-01-28T10:13:29Z | 2026-01-28T10:13:29Z |
| suse-su-2026:20184-1 | Security update for python-FontTools | 2026-01-28T09:56:55Z | 2026-01-28T09:56:55Z |
| suse-su-2026:0312-1 | Security update for openssl-3 | 2026-01-28T09:37:56Z | 2026-01-28T09:37:56Z |
| suse-su-2026:0311-1 | Security update for openssl-3 | 2026-01-28T09:37:48Z | 2026-01-28T09:37:48Z |
| suse-su-2026:0310-1 | Security update for openssl-3 | 2026-01-28T09:37:26Z | 2026-01-28T09:37:26Z |
| suse-su-2026:0309-1 | Security update for openssl-3 | 2026-01-28T09:36:37Z | 2026-01-28T09:36:37Z |
| suse-su-2026:0308-1 | Security update for go1.24-openssl | 2026-01-28T08:38:40Z | 2026-01-28T08:38:40Z |
| suse-su-2026:20183-1 | Security update for ImageMagick | 2026-01-28T08:38:34Z | 2026-01-28T08:38:34Z |
| suse-su-2026:20182-1 | Security update for cockpit-subscriptions | 2026-01-27T20:40:44Z | 2026-01-27T20:40:44Z |
| suse-su-2026:20170-1 | Security update for cockpit-subscriptions | 2026-01-27T20:40:44Z | 2026-01-27T20:40:44Z |
| suse-su-2026:0307-1 | Security update for python-python-multipart | 2026-01-27T16:36:58Z | 2026-01-27T16:36:58Z |
| suse-su-2026:0306-1 | Security update for xen | 2026-01-27T16:15:19Z | 2026-01-27T16:15:19Z |
| suse-su-2026:0305-1 | Recommended update for kernel-firmware | 2026-01-27T16:15:14Z | 2026-01-27T16:15:14Z |
| suse-su-2026:0304-1 | Security update for xen | 2026-01-27T16:14:51Z | 2026-01-27T16:14:51Z |
| suse-su-2026:0303-1 | Security update for xen | 2026-01-27T16:14:45Z | 2026-01-27T16:14:45Z |
| suse-su-2026:0301-1 | Security update for nodejs22 | 2026-01-27T08:20:46Z | 2026-01-27T08:20:46Z |
| suse-su-2026:0300-1 | Security update for python-pyasn1 | 2026-01-27T06:46:27Z | 2026-01-27T06:46:27Z |
| suse-su-2026:0299-1 | Security update for python311 | 2026-01-26T16:39:24Z | 2026-01-26T16:39:24Z |
| suse-su-2026:0298-1 | Security update for go1.25-openssl | 2026-01-26T16:11:04Z | 2026-01-26T16:11:04Z |
| suse-su-2026:0297-1 | Security update for go1.25-openssl | 2026-01-26T16:10:54Z | 2026-01-26T16:10:54Z |
| suse-su-2026:0296-1 | Security update for go1.24-openssl | 2026-01-26T13:51:05Z | 2026-01-26T13:51:05Z |
| suse-su-2026:0295-1 | Security update for nodejs22 | 2026-01-26T13:19:01Z | 2026-01-26T13:19:01Z |
| suse-su-2026:20146-1 | Security update for php8 | 2026-01-26T12:36:41Z | 2026-01-26T12:36:41Z |
| suse-su-2026:0293-1 | Security update for the Linux Kernel | 2026-01-26T11:36:42Z | 2026-01-26T11:36:42Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10083-1 | vlang-0.5-2.1 on GA media | 2026-01-22T00:00:00Z | 2026-01-22T00:00:00Z |
| opensuse-su-2026:10082-1 | libsuricata8_0_3-8.0.3-1.1 on GA media | 2026-01-22T00:00:00Z | 2026-01-22T00:00:00Z |
| opensuse-su-2026:10081-1 | libsubid-devel-4.19.2-2.1 on GA media | 2026-01-22T00:00:00Z | 2026-01-22T00:00:00Z |
| opensuse-su-2026:10080-1 | bind-9.20.18-1.1 on GA media | 2026-01-22T00:00:00Z | 2026-01-22T00:00:00Z |
| opensuse-su-2026:20100-1 | Security update for gimp | 2026-01-21T13:31:29Z | 2026-01-21T13:31:29Z |
| opensuse-su-2026:20072-1 | Security update for podman | 2026-01-21T11:06:30Z | 2026-01-21T11:06:30Z |
| opensuse-su-2026:10079-1 | python311-weasyprint-68.0-1.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10078-1 | python311-pyasn1-0.6.2-1.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10077-1 | python311-jaraco.context-6.1.0-1.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10076-1 | python311-FontTools-4.61.1-1.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10075-1 | corepack24-24.13.0-2.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10074-1 | corepack22-22.22.0-1.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:10073-1 | alloy-1.12.2-2.1 on GA media | 2026-01-21T00:00:00Z | 2026-01-21T00:00:00Z |
| opensuse-su-2026:20069-1 | Security update for python-weasyprint | 2026-01-20T23:40:26Z | 2026-01-20T23:40:26Z |
| opensuse-su-2026:20065-1 | Security update for webkit2gtk3 | 2026-01-20T12:08:51Z | 2026-01-20T12:08:51Z |
| opensuse-su-2026:20067-1 | Security update of open-vm-tools | 2026-01-20T11:02:10Z | 2026-01-20T11:02:10Z |
| opensuse-su-2026:20062-1 | Security update for rust1.91, rust1.92 | 2026-01-19T19:43:51Z | 2026-01-19T19:43:51Z |
| opensuse-su-2026:20064-1 | Security update for ffmpeg-4 | 2026-01-19T14:05:53Z | 2026-01-19T14:05:53Z |
| opensuse-su-2026:20060-1 | Security update for cargo-c | 2026-01-19T10:42:10Z | 2026-01-19T10:42:10Z |
| opensuse-su-2026:10072-1 | libblkid-devel-2.41.3-1.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10071-1 | libraylib550-5.5-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10070-1 | python-keystonemiddleware-doc-10.12.0-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10069-1 | heroic-games-launcher-2.18.1-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10068-1 | hauler-1.4.1-1.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10067-1 | grafana-11.6.7-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10066-1 | gimp-3.0.6-5.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10065-1 | harfbuzz-devel-12.3.0-2.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:10064-1 | go1.25-1.25.6-1.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:10063-1 | go1.24-1.24.12-1.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:20057-1 | Security update for docker | 2026-01-17T13:20:26Z | 2026-01-17T13:20:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| sevd-2022-130-01 | PowerLogic ION Setup | 2022-05-10T00:00:00.00Z | 2022-05-10T00:00:00.00Z |
| sevd-2021-313-03 | APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices | 2021-11-09T06:30:00.000Z | 2022-05-10T00:00:00.00Z |
| sevd-2022-039-04 | spaceLYnk, Wiser For KNX, fellerLYnk | 2022-02-08T20:32:52.000Z | 2022-03-08T20:32:52.000Z |
| sevd-2022-067-03 | Ritto Wiser™ Door | 2022-03-08T10:12:35.000Z | 2022-03-08T10:12:35.000Z |
| sevd-2021-313-04 | Windows Print Spooler embedded in EcoStruxure™ Process Expert | 2021-11-09T08:45:48.000Z | 2022-03-08T08:45:48.000Z |
| sevd-2022-011-03 | Easergy P5 | 2022-01-11T11:05:25.000Z | 2022-03-02T11:05:25.000Z |
| sevd-2022-039-06 | Harmony/Magelis iPC Series HMI, Vijeo Designer and Vijeo Designer Basic | 2022-02-08T23:25:23.000Z | 2022-02-08T23:25:23.000Z |
| sevd-2022-039-03 | Easergy P40 | 2022-02-08T17:58:55.000Z | 2022-02-08T17:58:55.000Z |
| sevd-2022-039-05 | EcoStruxure Geo SCADA Expert | 2022-02-08T17:33:44.000Z | 2022-02-08T17:33:44.000Z |
| sevd-2022-039-02 | EcoStruxure EV Charging Expert | 2022-02-08T12:36:59.000Z | 2022-02-08T12:36:59.000Z |
| sevd-2022-039-01 | IGSS (Interactive Graphical SCADA System) | 2022-02-08T07:29:58.000Z | 2022-02-08T07:29:58.000Z |
| sevd-2022-011-07 | EcoStruxure™ Power Monitoring Expert | 2022-01-11T13:20:28.000Z | 2022-01-11T13:20:28.000Z |
| sevd-2022-011-05 | ConneXium Tofino Firewall and Loadable Security Modules | 2022-01-11T12:53:54.000Z | 2022-01-11T12:53:54.000Z |
| sevd-2022-011-04 | Easergy P3 | 2022-01-11T11:28:56.000Z | 2022-01-11T11:28:56.000Z |
| sevd-2022-011-02 | Easergy T300 | 2022-01-11T10:48:02.000Z | 2022-01-11T10:48:02.000Z |
| sevd-2022-011-01 | Ethernet and Web server on Modicon M340 controller and Communication Modules | 2022-01-11T07:53:07.000Z | 2022-01-11T07:53:07.000Z |
| sevd-2021-348-04 | APC by Schneider Electric Rack PDU | 2021-12-14T00:00:00.000Z | 2021-12-21T00:00:00.000Z |
| sevd-2021-348-02 | EVlink City / Parking / Smart Wallbox Charging Stations | 2021-12-14T00:00:00.000Z | 2021-12-14T00:00:00.000Z |
| sevd-2021-348-01 | IGSS (Interactive Graphical SCADA System) | 2021-12-14T00:00:00.000Z | 2021-12-14T00:00:00.000Z |
| sevd-2021-313-07 | Eurotherm GUIcon | 2021-11-09T00:00:00.000Z | 2021-11-09T00:00:00.000Z |
| sevd-2021-313-02 | Schneider Electric Software Update | 2021-11-09T00:00:00.000Z | 2021-11-09T00:00:00.000Z |
| sevd-2021-313-01 | SCADAPack 300E Series RTU | 2021-11-09T00:00:00.000Z | 2021-11-09T00:00:00.000Z |
| sevd-2021-285-05 | Conext™ Advisor & Conext™ Control V2 | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-285-04 | Modicon M218 Logic Controller | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-285-03 | IGSS (Interactive Graphical SCADA System) | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-285-02 | ConneXium Network Manager (CNM) Software | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-285-01 | spaceLYnk, Wiser For KNX, fellerLYnk | 2021-10-12T00:00:00.000Z | 2021-10-12T00:00:00.000Z |
| sevd-2021-257-03 | StruxureWare Data Center Expert | 2021-09-14T00:00:00.000Z | 2021-09-14T00:00:00.000Z |
| sevd-2021-222-06 | CODESYS V2 Vulnerabilities in Programmable Automation Controller (PacDrive) M | 2021-08-10T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| sevd-2021-222-05 | AccuSine PCSn/PCS+/PFV+ | 2021-08-10T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-discourse-2025-68660 | Discourse AI Discover's continue conversation allows threat actor to impersonate user | 2026-02-02T08:42:16.289Z | 2026-02-02T09:12:04.887Z |
| bit-discourse-2025-68659 | Discourse has DoS vulnerability in username change endpoint | 2026-02-02T08:42:14.606Z | 2026-02-02T09:12:04.887Z |
| bit-discourse-2025-68479 | Discourse subscriptions are susceptible to takeover | 2026-02-02T08:42:12.613Z | 2026-02-02T09:12:04.887Z |
| bit-discourse-2025-66488 | Discourse allows script execution in uploaded HTML/XML files on S3 | 2026-02-02T08:42:08.194Z | 2026-02-02T09:12:04.887Z |
| bit-node-2026-21637 | 2026-01-26T14:48:02.384Z | 2026-01-31T09:09:11.750Z | |
| bit-node-2026-21636 | 2026-01-26T14:48:00.613Z | 2026-01-31T09:09:11.750Z | |
| bit-node-2025-59466 | 2026-01-26T14:47:58.830Z | 2026-01-31T09:09:11.750Z | |
| bit-node-2025-59464 | 2026-01-26T14:47:55.131Z | 2026-01-31T09:09:11.750Z | |
| bit-joomla-2025-63083 | Joomla! Core - [20260102] - XSS vector in the pagebreak plugin | 2026-01-31T08:43:33.433Z | 2026-01-31T09:09:11.750Z |
| bit-joomla-2025-63082 | Joomla! Core - [20260101] - Inadequate content filtering for data URLs | 2026-01-31T08:43:31.962Z | 2026-01-31T09:09:11.750Z |
| bit-golang-2025-68119 | Unexpected code execution when invoking toolchain in cmd/go | 2026-01-31T08:43:40.539Z | 2026-01-31T09:09:11.750Z |
| bit-golang-2025-61731 | Arbitrary file write using cgo pkg-config directive in cmd/go | 2026-01-31T08:43:38.643Z | 2026-01-31T09:09:11.750Z |
| bit-golang-2025-61728 | Excessive CPU consumption when building archive index in archive/zip | 2026-01-31T08:43:32.870Z | 2026-01-31T09:09:11.750Z |
| bit-golang-2025-61726 | Memory exhaustion in query parameter parsing in net/url | 2026-01-31T08:43:29.079Z | 2026-01-31T09:09:11.750Z |
| bit-discourse-2026-23743 | Discourse allows permalinks to restricted resources to leak resource slugs to unauthorized users | 2026-01-31T08:42:04.050Z | 2026-01-31T09:09:11.750Z |
| bit-gitea-2026-20912 | Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure | 2026-01-30T08:40:49.607Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20904 | Gitea: Broken access control in OpenID visibility toggle enables cross-user visibility changes | 2026-01-30T08:40:47.849Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20897 | Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR) | 2026-01-30T08:40:45.840Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20888 | Gitea Pull Requests Auto-Merge: Read-Only Users Can Cancel Scheduled Auto-Merge via Web Endpoint (Authorization Bypass) | 2026-01-30T08:40:43.950Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20883 | Gitea Stopwatch API Missing Authorization Check Leads to Post-Revocation Information Disclosure | 2026-01-30T08:40:41.879Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20800 | Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation | 2026-01-30T08:40:39.688Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20750 | Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR) | 2026-01-30T08:40:37.768Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-20736 | Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check | 2026-01-30T08:40:35.702Z | 2026-01-30T09:12:31.676Z |
| bit-gitea-2026-0798 | Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation | 2026-01-30T08:40:33.870Z | 2026-01-30T09:12:31.676Z |
| bit-rum-2022-50806 | 4images 1.9 - Remote Command Execution (RCE) | 2026-01-29T20:50:41.024Z | 2026-01-29T21:11:31.203Z |
| bit-ghost-2025-9862 | Ghost 6.0.6 - SSRF via oEmbed Bookmark | 2026-01-29T20:40:02.993Z | 2026-01-29T21:11:31.203Z |
| bit-pytorch-2026-24747 | PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files | 2026-01-29T08:50:25.994Z | 2026-01-29T09:11:54.406Z |
| bit-python-2025-13836 | Excessive read buffering DoS in http.client | 2025-12-05T11:13:05.077Z | 2026-01-27T09:14:53.416Z |
| bit-python-2025-12084 | Quadratic complexity in node ID cache clearing | 2025-12-10T17:49:06.243Z | 2026-01-27T09:14:53.416Z |
| bit-libpython-2025-13836 | Excessive read buffering DoS in http.client | 2025-12-05T11:07:36.854Z | 2026-01-27T09:14:53.416Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-on55906 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:26:25.467484Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-on38469 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:37:25.667594Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ol60454 | Within HostnameError | 2026-01-30T14:52:23.086717Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ol25917 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:44:22.881508Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ok45738 | Within HostnameError | 2026-01-30T15:45:53.967263Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oj41940 | net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 2026-01-30T15:13:53.428815Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oj15484 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T16:37:55.388839Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oi08379 | Cancelling a query (e | 2026-01-30T15:32:54.729863Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oh86281 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:52:25.054249Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-oa33370 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T15:57:24.977544Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nz19387 | Within HostnameError | 2026-01-30T14:52:23.218213Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nv82543 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:29:25.549030Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nv34418 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:04:54.566695Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nv07964 | Cancelling a query (e | 2026-01-30T15:33:23.809279Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ns41924 | Within HostnameError | 2026-01-30T15:18:53.115636Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nr68832 | libexpat in Expat before 2 | 2026-01-30T16:22:25.447471Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-np17404 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T15:58:24.395667Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nl96892 | Within HostnameError | 2026-01-30T16:31:25.336110Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nj87139 | vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device | 2026-01-30T14:17:21.473350Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ni96678 | Within HostnameError | 2026-01-30T15:06:52.947220Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ng71279 | Redis is an open source, in-memory database that persists on disk | 2026-01-30T14:23:51.400746Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nf19624 | ParseAddress function constructs domain-literal address components through repeated string concatenation | 2026-01-30T17:20:26.466437Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nd19988 | Cancelling a query (e | 2026-01-30T14:59:22.824513Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-nd18869 | tar | 2026-01-30T16:20:55.683557Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-na36743 | Within HostnameError | 2026-01-30T16:35:55.379246Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mz27698 | Redis is an open source, in-memory database that persists on disk | 2026-01-30T14:39:52.940858Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mu17611 | tar | 2026-01-30T15:13:23.048582Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ml51665 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:20:55.711028Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mj64494 | Redis is an open source, in-memory database that persists on disk | 2026-01-30T13:59:20.370058Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-mj51212 | Cancelling a query (e | 2026-01-30T15:40:23.782215Z | 2026-01-29T18:58:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| drupal-contrib-2024-021 | 2024-05-22T16:21:55.000Z | 2025-02-20T19:14:35.000Z | |
| drupal-contrib-2024-022 | 2024-05-29T16:44:55.000Z | 2025-02-20T19:14:10.000Z | |
| drupal-contrib-2024-023 | 2024-05-29T16:52:42.000Z | 2025-02-20T19:13:53.000Z | |
| drupal-contrib-2024-024 | 2024-05-29T16:58:59.000Z | 2025-02-20T19:13:35.000Z | |
| drupal-contrib-2024-025 | 2024-06-05T16:45:02.000Z | 2025-02-20T19:13:15.000Z | |
| drupal-contrib-2024-026 | 2024-07-31T15:59:06.000Z | 2025-02-20T19:12:56.000Z | |
| drupal-contrib-2024-027 | 2024-08-07T17:19:30.000Z | 2025-02-20T19:12:37.000Z | |
| drupal-contrib-2024-028 | 2024-08-07T17:30:20.000Z | 2025-02-20T19:12:22.000Z | |
| drupal-contrib-2024-029 | 2024-08-07T17:36:15.000Z | 2025-02-20T19:12:05.000Z | |
| drupal-contrib-2024-030 | 2024-08-21T16:23:02.000Z | 2025-02-20T19:11:48.000Z | |
| drupal-contrib-2024-011 | 2024-02-28T18:14:40.000Z | 2025-02-20T19:10:16.000Z | |
| drupal-contrib-2024-012 | 2024-02-28T18:19:01.000Z | 2025-02-20T19:09:55.000Z | |
| drupal-contrib-2024-014 | 2024-02-28T18:36:35.000Z | 2025-02-20T19:09:20.000Z | |
| drupal-contrib-2024-015 | 2024-03-06T17:06:37.000Z | 2025-02-20T19:08:51.000Z | |
| drupal-contrib-2024-016 | 2024-03-27T17:16:26.000Z | 2025-02-20T19:08:34.000Z | |
| drupal-contrib-2024-017 | 2024-04-24T13:16:40.000Z | 2025-02-20T18:44:32.000Z | |
| drupal-contrib-2024-018 | 2024-04-24T14:23:34.000Z | 2025-02-20T18:44:08.000Z | |
| drupal-contrib-2024-020 | 2024-05-22T16:03:46.000Z | 2025-02-20T18:43:21.000Z | |
| drupal-contrib-2024-002 | 2024-01-10T18:00:05.000Z | 2025-02-20T18:40:20.000Z | |
| drupal-contrib-2024-003 | 2024-01-24T15:42:46.000Z | 2025-02-20T18:39:54.000Z | |
| drupal-contrib-2024-004 | 2024-01-24T15:45:49.000Z | 2025-02-20T18:39:20.000Z | |
| drupal-contrib-2024-005 | 2024-01-24T15:47:36.000Z | 2025-02-20T18:38:57.000Z | |
| drupal-contrib-2024-006 | 2024-01-24T15:54:55.000Z | 2025-02-20T18:38:32.000Z | |
| drupal-contrib-2024-007 | 2024-01-31T17:22:36.000Z | 2025-02-20T18:38:01.000Z | |
| drupal-contrib-2024-008 | 2024-02-07T17:56:55.000Z | 2025-02-20T18:37:40.000Z | |
| drupal-contrib-2024-009 | 2024-02-14T19:31:10.000Z | 2025-02-20T18:37:01.000Z | |
| drupal-contrib-2024-010 | 2024-02-21T16:58:11.000Z | 2025-02-20T18:36:16.000Z | |
| drupal-contrib-2022-013 | 2022-01-25T18:37:38.000Z | 2024-01-25T20:19:13.000Z | |
| drupal-contrib-2023-055 | 2023-12-20T17:02:51.000Z | 2023-12-20T17:53:15.000Z | |
| drupal-contrib-2023-054 | 2023-12-06T16:16:28.000Z | 2023-12-07T02:47:34.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-08345 | Google Android权限提升漏洞(CNVD-2026-08345) | 2025-09-08 | 2026-01-29 |
| cnvd-2026-08343 | Juniper Networks Junos Space跨站脚本漏洞(CNVD-2026-08343) | 2025-10-15 | 2026-01-29 |
| cnvd-2026-08328 | Tenda AX1806堆栈溢出漏洞(CNVD-2026-08328) | 2026-01-26 | 2026-01-29 |
| cnvd-2026-08327 | Tenda AX1803堆栈溢出漏洞 | 2026-01-26 | 2026-01-29 |
| cnvd-2026-08326 | Tenda AX1806堆栈溢出漏洞 | 2026-01-26 | 2026-01-29 |
| cnvd-2026-07575 | Google Android权限提升漏洞(CNVD-2026-07575) | 2025-09-08 | 2026-01-29 |
| cnvd-2026-08531 | Job Portal /login.php跨站脚本漏洞 | 2024-09-10 | 2026-01-28 |
| cnvd-2026-08530 | Job Portal index.php跨站脚本漏洞 | 2024-09-10 | 2026-01-28 |
| cnvd-2026-08529 | Job Portal SQL注入漏洞 | 2024-09-10 | 2026-01-28 |
| cnvd-2026-08528 | Job Portal index.php文件SQL注入漏洞 | 2024-09-10 | 2026-01-28 |
| cnvd-2026-08527 | Job Portal /process.php跨站脚本漏洞 | 2024-09-10 | 2026-01-28 |
| cnvd-2026-08342 | Juniper Networks Junos Space跨站脚本漏洞(CNVD-2026-08342) | 2025-10-15 | 2026-01-28 |
| cnvd-2026-08341 | Juniper Networks Junos Space跨站脚本漏洞(CNVD-2026-08341) | 2025-10-15 | 2026-01-28 |
| cnvd-2026-08269 | 新华三技术有限公司H3C Magic AX3001存在信息泄露漏洞 | 2025-09-02 | 2026-01-28 |
| cnvd-2026-08240 | 上海居亦科技发展有限公司vigor 3900和vigor 2960存在命令执行漏洞 | 2025-10-22 | 2026-01-28 |
| cnvd-2026-08212 | 湖南强智科技发展有限公司强智科技教务系统存在SQL注入漏洞 | 2025-10-23 | 2026-01-28 |
| cnvd-2026-08206 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-2026-08206) | 2025-10-23 | 2026-01-28 |
| cnvd-2026-08197 | 北京凯特伟业科技有限公司JEPasS云平台存在SQL注入漏洞 | 2025-10-23 | 2026-01-28 |
| cnvd-2026-07580 | Google Android权限提升漏洞(CNVD-2026-07580) | 2025-09-08 | 2026-01-28 |
| cnvd-2026-07579 | Google Android权限提升漏洞(CNVD-2026-07579) | 2025-09-08 | 2026-01-28 |
| cnvd-2026-07578 | Google Android越界读取漏洞(CNVD-2026-07578) | 2025-09-08 | 2026-01-28 |
| cnvd-2026-07577 | Google Android权限提升漏洞(CNVD-2026-07577) | 2025-09-08 | 2026-01-28 |
| cnvd-2026-07576 | Google Android权限提升漏洞(CNVD-2026-07576) | 2025-09-08 | 2026-01-28 |
| cnvd-2026-07574 | Siemens Spectrum Power 4存在未明漏洞(CNVD-2026-07574) | 2025-11-14 | 2026-01-28 |
| cnvd-2026-07573 | Siemens Spectrum Power 4存在未明漏洞(CNVD-2026-07573) | 2025-11-14 | 2026-01-28 |
| cnvd-2026-07572 | Siemens Spectrum Power 4关键资源权限分配错误漏洞 | 2025-11-14 | 2026-01-28 |
| cnvd-2026-07571 | Siemens Spectrum Power 4权限分配错误漏洞 | 2025-11-14 | 2026-01-28 |
| cnvd-2026-07570 | Siemens Spectrum Power 4存在未明漏洞 | 2025-11-14 | 2026-01-28 |
| cnvd-2026-07569 | Siemens Software Center和Siemens Solid Edge SE2025代码问题漏洞 | 2025-11-14 | 2026-01-28 |
| cnvd-2026-07568 | Siemens Altair Grid Engine信息泄露漏洞 | 2025-11-14 | 2026-01-28 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1122 | Multiples vulnérabilités dans Mattermost Server | 2025-12-18T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0051 | Multiples vulnérabilités dans les produits Mozilla | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0050 | Multiples vulnérabilités dans les produits Juniper Networks | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0049 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0048 | Multiples vulnérabilités dans Wireshark | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0047 | Vulnérabilité dans F5 NGINX Ingress Controller | 2026-01-15T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0038 | Multiples vulnérabilités dans les produits Mozilla | 2026-01-14T00:00:00.000000 | 2026-01-15T00:00:00.000000 |
| certfr-2026-avi-0046 | Multiples vulnérabilités dans les produits Microsoft | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0045 | Multiples vulnérabilités dans Microsoft Azure | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0044 | Multiples vulnérabilités dans Microsoft Windows | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0043 | Multiples vulnérabilités dans Microsoft Office | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0042 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0041 | Multiples vulnérabilités dans les produits Elastic | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0040 | Multiples vulnérabilités dans Google Chrome | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0039 | Multiples vulnérabilités dans Node.js | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0037 | Multiples vulnérabilités dans Typo3 | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0036 | Multiples vulnérabilités dans Suricata | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0035 | Multiples vulnérabilités dans les produits Fortinet | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0034 | Multiples vulnérabilités dans les produits SAP | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0033 | Multiples vulnérabilités dans les produits Schneider Electric | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0032 | Multiples vulnérabilités dans les produits Siemens | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0031 | Vulnérabilité dans le greffon VSCode pour Spring CLI | 2026-01-14T00:00:00.000000 | 2026-01-14T00:00:00.000000 |
| certfr-2026-avi-0030 | Vulnérabilité dans MISP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0029 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0028 | Multiples vulnérabilités dans MariaDB | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0027 | Vulnérabilité dans NetApp ONTAP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0026 | Vulnérabilité dans Google Pixel | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0025 | Vulnérabilité dans Microsoft Edge | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0024 | Multiples vulnérabilités dans VMware Tanzu Greenplum Backup and Restore | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0023 | Multiples vulnérabilités dans les produits Axis | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-ale-011 | Vulnérabilité de l'implémentation Kerberos dans Microsoft Windows | 2014-11-18T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-010 | Vulnérabilité de l'implémentation des protocoles SSL/TLS dans Microsoft Windows | 2014-11-11T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-008 | Vulnérabilité dans Drupal | 2014-10-16T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-009 | Vulnérabilité dans Microsoft OLE | 2014-10-22T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-ale-007 | Vulnérabilité dans SSLv3 | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-ale-006 | Vulnérabilité dans GNU bash | 2014-09-25T00:00:00.000000 | 2014-09-30T00:00:00.000000 |
| certfr-2014-ale-003 | Vulnérabilité dans OpenSSL | 2014-04-08T00:00:00.000000 | 2014-07-30T00:00:00.000000 |
| certfr-2014-ale-005 | Vulnérabilité dans Microsoft Internet Explorer | 2014-04-28T00:00:00.000000 | 2014-05-02T00:00:00.000000 |
| certfr-2014-ale-004 | Vulnérabilité dans Apache Struts | 2014-04-25T00:00:00.000000 | 2014-04-29T00:00:00.000000 |
| certfr-2014-ale-002 | Vulnérabilité dans Microsoft Word | 2014-03-25T00:00:00.000000 | 2014-04-09T00:00:00.000000 |
| certfr-2014-ale-001 | Vulnérabilité dans Microsoft Internet Explorer | 2014-02-21T00:00:00.000000 | 2014-03-12T00:00:00.000000 |
| certa-2013-ale-008 | Vulnérabilité critique dans le noyau de Microsoft Windows | 2013-11-28T00:00:00.000000 | 2014-01-16T00:00:00.000000 |
| certa-2013-ale-007 | Vulnérabilité dans un composant graphique de Microsoft | 2013-11-06T00:00:00.000000 | 2013-12-10T00:00:00.000000 |
| certa-2013-ale-006 | Vulnérabilité dans Microsoft Internet Explorer | 2013-09-18T00:00:00.000000 | 2013-10-09T00:00:00.000000 |
| certa-2005-ale-013 | Vulnérabilité dans Citrix Metaframe Presentation | 2005-10-07T00:00:00.000000 | 2013-06-06T00:00:00.000000 |
| certa-2013-ale-005 | Vulnérabilité dans le noyau Linux | 2013-05-14T00:00:00.000000 | 2013-05-24T00:00:00.000000 |
| certa-2013-ale-004 | Vulnérabilité dans Adobe ColdFusion | 2013-05-10T00:00:00.000000 | 2013-05-15T00:00:00.000000 |
| certa-2013-ale-003 | Vulnérabilité dans Microsoft Internet Explorer 8 | 2013-05-06T00:00:00.000000 | 2013-05-15T00:00:00.000000 |
| certa-2013-ale-002 | Vulnérabilités dans Adobe Reader et Acrobat | 2013-02-14T00:00:00.000000 | 2013-02-21T00:00:00.000000 |
| certa-2008-ale-013 | Vulnérabilité du service sadmind de Sun Solaris | 2008-10-17T00:00:00.000000 | 2013-02-21T00:00:00.000000 |
| certa-2009-ale-017 | Vulnérabilités dans l'implémentation TCP/IP de divers produits | 2009-09-09T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| certa-2007-ale-011 | Vulnérabilité du composant d'indexation des serveurs Microsoft IIS | 2007-06-06T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| certa-2012-ale-001 | Vulnérabilité dans Cisco IronPort | 2012-02-01T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| certa-2009-ale-014 | Multiples vulnérabilités du client de messagerie Mozilla Thunderbird | 2009-08-07T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| certa-2013-ale-001 | Vulnérabilités dans Oracle Java | 2013-01-10T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2012-ale-010 | Vulnérabilité dans Internet Explorer | 2012-12-31T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2012-ale-009 | Vulnérabilité dans les pilotes NVidia | 2012-12-26T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| certa-2012-ale-007 | Vulnérabilité dans MySQL | 2012-12-06T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| certa-2012-ale-008 | Vulnérabilité dans certains terminaux Samsung | 2012-12-18T00:00:00.000000 | 2012-12-18T00:00:00.000000 |
| certa-2012-ale-006 | Vulnérabilité dans Internet Explorer | 2012-09-18T00:00:00.000000 | 2012-09-21T00:00:00.000000 |