Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2880 |
8.2 (4.0)
|
@fastify/middie has an improper path normalization vul… |
@fastify/middie |
@fastify/middie |
2026-02-27T18:25:37.428Z | 2026-02-27T18:56:02.979Z |
| CVE-2026-3282 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
libvips unpremultiply.c vips_unpremultiply_build out-o… |
n/a |
libvips |
2026-02-27T02:32:09.109Z | 2026-02-27T18:55:47.355Z |
| CVE-2026-3275 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda F453 httpd addressNat fromAddressNat buffer overflow |
Tenda |
F453 |
2026-02-27T01:32:10.129Z | 2026-02-27T18:55:21.322Z |
| CVE-2026-3134 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode News Portal Project edit-category.php sql… |
itsourcecode |
News Portal Project |
2026-02-24T23:32:11.537Z | 2026-02-27T18:54:52.791Z |
| CVE-2026-3133 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Document Management System Login loging.p… |
itsourcecode |
Document Management System |
2026-02-24T23:32:08.553Z | 2026-02-27T18:54:25.889Z |
| CVE-2026-3293 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlann… |
snowflakedb |
snowflake-jdbc |
2026-02-27T05:32:09.400Z | 2026-02-27T18:53:38.099Z |
| CVE-2026-3301 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
Totolink N300RH Web Management cstecgi.cgi setWebWlanI… |
Totolink |
N300RH |
2026-02-27T05:32:15.135Z | 2026-02-27T18:53:12.387Z |
| CVE-2026-27653 |
6.7 (3.0)
5.4 (4.0)
|
The installers for multiple products provided by … |
Soliton Systems K.K. |
Soliton SecureBrowser for OneGate |
2026-02-27T05:39:54.060Z | 2026-02-27T18:52:30.918Z |
| CVE-2026-28211 |
7.8 (3.1)
|
Arbitrary code execution in log reader via untrusted l… |
CyrilleB79 |
NVDA-Dev-Test-Toolbox |
2026-02-26T22:29:36.164Z | 2026-02-27T18:52:30.864Z |
| CVE-2026-3292 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
jizhiCMS Batch Model.php findAll sql injection |
n/a |
jizhiCMS |
2026-02-27T05:02:06.427Z | 2026-02-27T18:51:35.927Z |
| CVE-2026-28213 |
9.8 (3.1)
|
EverShop Vulnerable to Arbitrary Customer Account Take… |
evershopcommerce |
evershop |
2026-02-26T22:31:47.122Z | 2026-02-27T18:51:10.647Z |
| CVE-2026-3286 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
itwanger paicoding Image Save Endpoint ImageRestContro… |
itwanger |
paicoding |
2026-02-27T03:32:43.266Z | 2026-02-27T18:51:00.595Z |
| CVE-2026-2597 |
7.5 (3.1)
|
Crypt::SysRandom::XS versions before 0.010 for Perl is… |
LEONT |
Crypt::SysRandom::XS |
2026-02-26T23:29:16.488Z | 2026-02-27T18:50:46.353Z |
| CVE-2026-3287 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
youlaitech youlai-mall App-side Product Pagination End… |
youlaitech |
youlai-mall |
2026-02-27T04:02:43.295Z | 2026-02-27T18:50:33.929Z |
| CVE-2026-3285 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
berry-lang berry be_lexer.c scan_string out-of-bounds |
berry-lang |
berry |
2026-02-27T03:02:13.772Z | 2026-02-27T18:50:12.298Z |
| CVE-2026-3265 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
go2ismail Free-CRM Security API improper authorization |
go2ismail |
Free-CRM |
2026-02-26T22:32:08.486Z | 2026-02-27T18:49:54.918Z |
| CVE-2026-3284 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
libvips extract.c vips_extract_area_build integer overflow |
n/a |
libvips |
2026-02-27T03:02:09.219Z | 2026-02-27T18:49:42.929Z |
| CVE-2026-3283 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
libvips extract.c vips_extract_band_build out-of-bounds |
n/a |
libvips |
2026-02-27T02:32:12.328Z | 2026-02-27T18:49:14.477Z |
| CVE-2026-3289 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Sanluan PublicCMS Template Cache Generation TemplateCa… |
Sanluan |
PublicCMS |
2026-02-27T04:32:10.857Z | 2026-02-27T18:48:46.975Z |
| CVE-2025-15509 |
7.1 (4.0)
|
The SmartRemote module has insufficient restricti… |
vivo |
SmartRemote |
2026-02-27T06:52:34.399Z | 2026-02-27T18:47:32.496Z |
| CVE-2025-12981 |
9.8 (3.1)
|
Listee <= 1.1.6 - Unauthenticated Privilege Escalation |
dreamstechnologies |
Listee |
2026-02-27T06:43:49.771Z | 2026-02-27T18:47:00.498Z |
| CVE-2025-14149 |
6.4 (3.1)
|
Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - A… |
xpro |
Xpro Addons — 140+ Widgets for Elementor |
2026-02-27T06:43:49.345Z | 2026-02-27T18:46:17.461Z |
| CVE-2025-14040 |
6.4 (3.1)
|
Automotive Car Dealership Business WordPress Theme <= … |
themesuite |
Automotive Car Dealership Business WordPress Theme |
2026-02-27T06:43:48.758Z | 2026-02-27T18:45:51.725Z |
| CVE-2026-3302 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
SourceCodester Doctor Appointment System Sign Up regis… |
SourceCodester |
Doctor Appointment System |
2026-02-27T06:02:09.605Z | 2026-02-27T18:45:13.668Z |
| CVE-2026-3327 |
4.8 (4.0)
|
Authenticated DatoCMS Web Previews Plugin Iframe Injection |
DatoCMS |
Web Previews |
2026-02-27T14:09:38.150Z | 2026-02-27T18:44:26.847Z |
| CVE-2025-10990 |
7.5 (3.1)
|
Rexml: rexml: denial of service via inefficient regex … |
|
|
2026-02-27T13:32:02.309Z | 2026-02-27T18:43:57.501Z |
| CVE-2026-28216 |
8.3 (3.1)
|
hoppscotch has IDOR in updateUserEnvironment / deleteU… |
hoppscotch |
hoppscotch |
2026-02-26T22:36:50.539Z | 2026-02-27T18:43:16.218Z |
| CVE-2025-9909 |
6.7 (3.1)
|
Aap-gateway: improper path validation in gateway allow… |
Red Hat |
Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
2026-02-27T07:30:00.885Z | 2026-02-27T18:43:09.098Z |
| CVE-2025-9572 |
5 (3.1)
|
Foreman: satellite: graphql api permission bypass lead… |
The Foreman |
Foreman |
2026-02-27T07:28:44.391Z | 2026-02-27T18:42:37.881Z |
| CVE-2026-28217 |
6.5 (3.1)
|
IDOR in GraphQL userCollection Query Exposes Other Use… |
hoppscotch |
hoppscotch |
2026-02-26T22:38:33.854Z | 2026-02-27T18:42:07.857Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-27757 |
7.1 (4.0)
7.1 (3.1)
|
SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Passwor… |
Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) |
SODOLA SL902-SWTGW124AS |
2026-02-27T18:11:05.367Z | 2026-02-27T18:58:26.451Z |
| CVE-2026-27756 |
5.1 (4.0)
6.1 (3.1)
|
SODOLA SL902-SWTGW124AS <= 200.1.20 Reflected XSS in M… |
Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) |
SODOLA SL902-SWTGW124AS |
2026-02-27T18:10:26.530Z | 2026-02-27T18:59:21.071Z |
| CVE-2026-27755 |
9.3 (4.0)
9.8 (3.1)
|
SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID |
Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) |
SODOLA SL902-SWTGW124AS |
2026-02-27T18:09:57.668Z | 2026-02-27T19:01:17.431Z |
| CVE-2026-27754 |
6.9 (4.0)
6.5 (3.1)
|
SODOLA SL902-SWTGW124AS <= 200.1.20 MD5 Session Token … |
Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) |
SODOLA SL902-SWTGW124AS |
2026-02-27T18:09:33.191Z | 2026-02-27T18:09:33.191Z |
| CVE-2026-27510 |
6.4 (4.0)
9.6 (3.1)
|
Unitree Go2 Mobile Program Tampering Enables Root RCE |
UnitreeRobotics |
Unitree Go2 |
2026-02-26T18:56:56.654Z | 2026-02-27T18:15:59.996Z |
| CVE-2026-27509 |
8.5 (4.0)
8 (3.1)
|
Unitree Go2 Missing DDS Authentication Enables Adjacent RCE |
UnitreeRobotics |
Unitree Go2 |
2026-02-26T18:56:31.648Z | 2026-02-27T18:15:37.037Z |
| CVE-2026-26228 |
2.3 (4.0)
4.9 (3.1)
|
VLC for Android < 3.7.0 Remote Access Path Traversal |
VideoLAN |
VLC for Android |
2026-02-26T15:21:00.590Z | 2026-02-27T18:13:50.230Z |
| CVE-2026-26227 |
6.3 (4.0)
3.7 (3.1)
|
VLC for Android < 3.7.0 Remote Access OTP Authenticati… |
VideoLAN |
VLC for Android |
2026-02-26T17:37:19.896Z | 2026-02-27T18:15:06.115Z |
| CVE-2026-25554 |
8.3 (4.0)
6.5 (3.1)
|
OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables J… |
OpenSIPS |
OpenSIPS |
2026-02-25T16:54:11.845Z | 2026-02-27T18:17:35.536Z |
| CVE-2026-22207 |
9.3 (4.0)
9.8 (3.1)
|
OpenViking Missing root_api_key Allows Anonymous ROOT Access |
Volcengine |
OpenViking |
2026-02-26T20:34:30.907Z | 2026-02-27T18:17:03.313Z |
| CVE-2026-22206 |
8.7 (4.0)
8.8 (3.1)
|
SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags |
SPIP |
SPIP |
2026-02-26T20:17:58.443Z | 2026-02-27T20:08:48.214Z |
| CVE-2026-22205 |
8.7 (4.0)
7.5 (3.1)
|
SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling |
SPIP |
SPIP |
2026-02-26T20:18:14.748Z | 2026-02-27T20:06:38.973Z |
| CVE-2025-67445 |
6.5 (3.1)
|
TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains … |
n/a |
n/a |
2026-02-24T00:00:00.000Z | 2026-02-27T18:15:06.130Z |
| CVE-2025-40932 |
8.2 (3.1)
|
Apache::SessionX versions through 2.01 for Perl create… |
GRICHTER |
Apache::SessionX |
2026-02-26T23:33:37.083Z | 2026-02-27T18:41:24.407Z |
| CVE-2026-27610 |
7 (4.0)
|
Parse Dashboard Has a Cache Key Collision that Leaks M… |
parse-community |
parse-dashboard |
2026-02-25T02:19:56.022Z | 2026-02-27T17:24:10.098Z |
| CVE-2026-28363 |
9.9 (3.1)
|
In OpenClaw before 2026.2.23, tools.exec.safeBins… |
OpenClaw |
OpenClaw |
2026-02-27T03:17:37.343Z | 2026-02-27T15:47:06.970Z |
| CVE-2025-0976 |
4.7 (3.1)
|
Information Exposure Vulnerability in Hitachi Configur… |
Hitachi |
Hitachi Ops Center API Configuration Manager |
2026-02-25T04:17:58.080Z | 2026-02-25T14:49:52.515Z |
| CVE-2026-27611 |
7.1 (4.0)
|
FileBrowser Quantum: Password Protection Not Enforced … |
gtsteffaniak |
filebrowser |
2026-02-25T02:24:48.357Z | 2026-02-27T17:11:18.122Z |
| CVE-2026-26986 |
5.5 (4.0)
|
FreeRDP has heap-use-after-free in rail_window_free |
FreeRDP |
FreeRDP |
2026-02-25T21:01:16.916Z | 2026-02-26T20:36:03.263Z |
| CVE-2026-27950 |
5.5 (4.0)
|
FreeRDP heap-use-after-free in update_pointer_new(SDL)… |
FreeRDP |
FreeRDP |
2026-02-25T21:05:23.581Z | 2026-02-26T20:38:07.068Z |
| CVE-2026-27951 |
5.3 (3.1)
|
FreeRDP has possible Integer overflow in Stream_Ensure… |
FreeRDP |
FreeRDP |
2026-02-25T21:07:30.828Z | 2026-02-25T21:43:56.822Z |
| CVE-2026-27612 |
6.1 (3.1)
|
Repostat Vulnerable to Reflected Cross-Site Scripting … |
denpiligrim |
repostat |
2026-02-25T02:38:05.548Z | 2026-02-26T21:33:40.838Z |
| CVE-2023-5769 |
5.4 (3.1)
|
A vulnerability exists in the webserver that aff… |
Hitachi Energy |
RTU500 |
2023-12-14T16:19:51.846Z | 2024-08-02T08:07:32.850Z |
| CVE-2026-28274 |
8.7 (3.1)
|
Initiative Vulnerable to Token Theft via Stored XSS in… |
Morelitea |
initiative |
2026-02-26T22:55:01.751Z | 2026-02-27T17:48:34.045Z |
| CVE-2026-28275 |
8.1 (3.1)
|
Initiative Vulnerable to Improper Session Invalidation… |
Morelitea |
initiative |
2026-02-26T22:56:07.815Z | 2026-02-27T17:44:23.728Z |
| CVE-2026-27614 |
9.3 (3.1)
|
Bugsink is vulnerable to Stored XSS via Pygments fallb… |
bugsink |
bugsink |
2026-02-25T02:31:17.880Z | 2026-02-25T20:01:45.861Z |
| CVE-2026-28276 |
7.5 (3.1)
|
Initiative Allows Unauthenticated Access to Uploaded D… |
Morelitea |
initiative |
2026-02-26T22:57:36.406Z | 2026-02-27T17:40:15.760Z |
| CVE-2026-23947 |
9.3 (4.0)
|
Orval MCP client is vulnerable to code injection via … |
orval-labs |
orval |
2026-01-20T00:19:48.901Z | 2026-01-21T17:09:11.690Z |
| CVE-2026-27615 |
8.8 (4.0)
|
ADB-Explorer: UNC Path Support in ManualAdbPath Leads … |
Alex4SSB |
ADB-Explorer |
2026-02-25T02:33:53.553Z | 2026-02-27T17:09:58.886Z |
| CVE-2026-27621 |
6.8 (4.0)
|
TypiCMS Core has Stored Cross-Site Scripting (XSS) via… |
TypiCMS |
Core |
2026-02-25T02:36:12.353Z | 2026-02-26T20:59:12.644Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-27756 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting… | 2026-02-27T19:16:09.763 | 2026-02-27T19:16:09.763 |
| fkie_cve-2026-27755 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier genera… | 2026-02-27T19:16:09.527 | 2026-02-27T19:16:09.527 |
| fkie_cve-2026-27754 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 has… | 2026-02-27T19:16:09.320 | 2026-02-27T19:16:09.320 |
| fkie_cve-2026-27510 | Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android applicat… | 2026-02-26T20:31:38.663 | 2026-02-27T19:16:08.767 |
| fkie_cve-2026-27509 | Unitree Go2 firmware versions V1.1.7 through V1.1.9 and V1.1.11 (EDU) do not implement DDS authenti… | 2026-02-26T20:31:38.447 | 2026-02-27T19:16:08.547 |
| fkie_cve-2026-26228 | VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remo… | 2026-02-26T16:24:07.343 | 2026-02-27T19:16:08.140 |
| fkie_cve-2026-26227 | VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Acc… | 2026-02-26T18:23:07.190 | 2026-02-27T19:16:07.960 |
| fkie_cve-2026-25554 | OpenSIPS versions 3.1 before 3.6.4 containing the auth_jwt module (prior to commit 3822d33) contain… | 2026-02-25T18:23:40.617 | 2026-02-27T19:16:07.717 |
| fkie_cve-2026-22207 | OpenViking through version 0.1.18, prior to commit 0251c70, contains a broken access control vulner… | 2026-02-26T21:28:52.570 | 2026-02-27T19:16:07.010 |
| fkie_cve-2026-22206 | SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-p… | 2026-02-26T21:28:52.397 | 2026-02-27T19:16:06.823 |
| fkie_cve-2026-22205 | SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type jug… | 2026-02-26T21:28:52.217 | 2026-02-27T19:16:06.627 |
| fkie_cve-2025-67445 | TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cste… | 2026-02-24T15:21:36.707 | 2026-02-27T19:16:05.517 |
| fkie_cve-2025-40932 | Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX gener… | 2026-02-27T00:16:55.107 | 2026-02-27T19:16:04.780 |
| fkie_cve-2026-27610 | Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.4… | 2026-02-25T03:16:05.297 | 2026-02-27T19:14:29.947 |
| fkie_cve-2026-28363 | In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU lon… | 2026-02-27T04:16:03.227 | 2026-02-27T19:13:57.257 |
| fkie_cve-2025-0976 | Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configu… | 2026-02-25T05:17:13.900 | 2026-02-27T19:13:11.170 |
| fkie_cve-2026-27611 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to versions 1.1.3-stable … | 2026-02-25T03:16:05.463 | 2026-02-27T19:12:25.640 |
| fkie_cve-2026-26986 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_win… | 2026-02-25T22:16:24.540 | 2026-02-27T19:11:09.313 |
| fkie_cve-2026-27950 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix f… | 2026-02-25T22:16:27.297 | 2026-02-27T19:10:21.367 |
| fkie_cve-2026-27951 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the funct… | 2026-02-25T22:16:27.610 | 2026-02-27T19:09:27.907 |
| fkie_cve-2026-27612 | Repostat is a React component to fetch and display GitHub repository info. Prior to version 1.0.1, … | 2026-02-25T03:16:05.627 | 2026-02-27T19:08:59.367 |
| fkie_cve-2023-5769 | A vulnerability exists in the webserver that affects the RTU500 series product versions listed be… | 2023-12-14T17:15:09.920 | 2026-02-27T19:08:39.197 |
| fkie_cve-2026-28274 | Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.… | 2026-02-26T23:16:37.073 | 2026-02-27T19:07:37.763 |
| fkie_cve-2026-28275 | Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.… | 2026-02-26T23:16:37.240 | 2026-02-27T19:07:07.187 |
| fkie_cve-2026-27614 | Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.13, an unauthenticated attac… | 2026-02-25T03:16:05.803 | 2026-02-27T19:06:26.467 |
| fkie_cve-2026-28276 | Initiative is a self-hosted project management platform. An access control vulnerability exists in … | 2026-02-26T23:16:37.397 | 2026-02-27T19:06:01.180 |
| fkie_cve-2026-23947 | Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specifica… | 2026-01-20T01:15:57.583 | 2026-02-27T19:05:08.470 |
| fkie_cve-2026-27615 | ADB Explorer is a fluent UI for ADB on Windows. In versions prior to Beta 0.9.26022, ADB-Explorer a… | 2026-02-25T03:16:05.990 | 2026-02-27T19:04:28.260 |
| fkie_cve-2026-27621 | TypiCMS is a multilingual content management system based on the Laravel framework. A Stored Cross-… | 2026-02-25T03:16:06.173 | 2026-02-27T19:02:16.520 |
| fkie_cve-2026-24132 | Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specifica… | 2026-01-23T00:15:52.403 | 2026-02-27T19:00:40.547 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-747p-wmpv-9c78 |
5.9 (3.1)
|
AWS CLI: cli_history database does not restrict file permissions on Unix systems | 2026-02-27T15:50:32Z | 2026-02-27T15:50:32Z |
| ghsa-3645-fxcv-hqr4 |
9.8 (3.1)
|
Langflow has Remote Code Execution in CSV Agent | 2026-02-27T15:47:29Z | 2026-02-27T15:47:29Z |
| ghsa-x8p2-g6vv-f5mr |
4.8 (4.0)
|
Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malici… | 2026-02-27T15:34:20Z | 2026-02-27T15:34:20Z |
| ghsa-rfgr-cv32-cqmh |
8.3 (3.1)
|
Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in C… | 2026-02-27T15:34:19Z | 2026-02-27T15:34:19Z |
| ghsa-qg2f-7w4r-25f2 |
7.5 (3.1)
|
A flaw was found in REXML. A remote attacker could exploit inefficient regular expression (regex) p… | 2026-02-27T15:34:19Z | 2026-02-27T15:34:19Z |
| ghsa-pcr3-6v45-6mc2 |
8.4 (4.0)
|
Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google W… | 2026-02-27T15:34:19Z | 2026-02-27T15:34:19Z |
| ghsa-p5p3-cc32-x85v |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-27T15:34:18Z | 2026-02-27T15:34:19Z |
| ghsa-99wh-hc39-j65q |
6.3 (3.1)
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-02-27T15:34:19Z | 2026-02-27T15:34:19Z |
| ghsa-66jp-xvmj-6q6f |
9.3 (4.0)
|
Pro3W CMS if vulnerable to SQL injection attacks. Improper neutralization of input provided into a … | 2026-02-27T15:34:19Z | 2026-02-27T15:34:19Z |
| ghsa-xcg8-xp62-9p7g |
8.1 (3.1)
7.2 (4.0)
|
Golioth Pouch version 0.1.0 prior to [INSERT FIXED VERSION], fixed in commit 1b2219a1, contain a he… | 2026-02-26T18:31:41Z | 2026-02-27T15:34:17Z |
| ghsa-h52p-5g3g-rxjm |
3.7 (3.1)
6.3 (4.0)
|
Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bo… | 2026-02-26T18:31:41Z | 2026-02-27T15:34:17Z |
| ghsa-5wx9-6p5v-7r76 |
3.7 (3.1)
6.3 (4.0)
|
Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based… | 2026-02-26T18:31:41Z | 2026-02-27T15:34:17Z |
| ghsa-2qjx-h626-j6v4 |
2.9 (3.1)
2.1 (4.0)
|
Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bo… | 2026-02-26T18:31:41Z | 2026-02-27T15:34:17Z |
| ghsa-xj9r-5fj6-ggxg |
4.3 (3.1)
|
Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access… | 2026-02-19T18:31:52Z | 2026-02-27T15:34:11Z |
| ghsa-w49w-5662-qw44 |
4.6 (3.1)
|
Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and pre… | 2026-02-10T21:31:31Z | 2026-02-27T15:34:11Z |
| ghsa-w44h-2j78-hvfm |
4.9 (3.1)
5.1 (4.0)
|
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system … | 2026-02-11T15:30:25Z | 2026-02-27T15:34:11Z |
| ghsa-f6m7-39fm-3hwq |
4.3 (3.1)
|
Missing Authorization vulnerability in YayCommerce YayMail – WooCommerce Email Customizer yaymail a… | 2026-02-19T21:30:48Z | 2026-02-27T15:34:11Z |
| ghsa-8w4r-hqf6-jg5f |
6.5 (3.1)
|
Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploi… | 2026-02-03T15:30:25Z | 2026-02-27T15:34:11Z |
| ghsa-849j-jr65-wp89 |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Themes4WP Popularis Extra popularis-extra allows… | 2026-02-19T18:31:53Z | 2026-02-27T15:34:11Z |
| ghsa-3f33-44xm-29m7 |
5.3 (3.1)
|
Public dashboards with annotations enabled did not limit their annotation timerange to the locked t… | 2026-02-12T09:30:58Z | 2026-02-27T15:34:11Z |
| ghsa-mwfw-2px5-7mxx |
7.2 (3.1)
|
Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could all… | 2026-01-27T18:32:17Z | 2026-02-27T15:34:09Z |
| ghsa-xw84-4gx9-vm4h |
4.9 (3.1)
|
The MailArchiver plugin for WordPress is vulnerable to SQL Injection via the ‘logid’ parameter in a… | 2026-02-27T12:31:25Z | 2026-02-27T12:31:25Z |
| ghsa-rm76-fcj7-6cxh |
5.3 (3.1)
|
The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in vers… | 2026-02-27T12:31:25Z | 2026-02-27T12:31:25Z |
| ghsa-jvmm-jqv7-98vp |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-27T12:31:25Z | 2026-02-27T12:31:25Z |
| ghsa-7qxc-43wm-v793 |
8.7 (4.0)
|
Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (LFI) … | 2026-02-27T12:31:25Z | 2026-02-27T12:31:25Z |
| ghsa-6h78-g5gr-4mp3 |
6.4 (3.1)
|
The Electric Enquiries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'b… | 2026-02-27T12:31:25Z | 2026-02-27T12:31:25Z |
| ghsa-4vr2-gvv5-x55w |
6.5 (3.1)
|
The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0. The file… | 2026-02-27T12:31:25Z | 2026-02-27T12:31:25Z |
| ghsa-2f5g-m75x-xphf |
6.9 (4.0)
|
Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Passwor… | 2026-02-27T12:31:25Z | 2026-02-27T12:31:25Z |
| ghsa-xmw3-64p4-g77h |
8.8 (4.0)
|
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ghsa-wg85-qjwx-mpxx |
9.8 (3.1)
|
The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and inc… | 2026-02-27T09:30:29Z | 2026-02-27T09:30:29Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2018-154 |
6.5 (3.1)
|
An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_p… | pg-query | 2018-10-18T18:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2018-152 |
7.2 (3.1)
|
An authorization-check flaw was discovered in federation configurations of the OpenStack … | keystone | 2018-07-19T13:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2018-149 |
6.1 (3.1)
|
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of In… | galaxy-app | 2018-06-26T16:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2017-147 |
7.8 (3.1)
|
In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of da… | pyspark | 2017-09-13T16:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2017-145 |
4.7 (3.1)
|
OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local… | nova | 2017-08-09T18:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2017-143 |
5.5 (3.1)
|
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypas… | glance | 2017-03-29T14:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2016-38 |
4.3 (3.1)
|
The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) al… | keystone | 2016-06-13T14:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-40 |
|
Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack … | horizon | 2015-08-20T20:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-39 |
|
The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo… | glance | 2015-08-19T15:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-38 |
|
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not p… | glance | 2015-02-24T15:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-37 |
|
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not p… | glance | 2015-02-24T15:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-116 |
|
The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 thr… | swift | 2014-01-23T01:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-113 |
|
The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly p… | nova | 2014-03-25T16:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-112 |
|
The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse … | nova | 2014-05-08T14:29:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-111 |
|
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver … | nova | 2014-02-06T17:00:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-109 |
|
OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not … | keystone | 2014-08-25T14:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-108 |
|
The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Ju… | keystone | 2014-08-25T14:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-107 |
|
The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Ju… | keystone | 2014-08-25T14:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-106 |
|
The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before ic… | keystone | 2014-04-15T14:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-105 |
|
The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 201… | keystone | 2014-04-01T06:35:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-102 |
|
OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehou… | glance | 2014-02-14T15:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-44 |
|
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly i… | nova | 2013-03-22T21:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-43 |
|
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authe… | nova | 2013-03-22T21:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-42 |
|
The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.… | keystone | 2013-09-23T20:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-41 |
|
OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and H… | keystone | 2013-05-21T18:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2013-39 |
|
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keysto… | keystone | 2013-03-22T21:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2010-32 |
|
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to… | Zope | 2010-09-08T20:00:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2009-13 |
|
MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to… | moin | 2009-04-03T18:30:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2009-12 |
|
The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the crackli… | moin | 2009-03-30T01:30:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2008-14 |
|
Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 a… | Plone | 2008-03-20T00:44:00Z | 2024-11-25T18:35:18.357593Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33772 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.282306Z |
| gsd-2024-31152 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:17.731991Z |
| gsd-2024-4273 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.625570Z |
| gsd-2024-4227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.624403Z |
| gsd-2024-4255 | A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to … | 2024-04-27T05:02:16.623487Z |
| gsd-2024-4265 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.621175Z |
| gsd-2024-4233 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.618656Z |
| gsd-2024-4283 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.614027Z |
| gsd-2024-4289 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.612538Z |
| gsd-2024-4287 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.611362Z |
| gsd-2024-4235 | A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This v… | 2024-04-27T05:02:16.608439Z |
| gsd-2024-4246 | A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.14(4656).… | 2024-04-27T05:02:16.603900Z |
| gsd-2024-4263 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.603449Z |
| gsd-2024-4252 | A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687). This af… | 2024-04-27T05:02:16.602334Z |
| gsd-2024-4229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.599914Z |
| gsd-2024-4285 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.599710Z |
| gsd-2024-4286 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.599503Z |
| gsd-2024-4282 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.598979Z |
| gsd-2024-4242 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. This … | 2024-04-27T05:02:16.596328Z |
| gsd-2024-4267 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.595290Z |
| gsd-2024-4266 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.592000Z |
| gsd-2024-4247 | A vulnerability has been found in Tenda i21 1.0.0.14(4656) and classified as critical. Th… | 2024-04-27T05:02:16.588079Z |
| gsd-2024-4254 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587642Z |
| gsd-2024-4260 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587447Z |
| gsd-2024-4230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587245Z |
| gsd-2024-4232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587045Z |
| gsd-2024-4240 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. … | 2024-04-27T05:02:16.585061Z |
| gsd-2024-4264 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.584159Z |
| gsd-2024-4258 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.581681Z |
| gsd-2024-4259 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.580041Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-914 | Malicious code in @qualys/react-web (npm) | 2026-02-16T08:50:48Z | 2026-02-23T04:21:31Z |
| mal-2026-873 | Malicious code in @depro0x/despicable-me (npm) | 2026-02-12T20:40:54Z | 2026-02-23T04:21:31Z |
| mal-2026-830 | Malicious code in aligners (npm) | 2026-02-10T16:05:06Z | 2026-02-23T04:21:31Z |
| mal-2026-829 | Malicious code in @uniconvex/dotenv (npm) | 2026-02-10T16:30:16Z | 2026-02-23T04:21:31Z |
| mal-2026-828 | Malicious code in @reimorg/config (npm) | 2026-02-10T16:30:16Z | 2026-02-23T04:21:31Z |
| mal-2026-816 | Malicious code in @skyeng/libs (npm) | 2026-02-09T15:12:24Z | 2026-02-23T04:21:31Z |
| mal-2026-996 | Malicious code in rubocop-vintedmetrics (RubyGems) | 2026-02-20T11:40:23Z | 2026-02-23T03:10:14Z |
| mal-2026-984 | Malicious code in myasicapi (PyPI) | 2026-02-22T19:42:08Z | 2026-02-22T19:42:08Z |
| mal-2026-983 | Malicious code in tensorflow-opt (PyPI) | 2026-02-22T16:53:45Z | 2026-02-22T16:53:45Z |
| mal-2026-982 | Malicious code in trunket-dev-driver (PyPI) | 2026-02-22T14:51:28Z | 2026-02-22T14:51:28Z |
| mal-2026-979 | Malicious code in home-robot (PyPI) | 2026-02-22T04:48:51Z | 2026-02-22T04:48:51Z |
| mal-2024-12283 | Malicious code in hello-bozzo2 (PyPI) | 2024-08-23T22:55:41Z | 2026-02-20T22:10:10Z |
| mal-2026-977 | Malicious code in airbnb-identity (PyPI) | 2026-02-20T19:56:56Z | 2026-02-20T19:56:56Z |
| mal-2026-951 | Malicious code in printrables (PyPI) | 2026-02-20T06:59:50Z | 2026-02-20T06:59:50Z |
| mal-2026-949 | Malicious code in ethrpc-keys (PyPI) | 2026-02-19T23:39:31Z | 2026-02-20T00:22:44Z |
| mal-2026-947 | Malicious code in ethrpc (PyPI) | 2026-02-19T23:56:09Z | 2026-02-19T23:56:09Z |
| mal-2026-950 | Malicious code in web3tool (PyPI) | 2026-02-19T23:53:33Z | 2026-02-19T23:53:33Z |
| mal-2026-948 | Malicious code in ethrpc-accounts (PyPI) | 2026-02-19T23:44:13Z | 2026-02-19T23:44:13Z |
| mal-2026-946 | Malicious code in lala6992 (PyPI) | 2026-02-12T05:30:51Z | 2026-02-19T22:47:48Z |
| mal-2026-921 | Malicious code in cicibot-fix-message-naming (PyPI) | 2026-02-16T17:55:41Z | 2026-02-19T22:47:48Z |
| mal-2026-905 | Malicious code in marshmellows (PyPI) | 2026-02-15T09:25:56Z | 2026-02-19T22:47:48Z |
| mal-2026-869 | Malicious code in ritch (PyPI) | 2026-02-12T08:10:35Z | 2026-02-19T22:47:48Z |
| mal-2026-868 | Malicious code in pydantics (PyPI) | 2026-02-12T07:55:49Z | 2026-02-19T22:47:48Z |
| mal-2026-867 | Malicious code in pandaai (PyPI) | 2026-02-12T07:51:33Z | 2026-02-19T22:47:48Z |
| mal-2026-866 | Malicious code in oraceldb (PyPI) | 2026-02-12T08:03:03Z | 2026-02-19T22:47:48Z |
| mal-2026-865 | Malicious code in opentelematry-api (PyPI) | 2026-02-12T07:30:47Z | 2026-02-19T22:47:48Z |
| mal-2026-864 | Malicious code in marshmellow (PyPI) | 2026-02-12T07:10:57Z | 2026-02-19T22:47:48Z |
| mal-2026-863 | Malicious code in krbutils (PyPI) | 2026-02-12T08:00:39Z | 2026-02-19T22:47:48Z |
| mal-2026-938 | Malicious code in pylibcugraphops (PyPI) | 2026-02-19T09:16:31Z | 2026-02-19T09:16:31Z |
| mal-2026-936 | Malicious code in questpro (PyPI) | 2026-02-18T19:43:37Z | 2026-02-18T19:43:37Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2026-0246 | Lexmark Laser Printers: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten | 2026-01-28T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2026-0210 | IBM DB2 Big SQL: Mehrere Schwachstellen | 2026-01-25T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2026-0121 | Drupal Module: Mehrere Schwachstellen | 2026-01-14T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2026-0090 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2026-0019 | Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen | 2026-01-06T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2915 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-23T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2887 | PHP: Mehrere Schwachstellen | 2025-12-18T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2812 | Mozilla Firefox: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2706 | Python: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-01T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2672 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-24T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2658 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2616 | libvirt: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-17T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2311 | Red Hat Enterprise Linux (libsoup3): Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-15T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2193 | QEMU: Schwachstelle ermöglicht Denial of Service | 2025-10-05T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2134 | Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Denial of Service | 2025-09-25T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2078 | Red Hat Enterprise Linux (Developer Hub): Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1948 | libxml2 (exsltDynMapFunction): Schwachstelle ermöglicht Denial of Service | 2025-09-02T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1932 | Wireshark: Schwachstelle ermöglicht Denial of Service | 2025-08-28T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1928 | Linux UDisks Daemon: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-28T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1842 | PostgreSQL: Mehrere Schwachstellen | 2025-08-14T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1740 | Golang Go: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-08-06T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1699 | Red Hat Enterprise Linux (requests): Schwachstelle ermöglicht das Ausspähen von Informationen | 2025-08-03T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1433 | Red Hat Enterprise Linux (python-setuptools): Schwachstelle ermöglicht Codeausführung | 2025-06-30T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1423 | libssh: Mehrere Schwachstellen | 2025-06-29T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1143 | Red Hat Enterprise Linux (python-tornado): Schwachstelle ermöglicht Denial of Service | 2025-05-25T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0353 | GNU Emacs: Schwachstelle ermöglicht Codeausführung | 2025-02-11T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3558 | GNU Emacs und Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung | 2024-11-27T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3542 | Red Hat OpenShift: Mehrere Schwachstellen | 2024-11-25T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-2067 | Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-09-05T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1538 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-09-26T22:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0239 | Kwetsbaarheid verholpen in SonicWall SonicOS | 2025-07-31T11:12:42.653547Z | 2025-07-31T11:12:42.653547Z |
| ncsc-2025-0238 | Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS | 2025-07-30T13:02:51.663320Z | 2025-07-30T13:02:51.663320Z |
| ncsc-2025-0237 | Kwetsbaarheden verholpen in Autodesk AutoCAD | 2025-07-30T08:04:31.603165Z | 2025-07-30T08:04:31.603165Z |
| ncsc-2025-0236 | Kwetsbaarheden verholpen in Salesforce Tableau Server | 2025-07-28T07:52:42.872259Z | 2025-07-28T07:52:42.872259Z |
| ncsc-2025-0233 | Zeroday-kwetsbaarheden ontdekt in Microsoft SharePoint Server | 2025-07-20T08:34:22.645952Z | 2025-07-23T15:31:20.529389Z |
| ncsc-2025-0235 | Kwetsbaarheden verholpen in Firefox en Thunderbird | 2025-07-23T13:01:45.118883Z | 2025-07-23T13:01:45.118883Z |
| ncsc-2025-0204 | Kwetsbaarheden verholpen in Cisco ISE en ISE-PIC | 2025-06-26T09:02:07.224036Z | 2025-07-23T07:46:25.364521Z |
| ncsc-2025-0215 | Kwetsbaarheden verholpen in Microsoft Office | 2025-07-08T18:24:48.517158Z | 2025-07-19T11:40:27.812820Z |
| ncsc-2025-0232 | Kwetsbaarheid verholpen in Keycloak | 2025-07-18T13:12:14.074394Z | 2025-07-18T13:12:14.074394Z |
| ncsc-2025-0196 | Kwetsbaarheden verholpen in Citrix NetScaler ADC en NetScaler Gateway | 2025-06-18T08:32:32.792202Z | 2025-07-18T09:51:52.738778Z |
| ncsc-2025-0231 | Kwetsbaarheden verholpen in XWiki | 2025-07-17T12:35:48.998487Z | 2025-07-17T12:35:48.998487Z |
| ncsc-2025-0230 | Kwetsbaarheid verholpen in Wing FTP Server | 2025-07-14T06:06:24.154078Z | 2025-07-14T06:06:24.154078Z |
| ncsc-2025-0226 | Kwetsbaarheid verholpen in FortiWeb | 2025-07-11T09:57:23.588152Z | 2025-07-11T13:20:55.101692Z |
| ncsc-2025-0229 | Kwetsbaarheden verholpen in Adobe InDesign Desktop | 2025-07-11T10:01:48.229418Z | 2025-07-11T10:01:48.229418Z |
| ncsc-2025-0228 | Kwetsbaarheden verholpen in Zoom Clients | 2025-07-11T09:58:21.871103Z | 2025-07-11T09:58:21.871103Z |
| ncsc-2025-0227 | Kwetsbaarheid verholpen in Juniper SRX300 Series | 2025-07-11T09:57:40.476096Z | 2025-07-11T09:57:40.476096Z |
| ncsc-2025-0225 | Kwetsbaarheid verholpen in Juniper Networks Security Director | 2025-07-11T09:55:46.934253Z | 2025-07-11T09:55:46.934253Z |
| ncsc-2025-0224 | Kwetsbaarheden verholpen in Adobe Illustrator | 2025-07-09T08:57:08.548822Z | 2025-07-09T08:57:08.548822Z |
| ncsc-2025-0223 | Kwetsbaarheden verholpen in Adobe Framemaker | 2025-07-09T08:47:38.891072Z | 2025-07-09T08:47:38.891072Z |
| ncsc-2025-0222 | Kwetsbaarheden verholpen in Adobe ColdFusion | 2025-07-09T08:41:53.656736Z | 2025-07-09T08:41:53.656736Z |
| ncsc-2025-0221 | Kwetsbaarheden verholpen in Schneider Electric EcoStruxture IT Datacenter Expert | 2025-07-09T08:38:05.336146Z | 2025-07-09T08:38:05.336146Z |
| ncsc-2025-0220 | Kwetsbaarheden verholpen in Palo Alto PAN-OS | 2025-07-09T08:33:14.284978Z | 2025-07-09T08:33:14.284978Z |
| ncsc-2025-0219 | Kwetsbaarheden verholpen in SAP producten | 2025-07-09T08:29:00.474865Z | 2025-07-09T08:29:00.474865Z |
| ncsc-2025-0218 | Kwetsbaarheden verholpen in Microsoft Edge (Chromium based) | 2025-07-08T18:26:55.812717Z | 2025-07-08T18:26:55.812717Z |
| ncsc-2025-0217 | Kwetsbaarheden verholpen in Microsoft Visual Studio | 2025-07-08T18:26:14.881161Z | 2025-07-08T18:26:14.881161Z |
| ncsc-2025-0216 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2025-07-08T18:25:40.909948Z | 2025-07-08T18:25:40.909948Z |
| ncsc-2025-0214 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-07-08T18:24:14.065296Z | 2025-07-08T18:24:14.065296Z |
| ncsc-2025-0213 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-07-08T18:23:09.960791Z | 2025-07-08T18:23:09.960791Z |
| ncsc-2025-0212 | Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform | 2025-07-08T12:03:17.100858Z | 2025-07-08T12:03:17.100858Z |
| ncsc-2025-0211 | Kwetsbaarheden verholpen in Siemens producten | 2025-07-08T11:58:23.712452Z | 2025-07-08T11:58:23.712452Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-017796 | SSA-017796: Multiple File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2024-02-13T00:00:00Z | 2024-02-13T00:00:00Z |
| ssa-844761 | SSA-844761: Multiple Vulnerabilities in SiNVR/SiVMS Video Server | 2020-03-10T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-794653 | SSA-794653: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-786191 | SSA-786191: Local Privilege Escalation Vulnerability in Spectrum Power 7 | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-777015 | SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-772220 | SSA-772220: OpenSSL Vulnerabilities in Industrial Products | 2021-07-13T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-761844 | SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) | 2021-04-13T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-761617 | SSA-761617: Authentication Bypass and Information Disclosure Vulnerabilities in SiNVR/SiVMS Video Server | 2019-12-10T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-702935 | SSA-702935: Redfish Server Vulnerability in maxView Storage Manager | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-589891 | SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-583634 | SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-570294 | SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 | 2022-11-08T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-480095 | SSA-480095: Vulnerabilities in the Web Interface of SICAM Q100 Devices before V2.60 | 2023-12-12T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-983300 | SSA-983300: Vulnerabilities in LOGO! Soft Comfort | 2021-04-13T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-892915 | SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-887801 | SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-618620 | SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices | 2019-12-10T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-118850 | SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-077170 | SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-975766 | SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge | 2023-06-13T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-887122 | SSA-887122: X_T File Parsing Vulnerabilities in Simcenter Femap | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-617233 | SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-478780 | SSA-478780: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-456933 | SSA-456933: Multiple Vulnerabilities in SIMATIC PCS neo before V4.1 | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-363107 | SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode | 2022-05-10T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-268517 | SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-197270 | SSA-197270: Information Disclosure Vulnerability in Siemens OPC UA Modeling Editor (SiOME) | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-150063 | SSA-150063: Multiple Vulnerabilities in SINEC PNI before V2.0 | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-137900 | SSA-137900: Multiple Vulnerabilities in COMOS | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-099606 | SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1026 | Red Hat Security Advisory: RHOAI 3.2 - Red Hat OpenShift AI | 2026-01-22T16:34:21+00:00 | 2026-02-17T09:27:15+00:00 |
| rhsa-2026:0845 | Red Hat Security Advisory: brotli security update | 2026-01-20T12:13:35+00:00 | 2026-02-17T09:27:09+00:00 |
| rhsa-2026:0414 | Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage | 2026-01-08T22:34:17+00:00 | 2026-02-17T09:27:08+00:00 |
| rhsa-2026:0008 | Red Hat Security Advisory: brotli security update | 2026-01-05T01:26:08+00:00 | 2026-02-17T09:27:07+00:00 |
| rhsa-2025:21704 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update | 2025-11-18T15:13:35+00:00 | 2026-02-17T09:27:05+00:00 |
| rhsa-2025:21146 | Red Hat Security Advisory: Cluster Observability Operator 1.3.0 | 2025-11-12T16:21:08+00:00 | 2026-02-17T09:27:05+00:00 |
| rhsa-2025:20047 | Red Hat Security Advisory: Red Hat Developer Hub 1.8.0 release. | 2025-11-10T16:41:16+00:00 | 2026-02-17T09:27:04+00:00 |
| rhsa-2025:17501 | Red Hat Security Advisory: RHOAI 2.24.0 - Red Hat OpenShift AI | 2025-10-07T14:43:19+00:00 | 2026-02-17T09:27:03+00:00 |
| rhsa-2025:16918 | Red Hat Security Advisory: RHACS 4.7.7 bug fix and security update | 2025-09-29T08:02:30+00:00 | 2026-02-17T09:27:02+00:00 |
| rhsa-2025:15771 | Red Hat Security Advisory: RHACS 4.8.4 security and bug fix update | 2025-09-15T08:25:16+00:00 | 2026-02-17T09:27:01+00:00 |
| rhsa-2025:14919 | Red Hat Security Advisory: Red Hat build of Cryostat 4.0.2: new RHEL 9 container image security update | 2025-09-03T02:15:18+00:00 | 2026-02-17T09:27:00+00:00 |
| rhsa-2025:14886 | Red Hat Security Advisory: Kiali 2.4.8 for Red Hat OpenShift Service Mesh 3.0 | 2025-08-28T15:21:16+00:00 | 2026-02-17T09:27:00+00:00 |
| rhsa-2025:9761 | Red Hat Security Advisory: OpenShift Container Platform 4.14.53 security and extras update | 2025-07-02T14:09:57+00:00 | 2026-02-17T09:19:38+00:00 |
| rhsa-2025:9646 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.7 security and bug fix update | 2025-06-25T14:06:29+00:00 | 2026-02-17T09:19:38+00:00 |
| rhsa-2025:9340 | Red Hat Security Advisory: Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog. | 2025-06-23T02:17:34+00:00 | 2026-02-17T09:19:37+00:00 |
| rhsa-2025:9136 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.16.2 product release | 2025-06-16T18:32:02+00:00 | 2026-02-17T09:19:36+00:00 |
| rhsa-2025:8556 | Red Hat Security Advisory: OpenShift Container Platform 4.16.42 bug fix and security update | 2025-06-13T05:16:43+00:00 | 2026-02-17T09:19:36+00:00 |
| rhsa-2025:8551 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.18 Bug Fix Update | 2025-06-04T22:58:41+00:00 | 2026-02-17T09:19:36+00:00 |
| rhsa-2025:8544 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.14 Bug Fix Update | 2025-06-04T20:11:19+00:00 | 2026-02-17T09:19:35+00:00 |
| rhsa-2025:8510 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.7 security and bug fix update | 2025-06-04T12:26:00+00:00 | 2026-02-17T09:19:35+00:00 |
| rhsa-2025:8479 | Red Hat Security Advisory: RHODF-4.16-RHEL-9 security update | 2025-06-04T01:58:44+00:00 | 2026-02-17T09:19:34+00:00 |
| rhsa-2025:8301 | Red Hat Security Advisory: OpenShift Container Platform 4.15.52 security and extras update | 2025-06-04T00:50:17+00:00 | 2026-02-17T09:19:34+00:00 |
| rhsa-2025:8280 | Red Hat Security Advisory: OpenShift Container Platform 4.17.32 bug fix and security update | 2025-06-04T09:19:59+00:00 | 2026-02-17T09:19:33+00:00 |
| rhsa-2025:8244 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.21.0 release | 2025-05-28T02:39:39+00:00 | 2026-02-17T09:19:33+00:00 |
| rhsa-2025:8059 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.7 Bug Fix Update | 2025-05-21T06:13:16+00:00 | 2026-02-17T09:19:33+00:00 |
| rhsa-2025:7451 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.20 | 2025-05-14T15:49:22+00:00 | 2026-02-17T09:19:33+00:00 |
| rhsa-2025:7449 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.14 | 2025-05-14T19:18:43+00:00 | 2026-02-17T09:19:32+00:00 |
| rhsa-2025:4007 | Red Hat Security Advisory: OpenShift Container Platform 4.16.39 security and extras update | 2025-04-23T01:59:09+00:00 | 2026-02-17T09:19:32+00:00 |
| rhsa-2025:3973 | Red Hat Security Advisory: OpenShift Virtualization 4.16.7 Images | 2025-04-17T04:08:13+00:00 | 2026-02-17T09:19:31+00:00 |
| rhsa-2025:3820 | Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release | 2025-04-10T17:22:43+00:00 | 2026-02-17T09:19:30+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-296-03 | Veeder-Root TLS4B Automatic Tank Gauge System | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-296-02 | ASKI Energy ALS-Mini-S8 and ALS-Mini-S4 | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-296-01 | AutomationDirect Productivity Suite | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-294-02 | Rockwell Automation Compact GuardLogix 5370 | 2025-10-21T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-294-01 | Rockwell Automation 1783-NATR | 2025-10-21T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-289-02 | Rockwell Automation FactoryTalk Linx | 2025-10-16T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-280-01 | Delta Electronics DIAScreen | 2025-10-07T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-037-02 | Schneider Electric EcoStruxure (Update C) | 2025-02-06T07:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| va-25-296-01 | Frontier Airlines website publicly available email address validation | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| icsma-25-294-01 | Oxford Nanopore Technologies MinKNOW | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-25-294-06 | Raisecomm RAX701-GC Series | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-25-294-05 | CloudEdge Online Cameras and App | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-24-354-07 | Schneider Electric Modicon Controllers (Update A) | 2024-12-19T07:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| va-25-289-01 | OPEXUS FOIAXpress unauthenticated administrator password reset | 2025-10-16T16:43:55Z | 2025-10-16T16:43:55Z |
| icsa-25-289-04 | Rockwell Automation ArmorStart AOP | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-289-03 | Rockwell Automation FactoryTalk ViewPoint | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-289-01 | Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7 | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-24-121-01 | Delta Electronics CNCSoft-G2 DOPSoft (Update A) | 2024-04-30T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-301-01 | Schneider Electric EcoStruxure | 2025-10-14T07:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-259-01 | Schneider Electric Altivar products ATVdPAC module ILC992 InterLink Converter (Update A) | 2025-09-09T04:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-140-08 | Schneider Electric Modicon Controllers (Update B) | 2025-05-13T04:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-24-352-04 | Schneider Electric Modicon | 2024-12-10T05:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-287-01 | Rockwell Automation 1715 EtherNet/IP Comms Module | 2025-10-14T06:00:00.000000Z | 2025-10-14T06:00:00.000000Z |
| icsa-25-294-04 | Siemens RUGGEDCOM ROS Devices | 2025-07-08T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-294-03 | Siemens SIMATIC S7-1200 CPU V1/V2 Devices | 2011-06-10T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-09 | Siemens TeleControl Server Basic | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-08 | Siemens SINEC NMS | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-07 | Siemens SIMATIC ET 200SP Communication Processors | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-05 | Siemens Solid Edge | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-254-07 | Siemens User Management Component (UMC) | 2025-09-09T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ftd2100-snort-dos-m9humt75 | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series Appliances TCP UDP Snort 2 and Snort 3 Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-vdb-snort-djj4cnbr | Cisco Firepower Threat Defense Software Vulnerability Database with Snort Detection Engine Security Policy Bypass and Denial of Service Issue | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-tls-dos-qxye5ufy | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-statcred-dfc8txt5 | Cisco Firepower Threat Defense Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-geoip-bypass-mb4zrdu | Cisco Firepower Threat Defense Software Geolocation ACL Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-xss-dhjxqyzs | Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inject-2enmtc8v | Cisco Secure Firewall Management Center Software SQL Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inj-loyafcfq | Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-priv-esc-cmq4s6m7 | Cisco Secure Firewall Management Center Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-html-inj-nfjeyhxz | Cisco Secure Firewall Management Center Software HTML Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-file-read-5q4mqrn | Cisco Secure Firewall Management Center Software Arbitrary File Read Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-v3awdqn7 | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-g8aokndp | Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-2hbka97g | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-csc-dos-xvphm3bj | Cisco Secure Client Software Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftdvirtual-dos-muengnyr | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-xss-yjj7zjvq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-webvpn-dos-honb9ph4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-7tcnzxtu | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-persist-lce-vu3ekmj3 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-nsgacl-bypass-77xneasl | Cisco Adaptive Security Appliance and Firepower Threat Defense Software NSG Access Control List Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-ikev2-dos-9fgeyhsf | Cisco Adaptive Security Appliance and Firepower Threat Defense Software IKEv2 VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-dap-dos-bhekp7n | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-bf-dos-vdzhlqrw | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-nyh3fhp | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-czf8gt | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-4gyewmkg | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-tls-cwy6zxb | Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-rce-graupeuf | Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-dos-eedwu5rm | Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38563 | perf/core: Prevent VMA split of buffer mappings | 2025-08-02T00:00:00.000Z | 2026-02-24T14:35:18.000Z |
| msrc_cve-2023-52935 | mm/khugepaged: fix ->anon_vma race | 2025-03-02T00:00:00.000Z | 2026-02-24T14:35:18.000Z |
| msrc_cve-2022-49465 | blk-throttle: Set BIO_THROTTLED when bio has been throttled | 2025-02-02T00:00:00.000Z | 2026-02-24T14:35:11.000Z |
| msrc_cve-2026-24834 | Kata Container to Guest micro VM privilege escalation | 2026-02-02T00:00:00.000Z | 2026-02-24T14:04:20.000Z |
| msrc_cve-2026-2243 | Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing | 2026-02-02T00:00:00.000Z | 2026-02-24T14:04:04.000Z |
| msrc_cve-2025-69299 | WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability | 2026-02-02T00:00:00.000Z | 2026-02-24T14:03:49.000Z |
| msrc_cve-2025-11961 | OOBR and OOBW in pcap_ether_aton() in libpcap | 2025-12-02T00:00:00.000Z | 2026-02-24T14:03:21.000Z |
| msrc_cve-2026-27171 | zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition. | 2026-02-02T00:00:00.000Z | 2026-02-23T14:36:01.000Z |
| msrc_cve-2026-0992 | Libxml2: libxml2: denial of service via crafted xml catalogs | 2026-01-02T00:00:00.000Z | 2026-02-23T14:35:52.000Z |
| msrc_cve-2026-0990 | Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing | 2026-01-02T00:00:00.000Z | 2026-02-23T14:35:45.000Z |
| msrc_cve-2025-8732 | libxml2 xmlcatalog xmlParseSGMLCatalog recursion | 2025-08-02T00:00:00.000Z | 2026-02-23T14:35:17.000Z |
| msrc_cve-2026-23227 | drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free | 2026-02-02T00:00:00.000Z | 2026-02-21T04:29:44.000Z |
| msrc_cve-2025-71236 | scsi: qla2xxx: Validate sp before freeing associated memory | 2026-02-02T00:00:00.000Z | 2026-02-21T04:29:23.000Z |
| msrc_cve-2025-71233 | PCI: endpoint: Avoid creating sub-groups asynchronously | 2026-02-02T00:00:00.000Z | 2026-02-21T04:29:18.000Z |
| msrc_cve-2025-71234 | wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add | 2026-02-02T00:00:00.000Z | 2026-02-21T04:29:07.000Z |
| msrc_cve-2026-23226 | ksmbd: add chann_lock to protect ksmbd_chann_list xarray | 2026-02-02T00:00:00.000Z | 2026-02-21T04:29:02.000Z |
| msrc_cve-2025-71231 | crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode | 2026-02-02T00:00:00.000Z | 2026-02-21T04:28:41.000Z |
| msrc_cve-2026-23221 | bus: fsl-mc: fix use-after-free in driver_override_show() | 2026-02-02T00:00:00.000Z | 2026-02-21T04:28:36.000Z |
| msrc_cve-2026-23230 | smb: client: split cached_fid bitfields to avoid shared-byte RMW races | 2026-02-02T00:00:00.000Z | 2026-02-21T04:28:20.000Z |
| msrc_cve-2026-1703 | Limited path traversal when installing wheel archives | 2026-02-02T00:00:00.000Z | 2026-02-21T04:28:04.000Z |
| msrc_cve-2026-1979 | mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:59.000Z |
| msrc_cve-2026-2443 | Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:43.000Z |
| msrc_cve-2025-71226 | wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:30.000Z |
| msrc_cve-2025-71227 | wifi: mac80211: don't WARN for connections on invalid channels | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:25.000Z |
| msrc_cve-2025-5222 | Icu: stack buffer overflow in the srbroot::addtag function | 2025-05-02T00:00:00.000Z | 2026-02-21T04:27:22.000Z |
| msrc_cve-2026-23214 | btrfs: reject new transactions if the fs is fully read-only | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:19.000Z |
| msrc_cve-2025-71225 | md: suspend array while updating raid_disks via sysfs | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:13.000Z |
| msrc_cve-2026-23217 | riscv: trace: fix snapshot deadlock with sbi ecall | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:06.000Z |
| msrc_cve-2025-47907 | Incorrect results returned from Rows.Scan in database/sql | 2025-08-02T00:00:00.000Z | 2026-02-21T04:27:03.000Z |
| msrc_cve-2026-23215 | x86/vmware: Fix hypercall clobbers | 2026-02-02T00:00:00.000Z | 2026-02-21T04:27:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201901-1586 | In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 1… | 2025-12-22T23:04:10.152000Z |
| var-201711-0480 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2025-12-22T23:04:09.857000Z |
| var-202201-0567 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2025-12-22T23:04:09.535000Z |
| var-201403-0508 | The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.… | 2025-12-22T23:04:09.185000Z |
| var-201804-1202 | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS b… | 2025-12-22T23:04:06.508000Z |
| var-200701-0021 | Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possib… | 2025-12-22T23:03:35.827000Z |
| var-201912-0616 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T23:03:35.705000Z |
| var-201201-0312 | OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows rem… | 2025-12-22T23:03:05.164000Z |
| var-200809-0190 | Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 throug… | 2025-12-22T23:01:28.272000Z |
| var-201806-1482 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2025-12-22T23:01:28.138000Z |
| var-200901-0466 | The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for co… | 2025-12-22T23:01:14.133000Z |
| var-201912-1847 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T23:01:13.747000Z |
| var-201806-1459 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2025-12-22T23:01:13.603000Z |
| var-202003-1786 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2025-12-22T23:00:39.749000Z |
| var-202010-1510 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2025-12-22T22:59:08.949000Z |
| var-202105-1459 | A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in … | 2025-12-22T22:59:07.750000Z |
| var-202103-0218 | A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can … | 2025-12-22T22:59:07.560000Z |
| var-202105-1431 | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired… | 2025-12-22T22:58:52.903000Z |
| var-201302-0144 | Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on… | 2025-12-22T22:58:52.560000Z |
| var-201912-0480 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2025-12-22T22:58:49.507000Z |
| var-201605-0145 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly… | 2025-12-22T22:58:45.637000Z |
| var-201806-1485 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2025-12-22T22:57:43.611000Z |
| var-200107-0173 | Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the termina… | 2025-12-22T22:57:41.381000Z |
| var-202004-2191 | In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untru… | 2025-12-22T22:57:36.525000Z |
| var-202201-0369 | Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. vim Exists in an out-of… | 2025-12-22T22:57:35.356000Z |
| var-201912-1854 | An issue existed in the drawing of web page elements. The issue was addressed with improv… | 2025-12-22T22:57:33.069000Z |
| var-201806-1449 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2025-12-22T22:57:31.487000Z |
| var-200505-0359 | Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape s… | 2025-12-22T22:57:29.900000Z |
| var-202105-1469 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(… | 2025-12-22T22:57:29.592000Z |
| var-201409-0340 | Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x… | 2025-12-22T22:57:29.441000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-001027 | Linux Ratfor vulnerable to stack-based buffer overflow | 2025-01-16T13:27+09:00 | 2025-01-16T13:27+09:00 |
| jvndb-2025-000001 | PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting | 2025-01-08T17:08+09:00 | 2025-01-08T17:08+09:00 |
| jvndb-2024-015471 | Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element | 2024-12-25T11:28+09:00 | 2024-12-25T11:28+09:00 |
| jvndb-2024-015393 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (December 2024) | 2024-12-23T12:52+09:00 | 2024-12-23T12:52+09:00 |
| jvndb-2024-000125 | Multiple vulnerabilities in I-O DATA routers UD-LT1 and UD-LT1/EX | 2024-12-04T15:22+09:00 | 2024-12-18T15:20+09:00 |
| jvndb-2024-014918 | Authentication Bypass Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2024-12-17T15:23+09:00 | 2024-12-17T15:23+09:00 |
| jvndb-2024-000128 | Multiple vulnerabilities in SHARP routers | 2024-12-17T07:54+09:00 | 2024-12-17T07:54+09:00 |
| jvndb-2024-000127 | "Shonen Jump+" App for Android fails to restrict custom URL schemes properly | 2024-12-16T15:07+09:00 | 2024-12-16T15:07+09:00 |
| jvndb-2024-014825 | WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting | 2024-12-16T13:57+09:00 | 2024-12-16T13:57+09:00 |
| jvndb-2024-014793 | Multiple vulnerabilities in FXC AE1021 and AE1021PE | 2024-12-16T11:51+09:00 | 2024-12-16T11:51+09:00 |
| jvndb-2024-014079 | Trend Micro Deep Security Agent for Windows and Deep Security Notifier on DSVA vulnerable to OS command injection | 2024-12-06T12:11+09:00 | 2024-12-06T12:11+09:00 |
| jvndb-2023-000085 | "Skylark" App fails to restrict custom URL schemes properly | 2023-08-24T13:34+09:00 | 2024-12-03T15:51+09:00 |
| jvndb-2024-000124 | Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers | 2024-12-02T16:38+09:00 | 2024-12-02T16:38+09:00 |
| jvndb-2024-000123 | Multiple FCNT Android devices vulnerable to authentication bypass | 2024-11-29T15:30+09:00 | 2024-11-29T15:30+09:00 |
| jvndb-2024-013702 | Multiple vulnerabilities in FUJI ELECTRIC products | 2024-11-29T14:42+09:00 | 2024-11-29T14:42+09:00 |
| jvndb-2024-000122 | HAProxy vulnerable to HTTP request/response smuggling | 2024-11-27T14:36+09:00 | 2024-11-27T14:36+09:00 |
| jvndb-2024-003025 | Multiple vulnerabilities in ELECOM wireless LAN routers | 2024-03-27T14:26+09:00 | 2024-11-27T14:34+09:00 |
| jvndb-2024-012461 | Multiple vulnerabilities in SoftBank Mesh Wi-Fi router RP562B | 2024-11-13T14:26+09:00 | 2024-11-26T16:11+09:00 |
| jvndb-2024-000020 | Multiple vulnerabilities in ELECOM wireless LAN routers and wireless LAN repeater | 2024-02-20T14:14+09:00 | 2024-11-26T15:26+09:00 |
| jvndb-2024-000088 | Multiple vulnerabilities in ELECOM wireless LAN routers and access points | 2024-08-27T14:40+09:00 | 2024-11-26T15:17+09:00 |
| jvndb-2024-000121 | WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting | 2024-11-26T13:57+09:00 | 2024-11-26T13:57+09:00 |
| jvndb-2024-000106 | Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software | 2024-10-21T11:58+09:00 | 2024-11-21T11:37+09:00 |
| jvndb-2024-000120 | "Kura Sushi Official App Produced by EPARK" for Android uses a hard-coded cryptographic key | 2024-11-20T13:56+09:00 | 2024-11-20T13:56+09:00 |
| jvndb-2024-000119 | Multiple vulnerabilities in FitNesse | 2024-11-15T13:37+09:00 | 2024-11-20T11:18+09:00 |
| jvndb-2024-012941 | Multiple vulnerabilities in Rakuten Turbo 5G | 2024-11-19T10:41+09:00 | 2024-11-19T10:41+09:00 |
| jvndb-2024-000118 | WordPress Plugin "VK All in One Expansion Unit" vulnerable to cross-site scripting | 2024-11-13T13:50+09:00 | 2024-11-13T13:50+09:00 |
| jvndb-2024-009481 | Insecure initial password configuration issue in SEIKO EPSON Web Config | 2024-10-01T14:14+09:00 | 2024-11-12T10:25+09:00 |
| jvndb-2024-000109 | baserCMS plugin "BurgerEditor" vulnerable to directory listing | 2024-10-10T14:57+09:00 | 2024-11-06T14:45+09:00 |
| jvndb-2024-012017 | Trend Micro Deep Security 20 Agent for Windows vulnerable to improper access control | 2024-11-06T11:00+09:00 | 2024-11-06T11:00+09:00 |
| jvndb-2024-011833 | Incorrect authorization vulnerability in OMRON Sysmac Studio | 2024-11-05T15:29+09:00 | 2024-11-05T15:29+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0263-1 | Security update for the Linux Kernel | 2026-01-22T21:15:02Z | 2026-01-22T21:15:02Z |
| suse-su-2026:20134-1 | Security update for busybox | 2026-01-22T16:57:46Z | 2026-01-22T16:57:46Z |
| suse-su-2026:20135-1 | Security update for bind | 2026-01-22T16:50:15Z | 2026-01-22T16:50:15Z |
| suse-su-2026:20133-1 | Security update for python-pyasn1 | 2026-01-22T16:46:21Z | 2026-01-22T16:46:21Z |
| suse-su-2026:20158-1 | Security update for python-pyasn1 | 2026-01-22T16:35:43Z | 2026-01-22T16:35:43Z |
| suse-su-2026:0262-1 | Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP6) | 2026-01-22T16:33:41Z | 2026-01-22T16:33:41Z |
| suse-su-2026:0260-1 | Security update for MozillaFirefox | 2026-01-22T16:11:44Z | 2026-01-22T16:11:44Z |
| suse-su-2026:0259-1 | Security update for avahi | 2026-01-22T16:10:45Z | 2026-01-22T16:10:45Z |
| suse-su-2026:0258-1 | Security update for libsoup2 | 2026-01-22T16:10:25Z | 2026-01-22T16:10:25Z |
| suse-su-2026:0257-1 | Security update for libsoup | 2026-01-22T16:09:13Z | 2026-01-22T16:09:13Z |
| suse-su-2026:0256-1 | Security update for openldap2_5 | 2026-01-22T16:08:55Z | 2026-01-22T16:08:55Z |
| suse-su-2026:0255-1 | Security update for python-urllib3 | 2026-01-22T16:08:44Z | 2026-01-22T16:08:44Z |
| suse-su-2026:0254-1 | Security update for log4j | 2026-01-22T16:08:26Z | 2026-01-22T16:08:26Z |
| suse-su-2026:0253-1 | Security update for libsoup2 | 2026-01-22T16:08:05Z | 2026-01-22T16:08:05Z |
| suse-su-2026:0252-1 | Security update for python-pyasn1 | 2026-01-22T16:06:32Z | 2026-01-22T16:06:32Z |
| suse-su-2026:20132-1 | Security update for go1.25 | 2026-01-22T15:53:13Z | 2026-01-22T15:53:13Z |
| suse-su-2026:20129-1 | Security update for python-virtualenv | 2026-01-22T15:48:44Z | 2026-01-22T15:48:44Z |
| suse-su-2026:20130-1 | Security update for python-marshmallow | 2026-01-22T15:46:22Z | 2026-01-22T15:46:22Z |
| suse-su-2026:20157-1 | Security update for python-urllib3 | 2026-01-22T15:46:01Z | 2026-01-22T15:46:01Z |
| suse-su-2026:20131-1 | Security update for python-urllib3 | 2026-01-22T15:46:01Z | 2026-01-22T15:46:01Z |
| suse-su-2026:0247-1 | Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7) | 2026-01-22T15:22:22Z | 2026-01-22T15:22:22Z |
| suse-su-2026:0246-1 | Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5) | 2026-01-22T15:19:55Z | 2026-01-22T15:19:55Z |
| suse-su-2026:0245-1 | Security update for php7 | 2026-01-22T15:18:06Z | 2026-01-22T15:18:06Z |
| suse-su-2026:20156-1 | Security update for gdk-pixbuf | 2026-01-22T14:36:50Z | 2026-01-22T14:36:50Z |
| suse-su-2026:20128-1 | Security update for gdk-pixbuf | 2026-01-22T14:36:50Z | 2026-01-22T14:36:50Z |
| suse-su-2026:20155-1 | Security update for libpng16 | 2026-01-22T14:31:16Z | 2026-01-22T14:31:16Z |
| suse-su-2026:20127-1 | Security update for libpng16 | 2026-01-22T14:31:16Z | 2026-01-22T14:31:16Z |
| suse-su-2026:20154-1 | Security update for python313 | 2026-01-22T14:12:33Z | 2026-01-22T14:12:33Z |
| suse-su-2026:20126-1 | Security update for rabbitmq-server | 2026-01-22T14:12:33Z | 2026-01-22T14:12:33Z |
| suse-su-2026:20125-1 | Security update for python313 | 2026-01-22T14:12:33Z | 2026-01-22T14:12:33Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10048-1 | openCryptoki-3.26.0-3.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10047-1 | libcryptopp-devel-8.9.0-6.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10046-1 | MozillaFirefox-147.0-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:20026-1 | Security update for python-uv | 2026-01-13T12:48:04Z | 2026-01-13T12:48:04Z |
| opensuse-su-2026:20025-1 | Security update for hawk2 | 2026-01-13T12:41:42Z | 2026-01-13T12:41:42Z |
| opensuse-su-2026:10045-1 | liburiparser1-1.0.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10044-1 | python311-pypdf-6.6.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10043-1 | python311-filelock-3.20.3-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10042-1 | mcphost-0.32.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10041-1 | libsoup-2_4-1-2.74.3-14.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10040-1 | libsoup-3_0-0-3.6.5-11.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10039-1 | kernel-devel-6.18.5-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10038-1 | fluidsynth-2.5.2-2.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10037-1 | firefox-esr-140.7.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10036-1 | cockpit-repos-4.6-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:20018-1 | Security update for glib2 | 2026-01-12T11:52:23Z | 2026-01-12T11:52:23Z |
| opensuse-su-2026:20014-1 | Security update for MozillaFirefox | 2026-01-12T11:35:13Z | 2026-01-12T11:35:13Z |
| opensuse-su-2026:20017-1 | Security update for libpng16 | 2026-01-12T11:14:46Z | 2026-01-12T11:14:46Z |
| opensuse-su-2026:20016-1 | Security update for libmicrohttpd | 2026-01-12T11:14:46Z | 2026-01-12T11:14:46Z |
| opensuse-su-2026:20015-1 | Security update for python-tornado6 | 2026-01-12T10:29:37Z | 2026-01-12T10:29:37Z |
| opensuse-su-2026:10035-1 | teleport-17.7.13-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10034-1 | python311-Authlib-1.6.6-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10033-1 | libtasn1-6-32bit-4.21.0-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10032-1 | libpcap-devel-1.10.6-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10031-1 | kubelogin-0.2.14-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10030-1 | k6-1.5.0-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10029-1 | istioctl-1.28.2-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10028-1 | ffmpeg-7-7.1.3-1.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:10027-1 | ffmpeg-4-4.4.6-10.1 on GA media | 2026-01-12T00:00:00Z | 2026-01-12T00:00:00Z |
| opensuse-su-2026:20022-1 | Security update for matio | 2026-01-11T17:15:13Z | 2026-01-11T17:15:13Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| sevd-2020-287-02 | Wibu-Systems CodeMeter Vulnerabilities | 2020-10-13T00:00:00.000Z | 2020-12-08T00:00:00.000Z |
| sevd-2020-315-04 | EcoStruxure Building Operation (EBO) | 2020-11-10T00:00:00.000Z | 2020-11-10T00:00:00.000Z |
| sevd-2020-105-02 | Modicon M218/M241/M251/M258 Logic Controllers,SoMachine/SoMachine Motion, EcoStruxure™ Machine Expert | 2020-04-14T00:00:00.000Z | 2020-11-10T00:00:00.000Z |
| sevd-2020-287-04 | EcoStruxure™ and SmartStruxure™ Power Monitoring and SCADA Software | 2020-10-13T00:00:00.000Z | 2020-10-13T00:00:00.000Z |
| sevd-2020-287-03 | Smartlink, PowerTag, and Wiser Series Gateways | 2020-10-13T00:00:00.000Z | 2020-10-13T00:00:00.000Z |
| sevd-2020-224-01 | Schneider Electric Modbus Serial Driver | 2020-08-11T00:00:00.000Z | 2020-10-13T00:00:00.000Z |
| sevd-2020-133-02 | Vijeo Designer and Vijeo Designer Basic Software | 2020-05-12T00:00:00.000Z | 2020-08-14T00:00:00.000Z |
| sevd-2020-224-08 | Schneider Electric PACTware | 2020-08-11T00:00:00.000Z | 2020-08-13T00:00:00.000Z |
| sevd-2020-224-07 | SoMove | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-06 | Harmony® eXLhoist | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-05 | PowerChute Business Edition | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-04 | APC Easy UPS On-Line Software | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-03 | Modicon M218 Logic Controller | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-02 | spaceLYnk & Wiser for KNX (formerly homeLYnk) | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-105-03 | Vijeo Designer and Vijeo Designer Basic | 2020-04-14T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-196-01 | Schneider Electric Software Update (SESU) | 2020-07-14T00:00:00.000Z | 2020-07-14T00:00:00.000Z |
| sevd-2020-161-03 | Modicon LMC078 Logic Controller additional URGENT/11 Fix | 2020-06-09T00:00:00.000Z | 2020-06-09T00:00:00.000Z |
| sevd-2020-161-01 | Modicon M218 Logic Controller | 2020-06-09T00:00:00.000Z | 2020-06-09T00:00:00.000Z |
| sevd-2015-344-01 | GoAhead Web Server vulnerability | 2015-12-15T00:00:00.000Z | 2020-06-09T00:00:00.000Z |
| sevd-2020-070-04 | Andover Continuum System | 2020-03-10T00:00:00.000Z | 2020-05-12T00:00:00.000Z |
| sevd-2020-105-01 | Modicon M100/M200/M221 controllers, SoMachine Basic and EcoStruxure Machine Expert - Basic Programming Software | 2020-04-14T00:00:00.000Z | 2020-04-14T00:00:00.000Z |
| sevd-2020-070-03 | ZigBee Installation Toolkit | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-070-02 | Modicon Quantum Ethernet Network module and Quantum / Premium COPRO | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-070-01 | IGSS (Interactive Graphical SCADA System) | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-042-01 | ProSoft Configurator for Modicon PMEPXM0100 (H) | 2020-02-11T00:00:00.000Z | 2020-02-11T00:00:00.000Z |
| sevd-2018-095-01 | Security Notification - U.motion Builder software | 2018-04-05T00:00:00.000Z | 2020-02-11T00:00:00.000Z |
| sevd-2020-014-01 | MSX Configurator | 2020-01-14T00:00:00.000Z | 2020-01-14T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-moodle-2025-32045 | Moodle: hidden grades shown to users without permission on some grade reports | 2026-01-26T14:49:30.385Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-32044 | Moodle: unauthenticated rest api user data exposure | 2026-01-26T14:49:29.093Z | 2026-01-26T15:09:56.435Z |
| bit-mastodon-2026-22246 | Local Mastodon users can enumerate and access severed relationships of every other local user | 2026-01-13T11:27:33.626Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-15367 | POP3 command injection in user-controlled commands | 2026-01-26T14:43:12.088Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-15366 | IMAP command injection in user-controlled commands | 2026-01-26T14:43:10.455Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-12781 | base64.b64decode() always accepts "+/" characters, despite setting altchars | 2026-01-26T14:43:03.724Z | 2026-01-26T15:09:56.435Z |
| bit-libphp-2025-14178 | Heap buffer overflow in array_merge() | 2026-01-08T11:43:28.412Z | 2026-01-26T15:09:56.435Z |
| bit-harbor-2024-22261 | SQL Injection in Harbor scan log API | 2026-01-26T14:40:06.365Z | 2026-01-26T15:09:56.435Z |
| bit-harbor-2022-31666 | Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies | 2026-01-26T14:39:52.521Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-9222 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-13T09:09:30.025Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-6454 | Server-Side Request Forgery (SSRF) in GitLab | 2025-09-16T09:08:45.357Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-13772 | Missing Authorization in GitLab | 2026-01-13T09:07:21.509Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-13761 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-13T09:07:19.725Z | 2026-01-26T15:09:56.435Z |
| bit-crossplane-2023-38495 | Crossplane vulnerable to possible image tampering from missing image validation for Packages | 2026-01-26T14:36:56.233Z | 2026-01-26T15:09:56.435Z |
| bit-crossplane-2023-37900 | Crossplane vulnerable to denial of service from large image | 2026-01-26T14:36:54.817Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-11224 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-16T09:05:53.033Z | 2026-01-22T09:11:07.452Z |
| bit-appsmith-2026-22794 | Account Takeover Vulnerability in Appsmith | 2026-01-14T08:37:00.092Z | 2026-01-22T09:11:07.452Z |
| bit-gradle-2026-22865 | Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts | 2026-01-21T08:41:11.981Z | 2026-01-21T09:22:22.325Z |
| bit-gradle-2026-22816 | Gradle fails to disable repositories which can expose builds to malicious artifacts | 2026-01-21T08:41:10.153Z | 2026-01-21T09:22:22.325Z |
| bit-airflow-2025-68438 | Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated | 2026-01-21T08:39:22.633Z | 2026-01-21T09:22:22.325Z |
| bit-kibana-2026-0543 | Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation | 2026-01-16T08:42:18.049Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0532 | External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector | 2026-01-16T08:42:16.599Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0531 | Allocation of Resources Without Limits or Throttling in Kibana Fleet | 2026-01-16T08:42:14.963Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0530 | Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation | 2026-01-16T08:42:13.351Z | 2026-01-16T09:10:29.256Z |
| bit-ghost-2026-22596 | Ghost has SQL Injection in Members Activity Feed | 2026-01-13T08:40:25.592Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0543 | Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation | 2026-01-16T08:39:07.127Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0532 | External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector | 2026-01-16T08:39:05.407Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0531 | Allocation of Resources Without Limits or Throttling in Kibana Fleet | 2026-01-16T08:39:03.612Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0530 | Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation | 2026-01-16T08:39:01.662Z | 2026-01-16T09:10:29.256Z |
| bit-mastodon-2026-22245 | Mastodon has SSRF Protection bypass | 2026-01-13T11:27:28.319Z | 2026-01-13T12:01:00.363Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-jm36781 | Within HostnameError | 2026-01-30T14:37:22.513933Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-jm16286 | attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing | 2026-01-30T16:56:26.537390Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-jd48541 | Moby is an open-source project created by Docker for software containerization | 2026-01-30T16:52:56.596548Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-iy17697 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:37:55.497960Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-iw06531 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:07:23.455235Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-il55587 | Cancelling a query (e | 2026-01-30T14:51:52.694658Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-il25782 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process | 2026-01-30T15:09:53.055759Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ib84500 | security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion | 2026-01-30T16:29:55.343868Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ib05679 | Within HostnameError | 2026-01-30T15:06:23.436295Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ia26094 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:51:22.634752Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hy43775 | Within HostnameError | 2026-01-30T14:46:52.607713Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hx78047 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:24:23.175483Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hw39798 | Cancelling a query (e | 2026-01-30T15:02:52.970576Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hv28992 | Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3 | 2026-01-30T15:55:24.450018Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hu01783 | Cancelling a query (e | 2026-01-30T15:02:52.911074Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-ht23337 | flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm | 2026-01-30T17:15:56.746125Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hl71566 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:50:56.129322Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hj34439 | Go before 1 | 2026-01-30T16:39:55.415446Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hj04971 | vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT | 2026-01-30T17:21:56.808972Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hh74302 | Cancelling a query (e | 2026-01-30T15:07:53.076603Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hg66170 | Cancelling a query (e | 2026-01-30T15:35:23.809128Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-hf39630 | potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf | 2026-01-30T17:20:56.632450Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gy69323 | Moby is an open-source project created by Docker for software containerization | 2026-01-30T14:00:20.037168Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gv62494 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T14:41:53.003431Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gs30434 | Within HostnameError | 2026-01-30T14:35:22.588418Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gs02052 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T15:22:23.453780Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gq48460 | Cancelling a query (e | 2026-01-30T16:26:55.253385Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gn47077 | Within HostnameError | 2026-01-30T14:48:53.159123Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gl70025 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-01-30T16:08:25.191230Z | 2026-01-29T18:58:54Z |
| cleanstart-2026-gl18398 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-01-30T16:36:55.508939Z | 2026-01-29T18:58:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| drupal-contrib-2018-015 | 2018-02-21T20:12:22.000Z | 2023-08-11T21:43:40.000Z | |
| drupal-contrib-2018-014 | 2018-02-21T19:04:59.000Z | 2023-08-11T21:43:18.000Z | |
| drupal-contrib-2018-008 | 2018-02-07T18:45:12.000Z | 2023-08-11T21:41:56.000Z | |
| drupal-contrib-2018-027 | 2018-05-09T20:28:16.000Z | 2023-08-11T21:40:01.000Z | |
| drupal-contrib-2018-025 | 2018-05-09T14:16:32.000Z | 2023-08-11T21:39:24.000Z | |
| drupal-contrib-2018-021 | 2018-04-25T17:43:28.000Z | 2023-08-11T21:38:48.000Z | |
| drupal-contrib-2018-022 | 2018-04-25T17:37:20.000Z | 2023-08-11T21:38:26.000Z | |
| drupal-contrib-2018-018 | 2018-04-18T15:45:18.000Z | 2023-08-11T21:35:30.000Z | |
| drupal-contrib-2018-040 | 2018-06-06T13:05:27.000Z | 2023-08-11T21:31:17.000Z | |
| drupal-contrib-2018-039 | 2018-06-06T13:01:46.000Z | 2023-08-11T21:29:11.000Z | |
| drupal-contrib-2018-038 | 2018-06-06T12:58:31.000Z | 2023-08-11T21:28:55.000Z | |
| drupal-contrib-2018-057 | 2018-08-29T16:26:33.000Z | 2023-08-11T21:25:35.000Z | |
| drupal-contrib-2018-055 | 2018-08-08T17:14:32.000Z | 2023-08-11T21:24:54.000Z | |
| drupal-contrib-2018-067 | 2018-10-17T16:29:08.000Z | 2023-08-11T21:21:48.000Z | |
| drupal-contrib-2018-059 | 2018-09-05T17:22:50.000Z | 2023-08-11T21:18:37.000Z | |
| drupal-contrib-2018-074 | 2018-11-28T17:32:56.000Z | 2023-08-11T21:15:17.000Z | |
| drupal-contrib-2018-073 | 2018-10-31T17:53:57.000Z | 2023-08-11T21:14:25.000Z | |
| drupal-contrib-2018-071 | 2018-10-31T14:59:17.000Z | 2023-08-11T21:13:17.000Z | |
| drupal-contrib-2018-081 | 2018-12-19T17:53:49.000Z | 2023-08-11T21:10:49.000Z | |
| drupal-contrib-2018-078 | 2018-12-05T19:24:02.000Z | 2023-08-11T21:09:51.000Z | |
| drupal-contrib-2019-004 | 2019-01-23T17:01:58.000Z | 2023-08-11T19:25:48.000Z | |
| drupal-contrib-2019-014 | 2019-02-06T18:13:19.000Z | 2023-08-11T19:23:01.000Z | |
| drupal-contrib-2019-013 | 2019-02-06T17:36:06.000Z | 2023-08-11T19:22:41.000Z | |
| drupal-contrib-2019-010 | 2019-01-23T18:22:41.000Z | 2023-08-11T19:00:18.000Z | |
| drupal-contrib-2019-025 | 2019-02-20T17:56:44.000Z | 2023-08-11T18:57:13.000Z | |
| drupal-contrib-2019-024 | 2019-02-20T17:49:58.000Z | 2023-08-11T18:56:41.000Z | |
| drupal-contrib-2019-023 | 2019-02-20T17:47:47.000Z | 2023-08-11T18:56:27.000Z | |
| drupal-contrib-2019-022 | 2019-02-20T17:44:08.000Z | 2023-08-11T18:55:29.000Z | |
| drupal-contrib-2019-021 | 2019-02-20T17:39:43.000Z | 2023-08-11T18:55:05.000Z | |
| drupal-contrib-2019-019 | 2019-02-20T17:37:45.000Z | 2023-08-11T18:53:47.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-08443 | Online Course Registration System /enroll.php文件SQL注入漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08434 | iccDEV CIccCLUT::Init函数未定义行为漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08433 | iccDEV未定义行为漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08432 | iccDEV内存泄漏漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08431 | iccDEV CIccXmlArrayType::ParseTextCountNum函数整数溢出漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08430 | iccDEV CIccXform::Create函数释放后重用漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07962 | Soda PDF Desktop目录遍历漏洞 | 2025-12-15 | 2026-01-27 |
| cnvd-2026-07961 | Soda PDF Desktop越界写入漏洞 | 2025-12-15 | 2026-01-27 |
| cnvd-2026-07960 | Soda PDF Desktop权限提升漏洞 | 2026-01-09 | 2026-01-27 |
| cnvd-2026-07959 | Soda PDF Desktop越界读取信息泄露漏洞(CNVD-2026-07959) | 2026-01-09 | 2026-01-27 |
| cnvd-2026-07958 | Soda PDF Desktop内存损坏信息泄露漏洞 | 2026-01-09 | 2026-01-27 |
| cnvd-2026-07957 | Soda PDF Desktop越界读取信息泄露漏洞 | 2026-01-09 | 2026-01-27 |
| cnvd-2026-07956 | iccDEV CIccProfileXml::ParseBasic函数堆缓冲区溢出漏洞 | 2026-01-14 | 2026-01-27 |
| cnvd-2026-07955 | iccDEV SIccCalcOp::Describe函数堆缓冲区溢出漏洞 | 2026-01-14 | 2026-01-27 |
| cnvd-2026-07954 | iccDEV拒绝服务漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07953 | iccDEV空指针成员调用漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07206 | Microsoft SharePoint Server远程代码执行漏洞(CNVD-2026-07206) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07205 | Microsoft SharePoint Server欺骗漏洞(CNVD-2026-07205) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07204 | Microsoft SharePoint远程代码执行漏洞(CNVD-2026-07204) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07203 | Microsoft SharePoint信息泄露漏洞(CNVD-2026-07203) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07202 | Microsoft SharePoint Server远程代码执行漏洞(CNVD-2026-07202) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07201 | Microsoft Office代码执行漏洞(CNVD-2026-07201) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07200 | Microsoft Office代码执行漏洞(CNVD-2026-07200) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07199 | Microsoft Office Click-To-Run代码执行漏洞 | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07198 | Microsoft Excel代码执行漏洞(CNVD-2026-07198) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-07197 | Microsoft Excel代码执行漏洞(CNVD-2026-07197) | 2026-01-19 | 2026-01-27 |
| cnvd-2026-08442 | iccDEV SIccCalcOp::ArgsPushed函数类型混淆漏洞 | 2026-01-14 | 2026-01-26 |
| cnvd-2026-08441 | iccDEV CIccProfileXml::ParseBasic函数类型混淆漏洞 | 2026-01-14 | 2026-01-26 |
| cnvd-2026-08440 | iccDEV CIccTagXmlTagData::ToXml函数类型混淆漏洞 | 2026-01-14 | 2026-01-26 |
| cnvd-2026-08439 | iccDEV CIccTag:IsTypeCompressed函数类型混淆漏洞 | 2026-01-14 | 2026-01-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1076 | Multiples vulnérabilités dans MISP | 2025-12-08T00:00:00.000000 | 2025-12-24T00:00:00.000000 |
| certfr-2025-avi-1126 | Multiples vulnérabilités dans PHP | 2025-12-19T00:00:00.000000 | 2025-12-22T00:00:00.000000 |
| certfr-2025-avi-1136 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1135 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1134 | Multiples vulnérabilités dans MongoDB Server | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1133 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1132 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1131 | Multiples vulnérabilités dans les produits IBM | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1130 | Multiples vulnérabilités dans les produits Foxit | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1129 | Multiples vulnérabilités dans les produits VMware | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1128 | Multiples vulnérabilités dans Mozilla Firefox | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1127 | Multiples vulnérabilités dans Centreon Web | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1125 | Vulnérabilité dans les produits NetApp | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1124 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1123 | Multiples vulnérabilités dans les produits Elastic | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1121 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1120 | Vulnérabilité dans les produits Cisco | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1119 | Multiples vulnérabilités dans les produits Synology | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1118 | Vulnérabilité dans Mozilla Firefox | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1117 | Multiples vulnérabilités dans GLPI | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1116 | Multiples vulnérabilités dans Google Chrome | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1115 | Vulnérabilité dans Trend Micro Apex One | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1114 | Multiples vulnérabilités dans Tenable Nessus | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1113 | Multiples vulnérabilités dans Moodle | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1112 | Multiples vulnérabilités dans les produits Elastic | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1110 | Multiples vulnérabilités dans les produits Apple | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1109 | Vulnérabilité dans strongSwan | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1103 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-12T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1096 | Multiples vulnérabilités dans Google Chrome | 2025-12-11T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1108 | Multiples vulnérabilités dans les produits IBM | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-ale-005 | Vulnérabilité dans Java Deployment Toolkit | 2010-04-09T00:00:00.000000 | 2010-04-16T00:00:00.000000 |
| certa-2010-ale-003 | Vulnérabilité dans Microsoft VBScript | 2010-03-02T00:00:00.000000 | 2010-04-13T00:00:00.000000 |
| certa-2010-ale-004 | Vulnérabilité dans Microsoft Internet Explorer | 2010-03-10T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-ale-002 | Vulnérabilité dans le sous-système MS-DOS de Microsoft Windows | 2010-01-21T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-ale-001 | Vulnérabilité dans Microsoft Internet Explorer | 2010-01-15T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| certa-2009-ale-023 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2009-12-15T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2009-ale-021 | Vulnérabilité dans Adobe Illustrator | 2009-12-10T00:00:00.000000 | 2010-01-08T00:00:00.000000 |
| certa-2009-ale-022 | Vulnérabilité dans TANDBERG MXP | 2009-12-11T00:00:00.000000 | 2009-12-11T00:00:00.000000 |
| certa-2009-ale-020 | Vulnérabilité dans Internet Explorer | 2009-11-21T00:00:00.000000 | 2009-12-09T00:00:00.000000 |
| certa-2009-ale-018 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2009-10-09T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-ale-015 | Vulnérabilités du serveur FTP de Microsoft IIS | 2009-09-01T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-ale-016 | Vulnérabilité de SMBv2 dans Microsoft Windows | 2009-09-09T00:00:00.000000 | 2009-10-13T00:00:00.000000 |
| certa-2009-ale-011 | Vulnérabilité dans Microsoft Office Web Components Control | 2009-07-13T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-ale-013 | Vulnérabilité Shockwave Flash pour les produits Adobe | 2009-07-23T00:00:00.000000 | 2009-07-31T00:00:00.000000 |
| certa-2009-ale-012 | Vulnérabilité dans Mozilla Firefox | 2009-07-15T00:00:00.000000 | 2009-07-17T00:00:00.000000 |
| certa-2009-ale-010 | Vulnérabilité dans le contrôle ActiveX Microsoft Video | 2009-07-07T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-ale-009 | Vulnérabilité dans Microsoft DirectShow | 2009-05-29T00:00:00.000000 | 2009-07-14T00:00:00.000000 |
| certa-2009-ale-008 | Vulnérabilité Java de Mac OS X | 2009-05-20T00:00:00.000000 | 2009-06-17T00:00:00.000000 |
| certa-2009-ale-007 | Vulnérabilité WebDAV sous Microsoft IIS | 2009-05-18T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-ale-003 | Vulnérabilité dans Apple Mac OS X | 2009-03-24T00:00:00.000000 | 2009-06-02T00:00:00.000000 |
| certa-2009-ale-006 | Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat | 2009-04-28T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-ale-005 | Vulnérabilité de PowerPoint | 2009-04-03T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-ale-002 | Vulnérabilité dans Microsoft Excel | 2009-02-25T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2008-ale-015 | Vulnérabilité dans le convertisseur de texte de WordPad | 2008-12-10T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2008-ale-012 | Vulnérabilité dans Microsoft Windows | 2008-10-10T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-ale-004 | Vulnérabilité dans Mozilla Firefox | 2009-03-27T00:00:00.000000 | 2009-03-30T00:00:00.000000 |
| certa-2009-ale-001 | Vulnérabilité dans l'interprétation JBIG2 des produits Adobe | 2009-02-20T00:00:00.000000 | 2009-03-20T00:00:00.000000 |
| certa-2008-ale-017 | Vulnérabilité dans Microsoft SQL Server | 2008-12-12T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2008-ale-014 | Vulnérabilité dans Opera | 2008-11-20T00:00:00.000000 | 2009-01-06T00:00:00.000000 |
| certa-2008-ale-016 | Vulnérabilité dans Microsoft Internet Explorer | 2008-12-10T00:00:00.000000 | 2008-12-17T00:00:00.000000 |