Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
Ghost CVEs
All sightingsA Ghost CVE is a vulnerability identifier that appears in the wild — through GitHub Gists, security advisories, social media, or RSS feeds — yet remains marked as RESERVED or NOT_FOUND in the official CVE registries like NVD and MITRE. Also called "RESERVED BUT PUBLIC" CVEs, these ghosts highlight potential security blind spots where vulnerabilities are discussed publicly before official disclosure. They are detected from the sightings collected from these sources; the most recently sighted come first.
Loading…
No Ghost CVE sighted recently.
| Identifier | Sightings | Sighted by | Last sighted |
|---|
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP chainguard CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust flock Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic HONA Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer RES Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx Westell WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
383 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock Airoha Akrites AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity Gridware GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Infoblox Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentaho Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac POSIT postiz pretix PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile samsungsemiconductor sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro TuranSec tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-112137 2026-11-10A vulnerability has been identified in Mendix Studio Pro 11 (All vers…
-
CVE-2026-112136 2026-11-10A vulnerability has been identified in Mendix Studio Pro 11 (All vers…
-
CVE-2026-109830 2026-11-10A vulnerability has been identified in meta-iot2050 (All versions >= …
-
CVE-2026-109097 2026-11-10A vulnerability has been identified in ROS# (All versions < V2.3.1). …
-
CVE-2026-59082 2026-11-10A vulnerability has been identified in SIMATIC WinCC V7.5 (All versio…
-
CVE-2026-58114 2026-11-10A vulnerability has been identified in SIMATIC BATCH V9.1 (All versio…
-
CVE-2026-60046 2026-11-10DoS via password reset
-
CVE-2026-60045 2026-11-10Arbitrary file upload
-
CVE-2026-60044 2026-11-10Static backup password
-
CVE-2026-60043 2026-11-10XSS in backend
-
CVE-2026-125871 2026-11-10MISP sourcecache module SSRF allows fetching arbitrary internal URLs …
-
CVE-2026-112165 2026-11-09Disabled TLS Certificate Validation Enables MITM Attacks
-
CVE-2026-112164 2026-11-09Hardcoded AES Key Enables Credential Disclosure
-
CVE-2026-103906 2026-11-09Disabled TLS Certificate Validation Enables MITM Attacks
-
CVE-2026-124850 2026-11-09SQL Injection in Database Migration via Stored Connector Identifiers …
-
CVE-2026-112205 2026-11-09Bruteforce Protection Bypass in WidzialniCMS
-
CVE-2026-112204 2026-11-09Reflected XSS in WidzialniCMS
-
CVE-2026-110469 2026-11-09Remote Code Execution via Unrestricted File Upload in WidzialniCMS
-
CVE-2026-110468 2026-11-09Remote Code Execution via Unrestricted File Upload in WidzialniCMS
-
CVE-2026-112171 2026-11-09SQL injection vulnerability in Magistra software
-
CVE-2026-104989 2026-11-09Pre-authentication remote code execution in Chaos V-Ray Swarm
-
CVE-2026-71881 2026-11-06Cross-site scripting in Integrated Publishing Toolkit
-
CVE-2026-120930 2026-11-03Incorrect authorization in Blink in Google Chrome prior to 156.0.8078…
-
CVE-2026-120931 2026-11-03Out of bounds write in WebGL in Google Chrome on on Android prior to …
-
CVE-2026-121141 2026-11-03Improper input validation in Editing in Google Chrome prior to 157.0.…
-
CVE-2026-121195 2026-11-03Incorrect authorization in TrustedTypes in Google Chrome prior to 157…
-
CVE-2026-121064 2026-11-03Improper input validation in Performance in Google Chrome prior to 15…
-
CVE-2026-121169 2026-11-03Missing authorization in DevTools in Google Chrome prior to 157.0.810…
-
CVE-2026-121069 2026-11-03Use after free in Track in Google Chrome prior to 157.0.8103.38 allow…
-
CVE-2026-121142 2026-11-03Incorrect authorization in Network in Google Chrome prior to 157.0.81…
-
CVE-2026-112137 2026-11-10A vulnerability has been identified in Mendix Studio Pro 11 (All vers…
-
CVE-2026-112136 2026-11-10A vulnerability has been identified in Mendix Studio Pro 11 (All vers…
-
CVE-2026-109830 2026-11-10A vulnerability has been identified in meta-iot2050 (All versions >= …
-
CVE-2026-109097 2026-11-10A vulnerability has been identified in ROS# (All versions < V2.3.1). …
-
CVE-2026-59082 2026-11-10A vulnerability has been identified in SIMATIC WinCC V7.5 (All versio…
-
CVE-2026-58114 2026-11-10A vulnerability has been identified in SIMATIC BATCH V9.1 (All versio…
-
CVE-2026-60046 2026-11-10DoS via password reset
-
CVE-2026-60045 2026-11-10Arbitrary file upload
-
CVE-2026-60044 2026-11-10Static backup password
-
CVE-2026-60043 2026-11-10XSS in backend
-
CVE-2026-124637 2026-11-09Stored Cross-Site Scripting (XSS) in Tankuam Places
-
CVE-2026-123087 2026-11-06SQL injection in Atmira’s SIREC
-
CVE-2026-111495 2026-11-05API keys, credentials, and configuration parameters embedded in the M…
-
CVE-2026-111494 2026-11-05Incorrect validation of TLS certificates in the MatchPoint Android app
-
CVE-2026-111493 2026-11-05Lack of authentication and authorization in the Images.ashx endpoint …
-
CVE-2026-111492 2026-11-05SQL injection in the push notification handler of the MatchPoint Andr…
-
CVE-2026-111491 2026-11-05Credentials are stored in plain text in an SQLite database and in the…
-
CVE-2026-111490 2026-11-05Insecure direct object reference (IDOR) vulnerability in the MatchPoint API
-
CVE-2026-111489 2026-11-05A static credential embedded in the mobile app has been reported to r…
-
CVE-2026-111040 2026-11-04Multiple vulnerabilities in Coupa’s Total Spend Management Platform
-
CVE-2026-91758 2026-11-10Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Ma…
-
CVE-2026-91759 2026-11-10Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux
-
CVE-2026-91760 2026-11-10Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Mana…
-
CVE-2026-91764 2026-11-10Improper Link Resolution Before File Access Vulnerability in Hitachi …
-
CVE-2026-115646 2026-11-10Partial String Comparison Vulnerability in HiRDB
-
CVE-2026-91761 2026-11-10Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager…
-
CVE-2026-91762 2026-11-10Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager…
-
CVE-2026-91763 2026-11-10Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager…
-
CVE-2026-92864 2026-11-10Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager…
-
CVE-2026-112125 2026-11-10Incorrect Permission Assignment for Critical Resource Vulnerability i…
-
CVE-2026-123082 2026-11-10Docker Desktop logs can expose the Docker Hub access token
-
CVE-2026-113422 2026-11-10In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update f…
-
CVE-2026-121885 2026-11-10Podman: untrusted image labels allow auto-update to restart arbitrary…
-
CVE-2026-114359 2026-11-10Eclipse Kura downloads deployment packages (DPs) from a remote URL wi…
-
CVE-2026-120399 2026-11-10Flightctl-api: flightctl-remote-access: flightctl: unbounded tls hand…
-
CVE-2026-124952 2026-11-10Use-after-free in the Audio/Video component
-
CVE-2026-124950 2026-11-10Same-origin policy bypass in the CSS Parsing and Computation component
-
CVE-2026-124949 2026-11-10Other issue in the SVG component
-
CVE-2026-124947 2026-11-10Incorrect boundary conditions in the Graphics component
-
CVE-2026-124946 2026-11-10Invalid pointer in the JavaScript Engine: JIT component
-
CVE-2026-121885 2026-11-10Podman: untrusted image labels allow auto-update to restart arbitrary…
-
CVE-2026-120399 2026-11-10Flightctl-api: flightctl-remote-access: flightctl: unbounded tls hand…
-
CVE-2026-124747 2026-11-10Busybox: heap buffer overflow in wget ftp resume when the resume offs…
-
CVE-2026-125709 2026-11-10Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.
-
CVE-2026-125707 2026-11-10Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer tem…
-
CVE-2026-125706 2026-11-10Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pe…
-
CVE-2026-125712 2026-11-10Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sde…
-
CVE-2026-125703 2026-11-10Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc pac…
-
CVE-2026-125672 2026-11-10Cockpit: cockpit-storaged: tang keyserver address from an untrusted l…
-
CVE-2026-125704 2026-11-10Gstreamer: gstreamer: use-after-free in gstreamer core buffer value d…
-
CVE-2026-94395 2026-11-05Stack-based buffer overflow in SafeNet Authentication Client SIS toke…
-
CVE-2026-112110 2026-11-05Privileged file deletion in SafeNet Authentication Client SACSrv
-
CVE-2026-112109 2026-11-05Local privilege escalation in SafeNet Authentication Client SACSrv
-
CVE-2026-78403 2026-10-30Unauthenticated Stack Buffer Overflow in Sentinel Keys Server
-
CVE-2026-78402 2026-10-30Stack Buffer Overflow in Sentinel Keys Server
-
CVE-2026-18397 2026-10-01SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability
-
CVE-2026-18825 2026-09-28Origin validation error in the connect-xcors npm package
-
CVE-2026-19614 2026-09-08XML External Entity (XXE) Injection in CyberELF NanoXML
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
GCVE Numbering Authorities (GNAs) allocate vulnerability identifiers in their own namespace, without a central authority. This list is the local, signature-verified copy of the GCVE registry; the cards below cover this instance's own GNA and the feeds it pulls from other GNAs, following GCVE-BCP-03.
47
GNAs registered
5
GNA feeds pulled
577
Publications pulled
327
Published here (GNA-1)
-
GCVE-1-2026-20273 2026-11-10MISP sourcecache module SSRF allows fetching arbitrary internal URLs …
-
GCVE-1-2026-20156 2026-11-09SQL Injection in Database Migration via Stored Connector Identifiers …
-
GCVE-1-2026-20054 2026-11-06Vulnerability-Lookup: memory amplification through webhook payload te…
-
GCVE-1-2026-20186 2026-10-30Improper Access Control in Multi-Factor Authentication (MFA) Function…
-
GCVE-1-2026-20247 2026-10-30Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature
Adrian Dacka
GNA-115No publication imported from this GNA yet.
CI-ISAC Australia
GNA-123-
GCVE-123-2026-0001 2026-09-25Best Practice Software Bp Premier ships a hardcoded, shared SQL Serve…
bcsec
GNA-128-
GCVE-128-2026-0001 2026-08-31Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure
AHA!
GNA-1337-
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
-
EnergizeLab Station Middleware Admin APIs Missing Role Checks
-
EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime…
-
EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary…
-
EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
VULNARCHIVE
GNA-1988-
GCVE-1988-2026-0551 2026-11-05SEC Consult SA-20261104-0 :: Improper device certificate validation e…
-
GCVE-1988-2026-0550 2026-11-05Apache Struts2 Tiles Plugin <=7.4.0 and >=6.3.0 Preparer Cache Vulner…
-
GCVE-1988-2026-0549 2026-11-05unixODBC <=2.3.14 Multiple Races
-
GCVE-1988-2026-0548 2026-11-05unixODBC <=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Ove…
-
GCVE-1988-2026-0547 2026-11-02[Bugtraq] [SECURITY] [DSA 6528-1] linux security update
GCVE registry
| GNA | Organization | Publications | Services |
|---|---|---|---|
| GNA-1 This instance |
CIRCL
circl
Computer Incident Response Center Luxembourg
|
327 | |
| GNA-115 Pulled |
Adrian Dacka
syrex1013
Adrian "syrex1013" Dacka
|
0 | |
| GNA-123 Pulled |
CI-ISAC Australia
CI-ISAC Australia Ltd
|
1 | |
| GNA-128 Pulled |
bcsec
Bertoldi Cybersecurity
|
1 | |
| GNA-1337 Pulled |
AHA!
Austin Hackers Anonymous
|
19 | |
| GNA-1988 Pulled |
VULNARCHIVE
Vulnerability Disclosure Archive
|
556 | |
| GNA-0 |
CVE
CVE ProgramThis GCVE GNA ID is used as a prefix and MUST be followed by the official CVE ID.
|
— | |
| GNA-2 |
EUVD
European Union Vulnerability Database
|
— | |
| GNA-3 |
Red Hat
redhat
Red Hat Inc.
|
— | |
| GNA-25 |
exim
Exim
Exim Project
|
— | |
| GNA-69 |
CESNET-CERTS
CSIRT of Czech NREN
|
— | |
| GNA-79 |
SWISSCOM
swisscom
Swisscom (Schweiz) AG
|
— | |
| GNA-100 |
VulDB
vuldb
vuldb.com
|
— | |
| GNA-101 |
ERIC
Ericsson
Ericsson AB
|
— | |
| GNA-102 |
EACG
Enterprise Architecture Consulting Group
|
— | |
| GNA-103 |
SCHUTZWERK
SCHUTZWERK
SCHUTZWERK GmbH
|
— | |
| GNA-104 |
AboutCode.org
aboutcode-org
AboutCode Europe ASBL
|
— | |
| GNA-105 |
OPC
OPC Foundation
|
— | |
| GNA-106 |
SK-CERT
National Cyber Security Centre SK-CERT
|
— | |
| GNA-107 |
THA-PSIRT
thalesgroup
Thales PSIRT
|
— | |
| GNA-108 |
Securin
Securin Inc
|
— | |
| GNA-109 |
concinnity-risks
Concinnity Risks LLC
|
— | |
| GNA-110 |
VVD
Vulnetix Vulnerability Database
|
— | |
| GNA-111 |
MOGWAILABS
MOGWAI LABS GmbH
|
— | |
| GNA-112 |
CERT-QC
Ministère de la Cybersécurité et du Numérique – CERT-QC
|
— | |
| GNA-113 |
Krones
Krones AG
|
— | |
| GNA-114 |
siemens
siemens
Siemens
|
— | |
| GNA-116 |
FLAT
Fluid Attacks
|
— | |
| GNA-117 |
Moksha
Moksha
|
— | |
| GNA-118 |
Nozomi Networks
nozominetworks
Nozomi Networks, Inc.
|
— | |
| GNA-119 |
olearysec
olearysec.com Security Research
|
— | |
| GNA-120 |
eef
Erlang Ecosystem Foundation
|
— | |
| GNA-121 |
Passbolt
Passbolt SA
|
— | |
| GNA-122 |
OneSpan
OneSpan Inc.
|
— | |
| GNA-124 |
SUSE
suse
SUSE Software Solutions Germany GmbH
|
— | |
| GNA-125 |
Postiz
gitroomhq
Postiz
|
— | |
| GNA-126 |
cvdportal
CVD Portal
|
— | |
| GNA-127 |
HackRTU
HackRTU
|
— | |
| GNA-129 |
Edgewatch
Occentus Network SL
|
— | |
| GNA-130 |
autovuln.ai
autovuln.ai
|
— | |
| GNA-404 |
VulnCheck
VulnCheck Inc.
|
— | |
| GNA-680 |
DFN-CERT
DFN-CERT Services GmbH
|
— | |
| GNA-1291 |
NCSC-CH
National Cyber Security Centre (NCSC) - Switzerland
|
— | |
| GNA-2342 |
Pentagrid
Pentagrid AG
|
— | |
| GNA-31337 |
Talos
Cisco Talos
|
— | |
| GNA-65530 |
GCVE-CVE-Extension
GNA Dedicated to CVE Extension and Proposal - ID must be aligned with CVE ID reference
|
— | |
| GNA-65535 |
TEST-GNA-GCVE
GNA id used for testing onlyThis GNA ID is reserved for testing purposes. It may appear in publications generated by instances testing the publication process; however, any content produced using this GNA ID MUST NOT be considered valid.
|
— |
Latest records imported from the sources outside the CVE and GCVE programs — GitHub advisories, PyPI, OSV ecosystems, national databases, CSAF providers… — grouped as the recent vulnerabilities page lists them. The CVE Program mirrors are covered per root in the CNA Roots tab, the GNA feeds in the GNAs tab.
No source matches this filter.
Community & Open Source Databases
5 sources
GitHub 🐙
GitHub Advisory Database.-
GHSA-Q5QG-VG83-P5Q8 2026-11-10
-
GHSA-HJVW-F7FG-X3R9 2026-11-10
-
GHSA-VFPW-MFGH-FQWF 2026-11-10
-
GHSA-V72H-HRR9-X9CW 2026-11-10
-
GHSA-R95J-PFRC-8837 2026-11-10
PySec 🐍
Advisory database for Python packages published on pypi.org.-
PYSEC-2026-4349 2026-10-26
-
PYSEC-2026-4348 2026-10-26
-
PYSEC-2026-4347 2026-10-26
-
PYSEC-2026-4346 2026-10-26
-
PYSEC-2026-4345 2026-10-26
GSD
Global Security Database of the Cloud Security Alliance (archived).-
GSD-2024-33884 2024-04-29
-
GSD-2024-33901 2024-04-29
-
GSD-2024-33887 2024-04-29
-
GSD-2024-33895 2024-04-29
-
GSD-2024-33894 2024-04-29
OpenSSF Malicious Packages ☠
OpenSSF database of reports about malicious open source packages.-
MAL-2026-17440 2026-11-10
-
MAL-2026-19074 2026-11-10
-
MAL-2026-19058 2026-11-10
-
MAL-2026-19065 2026-11-10
-
MAL-2026-19066 2026-11-10
-
MOKSHA-2026-0089 2026-04-24Raw kbps Value Exposure in Private Xenstore via VIF.qos_algorithm_params
-
MOKSHA-2026-0088 2026-04-24Int64 Overflow in bytes_per_interval via VIF.qos_algorithm_params
-
MOKSHA-2026-0087 2026-04-24QEMU Device Model Selection via VM.platform device-model (Limited by …
-
MOKSHA-2026-0086 2026-04-24License Expiry Manipulation via Host.license_params expiry
-
MOKSHA-2026-0085 2026-04-24Feature Restriction Bypass via Host.license_params restrict_* Keys
National Vulnerability Databases
5 sources
CERT FR Alerte 🇫🇷
French national and governmental CERT.-
CERTFR-2026-ALE-015 2026-11-05
-
CERTFR-2026-ALE-014 2026-10-21
-
CERTFR-2026-ALE-013 2026-10-14
-
CERTFR-2026-ALE-012 2026-10-12
-
CERTFR-2026-ALE-011 2026-09-28
CERT FR Avis 🇫🇷
French national and governmental CERT.-
CERTFR-2026-AVI-1486 2026-11-09
-
CERTFR-2026-AVI-1485 2026-11-09
-
CERTFR-2026-AVI-1484 2026-11-09
-
CERTFR-2026-AVI-1483 2026-11-09
-
CERTFR-2026-AVI-1482 2026-11-09
JVNDB 🇯🇵
The database of vulnerability countermeasure information published on JVN.-
JVNDB-2026-042611 2026-11-10
-
JVNDB-2026-042610 2026-11-10
-
JVNDB-2026-000169 2026-11-09
-
JVNDB-2026-000163 2026-11-09
-
JVNDB-2026-000168 2026-11-09
CNVD 🇨🇳
China National Vulnerability Database.-
CNVD-2026-44652 2026-11-06
-
CNVD-2026-44110 2026-11-04
-
CNVD-2026-44038 2026-11-03
-
CNVD-2026-44041 2026-11-02
-
CNVD-2026-44040 2026-11-02
FSTEC 🇷🇺
Federal Service for Technical and Export Control of Russia.-
BDU:2026-18644 2026-11-09
-
BDU:2026-18643 2026-11-09
-
BDU:2026-18642 2026-11-09
-
BDU:2026-18641 2026-11-09
-
BDU:2026-18640 2026-11-09
CSAF Databases
52 sources
CSAF ABB
ABB cyber security advisories in CSAF format.-
SA26P003 2026-11-09OpenSSL Vulnerabilities in B&R products
-
4TLB000837 2026-11-06IPEC Standalone iSM PHP2Shell and NTFS-3G Vulnerabilities
-
4JNO000550-1189 2026-11-04Node2Shell Vulnerability for Advanced Batch Management
-
2NGA003256 2026-10-30Netcontrol 100, 200, 500, GW502-iM, NAM PHP2Shell Critical Vulnerabilities
-
2NGA003224 2026-10-30PHP2Shell Critical Vulnerabilities
CSAF CERT-Bund 🇩🇪
Advisories of the German federal CERT (BSI CERT-Bund) in CSAF format.-
WID-SEC-W-2026-4449 2026-11-09Shibboleth Identity Provider: Schwachstelle ermöglicht Cross-Site Scripting
-
WID-SEC-W-2026-4448 2026-11-097-Zip: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
-
WID-SEC-W-2026-4447 2026-11-09Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting
-
WID-SEC-W-2026-4446 2026-11-09Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
-
WID-SEC-W-2026-4445 2026-11-09Contao: Schwachstelle ermöglicht Offenlegung von Informationen
CSAF CISA 🇺🇸
CISA ICS advisories in CSAF format.-
ICSA-26-307-01 2026-11-03Subnet Solutions PowerSYSTEM Center
-
ICSA-26-300-01 2026-10-27EPICS Base
-
ICSA-26-302-03 2026-10-27Hitachi Energy CoreTec Product
-
ICSA-26-302-02 2026-10-27Hitachi Energy TRO600 series products
-
ICSA-26-302-01 2026-10-26Siemens Mendix SAML Module
CSAF CISCO
Cisco PSIRT security advisories in CSAF format.-
CISCO-SA-ISE-CERT-ME9BD5GO 2026-11-04Cisco Identity Services Engine Authorization Bypass Vulnerability
-
CISCO-SA-CUCS-RCE-LZHSFRDQ 2026-11-04Cisco UCS Central Software Remote Code Execution Vulnerability
-
CISCO-SA-CUCM-XSS-5MQN2U5Z 2026-11-04Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
-
CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75 2026-10-28Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall…
-
CISCO-SA-NOTICE-I8Z3N6LK 2026-10-28Cisco Advance Notification for Publication of November 4, 2026, Secur…
CSAF Microsoft 🪟
Microsoft Security Response Center advisories in CSAF format.-
MSRC_CVE-2022-29048 2026-11-10A cross-site request forgery (CSRF) vulnerability in Jenkins Subversi…
-
MSRC_CVE-2022-29046 2026-11-10Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name…
-
MSRC_CVE-2020-2111 2026-11-10Jenkins Subversion Plugin 2.13.0 and earlier does not escape the erro…
-
MSRC_CVE-2018-1000111 2026-11-10An improper authorization vulnerability exists in Jenkins Subversion …
-
MSRC_CVE-2026-19552 2026-11-10ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but…
CSAF NCSC-NL 🇳🇱
Advisories of the Dutch National Cyber Security Centre (NCSC-NL) in CSAF format.-
NCSC-2026-0471 2026-11-09Kwetsbaarheden verholpen in SonicOS van SonicWall
-
NCSC-2026-0470 2026-11-06Kwetsbaarheid verholpen in Windows Paint van Microsoft
-
NCSC-2026-0469 2026-11-06Kwetsbaarheid verholpen in OpenSSH door OpenSSH Project
-
NCSC-2026-0468 2026-11-05Kwetsbaarheid verholpen in Zyxel product
-
NCSC-2026-0467 2026-11-05Kwetsbaarheden verholpen in Google Android en Samsung Mobile
CSAF Nozomi Networks
Nozomi Networks security advisories in CSAF format.-
NN-2026:22-01 2026-10-29Authenticated RCE in update functionality in Guardian/CMC before 26.4.0
-
NN-2026:21-01 2026-10-29Update bundle signature bypass in Guardian/CMC before 26.4.0
-
NN-2026:20-01 2026-09-08Disabled and non-configurable certificate/host key validation in Smar…
-
NN-2026:19-01 2026-09-08Incorrect authorization in Credentials Manager in Guardian/CMC before…
-
NN-2026:18-01 2026-09-08Cross-site request forgery in the Guardian/CMC login before 26.3.0
CSAF OpenSuse 🦎
openSUSE security advisories in CSAF format.-
OPENSUSE-SU-2026:12479-1 2026-11-06syft-1.56.0-1.1 on GA media
-
OPENSUSE-SU-2026:12478-1 2026-11-06skopeo-1.24.0-2.1 on GA media
-
OPENSUSE-SU-2026:12477-1 2026-11-06python316-3.16.0~a1-1.1 on GA media
-
OPENSUSE-SU-2026:12476-1 2026-11-06python313-mistune-3.4.0-3.1 on GA media
-
OPENSUSE-SU-2026:12475-1 2026-11-06python313-mcp-1.30.0-1.1 on GA media
CSAF Open-Xchange
Open-Xchange security advisories in CSAF format.-
OXDC-ADV-2026-0002 2026-05-05OX Dovecot Security Advisory OXDC-ADV-2026-0002
-
OXDC-ADV-2026-0001 2026-03-27OX Dovecot Security Advisory OXDC-ADV-2026-0001
-
OXDC-ADV-2025-0001 2025-10-31OX Dovecot Pro Security Advisory OXDC-ADV-2025-0001
-
OXAS-ADV-2025-0003 2025-09-23OX App Suite Security Advisory OXAS-ADV-2025-0003
-
OXAS-ADV-2025-0002 2025-08-11OX App Suite Security Advisory OXAS-ADV-2025-0002
CSAF Red Hat 🎩
Red Hat Product Security advisories in CSAF format.-
RHSA-2026:97121 2026-11-10Red Hat Security Advisory: unbound security, bug fix, and enhancement…
-
RHSA-2026:97090 2026-11-10Red Hat Security Advisory: subscription-manager-cockpit security update
-
RHSA-2026:97040 2026-11-10Red Hat Security Advisory: kernel security, bug fix, and enhancement update
-
RHSA-2026:97077 2026-11-10Red Hat Security Advisory: sssd security, bug fix, and enhancement update
-
RHSA-2026:96228 2026-11-09Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.6 release and…
CSAF Schneider Electric
Schneider Electric security notifications in CSAF format.-
SEVD-2026-314-01 2026-11-10Use After Free vulnerability on EcoStruxure™ Power Build Rapsody
-
SEVD-2026-286-02 2026-10-13SAGE RTU
-
SEVD-2026-286-01 2026-10-13Use of Unmaintained Third-Party Components vulnerability on Pro-face …
-
SEVD-2026-251-04 2026-09-08Incorrect Implementation of Authentication Algorithm vulnerability on…
-
SEVD-2026-251-02 2026-09-08Improper Neutralization of Special Elements used in an OS Command vul…
CSAF Sick
SICK PSIRT security advisories in CSAF format.-
SCA-2026-0017 2026-11-06SICK Products affected by Brotli Vulnerability (Broccoli2Shell)
-
SCA-2026-0016 2026-10-16Vulnerabilities Affecting SICK CorivaHub
-
SCA-2026-0015 2026-10-15Vulnerability Affecting Sick_Safetyscanners_Base CPP Driver
-
SCA-2026-0014 2026-10-14Fast-xml-parser vulnerabilities affect Sentio Creator Extension 'Devi…
-
SCA-2026-0013 2026-09-11Vulnerabilities Affecting SICK CorivaEngine
CSAF Siemens
Siemens ProductCERT security advisories in CSAF format.-
SSA-979641 2026-11-10SSA-979641: Implicit Execution of Active Content when Opening Files V…
-
SSA-970803 2026-11-10SSA-970803: Insecure User Authentication in SIMATIC SCADA and PCS 7 systems
-
SSA-724261 2026-11-10SSA-724261: Command Injection Vulnerability in meta-iot2050
-
SSA-710379 2026-11-10SSA-710379: Multiple Vulnerabilities in Mendix Studio Pro's MCP Server
-
SSA-678870 2026-11-10SSA-678870: Node2Shell/Broccoli2Shell Vulnerabilities in Siemens Soft…
CSAF Suse 🦎
SUSE security advisories in CSAF format.-
SUSE-SU-2026:5127-1 2026-11-06Security update for flatpak
-
SUSE-SU-2026:5126-1 2026-11-06Security update for mozilla-nss
-
SUSE-SU-2026:5123-1 2026-11-05Security update for cpupower
-
SUSE-SU-2026:5121-1 2026-11-05Security update for the Linux Kernel
-
SUSE-SU-2026:5118-1 2026-11-05Security update for bind
CERT@VDE
Advisories coordinated by CERT@VDE for industrial automation vendors, in CSAF format.-
VDE-2025-028 2025-08-05Draeger: ICMHelper is vulnerable to a privilege escalation
-
VDE-2019-012 2019-06-04TECSON/GOK: Improper Authentication and Access Control on multiple devices
-
VDE-2026-098 2026-11-04Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in Licens…
-
VDE-2026-084 2026-11-04Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in Licens…
-
VDE-2026-121 2026-11-04Phoenix Contact: GSDX SignatureValue verification, signed plug-in val…
-
VDE-2026-027 2026-09-16Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 …
-
VDE-2025-056 2026-08-12Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext…
-
VDE-2026-119 2026-11-03Welotec: Multiple vulnerabilities in TK routers
-
VDE-2026-127 2026-10-29Welotec: PHP2Shell Vulnerabilities in SMART EMS
-
VDE-2025-085 2025-09-10Welotec: Path Traversal in SmartEMS Upload Handling
-
VDE-2025-076 2025-08-26Welotec: Hard-coded JWT secret in egOS WebGUI
-
VDE-2024-043 2024-08-22Welotec: Multiple products are vulnerable to regreSSHion
-
ADVISORY2026-12_VDE-2026-097 2026-09-30CODESYS Control Runtime - Improper Synchronization in Monitoring
-
ADVISORY2026-06_VDE-2026-041 2026-07-29CODESYS PROFINET Controller - Out-of-bounds Write
-
ADVISORY2026-04_VDE-2026-040 2026-07-13CODESYS EtherNetIP - Improper timeout handling
-
ADVISORY2026-10_VDE-2026-057 2026-05-26CODESYS Control - Out-of-bounds Write
-
ADVISORY2026-09_VDE-2026-055 2026-05-26CODESYS Development System - Incorrect Default Permissions
-
VDE-2025-067 2025-08-10Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
-
VDE-2025-024 2025-05-13Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2025-032 2025-05-06Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site…
-
VDE-2025-031 2025-04-28Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2024-018 2024-02-28Wiesemann & Theis: Multiple products prone to unquoted search path
-
VDE-2026-128 2026-11-10MB connect line: php2shell in mbCONNECT24/mymbCONNECT24
-
VDE-2026-079 2026-11-10MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-068 2026-06-23MB connect line: Authenticated unintended access to critical program …
-
VDE-2026-054 2026-05-27MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini
-
VDE-2026-044 2026-05-27MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-160 2026-11-10Helmholz: php2shell in myREX24V2/myREX24V2.virtual
-
VDE-2026-141 2026-11-10Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual
-
VDE-2026-070 2026-06-23Helmholz: Authenticated unintended access to critical program paramet…
-
VDE-2026-059 2026-05-27Helmholz: Multiple vulnerabilities in REX100/REX200/REX250
-
VDE-2026-058 2026-05-21Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
-
FSA-202603 2026-11-02Two critical PHP vulnerabilities in several Festo Didactic products
-
FSA-202602 2026-10-20Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE
-
FSA-202601 2026-02-26Several CODESYS vulnerabilities in Festo Automation Suite
-
FSA-202406 2024-12-03Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo
-
FSA-202405 2024-09-09Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products co…
-
VDE-2026-014 2026-09-16Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vu…
-
VDE-2025-011 2025-05-26PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by …
-
VDE-2025-002 2025-02-25PEPPERL+FUCHS: HMI – devices are affected by Windows RCE
-
VDE-2024-065 2024-11-26PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key
-
VDE-2024-063 2024-10-08PEPPERL+FUCHS: Multiple products are affected by regreSSHion
-
PPSA-2026-005 2026-10-20Pilz: Vulnerabilities in 'PiCtory' and 'RevPiPyLoad' for Industrial P…
-
PPSA-2026-004 2026-10-20Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC …
-
PPSA-2026-003 2026-08-04Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI
-
PPSA-2026-002 2026-04-23Pilz: Vulnerability affecting PASvisu Runtime
-
PPSA-2026-001 2026-02-02Pilz: Multiple Vulnerabilities affecting the PIT User Authentication …
-
VDE-2025-081 2026-11-06WAGO: Multiple PLCs and Communication Components are Affected by mult…
-
VDE-2026-102 2026-11-04WAGO: Unauthorized Account Access via Credential Recovery Process
-
VDE-2026-132 2026-11-02WAGO: Multiple Devices affected by PHP2Shell
-
VDE-2025-102 2026-10-01WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack
-
VDE-2026-031 2026-07-13WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices
-
VDE-2026-005 2026-05-06ifm: Multiple Vulnerabilities in CR3171
-
VDE-2024-061 2025-06-30ifm: Improper Access Control vulnerability
-
VDE-2024-012 2024-07-09ifm: Vulnerabilities in ifm AC14 firmware
-
VDE-2024-028 2024-05-06ifm moneo password reset can be exploited
-
VDE-2022-050 2022-12-12IFM: weak password recovery vulnerability in moneo appliance
-
VDE-2025-092 2026-01-27Beckhoff: Privilege escalation and information leak via Beckhoff Devi…
-
VDE-2025-106 2026-01-26Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
-
VDE-2025-075 2025-09-09Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
-
VDE-2024-064 2024-10-31Beckhoff: Local command injection via TwinCAT Package Manager
-
VDE-2021-008 2024-10-21Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products
-
VDE-2026-091 2026-09-15TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
-
VDE-2026-007 2026-02-23TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability
-
VDE-2025-078 2025-08-25TRUMPF: Remote support uses an outdated encryption algorithm
-
VDE-2024-004 2025-04-22TRUMPF: Multiple products affected by log4net vulnerability
-
VDE-2024-040 2024-06-25Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerab…
-
VDE-2026-089 2026-09-21Lenze: VPN Client Remote Code Execution in combination with Lenze x50…
-
VDE-2026-077 2026-07-27Lenze: Incorrect signature validation in the enable SSH routine
-
VDE-2025-043 2025-06-25Lenze: PLC Designer V4 with insecure storage of sensitive information
-
VDE-2025-042 2025-05-27Lenze: VPN Client Privilege Escalation in combination with Lenze x500…
-
VDE-2024-053 2024-09-03Lenze: Install Directory with insufficient permissions
-
VDE-2026-028 2026-09-16Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple …
-
VDE-2022-029 2022-09-26Carlo Gavazzi Controls: Multiple Vulnerabilities in Controller UWP 3.0
-
VDE-2025-047 2025-06-10AUMA: Incorrect delivery status of the Bluetooth configuration
-
VDE-2025-026 2025-05-12AUMA Riester: Buffer overflow in service telegram
-
VDE-2023-028 2023-08-07AUMA: SIMA Master Station affected by WRECK vulnerability
-
VDE-2023-027 2023-08-07AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations
-
VDE-2022-032 2022-08-09AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service
-
VDE-2026-143 2026-11-10Bender EDGE500IP Vulnerabilities - Linux Kernel (TLS and AF_ALG)
-
VDE-2026-109 2026-10-13Bender Customer&Partner Platform Vulnerability - Privilege Escalation
-
VDE-2025-084 2025-09-08Bender Charge Controller Vulnerability - Unsecure Communication
-
VDE-2025-061 2025-09-08Bender Charge Controller Vulnerability - Disclosure Of Stored Credent…
-
VDE-2021-047 2022-04-26Bender/ebee: Multiple Charge Controller Vulnerabilities
-
VDE-2026-065 2026-08-03Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package…
-
VDE-2026-045 2026-07-16Endress+Hauser: Multiple products affected by SopasET interface vulne…
-
VDE-2026-032 2026-04-21Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW
-
VDE-2026-003 2026-03-31Endress+Hauser: Multiple products prone to multiple vulnerabilities i…
-
VDE-2026-002 2026-03-02Endress+Hauser: buffer overflow in glibc ld.so leading to privilege e…
-
VDE-2026-078 2026-08-20Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities
-
VDE-2025-030 2025-07-07Frauscher: FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi are Vulnerab…
-
VDE-2023-049 2023-12-11Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
-
VDE-2023-038 2023-09-21Frauscher: Multiple Vulnerabilities in FDS101
-
VDE-2023-011 2023-07-05Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vul…
-
VDE-2022-052 2022-11-21Miele: Vulnerability in ease2pay cloud service used by appWash
-
VDE-2022-015 2022-04-27Miele: Security vulnerability in Benchmark Programming Tool
-
VDE-2020-024 2020-07-08Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communicatio…
-
VDE-2019-010 2019-05-20Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway
-
VDE-2026-152 2026-11-10Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT affected by PHP…
-
VDE-2026-083 2026-08-25Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are af…
-
VDE-2026-085 2026-07-28Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA
-
VDE-2026-081 2026-07-28Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by…
-
VDE-2025-096 2026-03-10Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Ener…
-
VDE-2025-066 2025-08-27SMA: Directory Traversal in Sunny Boy
-
VDE-2025-050 2025-08-19SMA: Sunny Portal limited disclosure of personal data of registered u…
-
VDE-2025-010 2025-05-13SMA: Sunny Portal demo system privilege escalation
-
VDE-2025-012 2025-02-26SMA: Sunny Portal Remote Code Execution
-
VDE-2024-075 2025-01-27SMA: Sunny Webbox clickjacking vulnerability
-
VDE-2024-013 2024-02-13HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing
-
VDE-2022-059 2023-01-16HIMA: unquoted path vulnerabilities in X-OPC and X-OTS
-
VDE-2026-108 2026-10-06Murrelektronik: Missing Authentication in aas-edge-client Reference I…
-
VDE-2026-061 2026-08-24Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' functio…
-
VDE-2026-063 2026-07-14Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS
-
VDE-2026-062 2026-07-14Several Murrelektronik Devices use Default SNMP Community Names
-
VDE-2025-091 2025-10-14Murrelektronik: Cleartext Transmission of Sensitive Information in IM…
-
VDE-2020-016 2020-05-28SWARCO: Critical Vulnerability in CPU LS4000
-
VDE-2026-131 2026-11-10ads-tec Industrial IT: PHP Vulnerability in ADS-TEC IRF Products and …
-
VDE-2026-076 2026-07-28ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products
-
VDE-2025-033 2025-04-14ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC…
-
VDE-2024-016 2024-02-19ADS-TEC Industrial IT: Docker vulnerability affects multiple products
-
VDE-2023-009 2023-05-08ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000
-
VDE-2022-061 2023-03-15VARTA: Multiple devices prone to hard-coded credentials
-
VDE-2026-093 2026-09-01SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mec…
-
VDE-2025-060 2025-10-21Sauter: Multiple vulnerabilities in SAUTER modulo 6
-
VDE-2025-079 2026-03-10Janitza: Multiple vulnerabilities in UMG 96RM-E
-
VDE-2025-094 2025-11-24Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+
-
VDE-2026-137 2026-10-28METTLER TOLEDO: PHP2Shell in Octo Image Server
-
VDE-2026-112 2026-10-20METTLER TOLEDO: STARe Software DB2 vulnerable component
-
VDE-2026-088 2026-08-20METTLER TOLEDO: LabX Standard and Enterprise Report on External Compo…
-
VDE-2026-066 2026-07-14METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
-
VDE-2026-064 2026-06-09METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3
TIBCO
TIBCO security advisories in CSAF format.-
TIBCO-2023-454 2023-05-23TIBCO Security Advisory TIBCO-2023-454
-
TIBCO-2023-453 2023-05-23TIBCO Security Advisory TIBCO-2023-453
-
TIBCO-2023-460 2023-04-18TIBCO Security Advisory TIBCO-2023-460
-
TIBCO-2023-450 2023-02-22TIBCO Security Advisory TIBCO-2023-450
-
TIBCO-2023-446 2023-02-22TIBCO Security Advisory TIBCO-2023-446
Trend Micro
Trend Micro security bulletins in CSAF format.-
2026-0521-TM-A1-001 2026-05-21ITW SECURITY BULLETIN: Apex One and Vision One and Standard Endpoint …
-
2025-0805-TM-A1-002 2025-08-05ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One (On-Premise) Man…
-
2025-0627-TM-WF-001 2025-06-27SECURITY BULLETIN: June 2025 for Trend Micro Worry-Free Business Secu…
-
2025-0610-TM-TMEE-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Endpoint Encryption PolicySer…
-
2025-0610-TM-AC-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Apex Central (June 2025)
-
VDE-2026-048 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Blueto…
-
VDE-2026-047 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Air products
-
VDE-2026-046 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS two- a…
-
VDE-2026-016 2026-04-22VEGA: Unsecured Configuration Interface Allows Unauthorized Access Le…
-
HBSA-2025-0003 2026-02-18JBL: DoS vulnerability in Flip 4
-
HBSA-2025-0002 2025-12-10BLE ICM Vulnerability in JBL Headphones
-
HBSA-2025-0001 2025-12-10BLE GATT Service Vulnerability in JBL Headphones
-
VDE-2026-071 2026-06-23JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON …
-
VDE-2026-009 2026-05-26JUMO: Multiple products affected by nodejs vulnerability
-
VDE-2025-086 2025-11-10Jumo: Predictable debug-interface password in variTRON series
-
VDE-2025-098 2026-04-02Baade M2M-Products GmbH: ubusd heap buffer overflow vulnerability in …
-
VDE-2025-097 2025-11-18METZ CONNECT: Config API – Authentication bypass leads to admin takeo…
OSV Sources
13 sources
OSV AlmaLinux
AlmaLinux security advisories in OSV format.-
ALSA-2026:96236 2026-11-09
-
ALSA-2026:96235 2026-11-09
-
ALSA-2026:96234 2026-11-09
-
ALSA-2026:96233 2026-11-09
-
ALSA-2026:96215 2026-11-09
OSV BellSoft
BellSoft advisories for Alpaquita Linux and its hardened containers, in OSV format.-
BELL-CVE-2026-115539 2026-11-09
-
BELL-CVE-2026-115538 2026-11-09
-
BELL-CVE-2026-99280 2026-11-09
-
BELL-CVE-2026-99279 2026-11-09
-
BELL-CVE-2026-99278 2026-11-09
OSV Haskell λ
Haskell Security Advisory Database (HSEC) in OSV format.-
HSEC-2026-0013 2026-11-04
-
HSEC-2026-0012 2026-11-03
-
HSEC-2026-0011 2026-11-03
-
HSEC-2026-0010 2026-09-29
-
HSEC-2026-0008 2026-06-03
OSV Homebrew 🍺
OSV records for Homebrew formulae patched against known vulnerabilities.-
BREW-JUPYTERLAB-CVE-2026-6658 2026-11-09
-
BREW-GAM-CVE-2026-112941 2026-11-09
-
BREW-GAM-CVE-2026-112940 2026-11-09
-
BREW-GAM-CVE-2026-112939 2026-11-09
-
BREW-GAM-CVE-2026-112938 2026-11-09
OSV Ocaml 🐫
OCaml security advisories in OSV format.-
OSEC-2026-28 2026-11-06
-
OSEC-2026-30 2026-11-06
-
OSEC-2026-26 2026-10-23
-
OSEC-2026-25 2026-10-23
-
OSEC-2026-24 2026-10-23
OSV openEuler
openEuler security advisories (OESA) in OSV format.-
OESA-2026-4737 2026-11-04
-
OESA-2026-4736 2026-11-04
-
OESA-2026-4735 2026-11-04
-
OESA-2026-4734 2026-11-04
-
OESA-2026-4733 2026-11-04
OSV OSS Fuzz 🧪
Vulnerabilities found by Google OSS-Fuzz, in OSV format.-
OSV-2026-1517 2026-11-10
-
OSV-2026-1511 2026-11-08
-
OSV-2026-1481 2026-11-02
-
OSV-2026-1440 2026-10-24
-
OSV-2026-1437 2026-10-23
OSV Rocky Linux
Rocky Linux security advisories in OSV format, served by the Apollo API.-
RLSA-2026:96250 2026-11-10
-
RLSA-2026:96240 2026-11-10
-
RLSA-2026:96236 2026-11-10
-
RLSA-2026:96235 2026-11-10
-
RLSA-2026:96233 2026-11-10
OSV Rustsec 🦀
RustSec advisory database for Rust crates.-
RUSTSEC-2026-0470 2026-11-09
-
RUSTSEC-2026-0469 2026-11-09
-
RUSTSEC-2026-0465 2026-11-09
-
RUSTSEC-2026-0464 2026-11-09
-
RUSTSEC-2026-0472 2026-11-06
OSV Ubuntu
Ubuntu security notices and CVE records in OSV format.-
USN-9013-1 2026-11-09
-
USN-9011-1 2026-11-09
-
USN-9009-1 2026-11-09
-
USN-9010-1 2026-11-09
-
USN-9008-1 2026-11-09
Bitnami VulnDB
Bitnami vulnerability database for the applications it packages.-
BIT-PYTHON-2026-115557 2026-10-30
-
BIT-PARSE-2026-116165 2026-10-30
-
BIT-PARSE-2026-116164 2026-10-30
-
BIT-PARSE-2026-116163 2026-10-30
-
BIT-PARSE-2026-116162 2026-10-30
-
CLEANSTART-2026-SR18256 2026-11-08
-
CLEANSTART-2026-OV16973 2026-11-08
-
CLEANSTART-2026-OV48766 2026-11-08
-
CLEANSTART-2026-AF91249 2026-11-08
-
CLEANSTART-2026-NW07068 2026-11-08
Drupal 💧
Drupal core and contributed project security advisories.-
DRUPAL-CONTRIB-2026-315 2026-11-04
-
DRUPAL-CONTRIB-2026-314 2026-11-04
-
DRUPAL-CONTRIB-2026-313 2026-11-04
-
DRUPAL-CONTRIB-2026-312 2026-11-04
-
DRUPAL-CONTRIB-2026-311 2026-11-04
Specialized Sources
3 sources
Tailscale
Tailscale security bulletins.-
TS-2026-017 2026-10-26
-
TS-2026-016 2026-10-26
-
TS-2026-015 2026-10-26
-
TS-2026-014 2026-10-26
-
TS-2026-013 2026-10-21
AVID 🤖
AI Vulnerability Database of failure reports for AI/ML systems.-
AVID-2023-V028 2023-03-31
-
AVID-2023-V027 2023-03-31
-
AVID-2023-V026 2023-03-31
-
AVID-2023-V016 2023-03-31
-
AVID-2023-V015 2023-03-31
VARIoT 📡
Vulnerability database focused on vulnerabilities in the Internet of Things (IoT) ecosystem.-
VAR-202407-2188 2024-07-23
-
VAR-202406-3119 2024-07-23
-
VAR-202407-1740 2024-07-23
-
VAR-202407-1417 2024-07-23
-
VAR-202407-1103 2024-07-23