Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
Ghost CVEs
All sightingsA Ghost CVE is a vulnerability identifier that appears in the wild — through GitHub Gists, security advisories, social media, or RSS feeds — yet remains marked as RESERVED or NOT_FOUND in the official CVE registries like NVD and MITRE. Also called "RESERVED BUT PUBLIC" CVEs, these ghosts highlight potential security blind spots where vulnerabilities are discussed publicly before official disclosure. They are detected from the sightings collected from these sources; the most recently sighted come first.
Loading…
No Ghost CVE sighted recently.
| Identifier | Sightings | Sighted by | Last sighted |
|---|
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP chainguard CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust flock Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic HONA Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer RES Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx Westell WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
379 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock Airoha AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Infoblox Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro TuranSec tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-105960 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Le…
-
CVE-2026-110322 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference
-
CVE-2026-103672 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Improper Validation of …
-
CVE-2026-101103 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow
-
CVE-2026-109576 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write
-
CVE-2026-75753 2026-10-20Missing Authentication for a Critical Function in certain ASUS route…
-
CVE-2026-17518 2026-10-20Buffer Copy without Checking Size of Input in certain ASUS router mod…
-
CVE-2026-102438 2026-10-20An uncontrolled search path element vulnerability in ASUS Armoury Cra…
-
CVE-2026-107777 2026-10-16Thermo Fisher Torrent Suite Software Path Traversal
-
CVE-2026-105667 2026-10-16J4Care dcm4che Missing Authentication for Critical Function
-
CVE-2026-112991 2026-10-19MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in…
-
CVE-2026-112192 2026-10-19MISP Module Settings Expose Redacted Values and Allow API Modificatio…
-
CVE-2026-112188 2026-10-19MISP Server Settings Lookup Exposes Sensitive Configuration Data via …
-
CVE-2026-112184 2026-10-19MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parame…
-
CVE-2026-112183 2026-10-19MISP CSS Injection via Remote Tag Colour in Event Preview
-
CVE-2026-112180 2026-10-19MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records
-
CVE-2026-112179 2026-10-19MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances
-
CVE-2026-112178 2026-10-19MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shad…
-
CVE-2026-106030 2026-10-16Missing Authorization in NordVPN for Windows
-
CVE-2026-111458 2026-10-16ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting
-
CVE-2026-105772 2026-10-20Arbitrary file read and write in Google ADK TypeScript (@google/adk) …
-
CVE-2026-85267 2026-10-20Cross-Site WebSocket Hijacking in Google Cloud Shell
-
CVE-2026-103091 2026-10-19Insecure Default Policy and Unrestricted OIDC Enrollment in Google OS…
-
CVE-2026-102503 2026-10-19Missing Authentication on /libp2p-http Ingress in Google OSS Agent Me…
-
CVE-2026-110914 2026-10-15Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 …
-
CVE-2026-110915 2026-10-15Use after free in Compositing in Google Chrome prior to 155.0.8059.84…
-
CVE-2026-110916 2026-10-15Improper input validation in Desktop in Google Chrome prior to 155.0.…
-
CVE-2026-110920 2026-10-15Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allow…
-
CVE-2026-110921 2026-10-15Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed …
-
CVE-2026-110917 2026-10-15Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allo…
-
CVE-2026-105960 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Le…
-
CVE-2026-110322 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference
-
CVE-2026-103672 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Improper Validation of …
-
CVE-2026-101103 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow
-
CVE-2026-109576 2026-10-20HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write
-
CVE-2026-75753 2026-10-20Missing Authentication for a Critical Function in certain ASUS route…
-
CVE-2026-17518 2026-10-20Buffer Copy without Checking Size of Input in certain ASUS router mod…
-
CVE-2026-102438 2026-10-20An uncontrolled search path element vulnerability in ASUS Armoury Cra…
-
CVE-2026-107777 2026-10-16Thermo Fisher Torrent Suite Software Path Traversal
-
CVE-2026-105667 2026-10-16J4Care dcm4che Missing Authentication for Critical Function
-
CVE-2026-11960 2026-10-20Multiple vulnerabilities in FacturaScripts
-
CVE-2026-11959 2026-10-20Multiple vulnerabilities in FacturaScripts
-
CVE-2026-13695 2026-10-19SQL Injection in the Integratec Application
-
CVE-2026-112161 2026-10-19Lack of integrity checks in Mobatek’s MobaXterm
-
CVE-2026-101300 2026-10-16Server-Side Request Forgery in Wegow PDF export
-
CVE-2026-111472 2026-10-16SQL injection in TSG Profleet
-
CVE-2026-104024 2026-10-15Incomplete dangerous-extension list in PeaZip object open allows exec…
-
CVE-2026-104025 2026-10-15Path traversal in PeaZip object preview allows execution of arbitrary…
-
CVE-2026-101287 2026-10-15Authentication bypass in Stela by Diaple Networking
-
CVE-2026-100169 2026-10-14Account pre-hijacking in the Prowler API through email based social a…
-
CVE-2026-112148 2026-10-20A vulnerability has been identified in LIFF SDK versions 2.20.0 throu…
-
CVE-2026-97627 2026-10-20Hidden functionality issue exists in Multiple DVRs (Digital Video Rec…
-
CVE-2026-100737 2026-10-20Hidden functionality issue exists in Multiple DVRs (Digital Video Rec…
-
CVE-2026-109831 2026-10-20UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user …
-
CVE-2026-104679 2026-10-19VOCALOID6 Editor provided by Yamaha Corporation improperly restricts …
-
CVE-2026-16438 2026-10-15An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyp…
-
CVE-2026-16437 2026-10-15An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS…
-
CVE-2026-72528 2026-10-15"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains …
-
CVE-2026-16436 2026-10-15An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS…
-
CVE-2026-75559 2026-10-15The smartphone application "Vehicle Inspection Certificate Viewer" co…
-
CVE-2026-112712 2026-10-20@fastify/middie vulnerable to path-scoped middleware bypass via scope…
-
CVE-2026-112407 2026-10-20Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-a…
-
CVE-2016-20104 2026-10-20EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php
-
CVE-2016-20103 2026-10-20Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php
-
CVE-2016-20102 2026-10-20JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter
-
CVE-2016-20101 2026-10-20Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php
-
CVE-2016-20100 2026-10-20Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via…
-
CVE-2015-20128 2026-10-20FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx
-
CVE-2015-20125 2026-10-20Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_…
-
CVE-2015-20124 2026-10-20Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via …
-
CVE-2026-112712 2026-10-20@fastify/middie vulnerable to path-scoped middleware bypass via scope…
-
CVE-2026-107929 2026-10-20local interface connection reuse mixup
-
CVE-2026-107928 2026-10-20info leak uploading over WebSockets with GnuTLS
-
CVE-2026-94266 2026-10-20password leak in CURLINFO_EFFECTIVE_URL
-
CVE-2026-94265 2026-10-20Authorization: Negotiate sent to foreign origin
-
CVE-2026-92391 2026-10-20curl_mime_free stack overflow by recursion
-
CVE-2026-92390 2026-10-20-J no-clobber guarantee bypassed with 103 early hints
-
CVE-2026-92389 2026-10-20TFTP direction confusion
-
CVE-2026-92388 2026-10-20FTP wildcard write callback mixup
-
CVE-2026-92387 2026-10-20never-ending loop via server response omission
-
CVE-2026-18397 2026-10-01SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability
-
CVE-2026-18825 2026-09-28Origin validation error in the connect-xcors npm package
-
CVE-2026-19614 2026-09-08XML External Entity (XXE) Injection in CyberELF NanoXML
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
GCVE Numbering Authorities (GNAs) allocate vulnerability identifiers in their own namespace, without a central authority. This list is the local, signature-verified copy of the GCVE registry; the cards below cover this instance's own GNA and the feeds it pulls from other GNAs, following GCVE-BCP-03.
46
GNAs registered
3
GNA feeds pulled
465
Publications pulled
318
Published here (GNA-1)
-
GCVE-1-2026-20287 2026-10-19MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in…
-
GCVE-1-2026-20310 2026-10-19MISP Module Settings Expose Redacted Values and Allow API Modificatio…
-
GCVE-1-2026-20327 2026-10-19MISP Server Settings Lookup Exposes Sensitive Configuration Data via …
-
GCVE-1-2026-20332 2026-10-19MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parame…
-
GCVE-1-2026-20339 2026-10-19MISP CSS Injection via Remote Tag Colour in Event Preview
bcsec
GNA-128-
GCVE-128-2026-0001 2026-08-31Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure
AHA!
GNA-1337-
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
-
EnergizeLab Station Middleware Admin APIs Missing Role Checks
-
EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime…
-
EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary…
-
EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
VULNARCHIVE
GNA-1988-
GCVE-1988-2026-0440 2026-10-02SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload i…
-
GCVE-1988-2026-0439 2026-10-02usvg SVGZ decompression bomb in `Tree::from_data`
-
GCVE-1988-2026-0438 2026-10-02[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)
-
GCVE-1988-2026-0437 2026-10-02[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
-
GCVE-1988-2026-0436 2026-10-02[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
GCVE registry
| GNA | Organization | Publications | Services |
|---|---|---|---|
| GNA-1 This instance |
CIRCL
circl
Computer Incident Response Center Luxembourg
|
318 | |
| GNA-128 Pulled |
bcsec
Bertoldi Cybersecurity
|
1 | |
| GNA-1337 Pulled |
AHA!
Austin Hackers Anonymous
|
19 | |
| GNA-1988 Pulled |
VULNARCHIVE
Vulnerability Disclosure Archive
|
445 | |
| GNA-0 |
CVE
CVE ProgramThis GCVE GNA ID is used as a prefix and MUST be followed by the official CVE ID.
|
— | |
| GNA-2 |
EUVD
European Union Vulnerability Database
|
— | |
| GNA-3 |
Red Hat
redhat
Red Hat Inc.
|
— | |
| GNA-25 |
exim
Exim
Exim Project
|
— | |
| GNA-69 |
CESNET-CERTS
CSIRT of Czech NREN
|
— | |
| GNA-79 |
SWISSCOM
swisscom
Swisscom (Schweiz) AG
|
— | |
| GNA-100 |
VulDB
vuldb
vuldb.com
|
— | |
| GNA-101 |
ERIC
Ericsson
Ericsson AB
|
— | |
| GNA-102 |
EACG
Enterprise Architecture Consulting Group
|
— | |
| GNA-103 |
SCHUTZWERK
SCHUTZWERK
SCHUTZWERK GmbH
|
— | |
| GNA-104 |
AboutCode.org
aboutcode-org
AboutCode Europe ASBL
|
— | |
| GNA-105 |
OPC
OPC Foundation
|
— | |
| GNA-106 |
SK-CERT
National Cyber Security Centre SK-CERT
|
— | |
| GNA-107 |
THA-PSIRT
thalesgroup
Thales PSIRT
|
— | |
| GNA-108 |
Securin
Securin Inc
|
— | |
| GNA-109 |
concinnity-risks
Concinnity Risks LLC
|
— | |
| GNA-110 |
VVD
Vulnetix Vulnerability Database
|
— | |
| GNA-111 |
MOGWAILABS
MOGWAI LABS GmbH
|
— | |
| GNA-112 |
CERT-QC
Ministère de la Cybersécurité et du Numérique – CERT-QC
|
— | |
| GNA-113 |
Krones
Krones AG
|
— | |
| GNA-114 |
siemens
siemens
Siemens
|
— | |
| GNA-115 |
Adrian Dacka
syrex1013
Adrian "syrex1013" Dacka
|
— | |
| GNA-116 |
FLAT
Fluid Attacks
|
— | |
| GNA-117 |
Moksha
Moksha
|
— | |
| GNA-118 |
Nozomi Networks
nozominetworks
Nozomi Networks, Inc.
|
— | |
| GNA-119 |
olearysec
olearysec.com Security Research
|
— | |
| GNA-120 |
eef
Erlang Ecosystem Foundation
|
— | |
| GNA-121 |
Passbolt
Passbolt SA
|
— | |
| GNA-122 |
OneSpan
OneSpan Inc.
|
— | |
| GNA-123 |
CI-ISAC Australia
CI-ISAC Australia Ltd
|
— | |
| GNA-124 |
SUSE
suse
SUSE Software Solutions Germany GmbH
|
— | |
| GNA-125 |
Postiz
gitroomhq
Postiz
|
— | |
| GNA-126 |
cvdportal
CVD Portal
|
— | |
| GNA-127 |
HackRTU
HackRTU
|
— | |
| GNA-129 |
Edgewatch
Occentus Network SL
|
— | |
| GNA-404 |
VulnCheck
VulnCheck Inc.
|
— | |
| GNA-680 |
DFN-CERT
DFN-CERT Services GmbH
|
— | |
| GNA-1291 |
NCSC-CH
National Cyber Security Centre (NCSC) - Switzerland
|
— | |
| GNA-2342 |
Pentagrid
Pentagrid AG
|
— | |
| GNA-31337 |
Talos
Cisco Talos
|
— | |
| GNA-65530 |
GCVE-CVE-Extension
GNA Dedicated to CVE Extension and Proposal - ID must be aligned with CVE ID reference
|
— | |
| GNA-65535 |
TEST-GNA-GCVE
GNA id used for testing onlyThis GNA ID is reserved for testing purposes. It may appear in publications generated by instances testing the publication process; however, any content produced using this GNA ID MUST NOT be considered valid.
|
— |
Latest records imported from the sources outside the CVE and GCVE programs — GitHub advisories, PyPI, OSV ecosystems, national databases, CSAF providers… — grouped as the recent vulnerabilities page lists them. The CVE Program mirrors are covered per root in the CNA Roots tab, the GNA feeds in the GNAs tab.
No source matches this filter.
Community & Open Source Databases
5 sources
GitHub 🐙
GitHub Advisory Database.-
GHSA-58R4-6RV3-GFH8 2026-10-20
-
GHSA-65QM-JVMH-6PQG 2026-10-20
-
GHSA-VX6W-VV9F-6GVG 2026-10-20
-
GHSA-Q45J-58J2-45RG 2026-10-20
-
GHSA-PCHR-8J38-3X4P 2026-10-20
PySec 🐍
Advisory database for Python packages published on pypi.org.-
PYSEC-2026-4200 2026-10-15
-
PYSEC-2026-4300 2026-10-15
-
PYSEC-2026-4246 2026-10-15
-
PYSEC-2026-4292 2026-10-15
-
PYSEC-2026-4293 2026-10-15
GSD
Global Security Database of the Cloud Security Alliance (archived).-
GSD-2024-33884 2024-04-29
-
GSD-2024-33901 2024-04-29
-
GSD-2024-33887 2024-04-29
-
GSD-2024-33895 2024-04-29
-
GSD-2024-33894 2024-04-29
OpenSSF Malicious Packages ☠
OpenSSF database of reports about malicious open source packages.-
MAL-2026-18108 2026-10-20
-
MAL-2026-18105 2026-10-20
-
MAL-2026-18109 2026-10-20
-
MAL-2026-18106 2026-10-20
-
MAL-2026-18104 2026-10-20
-
MOKSHA-2026-0089 2026-04-24Raw kbps Value Exposure in Private Xenstore via VIF.qos_algorithm_params
-
MOKSHA-2026-0088 2026-04-24Int64 Overflow in bytes_per_interval via VIF.qos_algorithm_params
-
MOKSHA-2026-0087 2026-04-24QEMU Device Model Selection via VM.platform device-model (Limited by …
-
MOKSHA-2026-0086 2026-04-24License Expiry Manipulation via Host.license_params expiry
-
MOKSHA-2026-0085 2026-04-24Feature Restriction Bypass via Host.license_params restrict_* Keys
National Vulnerability Databases
5 sources
CERT FR Alerte 🇫🇷
French national and governmental CERT.-
CERTFR-2026-ALE-013 2026-10-14
-
CERTFR-2026-ALE-012 2026-10-12
-
CERTFR-2026-ALE-011 2026-09-28
-
CERTFR-2026-ALE-010 2026-09-10
-
CERTFR-2026-ALE-009 2026-09-02
CERT FR Avis 🇫🇷
French national and governmental CERT.-
CERTFR-2026-AVI-1344 2026-10-20
-
CERTFR-2026-AVI-1343 2026-10-20
-
CERTFR-2026-AVI-1342 2026-10-19
-
CERTFR-2026-AVI-1341 2026-10-19
-
CERTFR-2026-AVI-1340 2026-10-19
JVNDB 🇯🇵
The database of vulnerability countermeasure information published on JVN.-
JVNDB-2026-000154 2026-10-20
-
JVNDB-2026-000153 2026-10-20
-
JVNDB-2026-000152 2026-10-20
-
JVNDB-2026-038886 2026-10-20
-
JVNDB-2026-000149 2026-10-15
CNVD 🇨🇳
China National Vulnerability Database.-
CNVD-2026-39828 2026-10-09
-
CNVD-2026-39827 2026-10-09
-
CNVD-2026-39826 2026-10-09
-
CNVD-2026-39825 2026-10-09
-
CNVD-2026-39824 2026-10-09
FSTEC 🇷🇺
Federal Service for Technical and Export Control of Russia.-
BDU:2026-16208 2026-10-12
-
BDU:2026-16207 2026-10-12
-
BDU:2026-16206 2026-10-12
-
BDU:2026-16205 2026-10-12
-
BDU:2026-16204 2026-10-12
CSAF Databases
52 sources
CSAF ABB
ABB cyber security advisories in CSAF format.-
7PAA025438 2026-10-15My Control System 26.5 – Disk space exhaustion due to incorrect tempo…
-
3ADR011566 2026-09-28ABB Automation Builder - Deserialization of untrusted data
-
3ADR011565 2026-09-28AC500 V3 - Invalid type usage in visualization
-
2NGA003179 2026-09-28ABB Protection and Control IED Manager (PCM600) - PCM600 Project Impo…
-
2NGA003170 2026-09-28ABB Protection and Control IED Manager PCM600 Scheduler Service Privi…
CSAF CERT-Bund 🇩🇪
Advisories of the German federal CERT (BSI CERT-Bund) in CSAF format.-
WID-SEC-W-2026-3968 2026-10-14Drupal Core, Gin Admin Theme und Entity List: Mehrere Schwachstellen
-
WID-SEC-W-2026-3944 2026-10-13Adobe Magento Open Source: Mehrere Schwachstellen
-
WID-SEC-W-2026-3926 2026-10-13Adobe Experience Manager: Mehrere Schwachstellen
-
WID-SEC-W-2026-3867 2026-10-11ImageMagick: Mehrere Schwachstellen
-
WID-SEC-W-2026-3813 2026-10-07IBM Security Verify Access: Mehrere Schwachstellen
CSAF CISA 🇺🇸
CISA ICS advisories in CSAF format.-
ICSA-26-293-03 2026-10-20Moxa AIG-302 ThingsPro Edge
-
ICSA-26-293-02 2026-10-20WAGO OS Linux
-
ICSA-26-293-01 2026-10-20HMS Networks PEAK-System PCAN Windows drivers
-
ICSMA-26-288-02 2026-10-15J4Care dcm4che
-
ICSMA-26-288-01 2026-10-15Thermo Fisher Torrent Suite Software
CSAF CISCO
Cisco PSIRT security advisories in CSAF format.-
CISCO-SA-NOTICE-QGWHNJ6K 2026-10-14Cisco Advance Notification for Publication of October 21, 2026, Secur…
-
CISCO-SA-ESA-AFW-ZQYJKJXP 2026-10-14Cisco Secure Email Gateway Arbitrary File Write Vulnerability
-
CISCO-SA-SSM-ACCESS-NTTB2DHE 2026-10-07Cisco License (Smart Software Manager) On-Prem Vulnerabilities
-
CISCO-SA-NXOS-NSCPDOS-SNDERKC7 2026-10-07Cisco NX-OS Software Control Plane Denial of Service Vulnerability
-
CISCO-SA-NXOS-MPPE-DHKZAFGB 2026-10-07Cisco NX-OS Software Python Sandbox Escape Vulnerability
CSAF Microsoft 🪟
Microsoft Security Response Center advisories in CSAF format.-
MSRC_CVE-2026-98750 2026-10-20tty: fix saved termios reset race
-
MSRC_CVE-2026-98550 2026-10-20tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers …
-
MSRC_CVE-2026-98681 2026-10-20smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races
-
MSRC_CVE-2026-98464 2026-10-20RISC-V: KVM: Synchronize hrtimer callback during teardown
-
MSRC_CVE-2026-98508 2026-10-20drm/virtio: fix NULL pointer dereference on fence allocation failure
CSAF NCSC-NL 🇳🇱
Advisories of the Dutch National Cyber Security Centre (NCSC-NL) in CSAF format.-
NCSC-2026-0438 2026-10-19Kwetsbaarheden verholpen in Drupal Core en modules door Drupal
-
NCSC-2026-0437 2026-10-16Kwetsbaarheid verholpen in BeyondTrust Remote Support
-
NCSC-2026-0436 2026-10-16Kwetsbaarheden verholpen in Adobe Commerce
-
NCSC-2026-0435 2026-10-16Kwetsbaarheden verholpen in Adobe ColdFusion
-
NCSC-2026-0434 2026-10-16Kwetsbaarheden verholpen in Fortinet FortiSIEM
CSAF Nozomi Networks
Nozomi Networks security advisories in CSAF format.-
NN-2026:20-01 2026-09-08Disabled and non-configurable certificate/host key validation in Smar…
-
NN-2026:19-01 2026-09-08Incorrect authorization in Credentials Manager in Guardian/CMC before…
-
NN-2026:18-01 2026-09-08Cross-site request forgery in the Guardian/CMC login before 26.3.0
-
NN-2026:17-01 2026-09-08Incorrect authorization in Smart Polling configuration in Guardian/CM…
-
NN-2026:16-01 2026-09-08Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
CSAF OpenSuse 🦎
openSUSE security advisories in CSAF format.-
RHSA-2026:84796 2026-10-19Red Hat Security Advisory: openexr security update
-
RHSA-2026:84795 2026-10-19security update for librabbitmq
-
RHSA-2026:84753 2026-10-19security update for glibc
-
RHSA-2026:84595 2026-10-19security update for cockpit-files
-
RHSA-2026:84594 2026-10-19Red Hat Security Advisory: environment-modules security update
CSAF Open-Xchange
Open-Xchange security advisories in CSAF format.-
OXDC-ADV-2026-0002 2026-05-05OX Dovecot Security Advisory OXDC-ADV-2026-0002
-
OXDC-ADV-2026-0001 2026-03-27OX Dovecot Security Advisory OXDC-ADV-2026-0001
-
OXDC-ADV-2025-0001 2025-10-31OX Dovecot Pro Security Advisory OXDC-ADV-2025-0001
-
OXAS-ADV-2025-0003 2025-09-23OX App Suite Security Advisory OXAS-ADV-2025-0003
-
OXAS-ADV-2025-0002 2025-08-11OX App Suite Security Advisory OXAS-ADV-2025-0002
CSAF Red Hat 🎩
Red Hat Product Security advisories in CSAF format.-
RHSA-2026:83540 2026-10-20Red Hat Security Advisory: OpenShift Container Platform 4.22.19 bug f…
-
RHSA-2026:86093 2026-10-20Red Hat Security Advisory: golang security, bug fix, and enhancement update
-
RHSA-2026:86089 2026-10-20Red Hat Security Advisory: kernel security update
-
RHSA-2026:85958 2026-10-20Red Hat Security Advisory: openssh security update
-
RHSA-2026:86056 2026-10-20Red Hat Security Advisory: lrzsz security, bug fix, and enhancement update
CSAF Schneider Electric
Schneider Electric security notifications in CSAF format.-
SEVD-2026-286-02 2026-10-13SAGE RTU
-
SEVD-2026-286-01 2026-10-13Use of Unmaintained Third-Party Components vulnerability on Pro-face …
-
SEVD-2026-251-04 2026-09-08Incorrect Implementation of Authentication Algorithm vulnerability on…
-
SEVD-2026-251-02 2026-09-08Improper Neutralization of Special Elements used in an OS Command vul…
-
SEVD-2026-251-01 2026-09-08Multiple Vulnerabilities on EcoStruxure IT Data Center Expert
CSAF Sick
SICK PSIRT security advisories in CSAF format.-
SCA-2026-0016 2026-10-16Vulnerabilities Affecting SICK CorivaHub
-
SCA-2026-0015 2026-10-15Vulnerability Affecting Sick_Safetyscanners_Base CPP Driver
-
SCA-2026-0014 2026-10-14Fast-xml-parser vulnerabilities affect Sentio Creator Extension 'Devi…
-
SCA-2026-0013 2026-09-11Vulnerabilities Affecting SICK CorivaEngine
-
SCA-2026-0012 2026-09-11Vulnerability Affecting Sentio Creator Extension 'Device Manager'
CSAF Siemens
Siemens ProductCERT security advisories in CSAF format.-
SSA-580366 2026-10-15SSA-580366: DLL Sideloading Vulnerability in Siemens Software Center
-
SSA-968435 2026-10-13SSA-968435: Multiple Vulnerabilities in Industrial Edge App Publisher
-
SSA-911336 2026-10-13SSA-911336: Multiple Vulnerabilities in Nozomi Guardian/CMC on RUGGED…
-
SSA-832641 2026-10-13SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge…
-
SSA-784472 2026-10-13SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of …
CSAF Suse 🦎
SUSE security advisories in CSAF format.-
SUSE-SU-2026:4744-1 2026-10-19Security update for python3, python3-base, python3-doc
-
SUSE-SU-2026:4743-1 2026-10-19Security update for python36
-
SUSE-SU-2026:4738-1 2026-10-19Security update for python
-
SUSE-SU-2026:4735-1 2026-10-19Security update for alsa
-
SUSE-SU-2026:4734-1 2026-10-19Security update for the Linux Kernel (Live Patch 36 for SUSE Linux En…
CERT@VDE
Advisories coordinated by CERT@VDE for industrial automation vendors, in CSAF format.-
VDE-2025-028 2025-08-05Draeger: ICMHelper is vulnerable to a privilege escalation
-
VDE-2019-012 2019-06-04TECSON/GOK: Improper Authentication and Access Control on multiple devices
-
VDE-2026-027 2026-09-16Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 …
-
VDE-2025-056 2026-08-12Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext…
-
VDE-2026-008 2026-07-30Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SE…
-
VDE-2026-060 2026-06-03Phoenix Contact: Unauthenticated log download vulnerability in the fi…
-
VDE-2026-050 2026-05-27Phoenix Contact: PLCnext Firmware Security Issues Related to APPs and…
-
VDE-2025-085 2025-09-10Welotec: Path Traversal in SmartEMS Upload Handling
-
VDE-2025-076 2025-08-26Welotec: Hard-coded JWT secret in egOS WebGUI
-
VDE-2024-043 2024-08-22Welotec: Multiple products are vulnerable to regreSSHion
-
VDE-2024-023 2024-04-23Welotec: Clickjacking Vulnerability in WebUI
-
VDE-2024-009 2024-04-09Welotec: Two vulnerabilities in TK500v1 router series
-
ADVISORY2026-12_VDE-2026-097 2026-09-30CODESYS Control Runtime - Improper Synchronization in Monitoring
-
ADVISORY2026-06_VDE-2026-041 2026-07-29CODESYS PROFINET Controller - Out-of-bounds Write
-
ADVISORY2026-04_VDE-2026-040 2026-07-13CODESYS EtherNetIP - Improper timeout handling
-
ADVISORY2026-10_VDE-2026-057 2026-05-26CODESYS Control - Out-of-bounds Write
-
ADVISORY2026-09_VDE-2026-055 2026-05-26CODESYS Development System - Incorrect Default Permissions
-
VDE-2025-067 2025-08-10Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
-
VDE-2025-024 2025-05-13Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2025-032 2025-05-06Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site…
-
VDE-2025-031 2025-04-28Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2024-018 2024-02-28Wiesemann & Theis: Multiple products prone to unquoted search path
-
VDE-2026-068 2026-06-23MB connect line: Authenticated unintended access to critical program …
-
VDE-2026-054 2026-05-27MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini
-
VDE-2026-044 2026-05-27MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-030 2026-04-02MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-024 2026-03-23MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-070 2026-06-23Helmholz: Authenticated unintended access to critical program paramet…
-
VDE-2026-059 2026-05-27Helmholz: Multiple vulnerabilities in REX100/REX200/REX250
-
VDE-2026-058 2026-05-21Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
-
VDE-2026-015 2026-04-21Helmholz: Use of a Broken or Risky Cryptographic Algorithm
-
VDE-2026-043 2026-04-13Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual
-
FSA-202602 2026-10-20Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE
-
FSA-202601 2026-02-26Several CODESYS vulnerabilities in Festo Automation Suite
-
FSA-202406 2024-12-03Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo
-
FSA-202405 2024-09-09Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products co…
-
FSA-202402 2024-02-27Several Vulnerabilities in MES PC (Windows 10)
-
VDE-2026-014 2026-09-16Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vu…
-
VDE-2025-011 2025-05-26PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by …
-
VDE-2025-002 2025-02-25PEPPERL+FUCHS: HMI – devices are affected by Windows RCE
-
VDE-2024-065 2024-11-26PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key
-
VDE-2024-063 2024-10-08PEPPERL+FUCHS: Multiple products are affected by regreSSHion
-
PPSA-2026-005 2026-10-20Pilz: Vulnerabilities in 'PiCtory' and 'RevPiPyLoad' for Industrial P…
-
PPSA-2026-004 2026-10-20Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC …
-
PPSA-2026-003 2026-08-04Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI
-
PPSA-2026-002 2026-04-23Pilz: Vulnerability affecting PASvisu Runtime
-
PPSA-2026-001 2026-02-02Pilz: Multiple Vulnerabilities affecting the PIT User Authentication …
-
VDE-2025-102 2026-10-01WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack
-
VDE-2025-081 2026-10-01WAGO: Multiple PLCs and Communication Components are Affected by mult…
-
VDE-2026-031 2026-07-13WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices
-
VDE-2024-008 2026-04-08Wago: Vulnerability in WBM through Open VPN
-
VDE-2026-021 2026-03-30WAGO: Multiple Vulnerabilities in WAGO VC Hub
-
VDE-2026-005 2026-05-06ifm: Multiple Vulnerabilities in CR3171
-
VDE-2024-061 2025-06-30ifm: Improper Access Control vulnerability
-
VDE-2024-012 2024-07-09ifm: Vulnerabilities in ifm AC14 firmware
-
VDE-2024-028 2024-05-06ifm moneo password reset can be exploited
-
VDE-2022-050 2022-12-12IFM: weak password recovery vulnerability in moneo appliance
-
VDE-2025-092 2026-01-27Beckhoff: Privilege escalation and information leak via Beckhoff Devi…
-
VDE-2025-106 2026-01-26Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
-
VDE-2025-075 2025-09-09Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
-
VDE-2024-064 2024-10-31Beckhoff: Local command injection via TwinCAT Package Manager
-
VDE-2021-008 2024-10-21Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products
-
VDE-2026-091 2026-09-15TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
-
VDE-2026-007 2026-02-23TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability
-
VDE-2025-078 2025-08-25TRUMPF: Remote support uses an outdated encryption algorithm
-
VDE-2024-004 2025-04-22TRUMPF: Multiple products affected by log4net vulnerability
-
VDE-2024-040 2024-06-25Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerab…
-
VDE-2026-089 2026-09-21Lenze: VPN Client Remote Code Execution in combination with Lenze x50…
-
VDE-2026-077 2026-07-27Lenze: Incorrect signature validation in the enable SSH routine
-
VDE-2025-043 2025-06-25Lenze: PLC Designer V4 with insecure storage of sensitive information
-
VDE-2025-042 2025-05-27Lenze: VPN Client Privilege Escalation in combination with Lenze x500…
-
VDE-2024-053 2024-09-03Lenze: Install Directory with insufficient permissions
-
VDE-2026-028 2026-09-16Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple …
-
VDE-2022-029 2022-09-26Carlo Gavazzi Controls: Multiple Vulnerabilities in Controller UWP 3.0
-
VDE-2025-047 2025-06-10AUMA: Incorrect delivery status of the Bluetooth configuration
-
VDE-2025-026 2025-05-12AUMA Riester: Buffer overflow in service telegram
-
VDE-2023-028 2023-08-07AUMA: SIMA Master Station affected by WRECK vulnerability
-
VDE-2023-027 2023-08-07AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations
-
VDE-2022-032 2022-08-09AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service
-
VDE-2026-109 2026-10-13Bender Customer&Partner Platform Vulnerability - Privilege Escalation
-
VDE-2025-084 2025-09-08Bender Charge Controller Vulnerability - Unsecure Communication
-
VDE-2025-061 2025-09-08Bender Charge Controller Vulnerability - Disclosure Of Stored Credent…
-
VDE-2021-047 2022-04-26Bender/ebee: Multiple Charge Controller Vulnerabilities
-
VDE-2020-043 2020-10-16Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vuln…
-
VDE-2026-065 2026-08-03Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package…
-
VDE-2026-045 2026-07-16Endress+Hauser: Multiple products affected by SopasET interface vulne…
-
VDE-2026-032 2026-04-21Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW
-
VDE-2026-003 2026-03-31Endress+Hauser: Multiple products prone to multiple vulnerabilities i…
-
VDE-2026-002 2026-03-02Endress+Hauser: buffer overflow in glibc ld.so leading to privilege e…
-
VDE-2026-078 2026-08-20Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities
-
VDE-2025-030 2025-07-07Frauscher: FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi are Vulnerab…
-
VDE-2023-049 2023-12-11Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
-
VDE-2023-038 2023-09-21Frauscher: Multiple Vulnerabilities in FDS101
-
VDE-2023-011 2023-07-05Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vul…
-
VDE-2022-052 2022-11-21Miele: Vulnerability in ease2pay cloud service used by appWash
-
VDE-2022-015 2022-04-27Miele: Security vulnerability in Benchmark Programming Tool
-
VDE-2020-024 2020-07-08Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communicatio…
-
VDE-2019-010 2019-05-20Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway
-
VDE-2026-083 2026-08-25Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are af…
-
VDE-2026-085 2026-07-28Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA
-
VDE-2026-081 2026-07-28Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by…
-
VDE-2025-096 2026-03-10Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Ener…
-
VDE-2025-052 2025-06-11Weidmueller: Security routers IE-SR-2TX are affected by multiple vuln…
-
VDE-2025-066 2025-08-27SMA: Directory Traversal in Sunny Boy
-
VDE-2025-050 2025-08-19SMA: Sunny Portal limited disclosure of personal data of registered u…
-
VDE-2025-010 2025-05-13SMA: Sunny Portal demo system privilege escalation
-
VDE-2025-012 2025-02-26SMA: Sunny Portal Remote Code Execution
-
VDE-2024-075 2025-01-27SMA: Sunny Webbox clickjacking vulnerability
-
VDE-2024-013 2024-02-13HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing
-
VDE-2022-059 2023-01-16HIMA: unquoted path vulnerabilities in X-OPC and X-OTS
-
VDE-2026-108 2026-10-06Murrelektronik: Missing Authentication in aas-edge-client Reference I…
-
VDE-2026-061 2026-08-24Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' functio…
-
VDE-2026-063 2026-07-14Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS
-
VDE-2026-062 2026-07-14Several Murrelektronik Devices use Default SNMP Community Names
-
VDE-2025-091 2025-10-14Murrelektronik: Cleartext Transmission of Sensitive Information in IM…
-
VDE-2020-016 2020-05-28SWARCO: Critical Vulnerability in CPU LS4000
-
VDE-2026-076 2026-07-28ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products
-
VDE-2025-033 2025-04-14ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC…
-
VDE-2024-016 2024-02-19ADS-TEC Industrial IT: Docker vulnerability affects multiple products
-
VDE-2023-009 2023-05-08ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000
-
VDE-2022-061 2023-03-15VARTA: Multiple devices prone to hard-coded credentials
-
VDE-2026-093 2026-09-01SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mec…
-
VDE-2025-060 2025-10-21Sauter: Multiple vulnerabilities in SAUTER modulo 6
-
VDE-2025-079 2026-03-10Janitza: Multiple vulnerabilities in UMG 96RM-E
-
VDE-2025-094 2025-11-24Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+
-
VDE-2026-112 2026-10-20METTLER TOLEDO: STARe Software DB2 vulnerable component
-
VDE-2026-088 2026-08-20METTLER TOLEDO: LabX Standard and Enterprise Report on External Compo…
-
VDE-2026-066 2026-07-14METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
-
VDE-2026-064 2026-06-09METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3
-
VDE-2026-053 2026-05-26METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnera…
TIBCO
TIBCO security advisories in CSAF format.-
TIBCO-2023-454 2023-05-23TIBCO Security Advisory TIBCO-2023-454
-
TIBCO-2023-453 2023-05-23TIBCO Security Advisory TIBCO-2023-453
-
TIBCO-2023-460 2023-04-18TIBCO Security Advisory TIBCO-2023-460
-
TIBCO-2023-450 2023-02-22TIBCO Security Advisory TIBCO-2023-450
-
TIBCO-2023-446 2023-02-22TIBCO Security Advisory TIBCO-2023-446
Trend Micro
Trend Micro security bulletins in CSAF format.-
2026-0521-TM-A1-001 2026-05-21ITW SECURITY BULLETIN: Apex One and Vision One and Standard Endpoint …
-
2025-0805-TM-A1-002 2025-08-05ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One (On-Premise) Man…
-
2025-0627-TM-WF-001 2025-06-27SECURITY BULLETIN: June 2025 for Trend Micro Worry-Free Business Secu…
-
2025-0610-TM-TMEE-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Endpoint Encryption PolicySer…
-
2025-0610-TM-AC-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Apex Central (June 2025)
-
VDE-2026-048 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Blueto…
-
VDE-2026-047 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Air products
-
VDE-2026-046 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS two- a…
-
VDE-2026-016 2026-04-22VEGA: Unsecured Configuration Interface Allows Unauthorized Access Le…
-
HBSA-2025-0003 2026-02-18JBL: DoS vulnerability in Flip 4
-
HBSA-2025-0002 2025-12-10BLE ICM Vulnerability in JBL Headphones
-
HBSA-2025-0001 2025-12-10BLE GATT Service Vulnerability in JBL Headphones
-
VDE-2026-071 2026-06-23JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON …
-
VDE-2026-009 2026-05-26JUMO: Multiple products affected by nodejs vulnerability
-
VDE-2025-086 2025-11-10Jumo: Predictable debug-interface password in variTRON series
-
VDE-2025-098 2026-04-02Baade M2M-Products GmbH: ubusd heap buffer overflow vulnerability in …
-
VDE-2025-097 2025-11-18METZ CONNECT: Config API – Authentication bypass leads to admin takeo…
OSV Sources
13 sources
OSV AlmaLinux
AlmaLinux security advisories in OSV format.-
ALSA-2026:85814 2026-10-20
-
ALSA-2026:85791 2026-10-20
-
ALSA-2026:85774 2026-10-20
-
ALSA-2026:85773 2026-10-20
-
ALSA-2026:85309 2026-10-19
OSV BellSoft
BellSoft advisories for Alpaquita Linux and its hardened containers, in OSV format.-
BELL-CVE-2026-98543 2026-10-20
-
BELL-CVE-2026-98553 2026-10-20
-
BELL-CVE-2026-98552 2026-10-20
-
BELL-CVE-2026-98551 2026-10-20
-
BELL-CVE-2026-98550 2026-10-20
OSV Haskell λ
Haskell Security Advisory Database (HSEC) in OSV format.-
HSEC-2026-0010 2026-09-29
-
HSEC-2026-0008 2026-06-03
-
HSEC-2026-0007 2026-05-22
-
HSEC-2026-0006 2026-04-08
-
HSEC-2026-0004 2026-03-28
OSV Homebrew 🍺
OSV records for Homebrew formulae patched against known vulnerabilities.-
BREW-BLACK-GHSA-2G87-PP6C-29X5 2026-10-20
-
BREW-BLACK-CVE-2026-111064 2026-10-20
-
BREW-BLACK-CVE-2026-111063 2026-10-20
-
BREW-MCP-PROXY-CVE-2026-59951 2026-10-16
-
BREW-MCP-ATLASSIAN-CVE-2026-59951 2026-10-16
OSV Ocaml 🐫
OCaml security advisories in OSV format.-
OSEC-2026-20 2026-09-10
-
OSEC-2026-19 2026-09-10
-
OSEC-2026-18 2026-09-10
-
OSEC-2026-16 2026-08-20
-
OSEC-2026-17 2026-08-17
OSV openEuler
openEuler security advisories (OESA) in OSV format.-
OESA-2026-4410 2026-10-16
-
OESA-2026-4409 2026-10-16
-
OESA-2026-4408 2026-10-16
-
OESA-2026-4407 2026-10-16
-
OESA-2026-4406 2026-10-16
OSV OSS Fuzz 🧪
Vulnerabilities found by Google OSS-Fuzz, in OSV format.-
OSV-2026-1408 2026-10-17
-
OSV-2026-1361 2026-10-03
-
OSV-2026-1332 2026-09-28
-
OSV-2026-1314 2026-09-22
-
OSV-2026-1309 2026-09-21
OSV Rocky Linux
Rocky Linux security advisories in OSV format, served by the Apollo API.-
RLSA-2026:85191 2026-10-20
-
RLSA-2026:84799 2026-10-20
-
RLSA-2026:84796 2026-10-20
-
RLSA-2026:84795 2026-10-20
-
RLSA-2026:84753 2026-10-20
OSV Rustsec 🦀
RustSec advisory database for Rust crates.-
RUSTSEC-2026-0382 2026-10-20
-
RUSTSEC-2026-0383 2026-10-19
-
RUSTSEC-2026-0381 2026-10-19
-
RUSTSEC-2026-0380 2026-10-19
-
RUSTSEC-2026-0379 2026-10-19
OSV Ubuntu
Ubuntu security notices and CVE records in OSV format.-
USN-8940-1 2026-10-20
-
USN-8934-1 2026-10-19
-
USN-8939-1 2026-10-19
-
USN-8927-2 2026-10-19
-
USN-8938-1 2026-10-19
Bitnami VulnDB
Bitnami vulnerability database for the applications it packages.-
BIT-PARSE-2026-109954 2026-10-20
-
BIT-POWERSHELL-2026-96303 2026-10-20
-
BIT-GRAFANA-2026-93294 2026-10-20
-
BIT-GRAFANA-2026-33374 2026-10-20
-
BIT-GRAFANA-2026-15577 2026-10-20
-
CLEANSTART-2026-WR72831 2026-10-20
-
CLEANSTART-2026-ZU45548 2026-10-20
-
CLEANSTART-2026-ZS06446 2026-10-20
-
CLEANSTART-2026-VG34156 2026-10-20
-
CLEANSTART-2026-XE88447 2026-10-20
Drupal 💧
Drupal core and contributed project security advisories.-
DRUPAL-CONTRIB-2026-218 2026-10-14
-
DRUPAL-CONTRIB-2026-219 2026-10-14
-
DRUPAL-CONTRIB-2026-217 2026-10-07
-
DRUPAL-CONTRIB-2026-216 2026-10-07
-
DRUPAL-CONTRIB-2026-215 2026-10-07
Specialized Sources
3 sources
Tailscale
Tailscale security bulletins.-
TS-2026-012 2026-10-13
-
TS-2026-011 2026-08-18
-
TS-2026-010 2026-07-24
-
TS-2026-009 2026-07-13
-
TS-2026-008 2026-07-13
AVID 🤖
AI Vulnerability Database of failure reports for AI/ML systems.-
AVID-2023-V028 2023-03-31
-
AVID-2023-V027 2023-03-31
-
AVID-2023-V026 2023-03-31
-
AVID-2023-V016 2023-03-31
-
AVID-2023-V015 2023-03-31
VARIoT 📡
Vulnerability database focused on vulnerabilities in the Internet of Things (IoT) ecosystem.-
VAR-202407-2188 2024-07-23
-
VAR-202406-3119 2024-07-23
-
VAR-202407-1740 2024-07-23
-
VAR-202407-1417 2024-07-23
-
VAR-202407-1103 2024-07-23