Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-26187
8.1 (3.1)
lakeFS vulnerable to path traversal in local block ada… treeverse
lakeFS
2026-02-13T18:34:10.937Z 2026-02-13T19:53:32.197Z
CVE-2026-25991
7.7 (3.1)
Tandoor Recipes affected by Blind SSRF with Internal N… TandoorRecipes
recipes
2026-02-13T18:29:10.900Z 2026-02-13T19:58:00.752Z
CVE-2026-2441
8.8 (3.1)
Use after free in CSS in Google Chrome prior to 1… Google
Chrome
2026-02-13T18:27:48.355Z 2026-02-14T04:55:25.729Z
CVE-2026-25964
4.9 (3.1)
Tandoor Recipes Affected by Authenticated Local File D… TandoorRecipes
recipes
2026-02-13T18:27:08.973Z 2026-02-13T20:01:40.545Z
CVE-2026-26264
7.8 (4.0)
BACnet Stack WriteProperty decoding length underflow l… bacnet-stack
bacnet-stack
2026-02-13T18:14:30.232Z 2026-02-13T18:50:30.367Z
CVE-2026-21878
7.5 (3.1)
BACnet Stack Improperly Limits Pathnames to a Restrict… bacnet-stack
bacnet-stack
2026-02-13T18:10:26.325Z 2026-02-13T18:53:59.648Z
CVE-2026-21870
5.5 (3.1)
The BACnet Protocol Stack library has an Off-by-one St… bacnet-stack
bacnet-stack
2026-02-13T17:58:37.205Z 2026-02-13T18:19:36.183Z
CVE-2026-26268
8.1 (3.1)
Cursor sandbox escape via Git hooks cursor
cursor
2026-02-13T16:54:04.712Z 2026-02-13T21:12:35.045Z
CVE-2025-1790
5.8 (4.0)
Local privilege escalation in Genetec Sipelia Plu… Genetec Inc.
Genetec Sipelia
2026-02-13T16:45:06.539Z 2026-02-13T21:11:48.160Z
CVE-2026-26226
5.3 (4.0)
beautiful-mermaid < 0.1.3 SVG Attribute Injection lukilabs
beautiful-mermaid
2026-02-13T16:35:06.252Z 2026-02-13T16:58:09.961Z
CVE-2026-2026
5.4 (4.0)
6.1 (3.1)
Improper Access Control Allows Denial of Service Tenable
Agent
2026-02-13T16:14:23.789Z 2026-02-13T16:58:59.807Z
CVE-2026-26221
10 (4.0)
Hyland OnBase Timer Services Unauthenticated .NET Remo… Hyland
OnBase Workflow Timer Service
2026-02-13T15:21:48.928Z 2026-02-13T17:10:26.532Z
CVE-2026-25531
4.3 (3.1)
Kanboard TaskCreationController::duplicateProjects() e… kanboard
kanboard
2026-02-13T15:04:24.316Z 2026-02-13T15:32:51.222Z
CVE-2026-1578
5.1 (4.0)
HP App – Potential Cross-Site Scripting HP Inc
HP App
2026-02-13T14:56:42.725Z 2026-02-13T16:14:36.813Z
CVE-2026-23112
N/A
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec Linux
Linux
2026-02-13T13:29:56.724Z 2026-02-13T13:29:56.724Z
CVE-2026-23111
N/A
netfilter: nf_tables: fix inverted genmask check in nf… Linux
Linux
2026-02-13T13:29:55.895Z 2026-02-13T13:29:55.895Z
CVE-2026-1619
8.3 (3.1)
IDOR in Universal Sotware's FlexCity/Kiosk Universal Software Inc.
FlexCity/Kiosk
2026-02-13T13:20:54.637Z 2026-02-13T16:59:48.958Z
CVE-2026-1618
8.8 (3.1)
Admin Account Takeover in Universal Sotware's FlexCity/Kiosk Universal Software Inc.
FlexCity/Kiosk
2026-02-13T13:14:45.785Z 2026-02-13T17:00:30.361Z
CVE-2025-14349
8.8 (3.1)
Business Logic Error in Universal Software's FlexCity/Kiosk Universal Software Inc.
FlexCity/Kiosk
2026-02-13T13:09:43.901Z 2026-02-13T17:01:01.873Z
CVE-2026-2443
5.3 (3.1)
Libsoup: out-of-bounds read in libsoup handle_partial_… Red Hat
Red Hat Enterprise Linux 10
2026-02-13T11:58:20.313Z 2026-02-13T12:43:36.389Z
CVE-2025-33042
N/A
Apache Avro Java SDK: Code injection on Java generated code Apache Software Foundation
Apache Avro Java SDK
2026-02-13T11:47:03.783Z 2026-02-13T18:05:35.038Z
CVE-2026-20796
3.1 (3.1)
Time-of-check time-of-use vulnerability in common teams API Mattermost
Mattermost
2026-02-13T10:30:03.445Z 2026-02-13T17:02:25.985Z
CVE-2026-22892
4.3 (3.1)
Insufficient Authorization in Mattermost Jira Plugin A… Mattermost
Mattermost
2026-02-13T10:29:00.943Z 2026-02-13T17:03:30.894Z
CVE-2026-0872
2.5 (4.0)
Improper Certificate Validation vulnerability in Thale… Thales
SafeNet Agent for Windows Logon
2026-02-13T08:53:05.621Z 2026-02-13T12:47:30.747Z
CVE-2025-15520
4.3 (3.1)
RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive D… Unknown
RegistrationMagic
2026-02-13T06:00:07.689Z 2026-02-13T15:18:04.762Z
CVE-2025-48023
6 (4.0)
A vulnerability has been found in Vnet/IP Interfa… Yokogawa Electric Corporation
Vnet/IP Interface Package
2026-02-13T05:00:05.985Z 2026-02-13T12:50:44.861Z
CVE-2025-48022
6 (4.0)
A vulnerability has been found in Vnet/IP Interfa… Yokogawa Electric Corporation
Vnet/IP Interface Package
2026-02-13T04:58:12.391Z 2026-02-13T12:35:05.068Z
CVE-2025-48021
6 (4.0)
A vulnerability has been found in Vnet/IP Interfa… Yokogawa Electric Corporation
Vnet/IP Interface Package
2026-02-13T04:56:15.651Z 2026-02-13T12:54:59.214Z
CVE-2025-48020
6 (4.0)
A vulnerability has been found in Vnet/IP Interfa… Yokogawa Electric Corporation
Vnet/IP Interface Package
2026-02-13T04:54:09.449Z 2026-02-13T12:55:50.520Z
CVE-2025-48019
6 (4.0)
A vulnerability has been found in Vnet/IP Interfa… Yokogawa Electric Corporation
Vnet/IP Interface Package
2026-02-13T04:51:46.316Z 2026-02-13T17:04:11.701Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-26273
9.8 (3.0)
Known affected by Account Takeover via Password Reset … idno
known
2026-02-13T21:45:41.610Z 2026-02-13T21:45:41.610Z
CVE-2026-1841
7.2 (3.1)
PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross… pixelyoursite
PixelYourSite – Your smart PIXEL (TAG) & API Manager
2026-02-13T21:23:05.247Z 2026-02-13T21:23:05.247Z
CVE-2026-1844
7.2 (3.1)
PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored… pixelyoursite
PixelYourSite Pro – Your smart PIXEL (TAG) Manager
2026-02-13T21:23:04.880Z 2026-02-13T21:23:04.880Z
CVE-2025-15157
8.8 (3.1)
Starfish Review Generation & Marketing for WordPress <… starfishwp
Starfish Review Generation & Marketing for WordPress
2026-02-13T21:23:04.343Z 2026-02-13T21:23:04.343Z
CVE-2025-68128
N/A
reserved but not needed N/A N/A 2026-02-13T20:47:17.205Z
CVE-2025-68127
N/A
reserved but not needed N/A N/A 2026-02-13T20:47:15.460Z
CVE-2025-68126
N/A
reserved but not needed N/A N/A 2026-02-13T20:47:11.981Z
CVE-2025-68125
N/A
reserved but not needed N/A N/A 2026-02-13T20:47:09.195Z
CVE-2025-68124
N/A
reserved but not needed N/A N/A 2026-02-13T20:47:06.665Z
CVE-2025-58184
N/A
reserved but not needed N/A N/A 2026-02-13T20:48:59.693Z
CVE-2025-58182
N/A
reserved but not needed N/A N/A 2026-02-13T20:48:59.849Z
CVE-2025-47915
N/A
reserved but not needed N/A N/A 2026-02-13T20:48:59.970Z
CVE-2024-34157
N/A
reserved but not needed N/A N/A 2026-02-13T20:49:00.134Z
CVE-2024-34154
N/A
reserved but not needed N/A N/A 2026-02-13T20:49:00.282Z
CVE-2023-45291
N/A
reserved but not needed N/A N/A 2026-02-13T20:49:00.406Z
CVE-2026-26334
8.5 (4.0)
Calero VeraSMART < 2026 R1 Hardcoded Static AES Keys A… Calero
VeraSMART
2026-02-13T20:53:18.909Z 2026-02-13T21:23:26.220Z
CVE-2026-26333
10 (4.0)
Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary Fil… Calero
VeraSMART
2026-02-13T20:51:57.479Z 2026-02-13T21:25:25.994Z
CVE-2026-26335
9.3 (4.0)
Calero VeraSMART < 2022 R1 Static IIS Machine Keys Ena… Calero
VeraSMART
2026-02-13T20:51:26.374Z 2026-02-13T21:27:16.720Z
CVE-2026-26269
5.4 (3.1)
Vim has a Netbeans specialKeys Stack Buffer Overflow vim
vim
2026-02-13T19:18:41.662Z 2026-02-13T21:11:26.275Z
CVE-2025-36552
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:10:42.204Z
CVE-2025-36545
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:16.143Z
CVE-2025-36542
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:17.424Z
CVE-2025-36538
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:18.604Z
CVE-2025-36534
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:19.538Z
CVE-2025-36532
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:20.473Z
CVE-2025-36526
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:21.535Z
CVE-2025-36524
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:22.471Z
CVE-2025-36523
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:23.390Z
CVE-2025-36517
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:24.329Z
CVE-2025-35997
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused N/A N/A 2026-02-13T18:11:25.231Z
ID Description Published Updated
fkie_cve-2025-70957 A Denial of Service (DoS) vulnerability was discovered in the TON Lite Server before v2024.09. The … 2026-02-13T22:16:10.413 2026-02-13T22:16:10.413
fkie_cve-2025-70956 A State Pollution vulnerability was discovered in the TON Virtual Machine (TVM) before v2025.04. Th… 2026-02-13T22:16:10.290 2026-02-13T22:16:10.290
fkie_cve-2025-70955 A Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10. The… 2026-02-13T22:16:10.170 2026-02-13T22:16:10.170
fkie_cve-2025-70954 A Null Pointer Dereference vulnerability exists in the TON Virtual Machine (TVM) within the TON Blo… 2026-02-13T22:16:10.047 2026-02-13T22:16:10.047
fkie_cve-2025-70866 LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control. An authenticated user with low-level… 2026-02-13T22:16:09.923 2026-02-13T22:16:09.923
fkie_cve-2025-69633 A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for Prest… 2026-02-13T22:16:09.650 2026-02-13T22:16:09.650
fkie_cve-2025-15157 The Starfish Review Generation & Marketing for WordPress plugin for WordPress is vulnerable to unau… 2026-02-13T22:16:08.427 2026-02-13T22:16:08.427
fkie_cve-2026-26335 Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for … 2026-02-13T21:16:52.927 2026-02-13T21:43:11.137
fkie_cve-2026-26334 Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Vera… 2026-02-13T21:16:52.787 2026-02-13T21:43:11.137
fkie_cve-2026-26333 Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on … 2026-02-13T21:16:52.440 2026-02-13T21:43:11.137
fkie_cve-2025-68128 Rejected reason: reserved but not needed 2026-02-13T21:16:28.903 2026-02-13T21:16:28.903
fkie_cve-2025-68127 Rejected reason: reserved but not needed 2026-02-13T21:16:28.847 2026-02-13T21:16:28.847
fkie_cve-2025-68126 Rejected reason: reserved but not needed 2026-02-13T21:16:28.797 2026-02-13T21:16:28.797
fkie_cve-2025-68125 Rejected reason: reserved but not needed 2026-02-13T21:16:28.740 2026-02-13T21:16:28.740
fkie_cve-2025-68124 Rejected reason: reserved but not needed 2026-02-13T21:16:28.667 2026-02-13T21:16:28.667
fkie_cve-2025-58184 Rejected reason: reserved but not needed 2026-02-13T21:16:16.070 2026-02-13T21:16:16.070
fkie_cve-2025-58182 Rejected reason: reserved but not needed 2026-02-13T21:16:15.987 2026-02-13T21:16:15.987
fkie_cve-2025-47915 Rejected reason: reserved but not needed 2026-02-13T21:16:12.543 2026-02-13T21:16:12.543
fkie_cve-2024-34157 Rejected reason: reserved but not needed 2026-02-13T21:16:12.167 2026-02-13T21:16:12.167
fkie_cve-2024-34154 Rejected reason: reserved but not needed 2026-02-13T21:16:12.100 2026-02-13T21:16:12.100
fkie_cve-2023-45291 Rejected reason: reserved but not needed 2026-02-13T21:16:12.013 2026-02-13T21:16:12.013
fkie_cve-2026-26269 Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnera… 2026-02-13T20:17:41.377 2026-02-13T22:16:11.220
fkie_cve-2026-26264 BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0r… 2026-02-13T19:17:31.143 2026-02-13T21:43:11.137
fkie_cve-2026-2441 Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute … 2026-02-13T19:17:31.310 2026-02-13T21:43:11.137
fkie_cve-2026-26208 ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable… 2026-02-13T19:17:29.420 2026-02-13T21:43:11.137
fkie_cve-2026-26190 Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and … 2026-02-13T19:17:29.253 2026-02-13T21:43:11.137
fkie_cve-2026-26187 lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to… 2026-02-13T19:17:29.100 2026-02-13T21:43:11.137
fkie_cve-2026-25991 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists… 2026-02-13T19:17:28.953 2026-02-13T21:43:11.137
fkie_cve-2026-25964 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists… 2026-02-13T19:17:28.810 2026-02-13T21:43:11.137
fkie_cve-2026-21878 BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.… 2026-02-13T19:17:28.650 2026-02-13T21:43:11.137
ID Severity Description Published Updated
ghsa-964f-vc2f-ch6j
A Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10. The… 2026-02-14T00:32:42Z 2026-02-14T00:32:42Z
ghsa-7vwv-5gmf-fwq5
A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for Prest… 2026-02-14T00:32:42Z 2026-02-14T00:32:42Z
ghsa-7j93-6xm6-qf2c
7.2 (3.1)
The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'py… 2026-02-14T00:32:42Z 2026-02-14T00:32:42Z
ghsa-38xg-3ffm-68p7
LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control. An authenticated user with low-level… 2026-02-14T00:32:42Z 2026-02-14T00:32:42Z
ghsa-28cf-2j8g-v8mv
7.2 (3.1)
The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stor… 2026-02-14T00:32:42Z 2026-02-14T00:32:42Z
ghsa-78wq-6gcv-w28r
9.8 (3.1)
Known affected by Account Takeover via Password Reset Token Leakage 2026-02-13T22:49:27Z 2026-02-13T22:49:27Z
ghsa-vc34-g972-8h6w
Rejected reason: reserved but not needed 2026-02-13T21:31:40Z 2026-02-13T21:31:40Z
ghsa-pw8j-97jq-cw6g
9.3 (4.0)
Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for … 2026-02-13T21:31:40Z 2026-02-13T21:31:40Z
ghsa-m5gh-67pq-6cwc
Rejected reason: reserved but not needed 2026-02-13T21:31:40Z 2026-02-13T21:31:40Z
ghsa-m4w4-g5c5-j4f4
10.0 (4.0)
Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on … 2026-02-13T21:31:40Z 2026-02-13T21:31:40Z
ghsa-gr86-27p2-pw8r
Rejected reason: reserved but not needed 2026-02-13T21:31:40Z 2026-02-13T21:31:40Z
ghsa-cxch-rc9p-q6hq
8.5 (4.0)
Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Vera… 2026-02-13T21:31:40Z 2026-02-13T21:31:40Z
ghsa-9f5c-9hrj-836j
Rejected reason: reserved but not needed 2026-02-13T21:31:40Z 2026-02-13T21:31:40Z
ghsa-7r37-37m9-xv24
Rejected reason: reserved but not needed 2026-02-13T21:31:40Z 2026-02-13T21:31:40Z
ghsa-xpp8-qpcr-c3rg
8.8 (3.1)
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute … 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-x38f-f365-5fgg
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-vrg2-x2p2-pc67
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-v4qp-mqxj-qxxf
Rejected reason: reserved but not needed 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-r46r-328f-mg57
Rejected reason: reserved but not needed 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-phm2-hj55-m6f6
Rejected reason: reserved but not needed 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-h58m-v7xx-rqq9
Rejected reason: reserved but not needed 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-85gf-992w-cr47
Rejected reason: reserved but not needed 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-6mhj-x7jw-6c57
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-5g34-6m9g-844h
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-3vrr-qwf4-v63q
Rejected reason: reserved but not needed 2026-02-13T21:31:39Z 2026-02-13T21:31:39Z
ghsa-xmhh-hhw2-rh9j
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:38Z 2026-02-13T21:31:38Z
ghsa-xj72-8cc7-64m7
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:38Z 2026-02-13T21:31:38Z
ghsa-v98v-vv3v-hfhg
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:38Z 2026-02-13T21:31:38Z
ghsa-r2mp-m756-xr9v
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:38Z 2026-02-13T21:31:38Z
ghsa-qfj5-5f6w-g7w2
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T21:31:38Z 2026-02-13T21:31:38Z
ID Severity Description Package Published Updated
pysec-2024-2
5.5 (3.1)
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwri… appwrite 2024-01-09T09:15:00+00:00 2024-01-17T11:19:17.695321+00:00
pysec-2024-3
5.9 (3.1)
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decrypti… pycryptodomex 2024-01-05T04:15:00+00:00 2024-01-17T11:19:18.629304+00:00
pysec-2024-146
9.8 (3.1)
PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:58.401329+00:00
pysec-2024-145
7.5 (3.1)
FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause … paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:58.341995+00:00
pysec-2024-144
7.5 (3.1)
Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a ru… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:58.282654+00:00
pysec-2024-143
9.8 (3.1)
PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:58.223275+00:00
pysec-2024-142
9.8 (3.1)
PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resul… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:58.166295+00:00
pysec-2024-141
9.8 (3.1)
Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw … paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:58.106968+00:00
pysec-2024-140
7.5 (3.1)
FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:58.044369+00:00
pysec-2024-139
9.8 (3.1)
Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lea… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.974712+00:00
pysec-2024-138
7.5 (3.1)
FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.913569+00:00
pysec-2024-137
7.5 (3.1)
FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.844840+00:00
pysec-2024-136
9.8 (3.1)
Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.785687+00:00
pysec-2024-135
7.5 (3.1)
Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runt… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.726582+00:00
pysec-2024-134
7.5 (3.1)
Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime c… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.667127+00:00
pysec-2024-133
7.5 (3.1)
OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime cra… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.605277+00:00
pysec-2024-132
7.5 (3.1)
FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime cras… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.546560+00:00
pysec-2024-131
7.5 (3.1)
Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash a… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.485379+00:00
pysec-2024-130
7.5 (3.1)
FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runt… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.427583+00:00
pysec-2024-129
7.5 (3.1)
FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash… paddlepaddle 2024-01-03T09:15:00+00:00 2024-11-21T14:22:57.364643+00:00
pysec-2023-271
5.3 (3.1)
Hail is an open-source, general-purpose, Python-based data analysis tool with additional … hail 2023-12-29T17:16:00+00:00 2024-11-21T14:22:51.672042+00:00
pysec-2023-259
9.8 (3.1)
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1… micropython-select 2023-12-29T05:15:00+00:00 2024-02-29T07:20:31.851255+00:00
pysec-2023-258
9.8 (3.1)
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1… micropython-os 2023-12-29T05:15:00+00:00 2024-02-29T07:20:31.721783+00:00
pysec-2023-257
9.8 (3.1)
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1… micropython-io 2023-12-29T05:15:00+00:00 2024-02-29T07:20:31.603749+00:00
pysec-2023-256
9.8 (3.1)
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1… micropython-copy 2023-12-29T05:15:00+00:00 2024-02-29T07:20:31.464203+00:00
pysec-2023-248
6.1 (3.1)
An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows at… flask-security-too 2023-12-26T22:15:00+00:00 2024-01-17T11:19:18.188431+00:00
pysec-2023-279
9.1 (3.1)
MindsDB is a SQL Server for artificial intelligence. Prior to version 23.11.4.1, the `put… mindsdb 2023-12-22T21:15:00+00:00 2024-11-21T14:22:54.549778+00:00
pysec-2023-249
7.5 (3.1)
Gradio is an open-source Python package that allows you to quickly build a demo or web ap… gradio 2023-12-22T21:15:00+00:00 2024-01-17T11:19:18.252182+00:00
pysec-2023-287
4.3 (3.1)
Nautobot is a Network Source of Truth and Network Automation Platform built as a web appl… nautobot 2023-12-22T17:15:00+00:00 2024-11-21T14:22:55.764934+00:00
pysec-2023-267
6.5 (3.1)
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an auth… apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.744438+00:00
ID Description Updated
ID Description Published Updated
MAL-2026-784 Malicious code in monkey-tags (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-783 Malicious code in adobe_pipeline_test (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-782 Malicious code in ac-polyfills (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-781 Malicious code in ac-feature (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-780 Malicious code in ac-element-engagement (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-779 Malicious code in ac-dom-styles (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-778 Malicious code in ac-dom-nodes (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-777 Malicious code in ac-dom-events (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-776 Malicious code in ac-checksum (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
MAL-2026-775 Malicious code in ac-array (npm) 2026-02-06T02:07:02Z 2026-02-06T02:07:02Z
mal-2026-774 Malicious code in adminbypasser (PyPI) 2026-02-06T01:15:08Z 2026-02-06T01:15:08Z
MAL-2026-774 Malicious code in adminbypasser (PyPI) 2026-02-06T01:15:08Z 2026-02-06T01:15:08Z
mal-2026-773 Malicious code in ethers-lint (npm) 2026-02-05T21:21:25Z 2026-02-06T03:05:23Z
MAL-2026-773 Malicious code in ethers-lint (npm) 2026-02-05T21:21:25Z 2026-02-06T03:05:23Z
mal-2026-771 Malicious code in test-npm-style (npm) 2026-02-05T19:06:12Z 2026-02-06T03:05:27Z
MAL-2026-771 Malicious code in test-npm-style (npm) 2026-02-05T19:06:12Z 2026-02-06T03:05:27Z
mal-2026-770 Malicious code in xpack-per-user (npm) 2026-02-05T18:36:26Z 2026-02-06T03:05:27Z
MAL-2026-770 Malicious code in xpack-per-user (npm) 2026-02-05T18:36:26Z 2026-02-06T03:05:27Z
mal-2026-768 Malicious code in debug-logger-utils (npm) 2026-02-05T17:31:41Z 2026-02-06T03:05:23Z
MAL-2026-768 Malicious code in debug-logger-utils (npm) 2026-02-05T17:31:41Z 2026-02-06T03:05:23Z
mal-2026-767 Malicious code in 0xhash-utils (npm) 2026-02-05T17:29:50Z 2026-02-06T03:05:21Z
MAL-2026-767 Malicious code in 0xhash-utils (npm) 2026-02-05T17:29:50Z 2026-02-06T03:05:21Z
mal-2026-769 Malicious code in https-servers (npm) 2026-02-05T17:28:15Z 2026-02-06T03:05:24Z
MAL-2026-769 Malicious code in https-servers (npm) 2026-02-05T17:28:15Z 2026-02-06T03:05:24Z
mal-2026-766 Malicious code in greeter-pro-test (PyPI) 2026-02-05T16:40:51Z 2026-02-05T16:40:56Z
MAL-2026-766 Malicious code in greeter-pro-test (PyPI) 2026-02-05T16:40:51Z 2026-02-05T16:40:56Z
mal-2026-765 Malicious code in optimizer-cpu (npm) 2026-02-05T16:05:05Z 2026-02-06T03:05:25Z
MAL-2026-765 Malicious code in optimizer-cpu (npm) 2026-02-05T16:05:05Z 2026-02-06T03:05:25Z
mal-2026-764 Malicious code in chai-as-advanced (npm) 2026-02-05T14:54:55Z 2026-02-06T03:05:23Z
MAL-2026-764 Malicious code in chai-as-advanced (npm) 2026-02-05T14:54:55Z 2026-02-06T03:05:23Z
ID Description Published Updated
wid-sec-w-2025-2379 Dell BIOS: Schwachstelle ermöglicht Manipulation von Daten 2025-10-21T22:00:00.000+00:00 2025-11-24T23:00:00.000+00:00
wid-sec-w-2025-2375 Google Chrome: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-10-21T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2370 Oracle Systems: Mehrere Schwachstellen 2025-10-21T22:00:00.000+00:00 2025-11-17T23:00:00.000+00:00
wid-sec-w-2025-2365 Oracle Java SE: Mehrere Schwachstellen 2025-10-21T22:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
wid-sec-w-2025-2363 Oracle MySQL: Mehrere Schwachstellen 2025-10-21T22:00:00.000+00:00 2025-11-20T23:00:00.000+00:00
wid-sec-w-2025-2361 Oracle Communications: Mehrere Schwachstellen 2025-10-21T22:00:00.000+00:00 2025-11-17T23:00:00.000+00:00
wid-sec-w-2025-2360 Oracle Communications Applications: Mehrere Schwachstellen 2025-10-21T22:00:00.000+00:00 2025-11-17T23:00:00.000+00:00
wid-sec-w-2025-2350 Linux Kernel: Mehrere Schwachstellen 2025-10-20T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2344 Checkmk: Schwachstelle ermöglicht Cross-Site Scripting 2025-10-20T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2340 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-19T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2339 ImageMagick (BMP decoder): Schwachstelle ermöglicht Denial of Service 2025-10-19T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2334 Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen 2025-10-16T22:00:00.000+00:00 2025-11-02T23:00:00.000+00:00
wid-sec-w-2025-2327 binutils: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-16T22:00:00.000+00:00 2025-12-01T23:00:00.000+00:00
wid-sec-w-2025-2325 xpdf: Schwachstelle ermöglicht Denial of Service 2025-10-16T22:00:00.000+00:00 2025-12-16T23:00:00.000+00:00
wid-sec-w-2025-2322 Samba: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-10-19T22:00:00.000+00:00
wid-sec-w-2025-2317 Ubiquiti UniFi: Schwachstelle ermöglicht Ausführung von Debug-Funktionen 2025-10-15T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2315 Mattermost Server und Mobile: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2314 HCL BigFix: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2313 IBM App Connect Enterprise: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2312 Cisco Mehrere Produkte: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2311 Red Hat Enterprise Linux (libsoup3): Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-15T22:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2310 F5 BIG-IP und F5OS: Mehrere Schwachstellen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2309 Cisco TelePresence: Schwachstelle ermöglicht Offenlegung von Informationen 2025-10-15T22:00:00.000+00:00 2025-10-15T22:00:00.000+00:00
wid-sec-w-2025-2307 Microsoft Windows: Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2025-11-05T23:00:00.000+00:00
wid-sec-w-2025-2305 Ivanti Endpoint Manager (Admin Panel): Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2025-10-16T22:00:00.000+00:00
wid-sec-w-2025-2301 Red Hat Enterprise Linux: Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2025-12-16T23:00:00.000+00:00
wid-sec-w-2025-2298 Linux Kernel: Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2275 Mozilla Firefox: Mehrere Schwachstellen 2025-10-14T22:00:00.000+00:00 2025-10-29T23:00:00.000+00:00
wid-sec-w-2025-2274 Veeam Backup & Replication: Mehrere Schwachstellen 2025-10-13T22:00:00.000+00:00 2025-10-30T23:00:00.000+00:00
wid-sec-w-2025-2272 Moodle: Mehrere Schwachstellen 2025-10-13T22:00:00.000+00:00 2025-10-23T22:00:00.000+00:00
ID Description Published Updated
ncsc-2025-0169 Kwetsbaarheden verholpen in Google Chrome 2025-05-16T12:41:47.685095Z 2025-05-16T12:41:47.685095Z
ncsc-2025-0168 Kwetsbaarheid verholpen in FortiVoice 2025-05-14T13:50:54.001151Z 2025-05-14T13:50:54.001151Z
ncsc-2025-0167 Kwetsbaarheden verholpen in Zoho ManageEngine 2025-05-14T13:19:58.768414Z 2025-05-14T13:19:58.768414Z
ncsc-2025-0166 Kwetsbaarheden verholpen in Fortinet producten 2025-05-14T08:41:08.980708Z 2025-05-14T08:41:08.980708Z
ncsc-2025-0165 Kwetsbaarheid verholpen in Adobe Illustrator 2025-05-14T08:25:17.869407Z 2025-05-14T08:25:17.869407Z
ncsc-2025-0164 Kwetsbaarheden verholpen in Adobe Photoshop 2025-05-14T08:24:02.186984Z 2025-05-14T08:24:02.186984Z
ncsc-2025-0163 Kwetsbaarheden verholpen in Adobe Animate 2025-05-14T08:21:49.917725Z 2025-05-14T08:21:49.917725Z
ncsc-2025-0162 Kwetsbaarheden verholpen in Adobe ColdFusion 2025-05-14T08:18:54.775740Z 2025-05-14T08:18:54.775740Z
ncsc-2025-0161 Kwetsbaarheid verholpen in Ivanti Neurons for ITSM 2025-05-14T08:16:04.867590Z 2025-05-14T08:16:04.867590Z
ncsc-2025-0160 Kwetsbaarheden verholpen in Siemens producten 2025-05-14T07:13:32.957900Z 2025-05-14T07:13:32.957900Z
ncsc-2025-0159 Kwetsbaarheden verholpen in Microsoft Windows 2025-05-13T19:47:12.555983Z 2025-05-13T19:47:12.555983Z
ncsc-2025-0158 Kwetsbaarheden verholpen in Microsoft Edge 2025-05-13T19:17:52.478234Z 2025-05-13T19:17:52.478234Z
ncsc-2025-0157 Kwetsbaarheden verholpen in Microsoft Defender 2025-05-13T19:14:25.545635Z 2025-05-13T19:14:25.545635Z
ncsc-2025-0156 Kwetsbaarheden verholpen in Microsoft Azure 2025-05-13T19:10:10.012472Z 2025-05-13T19:10:10.012472Z
ncsc-2025-0155 Kwetsbaarheden verholpen in Microsoft Office 2025-05-13T18:58:56.989073Z 2025-05-13T18:58:56.989073Z
ncsc-2025-0154 Kwetsbaarheden verholpen in Microsoft Dynamics Dataverse 2025-05-13T18:44:03.290810Z 2025-05-13T18:44:03.290810Z
ncsc-2025-0153 Kwetsbaarheden verholpen in Microsoft Developer Tools 2025-05-13T18:35:28.760017Z 2025-05-13T18:35:28.760017Z
ncsc-2025-0152 Kwetsbaarheden verholpen in Ivanti Endpoint Manager Mobile (EPMM, voormalig MobileIron) 2025-05-13T15:35:45.784542Z 2025-05-16T09:42:15.822544Z
ncsc-2025-0151 Kwetsbaarheden verholpen in Apple macOS 2025-05-13T09:19:37.094950Z 2025-05-13T09:19:37.094950Z
ncsc-2025-0150 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2025-05-13T09:14:44.606584Z 2025-05-13T09:14:44.606584Z
ncsc-2025-0149 Kwetsbaarheden verholpen in SAP producten 2025-05-13T09:05:38.110295Z 2025-05-13T09:05:38.110295Z
ncsc-2025-0148 Kwetsbaarheden verholpen in ASUS DriverHub 2025-05-12T13:22:18.034442Z 2025-05-12T13:22:18.034442Z
ncsc-2025-0147 Kwetsbaarheden verholpen in F5 BIG-IP 2025-05-09T08:07:32.002935Z 2025-05-09T08:07:32.002935Z
ncsc-2025-0146 Kwetsbaarheden verholpen in Cisco IOS XE Software 2025-05-08T08:43:57.415709Z 2025-05-08T08:43:57.415709Z
ncsc-2025-0145 Kwetsbaarheden verholpen in SonicWall SMA100 2025-05-08T08:40:26.301646Z 2025-05-08T08:40:26.301646Z
ncsc-2025-0144 Kwetsbaarheden verholpen in SysAid On-Prem 2025-05-08T06:56:21.378830Z 2025-05-08T06:56:21.378830Z
ncsc-2025-0143 Kwetsbaarheden verholpen in Google Android en Samsung Mobile 2025-05-07T11:19:50.517092Z 2025-05-07T11:19:50.517092Z
ncsc-2025-0142 Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird 2025-05-06T08:01:05.582708Z 2025-05-06T08:01:05.582708Z
ncsc-2025-0141 Kwetsbaarheden verholpen in Keycloak 2025-05-06T07:12:42.075830Z 2025-05-06T07:12:42.075830Z
ncsc-2025-0140 Kwetsbaarheden verholpen in Apple AirPlay zoals gebruikt door macOS, iOS en iPadOS 2025-04-30T08:45:31.426155Z 2025-04-30T08:45:31.426155Z
ID Description Published Updated
ssa-516818 SSA-516818: TCP Sequence Number Validation Vulnerability in the TCP/IP Stack of CP343-1 Devices 2024-02-13T00:00:00Z 2024-02-13T00:00:00Z
ssa-108696 SSA-108696: Multiple Vulnerabilities in SIDIS Prime before V4.0.400 2024-02-13T00:00:00Z 2024-02-13T00:00:00Z
ssa-017796 SSA-017796: Multiple File Parsing Vulnerabilities in Tecnomatix Plant Simulation 2024-02-13T00:00:00Z 2024-02-13T00:00:00Z
ssa-000072 SSA-000072: Multiple File Parsing Vulnerabilities in Simcenter Femap 2024-02-13T00:00:00Z 2024-03-12T00:00:00Z
ssa-794653 SSA-794653: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go 2024-01-09T00:00:00Z 2024-01-09T00:00:00Z
ssa-786191 SSA-786191: Local Privilege Escalation Vulnerability in Spectrum Power 7 2024-01-09T00:00:00Z 2024-01-09T00:00:00Z
ssa-777015 SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 2024-01-09T00:00:00Z 2024-01-09T00:00:00Z
ssa-702935 SSA-702935: Redfish Server Vulnerability in maxView Storage Manager 2024-01-09T00:00:00Z 2024-01-09T00:00:00Z
ssa-589891 SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge 2024-01-09T00:00:00Z 2024-01-09T00:00:00Z
ssa-583634 SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices 2024-01-09T00:00:00Z 2024-01-09T00:00:00Z
ssa-999588 SSA-999588: Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2 2023-12-12T00:00:00Z 2025-01-14T00:00:00Z
ssa-892915 SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products 2023-12-12T00:00:00Z 2023-12-12T00:00:00Z
ssa-887801 SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) 2023-12-12T00:00:00Z 2023-12-12T00:00:00Z
ssa-844582 SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA 2023-12-12T00:00:00Z 2024-10-08T00:00:00Z
ssa-693975 SSA-693975: Denial-of-Service Vulnerability in the Web Server of Industrial Products 2023-12-12T00:00:00Z 2024-03-12T00:00:00Z
ssa-592380 SSA-592380: Denial of Service Vulnerability in SIMATIC S7-1500 CPUs and related products 2023-12-12T00:00:00Z 2024-05-14T00:00:00Z
ssa-480095 SSA-480095: Vulnerabilities in the Web Interface of SICAM Q100 Devices before V2.60 2023-12-12T00:00:00Z 2024-01-09T00:00:00Z
ssa-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 2023-12-12T00:00:00Z 2025-08-12T00:00:00Z
ssa-280603 SSA-280603: Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC 2023-12-12T00:00:00Z 2024-09-10T00:00:00Z
ssa-180704 SSA-180704: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0 2023-12-12T00:00:00Z 2024-08-13T00:00:00Z
ssa-118850 SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC 2023-12-12T00:00:00Z 2023-12-12T00:00:00Z
ssa-077170 SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 2023-12-12T00:00:00Z 2023-12-12T00:00:00Z
ssa-068047 SSA-068047: Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2 2023-12-12T00:00:00Z 2024-08-13T00:00:00Z
ssa-887122 SSA-887122: X_T File Parsing Vulnerabilities in Simcenter Femap 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-699386 SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5 2023-11-14T00:00:00Z 2024-03-12T00:00:00Z
ssa-625850 SSA-625850: Multiple WIBU Systems CodeMeter Vulnerabilities Affecting the Desigo CC Product Family and SENTRON powermanager 2023-11-14T00:00:00Z 2024-08-13T00:00:00Z
ssa-617233 SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-478780 SSA-478780: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-457702 SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family 2023-11-14T00:00:00Z 2024-04-09T00:00:00Z
ssa-456933 SSA-456933: Multiple Vulnerabilities in SIMATIC PCS neo before V4.1 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ID Description Published Updated
rhsa-2026:1727 Red Hat Security Advisory: kernel security update 2026-02-02T15:41:49+00:00 2026-02-17T07:23:50+00:00
rhsa-2026:1726 Red Hat Security Advisory: python-urllib3 security update 2026-02-02T15:25:44+00:00 2026-02-17T09:49:47+00:00
rhsa-2026:1720 Red Hat Security Advisory: openssl security update 2026-02-02T14:43:39+00:00 2026-02-04T01:03:36+00:00
rhsa-2026:1717 Red Hat Security Advisory: fence-agents security update 2026-02-02T14:17:19+00:00 2026-02-17T09:49:47+00:00
rhsa-2026:1719 Red Hat Security Advisory: gnupg2 security update 2026-02-02T14:09:38+00:00 2026-02-11T15:13:29+00:00
rhsa-2026:1715 Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update 2026-02-02T13:10:53+00:00 2026-02-17T09:49:47+00:00
rhsa-2026:1712 Red Hat Security Advisory: python3.11-urllib3 security update 2026-02-02T13:10:47+00:00 2026-02-17T09:49:47+00:00
rhsa-2026:1714 Red Hat Security Advisory: wireshark security update 2026-02-02T13:03:43+00:00 2026-02-17T02:18:39+00:00
rhsa-2026:1706 Red Hat Security Advisory: fence-agents security update 2026-02-02T12:38:43+00:00 2026-02-17T09:49:46+00:00
rhsa-2026:1704 Red Hat Security Advisory: python3.11-urllib3 security update 2026-02-02T11:50:53+00:00 2026-02-17T09:49:45+00:00
rhsa-2026:1705 Red Hat Security Advisory: gnupg2 security update 2026-02-02T11:41:03+00:00 2026-02-11T15:13:27+00:00
rhsa-2026:1703 Red Hat Security Advisory: kernel security update 2026-02-02T11:40:43+00:00 2026-02-12T19:28:10+00:00
rhsa-2026:1702 Red Hat Security Advisory: fence-agents security update 2026-02-02T10:57:18+00:00 2026-02-17T09:27:37+00:00
rhsa-2026:1701 Red Hat Security Advisory: fence-agents security update 2026-02-02T10:53:47+00:00 2026-02-17T09:27:37+00:00
rhsa-2026:1696 Red Hat Security Advisory: util-linux security update 2026-02-02T10:18:28+00:00 2026-02-17T09:27:37+00:00
rhsa-2026:1690 Red Hat Security Advisory: kernel security update 2026-02-02T10:10:13+00:00 2026-02-17T07:23:40+00:00
rhsa-2026:1693 Red Hat Security Advisory: python-urllib3 security update 2026-02-02T10:02:03+00:00 2026-02-17T09:49:45+00:00
rhsa-2026:1617 Red Hat Security Advisory: kernel security update 2026-02-02T09:30:38+00:00 2026-02-12T19:28:03+00:00
rhsa-2026:1678 Red Hat Security Advisory: openssh security update 2026-02-02T08:15:22+00:00 2026-02-03T20:56:57+00:00
rhsa-2026:1677 Red Hat Security Advisory: gnupg2 security update 2026-02-02T07:37:37+00:00 2026-02-11T15:13:27+00:00
rhsa-2026:1676 Red Hat Security Advisory: python3.11-urllib3 security update 2026-02-02T06:53:02+00:00 2026-02-17T09:49:44+00:00
rhsa-2026:1674 Red Hat Security Advisory: python-urllib3 security update 2026-02-02T06:47:53+00:00 2026-02-17T09:49:44+00:00
rhsa-2026:1662 Red Hat Security Advisory: kernel security update 2026-02-02T04:06:07+00:00 2026-02-17T07:23:39+00:00
rhsa-2026:1661 Red Hat Security Advisory: kernel-rt security update 2026-02-02T03:27:17+00:00 2026-02-17T07:23:39+00:00
rhsa-2026:1652 Red Hat Security Advisory: Red Hat Ceph Storage 2026-02-02T02:51:27+00:00 2026-02-17T09:49:44+00:00
rhsa-2026:1631 Red Hat Security Advisory: python3 security update 2026-02-02T02:14:51+00:00 2026-02-16T14:15:03+00:00
rhsa-2026:1619 Red Hat Security Advisory: python3.12-urllib3 security update 2026-02-02T01:58:41+00:00 2026-02-17T09:49:43+00:00
rhsa-2026:1629 Red Hat Security Advisory: gnupg2 security update 2026-02-02T01:57:21+00:00 2026-02-11T15:13:30+00:00
rhsa-2026:1628 Red Hat Security Advisory: php security update 2026-02-02T01:57:01+00:00 2026-02-11T01:04:00+00:00
rhsa-2026:1608 Red Hat Security Advisory: glib2 security update 2026-02-02T01:55:56+00:00 2026-02-13T19:06:52+00:00
ID Description Published Updated
icsa-25-205-04 LG Innotek Camera Model LNV5110R 2025-07-25T05:00:00.000000Z 2025-07-25T05:00:00.000000Z
icsma-25-205-01 Medtronic MyCareLink Patient Monitor 2025-07-24T06:00:00.000000Z 2025-07-24T06:00:00.000000Z
icsa-25-205-03 Honeywell Experion PKS (Update A) 2025-07-24T06:00:00.000000Z 2025-08-04T06:00:00.000000Z
icsa-25-205-02 Network Thermostat X-Series WiFi Thermostats 2025-07-24T06:00:00.000000Z 2025-07-24T06:00:00.000000Z
icsa-25-205-01 Mitsubishi Electric CNC Series (Update B) 2025-07-24T06:00:00.000000Z 2026-01-29T07:00:00.000000Z
icsa-25-203-04 Schneider Electric EcoStruxure Power Operation 2025-07-22T06:00:00.000000Z 2025-07-22T06:00:00.000000Z
icsa-25-203-02 Lantronix Provisioning Manager 2025-07-22T06:00:00.000000Z 2025-07-22T06:00:00.000000Z
icsa-25-203-01 DuraComm DP-10iN-100-MU 2025-07-22T06:00:00.000000Z 2025-07-22T06:00:00.000000Z
icsma-25-198-01 Panoramic Corporation Digital Imaging Software 2025-07-17T06:00:00.000000Z 2025-07-17T06:00:00.000000Z
icsa-25-198-01 Leviton AcquiSuite and Energy Monitoring Hub 2025-07-17T06:00:00.000000Z 2025-07-17T06:00:00.000000Z
icsa-25-196-03 LITEON IC48A and IC80A EV Chargers 2025-07-15T06:00:00.000000Z 2025-07-15T06:00:00.000000Z
icsa-25-196-02 ABB RMC-100 2025-07-15T06:00:00.000000Z 2025-07-15T06:00:00.000000Z
icsa-25-191-10 End-of-Train and Head-of-Train Remote Linking Protocol (Update C) 2025-07-10T06:00:00.000000Z 2025-09-18T06:00:00.000000Z
icsa-25-191-09 KUNBUS RevPi Webstatus 2025-07-10T06:00:00.000000Z 2025-07-10T06:00:00.000000Z
icsa-25-191-08 Advantech iView 2025-07-10T06:00:00.000000Z 2025-07-10T06:00:00.000000Z
icsa-25-191-07 Delta Electronics DTM Soft 2025-07-10T06:00:00.000000Z 2025-07-10T06:00:00.000000Z
icsa-25-189-01 Emerson ValveLink Products 2025-07-08T06:00:00.000000Z 2025-07-08T06:00:00.000000Z
icsa-25-203-06 Schneider Electric EcoStruxture IT Data Center Expert 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-203-05 Schneider Electric System Monitor Application 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-203-03 Schneider Electric EcoStruxure 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-294-04 Siemens RUGGEDCOM ROS Devices 2025-07-08T00:00:00.000000Z 2025-10-14T00:00:00.000000Z
icsa-25-191-06 Siemens SIPROTEC 5 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-05 Siemens TIA Project-Server and TIA Portal 2025-07-08T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-191-04 Siemens SIMATIC CN 4100 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-03 Siemens TIA Administrator 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-02 Siemens Solid Edge 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-01 Siemens SINEC NMS 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-184-04 Mitsubishi Electric MELSEC iQ-F Series 2025-07-03T06:00:00.000000Z 2025-07-03T06:00:00.000000Z
icsa-25-184-03 Mitsubishi Electric MELSOFT Update Manager (Update B) 2025-07-03T06:00:00.000000Z 2026-02-05T07:00:00.000000Z
icsa-25-184-02 Hitachi Energy MicroSCADA X SYS600 2025-07-03T06:00:00.000000Z 2025-07-03T06:00:00.000000Z
ID Description Published Updated
cisco-sa-ise-rest-5bpkrntz Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities 2024-08-21T16:00:00+00:00 2024-08-22T15:15:53+00:00
cisco-sa-ise-info-exp-vdf8jbyk Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability 2024-08-21T16:00:00+00:00 2024-09-05T13:14:02+00:00
cisco-sa-ise-csrf-y4zuz5rj Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability 2024-08-21T16:00:00+00:00 2024-08-21T16:00:00+00:00
cisco-sa-cucm-xss-9zmfhyz Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 2024-08-21T16:00:00+00:00 2024-09-20T15:48:56+00:00
cisco-sa-cucm-dos-kkhq43we Cisco Unified Communications Manager Denial of Service Vulnerability 2024-08-21T16:00:00+00:00 2024-08-21T16:00:00+00:00
cisco-sa-spa-http-vulns-rjzmx2xz Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities 2024-08-07T16:00:00+00:00 2024-08-07T16:00:00+00:00
cisco-sa-ise-xss-v2bm9jcy Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities 2024-08-07T16:00:00+00:00 2024-08-07T16:00:00+00:00
cisco-sa-webex-app-zjnm8x8j Cisco Webex App Vulnerabilities 2024-07-17T16:00:00+00:00 2024-07-17T16:00:00+00:00
cisco-sa-swa-priv-esc-7uhpzscc Cisco Secure Web Appliance Privilege Escalation Vulnerability 2024-07-17T16:00:00+00:00 2024-11-22T17:13:56+00:00
cisco-sa-sb-rv34x-rce-7pqfu2e Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerability 2024-07-17T16:00:00+00:00 2024-07-17T16:00:00+00:00
cisco-sa-ise-file-upload-krw2txa9 Cisco Identity Services Engine Arbitrary File Upload Vulnerability 2024-07-17T16:00:00+00:00 2024-07-17T16:00:00+00:00
cisco-sa-inode-static-key-vuvceynn Cisco Intelligent Node Software Static Key Vulnerability 2024-07-17T16:00:00+00:00 2024-07-17T16:00:00+00:00
cisco-sa-expressway-redirect-kjsfuxgj Cisco Expressway Series Open Redirect Vulnerability 2024-07-17T16:00:00+00:00 2024-07-17T16:00:00+00:00
cisco-sa-esa-priv-esc-ssti-xno2eogz Cisco Secure Email Gateway Server-Side Template Injection Vulnerability 2024-07-17T16:00:00+00:00 2024-07-17T16:00:00+00:00
cisco-sa-esa-afw-bgg2usjh Cisco Secure Email Gateway Arbitrary File Write Vulnerability 2024-07-17T16:00:00+00:00 2024-07-17T16:00:00+00:00
cisco-sa-cssm-auth-slw3uhuy Cisco Smart Software Manager On-Prem Password Change Vulnerability 2024-07-17T16:00:00+00:00 2024-08-07T14:54:52+00:00
cisco-sa-xr-secure-boot-qud5g8ap Cisco IOS XR Software Secure Boot Bypass Vulnerability 2024-07-10T16:00:00+00:00 2024-07-10T16:00:00+00:00
cisco-sa-radius-spoofing-july-2024-87ccdwz3 RADIUS Protocol Spoofing Vulnerability (Blast-RADIUS): July 2024 2024-07-10T16:00:00+00:00 2024-09-03T14:10:25+00:00
cisco-sa-openssh-rce-2024 Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024 2024-07-02T16:00:00+00:00 2024-09-13T14:43:44+00:00
cisco-sa-nxos-cmd-injection-xd9ohyop Cisco NX-OS Software CLI Command Injection Vulnerability 2024-07-01T16:00:00+00:00 2024-09-17T18:05:20+00:00
cisco-sa-finesse-ssrf-rfi-um7wt8ew Cisco Finesse Web-Based Management Interface Vulnerabilities 2024-06-05T16:00:00+00:00 2024-06-14T21:44:14+00:00
cisco-sa-webex-june-2024 Cisco Webex Meetings Meeting Information and Metadata Issue June 2024 2024-06-04T21:00:00+00:00 2024-06-11T19:41:36+00:00
cisco-sa-snort3-ips-bypass-ue69kbmd Multiple Cisco Products Snort 3 HTTP Intrusion Prevention System Rule Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-ftd-archive-bypass-z4wqjwcn Cisco Firepower Threat Defense Software Encrypted Archive File Policy Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-fmc-sqli-wffdnnos Cisco Firepower Management Center Software SQL Injection Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T17:39:28+00:00
cisco-sa-fmc-object-bypass-fth8tdjq Cisco Firepower Management Center Software Object Group Access Control List Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-asaftd-saml-bypass-kknvxykw Cisco Adaptive Security Appliance and Firepower Threat Defense Software Authorization Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-asaftd-ogsnsg-aclbyp-3xb8q6jx Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-opendns-pulse-dos-dd8l3szq Cisco OpenDNS Pulsing DNS Denial of Service Attack 2024-05-20T16:00:00+00:00 2024-05-23T16:28:32+00:00
cisco-sa-secure-nam-priv-esc-szu2vypz Cisco Secure Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
ID Description Published Updated
msrc_cve-2025-68346 ALSA: dice: fix buffer overflow in detect_stream_formats() 2025-12-02T00:00:00.000Z 2026-01-08T01:40:11.000Z
msrc_cve-2025-68345 ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() 2025-12-02T00:00:00.000Z 2025-12-26T14:36:11.000Z
msrc_cve-2025-68344 ALSA: wavefront: Fix integer overflow in sample size validation 2025-12-02T00:00:00.000Z 2025-12-26T14:37:04.000Z
msrc_cve-2025-68343 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header 2025-12-02T00:00:00.000Z 2026-01-07T14:41:20.000Z
msrc_cve-2025-68342 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data 2025-12-02T00:00:00.000Z 2026-01-07T14:41:13.000Z
msrc_cve-2025-68340 team: Move team device type change at the end of team_port_add 2025-12-02T00:00:00.000Z 2025-12-24T01:04:51.000Z
msrc_cve-2025-68339 atm/fore200e: Fix possible data race in fore200e_open() 2025-12-02T00:00:00.000Z 2026-01-07T14:41:07.000Z
msrc_cve-2025-68338 net: dsa: microchip: Don't free uninitialized ksz_irq 2025-12-02T00:00:00.000Z 2025-12-24T01:04:35.000Z
msrc_cve-2025-68337 jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted 2025-12-02T00:00:00.000Z 2025-12-24T01:01:30.000Z
msrc_cve-2025-68336 locking/spinlock/debug: Fix data-race in do_raw_write_lock 2025-12-02T00:00:00.000Z 2025-12-24T01:01:57.000Z
msrc_cve-2025-68335 comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() 2025-12-02T00:00:00.000Z 2025-12-24T01:01:41.000Z
msrc_cve-2025-68334 platform/x86/amd/pmc: Add support for Van Gogh SoC 2025-12-02T00:00:00.000Z 2025-12-24T01:02:13.000Z
msrc_cve-2025-68333 sched_ext: Fix possible deadlock in the deferred_irq_workfn() 2025-12-02T00:00:00.000Z 2025-12-24T01:01:51.000Z
msrc_cve-2025-68332 comedi: c6xdigio: Fix invalid PNP driver unregistration 2025-12-02T00:00:00.000Z 2025-12-24T01:01:35.000Z
msrc_cve-2025-68331 usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer 2025-12-02T00:00:00.000Z 2026-01-07T14:40:40.000Z
msrc_cve-2025-68330 iio: accel: bmc150: Fix irq assumption regression 2025-12-02T00:00:00.000Z 2026-01-07T14:40:53.000Z
msrc_cve-2025-68328 firmware: stratix10-svc: fix bug in saving controller data 2025-12-02T00:00:00.000Z 2026-01-07T14:41:00.000Z
msrc_cve-2025-68327 usb: renesas_usbhs: Fix synchronous external abort on unbind 2025-12-02T00:00:00.000Z 2026-01-07T14:40:47.000Z
msrc_cve-2025-68324 scsi: imm: Fix use-after-free bug caused by unfinished delayed work 2025-12-02T00:00:00.000Z 2025-12-20T01:01:19.000Z
msrc_cve-2025-68322 parisc: Avoid crash due to unaligned access in unwinder 2025-12-02T00:00:00.000Z 2025-12-18T01:02:37.000Z
msrc_cve-2025-68318 clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL 2025-12-02T00:00:00.000Z 2025-12-18T01:03:46.000Z
msrc_cve-2025-68317 io_uring/zctx: check chained notif contexts 2025-12-02T00:00:00.000Z 2025-12-18T01:03:25.000Z
msrc_cve-2025-68315 f2fs: fix to detect potential corrupted nid in free_nid_list 2025-12-02T00:00:00.000Z 2025-12-18T01:04:13.000Z
msrc_cve-2025-68313 x86/CPU/AMD: Add RDSEED fix for Zen5 2025-12-02T00:00:00.000Z 2025-12-18T01:02:58.000Z
msrc_cve-2025-68311 tty: serial: ip22zilog: Use platform device for probing 2025-12-02T00:00:00.000Z 2026-01-08T01:38:46.000Z
msrc_cve-2025-68309 PCI/AER: Fix NULL pointer access by aer_info 2025-12-02T00:00:00.000Z 2025-12-18T01:03:30.000Z
msrc_cve-2025-68308 can: kvaser_usb: leaf: Fix potential infinite loop in command parsers 2025-12-02T00:00:00.000Z 2026-01-07T14:40:11.000Z
msrc_cve-2025-68307 can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs 2025-12-02T00:00:00.000Z 2026-01-07T14:39:31.000Z
msrc_cve-2025-68304 Bluetooth: hci_core: lookup hci_conn on RX path on protocol side 2025-12-02T00:00:00.000Z 2025-12-18T01:03:36.000Z
msrc_cve-2025-68303 platform/x86: intel: punit_ipc: fix memory corruption 2025-12-02T00:00:00.000Z 2026-01-08T01:38:41.000Z
ID Description Published Updated
opensuse-su-2025:15813-1 MozillaFirefox-146.0-1.1 on GA media 2025-12-11T00:00:00Z 2025-12-11T00:00:00Z
opensuse-su-2025:15812-1 libpoppler-cpp2-25.09.1-4.1 on GA media 2025-12-10T00:00:00Z 2025-12-10T00:00:00Z
opensuse-su-2025:15811-1 keylime-config-7.13.0+40-1.1 on GA media 2025-12-10T00:00:00Z 2025-12-10T00:00:00Z
opensuse-su-2025:15810-1 gio-branding-upstream-2.86.3-1.1 on GA media 2025-12-10T00:00:00Z 2025-12-10T00:00:00Z
opensuse-su-2025:15809-1 firefox-esr-140.6.0-1.1 on GA media 2025-12-10T00:00:00Z 2025-12-10T00:00:00Z
opensuse-su-2025:15808-1 apache2-2.4.66-1.1 on GA media 2025-12-10T00:00:00Z 2025-12-10T00:00:00Z
opensuse-su-2025:20148-1 Security update for openexr 2025-12-09T16:32:45Z 2025-12-09T16:32:45Z
opensuse-su-2025:20153-1 Security update for python-Django 2025-12-09T13:43:55Z 2025-12-09T13:43:55Z
opensuse-su-2025:15807-1 regclient-0.11.1-1.1 on GA media 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
opensuse-su-2025:15806-1 python311-Django4-4.2.27-1.1 on GA media 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
opensuse-su-2025:15805-1 python311-Django-5.2.9-1.1 on GA media 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
opensuse-su-2025:15804-1 nvidia-open-driver-G07-signed-check-590.44.01-1.1 on GA media 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
opensuse-su-2025:15803-1 krb5-1.22.1-1.1 on GA media 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
opensuse-su-2025:15802-1 corepack24-24.11.1-2.1 on GA media 2025-12-08T00:00:00Z 2025-12-08T00:00:00Z
opensuse-su-2025:15801-1 libpng16-16-1.6.52-1.1 on GA media 2025-12-08T00:00:00Z 2025-12-08T00:00:00Z
opensuse-su-2025:15800-1 kdeconnect-kde-25.11.90-1.1 on GA media 2025-12-08T00:00:00Z 2025-12-08T00:00:00Z
opensuse-su-2025:15799-1 libwireshark19-4.6.2-1.1 on GA media 2025-12-05T00:00:00Z 2025-12-05T00:00:00Z
opensuse-su-2025:15798-1 rhino-1.7.15.1-1.1 on GA media 2025-12-05T00:00:00Z 2025-12-05T00:00:00Z
opensuse-su-2025:20143-1 Security update for git-bug 2025-12-04T13:08:26Z 2025-12-04T13:08:26Z
opensuse-su-2025:20138-1 Security update for act 2025-12-04T12:02:10Z 2025-12-04T12:02:10Z
opensuse-su-2025:15797-1 libpng12-0-1.2.59-4.1 on GA media 2025-12-04T00:00:00Z 2025-12-04T00:00:00Z
opensuse-su-2025:15796-1 go1.24-1.24.11-1.1 on GA media 2025-12-04T00:00:00Z 2025-12-04T00:00:00Z
opensuse-su-2025:20135-1 Security update for mozjs128 2025-12-03T20:41:04Z 2025-12-03T20:41:04Z
opensuse-su-2025-20135-1 Security update for mozjs128 2025-12-03T20:41:04Z 2025-12-03T20:41:04Z
opensuse-su-2025:15795-1 go1.25-1.25.5-1.1 on GA media 2025-12-03T00:00:00Z 2025-12-03T00:00:00Z
opensuse-su-2025:15794-1 chromedriver-143.0.7499.40-2.1 on GA media 2025-12-03T00:00:00Z 2025-12-03T00:00:00Z
opensuse-su-2025:20133-1 Security update for python-cbor2 2025-12-02T13:51:41Z 2025-12-02T13:51:41Z
opensuse-su-2025-20133-1 Security update for python-cbor2 2025-12-02T13:51:41Z 2025-12-02T13:51:41Z
opensuse-su-2025:20132-1 Security update for strongswan 2025-12-02T13:11:59Z 2025-12-02T13:11:59Z
opensuse-su-2025-20132-1 Security update for strongswan 2025-12-02T13:11:59Z 2025-12-02T13:11:59Z
ID Description Published Updated
osv-2024-1232 Segv on unknown address in cranelift_filetests::function_runner::Trampoline::call::hb2e77cf3a13ebaf4 2024-10-19T00:15:15.010866Z 2024-10-19T00:15:15.011237Z
osv-2024-1230 Heap-buffer-overflow in extract_rtpmap 2024-10-19T00:00:26.792754Z 2025-01-10T05:21:03.406469Z
osv-2024-1220 UNKNOWN READ in Assimp::NDOImporter::InternReadFile 2024-10-14T00:17:45.088625Z 2026-01-25T14:14:41.961973Z
osv-2024-1218 UNKNOWN READ in Poco::UTF16Encoding::queryConvert 2024-10-14T00:08:40.382545Z 2025-04-10T14:48:52.198172Z
osv-2024-1216 Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage 2024-10-13T00:11:43.323181Z 2025-03-18T00:32:42.736858Z
osv-2024-1212 Heap-buffer-overflow in cram_encode_container 2024-10-11T00:16:27.350249Z 2024-10-11T00:16:27.350643Z
osv-2024-1210 Heap-buffer-overflow in parse_mixed_content 2024-10-11T00:15:50.054920Z 2025-01-10T05:11:11.351763Z
osv-2024-1209 Heap-use-after-free in xmlValidateOneElement 2024-10-11T00:15:43.610812Z 2025-03-18T00:30:11.577855Z
osv-2024-1206 Heap-buffer-overflow in extract_sendrecv_mode 2024-10-11T00:13:47.835312Z 2025-01-10T05:11:09.130549Z
osv-2024-1205 Memcpy-param-overlap in repeat 2024-10-11T00:12:59.211479Z 2025-06-02T14:22:48.890155Z
osv-2024-1203 Global-buffer-overflow in AnnouncePunctuation 2024-10-11T00:02:53.598773Z 2024-10-11T00:02:53.599146Z
osv-2024-1201 Heap-buffer-overflow in polygonToCellsExperimental 2024-10-11T00:02:38.496890Z 2024-10-11T00:02:38.497374Z
osv-2024-1200 UNKNOWN READ in eat_line 2024-10-11T00:02:19.537501Z 2025-01-10T05:09:26.885831Z
osv-2024-1191 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII 2024-10-09T00:04:49.628226Z 2025-06-20T16:39:29.501730Z
osv-2024-1186 UNKNOWN READ in cfl_sds_len 2024-10-08T00:15:47.433219Z 2025-05-13T14:48:36.393777Z
osv-2024-1181 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2024-10-06T00:14:54.118103Z 2024-10-06T00:14:54.118486Z
osv-2024-1179 UNKNOWN READ in __dynamic_cast 2024-10-06T00:01:54.176437Z 2024-10-06T00:01:54.177068Z
osv-2024-1175 Use-of-uninitialized-value in mark_context 2024-10-04T00:14:55.661266Z 2024-10-04T00:14:55.661697Z
osv-2024-1164 Use-of-uninitialized-value in format_message 2024-10-02T00:13:05.449687Z 2025-04-05T14:45:16.595433Z
osv-2024-1161 Security exception in java.base/java.util.Arrays.copyOfRange 2024-10-01T00:13:59.667902Z 2024-10-01T00:13:59.668243Z
osv-2024-1159 Use-of-uninitialized-value in decompress_yuv.cc 2024-09-30T00:15:17.123309Z 2024-09-30T00:15:17.123644Z
osv-2024-1158 Use-of-uninitialized-value in format_message 2024-09-30T00:06:39.149467Z 2024-09-30T00:06:39.149753Z
osv-2024-1150 Heap-buffer-overflow in extract_mr_data 2024-09-29T00:02:55.188981Z 2024-09-29T00:02:55.189369Z
osv-2024-1149 Use-of-uninitialized-value in ultrahdr::uhdr_gainmap_metadata_frac::encodeGainmapMetadata 2024-09-29T00:02:09.713795Z 2024-09-29T00:02:09.714134Z
osv-2024-1145 Heap-buffer-overflow in ultrahdr::getYuv444Pixel 2024-09-26T00:02:03.373431Z 2024-09-26T00:02:03.374156Z
osv-2024-1144 Security exception in graphql.schema.GraphQLTypeUtil.simplePrint 2024-09-24T00:15:39.106189Z 2024-09-24T00:15:39.106491Z
osv-2024-1133 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2024-09-24T00:07:55.850153Z 2024-09-24T00:07:55.850498Z
osv-2024-1128 Segv on unknown address in udiv 2024-09-24T00:01:39.913285Z 2024-09-24T00:01:39.913799Z
osv-2024-1124 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac 2024-09-21T00:14:26.784483Z 2025-01-31T14:23:52.455197Z
osv-2024-1102 Security exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse 2024-09-19T00:06:40.360965Z 2024-09-19T00:06:40.361615Z
ID Description Published Updated
rustsec-2024-0434 Missing facility to signal rotation of a verified cryptographic identity 2024-01-07T12:00:00Z 2025-01-22T10:27:39Z
rustsec-2024-0005 Unsound sending of non-Send types across threads 2024-01-07T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2024-0002 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access 2024-01-02T12:00:00Z 2024-01-14T03:39:46Z
rustsec-2023-0075 Unaligned write of u64 on 32-bit and 16-bit platforms 2023-12-20T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0080 Buffer overflow due to integer overflow in `transpose` 2023-12-18T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0074 Some Ref methods are unsound with some type parameters 2023-12-14T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0073 Infinite decoding loop through specially crafted payload 2023-12-08T12:00:00Z 2023-12-09T10:05:32Z
rustsec-2023-0079 KyberSlash: division timings depending on secrets 2023-12-01T12:00:00Z 2024-04-12T21:07:31Z
rustsec-2023-0072 `openssl` `X509StoreRef::objects` is unsound 2023-11-23T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0096 Plaintext exposed in decrypt_in_place_detached even on tag verification failure 2023-11-22T12:00:00Z 2025-12-29T13:49:34Z
rustsec-2023-0071 Marvin Attack: potential key recovery through timing sidechannels 2023-11-22T12:00:00Z 2023-12-15T14:57:06Z
rustsec-2023-0076 `cpython` is unmaintained 2023-11-14T12:00:00Z 2023-12-20T22:34:55Z
rustsec-2023-0088 `loopdev` crate is unmaintained; use 'loopdev-3` instead. 2023-11-13T12:00:00Z 2024-11-10T16:18:40Z
rustsec-2023-0070 Insufficient covariance check makes self_cell unsound 2023-11-10T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0077 Remotely exploitable DoS condition in Rosenpass <=0.2.0 2023-11-04T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0069 sudo-rs: Path Traversal vulnerability 2023-11-01T12:00:00Z 2023-11-06T12:48:19Z
rustsec-2023-0094 `martin-mbtiles` has been renamed to `mbtiles` 2023-10-30T12:00:00Z 2025-09-14T19:19:34Z
rustsec-2023-0078 Potential stack use-after-free in `Instrumented::into_inner` 2023-10-19T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0068 Sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse 2023-10-15T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0087 `MaybeUninit` misuse in `simd-json-derive` 2023-10-14T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0067 `fehler` is unmaintained; use `culpa` instead 2023-10-12T12:00:00Z 2023-10-14T15:01:02Z
rustsec-2023-0065 Tungstenite allows remote attackers to cause a denial of service 2023-09-25T12:00:00Z 2023-09-29T12:03:03Z
rustsec-2023-0064 gix-transport code execution vulnerability 2023-09-23T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2023-0063 Denial of service in Quinn servers 2023-09-21T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0083 blurhash: panic on parsing crafted blurhash inputs 2023-09-19T12:00:00Z 2024-03-02T17:22:42Z
rustsec-2023-0082 phonenumber: panic on parsing crafted RF3966 phonenumber inputs 2023-09-19T12:00:00Z 2024-02-29T21:46:35Z
rustsec-2023-0085 HPACK decoder panics on invalid input 2023-09-15T12:00:00Z 2024-04-11T16:16:20Z
rustsec-2023-0084 `hpack` is unmaintained 2023-09-15T12:00:00Z 2024-03-06T14:01:14Z
rustsec-2023-0062 BER/CER/DER decoder panics on invalid input 2023-09-13T12:00:00Z 2024-02-10T15:57:43Z
rustsec-2023-0061 libwebp: OOB write in BuildHuffmanTable 2023-09-12T12:00:00Z 2024-02-10T15:57:43Z
ID Description Published Updated
bit-gitlab-2025-11990 Improper Handling of URL Encoding (Hex Encoding) in GitLab 2025-11-20T09:03:19.328Z 2025-11-20T09:06:46.640Z
bit-gitlab-2025-11865 Incorrect Authorization in GitLab 2025-11-20T09:03:10.744Z 2025-11-20T09:06:46.640Z
bit-moodle-2025-62401 Moodle: possible to bypass timer in timed assignments 2025-11-17T23:47:50.898Z 2025-11-18T00:06:24.423Z
bit-moodle-2025-62400 Moodle: hidden group names visible to event creators 2025-11-17T23:47:49.403Z 2025-11-18T00:06:24.423Z
bit-moodle-2025-62399 Moodle: password brute force risk when mobile/web services enabled 2025-11-17T23:47:47.926Z 2025-11-18T00:06:24.423Z
bit-moodle-2025-62398 Moodle: possible to bypass mfa 2025-11-17T23:47:46.528Z 2025-11-18T00:06:24.423Z
bit-moodle-2025-62397 Moodle: router produces json instead of 404 error for invalid course id 2025-11-17T23:47:45.012Z 2025-11-18T00:06:24.423Z
bit-moodle-2025-62396 Moodle: router (r.php) could expose application directories 2025-11-17T23:47:43.645Z 2025-11-18T00:06:24.423Z
bit-moodle-2025-62395 Moodle: external cohort search service leaks system cohort data 2025-11-17T23:47:42.131Z 2025-11-18T00:06:24.423Z
bit-moodle-2025-62394 Moodle: quiz notifications sent to suspended participants 2025-11-17T23:47:40.687Z 2025-11-18T00:06:24.423Z
bit-moodle-2025-62393 Moodle: course access permissions not properly checked in course_output_fragment_course_overview 2025-11-17T23:47:39.287Z 2025-11-18T00:06:24.423Z
bit-kibana-2025-37734 Kibana Origin Validation Error 2025-11-14T14:40:47.948Z 2025-11-14T15:09:14.122Z
bit-elk-2025-37734 Kibana Origin Validation Error 2025-11-14T14:38:05.480Z 2025-11-14T15:09:14.122Z
bit-parse-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details 2025-11-12T11:45:03.650Z 2026-01-08T18:07:34.629Z
bit-parse-2025-64430 Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format 2025-11-12T11:45:02.117Z 2025-11-12T12:05:53.614Z
bit-django-2025-64459 Potential SQL injection via _connector keyword argument in QuerySet and Q objects 2025-11-11T11:36:39.904Z 2025-11-11T12:05:08.739Z
bit-django-2025-64458 Potential denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows 2025-11-11T11:36:38.456Z 2025-11-11T12:05:08.739Z
bit-wildfly-2022-0866 2025-11-07T11:01:40.946Z 2025-11-07T11:28:28.483Z
bit-mlflow-2025-11201 MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability 2025-11-07T10:57:31.684Z 2025-11-07T11:28:28.483Z
bit-redis-2025-62507 Redis: Bug in XACKDEL may lead to stack overflow and potential RCE 2025-11-07T08:49:33.083Z 2025-11-07T09:06:54.375Z
bit-keydb-2025-62507 Redis: Bug in XACKDEL may lead to stack overflow and potential RCE 2025-11-07T08:40:53.783Z 2025-11-07T09:06:54.375Z
bit-mastodon-2022-2166 Improper Restriction of Excessive Authentication Attempts in mastodon/mastodon 2025-11-06T15:08:22.357Z 2025-11-06T15:44:17.098Z
bit-gitlab-2025-11702 Missing Authorization in GitLab 2025-11-06T13:22:05.051Z 2025-11-06T13:25:46.476Z
bit-tomcat-2025-61795 Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS 2025-11-06T13:00:35.478Z 2025-11-06T13:25:46.476Z
bit-tomcat-2025-55754 Apache Tomcat: console manipulation via escape sequences in log messages 2025-11-06T13:00:33.572Z 2025-11-06T13:25:46.476Z
bit-tomcat-2025-55752 Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled 2025-11-06T13:00:31.694Z 2025-11-11T12:05:08.739Z
bit-discourse-2025-61598 Discourse is missing Cache-Control response header on error responses 2025-11-06T12:59:31.285Z 2025-11-06T13:25:46.476Z
bit-golang-2025-61725 Excessive CPU consumption in ParseAddress in net/mail 2025-11-06T12:58:41.872Z 2025-12-10T12:06:24.101Z
bit-golang-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto 2025-11-06T12:58:38.217Z 2025-11-06T13:25:46.476Z
bit-golang-2025-61723 Quadratic complexity when parsing some invalid inputs in encoding/pem 2025-11-06T12:58:34.335Z 2025-11-06T13:25:46.476Z
ID Description Updated
var-201804-1225 An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… 2024-07-23T21:48:34.131000Z
var-200906-0603 Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possi… 2024-07-23T21:48:33.753000Z
var-202204-0596 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle … 2024-07-23T21:48:32.252000Z
var-202109-1789 When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data usi… 2024-07-23T21:48:32.869000Z
var-200102-0075 IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP … 2024-07-23T21:48:08.812000Z
var-201211-0367 Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … 2024-07-23T21:48:07.636000Z
var-201108-0285 Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allow… 2024-07-23T21:47:36.928000Z
var-200505-0193 Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary … 2024-07-23T21:47:36.724000Z
var-202110-1705 The Snappy frame decoder function doesn't restrict the chunk length which may lead to exc… 2024-07-23T21:46:59.236000Z
var-201506-0265 Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x… 2024-07-23T21:46:59.847000Z
var-202203-0111 A use after free issue was addressed with improved memory management. This issue is fixed… 2024-07-23T21:46:58.879000Z
var-201201-0170 Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK i… 2024-07-23T21:46:58.960000Z
var-201611-0348 named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-… 2024-07-23T21:46:27.318000Z
var-200609-1376 The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… 2024-07-23T21:46:26.250000Z
var-201903-0441 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T21:46:20.783000Z
var-202210-1526 The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macO… 2024-07-23T21:46:13.464000Z
var-201606-0135 The XML parser in Expat does not use sufficient entropy for hash initialization, which al… 2024-07-23T21:46:12.300000Z
var-201210-0053 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:46:11.539000Z
var-201605-0464 Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlPars… 2024-07-23T21:45:39.491000Z
var-201006-1131 WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… 2024-07-23T21:45:38.565000Z
var-200804-0039 Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compil… 2024-07-23T21:45:07.043000Z
var-201204-0084 Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome befo… 2024-07-23T21:45:06.885000Z
var-200102-0028 The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log… 2024-07-23T21:45:05.204000Z
var-201504-0060 The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows… 2024-07-23T21:45:04.448000Z
var-202203-0043 A flaw was found in the way the "flags" member of the new pipe buffer structure was lacki… 2024-07-23T21:45:03.589000Z
var-201111-0222 FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arb… 2024-07-23T21:45:03.152000Z
var-201904-0981 SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow … 2024-07-23T21:45:01.742000Z
var-201808-1004 Bluetooth firmware or operating system software drivers in macOS versions before 10.13, H… 2024-07-23T21:45:01.058000Z
var-200512-0633 passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 al… 2024-07-23T21:45:01.566000Z
var-202208-2263 When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies … 2024-07-23T21:44:51.339000Z
ID Description Published Updated
jvndb-2024-000080 EC-CUBE 4 Series improper input validation when installing plugins 2024-07-30T13:56+09:00 2024-07-30T13:56+09:00
jvndb-2024-004595 Multiple vulnerabilities in FutureNet NXR series, VXR series and WXR series 2024-07-29T17:51+09:00 2025-06-30T09:56+09:00
jvndb-2024-000076 SDoP contains a stack-based buffer overflow vulnerability. 2024-07-29T17:24+09:00 2024-07-29T17:24+09:00
jvndb-2024-000074 Multiple vulnerabilities in SKYSEA Client View 2024-07-29T15:28+09:00 2024-07-31T14:12+09:00
jvndb-2024-004623 Multiple products from Check Point Software Technologies vulnerable to information disclosure 2024-07-29T10:23+09:00 2024-10-24T16:37+09:00
jvndb-2024-000075 ORC vulnerable to stack-based buffer overflow 2024-07-26T13:55+09:00 2024-07-26T13:55+09:00
jvndb-2024-000073 Assimp vulnerable to heap-based buffer overflow 2024-07-18T13:44+09:00 2024-07-18T13:44+09:00
jvndb-2024-000072 Cybozu Garoon vulnerable to cross-site scripting 2024-07-16T16:14+09:00 2024-07-16T16:14+09:00
jvndb-2024-000071 FUJITSU Network Edgiot GW1500 vulnerable to path traversal 2024-07-16T14:41+09:00 2024-07-16T14:41+09:00
jvndb-2024-000070 Out-of-bounds write vulnerability in Ricoh MFPs and printers 2024-07-10T14:16+09:00 2024-07-10T14:16+09:00
jvndb-2024-000059 Multiple vulnerabilities in multiple Webmin products 2024-07-09T14:27+09:00 2024-07-09T14:27+09:00
jvndb-2024-000069 Cleartext transmission issue in TONE store App to TONE store 2024-07-08T13:43+09:00 2024-07-08T13:43+09:00
jvndb-2024-000068 JP1/Extensible SNMP Agent fails to restrict access permissions 2024-07-03T14:57+09:00 2024-07-03T14:57+09:00
jvndb-2024-003831 Multiple TP-Link products vulnerable to OS command injection 2024-06-28T17:38+09:00 2024-06-28T17:38+09:00
jvndb-2024-000067 "Piccoma" App uses a hard-coded API key for an external service 2024-06-28T13:18+09:00 2024-06-28T13:18+09:00
jvndb-2024-000066 WordPress plugins "WP Tweet Walls" and "Sola Testimonials" vulnerable to cross-site request forgery 2024-06-26T14:25+09:00 2024-06-26T14:25+09:00
jvndb-2024-003699 LINE client for iOS vulnerable to universal cross-site scripting 2024-06-24T11:05+09:00 2024-06-24T11:05+09:00
jvndb-2024-003645 Multiple vulnerabilities in multiple Trend Micro products 2024-06-20T14:59+09:00 2024-06-20T14:59+09:00
jvndb-2024-000065 "ZOZOTOWN" App for Android fails to restrict custom URL schemes properly 2024-06-19T16:04+09:00 2024-06-19T16:04+09:00
jvndb-2024-000064 WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page 2024-06-19T14:25+09:00 2024-06-19T14:25+09:00
jvndb-2024-000061 Multiple vulnerabilities in Ricoh Streamline NX PC Client 2024-06-18T14:56+09:00 2024-06-18T14:56+09:00
jvndb-2024-000063 Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR 2024-06-18T13:43+09:00 2024-06-18T13:43+09:00
jvndb-2024-003539 Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs 2024-06-17T15:21+09:00 2024-06-17T15:21+09:00
jvndb-2024-000062 Denial-of-service (DoS) vulnerability in IPCOM WAF function 2024-06-12T15:03+09:00 2024-06-12T15:03+09:00
jvndb-2024-000058 WordPress Plugin "Music Store - WordPress eCommerce" vulnerable to SQL injection 2024-06-07T15:24+09:00 2024-06-10T17:08+09:00
jvndb-2024-000060 Multiple vulnerabilities in "FreeFrom - the nostr client" App 2024-06-07T14:51+09:00 2024-06-07T14:51+09:00
jvndb-2024-000057 Multiple vulnerabilities in UNIVERSAL PASSPORT RX 2024-06-03T15:32+09:00 2024-06-03T15:32+09:00
jvndb-2024-003254 Seiko Solutions SkyBridge MB-A100/MB-A110 and SkyBridge BASIC MB-A130 vulnerable to OS command injection 2024-06-03T14:53+09:00 2024-06-03T14:53+09:00
jvndb-2024-003253 Multiple vulnerabilities in Sharp and Toshiba Tec MFPs 2024-06-03T14:36+09:00 2024-06-03T14:36+09:00
jvndb-2024-000056 awkblog vulnerable to OS command injection 2024-05-30T14:39+09:00 2024-05-30T14:39+09:00
ID Description Updated
ID Description Published Updated
suse-su-2026:0077-1 Security update for curl 2026-01-08T19:04:00Z 2026-01-08T19:04:00Z
suse-su-2026:20048-1 Security update for libpcap 2026-01-08T16:29:06Z 2026-01-08T16:29:06Z
suse-su-2026:20047-1 Security update for python311 2026-01-08T16:27:35Z 2026-01-08T16:27:35Z
suse-su-2026:20064-1 Security update for libpcap 2026-01-08T16:16:36Z 2026-01-08T16:16:36Z
suse-su-2026:20045-1 Security update for glib2 2026-01-08T16:00:18Z 2026-01-08T16:00:18Z
suse-su-2026:20044-1 Security update for rsync 2026-01-08T15:49:46Z 2026-01-08T15:49:46Z
suse-su-2026:20043-1 Security update for python-tornado6 2026-01-08T15:48:09Z 2026-01-08T15:48:09Z
suse-su-2026:20042-1 Security update for curl 2026-01-08T15:18:54Z 2026-01-08T15:18:54Z
suse-su-2026:20041-1 Security update for bluez 2026-01-08T15:07:04Z 2026-01-08T15:07:04Z
suse-su-2026:20062-1 Security update for curl 2026-01-08T14:51:21Z 2026-01-08T14:51:21Z
suse-su-2026:20061-1 Security update for openvswitch 2026-01-08T14:43:50Z 2026-01-08T14:43:50Z
suse-su-2026:0073-1 Security update for ImageMagick 2026-01-08T13:22:41Z 2026-01-08T13:22:41Z
suse-su-2026:0072-1 Security update for ImageMagick 2026-01-08T13:22:28Z 2026-01-08T13:22:28Z
suse-su-2026:0071-1 Security update for php8 2026-01-08T13:22:08Z 2026-01-08T13:22:08Z
suse-su-2026:0070-1 Security update for qemu 2026-01-08T13:21:59Z 2026-01-08T13:21:59Z
suse-su-2026:0069-1 Security update for rsync 2026-01-08T13:21:48Z 2026-01-08T13:21:48Z
suse-su-2026:0068-1 Security update for libvirt 2026-01-08T12:22:40Z 2026-01-08T12:22:40Z
suse-su-2026:0067-1 Security update for podman 2026-01-08T12:22:16Z 2026-01-08T12:22:16Z
suse-su-2026:0066-1 Security update for curl 2026-01-08T12:21:35Z 2026-01-08T12:21:35Z
suse-su-2026:0063-1 Security update for libpcap 2026-01-08T09:36:26Z 2026-01-08T09:36:26Z
suse-su-2026:0062-1 Security update for libpcap 2026-01-08T09:36:12Z 2026-01-08T09:36:12Z
suse-su-2026:0061-1 Security update for ImageMagick 2026-01-07T18:33:22Z 2026-01-07T18:33:22Z
suse-su-2026:0060-1 Security update for capstone 2026-01-07T16:02:47Z 2026-01-07T16:02:47Z
suse-su-2026:0059-1 Security update for ImageMagick 2026-01-07T16:01:56Z 2026-01-07T16:01:56Z
suse-su-2026:20039-1 Security update for the Linux Kernel 2026-01-07T12:33:45Z 2026-01-07T12:33:45Z
suse-su-2026:0053-1 Security update for libpcap 2026-01-07T11:03:52Z 2026-01-07T11:03:52Z
suse-su-2026:20059-1 Security update for the Linux Kernel 2026-01-07T10:55:44Z 2026-01-07T10:55:44Z
suse-su-2026:20022-1 Security update of valkey 2026-01-07T09:35:57Z 2026-01-07T09:35:57Z
suse-su-2026:0052-1 Security update for curl 2026-01-07T09:28:37Z 2026-01-07T09:28:37Z
suse-su-2026:0051-1 Security update for curl 2026-01-07T09:28:27Z 2026-01-07T09:28:27Z
ID Description Published Updated
cnvd-2025-31116 WordPress Addon Elements for Elementor跨站脚本漏洞 2025-12-18 2025-12-26
cnvd-2025-31121 WordPress Video Merchant跨站请求伪造漏洞 2025-12-16 2025-12-26
cnvd-2025-31120 WordPress Wp Job Portal任意文件读取漏洞 2025-12-16 2025-12-26
cnvd-2025-31119 WordPress RSS Aggregator by Feedzy代码问题漏洞 2025-12-16 2025-12-26
cnvd-2025-31118 WordPress WP CarDealer权限提升漏洞 2025-12-16 2025-12-26
cnvd-2025-31117 WordPress List category posts SQL注入漏洞 2025-12-16 2025-12-26
cnvd-2025-30834 帆软软件有限公司FineReport、FineBI及FineDataLink存在命令注入漏洞 2025-12-16 2025-12-17
cnvd-2026-07242 Google Chrome释放后重用漏洞 2025-12-15 2026-01-22
cnvd-2026-04945 Adobe ColdFusion输入验证不当漏洞(CNVD-2026-0494539) 2025-12-15 2026-01-19
cnvd-2026-04944 Adobe ColdFusion XML外部实体引用限制不当漏洞(CNVD-2026-0494441) 2025-12-15 2026-01-19
cnvd-2026-04943 Adobe ColdFusion XML外部实体引用限制不当漏洞(CNVD-2026-0494343) 2025-12-15 2026-01-19
cnvd-2026-04942 Adobe ColdFusion输入验证不当漏洞 2025-12-15 2026-01-19
cnvd-2026-04941 Adobe ColdFusion XML外部实体引用限制不当漏洞 2025-12-15 2026-01-19
cnvd-2026-04940 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-0494065) 2025-12-15 2026-01-19
cnvd-2026-04939 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-0493967) 2025-12-15 2026-01-19
cnvd-2026-04938 Adobe Experience Manager跨站脚本漏洞 2025-12-15 2026-01-19
cnvd-2026-04937 Adobe ColdFusion访问控制不当漏洞 2025-12-15 2026-01-19
cnvd-2026-04936 Adobe ColdFusion凭据保护不足漏洞 2025-12-15 2026-01-19
cnvd-2026-04226 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04226) 2025-12-15 2026-01-16
cnvd-2026-04225 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04225) 2025-12-15 2026-01-16
cnvd-2026-04224 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04224) 2025-12-15 2026-01-16
cnvd-2026-04223 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04223) 2025-12-15 2026-01-16
cnvd-2026-04222 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04222) 2025-12-15 2026-01-16
cnvd-2026-04221 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04221) 2025-12-15 2026-01-16
cnvd-2026-04220 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04220) 2025-12-15 2026-01-16
cnvd-2026-04219 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04219) 2025-12-15 2026-01-16
cnvd-2026-04218 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04218) 2025-12-15 2026-01-16
cnvd-2026-04217 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04217) 2025-12-15 2026-01-16
cnvd-2026-04216 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04216) 2025-12-15 2026-01-16
cnvd-2026-04215 Adobe Experience Manager跨站脚本漏洞(CNVD-2026-04215) 2025-12-15 2026-01-16
ID Description Published Updated
CERTFR-2026-AVI-0024 Multiples vulnérabilités dans VMware Tanzu Greenplum Backup and Restore 2026-01-12T00:00:00.000000 2026-01-12T00:00:00.000000
CERTFR-2026-AVI-0023 Multiples vulnérabilités dans les produits Axis 2026-01-12T00:00:00.000000 2026-01-12T00:00:00.000000
certfr-2026-avi-0022 Multiples vulnérabilités dans les produits Microsoft 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0021 Vulnérabilité dans Microsoft Edge 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0020 Multiples vulnérabilités dans les produits IBM 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0019 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0018 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0017 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0016 Vulnérabilité dans les produits Moxa 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0022 Multiples vulnérabilités dans les produits Microsoft 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0021 Vulnérabilité dans Microsoft Edge 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0020 Multiples vulnérabilités dans les produits IBM 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0019 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0018 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0017 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
CERTFR-2026-AVI-0016 Vulnérabilité dans les produits Moxa 2026-01-09T00:00:00.000000 2026-01-09T00:00:00.000000
certfr-2026-avi-0015 Multiples vulnérabilités dans les produits Centreon 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0014 Multiples vulnérabilités dans GitLab 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0013 Vulnérabilité dans Tenable Nessus Agent 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0012 Multiples vulnérabilités dans Trend Micro Apex Central 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0011 Vulnérabilité dans Google Android 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0015 Multiples vulnérabilités dans les produits Centreon 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0014 Multiples vulnérabilités dans GitLab 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0013 Vulnérabilité dans Tenable Nessus Agent 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0012 Multiples vulnérabilités dans Trend Micro Apex Central 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
CERTFR-2026-AVI-0011 Vulnérabilité dans Google Android 2026-01-08T00:00:00.000000 2026-01-08T00:00:00.000000
certfr-2026-avi-0010 Multiples vulnérabilités dans Curl 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
certfr-2026-avi-0009 Vulnérabilité dans Google Chrome 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
certfr-2026-avi-0008 Multiples vulnérabilités dans Joomla! 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
CERTFR-2026-AVI-0010 Multiples vulnérabilités dans Curl 2026-01-07T00:00:00.000000 2026-01-07T00:00:00.000000
ID Description Published Updated
certfr-2017-ale-004 Vulnérabilité dans Apache Struts 2017-03-10T00:00:00.000000 2017-05-10T00:00:00.000000
CERTFR-2017-ALE-004 Vulnérabilité dans Apache Struts 2017-03-10T00:00:00.000000 2017-05-10T00:00:00.000000
certfr-2017-ale-003 Vulnérabilité dans les navigateurs Microsoft 2017-02-27T00:00:00.000000 2017-03-15T00:00:00.000000
CERTFR-2017-ALE-003 Vulnérabilité dans les navigateurs Microsoft 2017-02-27T00:00:00.000000 2017-03-15T00:00:00.000000
certfr-2017-ale-002 Vulnérabilité dans Microsoft Windows 2017-02-20T00:00:00.000000 2017-03-15T00:00:00.000000
CERTFR-2017-ALE-002 Vulnérabilité dans Microsoft Windows 2017-02-20T00:00:00.000000 2017-03-15T00:00:00.000000
certfr-2017-ale-001 Vulnérabilité dans Cisco WebEx 2017-01-25T00:00:00.000000 2017-01-31T00:00:00.000000
CERTFR-2017-ALE-001 Vulnérabilité dans Cisco WebEx 2017-01-25T00:00:00.000000 2017-01-31T00:00:00.000000
certfr-2016-ale-010 Vulnérabilité dans les routeurs Netgear 2016-12-13T00:00:00.000000 2016-12-26T00:00:00.000000
CERTFR-2016-ALE-010 Vulnérabilité dans les routeurs Netgear 2016-12-13T00:00:00.000000 2016-12-26T00:00:00.000000
certfr-2016-ale-009 Campagne d'attaque contre des routeurs DSL 2016-12-01T00:00:00.000000 2017-01-26T00:00:00.000000
CERTFR-2016-ALE-009 Campagne d'attaque contre des routeurs DSL 2016-12-01T00:00:00.000000 2017-01-26T00:00:00.000000
certfr-2016-ale-008 Vulnérabilité dans Microsoft Windows 2016-11-02T00:00:00.000000 2016-11-09T00:00:00.000000
CERTFR-2016-ALE-008 Vulnérabilité dans Microsoft Windows 2016-11-02T00:00:00.000000 2016-11-09T00:00:00.000000
certfr-2016-ale-007 Vulnérabilité dans Cisco IOS, IOS XE et IOS XR 2016-09-19T00:00:00.000000 2016-09-19T00:00:00.000000
CERTFR-2016-ALE-007 Vulnérabilité dans Cisco IOS, IOS XE et IOS XR 2016-09-19T00:00:00.000000 2016-09-19T00:00:00.000000
certfr-2016-ale-006 Campagne de messages électroniques non sollicités de type Zepto/Odin 2016-09-05T00:00:00.000000 2016-11-17T00:00:00.000000
CERTFR-2016-ALE-006 Campagne de messages électroniques non sollicités de type Zepto/Odin 2016-09-05T00:00:00.000000 2016-11-17T00:00:00.000000
certfr-2016-ale-005 Multiples vulnérabilités dans les pare-feux Cisco 2016-08-18T00:00:00.000000 2016-09-05T00:00:00.000000
CERTFR-2016-ALE-005 Multiples vulnérabilités dans les pare-feux Cisco 2016-08-18T00:00:00.000000 2016-09-05T00:00:00.000000
certfr-2016-ale-004 Vulnérabilité dans Adobe Flash Player 2016-06-15T00:00:00.000000 2016-06-16T00:00:00.000000
CERTFR-2016-ALE-004 Vulnérabilité dans Adobe Flash Player 2016-06-15T00:00:00.000000 2016-06-16T00:00:00.000000
certfr-2016-ale-003 Vulnérabilité dans Adobe Flash Player 2016-05-11T00:00:00.000000 2016-05-12T00:00:00.000000
CERTFR-2016-ALE-003 Vulnérabilité dans Adobe Flash Player 2016-05-11T00:00:00.000000 2016-05-12T00:00:00.000000
certfr-2016-ale-002 Vulnérabilité dans Adobe Flash Player 2016-04-06T00:00:00.000000 2016-04-08T00:00:00.000000
CERTFR-2016-ALE-002 Vulnérabilité dans Adobe Flash Player 2016-04-06T00:00:00.000000 2016-04-08T00:00:00.000000
certfr-2016-ale-001 Campagne de messages électroniques non sollicités de type Locky 2016-02-19T00:00:00.000000 2016-04-07T00:00:00.000000
CERTFR-2016-ALE-001 Campagne de messages électroniques non sollicités de type Locky 2016-02-19T00:00:00.000000 2016-04-07T00:00:00.000000
certfr-2015-ale-015 Campagne de messages électroniques non sollicités de type TeslaCrypt 2015-12-21T00:00:00.000000 2016-03-10T00:00:00.000000
CERTFR-2015-ALE-015 Campagne de messages électroniques non sollicités de type TeslaCrypt 2015-12-21T00:00:00.000000 2016-03-10T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated