Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2024-55270 |
8.8 (3.1)
|
phpgurukul Student Management System 1.0 is vulne… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T18:43:03.307Z |
| CVE-2026-26731 |
N/A
|
TOTOLINK A3002RU V2.1.1-B20211108.1455 was discov… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T18:42:50.092Z |
| CVE-2026-26732 |
N/A
|
TOTOLINK A3002RU V2.1.1-B20211108.1455 was discov… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T18:41:26.740Z |
| CVE-2025-59793 |
N/A
|
Rocket TRUfusion Enterprise through 7.10.5 expose… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T18:39:39.915Z |
| CVE-2025-14689 |
6.5 (3.1)
|
IBM Db2 Denial of Service |
IBM |
Db2 for Linux, UNIX and Windows |
2026-02-17T17:12:56.185Z | 2026-02-17T18:34:26.129Z |
| CVE-2026-2545 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
LigeroSmart index.pl cross site scripting |
n/a |
LigeroSmart |
2026-02-16T07:32:08.515Z | 2026-02-17T18:31:41.311Z |
| CVE-2026-2546 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
LigeroSmart index.pl cross site scripting |
n/a |
LigeroSmart |
2026-02-16T08:02:07.017Z | 2026-02-17T18:31:07.881Z |
| CVE-2026-20676 |
4.3 (3.1)
|
This issue was addressed through improved state m… |
Apple |
Safari |
2026-02-11T22:58:25.537Z | 2026-02-17T18:30:40.166Z |
| CVE-2026-2547 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
LigeroSmart index.pl AgentDashboard cross site scripting |
n/a |
LigeroSmart |
2026-02-16T08:32:07.484Z | 2026-02-17T18:30:30.789Z |
| CVE-2025-70954 |
7.5 (3.1)
|
A Null Pointer Dereference vulnerability exists i… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-17T18:29:09.899Z |
| CVE-2025-65716 |
8.8 (3.1)
|
An issue in Visual Studio Code Extensions Markdow… |
n/a |
n/a |
2026-02-16T00:00:00.000Z | 2026-02-17T18:25:16.823Z |
| CVE-2026-2032 |
4.3 (3.1)
|
Interrupted page loads in new tabs could allow website… |
Mozilla |
Firefox for iOS |
2026-02-16T14:13:23.899Z | 2026-02-17T18:23:17.757Z |
| CVE-2026-1761 |
8.6 (3.1)
|
Libsoup: stack-based buffer overflow in libsoup multip… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-02-02T14:01:03.802Z | 2026-02-17T18:23:08.912Z |
| CVE-2026-0719 |
8.6 (3.1)
|
Libsoup: signed to unsigned conversion error leading t… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-08T12:38:30.740Z | 2026-02-17T18:23:04.114Z |
| CVE-2026-0929 |
4.3 (3.1)
|
RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation |
Unknown |
RegistrationMagic |
2026-02-16T06:00:01.611Z | 2026-02-17T18:22:21.617Z |
| CVE-2026-0829 |
5.8 (3.1)
|
Frontend File Manager Plugin <= 23.5 - Unauthenticated… |
Unknown |
Frontend File Manager Plugin |
2026-02-17T06:00:06.506Z | 2026-02-17T18:19:47.377Z |
| CVE-2026-25506 |
7.7 (3.1)
|
MUNGE has a buffer overflow in message unpacking allow… |
dun |
munge |
2026-02-10T18:55:57.708Z | 2026-02-17T18:17:47.022Z |
| CVE-2026-25087 |
N/A
|
Apache Arrow: Potential use-after-free when reading IP… |
Apache Software Foundation |
Apache Arrow |
2026-02-17T13:18:25.494Z | 2026-02-17T18:17:44.990Z |
| CVE-2025-63354 |
4.8 (3.1)
|
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via … |
n/a |
n/a |
2026-02-09T00:00:00.000Z | 2026-02-17T18:13:17.385Z |
| CVE-2026-1358 |
9.8 (3.1)
|
Airleader Master Unrestricted Upload of File with Dang… |
Airleader GmbH |
Airleader Master |
2026-02-12T21:24:53.070Z | 2026-02-17T18:03:38.837Z |
| CVE-2026-1452 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-02-17T17:26:12.868Z | |
| CVE-2019-25372 |
5.1 (4.0)
6.1 (3.1)
|
OPNsense 19.1 Reflected XSS via diag_traceroute.php |
Opnsense |
OPNsense |
2026-02-15T13:58:54.354Z | 2026-02-17T17:25:33.841Z |
| CVE-2019-25371 |
5.1 (4.0)
6.1 (3.1)
|
OPNsense 19.1 Reflected XSS via diag_ping.php |
Opnsense |
OPNsense |
2026-02-15T13:58:53.595Z | 2026-02-17T17:25:13.731Z |
| CVE-2019-25370 |
5.1 (4.0)
6.1 (3.1)
|
OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php |
Opnsense |
OPNsense |
2026-02-15T13:58:52.849Z | 2026-02-17T17:24:54.810Z |
| CVE-2019-25369 |
5.1 (4.0)
6.4 (3.1)
|
OPNsense 19.1 Stored XSS via system_advanced_sysctl.php |
Opnsense |
OPNsense |
2026-02-15T13:58:52.074Z | 2026-02-17T17:24:37.345Z |
| CVE-2026-2516 |
7.3 (4.0)
7 (3.1)
7 (3.0)
|
Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll unc… |
Unidocs |
ezPDF DRM Reader |
2026-02-15T12:02:06.101Z | 2026-02-17T17:23:29.198Z |
| CVE-2026-2517 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SMF types.c ogs_gtp2_parse_tft denial of service |
n/a |
Open5GS |
2026-02-15T12:32:08.127Z | 2026-02-17T17:23:09.474Z |
| CVE-2026-2521 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGW-C sgwc_s5c_handle_create_session_response … |
n/a |
Open5GS |
2026-02-15T23:02:07.287Z | 2026-02-17T17:22:43.273Z |
| CVE-2026-2522 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS MME esm-build.c memory corruption |
n/a |
Open5GS |
2026-02-15T23:32:06.700Z | 2026-02-17T17:22:13.510Z |
| CVE-2026-2561 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi web_get… |
JingDong |
JD Cloud Box AX6600 |
2026-02-16T14:32:53.736Z | 2026-02-17T17:21:38.907Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2618 |
6.3 (4.0)
3.7 (3.1)
3.7 (3.0)
|
Beetel 777VR1 SSH Service risky encryption |
Beetel |
777VR1 |
2026-02-17T16:32:06.477Z | 2026-02-17T17:14:55.824Z |
| CVE-2026-2552 |
5.1 (4.0)
5.5 (3.1)
5.5 (3.0)
|
ZenTao Editor control.php delete path traversal |
n/a |
ZenTao |
2026-02-16T11:02:05.938Z | 2026-02-17T16:41:38.415Z |
| CVE-2026-2548 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
WAYOS FBM-220G rc sub_40F820 command injection |
WAYOS |
FBM-220G |
2026-02-16T09:02:05.796Z | 2026-02-17T16:57:35.264Z |
| CVE-2025-70828 |
8.8 (3.1)
|
An issue in Datart v1.0.0-rc.3 allows attackers t… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T15:59:06.768Z |
| CVE-2025-70397 |
8.8 (3.1)
|
jizhicms 2.5.6 is vulnerable to SQL Injection in … |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T16:17:46.850Z |
| CVE-2025-65924 |
4.1 (3.1)
|
ERPNext thru 15.88.1 does not sanitize or remove … |
n/a |
n/a |
2026-02-03T00:00:00.000Z | 2026-02-17T16:42:43.134Z |
| CVE-2025-65753 |
9 (3.1)
|
An issue in the TLS certification mechanism of Gu… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T16:52:22.753Z |
| CVE-2025-13465 |
6.9 (4.0)
|
Prototype Pollution Vulnerability in Lodash _.unset an… |
Lodash |
Lodash |
2026-01-21T19:05:28.846Z | 2026-01-21T19:43:38.268Z |
| CVE-2026-23526 |
8.5 (4.0)
|
CVAT vulnerable to privilege escalation of users with … |
cvat-ai |
cvat |
2026-01-21T21:40:25.214Z | 2026-01-23T04:55:22.148Z |
| CVE-2026-23960 |
7.3 (4.0)
|
Argo Workflows affected by stored XSS in the artifact … |
argoproj |
argo-workflows |
2026-01-21T22:02:50.491Z | 2026-01-22T16:49:43.075Z |
| CVE-2026-23630 |
6.3 (4.0)
|
Docmost is vulnerable to stored Cross-Site Scripting (… |
docmost |
docmost |
2026-01-21T22:51:27.158Z | 2026-01-22T16:49:01.024Z |
| CVE-2026-23951 |
5.5 (3.1)
|
SumatraPDF's Integer Underflow in PalmDbReader Leads t… |
sumatrapdfreader |
sumatrapdf |
2026-01-22T00:17:10.159Z | 2026-01-22T21:44:27.284Z |
| CVE-2026-20621 |
N/A
|
The issue was addressed with improved memory hand… |
Apple |
macOS |
2026-02-11T22:58:26.506Z | 2026-02-11T22:58:26.506Z |
| CVE-2026-23946 |
6.8 (3.1)
|
Tendenci has Authenticated Remote Code Execution via P… |
tendenci |
tendenci |
2026-01-22T00:09:24.205Z | 2026-01-22T21:50:51.715Z |
| CVE-2026-23958 |
8.8 (4.0)
|
DataEase Vulnerable to Brute-Force Attack on Admin JWT… |
dataease |
dataease |
2026-01-22T01:42:11.514Z | 2026-01-26T16:18:33.334Z |
| CVE-2026-2617 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Beetel 777VR1 Telnet Service/SSH Service insecure defa… |
Beetel |
777VR1 |
2026-02-17T15:32:06.089Z | 2026-02-17T15:46:49.526Z |
| CVE-2026-2555 |
2.3 (4.0)
5 (3.1)
5 (3.0)
|
JeecgBoot Retrieval-Augmented Generation AiragKnowledg… |
n/a |
JeecgBoot |
2026-02-16T12:02:07.302Z | 2026-02-17T15:54:22.780Z |
| CVE-2026-20682 |
5.3 (3.1)
|
A logic issue was addressed with improved state m… |
Apple |
iOS and iPadOS |
2026-02-11T22:58:20.954Z | 2026-02-17T15:29:14.550Z |
| CVE-2026-20677 |
9 (3.1)
|
A race condition was addressed with improved hand… |
Apple |
macOS |
2026-02-11T22:58:18.222Z | 2026-02-17T15:31:49.164Z |
| CVE-2026-20629 |
5.5 (3.1)
|
A privacy issue was addressed with improved handl… |
Apple |
macOS |
2026-02-11T22:59:06.350Z | 2026-02-17T15:47:50.015Z |
| CVE-2026-20601 |
3.3 (3.1)
|
A permissions issue was addressed with additional… |
Apple |
macOS |
2026-02-11T22:58:24.584Z | 2026-02-17T15:25:53.961Z |
| CVE-2025-70956 |
7.5 (3.1)
|
A State Pollution vulnerability was discovered in… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-17T15:15:36.481Z |
| CVE-2025-70866 |
8.8 (3.1)
|
LavaLite CMS 10.1.0 is vulnerable to Incorrect Ac… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-17T15:14:47.415Z |
| CVE-2025-70830 |
9.9 (3.1)
|
A Server-Side Template Injection (SSTI) vulnerabi… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T15:54:28.629Z |
| CVE-2025-70829 |
5.7 (3.1)
|
An information exposure vulnerability in Datart v… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T15:38:47.790Z |
| CVE-2025-70092 |
5.5 (3.1)
|
A cross-site scripting (XSS) vulnerability in the… |
n/a |
n/a |
2026-02-12T00:00:00.000Z | 2026-02-17T15:38:28.959Z |
| CVE-2026-23959 |
6.9 (4.0)
|
CoreShop Vulnerable to SQL Injection via Admin custome… |
coreshop |
CoreShop |
2026-01-22T01:57:58.566Z | 2026-01-22T16:28:21.076Z |
| CVE-2026-23687 |
8.8 (3.1)
|
XML Signature Wrapping in SAP NetWeaver AS ABAP and AB… |
SAP_SE |
SAP NetWeaver AS ABAP and ABAP Platform |
2026-02-10T03:02:47.674Z | 2026-02-11T04:56:15.605Z |
| CVE-2026-2258 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
aardappel lobster wfc.h WaveFunctionCollapse memory co… |
aardappel |
lobster |
2026-02-10T00:02:09.801Z | 2026-02-10T16:42:37.443Z |
| CVE-2026-0484 |
6.5 (3.1)
|
Missing Authorization check in SAP NetWeaver Applicati… |
SAP_SE |
SAP NetWeaver Application Server ABAP and SAP S/4HANA |
2026-02-10T03:00:41.098Z | 2026-02-10T20:18:52.296Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-70828 | An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in … | 2026-02-17T16:20:25.577 | 2026-02-17T17:21:04.613 |
| fkie_cve-2025-70397 | jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the d… | 2026-02-17T16:20:25.467 | 2026-02-17T17:21:04.463 |
| fkie_cve-2025-65924 | ERPNext thru 15.88.1 does not sanitize or remove certain HTML tags specifically `<a>` hyperlinks in… | 2026-02-03T18:16:15.810 | 2026-02-17T17:21:04.173 |
| fkie_cve-2025-65753 | An issue in the TLS certification mechanism of Guardian Gryphon v01.06.0006.22 allows attackers to … | 2026-02-17T16:20:24.477 | 2026-02-17T17:21:04.023 |
| fkie_cve-2025-13465 | Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.om… | 2026-01-21T20:16:05.250 | 2026-02-17T17:10:07.520 |
| fkie_cve-2026-23526 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions… | 2026-01-21T22:15:50.433 | 2026-02-17T17:08:52.683 |
| fkie_cve-2026-23960 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs o… | 2026-01-21T22:15:50.627 | 2026-02-17T16:56:21.320 |
| fkie_cve-2026-23630 | Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.2… | 2026-01-21T23:15:52.187 | 2026-02-17T16:50:10.463 |
| fkie_cve-2026-23951 | SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the va… | 2026-01-22T01:15:52.633 | 2026-02-17T16:48:48.433 |
| fkie_cve-2026-20621 | The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3, mac… | 2026-02-11T23:16:05.683 | 2026-02-17T16:48:14.613 |
| fkie_cve-2026-23946 | Tendenci is an open source content management system built for non-profits, associations and cause-… | 2026-01-22T01:15:52.467 | 2026-02-17T16:44:09.617 |
| fkie_cve-2026-23958 | Dataease is an open source data visualization analysis tool. Prior to version 2.10.19, DataEase use… | 2026-01-22T02:15:52.627 | 2026-02-17T16:28:47.743 |
| fkie_cve-2026-2617 | A vulnerability was found in Beetel 777VR1 up to 01.00.09. This affects an unknown function of the … | 2026-02-17T16:20:29.987 | 2026-02-17T16:20:29.987 |
| fkie_cve-2026-2555 | A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDo… | 2026-02-16T12:16:22.667 | 2026-02-17T16:20:29.697 |
| fkie_cve-2026-20682 | A logic issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPa… | 2026-02-11T23:16:10.557 | 2026-02-17T16:20:28.700 |
| fkie_cve-2026-20677 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in mac… | 2026-02-11T23:16:10.107 | 2026-02-17T16:20:28.307 |
| fkie_cve-2026-20629 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in mac… | 2026-02-11T23:16:06.417 | 2026-02-17T16:20:27.980 |
| fkie_cve-2026-20601 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe … | 2026-02-11T23:16:03.907 | 2026-02-17T16:20:27.817 |
| fkie_cve-2025-70956 | A State Pollution vulnerability was discovered in the TON Virtual Machine (TVM) before v2025.04. Th… | 2026-02-13T22:16:10.290 | 2026-02-17T16:20:26.160 |
| fkie_cve-2025-70866 | LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control. An authenticated user with low-level… | 2026-02-13T22:16:09.923 | 2026-02-17T16:20:26.010 |
| fkie_cve-2025-70830 | A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v… | 2026-02-17T16:20:25.833 | 2026-02-17T16:20:25.833 |
| fkie_cve-2025-70829 | An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to acces… | 2026-02-17T15:16:19.047 | 2026-02-17T16:20:25.687 |
| fkie_cve-2025-70092 | A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows… | 2026-02-12T23:16:09.247 | 2026-02-17T16:20:25.140 |
| fkie_cve-2026-23959 | CoreShop is a Pimcore enhanced eCommerce solution. An error-based SQL Injection vulnerability was i… | 2026-01-22T03:15:46.233 | 2026-02-17T16:13:17.520 |
| fkie_cve-2026-23687 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with norma… | 2026-02-10T04:16:03.180 | 2026-02-17T16:12:35.840 |
| fkie_cve-2026-2258 | A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the func… | 2026-02-10T00:16:06.523 | 2026-02-17T16:12:27.633 |
| fkie_cve-2026-0484 | Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an aut… | 2026-02-10T04:16:00.947 | 2026-02-17T16:12:08.050 |
| fkie_cve-2026-0485 | SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted reques… | 2026-02-10T04:16:01.387 | 2026-02-17T16:11:42.843 |
| fkie_cve-2026-0486 | In ABAP based SAP systems a remote enabled function module does not perform necessary authorization… | 2026-02-10T04:16:01.550 | 2026-02-17T16:11:29.140 |
| fkie_cve-2026-23991 | go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to… | 2026-01-22T03:15:47.317 | 2026-02-17T16:10:55.810 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vxq8-hcg5-56j6 |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerabi… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-rp4q-m72m-rqhg |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerabi… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-qcc6-w9r3-h3c3 |
7.2 (3.1)
5.3 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulne… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-jxpj-x8cw-h5ph |
7.2 (3.1)
7.3 (4.0)
|
A security vulnerability has been detected in Wavlink WL-NU516U1 up to 130/260. This affects the fu… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-jw99-r2cw-rqwg |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerabi… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-jg2j-4cp6-4c93 |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerabi… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-hqvf-34x3-wr3f |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vu… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-hcvh-8pvq-9ppx |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple cross-site scripting vulnerabilit… | 2026-02-16T18:31:28Z | 2026-02-16T18:31:29Z |
| ghsa-gp3j-92m4-wfm7 |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerabi… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-g4hv-3pw6-5x66 |
7.2 (3.1)
5.3 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulne… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-c6hp-2v43-w3w7 |
7.2 (3.1)
5.3 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting … | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-8rwp-96c5-q3v5 |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vu… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-844q-r72x-vfmv |
7.2 (3.1)
7.3 (4.0)
|
A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the functio… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-6mpf-wv74-p7rw |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vu… | 2026-02-16T18:31:28Z | 2026-02-16T18:31:29Z |
| ghsa-6m5r-r9cx-gmq2 |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vu… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-64x3-m8qv-57vg |
6.1 (3.1)
5.1 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vu… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-5h2c-v9pg-pf7w |
5.4 (3.1)
4.8 (4.0)
|
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vu… | 2026-02-16T18:31:29Z | 2026-02-16T18:31:29Z |
| ghsa-xq5p-rr5f-vjc5 |
8.1 (3.1)
9.2 (4.0)
|
A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this … | 2026-02-16T18:31:28Z | 2026-02-16T18:31:28Z |
| ghsa-qpc6-m6hf-x62g |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. Affected is the f… | 2026-02-16T18:31:28Z | 2026-02-16T18:31:28Z |
| ghsa-pmh8-3qx8-2rqv |
8.7 (3.1)
|
A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm … | 2026-02-16T18:31:28Z | 2026-02-16T18:31:28Z |
| ghsa-5rm3-93cg-6rcr |
7.2 (3.1)
|
SmarterTools SmarterMail before 9526 allows XSS via MAPI requests. | 2026-02-16T18:31:28Z | 2026-02-16T18:31:28Z |
| ghsa-5g82-gg27-r8vp |
|
An issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.… | 2026-02-16T18:31:28Z | 2026-02-16T18:31:28Z |
| ghsa-3jhg-wm5r-8rfq |
6.6 (3.1)
6.6 (4.0)
|
A weakness has been identified in Wavlink WL-NU516U1 20251208. Affected by this issue is the functi… | 2026-02-16T18:31:28Z | 2026-02-16T18:31:28Z |
| ghsa-wp3j-xq48-xpjw |
8.1 (3.1)
|
podman kube play symlink traversal vulnerability | 2025-09-04T20:01:54Z | 2026-02-16T15:32:47Z |
| ghsa-whpx-mf6c-fq99 |
7.8 (3.1)
|
A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWOR… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-vmmw-985w-hrr3 |
7.2 (3.1)
|
SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2. | 2023-03-07T00:30:24Z | 2026-02-16T15:32:47Z |
| ghsa-rg64-8mrm-6x23 |
6.3 (3.1)
2.1 (4.0)
|
A flaw has been found in GeekAI up to 4.2.4. The affected element is the function Download of the f… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-qjmh-gf3w-643f |
7.8 (3.1)
|
An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawi… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-m657-v3w3-jr64 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability has been found in kalcaddle kodbox up to 1.64.05. The impacted element is the funct… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-gjx5-j34g-5g5p |
7.6 (3.1)
|
Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a mal… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2016-40 |
5.3 (3.1)
|
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, a… | tryton | 2016-09-07T19:28:00+00:00 | 2024-11-21T14:23:02.008255+00:00 |
| pysec-2023-301 |
7.8 (3.1)
|
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. | transformers | 2023-12-20T17:15:00+00:00 | 2024-11-21T14:23:01.933055+00:00 |
| pysec-2023-300 |
8.8 (3.1)
|
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. | transformers | 2023-12-19T13:15:00+00:00 | 2024-11-21T14:23:01.871022+00:00 |
| pysec-2023-299 |
4.7 (3.1)
|
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0. | transformers | 2023-05-18T17:15:00+00:00 | 2024-11-21T14:23:01.805729+00:00 |
| pysec-2022-43169 |
9.8 (3.1)
|
The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution bac… | togglee | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.740031Z |
| pysec-2022-43167 |
8.8 (3.1)
|
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types suc… | selenium | 2022-04-19T03:15:00+00:00 | 2024-11-21T14:23:01.289420+00:00 |
| pysec-2022-43165 |
9.8 (3.1)
|
The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution b… | scoptrial | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.181819Z |
| pysec-2016-39 |
7.5 (3.1)
|
An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode … | tarantool | 2016-12-23T22:59:00Z | 2024-11-21T14:23:01.531112Z |
| pysec-2023-297 |
7.5 (3.1)
|
A path traversal vulnerability has been detected in Repox, which allows an attacker to re… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.892241Z |
| pysec-2023-296 |
7.5 (3.1)
|
An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.841929Z |
| pysec-2023-295 |
5.4 (3.1)
|
An XSS vulnerability stored in Repox has been identified, which allows a local attacker t… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.792103Z |
| pysec-2023-294 |
6.1 (3.1)
|
An XSS vulnerability has been detected in Repox, which allows an attacker to compromise i… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.74018Z |
| pysec-2023-293 |
7.5 (3.1)
|
An authentication bypass vulnerability has been found in Repox, which allows a remote use… | repox | 2023-12-13T09:15:00Z | 2024-11-21T14:23:00.689595Z |
| pysec-2022-43164 |
9.8 (3.1)
|
The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution … | rondolu-yt-concate | 2022-06-24T21:15:00Z | 2024-11-21T14:23:00.996865Z |
| pysec-2022-43161 |
9.8 (3.1)
|
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. | rdiffweb | 2022-10-13T20:15:00+00:00 | 2024-11-21T14:23:00.575892+00:00 |
| pysec-2022-43160 |
9.8 (3.1)
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-13T20:15:00+00:00 | 2024-11-21T14:23:00.515460+00:00 |
| pysec-2022-43159 |
9.8 (3.1)
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-14T12:15:00+00:00 | 2024-11-21T14:23:00.456366+00:00 |
| pysec-2022-43158 |
6.1 (3.1)
|
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | rdiffweb | 2022-10-10T12:15:00+00:00 | 2024-11-21T14:23:00.394851+00:00 |
| pysec-2022-43157 |
5.3 (3.1)
|
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | rdiffweb | 2022-10-06T18:16:00+00:00 | 2024-11-21T14:23:00.333240+00:00 |
| pysec-2022-43156 |
9.8 (3.1)
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-06T18:16:00+00:00 | 2024-11-21T14:23:00.273706+00:00 |
| pysec-2022-43155 |
5.5 (3.1)
|
wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segment… | pywasm3 | 2022-12-13T23:15:00Z | 2024-11-21T14:23:00.213494Z |
| pysec-2022-43153 |
5.5 (3.1)
|
Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirect… | pywasm3 | 2022-04-16T16:15:00Z | 2024-11-21T14:23:00.113164Z |
| pysec-2023-292 |
7.8 (3.1)
|
PyInstaller bundles a Python application and all its dependencies into a single package. … | pyinstaller | 2023-12-09T01:15:00+00:00 | 2024-11-21T14:22:59.796437+00:00 |
| pysec-2023-291 |
7.8 (3.1)
|
PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Goo… | pydrive2 | 2023-12-05T21:15:00+00:00 | 2024-11-21T14:22:59.681617+00:00 |
| pysec-2023-290 |
8.8 (3.1)
|
An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaP… | pyassimp | 2023-01-20T19:15:00Z | 2024-11-21T14:22:59.461917Z |
| pysec-2022-43149 |
6.5 (3.1)
|
Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentatio… | pyassimp | 2022-09-06T23:15:00Z | 2024-11-21T14:22:59.412324Z |
| pysec-2022-43148 |
5.5 (3.1)
|
Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow i… | pyassimp | 2022-01-01T00:15:00Z | 2024-11-21T14:22:59.35793Z |
| pysec-2022-43147 |
9.8 (3.1)
|
pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact… | pyanxdns | 2022-06-08T20:15:00Z | 2024-11-21T14:22:59.309018Z |
| pysec-2017-146 |
7.5 (3.1)
|
Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users abou… | pyignite | 2017-06-28T13:29:00Z | 2024-11-21T14:22:59.736776Z |
| pysec-2014-115 |
|
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using… | portage | 2014-09-29T22:55:00Z | 2024-11-21T14:22:59.10272Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587045Z |
| gsd-2024-4231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.534700Z |
| gsd-2024-4230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587245Z |
| gsd-2024-4229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.599914Z |
| gsd-2024-4228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.563352Z |
| gsd-2024-4227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.624403Z |
| gsd-2024-32946 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:15.595218Z |
| gsd-2018-25102 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:03:04.675370Z |
| gsd-2024-33676 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.297185Z |
| gsd-2024-33675 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.273998Z |
| gsd-2024-33674 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.150702Z |
| gsd-2024-33673 | An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access… | 2024-04-26T05:02:19.162010Z |
| gsd-2024-33672 | An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used i… | 2024-04-26T05:02:19.171109Z |
| gsd-2024-33671 | An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec… | 2024-04-26T05:02:19.236619Z |
| gsd-2024-33670 | Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom c… | 2024-04-26T05:02:19.244921Z |
| gsd-2024-33669 | An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple … | 2024-04-26T05:02:19.275535Z |
| gsd-2024-33668 | An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, pa… | 2024-04-26T05:02:19.281107Z |
| gsd-2024-33667 | An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a re… | 2024-04-26T05:02:19.258447Z |
| gsd-2024-33666 | An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket co… | 2024-04-26T05:02:19.293701Z |
| gsd-2024-33665 | ** DISPUTED ** angular-translate through 2.19.1 allows XSS via a crafted key that is used… | 2024-04-26T05:02:19.265097Z |
| gsd-2024-33664 | python-jose through 3.3.0 allows attackers to cause a denial of service (resource consump… | 2024-04-26T05:02:19.131389Z |
| gsd-2024-33663 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.175935Z |
| gsd-2024-33662 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149532Z |
| gsd-2024-33661 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.254483Z |
| gsd-2024-33660 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.226651Z |
| gsd-2024-33659 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.194728Z |
| gsd-2024-33658 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.225239Z |
| gsd-2024-33657 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.176271Z |
| gsd-2024-33656 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.263057Z |
| gsd-2024-33655 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.215383Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-788 | Malicious code in @sporting-life/sportinglife-betslip-sdk (npm) | 2026-02-06T03:57:32Z | 2026-02-06T16:19:56Z |
| mal-2026-787 | Malicious code in @sporting-life/sportinglife-be (npm) | 2026-02-06T04:07:15Z | 2026-02-06T16:19:56Z |
| mal-2026-786 | Malicious code in @rsgweb/locale-tools (npm) | 2026-02-06T03:46:00Z | 2026-02-06T16:19:56Z |
| MAL-2026-805 | Malicious code in aligned-arrays (npm) | 2026-02-06T14:24:56Z | 2026-02-06T16:19:56Z |
| MAL-2026-802 | Malicious code in @sbseg-plugin/qbo-web-app-ui (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-801 | Malicious code in @rsgweb/utils (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-800 | Malicious code in @rsgweb/tina (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-799 | Malicious code in @rsgweb/rockstar-account (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-798 | Malicious code in @rsgweb/modules-core-www-page (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-797 | Malicious code in @rsgweb/modules-core-feedback (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-796 | Malicious code in @rdxportal/ui-components (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-795 | Malicious code in @opposhop/nuxt-ssr-cache (npm) | 2026-02-06T11:10:47Z | 2026-02-06T16:19:56Z |
| MAL-2026-794 | Malicious code in @meli-lint/eslint-config-tests-jest (npm) | 2026-02-06T11:10:46Z | 2026-02-06T16:19:56Z |
| MAL-2026-793 | Malicious code in @meli-lint/eslint-config-base-ts (npm) | 2026-02-06T11:10:46Z | 2026-02-06T16:19:56Z |
| MAL-2026-792 | Malicious code in @meli-lint/eslint-config-base (npm) | 2026-02-06T11:10:47Z | 2026-02-06T16:19:56Z |
| MAL-2026-791 | Malicious code in @hashicorp-internal/vault-reporting (npm) | 2026-02-06T11:10:46Z | 2026-02-06T16:19:56Z |
| MAL-2026-788 | Malicious code in @sporting-life/sportinglife-betslip-sdk (npm) | 2026-02-06T03:57:32Z | 2026-02-06T16:19:56Z |
| MAL-2026-787 | Malicious code in @sporting-life/sportinglife-be (npm) | 2026-02-06T04:07:15Z | 2026-02-06T16:19:56Z |
| MAL-2026-786 | Malicious code in @rsgweb/locale-tools (npm) | 2026-02-06T03:46:00Z | 2026-02-06T16:19:56Z |
| mal-2026-808 | Malicious code in carcent (PyPI) | 2026-02-06T15:23:01Z | 2026-02-06T15:23:01Z |
| MAL-2026-808 | Malicious code in carcent (PyPI) | 2026-02-06T15:23:01Z | 2026-02-06T15:23:01Z |
| mal-2026-803 | Malicious code in moveworks-pipeline-test (PyPI) | 2026-02-06T11:36:06Z | 2026-02-06T11:36:06Z |
| MAL-2026-803 | Malicious code in moveworks-pipeline-test (PyPI) | 2026-02-06T11:36:06Z | 2026-02-06T11:36:06Z |
| mal-2026-790 | Malicious code in p7zip-full (PyPI) | 2026-02-06T09:30:38Z | 2026-02-06T09:30:38Z |
| MAL-2026-790 | Malicious code in p7zip-full (PyPI) | 2026-02-06T09:30:38Z | 2026-02-06T09:30:38Z |
| mal-2025-47509 | Malicious code in syf-api-legacy (npm) | 2025-09-22T04:00:48Z | 2026-02-06T07:35:22Z |
| mal-2025-4581 | Malicious code in syf-api (npm) | 2025-05-26T06:27:11Z | 2026-02-06T07:35:22Z |
| MAL-2025-47509 | Malicious code in syf-api-legacy (npm) | 2025-09-22T04:00:48Z | 2026-02-06T07:35:22Z |
| MAL-2025-4581 | Malicious code in syf-api (npm) | 2025-05-26T06:27:11Z | 2026-02-06T07:35:22Z |
| mal-2026-730 | Malicious code in zappr (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:28Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2934 | ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-29T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2927 | NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-28T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2891 | WebKitGTK: Mehrere Schwachstellen ermöglichen Codeausführung und DoS | 2025-12-18T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2888 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-12-18T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2751 | WebKitGTK: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2657 | WebKitGTK: Mehrere Schwachstellen | 2025-11-20T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2607 | Red Hat Enterprise Linux (lasso): Eine Schwachstelle ermöglichen Codeausführung | 2025-11-16T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2600 | PostgreSQL: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-13T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2449 | GIMP: Schwachstelle ermöglicht Codeausführung | 2025-10-29T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2392 | Internet Systems Consortium BIND: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2365 | Oracle Java SE: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2269 | WebKitGTK: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung | 2025-10-13T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2212 | OpenSSH: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-10-06T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2166 | OpenSSL und LibreSSL: Mehrere Schwachstellen | 2025-09-30T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2153 | VMware Cloud Foundation, vSphere, Aria Operations und Tools: Mehrere Schwachstellen | 2025-09-29T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2129 | GIMP: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-09-24T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2104 | WebKitGTK: Mehrere Schwachstellen | 2025-09-22T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2101 | Ghostscript: Schwachstellen ermöglichen Codeausführung | 2025-09-21T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2092 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-18T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2087 | Linux Kernel: Mehrere Schwachstellen | 2025-09-17T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2077 | Linux Kernel: Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2039 | CUPS: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1828 | PAM (linux-pam package): Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-08-13T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1754 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-08-10T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1748 | libarchive: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung | 2025-08-07T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1732 | Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht Codeausführung | 2025-08-06T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1646 | Red Hat Enterprise Linux (nodejs, perl): Mehrere Schwachstellen | 2025-07-27T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1637 | GNU libc: Schwachstelle ermöglicht unspezifischen Angriff | 2025-07-23T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1575 | vim (.tar and .zip): Mehrere Schwachstellen ermöglichen Codeausführung | 2025-07-15T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1569 | Oracle Java SE: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0170 | Kwetsbaarheden verholpen in VMware Cloud Foundation | 2025-05-21T09:12:05.676292Z | 2025-05-21T09:12:05.676292Z |
| ncsc-2025-0169 | Kwetsbaarheden verholpen in Google Chrome | 2025-05-16T12:41:47.685095Z | 2025-05-16T12:41:47.685095Z |
| ncsc-2025-0152 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager Mobile (EPMM, voormalig MobileIron) | 2025-05-13T15:35:45.784542Z | 2025-05-16T09:42:15.822544Z |
| ncsc-2025-0168 | Kwetsbaarheid verholpen in FortiVoice | 2025-05-14T13:50:54.001151Z | 2025-05-14T13:50:54.001151Z |
| ncsc-2025-0167 | Kwetsbaarheden verholpen in Zoho ManageEngine | 2025-05-14T13:19:58.768414Z | 2025-05-14T13:19:58.768414Z |
| ncsc-2025-0166 | Kwetsbaarheden verholpen in Fortinet producten | 2025-05-14T08:41:08.980708Z | 2025-05-14T08:41:08.980708Z |
| ncsc-2025-0165 | Kwetsbaarheid verholpen in Adobe Illustrator | 2025-05-14T08:25:17.869407Z | 2025-05-14T08:25:17.869407Z |
| ncsc-2025-0164 | Kwetsbaarheden verholpen in Adobe Photoshop | 2025-05-14T08:24:02.186984Z | 2025-05-14T08:24:02.186984Z |
| ncsc-2025-0163 | Kwetsbaarheden verholpen in Adobe Animate | 2025-05-14T08:21:49.917725Z | 2025-05-14T08:21:49.917725Z |
| ncsc-2025-0162 | Kwetsbaarheden verholpen in Adobe ColdFusion | 2025-05-14T08:18:54.775740Z | 2025-05-14T08:18:54.775740Z |
| ncsc-2025-0161 | Kwetsbaarheid verholpen in Ivanti Neurons for ITSM | 2025-05-14T08:16:04.867590Z | 2025-05-14T08:16:04.867590Z |
| ncsc-2025-0160 | Kwetsbaarheden verholpen in Siemens producten | 2025-05-14T07:13:32.957900Z | 2025-05-14T07:13:32.957900Z |
| ncsc-2025-0159 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-05-13T19:47:12.555983Z | 2025-05-13T19:47:12.555983Z |
| ncsc-2025-0158 | Kwetsbaarheden verholpen in Microsoft Edge | 2025-05-13T19:17:52.478234Z | 2025-05-13T19:17:52.478234Z |
| ncsc-2025-0157 | Kwetsbaarheden verholpen in Microsoft Defender | 2025-05-13T19:14:25.545635Z | 2025-05-13T19:14:25.545635Z |
| ncsc-2025-0156 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-05-13T19:10:10.012472Z | 2025-05-13T19:10:10.012472Z |
| ncsc-2025-0155 | Kwetsbaarheden verholpen in Microsoft Office | 2025-05-13T18:58:56.989073Z | 2025-05-13T18:58:56.989073Z |
| ncsc-2025-0154 | Kwetsbaarheden verholpen in Microsoft Dynamics Dataverse | 2025-05-13T18:44:03.290810Z | 2025-05-13T18:44:03.290810Z |
| ncsc-2025-0153 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-05-13T18:35:28.760017Z | 2025-05-13T18:35:28.760017Z |
| ncsc-2025-0151 | Kwetsbaarheden verholpen in Apple macOS | 2025-05-13T09:19:37.094950Z | 2025-05-13T09:19:37.094950Z |
| ncsc-2025-0150 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2025-05-13T09:14:44.606584Z | 2025-05-13T09:14:44.606584Z |
| ncsc-2025-0149 | Kwetsbaarheden verholpen in SAP producten | 2025-05-13T09:05:38.110295Z | 2025-05-13T09:05:38.110295Z |
| ncsc-2025-0148 | Kwetsbaarheden verholpen in ASUS DriverHub | 2025-05-12T13:22:18.034442Z | 2025-05-12T13:22:18.034442Z |
| ncsc-2025-0147 | Kwetsbaarheden verholpen in F5 BIG-IP | 2025-05-09T08:07:32.002935Z | 2025-05-09T08:07:32.002935Z |
| ncsc-2025-0146 | Kwetsbaarheden verholpen in Cisco IOS XE Software | 2025-05-08T08:43:57.415709Z | 2025-05-08T08:43:57.415709Z |
| ncsc-2025-0145 | Kwetsbaarheden verholpen in SonicWall SMA100 | 2025-05-08T08:40:26.301646Z | 2025-05-08T08:40:26.301646Z |
| ncsc-2025-0144 | Kwetsbaarheden verholpen in SysAid On-Prem | 2025-05-08T06:56:21.378830Z | 2025-05-08T06:56:21.378830Z |
| ncsc-2025-0143 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-05-07T11:19:50.517092Z | 2025-05-07T11:19:50.517092Z |
| ncsc-2025-0142 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2025-05-06T08:01:05.582708Z | 2025-05-06T08:01:05.582708Z |
| ncsc-2025-0141 | Kwetsbaarheden verholpen in Keycloak | 2025-05-06T07:12:42.075830Z | 2025-05-06T07:12:42.075830Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-087301 | SSA-087301: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.1 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-068047 | SSA-068047: Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2 | 2023-12-12T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-071402 | SSA-071402: Multiple Vulnerabilities in SICAM Products | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| ssa-998949 | SSA-998949: Hard-coded Default Encryption Key in Mendix Encryption Module V10.0.0 and V10.0.1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-928781 | SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-868282 | SSA-868282: Multiple Vulnerabilities in SINEMA Remote Connect Client before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-825651 | SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-824889 | SSA-824889: XML File Parsing Vulnerabilities in JT Open and PLM XML SDK | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-780073 | SSA-780073: Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets | 2020-02-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-779936 | SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-750274 | SSA-750274: Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW | 2024-04-19T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-484086 | SSA-484086: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.1 | 2022-06-14T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-473245 | SSA-473245: Denial of Service Vulnerability in Profinet Devices | 2019-10-08T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-381581 | SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-346262 | SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products | 2017-11-23T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-160243 | SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 | 2023-10-10T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-093430 | SSA-093430: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V3.0 | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:2818 | Red Hat Security Advisory: pcs security update | 2026-02-17T12:24:53+00:00 | 2026-02-18T09:32:38+00:00 |
| rhsa-2026:2817 | Red Hat Security Advisory: pcs security update | 2026-02-17T12:40:37+00:00 | 2026-02-18T09:32:38+00:00 |
| rhsa-2026:2816 | Red Hat Security Advisory: pcs security update | 2026-02-17T12:26:26+00:00 | 2026-02-18T09:32:37+00:00 |
| rhsa-2026:2694 | Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage | 2026-02-12T22:32:47+00:00 | 2026-02-18T09:32:36+00:00 |
| rhsa-2026:2688 | Red Hat Security Advisory: osbuild-composer security update | 2026-02-16T10:30:06+00:00 | 2026-02-18T09:32:36+00:00 |
| rhsa-2026:2687 | Red Hat Security Advisory: osbuild-composer security update | 2026-02-16T10:31:46+00:00 | 2026-02-18T09:32:36+00:00 |
| rhsa-2026:2686 | Red Hat Security Advisory: osbuild-composer security update | 2026-02-12T19:52:02+00:00 | 2026-02-18T09:32:35+00:00 |
| rhsa-2026:2652 | Red Hat Security Advisory: OpenShift Container Platform 4.19.24 security and extras update | 2026-02-17T20:05:59+00:00 | 2026-02-18T09:32:35+00:00 |
| rhsa-2026:2685 | Red Hat Security Advisory: osbuild-composer security update | 2026-02-12T20:07:52+00:00 | 2026-02-18T09:32:34+00:00 |
| rhsa-2026:2673 | Red Hat Security Advisory: OpenShift Container Platform 4.17.49 security and extras update | 2026-02-17T21:05:24+00:00 | 2026-02-18T09:32:33+00:00 |
| rhsa-2026:2662 | Red Hat Security Advisory: OpenShift Container Platform 4.16.57 security and extras update | 2026-02-18T08:54:32+00:00 | 2026-02-18T09:32:33+00:00 |
| rhsa-2026:2661 | Red Hat Security Advisory: OpenShift Container Platform 4.16.57 bug fix and security update | 2026-02-18T09:27:53+00:00 | 2026-02-18T09:32:32+00:00 |
| rhsa-2026:2520 | Red Hat Security Advisory: toolbox security update | 2026-02-11T09:49:41+00:00 | 2026-02-18T09:32:32+00:00 |
| rhsa-2026:2519 | Red Hat Security Advisory: toolbox security update | 2026-02-11T09:37:40+00:00 | 2026-02-18T09:32:31+00:00 |
| rhsa-2026:2484 | Red Hat Security Advisory: pcs security update | 2026-02-10T20:17:03+00:00 | 2026-02-18T09:32:31+00:00 |
| rhsa-2026:2469 | Red Hat Security Advisory: pcs security update | 2026-02-10T19:17:43+00:00 | 2026-02-18T09:32:30+00:00 |
| rhsa-2026:2465 | Red Hat Security Advisory: pcs security update | 2026-02-10T18:26:38+00:00 | 2026-02-18T09:32:30+00:00 |
| rhsa-2026:2462 | Red Hat Security Advisory: pcs security update | 2026-02-10T17:54:59+00:00 | 2026-02-18T09:32:29+00:00 |
| rhsa-2026:2452 | Red Hat Security Advisory: pcs security update | 2026-02-10T15:37:57+00:00 | 2026-02-18T09:32:29+00:00 |
| rhsa-2026:2438 | Red Hat Security Advisory: pcs security update | 2026-02-10T12:35:01+00:00 | 2026-02-18T09:32:29+00:00 |
| rhsa-2026:2351 | Red Hat Security Advisory: VolSync v0.13 security fixes and container updates | 2026-02-09T15:55:39+00:00 | 2026-02-18T09:32:28+00:00 |
| rhsa-2026:2145 | Red Hat Security Advisory: Kiali 1.73.26 for Red Hat OpenShift Service Mesh 2.6 | 2026-02-05T15:53:57+00:00 | 2026-02-18T09:32:27+00:00 |
| rhsa-2026:2120 | Red Hat Security Advisory: OpenShift Container Platform 4.20.14 security and extras update | 2026-02-11T02:51:09+00:00 | 2026-02-18T09:32:26+00:00 |
| rhsa-2026:2130 | Red Hat Security Advisory: OpenShift Container Platform 4.21.1 security and extras update | 2026-02-10T08:58:36+00:00 | 2026-02-18T09:32:25+00:00 |
| rhsa-2026:2129 | Red Hat Security Advisory: OpenShift Container Platform 4.21.1 bug fix and security update | 2026-02-10T09:39:14+00:00 | 2026-02-18T09:32:24+00:00 |
| rhsa-2026:2119 | Red Hat Security Advisory: OpenShift Container Platform 4.20.14 bug fix and security update | 2026-02-11T04:25:53+00:00 | 2026-02-18T09:32:24+00:00 |
| rhsa-2026:2079 | Red Hat Security Advisory: OpenShift Container Platform 4.18.33 security and extras update | 2026-02-11T04:27:43+00:00 | 2026-02-18T09:32:24+00:00 |
| rhsa-2026:2078 | Red Hat Security Advisory: OpenShift Container Platform 4.18.33 bug fix and security update | 2026-02-11T04:27:02+00:00 | 2026-02-18T09:32:23+00:00 |
| rhsa-2026:2066 | Red Hat Security Advisory: OpenShift Container Platform 4.12.85 security and extras update | 2026-02-12T10:52:37+00:00 | 2026-02-18T09:32:23+00:00 |
| rhsa-2026:2065 | Red Hat Security Advisory: OpenShift Container Platform 4.12.85 bug fix and security update | 2026-02-12T12:19:52+00:00 | 2026-02-18T09:32:22+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-259-02 | Hitachi Energy RTU500 series | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| va-25-259-01 | CISA Thorium multiple vulnerabilities | 2025-09-16T00:00:00Z | 2025-09-16T00:00:00Z |
| va-25-258-01 | psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse | 2025-09-15T18:41:08Z | 2025-09-15T18:41:08Z |
| va-25-174-01 | OPEXUS FOIAXpress Public Access Link (PAL) multiple vulnerabilities | 2025-07-31T17:01:09Z | 2025-09-09T21:12:34Z |
| va-25-252-01 | OPEXUS FOIAXpress Public Access Link (PAL) SQL injection | 2025-09-09T20:48:26Z | 2025-09-09T20:48:26Z |
| icsa-25-093-01 | Hitachi Energy RTU500 Series (Update B) | 2025-03-25T12:30:00.000000Z | 2025-09-09T12:30:00.000000Z |
| icsa-25-023-02 | Hitachi Energy RTU500 Series Product (Update A) | 2024-04-30T12:30:00.000000Z | 2025-09-09T10:00:00.000000Z |
| icsa-25-252-09 | Rockwell Automation 1783-NATR | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-07 | Rockwell Automation ControlLogix 5580 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-06 | Rockwell Automation CompactLogix® 5480 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-05 | Rockwell Automation FactoryTalk Activation Manager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-04 | Rockwell Automation FactoryTalk Optix | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-03 | Rockwell Automation Stratix IOS | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-01 | Rockwell Automation ThinManager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-233-01 | Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module (Update A) | 2025-08-21T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-219-07 | EG4 Electronics EG4 Inverters (Update B) | 2025-08-07T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-058-01 | Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B) | 2025-02-27T07:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-02 | ABB Cylon Aspect BMS/BAS | 2025-09-09T05:00:00.000000Z | 2025-09-09T05:00:00.000000Z |
| icsa-25-266-03 | Schneider Electric SESU | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-08 | Schneider Electric EcoStruxure | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-035-07 | Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A) | 2025-01-14T00:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-06 | Siemens Industrial Edge Management | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-05 | Siemens Apogee PXC and Talon TC Devices | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-04 | Siemens SINEC OS | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-02 | Siemens SIMATIC Virtualization as a Service (SIVaaS) | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-01 | Siemens SIMOTION Tools | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-226-05 | Siemens WIBU CodeMeter Runtime | 2025-08-12T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-072-03 | Siemens SIMATIC S7-1500 TM MFP | 2025-03-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-24-102-08 | Siemens OPC Foundation Local Discovery Server Affecting Siemens Products | 2023-04-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-105-07 | Delta Electronics COMMGR (Update A) | 2025-04-15T06:00:00.000000Z | 2025-09-04T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asaftd-dap-dos-bhEkP7n | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-bf-dos-vdzhlqrw | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-bf-dos-vDZhLqrW | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-nyh3fhp | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-nyH3fhp | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-czf8gt | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-cZf8gT | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-4gyewmkg | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-4gYEWMKg | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-tls-cwy6zxb | Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-tls-CWY6zXB | Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-rce-graupeuf | Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-rce-gRAuPEUF | Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-dos-eedwu5rm | Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-dos-eEDWu5RM | Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ftd-priv-esc-hbs9gnwq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ftd-priv-esc-hBS9gnwq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-fmc-code-inj-wshrgz8l | Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-10-23T15:57:47+00:00 |
| cisco-sa-ftd-fmc-code-inj-wSHrgz8L | Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-10-23T15:57:47+00:00 |
| cisco-sa-ucsc-bkpsky-tgj5f73j | Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ucsc-bkpsky-TgJ5f73J | Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tax76u3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tAX76U3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-vlan-dos-27pur5rt | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-vlan-dos-27Pur5RT | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yj2osdhv | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yJ2OSDhV | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qe33tcms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qE33TCms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-fduf3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-50015 | ext4: dax: fix overflowing extents beyond inode size when partially writing | 2024-10-01T07:00:00.000Z | 2026-02-18T02:56:23.000Z |
| msrc_cve-2024-42069 | net: mana: Fix possible double free in error handling path | 2024-07-01T07:00:00.000Z | 2026-02-18T02:56:21.000Z |
| msrc_cve-2025-37810 | usb: dwc3: gadget: check that event count does not exceed event buffer length | 2025-05-02T00:00:00.000Z | 2026-02-18T02:56:12.000Z |
| msrc_cve-2025-37747 | perf: Fix hang while freeing sigtrap event | 2025-05-02T00:00:00.000Z | 2026-02-18T02:55:56.000Z |
| msrc_cve-2025-5987 | Libssh: invalid return code for chacha20 poly1305 with openssl backend | 2025-07-02T00:00:00.000Z | 2026-02-18T02:55:49.000Z |
| msrc_cve-2025-37840 | mtd: rawnand: brcmnand: fix PM resume warning | 2025-05-02T00:00:00.000Z | 2026-02-18T02:55:43.000Z |
| msrc_cve-2024-49960 | ext4: fix timer use-after-free on failed mount | 2024-10-01T07:00:00.000Z | 2026-02-18T02:55:43.000Z |
| msrc_cve-2024-42064 | drm/amd/display: Skip pipe if the pipe idx not set properly | 2024-07-01T07:00:00.000Z | 2026-02-18T02:55:43.000Z |
| msrc_cve-2023-45142 | OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics | 2023-10-01T00:00:00.000Z | 2026-02-18T02:55:42.000Z |
| msrc_cve-2019-14194 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. | 2019-07-02T00:00:00.000Z | 2026-02-18T02:55:39.000Z |
| msrc_cve-2024-26900 | md: fix kmemleak of rdev->serial | 2024-04-02T07:00:00.000Z | 2026-02-18T02:55:36.000Z |
| msrc_cve-2025-37891 | ALSA: ump: Fix buffer overflow at UMP SysEx message conversion | 2025-05-02T00:00:00.000Z | 2026-02-18T02:55:14.000Z |
| msrc_cve-2024-42070 | netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers | 2024-07-01T07:00:00.000Z | 2026-02-18T02:55:11.000Z |
| msrc_cve-2019-14201 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply. | 2019-07-02T00:00:00.000Z | 2026-02-18T02:55:01.000Z |
| msrc_cve-2024-26883 | bpf: Fix stackmap overflow check on 32-bit arches | 2024-04-02T07:00:00.000Z | 2026-02-18T02:54:55.000Z |
| msrc_cve-2025-38104 | drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV | 2025-04-02T00:00:00.000Z | 2026-02-18T02:54:50.000Z |
| msrc_cve-2025-37933 | octeon_ep: Fix host hang issue during device reboot | 2025-05-02T00:00:00.000Z | 2026-02-18T02:54:46.000Z |
| msrc_cve-2025-38184 | tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer | 2025-07-02T00:00:00.000Z | 2026-02-18T02:54:42.000Z |
| msrc_cve-2023-39319 | Improper handling of special tags within script contexts in html/template | 2023-09-01T00:00:00.000Z | 2026-02-18T02:54:40.000Z |
| msrc_cve-2024-49991 | drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer | 2024-10-01T07:00:00.000Z | 2026-02-18T02:54:27.000Z |
| msrc_cve-2024-42228 | drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc | 2024-07-01T07:00:00.000Z | 2026-02-18T02:54:25.000Z |
| msrc_cve-2024-26885 | bpf: Fix DEVMAP_HASH overflow check on 32-bit arches | 2024-04-02T07:00:00.000Z | 2026-02-18T02:54:25.000Z |
| msrc_cve-2019-14199 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call. | 2019-07-02T00:00:00.000Z | 2026-02-18T02:54:24.000Z |
| msrc_cve-2025-23135 | RISC-V: KVM: Teardown riscv specific bits after kvm_exit | 2025-04-02T00:00:00.000Z | 2026-02-18T02:54:23.000Z |
| msrc_cve-2024-46733 | btrfs: fix qgroup reserve leaks in cow_file_range | 2024-09-01T07:00:00.000Z | 2026-02-18T02:54:17.000Z |
| msrc_cve-2025-68756 | block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock | 2026-01-02T00:00:00.000Z | 2026-02-18T02:54:14.000Z |
| msrc_cve-2025-38197 | platform/x86: dell_rbu: Fix list usage | 2025-07-02T00:00:00.000Z | 2026-02-18T02:54:12.000Z |
| msrc_cve-2025-21649 | net: hns3: fix kernel crash when 1588 is sent on HIP08 devices | 2025-01-02T00:00:00.000Z | 2026-02-18T02:54:09.000Z |
| msrc_cve-2024-26903 | Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security | 2024-04-02T07:00:00.000Z | 2026-02-18T02:53:53.000Z |
| msrc_cve-2024-57258 | Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64. | 2025-02-02T00:00:00.000Z | 2026-02-18T02:53:42.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15817-1 | buildpacks-cli-0.39.1-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| opensuse-su-2025:15816-1 | ImageMagick-7.1.2.10-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| opensuse-su-2025:15815-1 | xkbcomp-1.5.0-1.1 on GA media | 2025-12-11T00:00:00Z | 2025-12-11T00:00:00Z |
| opensuse-su-2025:15814-1 | MozillaThunderbird-140.6.0-1.1 on GA media | 2025-12-11T00:00:00Z | 2025-12-11T00:00:00Z |
| opensuse-su-2025:15813-1 | MozillaFirefox-146.0-1.1 on GA media | 2025-12-11T00:00:00Z | 2025-12-11T00:00:00Z |
| opensuse-su-2025:15812-1 | libpoppler-cpp2-25.09.1-4.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:15811-1 | keylime-config-7.13.0+40-1.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:15810-1 | gio-branding-upstream-2.86.3-1.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:15809-1 | firefox-esr-140.6.0-1.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:15808-1 | apache2-2.4.66-1.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:20148-1 | Security update for openexr | 2025-12-09T16:32:45Z | 2025-12-09T16:32:45Z |
| opensuse-su-2025:20153-1 | Security update for python-Django | 2025-12-09T13:43:55Z | 2025-12-09T13:43:55Z |
| opensuse-su-2025:15807-1 | regclient-0.11.1-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15806-1 | python311-Django4-4.2.27-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15805-1 | python311-Django-5.2.9-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15804-1 | nvidia-open-driver-G07-signed-check-590.44.01-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15803-1 | krb5-1.22.1-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15802-1 | corepack24-24.11.1-2.1 on GA media | 2025-12-08T00:00:00Z | 2025-12-08T00:00:00Z |
| opensuse-su-2025:15801-1 | libpng16-16-1.6.52-1.1 on GA media | 2025-12-08T00:00:00Z | 2025-12-08T00:00:00Z |
| opensuse-su-2025:15800-1 | kdeconnect-kde-25.11.90-1.1 on GA media | 2025-12-08T00:00:00Z | 2025-12-08T00:00:00Z |
| opensuse-su-2025:15799-1 | libwireshark19-4.6.2-1.1 on GA media | 2025-12-05T00:00:00Z | 2025-12-05T00:00:00Z |
| opensuse-su-2025:15798-1 | rhino-1.7.15.1-1.1 on GA media | 2025-12-05T00:00:00Z | 2025-12-05T00:00:00Z |
| opensuse-su-2025:20143-1 | Security update for git-bug | 2025-12-04T13:08:26Z | 2025-12-04T13:08:26Z |
| opensuse-su-2025:20138-1 | Security update for act | 2025-12-04T12:02:10Z | 2025-12-04T12:02:10Z |
| opensuse-su-2025:15797-1 | libpng12-0-1.2.59-4.1 on GA media | 2025-12-04T00:00:00Z | 2025-12-04T00:00:00Z |
| opensuse-su-2025:15796-1 | go1.24-1.24.11-1.1 on GA media | 2025-12-04T00:00:00Z | 2025-12-04T00:00:00Z |
| opensuse-su-2025:20135-1 | Security update for mozjs128 | 2025-12-03T20:41:04Z | 2025-12-03T20:41:04Z |
| opensuse-su-2025-20135-1 | Security update for mozjs128 | 2025-12-03T20:41:04Z | 2025-12-03T20:41:04Z |
| opensuse-su-2025:15795-1 | go1.25-1.25.5-1.1 on GA media | 2025-12-03T00:00:00Z | 2025-12-03T00:00:00Z |
| opensuse-su-2025:15794-1 | chromedriver-143.0.7499.40-2.1 on GA media | 2025-12-03T00:00:00Z | 2025-12-03T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2025-614 | Heap-buffer-overflow in hevc_hvcC_to_AnnexB_NAL | 2025-08-12T00:00:36.634849Z | 2025-08-12T00:00:36.635239Z |
| osv-2025-613 | Heap-buffer-overflow in check_sync_pes | 2025-08-12T00:00:33.354786Z | 2025-08-12T00:00:33.355391Z |
| osv-2025-608 | Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes | 2025-08-09T00:02:00.092320Z | 2025-08-11T14:17:56.957704Z |
| osv-2024-380 | Heap-use-after-free in H5FL__blk_gc_list | 2024-04-30T00:12:11.366893Z | 2025-08-06T15:10:14.893372Z |
| osv-2025-600 | Heap-buffer-overflow in generic_unpack | 2025-08-05T00:10:00.536266Z | 2025-08-05T00:10:00.536669Z |
| osv-2025-597 | Heap-buffer-overflow in generic_unpack | 2025-08-04T00:08:26.345735Z | 2025-08-04T00:08:26.346368Z |
| osv-2025-591 | UNKNOWN READ in mov_read_header | 2025-08-02T00:02:00.509459Z | 2025-08-02T00:02:00.510035Z |
| osv-2025-589 | Heap-buffer-overflow in isvcd_decode_recon_tfr_nmb_base_lyr | 2025-08-01T00:10:54.848946Z | 2025-08-01T00:10:54.849286Z |
| osv-2025-584 | Heap-buffer-overflow in isvcd_mark_err_slice_skip | 2025-07-31T00:09:08.538145Z | 2025-07-31T00:09:08.538507Z |
| osv-2025-93 | Heap-buffer-overflow in lj_strfmt_pushvf | 2025-02-05T00:18:14.584575Z | 2025-07-23T14:24:29.384461Z |
| osv-2025-249 | Heap-use-after-free in lj_strfmt_pushvf | 2025-04-02T00:09:53.120387Z | 2025-07-23T14:23:01.826780Z |
| osv-2025-267 | Stack-buffer-overflow in snap_usedef | 2025-04-08T00:17:16.034122Z | 2025-07-23T14:22:40.655455Z |
| osv-2025-570 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2025-07-23T00:17:34.356115Z | 2025-07-23T00:17:34.356449Z |
| osv-2023-838 | Use-of-uninitialized-value in wabt::BinaryReaderIR::OnOpcode | 2023-09-12T14:01:08.316035Z | 2025-07-22T14:22:12.701561Z |
| osv-2025-564 | Heap-buffer-overflow in ndpi_match_host_subprotocol | 2025-07-21T00:03:40.000875Z | 2025-07-21T00:03:40.001170Z |
| osv-2025-550 | Use-of-uninitialized-value in CFF::cff2_cs_opset_t<cff2_cs_opset_subr_subset_t, CFF::subr_subset_param_t, CFF: | 2025-07-16T00:09:08.050994Z | 2025-07-16T00:09:08.051469Z |
| osv-2025-544 | Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32 | 2025-07-11T00:16:53.687776Z | 2025-07-11T00:16:53.688703Z |
| osv-2025-542 | Use-of-uninitialized-value in httpEncode64_3 | 2025-07-10T00:07:45.698070Z | 2025-07-10T00:07:45.698655Z |
| osv-2025-541 | Heap-buffer-overflow in js_create_function | 2025-07-09T00:20:09.455729Z | 2025-07-09T00:20:09.456170Z |
| osv-2025-534 | Heap-use-after-free in ih264_inter_pred_luma_horz_ssse3 | 2025-07-08T00:08:11.218515Z | 2025-07-08T00:08:11.218991Z |
| osv-2025-530 | Invalid-free in cli_pdf | 2025-07-07T00:17:21.884018Z | 2025-07-07T00:17:21.884367Z |
| osv-2025-528 | Heap-buffer-overflow in xmlnode_parser_structural_error_libxml | 2025-07-07T00:10:42.902465Z | 2025-07-07T00:10:42.902766Z |
| osv-2025-525 | UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame | 2025-07-06T00:18:54.304371Z | 2025-07-06T00:18:54.304891Z |
| osv-2022-1276 | Stack-buffer-overflow in ntlm_phase_3 | 2023-06-15T14:01:52.594793Z | 2025-07-05T14:11:24.654963Z |
| osv-2025-524 | Heap-buffer-overflow in JS_CallInternal | 2025-07-05T00:19:21.758513Z | 2025-07-05T00:19:21.758880Z |
| osv-2025-515 | Use-of-uninitialized-value in JS_DefineProperty | 2025-07-03T00:16:17.481972Z | 2025-07-03T00:16:17.482410Z |
| osv-2025-512 | Invalid-free in pdf_decodestream | 2025-07-03T00:00:40.745577Z | 2025-07-03T00:00:40.746200Z |
| osv-2024-440 | UNKNOWN READ | 2024-05-07T00:06:11.033336Z | 2025-07-01T14:30:06.613574Z |
| osv-2024-396 | UNKNOWN READ in jvp_object_free | 2024-05-01T00:11:24.552935Z | 2025-07-01T14:29:52.935440Z |
| osv-2022-785 | Heap-buffer-overflow in resize_packet | 2022-08-27T00:00:14.614126Z | 2025-07-01T14:25:29.517657Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2023-0055 | Multiple soundness issues | 2023-09-03T12:00:00Z | 2024-09-16T14:15:37Z |
| rustsec-2024-0370 | proc-macro-error is unmaintained | 2024-09-01T12:00:00Z | 2024-09-09T12:08:37Z |
| rustsec-2024-0373 | `Endpoint::retry()` calls can lead to panicking | 2024-09-02T12:00:00Z | 2024-09-08T01:47:13Z |
| rustsec-2024-0372 | Memory leak when calling a canister method via `ic_cdk::call` | 2024-09-05T12:00:00Z | 2024-09-07T18:23:36Z |
| rustsec-2024-0371 | gix-path improperly resolves configuration path reported by Git | 2024-09-06T12:00:00Z | 2024-09-07T01:48:33Z |
| rustsec-2024-0369 | phonenumber: panic on parsing crafted phonenumber inputs | 2024-07-07T12:00:00Z | 2024-09-05T13:40:37Z |
| rustsec-2024-0367 | gix-path uses local config across repos when it is the highest scope | 2024-08-31T12:00:00Z | 2024-09-03T22:23:51Z |
| rustsec-2024-0364 | gitoxide-core does not neutralize special characters for terminals | 2024-08-22T12:00:00Z | 2024-08-22T23:15:02Z |
| rustsec-2024-0361 | CWA-2024-004: Gas mispricing in cosmwasm-vm | 2024-08-08T12:00:00Z | 2024-08-08T17:11:37Z |
| rustsec-2024-0356 | `UserIdentity::is_verified` not checking verification status of own user identity while performing the check | 2024-07-18T12:00:00Z | 2024-07-19T10:11:38Z |
| rustsec-2024-0355 | gix-path can use a fake program files location | 2024-07-18T12:00:00Z | 2024-07-18T16:46:06Z |
| rustsec-2024-0354 | Usage of non-constant time base64 decoder could lead to leakage of secret key material | 2024-07-17T12:00:00Z | 2024-07-18T11:24:58Z |
| rustsec-2024-0353 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0352 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0351 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0350 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0349 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0348 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0335 | gix-transport indirect code execution via malicious username | 2024-04-13T12:00:00Z | 2024-07-02T23:39:37Z |
| rustsec-2024-0343 | Reduced entropy due to inadequate character set usage | 2024-06-03T12:00:00Z | 2024-06-15T13:11:33Z |
| rustsec-2020-0071 | Potential segfault in the time crate | 2020-11-18T12:00:00Z | 2024-06-05T14:00:17Z |
| rustsec-2024-0341 | Slow loris vulnerability with default configuration | 2024-03-15T12:00:00Z | 2024-05-21T02:12:32Z |
| rustsec-2024-0339 | Tor path lengths too short when "Vanguards lite" configured | 2024-05-15T12:00:00Z | 2024-05-21T02:12:32Z |
| rustsec-2024-0342 | Degraded secret zeroization capabilities | 2024-05-02T12:00:00Z | 2024-05-20T15:25:56Z |
| rustsec-2024-0337 | The crate `zip_next` has been renamed to `zip`. | 2024-04-20T12:00:00Z | 2024-04-24T14:13:51Z |
| rustsec-2024-0336 | `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input | 2024-04-19T12:00:00Z | 2024-04-20T02:21:14Z |
| rustsec-2023-0079 | KyberSlash: division timings depending on secrets | 2023-12-01T12:00:00Z | 2024-04-12T21:07:31Z |
| rustsec-2024-0334 | `libp2p-tokio-socks5` is unmaintained | 2024-04-05T12:00:00Z | 2024-04-12T16:31:39Z |
| rustsec-2024-0333 | `rsa-export` is unmaintained | 2024-04-06T12:00:00Z | 2024-04-12T16:29:46Z |
| rustsec-2024-0332 | Degradation of service in h2 servers with CONTINUATION Flood | 2024-04-03T12:00:00Z | 2024-04-11T16:16:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2025-14157 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:46.334Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-13978 | Generation of Error Message Containing Sensitive Information in GitLab | 2025-12-18T12:04:44.454Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12734 | Improper Encoding or Escaping of Output in GitLab | 2025-12-18T12:04:35.112Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12716 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:33.134Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12562 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:25.675Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12029 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:20.332Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11984 | Authentication Bypass Using an Alternate Path or Channel in GitLab | 2025-12-18T12:04:14.698Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11247 | Authorization Bypass Through User-Controlled Key in GitLab | 2025-12-18T12:03:59.823Z | 2025-12-18T12:08:20.703Z |
| bit-elk-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:37:43.350Z | 2025-12-18T12:08:20.703Z |
| bit-vault-2025-6013 | Vault LDAP MFA Enforcement Bypass When Using Username As Alias | 2025-08-08T06:04:14.175Z | 2025-12-16T15:14:22.118Z |
| bit-airflow-2025-66388 | Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI | 2025-12-16T14:37:51.384Z | 2025-12-16T15:14:22.118Z |
| bit-mongodb-2025-12657 | Malformed KMIP response may result in access violation | 2025-12-13T11:42:23.275Z | 2025-12-13T12:05:53.698Z |
| bit-django-2025-13372 | Potential SQL injection in FilteredRelation column aliases on PostgreSQL | 2025-12-13T11:36:31.883Z | 2025-12-13T12:05:53.698Z |
| bit-mongodb-2025-14345 | Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server | 2025-12-12T17:42:48.437Z | 2025-12-12T18:06:16.411Z |
| bit-jenkins-2025-67639 | 2025-12-12T11:23:52.749Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67638 | 2025-12-12T11:23:47.516Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67637 | 2025-12-12T11:23:42.761Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67636 | 2025-12-12T11:23:36.617Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67635 | 2025-12-12T11:23:31.286Z | 2025-12-12T11:51:34.315Z | |
| bit-gitlab-2025-7449 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-02T12:05:42.978Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-6195 | Direct Request ('Forced Browsing') in GitLab | 2025-12-02T12:05:25.518Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-13611 | Insertion of Sensitive Information into Log File in GitLab | 2025-12-02T12:03:48.649Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-12653 | Authentication Bypass by Spoofing in GitLab | 2025-12-02T12:03:41.060Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-12571 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-02T12:03:39.208Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2024-9183 | Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab | 2025-12-09T12:02:49.276Z | 2025-12-11T12:06:55.559Z |
| bit-django-2025-64460 | Potential denial-of-service vulnerability in XML serializer text extraction | 2025-12-11T11:37:12.400Z | 2025-12-11T12:06:55.559Z |
| bit-golang-2025-61725 | Excessive CPU consumption in ParseAddress in net/mail | 2025-11-06T12:58:41.872Z | 2025-12-10T12:06:24.101Z |
| bit-pgbouncer-2025-2291 | PgBouncer default auth_query does not take Postgres password expiry into account | 2025-04-18T19:19:16.416Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-66220 | Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte | 2025-12-06T11:38:21.122Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-64763 | Envoy forwards early CONNECT data in TCP proxy mode | 2025-12-06T11:38:19.488Z | 2025-12-09T12:08:00.393Z |
| ID | Description | Updated |
|---|---|---|
| var-201804-1225 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T21:48:34.131000Z |
| var-200906-0603 | Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possi… | 2024-07-23T21:48:33.753000Z |
| var-202204-0596 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle … | 2024-07-23T21:48:32.252000Z |
| var-202109-1789 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data usi… | 2024-07-23T21:48:32.869000Z |
| var-200102-0075 | IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP … | 2024-07-23T21:48:08.812000Z |
| var-201211-0367 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-07-23T21:48:07.636000Z |
| var-201108-0285 | Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allow… | 2024-07-23T21:47:36.928000Z |
| var-200505-0193 | Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary … | 2024-07-23T21:47:36.724000Z |
| var-202110-1705 | The Snappy frame decoder function doesn't restrict the chunk length which may lead to exc… | 2024-07-23T21:46:59.236000Z |
| var-201506-0265 | Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x… | 2024-07-23T21:46:59.847000Z |
| var-202203-0111 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-07-23T21:46:58.879000Z |
| var-201201-0170 | Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK i… | 2024-07-23T21:46:58.960000Z |
| var-201611-0348 | named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-… | 2024-07-23T21:46:27.318000Z |
| var-200609-1376 | The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… | 2024-07-23T21:46:26.250000Z |
| var-201903-0441 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:46:20.783000Z |
| var-202210-1526 | The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macO… | 2024-07-23T21:46:13.464000Z |
| var-201606-0135 | The XML parser in Expat does not use sufficient entropy for hash initialization, which al… | 2024-07-23T21:46:12.300000Z |
| var-201210-0053 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:46:11.539000Z |
| var-201605-0464 | Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlPars… | 2024-07-23T21:45:39.491000Z |
| var-201006-1131 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2024-07-23T21:45:38.565000Z |
| var-200804-0039 | Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compil… | 2024-07-23T21:45:07.043000Z |
| var-201204-0084 | Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome befo… | 2024-07-23T21:45:06.885000Z |
| var-200102-0028 | The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log… | 2024-07-23T21:45:05.204000Z |
| var-201504-0060 | The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows… | 2024-07-23T21:45:04.448000Z |
| var-202203-0043 | A flaw was found in the way the "flags" member of the new pipe buffer structure was lacki… | 2024-07-23T21:45:03.589000Z |
| var-201111-0222 | FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arb… | 2024-07-23T21:45:03.152000Z |
| var-201904-0981 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow … | 2024-07-23T21:45:01.742000Z |
| var-201808-1004 | Bluetooth firmware or operating system software drivers in macOS versions before 10.13, H… | 2024-07-23T21:45:01.058000Z |
| var-200512-0633 | passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 al… | 2024-07-23T21:45:01.566000Z |
| var-202208-2263 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies … | 2024-07-23T21:44:51.339000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000091 | IPCOM vulnerable to information disclosure | 2024-08-30T14:56+09:00 | 2024-08-30T14:56+09:00 |
| jvndb-2024-000092 | Multiple vulnerabilities in WordPress plugin "Carousel Slider" | 2024-08-30T13:58+09:00 | 2024-08-30T13:58+09:00 |
| jvndb-2024-006787 | xfpt vulnerable to stack-based buffer overflow | 2024-08-29T14:07+09:00 | 2024-08-29T14:07+09:00 |
| jvndb-2024-000086 | Multiple Safie products vulnerable to improper server certificate verification | 2024-08-22T13:51+09:00 | 2024-08-29T12:23+09:00 |
| jvndb-2024-006646 | Authentication Bypass Vulnerability in Hitachi Ops Center Common Services | 2024-08-27T12:01+09:00 | 2024-08-27T12:01+09:00 |
| jvndb-2024-006367 | Unquoted Service Path in Hitachi Device Manager | 2024-08-26T16:27+09:00 | 2024-08-26T16:27+09:00 |
| jvndb-2024-000087 | BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection | 2024-08-23T14:17+09:00 | 2024-08-23T14:17+09:00 |
| jvndb-2020-007305 | Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries | 2024-08-22T11:33+09:00 | 2024-08-22T11:33+09:00 |
| jvndb-2017-009536 | Packetbeat vulnerable to denial-of-service (DoS) | 2024-08-21T17:54+09:00 | 2024-08-21T17:54+09:00 |
| jvndb-2018-009127 | Multiple vulnerabilities in LogonTracer | 2024-08-21T17:37+09:00 | 2024-08-21T17:37+09:00 |
| jvndb-2020-002957 | A vulnerability in TOYOTA MOTOR's DCU (Display Control Unit) | 2024-08-20T18:12+09:00 | 2024-08-20T18:12+09:00 |
| jvndb-2020-007306 | Trend Micro Security (Consumer) Driver vulnerable to Out-of-bounds Read | 2024-08-20T17:52+09:00 | 2024-08-20T17:52+09:00 |
| jvndb-2024-000085 | "Rakuten Ichiba App" fails to restrict custom URL schemes properly | 2024-08-20T16:56+09:00 | 2024-08-20T16:56+09:00 |
| jvndb-2024-005167 | EL Injection Vulnerability in Hitachi Tuning Manager | 2024-08-15T09:38+09:00 | 2024-08-15T09:38+09:00 |
| jvndb-2016-000124 | WAON service app for Android fails to verify SSL server certificates | 2024-08-15T09:36+09:00 | 2024-08-15T09:36+09:00 |
| jvndb-2024-000083 | Firmware update for RICOH JavaTM Platform resets the TLS configuration | 2024-08-06T15:13+09:00 | 2024-08-06T15:13+09:00 |
| jvndb-2024-000079 | Cybozu Office vulnerable to bypass browsing restrictions in Custom App | 2024-08-06T14:59+09:00 | 2024-08-06T14:59+09:00 |
| jvndb-2024-000082 | Pimax Play and PiTool accept WebSocket connections from unintended endpoints | 2024-08-05T13:58+09:00 | 2024-08-05T13:58+09:00 |
| jvndb-2024-000084 | Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN | 2024-08-05T13:46+09:00 | 2024-08-05T13:46+09:00 |
| jvndb-2024-000074 | Multiple vulnerabilities in SKYSEA Client View | 2024-07-29T15:28+09:00 | 2024-07-31T14:12+09:00 |
| jvndb-2024-000077 | FFRI AMC vulnerable to OS command injection | 2024-07-30T16:40+09:00 | 2024-07-30T16:40+09:00 |
| jvndb-2024-000081 | EC-CUBE plugin (for EC-CUBE 4 series) "EC-CUBE Web API Plugin" vulnerable to stored cross-site scripting | 2024-07-30T14:06+09:00 | 2024-07-30T14:06+09:00 |
| jvndb-2024-000080 | EC-CUBE 4 Series improper input validation when installing plugins | 2024-07-30T13:56+09:00 | 2024-07-30T13:56+09:00 |
| jvndb-2024-000028 | Multiple vulnerabilities in SKYSEA Client View | 2024-03-07T16:09+09:00 | 2024-07-29T18:13+09:00 |
| jvndb-2024-000076 | SDoP contains a stack-based buffer overflow vulnerability. | 2024-07-29T17:24+09:00 | 2024-07-29T17:24+09:00 |
| jvndb-2024-003242 | OMRON NJ/NX series vulnerable to insufficient verification of data authenticity | 2024-05-28T12:28+09:00 | 2024-07-26T16:27+09:00 |
| jvndb-2021-000105 | PowerCMS XMLRPC API vulnerable to OS command injection | 2021-11-24T15:47+09:00 | 2024-07-26T15:22+09:00 |
| jvndb-2024-000075 | ORC vulnerable to stack-based buffer overflow | 2024-07-26T13:55+09:00 | 2024-07-26T13:55+09:00 |
| jvndb-2022-000030 | Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM | 2022-05-09T15:02+09:00 | 2024-07-18T16:30+09:00 |
| jvndb-2024-000073 | Assimp vulnerable to heap-based buffer overflow | 2024-07-18T13:44+09:00 | 2024-07-18T13:44+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20051-1 | Security update for libtasn1 | 2026-01-12T12:00:27Z | 2026-01-12T12:00:27Z |
| suse-su-2026:20031-1 | Security update for MozillaFirefox | 2026-01-12T12:00:16Z | 2026-01-12T12:00:16Z |
| suse-su-2026:20074-1 | Security update for glib2 | 2026-01-12T11:58:25Z | 2026-01-12T11:58:25Z |
| suse-su-2026:20032-1 | Security update for glib2 | 2026-01-12T11:58:25Z | 2026-01-12T11:58:25Z |
| suse-su-2026:20072-1 | Security update for libmicrohttpd | 2026-01-12T11:15:02Z | 2026-01-12T11:15:02Z |
| suse-su-2026:20029-1 | Security update for libmicrohttpd | 2026-01-12T11:15:02Z | 2026-01-12T11:15:02Z |
| suse-su-2026:20073-1 | Security update for libpng16 | 2026-01-12T11:15:01Z | 2026-01-12T11:15:01Z |
| suse-su-2026:20030-1 | Security update for libpng16 | 2026-01-12T11:15:01Z | 2026-01-12T11:15:01Z |
| suse-su-2026:0099-1 | Security update for ImageMagick | 2026-01-12T10:37:47Z | 2026-01-12T10:37:47Z |
| suse-su-2026:0107-1 | Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) | 2026-01-12T10:34:47Z | 2026-01-12T10:34:47Z |
| suse-su-2026:0090-1 | Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) | 2026-01-12T10:34:10Z | 2026-01-12T10:34:10Z |
| suse-su-2026:20071-1 | Security update for python-tornado6 | 2026-01-12T10:30:08Z | 2026-01-12T10:30:08Z |
| suse-su-2026:20028-1 | Security update for python-tornado6 | 2026-01-12T10:30:08Z | 2026-01-12T10:30:08Z |
| suse-su-2026:20070-1 | Security update for avahi | 2026-01-11T16:54:30Z | 2026-01-11T16:54:30Z |
| suse-su-2026:20027-1 | Security update for avahi | 2026-01-11T16:54:30Z | 2026-01-11T16:54:30Z |
| suse-su-2026:0087-1 | Security update for libheif | 2026-01-09T15:19:44Z | 2026-01-09T15:19:44Z |
| suse-su-2026:0086-1 | Security update for php8 | 2026-01-09T15:01:56Z | 2026-01-09T15:01:56Z |
| suse-su-2026:0085-1 | Security update for libpng16 | 2026-01-09T15:01:38Z | 2026-01-09T15:01:38Z |
| suse-su-2026:20050-1 | Security update for libvirt | 2026-01-09T11:04:23Z | 2026-01-09T11:04:23Z |
| suse-su-2026:20049-1 | Security update for openvswitch | 2026-01-09T10:54:58Z | 2026-01-09T10:54:58Z |
| suse-su-2026:0083-1 | Security update for gimp | 2026-01-09T09:12:59Z | 2026-01-09T09:12:59Z |
| suse-su-2026:0082-1 | Security update for python-filelock | 2026-01-09T09:12:48Z | 2026-01-09T09:12:48Z |
| suse-su-2026:0081-1 | Security update for poppler | 2026-01-09T08:02:02Z | 2026-01-09T08:02:02Z |
| suse-su-2026:0080-1 | Security update for libvirt | 2026-01-09T08:01:44Z | 2026-01-09T08:01:44Z |
| suse-su-2026:0079-1 | Security update for libvirt | 2026-01-09T08:01:29Z | 2026-01-09T08:01:29Z |
| suse-su-2026:0078-1 | Security update for curl | 2026-01-09T07:07:10Z | 2026-01-09T07:07:10Z |
| suse-su-2026:0077-1 | Security update for curl | 2026-01-08T19:04:00Z | 2026-01-08T19:04:00Z |
| suse-su-2026:20048-1 | Security update for libpcap | 2026-01-08T16:29:06Z | 2026-01-08T16:29:06Z |
| suse-su-2026:20047-1 | Security update for python311 | 2026-01-08T16:27:35Z | 2026-01-08T16:27:35Z |
| suse-su-2026:20064-1 | Security update for libpcap | 2026-01-08T16:16:36Z | 2026-01-08T16:16:36Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-07937 | iccDEV IccTagXml函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07936 | iccDEV CIccXmlArrayType::ParseText函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07935 | iccDEV CIccLocalizedUnicode::GetText函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07934 | iccDEV CIccCLUT::Init函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07933 | iccDEV堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07249 | Google Android逻辑错误漏洞 | 2025-09-08 | 2026-01-26 |
| cnvd-2026-07248 | Google Android缺少权限检查漏洞 | 2025-09-08 | 2026-01-26 |
| cnvd-2026-07240 | Google Chrome实现不当漏洞(CNVD-2026-07240) | 2026-01-23 | 2026-01-26 |
| cnvd-2026-07196 | Microsoft Excel代码执行漏洞(CNVD-2026-07196) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07195 | Adobe Substance3D Stager资源管理错误漏洞(CNVD-2026-07195) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07194 | Adobe Substance3D Modeler越界读取漏洞(CNVD-2026-07194) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07193 | Adobe Substance3D Modeler越界读取漏洞(CNVD-2026-07193) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07192 | Adobe Substance3D Designer越界读取漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07191 | Adobe Substance3D Designer缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07190 | Adobe Illustrator代码问题漏洞(CNVD-2026-07190) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07189 | Adobe Illustrator代码问题漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07188 | Adobe Dreamweaver Desktop输入验证错误漏洞(CNVD-2026-07188) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07187 | Adobe Dreamweaver Desktop输入验证错误漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07160 | Fuji Electric V-SFT栈缓冲区溢出漏洞 | 2025-10-15 | 2026-01-26 |
| cnvd-2026-06337 | 用友网络科技股份有限公司U8 cloud存在信息泄露漏洞 | 2025-12-12 | 2026-01-26 |
| cnvd-2026-06272 | 用友网络科技股份有限公司U8 cloud存在SQL注入漏洞(CNVD-2026-06272) | 2025-12-12 | 2026-01-26 |
| cnvd-2026-06106 | 湖南强智科技发展有限公司教务管理系统存在SQL注入漏洞(CNVD-2026-06106 ) | 2025-12-15 | 2026-01-26 |
| cnvd-2026-07157 | Tenda FH1203 page参数栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07156 | Tenda FH1203 fromAddressNat方法栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07155 | Tenda FH1203 formSetSpeedWan方法堆栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07154 | Tenda FH1203 formSetDeviceName方法堆栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07153 | Tenda FH1203 formSetClientState方法堆栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07152 | Tenda FH1203 addWifiMacFilter方法堆缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07148 | Tenda FH1203 formWriteFacMac方法命令注入漏洞 | 2024-03-29 | 2026-01-23 |
| cnvd-2026-07147 | Tenda FH1203 GetParentControlInfo方法堆栈缓冲区溢出漏洞 | 2024-03-29 | 2026-01-23 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0027 | Vulnérabilité dans NetApp ONTAP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0026 | Vulnérabilité dans Google Pixel | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0030 | Vulnérabilité dans MISP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0029 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0028 | Multiples vulnérabilités dans MariaDB | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0027 | Vulnérabilité dans NetApp ONTAP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0026 | Vulnérabilité dans Google Pixel | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0025 | Vulnérabilité dans Microsoft Edge | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0024 | Multiples vulnérabilités dans VMware Tanzu Greenplum Backup and Restore | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0023 | Multiples vulnérabilités dans les produits Axis | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| CERTFR-2026-AVI-0025 | Vulnérabilité dans Microsoft Edge | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| CERTFR-2026-AVI-0024 | Multiples vulnérabilités dans VMware Tanzu Greenplum Backup and Restore | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| CERTFR-2026-AVI-0023 | Multiples vulnérabilités dans les produits Axis | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0022 | Multiples vulnérabilités dans les produits Microsoft | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0021 | Vulnérabilité dans Microsoft Edge | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0020 | Multiples vulnérabilités dans les produits IBM | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0018 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0017 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0016 | Vulnérabilité dans les produits Moxa | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0022 | Multiples vulnérabilités dans les produits Microsoft | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0021 | Vulnérabilité dans Microsoft Edge | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0020 | Multiples vulnérabilités dans les produits IBM | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0018 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0017 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0016 | Vulnérabilité dans les produits Moxa | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0015 | Multiples vulnérabilités dans les produits Centreon | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0014 | Multiples vulnérabilités dans GitLab | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0013 | Vulnérabilité dans Tenable Nessus Agent | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-ale-006 | Multiples vulnérabilités dans SCADA Siemens RUGGEDCOM ROX I | 2017-03-29T00:00:00.000000 | 2017-03-29T00:00:00.000000 |
| CERTFR-2017-ALE-006 | Multiples vulnérabilités dans SCADA Siemens RUGGEDCOM ROX I | 2017-03-29T00:00:00.000000 | 2017-03-29T00:00:00.000000 |
| certfr-2017-ale-003 | Vulnérabilité dans les navigateurs Microsoft | 2017-02-27T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-ale-002 | Vulnérabilité dans Microsoft Windows | 2017-02-20T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| CERTFR-2017-ALE-003 | Vulnérabilité dans les navigateurs Microsoft | 2017-02-27T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| CERTFR-2017-ALE-002 | Vulnérabilité dans Microsoft Windows | 2017-02-20T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-ale-001 | Vulnérabilité dans Cisco WebEx | 2017-01-25T00:00:00.000000 | 2017-01-31T00:00:00.000000 |
| CERTFR-2017-ALE-001 | Vulnérabilité dans Cisco WebEx | 2017-01-25T00:00:00.000000 | 2017-01-31T00:00:00.000000 |
| certfr-2016-ale-009 | Campagne d'attaque contre des routeurs DSL | 2016-12-01T00:00:00.000000 | 2017-01-26T00:00:00.000000 |
| CERTFR-2016-ALE-009 | Campagne d'attaque contre des routeurs DSL | 2016-12-01T00:00:00.000000 | 2017-01-26T00:00:00.000000 |
| certfr-2016-ale-010 | Vulnérabilité dans les routeurs Netgear | 2016-12-13T00:00:00.000000 | 2016-12-26T00:00:00.000000 |
| CERTFR-2016-ALE-010 | Vulnérabilité dans les routeurs Netgear | 2016-12-13T00:00:00.000000 | 2016-12-26T00:00:00.000000 |
| certfr-2016-ale-006 | Campagne de messages électroniques non sollicités de type Zepto/Odin | 2016-09-05T00:00:00.000000 | 2016-11-17T00:00:00.000000 |
| CERTFR-2016-ALE-006 | Campagne de messages électroniques non sollicités de type Zepto/Odin | 2016-09-05T00:00:00.000000 | 2016-11-17T00:00:00.000000 |
| certfr-2016-ale-008 | Vulnérabilité dans Microsoft Windows | 2016-11-02T00:00:00.000000 | 2016-11-09T00:00:00.000000 |
| CERTFR-2016-ALE-008 | Vulnérabilité dans Microsoft Windows | 2016-11-02T00:00:00.000000 | 2016-11-09T00:00:00.000000 |
| certfr-2016-ale-007 | Vulnérabilité dans Cisco IOS, IOS XE et IOS XR | 2016-09-19T00:00:00.000000 | 2016-09-19T00:00:00.000000 |
| CERTFR-2016-ALE-007 | Vulnérabilité dans Cisco IOS, IOS XE et IOS XR | 2016-09-19T00:00:00.000000 | 2016-09-19T00:00:00.000000 |
| certfr-2016-ale-005 | Multiples vulnérabilités dans les pare-feux Cisco | 2016-08-18T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| CERTFR-2016-ALE-005 | Multiples vulnérabilités dans les pare-feux Cisco | 2016-08-18T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2015-ale-013 | Vulnérabilité dans Joomla! | 2015-12-14T00:00:00.000000 | 2016-08-01T00:00:00.000000 |
| CERTFR-2015-ALE-013 | Vulnérabilité dans Joomla! | 2015-12-14T00:00:00.000000 | 2016-08-01T00:00:00.000000 |
| certfr-2016-ale-004 | Vulnérabilité dans Adobe Flash Player | 2016-06-15T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| CERTFR-2016-ALE-004 | Vulnérabilité dans Adobe Flash Player | 2016-06-15T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| certfr-2016-ale-003 | Vulnérabilité dans Adobe Flash Player | 2016-05-11T00:00:00.000000 | 2016-05-12T00:00:00.000000 |
| CERTFR-2016-ALE-003 | Vulnérabilité dans Adobe Flash Player | 2016-05-11T00:00:00.000000 | 2016-05-12T00:00:00.000000 |
| certfr-2015-ale-014 | Vulnérabilité dans Juniper ScreenOS | 2015-12-18T00:00:00.000000 | 2016-04-11T00:00:00.000000 |
| CERTFR-2015-ALE-014 | Vulnérabilité dans Juniper ScreenOS | 2015-12-18T00:00:00.000000 | 2016-04-11T00:00:00.000000 |
| certfr-2016-ale-002 | Vulnérabilité dans Adobe Flash Player | 2016-04-06T00:00:00.000000 | 2016-04-08T00:00:00.000000 |
| CERTFR-2016-ALE-002 | Vulnérabilité dans Adobe Flash Player | 2016-04-06T00:00:00.000000 | 2016-04-08T00:00:00.000000 |