Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-26731 |
N/A
|
TOTOLINK A3002RU V2.1.1-B20211108.1455 was discov… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T18:42:50.092Z |
| CVE-2026-26732 |
N/A
|
TOTOLINK A3002RU V2.1.1-B20211108.1455 was discov… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T18:41:26.740Z |
| CVE-2025-59793 |
N/A
|
Rocket TRUfusion Enterprise through 7.10.5 expose… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T18:39:39.915Z |
| CVE-2025-14689 |
6.5 (3.1)
|
IBM Db2 Denial of Service |
IBM |
Db2 for Linux, UNIX and Windows |
2026-02-17T17:12:56.185Z | 2026-02-17T18:34:26.129Z |
| CVE-2026-2545 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
LigeroSmart index.pl cross site scripting |
n/a |
LigeroSmart |
2026-02-16T07:32:08.515Z | 2026-02-17T18:31:41.311Z |
| CVE-2026-2546 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
LigeroSmart index.pl cross site scripting |
n/a |
LigeroSmart |
2026-02-16T08:02:07.017Z | 2026-02-17T18:31:07.881Z |
| CVE-2026-20676 |
4.3 (3.1)
|
This issue was addressed through improved state m… |
Apple |
Safari |
2026-02-11T22:58:25.537Z | 2026-02-17T18:30:40.166Z |
| CVE-2026-2547 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
LigeroSmart index.pl AgentDashboard cross site scripting |
n/a |
LigeroSmart |
2026-02-16T08:32:07.484Z | 2026-02-17T18:30:30.789Z |
| CVE-2025-70954 |
7.5 (3.1)
|
A Null Pointer Dereference vulnerability exists i… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-17T18:29:09.899Z |
| CVE-2025-65716 |
8.8 (3.1)
|
An issue in Visual Studio Code Extensions Markdow… |
n/a |
n/a |
2026-02-16T00:00:00.000Z | 2026-02-17T18:25:16.823Z |
| CVE-2026-2032 |
4.3 (3.1)
|
Interrupted page loads in new tabs could allow website… |
Mozilla |
Firefox for iOS |
2026-02-16T14:13:23.899Z | 2026-02-17T18:23:17.757Z |
| CVE-2026-1761 |
8.6 (3.1)
|
Libsoup: stack-based buffer overflow in libsoup multip… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-02-02T14:01:03.802Z | 2026-02-17T18:23:08.912Z |
| CVE-2026-0719 |
8.6 (3.1)
|
Libsoup: signed to unsigned conversion error leading t… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-08T12:38:30.740Z | 2026-02-17T18:23:04.114Z |
| CVE-2026-0929 |
4.3 (3.1)
|
RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation |
Unknown |
RegistrationMagic |
2026-02-16T06:00:01.611Z | 2026-02-17T18:22:21.617Z |
| CVE-2026-0829 |
5.8 (3.1)
|
Frontend File Manager Plugin <= 23.5 - Unauthenticated… |
Unknown |
Frontend File Manager Plugin |
2026-02-17T06:00:06.506Z | 2026-02-17T18:19:47.377Z |
| CVE-2026-25506 |
7.7 (3.1)
|
MUNGE has a buffer overflow in message unpacking allow… |
dun |
munge |
2026-02-10T18:55:57.708Z | 2026-02-17T18:17:47.022Z |
| CVE-2026-25087 |
N/A
|
Apache Arrow: Potential use-after-free when reading IP… |
Apache Software Foundation |
Apache Arrow |
2026-02-17T13:18:25.494Z | 2026-02-17T18:17:44.990Z |
| CVE-2025-63354 |
4.8 (3.1)
|
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via … |
n/a |
n/a |
2026-02-09T00:00:00.000Z | 2026-02-17T18:13:17.385Z |
| CVE-2026-1358 |
9.8 (3.1)
|
Airleader Master Unrestricted Upload of File with Dang… |
Airleader GmbH |
Airleader Master |
2026-02-12T21:24:53.070Z | 2026-02-17T18:03:38.837Z |
| CVE-2026-1452 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-02-17T17:26:12.868Z | |
| CVE-2019-25372 |
5.1 (4.0)
6.1 (3.1)
|
OPNsense 19.1 Reflected XSS via diag_traceroute.php |
Opnsense |
OPNsense |
2026-02-15T13:58:54.354Z | 2026-02-17T17:25:33.841Z |
| CVE-2019-25371 |
5.1 (4.0)
6.1 (3.1)
|
OPNsense 19.1 Reflected XSS via diag_ping.php |
Opnsense |
OPNsense |
2026-02-15T13:58:53.595Z | 2026-02-17T17:25:13.731Z |
| CVE-2019-25370 |
5.1 (4.0)
6.1 (3.1)
|
OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php |
Opnsense |
OPNsense |
2026-02-15T13:58:52.849Z | 2026-02-17T17:24:54.810Z |
| CVE-2019-25369 |
5.1 (4.0)
6.4 (3.1)
|
OPNsense 19.1 Stored XSS via system_advanced_sysctl.php |
Opnsense |
OPNsense |
2026-02-15T13:58:52.074Z | 2026-02-17T17:24:37.345Z |
| CVE-2026-2516 |
7.3 (4.0)
7 (3.1)
7 (3.0)
|
Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll unc… |
Unidocs |
ezPDF DRM Reader |
2026-02-15T12:02:06.101Z | 2026-02-17T17:23:29.198Z |
| CVE-2026-2517 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SMF types.c ogs_gtp2_parse_tft denial of service |
n/a |
Open5GS |
2026-02-15T12:32:08.127Z | 2026-02-17T17:23:09.474Z |
| CVE-2026-2521 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGW-C sgwc_s5c_handle_create_session_response … |
n/a |
Open5GS |
2026-02-15T23:02:07.287Z | 2026-02-17T17:22:43.273Z |
| CVE-2026-2522 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS MME esm-build.c memory corruption |
n/a |
Open5GS |
2026-02-15T23:32:06.700Z | 2026-02-17T17:22:13.510Z |
| CVE-2026-2561 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi web_get… |
JingDong |
JD Cloud Box AX6600 |
2026-02-16T14:32:53.736Z | 2026-02-17T17:21:38.907Z |
| CVE-2026-2562 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi cast_st… |
JingDong |
JD Cloud Box AX6600 |
2026-02-16T15:02:49.628Z | 2026-02-17T17:21:03.189Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2200 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
heyewei JFinalCMS API Endpoint save cross site scripting |
heyewei |
JFinalCMS |
2026-02-09T01:02:05.911Z | 2026-02-09T16:35:10.038Z |
| CVE-2026-1108 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
cijliu librtsp rtsp_rely_dumps buffer overflow |
cijliu |
librtsp |
2026-01-18T01:32:06.797Z | 2026-01-20T17:11:45.294Z |
| CVE-2026-1109 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
cijliu librtsp rtsp_parse_request buffer overflow |
cijliu |
librtsp |
2026-01-18T03:02:06.182Z | 2026-01-20T17:10:10.612Z |
| CVE-2025-15533 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow |
raysan5 |
raylib |
2026-01-18T05:02:08.672Z | 2026-01-21T18:53:31.970Z |
| CVE-2026-2562 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi cast_st… |
JingDong |
JD Cloud Box AX6600 |
2026-02-16T15:02:49.628Z | 2026-02-17T17:21:03.189Z |
| CVE-2026-2561 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi web_get… |
JingDong |
JD Cloud Box AX6600 |
2026-02-16T14:32:53.736Z | 2026-02-17T17:21:38.907Z |
| CVE-2026-1452 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-02-17T17:26:12.868Z | |
| CVE-2025-36425 |
5.3 (3.1)
|
IBM Db2 Information Disclosure |
IBM |
Db2 for Linux, UNIX and Windows |
2026-02-17T17:13:03.635Z | 2026-02-17T19:31:31.869Z |
| CVE-2025-36247 |
7.1 (3.1)
|
IBM Db2 XML External Entity Reference |
IBM |
Db2 for Linux, UNIX and Windows |
2026-02-17T17:13:06.775Z | 2026-02-17T19:21:41.367Z |
| CVE-2025-14689 |
6.5 (3.1)
|
IBM Db2 Denial of Service |
IBM |
Db2 for Linux, UNIX and Windows |
2026-02-17T17:12:56.185Z | 2026-02-17T18:34:26.129Z |
| CVE-2025-13867 |
6.5 (3.1)
|
IBM Db2 Denial of Service |
IBM |
Db2 for Linux, UNIX and Windows |
2026-02-17T17:13:00.450Z | 2026-02-17T19:34:24.825Z |
| CVE-2025-15534 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
raysan5 raylib rtext.c LoadFontData integer overflow |
raysan5 |
raylib |
2026-01-18T06:32:06.449Z | 2026-01-21T18:53:17.884Z |
| CVE-2026-24002 |
9.1 (3.1)
|
pyodide sandbox option is insecure |
gristlabs |
grist-core |
2026-01-22T02:26:28.765Z | 2026-01-22T12:54:32.232Z |
| CVE-2024-23459 |
7.1 (3.1)
|
Multiple Arbitrary Creates/Overwrites by link following |
Zscaler |
Client Connector |
2024-05-02T13:11:19.436Z | 2024-08-01T23:06:24.598Z |
| CVE-2023-28798 |
6.5 (3.1)
|
Out-of-bounds write to heap in pacparser |
Zscaler |
Client Connector |
2024-05-02T13:10:31.933Z | 2024-08-02T13:51:38.162Z |
| CVE-2026-24042 |
9.4 (3.1)
|
Appsmith public apps can execute unpublished actions (… |
appsmithorg |
appsmith |
2026-01-22T03:52:54.463Z | 2026-01-22T12:28:28.202Z |
| CVE-2026-24055 |
6.3 (4.0)
|
Langfuse Slack OAuth Installation Endpoint Lacks Authe… |
langfuse |
langfuse |
2026-01-22T03:07:03.784Z | 2026-01-22T12:40:42.009Z |
| CVE-2025-36058 |
5.5 (3.1)
|
Multiple security vulnerabilities are addressed in IBM… |
IBM |
Business Automation Workflow containers |
2026-01-20T15:09:07.082Z | 2026-01-20T15:53:20.326Z |
| CVE-2024-23461 |
4.2 (3.1)
|
ZCC macOS Upgrade ZIP Bomb DoS |
Zscaler |
Client Connector |
2024-05-02T13:11:29.433Z | 2024-08-01T23:06:24.232Z |
| CVE-2025-36059 |
4.7 (3.1)
|
Multiple security vulnerabilities are addressed in IBM… |
IBM |
Business Automation Workflow containers |
2026-01-20T15:07:46.448Z | 2026-01-20T15:54:41.357Z |
| CVE-2026-2618 |
6.3 (4.0)
3.7 (3.1)
3.7 (3.0)
|
Beetel 777VR1 SSH Service risky encryption |
Beetel |
777VR1 |
2026-02-17T16:32:06.477Z | 2026-02-17T17:14:55.824Z |
| CVE-2026-2552 |
5.1 (4.0)
5.5 (3.1)
5.5 (3.0)
|
ZenTao Editor control.php delete path traversal |
n/a |
ZenTao |
2026-02-16T11:02:05.938Z | 2026-02-17T16:41:38.415Z |
| CVE-2026-2548 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
WAYOS FBM-220G rc sub_40F820 command injection |
WAYOS |
FBM-220G |
2026-02-16T09:02:05.796Z | 2026-02-17T16:57:35.264Z |
| CVE-2025-70828 |
8.8 (3.1)
|
An issue in Datart v1.0.0-rc.3 allows attackers t… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T15:59:06.768Z |
| CVE-2025-70397 |
8.8 (3.1)
|
jizhicms 2.5.6 is vulnerable to SQL Injection in … |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T16:17:46.850Z |
| CVE-2025-65924 |
4.1 (3.1)
|
ERPNext thru 15.88.1 does not sanitize or remove … |
n/a |
n/a |
2026-02-03T00:00:00.000Z | 2026-02-17T16:42:43.134Z |
| CVE-2025-65753 |
9 (3.1)
|
An issue in the TLS certification mechanism of Gu… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T16:52:22.753Z |
| CVE-2025-13465 |
6.9 (4.0)
|
Prototype Pollution Vulnerability in Lodash _.unset an… |
Lodash |
Lodash |
2026-01-21T19:05:28.846Z | 2026-01-21T19:43:38.268Z |
| CVE-2026-23526 |
8.5 (4.0)
|
CVAT vulnerable to privilege escalation of users with … |
cvat-ai |
cvat |
2026-01-21T21:40:25.214Z | 2026-01-23T04:55:22.148Z |
| CVE-2026-23960 |
7.3 (4.0)
|
Argo Workflows affected by stored XSS in the artifact … |
argoproj |
argo-workflows |
2026-01-21T22:02:50.491Z | 2026-01-22T16:49:43.075Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-25991 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists… | 2026-02-13T19:17:28.953 | 2026-02-17T16:10:27.940 |
| fkie_cve-2026-0488 | An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a g… | 2026-02-10T04:16:01.710 | 2026-02-17T16:10:03.600 |
| fkie_cve-2026-25964 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists… | 2026-02-13T19:17:28.810 | 2026-02-17T16:07:02.177 |
| fkie_cve-2026-0490 | SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network requ… | 2026-02-10T04:16:01.873 | 2026-02-17T16:06:59.097 |
| fkie_cve-2026-0505 | The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters tha… | 2026-02-10T04:16:02.030 | 2026-02-17T16:06:27.080 |
| fkie_cve-2026-0508 | The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high p… | 2026-02-10T04:16:02.187 | 2026-02-17T16:06:15.913 |
| fkie_cve-2026-0509 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged use… | 2026-02-10T04:16:02.357 | 2026-02-17T16:04:59.500 |
| fkie_cve-2026-23681 | Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authentica… | 2026-02-10T04:16:02.520 | 2026-02-17T16:04:47.287 |
| fkie_cve-2026-23684 | A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker a… | 2026-02-10T04:16:02.683 | 2026-02-17T16:04:38.427 |
| fkie_cve-2026-24780 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelli… | 2026-01-29T18:16:17.080 | 2026-02-17T16:04:36.780 |
| fkie_cve-2026-23685 | Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as… | 2026-02-10T04:16:02.850 | 2026-02-17T16:04:13.617 |
| fkie_cve-2026-23686 | Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated at… | 2026-02-10T04:16:03.013 | 2026-02-17T16:03:09.107 |
| fkie_cve-2026-23992 | go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to… | 2026-01-22T03:15:47.470 | 2026-02-17T16:02:19.330 |
| fkie_cve-2025-64702 | quic-go is an implementation of the QUIC protocol in Go. Versions 0.56.0 and below are vulnerable t… | 2025-12-11T21:15:54.707 | 2026-02-17T15:58:28.387 |
| fkie_cve-2026-23688 | SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an au… | 2026-02-10T04:16:03.340 | 2026-02-17T15:58:00.690 |
| fkie_cve-2026-23689 | Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated att… | 2026-02-10T04:16:03.500 | 2026-02-17T15:57:04.273 |
| fkie_cve-2026-2103 | Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, includi… | 2026-02-06T17:16:28.240 | 2026-02-17T15:46:31.470 |
| fkie_cve-2025-53523 | Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, G… | 2025-12-12T05:16:05.267 | 2026-02-17T15:45:09.657 |
| fkie_cve-2025-54407 | Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, Gr… | 2025-12-12T05:16:07.000 | 2026-02-17T15:44:49.300 |
| fkie_cve-2025-61950 | In GroupSession, a Circular notice can be created with its memo field non-editable, but the authori… | 2025-12-12T05:16:07.583 | 2026-02-17T15:43:09.370 |
| fkie_cve-2026-22038 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelli… | 2026-02-04T23:15:56.057 | 2026-02-17T15:42:50.107 |
| fkie_cve-2025-32393 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelli… | 2026-02-05T23:15:52.763 | 2026-02-17T15:40:31.877 |
| fkie_cve-2026-24312 | An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authent… | 2026-02-10T04:16:03.663 | 2026-02-17T15:32:58.490 |
| fkie_cve-2025-61987 | GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSessi… | 2025-12-12T05:16:07.763 | 2026-02-17T15:31:00.980 |
| fkie_cve-2026-24319 | In SAP Business One, sensitive information is written to the application�s memory dump files withou… | 2026-02-10T04:16:03.820 | 2026-02-17T15:30:20.280 |
| fkie_cve-2026-26006 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelli… | 2026-02-10T22:16:59.710 | 2026-02-17T15:28:04.533 |
| fkie_cve-2026-24320 | Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an … | 2026-02-10T04:16:03.990 | 2026-02-17T15:27:30.400 |
| fkie_cve-2026-24321 | SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit… | 2026-02-10T04:16:04.150 | 2026-02-17T15:24:36.373 |
| fkie_cve-2026-24322 | SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary a… | 2026-02-10T04:16:04.307 | 2026-02-17T15:23:50.653 |
| fkie_cve-2025-62192 | SQL Injection vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byC… | 2025-12-12T05:16:10.950 | 2026-02-17T15:18:18.213 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-5cph-5v9q-vh7g |
8.8 (3.1)
|
An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to exe… | 2026-02-16T18:31:28Z | 2026-02-17T15:31:35Z |
| ghsa-4vw8-4q9m-v76p |
6.5 (3.1)
|
Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting … | 2026-02-17T15:31:35Z | 2026-02-17T15:31:35Z |
| ghsa-r7jp-3wp4-fvf4 |
5.5 (3.1)
|
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in mac… | 2026-02-12T00:31:04Z | 2026-02-17T15:31:34Z |
| ghsa-jwv5-943c-f5wh |
4.3 (3.1)
|
Malicious scripts that interrupt new tab page loading could cause desynchronization between the add… | 2026-02-16T15:32:47Z | 2026-02-17T15:31:34Z |
| ghsa-869w-qxf5-5q39 |
7.3 (3.1)
|
WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, wh… | 2026-02-13T00:32:52Z | 2026-02-17T15:31:34Z |
| ghsa-7vwv-5gmf-fwq5 |
9.8 (3.1)
|
A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for Prest… | 2026-02-14T00:32:42Z | 2026-02-17T15:31:34Z |
| ghsa-6jg9-x4w8-gj7j |
2.4 (3.1)
|
An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person … | 2026-02-12T00:31:04Z | 2026-02-17T15:31:34Z |
| ghsa-5fpg-jg99-g97m |
7.5 (3.1)
|
The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allo… | 2026-02-16T09:30:30Z | 2026-02-17T15:31:34Z |
| ghsa-3cgw-cpcx-p7g4 |
5.5 (3.1)
|
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Taho… | 2026-02-12T00:31:04Z | 2026-02-17T15:31:34Z |
| ghsa-pf56-w9mv-33wc |
5.8 (3.1)
|
In SAP Business One, sensitive information is written to the application�s memory dump files withou… | 2026-02-10T06:30:38Z | 2026-02-17T15:31:33Z |
| ghsa-p5wr-5p37-2wm6 |
9.8 (3.1)
9.9 (4.0)
|
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contai… | 2026-02-07T00:30:27Z | 2026-02-17T15:31:33Z |
| ghsa-rqw7-3533-cfwv |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2024-04-29T06:30:42Z | 2026-02-17T15:31:30Z |
| ghsa-59fw-mhqq-48f3 |
4.3 (3.1)
|
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable t… | 2026-02-17T12:31:08Z | 2026-02-17T12:31:08Z |
| ghsa-x5mv-x4w6-8rgw |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media Library Assis… | 2025-12-09T18:30:39Z | 2026-02-17T12:31:07Z |
| ghsa-mjw6-x6pv-6q3x |
8.3 (4.0)
|
SQL injection vulnerability (SQLi) in Clicldeu SaaS, specifically in the generation of reports, whi… | 2026-02-17T12:31:07Z | 2026-02-17T12:31:07Z |
| ghsa-j7vj-8xmw-gvff |
8.6 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-17T12:31:07Z | 2026-02-17T12:31:07Z |
| ghsa-hrx4-rccm-xj6c |
6.1 (3.1)
|
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 25… | 2025-12-05T18:31:11Z | 2026-02-17T12:31:07Z |
| ghsa-cw54-4j6f-m898 |
7.2 (3.1)
|
The RSS Aggregator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'te… | 2026-02-17T12:31:07Z | 2026-02-17T12:31:07Z |
| ghsa-c5w7-m8wf-xc77 |
8.7 (4.0)
|
Apache NiFi 1.1.0 through 2.7.2 are missing authorization when updating configuration properties on… | 2026-02-17T12:31:07Z | 2026-02-17T12:31:07Z |
| ghsa-3866-72wv-xq49 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-02-17T12:31:07Z | 2026-02-17T12:31:07Z |
| ghsa-343j-9r8x-295r |
8.8 (3.1)
|
Missing Authorization vulnerability in SiteLock SiteLock Security sitelock allows Exploiting Incorr… | 2026-01-23T15:31:35Z | 2026-02-17T12:31:07Z |
| ghsa-pf6x-fmxv-j5g5 |
6.5 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sea… | 2026-01-22T18:30:37Z | 2026-02-17T09:31:24Z |
| ghsa-vpw9-rw58-f7gh |
7.7 (3.1)
|
The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control … | 2026-02-17T06:31:25Z | 2026-02-17T06:31:26Z |
| ghsa-4x73-7vhc-g4xh |
5.3 (3.1)
|
The EventPrime plugin for WordPress is vulnerable to unauthorized image file upload in all versions… | 2026-02-17T06:31:26Z | 2026-02-17T06:31:26Z |
| ghsa-x39p-mhp8-fvfx |
4.4 (3.1)
|
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vul… | 2026-02-17T06:31:25Z | 2026-02-17T06:31:25Z |
| ghsa-xxv9-73gc-96fm |
9.3 (4.0)
|
LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in … | 2026-02-17T03:30:15Z | 2026-02-17T03:30:15Z |
| ghsa-76p7-773f-r4q5 |
5.4 (3.1)
|
Cross-site Scripting (XSS) in serialize-javascript | 2025-02-10T18:30:47Z | 2026-02-17T03:30:15Z |
| ghsa-rqh7-4vgv-648p |
8.8 (3.1)
|
The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for… | 2026-02-17T00:30:18Z | 2026-02-17T00:30:18Z |
| ghsa-76h8-9q54-37cc |
6.8 (3.1)
|
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a secur… | 2025-04-08T18:34:45Z | 2026-02-17T00:30:18Z |
| ghsa-8qf9-59wm-rx63 |
8.8 (3.1)
|
The WowRevenue plugin for WordPress is vulnerable to unauthorized plugin installation due to a miss… | 2026-02-16T21:30:14Z | 2026-02-16T21:30:14Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2011-27 |
|
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 do… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.206417Z |
| pysec-2011-26 |
|
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.154748Z |
| pysec-2024-146 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.401329+00:00 |
| pysec-2024-145 |
7.5 (3.1)
|
FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.341995+00:00 |
| pysec-2024-144 |
7.5 (3.1)
|
Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a ru… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.282654+00:00 |
| pysec-2024-143 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.223275+00:00 |
| pysec-2024-142 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resul… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.166295+00:00 |
| pysec-2024-141 |
9.8 (3.1)
|
Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.106968+00:00 |
| pysec-2024-140 |
7.5 (3.1)
|
FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.044369+00:00 |
| pysec-2024-139 |
9.8 (3.1)
|
Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lea… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.974712+00:00 |
| pysec-2024-138 |
7.5 (3.1)
|
FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.913569+00:00 |
| pysec-2024-137 |
7.5 (3.1)
|
FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.844840+00:00 |
| pysec-2024-136 |
9.8 (3.1)
|
Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.785687+00:00 |
| pysec-2024-135 |
7.5 (3.1)
|
Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runt… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.726582+00:00 |
| pysec-2024-134 |
7.5 (3.1)
|
Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime c… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.667127+00:00 |
| pysec-2024-133 |
7.5 (3.1)
|
OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime cra… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.605277+00:00 |
| pysec-2024-132 |
7.5 (3.1)
|
FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime cras… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.546560+00:00 |
| pysec-2024-131 |
7.5 (3.1)
|
Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash a… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.485379+00:00 |
| pysec-2024-130 |
7.5 (3.1)
|
FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runt… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.427583+00:00 |
| pysec-2024-129 |
7.5 (3.1)
|
FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.364643+00:00 |
| pysec-2022-43143 |
6.5 (3.1)
|
OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo f… | openzeppelin-cairo-contracts-test | 2022-07-15T18:15:00Z | 2024-11-21T14:22:57.304802Z |
| pysec-2022-43142 |
7.8 (3.1)
|
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. | octoprint | 2022-08-22T12:15:00+00:00 | 2024-11-21T14:22:57.145370+00:00 |
| pysec-2018-153 |
5.5 (3.1)
|
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmen… | opencc-py | 2018-09-13T02:29:00Z | 2024-11-21T14:22:57.249534Z |
| pysec-2014-114 |
|
Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows rem… | ntopng | 2014-06-19T10:50:00Z | 2024-11-21T14:22:57.09034Z |
| pysec-2013-45 |
|
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an i… | nova | 2013-12-27T01:55:00Z | 2024-11-21T14:22:56.793365Z |
| pysec-2012-41 |
|
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM b… | nova | 2012-12-26T22:55:00Z | 2024-11-21T14:22:56.616552Z |
| pysec-2012-40 |
|
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when D… | nova | 2012-07-17T21:55:00Z | 2024-11-21T14:22:56.558714Z |
| pysec-2012-39 |
|
virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo … | nova | 2012-07-22T16:55:00Z | 2024-11-21T14:22:56.493974Z |
| pysec-2012-38 |
|
Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom … | nova | 2012-07-22T16:55:00Z | 2024-11-21T14:22:56.434839Z |
| pysec-2023-288 |
6.5 (3.1)
|
The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify t… | nautobot-device-onboarding | 2023-11-21T23:15:00+00:00 | 2024-11-21T14:22:55.475794+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33654 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.212436Z |
| gsd-2024-33653 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.211438Z |
| gsd-2024-33652 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.279059Z |
| gsd-2024-33651 | Cross-Site Request Forgery (CSRF) vulnerability in Matthew Fries MF Gig Calendar.This iss… | 2024-04-26T05:02:19.207978Z |
| gsd-2024-33650 | Cross-Site Request Forgery (CSRF) vulnerability in Cryout Creations Serious Slider.This i… | 2024-04-26T05:02:19.172076Z |
| gsd-2024-33649 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.185793Z |
| gsd-2024-33648 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149332Z |
| gsd-2024-33647 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.188223Z |
| gsd-2024-33646 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.206029Z |
| gsd-2024-33645 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.239357Z |
| gsd-2024-33644 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.256945Z |
| gsd-2024-33643 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.131060Z |
| gsd-2024-33642 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-26T05:02:19.166814Z |
| gsd-2024-33641 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.213153Z |
| gsd-2024-33640 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.209462Z |
| gsd-2024-33639 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-26T05:02:19.283203Z |
| gsd-2024-33638 | Cross-Site Request Forgery (CSRF) vulnerability in Brijesh Kothari Smart Maintenance Mode… | 2024-04-26T05:02:19.155155Z |
| gsd-2024-33637 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.257652Z |
| gsd-2024-33636 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.188953Z |
| gsd-2024-33635 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.164031Z |
| gsd-2024-33634 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.138995Z |
| gsd-2024-33633 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.141967Z |
| gsd-2024-33632 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.238835Z |
| gsd-2024-33631 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.242437Z |
| gsd-2024-33630 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.283884Z |
| gsd-2024-33629 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.165154Z |
| gsd-2024-33628 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149995Z |
| gsd-2024-33627 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.157764Z |
| gsd-2024-4226 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.358460Z |
| gsd-2024-4225 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.423760Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-729 | Malicious code in zalando-consent-api (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:28Z |
| MAL-2026-730 | Malicious code in zappr (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:28Z |
| MAL-2026-729 | Malicious code in zalando-consent-api (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:28Z |
| mal-2026-771 | Malicious code in test-npm-style (npm) | 2026-02-05T19:06:12Z | 2026-02-06T03:05:27Z |
| mal-2026-770 | Malicious code in xpack-per-user (npm) | 2026-02-05T18:36:26Z | 2026-02-06T03:05:27Z |
| mal-2026-748 | Malicious code in web3-chain-sync (npm) | 2026-02-04T23:44:24Z | 2026-02-06T03:05:27Z |
| mal-2026-734 | Malicious code in xpack-subscription-test (npm) | 2026-02-04T09:40:53Z | 2026-02-06T03:05:27Z |
| mal-2026-728 | Malicious code in z-shop-ui (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| mal-2026-727 | Malicious code in z-shop-js-env (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| mal-2026-726 | Malicious code in z-shop-event-bus (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| mal-2026-695 | Malicious code in tsconfig-stitch (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:27Z |
| mal-2026-694 | Malicious code in tarax (npm) | 2026-02-03T07:42:06Z | 2026-02-06T03:05:27Z |
| mal-2026-669 | Malicious code in vite-ui-components (npm) | 2026-02-03T03:42:39Z | 2026-02-06T03:05:27Z |
| mal-2026-668 | Malicious code in typescript-react-apollo (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-667 | Malicious code in typed-document-node (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-666 | Malicious code in transform-react-display-name (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-665 | Malicious code in transform-exponentiation-operator (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-664 | Malicious code in transform-es2015-modules-amd (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-663 | Malicious code in transform-async-generator-functions (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| MAL-2026-771 | Malicious code in test-npm-style (npm) | 2026-02-05T19:06:12Z | 2026-02-06T03:05:27Z |
| MAL-2026-770 | Malicious code in xpack-per-user (npm) | 2026-02-05T18:36:26Z | 2026-02-06T03:05:27Z |
| MAL-2026-748 | Malicious code in web3-chain-sync (npm) | 2026-02-04T23:44:24Z | 2026-02-06T03:05:27Z |
| MAL-2026-734 | Malicious code in xpack-subscription-test (npm) | 2026-02-04T09:40:53Z | 2026-02-06T03:05:27Z |
| MAL-2026-728 | Malicious code in z-shop-ui (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| MAL-2026-727 | Malicious code in z-shop-js-env (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| MAL-2026-726 | Malicious code in z-shop-event-bus (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:27Z |
| MAL-2026-695 | Malicious code in tsconfig-stitch (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:27Z |
| MAL-2026-694 | Malicious code in tarax (npm) | 2026-02-03T07:42:06Z | 2026-02-06T03:05:27Z |
| MAL-2026-669 | Malicious code in vite-ui-components (npm) | 2026-02-03T03:42:39Z | 2026-02-06T03:05:27Z |
| MAL-2026-668 | Malicious code in typescript-react-apollo (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1546 | Red Hat Enterprise Linux (GLib): Schwachstelle ermöglicht Denial of Service | 2025-07-14T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1526 | GnuTLS: Mehrere Schwachstellen | 2025-07-09T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1517 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-07-08T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1385 | libssh: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-24T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1339 | PAM: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-17T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1318 | Python: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-12T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1312 | libxml2: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-11T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1231 | Python: Mehrere Schwachstellen | 2025-06-03T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1206 | Perl: Schwachstelle ermöglicht Codeausführung und Offenlegung von Informationen | 2025-06-01T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1204 | systemd-coredump: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-01T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1089 | GNU libc: Schwachstelle ermöglicht Codeausführung | 2025-05-18T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0853 | libxml2: Schwachstelle ermöglicht Denial of Service | 2025-04-21T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0795 | MIT Kerberos: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-04-14T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0730 | libxml2: Schwachstelle ermöglicht Manipulation von Dateien | 2025-04-07T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0562 | expat: Schwachstelle ermöglicht Denial of Service | 2025-03-13T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0084 | Rsync: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2024-1562 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-07-09T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2024-0126 | EDK2 NetworkPkg IP stack implementation: Mehrere Schwachstellen | 2024-01-16T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2022-1822 | libTIFF: Mehrere Schwachstellen | 2022-10-23T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2026-0135 | Google Fast Pair Bluetooth Protokoll: Schwachstelle ermöglicht Offenlegung von Informationen | 2026-01-15T23:00:00.000+00:00 | 2026-01-20T23:00:00.000+00:00 |
| wid-sec-w-2026-0144 | n8n: Schwachstelle ermöglicht Codeausführung | 2026-01-18T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0138 | Red Hat Enterprise Linux (gpsd): Mehrere Schwachstellen | 2026-01-18T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0106 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0056 | MailPit: Schwachstelle ermöglicht Offenlegung von Informationen | 2026-01-11T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0018 | MailPit: Schwachstelle ermöglicht Offenlegung von Informationen | 2026-01-06T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2781 | Microsoft Windows: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-2750 | Apache HTTP Server: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-1372 | Linux Kernel: Schwachstelle ermöglicht Manipulation von Daten und Denial of Service | 2025-06-22T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-1270 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-09T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-1201 | Linux Kernel: Mehrere Schwachstellen | 2025-05-29T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0138 | Kwetsbaarheid verholpen in Commvault Command Center | 2025-04-24T13:09:08.399556Z | 2025-05-06T06:55:31.232567Z |
| ncsc-2025-0119 | Kwetsbaarheden verholpen in SAP-producten | 2025-04-09T09:12:05.705017Z | 2025-04-30T13:12:27.070565Z |
| ncsc-2025-0140 | Kwetsbaarheden verholpen in Apple AirPlay zoals gebruikt door macOS, iOS en iPadOS | 2025-04-30T08:45:31.426155Z | 2025-04-30T08:45:31.426155Z |
| ncsc-2025-0139 | Kwetsbaarheid verholpen in SonicWall SonicOS | 2025-04-25T09:35:24.276801Z | 2025-04-25T09:35:24.276801Z |
| ncsc-2025-0137 | Kwetsbaarheid verholpen in Erlang/OTP SSH-server | 2025-04-18T05:33:40.823978Z | 2025-04-18T05:33:40.823978Z |
| ncsc-2025-0136 | Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS | 2025-04-17T07:19:14.228835Z | 2025-04-17T07:19:14.228835Z |
| ncsc-2025-0135 | Kwetsbaarheden verholpen in Siemens TeleControl Server | 2025-04-17T07:14:24.584624Z | 2025-04-17T07:14:24.584624Z |
| ncsc-2025-0134 | Kwetsbaarheid verholpen in Cisco Webex App | 2025-04-17T07:11:41.369333Z | 2025-04-17T07:11:41.369333Z |
| ncsc-2025-0133 | Kwetsbaarheden verholpen in Oracle PeopleSoft | 2025-04-16T15:13:33.586832Z | 2025-04-16T15:13:33.586832Z |
| ncsc-2025-0132 | Kwetsbaarheden verholpen in Oracle MySQL | 2025-04-16T15:11:43.357092Z | 2025-04-16T15:11:43.357092Z |
| ncsc-2025-0131 | Kwetsbaarheden verholpen in Oracle JD Edwards | 2025-04-16T15:10:06.149204Z | 2025-04-16T15:10:06.149204Z |
| ncsc-2025-0130 | Kwetsbaarheden verholpen in Oracle Java | 2025-04-16T15:04:40.041941Z | 2025-04-16T15:04:40.041941Z |
| ncsc-2025-0129 | Kwetsbaarheden verholpen in Oracle Analytics | 2025-04-16T15:02:22.596981Z | 2025-04-16T15:02:22.596981Z |
| ncsc-2025-0128 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2025-04-16T15:01:24.587426Z | 2025-04-16T15:01:24.587426Z |
| ncsc-2025-0127 | Kwetsbaarheden verholpen in Oracle Financial Services | 2025-04-16T15:00:12.952979Z | 2025-04-16T15:00:12.952979Z |
| ncsc-2025-0126 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2025-04-16T14:59:13.973935Z | 2025-04-16T14:59:13.973935Z |
| ncsc-2025-0125 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2025-04-16T14:58:05.867499Z | 2025-04-16T14:58:05.867499Z |
| ncsc-2025-0124 | Kwetsbaarheden verholpen in Oracle Communications | 2025-04-16T08:39:55.217751Z | 2025-04-16T08:39:55.217751Z |
| ncsc-2025-0123 | Kwetsbaarheden verholpen in Oracle Database Producten | 2025-04-16T08:37:39.412900Z | 2025-04-16T08:37:39.412900Z |
| ncsc-2025-0122 | Kwetsbaarheden verholpen in Rockwell Automation Arena | 2025-04-14T11:29:22.815190Z | 2025-04-14T11:29:22.815190Z |
| ncsc-2025-0121 | Kwetsbaarheid verholpen in Gladinet CentreStack | 2025-04-10T11:53:42.018541Z | 2025-04-10T11:53:42.018541Z |
| ncsc-2025-0120 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager | 2025-04-09T14:41:41.327208Z | 2025-04-09T14:41:41.327208Z |
| ncsc-2025-0118 | Kwetsbaarheden verholpen in Adobe Framemaker | 2025-04-09T08:14:16.645915Z | 2025-04-09T08:14:16.645915Z |
| ncsc-2025-0117 | Kwetsbaarheden verholpen in Adobe Animate | 2025-04-09T08:12:45.041685Z | 2025-04-09T08:12:45.041685Z |
| ncsc-2025-0116 | Kwetsbaarheid verholpen in Adobe Photoshop | 2025-04-09T08:09:40.474635Z | 2025-04-09T08:09:40.474635Z |
| ncsc-2025-0115 | Kwetsbaarheden verholpen in Adobe ColdFusion | 2025-04-09T08:08:15.866613Z | 2025-04-09T08:08:15.866613Z |
| ncsc-2025-0114 | Kwetsbaarheden verholpen in Adobe After Effects | 2025-04-09T08:05:51.653949Z | 2025-04-09T08:05:51.653949Z |
| ncsc-2025-0113 | Kwetsbaarheid verholpen in FortiSwitch | 2025-04-09T06:49:51.895137Z | 2025-04-09T06:49:51.895137Z |
| ncsc-2025-0112 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-04-08T18:57:53.660384Z | 2025-04-08T18:57:53.660384Z |
| ncsc-2025-0111 | Kwetsbaarheid verholpen in Microsoft Dynamics | 2025-04-08T18:56:16.386532Z | 2025-04-08T18:56:16.386532Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-035466 | SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS | 2023-10-10T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-024584 | SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-832273 | SSA-832273: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices | 2024-03-12T00:00:00Z | 2026-01-13T00:00:00Z |
| SSA-771940 | SSA-771940: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-06-11T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-753746 | SSA-753746: Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products | 2024-02-13T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-711309 | SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products | 2023-09-12T00:00:00Z | 2025-11-11T00:00:00Z |
| SSA-690517 | SSA-690517: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11ax Family | 2024-06-11T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-599968 | SSA-599968: Denial of Service Vulnerability in Profinet Devices | 2021-07-13T00:00:00Z | 2024-12-10T00:00:00Z |
| SSA-566905 | SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products | 2023-04-11T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-482757 | SSA-482757: Missing Immutable Root of Trust in S7-1500 CPU devices | 2023-01-10T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-446448 | SSA-446448: Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack | 2022-04-12T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-407785 | SSA-407785: Multiple X_T File Parsing Vulnerabilities in Parasolid and Teamcenter Visualization | 2023-08-08T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-398330 | SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 | 2023-12-12T00:00:00Z | 2025-08-12T00:00:00Z |
| SSA-353002 | SSA-353002: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family | 2024-03-12T00:00:00Z | 2025-08-12T00:00:00Z |
| SSA-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-196737 | SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2 | 2024-06-11T00:00:00Z | 2025-02-11T00:00:00Z |
| SSA-093430 | SSA-093430: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V3.0 | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-035466 | SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS | 2023-10-10T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-024584 | SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-976324 | SSA-976324: Multiple IGS File Parsing Vulnerabilities in PS/IGES Parasolid Translator Component before V27.1.215 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1959 | Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (python-eventlet) security update | 2026-02-13T07:33:13+00:00 | 2026-02-18T09:32:22+00:00 |
| rhsa-2026:1577 | Red Hat Security Advisory: OpenShift Container Platform 4.17.48 bug fix and security update | 2026-02-04T08:15:24+00:00 | 2026-02-18T09:32:20+00:00 |
| rhsa-2026:1556 | Red Hat Security Advisory: OpenShift Container Platform 4.20.13 security and extras update | 2026-02-04T04:16:28+00:00 | 2026-02-18T09:32:20+00:00 |
| rhsa-2026:1555 | Red Hat Security Advisory: OpenShift Container Platform 4.20.13 bug fix and security update | 2026-02-04T04:50:43+00:00 | 2026-02-18T09:32:19+00:00 |
| rhsa-2026:1552 | Red Hat Security Advisory: OpenShift Container Platform 4.19.23 bug fix and security update | 2026-02-04T10:50:17+00:00 | 2026-02-18T09:32:17+00:00 |
| rhsa-2026:0715 | Red Hat Security Advisory: OpenShift Container Platform 4.17.47 bug fix and security update | 2026-01-22T18:11:18+00:00 | 2026-02-18T09:32:17+00:00 |
| rhsa-2026:1549 | Red Hat Security Advisory: OpenShift Container Platform 4.15.61 bug fix and security update | 2026-02-05T15:48:33+00:00 | 2026-02-18T09:32:16+00:00 |
| rhsa-2026:1062 | Red Hat Security Advisory: OpenShift Container Platform 4.18.32 bug fix and security update | 2026-02-03T17:11:40+00:00 | 2026-02-18T09:32:16+00:00 |
| rhsa-2026:0663 | Red Hat Security Advisory: OpenShift Container Platform 4.20.11 bug fix and security update | 2026-01-22T03:28:29+00:00 | 2026-02-18T09:32:13+00:00 |
| rhsa-2026:1004 | Red Hat Security Advisory: OpenShift Container Platform 4.14.61 security and extras update | 2026-01-30T09:50:08+00:00 | 2026-02-18T09:32:12+00:00 |
| rhsa-2026:0338 | Red Hat Security Advisory: OpenShift Container Platform 4.18.31 bug fix and security update | 2026-01-14T22:29:24+00:00 | 2026-02-18T09:32:11+00:00 |
| rhsa-2026:0327 | Red Hat Security Advisory: OpenShift Container Platform 4.16.55 bug fix and security update | 2026-01-15T15:33:44+00:00 | 2026-02-18T09:32:07+00:00 |
| rhsa-2026:2866 | Red Hat Security Advisory: python3.12-wheel security update | 2026-02-18T02:23:14+00:00 | 2026-02-18T08:50:03+00:00 |
| rhsa-2026:2865 | Red Hat Security Advisory: python-wheel security update | 2026-02-18T01:51:46+00:00 | 2026-02-18T08:50:02+00:00 |
| rhsa-2026:2823 | Red Hat Security Advisory: Updated discovery-cli release RPM versions 2.4.3 | 2026-02-17T15:39:37+00:00 | 2026-02-18T08:50:01+00:00 |
| rhsa-2026:2711 | Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update | 2026-02-16T10:49:01+00:00 | 2026-02-18T08:49:52+00:00 |
| rhsa-2026:2710 | Red Hat Security Advisory: python3.12-wheel security update | 2026-02-16T10:46:56+00:00 | 2026-02-18T08:49:51+00:00 |
| rhsa-2026:2090 | Red Hat Security Advisory: python3.12-wheel security update | 2026-02-05T13:26:00+00:00 | 2026-02-18T08:49:33+00:00 |
| rhsa-2026:2082 | Red Hat Security Advisory: OpenShift Container Platform 4.21.1 packages and security update | 2026-02-10T11:30:56+00:00 | 2026-02-18T08:49:33+00:00 |
| rhsa-2026:2071 | Red Hat Security Advisory: OpenShift Container Platform 4.18.33 packages and security update | 2026-02-11T04:55:25+00:00 | 2026-02-18T08:49:32+00:00 |
| rhsa-2026:1939 | Red Hat Security Advisory: python3.12-wheel security update | 2026-02-04T19:31:27+00:00 | 2026-02-18T08:49:32+00:00 |
| rhsa-2026:1838 | Red Hat Security Advisory: image-builder security update | 2026-02-05T16:02:26+00:00 | 2026-02-18T08:49:30+00:00 |
| rhsa-2026:1902 | Red Hat Security Advisory: python-wheel security update | 2026-02-04T11:59:01+00:00 | 2026-02-18T08:49:28+00:00 |
| rhsa-2026:1837 | Red Hat Security Advisory: osbuild-composer security update | 2026-02-05T16:03:01+00:00 | 2026-02-18T08:49:26+00:00 |
| rhsa-2026:1520 | Red Hat Security Advisory: Red Hat multicluster global hub 1.6.1 security update | 2026-01-29T01:14:38+00:00 | 2026-02-18T08:49:08+00:00 |
| rhsa-2026:1488 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.1 security update | 2026-01-28T12:24:36+00:00 | 2026-02-18T08:49:06+00:00 |
| rhsa-2026:1381 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T16:31:53+00:00 | 2026-02-18T08:49:04+00:00 |
| rhsa-2026:1380 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T16:02:11+00:00 | 2026-02-18T08:49:04+00:00 |
| rhsa-2026:1379 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T16:11:53+00:00 | 2026-02-18T08:49:04+00:00 |
| rhsa-2026:1378 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-27T15:37:28+00:00 | 2026-02-18T08:49:04+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-217-01 | Mitsubishi Electric Iconics Digital Solutions Multiple Products (Update A) | 2025-08-05T05:00:00.000000Z | 2025-09-04T05:00:00.000000Z |
| icsa-25-245-03 | SunPower PVS6 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-02 | Fuji Electric FRENIC-Loader 4 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-01 | Delta Electronics EIP Builder | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-240-06 | GE Vernova CIMPLICITY | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-05 | Delta Electronics COMMGR | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-04 | Delta Electronics CNCSoft-G2 | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-02 | Mitsubishi Electric MELSEC iQ-F Series CPU Module | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-01 | Mitsubishi Electric MELSEC iQ-F Series CPU Module | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-273-02 | Festo SBRD-Q/SBOC-Q/SBOI-Q | 2021-09-22T11:13:00.000000Z | 2025-08-26T10:00:00.000000Z |
| icsa-25-182-06 | Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A) | 2025-06-24T12:30:00.000000Z | 2025-08-26T10:00:00.000000Z |
| icsa-25-261-05 | Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product | 2025-08-26T09:52:01.000000Z | 2025-08-26T09:52:01.000000Z |
| icsa-25-261-04 | Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product | 2025-08-26T09:22:47.000000Z | 2025-08-26T09:22:00.000000Z |
| icsa-25-238-01 | INVT VT-Designer and HMITool | 2025-08-26T06:00:00.000000Z | 2025-08-26T06:00:00.000000Z |
| icsa-25-140-03 | Danfoss AK-SM 8xxA Series (Update A) | 2025-05-20T06:00:00.000000Z | 2025-08-26T06:00:00.000000Z |
| va-25-239-01 | Agiloft multiple vulnerabilities | 2025-08-26T00:00:00Z | 2025-08-26T00:00:00Z |
| icsma-25-233-01 | FUJIFILM Healthcare Americas Synapse Mobility | 2025-08-21T06:00:00.000000Z | 2025-08-21T06:00:00.000000Z |
| icsa-25-217-02 | Tigo Energy Cloud Connect Advanced (Update A) | 2025-08-05T06:00:00.000000Z | 2025-08-19T06:00:00.000000Z |
| icsa-25-226-30 | Rockwell Automation FactoryTalk Action Manager | 2025-08-14T06:00:00.000000Z | 2025-08-15T06:00:00.000000Z |
| icsa-25-226-29 | Rockwell Automation Studio 5000 Logix Designer | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-28 | Rockwell Automation ControlLogix Ethernet Modules | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-27 | Rockwell Automation ArmorBlock 5000 I/O - Webserver | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-25 | Rockwell Automation Micro800 | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-24 | Rockwell FactoryTalk Linx | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-23 | Rockwell Automation FactoryTalk Viewpoint | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-231-01 | Siemens Desigo CC Product Family and SENTRON Powermanager | 2025-08-14T00:00:00.000000Z | 2025-08-14T00:00:00.000000Z |
| icsma-25-224-01 | Santesoft Sante PACS Server | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-224-04 | AVEVA PI Integrator | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-224-01 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-24-263-04 | MegaSys Computer Technologies Telenium Online Web Application (Update A) | 2024-09-19T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ndo-tlsvld-FdUF3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-jh4v6zpn | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-Jh4V6zpN | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-bk8vqedc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-Bk8VqEDc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-t46k3jnn | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-T46k3jnN | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-bushlbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-BUSHLbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-uvyzrkfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-UvYZrKfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-xvyx2wlj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-XvyX2wLj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-meraki-mx-vpn-dos-by-QWUkqV7X | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Session Takeover and Denial of Service Vulnerability | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:27+00:00 |
| cisco-sa-meraki-mx-vpn-dos-QTRHzG2 | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Denial of Service Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:28+00:00 |
| cisco-sa-ise-info-disc-zyf2neex | Cisco Identity Services Engine Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ise-info-disc-ZYF2nEEX | Cisco Identity Services Engine Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-expw-escalation-3bkz77bd | Cisco Expressway Series Privilege Escalation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-expw-escalation-3bkz77bD | Cisco Expressway Series Privilege Escalation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-cimc-redfish-cominj-sbkv5zz | Cisco UCS B-Series, Managed C-Series, and X-Series Servers Redfish API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-cimc-redfish-cominj-sbkv5ZZ | Cisco UCS B-Series, Managed C-Series, and X-Series Servers Redfish API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-webui-csrf-ycuyxkko | Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-webui-csrf-ycUYxkKO | Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-utd-snort3-dos-bypas-b4ouewxd | Cisco Unified Threat Defense Snort Intrusion Prevention System Engine for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-utd-snort3-dos-bypas-b4OUEwxD | Cisco Unified Threat Defense Snort Intrusion Prevention System Engine for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-sdwan-xss-zQ4KPvYd | Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability | 2024-09-25T16:00:00+00:00 | 2025-03-28T18:38:53+00:00 |
| cisco-sa-sdwan-utd-dos-hdatqxs | Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-sdwan-utd-dos-hDATqxs | Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-sdw-vedos-kqffhps3 | Cisco SD-WAN vEdge Software UDP Packet Validation Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-sdw-vedos-KqFfhps3 | Cisco SD-WAN vEdge Software UDP Packet Validation Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-57257 | A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting. | 2025-02-02T00:00:00.000Z | 2026-02-18T02:57:22.000Z |
| msrc_cve-2024-26907 | RDMA/mlx5: Fix fortify source warning while accessing Eth segment | 2024-04-02T07:00:00.000Z | 2026-02-18T02:57:20.000Z |
| msrc_cve-2025-23145 | mptcp: fix NULL pointer in can_accept_new_subflow | 2025-05-02T00:00:00.000Z | 2026-02-18T02:57:06.000Z |
| msrc_cve-2024-42229 | crypto: aeadcipher - zeroize key buffer after use | 2024-07-01T07:00:00.000Z | 2026-02-18T02:57:02.000Z |
| msrc_cve-2024-26909 | soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free | 2024-04-02T07:00:00.000Z | 2026-02-18T02:56:55.000Z |
| msrc_cve-2025-37750 | smb: client: fix UAF in decryption with multichannel | 2025-05-02T00:00:00.000Z | 2026-02-18T02:56:52.000Z |
| msrc_cve-2025-38237 | media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() | 2025-07-02T00:00:00.000Z | 2026-02-18T02:56:48.000Z |
| msrc_cve-2023-0330 | Qemu: lsi53c895a: dma reentrancy issue leads to stack overflow | 2023-03-10T00:00:00.000Z | 2026-02-18T02:56:41.000Z |
| msrc_cve-2025-37803 | udmabuf: fix a buf size overflow issue during udmabuf creation | 2025-05-02T00:00:00.000Z | 2026-02-18T02:56:38.000Z |
| msrc_cve-2023-29409 | Large RSA keys can cause high CPU usage in crypto/tls | 2023-08-01T00:00:00.000Z | 2026-02-18T02:56:34.000Z |
| msrc_cve-2024-26884 | bpf: Fix hashtab overflow check on 32-bit arches | 2024-04-02T07:00:00.000Z | 2026-02-18T02:56:28.000Z |
| msrc_cve-2025-38236 | af_unix: Don't leave consecutive consumed OOB skbs. | 2025-07-02T00:00:00.000Z | 2026-02-18T02:56:23.000Z |
| msrc_cve-2024-50015 | ext4: dax: fix overflowing extents beyond inode size when partially writing | 2024-10-01T07:00:00.000Z | 2026-02-18T02:56:23.000Z |
| msrc_cve-2024-42069 | net: mana: Fix possible double free in error handling path | 2024-07-01T07:00:00.000Z | 2026-02-18T02:56:21.000Z |
| msrc_cve-2025-27809 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname. | 2025-03-02T00:00:00.000Z | 2026-02-18T02:56:16.000Z |
| msrc_cve-2025-37810 | usb: dwc3: gadget: check that event count does not exceed event buffer length | 2025-05-02T00:00:00.000Z | 2026-02-18T02:56:12.000Z |
| msrc_cve-2025-37747 | perf: Fix hang while freeing sigtrap event | 2025-05-02T00:00:00.000Z | 2026-02-18T02:55:56.000Z |
| msrc_cve-2025-5987 | Libssh: invalid return code for chacha20 poly1305 with openssl backend | 2025-07-02T00:00:00.000Z | 2026-02-18T02:55:49.000Z |
| msrc_cve-2025-37840 | mtd: rawnand: brcmnand: fix PM resume warning | 2025-05-02T00:00:00.000Z | 2026-02-18T02:55:43.000Z |
| msrc_cve-2024-49960 | ext4: fix timer use-after-free on failed mount | 2024-10-01T07:00:00.000Z | 2026-02-18T02:55:43.000Z |
| msrc_cve-2024-42064 | drm/amd/display: Skip pipe if the pipe idx not set properly | 2024-07-01T07:00:00.000Z | 2026-02-18T02:55:43.000Z |
| msrc_cve-2023-45142 | OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics | 2023-10-01T00:00:00.000Z | 2026-02-18T02:55:42.000Z |
| msrc_cve-2019-14194 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. | 2019-07-02T00:00:00.000Z | 2026-02-18T02:55:39.000Z |
| msrc_cve-2024-26900 | md: fix kmemleak of rdev->serial | 2024-04-02T07:00:00.000Z | 2026-02-18T02:55:36.000Z |
| msrc_cve-2025-37891 | ALSA: ump: Fix buffer overflow at UMP SysEx message conversion | 2025-05-02T00:00:00.000Z | 2026-02-18T02:55:14.000Z |
| msrc_cve-2024-42070 | netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers | 2024-07-01T07:00:00.000Z | 2026-02-18T02:55:11.000Z |
| msrc_cve-2019-14201 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply. | 2019-07-02T00:00:00.000Z | 2026-02-18T02:55:01.000Z |
| msrc_cve-2024-26883 | bpf: Fix stackmap overflow check on 32-bit arches | 2024-04-02T07:00:00.000Z | 2026-02-18T02:54:55.000Z |
| msrc_cve-2025-38104 | drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV | 2025-04-02T00:00:00.000Z | 2026-02-18T02:54:50.000Z |
| msrc_cve-2025-37933 | octeon_ep: Fix host hang issue during device reboot | 2025-05-02T00:00:00.000Z | 2026-02-18T02:54:46.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:20133-1 | Security update for python-cbor2 | 2025-12-02T13:51:41Z | 2025-12-02T13:51:41Z |
| opensuse-su-2025-20133-1 | Security update for python-cbor2 | 2025-12-02T13:51:41Z | 2025-12-02T13:51:41Z |
| opensuse-su-2025:20132-1 | Security update for strongswan | 2025-12-02T13:11:59Z | 2025-12-02T13:11:59Z |
| opensuse-su-2025-20132-1 | Security update for strongswan | 2025-12-02T13:11:59Z | 2025-12-02T13:11:59Z |
| opensuse-su-2025:15793-1 | gegl-0.4.64-3.1 on GA media | 2025-12-02T00:00:00Z | 2025-12-02T00:00:00Z |
| opensuse-su-2025:15792-1 | python39-3.9.24-2.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025:15791-1 | python315-3.15.0~a1-2.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025:15790-1 | python-mistralclient-doc-6.1.0-1.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025:15789-1 | libecpg6-18.1-1.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025:15788-1 | lightdm-kde-greeter-6.0.5-1.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025-20130-1 | Security update for bash-git-prompt | 2025-11-28T13:38:03Z | 2025-11-28T13:38:03Z |
| opensuse-su-2025-20128-1 | Security update for shadowsocks-v2ray-plugin, v2ray-core | 2025-11-28T13:38:03Z | 2025-11-28T13:38:03Z |
| opensuse-su-2025:20125-1 | Security update for java-17-openjdk | 2025-11-28T10:27:02Z | 2025-11-28T10:27:02Z |
| opensuse-su-2025-20125-1 | Security update for java-17-openjdk | 2025-11-28T10:27:02Z | 2025-11-28T10:27:02Z |
| opensuse-su-2025:20123-1 | Security update for java-21-openjdk | 2025-11-28T09:35:08Z | 2025-11-28T09:35:08Z |
| opensuse-su-2025-20123-1 | Security update for java-21-openjdk | 2025-11-28T09:35:08Z | 2025-11-28T09:35:08Z |
| opensuse-su-2025:20122-1 | Security update for openssh | 2025-11-28T07:46:24Z | 2025-11-28T07:46:24Z |
| opensuse-su-2025-20122-1 | Security update for openssh | 2025-11-28T07:46:24Z | 2025-11-28T07:46:24Z |
| opensuse-su-2025:15787-1 | python311-salt-3006.0-52.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15786-1 | postgresql17-17.7-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15785-1 | postgresql16-16.11-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15784-1 | postgresql15-15.15-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15783-1 | postgresql14-14.20-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15782-1 | postgresql13-13.23-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15781-1 | libpng16-16-1.6.51-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15780-1 | libcoap-devel-4.3.5a-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15779-1 | helm3-3.19.2-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:20113-1 | Security update for dovecot24 | 2025-11-27T20:17:17Z | 2025-11-27T20:17:17Z |
| opensuse-su-2025-20113-1 | Security update for dovecot24 | 2025-11-27T20:17:17Z | 2025-11-27T20:17:17Z |
| opensuse-su-2025:20114-1 | Security update for himmelblau | 2025-11-27T20:16:29Z | 2025-11-27T20:16:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2022-572 | Heap-buffer-overflow in dhcp_reply | 2022-07-12T00:00:45.818288Z | 2025-07-01T14:24:05.029738Z |
| osv-2022-1101 | UNKNOWN READ in APFSBtreeNodeIterator<APFSJObjBtreeNode> APFSJObjBtreeNode::find<unsigned long, | 2022-10-28T00:00:27.714849Z | 2025-06-29T14:11:11.919343Z |
| osv-2025-500 | UNKNOWN READ in getUShort | 2025-06-29T00:08:49.553890Z | 2025-06-29T00:08:49.554520Z |
| osv-2023-225 | Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o | 2023-03-24T13:02:18.004510Z | 2025-06-28T14:26:09.281381Z |
| osv-2022-1106 | Heap-buffer-overflow in APFSJObject::add_entry | 2022-10-28T00:02:37.921684Z | 2025-06-28T14:21:48.859764Z |
| osv-2025-491 | Heap-buffer-overflow in libssl.soNUMBER | 2025-06-27T00:16:09.822144Z | 2025-06-27T00:16:09.822510Z |
| osv-2025-486 | Bad-cast to cv::PngDecoder from invalid vptr | 2025-06-24T00:16:24.786334Z | 2025-06-24T00:16:24.786690Z |
| osv-2025-485 | Use-of-uninitialized-value in pcpp::IDnsResource::decodeName | 2025-06-24T00:11:04.762139Z | 2025-06-24T00:11:04.762681Z |
| osv-2025-484 | Heap-buffer-overflow in load_protocols_file_fd | 2025-06-23T00:14:46.656195Z | 2025-06-23T00:14:46.656704Z |
| osv-2025-207 | Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone | 2025-03-16T00:02:33.765869Z | 2025-06-20T17:14:14.229009Z |
| osv-2024-1191 | Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII | 2024-10-09T00:04:49.628226Z | 2025-06-20T16:39:29.501730Z |
| osv-2025-481 | Stack-buffer-overflow in void glz::from<10000u, int>::op<glz::opts_csv{10000u, | 2025-06-20T00:15:46.185029Z | 2025-06-20T00:15:46.185445Z |
| osv-2025-480 | Stack-buffer-overflow in void glz::from<10000u, std::__1::__bit_reference<std::__1::vector<bool, std::__1 | 2025-06-20T00:14:17.007847Z | 2025-06-20T00:14:17.008310Z |
| osv-2024-714 | Segv on unknown address in lwan_request_get_cookie | 2024-08-04T00:01:49.853424Z | 2025-06-17T14:38:11.268036Z |
| osv-2025-469 | Use-of-uninitialized-value in ndpi_strdup | 2025-06-16T00:17:21.776120Z | 2025-06-16T00:17:21.776520Z |
| osv-2025-465 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-15T00:09:20.387117Z | 2025-06-15T00:09:20.387490Z |
| osv-2025-461 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-14T00:10:49.391511Z | 2025-06-14T00:10:49.391787Z |
| osv-2025-457 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-14T00:04:11.416575Z | 2025-06-14T00:04:11.417116Z |
| osv-2025-456 | Use-of-uninitialized-value in ppd_hash_option | 2025-06-12T00:10:52.355312Z | 2025-06-12T00:10:52.355684Z |
| osv-2025-454 | Use-of-uninitialized-value in _cups_strcasecmp | 2025-06-11T00:12:12.952969Z | 2025-06-11T00:12:12.953357Z |
| osv-2025-449 | Heap-buffer-overflow in check_content_type_and_change_protocol | 2025-06-10T00:16:50.624468Z | 2025-06-10T00:16:50.624907Z |
| osv-2024-1446 | Segv on unknown address in glslang::TIntermediate::addSymbol | 2025-06-06T00:12:59.981959Z | 2025-06-06T00:12:59.982286Z |
| osv-2025-442 | Security exception in org.jsoup.parser.HtmlTreeBuilder.process | 2025-06-06T00:12:40.427852Z | 2025-06-06T00:12:40.428189Z |
| osv-2022-494 | Heap-buffer-overflow in ucl_hash_search | 2022-06-22T00:01:16.539035Z | 2025-06-05T14:39:06.351080Z |
| osv-2025-437 | Heap-buffer-overflow in mmcall | 2025-06-05T00:18:59.402795Z | 2025-06-05T00:18:59.403189Z |
| osv-2025-436 | Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType | 2025-06-05T00:11:24.382209Z | 2025-06-05T00:11:24.382444Z |
| osv-2025-433 | Null-dereference READ in _libssh2_packet_add | 2025-06-05T00:02:57.199903Z | 2025-06-05T00:02:57.200566Z |
| osv-2024-1274 | Segv on unknown address in yara_yyparse | 2024-11-05T00:04:03.220856Z | 2025-06-03T14:42:15.782999Z |
| osv-2024-1205 | Memcpy-param-overlap in repeat | 2024-10-11T00:12:59.211479Z | 2025-06-02T14:22:48.890155Z |
| osv-2025-412 | UNKNOWN WRITE in luaL_newstate | 2025-05-28T00:06:09.320289Z | 2025-05-28T00:06:09.320970Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2024-0021 | Parts of Report are dropped as the wrong type during downcast | 2024-03-05T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2024-0020 | Stack buffer overflow with whoami on several Unix platforms | 2024-02-28T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2024-0018 | ObjectPool creates uninitialized memory when freeing objects | 2024-02-27T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2024-0017 | Non-idiomatic use of iterators leads to use after free | 2024-02-28T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2024-0016 | dav1d AV1 decoder integer overflow | 2024-02-19T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2023-0085 | HPACK decoder panics on invalid input | 2023-09-15T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2024-0331 | Puccinier is unmainted. | 2024-03-31T12:00:00Z | 2024-03-31T14:44:37Z |
| rustsec-2023-0084 | `hpack` is unmaintained | 2023-09-15T12:00:00Z | 2024-03-06T14:01:14Z |
| rustsec-2023-0081 | safemem is unmaintained | 2023-02-14T12:00:00Z | 2024-03-04T18:47:07Z |
| rustsec-2024-0019 | Tokens for named pipes may be delivered after deregistration | 2024-03-04T12:00:00Z | 2024-03-04T17:51:31Z |
| rustsec-2023-0083 | blurhash: panic on parsing crafted blurhash inputs | 2023-09-19T12:00:00Z | 2024-03-02T17:22:42Z |
| rustsec-2023-0082 | phonenumber: panic on parsing crafted RF3966 phonenumber inputs | 2023-09-19T12:00:00Z | 2024-02-29T21:46:35Z |
| rustsec-2024-0015 | filesystem-rs may be implicitly unmaintained | 2024-01-25T12:00:00Z | 2024-02-18T04:23:45Z |
| rustsec-2024-0014 | `generational-arena` is unmaintained | 2024-02-11T12:00:00Z | 2024-02-18T04:06:15Z |
| rustsec-2024-0013 | Memory corruption, denial of service, and arbitrary code execution in libgit2 | 2024-02-06T12:00:00Z | 2024-02-15T01:22:49Z |
| rustsec-2024-0010 | Improper comparison of different-length signatures | 2024-02-06T12:00:00Z | 2024-02-15T01:22:49Z |
| rustsec-2024-0007 | Use-after-free when setting the locale | 2024-01-19T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2024-0005 | Unsound sending of non-Send types across threads | 2024-01-07T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2024-0003 | Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS) | 2024-01-17T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2024-0001 | Unsound use of str::from_utf8_unchecked on bytes which are not UTF-8 | 2024-01-13T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0078 | Potential stack use-after-free in `Instrumented::into_inner` | 2023-10-19T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0075 | Unaligned write of u64 on 32-bit and 16-bit platforms | 2023-12-20T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0074 | Some Ref methods are unsound with some type parameters | 2023-12-14T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0072 | `openssl` `X509StoreRef::objects` is unsound | 2023-11-23T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0070 | Insufficient covariance check makes self_cell unsound | 2023-11-10T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0066 | Vulnerable to privilege escalation using ioctls TIOCSTI and TIOCLINUX | 2023-04-29T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0063 | Denial of service in Quinn servers | 2023-09-21T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0062 | BER/CER/DER decoder panics on invalid input | 2023-09-13T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0061 | libwebp: OOB write in BuildHuffmanTable | 2023-09-12T12:00:00Z | 2024-02-10T15:57:43Z |
| rustsec-2023-0060 | libwebp: OOB write in BuildHuffmanTable | 2023-09-12T12:00:00Z | 2024-02-10T15:57:43Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-envoy-2025-64527 | Envoy crashes when JWT authentication is configured with the remote JWKS fetching | 2025-12-06T11:38:17.923Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-66200 | Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | 2025-12-09T11:38:20.150Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-65082 | Apache HTTP Server: CGI environment variable override | 2025-12-09T11:38:18.501Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-59775 | Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF | 2025-12-09T11:38:16.754Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-58098 | Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | 2025-12-09T11:38:15.033Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-55753 | Apache HTTP Server: mod_md (ACME), unintended retry intervals | 2025-12-09T11:38:13.178Z | 2025-12-09T12:08:00.393Z |
| bit-mongodb-2025-13507 | Time-series operations may cause internal BSON size limit to be exceed | 2025-12-06T11:42:49.537Z | 2025-12-06T12:06:23.267Z |
| bit-mongodb-2025-12893 | Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server | 2025-12-06T11:42:47.994Z | 2025-12-06T12:06:23.267Z |
| bit-mongodb-2025-11979 | Use-after-free in the MongoDB server query planner may lead to crash or undefined behavior | 2025-12-06T11:42:46.232Z | 2025-12-06T12:06:23.267Z |
| bit-golang-2025-61727 | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 | 2025-12-06T11:41:09.464Z | 2025-12-06T12:06:23.267Z |
| bit-cilium-2025-64715 | Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic | 2025-12-02T11:35:57.032Z | 2025-12-06T12:06:23.267Z |
| bit-python-2025-6075 | Quadratic complexity in os.path.expandvars() with user-controlled template | 2025-12-05T11:13:34.373Z | 2025-12-05T11:40:36.013Z |
| bit-libpython-2025-6075 | Quadratic complexity in os.path.expandvars() with user-controlled template | 2025-12-05T11:08:28.184Z | 2025-12-05T11:40:36.013Z |
| bit-python-2025-8291 | ZIP64 End of Central Directory (EOCD) Locator record offset not checked | 2025-10-14T09:30:19.669Z | 2025-12-04T12:07:39.656Z |
| bit-python-2025-1795 | Mishandling of comma during folding and unicode-encoding of email headers | 2025-04-14T11:35:31.045Z | 2025-12-04T12:07:39.656Z |
| bit-libpython-2025-8291 | ZIP64 End of Central Directory (EOCD) Locator record offset not checked | 2025-10-14T09:25:48.465Z | 2025-12-04T12:07:39.656Z |
| bit-libpython-2025-1795 | Mishandling of comma during folding and unicode-encoding of email headers | 2025-08-11T13:53:05.339Z | 2025-12-04T12:07:39.656Z |
| bit-golang-2025-61729 | Excessive resource consumption when printing error string for host certificate validation in crypto/x509 | 2025-12-04T11:41:52.637Z | 2025-12-04T12:07:39.656Z |
| bit-activemq-2025-27533 | Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation | 2025-12-03T14:35:40.173Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2023-46604 | Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack | 2025-12-03T14:35:38.733Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2022-41678 | Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE | 2025-12-03T14:35:37.010Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-26117 | ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind | 2025-12-03T14:35:35.296Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21351 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:33.786Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21350 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:32.295Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21349 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host | 2025-12-03T14:35:30.789Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21348 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) | 2025-12-03T14:35:29.299Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21347 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:27.664Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21346 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:26.027Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21345 | XStream is vulnerable to a Remote Command Execution attack | 2025-12-03T14:35:24.382Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21344 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:22.678Z | 2025-12-03T15:08:24.036Z |
| ID | Description | Updated |
|---|---|---|
| var-201902-0360 | In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popov… | 2024-07-23T21:44:51.239000Z |
| var-202210-0043 | The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fie… | 2024-07-23T21:44:46.557000Z |
| var-200809-0187 | Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial … | 2024-07-23T21:44:13.542000Z |
| var-202203-0664 | BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions… | 2024-07-23T21:44:12.287000Z |
| var-201109-0214 | Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers… | 2024-07-23T21:44:12.444000Z |
| var-200901-0466 | The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for co… | 2024-07-23T21:44:12.668000Z |
| var-201202-0137 | Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote at… | 2024-07-23T21:43:37.915000Z |
| var-201806-1468 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2024-07-23T21:43:36.931000Z |
| var-201110-0321 | FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterpri… | 2024-07-23T21:43:33.476000Z |
| var-200703-0009 | Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating sys… | 2024-07-23T21:43:33.598000Z |
| var-200102-0029 | Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial… | 2024-07-23T21:43:33.797000Z |
| var-201710-1405 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2024-07-23T21:43:29.001000Z |
| var-201912-0457 | A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tv… | 2024-07-23T21:43:28.933000Z |
| var-201302-0309 | Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.… | 2024-07-23T21:43:28.487000Z |
| var-202103-1464 | An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello m… | 2024-07-23T21:43:25.615000Z |
| var-201710-1409 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2024-07-23T21:43:25.189000Z |
| var-201210-0343 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:43:24.967000Z |
| var-201912-0551 | A memory corruption issue was addressed with improved state management. This issue is fix… | 2024-07-23T21:43:21.002000Z |
| var-201211-0366 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-07-23T21:42:50.004000Z |
| var-200609-0310 | Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote atta… | 2024-07-23T21:42:44.179000Z |
| var-200909-0789 | libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when Open… | 2024-07-23T21:42:38.375000Z |
| var-201606-0382 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified … | 2024-07-23T21:42:37.934000Z |
| var-201206-0058 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:42:36.964000Z |
| var-201912-1860 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:42:32.013000Z |
| var-200711-0560 | Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matc… | 2024-07-23T21:42:00.915000Z |
| var-201109-0209 | Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) t… | 2024-07-23T21:41:33.003000Z |
| var-201007-0319 | The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit i… | 2024-07-23T21:41:32.923000Z |
| var-201302-0136 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:41:31.932000Z |
| var-200703-0018 | Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to… | 2024-07-23T21:41:31.383000Z |
| var-201603-0222 | The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denia… | 2024-07-23T21:40:58.575000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000072 | Cybozu Garoon vulnerable to cross-site scripting | 2024-07-16T16:14+09:00 | 2024-07-16T16:14+09:00 |
| jvndb-2024-000071 | FUJITSU Network Edgiot GW1500 vulnerable to path traversal | 2024-07-16T14:41+09:00 | 2024-07-16T14:41+09:00 |
| jvndb-2023-007150 | Multiple vulnerabilities in First Corporation's DVRs | 2023-11-17T17:31+09:00 | 2024-07-11T17:05+09:00 |
| jvndb-2023-000094 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2023-09-22T13:51+09:00 | 2024-07-11T16:49+09:00 |
| jvndb-2024-000007 | Multiple Dahua Technology products vulnerable to authentication bypass | 2024-01-18T13:43+09:00 | 2024-07-11T16:10+09:00 |
| jvndb-2024-001882 | Sharp NEC Display Solutions' public displays vulnerable to local file inclusion | 2024-02-07T14:25+09:00 | 2024-07-11T14:27+09:00 |
| jvndb-2024-000070 | Out-of-bounds write vulnerability in Ricoh MFPs and printers | 2024-07-10T14:16+09:00 | 2024-07-10T14:16+09:00 |
| jvndb-2024-000059 | Multiple vulnerabilities in multiple Webmin products | 2024-07-09T14:27+09:00 | 2024-07-09T14:27+09:00 |
| jvndb-2024-000069 | Cleartext transmission issue in TONE store App to TONE store | 2024-07-08T13:43+09:00 | 2024-07-08T13:43+09:00 |
| jvndb-2024-000068 | JP1/Extensible SNMP Agent fails to restrict access permissions | 2024-07-03T14:57+09:00 | 2024-07-03T14:57+09:00 |
| jvndb-2017-000194 | WSR-300HP vulnerable to arbitrary code execution | 2017-08-08T18:07+09:00 | 2024-07-02T17:55+09:00 |
| jvndb-2024-003831 | Multiple TP-Link products vulnerable to OS command injection | 2024-06-28T17:38+09:00 | 2024-06-28T17:38+09:00 |
| jvndb-2024-000067 | "Piccoma" App uses a hard-coded API key for an external service | 2024-06-28T13:18+09:00 | 2024-06-28T13:18+09:00 |
| jvndb-2016-002299 | SaAT Netizen fails to properly verify downloaded installation and update files | 2016-12-05T13:52+09:00 | 2024-06-27T13:59+09:00 |
| jvndb-2022-000080 | Android App "IIJ SmartKey" vulnerable to information disclosure | 2022-10-14T13:57+09:00 | 2024-06-27T13:40+09:00 |
| jvndb-2023-001774 | Multiple vulnerabilities in SolarView Compact | 2023-05-09T16:09+09:00 | 2024-06-27T13:30+09:00 |
| jvndb-2024-000017 | Cybozu KUNAI for Android vulnerable to denial-of-service (DoS) | 2024-02-06T13:25+09:00 | 2024-06-27T13:28+09:00 |
| jvndb-2024-000066 | WordPress plugins "WP Tweet Walls" and "Sola Testimonials" vulnerable to cross-site request forgery | 2024-06-26T14:25+09:00 | 2024-06-26T14:25+09:00 |
| jvndb-2022-000026 | WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" vulnerable to cross-site request forgery | 2022-04-15T13:15+09:00 | 2024-06-25T18:04+09:00 |
| jvndb-2024-003699 | LINE client for iOS vulnerable to universal cross-site scripting | 2024-06-24T11:05+09:00 | 2024-06-24T11:05+09:00 |
| jvndb-2022-001372 | Trend Micro Antivirus for MAC vulnerable to privilege escalation | 2022-02-18T14:55+09:00 | 2024-06-21T18:04+09:00 |
| jvndb-2022-001381 | Multiple vulnerabilities in Trend Micro ServerProtect | 2022-03-03T14:42+09:00 | 2024-06-21T17:58+09:00 |
| jvndb-2022-000015 | EC-CUBE improperly handles HTTP Host header values | 2022-02-22T14:22+09:00 | 2024-06-21T17:39+09:00 |
| jvndb-2022-000013 | EC-CUBE plugin "Mail Magazine Management Plugin" vulnerable to cross-site request forgery | 2022-02-22T14:09+09:00 | 2024-06-21T14:05+09:00 |
| jvndb-2022-000023 | WordPress Plugin "Advanced Custom Fields" vulnerable to missing authorization | 2022-03-30T15:23+09:00 | 2024-06-21T12:25+09:00 |
| jvndb-2022-000020 | Multiple vulnerabilities in pfSense | 2022-03-15T14:58+09:00 | 2024-06-21T11:59+09:00 |
| jvndb-2022-000022 | AttacheCase may insecurely load Dynamic Link Libraries | 2022-03-30T14:00+09:00 | 2024-06-21T11:42+09:00 |
| jvndb-2022-001387 | Installer of WPS Office for Windows misconfigures the ACL for the installation directory | 2022-03-09T12:30+09:00 | 2024-06-21T11:37+09:00 |
| jvndb-2022-001384 | Multiple vulnerabilities in OMRON CX-Programmer | 2022-03-08T15:56+09:00 | 2024-06-21T11:32+09:00 |
| jvndb-2023-000008 | Pgpool-II vulnerable to information disclosure | 2023-01-23T16:35+09:00 | 2024-06-20T17:54+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20045-1 | Security update for glib2 | 2026-01-08T16:00:18Z | 2026-01-08T16:00:18Z |
| suse-su-2026:20044-1 | Security update for rsync | 2026-01-08T15:49:46Z | 2026-01-08T15:49:46Z |
| suse-su-2026:20043-1 | Security update for python-tornado6 | 2026-01-08T15:48:09Z | 2026-01-08T15:48:09Z |
| suse-su-2026:20042-1 | Security update for curl | 2026-01-08T15:18:54Z | 2026-01-08T15:18:54Z |
| suse-su-2026:20041-1 | Security update for bluez | 2026-01-08T15:07:04Z | 2026-01-08T15:07:04Z |
| suse-su-2026:20062-1 | Security update for curl | 2026-01-08T14:51:21Z | 2026-01-08T14:51:21Z |
| suse-su-2026:20061-1 | Security update for openvswitch | 2026-01-08T14:43:50Z | 2026-01-08T14:43:50Z |
| suse-su-2026:0073-1 | Security update for ImageMagick | 2026-01-08T13:22:41Z | 2026-01-08T13:22:41Z |
| suse-su-2026:0072-1 | Security update for ImageMagick | 2026-01-08T13:22:28Z | 2026-01-08T13:22:28Z |
| suse-su-2026:0071-1 | Security update for php8 | 2026-01-08T13:22:08Z | 2026-01-08T13:22:08Z |
| suse-su-2026:0070-1 | Security update for qemu | 2026-01-08T13:21:59Z | 2026-01-08T13:21:59Z |
| suse-su-2026:0069-1 | Security update for rsync | 2026-01-08T13:21:48Z | 2026-01-08T13:21:48Z |
| suse-su-2026:0068-1 | Security update for libvirt | 2026-01-08T12:22:40Z | 2026-01-08T12:22:40Z |
| suse-su-2026:0067-1 | Security update for podman | 2026-01-08T12:22:16Z | 2026-01-08T12:22:16Z |
| suse-su-2026:0066-1 | Security update for curl | 2026-01-08T12:21:35Z | 2026-01-08T12:21:35Z |
| suse-su-2026:0063-1 | Security update for libpcap | 2026-01-08T09:36:26Z | 2026-01-08T09:36:26Z |
| suse-su-2026:0062-1 | Security update for libpcap | 2026-01-08T09:36:12Z | 2026-01-08T09:36:12Z |
| suse-su-2026:0061-1 | Security update for ImageMagick | 2026-01-07T18:33:22Z | 2026-01-07T18:33:22Z |
| suse-su-2026:0060-1 | Security update for capstone | 2026-01-07T16:02:47Z | 2026-01-07T16:02:47Z |
| suse-su-2026:0059-1 | Security update for ImageMagick | 2026-01-07T16:01:56Z | 2026-01-07T16:01:56Z |
| suse-su-2026:20039-1 | Security update for the Linux Kernel | 2026-01-07T12:33:45Z | 2026-01-07T12:33:45Z |
| suse-su-2026:0053-1 | Security update for libpcap | 2026-01-07T11:03:52Z | 2026-01-07T11:03:52Z |
| suse-su-2026:20059-1 | Security update for the Linux Kernel | 2026-01-07T10:55:44Z | 2026-01-07T10:55:44Z |
| suse-su-2026:20022-1 | Security update of valkey | 2026-01-07T09:35:57Z | 2026-01-07T09:35:57Z |
| suse-su-2026:0052-1 | Security update for curl | 2026-01-07T09:28:37Z | 2026-01-07T09:28:37Z |
| suse-su-2026:0051-1 | Security update for curl | 2026-01-07T09:28:27Z | 2026-01-07T09:28:27Z |
| suse-su-2026:0050-1 | Security update for curl | 2026-01-07T09:28:15Z | 2026-01-07T09:28:15Z |
| suse-su-2026:0044-1 | Security update for mozjs60 | 2026-01-06T16:10:16Z | 2026-01-06T16:10:16Z |
| suse-su-2026:0043-1 | Security update for qemu | 2026-01-06T16:03:07Z | 2026-01-06T16:03:07Z |
| suse-su-2026:20038-1 | Security update for qemu | 2026-01-06T11:41:24Z | 2026-01-06T11:41:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-07120 | IBM Engineering Systems Design Rhapsody信息泄露漏洞 | 2025-07-24 | 2026-01-23 |
| cnvd-2026-07119 | IBM Engineering Systems Design Rhapsody堆栈缓冲区溢出漏洞(CNVD-2026-07119) | 2025-07-24 | 2026-01-23 |
| cnvd-2026-07118 | IBM Engineering Systems Design Rhapsody堆栈缓冲区溢出漏洞 | 2025-07-24 | 2026-01-23 |
| cnvd-2026-07117 | IBM Cognos Command Center重定向漏洞 | 2025-08-28 | 2026-01-23 |
| cnvd-2026-07116 | IBM Cognos Command Center代码执行漏洞 | 2025-08-28 | 2026-01-23 |
| cnvd-2026-07115 | IBM Cognos Command Center点击劫持漏洞 | 2025-08-28 | 2026-01-23 |
| cnvd-2026-07114 | IBM Concert信息泄露漏洞(CNVD-2026-07114) | 2025-11-24 | 2026-01-23 |
| cnvd-2026-07113 | IBM Concert堆内存清理不当漏洞 | 2025-12-29 | 2026-01-23 |
| cnvd-2026-07112 | IBM Concert信息泄露漏洞 | 2026-01-14 | 2026-01-23 |
| cnvd-2026-07111 | IBM Concert竞争条件漏洞 | 2026-01-14 | 2026-01-23 |
| cnvd-2026-07091 | D-Link DAP-2622堆栈缓冲区溢出远程代码执行漏洞(CNVD-2026-07091) | 2023-08-28 | 2026-01-23 |
| cnvd-2026-07090 | D-Link DAP-2622栈缓冲区溢出远程代码执行漏洞 | 2023-08-28 | 2026-01-23 |
| cnvd-2026-07089 | D-Link DAP-2622堆栈缓冲区溢出远程代码执行漏洞 | 2023-08-28 | 2026-01-23 |
| cnvd-2026-07088 | D-Link DIR-823G SOAPACTION参数缓冲区溢出漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07087 | D-Link DIR-823G Cookie参数缓冲区溢出漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07086 | D-Link DIR-823G缓冲区溢出漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07085 | D-Link DIR-823G sub_41C488函数空指针取消引用漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07084 | D-Link DIR-823G sub_4484A8函数空指针取消引用漏洞 | 2024-03-04 | 2026-01-23 |
| cnvd-2026-07083 | D-Link DIR-823G sub_4484A8函数空指针取消引用漏洞 | 2024-03-06 | 2026-01-23 |
| cnvd-2026-07082 | D-Link DIR-823G sub_42AF30函数空指针取消引用漏洞 | 2024-03-06 | 2026-01-23 |
| cnvd-2026-07081 | D-Link DIR-823G空指针取消引用漏洞 | 2024-03-06 | 2026-01-23 |
| cnvd-2026-07040 | WordPress WP-Members Membership plugin跨站脚本漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07039 | WordPress WP-CRM System plugin未经授权访问漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07027 | WordPress Uploadify plugin代码问题漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07026 | WordPress Testimonials Creator plugin跨站脚本漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07025 | WordPress Supreme Modules Lite plugin代码问题漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07012 | WordPress Stopwords for comments plugin跨站请求伪造漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-07004 | WordPress SpiceForms Form Builder plugin跨站脚本漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-06988 | WordPress Sosh Share Buttons plugin跨站请求伪造漏洞 | 2026-01-19 | 2026-01-23 |
| cnvd-2026-06987 | WordPress SocialChamp with WordPress plugin跨站请求伪造漏洞 | 2026-01-19 | 2026-01-23 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0012 | Multiples vulnérabilités dans Trend Micro Apex Central | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0011 | Vulnérabilité dans Google Android | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0015 | Multiples vulnérabilités dans les produits Centreon | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0014 | Multiples vulnérabilités dans GitLab | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0013 | Vulnérabilité dans Tenable Nessus Agent | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0012 | Multiples vulnérabilités dans Trend Micro Apex Central | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| CERTFR-2026-AVI-0011 | Vulnérabilité dans Google Android | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0010 | Multiples vulnérabilités dans Curl | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0009 | Vulnérabilité dans Google Chrome | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0008 | Multiples vulnérabilités dans Joomla! | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| CERTFR-2026-AVI-0010 | Multiples vulnérabilités dans Curl | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| CERTFR-2026-AVI-0009 | Vulnérabilité dans Google Chrome | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| CERTFR-2026-AVI-0008 | Multiples vulnérabilités dans Joomla! | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0007 | Vulnérabilité dans Stormshield Network Security | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2026-avi-0006 | Multiples vulnérabilités dans Veeam Backup & Replication | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2026-avi-0005 | Multiples vulnérabilités dans Centreon Open Tickets | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2025-avi-1097 | Vulnérabilité dans les produits Mitel | 2025-12-11T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| CERTFR-2026-AVI-0007 | Vulnérabilité dans Stormshield Network Security | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| CERTFR-2026-AVI-0006 | Multiples vulnérabilités dans Veeam Backup & Replication | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| CERTFR-2026-AVI-0005 | Multiples vulnérabilités dans Centreon Open Tickets | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| CERTFR-2025-AVI-1097 | Vulnérabilité dans les produits Mitel | 2025-12-11T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2026-avi-0004 | Vulnérabilité dans MariaDB | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2026-avi-0003 | Multiples vulnérabilités dans les produits Qnap | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2025-avi-1111 | Multiples vulnérabilités dans Roundcube | 2025-12-15T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| CERTFR-2026-AVI-0004 | Vulnérabilité dans MariaDB | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| CERTFR-2026-AVI-0003 | Multiples vulnérabilités dans les produits Qnap | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| CERTFR-2025-AVI-1111 | Multiples vulnérabilités dans Roundcube | 2025-12-15T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2026-avi-0002 | Multiples vulnérabilités dans les produits IBM | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| certfr-2026-avi-0001 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| CERTFR-2026-AVI-0002 | Multiples vulnérabilités dans les produits IBM | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2016-ale-001 | Campagne de messages électroniques non sollicités de type Locky | 2016-02-19T00:00:00.000000 | 2016-04-07T00:00:00.000000 |
| CERTFR-2016-ALE-001 | Campagne de messages électroniques non sollicités de type Locky | 2016-02-19T00:00:00.000000 | 2016-04-07T00:00:00.000000 |
| certfr-2015-ale-015 | Campagne de messages électroniques non sollicités de type TeslaCrypt | 2015-12-21T00:00:00.000000 | 2016-03-10T00:00:00.000000 |
| CERTFR-2015-ALE-015 | Campagne de messages électroniques non sollicités de type TeslaCrypt | 2015-12-21T00:00:00.000000 | 2016-03-10T00:00:00.000000 |
| certfr-2015-ale-009 | Vulnérabilité dans Apple Mac OS X | 2015-07-24T00:00:00.000000 | 2015-12-22T00:00:00.000000 |
| CERTFR-2015-ALE-009 | Vulnérabilité dans Apple Mac OS X | 2015-07-24T00:00:00.000000 | 2015-12-22T00:00:00.000000 |
| certfr-2015-ale-012 | Campagne de messages électroniques non sollicités de type Dridex | 2015-10-23T00:00:00.000000 | 2015-11-26T00:00:00.000000 |
| CERTFR-2015-ALE-012 | Campagne de messages électroniques non sollicités de type Dridex | 2015-10-23T00:00:00.000000 | 2015-11-26T00:00:00.000000 |
| certfr-2015-ale-011 | Vulnérabilité dans Adobe Flash Player | 2015-10-14T00:00:00.000000 | 2015-10-19T00:00:00.000000 |
| CERTFR-2015-ALE-011 | Vulnérabilité dans Adobe Flash Player | 2015-10-14T00:00:00.000000 | 2015-10-19T00:00:00.000000 |
| certfr-2015-ale-010 | Multiples vulnérabilités dans Google Android | 2015-07-28T00:00:00.000000 | 2015-10-06T00:00:00.000000 |
| CERTFR-2015-ALE-010 | Multiples vulnérabilités dans Google Android | 2015-07-28T00:00:00.000000 | 2015-10-06T00:00:00.000000 |
| certfr-2015-ale-008 | Vulnérabilité dans le pilote de gestion des polices de caractères de Microsoft Windows | 2015-07-20T00:00:00.000000 | 2015-07-30T00:00:00.000000 |
| CERTFR-2015-ALE-008 | Vulnérabilité dans le pilote de gestion des polices de caractères de Microsoft Windows | 2015-07-20T00:00:00.000000 | 2015-07-30T00:00:00.000000 |
| certfr-2015-ale-007 | Vulnérabilité dans Oracle Java SE | 2015-07-13T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| certfr-2015-ale-006 | Vulnérabilité dans Adobe Flash Player | 2015-07-11T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| CERTFR-2015-ALE-007 | Vulnérabilité dans Oracle Java SE | 2015-07-13T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| CERTFR-2015-ALE-006 | Vulnérabilité dans Adobe Flash Player | 2015-07-11T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| certfr-2015-ale-005 | Vulnérabilité dans Adobe Flash Player | 2015-07-08T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-ale-003 | Nouvelle campagne d'hameçonnage de type rançongiciel | 2015-02-05T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| CERTFR-2015-ALE-005 | Vulnérabilité dans Adobe Flash Player | 2015-07-08T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| CERTFR-2015-ALE-003 | Nouvelle campagne d'hameçonnage de type rançongiciel | 2015-02-05T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-ale-004 | Vulnérabilité dans Microsoft Internet Explorer | 2015-02-10T00:00:00.000000 | 2015-03-31T00:00:00.000000 |
| CERTFR-2015-ALE-004 | Vulnérabilité dans Microsoft Internet Explorer | 2015-02-10T00:00:00.000000 | 2015-03-31T00:00:00.000000 |
| certfr-2015-ale-002 | Vulnérabilité dans Adobe Flash Player | 2015-02-02T00:00:00.000000 | 2015-02-05T00:00:00.000000 |
| CERTFR-2015-ALE-002 | Vulnérabilité dans Adobe Flash Player | 2015-02-02T00:00:00.000000 | 2015-02-05T00:00:00.000000 |
| certfr-2015-ale-001 | Vulnérabilité dans Adobe Flash Player | 2015-01-22T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-011 | Vulnérabilité de l'implémentation Kerberos dans Microsoft Windows | 2014-11-18T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-010 | Vulnérabilité de l'implémentation des protocoles SSL/TLS dans Microsoft Windows | 2014-11-11T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-008 | Vulnérabilité dans Drupal | 2014-10-16T00:00:00.000000 | 2015-01-30T00:00:00.000000 |