Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-12375 |
6.4 (3.1)
|
Printful Integration for WooCommerce <= 2.2.11 - Authe… |
printful |
Printful Integration for WooCommerce |
2026-02-19T03:25:14.353Z | 2026-02-19T03:25:14.353Z |
| CVE-2025-12451 |
6.1 (3.1)
|
Easy SVG Support <= 4.0 - Authenticated (Author+) Stor… |
benjamin_zekavica |
Easy SVG Support |
2026-02-19T03:25:13.845Z | 2026-02-19T03:25:13.845Z |
| CVE-2025-11754 |
7.5 (3.1)
|
Cookie Banner, Cookie Consent, Consent Log, Cookie Sca… |
wplegalpages |
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent |
2026-02-19T03:25:13.376Z | 2026-02-19T03:25:13.376Z |
| CVE-2025-12172 |
4.3 (3.1)
|
Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Re… |
mailchimp |
Mailchimp List Subscribe Form |
2026-02-19T03:25:12.912Z | 2026-02-19T03:25:12.912Z |
| CVE-2025-11706 |
6.1 (3.1)
|
Aruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Sc… |
arubadev |
Aruba HiSpeed Cache |
2026-02-19T03:25:12.460Z | 2026-02-19T03:25:12.460Z |
| CVE-2025-12448 |
6.4 (3.1)
|
Smartsupp – live chat, AI shopping assistant and chatb… |
smartsupp |
Smartsupp – live chat, AI shopping assistant and chatbots |
2026-02-19T03:25:11.994Z | 2026-02-19T03:25:11.994Z |
| CVE-2025-11725 |
6.5 (3.1)
|
Aruba HiSpeed Cache <= 3.0.2 - Missing Authorization t… |
arubadev |
Aruba HiSpeed Cache |
2026-02-19T03:25:11.535Z | 2026-02-19T03:25:11.535Z |
| CVE-2025-12027 |
4.3 (3.1)
|
Mesmerize Companion <= 1.6.158 - Missing Authorization… |
horearadu |
Mesmerize Companion |
2026-02-19T03:25:10.834Z | 2026-02-19T03:25:10.834Z |
| CVE-2026-25474 |
7.5 (3.1)
|
OpenClaw has a Telegram webhook request forgery (missi… |
openclaw |
openclaw |
2026-02-19T02:38:33.352Z | 2026-02-19T02:38:33.352Z |
| CVE-2026-25229 |
5.3 (4.0)
|
Gogs Authorization Bypass Allows Cross-Repository Labe… |
gogs |
gogs |
2026-02-19T02:33:09.877Z | 2026-02-19T02:33:09.877Z |
| CVE-2026-2693 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
CoCoTeaNet CyreneAdmin System Info Endpoint getCount i… |
CoCoTeaNet |
CyreneAdmin |
2026-02-19T02:32:07.071Z | 2026-02-19T02:32:07.071Z |
| CVE-2026-25242 |
6.9 (4.0)
|
Gogs allows unauthenticated file uploads |
gogs |
gogs |
2026-02-19T02:28:40.140Z | 2026-02-19T02:28:40.140Z |
| CVE-2026-25232 |
7.1 (4.0)
|
Gogs has a Protected Branch Deletion Bypass in Web Interface |
gogs |
gogs |
2026-02-19T02:25:34.039Z | 2026-02-19T02:25:34.039Z |
| CVE-2026-2692 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
CoCoTeaNet CyreneAdmin Image getAvatar path traversal |
CoCoTeaNet |
CyreneAdmin |
2026-02-19T02:02:06.735Z | 2026-02-19T02:02:06.735Z |
| CVE-2026-25120 |
5.1 (4.0)
|
Gogs Allows Cross-Repository Comment Deletion via Dele… |
gogs |
gogs |
2026-02-19T01:59:39.257Z | 2026-02-19T01:59:39.257Z |
| CVE-2025-4960 |
7.8 (3.1)
|
macOS Local Privilege Escalation via Improper Authoriz… |
EPSON |
EPSON Printer Controller Installer |
2026-02-19T01:37:22.018Z | 2026-02-19T01:37:22.018Z |
| CVE-2026-2691 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System manage_register.p… |
itsourcecode |
Event Management System |
2026-02-19T01:32:07.068Z | 2026-02-19T01:32:07.068Z |
| CVE-2026-24764 |
3.7 (3.1)
|
OpenClaw has Remote Code Execution via System Prompt I… |
clawdbot |
clawdbot |
2026-02-19T01:10:17.540Z | 2026-02-19T01:10:17.540Z |
| CVE-2025-13601 |
7.7 (3.1)
|
Glib: integer overflow in in g_escape_uri_string() |
|
|
2025-11-26T14:44:22.680Z | 2026-02-19T01:07:34.125Z |
| CVE-2026-2690 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System Admin Login ajax.… |
itsourcecode |
Event Management System |
2026-02-19T01:02:07.372Z | 2026-02-19T01:02:07.372Z |
| CVE-2025-7195 |
5.2 (3.1)
|
Operator-sdk: privilege escalation due to incorrect pe… |
operator-framework |
operator-sdk |
2025-08-07T19:05:08.756Z | 2026-02-19T00:43:23.459Z |
| CVE-2026-2689 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System manage_booking.ph… |
itsourcecode |
Event Management System |
2026-02-19T00:32:07.761Z | 2026-02-19T00:32:07.761Z |
| CVE-2026-2686 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
SECCN Dingcheng G10 session_login.cgi qq os command in… |
SECCN Dingcheng |
G10 |
2026-02-19T00:02:07.214Z | 2026-02-19T00:02:07.214Z |
| CVE-2025-15585 |
6.7 (4.0)
|
Fileflows versions before 25.05.2 are affected by… |
fileflows |
fileflows |
2026-02-18T23:44:40.034Z | 2026-02-18T23:46:59.818Z |
| CVE-2026-25592 |
10 (3.1)
|
Semantic Kernel has an Arbitrary File Write via AI Age… |
microsoft |
semantic-kernel |
2026-02-06T20:38:28.770Z | 2026-02-18T23:32:54.483Z |
| CVE-2026-2684 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System uploadFil… |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T23:32:07.382Z | 2026-02-18T23:32:07.382Z |
| CVE-2026-25926 |
7.3 (3.1)
|
Notepad++ has an Untrusted Search Path |
notepad-plus-plus |
notepad-plus-plus |
2026-02-18T23:07:36.383Z | 2026-02-18T23:07:36.383Z |
| CVE-2026-25595 |
4.8 (3.1)
|
InvoicePlane has Stored XSS via Invoice Number in Invo… |
InvoicePlane |
InvoicePlane |
2026-02-18T22:52:27.047Z | 2026-02-18T22:52:27.047Z |
| CVE-2026-25594 |
4.8 (3.1)
|
InvoicePlane has Stored XSS via Family Name in Product Form |
InvoicePlane |
InvoicePlane |
2026-02-18T22:50:45.523Z | 2026-02-18T22:50:45.523Z |
| CVE-2026-25548 |
9.1 (3.1)
|
InvoicePlane Vulnerable to Remote Code Execution via L… |
InvoicePlane |
InvoicePlane |
2026-02-18T22:49:15.235Z | 2026-02-18T22:49:15.235Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2019-25417 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:33.379Z | 2026-02-19T12:02:33.379Z |
| CVE-2019-25416 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:32.590Z | 2026-02-19T12:02:32.590Z |
| CVE-2019-25415 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via ho… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:31.747Z | 2026-02-19T12:02:31.747Z |
| CVE-2019-25414 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:30.924Z | 2026-02-19T12:02:30.924Z |
| CVE-2019-25413 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:30.047Z | 2026-02-19T12:02:30.047Z |
| CVE-2019-25412 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:29.064Z | 2026-02-19T12:02:29.064Z |
| CVE-2019-25411 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via DHCP |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:28.243Z | 2026-02-19T12:02:28.243Z |
| CVE-2019-25410 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:27.387Z | 2026-02-19T12:02:27.387Z |
| CVE-2019-25409 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:26.568Z | 2026-02-19T12:02:26.568Z |
| CVE-2019-25408 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:25.726Z | 2026-02-19T12:02:25.726Z |
| CVE-2019-25407 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via ba… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:24.818Z | 2026-02-19T12:02:24.818Z |
| CVE-2019-25406 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:23.988Z | 2026-02-19T16:35:56.164Z |
| CVE-2019-25405 |
5.3 (4.0)
7.2 (3.1)
|
Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:23.191Z | 2026-02-19T16:37:07.903Z |
| CVE-2019-25404 |
5.1 (4.0)
6.4 (3.1)
|
Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:22.314Z | 2026-02-19T16:39:14.847Z |
| CVE-2019-25403 |
5.1 (4.0)
6.4 (3.1)
|
Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:21.496Z | 2026-02-19T12:02:21.496Z |
| CVE-2019-25402 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via login |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:20.283Z | 2026-02-19T12:02:20.283Z |
| CVE-2025-68952 |
9.3 (4.0)
|
1-click Remote Code Execution (RCE) vulnerability in Eigent |
eigent-ai |
eigent |
2025-12-27T00:37:08.917Z | 2025-12-29T15:53:36.804Z |
| CVE-2025-15141 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
Halo Configuration actuator information disclosure |
n/a |
Halo |
2025-12-28T15:02:05.484Z | 2025-12-29T16:30:18.082Z |
| CVE-2026-0102 |
3.1 (3.1)
|
Microsoft Edge (Chromium-based) Defense in Depth Vulne… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-02-17T19:14:32.901Z | 2026-02-19T16:31:53.826Z |
| CVE-2026-25152 |
5.3 (3.1)
|
@backstage/plugin-techdocs-node vulnerable to possible… |
backstage |
backstage |
2026-01-30T21:51:22.277Z | 2026-02-02T16:29:27.963Z |
| CVE-2026-25153 |
7.7 (3.1)
|
@backstage/plugin-techdocs-node vulnerable to arbitrar… |
backstage |
backstage |
2026-01-30T21:31:58.870Z | 2026-02-02T16:29:34.938Z |
| CVE-2026-25227 |
9.1 (3.1)
|
authentik affected by Remote Code Execution via Contex… |
goauthentik |
authentik |
2026-02-12T19:25:26.932Z | 2026-02-17T15:43:53.801Z |
| CVE-2026-25748 |
8.6 (3.1)
|
authentik has a forward authentication bypass with bro… |
goauthentik |
authentik |
2026-02-12T19:36:45.631Z | 2026-02-17T15:53:01.301Z |
| CVE-2026-2744 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-02-19T13:58:39.176Z | 2026-02-19T14:08:34.194Z |
| CVE-2025-70560 |
8.4 (3.1)
|
Boltz 2.0.0 contains an insecure deserialization … |
n/a |
n/a |
2026-02-03T00:00:00.000Z | 2026-02-19T14:23:48.012Z |
| CVE-2025-65753 |
7.5 (3.1)
|
An issue in the TLS certification mechanism of Gu… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-19T14:25:42.668Z |
| CVE-2026-25154 |
6.1 (3.1)
|
LocalSend has Stored XSS in Web Share Interface via Filename |
localsend |
localsend |
2026-01-30T21:59:30.234Z | 2026-02-02T16:29:18.825Z |
| CVE-2025-68432 |
7.8 (3.1)
|
Zed IDE LSP Binary Configuration Arbitrary Code Execution |
zed-industries |
zed |
2025-12-17T22:45:42.228Z | 2025-12-18T15:34:07.066Z |
| CVE-2026-25156 |
7.3 (3.1)
|
HotCRP vulnerable to stored XSS via comment attachments |
kohler |
hotcrp |
2026-01-30T22:11:35.480Z | 2026-02-02T17:42:38.247Z |
| CVE-2026-25805 |
6.4 (3.1)
|
Zed does not show Parameter Values for MCP Tool Calls.… |
zed-industries |
zed |
2026-02-10T17:27:49.390Z | 2026-02-10T19:20:11.990Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-25152 | Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node … | 2026-01-30T22:15:56.190 | 2026-02-19T15:37:56.570 |
| fkie_cve-2026-25153 | Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node … | 2026-01-30T22:15:56.343 | 2026-02-19T15:26:37.430 |
| fkie_cve-2026-25227 | authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 202… | 2026-02-12T20:16:10.313 | 2026-02-19T15:25:12.283 |
| fkie_cve-2026-25748 | authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed c… | 2026-02-12T20:16:10.473 | 2026-02-19T15:23:42.360 |
| fkie_cve-2026-2744 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-02-19T14:16:15.073 | 2026-02-19T15:16:12.483 |
| fkie_cve-2025-70560 | Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionalit… | 2026-02-03T18:16:17.900 | 2026-02-19T15:16:11.520 |
| fkie_cve-2025-65753 | An issue in the TLS certification mechanism of Guardian Gryphon v01.06.0006.22 allows attackers to … | 2026-02-17T16:20:24.477 | 2026-02-19T15:16:11.337 |
| fkie_cve-2026-25154 | LocalSend is a free, open-source app that allows users to share files and messages with nearby devi… | 2026-01-30T22:15:56.490 | 2026-02-19T15:15:33.287 |
| fkie_cve-2025-68432 | Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre.… | 2025-12-17T23:16:05.303 | 2026-02-19T15:10:51.383 |
| fkie_cve-2026-25156 | HotCRP is conference review software. HotCRP versions from October 2025 through January 2026 delive… | 2026-01-30T23:16:12.333 | 2026-02-19T15:10:01.723 |
| fkie_cve-2026-25805 | Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool … | 2026-02-10T18:16:38.200 | 2026-02-19T15:08:32.990 |
| fkie_cve-2026-20711 | Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which… | 2026-02-02T07:16:45.100 | 2026-02-19T15:06:02.143 |
| fkie_cve-2025-68433 | Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre.… | 2025-12-17T23:16:05.453 | 2026-02-19T15:05:59.037 |
| fkie_cve-2026-22881 | Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, whi… | 2026-02-02T07:16:45.337 | 2026-02-19T15:00:54.530 |
| fkie_cve-2026-22888 | Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unautho… | 2026-02-02T07:16:45.523 | 2026-02-19T14:53:03.017 |
| fkie_cve-2025-36194 | IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 throu… | 2026-02-02T23:15:59.210 | 2026-02-19T14:46:37.653 |
| fkie_cve-2025-36238 | IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 throu… | 2026-02-02T23:15:59.383 | 2026-02-19T14:41:41.713 |
| fkie_cve-2025-36436 | IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 … | 2026-02-02T23:15:59.710 | 2026-02-19T13:48:21.817 |
| fkie_cve-2026-26119 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges… | 2026-02-17T23:16:22.880 | 2026-02-19T13:10:49.550 |
| fkie_cve-2025-0752 | A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control … | 2025-01-28T10:15:09.493 | 2026-02-19T09:16:09.923 |
| fkie_cve-2025-13601 | A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer s… | 2025-11-26T15:15:51.723 | 2026-02-19T07:17:31.273 |
| fkie_cve-2026-25592 | Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems.… | 2026-02-06T21:16:17.647 | 2026-02-19T00:16:21.663 |
| fkie_cve-2025-45769 | php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on th… | 2025-07-31T20:15:33.150 | 2026-02-18T22:16:24.073 |
| fkie_cve-2026-2547 | A vulnerability was detected in LigeroSmart up to 6.1.26. The impacted element is the function Agen… | 2026-02-16T09:16:08.660 | 2026-02-18T21:45:21.910 |
| fkie_cve-2025-13821 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to sanitize sensiti… | 2026-02-16T12:16:21.423 | 2026-02-18T21:44:27.573 |
| fkie_cve-2026-2555 | A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDo… | 2026-02-16T12:16:22.667 | 2026-02-18T21:43:53.793 |
| fkie_cve-2026-2447 | Heap buffer overflow in libvpx. This vulnerability affects Firefox < 147.0.4, Firefox ESR < 140.7.1… | 2026-02-16T15:18:34.740 | 2026-02-18T21:39:10.380 |
| fkie_cve-2025-70397 | jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the d… | 2026-02-17T16:20:25.467 | 2026-02-18T21:38:43.587 |
| fkie_cve-2026-22892 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user pe… | 2026-02-13T11:16:10.693 | 2026-02-18T21:34:16.227 |
| fkie_cve-2026-26187 | lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to… | 2026-02-13T19:17:29.100 | 2026-02-18T21:32:15.033 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-33rq-m5x2-fvgf |
7.3 (3.1)
|
OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger a… | 2026-02-17T21:37:55Z | 2026-02-17T21:37:55Z |
| ghsa-4rj2-gpmh-qq5x |
9.4 (3.1)
|
OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix m… | 2026-02-17T21:36:34Z | 2026-02-17T21:36:34Z |
| ghsa-r5h9-vjqc-hq3r |
9.3 (4.0)
|
Nextcloud Talk allowlist bypass via actor.name display name spoofing | 2026-02-17T21:36:15Z | 2026-02-17T21:36:15Z |
| ghsa-fhvm-j76f-qmjv |
9.1 (4.0)
|
OpenClaw has a potential access-group authorization bypass if channel type lookup fails | 2026-02-17T21:34:36Z | 2026-02-17T21:34:36Z |
| ghsa-rmxw-jxxx-4cpc |
6.5 (3.1)
|
OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching | 2026-02-17T21:34:17Z | 2026-02-17T21:34:17Z |
| ghsa-pchc-86f6-8758 |
7.5 (3.1)
|
OpenClaw BlueBubbles webhook auth bypass via loopback proxy trust | 2026-02-17T21:33:51Z | 2026-02-17T21:33:51Z |
| ghsa-3m3q-x3gj-f79x |
5.9 (3.1)
|
OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy conf… | 2026-02-17T21:31:58Z | 2026-02-17T21:31:58Z |
| ghsa-g27f-9qjv-22pm |
3.1 (3.1)
|
OpenClaw log poisoning (indirect prompt injection) via WebSocket headers | 2026-02-17T21:31:39Z | 2026-02-17T21:31:39Z |
| ghsa-mv9j-6xhh-g383 |
6.3 (4.0)
|
OpenClaw's unauthenticated Nostr profile HTTP endpoints allow remote profile/config tampering | 2026-02-17T21:31:17Z | 2026-02-17T21:31:17Z |
| ghsa-v929-j8mj-vc74 |
6.5 (3.1)
|
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allo… | 2026-02-17T21:31:15Z | 2026-02-17T21:31:15Z |
| ghsa-rm24-2x6v-8w7f |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability was detected in Blossom up to 1.17.1. This vulnerability affects the function conte… | 2026-02-17T21:31:15Z | 2026-02-17T21:31:15Z |
| ghsa-mrc8-4r2p-q3ww |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in Sciyon Koyuan Thermoelectricity Heat Network Manageme… | 2026-02-17T21:31:15Z | 2026-02-17T21:31:15Z |
| ghsa-8rh3-rvv2-3mr4 |
6.5 (3.1)
|
A vulnerability in the management API of the affected product could allow an unauthenticated remote… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:15Z |
| ghsa-74jq-6q38-p5wf |
8.8 (3.1)
|
An authentication bypass in the application API allows an unauthorized administrative account to be… | 2026-02-17T21:31:15Z | 2026-02-17T21:31:15Z |
| ghsa-5fc6-h8m7-2wfc |
6.5 (3.1)
|
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allo… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:15Z |
| ghsa-wrqj-g5w9-qq86 |
6.5 (3.1)
|
IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Win… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-wrgv-jmfr-c4gr |
5.9 (3.1)
|
IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptogr… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-wm8j-hgw9-h534 |
5.3 (3.1)
|
IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environme… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-wj4m-c5pc-p9r9 |
6.5 (3.1)
|
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information or pe… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-vp3m-qh4p-wg7c |
3.1 (3.1)
|
Under specific conditions, a malicious webpage may trigger autofill population after two consecutiv… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-qvhf-98cj-8779 |
|
TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via … | 2026-02-17T21:31:13Z | 2026-02-17T21:31:14Z |
| ghsa-qc7g-qpr2-qpjj |
6.5 (3.1)
|
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to caus… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-pqh8-xq2x-mwg2 |
|
TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via … | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-p937-j3mh-5m6r |
|
lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) on the /tools/Password/add page in… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-p2xq-4rwg-xcp7 |
5.9 (3.1)
|
IBM Concert 1.0.0 through 2.1.0 could allow an attacker to obtain sensitive information using man i… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-hp59-976f-xjmx |
6.8 (3.1)
|
IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishi… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-hf4g-rr9m-7fx6 |
|
Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. H… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-gr4h-93qx-7636 |
6.6 (3.1)
|
Dell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization of… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-gpj4-p4vm-jmrr |
8.1 (3.1)
|
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP re… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ghsa-g268-rwhc-cj9f |
|
A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authentic… | 2026-02-17T21:31:14Z | 2026-02-17T21:31:14Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2018-145 |
5.5 (3.1)
|
In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv… | exiv2 | 2018-01-18T07:29:00Z | 2024-11-21T14:22:49.222538Z |
| pysec-2018-144 |
5.5 (3.1)
|
The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote at… | exiv2 | 2018-01-03T09:29:00Z | 2024-11-21T14:22:49.165596Z |
| pysec-2018-143 |
6.5 (3.1)
|
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a d… | exiv2 | 2018-11-27T07:29:00Z | 2024-11-21T14:22:49.094932Z |
| pysec-2018-142 |
6.5 (3.1)
|
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may … | exiv2 | 2018-11-08T08:29:00Z | 2024-11-21T14:22:49.03444Z |
| pysec-2018-141 |
6.5 (3.1)
|
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD… | exiv2 | 2018-11-08T08:29:00Z | 2024-11-21T14:22:48.973676Z |
| pysec-2018-140 |
6.5 (3.1)
|
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in… | exiv2 | 2018-11-03T04:29:00Z | 2024-11-21T14:22:48.914006Z |
| pysec-2018-139 |
6.5 (3.1)
|
CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack cons… | exiv2 | 2018-09-28T09:29:00Z | 2024-11-21T14:22:48.850406Z |
| pysec-2018-138 |
6.5 (3.1)
|
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp … | exiv2 | 2018-09-20T20:29:00Z | 2024-11-21T14:22:48.791028Z |
| pysec-2018-137 |
6.5 (3.1)
|
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of s… | exiv2 | 2018-09-19T22:29:00Z | 2024-11-21T14:22:48.732242Z |
| pysec-2018-136 |
6.5 (3.1)
|
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of se… | exiv2 | 2018-09-19T22:29:00Z | 2024-11-21T14:22:48.67141Z |
| pysec-2018-135 |
6.5 (3.1)
|
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause … | exiv2 | 2018-09-02T03:29:00Z | 2024-11-21T14:22:48.611777Z |
| pysec-2018-134 |
8.1 (3.1)
|
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POS… | exiv2 | 2018-07-17T12:29:00Z | 2024-11-21T14:22:48.55081Z |
| pysec-2018-133 |
8.8 (3.1)
|
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp. | exiv2 | 2018-07-13T15:29:00Z | 2024-11-21T14:22:48.493339Z |
| pysec-2018-132 |
8.8 (3.1)
|
Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to… | exiv2 | 2018-06-13T11:29:00Z | 2024-11-21T14:22:48.43262Z |
| pysec-2018-131 |
8.8 (3.1)
|
Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an o… | exiv2 | 2018-06-13T11:29:00Z | 2024-11-21T14:22:48.369854Z |
| pysec-2018-130 |
9.8 (3.1)
|
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp. | exiv2 | 2018-05-29T07:29:00Z | 2024-11-21T14:22:48.306556Z |
| pysec-2018-129 |
6.5 (3.1)
|
In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote… | exiv2 | 2018-05-14T03:29:00Z | 2024-11-21T14:22:48.247062Z |
| pysec-2018-128 |
6.5 (3.1)
|
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk funct… | exiv2 | 2018-05-12T04:29:00Z | 2024-11-21T14:22:48.18647Z |
| pysec-2018-127 |
6.5 (3.1)
|
An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attacke… | exiv2 | 2018-05-12T04:29:00Z | 2024-11-21T14:22:48.062891Z |
| pysec-2018-126 |
6.5 (3.1)
|
In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at… | exiv2 | 2018-05-10T02:29:00Z | 2024-11-21T14:22:47.998655Z |
| pysec-2018-125 |
6.5 (3.1)
|
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read. | exiv2 | 2018-05-07T07:29:00Z | 2024-11-21T14:22:47.938221Z |
| pysec-2018-124 |
6.5 (3.1)
|
In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in t… | exiv2 | 2018-02-12T22:29:00Z | 2024-11-21T14:22:47.758262Z |
| pysec-2018-123 |
6.5 (3.1)
|
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStruct… | exiv2 | 2018-02-12T22:29:00Z | 2024-11-21T14:22:47.697229Z |
| pysec-2018-122 |
8.1 (3.1)
|
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 func… | exiv2 | 2018-02-12T22:29:00Z | 2024-11-21T14:22:47.638668Z |
| pysec-2018-121 |
6.5 (3.1)
|
In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.… | exiv2 | 2018-02-12T22:29:00Z | 2024-11-21T14:22:47.579327Z |
| pysec-2017-142 |
7.5 (3.1)
|
There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault i… | exiv2 | 2017-06-26T23:29:00Z | 2024-11-21T14:22:47.877232Z |
| pysec-2017-141 |
5.5 (3.1)
|
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in val… | exiv2 | 2017-12-31T19:29:00Z | 2024-11-21T14:22:47.817537Z |
| pysec-2017-140 |
5.5 (3.1)
|
There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk func… | exiv2 | 2017-12-13T22:29:00Z | 2024-11-21T14:22:47.521911Z |
| pysec-2017-139 |
5.5 (3.1)
|
There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2… | exiv2 | 2017-09-29T01:34:00Z | 2024-11-21T14:22:47.458235Z |
| pysec-2017-138 |
5.5 (3.1)
|
There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv… | exiv2 | 2017-09-29T01:34:00Z | 2024-11-21T14:22:47.398419Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4164 | A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(… | 2024-04-26T05:02:17.419490Z |
| gsd-2022-48683 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:00:39.331180Z |
| gsd-2022-48682 | In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file dele… | 2024-04-26T05:00:39.114509Z |
| gsd-2024-29078 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:15.597934Z |
| gsd-2024-27202 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:15.043072Z |
| gsd-2024-26026 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:14.001780Z |
| gsd-2024-28889 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:12.636165Z |
| gsd-2024-28883 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:12.389367Z |
| gsd-2024-28880 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:12.392410Z |
| gsd-2024-28132 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:12.156611Z |
| gsd-2024-33612 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.623768Z |
| gsd-2024-33608 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.687145Z |
| gsd-2024-33604 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.630048Z |
| gsd-2024-33602 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.534164Z |
| gsd-2024-33601 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.596048Z |
| gsd-2024-33600 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.660889Z |
| gsd-2024-33599 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.689695Z |
| gsd-2024-33598 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-25T05:02:10.601312Z |
| gsd-2024-33597 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.675513Z |
| gsd-2024-33596 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.590091Z |
| gsd-2024-33595 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.589303Z |
| gsd-2024-33594 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.522993Z |
| gsd-2024-33593 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.673021Z |
| gsd-2024-33592 | Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affec… | 2024-04-25T05:02:10.687617Z |
| gsd-2024-33591 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.580436Z |
| gsd-2024-33590 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.649565Z |
| gsd-2024-33589 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.659095Z |
| gsd-2024-33588 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.676199Z |
| gsd-2024-33587 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.664914Z |
| gsd-2024-33586 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.611646Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2026-661 | Malicious code in netlify-project-helper (npm) | 2026-02-03T03:54:05Z | 2026-02-06T03:05:25Z |
| mal-2026-769 | Malicious code in https-servers (npm) | 2026-02-05T17:28:15Z | 2026-02-06T03:05:24Z |
| mal-2026-757 | Malicious code in internallib_v157 (npm) | 2026-02-05T02:24:51Z | 2026-02-06T03:05:24Z |
| mal-2026-743 | Malicious code in internationalized (npm) | 2026-02-04T17:13:32Z | 2026-02-06T03:05:24Z |
| mal-2026-736 | Malicious code in ggajsvjsg (npm) | 2026-02-04T09:46:59Z | 2026-02-06T03:05:24Z |
| mal-2026-725 | Malicious code in json-mapping-source (npm) | 2026-02-04T05:25:15Z | 2026-02-06T03:05:24Z |
| mal-2026-724 | Malicious code in https-emailjs (npm) | 2026-02-04T05:02:52Z | 2026-02-06T03:05:24Z |
| mal-2026-723 | Malicious code in http-emailjs (npm) | 2026-02-04T05:02:52Z | 2026-02-06T03:05:24Z |
| mal-2026-708 | Malicious code in incode-kyc-backend (npm) | 2026-02-03T21:30:33Z | 2026-02-06T03:05:24Z |
| mal-2026-707 | Malicious code in js-unpack (npm) | 2026-02-03T17:41:26Z | 2026-02-06T03:05:24Z |
| mal-2026-692 | Malicious code in graphrix (npm) | 2026-02-03T07:44:00Z | 2026-02-06T03:05:24Z |
| mal-2026-683 | Malicious code in l2-contracts (npm) | 2026-02-03T07:24:02Z | 2026-02-06T03:05:24Z |
| mal-2026-682 | Malicious code in kwp-analytics (npm) | 2026-02-03T07:22:08Z | 2026-02-06T03:05:24Z |
| mal-2026-681 | Malicious code in internallib_v782 (npm) | 2026-02-03T07:27:28Z | 2026-02-06T03:05:24Z |
| mal-2026-680 | Malicious code in frontend-js-state-web (npm) | 2026-02-03T07:27:10Z | 2026-02-06T03:05:24Z |
| mal-2026-674 | Malicious code in freedom-baileys (npm) | 2026-02-03T05:01:34Z | 2026-02-06T03:05:24Z |
| mal-2026-656 | Malicious code in jshint-groups (npm) | 2026-02-03T01:59:02Z | 2026-02-06T03:05:24Z |
| MAL-2026-769 | Malicious code in https-servers (npm) | 2026-02-05T17:28:15Z | 2026-02-06T03:05:24Z |
| MAL-2026-757 | Malicious code in internallib_v157 (npm) | 2026-02-05T02:24:51Z | 2026-02-06T03:05:24Z |
| MAL-2026-743 | Malicious code in internationalized (npm) | 2026-02-04T17:13:32Z | 2026-02-06T03:05:24Z |
| MAL-2026-736 | Malicious code in ggajsvjsg (npm) | 2026-02-04T09:46:59Z | 2026-02-06T03:05:24Z |
| MAL-2026-725 | Malicious code in json-mapping-source (npm) | 2026-02-04T05:25:15Z | 2026-02-06T03:05:24Z |
| MAL-2026-724 | Malicious code in https-emailjs (npm) | 2026-02-04T05:02:52Z | 2026-02-06T03:05:24Z |
| MAL-2026-723 | Malicious code in http-emailjs (npm) | 2026-02-04T05:02:52Z | 2026-02-06T03:05:24Z |
| MAL-2026-708 | Malicious code in incode-kyc-backend (npm) | 2026-02-03T21:30:33Z | 2026-02-06T03:05:24Z |
| MAL-2026-707 | Malicious code in js-unpack (npm) | 2026-02-03T17:41:26Z | 2026-02-06T03:05:24Z |
| MAL-2026-692 | Malicious code in graphrix (npm) | 2026-02-03T07:44:00Z | 2026-02-06T03:05:24Z |
| MAL-2026-683 | Malicious code in l2-contracts (npm) | 2026-02-03T07:24:02Z | 2026-02-06T03:05:24Z |
| MAL-2026-682 | Malicious code in kwp-analytics (npm) | 2026-02-03T07:22:08Z | 2026-02-06T03:05:24Z |
| MAL-2026-681 | Malicious code in internallib_v782 (npm) | 2026-02-03T07:27:28Z | 2026-02-06T03:05:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2026-0006 | OpenCTI: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen, Manipulation von Daten, Denial of Service | 2026-01-04T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2026-0003 | Vaadin: Schwachstelle ermöglicht Cross-Site Scripting | 2026-01-04T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2911 | Synacor Zimbra: Mehrere Schwachstellen | 2025-12-22T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2882 | Red Hat Enterprise Linux (audiofile): Schwachstelle ermöglicht Denial of Service | 2025-12-17T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2830 | Red Hat Enterprise Linux (libsoup): Schwachstelle ermöglicht Denial of Service | 2025-12-11T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2816 | ImageMagick: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-10T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2805 | TianoCore EDK2: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2736 | QT (Declarative module): Schwachstelle ermöglicht Denial of Service | 2025-12-03T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2729 | WebKitGTK: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2722 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2638 | Grub: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2593 | pgAdmin: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2566 | Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2433 | Google Cloud Platform (Envoy Proxy):: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-28T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2380 | Xen: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2110 | LibTiff: Schwachstelle ermöglicht Codeausführung | 2025-09-22T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2085 | Red Hat OpenShift Service Mesh: Mehrere Schwachstellen | 2025-09-17T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2034 | Erlang/OTP: Mehrere Schwachstellen | 2025-09-10T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2007 | Xen: Mehrere Schwachstellen | 2025-09-09T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-1965 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-09-03T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-1654 | libTIFF (Tiffmedian, Thumbnail): Mehrere Schwachstellen | 2025-07-27T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-1205 | Golang Go: Mehrere Schwachstellen | 2025-06-01T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0270 | cURL: Mehrere Schwachstellen | 2025-02-04T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0259 | Red Hat Satellite: Schwachstelle ermöglicht Denial of Service | 2025-02-04T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0131 | OpenSSL: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-20T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2023-1608 | Perl: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-06-29T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2840 | Exim: Schwachstelle ermöglicht Codeausführung | 2025-12-14T23:00:00.000+00:00 | 2026-01-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2495 | Django: Mehrere Schwachstellen ermöglichen Denial of Service und SQL-Injection | 2025-11-05T23:00:00.000+00:00 | 2026-01-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2436 | Xwayland und X.Org X11: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-10-28T23:00:00.000+00:00 | 2026-01-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2083 | Ruby: Schwachstelle ermöglicht Denial of Service | 2025-09-17T22:00:00.000+00:00 | 2026-01-04T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0052 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Ivanti Policy Secure | 2025-02-12T09:35:30.260596Z | 2025-02-12T09:35:30.260596Z |
| ncsc-2025-0051 | Kwetsbaarheden verholpen in Siemens producten | 2025-02-11T19:40:34.993264Z | 2025-02-11T19:40:34.993264Z |
| ncsc-2025-0050 | Kwetsbaarheden verholpen in Microsoft Office | 2025-02-11T19:19:24.863294Z | 2025-02-11T19:19:24.863294Z |
| ncsc-2025-0049 | Kwetsbaarheden verholpen in Microsoft Visual Studio | 2025-02-11T19:17:58.768578Z | 2025-02-11T19:17:58.768578Z |
| ncsc-2025-0048 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-02-11T19:17:03.555400Z | 2025-02-11T19:17:03.555400Z |
| ncsc-2025-0047 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-02-11T19:16:04.610648Z | 2025-02-11T19:16:04.610648Z |
| ncsc-2025-0046 | Kwetsbaarheid verholpen in Apple iOS en iPadOS | 2025-02-11T09:54:03.266145Z | 2025-02-11T09:54:03.266145Z |
| ncsc-2025-0045 | Kwetsbaarheden verholpen in SAP producten | 2025-02-11T09:08:48.427126Z | 2025-02-11T09:08:48.427126Z |
| ncsc-2025-0043 | Kwetsbaarheden verholpen in Cisco IOS, IOS XE en IOS XR Software | 2025-02-07T07:44:34.306225Z | 2025-02-11T06:53:00.177478Z |
| ncsc-2025-0041 | Kwetsbaarheden verholpen in F5 BIG-IP | 2025-02-07T07:38:11.981975Z | 2025-02-11T06:51:17.629249Z |
| ncsc-2025-0044 | Kwetsbaarheden verholpen in Cisco Identity Services Engine | 2025-02-07T07:50:13.796001Z | 2025-02-07T07:50:13.796001Z |
| ncsc-2025-0042 | Kwetsbaarheden verholpen in Cisco AsyncOS Software | 2025-02-07T07:41:10.612134Z | 2025-02-07T07:41:10.612134Z |
| ncsc-2025-0040 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2025-02-07T07:33:40.643635Z | 2025-02-07T07:33:40.643635Z |
| ncsc-2025-0039 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-02-04T09:13:08.342699Z | 2025-02-04T09:13:08.342699Z |
| ncsc-2025-0038 | Kwetsbaarheden verholpen in Zimbra Collaboration | 2025-02-04T09:10:55.525420Z | 2025-02-04T09:10:55.525420Z |
| ncsc-2025-0037 | Kwetsbaarheden verholpen in VMware Aria Operations | 2025-01-31T12:25:21.454904Z | 2025-01-31T12:25:21.454904Z |
| ncsc-2025-0036 | Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk | 2025-01-29T10:35:51.164484Z | 2025-01-29T10:35:51.164484Z |
| ncsc-2025-0035 | Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk | 2025-01-29T10:32:40.594073Z | 2025-01-29T10:32:40.594073Z |
| ncsc-2025-0034 | Kwetsbaarheden verholpen in Apple iPadOS en iOS | 2025-01-28T11:31:14.861619Z | 2025-01-28T11:31:14.861619Z |
| ncsc-2025-0033 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2025-01-28T10:43:20.128933Z | 2025-01-28T10:43:20.128933Z |
| ncsc-2025-0009 | Kwetsbaarheid verholpen in FortiNet FortiOS en FortiProxy | 2025-01-14T14:58:02.272504Z | 2025-01-28T10:42:03.747650Z |
| ncsc-2025-0032 | Kwetsbaarheden verholpen in Apple macOS | 2025-01-28T10:37:38.942515Z | 2025-01-28T10:37:38.942515Z |
| ncsc-2025-0031 | Kwetsbaarheid verholpen in Cisco Meeting Management | 2025-01-23T13:56:01.391387Z | 2025-01-23T13:56:01.391387Z |
| ncsc-2025-0030 | Kwetsbaarheid verholpen in Cisco BroadWorks | 2025-01-23T13:53:16.250734Z | 2025-01-23T13:53:16.250734Z |
| ncsc-2025-0029 | Kwetsbaarheid verholpen in SonicWall SMA1000 Appliance | 2025-01-23T13:50:32.719670Z | 2025-01-23T13:50:32.719670Z |
| ncsc-2025-0028 | Kwetsbaarheden verholpen in Oracle Analytics | 2025-01-22T13:36:58.196605Z | 2025-01-22T13:36:58.196605Z |
| ncsc-2025-0027 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2025-01-22T13:36:27.908718Z | 2025-01-22T13:36:27.908718Z |
| ncsc-2025-0026 | Kwetsbaarheden verholpen in Oracle JD Edwards | 2025-01-22T13:34:42.937250Z | 2025-01-22T13:34:42.937250Z |
| ncsc-2025-0025 | Kwetsbaarheden verholpen in Oracle Financial Services | 2025-01-22T13:33:00.723963Z | 2025-01-22T13:33:00.723963Z |
| ncsc-2025-0024 | Kwetsbaarheden verholpen in Oracle MySQL | 2025-01-22T13:32:27.142159Z | 2025-01-22T13:32:27.142159Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-203374 | SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices | 2023-03-14T00:00:00Z | 2024-04-09T00:00:00Z |
| ssa-128433 | SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 | 2024-04-09T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-885980 | SSA-885980: Multiple Vulnerabilities in Scalance W1750D | 2024-04-09T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-831302 | SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 | 2023-06-13T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-822518 | SSA-822518: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW Before V11.0.1 on RUGGEDCOM APE1808 Devices | 2024-04-09T00:00:00Z | 2024-12-10T00:00:00Z |
| SSA-794697 | SSA-794697: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP before V1.1 | 2023-06-13T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-730482 | SSA-730482: Denial of Service Vulnerability in SIMATIC WinCC | 2024-04-09T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-716164 | SSA-716164: Multiple Vulnerabilities in Scalance W1750D | 2024-02-13T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-556635 | SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0 | 2024-04-09T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-457702 | SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family | 2023-11-14T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-222019 | SSA-222019: X_T File Parsing Vulnerabilities in Parasolid | 2024-04-09T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-203374 | SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices | 2023-03-14T00:00:00Z | 2024-04-09T00:00:00Z |
| SSA-128433 | SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 | 2024-04-09T00:00:00Z | 2024-04-09T00:00:00Z |
| ssa-943925 | SSA-943925: Multiple Vulnerabilities in SINEC NMS before V2.0 SP1 | 2024-02-13T00:00:00Z | 2024-03-12T00:00:00Z |
| ssa-918992 | SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| ssa-770721 | SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| ssa-699386 | SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5 | 2023-11-14T00:00:00Z | 2024-03-12T00:00:00Z |
| ssa-693975 | SSA-693975: Denial-of-Service Vulnerability in the Web Server of Industrial Products | 2023-12-12T00:00:00Z | 2024-03-12T00:00:00Z |
| ssa-653855 | SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| ssa-576771 | SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| ssa-145196 | SSA-145196: Authorization Bypass Vulnerability in Siveillance Control | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| ssa-000072 | SSA-000072: Multiple File Parsing Vulnerabilities in Simcenter Femap | 2024-02-13T00:00:00Z | 2024-03-12T00:00:00Z |
| SSA-943925 | SSA-943925: Multiple Vulnerabilities in SINEC NMS before V2.0 SP1 | 2024-02-13T00:00:00Z | 2024-03-12T00:00:00Z |
| SSA-918992 | SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| SSA-792319 | SSA-792319: Missing Read Out Protection in SENTRON 7KM PAC3x20 Devices | 2024-03-12T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-770721 | SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| SSA-699386 | SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5 | 2023-11-14T00:00:00Z | 2024-03-12T00:00:00Z |
| SSA-693975 | SSA-693975: Denial-of-Service Vulnerability in the Web Server of Industrial Products | 2023-12-12T00:00:00Z | 2024-03-12T00:00:00Z |
| SSA-653855 | SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| SSA-576771 | SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 | 2024-03-12T00:00:00Z | 2024-03-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:4677 | Red Hat Security Advisory: OpenShift Container Platform 4.13.58 bug fix and security update | 2025-05-15T16:34:38+00:00 | 2026-02-19T14:52:15+00:00 |
| rhsa-2025:4666 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.7 container updates | 2025-05-07T16:17:54+00:00 | 2026-02-19T14:52:14+00:00 |
| rhsa-2025:4669 | Red Hat Security Advisory: osbuild-composer security update | 2025-05-07T14:59:09+00:00 | 2026-02-19T14:52:12+00:00 |
| rhsa-2025:4569 | Red Hat Security Advisory: osbuild-composer security update | 2025-05-06T16:43:52+00:00 | 2026-02-19T14:52:12+00:00 |
| rhsa-2025:4605 | Red Hat Security Advisory: multicluster Engine for Kubernetes 2.6.7 container updates | 2025-05-07T03:32:30+00:00 | 2026-02-19T14:52:09+00:00 |
| rhsa-2025:4553 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2025-05-06T14:59:30+00:00 | 2026-02-19T14:52:07+00:00 |
| rhsa-2025:4511 | Red Hat Security Advisory: RHODF-4.18-RHEL-9 security update | 2025-05-06T07:14:59+00:00 | 2026-02-19T14:52:06+00:00 |
| rhsa-2025:4502 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.8 container updates | 2025-05-06T06:29:57+00:00 | 2026-02-19T14:52:06+00:00 |
| rhsa-2025:4473 | Red Hat Security Advisory: multicluster Engine for Kubernetes 2.5.9 container updates | 2025-05-05T23:34:14+00:00 | 2026-02-19T14:52:04+00:00 |
| rhsa-2025:4462 | Red Hat Security Advisory: osbuild-composer security update | 2025-05-05T14:35:59+00:00 | 2026-02-19T14:52:02+00:00 |
| rhsa-2025:4427 | Red Hat Security Advisory: OpenShift Container Platform 4.18.12 bug fix and security update | 2025-05-09T04:31:09+00:00 | 2026-02-19T14:52:00+00:00 |
| rhsa-2025:4422 | Red Hat Security Advisory: OpenShift Container Platform 4.15.50 bug fix and security update | 2025-05-08T19:55:32+00:00 | 2026-02-19T14:51:59+00:00 |
| rhsa-2025:4409 | Red Hat Security Advisory: OpenShift Container Platform 4.12.76 bug fix and security update | 2025-05-08T19:54:33+00:00 | 2026-02-19T14:51:58+00:00 |
| rhsa-2025:4250 | Red Hat Security Advisory: RHSA: Submariner 0.19.4 - bug fix and enhancement update | 2025-04-28T16:10:25+00:00 | 2026-02-19T14:51:57+00:00 |
| rhsa-2025:4211 | Red Hat Security Advisory: OpenShift Container Platform 4.18.11 bug fix and security update | 2025-05-01T03:08:42+00:00 | 2026-02-19T14:51:55+00:00 |
| rhsa-2025:4204 | Red Hat Security Advisory: OpenShift Container Platform 4.17.27 bug fix and security update | 2025-04-30T03:47:47+00:00 | 2026-02-19T14:51:55+00:00 |
| rhsa-2025:4188 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.2 | 2025-04-24T13:21:19+00:00 | 2026-02-19T14:51:53+00:00 |
| rhsa-2025:4177 | Red Hat Security Advisory: OpenShift Container Platform 4.14.51 bug fix and security update | 2025-04-30T07:11:57+00:00 | 2026-02-19T14:51:53+00:00 |
| rhsa-2025:4171 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.3 | 2025-04-24T11:52:49+00:00 | 2026-02-19T14:51:51+00:00 |
| rhsa-2025:4019 | Red Hat Security Advisory: OpenShift Container Platform 4.18.10 bug fix and security update | 2025-04-22T23:52:01+00:00 | 2026-02-19T14:51:49+00:00 |
| rhsa-2025:4012 | Red Hat Security Advisory: OpenShift Container Platform 4.17.26 bug fix and security update | 2025-04-23T12:41:37+00:00 | 2026-02-19T14:51:49+00:00 |
| rhsa-2025:4008 | Red Hat Security Advisory: OpenShift Container Platform 4.16.39 bug fix and security update | 2025-04-23T05:51:53+00:00 | 2026-02-19T14:51:48+00:00 |
| rhsa-2025:4002 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.3 container image updates | 2025-04-17T22:09:36+00:00 | 2026-02-19T14:51:46+00:00 |
| rhsa-2025:3993 | Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.15.1-6 Update | 2025-04-17T14:42:51+00:00 | 2026-02-19T14:51:46+00:00 |
| rhsa-2025:3987 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.4 security updates | 2025-04-17T17:18:55+00:00 | 2026-02-19T14:51:46+00:00 |
| rhsa-2025:3959 | Red Hat Security Advisory: VolSync 0.11.2 security fixes and enhancements for RHEL 9 | 2025-04-16T21:10:52+00:00 | 2026-02-19T14:51:44+00:00 |
| rhsa-2025:3932 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.20.0 release | 2025-04-16T02:48:23+00:00 | 2026-02-19T14:51:44+00:00 |
| rhsa-2025:3930 | Red Hat Security Advisory: RHACS 4.7 security update | 2025-04-15T20:29:23+00:00 | 2026-02-19T14:51:43+00:00 |
| rhsa-2025:3929 | Red Hat Security Advisory: ACS 4.6 enhancement and security update | 2025-04-15T19:52:32+00:00 | 2026-02-19T14:51:42+00:00 |
| rhsa-2025:3928 | Red Hat Security Advisory: ACS 4.5 enhancement and security update | 2025-04-15T19:46:07+00:00 | 2026-02-19T14:51:42+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-203-02 | Lantronix Provisioning Manager | 2025-07-22T06:00:00.000000Z | 2025-07-22T06:00:00.000000Z |
| icsa-25-203-01 | DuraComm DP-10iN-100-MU | 2025-07-22T06:00:00.000000Z | 2025-07-22T06:00:00.000000Z |
| icsa-24-151-02 | Fuji Electric Monitouch V-SFT (Update A) | 2024-05-30T06:00:00.000000Z | 2025-07-18T06:00:00.000000Z |
| icsma-25-198-01 | Panoramic Corporation Digital Imaging Software | 2025-07-17T06:00:00.000000Z | 2025-07-17T06:00:00.000000Z |
| icsa-25-198-01 | Leviton AcquiSuite and Energy Monitoring Hub | 2025-07-17T06:00:00.000000Z | 2025-07-17T06:00:00.000000Z |
| icsa-24-191-05 | Johnson Controls Inc. Software House C●CURE 9000 (Update B) | 2024-07-09T06:00:00.000000Z | 2025-07-17T06:00:00.000000Z |
| icsa-25-196-03 | LITEON IC48A and IC80A EV Chargers | 2025-07-15T06:00:00.000000Z | 2025-07-15T06:00:00.000000Z |
| icsa-25-196-02 | ABB RMC-100 | 2025-07-15T06:00:00.000000Z | 2025-07-15T06:00:00.000000Z |
| icsa-25-191-09 | KUNBUS RevPi Webstatus | 2025-07-10T06:00:00.000000Z | 2025-07-10T06:00:00.000000Z |
| icsa-25-191-08 | Advantech iView | 2025-07-10T06:00:00.000000Z | 2025-07-10T06:00:00.000000Z |
| icsa-25-191-07 | Delta Electronics DTM Soft | 2025-07-10T06:00:00.000000Z | 2025-07-10T06:00:00.000000Z |
| icsa-25-135-19 | ECOVACS DEEBOT Vacuum and Base Station (Update A) | 2025-05-15T06:00:00.000000Z | 2025-07-10T06:00:00.000000Z |
| icsa-25-121-01 | KUNBUS GmbH Revolution Pi (Update A) | 2025-05-01T06:00:00.000000Z | 2025-07-10T06:00:00.000000Z |
| icsa-24-263-02 | IDEC Products (Update A) | 2024-09-19T06:00:00.000000Z | 2025-07-10T06:00:00.000000Z |
| icsa-25-105-03 | Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX | 2025-04-08T00:00:00.000000Z | 2025-07-10T00:00:00.000000Z |
| icsa-25-189-01 | Emerson ValveLink Products | 2025-07-08T06:00:00.000000Z | 2025-07-08T06:00:00.000000Z |
| icsa-25-203-06 | Schneider Electric EcoStruxture IT Data Center Expert | 2025-07-08T04:00:00.000000Z | 2025-07-08T04:00:00.000000Z |
| icsa-25-203-05 | Schneider Electric System Monitor Application | 2025-07-08T04:00:00.000000Z | 2025-07-08T04:00:00.000000Z |
| icsa-25-203-03 | Schneider Electric EcoStruxure | 2025-07-08T04:00:00.000000Z | 2025-07-08T04:00:00.000000Z |
| icsa-25-175-04 | Schneider Electric EVLink WallBox (Update A) | 2025-06-10T04:00:00.000000Z | 2025-07-08T04:00:00.000000Z |
| icsa-25-175-03 | Schneider Electric Modicon Controllers (Update A) | 2025-06-10T04:00:00.000000Z | 2025-07-08T04:00:00.000000Z |
| icsa-25-014-02 | Schneider Electric Vijeo Designer and EcoStruxureâ„¢ Machine Expert (Update A) | 2024-09-10T00:00:00.000000Z | 2025-07-08T04:00:00.000000Z |
| icsa-25-191-06 | Siemens SIPROTEC 5 | 2025-07-08T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-25-191-04 | Siemens SIMATIC CN 4100 | 2025-07-08T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-25-191-03 | Siemens TIA Administrator | 2025-07-08T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-25-191-02 | Siemens Solid Edge | 2025-07-08T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-25-191-01 | Siemens SINEC NMS | 2025-07-08T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-25-168-01 | Siemens Mendix Studio Pro | 2025-06-12T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-24-256-15 | Siemens Industrial Products | 2024-09-10T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-20-105-08 | Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D) | 2020-04-14T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-nxos-bshacepe-bapehsx7 | Cisco NX-OS Software Bash Arbitrary Code Execution and Privilege Escalation Vulnerabilities | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-nxos-bshacepe-bApeHSx7 | Cisco NX-OS Software Bash Arbitrary Code Execution and Privilege Escalation Vulnerabilities | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-capic-priv-esc-uyqjjnuu | Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-capic-priv-esc-uYQJjnuU | Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-apic-cousmo-ubpbygbq | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-apic-cousmo-uBpBYGbq | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-curl-libcurl-d9ds39cv | cURL and libcurl Vulnerability Affecting Cisco Products: October 2023 | 2023-10-12T16:00:00+00:00 | 2024-08-27T18:06:16+00:00 |
| cisco-sa-curl-libcurl-D9ds39cV | cURL and libcurl Vulnerability Affecting Cisco Products: October 2023 | 2023-10-12T16:00:00+00:00 | 2024-08-27T18:06:16+00:00 |
| cisco-sa-ise-rest-5bpkrntz | Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities | 2024-08-21T16:00:00+00:00 | 2024-08-22T15:15:53+00:00 |
| cisco-sa-ise-rest-5bPKrNtZ | Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities | 2024-08-21T16:00:00+00:00 | 2024-08-22T15:15:53+00:00 |
| cisco-sa-ise-csrf-y4zuz5rj | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-08-21T16:00:00+00:00 |
| cisco-sa-ise-csrf-y4ZUz5Rj | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-08-21T16:00:00+00:00 |
| cisco-sa-cucm-dos-kkhq43we | Cisco Unified Communications Manager Denial of Service Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-08-21T16:00:00+00:00 |
| cisco-sa-cucm-dos-kkHq43We | Cisco Unified Communications Manager Denial of Service Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-08-21T16:00:00+00:00 |
| cisco-sa-wsa-bypass-vxvqwzsj | Cisco Secure Web Appliance Content Encoding Filter Bypass Vulnerability | 2023-08-02T16:00:00+00:00 | 2024-08-14T14:27:30+00:00 |
| cisco-sa-wsa-bypass-vXvqwzsj | Cisco Secure Web Appliance Content Encoding Filter Bypass Vulnerability | 2023-08-02T16:00:00+00:00 | 2024-08-14T14:27:30+00:00 |
| cisco-sa-spa-http-vulns-rjzmx2xz | Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities | 2024-08-07T16:00:00+00:00 | 2024-08-07T16:00:00+00:00 |
| cisco-sa-spa-http-vulns-RJZmX2Xz | Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities | 2024-08-07T16:00:00+00:00 | 2024-08-07T16:00:00+00:00 |
| cisco-sa-ise-xss-v2bm9jcy | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | 2024-08-07T16:00:00+00:00 | 2024-08-07T16:00:00+00:00 |
| cisco-sa-ise-xss-V2bm9JCY | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | 2024-08-07T16:00:00+00:00 | 2024-08-07T16:00:00+00:00 |
| cisco-sa-iosxr-ipxe-sigbypass-pymfyqgb | Cisco IOS XR Software iPXE Boot Signature Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2024-08-07T15:55:33+00:00 |
| cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB | Cisco IOS XR Software iPXE Boot Signature Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2024-08-07T15:55:33+00:00 |
| cisco-sa-cssm-auth-slw3uhuy | Cisco Smart Software Manager On-Prem Password Change Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-08-07T14:54:52+00:00 |
| cisco-sa-webex-app-zjnm8x8j | Cisco Webex App Vulnerabilities | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-webex-app-ZjNm8X8j | Cisco Webex App Vulnerabilities | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-sb-rv34x-rce-7pqfu2e | Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-sb-rv34x-rce-7pqFU2e | Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-ise-file-upload-krw2txa9 | Cisco Identity Services Engine Arbitrary File Upload Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-ise-file-upload-krW2TxA9 | Cisco Identity Services Engine Arbitrary File Upload Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| cisco-sa-inode-static-key-vuvceynn | Cisco Intelligent Node Software Static Key Vulnerability | 2024-07-17T16:00:00+00:00 | 2024-07-17T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-45287 | Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel | 2023-12-01T08:00:00.000Z | 2026-02-18T02:50:19.000Z |
| msrc_cve-2025-22064 | netfilter: nf_tables: don't unregister hook when table is dormant | 2025-04-02T00:00:00.000Z | 2026-02-18T02:50:16.000Z |
| msrc_cve-2022-46392 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller. | 2022-12-02T00:00:00.000Z | 2026-02-18T02:50:10.000Z |
| msrc_cve-2025-61594 | URI Credential Leakage Bypass over CVE-2025-27221 | 2025-12-02T00:00:00.000Z | 2026-02-18T02:50:06.000Z |
| msrc_cve-2024-11187 | Many records in the additional section cause CPU exhaustion | 2025-01-02T00:00:00.000Z | 2026-02-18T02:50:00.000Z |
| msrc_cve-2025-38219 | f2fs: prevent kernel warning due to negative i_nlink from corrupted image | 2025-07-02T00:00:00.000Z | 2026-02-18T02:49:55.000Z |
| msrc_cve-2022-41724 | Panic on large handshake records in crypto/tls | 2023-02-01T00:00:00.000Z | 2026-02-18T02:49:54.000Z |
| msrc_cve-2025-61100 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions. | 2025-10-02T00:00:00.000Z | 2026-02-18T02:49:53.000Z |
| msrc_cve-2025-22042 | ksmbd: add bounds check for create lease context | 2025-04-02T00:00:00.000Z | 2026-02-18T02:49:43.000Z |
| msrc_cve-2024-42075 | bpf: Fix remap of arena. | 2024-07-01T07:00:00.000Z | 2026-02-18T02:49:40.000Z |
| msrc_cve-2024-2757 | PHP mb_encode_mimeheader runs endlessly for some inputs | 2024-04-02T07:00:00.000Z | 2026-02-18T02:49:33.000Z |
| msrc_cve-2024-57255 | An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. | 2025-02-02T00:00:00.000Z | 2026-02-18T02:49:31.000Z |
| msrc_cve-2025-37800 | driver core: fix potential NULL pointer dereference in dev_uevent() | 2025-05-02T00:00:00.000Z | 2026-02-18T02:49:13.000Z |
| msrc_cve-2024-1874 | Command injection via array-ish $command parameter of proc_open() | 2024-04-02T07:00:00.000Z | 2026-02-18T02:49:02.000Z |
| msrc_cve-2025-61101 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2026-02-18T02:48:59.000Z |
| msrc_cve-2024-45339 | Vulnerability when creating log files in github.com/golang/glog | 2025-01-02T00:00:00.000Z | 2026-02-18T02:48:57.000Z |
| msrc_cve-2024-50602 | An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. | 2024-10-01T07:00:00.000Z | 2026-02-18T02:48:54.000Z |
| msrc_cve-2025-38206 | exfat: fix double free in delayed_free | 2025-07-02T00:00:00.000Z | 2026-02-18T02:48:53.000Z |
| msrc_cve-2021-28210 | An unlimited recursion in DxeCore in EDK II. | 2021-06-02T00:00:00.000Z | 2026-02-18T02:48:45.000Z |
| msrc_cve-2025-69277 | libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. | 2025-12-02T00:00:00.000Z | 2026-02-18T02:48:42.000Z |
| msrc_cve-2025-39862 | wifi: mt76: mt7915: fix list corruption after hardware restart | 2025-09-02T00:00:00.000Z | 2026-02-18T02:48:26.000Z |
| msrc_cve-2025-37997 | netfilter: ipset: fix region locking in hash types | 2025-05-02T00:00:00.000Z | 2026-02-18T02:48:25.000Z |
| msrc_cve-2025-38185 | atm: atmtcp: Free invalid length skb in atmtcp_c_send(). | 2025-07-02T00:00:00.000Z | 2026-02-18T02:48:23.000Z |
| msrc_cve-2024-6505 | Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss | 2024-07-01T07:00:00.000Z | 2026-02-18T02:48:16.000Z |
| msrc_cve-2023-6683 | Qemu: vnc: null pointer dereference in qemu_clipboard_request() | 2024-01-01T08:00:00.000Z | 2026-02-18T02:48:05.000Z |
| msrc_cve-2024-42225 | wifi: mt76: replace skb_put with skb_put_zero | 2024-07-01T07:00:00.000Z | 2026-02-18T02:47:59.000Z |
| msrc_cve-2025-23141 | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 2025-05-02T00:00:00.000Z | 2026-02-18T02:47:51.000Z |
| msrc_cve-2025-11961 | OOBR and OOBW in pcap_ether_aton() in libpcap | 2025-12-02T00:00:00.000Z | 2026-02-18T02:47:51.000Z |
| msrc_cve-2025-38222 | ext4: inline: fix len overflow in ext4_prepare_inline_data | 2025-07-02T00:00:00.000Z | 2026-02-18T02:47:47.000Z |
| msrc_cve-2025-39851 | vxlan: Fix NPD when refreshing an FDB entry with a nexthop object | 2025-09-02T00:00:00.000Z | 2026-02-18T02:47:29.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15754-1 | ansible-core-2.19-2.19.4-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15753-1 | ansible-12-12.2.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15752-1 | act-0.2.82-2.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:20073-1 | Security update for alloy | 2025-11-20T17:26:16Z | 2025-11-20T17:26:16Z |
| opensuse-su-2025-20073-1 | Security update for alloy | 2025-11-20T17:26:16Z | 2025-11-20T17:26:16Z |
| opensuse-su-2025:20072-1 | Security update for runc | 2025-11-20T16:44:20Z | 2025-11-20T16:44:20Z |
| opensuse-su-2025-20072-1 | Security update for runc | 2025-11-20T16:44:20Z | 2025-11-20T16:44:20Z |
| opensuse-su-2025:20068-1 | Security update for poppler | 2025-11-20T13:33:03Z | 2025-11-20T13:33:03Z |
| opensuse-su-2025-20068-1 | Security update for poppler | 2025-11-20T13:33:03Z | 2025-11-20T13:33:03Z |
| opensuse-su-2025:20076-1 | Security update for chromium | 2025-11-20T10:12:51Z | 2025-11-20T10:12:51Z |
| opensuse-su-2025-20076-1 | Security update for chromium | 2025-11-20T10:12:51Z | 2025-11-20T10:12:51Z |
| opensuse-su-2025:15751-1 | libipa_hbac-devel-2.11.1-2.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:15750-1 | python313-3.13.9-2.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:15749-1 | grub2-2.12-67.1 on GA media | 2025-11-20T00:00:00Z | 2025-11-20T00:00:00Z |
| opensuse-su-2025:20065-1 | Security update for MozillaFirefox | 2025-11-19T16:45:48Z | 2025-11-19T16:45:48Z |
| opensuse-su-2025-20065-1 | Security update for MozillaFirefox | 2025-11-19T16:45:48Z | 2025-11-19T16:45:48Z |
| opensuse-su-2025:20059-1 | Security update for ongres-scram | 2025-11-19T10:33:44Z | 2025-11-19T10:33:44Z |
| opensuse-su-2025-20059-1 | Security update for ongres-scram | 2025-11-19T10:33:44Z | 2025-11-19T10:33:44Z |
| opensuse-su-2025:20056-1 | Security update for openexr | 2025-11-19T09:45:59Z | 2025-11-19T09:45:59Z |
| opensuse-su-2025-20056-1 | Security update for openexr | 2025-11-19T09:45:59Z | 2025-11-19T09:45:59Z |
| opensuse-su-2025:20050-1 | Security update for libxslt | 2025-11-19T09:40:24Z | 2025-11-19T09:40:24Z |
| opensuse-su-2025:20049-1 | Security update for tiff | 2025-11-19T09:40:24Z | 2025-11-19T09:40:24Z |
| opensuse-su-2025-20050-1 | Security update for libxslt | 2025-11-19T09:40:24Z | 2025-11-19T09:40:24Z |
| opensuse-su-2025-20049-1 | Security update for tiff | 2025-11-19T09:40:24Z | 2025-11-19T09:40:24Z |
| opensuse-su-2025:20055-1 | Security update for expat | 2025-11-19T09:37:50Z | 2025-11-19T09:37:50Z |
| opensuse-su-2025-20055-1 | Security update for expat | 2025-11-19T09:37:50Z | 2025-11-19T09:37:50Z |
| opensuse-su-2025:20074-1 | Security update for certbot | 2025-11-19T09:30:46Z | 2025-11-19T09:30:46Z |
| opensuse-su-2025-20074-1 | Security update for certbot | 2025-11-19T09:30:46Z | 2025-11-19T09:30:46Z |
| opensuse-su-2025:15748-1 | python314-3.14.0-3.1 on GA media | 2025-11-19T00:00:00Z | 2025-11-19T00:00:00Z |
| opensuse-su-2025:15747-1 | libeverest-3.6.5-1.1 on GA media | 2025-11-19T00:00:00Z | 2025-11-19T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-352 | Heap-buffer-overflow in __parse_options | 2024-04-30T00:04:28.080620Z | 2025-03-19T14:25:45.717598Z |
| osv-2023-806 | Heap-buffer-overflow in H5F__accum_free | 2023-09-08T14:00:12.468140Z | 2025-03-18T00:47:11.270073Z |
| osv-2023-1223 | Heap-buffer-overflow in H5O__shared_decode | 2023-11-27T13:01:18.977198Z | 2025-03-18T00:47:06.884278Z |
| osv-2023-1091 | Heap-buffer-overflow in H5F_addr_decode | 2023-10-31T13:01:22.289748Z | 2025-03-18T00:45:36.194874Z |
| osv-2024-390 | Heap-buffer-overflow in H5O__cache_chk_serialize | 2024-04-30T00:14:19.116132Z | 2025-03-18T00:44:44.672358Z |
| osv-2023-754 | Heap-buffer-overflow in H5O__chunk_protect | 2023-08-28T14:00:10.026707Z | 2025-03-18T00:43:25.726885Z |
| osv-2023-471 | Heap-buffer-overflow in H5FS__sinfo_serialize_node_cb | 2023-06-09T14:00:54.620201Z | 2025-03-18T00:43:10.716259Z |
| osv-2023-722 | Heap-buffer-overflow in H5MM_memcpy | 2023-08-22T14:03:04.118428Z | 2025-03-18T00:42:21.984142Z |
| osv-2024-1427 | Heap-buffer-overflow in extract_mediaip | 2025-01-28T00:14:30.487391Z | 2025-03-18T00:41:33.426387Z |
| osv-2024-1249 | Heap-buffer-overflow in extract_ice_option | 2024-10-30T00:15:55.709182Z | 2025-03-18T00:40:00.171776Z |
| osv-2025-119 | Heap-buffer-overflow in snmp_config_when | 2025-02-14T00:15:08.375253Z | 2025-03-18T00:37:43.437021Z |
| osv-2025-161 | Heap-buffer-overflow in se_add_pair | 2025-02-24T00:15:33.662895Z | 2025-03-18T00:37:12.676515Z |
| osv-2025-113 | Heap-buffer-overflow in snmp_log_options | 2025-02-14T00:01:45.812592Z | 2025-03-18T00:35:43.690001Z |
| osv-2023-1161 | Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch | 2023-11-14T13:03:13.962614Z | 2025-03-18T00:34:06.623648Z |
| osv-2025-132 | Heap-use-after-free in netsnmp_hex_to_binary | 2025-02-17T00:01:01.920904Z | 2025-03-18T00:33:26.648884Z |
| osv-2024-1216 | Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage | 2024-10-13T00:11:43.323181Z | 2025-03-18T00:32:42.736858Z |
| osv-2025-131 | Heap-buffer-overflow in vips_foreign_save_heif_write_block | 2025-02-16T00:13:44.282887Z | 2025-03-18T00:32:21.245932Z |
| osv-2025-162 | Heap-buffer-overflow in snmp_in_options | 2025-02-24T00:15:40.967551Z | 2025-03-18T00:30:24.116747Z |
| osv-2024-1209 | Heap-use-after-free in xmlValidateOneElement | 2024-10-11T00:15:43.610812Z | 2025-03-18T00:30:11.577855Z |
| osv-2025-54 | UNKNOWN READ in Assimp::SceneCombiner::CopyScene | 2025-01-22T00:15:23.827419Z | 2025-03-18T00:29:47.108675Z |
| osv-2025-133 | Stack-buffer-overflow in se_read_conf | 2025-02-17T00:02:18.986364Z | 2025-03-18T00:27:33.917908Z |
| osv-2024-1071 | Use-of-uninitialized-value in Poco::Dynamic::Var::~Var | 2024-09-15T00:06:58.342742Z | 2025-03-18T00:25:32.915201Z |
| osv-2024-1322 | Security exception in com.alibaba.fastjson2.JSONReader.readObject | 2024-11-18T00:00:16.618504Z | 2025-03-18T00:24:17.881614Z |
| osv-2025-148 | Heap-buffer-overflow in setup_engineID | 2025-02-23T00:00:36.951152Z | 2025-03-18T00:22:22.817245Z |
| osv-2025-215 | Security exception in graphql.parser.GraphqlAntlrToLanguage.createType | 2025-03-18T00:09:36.655072Z | 2025-03-18T00:09:36.655425Z |
| osv-2022-573 | Heap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValue | 2022-07-13T00:00:07.763765Z | 2025-03-12T17:15:50.141849Z |
| osv-2025-190 | Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame | 2025-03-11T00:04:32.361664Z | 2025-03-11T00:04:32.362119Z |
| osv-2024-831 | Heap-buffer-overflow in jv_parse | 2024-08-16T00:03:12.871175Z | 2025-03-07T14:24:40.166702Z |
| osv-2024-919 | Heap-buffer-overflow in validate_relpath | 2024-08-16T00:09:34.461792Z | 2025-03-06T14:20:56.754046Z |
| osv-2024-1312 | Heap-buffer-overflow in jv_string_vfmt | 2024-11-15T00:16:08.928897Z | 2025-03-05T14:20:12.622041Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2022-0092 | `rmp-serde` `Raw` and `RawRef` unsound | 2022-04-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0090 | `libsqlite3-sys` via C SQLite CVE-2022-35737 | 2022-08-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0082 | Improper validation of Windows paths could lead to directory traversal attack | 2022-01-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0079 | ELF header parsing library doesn't check for valid offset | 2022-10-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0078 | Use-after-free due to a lifetime error in `Vec::into_iter()` | 2022-01-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0074 | Force cast a &Vec<T> to &[T] | 2022-12-02T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0072 | Location header incorporates user input, allowing open redirect | 2022-12-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0070 | Unsound API in `secp256k1` allows use-after-free and invalid deallocation from safe code | 2022-11-30T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0069 | Improper validation of Windows paths could lead to directory traversal attack | 2022-11-30T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0067 | Invalid use of `mem::uninitialized` causes `use-of-uninitialized-value` | 2022-10-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0065 | X.509 Email Address Variable Length Buffer Overflow | 2022-11-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0064 | X.509 Email Address 4-byte Buffer Overflow | 2022-11-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0063 | Multiple vulnerabilities resulting in out-of-bounds writes | 2022-09-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0062 | matrix-sdk 0.6.0 logs access tokens | 2022-10-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0059 | Using a Custom Cipher with `NID_undef` may lead to NULL encryption | 2022-10-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0055 | No default limit put on request bodies | 2022-08-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0054 | wee_alloc is Unmaintained | 2022-05-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0052 | `os_socketaddr` invalidly assumes the memory layout of std::net::SocketAddr | 2022-08-26T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0051 | Memory corruption in liblz4 | 2022-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0049 | Use after free in MacOS / iOS implementation | 2022-08-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0047 | Post-Quantum Signature scheme Rainbow level I parametersets broken | 2022-02-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0046 | Out-of-bounds read when opening multiple column families with TTL | 2022-05-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0045 | Post-Quantum Key Encapsulation Mechanism SIKE broken | 2022-07-30T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0043 | Improper validation of Windows paths could lead to directory traversal attack | 2022-01-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0035 | Unbounded memory allocation based on untrusted length | 2022-08-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0033 | Heap memory corruption with RSA private key operation | 2022-07-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0032 | AES OCB fails to encrypt some bytes | 2022-07-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0029 | `MsQueue` `push`/`pop` use the wrong orderings | 2022-06-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0028 | Use after free in Neon external buffers | 2022-05-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2022-0027 | `OCSP_basic_verify` may incorrectly verify the response signing certificate | 2022-05-03T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mastodon-2022-2166 | Improper Restriction of Excessive Authentication Attempts in mastodon/mastodon | 2025-11-06T15:08:22.357Z | 2025-11-06T15:44:17.098Z |
| bit-zookeeper-2025-58457 | Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands | 2025-09-26T08:51:26.070Z | 2025-11-06T13:25:46.476Z |
| bit-wildfly-2021-3644 | 2024-03-06T11:08:38.390Z | 2025-11-06T13:25:46.476Z | |
| bit-vault-2024-6468 | Vault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior | 2024-07-17T07:39:35.824Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 2025-10-16T09:19:55.260Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-48367 | Redis DoS Vulnerability due to bad connection error handling | 2025-10-16T12:08:13.783Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 2025-10-08T08:52:39.220Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 2025-10-08T08:52:37.720Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | 2025-05-31T06:02:22.962Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2024-31449 | Lua library commands may lead to stack overflow and RCE in Redis | 2024-10-09T16:44:28.833Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2024-31228 | Denial-of-service due to unbounded pattern matching in Redis | 2024-10-09T16:44:40.936Z | 2025-11-06T13:25:46.476Z |
| bit-valkey-2024-31227 | Denial-of-service due to malformed ACL selectors in Redis | 2024-10-09T16:44:53.016Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-61795 | Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS | 2025-11-06T13:00:35.478Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-55754 | Apache Tomcat: console manipulation via escape sequences in log messages | 2025-11-06T13:00:33.572Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-55668 | Apache Tomcat: session fixation via rewrite valve | 2025-08-18T08:14:21.163Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-53506 | Apache Tomcat: DoS via excessive h2 streams at connection start | 2025-07-16T08:19:04.361Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-52520 | Apache Tomcat: DoS via integer overflow in multipart file upload | 2025-07-16T08:19:00.271Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-52434 | Apache Tomcat: APR/Native Connector crash leading to DoS | 2025-07-16T08:18:56.172Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-49125 | Apache Tomcat: Security constraint bypass for pre/post-resources | 2025-07-10T10:47:18.953Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-49124 | Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows | 2025-06-20T06:04:24.795Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-48989 | Apache Tomcat: h2 DoS - Made You Reset | 2025-08-18T08:14:11.138Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-48988 | Apache Tomcat: FileUpload large number of parts with headers DoS | 2025-07-10T10:47:06.961Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-46701 | Apache Tomcat: Security constraint bypass for CGI scripts | 2025-07-10T10:47:00.568Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-31651 | Apache Tomcat: Bypass of rules in Rewrite Valve | 2025-07-10T10:46:54.240Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-31650 | Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame | 2025-04-30T05:56:04.703Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2025-24813 | Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT | 2025-07-10T10:46:47.051Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2024-56337 | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete | 2025-07-10T10:46:39.151Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2024-54677 | Apache Tomcat: DoS in examples web application | 2025-07-10T10:46:30.955Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2024-52317 | Apache Tomcat: Request/response mix-up with HTTP/2 | 2024-11-20T07:20:06.896Z | 2025-11-06T13:25:46.476Z |
| bit-tomcat-2024-52316 | Apache Tomcat: Authentication bypass when using Jakarta Authentication API | 2025-07-10T10:46:05.150Z | 2025-11-06T13:25:46.476Z |
| ID | Description | Updated |
|---|---|---|
| var-200704-0220 | Buffer overflow in natd in network_cmds in Apple Mac OS X 10.3.9 through 10.4.9, when Int… | 2024-07-23T21:33:23.970000Z |
| var-200810-0141 | Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for c… | 2024-07-23T21:33:22.791000Z |
| var-201203-0199 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2024-07-23T21:32:49.621000Z |
| var-201210-0179 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:32:41.649000Z |
| var-200603-0274 | FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when cr… | 2024-07-23T21:32:41.957000Z |
| var-202105-1428 | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi… | 2024-07-23T21:32:40.302000Z |
| var-202004-0530 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean e… | 2024-07-23T21:32:40.951000Z |
| var-201507-0303 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlie… | 2024-07-23T21:32:40.217000Z |
| var-201208-0141 | Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in … | 2024-07-23T21:32:40.141000Z |
| var-200904-0813 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.1… | 2024-07-23T21:32:40.678000Z |
| var-201203-0181 | Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows … | 2024-07-23T21:32:39.897000Z |
| var-202102-1092 | An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_a… | 2024-07-23T21:32:38.477000Z |
| var-201605-0491 | The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, … | 2024-07-23T21:31:34.358000Z |
| var-201207-0279 | ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x bef… | 2024-07-23T21:31:34.437000Z |
| var-201006-1149 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-07-23T21:31:33.583000Z |
| var-201711-0474 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T21:31:29.650000Z |
| var-201408-0081 | The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows m… | 2024-07-23T21:31:18.574000Z |
| var-200106-0149 | Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows rem… | 2024-07-23T21:31:18.052000Z |
| var-202101-0218 | A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered i… | 2024-07-23T21:31:17.324000Z |
| var-200609-1341 | The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does no… | 2024-07-23T21:31:15.642000Z |
| var-202109-1900 | An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be explo… | 2024-07-23T21:31:14.809000Z |
| var-201906-1176 | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragme… | 2024-07-23T21:31:12.688000Z |
| var-201304-0062 | Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, T… | 2024-07-23T21:31:12.868000Z |
| var-201111-0207 | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64… | 2024-07-23T21:30:39.002000Z |
| var-200107-0175 | GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP re… | 2024-07-23T21:30:38.108000Z |
| var-200703-0027 | Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files … | 2024-07-23T21:30:34.312000Z |
| var-201912-0624 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:30:33.534000Z |
| var-200609-1325 | Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted … | 2024-07-23T21:30:33.425000Z |
| var-201806-1444 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2024-07-23T21:30:32.366000Z |
| var-201408-0089 | Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.… | 2024-07-23T21:30:26.317000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000044 | JINS MEME CORE uses a hard-coded cryptographic key | 2023-05-08T15:13+09:00 | 2024-06-13T16:19+09:00 |
| jvndb-2023-000042 | WordPress Plugin "Newsletter" vulnerable to cross-site scripting | 2023-05-09T14:42+09:00 | 2024-06-13T16:14+09:00 |
| jvndb-2022-000068 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to information disclosure | 2022-09-05T15:22+09:00 | 2024-06-13T16:00+09:00 |
| jvndb-2022-002448 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security agents for Windows | 2022-10-11T17:02+09:00 | 2024-06-13T14:30+09:00 |
| jvndb-2022-002544 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-10-20T16:18+09:00 | 2024-06-13T13:58+09:00 |
| jvndb-2022-000067 | Installer of Ricoh Device Software Manager may insecurely load Dynamic Link Libraries | 2022-08-29T15:57+09:00 | 2024-06-13T13:53+09:00 |
| jvndb-2022-000070 | Movable Type plugin A-Form vulnerable to cross-site scripting | 2022-09-09T15:01+09:00 | 2024-06-13T13:49+09:00 |
| jvndb-2022-000069 | PowerCMS XMLRPC API vulnerable to command injection | 2022-09-02T15:49+09:00 | 2024-06-13T11:44+09:00 |
| jvndb-2022-002367 | OpenAM (OpenAM Consortium Edition) vulnerable to open redirect | 2022-09-16T15:30+09:00 | 2024-06-13T11:39+09:00 |
| jvndb-2022-000071 | Multiple vulnerabilities in Trend Micro Apex One and Trend Micro Apex One as a Service | 2022-09-14T18:15+09:00 | 2024-06-13T11:34+09:00 |
| jvndb-2022-000073 | Multiple vulnerabilities in EC-CUBE | 2022-09-15T16:30+09:00 | 2024-06-13T11:09+09:00 |
| jvndb-2022-000072 | EC-CUBE plugin "Product Image Bulk Upload Plugin" vulnerable to insufficient verification in uploading files | 2022-09-15T16:13+09:00 | 2024-06-13T11:03+09:00 |
| jvndb-2023-000015 | Multiple vulnerabilities in PLANEX COMMUNICATIONS Network Camera CS-WMV02G | 2023-02-13T14:48+09:00 | 2024-06-12T17:03+09:00 |
| jvndb-2022-002537 | Stack-based buffer overflow vulnerability in Yokogawa Test & Measurement WTViewerE | 2022-10-19T16:23+09:00 | 2024-06-12T16:54+09:00 |
| jvndb-2022-000081 | Lemon8 App fails to restrict access permissions | 2022-10-19T14:08+09:00 | 2024-06-12T16:39+09:00 |
| jvndb-2024-000062 | Denial-of-service (DoS) vulnerability in IPCOM WAF function | 2024-06-12T15:03+09:00 | 2024-06-12T15:03+09:00 |
| jvndb-2022-000075 | IPFire WebUI vulnerable to cross-site scripting | 2022-10-06T13:05+09:00 | 2024-06-12T14:28+09:00 |
| jvndb-2023-000013 | Ichiran App vulnerable to improper server certificate verification | 2023-02-06T14:31+09:00 | 2024-06-12T14:25+09:00 |
| jvndb-2022-000074 | BookStack vulnerable to cross-site scripting | 2022-09-30T14:48+09:00 | 2024-06-12T14:07+09:00 |
| jvndb-2022-000077 | The installer of Sony Content Transfer may insecurely load Dynamic Link Libraries | 2022-10-11T15:08+09:00 | 2024-06-12T12:12+09:00 |
| jvndb-2022-000076 | Growi vulnerable to improper access control | 2022-10-07T14:30+09:00 | 2024-06-12T12:04+09:00 |
| jvndb-2023-000017 | Improper restriction of XML external entity reference (XXE) vulnerability in tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools | 2023-02-14T17:00+09:00 | 2024-06-12T11:15+09:00 |
| jvndb-2023-000012 | Vulnerability in Driver Distributor where passwords are stored in a recoverable format | 2023-01-31T14:14+09:00 | 2024-06-12T11:07+09:00 |
| jvndb-2023-000011 | SUSHIRO App for Android outputs sensitive information to the log file | 2023-01-31T14:10+09:00 | 2024-06-11T17:35+09:00 |
| jvndb-2023-001269 | File and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center | 2023-03-01T16:59+09:00 | 2024-06-11T16:42+09:00 |
| jvndb-2023-000014 | NEC PC Settings Tool vulnerable to missing authentication for critical function | 2023-02-10T14:43+09:00 | 2024-06-10T18:13+09:00 |
| jvndb-2023-000019 | Multiple cross-site scripting vulnerabilities in EC-CUBE | 2023-02-28T16:38+09:00 | 2024-06-10T17:28+09:00 |
| jvndb-2023-001212 | Multiple vulnerabilities in JTEKT ELECTRONICS Screen Creator Advance 2 | 2023-02-08T12:46+09:00 | 2024-06-10T17:25+09:00 |
| jvndb-2023-000018 | Multiple cross-site scripting vulnerabilities in SHIRASAGI | 2023-02-22T15:16+09:00 | 2024-06-10T17:18+09:00 |
| jvndb-2024-000058 | WordPress Plugin "Music Store - WordPress eCommerce" vulnerable to SQL injection | 2024-06-07T15:24+09:00 | 2024-06-10T17:08+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4511-1 | Security update for rsync | 2025-12-23T12:14:35Z | 2025-12-23T12:14:35Z |
| suse-su-2025:4507-1 | Security update for the Linux Kernel | 2025-12-22T16:46:54Z | 2025-12-22T16:46:54Z |
| suse-su-2025:4506-1 | Security update for the Linux Kernel | 2025-12-22T16:39:00Z | 2025-12-22T16:39:00Z |
| suse-su-2025:4505-1 | Security update for the Linux Kernel | 2025-12-22T16:35:13Z | 2025-12-22T16:35:13Z |
| suse-su-2025:4504-1 | Security update for glib2 | 2025-12-22T16:30:38Z | 2025-12-22T16:30:38Z |
| suse-su-2026:20008-1 | Security update for qemu | 2025-12-22T15:42:55Z | 2025-12-22T15:42:55Z |
| suse-su-2026:20007-1 | Security update for python-tornado6 | 2025-12-22T13:31:07Z | 2025-12-22T13:31:07Z |
| suse-su-2025:4502-1 | Security update for mariadb | 2025-12-22T11:28:30Z | 2025-12-22T11:28:30Z |
| suse-su-2026:20018-1 | Security update for mariadb | 2025-12-22T11:13:12Z | 2025-12-22T11:13:12Z |
| suse-su-2026:20016-1 | Security update for fontforge | 2025-12-22T10:05:05Z | 2025-12-22T10:05:05Z |
| suse-su-2025:4501-1 | Security update for taglib | 2025-12-19T17:00:20Z | 2025-12-19T17:00:20Z |
| suse-su-2026:20015-1 | Security update for the Linux Kernel | 2025-12-19T16:46:47Z | 2025-12-19T16:46:47Z |
| suse-su-2026:20012-1 | Security update for the Linux Kernel | 2025-12-19T16:46:47Z | 2025-12-19T16:46:47Z |
| suse-su-2026:20021-1 | Security update for the Linux Kernel | 2025-12-19T16:19:41Z | 2025-12-19T16:19:41Z |
| suse-su-2025:4494-1 | Security update for libpng16 | 2025-12-19T13:14:13Z | 2025-12-19T13:14:13Z |
| suse-su-2025:4493-1 | Security update for mariadb | 2025-12-19T13:01:17Z | 2025-12-19T13:01:17Z |
| suse-su-2025:4491-1 | Security update for mariadb | 2025-12-19T11:40:47Z | 2025-12-19T11:40:47Z |
| suse-su-2025:4490-1 | Security update for xen | 2025-12-19T11:17:12Z | 2025-12-19T11:17:12Z |
| suse-su-2025:4489-1 | Security update for netty | 2025-12-19T11:01:56Z | 2025-12-19T11:01:56Z |
| suse-su-2025:4488-1 | Security update for apache2 | 2025-12-18T17:17:26Z | 2025-12-18T17:17:26Z |
| suse-su-2025:4487-1 | Security update for python36 | 2025-12-18T14:44:30Z | 2025-12-18T14:44:30Z |
| suse-su-2025:4486-1 | Security update for postgresql13 | 2025-12-18T14:42:43Z | 2025-12-18T14:42:43Z |
| suse-su-2025:4485-1 | Security update for postgresql14 | 2025-12-18T14:41:51Z | 2025-12-18T14:41:51Z |
| suse-su-2025:4484-1 | Security update for postgresql15 | 2025-12-18T14:39:58Z | 2025-12-18T14:39:58Z |
| suse-su-2025:21233-1 | Security update for qemu | 2025-12-18T12:38:54Z | 2025-12-18T12:38:54Z |
| suse-su-2025:21230-1 | Security update for qemu | 2025-12-18T12:38:54Z | 2025-12-18T12:38:54Z |
| suse-su-2025:4483-1 | Security update for colord | 2025-12-18T12:29:27Z | 2025-12-18T12:29:27Z |
| suse-su-2025:4482-1 | Security update for grafana | 2025-12-18T12:22:20Z | 2025-12-18T12:22:20Z |
| suse-su-2025:4481-1 | Security update for golang-github-prometheus-alertmanager | 2025-12-18T12:18:50Z | 2025-12-18T12:18:50Z |
| suse-su-2025:4479-1 | Security update 4.3.16.2 for Multi-Linux Manager Server LTS | 2025-12-18T12:15:07Z | 2025-12-18T12:15:07Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-06137 | JeecgBoot queryPageList函数授权问题漏洞 | 2026-01-09 | 2026-01-22 |
| cnvd-2026-06136 | JeecgBoot getDeptRoleList函数授权问题漏洞 | 2026-01-09 | 2026-01-22 |
| cnvd-2026-06135 | JeecgBoot getParameterMap函数授权问题漏洞 | 2026-01-09 | 2026-01-22 |
| cnvd-2026-06134 | JeecgBoot /datarule文件授权问题漏洞 | 2026-01-09 | 2026-01-22 |
| cnvd-2026-06133 | JeecgBoot getPositionUserList函数授权问题漏洞 | 2026-01-09 | 2026-01-22 |
| cnvd-2026-06132 | JeecgBoot queryDepartPermission函数授权问题漏洞 | 2026-01-09 | 2026-01-22 |
| cnvd-2026-05940 | GNU InetUtils Telnetd远程认证绕过漏洞 | 2026-01-22 | 2026-01-22 |
| cnvd-2026-05176 | Huawei HarmonyOS和EMUI存在未明漏洞(CNVD-2026-05176) | 2023-12-07 | 2026-01-22 |
| cnvd-2026-05175 | Huawei HarmonyOS和EMUI PMS模块权限管理漏洞 | 2023-12-07 | 2026-01-22 |
| cnvd-2026-04837 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在文件上传漏洞(CNVD-C-2025-823176) | 2025-11-07 | 2026-01-22 |
| cnvd-2026-04834 | 西安瑞友信息技术资讯有限公司瑞友天翼应用虚拟化系统存在未授权访问漏洞 | 2025-11-14 | 2026-01-22 |
| cnvd-2026-04800 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在逻辑缺陷漏洞(CNVD-C-2025-852060) | 2025-11-14 | 2026-01-22 |
| cnvd-2026-04746 | 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞(CNVD-C-2025-796292) | 2025-11-06 | 2026-01-22 |
| cnvd-2026-04576 | 畅捷通信息技术股份有限公司畅捷通T+存在SQL注入漏洞(CNVD-C-2025-797319) | 2025-11-06 | 2026-01-22 |
| cnvd-2026-04575 | 畅捷通信息技术股份有限公司畅捷通T+存在SQL注入漏洞(CNVD-C-2025-778387) | 2025-11-03 | 2026-01-22 |
| cnvd-2026-04574 | 畅捷通信息技术股份有限公司畅捷通T+存在SQL注入漏洞(CNVD-C-2025-448742) | 2025-12-02 | 2026-01-22 |
| cnvd-2026-04467 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-948730) | 2025-12-01 | 2026-01-22 |
| cnvd-2026-04466 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-928742) | 2025-11-26 | 2026-01-22 |
| cnvd-2026-04465 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-879182) | 2025-11-18 | 2026-01-22 |
| cnvd-2026-04464 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-851224) | 2025-11-14 | 2026-01-22 |
| cnvd-2026-04463 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-848882) | 2025-11-13 | 2026-01-22 |
| cnvd-2026-04462 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞(CNVD-C-2025-822965) | 2025-11-07 | 2026-01-22 |
| cnvd-2026-04441 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-926218) | 2025-11-25 | 2026-01-22 |
| cnvd-2026-04439 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-925400) | 2025-11-25 | 2026-01-22 |
| cnvd-2026-04438 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-925300) | 2025-11-25 | 2026-01-22 |
| cnvd-2026-04437 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-925298) | 2025-11-25 | 2026-01-22 |
| cnvd-2026-04436 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-925280) | 2025-11-25 | 2026-01-22 |
| cnvd-2026-04435 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-925115) | 2025-11-25 | 2026-01-22 |
| cnvd-2026-04434 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-924847) | 2025-11-25 | 2026-01-22 |
| cnvd-2026-04433 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-924158) | 2025-11-25 | 2026-01-22 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1119 | Multiples vulnérabilités dans les produits Synology | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1118 | Vulnérabilité dans Mozilla Firefox | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1117 | Multiples vulnérabilités dans GLPI | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1116 | Multiples vulnérabilités dans Google Chrome | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| CERTFR-2025-AVI-1119 | Multiples vulnérabilités dans les produits Synology | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| CERTFR-2025-AVI-1118 | Vulnérabilité dans Mozilla Firefox | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| CERTFR-2025-AVI-1117 | Multiples vulnérabilités dans GLPI | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| CERTFR-2025-AVI-1116 | Multiples vulnérabilités dans Google Chrome | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1115 | Vulnérabilité dans Trend Micro Apex One | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1114 | Multiples vulnérabilités dans Tenable Nessus | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1113 | Multiples vulnérabilités dans Moodle | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| CERTFR-2025-AVI-1115 | Vulnérabilité dans Trend Micro Apex One | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| CERTFR-2025-AVI-1114 | Multiples vulnérabilités dans Tenable Nessus | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| CERTFR-2025-AVI-1113 | Multiples vulnérabilités dans Moodle | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1112 | Multiples vulnérabilités dans les produits Elastic | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1110 | Multiples vulnérabilités dans les produits Apple | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1109 | Vulnérabilité dans strongSwan | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1103 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-12T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1096 | Multiples vulnérabilités dans Google Chrome | 2025-12-11T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| CERTFR-2025-AVI-1112 | Multiples vulnérabilités dans les produits Elastic | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| CERTFR-2025-AVI-1110 | Multiples vulnérabilités dans les produits Apple | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| CERTFR-2025-AVI-1109 | Vulnérabilité dans strongSwan | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| CERTFR-2025-AVI-1103 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-12T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| CERTFR-2025-AVI-1096 | Multiples vulnérabilités dans Google Chrome | 2025-12-11T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1108 | Multiples vulnérabilités dans les produits IBM | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1107 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1106 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1105 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1104 | Vulnérabilité dans Microsoft Windows Admin Center | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1102 | Multiples vulnérabilités dans les produits NetApp | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-ale-003 | Vulnérabilité dans Microsoft XML Core Services | 2012-06-14T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| CERTA-2012-ALE-003 | Vulnérabilité dans Microsoft XML Core Services | 2012-06-14T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| certa-2012-ale-004 | Vulnérabilité dans Microsoft Exchange et Fast Search Server 2010 | 2012-07-25T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| CERTA-2012-ALE-004 | Vulnérabilité dans Microsoft Exchange et Fast Search Server 2010 | 2012-07-25T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-ale-002 | Vulnérabilité dans Windows RDP | 2012-03-14T00:00:00.000000 | 2012-04-13T00:00:00.000000 |
| CERTA-2012-ALE-002 | Vulnérabilité dans Windows RDP | 2012-03-14T00:00:00.000000 | 2012-04-13T00:00:00.000000 |
| certa-2011-ale-008 | Vulnérabilité dans Adobe Reader et Acrobat | 2011-12-07T00:00:00.000000 | 2012-01-10T00:00:00.000000 |
| CERTA-2011-ALE-008 | Vulnérabilité dans Adobe Reader et Acrobat | 2011-12-07T00:00:00.000000 | 2012-01-10T00:00:00.000000 |
| certa-2011-ale-007 | Vulnérabilité dans ftpd et ProFTPD sur FreeBSD | 2011-12-02T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| CERTA-2011-ALE-007 | Vulnérabilité dans ftpd et ProFTPD sur FreeBSD | 2011-12-02T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-ale-006 | Exploitation d'une vulnérabilité dans la gestion des polices TrueType sur Windows | 2011-11-04T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| CERTA-2011-ALE-006 | Exploitation d'une vulnérabilité dans la gestion des polices TrueType sur Windows | 2011-11-04T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-ale-005 | Exploitation malveillante d'une fonctionnalité du protocole SSL afin de provoquer un déni de service | 2011-10-27T00:00:00.000000 | 2011-10-27T00:00:00.000000 |
| CERTA-2011-ALE-005 | Exploitation malveillante d'une fonctionnalité du protocole SSL afin de provoquer un déni de service | 2011-10-27T00:00:00.000000 | 2011-10-27T00:00:00.000000 |
| certa-2011-ale-004 | Vulnérabilités dans Apple iOS | 2011-07-05T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| CERTA-2011-ALE-004 | Vulnérabilités dans Apple iOS | 2011-07-05T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| certa-2011-ale-003 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-04-12T00:00:00.000000 | 2011-06-20T00:00:00.000000 |
| CERTA-2011-ALE-003 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-04-12T00:00:00.000000 | 2011-06-20T00:00:00.000000 |
| certa-2011-ale-002 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-03-15T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| CERTA-2011-ALE-002 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-03-15T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| certa-2011-ale-001 | Vulnérabilité dans le moteur de rendu graphique de Windows | 2011-01-05T00:00:00.000000 | 2011-02-10T00:00:00.000000 |
| CERTA-2011-ALE-001 | Vulnérabilité dans le moteur de rendu graphique de Windows | 2011-01-05T00:00:00.000000 | 2011-02-10T00:00:00.000000 |
| certa-2010-ale-021 | Vulnérabilité dans Microsoft Internet Explorer | 2010-12-22T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| CERTA-2010-ALE-021 | Vulnérabilité dans Microsoft Internet Explorer | 2010-12-22T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2010-ale-019 | Vulnérabilité dans Microsoft Internet Explorer | 2010-11-03T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| CERTA-2010-ALE-019 | Vulnérabilité dans Microsoft Internet Explorer | 2010-11-03T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-ale-018 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2010-10-28T00:00:00.000000 | 2010-11-18T00:00:00.000000 |
| CERTA-2010-ALE-018 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2010-10-28T00:00:00.000000 | 2010-11-18T00:00:00.000000 |
| certa-2010-ale-020 | Vulnérabilité dans Adobe Reader et Acrobat | 2010-11-05T00:00:00.000000 | 2010-11-17T00:00:00.000000 |
| CERTA-2010-ALE-020 | Vulnérabilité dans Adobe Reader et Acrobat | 2010-11-05T00:00:00.000000 | 2010-11-17T00:00:00.000000 |