Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25323 |
N/A
|
WordPress OSM plugin <= 6.1.12 - Broken Access Control… |
MiKa |
OSM |
2026-02-19T08:26:55.891Z | 2026-02-19T08:26:55.891Z |
| CVE-2026-25322 |
N/A
|
WordPress PublishPress Revisions plugin <= 3.7.22 - Cr… |
PublishPress |
PublishPress Revisions |
2026-02-19T08:26:55.709Z | 2026-02-19T08:26:55.709Z |
| CVE-2026-25316 |
N/A
|
WordPress CartFlows plugin <= 2.1.19 - PHP Object Inje… |
Brainstorm Force |
CartFlows |
2026-02-19T08:26:54.560Z | 2026-02-19T08:26:54.560Z |
| CVE-2026-25315 |
N/A
|
WordPress hCaptcha for WP plugin <= 4.22.0 - Broken Ac… |
hcaptcha |
hCaptcha for WP |
2026-02-19T08:26:54.349Z | 2026-02-19T08:26:54.349Z |
| CVE-2026-25313 |
N/A
|
WordPress FluentForm plugin <= 6.1.14 - Broken Access … |
Shahjahan Jewel |
FluentForm |
2026-02-19T08:26:53.940Z | 2026-02-19T08:26:53.940Z |
| CVE-2026-25307 |
N/A
|
WordPress XStore Core plugin < 5.7 - Cross Site Script… |
8theme |
XStore Core |
2026-02-19T08:26:53.190Z | 2026-02-19T08:26:53.190Z |
| CVE-2026-25305 |
N/A
|
WordPress XStore theme <= 9.6.4 - Cross Site Scripting… |
8theme |
XStore |
2026-02-19T08:26:52.704Z | 2026-02-19T08:26:52.704Z |
| CVE-2026-25008 |
N/A
|
WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Dat… |
Shahjahan Jewel |
Ninja Tables |
2026-02-19T08:26:52.281Z | 2026-02-19T08:26:52.281Z |
| CVE-2026-25006 |
N/A
|
WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode … |
8theme |
XStore |
2026-02-19T08:26:52.080Z | 2026-02-19T08:26:52.080Z |
| CVE-2026-25005 |
N/A
|
WordPress Frontend File Manager plugin <= 23.5 - Insec… |
N-Media |
Frontend File Manager |
2026-02-19T08:26:51.878Z | 2026-02-19T08:26:51.878Z |
| CVE-2026-25004 |
N/A
|
WordPress CM Business Directory plugin <= 1.5.3 - Cros… |
CreativeMindsSolutions |
CM Business Directory |
2026-02-19T08:26:51.689Z | 2026-02-19T08:26:51.689Z |
| CVE-2026-23805 |
N/A
|
WordPress Media Search Enhanced plugin <= 0.9.1 - SQL … |
Yoren Chang |
Media Search Enhanced |
2026-02-19T08:26:50.551Z | 2026-02-19T08:26:50.551Z |
| CVE-2026-23803 |
N/A
|
WordPress Smart Auto Upload Images plugin <= 1.2.2 - S… |
Burhan Nasir |
Smart Auto Upload Images |
2026-02-19T08:26:50.148Z | 2026-02-19T08:26:50.148Z |
| CVE-2026-23548 |
N/A
|
WordPress DirectoryPress plugin <= 3.6.25 - Broken Acc… |
designinvento |
DirectoryPress |
2026-02-19T08:26:49.731Z | 2026-02-19T08:26:49.731Z |
| CVE-2026-23547 |
N/A
|
WordPress CMSMasters Content Composer plugin <= 2.5.8 … |
cmsmasters |
CMSMasters Content Composer |
2026-02-19T08:26:49.398Z | 2026-02-19T08:26:49.398Z |
| CVE-2026-23545 |
N/A
|
WordPress Aruba HiSpeed Cache plugin <= 3.0.4 - Broken… |
Aruba.it Dev |
Aruba HiSpeed Cache |
2026-02-19T08:26:49.211Z | 2026-02-19T08:26:49.211Z |
| CVE-2026-23543 |
N/A
|
WordPress Essential Addons for Elementor plugin <= 6.5… |
WPDeveloper |
Essential Addons for Elementor |
2026-02-19T08:26:48.831Z | 2026-02-19T08:26:48.831Z |
| CVE-2026-23541 |
N/A
|
WordPress Mail Mint plugin <= 1.19.4 - Broken Access C… |
WPFunnels |
Mail Mint |
2026-02-19T08:26:48.368Z | 2026-02-19T08:26:48.368Z |
| CVE-2026-22422 |
N/A
|
WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Sh… |
wpeverest |
Everest Forms |
2026-02-19T08:26:48.111Z | 2026-02-19T08:26:48.111Z |
| CVE-2026-22333 |
N/A
|
WordPress YITH WooCommerce Compare plugin <= 3.6.0 - D… |
YITHEMES |
YITH WooCommerce Compare |
2026-02-19T08:26:47.849Z | 2026-02-19T08:26:47.849Z |
| CVE-2026-2709 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
busy Callback app.js redirect |
n/a |
busy |
2026-02-19T06:32:06.498Z | 2026-02-19T06:32:06.498Z |
| CVE-2026-2706 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
code-projects Patient Record Management System fecalys… |
code-projects |
Patient Record Management System |
2026-02-19T06:02:06.881Z | 2026-02-19T06:02:06.881Z |
| CVE-2026-2705 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Open Babel MOL2 File atom.h SetFormalCharge out-of-bounds |
n/a |
Open Babel |
2026-02-19T05:02:07.101Z | 2026-02-19T05:02:07.101Z |
| CVE-2026-2650 |
8.8 (3.1)
|
Heap buffer overflow in Media in Google Chrome pr… |
Google |
Chrome |
2026-02-18T21:39:04.464Z | 2026-02-19T04:55:53.151Z |
| CVE-2026-2649 |
8.8 (3.1)
|
Integer overflow in V8 in Google Chrome prior to … |
Google |
Chrome |
2026-02-18T21:39:03.873Z | 2026-02-19T04:55:52.326Z |
| CVE-2026-0875 |
7.8 (3.1)
|
MODEL File Parsing Out-of-Bounds Write |
Autodesk |
Shared Components |
2026-02-18T19:39:27.111Z | 2026-02-19T04:55:51.518Z |
| CVE-2026-0874 |
7.8 (3.1)
|
CATPART File Parsing Out-of-Bounds Write |
Autodesk |
Shared Components |
2026-02-18T19:38:32.639Z | 2026-02-19T04:55:50.723Z |
| CVE-2025-13691 |
8.1 (3.1)
|
DataStage on Cloud Pak for Data is vulnerable to sensi… |
IBM |
DataStage on Cloud Pak for Data |
2026-02-17T20:17:24.149Z | 2026-02-19T04:55:49.175Z |
| CVE-2025-13689 |
8.8 (3.1)
|
DataStage on Cloud Pak for Data is vulnerable to arbit… |
IBM |
DataStage on Cloud Pak |
2026-02-17T22:26:20.866Z | 2026-02-19T04:55:49.939Z |
| CVE-2025-14009 |
10 (3.0)
|
Zip Slip Vulnerability in nltk/nltk Leading to Remote … |
nltk |
nltk/nltk |
2026-02-18T17:45:17.573Z | 2026-02-19T04:55:48.396Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2692 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
CoCoTeaNet CyreneAdmin Image getAvatar path traversal |
CoCoTeaNet |
CyreneAdmin |
2026-02-19T02:02:06.735Z | 2026-02-19T02:02:06.735Z |
| CVE-2026-2691 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System manage_register.p… |
itsourcecode |
Event Management System |
2026-02-19T01:32:07.068Z | 2026-02-19T01:32:07.068Z |
| CVE-2026-2690 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System Admin Login ajax.… |
itsourcecode |
Event Management System |
2026-02-19T01:02:07.372Z | 2026-02-19T01:02:07.372Z |
| CVE-2026-2689 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System manage_booking.ph… |
itsourcecode |
Event Management System |
2026-02-19T00:32:07.761Z | 2026-02-19T00:32:07.761Z |
| CVE-2026-2681 |
5.3 (3.1)
|
Github.com/supranational/blst: blst cryptographic libr… |
|
|
2026-02-19T06:58:47.090Z | 2026-02-19T21:32:34.940Z |
| CVE-2026-26362 |
8.1 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:25:14.267Z | 2026-02-19T21:29:58.454Z |
| CVE-2026-26361 |
6.5 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:14:59.358Z | 2026-02-19T21:30:41.803Z |
| CVE-2026-26360 |
8.1 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:41:00.849Z | 2026-02-19T08:41:00.849Z |
| CVE-2026-26359 |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:34:01.506Z | 2026-02-19T08:34:01.506Z |
| CVE-2026-26358 |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:47:24.102Z | 2026-02-19T08:47:24.102Z |
| CVE-2026-25755 |
8.1 (3.1)
|
jsPDF has PDF Object Injection via Unsanitized Input i… |
parallax |
jsPDF |
2026-02-19T14:41:46.941Z | 2026-02-19T17:36:10.677Z |
| CVE-2026-25535 |
8.7 (4.0)
|
jsPDF Affected by Client-Side/Server-Side Denial of Se… |
parallax |
jsPDF |
2026-02-19T14:34:05.648Z | 2026-02-19T16:03:26.484Z |
| CVE-2026-25472 |
N/A
|
WordPress Fusion Builder plugin <= 3.14.3 - Cross Site… |
ThemeFusion |
Fusion Builder |
2026-02-19T08:27:08.959Z | 2026-02-19T08:27:08.959Z |
| CVE-2026-25453 |
N/A
|
WordPress Advanced iFrame plugin <= 2025.10 - Cross Si… |
mdempfle |
Advanced iFrame |
2026-02-19T08:27:08.389Z | 2026-02-19T08:27:08.389Z |
| CVE-2026-25451 |
N/A
|
WordPress Bold Page Builder plugin <= 5.6.4 - Cross Si… |
boldthemes |
Bold Page Builder |
2026-02-19T08:27:08.216Z | 2026-02-19T08:27:08.216Z |
| CVE-2026-25422 |
N/A
|
WordPress Popularis Extra plugin <= 1.2.10 - Cross Sit… |
Themes4WP |
Popularis Extra |
2026-02-19T08:27:07.187Z | 2026-02-19T08:27:07.187Z |
| CVE-2026-25420 |
N/A
|
WordPress MailerLite plugin <= 1.7.18 - Broken Access … |
MailerLite |
MailerLite |
2026-02-19T08:27:06.988Z | 2026-02-19T08:27:06.988Z |
| CVE-2026-25412 |
N/A
|
WordPress Advanced iFrame plugin <= 2025.10 - Broken A… |
mdempfle |
Advanced iFrame |
2026-02-19T08:27:06.073Z | 2026-02-19T08:27:06.073Z |
| CVE-2026-25404 |
N/A
|
WordPress WP Job Manager plugin <= 2.4.0 - Broken Acce… |
Automattic |
WP Job Manager |
2026-02-19T08:27:04.284Z | 2026-02-19T08:27:04.284Z |
| CVE-2026-25389 |
N/A
|
WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Dat… |
Metagauss |
EventPrime |
2026-02-19T08:27:02.493Z | 2026-02-19T08:27:02.493Z |
| CVE-2026-25388 |
N/A
|
WordPress Ads Pro plugin <= 5.0 - Broken Access Contro… |
scripteo |
Ads Pro |
2026-02-19T08:27:02.280Z | 2026-02-19T08:27:02.280Z |
| CVE-2026-25387 |
N/A
|
WordPress Image Optimizer by Elementor plugin <= 1.7.1… |
Elementor |
Image Optimizer by Elementor |
2026-02-19T08:27:02.035Z | 2026-02-19T08:27:02.035Z |
| CVE-2026-25370 |
N/A
|
WordPress WP Compress plugin <= 6.60.28 - Broken Acces… |
AresIT |
WP Compress |
2026-02-19T08:27:00.225Z | 2026-02-19T08:27:00.225Z |
| CVE-2026-25364 |
N/A
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2026-02-19T08:26:59.312Z | 2026-02-19T08:26:59.312Z |
| CVE-2026-25363 |
N/A
|
WordPress FooGallery plugin <= 3.1.11 - Broken Access … |
FooPlugins |
FooGallery |
2026-02-19T08:26:59.110Z | 2026-02-19T08:26:59.110Z |
| CVE-2026-25362 |
N/A
|
WordPress FooGallery plugin <= 3.1.11 - Cross Site Scr… |
FooPlugins |
FooGallery |
2026-02-19T08:26:58.927Z | 2026-02-19T08:26:58.927Z |
| CVE-2026-25343 |
N/A
|
WordPress WP SMS plugin <= 7.1 - Cross Site Scripting … |
VeronaLabs |
WP SMS |
2026-02-19T08:26:58.554Z | 2026-02-19T08:26:58.554Z |
| CVE-2026-25331 |
N/A
|
WordPress WP Activity Log plugin <= 5.5.4 - Cross Site… |
Melapress |
WP Activity Log |
2026-02-19T08:26:57.085Z | 2026-02-19T08:26:57.085Z |
| CVE-2026-25330 |
N/A
|
WordPress PublishPress Authors plugin <= 4.10.1 - Brok… |
PublishPress |
PublishPress Authors |
2026-02-19T08:26:56.890Z | 2026-02-19T08:26:56.890Z |
| CVE-2026-25329 |
N/A
|
WordPress Quiz And Survey Master plugin <= 10.3.4 - Br… |
ExpressTech Systems |
Quiz And Survey Master |
2026-02-19T08:26:56.704Z | 2026-02-19T08:26:56.704Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-25005 | Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nme… | 2026-02-19T09:16:14.353 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25004 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:14.210 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25003 | Missing Authorization vulnerability in madalin.ungureanu Client Portal client-portal allows Exploit… | 2026-02-19T09:16:14.067 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25000 | Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting … | 2026-02-19T09:16:13.927 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-24999 | Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Inc… | 2026-02-19T09:16:13.783 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-24392 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:13.640 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-24375 | Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards… | 2026-02-19T09:16:13.497 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23805 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-19T09:16:13.360 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23804 | Missing Authorization vulnerability in BBR Plugins Better Business Reviews better-business-reviews … | 2026-02-19T09:16:13.217 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23803 | Server-Side Request Forgery (SSRF) vulnerability in Burhan Nasir Smart Auto Upload Images smart-aut… | 2026-02-19T09:16:13.067 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23549 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows … | 2026-02-19T09:16:12.927 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23548 | Missing Authorization vulnerability in designinvento DirectoryPress directorypress allows Exploitin… | 2026-02-19T09:16:12.787 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23547 | Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-co… | 2026-02-19T09:16:12.627 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23545 | Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows … | 2026-02-19T09:16:12.480 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23544 | Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection… | 2026-02-19T09:16:12.340 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23543 | Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-… | 2026-02-19T09:16:12.197 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23542 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allo… | 2026-02-19T09:16:12.050 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23541 | Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality… | 2026-02-19T09:16:11.903 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2284 | The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorizatio… | 2026-02-19T07:17:46.400 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2282 | The Slidorion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings … | 2026-02-19T07:17:46.230 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-22422 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in wpev… | 2026-02-19T09:16:11.753 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-22333 | Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommer… | 2026-02-19T09:16:11.600 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-22269 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of S… | 2026-02-19T09:16:11.430 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-22268 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assign… | 2026-02-19T10:16:11.963 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-22267 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assign… | 2026-02-19T10:16:11.800 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-22266 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of S… | 2026-02-19T10:16:11.630 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1994 | The s2Member plugin for WordPress is vulnerable to privilege escalation via account takeover in all… | 2026-02-19T07:17:44.403 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1646 | The Advance Block Extend plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-02-19T07:17:44.233 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1461 | The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in … | 2026-02-19T10:16:11.457 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1455 | The Whatsiplus Scheduled Notification for Woocommerce plugin for WordPress is vulnerable to Cross-S… | 2026-02-19T07:17:44.060 | 2026-02-19T15:52:39.260 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vh22-vqgf-cr4h |
7.5 (3.1)
8.7 (4.0)
|
gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to acc… | 2026-02-19T00:30:28Z | 2026-02-19T00:30:28Z |
| ghsa-r29v-5x2x-xjh8 |
7.5 (3.1)
4.6 (4.0)
|
XMedia Recode 3.4.8.6 contains a denial of service vulnerability that allows attackers to crash the… | 2026-02-19T00:30:28Z | 2026-02-19T00:30:28Z |
| ghsa-mj9j-hqwg-6r6g |
6.2 (3.1)
4.6 (4.0)
|
ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the ap… | 2026-02-19T00:30:27Z | 2026-02-19T00:30:28Z |
| ghsa-ffp3-q8wm-h894 |
6.1 (3.1)
5.1 (4.0)
|
Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer contains a cross-site scripting vu… | 2026-02-19T00:30:28Z | 2026-02-19T00:30:28Z |
| ghsa-7ghp-cxp3-645v |
7.5 (3.1)
4.6 (4.0)
|
iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the … | 2026-02-19T00:30:28Z | 2026-02-19T00:30:28Z |
| ghsa-653m-4r27-3m6m |
8.4 (3.1)
8.4 (4.0)
|
Control Center PRO 6.2.9 contains a stack-based buffer overflow vulnerability in the user creation … | 2026-02-19T00:30:28Z | 2026-02-19T00:30:28Z |
| ghsa-5mx6-6w28-gw6c |
8.8 (3.1)
7.1 (4.0)
|
Centova Cast 3.2.11 contains a file download vulnerability that allows authenticated attackers to r… | 2026-02-19T00:30:28Z | 2026-02-19T00:30:28Z |
| ghsa-3r32-v4qm-6hph |
7.5 (3.1)
4.6 (4.0)
|
Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username i… | 2026-02-19T00:30:28Z | 2026-02-19T00:30:28Z |
| ghsa-whrj-4476-wvmp |
5.4 (3.1)
|
Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href | 2026-02-17T18:46:35Z | 2026-02-18T23:49:07Z |
| ghsa-mxw3-3hh2-x2mh |
7.5 (3.1)
|
Rack has a Directory Traversal via Rack:Directory | 2026-02-17T16:14:11Z | 2026-02-18T23:48:59Z |
| ghsa-vjpq-xx5g-qvmm |
5.4 (3.1)
|
BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability | 2026-02-17T16:13:48Z | 2026-02-18T23:48:50Z |
| ghsa-7j46-f57w-76pj |
6.5 (3.1)
|
Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags | 2025-11-24T22:13:32Z | 2026-02-18T23:48:02Z |
| ghsa-c85w-x26q-ch87 |
8.2 (3.1)
|
Formwork improperly validates input of User role preventing site and panel availability | 2025-03-01T00:11:52Z | 2026-02-18T23:47:37Z |
| ghsa-vf6x-59hh-332f |
4.7 (3.1)
|
Formwork has a cross-site scripting (XSS) vulnerability in Site title | 2025-03-01T00:11:46Z | 2026-02-18T23:47:22Z |
| ghsa-5pxr-7m4j-jjc6 |
4.8 (3.1)
|
Cross-site scripting (XSS) vulnerability in Description metadata | 2024-06-07T19:37:10Z | 2026-02-18T23:46:36Z |
| ghsa-8qq5-rm4j-mr97 |
8.2 (4.0)
|
node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sani… | 2026-01-16T21:16:20Z | 2026-02-18T23:43:46Z |
| ghsa-w995-ff8h-rppg |
8.7 (4.0)
|
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint) | 2026-02-03T18:44:17Z | 2026-02-18T23:41:04Z |
| ghsa-pmc3-p9hx-jq96 |
6.5 (3.1)
|
uTLS ServerHellos are accepted without checking TLS 1.3 downgrade canaries | 2025-04-23T14:43:44Z | 2026-02-18T23:34:53Z |
| ghsa-cp9c-phxx-55xm |
6.1 (3.1)
|
phpMyFAQ vulnerable to Cross-site Scripting | 2022-12-11T15:30:45Z | 2026-02-18T23:34:01Z |
| ghsa-mg5h-rhjq-6v84 |
6.1 (3.1)
|
phpMyFAQ vulnerable to reflected Cross-site Scripting | 2022-10-31T12:00:18Z | 2026-02-18T23:33:51Z |
| ghsa-gx7g-wjxg-jwwj |
3.5 (3.1)
|
Cross-Site Request Forgery in YOURLS | 2022-04-04T00:00:55Z | 2026-02-18T23:33:34Z |
| ghsa-2ww3-72rp-wpp4 |
9.9 (3.1)
|
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK | 2026-02-06T18:37:24Z | 2026-02-18T23:32:12Z |
| ghsa-pqqf-7hxm-rj5r |
7.6 (3.1)
|
Leaky JWTs in OpenMetadata exposing highly-privileged bot users | 2026-02-11T14:23:02Z | 2026-02-18T23:30:21Z |
| ghsa-37gc-85xm-2ww6 |
5.8 (3.1)
|
OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline scrip… | 2026-02-18T22:44:33Z | 2026-02-18T22:44:33Z |
| ghsa-h7f7-89mm-pqh6 |
6.8 (4.0)
|
OpenClaw hardened the skill download target directory validation | 2026-02-18T22:44:18Z | 2026-02-18T22:44:18Z |
| ghsa-xxvh-5hwj-42pp |
4.8 (4.0)
|
OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation | 2026-02-18T22:44:10Z | 2026-02-18T22:44:10Z |
| ghsa-6hf3-mhgc-cm65 |
6.9 (4.0)
|
OpenClaw session tool visibility hardening and Telegram webhook secret fallback | 2026-02-18T22:43:53Z | 2026-02-18T22:43:53Z |
| ghsa-chf7-jq6g-qrwv |
6.9 (4.0)
|
OpenClaw: Telegram bot token exposure via logs | 2026-02-18T22:43:21Z | 2026-02-18T22:43:22Z |
| ghsa-w235-x559-36mg |
7.7 (4.0)
|
OpenClaw: Docker container escape via unvalidated bind mount config injection | 2026-02-18T22:42:42Z | 2026-02-18T22:42:42Z |
| ghsa-2qj5-gwg2-xwc4 |
8.6 (4.0)
|
OpenClaw: Unsanitized CWD path injection into LLM prompts | 2026-02-18T22:42:29Z | 2026-02-18T22:42:29Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2017-115 |
5.5 (3.1)
|
exiv2 0.26 contains a Stack out of bounds read in webp parser | exiv2 | 2017-11-17T22:29:00Z | 2024-11-21T14:22:45.992477Z |
| pysec-2015-36 |
|
Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24… | exiv2 | 2015-01-02T20:59:00Z | 2024-11-21T14:22:45.931449Z |
| pysec-2008-11 |
|
Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-… | exiv2 | 2008-06-13T19:41:00Z | 2024-11-21T14:22:45.866207Z |
| pysec-2022-43126 |
9.8 (3.1)
|
The d8s-dates for python, as distributed on PyPI, included a potential code-execution bac… | democritus-timezones | 2022-11-07T15:15:00Z | 2024-11-21T14:22:44.991216Z |
| pysec-2022-43125 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | democritus-strings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.941258Z |
| pysec-2022-43124 |
9.8 (3.1)
|
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backd… | democritus-strings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.889277Z |
| pysec-2022-43123 |
9.8 (3.1)
|
The d8s-netstrings for python, as distributed on PyPI, included a potential code-executio… | democritus-strings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.834592Z |
| pysec-2022-43122 |
9.8 (3.1)
|
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution … | democritus-strings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.785522Z |
| pysec-2022-43121 |
9.8 (3.1)
|
The d8s-math for python, as distributed on PyPI, included a potential code-execution back… | democritus-strings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.735083Z |
| pysec-2022-43120 |
9.8 (3.1)
|
The d8s-json for python, as distributed on PyPI, included a potential code-execution back… | democritus-strings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.684065Z |
| pysec-2022-43119 |
9.8 (3.1)
|
The d8s-archives for python, as distributed on PyPI, included a potential code-execution … | democritus-strings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.633699Z |
| pysec-2022-43118 |
9.8 (3.1)
|
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… | democritus-strings | 2022-09-19T14:15:00Z | 2024-11-21T14:22:44.584448Z |
| pysec-2022-43117 |
9.8 (3.1)
|
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution back… | democritus-networking | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.53409Z |
| pysec-2022-43116 |
9.8 (3.1)
|
The d8s-utility for python, as distributed on PyPI, included a potential code-execution b… | democritus-networking | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.483759Z |
| pysec-2022-43115 |
9.8 (3.1)
|
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execut… | democritus-networking | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.428296Z |
| pysec-2022-43114 |
9.8 (3.1)
|
The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution back… | democritus-networking | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.376649Z |
| pysec-2022-43113 |
9.8 (3.1)
|
The d8s-domains for python, as distributed on PyPI, included a potential code-execution b… | democritus-networking | 2022-09-19T15:15:00Z | 2024-11-21T14:22:44.327837Z |
| pysec-2022-43112 |
9.8 (3.1)
|
The d8s-asns for python, as distributed on PyPI, included a potential code-execution back… | democritus-networking | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.27716Z |
| pysec-2022-43111 |
9.8 (3.1)
|
The d8s-html for python, as distributed on PyPI, included a potential code-execution back… | democritus-networking | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.226888Z |
| pysec-2022-43110 |
9.8 (3.1)
|
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… | democritus-networking | 2022-09-19T15:15:00Z | 2024-11-21T14:22:44.173987Z |
| pysec-2022-43109 |
9.8 (3.1)
|
The d8s-stats for python, as distributed on PyPI, included a potential code-execution bac… | democritus-math | 2022-11-07T15:15:00Z | 2024-11-21T14:22:44.122837Z |
| pysec-2022-43108 |
9.8 (3.1)
|
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… | democritus-json | 2022-11-07T15:15:00Z | 2024-11-21T14:22:44.072231Z |
| pysec-2022-43107 |
9.8 (3.1)
|
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execut… | democritus-hypothesis | 2022-09-19T16:15:00Z | 2024-11-21T14:22:44.021497Z |
| pysec-2022-43106 |
9.8 (3.1)
|
The d8s-dicts for python, as distributed on PyPI, included a potential code-execution bac… | democritus-hypothesis | 2022-09-19T16:15:00Z | 2024-11-21T14:22:43.965654Z |
| pysec-2022-43105 |
9.8 (3.1)
|
The d8s-dates for python, as distributed on PyPI, included a potential code-execution bac… | democritus-hypothesis | 2022-09-19T15:15:00Z | 2024-11-21T14:22:43.915613Z |
| pysec-2022-43104 |
9.8 (3.1)
|
The d8s-domains for python, as distributed on PyPI, included a potential code-execution b… | democritus-hypothesis | 2022-09-19T15:15:00Z | 2024-11-21T14:22:43.865878Z |
| pysec-2022-43103 |
9.8 (3.1)
|
The d8s-uuids for python, as distributed on PyPI, included a potential code-execution bac… | democritus-hypothesis | 2022-09-19T15:15:00Z | 2024-11-21T14:22:43.817031Z |
| pysec-2022-43102 |
9.8 (3.1)
|
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-executio… | democritus-hypothesis | 2022-09-19T15:15:00Z | 2024-11-21T14:22:43.766564Z |
| pysec-2022-43101 |
9.8 (3.1)
|
The d8s-strings for python, as distributed on PyPI, included a potential code-execution b… | democritus-hypothesis | 2022-09-19T16:15:00Z | 2024-11-21T14:22:43.716069Z |
| pysec-2022-43100 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | democritus-grammars | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.665816Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33555 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.556591Z |
| gsd-2024-33554 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.667501Z |
| gsd-2024-33553 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.544840Z |
| gsd-2024-33552 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.667300Z |
| gsd-2024-33551 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.543061Z |
| gsd-2024-33550 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.534917Z |
| gsd-2024-33549 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.667701Z |
| gsd-2024-33548 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.564663Z |
| gsd-2024-33547 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.644934Z |
| gsd-2024-33546 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.560266Z |
| gsd-2024-33545 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.604410Z |
| gsd-2024-33544 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.631414Z |
| gsd-2024-33543 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.644262Z |
| gsd-2024-33542 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.688591Z |
| gsd-2024-33541 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.555650Z |
| gsd-2024-33540 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.562741Z |
| gsd-2024-33539 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.670372Z |
| gsd-2024-33538 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.588107Z |
| gsd-2024-33537 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.572272Z |
| gsd-2024-33536 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.665589Z |
| gsd-2024-33535 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.600803Z |
| gsd-2024-33534 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.522494Z |
| gsd-2024-33533 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.580672Z |
| gsd-2024-33532 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.683477Z |
| gsd-2024-33531 | cdbattags lua-resty-jwt 0.2.3 allows attackers to bypass all JWT-parsing signature checks… | 2024-04-25T05:02:10.682199Z |
| gsd-2024-33530 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.519432Z |
| gsd-2024-33529 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.547084Z |
| gsd-2024-33528 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.614150Z |
| gsd-2024-33527 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.684742Z |
| gsd-2024-33526 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.643822Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2026-768 | Malicious code in debug-logger-utils (npm) | 2026-02-05T17:31:41Z | 2026-02-06T03:05:23Z |
| MAL-2026-764 | Malicious code in chai-as-advanced (npm) | 2026-02-05T14:54:55Z | 2026-02-06T03:05:23Z |
| MAL-2026-761 | Malicious code in digital-checkout (npm) | 2026-02-05T14:22:06Z | 2026-02-06T03:05:23Z |
| MAL-2026-756 | Malicious code in cat-retail-app (npm) | 2026-02-05T01:58:59Z | 2026-02-06T03:05:23Z |
| MAL-2026-751 | Malicious code in express_update (npm) | 2026-02-05T01:50:12Z | 2026-02-06T03:05:23Z |
| MAL-2026-750 | Malicious code in dspmobile (npm) | 2026-02-05T01:07:59Z | 2026-02-06T03:05:23Z |
| MAL-2026-742 | Malicious code in dcf-commons (npm) | 2026-02-04T17:26:21Z | 2026-02-06T03:05:23Z |
| MAL-2026-741 | Malicious code in confluence-analytics-support (npm) | 2026-02-04T17:08:45Z | 2026-02-06T03:05:23Z |
| MAL-2026-735 | Malicious code in docusaurus-plugin-launchdarkly (npm) | 2026-02-04T09:46:59Z | 2026-02-06T03:05:23Z |
| MAL-2026-733 | Malicious code in deuro-landing-page (npm) | 2026-02-04T09:21:07Z | 2026-02-06T03:05:23Z |
| MAL-2026-722 | Malicious code in express-groups-routes (npm) | 2026-02-04T04:56:58Z | 2026-02-06T03:05:23Z |
| MAL-2026-721 | Malicious code in dotenv-embedded (npm) | 2026-02-04T05:11:23Z | 2026-02-06T03:05:23Z |
| MAL-2026-720 | Malicious code in chai-grab (npm) | 2026-02-04T05:22:34Z | 2026-02-06T03:05:23Z |
| MAL-2026-719 | Malicious code in chai-async-promised (npm) | 2026-02-04T05:11:23Z | 2026-02-06T03:05:23Z |
| MAL-2026-691 | Malicious code in fingerprint-stitch (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:23Z |
| MAL-2026-690 | Malicious code in fileupload-util (npm) | 2026-02-03T07:56:03Z | 2026-02-06T03:05:23Z |
| MAL-2026-689 | Malicious code in eslint-config-stitch (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:23Z |
| MAL-2026-688 | Malicious code in eslint-config-nlx (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:23Z |
| MAL-2026-679 | Malicious code in epic-admin-ui (npm) | 2026-02-03T07:27:10Z | 2026-02-06T03:05:23Z |
| MAL-2026-678 | Malicious code in cookie-parsers-env (npm) | 2026-02-03T06:59:52Z | 2026-02-06T03:05:23Z |
| MAL-2026-677 | Malicious code in chai-promise-tools (npm) | 2026-02-03T06:59:53Z | 2026-02-06T03:05:23Z |
| MAL-2026-671 | Malicious code in cheerio-core (npm) | 2026-02-03T04:20:03Z | 2026-02-06T03:05:23Z |
| MAL-2026-660 | Malicious code in dns-troubleshoot-toolkit-xyz123 (npm) | 2026-02-03T03:54:05Z | 2026-02-06T03:05:23Z |
| mal-2026-760 | Malicious code in @helloflex/widget-next-sdk (npm) | 2026-02-05T12:44:37Z | 2026-02-06T03:05:22Z |
| mal-2026-755 | Malicious code in @jes4l/react-pkg (npm) | 2026-02-05T01:57:08Z | 2026-02-06T03:05:22Z |
| mal-2026-749 | Malicious code in @purecore/rabbitmq (npm) | 2026-02-05T01:28:01Z | 2026-02-06T03:05:22Z |
| mal-2026-740 | Malicious code in @msecscc/gaia (npm) | 2026-02-04T17:18:05Z | 2026-02-06T03:05:22Z |
| mal-2026-718 | Malicious code in @fxinternal/netdiagnostics (npm) | 2026-02-04T05:00:18Z | 2026-02-06T03:05:22Z |
| mal-2026-706 | Malicious code in @devgandhi/healthpulse (npm) | 2026-02-03T17:39:11Z | 2026-02-06T03:05:22Z |
| mal-2026-705 | Malicious code in @devgandhi/cpp (npm) | 2026-02-03T17:39:11Z | 2026-02-06T03:05:22Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2866 | Dropbear SSH: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-12-16T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2858 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-12-16T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2854 | Roundcube: Mehrere Schwachstellen | 2025-12-15T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2849 | Red Hat Enterprise Linux (Keylime): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-15T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2814 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-12-10T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2586 | Red Hat Enterprise Linux (python-kdcproxy): Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2198 | MediaWiki: Mehrere Schwachstellen | 2025-10-05T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2115 | WordPress Core: Mehrere Schwachstellen | 2025-09-23T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1833 | IBM WebSphere Application Server: Schwachstelle ermöglicht Denial of Service | 2025-08-13T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1822 | Ruby on Rails: Mehrere Schwachstellen | 2025-08-13T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1807 | IBM WebSphere Application Server Liberty: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1757 | Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsmechanismen | 2025-08-11T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1591 | IBM WebSphere Application Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-17T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1582 | IBM WebSphere Application Server: Schwachstelle ermöglicht Denial of Service | 2025-07-16T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1335 | Apache Tomcat: Mehrere Schwachstellen | 2025-06-16T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1169 | Apache Commons BeanUtils: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-29T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1144 | GIMP: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-05-25T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0944 | GIMP: Schwachstelle ermöglicht Codeausführung | 2025-05-05T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0524 | Red Hat Ansible Automation Platform (Jinja): Schwachstelle ermöglicht Codeausführung | 2025-03-11T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0233 | Python: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-02-02T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2024-1504 | Apache HTTP Server: Mehrere Schwachstellen | 2024-07-01T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2024-0801 | Apache HTTP Server: Mehrere Schwachstellen ermöglichen Manipulation von Daten | 2024-04-04T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2023-2024 | Node.js: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2023-08-09T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2860 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-12-16T23:00:00.000+00:00 | 2025-12-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2857 | Apache Commons Text: Schwachstelle ermöglicht Codeausführung | 2025-12-16T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2846 | strongSwan (NetworkManager-Plugin): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-12-14T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2666 | vllm und PyTorch: Schwachstelle ermöglicht DoS und potenzielle Codeausführung | 2025-11-23T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2485 | cURL (wcurl): Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-03T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2404 | AMD “Zen 5” Prozessoren: Schwachstelle gefährdet Vertraulichkeit und Integrität | 2025-10-23T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2325 | xpdf: Schwachstelle ermöglicht Denial of Service | 2025-10-16T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0494 | Kwetsbaarheid verholpen in Fortinet FortiWLM | 2024-12-19T14:53:01.724784Z | 2024-12-19T14:53:01.724784Z |
| ncsc-2024-0493 | Kwetsbaarheid verholpen in BeyondTrust Privileged Remote Access | 2024-12-18T10:42:27.324531Z | 2024-12-18T10:42:27.324531Z |
| ncsc-2024-0491 | Kwetsbaarheden verholpen in XWiki Platform | 2024-12-13T10:04:20.533908Z | 2024-12-13T10:04:20.533908Z |
| ncsc-2024-0490 | Kwetsbaarheden verholpen in GitLab | 2024-12-13T10:03:05.321565Z | 2024-12-13T10:03:05.321565Z |
| ncsc-2024-0489 | Kwetsbaarheid verholpen in Schneider Electric Modicon | 2024-12-13T09:58:33.792150Z | 2024-12-13T09:58:33.792150Z |
| ncsc-2024-0488 | Kwetsbaarheden verholpen in macOS | 2024-12-12T10:31:34.869451Z | 2024-12-12T10:31:34.869451Z |
| ncsc-2024-0487 | Kwetsbaarheden verholpen in Apple iPadOS en iOS | 2024-12-12T10:30:17.550009Z | 2024-12-12T10:30:17.550009Z |
| ncsc-2024-0486 | Kwetsbaarheden verholpen in Ivanti Cloud Security Appliance | 2024-12-11T08:58:00.974296Z | 2024-12-11T08:58:00.974296Z |
| ncsc-2024-0485 | Kwetsbaarheid verholpen in Splunk Enterprise | 2024-12-11T08:53:56.285002Z | 2024-12-11T08:53:56.285002Z |
| ncsc-2024-0483 | Kwetsbaarheden verholpen in Adobe Connect | 2024-12-11T08:46:09.788540Z | 2024-12-11T08:46:09.788540Z |
| ncsc-2024-0482 | Kwetsbaarheden verholpen in Adobe Acrobat Reader | 2024-12-11T08:42:21.663200Z | 2024-12-11T08:42:21.663200Z |
| ncsc-2024-0481 | Kwetsbaarheden verholpen in Adobe Illustrator | 2024-12-11T08:37:21.228987Z | 2024-12-11T08:37:21.228987Z |
| ncsc-2024-0480 | Kwetsbaarheid verholpen in Adobe After Effects | 2024-12-11T08:34:49.812349Z | 2024-12-11T08:34:49.812349Z |
| ncsc-2024-0479 | Kwetsbaarheden verholpen in Animate | 2024-12-11T08:31:02.174506Z | 2024-12-11T08:31:02.174506Z |
| ncsc-2024-0478 | Kwetsbaarheden verholpen in Adobe InDesign Desktop | 2024-12-11T08:20:20.778758Z | 2024-12-11T08:20:20.778758Z |
| ncsc-2024-0477 | Kwetsbaarheid verholpen in Adobe Photoshop | 2024-12-11T08:17:46.923581Z | 2024-12-11T08:17:46.923581Z |
| ncsc-2024-0476 | Kwetsbaarheid verholpen in Adobe Premiere Pro | 2024-12-11T08:12:35.655333Z | 2024-12-11T08:12:35.655333Z |
| ncsc-2024-0475 | Kwetsbaarheid verholpen in Adobe Framemaker | 2024-12-11T08:06:34.387394Z | 2024-12-11T08:06:34.387394Z |
| ncsc-2024-0474 | Kwetsbaarheden verholpen in Drupal Core | 2024-12-10T19:35:37.345875Z | 2024-12-10T19:35:37.345875Z |
| ncsc-2024-0473 | Kwetsbaarheden verholpen in Siemens producten | 2024-12-10T19:34:53.515240Z | 2024-12-10T19:34:53.515240Z |
| ncsc-2024-0472 | Kwetsbaarheden verholpen in SAP producten | 2024-12-10T19:34:10.105945Z | 2024-12-10T19:34:10.105945Z |
| ncsc-2024-0471 | Kwetsbaarheden verholpen in Microsoft Office | 2024-12-10T19:33:29.415423Z | 2024-12-10T19:33:29.415423Z |
| ncsc-2024-0469 | Kwetsbaarheden verholpen in Qlik Sense Enterprise voor Windows | 2024-12-09T13:38:50.887753Z | 2024-12-09T13:38:50.887753Z |
| ncsc-2024-0468 | Kwetsbaarheden verholpen in Mitel MiCollab | 2024-12-09T13:37:33.039167Z | 2024-12-09T13:37:33.039167Z |
| ncsc-2024-0467 | Kwetsbaarheden verholpen in QNAP besturingssystemen | 2024-12-09T13:36:33.362104Z | 2024-12-09T13:36:33.362104Z |
| ncsc-2024-0466 | Kwetsbaarheden verholpen in Atlassian producten | 2024-12-06T13:05:55.904619Z | 2024-12-06T13:05:55.904619Z |
| ncsc-2024-0465 | Kwetsbaarheden verholpen in ABB ASPECT, NEXUS Series en MATRIX Series | 2024-12-06T11:49:21.695542Z | 2024-12-06T11:49:21.695542Z |
| ncsc-2024-0464 | Kwetsbaarheden verholpen in SonicWall SMA100 SSLVPN | 2024-12-06T11:48:08.461746Z | 2024-12-06T11:48:08.461746Z |
| ncsc-2024-0463 | Kwetsbaarheden verholpen in Veeam Backup & Replication | 2024-12-06T11:47:19.699742Z | 2024-12-06T11:47:19.699742Z |
| ncsc-2024-0462 | Kwetsbaarheden verholpen in Zabbix | 2024-12-02T12:51:47.361749Z | 2024-12-02T12:51:47.361749Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-761844 | SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) | 2021-04-13T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-761617 | SSA-761617: Authentication Bypass and Information Disclosure Vulnerabilities in SiNVR/SiVMS Video Server | 2019-12-10T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-702935 | SSA-702935: Redfish Server Vulnerability in maxView Storage Manager | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-589891 | SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-583634 | SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-570294 | SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 | 2022-11-08T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-480095 | SSA-480095: Vulnerabilities in the Web Interface of SICAM Q100 Devices before V2.60 | 2023-12-12T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-844761 | SSA-844761: Multiple Vulnerabilities in SiNVR/SiVMS Video Server | 2020-03-10T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-794653 | SSA-794653: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-786191 | SSA-786191: Local Privilege Escalation Vulnerability in Spectrum Power 7 | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-777015 | SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-772220 | SSA-772220: OpenSSL Vulnerabilities in Industrial Products | 2021-07-13T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-761844 | SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) | 2021-04-13T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-761617 | SSA-761617: Authentication Bypass and Information Disclosure Vulnerabilities in SiNVR/SiVMS Video Server | 2019-12-10T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-702935 | SSA-702935: Redfish Server Vulnerability in maxView Storage Manager | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-589891 | SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-583634 | SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-570294 | SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50 | 2022-11-08T00:00:00Z | 2024-01-09T00:00:00Z |
| SSA-480095 | SSA-480095: Vulnerabilities in the Web Interface of SICAM Q100 Devices before V2.60 | 2023-12-12T00:00:00Z | 2024-01-09T00:00:00Z |
| ssa-983300 | SSA-983300: Vulnerabilities in LOGO! Soft Comfort | 2021-04-13T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-892915 | SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-887801 | SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-618620 | SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices | 2019-12-10T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-118850 | SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| ssa-077170 | SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| SSA-887801 | SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| SSA-844582 | SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA | 2023-12-12T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-783481 | SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM | 2021-03-09T00:00:00Z | 2024-10-08T00:00:00Z |
| SSA-618620 | SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices | 2019-12-10T00:00:00Z | 2023-12-12T00:00:00Z |
| SSA-280603 | SSA-280603: Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC | 2023-12-12T00:00:00Z | 2024-09-10T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:0536 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.0 | 2025-01-21T16:57:37+00:00 | 2026-02-19T19:29:38+00:00 |
| rhsa-2025:0535 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.0 | 2025-01-21T16:56:55+00:00 | 2026-02-19T19:29:37+00:00 |
| rhsa-2025:0522 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release | 2025-01-21T15:04:18+00:00 | 2026-02-19T19:29:35+00:00 |
| rhsa-2025:0485 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.0 | 2025-01-21T05:59:40+00:00 | 2026-02-19T19:29:35+00:00 |
| rhsa-2025:0445 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.2 | 2025-01-20T21:49:53+00:00 | 2026-02-19T19:29:33+00:00 |
| rhsa-2025:0444 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.2 | 2025-01-20T21:35:36+00:00 | 2026-02-19T19:29:32+00:00 |
| rhsa-2025:0390 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.4 release | 2025-01-16T17:44:29+00:00 | 2026-02-19T19:29:31+00:00 |
| rhsa-2025:0386 | Red Hat Security Advisory: VolSync 0.10.2 for RHEL 9 | 2025-01-16T18:36:58+00:00 | 2026-02-19T19:29:30+00:00 |
| rhsa-2025:0385 | Red Hat Security Advisory: VolSync 0.11.1 for RHEL 9 | 2025-01-16T18:08:53+00:00 | 2026-02-19T19:29:29+00:00 |
| rhsa-2025:0370 | Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.4 release | 2025-01-16T11:44:17+00:00 | 2026-02-19T19:29:27+00:00 |
| rhsa-2024:7624 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.11 security and bug fix update | 2024-10-03T11:22:37+00:00 | 2026-02-19T19:29:27+00:00 |
| rhsa-2024:7164 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.4 security and bug fix update | 2024-09-26T03:46:53+00:00 | 2026-02-19T19:29:24+00:00 |
| rhsa-2024:6211 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.1 security update | 2024-09-03T10:05:20+00:00 | 2026-02-19T19:29:24+00:00 |
| rhsa-2024:6121 | Red Hat Security Advisory: OpenShift Container Platform 4.18.1 security and extras update | 2025-02-25T02:32:04+00:00 | 2026-02-19T19:29:20+00:00 |
| rhsa-2024:4873 | Red Hat Security Advisory: Apicurio Registry (container images) release and security update [ 2.6.1 GA ] | 2024-07-25T15:04:49+00:00 | 2026-02-19T19:29:18+00:00 |
| rhsa-2024:3868 | Red Hat Security Advisory: Network Observability 1.6.0 for OpenShift | 2024-06-17T00:43:37+00:00 | 2026-02-19T19:29:15+00:00 |
| rhsa-2024:11038 | Red Hat Security Advisory: OpenShift Container Platform 4.19.0 bug fix and security update | 2025-06-17T16:44:54+00:00 | 2026-02-19T19:29:08+00:00 |
| rhsa-2024:11037 | Red Hat Security Advisory: OpenShift Container Platform 4.19.0 security and extras update | 2025-06-17T16:07:37+00:00 | 2026-02-19T19:28:59+00:00 |
| rhea-2024:7870 | Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.16.0 release | 2024-10-09T14:44:53+00:00 | 2026-02-19T19:28:54+00:00 |
| rhsa-2025:4240 | Red Hat Security Advisory: Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog. | 2025-04-28T05:29:21+00:00 | 2026-02-19T19:14:55+00:00 |
| rhsa-2025:1747 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update | 2025-02-24T00:08:38+00:00 | 2026-02-19T19:14:53+00:00 |
| rhsa-2025:1116 | Red Hat Security Advisory: OpenShift Container Platform 4.13.55 bug fix and security update | 2025-02-13T02:27:35+00:00 | 2026-02-19T19:14:53+00:00 |
| rhsa-2025:0014 | Red Hat Security Advisory: OpenShift Container Platform 4.12.71 bug fix and security update | 2025-01-09T02:15:46+00:00 | 2026-02-19T19:14:53+00:00 |
| rhsa-2025:1746 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update | 2025-02-24T00:08:27+00:00 | 2026-02-19T19:14:52+00:00 |
| rhsa-2025:0832 | Red Hat Security Advisory: OpenShift Container Platform 4.12.72 bug fix and security update | 2025-02-06T00:45:40+00:00 | 2026-02-19T19:14:50+00:00 |
| rhsa-2024:6755 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.2 security and bug fix update | 2024-09-18T11:56:25+00:00 | 2026-02-19T19:14:50+00:00 |
| rhsa-2024:4631 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.15.0 release | 2024-07-18T17:11:22+00:00 | 2026-02-19T19:14:49+00:00 |
| rhsa-2024:4118 | Red Hat Security Advisory: Red Hat Ceph Storage 5.3 security, bug fix, and enhancement update | 2024-06-26T10:05:24+00:00 | 2026-02-19T19:14:49+00:00 |
| rhsa-2024:3927 | Red Hat Security Advisory: Red Hat Ceph Storage 7.1 container image security, and bug fix update | 2024-06-13T14:24:58+00:00 | 2026-02-19T19:14:47+00:00 |
| rhsa-2024:1770 | Red Hat Security Advisory: OpenShift Container Platform 4.15.9 bug fix and security update | 2024-04-16T14:52:58+00:00 | 2026-02-19T19:14:47+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-16-145-01a | Moxa MiiNePort Vulnerabilities | 2016-02-25T07:00:00.000000Z | 2025-06-20T18:15:20.614865Z |
| va-25-171-01 | ClamAV | 2025-06-20T00:00:00Z | 2025-06-20T00:00:00Z |
| icsa-12-265-01 | Emerson DeltaV Buffer Overflow | 2012-06-25T06:00:00.000000Z | 2025-06-19T22:40:48.319564Z |
| icsa-12-258-01 | IOServer OPC Server Multiple Vulnerabilities | 2012-06-18T06:00:00.000000Z | 2025-06-19T22:40:41.973320Z |
| icsa-15-034-01 | Siemens SCALANCE X-200IRT Switch Family User Impersonation Vulnerability | 2015-11-06T07:00:00.000000Z | 2025-06-18T19:25:20.526318Z |
| icsa-13-022-02 | GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities | 2013-10-26T06:00:00.000000Z | 2025-06-18T19:25:08.106052Z |
| icsa-12-354-01a | Ruggedcom ROS Hard-Coded RSA SSL Private Key | 2012-09-22T06:00:00.000000Z | 2025-06-18T19:25:01.798871Z |
| icsa-12-342-01b | Rockwell Allen-Bradley MicroLogix, SLC 500, and PLC-5 Fault Generation Vulnerability | 2012-09-10T06:00:00.000000Z | 2025-06-18T19:24:55.231514Z |
| icsa-12-249-03 | InduSoft ISSymbol ActiveX Control Buffer Overflow | 2012-06-09T06:00:00.000000Z | 2025-06-18T19:04:35.253383Z |
| icsa-12-228-01a | Tridium Niagara Vulnerabilities | 2012-05-19T06:00:00.000000Z | 2025-06-18T19:04:29.046428Z |
| icsa-15-099-01e | Siemens SIMATIC HMI Devices Vulnerabilities (Update E) | 2015-01-10T07:00:00.000000Z | 2025-06-18T19:04:22.822443Z |
| icsa-15-146-01 | Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service | 2015-02-26T07:00:00.000000Z | 2025-06-18T19:04:16.618149Z |
| icsa-15-153-01 | Beckwith Electric TCP Initial Sequence Vulnerability | 2015-03-05T07:00:00.000000Z | 2025-06-18T19:04:10.391763Z |
| icsa-15-169-02 | Schneider Electric Wonderware System Platform Vulnerabilities | 2015-03-21T06:00:00.000000Z | 2025-06-18T19:04:04.192744Z |
| icsa-15-169-01b | Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B) | 2015-03-21T06:00:00.000000Z | 2025-06-18T19:03:57.981923Z |
| icsa-12-032-03 | GE Intelligent Platforms Proficy Real-Time Information Portal Directory Traversal | 2012-11-04T06:00:00.000000Z | 2025-06-18T19:03:51.787688Z |
| icsa-12-079-01 | Microsoft Remote Desktop Protocol Memory Corruption Vulnerability | 2012-12-21T07:00:00.000000Z | 2025-06-18T19:03:45.218685Z |
| icsa-10-348-01a | Wonderware InBatch Vulnerability | 2010-09-16T06:00:00.000000Z | 2025-06-17T16:50:19.269504Z |
| icsa-10-322-02a | Automated Solutions OPC Vulnerability | 2010-08-21T06:00:00.000000Z | 2025-06-17T16:50:13.013737Z |
| icsa-16-343-01 | Moxa MiiNePort Session Hijack Vulnerabilities | 2016-09-11T06:00:00.000000Z | 2025-06-17T16:50:00.161907Z |
| icsa-12-047-01a | Advantech WebAccess Vulnerabilities | 2012-11-19T07:00:00.000000Z | 2025-06-17T15:46:30.792399Z |
| icsa-12-150-01 | Honeywell HMIWeb Browser Buffer Overflow Vulnerability | 2012-03-02T07:00:00.000000Z | 2025-06-17T15:46:24.572627Z |
| icsa-12-146-01a | RuggedCom Weak Cryptography for Password Vulnerability | 2012-02-26T07:00:00.000000Z | 2025-06-17T15:46:18.307459Z |
| icsa-12-138-01 | Emerson DeltaV Multiple Vulnerabilities | 2012-02-18T07:00:00.000000Z | 2025-06-17T15:45:47.164093Z |
| icsa-12-062-01 | Wonderware Information Server Multiple Vulnerabilities | 2012-12-04T07:00:00.000000Z | 2025-06-17T15:45:28.468819Z |
| icsa-12-059-01 | ABB Robot Communications Runtime Buffer Overflow | 2012-12-01T07:00:00.000000Z | 2025-06-17T15:45:21.808130Z |
| icsa-25-168-05 | Dover Fueling Solutions ProGauge MagLink LX consoles | 2025-06-17T06:00:00.000000Z | 2025-06-17T06:00:00.000000Z |
| icsa-25-168-04 | Fuji Electric Smart Editor | 2025-06-17T06:00:00.000000Z | 2025-06-17T06:00:00.000000Z |
| icsa-25-168-02 | LS Electric GMWin 4 | 2025-06-17T06:00:00.000000Z | 2025-06-17T06:00:00.000000Z |
| va-25-136-01 | IBM Security Guardium stored cross-site scripting | 2025-05-16T20:14:51Z | 2025-06-16T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asaftd-saml-bypass-kknvxykw | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Authorization Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-asaftd-saml-bypass-KkNvXyKW | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Authorization Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-asaftd-ogsnsg-aclbyp-3xb8q6jx | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-asaftd-ogsnsg-aclbyp-3XB8q6jX | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability | 2024-05-22T16:00:00+00:00 | 2024-05-22T16:00:00+00:00 |
| cisco-sa-asaftd-dos-njvawoeq | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability | 2022-04-27T16:00:00+00:00 | 2024-05-22T15:57:10+00:00 |
| cisco-sa-asaftd-dos-nJVAwOeq | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability | 2022-04-27T16:00:00+00:00 | 2024-05-22T15:57:10+00:00 |
| cisco-sa-cucm-apidos-pgsdcdnf | Multiple Cisco Unified Communications Products Unauthenticated API High CPU Utilization Denial of Service Vulnerability | 2023-10-04T16:00:00+00:00 | 2024-05-17T15:07:50+00:00 |
| cisco-sa-secure-nam-priv-esc-szu2vypz | Cisco Secure Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-nso-rwpesc-qrqgnh3f | Cisco Crosswork Network Services Orchestrator Vulnerabilities | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-nso-rwpesc-qrQGnh3f | Cisco Crosswork Network Services Orchestrator Vulnerabilities | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-nso-ordir-mnm8yqzo | Cisco Crosswork Network Services Orchestrator Open Redirect Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-nso-ordir-MNM8YqzO | Cisco Crosswork Network Services Orchestrator Open Redirect Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-nso-hcc-priv-esc-owbwcs5d | Cisco Crosswork Network Services Orchestrator Privilege Escalation Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-nso-hcc-priv-esc-OWBWCs5D | Cisco Crosswork Network Services Orchestrator Privilege Escalation Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-cnfd-rwpesc-zaoufyx8 | ConfD CLI Privilege Escalation and Arbitrary File Read and Write Vulnerabilities | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-appd-netvisdos-9znbsjtk | Cisco AppDynamics Network Visibility Service Denial of Service Vulnerability | 2024-05-15T16:00:00+00:00 | 2024-05-15T16:00:00+00:00 |
| cisco-sa-ipphone-multi-vulns-cxahcvs | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Vulnerabilities | 2024-05-01T16:00:00+00:00 | 2024-05-01T16:00:00+00:00 |
| cisco-sa-asaftd-websrvs-dos-x8gnucd2 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Web Services Denial of Service Vulnerability | 2024-04-24T16:00:00+00:00 | 2024-04-24T16:00:00+00:00 |
| cisco-sa-asaftd-websrvs-dos-X8gNucD2 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Web Services Denial of Service Vulnerability | 2024-04-24T16:00:00+00:00 | 2024-04-24T16:00:00+00:00 |
| cisco-sa-asaftd-persist-rce-flsnxf4h | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-04-24T16:00:00+00:00 | 2024-04-24T16:00:00+00:00 |
| cisco-sa-asaftd-persist-rce-FLsNXF4h | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-04-24T16:00:00+00:00 | 2024-04-24T16:00:00+00:00 |
| cisco-sa-asaftd-cmd-inj-zjv8wysm | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Command Injection Vulnerability | 2024-04-24T16:00:00+00:00 | 2024-04-24T16:00:00+00:00 |
| cisco-sa-asaftd-cmd-inj-ZJV8Wysm | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Command Injection Vulnerability | 2024-04-24T16:00:00+00:00 | 2024-04-24T16:00:00+00:00 |
| cisco-sa-snmp-uwbxfqww | Cisco IOS and IOS XE Software SNMP Extended Named Access Control List Bypass Vulnerability | 2024-04-17T16:00:00+00:00 | 2024-04-17T16:00:00+00:00 |
| cisco-sa-snmp-uwBXfqww | Cisco IOS and IOS XE Software SNMP Extended Named Access Control List Bypass Vulnerability | 2024-04-17T16:00:00+00:00 | 2024-04-17T16:00:00+00:00 |
| cisco-sa-ios-dos-hq4d3tzg | Cisco IOS Software for Catalyst 6000 Series Switches Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-04-04T15:31:55+00:00 |
| cisco-sa-tms-xss-kgw4dx9y | Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-sbiz-rv-xss-oqertup | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Cross-Site Scripting Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ndru-pesc-kz2pqlzh | Cisco Nexus Dashboard Privilege Escalation Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ndo-upav-yrqsccsp | Cisco Nexus Dashboard Orchestrator Unauthorized Policy Actions Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-41110 | Moby authz zero length regression | 2024-07-01T07:00:00.000Z | 2026-02-18T02:45:10.000Z |
| msrc_cve-2024-58098 | bpf: track changes_pkt_data property for global functions | 2025-05-02T00:00:00.000Z | 2026-02-18T02:44:57.000Z |
| msrc_cve-2022-3650 | A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump and dump privileged information. | 2023-01-04T00:00:00.000Z | 2026-02-18T02:44:53.000Z |
| msrc_cve-2023-3978 | Improper rendering of text nodes in golang.org/x/net/html | 2023-08-01T00:00:00.000Z | 2026-02-18T02:44:49.000Z |
| msrc_cve-2025-38234 | sched/rt: Fix race in push_rt_task | 2025-07-02T00:00:00.000Z | 2026-02-18T02:44:42.000Z |
| msrc_cve-2023-29400 | Improper handling of empty HTML attributes in html/template | 2023-05-01T00:00:00.000Z | 2026-02-18T02:44:34.000Z |
| msrc_cve-2022-30767 | nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. | 2022-05-02T00:00:00.000Z | 2026-02-18T02:44:32.000Z |
| msrc_cve-2024-40902 | jfs: xattr: fix buffer overflow for invalid xattr | 2024-07-01T07:00:00.000Z | 2026-02-18T02:44:20.000Z |
| msrc_cve-2024-49881 | ext4: update orig_path in ext4_find_extent() | 2024-10-01T07:00:00.000Z | 2026-02-18T02:44:16.000Z |
| msrc_cve-2025-37739 | f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() | 2025-05-02T00:00:00.000Z | 2026-02-18T02:44:14.000Z |
| msrc_cve-2025-38183 | net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() | 2025-07-02T00:00:00.000Z | 2026-02-18T02:44:01.000Z |
| msrc_cve-2023-0664 | A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system. | 2023-03-10T00:00:00.000Z | 2026-02-18T02:43:46.000Z |
| msrc_cve-2025-37805 | sound/virtio: Fix cancel_sync warnings on uninitialized work_structs | 2025-05-02T00:00:00.000Z | 2026-02-18T02:43:41.000Z |
| msrc_cve-2024-49893 | drm/amd/display: Check stream_status before it is used | 2024-10-01T07:00:00.000Z | 2026-02-18T02:43:33.000Z |
| msrc_cve-2024-39494 | ima: Fix use-after-free on a dentry's dname.name | 2024-07-01T07:00:00.000Z | 2026-02-18T02:43:32.000Z |
| msrc_cve-2025-38231 | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 2025-07-02T00:00:00.000Z | 2026-02-18T02:43:31.000Z |
| msrc_cve-2024-57254 | An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. | 2025-02-02T00:00:00.000Z | 2026-02-18T02:43:20.000Z |
| msrc_cve-2024-0752 | A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122. | 2024-01-01T08:00:00.000Z | 2026-02-18T02:43:18.000Z |
| msrc_cve-2025-61105 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2026-02-18T02:43:12.000Z |
| msrc_cve-2024-27316 | Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames | 2024-04-02T07:00:00.000Z | 2026-02-18T02:43:12.000Z |
| msrc_cve-2025-37857 | scsi: st: Fix array overflow in st_setup() | 2025-05-02T00:00:00.000Z | 2026-02-18T02:43:07.000Z |
| msrc_cve-2022-25881 | This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server when that server reads the cache policy from the request using this library. | 2023-01-04T00:00:00.000Z | 2026-02-18T02:42:48.000Z |
| msrc_cve-2024-49930 | wifi: ath11k: fix array out-of-bound access in SoC stats | 2024-10-01T07:00:00.000Z | 2026-02-18T02:42:47.000Z |
| msrc_cve-2024-39495 | greybus: Fix use-after-free bug in gb_interface_release due to race condition. | 2024-07-01T07:00:00.000Z | 2026-02-18T02:42:45.000Z |
| msrc_cve-2025-38201 | netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX | 2025-07-02T00:00:00.000Z | 2026-02-18T02:42:44.000Z |
| msrc_cve-2025-14178 | Heap buffer overflow in array_merge() | 2025-12-02T00:00:00.000Z | 2026-02-18T02:42:39.000Z |
| msrc_cve-2025-61102 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2026-02-18T02:42:38.000Z |
| msrc_cve-2025-37851 | fbdev: omapfb: Add 'plane' value check | 2025-05-02T00:00:00.000Z | 2026-02-18T02:42:37.000Z |
| msrc_cve-2024-45009 | mptcp: pm: only decrement add_addr_accepted for MPJ req | 2024-09-01T07:00:00.000Z | 2026-02-18T02:42:35.000Z |
| msrc_cve-2022-34835 | In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function. | 2022-06-02T00:00:00.000Z | 2026-02-18T02:42:33.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15722-1 | hauler-1.3.1-1.1 on GA media | 2025-11-10T00:00:00Z | 2025-11-10T00:00:00Z |
| opensuse-su-2025:15721-1 | incus-6.17-2.1 on GA media | 2025-11-09T00:00:00Z | 2025-11-09T00:00:00Z |
| opensuse-su-2025:15720-1 | chromedriver-142.0.7444.134-1.1 on GA media | 2025-11-08T00:00:00Z | 2025-11-08T00:00:00Z |
| opensuse-su-2025:20026-1 | Security update for MozillaThunderbird | 2025-11-07T12:08:41Z | 2025-11-07T12:08:41Z |
| opensuse-su-2025-20026-1 | Security update for MozillaThunderbird | 2025-11-07T12:08:41Z | 2025-11-07T12:08:41Z |
| opensuse-su-2025:15719-1 | xen-4.20.1_08-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15718-1 | tomcat11-11.0.13-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15717-1 | tomcat10-10.1.48-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15716-1 | tomcat-9.0.111-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15715-1 | squid-7.3-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15714-1 | libshibsp-lite12-3.5.1-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15713-1 | python315-3.15.0~a1-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15712-1 | python311-Django-5.2.8-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15711-1 | opentofu-1.10.7-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15710-1 | govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15709-1 | google-osconfig-agent-20251028.00-1.1 on GA media | 2025-11-07T00:00:00Z | 2025-11-07T00:00:00Z |
| opensuse-su-2025:15708-1 | python311-Django4-4.2.26-1.1 on GA media | 2025-11-06T00:00:00Z | 2025-11-06T00:00:00Z |
| opensuse-su-2025:15707-1 | ghostscript-10.06.0-2.1 on GA media | 2025-11-06T00:00:00Z | 2025-11-06T00:00:00Z |
| opensuse-su-2025:15706-1 | erlang-28.1.1-1.1 on GA media | 2025-11-06T00:00:00Z | 2025-11-06T00:00:00Z |
| opensuse-su-2025:15705-1 | runc-1.3.3-1.1 on GA media | 2025-11-05T00:00:00Z | 2025-11-05T00:00:00Z |
| opensuse-su-2025:15704-1 | zellij-0.43.1-2.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15703-1 | kubecolor-0.5.3-1.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15702-1 | kernel-devel-6.17.7-1.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15701-1 | java-1_8_0-openjdk-1.8.0.472-1.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15700-1 | OpenSMTPD-7.8.0p0-1.1 on GA media | 2025-11-04T00:00:00Z | 2025-11-04T00:00:00Z |
| opensuse-su-2025:15699-1 | python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media | 2025-11-03T00:00:00Z | 2025-11-03T00:00:00Z |
| opensuse-su-2025:15698-1 | redis-8.2.3-1.1 on GA media | 2025-11-02T00:00:00Z | 2025-11-02T00:00:00Z |
| opensuse-su-2025:15697-1 | kumactl-2.12.3-1.1 on GA media | 2025-11-02T00:00:00Z | 2025-11-02T00:00:00Z |
| opensuse-su-2025:15696-1 | python311-starlette-0.49.1-1.1 on GA media | 2025-11-01T00:00:00Z | 2025-11-01T00:00:00Z |
| opensuse-su-2025:15695-1 | govulncheck-vulndb-0.0.20251029T215107-1.1 on GA media | 2025-11-01T00:00:00Z | 2025-11-01T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2025-84 | Segv on unknown address in Flow::processExtraDissectedInformation | 2025-02-02T00:12:09.563391Z | 2025-02-02T00:12:09.563778Z |
| osv-2025-81 | Segv on unknown address in ndpi_serialize_string_string | 2025-02-02T00:02:52.946833Z | 2025-02-02T00:02:52.947083Z |
| osv-2025-80 | Segv on unknown address in ndpi_snprintf | 2025-02-02T00:00:58.798346Z | 2025-02-02T00:00:58.798951Z |
| osv-2024-847 | Null-dereference READ in _libssh2_packet_add | 2024-08-16T00:04:07.189033Z | 2025-02-01T14:27:03.602163Z |
| osv-2022-24 | Null-dereference READ in session_startup | 2022-01-09T00:01:35.903934Z | 2025-02-01T14:16:58.476563Z |
| osv-2024-1124 | Heap-buffer-overflow in ih264d_read_coeff4x4_cabac | 2024-09-21T00:14:26.784483Z | 2025-01-31T14:23:52.455197Z |
| osv-2025-74 | Stack-buffer-overflow in xmlValidateElementContent | 2025-01-29T00:13:55.386256Z | 2025-01-29T00:13:55.386629Z |
| osv-2025-63 | Stack-buffer-underflow in gs_type1_interpret | 2025-01-27T00:10:00.833706Z | 2025-01-27T00:10:00.834151Z |
| osv-2025-61 | Heap-buffer-overflow in oatpp::json::Utils::escapeString | 2025-01-27T00:00:09.905879Z | 2025-01-27T00:00:09.906561Z |
| osv-2024-1424 | Heap-buffer-overflow in extract_candidate | 2025-01-25T00:17:13.787335Z | 2025-01-25T14:25:05.188301Z |
| osv-2024-1423 | Security exception in java.base/java.util.Arrays.copyOfRange | 2025-01-25T00:03:24.362190Z | 2025-01-25T00:03:24.362579Z |
| osv-2025-51 | Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame | 2025-01-22T00:03:50.355443Z | 2025-01-24T14:26:07.849301Z |
| osv-2025-52 | Use-of-uninitialized-value in icalmemory_strdup | 2025-01-22T00:07:34.573371Z | 2025-01-22T00:07:34.573823Z |
| osv-2025-50 | Heap-double-free in r_crbtree_free | 2025-01-20T00:16:43.389094Z | 2025-01-20T00:16:43.389604Z |
| osv-2025-45 | Security exception in POIHDGFFuzzer | 2025-01-19T00:14:10.746839Z | 2025-01-19T00:14:10.747322Z |
| osv-2025-42 | Heap-use-after-free in r_list_free | 2025-01-19T00:06:58.533546Z | 2025-01-19T00:06:58.534017Z |
| osv-2025-32 | UNKNOWN READ in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch | 2025-01-16T00:01:09.535772Z | 2025-01-16T00:01:09.536403Z |
| osv-2024-343 | Heap-buffer-overflow in pcpp::BgpUpdateMessageLayer::setPathAttributes | 2024-04-30T00:02:38.268026Z | 2025-01-13T14:51:10.266632Z |
| osv-2023-1201 | Negative-size-param in pcpp::RawPacket::insertData | 2023-11-23T13:01:26.936730Z | 2025-01-13T14:49:54.727943Z |
| osv-2023-862 | Heap-use-after-free in g_datalist_get_flags | 2023-09-16T14:01:07.280790Z | 2025-01-10T05:49:31.753574Z |
| osv-2024-1066 | Heap-buffer-overflow in StrLen | 2024-09-13T00:14:35.159638Z | 2025-01-10T05:47:49.595046Z |
| osv-2024-251 | Heap-use-after-free in gx_device_forward_finalize | 2024-04-12T00:02:31.478145Z | 2025-01-10T05:30:43.786965Z |
| osv-2024-379 | UNKNOWN READ in H5SL_first | 2024-04-30T00:12:09.539697Z | 2025-01-10T05:30:29.297578Z |
| osv-2024-853 | UNKNOWN READ in chunk_free_object | 2024-08-16T00:04:58.897243Z | 2025-01-10T05:30:16.360095Z |
| osv-2024-1230 | Heap-buffer-overflow in extract_rtpmap | 2024-10-19T00:00:26.792754Z | 2025-01-10T05:21:03.406469Z |
| osv-2024-460 | UNKNOWN READ in glslang::TInfoSinkBase::location | 2024-05-11T00:04:46.149516Z | 2025-01-10T05:21:00.966877Z |
| osv-2024-978 | Stack-buffer-overflow in narrow_conv_backprop | 2024-08-16T00:15:00.390591Z | 2025-01-10T05:19:36.120081Z |
| osv-2024-832 | UNKNOWN READ in Pistache::Http::Header::Expect::parseRaw | 2024-08-16T00:03:13.834235Z | 2025-01-10T05:18:27.558670Z |
| osv-2023-1170 | UNKNOWN READ in loader_log | 2023-11-16T13:02:54.951826Z | 2025-01-10T05:15:17.036441Z |
| osv-2024-1090 | UNKNOWN READ in ggml_free | 2024-09-19T00:00:17.390184Z | 2025-01-10T05:12:48.974830Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2021-0124 | Data race when sending and receiving after closing a `oneshot` channel | 2021-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0123 | Converting `NSString` to a String Truncates at Null Bytes | 2021-11-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0122 | Generated code can read and write out of bounds in safe code | 2021-10-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0121 | Non-aligned u32 read in Chacha20 encryption and decryption | 2021-10-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0120 | abomonation transmutes &T to and from &[u8] without sufficient constraints | 2021-10-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0119 | Out-of-bounds write in nix::unistd::getgrouplist | 2021-09-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0118 | `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets | 2021-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0117 | `DecimalArray` does not perform bound checks on accessing values and offsets | 2021-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0116 | `BinaryArray` does not perform bound checks on reading values and offsets | 2021-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0115 | `#[zeroize(drop)]` doesn't implement `Drop` for `enum`s | 2021-09-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0114 | Aliased mutable references from `tls_rand` & `TlsWyRand` | 2021-09-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0113 | AtomicBucket<T> unconditionally implements Send/Sync | 2021-04-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0112 | `Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate) | 2021-02-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0111 | Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state` | 2021-09-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0110 | Multiple Vulnerabilities in Wasmtime | 2021-09-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0109 | Process crashes when the cell used as DepGroup is not alive | 2021-07-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0108 | Remote memory exhaustion in ckb | 2021-07-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0107 | Miner fails to get block template when a cell used as a cell dep has been destroyed. | 2021-07-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0103 | Partial read is incorrect in molecule | 2021-07-30T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0100 | Miscomputed results when using AVX2 backend | 2021-09-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0098 | Read buffer overruns processing ASN.1 strings | 2021-08-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0097 | SM2 Decryption Buffer Overflow | 2021-08-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0095 | `mopa` is technically unsound | 2021-06-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0094 | Window can read out of bounds if Read instance returns more bytes than buffer size | 2021-02-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0092 | Deserialization functions pass uninitialized memory to user-provided Read | 2021-01-26T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0091 | Reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` ) | 2021-01-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0090 | Reading on uninitialized memory may cause UB ( `util::read_spv()` ) | 2021-01-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0089 | Optional `Deserialize` implementations lacking validation | 2021-01-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0088 | `Read` on uninitialized memory may cause UB (fn preamble_skipcount()) | 2021-01-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0086 | `Read` on uninitialized buffer may cause UB ( `read_entry()` ) | 2021-01-07T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-superset-2022-43720 | Apache Superset: Improper rendering of user input | 2025-02-05T07:28:59.302Z | 2025-11-06T13:25:46.476Z |
| bit-superset-2022-43719 | Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API | 2025-02-05T07:29:05.011Z | 2025-11-06T13:25:46.476Z |
| bit-superset-2022-43718 | Apache Superset: Cross-Site Scripting vulnerability on upload forms | 2025-02-05T07:29:11.197Z | 2025-11-06T13:25:46.476Z |
| bit-superset-2022-43717 | Apache Superset: Cross-Site Scripting on dashboards | 2025-02-05T07:29:16.011Z | 2025-11-06T13:25:46.476Z |
| bit-superset-2022-41703 | Apache Superset: SQL injection vulnerability in adhoc clauses | 2025-02-05T07:29:20.796Z | 2025-11-06T13:25:46.476Z |
| bit-sqlite-2025-6965 | Integer Truncation on SQLite | 2025-07-16T18:03:02.187Z | 2025-11-06T13:25:46.476Z |
| bit-sqlite-2023-7104 | SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow | 2024-03-06T11:05:41.196Z | 2025-11-06T13:25:46.476Z |
| bit-sqlite-2021-36690 | 2024-03-06T11:06:24.567Z | 2025-11-06T13:25:46.476Z | |
| bit-setuptools-2022-40897 | 2024-03-06T11:04:50.199Z | 2025-11-06T13:25:46.476Z | |
| bit-ruby-2024-27282 | 2024-06-04T09:56:49.809Z | 2025-11-06T13:25:46.476Z | |
| bit-ruby-2023-28756 | 2024-03-06T11:04:05.363Z | 2025-11-06T13:25:46.476Z | |
| bit-ruby-2022-28739 | 2024-03-06T11:04:15.708Z | 2025-11-06T13:25:46.476Z | |
| bit-ruby-2021-33621 | 2024-03-06T11:05:00.460Z | 2025-11-06T13:25:46.476Z | |
| bit-ruby-2020-5247 | HTTP Response Splitting in Puma | 2024-03-06T11:05:50.672Z | 2025-11-06T13:25:46.476Z |
| bit-redis-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 2025-10-16T09:18:53.323Z | 2025-11-06T13:25:46.476Z |
| bit-redis-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 2025-10-08T08:51:28.594Z | 2025-11-06T13:25:46.476Z |
| bit-redis-2024-31228 | Denial-of-service due to unbounded pattern matching in Redis | 2024-10-09T16:41:13.129Z | 2025-11-06T13:25:46.476Z |
| bit-redis-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panic | 2024-03-06T11:05:24.585Z | 2025-11-06T13:25:46.476Z |
| bit-python-2025-0938 | URL parser allowed square brackets in domain names | 2025-04-14T11:35:18.242Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-9287 | Virtual environment (venv) activation scripts don't quote paths | 2024-12-13T12:39:42.210Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-8088 | Infinite loop when iterating over zip archive entry names from zipfile.Path | 2025-04-14T11:34:52.441Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-7592 | Quadratic complexity parsing cookies with backslashes | 2024-09-16T12:03:55.576Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-6923 | Email header injection due to unquoted newlines | 2024-08-19T09:33:54.548Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-6232 | Regular-expression DoS when parsing TarFile headers | 2024-09-16T12:04:20.671Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-4032 | Incorrect IPv4 and IPv6 private ranges | 2024-06-20T11:17:24.961Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-11168 | Improper validation of IPv6 and IPvFuture addresses | 2024-12-10T11:25:45.323Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-0450 | Quoted zip-bomb protection for zipfile | 2024-12-13T12:41:10.011Z | 2025-11-06T13:25:46.476Z |
| bit-python-2024-0397 | Memory race condition in ssl.SSLContext certificate store methods | 2024-06-20T11:18:14.556Z | 2025-11-06T13:25:46.476Z |
| bit-python-2023-6597 | 2024-12-13T12:41:26.412Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2023-40217 | 2024-03-06T11:03:14.481Z | 2025-11-06T13:25:46.476Z |
| ID | Description | Updated |
|---|---|---|
| var-201912-0636 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:24:52.133000Z |
| var-200102-0077 | Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attacker… | 2024-07-23T21:24:52.601000Z |
| var-200504-0293 | Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allo… | 2024-07-23T21:24:51.414000Z |
| var-202006-1831 | A memory corruption issue was addressed with improved state management. This issue is fix… | 2024-07-23T21:24:50.411000Z |
| var-202106-0349 | Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to pote… | 2024-07-23T21:24:47.280000Z |
| var-201410-1144 | Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0… | 2024-07-23T21:24:46.357000Z |
| var-200809-0190 | Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 throug… | 2024-07-23T21:24:45.643000Z |
| var-200701-0295 | The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML … | 2024-07-23T21:24:06.215000Z |
| var-202003-1779 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2024-07-23T21:23:59.719000Z |
| var-201304-0317 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:23:59.799000Z |
| var-200110-0170 | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Cry… | 2024-07-23T21:23:39.977000Z |
| var-201504-0150 | cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate con… | 2024-07-23T21:23:08.257000Z |
| var-202108-2123 | A memory corruption vulnerability was addressed with improved locking. This issue is fixe… | 2024-07-23T21:23:07.966000Z |
| var-201503-0388 | Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c i… | 2024-07-23T21:23:07.716000Z |
| var-201003-1075 | Use-after-free vulnerability in the abstract file-descriptor handling interface in the cu… | 2024-07-23T21:23:07.044000Z |
| var-200801-0561 | Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 th… | 2024-07-23T21:23:07.143000Z |
| var-201711-0454 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T21:23:03.598000Z |
| var-201506-0264 | The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.… | 2024-07-23T21:23:02.233000Z |
| var-202004-0812 | In ksh version 20120801, a flaw was found in the way it evaluates certain environment var… | 2024-07-23T21:22:46.394000Z |
| var-200506-0133 | Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow r… | 2024-07-23T21:22:45.018000Z |
| var-202001-0472 | Insufficient control flow in certain data structures for some Intel(R) Processors with In… | 2024-07-23T21:22:25.122000Z |
| var-201710-1406 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2024-07-23T21:22:23.796000Z |
| var-201302-0233 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:21:52.515000Z |
| var-201105-0197 | Unspecified vulnerability in the Java Embedding Plugin (JEP) in Mozilla Firefox before 3.… | 2024-07-23T21:21:47.763000Z |
| var-200803-0028 | The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unu… | 2024-07-23T21:21:47.664000Z |
| var-201311-0106 | Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1… | 2024-07-23T21:21:38.043000Z |
| var-201904-1401 | A cross-site scripting issue existed in Safari. This issue was addressed with improved UR… | 2024-07-23T21:21:37.851000Z |
| var-202004-2200 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T21:21:06.954000Z |
| var-201912-0525 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 1… | 2024-07-23T21:21:06.108000Z |
| var-200312-0218 | OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recu… | 2024-07-23T21:21:01.334000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000057 | Multiple vulnerabilities in UNIVERSAL PASSPORT RX | 2024-06-03T15:32+09:00 | 2024-06-03T15:32+09:00 |
| jvndb-2022-000090 | Multiple vulnerabilities in Movable Type | 2022-11-16T17:07+09:00 | 2024-06-03T15:31+09:00 |
| jvndb-2022-000092 | Typora fails to properly neutralize JavaScript code. | 2022-11-21T15:31+09:00 | 2024-06-03T15:13+09:00 |
| jvndb-2024-003254 | Seiko Solutions SkyBridge MB-A100/MB-A110 and SkyBridge BASIC MB-A130 vulnerable to OS command injection | 2024-06-03T14:53+09:00 | 2024-06-03T14:53+09:00 |
| jvndb-2024-003253 | Multiple vulnerabilities in Sharp and Toshiba Tec MFPs | 2024-06-03T14:36+09:00 | 2024-06-03T14:36+09:00 |
| jvndb-2022-000094 | Multiple cross-site scripting vulnerabilities in baserCMS | 2022-11-25T13:42+09:00 | 2024-05-31T18:17+09:00 |
| jvndb-2022-002761 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-11-21T18:25+09:00 | 2024-05-31T17:43+09:00 |
| jvndb-2022-000078 | bingo!CMS vulnerable to authentication bypass | 2022-10-11T17:49+09:00 | 2024-05-30T17:57+09:00 |
| jvndb-2022-002836 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-12-26T16:21+09:00 | 2024-05-30T17:47+09:00 |
| jvndb-2022-002451 | Multiple vulnerabilities in SVMPC1 and SVMPC2 | 2022-10-13T17:27+09:00 | 2024-05-30T16:38+09:00 |
| jvndb-2023-000037 | Joruri Gw vulnerable to cross-site scripting | 2023-04-17T14:19+09:00 | 2024-05-30T16:19+09:00 |
| jvndb-2023-001493 | Multiple mobile printing apps for Android vulnerable to improper intent handling | 2023-04-13T11:09+09:00 | 2024-05-30T15:48+09:00 |
| jvndb-2023-000038 | EC-CUBE plugin "NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)" vulnerable to authentication bypass | 2023-04-19T14:06+09:00 | 2024-05-30T15:11+09:00 |
| jvndb-2024-000056 | awkblog vulnerable to OS command injection | 2024-05-30T14:39+09:00 | 2024-05-30T14:39+09:00 |
| jvndb-2023-001411 | Yokogawa Electric CENTUM series vulnerable to cleartext storage of sensitive information | 2023-04-06T14:59+09:00 | 2024-05-29T18:23+09:00 |
| jvndb-2022-000097 | Multiple vulnerabilities in DENSHI NYUSATSU CORE SYSTEM | 2022-12-15T15:18+09:00 | 2024-05-29T17:40+09:00 |
| jvndb-2023-000031 | Multiple vulnerabilities in JustSystems products | 2023-04-04T15:22+09:00 | 2024-05-29T17:32+09:00 |
| jvndb-2023-000035 | Improper restriction of XML external entity references (XXE) in Shinseiyo Sogo Soft | 2023-04-19T14:49+09:00 | 2024-05-29T16:58+09:00 |
| jvndb-2023-000034 | JB Inquiry form vulnerable to exposure of private personal information to an unauthorized actor | 2023-04-14T15:48+09:00 | 2024-05-29T16:44+09:00 |
| jvndb-2023-000050 | Multiple vulnerabilities in WordPress Plugin "MW WP Form" and "Snow Monkey Forms" | 2023-05-15T14:29+09:00 | 2024-05-29T16:27+09:00 |
| jvndb-2024-000055 | Redmine DMSF Plugin vulnerable to path traversal | 2024-05-29T14:13+09:00 | 2024-05-29T14:13+09:00 |
| jvndb-2024-000054 | EC-Orange vulnerable to authorization bypass | 2024-05-29T14:06+09:00 | 2024-05-29T14:06+09:00 |
| jvndb-2024-003249 | ELECOM wireless LAN routers vulnerable to OS command injection | 2024-05-29T12:33+09:00 | 2024-05-29T12:33+09:00 |
| jvndb-2023-000040 | WordPress Plugin "Appointment and Event Booking Calendar for WordPress - Amelia" vulnerable to cross-site scripting | 2023-04-24T13:41+09:00 | 2024-05-28T16:59+09:00 |
| jvndb-2023-000039 | WordPress plugin "LIQUID SPEECH BALLOON" vulnerable to cross-site request forgery | 2023-04-19T14:24+09:00 | 2024-05-28T16:56+09:00 |
| jvndb-2024-000053 | Multiple vulnerabilities in Unifier and Unifier Cast | 2024-05-28T14:47+09:00 | 2024-05-28T14:47+09:00 |
| jvndb-2024-000052 | Multiple vulnerabilities in UTAU | 2024-05-28T14:23+09:00 | 2024-05-28T14:23+09:00 |
| jvndb-2023-001639 | Heap-based buffer overflow vulnerability in OMRON CX-Drive | 2023-04-25T14:31+09:00 | 2024-05-27T18:11+09:00 |
| jvndb-2023-000029 | Multiple vulnerabilities in Seiko Solutions SkyBridge MB-A100/A110/A200/A130 SkySpider MB-R210 | 2023-03-31T15:54+09:00 | 2024-05-27T17:08+09:00 |
| jvndb-2023-000059 | Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT | 2023-06-09T15:18+09:00 | 2024-05-27T16:38+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4426-1 | Security update for xkbcomp | 2025-12-17T11:22:42Z | 2025-12-17T11:22:42Z |
| suse-su-2025:4425-1 | Security update for cups | 2025-12-17T11:20:16Z | 2025-12-17T11:20:16Z |
| suse-su-2025:4424-1 | Security update for MozillaFirefox | 2025-12-17T11:09:15Z | 2025-12-17T11:09:15Z |
| suse-su-2025:4423-1 | Security update for webkit2gtk3 | 2025-12-17T11:01:39Z | 2025-12-17T11:01:39Z |
| suse-su-2025:4422-1 | Security update for the Linux Kernel | 2025-12-17T10:52:47Z | 2025-12-17T10:52:47Z |
| suse-su-2025:4421-1 | Security update for buildah | 2025-12-17T09:04:20Z | 2025-12-17T09:04:20Z |
| suse-su-2025:4419-1 | Security update for xen | 2025-12-16T18:57:18Z | 2025-12-16T18:57:18Z |
| suse-su-2025:4416-1 | Security update for webkit2gtk3 | 2025-12-16T15:57:50Z | 2025-12-16T15:57:50Z |
| suse-su-2025:4411-1 | Security update for librsvg | 2025-12-16T11:35:35Z | 2025-12-16T11:35:35Z |
| suse-su-2025:21222-1 | Security update for gnutls | 2025-12-16T08:43:18Z | 2025-12-16T08:43:18Z |
| suse-su-2025:21217-1 | Security update for libpng16 | 2025-12-16T08:31:52Z | 2025-12-16T08:31:52Z |
| suse-su-2025:21221-1 | Security update for helm | 2025-12-16T08:29:28Z | 2025-12-16T08:29:28Z |
| suse-su-2025:21220-1 | Security update for libpng16 | 2025-12-16T08:25:26Z | 2025-12-16T08:25:26Z |
| suse-su-2025:21218-1 | Security update for salt | 2025-12-16T08:19:40Z | 2025-12-16T08:19:40Z |
| suse-su-2025:21216-1 | Security update 5.0.6 for Multi-Linux Manager Client Tools, Salt and Salt Bundle | 2025-12-16T07:20:56Z | 2025-12-16T07:20:56Z |
| suse-su-2025:21224-1 | Security update for openssl-3 | 2025-12-15T18:22:57Z | 2025-12-15T18:22:57Z |
| suse-su-2025:21213-1 | Security update for openssl-3 | 2025-12-15T18:22:57Z | 2025-12-15T18:22:57Z |
| suse-su-2025:4408-1 | Security update for libssh | 2025-12-15T16:56:44Z | 2025-12-15T16:56:44Z |
| suse-su-2025:4407-1 | Security update for xkbcomp | 2025-12-15T16:54:15Z | 2025-12-15T16:54:15Z |
| suse-su-2025:4406-1 | Security update for postgresql15 | 2025-12-15T14:22:59Z | 2025-12-15T14:22:59Z |
| suse-su-2025:21223-1 | Security update for grub2 | 2025-12-15T12:49:56Z | 2025-12-15T12:49:56Z |
| suse-su-2025:21212-1 | Security update for grub2 | 2025-12-15T12:49:56Z | 2025-12-15T12:49:56Z |
| suse-su-2025:4398-1 | Security update for python3 | 2025-12-15T11:30:55Z | 2025-12-15T11:30:55Z |
| suse-su-2025:4397-1 | Security update for MozillaThunderbird | 2025-12-15T11:26:39Z | 2025-12-15T11:26:39Z |
| suse-su-2025:4396-1 | Security update for MozillaFirefox | 2025-12-15T11:24:28Z | 2025-12-15T11:24:28Z |
| suse-su-2025:4393-1 | Security update for the Linux Kernel | 2025-12-15T11:09:08Z | 2025-12-15T11:09:08Z |
| suse-su-2025:4391-1 | Security update for unbound | 2025-12-15T10:34:10Z | 2025-12-15T10:34:10Z |
| suse-su-2025:4257-2 | Security update for python311 | 2025-12-15T10:33:51Z | 2025-12-15T10:33:51Z |
| suse-su-2025:21211-1 | Security update for ImageMagick | 2025-12-15T09:56:13Z | 2025-12-15T09:56:13Z |
| suse-su-2025:4390-1 | Security update for rhino | 2025-12-12T16:18:03Z | 2025-12-12T16:18:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-06084 | Tenda AX1806 sub_65A28函数栈缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06082 | GPAC vobsub_get_subpic_duration函数缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06081 | GPAC uncv_parse_config函数堆栈缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06080 | GPAC dump_ttxt_sample函数堆栈缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06079 | GPAC pcmreframe_flush_packet函数堆栈缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06078 | GPAC oggdmx_parse_tags函数越界读取漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06077 | GPAC avi_parse_input_file函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06076 | GPAC ghi_dmx_declare_opid_bin函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06075 | GPAC越界读取漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06074 | GPAC vorbis_to_intern函数堆栈缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-06073 | GPAC堆栈缓冲区溢出漏洞 | 2026-01-19 | 2026-01-21 |
| cnvd-2026-05375 | School Fees Payment Management System /ajax.php?action=delete_course文件SQL注入漏洞 | 2025-11-05 | 2026-01-21 |
| cnvd-2026-05374 | School Fees Payment Management System /ajax.php?action=save_student文件SQL注入漏洞 | 2025-11-20 | 2026-01-21 |
| cnvd-2026-05373 | School Fees Payment Management System /manage_course.php文件SQL注入漏洞 | 2025-11-20 | 2026-01-21 |
| cnvd-2026-05372 | School Fees Payment Management System /ajax.php?action=save_payment文件SQL注入漏洞 | 2025-11-20 | 2026-01-21 |
| cnvd-2026-05371 | School Fees Payment Management System /ajax.php?action=save_course文件SQL注入漏洞 | 2025-11-20 | 2026-01-21 |
| cnvd-2026-05370 | School Fees Payment Management System /ajax.php?action=login文件SQL注入漏洞 | 2025-11-20 | 2026-01-21 |
| cnvd-2026-05369 | School Fees Payment Management System /ajax.php?action=delete_payment文件SQL注入漏洞 | 2025-11-20 | 2026-01-21 |
| cnvd-2026-05368 | School Fees Payment Management System /ajax.php文件SQL注入漏洞 | 2025-11-20 | 2026-01-21 |
| cnvd-2026-05367 | ChurchCRM EditEventAttendees功能盲SQL注入漏洞 | 2025-02-28 | 2026-01-21 |
| cnvd-2026-05366 | ChurchCRM DonateItemEditor功能盲SQL注入漏洞 | 2025-02-28 | 2026-01-21 |
| cnvd-2026-05365 | ChurchCRM CurrentFundraiser参数盲SQL注入漏洞 | 2025-02-28 | 2026-01-21 |
| cnvd-2026-05364 | ChurchCRM FRBidSheets.php页面盲SQL注入漏洞 | 2025-03-21 | 2026-01-21 |
| cnvd-2026-05338 | Complete Online Beauty Parlor Management System /index.php文件SQL注入漏洞 | 2024-03-26 | 2026-01-21 |
| cnvd-2026-05337 | Complete Online Beauty Parlor Management System /forgot-password.php文件SQL注入漏洞 | 2024-03-26 | 2026-01-21 |
| cnvd-2026-05336 | Complete Online Beauty Parlor Management System /edit-services.php文件SQL注入漏洞 | 2024-03-26 | 2026-01-21 |
| cnvd-2026-05335 | Complete Online Beauty Parlor Management System /contact-us.php文件SQL注入漏洞 | 2024-03-26 | 2026-01-21 |
| cnvd-2026-05334 | Complete Online Beauty Parlor Management System /admin-profile.php文件SQL注入漏洞 | 2024-03-26 | 2026-01-21 |
| cnvd-2026-05333 | Complete Online Beauty Parlor Management System /customer-list.php文件跨站脚本漏洞 | 2025-11-24 | 2026-01-21 |
| cnvd-2026-05332 | Complete Online Beauty Parlor Management System /bwdates-reports-details.php文件跨站脚本漏洞 | 2025-12-25 | 2026-01-21 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-1091 | Multiples vulnérabilités dans Microsoft Office | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1090 | Vulnérabilité dans les produits Moxa | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1089 | Vulnérabilité dans les produits Bitdefender | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1088 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1087 | Multiples vulnérabilités dans les produits Mozilla | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1086 | Multiples vulnérabilités dans les produits Intel | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1085 | Multiples vulnérabilités dans les produits Adobe | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1084 | Multiples vulnérabilités dans les produits Fortinet | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1083 | Multiples vulnérabilités dans les produits Siemens | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1082 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1081 | Vulnérabilité dans Citrix XenServer | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1080 | Multiples vulnérabilités dans VMware Tanzu RabbitMQ | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1079 | Multiples vulnérabilités dans les produits SAP | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1083 | Multiples vulnérabilités dans les produits Siemens | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1082 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1081 | Vulnérabilité dans Citrix XenServer | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1080 | Multiples vulnérabilités dans VMware Tanzu RabbitMQ | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1079 | Multiples vulnérabilités dans les produits SAP | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1078 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2025-avi-1077 | Multiples vulnérabilités dans Traefik | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2024-avi-1026 | Multiples vulnérabilités dans les produits Synology | 2024-11-28T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| CERTFR-2025-AVI-1078 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| CERTFR-2025-AVI-1077 | Multiples vulnérabilités dans Traefik | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| CERTFR-2024-AVI-1026 | Multiples vulnérabilités dans les produits Synology | 2024-11-28T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2025-avi-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1074 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1073 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1072 | Multiples vulnérabilités dans les produits IBM | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1071 | Multiples vulnérabilités dans Apache HTTP Server | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1070 | Multiples vulnérabilités dans Microsoft CBL Mariner | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-ale-003 | Vulnérabilité dans Microsoft VBScript | 2010-03-02T00:00:00.000000 | 2010-04-13T00:00:00.000000 |
| CERTA-2010-ALE-003 | Vulnérabilité dans Microsoft VBScript | 2010-03-02T00:00:00.000000 | 2010-04-13T00:00:00.000000 |
| certa-2010-ale-004 | Vulnérabilité dans Microsoft Internet Explorer | 2010-03-10T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| CERTA-2010-ALE-004 | Vulnérabilité dans Microsoft Internet Explorer | 2010-03-10T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-ale-002 | Vulnérabilité dans le sous-système MS-DOS de Microsoft Windows | 2010-01-21T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| CERTA-2010-ALE-002 | Vulnérabilité dans le sous-système MS-DOS de Microsoft Windows | 2010-01-21T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-ale-001 | Vulnérabilité dans Microsoft Internet Explorer | 2010-01-15T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| CERTA-2010-ALE-001 | Vulnérabilité dans Microsoft Internet Explorer | 2010-01-15T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| certa-2009-ale-023 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2009-12-15T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| CERTA-2009-ALE-023 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2009-12-15T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2009-ale-021 | Vulnérabilité dans Adobe Illustrator | 2009-12-10T00:00:00.000000 | 2010-01-08T00:00:00.000000 |
| CERTA-2009-ALE-021 | Vulnérabilité dans Adobe Illustrator | 2009-12-10T00:00:00.000000 | 2010-01-08T00:00:00.000000 |
| certa-2009-ale-022 | Vulnérabilité dans TANDBERG MXP | 2009-12-11T00:00:00.000000 | 2009-12-11T00:00:00.000000 |
| CERTA-2009-ALE-022 | Vulnérabilité dans TANDBERG MXP | 2009-12-11T00:00:00.000000 | 2009-12-11T00:00:00.000000 |
| certa-2009-ale-020 | Vulnérabilité dans Internet Explorer | 2009-11-21T00:00:00.000000 | 2009-12-09T00:00:00.000000 |
| CERTA-2009-ALE-020 | Vulnérabilité dans Internet Explorer | 2009-11-21T00:00:00.000000 | 2009-12-09T00:00:00.000000 |
| certa-2009-ale-018 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2009-10-09T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-ale-015 | Vulnérabilités du serveur FTP de Microsoft IIS | 2009-09-01T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| CERTA-2009-ALE-018 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2009-10-09T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| CERTA-2009-ALE-015 | Vulnérabilités du serveur FTP de Microsoft IIS | 2009-09-01T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-ale-016 | Vulnérabilité de SMBv2 dans Microsoft Windows | 2009-09-09T00:00:00.000000 | 2009-10-13T00:00:00.000000 |
| CERTA-2009-ALE-016 | Vulnérabilité de SMBv2 dans Microsoft Windows | 2009-09-09T00:00:00.000000 | 2009-10-13T00:00:00.000000 |
| certa-2009-ale-011 | Vulnérabilité dans Microsoft Office Web Components Control | 2009-07-13T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| CERTA-2009-ALE-011 | Vulnérabilité dans Microsoft Office Web Components Control | 2009-07-13T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-ale-013 | Vulnérabilité Shockwave Flash pour les produits Adobe | 2009-07-23T00:00:00.000000 | 2009-07-31T00:00:00.000000 |
| CERTA-2009-ALE-013 | Vulnérabilité Shockwave Flash pour les produits Adobe | 2009-07-23T00:00:00.000000 | 2009-07-31T00:00:00.000000 |
| certa-2009-ale-012 | Vulnérabilité dans Mozilla Firefox | 2009-07-15T00:00:00.000000 | 2009-07-17T00:00:00.000000 |
| CERTA-2009-ALE-012 | Vulnérabilité dans Mozilla Firefox | 2009-07-15T00:00:00.000000 | 2009-07-17T00:00:00.000000 |
| certa-2009-ale-010 | Vulnérabilité dans le contrôle ActiveX Microsoft Video | 2009-07-07T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| CERTA-2009-ALE-010 | Vulnérabilité dans le contrôle ActiveX Microsoft Video | 2009-07-07T00:00:00.000000 | 2009-07-15T00:00:00.000000 |