Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0004 |
N/A
|
MIME buffer overflow in email clients, e.g. Solar… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:56.463Z |
| CVE-1999-0015 |
N/A
|
Teardrop IP denial of service. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.061Z |
| CVE-1999-0020 |
N/A
|
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | N/A | N/A | 2000-02-04T10:00:00.000Z | 2005-02-04T05:00:00.000Z |
| CVE-1999-0030 |
N/A
|
root privileges via buffer overflow in xlock comm… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:56.667Z |
| CVE-1999-0033 |
N/A
|
Command execution in Sun systems via buffer overf… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.268Z |
| CVE-1999-0061 |
N/A
|
File creation and deletion, and remote execution,… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.438Z |
| CVE-1999-0076 |
N/A
|
Buffer overflow in wu-ftp from PASV command cause… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.363Z |
| CVE-1999-0078 |
N/A
|
pcnfsd (aka rpc.pcnfsd) allows local users to cha… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.236Z |
| CVE-1999-0086 |
N/A
|
AIX routed allows remote users to modify sensitiv… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.762Z |
| CVE-1999-0088 |
N/A
|
IRIX and AIX automountd services (autofsd) allow … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.435Z |
| CVE-1999-0089 |
N/A
|
Buffer overflow in AIX libDtSvc library can allow… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.635Z |
| CVE-1999-0092 |
N/A
|
Various vulnerabilities in the AIX portmir comman… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.521Z |
| CVE-1999-0098 |
N/A
|
Buffer overflow in SMTP HELO command in Sendmail … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:56.969Z |
| CVE-1999-0104 |
N/A
|
A later variation on the Teardrop IP denial of se… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.424Z |
| CVE-1999-0105 |
N/A
|
finger allows recursive searches by using a long … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.570Z |
| CVE-1999-0106 |
N/A
|
Finger redirection allows finger bombs. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.430Z |
| CVE-1999-0107 |
N/A
|
Buffer overflow in Apache 1.2.5 and earlier allow… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.646Z |
| CVE-1999-0110 |
N/A
|
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315. Notes: All CVE users should reference CVE-1999-0315 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | N/A | N/A | 2000-02-04T10:00:00.000Z | 2005-02-04T05:00:00.000Z |
| CVE-1999-0114 |
N/A
|
Local users can execute commands as other users, … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.600Z |
| CVE-1999-0119 |
N/A
|
Windows NT 4.0 beta allows users to read and dele… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.638Z |
| CVE-1999-0121 |
N/A
|
Buffer overflow in dtaction command gives root access. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.694Z |
| CVE-1999-0123 |
N/A
|
Race condition in Linux mailx command allows loca… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.685Z |
| CVE-1999-0127 |
N/A
|
swinstall and swmodify commands in SD-UX package … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.601Z |
| CVE-1999-0140 |
N/A
|
Denial of service in RAS/PPTP on NT systems. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.696Z |
| CVE-1999-0144 |
N/A
|
Denial of service in Qmail by specifying a large … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.565Z |
| CVE-1999-0156 |
N/A
|
wu-ftpd FTP daemon allows any user and password c… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.740Z |
| CVE-1999-0163 |
N/A
|
In older versions of Sendmail, an attacker could … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.738Z |
| CVE-1999-0165 |
N/A
|
NFS cache poisoning. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.763Z |
| CVE-1999-0169 |
N/A
|
NFS allows attackers to read and write any file o… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.692Z |
| CVE-1999-0171 |
N/A
|
Denial of service in syslog by sending it a large… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.749Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0004 |
N/A
|
MIME buffer overflow in email clients, e.g. Solar… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:56.463Z |
| CVE-1999-0015 |
N/A
|
Teardrop IP denial of service. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.061Z |
| CVE-1999-0020 |
N/A
|
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | N/A | N/A | 2000-02-04T10:00:00.000Z | 2005-02-04T05:00:00.000Z |
| CVE-1999-0030 |
N/A
|
root privileges via buffer overflow in xlock comm… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:56.667Z |
| CVE-1999-0033 |
N/A
|
Command execution in Sun systems via buffer overf… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.268Z |
| CVE-1999-0061 |
N/A
|
File creation and deletion, and remote execution,… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.438Z |
| CVE-1999-0076 |
N/A
|
Buffer overflow in wu-ftp from PASV command cause… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.363Z |
| CVE-1999-0078 |
N/A
|
pcnfsd (aka rpc.pcnfsd) allows local users to cha… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.236Z |
| CVE-1999-0086 |
N/A
|
AIX routed allows remote users to modify sensitiv… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.762Z |
| CVE-1999-0088 |
N/A
|
IRIX and AIX automountd services (autofsd) allow … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.435Z |
| CVE-1999-0089 |
N/A
|
Buffer overflow in AIX libDtSvc library can allow… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.635Z |
| CVE-1999-0092 |
N/A
|
Various vulnerabilities in the AIX portmir comman… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.521Z |
| CVE-1999-0098 |
N/A
|
Buffer overflow in SMTP HELO command in Sendmail … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:56.969Z |
| CVE-1999-0104 |
N/A
|
A later variation on the Teardrop IP denial of se… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.424Z |
| CVE-1999-0105 |
N/A
|
finger allows recursive searches by using a long … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.570Z |
| CVE-1999-0106 |
N/A
|
Finger redirection allows finger bombs. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.430Z |
| CVE-1999-0107 |
N/A
|
Buffer overflow in Apache 1.2.5 and earlier allow… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.646Z |
| CVE-1999-0110 |
N/A
|
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315. Notes: All CVE users should reference CVE-1999-0315 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | N/A | N/A | 2000-02-04T10:00:00.000Z | 2005-02-04T05:00:00.000Z |
| CVE-1999-0114 |
N/A
|
Local users can execute commands as other users, … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.600Z |
| CVE-1999-0119 |
N/A
|
Windows NT 4.0 beta allows users to read and dele… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.638Z |
| CVE-1999-0121 |
N/A
|
Buffer overflow in dtaction command gives root access. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.694Z |
| CVE-1999-0123 |
N/A
|
Race condition in Linux mailx command allows loca… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.685Z |
| CVE-1999-0127 |
N/A
|
swinstall and swmodify commands in SD-UX package … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.601Z |
| CVE-1999-0140 |
N/A
|
Denial of service in RAS/PPTP on NT systems. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.696Z |
| CVE-1999-0144 |
N/A
|
Denial of service in Qmail by specifying a large … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.565Z |
| CVE-1999-0156 |
N/A
|
wu-ftpd FTP daemon allows any user and password c… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.740Z |
| CVE-1999-0163 |
N/A
|
In older versions of Sendmail, an attacker could … |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.738Z |
| CVE-1999-0165 |
N/A
|
NFS cache poisoning. |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.763Z |
| CVE-1999-0169 |
N/A
|
NFS allows attackers to read and write any file o… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.692Z |
| CVE-1999-0171 |
N/A
|
Denial of service in syslog by sending it a large… |
n/a |
n/a |
2000-02-04T10:00:00.000Z | 2024-08-01T16:27:57.749Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-1999-1390 | suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying… | 1998-04-28T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0069 | Solaris ufsrestore buffer overflow. | 1998-04-29T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0212 | Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files ar… | 1998-04-29T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1106 | Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) … | 1998-04-29T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0108 | The printers program in IRIX has a buffer overflow that gives root access to local users. | 1998-05-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0796 | FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. | 1998-05-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0126 | SGI IRIX buffer overflow in xterm and Xaw allows root access. | 1998-05-03T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1027 | Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to … | 1998-05-07T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1044 | Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local… | 1998-05-07T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1361 | Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cau… | 1998-05-09T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0816 | The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024. | 1998-05-10T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0919 | A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via … | 1998-05-10T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1204 | Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time… | 1998-05-11T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1389 | US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly… | 1998-05-11T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0055 | Buffer overflows in Sun libnsl allow root access. | 1998-05-14T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1179 | Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote … | 1998-05-15T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1096 | Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long … | 1998-05-16T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0303 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. | 1998-05-21T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1039 | Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local use… | 1998-05-27T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1492 | Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitra… | 1998-05-27T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1490 | xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental v… | 1998-05-28T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0278 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | 1998-06-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0329 | SGI mediad program allows local users to gain root access. | 1998-06-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0501 | A Unix account has a guessable password. | 1998-06-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0508 | An account on a router, firewall, or other network device has a default, null, blank, or missing pa… | 1998-06-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1443 | Micah Software Full Armor Network Configurator and Zero Administration allow local users with physi… | 1998-06-02T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1151 | Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a usern… | 1998-06-03T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1152 | Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of faile… | 1998-06-03T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0008 | Buffer overflow in NIS+, in Sun's rpc.nisd program. | 1998-06-08T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0054 | Sun's ftpd daemon can be subjected to a denial of service. | 1998-06-10T04:00:00.000 | 2025-04-03T01:03:51.193 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-m8h6-m9p5-p2f8 |
|
Moderate severity vulnerability that affects activerecord | 2018-08-13T20:49:01Z | 2021-12-02T23:15:03Z |
| ghsa-5p9f-55j8-922m |
|
Moderate severity vulnerability that affects doorkeeper | 2018-08-13T20:49:10Z | 2020-06-17T15:14:35Z |
| ghsa-2m39-62fm-q8r3 |
7.5 (3.1)
|
Regular Expression Denial of Service in sshpk | 2018-08-15T13:22:23Z | 2023-01-31T01:55:03Z |
| ghsa-8wg9-92fr-6j7v |
8.1 (3.1)
|
marionette-socket-host downloads Resources over HTTP | 2018-08-15T18:50:31Z | 2023-09-07T18:18:38Z |
| ghsa-p65h-233c-jxvm |
|
Downloads Resources over HTTP in resourcehacker | 2018-08-15T19:03:59Z | 2021-01-08T18:23:55Z |
| ghsa-x7q3-67vc-wvcf |
8.1 (3.1)
|
grunt-images downloads Resources over HTTP | 2018-08-15T19:05:14Z | 2023-09-13T22:57:47Z |
| ghsa-5rc6-2r3r-fv79 |
8.1 (3.1)
|
slimerjs-edge downloads Resources over HTTP | 2018-08-15T19:25:47Z | 2023-09-13T19:09:51Z |
| ghsa-ph8p-2g97-9654 |
|
Downloads Resources over HTTP in jstestdriver | 2018-08-15T19:27:25Z | 2021-01-08T18:21:22Z |
| ghsa-4j59-hfw6-6w7h |
|
Downloads Resources over HTTP in cmake | 2018-08-15T19:30:48Z | 2021-09-16T20:54:42Z |
| ghsa-hg4c-rgvm-964g |
9.1 (3.1)
9.3 (4.0)
|
SQL Injection in pycsw | 2018-08-15T20:02:53Z | 2024-10-21T20:20:55Z |
| ghsa-4cmx-hrq9-c23p |
5.3 (3.1)
|
Improper Authorization in aedes | 2018-08-15T20:03:22Z | 2023-04-21T18:30:53Z |
| ghsa-8gg6-3r63-25m8 |
8.8 (3.1)
|
git-fastclone permits arbitrary shell command execution from .gitmodules | 2018-08-15T20:03:37Z | 2023-08-29T12:09:29Z |
| ghsa-9wcm-rrvh-qjc8 |
|
High severity vulnerability that affects colorscore | 2018-08-15T20:03:53Z | 2020-06-17T15:14:43Z |
| ghsa-9wv8-jgw4-4g28 |
|
High severity vulnerability that affects festivaltts4r | 2018-08-15T20:04:13Z | 2020-06-16T21:33:56Z |
| ghsa-7322-9mx6-5j2m |
|
redcarpet Buffer Overflow vulnerability | 2018-08-15T20:04:30Z | 2023-01-23T20:45:35Z |
| ghsa-mf6w-45cf-qhmp |
9.8 (3.1)
|
Git-fastclone passes user modifiable strings directly to a shell command | 2018-08-15T20:04:44Z | 2023-01-26T21:13:16Z |
| ghsa-vcfp-ppqw-mf23 |
8.1 (3.1)
|
fis-sass-all downloads Resources over HTTP | 2018-08-17T20:20:46Z | 2023-09-11T18:26:51Z |
| ghsa-2r9c-46v3-43fc |
|
Downloads Resources over HTTP in haxe3 | 2018-08-17T20:28:13Z | 2021-01-08T20:59:00Z |
| ghsa-xrr4-74mc-rpjc |
7.5 (3.1)
|
Pyro mishandles pid files in temporary directory locations and opening the pid file as root | 2018-08-21T17:01:29Z | 2024-10-15T16:14:43Z |
| ghsa-38f5-ghc2-fcmv |
9.8 (3.1)
|
Code Injection in cryo | 2018-08-21T17:02:43Z | 2023-09-12T18:38:55Z |
| ghsa-h3c2-x77c-7pvr |
9.8 (3.1)
|
Command Injection in git-dummy-commit | 2018-08-21T17:03:33Z | 2023-02-03T20:44:46Z |
| ghsa-jhq3-57xh-6643 |
9.8 (3.1)
|
Privilege Escalation due to Blind NoSQL Injection in flintcms | 2018-08-21T17:03:59Z | 2021-09-14T19:42:55Z |
| ghsa-cwp3-834g-x79g |
|
Moderate severity vulnerability that affects archive-tar-minitar and minitar | 2018-08-21T17:07:36Z | 2020-06-16T21:39:02Z |
| ghsa-cqxw-3p7v-p9gr |
7.8 (3.1)
|
Phusion Passenger uses a known /tmp filename | 2018-08-21T17:08:03Z | 2022-04-26T20:43:37Z |
| ghsa-36p7-xjw8-h6f2 |
7.5 (3.1)
|
Ruby-saml allows attackers to perform XML signature wrapping attacks | 2018-08-21T17:08:30Z | 2023-08-28T10:31:36Z |
| ghsa-w655-w578-99pq |
|
High severity vulnerability that affects espeak-ruby | 2018-08-21T17:09:08Z | 2020-06-17T15:15:17Z |
| ghsa-xjqg-9jvg-fgx2 |
|
Nokogiri subject to DoS via libxml2 vulnerability | 2018-08-21T19:03:04Z | 2023-03-13T23:53:36Z |
| ghsa-hm48-76wh-q86v |
|
High severity vulnerability that affects activerecord | 2018-08-21T19:03:17Z | 2020-06-17T15:14:48Z |
| ghsa-fr52-4hqw-p27f |
9.8 (3.1)
|
Nokogiri does not forbid namespace nodes in XPointer ranges | 2018-08-21T19:03:26Z | 2022-04-26T18:24:04Z |
| ghsa-562c-5r94-xh97 |
7.5 (3.1)
8.7 (4.0)
|
Flask is vulnerable to Denial of Service via incorrect encoding of JSON data | 2018-08-23T19:10:40Z | 2024-09-20T20:16:29Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2017-12 |
|
Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute… | dulwich | 2017-10-29T20:29:00Z | 2021-07-05T00:01:21.470158Z |
| pysec-2017-73 |
|
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport fi… | sosreport | 2017-11-06T17:29:00Z | 2021-07-25T23:34:55.577295Z |
| pysec-2017-19 |
|
An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_q… | mlalchemy | 2017-11-08T03:29:00Z | 2021-07-05T00:01:22.762966Z |
| pysec-2017-22 |
|
An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMi… | owlmixin | 2017-11-08T03:29:00Z | 2021-07-05T00:01:23.384346Z |
| pysec-2017-23 |
|
An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser m… | pyanyapi | 2017-11-08T03:29:00Z | 2021-07-05T00:01:24.581595Z |
| pysec-2017-40 |
|
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrat… | sanic | 2017-11-10T09:29:00Z | 2021-07-05T00:01:27.045850Z |
| pysec-2017-78 |
|
An exploitable vulnerability exists in the YAML parsing functionality in config.py in Con… | confire | 2017-11-10T09:29:00Z | 2021-08-25T04:29:57.582065Z |
| pysec-2017-79 |
|
An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_fi… | django-make-app | 2017-11-10T09:29:00Z | 2021-08-25T04:29:58.287263Z |
| pysec-2017-68 |
|
The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.… | recurly | 2017-11-13T17:29:00Z | 2021-07-25T23:34:52.943535Z |
| pysec-2017-26 |
|
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across … | pysaml2 | 2017-11-17T04:29:00Z | 2021-07-05T00:01:25.184392Z |
| pysec-2017-115 |
5.5 (3.1)
|
exiv2 0.26 contains a Stack out of bounds read in webp parser | exiv2 | 2017-11-17T22:29:00Z | 2024-11-21T14:22:45.992477Z |
| pysec-2017-116 |
5.5 (3.1)
|
Exiv2 0.26 contains a heap buffer overflow in tiff parser | exiv2 | 2017-11-17T22:29:00Z | 2024-11-21T14:22:46.052386Z |
| pysec-2017-117 |
5.5 (3.1)
|
Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser | exiv2 | 2017-11-17T22:29:00Z | 2024-11-21T14:22:46.115176Z |
| pysec-2017-84 |
|
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with… | swauth | 2017-11-21T13:29:00Z | 2021-08-25T04:30:33.081491Z |
| pysec-2017-4 |
|
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed c… | ansible | 2017-11-21T17:29:00Z | 2021-07-02T02:41:33.938371Z |
| pysec-2017-75 |
|
In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() … | aubio | 2017-11-29T07:29:00Z | 2021-08-25T04:29:55.630157Z |
| pysec-2017-90 |
|
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause… | mercurial | 2017-12-07T18:29:00Z | 2021-08-27T03:22:07.106645Z |
| pysec-2017-76 |
|
A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avc… | aubio | 2017-12-12T01:29:00Z | 2021-08-25T04:29:55.674951Z |
| pysec-2017-77 |
|
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101… | aubio | 2017-12-12T01:29:00Z | 2021-08-25T04:29:55.717031Z |
| pysec-2017-140 |
5.5 (3.1)
|
There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk func… | exiv2 | 2017-12-13T22:29:00Z | 2024-11-21T14:22:47.521911Z |
| pysec-2017-18 |
|
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune… | mistune | 2017-12-29T15:29:00Z | 2021-07-05T00:01:22.732782Z |
| pysec-2017-141 |
5.5 (3.1)
|
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in val… | exiv2 | 2017-12-31T19:29:00Z | 2024-11-21T14:22:47.817537Z |
| pysec-2018-48 |
|
pysaml2 version 4.4.0 and older accept any password when run with python optimizations en… | pysaml2 | 2018-01-02T23:29:00Z | 2021-07-05T00:01:25.224283Z |
| pysec-2018-144 |
5.5 (3.1)
|
The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote at… | exiv2 | 2018-01-03T09:29:00Z | 2024-11-21T14:22:49.165596Z |
| pysec-2018-70 |
|
When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login fo… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.749835Z |
| pysec-2018-71 |
|
A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of h… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.873350Z |
| pysec-2018-72 |
|
Accessing private content via str.format in through-the-web templates and scripts in Plon… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.983029Z |
| pysec-2018-73 |
|
By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send… | plone | 2018-01-03T20:29:00Z | 2021-08-25T04:30:17.052846Z |
| pysec-2018-33 |
|
__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files … | numpy | 2018-01-08T19:29:00Z | 2021-06-29T22:52:17.794688Z |
| pysec-2018-34 |
|
(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and… | numpy | 2018-01-08T19:29:00Z | 2021-06-29T22:52:17.858494Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2022-503 | Malicious code in @pixiv-vroid-hub/vroid-hub-viewer (npm) | 2022-06-02T10:47:20Z | 2022-06-02T10:47:20Z |
| mal-2022-168 | Malicious code in @chegg-me-components/header (npm) | 2022-06-02T10:47:20Z | 2022-06-02T10:47:20Z |
| mal-2022-200 | Malicious code in @design-components/customer (npm) | 2022-06-02T10:47:20Z | 2022-06-02T10:47:20Z |
| mal-2022-503 | Malicious code in @pixiv-vroid-hub/vroid-hub-viewer (npm) | 2022-06-02T10:47:20Z | 2022-06-02T10:47:20Z |
| MAL-2022-7068 | Malicious code in web-excess (npm) | 2022-06-02T10:49:17Z | 2022-06-02T10:49:17Z |
| mal-2022-7068 | Malicious code in web-excess (npm) | 2022-06-02T10:49:17Z | 2022-06-02T10:49:17Z |
| MAL-2022-2770 | Malicious code in epic-ue-fonts (npm) | 2022-06-02T10:50:08Z | 2022-06-02T10:50:08Z |
| mal-2022-2770 | Malicious code in epic-ue-fonts (npm) | 2022-06-02T10:50:08Z | 2022-06-02T10:50:08Z |
| MAL-2022-2524 | Malicious code in discordjs-selfbotjs (npm) | 2022-06-02T10:58:04Z | 2022-06-02T10:58:05Z |
| mal-2022-2524 | Malicious code in discordjs-selfbotjs (npm) | 2022-06-02T10:58:04Z | 2022-06-02T10:58:05Z |
| MAL-2022-1998 | Malicious code in color-xzibit (npm) | 2022-06-02T10:58:54Z | 2022-06-02T10:58:55Z |
| mal-2022-1998 | Malicious code in color-xzibit (npm) | 2022-06-02T10:58:54Z | 2022-06-02T10:58:55Z |
| MAL-2022-6342 | Malicious code in stylis-ifl4 (npm) | 2022-06-02T11:02:35Z | 2022-06-02T11:02:36Z |
| mal-2022-6342 | Malicious code in stylis-ifl4 (npm) | 2022-06-02T11:02:35Z | 2022-06-02T11:02:36Z |
| MAL-2022-1043 | Malicious code in api-token-admin (npm) | 2022-06-02T11:02:51Z | 2022-06-02T11:02:51Z |
| mal-2022-1043 | Malicious code in api-token-admin (npm) | 2022-06-02T11:02:51Z | 2022-06-02T11:02:51Z |
| MAL-2022-4780 | Malicious code in nab-packages-react-utils-nab (npm) | 2022-06-03T00:00:00Z | 2023-09-05T02:23:23Z |
| mal-2022-4780 | Malicious code in nab-packages-react-utils-nab (npm) | 2022-06-03T00:00:00Z | 2023-09-05T02:23:23Z |
| MAL-2022-2379 | Malicious code in ddd-demo (npm) | 2022-06-08T08:19:30Z | 2022-06-08T08:19:30Z |
| MAL-2022-2380 | Malicious code in ddd-demo2 (npm) | 2022-06-08T08:19:30Z | 2022-06-08T08:19:30Z |
| mal-2022-2379 | Malicious code in ddd-demo (npm) | 2022-06-08T08:19:30Z | 2022-06-08T08:19:30Z |
| mal-2022-2380 | Malicious code in ddd-demo2 (npm) | 2022-06-08T08:19:30Z | 2022-06-08T08:19:30Z |
| MAL-2022-2381 | Malicious code in ddd-demo3 (npm) | 2022-06-08T08:19:45Z | 2022-06-08T08:19:54Z |
| mal-2022-2381 | Malicious code in ddd-demo3 (npm) | 2022-06-08T08:19:45Z | 2022-06-08T08:19:54Z |
| MAL-2022-2307 | Malicious code in d2l-rubric (npm) | 2022-06-08T08:33:40Z | 2022-06-08T08:33:41Z |
| MAL-2022-2308 | Malicious code in d2l-rubric-polymer (npm) | 2022-06-08T08:33:40Z | 2022-06-08T08:33:41Z |
| mal-2022-2307 | Malicious code in d2l-rubric (npm) | 2022-06-08T08:33:40Z | 2022-06-08T08:33:41Z |
| mal-2022-2308 | Malicious code in d2l-rubric-polymer (npm) | 2022-06-08T08:33:40Z | 2022-06-08T08:33:41Z |
| MAL-2022-4659 | Malicious code in mock-solc-0.6 (npm) | 2022-06-08T08:37:55Z | 2022-06-08T08:37:55Z |
| mal-2022-4659 | Malicious code in mock-solc-0.6 (npm) | 2022-06-08T08:37:55Z | 2022-06-08T08:37:55Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-1689 | Intel Prozessoren: Mehrere Schwachstellen | 2019-11-12T23:00:00.000+00:00 | 2025-08-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2225 | OTRS: Mehrere Schwachstellen | 2019-11-14T23:00:00.000+00:00 | 2023-08-30T22:00:00.000+00:00 |
| wid-sec-w-2023-0198 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-11-17T23:00:00.000+00:00 | 2023-01-26T23:00:00.000+00:00 |
| wid-sec-w-2022-0388 | cyrus imapd: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2019-11-19T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2024-3592 | Ansible: Schwachstelle ermöglicht Offenlegung von Informationen | 2019-11-20T23:00:00.000+00:00 | 2024-12-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2490 | Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2019-11-20T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2022-1745 | GNU libc: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2019-11-21T23:00:00.000+00:00 | 2023-08-23T22:00:00.000+00:00 |
| wid-sec-w-2022-0311 | Linux Kernel: Mehrere Schwachstellen | 2019-12-01T23:00:00.000+00:00 | 2022-12-07T23:00:00.000+00:00 |
| wid-sec-w-2023-2407 | OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2019-12-01T23:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2022-1826 | Mozilla Firefox: Mehrere Schwachstellen | 2019-12-03T23:00:00.000+00:00 | 2024-02-19T23:00:00.000+00:00 |
| wid-sec-w-2023-0719 | dnsmasq: Schwachstelle ermöglicht Denial of Service | 2019-12-05T23:00:00.000+00:00 | 2023-03-22T23:00:00.000+00:00 |
| wid-sec-w-2023-1761 | OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2019-12-08T23:00:00.000+00:00 | 2024-11-25T23:00:00.000+00:00 |
| wid-sec-w-2023-2482 | Ansible: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode | 2019-12-08T23:00:00.000+00:00 | 2025-03-30T22:00:00.000+00:00 |
| wid-sec-w-2022-2051 | Samba: Mehrere Schwachstellen | 2019-12-09T23:00:00.000+00:00 | 2022-11-27T23:00:00.000+00:00 |
| wid-sec-w-2022-1613 | git: Mehrere Schwachstellen | 2019-12-10T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2023-1312 | libssh: Schwachstelle ermöglicht Codeausführung | 2019-12-10T23:00:00.000+00:00 | 2024-05-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1859 | Intel Prozessoren: Schwachstelle ermöglicht Privilegieneskalation und Offenlegung von Informationen | 2019-12-10T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-0238 | Dovecot: Schwachstelle ermöglicht Denial of Service | 2019-12-12T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2024-0659 | Grub: Schwachstelle ermöglicht Denial of Service | 2019-12-15T23:00:00.000+00:00 | 2024-03-18T23:00:00.000+00:00 |
| wid-sec-w-2024-1180 | Linux Kernel: Mehrere Schwachstellen | 2019-12-17T23:00:00.000+00:00 | 2024-05-20T22:00:00.000+00:00 |
| wid-sec-w-2023-1229 | Apache Tomcat: Mehrere Schwachstellen | 2019-12-18T23:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0383 | Ruby on Rails: Schwachstelle ermöglicht Offenlegung von Informationen | 2019-12-18T23:00:00.000+00:00 | 2025-02-16T23:00:00.000+00:00 |
| wid-sec-w-2023-2131 | ImageMagick / GraphicsMagick: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-12-23T23:00:00.000+00:00 | 2024-10-03T22:00:00.000+00:00 |
| wid-sec-w-2024-1179 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-12-26T23:00:00.000+00:00 | 2024-05-20T22:00:00.000+00:00 |
| wid-sec-w-2024-1535 | tigervnc: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten | 2019-12-26T23:00:00.000+00:00 | 2024-07-04T22:00:00.000+00:00 |
| wid-sec-w-2022-2096 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-12-29T23:00:00.000+00:00 | 2024-05-30T22:00:00.000+00:00 |
| wid-sec-w-2023-1600 | sudo: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2019-12-30T23:00:00.000+00:00 | 2023-06-29T22:00:00.000+00:00 |
| wid-sec-w-2024-3380 | libxml2: Schwachstelle ermöglicht Denial of Service | 2020-01-01T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2023-2481 | NGINX: Schwachstelle ermöglicht Manipulation von Daten | 2020-01-09T23:00:00.000+00:00 | 2024-11-03T23:00:00.000+00:00 |
| wid-sec-w-2023-0666 | OpenJPEG: Schwachstelle ermöglicht Denial of Service | 2020-01-12T23:00:00.000+00:00 | 2023-03-15T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0227 | Kwetsbaarheid verholpen in Juniper SRX300 Series | 2025-07-11T09:57:40.476096Z | 2025-07-11T09:57:40.476096Z |
| ncsc-2025-0228 | Kwetsbaarheden verholpen in Zoom Clients | 2025-07-11T09:58:21.871103Z | 2025-07-11T09:58:21.871103Z |
| ncsc-2025-0229 | Kwetsbaarheden verholpen in Adobe InDesign Desktop | 2025-07-11T10:01:48.229418Z | 2025-07-11T10:01:48.229418Z |
| ncsc-2025-0230 | Kwetsbaarheid verholpen in Wing FTP Server | 2025-07-14T06:06:24.154078Z | 2025-07-14T06:06:24.154078Z |
| ncsc-2025-0231 | Kwetsbaarheden verholpen in XWiki | 2025-07-17T12:35:48.998487Z | 2025-07-17T12:35:48.998487Z |
| ncsc-2025-0232 | Kwetsbaarheid verholpen in Keycloak | 2025-07-18T13:12:14.074394Z | 2025-07-18T13:12:14.074394Z |
| ncsc-2025-0233 | Zeroday-kwetsbaarheden ontdekt in Microsoft SharePoint Server | 2025-07-20T08:34:22.645952Z | 2025-07-23T15:31:20.529389Z |
| ncsc-2025-0234 | Kwetsbaarheid verholpen in CrushFTP | 2025-07-21T08:34:35.304610Z | 2025-08-28T07:59:34.275023Z |
| ncsc-2025-0235 | Kwetsbaarheden verholpen in Firefox en Thunderbird | 2025-07-23T13:01:45.118883Z | 2025-07-23T13:01:45.118883Z |
| ncsc-2025-0236 | Kwetsbaarheden verholpen in Salesforce Tableau Server | 2025-07-28T07:52:42.872259Z | 2025-07-28T07:52:42.872259Z |
| ncsc-2025-0237 | Kwetsbaarheden verholpen in Autodesk AutoCAD | 2025-07-30T08:04:31.603165Z | 2025-07-30T08:04:31.603165Z |
| ncsc-2025-0238 | Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS | 2025-07-30T13:02:51.663320Z | 2025-07-30T13:02:51.663320Z |
| ncsc-2025-0239 | Kwetsbaarheid verholpen in SonicWall SonicOS | 2025-07-31T11:12:42.653547Z | 2025-07-31T11:12:42.653547Z |
| ncsc-2025-0240 | Kwetsbaarheden verholpen in Rockwell Automation Arena | 2025-08-06T07:55:23.705278Z | 2025-08-06T07:55:23.705278Z |
| ncsc-2025-0241 | Kwetsbaarheden verholpen in Adobe Experience Manager | 2025-08-06T12:11:46.234849Z | 2025-10-17T10:44:55.312550Z |
| ncsc-2025-0242 | Kwetsbaarheden verholpen in Trend Micro Apex One | 2025-08-06T13:21:03.156432Z | 2025-08-06T13:21:03.156432Z |
| ncsc-2025-0243 | Kwetsbaarheid verholpen in Microsoft Exchange | 2025-08-07T09:15:22.461434Z | 2025-08-07T09:15:22.461434Z |
| ncsc-2025-0244 | Kwetsbaarheid verholpen in WinRAR | 2025-08-11T07:36:12.848669Z | 2025-08-11T07:36:12.848669Z |
| ncsc-2025-0245 | Kwetsbaarheden verholpen in SAP producten | 2025-08-12T11:10:21.111816Z | 2025-09-05T11:12:05.722381Z |
| ncsc-2025-0246 | Kwetsbaarheden verholpen in Siemens producten | 2025-08-12T13:03:08.211775Z | 2025-08-12T13:03:08.211775Z |
| ncsc-2025-0247 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2025-08-13T07:19:19.911308Z | 2025-08-13T07:19:19.911308Z |
| ncsc-2025-0248 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-08-13T07:21:52.836899Z | 2025-08-13T07:21:52.836899Z |
| ncsc-2025-0249 | Kwetsbaarheden verholpen in Azure-producten | 2025-08-13T07:22:17.432067Z | 2025-08-13T07:22:17.432067Z |
| ncsc-2025-0250 | Kwetsbaarheden verholpen in Microsoft Office | 2025-08-13T07:23:56.395786Z | 2025-08-13T07:23:56.395786Z |
| ncsc-2025-0251 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-08-13T07:25:08.789693Z | 2025-08-13T07:25:08.789693Z |
| ncsc-2025-0252 | Kwetsbaarheden verholpen in Microsoft Exchange Server | 2025-08-13T07:29:24.639524Z | 2025-08-13T07:29:24.639524Z |
| ncsc-2025-0253 | Kwetsbaarheden verholpen in Ivanti Connect Secure, Policy Secure en ZTA Gateways | 2025-08-13T09:06:58.420498Z | 2025-08-13T09:06:58.420498Z |
| ncsc-2025-0254 | Kwetsbaarheden verholpen in Zoom | 2025-08-13T09:09:21.491424Z | 2025-08-13T09:09:21.491424Z |
| ncsc-2025-0255 | Kwetsbaarheden verholpen in Fortinet producten | 2025-08-13T09:16:29.067287Z | 2025-08-13T09:35:40.587034Z |
| ncsc-2025-0256 | Kwetsbaarheden verholpen in Adobe Illustrator | 2025-08-13T09:59:45.240348Z | 2025-08-13T09:59:45.240348Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-024584 | SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-196737 | SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2 | 2024-06-11T00:00:00Z | 2025-02-11T00:00:00Z |
| ssa-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-690517 | SSA-690517: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11ax Family | 2024-06-11T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-771940 | SSA-771940: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-06-11T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-088132 | SSA-088132: Denial of Service Vulnerability in the OPC UA Server Implementations of Several Industrial Products | 2024-07-09T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-170375 | SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9 | 2024-07-09T00:00:00Z | 2025-08-12T00:00:00Z |
| ssa-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-364175 | SSA-364175: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1 | 2024-07-09T00:00:00Z | 2026-01-13T00:00:00Z |
| ssa-381581 | SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-698820 | SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices | 2024-07-09T00:00:00Z | 2026-01-13T00:00:00Z |
| ssa-722010 | SSA-722010: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go | 2024-07-09T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-723487 | SSA-723487: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Products | 2024-07-09T00:00:00Z | 2025-12-09T00:00:00Z |
| ssa-750499 | SSA-750499: Weak Encryption Vulnerability in SIPROTEC 5 Devices | 2024-07-09T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-779936 | SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-824889 | SSA-824889: XML File Parsing Vulnerabilities in JT Open and PLM XML SDK | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-825651 | SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-868282 | SSA-868282: Multiple Vulnerabilities in SINEMA Remote Connect Client before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-883918 | SSA-883918: Information Disclosure Vulnerability in SIMATIC WinCC | 2024-07-09T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-928781 | SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2003:027 | Red Hat Security Advisory: netscape security update | 2003-07-09T07:57:00+00:00 | 2025-11-21T17:25:26+00:00 |
| rhsa-2003_027 | Red Hat Security Advisory: netscape security update | 2003-07-09T07:57:00+00:00 | 2024-11-21T22:37:19+00:00 |
| rhsa-2003:229 | Red Hat Security Advisory: : : : Updated ypserv packages fix various vulnerabilities | 2003-07-14T16:00:00+00:00 | 2025-11-21T17:26:18+00:00 |
| rhsa-2003_229 | Red Hat Security Advisory: : : : Updated ypserv packages fix various vulnerabilities | 2003-07-14T16:00:00+00:00 | 2024-11-21T22:45:45+00:00 |
| rhsa-2003:207 | Red Hat Security Advisory: nfs-utils security update | 2003-07-14T16:08:00+00:00 | 2025-11-21T17:26:12+00:00 |
| rhsa-2003_207 | Red Hat Security Advisory: nfs-utils security update | 2003-07-14T16:08:00+00:00 | 2024-11-21T22:47:37+00:00 |
| rhsa-2003:206 | Red Hat Security Advisory: : : : Updated nfs-utils packages fix denial of service vulnerability | 2003-07-14T16:10:00+00:00 | 2025-11-21T17:26:12+00:00 |
| rhsa-2003_206 | Red Hat Security Advisory: : : : Updated nfs-utils packages fix denial of service vulnerability | 2003-07-14T16:10:00+00:00 | 2024-11-21T22:47:33+00:00 |
| rhsa-2003:225 | Red Hat Security Advisory: : : : Updated LPRng packages fix psbanner vulnerability | 2003-07-14T16:12:00+00:00 | 2025-11-21T17:26:16+00:00 |
| rhsa-2003_225 | Red Hat Security Advisory: : : : Updated LPRng packages fix psbanner vulnerability | 2003-07-14T16:12:00+00:00 | 2024-11-21T22:44:37+00:00 |
| rhsa-2003:228 | Red Hat Security Advisory: : : : Updated xinetd packages fix denial-of-service attacks and other bugs | 2003-07-14T19:33:00+00:00 | 2025-11-21T17:26:17+00:00 |
| rhsa-2003_228 | Red Hat Security Advisory: : : : Updated xinetd packages fix denial-of-service attacks and other bugs | 2003-07-14T19:33:00+00:00 | 2024-11-21T22:45:18+00:00 |
| rhsa-2003:162 | Red Hat Security Advisory: : : : Updated Mozilla packages fix security vulnerability. | 2003-07-15T07:42:00+00:00 | 2025-11-21T17:26:04+00:00 |
| rhsa-2003_162 | Red Hat Security Advisory: : : : Updated Mozilla packages fix security vulnerability. | 2003-07-15T07:42:00+00:00 | 2024-11-21T22:45:16+00:00 |
| rhsa-2003:226 | Red Hat Security Advisory: : : : Updated samba packages fix security vulnerabilities | 2003-07-15T16:51:00+00:00 | 2025-11-21T17:26:20+00:00 |
| rhsa-2003_226 | Red Hat Security Advisory: : : : Updated samba packages fix security vulnerabilities | 2003-07-15T16:51:00+00:00 | 2024-11-21T22:44:30+00:00 |
| rhsa-2003:238 | Red Hat Security Advisory: : : : Updated 2.4 kernel fixes vulnerabilities | 2003-07-21T15:36:00+00:00 | 2025-11-21T17:26:20+00:00 |
| rhsa-2003_238 | Red Hat Security Advisory: : : : Updated 2.4 kernel fixes vulnerabilities | 2003-07-21T15:36:00+00:00 | 2024-11-21T22:48:16+00:00 |
| rhsa-2003:234 | Red Hat Security Advisory: : Updated semi packages fix vulnerability | 2003-07-23T16:33:00+00:00 | 2025-11-21T17:26:24+00:00 |
| rhsa-2003_234 | Red Hat Security Advisory: : Updated semi packages fix vulnerability | 2003-07-23T16:33:00+00:00 | 2024-11-21T22:47:57+00:00 |
| rhsa-2003:221 | Red Hat Security Advisory: : Updated stunnel packages fix signal vulnerability | 2003-07-25T13:14:00+00:00 | 2025-11-21T17:26:14+00:00 |
| rhsa-2003_221 | Red Hat Security Advisory: : Updated stunnel packages fix signal vulnerability | 2003-07-25T13:14:00+00:00 | 2024-11-21T22:47:38+00:00 |
| rhsa-2003:223 | Red Hat Security Advisory: stunnel security update | 2003-07-25T13:17:00+00:00 | 2025-11-21T17:26:15+00:00 |
| rhsa-2003_223 | Red Hat Security Advisory: stunnel security update | 2003-07-25T13:17:00+00:00 | 2024-11-21T22:47:41+00:00 |
| rhsa-2003:224 | Red Hat Security Advisory: openssh security update | 2003-07-29T07:27:00+00:00 | 2025-11-21T17:26:16+00:00 |
| rhsa-2003_224 | Red Hat Security Advisory: openssh security update | 2003-07-29T07:27:00+00:00 | 2024-11-21T22:47:46+00:00 |
| rhsa-2003:222 | Red Hat Security Advisory: : Updated openssh packages available | 2003-07-29T16:06:00+00:00 | 2025-11-21T17:26:14+00:00 |
| rhsa-2003_222 | Red Hat Security Advisory: : Updated openssh packages available | 2003-07-29T16:06:00+00:00 | 2024-11-21T22:47:42+00:00 |
| rhsa-2003:236 | Red Hat Security Advisory: kdelibs security update | 2003-07-30T20:48:00+00:00 | 2025-11-21T17:26:20+00:00 |
| rhsa-2003_236 | Red Hat Security Advisory: kdelibs security update | 2003-07-30T20:48:00+00:00 | 2024-11-21T22:48:04+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-16-287-06 | FATEK Automation Designer Memory Corruption Vulnerabilities | 2016-07-17T06:00:00.000000Z | 2025-06-05T21:59:56.623803Z |
| icsa-16-287-07a | Kabona AB WDC Vulnerabilities (Update A) | 2016-07-17T06:00:00.000000Z | 2025-06-26T14:47:55.479923Z |
| icsa-16-292-01 | Schneider Electric PowerLogic PM8ECC Hard-coded Password Vulnerability | 2016-07-22T06:00:00.000000Z | 2025-06-05T22:00:40.751040Z |
| icsa-16-294-01 | Moxa EDR-810 Industrial Secure Router Privilege Escalation Vulnerability | 2016-07-24T06:00:00.000000Z | 2025-06-05T22:00:47.061524Z |
| icsa-16-299-01 | Siemens SICAM RTU Devices Denial-of-Service Vulnerability | 2016-07-29T06:00:00.000000Z | 2025-06-05T22:00:53.302460Z |
| icsa-16-301-01 | Honeywell Experion PKS Improper Input Validation Vulnerability | 2016-07-31T06:00:00.000000Z | 2025-06-05T22:00:59.524749Z |
| icsa-16-306-01 | Schneider Electric ConneXium Buffer Overflow Vulnerability | 2016-08-05T06:00:00.000000Z | 2025-06-05T22:01:05.732440Z |
| icsa-16-306-02 | IBHsoftec S7-SoftPLC CPX43 Heap-based Buffer Overflow Vulnerability | 2016-08-05T06:00:00.000000Z | 2025-06-26T14:48:20.911473Z |
| icsa-16-306-03 | Schneider Electric Unity PRO Control Flow Management Vulnerability | 2016-08-05T06:00:00.000000Z | 2025-06-05T22:01:18.546151Z |
| icsma-16-306-01 | Smiths Medical CADD-Solis Medication Safety Software Vulnerabilities | 2016-08-05T06:00:00.000000Z | 2025-06-05T21:56:42.285844Z |
| icsa-16-308-01 | Moxa OnCell Security Vulnerabilities | 2016-08-07T06:00:00.000000Z | 2025-06-05T22:01:24.817023Z |
| icsa-16-308-02b | Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B) | 2016-08-07T06:00:00.000000Z | 2025-06-05T22:01:37.316376Z |
| icsa-16-313-01 | Phoenix Contact ILC PLC Authentication Vulnerabilities | 2016-08-12T06:00:00.000000Z | 2025-06-05T22:01:49.839605Z |
| icsa-16-313-03 | OSIsoft PI System Incomplete Model of Endpoint Features Vulnerability | 2016-08-12T06:00:00.000000Z | 2025-06-05T22:02:02.695028Z |
| icsa-16-315-01b | CA Unified Infrastructure Management Directory Traversal Vulnerability (Update B) | 2016-08-14T06:00:00.000000Z | 2025-06-05T22:02:08.926022Z |
| icsa-16-320-01 | Lynxspring JENEsys BAS Bridge Vulnerabilities | 2016-08-19T06:00:00.000000Z | 2025-06-05T22:02:15.149456Z |
| icsa-16-322-01 | Vanderbilt Industries Siemens IP CCTV Cameras Vulnerability | 2016-08-21T06:00:00.000000Z | 2025-06-05T22:02:40.536934Z |
| icsa-16-322-02 | Moxa SoftCMS Vulnerabilities | 2016-08-21T06:00:00.000000Z | 2025-06-05T22:02:46.777740Z |
| icsa-16-334-01 | Emerson Liebert SiteScan XML External Entity Vulnerability | 2016-09-02T06:00:00.000000Z | 2025-06-05T22:03:05.507055Z |
| icsa-16-334-02 | Emerson DeltaV Easy Security Management Application Vulnerability | 2016-09-02T06:00:00.000000Z | 2025-06-05T21:56:36.069112Z |
| icsa-16-334-03 | Emerson DeltaV Wireless I/O Card Open SSH Port Vulnerability | 2016-09-02T06:00:00.000000Z | 2025-06-05T22:03:11.738502Z |
| icsa-16-336-01a | Siemens SICAM PAS Vulnerabilities | 2016-09-04T06:00:00.000000Z | 2025-06-05T21:54:43.517387Z |
| icsa-16-336-02a | Moxa NPort Device Vulnerabilities | 2016-09-04T06:00:00.000000Z | 2025-06-05T21:49:24.949030Z |
| icsa-16-336-03 | Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Vulnerabilities | 2016-09-04T06:00:00.000000Z | 2025-06-05T22:03:18.001347Z |
| icsa-16-336-04 | Advantech SUSIAccess Server Vulnerabilities | 2016-09-04T06:00:00.000000Z | 2025-06-05T21:53:15.951469Z |
| icsa-16-341-01 | Tesla Gateway ECU Vulnerability | 2016-09-09T06:00:00.000000Z | 2025-06-05T22:03:30.461381Z |
| icsa-16-343-01 | Moxa MiiNePort Session Hijack Vulnerabilities | 2016-09-11T06:00:00.000000Z | 2025-06-17T16:50:00.161907Z |
| icsa-16-343-02 | Sauter NovaWeb Web HMI Authentication Bypass Vulnerability | 2016-09-11T06:00:00.000000Z | 2025-06-05T22:03:36.733125Z |
| icsa-16-343-03 | Adcon Telemetry A850 Telemetry Gateway Base Station Vulnerabilities | 2016-09-11T06:00:00.000000Z | 2025-06-05T22:03:42.940815Z |
| icsa-16-348-01 | Visonic PowerLink2 Vulnerabilities | 2016-09-16T06:00:00.000000Z | 2025-06-05T22:03:49.178165Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190123-webex-rce | Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities | 2019-01-23T16:00:00+00:00 | 2019-01-30T20:17:00+00:00 |
| cisco-sa-20190123-webex-teams | Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-04-03T20:00:00+00:00 |
| cisco-sa-20190206-aas-creds | Cisco Aironet Active Sensor Static Credentials Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-cms-dos | Cisco Meeting Server Denial of Service Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-cuic-xss | Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-fmc-xss | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-ise-xss | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-meeting-sipdos | Cisco Meeting Server SIP Processing Denial of Service Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-rest-api-ssrf | Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-tms-soap | Cisco TelePresence Management Suite Web Services | 2019-02-06T16:00:00+00:00 | 2020-07-29T16:24:11+00:00 |
| cisco-sa-20190206-tms-xss | Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-webex-andro-xss | Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190206-webex-injection | Cisco Webex Meetings Online Content Injection Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-20T23:23:00+00:00 |
| cisco-sa-20190206-wsa-bypass | Cisco Web Security Appliance Decryption Policy Bypass Vulnerability | 2019-02-06T16:00:00+00:00 | 2019-02-06T16:00:00+00:00 |
| cisco-sa-20190212-nae-dos | Cisco Network Assurance Engine CLI Access with Default Password Vulnerability | 2019-02-12T16:00:00+00:00 | 2019-02-12T16:00:00+00:00 |
| cisco-sa-20190215-runc | Container Privilege Escalation Vulnerability Affecting Cisco Products: February 2019 | 2019-02-15T17:00:00+00:00 | 2019-03-15T19:59:00+00:00 |
| cisco-sa-20190220-cdp-lldp-dos | Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-03-09T00:28:00+00:00 |
| cisco-sa-20190220-chn-root-access | Cisco HyperFlex Software Unauthenticated Root Access Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-04-04T18:44:00+00:00 |
| cisco-sa-20190220-cuc-rxss | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-firpwr-dos | Cisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-fpwr-ssltls-dos | Cisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-hyper-retrieve | Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-hyper-write | Cisco HyperFlex Arbitrary Statistics Write Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-hyper-xss | Cisco Hyperflex Stored Cross-Site Scripting Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-hyperflex-injection | Cisco HyperFlex Software Command Injection Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-10-23T18:41:14+00:00 |
| cisco-sa-20190220-iot-fnd-xml | Cisco IoT Field Network Director XML External Entity Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-ipphone-certs | Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-ncs | Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-pca-access | Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| cisco-sa-20190220-prime-validation | Cisco Prime Infrastructure Certificate Validation Vulnerability | 2019-02-20T16:00:00+00:00 | 2019-02-20T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2020-5291 | Privilege escalation in setuid mode via user namespaces in Bubblewrap | 2020-03-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-7009 | Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to generate an API key can perform a series of steps that result in an API key being generated with elevated privileges. | 2020-03-02T00:00:00.000Z | 2021-12-01T00:00:00.000Z |
| msrc_cve-2020-8910 | Auth Bypass in Google's Closure-Library | 2020-03-02T00:00:00.000Z | 2025-09-03T23:49:20.000Z |
| msrc_cve-2018-21232 | re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags. | 2020-04-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2020-11102 | hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length. | 2020-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2020-11494 | An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data potentially containing sensitive information from kernel stack memory if the configuration lacks CONFIG_INIT_STACK_ALL aka CID-b9258a2cece4. | 2020-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2020-11501 | GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol. | 2020-04-02T00:00:00.000Z | 2020-09-09T00:00:00.000Z |
| msrc_cve-2020-11565 | An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user so triggering the bug does not grant any powers not already held.” | 2020-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2020-11608 | An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints aka CID-998912346c0d. | 2020-04-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-11609 | An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors as demonstrated by a NULL pointer dereference aka CID-485b06aadb93. | 2020-04-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-11655 | SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled. | 2020-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2020-11656 | In SQLite through 3.31.1 the ALTER TABLE implementation has a use-after-free as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement. | 2020-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2020-11668 | In the Linux kernel before 5.6.1 drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors aka CID-a246b4d54770. | 2020-04-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-11725 | snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE have been designed to misuse the info->owner field in a safe way | 2020-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2020-11869 | An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process resulting in a denial of service. | 2020-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2020-11884 | In the Linux kernel 4.19 through 5.6.7 on the s390 platform code execution may occur because of a race condition as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade aka CID-3f777e19d171. A crash could also occur. | 2020-04-02T00:00:00.000Z | 2020-11-10T00:00:00.000Z |
| msrc_cve-2020-12464 | usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference aka CID-056ad39ee925. | 2020-04-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-12465 | An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10 aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages. | 2020-04-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-1751 | An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically the backtrace function did not properly check the array bounds when storing the frame address resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability. | 2020-04-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-1752 | A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that when processed by the glob function would potentially lead to arbitrary code execution. This was fixed in version 2.32. | 2020-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2020-6096 | An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the 'num' parameter to memcpy() this vulnerability could lead to undefined behavior such as writing to out-of-bounds memory and potentially remote code execution. Furthermore this memcpy() implementation allows for program execution to continue in scenarios where a segmentation fault or crash should have occurred. The dangers occur in that subsequent execution and iterations of this code will be executed with this corrupted data. | 2020-04-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2018-20225 | An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely | 2020-05-02T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2019-20794 | An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace and mount a FUSE filesystem. Upon interaction with this FUSE filesystem if the userspace component is terminated via a kill of the PID namespace's pid 1 it will result in a hung task and resources being permanently locked up until system reboot. This can result in resource exhaustion. | 2020-05-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2019-20807 | In Vim before 8.1.0881 users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g. Python Ruby or Lua). | 2020-05-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-10690 | There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode. | 2020-05-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-10711 | A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine it sets the security attribute to indicate that the category bitmap is present even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel resulting in a denial of service. | 2020-05-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2020-10722 | A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption. | 2020-05-02T00:00:00.000Z | 2025-09-03T20:43:23.000Z |
| msrc_cve-2020-10723 | A memory corruption issue was found in DPDK versions 17.05 and above | 2020-05-02T00:00:00.000Z | 2025-09-03T22:10:21.000Z |
| msrc_cve-2020-10724 | A vulnerability was found in DPDK versions 18.11 and above | 2020-05-02T00:00:00.000Z | 2025-09-03T21:55:35.000Z |
| msrc_cve-2020-10744 | An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18 2.8.12 and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5 3.5.6 and 3.6.4 as well as previous versions are affected. | 2020-05-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15846-1 | python39-3.9.25-2.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15847-1 | anubis-1.24.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| opensuse-su-2025:15848-1 | python311-openapi-core-0.22.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| opensuse-su-2025:15849-1 | python311-3.11.14-3.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15850-1 | python312-3.12.12-4.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15851-1 | python313-3.13.11-1.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15852-1 | trivy-0.68.2-1.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15853-1 | weblate-5.14.3-2.1 on GA media | 2025-12-30T00:00:00Z | 2025-12-30T00:00:00Z |
| opensuse-su-2025:20178-1 | Security update for chromium | 2025-12-30T16:56:53Z | 2025-12-30T16:56:53Z |
| opensuse-su-2025:20097-1 | Security update for helmfile | 2025-12-30T17:00:02Z | 2025-12-30T17:00:02Z |
| opensuse-su-2025:20128-1 | Security update for shadowsocks-v2ray-plugin, v2ray-core | 2025-12-30T17:02:04Z | 2025-12-30T17:02:04Z |
| opensuse-su-2025:20155-1 | Security update for exim | 2025-12-30T17:02:44Z | 2025-12-30T17:02:44Z |
| opensuse-su-2025:20121-1 | Security update for redis | 2025-12-30T17:05:45Z | 2025-12-30T17:05:45Z |
| opensuse-su-2025:20130-1 | Security update for bash-git-prompt | 2025-12-30T17:08:26Z | 2025-12-30T17:08:26Z |
| opensuse-su-2025:15854-1 | kepler-0.11.3-1.1 on GA media | 2025-12-31T00:00:00Z | 2025-12-31T00:00:00Z |
| opensuse-su-2026:10000-1 | gnu-recutils-1.9-3.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10001-1 | dirmngr-2.5.16-1.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10002-1 | libmatio-devel-1.5.29-1.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10003-1 | python311-marshmallow-3.26.2-1.1 on GA media | 2026-01-02T00:00:00Z | 2026-01-02T00:00:00Z |
| opensuse-su-2026:20002-1 | Security update for MozillaThunderbird | 2026-01-02T12:14:18Z | 2026-01-02T12:14:18Z |
| opensuse-su-2026:20001-1 | Security update for sssd | 2026-01-02T16:58:16Z | 2026-01-02T16:58:16Z |
| opensuse-su-2026:10004-1 | fluidsynth-2.5.2-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:10005-1 | python312-Django6-6.0-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:10006-1 | dcmtk-3.7.0-1.1 on GA media | 2026-01-05T00:00:00Z | 2026-01-05T00:00:00Z |
| opensuse-su-2026:10007-1 | c-ares-devel-1.34.6-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10008-1 | gpsd-3.27.3-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10009-1 | log4j-2.20.0-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10010-1 | python311-filelock-3.20.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10011-1 | python314-3.14.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10012-1 | ImageMagick-7.1.2.12-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2020-881 | Heap-buffer-overflow in read_uleb128 | 2020-07-14T22:13:57.548799Z | 2022-04-13T03:04:36.670946Z |
| osv-2020-885 | Stack-use-after-scope in coolkey_apdu_io | 2020-07-14T22:13:58.474226Z | 2022-04-13T03:04:41.670487Z |
| osv-2020-889 | Use-of-uninitialized-value in RGBTOHLS | 2020-07-16T00:00:23.898514Z | 2022-04-13T03:04:42.443563Z |
| osv-2020-891 | Heap-buffer-overflow in ccr_handle_message_from_client | 2020-07-21T00:00:05.825108Z | 2022-04-13T03:04:42.581747Z |
| osv-2020-893 | Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint | 2020-07-21T00:00:06.900609Z | 2022-04-13T03:04:31.087641Z |
| osv-2020-902 | Index-out-of-bounds in QUnicodeTables::qGetProp | 2020-07-21T00:00:16.344765Z | 2023-04-21T01:16:49.636521Z |
| osv-2020-903 | Heap-buffer-overflow in rasteropGeneralLow | 2020-07-21T00:00:19.151415Z | 2022-04-13T03:04:32.699227Z |
| osv-2020-908 | Heap-use-after-free in xmlParserPrintFileContextInternal | 2020-07-21T00:00:26.575286Z | 2022-04-13T03:04:39.932469Z |
| osv-2020-910 | Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event | 2020-07-21T00:00:27.471141Z | 2022-04-13T03:04:32.775087Z |
| osv-2020-911 | Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int> | 2020-07-21T00:00:27.530378Z | 2022-04-13T03:04:31.986646Z |
| osv-2020-912 | Use-of-uninitialized-value in ndpi_fill_protocol_category | 2020-07-22T00:00:05.267265Z | 2022-04-13T03:04:36.341463Z |
| osv-2020-913 | Heap-buffer-overflow in sas_read4 | 2020-07-22T00:00:05.456455Z | 2022-04-13T03:04:40.668191Z |
| osv-2020-917 | Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor> | 2020-07-22T00:00:06.823071Z | 2022-04-13T03:04:31.893536Z |
| osv-2020-918 | Heap-buffer-overflow in ndpi_search_oracle | 2020-07-22T00:00:06.875320Z | 2022-04-13T03:04:36.106718Z |
| osv-2020-919 | Use-of-uninitialized-value in ndpi_strdup | 2020-07-22T00:00:07.492917Z | 2022-04-13T03:04:36.117837Z |
| osv-2020-920 | Heap-buffer-overflow in pcpp::SSLServerHelloMessage::getSessionIDLength | 2020-07-22T00:00:09.077665Z | 2022-04-13T03:04:38.685508Z |
| osv-2020-922 | Heap-buffer-overflow in ndpi_search_h323 | 2020-07-22T00:00:09.776559Z | 2022-04-13T03:04:36.298012Z |
| osv-2020-925 | Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder> | 2020-07-22T00:00:10.590751Z | 2022-04-13T03:04:42.767001Z |
| osv-2020-927 | Heap-buffer-overflow in LogLuv24toXYZ | 2020-07-22T00:00:11.527956Z | 2022-04-13T03:04:31.537150Z |
| osv-2020-930 | Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch | 2020-07-22T00:00:13.459266Z | 2022-04-13T03:04:38.555308Z |
| osv-2020-934 | UNKNOWN WRITE in ideint_process | 2020-07-22T00:00:14.651452Z | 2022-04-13T03:04:33.833299Z |
| osv-2020-936 | Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor> | 2020-07-22T00:00:15.065970Z | 2022-04-13T03:04:31.981199Z |
| osv-2020-940 | Heap-use-after-free in surround51_to_stereo_downmix_mtx | 2020-07-22T00:00:19.715558Z | 2022-04-13T03:04:42.597913Z |
| osv-2020-941 | Heap-buffer-overflow in gc_mark_string | 2020-07-22T00:00:20.220294Z | 2022-04-13T03:04:34.993532Z |
| osv-2020-942 | Heap-buffer-overflow in ihevcd_mv_pred | 2020-07-22T00:00:20.933703Z | 2022-04-13T03:04:31.015613Z |
| osv-2020-943 | Heap-buffer-overflow in pcpp::HeaderField::HeaderField | 2020-07-22T00:00:21.373584Z | 2022-04-13T03:04:38.590838Z |
| osv-2020-945 | Heap-buffer-overflow in pcpp::SSLExtension::getLength | 2020-07-22T00:00:22.089556Z | 2022-04-13T03:04:38.634432Z |
| osv-2020-948 | Heap-buffer-overflow in surround51_to_stereo_downmix_mtx | 2020-07-22T00:00:22.941909Z | 2022-04-13T03:04:42.566045Z |
| osv-2020-954 | Use-of-uninitialized-value in adler32_z | 2020-07-22T00:00:25.376679Z | 2022-04-13T03:04:31.489268Z |
| osv-2020-955 | UNKNOWN WRITE in vcf_parse_format | 2020-07-22T00:00:25.417163Z | 2022-04-13T03:04:32.290566Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2023-0007 | Timing Oracle in RSA Decryption | 2023-02-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0008 | X.509 Name Constraints Read Buffer Overflow | 2023-02-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0009 | Use-after-free following `BIO_new_NDEF` | 2023-02-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0010 | Double free after calling `PEM_read_bio_ex` | 2023-02-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0011 | Invalid pointer dereference in `d2i_PKCS7` functions | 2023-02-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0012 | `NULL` dereference validating DSA public key | 2023-02-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0013 | `NULL` dereference during PKCS7 data verification | 2023-02-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0014 | Miscompilation in cortex-m-rt 0.7.1 and 0.7.2 | 2023-02-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0081 | safemem is unmaintained | 2023-02-14T12:00:00Z | 2024-03-04T18:47:07Z |
| rustsec-2023-0016 | Possible out-of-bounds read in release mode | 2023-02-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0043 | ftp is unmaintained, use suppaftp instead | 2023-02-20T12:00:00Z | 2023-06-14T13:23:36Z |
| rustsec-2023-0018 | Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) | 2023-02-24T12:00:00Z | 2023-03-04T21:50:30Z |
| rustsec-2023-0015 | Ascii allows out-of-bounds array indexing in safe code | 2023-02-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0090 | Guest-controlled out-of-bounds read/write on x86\_64 | 2023-03-02T12:00:00Z | 2025-05-02T08:23:27Z |
| rustsec-2023-0093 | Miscompilation of `i8x16.select` with the same inputs on x86\_64 | 2023-03-03T12:00:00Z | 2025-05-02T08:23:27Z |
| rustsec-2023-0017 | `maligned::align_first` causes incorrect deallocation | 2023-03-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0020 | const-cstr is Unmaintained | 2023-03-12T12:00:00Z | 2023-03-12T18:38:56Z |
| rustsec-2023-0025 | Gitoxide has renamed its crates. | 2023-03-14T12:00:00Z | 2023-03-24T15:33:49Z |
| rustsec-2023-0026 | Gitoxide has renamed its crates. | 2023-03-14T12:00:00Z | 2023-03-24T15:33:49Z |
| rustsec-2023-0021 | NULL pointer dereference in `stb_image` | 2023-03-19T12:00:00Z | 2023-07-15T15:07:13Z |
| rustsec-2023-0032 | Unsound FFI: Wrong API usage causes write past allocated area | 2023-03-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0022 | `openssl` `X509NameBuilder::build` returned object is not thread safe | 2023-03-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0023 | `openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read | 2023-03-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0024 | `openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference | 2023-03-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0027 | TLS certificate common name validation bypass | 2023-03-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0029 | TLS certificate common name validation bypass | 2023-03-24T12:00:00Z | 2023-11-08T09:57:41Z |
| rustsec-2023-0030 | `Versionize::deserialize` implementation for `FamStructWrapper<T>` is lacking bound checks, potentially leading to out of bounds memory accesses | 2023-03-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0031 | Initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers | 2023-03-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2023-0036 | tree_magic is Unmaintained | 2023-04-11T12:00:00Z | 2023-04-25T03:08:42Z |
| rustsec-2023-0050 | multipart is Unmaintained | 2023-04-11T12:00:00Z | 2023-08-18T20:38:40Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-lua-2021-44647 | 2024-03-06T10:56:13.475Z | 2025-04-03T14:40:37.652Z | |
| bit-modsecurity-2024-1019 | WAF bypass of the ModSecurity v3 release line | 2024-03-06T10:56:13.572Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2022-21655 | Incorrect handling of internal redirects results in crash in Envoy | 2024-03-06T10:56:14.571Z | 2025-05-20T10:02:07.006Z |
| bit-mod_wsgi-2022-2255 | 2024-03-06T10:56:14.075Z | 2025-04-03T14:40:37.652Z | |
| bit-apache-2021-26691 | Apache HTTP Server mod_session response handling heap overflow | 2024-03-06T10:56:15.597Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-24936 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 2024-03-06T10:56:15.561Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-5825 | Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab | 2024-03-06T10:56:16.968Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2023-36462 | Mastodon's verified profile links can be formatted in a misleading way | 2024-03-06T10:56:16.089Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6976 | Unrestricted Upload of File with Dangerous Type | 2024-03-06T10:56:16.395Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2023-28434 | MinIO is vulnerable to privilege escalation on Linux/MacOS | 2024-03-06T10:56:17.000Z | 2025-10-22T09:08:25.162Z |
| bit-mariadb-2022-32089 | 2024-03-06T10:56:18.674Z | 2025-04-03T14:40:37.652Z | |
| bit-drupal-2020-13688 | 2024-03-06T10:56:19.474Z | 2025-04-03T14:40:37.652Z | |
| bit-modsecurity2-2024-1019 | WAF bypass of the ModSecurity v3 release line | 2024-03-06T10:56:19.660Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24539 | Improper sanitization of CSS values in html/template | 2024-03-06T10:56:20.094Z | 2025-05-20T10:02:07.006Z |
| bit-jenkins-2023-27901 | 2024-03-06T10:56:20.197Z | 2025-04-03T14:40:37.652Z | |
| bit-airflow-2022-43982 | Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL | 2024-03-06T10:56:21.690Z | 2025-05-20T10:02:07.006Z |
| bit-grafana-2022-31123 | Grafana plugin signature bypass vulnerability | 2024-03-06T10:56:23.793Z | 2025-05-20T10:02:07.006Z |
| bit-modsecurity-2023-38285 | 2024-03-06T10:56:23.264Z | 2025-04-03T14:40:37.652Z | |
| bit-discourse-2023-36473 | CSP nonce reuse vulnerability in Discourse | 2024-03-06T10:56:25.676Z | 2025-05-20T10:02:07.006Z |
| bit-django-2020-13596 | 2024-03-06T10:56:25.690Z | 2025-04-03T14:40:37.652Z | |
| bit-apache-2021-26690 | mod_session NULL pointer dereference | 2024-03-06T10:56:26.490Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2022-21654 | Incorrect configuration handling allows TLS session re-use without re-validation in Envoy | 2024-03-06T10:56:26.107Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-5612 | Missing Authorization in GitLab | 2024-03-06T10:56:26.779Z | 2025-05-20T10:02:07.006Z |
| bit-lua-2021-43519 | 2024-03-06T10:56:26.904Z | 2025-04-03T14:40:37.652Z | |
| bit-mariadb-2022-32088 | 2024-03-06T10:56:26.593Z | 2025-04-03T14:40:37.652Z | |
| bit-mlflow-2023-6975 | Path Traversal: '\..\filename' | 2024-03-06T10:56:26.983Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-24897 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:56:27.786Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2023-36461 | Mastodon vulnerable to Denial of Service through slow HTTP responses | 2024-03-06T10:56:27.083Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2023-28433 | Minio Privilege Escalation on Windows via Path separator manipulation | 2024-03-06T10:56:28.094Z | 2025-05-20T10:02:07.006Z |
| bit-jenkins-2023-27900 | 2024-03-06T10:56:29.380Z | 2025-04-03T14:40:37.652Z |
| ID | Description | Updated |
|---|---|---|
| var-201903-1646 | ZTE Video Conference MCU Device is reflective XSS Vulnerabilities. Attackers can use this… | 2022-05-04T09:03:27.773000Z |
| var-201901-1701 | Cloud EC e-commerce system (hereinafter referred to as cloud EC) is a set of open source … | 2022-05-04T09:03:34.172000Z |
| var-201810-1615 | Hollysys Group is a professional automation company integrating R & D, production, sales … | 2022-05-04T09:03:42.227000Z |
| var-201809-1335 | Node-RED is a tool for building Internet of Things (IOT) applications. Its focus is to si… | 2022-05-04T09:03:47.319000Z |
| var-201806-1888 | Tplink ER5110G, Tplink ER5120G and Tplink WAR1300L are all enterprise VPN routers and ent… | 2022-05-04T09:03:58.515000Z |
| var-201806-1890 | Tplink ER5110G, Tplink ER5120G and Tplink WAR1300L are all enterprise VPN routers and ent… | 2022-05-04T09:03:58.503000Z |
| var-201804-1728 | Shenyi Technology Group Co., Ltd. is developing website construction and network applicat… | 2022-05-04T09:04:05.070000Z |
| var-201803-2358 | The Play Library SDK is developed based on Dahua's proprietary stream encapsulation proto… | 2022-05-04T09:04:07.503000Z |
| var-201802-0997 | A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and… | 2022-05-04T09:04:13.245000Z |
| var-201801-1838 | pelco Sarix Enhanced is a webcam. The pelco Sarix Enhanced GeneralSetupController.php fi… | 2022-05-04T09:04:14.925000Z |
| var-201712-0082 | IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages w… | 2022-05-04T09:04:17.734000Z |
| var-201710-1447 | Vacron is mainly engaged in the production of various types of mobile monitoring, CCTV mo… | 2022-05-04T09:04:22.925000Z |
| var-201709-1247 | The Fixon K2 (PSG1218) router is a new-generation wireless router necessary for entry-lev… | 2022-05-04T09:04:24.184000Z |
| var-201708-1649 | ZTE OLT C200, C220, C300, C320 are the key PON equipment used in the optical switching ne… | 2022-05-04T09:04:29.840000Z |
| var-201707-1350 | The HP Photosmart 5520 series is a mid-range inkjet printer. The HP Photosmart 5520 seri… | 2022-05-04T09:04:31.803000Z |
| var-201707-0847 | An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traf… | 2022-05-04T09:04:32.358000Z |
| var-201706-1122 | The HPERK-321A is a wireless desktop device consisting of a mouse and a keyboard. HPERK-3… | 2022-05-04T09:04:33.319000Z |
| var-201706-1143 | Foscamcamera is a webcam that can push messages to mobile phones and directly implement v… | 2022-05-04T09:04:33.308000Z |
| var-201705-4203 | InforCube Next Generation Firewall (NFW) is an integrated security gateway security solut… | 2022-05-04T09:04:37.335000Z |
| var-201703-1392 | SamsungSmartCam is a security surveillance camera based on cloud services. There is a com… | 2022-05-04T09:04:42.354000Z |
| var-201701-1170 | Moxa NPort5110 is an industrial-grade serial server produced by Taiwan's Moxa Corporation… | 2022-05-04T09:04:47.912000Z |
| var-201612-0646 | MileSight camera is a network camera produced by Xiamen Pulse Vision Digital Technology C… | 2022-05-04T09:04:50.620000Z |
| var-201611-0395 | Xiongmai camera video unauthorized access , Directly view camera images | 2022-05-04T09:04:51.389000Z |
| var-201610-0719 | AVTECH, founded in 1996, is one of the world's leading manufacturers of CCTV. The main pr… | 2022-05-04T09:04:54.866000Z |
| var-201609-0701 | Chuangda Electronics Co., Ltd. is a company that operates camera accessories. There are f… | 2022-05-04T09:04:56.502000Z |
| var-201606-0553 | Midea i + smart refrigerator is a smart home appliance developed by Midea Group. Midea's… | 2022-05-04T09:04:57.982000Z |
| var-201605-0619 | Weak password on Yushi camera, allowing initial password login | 2022-05-04T09:04:59.305000Z |
| var-201601-0677 | Zhejiang Dahua Technology Co., Ltd. is a leading monitoring product supplier and solution… | 2022-05-04T09:05:04.637000Z |
| var-201402-0573 | OpenVox VoxStack is an Asterisk-based analog voice gateway series designed for small and … | 2022-05-04T09:05:35.184000Z |
| var-201309-0596 | The Seagate BlackArmor NAS is a network storage device. The Seagate BlackArmor NAS 110 / … | 2022-05-04T09:05:38.864000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2010-000008 | Compiere vulnerable to cross-site scripting | 2010-04-02T17:32+09:00 | 2010-04-02T17:32+09:00 |
| jvndb-2010-000009 | Compiere vulnerable to cross-site scripting | 2010-04-02T17:32+09:00 | 2010-04-02T17:32+09:00 |
| jvndb-2010-000010 | HL-SiteManager vulnerable to SQL injection | 2010-04-02T17:33+09:00 | 2010-04-02T17:33+09:00 |
| jvndb-2010-000011 | Internet Explorer information disclosure vulnerability | 2010-04-08T17:47+09:00 | 2010-04-08T17:47+09:00 |
| jvndb-2010-000012 | MODx vulnerable to SQL injection | 2010-04-08T17:47+09:00 | 2010-04-08T17:47+09:00 |
| jvndb-2010-000013 | MODx vulnerable to cross-site scripting | 2010-04-08T17:47+09:00 | 2010-04-08T17:47+09:00 |
| jvndb-2010-000014 | Cisco Router and Security Device Manager vulnerable to cross-site scripting | 2010-04-08T17:47+09:00 | 2010-04-08T17:47+09:00 |
| jvndb-2010-001204 | Accela BizSearch Access Control Bypass Vulnerability | 2010-04-09T16:36+09:00 | 2010-04-09T16:36+09:00 |
| jvndb-2010-000015 | Ichitaro series vulnerable to arbitrary code execution | 2010-04-12T17:17+09:00 | 2010-04-12T17:17+09:00 |
| jvndb-2010-000016 | Multiple Cybozu products vulnerable to authentication bypass | 2010-04-21T17:27+09:00 | 2010-04-21T17:27+09:00 |
| jvndb-2010-000017 | Movable Type vulnerable to cross-site scripting | 2010-05-12T15:25+09:00 | 2010-05-12T15:25+09:00 |
| jvndb-2010-000018 | Interstage Application Server vulnerable in request processing | 2010-05-17T16:42+09:00 | 2010-05-17T16:42+09:00 |
| jvndb-2010-000019 | WebSAM DeploymentManager vulnerable to denial of service | 2010-05-17T16:42+09:00 | 2010-05-17T16:42+09:00 |
| jvndb-2010-000020 | CapsSuite Small Edition PatchMeister vulnerable to denial of service | 2010-05-17T16:43+09:00 | 2010-05-17T16:43+09:00 |
| jvndb-2010-001395 | Several EUR Form/EUR Products Arbitrary Code Execution Vulnerability | 2010-05-18T11:33+09:00 | 2010-05-18T11:33+09:00 |
| jvndb-2010-001427 | XMAP3 Arbitrary Code Execution Vulnerability | 2010-05-18T11:34+09:00 | 2010-05-18T11:34+09:00 |
| jvndb-2010-000024 | Ichitaro series vulnerable to arbitrary code execution | 2010-06-01T17:37+09:00 | 2010-06-01T17:37+09:00 |
| jvndb-2010-000021 | e-Pares vulnerable to cross-site scripting | 2010-06-03T11:29+09:00 | 2010-06-03T11:29+09:00 |
| jvndb-2010-000022 | e-Pares vulnerable to cross-site request forgery | 2010-06-03T11:29+09:00 | 2010-06-03T11:29+09:00 |
| jvndb-2010-000023 | e-Pares vulnerable to session fixation | 2010-06-03T11:29+09:00 | 2010-06-03T11:29+09:00 |
| jvndb-2010-001494 | Arbitrary Code Execution Vulnerability in CA ARCserve Backup and BrightStor ARCserve Backup | 2010-06-08T14:03+09:00 | 2010-06-08T14:03+09:00 |
| jvndb-2010-001495 | Stack-Based Buffer Overflow Vulnerability in Collaboration Common Utility | 2010-06-08T14:03+09:00 | 2010-06-08T14:03+09:00 |
| jvndb-2010-000025 | Multiple vulnerabilities in ActiveGeckoBrowser | 2010-06-17T19:50+09:00 | 2010-06-17T19:50+09:00 |
| jvndb-2010-001518 | TP1/Message Control Denial of Service (DoS) Vulnerability | 2010-06-22T11:23+09:00 | 2010-06-22T11:23+09:00 |
| jvndb-2010-001519 | Improper Authentication Vulnerability in Handling of Revoked Certificate in Hitachi Web Server SSL Client Authentication | 2010-06-22T11:23+09:00 | 2010-06-22T11:23+09:00 |
| jvndb-2010-001520 | Groupmax World Wide Web Desktop Cross-Site Scripting Vulnerability | 2010-06-22T11:23+09:00 | 2010-06-22T11:23+09:00 |
| jvndb-2010-001534 | Cross-Site Scripting Vulnerability in Interstage Portalworks and Interstage Interaction Manager Portal Function | 2010-06-22T11:24+09:00 | 2010-06-22T11:24+09:00 |
| jvndb-2010-000026 | Explzh buffer overflow vulnerability | 2010-06-22T16:37+09:00 | 2010-06-22T16:37+09:00 |
| jvndb-2010-001545 | Forced Shutdown or Restart with JP1/ServerConductor/Deployment Manager | 2010-06-29T15:35+09:00 | 2010-06-29T15:35+09:00 |
| jvndb-2010-001719 | Internet Navigware Server Information Disclosure Vulnerability | 2010-07-28T18:14+09:00 | 2010-07-28T18:14+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20896-1 | Security update for openssl-3 | 2025-10-22T12:18:32Z | 2025-10-22T12:18:32Z |
| suse-su-2025:20869-1 | Security update for podman | 2025-10-22T12:25:33Z | 2025-10-22T12:25:33Z |
| suse-su-2025:3729-1 | Security update for krb5 | 2025-10-22T13:19:35Z | 2025-10-22T13:19:35Z |
| suse-su-2025:3731-1 | Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5) | 2025-10-22T13:34:30Z | 2025-10-22T13:34:30Z |
| suse-su-2025:3734-1 | Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5) | 2025-10-22T17:04:43Z | 2025-10-22T17:04:43Z |
| suse-su-2025:3733-1 | Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5) | 2025-10-22T18:34:34Z | 2025-10-22T18:34:34Z |
| suse-su-2025:3736-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP5) | 2025-10-22T22:41:33Z | 2025-10-22T22:41:33Z |
| suse-su-2025:3740-1 | Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP5) | 2025-10-23T05:46:28Z | 2025-10-23T05:46:28Z |
| suse-su-2025:3741-1 | Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5) | 2025-10-23T05:46:36Z | 2025-10-23T05:46:36Z |
| suse-su-2025:3742-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) | 2025-10-23T06:06:49Z | 2025-10-23T06:06:49Z |
| suse-su-2025:3743-1 | Security update for libxslt | 2025-10-23T06:19:50Z | 2025-10-23T06:19:50Z |
| suse-su-2025:3744-1 | Security update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock | 2025-10-23T06:22:53Z | 2025-10-23T06:22:53Z |
| suse-su-2025:3748-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-10-23T09:08:16Z | 2025-10-23T09:08:16Z |
| suse-su-2025:3751-1 | Security update for the Linux Kernel | 2025-10-23T10:25:37Z | 2025-10-23T10:25:37Z |
| suse-su-2025:3752-1 | Security update for libsoup | 2025-10-23T10:26:29Z | 2025-10-23T10:26:29Z |
| suse-su-2025:3753-1 | Security update for libsoup | 2025-10-23T10:26:39Z | 2025-10-23T10:26:39Z |
| suse-su-2025:3754-1 | Security update for python-Authlib | 2025-10-23T10:27:00Z | 2025-10-23T10:27:00Z |
| suse-su-2025:3755-1 | Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP6) | 2025-10-23T11:05:11Z | 2025-10-23T11:05:11Z |
| suse-su-2025:20897-1 | Security update for libxslt | 2025-10-23T12:41:24Z | 2025-10-23T12:41:24Z |
| suse-su-2025:20910-1 | Security update for openssl-3-livepatches | 2025-10-23T13:08:17Z | 2025-10-23T13:08:17Z |
| suse-su-2025:3758-1 | Security update for openssl-1_1-livepatches | 2025-10-23T13:45:12Z | 2025-10-23T13:45:12Z |
| suse-su-2025:20898-1 | Security update for the Linux Kernel | 2025-10-23T13:59:20Z | 2025-10-23T13:59:20Z |
| suse-su-2025:3759-1 | Security update for mozilla-nss | 2025-10-23T14:00:31Z | 2025-10-23T14:00:31Z |
| suse-su-2025:3760-1 | Security update for mozilla-nss | 2025-10-23T14:01:15Z | 2025-10-23T14:01:15Z |
| suse-su-2025:3761-1 | Security update for the Linux Kernel | 2025-10-23T15:04:37Z | 2025-10-23T15:04:37Z |
| suse-su-2025:20871-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_13 | 2025-10-23T15:08:57Z | 2025-10-23T15:08:57Z |
| suse-su-2025:20911-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_13 | 2025-10-23T15:08:57Z | 2025-10-23T15:08:57Z |
| suse-su-2025:20872-1 | Security update for haproxy | 2025-10-23T15:27:42Z | 2025-10-23T15:27:42Z |
| suse-su-2025:20870-1 | Security update for the Linux Kernel | 2025-10-23T16:01:09Z | 2025-10-23T16:01:09Z |
| suse-su-2025:3762-1 | Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP6) | 2025-10-23T18:04:24Z | 2025-10-23T18:04:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2015-00720 | ha存在多个目录遍历漏洞 | 2015-01-20 | 2015-01-28 |
| cnvd-2015-00465 | Oracle Solaris存在未明漏洞(CNVD-2015-00465) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00466 | Oracle Solaris存在未明漏洞(CNVD-2015-00466) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00467 | Oracle Solaris存在未明漏洞(CNVD-2015-00467) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00468 | Oracle Database Server远程漏洞(CNVD-2015-00468) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00469 | Oracle Solaris存在未明漏洞(CNVD-2015-00469) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00470 | Oracle Database Server远程漏洞(CNVD-2015-00470) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00471 | Oracle Solaris存在未明漏洞(CNVD-2015-00471) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00472 | Oracle Database Server远程漏洞(CNVD-2015-00472) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00473 | Oracle Database Server远程漏洞(CNVD-2015-00473) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00474 | Oracle Solaris存在未明漏洞(CNVD-2015-00474) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00476 | Oracle Solaris存在本地漏洞 | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00477 | Oracle Java SE存在远程漏洞(CNVD-2015-00477) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00478 | Oracle Java SE存在本地漏洞 | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00479 | Oracle GlassFish Server远程漏洞 | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00480 | Oracle Transportation Management远程漏洞(CNVD-2015-00480) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00481 | Oracle Transportation Management远程漏洞(CNVD-2015-00481) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00482 | Oracle Transportation Management远程漏洞(CNVD-2015-00482) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00483 | Oracle Transportation Management远程漏洞(CNVD-2015-00483) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00484 | Oracle Solaris存在未明漏洞(CNVD-2015-00484) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00485 | Oracle Solaris存在未明漏洞(CNVD-2015-00485) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00486 | Oracle Solaris存在未明漏洞(CNVD-2015-00486) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00487 | Oracle Database Server远程漏洞(CNVD-2015-00487) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00488 | Oracle WebLogic Server远程漏洞 | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00489 | Oracle Solaris存在未明漏洞(CNVD-2015-00489) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00490 | Oracle Database Server远程漏洞(CNVD-2015-00490) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00491 | Oracle Solaris存在未明漏洞(CNVD-2015-00491) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00492 | Oracle Solaris存在未明漏洞(CNVD-2015-00492) | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00493 | Privoxy拒绝服务漏洞 | 2015-01-21 | 2015-01-22 |
| cnvd-2015-00498 | Schneider Electric ETG3000 FactoryCast HMI Gateway FTP内置密码漏洞 | 2015-01-22 | 2015-01-23 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-162 | Déni de service potentiel de Postfix | 2001-12-17T00:00:00.000000 | 2001-12-17T00:00:00.000000 |
| certa-2001-avi-163 | Vulnérabilités dans Internet Explorer 5.5 et 6 | 2001-12-17T00:00:00.000000 | 2001-12-17T00:00:00.000000 |
| CERTA-2001-AVI-164 | Vulnérabilité du serveur pfinger | 2001-12-20T00:00:00.000000 | 2001-12-20T00:00:00.000000 |
| certa-2001-avi-164 | Vulnérabilité du serveur pfinger | 2001-12-20T00:00:00.000000 | 2001-12-20T00:00:00.000000 |
| CERTA-2001-AVI-165 | Vulnérabilité de UPnP sous Windows | 2001-12-24T00:00:00.000000 | 2001-12-24T00:00:00.000000 |
| CERTA-2001-AVI-166 | Vulnérabilité du serveur web de Lotus Domino associé à SSL | 2001-12-24T00:00:00.000000 | 2001-12-24T00:00:00.000000 |
| CERTA-2001-AVI-167 | Vulnérabilités dans le serveur SQL Microsoft | 2001-12-24T00:00:00.000000 | 2001-12-24T00:00:00.000000 |
| certa-2001-avi-165 | Vulnérabilité de UPnP sous Windows | 2001-12-24T00:00:00.000000 | 2001-12-24T00:00:00.000000 |
| certa-2001-avi-166 | Vulnérabilité du serveur web de Lotus Domino associé à SSL | 2001-12-24T00:00:00.000000 | 2001-12-24T00:00:00.000000 |
| certa-2001-avi-167 | Vulnérabilités dans le serveur SQL Microsoft | 2001-12-24T00:00:00.000000 | 2001-12-24T00:00:00.000000 |
| CERTA-2002-AVI-001 | Vulnérabilité dans glibc sous linux | 2002-01-02T00:00:00.000000 | 2002-01-14T00:00:00.000000 |
| CERTA-2002-AVI-002 | Multiples vulnérabilités dans Oracle9i Application Server | 2002-01-02T00:00:00.000000 | 2002-01-02T00:00:00.000000 |
| CERTA-2002-AVI-003 | Multiples vulnérabilités dans Oracle 9iAS Web Cache | 2002-01-02T00:00:00.000000 | 2002-01-02T00:00:00.000000 |
| certa-2002-avi-001 | Vulnérabilité dans glibc sous linux | 2002-01-02T00:00:00.000000 | 2002-01-14T00:00:00.000000 |
| certa-2002-avi-002 | Multiples vulnérabilités dans Oracle9i Application Server | 2002-01-02T00:00:00.000000 | 2002-01-02T00:00:00.000000 |
| certa-2002-avi-003 | Multiples vulnérabilités dans Oracle 9iAS Web Cache | 2002-01-02T00:00:00.000000 | 2002-01-02T00:00:00.000000 |
| CERTA-2002-AVI-004 | Vulnérabilité dans <TT>Mutt</TT> | 2002-01-08T00:00:00.000000 | 2002-01-14T00:00:00.000000 |
| certa-2002-avi-004 | Vulnérabilité dans <TT>Mutt</TT> | 2002-01-08T00:00:00.000000 | 2002-01-14T00:00:00.000000 |
| CERTA-2002-AVI-005 | Multiples vulnérabilités dans Netscape Enterprise Server et iPlanet Web Server | 2002-01-14T00:00:00.000000 | 2002-01-14T00:00:00.000000 |
| certa-2002-avi-005 | Multiples vulnérabilités dans Netscape Enterprise Server et iPlanet Web Server | 2002-01-14T00:00:00.000000 | 2002-01-14T00:00:00.000000 |
| CERTA-2002-AVI-006 | Vulnérabilité dans Sudo | 2002-01-16T00:00:00.000000 | 2002-01-16T00:00:00.000000 |
| certa-2002-avi-006 | Vulnérabilité dans Sudo | 2002-01-16T00:00:00.000000 | 2002-01-16T00:00:00.000000 |
| CERTA-2002-AVI-007 | Vulnérabilité du daemon <TT>nsd</TT> sous SGI Irix | 2002-01-17T00:00:00.000000 | 2002-01-17T00:00:00.000000 |
| certa-2002-avi-007 | Vulnérabilité du daemon <TT>nsd</TT> sous SGI Irix | 2002-01-17T00:00:00.000000 | 2002-01-17T00:00:00.000000 |
| CERTA-2002-AVI-008 | Vulnérabilité dans pine | 2002-01-18T00:00:00.000000 | 2002-01-18T00:00:00.000000 |
| certa-2002-avi-008 | Vulnérabilité dans pine | 2002-01-18T00:00:00.000000 | 2002-01-18T00:00:00.000000 |
| CERTA-2002-AVI-009 | Vulnérabilité de la commande at | 2002-01-21T00:00:00.000000 | 2002-01-21T00:00:00.000000 |
| certa-2002-avi-009 | Vulnérabilité de la commande at | 2002-01-21T00:00:00.000000 | 2002-01-21T00:00:00.000000 |
| CERTA-2002-AVI-010 | Vulnérabilité dans stunnel | 2002-01-22T00:00:00.000000 | 2002-01-22T00:00:00.000000 |
| certa-2002-avi-010 | Vulnérabilité dans stunnel | 2002-01-22T00:00:00.000000 | 2002-01-22T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2018-ALE-005 | Multiples vulnérabilités dans Drupal | 2018-03-29T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-005 | Multiples vulnérabilités dans Drupal | 2018-03-29T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| CERTFR-2018-ALE-006 | Vulnérabilité dans Cisco IOS et IOS XE Smart Install Client | 2018-04-06T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-006 | Vulnérabilité dans Cisco IOS et IOS XE Smart Install Client | 2018-04-06T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| CERTFR-2018-ALE-007 | Multiples vulnérabilités dans S/MIME et OpenPGP | 2018-05-14T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-007 | Multiples vulnérabilités dans S/MIME et OpenPGP | 2018-05-14T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-008 | Campagne de messages électroniques non sollicités de type Locky Locker | 2018-08-03T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-008 | Campagne de messages électroniques non sollicités de type Locky Locker | 2018-08-03T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-009 | Vulnérabilité dans Microsoft Windows | 2018-08-29T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| CERTFR-2018-ALE-010 | Vulnérabilité activement exploitée dans le framework STRUTS 2 | 2018-08-29T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-009 | Vulnérabilité dans Microsoft Windows | 2018-08-29T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-ale-010 | Vulnérabilité activement exploitée dans le framework STRUTS 2 | 2018-08-29T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-011 | Vulnérabilité dans le client Git | 2018-10-08T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| certfr-2018-ale-011 | Vulnérabilité dans le client Git | 2018-10-08T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| CERTFR-2018-ALE-012 | Vulnérabilité dans Wallix AdminBastion | 2018-10-26T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-012 | Vulnérabilité dans Wallix AdminBastion | 2018-10-26T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| CERTFR-2018-ALE-013 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-013 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| CERTFR-2019-ALE-001 | Vulnérabilité dans le gestionnaire de paquets APT | 2019-01-22T00:00:00.000000 | 2019-02-27T00:00:00.000000 |
| certfr-2019-ale-001 | Vulnérabilité dans le gestionnaire de paquets APT | 2019-01-22T00:00:00.000000 | 2019-02-27T00:00:00.000000 |
| CERTFR-2019-ALE-002 | Vulnérabilités affectant l'écosystème Microsoft Exchange et Active Directory | 2019-01-30T00:00:00.000000 | 2019-03-06T00:00:00.000000 |
| certfr-2019-ale-002 | Vulnérabilités affectant l'écosystème Microsoft Exchange et Active Directory | 2019-01-30T00:00:00.000000 | 2019-03-06T00:00:00.000000 |
| CERTFR-2019-ALE-003 | Campagnes de rançongiciels | 2019-01-31T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-003 | Campagnes de rançongiciels | 2019-01-31T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| CERTFR-2019-ALE-004 | Multiples vulnérabilités dans Microsoft Edge et Internet Explorer | 2019-04-01T00:00:00.000000 | 2019-04-17T00:00:00.000000 |
| certfr-2019-ale-004 | Multiples vulnérabilités dans Microsoft Edge et Internet Explorer | 2019-04-01T00:00:00.000000 | 2019-04-17T00:00:00.000000 |
| CERTFR-2019-ALE-005 | Vulnérabilité dans Oracle WebLogic | 2019-04-26T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-005 | Vulnérabilité dans Oracle WebLogic | 2019-04-26T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| CERTFR-2019-ALE-007 | Vulnérabilité dans le serveur DHCP de Windows | 2019-05-15T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-007 | Vulnérabilité dans le serveur DHCP de Windows | 2019-05-15T00:00:00.000000 | 2019-06-20T00:00:00.000000 |