Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25404 |
N/A
|
WordPress WP Job Manager plugin <= 2.4.0 - Broken Acce… |
Automattic |
WP Job Manager |
2026-02-19T08:27:04.284Z | 2026-02-19T08:27:04.284Z |
| CVE-2026-25389 |
N/A
|
WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Dat… |
Metagauss |
EventPrime |
2026-02-19T08:27:02.493Z | 2026-02-19T08:27:02.493Z |
| CVE-2026-25388 |
N/A
|
WordPress Ads Pro plugin <= 5.0 - Broken Access Contro… |
scripteo |
Ads Pro |
2026-02-19T08:27:02.280Z | 2026-02-19T08:27:02.280Z |
| CVE-2026-25387 |
N/A
|
WordPress Image Optimizer by Elementor plugin <= 1.7.1… |
Elementor |
Image Optimizer by Elementor |
2026-02-19T08:27:02.035Z | 2026-02-19T08:27:02.035Z |
| CVE-2026-25370 |
N/A
|
WordPress WP Compress plugin <= 6.60.28 - Broken Acces… |
AresIT |
WP Compress |
2026-02-19T08:27:00.225Z | 2026-02-19T08:27:00.225Z |
| CVE-2026-25364 |
N/A
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2026-02-19T08:26:59.312Z | 2026-02-19T08:26:59.312Z |
| CVE-2026-25363 |
N/A
|
WordPress FooGallery plugin <= 3.1.11 - Broken Access … |
FooPlugins |
FooGallery |
2026-02-19T08:26:59.110Z | 2026-02-19T08:26:59.110Z |
| CVE-2026-25362 |
N/A
|
WordPress FooGallery plugin <= 3.1.11 - Cross Site Scr… |
FooPlugins |
FooGallery |
2026-02-19T08:26:58.927Z | 2026-02-19T08:26:58.927Z |
| CVE-2026-25343 |
N/A
|
WordPress WP SMS plugin <= 7.1 - Cross Site Scripting … |
VeronaLabs |
WP SMS |
2026-02-19T08:26:58.554Z | 2026-02-19T08:26:58.554Z |
| CVE-2026-25331 |
N/A
|
WordPress WP Activity Log plugin <= 5.5.4 - Cross Site… |
Melapress |
WP Activity Log |
2026-02-19T08:26:57.085Z | 2026-02-19T08:26:57.085Z |
| CVE-2026-25330 |
N/A
|
WordPress PublishPress Authors plugin <= 4.10.1 - Brok… |
PublishPress |
PublishPress Authors |
2026-02-19T08:26:56.890Z | 2026-02-19T08:26:56.890Z |
| CVE-2026-25329 |
N/A
|
WordPress Quiz And Survey Master plugin <= 10.3.4 - Br… |
ExpressTech Systems |
Quiz And Survey Master |
2026-02-19T08:26:56.704Z | 2026-02-19T08:26:56.704Z |
| CVE-2026-25326 |
N/A
|
WordPress CMSMasters Content Composer plugin <= 1.4.5 … |
cmsmasters |
CMSMasters Content Composer |
2026-02-19T08:26:56.504Z | 2026-02-19T08:26:56.504Z |
| CVE-2026-25324 |
N/A
|
WordPress Quiz And Survey Master plugin <= 10.3.4 - In… |
ExpressTech Systems |
Quiz And Survey Master |
2026-02-19T08:26:56.072Z | 2026-02-19T08:26:56.072Z |
| CVE-2026-25323 |
N/A
|
WordPress OSM plugin <= 6.1.12 - Broken Access Control… |
MiKa |
OSM |
2026-02-19T08:26:55.891Z | 2026-02-19T08:26:55.891Z |
| CVE-2026-25322 |
N/A
|
WordPress PublishPress Revisions plugin <= 3.7.22 - Cr… |
PublishPress |
PublishPress Revisions |
2026-02-19T08:26:55.709Z | 2026-02-19T08:26:55.709Z |
| CVE-2026-25316 |
N/A
|
WordPress CartFlows plugin <= 2.1.19 - PHP Object Inje… |
Brainstorm Force |
CartFlows |
2026-02-19T08:26:54.560Z | 2026-02-19T08:26:54.560Z |
| CVE-2026-25315 |
N/A
|
WordPress hCaptcha for WP plugin <= 4.22.0 - Broken Ac… |
hcaptcha |
hCaptcha for WP |
2026-02-19T08:26:54.349Z | 2026-02-19T08:26:54.349Z |
| CVE-2026-25313 |
N/A
|
WordPress FluentForm plugin <= 6.1.14 - Broken Access … |
Shahjahan Jewel |
FluentForm |
2026-02-19T08:26:53.940Z | 2026-02-19T08:26:53.940Z |
| CVE-2026-25307 |
N/A
|
WordPress XStore Core plugin < 5.7 - Cross Site Script… |
8theme |
XStore Core |
2026-02-19T08:26:53.190Z | 2026-02-19T08:26:53.190Z |
| CVE-2026-25305 |
N/A
|
WordPress XStore theme <= 9.6.4 - Cross Site Scripting… |
8theme |
XStore |
2026-02-19T08:26:52.704Z | 2026-02-19T08:26:52.704Z |
| CVE-2026-25008 |
N/A
|
WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Dat… |
Shahjahan Jewel |
Ninja Tables |
2026-02-19T08:26:52.281Z | 2026-02-19T08:26:52.281Z |
| CVE-2026-25006 |
N/A
|
WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode … |
8theme |
XStore |
2026-02-19T08:26:52.080Z | 2026-02-19T08:26:52.080Z |
| CVE-2026-25005 |
N/A
|
WordPress Frontend File Manager plugin <= 23.5 - Insec… |
N-Media |
Frontend File Manager |
2026-02-19T08:26:51.878Z | 2026-02-19T08:26:51.878Z |
| CVE-2026-25004 |
N/A
|
WordPress CM Business Directory plugin <= 1.5.3 - Cros… |
CreativeMindsSolutions |
CM Business Directory |
2026-02-19T08:26:51.689Z | 2026-02-19T08:26:51.689Z |
| CVE-2026-23805 |
N/A
|
WordPress Media Search Enhanced plugin <= 0.9.1 - SQL … |
Yoren Chang |
Media Search Enhanced |
2026-02-19T08:26:50.551Z | 2026-02-19T08:26:50.551Z |
| CVE-2026-23803 |
N/A
|
WordPress Smart Auto Upload Images plugin <= 1.2.2 - S… |
Burhan Nasir |
Smart Auto Upload Images |
2026-02-19T08:26:50.148Z | 2026-02-19T08:26:50.148Z |
| CVE-2026-23548 |
N/A
|
WordPress DirectoryPress plugin <= 3.6.25 - Broken Acc… |
designinvento |
DirectoryPress |
2026-02-19T08:26:49.731Z | 2026-02-19T08:26:49.731Z |
| CVE-2026-23547 |
N/A
|
WordPress CMSMasters Content Composer plugin <= 2.5.8 … |
cmsmasters |
CMSMasters Content Composer |
2026-02-19T08:26:49.398Z | 2026-02-19T08:26:49.398Z |
| CVE-2026-23545 |
N/A
|
WordPress Aruba HiSpeed Cache plugin <= 3.0.4 - Broken… |
Aruba.it Dev |
Aruba HiSpeed Cache |
2026-02-19T08:26:49.211Z | 2026-02-19T08:26:49.211Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2736 |
5.1 (4.0)
|
Reflected Cross-Site Scripting (XSS) vulnerability in … |
Alkacon |
OpenCms |
2026-02-19T08:39:46.150Z | 2026-02-19T08:39:46.150Z |
| CVE-2026-2735 |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) vulnerability in Alk… |
Alkacon |
OpenCms |
2026-02-19T08:38:31.071Z | 2026-02-19T08:38:31.071Z |
| CVE-2026-2733 |
3.8 (3.1)
|
Org.keycloak/keycloak-services: keycloak: missing chec… |
Red Hat |
Red Hat Build of Keycloak |
2026-02-19T07:48:08.910Z | 2026-02-19T21:31:19.914Z |
| CVE-2026-2731 |
10 (4.0)
|
Unauthenticated RCE in Dynamicweb 9 and Dynamicweb 8 |
DynamicWeb |
DynamicWeb 9 |
2026-02-19T06:46:52.763Z | 2026-02-19T21:21:36.185Z |
| CVE-2026-2718 |
6.4 (3.1)
|
Dealia <= 1.0.6 - Authenticated (Contributor+) Stored … |
dealia |
Dealia – Request a quote |
2026-02-19T09:26:36.089Z | 2026-02-19T09:26:36.089Z |
| CVE-2026-2716 |
4.4 (3.1)
|
Client Testimonial Slider <= 2.0 - Authenticated (Admi… |
amu02aftab |
Client Testimonial Slider |
2026-02-19T09:26:35.600Z | 2026-02-19T09:26:35.600Z |
| CVE-2026-2711 |
6.3 (4.0)
5.6 (3.1)
5.6 (3.0)
|
zhutoutoutousan worldquant-miner URL ssrf_proxy.py ser… |
zhutoutoutousan |
worldquant-miner |
2026-02-19T07:02:07.848Z | 2026-02-19T21:31:56.333Z |
| CVE-2026-27094 |
N/A
|
WordPress CoBlocks plugin <= 3.1.16 - Cross Site Scrip… |
GoDaddy |
CoBlocks |
2026-02-19T08:27:11.985Z | 2026-02-19T08:27:11.985Z |
| CVE-2026-2709 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
busy Callback app.js redirect |
n/a |
busy |
2026-02-19T06:32:06.498Z | 2026-02-19T06:32:06.498Z |
| CVE-2026-27074 |
N/A
|
WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scri… |
vaakash |
Shortcoder |
2026-02-19T08:27:11.377Z | 2026-02-19T08:27:11.377Z |
| CVE-2026-27069 |
N/A
|
WordPress Soledad theme <= 8.7.2 - Cross Site Scriptin… |
PenciDesign |
Soledad |
2026-02-19T08:27:11.180Z | 2026-02-19T08:27:11.180Z |
| CVE-2026-2706 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
code-projects Patient Record Management System fecalys… |
code-projects |
Patient Record Management System |
2026-02-19T06:02:06.881Z | 2026-02-19T06:02:06.881Z |
| CVE-2026-27059 |
N/A
|
WordPress Penci Recipe plugin <= 4.1 - Cross Site Scri… |
PenciDesign |
Penci Recipe |
2026-02-19T08:27:10.820Z | 2026-02-19T08:27:10.820Z |
| CVE-2026-27058 |
N/A
|
WordPress Penci Podcast plugin <= 1.7 - Cross Site Scr… |
PenciDesign |
Penci Podcast |
2026-02-19T08:27:10.631Z | 2026-02-19T08:27:10.631Z |
| CVE-2026-27057 |
N/A
|
WordPress Penci Filter Everything plugin <= 1.7 - Cros… |
PenciDesign |
Penci Filter Everything |
2026-02-19T08:27:10.448Z | 2026-02-19T08:27:10.448Z |
| CVE-2026-27055 |
N/A
|
WordPress Penci AI SmartContent Creator plugin <= 2.0 … |
PenciDesign |
Penci AI SmartContent Creator |
2026-02-19T08:27:09.973Z | 2026-02-19T08:27:09.973Z |
| CVE-2026-2703 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
xlnt-community xlnt Encrypted XLSX File base64.cpp dec… |
xlnt-community |
xlnt |
2026-02-19T04:02:10.794Z | 2026-02-19T04:02:10.794Z |
| CVE-2026-2702 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
Beetel 777VR1 WPA2 PSK hard-coded credentials |
Beetel |
777VR1 |
2026-02-19T03:32:06.458Z | 2026-02-19T03:32:06.458Z |
| CVE-2026-2693 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
CoCoTeaNet CyreneAdmin System Info Endpoint getCount i… |
CoCoTeaNet |
CyreneAdmin |
2026-02-19T02:32:07.071Z | 2026-02-19T02:32:07.071Z |
| CVE-2026-2692 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
CoCoTeaNet CyreneAdmin Image getAvatar path traversal |
CoCoTeaNet |
CyreneAdmin |
2026-02-19T02:02:06.735Z | 2026-02-19T02:02:06.735Z |
| CVE-2026-2691 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System manage_register.p… |
itsourcecode |
Event Management System |
2026-02-19T01:32:07.068Z | 2026-02-19T01:32:07.068Z |
| CVE-2026-2690 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System Admin Login ajax.… |
itsourcecode |
Event Management System |
2026-02-19T01:02:07.372Z | 2026-02-19T01:02:07.372Z |
| CVE-2026-2689 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System manage_booking.ph… |
itsourcecode |
Event Management System |
2026-02-19T00:32:07.761Z | 2026-02-19T00:32:07.761Z |
| CVE-2026-2681 |
5.3 (3.1)
|
Github.com/supranational/blst: blst cryptographic libr… |
|
|
2026-02-19T06:58:47.090Z | 2026-02-19T21:32:34.940Z |
| CVE-2026-26362 |
8.1 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:25:14.267Z | 2026-02-19T21:29:58.454Z |
| CVE-2026-26361 |
6.5 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:14:59.358Z | 2026-02-19T21:30:41.803Z |
| CVE-2026-26360 |
8.1 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:41:00.849Z | 2026-02-19T08:41:00.849Z |
| CVE-2026-26359 |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:34:01.506Z | 2026-02-19T08:34:01.506Z |
| CVE-2026-26358 |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, con… |
Dell |
Unisphere for PowerMax |
2026-02-19T08:47:24.102Z | 2026-02-19T08:47:24.102Z |
| CVE-2026-25755 |
8.1 (3.1)
|
jsPDF has PDF Object Injection via Unsanitized Input i… |
parallax |
jsPDF |
2026-02-19T14:41:46.941Z | 2026-02-19T17:36:10.677Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-27094 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:28.200 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2709 | A flaw has been found in busy up to 2.5.5. The affected element is an unknown function of the file … | 2026-02-19T07:17:50.553 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-27074 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:27.770 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-27069 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:27.547 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2706 | A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknow… | 2026-02-19T07:17:50.290 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-27059 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:27.227 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-27058 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:27.097 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-27057 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:26.960 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-27055 | Missing Authorization vulnerability in PenciDesign Penci AI SmartContent Creator penci-ai allows Ex… | 2026-02-19T09:16:26.673 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2703 | A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::d… | 2026-02-19T07:17:49.477 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2702 | A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknow… | 2026-02-19T07:17:49.237 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2693 | A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects un… | 2026-02-19T07:17:48.710 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2692 | A vulnerability was found in CoCoTeaNet CyreneAdmin up to 1.3.0. This affects an unknown part of th… | 2026-02-19T07:17:48.470 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2691 | A vulnerability has been found in itsourcecode Event Management System 1.0. Affected by this issue … | 2026-02-19T07:17:47.880 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2690 | A flaw has been found in itsourcecode Event Management System 1.0. Affected by this vulnerability i… | 2026-02-19T07:17:47.670 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2689 | A vulnerability was detected in itsourcecode Event Management System 1.0. Affected is an unknown fu… | 2026-02-19T07:17:47.447 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2681 | A flaw was found in the blst cryptographic library. This out-of-bounds stack write vulnerability, s… | 2026-02-19T07:17:47.270 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-26362 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A… | 2026-02-19T09:16:26.070 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-26361 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path v… | 2026-02-19T09:16:25.900 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-26360 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path v… | 2026-02-19T09:16:25.737 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-26359 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path v… | 2026-02-19T09:16:25.573 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-26358 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A l… | 2026-02-19T09:16:25.417 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25755 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of … | 2026-02-19T15:16:12.303 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25535 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argume… | 2026-02-19T15:16:12.130 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25472 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:25.137 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25453 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:24.720 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25451 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:24.580 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25422 | Cross-Site Request Forgery (CSRF) vulnerability in Themes4WP Popularis Extra popularis-extra allows… | 2026-02-19T09:16:23.883 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25420 | Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allo… | 2026-02-19T09:16:23.740 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25412 | Missing Authorization vulnerability in mdempfle Advanced iFrame advanced-iframe allows Exploiting I… | 2026-02-19T09:16:23.043 | 2026-02-19T15:52:39.260 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vf6x-59hh-332f |
4.7 (3.1)
|
Formwork has a cross-site scripting (XSS) vulnerability in Site title | 2025-03-01T00:11:46Z | 2026-02-18T23:47:22Z |
| ghsa-5pxr-7m4j-jjc6 |
4.8 (3.1)
|
Cross-site scripting (XSS) vulnerability in Description metadata | 2024-06-07T19:37:10Z | 2026-02-18T23:46:36Z |
| ghsa-8qq5-rm4j-mr97 |
8.2 (4.0)
|
node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sani… | 2026-01-16T21:16:20Z | 2026-02-18T23:43:46Z |
| ghsa-w995-ff8h-rppg |
8.7 (4.0)
|
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint) | 2026-02-03T18:44:17Z | 2026-02-18T23:41:04Z |
| ghsa-pmc3-p9hx-jq96 |
6.5 (3.1)
|
uTLS ServerHellos are accepted without checking TLS 1.3 downgrade canaries | 2025-04-23T14:43:44Z | 2026-02-18T23:34:53Z |
| ghsa-cp9c-phxx-55xm |
6.1 (3.1)
|
phpMyFAQ vulnerable to Cross-site Scripting | 2022-12-11T15:30:45Z | 2026-02-18T23:34:01Z |
| ghsa-mg5h-rhjq-6v84 |
6.1 (3.1)
|
phpMyFAQ vulnerable to reflected Cross-site Scripting | 2022-10-31T12:00:18Z | 2026-02-18T23:33:51Z |
| ghsa-gx7g-wjxg-jwwj |
3.5 (3.1)
|
Cross-Site Request Forgery in YOURLS | 2022-04-04T00:00:55Z | 2026-02-18T23:33:34Z |
| ghsa-2ww3-72rp-wpp4 |
9.9 (3.1)
|
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK | 2026-02-06T18:37:24Z | 2026-02-18T23:32:12Z |
| ghsa-pqqf-7hxm-rj5r |
7.6 (3.1)
|
Leaky JWTs in OpenMetadata exposing highly-privileged bot users | 2026-02-11T14:23:02Z | 2026-02-18T23:30:21Z |
| ghsa-37gc-85xm-2ww6 |
5.8 (3.1)
|
OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline scrip… | 2026-02-18T22:44:33Z | 2026-02-18T22:44:33Z |
| ghsa-h7f7-89mm-pqh6 |
6.8 (4.0)
|
OpenClaw hardened the skill download target directory validation | 2026-02-18T22:44:18Z | 2026-02-18T22:44:18Z |
| ghsa-xxvh-5hwj-42pp |
4.8 (4.0)
|
OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation | 2026-02-18T22:44:10Z | 2026-02-18T22:44:10Z |
| ghsa-6hf3-mhgc-cm65 |
6.9 (4.0)
|
OpenClaw session tool visibility hardening and Telegram webhook secret fallback | 2026-02-18T22:43:53Z | 2026-02-18T22:43:53Z |
| ghsa-chf7-jq6g-qrwv |
6.9 (4.0)
|
OpenClaw: Telegram bot token exposure via logs | 2026-02-18T22:43:21Z | 2026-02-18T22:43:22Z |
| ghsa-w235-x559-36mg |
7.7 (4.0)
|
OpenClaw: Docker container escape via unvalidated bind mount config injection | 2026-02-18T22:42:42Z | 2026-02-18T22:42:42Z |
| ghsa-2qj5-gwg2-xwc4 |
8.6 (4.0)
|
OpenClaw: Unsanitized CWD path injection into LLM prompts | 2026-02-18T22:42:29Z | 2026-02-18T22:42:29Z |
| ghsa-3m4q-jmj6-r34q |
7.1 (3.1)
|
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading | 2026-02-18T22:41:58Z | 2026-02-18T22:41:58Z |
| ghsa-9mvc-8737-8j8h |
6.9 (4.0)
|
pypdf possibly has long runtimes for malformed FlateDecode streams | 2026-02-18T22:41:24Z | 2026-02-18T22:41:24Z |
| ghsa-wgvp-vg3v-2xq3 |
6.9 (4.0)
|
pypdf has possible long runtimes/large memory usage for large /ToUnicode streams | 2026-02-18T22:41:13Z | 2026-02-18T22:41:13Z |
| ghsa-996q-pr4m-cvgq |
6.9 (4.0)
|
pypdf has a possible infinite loop when processing TreeObject | 2026-02-18T22:40:49Z | 2026-02-18T22:40:49Z |
| ghsa-5mx2-w598-339m |
6.5 (3.1)
|
RediSearch Query Injection in @langchain/langgraph-checkpoint-redis | 2026-02-18T22:40:09Z | 2026-02-18T22:40:09Z |
| ghsa-c5w7-m8wf-xc77 |
8.7 (4.0)
|
Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates | 2026-02-17T12:31:07Z | 2026-02-18T22:39:26Z |
| ghsa-gfmx-qqqh-f38q |
7.1 (4.0)
|
Duplicate Advisory: Keras vulnerable to arbitrary file read in the model loading mechanism (HDF5 in… | 2026-02-12T00:31:03Z | 2026-02-18T22:38:48Z |
| ghsa-3ppc-4f35-3m26 |
8.7 (4.0)
|
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern | 2026-02-18T22:38:11Z | 2026-02-18T22:38:11Z |
| ghsa-fw7p-63qq-7hpr |
1.7 (4.0)
|
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver … | 2026-02-18T22:37:15Z | 2026-02-18T22:37:15Z |
| ghsa-m6j8-rg6r-7mv8 |
|
Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake | 2026-02-18T22:36:06Z | 2026-02-18T22:36:06Z |
| ghsa-2gjw-fg97-vg3r |
8.7 (4.0)
|
Go Ethereum affected by DoS via malicious p2p message | 2026-02-18T22:35:15Z | 2026-02-18T22:35:15Z |
| ghsa-rrxv-pmq9-x67r |
2.3 (4.0)
|
uTLS has a fingerprint vulnerability from missing padding extension for Chrome 120 | 2026-02-18T22:33:47Z | 2026-02-18T22:33:47Z |
| ghsa-7m29-f4hw-g2vx |
2.3 (4.0)
|
uTLS has a fingerprint vulnerability from GREASE ECH mismatch for Chrome parrots | 2026-02-18T22:33:18Z | 2026-02-18T22:33:18Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-43099 |
9.8 (3.1)
|
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution back… | democritus-file-system | 2022-09-19T16:15:00Z | 2024-11-21T14:22:43.616362Z |
| pysec-2022-43098 |
9.8 (3.1)
|
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… | democritus-file-system | 2022-09-19T15:15:00Z | 2024-11-21T14:22:43.564135Z |
| pysec-2022-43097 |
9.8 (3.1)
|
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… | democritus-domains | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.511664Z |
| pysec-2022-43096 |
8.8 (3.1)
|
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… | democritus-dates | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.46136Z |
| pysec-2022-43095 |
9.8 (3.1)
|
The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential cod… | democritus-csv | 2022-10-11T22:15:00Z | 2024-11-21T14:22:43.41112Z |
| pysec-2022-43094 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | democritus-algorithms | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.361191Z |
| pysec-2022-43093 |
9.8 (3.1)
|
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backd… | d8s-xml | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.253271Z |
| pysec-2022-43092 |
9.8 (3.1)
|
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backd… | d8s-xml | 2022-09-19T16:15:00Z | 2024-11-21T14:22:43.200942Z |
| pysec-2022-43091 |
9.8 (3.1)
|
The d8s-urls for python, as distributed on PyPI, included a potential code-execution back… | d8s-urls | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.149086Z |
| pysec-2022-43090 |
8.8 (3.1)
|
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… | d8s-timer | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.097689Z |
| pysec-2022-43089 |
9.8 (3.1)
|
The d8s-timer for python, as distributed on PyPI, included a potential code-execution bac… | d8s-timer | 2022-11-07T15:15:00Z | 2024-11-21T14:22:43.045759Z |
| pysec-2022-43088 |
9.8 (3.1)
|
The d8s-strings for python, as distributed on PyPI, included a potential code-execution b… | d8s-strings | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.994084Z |
| pysec-2022-43087 |
9.8 (3.1)
|
The d8s-strings for python, as distributed on PyPI, included a potential code-execution b… | d8s-strings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:42.944804Z |
| pysec-2022-43086 |
9.8 (3.1)
|
The d8s-stats for python, as distributed on PyPI, included a potential code-execution bac… | d8s-stats | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.892924Z |
| pysec-2022-43085 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | d8s-python | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.829791Z |
| pysec-2022-43084 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | d8s-python | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.776996Z |
| pysec-2022-43083 |
9.8 (3.1)
|
The d8s-python for python, as distributed on PyPI, included a potential code-execution ba… | d8s-python | 2022-09-19T16:15:00Z | 2024-11-21T14:22:42.723606Z |
| pysec-2022-43082 |
9.8 (3.1)
|
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… | d8s-networking | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.668916Z |
| pysec-2022-43081 |
9.8 (3.1)
|
The d8s-networking for python, as distributed on PyPI, included a potential code-executio… | d8s-networking | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.613124Z |
| pysec-2022-43080 |
9.8 (3.1)
|
The d8s-netstrings for python, as distributed on PyPI, included a potential code-executio… | d8s-netstrings | 2022-09-19T16:15:00Z | 2024-11-21T14:22:42.556543Z |
| pysec-2022-43079 |
9.8 (3.1)
|
The d8s-math for python, as distributed on PyPI, included a potential code-execution back… | d8s-math | 2022-09-19T16:15:00Z | 2024-11-21T14:22:42.499117Z |
| pysec-2022-43078 |
9.8 (3.1)
|
The d8s-json for python, as distributed on PyPI, included a potential code-execution back… | d8s-json | 2022-09-19T16:15:00Z | 2024-11-21T14:22:42.439723Z |
| pysec-2022-43077 |
9.8 (3.1)
|
The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential cod… | d8s-ip-addresses | 2022-10-11T22:15:00Z | 2024-11-21T14:22:42.385746Z |
| pysec-2022-43076 |
9.8 (3.1)
|
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution … | d8s-grammars | 2022-09-19T16:15:00Z | 2024-11-21T14:22:42.333517Z |
| pysec-2022-43075 |
9.8 (3.1)
|
The d8s-dates for python, as distributed on PyPI, included a potential code-execution bac… | d8s-dates | 2022-11-07T15:15:00Z | 2024-11-21T14:22:42.280201Z |
| pysec-2022-43074 |
9.8 (3.1)
|
The d8s-archives for python, as distributed on PyPI, included a potential code-execution … | d8s-archives | 2022-09-19T16:15:00Z | 2024-11-21T14:22:42.229096Z |
| pysec-2022-43073 |
9.8 (3.1)
|
The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backd… | cloudlabeling | 2022-06-24T21:15:00Z | 2024-11-21T14:22:42.118573Z |
| pysec-2021-880 |
7.5 (3.1)
|
Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter ver… | bounter | 2021-12-17T21:15:00Z | 2024-11-21T14:22:41.448775Z |
| pysec-2017-113 |
8.8 (3.1)
|
Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 … | capstone | 2017-03-16T21:59:00+00:00 | 2024-11-21T14:22:41.607839+00:00 |
| pysec-2012-28 |
|
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick … | bitdefender | 2012-03-21T10:11:00Z | 2024-11-21T14:22:41.328571Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33525 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.645678Z |
| gsd-2024-25560 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:10.926102Z |
| gsd-2024-31156 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:09.611319Z |
| gsd-2024-4163 | The Skylab IGX IIoT Gateway allowed users to connect to it via a limited shell terminal (… | 2024-04-25T05:02:08.576986Z |
| gsd-2024-4162 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.583385Z |
| gsd-2024-4161 | In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received clear text. Thi… | 2024-04-25T05:02:08.597600Z |
| gsd-2024-4160 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.580915Z |
| gsd-2024-4159 | Brocade SANnav before Brocade SANnav v2.3.1 lacks protection mechanisms on port 2377/TCP… | 2024-04-25T05:02:08.603616Z |
| gsd-2024-4158 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.563038Z |
| gsd-2024-4157 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.593416Z |
| gsd-2024-4156 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.562256Z |
| gsd-2024-4155 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.601522Z |
| gsd-2024-4154 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.584972Z |
| gsd-2024-4153 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.546102Z |
| gsd-2024-4152 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.553366Z |
| gsd-2024-4151 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.570377Z |
| gsd-2024-4150 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.563239Z |
| gsd-2024-4149 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.587714Z |
| gsd-2024-4148 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.554457Z |
| gsd-2024-4147 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.547111Z |
| gsd-2024-4146 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.545881Z |
| gsd-2024-4145 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.595097Z |
| gsd-2024-4144 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.557398Z |
| gsd-2024-4143 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.577665Z |
| gsd-2024-4142 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.547368Z |
| gsd-2024-4141 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character cod… | 2024-04-25T05:02:08.599260Z |
| gsd-2024-4140 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.598688Z |
| gsd-2024-4139 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.586673Z |
| gsd-2024-4138 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.556926Z |
| gsd-2024-4137 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-25T05:02:08.577471Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2026-678 | Malicious code in cookie-parsers-env (npm) | 2026-02-03T06:59:52Z | 2026-02-06T03:05:23Z |
| MAL-2026-677 | Malicious code in chai-promise-tools (npm) | 2026-02-03T06:59:53Z | 2026-02-06T03:05:23Z |
| MAL-2026-671 | Malicious code in cheerio-core (npm) | 2026-02-03T04:20:03Z | 2026-02-06T03:05:23Z |
| MAL-2026-660 | Malicious code in dns-troubleshoot-toolkit-xyz123 (npm) | 2026-02-03T03:54:05Z | 2026-02-06T03:05:23Z |
| mal-2026-760 | Malicious code in @helloflex/widget-next-sdk (npm) | 2026-02-05T12:44:37Z | 2026-02-06T03:05:22Z |
| mal-2026-755 | Malicious code in @jes4l/react-pkg (npm) | 2026-02-05T01:57:08Z | 2026-02-06T03:05:22Z |
| mal-2026-749 | Malicious code in @purecore/rabbitmq (npm) | 2026-02-05T01:28:01Z | 2026-02-06T03:05:22Z |
| mal-2026-740 | Malicious code in @msecscc/gaia (npm) | 2026-02-04T17:18:05Z | 2026-02-06T03:05:22Z |
| mal-2026-718 | Malicious code in @fxinternal/netdiagnostics (npm) | 2026-02-04T05:00:18Z | 2026-02-06T03:05:22Z |
| mal-2026-706 | Malicious code in @devgandhi/healthpulse (npm) | 2026-02-03T17:39:11Z | 2026-02-06T03:05:22Z |
| mal-2026-705 | Malicious code in @devgandhi/cpp (npm) | 2026-02-03T17:39:11Z | 2026-02-06T03:05:22Z |
| mal-2026-703 | Malicious code in @x-clients/features (npm) | 2026-02-03T15:41:03Z | 2026-02-06T03:05:22Z |
| mal-2026-687 | Malicious code in @uselagoon/ui-library (npm) | 2026-02-03T07:39:16Z | 2026-02-06T03:05:22Z |
| mal-2026-676 | Malicious code in @ikeacnalan/icons (npm) | 2026-02-03T06:58:19Z | 2026-02-06T03:05:22Z |
| mal-2026-673 | Malicious code in baileys-ud (npm) | 2026-02-03T05:01:34Z | 2026-02-06T03:05:22Z |
| mal-2026-672 | Malicious code in baileys-dtz (npm) | 2026-02-03T05:01:33Z | 2026-02-06T03:05:22Z |
| mal-2026-670 | Malicious code in aligned-array (npm) | 2026-02-03T04:12:07Z | 2026-02-06T03:05:22Z |
| mal-2026-659 | Malicious code in atg-atgse (npm) | 2026-02-03T03:27:31Z | 2026-02-06T03:05:22Z |
| mal-2026-658 | Malicious code in ansi-universal-ui (npm) | 2026-02-03T03:42:39Z | 2026-02-06T03:05:22Z |
| MAL-2026-760 | Malicious code in @helloflex/widget-next-sdk (npm) | 2026-02-05T12:44:37Z | 2026-02-06T03:05:22Z |
| MAL-2026-755 | Malicious code in @jes4l/react-pkg (npm) | 2026-02-05T01:57:08Z | 2026-02-06T03:05:22Z |
| MAL-2026-749 | Malicious code in @purecore/rabbitmq (npm) | 2026-02-05T01:28:01Z | 2026-02-06T03:05:22Z |
| MAL-2026-740 | Malicious code in @msecscc/gaia (npm) | 2026-02-04T17:18:05Z | 2026-02-06T03:05:22Z |
| MAL-2026-718 | Malicious code in @fxinternal/netdiagnostics (npm) | 2026-02-04T05:00:18Z | 2026-02-06T03:05:22Z |
| MAL-2026-706 | Malicious code in @devgandhi/healthpulse (npm) | 2026-02-03T17:39:11Z | 2026-02-06T03:05:22Z |
| MAL-2026-705 | Malicious code in @devgandhi/cpp (npm) | 2026-02-03T17:39:11Z | 2026-02-06T03:05:22Z |
| MAL-2026-703 | Malicious code in @x-clients/features (npm) | 2026-02-03T15:41:03Z | 2026-02-06T03:05:22Z |
| MAL-2026-687 | Malicious code in @uselagoon/ui-library (npm) | 2026-02-03T07:39:16Z | 2026-02-06T03:05:22Z |
| MAL-2026-676 | Malicious code in @ikeacnalan/icons (npm) | 2026-02-03T06:58:19Z | 2026-02-06T03:05:22Z |
| MAL-2026-673 | Malicious code in baileys-ud (npm) | 2026-02-03T05:01:34Z | 2026-02-06T03:05:22Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2301 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2051 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-14T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1933 | Linux Kernel: Eine Schwachstelle ermöglicht einen Denial of Service | 2025-08-31T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1914 | Linux Kernel: Schwachstelle ermöglicht Codeausführung | 2025-08-26T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1862 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-08-18T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1858 | Linux Kernel: Mehrere Schwachstellen | 2025-08-17T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-1830 | http/2 Implementierungen: Schwachstelle ermöglicht Denial of Service | 2025-08-13T22:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2718 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2580 | Google Chrome/Microsoft Edge: Schwachstelle ermöglicht nicht näher beschriebene Auswirkungen | 2025-11-11T23:00:00.000+00:00 | 2025-12-14T23:00:00.000+00:00 |
| wid-sec-w-2025-2676 | GeoServer: Mehrere Schwachstellen | 2025-11-25T23:00:00.000+00:00 | 2025-12-11T23:00:00.000+00:00 |
| wid-sec-w-2025-2789 | Adobe Experience Manager: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0104 | Kubernetes: Schwachstelle ermöglicht Codeausführung | 2025-01-15T23:00:00.000+00:00 | 2025-12-10T23:00:00.000+00:00 |
| wid-sec-w-2025-1375 | WinRAR: Schwachstelle ermöglicht Codeausführung | 2025-06-23T22:00:00.000+00:00 | 2025-12-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2746 | IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-04T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2711 | Android Patchday Dezember 2025: Mehrere Schwachstellen | 2025-12-01T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2702 | Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-30T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2655 | CUPS-Filters: Schwachstelle ermöglicht Codeausführung | 2025-11-20T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2598 | CUPS (Filters): Mehrere Schwachstellen | 2025-11-13T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2472 | Samsung Android: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-1681 | Red Hat OpenShift (glog): Schwachstelle ermöglicht Manipulation von Dateien | 2025-07-30T22:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-0723 | Android Patchday April 2025: Mehrere Schwachstellen | 2025-04-07T22:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-0600 | GnuPG: Schwachstelle ermöglicht Denial of Service | 2025-03-19T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-0556 | Ghostscript: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-03-12T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2024-3754 | shadow: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2024-12-26T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2510 | AnyDesk: Mehrere Schwachstellen | 2025-11-06T23:00:00.000+00:00 | 2025-12-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2738 | Vercel Next.js und React Server Components (React2Shell): Schwachstelle ermöglicht Codeausführung | 2025-12-03T23:00:00.000+00:00 | 2025-12-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2682 | Tinyproxy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-26T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2548 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2020-03-31T22:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2488 | Red Hat Enterprise Linux (SSSD, libsoup): Mehrere Schwachstellen | 2025-11-04T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2435 | D-LINK Aquila Pro AI R15: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-10-28T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0461 | Kwetsbaarheden verholpen in IBM Security Verify Access Appliance | 2024-12-02T10:55:14.978137Z | 2024-12-02T10:55:14.978137Z |
| ncsc-2024-0460 | Kwetsbaarheid verholpen in Zabbix | 2024-11-28T14:24:11.654121Z | 2024-11-28T14:24:11.654121Z |
| ncsc-2024-0459 | Kwetsbaarheden verholpen in VMware Aria Operations | 2024-11-26T13:25:37.944485Z | 2024-11-26T13:25:37.944485Z |
| ncsc-2024-0458 | Kwetsbaarheden ontdekt in Veritas Enterprise Vault | 2024-11-25T09:04:34.013551Z | 2024-11-25T09:04:34.013551Z |
| ncsc-2024-0457 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-11-20T10:01:35.437557Z | 2024-11-20T10:01:35.437557Z |
| ncsc-2024-0456 | Kwetsbaarheden verholpen in Apple macOS en Safari | 2024-11-20T10:00:42.593160Z | 2024-11-20T10:00:42.593160Z |
| ncsc-2024-0455 | Kwetsbaarheid verholpen in Trend Micro Deep Security | 2024-11-20T09:04:14.183257Z | 2024-11-20T09:04:14.183257Z |
| ncsc-2024-0451 | Kwetsbaarheden verholpen in Palo Alto PAN-OS | 2024-11-18T16:00:29.206286Z | 2024-11-20T08:41:37.309906Z |
| ncsc-2024-0454 | Kwetsbaarheid verholpen in GitHub CLI | 2024-11-19T15:03:48.421618Z | 2024-11-19T15:03:48.421618Z |
| ncsc-2024-0377 | Kwetsbaarheden verholpen in VMware vCenter Server | 2024-09-18T11:28:43.103000Z | 2024-11-19T09:56:16.772512Z |
| ncsc-2024-0453 | Kwetsbaarheid verholpen in Oracle Agile PLM Framework | 2024-11-19T09:41:05.945149Z | 2024-11-19T09:41:05.945149Z |
| ncsc-2024-0452 | Kwetsbaarheden verholpen in Siemens Tecnomatix Plant Simulation | 2024-11-19T08:19:24.590425Z | 2024-11-19T08:19:24.590425Z |
| ncsc-2024-0450 | Kwetsbaarheid verholpen in Adobe Photoshop | 2024-11-18T11:18:22.537372Z | 2024-11-18T11:18:22.537372Z |
| ncsc-2024-0449 | Kwetsbaarheden verholpen in Adobe InDesign | 2024-11-18T11:14:49.456205Z | 2024-11-18T11:14:49.456205Z |
| ncsc-2024-0448 | Kwetsbaarheden verholpen in Adobe Illustrator | 2024-11-18T11:08:38.687476Z | 2024-11-18T11:08:38.687476Z |
| ncsc-2024-0447 | Kwetsbaarheden verholpen in GitLab CE/EE | 2024-11-15T12:29:35.775993Z | 2024-11-15T12:29:35.775993Z |
| ncsc-2024-0423 | Kwetsbaarheid ontdekt in Fortinet FortiManager | 2024-10-23T16:51:38.477778Z | 2024-11-15T10:52:37.440334Z |
| ncsc-2024-0446 | Kwetsbaarheid verholpen in Schneider Electric Ecostruxture | 2024-11-14T12:46:16.737874Z | 2024-11-14T12:46:16.737874Z |
| ncsc-2024-0445 | Kwetsbaarheden verholpen in Fortinet FortiClient | 2024-11-14T12:42:00.899040Z | 2024-11-14T12:42:00.899040Z |
| ncsc-2024-0444 | Kwetsbaarheden verholpen in Palo Alto PAN-OS | 2024-11-14T12:38:50.941039Z | 2024-11-14T12:38:50.941039Z |
| ncsc-2024-0443 | Kwetsbaarheden verholpen in Citrix NetScaler ADC en NetScaler Gateway | 2024-11-13T15:10:45.265209Z | 2024-11-13T15:10:45.265209Z |
| ncsc-2024-0442 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Policy Secure | 2024-11-13T12:38:13.252957Z | 2024-11-13T12:38:13.252957Z |
| ncsc-2024-0441 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager | 2024-11-13T10:42:35.387490Z | 2024-11-13T10:42:35.387490Z |
| ncsc-2024-0440 | Kwetsbaarheden verholpen in Citrix Session Recording | 2024-11-13T08:51:17.257998Z | 2024-11-13T08:51:17.257998Z |
| ncsc-2024-0439 | Kwetsbaarheden verholpen in Microsoft Office | 2024-11-12T18:57:09.604321Z | 2024-11-12T18:57:09.604321Z |
| ncsc-2024-0438 | Kwetsbaarheid verholpen in Microsoft Exchange Server | 2024-11-12T18:56:25.729148Z | 2024-11-12T18:56:25.729148Z |
| ncsc-2024-0437 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2024-11-12T18:55:39.363057Z | 2024-11-12T18:55:39.363057Z |
| ncsc-2024-0436 | Kwetsbaarheden verholpen in Microsoft Azure | 2024-11-12T18:54:41.456199Z | 2024-11-12T18:54:41.456199Z |
| ncsc-2024-0435 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2024-11-12T18:54:00.107773Z | 2024-11-12T18:54:00.107773Z |
| ncsc-2024-0434 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-11-12T18:53:07.914094Z | 2024-11-12T18:53:07.914094Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| SSA-264815 | SSA-264815: Type Confusion Vulnerability in OpenSSL X.400 Address Processing in SIMATIC Products | 2023-08-08T00:00:00Z | 2024-12-10T00:00:00Z |
| SSA-264814 | SSA-264814: Timing Based Side Channel Vulnerability in the OpenSSL RSA Decryption in SIMATIC Products | 2023-08-08T00:00:00Z | 2024-12-10T00:00:00Z |
| SSA-256353 | SSA-256353: Third-Party Component Vulnerabilities in RUGGEDCOM ROS | 2022-03-08T00:00:00Z | 2025-08-12T00:00:00Z |
| SSA-180704 | SSA-180704: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0 | 2023-12-12T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-118850 | SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| SSA-077170 | SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2 | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| SSA-068047 | SSA-068047: Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2 | 2023-12-12T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-042050 | SSA-042050: Know-How Protection Mechanism Failure in TIA Portal | 2023-06-13T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-975766 | SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge | 2023-06-13T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-887122 | SSA-887122: X_T File Parsing Vulnerabilities in Simcenter Femap | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-617233 | SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-478780 | SSA-478780: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-456933 | SSA-456933: Multiple Vulnerabilities in SIMATIC PCS neo before V4.1 | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-363107 | SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode | 2022-05-10T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-268517 | SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-197270 | SSA-197270: Information Disclosure Vulnerability in Siemens OPC UA Modeling Editor (SiOME) | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-150063 | SSA-150063: Multiple Vulnerabilities in SINEC PNI before V2.0 | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-137900 | SSA-137900: Multiple Vulnerabilities in COMOS | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-099606 | SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-084182 | SSA-084182: Privilege Escalation Vulnerability in Mendix Runtime | 2023-11-14T00:00:00Z | 2023-11-14T00:00:00Z |
| ssa-843070 | SSA-843070: Multiple Vulnerabilities in SCALANCE W1750D | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-829656 | SSA-829656: Stack Overflow Vulnerability in Xpedition Layout Browser | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-784849 | SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-770890 | SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-710008 | SSA-710008: Multiple Web Vulnerabilities in SCALANCE Products | 2022-08-09T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-594373 | SSA-594373: Cross-Site-Scripting (XSS) Vulnerability in SINEMA Server V14 | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-524778 | SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-516174 | SSA-516174: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D | 2023-05-09T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-386812 | SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1 | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ssa-295483 | SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:3301 | Red Hat Security Advisory: OpenShift Container Platform 4.16.38 bug fix and security update | 2025-04-03T00:21:28+00:00 | 2026-02-19T19:34:59+00:00 |
| rhsa-2025:3210 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-03-26T02:19:46+00:00 | 2026-02-19T19:34:58+00:00 |
| rhsa-2025:3268 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-03-26T14:31:13+00:00 | 2026-02-19T19:34:57+00:00 |
| rhsa-2025:3186 | Red Hat Security Advisory: podman security update | 2025-03-25T20:42:41+00:00 | 2026-02-19T19:34:55+00:00 |
| rhsa-2025:3185 | Red Hat Security Advisory: gvisor-tap-vsock security update | 2025-03-25T20:37:10+00:00 | 2026-02-19T19:34:55+00:00 |
| rhsa-2025:3184 | Red Hat Security Advisory: podman security update | 2025-03-25T20:36:10+00:00 | 2026-02-19T19:34:55+00:00 |
| rhsa-2025:3175 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-03-25T18:12:58+00:00 | 2026-02-19T19:34:53+00:00 |
| rhsa-2025:3172 | Red Hat Security Advisory: VolSync 0.12.1 security fixes and enhancements for RHEL 9 | 2025-03-25T19:58:29+00:00 | 2026-02-19T19:34:53+00:00 |
| rhsa-2025:3165 | Red Hat Security Advisory: podman security update | 2025-03-25T14:24:49+00:00 | 2026-02-19T19:34:53+00:00 |
| rhsa-2025:3132 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.6 | 2025-03-26T17:34:00+00:00 | 2026-02-19T19:34:53+00:00 |
| rhsa-2025:3131 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.1.4 | 2025-03-26T17:39:24+00:00 | 2026-02-19T19:34:51+00:00 |
| rhsa-2025:3069 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.14.3 security update | 2025-03-20T08:37:59+00:00 | 2026-02-19T19:34:51+00:00 |
| rhsa-2025:3068 | Red Hat Security Advisory: OpenShift Container Platform 4.18.6 packages and security update | 2025-03-25T07:18:49+00:00 | 2026-02-19T19:34:48+00:00 |
| rhsa-2025:3066 | Red Hat Security Advisory: OpenShift Container Platform 4.18.6 bug fix and security update | 2025-03-25T06:59:06+00:00 | 2026-02-19T19:34:47+00:00 |
| rhsa-2025:3061 | Red Hat Security Advisory: OpenShift Container Platform 4.17.22 packages and security update | 2025-03-27T01:12:40+00:00 | 2026-02-19T19:34:47+00:00 |
| rhsa-2025:3059 | Red Hat Security Advisory: OpenShift Container Platform 4.17.22 bug fix and security update | 2025-03-26T21:49:54+00:00 | 2026-02-19T19:34:46+00:00 |
| rhsa-2025:3053 | Red Hat Security Advisory: Gatekeeper v3.15.4 | 2025-03-20T04:55:47+00:00 | 2026-02-19T19:34:44+00:00 |
| rhsa-2025:3052 | Red Hat Security Advisory: Gatekeeper v3.18.0 | 2025-03-20T04:53:19+00:00 | 2026-02-19T19:34:44+00:00 |
| rhsa-2025:3051 | Red Hat Security Advisory: Gatekeeper v3.17.2 | 2025-03-20T04:38:00+00:00 | 2026-02-19T19:34:44+00:00 |
| rhsa-2025:2933 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0 | 2025-03-17T12:53:03+00:00 | 2026-02-19T19:34:42+00:00 |
| rhsa-2025:2903 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0 | 2025-03-17T09:37:38+00:00 | 2026-02-19T19:34:42+00:00 |
| rhsa-2025:2588 | Red Hat Security Advisory: RHOAI 2.18.0 - Red Hat OpenShift AI | 2025-03-10T23:41:31+00:00 | 2026-02-19T19:34:41+00:00 |
| rhsa-2025:2652 | Red Hat Security Advisory: RHODF-4.18-RHEL-9 enhancement, bug fix and security update | 2025-03-11T09:16:21+00:00 | 2026-02-19T19:34:40+00:00 |
| rhsa-2025:2526 | Red Hat Security Advisory: ACS 4.5 enhancement update | 2025-03-10T15:51:20+00:00 | 2026-02-19T19:34:37+00:00 |
| rhsa-2025:23916 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update | 2025-12-22T14:47:09+00:00 | 2026-02-19T19:34:36+00:00 |
| rhsa-2025:23543 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-12-18T04:34:31+00:00 | 2026-02-19T19:34:26+00:00 |
| rhsa-2025:23535 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.12 | 2025-12-17T15:38:59+00:00 | 2026-02-19T19:34:25+00:00 |
| rhsa-2025:23534 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.7 | 2025-12-17T15:37:08+00:00 | 2026-02-19T19:34:24+00:00 |
| rhsa-2025:23531 | Red Hat Security Advisory: RHOAI 2.25.1 - Red Hat OpenShift AI | 2025-12-17T15:17:16+00:00 | 2026-02-19T19:34:23+00:00 |
| rhsa-2025:23449 | Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (ROCm) | 2025-12-17T08:22:31+00:00 | 2026-02-19T19:34:22+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-13-352-01 | NovaTech Orion DNP3 Improper Input Validation Vulnerability | 2013-09-20T06:00:00.000000Z | 2025-06-12T21:23:06.621585Z |
| icsa-13-113-01 | Wonderware Information Server Vulnerabilities | 2013-01-25T07:00:00.000000Z | 2025-06-12T18:45:02.717561Z |
| icsa-14-205-02a | Siemens SIMATIC WinCC Vulnerabilities (Update A) | 2014-04-26T06:00:00.000000Z | 2025-06-12T18:44:31.147692Z |
| icsa-14-105-01 | Progea Movicon SCADA Information Disclosure Vulnerability | 2014-01-16T07:00:00.000000Z | 2025-06-12T18:44:24.886887Z |
| icsa-13-219-01 | Schweitzer Engineering Laboratories Improper Input Validation | 2013-05-10T06:00:00.000000Z | 2025-06-12T18:44:12.073139Z |
| icsa-25-162-10 | PTZOptics and Other Pan-Tilt-Zoom Cameras | 2025-06-12T06:00:00.000000Z | 2025-06-12T06:00:00.000000Z |
| icsa-25-162-09 | AVEVA PI Connector for CygNet | 2025-06-12T06:00:00.000000Z | 2025-06-12T06:00:00.000000Z |
| icsa-25-162-08 | AVEVA PI Web API | 2025-06-12T06:00:00.000000Z | 2025-06-12T06:00:00.000000Z |
| icsa-25-162-07 | AVEVA PI Data Archive | 2025-06-12T06:00:00.000000Z | 2025-06-12T06:00:00.000000Z |
| icsma-25-160-01 | MicroDicom DICOM Viewer | 2025-06-10T06:00:00.000000Z | 2025-06-10T06:00:00.000000Z |
| icsa-25-140-11 | Assured Telematics Inc (ATI) Fleet Management System (Update A) | 2025-05-20T06:00:00.000000Z | 2025-06-10T06:00:00.000000Z |
| icsa-24-030-01 | Emerson Rosemount GC370XA, GC700XA, GC1500XA | 2024-01-30T07:00:00.000000Z | 2025-06-10T06:00:00.000000Z |
| icsa-25-160-01 | SinoTrack GPS Receiver | 2025-06-10T05:00:00.000000Z | 2025-06-10T05:00:00.000000Z |
| icsa-25-162-06 | Siemens Energy Services | 2025-06-10T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-25-162-03 | Siemens SCALANCE and RUGGEDCOM | 2025-06-10T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-25-162-01 | Siemens Tecnomatix Plant Simulation | 2025-06-10T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-25-105-01 | Siemens Mendix Runtime | 2025-04-08T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-25-044-07 | Siemens Teamcenter | 2025-02-11T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-24-347-10 | Siemens SENTRON Powercenter 1000 | 2024-12-10T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-24-338-02 | Siemens RUGGEDCOM APE1808 | 2024-11-22T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-24-284-12 | Siemens Sentron Powercenter 1000 | 2024-10-08T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-21-103-11 | Siemens TIM 4R-IE Devices | 2021-04-13T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-20-105-06 | Siemens SIMOTICS, Desigo, APOGEE, and TALON | 2020-04-14T00:00:00.000000Z | 2025-06-10T00:00:00.000000Z |
| icsa-11-340-01 | ARC Informatique PcVue HMI/SCADA ActiveX Vulnerabilities | 2011-09-08T06:00:00.000000Z | 2025-06-09T19:53:05.359419Z |
| icsa-11-335-01 | 7-Technologies Data Server Denial of Service | 2011-09-03T06:00:00.000000Z | 2025-06-09T19:52:59.122386Z |
| icsa-11-319-01 | InduSoft Web Studio Vulnerabilities | 2011-08-18T06:00:00.000000Z | 2025-06-09T19:52:46.658796Z |
| icsa-11-314-01 | Safenet Sentinel and 7-T Input Sanitization Vulnerability | 2011-08-13T06:00:00.000000Z | 2025-06-09T19:52:40.428887Z |
| icsa-11-307-01 | Schneider Electric Vijeo Historian Web Server Multiple Vulnerabilities | 2011-08-06T06:00:00.000000Z | 2025-06-09T19:52:15.424002Z |
| icsa-11-298-01a | Sielco Sistemi Winlog Buffer Overflow | 2011-07-28T06:00:00.000000Z | 2025-06-09T19:52:09.187490Z |
| icsa-11-294-01 | Progea Movicon Power HMI Vulnerabilities | 2011-07-24T06:00:00.000000Z | 2025-06-09T19:51:50.522681Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ndidv-lmxdvaf2 | Cisco Nexus Dashboard Information Disclosure Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ndfccsrf-temzefj9 | Cisco Nexus Dashboard and Nexus Dashboard Hosted Services Cross-Site Request Forgery Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ndfccsrf-TEmZEfJ9 | Cisco Nexus Dashboard and Nexus Dashboard Hosted Services Cross-Site Request Forgery Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ndfc-dir-trav-ssn3aydw | Cisco Nexus Dashboard Fabric Controller Plug and Play Arbitrary File Read Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ise-ssrf-ftsth5oz | Cisco Identity Services Engine Server-Side Request Forgery Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ise-csrf-nfakxrp5 | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ise-csrf-NfAKXrp5 | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-ece-xss-csqxgxfm | Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-cucm-imps-xss-quwkd9yf | Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting Vulnerability | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-cem-csrf-sucmnjfr | Cisco Emergency Responder Cross-Site Request Forgery and Directory Traversal Vulnerabilities | 2024-04-03T16:00:00+00:00 | 2024-04-03T16:00:00+00:00 |
| cisco-sa-iosxe-utd-cmd-jbl8kvht | Cisco IOS XE Software Unified Threat Defense Command Injection Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-04-02T20:11:04+00:00 |
| cisco-sa-iosxe-utd-cmd-JbL8KvHT | Cisco IOS XE Software Unified Threat Defense Command Injection Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-04-02T20:11:04+00:00 |
| cisco-sa-wlc-mdns-dos-4hv6pbgf | Cisco IOS XE Software for Wireless LAN Controllers Multicast DNS Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-wlc-mdns-dos-4hv6pBGf | Cisco IOS XE Software for Wireless LAN Controllers Multicast DNS Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-lisp-3gyxs3qp | Cisco IOS and IOS XE Software Locator ID Separation Protocol Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-lisp-3gYXs3qP | Cisco IOS and IOS XE Software Locator ID Separation Protocol Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-isis-sgjyouhx | Cisco IOS and IOS XE Software Intermediate System-to-Intermediate System Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-isis-sGjyOUHX | Cisco IOS and IOS XE Software Intermediate System-to-Intermediate System Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-iosxe-wlc-privesc-rjsmrmpk | Cisco IOS XE Software for Wireless LAN Controllers Privilege Escalation Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-iosxe-wlc-privesc-RjSMrmPK | Cisco IOS XE Software for Wireless LAN Controllers Privilege Escalation Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-iosxe-priv-esc-seax6nlx | Cisco IOS XE Software Privilege Escalation Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-iosxe-priv-esc-seAx6NLX | Cisco IOS XE Software Privilege Escalation Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-iosxe-ospf-dos-dr9sfrxp | Cisco IOS XE Software OSPFv2 Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-iosxe-ospf-dos-dR9Sfrxp | Cisco IOS XE Software OSPFv2 Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-ios-xe-sda-edge-dos-qzwuwxwg | Cisco IOS XE Software SD-Access Fabric Edge Node Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-ios-xe-sda-edge-dos-qZWuWXWG | Cisco IOS XE Software SD-Access Fabric Edge Node Denial of Service Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-ikev1-no2ccfwz | Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerabilities | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-ikev1-NO2ccFWz | Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerabilities | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-dmi-acl-bypass-xv8fo8vz | Cisco IOS XE Software NETCONF/RESTCONF IPv4 Access Control List Bypass Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| cisco-sa-dmi-acl-bypass-Xv8FO8Vz | Cisco IOS XE Software NETCONF/RESTCONF IPv4 Access Control List Bypass Vulnerability | 2024-03-27T16:00:00+00:00 | 2024-03-27T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2022-34835 | In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function. | 2022-06-02T00:00:00.000Z | 2026-02-18T02:42:33.000Z |
| msrc_cve-2024-31744 | In Jasper 4.2.2 the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability allowing attackers to cause a denial of service attack through a specific image file. | 2024-04-02T07:00:00.000Z | 2026-02-18T02:42:21.000Z |
| msrc_cve-2023-29404 | Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go | 2023-06-01T07:00:00.000Z | 2026-02-18T02:42:15.000Z |
| msrc_cve-2024-45336 | Sensitive headers incorrectly sent after cross-domain redirect in net/http | 2025-01-02T00:00:00.000Z | 2026-02-18T02:42:07.000Z |
| msrc_cve-2025-38200 | i40e: fix MMIO write access to an invalid page in i40e_clear_hw | 2025-07-02T00:00:00.000Z | 2026-02-18T02:42:03.000Z |
| msrc_cve-2025-37787 | net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered | 2025-05-02T00:00:00.000Z | 2026-02-18T02:42:01.000Z |
| msrc_cve-2022-25883 | Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range when untrusted user data is provided as a range. | 2023-06-01T07:00:00.000Z | 2026-02-18T02:42:00.000Z |
| msrc_cve-2025-14177 | Information Leak of Memory in getimagesize | 2025-12-02T00:00:00.000Z | 2026-02-18T02:41:55.000Z |
| msrc_cve-2024-49884 | ext4: fix slab-use-after-free in ext4_split_extent_at() | 2024-10-01T07:00:00.000Z | 2026-02-18T02:41:49.000Z |
| msrc_cve-2025-61107 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LSA Update packet. | 2025-10-02T00:00:00.000Z | 2026-02-18T02:41:48.000Z |
| msrc_cve-2024-1737 | BIND's database will be slow if a very large number of RRs exist at the same name | 2024-07-01T07:00:00.000Z | 2026-02-18T02:41:47.000Z |
| msrc_cve-2019-14204 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply. | 2019-07-02T00:00:00.000Z | 2026-02-18T02:41:45.000Z |
| msrc_cve-2023-52905 | octeontx2-pf: Fix resource leakage in VF driver unbind | 2024-08-02T00:00:00.000Z | 2026-02-18T02:41:39.000Z |
| msrc_cve-2025-38192 | net: clear the dst when changing skb protocol | 2025-07-02T00:00:00.000Z | 2026-02-18T02:41:28.000Z |
| msrc_cve-2023-39325 | HTTP/2 rapid reset can cause excessive work in net/http | 2023-10-01T00:00:00.000Z | 2026-02-18T02:41:27.000Z |
| msrc_cve-2025-37881 | usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() | 2025-05-02T00:00:00.000Z | 2026-02-18T02:41:23.000Z |
| msrc_cve-2024-46673 | scsi: aacraid: Fix double-free on probe failure | 2024-09-01T07:00:00.000Z | 2026-02-18T02:41:12.000Z |
| msrc_cve-2022-2795 | Processing large delegations may severely degrade resolver performance | 2022-09-02T00:00:00.000Z | 2026-02-18T02:40:58.000Z |
| msrc_cve-2021-28211 | A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. | 2021-06-02T00:00:00.000Z | 2026-02-18T02:40:57.000Z |
| msrc_cve-2025-61106 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2026-02-18T02:40:55.000Z |
| msrc_cve-2024-49924 | fbdev: pxafb: Fix possible use after free in pxafb_task() | 2024-10-01T07:00:00.000Z | 2026-02-18T02:40:54.000Z |
| msrc_cve-2025-37932 | sch_htb: make htb_qlen_notify() idempotent | 2025-05-02T00:00:00.000Z | 2026-02-18T02:40:45.000Z |
| msrc_cve-2023-28321 | An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match but the wildcard check in curl could still check for `x*` which would match even though the IDN name most likely contained nothing even resembling an `x`. | 2023-05-01T00:00:00.000Z | 2026-02-18T02:40:44.000Z |
| msrc_cve-2025-38096 | wifi: iwlwifi: don't warn when if there is a FW error | 2025-07-02T00:00:00.000Z | 2026-02-18T02:40:43.000Z |
| msrc_cve-2017-7718 | hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions. | 2017-04-02T00:00:00.000Z | 2026-02-18T02:40:27.000Z |
| msrc_cve-2022-38178 | Memory leaks in EdDSA DNSSEC verification code | 2022-09-02T00:00:00.000Z | 2026-02-18T02:40:26.000Z |
| msrc_cve-2024-45025 | fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE | 2024-09-01T07:00:00.000Z | 2026-02-18T02:40:19.000Z |
| msrc_cve-2025-3001 | PyTorch torch.lstm_cell memory corruption | 2025-03-02T00:00:00.000Z | 2026-02-18T02:40:12.000Z |
| msrc_cve-2024-49894 | drm/amd/display: Fix index out of bounds in degamma hardware format translation | 2024-10-01T07:00:00.000Z | 2026-02-18T02:40:05.000Z |
| msrc_cve-2025-39810 | bnxt_en: Fix memory corruption when FW resources change during ifdown | 2025-09-02T00:00:00.000Z | 2026-02-18T02:40:04.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:20022-1 | Security update for python-Django | 2025-10-31T08:58:03Z | 2025-10-31T08:58:03Z |
| opensuse-su-2025-20022-1 | Security update for python-Django | 2025-10-31T08:58:03Z | 2025-10-31T08:58:03Z |
| opensuse-su-2025:16756-1 | java-25-openj9-25.0.1.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:16755-1 | java-21-openj9-21.0.9.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:16754-1 | java-1_8_0-openj9-1.8.0.472-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:16753-1 | java-17-openj9-17.0.17.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:16752-1 | java-11-openj9-11.0.29.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:16751-1 | gomuks-0.3.1-2.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:15694-1 | java-25-openj9-25.0.1.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:15693-1 | java-21-openj9-21.0.9.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:15692-1 | java-1_8_0-openj9-1.8.0.472-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:15691-1 | java-17-openj9-17.0.17.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:15690-1 | java-11-openj9-11.0.29.0-1.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:15689-1 | gomuks-0.3.1-2.1 on GA media | 2025-10-31T00:00:00Z | 2025-10-31T00:00:00Z |
| opensuse-su-2025:15688-1 | libmozjs-140-0-140.4.0-2.1 on GA media | 2025-10-30T00:00:00Z | 2025-10-30T00:00:00Z |
| opensuse-su-2025:15687-1 | chromedriver-142.0.7444.59-2.1 on GA media | 2025-10-30T00:00:00Z | 2025-10-30T00:00:00Z |
| opensuse-su-2025:15686-1 | MozillaFirefox-144.0.2-1.1 on GA media | 2025-10-30T00:00:00Z | 2025-10-30T00:00:00Z |
| opensuse-su-2025:15685-1 | ImageMagick-7.1.2.8-1.1 on GA media | 2025-10-30T00:00:00Z | 2025-10-30T00:00:00Z |
| opensuse-su-2025:20021-1 | Security update for MozillaThunderbird | 2025-10-29T17:54:20Z | 2025-10-29T17:54:20Z |
| opensuse-su-2025-20021-1 | Security update for MozillaThunderbird | 2025-10-29T17:54:20Z | 2025-10-29T17:54:20Z |
| opensuse-su-2025:15684-1 | xwayland-24.1.8-4.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15683-1 | xorg-x11-server-21.1.15-7.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15682-1 | libtiff-devel-32bit-4.7.1-3.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15681-1 | strongswan-6.0.3-1.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15680-1 | ongres-scram-3.2-7.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15679-1 | libmozjs-128-0-128.14.0-2.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15678-1 | libmozjs-115-0-115.15.0-6.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15677-1 | kea-3.0.2-1.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15676-1 | dovecot24-2.4.2-1.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| opensuse-su-2025:15675-1 | coreboot-utils-25.09-2.1 on GA media | 2025-10-29T00:00:00Z | 2025-10-29T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-1210 | Heap-buffer-overflow in parse_mixed_content | 2024-10-11T00:15:50.054920Z | 2025-01-10T05:11:11.351763Z |
| osv-2024-1206 | Heap-buffer-overflow in extract_sendrecv_mode | 2024-10-11T00:13:47.835312Z | 2025-01-10T05:11:09.130549Z |
| osv-2023-1370 | Heap-buffer-overflow in process_one_read | 2023-12-29T00:14:11.001809Z | 2025-01-10T05:09:49.377670Z |
| osv-2024-1200 | UNKNOWN READ in eat_line | 2024-10-11T00:02:19.537501Z | 2025-01-10T05:09:26.885831Z |
| osv-2023-1205 | Heap-buffer-overflow in isvcd_populate_res_prms | 2023-11-24T13:00:14.783667Z | 2025-01-10T05:07:48.976928Z |
| osv-2024-1053 | Heap-buffer-overflow in gguf_get_tensor_offset | 2024-09-13T00:00:16.432562Z | 2025-01-10T05:05:50.790792Z |
| osv-2024-18 | Heap-use-after-free in QPDF::read_xref | 2024-01-19T00:01:09.084916Z | 2025-01-10T05:03:37.159682Z |
| osv-2024-592 | UNKNOWN READ in spvtools::disassemble::InstructionDisassembler::EmitInstruction | 2024-06-27T00:03:46.520119Z | 2025-01-10T05:00:09.280885Z |
| osv-2022-738 | Security exception in DatatypeFuzzer.fuzzerTestOneInput | 2022-08-19T00:00:35.294543Z | 2025-01-10T04:55:45.450144Z |
| osv-2024-817 | Use-of-uninitialized-value in pcapint_filter_with_aux_data | 2024-08-16T00:02:39.185747Z | 2025-01-08T14:19:40.985698Z |
| osv-2025-17 | Heap-buffer-overflow in cv::PngDecoder::readHeader | 2025-01-08T00:14:02.009521Z | 2025-01-08T00:14:02.009997Z |
| osv-2025-16 | UNKNOWN READ in png_free_data | 2025-01-08T00:13:45.160139Z | 2025-01-08T00:13:45.160518Z |
| osv-2025-13 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2025-01-07T00:15:11.722974Z | 2025-01-07T00:15:11.723402Z |
| osv-2025-7 | Heap-buffer-overflow in oatpp::json::Utils::escapeUtf8Char | 2025-01-07T00:03:42.053605Z | 2025-01-07T00:03:42.054132Z |
| osv-2025-6 | Heap-buffer-overflow in next_marker | 2025-01-06T00:16:10.036783Z | 2025-01-06T00:16:10.037219Z |
| osv-2025-4 | Heap-buffer-overflow in ___interceptor_pthread_create | 2025-01-05T00:17:02.263743Z | 2025-01-05T00:17:02.264158Z |
| osv-2025-3 | Heap-buffer-overflow in avifImageAddUUIDProperty | 2025-01-05T00:10:22.871565Z | 2025-01-05T00:10:22.872062Z |
| osv-2025-1 | Segv on unknown address in avif_fuzztest_properties@PropertiesAvifFuzzTest.PropsValid | 2025-01-04T00:00:30.888504Z | 2025-01-04T00:00:30.889140Z |
| osv-2024-1417 | Heap-buffer-overflow in cv::PngDecoder::read_from_io | 2025-01-02T00:15:00.246767Z | 2025-01-02T00:15:00.247102Z |
| osv-2024-1411 | Use-of-uninitialized-value in mark_context | 2024-12-29T00:03:28.881713Z | 2024-12-29T00:03:28.882100Z |
| osv-2024-1406 | UNKNOWN READ in _TIFFVSetField | 2024-12-27T00:16:38.077175Z | 2024-12-27T00:16:38.077756Z |
| osv-2024-384 | Heap-use-after-free in json_fixed_string | 2024-04-30T00:12:26.560732Z | 2024-12-25T14:21:22.172697Z |
| osv-2024-1391 | Heap-buffer-overflow in gsicc_create_getv2buffer | 2024-12-20T00:03:10.307442Z | 2024-12-20T00:03:10.308031Z |
| osv-2023-536 | Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader | 2023-07-02T14:00:19.269762Z | 2024-12-19T14:05:46.818834Z |
| osv-2024-1388 | Security exception in com.google.gson.internal.bind.TypeAdapters$28.write | 2024-12-18T00:02:54.357847Z | 2024-12-18T00:02:54.358393Z |
| osv-2024-1380 | Index-out-of-bounds in ndpi_search_dns | 2024-12-15T00:12:21.687565Z | 2024-12-15T00:12:21.687988Z |
| osv-2024-1372 | Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess | 2024-12-14T00:00:14.982156Z | 2024-12-14T00:00:14.982614Z |
| osv-2023-984 | Stack-buffer-overflow in TranslateWord3 | 2023-10-08T13:00:48.222080Z | 2024-12-12T14:15:21.369705Z |
| osv-2023-467 | Stack-buffer-overflow in SetPitchGradient | 2023-06-08T14:01:12.964629Z | 2024-12-12T14:12:48.510389Z |
| osv-2022-595 | Stack-buffer-overflow in Lookup | 2022-07-19T00:01:42.567408Z | 2024-12-12T14:09:48.779445Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2021-0088 | `Read` on uninitialized memory may cause UB (fn preamble_skipcount()) | 2021-01-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0086 | `Read` on uninitialized buffer may cause UB ( `read_entry()` ) | 2021-01-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0085 | 'Read' on uninitialized memory may cause UB | 2021-01-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0084 | `Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`) | 2021-01-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0083 | QueryInterface should call AddRef before returning pointer | 2021-01-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0081 | Potential request smuggling capabilities due to lack of input validation | 2021-06-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0080 | Links in archive can create arbitrary directories | 2021-07-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0077 | `better-macro` has deliberate RCE to prove a point | 2021-07-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0076 | libsecp256k1 allows overflowing signatures | 2021-07-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0075 | Flaw in `FieldVar::mul_by_inverse` allows unsound R1CS constraint systems | 2021-07-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0074 | Incorrect handling of embedded SVG and MathML leads to mutation XSS | 2021-07-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0073 | Conversion from `prost_types::Timestamp` to `SystemTime` can cause an overflow and panic | 2021-07-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0072 | Task dropped in wrong thread when aborting `LocalSet` task | 2021-07-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0071 | `grep-cli` may run arbitrary executables on Windows | 2021-06-12T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0070 | VecStorage Deserialize Allows Violation of Length Invariant | 2021-06-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0068 | Soundness issue in `iced-x86` versions <= 1.10.3 | 2021-05-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0066 | Denial of service on EVM execution due to memory over-allocation | 2021-05-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0065 | anymap is unmaintained. | 2021-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0063 | XSS in `comrak` | 2021-05-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0058 | Null pointer deref in `X509_issuer_and_serial_hash()` | 2021-05-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0057 | Integer overflow in CipherUpdate | 2021-05-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0056 | CA certificate check bypass with X509_V_FLAG_X509_STRICT | 2021-05-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0055 | NULL pointer deref in signature_algorithms processing | 2021-05-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0054 | Archives may contain uninitialized memory | 2021-04-28T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0053 | 'merge_sort::merge()' crashes with double-free for `T: Drop` | 2021-03-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0052 | Multiple functions can cause double-frees | 2021-02-26T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0051 | KeyValueReader passes uninitialized memory to Read instance | 2021-01-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0050 | swap_index can write out of bounds and return uninitialized memory | 2021-02-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0049 | `through` and `through_and` causes a double free if the map function panics | 2021-02-18T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2021-0048 | StackVec::extend can write out of bounds when size_hint is incorrect | 2021-02-19T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-python-2023-27043 | 2024-10-22T12:06:11.918Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2023-24329 | 2024-03-06T11:04:03.580Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2022-42919 | 2024-03-06T11:05:06.167Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2022-0391 | 2024-03-06T11:05:40.083Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-4189 | 2024-03-06T11:05:50.693Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-3737 | 2024-03-06T11:06:04.065Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-3733 | 2024-03-06T11:06:14.679Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-3426 | 2024-03-06T11:06:24.568Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-29921 | 2024-03-06T11:06:43.578Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2021-28861 | 2024-03-06T11:06:51.991Z | 2025-11-06T13:25:46.476Z | |
| bit-python-2020-10735 | 2024-03-06T11:08:16.884Z | 2025-11-06T13:25:46.476Z | |
| bit-postgresql-2024-10979 | PostgreSQL PL/Perl environment variable changes execute arbitrary code | 2024-11-16T07:16:38.797Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2024-10978 | PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID | 2024-11-16T07:16:45.984Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2024-10977 | PostgreSQL libpq retains an error message from man-in-the-middle | 2024-11-16T07:16:52.278Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2024-10976 | PostgreSQL row security below e.g. subqueries disregards user ID changes | 2024-11-16T07:16:59.886Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2023-5870 | Postgresql: role pg_signal_backend can signal certain superuser processes. | 2024-03-06T11:02:29.084Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2023-5869 | Postgresql: buffer overrun from integer overflow in array modification | 2024-03-06T11:02:41.294Z | 2025-11-06T13:25:46.476Z |
| bit-postgresql-2023-5868 | Postgresql: memory disclosure in aggregate function calls | 2024-03-06T11:02:52.082Z | 2025-11-06T13:25:46.476Z |
| bit-pip-2025-8869 | Fallback tar extraction in pip doesn't check symbolic links point to extraction directory | 2025-09-26T08:48:13.610Z | 2025-11-06T13:25:46.476Z |
| bit-pip-2023-5752 | Mercurial configuration injectable in repo revision when installing via pip | 2024-03-06T11:01:43.973Z | 2025-11-06T13:25:46.476Z |
| bit-phpmyadmin-2025-24530 | 2025-04-24T07:21:48.097Z | 2025-11-06T13:25:46.476Z | |
| bit-phpmyadmin-2025-24529 | 2025-04-24T07:21:41.489Z | 2025-11-06T13:25:46.476Z | |
| bit-phpmyadmin-2023-25727 | 2024-03-06T11:01:27.502Z | 2025-11-06T13:25:46.476Z | |
| bit-php-2025-6491 | NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix | 2025-07-16T08:19:30.475Z | 2025-11-06T13:25:46.476Z |
| bit-php-2025-1861 | Stream HTTP wrapper truncates redirect location to 1024 bytes | 2025-04-14T11:39:29.979Z | 2025-11-06T13:25:46.476Z |
| bit-php-2025-1736 | Stream HTTP wrapper header check might omit basic auth header | 2025-04-14T11:39:27.066Z | 2025-11-06T13:25:46.476Z |
| bit-php-2025-1735 | pgsql extension does not check for errors during escaping | 2025-07-16T08:19:20.063Z | 2025-11-06T13:25:46.476Z |
| bit-php-2025-1734 | Streams HTTP wrapper does not fail for headers with invalid name and no colon | 2025-04-14T11:39:23.775Z | 2025-11-06T13:25:46.476Z |
| bit-php-2025-1220 | Null byte termination in hostnames | 2025-07-16T08:19:12.163Z | 2025-11-06T13:25:46.476Z |
| bit-php-2025-1219 | libxml streams use wrong content-type header when requesting a redirected resource | 2025-04-14T11:39:20.240Z | 2025-11-06T13:25:46.476Z |
| ID | Description | Updated |
|---|---|---|
| var-200810-0010 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windo… | 2024-07-23T21:21:00.936000Z |
| var-200608-0041 | Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial… | 2024-07-23T21:21:00.588000Z |
| var-202006-0391 | The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the… | 2024-07-23T21:20:57.987000Z |
| var-201804-1202 | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS b… | 2024-07-23T21:20:49.328000Z |
| var-201306-0245 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:20:49.038000Z |
| var-201009-0241 | Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10… | 2024-07-23T21:20:47.492000Z |
| var-201903-0388 | An integer overflow flaw which could lead to an out of bounds write was discovered in lib… | 2024-07-23T21:20:42.429000Z |
| var-201404-0592 | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly h… | 2024-07-23T21:20:07.305000Z |
| var-201401-0579 | expat 2.1.0 and earlier does not properly handle entities expansion unless an application… | 2024-07-23T21:20:07.746000Z |
| var-202204-0855 | There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, … | 2024-07-23T21:20:06.909000Z |
| var-200701-0320 | The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other … | 2024-07-23T21:20:06.280000Z |
| var-201605-0466 | The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2,… | 2024-07-23T21:20:02.442000Z |
| var-201912-0501 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:18:18.853000Z |
| var-202006-1636 | An input validation issue was addressed with improved input validation. This issue is fix… | 2024-07-23T21:17:58.689000Z |
| var-201302-0332 | The TLS implementation in Mozilla Network Security Services (NSS) does not properly consi… | 2024-07-23T21:17:58.592000Z |
| var-201110-0352 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2024-07-23T21:17:55.274000Z |
| var-202201-0349 | node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. n… | 2024-07-23T21:17:54.278000Z |
| var-201302-0403 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:17:54.186000Z |
| var-202101-0222 | A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not… | 2024-07-23T21:17:22.779000Z |
| var-201806-1485 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2024-07-23T21:16:48.620000Z |
| var-201407-0138 | The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitra… | 2024-07-23T21:16:45.502000Z |
| var-201211-0356 | Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml… | 2024-07-23T21:16:44.704000Z |
| var-201806-1482 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2024-07-23T21:16:40.066000Z |
| var-201201-0030 | The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not proper… | 2024-07-23T21:16:40.308000Z |
| var-201203-0190 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2024-07-23T21:16:39.242000Z |
| var-200904-0291 | udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space,… | 2024-07-23T21:16:32.784000Z |
| var-201904-1341 | A memory corruption issue was addressed with improved memory handling. This issue affecte… | 2024-07-23T21:16:30.316000Z |
| var-201912-0122 | A logic issue was addressed with improved state management. This issue is fixed in iOS 13… | 2024-07-23T21:16:26.258000Z |
| var-202208-0404 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in in… | 2024-07-23T21:15:51.322000Z |
| var-201801-0036 | jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-doma… | 2024-07-23T21:15:42.081000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000043 | Multiple vulnerabilities in MicroEngine Mailform | 2023-05-10T13:57+09:00 | 2024-05-24T17:07+09:00 |
| jvndb-2023-000045 | WordPress Plugin "VK Blocks" and "VK All in One Expansion Unit" vulnerable to cross-site scripting | 2023-05-09T15:14+09:00 | 2024-05-24T17:05+09:00 |
| jvndb-2023-001926 | Cross-site Scripting Vulnerability in Hitachi Ops Center Analyzer | 2023-05-24T11:40+09:00 | 2024-05-24T17:01+09:00 |
| jvndb-2023-000047 | Beekeeper Studio vulnerable to code injection | 2023-05-12T16:42+09:00 | 2024-05-24T16:17+09:00 |
| jvndb-2023-000046 | SR-7100VN vulnerable to privilege escalation | 2023-05-09T13:58+09:00 | 2024-05-24T16:13+09:00 |
| jvndb-2023-000061 | Chatwork Desktop Application (Mac) vulnerable to code injection | 2023-06-13T13:38+09:00 | 2024-05-24T16:02+09:00 |
| jvndb-2023-002055 | Multiple vulnerabilities in KbDevice digital video recorders | 2023-06-07T11:52+09:00 | 2024-05-24T15:57+09:00 |
| jvndb-2023-000049 | Multiple vulnerabilities in Cybozu Garoon | 2023-05-15T14:29+09:00 | 2024-05-24T15:26+09:00 |
| jvndb-2024-000051 | Splunk Config Explorer vulnerable to cross-site scripting | 2024-05-24T13:50+09:00 | 2024-05-24T13:50+09:00 |
| jvndb-2024-000050 | WordPress Plugin "WP Booking" vulnerable to cross-site scripting | 2024-05-24T13:41+09:00 | 2024-05-24T13:41+09:00 |
| jvndb-2023-001534 | Security Issues in FINS protocol | 2023-04-18T13:58+09:00 | 2024-05-23T17:35+09:00 |
| jvndb-2023-000057 | "Jiyu Kukan Toku-Toku coupon" App vulnerable to improper server certificate verification | 2023-06-01T14:51+09:00 | 2024-05-23T17:19+09:00 |
| jvndb-2023-000026 | Qrio Smart Lock Q-SL2 vulnerable to authentication bypass by capture-replay | 2023-05-18T14:13+09:00 | 2024-05-23T17:18+09:00 |
| jvndb-2023-000051 | Multiple vulnerabilities in T&D and ESPEC MIC data logger products | 2023-05-19T15:21+09:00 | 2024-05-23T17:03+09:00 |
| jvndb-2023-000041 | LINE WORKS Drive Explorer vulnerable to code injection | 2023-05-08T15:16+09:00 | 2024-05-23T17:03+09:00 |
| jvndb-2023-002111 | Printer Driver Packager NX creates driver installation packages without modification detection | 2023-06-15T16:06+09:00 | 2024-05-23T15:45+09:00 |
| jvndb-2023-002072 | Multiple vulnerabilities in Fuji Electric products | 2023-06-09T12:23+09:00 | 2024-05-23T15:33+09:00 |
| jvndb-2023-002100 | Security updates for multiple Trend Micro products for enterprises (June 2023) | 2023-06-14T14:47+09:00 | 2024-05-23T15:23+09:00 |
| jvndb-2023-000066 | Multiple vulnerabilities in Aterm series | 2023-06-27T15:12+09:00 | 2024-05-22T18:16+09:00 |
| jvndb-2023-003767 | Multiple vulnerabilities in multiple FURUNO SYSTEMS wireless LAN access point devices in ST(Standalone) mode | 2023-10-03T14:26+09:00 | 2024-05-22T18:01+09:00 |
| jvndb-2023-000101 | web2py vulnerable to OS command injection | 2023-10-16T16:11+09:00 | 2024-05-22T17:58+09:00 |
| jvndb-2023-000069 | Multiple vulnerabilities in SoftEther VPN and PacketiX VPN | 2023-07-03T15:07+09:00 | 2024-05-22T17:47+09:00 |
| jvndb-2023-000096 | Improper restriction of XML external entity references (XXE) in FD Application | 2023-10-02T12:36+09:00 | 2024-05-22T15:37+09:00 |
| jvndb-2023-003770 | DoS Vulnerability in Hitachi Ops Center Common Services | 2023-10-04T15:23+09:00 | 2024-05-22T15:31+09:00 |
| jvndb-2023-003769 | Information Exposure Vulnerability in Hitachi Ops Center Administrator | 2023-10-04T15:23+09:00 | 2024-05-22T15:20+09:00 |
| jvndb-2023-000095 | Shihonkanri Plus vulnerable to relative path traversal | 2023-09-27T13:49+09:00 | 2024-05-21T17:16+09:00 |
| jvndb-2023-000097 | Citadel WebCit vulnerable to cross-site scripting on Instant Messaging facility | 2023-10-04T14:07+09:00 | 2024-05-21T17:08+09:00 |
| jvndb-2024-000046 | Android App "TP-Link Tether" and "TP-Link Tapo" vulnerable to improper server certificate verification | 2024-05-21T13:33+09:00 | 2024-05-21T13:33+09:00 |
| jvndb-2023-004294 | Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL | 2023-10-27T16:10+09:00 | 2024-05-20T17:49+09:00 |
| jvndb-2023-000098 | e-Gov Client Application fails to restrict custom URL schemes properly | 2023-10-06T14:57+09:00 | 2024-05-17T17:55+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:21197-1 | Security update for binutils | 2025-12-12T15:58:29Z | 2025-12-12T15:58:29Z |
| suse-su-2025:21195-1 | Security update for binutils | 2025-12-12T15:58:29Z | 2025-12-12T15:58:29Z |
| suse-su-2025:4389-1 | Security update for python | 2025-12-12T13:49:14Z | 2025-12-12T13:49:14Z |
| suse-su-2025:4388-1 | Security update for postgresql16 | 2025-12-12T13:36:29Z | 2025-12-12T13:36:29Z |
| suse-su-2025:4387-1 | Security update for postgresql16 | 2025-12-12T13:35:46Z | 2025-12-12T13:35:46Z |
| suse-su-2025:4386-1 | Security update for postgresql16 | 2025-12-12T13:34:19Z | 2025-12-12T13:34:19Z |
| suse-su-2025:4384-1 | Security update for python-Django | 2025-12-12T13:28:27Z | 2025-12-12T13:28:27Z |
| suse-su-2025:4383-1 | Security update for libpng12 | 2025-12-12T13:13:47Z | 2025-12-12T13:13:47Z |
| suse-su-2025:4382-1 | Security update for gegl | 2025-12-12T13:06:54Z | 2025-12-12T13:06:54Z |
| suse-su-2025:4381-1 | Security update for kubernetes-client | 2025-12-12T10:19:11Z | 2025-12-12T10:19:11Z |
| suse-su-2025:4380-1 | Security update for kubernetes-client | 2025-12-12T10:18:54Z | 2025-12-12T10:18:54Z |
| suse-su-2025:21194-1 | Security update for keylime | 2025-12-12T09:45:03Z | 2025-12-12T09:45:03Z |
| suse-su-2025:4373-1 | Security update for container-suseconnect | 2025-12-12T09:05:38Z | 2025-12-12T09:05:38Z |
| suse-su-2025:21193-1 | Security update for go1.24 | 2025-12-12T07:45:36Z | 2025-12-12T07:45:36Z |
| suse-su-2025:21192-1 | Security update for go1.25 | 2025-12-12T07:24:50Z | 2025-12-12T07:24:50Z |
| suse-su-2025:4372-1 | Security update for postgresql15 | 2025-12-11T19:06:38Z | 2025-12-11T19:06:38Z |
| suse-su-2025:4371-1 | Security update for postgresql14 | 2025-12-11T19:04:45Z | 2025-12-11T19:04:45Z |
| suse-su-2025:4370-1 | Security update for postgresql14 | 2025-12-11T19:03:37Z | 2025-12-11T19:03:37Z |
| suse-su-2025:4368-1 | Security update for python3 | 2025-12-11T15:12:31Z | 2025-12-11T15:12:31Z |
| suse-su-2025:4364-1 | Security update for postgresql17, postgresql18 | 2025-12-11T10:12:26Z | 2025-12-11T10:12:26Z |
| suse-su-2025:4363-1 | Security update for postgresql17, postgresql18 | 2025-12-11T10:10:24Z | 2025-12-11T10:10:24Z |
| suse-su-2025:4353-1 | Security update for fontforge | 2025-12-10T18:03:31Z | 2025-12-10T18:03:31Z |
| suse-su-2025:4352-1 | Security update for python310 | 2025-12-10T17:18:21Z | 2025-12-10T17:18:21Z |
| suse-su-2025:4347-1 | Security update for glib2 | 2025-12-10T13:02:34Z | 2025-12-10T13:02:34Z |
| suse-su-2025:4346-1 | Security update for gnutls | 2025-12-10T10:39:49Z | 2025-12-10T10:39:49Z |
| suse-su-2025:1004-2 | Security update for python-Jinja2 | 2025-12-10T10:34:31Z | 2025-12-10T10:34:31Z |
| suse-su-2025:4337-1 | Security update for go1.24 | 2025-12-09T23:51:31Z | 2025-12-09T23:51:31Z |
| suse-su-2025:4336-1 | Security update for go1.25 | 2025-12-09T23:50:12Z | 2025-12-09T23:50:12Z |
| suse-su-2025:4335-1 | Security update for gegl | 2025-12-09T18:19:44Z | 2025-12-09T18:19:44Z |
| suse-su-2025:4334-1 | Security update for postgresql13 | 2025-12-09T18:17:22Z | 2025-12-09T18:17:22Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-05331 | Complete Online Beauty Parlor Management System /search-invoices.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-21 |
| cnvd-2026-05330 | Complete Online Beauty Parlor Management System /view-appointment.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-21 |
| cnvd-2026-05329 | Complete Online Beauty Parlor Management System /search-invoices.php文件跨站脚本漏洞 | 2026-01-14 | 2026-01-21 |
| cnvd-2026-05174 | Huawei Smart Screen授权问题漏洞 | 2023-12-08 | 2026-01-21 |
| cnvd-2026-05173 | Huawei NetEngine AR617VW访问控制不当漏洞 | 2023-12-22 | 2026-01-21 |
| cnvd-2026-05172 | Huawei NetEngine AR617VW命令注入漏洞 | 2023-12-22 | 2026-01-21 |
| cnvd-2026-05171 | Huawei HarmonyOS和EMUI device authentication模块越界访问漏洞 | 2024-01-23 | 2026-01-21 |
| cnvd-2026-05170 | Huawei HarmonyOS和EMUI WMS模块权限校验不严格漏洞 | 2024-01-23 | 2026-01-21 |
| cnvd-2026-05169 | Huawei HarmonyOS和EMUI AMS模块存在未明漏洞 | 2024-01-23 | 2026-01-21 |
| cnvd-2026-05168 | Huawei EMUI存在未明漏洞（CNVD-2026-05168） | 2024-04-11 | 2026-01-21 |
| cnvd-2026-05167 | Huawei PC Manager访问控制不当漏洞 | 2024-05-30 | 2026-01-21 |
| cnvd-2026-05166 | Huawei HarmonyOS和EMUI NearLink模块权限验证不足漏洞 | 2024-06-18 | 2026-01-21 |
| cnvd-2026-05165 | Huawei Technologies存在未明漏洞 | 2024-07-25 | 2026-01-21 |
| cnvd-2026-05164 | Huawei HarmonyOS和EMUI account模块存在未明漏洞 | 2024-08-12 | 2026-01-21 |
| cnvd-2026-05163 | Huawei HarmonyOS和EMUI Camera驱动模块访问权限漏洞 | 2024-09-10 | 2026-01-21 |
| cnvd-2026-04817 | 用友网络科技股份有限公司U8 Cloud存在命令执行漏洞（CNVD-C-2026-26052） | 2026-01-04 | 2026-01-21 |
| cnvd-2026-04806 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在命令执行漏洞（CNVD-C-2025-1018960） | 2025-12-10 | 2026-01-21 |
| cnvd-2026-04470 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞（CNVD-C-2026-35542） | 2026-01-08 | 2026-01-21 |
| cnvd-2026-04469 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞（CNVD-C-2025-987341） | 2025-12-08 | 2026-01-21 |
| cnvd-2026-04468 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞（CNVD-C-2025-980402） | 2025-12-04 | 2026-01-21 |
| cnvd-2026-04457 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2026-33516） | 2026-01-07 | 2026-01-21 |
| cnvd-2026-04456 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-1206330） | 2025-12-29 | 2026-01-21 |
| cnvd-2026-04455 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-1203509） | 2025-12-27 | 2026-01-21 |
| cnvd-2026-04454 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-1134083） | 2025-12-22 | 2026-01-21 |
| cnvd-2026-04452 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-986300） | 2025-12-07 | 2026-01-21 |
| cnvd-2026-04451 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-986298） | 2025-12-07 | 2026-01-21 |
| cnvd-2026-04449 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976472） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04448 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976469） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04447 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976466） | 2025-12-03 | 2026-01-21 |
| cnvd-2026-04446 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-976462） | 2025-12-03 | 2026-01-21 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1069 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1068 | Vulnérabilité dans Python | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1067 | Vulnérabilité dans Apache Struts | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1066 | Multiples vulnérabilités dans les produits Nextcloud | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1065 | Multiples vulnérabilités dans NetApp ONTAP | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1074 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1073 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1072 | Multiples vulnérabilités dans les produits IBM | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1071 | Multiples vulnérabilités dans Apache HTTP Server | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1070 | Multiples vulnérabilités dans Microsoft CBL Mariner | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1069 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1068 | Vulnérabilité dans Python | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1067 | Vulnérabilité dans Apache Struts | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1066 | Multiples vulnérabilités dans les produits Nextcloud | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1065 | Multiples vulnérabilités dans NetApp ONTAP | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1064 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1063 | Multiples vulnérabilités dans les produits Splunk | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1062 | Multiples vulnérabilités dans Wireshark | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1061 | Vulnérabilité dans PostgreSQL PgBouncer | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2024-avi-1090 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-12-18T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1064 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1063 | Multiples vulnérabilités dans les produits Splunk | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1062 | Multiples vulnérabilités dans Wireshark | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1061 | Vulnérabilité dans PostgreSQL PgBouncer | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1090 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-12-18T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1060 | Multiples vulnérabilités dans Python | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| certfr-2025-avi-1059 | Multiples vulnérabilités dans Google Pixel | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| certfr-2025-avi-1058 | Multiples vulnérabilités dans Google Chrome | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| CERTFR-2025-AVI-1060 | Multiples vulnérabilités dans Python | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-ale-009 | Vulnérabilité dans Microsoft DirectShow | 2009-05-29T00:00:00.000000 | 2009-07-14T00:00:00.000000 |
| CERTA-2009-ALE-009 | Vulnérabilité dans Microsoft DirectShow | 2009-05-29T00:00:00.000000 | 2009-07-14T00:00:00.000000 |
| certa-2009-ale-008 | Vulnérabilité Java de Mac OS X | 2009-05-20T00:00:00.000000 | 2009-06-17T00:00:00.000000 |
| CERTA-2009-ALE-008 | Vulnérabilité Java de Mac OS X | 2009-05-20T00:00:00.000000 | 2009-06-17T00:00:00.000000 |
| certa-2009-ale-007 | Vulnérabilité WebDAV sous Microsoft IIS | 2009-05-18T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| CERTA-2009-ALE-007 | Vulnérabilité WebDAV sous Microsoft IIS | 2009-05-18T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-ale-003 | Vulnérabilité dans Apple Mac OS X | 2009-03-24T00:00:00.000000 | 2009-06-02T00:00:00.000000 |
| CERTA-2009-ALE-003 | Vulnérabilité dans Apple Mac OS X | 2009-03-24T00:00:00.000000 | 2009-06-02T00:00:00.000000 |
| certa-2009-ale-006 | Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat | 2009-04-28T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-ale-005 | Vulnérabilité de PowerPoint | 2009-04-03T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| CERTA-2009-ALE-006 | Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat | 2009-04-28T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| CERTA-2009-ALE-005 | Vulnérabilité de PowerPoint | 2009-04-03T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-ale-002 | Vulnérabilité dans Microsoft Excel | 2009-02-25T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2008-ale-015 | Vulnérabilité dans le convertisseur de texte de WordPad | 2008-12-10T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2008-ale-012 | Vulnérabilité dans Microsoft Windows | 2008-10-10T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| CERTA-2009-ALE-002 | Vulnérabilité dans Microsoft Excel | 2009-02-25T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| CERTA-2008-ALE-015 | Vulnérabilité dans le convertisseur de texte de WordPad | 2008-12-10T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| CERTA-2008-ALE-012 | Vulnérabilité dans Microsoft Windows | 2008-10-10T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-ale-004 | Vulnérabilité dans Mozilla Firefox | 2009-03-27T00:00:00.000000 | 2009-03-30T00:00:00.000000 |
| CERTA-2009-ALE-004 | Vulnérabilité dans Mozilla Firefox | 2009-03-27T00:00:00.000000 | 2009-03-30T00:00:00.000000 |
| certa-2009-ale-001 | Vulnérabilité dans l'interprétation JBIG2 des produits Adobe | 2009-02-20T00:00:00.000000 | 2009-03-20T00:00:00.000000 |
| CERTA-2009-ALE-001 | Vulnérabilité dans l'interprétation JBIG2 des produits Adobe | 2009-02-20T00:00:00.000000 | 2009-03-20T00:00:00.000000 |
| certa-2008-ale-017 | Vulnérabilité dans Microsoft SQL Server | 2008-12-12T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| CERTA-2008-ALE-017 | Vulnérabilité dans Microsoft SQL Server | 2008-12-12T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2008-ale-014 | Vulnérabilité dans Opera | 2008-11-20T00:00:00.000000 | 2009-01-06T00:00:00.000000 |
| CERTA-2008-ALE-014 | Vulnérabilité dans Opera | 2008-11-20T00:00:00.000000 | 2009-01-06T00:00:00.000000 |
| certa-2008-ale-016 | Vulnérabilité dans Microsoft Internet Explorer | 2008-12-10T00:00:00.000000 | 2008-12-17T00:00:00.000000 |
| CERTA-2008-ALE-016 | Vulnérabilité dans Microsoft Internet Explorer | 2008-12-10T00:00:00.000000 | 2008-12-17T00:00:00.000000 |
| certa-2007-ale-007 | Vulnérabilité de Microsoft Windows Explorer | 2007-03-09T00:00:00.000000 | 2008-10-09T00:00:00.000000 |
| certa-2006-ale-012 | Vulnérabilité de Microsoft PowerPoint | 2006-10-13T00:00:00.000000 | 2008-10-09T00:00:00.000000 |