Recent vulnerabilities

Recent vulnerabilities from
Select from 70 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2025-31970
5.3 (3.1)
HCL DFXAnalytics is affected by an Insecure Security H… HCL
 DFXAnalytics
 2026-05-06T10:22:41.866Z 2026-05-07T13:09:17.233Z
CVE-2026-42285
7.5 (3.1)
GoBGP: Panic in AdjRib.Update via malformed BGP Update… osrg
 gobgp
 2026-05-07T11:53:14.498Z 2026-05-07T13:04:56.019Z
CVE-2025-66105
5.3 (3.1)
WordPress Bus Ticket Booking with Seat Reservation plu… Magepeople inc.
 Bus Ticket Booking with Seat Reservation
 2026-05-07T07:46:34.030Z 2026-05-07T13:04:06.180Z
CVE-2026-27421
6.5 (3.1)
WordPress Royal Elementor Addons plugin < 1.7.1053 - C… WProyal
 Royal Elementor Addons
 2026-05-07T07:31:53.388Z 2026-05-07T13:03:38.524Z
CVE-2026-4430
5.4 (4.0)
Heap Buffer Overflow in AgileEngine The Document Foundation
 LibreOffice
 2026-05-07T07:16:18.851Z 2026-05-07T13:03:05.876Z
CVE-2025-9661
8.1 (3.1)
OS command injection vulneravility in the management g… Hitachi
 Hitachi Virtual Storage Platform One Block 23
 2026-05-07T07:08:14.823Z 2026-05-07T13:02:35.204Z
CVE-2026-3953
8.8 (3.1)
Reflected XSS in Gosoft Software's Proticaret E-Commerce Gosoft Software Industry and Trade Ltd. Co.
 Proticaret E-Commerce
 2026-05-07T11:20:11.750Z 2026-05-07T13:01:46.471Z
CVE-2026-6692
8.8 (3.1)
Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subs… Revolution Slider
 Slider Revolution
 2026-05-07T04:27:10.449Z 2026-05-07T13:00:27.657Z
CVE-2026-41413
5 (3.1)
Istio Vulnerable to SSRF via RequestAuthentication jwksUri istio
 istio
 2026-05-07T04:18:32.040Z 2026-05-07T12:59:35.159Z
CVE-2026-8063
7.1 (4.0)
6.5 (3.1)
Post-auth null pointer dereference when aggregating ag… MongoDB Inc.
 MongoDB Server
 2026-05-07T04:12:54.524Z 2026-05-07T12:58:36.281Z
CVE-2026-7981
8.1 (3.1)
Out of bounds read in Codecs in Google Chrome pri… Google
 Chrome
 2026-05-06T18:13:00.591Z 2026-05-07T12:58:23.258Z
CVE-2026-44406
5.7 (3.1)
DLL Hijacking Vulnerability in ZTE Cloud PC Client uSm… ZTE
 ZXCLOUD iRAI
 2026-05-07T06:49:54.221Z 2026-05-07T12:58:05.755Z
CVE-2026-40981
7.5 (3.1)
When using Google Secrets Manager as a backend fo… Spring
 Spring Cloud Config
 2026-05-07T03:55:43.600Z 2026-05-07T12:57:35.373Z
CVE-2026-41002
7.4 (3.1)
The base directory (`spring.cloud.config.server.g… Spring
 Spring Cloud Config
 2026-05-07T03:53:18.269Z 2026-05-07T12:57:01.324Z
CVE-2026-34461
7.3 (4.0)
Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer … sandboxie-plus
 Sandboxie
 2026-05-05T19:28:44.675Z 2026-05-07T12:56:42.689Z
CVE-2026-41004
4.4 (3.1)
When enabling trace logging in Spring Cloud Confi… Spring
 Spring Cloud Config
 2026-05-07T03:51:31.920Z 2026-05-07T12:56:31.413Z
CVE-2026-34462
7.3 (4.0)
Sandboxie-Plus ProcessServer boxname stack buffer over… sandboxie-plus
 Sandboxie
 2026-05-05T19:30:37.189Z 2026-05-07T12:56:03.593Z
CVE-2026-40982
9.1 (3.1)
Spring Cloud Config allows applications to serve … Spring
 Spring Cloud Config
 2026-05-07T03:49:30.065Z 2026-05-07T12:55:59.204Z
CVE-2026-34464
8.8 (4.0)
Sandboxie-Plus NamedPipeServer OpenHandler stack overf… sandboxie-plus
 Sandboxie
 2026-05-05T19:31:54.814Z 2026-05-07T12:55:33.153Z
CVE-2026-41640
7.5 (3.1)
NocoBase Vulnerable to SQL Injection via String Concat… nocobase
 nocobase
 2026-05-07T04:09:59.264Z 2026-05-07T12:55:04.738Z
CVE-2026-44599
3.7 (3.1)
Tor before 0.4.9.7 can attempt or accept BEGIN_DI… torproject
 Tor
 2026-05-07T02:11:56.238Z 2026-05-07T12:48:40.800Z
CVE-2026-40934
7.6 (4.0)
jupyter-server authentication cookies remain valid aft… jupyter-server
 jupyter_server
 2026-05-05T21:31:42.897Z 2026-05-07T12:48:21.223Z
CVE-2026-40110
7.6 (4.0)
jupyter-server CORS origin validation bypass via unanc… jupyter-server
 jupyter_server
 2026-05-05T21:29:31.323Z 2026-05-07T12:47:52.707Z
CVE-2026-41891
5.3 (4.0)
CI4MS: Deactivated User Session Bypass (active=0) ci4-cms-erp
 ci4ms
 2026-05-07T03:24:43.940Z 2026-05-07T12:47:44.069Z
CVE-2026-44600
3.7 (3.1)
Tor before 0.4.9.7 mishandles accounting of the c… torproject
 Tor
 2026-05-07T02:20:51.250Z 2026-05-07T12:46:59.949Z
CVE-2026-41671
6.8 (3.1)
Admidio: OIDC Token Introspection Endpoint Returns Act… Admidio
 admidio
 2026-05-07T03:00:55.645Z 2026-05-07T12:46:28.521Z
CVE-2026-41660
7.1 (3.1)
Admidio: Inverted 2FA Reset Authorization Check Lets G… Admidio
 admidio
 2026-05-07T02:59:29.810Z 2026-05-07T12:44:52.834Z
CVE-2026-41657
4.9 (3.1)
Admidio: Cross-Organization Member Data Exposure via P… Admidio
 admidio
 2026-05-07T02:58:09.340Z 2026-05-07T12:44:25.356Z
CVE-2026-41484
5.3 (3.1)
OpenTelemetry.Exporter.OneCollector vulnerable to deni… open-telemetry
 opentelemetry-dotnet-contrib
 2026-05-06T21:00:07.430Z 2026-05-07T12:43:25.988Z
CVE-2026-41663
3.5 (3.1)
Admidio: CSRF on Admin Preferences Triggers Unauthoriz… Admidio
 admidio
 2026-05-07T03:00:11.696Z 2026-05-07T12:41:41.736Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-42075
8.1 (3.1)
Evolver: Path Traversal via `--out` flag in `fetch` co… EvoMap
 evolver
 2026-05-04T16:47:23.943Z 2026-05-04T17:15:13.381Z
CVE-2026-41572
5.3 (3.1)
Note Mark: Unauthenticated read of notes and assets in… enchant97
 note-mark
 2026-05-04T17:44:01.157Z 2026-05-04T19:39:55.331Z
CVE-2026-41143
8.8 (3.1)
YesWiki vulnerable to authenticated SQL Injection via … YesWiki
 yeswiki
 2026-05-07T05:08:23.146Z 2026-05-07T13:41:46.278Z
CVE-2026-33079
8.7 (4.0)
Mistune ReDoS in LINK_TITLE_RE allows denial of servic… lepture
 mistune
 2026-05-06T17:25:09.026Z 2026-05-06T19:02:51.759Z
CVE-2026-31732
N/A
gpio: Fix resource leaks on errors in gpiochip_add_dat… Linux
 Linux
 2026-05-01T14:14:30.844Z 2026-05-01T14:14:30.844Z
CVE-2026-8015
5.4 (3.1)
Inappropriate implementation in Media in Google C… Google
 Chrome
 2026-05-06T18:13:13.806Z 2026-05-06T21:46:15.542Z
CVE-2026-8016
8.8 (3.1)
Use after free in WebRTC in Google Chrome prior t… Google
 Chrome
 2026-05-06T18:13:14.162Z 2026-05-07T03:55:50.840Z
CVE-2026-8017
3.1 (3.1)
Side-channel information leakage in Media in Goog… Google
 Chrome
 2026-05-06T18:13:14.552Z 2026-05-06T21:45:55.078Z
CVE-2026-8018
8.1 (3.1)
Insufficient policy enforcement in DevTools in Go… Google
 Chrome
 2026-05-06T18:13:14.911Z 2026-05-07T03:56:53.772Z
CVE-2026-8019
5.4 (3.1)
Insufficient policy enforcement in WebApp in Goog… Google
 Chrome
 2026-05-06T18:13:15.318Z 2026-05-06T21:12:37.599Z
CVE-2026-8020
5.3 (3.1)
Uninitialized Use in GPU in Google Chrome on Andr… Google
 Chrome
 2026-05-06T18:13:15.671Z 2026-05-06T21:45:35.184Z
CVE-2026-8009
5 (3.1)
Inappropriate implementation in Cast in Google Ch… Google
 Chrome
 2026-05-06T18:13:11.521Z 2026-05-06T21:47:12.093Z
CVE-2026-8012
5.4 (3.1)
Inappropriate implementation in MHTML in Google C… Google
 Chrome
 2026-05-06T18:13:12.707Z 2026-05-06T21:46:43.814Z
CVE-2026-8013
4.3 (3.1)
Insufficient validation of untrusted input in Fed… Google
 Chrome
 2026-05-06T18:13:13.106Z 2026-05-06T21:46:34.398Z
CVE-2026-8021
4.2 (3.1)
Script injection in UI in Google Chrome prior to … Google
 Chrome
 2026-05-06T18:13:16.064Z 2026-05-06T21:45:25.784Z
CVE-2026-8006
5.4 (3.1)
Insufficient policy enforcement in DevTools in Go… Google
 Chrome
 2026-05-06T18:13:10.335Z 2026-05-06T21:47:40.718Z
CVE-2026-8007
7.5 (3.1)
Insufficient validation of untrusted input in Cas… Google
 Chrome
 2026-05-06T18:13:10.692Z 2026-05-07T03:56:54.857Z
CVE-2026-8008
5.4 (3.1)
Inappropriate implementation in DevTools in Googl… Google
 Chrome
 2026-05-06T18:13:11.169Z 2026-05-06T21:47:21.898Z
CVE-2026-8010
6.3 (3.1)
Insufficient validation of untrusted input in Sit… Google
 Chrome
 2026-05-06T18:13:11.951Z 2026-05-06T21:47:02.622Z
CVE-2026-8011
4.3 (3.1)
Insufficient policy enforcement in Search in Goog… Google
 Chrome
 2026-05-06T18:13:12.332Z 2026-05-06T21:46:53.219Z
CVE-2026-8014
4.3 (3.1)
Inappropriate implementation in Preload in Google… Google
 Chrome
 2026-05-06T18:13:13.450Z 2026-05-06T21:46:24.955Z
CVE-2026-42216
8.8 (4.0)
OpenEXR: Out-of-bounds read in `IDManifest::init()` du… AcademySoftwareFoundation
 openexr
 2026-05-07T04:01:59.602Z 2026-05-07T14:13:20.747Z
CVE-2026-42010
7.1 (3.1)
Gnutls: gnutls: authentication bypass via nul characte… Red Hat
 Red Hat Enterprise Linux 10
 2026-05-07T12:00:05.433Z 2026-05-07T13:47:17.179Z
CVE-2026-41890
6.9 (4.0)
CI4MS: Arbitrary Database Table Drop via Theme deleteProcess ci4-cms-erp
 ci4ms
 2026-05-07T03:23:31.339Z 2026-05-07T13:42:35.440Z
CVE-2026-41675
8.7 (4.0)
xmldom: XML node injection through unvalidated process… xmldom
 xmldom
 2026-05-07T03:49:34.056Z 2026-05-07T13:44:35.717Z
CVE-2026-41673
8.7 (4.0)
xmldom: Denial of service via uncontrolled recursion i… xmldom
 xmldom
 2026-05-07T03:40:28.378Z 2026-05-07T14:10:45.986Z
CVE-2026-41670
8.2 (3.1)
Admidio: SAML Response Sent to Unvalidated Assertion C… Admidio
 admidio
 2026-05-07T03:00:39.851Z 2026-05-07T13:44:01.169Z
CVE-2026-41669
8.2 (3.1)
Admidio: SAML Signature Validation Result Ignored — Fo… Admidio
 admidio
 2026-05-07T03:00:29.816Z 2026-05-07T13:52:49.029Z
CVE-2026-41662
5.2 (3.1)
Admidio: Missing Minimum Administrator Check in Role M… Admidio
 admidio
 2026-05-07T02:59:50.508Z 2026-05-07T14:06:48.349Z
CVE-2026-41659
2.7 (3.1)
Admidio: Hidden Profile Field Values Leaked via Blind … Admidio
 admidio
 2026-05-07T02:59:19.870Z 2026-05-07T13:44:42.872Z
ID Description Published Updated
fkie_cve-2026-35397 Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path … 2026-05-05T20:16:38.223 2026-05-07T15:07:32.390
fkie_cve-2025-61669 Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17… 2026-05-05T16:16:10.133 2026-05-07T15:07:32.390
fkie_cve-2026-40075 OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and ear… 2026-05-05T22:16:00.520 2026-05-07T15:06:58.173
fkie_cve-2026-35579 CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 t… 2026-05-05T21:16:22.247 2026-05-07T15:06:40.750
fkie_cve-2026-33190 CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be by… 2026-05-05T20:16:36.167 2026-05-07T15:06:40.750
fkie_cve-2026-32934 CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-QUIC (DoQ) s… 2026-05-05T20:16:35.853 2026-05-07T15:06:40.750
fkie_cve-2026-42285 GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language… 2026-05-07T12:16:18.180 2026-05-07T15:06:11.573
fkie_cve-2026-40934 Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the sec… 2026-05-05T22:16:00.820 2026-05-07T15:06:11.573
fkie_cve-2026-42088 OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mo… 2026-05-04T18:16:31.007 2026-05-07T15:05:47.863
fkie_cve-2026-42087 OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mo… 2026-05-04T18:16:30.830 2026-05-07T15:05:47.863
fkie_cve-2026-42086 OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mo… 2026-05-04T18:16:30.667 2026-05-07T15:05:47.863
fkie_cve-2026-42085 OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mo… 2026-05-04T18:16:30.510 2026-05-07T15:05:47.863
fkie_cve-2026-42084 OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mo… 2026-05-04T18:16:30.357 2026-05-07T15:05:47.863
fkie_cve-2026-8026 A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Log… 2026-05-06T13:16:10.577 2026-05-07T15:04:56.137
fkie_cve-2026-41484 OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-… 2026-05-06T22:16:26.050 2026-05-07T15:04:40.967
fkie_cve-2026-41483 OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In versions 1.1… 2026-05-06T22:16:25.920 2026-05-07T15:04:40.967
fkie_cve-2026-41310 OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and… 2026-05-06T22:16:25.643 2026-05-07T15:04:40.967
fkie_cve-2026-42217 OpenEXR provides the specification and reference implementation of the EXR file format, an image st… 2026-05-07T04:16:34.387 2026-05-07T15:03:51.127
fkie_cve-2026-41142 OpenEXR provides the specification and reference implementation of the EXR file format, an image st… 2026-05-07T04:16:26.020 2026-05-07T15:03:51.127
fkie_cve-2026-41674 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerialize… 2026-05-07T04:16:33.433 2026-05-07T15:02:46.607
fkie_cve-2026-26956 vm2 is an open source vm/sandbox for Node.js. In version 3.10.4, vm2 is vulnerable to full sandbox … 2026-05-04T17:16:22.553 2026-05-07T15:00:46.060
fkie_cve-2026-24781 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox b… 2026-05-04T17:16:21.960 2026-05-07T15:00:46.060
fkie_cve-2026-24120 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 i… 2026-05-04T17:16:21.813 2026-05-07T15:00:46.060
fkie_cve-2026-24118 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox b… 2026-05-04T17:16:21.643 2026-05-07T15:00:46.060
fkie_cve-2025-52613 HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. D… 2026-05-06T15:16:08.247 2026-05-07T14:59:40.533
fkie_cve-2026-40281 Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier, the meta… 2026-05-06T21:16:01.353 2026-05-07T14:58:29.780
fkie_cve-2026-40280 Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default pri… 2026-05-05T20:16:38.633 2026-05-07T14:58:29.780
fkie_cve-2026-39383 Gotenberg is an API-based document conversion tool. In version 8.29.1, an unauthenticated attacker … 2026-05-05T21:16:22.397 2026-05-07T14:58:29.780
fkie_cve-2026-41891 CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture … 2026-05-07T04:16:33.903 2026-05-07T14:57:13.077
fkie_cve-2026-41202 CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture … 2026-05-07T04:16:27.453 2026-05-07T14:57:13.077
ID Severity Description Published Updated
ghsa-9j2p-p9pf-3g9v
8.3 (3.1)
Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote… 2026-05-06T21:31:38Z 2026-05-07T01:05:50Z
ghsa-7mvx-p33h-wv7c
8.3 (3.1)
Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a re… 2026-05-06T21:31:38Z 2026-05-07T01:05:50Z
ghsa-7c63-p383-vgqc
8.3 (3.1)
Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker t… 2026-05-06T21:31:38Z 2026-05-07T01:05:50Z
ghsa-79gj-p962-6w77
3.1 (3.1)
Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a rem… 2026-05-06T21:31:38Z 2026-05-07T01:05:50Z
ghsa-67p6-39p7-h529
9.6 (3.1)
Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to p… 2026-05-06T21:31:38Z 2026-05-07T01:05:50Z
ghsa-4456-27v6-7pqr
6.5 (3.1)
Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obta… 2026-05-06T21:31:38Z 2026-05-07T01:05:50Z
ghsa-2r9r-9xqx-v66p
4.3 (3.1)
Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed… 2026-05-06T21:31:38Z 2026-05-07T01:05:50Z
ghsa-x953-c6cq-wq8x
4.3 (3.1)
Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to pe… 2026-05-06T21:31:38Z 2026-05-07T01:05:49Z
ghsa-vx42-hxj6-6j2g
8.3 (3.1)
Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778… 2026-05-06T21:31:38Z 2026-05-07T01:05:49Z
ghsa-vrrq-h9mv-3xp4
8.8 (3.1)
Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote a… 2026-05-06T21:31:37Z 2026-05-07T01:05:49Z
ghsa-px5w-jr4v-v9h7
8.8 (3.1)
Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacke… 2026-05-06T21:31:37Z 2026-05-07T01:05:49Z
ghsa-p272-qqm2-63g8
7.5 (3.1)
Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker w… 2026-05-06T21:31:37Z 2026-05-07T01:05:49Z
ghsa-jqjf-4h3c-qg3r
8.8 (3.1)
Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to… 2026-05-06T21:31:38Z 2026-05-07T01:05:49Z
ghsa-ffrx-892g-4x38
8.3 (3.1)
Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who… 2026-05-06T21:31:37Z 2026-05-07T01:05:49Z
ghsa-cp6g-2gv8-8vjw
8.8 (3.1)
Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute … 2026-05-06T21:31:38Z 2026-05-07T01:05:49Z
ghsa-c8xm-wwcj-qmc3
8.8 (3.1)
Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute … 2026-05-06T21:31:38Z 2026-05-07T01:05:49Z
ghsa-7p33-hr3q-655j
8.8 (3.1)
Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker… 2026-05-06T21:31:37Z 2026-05-07T01:05:49Z
ghsa-7cmm-jw3f-8q9h
8.8 (3.1)
Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to pote… 2026-05-06T21:31:37Z 2026-05-07T01:05:49Z
ghsa-6gcc-w636-fgv2
5.3 (3.1)
1.9 (4.0)
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_… 2026-02-10T15:30:28Z 2026-05-07T01:05:49Z
ghsa-2cvq-g96p-ggfw
8.8 (3.1)
Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote atta… 2026-05-06T21:31:37Z 2026-05-07T01:05:49Z
ghsa-5h6j-66w2-pcp6
6.5 (3.1)
Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows rem… 2022-05-13T01:38:43Z 2026-05-07T01:02:40Z
ghsa-r33j-c622-r6qp
7.5 (3.1)
Gotenberg has an unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine 2026-05-07T01:00:24Z 2026-05-07T01:00:24Z
ghsa-3cv5-q585-h563
5.3 (3.1)
Goteberg has arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and co… 2026-05-07T00:59:50Z 2026-05-07T00:59:50Z
ghsa-2pmr-289p-44r3
5.3 (3.1)
Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes 2026-05-07T00:57:37Z 2026-05-07T00:57:37Z
ghsa-rm4c-xj6x-49mw
8.2 (3.1)
Gotenberg has a Server-Side Request Forgery (SSRF) Issue 2026-05-07T00:57:03Z 2026-05-07T00:57:03Z
ghsa-7v3r-m9c8-r855
8.2 (3.1)
Gotenberg's ExifTool group-prefix syntax bypasses dangerous-tag blocklist 2026-05-07T00:55:44Z 2026-05-07T00:55:44Z
ghsa-rqgh-gxv4-6657
9.8 (3.1)
Gotenberg has Unauthenticated RCE via ExifTool Metadata Key Injection 2026-05-07T00:55:01Z 2026-05-07T00:55:01Z
ghsa-w37p-236h-pfx3
9.3 (4.0)
Compromise of PyTorch Lightning PyPi Package Versions 2026-05-07T00:52:55Z 2026-05-07T00:52:55Z
ghsa-f6hv-jmp6-3vwv
7.5 (3.1)
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy lea… 2026-05-07T00:46:35Z 2026-05-07T00:46:35Z
ghsa-rgrr-p7gp-5xj7
6.8 (3.1)
Netty Redis Codec Encoder has a CRLF Injection Issue 2026-05-07T00:24:08Z 2026-05-07T00:24:08Z
ID Severity Description Package Published Updated
pysec-2021-880
7.5 (3.1)
Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter ver… bounter 2021-12-17T21:15:00Z 2024-11-21T14:22:41.448775Z
pysec-2017-113
8.8 (3.1)
Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 … capstone 2017-03-16T21:59:00+00:00 2024-11-21T14:22:41.607839+00:00
pysec-2012-28
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick … bitdefender 2012-03-21T10:11:00Z 2024-11-21T14:22:41.328571Z
pysec-2012-27
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.… bitdefender 2012-03-21T10:11:00Z 2024-11-21T14:22:41.276629Z
pysec-2012-26
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.16… bitdefender 2012-03-21T10:11:00Z 2024-11-21T14:22:41.220887Z
pysec-2012-25
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antiv… bitdefender 2012-03-21T10:11:00Z 2024-11-21T14:22:41.165409Z
pysec-2012-24
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat Q… bitdefender 2012-03-21T10:11:00Z 2024-11-21T14:22:41.111226Z
pysec-2012-23
The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424… bitdefender 2012-03-21T10:11:00Z 2024-11-21T14:22:41.056758Z
pysec-2012-22
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure A… bitdefender 2012-03-21T10:11:00Z 2024-11-21T14:22:41.00719Z
pysec-2023-268
7.5 (3.1)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Dolphi… apache-dolphinscheduler 2023-11-24T08:15:00+00:00 2024-11-21T14:22:40.797843+00:00
pysec-2023-267
6.5 (3.1)
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an auth… apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.744438+00:00
pysec-2023-266
6.5 (3.1)
Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker … apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.683792+00:00
pysec-2023-265
4.3 (3.1)
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows… apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.621314+00:00
pysec-2023-264
5.4 (3.1)
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a… apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.559945+00:00
pysec-2023-263
8.8 (3.1)
An improper array index validation vulnerability exists in the stl_fix_normal_directions … admesh 2023-04-03T16:15:00Z 2024-11-21T14:22:40.308634Z
pysec-2022-43070
7.5 (3.1)
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization… apache-iotdb 2022-09-05T10:15:00Z 2024-11-21T14:22:40.90699Z
pysec-2022-43066
9.8 (3.1)
The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor vi… aamiles 2022-06-24T21:15:00Z 2024-11-21T14:22:40.256677Z
pysec-2024-124
4.8 (3.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting… django-cms 2024-11-18T12:15:00Z 2024-11-20T16:23:43.554559Z
pysec-2024-123
6.1 (3.1)
An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerabilit… pyload-ng 2024-11-15T11:15:00+00:00 2024-11-19T22:22:34.280606+00:00
pysec-2024-122
4.4 (3.1)
A path traversal vulnerability exists in the api open_personality_folder endpoint of pari… lollms 2024-10-11T16:15:00+00:00 2024-11-15T20:23:01.816492+00:00
pysec-2024-121
6.5 (3.1)
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from… openc3 2024-10-02T20:15:00+00:00 2024-11-13T20:22:56.434107+00:00
pysec-2024-115
9.8 (3.1)
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community versi… langchain 2024-11-05T16:04:14Z 2024-11-12T19:19:57.535206Z
pysec-2024-120
7.8 (3.1)
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the Call… pyassimp 2024-10-24T21:15:00+00:00 2024-11-05T20:22:53.185968+00:00
pysec-2024-119
7.5 (3.1)
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Ser… chuanhuchatgpt 2024-10-29T13:15:00+00:00 2024-11-04T22:22:08.835024+00:00
pysec-2024-114
9.8 (3.1)
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.… langchain 2024-10-29T13:15:00Z 2024-11-04T19:21:44.923698Z
pysec-2024-118
4.7 (3.1)
A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langc… langchain 2024-06-06T19:15:00+00:00 2024-11-03T20:22:34.854295+00:00
pysec-2024-117
9.8 (3.1)
man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code … dtale 2024-06-06T19:16:00+00:00 2024-11-03T20:22:34.425699+00:00
pysec-2024-116
9.0 (3.1)
A vulnerability in the discussion image upload function of the Lollms application, versio… lollms 2024-10-29T13:15:00+00:00 2024-11-01T21:22:09.060172+00:00
pysec-2024-113
4.3 (3.1)
In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /f… chuanhuchatgpt 2024-10-29T13:15:00+00:00 2024-10-31T19:20:49.353218+00:00
pysec-2024-112
7.5 (3.1)
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 2024062… chuanhuchatgpt 2024-10-29T13:15:00+00:00 2024-10-31T19:20:49.309758+00:00
ID Description Updated
gsd-2024-4136 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.593613Z
gsd-2024-4135 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.607498Z
gsd-2024-4134 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.607699Z
gsd-2024-4133 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.555278Z
gsd-2024-4132 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.603383Z
gsd-2024-4131 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.555982Z
gsd-2024-4130 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.548815Z
gsd-2024-4129 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.593215Z
gsd-2024-4128 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.561160Z
gsd-2024-4127 A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. A… 2024-04-25T05:02:08.589629Z
gsd-2024-4126 A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue… 2024-04-25T05:02:08.564980Z
gsd-2024-4125 A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. This … 2024-04-25T05:02:08.598016Z
gsd-2024-4124 A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Th… 2024-04-25T05:02:08.595964Z
gsd-2024-4123 A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.1… 2024-04-25T05:02:08.605274Z
gsd-2024-4122 A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by th… 2024-04-25T05:02:08.549865Z
gsd-2024-4121 A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14. Affected … 2024-04-25T05:02:08.568351Z
gsd-2024-4120 A vulnerability was found in Tenda W15E 15.11.0.14. It has been rated as critical. This i… 2024-04-25T05:02:08.546405Z
gsd-2024-4119 A vulnerability was found in Tenda W15E 15.11.0.14. It has been declared as critical. Thi… 2024-04-25T05:02:08.559738Z
gsd-2024-4118 A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. T… 2024-04-25T05:02:08.567594Z
gsd-2024-4117 A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected b… 2024-04-25T05:02:08.556268Z
gsd-2024-4116 A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affec… 2024-04-25T05:02:08.560496Z
gsd-2024-4115 A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Af… 2024-04-25T05:02:08.583677Z
gsd-2024-4114 A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.1… 2024-04-25T05:02:08.547916Z
gsd-2024-4113 A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerabi… 2024-04-25T05:02:08.582728Z
gsd-2024-4112 A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affe… 2024-04-25T05:02:08.551093Z
gsd-2024-4111 A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affect… 2024-04-25T05:02:08.607990Z
gsd-2024-21793 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:08.052374Z
gsd-2024-32761 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:07.707336Z
gsd-2024-32049 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:07.770640Z
gsd-2024-33524 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.744149Z
ID Description Published Updated
mal-2026-2804 Malicious code in transcript-viewer-ui-demo (npm) 2026-04-16T10:21:08Z 2026-04-23T20:50:52Z
mal-2026-2803 Malicious code in tailwind-configuration (npm) 2026-04-16T10:19:18Z 2026-04-23T20:50:52Z
mal-2026-2802 Malicious code in synthetics-sdk-node (npm) 2026-04-16T10:19:13Z 2026-04-23T20:50:52Z
mal-2026-2801 Malicious code in sfx-data (npm) 2026-04-16T10:17:01Z 2026-04-23T20:50:52Z
mal-2026-2800 Malicious code in separadordeinfo (npm) 2026-04-16T10:16:50Z 2026-04-23T20:50:52Z
mal-2026-2799 Malicious code in rtxaspnet (npm) 2026-04-16T10:15:51Z 2026-04-23T20:50:52Z
mal-2026-2701 Malicious code in sanitize-url (npm) 2026-04-16T13:51:15Z 2026-04-23T20:50:52Z
mal-2026-2693 Malicious code in vs-supplier-portal-web (npm) 2026-04-15T14:57:24Z 2026-04-23T20:50:52Z
mal-2026-2684 Malicious code in tensorzero-node (npm) 2026-04-15T10:55:56Z 2026-04-23T20:50:52Z
mal-2026-2679 Malicious code in snitz-chief-cloud-config (npm) 2026-04-15T03:12:05Z 2026-04-23T20:50:52Z
mal-2026-2678 Malicious code in snitz-chief-cloud (npm) 2026-04-15T03:12:05Z 2026-04-23T20:50:52Z
mal-2026-2663 Malicious code in tether-wrk-base (npm) 2026-04-14T13:36:19Z 2026-04-23T20:50:52Z
mal-2026-2661 Malicious code in vip-landing (npm) 2026-04-14T11:47:12Z 2026-04-23T20:50:52Z
mal-2026-2660 Malicious code in use-feature-flags-plugin (npm) 2026-04-14T11:47:12Z 2026-04-23T20:50:52Z
mal-2026-2659 Malicious code in ui-utils-udhay-alerts (npm) 2026-04-14T11:47:49Z 2026-04-23T20:50:52Z
mal-2026-2658 Malicious code in tailwindcss-style-typography (npm) 2026-04-14T12:12:36Z 2026-04-23T20:50:52Z
mal-2026-2657 Malicious code in tailwind-typ (npm) 2026-04-14T12:01:40Z 2026-04-23T20:50:52Z
mal-2026-2656 Malicious code in tailwind-stylecss-typography (npm) 2026-04-14T11:52:39Z 2026-04-23T20:50:52Z
mal-2026-2655 Malicious code in tailwind-lines-clamp (npm) 2026-04-14T11:38:14Z 2026-04-23T20:50:52Z
mal-2026-2636 Malicious code in seaport-core-16 (npm) 2026-04-13T06:13:35Z 2026-04-23T20:50:52Z
mal-2026-2629 Malicious code in stacks-editor (npm) 2026-04-14T08:55:57Z 2026-04-23T20:50:52Z
mal-2026-2622 Malicious code in wm-plugin-wm-smart-tip-dont-embed-tooltip (npm) 2026-04-13T15:25:21Z 2026-04-23T20:50:52Z
mal-2026-2621 Malicious code in walmart-internal (npm) 2026-04-13T15:33:47Z 2026-04-23T20:50:52Z
mal-2026-2620 Malicious code in upstartportal (npm) 2026-04-12T10:23:01Z 2026-04-23T20:50:52Z
mal-2026-2619 Malicious code in upstartloans (npm) 2026-04-12T10:03:07Z 2026-04-23T20:50:52Z
mal-2026-2618 Malicious code in upstartdr (npm) 2026-04-12T10:05:56Z 2026-04-23T20:50:52Z
mal-2026-2617 Malicious code in upstartautoretailadmin (npm) 2026-04-12T10:45:47Z 2026-04-23T20:50:52Z
mal-2026-2616 Malicious code in upstartapplicationstatus (npm) 2026-04-12T09:57:46Z 2026-04-23T20:50:52Z
mal-2026-2615 Malicious code in upstartadmindashboard- (npm) 2026-04-12T10:05:00Z 2026-04-23T20:50:52Z
mal-2026-2614 Malicious code in upstart.previewcss (npm) 2026-04-12T09:51:07Z 2026-04-23T20:50:52Z
ID Description Published Updated
ID Description Published Updated
wid-sec-w-2025-1832 VMware Tanzu Spring Framework: Schwachstelle ermöglicht Offenlegung von Informationen 2025-08-13T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-1810 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2025-08-12T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-1718 Red Hat Enterprise Linux (gdk-pixbuf): Schwachstelle ermöglicht Denial of Service 2025-08-04T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-1664 Python: Schwachstelle ermöglicht Denial of Service 2025-07-28T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-1540 Apache Commons Lang: Schwachstelle ermöglicht Denial of Service 2025-07-13T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-1522 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-07-09T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-1470 Python (CPython): Schwachstelle ermöglicht Denial of Service 2025-07-07T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-1460 PHP: Mehrere Schwachstellen 2025-07-03T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-0879 BusyBox: Mehrere Schwachstellen 2025-04-23T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-0635 RabbitMQ: Schwachstelle ermöglicht Cross-Site Scripting 2025-03-25T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-0633 Gitea: Mehrere Schwachstellen 2025-03-25T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2024-3176 Eclipse Jetty: Mehrere Schwachstellen 2024-10-14T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2024-2044 Django: Mehrere Schwachstellen 2024-09-03T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2024-1775 Django: Mehrere Schwachstellen 2024-08-06T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2024-1569 Django: Mehrere Schwachstellen 2024-07-09T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2024-1530 OpenJPEG: Mehrere Schwachstellen ermöglichen Denial of Service 2024-07-04T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2023-2386 Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen 2023-09-18T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2023-2001 AMD Prozessoren: Mehrere Schwachstellen 2023-08-08T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2023-1957 Linux Kernel: Mehrere Schwachstellen 2023-08-03T22:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2023-0183 Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff 2023-01-23T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2026-0222 PyTorch: Schwachstelle ermöglicht Codeausführung 2026-01-26T23:00:00.000+00:00 2026-01-27T23:00:00.000+00:00
wid-sec-w-2026-0219 Vercel Next.js: Mehrere Schwachstellen ermöglichen Denial of Service 2026-01-26T23:00:00.000+00:00 2026-01-27T23:00:00.000+00:00
wid-sec-w-2026-0214 dormakaba Access Manager: Mehrere Schwachstellen 2026-01-25T23:00:00.000+00:00 2026-01-27T23:00:00.000+00:00
wid-sec-w-2025-2740 ffmpeg: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-12-03T23:00:00.000+00:00 2026-01-27T23:00:00.000+00:00
wid-sec-w-2025-2693 CUPS: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-27T23:00:00.000+00:00 2026-01-27T23:00:00.000+00:00
wid-sec-w-2026-0176 Google Chrome/Microsoft Edge: Schwachstelle ermöglicht Codeausführung 2026-01-20T23:00:00.000+00:00 2026-01-25T23:00:00.000+00:00
wid-sec-w-2026-0190 vllm: Mehrere Schwachstellen 2026-01-21T23:00:00.000+00:00 2026-01-22T23:00:00.000+00:00
wid-sec-w-2026-0133 SmarterTools SmarterMail: Mehrere Schwachstellen 2026-01-15T23:00:00.000+00:00 2026-01-22T23:00:00.000+00:00
wid-sec-w-2026-0185 M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service 2026-01-20T23:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
wid-sec-w-2026-0182 Apache Solr: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-01-21T23:00:00.000+00:00
ID Description Published Updated
icsma-25-198-01 Panoramic Corporation Digital Imaging Software 2025-07-17T06:00:00.000000Z 2025-07-17T06:00:00.000000Z
icsa-25-198-01 Leviton AcquiSuite and Energy Monitoring Hub 2025-07-17T06:00:00.000000Z 2025-07-17T06:00:00.000000Z
icsa-24-191-05 Johnson Controls Inc. Software House C●CURE 9000 (Update B) 2024-07-09T06:00:00.000000Z 2025-07-17T06:00:00.000000Z
icsa-25-196-03 LITEON IC48A and IC80A EV Chargers 2025-07-15T06:00:00.000000Z 2025-07-15T06:00:00.000000Z
icsa-25-196-02 ABB RMC-100 2025-07-15T06:00:00.000000Z 2025-07-15T06:00:00.000000Z
icsa-25-191-09 KUNBUS RevPi Webstatus 2025-07-10T06:00:00.000000Z 2025-07-10T06:00:00.000000Z
icsa-25-191-08 Advantech iView 2025-07-10T06:00:00.000000Z 2025-07-10T06:00:00.000000Z
icsa-25-191-07 Delta Electronics DTM Soft 2025-07-10T06:00:00.000000Z 2025-07-10T06:00:00.000000Z
icsa-25-135-19 ECOVACS DEEBOT Vacuum and Base Station (Update A) 2025-05-15T06:00:00.000000Z 2025-07-10T06:00:00.000000Z
icsa-25-121-01 KUNBUS GmbH Revolution Pi (Update A) 2025-05-01T06:00:00.000000Z 2025-07-10T06:00:00.000000Z
icsa-25-105-03 Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX 2025-04-08T00:00:00.000000Z 2025-07-10T00:00:00.000000Z
icsa-25-189-01 Emerson ValveLink Products 2025-07-08T06:00:00.000000Z 2025-07-08T06:00:00.000000Z
icsa-25-203-06 Schneider Electric EcoStruxture IT Data Center Expert 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-203-05 Schneider Electric System Monitor Application 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-203-03 Schneider Electric EcoStruxure 2025-07-08T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-175-04 Schneider Electric EVLink WallBox (Update A) 2025-06-10T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-175-03 Schneider Electric Modicon Controllers (Update A) 2025-06-10T04:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-014-02 Schneider Electric Vijeo Designer and EcoStruxureâ„¢ Machine Expert (Update A) 2024-09-10T00:00:00.000000Z 2025-07-08T04:00:00.000000Z
icsa-25-191-06 Siemens SIPROTEC 5 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-04 Siemens SIMATIC CN 4100 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-03 Siemens TIA Administrator 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-02 Siemens Solid Edge 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-191-01 Siemens SINEC NMS 2025-07-08T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-168-01 Siemens Mendix Studio Pro 2025-06-12T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-24-256-15 Siemens Industrial Products 2024-09-10T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-20-105-08 Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D) 2020-04-14T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-15-335-03 Siemens SIMATIC Communication Processor Vulnerability (Update C) 2015-11-27T00:00:00.000000Z 2025-07-08T00:00:00.000000Z
icsa-25-184-04 Mitsubishi Electric MELSEC iQ-F Series 2025-07-03T06:00:00.000000Z 2025-07-03T06:00:00.000000Z
icsa-25-184-02 Hitachi Energy MicroSCADA X SYS600 2025-07-03T06:00:00.000000Z 2025-07-03T06:00:00.000000Z
va-25-169-01 Versa Networks Versa Director multiple vulnerabilities 2025-07-02T20:57:00Z 2025-07-02T20:57:00Z
ID Description Published Updated
cisco-sa-finesse-ssrf-rfi-um7wt8ew Cisco Finesse Web-Based Management Interface Vulnerabilities 2024-06-05T16:00:00+00:00 2024-06-14T21:44:14+00:00
cisco-sa-finesse-ssrf-rfi-Um7wT8Ew Cisco Finesse Web-Based Management Interface Vulnerabilities 2024-06-05T16:00:00+00:00 2024-06-14T21:44:14+00:00
cisco-sa-esa-sma-wsa-xss-bgg5whod Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Cross-Site Scripting Vulnerabilities 2024-05-15T16:00:00+00:00 2024-06-12T15:37:50+00:00
cisco-sa-esa-sma-wsa-xss-bgG5WHOD Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Cross-Site Scripting Vulnerabilities 2024-05-15T16:00:00+00:00 2024-06-12T15:37:50+00:00
cisco-sa-esa-http-split-glrnnows Cisco Secure Email Gateway HTTP Response Splitting Vulnerability 2024-05-15T16:00:00+00:00 2024-06-12T15:14:33+00:00
cisco-sa-esa-http-split-GLrnnOwS Cisco Secure Email Gateway HTTP Response Splitting Vulnerability 2024-05-15T16:00:00+00:00 2024-06-12T15:14:33+00:00
cisco-sa-webex-june-2024 Cisco Webex Meetings Meeting Information and Metadata Issue June 2024 2024-06-04T21:00:00+00:00 2024-06-11T19:41:36+00:00
cisco-sa-opendns-pulse-dos-dd8l3szq Cisco OpenDNS Pulsing DNS Denial of Service Attack 2024-05-20T16:00:00+00:00 2024-05-23T16:28:32+00:00
cisco-sa-fmc-sqli-wffdnnos Cisco Firepower Management Center Software SQL Injection Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T17:39:28+00:00
cisco-sa-asaftd-ssl-dos-uu7mv5p6 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 2100 Series Appliances SSL/TLS Denial of Service Vulnerability 2023-06-07T16:00:00+00:00 2024-05-22T16:37:00+00:00
cisco-sa-asaftd-ssl-dos-uu7mV5p6 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 2100 Series Appliances SSL/TLS Denial of Service Vulnerability 2023-06-07T16:00:00+00:00 2024-05-22T16:37:00+00:00
cisco-sa-snort3-ips-bypass-ue69kbmd Multiple Cisco Products Snort 3 HTTP Intrusion Prevention System Rule Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-snort3-ips-bypass-uE69KBMd Multiple Cisco Products Snort 3 HTTP Intrusion Prevention System Rule Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-ftd-archive-bypass-z4wqjwcn Cisco Firepower Threat Defense Software Encrypted Archive File Policy Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-ftd-archive-bypass-z4wQjwcN Cisco Firepower Threat Defense Software Encrypted Archive File Policy Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-fmc-object-bypass-fth8tdjq Cisco Firepower Management Center Software Object Group Access Control List Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-asaftd-saml-bypass-kknvxykw Cisco Adaptive Security Appliance and Firepower Threat Defense Software Authorization Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-asaftd-saml-bypass-KkNvXyKW Cisco Adaptive Security Appliance and Firepower Threat Defense Software Authorization Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-asaftd-ogsnsg-aclbyp-3xb8q6jx Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-asaftd-ogsnsg-aclbyp-3XB8q6jX Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability 2024-05-22T16:00:00+00:00 2024-05-22T16:00:00+00:00
cisco-sa-asaftd-dos-njvawoeq Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability 2022-04-27T16:00:00+00:00 2024-05-22T15:57:10+00:00
cisco-sa-asaftd-dos-nJVAwOeq Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability 2022-04-27T16:00:00+00:00 2024-05-22T15:57:10+00:00
cisco-sa-cucm-apidos-pgsdcdnf Multiple Cisco Unified Communications Products Unauthenticated API High CPU Utilization Denial of Service Vulnerability 2023-10-04T16:00:00+00:00 2024-05-17T15:07:50+00:00
cisco-sa-secure-nam-priv-esc-szu2vypz Cisco Secure Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-nso-rwpesc-qrqgnh3f Cisco Crosswork Network Services Orchestrator Vulnerabilities 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-nso-rwpesc-qrQGnh3f Cisco Crosswork Network Services Orchestrator Vulnerabilities 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-nso-ordir-mnm8yqzo Cisco Crosswork Network Services Orchestrator Open Redirect Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-nso-ordir-MNM8YqzO Cisco Crosswork Network Services Orchestrator Open Redirect Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-nso-hcc-priv-esc-owbwcs5d Cisco Crosswork Network Services Orchestrator Privilege Escalation Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
cisco-sa-nso-hcc-priv-esc-OWBWCs5D Cisco Crosswork Network Services Orchestrator Privilege Escalation Vulnerability 2024-05-15T16:00:00+00:00 2024-05-15T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs 2026-04-02T00:00:00.000Z 2026-05-01T01:04:55.000Z
msrc_cve-2026-6357 pip self-update functionality can import newly installed modules after wheel installation 2026-04-02T00:00:00.000Z 2026-05-01T01:04:44.000Z
msrc_cve-2026-41605 Apache Thrift: Swift Compact Protocol integer overflow 2026-04-02T00:00:00.000Z 2026-05-01T01:04:28.000Z
msrc_cve-2026-41607 Apache Thrift: C++ JSON OOB read 2026-04-02T00:00:00.000Z 2026-05-01T01:04:23.000Z
msrc_cve-2025-48431 Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error. 2026-04-02T00:00:00.000Z 2026-05-01T01:04:14.000Z
msrc_cve-2026-41636 Apache Thrift: Node.js skip() recursion 2026-04-02T00:00:00.000Z 2026-05-01T01:04:09.000Z
msrc_cve-2026-41604 Apache Thrift: Swift Range crash in skip() 2026-04-02T00:00:00.000Z 2026-05-01T01:04:03.000Z
msrc_cve-2026-41606 Apache Thrift: c_glib dispatch stack overflow 2026-04-02T00:00:00.000Z 2026-05-01T01:03:58.000Z
msrc_cve-2026-40356 CVE-2026-40356 2026-04-02T00:00:00.000Z 2026-05-01T01:03:54.000Z
msrc_cve-2026-40355 CVE-2026-40355 2026-04-02T00:00:00.000Z 2026-05-01T01:03:46.000Z
msrc_cve-2026-41526 CVE-2026-41526 2026-04-02T00:00:00.000Z 2026-05-01T01:03:38.000Z
msrc_cve-2026-41602 Apache Thrift: Go TFramedTransport uint32 overflow 2026-04-02T00:00:00.000Z 2026-05-01T01:03:27.000Z
msrc_cve-2026-31609 smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() 2026-04-02T00:00:00.000Z 2026-05-01T01:02:29.000Z
msrc_cve-2026-6238 Buffer overread in ns_printrrf with corrupted RDATA field 2026-04-02T00:00:00.000Z 2026-05-01T01:01:23.000Z
msrc_cve-2026-31580 bcache: fix cached_dev.sb_bio use-after-free and crash 2026-04-02T00:00:00.000Z 2026-04-30T14:38:53.000Z
msrc_cve-2026-31477 ksmbd: fix memory leaks and NULL deref in smb2_lock() 2026-04-02T00:00:00.000Z 2026-04-30T14:38:48.000Z
msrc_cve-2026-5392 wolfSSL heap OOB read in PKCS7 SignedData streaming 2026-04-02T00:00:00.000Z 2026-04-30T14:38:10.000Z
msrc_cve-2026-5448 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore 2026-04-02T00:00:00.000Z 2026-04-30T14:38:05.000Z
msrc_cve-2025-1151 GNU Binutils ld xmemdup.c xmemdup memory leak 2025-02-02T00:00:00.000Z 2026-04-30T14:37:10.000Z
msrc_cve-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability 2026-04-14T07:00:00.000Z 2026-04-30T07:00:00.000Z
msrc_cve-2026-24051 OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking 2026-02-02T00:00:00.000Z 2026-04-30T01:55:30.000Z
msrc_cve-2026-6019 BaseCookie.js_output() does not neutralize embedded characters 2026-04-02T00:00:00.000Z 2026-04-30T01:55:25.000Z
msrc_cve-2026-41898 rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer 2026-04-02T00:00:00.000Z 2026-04-30T01:55:17.000Z
msrc_cve-2026-6732 Libxml2: libxml2: denial of service via crafted xsd-validated document 2026-04-02T00:00:00.000Z 2026-04-30T01:54:53.000Z
msrc_cve-2026-2708 Libsoup: libsoup: http request smuggling via duplicate content-length headers 2026-04-02T00:00:00.000Z 2026-04-30T01:54:45.000Z
msrc_cve-2019-1547 ECDSA remote timing attack 2019-09-02T00:00:00.000Z 2026-04-30T01:54:38.000Z
msrc_cve-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path. 2026-04-02T00:00:00.000Z 2026-04-30T01:54:33.000Z
msrc_cve-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL 2026-04-02T00:00:00.000Z 2026-04-30T01:54:25.000Z
msrc_cve-2019-1543 ChaCha20-Poly1305 with long nonces 2019-03-02T00:00:00.000Z 2026-04-30T01:54:24.000Z
msrc_cve-2026-5295 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID 2026-04-02T00:00:00.000Z 2026-04-30T01:54:16.000Z
ID Description Published Updated
ncsc-2025-0002 Kwetsbaarheden verholpen in Moxa's cellulaire routers en netwerkbeveiligingsapparaten 2025-01-06T07:49:21.319255Z 2025-01-06T07:49:21.319255Z
ncsc-2024-0470 Kwetsbaarheden verholpen in Microsoft Windows 2024-12-10T19:32:38.846024Z 2025-01-06T07:30:29.655717Z
ncsc-2025-0001 Kwetsbaarheden verholpen in Ipswitch WhatsUp Gold 2025-01-03T12:01:12.344285Z 2025-01-03T12:01:12.344285Z
ncsc-2024-0500 Kwetsbaarheden verholpen in Foxit PDF Reader en PDF Editor 2024-12-31T09:22:24.145718Z 2024-12-31T09:22:24.145718Z
ncsc-2024-0499 Kwetsbaarheid verholpen in Palo Alto Networks PAN-OS 2024-12-27T13:26:43.003788Z 2024-12-27T13:26:43.003788Z
ncsc-2024-0498 Kwetsbaarheid verholpen in Adobe ColdFusion 2024-12-24T10:17:54.620060Z 2024-12-24T10:17:54.620060Z
ncsc-2024-0497 Kwetsbaarheden verholpen in IBM Cognos Analytics 2024-12-23T11:43:39.921631Z 2024-12-23T11:43:39.921631Z
ncsc-2024-0492 Kwetsbaarheid verholpen in Apache Struts 2024-12-13T10:05:07.992077Z 2024-12-22T18:38:46.211336Z
ncsc-2024-0496 Kwetsbaarheid verholpen in FortiManager 2024-12-19T15:22:59.271730Z 2024-12-19T15:22:59.271730Z
ncsc-2024-0495 Kwetsbaarheden verholpen in Rockwell Automation Power Monitor 1000 2024-12-19T14:54:38.668612Z 2024-12-19T14:54:38.668612Z
ncsc-2024-0494 Kwetsbaarheid verholpen in Fortinet FortiWLM 2024-12-19T14:53:01.724784Z 2024-12-19T14:53:01.724784Z
ncsc-2024-0493 Kwetsbaarheid verholpen in BeyondTrust Privileged Remote Access 2024-12-18T10:42:27.324531Z 2024-12-18T10:42:27.324531Z
ncsc-2024-0491 Kwetsbaarheden verholpen in XWiki Platform 2024-12-13T10:04:20.533908Z 2024-12-13T10:04:20.533908Z
ncsc-2024-0490 Kwetsbaarheden verholpen in GitLab 2024-12-13T10:03:05.321565Z 2024-12-13T10:03:05.321565Z
ncsc-2024-0489 Kwetsbaarheid verholpen in Schneider Electric Modicon 2024-12-13T09:58:33.792150Z 2024-12-13T09:58:33.792150Z
ncsc-2024-0488 Kwetsbaarheden verholpen in macOS 2024-12-12T10:31:34.869451Z 2024-12-12T10:31:34.869451Z
ncsc-2024-0487 Kwetsbaarheden verholpen in Apple iPadOS en iOS 2024-12-12T10:30:17.550009Z 2024-12-12T10:30:17.550009Z
ncsc-2024-0486 Kwetsbaarheden verholpen in Ivanti Cloud Security Appliance 2024-12-11T08:58:00.974296Z 2024-12-11T08:58:00.974296Z
ncsc-2024-0485 Kwetsbaarheid verholpen in Splunk Enterprise 2024-12-11T08:53:56.285002Z 2024-12-11T08:53:56.285002Z
ncsc-2024-0483 Kwetsbaarheden verholpen in Adobe Connect 2024-12-11T08:46:09.788540Z 2024-12-11T08:46:09.788540Z
ncsc-2024-0482 Kwetsbaarheden verholpen in Adobe Acrobat Reader 2024-12-11T08:42:21.663200Z 2024-12-11T08:42:21.663200Z
ncsc-2024-0481 Kwetsbaarheden verholpen in Adobe Illustrator 2024-12-11T08:37:21.228987Z 2024-12-11T08:37:21.228987Z
ncsc-2024-0480 Kwetsbaarheid verholpen in Adobe After Effects 2024-12-11T08:34:49.812349Z 2024-12-11T08:34:49.812349Z
ncsc-2024-0479 Kwetsbaarheden verholpen in Animate 2024-12-11T08:31:02.174506Z 2024-12-11T08:31:02.174506Z
ncsc-2024-0478 Kwetsbaarheden verholpen in Adobe InDesign Desktop 2024-12-11T08:20:20.778758Z 2024-12-11T08:20:20.778758Z
ncsc-2024-0477 Kwetsbaarheid verholpen in Adobe Photoshop 2024-12-11T08:17:46.923581Z 2024-12-11T08:17:46.923581Z
ncsc-2024-0476 Kwetsbaarheid verholpen in Adobe Premiere Pro 2024-12-11T08:12:35.655333Z 2024-12-11T08:12:35.655333Z
ncsc-2024-0475 Kwetsbaarheid verholpen in Adobe Framemaker 2024-12-11T08:06:34.387394Z 2024-12-11T08:06:34.387394Z
ncsc-2024-0474 Kwetsbaarheden verholpen in Drupal Core 2024-12-10T19:35:37.345875Z 2024-12-10T19:35:37.345875Z
ncsc-2024-0473 Kwetsbaarheden verholpen in Siemens producten 2024-12-10T19:34:53.515240Z 2024-12-10T19:34:53.515240Z
ID Description Published Updated
ID Description Published Updated
opensuse-su-2026:10247-1 python311-Django4-4.2.28-1.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10246-1 libsoup-2_4-1-2.74.3-17.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10245-1 libsoup-3_0-0-3.6.6-1.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10244-1 libsignal-protocol-c-devel-2.3.3-2.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10243-1 freerdp2-2.11.7-5.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10242-1 firefox-esr-140.8.0-1.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10241-1 cacti-1.2.30+git231.bca15e70c-1.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:20261-1 Security update for openQA, os-autoinst, openQA-devel-container 2026-02-23T19:35:27Z 2026-02-23T19:35:27Z
opensuse-su-2026:20260-1 Security update for mosquitto 2026-02-23T18:17:43Z 2026-02-23T18:17:43Z
opensuse-su-2026:10240-1 weblate-5.16-1.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10239-1 warewulf4-4.6.5-2.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10238-1 python311-PyPDF2-2.11.1-4.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10237-1 libopenssl-3-devel-3.5.3-2.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10236-1 heroic-games-launcher-2.20.0-1.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10235-1 cosign-3.0.5-1.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:20258-1 Security update for chromium 2026-02-21T02:15:40Z 2026-02-21T02:15:40Z
opensuse-su-2026:10234-1 chromedriver-145.0.7632.109-1.1 on GA media 2026-02-21T00:00:00Z 2026-02-21T00:00:00Z
opensuse-su-2026:20266-1 Security update for postgresql15 2026-02-20T16:18:08Z 2026-02-20T16:18:08Z
opensuse-su-2026:20265-1 Security update for postgresql14 2026-02-20T16:14:27Z 2026-02-20T16:14:27Z
opensuse-su-2026:20262-1 Security update for docker-stable 2026-02-20T15:40:19Z 2026-02-20T15:40:19Z
opensuse-su-2026:10233-1 kyverno-1.17.1-1.1 on GA media 2026-02-20T00:00:00Z 2026-02-20T00:00:00Z
opensuse-su-2026:10232-1 cosign-3.0.4-2.1 on GA media 2026-02-20T00:00:00Z 2026-02-20T00:00:00Z
opensuse-su-2026:10231-1 busybox-1.37.0-9.1 on GA media 2026-02-20T00:00:00Z 2026-02-20T00:00:00Z
opensuse-su-2026:20257-1 Security update for python-Authlib 2026-02-19T13:21:50Z 2026-02-19T13:21:50Z
opensuse-su-2026:20253-1 Security update for MozillaFirefox 2026-02-19T11:09:58Z 2026-02-19T11:09:58Z
opensuse-su-2026:20254-1 Security update for python313 2026-02-19T10:31:04Z 2026-02-19T10:31:04Z
opensuse-su-2026:20248-1 Security update for chromium 2026-02-19T02:43:57Z 2026-02-19T02:43:57Z
opensuse-su-2026:10230-1 vexctl-0.4.1+git78.f951e3a-1.1 on GA media 2026-02-19T00:00:00Z 2026-02-19T00:00:00Z
opensuse-su-2026:10229-1 ucode-intel-20260210-1.1 on GA media 2026-02-19T00:00:00Z 2026-02-19T00:00:00Z
opensuse-su-2026:10228-1 syft-1.42.1-1.1 on GA media 2026-02-19T00:00:00Z 2026-02-19T00:00:00Z
ID Description Published Updated
ID Description Published Updated
rhsa-2026:1038 Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 2026-01-22T18:00:37+00:00 2026-05-08T12:32:05+00:00
rhsa-2026:0981 Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 2026-01-22T10:00:40+00:00 2026-05-08T12:31:28+00:00
rhsa-2026:0990 Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 2026-01-22T11:34:41+00:00 2026-05-08T12:31:27+00:00
rhsa-2026:0923 Red Hat Security Advisory: golang security update 2026-01-21T12:11:33+00:00 2026-05-08T12:31:25+00:00
rhsa-2026:0922 Red Hat Security Advisory: golang security update 2026-01-21T09:50:39+00:00 2026-05-08T12:31:23+00:00
rhsa-2026:0921 Red Hat Security Advisory: go-toolset:rhel8 security update 2026-01-21T10:01:30+00:00 2026-05-08T12:31:21+00:00
rhsa-2011:0910 Red Hat Security Advisory: ruby security update 2011-06-28T17:30:00+00:00 2026-05-08T10:43:33+00:00
rhsa-2011:0909 Red Hat Security Advisory: ruby security update 2011-06-28T17:27:00+00:00 2026-05-08T10:43:32+00:00
rhsa-2011:0908 Red Hat Security Advisory: ruby security update 2011-06-28T17:21:00+00:00 2026-05-08T10:43:31+00:00
rhsa-2026:9699 Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.2 security update 2026-04-22T12:35:53+00:00 2026-05-08T10:09:36+00:00
rhsa-2026:9698 Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.3 security update 2026-04-22T12:29:18+00:00 2026-05-08T10:09:36+00:00
rhsa-2026:9697 Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.5 security update 2026-04-22T12:28:10+00:00 2026-05-08T10:09:36+00:00
rhsa-2026:13938 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-05-06T08:55:25+00:00 2026-05-08T09:04:17+00:00
rhsa-2026:8501 Red Hat Security Advisory: Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image 2026-04-16T15:10:13+00:00 2026-05-08T09:04:13+00:00
rhsa-2026:8500 Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-frontend-rhel9 container image 2026-04-16T15:10:10+00:00 2026-05-08T09:04:13+00:00
rhsa-2026:6292 Red Hat Security Advisory: General availability of the satellite/iop-insights-engine-rhel9 container image 2026-03-31T16:56:51+00:00 2026-05-08T09:03:59+00:00
rhsa-2026:6287 Red Hat Security Advisory: General availability of the satellite/iop-advisor-frontend-rhel9 container image 2026-03-31T16:45:05+00:00 2026-05-08T09:03:58+00:00
rhsa-2026:6170 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.1 2026-03-30T12:14:24+00:00 2026-05-08T09:03:56+00:00
rhsa-2026:6166 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.1 2026-03-30T10:40:40+00:00 2026-05-08T09:03:55+00:00
rhsa-2026:5459 Red Hat Security Advisory: RHTAS 1.3.3 - Red Hat Trusted Artifact Signer Release 2026-03-23T16:21:50+00:00 2026-05-08T09:03:49+00:00
rhsa-2026:4531 Red Hat Security Advisory: runc security update 2026-03-12T20:57:13+00:00 2026-05-08T09:03:34+00:00
rhsa-2026:4271 Red Hat Security Advisory: RHTAS 1.3.2 - Tech Preview Release of Model Transparency 2026-03-11T09:02:58+00:00 2026-05-08T09:03:27+00:00
rhsa-2026:3825 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3 2026-03-05T07:08:51+00:00 2026-05-08T09:03:06+00:00
rhsa-2026:3723 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 2026-03-04T08:59:26+00:00 2026-05-08T09:03:01+00:00
rhsa-2026:3718 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 2026-03-04T07:52:57+00:00 2026-05-08T09:03:01+00:00
rhsa-2026:3712 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4 2026-03-04T07:12:04+00:00 2026-05-08T09:03:00+00:00
rhsa-2026:3710 Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3 2026-03-04T06:00:07+00:00 2026-05-08T09:03:00+00:00
rhsa-2026:3462 Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (ROCm) 2026-02-27T14:55:49+00:00 2026-05-08T09:02:55+00:00
rhsa-2026:3406 Red Hat Security Advisory: New container image: rhceph-9.0 2026-02-26T07:14:51+00:00 2026-05-08T09:02:54+00:00
rhsa-2026:3461 Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA) 2026-02-27T14:54:46+00:00 2026-05-08T09:02:53+00:00
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ssa-456933 SSA-456933: Multiple Vulnerabilities in SIMATIC PCS neo before V4.1 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-363107 SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode 2022-05-10T00:00:00Z 2023-11-14T00:00:00Z
ssa-268517 SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-197270 SSA-197270: Information Disclosure Vulnerability in Siemens OPC UA Modeling Editor (SiOME) 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-150063 SSA-150063: Multiple Vulnerabilities in SINEC PNI before V2.0 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-137900 SSA-137900: Multiple Vulnerabilities in COMOS 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-099606 SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-084182 SSA-084182: Privilege Escalation Vulnerability in Mendix Runtime 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-843070 SSA-843070: Multiple Vulnerabilities in SCALANCE W1750D 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-829656 SSA-829656: Stack Overflow Vulnerability in Xpedition Layout Browser 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-784849 SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-770890 SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-594373 SSA-594373: Cross-Site-Scripting (XSS) Vulnerability in SINEMA Server V14 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-524778 SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-516174 SSA-516174: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D 2023-05-09T00:00:00Z 2023-10-10T00:00:00Z
ssa-386812 SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-295483 SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-285795 SSA-285795: Denial of Service in OPC-UA in Industrial Products 2022-05-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-250085 SSA-250085: Multiple Vulnerabilities in SINEC NMS and SINEMA Server 2022-03-08T00:00:00Z 2023-10-10T00:00:00Z
ssa-134651 SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-646240 SSA-646240: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console 2023-09-14T00:00:00Z 2023-09-14T00:00:00Z
ssa-357182 SSA-357182: Local Privilege Escalation Vulnerability in Spectrum Power 7 2023-09-14T00:00:00Z 2023-09-14T00:00:00Z
ssa-957369 SSA-957369: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family 2023-09-12T00:00:00Z 2023-09-12T00:00:00Z
ssa-764801 SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation 2023-07-11T00:00:00Z 2023-09-12T00:00:00Z
ssa-587547 SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive 2022-11-08T00:00:00Z 2023-09-12T00:00:00Z
ssa-478960 SSA-478960: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers 2022-11-08T00:00:00Z 2023-09-12T00:00:00Z
ssa-450613 SSA-450613: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family 2023-02-14T00:00:00Z 2023-09-12T00:00:00Z
ssa-382653 SSA-382653: Multiple Denial of Service Vulnerabilities in Industrial Products 2022-12-13T00:00:00Z 2023-09-12T00:00:00Z
ssa-278349 SSA-278349: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go 2023-09-12T00:00:00Z 2023-09-12T00:00:00Z
ssa-190839 SSA-190839: X_T File Parsing Vulnerabilities in Parasolid 2023-09-12T00:00:00Z 2023-09-12T00:00:00Z
ID Description Published Updated
suse-su-2026:21117-1 Security update for avahi 2026-04-14T08:31:12Z 2026-04-14T08:31:12Z
suse-su-2026:21116-1 Security update for python-cryptography 2026-04-14T08:30:04Z 2026-04-14T08:30:04Z
suse-su-2026:21115-1 Security update for ignition 2026-04-14T08:29:25Z 2026-04-14T08:29:25Z
suse-su-2026:21127-1 Security update for avahi 2026-04-14T08:01:54Z 2026-04-14T08:01:54Z
suse-su-2026:21128-1 Security update for ignition 2026-04-14T08:01:00Z 2026-04-14T08:01:00Z
suse-su-2026:21126-1 Security update for python-cryptography 2026-04-14T07:57:50Z 2026-04-14T07:57:50Z
suse-su-2026:21124-1 Security update for vim 2026-04-14T07:55:35Z 2026-04-14T07:55:35Z
suse-su-2026:1305-1 Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) 2026-04-13T18:34:02Z 2026-04-13T18:34:02Z
suse-su-2026:21123-1 Security update for the Linux Kernel 2026-04-13T18:28:29Z 2026-04-13T18:28:29Z
suse-su-2026:21114-1 Security update for the Linux Kernel 2026-04-13T17:04:49Z 2026-04-13T17:04:49Z
suse-su-2026:21122-1 Security update for kernel-livepatch-MICRO-6-0_Update_18 2026-04-13T16:42:46Z 2026-04-13T16:42:46Z
suse-su-2026:21120-1 Security update for kernel-livepatch-MICRO-6-0_Update_18 2026-04-13T16:42:46Z 2026-04-13T16:42:46Z
suse-su-2026:1304-1 Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5) 2026-04-13T16:04:42Z 2026-04-13T16:04:42Z
suse-su-2026:1303-1 Security update for tigervnc 2026-04-13T16:02:59Z 2026-04-13T16:02:59Z
suse-su-2026:1302-1 Security update for tigervnc 2026-04-13T16:02:16Z 2026-04-13T16:02:16Z
suse-su-2026:1301-1 Security update for tigervnc 2026-04-13T16:01:23Z 2026-04-13T16:01:23Z
suse-su-2026:1300-1 Security update for GraphicsMagick 2026-04-13T15:58:01Z 2026-04-13T15:58:01Z
suse-su-2026:1299-1 Security update for nodejs24 2026-04-13T15:54:45Z 2026-04-13T15:54:45Z
suse-su-2026:21186-1 Security update for openssl-3 2026-04-13T15:48:01Z 2026-04-13T15:48:01Z
suse-su-2026:21107-1 Security update for openssl-3 2026-04-13T15:48:01Z 2026-04-13T15:48:01Z
suse-su-2026:1298-1 Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) 2026-04-13T15:04:44Z 2026-04-13T15:04:44Z
suse-su-2026:21184-1 Security update for cockpit 2026-04-13T14:11:34Z 2026-04-13T14:11:34Z
suse-su-2026:21106-1 Security update for cockpit 2026-04-13T14:11:34Z 2026-04-13T14:11:34Z
suse-su-2026:1297-1 Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) 2026-04-13T12:42:14Z 2026-04-13T12:42:14Z
suse-su-2026:1296-1 Security update for python39 2026-04-13T12:32:48Z 2026-04-13T12:32:48Z
suse-su-2026:21180-1 Security update for webkit2gtk3 2026-04-13T12:16:05Z 2026-04-13T12:16:05Z
suse-su-2026:21181-1 Security update for nodejs24 2026-04-13T10:59:52Z 2026-04-13T10:59:52Z
suse-su-2026:21178-1 Security update for python313 2026-04-13T09:49:38Z 2026-04-13T09:49:38Z
suse-su-2026:21104-1 Security update for python313 2026-04-13T09:49:38Z 2026-04-13T09:49:38Z
suse-su-2026:1294-1 Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5) 2026-04-13T09:04:33Z 2026-04-13T09:04:33Z
ID Description Published Updated
alsa-2025:14999 Moderate: resource-agents security update 2025-09-02T00:00:00Z 2026-01-05T21:07:54Z
alsa-2025:19434 Moderate: xorg-x11-server security update 2025-11-03T00:00:00Z 2026-01-05T21:05:53Z
alsa-2025:23062 Moderate: ruby:3.3 security update 2025-12-10T00:00:00Z 2026-01-05T20:45:40Z
alsa-2025:23063 Moderate: ruby:3.3 security update 2025-12-10T00:00:00Z 2026-01-05T20:38:49Z
alsa-2025:23141 Moderate: ruby security update 2025-12-11T00:00:00Z 2026-01-05T20:34:29Z
alsa-2025:23241 Important: kernel security update 2025-12-16T00:00:00Z 2026-01-05T20:29:24Z
alsa-2025:23279 Important: kernel security update 2025-12-16T00:00:00Z 2026-01-05T20:25:38Z
alsa-2025:23919 Important: httpd security update 2025-12-22T00:00:00Z 2026-01-05T20:20:59Z
alsa-2026:0052 Moderate: gcc-toolset-14-binutils security update 2026-01-05T00:00:00Z 2026-01-05T20:18:34Z
alsa-2026:0026 Important: thunderbird security update 2026-01-05T00:00:00Z 2026-01-05T10:18:14Z
alsa-2026:0025 Important: thunderbird security update 2026-01-05T00:00:00Z 2026-01-05T10:10:00Z
alsa-2026:0002 Moderate: tar security update 2026-01-05T00:00:00Z 2026-01-05T09:20:37Z
alsa-2025:23543 Important: container-tools:rhel8 security update 2025-12-17T00:00:00Z 2025-12-24T09:25:49Z
alsa-2025:23856 Important: thunderbird security update 2025-12-22T00:00:00Z 2025-12-23T16:45:01Z
alsa-2025:23948 Moderate: grafana security update 2025-12-22T00:00:00Z 2025-12-23T13:42:03Z
alsa-2025:23664 Important: opentelemetry-collector security update 2025-12-18T00:00:00Z 2025-12-23T13:09:37Z
alsa-2025:23729 Important: opentelemetry-collector security update 2025-12-21T00:00:00Z 2025-12-23T13:07:45Z
alsa-2025:23932 Important: httpd security update 2025-12-22T00:00:00Z 2025-12-23T06:01:50Z
alsa-2025:23940 Moderate: python3.12 security update 2025-12-22T00:00:00Z 2025-12-23T05:59:49Z
alsa-2025:23382 Moderate: binutils security update 2025-12-16T00:00:00Z 2025-12-22T14:14:14Z
alsa-2025:23383 Moderate: curl security update 2025-12-16T00:00:00Z 2025-12-22T14:12:06Z
alsa-2025:23530 Important: python39:3.9 security update 2025-12-17T00:00:00Z 2025-12-22T14:10:23Z
alsa-2025:23663 Important: webkit2gtk3 security update 2025-12-18T00:00:00Z 2025-12-22T14:04:48Z
alsa-2025:23732 Important: httpd:2.4 security update 2025-12-22T00:00:00Z 2025-12-22T14:02:23Z
alsa-2025:23201 Important: keylime security update 2025-12-15T00:00:00Z 2025-12-22T14:00:47Z
alsa-2025:23294 Moderate: skopeo security update 2025-12-16T00:00:00Z 2025-12-22T13:59:22Z
alsa-2025:23306 Moderate: binutils security update 2025-12-16T00:00:00Z 2025-12-22T13:58:22Z
alsa-2025:23295 Moderate: podman security update 2025-12-16T00:00:00Z 2025-12-22T13:57:14Z
alsa-2025:23309 Moderate: php:8.3 security update 2025-12-16T00:00:00Z 2025-12-22T13:55:21Z
alsa-2025:23323 Moderate: python3.12 security update 2025-12-16T00:00:00Z 2025-12-22T13:52:25Z
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
osv-2025-149 UNKNOWN READ in processClientServerHello 2025-02-23T00:00:50.236281Z 2025-02-23T00:00:50.236700Z
osv-2025-147 UNKNOWN WRITE in ndpi_free_flow_data 2025-02-22T00:18:07.814416Z 2025-02-22T00:18:07.814726Z
osv-2025-145 Heap-buffer-overflow in ___interceptor_strncat 2025-02-22T00:14:15.620085Z 2025-02-22T00:14:15.620535Z
osv-2023-51 Heap-use-after-free in ZSTD_freeDDict 2023-02-05T13:00:54.245269Z 2025-02-19T14:14:00.172684Z
osv-2022-1242 Heap-buffer-overflow in ZSTD_createDDict 2022-12-05T13:00:52.919257Z 2025-02-19T14:09:48.094157Z
osv-2023-1329 Stack-buffer-overflow in decNaNs 2023-12-18T00:13:42.545765Z 2025-02-17T14:14:20.492923Z
osv-2025-127 Object-size in unpack_dsd_samples 2025-02-15T00:16:56.314634Z 2025-02-15T00:16:56.315060Z
osv-2025-124 Use-of-uninitialized-value in get_word 2025-02-15T00:09:23.967012Z 2025-02-15T00:09:23.967345Z
osv-2025-114 Index-out-of-bounds in ada_fuzz_header.h 2025-02-14T00:11:24.754671Z 2025-02-14T00:11:24.755045Z
osv-2025-111 Stack-buffer-overflow in absl::debugging_internal::ParseLocalNameSuffix 2025-02-13T00:15:36.403252Z 2025-02-13T00:15:36.403744Z
osv-2024-678 Use-of-uninitialized-value in FLAC__replaygain_synthesis__apply_gain 2024-07-25T00:09:08.389428Z 2025-02-11T14:21:01.793416Z
osv-2022-1292 Heap-buffer-overflow in LibRaw::phase_one_correct 2025-02-10T00:13:32.671074Z 2025-02-10T00:13:32.671487Z
osv-2025-108 Use-of-uninitialized-value in decimate_dsd_run 2025-02-10T00:12:35.140061Z 2025-02-10T00:12:35.140400Z
osv-2025-107 Use-of-uninitialized-value in get_words_lossless 2025-02-10T00:06:27.370789Z 2025-02-10T00:06:27.371196Z
osv-2025-105 Heap-use-after-free in unpack_dsd_samples 2025-02-10T00:00:59.046535Z 2025-02-10T00:00:59.047010Z
osv-2022-1141 Heap-buffer-overflow in LibRaw::phase_one_correct 2022-11-06T00:00:12.813664Z 2025-02-08T14:21:03.512078Z
osv-2025-68 UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame 2025-01-28T00:00:46.845996Z 2025-02-05T14:25:02.989469Z
osv-2025-88 Segv on unknown address in ___interceptor_free 2025-02-02T00:16:16.201801Z 2025-02-02T00:16:16.202130Z
osv-2025-85 Segv on unknown address in ndpi_free_flow_data 2025-02-02T00:13:42.076001Z 2025-02-02T00:13:42.076373Z
osv-2025-84 Segv on unknown address in Flow::processExtraDissectedInformation 2025-02-02T00:12:09.563391Z 2025-02-02T00:12:09.563778Z
osv-2025-81 Segv on unknown address in ndpi_serialize_string_string 2025-02-02T00:02:52.946833Z 2025-02-02T00:02:52.947083Z
osv-2025-80 Segv on unknown address in ndpi_snprintf 2025-02-02T00:00:58.798346Z 2025-02-02T00:00:58.798951Z
osv-2024-847 Null-dereference READ in _libssh2_packet_add 2024-08-16T00:04:07.189033Z 2025-02-01T14:27:03.602163Z
osv-2022-24 Null-dereference READ in session_startup 2022-01-09T00:01:35.903934Z 2025-02-01T14:16:58.476563Z
osv-2024-1124 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac 2024-09-21T00:14:26.784483Z 2025-01-31T14:23:52.455197Z
osv-2025-74 Stack-buffer-overflow in xmlValidateElementContent 2025-01-29T00:13:55.386256Z 2025-01-29T00:13:55.386629Z
osv-2025-63 Stack-buffer-underflow in gs_type1_interpret 2025-01-27T00:10:00.833706Z 2025-01-27T00:10:00.834151Z
osv-2025-61 Heap-buffer-overflow in oatpp::json::Utils::escapeString 2025-01-27T00:00:09.905879Z 2025-01-27T00:00:09.906561Z
osv-2024-1424 Heap-buffer-overflow in extract_candidate 2025-01-25T00:17:13.787335Z 2025-01-25T14:25:05.188301Z
osv-2024-1423 Security exception in java.base/java.util.Arrays.copyOfRange 2025-01-25T00:03:24.362190Z 2025-01-25T00:03:24.362579Z
ID Description Published Updated
rustsec-2023-0042 Ouroboros is Unsound 2023-06-11T12:00:00Z 2023-07-08T12:30:19Z
rustsec-2021-0145 Potential unaligned read 2021-07-04T12:00:00Z 2023-07-08T12:30:19Z
rustsec-2020-0078 `net2` invalidly assumes the memory layout of std::net::SocketAddr 2020-11-07T12:00:00Z 2023-07-08T12:30:19Z
rustsec-2023-0043 ftp is unmaintained, use suppaftp instead 2023-02-20T12:00:00Z 2023-06-14T13:23:36Z
rustsec-2023-0041 Remote Attackers can cause Denial-of-Service (packet loops) with crafted DNS packets 2023-06-01T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0035 Adverserial use of `make_bitflags!` macro can cause undefined behavior 2023-04-17T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0032 Unsound FFI: Wrong API usage causes write past allocated area 2023-03-22T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0031 Initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers 2023-03-31T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0030 `Versionize::deserialize` implementation for `FamStructWrapper<T>` is lacking bound checks, potentially leading to out of bounds memory accesses 2023-03-24T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0027 TLS certificate common name validation bypass 2023-03-24T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0024 `openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference 2023-03-24T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0023 `openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read 2023-03-24T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0022 `openssl` `X509NameBuilder::build` returned object is not thread safe 2023-03-24T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0017 `maligned::align_first` causes incorrect deallocation 2023-03-04T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0016 Possible out-of-bounds read in release mode 2023-02-20T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0015 Ascii allows out-of-bounds array indexing in safe code 2023-02-25T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0014 Miscompilation in cortex-m-rt 0.7.1 and 0.7.2 2023-02-13T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0013 `NULL` dereference during PKCS7 data verification 2023-02-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0012 `NULL` dereference validating DSA public key 2023-02-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0011 Invalid pointer dereference in `d2i_PKCS7` functions 2023-02-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0010 Double free after calling `PEM_read_bio_ex` 2023-02-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0009 Use-after-free following `BIO_new_NDEF` 2023-02-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0008 X.509 Name Constraints Read Buffer Overflow 2023-02-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0007 Timing Oracle in RSA Decryption 2023-02-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0006 X.400 address type confusion in X.509 `GeneralName` 2023-02-07T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2023-0005 `tokio::io::ReadHalf<T>::unsplit` is Unsound 2023-01-11T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2022-0092 `rmp-serde` `Raw` and `RawRef` unsound 2022-04-13T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2022-0090 `libsqlite3-sys` via C SQLite CVE-2022-35737 2022-08-03T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2022-0082 Improper validation of Windows paths could lead to directory traversal attack 2022-01-14T12:00:00Z 2023-06-13T13:10:24Z
rustsec-2022-0079 ELF header parsing library doesn't check for valid offset 2022-10-31T12:00:00Z 2023-06-13T13:10:24Z
ID Description Published Updated
bit-python-2026-6100 Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure 2026-04-16T23:50:36.926Z 2026-04-21T12:33:30.555Z
bit-mlflow-2026-33866 Authorization Bypass in MLflow AJAX Endpoint 2026-04-21T12:08:47.512Z 2026-04-21T12:33:30.555Z
bit-mlflow-2026-33865 Stored XSS via unsafe YAML parsing in MLflow 2026-04-21T12:08:45.926Z 2026-04-21T12:33:30.555Z
bit-mlflow-2026-0596 Command Injection in mlflow/mlflow 2026-04-16T23:45:08.946Z 2026-04-21T12:33:30.555Z
bit-libpython-2026-6100 Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure 2026-04-16T23:43:14.482Z 2026-04-21T12:33:30.555Z
bit-grafana-2026-21727 Grafana Correlations: Cross-Tenant Data Disclosure and Permanent Deletion via Legacy org_id=0 Record 2026-04-21T12:04:43.119Z 2026-04-21T12:33:30.555Z
bit-golang-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 2026-04-13T05:43:50.259Z 2026-04-21T12:33:30.555Z
bit-airflow-2026-32690 Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1 2026-04-21T12:01:40.542Z 2026-04-21T12:33:30.555Z
bit-airflow-2026-32228 Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access to 2026-04-21T12:01:39.199Z 2026-04-21T12:33:30.555Z
bit-airflow-2026-30912 Apache Airflow: Exposing stack trace in case of constraint error 2026-04-21T12:01:36.297Z 2026-04-21T12:33:30.555Z
bit-airflow-2026-30898 Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf 2026-04-21T12:01:33.318Z 2026-04-21T12:33:30.555Z
bit-airflow-2026-31987 Apache Airflow: JWT token appearing in logs 2026-04-18T08:37:43.676Z 2026-04-19T09:10:55.500Z
bit-sqlite-2025-70873 2026-04-18T08:50:04.362Z 2026-04-18T09:10:03.541Z
bit-prometheus-2026-40179 Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer 2026-04-18T08:47:53.206Z 2026-04-18T09:10:03.541Z
bit-pillow-2026-40192 Pillow is vulnerable to a FITS GZIP decompression bomb 2026-04-18T08:46:42.614Z 2026-04-18T09:10:03.541Z
bit-grafana-2025-12141 Grafana Alerting Editors can edit destination of webhooks they did not create 2026-04-18T08:40:23.670Z 2026-04-18T09:10:03.541Z
bit-golang-2026-27144 Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile 2026-04-18T08:42:34.054Z 2026-04-18T09:10:03.541Z
bit-golang-2026-27143 Missing bound checks can lead to memory corruption in safe Go in cmd/compile 2026-04-18T08:42:32.381Z 2026-04-18T09:10:03.541Z
bit-composer-2026-40261 Composer has Command Injection via Malicious Perforce Reference 2026-04-18T08:36:18.290Z 2026-04-18T09:10:03.541Z
bit-composer-2026-40176 Composer is vulnerable to Command Injection via Malicious Perforce Repository 2026-04-18T08:36:16.775Z 2026-04-18T09:10:03.541Z
bit-airflow-2026-25219 Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access 2026-04-18T08:37:36.342Z 2026-04-18T09:10:03.541Z
bit-airflow-2025-54550 Apache Airflow: RCE by race condition in example_xcom dag 2026-04-18T08:37:17.629Z 2026-04-18T09:10:03.541Z
bit-activemq-2026-34197 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans 2026-04-09T08:36:52.749Z 2026-04-18T09:10:03.541Z
bit-apisix-2026-31908 Apache APISIX: forward auth plugin allows header injection 2026-04-16T23:36:03.898Z 2026-04-17T09:12:55.244Z
bit-sqlite-2025-6965 Integer Truncation on SQLite 2025-07-16T18:03:02.187Z 2026-04-17T00:10:47.507Z
bit-python-2026-5713 Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target 2026-04-16T23:50:35.275Z 2026-04-17T00:10:47.507Z
bit-python-2026-3446 Base64 decoding stops at first padded quad by default 2026-04-16T23:50:30.240Z 2026-04-17T00:10:47.507Z
bit-node-2022-3786 X.509 Email Address Variable Length Buffer Overflow 2024-03-06T11:02:40.764Z 2026-04-17T00:10:47.507Z
bit-node-2022-3602 X.509 Email Address 4-byte Buffer Overflow 2024-03-06T11:02:52.601Z 2026-04-17T00:10:47.507Z
bit-node-2022-0778 Infinite loop in BN_mod_sqrt() reachable when parsing certificates 2024-03-06T11:04:37.785Z 2026-04-17T00:10:47.507Z
ID Description Published Updated
cleanstart-2026-yc48827 Within HostnameError 2026-01-30T15:56:24.532632Z 2026-01-29T18:58:54Z
cleanstart-2026-yb44027 Moby is an open-source project created by Docker for software containerization 2026-01-30T17:04:26.396860Z 2026-01-29T18:58:54Z
cleanstart-2026-xz45798 Within HostnameError 2026-01-30T14:05:20.961893Z 2026-01-29T18:58:54Z
cleanstart-2026-xx70537 Cancelling a query (e 2026-01-30T15:32:24.053481Z 2026-01-29T18:58:54Z
cleanstart-2026-xs24366 Cancelling a query (e 2026-01-30T15:00:52.862887Z 2026-01-29T18:58:54Z
cleanstart-2026-xr85161 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate 2026-01-30T16:02:54.934169Z 2026-01-29T18:58:54Z
cleanstart-2026-xr17407 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption 2026-01-30T16:11:25.270681Z 2026-01-29T18:58:54Z
cleanstart-2026-xp58111 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11 2026-01-30T16:18:55.480183Z 2026-01-29T18:58:54Z
cleanstart-2026-xp03839 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11 2026-01-30T16:14:55.099611Z 2026-01-29T18:58:54Z
cleanstart-2026-xo66167 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T14:49:52.662006Z 2026-01-29T18:58:54Z
cleanstart-2026-xo49545 Within HostnameError 2026-01-30T16:21:25.500719Z 2026-01-29T18:58:54Z
cleanstart-2026-xl45869 Moby is an open-source project created by Docker for software containerization 2026-01-30T16:57:56.432971Z 2026-01-29T18:58:54Z
cleanstart-2026-xi02879 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11 2026-01-30T16:18:55.578686Z 2026-01-29T18:58:54Z
cleanstart-2026-xd92996 Cancelling a query (e 2026-01-30T15:46:24.650971Z 2026-01-29T18:58:54Z
cleanstart-2026-xb70091 Within HostnameError 2026-01-30T14:03:50.560679Z 2026-01-29T18:58:54Z
cleanstart-2026-xb16901 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers 2026-01-30T17:13:56.781902Z 2026-01-29T18:58:54Z
cleanstart-2026-wq07901 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process 2026-01-30T16:01:54.911193Z 2026-01-29T18:58:54Z
cleanstart-2026-wp20592 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption 2026-01-30T16:05:24.814830Z 2026-01-29T18:58:54Z
cleanstart-2026-wi75198 vulnerability has been identified in Node 2026-01-30T17:34:27.754206Z 2026-01-29T18:58:54Z
cleanstart-2026-wi17406 Redis is an open source, in-memory database that persists on disk 2026-01-30T17:35:28.375848Z 2026-01-29T18:58:54Z
cleanstart-2026-wg18689 attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests 2026-01-30T16:29:25.690410Z 2026-01-29T18:58:54Z
cleanstart-2026-we92783 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption 2026-01-30T16:05:24.753007Z 2026-01-29T18:58:54Z
cleanstart-2026-wa03785 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption 2026-01-30T16:05:24.799763Z 2026-01-29T18:58:54Z
cleanstart-2026-vv68546 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate 2026-01-30T16:35:55.883570Z 2026-01-29T18:58:54Z
cleanstart-2026-vs64679 ParseAddress function constructs domain-literal address components through repeated string concatenation 2026-01-30T16:35:25.680295Z 2026-01-29T18:58:54Z
cleanstart-2026-vl83369 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-01-30T15:03:53.758258Z 2026-01-29T18:58:54Z
cleanstart-2026-vf66781 Within HostnameError 2026-01-30T14:57:22.763452Z 2026-01-29T18:58:54Z
cleanstart-2026-vc16841 Within HostnameError 2026-01-30T15:02:22.944744Z 2026-01-29T18:58:54Z
cleanstart-2026-uz73015 Cancelling a query (e 2026-01-30T16:09:25.315533Z 2026-01-29T18:58:54Z
cleanstart-2026-uy85485 Within HostnameError 2026-01-30T14:45:52.628542Z 2026-01-29T18:58:54Z
ID Description Published Updated
ID Description Updated
ID Description Published Updated
CERTA-2008-ALE-016 Vulnérabilité dans Microsoft Internet Explorer 2008-12-10T00:00:00.000000 2008-12-17T00:00:00.000000
certa-2007-ale-007 Vulnérabilité de Microsoft Windows Explorer 2007-03-09T00:00:00.000000 2008-10-09T00:00:00.000000
certa-2006-ale-012 Vulnérabilité de Microsoft PowerPoint 2006-10-13T00:00:00.000000 2008-10-09T00:00:00.000000
CERTA-2007-ALE-007 Vulnérabilité de Microsoft Windows Explorer 2007-03-09T00:00:00.000000 2008-10-09T00:00:00.000000
CERTA-2006-ALE-012 Vulnérabilité de Microsoft PowerPoint 2006-10-13T00:00:00.000000 2008-10-09T00:00:00.000000
certa-2007-ale-005 Vulnérabilité de Sun Solaris 2007-02-12T00:00:00.000000 2008-09-18T00:00:00.000000
CERTA-2007-ALE-005 Vulnérabilité de Sun Solaris 2007-02-12T00:00:00.000000 2008-09-18T00:00:00.000000
certa-2008-ale-010 Vulnérabilité dans Microsoft Word 2008-07-09T00:00:00.000000 2008-08-13T00:00:00.000000
certa-2008-ale-009 Vulnérabilité dans Microsoft Access Snapshot Viewer 2008-07-08T00:00:00.000000 2008-08-13T00:00:00.000000
CERTA-2008-ALE-010 Vulnérabilité dans Microsoft Word 2008-07-09T00:00:00.000000 2008-08-13T00:00:00.000000
CERTA-2008-ALE-009 Vulnérabilité dans Microsoft Access Snapshot Viewer 2008-07-08T00:00:00.000000 2008-08-13T00:00:00.000000
certa-2008-ale-011 Vulnérabilité dans Oracle BEA WebLogic Server 2008-07-24T00:00:00.000000 2008-08-08T00:00:00.000000
CERTA-2008-ALE-011 Vulnérabilité dans Oracle BEA WebLogic Server 2008-07-24T00:00:00.000000 2008-08-08T00:00:00.000000
certa-2008-ale-008 Vulnérabilité du navigateur Safari 2008-06-02T00:00:00.000000 2008-06-20T00:00:00.000000
CERTA-2008-ALE-008 Vulnérabilité du navigateur Safari 2008-06-02T00:00:00.000000 2008-06-20T00:00:00.000000
certa-2008-ale-007 Multiples vulnérabilités dans Apple iCal 2008-05-23T00:00:00.000000 2008-05-29T00:00:00.000000
CERTA-2008-ALE-007 Multiples vulnérabilités dans Apple iCal 2008-05-23T00:00:00.000000 2008-05-29T00:00:00.000000
certa-2008-ale-005 Vulnérabilité dans Microsoft Jet Database Engine 2008-03-25T00:00:00.000000 2008-05-14T00:00:00.000000
CERTA-2008-ALE-005 Vulnérabilité dans Microsoft Jet Database Engine 2008-03-25T00:00:00.000000 2008-05-14T00:00:00.000000
certa-2008-ale-004 Vulnérabilité dans VMware 2008-02-27T00:00:00.000000 2008-04-16T00:00:00.000000
CERTA-2008-ALE-004 Vulnérabilité dans VMware 2008-02-27T00:00:00.000000 2008-04-16T00:00:00.000000
certa-2008-ale-003 Vulnérabilité dans Excel 2008-01-16T00:00:00.000000 2008-03-12T00:00:00.000000
CERTA-2008-ALE-003 Vulnérabilité dans Excel 2008-01-16T00:00:00.000000 2008-03-12T00:00:00.000000
certa-2008-ale-002 Vulnérabilité dans Joomla! 2008-01-14T00:00:00.000000 2008-02-25T00:00:00.000000
CERTA-2008-ALE-002 Vulnérabilité dans Joomla! 2008-01-14T00:00:00.000000 2008-02-25T00:00:00.000000
certa-2008-ale-001 Vulnérabilité dans Apple QuickTime 2008-01-11T00:00:00.000000 2008-02-07T00:00:00.000000
CERTA-2008-ALE-001 Vulnérabilité dans Apple QuickTime 2008-01-11T00:00:00.000000 2008-02-07T00:00:00.000000
certa-2007-ale-017 Vulnérabilité dans la gestion RTSP d'Apple QuickTime 2007-11-27T00:00:00.000000 2007-12-14T00:00:00.000000
CERTA-2007-ALE-017 Vulnérabilité dans la gestion RTSP d'Apple QuickTime 2007-11-27T00:00:00.000000 2007-12-14T00:00:00.000000
certa-2007-ale-016 Vulnérabilité d'Oracle 10g 2007-11-16T00:00:00.000000 2007-11-16T00:00:00.000000
ID Description Published Updated
certfr-2025-avi-0618 Multiples vulnérabilités dans les produits Mitel 2025-07-24T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0098 Vulnérabilité dans les produits Symfony 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0097 Vulnérabilité dans les produits Fortinet 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0096 Multiples vulnérabilités dans OpenSSL 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0095 Multiples vulnérabilités dans les produits Mozilla 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0094 Multiples vulnérabilités dans HPE Aruba Networking Fabric Composer 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0093 Multiples vulnérabilités dans Tenable Network Monitor 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0092 Vulnérabilité dans Google Chrome 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2025-AVI-0618 Multiples vulnérabilités dans les produits Mitel 2025-07-24T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2026-avi-0091 Multiples vulnérabilités dans Xen 2026-01-27T00:00:00.000000 2026-01-27T00:00:00.000000
certfr-2026-avi-0090 Multiples vulnérabilités dans Citrix XenServer 2026-01-27T00:00:00.000000 2026-01-27T00:00:00.000000
certfr-2026-avi-0089 Vulnérabilité dans Microsoft Office 2026-01-27T00:00:00.000000 2026-01-27T00:00:00.000000
certfr-2026-avi-0088 Vulnérabilité dans MariaDB 2026-01-27T00:00:00.000000 2026-01-27T00:00:00.000000
CERTFR-2026-AVI-0091 Multiples vulnérabilités dans Xen 2026-01-27T00:00:00.000000 2026-01-27T00:00:00.000000
CERTFR-2026-AVI-0090 Multiples vulnérabilités dans Citrix XenServer 2026-01-27T00:00:00.000000 2026-01-27T00:00:00.000000
CERTFR-2026-AVI-0089 Vulnérabilité dans Microsoft Office 2026-01-27T00:00:00.000000 2026-01-27T00:00:00.000000
CERTFR-2026-AVI-0088 Vulnérabilité dans MariaDB 2026-01-27T00:00:00.000000 2026-01-27T00:00:00.000000
certfr-2026-avi-0087 Vulnérabilité dans les produits Belden 2026-01-26T00:00:00.000000 2026-01-26T00:00:00.000000
certfr-2026-avi-0086 Vulnérabilité dans CPython 2026-01-26T00:00:00.000000 2026-01-26T00:00:00.000000
certfr-2026-avi-0085 Multiples vulnérabilités dans NetApp Brocade SAN Navigator 2026-01-26T00:00:00.000000 2026-01-26T00:00:00.000000
certfr-2026-avi-0084 Vulnérabilité dans Microsoft Edge 2026-01-26T00:00:00.000000 2026-01-26T00:00:00.000000
CERTFR-2026-AVI-0087 Vulnérabilité dans les produits Belden 2026-01-26T00:00:00.000000 2026-01-26T00:00:00.000000
CERTFR-2026-AVI-0086 Vulnérabilité dans CPython 2026-01-26T00:00:00.000000 2026-01-26T00:00:00.000000
CERTFR-2026-AVI-0085 Multiples vulnérabilités dans NetApp Brocade SAN Navigator 2026-01-26T00:00:00.000000 2026-01-26T00:00:00.000000
CERTFR-2026-AVI-0084 Vulnérabilité dans Microsoft Edge 2026-01-26T00:00:00.000000 2026-01-26T00:00:00.000000
certfr-2026-avi-0083 Multiples vulnérabilités dans les produits IBM 2026-01-23T00:00:00.000000 2026-01-23T00:00:00.000000
certfr-2026-avi-0082 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-01-23T00:00:00.000000 2026-01-23T00:00:00.000000
certfr-2026-avi-0081 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-01-23T00:00:00.000000 2026-01-23T00:00:00.000000
certfr-2026-avi-0080 Vulnérabilité dans Broadcom Web Security Services Agent 2026-01-23T00:00:00.000000 2026-01-23T00:00:00.000000
certfr-2025-avi-0970 Multiples vulnérabilités dans Synacor Zimbra Collaboration 2025-11-06T00:00:00.000000 2026-01-23T00:00:00.000000
ID Description Published Updated
jvndb-2022-002768 Multiple vulnerabilities in UNIMO Technology digital video recorders 2022-12-02T14:57+09:00 2024-06-03T16:55+09:00
jvndb-2022-000096 Redmine vulnerable to cross-site scripting 2022-12-13T14:05+09:00 2024-06-03T16:47+09:00
jvndb-2022-000093 TP-Link RE300 V1 tdpServer vulnerable to improper processing of its input 2022-11-24T14:46+09:00 2024-06-03T16:41+09:00
jvndb-2022-000095 Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption 2022-11-25T14:15+09:00 2024-06-03T16:08+09:00
jvndb-2024-000057 Multiple vulnerabilities in UNIVERSAL PASSPORT RX 2024-06-03T15:32+09:00 2024-06-03T15:32+09:00
jvndb-2022-000090 Multiple vulnerabilities in Movable Type 2022-11-16T17:07+09:00 2024-06-03T15:31+09:00
jvndb-2022-000092 Typora fails to properly neutralize JavaScript code. 2022-11-21T15:31+09:00 2024-06-03T15:13+09:00
jvndb-2024-003254 Seiko Solutions SkyBridge MB-A100/MB-A110 and SkyBridge BASIC MB-A130 vulnerable to OS command injection 2024-06-03T14:53+09:00 2024-06-03T14:53+09:00
jvndb-2024-003253 Multiple vulnerabilities in Sharp and Toshiba Tec MFPs 2024-06-03T14:36+09:00 2024-06-03T14:36+09:00
jvndb-2022-000094 Multiple cross-site scripting vulnerabilities in baserCMS 2022-11-25T13:42+09:00 2024-05-31T18:17+09:00
jvndb-2022-002761 Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service 2022-11-21T18:25+09:00 2024-05-31T17:43+09:00
jvndb-2022-000078 bingo!CMS vulnerable to authentication bypass 2022-10-11T17:49+09:00 2024-05-30T17:57+09:00
jvndb-2022-002836 Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service 2022-12-26T16:21+09:00 2024-05-30T17:47+09:00
jvndb-2022-002451 Multiple vulnerabilities in SVMPC1 and SVMPC2 2022-10-13T17:27+09:00 2024-05-30T16:38+09:00
jvndb-2023-000037 Joruri Gw vulnerable to cross-site scripting 2023-04-17T14:19+09:00 2024-05-30T16:19+09:00
jvndb-2023-001493 Multiple mobile printing apps for Android vulnerable to improper intent handling 2023-04-13T11:09+09:00 2024-05-30T15:48+09:00
jvndb-2023-000038 EC-CUBE plugin "NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)" vulnerable to authentication bypass 2023-04-19T14:06+09:00 2024-05-30T15:11+09:00
jvndb-2024-000056 awkblog vulnerable to OS command injection 2024-05-30T14:39+09:00 2024-05-30T14:39+09:00
jvndb-2023-001411 Yokogawa Electric CENTUM series vulnerable to cleartext storage of sensitive information 2023-04-06T14:59+09:00 2024-05-29T18:23+09:00
jvndb-2022-000097 Multiple vulnerabilities in DENSHI NYUSATSU CORE SYSTEM 2022-12-15T15:18+09:00 2024-05-29T17:40+09:00
jvndb-2023-000031 Multiple vulnerabilities in JustSystems products 2023-04-04T15:22+09:00 2024-05-29T17:32+09:00
jvndb-2023-000035 Improper restriction of XML external entity references (XXE) in Shinseiyo Sogo Soft 2023-04-19T14:49+09:00 2024-05-29T16:58+09:00
jvndb-2023-000034 JB Inquiry form vulnerable to exposure of private personal information to an unauthorized actor 2023-04-14T15:48+09:00 2024-05-29T16:44+09:00
jvndb-2023-000050 Multiple vulnerabilities in WordPress Plugin "MW WP Form" and "Snow Monkey Forms" 2023-05-15T14:29+09:00 2024-05-29T16:27+09:00
jvndb-2024-000055 Redmine DMSF Plugin vulnerable to path traversal 2024-05-29T14:13+09:00 2024-05-29T14:13+09:00
jvndb-2024-000054 EC-Orange vulnerable to authorization bypass 2024-05-29T14:06+09:00 2024-05-29T14:06+09:00
jvndb-2024-003249 ELECOM wireless LAN routers vulnerable to OS command injection 2024-05-29T12:33+09:00 2024-05-29T12:33+09:00
jvndb-2023-000040 WordPress Plugin "Appointment and Event Booking Calendar for WordPress - Amelia" vulnerable to cross-site scripting 2023-04-24T13:41+09:00 2024-05-28T16:59+09:00
jvndb-2023-000039 WordPress plugin "LIQUID SPEECH BALLOON" vulnerable to cross-site request forgery 2023-04-19T14:24+09:00 2024-05-28T16:56+09:00
jvndb-2024-000053 Multiple vulnerabilities in Unifier and Unifier Cast 2024-05-28T14:47+09:00 2024-05-28T14:47+09:00
ID Description Published Updated
cnvd-2026-16055 OpenClaw安全绕过漏洞（CNVD-2026-16055） 2026-03-26 2026-04-03
cnvd-2026-16054 OpenClaw命令执行漏洞（CNVD-2026-16054） 2026-03-26 2026-04-03
cnvd-2026-16053 OpenClaw拒绝服务漏洞（CNVD-2026-16053） 2026-03-26 2026-04-03
cnvd-2026-16052 OpenClaw访问控制错误漏洞（CNVD-2026-16052） 2026-03-26 2026-04-03
cnvd-2026-16051 OpenClaw安全绕过漏洞（CNVD-2026-16051） 2026-03-26 2026-04-03
cnvd-2026-16050 OpenClaw操作系统命令注入漏洞（CNVD-2026-16050） 2026-03-26 2026-04-03
cnvd-2026-16049 OpenClaw存在未明漏洞（CNVD-2026-16049） 2026-03-26 2026-04-03
cnvd-2026-16048 OpenClaw存在未明漏洞（CNVD-2026-16048） 2026-03-26 2026-04-03
cnvd-2026-16047 OpenClaw代码执行漏洞（CNVD-2026-16047） 2026-03-26 2026-04-03
cnvd-2026-16046 OpenClaw命令执行漏洞（CNVD-2026-16046） 2026-03-26 2026-04-03
cnvd-2026-16045 OpenClaw安全绕过漏洞（CNVD-2026-16045） 2026-03-26 2026-04-03
cnvd-2026-16044 OpenClaw操作系统命令注入漏洞（CNVD-2026-16044） 2026-03-26 2026-04-03
cnvd-2026-16043 OpenClaw操作系统命令注入漏洞（CNVD-2026-16043） 2026-03-26 2026-04-03
cnvd-2026-16042 OpenClaw路径遍历漏洞（CNVD-2026-16042） 2026-03-26 2026-04-03
cnvd-2026-16041 OpenClaw访问控制错误漏洞（CNVD-2026-16041） 2026-03-26 2026-04-03
cnvd-2026-16040 OpenClaw路径遍历漏洞（CNVD-2026-16040） 2026-03-31 2026-04-03
cnvd-2026-16039 WordPress插件Addon Jobsearch Chat跨站脚本漏洞 2026-03-31 2026-04-03
cnvd-2026-16038 Linux kernel内存错误引用漏洞（CNVD-2026-16038） 2026-03-31 2026-04-03
cnvd-2026-16037 FreeBSD缓冲区溢出漏洞（CNVD-2026-16037） 2026-03-31 2026-04-03
cnvd-2026-16036 Linux kernel双重释放漏洞（CNVD-2026-16036） 2026-04-02 2026-04-03
cnvd-2026-16035 FreeRDP拒绝服务漏洞（CNVD-2026-16035） 2026-04-02 2026-04-03
cnvd-2026-16034 FreeRDP越界读取漏洞（CNVD-2026-16034） 2026-04-02 2026-04-03
cnvd-2026-16033 FreeRDP堆缓冲区溢出漏洞（CNVD-2026-16033） 2026-04-02 2026-04-03
cnvd-2026-16032 FreeRDP双重释放漏洞（CNVD-2026-16032） 2026-04-02 2026-04-03
cnvd-2026-16031 OpenBao授权问题漏洞 2026-04-02 2026-04-03
cnvd-2026-15865 Delta Electronics COMMGR2堆栈缓冲区溢出漏洞 2026-03-16 2026-04-02
cnvd-2026-15864 Delta Electronics COMMGR2拒绝服务漏洞 2026-03-16 2026-04-02
cnvd-2026-15863 Advantech WISE-6610操作系统命令注入漏洞 2026-02-25 2026-04-02
cnvd-2026-15862 ZTE ZXCDN Struts远程代码执行漏洞 2025-10-17 2026-04-02
cnvd-2026-15861 ZTE ElasticNet UME R32 on Linux权限管理不当漏洞 2025-11-28 2026-04-02
ID Description Published Updated
bdu:2025-11903 Уязвимость расширения Big Requests реализации протокола Wayland для X.Org XWayland и реал… 28.09.2025 16.02.2026
bdu:2025-11901 Уязвимость функции rtnl_vfinfo_size() компонента net/core/rtnetlink.c ядра операционной с… 28.09.2025 16.02.2026
bdu:2025-11900 Уязвимость компонента irq-qcom-mpm.c ядра операционной системы Linux, позволяющая нарушит… 28.09.2025 16.02.2026
bdu:2025-11896 Уязвимость компонента f2fs ядра операционной системы Linux, позволяющая нарушителю вызват… 28.09.2025 16.02.2026
bdu:2025-11895 Уязвимость компонента clk ядра операционной системы Linux, позволяющая нарушителю вызвать… 28.09.2025 16.02.2026
bdu:2025-11893 Уязвимость компонента hfi_parser ядра операционной системы Linux, позволяющая нарушителю … 28.09.2025 16.02.2026
bdu:2025-11892 Уязвимость ядра операционной системы Linux, связанная с чтением за допустимыми границами … 28.09.2025 16.02.2026
bdu:2025-11888 Уязвимость компонента hfi_parser ядра операционной системы Linux, позволяющая нарушителю … 28.09.2025 16.02.2026
bdu:2025-11886 Уязвимость компонента drivers/ntb/hw/mscc/ntb_hw_switchtec.c ядра операционной системы Li… 28.09.2025 16.02.2026
bdu:2025-11873 Уязвимость компонента ksmbd ядра операционной системы Linux, позволяющая нарушителю получ… 28.09.2025 16.02.2026
bdu:2025-11871 Уязвимость компонента ocfs2 ядра операционной системы Linux, позволяющая нарушителю вызва… 28.09.2025 16.02.2026
bdu:2025-11870 Уязвимость компонента drivers/net/ppp/ppp_synctty.c ядра операционной системы Linux, позв… 28.09.2025 16.02.2026
bdu:2025-11868 Уязвимость компонента isofs ядра операционной системы Linux, позволяющая нарушителю вызва… 28.09.2025 16.02.2026
bdu:2025-11867 Уязвимость компонента st.c ядра операционной системы Linux, позволяющая нарушителю вызват… 28.09.2025 16.02.2026
bdu:2025-11866 Уязвимость компонента trace.c ядра операционной системы Linux, позволяющая нарушителю ока… 28.09.2025 16.02.2026
bdu:2025-11865 Уязвимость компонента vfs.c ядра операционной системы Linux, позволяющая нарушителю оказа… 28.09.2025 16.02.2026
bdu:2025-11862 Уязвимость компонента net/can/bcm.c ядра операционной системы Linux, позволяющая нарушите… 28.09.2025 16.02.2026
bdu:2025-11860 Уязвимость функции ea_get() компонента fs/jfs/xattr.c ядра операционной системы Linux, по… 28.09.2025 16.02.2026
bdu:2025-11858 Уязвимость расширения X Rendering реализации сервера X Window System X.Org Server и реали… 28.09.2025 16.02.2026
bdu:2025-11857 Уязвимость компонента sch_ets.c ядра операционной системы Linux, позволяющая нарушителю о… 28.09.2025 16.02.2026
bdu:2025-11844 Уязвимость компонента nilfs2 ядра операционной системы Linux, позволяющая нарушителю вызв… 28.09.2025 16.02.2026
bdu:2025-11838 Уязвимость компонента dm-bufio.c ядра операционной системы Linux, позволяющая нарушителю … 28.09.2025 16.02.2026
bdu:2025-11836 Уязвимость компонента qcom/lpass.h ядра операционной системы Linux, позволяющая нарушител… 28.09.2025 16.02.2026
bdu:2025-11835 Уязвимость функции pktgen_thread_write() компонента net/core/pktgen.c ядра операционной с… 28.09.2025 16.02.2026
bdu:2025-11834 Уязвимость модулей crypto, lzo ядра операционной системы Linux, позволяющая нарушителю на… 28.09.2025 16.02.2026
bdu:2025-11833 Уязвимость функции current_password_store() драйвера dell-wmi-sysman ядра операционной си… 28.09.2025 16.02.2026
bdu:2025-11832 Уязвимость компонента drm/amd/display ядра операционной системы Linux, позволяющая наруши… 28.09.2025 16.02.2026
bdu:2025-11830 Уязвимость компонента vxlan_vnifilter.c ядра операционной системы Linux, позволяющая нару… 28.09.2025 16.02.2026
bdu:2025-11829 Уязвимость компонента nouveau_fence.c ядра операционной системы Linux, позволяющая наруши… 28.09.2025 16.02.2026
bdu:2025-11828 Уязвимость компонента sch_htb.c ядра операционной системы Linux, позволяющая нарушителю в… 28.09.2025 16.02.2026
ID Description Updated
var-200603-0270 Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 1… 2024-07-23T21:15:31.812000Z
var-201904-1433 A memory corruption issue was addressed with improved validation. This issue affected ver… 2024-07-23T21:15:28.536000Z
var-200701-0156 Integer overflow in the byte_swap_sbin function in bsd/ufs/ufs/ufs_byte_order.c in Mac OS… 2024-07-23T21:15:07.589000Z
var-201904-1475 A memory consumption issue was addressed with improved memory handling. This issue affect… 2024-07-23T21:14:35.907000Z
var-201302-0398 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:14:35.493000Z
var-202108-1249 A buffer overflow issue was addressed with improved memory handling. This issue is fixed … 2024-07-23T21:14:34.847000Z
var-200102-0005 HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administ… 2024-07-23T21:14:25.191000Z
var-200906-0612 drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earli… 2024-07-23T21:14:24.068000Z
var-201210-0267 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:14:23.983000Z
var-200712-0604 Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/kr… 2024-07-23T21:14:23.335000Z
var-201912-0629 A logic issue was addressed with improved state management. This issue is fixed in tvOS 1… 2024-07-23T21:14:22.861000Z
var-201302-0250 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:14:03.420000Z
var-200809-0183 The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentia… 2024-07-23T21:14:02.408000Z
var-201109-0208 Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers… 2024-07-23T21:14:00.290000Z
var-202205-1299 A memory corruption issue was addressed with improved state management. This issue is fix… 2024-07-23T21:13:54.017000Z
var-200106-0199 banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs … 2024-07-23T21:13:54.400000Z
var-200810-0144 Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 a… 2024-07-23T21:13:53.646000Z
var-201907-1641 In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recordin… 2024-07-23T21:13:51.034000Z
var-201507-0017 The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x be… 2024-07-23T21:13:51.101000Z
var-201904-1404 A use after free issue was addressed with improved memory management. This issue affected… 2024-07-23T21:13:19.243000Z
var-202108-2221 curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. T… 2024-07-23T21:13:18.214000Z
var-201210-0457 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:13:17.006000Z
var-201410-0859 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earli… 2024-07-23T21:12:41.300000Z
var-201006-1144 WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… 2024-07-23T21:12:41.398000Z
var-200608-0036 Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to ca… 2024-07-23T21:12:41.892000Z
var-201710-0974 Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the G… 2024-07-23T21:12:37.370000Z
var-201103-0291 Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in Im… 2024-07-23T21:12:37.468000Z
var-201511-0027 The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the par… 2024-07-23T21:12:31.080000Z
var-202003-1785 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… 2024-07-23T21:12:28.156000Z
var-201310-0372 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… 2024-07-23T21:12:27.691000Z
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated