Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-69392 |
N/A
|
WordPress iMoney plugin <= 0.36 - Reflected Cross Site… |
itex |
iMoney |
2026-02-20T15:46:55.677Z | 2026-02-20T15:46:55.677Z |
| CVE-2025-69391 |
N/A
|
WordPress Diamond theme <= 2.4.8 - Reflected Cross Sit… |
GT3themes |
Diamond |
2026-02-20T15:46:55.498Z | 2026-02-20T15:46:55.498Z |
| CVE-2025-69390 |
N/A
|
WordPress Business Template Blocks for WPBakery (Visua… |
themebon |
Business Template Blocks for WPBakery (Visual Composer) Page Builder |
2026-02-20T15:46:55.327Z | 2026-02-20T15:46:55.327Z |
| CVE-2025-69389 |
N/A
|
WordPress Visitor Maps Extended Referer Field plugin <… |
Hugh Mungus |
Visitor Maps Extended Referer Field |
2026-02-20T15:46:55.128Z | 2026-02-20T15:46:55.128Z |
| CVE-2025-69388 |
N/A
|
WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken A… |
cliengo |
Cliengo – Chatbot |
2026-02-20T15:46:54.922Z | 2026-02-20T15:46:54.922Z |
| CVE-2025-69387 |
N/A
|
WordPress Simple Retail Menus plugin <= 4.2.1 - Local … |
whatwouldjessedo |
Simple Retail Menus |
2026-02-20T15:46:54.745Z | 2026-02-20T15:46:54.745Z |
| CVE-2025-69386 |
N/A
|
WordPress RVCFDI para Woocommerce plugin <= 8.1.8 - Re… |
realvirtualmx |
RVCFDI para Woocommerce |
2026-02-20T15:46:54.554Z | 2026-02-20T15:46:54.554Z |
| CVE-2025-69385 |
N/A
|
WordPress Cartify - WooCommerce Gutenberg WordPress Th… |
AgniHD |
Cartify - WooCommerce Gutenberg WordPress Theme |
2026-02-20T15:46:54.361Z | 2026-02-20T15:46:54.361Z |
| CVE-2025-69384 |
N/A
|
WordPress Timeline Event History plugin <= 3.2 - Refle… |
wpdiscover |
Timeline Event History |
2026-02-20T15:46:54.106Z | 2026-02-20T15:46:54.106Z |
| CVE-2025-69383 |
N/A
|
WordPress WP shop plugin <= 2.6.1 - Local File Inclusi… |
Agence web Eoxia - Montpellier |
WP shop |
2026-02-20T15:46:53.941Z | 2026-02-20T15:46:53.941Z |
| CVE-2025-69382 |
N/A
|
WordPress Themesflat Elementor plugin <= 1.0.1 - PHP O… |
themesflat |
Themesflat Elementor |
2026-02-20T15:46:53.765Z | 2026-02-20T15:46:53.765Z |
| CVE-2025-69381 |
N/A
|
WordPress WooCommerce Bulk Product Editor plugin <= 3.… |
vanquish |
WooCommerce Bulk Product Editor |
2026-02-20T15:46:53.591Z | 2026-02-20T15:46:53.591Z |
| CVE-2025-69380 |
N/A
|
WordPress Upload Files Anywhere plugin <= 2.8 - Arbitr… |
vanquish |
Upload Files Anywhere |
2026-02-20T15:46:53.401Z | 2026-02-20T15:46:53.401Z |
| CVE-2025-69379 |
N/A
|
WordPress Upload Files Anywhere plugin <= 2.8 - Arbitr… |
vanquish |
Upload Files Anywhere |
2026-02-20T15:46:53.230Z | 2026-02-20T15:46:53.230Z |
| CVE-2025-69378 |
N/A
|
WordPress Product Filter for WooCommerce plugin <= 9.1… |
XforWooCommerce |
Product Filter for WooCommerce |
2026-02-20T15:46:53.046Z | 2026-02-20T15:46:53.046Z |
| CVE-2025-69377 |
N/A
|
WordPress User Extra Fields plugin <= 17.0 - Arbitrary… |
vanquish |
User Extra Fields |
2026-02-20T15:46:52.641Z | 2026-02-20T15:46:52.641Z |
| CVE-2025-69376 |
N/A
|
WordPress User Extra Fields plugin <= 17.0 - Arbitrary… |
vanquish |
User Extra Fields |
2026-02-20T15:46:52.242Z | 2026-02-20T15:46:52.242Z |
| CVE-2025-69375 |
N/A
|
WordPress Portfolio Builder plugin <= 1.2.5 - Local Fi… |
SolverWp |
Portfolio Builder |
2026-02-20T15:46:52.069Z | 2026-02-20T15:46:52.069Z |
| CVE-2025-69374 |
N/A
|
WordPress Eleblog – Elementor Blog And Magazine Addons… |
SolverWp |
Eleblog – Elementor Blog And Magazine Addons |
2026-02-20T15:46:51.890Z | 2026-02-20T15:46:51.890Z |
| CVE-2025-69373 |
N/A
|
WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File … |
beeteam368 |
VidoRev |
2026-02-20T15:46:51.695Z | 2026-02-20T15:46:51.695Z |
| CVE-2025-69372 |
N/A
|
WordPress SevenHills theme <= 1.6.2 - PHP Object Injec… |
AncoraThemes |
SevenHills |
2026-02-20T15:46:51.523Z | 2026-02-20T15:46:51.523Z |
| CVE-2025-69371 |
N/A
|
WordPress KindlyCare theme <= 1.6.1 - PHP Object Injec… |
AncoraThemes |
KindlyCare |
2026-02-20T15:46:51.329Z | 2026-02-20T15:46:51.329Z |
| CVE-2025-69370 |
N/A
|
WordPress Capella theme <= 2.5.5 - PHP Object Injectio… |
ThemeGoods |
Capella |
2026-02-20T15:46:51.123Z | 2026-02-20T15:46:51.123Z |
| CVE-2025-69368 |
N/A
|
WordPress SOHO - Photography WordPress Theme theme <= … |
GT3themes |
SOHO - Photography WordPress Theme |
2026-02-20T15:46:50.944Z | 2026-02-20T15:46:50.944Z |
| CVE-2025-69367 |
N/A
|
WordPress Oyster - Photography WordPress Theme theme <… |
GT3themes |
Oyster - Photography WordPress Theme |
2026-02-20T15:46:50.750Z | 2026-02-20T15:46:50.750Z |
| CVE-2025-69366 |
N/A
|
WordPress Emerce Core plugin <= 1.8 - SQL Injection vu… |
TeconceTheme |
Emerce Core |
2026-02-20T15:46:50.573Z | 2026-02-20T15:46:50.573Z |
| CVE-2025-69365 |
N/A
|
WordPress Uroan Core plugin <= 1.4.4 - SQL Injection v… |
TeconceTheme |
Uroan Core |
2026-02-20T15:46:50.375Z | 2026-02-20T15:46:50.375Z |
| CVE-2025-69337 |
N/A
|
WordPress Wolmart Core plugin <= 1.9.6 - SQL Injection… |
don-themes |
Wolmart Core |
2026-02-20T15:46:50.197Z | 2026-02-20T15:46:50.197Z |
| CVE-2025-69330 |
N/A
|
WordPress Prestige theme < 1.4.1 - Reflected Cross Sit… |
Jthemes |
Prestige |
2026-02-20T15:46:50.026Z | 2026-02-20T15:46:50.026Z |
| CVE-2025-69329 |
N/A
|
WordPress Prestige theme < 1.4.1 - PHP Object Injectio… |
Jthemes |
Prestige |
2026-02-20T15:46:49.874Z | 2026-02-20T15:46:49.874Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2847 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UTT HiPER 520 Web Management formReleaseConnect sub_44… |
UTT |
HiPER 520 |
2026-02-20T15:32:08.557Z | 2026-02-20T15:32:08.557Z |
| CVE-2026-2846 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UTT HiPER 520 Web Management formPdbUpConfig sub_44D26… |
UTT |
HiPER 520 |
2026-02-20T15:32:06.824Z | 2026-02-20T15:32:06.824Z |
| CVE-2026-27072 |
N/A
|
WordPress PixelYourSite – Your smart PIXEL (TAG) Manag… |
PixelYourSite |
PixelYourSite – Your smart PIXEL (TAG) Manager |
2026-02-20T15:47:09.356Z | 2026-02-20T15:47:09.356Z |
| CVE-2026-24956 |
N/A
|
WordPress Download Manager Addons for Elementor plugin… |
Shahjada |
Download Manager Addons for Elementor |
2026-02-20T15:47:08.982Z | 2026-02-20T15:47:08.982Z |
| CVE-2026-24953 |
N/A
|
WordPress Simple File List plugin <= 6.1.15 - Arbitrar… |
Mitchell Bennis |
Simple File List |
2026-02-20T15:47:08.637Z | 2026-02-20T15:47:08.637Z |
| CVE-2026-24949 |
N/A
|
WordPress PhotoMe theme <= 5.7.1 - Cross Site Scriptin… |
ThemeGoods |
PhotoMe |
2026-02-20T15:47:08.290Z | 2026-02-20T15:47:08.290Z |
| CVE-2026-24946 |
N/A
|
WordPress Print Invoice & Delivery Notes for WooCommer… |
tychesoftwares |
Print Invoice & Delivery Notes for WooCommerce |
2026-02-20T15:47:07.869Z | 2026-02-20T15:47:07.869Z |
| CVE-2026-24943 |
N/A
|
WordPress Grand Conference theme <= 5.3.4 - Reflected … |
ThemeGoods |
Grand Conference |
2026-02-20T15:47:07.483Z | 2026-02-20T15:47:07.483Z |
| CVE-2026-22885 |
3.7 (3.1)
|
EnOcean SmartServer IoT Out-of-bounds Read |
EnOcean Edge Inc |
SmartServer IoT |
2026-02-20T15:35:02.898Z | 2026-02-20T20:06:44.163Z |
| CVE-2026-22384 |
N/A
|
WordPress Applay - Shortcodes plugin <= 3.7 - PHP Obje… |
leafcolor |
Applay - Shortcodes |
2026-02-20T15:47:07.059Z | 2026-02-20T15:47:07.059Z |
| CVE-2026-22381 |
N/A
|
WordPress PawFriends - Pet Shop and Veterinary WordPre… |
Mikado-Themes |
PawFriends - Pet Shop and Veterinary WordPress Theme |
2026-02-20T15:47:06.708Z | 2026-02-20T15:47:06.708Z |
| CVE-2026-22379 |
N/A
|
WordPress Netmix theme <= 1.0.10 - Local File Inclusio… |
AncoraThemes |
Netmix |
2026-02-20T15:47:06.345Z | 2026-02-20T15:47:06.345Z |
| CVE-2026-22377 |
N/A
|
WordPress Saveo theme <= 1.1.2 - Local File Inclusion … |
AncoraThemes |
Saveo |
2026-02-20T15:47:05.960Z | 2026-02-20T15:47:05.960Z |
| CVE-2026-22375 |
N/A
|
WordPress Impacto Patronus theme <= 1.2.3 - Local File… |
AncoraThemes |
Impacto Patronus |
2026-02-20T15:47:05.586Z | 2026-02-20T15:47:05.586Z |
| CVE-2026-22373 |
N/A
|
WordPress Fooddy theme <= 1.3.10 - Local File Inclusio… |
AncoraThemes |
Fooddy |
2026-02-20T15:47:05.132Z | 2026-02-20T15:47:05.132Z |
| CVE-2026-22371 |
N/A
|
WordPress Gustavo theme <= 1.2.2 - Local File Inclusio… |
AncoraThemes |
Gustavo |
2026-02-20T15:47:04.076Z | 2026-02-20T15:47:04.076Z |
| CVE-2026-22369 |
N/A
|
WordPress Ironfit theme <= 1.5 - Local File Inclusion … |
AncoraThemes |
Ironfit |
2026-02-20T15:47:03.701Z | 2026-02-20T15:47:03.701Z |
| CVE-2026-22367 |
N/A
|
WordPress Coworking theme <= 1.6.1 - Local File Inclus… |
AncoraThemes |
Coworking |
2026-02-20T15:47:03.323Z | 2026-02-20T15:47:03.323Z |
| CVE-2026-22365 |
N/A
|
WordPress Soleng theme <= 1.0.5 - Local File Inclusion… |
axiomthemes |
Soleng |
2026-02-20T15:47:02.847Z | 2026-02-20T15:47:02.847Z |
| CVE-2026-22363 |
N/A
|
WordPress Rhodos theme <= 1.3.3 - Local File Inclusion… |
axiomthemes |
Rhodos |
2026-02-20T15:47:02.437Z | 2026-02-20T15:47:02.437Z |
| CVE-2026-22361 |
N/A
|
WordPress A-Mart theme <= 1.0.2 - Local File Inclusion… |
axiomthemes |
A-Mart |
2026-02-20T15:47:01.916Z | 2026-02-20T15:47:01.916Z |
| CVE-2026-22357 |
N/A
|
WordPress Link Whisper Free plugin <= 0.9.0 - Reflecte… |
Spencer Haws |
Link Whisper Free |
2026-02-20T15:47:01.629Z | 2026-02-20T15:47:01.629Z |
| CVE-2026-22356 |
N/A
|
WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inc… |
Automattic |
Jetpack CRM |
2026-02-20T15:47:01.362Z | 2026-02-20T15:47:01.362Z |
| CVE-2026-22354 |
N/A
|
WordPress Woocommerce Category Banner Management plugi… |
Dotstore |
Woocommerce Category Banner Management |
2026-02-20T15:47:01.099Z | 2026-02-20T15:47:01.099Z |
| CVE-2026-22352 |
N/A
|
WordPress Persian Woocommerce SMS plugin <= 7.1.1 - Re… |
PersianScript |
Persian Woocommerce SMS |
2026-02-20T15:47:00.914Z | 2026-02-20T15:47:00.914Z |
| CVE-2026-22351 |
N/A
|
WordPress WP FullCalendar plugin <= 1.6 - Broken Acces… |
Marcus (aka @msykes) |
WP FullCalendar |
2026-02-20T15:47:00.722Z | 2026-02-20T15:47:00.722Z |
| CVE-2026-22350 |
N/A
|
WordPress PDF for Elementor Forms + Drag And Drop Temp… |
add-ons.org |
PDF for Elementor Forms + Drag And Drop Template Builder |
2026-02-20T15:47:00.543Z | 2026-02-20T15:47:00.543Z |
| CVE-2026-22346 |
N/A
|
WordPress Slider Responsive Slideshow – Image slider, … |
A WP Life |
Slider Responsive Slideshow – Image slider, Gallery slideshow |
2026-02-20T15:47:00.213Z | 2026-02-20T15:47:00.213Z |
| CVE-2026-22345 |
N/A
|
WordPress Image Gallery – Lightbox Gallery, Responsive… |
A WP Life |
Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery |
2026-02-20T15:46:59.892Z | 2026-02-20T15:46:59.892Z |
| CVE-2026-22344 |
N/A
|
WordPress FiveStar theme <= 1.7 - Local File Inclusion… |
Mikado-Themes |
FiveStar |
2026-02-20T15:46:59.662Z | 2026-02-20T15:46:59.662Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-24953 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mit… | 2026-02-20T16:22:39.547 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-24949 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:39.290 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-24946 | Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerc… | 2026-02-20T16:22:39.023 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-24943 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:38.623 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22885 | A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow re… | 2026-02-20T16:22:38.220 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22384 | Deserialization of Untrusted Data vulnerability in leafcolor Applay - Shortcodes applay-shortcodes … | 2026-02-20T16:22:38.090 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22381 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:37.700 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22379 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:37.430 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22377 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:37.167 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22375 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:36.907 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22373 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:36.653 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22371 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:36.397 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22369 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:36.120 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22367 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:35.817 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22365 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:35.517 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22363 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:35.247 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22361 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:34.970 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22357 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:34.833 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22356 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:34.693 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22354 | Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management … | 2026-02-20T16:22:34.550 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22352 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:34.397 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22351 | Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows … | 2026-02-20T16:22:34.237 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22350 | Missing Authorization vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template… | 2026-02-20T16:22:33.937 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22346 | Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image sl… | 2026-02-20T16:22:33.667 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22345 | Deserialization of Untrusted Data vulnerability in A WP Life Image Gallery – Lightbox Gallery, Resp… | 2026-02-20T16:22:33.497 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22344 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:33.357 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-22341 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Case-Themes Booked booked… | 2026-02-20T16:22:32.630 | 2026-02-20T16:55:22.933 |
| fkie_cve-2026-20761 | A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow re… | 2026-02-20T16:22:32.243 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-70831 | A Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php i… | 2026-02-20T16:22:29.493 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69410 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:29.157 | 2026-02-20T16:55:22.933 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-jchx-26cr-w8w2 |
7.2 (3.1)
9.4 (4.0)
|
Quick.Cart is vulnerable to Local File Inclusion and Path Traversal issues in the theme selection m… | 2026-01-22T12:31:22Z | 2026-02-19T21:30:42Z |
| ghsa-2gg4-v645-j922 |
6.0 (3.1)
|
An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Window… | 2024-05-02T15:30:33Z | 2026-02-19T21:30:41Z |
| ghsa-g7vw-f8p5-c728 |
9.2 (4.0)
|
Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization | 2026-02-17T18:54:49Z | 2026-02-19T21:30:28Z |
| ghsa-wwj6-vghv-5p64 |
5.2 (4.0)
|
Kata Container to Guest micro VM privilege escalation | 2026-02-19T15:25:54Z | 2026-02-19T21:30:20Z |
| ghsa-pgvm-wxw2-hrv9 |
5.3 (3.1)
|
Echo has a Windows path traversal via backslash in middleware.Static default filesystem | 2026-02-17T18:53:58Z | 2026-02-19T21:30:02Z |
| ghsa-jxc4-54g3-j7vp |
5.4 (3.1)
|
Indico Affected by Cross-Site-Scripting via material uploads | 2026-02-17T18:54:31Z | 2026-02-19T21:29:53Z |
| ghsa-f47c-3c5w-v7p4 |
6.9 (4.0)
|
Indico has Server-Side Request Forgery (SSRF) in multiple places | 2026-02-17T18:53:25Z | 2026-02-19T21:29:46Z |
| ghsa-mp5h-m6qj-6292 |
7.5 (3.1)
|
OpenClaw has a Telegram webhook request forgery (missing `channels.telegram.webhookSecret`) → auth bypass | 2026-02-17T18:46:16Z | 2026-02-19T21:23:52Z |
| ghsa-fc3h-92p8-h36f |
6.9 (4.0)
|
Unauthenticated File Upload in Gogs | 2026-02-17T18:44:07Z | 2026-02-19T21:23:40Z |
| ghsa-2c6v-8r3v-gh6p |
7.1 (4.0)
|
Gogs has a Protected Branch Deletion Bypass in Web Interface | 2026-02-17T18:43:00Z | 2026-02-19T21:14:56Z |
| ghsa-cv22-72px-f4gh |
5.3 (4.0)
|
Gogs has an Authorization Bypass Allows Cross-Repository Label Modification in Gogs | 2026-02-17T18:42:08Z | 2026-02-19T21:14:43Z |
| ghsa-jj5m-h57j-5gv7 |
5.1 (4.0)
|
Gogs Allows Cross-Repository Comment Deletion via DeleteComment | 2026-02-17T18:40:44Z | 2026-02-19T21:14:32Z |
| ghsa-782p-5fr5-7fj8 |
3.7 (3.1)
|
OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions | 2026-02-17T18:40:11Z | 2026-02-19T21:14:23Z |
| ghsa-67pg-wm7f-q7fj |
8.7 (4.0)
|
jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions | 2026-02-19T15:25:48Z | 2026-02-19T20:58:08Z |
| ghsa-r5fq-947m-xm57 |
8.8 (3.1)
|
OpenClaw has a path traversal in apply_patch could write/delete files outside the workspace | 2026-02-19T20:45:58Z | 2026-02-19T20:45:58Z |
| ghsa-68rp-wp8r-4726 |
2.3 (4.0)
|
Flask session does not add `Vary: Cookie` header when accessed in some ways | 2026-02-19T20:45:41Z | 2026-02-19T20:45:42Z |
| ghsa-8423-w5wx-h2r6 |
5.3 (4.0)
|
Pannellum has a XSS vulnerability in hot spot attributes | 2026-02-19T20:44:48Z | 2026-02-19T20:44:48Z |
| ghsa-29vq-49wr-vm6x |
6.3 (4.0)
|
Werkzeug safe_join() allows Windows special device names | 2026-02-19T20:32:45Z | 2026-02-19T20:32:45Z |
| ghsa-9m9c-vpv5-9g85 |
8.2 (4.0)
|
Feathers exposes internal headers via unencrypted session cookie | 2026-02-19T20:32:37Z | 2026-02-19T20:32:37Z |
| ghsa-mp4x-c34x-wv3x |
7.6 (4.0)
|
Feathers has an origin validation bypass via prefix matching | 2026-02-19T20:32:28Z | 2026-02-19T20:32:29Z |
| ghsa-ppf9-4ffw-hh4p |
7.4 (4.0)
|
Feathers has an open redirect in OAuth callback enables account takeover | 2026-02-19T20:32:15Z | 2026-02-19T20:32:15Z |
| ghsa-34p4-7w83-35g2 |
8.8 (3.1)
|
Formwork Improperly Managed Privileges in User creation | 2026-02-19T20:31:07Z | 2026-02-19T20:31:07Z |
| ghsa-r9wp-qq53-qvjx |
4.7 (3.1)
2.0 (4.0)
|
mingSoft MCMS does not properly restrict file uploads | 2026-02-18T21:31:23Z | 2026-02-19T20:30:51Z |
| ghsa-8r7r-f4gm-wcpq |
8.1 (3.1)
|
Statamic affected by privilege escalation via stored cross-site scripting | 2026-02-19T20:30:38Z | 2026-02-19T20:30:38Z |
| ghsa-33fm-6gp7-4p47 |
6.6 (3.1)
|
Weblate has an argument injection in management console | 2026-02-17T16:37:55Z | 2026-02-19T20:30:31Z |
| ghsa-88qp-p4qg-rqm6 |
6.9 (4.0)
|
CPU exhaustion in SvelteKit remote form deserialization (experimental only) | 2026-02-19T20:30:25Z | 2026-02-19T20:30:26Z |
| ghsa-vrhm-gvg7-fpcf |
4.6 (4.0)
|
Memory exhaustion in SvelteKit remote form deserialization (experimental only) | 2026-02-19T20:29:42Z | 2026-02-19T20:29:42Z |
| ghsa-33hq-fvwr-56pm |
1.7 (4.0)
|
devalue affected by CPU and memory amplification from sparse arrays | 2026-02-19T20:29:30Z | 2026-02-19T20:29:30Z |
| ghsa-8qm3-746x-r74r |
2.1 (4.0)
|
devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed | 2026-02-19T20:29:17Z | 2026-02-19T20:29:17Z |
| ghsa-c87c-78rc-vmv2 |
8.1 (4.0)
|
D-Tale affected by Remote Code Execution through the /save-column-filter endpoint | 2026-02-19T20:29:05Z | 2026-02-19T20:29:05Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-47 |
|
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.te… | django | 2024-03-15T20:15:00+00:00 | 2024-03-15T23:20:34.975097+00:00 |
| pysec-2024-46 |
|
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenti… | apache-airflow | 2024-03-14T09:15:00+00:00 | 2024-03-14T11:19:09.515892+00:00 |
| pysec-2024-45 |
|
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to contro… | langchain-core | 2024-03-04T00:15:00+00:00 | 2024-03-13T23:20:07.486731+00:00 |
| pysec-2024-44 |
|
In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __arr… | rpyc | 2024-03-12T16:15:00+00:00 | 2024-03-12T19:19:21.886478+00:00 |
| pysec-2024-43 |
|
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to contro… | langchain | 2024-03-04T00:15:00+00:00 | 2024-03-05T10:22:15.555734+00:00 |
| pysec-2024-42 |
|
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops … | apache-airflow | 2024-03-01T11:15:00+00:00 | 2024-03-01T14:20:34.498842+00:00 |
| pysec-2023-259 |
9.8 (3.1)
|
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1… | micropython-select | 2023-12-29T05:15:00+00:00 | 2024-02-29T07:20:31.851255+00:00 |
| pysec-2023-258 |
9.8 (3.1)
|
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1… | micropython-os | 2023-12-29T05:15:00+00:00 | 2024-02-29T07:20:31.721783+00:00 |
| pysec-2023-257 |
9.8 (3.1)
|
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1… | micropython-io | 2023-12-29T05:15:00+00:00 | 2024-02-29T07:20:31.603749+00:00 |
| pysec-2023-256 |
9.8 (3.1)
|
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1… | micropython-copy | 2023-12-29T05:15:00+00:00 | 2024-02-29T07:20:31.464203+00:00 |
| pysec-2023-255 |
8.1 (3.1)
|
Command Injection in GitHub repository gradio-app/gradio prior to main. | gradio | 2023-12-14T14:15:00+00:00 | 2024-02-28T16:22:37.359017+00:00 |
| pysec-2024-41 |
|
diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. … | diffoscope | 2024-02-27T02:15:00+00:00 | 2024-02-27T07:20:27.954412+00:00 |
| pysec-2024-40 |
|
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents. | orjson | 2024-02-26T16:28:00+00:00 | 2024-02-26T18:22:26.039698+00:00 |
| pysec-2024-39 |
|
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Var… | fastecdsa | 2024-02-24T05:15:00+00:00 | 2024-02-24T07:19:09.418536+00:00 |
| pysec-2023-254 |
7.5 (3.1)
|
cryptography is a package designed to expose cryptographic primitives and recipes to Pyth… | cryptography | 2023-11-29T19:15:00+00:00 | 2024-02-17T07:18:27.688636+00:00 |
| pysec-2024-38 |
7.5 (3.1)
|
FastAPI is a web framework for building APIs with Python 3.8+ based on standard Python ty… | fastapi | 2024-02-05T15:15:00+00:00 | 2024-02-16T18:22:32.607118+00:00 |
| pysec-2024-37 |
6.5 (3.1)
|
nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. Thi… | nonebot2 | 2024-02-09T23:15:00+00:00 | 2024-02-16T16:22:37.389642+00:00 |
| pysec-2022-43059 |
5.5 (3.1)
|
AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a De… | aiohttp | 2022-06-23T17:15:00Z | 2024-02-16T13:47:54.655573Z |
| pysec-2024-36 |
5.5 (3.1)
|
An information disclosure flaw was found in ansible-core due to a failure to respect the … | ansible-core | 2024-02-06T12:15:00+00:00 | 2024-02-14T07:20:09.911618+00:00 |
| pysec-2023-253 |
8.1 (3.1)
|
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. | mlflow | 2023-12-15T01:15:00+00:00 | 2024-02-14T00:26:12.242703+00:00 |
| pysec-2024-35 |
5.4 (3.1)
|
Versions of the package dash-core-components before 2.13.0; all versions of the package d… | dash | 2024-02-02T05:15:00+00:00 | 2024-02-10T07:18:43.563257+00:00 |
| pysec-2024-12 |
|
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feat… | llama-index | 2024-01-22T01:15:00Z | 2024-02-10T01:22:25.611009Z |
| pysec-2024-34 |
9.8 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6-server | 2024-01-30T16:15:00+00:00 | 2024-02-08T20:20:16.896186+00:00 |
| pysec-2024-33 |
9.8 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6-node | 2024-01-30T16:15:00+00:00 | 2024-02-08T20:20:16.842528+00:00 |
| pysec-2024-32 |
4.3 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6 | 2024-01-30T16:15:00+00:00 | 2024-02-08T18:22:28.342089+00:00 |
| pysec-2024-31 |
3.7 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6 | 2024-01-30T16:15:00+00:00 | 2024-02-08T18:22:28.276390+00:00 |
| pysec-2024-30 |
8.8 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6 | 2024-01-30T16:15:00+00:00 | 2024-02-08T18:22:28.210087+00:00 |
| pysec-2024-29 |
4.9 (3.1)
|
OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1… | octoprint | 2024-01-31T18:15:00+00:00 | 2024-02-08T07:19:40.535297+00:00 |
| pysec-2024-28 |
|
An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 be… | django | 2024-02-06T22:16:00+00:00 | 2024-02-07T00:25:46.826634+00:00 |
| pysec-2023-252 |
7.5 (3.1)
|
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. | mlflow | 2023-12-18T04:15:00+00:00 | 2024-02-06T22:20:23.832000+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33463 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741491Z |
| gsd-2024-33462 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.683814Z |
| gsd-2024-33461 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.675113Z |
| gsd-2024-33460 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.688393Z |
| gsd-2024-33459 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.692449Z |
| gsd-2024-33458 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.624212Z |
| gsd-2024-33457 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.696566Z |
| gsd-2024-33456 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.717737Z |
| gsd-2024-33455 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.655789Z |
| gsd-2024-33454 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.650999Z |
| gsd-2024-33453 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.698683Z |
| gsd-2024-33452 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.703341Z |
| gsd-2024-33451 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.726764Z |
| gsd-2024-33450 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.751570Z |
| gsd-2024-33449 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.610062Z |
| gsd-2024-33448 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.631490Z |
| gsd-2024-33447 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.747407Z |
| gsd-2024-33446 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.658390Z |
| gsd-2024-33445 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.724418Z |
| gsd-2024-33444 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.653354Z |
| gsd-2024-33443 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.759133Z |
| gsd-2024-33442 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.710054Z |
| gsd-2024-33441 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.733108Z |
| gsd-2024-33440 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.719884Z |
| gsd-2024-33439 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.753324Z |
| gsd-2024-33438 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.689433Z |
| gsd-2024-33437 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.743513Z |
| gsd-2024-33436 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.653792Z |
| gsd-2024-33435 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.737152Z |
| gsd-2024-33434 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.628304Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-696 | Malicious code in pathfiles (PyPI) | 2026-02-03T09:15:58Z | 2026-02-03T10:19:00Z |
| MAL-2026-696 | Malicious code in pathfiles (PyPI) | 2026-02-03T09:15:58Z | 2026-02-03T10:19:00Z |
| mal-2026-700 | Malicious code in tabulapys (PyPI) | 2026-02-03T10:04:45Z | 2026-02-03T10:04:45Z |
| MAL-2026-700 | Malicious code in tabulapys (PyPI) | 2026-02-03T10:04:45Z | 2026-02-03T10:04:45Z |
| mal-2026-699 | Malicious code in tokyo-ppe-test (PyPI) | 2026-02-03T09:32:04Z | 2026-02-03T09:32:04Z |
| MAL-2026-699 | Malicious code in tokyo-ppe-test (PyPI) | 2026-02-03T09:32:04Z | 2026-02-03T09:32:04Z |
| mal-2026-698 | Malicious code in tableshow (PyPI) | 2026-02-03T09:30:09Z | 2026-02-03T09:30:09Z |
| MAL-2026-698 | Malicious code in tableshow (PyPI) | 2026-02-03T09:30:09Z | 2026-02-03T09:30:09Z |
| mal-2026-686 | Malicious code in tableapys (PyPI) | 2026-02-03T07:49:06Z | 2026-02-03T09:19:13Z |
| MAL-2026-686 | Malicious code in tableapys (PyPI) | 2026-02-03T07:49:06Z | 2026-02-03T09:19:13Z |
| mal-2026-697 | Malicious code in pathlib-v2-utility (PyPI) | 2026-02-03T09:17:38Z | 2026-02-03T09:17:38Z |
| MAL-2026-697 | Malicious code in pathlib-v2-utility (PyPI) | 2026-02-03T09:17:38Z | 2026-02-03T09:17:38Z |
| mal-2026-638 | Malicious code in solhint-plugin-hyperlane (npm) | 2026-02-02T05:19:43Z | 2026-02-03T08:27:44Z |
| MAL-2026-638 | Malicious code in solhint-plugin-hyperlane (npm) | 2026-02-02T05:19:43Z | 2026-02-03T08:27:44Z |
| mal-2026-634 | Malicious code in eslint-config-minecraft-scripting (npm) | 2026-02-02T05:19:43Z | 2026-02-03T08:27:41Z |
| mal-2026-594 | Malicious code in epic-asset-uploader (npm) | 2026-01-28T19:45:45Z | 2026-02-03T08:27:41Z |
| MAL-2026-634 | Malicious code in eslint-config-minecraft-scripting (npm) | 2026-02-02T05:19:43Z | 2026-02-03T08:27:41Z |
| MAL-2026-594 | Malicious code in epic-asset-uploader (npm) | 2026-01-28T19:45:45Z | 2026-02-03T08:27:41Z |
| mal-2026-554 | Malicious code in braintree-web-latest (npm) | 2026-01-25T19:34:34Z | 2026-02-03T04:54:38Z |
| MAL-2026-554 | Malicious code in braintree-web-latest (npm) | 2026-01-25T19:34:34Z | 2026-02-03T04:54:38Z |
| mal-2026-496 | Malicious code in hemi-btc-staking-actions (npm) | 2026-01-23T18:12:42Z | 2026-02-03T04:04:59Z |
| MAL-2026-496 | Malicious code in hemi-btc-staking-actions (npm) | 2026-01-23T18:12:42Z | 2026-02-03T04:04:59Z |
| mal-2026-617 | Malicious code in roots-cms-client (npm) | 2026-01-31T17:27:21Z | 2026-02-03T03:16:53Z |
| mal-2025-49435 | Malicious code in something-not-in-cache (npm) | 2025-11-09T00:17:09Z | 2026-02-03T03:16:53Z |
| MAL-2026-617 | Malicious code in roots-cms-client (npm) | 2026-01-31T17:27:21Z | 2026-02-03T03:16:53Z |
| MAL-2025-49435 | Malicious code in something-not-in-cache (npm) | 2025-11-09T00:17:09Z | 2026-02-03T03:16:53Z |
| mal-2026-637 | Malicious code in launchdarkly-cpp-networking (npm) | 2026-02-02T05:19:43Z | 2026-02-03T03:16:52Z |
| mal-2024-2834 | Malicious code in pap-client (npm) | 2024-06-25T12:55:07Z | 2026-02-03T03:16:52Z |
| MAL-2026-637 | Malicious code in launchdarkly-cpp-networking (npm) | 2026-02-02T05:19:43Z | 2026-02-03T03:16:52Z |
| MAL-2024-2834 | Malicious code in pap-client (npm) | 2024-06-25T12:55:07Z | 2026-02-03T03:16:52Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2109 | Autodesk Produkte: Schwachstelle ermöglicht Codeausführung | 2025-09-22T22:00:00.000+00:00 | 2025-11-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2307 | Microsoft Windows: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2416 | Proxmox Backup Server: Mehrere Schwachstellen | 2025-10-26T23:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2058 | Apple Safari: Mehrere Schwachstellen | 2025-09-15T22:00:00.000+00:00 | 2025-11-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2445 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2334 | Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen | 2025-10-16T22:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2444 | Dell Secure Connect Gateway: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2427 | strongSwan (eap-mschapv2 plugin): Schwachstelle ermöglicht Codeausführung und DoS | 2025-10-27T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2403 | Ubiquiti UniFi: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2398 | Moxa Switch: Mehrere Schwachstellen | 2025-10-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2375 | Google Chrome: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-10-21T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2344 | Checkmk: Schwachstelle ermöglicht Cross-Site Scripting | 2025-10-20T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2339 | ImageMagick (BMP decoder): Schwachstelle ermöglicht Denial of Service | 2025-10-19T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2317 | Ubiquiti UniFi: Schwachstelle ermöglicht Ausführung von Debug-Funktionen | 2025-10-15T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2274 | Veeam Backup & Replication: Mehrere Schwachstellen | 2025-10-13T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2247 | Nvidia GPU Display Treiber: Mehrere Schwachstellen | 2025-10-08T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2132 | Linux Kernel: Mehrere Schwachstellen | 2025-09-24T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2114 | Dell PowerEdge BIOS und iDRAC9: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2002 | libssh: Schwachstelle ermöglicht Denial of Service | 2025-09-09T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-1974 | Podman: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-04T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-1921 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-08-27T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2440 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2015-11-22T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2395 | Rancher Manager: Mehrere Schwachstellen | 2025-10-23T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2390 | PowerDNS Recursor: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-10-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2385 | Drupal Module: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2275 | Mozilla Firefox: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2126 | Drupal Module: Mehrere Schwachstellen | 2025-09-24T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1954 | Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1785 | Intel Prozessoren: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1656 | Red Hat Enterprise Linux (unbound): Schwachstelle ermöglicht Manipulation von Daten | 2025-07-27T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0344 | Kwetsbaarheden verholpen in Adobe Dimension | 2024-08-14T12:42:00.097800Z | 2024-08-14T12:42:00.097800Z |
| ncsc-2024-0343 | Kwetsbaarheden verholpen in Adobe Illustrator | 2024-08-14T12:38:58.918490Z | 2024-08-14T12:38:58.918490Z |
| ncsc-2024-0342 | Kwetsbaarheden verholpen in Ivanti Avalanche | 2024-08-14T09:56:40.653912Z | 2024-08-14T09:56:40.653912Z |
| ncsc-2024-0341 | Kwetsbaarheden verholpen in Ivanti Neurons for ITSM | 2024-08-14T09:54:26.701111Z | 2024-08-14T09:54:26.701111Z |
| ncsc-2024-0339 | Kwetsbaarheden verholpen in Microsoft Mariner | 2024-08-13T18:23:22.271316Z | 2024-08-13T18:23:22.271316Z |
| ncsc-2024-0338 | Kwetsbaarheden verholpen in Microsoft Dynamics | 2024-08-13T18:22:21.160613Z | 2024-08-13T18:22:21.160613Z |
| ncsc-2024-0337 | Kwetsbaarheden verholpen in Microsoft Office | 2024-08-13T18:21:45.385690Z | 2024-08-13T18:21:45.385690Z |
| ncsc-2024-0336 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2024-08-13T18:21:06.220640Z | 2024-08-13T18:21:06.220640Z |
| ncsc-2024-0335 | Kwetsbaarheden verholpen in Microsoft Azure componenten | 2024-08-13T18:20:23.647785Z | 2024-08-13T18:20:23.647785Z |
| ncsc-2024-0333 | Kwetsbaarheden verholpen in SAP producten | 2024-08-13T13:47:02.764070Z | 2024-08-13T13:47:02.764070Z |
| ncsc-2024-0332 | Kwetsbaarheden verholpen in Siemens producten | 2024-08-13T09:21:28.381575Z | 2024-08-13T09:21:28.381575Z |
| ncsc-2024-0331 | Kwetsbaarheden verholpen in Zabbix | 2024-08-12T10:34:15.273912Z | 2024-08-12T10:34:15.273912Z |
| ncsc-2024-0330 | Kwetsbaarheid verholpen in Asterisk | 2024-08-12T10:31:33.788930Z | 2024-08-12T10:31:33.788930Z |
| ncsc-2024-0329 | Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition | 2024-08-12T08:24:49.808846Z | 2024-08-12T08:24:49.808846Z |
| ncsc-2024-0328 | Kwetsbaarheden verholpen in IBM InfoSphere | 2024-08-12T08:22:38.701674Z | 2024-08-12T08:22:38.701674Z |
| ncsc-2024-0327 | Kwetsbaarheden verholpen in Cisco Small Business IP Phones | 2024-08-08T08:01:30.827296Z | 2024-08-08T08:01:30.827296Z |
| ncsc-2024-0268 | Kwetsbaarheden verholpen in Progress WhatsUp Gold | 2024-06-26T07:43:11.795773Z | 2024-08-08T07:50:41.453544Z |
| ncsc-2024-0326 | Kwetsbaarheden verholpen in RoundCube Webmail | 2024-08-08T07:45:42.674316Z | 2024-08-08T07:45:42.674316Z |
| ncsc-2024-0325 | Kwetsbaarheden verholpen in Aruba Networks ArubaOS en InstantOS | 2024-08-07T09:04:14.955844Z | 2024-08-07T09:04:14.955844Z |
| ncsc-2024-0324 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2024-08-07T08:58:12.457235Z | 2024-08-07T08:58:12.457235Z |
| ncsc-2024-0323 | Kwetsbaarheden verholpen in Siemens Omnivise | 2024-08-06T09:29:53.292433Z | 2024-08-06T09:29:53.292433Z |
| ncsc-2024-0322 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2024-08-06T09:25:08.253832Z | 2024-08-06T09:25:08.253832Z |
| ncsc-2024-0269 | Kwetsbaarheden verholpen in VMware ESXi en vCenter Server | 2024-06-26T09:02:10.988453Z | 2024-07-30T09:32:13.311694Z |
| ncsc-2024-0321 | Kwetsbaarheid verholpen in Progress MOVEit Transfer | 2024-07-30T08:45:50.286085Z | 2024-07-30T08:45:50.286085Z |
| ncsc-2024-0320 | Kwetsbaarheden verholpen in Apple MacOS | 2024-07-30T08:42:07.365674Z | 2024-07-30T08:42:07.365674Z |
| ncsc-2024-0319 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-07-30T08:39:16.399394Z | 2024-07-30T08:39:16.399394Z |
| ncsc-2024-0318 | Kwetsbaarheden verholpen in Docker Moby | 2024-07-25T11:28:37.900721Z | 2024-07-25T11:28:37.900721Z |
| ncsc-2024-0317 | Kwetsbaarheid gevonden in Ivanti Endpoint Manager | 2024-07-24T14:37:09.864241Z | 2024-07-24T14:37:09.864241Z |
| ncsc-2024-0316 | Kwetsbaarheid verholpen in Broadcom Symantec Privileged Access Management | 2024-07-22T09:17:29.853486Z | 2024-07-22T09:17:29.853486Z |
| ncsc-2024-0315 | Kwetsbaarheid verholpen in Cisco Smart Software Manager On-Prem | 2024-07-19T13:06:00.004663Z | 2024-07-19T13:06:00.004663Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-568428 | SSA-568428: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC | 2022-11-08T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-565356 | SSA-565356: X_T File Parsing Vulnerabilities in Simcenter Femap before V2023.1 | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-506569 | SSA-506569: Multiple Vulnerabilities in SCALANCE W1750D | 2022-11-08T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-313313 | SSA-313313: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS | 2022-10-11T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-252808 | SSA-252808: XPath Constraint Vulnerability in Mendix Runtime | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-997779 | SSA-997779: File Parsing Vulnerability in Solid Edge before V2023 MP1 | 2023-01-10T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-936212 | SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge | 2023-01-10T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-547714 | SSA-547714: Argument Injection Vulnerability in SIMATIC WinCC OA Ultralight Client | 2022-12-13T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-496604 | SSA-496604: Cross-Site Scripting Vulnerability in Mendix SAML Module | 2023-01-10T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-431678 | SSA-431678: Denial of Service Vulnerability in SIMATIC S7 CPU Families | 2020-02-11T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-332410 | SSA-332410: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 1 | 2023-01-10T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-210822 | SSA-210822: Improper Access Control Vulnerability in Mendix Workflow Commons Module | 2022-12-13T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-951513 | SSA-951513: Clickjacking Vulnerability in SCALANCE S, SCALANCE X-300, X-200IRT, X-200RNA and X-200 Switch Families | 2020-02-11T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-849072 | SSA-849072: Several Vulnerabilities in SICAM PAS before V8.06 | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-678983 | SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020) | 2021-05-11T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-638652 | SSA-638652: Authentication Bypass Vulnerability in Mendix SAML Module | 2022-09-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-588101 | SSA-588101: Multiple File Parsing Vulnerabilities in Parasolid | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-480829 | SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches | 2018-06-12T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-443566 | SSA-443566: Authentication Bypass in SCALANCE X Switches Families | 2020-01-14T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-436469 | SSA-436469: TCP Vulnerability in APOGEE/TALON Field Panels | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-412672 | SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-363821 | SSA-363821: Multiple Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-360681 | SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-333517 | SSA-333517: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.0 | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-312271 | SSA-312271: Unquoted Search Path Vulnerability in Windows-based Industrial Software Applications | 2020-06-09T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-274900 | SSA-274900: Use of Hardcoded Key in SCALANCE X Devices Under Certain Conditions | 2021-01-12T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-274282 | SSA-274282: Cross Site Scripting Vulnerability in PLM Help Server V4.2 | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-224632 | SSA-224632: Improper Access Control Vulnerability in Mendix Email Connector Module | 2022-12-13T00:00:00Z | 2022-12-13T00:00:00Z |
| ssa-853037 | SSA-853037: File Parsing Vulnerabilities in Parasolid | 2022-11-08T00:00:00Z | 2022-11-08T00:00:00Z |
| ssa-501891 | SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families | 2022-10-11T00:00:00Z | 2022-11-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0306 | Red Hat Security Advisory: OpenShift Container Platform 4.11.57 bug fix and security update | 2024-01-24T20:54:46+00:00 | 2026-02-21T07:09:00+00:00 |
| rhsa-2024:0050 | Red Hat Security Advisory: OpenShift Container Platform 4.14.8 bug fix and security update | 2024-01-09T16:55:38+00:00 | 2026-02-21T07:09:00+00:00 |
| rhsa-2024:0302 | Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update | 2024-03-06T13:33:21+00:00 | 2026-02-21T07:08:59+00:00 |
| rhsa-2024:0290 | Red Hat Security Advisory: OpenShift Container Platform 4.14.10 bug fix and security update | 2024-01-23T20:26:08+00:00 | 2026-02-21T07:08:58+00:00 |
| rhsa-2024:0273 | Red Hat Security Advisory: OpenShift Virtualization 4.12.9 Images security and bug fix update | 2024-01-17T08:29:36+00:00 | 2026-02-21T07:08:58+00:00 |
| rhsa-2024:0269 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.0 for RHEL 9 | 2024-02-28T00:20:04+00:00 | 2026-02-21T07:08:57+00:00 |
| rhsa-2024:0198 | Red Hat Security Advisory: OpenShift Container Platform 4.12.47 security update | 2024-01-17T18:20:55+00:00 | 2026-02-21T07:08:57+00:00 |
| rhsa-2024:0193 | Red Hat Security Advisory: OpenShift Container Platform 4.13.29 bug fix and security update | 2024-01-17T09:48:09+00:00 | 2026-02-21T07:08:56+00:00 |
| rhsa-2024:0121 | Red Hat Security Advisory: container-tools:4.0 security update | 2024-01-10T11:36:02+00:00 | 2026-02-21T07:08:56+00:00 |
| rhsa-2024:0059 | Red Hat Security Advisory: OpenShift Container Platform 4.11.56 bug fix and security update | 2024-01-10T00:23:49+00:00 | 2026-02-21T07:08:56+00:00 |
| rhsa-2023:7831 | Red Hat Security Advisory: OpenShift Container Platform 4.14.7 bug fix and security update | 2024-01-03T20:04:32+00:00 | 2026-02-21T07:08:54+00:00 |
| rhsa-2023:7827 | Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update | 2024-01-04T14:22:05+00:00 | 2026-02-21T07:08:54+00:00 |
| rhsa-2023:7823 | Red Hat Security Advisory: OpenShift Container Platform 4.12.46 bug fix and security update | 2024-01-04T14:41:38+00:00 | 2026-02-21T07:08:54+00:00 |
| rhsa-2023:7766 | Red Hat Security Advisory: containernetworking-plugins security update | 2023-12-12T17:25:07+00:00 | 2026-02-21T07:08:54+00:00 |
| rhsa-2023:7764 | Red Hat Security Advisory: buildah security update | 2023-12-12T17:29:16+00:00 | 2026-02-21T07:08:54+00:00 |
| rhsa-2023:7765 | Red Hat Security Advisory: podman security update | 2023-12-12T17:24:49+00:00 | 2026-02-21T07:08:53+00:00 |
| rhsa-2023:7763 | Red Hat Security Advisory: runc security update | 2023-12-12T17:25:05+00:00 | 2026-02-21T07:08:52+00:00 |
| rhsa-2023:7762 | Red Hat Security Advisory: skopeo security update | 2023-12-12T17:30:03+00:00 | 2026-02-21T07:08:52+00:00 |
| rhsa-2023:7741 | Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancements, and bug fix update | 2023-12-12T13:55:37+00:00 | 2026-02-21T07:08:52+00:00 |
| rhsa-2023:7710 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.0 security update | 2023-12-11T00:20:04+00:00 | 2026-02-21T07:08:52+00:00 |
| rhsa-2023:7704 | Red Hat Security Advisory: OpenShift Virtualization 4.14.1 security and bug fix update | 2023-12-07T15:00:28+00:00 | 2026-02-21T07:08:52+00:00 |
| rhsa-2023:7703 | Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.10.6 release and security update | 2023-12-07T14:57:07+00:00 | 2026-02-21T07:08:50+00:00 |
| rhsa-2023:7699 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update | 2023-12-07T14:26:32+00:00 | 2026-02-21T07:08:50+00:00 |
| rhsa-2023:7691 | Red Hat Security Advisory: OpenShift Container Platform 4.11.55 bug fix and security update | 2023-12-13T21:44:50+00:00 | 2026-02-21T07:08:49+00:00 |
| rhsa-2023:7690 | Red Hat Security Advisory: OpenShift Container Platform 4.11.55 security update | 2023-12-13T21:03:30+00:00 | 2026-02-21T07:08:49+00:00 |
| rhsa-2023:7687 | Red Hat Security Advisory: OpenShift Container Platform 4.13.26 bug fix and security update | 2023-12-13T00:13:20+00:00 | 2026-02-21T07:08:48+00:00 |
| rhsa-2023:7682 | Red Hat Security Advisory: OpenShift Container Platform 4.14.6 bug fix and security update | 2023-12-12T09:48:40+00:00 | 2026-02-21T07:08:48+00:00 |
| rhsa-2023:7662 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 6.0.3 security update | 2023-12-06T00:20:48+00:00 | 2026-02-21T07:08:48+00:00 |
| rhsa-2023:7608 | Red Hat Security Advisory: OpenShift Container Platform 4.12.45 bug fix and security update | 2023-12-06T17:55:11+00:00 | 2026-02-21T07:08:48+00:00 |
| rhsa-2023:7607 | Red Hat Security Advisory: OpenShift Container Platform 4.12.45 security and extras update | 2023-12-06T16:54:41+00:00 | 2026-02-21T07:08:46+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-16-161-01 | Siemens SIMATIC S7-300 Denial-of-Service Vulnerability | 2016-03-13T07:00:00.000000Z | 2025-06-09T17:20:49.461799Z |
| icsa-12-030-01a | Siemens SIMATIC WinCC Vulnerabilities | 2012-11-02T06:00:00.000000Z | 2025-06-09T16:35:39.943110Z |
| icsa-12-024-02 | MICROSYS PROMOTIC Vulnerabilities | 2012-10-27T06:00:00.000000Z | 2025-06-09T16:35:20.987121Z |
| icsa-12-024-01 | Ocean Data Systems Dream Reports XSS and Write Access Violation Vulnerabilities | 2012-10-27T06:00:00.000000Z | 2025-06-09T16:35:08.232133Z |
| icsa-12-018-01b | Schneider Electric Quantum Ethernet Module Hard-Coded Credentials | 2012-10-21T06:00:00.000000Z | 2025-06-09T16:35:02.023038Z |
| icsa-12-016-01 | Cogent DataHub XSS and CRLF | 2012-10-19T06:00:00.000000Z | 2025-06-09T16:34:49.600837Z |
| icsa-12-013-01 | ING. Punzenberger COPA-DATA GMBH DoS Vulnerabilities | 2012-10-16T06:00:00.000000Z | 2025-06-09T16:34:37.147014Z |
| icsa-12-012-01a | Open Automation Software OPC Systems.NET Vulnerability | 2012-10-15T06:00:00.000000Z | 2025-06-09T16:34:24.700109Z |
| icsa-12-006-01 | 3S CoDeSys Vulnerabilities | 2012-10-09T06:00:00.000000Z | 2025-06-09T16:34:06.000552Z |
| icsa-11-362-01 | ScadaTEC ScadaPhone & Modbus TagServer Buffer Overflow Vulnerability | 2011-09-30T06:00:00.000000Z | 2025-06-09T16:33:59.781942Z |
| icsa-11-361-01 | Siemens Automation License Manager Vulnerabilities | 2011-09-29T06:00:00.000000Z | 2025-06-09T16:33:34.827604Z |
| icsa-11-355-02 | WellinTech KingView History Server Buffer Overflow | 2011-09-23T06:00:00.000000Z | 2025-06-09T16:33:28.540538Z |
| icsa-11-355-01 | 7-Technologies IGSS Buffer Overflow | 2011-09-23T06:00:00.000000Z | 2025-06-09T16:33:22.315361Z |
| icsa-11-353-01 | 7-Technologies Interactive Graphical SCADA | 2011-09-21T06:00:00.000000Z | 2025-06-09T16:33:16.051366Z |
| icsa-11-343-01 | Siemens FactoryLink Multiple ActiveX Vulnerabilities | 2011-09-11T06:00:00.000000Z | 2025-06-09T16:33:03.608185Z |
| icsa-16-026-02 | Rockwell Automation MicroLogix 1100 PLC Overflow Vulnerability | 2016-10-29T06:00:00.000000Z | 2025-06-09T16:32:57.382277Z |
| icsa-16-026-01 | MICROSYS PROMOTIC Memory Corruption Vulnerability | 2016-10-29T06:00:00.000000Z | 2025-06-09T16:32:51.175680Z |
| icsa-16-019-01 | Siemens OZW672 and OZW772 XSS Vulnerability | 2016-10-22T06:00:00.000000Z | 2025-06-09T16:32:44.948067Z |
| icsa-16-014-01 | Advantech WebAccess Vulnerabilities | 2016-10-17T06:00:00.000000Z | 2025-06-09T16:31:10.642130Z |
| icsa-15-356-01 | Siemens RUGGEDCOM ROX-based Devices NTP Vulnerabilities | 2015-09-24T06:00:00.000000Z | 2025-06-09T16:30:45.504574Z |
| icsa-15-351-03 | eWON Vulnerabilities | 2015-09-19T06:00:00.000000Z | 2025-06-09T16:30:08.163522Z |
| icsa-15-351-02 | Motorola MOSCAD SCADA IP Gateway Vulnerabilities | 2015-09-19T06:00:00.000000Z | 2025-06-09T16:29:55.412118Z |
| icsa-15-351-01 | Schneider Electric Modicon M340 Buffer Overflow Vulnerability | 2015-09-19T06:00:00.000000Z | 2025-06-09T16:29:49.200182Z |
| icsa-15-349-01 | Adcon Telemetry A840 Vulnerabilities | 2015-09-17T06:00:00.000000Z | 2025-06-09T16:29:24.204966Z |
| icsa-15-344-02 | Open Automation Software OPC Systems NET DLL Hijacking Vulnerability | 2015-09-12T06:00:00.000000Z | 2025-06-09T16:29:17.938829Z |
| icsa-15-344-01b | Advantech EKI Vulnerabilities (Update B) | 2015-09-12T06:00:00.000000Z | 2025-06-09T16:28:52.618727Z |
| icsa-15-342-02 | LOYTEC Router Information Exposure Vulnerability | 2015-09-10T06:00:00.000000Z | 2025-06-09T16:28:46.089562Z |
| icsa-15-337-03 | Pacom 1000 CCU GMS System Cryptographic Implementation Vulnerabilities | 2015-09-05T06:00:00.000000Z | 2025-06-09T16:28:39.850718Z |
| icsa-15-337-02 | Hospira Multiple Products Buffer Overflow Vulnerability | 2015-09-05T06:00:00.000000Z | 2025-06-09T16:28:33.444166Z |
| icsa-15-337-01 | SearchBlox File Exfiltration Vulnerability | 2015-09-05T06:00:00.000000Z | 2025-06-09T16:28:27.223837Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-struts-C2kCMkmT | Apache Struts Vulnerability Affecting Cisco Products: December 2023 | 2023-12-12T16:00:00+00:00 | 2023-12-21T22:23:04+00:00 |
| cisco-sa-http2-reset-d8kf32vz | HTTP/2 Rapid Reset Attack Affecting Cisco Products: October 2023 | 2023-10-16T16:00:00+00:00 | 2023-12-21T17:09:38+00:00 |
| cisco-sa-http2-reset-d8Kf32vZ | HTTP/2 Rapid Reset Attack Affecting Cisco Products: October 2023 | 2023-10-16T16:00:00+00:00 | 2023-12-21T17:09:38+00:00 |
| cisco-sa-asa-ssl-vpn-y88qom77 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Packet Validation Vulnerability | 2023-12-05T16:00:00+00:00 | 2023-12-05T16:00:00+00:00 |
| cisco-sa-asa-ssl-vpn-Y88QOm77 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Packet Validation Vulnerability | 2023-12-05T16:00:00+00:00 | 2023-12-05T16:00:00+00:00 |
| cisco-sa-ftd-icmpv6-dos-4emklun | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services ICMPv6 with Snort 2 Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-16T21:10:27+00:00 |
| cisco-sa-ftd-icmpv6-dos-4eMkLuN | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services ICMPv6 with Snort 2 Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-16T21:10:27+00:00 |
| cisco-sa-uipphone-xss-ncmuykqa | Cisco IP Phone Stored Cross-Site Scripting Vulnerability | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-uipphone-xss-NcmUykqA | Cisco IP Phone Stored Cross-Site Scripting Vulnerability | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-secure-endpoint-dos-rzogfknd | Cisco Secure Endpoint for Windows Scanning Evasion Vulnerability | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-secure-endpoint-dos-RzOgFKnd | Cisco Secure Endpoint for Windows Scanning Evasion Vulnerability | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-ise-mult-j-kxpnynr | Cisco Identity Services Engine Vulnerabilities | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-ise-mult-j-KxpNynR | Cisco Identity Services Engine Vulnerabilities | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-appd-php-authpriv-gebwtvu5 | Cisco AppDynamics PHP Agent Privilege Escalation Vulnerability | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-appd-php-authpriv-gEBwTvu5 | Cisco AppDynamics PHP Agent Privilege Escalation Vulnerability | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-accsc-dos-9slzkz8 | Cisco Secure Client Software Denial of Service Vulnerabilities | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-accsc-dos-9SLzkZ8 | Cisco Secure Client Software Denial of Service Vulnerabilities | 2023-11-15T16:00:00+00:00 | 2023-11-15T16:00:00+00:00 |
| cisco-sa-asa-icmpv6-t5tzqwnd | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ICMPv6 Message Processing Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-02T13:50:35+00:00 |
| cisco-sa-asa-icmpv6-t5TzqwNd | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ICMPv6 Message Processing Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-02T13:50:35+00:00 |
| cisco-sa-asa-webvpn-dos-3ghzqbas | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-02T13:47:35+00:00 |
| cisco-sa-asa-webvpn-dos-3GhZQBAS | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-02T13:47:35+00:00 |
| cisco-sa-asa-webvpn-loeksnmo | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Client-Side Request Smuggling Vulnerability | 2022-08-10T16:00:00+00:00 | 2023-11-01T16:00:01+00:00 |
| cisco-sa-asa-webvpn-LOeKsNmO | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Client-Side Request Smuggling Vulnerability | 2022-08-10T16:00:00+00:00 | 2023-11-01T16:00:01+00:00 |
| cisco-sa-snort-ftd-zxytnjom | Multiple Cisco Products Snort FTP Inspection Bypass Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-snort-ftd-zXYtnjOM | Multiple Cisco Products Snort FTP Inspection Bypass Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-sa-ftd-snort3-urldos-occfqtex | Cisco Firepower Threat Defense Software SSL/TLS URL Category and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-sa-ftd-snort3-urldos-OccFQTeX | Cisco Firepower Threat Defense Software SSL/TLS URL Category and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ise-injection-qexegrcw | Cisco Identity Services Engine Command Injection Vulnerabilities | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ise-injection-QeXegrCw | Cisco Identity Services Engine Command Injection Vulnerabilities | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| cisco-sa-ise-file-upload-fcelp4xs | Cisco Identity Services Engine Vulnerabilities | 2023-11-01T16:00:00+00:00 | 2023-11-01T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-42232 | libceph: fix race between delayed_work() and ceph_monc_stop() | 2024-08-02T00:00:00.000Z | 2026-02-19T01:19:15.000Z |
| msrc_cve-2024-42244 | USB: serial: mos7840: fix crash on resume | 2024-08-02T00:00:00.000Z | 2026-02-19T01:19:00.000Z |
| msrc_cve-2023-6918 | Libssh: missing checks for return values for digests | 2023-12-01T08:00:00.000Z | 2026-02-19T01:19:00.000Z |
| msrc_cve-2024-50179 | ceph: remove the incorrect Fw reference check when dirtying pages | 2024-11-02T00:00:00.000Z | 2026-02-19T01:18:59.000Z |
| msrc_cve-2025-1094 | PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation | 2025-02-02T00:00:00.000Z | 2026-02-19T01:18:50.000Z |
| msrc_cve-2023-6004 | Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname | 2024-01-01T08:00:00.000Z | 2026-02-19T01:18:50.000Z |
| msrc_cve-2024-50182 | secretmem: disable memfd_secret() if arch cannot set direct map | 2024-11-02T00:00:00.000Z | 2026-02-19T01:18:46.000Z |
| msrc_cve-2024-41096 | PCI/MSI: Fix UAF in msi_capability_init | 2024-07-01T07:00:00.000Z | 2026-02-19T01:18:45.000Z |
| msrc_cve-2022-33065 | Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile allows an attacker to cause Denial of Service or other unspecified impacts. | 2023-07-01T07:00:00.000Z | 2026-02-19T01:18:41.000Z |
| msrc_cve-2024-50063 | bpf: Prevent tail call between progs attached to different hooks | 2024-10-01T07:00:00.000Z | 2026-02-19T01:18:37.000Z |
| msrc_cve-2024-12797 | RFC7250 handshakes with unauthenticated servers don't abort as expected | 2025-02-02T00:00:00.000Z | 2026-02-19T01:18:35.000Z |
| msrc_cve-2022-33064 | An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0 results in a write out of bound which allows an attacker to execute arbitrary code Denial of Service or other unspecified impacts. | 2023-07-01T07:00:00.000Z | 2026-02-19T01:18:31.000Z |
| msrc_cve-2024-50188 | net: phy: dp83869: fix memory corruption when enabling fiber | 2024-11-02T00:00:00.000Z | 2026-02-19T01:18:28.000Z |
| msrc_cve-2024-41092 | drm/i915/gt: Fix potential UAF by revoke of fence registers | 2024-07-01T07:00:00.000Z | 2026-02-19T01:18:26.000Z |
| msrc_cve-2010-2891 | Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters. | 2010-10-02T00:00:00.000Z | 2026-02-19T01:18:21.000Z |
| msrc_cve-2024-41037 | ASoC: SOF: Intel: hda: fix null deref on system suspend entry | 2024-07-01T07:00:00.000Z | 2026-02-19T01:18:17.000Z |
| msrc_cve-2024-50181 | clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D | 2024-11-02T00:00:00.000Z | 2026-02-19T01:18:15.000Z |
| msrc_cve-2023-38712 | An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA such as a duplicated Delete/Notify message a NULL pointer dereference on the deleted state causes the pluto daemon to crash and restart. | 2023-08-01T00:00:00.000Z | 2026-02-19T01:18:09.000Z |
| msrc_cve-2024-42235 | s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() | 2024-08-02T00:00:00.000Z | 2026-02-19T01:18:06.000Z |
| msrc_cve-2024-8929 | Leak partial content of the heap through heap buffer over-read in mysqlnd | 2024-11-02T00:00:00.000Z | 2026-02-19T01:18:04.000Z |
| msrc_cve-2023-38711 | An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN a NULL pointer dereference causes a crash and restart of the pluto daemon. NOTE: the earliest affected version is 4.6. | 2023-08-01T00:00:00.000Z | 2026-02-19T01:17:59.000Z |
| msrc_cve-2024-42245 | Revert "sched/fair: Make sure to try to detach at least one movable task" | 2024-08-02T00:00:00.000Z | 2026-02-19T01:17:57.000Z |
| msrc_cve-2023-38710 | An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1 an error notify INVALID_SPI is sent back. The notify payload's protocol ID is copied from the incoming packet but the code that verifies outgoing packets fails an assertion that the protocol ID must be ESP (2) or AH(3) and causes the pluto daemon to crash and restart. NOTE: the earliest affected version is 3.20. | 2023-08-01T00:00:00.000Z | 2026-02-19T01:17:50.000Z |
| msrc_cve-2024-50180 | fbdev: sisfb: Fix strbuf array overflow | 2024-11-02T00:00:00.000Z | 2026-02-19T01:17:48.000Z |
| msrc_cve-2024-41098 | ata: libata-core: Fix null pointer dereference on error | 2024-07-01T07:00:00.000Z | 2026-02-19T01:17:47.000Z |
| msrc_cve-2023-30570 | pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. | 2023-05-01T00:00:00.000Z | 2026-02-19T01:17:40.000Z |
| msrc_cve-2024-50189 | HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() | 2024-11-02T00:00:00.000Z | 2026-02-19T01:17:38.000Z |
| msrc_cve-2024-41089 | drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes | 2024-07-01T07:00:00.000Z | 2026-02-19T01:17:32.000Z |
| msrc_cve-2024-50141 | ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context | 2024-11-02T00:00:00.000Z | 2026-02-19T01:17:29.000Z |
| msrc_cve-2023-27478 | Disclosure of unrelated data in libmemcached-awesome | 2023-03-10T00:00:00.000Z | 2026-02-19T01:17:25.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15594-1 | azure-storage-azcopy-10.30.1-1.1 on GA media | 2025-10-02T00:00:00Z | 2025-10-02T00:00:00Z |
| opensuse-su-2025:15593-1 | MozillaFirefox-143.0.3-1.1 on GA media | 2025-10-02T00:00:00Z | 2025-10-02T00:00:00Z |
| opensuse-su-2025:15592-1 | libsuricata8_0_1-8.0.1-1.1 on GA media | 2025-10-01T00:00:00Z | 2025-10-01T00:00:00Z |
| opensuse-su-2025:15591-1 | jupyter-jupyterlab-4.4.9-1.1 on GA media | 2025-10-01T00:00:00Z | 2025-10-01T00:00:00Z |
| opensuse-su-2025:15590-1 | curl-8.16.0-1.1 on GA media | 2025-10-01T00:00:00Z | 2025-10-01T00:00:00Z |
| opensuse-su-2025:15589-1 | docker-stable-24.0.9_ce-15.1 on GA media | 2025-09-30T00:00:00Z | 2025-09-30T00:00:00Z |
| opensuse-su-2025:15588-1 | afterburn-5.9.0.git21.a73f509-2.1 on GA media | 2025-09-30T00:00:00Z | 2025-09-30T00:00:00Z |
| opensuse-su-2025:15587-1 | ruby3.4-rubygem-rack-2.2-2.2.18-1.1 on GA media | 2025-09-29T00:00:00Z | 2025-09-29T00:00:00Z |
| opensuse-su-2025:15586-1 | kubecolor-0.5.2-1.1 on GA media | 2025-09-29T00:00:00Z | 2025-09-29T00:00:00Z |
| opensuse-su-2025:15585-1 | kernel-devel-6.16.9-1.1 on GA media | 2025-09-29T00:00:00Z | 2025-09-29T00:00:00Z |
| opensuse-su-2025:15584-1 | gimp-3.0.4-3.1 on GA media | 2025-09-29T00:00:00Z | 2025-09-29T00:00:00Z |
| opensuse-su-2025:15583-1 | cJSON-devel-1.7.19-1.1 on GA media | 2025-09-29T00:00:00Z | 2025-09-29T00:00:00Z |
| opensuse-su-2025:15582-1 | tree-sitter-ruby-0.23.1-2.1 on GA media | 2025-09-26T00:00:00Z | 2025-09-26T00:00:00Z |
| opensuse-su-2025:15581-1 | traefik2-2.11.29-2.1 on GA media | 2025-09-26T00:00:00Z | 2025-09-26T00:00:00Z |
| opensuse-su-2025:15580-1 | postgresql17-17.6-2.1 on GA media | 2025-09-26T00:00:00Z | 2025-09-26T00:00:00Z |
| opensuse-su-2025:15579-1 | openbao-2.4.1-1.1 on GA media | 2025-09-26T00:00:00Z | 2025-09-26T00:00:00Z |
| opensuse-su-2025:15578-1 | chromedriver-140.0.7339.207-1.1 on GA media | 2025-09-26T00:00:00Z | 2025-09-26T00:00:00Z |
| opensuse-su-2025:15577-1 | krita-5.2.13-1.1 on GA media | 2025-09-25T00:00:00Z | 2025-09-25T00:00:00Z |
| opensuse-su-2025:15576-1 | govulncheck-vulndb-0.0.20250924T192141-1.1 on GA media | 2025-09-25T00:00:00Z | 2025-09-25T00:00:00Z |
| opensuse-su-2025:15575-1 | avahi-0.8-40.1 on GA media | 2025-09-24T00:00:00Z | 2025-09-24T00:00:00Z |
| opensuse-su-2025:15574-1 | govulncheck-vulndb-0.0.20250922T204835-1.1 on GA media | 2025-09-23T00:00:00Z | 2025-09-23T00:00:00Z |
| opensuse-su-2025:15573-1 | expat-2.7.2-1.1 on GA media | 2025-09-23T00:00:00Z | 2025-09-23T00:00:00Z |
| opensuse-su-2025:15572-1 | bird3-3.1.4-1.1 on GA media | 2025-09-23T00:00:00Z | 2025-09-23T00:00:00Z |
| opensuse-su-2025:15571-1 | tor-0.4.8.18-1.1 on GA media | 2025-09-22T00:00:00Z | 2025-09-22T00:00:00Z |
| opensuse-su-2025:15570-1 | tcpreplay-4.5.1-2.1 on GA media | 2025-09-22T00:00:00Z | 2025-09-22T00:00:00Z |
| opensuse-su-2025:15569-1 | rke2-1.33-1.33.5+rke2r1-1.1 on GA media | 2025-09-20T00:00:00Z | 2025-09-20T00:00:00Z |
| opensuse-su-2025:15568-1 | ognl-3.4.7-1.1 on GA media | 2025-09-19T00:00:00Z | 2025-09-19T00:00:00Z |
| opensuse-su-2025:15567-1 | mybatis-3.5.19-1.1 on GA media | 2025-09-19T00:00:00Z | 2025-09-19T00:00:00Z |
| opensuse-su-2025:15566-1 | govulncheck-vulndb-0.0.20250918T182144-1.1 on GA media | 2025-09-19T00:00:00Z | 2025-09-19T00:00:00Z |
| opensuse-su-2025:15565-1 | MozillaFirefox-143.0-1.1 on GA media | 2025-09-19T00:00:00Z | 2025-09-19T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-764 | Use-of-uninitialized-value in _cupsStrAlloc | 2024-08-16T00:00:28.318434Z | 2024-08-16T00:00:28.318983Z |
| osv-2024-748 | Security exception in com.github.javaparser.CommentsInserter.insertComments | 2024-08-13T00:04:40.789098Z | 2024-08-13T00:04:40.789448Z |
| osv-2024-747 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-08-13T00:03:34.008550Z | 2024-08-13T00:03:34.008929Z |
| osv-2024-326 | Heap-buffer-overflow in GfxFont::readFontDescriptor | 2024-04-29T05:42:32.273970Z | 2024-08-12T14:13:53.709919Z |
| osv-2024-668 | Security exception in jflex.core.NFA.insertNFA | 2024-07-20T00:01:48.807354Z | 2024-07-20T00:01:48.807879Z |
| osv-2024-517 | Segv on unknown address in od_ec_dec_init | 2024-05-30T00:05:57.060200Z | 2024-07-16T14:24:59.011170Z |
| osv-2024-538 | Use-of-uninitialized-value in QUICVariableInt::size | 2024-06-06T00:12:59.950768Z | 2024-07-16T14:22:07.747083Z |
| osv-2024-473 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-05-15T00:13:12.880068Z | 2024-07-16T14:20:15.561933Z |
| osv-2024-539 | Security exception in com.github.javaparser.CommentsInserter.insertComments | 2024-06-07T00:08:30.308579Z | 2024-07-16T14:19:14.406686Z |
| osv-2024-638 | Heap-buffer-overflow in ih264d_format_convert | 2024-07-13T00:12:13.793261Z | 2024-07-16T14:18:45.507955Z |
| osv-2024-637 | Heap-buffer-overflow in ih264d_format_convert | 2024-07-13T00:08:20.097992Z | 2024-07-16T14:17:43.815608Z |
| osv-2024-22 | Heap-use-after-free in ucl_hash_func | 2024-01-19T00:14:18.833531Z | 2024-07-16T04:35:26.847250Z |
| osv-2024-640 | Null-dereference READ | 2024-07-13T00:15:12.997693Z | 2024-07-13T00:15:12.998025Z |
| osv-2024-636 | Null-dereference READ in evp_mac_final | 2024-07-13T00:04:18.446520Z | 2024-07-13T00:04:18.446812Z |
| osv-2024-635 | Null-dereference READ in do_evp_kdf | 2024-07-13T00:03:44.593921Z | 2024-07-13T00:03:44.594307Z |
| osv-2024-634 | Heap-buffer-overflow in htmlCurrentChar | 2024-07-13T00:03:44.049545Z | 2024-07-13T00:03:44.049863Z |
| osv-2024-627 | Heap-buffer-overflow in gf_hevc_parse_nalu_bs | 2024-07-12T00:01:41.960899Z | 2024-07-12T00:01:41.961272Z |
| osv-2024-602 | Heap-buffer-overflow in ultrahdr::getYuv420Pixel | 2024-06-29T00:09:20.554523Z | 2024-06-29T00:09:20.554958Z |
| osv-2024-555 | Heap-buffer-overflow in ArduinoJson::V704HB22::detail::MsgPackDeserializer<ArduinoJson::V704HB22::detail | 2024-06-13T00:06:28.782972Z | 2024-06-28T14:18:08.360826Z |
| osv-2024-574 | Heap-buffer-overflow in spvtools::disassemble::InstructionDisassembler::EmitInstruction | 2024-06-19T00:15:01.983925Z | 2024-06-25T14:22:08.649397Z |
| osv-2024-535 | Use-of-uninitialized-value in spvTextEncodeOperand | 2024-06-06T00:00:55.007699Z | 2024-06-25T14:21:53.898093Z |
| osv-2024-518 | Security exception in com.github.javaparser.CommentsInserter.insertComments | 2024-05-30T00:16:42.628026Z | 2024-06-24T14:17:55.597576Z |
| osv-2024-577 | Heap-use-after-free in sputs | 2024-06-22T00:14:08.186738Z | 2024-06-22T00:14:08.187320Z |
| osv-2024-575 | UNKNOWN READ in H5SL_remove | 2024-06-20T00:03:37.435999Z | 2024-06-20T00:03:37.436551Z |
| osv-2024-567 | Security exception in jflex.core.NFA.insertNFA | 2024-06-16T00:06:55.824759Z | 2024-06-16T00:06:55.825276Z |
| osv-2024-552 | UNKNOWN READ in ndpi_search_zoom | 2024-06-12T00:12:06.312903Z | 2024-06-12T00:12:06.313282Z |
| osv-2024-551 | Heap-buffer-overflow in mz_zip_mem_read_func | 2024-06-12T00:06:30.075962Z | 2024-06-12T00:06:30.076324Z |
| osv-2024-550 | Heap-buffer-overflow in mz_zip_mem_read_func | 2024-06-12T00:06:02.418206Z | 2024-06-12T00:06:02.418563Z |
| osv-2024-548 | Use-of-uninitialized-value in icalmemory_strdup | 2024-06-12T00:00:26.364017Z | 2024-06-12T00:00:26.364669Z |
| osv-2024-521 | Heap-buffer-overflow in ubidi_writeReordered_76 | 2024-05-31T00:06:51.180600Z | 2024-05-31T00:06:51.181049Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2020-0108 | Soundness issue: Input<R> can be misused to create data race to an object | 2020-12-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0107 | hashconsing's HConsed lacks Send/Sync bound for its Send/Sync trait. | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0106 | Queues allow non-Send types to be sent to other threads, allowing data races | 2020-12-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0105 | Update unsound DrainFilter and RString::retain | 2020-12-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0104 | ImageChunkMut needs bounds on its Send and Sync traits | 2020-12-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0103 | `impl Random` on arrays can lead to dropping uninitialized memory | 2020-12-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0102 | LateStatic has incorrect Sync bound | 2020-11-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0101 | conquer-once's OnceCell lacks Send bound for its Sync trait. | 2020-12-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0100 | Double free when calling `sys_info::disk_info` from multiple threads | 2020-05-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0099 | Aovec<T> lacks bound on its Send and Sync traits allowing data races | 2020-12-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0098 | UsbContext trait did not require implementers to be Send and Sync. | 2020-12-18T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0097 | Soundness issue with base::Error | 2020-12-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0096 | TreeFocus lacks bounds on its Send and Sync traits | 2020-11-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0094 | Unsound: can make `ARefss` contain a !Send, !Sync object. | 2020-12-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0093 | Async-h1 request smuggling possible with long unread bodies | 2020-12-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0092 | Send/Sync bound needed on V in `impl Send/Sync for ARCache<K, V>` | 2020-11-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0091 | Dangling reference in `access::Map` with Constant | 2020-12-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0090 | Thex<T> allows data races of non-Send types across threads | 2020-12-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0089 | nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers | 2020-12-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0088 | MPMCConsumer/Producer allows sending non-Send type across threads | 2020-11-29T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0087 | TryMutex<T> allows sending non-Send type across threads | 2020-11-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0082 | ordered_float:NotNan may contain NaN after panic in assignment operators | 2020-12-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0081 | `mio` invalidly assumes the memory layout of std::net::SocketAddr | 2020-11-02T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0080 | `miow` invalidly assumes the memory layout of std::net::SocketAddr | 2020-11-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0075 | Unexpected panic when decoding tokens | 2020-11-29T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0074 | Reference counting error in `From<Py<T>>` | 2020-11-28T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0073 | Mutable reference with immutable provenance | 2020-11-12T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0072 | GenericMutexGuard allows data races of non-Sync types across threads | 2020-10-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0070 | Some lock_api lock guard objects can cause data races | 2020-11-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0069 | Argument injection in sendmail transport | 2020-11-11T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-libphp-2025-1219 | libxml streams use wrong content-type header when requesting a redirected resource | 2025-08-11T13:54:40.311Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2025-1217 | Header parser of http stream wrapper does not handle folded headers | 2025-08-11T13:54:37.988Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-9026 | PHP-FPM logs from children may be altered | 2025-08-11T13:54:35.937Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8932 | OOB access in ldap_escape | 2025-08-11T13:54:33.535Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8929 | Leak partial content of the heap through heap buffer over-read in mysqlnd | 2025-08-11T13:54:31.347Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8927 | cgi.force_redirect configuration is bypassable due to the environment variable collision | 2025-08-11T13:54:29.171Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8926 | PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass) | 2025-08-11T13:54:27.013Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-8925 | Erroneous parsing of multipart form data | 2025-08-11T13:54:25.174Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-5458 | Filter bypass in filter_var (FILTER_VALIDATE_URL) | 2025-08-11T13:54:20.794Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-3096 | PHP function password_verify can erroneously return true when argument contains NUL | 2025-08-11T13:54:16.977Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-2757 | PHP mb_encode_mimeheader runs endlessly for some inputs | 2025-08-11T13:54:14.986Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-2756 | __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix | 2025-08-11T13:54:12.793Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-1874 | Command injection via array-ish $command parameter of proc_open() | 2025-08-11T13:54:08.513Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11236 | Integer overflow in the firebird and dblib quoters causing OOB writes | 2025-08-11T13:54:06.723Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11234 | Configuring a proxy in a stream context might allow for CRLF injection in URIs | 2025-08-11T13:54:03.025Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2024-11233 | Single byte overread with convert.quoted-printable-decode filter | 2025-08-11T13:54:01.202Z | 2025-11-06T13:25:46.476Z |
| bit-libphp-2022-31629 | $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities | 2025-08-11T13:53:41.681Z | 2025-11-06T13:25:46.476Z |
| bit-kibana-2025-25018 | Kibana Stored Cross-Site Scripting (XSS) | 2025-10-14T08:43:02.190Z | 2025-11-06T13:25:46.476Z |
| bit-kibana-2025-25017 | Kibana Stored Cross-Site Scripting (XSS) | 2025-10-14T08:43:00.623Z | 2025-11-06T13:25:46.476Z |
| bit-kibana-2025-25009 | Kibana Cross-Site Scripting (XSS) | 2025-10-09T08:43:15.178Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 2025-10-16T09:12:52.562Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 2025-10-08T08:43:23.522Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2024-31228 | Denial-of-service due to unbounded pattern matching in Redis | 2024-10-09T16:30:39.030Z | 2025-11-06T13:25:46.476Z |
| bit-keydb-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panic | 2024-08-22T19:25:58.150Z | 2025-11-06T13:25:46.476Z |
| bit-joomla-2020-13763 | 2025-04-03T14:10:16.806Z | 2025-11-06T13:25:46.476Z | |
| bit-joomla-2020-13761 | 2025-04-03T14:10:08.600Z | 2025-11-06T13:25:46.476Z | |
| bit-joomla-2020-13760 | 2025-04-03T14:10:04.787Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2025-59476 | 2025-09-19T09:57:11.182Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2025-59475 | 2025-09-19T09:57:09.400Z | 2025-11-06T13:25:46.476Z | |
| bit-jenkins-2025-59474 | 2025-09-19T09:57:07.574Z | 2025-11-06T13:25:46.476Z |
| ID | Description | Updated |
|---|---|---|
| var-202006-1832 | A memory corruption issue was addressed with improved validation. This issue is fixed in … | 2024-07-23T21:03:26.090000Z |
| var-201801-1712 | Systems with microprocessors utilizing speculative execution and branch prediction may al… | 2024-07-23T21:03:25.229000Z |
| var-201302-0404 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 U… | 2024-07-23T21:03:25.858000Z |
| var-202201-0104 | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtt… | 2024-07-23T21:03:24.853000Z |
| var-201108-0145 | Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before … | 2024-07-23T21:03:24.463000Z |
| var-201904-1403 | The issue was addressed by removing origin information. This issue affected versions prio… | 2024-07-23T21:03:18.489000Z |
| var-200703-0023 | Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assi… | 2024-07-23T21:03:17.231000Z |
| var-201112-0047 | The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64… | 2024-07-23T21:03:15.583000Z |
| var-201210-0132 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:03:14.420000Z |
| var-200512-0749 | The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.… | 2024-07-23T21:03:14.261000Z |
| var-201906-1174 | Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. T… | 2024-07-23T21:03:12.658000Z |
| var-200904-0798 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.1… | 2024-07-23T21:03:08.190000Z |
| var-202201-0304 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15… | 2024-07-23T21:03:06.170000Z |
| var-201107-0023 | WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrar… | 2024-07-23T21:03:05.834000Z |
| var-202103-1001 | An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G… | 2024-07-23T21:02:01.229000Z |
| var-201206-0059 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:01:58.493000Z |
| var-202008-0248 | An elevation of privilege vulnerability exists when an attacker establishes a vulnerable … | 2024-07-23T21:01:54.969000Z |
| var-201910-1646 | By design, BIND is intended to limit the number of TCP clients that can be connected at a… | 2024-07-23T21:01:53.208000Z |
| var-201811-0987 | nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, whic… | 2024-07-23T21:01:53.545000Z |
| var-201306-0225 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:01:21.795000Z |
| var-201205-0393 | Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow re… | 2024-07-23T21:01:21.160000Z |
| var-201204-0092 | Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Poli… | 2024-07-23T21:01:20.651000Z |
| var-201302-0306 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T21:01:18.595000Z |
| var-200712-0594 | Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Se… | 2024-07-23T21:01:17.067000Z |
| var-201512-0485 | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2… | 2024-07-23T21:00:45.295000Z |
| var-200810-0143 | Buffer overflow in PSNormalizer in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to… | 2024-07-23T21:00:45.115000Z |
| var-200809-0195 | Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10… | 2024-07-23T21:00:44.978000Z |
| var-202003-1786 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2024-07-23T21:00:14.087000Z |
| var-200609-0703 | The Installer application in Apple Mac OS X 10.4.8 and earlier, when used by a user with … | 2024-07-23T21:00:06.153000Z |
| var-201711-0473 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T20:59:26.236000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000077 | Fujitsu Software Infrastructure Manager (ISM) stores sensitive information in cleartext | 2023-08-04T17:31+09:00 | 2024-04-03T17:19+09:00 |
| jvndb-2024-003051 | FURUNO SYSTEMS Managed Switch ACERA 9010 running in non MS mode with the initial configuration has no password | 2024-04-02T18:03+09:00 | 2024-04-02T18:03+09:00 |
| jvndb-2024-003050 | KEYENCE VT STUDIO may insecurely load Dynamic Link Libraries | 2024-04-01T14:44+09:00 | 2024-04-01T14:44+09:00 |
| jvndb-2023-000071 | Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters | 2023-07-11T15:37+09:00 | 2024-03-29T15:28+09:00 |
| jvndb-2024-000036 | "Yahoo! JAPAN" App vulnerable to cross-site scripting | 2024-03-29T13:28+09:00 | 2024-03-29T13:28+09:00 |
| jvndb-2023-000079 | Multiple vulnerabilities in Special Interest Group Network for Analysis and Liaison's API | 2023-08-07T15:15+09:00 | 2024-03-28T18:08+09:00 |
| jvndb-2023-000081 | "Rikunabi NEXT" App for Android fails to restrict custom URL schemes properly | 2023-08-09T12:45+09:00 | 2024-03-28T18:01+09:00 |
| jvndb-2023-000080 | "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly | 2023-08-07T17:39+09:00 | 2024-03-28T17:54+09:00 |
| jvndb-2023-000078 | Multiple vulnerabilities in Proself | 2023-08-18T13:47+09:00 | 2024-03-28T17:43+09:00 |
| jvndb-2024-003047 | SEEnergy SVR-116 vulnerable to OS command injection | 2024-03-28T11:38+09:00 | 2024-03-28T11:38+09:00 |
| jvndb-2024-003026 | Security information for Hitachi Disk Array Systems | 2024-03-27T15:52+09:00 | 2024-03-27T15:52+09:00 |
| jvndb-2024-000035 | Multiple vulnerabilities in WordPress Plugin "Survey Maker" | 2024-03-27T14:48+09:00 | 2024-03-27T14:48+09:00 |
| jvndb-2024-000034 | SonicDICOM Media Viewer may insecurely load Dynamic Link Libraries | 2024-03-27T14:31+09:00 | 2024-03-27T14:31+09:00 |
| jvndb-2023-000086 | Rakuten WiFi Pocket vulnerable to improper authentication | 2023-08-23T12:42+09:00 | 2024-03-27T13:43+09:00 |
| jvndb-2024-000905 | Mini Thread vulnerable to cross-site scripting | 2024-03-26T17:43+09:00 | 2024-03-26T17:43+09:00 |
| jvndb-2023-012042 | WordPress plugin "MW WP Form" vulnerable to arbitrary file upload | 2023-12-15T15:17+09:00 | 2024-03-26T17:39+09:00 |
| jvndb-2023-000083 | Multiple vulnerabilities in LuxCal Web Calendar | 2023-08-21T13:29+09:00 | 2024-03-26T17:09+09:00 |
| jvndb-2024-000906 | ffBull vulnerable to OS command injection | 2024-03-26T16:07+09:00 | 2024-03-26T16:07+09:00 |
| jvndb-2024-000900 | "EasyRange" may insecurely load executable files | 2024-03-26T15:50+09:00 | 2024-03-26T15:50+09:00 |
| jvndb-2024-000907 | 0ch BBS Script (0ch) vulnerable to cross-site scripting | 2024-03-26T15:35+09:00 | 2024-03-26T15:35+09:00 |
| jvndb-2024-000902 | TvRock vulnerable to cross-site scripting | 2024-03-26T14:27+09:00 | 2024-03-26T14:27+09:00 |
| jvndb-2024-000904 | WebProxy vulnerable to OS command injection | 2024-03-26T14:19+09:00 | 2024-03-26T14:19+09:00 |
| jvndb-2023-025113 | BUFFALO LinkStation 200 series vulnerable to arbitrary code execution | 2024-03-25T18:16+09:00 | 2024-03-25T18:16+09:00 |
| jvndb-2023-000082 | EC-CUBE 2 series vulnerable to cross-site scripting | 2023-08-17T15:12+09:00 | 2024-03-25T18:07+09:00 |
| jvndb-2023-000084 | WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting | 2023-08-21T14:05+09:00 | 2024-03-25T17:55+09:00 |
| jvndb-2024-000033 | WordPress Plugin "easy-popup-show" vulnerable to cross-site request forgery | 2024-03-25T13:31+09:00 | 2024-03-25T13:31+09:00 |
| jvndb-2023-000055 | ESS REC Agent Server Edition for Linux etc. vulnerable to directory traversal | 2023-05-26T13:58+09:00 | 2024-03-21T17:15+09:00 |
| jvndb-2023-000053 | Tornado vulnerable to open redirect | 2023-05-22T13:30+09:00 | 2024-03-21T17:05+09:00 |
| jvndb-2023-000058 | Pleasanter vulnerable to cross-site scripting | 2023-05-31T15:34+09:00 | 2024-03-19T18:17+09:00 |
| jvndb-2023-002002 | Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) | 2023-06-01T13:48+09:00 | 2024-03-19T18:13+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4275-1 | Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6) | 2025-11-27T10:04:14Z | 2025-11-27T10:04:14Z |
| suse-su-2025:4274-1 | Security update for buildah | 2025-11-27T08:13:05Z | 2025-11-27T08:13:05Z |
| suse-su-2025:4273-1 | Security update for rubygem-rack | 2025-11-27T08:12:25Z | 2025-11-27T08:12:25Z |
| suse-su-2025:4272-1 | Security update for gnutls | 2025-11-27T08:11:48Z | 2025-11-27T08:11:48Z |
| suse-su-2025:4271-1 | Security update for gnutls | 2025-11-27T08:11:37Z | 2025-11-27T08:11:37Z |
| suse-su-2025:4269-1 | Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T21:10:56Z | 2025-11-26T21:10:56Z |
| suse-su-2025:4268-1 | Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T19:33:47Z | 2025-11-26T19:33:47Z |
| suse-su-2025:4265-1 | Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T19:33:40Z | 2025-11-26T19:33:40Z |
| suse-su-2025:21147-1 | Security update for the Linux Kernel | 2025-11-26T15:59:00Z | 2025-11-26T15:59:00Z |
| suse-su-2025:21080-1 | Security update for the Linux Kernel | 2025-11-26T15:59:00Z | 2025-11-26T15:59:00Z |
| suse-su-2025:4264-1 | Security update for ruby2.5 | 2025-11-26T15:52:44Z | 2025-11-26T15:52:44Z |
| suse-su-2025:21180-1 | Security update for the Linux Kernel | 2025-11-26T15:35:38Z | 2025-11-26T15:35:38Z |
| suse-su-2025:4262-1 | Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T15:07:47Z | 2025-11-26T15:07:47Z |
| suse-su-2025:4261-1 | Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6) | 2025-11-26T15:07:28Z | 2025-11-26T15:07:28Z |
| suse-su-2025:2169-1 | Security update for yelp | 2025-11-26T14:47:36Z | 2025-11-26T14:47:36Z |
| suse-su-2025:21145-1 | Security update for curl | 2025-11-26T14:28:47Z | 2025-11-26T14:28:47Z |
| suse-su-2025:21077-1 | Security update for curl | 2025-11-26T14:28:47Z | 2025-11-26T14:28:47Z |
| suse-su-2025:21066-1 | Security update for sssd | 2025-11-26T14:26:51Z | 2025-11-26T14:26:51Z |
| suse-su-2025:21065-1 | Security update for unbound | 2025-11-26T14:26:20Z | 2025-11-26T14:26:20Z |
| suse-su-2025:4258-1 | Security update for python312 | 2025-11-26T13:44:40Z | 2025-11-26T13:44:40Z |
| suse-su-2025:4257-1 | Security update for python311 | 2025-11-26T13:43:01Z | 2025-11-26T13:43:01Z |
| suse-su-2025:4256-1 | Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) | 2025-11-26T13:04:23Z | 2025-11-26T13:04:23Z |
| suse-su-2025:4254-1 | Security update for dpdk | 2025-11-26T11:33:12Z | 2025-11-26T11:33:12Z |
| suse-su-2025:4255-1 | Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5) | 2025-11-26T09:35:19Z | 2025-11-26T09:35:19Z |
| suse-su-2025:4247-1 | Security update for sssd | 2025-11-26T08:56:55Z | 2025-11-26T08:56:55Z |
| suse-su-2025:4245-1 | Security update for buildah | 2025-11-26T08:39:12Z | 2025-11-26T08:39:12Z |
| suse-su-2025:4244-1 | Security update for amazon-ssm-agent | 2025-11-26T08:38:47Z | 2025-11-26T08:38:47Z |
| suse-su-2025:21144-1 | Security update for mysql-connector-java | 2025-11-26T08:13:19Z | 2025-11-26T08:13:19Z |
| suse-su-2025:4243-1 | Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP5) | 2025-11-25T22:06:17Z | 2025-11-25T22:06:17Z |
| suse-su-2025:4242-1 | Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4) | 2025-11-25T21:11:35Z | 2025-11-25T21:11:35Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-04664 | Panda3d栈溢出漏洞 | 2026-01-14 | 2026-01-16 |
| cnvd-2026-04663 | PHPEMS跨站请求伪造漏洞 | 2026-01-15 | 2026-01-16 |
| cnvd-2026-04542 | PHPEMS竞争条件问题漏洞 | 2026-01-14 | 2026-01-16 |
| cnvd-2026-04541 | Open5GS GTPv2-C拒绝服务漏洞 | 2026-01-15 | 2026-01-16 |
| cnvd-2026-04540 | Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request拒绝服务漏洞 | 2026-01-15 | 2026-01-16 |
| cnvd-2026-04539 | Tenda AX-1806路由器栈溢出漏洞 | 2026-01-16 | 2026-01-16 |
| cnvd-2026-04241 | Kentico Xperience CRLF注入漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04240 | Kentico Xperience Content-Type跨站脚本漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04239 | Apple macOS Tahoe安全绕过漏洞（CNVD-2026-04239） | 2025-12-19 | 2026-01-16 |
| cnvd-2026-04238 | Apple macOS Tahoe信息泄露漏洞（CNVD-2026-04238） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04237 | Apple macOS Tahoe存在未明漏洞（CNVD-2026-04237） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04236 | Apple macOS Tahoe信息泄露漏洞（CNVD-2026-04236） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04235 | Apple macOS Tahoe信息泄露漏洞（CNVD-2026-04235） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04234 | Apple macOS Tahoe存在未明漏洞（CNVD-2026-04234） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04233 | Apple macOS Tahoe信息泄露漏洞（CNVD-2026-04233） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04232 | Apple macOS Tahoe存在未明漏洞（CNVD-2026-04232） | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04231 | Apple macOS Tahoe拒绝服务漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04230 | Apple macOS Tahoe信息泄露漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04229 | Apple macOS Tahoe安全绕过漏洞 | 2025-12-25 | 2026-01-16 |
| cnvd-2026-04226 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04226） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04225 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04225） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04224 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04224） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04223 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04223） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04222 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04222） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04221 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04221） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04220 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04220） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04219 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04219） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04218 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04218） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04217 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04217） | 2025-12-15 | 2026-01-16 |
| cnvd-2026-04216 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-04216） | 2025-12-15 | 2026-01-16 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1017 | Multiples vulnérabilités dans Mattermost Server | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1016 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1015 | Multiples vulnérabilités dans les produits NetApp | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| CERTFR-2025-AVI-1017 | Multiples vulnérabilités dans Mattermost Server | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| CERTFR-2025-AVI-1016 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| CERTFR-2025-AVI-1015 | Multiples vulnérabilités dans les produits NetApp | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1014 | Vulnérabilité dans Fortinet FortiWeb | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1013 | Multiples vulnérabilités dans les produits IBM | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1012 | Vulnérabilité dans Microsoft Edge | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1011 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1010 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1009 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1008 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1007 | Multiples vulnérabilités dans PostgreSQL | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1006 | Vulnérabilité dans Cisco Catalyst Center | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-0954 | Multiples vulnérabilités dans Liferay | 2025-11-03T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-0888 | Multiples vulnérabilités dans les produits Mattermost | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| CERTFR-2025-AVI-1014 | Vulnérabilité dans Fortinet FortiWeb | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1013 | Multiples vulnérabilités dans les produits IBM | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1012 | Vulnérabilité dans Microsoft Edge | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1011 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1010 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1009 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1008 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1007 | Multiples vulnérabilités dans PostgreSQL | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1006 | Vulnérabilité dans Cisco Catalyst Center | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-0954 | Multiples vulnérabilités dans Liferay | 2025-11-03T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-0888 | Multiples vulnérabilités dans les produits Mattermost | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-1005 | Multiples vulnérabilités dans les produits Siemens | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| certfr-2025-avi-1004 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-11-13T00:00:00.000000 | 2025-11-13T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-ale-014 | Vulnérabilité d'un grand nombre d'antivirus | 2005-10-11T00:00:00.000000 | 2005-10-11T00:00:00.000000 |
| CERTA-2005-ALE-014 | Vulnérabilité d'un grand nombre d'antivirus | 2005-10-11T00:00:00.000000 | 2005-10-11T00:00:00.000000 |
| certa-2005-ale-011 | Vulnérabilité de HelixPlayer et RealPlayer | 2005-09-27T00:00:00.000000 | 2005-10-10T00:00:00.000000 |
| CERTA-2005-ALE-011 | Vulnérabilité de HelixPlayer et RealPlayer | 2005-09-27T00:00:00.000000 | 2005-10-10T00:00:00.000000 |
| certa-2005-ale-010 | Vulnérabilité dans Qpopper | 2005-09-27T00:00:00.000000 | 2005-09-27T00:00:00.000000 |
| CERTA-2005-ALE-010 | Vulnérabilité dans Qpopper | 2005-09-27T00:00:00.000000 | 2005-09-27T00:00:00.000000 |
| certa-2005-ale-009 | Vulnérabilité dans Mozilla Thunderbird | 2005-09-23T00:00:00.000000 | 2005-09-23T00:00:00.000000 |
| CERTA-2005-ALE-009 | Vulnérabilité dans Mozilla Thunderbird | 2005-09-23T00:00:00.000000 | 2005-09-23T00:00:00.000000 |
| certa-2005-ale-007 | Exploitation de la faille MS05-039 | 2005-08-16T00:00:00.000000 | 2005-08-16T00:00:00.000000 |
| CERTA-2005-ALE-007 | Exploitation de la faille MS05-039 | 2005-08-16T00:00:00.000000 | 2005-08-16T00:00:00.000000 |
| certa-2005-ale-006 | Vulnérabilité du protocole RDP de Microsoft | 2005-07-18T00:00:00.000000 | 2005-08-10T00:00:00.000000 |
| CERTA-2005-ALE-006 | Vulnérabilité du protocole RDP de Microsoft | 2005-07-18T00:00:00.000000 | 2005-08-10T00:00:00.000000 |
| certa-2005-ale-005 | Vulnérabilité d'Internet Explorer | 2005-07-02T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| CERTA-2005-ALE-005 | Vulnérabilité d'Internet Explorer | 2005-07-02T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-ale-004 | Propagation du ver MYTOB | 2005-06-03T00:00:00.000000 | 2005-06-03T00:00:00.000000 |
| CERTA-2005-ALE-004 | Propagation du ver MYTOB | 2005-06-03T00:00:00.000000 | 2005-06-03T00:00:00.000000 |
| certa-2005-ale-003 | Multiples vulnérabilités de Firefox | 2005-05-09T00:00:00.000000 | 2005-05-12T00:00:00.000000 |
| CERTA-2005-ALE-003 | Multiples vulnérabilités de Firefox | 2005-05-09T00:00:00.000000 | 2005-05-12T00:00:00.000000 |
| certa-2005-ale-002 | Exploitation d'une vulnérabilité dans Oracle Database Server | 2005-04-28T00:00:00.000000 | 2005-04-28T00:00:00.000000 |
| CERTA-2005-ALE-002 | Exploitation d'une vulnérabilité dans Oracle Database Server | 2005-04-28T00:00:00.000000 | 2005-04-28T00:00:00.000000 |
| certa-2005-ale-001 | Vulnérabilité d'Internet Explorer | 2005-01-03T00:00:00.000000 | 2005-01-11T00:00:00.000000 |
| CERTA-2005-ALE-001 | Vulnérabilité d'Internet Explorer | 2005-01-03T00:00:00.000000 | 2005-01-11T00:00:00.000000 |
| certa-2004-ale-014 | Exploitation massive d'une faille du forum phpBB | 2004-12-22T00:00:00.000000 | 2004-12-22T00:00:00.000000 |
| CERTA-2004-ALE-014 | Exploitation massive d'une faille du forum phpBB | 2004-12-22T00:00:00.000000 | 2004-12-22T00:00:00.000000 |
| certa-2004-ale-013 | Vulnérabilité dans le composant ActiveX DHTML Edit d'Internet Explorer | 2004-12-20T00:00:00.000000 | 2004-12-20T00:00:00.000000 |
| CERTA-2004-ALE-013 | Vulnérabilité dans le composant ActiveX DHTML Edit d'Internet Explorer | 2004-12-20T00:00:00.000000 | 2004-12-20T00:00:00.000000 |
| certa-2004-ale-012 | Vulnérabilité d'Internet Explorer | 2004-11-09T00:00:00.000000 | 2004-12-02T00:00:00.000000 |
| CERTA-2004-ALE-012 | Vulnérabilité d'Internet Explorer | 2004-11-09T00:00:00.000000 | 2004-12-02T00:00:00.000000 |
| certa-2004-ale-011 | Diffusion de programmes exploitant la faille GDI+ | 2004-09-23T00:00:00.000000 | 2004-09-23T00:00:00.000000 |
| CERTA-2004-ALE-011 | Diffusion de programmes exploitant la faille GDI+ | 2004-09-23T00:00:00.000000 | 2004-09-23T00:00:00.000000 |