Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-69011 |
N/A
|
WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site S… |
WPKube |
Cool Tag Cloud |
2026-02-20T15:46:45.000Z | 2026-02-20T15:46:45.000Z |
| CVE-2025-68895 |
N/A
|
WordPress AhaChat Messenger Marketing plugin <= 1.1 - … |
ahachat |
AhaChat Messenger Marketing |
2026-02-20T15:46:44.814Z | 2026-02-20T15:46:44.814Z |
| CVE-2025-68880 |
N/A
|
WordPress Simple Archive Generator plugin <= 5.2 - Ref… |
peterwsterling |
Simple Archive Generator |
2026-02-20T15:46:44.624Z | 2026-02-20T15:46:44.624Z |
| CVE-2025-68863 |
N/A
|
WordPress iContact for Gravity Forms plugin <= 1.3.2 -… |
Zack Katz |
iContact for Gravity Forms |
2026-02-20T15:46:44.401Z | 2026-02-20T15:46:44.401Z |
| CVE-2025-68862 |
N/A
|
WordPress Woo File Dropzone plugin <= 1.1.7 - Arbitrar… |
Murtaza Bhurgri |
Woo File Dropzone |
2026-02-20T15:46:44.189Z | 2026-02-20T15:46:44.189Z |
| CVE-2025-68856 |
N/A
|
WordPress Mopinion Feedback Form plugin <= 1.1.1 - Ref… |
keeswolters |
Mopinion Feedback Form |
2026-02-20T15:46:44.011Z | 2026-02-20T15:46:44.011Z |
| CVE-2025-68855 |
N/A
|
WordPress JobBoard Job listing plugin <= 1.2.8 - Sensi… |
themeglow |
JobBoard Job listing |
2026-02-20T15:46:43.816Z | 2026-02-20T15:46:43.816Z |
| CVE-2025-68854 |
N/A
|
WordPress ID Arrays plugin <= 2.1.2 - POST-Based Refle… |
harman79 |
ID Arrays |
2026-02-20T15:46:43.644Z | 2026-02-20T15:46:43.644Z |
| CVE-2025-68853 |
N/A
|
WordPress Contact Manager plugin <= 9.1.1 - PHP Object… |
Kleor |
Contact Manager |
2026-02-20T15:46:43.488Z | 2026-02-20T15:46:43.488Z |
| CVE-2025-68852 |
N/A
|
WordPress Court Reservation plugin <= 1.10.9 - Cross S… |
webmuehle |
Court Reservation |
2026-02-20T15:46:43.282Z | 2026-02-20T15:46:43.282Z |
| CVE-2025-68848 |
N/A
|
WordPress amr cron manager plugin <= 2.3 - Reflecte dC… |
anmari |
amr cron manager |
2026-02-20T15:46:43.083Z | 2026-02-20T15:46:43.083Z |
| CVE-2025-68847 |
N/A
|
WordPress iSape plugin <= 0.72 - Reflected Cross Site … |
itex |
iSape |
2026-02-20T15:46:42.884Z | 2026-02-20T15:46:42.884Z |
| CVE-2025-68846 |
N/A
|
WordPress Asynchronous Javascript plugin <= 1.3.5 - Re… |
Paris Holley |
Asynchronous Javascript |
2026-02-20T15:46:42.712Z | 2026-02-20T15:46:42.712Z |
| CVE-2025-68845 |
N/A
|
WordPress eDS Responsive Menu plugin <= 1.2 - Reflecte… |
aThemeArt Translations |
eDS Responsive Menu |
2026-02-20T15:46:42.521Z | 2026-02-20T15:46:42.521Z |
| CVE-2025-68844 |
N/A
|
WordPress Membee Login plugin <= 2.3.6 - Cross Site Sc… |
DaleAB |
Membee Login |
2026-02-20T15:46:42.323Z | 2026-02-20T15:46:42.323Z |
| CVE-2025-68843 |
N/A
|
WordPress FeedWordPress Advanced Filters plugin <= 0.6… |
Bas Schuiling |
FeedWordPress Advanced Filters |
2026-02-20T15:46:42.104Z | 2026-02-20T15:46:42.104Z |
| CVE-2025-68842 |
N/A
|
WordPress Widget Logic Visual plugin <= 1.52 - Reflect… |
totalbounty |
Widget Logic Visual |
2026-02-20T15:46:41.871Z | 2026-02-20T15:46:41.871Z |
| CVE-2025-68841 |
N/A
|
WordPress TopperPack – Complete Elementor Addons, them… |
Themepul |
TopperPack – Complete Elementor Addons, Theme & CPT Builder |
2026-02-20T15:46:41.702Z | 2026-02-20T15:46:41.702Z |
| CVE-2025-68837 |
N/A
|
WordPress ELEX WordPress HelpDesk & Customer Ticketing… |
ELEXtensions |
ELEX WordPress HelpDesk & Customer Ticketing System |
2026-02-20T15:46:41.507Z | 2026-02-20T15:46:41.507Z |
| CVE-2025-68834 |
N/A
|
WordPress Sync Master Sheet – Product Sync with Google… |
Saiful Islam |
Sync Master Sheet – Product Sync with Google Sheet for WooCommerce |
2026-02-20T15:46:41.323Z | 2026-02-20T15:46:41.323Z |
| CVE-2025-68564 |
N/A
|
WordPress Sendy plugin <= 3.4.2 - Broken Access Contro… |
sendy |
Sendy |
2026-02-20T15:46:41.136Z | 2026-02-20T15:46:41.136Z |
| CVE-2025-68552 |
N/A
|
WordPress WooCommerce Coming Soon Product with Countdo… |
WebCodingPlace |
WooCommerce Coming Soon Product with Countdown |
2026-02-20T15:46:40.954Z | 2026-02-20T15:46:40.954Z |
| CVE-2025-68549 |
N/A
|
WordPress Wiguard theme < 2.0.1 - Arbitrary File Uploa… |
zozothemes |
Wiguard |
2026-02-20T15:46:40.793Z | 2026-02-20T15:46:40.793Z |
| CVE-2025-68545 |
N/A
|
WordPress Nika theme <= 1.2.14 - Local File Inclusion … |
thembay |
Nika |
2026-02-20T15:46:40.615Z | 2026-02-20T15:46:40.615Z |
| CVE-2025-68543 |
N/A
|
WordPress Diza theme <= 1.3.15 - Local File Inclusion … |
thembay |
Diza |
2026-02-20T15:46:40.451Z | 2026-02-20T15:46:40.451Z |
| CVE-2025-68542 |
N/A
|
WordPress Checkout Gateway for IRIS plugin <= 1.3 - Br… |
vgdevsolutions |
Checkout Gateway for IRIS |
2026-02-20T15:46:40.232Z | 2026-02-20T15:46:40.232Z |
| CVE-2025-68541 |
N/A
|
WordPress Ippsum theme <= 1.2.0 - PHP Object Injection… |
BoldThemes |
Ippsum |
2026-02-20T15:46:40.047Z | 2026-02-20T15:46:40.047Z |
| CVE-2025-68539 |
N/A
|
WordPress Fana theme <= 1.1.35 - Local File Inclusion … |
thembay |
Fana |
2026-02-20T15:46:39.873Z | 2026-02-20T15:46:39.873Z |
| CVE-2025-68536 |
N/A
|
WordPress Zota theme <= 1.3.14 - Local File Inclusion … |
thembay |
Zota |
2026-02-20T15:46:39.679Z | 2026-02-20T15:46:39.679Z |
| CVE-2025-68534 |
N/A
|
WordPress PDF for WPForms plugin <= 6.3.0 - Broken Acc… |
add-ons.org |
PDF for WPForms |
2026-02-20T15:46:39.366Z | 2026-02-20T15:46:39.366Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-69394 |
N/A
|
WordPress Cnvrse plugin <= 026.02.10.20 - Insecure Dir… |
cnvrse |
Cnvrse |
2026-02-20T15:46:56.050Z | 2026-02-20T15:46:56.050Z |
| CVE-2025-69393 |
N/A
|
WordPress Exzo theme <= 1.2.4 - Broken Access Control … |
Jthemes |
Exzo |
2026-02-20T15:46:55.856Z | 2026-02-20T15:46:55.856Z |
| CVE-2025-69392 |
N/A
|
WordPress iMoney plugin <= 0.36 - Reflected Cross Site… |
itex |
iMoney |
2026-02-20T15:46:55.677Z | 2026-02-20T15:46:55.677Z |
| CVE-2025-69391 |
N/A
|
WordPress Diamond theme <= 2.4.8 - Reflected Cross Sit… |
GT3themes |
Diamond |
2026-02-20T15:46:55.498Z | 2026-02-20T15:46:55.498Z |
| CVE-2025-69390 |
N/A
|
WordPress Business Template Blocks for WPBakery (Visua… |
themebon |
Business Template Blocks for WPBakery (Visual Composer) Page Builder |
2026-02-20T15:46:55.327Z | 2026-02-20T15:46:55.327Z |
| CVE-2025-69389 |
N/A
|
WordPress Visitor Maps Extended Referer Field plugin <… |
Hugh Mungus |
Visitor Maps Extended Referer Field |
2026-02-20T15:46:55.128Z | 2026-02-20T15:46:55.128Z |
| CVE-2025-69388 |
N/A
|
WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken A… |
cliengo |
Cliengo – Chatbot |
2026-02-20T15:46:54.922Z | 2026-02-20T15:46:54.922Z |
| CVE-2025-69387 |
N/A
|
WordPress Simple Retail Menus plugin <= 4.2.1 - Local … |
whatwouldjessedo |
Simple Retail Menus |
2026-02-20T15:46:54.745Z | 2026-02-20T15:46:54.745Z |
| CVE-2025-69386 |
N/A
|
WordPress RVCFDI para Woocommerce plugin <= 8.1.8 - Re… |
realvirtualmx |
RVCFDI para Woocommerce |
2026-02-20T15:46:54.554Z | 2026-02-20T15:46:54.554Z |
| CVE-2025-69385 |
N/A
|
WordPress Cartify - WooCommerce Gutenberg WordPress Th… |
AgniHD |
Cartify - WooCommerce Gutenberg WordPress Theme |
2026-02-20T15:46:54.361Z | 2026-02-20T15:46:54.361Z |
| CVE-2025-69384 |
N/A
|
WordPress Timeline Event History plugin <= 3.2 - Refle… |
wpdiscover |
Timeline Event History |
2026-02-20T15:46:54.106Z | 2026-02-20T15:46:54.106Z |
| CVE-2025-69383 |
N/A
|
WordPress WP shop plugin <= 2.6.1 - Local File Inclusi… |
Agence web Eoxia - Montpellier |
WP shop |
2026-02-20T15:46:53.941Z | 2026-02-20T15:46:53.941Z |
| CVE-2025-69382 |
N/A
|
WordPress Themesflat Elementor plugin <= 1.0.1 - PHP O… |
themesflat |
Themesflat Elementor |
2026-02-20T15:46:53.765Z | 2026-02-20T15:46:53.765Z |
| CVE-2025-69381 |
N/A
|
WordPress WooCommerce Bulk Product Editor plugin <= 3.… |
vanquish |
WooCommerce Bulk Product Editor |
2026-02-20T15:46:53.591Z | 2026-02-20T15:46:53.591Z |
| CVE-2025-69380 |
N/A
|
WordPress Upload Files Anywhere plugin <= 2.8 - Arbitr… |
vanquish |
Upload Files Anywhere |
2026-02-20T15:46:53.401Z | 2026-02-20T15:46:53.401Z |
| CVE-2025-69379 |
N/A
|
WordPress Upload Files Anywhere plugin <= 2.8 - Arbitr… |
vanquish |
Upload Files Anywhere |
2026-02-20T15:46:53.230Z | 2026-02-20T15:46:53.230Z |
| CVE-2025-69378 |
N/A
|
WordPress Product Filter for WooCommerce plugin <= 9.1… |
XforWooCommerce |
Product Filter for WooCommerce |
2026-02-20T15:46:53.046Z | 2026-02-20T15:46:53.046Z |
| CVE-2025-69377 |
N/A
|
WordPress User Extra Fields plugin <= 17.0 - Arbitrary… |
vanquish |
User Extra Fields |
2026-02-20T15:46:52.641Z | 2026-02-20T15:46:52.641Z |
| CVE-2025-69376 |
N/A
|
WordPress User Extra Fields plugin <= 17.0 - Arbitrary… |
vanquish |
User Extra Fields |
2026-02-20T15:46:52.242Z | 2026-02-20T15:46:52.242Z |
| CVE-2025-69375 |
N/A
|
WordPress Portfolio Builder plugin <= 1.2.5 - Local Fi… |
SolverWp |
Portfolio Builder |
2026-02-20T15:46:52.069Z | 2026-02-20T15:46:52.069Z |
| CVE-2025-69374 |
N/A
|
WordPress Eleblog – Elementor Blog And Magazine Addons… |
SolverWp |
Eleblog – Elementor Blog And Magazine Addons |
2026-02-20T15:46:51.890Z | 2026-02-20T15:46:51.890Z |
| CVE-2025-69373 |
N/A
|
WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File … |
beeteam368 |
VidoRev |
2026-02-20T15:46:51.695Z | 2026-02-20T15:46:51.695Z |
| CVE-2025-69372 |
N/A
|
WordPress SevenHills theme <= 1.6.2 - PHP Object Injec… |
AncoraThemes |
SevenHills |
2026-02-20T15:46:51.523Z | 2026-02-20T15:46:51.523Z |
| CVE-2025-69371 |
N/A
|
WordPress KindlyCare theme <= 1.6.1 - PHP Object Injec… |
AncoraThemes |
KindlyCare |
2026-02-20T15:46:51.329Z | 2026-02-20T15:46:51.329Z |
| CVE-2025-69370 |
N/A
|
WordPress Capella theme <= 2.5.5 - PHP Object Injectio… |
ThemeGoods |
Capella |
2026-02-20T15:46:51.123Z | 2026-02-20T15:46:51.123Z |
| CVE-2025-69368 |
N/A
|
WordPress SOHO - Photography WordPress Theme theme <= … |
GT3themes |
SOHO - Photography WordPress Theme |
2026-02-20T15:46:50.944Z | 2026-02-20T15:46:50.944Z |
| CVE-2025-69367 |
N/A
|
WordPress Oyster - Photography WordPress Theme theme <… |
GT3themes |
Oyster - Photography WordPress Theme |
2026-02-20T15:46:50.750Z | 2026-02-20T15:46:50.750Z |
| CVE-2025-69366 |
N/A
|
WordPress Emerce Core plugin <= 1.8 - SQL Injection vu… |
TeconceTheme |
Emerce Core |
2026-02-20T15:46:50.573Z | 2026-02-20T15:46:50.573Z |
| CVE-2025-69365 |
N/A
|
WordPress Uroan Core plugin <= 1.4.4 - SQL Injection v… |
TeconceTheme |
Uroan Core |
2026-02-20T15:46:50.375Z | 2026-02-20T15:46:50.375Z |
| CVE-2025-69337 |
N/A
|
WordPress Wolmart Core plugin <= 1.9.6 - SQL Injection… |
don-themes |
Wolmart Core |
2026-02-20T15:46:50.197Z | 2026-02-20T15:46:50.197Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-69391 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:24.570 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69390 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:24.433 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69389 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:24.300 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69388 | Missing Authorization vulnerability in cliengo Cliengo – Chatbot cliengo allows Exploiting Incorrec… | 2026-02-20T16:22:24.153 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69387 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:24.007 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69386 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:23.867 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69385 | Missing Authorization vulnerability in AgniHD Cartify - WooCommerce Gutenberg WordPress Theme carti… | 2026-02-20T16:22:23.687 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69384 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:23.523 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69383 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:23.023 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69382 | Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-eleme… | 2026-02-20T16:22:22.873 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69381 | Missing Authorization vulnerability in vanquish WooCommerce Bulk Product Editor woocommerce-quick-p… | 2026-02-20T16:22:22.707 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69380 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in van… | 2026-02-20T16:22:22.570 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69379 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in van… | 2026-02-20T16:22:22.443 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69378 | Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdc… | 2026-02-20T16:22:22.297 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69377 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in van… | 2026-02-20T16:22:22.147 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69376 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in van… | 2026-02-20T16:22:22.003 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69375 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:21.857 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69374 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:21.717 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69373 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-02-20T16:22:21.580 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69372 | Deserialization of Untrusted Data vulnerability in AncoraThemes SevenHills sevenhills allows Object… | 2026-02-20T16:22:21.440 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69371 | Deserialization of Untrusted Data vulnerability in AncoraThemes KindlyCare kindlycare allows Object… | 2026-02-20T16:22:21.300 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69370 | Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injecti… | 2026-02-20T16:22:21.153 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69368 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:21.020 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69367 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:20.880 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69366 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-20T16:22:20.740 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69365 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-20T16:22:20.600 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69337 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-20T16:22:20.457 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69330 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:20.317 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69329 | Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injectio… | 2026-02-20T16:22:20.173 | 2026-02-20T16:55:22.933 |
| fkie_cve-2025-69328 | Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager bookin… | 2026-02-20T16:22:20.047 | 2026-02-20T16:55:22.933 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-hpg7-358g-wg3c |
4.4 (3.1)
|
The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-hj2m-xgwr-hhp4 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-h972-rpm4-hj8q |
6.5 (3.1)
|
The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in … | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-h72r-rmwf-cp7j |
5.4 (3.1)
4.8 (4.0)
|
SPIP before 4.4.9 allows Cross-Site Scripting (XSS) in the private area, complementing an incomplet… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-ffpr-483m-cpm5 |
8.1 (3.1)
|
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assign… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-f6rv-5qch-vwvw |
8.5 (4.0)
|
A SSRF and Arbitrary File Read vulnerability in AppSheet Core in Google AppSheet prior to 2025-11-2… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-f5cj-cgw5-mj38 |
4.3 (3.1)
5.3 (4.0)
|
SPIP before 4.4.9 allows Blind Server-Side Request Forgery (SSRF) via syndicated sites in the priva… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-cjfp-957w-fgm8 |
9.8 (3.1)
|
Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Tra… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-cgwr-5223-r4pg |
4.3 (3.1)
5.3 (4.0)
|
SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. T… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-c977-4m9f-fcfc |
5.3 (3.1)
|
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulne… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-9cwr-5hg5-h48h |
4.7 (3.1)
|
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of S… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-9636-r3rx-jw83 |
5.1 (4.0)
|
Reflected Cross-site Scripting (XSS) in Alkacon's OpenCms v18.0, which allows an attacker to execut… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-8v9w-wqxw-hp8g |
10.0 (3.1)
|
Due to the use of a vulnerable third-party Velocity template engine, a malicious actor with admin p… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-86cf-7cvr-x43r |
6.1 (3.1)
5.1 (4.0)
|
SPIP before 4.4.5 and 4.3.9 allows an Open Redirect via the login form when used in AJAX mode. An a… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-7wc5-wjpj-2r5j |
4.7 (3.1)
2.1 (4.0)
|
SPIP before 4.4.8 allows Cross-Site Scripting (XSS) in the public area for certain edge-case usage … | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-74m2-9pf8-f794 |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) in Alkacon's OpenCms v18.0, which occurs when user input is not p… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-6x8c-24f7-p33h |
|
An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-6rf6-5vpq-5mc7 |
6.4 (3.1)
5.1 (4.0)
|
SPIP before 4.4.9 allows Stored Cross-Site Scripting (XSS) via syndicated sites in the private area… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-4vj8-cj7h-j8rx |
6.5 (3.1)
|
Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorre… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-4h76-926q-wxxw |
4.7 (3.1)
|
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote att… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-4374-6xfq-3wjw |
9.8 (3.1)
9.3 (4.0)
|
The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a cr… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-3cj5-wr93-33x7 |
5.4 (3.1)
4.8 (4.0)
|
SPIP before 4.2.15 allows Cross-Site Scripting (XSS) via crafted content in HTML code tags. The app… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-25cv-hf25-fqf8 |
|
Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7_P161006 (Build.0333.250211) allows an a… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-x44w-4824-m48x |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path v… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-wh7q-jq87-h3wq |
5.3 (3.1)
|
Missing Authorization vulnerability in LeadConnector LeadConnector leadconnector allows Exploiting … | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-wfhf-6fj8-r5gx |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A l… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-w9rp-vxw4-rq3m |
5.3 (3.1)
|
Missing Authorization vulnerability in PI Web Solution Live sales notification for WooCommerce live… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-j7cf-x368-v6h6 |
|
Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting I… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-h95f-qq66-v95j |
4.4 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in totalsoft TS Poll poll-wp allows Server Side Re… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-fjm7-6rv9-337h |
8.1 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path v… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2019-241 |
9.8 (3.1)
|
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp … | gdal | 2019-10-14T02:15:00+00:00 | 2023-11-13T19:19:43.892449+00:00 |
| pysec-2023-232 |
|
We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed the… | apache-airflow | 2023-11-12T14:15:00+00:00 | 2023-11-12T16:29:15.404665+00:00 |
| pysec-2023-231 |
|
Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user… | apache-airflow | 2023-11-12T14:15:00+00:00 | 2023-11-12T16:29:15.321733+00:00 |
| pysec-2023-230 |
5.3 (3.1)
|
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cache… | matrix-synapse | 2023-10-31T17:15:00+00:00 | 2023-11-08T20:24:49.199333+00:00 |
| pysec-2023-221 |
7.5 (3.1)
|
Werkzeug is a comprehensive WSGI web application library. If an upload of a file that sta… | werkzeug | 2023-10-25T18:17:00Z | 2023-11-08T18:38:34.170214Z |
| pysec-2022-43064 |
8.8 (3.1)
|
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a que… | pytigergraph | 2022-09-05T16:15:00+00:00 | 2023-11-07T20:24:26.101389+00:00 |
| pysec-2022-43062 |
7.8 (3.1)
|
A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by… | pacparser | 2022-12-13T18:15:00+00:00 | 2023-11-07T20:24:25.809231+00:00 |
| pysec-2012-21 |
|
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before F… | nova | 2012-08-20T18:55:00+00:00 | 2023-11-07T20:24:25.753827+00:00 |
| pysec-2012-20 |
|
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token… | keystone | 2012-12-18T01:55:00+00:00 | 2023-11-07T20:24:25.260316+00:00 |
| pysec-2012-19 |
|
OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (20… | keystone | 2012-09-05T23:55:00+00:00 | 2023-11-07T20:24:25.208233+00:00 |
| pysec-2012-18 |
|
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex… | horizon | 2012-09-05T23:55:00+00:00 | 2023-11-07T20:24:25.109703+00:00 |
| pysec-2022-43061 |
6.1 (3.1)
|
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic… | django-photologue | 2022-12-15T21:15:00+00:00 | 2023-11-07T20:24:24.147635+00:00 |
| pysec-2022-43060 |
5.9 (3.1)
|
The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the conn… | apache-bookkeeper-client | 2022-12-15T19:15:00+00:00 | 2023-11-07T20:24:23.853507+00:00 |
| pysec-2021-876 |
6.5 (3.1)
|
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any ten… | apache-dolphinscheduler | 2021-01-11T10:15:00+00:00 | 2023-11-07T20:24:23.899306+00:00 |
| pysec-2020-342 |
9.8 (3.1)
|
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL i… | apache-skywalking | 2020-08-05T14:15:00+00:00 | 2023-11-07T20:24:23.946863+00:00 |
| pysec-2023-229 |
5.4 (3.1)
|
ArchiveBox is an open source self-hosted web archiving system. Any users who are using th… | archivebox | 2023-10-19T22:15:00+00:00 | 2023-11-04T04:27:37.550377+00:00 |
| pysec-2023-228 |
3.3 (3.1)
|
When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip p… | pip | 2023-10-25T18:17:00+00:00 | 2023-11-03T16:28:41.538340+00:00 |
| pysec-2023-227 |
|
An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrol… | pillow | 2023-11-03T05:15:00+00:00 | 2023-11-03T10:29:41.505456+00:00 |
| pysec-2023-226 |
|
In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.te… | django | 2023-11-03T05:15:00+00:00 | 2023-11-03T10:29:40.328470+00:00 |
| pysec-2023-225 |
|
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encodi… | django | 2023-11-03T05:15:00+00:00 | 2023-11-03T10:29:40.160394+00:00 |
| pysec-2023-224 |
5.3 (3.1)
|
Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc… | twisted | 2023-10-25T21:15:00+00:00 | 2023-11-02T16:33:16.395026+00:00 |
| pysec-2023-223 |
|
Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attacke… | transmute-core | 2023-11-02T06:15:00+00:00 | 2023-11-02T10:30:07.951105+00:00 |
| pysec-2023-222 |
|
An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.… | django | 2023-11-02T06:15:00+00:00 | 2023-11-02T10:30:06.341485+00:00 |
| pysec-2023-220 |
6.5 (3.1)
|
Nautobot is a Network Automation Platform built as a web application atop the Django Pyth… | nautobot | 2023-10-25T18:17:00+00:00 | 2023-11-01T18:30:02.084237+00:00 |
| pysec-2023-219 |
2.7 (3.1)
|
Wagtail is an open source content management system built on Django. A user with a limite… | wagtail | 2023-10-19T19:15:00+00:00 | 2023-10-31T20:23:51.857051+00:00 |
| pysec-2023-178 |
7.5 (3.1)
|
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. … | plone-rest | 2023-09-21T15:15:00Z | 2023-10-28T20:22:08.431825Z |
| pysec-2023-218 |
4.3 (3.1)
|
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflo… | apache-airflow | 2023-10-23T19:15:00+00:00 | 2023-10-28T05:24:46.485079+00:00 |
| pysec-2023-217 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2. | modoboa | 2023-10-20T17:15:00+00:00 | 2023-10-27T20:23:07.873996+00:00 |
| pysec-2023-216 |
5.4 (3.1)
|
Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. | modoboa | 2023-10-20T17:15:00+00:00 | 2023-10-27T20:23:07.820957+00:00 |
| pysec-2023-215 |
5.4 (3.1)
|
Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. | modoboa | 2023-10-20T17:15:00+00:00 | 2023-10-27T20:23:07.768462+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33373 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.744340Z |
| gsd-2024-33372 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.731595Z |
| gsd-2024-33371 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.688740Z |
| gsd-2024-33370 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.622882Z |
| gsd-2024-33369 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.622410Z |
| gsd-2024-33368 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.753782Z |
| gsd-2024-33367 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.657978Z |
| gsd-2024-33366 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.746377Z |
| gsd-2024-33365 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.758070Z |
| gsd-2024-33364 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.722261Z |
| gsd-2024-33363 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.630067Z |
| gsd-2024-33362 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.734172Z |
| gsd-2024-33361 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.752033Z |
| gsd-2024-33360 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.760329Z |
| gsd-2024-33359 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.714714Z |
| gsd-2024-33358 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.694949Z |
| gsd-2024-33357 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738772Z |
| gsd-2024-33356 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.666212Z |
| gsd-2024-33355 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.608700Z |
| gsd-2024-33354 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.706465Z |
| gsd-2024-33353 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.618571Z |
| gsd-2024-33352 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.697823Z |
| gsd-2024-33351 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.693072Z |
| gsd-2024-33350 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.695535Z |
| gsd-2024-33349 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.678289Z |
| gsd-2024-33348 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.710252Z |
| gsd-2024-33347 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.615800Z |
| gsd-2024-33346 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.613516Z |
| gsd-2024-33345 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.613933Z |
| gsd-2024-33344 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function ofuploa… | 2024-04-24T05:02:09.615605Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-580 | Malicious code in somesomesome (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| mal-2026-579 | Malicious code in skndkjasndkjan (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| mal-2026-576 | Malicious code in teslaone (npm) | 2026-01-28T07:49:34Z | 2026-02-02T05:56:30Z |
| mal-2026-575 | Malicious code in syntax-jsx (npm) | 2026-01-28T07:43:54Z | 2026-02-02T05:56:30Z |
| mal-2026-574 | Malicious code in syntax-flow (npm) | 2026-01-28T07:43:54Z | 2026-02-02T05:56:30Z |
| mal-2026-559 | Malicious code in syntax-async-functions (npm) | 2026-01-28T06:44:48Z | 2026-02-02T05:56:30Z |
| mal-2026-545 | Malicious code in testxhjhka (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| mal-2026-544 | Malicious code in testxhjhk (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| mal-2026-543 | Malicious code in tailwind-components-cli (npm) | 2026-01-27T07:59:05Z | 2026-02-02T05:56:30Z |
| mal-2026-542 | Malicious code in stylus.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:30Z |
| mal-2026-525 | Malicious code in sandbox-hooks (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:30Z |
| MAL-2026-615 | Malicious code in teaser-nav (npm) | 2026-01-31T13:35:28Z | 2026-02-02T05:56:30Z |
| MAL-2026-612 | Malicious code in sharedclasses (npm) | 2026-01-30T23:47:34Z | 2026-02-02T05:56:30Z |
| MAL-2026-600 | Malicious code in researchpoc2 (npm) | 2026-01-29T04:22:59Z | 2026-02-02T05:56:30Z |
| MAL-2026-582 | Malicious code in somsodamsd (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| MAL-2026-581 | Malicious code in somesomesomesome (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| MAL-2026-580 | Malicious code in somesomesome (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| MAL-2026-579 | Malicious code in skndkjasndkjan (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:30Z |
| MAL-2026-576 | Malicious code in teslaone (npm) | 2026-01-28T07:49:34Z | 2026-02-02T05:56:30Z |
| MAL-2026-575 | Malicious code in syntax-jsx (npm) | 2026-01-28T07:43:54Z | 2026-02-02T05:56:30Z |
| MAL-2026-574 | Malicious code in syntax-flow (npm) | 2026-01-28T07:43:54Z | 2026-02-02T05:56:30Z |
| MAL-2026-559 | Malicious code in syntax-async-functions (npm) | 2026-01-28T06:44:48Z | 2026-02-02T05:56:30Z |
| MAL-2026-545 | Malicious code in testxhjhka (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| MAL-2026-544 | Malicious code in testxhjhk (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| MAL-2026-543 | Malicious code in tailwind-components-cli (npm) | 2026-01-27T07:59:05Z | 2026-02-02T05:56:30Z |
| MAL-2026-542 | Malicious code in stylus.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:30Z |
| MAL-2026-525 | Malicious code in sandbox-hooks (npm) | 2026-01-27T02:25:01Z | 2026-02-02T05:56:30Z |
| mal-2026-611 | Malicious code in mbo-letters-cl (npm) | 2026-01-30T23:13:08Z | 2026-02-02T05:56:29Z |
| mal-2026-597 | Malicious code in n8n-nodes-comfyui-illu (npm) | 2026-01-29T03:52:09Z | 2026-02-02T05:56:29Z |
| mal-2026-573 | Malicious code in primebeem-db (npm) | 2026-01-28T07:27:26Z | 2026-02-02T05:56:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1519 | Juniper JUNOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-07-09T22:00:00.000+00:00 | 2025-10-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1077 | VMware Tanzu Spring Framework: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-15T22:00:00.000+00:00 | 2025-10-08T22:00:00.000+00:00 |
| wid-sec-w-2025-0954 | Apache ActiveMQ: Schwachstelle ermöglicht Denial of Service | 2025-05-06T22:00:00.000+00:00 | 2025-10-08T22:00:00.000+00:00 |
| wid-sec-w-2025-2181 | Logback: Schwachstelle ermöglicht Codeausführung | 2025-10-01T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2171 | Red Hat Enterprise Linux (JSON-XS Perl): Schwachstelle ermöglicht Denial of Service | 2025-09-30T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2164 | Red Hat Enterprise Linux (FreeIPA): Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-09-30T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2075 | Podman: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-16T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2043 | IBM QRadar SIEM: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1980 | IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-04T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1968 | pgAdmin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1817 | NGINX: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-13T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-2716 | docker: Mehrere Schwachstellen | 2021-02-02T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-1751 | systemd: Schwachstelle ermöglicht Manipulation von Einträgen | 2023-07-13T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-1183 | docker: Mehrere Schwachstellen | 2023-05-09T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-1124 | docker: Mehrere Schwachstellen | 2021-10-04T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0157 | Red Hat OpenShift: Mehrere Schwachstellen | 2023-01-19T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0152 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-01-18T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0089 | Python: Schwachstelle ermöglicht Denial of Service | 2023-01-12T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0066 | sudo: Schwachstelle ermöglicht Privilegieneskalation | 2021-01-26T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-0243 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2021-06-27T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-0242 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2021-05-26T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-0214 | Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-07-21T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2157 | Apple iOS, iPadOS and macOS (Font Parser): Schwachstelle ermöglicht Denial of Service | 2025-09-29T22:00:00.000+00:00 | 2025-09-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2149 | IBM License Metric Tool: Mehrere Schwachstellen | 2025-09-28T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-2117 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-09-23T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-2074 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-2073 | ESRI ArcGIS: Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1981 | ImageMagick (MagickCore blob): Schwachstelle ermöglicht Codeausführung | 2025-09-04T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1863 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2025-08-19T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1847 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2025-08-14T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0253 | Kwetsbaarheid verholpen in Adobe Photoshop | 2024-06-13T13:31:15.643260Z | 2024-06-13T13:31:15.643260Z |
| ncsc-2024-0252 | Kwetsbaarheden verholpen in Microsoft Dynamics | 2024-06-11T18:23:19.082621Z | 2024-06-11T18:23:19.082621Z |
| ncsc-2024-0251 | Kwetsbaarheden verholpen in Microsoft Office | 2024-06-11T18:20:51.628241Z | 2024-06-11T18:20:51.628241Z |
| ncsc-2024-0250 | Kwetsbaarheden verholpen in Microsoft Visual Studio | 2024-06-11T18:18:10.131111Z | 2024-06-11T18:18:10.131111Z |
| ncsc-2024-0249 | Kwetsbaarheden verholpen in Microsoft Azure | 2024-06-11T18:15:29.806897Z | 2024-06-11T18:15:29.806897Z |
| ncsc-2024-0248 | Kwetsbaarheden verholpen in Microsoft Windows | 2024-06-11T18:06:57.087085Z | 2024-06-11T18:11:31.381556Z |
| ncsc-2024-0246 | Kwetsbaarheden verholpen in Siemens producten | 2024-06-11T13:29:25.912614Z | 2024-06-11T13:29:25.912614Z |
| ncsc-2024-0247 | Kwetsbaarheden verholpen in SAP producten | 2024-06-11T12:37:09.525507Z | 2024-06-11T12:37:09.525507Z |
| ncsc-2024-0245 | Kwetsbaarheden verholpen in Trend Micro Apex One | 2024-06-11T11:51:02.976099Z | 2024-06-11T11:51:02.976099Z |
| ncsc-2024-0244 | Kwetsbaarheden verholpen in Schneider Electric Sage RTU systemen | 2024-06-11T11:33:48.933251Z | 2024-06-11T11:33:48.933251Z |
| ncsc-2024-0232 | Kwetsbaarheden verholpen in Veeam Backup Enterprise Manager | 2024-05-22T11:42:48.155465Z | 2024-06-11T11:33:12.845658Z |
| ncsc-2024-0243 | Kwetsbaarheden verholpen in PHP | 2024-06-10T07:02:05.106950Z | 2024-06-10T07:02:05.106950Z |
| ncsc-2024-0242 | Kwetsbaarheden verholpen in RoundCube Webmail | 2024-06-07T11:01:13.397121Z | 2024-06-07T11:01:13.397121Z |
| ncsc-2024-0241 | Kwetsbaarheden verholpen in FortiNet FortiWebManager | 2024-06-07T07:22:27.233971Z | 2024-06-07T07:22:27.233971Z |
| ncsc-2024-0240 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2024-06-07T07:21:29.492650Z | 2024-06-07T07:21:29.492650Z |
| ncsc-2024-0239 | Kwetsbaarheden verholpen in Solarwinds Platform | 2024-06-07T06:26:01.172456Z | 2024-06-07T06:26:01.172456Z |
| ncsc-2024-0238 | Kwetsbaarheid verholpen in Check Point VPN producten | 2024-05-30T07:56:46.220112Z | 2024-05-30T07:56:46.220112Z |
| ncsc-2024-0237 | Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition | 2024-05-27T11:26:30.888877Z | 2024-05-27T11:26:30.888877Z |
| ncsc-2024-0235 | Kwetsbaarheid verholpen in Google Chrome | 2024-05-27T07:10:26.268379Z | 2024-05-27T07:50:35.517237Z |
| ncsc-2024-0234 | Kwetsbaarheid verholpen in Github Enterprise Server | 2024-05-23T10:57:36.609416Z | 2024-05-23T10:57:36.609416Z |
| ncsc-2024-0233 | Kwetsbaarheden verholpen in Cisco producten | 2024-05-23T10:56:24.310012Z | 2024-05-23T10:56:24.310012Z |
| ncsc-2024-0231 | Kwetsbaarheden verholpen in Atlassian producten | 2024-05-22T11:13:07.693855Z | 2024-05-22T11:13:07.693855Z |
| ncsc-2024-0230 | Kwetsbaarheden verholpen in QNAP QTS en QTS Hero | 2024-05-22T08:02:19.922765Z | 2024-05-22T08:02:19.922765Z |
| ncsc-2024-0229 | Kwetsbaarheid verholpen in QlikSense Enterprise | 2024-05-22T05:33:44.910098Z | 2024-05-22T05:33:44.910098Z |
| ncsc-2024-0228 | Kwetsbaarheden verholpen in SAP producten | 2024-05-17T11:28:01.264255Z | 2024-05-17T11:28:01.264255Z |
| ncsc-2024-0227 | Kwetsbaarheden verholpen in Adobe Illustrator | 2024-05-16T12:59:04.595951Z | 2024-05-16T12:59:04.595951Z |
| ncsc-2024-0226 | Kwetsbaarheden verholpen in Adobe Animate | 2024-05-16T12:55:49.361352Z | 2024-05-16T12:55:49.361352Z |
| ncsc-2024-0225 | Kwetsbaarheden verholpen in Adobe FrameMaker | 2024-05-16T12:54:55.359838Z | 2024-05-16T12:54:55.359838Z |
| ncsc-2024-0224 | Kwetsbaarheid verholpen in Adobe Dreamweaver | 2024-05-16T12:45:03.866353Z | 2024-05-16T12:45:03.866353Z |
| ncsc-2024-0223 | Kwetsbaarheden verholpen in Adobe Acrobat Reader | 2024-05-16T12:44:31.298431Z | 2024-05-16T12:44:31.298431Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-145224 | SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices | 2022-06-14T00:00:00Z | 2022-06-14T00:00:00Z |
| ssa-787292 | SSA-787292: Denial of Service Vulnerability in SIMATIC RFID Readers | 2021-06-08T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-756638 | SSA-756638: Vulnerabilities in Third-Party Component Mbed TLS of LOGO! CMR Family and SIMATIC RTU 3000 Family | 2021-09-14T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-736385 | SSA-736385: Memory Corruption Vulnerability in OpenV2G | 2022-05-10T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-560465 | SSA-560465: DHCP Client Vulnerability in VxWorks-based Industrial Products | 2021-07-13T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-553086 | SSA-553086: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization | 2022-05-10T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-480937 | SSA-480937: Denial of Service Vulnerability in CP 44x-1 RNA before V1.5.18 | 2022-05-10T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-165073 | SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices | 2022-05-10T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-162616 | SSA-162616: File Parsing Vulnerabilities in Simcenter Femap before V2022.2 | 2022-05-10T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-114589 | SSA-114589: Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products | 2021-11-09T00:00:00Z | 2022-05-10T00:00:00Z |
| ssa-998762 | SSA-998762: File Parsing Vulnerabilities in Simcenter Femap before V2022.1.2 | 2022-04-12T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-995338 | SSA-995338: Multiple Vulnerabilities in COMOS Web | 2022-01-11T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-870917 | SSA-870917: Improper Access Control Vulnerability in Mendix | 2022-04-12T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-836527 | SSA-836527: Multiple Vulnerabilities in SCALANCE X-300 Switch Family Devices | 2022-04-12T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-672373 | SSA-672373: Vulnerabilities in CP 1543-1 before V2.0.28 | 2016-11-18T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-655554 | SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1 | 2022-04-12T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-562051 | SSA-562051: Cross-Site Scripting Vulnerability in Polarion ALM | 2022-03-08T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-535640 | SSA-535640: Vulnerability in Industrial Products | 2017-08-30T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-392912 | SSA-392912: Multiple Denial Of Service Vulnerabilities in SCALANCE W1700 Devices | 2022-04-12T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-350757 | SSA-350757: Improper Access Control Vulnerability in TIA Portal Affecting S7-1200 and S7-1500 CPUs Web Server (Incl. Related ET200 CPUs and SIPLUS variants) | 2022-04-12T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-348629 | SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software | 2018-03-27T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-316850 | SSA-316850: Unauthenticated File Access in SICAM A8000 Devices | 2022-04-12T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-273799 | SSA-273799: Message Integrity Protection Bypass Vulnerability in SIMATIC Products | 2019-12-10T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-703715 | SSA-703715: Information Disclosure Vulnerability in Climatix POL909 (AWM and AWB) | 2021-11-09T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-669158 | SSA-669158: DNS Client Vulnerabilities in SIMOTICS CONNECT 400 | 2021-04-13T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-594438 | SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products | 2022-03-08T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-541018 | SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2) | 2021-03-09T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-534763 | SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products | 2020-09-08T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-501073 | SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) | 2021-05-11T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-415938 | SSA-415938: Improper Access Control Vulnerability in Mendix | 2022-03-08T00:00:00Z | 2022-03-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:1824 | Red Hat Security Advisory: RHODF-4.17-RHEL-9 security update | 2025-02-25T07:50:02+00:00 | 2026-02-21T13:30:17+00:00 |
| rhsa-2025:17690 | Red Hat Security Advisory: OpenShift Container Platform 4.16.50 bug fix and security update | 2025-10-15T07:45:25+00:00 | 2026-02-21T13:30:13+00:00 |
| rhsa-2025:17657 | Red Hat Security Advisory: OpenShift Container Platform 4.18.26 bug fix and security update | 2025-10-15T14:07:50+00:00 | 2026-02-21T13:30:06+00:00 |
| rhsa-2025:17232 | Red Hat Security Advisory: OpenShift Container Platform 4.17.41 bug fix and security update | 2025-10-08T15:52:57+00:00 | 2026-02-21T13:29:58+00:00 |
| rhsa-2025:1710 | Red Hat Security Advisory: OpenShift Container Platform 4.15.46 security and extras update | 2025-02-27T00:58:32+00:00 | 2026-02-21T13:29:55+00:00 |
| rhsa-2025:15680 | Red Hat Security Advisory: OpenShift Container Platform 4.16.48 bug fix and security update | 2025-09-17T11:15:03+00:00 | 2026-02-21T13:29:23+00:00 |
| rhsa-2025:1468 | Red Hat Security Advisory: ACS 4.4 enhancement and security update | 2025-02-13T18:14:31+00:00 | 2026-02-21T13:29:01+00:00 |
| rhsa-2025:1451 | Red Hat Security Advisory: OpenShift Container Platform 4.14.48 security update | 2025-02-19T23:10:54+00:00 | 2026-02-21T13:28:55+00:00 |
| rhsa-2025:1448 | Red Hat Security Advisory: RHOAI 2.17.0 - Red Hat OpenShift AI | 2025-02-13T15:51:37+00:00 | 2026-02-21T13:28:52+00:00 |
| rhsa-2025:1334 | Red Hat Security Advisory: ACS 4.5 enhancement and security update | 2025-02-11T21:20:30+00:00 | 2026-02-21T13:28:36+00:00 |
| rhsa-2025:1333 | Red Hat Security Advisory: Gatekeeper v3.14.3 | 2025-02-12T17:36:57+00:00 | 2026-02-21T13:28:35+00:00 |
| rhsa-2025:1332 | Red Hat Security Advisory: Gatekeeper v3.15.3 | 2025-02-12T17:48:36+00:00 | 2026-02-21T13:28:32+00:00 |
| rhsa-2025:1331 | Red Hat Security Advisory: Gatekeeper v3.17.1 | 2025-02-12T17:47:51+00:00 | 2026-02-21T13:28:29+00:00 |
| rhsa-2025:1327 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:44:02+00:00 | 2026-02-21T13:28:27+00:00 |
| rhsa-2025:1326 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:41:51+00:00 | 2026-02-21T13:28:25+00:00 |
| rhsa-2025:1325 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:41:41+00:00 | 2026-02-21T13:28:23+00:00 |
| rhsa-2025:1324 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:39:16+00:00 | 2026-02-21T13:28:22+00:00 |
| rhsa-2025:1322 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:37:40+00:00 | 2026-02-21T13:28:20+00:00 |
| rhsa-2025:1289 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:53:10+00:00 | 2026-02-21T13:28:16+00:00 |
| rhsa-2025:1287 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:52:52+00:00 | 2026-02-21T13:28:14+00:00 |
| rhsa-2025:1285 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:50:52+00:00 | 2026-02-21T13:28:12+00:00 |
| rhsa-2025:0892 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.18.0 release | 2025-02-03T16:38:18+00:00 | 2026-02-21T13:27:24+00:00 |
| rhsa-2025:0851 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.2 security and bug fix updates | 2025-01-30T21:30:22+00:00 | 2026-02-21T13:27:20+00:00 |
| rhsa-2025:0839 | Red Hat Security Advisory: OpenShift Container Platform 4.14.46 security update | 2025-02-06T01:36:17+00:00 | 2026-02-21T13:27:17+00:00 |
| rhsa-2025:0785 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.5 bug fixes and container updates | 2025-01-28T23:59:02+00:00 | 2026-02-21T13:27:14+00:00 |
| rhsa-2025:0778 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.5 security updates and bug fixes | 2025-01-28T20:56:08+00:00 | 2026-02-21T13:27:11+00:00 |
| rhsa-2025:0723 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.3 security updates and bug fixes | 2025-01-27T21:50:16+00:00 | 2026-02-21T13:27:08+00:00 |
| rhsa-2025:0679 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.7 bug fixes and container updates | 2025-01-23T23:30:43+00:00 | 2026-02-21T13:27:05+00:00 |
| rhsa-2025:0676 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.5.8 security updates and bug fixes | 2025-01-23T20:15:51+00:00 | 2026-02-21T13:27:01+00:00 |
| rhsa-2025:0653 | Red Hat Security Advisory: OpenShift Container Platform 4.17.14 security and extras update | 2025-01-28T00:55:21+00:00 | 2026-02-21T13:26:58+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-14-254-01 | Schneider Electric VAMPSET Buffer Overflow | 2014-06-14T06:00:00.000000Z | 2025-06-06T22:48:19.541393Z |
| icsa-14-247-01a | Sensys Networks Traffic Sensor Vulnerabilities (Update A) | 2014-06-07T06:00:00.000000Z | 2025-06-06T22:48:06.463498Z |
| icsa-14-238-01 | CG Automation Improper Input Validation | 2014-05-29T06:00:00.000000Z | 2025-06-06T22:47:53.555337Z |
| icsa-14-226-01 | Siemens SIMATIC S7-1500 CPU Denial of Service | 2014-05-17T06:00:00.000000Z | 2025-06-06T22:47:47.106108Z |
| icsa-14-224-01 | Ecava Integraxor SCADA Server Vulnerabilities | 2014-05-15T06:00:00.000000Z | 2025-06-06T22:47:21.277370Z |
| icsa-14-203-01 | Omron NS Series HMI Vulnerabilities | 2014-04-24T06:00:00.000000Z | 2025-06-06T22:46:35.467432Z |
| icsa-14-198-02 | Advantech WebAccess Vulnerabilities | 2014-04-19T06:00:00.000000Z | 2025-06-06T22:46:03.132898Z |
| icsa-14-198-01 | Cogent DataHub Code Injection Vulnerability | 2014-04-19T06:00:00.000000Z | 2025-06-06T22:45:56.681631Z |
| icsa-14-196-01 | SubSTATION Server Telegyr 8979 Master Vulnerabilities | 2014-04-17T06:00:00.000000Z | 2025-06-06T22:45:50.215260Z |
| icsa-14-189-02 | Innominate mGuard Unauthorized Leakage of System Data | 2014-04-10T06:00:00.000000Z | 2025-06-06T22:45:43.410774Z |
| icsa-13-077-01b | Schneider Electric PLCs Vulnerabilities | 2013-12-20T07:00:00.000000Z | 2025-06-06T22:40:07.027146Z |
| icsa-13-016-01 | Schneider Electric Authenticated Communication Risk Vulnerability | 2013-10-20T06:00:00.000000Z | 2025-06-06T22:39:47.591594Z |
| icsa-13-014-01 | Siemens SIMATIC RF Manager ActiveX Buffer Overflow | 2013-10-18T06:00:00.000000Z | 2025-06-06T22:39:41.115500Z |
| icsa-13-011-03 | Rockwell Automation ControlLogix PLC Vulnerabilities | 2013-10-15T06:00:00.000000Z | 2025-06-06T22:38:48.956870Z |
| icsa-12-205-02 | Siemens SIMATIC STEP 7 DLL Vulnerability | 2012-04-26T06:00:00.000000Z | 2025-06-06T22:38:22.736168Z |
| icsa-12-185-01 | WellinTech KingView Multiple Vulnerabilities | 2012-04-06T06:00:00.000000Z | 2025-06-06T22:37:50.390140Z |
| icsa-12-177-02 | Invensys Wonderware InTouch 10 DLL Hijack | 2012-03-29T06:00:00.000000Z | 2025-06-06T22:37:43.923140Z |
| icsa-12-167-01 | Innominate MGuard Weak HTTPS and SSH Keys | 2012-03-19T06:00:00.000000Z | 2025-06-06T22:37:37.465622Z |
| icsa-12-137-02 | Advantech Studio ISSymbol ActiveX Buffer Overflow | 2012-02-17T07:00:00.000000Z | 2025-06-06T22:37:31.006003Z |
| icsa-12-131-01 | Progea Movicon Memory Corruption Vulnerability | 2012-02-11T07:00:00.000000Z | 2025-06-06T22:37:24.554697Z |
| icsa-15-069-04a | Elipse E3 Process Control Vulnerability (Update A) | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:37:18.082701Z |
| icsa-15-069-04 | Elipse E3 Process Control Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:37:11.175255Z |
| icsa-15-069-03 | SCADA Engine BACnet OPC Server Vulnerabilities | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:51.449296Z |
| icsa-15-069-02 | ABB HART Device DTM Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:45.007018Z |
| icsa-15-069-01 | Cimon CmnView DLL Hijacking Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:38.524138Z |
| icsa-15-064-04 | Siemens SIMATIC S7-300 CPU Denial-of-Service Vulnerability | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:32.046323Z |
| icsa-15-064-02a | Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A) | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:19.130527Z |
| icsa-15-064-02 | Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:12.657259Z |
| icsa-15-064-01a | Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A) | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:06.004237Z |
| icsa-15-064-01 | Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:35:59.487016Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ios-xe-l2tp-dos-eb5tufmv | Cisco IOS XE Software Layer 2 Tunneling Protocol Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-ios-xe-l2tp-dos-eB5tuFmV | Cisco IOS XE Software Layer 2 Tunneling Protocol Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-getvpn-rce-g8qr68sx | Cisco IOS and IOS XE Software Cisco Group Encrypted Transport VPN Software Out-of-Bounds Write Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-getvpn-rce-g8qR68sx | Cisco IOS and IOS XE Software Cisco Group Encrypted Transport VPN Software Out-of-Bounds Write Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-dnac-ins-acc-con-nhavdrbz | Cisco DNA Center API Insufficient Access Control Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-dnac-ins-acc-con-nHAVDRBZ | Cisco DNA Center API Insufficient Access Control Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-click-ap-dos-wdcxkvnq | Cisco Catalyst 9100 Access Points Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-click-ap-dos-wdcXkvnQ | Cisco Catalyst 9100 Access Points Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-cbw-dos-ysmbuqx3 | Cisco Wireless LAN Controller AireOS Software Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-cbw-dos-YSmbUqX3 | Cisco Wireless LAN Controller AireOS Software Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-cat3k-dos-zza4gb3r | Cisco IOS XE Software for Catalyst 3650 and Catalyst 3850 Series Switches Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-cat3k-dos-ZZA4Gb3r | Cisco IOS XE Software for Catalyst 3650 and Catalyst 3850 Series Switches Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-appqoe-utd-dos-p8o57p5y | Cisco IOS XE Software Application Quality of Experience and Unified Threat Defense Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-appqoe-utd-dos-p8O57p5y | Cisco IOS XE Software Application Quality of Experience and Unified Threat Defense Denial of Service Vulnerability | 2023-09-27T16:00:00+00:00 | 2023-09-27T16:00:00+00:00 |
| cisco-sa-lnt-l9zokbz5 | Cisco IOS XR Software Image Verification Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-lnt-L9zOkBz5 | Cisco IOS XR Software Image Verification Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-iosxr-info-gxp7nvcp | Cisco IOS XR Software Model-Driven Programmability Behavior with AAA Authorization | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-iosxr-info-GXp7nVcP | Cisco IOS XR Software Model-Driven Programmability Behavior with AAA Authorization | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-ios-xr-cfm-3pwn8mkt | Cisco IOS XR Software Connectivity Fault Management Denial of Service Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-ios-xr-cfm-3pWN8MKt | Cisco IOS XR Software Connectivity Fault Management Denial of Service Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-dnx-acl-pyzdkeyf | Cisco IOS XR Software Access Control List Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-dnx-acl-PyzDkeYF | Cisco IOS XR Software Access Control List Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-comp3acl-vgmp6bq3 | Cisco IOS XR Software Compression ACL Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-comp3acl-vGmp6BQ3 | Cisco IOS XR Software Compression ACL Bypass Vulnerability | 2023-09-13T16:00:00+00:00 | 2023-09-13T16:00:00+00:00 |
| cisco-sa-sb-rv-stack-shyv2f5n | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Stack Overflow Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-sb-rv-stack-SHYv2f5N | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Stack Overflow Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-ise-radius-dos-w7cnn7gt | Cisco Identity Services Engine RADIUS Denial of Service Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-ise-radius-dos-W7cNn7gt | Cisco Identity Services Engine RADIUS Denial of Service Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-hyperflex-redirect-uxlgqduf | Cisco HyperFlex HX Data Platform Open Redirect Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-hyperflex-redirect-UxLgqdUF | Cisco HyperFlex HX Data Platform Open Redirect Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2017-3608 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). | 2017-04-02T00:00:00.000Z | 2026-02-19T01:14:26.000Z |
| msrc_cve-2024-50198 | iio: light: veml6030: fix IIO device retrieval from embedded device | 2024-11-02T00:00:00.000Z | 2026-02-19T01:14:22.000Z |
| msrc_cve-2025-1179 | GNU Binutils ld libbfd.c bfd_putl64 memory corruption | 2025-02-02T00:00:00.000Z | 2026-02-19T01:14:20.000Z |
| msrc_cve-2025-68151 | CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages | 2026-01-02T00:00:00.000Z | 2026-02-19T01:14:17.000Z |
| msrc_cve-2017-3607 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). | 2017-04-02T00:00:00.000Z | 2026-02-19T01:14:16.000Z |
| msrc_cve-2024-50164 | bpf: Fix overloading of MEM_UNINIT's meaning | 2024-11-02T00:00:00.000Z | 2026-02-19T01:14:06.000Z |
| msrc_cve-2025-1176 | GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow | 2025-02-02T00:00:00.000Z | 2026-02-19T01:14:04.000Z |
| msrc_cve-2017-3606 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). | 2017-04-02T00:00:00.000Z | 2026-02-19T01:14:04.000Z |
| msrc_cve-2024-42236 | usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() | 2024-08-02T00:00:00.000Z | 2026-02-19T01:13:57.000Z |
| msrc_cve-2024-53920 | In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.) | 2024-11-02T00:00:00.000Z | 2026-02-19T01:13:54.000Z |
| msrc_cve-2017-3605 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). | 2017-04-02T00:00:00.000Z | 2026-02-19T01:13:52.000Z |
| msrc_cve-2017-3604 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). | 2017-04-02T00:00:00.000Z | 2026-02-19T01:13:40.000Z |
| msrc_cve-2024-50193 | x86/entry_32: Clear CPU buffers after register restore in NMI return | 2024-11-02T00:00:00.000Z | 2026-02-19T01:13:37.000Z |
| msrc_cve-2024-41087 | ata: libata-core: Fix double free on error | 2024-07-01T07:00:00.000Z | 2026-02-19T01:13:28.000Z |
| msrc_cve-2026-21441 | urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) | 2026-01-02T00:00:00.000Z | 2026-02-19T01:13:26.000Z |
| msrc_cve-2023-26484 | On a compromised KubeVirt node the virt-handler service account can be used to modify all node specs | 2023-03-10T00:00:00.000Z | 2026-02-19T01:13:22.000Z |
| msrc_cve-2024-50196 | pinctrl: ocelot: fix system hang on level based interrupts | 2024-11-02T00:00:00.000Z | 2026-02-19T01:13:18.000Z |
| msrc_cve-2023-5408 | Openshift: modification of node role labels | 2023-11-01T07:00:00.000Z | 2026-02-19T01:13:10.000Z |
| msrc_cve-2023-5528 | Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation | 2023-11-01T07:00:00.000Z | 2026-02-19T01:12:58.000Z |
| msrc_cve-2024-42239 | bpf: Fail bpf_timer_cancel when callback is being cancelled | 2024-08-02T00:00:00.000Z | 2026-02-19T01:12:49.000Z |
| msrc_cve-2024-52337 | Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method | 2024-11-02T00:00:00.000Z | 2026-02-19T01:12:46.000Z |
| msrc_cve-2020-8554 | Kubernetes man in the middle using LoadBalancer or ExternalIPs | 2021-01-02T00:00:00.000Z | 2026-02-19T01:12:39.000Z |
| msrc_cve-2024-11831 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | 2025-02-02T00:00:00.000Z | 2026-02-19T01:12:30.000Z |
| msrc_cve-2024-50151 | smb: client: fix OOBs when building SMB2_IOCTL request | 2024-11-02T00:00:00.000Z | 2026-02-19T01:12:29.000Z |
| msrc_cve-2022-48788 | nvme-rdma: fix possible use-after-free in transport error_recovery work | 2024-07-01T07:00:00.000Z | 2026-02-19T01:12:24.000Z |
| msrc_cve-2024-24861 | Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency() | 2024-02-02T08:00:00.000Z | 2026-02-19T01:12:18.000Z |
| msrc_cve-2024-24860 | Race condition vulnerability in Linux kernel bluetooth driver in {minmax}_key_size_set() | 2024-02-02T08:00:00.000Z | 2026-02-19T01:12:03.000Z |
| msrc_cve-2024-50283 | ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp | 2024-11-02T00:00:00.000Z | 2026-02-19T01:12:02.000Z |
| msrc_cve-2025-13151 | CVE-2025-13151 | 2026-01-02T00:00:00.000Z | 2026-02-19T01:11:53.000Z |
| msrc_cve-2024-24859 | Race condition vulnerability in Linux kernel bluetooth sniff_{minmax}_interval_set() | 2024-02-02T08:00:00.000Z | 2026-02-19T01:11:51.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15507-1 | python311-eventlet-0.40.3-1.1 on GA media | 2025-09-01T00:00:00Z | 2025-09-01T00:00:00Z |
| opensuse-su-2025:15506-1 | jupyter-bqplot-jupyterlab-0.5.46-13.1 on GA media | 2025-09-01T00:00:00Z | 2025-09-01T00:00:00Z |
| opensuse-su-2025:15505-1 | kured-1.20.0-1.1 on GA media | 2025-09-01T00:00:00Z | 2025-09-01T00:00:00Z |
| opensuse-su-2025:15504-1 | dcmtk-3.6.9-4.1 on GA media | 2025-09-01T00:00:00Z | 2025-09-01T00:00:00Z |
| opensuse-su-2025:15503-1 | tailscale-1.86.5-1.1 on GA media | 2025-08-29T00:00:00Z | 2025-08-29T00:00:00Z |
| opensuse-su-2025:15502-1 | jupyter-nbdime-7.0.2-23.1 on GA media | 2025-08-29T00:00:00Z | 2025-08-29T00:00:00Z |
| opensuse-su-2025:15501-1 | libpcre2-16-0-10.46-1.1 on GA media | 2025-08-29T00:00:00Z | 2025-08-29T00:00:00Z |
| opensuse-su-2025:15500-1 | chromedriver-139.0.7258.154-1.1 on GA media | 2025-08-29T00:00:00Z | 2025-08-29T00:00:00Z |
| opensuse-su-2025:15499-1 | kea-3.0.1-1.1 on GA media | 2025-08-28T00:00:00Z | 2025-08-28T00:00:00Z |
| opensuse-su-2025:15498-1 | ImageMagick-7.1.2.2-2.1 on GA media | 2025-08-28T00:00:00Z | 2025-08-28T00:00:00Z |
| opensuse-su-2025:15497-1 | scx-1.0.15-2.1 on GA media | 2025-08-27T00:00:00Z | 2025-08-27T00:00:00Z |
| opensuse-su-2025:15496-1 | python311-h2-4.3.0-1.1 on GA media | 2025-08-27T00:00:00Z | 2025-08-27T00:00:00Z |
| opensuse-su-2025:15495-1 | perl-Crypt-CBC-3.70.0-1.1 on GA media | 2025-08-27T00:00:00Z | 2025-08-27T00:00:00Z |
| opensuse-su-2025:15494-1 | libmozjs-128-0-128.14.0-1.1 on GA media | 2025-08-26T00:00:00Z | 2025-08-26T00:00:00Z |
| opensuse-su-2025:15493-1 | matrix-synapse-1.137.0-1.1 on GA media | 2025-08-26T00:00:00Z | 2025-08-26T00:00:00Z |
| opensuse-su-2025:15492-1 | fractal-12.0-3.1 on GA media | 2025-08-26T00:00:00Z | 2025-08-26T00:00:00Z |
| opensuse-su-2025:15491-1 | tomcat11-11.0.10-1.1 on GA media | 2025-08-25T00:00:00Z | 2025-08-25T00:00:00Z |
| opensuse-su-2025:15490-1 | tomcat10-10.1.44-1.1 on GA media | 2025-08-25T00:00:00Z | 2025-08-25T00:00:00Z |
| opensuse-su-2025:15489-1 | tomcat-9.0.108-1.1 on GA media | 2025-08-25T00:00:00Z | 2025-08-25T00:00:00Z |
| opensuse-su-2025:15488-1 | cheat-4.4.2-2.1 on GA media | 2025-08-25T00:00:00Z | 2025-08-25T00:00:00Z |
| opensuse-su-2025:15487-1 | cheat-4.4.2-2.1 on GA media | 2025-08-25T00:00:00Z | 2025-08-25T00:00:00Z |
| opensuse-su-2025:15486-1 | terragrunt-0.85.1-1.1 on GA media | 2025-08-22T00:00:00Z | 2025-08-22T00:00:00Z |
| opensuse-su-2025:15485-1 | jupyter-bqplot-jupyterlab-0.5.46-12.1 on GA media | 2025-08-22T00:00:00Z | 2025-08-22T00:00:00Z |
| opensuse-su-2025:15484-1 | netty-4.1.124-1.1 on GA media | 2025-08-22T00:00:00Z | 2025-08-22T00:00:00Z |
| opensuse-su-2025:15483-1 | jetty-annotations-9.4.58-1.1 on GA media | 2025-08-22T00:00:00Z | 2025-08-22T00:00:00Z |
| opensuse-su-2025:15482-1 | chromedriver-139.0.7258.138-1.1 on GA media | 2025-08-22T00:00:00Z | 2025-08-22T00:00:00Z |
| opensuse-su-2025:15481-1 | chromedriver-139.0.7258.138-1.1 on GA media | 2025-08-22T00:00:00Z | 2025-08-22T00:00:00Z |
| opensuse-su-2025:15480-1 | keylime-ima-policy-0.2.8+12-1.1 on GA media | 2025-08-21T00:00:00Z | 2025-08-21T00:00:00Z |
| opensuse-su-2025:15479-1 | ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 on GA media | 2025-08-21T00:00:00Z | 2025-08-21T00:00:00Z |
| opensuse-su-2025:15478-1 | pdns-recursor-5.2.5-1.1 on GA media | 2025-08-21T00:00:00Z | 2025-08-21T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-163 | Stack-buffer-overflow in H5S_get_simple_extent_dims | 2024-03-12T00:05:38.587103Z | 2024-04-29T11:18:04.652469Z |
| osv-2023-1322 | UNKNOWN READ in ih264d_filter_boundary_left_nonmbaff | 2023-12-18T00:01:44.796567Z | 2024-04-29T11:16:39.254259Z |
| osv-2024-140 | Container-overflow in WasmEdge::LLVM::Compiler::compile | 2024-02-28T00:12:59.500279Z | 2024-04-29T11:16:32.126190Z |
| osv-2023-1313 | Heap-buffer-overflow in isvcd_start_of_pic | 2023-12-16T00:12:09.531964Z | 2024-04-29T11:16:18.966356Z |
| osv-2023-1312 | Heap-buffer-overflow in ih264d_format_convert | 2023-12-16T00:11:20.970046Z | 2024-04-29T11:16:08.727836Z |
| osv-2024-322 | Container-overflow in strtol | 2024-04-29T05:41:35.504634Z | 2024-04-29T05:41:35.505031Z |
| osv-2024-319 | Stack-buffer-underflow in filter_apply_chain | 2024-04-29T05:39:39.042459Z | 2024-04-29T05:39:39.043467Z |
| osv-2024-314 | Heap-buffer-overflow in config__add_listener | 2024-04-29T05:32:04.759568Z | 2024-04-29T05:32:04.759906Z |
| osv-2024-309 | Use-of-uninitialized-value in fast_forward_first_n_chars | 2024-04-29T00:00:29.630732Z | 2024-04-29T00:00:29.631359Z |
| osv-2024-42 | Heap-double-free in dwg_free_common_entity_data | 2024-01-26T00:03:30.637411Z | 2024-04-27T14:26:04.198487Z |
| osv-2024-38 | Heap-buffer-overflow in json_HEADER | 2024-01-25T00:03:33.797633Z | 2024-04-27T14:25:53.641813Z |
| osv-2023-855 | Heap-double-free in dwg_free_common_entity_data | 2023-09-15T14:01:06.818081Z | 2024-04-27T14:22:00.114824Z |
| osv-2023-1186 | Heap-use-after-free in dxf_tables_read | 2023-11-20T13:02:13.320596Z | 2024-04-27T14:07:56.082417Z |
| osv-2023-1378 | Heap-buffer-overflow in ih264d_get_bits_h264 | 2023-12-31T00:13:35.510537Z | 2024-04-25T14:13:38.925666Z |
| osv-2024-153 | Heap-buffer-overflow in od_ec_dec_init | 2024-03-07T00:13:48.067527Z | 2024-04-24T14:26:37.406573Z |
| osv-2024-151 | Heap-buffer-overflow in od_ec_dec_normalize | 2024-03-07T00:04:15.146851Z | 2024-04-24T14:26:12.240231Z |
| osv-2024-149 | Heap-use-after-free in get_ls_tile_buffers | 2024-03-07T00:01:26.874963Z | 2024-04-24T14:25:20.329505Z |
| osv-2024-293 | Stack-buffer-overflow in shoco_decompress | 2024-04-24T00:02:46.009671Z | 2024-04-24T00:02:46.010298Z |
| osv-2023-261 | Heap-buffer-overflow in HtpRequestBodyHandleMultipart | 2023-04-01T13:02:00.983076Z | 2024-04-23T14:18:28.255393Z |
| osv-2024-144 | UNKNOWN READ in spvtools::val::ValidateAccessChain | 2024-02-29T00:12:28.292465Z | 2024-04-23T14:17:09.435427Z |
| osv-2024-288 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-04-22T00:13:27.517680Z | 2024-04-22T00:13:27.518159Z |
| osv-2024-274 | Heap-use-after-free in Mat_VarFree | 2024-04-18T00:09:21.577754Z | 2024-04-20T14:21:22.678715Z |
| osv-2024-265 | Heap-buffer-overflow in Mat_VarDuplicate | 2024-04-17T00:14:05.583203Z | 2024-04-20T14:21:17.305195Z |
| osv-2024-283 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement | 2024-04-20T00:16:06.569828Z | 2024-04-20T00:16:06.570262Z |
| osv-2024-33 | Heap-buffer-overflow in ctxload_probe_data | 2024-01-24T00:05:37.532325Z | 2024-04-18T14:26:43.225909Z |
| osv-2024-68 | Heap-buffer-overflow in gsfdmx_probe_data | 2024-02-02T00:02:07.804929Z | 2024-04-18T14:26:13.767979Z |
| osv-2024-156 | Stack-buffer-overflow in rtpin_satip_get_server_ip | 2024-03-10T00:01:41.405747Z | 2024-04-18T14:21:00.600694Z |
| osv-2024-142 | Heap-buffer-overflow in gf_gz_decompress_payload_ex | 2024-02-29T00:06:19.763458Z | 2024-04-18T14:20:45.279874Z |
| osv-2024-157 | Heap-buffer-overflow in gf_strmemstr | 2024-03-10T00:06:03.489792Z | 2024-04-18T14:20:28.786302Z |
| osv-2024-135 | Heap-buffer-overflow in BS_ReadByte | 2024-02-25T00:05:28.923786Z | 2024-04-18T14:10:11.037617Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2019-0023 | Cloned interners may read already dropped strings | 2019-08-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0022 | Stream callback function is not unwind safe | 2019-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0021 | `Matrix::zip_elements` causes double free | 2019-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0020 | fix unsound APIs that could lead to UB | 2019-09-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0019 | HMAC-BLAKE2 algorithms compute incorrect results | 2019-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0018 | Internally mutating methods take immutable ref self | 2019-09-02T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0017 | Panic during initialization of Lazy<T> might trigger undefined behavior | 2019-09-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0016 | Use-after-free in buffer conversion implementation | 2019-09-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0015 | Flaw in generativity allows out-of-bounds access | 2019-05-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0014 | Flaw in interface may drop uninitialized instance of arbitrary types | 2019-08-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0013 | Wrong memory orderings in RwLock potentially violates mutual exclusion | 2019-08-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0012 | Memory corruption in SmallVec::grow() | 2019-07-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0011 | Flaw in offset_of and span_of causes SIGILL, drops uninitialized memory of arbitrary type on panic in client code | 2019-07-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0010 | MultiDecoder::read() drops uninitialized memory of arbitrary type on panic in client code | 2019-07-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0009 | Double-free and use-after-free in SmallVec::grow() | 2019-06-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0008 | Flaw in string parsing can lead to crashes due to invalid memory access. | 2019-06-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0007 | Processing of maliciously crafted length fields causes memory allocation SIGABRTs | 2019-06-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0006 | Buffer overflow and format vulnerabilities in functions exposed without unsafe | 2019-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0005 | Format string vulnerabilities in `pancurses` | 2019-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0004 | Failure to properly verify ed25519 signatures makes any signature valid | 2019-05-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0003 | Out of Memory in stream::read_raw_bytes_into() | 2019-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0002 | Bug in SliceDeque::move_head_unchecked corrupts its memory | 2019-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0001 | Uncontrolled recursion leads to abort in HTML serialization | 2019-04-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0022 | Use of uninitialized memory in temporary | 2018-08-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0021 | Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods | 2018-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0019 | Multiple memory safety issues | 2018-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0018 | smallvec creates uninitialized value of any type | 2018-09-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0013 | Vec-to-vec transmutations could lead to heap overflow/corruption | 2018-11-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0012 | Flaw in streaming state reset() functions can create incorrect results. | 2018-12-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0011 | Enum repr causing potential memory corruption | 2018-12-18T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-discourse-2023-44391 | Prevent unauthorized access to summary details in Discourse | 2024-03-06T10:53:30.809Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2023-44388 | Malicious requests can fill up the log files resulting in a deinal of service in Discourse | 2024-03-06T10:53:42.285Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2023-43814 | Exposure of poll options and votes to unauthorized users in Discourse | 2024-03-06T10:53:52.288Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2023-43659 | Cross-site Scripting via email preview when CSP disabled in Discourse | 2024-03-06T10:54:02.887Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2023-23615 | Malicious users in Discourse can create spam topics as any user due to improper access control | 2024-03-06T11:00:56.201Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2022-46159 | Any authenticated Discourse user can create an unlisted topic | 2024-03-06T11:02:38.003Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2022-46148 | Discourse allows self-XSS through malicious composer message | 2024-03-06T11:02:57.788Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2022-41944 | Discourse users can see notifications for topics they no longer have access to | 2024-03-06T11:03:09.082Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2022-31184 | Email activation route can be abused by spammers in Discourse | 2024-03-06T11:05:15.202Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2022-31096 | Invites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse | 2024-03-06T11:05:41.566Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2022-21677 | Group advanced search option may leak group and group's members visibility | 2024-03-06T11:08:07.875Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2021-41271 | Cache poisoning via maliciously-formed request in discourse | 2024-03-06T11:09:07.503Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2021-41095 | XSS via blocked watched word in error message | 2024-03-06T11:09:23.967Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2021-32764 | YouTube Onebox susceptible to XSS | 2024-03-06T11:10:07.487Z | 2025-11-06T13:25:46.476Z |
| bit-discourse-2021-3138 | 2024-03-06T11:10:13.104Z | 2025-11-06T13:25:46.476Z | |
| bit-consul-2025-11375 | Consul's event endpoint is vulnerable to denial of service | 2025-11-06T12:49:11.554Z | 2025-11-06T13:25:46.476Z |
| bit-consul-2025-11374 | Consul's KV endpoint is vulnerable to denial of service | 2025-11-06T12:49:05.940Z | 2025-11-06T13:25:46.476Z |
| bit-consul-2023-3518 | JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access | 2024-03-06T10:51:07.390Z | 2025-11-06T13:25:46.476Z |
| bit-apisix-2025-62232 | Apache APISIX: basic-auth logs plaintext credentials at info level | 2025-11-06T12:47:05.456Z | 2025-11-06T13:25:46.476Z |
| bit-apisix-2025-46647 | Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect | 2025-07-04T07:28:48.965Z | 2025-11-06T13:25:46.476Z |
| bit-apisix-2025-27446 | Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges | 2025-07-16T07:50:40.089Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2025-54090 | Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 | 2025-07-29T05:38:18.535Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2025-53020 | Apache HTTP Server: HTTP/2 DoS by Memory Increase | 2025-07-16T07:56:41.763Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2025-49812 | Apache HTTP Server: mod_ssl TLS upgrade attack | 2025-07-16T07:56:35.377Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2025-49630 | Apache HTTP Server: mod_proxy_http2 denial of service | 2025-07-16T07:56:28.763Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2025-23048 | Apache HTTP Server: mod_ssl access control bypass with session resumption | 2025-07-16T07:56:19.860Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2024-47252 | Apache HTTP Server: mod_ssl error log variable escaping | 2025-07-16T07:56:11.862Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2024-43394 | Apache HTTP Server: SSRF on Windows due to UNC paths | 2025-07-16T07:56:03.162Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2024-43204 | Apache HTTP Server: SSRF with mod_headers setting Content-Type header | 2025-07-16T07:55:53.967Z | 2025-11-06T13:25:46.476Z |
| bit-apache-2024-42516 | Apache HTTP Server: HTTP response splitting | 2025-07-16T07:55:45.463Z | 2025-11-06T13:25:46.476Z |
| ID | Description | Updated |
|---|---|---|
| var-200706-0666 | Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apac… | 2024-07-23T20:50:38.808000Z |
| var-200803-0169 | The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privile… | 2024-07-23T20:50:33.392000Z |
| var-200110-0176 | Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox … | 2024-07-23T20:50:33.705000Z |
| var-201605-0075 | Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL befor… | 2024-07-23T20:50:28.659000Z |
| var-201008-1004 | The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not p… | 2024-07-23T20:50:25.420000Z |
| var-200505-1436 | zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users… | 2024-07-23T20:50:25.579000Z |
| var-202012-1546 | A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. d… | 2024-07-23T20:50:20.423000Z |
| var-200609-0782 | Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 throug… | 2024-07-23T20:49:47.183000Z |
| var-201503-0052 | Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in O… | 2024-07-23T20:49:46.592000Z |
| var-200905-0155 | Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denia… | 2024-07-23T20:49:45.261000Z |
| var-200707-0577 | Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used i… | 2024-07-23T20:49:41.081000Z |
| var-202103-1554 | Netty is an open-source, asynchronous event-driven network application framework for rapi… | 2024-07-23T20:49:40.283000Z |
| var-201504-0361 | The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x befor… | 2024-07-23T20:49:39.732000Z |
| var-200102-0027 | CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of … | 2024-07-23T20:49:36.601000Z |
| var-202011-0444 | Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker… | 2024-07-23T20:49:35.185000Z |
| var-201912-1849 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:49:34.258000Z |
| var-202005-0223 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shado… | 2024-07-23T20:49:32.020000Z |
| var-200811-0015 | Apple Safari before 3.2 does not properly prevent caching of form data for form fields th… | 2024-07-23T20:49:28.186000Z |
| var-202105-1306 | The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-… | 2024-07-23T20:49:26.394000Z |
| var-200505-0163 | Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when h… | 2024-07-23T20:48:54.841000Z |
| var-201211-0368 | Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS … | 2024-07-23T20:48:23.186000Z |
| var-201108-0149 | Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … | 2024-07-23T20:47:46.652000Z |
| var-200505-0311 | Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows lo… | 2024-07-23T20:47:42.176000Z |
| var-200504-0292 | Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote … | 2024-07-23T20:47:38.700000Z |
| var-201006-0051 | Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4… | 2024-07-23T20:46:54.348000Z |
| var-202201-0355 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. vim/vim Exists in a… | 2024-07-23T20:45:27.502000Z |
| var-201804-1210 | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS b… | 2024-07-23T20:45:24.222000Z |
| var-200701-0400 | crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitr… | 2024-07-23T20:45:22.440000Z |
| var-200701-0398 | Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assis… | 2024-07-23T20:45:19.199000Z |
| var-202005-1052 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.… | 2024-07-23T20:45:17.285000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2020-000906 | WL-Enq (WEB Enquete) vulnerable to cross-site scripting | 2020-03-24T18:29+09:00 | 2023-10-30T17:52+09:00 |
| jvndb-2023-000100 | Scanning evasion issue in Cisco Secure Email Gateway | 2023-10-16T16:11+09:00 | 2023-10-27T15:52+09:00 |
| jvndb-2023-000103 | HP ThinUpdate vulnerable to improper server certificate verification | 2023-10-23T14:26+09:00 | 2023-10-23T14:26+09:00 |
| jvndb-2023-003771 | File and Directory Permissions Vulnerability in JP1/Performance Management | 2023-10-04T15:23+09:00 | 2023-10-04T15:23+09:00 |
| jvndb-2023-003764 | Multiple vulnerabilities in Panasonic KW Watcher | 2023-09-27T14:44+09:00 | 2023-09-27T14:44+09:00 |
| jvndb-2023-003592 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2023-09-13T15:02+09:00 | 2023-09-13T15:02+09:00 |
| jvndb-2023-003023 | Vulnerability in HiRDB | 2023-08-29T15:55+09:00 | 2023-09-06T15:45+09:00 |
| jvndb-2023-003335 | Vulnerability in JP1/VERITAS | 2023-09-06T15:35+09:00 | 2023-09-06T15:35+09:00 |
| jvndb-2023-000092 | "direct" Desktop App for macOS fails to restrict access permissions | 2023-09-06T14:33+09:00 | 2023-09-06T14:33+09:00 |
| jvndb-2023-000090 | Multiple vulnerabilities in CGIs of PMailServer and PMailServer2 | 2023-09-05T14:55+09:00 | 2023-09-05T14:55+09:00 |
| jvndb-2023-002787 | OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS) | 2023-08-03T13:45+09:00 | 2023-08-03T13:45+09:00 |
| jvndb-2023-002510 | Multiple Vulnerabilities in Hitachi Device Manager | 2023-07-19T14:48+09:00 | 2023-07-19T14:48+09:00 |
| jvndb-2023-000065 | Multiple vulnerabilities in WAVLINK WL-WN531AX2 | 2023-06-27T16:50+09:00 | 2023-06-27T16:50+09:00 |
| jvndb-2023-000063 | Multiple vulnerabilities in Panasonic AiSEG2 | 2023-06-16T14:05+09:00 | 2023-06-16T14:05+09:00 |
| jvndb-2023-000054 | Wacom Tablet Driver installer for macOS vulnerable to improper link resolution before file access | 2023-05-25T13:40+09:00 | 2023-05-25T13:40+09:00 |
| jvndb-2023-001894 | Android App "Brother iPrint&Scan" vulnerable to improper access control | 2023-05-19T15:40+09:00 | 2023-05-19T15:40+09:00 |
| jvndb-2023-001852 | OS command injection vulnerability in Inaba Denki Sangyo Wi-Fi AP UNIT | 2023-05-17T15:09+09:00 | 2023-05-17T15:09+09:00 |
| jvndb-2023-000036 | API server of TONE Family vulnerable to authentication bypass using an alternate path | 2023-04-17T14:04+09:00 | 2023-04-17T14:04+09:00 |
| jvndb-2023-001492 | Vulnerability in JP1/VERITAS | 2023-04-12T15:01+09:00 | 2023-04-12T15:01+09:00 |
| jvndb-2023-001400 | CONPROSYS HMI System(CHS) vulnerable to SQL injection | 2023-04-03T16:19+09:00 | 2023-04-03T16:19+09:00 |
| jvndb-2021-000070 | Multiple vulnerabilities in GroupSession | 2021-07-19T15:41+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000068 | Multiple vulnerabilities in Retty App | 2021-07-13T14:34+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000033 | Hot Pepper Gourmet App fails to restrict access permissions | 2021-04-27T17:10+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2021-000031 | Gurunavi Apps fail to restrict access permissions | 2021-04-14T17:22+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2020-000079 | desknet's NEO vulnerable to cross-site scripting | 2020-12-03T17:54+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2020-000070 | Studyplus App uses a hard-coded API key for an external service | 2020-11-05T18:43+09:00 | 2023-03-08T17:02+09:00 |
| jvndb-2023-000016 | The installers of ELECOM Camera Assistant and QuickFileDealer may insecurely load Dynamic Link Libraries | 2023-02-14T17:00+09:00 | 2023-02-14T17:00+09:00 |
| jvndb-2023-001110 | Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Motion Pro | 2023-01-25T14:28+09:00 | 2023-01-25T14:28+09:00 |
| jvndb-2023-000009 | EasyMail vulnerable to cross-site scripting | 2023-01-24T16:00+09:00 | 2023-01-24T16:00+09:00 |
| jvndb-2023-001108 | Contec CONPROSYS HMI System (CHS) vulnerable to multiple SQL injections | 2023-01-24T13:38+09:00 | 2023-01-24T13:38+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4170-1 | Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) | 2025-11-23T11:34:32Z | 2025-11-23T11:34:32Z |
| suse-su-2025:4169-1 | Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7) | 2025-11-22T08:34:35Z | 2025-11-22T08:34:35Z |
| suse-su-2025:4164-1 | Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7) | 2025-11-22T08:34:31Z | 2025-11-22T08:34:31Z |
| suse-su-2025:4167-1 | Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7) | 2025-11-22T08:05:38Z | 2025-11-22T08:05:38Z |
| suse-su-2025:4161-1 | Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP6) | 2025-11-22T08:05:20Z | 2025-11-22T08:05:20Z |
| suse-su-2025:4160-1 | Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP6) | 2025-11-22T07:34:28Z | 2025-11-22T07:34:28Z |
| suse-su-2025:4159-1 | Security update for tomcat | 2025-11-21T14:31:51Z | 2025-11-21T14:31:51Z |
| suse-su-2025:4158-1 | Security update for cups-filters | 2025-11-21T14:30:38Z | 2025-11-21T14:30:38Z |
| suse-su-2025:4157-1 | Security update for podman | 2025-11-21T14:30:17Z | 2025-11-21T14:30:17Z |
| suse-su-2025:4156-1 | Security update for podman | 2025-11-21T14:29:28Z | 2025-11-21T14:29:28Z |
| suse-su-2025:21063-1 | Security update for glib2 | 2025-11-21T13:14:32Z | 2025-11-21T13:14:32Z |
| suse-su-2025:21062-1 | Security update for grub2 | 2025-11-21T13:08:14Z | 2025-11-21T13:08:14Z |
| suse-su-2025:4152-1 | Security update for grub2 | 2025-11-21T09:10:39Z | 2025-11-21T09:10:39Z |
| suse-su-2025:21137-1 | Security update for alloy | 2025-11-20T17:15:36Z | 2025-11-20T17:15:36Z |
| suse-su-2025:21136-1 | Security update for runc | 2025-11-20T16:43:58Z | 2025-11-20T16:43:58Z |
| suse-su-2025:21072-1 | Security update for runc | 2025-11-20T16:43:58Z | 2025-11-20T16:43:58Z |
| suse-su-2025:4149-1 | Security update for the Linux Kernel | 2025-11-20T15:41:46Z | 2025-11-20T15:41:46Z |
| suse-su-2025:21132-1 | Security update for poppler | 2025-11-20T13:33:08Z | 2025-11-20T13:33:08Z |
| suse-su-2025:21050-1 | Security update for unbound | 2025-11-20T11:36:47Z | 2025-11-20T11:36:47Z |
| suse-su-2025:4148-1 | Security update for ghostscript | 2025-11-20T10:14:20Z | 2025-11-20T10:14:20Z |
| suse-su-2025:4143-1 | Security update for grub2 | 2025-11-20T07:54:03Z | 2025-11-20T07:54:03Z |
| suse-su-2025:21021-1 | Security update for MozillaFirefox | 2025-11-19T18:22:27Z | 2025-11-19T18:22:27Z |
| suse-su-2025:4141-1 | Security update for the Linux Kernel | 2025-11-19T14:06:18Z | 2025-11-19T14:06:18Z |
| suse-su-2025:4140-1 | Security update for the Linux Kernel | 2025-11-19T13:15:27Z | 2025-11-19T13:15:27Z |
| suse-su-2025:4139-1 | Security update for the Linux Kernel | 2025-11-19T13:12:14Z | 2025-11-19T13:12:14Z |
| suse-su-2025:21016-1 | Security update for ongres-scram | 2025-11-19T10:17:29Z | 2025-11-19T10:17:29Z |
| suse-su-2025:4137-1 | Security update for gimp | 2025-11-19T10:01:00Z | 2025-11-19T10:01:00Z |
| suse-su-2025:21014-1 | Security update for openexr | 2025-11-19T09:46:11Z | 2025-11-19T09:46:11Z |
| suse-su-2025:21032-1 | Security update for tiff | 2025-11-19T09:41:55Z | 2025-11-19T09:41:55Z |
| suse-su-2025:21009-1 | Security update for tiff | 2025-11-19T09:41:55Z | 2025-11-19T09:41:55Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-04113 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0411303） | 2025-12-15 | 2026-01-15 |
| cnvd-2026-04112 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-0411204） | 2025-12-15 | 2026-01-15 |
| cnvd-2026-04111 | Adobe Experience Manager跨站脚本漏洞 | 2025-12-15 | 2026-01-15 |
| cnvd-2026-03712 | TOTOLINK X5000R代码执行漏洞 | 2025-12-18 | 2026-01-15 |
| cnvd-2026-03617 | Dell ControlVault3和Dell ControlVault3 Plus越界读写漏洞（CNVD-2026-03617） | 2025-07-25 | 2026-01-15 |
| cnvd-2026-03570 | Dell ControlVault3和Dell ControlVault3 Plus越界读写漏洞（CNVD-2026-03570） | 2025-11-20 | 2026-01-15 |
| cnvd-2026-03558 | Dell ControlVault3和Dell ControlVault3 Plus越界读写漏洞（CNVD-2026-03558） | 2025-11-20 | 2026-01-15 |
| cnvd-2026-03550 | Dell ControlVault3和Dell ControlVault3 Plus权限提升漏洞 | 2025-11-20 | 2026-01-15 |
| cnvd-2026-03549 | Dell ControlVault3和Dell ControlVault3 Plus越界读写漏洞（CNVD-2026-03549） | 2025-11-20 | 2026-01-15 |
| cnvd-2026-03548 | Dell ControlVault3和Dell ControlVault3 Plus越界读写漏洞 | 2025-11-20 | 2026-01-15 |
| cnvd-2026-03547 | Dell ControlVault3和Dell ControlVault3 Plus硬编码密码漏洞 | 2025-11-20 | 2026-01-15 |
| cnvd-2026-03546 | Dell ControlVault3和Dell ControlVault3 Plus CvManager功能缓冲区溢出漏洞 | 2025-11-20 | 2026-01-15 |
| cnvd-2026-03545 | Dell ControlVault3和Dell ControlVault3 Plus CvManager_SBI功能缓冲区溢出漏洞 | 2025-11-20 | 2026-01-15 |
| cnvd-2026-03544 | Blood Bank Management System rprofile.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03543 | Blood Bank Management System receiverLogin.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03542 | Blood Bank Management System login.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03541 | Blood Bank Management System hprofile.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03540 | Blood Bank Management System cancel.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03539 | Blood Bank Management System blooddinfo.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03538 | Blood Bank Management System abs.php组件跨站脚本漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03537 | Blood Bank Management System abs.php组件SQL注入漏洞 | 2025-12-03 | 2026-01-15 |
| cnvd-2026-03536 | Google Android权限提升漏洞（CNVD-2026-03536） | 2025-12-10 | 2026-01-15 |
| cnvd-2026-03535 | Google Android信息泄露漏洞（CNVD-2026-03535） | 2025-12-10 | 2026-01-15 |
| cnvd-2026-03534 | Mozilla Firefox信息泄露漏洞（CNVD-2026-03534） | 2025-04-09 | 2026-01-15 |
| cnvd-2026-03533 | 多款Mozilla产品安全绕过漏洞（CNVD-2026-03533） | 2025-03-13 | 2026-01-15 |
| cnvd-2026-03532 | Mozilla Firefox for iOS欺骗漏洞（CNVD-2026-03532） | 2025-03-13 | 2026-01-15 |
| cnvd-2026-03531 | 多款Mozilla产品安全绕过漏洞（CNVD-2026-03531） | 2025-03-13 | 2026-01-15 |
| cnvd-2026-03530 | 多款Mozilla产品代码执行漏洞（CNVD-2026-03530） | 2025-03-13 | 2026-01-15 |
| cnvd-2026-03529 | 多款Mozilla产品代码执行漏洞（CNVD-2026-03529） | 2025-03-13 | 2026-01-15 |
| cnvd-2026-03528 | Google Android越界写入漏洞 | 2025-12-10 | 2026-01-15 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0974 | Multiples vulnérabilités dans Apple iOS et iPadOS | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0973 | Multiples vulnérabilités dans Google Chrome | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0972 | Multiples vulnérabilités dans Suricata | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0971 | Vulnérabilité dans Mattermost Server | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0969 | Multiples vulnérabilités dans les produits VMware | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0968 | Multiples vulnérabilités dans les produits Cisco | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| CERTFR-2025-AVI-0974 | Multiples vulnérabilités dans Apple iOS et iPadOS | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| CERTFR-2025-AVI-0973 | Multiples vulnérabilités dans Google Chrome | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| CERTFR-2025-AVI-0972 | Multiples vulnérabilités dans Suricata | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| CERTFR-2025-AVI-0971 | Vulnérabilité dans Mattermost Server | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| CERTFR-2025-AVI-0969 | Multiples vulnérabilités dans les produits VMware | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| CERTFR-2025-AVI-0968 | Multiples vulnérabilités dans les produits Cisco | 2025-11-06T00:00:00.000000 | 2025-11-06T00:00:00.000000 |
| certfr-2025-avi-0967 | Multiples vulnérabilités dans les produits VMware | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| certfr-2025-avi-0966 | Multiples vulnérabilités dans les produits Microsoft | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| certfr-2025-avi-0965 | Multiples vulnérabilités dans MISP | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| certfr-2025-avi-0964 | Vulnérabilité dans Curl | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| CERTFR-2025-AVI-0967 | Multiples vulnérabilités dans les produits VMware | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| CERTFR-2025-AVI-0966 | Multiples vulnérabilités dans les produits Microsoft | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| CERTFR-2025-AVI-0965 | Multiples vulnérabilités dans MISP | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| CERTFR-2025-AVI-0964 | Vulnérabilité dans Curl | 2025-11-05T00:00:00.000000 | 2025-11-05T00:00:00.000000 |
| certfr-2025-avi-0963 | Multiples vulnérabilités dans Google Android | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0962 | Vulnérabilité dans Dovecot | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0961 | Multiples vulnérabilités dans les produits Apple | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0960 | Multiples vulnérabilités dans VMware Tanzu | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0959 | Vulnérabilité dans Python | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0958 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| certfr-2025-avi-0957 | Multiples vulnérabilités dans Moodle | 2025-11-03T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| CERTFR-2025-AVI-0963 | Multiples vulnérabilités dans Google Android | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| CERTFR-2025-AVI-0962 | Vulnérabilité dans Dovecot | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| CERTFR-2025-AVI-0961 | Multiples vulnérabilités dans les produits Apple | 2025-11-04T00:00:00.000000 | 2025-11-04T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-ale-008 | Propagation du ver « Code Red » | 2001-07-18T00:00:00.000000 | 2001-08-13T00:00:00.000000 |
| CERTA-2001-ALE-008 | Propagation du ver « Code Red » | 2001-07-18T00:00:00.000000 | 2001-08-13T00:00:00.000000 |
| certa-2001-ale-009 | Propagation importante du virus SirCam | 2001-07-24T00:00:00.000000 | 2001-07-26T00:00:00.000000 |
| CERTA-2001-ALE-009 | Propagation importante du virus SirCam | 2001-07-24T00:00:00.000000 | 2001-07-26T00:00:00.000000 |
| certa-2001-ale-007 | Propagation d'un ver affectant sadmind et IIS | 2001-05-09T00:00:00.000000 | 2001-05-09T00:00:00.000000 |
| certa-2001-ale-006 | Prolifération en Europe du virus HOMEPAGE | 2001-05-09T00:00:00.000000 | 2001-05-09T00:00:00.000000 |
| CERTA-2001-ALE-007 | Propagation d'un ver affectant sadmind et IIS | 2001-05-09T00:00:00.000000 | 2001-05-09T00:00:00.000000 |
| CERTA-2001-ALE-006 | Prolifération en Europe du virus HOMEPAGE | 2001-05-09T00:00:00.000000 | 2001-05-09T00:00:00.000000 |
| certa-2001-ale-005 | Vulnérabilités dans les modems ADSL d'Alcatel | 2001-04-11T00:00:00.000000 | 2001-04-11T00:00:00.000000 |
| CERTA-2001-ALE-005 | Vulnérabilités dans les modems ADSL d'Alcatel | 2001-04-11T00:00:00.000000 | 2001-04-11T00:00:00.000000 |
| certa-2001-ale-004 | Vulnérabilité dans le démon snmpXdmid sous Sun Solaris | 2001-03-30T00:00:00.000000 | 2001-03-30T00:00:00.000000 |
| CERTA-2001-ALE-004 | Vulnérabilité dans le démon snmpXdmid sous Sun Solaris | 2001-03-30T00:00:00.000000 | 2001-03-30T00:00:00.000000 |
| certa-2001-ale-003 | Prolifération du ver Li0n | 2001-03-26T00:00:00.000000 | 2001-03-26T00:00:00.000000 |
| certa-2001-ale-002 | Risque d'exploitation des ressources partagées sous Windows | 2001-03-26T00:00:00.000000 | 2001-03-26T00:00:00.000000 |
| CERTA-2001-ALE-003 | Prolifération du ver Li0n | 2001-03-26T00:00:00.000000 | 2001-03-26T00:00:00.000000 |
| CERTA-2001-ALE-002 | Risque d'exploitation des ressources partagées sous Windows | 2001-03-26T00:00:00.000000 | 2001-03-26T00:00:00.000000 |
| certa-2001-ale-001 | Propagation du ver Ramen sous Linux. | 2001-01-19T00:00:00.000000 | 2001-01-19T00:00:00.000000 |
| CERTA-2001-ALE-001 | Propagation du ver Ramen sous Linux. | 2001-01-19T00:00:00.000000 | 2001-01-19T00:00:00.000000 |
| certa-2000-ale-016 | Connexion à Wanadoo | 2000-11-30T00:00:00.000000 | 2000-11-30T00:00:00.000000 |
| CERTA-2000-ALE-016 | Connexion à Wanadoo | 2000-11-30T00:00:00.000000 | 2000-11-30T00:00:00.000000 |
| certa-2000-ale-015 | Risque d'usurpation de l'identité de Sun Microsystems | 2000-10-25T00:00:00.000000 | 2000-10-25T00:00:00.000000 |
| CERTA-2000-ALE-015 | Risque d'usurpation de l'identité de Sun Microsystems | 2000-10-25T00:00:00.000000 | 2000-10-25T00:00:00.000000 |
| certa-2000-ale-013 | Virus VBS Quatro-A | 2000-09-18T00:00:00.000000 | 2000-09-18T00:00:00.000000 |
| CERTA-2000-ALE-013 | Virus VBS Quatro-A | 2000-09-18T00:00:00.000000 | 2000-09-18T00:00:00.000000 |
| certa-2000-ale-014 | Vulnérabilité dans la bibliothèque glibc sous Unix | 2000-09-14T00:00:00.000000 | 2000-09-14T00:00:00.000000 |
| CERTA-2000-ALE-014 | Vulnérabilité dans la bibliothèque glibc sous Unix | 2000-09-14T00:00:00.000000 | 2000-09-14T00:00:00.000000 |
| certa-2000-ale-012 | Mauvaise compatibilité des scanners de virus avec NTFS | 2000-09-08T00:00:00.000000 | 2000-09-08T00:00:00.000000 |
| CERTA-2000-ALE-012 | Mauvaise compatibilité des scanners de virus avec NTFS | 2000-09-08T00:00:00.000000 | 2000-09-08T00:00:00.000000 |
| certa-2000-ale-001 | Alerte de virus LOVE-LETTER-FOR-YOU | 2000-05-05T00:00:00.000000 | 2000-07-05T00:00:00.000000 |
| CERTA-2000-ALE-001 | Alerte de virus LOVE-LETTER-FOR-YOU | 2000-05-05T00:00:00.000000 | 2000-07-05T00:00:00.000000 |