Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-68534
N/A
WordPress PDF for WPForms plugin <= 6.3.0 - Broken Acc… add-ons.org
PDF for WPForms
2026-02-20T15:46:39.366Z 2026-02-20T15:46:39.366Z
CVE-2025-68531
N/A
WordPress ModelTheme Addons for WPBakery and Elementor… modeltheme
ModelTheme Addons for WPBakery and Elementor
2026-02-20T15:46:39.192Z 2026-02-20T15:46:39.192Z
CVE-2025-68526
N/A
WordPress Modal Popup Box plugin <= 1.6.1 - PHP Object… A WP Life
Modal Popup Box
2026-02-20T15:46:39.001Z 2026-02-20T15:46:39.001Z
CVE-2025-68514
N/A
WordPress Paid Member Subscriptions plugin <= 2.16.8 -… Cozmoslabs
Paid Member Subscriptions
2026-02-20T15:46:38.821Z 2026-02-20T15:46:38.821Z
CVE-2025-68501
N/A
WordPress Mollie Payments for WooCommerce plugin <= 8.… Mollie
Mollie Payments for WooCommerce
2026-02-20T15:46:38.572Z 2026-02-20T15:46:38.572Z
CVE-2025-68495
N/A
WordPress JetEngine plugin <= 3.8.0 - Reflected Cross … Crocoblock
JetEngine
2026-02-20T15:46:38.333Z 2026-02-20T15:46:38.333Z
CVE-2025-68069
N/A
WordPress Directorist plugin <= 8.5.10 - Broken Access… wpWax
Directorist
2026-02-20T15:46:38.064Z 2026-02-20T15:46:38.064Z
CVE-2025-68051
N/A
WordPress Shiprocket plugin <= 2.0.8 - Insecure Direct… Shiprocket
Shiprocket
2026-02-20T15:46:37.798Z 2026-02-20T15:46:37.798Z
CVE-2025-68050
N/A
WordPress Leadpages plugin <= 1.1.3 - Broken Access Co… Leadpages
Leadpages
2026-02-20T15:46:37.392Z 2026-02-20T15:46:37.392Z
CVE-2025-68048
N/A
WordPress NextMove Lite plugin <= 2.23.0 - Broken Acce… XLPlugins
NextMove Lite
2026-02-20T15:46:37.159Z 2026-02-20T15:46:37.159Z
CVE-2025-68043
N/A
WordPress LottieFiles plugin <= 3.0.0 - Broken Access … LottieFiles
LottieFiles
2026-02-20T15:46:36.994Z 2026-02-20T15:46:36.994Z
CVE-2025-68042
N/A
WordPress Travelpayouts plugin <= 1.2.1 - Broken Acces… Travelpayouts
Travelpayouts
2026-02-20T15:46:36.826Z 2026-02-20T15:46:36.826Z
CVE-2025-68037
N/A
WordPress Export Media URLs plugin <= 2.2 - Reflected … Atlas Gondal
Export Media URLs
2026-02-20T15:46:36.647Z 2026-02-20T15:46:36.647Z
CVE-2025-68032
N/A
WordPress Advanced WC Analytics plugin <= 3.19.0 - Set… Passionate Brains
Advanced WC Analytics
2026-02-20T15:46:36.477Z 2026-02-20T15:46:36.477Z
CVE-2025-68031
N/A
WordPress افزونه پیامک حرفه ای فراز اس ام اس plugin <=… faraz sms
افزونه پیامک حرفه ای فراز اس ام اس
2026-02-20T15:46:36.305Z 2026-02-20T15:46:36.305Z
CVE-2025-68028
N/A
WordPress GA4WP: Google Analytics for WordPress plugin… Passionate Brains
GA4WP: Google Analytics for WordPress
2026-02-20T15:46:36.112Z 2026-02-20T15:46:36.112Z
CVE-2025-68026
N/A
WordPress LC Wizard plugin <= 2.1.1 - Settings Change … Niaj Morshed
LC Wizard
2026-02-20T15:46:35.938Z 2026-02-20T15:46:35.938Z
CVE-2025-68025
N/A
WordPress Addonify Floating Cart For WooCommerce plugi… Addonify
Addonify Floating Cart For WooCommerce
2026-02-20T15:46:35.764Z 2026-02-20T15:46:35.764Z
CVE-2025-68024
N/A
WordPress Addonify – WooCommerce Wishlist plugin <= 2.… Addonify
Addonify – WooCommerce Wishlist
2026-02-20T15:46:35.579Z 2026-02-20T15:46:35.579Z
CVE-2025-68023
N/A
WordPress Addonify – Compare Products For WooCommerce … Addonify
Addonify &#8211; Compare Products For WooCommerce
2026-02-20T15:46:35.312Z 2026-02-20T15:46:35.312Z
CVE-2025-68022
N/A
WordPress Plugin BlueX for WooCommerce plugin <= 3.1.6… soporteblue
Plugin BlueX for WooCommerce
2026-02-20T15:46:34.974Z 2026-02-20T15:46:34.974Z
CVE-2025-68021
N/A
WordPress ConveyThis plugin <= 269.5 - Broken Access C… ConveyThis
ConveyThis
2026-02-20T15:46:34.400Z 2026-02-20T15:46:34.400Z
CVE-2025-68005
N/A
WordPress Easy Hotel Booking plugin <= 1.8.7 - Broken … themewant
Easy Hotel Booking
2026-02-20T15:46:34.209Z 2026-02-20T15:46:34.209Z
CVE-2025-68002
N/A
WordPress Open User Map plugin <= 1.4.16 - Arbitrary F… 100plugins
Open User Map
2026-02-20T15:46:34.046Z 2026-02-20T15:46:34.046Z
CVE-2025-68000
N/A
WordPress Testimonial Slider plugin <= 2.0.15 - Broken… PickPlugins
Testimonial Slider
2026-02-20T15:46:33.875Z 2026-02-20T15:46:33.875Z
CVE-2025-67998
N/A
WordPress Miraculous Elementor plugin <= 2.0.7 - Broke… kamleshyadav
Miraculous Elementor
2026-02-20T15:46:33.699Z 2026-02-20T15:46:33.699Z
CVE-2025-67997
N/A
WordPress Travelicious theme < 1.6.7 - PHP Object Inje… BoldThemes
Travelicious
2026-02-20T15:46:33.519Z 2026-02-20T15:46:33.519Z
CVE-2025-67996
N/A
WordPress Nestin theme < 1.2.6 - PHP Object Injection … BoldThemes
Nestin
2026-02-20T15:46:33.328Z 2026-02-20T15:46:33.328Z
CVE-2025-67995
N/A
WordPress PatioTime theme < 2.1 - PHP Object Injection… LoftOcean
PatioTime
2026-02-20T15:46:33.136Z 2026-02-20T15:46:33.136Z
CVE-2025-67994
N/A
WordPress YayCurrency plugin <= 3.3 - Arbitrary Conten… YayCommerce
YayCurrency
2026-02-20T15:46:32.934Z 2026-02-20T15:46:32.934Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-69329
N/A
WordPress Prestige theme < 1.4.1 - PHP Object Injectio… Jthemes
Prestige
2026-02-20T15:46:49.874Z 2026-02-20T15:46:49.874Z
CVE-2025-69328
N/A
WordPress Booking and Rental Manager plugin <= 2.5.9 -… magepeopleteam
Booking and Rental Manager
2026-02-20T15:46:49.714Z 2026-02-20T15:46:49.714Z
CVE-2025-69326
N/A
WordPress NEX-Forms plugin <= 9.1.7 - Reflected Cross … Basix
NEX-Forms
2026-02-20T15:46:49.532Z 2026-02-20T15:46:49.532Z
CVE-2025-69325
N/A
WordPress Primer MyData for Woocommerce plugin <= 4.2.… primersoftware
Primer MyData for Woocommerce
2026-02-20T15:46:49.332Z 2026-02-20T15:46:49.332Z
CVE-2025-69324
N/A
WordPress NEX-Forms plugin <= 9.1.7 - Cross Site Scrip… Basix
NEX-Forms
2026-02-20T15:46:49.111Z 2026-02-20T15:46:49.111Z
CVE-2025-69323
N/A
WordPress Slimstat Analytics plugin <= 5.3.2 - Reflect… VeronaLabs
Slimstat Analytics
2026-02-20T15:46:48.922Z 2026-02-20T15:46:48.922Z
CVE-2025-69322
N/A
WordPress PeakShops theme < 1.5.9 - Local File Inclusi… fuelthemes
PeakShops
2026-02-20T15:46:48.754Z 2026-02-20T15:46:48.754Z
CVE-2025-69310
N/A
WordPress Woodly Core plugin <= 1.4 - SQL Injection vu… TeconceTheme
Woodly Core
2026-02-20T15:46:48.517Z 2026-02-20T15:46:48.517Z
CVE-2025-69309
N/A
WordPress Saasplate Core plugin <= 1.2.8 - SQL Injecti… TeconceTheme
Saasplate Core
2026-02-20T15:46:48.321Z 2026-02-20T15:46:48.321Z
CVE-2025-69308
N/A
WordPress Nestbyte Core plugin <= 1.2 - SQL Injection … TeconceTheme
Nestbyte Core
2026-02-20T15:46:48.088Z 2026-02-20T15:46:48.088Z
CVE-2025-69307
N/A
WordPress Medinik Core plugin <= 1.3.6 - SQL Injection… TeconceTheme
Medinik Core
2026-02-20T15:46:47.896Z 2026-02-20T15:46:47.896Z
CVE-2025-69306
N/A
WordPress Electio Core plugin <= 1.4 - SQL Injection v… TeconceTheme
Electio Core
2026-02-20T15:46:47.710Z 2026-02-20T15:46:47.710Z
CVE-2025-69305
N/A
WordPress Crete Core plugin <= 1.4.3 - SQL Injection v… TeconceTheme
Crete Core
2026-02-20T15:46:47.544Z 2026-02-20T15:46:47.544Z
CVE-2025-69304
N/A
WordPress Allmart plugin <= 1.1 - SQL Injection vulner… TeconceTheme
Allmart
2026-02-20T15:46:47.349Z 2026-02-20T15:46:47.349Z
CVE-2025-69303
N/A
WordPress ModelTheme Framework plugin <= 1.9.2 - Broke… modeltheme
ModelTheme Framework
2026-02-20T15:46:47.100Z 2026-02-20T15:46:47.100Z
CVE-2025-69302
N/A
WordPress DesignThemes Core Features plugin <= 2.3 - R… designthemes
DesignThemes Core Features
2026-02-20T15:46:46.906Z 2026-02-20T15:46:46.906Z
CVE-2025-69301
N/A
WordPress PhotoMe theme <= 5.6.11 - PHP Object Injecti… ThemeGoods
PhotoMe
2026-02-20T15:46:46.725Z 2026-02-20T15:46:46.725Z
CVE-2025-69299
N/A
WordPress Oxygen theme <= 6.0.8 - Server Side Request … Laborator
Oxygen
2026-02-20T15:46:46.533Z 2026-02-20T15:46:46.533Z
CVE-2025-69298
N/A
WordPress Gauge theme <= 6.56.4 - Broken Access Contro… GhostPool
Gauge
2026-02-20T15:46:46.307Z 2026-02-20T15:46:46.307Z
CVE-2025-69297
N/A
WordPress Aardvark Plugin plugin <= 2.19 - Broken Acce… GhostPool
Aardvark Plugin
2026-02-20T15:46:46.098Z 2026-02-20T15:46:46.098Z
CVE-2025-69296
N/A
WordPress Aardvark theme <= 4.6.3 - Reflected Cross Si… GhostPool
Aardvark
2026-02-20T15:46:45.930Z 2026-02-20T15:46:45.930Z
CVE-2025-69295
N/A
WordPress Coven Core plugin <= 1.3 - SQL Injection vul… TeconceTheme
Coven Core
2026-02-20T15:46:45.751Z 2026-02-20T15:46:45.751Z
CVE-2025-69294
N/A
WordPress PeakShops theme <= 1.5.9 - PHP Object Inject… fuelthemes
PeakShops
2026-02-20T15:46:45.572Z 2026-02-20T15:46:45.572Z
CVE-2025-69063
N/A
WordPress New User Approve plugin <= 3.2.0 - Broken Ac… Saad Iqbal
New User Approve
2026-02-20T15:46:45.384Z 2026-02-20T15:46:45.384Z
CVE-2025-69011
N/A
WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site S… WPKube
Cool Tag Cloud
2026-02-20T15:46:45.000Z 2026-02-20T15:46:45.000Z
CVE-2025-68895
N/A
WordPress AhaChat Messenger Marketing plugin <= 1.1 - … ahachat
AhaChat Messenger Marketing
2026-02-20T15:46:44.814Z 2026-02-20T15:46:44.814Z
CVE-2025-68880
N/A
WordPress Simple Archive Generator plugin <= 5.2 - Ref… peterwsterling
Simple Archive Generator
2026-02-20T15:46:44.624Z 2026-02-20T15:46:44.624Z
CVE-2025-68863
N/A
WordPress iContact for Gravity Forms plugin <= 1.3.2 -… Zack Katz
iContact for Gravity Forms
2026-02-20T15:46:44.401Z 2026-02-20T15:46:44.401Z
CVE-2025-68862
N/A
WordPress Woo File Dropzone plugin <= 1.1.7 - Arbitrar… Murtaza Bhurgri
Woo File Dropzone
2026-02-20T15:46:44.189Z 2026-02-20T15:46:44.189Z
CVE-2025-68856
N/A
WordPress Mopinion Feedback Form plugin <= 1.1.1 - Ref… keeswolters
Mopinion Feedback Form
2026-02-20T15:46:44.011Z 2026-02-20T15:46:44.011Z
ID Description Published Updated
fkie_cve-2025-69310 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-20T16:22:19.267 2026-02-20T16:55:22.933
fkie_cve-2025-69309 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-20T16:22:19.137 2026-02-20T16:55:22.933
fkie_cve-2025-69308 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-20T16:22:19.007 2026-02-20T16:55:22.933
fkie_cve-2025-69307 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-20T16:22:18.877 2026-02-20T16:55:22.933
fkie_cve-2025-69306 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-20T16:22:18.740 2026-02-20T16:55:22.933
fkie_cve-2025-69305 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-20T16:22:18.573 2026-02-20T16:55:22.933
fkie_cve-2025-69304 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-20T16:22:18.397 2026-02-20T16:55:22.933
fkie_cve-2025-69303 Missing Authorization vulnerability in modeltheme ModelTheme Framework modeltheme-framework allows … 2026-02-20T16:22:18.243 2026-02-20T16:55:22.933
fkie_cve-2025-69302 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:18.030 2026-02-20T16:55:22.933
fkie_cve-2025-69301 Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injecti… 2026-02-20T16:22:17.497 2026-02-20T16:55:22.933
fkie_cve-2025-69299 Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Requ… 2026-02-20T16:22:17.330 2026-02-20T16:55:22.933
fkie_cve-2025-69298 Missing Authorization vulnerability in GhostPool Gauge gauge allows Exploiting Incorrectly Configur… 2026-02-20T16:22:16.557 2026-02-20T16:55:22.933
fkie_cve-2025-69297 Missing Authorization vulnerability in GhostPool Aardvark Plugin aardvark-plugin allows Exploiting … 2026-02-20T16:22:16.400 2026-02-20T16:55:22.933
fkie_cve-2025-69296 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:16.247 2026-02-20T16:55:22.933
fkie_cve-2025-69295 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-20T16:22:16.100 2026-02-20T16:55:22.933
fkie_cve-2025-69294 Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Inj… 2026-02-20T16:22:15.597 2026-02-20T16:55:22.933
fkie_cve-2025-69063 Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiti… 2026-02-20T16:22:15.450 2026-02-20T16:55:22.933
fkie_cve-2025-69011 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:15.307 2026-02-20T16:55:22.933
fkie_cve-2025-68895 Authentication Bypass Using an Alternate Path or Channel vulnerability in ahachat AhaChat Messenger… 2026-02-20T16:22:15.157 2026-02-20T16:55:22.933
fkie_cve-2025-68880 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:15.013 2026-02-20T16:55:22.933
fkie_cve-2025-68863 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:14.860 2026-02-20T16:55:22.933
fkie_cve-2025-68862 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mur… 2026-02-20T16:22:14.720 2026-02-20T16:55:22.933
fkie_cve-2025-68856 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:14.577 2026-02-20T16:55:22.933
fkie_cve-2025-68855 Insertion of Sensitive Information Into Sent Data vulnerability in themeglow JobBoard Job listing j… 2026-02-20T16:22:14.433 2026-02-20T16:55:22.933
fkie_cve-2025-68854 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:14.287 2026-02-20T16:55:22.933
fkie_cve-2025-68853 Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Obj… 2026-02-20T16:22:14.150 2026-02-20T16:55:22.933
fkie_cve-2025-68852 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:13.983 2026-02-20T16:55:22.933
fkie_cve-2025-68848 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:13.853 2026-02-20T16:55:22.933
fkie_cve-2025-68847 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:13.687 2026-02-20T16:55:22.933
fkie_cve-2025-68846 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-20T16:22:13.480 2026-02-20T16:55:22.933
ID Severity Description Published Updated
ghsa-xj9r-5fj6-ggxg
Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access… 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-wxxw-44fp-jqf8
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagau… 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-wpg4-2qjv-77p8
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-ggw3-fhv7-grw9
Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Obje… 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-fqgg-crp3-j3c7
Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next … 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-fggr-p59v-2mcv
Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploi… 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-8vc4-7wqx-f4mg
Missing Authorization vulnerability in FooPlugins FooGallery foogallery allows Exploiting Incorrect… 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-3w2w-p865-v7xr
Missing Authorization vulnerability in Elementor Image Optimizer by Elementor image-optimization al… 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-2f8f-8j4g-347v
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-02-19T18:31:52Z 2026-02-19T18:31:52Z
ghsa-wmwp-mm98-6v2w
6.9 (4.0)
An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability all… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-wm72-rvv8-pj93
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-vr5h-3wp5-6cwh
Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-v6hg-mv73-76vg
Server-Side Request Forgery (SSRF) vulnerability in Burhan Nasir Smart Auto Upload Images smart-aut… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-r435-hw3q-c6g9
10.0 (4.0)
Path traversal and content injection in JobRunnerBackground.aspx in DynamicWeb 8 (all) and 9 (<9.19… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-q6h4-vchv-83f2
3.1 (3.1)
1.3 (4.0)
A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknow… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-prg6-5jr3-w97r
6.3 (3.1)
2.1 (4.0)
A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknow… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-pf2p-f275-6cmx
3.3 (3.1)
1.9 (4.0)
A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::d… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-pc7g-8v63-q7v6
3.5 (3.1)
2.0 (4.0)
A flaw has been found in busy up to 2.5.5. The affected element is an unknown function of the file … 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-p8m9-mjw8-hvvx
7.3 (3.1)
5.5 (4.0)
A vulnerability has been found in itsourcecode Event Management System 1.0. Affected by this issue … 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-p49x-q2cv-fcx5
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-mvpq-f8gc-p5w2
Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows … 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-m9jv-r277-q8wc
6.1 (3.1)
The xmlrpc attacks blocker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in ver… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-j9jq-xf7q-w5fq
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8the… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-hj65-hc2p-x4v9
4.3 (3.1)
2.1 (4.0)
A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects un… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-h6m8-m47v-mggw
4.3 (3.1)
2.1 (4.0)
A vulnerability was found in CoCoTeaNet CyreneAdmin up to 1.3.0. This affects an unknown part of th… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-fmpr-3jc4-w7xx
Missing Authorization vulnerability in designinvento DirectoryPress directorypress allows Exploitin… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-f85v-6xgf-cq2m
5.4 (3.1)
The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorizatio… 2026-02-19T18:31:50Z 2026-02-19T18:31:51Z
ghsa-f4vx-r87q-vg6c
4.3 (3.1)
The Dealia – Request a quote plugin for WordPress is vulnerable to unauthorized modification of dat… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-c8mg-7p65-9g6x
5.1 (4.0)
Reflected Cross-Site Scripting (XSS) vulnerability in '/index.php' in Lewe WebMeasure, which allows… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ghsa-8w2r-p2q4-9ww5
7.3 (3.1)
5.5 (4.0)
A flaw has been found in itsourcecode Event Management System 1.0. Affected by this vulnerability i… 2026-02-19T18:31:51Z 2026-02-19T18:31:51Z
ID Severity Description Package Published Updated
pysec-2023-185
3.7 (3.1)
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… matrix-synapse 2023-09-27T15:19:00+00:00 2023-09-30T05:24:54.158504+00:00
pysec-2023-172
4.3 (3.1)
The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, … hana-ml 2023-09-12T02:15:00Z 2023-09-29T22:26:12.812435Z
pysec-2023-183
opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulne… opencv-python 2023-09-29T21:15:28.039030+00:00
pysec-2023-184
opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that … opencv-python-headless 2023-09-29T21:15:27.980982+00:00
pysec-2023-182
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in whee… opencv-contrib-python-headless 2023-09-29T21:15:27.863960+00:00
pysec-2023-181
opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that a… opencv-contrib-python 2023-09-29T21:15:27.924031+00:00
pysec-2023-180
4.3 (3.1)
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… matrix-synapse 2023-09-27T15:19:00+00:00 2023-09-29T20:23:39.578838+00:00
pysec-2023-179
This affects versions of the package pydash before 6.0.0. A number of pydash methods such… pydash 2023-09-28T05:15:00+00:00 2023-09-28T10:29:02.604249+00:00
pysec-2023-175
Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to … pillow 2023-09-25T17:25:13.946374Z
pysec-2023-177
An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges … gevent 2023-09-25T12:15:00+00:00 2023-09-25T14:28:09.019811+00:00
pysec-2023-176
6.5 (3.1)
GeoNode is an open source platform that facilitates the creation, sharing, and collaborat… geonode 2023-09-15T21:15:00+00:00 2023-09-20T17:25:44.504117+00:00
pysec-2023-174
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulner… imagecodecs 2023-09-20T05:12:42.403706+00:00
pysec-2023-173
5.3 (3.1)
Piccolo is an ORM and query builder which supports asyncio. In versions 0.120.0 and prior… piccolo 2023-09-12T21:15:00+00:00 2023-09-19T05:26:00.954782+00:00
pysec-2023-171
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authent… apache-airflow 2023-09-12T12:15:00+00:00 2023-09-12T14:27:23.735580+00:00
pysec-2023-170
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authent… apache-airflow 2023-09-12T12:15:00+00:00 2023-09-12T14:27:23.660908+00:00
pysec-2023-169
7.8 (3.1)
Git Providers can read from the wrong environment because they get the same cache directo… salt 2023-09-05T11:15:00+00:00 2023-09-08T20:23:17.288300+00:00
pysec-2023-168
5.3 (3.1)
Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation… vyper 2023-09-04T18:15:00+00:00 2023-09-08T16:30:59.497777+00:00
pysec-2023-167
5.3 (3.1)
Vyper is a Pythonic Smart Contract Language. For the following (probably non-exhaustive) … vyper 2023-09-04T18:15:00+00:00 2023-09-08T15:22:00.929480+00:00
pysec-2023-166
5.3 (3.1)
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving se… salt 2023-09-05T11:15:00+00:00 2023-09-07T20:23:20.197102+00:00
pysec-2023-141
5.4 (3.1)
A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to ex… pynetbox 2023-08-10T20:15:00Z 2023-09-07T15:50:00.665697Z
pysec-2023-165
6.5 (3.1)
GitPython is a python library used to interact with Git repositories. In order to resolv… gitpython 2023-08-30T22:15:00+00:00 2023-09-07T14:33:25.683922+00:00
pysec-2023-164
4.7 (3.1)
borgbackup is an opensource, deduplicating archiver with compression and authenticated en… borgbackup 2023-08-30T18:15:00+00:00 2023-09-06T16:31:20.448538+00:00
pysec-2023-161
7.8 (3.1)
GitPython is a python library used to interact with Git repositories. When resolving a p… gitpython 2023-08-28T18:15:00+00:00 2023-09-05T22:26:14.587281+00:00
pysec-2023-160
6.5 (3.1)
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-resp… keylime 2023-08-25T17:15:00+00:00 2023-09-05T20:22:36.414406+00:00
pysec-2023-159
7.7 (3.1)
RestrictedPython is a restricted execution environment for Python to run untrusted code. … restrictedpython 2023-08-30T18:15:00+00:00 2023-09-05T16:32:17.658660+00:00
pysec-2023-158
8.0 (3.1)
The session fixation vulnerability allowed the authenticated user to continue accessing A… apache-airflow 2023-08-23T16:15:00+00:00 2023-09-04T08:29:37.781470+00:00
pysec-2023-157
6.1 (3.1)
jupyter-server is the backend for Jupyter web applications. Improper cross-site credentia… jupyter-server 2023-08-28T21:15:00+00:00 2023-09-01T20:23:47.344401+00:00
pysec-2023-156
8.8 (3.1)
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphe… apache-airflow-providers-apache-spark 2023-08-28T08:15:00+00:00 2023-09-01T18:27:11.679668+00:00
pysec-2023-155
6.1 (3.1)
jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. … jupyter-server 2023-08-28T21:15:00+00:00 2023-09-01T16:31:48.441782+00:00
pysec-2023-101
A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to… selenium 2023-07-05T18:15:00Z 2023-08-31T20:11:41.543920Z
ID Description Updated
gsd-2024-33313 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.602150Z
gsd-2024-33312 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.613311Z
gsd-2024-33311 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.685067Z
gsd-2024-33310 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.715276Z
gsd-2024-33309 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.735013Z
gsd-2024-33308 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.615223Z
gsd-2024-33307 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.602795Z
gsd-2024-33306 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.659851Z
gsd-2024-33305 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.739023Z
gsd-2024-33304 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.691194Z
gsd-2024-33303 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.649918Z
gsd-2024-33302 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.701883Z
gsd-2024-33301 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.641343Z
gsd-2024-33300 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.610877Z
gsd-2024-33299 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.637274Z
gsd-2024-33298 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.607025Z
gsd-2024-33297 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.621980Z
gsd-2024-33296 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.654274Z
gsd-2024-33295 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.611481Z
gsd-2024-33294 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.703136Z
gsd-2024-33293 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.628768Z
gsd-2024-33292 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.717307Z
gsd-2024-33291 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.706255Z
gsd-2024-33290 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.723985Z
gsd-2024-33289 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.629216Z
gsd-2024-33288 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.604465Z
gsd-2024-33287 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.751819Z
gsd-2024-33286 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.745545Z
gsd-2024-33285 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.712627Z
gsd-2024-33284 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.716892Z
ID Description Published Updated
MAL-2026-537 Malicious code in mysql2.js (npm) 2026-01-27T08:11:31Z 2026-02-02T05:56:29Z
MAL-2026-536 Malicious code in morgan.js (npm) 2026-01-27T08:11:31Z 2026-02-02T05:56:29Z
MAL-2026-516 Malicious code in overstock-login-layer (npm) 2026-01-25T15:01:01Z 2026-02-02T05:56:29Z
MAL-2026-515 Malicious code in overstock-jenkins (npm) 2026-01-23T21:37:36Z 2026-02-02T05:56:29Z
MAL-2026-514 Malicious code in overstock-health-express (npm) 2026-01-23T21:00:46Z 2026-02-02T05:56:29Z
MAL-2026-513 Malicious code in overstock-component-library-v3 (npm) 2026-01-25T14:59:25Z 2026-02-02T05:56:29Z
MAL-2026-512 Malicious code in overstock-component-library (npm) 2026-01-25T15:11:29Z 2026-02-02T05:56:29Z
MAL-2026-511 Malicious code in ostk-otel-autoconfig (npm) 2026-01-25T14:59:26Z 2026-02-02T05:56:29Z
mal-2026-599 Malicious code in jwt-pack (npm) 2026-01-29T04:14:08Z 2026-02-02T05:56:28Z
mal-2026-592 Malicious code in lvldragdrop (npm) 2026-01-28T16:39:23Z 2026-02-02T05:56:28Z
mal-2026-591 Malicious code in kol7a (npm) 2026-01-28T16:39:23Z 2026-02-02T05:56:28Z
mal-2026-570 Malicious code in lyatly-utils (npm) 2026-01-28T07:58:35Z 2026-02-02T05:56:28Z
mal-2026-552 Malicious code in json-mapping-web (npm) 2026-01-28T03:24:26Z 2026-02-02T05:56:28Z
mal-2026-535 Malicious code in knex.js (npm) 2026-01-27T08:11:31Z 2026-02-02T05:56:28Z
mal-2026-534 Malicious code in internallib_v828 (npm) 2026-01-27T08:12:56Z 2026-02-02T05:56:28Z
mal-2026-533 Malicious code in hiagentxhjrceme (npm) 2026-01-27T08:08:59Z 2026-02-02T05:56:28Z
mal-2026-532 Malicious code in hiagentxhjrce (npm) 2026-01-27T08:08:59Z 2026-02-02T05:56:28Z
mal-2026-524 Malicious code in mapkit-example-vue (npm) 2026-01-27T02:25:01Z 2026-02-02T05:56:28Z
mal-2026-523 Malicious code in mapkit-example-svelte (npm) 2026-01-27T02:25:01Z 2026-02-02T05:56:28Z
mal-2026-522 Malicious code in magento-coding-standard-eslint-plugin (npm) 2026-01-27T02:25:01Z 2026-02-02T05:56:28Z
MAL-2026-599 Malicious code in jwt-pack (npm) 2026-01-29T04:14:08Z 2026-02-02T05:56:28Z
MAL-2026-592 Malicious code in lvldragdrop (npm) 2026-01-28T16:39:23Z 2026-02-02T05:56:28Z
MAL-2026-591 Malicious code in kol7a (npm) 2026-01-28T16:39:23Z 2026-02-02T05:56:28Z
MAL-2026-570 Malicious code in lyatly-utils (npm) 2026-01-28T07:58:35Z 2026-02-02T05:56:28Z
MAL-2026-552 Malicious code in json-mapping-web (npm) 2026-01-28T03:24:26Z 2026-02-02T05:56:28Z
MAL-2026-535 Malicious code in knex.js (npm) 2026-01-27T08:11:31Z 2026-02-02T05:56:28Z
MAL-2026-534 Malicious code in internallib_v828 (npm) 2026-01-27T08:12:56Z 2026-02-02T05:56:28Z
MAL-2026-533 Malicious code in hiagentxhjrceme (npm) 2026-01-27T08:08:59Z 2026-02-02T05:56:28Z
MAL-2026-532 Malicious code in hiagentxhjrce (npm) 2026-01-27T08:08:59Z 2026-02-02T05:56:28Z
MAL-2026-524 Malicious code in mapkit-example-vue (npm) 2026-01-27T02:25:01Z 2026-02-02T05:56:28Z
ID Description Published Updated
wid-sec-w-2025-1798 Intel Graphics Driver: Mehrere Schwachstellen 2025-08-12T22:00:00.000+00:00 2025-09-22T22:00:00.000+00:00
wid-sec-w-2025-1328 PostgreSQL JDBC Treiber: Schwachstelle ermöglicht Offenlegung von Informationen 2025-06-15T22:00:00.000+00:00 2025-09-22T22:00:00.000+00:00
wid-sec-w-2025-0119 Linux Kernel: Mehrere Schwachstellen 2025-01-19T23:00:00.000+00:00 2025-09-22T22:00:00.000+00:00
wid-sec-w-2024-3525 Keycloak: Mehrere Schwachstellen 2024-11-21T23:00:00.000+00:00 2025-09-22T22:00:00.000+00:00
wid-sec-w-2024-1047 VPN Clients / DHCP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-05-06T22:00:00.000+00:00 2025-09-22T22:00:00.000+00:00
wid-sec-w-2025-1761 Omnissa Workspace ONE UEM: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2025-08-11T22:00:00.000+00:00 2025-09-21T22:00:00.000+00:00
wid-sec-w-2025-1906 ImageMagick: Mehrere Schwachstellen 2025-08-25T22:00:00.000+00:00 2025-09-18T22:00:00.000+00:00
wid-sec-w-2025-1790 Microsoft Windows und Windows Server: Mehrere Schwachstellen 2025-08-12T22:00:00.000+00:00 2025-09-18T22:00:00.000+00:00
wid-sec-w-2025-1722 OpenJPEG: Schwachstelle ermöglicht Codeausführung 2025-08-05T22:00:00.000+00:00 2025-09-18T22:00:00.000+00:00
wid-sec-w-2025-0396 Grub: Mehrere Schwachstellen 2025-02-18T23:00:00.000+00:00 2025-09-18T22:00:00.000+00:00
wid-sec-w-2023-3086 bluez: Schwachstelle ermöglicht Codeausführung 2023-12-07T23:00:00.000+00:00 2025-09-18T22:00:00.000+00:00
wid-sec-w-2022-2058 Grub2: Mehrere Schwachstellen 2022-11-15T23:00:00.000+00:00 2025-09-18T22:00:00.000+00:00
wid-sec-w-2025-2079 JetBrains TeamCity: Mehrere Schwachstellen 2025-09-16T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-2076 Liferay Portal: Mehrere Schwachstellen 2025-09-16T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-2071 WatchGuard Firebox: Schwachstelle ermöglicht Codeausführung 2025-09-16T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-2068 Aruba EdgeConnect: Mehrere Schwachstellen 2025-09-16T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-1756 libTIFF: Schwachstelle ermöglicht Denial of Service 2025-08-11T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-1638 Nvidia Treiber: Mehrere Schwachstellen 2025-07-23T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-1485 Microsoft Developer Tools und git: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-1480 Red Hat Enterprise Linux (jq): Mehrere Schwachstellen ermöglichen Denial of Service 2025-07-07T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-1158 Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-05-27T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0675 Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2025-04-01T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0511 Apache Tomcat: Schwachstelle ermöglicht Manipulation, Codeausführung und Offenlegung von Daten 2025-03-10T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0500 Django: Schwachstelle ermöglicht Denial of Service 2025-03-06T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0274 NGINX: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-02-05T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0263 Golang Go: Schwachstelle ermöglicht Offenlegung von Informationen 2025-02-04T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0262 Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2025-02-04T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0155 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-01-21T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0063 Django: Schwachstelle ermöglicht Denial of Service 2025-01-14T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-0026 Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2025-01-07T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
ID Description Published Updated
ssa-501673 SSA-501673: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Products 2021-12-19T00:00:00Z 2021-12-19T00:00:00Z
ssa-802578 SSA-802578: Multiple File Parsing Vulnerabilities in JTTK before V11.1.1.0 and JT Utilities before V13.1.1.0 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-595101 SSA-595101: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.5 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-523250 SSA-523250: Improper Certificate Validation Vulnerability in SINUMERIK Edge 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-496292 SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-463116 SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-396621 SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-390195 SSA-390195: LibVNC Vulnerabilities in SIMATIC ITC Products 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-352143 SSA-352143: Multiple File Parsing Vulnerabilities in JTTK before V11.0.3.0 and JT Utilities before V13.0.3.0 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-199605 SSA-199605: Arbitrary File Download Vulnerability in SIMATIC eaSie PCS 7 Skill Package 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-161331 SSA-161331: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer before V2021.3.1 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-160202 SSA-160202: Multiple Access Control Vulnerabilities in SiPass Integrated 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-133772 SSA-133772: Zip Path Traversal Vulnerability in Teamcenter Active Workspace 2021-12-14T00:00:00Z 2021-12-14T00:00:00Z
ssa-044112 SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS 2021-11-09T00:00:00Z 2021-12-14T00:00:00Z
ssa-779699 SSA-779699: Two Incorrect Authorization Vulnerabilities in Mendix 2021-11-09T00:00:00Z 2021-11-09T00:00:00Z
ssa-755517 SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server 2021-11-09T00:00:00Z 2021-11-09T00:00:00Z
ssa-740908 SSA-740908: File Parsing Vulnerabilities in JT Translator in NX 2021-11-09T00:00:00Z 2021-11-09T00:00:00Z
ssa-537983 SSA-537983: Local Code Execution Vulnerability in SENTRON powermanager V3 2021-11-09T00:00:00Z 2021-11-09T00:00:00Z
ssa-338732 SSA-338732: Information Disclosure Vulnerability in Mendix 2021-11-09T00:00:00Z 2021-11-09T00:00:00Z
ssa-328042 SSA-328042: File Parsing Vulnerabilities in OBJ Translator in NX 2021-11-09T00:00:00Z 2021-11-09T00:00:00Z
ssa-145157 SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 2021-11-09T00:00:00Z 2021-11-09T00:00:00Z
ssa-847986 SSA-847986: Denial-of-Service Vulnerabilities in SIPROTEC 5 relays 2021-09-14T00:00:00Z 2021-10-12T00:00:00Z
ssa-723417 SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D 2021-05-11T00:00:00Z 2021-10-12T00:00:00Z
ssa-538778 SSA-538778: SmartVNC Vulnerabilities in SIMATIC HMI/WinCC Products 2021-05-11T00:00:00Z 2021-10-12T00:00:00Z
ssa-500748 SSA-500748: Denial-of-Service Vulnerabilities in SIPROTEC 5 Devices 2021-09-14T00:00:00Z 2021-10-12T00:00:00Z
ssa-178380 SSA-178380: Denial-of-Service Vulnerability in SINUMERIK Controllers 2021-10-12T00:00:00Z 2021-10-12T00:00:00Z
ssa-173565 SSA-173565: Denial-of-Service Vulnerability in RUGGEDCOM ROX Devices 2021-10-12T00:00:00Z 2021-10-12T00:00:00Z
ssa-163251 SSA-163251: Multiple Vulnerabilities in SINEC NMS 2021-10-12T00:00:00Z 2021-10-12T00:00:00Z
ssa-150692 SSA-150692: Multiple Vulnerabilities in RUGGEDCOM ROX 2021-09-14T00:00:00Z 2021-10-12T00:00:00Z
ssa-728618 SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 2021-09-28T00:00:00Z 2021-09-28T00:00:00Z
ID Description Published Updated
rhsa-2026:1488 Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.1 security update 2026-01-28T12:24:36+00:00 2026-02-21T13:35:32+00:00
rhsa-2026:1381 Red Hat Security Advisory: osbuild-composer security update 2026-01-27T16:31:53+00:00 2026-02-21T13:35:30+00:00
rhsa-2026:1380 Red Hat Security Advisory: osbuild-composer security update 2026-01-27T16:02:11+00:00 2026-02-21T13:35:29+00:00
rhsa-2026:1379 Red Hat Security Advisory: osbuild-composer security update 2026-01-27T16:11:53+00:00 2026-02-21T13:35:29+00:00
rhsa-2026:1378 Red Hat Security Advisory: osbuild-composer security update 2026-01-27T15:37:28+00:00 2026-02-21T13:35:29+00:00
rhsa-2026:1377 Red Hat Security Advisory: image-builder security update 2026-01-27T16:34:13+00:00 2026-02-21T13:35:28+00:00
rhsa-2026:1072 Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.1 security update 2026-01-25T22:43:46+00:00 2026-02-21T13:35:09+00:00
rhsa-2026:1071 Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.1 security update 2026-01-25T22:31:05+00:00 2026-02-21T13:35:08+00:00
rhsa-2026:1067 Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.1 2026-01-23T16:45:25+00:00 2026-02-21T13:35:07+00:00
rhsa-2026:1025 Red Hat Security Advisory: osbuild-composer security update 2026-01-22T16:47:34+00:00 2026-02-21T13:35:02+00:00
rhsa-2026:0987 Red Hat Security Advisory: osbuild-composer security update 2026-01-22T11:30:22+00:00 2026-02-21T13:35:00+00:00
rhsa-2026:0973 Red Hat Security Advisory: osbuild-composer security update 2026-01-22T05:34:26+00:00 2026-02-21T13:35:00+00:00
rhsa-2026:0718 Red Hat Security Advisory: Moderate: Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update 2026-01-15T15:59:28+00:00 2026-02-21T13:34:55+00:00
rhsa-2026:0671 Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.4 2026-01-15T08:34:14+00:00 2026-02-21T13:34:51+00:00
rhsa-2026:0663 Red Hat Security Advisory: OpenShift Container Platform 4.20.11 bug fix and security update 2026-01-22T03:28:29+00:00 2026-02-21T13:34:51+00:00
rhsa-2026:0530 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.12 2026-01-13T20:48:49+00:00 2026-02-21T13:34:49+00:00
rhsa-2026:0527 Red Hat Security Advisory: VolSync v0.14 security fixes and container updates 2026-01-13T16:52:50+00:00 2026-02-21T13:34:49+00:00
rhsa-2026:0477 Red Hat Security Advisory: skopeo security update 2026-01-12T20:03:23+00:00 2026-02-21T13:34:49+00:00
rhsa-2026:0314 Red Hat Security Advisory: osbuild-composer security update 2026-01-08T11:35:59+00:00 2026-02-21T13:34:36+00:00
rhsa-2026:0246 Red Hat Security Advisory: grafana security update 2026-01-07T14:46:41+00:00 2026-02-21T13:34:35+00:00
rhsa-2026:0245 Red Hat Security Advisory: grafana security update 2026-01-07T14:45:51+00:00 2026-02-21T13:34:34+00:00
rhsa-2026:0244 Red Hat Security Advisory: grafana security update 2026-01-07T14:38:56+00:00 2026-02-21T13:34:33+00:00
rhsa-2026:0243 Red Hat Security Advisory: grafana security update 2026-01-07T14:43:26+00:00 2026-02-21T13:34:33+00:00
rhsa-2026:0227 Red Hat Security Advisory: osbuild-composer security update 2026-01-07T11:32:40+00:00 2026-02-21T13:34:32+00:00
rhsa-2026:0226 Red Hat Security Advisory: osbuild-composer security update 2026-01-07T12:46:50+00:00 2026-02-21T13:34:31+00:00
rhsa-2025:23948 Red Hat Security Advisory: grafana security update 2025-12-22T17:10:29+00:00 2026-02-21T13:32:31+00:00
rhsa-2025:23747 Red Hat Security Advisory: grafana security update 2025-12-22T01:42:23+00:00 2026-02-21T13:32:29+00:00
rhsa-2025:23740 Red Hat Security Advisory: go-toolset:rhel8 security update 2025-12-22T01:19:27+00:00 2026-02-21T13:32:28+00:00
rhsa-2025:23746 Red Hat Security Advisory: grafana security update 2025-12-22T01:42:33+00:00 2026-02-21T13:32:27+00:00
rhsa-2025:23741 Red Hat Security Advisory: go-toolset:rhel8 security update 2025-12-22T01:35:17+00:00 2026-02-21T13:32:26+00:00
ID Description Published Updated
icsa-12-102-03 MICROSYS PROMOTIC Use After Free Vulnerability 2012-01-13T07:00:00.000000Z 2025-06-06T21:45:00.844061Z
icsa-12-102-02 Koyo Ecom Modules Vulnerabilities 2012-01-13T07:00:00.000000Z 2025-06-06T21:44:54.405200Z
icsa-12-102-01 Certec atvise webMI2ADS Vulnerabilities 2012-01-13T07:00:00.000000Z 2025-06-06T21:44:47.952815Z
icsa-12-095-01a ABB Multiple Components Buffer Overflow 2012-01-06T07:00:00.000000Z 2025-06-06T21:44:41.492952Z
icsa-12-088-01a Rockwell Automation FactoryTalk RNADiagReceiver 2012-12-30T07:00:00.000000Z 2025-06-06T21:44:35.026913Z
icsa-12-083-01 Ecava IntegraXor ActiveX Directory Traversal 2012-12-25T07:00:00.000000Z 2025-06-06T21:44:28.588784Z
icsa-12-032-02 GE Intelligent Platforms Proficy Plant Applications Memory Corruption Vulnerabilities 2012-11-04T06:00:00.000000Z 2025-06-06T21:44:08.900302Z
icsa-12-032-01 GE Proficy Historian ihDataArchiver 2012-11-04T06:00:00.000000Z 2025-06-06T21:44:02.422128Z
icsa-15-223-01 Schneider Electric IMT25 DTM Vulnerability 2015-05-14T06:00:00.000000Z 2025-06-06T21:43:55.748554Z
icsa-15-211-01 Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Password Storage Vulnerability 2015-05-02T06:00:00.000000Z 2025-06-06T21:43:48.989760Z
icsa-15-202-03b Siemens RUGGEDCOM ROS and ROX-based Devices TLS POODLE Vulnerability (Update B) 2015-04-23T06:00:00.000000Z 2025-06-06T21:43:42.534859Z
icsa-15-195-01 Siemens SICAM MIC Authentication Bypass Vulnerability 2015-04-16T06:00:00.000000Z 2025-06-06T21:43:23.165608Z
icsa-15-181-01 Baxter SIGMA Spectrum Infusion System Vulnerabilities 2015-04-02T06:00:00.000000Z 2025-06-06T21:43:16.616537Z
icsa-15-176-02 PACTware Exceptional Conditions Vulnerability 2015-03-28T06:00:00.000000Z 2025-06-06T21:43:10.139031Z
icsa-15-176-01 Siemens Climatix BACnet/IP Communication Module Cross-site Scripting Vulnerability 2015-03-28T06:00:00.000000Z 2025-06-06T21:43:03.687724Z
icsa-15-174-01 Hospira Symbiq Infusion System Vulnerability 2015-03-26T06:00:00.000000Z 2025-06-06T21:42:57.240178Z
icsa-15-167-01 Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability 2015-03-19T06:00:00.000000Z 2025-06-06T21:42:37.652958Z
icsa-15-162-01a RLE Nova-Wind Turbine HMI Unsecure Credentials Vulnerability (Update A) 2015-03-14T06:00:00.000000Z 2025-06-06T21:42:31.195189Z
icsa-15-160-02 Sinapsi eSolar Light Plaintext Passwords Vulnerability 2015-03-12T06:00:00.000000Z 2025-06-06T21:42:24.744905Z
icsa-15-160-01a N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A) 2015-03-12T06:00:00.000000Z 2025-06-06T21:42:18.275644Z
icsa-15-155-01 XZERES 442SR Wind Turbine CSRF Vulnerability 2015-03-07T07:00:00.000000Z 2025-06-06T21:42:11.814604Z
icsa-15-153-02 Moxa SoftCMS Buffer Overflow Vulnerability 2015-03-05T07:00:00.000000Z 2025-06-06T21:42:05.109005Z
icsa-15-148-01 IDS RTU 850 Directory Traversal Vulnerability 2015-02-28T07:00:00.000000Z 2025-06-06T21:41:52.181609Z
icsa-15-141-01a Schneider Electric OFS Server Vulnerability (Update A) 2015-02-21T07:00:00.000000Z 2025-06-06T21:41:39.275086Z
icsa-15-132-02 Rockwell Automation RSView32 Weak Encryption Algorithm on Passwords 2015-02-12T07:00:00.000000Z 2025-06-06T21:41:32.834568Z
icsa-15-132-01 Hospira LifeCare PCA Infusion System Vulnerabilities 2015-02-12T07:00:00.000000Z 2025-06-06T21:41:26.200883Z
icsa-15-125-01 Hospira LifeCare PCA Infusion System Vulnerabilities 2015-02-05T07:00:00.000000Z 2025-06-06T21:41:19.746904Z
icsa-15-120-01 Opto 22 Multiple Product Vulnerabilities 2015-01-31T07:00:00.000000Z 2025-06-06T21:41:13.287112Z
icsa-15-111-02 Rockwell Automation RSLinx Classic Vulnerability 2015-01-22T07:00:00.000000Z 2025-06-06T21:41:06.693068Z
icsa-15-111-01 Emerson AMS Device Manager SQL Injection Vulnerability 2015-01-22T07:00:00.000000Z 2025-06-06T21:41:00.174231Z
ID Description Published Updated
cisco-sa-pi-epnm-bfjsrjp5 Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-pi-epnm-BFjSRJP5 Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-ivpa-cmdinj-c5xrbboy Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-ivpa-cmdinj-C5XRbbOy Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-ise-credentials-tkto3h3 Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-ise-credentials-tkTO3h3 Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-ipphone-csrf-hocmxw2c Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-ipphone-csrf-HOCmXW2c Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-intersight-forward-c45ncgqb Cisco Intersight Virtual Appliance Unauthenticated Port Forwarding Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-intersight-forward-C45ncgqb Cisco Intersight Virtual Appliance Unauthenticated Port Forwarding Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-expressway-injection-x475ebtq Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-expressway-injection-X475EbTQ Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-duo-dha-filewrite-xpmbmzak Cisco Duo Device Health Application for Windows Arbitrary File Write Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-duo-dha-filewrite-xPMBMZAK Cisco Duo Device Health Application for Windows Arbitrary File Write Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-cucm-injection-g6mbwh2 Cisco Unified Communications Manager SQL Injection Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-cucm-injection-g6MbwH2 Cisco Unified Communications Manager SQL Injection Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-cucm-imp-xss-qtt4vdsk Cisco Unified Communications Products Cross-Site Scripting Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-cucm-imp-xss-QtT4VdsK Cisco Unified Communications Products Cross-Site Scripting Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-clamav-dos-ftkhqmwz ClamAV AutoIt Module Denial of Service Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-clamav-dos-FTkhqMWZ ClamAV AutoIt Module Denial of Service Vulnerability 2023-08-16T16:00:00+00:00 2023-08-16T16:00:00+00:00
cisco-sa-ac-leak-sew6g2kd Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client 2023-08-08T15:00:00+00:00 2023-08-08T15:00:00+00:00
cisco-sa-ac-leak-Sew6g2kd Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client 2023-08-08T15:00:00+00:00 2023-08-08T15:00:00+00:00
cisco-sa-ucm-file-read-h8h4hej3 Cisco Unified Communications Products Arbitrary File Read Vulnerability 2022-04-20T16:00:00+00:00 2023-08-02T20:18:45+00:00
cisco-sa-ucm-file-read-h8h4HEJ3 Cisco Unified Communications Products Arbitrary File Read Vulnerability 2022-04-20T16:00:00+00:00 2023-08-02T20:18:45+00:00
cisco-sa-asaftd-aclconfig-wvk52f3z Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ACLs Not Installed upon Reload 2023-07-27T16:00:00+00:00 2023-07-27T16:38:54+00:00
cisco-sa-asaftd-aclconfig-wVK52f3z Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ACLs Not Installed upon Reload 2023-07-27T16:00:00+00:00 2023-07-27T16:38:54+00:00
cisco-sa-bw-priv-esc-qtguzosq Cisco BroadWorks Privilege Escalation Vulnerability 2023-07-19T16:00:00+00:00 2023-07-20T17:42:21+00:00
cisco-sa-bw-priv-esc-qTgUZOsQ Cisco BroadWorks Privilege Escalation Vulnerability 2023-07-19T16:00:00+00:00 2023-07-20T17:42:21+00:00
cisco-sa-spa-web-multi-7kvpmu2f Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities 2023-07-19T16:00:00+00:00 2023-07-19T16:00:00+00:00
cisco-sa-spa-web-multi-7kvPmu2F Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities 2023-07-19T16:00:00+00:00 2023-07-19T16:00:00+00:00
ID Description Published Updated
msrc_cve-2024-50276 net: vertexcom: mse102x: Fix possible double free of TX skb 2024-11-02T00:00:00.000Z 2026-02-19T01:09:15.000Z
msrc_cve-2022-48174 There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution. 2023-08-01T00:00:00.000Z 2026-02-19T01:09:13.000Z
msrc_cve-2024-42156 s390/pkey: Wipe copies of clear-key structures on failure 2024-07-01T07:00:00.000Z 2026-02-19T01:09:06.000Z
msrc_cve-2021-20194 There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y CONFIG_BPF=y CONFIG_CGROUPS=y CONFIG_CGROUP_BPF=y CONFIG_HARDENED_USERCOPY not set and BPF hook to getsockopt is registered). As result of BPF execution the local user can trigger bug in __cgroup_bpf_run_filter_getsockopt() function that can lead to heap overflow (because of non-hardened usercopy). The impact of attack could be deny of service or possibly privileges escalation. 2021-02-02T00:00:00.000Z 2026-02-19T01:09:06.000Z
msrc_cve-2024-50282 drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() 2024-11-02T00:00:00.000Z 2026-02-19T01:09:04.000Z
msrc_cve-2025-23419 TLS Session Resumption Vulnerability 2025-02-02T00:00:00.000Z 2026-02-19T01:08:54.000Z
msrc_cve-2020-27815 A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality integrity as well as system availability. 2021-05-02T00:00:00.000Z 2026-02-19T01:08:54.000Z
msrc_cve-2024-41965 Vim < v9.1.0648 has a double-free in dialog_changed() 2024-08-02T00:00:00.000Z 2026-02-19T01:08:51.000Z
msrc_cve-2024-50158 RDMA/bnxt_re: Fix out of bound check 2024-11-02T00:00:00.000Z 2026-02-19T01:08:45.000Z
msrc_cve-2020-25672 A memory leak vulnerability was found in Linux kernel in llcp_sock_connect 2021-05-02T00:00:00.000Z 2026-02-19T01:08:42.000Z
msrc_cve-2024-42157 s390/pkey: Wipe sensitive data on failure 2024-07-01T07:00:00.000Z 2026-02-19T01:08:33.000Z
msrc_cve-2019-3887 A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that L1 guest could access L0's APIC register values via L2 guest when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue. 2019-04-02T00:00:00.000Z 2026-02-19T01:08:30.000Z
msrc_cve-2024-50162 bpf: devmap: provide rxq after redirect 2024-11-02T00:00:00.000Z 2026-02-19T01:08:24.000Z
msrc_cve-2025-0167 netrc and default credential leak 2025-02-02T00:00:00.000Z 2026-02-19T01:08:19.000Z
msrc_cve-2019-3819 A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable. 2019-01-02T00:00:00.000Z 2026-02-19T01:08:18.000Z
msrc_cve-2024-42160 f2fs: check validation of fault attrs in f2fs_build_fault_attr() 2024-07-01T07:00:00.000Z 2026-02-19T01:08:14.000Z
msrc_cve-2024-50287 media: v4l2-tpg: prevent the risk of a division by zero 2024-11-02T00:00:00.000Z 2026-02-19T01:08:07.000Z
msrc_cve-2019-3016 In a Linux KVM guest that has PV TLB enabled a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out. 2020-01-02T00:00:00.000Z 2026-02-19T01:08:06.000Z
msrc_cve-2024-6923 Email header injection due to unquoted newlines 2024-08-02T00:00:00.000Z 2026-02-19T01:07:57.000Z
msrc_cve-2010-4563 The Linux kernel when using IPv6 allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent as demonstrated by thcping. 2012-02-02T00:00:00.000Z 2026-02-19T01:07:54.000Z
msrc_cve-2024-11234 Configuring a proxy in a stream context might allow for CRLF injection in URIs 2024-11-02T00:00:00.000Z 2026-02-19T01:07:50.000Z
msrc_cve-2010-0298 The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region a related issue to CVE-2010-0306. 2010-02-02T00:00:00.000Z 2026-02-19T01:07:42.000Z
msrc_cve-2007-4998 cp when running with an option to preserve symlinks on multiple OSes allows local user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination. 2008-01-02T00:00:00.000Z 2026-02-19T01:07:31.000Z
msrc_cve-2024-8932 OOB access in ldap_escape 2024-11-02T00:00:00.000Z 2026-02-19T01:07:21.000Z
msrc_cve-1999-0656 The ugidd RPC interface by design allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names. 2000-02-02T00:00:00.000Z 2026-02-19T01:07:19.000Z
msrc_cve-2024-41957 Vim double free in src/alloc.c:616 2024-08-02T00:00:00.000Z 2026-02-19T01:07:18.000Z
msrc_cve-2025-0725 gzip integer overflow 2025-02-02T00:00:00.000Z 2026-02-19T01:07:09.000Z
msrc_cve-2010-0309 The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file. 2010-02-02T00:00:00.000Z 2026-02-19T01:07:06.000Z
msrc_cve-2024-53858 Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli 2024-11-02T00:00:00.000Z 2026-02-19T01:07:01.000Z
msrc_cve-2024-42224 net: dsa: mv88e6xxx: Correct check for empty list 2024-07-01T07:00:00.000Z 2026-02-19T01:06:57.000Z
ID Description Published Updated
opensuse-su-2025:15447-1 gstreamer-plugins-rs-1.26.5+git11.949807a4-1.1 on GA media 2025-08-15T00:00:00Z 2025-08-15T00:00:00Z
opensuse-su-2025:15446-1 gstreamer-devtools-1.26.5-1.1 on GA media 2025-08-15T00:00:00Z 2025-08-15T00:00:00Z
opensuse-su-2025:15445-1 framework_tool-0.4.5-2.1 on GA media 2025-08-15T00:00:00Z 2025-08-15T00:00:00Z
opensuse-su-2025:15444-1 chromedriver-139.0.7258.127-1.1 on GA media 2025-08-15T00:00:00Z 2025-08-15T00:00:00Z
opensuse-su-2025:15443-1 chromedriver-139.0.7258.127-1.1 on GA media 2025-08-15T00:00:00Z 2025-08-15T00:00:00Z
opensuse-su-2025:15442-1 tomcat11-11.0.9-1.1 on GA media 2025-08-14T00:00:00Z 2025-08-14T00:00:00Z
opensuse-su-2025:15441-1 tomcat10-10.1.43-1.1 on GA media 2025-08-14T00:00:00Z 2025-08-14T00:00:00Z
opensuse-su-2025:15440-1 tomcat-9.0.107-1.1 on GA media 2025-08-14T00:00:00Z 2025-08-14T00:00:00Z
opensuse-su-2025:15439-1 python311-pypdf-6.0.0-1.1 on GA media 2025-08-14T00:00:00Z 2025-08-14T00:00:00Z
opensuse-su-2025:15438-1 rz-pm-0.3.3+git~14~gcee0d0d-1.1 on GA media 2025-08-13T00:00:00Z 2025-08-13T00:00:00Z
opensuse-su-2025:15437-1 qemu-10.0.3-1.1 on GA media 2025-08-13T00:00:00Z 2025-08-13T00:00:00Z
opensuse-su-2025:15436-1 matrix-synapse-1.136.0-1.1 on GA media 2025-08-13T00:00:00Z 2025-08-13T00:00:00Z
opensuse-su-2025:15435-1 libunbound8-1.23.1-1.1 on GA media 2025-08-12T00:00:00Z 2025-08-12T00:00:00Z
opensuse-su-2025:15434-1 govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media 2025-08-12T00:00:00Z 2025-08-12T00:00:00Z
opensuse-su-2025:15433-1 framework-inputmodule-control-0.2.0-3.1 on GA media 2025-08-12T00:00:00Z 2025-08-12T00:00:00Z
opensuse-su-2025:15432-1 gio-branding-upstream-2.84.4-1.1 on GA media 2025-08-11T00:00:00Z 2025-08-11T00:00:00Z
opensuse-su-2025:15431-1 nvidia-open-driver-G06-signed-default-devel-570.172.08-2.1 on GA media 2025-08-10T00:00:00Z 2025-08-10T00:00:00Z
opensuse-su-2025:15430-1 texmaker-6.0.1-2.1 on GA media 2025-08-09T00:00:00Z 2025-08-09T00:00:00Z
opensuse-su-2025:15429-1 python311-uv-0.8.8-1.1 on GA media 2025-08-09T00:00:00Z 2025-08-09T00:00:00Z
opensuse-su-2025:15428-1 net-tools-2.10-4.1 on GA media 2025-08-09T00:00:00Z 2025-08-09T00:00:00Z
opensuse-su-2025:15427-1 ffmpeg-4-4.4.6-5.1 on GA media 2025-08-09T00:00:00Z 2025-08-09T00:00:00Z
opensuse-su-2025:15426-1 keylime-ima-policy-0.2.7+141-1.1 on GA media 2025-08-08T00:00:00Z 2025-08-08T00:00:00Z
opensuse-su-2025:15425-1 himmelblau-1.2.0+git.0.6befefc-1.1 on GA media 2025-08-08T00:00:00Z 2025-08-08T00:00:00Z
opensuse-su-2025:15424-1 govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media 2025-08-08T00:00:00Z 2025-08-08T00:00:00Z
opensuse-su-2025:15423-1 go1.24-1.24.6-1.1 on GA media 2025-08-08T00:00:00Z 2025-08-08T00:00:00Z
opensuse-su-2025:15422-1 go1.23-1.23.12-1.1 on GA media 2025-08-08T00:00:00Z 2025-08-08T00:00:00Z
opensuse-su-2025:15421-1 chromedriver-139.0.7258.66-1.1 on GA media 2025-08-08T00:00:00Z 2025-08-08T00:00:00Z
opensuse-su-2025:15420-1 go1.25-1.25rc3-1.1 on GA media 2025-08-07T00:00:00Z 2025-08-07T00:00:00Z
opensuse-su-2025:15419-1 traefik2-2.11.28-1.1 on GA media 2025-08-06T00:00:00Z 2025-08-06T00:00:00Z
opensuse-su-2025:15418-1 traefik-3.5.0-1.1 on GA media 2025-08-06T00:00:00Z 2025-08-06T00:00:00Z
ID Description Published Updated
osv-2024-24 Security exception in java.base/java.util.Arrays.copyOf 2024-01-20T00:04:01.700018Z 2024-03-13T14:21:08.789955Z
osv-2024-161 Heap-buffer-overflow in pcre2_fuzzsupport.c 2024-03-11T00:00:35.333844Z 2024-03-11T00:00:35.334478Z
osv-2024-6 Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char> 2024-01-06T00:11:05.929725Z 2024-03-08T14:19:24.750958Z
osv-2024-120 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer 2024-02-21T00:00:31.892843Z 2024-02-21T00:00:31.893273Z
osv-2024-117 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer 2024-02-19T00:05:05.793082Z 2024-02-19T00:05:05.793781Z
osv-2024-104 Heap-buffer-overflow in mrb_memsearch 2024-02-15T00:00:54.473735Z 2024-02-15T00:00:54.474295Z
osv-2024-103 Heap-use-after-free in xmlRemoveID 2024-02-15T00:00:51.271367Z 2024-02-15T00:00:51.271973Z
osv-2024-102 Heap-buffer-overflow in mrb_memsearch 2024-02-15T00:00:47.674187Z 2024-02-15T00:00:47.674761Z
osv-2024-66 Heap-buffer-overflow in mrb_memsearch 2024-02-01T00:13:20.152510Z 2024-02-14T14:19:50.489803Z
osv-2024-65 Heap-buffer-overflow in mrb_memsearch 2024-02-01T00:12:19.091201Z 2024-02-14T14:19:46.707491Z
osv-2024-30 Heap-buffer-overflow in mrb_memsearch 2024-01-22T00:05:20.803259Z 2024-02-14T14:19:17.217387Z
osv-2024-29 Heap-buffer-overflow in mrb_memsearch 2024-01-22T00:01:33.424797Z 2024-02-14T14:18:57.560129Z
osv-2024-96 Heap-buffer-overflow in mrb_memsearch 2024-02-11T00:00:45.699847Z 2024-02-14T14:17:20.000446Z
osv-2024-88 Heap-use-after-free in fuzzer_execute_ex 2024-02-09T00:02:29.396272Z 2024-02-09T00:02:29.396615Z
osv-2024-82 Heap-use-after-free in xmlValidatePopElement 2024-02-08T00:02:35.342535Z 2024-02-08T00:02:35.343044Z
osv-2024-81 Heap-use-after-free in xmlRemoveID 2024-02-08T00:02:18.078478Z 2024-02-08T00:02:18.079086Z
osv-2024-79 Heap-double-free in supported_features 2024-02-07T00:03:00.459996Z 2024-02-07T00:03:00.460359Z
osv-2024-64 Global-buffer-overflow in ReadVariantArrayBuiltInType 2024-02-01T00:03:55.790847Z 2024-02-06T14:18:25.113400Z
osv-2024-77 Heap-use-after-free in xmlRemoveID 2024-02-06T00:06:09.284671Z 2024-02-06T00:06:09.285249Z
osv-2024-72 UNKNOWN READ in LLVMFuzzerRunDriver 2024-02-03T00:04:56.169161Z 2024-02-03T00:04:56.169853Z
osv-2022-126 Heap-buffer-overflow in md_analyze_inlines 2022-02-07T00:00:05.720107Z 2024-01-30T14:00:58.446611Z
osv-2024-36 Heap-use-after-free in LLVMFuzzerRunDriver 2024-01-24T00:12:37.499127Z 2024-01-24T00:12:37.499641Z
osv-2020-828 Heap-use-after-free in draco::Metadata::AddSubMetadata 2020-07-14T05:37:49.784283Z 2024-01-18T14:11:45.334998Z
osv-2020-778 Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat 2020-07-14T05:37:30.449855Z 2024-01-18T14:11:43.087585Z
osv-2020-824 UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait 2020-07-14T05:37:49.054851Z 2024-01-18T14:11:41.842226Z
osv-2020-800 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c 2020-07-14T05:37:39.527741Z 2024-01-18T14:11:40.439013Z
osv-2021-1082 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c 2021-08-01T00:00:48.182181Z 2024-01-18T14:06:40.887686Z
osv-2024-7 Heap-buffer-overflow in icu_75::Locale::Locale 2024-01-07T00:11:45.064745Z 2024-01-07T00:11:45.065397Z
osv-2023-1382 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2024-01-01T00:12:36.633204Z 2024-01-01T00:12:36.633589Z
osv-2023-1381 Heap-buffer-overflow in NetworkInterface::processPacket 2024-01-01T00:03:49.670656Z 2024-01-01T00:03:49.671160Z
ID Description Published Updated
rustsec-2021-0153 `encoding` is unmaintained 2021-12-05T12:00:00Z 2023-03-12T07:17:34Z
rustsec-2019-0040 `boxfnonce` obsolete with release of Rust 1.35.0 2019-06-20T12:00:00Z 2023-03-12T07:15:02Z
rustsec-2020-0168 mach is unmaintained 2020-07-14T12:00:00Z 2023-03-12T06:59:25Z
rustsec-2021-0151 ncollide2d is unmaintained 2021-01-29T12:00:00Z 2023-03-12T06:47:41Z
rustsec-2021-0150 ncollide3d is unmaintained 2021-01-29T12:00:00Z 2023-03-12T06:47:41Z
rustsec-2021-0149 nphysics2d is unmaintained 2021-01-29T12:00:00Z 2023-03-11T22:34:14Z
rustsec-2021-0148 nphysics3d is unmaintained 2021-01-29T12:00:00Z 2023-03-11T22:34:14Z
rustsec-2023-0018 Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) 2023-02-24T12:00:00Z 2023-03-04T21:50:30Z
rustsec-2022-0091 `tauri` filesystem scope partial bypass 2022-09-19T12:00:00Z 2023-02-25T15:16:50Z
rustsec-2023-0002 git2 Rust package suppresses ssh host key checking 2023-01-12T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2023-0001 reject_remote_clients Configuration corruption 2023-01-04T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2022-0057 badge is Unmaintained 2022-08-31T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2022-0053 mapr is Unmaintained 2022-08-24T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2021-0146 Crate `twoway` deprecated by the author 2021-05-20T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2021-0140 rusttype is Unmaintained 2021-04-01T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2021-0136 `sass-rs` has been deprecated 2021-04-07T12:00:00Z 2023-02-09T03:11:29Z
rustsec-2022-0089 `aliyun-oss-client` secret exposure 2022-11-19T12:00:00Z 2023-02-07T22:07:40Z
rustsec-2022-0088 `tauri`'s `readDir` endpoint allows possible enumeration outside of filesystem scope 2022-08-07T12:00:00Z 2023-02-05T18:48:17Z
rustsec-2023-0004 bzip2 Denial of Service (DoS) 2023-01-09T12:00:00Z 2023-02-04T13:29:07Z
rustsec-2022-0077 `claim` is Unmaintained 2022-12-04T12:00:00Z 2023-02-04T10:58:43Z
rustsec-2022-0087 Slack Webhooks secrets leak in debug logs 2022-10-10T12:00:00Z 2023-02-02T11:45:24Z
rustsec-2022-0086 Slack OAuth Secrets leak in debug logs 2022-07-22T12:00:00Z 2023-02-02T11:43:48Z
rustsec-2022-0085 matrix-sdk Impersonation of room keys 2022-09-29T12:00:00Z 2023-02-02T11:35:31Z
rustsec-2022-0084 libp2p Lack of resource management DoS 2022-07-12T12:00:00Z 2023-02-02T11:22:51Z
rustsec-2022-0083 evm incorrect state transition 2022-10-25T12:00:00Z 2023-02-02T11:20:42Z
rustsec-2020-0166 personnummer Input validation error 2020-09-04T12:00:00Z 2023-02-02T10:57:52Z
rustsec-2023-0003 git2 does not verify SSH keys by default 2023-01-20T12:00:00Z 2023-01-20T23:06:55Z
rustsec-2022-0080 parity-util-mem Unmaintained 2022-11-30T12:00:00Z 2023-01-16T09:26:23Z
rustsec-2022-0075 Bug in pooling instance allocator 2022-11-10T12:00:00Z 2023-01-14T00:56:30Z
rustsec-2022-0073 crate has been renamed to `embedded-alloc` 2022-12-21T12:00:00Z 2022-12-23T16:46:57Z
ID Description Published Updated
bit-grafana-2021-39226 Snapshot authentication bypass in grafana 2024-03-06T10:59:36.715Z 2025-10-22T09:08:25.162Z
bit-golang-2020-0601 2024-03-06T11:08:38.203Z 2025-10-22T09:08:25.162Z
bit-gitlab-2023-7028 Weak Password Recovery Mechanism for Forgotten Password in GitLab 2024-03-06T10:53:45.400Z 2025-10-22T09:08:25.162Z
bit-gitlab-2021-22205 2024-03-06T11:20:01.948Z 2025-10-22T09:08:25.162Z
bit-flink-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API 2024-03-06T10:51:56.799Z 2025-10-22T09:08:25.162Z
bit-drupal-2020-36193 2024-03-06T10:55:50.196Z 2025-10-22T09:08:25.162Z
bit-drupal-2020-28949 2024-03-06T10:56:00.687Z 2025-10-22T09:08:25.162Z
bit-drupal-2020-13671 2024-03-06T10:57:20.872Z 2025-10-22T09:08:25.162Z
bit-drupal-2020-11023 Potential XSS vulnerability in jQuery 2024-03-06T10:59:06.711Z 2025-10-22T09:08:25.162Z
bit-dotnet-2023-38180 .NET and Visual Studio Denial of Service Vulnerability 2024-03-06T10:52:18.075Z 2025-10-22T09:08:25.162Z
bit-couchdb-2022-24706 Remote Code Execution Vulnerability in Packaging 2024-03-06T10:51:24.067Z 2025-10-22T09:08:25.162Z
bit-apisix-2022-24112 apisix/batch-requests plugin allows overwriting the X-REAL-IP header 2024-03-06T10:51:05.969Z 2025-10-22T09:08:25.162Z
bit-apache-2021-42013 Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) 2024-03-06T10:54:27.969Z 2025-10-22T09:08:25.162Z
bit-apache-2021-40438 mod_proxy SSRF 2024-03-06T10:55:02.200Z 2025-10-22T09:08:25.162Z
bit-airflow-2020-13927 2024-03-06T11:00:56.284Z 2025-10-22T09:08:25.162Z
bit-airflow-2020-11978 2024-03-06T11:01:37.264Z 2025-10-22T09:08:25.162Z
bit-powershell-2025-25004 PowerShell Elevation of Privilege Vulnerability 2025-10-21T08:49:11.753Z 2025-10-21T09:07:40.239Z
bit-gitlab-2025-2934 Allocation of Resources Without Limits or Throttling in GitLab 2025-10-11T09:05:29.864Z 2025-10-21T09:07:40.239Z
bit-envoy-2025-62409 Envoy allows large requests and responses to cause TCP connection pool crash 2025-10-21T08:41:16.273Z 2025-10-21T09:07:40.239Z
bit-pillow-2025-48379 Pillow Vulnerable to Write Buffer Overflow on BCn encoding 2025-07-03T05:57:27.923Z 2025-10-16T18:08:44.835Z
bit-django-2025-48432 2025-09-25T08:40:36.630Z 2025-10-16T18:08:44.835Z
bit-redis-2025-48367 Redis DoS Vulnerability due to bad connection error handling 2025-10-16T12:07:00.720Z 2025-10-16T12:31:38.153Z
bit-keydb-2025-48367 Redis DoS Vulnerability due to bad connection error handling 2025-10-16T12:00:55.638Z 2025-10-16T12:31:38.153Z
bit-grafana-2025-3580 2025-05-28T11:44:30.552Z 2025-10-16T11:24:40.537Z
bit-pytorch-2025-55554 2025-10-05T23:47:56.493Z 2025-10-16T00:08:58.048Z
bit-pytorch-2025-55552 2025-10-05T23:47:53.725Z 2025-10-16T00:08:58.048Z
bit-pytorch-2025-55551 2025-10-05T23:47:52.236Z 2025-10-16T00:08:58.048Z
bit-pytorch-2025-55560 2025-10-15T08:50:02.845Z 2025-10-15T09:08:35.035Z
bit-python-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols() 2025-10-14T09:29:29.557Z 2025-10-14T09:53:39.450Z
bit-libpython-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols() 2025-10-14T09:24:35.254Z 2025-10-14T09:53:39.450Z
ID Description Updated
var-201601-0030 The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in… 2024-07-23T20:39:22.908000Z
var-202203-0083 Non-transparent sharing of branch predictor within a context in some Intel(R) Processors … 2024-07-23T20:38:45.721000Z
var-202109-1315 A memory corruption issue was addressed with improved state management. This issue is fix… 2024-07-23T20:38:26.600000Z
var-201511-0101 The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows … 2024-07-23T20:38:26.767000Z
var-200609-0313 Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to… 2024-07-23T20:38:25.677000Z
var-201710-1408 An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… 2024-07-23T20:38:20.584000Z
var-201812-0271 Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular e… 2024-07-23T20:38:14.990000Z
var-200804-0038 Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1,… 2024-07-23T20:37:41.672000Z
var-200703-0030 Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 all… 2024-07-23T20:37:19.915000Z
var-200411-0172 The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, all… 2024-07-23T20:37:18.156000Z
var-202207-1358 When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out o… 2024-07-23T20:37:02.433000Z
var-202106-0344 Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user… 2024-07-23T20:37:01.572000Z
var-201205-0195 Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other produ… 2024-07-23T20:37:00.626000Z
var-201912-0535 A logic issue was addressed with improved state management. This issue is fixed in iOS 12… 2024-07-23T20:36:29.815000Z
var-201310-0355 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, a… 2024-07-23T20:36:28.203000Z
var-201605-0037 The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0… 2024-07-23T20:35:57.230000Z
var-201203-0200 Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … 2024-07-23T20:35:40.622000Z
var-201203-0174 Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers … 2024-07-23T20:35:40.553000Z
var-201902-0192 If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (… 2024-07-23T20:34:36.580000Z
var-201712-1100 An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari be… 2024-07-23T20:33:34.770000Z
var-202110-1685 This issue was addressed with improved checks. This issue is fixed in Security Update 202… 2024-07-23T20:33:31.079000Z
var-202210-0997 An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML docum… 2024-07-23T20:33:29.996000Z
var-201410-1217 Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in c… 2024-07-23T20:33:29.145000Z
var-201203-0180 Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allo… 2024-07-23T20:33:25.333000Z
var-202004-1972 A race condition was addressed with additional validation. This issue is fixed in iOS 13.… 2024-07-23T20:33:16.245000Z
var-201006-1139 WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… 2024-07-23T20:33:08.459000Z
var-201912-0606 An input validation issue was addressed with improved input validation. This issue is fix… 2024-07-23T20:33:06.757000Z
var-201912-0576 An out-of-bounds read was addressed with improved input validation. This issue is fixed i… 2024-07-23T20:33:05.700000Z
var-201409-1148 Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash4… 2024-07-23T20:33:04.791000Z
var-202209-0761 A buffer overflow issue was addressed with improved memory handling. This issue is fixed … 2024-07-23T20:32:59.056000Z
ID Description Published Updated
jvndb-2016-000112 Apache Struts vulnerable to validation bypass in Getter method 2016-06-20T17:19+09:00 2022-08-09T14:08+09:00
jvndb-2016-000111 Apache Struts vulnerable to cross-site request forgery 2016-06-20T17:18+09:00 2022-08-09T14:05+09:00
jvndb-2020-000055 Apache Struts 2 vulnerable to denial-of-service (DoS) 2020-08-25T13:59+09:00 2022-08-09T13:57+09:00
jvndb-2020-000084 Apache Struts 2 vulnerable to remote code execution (S2-061) 2020-12-11T15:09+09:00 2022-08-09T13:55+09:00
jvndb-2022-000062 Kaitai Struct: compiler vulnerable to denial-of-service (DoS) 2022-08-04T15:14+09:00 2022-08-04T15:14+09:00
jvndb-2022-002143 Information Disclosure Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator 2022-08-01T17:10+09:00 2022-08-01T17:10+09:00
jvndb-2022-000061 "JustSystems JUST Online Update for J-License" starts a program with an unquoted file path 2022-07-28T13:40+09:00 2022-07-28T13:40+09:00
jvndb-2021-000007 OS command injection vulnerability in multiple Infoscience Corporation log management tools 2021-01-27T18:31+09:00 2022-07-26T15:53+09:00
jvndb-2022-001953 Growi vulnerable to weak password requirements 2022-06-15T17:47+09:00 2022-06-15T17:47+09:00
jvndb-2021-000073 Multiple vulnerabilities in Cybozu Garoon 2021-08-02T16:42+09:00 2022-05-24T15:16+09:00
jvndb-2022-001800 Installer of Trend Micro HouseCall for Home Networks may insecurely load Dynamic Link Libraries 2022-05-13T16:24+09:00 2022-05-13T16:24+09:00
jvndb-2021-000097 Multiple vulnerabilities in CLUSTERPRO X and EXPRESSCLUSTER X 2021-10-29T15:22+09:00 2022-04-20T14:03+09:00
jvndb-2022-001526 Trend Micro Antivirus for Mac vulnerable to privilege escalation 2022-04-07T16:58+09:00 2022-04-07T16:58+09:00
jvndb-2017-000174 Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries 2017-07-14T13:38+09:00 2022-03-31T17:43+09:00
jvndb-2022-001494 Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents 2022-03-31T17:25+09:00 2022-03-31T17:25+09:00
jvndb-2021-004912 Multiple vulnerabilities in multiple ELECOM routers 2021-12-02T17:16+09:00 2022-03-30T16:11+09:00
jvndb-2021-000108 Multiple vulnerabilities in multiple ELECOM LAN routers 2021-11-30T16:23+09:00 2022-03-29T16:18+09:00
jvndb-2022-001477 Netcommunity OG410X and OG810X VoIP gateway/Hikari VoIP adapter for business offices vulnerable to OS command injection 2022-03-23T12:08+09:00 2022-03-23T12:08+09:00
jvndb-2022-000021 Multiple vulnerabilities in KINGSOFT "WPS Office" and "KINGSOFT Internet Security" 2022-03-16T14:46+09:00 2022-03-16T14:46+09:00
jvndb-2021-008345 Installer of Trend Micro Portable Security may insecurely load Dynamic Link Libraries 2022-03-14T16:43+09:00 2022-03-14T16:43+09:00
jvndb-2022-001404 Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries 2022-03-11T15:55+09:00 2022-03-11T15:55+09:00
jvndb-2022-000016 UNIVERGE WA Series vulnerable to OS command injection 2022-03-10T14:31+09:00 2022-03-10T14:31+09:00
jvndb-2022-001383 Directory Permission Vulnerability in Hitachi Ops Center Viewpoint 2022-03-07T15:45+09:00 2022-03-07T15:45+09:00
jvndb-2022-001382 File Permission Vulnerability in Hitachi Command Suite 2022-03-07T15:35+09:00 2022-03-07T15:35+09:00
jvndb-2022-000008 i-FILTER vulnerable to improper check for certificate revocation 2022-03-04T14:12+09:00 2022-03-04T14:12+09:00
jvndb-2022-000017 Norton Security for Mac improperly processes ICMP packets 2022-03-03T14:32+09:00 2022-03-03T14:32+09:00
jvndb-2022-001380 Multiples security updates for Trend Micro Endpoint security products for enterprises (March 2022) 2022-03-02T17:07+09:00 2022-03-02T17:07+09:00
jvndb-2021-000109 Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields" 2021-12-02T15:02+09:00 2022-02-18T16:18+09:00
jvndb-2022-000014 Multiple vulnerabilities in a-blog cms 2022-02-18T15:55+09:00 2022-02-18T15:55+09:00
jvndb-2022-000012 Multiple vulnerabilities in phpUploader 2022-02-17T15:20+09:00 2022-02-17T15:20+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:21042-1 Security update for containerd 2025-11-14T08:36:43Z 2025-11-14T08:36:43Z
suse-su-2025:4099-1 Security update for squid 2025-11-14T08:23:10Z 2025-11-14T08:23:10Z
suse-su-2025:4098-1 Security update for openssh8.4 2025-11-14T08:22:50Z 2025-11-14T08:22:50Z
suse-su-2025:4097-1 Security update for openssh 2025-11-14T08:22:38Z 2025-11-14T08:22:38Z
suse-su-2025:4096-1 Security update for binutils 2025-11-14T08:07:40Z 2025-11-14T08:07:40Z
suse-su-2025:4094-1 Security update for lasso 2025-11-13T23:34:47Z 2025-11-13T23:34:47Z
suse-su-2025:4091-1 Security update for cargo-packaging, rust-bindgen 2025-11-13T16:30:39Z 2025-11-13T16:30:39Z
suse-su-2025:21040-1 Security update for the Linux Kernel 2025-11-13T15:32:12Z 2025-11-13T15:32:12Z
suse-su-2025:21056-1 Security update for the Linux Kernel 2025-11-13T14:22:56Z 2025-11-13T14:22:56Z
suse-su-2025:4090-1 Security update for lasso 2025-11-13T13:02:47Z 2025-11-13T13:02:47Z
suse-su-2025:4087-1 Security update for netty, netty-tcnative 2025-11-12T19:35:11Z 2025-11-12T19:35:11Z
suse-su-2025:4086-1 Security update for tomcat11 2025-11-12T15:02:26Z 2025-11-12T15:02:26Z
suse-su-2025:4081-1 Security update for podman 2025-11-12T12:49:35Z 2025-11-12T12:49:35Z
suse-su-2025:4080-1 Security update for podman 2025-11-12T12:49:06Z 2025-11-12T12:49:06Z
suse-su-2025:4079-1 Security update for podman 2025-11-12T12:48:51Z 2025-11-12T12:48:51Z
suse-su-2025:4078-1 Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5) 2025-11-12T11:09:52Z 2025-11-12T11:09:52Z
suse-su-2025:4077-1 Security update for runc 2025-11-12T10:36:08Z 2025-11-12T10:36:08Z
suse-su-2025:4076-1 Security update for buildah 2025-11-12T10:35:40Z 2025-11-12T10:35:40Z
suse-su-2025:4075-1 Security update for buildah 2025-11-12T10:35:24Z 2025-11-12T10:35:24Z
suse-su-2025:4074-1 Security update for buildah 2025-11-12T10:35:09Z 2025-11-12T10:35:09Z
suse-su-2025:4073-1 Security update for runc 2025-11-12T10:34:42Z 2025-11-12T10:34:42Z
suse-su-2025:4072-1 Security update for containerd 2025-11-12T10:33:38Z 2025-11-12T10:33:38Z
suse-su-2025:4068-1 Security update for lasso 2025-11-12T08:04:16Z 2025-11-12T08:04:16Z
suse-su-2025:4067-1 Security update for openssh 2025-11-12T08:03:27Z 2025-11-12T08:03:27Z
suse-su-2025:4064-1 Security update for the Linux Kernel (Live Patch 60 for SUSE Linux Enterprise 15 SP3) 2025-11-12T02:35:06Z 2025-11-12T02:35:06Z
suse-su-2025:4063-1 Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP6) 2025-11-12T02:34:57Z 2025-11-12T02:34:57Z
suse-su-2025:4062-1 Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5) 2025-11-11T18:36:41Z 2025-11-11T18:36:41Z
suse-su-2025:4059-1 Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5) 2025-11-11T18:36:30Z 2025-11-11T18:36:30Z
suse-su-2025:4058-1 Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) 2025-11-11T18:36:17Z 2025-11-11T18:36:17Z
suse-su-2025:4057-1 Security update for the Linux Kernel 2025-11-11T18:36:09Z 2025-11-11T18:36:09Z
ID Description Published Updated
cnvd-2026-03481 Google Android逻辑错误漏洞(CNVD-2026-0348103) 2025-12-10 2026-01-15
cnvd-2026-03480 Google Android逻辑错误漏洞(CNVD-2026-0348004) 2025-12-10 2026-01-15
cnvd-2026-03479 Google Android逻辑错误漏洞 2025-12-10 2026-01-15
cnvd-2026-05019 TOTOLINK T10缓冲区溢出漏洞 2025-12-25 2026-01-14
cnvd-2026-05014 Tenda WH450 goform/PPTPUserSetting文件缓冲区溢出漏洞 2026-01-09 2026-01-14
cnvd-2026-04916 Land Record System /aboutus.php文件SQL注入漏洞 2025-05-14 2026-01-14
cnvd-2026-04133 Online Security Guards Hiring System search-request.php文件跨站点脚本漏洞 2023-02-09 2026-01-14
cnvd-2026-04132 Men Salon Management System index.php组件SQL注入漏洞 2024-04-10 2026-01-14
cnvd-2026-04131 Men Salon Management System index.php文件SQL注入漏洞 2024-05-30 2026-01-14
cnvd-2026-03478 Land Record System admin-profile.php文件跨站脚本漏洞 2025-01-06 2026-01-14
cnvd-2026-03477 Land Record System aboutus.php文件跨站脚本漏洞 2025-01-07 2026-01-14
cnvd-2026-03476 Land Record System property-details.php文件SQL注入漏洞 2025-01-07 2026-01-14
cnvd-2026-03475 Land Record System contactus.php文件跨站脚本漏洞 2025-01-07 2026-01-14
cnvd-2026-03474 Land Record System login.php文件SQL注入漏洞 2025-01-07 2026-01-14
cnvd-2026-03473 Land Record System /index.php文件SQL注入漏洞 2025-01-07 2026-01-14
cnvd-2026-03472 Land Record System edit-propertytype.php文件跨站脚本漏洞 2025-01-07 2026-01-14
cnvd-2026-03471 Land Record System search-property.php文件SQL注入漏洞 2025-01-07 2026-01-14
cnvd-2026-03470 Land Record System search-property.php文件跨站脚本漏洞 2025-01-07 2026-01-14
cnvd-2026-03469 Land Record System add-property.php文件跨站脚本漏洞 2025-01-07 2026-01-14
cnvd-2026-03468 Land Record System /index.php文件跨站脚本漏洞 2025-01-10 2026-01-14
cnvd-2026-03467 Land Record System contactus.php文件跨站脚本漏洞 2025-01-21 2026-01-14
cnvd-2026-03466 Land Record System manage-propertytype.php文件SQL注入漏洞 2025-02-18 2026-01-14
cnvd-2026-03188 Land Record System forgot-password.php文件SQL注入漏洞 2025-02-18 2026-01-14
cnvd-2026-03187 Land Record System edit-propertytype.php文件SQL注入漏洞 2025-02-18 2026-01-14
cnvd-2026-03186 Land Record System /contactus.php文件SQL注入漏洞 2025-02-18 2026-01-14
cnvd-2026-03185 Land Record System todate参数SQL注入漏洞 2025-02-18 2026-01-14
cnvd-2026-03184 Land Record System bwdates-reports-details.php文件SQL注入漏洞 2025-02-18 2026-01-14
cnvd-2026-03183 Land Record System admin-profile.php文件SQL注入漏洞 2025-02-18 2026-01-14
cnvd-2026-03165 Online Security Guards Hiring System search-request.php文件SQL注入漏洞 2025-03-27 2026-01-14
cnvd-2026-03164 Online Security Guards Hiring System bwdates-reports-details.php文件SQL注入漏洞 2025-03-27 2026-01-14
ID Description Published Updated
CERTFR-2025-AVI-0943 Multiples vulnérabilités dans les produits Centreon 2025-10-31T00:00:00.000000 2025-10-31T00:00:00.000000
CERTFR-2025-AVI-0942 Vulnérabilité dans Dovecot 2025-10-31T00:00:00.000000 2025-10-31T00:00:00.000000
certfr-2025-avi-0941 Multiples vulnérabilités dans les produits Microsoft 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
certfr-2025-avi-0940 Vulnérabilité dans Liferay 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
certfr-2025-avi-0939 Multiples vulnérabilités dans les produits Splunk 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
certfr-2025-avi-0938 Multiples vulnérabilités dans les produits VMware 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
certfr-2025-avi-0937 Multiples vulnérabilités dans Google Chrome 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
CERTFR-2025-AVI-0941 Multiples vulnérabilités dans les produits Microsoft 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
CERTFR-2025-AVI-0940 Vulnérabilité dans Liferay 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
CERTFR-2025-AVI-0939 Multiples vulnérabilités dans les produits Splunk 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
CERTFR-2025-AVI-0938 Multiples vulnérabilités dans les produits VMware 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
CERTFR-2025-AVI-0937 Multiples vulnérabilités dans Google Chrome 2025-10-30T00:00:00.000000 2025-10-30T00:00:00.000000
certfr-2025-avi-0935 Multiples vulnérabilités dans les produits VMware 2025-10-29T00:00:00.000000 2025-10-29T00:00:00.000000
certfr-2025-avi-0934 Vulnérabilité dans les produits Mozilla 2025-10-29T00:00:00.000000 2025-10-29T00:00:00.000000
CERTFR-2025-AVI-0935 Multiples vulnérabilités dans les produits VMware 2025-10-29T00:00:00.000000 2025-10-29T00:00:00.000000
CERTFR-2025-AVI-0934 Vulnérabilité dans les produits Mozilla 2025-10-29T00:00:00.000000 2025-10-29T00:00:00.000000
certfr-2025-avi-0933 Multiples vulnérabilités dans Apache Tomcat 2025-10-28T00:00:00.000000 2025-10-28T00:00:00.000000
certfr-2025-avi-0932 Multiples vulnérabilités dans Liferay 2025-10-28T00:00:00.000000 2025-10-28T00:00:00.000000
certfr-2025-avi-0931 Vulnérabilité dans StrongSwan 2025-10-28T00:00:00.000000 2025-10-28T00:00:00.000000
CERTFR-2025-AVI-0933 Multiples vulnérabilités dans Apache Tomcat 2025-10-28T00:00:00.000000 2025-10-28T00:00:00.000000
CERTFR-2025-AVI-0932 Multiples vulnérabilités dans Liferay 2025-10-28T00:00:00.000000 2025-10-28T00:00:00.000000
CERTFR-2025-AVI-0931 Vulnérabilité dans StrongSwan 2025-10-28T00:00:00.000000 2025-10-28T00:00:00.000000
certfr-2025-avi-0930 Vulnérabilité dans Microsoft Windows Server Update Service 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0929 Vulnérabilité dans le client VPN de TheGreenBow 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0928 Vulnérabilité dans Microsoft Configuration Manager 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0927 Vulnérabilité dans Xen 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0926 Vulnérabilité dans le pilote ODBC de MongoDB 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
certfr-2025-avi-0925 Vulnérabilité dans les produits Belden 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
CERTFR-2025-AVI-0930 Vulnérabilité dans Microsoft Windows Server Update Service 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
CERTFR-2025-AVI-0929 Vulnérabilité dans le client VPN de TheGreenBow 2025-10-27T00:00:00.000000 2025-10-27T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated