Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-12451 |
6.1 (3.1)
|
Easy SVG Support <= 4.0 - Authenticated (Author+) Stor… |
benjamin_zekavica |
Easy SVG Support |
2026-02-19T03:25:13.845Z | 2026-02-19T17:42:53.448Z |
| CVE-2025-11754 |
7.5 (3.1)
|
Cookie Banner, Cookie Consent, Consent Log, Cookie Sca… |
wplegalpages |
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent |
2026-02-19T03:25:13.376Z | 2026-02-19T17:43:06.008Z |
| CVE-2025-12172 |
4.3 (3.1)
|
Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Re… |
mailchimp |
Mailchimp List Subscribe Form |
2026-02-19T03:25:12.912Z | 2026-02-19T17:43:16.858Z |
| CVE-2025-11706 |
6.1 (3.1)
|
Aruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Sc… |
arubadev |
Aruba HiSpeed Cache |
2026-02-19T03:25:12.460Z | 2026-02-19T17:43:28.951Z |
| CVE-2025-12448 |
6.4 (3.1)
|
Smartsupp – live chat, AI shopping assistant and chatb… |
smartsupp |
Smartsupp – live chat, AI shopping assistant and chatbots |
2026-02-19T03:25:11.994Z | 2026-02-19T17:43:40.590Z |
| CVE-2025-11725 |
6.5 (3.1)
|
Aruba HiSpeed Cache <= 3.0.2 - Missing Authorization t… |
arubadev |
Aruba HiSpeed Cache |
2026-02-19T03:25:11.535Z | 2026-02-19T17:43:52.800Z |
| CVE-2025-12027 |
4.3 (3.1)
|
Mesmerize Companion <= 1.6.158 - Missing Authorization… |
horearadu |
Mesmerize Companion |
2026-02-19T03:25:10.834Z | 2026-02-19T17:44:05.140Z |
| CVE-2026-25474 |
7.5 (3.1)
|
OpenClaw has a Telegram webhook request forgery (missi… |
openclaw |
openclaw |
2026-02-19T02:38:33.352Z | 2026-02-19T17:44:17.297Z |
| CVE-2026-25229 |
5.3 (4.0)
|
Gogs Authorization Bypass Allows Cross-Repository Labe… |
gogs |
gogs |
2026-02-19T02:33:09.877Z | 2026-02-19T17:44:28.915Z |
| CVE-2026-2693 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
CoCoTeaNet CyreneAdmin System Info Endpoint getCount i… |
CoCoTeaNet |
CyreneAdmin |
2026-02-19T02:32:07.071Z | 2026-02-19T02:32:07.071Z |
| CVE-2026-25242 |
6.9 (4.0)
|
Gogs allows unauthenticated file uploads |
gogs |
gogs |
2026-02-19T02:28:40.140Z | 2026-02-19T17:44:40.834Z |
| CVE-2026-25232 |
7.1 (4.0)
|
Gogs has a Protected Branch Deletion Bypass in Web Interface |
gogs |
gogs |
2026-02-19T02:25:34.039Z | 2026-02-19T17:44:52.867Z |
| CVE-2026-2692 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
CoCoTeaNet CyreneAdmin Image getAvatar path traversal |
CoCoTeaNet |
CyreneAdmin |
2026-02-19T02:02:06.735Z | 2026-02-19T02:02:06.735Z |
| CVE-2026-25120 |
5.1 (4.0)
|
Gogs Allows Cross-Repository Comment Deletion via Dele… |
gogs |
gogs |
2026-02-19T01:59:39.257Z | 2026-02-19T17:45:04.770Z |
| CVE-2025-4960 |
7.8 (3.1)
|
macOS Local Privilege Escalation via Improper Authoriz… |
EPSON |
EPSON Printer Controller Installer |
2026-02-19T01:37:22.018Z | 2026-02-19T01:37:22.018Z |
| CVE-2026-2691 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System manage_register.p… |
itsourcecode |
Event Management System |
2026-02-19T01:32:07.068Z | 2026-02-19T01:32:07.068Z |
| CVE-2026-24764 |
3.7 (3.1)
|
OpenClaw has Remote Code Execution via System Prompt I… |
clawdbot |
clawdbot |
2026-02-19T01:10:17.540Z | 2026-02-19T17:45:16.959Z |
| CVE-2026-2690 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System Admin Login ajax.… |
itsourcecode |
Event Management System |
2026-02-19T01:02:07.372Z | 2026-02-19T01:02:07.372Z |
| CVE-2026-2689 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Event Management System manage_booking.ph… |
itsourcecode |
Event Management System |
2026-02-19T00:32:07.761Z | 2026-02-19T00:32:07.761Z |
| CVE-2026-2686 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
SECCN Dingcheng G10 session_login.cgi qq os command in… |
SECCN Dingcheng |
G10 |
2026-02-19T00:02:07.214Z | 2026-02-19T00:02:07.214Z |
| CVE-2026-26744 |
N/A
|
A user enumeration vulnerability exists in FormaL… |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T21:20:57.987Z |
| CVE-2025-69725 |
4.7 (3.1)
|
An Open Redirect vulnerability in the go-chi/chi … |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T16:08:06.248Z |
| CVE-2025-69674 |
N/A
|
Buffer Overflow vulnerability in CDATA FD614GS3-R… |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T15:57:30.631Z |
| CVE-2025-67305 |
N/A
|
In RUCKUS Network Director (RND) < 4.5.0.56, the … |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T19:56:38.236Z |
| CVE-2025-67304 |
N/A
|
In Ruckus Network Director (RND) < 4.5.0.54, the … |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T19:51:31.678Z |
| CVE-2025-55853 |
N/A
|
SoftVision webPDF before 10.0.2 is vulnerable to … |
n/a |
n/a |
2026-02-19T00:00:00.000Z | 2026-02-19T14:18:15.816Z |
| CVE-2025-15585 |
6.7 (4.0)
|
Fileflows versions before 25.05.2 are affected by… |
fileflows |
fileflows |
2026-02-18T23:44:40.034Z | 2026-02-19T17:20:20.747Z |
| CVE-2026-2684 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System uploadFil… |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T23:32:07.382Z | 2026-02-19T17:18:01.380Z |
| CVE-2026-25926 |
7.3 (3.1)
|
Notepad++ has an Untrusted Search Path |
notepad-plus-plus |
notepad-plus-plus |
2026-02-18T23:07:36.383Z | 2026-02-19T17:45:27.028Z |
| CVE-2026-24126 |
6.6 (3.1)
|
Weblate has an argument injection in management console |
WeblateOrg |
weblate |
2026-02-18T23:05:03.478Z | 2026-02-19T17:13:53.353Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-14445 |
6.4 (3.1)
|
Image Hotspot by DevVN <= 1.2.9 - Authenticated (Autho… |
levantoan |
Image Hotspot by DevVN |
2026-02-19T04:36:25.358Z | 2026-02-19T21:28:58.239Z |
| CVE-2025-14427 |
4.3 (3.1)
|
Shield Security: Blocks Bots, Protects Users, and Prev… |
paultgoodchild |
Shield: Blocks Bots, Protects Users, and Prevents Security Breaches |
2026-02-19T04:36:19.188Z | 2026-02-19T21:08:14.561Z |
| CVE-2025-14357 |
5.3 (3.1)
|
Mega Store Woocommerce <= 5.9 - Missing Authorization … |
misbahwp |
Mega Store Woocommerce |
2026-02-19T04:36:24.395Z | 2026-02-19T21:18:31.802Z |
| CVE-2025-14342 |
4.3 (3.1)
|
SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Author… |
cifi |
SEO Plugin by Squirrly SEO |
2026-02-19T04:36:16.373Z | 2026-02-19T20:40:01.636Z |
| CVE-2025-14294 |
5.3 (3.1)
|
Razorpay for WooCommerce <= 4.7.8 - Missing Authentica… |
razorpay |
Razorpay for WooCommerce |
2026-02-19T04:36:07.208Z | 2026-02-19T17:39:20.614Z |
| CVE-2025-14270 |
2.7 (3.1)
|
OneClick Chat to Order <= 1.0.9 - Missing Authorizatio… |
walterpinem |
OneClick Chat to Order |
2026-02-19T04:36:21.072Z | 2026-02-19T04:36:21.072Z |
| CVE-2025-14167 |
4.3 (3.1)
|
Remove Post Type Slug <= 1.0.2 - Cross-Site Request Fo… |
akshayshah5189 |
Remove Post Type Slug |
2026-02-19T04:36:21.975Z | 2026-02-19T04:36:21.975Z |
| CVE-2025-14076 |
6.1 (3.1)
|
iXML – Google XML sitemap generator <= 0.6 - Reflected… |
icount |
iXML – Google XML sitemap generator |
2026-02-19T04:36:16.830Z | 2026-02-19T20:38:20.577Z |
| CVE-2025-13930 |
5.3 (3.1)
|
Checkout Field Manager (Checkout Manager) for WooComme… |
quadlayers |
Checkout Field Manager (Checkout Manager) for WooCommerce |
2026-02-19T04:36:08.678Z | 2026-02-19T17:38:45.402Z |
| CVE-2025-13864 |
5.3 (3.1)
|
Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Au… |
cloudways |
Breeze Cache |
2026-02-19T04:36:12.578Z | 2026-02-19T17:37:10.796Z |
| CVE-2025-13851 |
9.8 (3.1)
|
Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 … |
scriptsbundle |
Buyent |
2026-02-19T04:36:27.334Z | 2026-02-19T21:24:16.175Z |
| CVE-2025-13842 |
5.3 (3.1)
|
Breadcrumb NavXT <= 7.5.0 - Missing Authorization to S… |
mtekk |
Breadcrumb NavXT |
2026-02-19T04:36:13.093Z | 2026-02-19T17:36:59.299Z |
| CVE-2025-13738 |
6.4 (3.1)
|
Easy Table of Contents <= 2.0.78 - Authenticated (Cont… |
magazine3 |
Easy Table of Contents |
2026-02-19T04:36:15.436Z | 2026-02-19T20:32:10.076Z |
| CVE-2025-13732 |
6.4 (3.1)
|
s2Member <= 251005 - Authenticated (Contributor+) Stor… |
clavaque |
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions |
2026-02-19T04:36:06.236Z | 2026-02-19T17:39:43.235Z |
| CVE-2025-13617 |
6.4 (3.1)
|
Apollo13 Framework Extension <= 1.9.8 - Authenticated … |
apollo13themes |
Apollo13 Framework Extensions |
2026-02-19T04:36:12.110Z | 2026-02-19T17:37:22.886Z |
| CVE-2025-13612 |
6.4 (3.1)
|
Album and Image Gallery Plus Lightbox <= 2.1.7 - Authe… |
essentialplugin |
Album and Image Gallery Plus Lightbox |
2026-02-19T04:36:09.665Z | 2026-02-19T17:38:20.655Z |
| CVE-2025-13603 |
8.8 (3.1)
|
WP AUDIO GALLERY <= 2.0 - Authenticated (Subscriber+) … |
husainali52 |
WP AUDIO GALLERY |
2026-02-19T04:36:17.771Z | 2026-02-19T21:10:57.709Z |
| CVE-2025-13587 |
6.5 (3.1)
|
Two Factor (2FA) Authentication via Email <= 1.9.8 - T… |
ss88_uk |
Two Factor (2FA) Authentication via Email |
2026-02-19T04:36:05.735Z | 2026-02-19T17:39:55.138Z |
| CVE-2025-13563 |
9.8 (3.1)
|
Lizza LMS Pro <= 1.0.3 - Unauthenticated Privilege Esc… |
BuddhaThemes |
Lizza LMS Pro |
2026-02-19T04:36:20.596Z | 2026-02-19T04:36:20.596Z |
| CVE-2025-13438 |
4.3 (3.1)
|
Page Title, Description & Open Graph Updater <= 1.02 -… |
dienodigital |
Page Title, Description & Open Graph Updater |
2026-02-19T04:36:14.713Z | 2026-02-19T17:36:21.533Z |
| CVE-2025-13413 |
4.3 (3.1)
|
Country Blocker for AdSense <= 1.0 - Cross-Site Reques… |
soyrodriguez |
Country Blocker for AdSense |
2026-02-19T04:36:06.743Z | 2026-02-19T17:39:31.661Z |
| CVE-2025-13113 |
5.3 (3.1)
|
Web Accessibility by accessiBe <= 2.11 - Unauthenticat… |
accessibewp |
Web Accessibility by accessiBe |
2026-02-19T03:25:18.315Z | 2026-02-19T17:41:06.589Z |
| CVE-2025-13091 |
4.3 (3.1)
|
Shopire <= 1.0.57 - Missing Authorization to Authentic… |
wpfable |
Shopire |
2026-02-19T04:36:18.231Z | 2026-02-19T21:10:09.099Z |
| CVE-2025-13079 |
5.3 (3.1)
|
Popup Builder - Create highly converting, mobile frien… |
popupbuilder |
Popup Builder – Create highly converting, mobile friendly marketing popups. |
2026-02-19T03:25:14.826Z | 2026-02-19T17:42:29.750Z |
| CVE-2025-13048 |
6.4 (3.1)
|
Official StatCounter Plugin <= 2.1.0 - Authenticated (… |
statcounter |
StatCounter – Free Real Time Visitor Stats |
2026-02-19T03:25:19.247Z | 2026-02-19T17:40:41.496Z |
| CVE-2025-12975 |
7.2 (3.1)
|
CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 … |
wahid0003 |
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels |
2026-02-19T04:36:10.601Z | 2026-02-19T17:37:56.018Z |
| CVE-2025-12884 |
4.3 (3.1)
|
Advanced Ads – Ad Manager & AdSense <= 2.0.14 - Missin… |
monetizemore |
Advanced Ads – Ad Manager & AdSense |
2026-02-19T03:25:17.396Z | 2026-02-19T17:41:30.633Z |
| CVE-2025-12882 |
9.8 (3.1)
|
Clasifico Listing <= 2.0 - Unauthenticated Privilege E… |
SmartDataSoft |
Clasifico Listing |
2026-02-19T03:25:15.804Z | 2026-02-19T17:42:05.893Z |
| CVE-2025-12845 |
8.8 (3.1)
|
Tablesome Table – Contact Form DB – WPForms, CF7, Grav… |
essekia |
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent |
2026-02-19T03:25:17.846Z | 2026-02-19T17:41:17.364Z |
| CVE-2025-12821 |
8.8 (3.1)
|
NewsBlogger <= 0.2.5.6 - 0.2.6.1 - Cross-Site Request … |
spicethemes |
NewsBlogger |
2026-02-19T03:25:16.877Z | 2026-02-19T17:41:41.142Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-54162 | A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gai… | 2026-02-11T13:15:55.027 | 2026-02-12T19:56:29.923 |
| fkie_cve-2025-54161 | An allocation of resources without limits or throttling vulnerability has been reported to affect F… | 2026-02-11T13:15:54.893 | 2026-02-12T19:57:26.127 |
| fkie_cve-2025-54155 | An allocation of resources without limits or throttling vulnerability has been reported to affect F… | 2026-02-11T13:15:54.750 | 2026-02-12T19:57:54.517 |
| fkie_cve-2025-54152 | A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a … | 2026-02-11T13:15:54.613 | 2026-02-12T13:28:06.267 |
| fkie_cve-2025-54151 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a … | 2026-02-11T13:15:54.483 | 2026-02-12T13:29:25.920 |
| fkie_cve-2025-54150 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a … | 2026-02-11T13:15:54.340 | 2026-02-12T13:29:45.750 |
| fkie_cve-2025-54149 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a … | 2026-02-11T13:15:54.203 | 2026-02-12T13:30:14.533 |
| fkie_cve-2025-54148 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote att… | 2026-02-11T13:15:54.063 | 2026-02-12T13:31:01.027 |
| fkie_cve-2025-54147 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote att… | 2026-02-11T13:15:53.923 | 2026-02-12T13:31:27.300 |
| fkie_cve-2025-54146 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote att… | 2026-02-11T13:15:53.787 | 2026-02-12T13:31:43.387 |
| fkie_cve-2025-53598 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote att… | 2026-02-11T13:15:53.647 | 2026-02-12T13:32:12.840 |
| fkie_cve-2025-52870 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gai… | 2026-02-11T13:15:53.513 | 2026-02-12T13:32:53.600 |
| fkie_cve-2025-52869 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gai… | 2026-02-11T13:15:53.377 | 2026-02-12T13:33:19.957 |
| fkie_cve-2025-52868 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gai… | 2026-02-11T13:15:53.237 | 2026-02-11T21:19:07.190 |
| fkie_cve-2025-48725 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.… | 2026-02-11T13:15:52.967 | 2026-02-11T21:18:36.900 |
| fkie_cve-2025-48724 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gai… | 2026-02-11T13:15:52.830 | 2026-02-11T21:18:17.263 |
| fkie_cve-2025-48723 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gai… | 2026-02-11T13:15:52.693 | 2026-02-11T21:18:06.230 |
| fkie_cve-2025-48722 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote att… | 2026-02-11T13:15:52.560 | 2026-02-11T21:17:57.510 |
| fkie_cve-2025-47209 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote att… | 2026-02-11T13:15:52.427 | 2026-02-11T21:17:44.877 |
| fkie_cve-2025-47205 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system … | 2026-02-11T13:15:52.287 | 2026-02-11T15:27:26.370 |
| fkie_cve-2025-30276 | An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacke… | 2026-02-11T13:15:52.130 | 2026-02-11T21:13:45.030 |
| fkie_cve-2025-30269 | A use of externally-controlled format string vulnerability has been reported to affect Qsync Centra… | 2026-02-11T13:15:51.957 | 2026-02-11T21:10:50.490 |
| fkie_cve-2025-30266 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote att… | 2026-02-11T13:15:51.813 | 2026-02-11T21:00:06.077 |
| fkie_cve-2024-56808 | A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacke… | 2026-02-11T13:15:51.667 | 2026-02-12T19:24:00.003 |
| fkie_cve-2024-56807 | An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attac… | 2026-02-11T13:15:51.463 | 2026-02-12T19:29:32.550 |
| fkie_cve-2026-1458 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.0 before 18.6.6, 18.7 … | 2026-02-11T12:16:04.847 | 2026-02-12T21:58:51.670 |
| fkie_cve-2026-1456 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and … | 2026-02-11T12:16:04.703 | 2026-02-12T21:39:23.503 |
| fkie_cve-2026-1387 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 be… | 2026-02-11T12:16:04.547 | 2026-02-12T21:34:48.907 |
| fkie_cve-2026-1282 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7… | 2026-02-11T12:16:04.403 | 2026-02-12T21:22:02.510 |
| fkie_cve-2026-1094 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 18.8.4 that … | 2026-02-11T12:16:04.263 | 2026-02-12T21:19:23.863 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-5mx2-w598-339m |
6.5 (3.1)
|
RediSearch Query Injection in @langchain/langgraph-checkpoint-redis | 2026-02-18T22:40:09Z | 2026-02-18T22:40:09Z |
| ghsa-3ppc-4f35-3m26 |
8.7 (4.0)
|
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern | 2026-02-18T22:38:11Z | 2026-02-20T16:52:14Z |
| ghsa-fw7p-63qq-7hpr |
1.7 (4.0)
|
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver … | 2026-02-18T22:37:15Z | 2026-02-20T16:46:42Z |
| ghsa-5vv4-hvf7-2h46 |
8.8 (3.1)
|
Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation | 2026-02-18T22:36:50Z | 2026-02-19T21:57:18Z |
| ghsa-m6j8-rg6r-7mv8 |
6.9 (4.0)
|
Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake | 2026-02-18T22:36:06Z | 2026-02-20T16:46:34Z |
| ghsa-2gjw-fg97-vg3r |
8.7 (4.0)
|
Go Ethereum affected by DoS via malicious p2p message | 2026-02-18T22:35:15Z | 2026-02-20T16:46:27Z |
| ghsa-689v-6xwf-5jf3 |
6.9 (4.0)
|
Go Ethereum affected by DoS via malicious p2p message | 2026-02-18T22:34:49Z | 2026-02-19T21:57:09Z |
| ghsa-rrxv-pmq9-x67r |
2.3 (4.0)
|
uTLS has a fingerprint vulnerability from missing padding extension for Chrome 120 | 2026-02-18T22:33:47Z | 2026-02-18T22:33:47Z |
| ghsa-7m29-f4hw-g2vx |
2.3 (4.0)
|
uTLS has a fingerprint vulnerability from GREASE ECH mismatch for Chrome parrots | 2026-02-18T22:33:18Z | 2026-02-20T16:52:07Z |
| ghsa-79q9-wc6p-cf92 |
8.8 (3.1)
|
LibreNMS has a Time-Based Blind SQL Injection in address-search.inc.php | 2026-02-18T22:31:37Z | 2026-02-18T22:31:37Z |
| ghsa-6xmx-xr9p-58p7 |
4.3 (3.1)
|
LibreNMS has a Stored XSS in Alert Rule | 2026-02-18T22:30:32Z | 2026-02-20T16:50:54Z |
| ghsa-h3rv-q4rq-pqcv |
|
LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream. | 2026-02-18T22:30:18Z | 2026-02-18T22:30:18Z |
| ghsa-fqx6-693c-f55g |
5.4 (3.1)
|
LibreNMS has a Stored XSS in Custom OID - unit parameter missing strip_tags() | 2026-02-18T22:08:15Z | 2026-02-20T16:48:24Z |
| ghsa-93fx-g747-695x |
5.1 (4.0)
|
LibreNMS /port-groups name Stored Cross-Site Scripting | 2026-02-18T22:07:42Z | 2026-02-20T16:51:59Z |
| ghsa-5pqf-54qp-32wx |
5.1 (4.0)
|
LibreNMS /device-groups name Stored Cross-Site Scripting | 2026-02-18T22:07:19Z | 2026-02-20T16:51:51Z |
| ghsa-gqx7-99jw-6fpr |
5.3 (4.0)
|
LibreNMS affected by reflected xss via email field | 2026-02-18T22:07:06Z | 2026-02-20T16:48:17Z |
| ghsa-wx95-c6cv-8532 |
5.3 (3.1)
|
Nokogiri does not check the return value from xmlC14NExecute | 2026-02-18T21:57:38Z | 2026-02-18T21:57:38Z |
| ghsa-9c88-49p5-5ggf |
8.4 (3.1)
|
Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path | 2026-02-18T21:51:26Z | 2026-02-19T21:57:02Z |
| ghsa-w52v-v783-gw97 |
9.4 (3.1)
|
Ghost has a SQL injection in Content API | 2026-02-18T21:50:23Z | 2026-02-20T16:48:09Z |
| ghsa-w7h5-55jg-cq2f |
7.6 (4.0)
|
Improper Control of Generation of Code ('Code Injection') in @tygo-van-den-hurk/slyde | 2026-02-18T21:45:06Z | 2026-02-20T16:48:00Z |
| ghsa-xrj7-v4x4-74hr |
3.3 (3.1)
|
A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFI_VA… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-xj75-gfvf-4g86 |
7.7 (3.1)
|
The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has … | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-vmr8-g4h2-2x5j |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 2026… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-rwf8-6fj2-4vrx |
6.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affe… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-r9wp-qq53-qvjx |
4.7 (3.1)
2.0 (4.0)
|
mingSoft MCMS does not properly restrict file uploads | 2026-02-18T21:31:23Z | 2026-02-19T20:30:51Z |
| ghsa-qrj7-4954-7p6v |
6.5 (3.1)
7.1 (4.0)
|
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an… | 2026-02-18T21:31:23Z | 2026-02-20T00:31:52Z |
| ghsa-p546-7whm-cxpm |
9.0 (3.1)
7.6 (4.0)
|
An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-c… | 2026-02-18T21:31:23Z | 2026-02-20T00:31:52Z |
| ghsa-mjjq-x58m-rfxp |
3.3 (3.1)
1.9 (4.0)
|
A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the func… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-jx8h-vrjj-cm6g |
5.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ghsa-gwrh-w4f9-ffc9 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea8359… | 2026-02-18T21:31:23Z | 2026-02-18T21:31:23Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-278 |
|
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3. | rdiffweb | 2022-09-15T09:15:00Z | 2022-09-18T05:55:21.035555Z |
| pysec-2022-267 |
|
OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by an vncap/vnc/protocol.py VN… | vncauthproxy | 2022-09-14T11:15:00Z | 2022-09-14T13:29:43.279847Z |
| pysec-2022-43137 |
5.5 (3.1)
|
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the compone… | lief | 2022-09-13T21:15:00+00:00 | 2024-11-21T14:22:53.842904+00:00 |
| pysec-2022-277 |
|
LIEF commit 365a16a was discovered to contain a segmentation violation via the component … | lief | 2022-09-13T21:15:00Z | 2022-09-18T05:55:18.935822Z |
| pysec-2022-276 |
|
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function pri… | lief | 2022-09-13T21:15:00Z | 2022-09-18T05:55:18.909680Z |
| pysec-2022-275 |
|
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function L… | lief | 2022-09-13T21:15:00Z | 2022-09-18T05:55:18.884031Z |
| pysec-2022-274 |
|
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /co… | lief | 2022-09-13T21:15:00Z | 2022-09-18T05:55:18.856467Z |
| pysec-2022-272 |
|
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. | rdiffweb | 2022-09-13T17:15:00Z | 2022-09-15T20:40:19.575026Z |
| pysec-2022-273 |
|
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2. | rdiffweb | 2022-09-13T10:15:00Z | 2022-09-15T22:37:42.206790Z |
| pysec-2022-271 |
|
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060… | rdiffweb | 2022-09-13T10:15:00Z | 2022-09-15T20:40:19.500287Z |
| pysec-2022-269 |
|
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAut… | oauthlib | 2022-09-09T21:15:00Z | 2022-09-15T06:38:55.424021Z |
| pysec-2022-270 |
|
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built f… | indy-node | 2022-09-09T19:15:00Z | 2022-09-15T17:00:02.967935Z |
| pysec-2022-268 |
|
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-09-08T19:15:00Z | 2022-09-14T17:03:43.275428Z |
| pysec-2022-264 |
|
mangadex-downloader is a command-line tool to download manga from MangaDex. When using `f… | mangadex-downloader | 2022-09-07T22:15:00Z | 2022-09-12T20:38:21.585718Z |
| pysec-2022-43179 |
7.3 (3.1)
|
Poetry is a dependency manager for Python. To handle dependencies that come from a Git re… | poetry | 2022-09-07T19:15:08+00:00 | 2025-04-09T17:27:27.255151+00:00 |
| pysec-2022-266 |
|
Poetry is a dependency manager for Python. When handling dependencies that come from a Gi… | poetry | 2022-09-07T19:15:00Z | 2022-09-13T18:50:19.361398Z |
| pysec-2022-260 |
|
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when u… | mako | 2022-09-07T13:15:00Z | 2022-09-07T14:38:27.809318Z |
| pysec-2022-43149 |
6.5 (3.1)
|
Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentatio… | pyassimp | 2022-09-06T23:15:00Z | 2024-11-21T14:22:59.412324Z |
| pysec-2022-265 |
|
Indy Node is the server portion of a distributed ledger purpose-built for decentralized i… | indy-node | 2022-09-06T17:15:00Z | 2022-09-13T17:01:18.154930Z |
| pysec-2022-43064 |
8.8 (3.1)
|
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a que… | pytigergraph | 2022-09-05T16:15:00+00:00 | 2023-11-07T20:24:26.101389+00:00 |
| pysec-2022-43070 |
7.5 (3.1)
|
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization… | apache-iotdb | 2022-09-05T10:15:00Z | 2024-11-21T14:22:40.90699Z |
| pysec-2022-43069 |
8.8 (3.1)
|
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to v… | apache-iotdb | 2022-09-05T10:15:00Z | 2024-11-25T22:25:52.941293Z |
| pysec-2022-262 |
|
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… | matrix-synapse | 2022-09-02T20:15:00Z | 2022-09-09T06:19:32.373264Z |
| pysec-2022-263 |
|
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend … | apache-airflow | 2022-09-02T07:15:00Z | 2022-09-09T14:35:42.886118Z |
| pysec-2022-261 |
|
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow c… | apache-airflow | 2022-09-02T07:15:00Z | 2022-09-08T22:36:09.971521Z |
| pysec-2022-259 |
|
An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secr… | python-jwt | 2022-09-01T18:51:51Z | 2022-09-05T01:24:44.773501Z |
| pysec-2022-43152 |
7.4 (3.1)
|
A flaw was found in the python-scciclient when making an HTTPS connection to a server whe… | python-scciclient | 2022-09-01T18:15:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2022-258 |
|
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double q… | oslo-utils | 2022-08-29T15:15:00Z | 2022-09-01T22:32:57.246318Z |
| pysec-2022-257 |
|
NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrus… | nvflare | 2022-08-29T03:15:00Z | 2022-09-01T20:35:14.493490Z |
| pysec-2022-43134 |
9.8 (3.1)
|
The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor… | exotel | 2022-08-27T20:15:00Z | 2024-11-25T22:09:33.909779Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-547 | Malicious code in solhint-plugin-hyperlane (PyPI) | 2026-01-27T09:15:48Z | 2026-01-27T09:15:48Z |
| MAL-2026-547 | Malicious code in solhint-plugin-hyperlane (PyPI) | 2026-01-27T09:15:48Z | 2026-01-27T09:15:48Z |
| mal-2026-527 | Malicious code in @santandergroup-uk/edgehome-components (npm) | 2026-01-27T08:16:51Z | 2026-02-02T05:56:25Z |
| MAL-2026-527 | Malicious code in @santandergroup-uk/edgehome-components (npm) | 2026-01-27T08:16:51Z | 2026-02-02T05:56:25Z |
| mal-2026-534 | Malicious code in internallib_v828 (npm) | 2026-01-27T08:12:56Z | 2026-02-02T05:56:28Z |
| MAL-2026-534 | Malicious code in internallib_v828 (npm) | 2026-01-27T08:12:56Z | 2026-02-02T05:56:28Z |
| mal-2026-542 | Malicious code in stylus.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:30Z |
| mal-2026-541 | Malicious code in pump.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| mal-2026-537 | Malicious code in mysql2.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| mal-2026-536 | Malicious code in morgan.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| mal-2026-535 | Malicious code in knex.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:28Z |
| MAL-2026-542 | Malicious code in stylus.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:30Z |
| MAL-2026-541 | Malicious code in pump.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| MAL-2026-537 | Malicious code in mysql2.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| MAL-2026-536 | Malicious code in morgan.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:29Z |
| MAL-2026-535 | Malicious code in knex.js (npm) | 2026-01-27T08:11:31Z | 2026-02-02T05:56:28Z |
| mal-2026-530 | Malicious code in grepleaks (npm) | 2026-01-27T08:09:32Z | 2026-02-02T05:56:27Z |
| MAL-2026-530 | Malicious code in grepleaks (npm) | 2026-01-27T08:09:32Z | 2026-02-02T05:56:27Z |
| mal-2026-546 | Malicious code in xhjxhjhiagent (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:31Z |
| mal-2026-545 | Malicious code in testxhjhka (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| mal-2026-544 | Malicious code in testxhjhk (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| mal-2026-531 | Malicious code in hackerxhj (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:27Z |
| MAL-2026-546 | Malicious code in xhjxhjhiagent (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:31Z |
| MAL-2026-545 | Malicious code in testxhjhka (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| MAL-2026-544 | Malicious code in testxhjhk (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:30Z |
| MAL-2026-531 | Malicious code in hackerxhj (npm) | 2026-01-27T08:09:00Z | 2026-02-02T05:56:27Z |
| mal-2026-533 | Malicious code in hiagentxhjrceme (npm) | 2026-01-27T08:08:59Z | 2026-02-02T05:56:28Z |
| mal-2026-532 | Malicious code in hiagentxhjrce (npm) | 2026-01-27T08:08:59Z | 2026-02-02T05:56:28Z |
| MAL-2026-533 | Malicious code in hiagentxhjrceme (npm) | 2026-01-27T08:08:59Z | 2026-02-02T05:56:28Z |
| MAL-2026-532 | Malicious code in hiagentxhjrce (npm) | 2026-01-27T08:08:59Z | 2026-02-02T05:56:28Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1207 | Samsung Exynos: Mehrere Schwachstellen | 2025-06-01T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1206 | Perl: Schwachstelle ermöglicht Codeausführung und Offenlegung von Informationen | 2025-06-01T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1205 | Golang Go: Mehrere Schwachstellen | 2025-06-01T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-1204 | systemd-coredump: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-01T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1203 | NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Denial of Service | 2025-06-01T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1202 | IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-01T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1201 | Linux Kernel: Mehrere Schwachstellen | 2025-05-29T22:00:00.000+00:00 | 2026-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-1200 | VMware Tanzu Spring Cloud Gateway Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1199 | Acronis Cyber Protect: Mehrere Schwachstellen | 2025-05-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1173 | Devolutions Remote Desktop Manager: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1172 | Drupal: Mehrere Schwachstellen | 2025-05-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1171 | GStreamer: Mehrere Schwachstellen | 2025-05-29T22:00:00.000+00:00 | 2025-08-26T22:00:00.000+00:00 |
| wid-sec-w-2025-1169 | Apache Commons BeanUtils: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-29T22:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1168 | Apache Superset: Schwachstelle ermöglicht SQL Injection | 2025-05-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1167 | IBM DB2: Mehrere Schwachstellen | 2025-05-29T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1166 | Vercel Next.js: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-29T22:00:00.000+00:00 | 2025-06-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1165 | Apache Tomcat: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-29T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1164 | Red Hat OpenShift GitOps: Schwachstelle ermöglicht Cross-Site Scripting | 2025-05-29T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1163 | IBM Tivoli Monitoring: Schwachstelle ermöglicht Codeausführung | 2025-05-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1162 | Red Hat Enterprise Linux (zlib): Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-05-29T22:00:00.000+00:00 | 2025-06-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1161 | ESRI ArcGIS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1160 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2025-05-27T22:00:00.000+00:00 | 2025-06-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1159 | Arista EOS: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-05-27T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1158 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-05-27T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1157 | binutils: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-05-27T22:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-1156 | Xen: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-05-27T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1155 | IBM Security Guardium: Mehrere Schwachstellen | 2025-05-27T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1154 | Strapi: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-27T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1153 | D-LINK Access Point (AP): Schwachstelle ermöglicht Codeausführung | 2025-05-27T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1152 | IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service | 2025-05-27T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:0171 | Red Hat Security Advisory: httpd security update | 2026-01-06T21:28:14+00:00 | 2026-01-13T22:11:25+00:00 |
| rhsa-2026:0141 | Red Hat Security Advisory: httpd security update | 2026-01-06T17:34:13+00:00 | 2026-01-13T22:12:23+00:00 |
| rhsa-2026:0140 | Red Hat Security Advisory: grafana-pcp security update | 2026-01-06T17:13:28+00:00 | 2026-01-06T18:38:33+00:00 |
| rhsa-2026:0139 | Red Hat Security Advisory: httpd security update | 2026-01-06T15:24:18+00:00 | 2026-01-13T22:12:04+00:00 |
| rhsa-2026:0137 | Red Hat Security Advisory: mariadb security update | 2026-01-06T14:45:44+00:00 | 2026-01-15T16:00:38+00:00 |
| rhsa-2026:0136 | Red Hat Security Advisory: mariadb10.11 security update | 2026-01-06T13:46:18+00:00 | 2026-01-15T16:00:36+00:00 |
| rhsa-2026:0135 | Red Hat Security Advisory: tar security update | 2026-01-06T13:36:23+00:00 | 2026-02-03T20:56:53+00:00 |
| rhsa-2026:0134 | Red Hat Security Advisory: Red Hat build of Quarkus 3.27.1.SP1 security update | 2026-01-06T13:22:25+00:00 | 2026-02-06T20:10:32+00:00 |
| rhsa-2026:0131 | Red Hat Security Advisory: Red Hat build of Quarkus 3.20.4.SP1 security update | 2026-01-06T13:12:23+00:00 | 2026-02-06T20:10:31+00:00 |
| rhsa-2026:0130 | Red Hat Security Advisory: poppler security update | 2026-01-06T13:10:58+00:00 | 2026-01-26T15:39:21+00:00 |
| rhsa-2026:0124 | Red Hat Security Advisory: thunderbird security update | 2026-01-06T12:07:51+00:00 | 2026-01-06T18:37:50+00:00 |
| rhsa-2026:0126 | Red Hat Security Advisory: poppler security update | 2026-01-06T11:57:21+00:00 | 2026-01-26T15:39:11+00:00 |
| rhsa-2026:0128 | Red Hat Security Advisory: poppler security update | 2026-01-06T11:36:21+00:00 | 2026-01-26T15:39:23+00:00 |
| rhsa-2026:0127 | Red Hat Security Advisory: firefox security update | 2026-01-06T11:28:47+00:00 | 2026-01-13T22:06:50+00:00 |
| rhsa-2026:0125 | Red Hat Security Advisory: mingw-libpng security update | 2026-01-06T11:25:54+00:00 | 2026-02-19T13:36:53+00:00 |
| rhea-2026:0129 | Red Hat Enhancement Advisory: OpenShift Virtualization 4.17.39 Images | 2026-01-06T11:25:38+00:00 | 2026-02-19T00:43:15+00:00 |
| rhsa-2026:0123 | Red Hat Security Advisory: python3.12 security update | 2026-01-06T10:47:27+00:00 | 2026-02-16T14:15:00+00:00 |
| rhsa-2026:0111 | Red Hat Security Advisory: mariadb security update | 2026-01-06T08:07:07+00:00 | 2026-01-15T16:01:06+00:00 |
| rhsa-2026:0112 | Red Hat Security Advisory: mariadb security update | 2026-01-06T08:05:42+00:00 | 2026-01-15T16:01:06+00:00 |
| rhsa-2026:0108 | Red Hat Security Advisory: gcc-toolset-15-binutils security update | 2026-01-06T07:05:36+00:00 | 2026-02-12T13:26:52+00:00 |
| rhsa-2026:0094 | Red Hat Security Advisory: mod_md security update | 2026-01-06T05:05:51+00:00 | 2026-01-13T22:39:30+00:00 |
| rhsa-2026:0090 | Red Hat Security Advisory: httpd security update | 2026-01-06T05:04:06+00:00 | 2026-01-13T22:11:20+00:00 |
| rhsa-2026:0093 | Red Hat Security Advisory: mod_md security update | 2026-01-06T01:44:58+00:00 | 2026-01-13T22:09:46+00:00 |
| rhsa-2026:0095 | Red Hat Security Advisory: httpd security update | 2026-01-06T01:23:46+00:00 | 2026-01-13T22:14:20+00:00 |
| rhsa-2026:0092 | Red Hat Security Advisory: mod_md security update | 2026-01-06T00:47:11+00:00 | 2026-01-13T22:11:49+00:00 |
| rhsa-2026:0079 | Red Hat Security Advisory: perl security update | 2026-01-05T21:25:35+00:00 | 2026-02-10T19:01:18+00:00 |
| rhsa-2026:0075 | Red Hat Security Advisory: httpd security update | 2026-01-05T19:42:42+00:00 | 2026-01-13T22:13:22+00:00 |
| rhsa-2026:0067 | Red Hat Security Advisory: tar security update | 2026-01-05T19:01:10+00:00 | 2026-02-03T20:56:52+00:00 |
| rhsa-2026:0077 | Red Hat Security Advisory: spice-client-win security update | 2026-01-05T18:07:35+00:00 | 2026-02-10T16:53:16+00:00 |
| rhsa-2026:0076 | Red Hat Security Advisory: spice-client-win security update | 2026-01-05T18:01:00+00:00 | 2026-02-10T16:53:16+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-193-12 | Siemens TIA Portal and SIMATIC STEP 7 | 2024-07-09T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-193-11 | Siemens RUGGEDCOM APE 1808 | 2024-07-09T00:00:00.000000Z | 2026-01-14T22:00:09.701376Z |
| icsa-24-193-10 | Siemens JT Open and PLM XML SDK | 2024-07-09T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-193-09 | Siemens SINEMA Remote Connect Server | 2024-07-09T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-193-08 | Siemens Mendix Encryption Module | 2024-07-09T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-193-07 | Siemens SIMATIC and SIMIT | 2024-07-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-24-193-06 | Siemens RUGGEDCOM | 2024-07-09T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-24-193-05 | Siemens SCALANCE, RUGGEDCOM | 2024-07-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-24-193-04 | Siemens Simcenter Femap | 2024-07-09T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-24-193-03 | Siemens Teamcenter Visualization and JT2Go | 2024-07-09T00:00:00.000000Z | 2024-08-13T00:00:00.000000Z |
| icsa-24-193-02 | Siemens RUGGEDCOM APE 1808 | 2024-07-09T00:00:00.000000Z | 2026-01-14T22:00:11.677616Z |
| icsa-24-193-01 | Siemens Remote Connect Server | 2024-07-09T00:00:00.000000Z | 2024-07-09T00:00:00.000000Z |
| icsa-25-007-01 | ABB ASPECT System | 2024-07-03T00:30:00.000000Z | 2024-12-05T00:30:00.000000Z |
| icsa-24-184-03 | Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update B) | 2024-07-02T06:00:00.000000Z | 2026-01-08T07:00:00.000000Z |
| icsa-24-184-02 | mySCADA myPRO | 2024-07-02T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-184-01 | Johnson Controls Kantech Door Controllers | 2024-07-02T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-07 | Johnson Controls Illustra Essentials Gen 4 (Update A) | 2024-06-27T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-06 | Johnson Controls Illustra Essentials Gen 4 (Update A) | 2024-06-27T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-05 | Johnson Controls Illustra Essentials Gen 4 (Update A) | 2024-06-27T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-04 | Johnson Controls Illustra Essentials Gen 4 (Update A) | 2024-06-27T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-179-03 | Yokogawa FAST/TOOLS and CI Server | 2024-06-27T06:00:00.000000Z | 2024-06-27T06:00:00.000000Z |
| icsa-24-179-02 | SDG Technologies PnPSCADA | 2024-06-27T06:00:00.000000Z | 2024-06-27T06:00:00.000000Z |
| icsa-24-179-01 | TELSAT marKoni FM Transmitter | 2024-06-27T06:00:00.000000Z | 2024-06-27T06:00:00.000000Z |
| icsa-24-177-02 | PTC Creo Elements/Direct License Server (Update A) | 2024-06-25T06:00:00.000000Z | 2024-07-02T06:00:00.000000Z |
| icsa-24-177-01 | ABB 800xA Base | 2024-06-25T06:00:00.000000Z | 2024-06-25T06:00:00.000000Z |
| icsa-24-172-03 | Westermo L210-F2G | 2024-06-20T06:00:00.000000Z | 2024-06-20T06:00:00.000000Z |
| icsa-24-172-02 | CAREL Boss-Mini | 2024-06-20T06:00:00.000000Z | 2024-06-20T06:00:00.000000Z |
| icsa-24-172-01 | Yokogawa CENTUM | 2024-06-20T06:00:00.000000Z | 2024-06-20T06:00:00.000000Z |
| icsa-24-170-01 | RAD Data Communications SecFlow-2 | 2024-06-18T06:00:00.000000Z | 2024-06-18T06:00:00.000000Z |
| icsa-24-165-19 | Motorola Solutions Vigilant License Plate Readers | 2024-06-13T06:00:00.000000Z | 2024-06-13T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-tetr-cmd-injc-skrwgo | Cisco Tetration Command Injection Vulnerability | 2022-01-12T16:00:00+00:00 | 2022-01-31T17:21:31+00:00 |
| cisco-sa-sna-xss-nxoxdhrq | Cisco Secure Network Analytics Cross-Site Scripting Vulnerability | 2022-01-12T16:00:00+00:00 | 2022-01-12T16:00:00+00:00 |
| cisco-sa-prime-reg-xss-zloz8pfb | Cisco Prime Access Registrar Appliance Cross-Site Scripting Vulnerability | 2022-01-12T16:00:00+00:00 | 2022-01-12T16:00:00+00:00 |
| cisco-sa-pi-epnm-path-trav-zws324yn | Cisco Prime Infrastructure and Evolved Programmable Network Manager Vulnerabilities | 2022-01-12T16:00:00+00:00 | 2022-01-12T16:00:00+00:00 |
| cisco-sa-ip-phone-info-disc-frdjfoxa | Cisco IP Phones Information Disclosure Vulnerability | 2022-01-12T16:00:00+00:00 | 2022-01-12T16:00:00+00:00 |
| cisco-sa-ece-multivulns-kbk2yvhr | Cisco Enterprise Chat and Email Vulnerabilities | 2022-01-12T16:00:00+00:00 | 2022-01-12T16:00:00+00:00 |
| cisco-sa-csm-mult-xss-7hmokqtt | Cisco Security Manager Cross-Site Scripting Vulnerabilities | 2022-01-12T16:00:00+00:00 | 2022-01-12T16:00:00+00:00 |
| cisco-sa-ccmp-priv-esc-jzhtflm4 | Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability | 2022-01-12T16:00:00+00:00 | 2022-01-12T16:00:00+00:00 |
| cisco-sa-asdm-logging-jnloy422 | Cisco Adaptive Security Device Manager Information Disclosure Vulnerability | 2022-01-12T16:00:00+00:00 | 2022-06-29T21:50:47+00:00 |
| cisco-sa-apache-log4j-qruknebd | Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021 | 2021-12-10T18:45:00+00:00 | 2022-01-31T21:16:10+00:00 |
| cisco-sa-cspc-xss-kjrnbm3p | Cisco Common Services Platform Collector Stored Cross-Site Scripting Vulnerability | 2021-11-17T16:00:00+00:00 | 2021-11-18T22:48:14+00:00 |
| cisco-sa-cspc-sqli-unvptn5 | Cisco Common Services Platform Collector SQL Injection Vulnerability | 2021-11-17T16:00:00+00:00 | 2021-11-18T22:48:13+00:00 |
| cisco-sa-cspc-ilr-8qmw8y8x | Cisco Common Services Platform Collector Improper Logging Restriction Vulnerability | 2021-11-17T16:00:00+00:00 | 2021-11-18T22:48:15+00:00 |
| cisco-sa-webex-activation-3sdnfxcy | Cisco Webex Meetings Email Content Injection Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-vmesh-openred-agnrmf5 | Cisco Webex Video Mesh Arbitrary Site Redirection Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-videomesh-xss-qjm2bdqf | Cisco Webex Video Mesh Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-umbrella-user-enum-s7xfjwde | Cisco Umbrella Email Enumeration Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-ucm-csrf-xrtkdu3h | Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-smb-switches-web-dos-xmyffkt8 | Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-smb-switches-tokens-uzwpr4e5 | Cisco Small Business Series Switches Session Credentials Replay Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-sbrv-cmdinjection-z5cwfdk | Cisco Small Business RV Series Routers Command Injection Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-pi-epnm-xss-u2jk537j | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-esa-dos-jom9etfo | Cisco Email Security Appliance Denial of Service Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-cucm-path-trav-dkcvktvo | Cisco Unified Communications Products Path Traversal Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-cspc-info-disc-km3bgvl | Cisco Common Services Platform Collector Information Disclosure Vulnerability | 2021-11-03T16:00:00+00:00 | 2022-01-06T17:54:37+00:00 |
| cisco-sa-cps-static-key-jms92hnv | Cisco Policy Suite Static SSH Keys Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-04T17:32:39+00:00 |
| cisco-sa-cpar-strd-xss-a4dcvetg | Cisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-catpon-multivulns-ce3dsygr | Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-anyconnect-nam-priv-ycsrnugt | Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-snort-dos-s2r7w9uu | Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-29T14:07:40+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-12977 | CVE-2025-12977 | 2025-11-02T00:00:00.000Z | 2025-12-17T14:35:28.000Z |
| msrc_cve-2025-12970 | CVE-2025-12970 | 2025-11-02T00:00:00.000Z | 2025-12-07T01:39:15.000Z |
| msrc_cve-2025-12969 | CVE-2025-12969 | 2025-11-02T00:00:00.000Z | 2025-12-17T14:35:34.000Z |
| msrc_cve-2025-12889 | TLS 1.2 Client Can Downgrade Digest Used | 2025-11-02T00:00:00.000Z | 2025-12-03T01:37:06.000Z |
| msrc_cve-2025-12888 | Constant Time Issue with Xtensa-based ESP32 and X22519 | 2025-11-02T00:00:00.000Z | 2025-12-03T01:36:46.000Z |
| msrc_cve-2025-12875 | mruby array.c ary_fill_exec out-of-bounds write | 2025-11-02T00:00:00.000Z | 2025-11-25T01:40:24.000Z |
| msrc_cve-2025-12863 | Libxml2: namespace use-after-free in xmlsettreedoc() function of libxml2 | 2025-11-02T00:00:00.000Z | 2026-01-20T14:48:39.000Z |
| msrc_cve-2025-12818 | PostgreSQL libpq undersizes allocations, via integer wraparound | 2025-11-02T00:00:00.000Z | 2026-02-18T14:20:54.000Z |
| msrc_cve-2025-12817 | PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege | 2025-11-02T00:00:00.000Z | 2025-12-06T14:40:04.000Z |
| msrc_cve-2025-12816 | CVE-2025-12816 | 2025-11-02T00:00:00.000Z | 2025-12-04T14:35:48.000Z |
| msrc_cve-2025-12748 | Libvirt: denial of service in xml parsing | 2025-11-02T00:00:00.000Z | 2026-02-18T14:22:06.000Z |
| msrc_cve-2025-12638 | Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file() | 2025-11-02T00:00:00.000Z | 2025-12-09T01:36:54.000Z |
| msrc_cve-2025-11936 | Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello | 2025-11-02T00:00:00.000Z | 2025-12-03T01:36:51.000Z |
| msrc_cve-2025-11935 | Forward Secrecy Violation in WolfSSL TLS 1.3 | 2025-11-02T00:00:00.000Z | 2025-12-02T01:39:52.000Z |
| msrc_cve-2025-11934 | Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify | 2025-11-02T00:00:00.000Z | 2025-12-16T01:35:10.000Z |
| msrc_cve-2025-11933 | DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension | 2025-11-02T00:00:00.000Z | 2025-12-16T01:35:19.000Z |
| msrc_cve-2025-11932 | Timing Side-Channel in PSK Binder Verification | 2025-11-02T00:00:00.000Z | 2025-12-03T01:37:14.000Z |
| msrc_cve-2025-11931 | Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt | 2025-11-02T00:00:00.000Z | 2025-12-03T01:36:58.000Z |
| msrc_cve-2025-11230 | Denial of service vulnerability in HAProxy mjson library | 2025-11-02T00:00:00.000Z | 2025-12-07T01:37:57.000Z |
| msrc_cve-2025-10966 | missing SFTP host verification with wolfSSH | 2025-11-02T00:00:00.000Z | 2026-02-18T03:00:31.000Z |
| msrc_cve-2025-10158 | Rsync: Out of bounds array access via negative index | 2025-11-02T00:00:00.000Z | 2025-12-07T01:36:46.000Z |
| msrc_cve-2024-47866 | RGW DoS attack with empty HTTP header in S3 object copy | 2025-11-02T00:00:00.000Z | 2025-12-06T14:39:56.000Z |
| msrc_cve-2024-25621 | containerd affected by a local privilege escalation via wide permissions on CRI directory | 2025-11-02T00:00:00.000Z | 2025-11-19T01:52:07.000Z |
| msrc_cve-2011-10034 | IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS | 2025-11-02T00:00:00.000Z | 2025-11-14T01:01:24.000Z |
| msrc_cve-2025-60711 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-31T00:00:00.000Z |
| msrc_cve-2025-59503 | Azure Compute Resource Provider Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-28T00:00:00.000Z |
| msrc_cve-2025-59502 | Remote Procedure Call Denial of Service Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| msrc_cve-2025-59501 | Microsoft Configuration Manager Spoofing Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-24T00:00:00.000Z |
| msrc_cve-2025-59500 | Azure Notification Service Elevation of Privilege Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-23T00:00:00.000Z |
| msrc_cve-2025-59497 | Microsoft Defender for Linux Denial of Service Vulnerability | 2025-10-14T00:00:00.000Z | 2025-10-14T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-838 | Use-of-uninitialized-value in wabt::BinaryReaderIR::OnOpcode | 2023-09-12T14:01:08.316035Z | 2025-07-22T14:22:12.701561Z |
| osv-2023-837 | Heap-buffer-overflow in uint7_get_64 | 2023-09-12T14:00:46.512961Z | 2023-09-12T14:00:46.513217Z |
| osv-2023-819 | Heap-buffer-overflow in ucl_object_dtor_unref_single | 2023-09-09T14:01:07.368928Z | 2026-02-17T14:21:16.973749Z |
| osv-2023-813 | UNKNOWN READ in parse_priv_value | 2023-09-09T14:00:12.875572Z | 2023-12-09T14:23:28.975076Z |
| osv-2023-811 | Invalid-free in bit_chain_alloc_size | 2023-09-08T14:03:02.684720Z | 2023-09-08T14:03:02.684999Z |
| osv-2023-806 | Heap-buffer-overflow in H5F__accum_free | 2023-09-08T14:00:12.468140Z | 2025-03-18T00:47:11.270073Z |
| osv-2023-800 | Heap-buffer-overflow in XCFImageFormat::loadTileRLE | 2023-09-07T14:00:27.693270Z | 2026-02-14T14:17:47.015069Z |
| osv-2023-797 | Stack-buffer-overflow in QBuffer::readData | 2023-09-06T14:02:36.541753Z | 2023-09-10T14:16:24.674920Z |
| osv-2023-795 | Security exception in org.apache.poi.hwpf.converter.AbstractWordConverter.processNoteAnchor | 2023-09-06T14:00:41.687301Z | 2023-09-06T14:00:41.687553Z |
| osv-2023-793 | Security exception in org.apache.lucene.util.BytesRefBuilder.<init> | 2023-09-06T14:00:17.692567Z | 2023-09-06T14:00:17.692814Z |
| osv-2023-779 | Use-of-uninitialized-value in dev_io_capture | 2023-09-01T14:02:31.084726Z | 2023-09-01T14:02:31.085002Z |
| osv-2023-777 | Heap-buffer-overflow in dxf_fixup_string | 2023-08-31T14:02:40.465168Z | 2023-08-31T14:02:40.465446Z |
| osv-2023-776 | Heap-buffer-overflow in ndpi_domain_classify_contains | 2023-08-31T14:01:17.285452Z | 2023-08-31T14:01:17.285839Z |
| osv-2023-775 | Security exception in com.github.javaparser.CommentsInserter.insertComments | 2023-08-31T14:00:51.228804Z | 2023-08-31T14:00:51.229055Z |
| osv-2023-769 | Index-out-of-bounds in derive_spatial_luma_vector_prediction | 2023-08-30T14:01:19.139702Z | 2023-08-30T14:01:19.139963Z |
| osv-2023-764 | Heap-buffer-overflow in pim_pim_packet | 2023-08-30T14:00:10.025963Z | 2023-08-30T14:00:10.026257Z |
| osv-2023-761 | Heap-buffer-overflow in ICMPinfo::dissectICMP | 2023-08-29T14:02:10.894349Z | 2023-08-29T14:02:10.894589Z |
| osv-2023-758 | Heap-double-free in bit_TV_to_utf8 | 2023-08-29T14:00:10.585462Z | 2023-08-29T14:00:10.585716Z |
| osv-2023-756 | Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal | 2023-08-28T14:02:10.741602Z | 2023-12-23T14:16:41.470280Z |
| osv-2023-754 | Heap-buffer-overflow in H5O__chunk_protect | 2023-08-28T14:00:10.026707Z | 2025-03-18T00:43:25.726885Z |
| osv-2023-753 | Stack-buffer-overflow in iasecc_crt_parse | 2023-08-28T14:00:08.788843Z | 2023-08-28T14:00:08.789089Z |
| osv-2023-750 | Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext | 2023-08-27T14:01:22.181636Z | 2023-08-27T14:01:22.181891Z |
| osv-2023-748 | Segv on unknown address in dwg_encode | 2023-08-27T14:01:00.633988Z | 2023-08-27T14:01:00.634262Z |
| osv-2023-745 | Heap-buffer-overflow in pcpp::SomeIpSdLayer::isDataValid | 2023-08-27T14:00:31.929598Z | 2023-08-27T14:00:31.929865Z |
| osv-2023-744 | Stack-buffer-overflow in sc_color_fprintf_va | 2023-08-26T14:02:46.114617Z | 2023-08-26T14:02:46.114892Z |
| osv-2023-743 | Out-of-memory in QueryParserFuzzer | 2023-08-26T14:02:30.998218Z | 2023-08-27T14:28:54.259585Z |
| osv-2023-741 | Heap-buffer-overflow in Flow::dissectBittorrent | 2023-08-26T14:00:30.188688Z | 2023-08-26T14:00:30.188967Z |
| osv-2023-739 | UNKNOWN READ in OT::glyph_variations_t::create_from_glyphs_var_data | 2023-08-25T14:02:18.323225Z | 2023-08-25T14:02:18.323527Z |
| osv-2023-738 | Use-of-uninitialized-value in _PyFunction_FromConstructor | 2023-08-25T14:00:42.118304Z | 2023-08-25T14:00:42.118579Z |
| osv-2023-736 | Heap-buffer-overflow in HeifContext::interpret_heif_file | 2023-08-25T14:00:14.487219Z | 2023-12-20T14:12:01.243209Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2020-0008 | Flaw in hyper allows request smuggling by sending a body in GET requests | 2020-03-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0005 | CBox API allows to de-reference raw pointers without `unsafe` code | 2020-03-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0010 | tiberius is unmaintained | 2020-02-28T12:00:00Z | 2020-10-02T01:29:11Z |
| rustsec-2020-0147 | rulinalg is unmaintained, use nalgebra instead | 2020-02-11T12:00:00Z | 2021-03-04T13:58:02Z |
| rustsec-2020-0023 | Lifetime boundary for `raw_slice` and `raw_slice_mut` are incorrect | 2020-02-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0158 | slice-deque is unmaintained | 2020-02-10T12:00:00Z | 2021-11-18T14:04:01Z |
| rustsec-2020-0144 | lzw is unmaintained | 2020-02-10T12:00:00Z | 2021-02-10T18:27:15Z |
| rustsec-2020-0169 | multi_mut is Unmaintained | 2020-02-07T12:00:00Z | 2024-12-04T12:55:45Z |
| rustsec-2020-0162 | `tokio-proto` is deprecated/unmaintained | 2020-02-06T12:00:00Z | 2022-02-07T02:25:36Z |
| rustsec-2020-0049 | Use-after-free in Framed due to lack of pinning | 2020-01-30T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0123 | Contents of uninitialized memory exposed in DeflateOutput's AsyncRead implementation | 2020-01-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0062 | Improper `Sync` implementation on `FuturesUnordered` in futures-utils can cause data corruption | 2020-01-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0048 | Use-after-free in BodyStream due to lack of pinning | 2020-01-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0004 | sigstack allocation bug can cause memory corruption or leak | 2020-01-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0156 | Observable Discrepancy in libsecp256k1-rs | 2020-01-22T12:00:00Z | 2021-09-10T16:03:52Z |
| rustsec-2020-0160 | Threshold value is ignored (all shares are n=3) | 2020-01-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0003 | rust_sodium is unmaintained; switch to a modern alternative | 2020-01-20T12:00:00Z | 2020-10-02T01:29:11Z |
| rustsec-2020-0002 | Parsing a specially crafted message can result in a stack overflow | 2020-01-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0046 | bespoke Cell implementation allows obtaining several mutable references to the same data | 2020-01-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0045 | bespoke Cell implementation allows obtaining several mutable references to the same data | 2020-01-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0001 | Stack overflow when resolving additional records from MX or SRV null targets | 2020-01-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0032 | crust repo has been archived; use libp2p instead | 2019-11-21T12:00:00Z | 2020-10-02T01:29:11Z |
| rustsec-2019-0031 | spin is no longer actively maintained | 2019-11-21T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2019-0034 | HeaderMap::Drain API is unsound | 2019-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0033 | Integer Overflow in HeaderMap::reserve() can cause Denial of Service | 2019-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0036 | Type confusion if __private_get_type_id__ is overridden | 2019-11-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0029 | ChaCha20 counter overflow can expose repetitions in the keystream | 2019-10-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0028 | Unsound `impl Follow for bool` | 2019-10-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0027 | Flaw in Scalar::check_overflow allows side-channel timing attack | 2019-10-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0026 | generichash::Digest::eq always return true | 2019-10-11T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-vault-2025-4656 | Vault Vulnerable to Recovery Key Cancellation Denial of Service | 2025-06-30T15:05:10.786Z | 2025-07-10T21:34:08.433Z |
| bit-kibana-2025-25012 | Kibana Open Redirect | 2025-06-30T14:45:12.946Z | 2025-10-01T15:14:38.852Z |
| bit-elk-2025-25012 | Kibana Open Redirect | 2025-06-30T14:39:25.656Z | 2025-10-01T15:14:38.852Z |
| bit-contour-2024-36539 | 2025-06-28T05:36:10.957Z | 2025-06-28T06:16:35.133Z | |
| bit-gitlab-2025-5121 | Missing Authorization in GitLab | 2025-06-24T15:15:54.671Z | 2025-08-13T06:08:53.695Z |
| bit-gitlab-2025-2443 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-06-24T15:15:42.090Z | 2025-08-13T06:08:53.695Z |
| bit-gitlab-2024-7586 | Insertion of Sensitive Information into Log File in GitLab | 2025-06-24T15:13:54.274Z | 2025-08-13T06:08:53.695Z |
| bit-gitlab-2024-4994 | Cross-Site Request Forgery (CSRF) in GitLab | 2025-06-24T15:13:03.565Z | 2025-06-24T15:16:56.580Z |
| bit-gitlab-2024-4025 | Inefficient Regular Expression Complexity in GitLab | 2025-06-24T15:12:39.853Z | 2025-08-13T06:08:53.695Z |
| bit-gitlab-2023-5600 | Missing Authorization in GitLab | 2025-06-24T15:10:28.696Z | 2025-06-24T15:16:56.580Z |
| bit-rabbitmq-2025-50200 | RabbitMQ Node can log Basic Auth header from an HTTP request | 2025-06-24T14:58:31.787Z | 2025-06-24T15:16:56.580Z |
| bit-openresty-2024-33452 | 2025-06-24T14:52:16.514Z | 2025-11-06T13:25:46.476Z | |
| bit-ghost-2024-34451 | 2025-06-23T05:41:01.674Z | 2025-09-03T11:06:29.028Z | |
| bit-python-2025-4516 | Use-after-free in "unicode_escape" decoder with error handler | 2025-06-20T09:48:08.494Z | 2025-06-20T10:07:57.809Z |
| bit-tomcat-2025-49124 | Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows | 2025-06-20T06:04:24.795Z | 2025-11-06T13:25:46.476Z |
| bit-grafana-2025-1088 | Very long unicode dashboard title or panel name can hang the frontend | 2025-06-20T05:44:52.153Z | 2025-06-20T06:16:43.559Z |
| bit-seaweedfs-2024-40120 | 2025-06-18T15:00:48.818Z | 2025-06-18T15:17:39.937Z | |
| bit-node-2024-3566 | Command injection vulnerability in programing languages on Microsoft Windows operating system. | 2025-06-18T14:56:46.820Z | 2025-06-18T15:17:39.937Z |
| bit-modsecurity-2024-46292 | 2025-06-18T14:49:01.714Z | 2025-06-18T15:17:39.937Z | |
| bit-django-2025-32873 | 2025-06-18T14:40:22.794Z | 2025-09-03T11:06:29.028Z | |
| bit-moodle-2025-3638 | Moodle: csrf risk in brickfield tool's analysis request action | 2025-06-17T05:59:41.165Z | 2025-06-17T06:16:01.751Z |
| bit-gitlab-2025-5996 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-06-14T06:15:35.859Z | 2025-06-14T06:16:31.200Z |
| bit-gitlab-2025-5982 | Insufficient Granularity of Access Control in GitLab | 2025-06-14T06:15:34.466Z | 2025-08-13T06:08:53.695Z |
| bit-gitlab-2025-5195 | Authorization Bypass Through User-Controlled Key in GitLab | 2025-06-14T06:15:33.067Z | 2025-06-14T06:16:31.200Z |
| bit-gitlab-2025-4278 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab | 2025-06-14T06:15:30.019Z | 2025-06-14T06:16:31.200Z |
| bit-gitlab-2025-2254 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-06-14T06:15:17.406Z | 2025-08-11T00:06:06.142Z |
| bit-gitlab-2025-1516 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-06-14T06:15:08.636Z | 2025-08-11T00:06:06.142Z |
| bit-gitlab-2025-1478 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-06-14T06:15:07.198Z | 2025-08-11T00:06:06.142Z |
| bit-gitlab-2025-0673 | Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab | 2025-06-14T06:14:51.122Z | 2025-06-14T06:16:31.200Z |
| bit-gitlab-2024-9512 | Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab | 2025-06-14T06:14:22.639Z | 2025-08-11T00:06:06.142Z |
| ID | Description | Updated |
|---|---|---|
| var-201806-1505 | System software utilizing Lazy FP state restore technique on systems using Intel Core-bas… | 2024-07-23T20:32:57.575000Z |
| var-201904-1410 | A use after free issue was addressed with improved memory management. This issue affected… | 2024-07-23T20:32:56.963000Z |
| var-200511-0062 | The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe so… | 2024-07-23T20:32:56.794000Z |
| var-201506-0231 | The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 befor… | 2024-07-23T20:32:53.570000Z |
| var-201204-0111 | The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on… | 2024-07-23T20:32:19.934000Z |
| var-201912-0578 | A memory corruption issue was addressed with improved input validation. This issue is fix… | 2024-07-23T20:32:14.024000Z |
| var-201710-0928 | When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month fi… | 2024-07-23T20:32:14.616000Z |
| var-201707-1176 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … | 2024-07-23T20:31:50.100000Z |
| var-201007-0320 | WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… | 2024-07-23T20:31:44.088000Z |
| var-201006-1253 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari… | 2024-07-23T20:31:44.497000Z |
| var-200603-0276 | Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to r… | 2024-07-23T20:31:11.533000Z |
| var-201912-0477 | A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tv… | 2024-07-23T20:31:09.597000Z |
| var-202109-0758 | A vulnerability in the Protection Against Distributed Denial of Service Attacks feature o… | 2024-07-23T20:31:08.412000Z |
| var-201210-0155 | Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS … | 2024-07-23T20:31:08.483000Z |
| var-201302-0143 | Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… | 2024-07-23T20:31:06.906000Z |
| var-202109-1330 | A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6,… | 2024-07-23T20:31:03.287000Z |
| var-201702-0878 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … | 2024-07-23T20:31:03.199000Z |
| var-201102-0097 | Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows r… | 2024-07-23T20:31:03.455000Z |
| var-201903-0418 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T20:30:59.999000Z |
| var-200705-0681 | Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to… | 2024-07-23T20:30:59.378000Z |
| var-202212-1523 | The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2… | 2024-07-23T20:30:57.804000Z |
| var-200704-0227 | Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4… | 2024-07-23T20:30:57.670000Z |
| var-201912-1378 | SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an… | 2024-07-23T20:30:53.083000Z |
| var-200704-0222 | URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credent… | 2024-07-23T20:30:53.685000Z |
| var-200110-0214 | The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely cre… | 2024-07-23T20:30:53.499000Z |
| var-201007-0199 | The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 a… | 2024-07-23T20:30:52.504000Z |
| var-202112-2255 | In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has … | 2024-07-23T20:30:28.280000Z |
| var-201603-0244 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and… | 2024-07-23T20:30:28.935000Z |
| var-200712-0605 | Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_… | 2024-07-23T20:30:10.502000Z |
| var-201302-0234 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:29:38.152000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000103 | WordPress Plugin "Push Notifications for WordPress (Lite)" vulnerable to cross-site request forgery | 2021-11-16T13:42+09:00 | 2021-11-16T13:42+09:00 |
| jvndb-2021-000102 | rwtxt vulnerable to cross-site scripting | 2021-11-16T13:38+09:00 | 2021-11-16T13:38+09:00 |
| jvndb-2021-000101 | Unlimited Sitemap Generator vulnerable to cross-site request forgery | 2021-11-12T15:07+09:00 | 2021-11-12T15:07+09:00 |
| jvndb-2021-003840 | Cross-site Scripting Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2021-11-12T11:41+09:00 | 2021-11-12T11:41+09:00 |
| jvndb-2021-000100 | Multiple vulnerabilities in EC-CUBE 2 series | 2021-11-11T15:09+09:00 | 2021-11-11T15:09+09:00 |
| jvndb-2021-000094 | WordPress Plugin "Booking Package - Appointment Booking Calendar System" vulnerable to cross-site scripting | 2021-11-10T14:26+09:00 | 2021-11-10T14:26+09:00 |
| jvndb-2021-003811 | File Permission Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center | 2021-11-05T15:04+09:00 | 2021-11-05T15:04+09:00 |
| jvndb-2021-003660 | Authentication Bypass Vulnerability in Hitachi Device Manager | 2021-11-01T15:56+09:00 | 2021-11-01T15:56+09:00 |
| jvndb-2021-000097 | Multiple vulnerabilities in CLUSTERPRO X and EXPRESSCLUSTER X | 2021-10-29T15:22+09:00 | 2022-04-20T14:03+09:00 |
| jvndb-2021-000096 | Android App "Mercari (Merpay) - Marketplace and Mobile Payments App" (Japan version) vulnerable to improper handling of Intent | 2021-10-29T15:11+09:00 | 2021-10-29T15:11+09:00 |
| jvndb-2021-000098 | ESET Cyber Security and ESET Endpoint series vulnerable to denial-of-service (DoS) | 2021-10-29T14:58+09:00 | 2021-10-29T14:58+09:00 |
| jvndb-2021-000095 | Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter | 2021-10-28T15:03+09:00 | 2021-10-28T15:03+09:00 |
| jvndb-2021-003385 | Trend Micro Endpoint security products for enterprises vulnerable to privilege escalation | 2021-10-26T12:35+09:00 | 2021-10-26T12:35+09:00 |
| jvndb-2021-000093 | Movable Type XMLRPC API vulnerable to OS command injection | 2021-10-20T17:38+09:00 | 2021-12-17T17:36+09:00 |
| jvndb-2021-003080 | OMRON CX-Supervisor vulnerable to out-of-bounds read | 2021-10-18T15:26+09:00 | 2021-11-01T15:37+09:00 |
| jvndb-2021-000091 | 128 Technology Session Smart Router vulnerable to authentication bypass | 2021-10-18T14:58+09:00 | 2021-10-18T14:58+09:00 |
| jvndb-2021-000090 | Apache HTTP Server vulnerable to directory traversal | 2021-10-11T18:07+09:00 | 2021-10-11T18:07+09:00 |
| jvndb-2021-000089 | Nike App fails to restrict custom URL schemes properly | 2021-10-08T14:32+09:00 | 2021-10-08T14:32+09:00 |
| jvndb-2021-002810 | Information Disclosure Vulnerability in Hitachi Tuning Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2021-10-05T15:37+09:00 | 2021-10-05T15:37+09:00 |
| jvndb-2021-002774 | Trend Micro ServerProtect family vulnerable to authentication bypass | 2021-10-01T14:42+09:00 | 2021-10-01T14:42+09:00 |
| jvndb-2021-000088 | Multiple vulnerabilities in Cybozu Remote Service | 2021-09-30T16:03+09:00 | 2024-04-08T18:09+09:00 |
| jvndb-2021-002752 | Trend Micro HouseCall for Home Networks vulnerable to privilege escalation | 2021-09-30T13:56+09:00 | 2021-09-30T13:56+09:00 |
| jvndb-2021-000085 | SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification | 2021-09-28T15:18+09:00 | 2021-09-28T15:18+09:00 |
| jvndb-2021-000086 | WordPress Plugin "OG Tags" vulnerable to cross-site request forgery | 2021-09-28T15:11+09:00 | 2021-09-28T15:11+09:00 |
| jvndb-2021-000084 | InBody App vulnerable to information disclosure | 2021-09-28T14:27+09:00 | 2021-09-28T14:27+09:00 |
| jvndb-2021-000081 | Multiple vulnerabilities in Sharp NEC Display Solutions' public displays | 2021-09-17T15:13+09:00 | 2025-12-10T10:24+09:00 |
| jvndb-2021-000083 | EC-CUBE plugin "Order Status Batch Change Plug-in" vulnerable to cross-site scripting | 2021-09-16T14:33+09:00 | 2021-09-16T14:33+09:00 |
| jvndb-2021-000082 | EC-CUBE plugin "List (order management) item change plug-in" vulnerable to cross-site scripting | 2021-09-13T14:24+09:00 | 2021-09-13T14:24+09:00 |
| jvndb-2021-000074 | Multiple vulnerabilities in RevoWorks Browser | 2021-09-10T15:44+09:00 | 2021-09-10T15:44+09:00 |
| jvndb-2021-002342 | Trend Micro Security family vulnerable to improper handling of Directory Junction | 2021-09-03T16:10+09:00 | 2021-09-03T16:10+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4056-1 | Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7) | 2025-11-11T18:35:25Z | 2025-11-11T18:35:25Z |
| suse-su-2025:3681-1 | Security update for go1.25 | 2025-11-11T18:34:57Z | 2025-11-11T18:34:57Z |
| suse-su-2025:4054-1 | Security update for ongres-scram | 2025-11-11T14:04:30Z | 2025-11-11T14:04:30Z |
| suse-su-2025:4053-1 | Security update for qatengine, qatlib | 2025-11-11T13:46:58Z | 2025-11-11T13:46:58Z |
| suse-su-2025:4050-1 | Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP5) | 2025-11-11T09:33:48Z | 2025-11-11T09:33:48Z |
| suse-su-2025:4043-1 | Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP5) | 2025-11-11T07:03:50Z | 2025-11-11T07:03:50Z |
| suse-su-2025:4046-1 | Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4) | 2025-11-11T02:33:47Z | 2025-11-11T02:33:47Z |
| suse-su-2025:4040-1 | Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4) | 2025-11-10T19:03:48Z | 2025-11-10T19:03:48Z |
| suse-su-2025:4039-1 | Security update for java-1_8_0-openjdk | 2025-11-10T15:05:07Z | 2025-11-10T15:05:07Z |
| suse-su-2025:21038-1 | Security update for podman | 2025-11-10T14:47:12Z | 2025-11-10T14:47:12Z |
| suse-su-2025:21037-1 | Security update for tiff | 2025-11-10T14:45:27Z | 2025-11-10T14:45:27Z |
| suse-su-2025:21036-1 | Security update for runc | 2025-11-10T14:45:27Z | 2025-11-10T14:45:27Z |
| suse-su-2025:21067-1 | Security update for powerpc-utils | 2025-11-10T14:24:22Z | 2025-11-10T14:24:22Z |
| suse-su-2025:21054-1 | Security update for runc | 2025-11-10T14:24:22Z | 2025-11-10T14:24:22Z |
| suse-su-2025:4038-1 | Security update for java-1_8_0-openjdk | 2025-11-10T14:22:51Z | 2025-11-10T14:22:51Z |
| suse-su-2025:4036-1 | Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP4) | 2025-11-10T14:04:15Z | 2025-11-10T14:04:15Z |
| suse-su-2025:4035-1 | Security update for erlang26 | 2025-11-10T13:47:05Z | 2025-11-10T13:47:05Z |
| suse-su-2025:4029-1 | Security update for squid | 2025-11-10T11:44:34Z | 2025-11-10T11:44:34Z |
| suse-su-2025:4026-1 | Security update for squid | 2025-11-10T09:12:43Z | 2025-11-10T09:12:43Z |
| suse-su-2025:4024-1 | Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) | 2025-11-10T08:14:25Z | 2025-11-10T08:14:25Z |
| suse-su-2025:4016-1 | Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP3) | 2025-11-10T08:13:30Z | 2025-11-10T08:13:30Z |
| suse-su-2025:4031-1 | Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) | 2025-11-10T08:12:19Z | 2025-11-10T08:12:19Z |
| suse-su-2025:4006-1 | Security update for MozillaThunderbird | 2025-11-10T08:00:18Z | 2025-11-10T08:00:18Z |
| suse-su-2025:4005-1 | Security update for java-1_8_0-openj9 | 2025-11-10T01:04:17Z | 2025-11-10T01:04:17Z |
| suse-su-2025:4004-1 | Security update for the Linux Kernel (Live Patch 61 for SLE 15 SP3) | 2025-11-09T07:03:51Z | 2025-11-09T07:03:51Z |
| suse-su-2025:4003-1 | Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5) | 2025-11-09T05:04:13Z | 2025-11-09T05:04:13Z |
| suse-su-2025:4001-1 | Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7) | 2025-11-09T01:33:43Z | 2025-11-09T01:33:43Z |
| suse-su-2025:4000-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-11-07T17:04:39Z | 2025-11-07T17:04:39Z |
| suse-su-2025:3998-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP7) | 2025-11-07T16:04:09Z | 2025-11-07T16:04:09Z |
| suse-su-2025:3997-1 | Security update for java-17-openjdk | 2025-11-07T15:50:20Z | 2025-11-07T15:50:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-30593 | WordPress插件WebP Express信息泄露漏洞 | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30592 | WordPress插件MxChat信息泄露漏洞 | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30591 | WordPress插件SurveyFunnel – Survey Plugin for WordPress信息泄露漏洞 | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30590 | WordPress插件SSP Debug信息泄露漏洞 | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30564 | Apache HTTP Server命令注入漏洞 | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30563 | Tenda Ax3缓冲区溢出漏洞 | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30562 | Huawei HarmonyOS存在未明漏洞（CNVD-2025-30562） | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30561 | Huawei HarmonyOS file management app绕过应用锁校验漏洞 | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30560 | Huawei HarmonyOS存在未明漏洞（CNVD-2025-30560） | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30559 | Huawei HarmonyOS office service拒绝服务漏洞 | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30558 | Huawei HarmonyOS存在未明漏洞（CNVD-2025-30558） | 2025-12-10 | 2025-12-12 |
| cnvd-2025-30383 | Google Chrome信息泄露漏洞（CNVD-2025-3038304） | 2025-12-10 | 2025-12-10 |
| cnvd-2025-30382 | FreePBX SQL注入漏洞（CNVD-2025-3038208） | 2025-12-10 | 2025-12-10 |
| cnvd-2026-04888 | Google Chrome错误类型转换漏洞 | 2025-12-09 | 2026-01-19 |
| cnvd-2025-30364 | Billing System password-recovery.php端点SQL注入漏洞 | 2025-12-09 | 2025-12-10 |
| cnvd-2025-30363 | Billing System admin/index.php端点SQL注入漏洞 | 2025-12-09 | 2025-12-10 |
| cnvd-2026-07244 | Google Chrome实现不当漏洞 | 2025-12-08 | 2026-01-22 |
| cnvd-2026-07243 | Google Chrome类型混淆漏洞 | 2025-12-08 | 2026-01-22 |
| cnvd-2026-04890 | Google Chrome释放后重用漏洞 | 2025-12-08 | 2026-01-19 |
| cnvd-2026-04889 | Google Chrome竞争条件漏洞 | 2025-12-08 | 2026-01-19 |
| cnvd-2026-04469 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞（CNVD-C-2025-987341） | 2025-12-08 | 2026-01-21 |
| cnvd-2025-30979 | Advantech iView SQL注入漏洞 | 2025-12-08 | 2025-12-17 |
| cnvd-2025-30385 | Google Chrome Media Stream释放后重用漏洞（CNVD-2025-30385） | 2025-12-08 | 2025-12-09 |
| cnvd-2025-30384 | Claude Code代码执行漏洞 | 2025-12-08 | 2025-12-10 |
| cnvd-2026-04452 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-986300） | 2025-12-07 | 2026-01-21 |
| cnvd-2026-04451 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞（CNVD-C-2025-986298） | 2025-12-07 | 2026-01-21 |
| cnvd-2026-07245 | Google Chrome释放后使用漏洞（CNVD-2026-07245） | 2025-12-05 | 2026-01-22 |
| cnvd-2026-04296 | 北京邦永科技有限公司PM2项目管理平台存在SQL注入漏洞（CNVD-C-2025-983218） | 2025-12-05 | 2026-01-19 |
| cnvd-2025-30386 | Google Chrome权限提升漏洞（CNVD-2025-30386） | 2025-12-05 | 2025-12-09 |
| cnvd-2026-04468 | 北京神州视翰科技有限公司远程医疗综合服务平台存在SQL注入漏洞（CNVD-C-2025-980402） | 2025-12-04 | 2026-01-21 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0919 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0918 | Multiples vulnérabilités dans Liferay | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0917 | Multiples vulnérabilités dans les produits Moxa | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0916 | Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0924 | Multiples vulnérabilités dans les produits IBM | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0923 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0922 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0921 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0920 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0919 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0918 | Multiples vulnérabilités dans Liferay | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0917 | Multiples vulnérabilités dans les produits Moxa | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0916 | Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0915 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0914 | Multiples vulnérabilités dans les produits Centreon | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0913 | Multiples vulnérabilités dans ISC BIND | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| CERTFR-2025-AVI-0915 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| CERTFR-2025-AVI-0914 | Multiples vulnérabilités dans les produits Centreon | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| CERTFR-2025-AVI-0913 | Multiples vulnérabilités dans ISC BIND | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0912 | Vulnérabilité dans SolarWinds Observability | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0911 | Multiples vulnérabilités dans Oracle Weblogic | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0910 | Multiples vulnérabilités dans Oracle Virtualization | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0909 | Multiples vulnérabilités dans Oracle Systems | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0908 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0907 | Multiples vulnérabilités dans Oracle MySQL | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0906 | Multiples vulnérabilités dans Oracle Java SE | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0905 | Multiples vulnérabilités dans Oracle Database Server | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0904 | Multiples vulnérabilités dans GitLab | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0903 | Multiples vulnérabilités dans les produits Atlassian | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0902 | Multiples vulnérabilités dans Xen | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |