Recent vulnerabilities
Recent vulnerabilities from
Select from 70 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-43209 |
N/A
|
minix: Add required sanity checking to minix_check_sup… |
Linux |
Linux |
2026-05-06T11:28:12.965Z | 2026-05-07T17:14:43.716Z |
| CVE-2026-43204 |
N/A
|
ASoC: qcom: q6asm: drop DSP responses for closed data … |
Linux |
Linux |
2026-05-06T11:28:09.617Z | 2026-05-07T17:14:41.440Z |
| CVE-2026-43201 |
N/A
|
APEI/GHES: ARM processor Error: don't go past allocate… |
Linux |
Linux |
2026-05-06T11:28:07.565Z | 2026-05-07T17:14:40.303Z |
| CVE-2026-43195 |
N/A
|
drm/amdgpu: validate user queue size constraints |
Linux |
Linux |
2026-05-06T11:28:03.437Z | 2026-05-07T17:14:39.181Z |
| CVE-2026-43191 |
N/A
|
drm/amd/display: Adjust PHY FSM transition to TX_EN-to… |
Linux |
Linux |
2026-05-06T11:28:00.470Z | 2026-05-07T17:14:38.021Z |
| CVE-2026-43189 |
N/A
|
media: v4l2-async: Fix error handling on steps after f… |
Linux |
Linux |
2026-05-06T11:27:59.108Z | 2026-05-07T17:14:35.685Z |
| CVE-2026-43183 |
N/A
|
media: cx25821: Fix a resource leak in cx25821_dev_setup() |
Linux |
Linux |
2026-05-06T11:27:54.977Z | 2026-05-07T17:14:33.359Z |
| CVE-2026-43171 |
N/A
|
EFI/CPER: don't dump the entire memory region |
Linux |
Linux |
2026-05-06T11:27:46.698Z | 2026-05-07T17:14:29.768Z |
| CVE-2026-43165 |
N/A
|
hwmon: (nct7363) Fix a resource leak in nct7363_presen… |
Linux |
Linux |
2026-05-06T11:27:42.588Z | 2026-05-07T17:14:28.632Z |
| CVE-2026-43141 |
N/A
|
ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut |
Linux |
Linux |
2026-05-06T11:27:26.193Z | 2026-05-07T17:14:27.409Z |
| CVE-2026-43140 |
N/A
|
HID: magicmouse: Do not crash on missing msc->input |
Linux |
Linux |
2026-05-06T11:27:25.536Z | 2026-05-07T17:14:26.238Z |
| CVE-2026-43137 |
N/A
|
ASoC: SOF: Intel: hda: Fix NULL pointer dereference |
Linux |
Linux |
2026-05-06T11:27:23.592Z | 2026-05-07T17:14:24.973Z |
| CVE-2026-43136 |
N/A
|
HID: logitech-hidpp: Check maxfield in hidpp_get_repor… |
Linux |
Linux |
2026-05-06T11:27:22.892Z | 2026-05-07T17:14:23.814Z |
| CVE-2026-43131 |
N/A
|
drm/amd/pm: Fix null pointer dereference issue |
Linux |
Linux |
2026-05-06T11:27:19.528Z | 2026-05-07T17:14:22.628Z |
| CVE-2026-43129 |
N/A
|
ima: verify the previous kernel's IMA buffer lies in a… |
Linux |
Linux |
2026-05-06T11:27:18.180Z | 2026-05-07T17:14:21.463Z |
| CVE-2026-43127 |
N/A
|
ntfs3: fix circular locking dependency in run_unpack_ex |
Linux |
Linux |
2026-05-06T11:27:16.794Z | 2026-05-07T17:14:20.303Z |
| CVE-2026-43124 |
N/A
|
pstore: ram_core: fix incorrect success return when vm… |
Linux |
Linux |
2026-05-06T11:27:10.221Z | 2026-05-07T17:14:16.842Z |
| CVE-2026-43119 |
N/A
|
Bluetooth: hci_sync: annotate data-races around hdev->… |
Linux |
Linux |
2026-05-06T07:40:43.257Z | 2026-05-07T17:14:14.525Z |
| CVE-2026-43118 |
N/A
|
btrfs: fix zero size inode with non-zero size after lo… |
Linux |
Linux |
2026-05-06T07:40:42.598Z | 2026-05-07T17:14:13.251Z |
| CVE-2026-43115 |
N/A
|
srcu: Use irq_work to start GP in tiny SRCU |
Linux |
Linux |
2026-05-06T07:40:40.541Z | 2026-05-07T17:14:09.834Z |
| CVE-2026-43109 |
N/A
|
x86: shadow stacks: proper error handling for mmap lock |
Linux |
Linux |
2026-05-06T07:40:36.532Z | 2026-05-07T17:14:02.516Z |
| CVE-2026-43073 |
N/A
|
x86-64: rename misleadingly named '__copy_user_nocache… |
Linux |
Linux |
2026-05-05T15:29:29.510Z | 2026-05-07T17:13:58.301Z |
| CVE-2026-43072 |
N/A
|
drm/vc4: platform_get_irq_byname() returns an int |
Linux |
Linux |
2026-05-05T15:29:28.795Z | 2026-05-07T17:13:57.139Z |
| CVE-2025-71295 |
N/A
|
fs/buffer: add alert in try_to_free_buffers() for foli… |
Linux |
Linux |
2026-05-06T11:32:25.917Z | 2026-05-07T17:13:54.818Z |
| CVE-2025-71294 |
N/A
|
drm/amdgpu: fix NULL pointer issue buffer funcs |
Linux |
Linux |
2026-05-06T11:32:25.247Z | 2026-05-07T17:13:53.624Z |
| CVE-2025-71293 |
N/A
|
drm/amdgpu/ras: Move ras data alloc before bad page check |
Linux |
Linux |
2026-05-06T11:32:24.583Z | 2026-05-07T17:13:52.481Z |
| CVE-2025-71292 |
N/A
|
jfs: nlink overflow in jfs_rename |
Linux |
Linux |
2026-05-06T11:32:23.897Z | 2026-05-07T17:13:51.314Z |
| CVE-2025-71291 |
N/A
|
misc: bcm_vk: Fix possible null-pointer dereferences i… |
Linux |
Linux |
2026-05-06T11:32:23.223Z | 2026-05-07T17:13:50.143Z |
| CVE-2025-71290 |
N/A
|
misc: ti_fpc202: fix a potential memory leak in probe … |
Linux |
Linux |
2026-05-06T11:32:22.378Z | 2026-05-07T17:13:48.995Z |
| CVE-2025-71289 |
N/A
|
fs/ntfs3: handle attr_set_size() errors when truncatin… |
Linux |
Linux |
2026-05-06T11:32:21.715Z | 2026-05-07T17:13:47.768Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-12690 |
7.3 (4.0)
|
Local Privilege Escalation in NGFW Engine |
Forcepoint |
NGFW Engine |
2026-03-11T15:36:32.755Z | 2026-03-11T16:10:28.588Z |
| CVE-2025-69614 |
9.4 (3.1)
|
Incorrect Access Control via activation token reu… |
n/a |
n/a |
2026-03-10T00:00:00.000Z | 2026-03-10T18:40:51.662Z |
| CVE-2025-69615 |
9.1 (3.1)
|
Incorrect Access Control via missing 2FA rate-lim… |
n/a |
n/a |
2026-03-10T00:00:00.000Z | 2026-03-10T18:05:00.967Z |
| CVE-2026-30973 |
6.5 (3.1)
|
Zip Slip arbitrary file write in @appium/support ZIP e… |
@appium |
support |
2026-03-10T17:33:41.009Z | 2026-03-12T14:25:09.401Z |
| CVE-2026-3315 |
5.8 (4.0)
|
Local Privilege Escalation Due to Writable Executable … |
ASSA ABLOY |
Visionline |
2026-03-10T09:35:42.236Z | 2026-03-11T05:13:30.886Z |
| CVE-2026-42241 |
5.3 (3.1)
|
ParquetSharp: Possible Stack Overflow When Reading a P… |
G-Research |
ParquetSharp |
2026-05-07T18:52:06.773Z | 2026-05-08T21:30:27.110Z |
| CVE-2026-42225 |
8.2 (4.0)
|
GnuTLS backend silently skips certificate chain verifi… |
pjsip |
pjproject |
2026-05-07T18:47:26.563Z | 2026-05-08T14:18:36.257Z |
| CVE-2026-42239 |
8.1 (3.1)
|
Budibase auth session cookies are set with httpOnly:fa… |
Budibase |
budibase |
2026-05-07T18:49:59.180Z | 2026-05-07T19:39:45.605Z |
| CVE-2026-3843 |
9.8 (3.1)
9.3 (4.0)
|
SQL Injection in Nefteprodukttekhnika BUK TS-G Allows … |
Nefteprodukttekhnika LLC |
BUK TS-G Gas Station Automation System |
2026-03-10T11:07:07.393Z | 2026-03-10T14:10:41.086Z |
| CVE-2026-26801 |
7.5 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability … |
n/a |
n/a |
2026-03-10T00:00:00.000Z | 2026-03-17T16:36:36.743Z |
| CVE-2026-43510 |
7 (4.0)
7.6 (3.1)
|
CISA manage.get.gov insecure portfolio administrative … |
CISA |
manage.get.gov |
2026-05-07T18:50:56.944Z | 2026-05-08T16:34:45.740Z |
| CVE-2026-43016 |
7.8 (3.1)
|
bpf: sockmap: Fix use-after-free of sk->sk_socket in s… |
Linux |
Linux |
2026-05-01T14:15:20.887Z | 2026-05-03T05:46:04.549Z |
| CVE-2026-43015 |
N/A
|
net: macb: fix clk handling on PCI glue driver removal |
Linux |
Linux |
2026-05-01T14:15:20.242Z | 2026-05-01T14:15:20.242Z |
| CVE-2026-43014 |
N/A
|
net: macb: properly unregister fixed rate clocks |
Linux |
Linux |
2026-05-01T14:15:19.571Z | 2026-05-01T14:15:19.571Z |
| CVE-2026-6823 |
8.3 (4.0)
8.2 (3.1)
|
HKUDS OpenHarness Insecure Default Remote Channel Allowlist |
HKUDS |
OpenHarness |
2026-04-21T20:36:45.867Z | 2026-04-22T13:50:01.661Z |
| CVE-2026-43013 |
N/A
|
net/mlx5: lag: Check for LAG device before creating debugfs |
Linux |
Linux |
2026-05-01T14:15:18.907Z | 2026-05-01T14:15:18.907Z |
| CVE-2026-43012 |
N/A
|
net/mlx5: Fix switchdev mode rollback in case of failure |
Linux |
Linux |
2026-05-01T14:15:18.256Z | 2026-05-01T14:15:18.256Z |
| CVE-2026-6819 |
8.7 (4.0)
8.8 (3.1)
|
HKUDS OpenHarness Plugin Management Command Exposure |
HKUDS |
OpenHarness |
2026-04-21T19:41:16.229Z | 2026-04-22T14:23:44.338Z |
| CVE-2026-43011 |
9.8 (3.1)
|
net/x25: Fix potential double free of skb |
Linux |
Linux |
2026-05-01T14:15:17.597Z | 2026-05-03T05:46:03.430Z |
| CVE-2026-43010 |
N/A
|
bpf: Reject sleepable kprobe_multi programs at attach time |
Linux |
Linux |
2026-05-01T14:15:16.947Z | 2026-05-01T14:15:16.947Z |
| CVE-2026-43009 |
7.8 (3.1)
|
bpf: Fix incorrect pruning due to atomic fetch precisi… |
Linux |
Linux |
2026-05-01T14:15:16.271Z | 2026-05-03T05:46:02.230Z |
| CVE-2026-43008 |
N/A
|
gpio: qixis-fpga: Fix error handling for devm_regmap_i… |
Linux |
Linux |
2026-05-01T14:15:15.580Z | 2026-05-01T14:15:15.580Z |
| CVE-2026-43007 |
N/A
|
accel/qaic: Handle DBC deactivation if the owner went away |
Linux |
Linux |
2026-05-01T14:15:14.914Z | 2026-05-01T14:15:14.914Z |
| CVE-2026-41641 |
7.2 (3.1)
|
NocoBase Vulnerable to SQL Validation Bypass via `sqlC… |
nocobase |
nocobase |
2026-05-07T04:13:33.609Z | 2026-05-07T14:14:23.539Z |
| CVE-2026-28201 |
8.7 (4.0)
|
SurrealDB Injection on Open Notebook |
Open Notebook |
Open Notebook |
2026-05-07T10:12:05.895Z | 2026-05-07T11:37:04.993Z |
| CVE-2026-42214 |
7.8 (3.1)
|
Improper Control of Generation of Code ('Code Injectio… |
dail8859 |
NotepadNext |
2026-05-07T18:14:20.246Z | 2026-05-09T03:55:59.742Z |
| CVE-2026-41904 |
7.6 (3.1)
|
FreeScout Stored XSS vulnerability in mailbox auto-rep… |
freescout-help-desk |
freescout |
2026-05-07T18:05:43.541Z | 2026-05-07T19:16:53.481Z |
| CVE-2026-33587 |
9.2 (4.0)
|
Remote Code Execution (RCE) via Server-Side Template I… |
Open Notebook |
Open Notebook |
2026-05-07T10:22:16.378Z | 2026-05-07T11:35:45.879Z |
| CVE-2026-5786 |
8.8 (3.1)
|
An Improper Access Control vulnerability in Ivant… |
Ivanti |
Endpoint Manager Mobile |
2026-05-07T15:18:54.437Z | 2026-05-08T03:55:39.897Z |
| CVE-2026-5787 |
8.9 (3.1)
|
An Improper Certificate Validation in Ivanti EPMM… |
Ivanti |
Endpoint Manager Mobile |
2026-05-07T15:36:41.179Z | 2026-05-08T03:55:49.014Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-69614 | Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unautho… | 2026-03-10T18:18:01.610 | 2026-05-07T20:50:21.410 |
| fkie_cve-2025-69615 | Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and f… | 2026-03-10T18:18:01.740 | 2026-05-07T20:48:35.097 |
| fkie_cve-2026-30973 | Appium is an automation framework that provides WebDriver-based automation possibilities for a wide… | 2026-03-10T18:18:56.063 | 2026-05-07T20:46:26.913 |
| fkie_cve-2026-3315 | Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assi… | 2026-03-10T18:19:01.367 | 2026-05-07T20:41:03.490 |
| fkie_cve-2026-42241 | ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to… | 2026-05-07T20:16:44.247 | 2026-05-07T20:37:54.060 |
| fkie_cve-2026-42225 | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.1… | 2026-05-07T20:16:43.960 | 2026-05-07T20:36:31.717 |
| fkie_cve-2026-42239 | Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie co… | 2026-05-07T20:16:44.097 | 2026-05-07T20:35:58.117 |
| fkie_cve-2026-3843 | Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection… | 2026-03-10T18:19:05.287 | 2026-05-07T20:34:27.667 |
| fkie_cve-2026-26801 | Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 all… | 2026-03-10T19:17:17.430 | 2026-05-07T20:32:39.693 |
| fkie_cve-2026-43510 | manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization … | 2026-05-07T20:16:44.753 | 2026-05-07T20:32:03.640 |
| fkie_cve-2026-43016 | In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-fr… | 2026-05-01T15:16:45.677 | 2026-05-07T20:31:20.753 |
| fkie_cve-2026-43015 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on… | 2026-05-01T15:16:45.500 | 2026-05-07T20:31:01.960 |
| fkie_cve-2026-43014 | In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister… | 2026-05-01T15:16:45.367 | 2026-05-07T20:29:24.053 |
| fkie_cve-2026-6823 | HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerabi… | 2026-04-21T21:16:48.827 | 2026-05-07T20:29:09.890 |
| fkie_cve-2026-43013 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG d… | 2026-05-01T15:16:45.243 | 2026-05-07T20:28:55.537 |
| fkie_cve-2026-43012 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode r… | 2026-05-01T15:16:45.117 | 2026-05-07T20:28:15.953 |
| fkie_cve-2026-6819 | HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin … | 2026-04-21T20:17:05.780 | 2026-05-07T20:28:15.453 |
| fkie_cve-2026-43011 | In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double … | 2026-05-01T15:16:44.993 | 2026-05-07T20:26:58.903 |
| fkie_cve-2026-43010 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_m… | 2026-05-01T15:16:44.887 | 2026-05-07T20:26:12.200 |
| fkie_cve-2026-43009 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due… | 2026-05-01T15:16:44.770 | 2026-05-07T20:25:52.587 |
| fkie_cve-2026-43008 | In the Linux kernel, the following vulnerability has been resolved: gpio: qixis-fpga: Fix error ha… | 2026-05-01T15:16:44.670 | 2026-05-07T20:24:50.790 |
| fkie_cve-2026-43007 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactiv… | 2026-05-01T15:16:44.553 | 2026-05-07T20:24:32.047 |
| fkie_cve-2026-41641 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterpri… | 2026-05-07T06:16:05.073 | 2026-05-07T20:23:22.440 |
| fkie_cve-2026-28201 | An improper input validation, together with an overly permissive default CORS configuration in Open… | 2026-05-07T11:16:00.747 | 2026-05-07T20:20:10.207 |
| fkie_cve-2026-42214 | Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext… | 2026-05-07T19:16:01.497 | 2026-05-07T20:16:43.850 |
| fkie_cve-2026-41904 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version… | 2026-05-07T19:16:01.087 | 2026-05-07T20:16:43.753 |
| fkie_cve-2026-33587 | Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Pyth… | 2026-05-07T11:16:00.887 | 2026-05-07T20:13:33.540 |
| fkie_cve-2026-5786 | An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.… | 2026-05-07T16:16:22.483 | 2026-05-07T20:12:47.773 |
| fkie_cve-2026-5787 | An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 … | 2026-05-07T16:16:22.620 | 2026-05-07T20:12:18.333 |
| fkie_cve-2026-5788 | An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a… | 2026-05-07T16:16:22.733 | 2026-05-07T20:11:27.477 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-g4xx-6vv3-3x48 |
9.9 (3.1)
|
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacke… | 2026-05-08T00:31:33Z | 2026-05-08T00:31:33Z |
| ghsa-cm99-m826-vgg7 |
7.8 (3.1)
|
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow … | 2026-03-24T15:30:29Z | 2026-05-08T00:31:32Z |
| ghsa-xv59-967r-8726 |
5.1 (4.0)
|
rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding | 2026-05-07T22:33:51Z | 2026-05-07T22:33:51Z |
| ghsa-39j6-4867-gg4w |
4.7 (3.1)
|
utcp-http vulnerable to SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication p… | 2026-05-07T22:32:54Z | 2026-05-07T22:32:54Z |
| ghsa-v7qw-hx66-4w9x |
8.7 (3.1)
|
netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables | 2026-05-07T22:31:32Z | 2026-05-07T22:31:32Z |
| ghsa-jggh-5rmh-r6h5 |
3.7 (3.1)
2.9 (4.0)
|
Dolibarr has Insufficient Verification of Data Authenticity | 2026-05-03T12:30:26Z | 2026-05-07T22:30:07Z |
| ghsa-j7h9-2jh7-g967 |
8.7 (4.0)
|
mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening | 2026-05-07T21:45:16Z | 2026-05-07T21:45:17Z |
| ghsa-xhrw-5qxx-jpwr |
7.1 (3.1)
|
Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files du… | 2026-05-07T21:41:08Z | 2026-05-07T21:41:08Z |
| ghsa-fpw6-hrg5-q5x5 |
7.4 (3.1)
|
ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI | 2026-05-07T21:34:01Z | 2026-05-07T21:34:01Z |
| ghsa-p64j-f4x9-wq66 |
8.0 (3.1)
|
Ech0's OAuth redirect URI validation ignores path component, enables exchange-code theft | 2026-05-07T21:30:45Z | 2026-05-07T21:30:45Z |
| ghsa-j3f5-rw74-g4rv |
3.3 (3.1)
1.9 (4.0)
|
A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the functio… | 2026-05-07T21:30:30Z | 2026-05-07T21:30:30Z |
| ghsa-h9rh-5ffh-h669 |
5.3 (3.1)
1.9 (4.0)
|
A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnen… | 2026-05-07T21:30:30Z | 2026-05-07T21:30:30Z |
| ghsa-g323-63gp-7v74 |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unk… | 2026-05-07T21:30:30Z | 2026-05-07T21:30:30Z |
| ghsa-34v6-h57v-gx5f |
6.3 (3.1)
2.1 (4.0)
|
A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects u… | 2026-05-07T21:30:30Z | 2026-05-07T21:30:30Z |
| ghsa-r7c9-7pjq-hmm8 |
7.2 (3.1)
|
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held … | 2026-05-07T21:30:29Z | 2026-05-07T21:30:29Z |
| ghsa-mv88-fcpc-wrmw |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects a… | 2026-05-07T21:30:29Z | 2026-05-07T21:30:29Z |
| ghsa-jmvp-7877-wr2f |
3.3 (3.1)
1.9 (4.0)
|
A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the func… | 2026-05-07T21:30:29Z | 2026-05-07T21:30:29Z |
| ghsa-72pg-5w29-wjx6 |
5.3 (3.1)
1.9 (4.0)
|
A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWn… | 2026-05-07T21:30:29Z | 2026-05-07T21:30:29Z |
| ghsa-pr5j-p9p7-3c46 |
7.4 (3.1)
|
Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 all… | 2026-05-07T18:30:40Z | 2026-05-07T21:30:28Z |
| ghsa-xfv3-v32f-xwfc |
6.5 (3.1)
8.2 (4.0)
|
Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the a… | 2026-05-07T12:31:23Z | 2026-05-07T21:30:27Z |
| ghsa-wwfp-6c8c-qg35 |
7.0 (3.1)
|
An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a… | 2026-05-07T18:30:40Z | 2026-05-07T21:30:27Z |
| ghsa-c7wf-4r4p-4766 |
8.1 (3.1)
7.0 (4.0)
|
Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the a… | 2026-05-07T12:31:23Z | 2026-05-07T21:30:27Z |
| ghsa-jqjr-j3vj-vwq3 |
10.0 (3.1)
9.2 (4.0)
|
Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Pyth… | 2026-05-07T12:31:23Z | 2026-05-07T21:30:26Z |
| ghsa-44mq-cghw-wf5x |
7.8 (3.1)
8.7 (4.0)
|
An improper input validation, together with an overly permissive default CORS configuration in Open… | 2026-05-07T12:31:23Z | 2026-05-07T21:30:26Z |
| ghsa-x83c-972p-8775 |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on… | 2026-05-01T15:30:36Z | 2026-05-07T21:30:24Z |
| ghsa-x4q9-gx2x-rgxq |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode r… | 2026-05-01T15:30:36Z | 2026-05-07T21:30:24Z |
| ghsa-w9xj-xj3x-qgjh |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG d… | 2026-05-01T15:30:36Z | 2026-05-07T21:30:24Z |
| ghsa-vmmg-rqjm-j9p9 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_m… | 2026-05-01T15:30:36Z | 2026-05-07T21:30:24Z |
| ghsa-q8x7-49p9-r9fc |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: gpio: qixis-fpga: Fix error ha… | 2026-05-01T15:30:36Z | 2026-05-07T21:30:24Z |
| ghsa-mf68-rrv8-6wmc |
7.5 (3.1)
|
Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pca… | 2026-05-01T18:31:25Z | 2026-05-07T21:30:24Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-43054 |
7.5 (3.1)
|
An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 a… | freetakserver | 2022-03-11T00:15:00+00:00 | 2023-08-17T03:22:31.240214+00:00 |
| pysec-2023-136 |
|
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… | apache-airflow | 2023-08-11T08:15:00+00:00 | 2023-08-17T03:22:30.530556+00:00 |
| pysec-2023-135 |
|
Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These ar… | certifi | 2023-08-03T19:36:12+00:00 | 2023-08-07T05:41:30.977938+00:00 |
| pysec-2023-134 |
|
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthor… | apache-airflow | 2023-08-05T07:15:00+00:00 | 2023-08-05T10:26:00.927631+00:00 |
| pysec-2023-133 |
5.3 (3.1)
|
Vyper is a Pythonic programming language that targets the Ethereum Virtual Machine (EVM).… | vyper | 2023-07-25T21:15:00+00:00 | 2023-08-03T18:27:50.332832+00:00 |
| pysec-2023-132 |
6.1 (3.1)
|
copyparty is file server software. Prior to version 1.8.7, the application contains a ref… | copyparty | 2023-07-25T22:15:00+00:00 | 2023-08-02T20:24:02.446410+00:00 |
| pysec-2023-131 |
7.5 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2023-04-24T22:15:00+00:00 | 2023-08-02T18:28:00.492615+00:00 |
| pysec-2022-43053 |
7.5 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2022-06-09T09:15:00+00:00 | 2023-08-02T18:28:00.437362+00:00 |
| pysec-2023-130 |
6.5 (3.1)
|
Sentry is an error tracking and performance monitoring platform. Starting in version 8.21… | sentry | 2023-07-25T19:15:00+00:00 | 2023-08-02T16:31:39.850029+00:00 |
| pysec-2023-129 |
5.4 (3.1)
|
Indico is an open source a general-purpose, web based event management tool. There is a C… | indico | 2023-07-21T19:15:00+00:00 | 2023-07-31T20:36:08.003610+00:00 |
| pysec-2023-128 |
2.8 (3.1)
|
A flaw was found in the keylime attestation verifier, which fails to flag a device's subm… | keylime | 2023-07-19T19:15:00+00:00 | 2023-07-28T16:31:09.279625+00:00 |
| pysec-2023-127 |
|
Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traver… | copyparty | 2023-07-14T20:15:00+00:00 | 2023-07-27T20:23:01.674307+00:00 |
| pysec-2023-126 |
|
PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability … | paddlepaddle | 2023-07-26T12:15:00+00:00 | 2023-07-26T14:25:58.775032+00:00 |
| pysec-2023-125 |
|
FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and… | paddlepaddle | 2023-07-26T12:15:00+00:00 | 2023-07-26T14:25:58.693754+00:00 |
| pysec-2023-124 |
|
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to … | paddlepaddle | 2023-07-26T11:15:00+00:00 | 2023-07-26T12:51:10.139446+00:00 |
| pysec-2023-123 |
|
Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a … | paddlepaddle | 2023-07-26T11:15:00+00:00 | 2023-07-26T12:51:10.092120+00:00 |
| pysec-2023-122 |
|
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potent… | paddlepaddle | 2023-07-26T10:15:00+00:00 | 2023-07-26T12:51:10.047714+00:00 |
| pysec-2021-13 |
|
The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, … | flask-caching | 2021-05-13T23:15:00Z | 2023-07-25T00:34:15.721702Z |
| pysec-2023-120 |
|
### Impact aiohttp v3.8.4 and earlier are [bundled with llhttp v6.0.6](https://github.co… | aiohttp | 2023-07-20T14:52:00+00:00 | 2023-07-24T14:58:05.562874+00:00 |
| pysec-2023-119 |
|
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unautho… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-20T19:19:47.109731+00:00 |
| pysec-2023-118 |
|
RestrictedPython is a tool that helps to define a subset of the Python language which all… | restrictedpython | 2023-07-11T18:15:00+00:00 | 2023-07-19T20:24:12.944004+00:00 |
| pysec-2023-117 |
|
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via … | pygments | 2023-07-19T15:15:00+00:00 | 2023-07-19T17:26:16.938508+00:00 |
| pysec-2023-116 |
|
xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE). | xalpha | 2023-07-11T15:15:00+00:00 | 2023-07-18T16:37:19.127985+00:00 |
| pysec-2023-115 |
|
Sentry is an error tracking and performance monitoring platform. Starting in version 23.6… | sentry | 2023-07-06T23:15:00+00:00 | 2023-07-17T20:27:52.414117+00:00 |
| pysec-2023-114 |
|
** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciP… | scipy | 2023-07-06T21:15:00+00:00 | 2023-07-17T20:27:52.117232+00:00 |
| pysec-2023-113 |
|
Products.CMFCore are the key framework services for the Zope Content Management Framework… | products-cmfcore | 2023-07-03T17:15:00+00:00 | 2023-07-17T20:27:51.578279+00:00 |
| pysec-2023-111 |
|
SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users h… | sqlfluff | 2023-07-06T16:15:00+00:00 | 2023-07-13T21:23:24.026294+00:00 |
| pysec-2023-108 |
|
MechanicalSoup is a Python library for automating interaction with websites. Starting in … | mechanicalsoup | 2023-07-05T20:15:00+00:00 | 2023-07-12T18:32:48.148340+00:00 |
| pysec-2023-107 |
|
Fides is an open-source privacy engineering platform for managing the fulfillment of data… | ethyca-fides | 2023-07-05T22:15:00+00:00 | 2023-07-12T16:35:41.463418+00:00 |
| pysec-2023-106 |
|
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user ca… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-12T12:59:56.816194+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33253 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.606354Z |
| gsd-2024-33252 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.638622Z |
| gsd-2024-33251 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.755000Z |
| gsd-2024-33250 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741217Z |
| gsd-2024-33249 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.744741Z |
| gsd-2024-33248 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.747603Z |
| gsd-2024-33247 | Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via ad… | 2024-04-24T05:02:09.612320Z |
| gsd-2024-33246 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.707963Z |
| gsd-2024-33245 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.654902Z |
| gsd-2024-33244 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.708588Z |
| gsd-2024-33243 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.709233Z |
| gsd-2024-33242 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.632369Z |
| gsd-2024-33241 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612131Z |
| gsd-2024-33240 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.644562Z |
| gsd-2024-33239 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.683200Z |
| gsd-2024-33238 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.747012Z |
| gsd-2024-33237 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.743713Z |
| gsd-2024-33236 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.705030Z |
| gsd-2024-33235 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612913Z |
| gsd-2024-33234 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.721580Z |
| gsd-2024-33233 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.664185Z |
| gsd-2024-33232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.710450Z |
| gsd-2024-33231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.702080Z |
| gsd-2024-33230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.761978Z |
| gsd-2024-33229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.752692Z |
| gsd-2024-33228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.693921Z |
| gsd-2024-33227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.761572Z |
| gsd-2024-33226 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700419Z |
| gsd-2024-33225 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.733514Z |
| gsd-2024-33224 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.603732Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2718 | Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm) | 2026-04-16T09:39:26Z | 2026-04-23T20:50:49Z |
| mal-2026-2717 | Malicious code in @tax-taxdev/tools-scripts (npm) | 2026-04-16T09:39:16Z | 2026-04-23T20:50:49Z |
| mal-2026-2716 | Malicious code in @needl-ai/common (npm) | 2026-04-05T09:03:43Z | 2026-04-23T20:50:49Z |
| mal-2026-2715 | Malicious code in @mesh-atoms/typography (npm) | 2026-04-16T09:35:32Z | 2026-04-23T20:50:49Z |
| mal-2026-2714 | Malicious code in @gameforge/http-server (npm) | 2026-04-16T09:34:11Z | 2026-04-23T20:50:49Z |
| mal-2026-2713 | Malicious code in @fuego-tools/analytics (npm) | 2026-04-16T09:34:04Z | 2026-04-23T20:50:49Z |
| mal-2026-2712 | Malicious code in @evoja-web/redaction (npm) | 2026-04-16T09:33:49Z | 2026-04-23T20:50:49Z |
| mal-2026-2711 | Malicious code in @evoja-web/react-login (npm) | 2026-04-16T09:33:48Z | 2026-04-23T20:50:49Z |
| mal-2026-2710 | Malicious code in @evoja-web/create-react-project (npm) | 2026-04-16T09:33:46Z | 2026-04-23T20:50:49Z |
| mal-2026-2709 | Malicious code in @appleseed-apple/ac-sass-kit (npm) | 2026-04-16T09:29:32Z | 2026-04-23T20:50:49Z |
| mal-2026-2708 | Malicious code in @3stripes/toolkit (npm) | 2026-04-16T09:28:30Z | 2026-04-23T20:50:49Z |
| mal-2026-2707 | Malicious code in @3stripes/shared (npm) | 2026-04-16T09:28:29Z | 2026-04-23T20:50:49Z |
| mal-2026-2706 | Malicious code in @3stripes/sdk (npm) | 2026-04-16T09:28:28Z | 2026-04-23T20:50:49Z |
| mal-2026-2705 | Malicious code in @3stripes/core (npm) | 2026-04-16T09:28:27Z | 2026-04-23T20:50:49Z |
| mal-2026-2704 | Malicious code in @3stripes/config (npm) | 2026-04-16T09:28:27Z | 2026-04-23T20:50:49Z |
| mal-2026-2703 | Malicious code in @3stripes/components (npm) | 2026-04-16T09:28:26Z | 2026-04-23T20:50:49Z |
| mal-2026-2696 | Malicious code in bfx-hf-strategy-perf (npm) | 2026-04-15T18:25:54Z | 2026-04-23T20:50:49Z |
| mal-2026-2691 | Malicious code in base-counter-web (npm) | 2026-04-15T14:57:24Z | 2026-04-23T20:50:49Z |
| mal-2026-2690 | Malicious code in @pnc-ref/harmony-support-v18 (npm) | 2026-04-15T14:19:35Z | 2026-04-23T20:50:49Z |
| mal-2026-2689 | Malicious code in @pnc-ref/harmony-core-v18 (npm) | 2026-04-15T14:19:35Z | 2026-04-23T20:50:49Z |
| mal-2026-2688 | Malicious code in @pnc-cib/cib-core-lib (npm) | 2026-04-15T14:19:35Z | 2026-04-23T20:50:49Z |
| mal-2026-2683 | Malicious code in @athena-ui-components/axios (npm) | 2026-04-15T09:40:47Z | 2026-04-23T20:50:49Z |
| mal-2026-2682 | Malicious code in @athena-ui-components/deeplink (npm) | 2026-04-15T09:00:45Z | 2026-04-23T20:50:49Z |
| mal-2026-2681 | Malicious code in @athena-ui-components/dashboard-widget (npm) | 2026-04-15T09:00:54Z | 2026-04-23T20:50:49Z |
| mal-2026-2680 | Malicious code in @veygo/component-library (npm) | 2026-04-15T03:25:57Z | 2026-04-23T20:50:49Z |
| mal-2026-2672 | Malicious code in ahmed_salem_ph (npm) | 2026-04-15T03:02:45Z | 2026-04-23T20:50:49Z |
| mal-2026-2640 | Malicious code in bytefrontier-core (npm) | 2026-04-14T11:47:12Z | 2026-04-23T20:50:49Z |
| mal-2026-2639 | Malicious code in bytefrontier (npm) | 2026-04-14T11:47:12Z | 2026-04-23T20:50:49Z |
| mal-2026-2638 | Malicious code in billing-paywidget (npm) | 2026-04-14T11:47:12Z | 2026-04-23T20:50:49Z |
| mal-2026-2637 | Malicious code in apmfe (npm) | 2026-04-14T11:47:13Z | 2026-04-23T20:50:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2500 | Cisco Contact Center Produkte (CCE,CCX,CUIC): Mehrere Schwachstellen | 2025-11-05T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2612 | M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2609 | IBM SAN Volume Controller, Storwize und FlashSystem: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2474 | Android Patchday November 2025: Multiple Vulnerabilities | 2025-11-03T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2370 | Oracle Systems: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2361 | Oracle Communications: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2360 | Oracle Communications Applications: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1850 | Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-08-14T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1636 | Apache HTTP Server: Schwachstelle ermöglicht umgehen von Sicherheitsvorkehrungen | 2025-07-23T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1623 | Mozilla Firefox , Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2025-07-22T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1583 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2025-07-16T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1567 | Oracle MySQL: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1428 | sudo: Mehrere Schwachstellen | 2025-06-30T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1395 | Mozilla Firefox: Mehrere Schwachstellen | 2025-06-24T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1352 | X.Org X11 und Xwayland: Mehrere Schwachstellen | 2025-06-17T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1245 | Django: Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-04T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1221 | Samba: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-02T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1134 | Ghostscript: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-22T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0987 | Eclipse Jetty: Mehrere Schwachstellen | 2025-05-08T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0718 | Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht DoS und Codeausführung | 2025-04-06T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0572 | X.Org X11: Schwachstelle ermöglicht Denial of Service | 2025-03-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0503 | Apache Cassandra: Schwachstelle ermöglicht Codeausführung | 2025-03-06T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0302 | GnuTLS: Schwachstelle ermöglicht Denial of Service | 2025-02-09T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0284 | Apache Camel for Spring Boot: Mehrere Schwachstellen | 2025-02-05T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3544 | Red Hat JBoss Data Grid: Mehrere Schwachstellen | 2024-11-25T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3497 | Linux Kernel: Mehrere Schwachstellen | 2024-11-18T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1783 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2024-08-06T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0995 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2024-04-29T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2603 | Fortinet FortiWeb: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-11-13T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0708 | pgAdmin: Mehrere Schwachstellen | 2025-04-03T22:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-14-224-01 | Ecava Integraxor SCADA Server Vulnerabilities | 2014-05-15T06:00:00.000000Z | 2025-06-06T22:47:21.277370Z |
| icsa-14-203-01 | Omron NS Series HMI Vulnerabilities | 2014-04-24T06:00:00.000000Z | 2025-06-06T22:46:35.467432Z |
| icsa-14-198-02 | Advantech WebAccess Vulnerabilities | 2014-04-19T06:00:00.000000Z | 2025-06-06T22:46:03.132898Z |
| icsa-14-198-01 | Cogent DataHub Code Injection Vulnerability | 2014-04-19T06:00:00.000000Z | 2025-06-06T22:45:56.681631Z |
| icsa-14-196-01 | SubSTATION Server Telegyr 8979 Master Vulnerabilities | 2014-04-17T06:00:00.000000Z | 2025-06-06T22:45:50.215260Z |
| icsa-14-189-02 | Innominate mGuard Unauthorized Leakage of System Data | 2014-04-10T06:00:00.000000Z | 2025-06-06T22:45:43.410774Z |
| icsa-13-077-01b | Schneider Electric PLCs Vulnerabilities | 2013-12-20T07:00:00.000000Z | 2025-06-06T22:40:07.027146Z |
| icsa-13-016-01 | Schneider Electric Authenticated Communication Risk Vulnerability | 2013-10-20T06:00:00.000000Z | 2025-06-06T22:39:47.591594Z |
| icsa-13-014-01 | Siemens SIMATIC RF Manager ActiveX Buffer Overflow | 2013-10-18T06:00:00.000000Z | 2025-06-06T22:39:41.115500Z |
| icsa-13-011-03 | Rockwell Automation ControlLogix PLC Vulnerabilities | 2013-10-15T06:00:00.000000Z | 2025-06-06T22:38:48.956870Z |
| icsa-12-205-02 | Siemens SIMATIC STEP 7 DLL Vulnerability | 2012-04-26T06:00:00.000000Z | 2025-06-06T22:38:22.736168Z |
| icsa-12-185-01 | WellinTech KingView Multiple Vulnerabilities | 2012-04-06T06:00:00.000000Z | 2025-06-06T22:37:50.390140Z |
| icsa-12-177-02 | Invensys Wonderware InTouch 10 DLL Hijack | 2012-03-29T06:00:00.000000Z | 2025-06-06T22:37:43.923140Z |
| icsa-12-167-01 | Innominate MGuard Weak HTTPS and SSH Keys | 2012-03-19T06:00:00.000000Z | 2025-06-06T22:37:37.465622Z |
| icsa-12-137-02 | Advantech Studio ISSymbol ActiveX Buffer Overflow | 2012-02-17T07:00:00.000000Z | 2025-06-06T22:37:31.006003Z |
| icsa-12-131-01 | Progea Movicon Memory Corruption Vulnerability | 2012-02-11T07:00:00.000000Z | 2025-06-06T22:37:24.554697Z |
| icsa-15-069-04a | Elipse E3 Process Control Vulnerability (Update A) | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:37:18.082701Z |
| icsa-15-069-04 | Elipse E3 Process Control Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:37:11.175255Z |
| icsa-15-069-03 | SCADA Engine BACnet OPC Server Vulnerabilities | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:51.449296Z |
| icsa-15-069-02 | ABB HART Device DTM Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:45.007018Z |
| icsa-15-069-01 | Cimon CmnView DLL Hijacking Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:38.524138Z |
| icsa-15-064-04 | Siemens SIMATIC S7-300 CPU Denial-of-Service Vulnerability | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:32.046323Z |
| icsa-15-064-02a | Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A) | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:19.130527Z |
| icsa-15-064-02 | Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:12.657259Z |
| icsa-15-064-01a | Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A) | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:06.004237Z |
| icsa-15-064-01 | Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:35:59.487016Z |
| icsa-15-062-01 | MICROSYS PROMOTIC Stack Buffer Overflow | 2015-12-04T07:00:00.000000Z | 2025-06-06T22:35:46.482417Z |
| icsa-15-057-01 | Network Vision IntraVue Code Injection Vulnerability | 2015-11-29T07:00:00.000000Z | 2025-06-06T22:35:40.053299Z |
| icsa-15-055-03 | Schneider Electric Invensys Positioner Buffer Overflow Vulnerability | 2015-11-27T07:00:00.000000Z | 2025-06-06T22:35:33.492544Z |
| icsa-15-055-02 | Kepware Resource Exhaustion Vulnerability | 2015-11-27T07:00:00.000000Z | 2025-06-06T22:35:27.000975Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-fxos-arbitrary-file-BLk6YupL | Cisco FXOS Software Arbitrary File Write Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fp-ucsfi-snmp-dos-qtv69nao | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects SNMP Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fp-ucsfi-snmp-dos-qtv69NAO | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects SNMP Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-apic-uapa-f4tashk | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-apic-uapa-F4TAShk | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-te-va-priv-esc-pudgrx8e | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T22:00:29+00:00 |
| cisco-sa-te-va-priv-esc-PUdgrx8E | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T22:00:29+00:00 |
| cisco-sa-thoueye-privesc-nvhhgwb3 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T21:54:23+00:00 |
| cisco-sa-thoueye-privesc-NVhHGwb3 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T21:54:23+00:00 |
| cisco-sa-umbrella-tunnel-gjw5thge | Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-umbrella-tunnel-gJw5thgE | Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-uccx-wcp-jjeqdt3s | Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-uccx-wcp-JJeqDT3S | Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-storedxss-ttjo62r | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-storedxss-tTjO62r | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-bfjsrjp5 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-BFjSRJP5 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ivpa-cmdinj-c5xrbboy | Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ivpa-cmdinj-C5XRbbOy | Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ise-credentials-tkto3h3 | Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ise-credentials-tkTO3h3 | Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ipphone-csrf-hocmxw2c | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ipphone-csrf-HOCmXW2c | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-intersight-forward-c45ncgqb | Cisco Intersight Virtual Appliance Unauthenticated Port Forwarding Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-intersight-forward-C45ncgqb | Cisco Intersight Virtual Appliance Unauthenticated Port Forwarding Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-expressway-injection-x475ebtq | Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-expressway-injection-X475EbTQ | Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-duo-dha-filewrite-xpmbmzak | Cisco Duo Device Health Application for Windows Arbitrary File Write Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-duo-dha-filewrite-xPMBMZAK | Cisco Duo Device Health Application for Windows Arbitrary File Write Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-injection-g6mbwh2 | Cisco Unified Communications Manager SQL Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-31441 | dmaengine: idxd: Fix memory leak when a wq is reset | 2026-04-02T00:00:00.000Z | 2026-04-29T14:38:46.000Z |
| msrc_cve-2024-58266 | The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection. | 2025-07-02T00:00:00.000Z | 2026-04-29T14:38:45.000Z |
| msrc_cve-2026-23388 | Squashfs: check metadata block offset is within range | 2026-03-02T00:00:00.000Z | 2026-04-29T01:47:41.000Z |
| msrc_cve-2026-2369 | Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources | 2026-03-02T00:00:00.000Z | 2026-04-29T01:44:52.000Z |
| msrc_cve-2026-3784 | wrong proxy connection reuse with credentials | 2026-03-02T00:00:00.000Z | 2026-04-29T01:43:59.000Z |
| msrc_cve-2026-3783 | token leak with redirect and netrc | 2026-03-02T00:00:00.000Z | 2026-04-29T01:43:47.000Z |
| msrc_cve-2026-1965 | bad reuse of HTTP Negotiate connection | 2026-03-02T00:00:00.000Z | 2026-04-29T01:43:35.000Z |
| msrc_cve-2026-22701 | filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock | 2026-01-02T00:00:00.000Z | 2026-04-29T01:43:24.000Z |
| msrc_cve-2025-68146 | filelock has TOCTOU race condition that allows symlink attacks during lock file creation | 2025-12-02T00:00:00.000Z | 2026-04-29T01:43:13.000Z |
| msrc_cve-2026-2443 | Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure | 2026-02-02T00:00:00.000Z | 2026-04-29T01:42:41.000Z |
| msrc_cve-2026-32147 | SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT | 2026-04-02T00:00:00.000Z | 2026-04-29T01:40:02.000Z |
| msrc_cve-2026-41411 | Vim: Command injection via backtick expansion in tag filenames | 2026-04-02T00:00:00.000Z | 2026-04-29T01:39:36.000Z |
| msrc_cve-2026-31788 | xen/privcmd: restrict usage in unprivileged domU | 2026-03-02T00:00:00.000Z | 2026-04-29T01:39:04.000Z |
| msrc_cve-2026-23406 | apparmor: fix side-effect bug in match_char() macro usage | 2026-04-02T00:00:00.000Z | 2026-04-29T01:38:51.000Z |
| msrc_cve-2026-23395 | Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ | 2026-03-02T00:00:00.000Z | 2026-04-29T01:38:30.000Z |
| msrc_cve-2026-23391 | netfilter: xt_CT: drop pending enqueued packets on template removal | 2026-03-02T00:00:00.000Z | 2026-04-29T01:38:21.000Z |
| msrc_cve-2026-40556 | Insecure Directory Permissions in GNU nano Leading to Privilege Abuse | 2026-04-02T00:00:00.000Z | 2026-04-29T01:07:07.000Z |
| msrc_cve-2026-31552 | wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom | 2026-04-02T00:00:00.000Z | 2026-04-29T01:02:32.000Z |
| msrc_cve-2026-31551 | wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. | 2026-04-02T00:00:00.000Z | 2026-04-29T01:02:26.000Z |
| msrc_cve-2026-31550 | pmdomain: bcm: bcm2835-power: Increase ASB control timeout | 2026-04-02T00:00:00.000Z | 2026-04-29T01:02:20.000Z |
| msrc_cve-2026-31549 | i2c: cp2615: fix serial string NULL-deref at probe | 2026-04-02T00:00:00.000Z | 2026-04-29T01:02:15.000Z |
| msrc_cve-2026-31548 | wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down | 2026-04-02T00:00:00.000Z | 2026-04-29T01:02:09.000Z |
| msrc_cve-2026-40372 | ASP.NET Core Elevation of Privilege Vulnerability | 2026-04-14T07:00:00.000Z | 2026-04-28T07:00:00.000Z |
| msrc_cve-2026-33103 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | 2026-04-14T07:00:00.000Z | 2026-04-28T07:00:00.000Z |
| msrc_cve-2026-41907 | uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided | 2026-04-02T00:00:00.000Z | 2026-04-27T14:43:21.000Z |
| msrc_cve-2026-23420 | wifi: wlcore: Fix a locking bug | 2026-04-02T00:00:00.000Z | 2026-04-27T14:42:41.000Z |
| msrc_cve-2026-23411 | apparmor: fix race between freeing data and fs accessing it | 2026-04-02T00:00:00.000Z | 2026-04-27T14:42:34.000Z |
| msrc_cve-2026-23410 | apparmor: fix race on rawdata dereference | 2026-04-02T00:00:00.000Z | 2026-04-27T14:42:29.000Z |
| msrc_cve-2026-23409 | apparmor: fix differential encoding verification | 2026-04-02T00:00:00.000Z | 2026-04-27T14:42:23.000Z |
| msrc_cve-2026-23408 | apparmor: Fix double free of ns_name in aa_replace_profiles() | 2026-04-02T00:00:00.000Z | 2026-04-27T14:42:17.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:20065-1 | Security update for webkit2gtk3 | 2026-01-20T12:08:51Z | 2026-01-20T12:08:51Z |
| opensuse-su-2026:20067-1 | Security update of open-vm-tools | 2026-01-20T11:02:10Z | 2026-01-20T11:02:10Z |
| opensuse-su-2026:20062-1 | Security update for rust1.91, rust1.92 | 2026-01-19T19:43:51Z | 2026-01-19T19:43:51Z |
| opensuse-su-2026:20064-1 | Security update for ffmpeg-4 | 2026-01-19T14:05:53Z | 2026-01-19T14:05:53Z |
| opensuse-su-2026:20060-1 | Security update for cargo-c | 2026-01-19T10:42:10Z | 2026-01-19T10:42:10Z |
| opensuse-su-2026:10072-1 | libblkid-devel-2.41.3-1.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10071-1 | libraylib550-5.5-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10070-1 | python-keystonemiddleware-doc-10.12.0-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10069-1 | heroic-games-launcher-2.18.1-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10068-1 | hauler-1.4.1-1.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10067-1 | grafana-11.6.7-2.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10066-1 | gimp-3.0.6-5.1 on GA media | 2026-01-19T00:00:00Z | 2026-01-19T00:00:00Z |
| opensuse-su-2026:10065-1 | harfbuzz-devel-12.3.0-2.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:10064-1 | go1.25-1.25.6-1.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:10063-1 | go1.24-1.24.12-1.1 on GA media | 2026-01-18T00:00:00Z | 2026-01-18T00:00:00Z |
| opensuse-su-2026:20057-1 | Security update for docker | 2026-01-17T13:20:26Z | 2026-01-17T13:20:26Z |
| opensuse-su-2026:20058-1 | Security update for go-sendxmpp | 2026-01-17T09:30:33Z | 2026-01-17T09:30:33Z |
| opensuse-su-2026:20054-1 | Security update for chromium | 2026-01-17T06:48:43Z | 2026-01-17T06:48:43Z |
| opensuse-su-2026:10062-1 | corepack24-24.13.0-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10061-1 | libsndfile-devel-1.2.2-4.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10060-1 | libpng16-16-1.6.54-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10059-1 | freerdp-3.20.2-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:10058-1 | MozillaThunderbird-140.7.0-1.1 on GA media | 2026-01-17T00:00:00Z | 2026-01-17T00:00:00Z |
| opensuse-su-2026:20055-1 | Security update for gimp | 2026-01-16T16:13:02Z | 2026-01-16T16:13:02Z |
| opensuse-su-2026:20046-1 | Security update for MozillaThunderbird | 2026-01-16T12:09:04Z | 2026-01-16T12:09:04Z |
| opensuse-su-2026:10057-1 | chromedriver-144.0.7559.59-1.1 on GA media | 2026-01-16T00:00:00Z | 2026-01-16T00:00:00Z |
| opensuse-su-2026:20056-1 | Security update for cpp-httplib | 2026-01-15T22:11:25Z | 2026-01-15T22:11:25Z |
| opensuse-su-2026:20044-1 | Security update for alloy | 2026-01-15T17:56:17Z | 2026-01-15T17:56:17Z |
| opensuse-su-2026:20043-1 | Security update for erlang | 2026-01-15T17:21:23Z | 2026-01-15T17:21:23Z |
| opensuse-su-2026:20041-1 | Security update for MozillaFirefox | 2026-01-15T16:28:43Z | 2026-01-15T16:28:43Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0660 | Red Hat Security Advisory: OpenShift Container Platform 4.13.32 bug fix and security update | 2024-02-07T15:07:37+00:00 | 2026-05-10T08:43:24+00:00 |
| rhsa-2024:0642 | Red Hat Security Advisory: OpenShift Container Platform 4.14.11 bug fix and security update | 2024-02-07T17:36:34+00:00 | 2026-05-10T08:43:23+00:00 |
| rhsa-2024:0485 | Red Hat Security Advisory: OpenShift Container Platform 4.12.48 bug fix and security update | 2024-01-31T16:17:59+00:00 | 2026-05-10T08:43:21+00:00 |
| rhsa-2024:0484 | Red Hat Security Advisory: OpenShift Container Platform 4.13.31 bug fix and security update | 2024-02-01T19:01:48+00:00 | 2026-05-10T08:43:16+00:00 |
| rhsa-2024:0306 | Red Hat Security Advisory: OpenShift Container Platform 4.11.57 bug fix and security update | 2024-01-24T20:54:46+00:00 | 2026-05-10T08:43:15+00:00 |
| rhsa-2024:0302 | Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update | 2024-03-06T13:33:21+00:00 | 2026-05-10T08:43:14+00:00 |
| rhsa-2024:0290 | Red Hat Security Advisory: OpenShift Container Platform 4.14.10 bug fix and security update | 2024-01-23T20:26:08+00:00 | 2026-05-10T08:43:12+00:00 |
| rhsa-2024:0273 | Red Hat Security Advisory: OpenShift Virtualization 4.12.9 Images security and bug fix update | 2024-01-17T08:29:36+00:00 | 2026-05-10T08:43:12+00:00 |
| rhsa-2024:0198 | Red Hat Security Advisory: OpenShift Container Platform 4.12.47 security update | 2024-01-17T18:20:55+00:00 | 2026-05-10T08:43:12+00:00 |
| rhsa-2024:0269 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.0 for RHEL 9 | 2024-02-28T00:20:04+00:00 | 2026-05-10T08:43:10+00:00 |
| rhsa-2024:0193 | Red Hat Security Advisory: OpenShift Container Platform 4.13.29 bug fix and security update | 2024-01-17T09:48:09+00:00 | 2026-05-10T08:43:09+00:00 |
| rhsa-2024:0059 | Red Hat Security Advisory: OpenShift Container Platform 4.11.56 bug fix and security update | 2024-01-10T00:23:49+00:00 | 2026-05-10T08:43:07+00:00 |
| rhsa-2024:0050 | Red Hat Security Advisory: OpenShift Container Platform 4.14.8 bug fix and security update | 2024-01-09T16:55:38+00:00 | 2026-05-10T08:43:06+00:00 |
| rhsa-2024:0045 | Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security update | 2024-06-27T13:06:17+00:00 | 2026-05-10T08:43:06+00:00 |
| rhsa-2024:0043 | Red Hat Security Advisory: Red Hat build of MicroShift 4.16.0 security update | 2024-06-27T13:18:33+00:00 | 2026-05-10T08:43:05+00:00 |
| rhsa-2024:0041 | Red Hat Security Advisory: OpenShift Container Platform 4.16.0 bug fix and security update | 2024-06-27T11:23:01+00:00 | 2026-05-10T08:43:04+00:00 |
| rhsa-2023:7827 | Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update | 2024-01-04T14:22:05+00:00 | 2026-05-10T08:43:03+00:00 |
| rhsa-2024:0040 | Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security and extras update | 2024-06-27T10:52:21+00:00 | 2026-05-10T08:43:02+00:00 |
| rhsa-2023:7831 | Red Hat Security Advisory: OpenShift Container Platform 4.14.7 bug fix and security update | 2024-01-03T20:04:32+00:00 | 2026-05-10T08:43:02+00:00 |
| rhsa-2023:7823 | Red Hat Security Advisory: OpenShift Container Platform 4.12.46 bug fix and security update | 2024-01-04T14:41:38+00:00 | 2026-05-10T08:43:01+00:00 |
| rhsa-2023:7741 | Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancements, and bug fix update | 2023-12-12T13:55:37+00:00 | 2026-05-10T08:43:00+00:00 |
| rhsa-2023:7710 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.0 security update | 2023-12-11T00:20:04+00:00 | 2026-05-10T08:42:59+00:00 |
| rhsa-2023:7704 | Red Hat Security Advisory: OpenShift Virtualization 4.14.1 security and bug fix update | 2023-12-07T15:00:28+00:00 | 2026-05-10T08:42:58+00:00 |
| rhsa-2023:7703 | Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.10.6 release and security update | 2023-12-07T14:57:07+00:00 | 2026-05-10T08:42:58+00:00 |
| rhsa-2023:7699 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update | 2023-12-07T14:26:32+00:00 | 2026-05-10T08:42:57+00:00 |
| rhsa-2023:7691 | Red Hat Security Advisory: OpenShift Container Platform 4.11.55 bug fix and security update | 2023-12-13T21:44:50+00:00 | 2026-05-10T08:42:56+00:00 |
| rhsa-2023:7690 | Red Hat Security Advisory: OpenShift Container Platform 4.11.55 security update | 2023-12-13T21:03:30+00:00 | 2026-05-10T08:42:55+00:00 |
| rhsa-2023:7687 | Red Hat Security Advisory: OpenShift Container Platform 4.13.26 bug fix and security update | 2023-12-13T00:13:20+00:00 | 2026-05-10T08:42:54+00:00 |
| rhsa-2023:7682 | Red Hat Security Advisory: OpenShift Container Platform 4.14.6 bug fix and security update | 2023-12-12T09:48:40+00:00 | 2026-05-10T08:42:54+00:00 |
| rhsa-2023:7662 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 6.0.3 security update | 2023-12-06T00:20:48+00:00 | 2026-05-10T08:42:53+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-413407 | SSA-413407: Path Traversal Vulnerability in Teamcenter Active Workspace | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-334944 | SSA-334944: Vulnerability in SINEMA Remote Connect Server | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-330339 | SSA-330339: Web Vulnerabilities in SINEC NMS | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-288459 | SSA-288459: Heap Overflow Vulnerability in RFID terminals | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-208530 | SSA-208530: File parsing vulnerabilities in IFC adapter in NX | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-187092 | SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 | 2021-04-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-139628 | SSA-139628: Vulnerabilities in Web Server for Scalance X Products | 2021-01-12T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-109294 | SSA-109294: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-816035 | SSA-816035: Code Execution Vulnerability in SINEMA Remote Connect Client | 2021-08-19T00:00:00Z | 2021-08-19T00:00:00Z |
| ssa-818688 | SSA-818688: Multiple Vulnerabilities in Solid Edge before SE2021MP7 | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-752103 | SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-553445 | SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-365397 | SSA-365397: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.1 | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-286838 | SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-158827 | SSA-158827: Denial-of-Service Vulnerability in Automation License Manager | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-729965 | SSA-729965: TLS Certificate Validation Vulnerability in SINUMERIK Integrate Operate Client | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-641963 | SSA-641963: Remote Code Execution Vulnerability in Multiple SIMATIC Software Products | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-622535 | SSA-622535: Multiple Vulnerabilities in Teamcenter Active Workspace | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-483182 | SSA-483182: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2 | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-448291 | SSA-448291: Denial-of-Service Vulnerability in ARP Protocol of RWG Universal Controllers | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-352521 | SSA-352521: Access Check Bypass Vulnerability in Mendix | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-209268 | SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-203306 | SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families | 2018-03-08T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-173615 | SSA-173615: Multiple PAR and ASM File Parsing Vulnerabilities in Solid Edge | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-645530 | SSA-645530: TIFF File Parsing Vulnerability in JT2Go and Teamcenter Visualization before V13.1.0.3 | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-574442 | SSA-574442: Multiple PAR and DFT File Parsing Vulnerabilities in Solid Edge | 2021-04-13T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-542525 | SSA-542525: Authentication Vulnerabilities in SIMATIC HMI Products | 2020-09-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-522654 | SSA-522654: Privilege Escalation Vulnerability in Mendix SAML Module | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-419820 | SSA-419820: Denial-of-Service Vulnerability in TIM 1531 IRC | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-208356 | SSA-208356: DFT File Parsing Vulnerabilities in Solid Edge | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:1125-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7) | 2026-03-27T14:04:13Z | 2026-03-27T14:04:13Z |
| suse-su-2026:1118-1 | Security update for docker-stable | 2026-03-27T12:26:18Z | 2026-03-27T12:26:18Z |
| suse-su-2026:1117-1 | Security update for python311 | 2026-03-27T11:34:35Z | 2026-03-27T11:34:35Z |
| suse-su-2026:20976-1 | Security update for docker-compose | 2026-03-27T10:09:30Z | 2026-03-27T10:09:30Z |
| suse-su-2026:20949-1 | Security update for docker-compose | 2026-03-27T10:09:30Z | 2026-03-27T10:09:30Z |
| suse-su-2026:20950-1 | Security update for nghttp2 | 2026-03-27T09:43:31Z | 2026-03-27T09:43:31Z |
| suse-su-2026:1107-1 | Security update for python312 | 2026-03-27T09:04:01Z | 2026-03-27T09:04:01Z |
| suse-su-2026:1102-1 | Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7) | 2026-03-27T08:05:21Z | 2026-03-27T08:05:21Z |
| suse-su-2026:1105-1 | Security update for containerd | 2026-03-27T07:03:20Z | 2026-03-27T07:03:20Z |
| suse-su-2026:1099-1 | Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7) | 2026-03-27T04:33:50Z | 2026-03-27T04:33:50Z |
| suse-su-2026:1096-1 | Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) | 2026-03-27T04:04:40Z | 2026-03-27T04:04:40Z |
| suse-su-2026:1101-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) | 2026-03-27T01:33:43Z | 2026-03-27T01:33:43Z |
| suse-su-2026:1100-1 | Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6) | 2026-03-26T23:08:12Z | 2026-03-26T23:08:12Z |
| suse-su-2026:1098-1 | Security update for cosign | 2026-03-26T21:23:31Z | 2026-03-26T21:23:31Z |
| suse-su-2026:1094-1 | Security update for python-deepdiff | 2026-03-26T17:56:23Z | 2026-03-26T17:56:23Z |
| suse-su-2026:1093-1 | Security update for xen | 2026-03-26T17:52:21Z | 2026-03-26T17:52:21Z |
| suse-su-2026:1092-1 | Security update for xen | 2026-03-26T17:51:51Z | 2026-03-26T17:51:51Z |
| suse-su-2026:1091-1 | Security update for kea | 2026-03-26T17:48:22Z | 2026-03-26T17:48:22Z |
| suse-su-2026:1090-1 | Security update for python3 | 2026-03-26T17:45:14Z | 2026-03-26T17:45:14Z |
| suse-su-2026:1089-1 | Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6) | 2026-03-26T17:34:58Z | 2026-03-26T17:34:58Z |
| suse-su-2026:1088-1 | Security update for the Linux Kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5) | 2026-03-26T17:03:58Z | 2026-03-26T17:03:58Z |
| suse-su-2026:20948-1 | Security update for net-tools | 2026-03-26T15:12:29Z | 2026-03-26T15:12:29Z |
| suse-su-2026:20940-1 | Security update for net-tools | 2026-03-26T15:12:29Z | 2026-03-26T15:12:29Z |
| suse-su-2026:1083-1 | Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) | 2026-03-26T15:03:57Z | 2026-03-26T15:03:57Z |
| suse-su-2026:1081-1 | Security update for the Linux Kernel | 2026-03-26T13:23:51Z | 2026-03-26T13:23:51Z |
| suse-su-2026:1078-1 | Security update for the Linux Kernel | 2026-03-26T12:43:07Z | 2026-03-26T12:43:07Z |
| suse-su-2026:1077-1 | Security update for the Linux Kernel | 2026-03-26T12:42:31Z | 2026-03-26T12:42:31Z |
| suse-su-2026:1076-1 | Security update for python-pyasn1 | 2026-03-26T12:42:05Z | 2026-03-26T12:42:05Z |
| suse-su-2026:1075-1 | Security update for python-pyasn1 | 2026-03-26T12:41:27Z | 2026-03-26T12:41:27Z |
| suse-su-2026:1074-1 | Security update for nghttp2 | 2026-03-26T12:39:53Z | 2026-03-26T12:39:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:15699 | Moderate: mysql-selinux and mysql8.4 security update | 2025-09-11T00:00:00Z | 2025-09-12T10:30:08Z |
| alsa-2025:15702 | Important: cups security update | 2025-09-11T00:00:00Z | 2025-09-12T09:35:34Z |
| alsa-2025:15608 | Important: python3.12-cryptography security update | 2025-09-10T00:00:00Z | 2025-09-10T18:06:18Z |
| alsa-2025:15471 | Important: kernel security update | 2025-09-08T00:00:00Z | 2025-09-09T09:32:18Z |
| alsa-2025:15008 | Moderate: kernel security update | 2025-09-02T00:00:00Z | 2025-09-09T09:28:32Z |
| alsa-2025:15472 | Important: kernel-rt security update | 2025-09-08T00:00:00Z | 2025-09-09T07:30:13Z |
| alsa-2025:15123 | Moderate: httpd:2.4 security update | 2025-09-03T00:00:00Z | 2025-09-04T10:27:23Z |
| alsa-2025:14009 | Important: kernel security update | 2025-08-18T00:00:00Z | 2025-09-04T09:42:53Z |
| alsa-2025:14546 | Moderate: python3.12 security update | 2025-08-26T00:00:00Z | 2025-09-04T09:38:54Z |
| alsa-2025:14557 | Important: pam security update | 2025-08-26T00:00:00Z | 2025-09-04T09:35:13Z |
| alsa-2025:15115 | Important: postgresql:12 security update | 2025-09-03T00:00:00Z | 2025-09-03T11:08:48Z |
| alsa-2025:15095 | Moderate: httpd security update | 2025-09-02T00:00:00Z | 2025-09-03T08:58:50Z |
| alsa-2025:15099 | Important: pam security update | 2025-09-03T00:00:00Z | 2025-09-03T08:51:39Z |
| alsa-2025:15009 | Moderate: kernel-rt security update | 2025-09-02T00:00:00Z | 2025-09-02T12:21:56Z |
| alsa-2025:14862 | Important: postgresql:15 security update | 2025-08-28T00:00:00Z | 2025-09-02T10:40:42Z |
| alsa-2025:14983 | Moderate: mod_http2 security update | 2025-09-02T00:00:00Z | 2025-09-02T10:38:04Z |
| alsa-2025:14438 | Moderate: kernel security update | 2025-08-25T00:00:00Z | 2025-09-02T10:12:10Z |
| alsa-2025:14510 | Important: kernel security update | 2025-08-25T00:00:00Z | 2025-09-01T12:39:52Z |
| alsa-2025:14900 | Moderate: python39:3.9 security update | 2025-08-28T00:00:00Z | 2025-09-01T12:34:36Z |
| alsa-2025:14844 | Important: thunderbird security update | 2025-08-28T00:00:00Z | 2025-08-29T13:15:41Z |
| alsa-2025:14640 | Important: thunderbird security update | 2025-08-26T00:00:00Z | 2025-08-29T13:02:26Z |
| alsa-2025:14826 | Important: postgresql16 security update | 2025-08-28T00:00:00Z | 2025-08-29T10:46:22Z |
| alsa-2025:14827 | Important: postgresql:16 security update | 2025-08-28T00:00:00Z | 2025-08-29T10:43:07Z |
| alsa-2025:14899 | Important: postgresql:16 security update | 2025-08-28T00:00:00Z | 2025-08-29T10:40:22Z |
| alsa-2025:14841 | Moderate: python3.11 security update | 2025-08-28T00:00:00Z | 2025-08-29T06:51:33Z |
| alsa-2025:14878 | Important: postgresql security update | 2025-08-28T00:00:00Z | 2025-08-29T06:49:12Z |
| alsa-2025:14743 | Important: thunderbird security update | 2025-08-27T00:00:00Z | 2025-08-28T07:17:59Z |
| alsa-2025:14750 | Moderate: fence-agents security update | 2025-08-27T00:00:00Z | 2025-08-28T07:14:58Z |
| alsa-2025:14592 | Important: aide security update | 2025-08-26T00:00:00Z | 2025-08-27T13:34:06Z |
| alsa-2025:14420 | Important: kernel security update | 2025-08-25T00:00:00Z | 2025-08-27T12:00:58Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-138 | Security exception in com.github.javaparser.GeneratedJavaParser.Expression | 2024-02-28T00:05:23.810172Z | 2024-04-04T14:17:31.086359Z |
| osv-2024-137 | Global-buffer-overflow in igraph_dl_yylex | 2024-02-27T00:01:01.786536Z | 2024-04-03T14:17:44.548648Z |
| osv-2024-89 | Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst | 2024-02-09T00:03:08.288815Z | 2024-04-01T14:22:58.864850Z |
| osv-2023-605 | Heap-use-after-free in Elf64_free | 2023-07-23T14:00:51.654724Z | 2024-04-01T14:21:09.455014Z |
| osv-2024-4 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-01-04T00:13:53.974088Z | 2024-04-01T14:13:38.051217Z |
| osv-2024-217 | Heap-use-after-free in dropNode | 2024-03-30T00:03:20.549054Z | 2024-03-30T00:03:20.549358Z |
| osv-2024-207 | Heap-buffer-overflow in emit_goto | 2024-03-27T00:05:42.651468Z | 2024-03-27T00:05:42.651810Z |
| osv-2024-204 | Heap-use-after-free in JS_NewObjectFromShape | 2024-03-27T00:00:05.756758Z | 2024-03-27T00:00:05.757264Z |
| osv-2024-198 | Heap-use-after-free in xmlCopyPropInternal | 2024-03-25T00:05:53.628217Z | 2024-03-25T00:05:53.628547Z |
| osv-2024-194 | Heap-use-after-free in xmlDOMWrapNSNormAcquireNormalizedNs | 2024-03-24T00:06:16.876227Z | 2024-03-24T00:06:16.876833Z |
| osv-2024-193 | Use-of-uninitialized-value in api.c | 2024-03-24T00:04:56.514783Z | 2024-03-24T00:04:56.515126Z |
| osv-2024-187 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-23T00:06:48.454975Z | 2024-03-23T00:06:48.455591Z |
| osv-2024-182 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-19T00:03:53.557559Z | 2024-03-19T00:03:53.558132Z |
| osv-2024-180 | Heap-buffer-overflow in ixheaace_process | 2024-03-17T00:05:09.373138Z | 2024-03-17T00:05:09.373453Z |
| osv-2024-178 | Global-buffer-overflow in dissect_dns_answer | 2024-03-16T00:04:44.507570Z | 2024-03-16T00:04:44.508060Z |
| osv-2024-177 | Heap-buffer-overflow in p11_rpc_buffer_get_date_value | 2024-03-16T00:01:15.392885Z | 2024-03-16T00:01:15.393177Z |
| osv-2024-173 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-15T00:09:32.005883Z | 2024-03-15T00:09:32.006372Z |
| osv-2024-170 | Use-of-uninitialized-value in pcpp::Packet::createFirstLayer | 2024-03-14T00:14:30.862304Z | 2024-03-14T00:14:30.862862Z |
| osv-2024-24 | Security exception in java.base/java.util.Arrays.copyOf | 2024-01-20T00:04:01.700018Z | 2024-03-13T14:21:08.789955Z |
| osv-2024-161 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-11T00:00:35.333844Z | 2024-03-11T00:00:35.334478Z |
| osv-2024-6 | Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char> | 2024-01-06T00:11:05.929725Z | 2024-03-08T14:19:24.750958Z |
| osv-2024-120 | Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer | 2024-02-21T00:00:31.892843Z | 2024-02-21T00:00:31.893273Z |
| osv-2024-117 | Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer | 2024-02-19T00:05:05.793082Z | 2024-02-19T00:05:05.793781Z |
| osv-2024-104 | Heap-buffer-overflow in mrb_memsearch | 2024-02-15T00:00:54.473735Z | 2024-02-15T00:00:54.474295Z |
| osv-2024-103 | Heap-use-after-free in xmlRemoveID | 2024-02-15T00:00:51.271367Z | 2024-02-15T00:00:51.271973Z |
| osv-2024-102 | Heap-buffer-overflow in mrb_memsearch | 2024-02-15T00:00:47.674187Z | 2024-02-15T00:00:47.674761Z |
| osv-2024-66 | Heap-buffer-overflow in mrb_memsearch | 2024-02-01T00:13:20.152510Z | 2024-02-14T14:19:50.489803Z |
| osv-2024-65 | Heap-buffer-overflow in mrb_memsearch | 2024-02-01T00:12:19.091201Z | 2024-02-14T14:19:46.707491Z |
| osv-2024-30 | Heap-buffer-overflow in mrb_memsearch | 2024-01-22T00:05:20.803259Z | 2024-02-14T14:19:17.217387Z |
| osv-2024-29 | Heap-buffer-overflow in mrb_memsearch | 2024-01-22T00:01:33.424797Z | 2024-02-14T14:18:57.560129Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2020-0013 | fake-static allows converting any reference into a `'static` reference | 2020-04-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0012 | Relies on undefined behavior of `char::from_u32_unchecked` | 2020-04-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0011 | Library exclusively intended to obfuscate code. | 2020-04-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0009 | `read_scalar` and `read_scalar_at` allow transmuting values without `unsafe` blocks | 2020-04-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0008 | Flaw in hyper allows request smuggling by sending a body in GET requests | 2020-03-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0007 | use-after or double free of allocated memory | 2020-03-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0006 | Flaw in `realloc` allows reading unknown memory | 2020-03-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0005 | CBox API allows to de-reference raw pointers without `unsafe` code | 2020-03-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0004 | sigstack allocation bug can cause memory corruption or leak | 2020-01-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0002 | Parsing a specially crafted message can result in a stack overflow | 2020-01-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0001 | Stack overflow when resolving additional records from MX or SRV null targets | 2020-01-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0039 | typemap is Unmaintained | 2019-04-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0038 | Fix for UB in failure to catch panics crossing FFI boundaries | 2019-03-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0037 | Compiler optimisation for next_with_timeout in pnet::transport::IcmpTransportChannelIterator flaws to SEGFAULT | 2019-06-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0036 | Type confusion if __private_get_type_id__ is overridden | 2019-11-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0034 | HeaderMap::Drain API is unsound | 2019-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0033 | Integer Overflow in HeaderMap::reserve() can cause Denial of Service | 2019-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0029 | ChaCha20 counter overflow can expose repetitions in the keystream | 2019-10-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0028 | Unsound `impl Follow for bool` | 2019-10-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0027 | Flaw in Scalar::check_overflow allows side-channel timing attack | 2019-10-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0026 | generichash::Digest::eq always return true | 2019-10-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0025 | Flaw in CBOR deserializer allows stack overflow | 2019-10-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0023 | Cloned interners may read already dropped strings | 2019-08-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0022 | Stream callback function is not unwind safe | 2019-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0021 | `Matrix::zip_elements` causes double free | 2019-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0020 | fix unsound APIs that could lead to UB | 2019-09-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0019 | HMAC-BLAKE2 algorithms compute incorrect results | 2019-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0018 | Internally mutating methods take immutable ref self | 2019-09-02T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0017 | Panic during initialization of Lazy<T> might trigger undefined behavior | 2019-09-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0016 | Use-after-free in buffer conversion implementation | 2019-09-01T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-tomcat-2025-24813 | Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT | 2025-07-10T10:46:47.051Z | 2026-03-20T13:43:29.174Z |
| bit-tomcat-2025-53506 | Apache Tomcat: DoS via excessive h2 streams at connection start | 2025-07-16T08:19:04.361Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2025-49124 | Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows | 2025-06-20T06:04:24.795Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2025-31651 | Apache Tomcat: Bypass of rules in Rewrite Valve | 2025-07-10T10:46:54.240Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-56337 | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete | 2025-07-10T10:46:39.151Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-52317 | Apache Tomcat: Request/response mix-up with HTTP/2 | 2024-11-20T07:20:06.896Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-52316 | Apache Tomcat: Authentication bypass when using Jakarta Authentication API | 2025-07-10T10:46:05.150Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-38286 | Apache Tomcat: Denial of Service | 2024-11-09T07:20:25.873Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-34750 | Apache Tomcat: HTTP/2 excess header handling DoS | 2025-07-29T14:30:29.115Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-24549 | Apache Tomcat: HTTP/2 header handling DoS | 2025-07-17T08:09:49.355Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2024-21733 | Apache Tomcat: Leaking of unrelated request bodies in default error page | 2024-03-06T11:07:26.980Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2023-46589 | Apache Tomcat: HTTP request smuggling via malformed trailer headers | 2024-03-06T11:07:35.204Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2023-45648 | Apache Tomcat: Trailer header parsing too lenient | 2024-03-06T11:07:43.292Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2023-42795 | Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests | 2024-03-06T11:08:01.506Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2023-41080 | Apache Tomcat: Open redirect with FORM authentication | 2024-03-06T11:08:22.964Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-33163 | Parse Server leaks protected fields via LiveQuery afterEvent trigger | 2026-03-20T11:37:51.448Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-33042 | Parse Server affected by empty authData bypassing credential requirement on signup | 2026-03-20T11:37:48.161Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-32944 | Parse Server crash via deeply nested query condition operators | 2026-03-20T11:37:45.054Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-32943 | Parse Server has a password reset token single-use bypass via concurrent requests | 2026-03-20T11:37:41.707Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-32886 | Parse Server's Cloud function dispatch crashes server via prototype chain traversal | 2026-03-20T11:37:38.226Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-32878 | Parse Server vulnerable to schema poisoning via prototype pollution in deep copy | 2026-03-20T11:37:35.433Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-32770 | Parse Server: LiveQuery subscription with invalid regular expression crashes server | 2026-03-20T11:37:32.539Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-32742 | Parse Server session creation endpoint allows overwriting server-generated session fields | 2026-03-20T11:37:29.063Z | 2026-03-20T12:05:40.000Z |
| bit-parse-2026-32728 | Parse Server has a stored XSS filter bypass via Content-Type MIME parameter and missing XML extension blocklist entries | 2026-03-20T11:37:25.520Z | 2026-03-20T12:05:40.000Z |
| bit-tomcat-2026-24733 | Apache Tomcat: Security constraint bypass with HTTP/0.9 | 2026-02-20T09:52:58.708Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-66614 | Apache Tomcat: Client certificate verification bypass due to virtual host mapping | 2026-02-20T09:52:57.300Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-61795 | Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS | 2025-11-06T13:00:35.478Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-55754 | Apache Tomcat: console manipulation via escape sequences in log messages | 2025-11-06T13:00:33.572Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-55668 | Apache Tomcat: session fixation via rewrite valve | 2025-08-18T08:14:21.163Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-52520 | Apache Tomcat: DoS via integer overflow in multipart file upload | 2025-07-16T08:19:00.271Z | 2026-03-20T09:47:33.381Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-1094 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1093 | Vulnérabilité dans Microsoft Azure Monitor Agent | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1092 | Multiples vulnérabilités dans Microsoft Windows | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1091 | Multiples vulnérabilités dans Microsoft Office | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1090 | Vulnérabilité dans les produits Moxa | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1089 | Vulnérabilité dans les produits Bitdefender | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1088 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1087 | Multiples vulnérabilités dans les produits Mozilla | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1086 | Multiples vulnérabilités dans les produits Intel | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1085 | Multiples vulnérabilités dans les produits Adobe | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| CERTFR-2025-AVI-1084 | Multiples vulnérabilités dans les produits Fortinet | 2025-12-10T00:00:00.000000 | 2025-12-10T00:00:00.000000 |
| certfr-2025-avi-1083 | Multiples vulnérabilités dans les produits Siemens | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1082 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1081 | Vulnérabilité dans Citrix XenServer | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1080 | Multiples vulnérabilités dans VMware Tanzu RabbitMQ | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1079 | Multiples vulnérabilités dans les produits SAP | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1083 | Multiples vulnérabilités dans les produits Siemens | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1082 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1081 | Vulnérabilité dans Citrix XenServer | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1080 | Multiples vulnérabilités dans VMware Tanzu RabbitMQ | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| CERTFR-2025-AVI-1079 | Multiples vulnérabilités dans les produits SAP | 2025-12-09T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-avi-1078 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2025-avi-1077 | Multiples vulnérabilités dans Traefik | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2024-avi-1026 | Multiples vulnérabilités dans les produits Synology | 2024-11-28T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| CERTFR-2025-AVI-1078 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| CERTFR-2025-AVI-1077 | Multiples vulnérabilités dans Traefik | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| CERTFR-2024-AVI-1026 | Multiples vulnérabilités dans les produits Synology | 2024-11-28T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2025-avi-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1074 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1073 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000113 | Apache Struts vulnerable to input validation bypass | 2016-06-20T17:20+09:00 | 2022-08-09T14:10+09:00 |
| jvndb-2016-000112 | Apache Struts vulnerable to validation bypass in Getter method | 2016-06-20T17:19+09:00 | 2022-08-09T14:08+09:00 |
| jvndb-2016-000111 | Apache Struts vulnerable to cross-site request forgery | 2016-06-20T17:18+09:00 | 2022-08-09T14:05+09:00 |
| jvndb-2020-000055 | Apache Struts 2 vulnerable to denial-of-service (DoS) | 2020-08-25T13:59+09:00 | 2022-08-09T13:57+09:00 |
| jvndb-2020-000084 | Apache Struts 2 vulnerable to remote code execution (S2-061) | 2020-12-11T15:09+09:00 | 2022-08-09T13:55+09:00 |
| jvndb-2022-000062 | Kaitai Struct: compiler vulnerable to denial-of-service (DoS) | 2022-08-04T15:14+09:00 | 2022-08-04T15:14+09:00 |
| jvndb-2022-002143 | Information Disclosure Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator | 2022-08-01T17:10+09:00 | 2022-08-01T17:10+09:00 |
| jvndb-2022-000061 | "JustSystems JUST Online Update for J-License" starts a program with an unquoted file path | 2022-07-28T13:40+09:00 | 2022-07-28T13:40+09:00 |
| jvndb-2021-000007 | OS command injection vulnerability in multiple Infoscience Corporation log management tools | 2021-01-27T18:31+09:00 | 2022-07-26T15:53+09:00 |
| jvndb-2022-001953 | Growi vulnerable to weak password requirements | 2022-06-15T17:47+09:00 | 2022-06-15T17:47+09:00 |
| jvndb-2021-000073 | Multiple vulnerabilities in Cybozu Garoon | 2021-08-02T16:42+09:00 | 2022-05-24T15:16+09:00 |
| jvndb-2022-001800 | Installer of Trend Micro HouseCall for Home Networks may insecurely load Dynamic Link Libraries | 2022-05-13T16:24+09:00 | 2022-05-13T16:24+09:00 |
| jvndb-2021-000097 | Multiple vulnerabilities in CLUSTERPRO X and EXPRESSCLUSTER X | 2021-10-29T15:22+09:00 | 2022-04-20T14:03+09:00 |
| jvndb-2022-001526 | Trend Micro Antivirus for Mac vulnerable to privilege escalation | 2022-04-07T16:58+09:00 | 2022-04-07T16:58+09:00 |
| jvndb-2017-000174 | Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries | 2017-07-14T13:38+09:00 | 2022-03-31T17:43+09:00 |
| jvndb-2022-001494 | Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents | 2022-03-31T17:25+09:00 | 2022-03-31T17:25+09:00 |
| jvndb-2021-004912 | Multiple vulnerabilities in multiple ELECOM routers | 2021-12-02T17:16+09:00 | 2022-03-30T16:11+09:00 |
| jvndb-2021-000108 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2021-11-30T16:23+09:00 | 2022-03-29T16:18+09:00 |
| jvndb-2022-001477 | Netcommunity OG410X and OG810X VoIP gateway/Hikari VoIP adapter for business offices vulnerable to OS command injection | 2022-03-23T12:08+09:00 | 2022-03-23T12:08+09:00 |
| jvndb-2022-000021 | Multiple vulnerabilities in KINGSOFT "WPS Office" and "KINGSOFT Internet Security" | 2022-03-16T14:46+09:00 | 2022-03-16T14:46+09:00 |
| jvndb-2021-008345 | Installer of Trend Micro Portable Security may insecurely load Dynamic Link Libraries | 2022-03-14T16:43+09:00 | 2022-03-14T16:43+09:00 |
| jvndb-2022-001404 | Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries | 2022-03-11T15:55+09:00 | 2022-03-11T15:55+09:00 |
| jvndb-2022-000016 | UNIVERGE WA Series vulnerable to OS command injection | 2022-03-10T14:31+09:00 | 2022-03-10T14:31+09:00 |
| jvndb-2022-001383 | Directory Permission Vulnerability in Hitachi Ops Center Viewpoint | 2022-03-07T15:45+09:00 | 2022-03-07T15:45+09:00 |
| jvndb-2022-001382 | File Permission Vulnerability in Hitachi Command Suite | 2022-03-07T15:35+09:00 | 2022-03-07T15:35+09:00 |
| jvndb-2022-000008 | i-FILTER vulnerable to improper check for certificate revocation | 2022-03-04T14:12+09:00 | 2022-03-04T14:12+09:00 |
| jvndb-2022-000017 | Norton Security for Mac improperly processes ICMP packets | 2022-03-03T14:32+09:00 | 2022-03-03T14:32+09:00 |
| jvndb-2022-001380 | Multiples security updates for Trend Micro Endpoint security products for enterprises (March 2022) | 2022-03-02T17:07+09:00 | 2022-03-02T17:07+09:00 |
| jvndb-2021-000109 | Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields" | 2021-12-02T15:02+09:00 | 2022-02-18T16:18+09:00 |
| jvndb-2022-000014 | Multiple vulnerabilities in a-blog cms | 2022-02-18T15:55+09:00 | 2022-02-18T15:55+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-14276 | 多款Apple产品拒绝服务漏洞（CNVD-2026-14276） | 2026-03-02 | 2026-03-20 |
| cnvd-2026-11482 | 上海百胜软件股份有限公司E3全渠道中台存在信息泄露漏洞 | 2026-02-03 | 2026-03-20 |
| cnvd-2026-11388 | 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞（CNVD-C-2026-69427） | 2026-02-03 | 2026-03-20 |
| cnvd-2026-11387 | 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞（CNVD-C-2026-69425） | 2026-02-03 | 2026-03-20 |
| cnvd-2026-11363 | 杭州飞致云信息科技有限公司SQLBot存在SQL注入漏洞 | 2026-02-03 | 2026-03-20 |
| cnvd-2026-14598 | Google Chrome Web Speech越界读漏洞 | 2026-03-17 | 2026-03-19 |
| cnvd-2026-14275 | 多款Apple产品拒绝服务漏洞（CNVD-2026-14275） | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14274 | 多款Apple产品拒绝服务漏洞（CNVD-2026-14274） | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14273 | 多款Apple产品拒绝服务漏洞（CNVD-2026-14273） | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14272 | 多款Apple产品拒绝服务漏洞（CNVD-2026-14272） | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14271 | 多款Apple产品拒绝服务漏洞（CNVD-2026-14271） | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14252 | Apache Spark反序列化漏洞 | 2026-03-19 | 2026-03-19 |
| cnvd-2026-14251 | Apache Livy输入验证错误漏洞 | 2026-03-19 | 2026-03-19 |
| cnvd-2026-14250 | Zephyr缓冲区溢出漏洞 | 2026-03-19 | 2026-03-19 |
| cnvd-2026-14249 | Open5GS拒绝服务漏洞（CNVD-2026-14249） | 2026-03-19 | 2026-03-19 |
| cnvd-2026-14136 | Siemens RUGGEDCOM APE1808设备Fortigate NGFW V7.4.7之前版本存在多个漏洞 | 2026-03-10 | 2026-03-19 |
| cnvd-2026-14599 | Google Chrome WebView资源管理错误漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14597 | Google Chrome Agents资源管理错误漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14596 | Google Chrome WebMCP资源管理错误漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14595 | Google Chrome Extensions资源管理错误漏洞（CNVD-2026-14595） | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14594 | Google Chrome TextEncoding资源管理错误漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14593 | Google Chrome MediaStream内存错误引用漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14592 | Google Chrome WebMIDI内存错误引用漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14146 | WordPress插件Permalink Manager Lite信息泄露漏洞 | 2025-09-29 | 2026-03-18 |
| cnvd-2026-14145 | WordPress插件Document Pro Elementor信息泄露漏洞 | 2025-11-14 | 2026-03-18 |
| cnvd-2026-14144 | WordPress插件Comment Edit Core – Simple Comment Editing信息泄露漏洞 | 2025-11-18 | 2026-03-18 |
| cnvd-2026-14143 | WordPress插件wpForo Forum信息泄露漏洞 | 2026-03-11 | 2026-03-18 |
| cnvd-2026-14142 | WordPress插件My Tickets信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14141 | WordPress插件Greenshift – animation and page builder blocks信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14140 | WordPress插件Classified Listing信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-08792 | Уязвимость функции virtqueue_enable_cb_delayed() модуля drivers/virtio/virtio_ring.c ядра… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08789 | Уязвимость модуля drivers/net/vxlan/vxlan_core.c ядра операционных систем Linux, позволяю… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08788 | Уязвимость функции btrfs_prelim_ref() модуля include/trace/events/btrfs.h ядра операционн… | 07.08.2025 | 16.02.2026 |
| bdu:2025-08786 | Уязвимость компонента Aggregate Term Handler системы управления базами данных SQLite, поз… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08706 | Уязвимость компонента bus ядра операционной системы Linux, позволяющая нарушителю оказать… | 28.07.2025 | 16.02.2026 |
| bdu:2025-08696 | Уязвимость функции mod_ssl веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать… | 21.07.2025 | 16.02.2026 |
| bdu:2025-08695 | Уязвимость функции mod_proxy_http2 веб-сервера Apache HTTP Server, позволяющая нарушителю… | 21.07.2025 | 16.02.2026 |
| bdu:2025-08694 | Уязвимость функции in _gnutls_figure_common_ciphersuite() библиотеки GnuTLS, позволяющая … | 21.07.2025 | 16.02.2026 |
| bdu:2025-08622 | Уязвимость модуля kernel/trace/bpf_trace.c подсистемы BPF ядра операционной системы Linux… | 17.07.2025 | 16.02.2026 |
| bdu:2025-08604 | Уязвимость библиотеки упрощения упаковки проектов setuptools, связанная с неверным ограни… | 17.07.2025 | 16.02.2026 |
| bdu:2025-08510 | Уязвимость функции sun8i_ce_cipher_prepare() модуля drivers/crypto/allwinner/sun8i-ce/sun… | 15.07.2025 | 16.02.2026 |
| bdu:2025-08509 | Уязвимость функции ath11k_core_halt() модуля drivers/net/wireless/ath/ath11k/core.c ядра … | 15.07.2025 | 16.02.2026 |
| bdu:2025-08361 | Уязвимость компонента multipart/form-data веб-фреймворка и асинхронной сетевой библиотеки… | 11.07.2025 | 16.02.2026 |
| bdu:2025-08356 | Уязвимость программы системного администрирования Sudo, связанная с недостатками механизм… | 11.07.2025 | 16.02.2026 |
| bdu:2025-08271 | Уязвимость функции tb_cfg_request_dequeue() модуля drivers/thunderbolt/ctl.c ядра операци… | 09.07.2025 | 16.02.2026 |
| bdu:2025-08099 | Уязвимость компонента nft_tunnel ядра операционной системы Linux, позволяющая нарушителю … | 07.07.2025 | 16.02.2026 |
| bdu:2025-07578 | Уязвимость микропрограммного обеспечения процессоров Intel, связанная с раскрытием информ… | 25.06.2025 | 16.02.2026 |
| bdu:2025-07500 | Уязвимость функции iocg_pay_debt() модуля block/blk-iocost.c поддержки блочного уровня яд… | 25.06.2025 | 16.02.2026 |
| bdu:2025-07485 | Уязвимость функции tcf_mirred_to_dev() модуля net/sched/act_mirred.c подсистемы управлени… | 25.06.2025 | 16.02.2026 |
| bdu:2025-07455 | Уязвимость функции vmbus_connect() модуля drivers/hv/connection.c - драйвера поддержки го… | 25.06.2025 | 16.02.2026 |
| bdu:2025-07426 | Уязвимость интерфейса модуля Rack интерпретатора языка программирования Ruby, позволяющая… | 23.06.2025 | 16.02.2026 |
| bdu:2025-07244 | Уязвимость функции __do_sys_rtas() модуля arch/powerpc/kernel/rtas.c ядра операционной си… | 23.06.2025 | 16.02.2026 |
| bdu:2025-07219 | Уязвимость функции ucsi_ccg_sync_control() модуля drivers/us ядра операционной системы Li… | 23.06.2025 | 16.02.2026 |
| bdu:2025-07164 | Уязвимость сервера универсальной системы мониторинга Zabbix, позволяющая нарушителю получ… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07144 | Уязвимость функции xmlBuildQName библиотеки Libxml2, позволяющая нарушителю вызвать отказ… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07137 | Уязвимость функции g_string_insert_unichar() файла glib/gstring.c библиотеки Glib, позвол… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07126 | Уязвимость компонента reiserfs загрузчика операционных систем Grub2, позволяющая нарушите… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07125 | Уязвимость функции grub_udf_read_block загрузчика операционных систем Grub2, позволяющая … | 20.06.2025 | 16.02.2026 |
| bdu:2025-07124 | Уязвимость компонента UFS загрузчика операционных систем Grub2, позволяющая нарушителю вы… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07123 | Уязвимость загрузчика операционных систем Grub2, связанная с записью за пределами границ,… | 20.06.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-202205-0881 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.49… | 2024-07-23T20:29:37.848000Z |
| var-201302-0305 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T20:29:37.668000Z |
| var-201912-0646 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:29:33.187000Z |
| var-200512-0634 | passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 al… | 2024-07-23T20:29:02.384000Z |
| var-202010-1512 | An input validation issue was addressed with improved input validation. This issue is fix… | 2024-07-23T20:29:01.717000Z |
| var-202006-0222 | libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C sub… | 2024-07-23T20:28:59.964000Z |
| var-200102-0007 | WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood… | 2024-07-23T20:28:59.862000Z |
| var-201403-0514 | The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certa… | 2024-07-23T20:28:55.089000Z |
| var-200701-0014 | Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows lo… | 2024-07-23T20:28:55.996000Z |
| var-200112-0223 | Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (… | 2024-07-23T20:28:55.223000Z |
| var-201311-0379 | The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not pro… | 2024-07-23T20:27:48.646000Z |
| var-201006-1142 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-07-23T20:27:48.807000Z |
| var-200904-0794 | Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows rem… | 2024-07-23T20:27:48.713000Z |
| var-200708-0604 | The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and late… | 2024-07-23T20:27:48.307000Z |
| var-201601-0495 | Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x bef… | 2024-07-23T20:27:47.728000Z |
| var-200701-0340 | The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428… | 2024-07-23T20:27:11.499000Z |
| var-201912-0647 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:26:07.934000Z |
| var-201912-0542 | This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Moj… | 2024-07-23T20:26:04.490000Z |
| var-200309-0035 | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may… | 2024-07-23T20:26:04.438000Z |
| var-202110-1512 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS… | 2024-07-23T20:26:00.417000Z |
| var-200807-0062 | JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not pr… | 2024-07-23T20:26:00.063000Z |
| var-202210-1528 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-07-23T20:25:59.725000Z |
| var-202106-1921 | A security issue in nginx resolver was identified, which might allow an attacker who is a… | 2024-07-23T20:25:59.461000Z |
| var-202004-0983 | Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager… | 2024-07-23T20:25:59.004000Z |
| var-202201-0370 | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. The… | 2024-07-23T20:25:58.764000Z |
| var-202104-1571 | A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lea… | 2024-07-23T20:25:58.423000Z |
| var-201405-0543 | Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filter… | 2024-07-23T20:25:58.247000Z |
| var-200703-0025 | The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not suffici… | 2024-07-23T20:25:58.189000Z |
| var-202006-1838 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested… | 2024-07-23T20:25:57.515000Z |
| var-201304-0381 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:25:24.023000Z |