Recent vulnerabilities
Recent vulnerabilities from
Select from 70 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-43062 |
7.1 (3.1)
|
Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_re… |
Linux |
Linux |
2026-05-05T15:17:27.830Z | 2026-05-08T12:40:16.025Z |
| CVE-2026-43060 |
7.8 (3.1)
|
netfilter: nft_ct: drop pending enqueued packets on removal |
Linux |
Linux |
2026-05-05T15:17:26.393Z | 2026-05-08T12:40:14.866Z |
| CVE-2026-31731 |
7.8 (3.1)
|
thermal: core: Address thermal zone removal races with… |
Linux |
Linux |
2026-05-01T14:14:30.177Z | 2026-05-08T12:40:13.706Z |
| CVE-2026-31730 |
7.8 (3.1)
|
misc: fastrpc: possible double-free of cctx->remote_heap |
Linux |
Linux |
2026-05-01T14:14:29.522Z | 2026-05-08T12:40:12.536Z |
| CVE-2026-7448 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-05-06T06:47:21.950Z | 2026-05-08T12:25:55.615Z |
| CVE-2026-8090 |
7.3 (3.1)
|
Use-after-free in the DOM: Networking component |
Mozilla |
Firefox |
2026-05-07T12:45:04.609Z | 2026-05-08T12:19:00.246Z |
| CVE-2025-68900 |
6.5 (3.1)
|
WordPress Enfold theme <= 7.1.3 - Cross Site Scripting… |
Kriesi |
Enfold |
2026-01-22T16:52:12.531Z | 2026-05-08T12:14:13.616Z |
| CVE-2026-42275 |
8.7 (3.1)
|
zrok: WebDAV drive backend follows symlinks outside Dr… |
openziti |
zrok |
2026-05-08T03:45:57.209Z | 2026-05-08T12:13:21.216Z |
| CVE-2026-7475 |
6.4 (3.1)
|
Sky Addons <= 3.3.2 - Authenticated (Author+) Stored C… |
wowdevs |
Sky Addons – Elementor Addons with Widgets & Templates |
2026-05-08T09:26:47.644Z | 2026-05-08T12:12:36.653Z |
| CVE-2026-8117 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
SourceCodester Pizzafy Ecommerce System index.php cros… |
SourceCodester |
Pizzafy Ecommerce System |
2026-05-07T23:45:10.695Z | 2026-05-08T11:43:56.619Z |
| CVE-2026-8124 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
GPAC box_code_base.c sidx_box_read allocation of resources |
n/a |
GPAC |
2026-05-08T01:15:10.347Z | 2026-05-08T11:41:38.846Z |
| CVE-2026-8130 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
SourceCodester SUP Online Shopping message.php sql injection |
SourceCodester |
SUP Online Shopping |
2026-05-08T02:45:09.771Z | 2026-05-08T11:29:09.929Z |
| CVE-2026-41501 |
9.8 (3.1)
|
electerm has Command Injection Vulnerability via runLi… |
electerm |
electerm |
2026-05-08T02:51:10.144Z | 2026-05-08T11:19:54.297Z |
| CVE-2026-42273 |
7.8 (4.0)
|
Heimdall: Case-sensitive host matching may lead to pol… |
dadrus |
heimdall |
2026-05-08T03:42:50.312Z | 2026-05-08T10:40:56.541Z |
| CVE-2026-42279 |
5.8 (3.1)
|
solidtime: Time entry update endpoint allows cross-org… |
solidtime-io |
solidtime |
2026-05-08T03:57:31.727Z | 2026-05-08T10:38:51.086Z |
| CVE-2026-8138 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-… |
Tenda |
CX12L |
2026-05-08T04:15:10.228Z | 2026-05-08T10:35:06.800Z |
| CVE-2026-5341 |
6.4 (3.1)
|
NMR Strava activities <= 1.0.14 - Authenticated (Contr… |
mirceatm |
NMR Strava activities |
2026-05-08T09:26:47.283Z | 2026-05-08T10:15:32.703Z |
| CVE-2026-44742 |
7.2 (3.1)
|
Postorius through 1.3.13 does not escape HTML in … |
Postorius project |
Postorius |
2026-05-07T18:09:20.069Z | 2026-05-08T06:25:34.759Z |
| CVE-2025-69599 |
N/A
|
RayVentory Scan Engine through 12.6 Update 8 allo… |
n/a |
n/a |
2026-05-08T00:00:00.000Z | 2026-05-08T06:08:35.396Z |
| CVE-2025-67887 |
N/A
|
1C-Bitrix through 25.100.500 allows Remote Code E… |
n/a |
n/a |
2026-05-08T00:00:00.000Z | 2026-05-08T05:52:28.158Z |
| CVE-2026-5588 |
6.3 (4.0)
|
PKIX draft CompositeVerifier accepts empty signature s… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-04-15T09:06:15.617Z | 2026-05-08T05:29:40.247Z |
| CVE-2023-42346 |
N/A
|
Alkacon OpenCms before 16 allows XXE when the <!D… |
n/a |
n/a |
2026-05-08T00:00:00.000Z | 2026-05-08T04:46:17.859Z |
| CVE-2023-6371 |
8.7 (3.1)
|
Improper Neutralization of Input During Web Page Gener… |
GitLab |
GitLab |
2024-03-28T07:18:03.820Z | 2026-05-08T04:06:58.687Z |
| CVE-2023-3979 |
3.1 (3.1)
|
Incorrect Authorization in GitLab |
GitLab |
GitLab |
2023-09-29T06:02:06.310Z | 2026-05-08T04:06:39.092Z |
| CVE-2026-5787 |
8.9 (3.1)
|
An Improper Certificate Validation in Ivanti EPMM… |
Ivanti |
Endpoint Manager Mobile |
2026-05-07T15:36:41.179Z | 2026-05-08T03:55:49.014Z |
| CVE-2026-42011 |
7.4 (3.1)
|
Gnutls: gnutls: security bypass due to incorrect name … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-05-07T13:51:04.695Z | 2026-05-08T03:55:47.296Z |
| CVE-2026-41142 |
8.8 (3.1)
|
OpenEXR is Vulnerable to Integer overflow in ImageChan… |
AcademySoftwareFoundation |
openexr |
2026-05-07T03:58:09.483Z | 2026-05-08T03:55:43.209Z |
| CVE-2026-40171 |
8.4 (4.0)
|
Jupyter Notebook and JupyterLab token theft via stored… |
jupyter |
notebook |
2026-05-06T19:36:32.072Z | 2026-05-08T03:55:41.465Z |
| CVE-2026-5786 |
8.8 (3.1)
|
An Improper Access Control vulnerability in Ivant… |
Ivanti |
Endpoint Manager Mobile |
2026-05-07T15:18:54.437Z | 2026-05-08T03:55:39.897Z |
| CVE-2026-6973 |
7.2 (3.1)
|
An Improper Input Validation in Ivanti EPMM befor… |
Ivanti |
Endpoint Manager Mobile |
2026-05-07T15:21:24.849Z | 2026-05-08T03:55:38.232Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-43287 |
N/A
|
drm: Account property blob allocations to memcg |
Linux |
Linux |
2026-05-08T13:11:12.541Z | 2026-05-09T04:09:55.929Z |
| CVE-2026-43286 |
N/A
|
mm/hugetlb: restore failed global reservations to subpool |
Linux |
Linux |
2026-05-08T13:11:11.867Z | 2026-05-08T13:11:11.867Z |
| CVE-2026-43285 |
N/A
|
mm/slab: do not access current->mems_allowed_seq if !a… |
Linux |
Linux |
2026-05-08T13:11:11.191Z | 2026-05-08T13:11:11.191Z |
| CVE-2025-71302 |
N/A
|
drm/panthor: fix for dma-fence safe access rules |
Linux |
Linux |
2026-05-08T13:26:11.418Z | 2026-05-09T04:09:53.948Z |
| CVE-2025-71301 |
N/A
|
drm/tests: shmem: Hold reservation lock around vmap/vunmap |
Linux |
Linux |
2026-05-08T13:15:22.100Z | 2026-05-08T13:15:22.100Z |
| CVE-2025-71300 |
N/A
|
Revert "arm64: zynqmp: Add an OP-TEE node to the devic… |
Linux |
Linux |
2026-05-08T13:15:21.406Z | 2026-05-08T13:15:21.406Z |
| CVE-2025-71299 |
N/A
|
spi: cadence-quadspi: Parse DT for flashes with the re… |
Linux |
Linux |
2026-05-08T13:11:10.518Z | 2026-05-09T04:09:51.835Z |
| CVE-2025-71298 |
N/A
|
drm/tests: shmem: Hold reservation lock around madvise |
Linux |
Linux |
2026-05-08T13:11:09.797Z | 2026-05-08T13:11:09.797Z |
| CVE-2025-71297 |
N/A
|
wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_t… |
Linux |
Linux |
2026-05-08T13:11:09.120Z | 2026-05-09T04:09:49.481Z |
| CVE-2025-71296 |
N/A
|
drm/tests: shmem: Hold reservation lock around purge |
Linux |
Linux |
2026-05-08T13:11:08.251Z | 2026-05-08T13:11:08.251Z |
| CVE-2026-43018 |
8.8 (3.1)
|
Bluetooth: hci_event: fix potential UAF in hci_le_remo… |
Linux |
Linux |
2026-05-01T14:15:22.308Z | 2026-05-03T05:46:05.696Z |
| CVE-2026-43017 |
N/A
|
Bluetooth: MGMT: validate mesh send advertising payloa… |
Linux |
Linux |
2026-05-01T14:15:21.561Z | 2026-05-01T14:15:21.561Z |
| CVE-2025-46605 |
6.2 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain |
2026-04-17T11:27:24.378Z | 2026-04-20T14:06:10.099Z |
| CVE-2025-46606 |
6.2 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain |
2026-04-17T11:36:54.469Z | 2026-04-18T03:55:33.318Z |
| CVE-2026-43045 |
N/A
|
mshv: Fix error handling in mshv_region_pin |
Linux |
Linux |
2026-05-01T14:15:40.976Z | 2026-05-02T06:14:30.662Z |
| CVE-2026-43046 |
N/A
|
btrfs: reject root items with drop_progress and zero d… |
Linux |
Linux |
2026-05-01T14:15:41.849Z | 2026-05-02T06:14:31.818Z |
| CVE-2026-43047 |
7.8 (3.1)
|
HID: multitouch: Check to ensure report responses matc… |
Linux |
Linux |
2026-05-01T14:15:42.562Z | 2026-05-03T05:46:22.203Z |
| CVE-2026-7448 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-05-06T06:47:21.950Z | 2026-05-08T12:25:55.615Z |
| CVE-2026-43258 |
7.8 (3.1)
|
alpha: fix user-space corruption during memory compaction |
Linux |
Linux |
2026-05-06T11:28:46.536Z | 2026-05-08T12:41:39.777Z |
| CVE-2026-43256 |
7.8 (3.1)
|
media: qcom: camss: vfe: Fix out-of-bounds access in v… |
Linux |
Linux |
2026-05-06T11:28:45.209Z | 2026-05-08T12:41:38.588Z |
| CVE-2026-43254 |
7.5 (3.1)
|
ovpn: tcp - fix packet extraction from stream |
Linux |
Linux |
2026-05-06T11:28:43.871Z | 2026-05-08T12:41:37.366Z |
| CVE-2026-43253 |
7.5 (3.1)
|
iommu/amd: move wait_on_sem() out of spinlock |
Linux |
Linux |
2026-05-06T11:28:43.160Z | 2026-05-08T12:41:36.238Z |
| CVE-2026-43249 |
8.8 (3.1)
|
9p/xen: protect xen_9pfs_front_free against concurrent calls |
Linux |
Linux |
2026-05-06T11:28:40.290Z | 2026-05-08T12:41:35.086Z |
| CVE-2026-43248 |
7.8 (3.1)
|
vhost: move vdpa group bound check to vhost_vdpa |
Linux |
Linux |
2026-05-06T11:28:39.578Z | 2026-05-08T12:41:33.946Z |
| CVE-2026-43245 |
7.5 (3.1)
|
ntfs: ->d_compare() must not block |
Linux |
Linux |
2026-05-06T11:28:37.602Z | 2026-05-08T12:41:32.781Z |
| CVE-2026-43239 |
8.8 (3.1)
|
smb: client: prevent races in ->query_interfaces() |
Linux |
Linux |
2026-05-06T11:28:33.623Z | 2026-05-08T12:41:31.628Z |
| CVE-2026-43237 |
7.8 (3.1)
|
drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling … |
Linux |
Linux |
2026-05-06T11:28:32.300Z | 2026-05-08T12:41:30.455Z |
| CVE-2026-43236 |
7.8 (3.1)
|
drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit… |
Linux |
Linux |
2026-05-06T11:28:31.543Z | 2026-05-08T12:41:29.330Z |
| CVE-2026-43233 |
8.2 (3.1)
|
netfilter: nf_conntrack_h323: fix OOB read in decode_c… |
Linux |
Linux |
2026-05-06T11:28:29.565Z | 2026-05-08T12:41:28.161Z |
| CVE-2026-43232 |
8.8 (3.1)
|
net: wan: farsync: Fix use-after-free bugs caused by u… |
Linux |
Linux |
2026-05-06T11:28:28.910Z | 2026-05-08T12:41:27.008Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-43253 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() … | 2026-05-06T12:16:46.033 | 2026-05-08T13:16:47.593 |
| fkie_cve-2026-43249 | In the Linux kernel, the following vulnerability has been resolved: 9p/xen: protect xen_9pfs_front… | 2026-05-06T12:16:45.493 | 2026-05-08T13:16:47.450 |
| fkie_cve-2026-43248 | In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound c… | 2026-05-06T12:16:45.380 | 2026-05-08T13:16:47.337 |
| fkie_cve-2026-43245 | In the Linux kernel, the following vulnerability has been resolved: ntfs: ->d_compare() must not b… | 2026-05-06T12:16:44.997 | 2026-05-08T13:16:47.227 |
| fkie_cve-2026-43239 | In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in … | 2026-05-06T12:16:44.217 | 2026-05-08T13:16:47.113 |
| fkie_cve-2026-43237 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Refactor amdgpu_ge… | 2026-05-06T12:16:43.960 | 2026-05-08T13:16:46.983 |
| fkie_cve-2026-43236 | In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix use-after… | 2026-05-06T12:16:43.817 | 2026-05-08T13:16:46.843 |
| fkie_cve-2026-43233 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: … | 2026-05-06T12:16:43.417 | 2026-05-08T13:16:46.703 |
| fkie_cve-2026-43232 | In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-aft… | 2026-05-06T12:16:43.223 | 2026-05-08T13:16:46.530 |
| fkie_cve-2026-43215 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tc… | 2026-05-06T12:16:41.063 | 2026-05-08T13:16:45.983 |
| fkie_cve-2026-43214 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection … | 2026-05-06T12:16:40.920 | 2026-05-08T13:16:45.853 |
| fkie_cve-2026-43213 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate seq… | 2026-05-06T12:16:40.803 | 2026-05-08T13:16:45.737 |
| fkie_cve-2026-43212 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Make cpumask_of_nod… | 2026-05-06T12:16:40.687 | 2026-05-08T13:16:45.620 |
| fkie_cve-2026-43211 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() er… | 2026-05-06T12:16:40.527 | 2026-05-08T13:16:45.480 |
| fkie_cve-2026-43208 | In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to se… | 2026-05-06T12:16:40.170 | 2026-05-08T13:16:45.370 |
| fkie_cve-2026-43207 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error hand… | 2026-05-06T12:16:40.037 | 2026-05-08T13:16:45.247 |
| fkie_cve-2026-43206 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds … | 2026-05-06T12:16:39.903 | 2026-05-08T13:16:45.117 |
| fkie_cve-2026-43203 | In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-f… | 2026-05-06T12:16:39.477 | 2026-05-08T13:16:44.980 |
| fkie_cve-2026-43199 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix "scheduling whi… | 2026-05-06T12:16:38.970 | 2026-05-08T13:16:44.860 |
| fkie_cve-2026-43198 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp… | 2026-05-06T12:16:38.857 | 2026-05-08T13:16:44.747 |
| fkie_cve-2026-43197 | In the Linux kernel, the following vulnerability has been resolved: netconsole: avoid OOB reads, m… | 2026-05-06T12:16:38.740 | 2026-05-08T13:16:44.630 |
| fkie_cve-2026-43194 | In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GS… | 2026-05-06T12:16:38.310 | 2026-05-08T13:16:44.460 |
| fkie_cve-2026-43190 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check re… | 2026-05-06T12:16:37.843 | 2026-05-08T13:16:44.320 |
| fkie_cve-2026-43187 | In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap … | 2026-05-06T12:16:37.440 | 2026-05-08T13:16:43.083 |
| fkie_cve-2026-43186 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer ov… | 2026-05-06T12:16:37.300 | 2026-05-08T13:16:42.557 |
| fkie_cve-2026-43185 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in… | 2026-05-06T12:16:37.187 | 2026-05-08T13:16:42.423 |
| fkie_cve-2026-43184 | In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer … | 2026-05-06T12:16:37.053 | 2026-05-08T13:16:42.257 |
| fkie_cve-2026-43180 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: remove TX qu… | 2026-05-06T12:16:36.533 | 2026-05-08T13:16:42.107 |
| fkie_cve-2026-43178 | In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mm… | 2026-05-06T12:16:36.303 | 2026-05-08T13:16:42.000 |
| fkie_cve-2026-43176 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate rel… | 2026-05-06T12:16:36.083 | 2026-05-08T13:16:41.887 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-f77h-j2v7-g6mw |
5.4 (3.1)
6.3 (4.0)
|
n8n Vulnerable to Hijacking of Unauthenticated Chat Execution | 2026-04-29T21:17:44Z | 2026-05-08T01:31:09Z |
| ghsa-mp4j-h6gh-f6mp |
6.8 (3.1)
5.3 (4.0)
|
n8n has SQL Injection in SeaTable Node | 2026-04-29T21:10:58Z | 2026-05-08T01:30:50Z |
| ghsa-f6x8-65q6-j9m9 |
4.7 (3.1)
5.1 (4.0)
|
n8n has Open Redirect in MCP OAuth Consent Flow | 2026-04-29T21:10:17Z | 2026-05-08T01:30:46Z |
| ghsa-r6jc-mpqw-m755 |
9.8 (3.1)
5.3 (4.0)
|
n8n has SQL Injection in Oracle Database Node via Limit Field | 2026-04-29T21:08:27Z | 2026-05-08T01:30:42Z |
| ghsa-hp3c-vfpm-q4f7 |
8.2 (3.1)
5.3 (4.0)
|
n8n has SQL Injection in Snowflake and MySQL Nodes | 2026-04-29T21:03:29Z | 2026-05-08T01:30:35Z |
| ghsa-p7fg-763f-g4gf |
4.8 (4.0)
|
Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool | 2026-04-29T22:28:12Z | 2026-05-08T01:30:32Z |
| ghsa-3gxm-wfjx-m847 |
6.0 (4.0)
|
beets has a Cross-site Scripting vulnerability | 2026-04-29T18:29:00Z | 2026-05-08T01:25:19Z |
| ghsa-grj5-jjm8-h35p |
9.8 (3.1)
|
VM2 Sandbox Breakout Through __lookupGetter__ | 2026-05-04T16:29:15Z | 2026-05-08T01:25:03Z |
| ghsa-9gh9-hwpr-rvqq |
7.0 (3.1)
|
uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition | 2026-04-22T18:31:45Z | 2026-05-08T01:24:58Z |
| ghsa-wmjr-v86c-m9jj |
2.0 (4.0)
|
Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions | 2025-11-26T22:11:50Z | 2026-05-08T01:19:47Z |
| ghsa-mr34-9552-qr95 |
5.8 (3.1)
6.3 (4.0)
|
OpenClaw: Webchat media embedding enforces local-root containment for tool-result files | 2026-04-17T22:33:09Z | 2026-05-08T01:13:04Z |
| ghsa-mcvf-jxcw-vj73 |
6.1 (3.1)
|
CKAN has CSRF exemption primed by anonymous requests | 2026-04-29T20:36:07Z | 2026-05-08T00:39:54Z |
| ghsa-m8jc-jjj9-hgc8 |
7.3 (3.1)
|
This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an… | 2026-05-08T00:31:35Z | 2026-05-08T00:31:35Z |
| ghsa-h65h-28xw-w79q |
6.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in huangjunsen0406 xiaozhi-mcphub up to 1.0.3. This vulnerability af… | 2026-05-08T00:31:35Z | 2026-05-08T00:31:35Z |
| ghsa-935g-9rq5-q95c |
5.3 (3.1)
5.5 (4.0)
|
A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an un… | 2026-05-08T00:31:35Z | 2026-05-08T00:31:35Z |
| ghsa-6f56-6pvf-gp4j |
4.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This iss… | 2026-05-08T00:31:35Z | 2026-05-08T00:31:35Z |
| ghsa-xqmx-3vx6-fm88 |
5.9 (4.0)
|
A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management … | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-w548-vv26-rff6 |
7.9 (4.0)
|
A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server n… | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-rrf3-mgv7-cw6m |
9.3 (4.0)
|
The VerySecureApp made by DIVD using Mendix Studio Pro 11.8.0 Beta allows unintended data exposure … | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-q253-8qxh-gx79 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affec… | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-pghv-w792-qvjg |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown fun… | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-h86r-7gjv-6c7v |
4.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f. … | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-gmwx-3xm2-9fx8 |
10.0 (3.1)
|
Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized a… | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-96jg-8w8q-qmmc |
8.1 (3.1)
|
Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to e… | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-8rhw-hq84-rcq7 |
5.3 (3.1)
6.9 (4.0)
|
Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that a… | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-8hhx-w7p5-q47g |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-3738-jvgh-jh3h |
6.3 (4.0)
|
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauth… | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-2gcr-p5w4-5hh8 |
6.3 (4.0)
|
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an u… | 2026-05-08T00:31:34Z | 2026-05-08T00:31:34Z |
| ghsa-w6p3-2c62-jm2g |
9.6 (3.1)
|
Improper authorization in Microsoft Teams allows an authorized attacker to disclose information ove… | 2026-05-08T00:31:33Z | 2026-05-08T00:31:33Z |
| ghsa-v3vj-8337-2gq4 |
9.0 (3.1)
|
Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attac… | 2026-05-08T00:31:33Z | 2026-05-08T00:31:33Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-105 |
|
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an atta… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-12T12:59:56.733680+00:00 |
| pysec-2023-104 |
|
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an atta… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-12T12:59:56.649145+00:00 |
| pysec-2023-103 |
|
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unau… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-12T12:59:56.564522+00:00 |
| pysec-2023-100 |
|
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and UR… | django | 2023-07-03T13:15:00+00:00 | 2023-07-11T16:37:11.407533+00:00 |
| pysec-2023-99 |
|
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary… | pipreqs | 2023-06-30T20:15:00+00:00 | 2023-07-10T18:33:06.804092+00:00 |
| pysec-2023-97 |
|
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnera… | easy-parse | 2023-06-29T21:15:00+00:00 | 2023-07-07T02:41:36.549732+00:00 |
| pysec-2023-96 |
|
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vuln… | requests-xml | 2023-06-29T21:15:00+00:00 | 2023-07-06T22:29:19.818007+00:00 |
| pysec-2023-95 |
|
py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerabilit… | py-xml | 2023-06-29T21:15:00+00:00 | 2023-07-06T22:29:19.184837+00:00 |
| pysec-2022-43052 |
|
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… | request-util | 2022-03-01T21:15:00+00:00 | 2023-07-03T20:33:00+00:00 |
| pysec-2022-43051 |
|
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… | pyquest | 2022-03-01T21:15:00+00:00 | 2023-07-03T20:33:00+00:00 |
| pysec-2023-94 |
|
Flask-AppBuilder is an application development framework, built on top of Flask. Prior to… | flask-appbuilder | 2023-06-22T23:15:00+00:00 | 2023-07-03T20:28:23.811646+00:00 |
| pysec-2023-93 |
|
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly … | pacparser | 2023-06-30T18:15:00+00:00 | 2023-06-30T20:25:46.450877+00:00 |
| pysec-2023-73 |
|
redis-7.0.10 was discovered to contain a segmentation violation. | redis | 2023-05-18T20:15:00Z | 2023-06-27T18:49:56.911238Z |
| pysec-2020-221 |
|
A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no … | ansible | 2020-10-05T13:15:00Z | 2023-06-22T16:29:43.777510Z |
| pysec-2023-90 |
|
Gradio is an open-source Python library that is used to build machine learning and data s… | gradio | 2023-06-08T00:15:00Z | 2023-06-21T05:27:13.352872Z |
| pysec-2023-89 |
|
In Apache Airflow, some potentially sensitive values were being shown to the user in cert… | apache-airflow | 2023-06-19T09:15:00Z | 2023-06-19T10:29:28.607914Z |
| pysec-2023-88 |
|
The Snowflake Connector for Python provides an interface for developing Python applicatio… | snowflake-connector-python | 2023-06-08T21:15:00Z | 2023-06-16T18:28:10.272383Z |
| pysec-2023-81 |
|
A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. T… | mindspore | 2023-05-30T06:16:00Z | 2023-06-16T08:29:55.937187Z |
| pysec-2023-87 |
|
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL p… | sqlparse | 2023-04-18T22:15:00Z | 2023-06-14T20:24:17.342510Z |
| pysec-2023-86 |
|
OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) w… | owslib | 2023-03-08T00:15:00Z | 2023-06-14T18:28:54.683011Z |
| pysec-2023-85 |
|
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A d… | matrix-synapse | 2023-06-06T19:15:00Z | 2023-06-13T20:24:13.764030Z |
| pysec-2023-84 |
|
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In … | matrix-synapse | 2023-06-06T19:15:00Z | 2023-06-13T18:28:46.812103Z |
| pysec-2023-83 |
|
Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.2… | starlette | 2023-06-01T02:15:00Z | 2023-06-08T05:25:54.818459Z |
| pysec-2023-82 |
|
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail… | django-ses | 2023-05-26T21:15:00Z | 2023-06-06T20:23:42.892470Z |
| pysec-2023-80 |
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contract… | vyper | 2023-05-19T20:15:00Z | 2023-06-05T01:13:03.140034Z |
| pysec-2023-79 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T22:15:00Z | 2023-06-05T01:13:03.051477Z |
| pysec-2023-78 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T21:15:00Z | 2023-06-05T01:13:02.949990Z |
| pysec-2023-77 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T21:15:00Z | 2023-06-05T01:13:02.500642Z |
| pysec-2023-76 |
|
Vyper is a pythonic smart contract language for the EVM. The storage allocator does not g… | vyper | 2023-05-08T17:15:00Z | 2023-06-05T01:13:02.407312Z |
| pysec-2023-75 |
|
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthe… | tornado | 2023-05-25T10:15:00Z | 2023-06-05T01:13:01.694311Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33223 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.706662Z |
| gsd-2024-33222 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.760715Z |
| gsd-2024-33221 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.715064Z |
| gsd-2024-33220 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.721987Z |
| gsd-2024-33219 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.661517Z |
| gsd-2024-33218 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.711814Z |
| gsd-2024-33217 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.720970Z |
| gsd-2024-33216 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.717949Z |
| gsd-2024-33215 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.748476Z |
| gsd-2024-33214 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.710943Z |
| gsd-2024-33213 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.735466Z |
| gsd-2024-33212 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.727129Z |
| gsd-2024-33211 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.635754Z |
| gsd-2024-33210 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.762839Z |
| gsd-2024-33209 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700226Z |
| gsd-2024-33208 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.752907Z |
| gsd-2024-33207 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.707334Z |
| gsd-2024-33206 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.742097Z |
| gsd-2024-33205 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.677776Z |
| gsd-2024-33204 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612720Z |
| gsd-2024-33203 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612515Z |
| gsd-2024-33202 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.617718Z |
| gsd-2024-33201 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.690170Z |
| gsd-2024-33200 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.713644Z |
| gsd-2024-33199 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.657538Z |
| gsd-2024-33198 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.684409Z |
| gsd-2024-33197 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.664646Z |
| gsd-2024-33196 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.637713Z |
| gsd-2024-33195 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.746132Z |
| gsd-2024-33194 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.603987Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2637 | Malicious code in apmfe (npm) | 2026-04-14T11:47:13Z | 2026-04-23T20:50:49Z |
| mal-2026-2631 | Malicious code in babel-plugin-blocks (npm) | 2026-04-13T06:13:49Z | 2026-04-23T20:50:49Z |
| mal-2026-2599 | Malicious code in ccn-common-react-library (npm) | 2026-04-13T15:25:20Z | 2026-04-23T20:50:49Z |
| mal-2026-2598 | Malicious code in babel-plugin-fbtee (npm) | 2026-04-13T15:25:20Z | 2026-04-23T20:50:49Z |
| mal-2026-2597 | Malicious code in @zgny/onboarding-consumer (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2596 | Malicious code in @spreadjs/js-calc (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2595 | Malicious code in @sports-api/api-sdk (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2594 | Malicious code in @spoonflower/ui (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2593 | Malicious code in @sage-active/ui (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2592 | Malicious code in @relxui/react (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2591 | Malicious code in @pes-ui/components (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2590 | Malicious code in @op-microfrontends/config (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2589 | Malicious code in @mx-shared/utils (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2588 | Malicious code in @lamoda/seller-ui-kit (npm) | 2026-04-10T12:56:44Z | 2026-04-23T20:50:49Z |
| mal-2026-2587 | Malicious code in @kucoin-gbiz-next/tools (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2586 | Malicious code in @ids-alpha/theme (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2585 | Malicious code in @hrb-web/nuxt (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2584 | Malicious code in @hpcc/js-api (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2583 | Malicious code in @hmm-app/api (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2582 | Malicious code in @guards-lib/auth (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2581 | Malicious code in @dtc-campaign-wizard/campaign-wizard (npm) | 2026-04-13T15:25:22Z | 2026-04-23T20:50:49Z |
| mal-2026-2580 | Malicious code in @cash-web/no-hardcoded-font-styles (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2579 | Malicious code in @bookiply/core (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2578 | Malicious code in @bokehjs/core (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2577 | Malicious code in @b2b-portal/kit (npm) | 2026-04-13T15:14:10Z | 2026-04-23T20:50:49Z |
| mal-2026-2576 | Malicious code in @b2b-portal/core (npm) | 2026-04-13T15:14:10Z | 2026-04-23T20:50:49Z |
| mal-2026-2575 | Malicious code in @ascend-ops/web-client (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2574 | Malicious code in @amplify-js/datastore (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2573 | Malicious code in @aircall-ecosystem/integrations-msteams-frontend (npm) | 2026-04-13T15:25:21Z | 2026-04-23T20:50:49Z |
| mal-2026-2560 | Malicious code in @b2b-portal/uch (npm) | 2026-04-11T17:55:17Z | 2026-04-23T20:50:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-1431 | Siemens SICAM: Mehrere Schwachstellen | 2023-06-12T22:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2025-1962 | Google Cloud Platform Looker Studio: Mehrere Schwachstellen | 2025-09-03T22:00:00.000+00:00 | 2025-11-10T23:00:00.000+00:00 |
| wid-sec-w-2025-2109 | Autodesk Produkte: Schwachstelle ermöglicht Codeausführung | 2025-09-22T22:00:00.000+00:00 | 2025-11-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2307 | Microsoft Windows: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2416 | Proxmox Backup Server: Mehrere Schwachstellen | 2025-10-26T23:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2058 | Apple Safari: Mehrere Schwachstellen | 2025-09-15T22:00:00.000+00:00 | 2025-11-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2445 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2334 | Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen | 2025-10-16T22:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2444 | Dell Secure Connect Gateway: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2427 | strongSwan (eap-mschapv2 plugin): Schwachstelle ermöglicht Codeausführung und DoS | 2025-10-27T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2403 | Ubiquiti UniFi: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2398 | Moxa Switch: Mehrere Schwachstellen | 2025-10-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2375 | Google Chrome: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-10-21T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2344 | Checkmk: Schwachstelle ermöglicht Cross-Site Scripting | 2025-10-20T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2339 | ImageMagick (BMP decoder): Schwachstelle ermöglicht Denial of Service | 2025-10-19T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2317 | Ubiquiti UniFi: Schwachstelle ermöglicht Ausführung von Debug-Funktionen | 2025-10-15T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2274 | Veeam Backup & Replication: Mehrere Schwachstellen | 2025-10-13T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2247 | Nvidia GPU Display Treiber: Mehrere Schwachstellen | 2025-10-08T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2132 | Linux Kernel: Mehrere Schwachstellen | 2025-09-24T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2114 | Dell PowerEdge BIOS und iDRAC9: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-1921 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-08-27T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2440 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2015-11-22T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2395 | Rancher Manager: Mehrere Schwachstellen | 2025-10-23T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2390 | PowerDNS Recursor: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-10-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2385 | Drupal Module: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2275 | Mozilla Firefox: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2126 | Drupal Module: Mehrere Schwachstellen | 2025-09-24T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1954 | Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1785 | Intel Prozessoren: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1656 | Red Hat Enterprise Linux (unbound): Schwachstelle ermöglicht Manipulation von Daten | 2025-07-27T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-15-055-01 | Software Toolbox Top Server Resource Exhaustion Vulnerability | 2015-11-27T07:00:00.000000Z | 2025-06-06T22:35:20.530492Z |
| icsa-15-050-01a | Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities (Update A) | 2015-11-22T07:00:00.000000Z | 2025-06-06T22:35:07.394617Z |
| icsa-15-048-03 | Yokogawa HART Device DTM Vulnerability | 2015-11-20T07:00:00.000000Z | 2025-06-06T22:35:00.882056Z |
| icsa-15-048-02 | Siemens SIMATIC WinCC TIA Portal Vulnerabilities | 2015-11-20T07:00:00.000000Z | 2025-06-06T22:34:47.839959Z |
| icsa-15-048-01 | Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities | 2015-11-20T07:00:00.000000Z | 2025-06-06T22:34:34.894563Z |
| icsa-15-041-02 | GE Hydran M2 Predictable TCP Initial Sequence Vulnerability | 2015-11-13T07:00:00.000000Z | 2025-06-06T22:34:28.440832Z |
| icsa-15-036-02 | Pepperl+Fuchs Hart Device DTM Vulnerability | 2015-11-08T07:00:00.000000Z | 2025-06-06T22:34:21.972701Z |
| icsa-15-036-01a | GE and MACTek HART Device DTM Vulnerability (Update A) | 2015-11-08T07:00:00.000000Z | 2025-06-06T22:34:15.524601Z |
| icsa-15-034-02 | Siemens Ruggedcom WIN Vulnerability | 2015-11-06T07:00:00.000000Z | 2025-06-06T22:33:56.150269Z |
| icsa-15-029-01 | Honeywell HART DTM Vulnerability | 2015-11-01T06:00:00.000000Z | 2025-06-06T22:33:43.213614Z |
| icsa-15-027-01 | Magnetrol HART DTM Vulnerability | 2015-10-30T06:00:00.000000Z | 2025-06-06T22:33:36.757982Z |
| icsa-15-022-01 | Siemens SIMATIC S7-1200 CPU Web Vulnerability | 2015-10-25T06:00:00.000000Z | 2025-06-06T22:33:30.307653Z |
| icsa-15-020-02 | Schneider Electric ETG3000 FactoryCast HMI Gateway Vulnerabilities | 2015-10-23T06:00:00.000000Z | 2025-06-06T22:33:17.373978Z |
| icsa-15-020-01 | Siemens SCALANCE X-300/X408 Switch Family DOS Vulnerabilities | 2015-10-23T06:00:00.000000Z | 2025-06-06T22:33:04.402280Z |
| icsa-15-013-04a | GE Multilink Switch Vulnerabilities (Update A) | 2015-10-16T06:00:00.000000Z | 2025-06-06T22:32:44.963520Z |
| icsa-15-013-03 | Phoenix Contact Software ProConOs and MultiProg Authentication Vulnerability | 2015-10-16T06:00:00.000000Z | 2025-06-06T22:32:38.508014Z |
| icsa-15-013-02 | Clorius Controls A/S ISC SCADA Insecure Java Client Web Authentication | 2015-10-16T06:00:00.000000Z | 2025-06-06T22:32:32.033557Z |
| icsa-15-013-01 | Siemens SIMATIC WinCC Sm@rtClient iOS Application Authentication Vulnerabilities | 2015-10-16T06:00:00.000000Z | 2025-06-06T22:32:12.568337Z |
| icsa-15-012-01c | CodeWrights GmbH HART Device DTM Vulnerability (Update C) | 2015-10-15T06:00:00.000000Z | 2025-06-06T22:32:06.053252Z |
| icsa-15-012-01b | CodeWrights GmbH HART DTM Vulnerability (Update B) | 2015-10-15T06:00:00.000000Z | 2025-06-06T22:31:59.580273Z |
| icsa-15-012-01a | CodeWrights GmbH HART DTM Vulnerability (Update A) | 2015-10-15T06:00:00.000000Z | 2025-06-06T22:31:53.116696Z |
| icsa-15-012-01 | CodeWrights GmbH HART DTM Vulnerability | 2015-10-15T06:00:00.000000Z | 2025-06-06T22:31:46.333944Z |
| icsa-12-129-01 | WellinTech KingSCADA Insecure Password Encryption | 2012-02-09T07:00:00.000000Z | 2025-06-06T21:45:26.636405Z |
| icsa-12-122-01 | WellinTech KingView DLL Hijack Vulnerability | 2012-02-02T07:00:00.000000Z | 2025-06-06T21:45:20.208792Z |
| icsa-12-102-05 | Siemens Scalance S Multiple Security Vulnerabilities | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:45:13.758298Z |
| icsa-12-102-04 | Siemens Scalance X Buffer Overflow Vulnerability | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:45:07.306451Z |
| icsa-12-102-03 | MICROSYS PROMOTIC Use After Free Vulnerability | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:45:00.844061Z |
| icsa-12-102-02 | Koyo Ecom Modules Vulnerabilities | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:44:54.405200Z |
| icsa-12-102-01 | Certec atvise webMI2ADS Vulnerabilities | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:44:47.952815Z |
| icsa-12-095-01a | ABB Multiple Components Buffer Overflow | 2012-01-06T07:00:00.000000Z | 2025-06-06T21:44:41.492952Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cucm-injection-g6MbwH2 | Cisco Unified Communications Manager SQL Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-imp-xss-qtt4vdsk | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-imp-xss-QtT4VdsK | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-clamav-dos-ftkhqmwz | ClamAV AutoIt Module Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-clamav-dos-FTkhqMWZ | ClamAV AutoIt Module Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ac-leak-sew6g2kd | Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client | 2023-08-08T15:00:00+00:00 | 2023-08-08T15:00:00+00:00 |
| cisco-sa-ac-leak-Sew6g2kd | Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client | 2023-08-08T15:00:00+00:00 | 2023-08-08T15:00:00+00:00 |
| cisco-sa-ucm-file-read-h8h4hej3 | Cisco Unified Communications Products Arbitrary File Read Vulnerability | 2022-04-20T16:00:00+00:00 | 2023-08-02T20:18:45+00:00 |
| cisco-sa-ucm-file-read-h8h4HEJ3 | Cisco Unified Communications Products Arbitrary File Read Vulnerability | 2022-04-20T16:00:00+00:00 | 2023-08-02T20:18:45+00:00 |
| cisco-sa-asaftd-aclconfig-wvk52f3z | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ACLs Not Installed upon Reload | 2023-07-27T16:00:00+00:00 | 2023-07-27T16:38:54+00:00 |
| cisco-sa-asaftd-aclconfig-wVK52f3z | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ACLs Not Installed upon Reload | 2023-07-27T16:00:00+00:00 | 2023-07-27T16:38:54+00:00 |
| cisco-sa-bw-priv-esc-qtguzosq | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-19T16:00:00+00:00 | 2023-07-20T17:42:21+00:00 |
| cisco-sa-bw-priv-esc-qTgUZOsQ | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-19T16:00:00+00:00 | 2023-07-20T17:42:21+00:00 |
| cisco-sa-spa-web-multi-7kvpmu2f | Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities | 2023-07-19T16:00:00+00:00 | 2023-07-19T16:00:00+00:00 |
| cisco-sa-spa-web-multi-7kvPmu2F | Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities | 2023-07-19T16:00:00+00:00 | 2023-07-19T16:00:00+00:00 |
| cisco-sa-vmanage-unauthapi-sphCLYPA | Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability | 2023-07-12T16:00:00+00:00 | 2024-03-12T18:21:23+00:00 |
| cisco-sa-esa-sma-wsa-xss-cp9duemq | Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities | 2023-06-21T16:00:00+00:00 | 2023-07-11T16:43:10+00:00 |
| cisco-sa-esa-sma-wsa-xss-cP9DuEmq | Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities | 2023-06-21T16:00:00+00:00 | 2023-07-11T16:43:10+00:00 |
| cisco-sa-aci-cloudsec-enc-Vs5Wn2sX | Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2026-04-24T13:05:36+00:00 |
| cisco-sa-duo-auth-info-jgkswblz | Cisco Duo Authentication Proxy Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-07T15:45:19+00:00 |
| cisco-sa-duo-auth-info-JgkSWBLz | Cisco Duo Authentication Proxy Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-07T15:45:19+00:00 |
| cisco-sa-ac-csc-privesc-wx4u4kw | Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-07-05T16:20:46+00:00 |
| cisco-sa-ac-csc-privesc-wx4U4Kw | Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-07-05T16:20:46+00:00 |
| cisco-sa-sxsscsrf-2l24bbx6 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-sxsscsrf-2L24bBx6 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-bw-privesc-yw4ekrxw | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-bw-privesc-yw4ekrXW | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-duo-replay-knunkd | Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-06-23T16:48:56+00:00 |
| cisco-sa-duo-replay-knuNKd | Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-06-23T16:48:56+00:00 |
| cisco-sa-duo-mac-bypass-oyzpvpnx | Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability | 2023-06-21T16:00:00+00:00 | 2023-06-21T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-23407 | apparmor: fix missing bounds check on DEFAULT table in verify_dfa() | 2026-04-02T00:00:00.000Z | 2026-04-27T14:42:05.000Z |
| msrc_cve-2026-23405 | apparmor: fix: limit the number of levels of policy namespaces | 2026-04-02T00:00:00.000Z | 2026-04-27T14:42:00.000Z |
| msrc_cve-2026-23404 | apparmor: replace recursive profile removal with iterative approach | 2026-04-02T00:00:00.000Z | 2026-04-27T14:41:54.000Z |
| msrc_cve-2026-23403 | apparmor: fix memory leak in verify_header | 2026-04-02T00:00:00.000Z | 2026-04-27T14:41:48.000Z |
| msrc_cve-2026-23398 | icmp: fix NULL pointer dereference in icmp_tag_validation() | 2026-03-02T00:00:00.000Z | 2026-04-27T14:41:31.000Z |
| msrc_cve-2026-23397 | nfnetlink_osf: validate individual option lengths in fingerprints | 2026-03-02T00:00:00.000Z | 2026-04-27T14:41:26.000Z |
| msrc_cve-2026-23396 | wifi: mac80211: fix NULL deref in mesh_matches_local() | 2026-03-02T00:00:00.000Z | 2026-04-27T14:41:20.000Z |
| msrc_cve-2026-23392 | netfilter: nf_tables: release flowtable after rcu grace period on error | 2026-03-02T00:00:00.000Z | 2026-04-27T14:41:09.000Z |
| msrc_cve-2026-23382 | HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them | 2026-03-02T00:00:00.000Z | 2026-04-27T14:40:57.000Z |
| msrc_cve-2026-23381 | net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled | 2026-03-02T00:00:00.000Z | 2026-04-27T14:40:51.000Z |
| msrc_cve-2026-23379 | net/sched: ets: fix divide by zero in the offload path | 2026-03-02T00:00:00.000Z | 2026-04-27T14:40:45.000Z |
| msrc_cve-2026-23370 | platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data | 2026-03-02T00:00:00.000Z | 2026-04-27T14:40:10.000Z |
| msrc_cve-2026-23368 | net: phy: register phy led_triggers during probe to avoid AB-BA deadlock | 2026-03-02T00:00:00.000Z | 2026-04-27T14:40:05.000Z |
| msrc_cve-2026-23367 | wifi: radiotap: reject radiotap with unknown bits | 2026-03-02T00:00:00.000Z | 2026-04-27T14:39:58.000Z |
| msrc_cve-2026-23365 | net: usb: kalmia: validate USB endpoints | 2026-03-02T00:00:00.000Z | 2026-04-27T14:39:53.000Z |
| msrc_cve-2026-23362 | can: bcm: fix locking for bcm_op runtime updates | 2026-03-02T00:00:00.000Z | 2026-04-27T14:39:42.000Z |
| msrc_cve-2026-23359 | bpf: Fix stack-out-of-bounds write in devmap | 2026-03-02T00:00:00.000Z | 2026-04-27T14:39:24.000Z |
| msrc_cve-2026-23357 | can: mcp251x: fix deadlock in error path of mcp251x_open | 2026-03-02T00:00:00.000Z | 2026-04-27T14:39:19.000Z |
| msrc_cve-2026-23356 | drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() | 2026-03-02T00:00:00.000Z | 2026-04-27T14:39:13.000Z |
| msrc_cve-2026-23352 | x86/efi: defer freeing of boot services memory | 2026-03-02T00:00:00.000Z | 2026-04-27T14:39:08.000Z |
| msrc_cve-2026-23351 | netfilter: nft_set_pipapo: split gc into unlink and reclaim phase | 2026-03-02T00:00:00.000Z | 2026-04-27T14:38:56.000Z |
| msrc_cve-2026-23348 | cxl: Fix race of nvdimm_bus object when creating nvdimm objects | 2026-03-02T00:00:00.000Z | 2026-04-27T14:38:45.000Z |
| msrc_cve-2026-32202 | Windows Shell Spoofing Vulnerability | 2026-04-14T07:00:00.000Z | 2026-04-27T07:00:00.000Z |
| msrc_cve-2026-23447 | net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check | 2026-04-02T00:00:00.000Z | 2026-04-25T01:05:41.000Z |
| msrc_cve-2026-23446 | net: usb: aqc111: Do not perform PM inside suspend callback | 2026-04-02T00:00:00.000Z | 2026-04-25T01:05:35.000Z |
| msrc_cve-2026-23439 | udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | 2026-04-02T00:00:00.000Z | 2026-04-25T01:05:20.000Z |
| msrc_cve-2026-23438 | net: mvpp2: guard flow control update with global_tx_fc in buffer switching | 2026-04-02T00:00:00.000Z | 2026-04-25T01:05:15.000Z |
| msrc_cve-2026-23434 | mtd: rawnand: serialize lock/unlock against other NAND operations | 2026-04-02T00:00:00.000Z | 2026-04-25T01:05:09.000Z |
| msrc_cve-2026-23340 | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs | 2026-03-02T00:00:00.000Z | 2026-04-25T01:04:57.000Z |
| msrc_cve-2026-23339 | nfc: nci: free skb on nci_transceive early error paths | 2026-03-02T00:00:00.000Z | 2026-04-25T01:04:52.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:20039-1 | Security update for bind | 2026-01-15T10:43:49Z | 2026-01-15T10:43:49Z |
| opensuse-su-2026:10056-1 | libwireshark19-4.6.3-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10055-1 | python311-virtualenv-20.36.1-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10054-1 | php-composer2-2.9.3-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10053-1 | ffmpeg-4-4.4.6-11.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10052-1 | avahi-0.8-41.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:10051-1 | NetworkManager-applet-l2tp-1.52.0-1.1 on GA media | 2026-01-15T00:00:00Z | 2026-01-15T00:00:00Z |
| opensuse-su-2026:20038-1 | Security update for wget2 | 2026-01-14T13:23:53Z | 2026-01-14T13:23:53Z |
| opensuse-su-2026:20034-1 | Security update for tomcat | 2026-01-14T13:14:54Z | 2026-01-14T13:14:54Z |
| opensuse-su-2026:20031-1 | Security update for curl | 2026-01-14T11:01:44Z | 2026-01-14T11:01:44Z |
| opensuse-su-2026:20032-1 | Security update for haproxy | 2026-01-14T10:56:00Z | 2026-01-14T10:56:00Z |
| opensuse-su-2026:20030-1 | Security update for apache2 | 2026-01-14T10:49:51Z | 2026-01-14T10:49:51Z |
| opensuse-su-2026:20029-1 | Security update for gpg2 | 2026-01-14T10:23:16Z | 2026-01-14T10:23:16Z |
| opensuse-su-2026:20027-1 | Security update for squid | 2026-01-14T08:39:17Z | 2026-01-14T08:39:17Z |
| opensuse-su-2026:10050-1 | rke2-1.34-1.34.3+rke2r1-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10049-1 | python311-urllib3-2.6.3-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10048-1 | openCryptoki-3.26.0-3.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10047-1 | libcryptopp-devel-8.9.0-6.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:10046-1 | MozillaFirefox-147.0-1.1 on GA media | 2026-01-14T00:00:00Z | 2026-01-14T00:00:00Z |
| opensuse-su-2026:20026-1 | Security update for python-uv | 2026-01-13T12:48:04Z | 2026-01-13T12:48:04Z |
| opensuse-su-2026:20025-1 | Security update for hawk2 | 2026-01-13T12:41:42Z | 2026-01-13T12:41:42Z |
| opensuse-su-2026:10045-1 | liburiparser1-1.0.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10044-1 | python311-pypdf-6.6.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10043-1 | python311-filelock-3.20.3-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10042-1 | mcphost-0.32.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10041-1 | libsoup-2_4-1-2.74.3-14.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10040-1 | libsoup-3_0-0-3.6.5-11.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10039-1 | kernel-devel-6.18.5-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10038-1 | fluidsynth-2.5.2-2.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| opensuse-su-2026:10037-1 | firefox-esr-140.7.0-1.1 on GA media | 2026-01-13T00:00:00Z | 2026-01-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0954 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update | 2024-02-27T15:16:25+00:00 | 2026-05-10T20:39:58+00:00 |
| rhsa-2024:10147 | Red Hat Security Advisory: OpenShift Container Platform 4.16.24 security update | 2024-11-26T18:45:35+00:00 | 2026-05-10T20:39:57+00:00 |
| rhsa-2024:10142 | Red Hat Security Advisory: OpenShift Container Platform 4.15.39 bug fix and security update | 2024-11-26T11:17:01+00:00 | 2026-05-10T20:39:57+00:00 |
| rhsa-2024:0948 | Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update | 2024-02-28T14:20:10+00:00 | 2026-05-10T20:39:56+00:00 |
| rhsa-2024:0946 | Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update | 2024-02-28T14:03:56+00:00 | 2026-05-10T20:39:56+00:00 |
| rhsa-2024:0843 | Red Hat Security Advisory: Release of OpenShift Serverless 1.31.1 | 2024-02-15T12:55:28+00:00 | 2026-05-10T20:39:55+00:00 |
| rhsa-2024:0941 | Red Hat Security Advisory: OpenShift Container Platform 4.14.14 bug fix and security update | 2024-02-28T00:21:13+00:00 | 2026-05-10T20:39:54+00:00 |
| rhsa-2024:0880 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.31.1 security update | 2024-02-20T11:06:07+00:00 | 2026-05-10T20:39:53+00:00 |
| rhsa-2024:0837 | Red Hat Security Advisory: OpenShift Container Platform 4.14.13 security update | 2024-02-20T15:27:06+00:00 | 2026-05-10T20:39:52+00:00 |
| rhsa-2024:0833 | Red Hat Security Advisory: OpenShift Container Platform 4.12.50 bug fix and security update | 2024-02-21T01:44:15+00:00 | 2026-05-10T20:39:51+00:00 |
| rhsa-2024:0789 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 release (RHBQ 3.2.10.Final) | 2024-02-12T16:02:02+00:00 | 2026-05-10T20:39:51+00:00 |
| rhsa-2024:0741 | Red Hat Security Advisory: OpenShift Container Platform 4.13.33 bug fix and security update | 2024-02-14T06:34:01+00:00 | 2026-05-10T20:39:51+00:00 |
| rhsa-2024:0777 | Red Hat Security Advisory: jenkins and jenkins-2-plugins security update | 2024-02-12T10:27:23+00:00 | 2026-05-10T20:39:50+00:00 |
| rhsa-2024:0766 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security update | 2024-02-28T08:10:56+00:00 | 2026-05-10T20:39:48+00:00 |
| rhsa-2024:0682 | Red Hat Security Advisory: OpenShift Container Platform 4.11.58 bug fix and security update | 2024-02-08T18:42:42+00:00 | 2026-05-10T20:39:46+00:00 |
| rhsa-2024:0664 | Red Hat Security Advisory: OpenShift Container Platform 4.12.49 bug fix update and security update | 2024-02-08T19:31:18+00:00 | 2026-05-10T20:39:46+00:00 |
| rhsa-2024:0660 | Red Hat Security Advisory: OpenShift Container Platform 4.13.32 bug fix and security update | 2024-02-07T15:07:37+00:00 | 2026-05-10T20:39:46+00:00 |
| rhsa-2024:0642 | Red Hat Security Advisory: OpenShift Container Platform 4.14.11 bug fix and security update | 2024-02-07T17:36:34+00:00 | 2026-05-10T20:39:45+00:00 |
| rhsa-2024:0628 | Red Hat Security Advisory: libssh security update | 2024-01-31T08:48:54+00:00 | 2026-05-10T20:39:45+00:00 |
| rhsa-2024:0625 | Red Hat Security Advisory: libssh security update | 2024-01-31T08:36:02+00:00 | 2026-05-10T20:39:44+00:00 |
| rhsa-2024:0606 | Red Hat Security Advisory: openssh security update | 2024-01-30T14:59:23+00:00 | 2026-05-10T20:39:43+00:00 |
| rhsa-2024:0594 | Red Hat Security Advisory: openssh security update | 2024-01-30T14:13:55+00:00 | 2026-05-10T20:39:42+00:00 |
| rhsa-2024:0538 | Red Hat Security Advisory: libssh security update | 2024-01-29T11:50:44+00:00 | 2026-05-10T20:39:42+00:00 |
| rhsa-2024:0499 | Red Hat Security Advisory: libssh security update | 2024-01-25T15:36:48+00:00 | 2026-05-10T20:39:41+00:00 |
| rhsa-2024:0485 | Red Hat Security Advisory: OpenShift Container Platform 4.12.48 bug fix and security update | 2024-01-31T16:17:59+00:00 | 2026-05-10T20:39:41+00:00 |
| rhsa-2024:0302 | Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update | 2024-03-06T13:33:21+00:00 | 2026-05-10T20:39:41+00:00 |
| rhsa-2024:0484 | Red Hat Security Advisory: OpenShift Container Platform 4.13.31 bug fix and security update | 2024-02-01T19:01:48+00:00 | 2026-05-10T20:39:40+00:00 |
| rhsa-2024:0455 | Red Hat Security Advisory: openssh security update | 2024-01-25T09:21:45+00:00 | 2026-05-10T20:39:38+00:00 |
| rhsa-2024:0429 | Red Hat Security Advisory: openssh security update | 2024-01-25T08:14:09+00:00 | 2026-05-10T20:39:38+00:00 |
| rhsa-2024:0306 | Red Hat Security Advisory: OpenShift Container Platform 4.11.57 bug fix and security update | 2024-01-24T20:54:46+00:00 | 2026-05-10T20:39:38+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-200951 | SSA-200951: Multiple Vulnerabilities in Third-Party Component libcurl of TIM Devices | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-133038 | SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-119468 | SSA-119468: Luxion KeyShot Vulnerabilities in Solid Edge | 2021-05-25T00:00:00Z | 2021-05-25T00:00:00Z |
| ssa-695540 | SSA-695540: ASM and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.2 | 2021-05-17T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-663999 | SSA-663999: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.1 | 2021-02-09T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-622830 | SSA-622830: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0 | 2021-01-12T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-983548 | SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-940818 | SSA-940818: UltraVNC Vulnerabilities in SIMATIC HMIs/WinCC Products | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-919955 | SSA-919955: Information Disclosure Vulnerability in Mendix Database Replication Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-854248 | SSA-854248: Information Disclosure Vulnerability in Mendix Excel Importer Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-794542 | SSA-794542: Insecure Folder Permissions in SIMARIS Configuration | 2021-02-09T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-676775 | SSA-676775: Denial-of-Service Vulnerability in SIMATIC NET CP 343-1 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-646763 | SSA-646763: DNSpooq - Dnsmasq Vulnerabilities in SCALANCE and RUGGEDCOM Devices | 2021-01-19T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-594364 | SSA-594364: Denial-of-Service Vulnerability in SNMP Implementation of WinCC Runtime | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-478893 | SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) | 2020-12-08T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-116379 | SSA-116379: Denial-of-Service Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-875726 | SSA-875726: Privilege Escalation Vulnerability in Mendix | 2021-04-14T00:00:00Z | 2021-04-14T00:00:00Z |
| ssa-979775 | SSA-979775: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-853866 | SSA-853866: User Credentials Disclosure Vulnerability in Siveillance Video Open Network Bridge (ONVIF) | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-788287 | SSA-788287: Disclosure of Private Data | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-715184 | SSA-715184: Multiple File Parsing Vulnerabilities in Solid Edge | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-689942 | SSA-689942: Denial-of-Service and DLL Hijacking Vulnerabilities in Multiple SIMATIC Software Products | 2020-06-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-591405 | SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family | 2020-02-11T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-541017 | SSA-541017: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SENTRON PAC / 3VA Devices | 2020-12-08T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-296266 | SSA-296266: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-292794 | SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-163226 | SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:1075-1 | Security update for python-pyasn1 | 2026-03-26T12:41:27Z | 2026-03-26T12:41:27Z |
| suse-su-2026:1074-1 | Security update for nghttp2 | 2026-03-26T12:39:53Z | 2026-03-26T12:39:53Z |
| suse-su-2026:1073-1 | Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6) | 2026-03-26T12:33:43Z | 2026-03-26T12:33:43Z |
| suse-su-2026:1068-1 | Security update for pgvector | 2026-03-26T10:39:31Z | 2026-03-26T10:39:31Z |
| suse-su-2026:1067-1 | Security update for python-urllib3 | 2026-03-26T10:39:06Z | 2026-03-26T10:39:06Z |
| suse-su-2026:1066-1 | Security update for ruby2.5 | 2026-03-26T10:38:44Z | 2026-03-26T10:38:44Z |
| suse-su-2026:1065-1 | Security update for sqlite3 | 2026-03-26T10:38:26Z | 2026-03-26T10:38:26Z |
| suse-su-2026:1064-1 | Security update for python-tornado6 | 2026-03-26T10:37:23Z | 2026-03-26T10:37:23Z |
| suse-su-2026:1063-1 | Security update for frr | 2026-03-26T10:36:49Z | 2026-03-26T10:36:49Z |
| suse-su-2026:1062-1 | Security update for python310 | 2026-03-26T10:36:25Z | 2026-03-26T10:36:25Z |
| suse-su-2026:1061-1 | Security update for systemd | 2026-03-26T10:35:55Z | 2026-03-26T10:35:55Z |
| suse-su-2026:1060-1 | Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5) | 2026-03-26T10:04:45Z | 2026-03-26T10:04:45Z |
| suse-su-2026:1059-1 | Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) | 2026-03-26T10:04:27Z | 2026-03-26T10:04:27Z |
| suse-su-2026:20936-1 | Security update for openexr | 2026-03-26T10:00:01Z | 2026-03-26T10:00:01Z |
| suse-su-2026:20935-1 | Security update for fetchmail | 2026-03-26T09:57:50Z | 2026-03-26T09:57:50Z |
| suse-su-2026:1058-1 | Security update for tomcat | 2026-03-26T09:46:45Z | 2026-03-26T09:46:45Z |
| suse-su-2026:20871-1 | Security update for docker-compose | 2026-03-26T09:12:43Z | 2026-03-26T09:12:43Z |
| suse-su-2026:20870-1 | Security update for nghttp2 | 2026-03-26T09:10:44Z | 2026-03-26T09:10:44Z |
| suse-su-2026:1057-1 | Security update for frr | 2026-03-26T08:58:49Z | 2026-03-26T08:58:49Z |
| suse-su-2026:1056-1 | Security update for nghttp2 | 2026-03-26T08:57:39Z | 2026-03-26T08:57:39Z |
| suse-su-2026:20879-1 | Security update for python-PyJWT | 2026-03-26T08:57:07Z | 2026-03-26T08:57:07Z |
| suse-su-2026:1048-1 | Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) | 2026-03-26T04:34:10Z | 2026-03-26T04:34:10Z |
| suse-su-2026:1049-1 | Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP5) | 2026-03-26T01:34:07Z | 2026-03-26T01:34:07Z |
| suse-su-2026:1046-1 | Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4) | 2026-03-25T19:34:09Z | 2026-03-25T19:34:09Z |
| suse-su-2026:20947-1 | Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) | 2026-03-25T18:18:29Z | 2026-03-25T18:18:29Z |
| suse-su-2026:20842-1 | Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) | 2026-03-25T18:18:29Z | 2026-03-25T18:18:29Z |
| suse-su-2026:20945-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-03-25T18:10:41Z | 2026-03-25T18:10:41Z |
| suse-su-2026:20840-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-03-25T18:10:41Z | 2026-03-25T18:10:41Z |
| suse-su-2026:20946-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-03-25T18:10:07Z | 2026-03-25T18:10:07Z |
| suse-su-2026:20841-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-03-25T18:10:07Z | 2026-03-25T18:10:07Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:14416 | Important: firefox security update | 2025-08-25T00:00:00Z | 2025-08-27T11:56:36Z |
| alsa-2025:14417 | Important: firefox security update | 2025-08-25T00:00:00Z | 2025-08-27T11:55:25Z |
| alsa-2025:14439 | Moderate: kernel-rt security update | 2025-08-25T00:00:00Z | 2025-08-27T11:54:32Z |
| alsa-2025:14442 | Important: firefox security update | 2025-08-25T00:00:00Z | 2025-08-27T11:52:34Z |
| alsa-2025:14553 | Moderate: python-cryptography security update | 2025-08-26T00:00:00Z | 2025-08-27T11:50:33Z |
| alsa-2025:14625 | Moderate: mod_http2 security update | 2025-08-26T00:00:00Z | 2025-08-27T11:49:37Z |
| alsa-2025:14573 | Important: aide security update | 2025-08-26T00:00:00Z | 2025-08-27T11:47:08Z |
| alsa-2025:14493 | Important: aide security update | 2025-08-25T00:00:00Z | 2025-08-27T11:45:24Z |
| alsa-2025:14181 | Important: tomcat security update | 2025-08-20T00:00:00Z | 2025-08-22T11:25:23Z |
| alsa-2025:14178 | Important: tomcat9 security update | 2025-08-20T00:00:00Z | 2025-08-22T10:20:42Z |
| alsa-2025:13962 | Important: kernel security update | 2025-08-18T00:00:00Z | 2025-08-22T07:58:21Z |
| alsa-2025:14177 | Important: tomcat security update | 2025-08-20T00:00:00Z | 2025-08-21T10:09:15Z |
| alsa-2025:14135 | Important: libarchive security update | 2025-08-20T00:00:00Z | 2025-08-21T05:47:20Z |
| alsa-2025:14130 | Important: libarchive security update | 2025-08-20T00:00:00Z | 2025-08-20T14:02:20Z |
| alsa-2025:14137 | Important: libarchive security update | 2025-08-20T00:00:00Z | 2025-08-20T14:01:11Z |
| alsa-2025:14126 | Important: pki-deps:10.6 security update | 2025-08-20T00:00:00Z | 2025-08-20T12:28:21Z |
| alsa-2025:14101 | Important: mingw-sqlite security update | 2025-08-19T00:00:00Z | 2025-08-20T12:24:33Z |
| alsa-2025:14075 | Moderate: xterm security update | 2025-08-19T00:00:00Z | 2025-08-19T10:24:09Z |
| alsa-2025:13940 | Important: go-toolset:rhel8 security update | 2025-08-18T00:00:00Z | 2025-08-18T11:27:15Z |
| alsa-2025:13961 | Moderate: kernel-rt security update | 2025-08-18T00:00:00Z | 2025-08-18T11:25:42Z |
| alsa-2025:13960 | Important: kernel security update | 2025-08-18T00:00:00Z | 2025-08-18T11:23:07Z |
| alsa-2025:13944 | Important: openjpeg2 security update | 2025-08-18T00:00:00Z | 2025-08-18T11:07:28Z |
| alsa-2025:13935 | Important: golang security update | 2025-08-18T00:00:00Z | 2025-08-18T11:04:57Z |
| alsa-2025:13602 | Moderate: kernel security update | 2025-08-11T00:00:00Z | 2025-08-15T10:34:10Z |
| alsa-2025:13674 | Important: toolbox security update | 2025-08-12T00:00:00Z | 2025-08-14T14:36:21Z |
| alsa-2025:13780 | Important: webkit2gtk3 security update | 2025-08-13T00:00:00Z | 2025-08-14T14:33:57Z |
| alsa-2025:13782 | Important: webkit2gtk3 security update | 2025-08-13T00:00:00Z | 2025-08-14T13:28:02Z |
| alsa-2025:12662 | Important: kernel security update | 2025-08-04T00:00:00Z | 2025-08-13T13:56:22Z |
| alsa-2025:13676 | Important: thunderbird security update | 2025-08-12T00:00:00Z | 2025-08-13T12:22:12Z |
| alsa-2025:13578 | Moderate: python3.11-setuptools security update | 2025-08-11T00:00:00Z | 2025-08-12T14:18:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-30 | Heap-buffer-overflow in mrb_memsearch | 2024-01-22T00:05:20.803259Z | 2024-02-14T14:19:17.217387Z |
| osv-2024-29 | Heap-buffer-overflow in mrb_memsearch | 2024-01-22T00:01:33.424797Z | 2024-02-14T14:18:57.560129Z |
| osv-2024-96 | Heap-buffer-overflow in mrb_memsearch | 2024-02-11T00:00:45.699847Z | 2024-02-14T14:17:20.000446Z |
| osv-2024-88 | Heap-use-after-free in fuzzer_execute_ex | 2024-02-09T00:02:29.396272Z | 2024-02-09T00:02:29.396615Z |
| osv-2024-82 | Heap-use-after-free in xmlValidatePopElement | 2024-02-08T00:02:35.342535Z | 2024-02-08T00:02:35.343044Z |
| osv-2024-81 | Heap-use-after-free in xmlRemoveID | 2024-02-08T00:02:18.078478Z | 2024-02-08T00:02:18.079086Z |
| osv-2024-79 | Heap-double-free in supported_features | 2024-02-07T00:03:00.459996Z | 2024-02-07T00:03:00.460359Z |
| osv-2024-64 | Global-buffer-overflow in ReadVariantArrayBuiltInType | 2024-02-01T00:03:55.790847Z | 2024-02-06T14:18:25.113400Z |
| osv-2024-77 | Heap-use-after-free in xmlRemoveID | 2024-02-06T00:06:09.284671Z | 2024-02-06T00:06:09.285249Z |
| osv-2024-72 | UNKNOWN READ in LLVMFuzzerRunDriver | 2024-02-03T00:04:56.169161Z | 2024-02-03T00:04:56.169853Z |
| osv-2024-36 | Heap-use-after-free in LLVMFuzzerRunDriver | 2024-01-24T00:12:37.499127Z | 2024-01-24T00:12:37.499641Z |
| osv-2020-828 | Heap-use-after-free in draco::Metadata::AddSubMetadata | 2020-07-14T05:37:49.784283Z | 2024-01-18T14:11:45.334998Z |
| osv-2020-778 | Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat | 2020-07-14T05:37:30.449855Z | 2024-01-18T14:11:43.087585Z |
| osv-2020-824 | UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait | 2020-07-14T05:37:49.054851Z | 2024-01-18T14:11:41.842226Z |
| osv-2020-800 | UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c | 2020-07-14T05:37:39.527741Z | 2024-01-18T14:11:40.439013Z |
| osv-2021-1082 | UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c | 2021-08-01T00:00:48.182181Z | 2024-01-18T14:06:40.887686Z |
| osv-2024-7 | Heap-buffer-overflow in icu_75::Locale::Locale | 2024-01-07T00:11:45.064745Z | 2024-01-07T00:11:45.065397Z |
| osv-2023-1382 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-01-01T00:12:36.633204Z | 2024-01-01T00:12:36.633589Z |
| osv-2023-1381 | Heap-buffer-overflow in NetworkInterface::processPacket | 2024-01-01T00:03:49.670656Z | 2024-01-01T00:03:49.671160Z |
| osv-2023-1375 | Heap-buffer-overflow in IEC104Stats::processPacket | 2023-12-31T00:10:56.069235Z | 2023-12-31T00:10:56.069852Z |
| osv-2023-1373 | Heap-use-after-free in xmlRemoveID | 2023-12-31T00:01:26.816109Z | 2023-12-31T00:01:26.816606Z |
| osv-2023-1372 | Heap-use-after-free in JS_NewObjectFromShape | 2023-12-30T00:04:10.276049Z | 2023-12-30T00:04:10.276482Z |
| osv-2023-1365 | Heap-use-after-free in xmlStaticCopyNode | 2023-12-28T00:07:29.258949Z | 2023-12-28T00:07:29.259296Z |
| osv-2023-1364 | Heap-buffer-overflow in processClientServerHello | 2023-12-28T00:01:38.624999Z | 2023-12-28T00:01:38.625414Z |
| osv-2023-1361 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2023-12-27T00:01:27.841254Z | 2023-12-27T00:01:27.841623Z |
| osv-2023-1360 | Heap-buffer-overflow in NetworkInterface::dissectPacket | 2023-12-27T00:00:10.846266Z | 2023-12-27T00:00:10.846829Z |
| osv-2023-1358 | Heap-buffer-overflow in js_free_function_def | 2023-12-26T00:04:18.300258Z | 2023-12-26T00:04:18.300779Z |
| osv-2023-1357 | Heap-buffer-overflow in processClientServerHello | 2023-12-25T00:13:45.414227Z | 2023-12-25T00:13:45.414669Z |
| osv-2023-1356 | Heap-buffer-overflow in rawspeed::DngDecoder::parseWhiteBalance | 2023-12-25T00:10:36.482844Z | 2023-12-25T00:10:36.483166Z |
| osv-2023-1354 | Heap-buffer-overflow in processClientServerHello | 2023-12-25T00:03:08.530303Z | 2023-12-25T00:03:08.530510Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2019-0015 | Flaw in generativity allows out-of-bounds access | 2019-05-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0014 | Flaw in interface may drop uninitialized instance of arbitrary types | 2019-08-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0013 | Wrong memory orderings in RwLock potentially violates mutual exclusion | 2019-08-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0012 | Memory corruption in SmallVec::grow() | 2019-07-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0011 | Flaw in offset_of and span_of causes SIGILL, drops uninitialized memory of arbitrary type on panic in client code | 2019-07-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0010 | MultiDecoder::read() drops uninitialized memory of arbitrary type on panic in client code | 2019-07-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0009 | Double-free and use-after-free in SmallVec::grow() | 2019-06-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0008 | Flaw in string parsing can lead to crashes due to invalid memory access. | 2019-06-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0007 | Processing of maliciously crafted length fields causes memory allocation SIGABRTs | 2019-06-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0006 | Buffer overflow and format vulnerabilities in functions exposed without unsafe | 2019-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0005 | Format string vulnerabilities in `pancurses` | 2019-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0004 | Failure to properly verify ed25519 signatures makes any signature valid | 2019-05-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0003 | Out of Memory in stream::read_raw_bytes_into() | 2019-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0002 | Bug in SliceDeque::move_head_unchecked corrupts its memory | 2019-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0001 | Uncontrolled recursion leads to abort in HTML serialization | 2019-04-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0022 | Use of uninitialized memory in temporary | 2018-08-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0021 | Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods | 2018-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0019 | Multiple memory safety issues | 2018-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0018 | smallvec creates uninitialized value of any type | 2018-09-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0013 | Vec-to-vec transmutations could lead to heap overflow/corruption | 2018-11-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0012 | Flaw in streaming state reset() functions can create incorrect results. | 2018-12-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0011 | Enum repr causing potential memory corruption | 2018-12-18T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0010 | Use after free in CMS Signing | 2018-06-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0009 | MsQueue and SegQueue suffer from double-free | 2018-12-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0008 | Bug in SliceDeque::move_head_unchecked allows read of corrupted memory | 2018-12-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0007 | Stack overflow when parsing malicious DNS packet | 2018-10-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0006 | Uncontrolled recursion leads to abort in deserialization | 2018-09-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0005 | Uncontrolled recursion leads to abort in deserialization | 2018-09-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0004 | Malicious input could cause uninitialized memory to be exposed | 2018-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0003 | Possible double free during unwinding in SmallVec::insert_many | 2018-07-19T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-tomcat-2025-48989 | Apache Tomcat: h2 DoS - Made You Reset | 2025-08-18T08:14:11.138Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-48988 | Apache Tomcat: FileUpload large number of parts with headers DoS | 2025-07-10T10:47:06.961Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-46701 | Apache Tomcat: Security constraint bypass for CGI scripts | 2025-07-10T10:47:00.568Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2025-31650 | Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame | 2025-04-30T05:56:04.703Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2024-54677 | Apache Tomcat: DoS in examples web application | 2025-07-10T10:46:30.955Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2024-50379 | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation | 2025-07-10T10:45:55.643Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2024-23672 | Apache Tomcat: WebSocket DoS with incomplete closing handshake | 2025-07-17T08:09:47.503Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2023-34981 | Apache Tomcat: AJP response header mix-up | 2024-03-06T11:08:35.200Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-45143 | Apache Tomcat: JsonErrorReportValve escaping | 2024-03-06T11:09:02.789Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-42252 | Apache Tomcat request smuggling via malformed content-length | 2024-03-06T11:09:09.680Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-34305 | XSS in examples web application | 2024-03-06T11:09:17.789Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-29885 | EncryptInterceptor does not provide complete protection on insecure networks | 2024-03-06T11:09:24.492Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-23181 | Local privilege escalation with FileStore | 2024-03-06T11:09:36.902Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-43980 | Apache Tomcat: Information disclosure | 2024-03-06T11:09:43.693Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-42340 | DoS via memory leak with WebSocket connections | 2024-03-06T11:09:50.280Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-41079 | Apache Tomcat DoS with unexpected TLS packet | 2024-03-06T11:09:56.377Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-33037 | Incorrect Transfer-Encoding handling with HTTP/1.0 | 2024-03-06T11:10:01.262Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-30640 | Auth weakness in JNDIRealm | 2024-03-06T11:10:06.381Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-25329 | Incomplete fix for CVE-2020-9484 | 2024-03-06T11:10:17.511Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-25122 | Apache Tomcat h2c request mix-up | 2024-03-06T11:10:22.561Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-24122 | Apache Tomcat information disclosure | 2024-03-06T11:10:27.482Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2020-9484 | 2024-03-06T11:10:32.165Z | 2026-03-20T09:47:33.381Z | |
| bit-tomcat-2020-17527 | Apache Tomcat: Request header mix-up between HTTP/2 streams | 2024-03-06T11:11:37.082Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2020-13943 | 2024-03-06T11:11:40.396Z | 2026-03-20T09:47:33.381Z | |
| bit-tomcat-2020-13935 | 2024-03-06T11:11:44.067Z | 2026-03-20T09:47:33.381Z | |
| bit-tomcat-2020-13934 | 2024-03-06T11:11:47.794Z | 2026-03-20T09:47:33.381Z | |
| bit-tomcat-2020-11996 | 2024-03-06T11:11:51.472Z | 2026-03-20T09:47:33.381Z | |
| bit-thrift-2020-13949 | 2026-03-20T09:20:15.378Z | 2026-03-20T09:47:33.381Z | |
| bit-spark-2025-54920 | Apache Spark: Spark History Server Code Execution Vulnerability | 2026-03-18T08:54:07.780Z | 2026-03-20T09:47:33.381Z |
| bit-solr-2020-9492 | 2024-03-06T11:07:01.582Z | 2026-03-20T09:47:33.381Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1072 | Multiples vulnérabilités dans les produits IBM | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1071 | Multiples vulnérabilités dans Apache HTTP Server | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1070 | Multiples vulnérabilités dans Microsoft CBL Mariner | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1069 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1068 | Vulnérabilité dans Python | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1067 | Vulnérabilité dans Apache Struts | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1066 | Multiples vulnérabilités dans les produits Nextcloud | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1065 | Multiples vulnérabilités dans NetApp ONTAP | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1074 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1073 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1072 | Multiples vulnérabilités dans les produits IBM | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1071 | Multiples vulnérabilités dans Apache HTTP Server | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1070 | Multiples vulnérabilités dans Microsoft CBL Mariner | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1069 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1068 | Vulnérabilité dans Python | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1067 | Vulnérabilité dans Apache Struts | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1066 | Multiples vulnérabilités dans les produits Nextcloud | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1065 | Multiples vulnérabilités dans NetApp ONTAP | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1064 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1063 | Multiples vulnérabilités dans les produits Splunk | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1062 | Multiples vulnérabilités dans Wireshark | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1061 | Vulnérabilité dans PostgreSQL PgBouncer | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2024-avi-1090 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-12-18T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1064 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1063 | Multiples vulnérabilités dans les produits Splunk | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1062 | Multiples vulnérabilités dans Wireshark | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1061 | Vulnérabilité dans PostgreSQL PgBouncer | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1090 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-12-18T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1060 | Multiples vulnérabilités dans Python | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000012 | Multiple vulnerabilities in phpUploader | 2022-02-17T15:20+09:00 | 2022-02-17T15:20+09:00 |
| jvndb-2022-000011 | HPE Agentless Management registers unquoted service paths | 2022-02-09T15:49+09:00 | 2022-02-09T15:49+09:00 |
| jvndb-2022-001299 | Cross-site Scripting Vulnerability in JP1/IT Desktop Management 2 | 2022-02-08T17:15+09:00 | 2022-02-08T17:15+09:00 |
| jvndb-2022-000009 | CSV+ vulnerable to cross-site scripting | 2022-02-08T16:33+09:00 | 2022-02-08T16:33+09:00 |
| jvndb-2022-000010 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2022-02-08T16:13+09:00 | 2022-02-08T16:13+09:00 |
| jvndb-2016-008013 | Multiple ESET products for macOS vulnerable to improper server certificate verification | 2022-02-07T14:18+09:00 | 2022-02-07T14:18+09:00 |
| jvndb-2022-000007 | Multiple vulnerabilities in TransmitMail | 2022-01-25T15:31+09:00 | 2022-01-25T15:31+09:00 |
| jvndb-2022-001097 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux | 2022-01-25T13:35+09:00 | 2022-01-25T13:35+09:00 |
| jvndb-2022-001087 | GROWI vulnerable to authorization bypass through user-controlled key | 2022-01-24T14:07+09:00 | 2022-01-24T14:07+09:00 |
| jvndb-2022-000006 | Multiple cross-site scripting vulnerabilities in php_mailform | 2022-01-20T15:42+09:00 | 2022-01-20T15:42+09:00 |
| jvndb-2022-000001 | Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting | 2022-01-19T14:00+09:00 | 2022-01-19T14:00+09:00 |
| jvndb-2022-000005 | PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption | 2022-01-13T15:26+09:00 | 2022-01-13T15:26+09:00 |
| jvndb-2022-000004 | Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials | 2022-01-13T15:21+09:00 | 2022-01-13T15:21+09:00 |
| jvndb-2022-000003 | Jimoty App for Android uses a hard-coded API key for an external service | 2022-01-12T15:37+09:00 | 2022-01-12T15:37+09:00 |
| jvndb-2022-000002 | Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" | 2022-01-12T15:33+09:00 | 2022-01-12T15:33+09:00 |
| jvndb-2021-006117 | Multiple vulnerabilities in IDEC PLCs | 2021-12-27T16:54+09:00 | 2022-01-11T16:36+09:00 |
| jvndb-2021-006146 | Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems | 2021-12-28T11:51+09:00 | 2021-12-28T11:51+09:00 |
| jvndb-2021-006026 | TP-Link TL-WR802N V4(JP) vulnerable to OS command injection | 2021-12-24T15:31+09:00 | 2021-12-24T15:31+09:00 |
| jvndb-2021-005998 | Multiple vulnerabilities in QNAP VioStar NVR | 2021-12-24T10:58+09:00 | 2021-12-24T10:58+09:00 |
| jvndb-2021-003929 | Multiple vulnerabilities in multiple Yamaha routers | 2021-12-24T10:51+09:00 | 2021-12-24T10:51+09:00 |
| jvndb-2021-000112 | Android Apps developed using Yappli fails to restrict custom URL schemes properly | 2021-12-22T15:07+09:00 | 2021-12-22T15:07+09:00 |
| jvndb-2021-000111 | Multiple vulnerabilities in GroupSession | 2021-12-20T14:53+09:00 | 2021-12-21T14:20+09:00 |
| jvndb-2021-000022 | Multiple vulnerabilities in Cybozu Office | 2021-03-15T15:56+09:00 | 2021-12-17T17:51+09:00 |
| jvndb-2021-000093 | Movable Type XMLRPC API vulnerable to OS command injection | 2021-10-20T17:38+09:00 | 2021-12-17T17:36+09:00 |
| jvndb-2021-000110 | UNIVERGE DT Series vulnerable to missing encryption of sensitive data | 2021-12-17T16:57+09:00 | 2021-12-17T16:57+09:00 |
| jvndb-2021-005174 | Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer) | 2021-12-09T13:43+09:00 | 2021-12-09T13:43+09:00 |
| jvndb-2021-000107 | Wi-Fi STATION SH-52A vulnerable to cross-site scripting | 2021-11-30T14:49+09:00 | 2021-11-30T14:49+09:00 |
| jvndb-2021-004716 | Trend Micro Antivirus for MAC vulnerable to improper access controls | 2021-11-29T13:52+09:00 | 2021-11-29T13:52+09:00 |
| jvndb-2021-000106 | Multiple vulnerabilities in baserCMS | 2021-11-26T14:59+09:00 | 2021-11-26T14:59+09:00 |
| jvndb-2021-000104 | WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery | 2021-11-25T14:31+09:00 | 2021-11-25T14:31+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-14139 | WordPress插件Chaty信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14138 | WordPress插件WP Booking System信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14137 | WordPress插件NextScripts: Social Networks Auto-Poster跨站脚本漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14007 | Huawei HarmonyOS资源调度模块权限控制漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14000 | Huawei EMUI和Huawei HarmonyOS IMS模块越界写入漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-13998 | Huawei EMUI和Huawei HarmonyOS电子邮件应用校验不当漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-13997 | Huawei EMUI和Huawei HarmonyOS系统服务框架权限绕过漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-13996 | Huawei HarmonyOS备忘录模块权限控制漏洞（CNVD-2026-13996） | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13994 | Huawei HarmonyOS多模输入模块双重释放漏洞 | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13993 | Huawei HarmonyOS视频框架模块多线程条件竞争漏洞 | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13992 | Huawei HarmonyOS相机框架模块多线程条件竞争漏洞（CNVD-2026-13992） | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13991 | Huawei HarmonyOS打印模块权限控制不当漏洞 | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13990 | Huawei HarmonyOS相机框架模块多线程条件竞争漏洞 | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13989 | Huawei HarmonyOS备忘录模块权限控制漏洞 | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13988 | Huawei HarmonyOS热管理模块多线程条件竞争漏洞 | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13987 | Huawei HarmonyOS卡片框架模块多线程条件竞争漏洞（CNVD-2026-13987） | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13985 | Huawei HarmonyOS hiview模块缺少数据校验漏洞 | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13984 | Huawei HarmonyOS卡片框架模块多线程条件竞争漏洞（CNVD-2026-13984） | 2026-01-19 | 2026-03-18 |
| cnvd-2026-13982 | Huawei HarmonyOS卡片框架模块多线程条件竞争漏洞 | 2026-01-19 | 2026-03-18 |
| cnvd-2026-14602 | Fortinet FortiWeb操作系统命令注入漏洞（CNVD-2026-14602） | 2026-03-17 | 2026-03-17 |
| cnvd-2026-14601 | Fortinet FortiSandbox跨站脚本漏洞（CNVD-2026-14601） | 2026-03-17 | 2026-03-17 |
| cnvd-2026-14600 | Fortinet FortiSandbox Cloud操作系统命令注入漏洞 | 2026-03-17 | 2026-03-17 |
| cnvd-2026-14120 | OpenAkita操作系统命令注入漏洞 | 2026-03-17 | 2026-03-17 |
| cnvd-2026-14119 | Siemens SICAM SIAPP SDK缓冲区溢出漏洞 | 2026-03-17 | 2026-03-17 |
| cnvd-2026-13976 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-13976） | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13975 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-13975） | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13974 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-13974） | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13973 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-13973） | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13972 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-13972） | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13971 | Adobe Experience Manager跨站脚本漏洞（CNVD-2026-13971） | 2026-03-16 | 2026-03-17 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-07122 | Уязвимость компонента romfs загрузчика операционных систем Grub2, позволяющая нарушителю … | 20.06.2025 | 16.02.2026 |
| bdu:2025-07119 | Уязвимость компонента hfs загрузчика операционных систем Grub2, позволяющая нарушителю вы… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07116 | Уязвимость компонента fs Filesystem Handler загрузчика операционных систем Grub2, позволя… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07084 | Уязвимость библиотеки libblockdev, связанная с возможностью монтирования файловой системы… | 07.08.2025 | 16.02.2026 |
| bdu:2025-07022 | Уязвимость функции RRChangeProviderProperty() сервера X Window System Xorg-server, позвол… | 19.06.2025 | 16.02.2026 |
| bdu:2025-07020 | Уязвимость функции RecordSanityCheckRegisterClients() сервера X Window System Xorg-server… | 19.06.2025 | 16.02.2026 |
| bdu:2025-06968 | Уязвимость JBIG2Bitmap::combine() библиотеки для отображения PDF-файлов Poppler, позволяю… | 19.06.2025 | 16.02.2026 |
| bdu:2025-06803 | Уязвимость функции net_dm_monitor_start() ядра операционной системы Linux, позволяющая на… | 16.06.2025 | 16.02.2026 |
| bdu:2025-06694 | Уязвимость службы systemd-coredump демона Systemd, позволяющая нарушителю оказать воздейс… | 13.06.2025 | 16.02.2026 |
| bdu:2025-06686 | Уязвимость функции jv_string_vfmt функционального языка программирования jq, позволяющая … | 13.06.2025 | 16.02.2026 |
| bdu:2025-06570 | Уязвимость функции sample_conv_regsub серверного программного обеспечения HAProxy, связан… | 09.06.2025 | 16.02.2026 |
| bdu:2025-06564 | Уязвимость функции xmlSchemaIDCFillNodeTables() файла xmlschemas.c библиотеки libxml2, по… | 09.06.2025 | 16.02.2026 |
| bdu:2025-06562 | Уязвимость компилятора инструмента для html-шаблонизации jinja, связанная с непринятием м… | 09.06.2025 | 16.02.2026 |
| bdu:2025-06494 | Уязвимость функции TarFile.extractall() и TarFile.extract() модуля tarfile интерпретатора… | 09.06.2025 | 16.02.2026 |
| bdu:2025-06490 | Уязвимость модуля net/sched/sch_hfsc.c ядра операционной системы Linux, позволяющая наруш… | 06.06.2025 | 16.02.2026 |
| bdu:2025-06438 | Уязвимость функций xmlSchemaIDCFillNodeTables, xmlSchemaBubbleIDCNodeTables (xmlschemas.c… | 05.06.2025 | 16.02.2026 |
| bdu:2025-06411 | Уязвимость функции sqlite3_db_config() файла sqlite3.c системы управления базами данных S… | 05.06.2025 | 16.02.2026 |
| bdu:2025-06312 | Уязвимость функции krb_authenticate() модуля fs/smb/server/smb2pdu.c ядра операционной си… | 03.06.2025 | 16.02.2026 |
| bdu:2025-06251 | Уязвимость библиотеки h11, связанная с недостатками обработки HTTP-запросов, позволяющая … | 02.06.2025 | 16.02.2026 |
| bdu:2025-06078 | Уязвимость библиотеки для отображения PDF-файлов Poppler, связанная с чтением за границам… | 28.05.2025 | 16.02.2026 |
| bdu:2025-06077 | Уязвимость библиотеки для отображения PDF-файлов Poppler, связанная с целочисленным переп… | 28.05.2025 | 16.02.2026 |
| bdu:2025-06076 | Уязвимость компонента adbe.pkcs7.sha1 библиотеки для отображения PDF-файлов Poppler, позв… | 28.05.2025 | 16.02.2026 |
| bdu:2025-06050 | Уязвимость функции php_request_shutdown интерпретатора языка программирования PHP, позвол… | 28.05.2025 | 16.02.2026 |
| bdu:2025-06026 | Уязвимость функции smb2_sess_setup модуля fs/smb/server/smb2pdu.c компонента ksmbd ядра о… | 27.05.2025 | 16.02.2026 |
| bdu:2025-05975 | Уязвимость функции overflow_allocation_test() ядра операционной системы Linux, позволяюща… | 26.05.2025 | 16.02.2026 |
| bdu:2025-05974 | Уязвимость функции amdgpu_dm_initialize_drm_device() драйвера поддержки инфраструктуры пр… | 26.05.2025 | 16.02.2026 |
| bdu:2025-05922 | Уязвимость функции dcn315_populate_dml_pipes_from_context() драйвера поддержки инфраструк… | 23.05.2025 | 16.02.2026 |
| bdu:2025-05918 | Уязвимость функции btrfs_lookup_extent_info() файловой системы btrfs ядра операционной си… | 23.05.2025 | 16.02.2026 |
| bdu:2025-05914 | Уязвимость функции create_lease_buf() подсистемы SMB ядра операционной системы Linux, поз… | 23.05.2025 | 16.02.2026 |
| bdu:2025-05909 | Уязвимость модуля Net::IMAP языка программирования Ruby, позволяющая нарушителю вызвать о… | 23.05.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201804-1182 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T20:25:18.221000Z |
| var-202207-0588 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does no… | 2024-07-23T20:25:16.794000Z |
| var-200809-0184 | Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-passwo… | 2024-07-23T20:25:15.218000Z |
| var-201210-0269 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:25:11.811000Z |
| var-201404-0374 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 an… | 2024-07-23T20:25:08.563000Z |
| var-201704-1034 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.… | 2024-07-23T20:25:07.884000Z |
| var-201912-1848 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:24:44.163000Z |
| var-201210-0280 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:24:43.164000Z |
| var-201912-0589 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:24:42.912000Z |
| var-200611-0487 | com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions,… | 2024-07-23T20:24:10.857000Z |
| var-202006-1807 | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)]… | 2024-07-23T20:23:24.085000Z |
| var-201306-0242 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:22:47.590000Z |
| var-202101-0220 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded qu… | 2024-07-23T20:21:44.763000Z |
| var-202105-1451 | An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas i… | 2024-07-23T20:21:39.668000Z |
| var-201504-0479 | The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle … | 2024-07-23T20:21:39.248000Z |
| var-200904-0817 | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS … | 2024-07-23T20:21:39.155000Z |
| var-200810-0394 | Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local us… | 2024-07-23T20:21:38.100000Z |
| var-202105-1469 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(… | 2024-07-23T20:21:37.217000Z |
| var-202006-1640 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 a… | 2024-07-23T20:21:37.869000Z |
| var-201203-0171 | Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google… | 2024-07-23T20:21:34.716000Z |
| var-200609-1013 | Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and … | 2024-07-23T20:21:33.528000Z |
| var-201410-1418 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeter… | 2024-07-23T20:21:29.859000Z |
| var-201010-0168 | Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache… | 2024-07-23T20:20:56.693000Z |
| var-201707-1197 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … | 2024-07-23T20:20:19.517000Z |
| var-200810-0643 | Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in ne… | 2024-07-23T20:20:17.446000Z |
| var-201808-1002 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo… | 2024-07-23T20:20:15.857000Z |
| var-201506-0210 | The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 befo… | 2024-07-23T20:20:15.383000Z |
| var-202006-0241 | Incomplete cleanup from specific special register read operations in some Intel(R) Proces… | 2024-07-23T20:20:14.740000Z |
| var-201110-0392 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2024-07-23T20:20:14.628000Z |
| var-201306-0226 | mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 wri… | 2024-07-23T20:20:13.633000Z |