Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-15414 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
go-sonic Theme Fetching API git_fetcher.go FetchTheme … |
go-sonic |
sonic |
2026-01-01T21:32:08.255Z | 2026-02-23T08:04:10.495Z |
| CVE-2025-15413 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
wasm3 m3_exec.h op_CallIndirect memory corruption |
n/a |
wasm3 |
2026-01-01T21:02:06.923Z | 2026-02-23T08:03:55.102Z |
| CVE-2025-15412 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
WebAssembly wabt wasm-decompile VarName out-of-bounds |
WebAssembly |
wabt |
2026-01-01T20:32:06.684Z | 2026-02-23T08:03:40.223Z |
| CVE-2025-15411 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
WebAssembly wabt wasm-decompile InsertNode memory corruption |
WebAssembly |
wabt |
2026-01-01T19:32:07.421Z | 2026-02-23T08:03:27.517Z |
| CVE-2026-0544 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-01T09:02:10.684Z | 2026-02-23T08:03:13.934Z |
| CVE-2025-15410 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Guitar Store login.php sql injection |
code-projects |
Online Guitar Store |
2026-01-01T19:02:05.780Z | 2026-02-23T08:02:59.612Z |
| CVE-2025-15409 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Guitar Store Delete_product.php s… |
code-projects |
Online Guitar Store |
2026-01-01T18:32:06.837Z | 2026-02-23T08:02:47.793Z |
| CVE-2025-15408 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Guitar Store Create_product.php s… |
code-projects |
Online Guitar Store |
2026-01-01T18:02:06.173Z | 2026-02-23T08:02:35.956Z |
| CVE-2025-15407 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Guitar Store Create_category.php … |
code-projects |
Online Guitar Store |
2026-01-01T17:32:05.867Z | 2026-02-23T08:02:24.238Z |
| CVE-2025-15406 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
PHPGurukul Online Course Registration authorization |
PHPGurukul |
Online Course Registration |
2026-01-01T17:02:07.067Z | 2026-02-23T08:02:11.264Z |
| CVE-2025-15405 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
PHPEMS cross-site request forgery |
n/a |
PHPEMS |
2026-01-01T15:02:06.258Z | 2026-02-23T08:01:57.542Z |
| CVE-2025-15404 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
campcodes School File Management System save_file.php … |
campcodes |
School File Management System |
2026-01-01T13:32:06.670Z | 2026-02-23T08:01:46.404Z |
| CVE-2022-4264 |
6.5 (3.1)
|
Incorrect privilege assignment in M-Files Web Server |
M-Files |
M-Files Web |
2022-12-09T14:08:40.778Z | 2026-02-23T07:59:22.697Z |
| CVE-2022-3284 |
6.5 (3.1)
|
Insecure way of passing a download key |
M-Files |
M-Files New Web |
2023-03-06T10:39:43.877Z | 2026-02-23T07:58:28.163Z |
| CVE-2022-1606 |
2.4 (3.1)
|
Incorrect privilege assignment in M-Files Server |
M-Files |
M-Files Server |
2022-11-30T14:05:15.099Z | 2026-02-23T07:54:17.860Z |
| CVE-2021-41809 |
3.5 (3.1)
|
SSRF vulnerability in M-Files Server products with ver… |
M-Files |
M-Files Server |
2022-01-18T16:51:49.630407Z | 2026-02-23T07:50:32.583Z |
| CVE-2021-41807 |
7.5 (3.1)
|
Lack of rate limiting in M-Files Server and M-Files We… |
M-Files |
M-Files Server |
2022-01-18T16:51:50.929804Z | 2026-02-23T07:49:22.819Z |
| CVE-2021-41808 |
2 (3.1)
|
In M-Files Server product with versions before 21.11.1… |
M-Files |
M-Files Server |
2022-01-18T16:51:52.431113Z | 2026-02-23T07:48:09.932Z |
| CVE-2026-2733 |
3.8 (3.1)
|
Org.keycloak/keycloak-services: keycloak: missing chec… |
Red Hat |
Red Hat Build of Keycloak |
2026-02-19T07:48:08.910Z | 2026-02-23T07:47:41.060Z |
| CVE-2026-21627 |
9.5 (4.0)
|
Extension - tassos.gr - SQL injection and Unauthentica… |
tassos.gr |
Novarain/Tassos Framework (plg_system_nrframework) |
2026-02-20T14:22:14.744Z | 2026-02-23T05:07:12.296Z |
| CVE-2026-23230 |
N/A
|
smb: client: split cached_fid bitfields to avoid share… |
Linux |
Linux |
2026-02-18T14:53:34.078Z | 2026-02-23T03:16:44.194Z |
| CVE-2026-23229 |
N/A
|
crypto: virtio - Add spinlock protection with virtqueu… |
Linux |
Linux |
2026-02-18T14:53:33.015Z | 2026-02-23T03:16:41.797Z |
| CVE-2026-23228 |
N/A
|
smb: server: fix leak of active_num_conn in ksmbd_tcp_… |
Linux |
Linux |
2026-02-18T14:53:31.882Z | 2026-02-23T03:16:39.427Z |
| CVE-2026-23227 |
N/A
|
drm/exynos: vidi: use ctx->lock to protect struct vidi… |
Linux |
Linux |
2026-02-18T14:53:30.784Z | 2026-02-23T03:16:37.399Z |
| CVE-2026-23226 |
N/A
|
ksmbd: add chann_lock to protect ksmbd_chann_list xarray |
Linux |
Linux |
2026-02-18T14:53:29.562Z | 2026-02-23T03:16:35.412Z |
| CVE-2026-23225 |
N/A
|
sched/mmcid: Don't assume CID is CPU owned on mode switch |
Linux |
Linux |
2026-02-18T14:53:28.387Z | 2026-02-23T03:16:33.442Z |
| CVE-2026-23224 |
N/A
|
erofs: fix UAF issue for file-backed mounts w/ directi… |
Linux |
Linux |
2026-02-18T14:53:27.462Z | 2026-02-23T03:16:31.463Z |
| CVE-2026-23223 |
N/A
|
xfs: fix UAF in xchk_btree_check_block_owner |
Linux |
Linux |
2026-02-18T14:53:26.603Z | 2026-02-23T03:16:29.765Z |
| CVE-2026-23222 |
N/A
|
crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatter… |
Linux |
Linux |
2026-02-18T14:53:25.504Z | 2026-02-23T03:16:27.722Z |
| CVE-2026-23221 |
N/A
|
bus: fsl-mc: fix use-after-free in driver_override_show() |
Linux |
Linux |
2026-02-18T14:53:24.391Z | 2026-02-23T03:16:25.968Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2023-1345 |
4.3 (3.1)
|
The RapidLoad Power-Up for Autoptimize plugin for… |
shakee93 |
RapidLoad Power-Up for Autoptimize |
2023-03-10T19:07:23.931Z | 2025-01-13T16:59:15.203Z |
| CVE-2019-25378 |
5.1 (4.0)
6.1 (3.1)
|
Smoothwall Express 3.1 'proxy.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:04:53.222Z | 2026-02-17T16:49:43.661Z |
| CVE-2023-28798 |
6.5 (3.1)
|
Out-of-bounds write to heap in pacparser |
Zscaler |
Client Connector |
2024-05-02T13:10:31.933Z | 2024-08-02T13:51:38.162Z |
| CVE-2023-4162 |
4.4 (3.1)
|
Segmentation fault in Brocade Fabric OS after Brocade … |
Brocade |
Fabric OS |
2023-08-31T00:14:15.612Z | 2024-09-30T15:47:48.730Z |
| CVE-2025-4663 |
6.8 (4.0)
|
Denial-of-Service (DoS) after Unusual or Exceptional C… |
Broadcom |
Brocade Fabric OS |
2025-07-08T17:53:53.048Z | 2025-07-08T18:02:03.446Z |
| CVE-2024-7517 |
8.5 (4.0)
|
Privileged escalation via crafted use of portcfg command |
Brocade |
Fabric OS |
2024-11-21T05:53:34.442Z | 2025-09-09T19:02:20.886Z |
| CVE-2025-66405 |
6.9 (4.0)
|
Portkey.ai Gateway: Server-Side Request Forgery (SSRF)… |
Portkey-AI |
gateway |
2025-12-01T22:25:36.311Z | 2025-12-02T14:11:29.966Z |
| CVE-2025-7808 |
6.1 (3.1)
|
WP Shopify < 1.5.4 - Reflected XSS |
Unknown |
WP Shopify |
2025-08-14T06:00:05.544Z | 2025-08-14T13:29:10.567Z |
| CVE-2026-25521 |
9.4 (4.0)
|
Locutus is vulnerable to Prototype Pollution |
locutusjs |
locutus |
2026-02-04T21:20:32.643Z | 2026-02-05T14:31:43.203Z |
| CVE-2026-25517 |
5.1 (4.0)
|
Wagtail has improper permission handling on admin prev… |
wagtail |
wagtail |
2026-02-04T20:48:19.160Z | 2026-02-05T14:32:08.136Z |
| CVE-2026-25481 |
9.4 (4.0)
|
Langroid has WAF Bypass Leading to RCE in TableChatAgent |
langroid |
langroid |
2026-02-04T20:03:32.017Z | 2026-02-04T20:40:26.952Z |
| CVE-2025-68699 |
6.5 (3.1)
|
NanoMQ $share/ Subscription Validation and Forwarding … |
nanomq |
nanomq |
2026-02-04T19:25:12.716Z | 2026-02-04T19:51:10.769Z |
| CVE-2024-0407 |
6.5 (3.1)
|
Certain HP Enterprise LaserJet, HP LaserJet Managed Pr… |
HP Inc. |
Certain HP Enterprise LaserJet, HP LaserJet Managed Printers |
2024-02-20T18:35:41.291Z | 2024-11-15T18:08:33.405Z |
| CVE-2025-71242 |
5.3 (4.0)
4.3 (3.1)
|
SPIP < 4.3.6 Authorization Bypass Leading to Content D… |
SPIP |
SPIP |
2026-02-19T14:58:14.582Z | 2026-02-20T20:30:04.920Z |
| CVE-2025-15563 |
5.3 (3.1)
|
Broken Access Control results in Denial of Service in … |
NesterSoft Inc. |
WorkTime (on-prem/cloud) |
2026-02-19T11:01:56.524Z | 2026-02-20T20:35:11.872Z |
| CVE-2025-15562 |
6.1 (3.1)
|
Reflected Cross-Site Scripting in NesterSoft WorkTime |
NesterSoft Inc. |
WorkTime (on-prem/cloud) |
2026-02-19T10:54:52.516Z | 2026-02-20T20:34:10.495Z |
| CVE-2025-13590 |
9.1 (3.1)
|
Authenticated arbitrary file upload via a System REST … |
WSO2 |
WSO2 API Manager |
2026-02-19T10:05:06.083Z | 2026-02-20T20:33:02.933Z |
| CVE-2019-1258 |
N/A
|
Azure Active Directory Authentication Library Elevatio… |
Microsoft |
ADAL.NET |
2019-08-14T20:55:06.000Z | 2024-08-04T18:13:29.539Z |
| CVE-2019-1229 |
N/A
|
Dynamics On-Premise Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Dynamics 365 (on-premises) version 9.0 |
2019-08-14T20:55:06.000Z | 2024-08-04T18:13:30.206Z |
| CVE-2019-1228 |
5.5 (3.1)
|
Windows Kernel Information Disclosure Vulnerability |
Microsoft |
Windows 7 |
2019-08-14T20:55:06.000Z | 2024-08-04T18:13:29.252Z |
| CVE-2019-1227 |
5.5 (3.1)
|
Windows Kernel Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1803 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:29.702Z |
| CVE-2019-1226 |
9.8 (3.1)
|
Remote Desktop Services Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1803 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:29.557Z |
| CVE-2019-1225 |
7.5 (3.1)
|
Remote Desktop Protocol Server Information Disclosure … |
Microsoft |
Windows 10 Version 1803 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:30.371Z |
| CVE-2019-1224 |
7.5 (3.1)
|
Remote Desktop Protocol Server Information Disclosure … |
Microsoft |
Windows 10 Version 1803 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:29.334Z |
| CVE-2019-1223 |
7.5 (3.1)
|
Windows Remote Desktop Protocol (RDP) Denial of Servic… |
Microsoft |
Windows 10 Version 1803 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:29.520Z |
| CVE-2019-1222 |
9.8 (3.1)
|
Remote Desktop Services Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1803 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:29.535Z |
| CVE-2019-1218 |
N/A
|
Outlook iOS Spoofing Vulnerability |
Microsoft |
Outlook for iOS |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:30.317Z |
| CVE-2019-1213 |
9.8 (3.1)
|
Windows DHCP Server Remote Code Execution Vulnerability |
Microsoft |
Windows Server 2008 Service Pack 2 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:29.693Z |
| CVE-2019-1212 |
9.8 (3.1)
|
Windows DHCP Server Denial of Service Vulnerability |
Microsoft |
Windows 10 Version 1803 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:29.460Z |
| CVE-2019-1211 |
N/A
|
Git for Visual Studio Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Visual Studio 2017 |
2019-08-14T20:55:05.000Z | 2024-08-04T18:13:29.223Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2019-1212 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing special… | 2019-08-14T21:15:18.423 | 2026-02-20T21:18:47.070 |
| fkie_cve-2019-1211 | An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses c… | 2019-08-14T21:15:18.347 | 2026-02-20T21:18:46.940 |
| fkie_cve-2019-1206 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends … | 2019-08-14T21:15:18.283 | 2026-02-20T21:18:46.437 |
| fkie_cve-2019-1205 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly h… | 2019-08-14T21:15:18.220 | 2026-02-20T21:18:46.203 |
| fkie_cve-2019-1204 | An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incom… | 2019-08-14T21:15:18.157 | 2026-02-20T21:18:46.067 |
| fkie_cve-2019-1203 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properl… | 2019-08-14T21:15:18.097 | 2026-02-20T21:18:45.940 |
| fkie_cve-2019-1202 | An information disclosure vulnerability exists in the way Microsoft SharePoint handles session obje… | 2019-08-14T21:15:18.033 | 2026-02-20T21:18:45.813 |
| fkie_cve-2019-1201 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly h… | 2019-08-14T21:15:17.970 | 2026-02-20T21:18:45.557 |
| fkie_cve-2019-1200 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properl… | 2019-08-14T21:15:17.907 | 2026-02-20T21:18:45.407 |
| fkie_cve-2019-1199 | A remote code execution vulnerability exists in Microsoft Outlook when the software fails to proper… | 2019-08-14T21:15:17.847 | 2026-02-20T21:18:45.277 |
| fkie_cve-2019-1198 | An elevation of privilege exists in SyncController.dll. An attacker who successfully exploited the … | 2019-08-14T21:15:17.783 | 2026-02-20T21:18:45.037 |
| fkie_cve-2019-1197 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles ob… | 2019-08-14T21:15:17.720 | 2026-02-20T21:18:44.863 |
| fkie_cve-2019-1196 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles ob… | 2019-08-14T21:15:17.643 | 2026-02-20T21:18:44.707 |
| fkie_cve-2019-1195 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles ob… | 2019-08-14T21:15:17.580 | 2026-02-20T21:18:44.553 |
| fkie_cve-2019-1194 | A remote code execution vulnerability exists in the way that the scripting engine handles objects i… | 2019-08-14T21:15:17.517 | 2026-02-20T21:18:44.363 |
| fkie_cve-2019-1193 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in m… | 2019-08-14T21:15:17.440 | 2026-02-20T21:18:44.150 |
| fkie_cve-2019-1192 | A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests o… | 2019-08-14T21:15:17.393 | 2026-02-20T21:18:43.960 |
| fkie_cve-2019-1190 | An elevation of privilege vulnerability exists in the way that the Windows kernel image handles obj… | 2019-08-14T21:15:17.297 | 2026-02-20T21:18:43.760 |
| fkie_cve-2019-1188 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code exec… | 2019-08-14T21:15:17.237 | 2026-02-20T21:18:43.520 |
| fkie_cve-2019-1187 | A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses X… | 2019-08-14T21:15:17.173 | 2026-02-20T21:18:43.177 |
| fkie_cve-2019-1186 | An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in me… | 2019-08-14T21:15:17.110 | 2026-02-20T21:18:42.950 |
| fkie_cve-2019-1185 | An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for L… | 2019-08-14T21:15:17.047 | 2026-02-20T21:18:42.753 |
| fkie_cve-2019-1184 | An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar imprope… | 2019-08-14T21:15:16.987 | 2026-02-20T21:18:42.563 |
| fkie_cve-2019-1183 | This information is being revised to indicate that this CVE (CVE-2019-1183) is fully mitigated by t… | 2019-08-14T21:15:16.923 | 2026-02-20T21:18:42.423 |
| fkie_cve-2019-1182 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Termina… | 2019-08-14T21:15:16.813 | 2026-02-20T21:18:42.080 |
| fkie_cve-2019-1181 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Termina… | 2019-08-14T21:15:16.737 | 2026-02-20T21:18:41.747 |
| fkie_cve-2019-1180 | An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in me… | 2019-08-14T21:15:16.673 | 2026-02-20T21:18:41.463 |
| fkie_cve-2019-1179 | An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in … | 2019-08-14T21:15:16.580 | 2026-02-20T21:18:41.217 |
| fkie_cve-2019-1178 | An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in m… | 2019-08-14T21:15:16.533 | 2026-02-20T21:18:40.873 |
| fkie_cve-2019-1177 | An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in mem… | 2019-08-14T21:15:16.453 | 2026-02-20T21:18:40.530 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-hj2m-xgwr-hhp4 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-h972-rpm4-hj8q |
6.5 (3.1)
|
The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in … | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-h72r-rmwf-cp7j |
5.4 (3.1)
4.8 (4.0)
|
SPIP before 4.4.9 allows Cross-Site Scripting (XSS) in the private area, complementing an incomplet… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-ffpr-483m-cpm5 |
8.1 (3.1)
|
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assign… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-f6rv-5qch-vwvw |
8.5 (4.0)
|
A SSRF and Arbitrary File Read vulnerability in AppSheet Core in Google AppSheet prior to 2025-11-2… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-f5cj-cgw5-mj38 |
4.3 (3.1)
5.3 (4.0)
|
SPIP before 4.4.9 allows Blind Server-Side Request Forgery (SSRF) via syndicated sites in the priva… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-cjfp-957w-fgm8 |
9.8 (3.1)
|
Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Tra… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-cgwr-5223-r4pg |
4.3 (3.1)
5.3 (4.0)
|
SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. T… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-c977-4m9f-fcfc |
5.3 (3.1)
|
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulne… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-9cwr-5hg5-h48h |
4.7 (3.1)
|
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of S… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-8v9w-wqxw-hp8g |
10.0 (3.1)
|
Due to the use of a vulnerable third-party Velocity template engine, a malicious actor with admin p… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-86cf-7cvr-x43r |
6.1 (3.1)
5.1 (4.0)
|
SPIP before 4.4.5 and 4.3.9 allows an Open Redirect via the login form when used in AJAX mode. An a… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-7wc5-wjpj-2r5j |
4.7 (3.1)
2.1 (4.0)
|
SPIP before 4.4.8 allows Cross-Site Scripting (XSS) in the public area for certain edge-case usage … | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-6rf6-5vpq-5mc7 |
6.4 (3.1)
5.1 (4.0)
|
SPIP before 4.4.9 allows Stored Cross-Site Scripting (XSS) via syndicated sites in the private area… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-4vj8-cj7h-j8rx |
6.5 (3.1)
|
Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorre… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-4h76-926q-wxxw |
4.7 (3.1)
|
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote att… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-4374-6xfq-3wjw |
9.8 (3.1)
9.3 (4.0)
|
The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a cr… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-3cj5-wr93-33x7 |
5.4 (3.1)
4.8 (4.0)
|
SPIP before 4.2.15 allows Cross-Site Scripting (XSS) via crafted content in HTML code tags. The app… | 2026-02-19T18:31:54Z | 2026-02-19T18:31:54Z |
| ghsa-x44w-4824-m48x |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path v… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-wh7q-jq87-h3wq |
5.3 (3.1)
|
Missing Authorization vulnerability in LeadConnector LeadConnector leadconnector allows Exploiting … | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-wfhf-6fj8-r5gx |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A l… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-w9rp-vxw4-rq3m |
5.3 (3.1)
|
Missing Authorization vulnerability in PI Web Solution Live sales notification for WooCommerce live… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-j7cf-x368-v6h6 |
|
Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting I… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-h95f-qq66-v95j |
4.4 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in totalsoft TS Poll poll-wp allows Server Side Re… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-fjm7-6rv9-337h |
8.1 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path v… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-849j-jr65-wp89 |
|
Cross-Site Request Forgery (CSRF) vulnerability in Themes4WP Popularis Extra popularis-extra allows… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-533f-qxmw-wx45 |
5.4 (3.1)
|
Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configur… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-3g9h-gc4r-r2pp |
6.5 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path v… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-25wp-vwm5-27pw |
8.1 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A… | 2026-02-19T18:31:53Z | 2026-02-19T18:31:53Z |
| ghsa-xj9r-5fj6-ggxg |
|
Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access… | 2026-02-19T18:31:52Z | 2026-02-19T18:31:52Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-5 |
|
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This iss… | apache-iotdb | 2023-01-31T10:15:00Z | 2023-05-04T03:49:44.792097Z |
| pysec-2023-4 |
|
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid… | apache-dolphinscheduler | 2023-01-04T15:15:00Z | 2023-05-04T03:49:44.740629Z |
| pysec-2023-3 |
|
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… | apache-airflow | 2023-04-07T15:15:00Z | 2023-05-04T03:49:44.692400Z |
| pysec-2023-2 |
|
Generation of Error Message Containing Sensitive Information vulnerability in Apache Soft… | apache-airflow | 2023-03-15T10:15:00Z | 2023-05-04T03:49:44.630805Z |
| pysec-2021-333 |
|
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and… | sqlparse | 2021-09-20T17:15:00Z | 2023-04-09T10:46:38.256842Z |
| pysec-2023-1 |
|
Adyen has utility methods for validating notification HMAC signatures. The is_valid_hmac … | adyen | 2023-01-24T00:00:00Z | 2023-01-24T00:00:00Z |
| pysec-2022-42979 |
|
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplif… | pillow | 2022-11-14T07:15:00Z | 2022-11-14T11:29:25.508491Z |
| pysec-2022-42978 |
|
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. | rdiffweb | 2022-10-26T21:15:00Z | 2022-11-10T23:34:43.369321Z |
| pysec-2021-126 |
|
A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory o… | ansible | 2021-06-09T12:15:00Z | 2022-11-10T04:31:24.270376Z |
| pysec-2022-42974 |
|
Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter … | jupyter-core | 2022-10-26T20:15:00Z | 2022-11-09T01:10:28.819496Z |
| pysec-2022-42977 |
|
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior … | rdiffweb | 2022-10-20T00:15:00Z | 2022-11-07T01:10:29.482920Z |
| pysec-2022-42976 |
|
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and … | pyspark | 2022-11-01T16:15:00Z | 2022-11-07T01:10:29.334199Z |
| pysec-2022-42972 |
|
Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Ser… | apache-iotdb | 2022-10-26T16:15:00Z | 2022-11-07T01:10:28.383734Z |
| pysec-2022-42971 |
|
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's … | apache-airflow | 2022-11-02T12:15:00Z | 2022-11-07T01:10:28.239756Z |
| pysec-2022-42970 |
|
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susce… | apache-airflow | 2022-11-02T12:15:00Z | 2022-11-07T01:10:28.198195Z |
| pysec-2022-42969 |
|
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regu… | py | 2022-11-04T11:00:00Z | 2022-11-04T11:00:00Z |
| pysec-2022-42973 |
|
Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vu… | flower | 2022-06-02T14:15:00Z | 2022-10-26T22:48:00Z |
| pysec-2022-42975 |
|
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) i… | octoprint | 2022-10-19T13:15:00Z | 2022-10-20T19:33:00Z |
| pysec-2022-304 |
|
In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized UR… | django | 2022-10-16T06:15:00Z | 2022-10-16T10:47:15.418796Z |
| pysec-2022-303 |
|
mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack th… | django-mfa2 | 2022-10-11T14:15:00Z | 2022-10-11T19:05:00Z |
| pysec-2022-288 |
|
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via… | joblib | 2022-09-26T05:15:00Z | 2022-10-10T13:42:48.035346Z |
| pysec-2022-302 |
|
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10. | rdiffweb | 2022-10-06T18:16:00Z | 2022-10-06T23:36:00Z |
| pysec-2022-301 |
|
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a… | dparse | 2022-10-06T18:16:00Z | 2022-10-06T20:46:42.790036Z |
| pysec-2022-300 |
|
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio … | label-studio | 2022-10-03T12:15:00Z | 2022-10-04T22:46:41.362638Z |
| pysec-2022-299 |
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-09-30T14:15:00Z | 2022-10-04T16:30:00Z |
| pysec-2022-298 |
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-09-29T21:15:00Z | 2022-10-04T13:14:00Z |
| pysec-2022-297 |
|
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9. | rdiffweb | 2022-09-29T00:15:00Z | 2022-10-03T14:07:00Z |
| pysec-2022-296 |
|
Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior… | rdiffweb | 2022-09-28T21:15:00Z | 2022-09-30T17:34:00Z |
| pysec-2022-295 |
|
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8. | rdiffweb | 2022-09-26T11:15:00Z | 2022-09-28T20:45:53.940487Z |
| pysec-2022-294 |
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-09-26T22:15:00Z | 2022-09-28T18:56:44.617660Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33043 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.657078Z |
| gsd-2024-33042 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.673504Z |
| gsd-2024-33041 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.697200Z |
| gsd-2024-33040 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.715619Z |
| gsd-2024-33039 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.627850Z |
| gsd-2024-33038 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.746582Z |
| gsd-2024-33037 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.757663Z |
| gsd-2024-33036 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.724217Z |
| gsd-2024-33035 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.722939Z |
| gsd-2024-33034 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.656229Z |
| gsd-2024-33033 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.603102Z |
| gsd-2024-33032 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.662376Z |
| gsd-2024-33031 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.758739Z |
| gsd-2024-33030 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.677240Z |
| gsd-2024-33029 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.745140Z |
| gsd-2024-33028 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.725685Z |
| gsd-2024-33027 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.610461Z |
| gsd-2024-33026 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700031Z |
| gsd-2024-33025 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.635178Z |
| gsd-2024-33024 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.720105Z |
| gsd-2024-33023 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.760968Z |
| gsd-2024-33022 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.601013Z |
| gsd-2024-33021 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.682562Z |
| gsd-2024-33020 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.709634Z |
| gsd-2024-33019 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.708836Z |
| gsd-2024-33018 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.723557Z |
| gsd-2024-33017 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.711408Z |
| gsd-2024-33016 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.744543Z |
| gsd-2024-33015 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.642215Z |
| gsd-2024-33014 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.668485Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2026-249 | Malicious code in @flipster/utils (npm) | 2026-01-13T08:19:50Z | 2026-01-27T08:27:29Z |
| mal-2025-41408 | Malicious code in symphony-fairvis (npm) | 2025-08-23T14:45:03Z | 2026-01-27T03:00:15Z |
| MAL-2025-41408 | Malicious code in symphony-fairvis (npm) | 2025-08-23T14:45:03Z | 2026-01-27T03:00:15Z |
| mal-2026-460 | Malicious code in pay-by-bank-dashboard-server (npm) | 2026-01-22T11:37:45Z | 2026-01-27T03:00:14Z |
| MAL-2026-460 | Malicious code in pay-by-bank-dashboard-server (npm) | 2026-01-22T11:37:45Z | 2026-01-27T03:00:14Z |
| mal-2025-190622 | Malicious code in com.unity.xr.visionos (npm) | 2025-11-23T11:02:13Z | 2026-01-27T03:00:12Z |
| MAL-2025-190622 | Malicious code in com.unity.xr.visionos (npm) | 2025-11-23T11:02:13Z | 2026-01-27T03:00:12Z |
| mal-2026-510 | Malicious code in radishwxm5 (PyPI) | 2026-01-26T19:50:28Z | 2026-01-26T19:50:28Z |
| MAL-2026-510 | Malicious code in radishwxm5 (PyPI) | 2026-01-26T19:50:28Z | 2026-01-26T19:50:28Z |
| mal-2026-506 | Malicious code in selenium-integration (PyPI) | 2026-01-25T16:56:33Z | 2026-01-25T16:56:33Z |
| MAL-2026-506 | Malicious code in selenium-integration (PyPI) | 2026-01-25T16:56:33Z | 2026-01-25T16:56:33Z |
| mal-2026-505 | Malicious code in flask-hookserver (PyPI) | 2026-01-25T11:13:11Z | 2026-01-25T11:25:04Z |
| MAL-2026-505 | Malicious code in flask-hookserver (PyPI) | 2026-01-25T11:13:11Z | 2026-01-25T11:25:04Z |
| mal-2026-504 | Malicious code in researchpoc (PyPI) | 2026-01-25T10:54:30Z | 2026-01-25T10:54:30Z |
| MAL-2026-504 | Malicious code in researchpoc (PyPI) | 2026-01-25T10:54:30Z | 2026-01-25T10:54:30Z |
| mal-2026-499 | Malicious code in system-integration (PyPI) | 2026-01-25T00:57:28Z | 2026-01-25T10:42:32Z |
| MAL-2026-499 | Malicious code in system-integration (PyPI) | 2026-01-25T00:57:28Z | 2026-01-25T10:42:32Z |
| mal-2026-501 | Malicious code in system-integration-toxi (PyPI) | 2026-01-25T10:15:36Z | 2026-01-25T10:15:36Z |
| MAL-2026-501 | Malicious code in system-integration-toxi (PyPI) | 2026-01-25T10:15:36Z | 2026-01-25T10:15:36Z |
| mal-2026-502 | Malicious code in test-poc-package-for-session (PyPI) | 2026-01-25T10:08:47Z | 2026-01-25T10:08:47Z |
| MAL-2026-502 | Malicious code in test-poc-package-for-session (PyPI) | 2026-01-25T10:08:47Z | 2026-01-25T10:08:47Z |
| mal-2026-503 | Malicious code in test-poc-package-for-session-2 (PyPI) | 2026-01-25T10:04:44Z | 2026-01-25T10:04:44Z |
| MAL-2026-503 | Malicious code in test-poc-package-for-session-2 (PyPI) | 2026-01-25T10:04:44Z | 2026-01-25T10:04:44Z |
| mal-2026-498 | Malicious code in instascan-pro (PyPI) | 2026-01-24T16:15:55Z | 2026-01-24T16:15:55Z |
| MAL-2026-498 | Malicious code in instascan-pro (PyPI) | 2026-01-24T16:15:55Z | 2026-01-24T16:15:55Z |
| mal-2026-491 | Malicious code in test-on-other-again (npm) | 2026-01-23T12:02:07Z | 2026-01-23T18:48:56Z |
| MAL-2026-491 | Malicious code in test-on-other-again (npm) | 2026-01-23T12:02:07Z | 2026-01-23T18:48:56Z |
| mal-2026-488 | Malicious code in ntwsx (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| mal-2026-487 | Malicious code in ntwsc (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| MAL-2026-488 | Malicious code in ntwsx (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-3063 | SugarCRM Sugar Enterprise: Mehrere Schwachstellen | 2024-10-03T22:00:00.000+00:00 | 2025-07-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1492 | Microsoft Azure Service Fabric und Monitor Agent: Mehrere Schwachstellen | 2025-07-08T22:00:00.000+00:00 | 2025-07-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1523 | GitLab: Mehrere Schwachstellen | 2025-07-09T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1512 | Keycloak: Kontoübernahme durch Manipulation des E-Mail-Verifizierungsprozesses | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1510 | Trend Micro Maximum Security: Schwachstelle ermöglicht Privilegieneskalation | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1506 | Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1497 | Broadcom Brocade SANnav: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1393 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung | 2025-06-24T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1370 | Red Hat Enterprise Linux (yaml-libyam): Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-22T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1069 | WebKitGTK: Mehrere Schwachstellen | 2025-05-14T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2024-1754 | Roundcube: Mehrere Schwachstellen | 2024-08-04T22:00:00.000+00:00 | 2025-07-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1451 | Drupal: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-07-02T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1430 | Linux Kernel: Mehrere Schwachstellen | 2025-06-30T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1413 | Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Denial of Service und Offenlegung | 2025-06-26T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1371 | FreeRDP: Schwachstelle ermöglicht Denial of Service | 2025-06-22T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1279 | Broadcom Fabric OS: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1467 | Ruby on Rails: Mehrere Schwachstellen | 2019-03-13T23:00:00.000+00:00 | 2025-07-07T22:00:00.000+00:00 |
| wid-sec-w-2023-1042 | Ruby: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-04-19T22:00:00.000+00:00 | 2025-07-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1455 | F5 BIG-IP: Mehrere Schwachstellen | 2019-05-23T22:00:00.000+00:00 | 2025-07-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1130 | Microsoft Edge: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-22T22:00:00.000+00:00 | 2025-06-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1407 | McAfee Agent: Mehrere Schwachstellen | 2022-04-13T22:00:00.000+00:00 | 2025-06-26T22:00:00.000+00:00 |
| wid-sec-w-2025-1378 | Red Hat Enterprise Linux (mod_proxy_cluster): Schwachstelle ermöglicht Manipulation von Daten | 2025-06-23T22:00:00.000+00:00 | 2025-06-25T22:00:00.000+00:00 |
| wid-sec-w-2025-1308 | Mitel MiCollab: Schwachstelle ermöglicht Offenlegung von Informationen und Administrative Zugriffe | 2025-06-11T22:00:00.000+00:00 | 2025-06-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1369 | Red Hat Enterprise Linux (mpfr): Schwachstelle ermöglicht Denial of Service | 2025-06-22T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1368 | IBM Spectrum Protect: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-22T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1367 | IBM InfoSphere Information Server: Mehrere Schwachstellen | 2025-06-22T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1366 | F5 BIG-IP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-22T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1362 | ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-19T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1280 | Intel Firmware: Schwachstelle ermöglicht Denial of Service | 2025-06-10T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1050 | Microsoft Windows Server: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-05-13T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:1190 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update | 2025-02-10T01:06:42+00:00 | 2026-02-23T19:57:39+00:00 |
| rhsa-2025:11889 | Red Hat Security Advisory: 7.1 container image is now available in the Red Hat Ecosystem Catalog. | 2025-07-28T10:55:23+00:00 | 2026-02-23T19:57:39+00:00 |
| rhsa-2025:11749 | Red Hat Security Advisory: Updated 8.1 container image is now available: security and bug fix update | 2025-07-24T15:20:25+00:00 | 2026-02-23T19:57:37+00:00 |
| rhsa-2025:11682 | Red Hat Security Advisory: OpenShift Container Platform 4.16.45 packages and security update | 2025-07-30T13:27:32+00:00 | 2026-02-23T19:57:35+00:00 |
| rhsa-2025:11678 | Red Hat Security Advisory: OpenShift Container Platform 4.18.21 packages and security update | 2025-07-30T22:44:53+00:00 | 2026-02-23T19:57:34+00:00 |
| rhsa-2025:11669 | Red Hat Security Advisory: OpenShift Container Platform 4.14.54 bug fix and security update | 2025-07-31T03:56:26+00:00 | 2026-02-23T19:57:33+00:00 |
| rhsa-2025:11573 | Red Hat Security Advisory: Multicluster engine for Kubernetes 2.7.5 security updates and bug fixes | 2025-07-23T03:56:43+00:00 | 2026-02-23T19:57:32+00:00 |
| rhsa-2025:11479 | Red Hat Security Advisory: ACS 4.7 enhancement and security update | 2025-07-21T18:31:30+00:00 | 2026-02-23T19:57:31+00:00 |
| rhsa-2025:11396 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.4.5 security and bug fix update | 2025-07-18T15:51:18+00:00 | 2026-02-23T19:57:31+00:00 |
| rhsa-2025:11352 | Red Hat Security Advisory: OpenShift Container Platform 4.15.55 packages and security update | 2025-07-23T17:25:28+00:00 | 2026-02-23T19:57:30+00:00 |
| rhsa-2025:11351 | Red Hat Security Advisory: OpenShift Container Platform 4.15.55 bug fix and security update | 2025-07-23T17:11:08+00:00 | 2026-02-23T19:57:29+00:00 |
| rhsa-2025:10782 | Red Hat Security Advisory: OpenShift Container Platform 4.16.44 packages and security update | 2025-07-18T09:40:47+00:00 | 2026-02-23T19:57:26+00:00 |
| rhsa-2025:10781 | Red Hat Security Advisory: OpenShift Container Platform 4.16.44 bug fix and security update | 2025-07-17T21:33:05+00:00 | 2026-02-23T19:57:25+00:00 |
| rhsa-2025:10768 | Red Hat Security Advisory: OpenShift Container Platform 4.18.20 packages and security update | 2025-07-18T08:33:56+00:00 | 2026-02-23T19:57:24+00:00 |
| rhsa-2025:10767 | Red Hat Security Advisory: OpenShift Container Platform 4.18.20 bug fix and security update | 2025-07-17T21:32:29+00:00 | 2026-02-23T19:57:24+00:00 |
| rhsa-2025:10323 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2025-07-03T12:45:38+00:00 | 2026-02-23T19:57:22+00:00 |
| rhsa-2025:10295 | Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update | 2025-07-09T04:18:32+00:00 | 2026-02-23T19:57:22+00:00 |
| rhsa-2025:0892 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.18.0 release | 2025-02-03T16:38:18+00:00 | 2026-02-23T19:57:22+00:00 |
| rhsa-2025:10294 | Red Hat Security Advisory: OpenShift Container Platform 4.17.35 bug fix and security update | 2025-07-09T04:04:14+00:00 | 2026-02-23T19:57:20+00:00 |
| rhsa-2025:10291 | Red Hat Security Advisory: OpenShift Container Platform 4.19.3 packages and security update | 2025-07-08T23:17:01+00:00 | 2026-02-23T19:57:18+00:00 |
| rhsa-2025:10271 | Red Hat Security Advisory: OpenShift Container Platform 4.12.78 packages and security update | 2025-07-10T01:56:40+00:00 | 2026-02-23T19:57:18+00:00 |
| rhsa-2025:0839 | Red Hat Security Advisory: OpenShift Container Platform 4.14.46 security update | 2025-02-06T01:36:17+00:00 | 2026-02-23T19:57:17+00:00 |
| rhsa-2025:0851 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.2 security and bug fix updates | 2025-01-30T21:30:22+00:00 | 2026-02-23T19:57:14+00:00 |
| rhsa-2025:0785 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.5 bug fixes and container updates | 2025-01-28T23:59:02+00:00 | 2026-02-23T19:57:12+00:00 |
| rhsa-2025:0771 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.4.2 security and bug fix update | 2025-01-28T15:50:58+00:00 | 2026-02-23T19:57:09+00:00 |
| rhsa-2025:0778 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.5 security updates and bug fixes | 2025-01-28T20:56:08+00:00 | 2026-02-23T19:57:08+00:00 |
| rhsa-2025:0723 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.3 security updates and bug fixes | 2025-01-27T21:50:16+00:00 | 2026-02-23T19:57:03+00:00 |
| rhsa-2025:0679 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.7 bug fixes and container updates | 2025-01-23T23:30:43+00:00 | 2026-02-23T19:57:00+00:00 |
| rhsa-2025:0676 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.5.8 security updates and bug fixes | 2025-01-23T20:15:51+00:00 | 2026-02-23T19:56:59+00:00 |
| rhsa-2025:0664 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update & enhancements | 2025-01-23T13:02:37+00:00 | 2026-02-23T19:56:58+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-16-042-01a | Moxa EDR-G903 Secure Router Vulnerabilities (Update A) | 2016-11-14T07:00:00.000000Z | 2025-06-05T21:36:42.937829Z |
| icsa-16-040-02 | Siemens SIMATIC S7-1500 CPU Vulnerabilities | 2016-11-12T07:00:00.000000Z | 2025-06-05T21:36:30.466787Z |
| icsa-16-040-01 | Tollgrade SmartGrid Sensor Management System Software Vulnerabilities | 2016-11-12T07:00:00.000000Z | 2025-06-05T21:36:05.594352Z |
| icsa-16-033-02 | GE SNMP/Web Interface Vulnerabilities | 2016-11-05T06:00:00.000000Z | 2025-06-05T21:35:53.140871Z |
| icsa-16-033-01 | Sauter moduWeb Vision Vulnerabilities | 2016-11-05T06:00:00.000000Z | 2025-06-05T21:35:34.424132Z |
| icsa-16-028-01a | Westermo Industrial Switch Hard-coded Certificate Vulnerability (Update A) | 2016-10-31T06:00:00.000000Z | 2025-06-05T21:35:27.841677Z |
| icsa-25-155-01 | CyberData 011209 SIP Emergency Intercom | 2025-06-05T06:00:00.000000Z | 2025-06-05T06:00:00.000000Z |
| icsa-21-049-02 | Mitsubishi Electric FA Engineering Software Products (Update H) | 2021-02-18T07:00:00.000000Z | 2025-06-05T06:00:00.000000Z |
| icsa-25-153-03 | Mitsubishi Electric MELSEC iQ-F Series | 2025-06-03T06:00:00.000000Z | 2025-06-03T06:00:00.000000Z |
| icsa-25-153-01 | Schneider Electric Wiser Home Automation | 2025-06-03T06:00:00.000000Z | 2025-06-03T06:00:00.000000Z |
| icsma-25-148-01 | Santesoft Sante DICOM Viewer Pro | 2025-05-29T06:00:00.000000Z | 2025-05-29T06:00:00.000000Z |
| va-25-147-01 | Craft CMS stores user-provided content session files | 2025-05-28T20:57:43Z | 2025-05-28T20:57:43Z |
| va-25-148-01 | ZKTeco BioTime multiple vulnerabilities | 2025-05-28T15:28:55Z | 2025-05-28T15:28:55Z |
| icsa-25-160-02 | Hitachi Energy Relion 670 650 SAM600-IO Series | 2023-06-27T12:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-155-02 | Hitachi Energy Relion 670 650 series and SAM600-IO Product | 2021-12-16T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-133-02 | Hitachi Energy Relion 670/650/SAM600-IO Series (Update A) | 2023-11-28T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-21-336-05 | Hitachi Energy Relion 670/650/SAM600-IO | 2021-11-04T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-146-01 | Johnson Controls iSTAR Configuration Utility (ICU) tool | 2025-05-27T06:00:00.000000Z | 2025-05-27T06:00:00.000000Z |
| icsa-25-142-02 | Rockwell Automation FactoryTalk Historian ThingWorx | 2025-05-22T06:00:00.000000Z | 2025-05-22T06:00:00.000000Z |
| icsa-25-142-01 | Lantronix Device Installer | 2025-05-22T06:00:00.000000Z | 2025-05-22T06:00:00.000000Z |
| icsa-25-140-10 | Vertiv Liebert RDU101 and UNITY | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| icsa-25-140-09 | AutomationDirect MB-Gateway | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| icsa-25-140-02 | National Instruments Circuit Design Suite | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| icsa-25-140-01 | ABUP IoT Cloud Platform | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| va-25-119-01 | MSP360 Backup insecure filesystem permissions | 2025-04-29T15:59:52Z | 2025-05-19T00:00:00Z |
| icsa-25-135-20 | Schneider Electric EcoStruxure Power Build Rapsody | 2025-05-15T06:00:00.000000Z | 2025-05-15T06:00:00.000000Z |
| icsa-24-200-01 | Mitsubishi Electric MELSOFT MaiLab and MELSOFT VIXIO (Update A) | 2024-07-18T06:00:00.000000Z | 2025-05-15T06:00:00.000000Z |
| icsa-25-140-05 | Siemens Siveillance Video | 2025-05-14T00:00:00.000000Z | 2025-05-14T00:00:00.000000Z |
| icsa-25-133-04 | ABB Automation Builder | 2025-05-13T06:00:00.000000Z | 2025-05-13T06:00:00.000000Z |
| icsa-25-153-02 | Schneider Electric EcoStruxure Power Build Rapsody | 2025-05-13T04:00:00.000000Z | 2025-05-13T04:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180328-dhcpr1 | Cisco IOS and IOS XE Software DHCP Version 4 Relay Heap Overflow Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:52+00:00 |
| cisco-sa-20180207-rv13x | Cisco RV132W and RV134W Remote Code Execution and Denial of Service Vulnerability | 2018-02-07T16:00:00+00:00 | 2022-12-15T22:19:52+00:00 |
| cisco-sa-20180328-snmp | Cisco IOS Software Simple Network Management Protocol GET MIB Object ID Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:51+00:00 |
| cisco-sa-20191106-sbrv-cmd-x | Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability | 2019-11-06T16:00:00+00:00 | 2022-12-15T22:19:50+00:00 |
| cisco-sa-20180328-slogin | Cisco IOS Software Login Enhancements Login Block Denial of Service Vulnerabilities | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:49+00:00 |
| cisco-sa-hyperflex-rce-tjjnrkpr | Cisco HyperFlex HX Command Injection Vulnerabilities | 2021-05-05T16:00:00+00:00 | 2022-12-15T22:19:48+00:00 |
| cisco-sa-hyperflex-rce-TjjNrkpR | Cisco HyperFlex HX Command Injection Vulnerabilities | 2021-05-05T16:00:00+00:00 | 2022-12-15T22:19:48+00:00 |
| cisco-sa-20180328-ike | Cisco IOS and IOS XE Software Internet Key Exchange Memory Leak Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:48+00:00 |
| cisco-sa-20180328-lldp | Cisco IOS, IOS XE, and IOS XR Software Link Layer Discovery Protocol Buffer Overflow Vulnerabilities | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:45+00:00 |
| cisco-sa-20180328-dhcpr2 | Cisco IOS and IOS XE Software DHCP Version 4 Relay Reply Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:44+00:00 |
| cisco-sa-20180328-smi | Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:43+00:00 |
| cisco-sa-20180328-bfd | Cisco IOS and IOS XE Software Bidirectional Forwarding Detection Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:42+00:00 |
| cisco-sa-20180307-acs2 | Cisco Secure Access Control System Java Deserialization Vulnerability | 2018-03-07T16:00:00+00:00 | 2022-12-15T19:32:31+00:00 |
| cisco-sa-clamav-html-xauok8mr | ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:13:16+00:00 |
| cisco-sa-clamav-html-XAuOK8mR | ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:13:16+00:00 |
| cisco-sa-clamav-dos-zazbwrvg | ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:03:44+00:00 |
| cisco-sa-clamav-dos-ZAZBwRVG | ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:03:44+00:00 |
| cisco-sa-clamav-dos-prvgchld | ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-14T18:46:44+00:00 |
| cisco-sa-clamav-dos-prVGcHLd | ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-14T18:46:44+00:00 |
| cisco-sa-snort-smb-3nfhjtr | Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-30T21:51:24+00:00 |
| cisco-sa-snort-smb-3nfhJtr | Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-30T21:51:24+00:00 |
| cisco-sa-esasmawsa-vulns-yrusw5md | Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities | 2022-11-02T16:00:00+00:00 | 2022-11-30T12:49:53+00:00 |
| cisco-sa-esasmawsa-vulns-YRuSW5mD | Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities | 2022-11-02T16:00:00+00:00 | 2022-11-30T12:49:53+00:00 |
| cisco-sa-openssl-w9sdcc2a | Vulnerabilities in OpenSSL Affecting Cisco Products: November 2022 | 2022-10-28T16:00:00+00:00 | 2022-11-23T20:23:17+00:00 |
| cisco-sa-openssl-W9sdCc2a | Vulnerabilities in OpenSSL Affecting Cisco Products: November 2022 | 2022-10-28T16:00:00+00:00 | 2022-11-23T20:23:17+00:00 |
| cisco-sa-ise-stor-xss-kprbwxy | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:29:06+00:00 |
| cisco-sa-ise-stor-xss-kpRBWXY | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:29:06+00:00 |
| cisco-sa-ise-csrf-vgnttpas | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:26:05+00:00 |
| cisco-sa-ise-csrf-vgNtTpAs | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:26:05+00:00 |
| cisco-sa-ise-path-trav-f6m7cs6r | Cisco Identity Services Engine Path Traversal Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T14:40:22+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-42101 | drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes | 2024-07-01T07:00:00.000Z | 2026-02-18T14:59:06.000Z |
| msrc_cve-2021-3468 | A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service which becomes unresponsive after this flaw is triggered. | 2021-06-02T00:00:00.000Z | 2026-02-18T14:59:05.000Z |
| msrc_cve-2021-22931 | Node.js before 16.6.0 14.17.4 and 12.22.4 is vulnerable to Remote Code Execution XSS Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. | 2021-08-02T00:00:00.000Z | 2026-02-18T14:59:05.000Z |
| msrc_cve-2024-56201 | Jinja has a sandbox breakout through malicious filenames | 2024-12-02T00:00:00.000Z | 2026-02-18T14:58:55.000Z |
| msrc_cve-2024-47679 | vfs: fix race between evice_inodes() and find_inode()&iput() | 2024-10-01T07:00:00.000Z | 2026-02-18T14:58:54.000Z |
| msrc_cve-2024-31081 | Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice | 2024-04-02T07:00:00.000Z | 2026-02-18T14:58:54.000Z |
| msrc_cve-2021-26720 | avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the packaging for Debian GNU/Linux (used indirectly by SUSE) not the upstream Avahi product. | 2021-02-02T00:00:00.000Z | 2026-02-18T14:58:37.000Z |
| msrc_cve-2024-31082 | Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap | 2024-04-02T07:00:00.000Z | 2026-02-18T14:58:27.000Z |
| msrc_cve-2020-28851 | In x/text in Go 1.15.4 an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.) | 2021-01-02T00:00:00.000Z | 2026-02-18T14:58:25.000Z |
| msrc_cve-2024-43828 | ext4: fix infinite loop when replaying fast_commit | 2024-08-02T00:00:00.000Z | 2026-02-18T14:58:23.000Z |
| msrc_cve-2024-50047 | smb: client: fix UAF in async decryption | 2024-10-01T07:00:00.000Z | 2026-02-18T14:58:15.000Z |
| msrc_cve-2022-24963 | Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions | 2023-01-04T00:00:00.000Z | 2026-02-18T14:58:11.000Z |
| msrc_cve-2025-39827 | net: rose: include node references in rose_neigh refcount | 2025-09-02T00:00:00.000Z | 2026-02-18T14:58:07.000Z |
| msrc_cve-2024-56326 | Jinja has a sandbox breakout through indirect reference to format method | 2024-12-02T00:00:00.000Z | 2026-02-18T14:57:58.000Z |
| msrc_cve-2024-26671 | blk-mq: fix IO hang from sbitmap wakeup race | 2024-04-02T07:00:00.000Z | 2026-02-18T14:57:55.000Z |
| msrc_cve-2022-41723 | Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net | 2023-02-01T00:00:00.000Z | 2026-02-18T14:57:45.000Z |
| msrc_cve-2025-39825 | smb: client: fix race with concurrent opens in rename(2) | 2025-09-02T00:00:00.000Z | 2026-02-18T14:57:42.000Z |
| msrc_cve-2024-43856 | dma: fix call order in dmam_free_coherent | 2024-08-02T00:00:00.000Z | 2026-02-18T14:57:42.000Z |
| msrc_cve-2023-45231 | Out-of-Bounds Read in EDK II Network Package | 2024-01-01T08:00:00.000Z | 2026-02-18T14:57:37.000Z |
| msrc_cve-2024-47735 | RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled | 2024-10-01T07:00:00.000Z | 2026-02-18T14:57:35.000Z |
| msrc_cve-2023-27119 | WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild. | 2023-03-10T00:00:00.000Z | 2026-02-18T14:57:35.000Z |
| msrc_cve-2024-26645 | tracing: Ensure visibility when inserting an element into tracing_map | 2024-03-02T08:00:00.000Z | 2026-02-18T14:57:28.000Z |
| msrc_cve-2015-8126 | Multiple buffer overflows in libpng allow remote attackers to cause a denial of service | 2015-11-02T00:00:00.000Z | 2026-02-18T14:57:19.000Z |
| msrc_cve-2024-41006 | netrom: Fix a memory leak in nr_heartbeat_expiry() | 2024-07-01T07:00:00.000Z | 2026-02-18T14:56:56.000Z |
| msrc_cve-2025-39819 | fs/smb: Fix inconsistent refcnt update | 2025-09-02T00:00:00.000Z | 2026-02-18T14:56:52.000Z |
| msrc_cve-2024-47720 | drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func | 2024-10-01T07:00:00.000Z | 2026-02-18T14:56:51.000Z |
| msrc_cve-2015-3416 | The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement. | 2015-04-02T00:00:00.000Z | 2026-02-18T14:56:51.000Z |
| msrc_cve-2022-49484 | mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector | 2025-02-02T00:00:00.000Z | 2026-02-18T14:56:50.000Z |
| msrc_cve-2025-38034 | btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref | 2025-06-02T00:00:00.000Z | 2026-02-18T14:56:48.000Z |
| msrc_cve-2024-53096 | mm: resolve faulty mmap_region() error path behaviour | 2024-11-02T00:00:00.000Z | 2026-02-18T14:56:47.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15177-1 | ffmpeg-7-7.1.1-4.1 on GA media | 2025-05-30T00:00:00Z | 2025-05-30T00:00:00Z |
| opensuse-su-2025:15176-1 | curl-8.14.0-1.1 on GA media | 2025-05-30T00:00:00Z | 2025-05-30T00:00:00Z |
| opensuse-su-2025:15175-1 | apache-commons-beanutils-1.11.0-1.1 on GA media | 2025-05-30T00:00:00Z | 2025-05-30T00:00:00Z |
| opensuse-su-2025:15174-1 | MozillaThunderbird-128.11.0-1.1 on GA media | 2025-05-30T00:00:00Z | 2025-05-30T00:00:00Z |
| opensuse-su-2025:15173-1 | s390-tools-2.37.0-4.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15172-1 | libmozjs-128-0-128.10.1-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15171-1 | grafana-11.6.1+security01-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15170-1 | firefox-esr-128.11.0-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15169-1 | containerd-1.7.27-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15168-1 | yelp-xsl-42.1-2.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15167-1 | libyelp0-42.2-4.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15166-1 | umoci-0.5.0-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15165-1 | libnss_slurm2-24.11.5-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15164-1 | screen-4.9.1-5.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15163-1 | python312-3.12.10-4.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15162-1 | prometheus-blackbox_exporter-0.24.0-3.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15161-1 | jq-1.7.1-3.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15160-1 | jetty-annotations-9.4.57-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15159-1 | govulncheck-vulndb-0.0.20250523T151856-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15158-1 | gh-2.73.0-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15157-1 | dnsdist-1.9.10-2.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15156-1 | bind-9.20.9-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15155-1 | transfig-3.2.9a-3.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15154-1 | python313-3.13.3-3.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15153-1 | python311-tornado6-6.5-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15152-1 | python311-Flask-3.1.1-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15151-1 | libecpg6-17.5-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15150-1 | audiofile-0.3.6-16.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15149-1 | MozillaThunderbird-128.10.2-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15148-1 | MozillaFirefox-138.0.4-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-617 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2023-07-27T14:00:51.420632Z | 2023-08-04T14:17:57.934642Z |
| osv-2023-645 | Segv on unknown address in decUnitCompare | 2023-08-04T14:02:38.270949Z | 2023-08-04T14:02:38.271192Z |
| osv-2022-1280 | Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode | 2023-08-04T14:00:41.927304Z | 2023-08-04T14:00:41.927544Z |
| osv-2023-636 | Security exception in jflex.core.NFA.insertNFA | 2023-08-03T14:00:58.919043Z | 2023-08-03T14:00:58.919497Z |
| osv-2023-505 | UNKNOWN WRITE in regcomp | 2023-06-22T14:02:20.855256Z | 2023-08-01T14:06:27.325503Z |
| osv-2023-631 | Heap-buffer-overflow in test_verify | 2023-08-01T14:02:11.454420Z | 2023-08-01T14:02:11.454673Z |
| osv-2023-627 | Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton | 2023-07-31T14:00:58.902209Z | 2023-07-31T14:00:58.902458Z |
| osv-2023-623 | Heap-use-after-free in Elf32_free | 2023-07-28T14:01:31.646164Z | 2023-07-28T14:01:31.646403Z |
| osv-2023-619 | Security exception in java.base/java.util.regex.Pattern$GroupTail.match | 2023-07-27T14:00:54.002113Z | 2023-07-27T14:00:54.002341Z |
| osv-2023-618 | Security exception in java.base/java.util.regex.Pattern$Loop.match | 2023-07-27T14:00:53.785484Z | 2023-07-27T14:00:53.785737Z |
| osv-2023-610 | Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton | 2023-07-23T14:02:28.957945Z | 2023-07-23T14:02:28.958170Z |
| osv-2023-609 | Stack-buffer-overflow in sc_pkcs15_get_lastupdate | 2023-07-23T14:02:26.863116Z | 2023-07-23T14:02:26.863362Z |
| osv-2022-330 | Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i | 2022-04-11T00:00:12.423473Z | 2023-07-22T14:11:03.219082Z |
| osv-2022-799 | Incorrect-function-pointer-type in grk::BufferedStream::read | 2022-08-28T00:02:06.609956Z | 2023-07-22T14:10:59.366573Z |
| osv-2022-336 | Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::vtrans | 2022-04-12T00:00:32.150063Z | 2023-07-22T14:10:59.966993Z |
| osv-2022-252 | Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM | 2022-03-18T00:01:35.796630Z | 2023-07-22T14:10:55.592593Z |
| osv-2022-245 | Heap-buffer-overflow in grk::PacketIter::genPrecinctInfo | 2022-03-15T00:01:42.984652Z | 2023-07-22T14:10:55.061574Z |
| osv-2021-677 | Heap-buffer-overflow in grk::FileFormatDecompress::apply_palette_clr | 2021-04-23T00:00:13.554175Z | 2023-07-22T14:10:26.095692Z |
| osv-2021-510 | Heap-use-after-free in grk_object_unref | 2021-03-11T00:00:21.858475Z | 2023-07-22T14:10:14.782402Z |
| osv-2021-456 | Heap-buffer-overflow in grk::Quantizer::read_SQcd_SQcc | 2021-02-28T00:01:15.686942Z | 2023-07-22T14:10:08.300968Z |
| osv-2021-448 | Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev | 2021-02-26T00:00:17.945183Z | 2023-07-22T14:10:00.669714Z |
| osv-2021-426 | Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev | 2021-02-22T00:00:08.360778Z | 2023-07-22T14:09:55.891913Z |
| osv-2021-1344 | Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress | 2021-09-21T00:01:35.030626Z | 2023-07-22T14:06:09.433208Z |
| osv-2022-295 | Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev> | 2022-04-02T00:01:43.648632Z | 2023-07-22T14:04:06.247397Z |
| osv-2023-598 | Heap-use-after-free in zval_call_destructor | 2023-07-20T14:01:52.569977Z | 2023-07-20T14:01:52.570218Z |
| osv-2023-586 | Heap-buffer-overflow in setcos_create_key | 2023-07-19T14:00:35.841154Z | 2023-07-19T14:00:35.841409Z |
| osv-2023-581 | Heap-buffer-overflow in wwunpack | 2023-07-18T14:00:33.759863Z | 2023-07-18T14:00:33.760126Z |
| osv-2023-580 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2023-07-17T14:01:47.459416Z | 2023-07-17T14:01:47.459668Z |
| osv-2023-578 | Heap-buffer-overflow in cosm_new_file | 2023-07-17T14:00:32.356018Z | 2023-07-17T14:00:32.356264Z |
| osv-2023-576 | Heap-double-free in sc_pkcs15_free_object_content | 2023-07-16T14:02:13.225841Z | 2023-07-16T14:02:13.226071Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-libpython-2025-4138 | Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory | 2025-08-11T13:53:07.492Z | 2025-08-11T14:19:40.295Z |
| bit-libpython-2024-12718 | Bypass extraction filter to modify file metadata outside extraction directory | 2025-08-11T13:52:42.384Z | 2025-08-11T14:19:40.295Z |
| bit-libpython-2024-12254 | Unbounded memory buffering in SelectorSocketTransport.writelines() | 2025-08-11T13:52:40.569Z | 2025-08-11T14:19:40.295Z |
| bit-libpython-2023-6507 | Groups not dropped before running subprocess when using empty 'extra_groups' parameter | 2025-08-11T13:52:31.237Z | 2025-08-11T14:19:40.295Z |
| bit-libpython-2023-41105 | 2025-08-11T13:52:29.288Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2023-36632 | 2025-08-11T13:52:24.684Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-48566 | 2025-08-11T13:52:16.768Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-48565 | 2025-08-11T13:52:14.793Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-48564 | 2025-08-11T13:52:12.981Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-48560 | 2025-08-11T13:52:10.924Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-37454 | 2025-08-11T13:52:04.668Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-26488 | 2025-08-11T13:52:02.378Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2021-3177 | 2025-08-11T13:51:48.817Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2021-23336 | Web Cache Poisoning | 2025-08-11T13:51:41.925Z | 2025-08-11T14:19:40.295Z |
| bit-libpython-2020-8492 | 2025-08-11T13:51:39.499Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-8315 | 2025-08-11T13:51:37.536Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-27619 | 2025-08-11T13:51:35.537Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-26116 | 2025-08-11T13:51:33.813Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-15801 | 2025-08-11T13:51:32.060Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-15523 | 2025-08-11T13:51:30.254Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-14422 | 2025-08-11T13:51:28.699Z | 2025-08-11T14:19:40.295Z | |
| bit-libphp-2024-5585 | Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) | 2025-08-11T13:54:23.045Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2024-2408 | PHP is vulnerable to the Marvin Attack | 2025-08-11T13:54:10.823Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2024-11235 | Reference counting in php_request_shutdown causes Use-After-Free | 2025-08-11T13:54:04.899Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-3824 | Buffer overflow and overread in phar_dir_read() | 2025-08-11T13:53:59.498Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-3823 | Security issue with external entity loading in XML without enabling it | 2025-08-11T13:53:57.829Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-3247 | Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP | 2025-08-11T13:53:55.851Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-0662 | DoS vulnerability when parsing multipart request body | 2025-08-11T13:53:54.096Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-0568 | Array overrun in common path resolve code | 2025-08-11T13:53:52.314Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-0567 | password_verify() always returns true for some invalid hashes | 2025-08-11T13:53:50.380Z | 2025-08-11T14:19:40.295Z |
| ID | Description | Updated |
|---|---|---|
| var-201302-0308 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T20:07:21.585000Z |
| var-201904-1472 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:06:47.465000Z |
| var-200907-0693 | The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until co… | 2024-07-23T20:06:47.266000Z |
| var-201202-0066 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:06:42.920000Z |
| var-201806-1462 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2024-07-23T20:06:41.667000Z |
| var-201203-0198 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2024-07-23T20:06:41.947000Z |
| var-202010-1245 | A logic issue was addressed with improved state management. This issue is fixed in iOS 13… | 2024-07-23T20:06:39.639000Z |
| var-201405-0542 | java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache To… | 2024-07-23T20:06:39.885000Z |
| var-200702-0382 | Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through… | 2024-07-23T20:06:39.539000Z |
| var-201006-1124 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-07-23T20:06:02.053000Z |
| var-200809-0006 | Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, … | 2024-07-23T20:06:02.113000Z |
| var-201912-0552 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T20:05:58.400000Z |
| var-201806-1458 | An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS b… | 2024-07-23T20:05:58.507000Z |
| var-201112-0046 | Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remo… | 2024-07-23T20:05:58.677000Z |
| var-200512-0678 | The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.8… | 2024-07-23T20:05:56.525000Z |
| var-200110-0349 | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… | 2024-07-23T20:05:55.152000Z |
| var-201310-0345 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 an… | 2024-07-23T20:05:22.269000Z |
| var-201306-0250 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:05:01.335000Z |
| var-202103-0920 | An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be … | 2024-07-23T20:03:59.447000Z |
| var-201905-0710 | Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors ut… | 2024-07-23T20:03:59.004000Z |
| var-201607-0657 | PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts… | 2024-07-23T20:03:59.307000Z |
| var-201811-0912 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit softwa… | 2024-07-23T20:03:27.882000Z |
| var-202005-0022 | A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of … | 2024-07-23T20:03:21.822000Z |
| var-202004-1973 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-07-23T20:03:21.561000Z |
| var-201211-0365 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-07-23T20:03:18.542000Z |
| var-200807-0012 | WebCore in Apple Safari does not properly perform garbage collection of JavaScript docume… | 2024-07-23T20:03:18.209000Z |
| var-201210-0276 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:03:15.594000Z |
| var-201910-1503 | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_pr… | 2024-07-23T20:03:14.578000Z |
| var-201605-0076 | Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL bef… | 2024-07-23T20:02:36.076000Z |
| var-201302-0134 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:02:36.483000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2020-000022 | Multiple vulnerabilities in EasyBlocks IPv6 | 2020-04-08T16:12+09:00 | 2020-04-08T16:12+09:00 |
| jvndb-2020-000024 | Joomla! plugin "AcyMailing" vulnerable to arbitrary file uploads | 2020-04-07T14:49+09:00 | 2020-04-07T14:49+09:00 |
| jvndb-2020-000021 | Multiple Yamaha network devices vulnerable to denial-of-service (DoS) | 2020-03-31T17:44+09:00 | 2020-04-01T18:38+09:00 |
| jvndb-2019-000014 | The installer of Microsoft Teams may insecurely load Dynamic Link Libraries | 2019-04-02T14:18+09:00 | 2020-04-01T16:55+09:00 |
| jvndb-2020-002958 | Denial-of-service (DoS) vulnerability in Mitsubishi Electric MELSOFT transmission port | 2020-03-31T13:37+09:00 | 2020-04-01T14:45+09:00 |
| jvndb-2020-000907 | WL-Enq (WEB Enquete) vulnerable to OS command injection | 2020-03-25T09:50+09:00 | 2020-03-25T09:50+09:00 |
| jvndb-2020-000908 | Keijiban Tsumiki vulnerable to OS command injection | 2020-03-24T18:14+09:00 | 2020-03-24T18:14+09:00 |
| jvndb-2020-000900 | mailform vulnerable to cross-site scripting | 2020-03-24T18:05+09:00 | 2020-03-24T18:05+09:00 |
| jvndb-2020-000901 | mailform vulnerable to PHP code execution | 2020-03-24T17:59+09:00 | 2020-03-24T17:59+09:00 |
| jvndb-2020-000902 | Multiple vulnerabilities in Shihonkanri Plus GOOUT | 2020-03-24T17:53+09:00 | 2020-03-24T17:53+09:00 |
| jvndb-2020-000903 | Shihonkanri Plus GOOUT vulnerable to OS command injection | 2020-03-24T17:47+09:00 | 2020-03-24T17:47+09:00 |
| jvndb-2020-000904 | CuteNews vulnerable to cross-site scripting | 2020-03-24T17:42+09:00 | 2020-03-24T17:42+09:00 |
| jvndb-2020-000905 | Cute News vulnerable to PHP code execution | 2020-03-24T17:40+09:00 | 2020-03-24T17:40+09:00 |
| jvndb-2020-002278 | Cross-site Scripting Vulnerability in JP1/Performance Management - Manager [Web Console] | 2020-03-11T14:16+09:00 | 2020-03-11T14:16+09:00 |
| jvndb-2020-002219 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center | 2020-03-09T11:23+09:00 | 2020-03-09T11:23+09:00 |
| jvndb-2020-002220 | Improper LDAPS Certificate Validation in Hitachi Ops Center Common Services | 2020-03-09T11:21+09:00 | 2020-03-09T11:21+09:00 |
| jvndb-2020-000013 | Multiple Trend Micro products vulnerable to denial-of-service (DoS) | 2020-02-14T13:39+09:00 | 2020-03-06T13:56+09:00 |
| jvndb-2020-000020 | Multiple vulnerabilities in OpenBlocks IoT VX2 | 2020-03-03T17:50+09:00 | 2020-03-03T17:50+09:00 |
| jvndb-2020-000019 | GRANDIT vulnerable to session management | 2020-03-02T14:39+09:00 | 2020-03-02T14:39+09:00 |
| jvndb-2019-000058 | Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs) | 2019-09-13T14:29+09:00 | 2020-02-25T17:27+09:00 |
| jvndb-2019-014138 | Improper Authentication Vulnerability in RICOH printers | 2020-02-25T15:47+09:00 | 2020-02-25T15:47+09:00 |
| jvndb-2019-014137 | Improper Access Control Vulnerability in RICOH printers | 2020-02-25T15:44+09:00 | 2020-02-25T15:44+09:00 |
| jvndb-2019-014437 | Privilege escalation vulnerability in multiple RICOH printer drivers | 2020-02-25T15:29+09:00 | 2020-02-25T15:29+09:00 |
| jvndb-2019-014031 | Cross-site Request Forgery Vulnerability in RICOH printers | 2020-02-25T14:06+09:00 | 2020-02-25T14:06+09:00 |
| jvndb-2019-014136 | Information Disclosure Vulnerability in RICOH printers | 2020-02-25T14:02+09:00 | 2020-02-25T14:02+09:00 |
| jvndb-2020-000016 | Multiple OS command injection vulnerabilities in Aterm WF1200C, Aterm WG1200CR, and Aterm WG2600HS | 2020-02-19T14:39+09:00 | 2020-02-19T14:39+09:00 |
| jvndb-2020-000015 | Multiple vulnerabilities in Aterm WG2600HS | 2020-02-19T14:34+09:00 | 2020-02-19T14:34+09:00 |
| jvndb-2020-000012 | WordPress Plugin "Easy Property Listings" vulnerable to cross-site request forgery | 2020-02-18T13:42+09:00 | 2020-02-18T13:42+09:00 |
| jvndb-2020-001591 | Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 | 2020-02-18T12:10+09:00 | 2020-02-18T12:10+09:00 |
| jvndb-2020-001545 | Security information for Hitachi Disk Array Systems | 2020-02-14T15:34+09:00 | 2020-02-14T15:34+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:3758-1 | Security update for openssl-1_1-livepatches | 2025-10-23T13:45:12Z | 2025-10-23T13:45:12Z |
| suse-su-2025:20910-1 | Security update for openssl-3-livepatches | 2025-10-23T13:08:17Z | 2025-10-23T13:08:17Z |
| suse-su-2025:20897-1 | Security update for libxslt | 2025-10-23T12:41:24Z | 2025-10-23T12:41:24Z |
| suse-su-2025:3755-1 | Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP6) | 2025-10-23T11:05:11Z | 2025-10-23T11:05:11Z |
| suse-su-2025:3754-1 | Security update for python-Authlib | 2025-10-23T10:27:00Z | 2025-10-23T10:27:00Z |
| suse-su-2025:3753-1 | Security update for libsoup | 2025-10-23T10:26:39Z | 2025-10-23T10:26:39Z |
| suse-su-2025:3752-1 | Security update for libsoup | 2025-10-23T10:26:29Z | 2025-10-23T10:26:29Z |
| suse-su-2025:3751-1 | Security update for the Linux Kernel | 2025-10-23T10:25:37Z | 2025-10-23T10:25:37Z |
| suse-su-2025:3748-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-10-23T09:08:16Z | 2025-10-23T09:08:16Z |
| suse-su-2025:3744-1 | Security update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock | 2025-10-23T06:22:53Z | 2025-10-23T06:22:53Z |
| suse-su-2025:3743-1 | Security update for libxslt | 2025-10-23T06:19:50Z | 2025-10-23T06:19:50Z |
| suse-su-2025:3742-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) | 2025-10-23T06:06:49Z | 2025-10-23T06:06:49Z |
| suse-su-2025:3741-1 | Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5) | 2025-10-23T05:46:36Z | 2025-10-23T05:46:36Z |
| suse-su-2025:3740-1 | Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP5) | 2025-10-23T05:46:28Z | 2025-10-23T05:46:28Z |
| suse-su-2025:3736-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP5) | 2025-10-22T22:41:33Z | 2025-10-22T22:41:33Z |
| suse-su-2025:3733-1 | Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5) | 2025-10-22T18:34:34Z | 2025-10-22T18:34:34Z |
| suse-su-2025:3734-1 | Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5) | 2025-10-22T17:04:43Z | 2025-10-22T17:04:43Z |
| suse-su-2025:3731-1 | Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5) | 2025-10-22T13:34:30Z | 2025-10-22T13:34:30Z |
| suse-su-2025:3729-1 | Security update for krb5 | 2025-10-22T13:19:35Z | 2025-10-22T13:19:35Z |
| suse-su-2025:20869-1 | Security update for podman | 2025-10-22T12:25:33Z | 2025-10-22T12:25:33Z |
| suse-su-2025:20896-1 | Security update for openssl-3 | 2025-10-22T12:18:32Z | 2025-10-22T12:18:32Z |
| suse-su-2025:20895-1 | Security update for expat | 2025-10-22T12:11:31Z | 2025-10-22T12:11:31Z |
| suse-su-2025:20868-1 | Security update for expat | 2025-10-22T12:00:46Z | 2025-10-22T12:00:46Z |
| suse-su-2025:3725-1 | Security update for the Linux Kernel | 2025-10-22T11:48:19Z | 2025-10-22T11:48:19Z |
| suse-su-2025:3723-1 | Security update for libqt5-qtbase | 2025-10-22T11:22:11Z | 2025-10-22T11:22:11Z |
| suse-su-2025:3722-1 | Security update for protobuf | 2025-10-22T11:20:32Z | 2025-10-22T11:20:32Z |
| suse-su-2025:3721-1 | Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) | 2025-10-22T11:06:14Z | 2025-10-22T11:06:14Z |
| suse-su-2025:3720-1 | Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP4) | 2025-10-22T09:45:17Z | 2025-10-22T09:45:17Z |
| suse-su-2025:3717-1 | Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4) | 2025-10-22T09:45:07Z | 2025-10-22T09:45:07Z |
| suse-su-2025:3716-1 | Security update for the Linux Kernel | 2025-10-22T07:11:59Z | 2025-10-22T07:11:59Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-00531 | Simple Shopping Cart register.php文件SQL注入漏洞 | 2025-07-21 | 2026-01-06 |
| cnvd-2026-00530 | E-Commerce Site任意文件上传漏洞 | 2025-07-21 | 2026-01-06 |
| cnvd-2026-00529 | Online Ordering System edit_product.php文件文件上传漏洞 | 2025-07-25 | 2026-01-06 |
| cnvd-2026-00528 | E-Commerce Site跨站请求伪造漏洞 | 2025-07-25 | 2026-01-06 |
| cnvd-2026-00527 | Online Ordering System user.php文件SQL注入漏洞 | 2025-07-28 | 2026-01-06 |
| cnvd-2026-00526 | Online Ordering System文件上传漏洞 | 2025-07-30 | 2026-01-06 |
| cnvd-2026-00525 | Simple Shopping Cart settings.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00524 | Simple Shopping Cart adminlogin.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00523 | Simple Shopping Cart additems.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00522 | Online Ordering System user_school.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00521 | Online Ordering System user_contact.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00520 | Online Ordering System /admin文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00519 | Employee Profile Management System代码问题漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00518 | Employee Profile Management System /view_personnel.php文件跨站脚本漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00517 | Employee Profile Management System /view_personnel.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00516 | Employee Profile Management System print_personnel_report.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00515 | Currency Exchange System /edittrns.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00840 | Student File Management System update_user.php文件跨站脚本漏洞 | 2025-12-18 | 2026-01-05 |
| cnvd-2026-00839 | Student File Management System user_id参数SQL注入漏洞 | 2025-12-18 | 2026-01-05 |
| cnvd-2026-00835 | Student File Management System跨站脚本漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00834 | Student File Management System user_id参数SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00833 | Student File Management System update_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00832 | Student File Management System save_user.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00831 | Student File Management System /save_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00830 | Student File Management System stud_no参数SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00829 | Student File Management System login_query.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00828 | Student File Management System /delete_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00542 | Student File Management System download.php文件SQL注入漏洞 | 2025-12-31 | 2026-01-05 |
| cnvd-2026-00447 | Huawei HarmonyOS多线程竞争条件漏洞 | 2025-12-10 | 2026-01-05 |
| cnvd-2026-00446 | Class and Exam Timetable Management /index.php文件SQL注入漏洞 | 2025-12-18 | 2026-01-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0805 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0804 | Multiples vulnérabilités dans Microsoft Windows | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0766 | Multiples vulnérabilités dans les produits Liferay | 2025-09-09T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0808 | Multiples vulnérabilités dans les produits IBM | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0807 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0806 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0805 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0804 | Multiples vulnérabilités dans Microsoft Windows | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0766 | Multiples vulnérabilités dans les produits Liferay | 2025-09-09T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0803 | Vulnérabilité dans HPE Aruba Networking ClearPass Policy Manager | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| certfr-2025-avi-0802 | Multiples vulnérabilités dans Google Chrome | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| CERTFR-2025-AVI-0803 | Vulnérabilité dans HPE Aruba Networking ClearPass Policy Manager | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| CERTFR-2025-AVI-0802 | Multiples vulnérabilités dans Google Chrome | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| certfr-2025-avi-0800 | Multiples vulnérabilités dans Liferay | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0799 | Vulnérabilité dans les produits Microsoft | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0798 | Vulnérabilité dans Microsoft Edge | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0797 | Multiples vulnérabilités dans les produits Mozilla | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0796 | Multiples vulnérabilités dans Suricata | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0795 | Multiples vulnérabilités dans HPE Aruba Networking EdgeConnect SD-WAN Gateways | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0794 | Multiples vulnérabilités dans les produits Atlassian | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0800 | Multiples vulnérabilités dans Liferay | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0799 | Vulnérabilité dans les produits Microsoft | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0798 | Vulnérabilité dans Microsoft Edge | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0797 | Multiples vulnérabilités dans les produits Mozilla | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0796 | Multiples vulnérabilités dans Suricata | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0795 | Multiples vulnérabilités dans HPE Aruba Networking EdgeConnect SD-WAN Gateways | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0794 | Multiples vulnérabilités dans les produits Atlassian | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0793 | Multiples vulnérabilités dans Liferay | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0792 | Multiples vulnérabilités dans les produits Spring | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0791 | Multiples vulnérabilités dans les produits Apple | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |