Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1096 |
6.4 (3.1)
|
Best-wp-google-map <= 2.1 - Authenticated (Contributor… |
raju_ahmed |
Best-wp-google-map |
2026-02-14T06:42:32.532Z | 2026-02-14T06:42:32.532Z |
| CVE-2026-0693 |
4.4 (3.1)
|
Allow HTML in Category Descriptions <= 1.2.4 - Authent… |
arnoesterhuizen |
Allow HTML in Category Descriptions |
2026-02-14T06:42:32.915Z | 2026-02-14T06:42:32.915Z |
| CVE-2026-0559 |
6.4 (3.1)
|
MasterStudy LMS WordPress Plugin – for Online Courses … |
stylemix |
MasterStudy LMS WordPress Plugin – for Online Courses and Education |
2026-02-14T06:42:32.152Z | 2026-02-14T06:42:32.152Z |
| CVE-2026-1905 |
6.4 (3.1)
|
Sphere Manager <= 1.0.2 - Authenticated (Contributor+)… |
devmw |
Sphere Manager |
2026-02-14T06:42:31.305Z | 2026-02-14T06:42:31.305Z |
| CVE-2026-1394 |
4.3 (3.1)
|
WP Quick Contact Us <= 1.0 - Cross-Site Request Forger… |
dmitritechs |
WP Quick Contact Us |
2026-02-14T06:42:31.697Z | 2026-02-14T06:42:31.697Z |
| CVE-2026-1944 |
5.3 (3.1)
|
CallbackKiller service widget <= 1.2 - Missing Authori… |
krellbat |
CallbackKiller service widget |
2026-02-14T06:42:30.529Z | 2026-02-14T06:42:30.529Z |
| CVE-2026-0557 |
6.4 (3.1)
|
WP Data Access <= 5.5.63 - Authenticated (Contributor+… |
peterschulznl |
WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps |
2026-02-14T06:42:30.165Z | 2026-02-14T06:42:30.165Z |
| CVE-2025-14852 |
4.3 (3.1)
|
MDirector Newsletter <= 4.5.8 - Cross-Site Request For… |
antevenio |
MDirector Newsletter |
2026-02-14T06:42:30.914Z | 2026-02-14T06:42:30.914Z |
| CVE-2026-2024 |
7.5 (3.1)
|
PhotoStack Gallery <= 0.4.1 - Unauthenticated SQL Inje… |
savitasoni |
PhotoStack Gallery |
2026-02-14T06:42:29.782Z | 2026-02-14T06:42:29.782Z |
| CVE-2026-1939 |
6.4 (3.1)
|
Percent to Infograph <= 1.0 - Authenticated (Contribut… |
cutesalah |
Percent to Infograph |
2026-02-14T06:42:29.416Z | 2026-02-14T06:42:29.416Z |
| CVE-2026-1795 |
6.1 (3.1)
|
Address Bar Ads <= 1.0.0 - Reflected Cross-Site Scripting |
sivenso |
Address Bar Ads |
2026-02-14T06:42:29.053Z | 2026-02-14T06:42:29.053Z |
| CVE-2026-1903 |
6.4 (3.1)
|
Ravelry Designs Widget <= 1.0.0 - Authenticated (Contr… |
shellbot |
Ravelry Designs Widget |
2026-02-14T06:42:28.647Z | 2026-02-14T06:42:28.647Z |
| CVE-2026-1792 |
6.1 (3.1)
|
Geo Widet <= 1.0 - Reflected Cross-Site Scripting |
owencutajar |
Geo Widget |
2026-02-14T06:42:28.278Z | 2026-02-14T06:42:28.278Z |
| CVE-2026-2022 |
4.3 (3.1)
|
Smart Forms <= 2.6.99 - Missing Authorization to Authe… |
edgarrojas |
Smart Forms – when you need more than just a contact form |
2026-02-14T06:42:27.519Z | 2026-02-14T06:42:27.519Z |
| CVE-2026-1901 |
6.4 (3.1)
|
QuestionPro Surveys <= 1.0 - Authenticated (Contributo… |
questionpro |
QuestionPro Surveys |
2026-02-14T06:42:27.139Z | 2026-02-14T06:42:27.139Z |
| CVE-2026-0745 |
7.2 (3.1)
|
User Language Switch <= 1.6.10 - Authenticated (Admini… |
webilop |
User Language Switch |
2026-02-14T06:42:27.887Z | 2026-02-14T06:42:27.887Z |
| CVE-2026-0751 |
6.4 (3.1)
|
Payment Page | Payment Form for Stripe <= 1.4.6 - Auth… |
brandonfire |
Payment Page | Payment Form for Stripe |
2026-02-14T06:42:26.021Z | 2026-02-14T06:42:26.021Z |
| CVE-2026-0727 |
5.4 (3.1)
|
Accordion and Accordion Slider <= 1.4.5 - Missing Auth… |
essentialplugin |
Accordion and Accordion Slider |
2026-02-14T06:42:26.388Z | 2026-02-14T06:42:26.388Z |
| CVE-2025-14873 |
4.3 (3.1)
|
LatePoint – Calendar Booking Plugin for Appointments a… |
latepoint |
LatePoint – Calendar Booking Plugin for Appointments and Events |
2026-02-14T06:42:26.760Z | 2026-02-14T06:42:26.760Z |
| CVE-2025-6792 |
5.3 (3.1)
|
One to one user Chat by WPGuppy <= 1.1.4 - Unauthentic… |
amentotechpvtltd |
One to one user Chat by WPGuppy |
2026-02-14T06:42:25.584Z | 2026-02-14T06:42:25.584Z |
| CVE-2026-1796 |
6.1 (3.1)
|
StyleBidet <= 1.0.0 - Reflected Cross-Site Scripting |
indextwo |
StyleBidet |
2026-02-14T06:42:24.992Z | 2026-02-14T06:42:24.992Z |
| CVE-2026-1932 |
5.3 (3.1)
|
Appointment Booking Calendar Plugin <= 1.0.2 - Missing… |
bssoftware |
Appointment Booking Calendar Plugin – Bookr |
2026-02-14T05:54:12.182Z | 2026-02-14T05:54:12.182Z |
| CVE-2026-2469 |
7.6 (3.1)
|
Versions of the package directorytree/imapengine … |
n/a |
directorytree/imapengine |
2026-02-14T05:00:05.646Z | 2026-02-14T05:00:05.646Z |
| CVE-2026-0692 |
7.5 (3.1)
|
BlueSnap Payment Gateway for WooCommerce <= 3.3.0 - Mi… |
bluesnap |
BlueSnap Payment Gateway for WooCommerce |
2026-02-14T04:35:43.208Z | 2026-02-14T04:35:43.208Z |
| CVE-2026-1983 |
4.3 (3.1)
|
SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site R… |
sourcez |
SEATT: Simple Event Attendance |
2026-02-14T04:35:42.467Z | 2026-02-14T04:35:42.467Z |
| CVE-2026-1912 |
6.4 (3.1)
|
Citations tools <= 0.3.2 - Authenticated (Contributor+… |
ulaulaman |
Citations tools |
2026-02-14T04:35:42.851Z | 2026-02-14T04:35:42.851Z |
| CVE-2026-1164 |
6.1 (3.1)
|
Easy Voice Mail <= 1.2.5 - Unauthenticated Stored Cros… |
phoenixstudiodz |
Easy Voice Mail |
2026-02-14T04:35:42.022Z | 2026-02-14T04:35:42.022Z |
| CVE-2026-1904 |
6.4 (3.1)
|
Simple Wp colorfull Accordion <= 1.0 - Authenticated (… |
nayon46 |
Simple Wp colorfull Accordion |
2026-02-14T04:35:41.605Z | 2026-02-14T04:35:41.605Z |
| CVE-2026-1754 |
6.1 (3.1)
|
personal-authors-category <= 0.3 - Reflected Cross-Sit… |
alexeyknyazev |
personal-authors-category |
2026-02-14T04:35:41.228Z | 2026-02-14T04:35:41.228Z |
| CVE-2026-2144 |
8.1 (3.1)
|
Magic Login Mail or QR Code <= 2.05 - Unauthenticated … |
katsushi-kawamori |
Magic Login Mail or QR Code |
2026-02-14T04:35:40.772Z | 2026-02-14T04:35:40.772Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1303 |
5.3 (3.1)
|
MailChimp Campaigns <= 3.2.4 - Missing Authorization t… |
matthieuscarset |
MailChimp Campaigns |
2026-02-14T06:42:33.704Z | 2026-02-14T06:42:33.704Z |
| CVE-2026-1187 |
6.4 (3.1)
|
ZoomifyWP Free <= 1.1 - Authenticated (Contributor+) S… |
terrazoom |
ZoomifyWP Free |
2026-02-14T06:42:36.502Z | 2026-02-14T06:42:36.502Z |
| CVE-2026-1096 |
6.4 (3.1)
|
Best-wp-google-map <= 2.1 - Authenticated (Contributor… |
raju_ahmed |
Best-wp-google-map |
2026-02-14T06:42:32.532Z | 2026-02-14T06:42:32.532Z |
| CVE-2026-0753 |
7.2 (3.1)
|
Super Simple Contact Form <= 1.6.2 - Reflected Cross-S… |
bitacre |
Super Simple Contact Form |
2026-02-14T06:42:35.247Z | 2026-02-14T06:42:35.247Z |
| CVE-2026-0751 |
6.4 (3.1)
|
Payment Page | Payment Form for Stripe <= 1.4.6 - Auth… |
brandonfire |
Payment Page | Payment Form for Stripe |
2026-02-14T06:42:26.021Z | 2026-02-14T06:42:26.021Z |
| CVE-2026-0745 |
7.2 (3.1)
|
User Language Switch <= 1.6.10 - Authenticated (Admini… |
webilop |
User Language Switch |
2026-02-14T06:42:27.887Z | 2026-02-14T06:42:27.887Z |
| CVE-2026-0736 |
6.4 (3.1)
|
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.8 - Au… |
collectchat |
Chatbot for WordPress by Collect.chat ⚡️ |
2026-02-14T06:42:36.906Z | 2026-02-14T06:42:36.906Z |
| CVE-2026-0735 |
4.4 (3.1)
|
User Language Switch <= 1.6.10 - Authenticated (Admini… |
webilop |
User Language Switch |
2026-02-14T06:42:34.475Z | 2026-02-14T06:42:34.475Z |
| CVE-2026-0727 |
5.4 (3.1)
|
Accordion and Accordion Slider <= 1.4.5 - Missing Auth… |
essentialplugin |
Accordion and Accordion Slider |
2026-02-14T06:42:26.388Z | 2026-02-14T06:42:26.388Z |
| CVE-2026-0693 |
4.4 (3.1)
|
Allow HTML in Category Descriptions <= 1.2.4 - Authent… |
arnoesterhuizen |
Allow HTML in Category Descriptions |
2026-02-14T06:42:32.915Z | 2026-02-14T06:42:32.915Z |
| CVE-2026-0559 |
6.4 (3.1)
|
MasterStudy LMS WordPress Plugin – for Online Courses … |
stylemix |
MasterStudy LMS WordPress Plugin – for Online Courses and Education |
2026-02-14T06:42:32.152Z | 2026-02-14T06:42:32.152Z |
| CVE-2026-0557 |
6.4 (3.1)
|
WP Data Access <= 5.5.63 - Authenticated (Contributor+… |
peterschulznl |
WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps |
2026-02-14T06:42:30.165Z | 2026-02-14T06:42:30.165Z |
| CVE-2025-6792 |
5.3 (3.1)
|
One to one user Chat by WPGuppy <= 1.1.4 - Unauthentic… |
amentotechpvtltd |
One to one user Chat by WPGuppy |
2026-02-14T06:42:25.584Z | 2026-02-14T06:42:25.584Z |
| CVE-2025-15483 |
4.4 (3.1)
|
Link Hopper <= 2.5 - Authenticated (Administrator+) St… |
ajferg |
Link Hopper |
2026-02-14T06:42:34.100Z | 2026-02-14T06:42:34.100Z |
| CVE-2025-14873 |
4.3 (3.1)
|
LatePoint – Calendar Booking Plugin for Appointments a… |
latepoint |
LatePoint – Calendar Booking Plugin for Appointments and Events |
2026-02-14T06:42:26.760Z | 2026-02-14T06:42:26.760Z |
| CVE-2025-14852 |
4.3 (3.1)
|
MDirector Newsletter <= 4.5.8 - Cross-Site Request For… |
antevenio |
MDirector Newsletter |
2026-02-14T06:42:30.914Z | 2026-02-14T06:42:30.914Z |
| CVE-2026-1932 |
5.3 (3.1)
|
Appointment Booking Calendar Plugin <= 1.0.2 - Missing… |
bssoftware |
Appointment Booking Calendar Plugin – Bookr |
2026-02-14T05:54:12.182Z | 2026-02-14T05:54:12.182Z |
| CVE-2026-2469 |
7.6 (3.1)
|
Versions of the package directorytree/imapengine … |
n/a |
directorytree/imapengine |
2026-02-14T05:00:05.646Z | 2026-02-14T05:00:05.646Z |
| CVE-2026-2144 |
8.1 (3.1)
|
Magic Login Mail or QR Code <= 2.05 - Unauthenticated … |
katsushi-kawamori |
Magic Login Mail or QR Code |
2026-02-14T04:35:40.772Z | 2026-02-14T04:35:40.772Z |
| CVE-2026-2027 |
4.4 (3.1)
|
AMP Enhancer <= 1.0.49 - Authenticated (Administrator+… |
ampenhancer |
AMP Enhancer – Compatibility Layer for Official AMP Plugin |
2026-02-14T04:35:39.847Z | 2026-02-14T04:35:39.847Z |
| CVE-2026-1983 |
4.3 (3.1)
|
SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site R… |
sourcez |
SEATT: Simple Event Attendance |
2026-02-14T04:35:42.467Z | 2026-02-14T04:35:42.467Z |
| CVE-2026-1912 |
6.4 (3.1)
|
Citations tools <= 0.3.2 - Authenticated (Contributor+… |
ulaulaman |
Citations tools |
2026-02-14T04:35:42.851Z | 2026-02-14T04:35:42.851Z |
| CVE-2026-1904 |
6.4 (3.1)
|
Simple Wp colorfull Accordion <= 1.0 - Authenticated (… |
nayon46 |
Simple Wp colorfull Accordion |
2026-02-14T04:35:41.605Z | 2026-02-14T04:35:41.605Z |
| CVE-2026-1754 |
6.1 (3.1)
|
personal-authors-category <= 0.3 - Reflected Cross-Sit… |
alexeyknyazev |
personal-authors-category |
2026-02-14T04:35:41.228Z | 2026-02-14T04:35:41.228Z |
| CVE-2026-1164 |
6.1 (3.1)
|
Easy Voice Mail <= 1.2.5 - Unauthenticated Stored Cros… |
phoenixstudiodz |
Easy Voice Mail |
2026-02-14T04:35:42.022Z | 2026-02-14T04:35:42.022Z |
| CVE-2026-0692 |
7.5 (3.1)
|
BlueSnap Payment Gateway for WooCommerce <= 3.3.0 - Mi… |
bluesnap |
BlueSnap Payment Gateway for WooCommerce |
2026-02-14T04:35:43.208Z | 2026-02-14T04:35:43.208Z |
| CVE-2026-26303 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:05.907Z | |
| CVE-2026-26302 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:06.462Z | |
| CVE-2026-26301 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:06.945Z | |
| CVE-2026-26300 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:07.406Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-70974 | Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and th… | 2026-01-09T07:16:02.677 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-15057 | The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `f… | 2026-01-09T07:16:02.483 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-15055 | The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n… | 2026-01-09T07:16:02.313 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-15019 | The BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin for W… | 2026-01-09T07:16:02.130 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14980 | The BetterDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions… | 2026-01-09T07:16:01.913 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14893 | The IndieWeb plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Telephone' … | 2026-01-09T07:16:01.727 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14782 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vul… | 2026-01-09T07:16:01.537 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14736 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all … | 2026-01-09T07:16:01.333 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14720 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to una… | 2026-01-09T07:16:01.153 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14718 | The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to authorizat… | 2026-01-09T07:16:00.967 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14574 | The weDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up … | 2026-01-09T07:16:00.050 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14803 | The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The… | 2026-01-09T06:16:01.077 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-13749 | The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPres… | 2026-01-09T06:16:00.917 | 2026-01-13T14:03:46.203 |
| fkie_cve-2025-14886 | The Japanized for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of da… | 2026-01-09T05:15:57.250 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22636 | Rejected reason: Not used | 2026-01-09T04:15:44.910 | 2026-01-09T04:15:44.910 |
| fkie_cve-2026-22635 | Rejected reason: Not used | 2026-01-09T04:15:44.847 | 2026-01-09T04:15:44.847 |
| fkie_cve-2026-22634 | Rejected reason: Not used | 2026-01-09T04:15:44.783 | 2026-01-09T04:15:44.783 |
| fkie_cve-2026-22633 | Rejected reason: Not used | 2026-01-09T04:15:44.723 | 2026-01-09T04:15:44.723 |
| fkie_cve-2026-22632 | Rejected reason: Not used | 2026-01-09T04:15:44.667 | 2026-01-09T04:15:44.667 |
| fkie_cve-2026-22631 | Rejected reason: Not used | 2026-01-09T04:15:44.603 | 2026-01-09T04:15:44.603 |
| fkie_cve-2026-22630 | Rejected reason: Not used | 2026-01-09T04:15:44.460 | 2026-01-09T04:15:44.460 |
| fkie_cve-2025-66315 | There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due… | 2026-01-09T03:15:47.670 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22714 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-01-09T00:15:46.130 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22713 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-01-09T00:15:46.000 | 2026-02-12T17:47:31.803 |
| fkie_cve-2026-22712 | Improper Encoding or Escaping of Output due to magic word replacement in ParserAfterTidy vulnerabil… | 2026-01-09T00:15:45.837 | 2026-02-12T17:50:28.073 |
| fkie_cve-2026-22710 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-01-09T00:15:45.693 | 2026-02-12T17:50:39.720 |
| fkie_cve-2026-0733 | A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impa… | 2026-01-09T00:15:45.497 | 2026-01-22T16:09:34.590 |
| fkie_cve-2026-0732 | A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the fi… | 2026-01-09T00:15:45.313 | 2026-01-14T18:57:15.960 |
| fkie_cve-2026-0731 | A vulnerability has been found in TOTOLINK WA1200 5.9c.2914. The impacted element is an unknown fun… | 2026-01-08T23:15:44.117 | 2026-01-29T19:18:06.553 |
| fkie_cve-2026-0730 | A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the … | 2026-01-08T22:16:02.753 | 2026-01-22T16:02:20.320 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-8gh7-8v8f-6f45 |
5.3 (3.1)
|
The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification o… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-6m5f-57jg-w742 |
9.8 (3.1)
|
The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-59rj-2hg2-476v |
6.1 (3.1)
|
The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL pat… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4q47-jxhq-7fj2 |
4.3 (3.1)
|
The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4p4p-xgjx-qcc9 |
5.3 (3.1)
|
The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4j5m-vc2q-295r |
6.4 (3.1)
|
The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-45r3-ggw3-q62c |
7.2 (3.1)
|
The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-3hmx-xfr5-8hq6 |
6.4 (3.1)
|
The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-qp2f-j6qh-vgqx |
4.4 (3.1)
|
The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hop_name… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-h9rw-4pm8-962h |
5.3 (3.1)
|
The One to one user Chat by WPGuppy plugin for WordPress is vulnerable to unauthorized access of da… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-67pm-pg4r-8ff4 |
4.3 (3.1)
|
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnera… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-3cx2-gf73-34wr |
4.3 (3.1)
|
The MDirector Newsletter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ve… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-xh3r-gpf9-2v95 |
7.5 (3.1)
|
The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authoriz… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-w8xp-8wjp-8rcf |
|
Rejected reason: Not used | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-rfq9-4wcm-64gh |
7.6 (3.1)
5.7 (4.0)
|
Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutraliz… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-qrpm-ph3r-w26w |
4.3 (3.1)
|
The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-gjxr-jc3p-683p |
5.3 (3.1)
|
The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized … | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-9pqx-6794-4f2c |
8.1 (3.1)
|
The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all v… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-7vxf-c7r5-6293 |
6.4 (3.1)
|
The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-72q5-4qh8-7556 |
6.1 (3.1)
|
The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mess… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-3fvr-9rw3-q3hc |
6.4 (3.1)
|
The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-335p-m75m-6r4h |
6.1 (3.1)
|
The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting … | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-26cj-h8gp-hcf9 |
4.4 (3.1)
|
The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Store… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-xv85-h7cp-9wff |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-w5rw-6rc6-433j |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-v88q-2f34-49rp |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-rfmq-rw5v-3vw4 |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-pxrw-3687-548v |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-mx27-m68w-fph6 |
5.3 (3.1)
|
The WP Last Modified Info plugin for WordPress is vulnerable to Insecure Direct Object Reference in… | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-jf9w-ph66-r34h |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-209 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions… | vyper | 2024-04-25T18:15:09+00:00 | 2025-01-19T19:19:01.689044+00:00 |
| pysec-2024-163 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Prior to ve… | vyper | 2024-04-25T18:15:09+00:00 | 2025-01-14T05:22:23.036505+00:00 |
| pysec-2024-208 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions… | vyper | 2024-04-25T18:15:08+00:00 | 2025-01-19T19:19:01.647736+00:00 |
| pysec-2024-207 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions… | vyper | 2024-04-25T18:15:08+00:00 | 2025-01-19T19:19:01.605918+00:00 |
| pysec-2024-206 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions… | vyper | 2024-04-25T18:15:08+00:00 | 2025-01-19T19:19:01.566553+00:00 |
| pysec-2024-246 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in… | vyper | 2024-04-25T17:15:50+00:00 | 2025-05-05T19:21:20.899426+00:00 |
| pysec-2024-50 |
|
Synapse is an open-source Matrix homeserver. A remote Matrix user with malicious intent, … | matrix-synapse | 2024-04-23T18:15:00+00:00 | 2024-04-23T21:18:51.688096+00:00 |
| pysec-2024-250 |
|
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csr… | torch | 2024-04-19T21:15:08+00:00 | 2025-06-03T15:23:56.072490+00:00 |
| pysec-2024-252 |
|
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in t… | torch | 2024-04-17T19:15:07+00:00 | 2025-06-10T19:22:08.948962+00:00 |
| pysec-2024-251 |
|
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in… | torch | 2024-04-17T19:15:07+00:00 | 2025-06-10T03:12:59.077932+00:00 |
| pysec-2024-243 |
9.3 (3.1)
|
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs… | mlflow | 2024-04-16T00:15:12+00:00 | 2025-04-08T10:23:25.044416+00:00 |
| pysec-2024-254 |
4.2 (3.1)
|
A session fixation vulnerability exists in the zenml-io/zenml application, where JWT toke… | zenml | 2024-04-16T00:15:11+00:00 | 2025-06-13T00:48:41.806476+00:00 |
| pysec-2024-247 |
9.9 (3.1)
|
A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically… | zenml | 2024-04-16T00:15:11+00:00 | 2025-05-12T15:23:53.861001+00:00 |
| pysec-2024-49 |
|
Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be e… | lektor | 2024-03-27T06:15:00+00:00 | 2024-03-27T11:18:36.506150+00:00 |
| pysec-2024-257 |
7.5 (3.1)
|
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessm… | mobsf | 2024-03-22T23:15:07+00:00 | 2025-06-30T15:23:50.085549+00:00 |
| pysec-2024-234 |
9.8 (3.1)
|
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jup… | jupyter-server-proxy | 2024-03-20T20:15:08+00:00 | 2025-02-21T18:23:35.992501+00:00 |
| pysec-2024-48 |
|
Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial o… | black | 2024-03-19T05:15:00+00:00 | 2024-03-19T11:18:50.379002+00:00 |
| pysec-2024-179 |
4.8 (3.1)
|
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versio… | octoprint | 2024-03-18T22:15:07+00:00 | 2025-01-19T01:52:24.377662+00:00 |
| pysec-2024-47 |
|
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.te… | django | 2024-03-15T20:15:00+00:00 | 2024-03-15T23:20:34.975097+00:00 |
| pysec-2024-46 |
|
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenti… | apache-airflow | 2024-03-14T09:15:00+00:00 | 2024-03-14T11:19:09.515892+00:00 |
| pysec-2024-221 |
5.3 (3.1)
|
aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd i… | aiosmtpd | 2024-03-12T21:15:58+00:00 | 2025-01-22T16:23:18.042465+00:00 |
| pysec-2024-44 |
|
In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __arr… | rpyc | 2024-03-12T16:15:00+00:00 | 2024-03-12T19:19:21.886478+00:00 |
| pysec-2024-45 |
|
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to contro… | langchain-core | 2024-03-04T00:15:00+00:00 | 2024-03-13T23:20:07.486731+00:00 |
| pysec-2024-43 |
|
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to contro… | langchain | 2024-03-04T00:15:00+00:00 | 2024-03-05T10:22:15.555734+00:00 |
| pysec-2024-42 |
|
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops … | apache-airflow | 2024-03-01T11:15:00+00:00 | 2024-03-01T14:20:34.498842+00:00 |
| pysec-2024-245 |
|
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated user… | apache-airflow | 2024-02-29T11:15:08+00:00 | 2025-05-01T21:22:38.598048+00:00 |
| pysec-2024-162 |
6.5 (3.1)
|
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider … | scrapy | 2024-02-28T00:15:53+00:00 | 2025-01-14T05:22:21.870348+00:00 |
| pysec-2024-41 |
|
diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. … | diffoscope | 2024-02-27T02:15:00+00:00 | 2024-02-27T07:20:27.954412+00:00 |
| pysec-2024-205 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using … | vyper | 2024-02-26T20:19:05+00:00 | 2025-01-19T19:19:01.519824+00:00 |
| pysec-2024-164 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an exces… | vyper | 2024-02-26T20:19:05+00:00 | 2025-01-16T21:21:41.436934+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-712 | Malicious code in ongose (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:25Z |
| mal-2026-711 | Malicious code in mongoose_update (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:25Z |
| mal-2026-709 | Malicious code in mongooose_update (npm) | 2026-02-04T04:41:11Z | 2026-02-06T03:05:25Z |
| mal-2026-710 | Malicious code in mongooose_updated (npm) | 2026-02-04T04:41:10Z | 2026-02-06T03:05:25Z |
| mal-2026-708 | Malicious code in incode-kyc-backend (npm) | 2026-02-03T21:30:33Z | 2026-02-06T03:05:24Z |
| mal-2026-707 | Malicious code in js-unpack (npm) | 2026-02-03T17:41:26Z | 2026-02-06T03:05:24Z |
| mal-2026-706 | Malicious code in @devgandhi/healthpulse (npm) | 2026-02-03T17:39:11Z | 2026-02-06T03:05:22Z |
| mal-2026-705 | Malicious code in @devgandhi/cpp (npm) | 2026-02-03T17:39:11Z | 2026-02-06T03:05:22Z |
| mal-2026-704 | Malicious code in testing-package-xdsfdsfsc (npm) | 2026-02-03T16:22:25Z | 2026-02-07T10:45:40Z |
| mal-2026-703 | Malicious code in @x-clients/features (npm) | 2026-02-03T15:41:03Z | 2026-02-06T03:05:22Z |
| mal-2026-702 | Malicious code in serpapi-python (PyPI) | 2026-02-03T11:52:58Z | 2026-02-03T11:52:58Z |
| mal-2026-701 | Malicious code in filespath (PyPI) | 2026-02-03T10:31:19Z | 2026-02-03T10:31:19Z |
| mal-2026-700 | Malicious code in tabulapys (PyPI) | 2026-02-03T10:04:45Z | 2026-02-03T10:04:45Z |
| mal-2026-699 | Malicious code in tokyo-ppe-test (PyPI) | 2026-02-03T09:32:04Z | 2026-02-03T09:32:04Z |
| mal-2026-698 | Malicious code in tableshow (PyPI) | 2026-02-03T09:30:09Z | 2026-02-03T09:30:09Z |
| mal-2026-697 | Malicious code in pathlib-v2-utility (PyPI) | 2026-02-03T09:17:38Z | 2026-02-03T09:17:38Z |
| mal-2026-696 | Malicious code in pathfiles (PyPI) | 2026-02-03T09:15:58Z | 2026-02-03T10:19:00Z |
| mal-2026-690 | Malicious code in fileupload-util (npm) | 2026-02-03T07:56:03Z | 2026-02-06T03:05:23Z |
| mal-2026-693 | Malicious code in tailwindcss-forms-kit (npm) | 2026-02-03T07:51:18Z | 2026-02-06T03:05:26Z |
| mal-2026-686 | Malicious code in tableapys (PyPI) | 2026-02-03T07:49:06Z | 2026-02-03T09:19:13Z |
| mal-2026-695 | Malicious code in tsconfig-stitch (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:27Z |
| mal-2026-691 | Malicious code in fingerprint-stitch (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:23Z |
| mal-2026-689 | Malicious code in eslint-config-stitch (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:23Z |
| mal-2026-688 | Malicious code in eslint-config-nlx (npm) | 2026-02-03T07:48:27Z | 2026-02-06T03:05:23Z |
| mal-2026-692 | Malicious code in graphrix (npm) | 2026-02-03T07:44:00Z | 2026-02-06T03:05:24Z |
| mal-2026-694 | Malicious code in tarax (npm) | 2026-02-03T07:42:06Z | 2026-02-06T03:05:27Z |
| mal-2026-687 | Malicious code in @uselagoon/ui-library (npm) | 2026-02-03T07:39:16Z | 2026-02-06T03:05:22Z |
| mal-2026-681 | Malicious code in internallib_v782 (npm) | 2026-02-03T07:27:28Z | 2026-02-06T03:05:24Z |
| mal-2026-685 | Malicious code in strengthifys (npm) | 2026-02-03T07:27:10Z | 2026-02-06T03:05:26Z |
| mal-2026-684 | Malicious code in react-responsive-carousel-v4 (npm) | 2026-02-03T07:27:10Z | 2026-02-06T03:05:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2661 | Google Cloud Platform (Looker): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2025-11-23T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2658 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2657 | WebKitGTK: Mehrere Schwachstellen | 2025-11-20T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2655 | CUPS-Filters: Schwachstelle ermöglicht Codeausführung | 2025-11-20T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2653 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2652 | Red Hat Satellite: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2651 | GnuTLS: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-19T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2649 | Google Cloud Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2647 | SonicWall Email Security: Mehrere Schwachstellen | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2645 | Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2643 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2640 | SonicWall SSL-VPN: Schwachstelle ermöglicht Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2638 | Grub: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2637 | Rsync: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-11-18T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2636 | OpenVPN: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2635 | Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Denial of Service | 2025-11-18T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2616 | libvirt: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-17T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2613 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung oder DoS | 2025-11-17T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2612 | M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2609 | IBM SAN Volume Controller, Storwize und FlashSystem: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2608 | Golang Go: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2607 | Red Hat Enterprise Linux (lasso): Eine Schwachstelle ermöglichen Codeausführung | 2025-11-16T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2603 | Fortinet FortiWeb: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-11-13T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2600 | PostgreSQL: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-13T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2598 | CUPS (Filters): Mehrere Schwachstellen | 2025-11-13T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2595 | Linux Kernel: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2593 | pgAdmin: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2586 | Red Hat Enterprise Linux (python-kdcproxy): Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2025-12-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2584 | Red Hat Enterprise Linux Ceph Storage: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2580 | Google Chrome/Microsoft Edge: Schwachstelle ermöglicht nicht näher beschriebene Auswirkungen | 2025-11-11T23:00:00.000+00:00 | 2025-12-14T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0259 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2025-08-13T10:11:22.733287Z | 2025-08-13T10:11:22.733287Z |
| ncsc-2025-0258 | Kwetsbaarheden verholpen in Adobe InDesign | 2025-08-13T10:05:31.442414Z | 2025-08-13T10:05:31.442414Z |
| ncsc-2025-0257 | Kwetsbaarheid verholpen in Adobe Photoshop | 2025-08-13T10:00:18.181867Z | 2025-08-13T10:00:18.181867Z |
| ncsc-2025-0256 | Kwetsbaarheden verholpen in Adobe Illustrator | 2025-08-13T09:59:45.240348Z | 2025-08-13T09:59:45.240348Z |
| ncsc-2025-0255 | Kwetsbaarheden verholpen in Fortinet producten | 2025-08-13T09:16:29.067287Z | 2025-08-13T09:35:40.587034Z |
| ncsc-2025-0254 | Kwetsbaarheden verholpen in Zoom | 2025-08-13T09:09:21.491424Z | 2025-08-13T09:09:21.491424Z |
| ncsc-2025-0253 | Kwetsbaarheden verholpen in Ivanti Connect Secure, Policy Secure en ZTA Gateways | 2025-08-13T09:06:58.420498Z | 2025-08-13T09:06:58.420498Z |
| ncsc-2025-0252 | Kwetsbaarheden verholpen in Microsoft Exchange Server | 2025-08-13T07:29:24.639524Z | 2025-08-13T07:29:24.639524Z |
| ncsc-2025-0251 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-08-13T07:25:08.789693Z | 2025-08-13T07:25:08.789693Z |
| ncsc-2025-0250 | Kwetsbaarheden verholpen in Microsoft Office | 2025-08-13T07:23:56.395786Z | 2025-08-13T07:23:56.395786Z |
| ncsc-2025-0249 | Kwetsbaarheden verholpen in Azure-producten | 2025-08-13T07:22:17.432067Z | 2025-08-13T07:22:17.432067Z |
| ncsc-2025-0248 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-08-13T07:21:52.836899Z | 2025-08-13T07:21:52.836899Z |
| ncsc-2025-0247 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2025-08-13T07:19:19.911308Z | 2025-08-13T07:19:19.911308Z |
| ncsc-2025-0246 | Kwetsbaarheden verholpen in Siemens producten | 2025-08-12T13:03:08.211775Z | 2025-08-12T13:03:08.211775Z |
| ncsc-2025-0245 | Kwetsbaarheden verholpen in SAP producten | 2025-08-12T11:10:21.111816Z | 2025-09-05T11:12:05.722381Z |
| ncsc-2025-0244 | Kwetsbaarheid verholpen in WinRAR | 2025-08-11T07:36:12.848669Z | 2025-08-11T07:36:12.848669Z |
| ncsc-2025-0243 | Kwetsbaarheid verholpen in Microsoft Exchange | 2025-08-07T09:15:22.461434Z | 2025-08-07T09:15:22.461434Z |
| ncsc-2025-0242 | Kwetsbaarheden verholpen in Trend Micro Apex One | 2025-08-06T13:21:03.156432Z | 2025-08-06T13:21:03.156432Z |
| ncsc-2025-0241 | Kwetsbaarheden verholpen in Adobe Experience Manager | 2025-08-06T12:11:46.234849Z | 2025-10-17T10:44:55.312550Z |
| ncsc-2025-0240 | Kwetsbaarheden verholpen in Rockwell Automation Arena | 2025-08-06T07:55:23.705278Z | 2025-08-06T07:55:23.705278Z |
| ncsc-2025-0239 | Kwetsbaarheid verholpen in SonicWall SonicOS | 2025-07-31T11:12:42.653547Z | 2025-07-31T11:12:42.653547Z |
| ncsc-2025-0238 | Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS | 2025-07-30T13:02:51.663320Z | 2025-07-30T13:02:51.663320Z |
| ncsc-2025-0237 | Kwetsbaarheden verholpen in Autodesk AutoCAD | 2025-07-30T08:04:31.603165Z | 2025-07-30T08:04:31.603165Z |
| ncsc-2025-0236 | Kwetsbaarheden verholpen in Salesforce Tableau Server | 2025-07-28T07:52:42.872259Z | 2025-07-28T07:52:42.872259Z |
| ncsc-2025-0235 | Kwetsbaarheden verholpen in Firefox en Thunderbird | 2025-07-23T13:01:45.118883Z | 2025-07-23T13:01:45.118883Z |
| ncsc-2025-0234 | Kwetsbaarheid verholpen in CrushFTP | 2025-07-21T08:34:35.304610Z | 2025-08-28T07:59:34.275023Z |
| ncsc-2025-0233 | Zeroday-kwetsbaarheden ontdekt in Microsoft SharePoint Server | 2025-07-20T08:34:22.645952Z | 2025-07-23T15:31:20.529389Z |
| ncsc-2025-0232 | Kwetsbaarheid verholpen in Keycloak | 2025-07-18T13:12:14.074394Z | 2025-07-18T13:12:14.074394Z |
| ncsc-2025-0231 | Kwetsbaarheden verholpen in XWiki | 2025-07-17T12:35:48.998487Z | 2025-07-17T12:35:48.998487Z |
| ncsc-2025-0230 | Kwetsbaarheid verholpen in Wing FTP Server | 2025-07-14T06:06:24.154078Z | 2025-07-14T06:06:24.154078Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-097435 | SSA-097435: Usernames Disclosure Vulnerability in Mendix Runtime | 2024-09-10T00:00:00Z | 2025-08-12T00:00:00Z |
| ssa-039007 | SSA-039007: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) | 2024-09-10T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-921449 | SSA-921449: Plaintext Storage of a Password Vulnerability in LOGO! V8.3 BM Devices | 2024-08-13T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-856475 | SSA-856475: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-784301 | SSA-784301: Multiple Vulnerabilities in SINEC NMS Before V3.0 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-720392 | SSA-720392: Multiple Vulnerabilities in Third-Party Components in Location Intelligence Before V4.4 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-716317 | SSA-716317: Multiple Vulnerability in SINEC Traffic Analyzer Before V2.0 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-659443 | SSA-659443: Local Code Execution Vulnerabilities in COMOS Before V10.5 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-417547 | SSA-417547: Multiple Vulnerabilities in INTRALOG WMS Before V4 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-357412 | SSA-357412: PRT File Parsing Vulnerability in NX Before V2406.3000 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-087301 | SSA-087301: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.1 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-857368 | SSA-857368: Multiple Vulnerabilities in Omnivise T3000 | 2024-08-02T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-071402 | SSA-071402: Multiple Vulnerabilities in SICAM Products | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| ssa-998949 | SSA-998949: Hard-coded Default Encryption Key in Mendix Encryption Module V10.0.0 and V10.0.1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-928781 | SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-883918 | SSA-883918: Information Disclosure Vulnerability in SIMATIC WinCC | 2024-07-09T00:00:00Z | 2024-11-12T00:00:00Z |
| ssa-868282 | SSA-868282: Multiple Vulnerabilities in SINEMA Remote Connect Client before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-825651 | SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-824889 | SSA-824889: XML File Parsing Vulnerabilities in JT Open and PLM XML SDK | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-779936 | SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-750499 | SSA-750499: Weak Encryption Vulnerability in SIPROTEC 5 Devices | 2024-07-09T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-723487 | SSA-723487: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Products | 2024-07-09T00:00:00Z | 2025-12-09T00:00:00Z |
| ssa-722010 | SSA-722010: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go | 2024-07-09T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-698820 | SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices | 2024-07-09T00:00:00Z | 2026-01-13T00:00:00Z |
| ssa-381581 | SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-364175 | SSA-364175: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1 | 2024-07-09T00:00:00Z | 2026-01-13T00:00:00Z |
| ssa-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-170375 | SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9 | 2024-07-09T00:00:00Z | 2025-08-12T00:00:00Z |
| ssa-088132 | SSA-088132: Denial of Service Vulnerability in the OPC UA Server Implementations of Several Industrial Products | 2024-07-09T00:00:00Z | 2024-09-10T00:00:00Z |
| ssa-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1892 | Red Hat Security Advisory: python3.11 security update | 2026-02-04T19:41:47+00:00 | 2026-02-11T14:41:35+00:00 |
| rhsa-2026:1939 | Red Hat Security Advisory: python3.12-wheel security update | 2026-02-04T19:31:27+00:00 | 2026-02-16T10:47:15+00:00 |
| rhsa-2026:1948 | Red Hat Security Advisory: libsoup security update | 2026-02-04T19:21:37+00:00 | 2026-02-12T13:28:15+00:00 |
| rhsa-2026:1957 | Red Hat Security Advisory: python3.12-urllib3 security update | 2026-02-04T19:16:17+00:00 | 2026-02-16T12:00:37+00:00 |
| rhsa-2026:1946 | Red Hat Security Advisory: kernel-rt security update | 2026-02-04T18:55:17+00:00 | 2026-02-12T19:28:15+00:00 |
| rhsa-2026:1903 | Red Hat Security Advisory: fence-agents security update | 2026-02-04T18:50:17+00:00 | 2026-02-16T10:54:03+00:00 |
| rhsa-2026:1539 | Red Hat Security Advisory: OpenShift Container Platform 4.19.23 bug fix and security update | 2026-02-04T18:43:37+00:00 | 2026-02-12T13:27:40+00:00 |
| rhsa-2026:1909 | Red Hat Security Advisory: kernel security update | 2026-02-04T18:39:12+00:00 | 2026-02-12T19:28:14+00:00 |
| rhsa-2026:1908 | Red Hat Security Advisory: opentelemetry-collector security update | 2026-02-04T16:10:41+00:00 | 2026-02-16T01:37:06+00:00 |
| rhsa-2026:1879 | Red Hat Security Advisory: kernel security update | 2026-02-04T16:06:23+00:00 | 2026-02-12T19:28:35+00:00 |
| rhsa-2026:1942 | Red Hat Security Advisory: Red Hat Quay 3.15.3 | 2026-02-04T15:43:51+00:00 | 2026-02-16T12:00:36+00:00 |
| rhsa-2026:1906 | Red Hat Security Advisory: fence-agents security update | 2026-02-04T15:36:27+00:00 | 2026-02-16T10:54:03+00:00 |
| rhsa-2026:1905 | Red Hat Security Advisory: fence-agents security update | 2026-02-04T15:13:06+00:00 | 2026-02-16T10:54:03+00:00 |
| rhsa-2026:1938 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.0 | 2026-02-04T15:12:01+00:00 | 2026-02-16T01:37:06+00:00 |
| rhsa-2026:1922 | Red Hat Security Advisory: python3.11 security update | 2026-02-04T15:04:41+00:00 | 2026-02-11T14:41:32+00:00 |
| rhsa-2026:1935 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 XP 6.0.2.GA release | 2026-02-04T14:34:28+00:00 | 2026-02-04T18:56:12+00:00 |
| rhsa-2026:1904 | Red Hat Security Advisory: resource-agents security update | 2026-02-04T12:09:51+00:00 | 2026-02-16T10:54:03+00:00 |
| rhsa-2026:1902 | Red Hat Security Advisory: python-wheel security update | 2026-02-04T11:59:01+00:00 | 2026-02-16T10:47:15+00:00 |
| rhsa-2026:1907 | Red Hat Security Advisory: opentelemetry-collector security update | 2026-02-04T11:48:06+00:00 | 2026-02-16T01:37:06+00:00 |
| rhsa-2026:1870 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update | 2026-02-04T11:35:41+00:00 | 2026-02-04T18:56:08+00:00 |
| rhsa-2026:1852 | Red Hat Security Advisory: util-linux security update | 2026-02-04T11:22:56+00:00 | 2026-02-12T19:30:14+00:00 |
| rhsa-2026:1552 | Red Hat Security Advisory: OpenShift Container Platform 4.19.23 bug fix and security update | 2026-02-04T10:50:17+00:00 | 2026-02-16T10:51:00+00:00 |
| rhsa-2026:1882 | Red Hat Security Advisory: iperf3 security update | 2026-02-04T09:11:31+00:00 | 2026-02-10T19:02:45+00:00 |
| rhsa-2026:1886 | Red Hat Security Advisory: kernel security update | 2026-02-04T09:07:22+00:00 | 2026-02-12T19:28:10+00:00 |
| rhsa-2026:1577 | Red Hat Security Advisory: OpenShift Container Platform 4.17.48 bug fix and security update | 2026-02-04T08:15:24+00:00 | 2026-02-16T09:13:00+00:00 |
| rhsa-2026:1881 | Red Hat Security Advisory: iperf3 security update | 2026-02-04T08:06:15+00:00 | 2026-02-10T19:02:44+00:00 |
| rhsa-2026:1896 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.3 | 2026-02-04T07:12:33+00:00 | 2026-02-16T01:37:04+00:00 |
| rhsa-2026:1871 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update | 2026-02-04T05:16:20+00:00 | 2026-02-04T18:56:08+00:00 |
| rhsa-2026:1555 | Red Hat Security Advisory: OpenShift Container Platform 4.20.13 bug fix and security update | 2026-02-04T04:50:43+00:00 | 2026-02-16T09:13:00+00:00 |
| rhsa-2026:1872 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update | 2026-02-04T04:47:19+00:00 | 2026-02-04T18:56:08+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-252-07 | Rockwell Automation ControlLogix 5580 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-06 | Rockwell Automation CompactLogix® 5480 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-05 | Rockwell Automation FactoryTalk Activation Manager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-04 | Rockwell Automation FactoryTalk Optix | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-03 | Rockwell Automation Stratix IOS | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-01 | Rockwell Automation ThinManager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-02 | ABB Cylon Aspect BMS/BAS | 2025-09-09T05:00:00.000000Z | 2025-09-09T05:00:00.000000Z |
| icsa-25-259-01 | Schneider Electric Altivar products ATVdPAC module ILC992 InterLink Converter (Update A) | 2025-09-09T04:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-254-07 | Siemens User Management Component (UMC) | 2025-09-09T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-254-06 | Siemens Industrial Edge Management | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-05 | Siemens Apogee PXC and Talon TC Devices | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-04 | Siemens SINEC OS | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-03 | Siemens SINAMICS Drives | 2025-09-09T00:00:00.000000Z | 2026-02-12T07:00:00.000000Z |
| icsa-25-254-02 | Siemens SIMATIC Virtualization as a Service (SIVaaS) | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-01 | Siemens SIMOTION Tools | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-245-03 | SunPower PVS6 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-02 | Fuji Electric FRENIC-Loader 4 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-01 | Delta Electronics EIP Builder | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-240-06 | GE Vernova CIMPLICITY | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-05 | Delta Electronics COMMGR | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-04 | Delta Electronics CNCSoft-G2 | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-02 | Mitsubishi Electric MELSEC iQ-F Series CPU Module | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-240-01 | Mitsubishi Electric MELSEC iQ-F Series CPU Module | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| icsa-25-261-05 | Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product | 2025-08-26T09:52:01.000000Z | 2025-08-26T09:52:01.000000Z |
| icsa-25-261-04 | Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product | 2025-08-26T09:22:47.000000Z | 2025-08-26T09:22:00.000000Z |
| icsa-25-238-01 | INVT VT-Designer and HMITool | 2025-08-26T06:00:00.000000Z | 2025-08-26T06:00:00.000000Z |
| va-25-239-01 | Agiloft multiple vulnerabilities | 2025-08-26T00:00:00Z | 2025-08-26T00:00:00Z |
| icsma-25-233-01 | FUJIFILM Healthcare Americas Synapse Mobility | 2025-08-21T06:00:00.000000Z | 2025-08-21T06:00:00.000000Z |
| icsa-25-233-01 | Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module (Update A) | 2025-08-21T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-226-31 | Rockwell Automation 1756-EN4TR, 1756-EN4TRXT (Update B) | 2025-08-14T06:00:00.000000Z | 2025-10-07T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ccmp-sxss-qbtdbzdd | Cisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-backhaul-ap-cmdinj-r7e28ecs | Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-3550-acl-bypass-mhskzc2q | Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability | 2024-11-06T16:00:00+00:00 | 2024-11-06T16:00:00+00:00 |
| cisco-sa-snort-rf-bypass-oy8f3pnm | Multiple Cisco Products Snort Rate Filter Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2025-01-13T16:44:31+00:00 |
| cisco-sa-snort-bypass-ptry37fx | Cisco Firepower Threat Defense Software TCP Snort 3 Detection Engine Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-sa-ftd-snort-fw-bcjtzpmu | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TCP/IP Traffic with Snort 2 and Snort 3 Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd2100-snort-dos-m9humt75 | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series Appliances TCP UDP Snort 2 and Snort 3 Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-vdb-snort-djj4cnbr | Cisco Firepower Threat Defense Software Vulnerability Database with Snort Detection Engine Security Policy Bypass and Denial of Service Issue | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-tls-dos-qxye5ufy | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-statcred-dfc8txt5 | Cisco Firepower Threat Defense Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-geoip-bypass-mb4zrdu | Cisco Firepower Threat Defense Software Geolocation ACL Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-xss-infodisc-rl4mjfer | Cisco Secure Firewall Management Center Software Cross-Site Scripting and Information Disclosure Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-24T11:52:38+00:00 |
| cisco-sa-fmc-xss-dhjxqyzs | Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inject-2enmtc8v | Cisco Secure Firewall Management Center Software SQL Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inj-loyafcfq | Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-priv-esc-cmq4s6m7 | Cisco Secure Firewall Management Center Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-html-inj-nfjeyhxz | Cisco Secure Firewall Management Center Software HTML Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-file-read-5q4mqrn | Cisco Secure Firewall Management Center Software Arbitrary File Read Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-v3awdqn7 | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-g8aokndp | Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-2hbka97g | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-csc-dos-xvphm3bj | Cisco Secure Client Software Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftdvirtual-dos-muengnyr | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-xss-yjj7zjvq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-webvpn-dos-honb9ph4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-7tcnzxtu | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-persist-lce-vu3ekmj3 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-nsgacl-bypass-77xneasl | Cisco Adaptive Security Appliance and Firepower Threat Defense Software NSG Access Control List Bypass Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-ikev2-dos-9fgeyhsf | Cisco Adaptive Security Appliance and Firepower Threat Defense Software IKEv2 VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-dap-dos-bhekp7n | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-64663 | Custom Question Answering Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-18T08:00:00.000Z |
| msrc_cve-2025-64661 | Windows Shell Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-64658 | Windows File Explorer Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62573 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62572 | Application Information Service Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62571 | Windows Installer Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62570 | Windows Camera Frame Server Monitor Information Disclosure Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62569 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62567 | Windows Hyper-V Denial of Service Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62565 | Windows File Explorer Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62564 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62563 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62562 | Microsoft Outlook Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62561 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62560 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62559 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62558 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62557 | Microsoft Office Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62556 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62555 | Microsoft Word Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62554 | Microsoft Office Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-17T08:00:00.000Z |
| msrc_cve-2025-62553 | Microsoft Excel Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62552 | Microsoft Access Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62550 | Azure Monitor Agent Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62549 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62474 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62473 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62472 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62470 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62469 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10023-1 | libsoup-3_0-0-3.6.5-10.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10022-1 | libsodium-devel-1.0.21-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10021-1 | coredns-1.14.0-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-ru-2026:20010-1 | Recommended update for trivy | 2026-01-08T14:37:24Z | 2026-01-08T14:37:24Z |
| opensuse-su-2026:10020-1 | traefik-3.6.6-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10019-1 | gdk-pixbuf-loader-libheif-1.21.1-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10018-1 | gimp-3.0.6-4.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10017-1 | curl-8.18.0-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10016-1 | chromedriver-143.0.7499.192-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:20003-1 | Security update of valkey | 2026-01-07T09:43:28Z | 2026-01-07T09:43:28Z |
| opensuse-su-2026:10015-1 | libwget4-2.2.1-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10014-1 | python311-cbor2-5.8.0-2.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10013-1 | apptainer-1.4.5-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10012-1 | ImageMagick-7.1.2.12-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10011-1 | python314-3.14.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10010-1 | python311-filelock-3.20.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10009-1 | log4j-2.20.0-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10008-1 | gpsd-3.27.3-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10007-1 | c-ares-devel-1.34.6-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10006-1 | dcmtk-3.7.0-1.1 on GA media | 2026-01-05T00:00:00Z | 2026-01-05T00:00:00Z |
| opensuse-su-2026:10005-1 | python312-Django6-6.0-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:10004-1 | fluidsynth-2.5.2-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:20001-1 | Security update for sssd | 2026-01-02T16:58:16Z | 2026-01-02T16:58:16Z |
| opensuse-su-2026:20002-1 | Security update for MozillaThunderbird | 2026-01-02T12:14:18Z | 2026-01-02T12:14:18Z |
| opensuse-su-2026:10003-1 | python311-marshmallow-3.26.2-1.1 on GA media | 2026-01-02T00:00:00Z | 2026-01-02T00:00:00Z |
| opensuse-su-2026:10002-1 | libmatio-devel-1.5.29-1.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10001-1 | dirmngr-2.5.16-1.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10000-1 | gnu-recutils-1.9-3.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2025:15854-1 | kepler-0.11.3-1.1 on GA media | 2025-12-31T00:00:00Z | 2025-12-31T00:00:00Z |
| opensuse-su-2025:20130-1 | Security update for bash-git-prompt | 2025-12-30T17:08:26Z | 2025-12-30T17:08:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| sevd-2021-012-02 | EcoStruxure Power Build - Rapsody | 2021-01-12T08:32:35.000Z | 2022-06-14T18:30:00.000Z |
| sevd-2020-353-02 | Treck HTTP Server Vulnerability on TM3 Bus Coupler Modules (V2.0) | 2020-12-18T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| sevd-2020-343-05 | Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and Associated Communication Modules | 2020-12-08T21:04:43.000Z | 2022-09-13T20:04:43.000Z |
| sevd-2020-343-06 | Web Server on Modicon M340, Legacy Offers Modicon Quantum Modicon Premium and associated Communication Modules | 2020-12-08T09:08:01.000Z | 2020-12-08T09:08:01.000Z |
| sevd-2020-343-07 | SNMP Service on Modicon M340 and Associated Communication Modules | 2020-12-08T05:49:51.000Z | 2022-09-13T05:49:51.000Z |
| sevd-2020-343-09 | Modicon M258 Logic Controllers and SoMachine/ SoMachine Motion Software | 2020-12-08T00:00:00.000Z | 2020-12-08T00:00:00.000Z |
| sevd-2020-343-08 | Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium | 2020-12-08T00:00:00.000Z | 2020-12-08T00:00:00.000Z |
| sevd-2020-343-04 | Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules | 2020-12-08T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| sevd-2020-343-03 | Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (V2.0) | 2020-12-08T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| sevd-2020-343-02 | EcoStruxure Geo SCADA Expert | 2020-12-08T00:00:00.000Z | 2020-12-08T00:00:00.000Z |
| sevd-2020-343-01 | EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and RemoteConnect™ | 2020-12-08T00:00:00.000Z | 2021-07-13T00:00:00.000Z |
| sevd-2020-315-07 | PLC Simulator on EcoStruxure™ Control Expert and Process Expert | 2020-11-10T15:07:11.000Z | 2023-03-14T15:07:11.000Z |
| sevd-2020-315-01 | Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules | 2020-11-10T12:05:04.000Z | 2023-02-14T12:05:00.000Z |
| sevd-2020-315-06 | Easergy T300 | 2020-11-10T00:00:00.000Z | 2020-12-08T00:00:00.000Z |
| sevd-2020-315-05 | Modicon M100/M200/M221 Programmable Logic Controller | 2020-11-10T00:00:00.000Z | 2021-01-12T00:00:00.000Z |
| sevd-2020-315-04 | EcoStruxure Building Operation (EBO) | 2020-11-10T00:00:00.000Z | 2020-11-10T00:00:00.000Z |
| sevd-2020-315-03 | Interactive Graphical SCADA System (IGSS) | 2020-11-10T00:00:00.000Z | 2021-04-15T00:00:00.000Z |
| sevd-2020-315-02 | EcoStruxure™ Operator Terminal Expert (Vijeo XD), Pro-face BLUE and WinGP runtime | 2020-11-09T00:00:00.000Z | 2021-01-11T00:00:00.000Z |
| sevd-2020-287-04 | EcoStruxure™ and SmartStruxure™ Power Monitoring and SCADA Software | 2020-10-13T00:00:00.000Z | 2020-10-13T00:00:00.000Z |
| sevd-2020-287-03 | Smartlink, PowerTag, and Wiser Series Gateways | 2020-10-13T00:00:00.000Z | 2020-10-13T00:00:00.000Z |
| sevd-2020-287-02 | Wibu-Systems CodeMeter Vulnerabilities | 2020-10-13T00:00:00.000Z | 2020-12-08T00:00:00.000Z |
| sevd-2020-287-01 | Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules | 2020-10-13T00:00:00.000Z | 2025-06-10T04:00:00.000Z |
| sevd-2020-252-01 | SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator | 2020-09-08T00:00:00.000Z | 2021-02-09T00:00:00.000Z |
| sevd-2020-224-08 | Schneider Electric PACTware | 2020-08-11T00:00:00.000Z | 2020-08-13T00:00:00.000Z |
| sevd-2020-224-07 | SoMove | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-06 | Harmony® eXLhoist | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-05 | PowerChute Business Edition | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-04 | APC Easy UPS On-Line Software | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-03 | Modicon M218 Logic Controller | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-224-02 | spaceLYnk & Wiser for KNX (formerly homeLYnk) | 2020-08-11T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2025-148 | Heap-buffer-overflow in setup_engineID | 2025-02-23T00:00:36.951152Z | 2025-03-18T00:22:22.817245Z |
| osv-2025-147 | UNKNOWN WRITE in ndpi_free_flow_data | 2025-02-22T00:18:07.814416Z | 2025-02-22T00:18:07.814726Z |
| osv-2025-145 | Heap-buffer-overflow in ___interceptor_strncat | 2025-02-22T00:14:15.620085Z | 2025-02-22T00:14:15.620535Z |
| osv-2025-133 | Stack-buffer-overflow in se_read_conf | 2025-02-17T00:02:18.986364Z | 2025-03-18T00:27:33.917908Z |
| osv-2025-132 | Heap-use-after-free in netsnmp_hex_to_binary | 2025-02-17T00:01:01.920904Z | 2025-03-18T00:33:26.648884Z |
| osv-2025-131 | Heap-buffer-overflow in vips_foreign_save_heif_write_block | 2025-02-16T00:13:44.282887Z | 2025-03-18T00:32:21.245932Z |
| osv-2025-127 | Object-size in unpack_dsd_samples | 2025-02-15T00:16:56.314634Z | 2025-02-15T00:16:56.315060Z |
| osv-2025-124 | Use-of-uninitialized-value in get_word | 2025-02-15T00:09:23.967012Z | 2025-02-15T00:09:23.967345Z |
| osv-2025-119 | Heap-buffer-overflow in snmp_config_when | 2025-02-14T00:15:08.375253Z | 2025-03-18T00:37:43.437021Z |
| osv-2025-114 | Index-out-of-bounds in ada_fuzz_header.h | 2025-02-14T00:11:24.754671Z | 2025-02-14T00:11:24.755045Z |
| osv-2025-113 | Heap-buffer-overflow in snmp_log_options | 2025-02-14T00:01:45.812592Z | 2025-03-18T00:35:43.690001Z |
| osv-2025-111 | Stack-buffer-overflow in absl::debugging_internal::ParseLocalNameSuffix | 2025-02-13T00:15:36.403252Z | 2025-02-13T00:15:36.403744Z |
| osv-2022-1292 | Heap-buffer-overflow in LibRaw::phase_one_correct | 2025-02-10T00:13:32.671074Z | 2025-02-10T00:13:32.671487Z |
| osv-2025-108 | Use-of-uninitialized-value in decimate_dsd_run | 2025-02-10T00:12:35.140061Z | 2025-02-10T00:12:35.140400Z |
| osv-2025-107 | Use-of-uninitialized-value in get_words_lossless | 2025-02-10T00:06:27.370789Z | 2025-02-10T00:06:27.371196Z |
| osv-2025-105 | Heap-use-after-free in unpack_dsd_samples | 2025-02-10T00:00:59.046535Z | 2025-02-10T00:00:59.047010Z |
| osv-2025-93 | Heap-buffer-overflow in lj_strfmt_pushvf | 2025-02-05T00:18:14.584575Z | 2025-07-23T14:24:29.384461Z |
| osv-2025-92 | Null-dereference READ in session_startup | 2025-02-05T00:18:00.385170Z | 2025-12-20T14:25:08.038174Z |
| osv-2025-90 | Null-dereference READ in ubsan_GetStackTrace | 2025-02-03T00:02:54.185593Z | 2025-12-20T14:15:37.974751Z |
| osv-2025-88 | Segv on unknown address in ___interceptor_free | 2025-02-02T00:16:16.201801Z | 2025-02-02T00:16:16.202130Z |
| osv-2025-85 | Segv on unknown address in ndpi_free_flow_data | 2025-02-02T00:13:42.076001Z | 2025-02-02T00:13:42.076373Z |
| osv-2025-84 | Segv on unknown address in Flow::processExtraDissectedInformation | 2025-02-02T00:12:09.563391Z | 2025-02-02T00:12:09.563778Z |
| osv-2025-81 | Segv on unknown address in ndpi_serialize_string_string | 2025-02-02T00:02:52.946833Z | 2025-02-02T00:02:52.947083Z |
| osv-2025-80 | Segv on unknown address in ndpi_snprintf | 2025-02-02T00:00:58.798346Z | 2025-02-02T00:00:58.798951Z |
| osv-2025-74 | Stack-buffer-overflow in xmlValidateElementContent | 2025-01-29T00:13:55.386256Z | 2025-01-29T00:13:55.386629Z |
| osv-2024-1427 | Heap-buffer-overflow in extract_mediaip | 2025-01-28T00:14:30.487391Z | 2025-03-18T00:41:33.426387Z |
| osv-2025-68 | UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame | 2025-01-28T00:00:46.845996Z | 2025-02-05T14:25:02.989469Z |
| osv-2025-63 | Stack-buffer-underflow in gs_type1_interpret | 2025-01-27T00:10:00.833706Z | 2025-01-27T00:10:00.834151Z |
| osv-2025-62 | UNKNOWN READ in RDKit::Dict::reset | 2025-01-27T00:01:51.692636Z | 2026-01-30T14:29:51.817835Z |
| osv-2025-61 | Heap-buffer-overflow in oatpp::json::Utils::escapeString | 2025-01-27T00:00:09.905879Z | 2025-01-27T00:00:09.906561Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2024-0367 | gix-path uses local config across repos when it is the highest scope | 2024-08-31T12:00:00Z | 2024-09-03T22:23:51Z |
| rustsec-2024-0366 | CWA-2023-004: Excessive number of function parameters in compiled Wasm | 2024-08-27T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0385 | `cw0` is unmaintained | 2024-08-26T12:00:00Z | 2024-11-10T13:12:32Z |
| rustsec-2024-0365 | Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts | 2024-08-23T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0364 | gitoxide-core does not neutralize special characters for terminals | 2024-08-22T12:00:00Z | 2024-08-22T23:15:02Z |
| rustsec-2024-0363 | Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts | 2024-08-15T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0444 | Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then` | 2024-08-14T12:00:00Z | 2025-12-19T06:15:15Z |
| rustsec-2024-0390 | minitrace is Unmaintained | 2024-08-14T12:00:00Z | 2024-11-10T13:54:21Z |
| rustsec-2024-0361 | CWA-2024-004: Gas mispricing in cosmwasm-vm | 2024-08-08T12:00:00Z | 2024-08-08T17:11:37Z |
| rustsec-2024-0362 | Stack overflow when parsing specially crafted JSON ABI strings | 2024-07-30T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0446 | Shell expansion in custom commands | 2024-07-26T12:00:00Z | 2025-12-22T13:54:49Z |
| rustsec-2024-0360 | `XmpFile::close` can trigger UB | 2024-07-26T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0359 | The kstring integration in gix-attributes is unsound | 2024-07-24T12:00:00Z | 2025-01-19T00:36:24Z |
| rustsec-2024-0358 | Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files | 2024-07-23T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0357 | `MemBio::get_buf` has undefined behavior with empty buffers | 2024-07-21T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0405 | op_panic in the base runtime can force a panic in the runtime's containing thread | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0403 | op_panic in the base runtime can force a panic in the runtime's containing thread | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0393 | Ambiguous challenge derivation | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0392 | Ambiguous challenge derivation | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0391 | Ambiguous challenge derivation | 2024-07-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0356 | `UserIdentity::is_verified` not checking verification status of own user identity while performing the check | 2024-07-18T12:00:00Z | 2024-07-19T10:11:38Z |
| rustsec-2024-0355 | gix-path can use a fake program files location | 2024-07-18T12:00:00Z | 2024-07-18T16:46:06Z |
| rustsec-2024-0354 | Usage of non-constant time base64 decoder could lead to leakage of secret key material | 2024-07-17T12:00:00Z | 2024-07-18T11:24:58Z |
| rustsec-2024-0369 | phonenumber: panic on parsing crafted phonenumber inputs | 2024-07-07T12:00:00Z | 2024-09-05T13:40:37Z |
| rustsec-2024-0442 | Dump Undefined Memory by `JitDumpFile` | 2024-07-06T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0389 | `openslide` is unmaintained | 2024-07-03T12:00:00Z | 2024-11-10T13:42:14Z |
| rustsec-2024-0387 | `opentelemetry_api` has been merged into the `opentelemetry` crate | 2024-07-03T12:00:00Z | 2024-11-10T13:29:25Z |
| rustsec-2024-0347 | Incorrect usage of `#[repr(packed)]` | 2024-07-01T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0346 | Incorrect usage of `#[repr(packed)]` | 2024-07-01T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0388 | `derivative` is unmaintained; consider using an alternative | 2024-06-26T12:00:00Z | 2024-11-10T13:34:40Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mastodon-2025-67500 | Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration | 2025-12-11T11:41:16.693Z | 2026-01-08T18:07:34.629Z |
| bit-django-2025-64460 | Potential denial-of-service vulnerability in XML serializer text extraction | 2025-12-11T11:37:12.400Z | 2025-12-11T12:06:55.559Z |
| bit-python-2025-12084 | Quadratic complexity in node ID cache clearing | 2025-12-10T17:49:06.243Z | 2026-01-27T09:14:53.416Z |
| bit-libpython-2025-12084 | Quadratic complexity in node ID cache clearing | 2025-12-10T17:41:46.450Z | 2026-01-27T09:14:53.416Z |
| bit-gitlab-2024-9183 | Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab | 2025-12-09T12:02:49.276Z | 2025-12-11T12:06:55.559Z |
| bit-apache-2025-66200 | Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | 2025-12-09T11:38:20.150Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-65082 | Apache HTTP Server: CGI environment variable override | 2025-12-09T11:38:18.501Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-59775 | Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF | 2025-12-09T11:38:16.754Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-58098 | Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | 2025-12-09T11:38:15.033Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-55753 | Apache HTTP Server: mod_md (ACME), unintended retry intervals | 2025-12-09T11:38:13.178Z | 2025-12-09T12:08:00.393Z |
| bit-pgbouncer-2025-12819 | Untrusted search path in auth_query connection in PgBouncer | 2025-12-06T11:44:20.875Z | 2025-12-28T12:07:40.562Z |
| bit-mongodb-2025-13507 | Time-series operations may cause internal BSON size limit to be exceed | 2025-12-06T11:42:49.537Z | 2025-12-06T12:06:23.267Z |
| bit-mongodb-2025-12893 | Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server | 2025-12-06T11:42:47.994Z | 2025-12-06T12:06:23.267Z |
| bit-mongodb-2025-11979 | Use-after-free in the MongoDB server query planner may lead to crash or undefined behavior | 2025-12-06T11:42:46.232Z | 2025-12-06T12:06:23.267Z |
| bit-golang-2025-61727 | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 | 2025-12-06T11:41:09.464Z | 2025-12-06T12:06:23.267Z |
| bit-envoy-2025-66220 | Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte | 2025-12-06T11:38:21.122Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-64763 | Envoy forwards early CONNECT data in TCP proxy mode | 2025-12-06T11:38:19.488Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-64527 | Envoy crashes when JWT authentication is configured with the remote JWKS fetching | 2025-12-06T11:38:17.923Z | 2025-12-09T12:08:00.393Z |
| bit-python-2025-6075 | Quadratic complexity in os.path.expandvars() with user-controlled template | 2025-12-05T11:13:34.373Z | 2025-12-05T11:40:36.013Z |
| bit-python-2025-13837 | Out-of-memory when loading Plist | 2025-12-05T11:13:08.742Z | 2025-12-23T12:07:14.245Z |
| bit-python-2025-13836 | Excessive read buffering DoS in http.client | 2025-12-05T11:13:05.077Z | 2026-01-27T09:14:53.416Z |
| bit-libpython-2025-6075 | Quadratic complexity in os.path.expandvars() with user-controlled template | 2025-12-05T11:08:28.184Z | 2025-12-05T11:40:36.013Z |
| bit-libpython-2025-13837 | Out-of-memory when loading Plist | 2025-12-05T11:07:43.325Z | 2025-12-23T12:07:14.245Z |
| bit-libpython-2025-13836 | Excessive read buffering DoS in http.client | 2025-12-05T11:07:36.854Z | 2026-01-27T09:14:53.416Z |
| bit-golang-2025-61729 | Excessive resource consumption when printing error string for host certificate validation in crypto/x509 | 2025-12-04T11:41:52.637Z | 2025-12-04T12:07:39.656Z |
| bit-activemq-2025-27533 | Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation | 2025-12-03T14:35:40.173Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2023-46604 | Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack | 2025-12-03T14:35:38.733Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2022-41678 | Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE | 2025-12-03T14:35:37.010Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-26117 | ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind | 2025-12-03T14:35:35.296Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21351 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:33.786Z | 2025-12-03T15:08:24.036Z |
| ID | Description | Updated |
|---|---|---|
| var-202210-1888 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_R… | 2024-07-23T21:58:55.307000Z |
| var-202004-0061 | The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7… | 2024-07-23T21:58:31.314000Z |
| var-201804-1185 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T21:58:31.021000Z |
| var-201012-0287 | Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome b… | 2024-07-23T21:58:30.837000Z |
| var-202112-0566 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2… | 2024-07-23T21:58:00.289000Z |
| var-201903-0926 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9… | 2024-07-23T21:57:59.201000Z |
| var-200110-0192 | OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key… | 2024-07-23T21:57:58.746000Z |
| var-202012-1529 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion se… | 2024-07-23T21:57:50.923000Z |
| var-201711-0007 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1… | 2024-07-23T21:57:50.988000Z |
| var-201904-1414 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:57:11.524000Z |
| var-202206-1157 | Incomplete cleanup in specific special register write operations for some Intel(R) Proces… | 2024-07-23T21:57:10.821000Z |
| var-200810-0140 | Unspecified vulnerability in Finder in Mac OS X 10.5.5 allows user-assisted attackers to … | 2024-07-23T21:57:09.157000Z |
| var-201108-0184 | Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … | 2024-07-23T21:56:59.027000Z |
| var-200809-0176 | sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, an… | 2024-07-23T21:56:59.282000Z |
| var-202210-1203 | Git is an open source, scalable, distributed revision control system. `git shell` is a re… | 2024-07-23T21:56:58.153000Z |
| var-201304-0178 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:56:58.917000Z |
| var-200703-0011 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… | 2024-07-23T21:56:58.629000Z |
| var-201904-0746 | A race condition was addressed with additional validation. This issue affected versions p… | 2024-07-23T21:56:56.832000Z |
| var-201406-0230 | The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel… | 2024-07-23T21:56:56.921000Z |
| var-201110-0443 | The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote a… | 2024-07-23T21:56:49.016000Z |
| var-201912-1864 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:56:48.951000Z |
| var-201806-1445 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2024-07-23T21:56:47.636000Z |
| var-201708-1547 | The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers… | 2024-07-23T21:56:47.739000Z |
| var-201712-0280 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari be… | 2024-07-23T21:56:39.563000Z |
| var-200609-1276 | The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to c… | 2024-07-23T21:56:38.677000Z |
| var-202203-0131 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-07-23T21:56:37.654000Z |
| var-201412-0613 | Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers … | 2024-07-23T21:56:37.541000Z |
| var-200703-0012 | Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to… | 2024-07-23T21:56:37.438000Z |
| var-200906-0617 | The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly ini… | 2024-07-23T21:56:36.646000Z |
| var-200701-0517 | Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local … | 2024-07-23T21:56:15.579000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000003 | FortiWeb vulnerable to SQL injection | 2025-01-21T15:59+09:00 | 2025-01-21T15:59+09:00 |
| jvndb-2025-001027 | Linux Ratfor vulnerable to stack-based buffer overflow | 2025-01-16T13:27+09:00 | 2025-01-16T13:27+09:00 |
| jvndb-2025-000001 | PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting | 2025-01-08T17:08+09:00 | 2025-01-08T17:08+09:00 |
| jvndb-2024-015471 | Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element | 2024-12-25T11:28+09:00 | 2024-12-25T11:28+09:00 |
| jvndb-2024-015393 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (December 2024) | 2024-12-23T12:52+09:00 | 2024-12-23T12:52+09:00 |
| jvndb-2024-014918 | Authentication Bypass Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2024-12-17T15:23+09:00 | 2024-12-17T15:23+09:00 |
| jvndb-2024-000128 | Multiple vulnerabilities in SHARP routers | 2024-12-17T07:54+09:00 | 2024-12-17T07:54+09:00 |
| jvndb-2024-000127 | "Shonen Jump+" App for Android fails to restrict custom URL schemes properly | 2024-12-16T15:07+09:00 | 2024-12-16T15:07+09:00 |
| jvndb-2024-014825 | WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting | 2024-12-16T13:57+09:00 | 2024-12-16T13:57+09:00 |
| jvndb-2024-014793 | Multiple vulnerabilities in FXC AE1021 and AE1021PE | 2024-12-16T11:51+09:00 | 2024-12-16T11:51+09:00 |
| jvndb-2024-014079 | Trend Micro Deep Security Agent for Windows and Deep Security Notifier on DSVA vulnerable to OS command injection | 2024-12-06T12:11+09:00 | 2024-12-06T12:11+09:00 |
| jvndb-2024-000125 | Multiple vulnerabilities in I-O DATA routers UD-LT1 and UD-LT1/EX | 2024-12-04T15:22+09:00 | 2024-12-18T15:20+09:00 |
| jvndb-2024-000124 | Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers | 2024-12-02T16:38+09:00 | 2024-12-02T16:38+09:00 |
| jvndb-2024-000123 | Multiple FCNT Android devices vulnerable to authentication bypass | 2024-11-29T15:30+09:00 | 2024-11-29T15:30+09:00 |
| jvndb-2024-013702 | Multiple vulnerabilities in FUJI ELECTRIC products | 2024-11-29T14:42+09:00 | 2024-11-29T14:42+09:00 |
| jvndb-2024-000122 | HAProxy vulnerable to HTTP request/response smuggling | 2024-11-27T14:36+09:00 | 2024-11-27T14:36+09:00 |
| jvndb-2024-000121 | WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting | 2024-11-26T13:57+09:00 | 2024-11-26T13:57+09:00 |
| jvndb-2024-013260 | Multiple vulnerabilities in Edgecross Basic Software for Windows | 2024-11-22T10:59+09:00 | 2025-11-04T16:41+09:00 |
| jvndb-2024-000120 | "Kura Sushi Official App Produced by EPARK" for Android uses a hard-coded cryptographic key | 2024-11-20T13:56+09:00 | 2024-11-20T13:56+09:00 |
| jvndb-2024-012941 | Multiple vulnerabilities in Rakuten Turbo 5G | 2024-11-19T10:41+09:00 | 2024-11-19T10:41+09:00 |
| jvndb-2024-000119 | Multiple vulnerabilities in FitNesse | 2024-11-15T13:37+09:00 | 2024-11-20T11:18+09:00 |
| jvndb-2024-012461 | Multiple vulnerabilities in SoftBank Mesh Wi-Fi router RP562B | 2024-11-13T14:26+09:00 | 2024-11-26T16:11+09:00 |
| jvndb-2024-000118 | WordPress Plugin "VK All in One Expansion Unit" vulnerable to cross-site scripting | 2024-11-13T13:50+09:00 | 2024-11-13T13:50+09:00 |
| jvndb-2024-012017 | Trend Micro Deep Security 20 Agent for Windows vulnerable to improper access control | 2024-11-06T11:00+09:00 | 2024-11-06T11:00+09:00 |
| jvndb-2024-011833 | Incorrect authorization vulnerability in OMRON Sysmac Studio | 2024-11-05T15:29+09:00 | 2024-11-05T15:29+09:00 |
| jvndb-2024-011747 | Command injection vulnerability in Trend Micro Cloud Edge | 2024-11-01T14:28+09:00 | 2024-11-01T14:28+09:00 |
| jvndb-2024-011744 | REST-APIs unintentionally enabled in Century Systems FutureNet NXR series routers | 2024-11-01T13:49+09:00 | 2024-11-01T13:49+09:00 |
| jvndb-2024-000117 | Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2024-10-31T16:44+09:00 | 2025-05-19T17:59+09:00 |
| jvndb-2024-000116 | Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials | 2024-10-30T15:07+09:00 | 2024-10-30T15:07+09:00 |
| jvndb-2024-011256 | Multiple vulnerabilities in Sharp and Toshiba Tec MFPs | 2024-10-28T17:33+09:00 | 2024-10-28T17:33+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0192-1 | Security update for libpng16 | 2026-01-21T03:33:46Z | 2026-01-21T03:33:46Z |
| suse-su-2026:0191-1 | Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4) | 2026-01-20T21:05:44Z | 2026-01-20T21:05:44Z |
| suse-su-2026:0188-1 | Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) | 2026-01-20T14:06:23Z | 2026-01-20T14:06:23Z |
| suse-su-2026:0187-1 | Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) | 2026-01-20T12:46:06Z | 2026-01-20T12:46:06Z |
| suse-su-2026:0186-1 | Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5) | 2026-01-20T12:45:55Z | 2026-01-20T12:45:55Z |
| suse-su-2026:20102-1 | Security update for webkit2gtk3 | 2026-01-20T12:37:33Z | 2026-01-20T12:37:33Z |
| suse-su-2026:0185-1 | Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4) | 2026-01-20T11:08:06Z | 2026-01-20T11:08:06Z |
| suse-su-2026:20114-1 | Security update of open-vm-tools | 2026-01-20T11:00:32Z | 2026-01-20T11:00:32Z |
| suse-su-2026:20100-1 | Security update of open-vm-tools | 2026-01-20T11:00:32Z | 2026-01-20T11:00:32Z |
| suse-su-2026:0184-1 | Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) | 2026-01-20T09:34:00Z | 2026-01-20T09:34:00Z |
| suse-su-2026:0180-1 | Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) | 2026-01-20T07:04:14Z | 2026-01-20T07:04:14Z |
| suse-su-2026:0176-1 | Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T19:03:59Z | 2026-01-19T19:03:59Z |
| suse-su-2026:20099-1 | Security update for rust1.91, rust1.92 | 2026-01-19T18:30:57Z | 2026-01-19T18:30:57Z |
| suse-su-2026:0168-1 | Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T18:04:39Z | 2026-01-19T18:04:39Z |
| suse-su-2026:0174-1 | Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T18:04:30Z | 2026-01-19T18:04:30Z |
| suse-su-2026:0173-1 | Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5) | 2026-01-19T17:33:53Z | 2026-01-19T17:33:53Z |
| suse-su-2026:0171-1 | Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7) | 2026-01-19T16:34:41Z | 2026-01-19T16:34:41Z |
| suse-su-2026:0169-1 | Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7) | 2026-01-19T16:04:33Z | 2026-01-19T16:04:33Z |
| suse-su-2026:0166-1 | Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T15:05:22Z | 2026-01-19T15:05:22Z |
| suse-su-2026:0163-1 | Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4) | 2026-01-19T14:34:24Z | 2026-01-19T14:34:24Z |
| suse-su-2026:0155-1 | Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) | 2026-01-19T12:11:10Z | 2026-01-19T12:11:10Z |
| suse-su-2026:0154-1 | Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) | 2026-01-19T12:08:42Z | 2026-01-19T12:08:42Z |
| suse-su-2026:0153-1 | Security update for MozillaThunderbird | 2026-01-19T11:14:01Z | 2026-01-19T11:14:01Z |
| suse-su-2026:20096-1 | Security update for cargo-c | 2026-01-19T10:38:15Z | 2026-01-19T10:38:15Z |
| suse-su-2026:0151-1 | Security update for libsoup | 2026-01-19T09:56:33Z | 2026-01-19T09:56:33Z |
| suse-su-2026:20112-1 | Security update for docker | 2026-01-17T13:20:31Z | 2026-01-17T13:20:31Z |
| suse-su-2026:20095-1 | Security update for docker | 2026-01-17T13:20:31Z | 2026-01-17T13:20:31Z |
| suse-su-2026:0148-1 | Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T12:04:20Z | 2026-01-17T12:04:20Z |
| suse-su-2026:0147-1 | Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T11:33:38Z | 2026-01-17T11:33:38Z |
| suse-su-2026:0146-1 | Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T11:33:35Z | 2026-01-17T11:33:35Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-03177 | Growatt ShineLan-X跨站脚本漏洞 | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03176 | Growatt ShineLan-X身份验证绕过漏洞(CNVD-2026-0317664) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03175 | Growatt ShineLan-X身份验证绕过漏洞 | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03174 | Growatt ShineLan-X硬编码漏洞(CNVD-2026-0317468) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03173 | Growatt ShineLan-X硬编码漏洞 | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03172 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0317271) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03171 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0317172) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03170 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0317073) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03169 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0316975) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03168 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0316876) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03167 | Foxit PDF Editor Cloud跨站脚本漏洞(CNVD-2026-0316777) | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03166 | Foxit PDF Editor Cloud跨站脚本漏洞 | 2025-12-25 | 2026-01-09 |
| cnvd-2026-03011 | Mozilla Firefox代码执行漏洞(CNVD-2026-03011) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02992 | Mozilla Firefox for iOS欺骗漏洞(CNVD-2026-02992) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02991 | Mozilla Firefox内存错误引用漏洞(CNVD-2026-02991) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-00837 | Online Appointment Booking System clinic参数SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00836 | ChurchCRM特权提升漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00835 | Student File Management System跨站脚本漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00834 | Student File Management System user_id参数SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00833 | Student File Management System update_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00832 | Student File Management System save_user.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00831 | Student File Management System /save_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00830 | Student File Management System stud_no参数SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00829 | Student File Management System login_query.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00828 | Student File Management System /delete_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00827 | Prison Management System search1.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00826 | Prison Management System search.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00825 | Online Appointment Booking System deletemanager.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-06 |
| cnvd-2026-00794 | UTT 进取 512W内存损坏漏洞 | 2025-12-25 | 2026-01-08 |
| cnvd-2026-00694 | Computer Laboratory System文件上传漏洞 | 2025-12-25 | 2026-01-07 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1131 | Multiples vulnérabilités dans les produits IBM | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1130 | Multiples vulnérabilités dans les produits Foxit | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1129 | Multiples vulnérabilités dans les produits VMware | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1128 | Multiples vulnérabilités dans Mozilla Firefox | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1127 | Multiples vulnérabilités dans Centreon Web | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1126 | Multiples vulnérabilités dans PHP | 2025-12-19T00:00:00.000000 | 2025-12-22T00:00:00.000000 |
| certfr-2025-avi-1125 | Vulnérabilité dans les produits NetApp | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1124 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1123 | Multiples vulnérabilités dans les produits Elastic | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1136 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1135 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1134 | Multiples vulnérabilités dans MongoDB Server | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1133 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1132 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1131 | Multiples vulnérabilités dans les produits IBM | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1130 | Multiples vulnérabilités dans les produits Foxit | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1129 | Multiples vulnérabilités dans les produits VMware | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1128 | Multiples vulnérabilités dans Mozilla Firefox | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1127 | Multiples vulnérabilités dans Centreon Web | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1126 | Multiples vulnérabilités dans PHP | 2025-12-19T00:00:00.000000 | 2025-12-22T00:00:00.000000 |
| CERTFR-2025-AVI-1125 | Vulnérabilité dans les produits NetApp | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1124 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| CERTFR-2025-AVI-1123 | Multiples vulnérabilités dans les produits Elastic | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1122 | Multiples vulnérabilités dans Mattermost Server | 2025-12-18T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2025-avi-1121 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1120 | Vulnérabilité dans les produits Cisco | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| CERTFR-2025-AVI-1122 | Multiples vulnérabilités dans Mattermost Server | 2025-12-18T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| CERTFR-2025-AVI-1121 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| CERTFR-2025-AVI-1120 | Vulnérabilité dans les produits Cisco | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1119 | Multiples vulnérabilités dans les produits Synology | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2020-ALE-001 | Multiples vulnérabilités dans les produits de Pulse Secure | 2020-01-09T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| certfr-2019-ale-015 | Multiples vulnérabilités dans Google Chrome | 2019-11-04T00:00:00.000000 | 2020-01-08T00:00:00.000000 |
| CERTFR-2019-ALE-015 | Multiples vulnérabilités dans Google Chrome | 2019-11-04T00:00:00.000000 | 2020-01-08T00:00:00.000000 |
| certfr-2019-ale-014 | Vulnérabilité dans PHP | 2019-10-29T00:00:00.000000 | 2020-01-08T00:00:00.000000 |
| CERTFR-2019-ALE-014 | Vulnérabilité dans PHP | 2019-10-29T00:00:00.000000 | 2020-01-08T00:00:00.000000 |
| certfr-2019-ale-013 | Vulnérabilité dans Microsoft Internet Explorer | 2019-09-24T00:00:00.000000 | 2019-10-25T00:00:00.000000 |
| CERTFR-2019-ALE-013 | Vulnérabilité dans Microsoft Internet Explorer | 2019-09-24T00:00:00.000000 | 2019-10-25T00:00:00.000000 |
| certfr-2019-ale-012 | Multiples vulnérabilités dans Microsoft Remote Desktop Services | 2019-08-14T00:00:00.000000 | 2019-10-25T00:00:00.000000 |
| CERTFR-2019-ALE-012 | Multiples vulnérabilités dans Microsoft Remote Desktop Services | 2019-08-14T00:00:00.000000 | 2019-10-25T00:00:00.000000 |
| certfr-2019-ale-011 | Vulnérabilité dans Oracle WebLogic | 2019-06-20T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| certfr-2019-ale-010 | Vulnérabilité dans Mozilla Firefox | 2019-06-20T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| CERTFR-2019-ALE-011 | Vulnérabilité dans Oracle WebLogic | 2019-06-20T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| CERTFR-2019-ALE-010 | Vulnérabilité dans Mozilla Firefox | 2019-06-20T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| certfr-2019-ale-009 | Vulnérabilité dans Exim | 2019-06-11T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| CERTFR-2019-ALE-009 | Vulnérabilité dans Exim | 2019-06-11T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| certfr-2019-ale-008 | Vulnérabilité dans Microsoft SharePoint Server | 2019-05-29T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| CERTFR-2019-ALE-008 | Vulnérabilité dans Microsoft SharePoint Server | 2019-05-29T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| certfr-2019-ale-006 | Vulnérabilité dans Microsoft Remote Desktop Services | 2019-05-22T00:00:00.000000 | 2019-10-25T00:00:00.000000 |
| CERTFR-2019-ALE-006 | Vulnérabilité dans Microsoft Remote Desktop Services | 2019-05-22T00:00:00.000000 | 2019-10-25T00:00:00.000000 |
| certfr-2019-ale-007 | Vulnérabilité dans le serveur DHCP de Windows | 2019-05-15T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| CERTFR-2019-ALE-007 | Vulnérabilité dans le serveur DHCP de Windows | 2019-05-15T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-005 | Vulnérabilité dans Oracle WebLogic | 2019-04-26T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| CERTFR-2019-ALE-005 | Vulnérabilité dans Oracle WebLogic | 2019-04-26T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-004 | Multiples vulnérabilités dans Microsoft Edge et Internet Explorer | 2019-04-01T00:00:00.000000 | 2019-04-17T00:00:00.000000 |
| CERTFR-2019-ALE-004 | Multiples vulnérabilités dans Microsoft Edge et Internet Explorer | 2019-04-01T00:00:00.000000 | 2019-04-17T00:00:00.000000 |
| certfr-2019-ale-003 | Campagnes de rançongiciels | 2019-01-31T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| CERTFR-2019-ALE-003 | Campagnes de rançongiciels | 2019-01-31T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-002 | Vulnérabilités affectant l'écosystème Microsoft Exchange et Active Directory | 2019-01-30T00:00:00.000000 | 2019-03-06T00:00:00.000000 |
| CERTFR-2019-ALE-002 | Vulnérabilités affectant l'écosystème Microsoft Exchange et Active Directory | 2019-01-30T00:00:00.000000 | 2019-03-06T00:00:00.000000 |
| certfr-2019-ale-001 | Vulnérabilité dans le gestionnaire de paquets APT | 2019-01-22T00:00:00.000000 | 2019-02-27T00:00:00.000000 |