Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1932 |
5.3 (3.1)
|
Appointment Booking Calendar Plugin <= 1.0.2 - Missing… |
bssoftware |
Appointment Booking Calendar Plugin – Bookr |
2026-02-14T05:54:12.182Z | 2026-02-14T05:54:12.182Z |
| CVE-2026-2469 |
7.6 (3.1)
|
Versions of the package directorytree/imapengine … |
n/a |
directorytree/imapengine |
2026-02-14T05:00:05.646Z | 2026-02-14T05:00:05.646Z |
| CVE-2026-0692 |
7.5 (3.1)
|
BlueSnap Payment Gateway for WooCommerce <= 3.3.0 - Mi… |
bluesnap |
BlueSnap Payment Gateway for WooCommerce |
2026-02-14T04:35:43.208Z | 2026-02-14T04:35:43.208Z |
| CVE-2026-1983 |
4.3 (3.1)
|
SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site R… |
sourcez |
SEATT: Simple Event Attendance |
2026-02-14T04:35:42.467Z | 2026-02-14T04:35:42.467Z |
| CVE-2026-1912 |
6.4 (3.1)
|
Citations tools <= 0.3.2 - Authenticated (Contributor+… |
ulaulaman |
Citations tools |
2026-02-14T04:35:42.851Z | 2026-02-14T04:35:42.851Z |
| CVE-2026-1164 |
6.1 (3.1)
|
Easy Voice Mail <= 1.2.5 - Unauthenticated Stored Cros… |
phoenixstudiodz |
Easy Voice Mail |
2026-02-14T04:35:42.022Z | 2026-02-14T04:35:42.022Z |
| CVE-2026-1904 |
6.4 (3.1)
|
Simple Wp colorfull Accordion <= 1.0 - Authenticated (… |
nayon46 |
Simple Wp colorfull Accordion |
2026-02-14T04:35:41.605Z | 2026-02-14T04:35:41.605Z |
| CVE-2026-1754 |
6.1 (3.1)
|
personal-authors-category <= 0.3 - Reflected Cross-Sit… |
alexeyknyazev |
personal-authors-category |
2026-02-14T04:35:41.228Z | 2026-02-14T04:35:41.228Z |
| CVE-2026-2144 |
8.1 (3.1)
|
Magic Login Mail or QR Code <= 2.05 - Unauthenticated … |
katsushi-kawamori |
Magic Login Mail or QR Code |
2026-02-14T04:35:40.772Z | 2026-02-14T04:35:40.772Z |
| CVE-2026-2027 |
4.4 (3.1)
|
AMP Enhancer <= 1.0.49 - Authenticated (Administrator+… |
ampenhancer |
AMP Enhancer – Compatibility Layer for Official AMP Plugin |
2026-02-14T04:35:39.847Z | 2026-02-14T04:35:39.847Z |
| CVE-2025-14608 |
5.3 (3.1)
|
WP Last Modified Info <= 1.9.5 - Insecure Direct Objec… |
infosatech |
WP Last Modified Info |
2026-02-14T03:25:28.248Z | 2026-02-14T03:25:28.248Z |
| CVE-2025-14067 |
5.3 (3.1)
|
Easy Form Builder <= 3.9.3 - Missing Authorization to … |
hassantafreshi |
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder |
2026-02-14T03:25:27.883Z | 2026-02-14T03:25:27.883Z |
| CVE-2025-13973 |
5.3 (3.1)
|
StickEasy Protected Contact Form <= 1.0.1 - Unauthenti… |
kasuga16 |
StickEasy Protected Contact Form |
2026-02-14T03:25:27.497Z | 2026-02-14T03:25:27.497Z |
| CVE-2025-13681 |
4.9 (3.1)
|
BFG Tools – Extension Zipper <= 1.0.7 - Authenticated … |
thebaldfatguy |
BFG Tools – Extension Zipper |
2026-02-14T03:25:26.938Z | 2026-02-14T03:25:26.938Z |
| CVE-2026-24853 |
8.1 (3.1)
|
Caido has an insufficient patch for DNS rebind leading… |
caido |
caido |
2026-02-13T22:19:47.142Z | 2026-02-13T22:19:47.142Z |
| CVE-2026-26273 |
9.8 (3.0)
|
Known affected by Account Takeover via Password Reset … |
idno |
known |
2026-02-13T21:45:41.610Z | 2026-02-13T21:45:41.610Z |
| CVE-2026-1841 |
7.2 (3.1)
|
PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross… |
pixelyoursite |
PixelYourSite – Your smart PIXEL (TAG) & API Manager |
2026-02-13T21:23:05.247Z | 2026-02-13T21:23:05.247Z |
| CVE-2026-1844 |
7.2 (3.1)
|
PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored… |
pixelyoursite |
PixelYourSite Pro – Your smart PIXEL (TAG) Manager |
2026-02-13T21:23:04.880Z | 2026-02-13T21:23:04.880Z |
| CVE-2025-15157 |
8.8 (3.1)
|
Starfish Review Generation & Marketing for WordPress <… |
starfishwp |
Starfish Review Generation & Marketing for WordPress |
2026-02-13T21:23:04.343Z | 2026-02-13T21:23:04.343Z |
| CVE-2026-26334 |
8.5 (4.0)
|
Calero VeraSMART < 2026 R1 Hardcoded Static AES Keys A… |
Calero |
VeraSMART |
2026-02-13T20:53:18.909Z | 2026-02-13T21:23:26.220Z |
| CVE-2026-26333 |
10 (4.0)
|
Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary Fil… |
Calero |
VeraSMART |
2026-02-13T20:51:57.479Z | 2026-02-13T21:25:25.994Z |
| CVE-2026-26335 |
9.3 (4.0)
|
Calero VeraSMART < 2022 R1 Static IIS Machine Keys Ena… |
Calero |
VeraSMART |
2026-02-13T20:51:26.374Z | 2026-02-13T21:27:16.720Z |
| CVE-2026-26269 |
5.4 (3.1)
|
Vim has a Netbeans specialKeys Stack Buffer Overflow |
vim |
vim |
2026-02-13T19:18:41.662Z | 2026-02-13T21:11:26.275Z |
| CVE-2026-26208 |
7.8 (3.1)
|
ADB Explorer Vulnerable to Remote Code Execution via I… |
Alex4SSB |
ADB-Explorer |
2026-02-13T18:48:56.398Z | 2026-02-13T19:21:56.476Z |
| CVE-2026-26190 |
9.8 (3.1)
|
Milvus Allows Unauthenticated Access to Restful API on… |
milvus-io |
milvus |
2026-02-13T18:44:33.465Z | 2026-02-13T19:37:40.553Z |
| CVE-2026-26187 |
8.1 (3.1)
|
lakeFS vulnerable to path traversal in local block ada… |
treeverse |
lakeFS |
2026-02-13T18:34:10.937Z | 2026-02-13T19:53:32.197Z |
| CVE-2026-25991 |
7.7 (3.1)
|
Tandoor Recipes affected by Blind SSRF with Internal N… |
TandoorRecipes |
recipes |
2026-02-13T18:29:10.900Z | 2026-02-13T19:58:00.752Z |
| CVE-2026-2441 |
8.8 (3.1)
|
Use after free in CSS in Google Chrome prior to 1… |
Google |
Chrome |
2026-02-13T18:27:48.355Z | 2026-02-14T04:55:25.729Z |
| CVE-2026-25964 |
4.9 (3.1)
|
Tandoor Recipes Affected by Authenticated Local File D… |
TandoorRecipes |
recipes |
2026-02-13T18:27:08.973Z | 2026-02-13T20:01:40.545Z |
| CVE-2026-26264 |
7.8 (4.0)
|
BACnet Stack WriteProperty decoding length underflow l… |
bacnet-stack |
bacnet-stack |
2026-02-13T18:14:30.232Z | 2026-02-13T18:50:30.367Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1983 |
4.3 (3.1)
|
SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site R… |
sourcez |
SEATT: Simple Event Attendance |
2026-02-14T04:35:42.467Z | 2026-02-14T04:35:42.467Z |
| CVE-2026-1912 |
6.4 (3.1)
|
Citations tools <= 0.3.2 - Authenticated (Contributor+… |
ulaulaman |
Citations tools |
2026-02-14T04:35:42.851Z | 2026-02-14T04:35:42.851Z |
| CVE-2026-1904 |
6.4 (3.1)
|
Simple Wp colorfull Accordion <= 1.0 - Authenticated (… |
nayon46 |
Simple Wp colorfull Accordion |
2026-02-14T04:35:41.605Z | 2026-02-14T04:35:41.605Z |
| CVE-2026-1754 |
6.1 (3.1)
|
personal-authors-category <= 0.3 - Reflected Cross-Sit… |
alexeyknyazev |
personal-authors-category |
2026-02-14T04:35:41.228Z | 2026-02-14T04:35:41.228Z |
| CVE-2026-1164 |
6.1 (3.1)
|
Easy Voice Mail <= 1.2.5 - Unauthenticated Stored Cros… |
phoenixstudiodz |
Easy Voice Mail |
2026-02-14T04:35:42.022Z | 2026-02-14T04:35:42.022Z |
| CVE-2026-0692 |
7.5 (3.1)
|
BlueSnap Payment Gateway for WooCommerce <= 3.3.0 - Mi… |
bluesnap |
BlueSnap Payment Gateway for WooCommerce |
2026-02-14T04:35:43.208Z | 2026-02-14T04:35:43.208Z |
| CVE-2026-26303 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:05.907Z | |
| CVE-2026-26302 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:06.462Z | |
| CVE-2026-26301 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:06.945Z | |
| CVE-2026-26300 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:07.406Z | |
| CVE-2026-26299 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:07.938Z | |
| CVE-2026-26298 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:08.453Z | |
| CVE-2026-26297 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:08.914Z | |
| CVE-2026-26296 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:09.395Z | |
| CVE-2026-26295 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:09.951Z | |
| CVE-2025-14608 |
5.3 (3.1)
|
WP Last Modified Info <= 1.9.5 - Insecure Direct Objec… |
infosatech |
WP Last Modified Info |
2026-02-14T03:25:28.248Z | 2026-02-14T03:25:28.248Z |
| CVE-2025-14067 |
5.3 (3.1)
|
Easy Form Builder <= 3.9.3 - Missing Authorization to … |
hassantafreshi |
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder |
2026-02-14T03:25:27.883Z | 2026-02-14T03:25:27.883Z |
| CVE-2025-13973 |
5.3 (3.1)
|
StickEasy Protected Contact Form <= 1.0.1 - Unauthenti… |
kasuga16 |
StickEasy Protected Contact Form |
2026-02-14T03:25:27.497Z | 2026-02-14T03:25:27.497Z |
| CVE-2025-13681 |
4.9 (3.1)
|
BFG Tools – Extension Zipper <= 1.0.7 - Authenticated … |
thebaldfatguy |
BFG Tools – Extension Zipper |
2026-02-14T03:25:26.938Z | 2026-02-14T03:25:26.938Z |
| CVE-2026-24853 |
8.1 (3.1)
|
Caido has an insufficient patch for DNS rebind leading… |
caido |
caido |
2026-02-13T22:19:47.142Z | 2026-02-13T22:19:47.142Z |
| CVE-2026-26273 |
9.8 (3.0)
|
Known affected by Account Takeover via Password Reset … |
idno |
known |
2026-02-13T21:45:41.610Z | 2026-02-13T21:45:41.610Z |
| CVE-2026-1844 |
7.2 (3.1)
|
PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored… |
pixelyoursite |
PixelYourSite Pro – Your smart PIXEL (TAG) Manager |
2026-02-13T21:23:04.880Z | 2026-02-13T21:23:04.880Z |
| CVE-2026-1841 |
7.2 (3.1)
|
PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross… |
pixelyoursite |
PixelYourSite – Your smart PIXEL (TAG) & API Manager |
2026-02-13T21:23:05.247Z | 2026-02-13T21:23:05.247Z |
| CVE-2025-70957 |
N/A
|
A Denial of Service (DoS) vulnerability was disco… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T21:38:42.391Z |
| CVE-2025-70956 |
N/A
|
A State Pollution vulnerability was discovered in… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T21:15:43.685Z |
| CVE-2025-70955 |
N/A
|
A Stack Overflow vulnerability was discovered in … |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T21:36:34.624Z |
| CVE-2025-70954 |
N/A
|
A Null Pointer Dereference vulnerability exists i… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T21:22:03.090Z |
| CVE-2025-70866 |
N/A
|
LavaLite CMS 10.1.0 is vulnerable to Incorrect Ac… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T21:27:59.032Z |
| CVE-2025-69633 |
N/A
|
A SQL Injection vulnerability in the Advanced Pop… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T21:46:33.794Z |
| CVE-2025-15157 |
8.8 (3.1)
|
Starfish Review Generation & Marketing for WordPress <… |
starfishwp |
Starfish Review Generation & Marketing for WordPress |
2026-02-13T21:23:04.343Z | 2026-02-13T21:23:04.343Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-0729 | A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is … | 2026-01-08T22:16:02.560 | 2026-01-22T15:52:37.870 |
| fkie_cve-2025-14436 | The Brevo for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-01-08T22:16:01.010 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22588 | Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 4.10.2, 5.0… | 2026-01-08T21:15:44.560 | 2026-02-02T16:14:33.957 |
| fkie_cve-2026-0728 | A security vulnerability has been detected in code-projects Intern Membership Management System 1.0… | 2026-01-08T21:15:44.053 | 2026-01-22T15:43:11.683 |
| fkie_cve-2025-68719 | KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user … | 2026-01-08T21:15:43.603 | 2026-02-02T16:28:04.560 |
| fkie_cve-2025-68718 | KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN interface with… | 2026-01-08T21:15:43.503 | 2026-02-02T16:28:35.850 |
| fkie_cve-2025-68717 | KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validat… | 2026-01-08T21:15:43.353 | 2026-02-02T16:35:48.640 |
| fkie_cve-2025-68716 | KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the L… | 2026-01-08T21:15:43.187 | 2026-02-02T16:49:29.783 |
| fkie_cve-2025-15464 | Exported Activity allows external applications to gain application context and directly launch Gmai… | 2026-01-08T21:15:42.980 | 2026-02-12T17:51:33.487 |
| fkie_cve-2025-14505 | The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value… | 2026-01-08T21:15:42.023 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-0747 | Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote… | 2026-01-08T20:15:44.927 | 2026-01-22T18:14:40.343 |
| fkie_cve-2025-68715 | An issue was discovered in Panda Wireless PWRU0 devices with firmware 2.2.9 that exposes multiple H… | 2026-01-08T20:15:44.817 | 2026-01-30T01:04:35.430 |
| fkie_cve-2025-66916 | The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/workflow/… | 2026-01-08T20:15:44.657 | 2026-01-30T01:05:34.193 |
| fkie_cve-2025-66913 | JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlle… | 2026-01-08T20:15:44.500 | 2026-01-30T01:06:25.553 |
| fkie_cve-2026-22257 | Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a … | 2026-01-08T19:16:00.277 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22256 | Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generate an … | 2026-01-08T19:16:00.107 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22253 | Soft Serve is a self-hostable Git server for the command line. Prior to version 0.11.2, an authoriz… | 2026-01-08T19:15:59.950 | 2026-02-02T17:09:22.447 |
| fkie_cve-2026-21860 | Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug's safe_j… | 2026-01-08T19:15:59.000 | 2026-02-02T17:15:30.510 |
| fkie_cve-2025-67325 | Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows r… | 2026-01-08T19:15:57.340 | 2026-01-30T01:06:56.767 |
| fkie_cve-2025-65731 | An issue was discovered in D-Link Router DIR-605L (Hardware version F1; Firmware version: V6.02CN02… | 2026-01-08T19:15:57.217 | 2026-01-30T01:07:50.193 |
| fkie_cve-2025-65518 | Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition… | 2026-01-08T19:15:57.043 | 2026-01-30T01:08:45.967 |
| fkie_cve-2026-22587 | Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated atta… | 2026-01-08T18:16:00.807 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22235 | OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' e… | 2026-01-08T18:16:00.523 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22234 | OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'A… | 2026-01-08T18:16:00.380 | 2026-01-13T14:03:46.203 |
| fkie_cve-2026-22233 | OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the "Estimat… | 2026-01-08T18:16:00.220 | 2026-02-05T19:23:24.787 |
| fkie_cve-2026-22232 | OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" fie… | 2026-01-08T18:16:00.063 | 2026-02-05T19:24:46.560 |
| fkie_cve-2026-22231 | OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Docu… | 2026-01-08T18:15:59.910 | 2026-02-05T19:23:56.607 |
| fkie_cve-2026-22230 | OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP … | 2026-01-08T18:15:59.750 | 2026-01-26T21:03:00.523 |
| fkie_cve-2026-21896 | Kirby is an open-source content management system. From versions 5.0.0 to 5.2.1, Kirby is missing p… | 2026-01-08T18:15:59.593 | 2026-02-02T19:02:51.850 |
| fkie_cve-2025-68158 | Authlib is a Python library which builds OAuth and OpenID Connect servers. In version 1.6.5 and pri… | 2026-01-08T18:15:59.060 | 2026-01-22T17:04:38.110 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-gjxr-jc3p-683p |
5.3 (3.1)
|
The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized … | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-9pqx-6794-4f2c |
8.1 (3.1)
|
The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all v… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-7vxf-c7r5-6293 |
6.4 (3.1)
|
The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-72q5-4qh8-7556 |
6.1 (3.1)
|
The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mess… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-3fvr-9rw3-q3hc |
6.4 (3.1)
|
The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-335p-m75m-6r4h |
6.1 (3.1)
|
The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting … | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-26cj-h8gp-hcf9 |
4.4 (3.1)
|
The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Store… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-xv85-h7cp-9wff |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-w5rw-6rc6-433j |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-v88q-2f34-49rp |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-rfmq-rw5v-3vw4 |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-pxrw-3687-548v |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-mx27-m68w-fph6 |
5.3 (3.1)
|
The WP Last Modified Info plugin for WordPress is vulnerable to Insecure Direct Object Reference in… | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-jf9w-ph66-r34h |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-c9mq-hmrx-pjr6 |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-6v8j-fjm8-rx99 |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-mq9w-94xx-6xxh |
5.3 (3.1)
|
The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a mi… | 2026-02-14T06:30:56Z | 2026-02-14T06:30:56Z |
| ghsa-9xq4-wg7p-wrhx |
5.3 (3.1)
|
The StickEasy Protected Contact Form plugin for WordPress is vulnerable to Sensitive Information Di… | 2026-02-14T06:30:56Z | 2026-02-14T06:30:56Z |
| ghsa-7254-7x79-hj7p |
4.9 (3.1)
|
The BFG Tools – Extension Zipper plugin for WordPress is vulnerable to Path Traversal in all versio… | 2026-02-14T06:30:56Z | 2026-02-14T06:30:56Z |
| ghsa-rvhp-mghq-8mvw |
|
A Denial of Service (DoS) vulnerability was discovered in the TON Lite Server before v2024.09. The … | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-qm6w-97m7-3844 |
8.8 (3.1)
|
The Starfish Review Generation & Marketing for WordPress plugin for WordPress is vulnerable to unau… | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-g989-fg9h-96pr |
|
A Null Pointer Dereference vulnerability exists in the TON Virtual Machine (TVM) within the TON Blo… | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-9xqh-f8h9-23pv |
|
A State Pollution vulnerability was discovered in the TON Virtual Machine (TVM) before v2025.04. Th… | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-964f-vc2f-ch6j |
|
A Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10. The… | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-7vwv-5gmf-fwq5 |
|
A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for Prest… | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-7j93-6xm6-qf2c |
7.2 (3.1)
|
The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'py… | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-38xg-3ffm-68p7 |
|
LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control. An authenticated user with low-level… | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-28cf-2j8g-v8mv |
7.2 (3.1)
|
The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stor… | 2026-02-14T00:32:42Z | 2026-02-14T00:32:42Z |
| ghsa-78wq-6gcv-w28r |
9.8 (3.1)
|
Known affected by Account Takeover via Password Reset Token Leakage | 2026-02-13T22:49:27Z | 2026-02-13T22:49:27Z |
| ghsa-vc34-g972-8h6w |
|
Rejected reason: reserved but not needed | 2026-02-13T21:31:40Z | 2026-02-13T21:31:40Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-40 |
|
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents. | orjson | 2024-02-26T16:28:00+00:00 | 2024-02-26T18:22:26.039698+00:00 |
| pysec-2024-253 |
|
pretix before 2024.1.1 mishandles file validation. | pretix | 2024-02-26T16:28:00+00:00 | 2025-06-11T15:23:51.683422+00:00 |
| pysec-2024-235 |
8.1 (3.1)
|
With the following crawler configuration: ```python from bs4 import BeautifulSoup as Sou… | langchain-exa | 2024-02-26T16:27:49+00:00 | 2025-02-26T02:48:56.937312+00:00 |
| pysec-2024-39 |
|
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Var… | fastecdsa | 2024-02-24T05:15:00+00:00 | 2024-02-24T07:19:09.418536+00:00 |
| pysec-2024-241 |
9.6 (3.1)
|
Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untru… | mlflow | 2024-02-23T22:15:55+00:00 | 2025-04-08T10:23:24.946136+00:00 |
| pysec-2024-240 |
9.6 (3.1)
|
Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. This … | mlflow | 2024-02-23T22:15:55+00:00 | 2025-04-08T10:23:24.900947+00:00 |
| pysec-2024-223 |
9.1 (3.1)
|
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds … | onnx | 2024-02-23T18:15:50+00:00 | 2025-01-22T16:23:22.060512+00:00 |
| pysec-2024-222 |
7.5 (3.1)
|
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Trav… | onnx | 2024-02-23T18:15:50+00:00 | 2025-01-22T16:23:21.994731+00:00 |
| pysec-2024-249 |
6.1 (3.1)
|
### Summary On all Label Studio versions prior to 1.11.0, data imported via file upload f… | label-studio | 2024-02-22T22:15:47+00:00 | 2025-05-19T11:22:35.312280+00:00 |
| pysec-2024-226 |
7.8 (3.1)
|
Pymatgen (Python Materials Genomics) is an open-source Python library for materials analy… | pymatgen | 2024-02-21T17:15:09+00:00 | 2025-02-06T00:34:28.734730+00:00 |
| pysec-2024-225 |
7.5 (3.1)
|
cryptography is a package designed to expose cryptographic primitives and recipes to Pyth… | cryptography | 2024-02-21T17:15:09+00:00 | 2025-02-06T00:34:24.427679+00:00 |
| pysec-2024-155 |
7.5 (3.1)
|
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) … | cbor2 | 2024-02-19T23:15:07+00:00 | 2025-01-14T05:22:09.226388+00:00 |
| pysec-2024-107 |
5.0 (3.1)
|
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modif… | exiv2 | 2024-02-12T23:15:00+00:00 | 2024-10-23T00:00:00+00:00 |
| pysec-2024-106 |
5.0 (3.1)
|
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modif… | exiv2 | 2024-02-12T23:15:00+00:00 | 2024-10-23T00:00:00+00:00 |
| pysec-2024-104 |
5.3 (3.1)
|
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of … | jwcrypto | 2024-02-12T14:15:00+00:00 | 2024-10-10T17:22:00.587279+00:00 |
| pysec-2024-37 |
6.5 (3.1)
|
nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. Thi… | nonebot2 | 2024-02-09T23:15:00+00:00 | 2024-02-16T16:22:37.389642+00:00 |
| pysec-2024-125 |
7.5 (3.1)
|
DIRAC is a distributed resource framework. In affected versions any user could get a toke… | dirac | 2024-02-09T00:15:00+00:00 | 2024-11-21T14:22:45.495938+00:00 |
| pysec-2024-150 |
9.8 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can … | vyper | 2024-02-07T17:15:00+00:00 | 2024-11-21T14:23:03.024978+00:00 |
| pysec-2024-28 |
|
An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 be… | django | 2024-02-06T22:16:00+00:00 | 2024-02-07T00:25:46.826634+00:00 |
| pysec-2024-36 |
5.5 (3.1)
|
An information disclosure flaw was found in ansible-core due to a failure to respect the … | ansible-core | 2024-02-06T12:15:00+00:00 | 2024-02-14T07:20:09.911618+00:00 |
| pysec-2024-147 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack m… | vyper | 2024-02-05T21:15:00+00:00 | 2024-11-21T14:23:02.864019+00:00 |
| pysec-2024-38 |
7.5 (3.1)
|
FastAPI is a web framework for building APIs with Python 3.8+ based on standard Python ty… | fastapi | 2024-02-05T15:15:00+00:00 | 2024-02-16T18:22:32.607118+00:00 |
| pysec-2024-148 |
5.3 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls … | vyper | 2024-02-02T17:15:00+00:00 | 2024-11-21T14:23:02.917464+00:00 |
| pysec-2024-35 |
5.4 (3.1)
|
Versions of the package dash-core-components before 2.13.0; all versions of the package d… | dash | 2024-02-02T05:15:00+00:00 | 2024-02-10T07:18:43.563257+00:00 |
| pysec-2024-149 |
9.8 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2024-02-01T17:15:00+00:00 | 2024-11-21T14:23:02.970591+00:00 |
| pysec-2024-29 |
4.9 (3.1)
|
OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1… | octoprint | 2024-01-31T18:15:00+00:00 | 2024-02-08T07:19:40.535297+00:00 |
| pysec-2024-127 |
5.3 (3.1)
|
Label Studio is a popular open source data labeling tool. The vulnerability affects all v… | label-studio | 2024-01-31T17:15:00+00:00 | 2024-11-21T14:22:53.294472+00:00 |
| pysec-2024-151 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compi… | vyper | 2024-01-30T21:15:00+00:00 | 2024-11-21T14:23:03.091183+00:00 |
| pysec-2024-34 |
9.8 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6-server | 2024-01-30T16:15:00+00:00 | 2024-02-08T20:20:16.896186+00:00 |
| pysec-2024-33 |
9.8 (3.1)
|
The vantage6 technology enables to manage and deploy privacy enhancing technologies like … | vantage6-node | 2024-01-30T16:15:00+00:00 | 2024-02-08T20:20:16.842528+00:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-685 | Malicious code in strengthifys (npm) | 2026-02-03T07:27:10Z | 2026-02-06T03:05:26Z |
| mal-2026-684 | Malicious code in react-responsive-carousel-v4 (npm) | 2026-02-03T07:27:10Z | 2026-02-06T03:05:26Z |
| mal-2026-680 | Malicious code in frontend-js-state-web (npm) | 2026-02-03T07:27:10Z | 2026-02-06T03:05:24Z |
| mal-2026-679 | Malicious code in epic-admin-ui (npm) | 2026-02-03T07:27:10Z | 2026-02-06T03:05:23Z |
| mal-2026-683 | Malicious code in l2-contracts (npm) | 2026-02-03T07:24:02Z | 2026-02-06T03:05:24Z |
| mal-2026-682 | Malicious code in kwp-analytics (npm) | 2026-02-03T07:22:08Z | 2026-02-06T03:05:24Z |
| mal-2026-677 | Malicious code in chai-promise-tools (npm) | 2026-02-03T06:59:53Z | 2026-02-06T03:05:23Z |
| mal-2026-678 | Malicious code in cookie-parsers-env (npm) | 2026-02-03T06:59:52Z | 2026-02-06T03:05:23Z |
| mal-2026-676 | Malicious code in @ikeacnalan/icons (npm) | 2026-02-03T06:58:19Z | 2026-02-06T03:05:22Z |
| mal-2026-674 | Malicious code in freedom-baileys (npm) | 2026-02-03T05:01:34Z | 2026-02-06T03:05:24Z |
| mal-2026-673 | Malicious code in baileys-ud (npm) | 2026-02-03T05:01:34Z | 2026-02-06T03:05:22Z |
| mal-2026-675 | Malicious code in supun-baileys (npm) | 2026-02-03T05:01:33Z | 2026-02-06T03:05:26Z |
| mal-2026-672 | Malicious code in baileys-dtz (npm) | 2026-02-03T05:01:33Z | 2026-02-06T03:05:22Z |
| mal-2026-671 | Malicious code in cheerio-core (npm) | 2026-02-03T04:20:03Z | 2026-02-06T03:05:23Z |
| mal-2026-670 | Malicious code in aligned-array (npm) | 2026-02-03T04:12:07Z | 2026-02-06T03:05:22Z |
| mal-2026-668 | Malicious code in typescript-react-apollo (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-667 | Malicious code in typed-document-node (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-666 | Malicious code in transform-react-display-name (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-665 | Malicious code in transform-exponentiation-operator (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-664 | Malicious code in transform-es2015-modules-amd (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-663 | Malicious code in transform-async-generator-functions (npm) | 2026-02-03T03:57:51Z | 2026-02-06T03:05:27Z |
| mal-2026-661 | Malicious code in netlify-project-helper (npm) | 2026-02-03T03:54:05Z | 2026-02-06T03:05:25Z |
| mal-2026-660 | Malicious code in dns-troubleshoot-toolkit-xyz123 (npm) | 2026-02-03T03:54:05Z | 2026-02-06T03:05:23Z |
| mal-2026-669 | Malicious code in vite-ui-components (npm) | 2026-02-03T03:42:39Z | 2026-02-06T03:05:27Z |
| mal-2026-658 | Malicious code in ansi-universal-ui (npm) | 2026-02-03T03:42:39Z | 2026-02-06T03:05:22Z |
| mal-2026-659 | Malicious code in atg-atgse (npm) | 2026-02-03T03:27:31Z | 2026-02-06T03:05:22Z |
| mal-2026-662 | Malicious code in researchpoc (npm) | 2026-02-03T03:25:19Z | 2026-02-06T03:05:26Z |
| mal-2026-657 | Malicious code in react-dnd-legacy-html5-backend (npm) | 2026-02-03T02:23:48Z | 2026-02-06T03:05:26Z |
| mal-2026-656 | Malicious code in jshint-groups (npm) | 2026-02-03T01:59:02Z | 2026-02-06T03:05:24Z |
| mal-2026-655 | Malicious code in pipeline-poision-test (PyPI) | 2026-02-02T21:53:29Z | 2026-02-02T21:53:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2579 | Linux Kernel: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2566 | Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2564 | Microsoft Windows und Windows Server: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2025-12-22T23:00:00.000+00:00 |
| wid-sec-w-2025-2537 | BusyBox (wget): Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen | 2025-11-10T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2533 | RedHat Multicluster Engine for Kubernetes: Schwachstelle ermöglicht Privilegieneskalation | 2025-11-09T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2531 | Linux Kernel: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-11-09T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2518 | Red Hat Enterprise Linux (runc): Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-11-09T23:00:00.000+00:00 | 2026-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2510 | AnyDesk: Mehrere Schwachstellen | 2025-11-06T23:00:00.000+00:00 | 2025-12-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2508 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Denial of Service | 2025-11-06T23:00:00.000+00:00 | 2025-12-01T23:00:00.000+00:00 |
| wid-sec-w-2025-2500 | Cisco Contact Center Produkte (CCE,CCX,CUIC): Mehrere Schwachstellen | 2025-11-05T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2499 | IBM WebSphere Application Server: Schwachstelle ermöglicht Manipulation von Dateien und potenziell Umgehen von Sicherheitsvorkehrungen | 2025-11-05T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2495 | Django: Mehrere Schwachstellen ermöglichen Denial of Service und SQL-Injection | 2025-11-05T23:00:00.000+00:00 | 2026-01-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2491 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-11-05T23:00:00.000+00:00 | 2025-11-24T23:00:00.000+00:00 |
| wid-sec-w-2025-2488 | Red Hat Enterprise Linux (SSSD, libsoup): Mehrere Schwachstellen | 2025-11-04T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2485 | cURL (wcurl): Schwachstelle ermöglicht Manipulation von Dateien | 2025-11-03T23:00:00.000+00:00 | 2025-12-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2483 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-11-03T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2475 | Apple macOS: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2026-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2474 | Android Patchday November 2025: Multiple Vulnerabilities | 2025-11-03T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2473 | Apple iOS: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2026-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2472 | Samsung Android: Mehrere Schwachstellen | 2025-11-03T23:00:00.000+00:00 | 2025-12-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2468 | CPython: Schwachstelle ermöglicht Denial of Service | 2025-11-02T23:00:00.000+00:00 | 2026-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2466 | QEMU e1000 Network Devices: Schwachstelle ermöglicht Denial of Service | 2025-11-02T23:00:00.000+00:00 | 2026-01-06T23:00:00.000+00:00 |
| wid-sec-w-2025-2464 | OpenSMTP: Schwachstelle ermöglicht Denial of Service | 2025-11-02T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2450 | Linux Kernel: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2449 | GIMP: Schwachstelle ermöglicht Codeausführung | 2025-10-29T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2445 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2444 | Dell Secure Connect Gateway: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2441 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-29T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2025-2436 | Xwayland und X.Org X11: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-10-28T23:00:00.000+00:00 | 2026-01-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2435 | D-LINK Aquila Pro AI R15: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-10-28T23:00:00.000+00:00 | 2025-12-02T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0229 | Kwetsbaarheden verholpen in Adobe InDesign Desktop | 2025-07-11T10:01:48.229418Z | 2025-07-11T10:01:48.229418Z |
| ncsc-2025-0228 | Kwetsbaarheden verholpen in Zoom Clients | 2025-07-11T09:58:21.871103Z | 2025-07-11T09:58:21.871103Z |
| ncsc-2025-0227 | Kwetsbaarheid verholpen in Juniper SRX300 Series | 2025-07-11T09:57:40.476096Z | 2025-07-11T09:57:40.476096Z |
| ncsc-2025-0226 | Kwetsbaarheid verholpen in FortiWeb | 2025-07-11T09:57:23.588152Z | 2025-07-11T13:20:55.101692Z |
| ncsc-2025-0225 | Kwetsbaarheid verholpen in Juniper Networks Security Director | 2025-07-11T09:55:46.934253Z | 2025-07-11T09:55:46.934253Z |
| ncsc-2025-0224 | Kwetsbaarheden verholpen in Adobe Illustrator | 2025-07-09T08:57:08.548822Z | 2025-07-09T08:57:08.548822Z |
| ncsc-2025-0223 | Kwetsbaarheden verholpen in Adobe Framemaker | 2025-07-09T08:47:38.891072Z | 2025-07-09T08:47:38.891072Z |
| ncsc-2025-0222 | Kwetsbaarheden verholpen in Adobe ColdFusion | 2025-07-09T08:41:53.656736Z | 2025-07-09T08:41:53.656736Z |
| ncsc-2025-0221 | Kwetsbaarheden verholpen in Schneider Electric EcoStruxture IT Datacenter Expert | 2025-07-09T08:38:05.336146Z | 2025-07-09T08:38:05.336146Z |
| ncsc-2025-0220 | Kwetsbaarheden verholpen in Palo Alto PAN-OS | 2025-07-09T08:33:14.284978Z | 2025-07-09T08:33:14.284978Z |
| ncsc-2025-0219 | Kwetsbaarheden verholpen in SAP producten | 2025-07-09T08:29:00.474865Z | 2025-07-09T08:29:00.474865Z |
| ncsc-2025-0218 | Kwetsbaarheden verholpen in Microsoft Edge (Chromium based) | 2025-07-08T18:26:55.812717Z | 2025-07-08T18:26:55.812717Z |
| ncsc-2025-0217 | Kwetsbaarheden verholpen in Microsoft Visual Studio | 2025-07-08T18:26:14.881161Z | 2025-07-08T18:26:14.881161Z |
| ncsc-2025-0216 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2025-07-08T18:25:40.909948Z | 2025-07-08T18:25:40.909948Z |
| ncsc-2025-0215 | Kwetsbaarheden verholpen in Microsoft Office | 2025-07-08T18:24:48.517158Z | 2025-07-19T11:40:27.812820Z |
| ncsc-2025-0214 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-07-08T18:24:14.065296Z | 2025-07-08T18:24:14.065296Z |
| ncsc-2025-0213 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-07-08T18:23:09.960791Z | 2025-07-08T18:23:09.960791Z |
| ncsc-2025-0212 | Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform | 2025-07-08T12:03:17.100858Z | 2025-07-08T12:03:17.100858Z |
| ncsc-2025-0211 | Kwetsbaarheden verholpen in Siemens producten | 2025-07-08T11:58:23.712452Z | 2025-07-08T11:58:23.712452Z |
| ncsc-2025-0210 | Kwetsbaarheid verholpen in Cisco Unified Communications Manager | 2025-07-03T07:43:27.075341Z | 2025-07-03T07:43:27.075341Z |
| ncsc-2025-0209 | Kwetsbaarheid verholpen in Google Chrome | 2025-07-01T15:56:24.236216Z | 2025-07-01T15:56:24.236216Z |
| ncsc-2025-0208 | Kwetsbaarheden verholpen in Adobe Commerce | 2025-06-30T12:59:12.105658Z | 2025-06-30T12:59:12.105658Z |
| ncsc-2025-0207 | Kwetsbaarheden verholpen in Adobe InDesign Desktop | 2025-06-30T12:58:32.421661Z | 2025-06-30T12:58:32.421661Z |
| ncsc-2025-0206 | Kwetsbaarheden verholpen in Adobe Acrobat Reader | 2025-06-30T12:57:43.622242Z | 2025-06-30T12:57:43.622242Z |
| ncsc-2025-0205 | Kwetsbaarheid verholpen in IBM WebSphere Application Server | 2025-06-26T12:32:54.177712Z | 2025-06-26T12:32:54.177712Z |
| ncsc-2025-0204 | Kwetsbaarheden verholpen in Cisco ISE en ISE-PIC | 2025-06-26T09:02:07.224036Z | 2025-07-23T07:46:25.364521Z |
| ncsc-2025-0203 | Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway | 2025-06-25T14:54:38.413413Z | 2025-06-25T14:54:38.413413Z |
| ncsc-2025-0202 | Kwetsbaarheden verholpen in IBM InfoSphere Information Server | 2025-06-22T08:19:47.485567Z | 2025-06-22T08:19:47.485567Z |
| ncsc-2025-0201 | Kwetsbaarheid verholpen in IBM Spectrum Protect Server | 2025-06-22T08:17:03.146698Z | 2025-06-22T08:17:03.146698Z |
| ncsc-2025-0200 | Kwetsbaarheden verholpen in IBM QRadar SIEM | 2025-06-20T11:04:50.445218Z | 2025-06-20T11:04:50.445218Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-771940 | SSA-771940: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-06-11T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-690517 | SSA-690517: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11ax Family | 2024-06-11T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-196737 | SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2 | 2024-06-11T00:00:00Z | 2025-02-11T00:00:00Z |
| ssa-024584 | SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-976324 | SSA-976324: Multiple IGS File Parsing Vulnerabilities in PS/IGES Parasolid Translator Component before V27.1.215 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-962515 | SSA-962515: Out of Bounds Read Vulnerability in Industrial Products | 2024-05-14T00:00:00Z | 2024-12-10T00:00:00Z |
| ssa-953710 | SSA-953710: Vulnerabilities in the Network Communication Stack in Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-925850 | SSA-925850: Improper Access Control in Polarion ALM | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-923361 | SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-916916 | SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-661579 | SSA-661579: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-589937 | SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-489698 | SSA-489698: X_T File Parsing Vulnerability in Parasolid | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-292022 | SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-273900 | SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-258494 | SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-093430 | SSA-093430: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V3.0 | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-046364 | SSA-046364: X_T File Parsing Vulnerabilities in Parasolid | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-750274 | SSA-750274: Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW | 2024-04-19T00:00:00Z | 2024-07-09T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1907 | Red Hat Security Advisory: opentelemetry-collector security update | 2026-02-04T11:48:06+00:00 | 2026-02-16T14:22:17+00:00 |
| rhsa-2026:1870 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update | 2026-02-04T11:35:41+00:00 | 2026-02-04T18:56:08+00:00 |
| rhsa-2026:1852 | Red Hat Security Advisory: util-linux security update | 2026-02-04T11:22:56+00:00 | 2026-02-16T14:34:41+00:00 |
| rhsa-2026:1552 | Red Hat Security Advisory: OpenShift Container Platform 4.19.23 bug fix and security update | 2026-02-04T10:50:17+00:00 | 2026-02-16T14:34:24+00:00 |
| rhsa-2026:1882 | Red Hat Security Advisory: iperf3 security update | 2026-02-04T09:11:31+00:00 | 2026-02-10T19:02:45+00:00 |
| rhsa-2026:1886 | Red Hat Security Advisory: kernel security update | 2026-02-04T09:07:22+00:00 | 2026-02-12T19:28:10+00:00 |
| rhsa-2026:1577 | Red Hat Security Advisory: OpenShift Container Platform 4.17.48 bug fix and security update | 2026-02-04T08:15:24+00:00 | 2026-02-16T14:37:30+00:00 |
| rhsa-2026:1881 | Red Hat Security Advisory: iperf3 security update | 2026-02-04T08:06:15+00:00 | 2026-02-10T19:02:44+00:00 |
| rhsa-2026:1896 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.3 | 2026-02-04T07:12:33+00:00 | 2026-02-16T14:22:17+00:00 |
| rhsa-2026:1871 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update | 2026-02-04T05:16:20+00:00 | 2026-02-04T18:56:08+00:00 |
| rhsa-2026:1555 | Red Hat Security Advisory: OpenShift Container Platform 4.20.13 bug fix and security update | 2026-02-04T04:50:43+00:00 | 2026-02-16T14:37:27+00:00 |
| rhsa-2026:1872 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update | 2026-02-04T04:47:19+00:00 | 2026-02-04T18:56:08+00:00 |
| rhsa-2026:1556 | Red Hat Security Advisory: OpenShift Container Platform 4.20.13 security and extras update | 2026-02-04T04:16:28+00:00 | 2026-02-16T14:37:29+00:00 |
| rhsa-2026:0980 | Red Hat Security Advisory: OpenShift Container Platform 4.18.32 bug fix and security update | 2026-02-03T21:03:49+00:00 | 2026-02-05T19:46:33+00:00 |
| rhsa-2026:1820 | Red Hat Security Advisory: kpatch-patch-5_14_0-611_9_1 security update | 2026-02-03T18:41:33+00:00 | 2026-02-11T18:58:07+00:00 |
| rhsa-2026:1859 | Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update | 2026-02-03T17:24:45+00:00 | 2026-02-11T15:13:31+00:00 |
| rhsa-2026:1858 | Red Hat Security Advisory: Red Hat Ceph Storage | 2026-02-03T17:17:26+00:00 | 2026-02-11T15:13:31+00:00 |
| rhsa-2026:1062 | Red Hat Security Advisory: OpenShift Container Platform 4.18.32 bug fix and security update | 2026-02-03T17:11:40+00:00 | 2026-02-16T14:37:23+00:00 |
| rhsa-2026:1845 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2026-02-03T16:03:10+00:00 | 2026-02-16T14:22:16+00:00 |
| rhsa-2026:1828 | Red Hat Security Advisory: python3.12 security update | 2026-02-03T15:42:58+00:00 | 2026-02-16T14:15:02+00:00 |
| rhsa-2026:1825 | Red Hat Security Advisory: curl security update | 2026-02-03T15:41:33+00:00 | 2026-02-11T14:41:30+00:00 |
| rhsa-2026:1813 | Red Hat Security Advisory: golang security update | 2026-02-03T14:57:18+00:00 | 2026-02-16T14:22:15+00:00 |
| rhsa-2026:1823 | Red Hat Security Advisory: JMC bug fix and enhancement update | 2026-02-03T13:51:18+00:00 | 2026-02-04T18:56:06+00:00 |
| rhsa-2026:1815 | Red Hat Security Advisory: openssh security update | 2026-02-03T13:31:42+00:00 | 2026-02-03T20:56:58+00:00 |
| rhsa-2026:1814 | Red Hat Security Advisory: golang security update | 2026-02-03T12:29:57+00:00 | 2026-02-16T14:22:16+00:00 |
| rhsa-2026:1805 | Red Hat Security Advisory: resource-agents security update | 2026-02-03T10:17:28+00:00 | 2026-02-16T14:37:41+00:00 |
| rhsa-2026:1803 | Red Hat Security Advisory: fence-agents security update | 2026-02-03T09:45:07+00:00 | 2026-02-16T14:37:41+00:00 |
| rhsa-2026:1795 | Red Hat Security Advisory: resource-agents security update | 2026-02-03T07:28:32+00:00 | 2026-02-16T14:37:41+00:00 |
| rhsa-2026:1792 | Red Hat Security Advisory: fence-agents security update | 2026-02-03T07:25:42+00:00 | 2026-02-16T14:37:37+00:00 |
| rhsa-2026:1791 | Red Hat Security Advisory: fence-agents security update | 2026-02-03T07:21:33+00:00 | 2026-02-16T14:37:37+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-226-30 | Rockwell Automation FactoryTalk Action Manager | 2025-08-14T06:00:00.000000Z | 2025-08-15T06:00:00.000000Z |
| icsa-25-226-29 | Rockwell Automation Studio 5000 Logix Designer | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-28 | Rockwell Automation ControlLogix Ethernet Modules | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-27 | Rockwell Automation ArmorBlock 5000 I/O - Webserver | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-26 | Rockwell Automation FLEX 5000 I/O (Update A) | 2025-08-14T06:00:00.000000Z | 2025-09-30T06:00:00.000000Z |
| icsa-25-226-25 | Rockwell Automation Micro800 | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-24 | Rockwell FactoryTalk Linx | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-226-23 | Rockwell Automation FactoryTalk Viewpoint | 2025-08-14T06:00:00.000000Z | 2025-08-14T06:00:00.000000Z |
| icsa-25-231-02 | Siemens Mendix SAML Module | 2025-08-14T00:00:00.000000Z | 2026-01-14T22:05:40.193680Z |
| icsa-25-231-01 | Siemens Desigo CC Product Family and SENTRON Powermanager | 2025-08-14T00:00:00.000000Z | 2025-08-14T00:00:00.000000Z |
| icsma-25-224-01 | Santesoft Sante PACS Server | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-224-04 | AVEVA PI Integrator | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-224-02 | Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A) | 2025-08-12T06:00:00.000000Z | 2025-12-16T07:00:00.000000Z |
| icsa-25-224-01 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share | 2025-08-12T06:00:00.000000Z | 2025-08-12T06:00:00.000000Z |
| icsa-25-266-03 | Schneider Electric SESU | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-08 | Schneider Electric EcoStruxure | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-240-03 | Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit | 2025-08-12T04:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-238-03 | Schneider Electric Modicon M340 Controller and Communication Modules | 2025-08-12T04:00:00.000000Z | 2025-08-12T04:00:00.000000Z |
| icsa-25-224-03 | Schneider Electric EcoStruxure Power Monitoring Expert | 2025-08-12T04:00:00.000000Z | 2025-11-11T08:00:00.000000Z |
| icsa-25-266-17 | Siemens SINEC Traffic Analyzer | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-22 | Siemens Web Installer | 2025-08-12T00:00:00.000000Z | 2026-02-12T07:00:00.000000Z |
| icsa-25-226-21 | Siemens BFCClient | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-20 | Siemens RUGGEDCOM ROX II | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-19 | Siemens SINUMERIK | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-18 | Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER | 2025-08-12T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-226-17 | Siemens SINEC Traffic Analyzer | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-16 | Siemens SICAM Q100/Q200 | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-15 | Siemens SINEC OS | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-14 | Siemens RUGGEDCOM ROX II | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| icsa-25-226-13 | Siemens SIMATIC RTLS Locating Manager | 2025-08-12T00:00:00.000000Z | 2025-08-12T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asaftd-bf-dos-vdzhlqrw | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-acl-bypass-vvnlnkqf | Cisco Adaptive Security Appliance and Firepower Threat Defense Software AnyConnect Access Control List Bypass Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-24T21:19:17+00:00 |
| cisco-sa-asa-vpn-nyh3fhp | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-czf8gt | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-4gyewmkg | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-tls-cwy6zxb | Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-rce-graupeuf | Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-dos-eedwu5rm | Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ftd-priv-esc-hbs9gnwq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ucsc-bkpsky-tgj5f73j | Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tax76u3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ata19x-multi-rdteqrsy | Cisco ATA 190 Series Analog Telephone Adapter Firmware Vulnerabilities | 2024-10-16T16:00:00+00:00 | 2024-10-24T11:47:37+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yj2osdhv | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qe33tcms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-fduf3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-jh4v6zpn | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-bk8vqedc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-t46k3jnn | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-bushlbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-uvyzrkfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-xvyx2wlj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-meraki-mx-vpn-dos-qtrhzg2 | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Denial of Service Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:28+00:00 |
| cisco-sa-meraki-mx-vpn-dos-by-qwukqv7x | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Session Takeover and Denial of Service Vulnerability | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:27+00:00 |
| cisco-sa-ise-info-disc-zyf2neex | Cisco Identity Services Engine Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-expw-escalation-3bkz77bd | Cisco Expressway Series Privilege Escalation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-cimc-redfish-cominj-sbkv5zz | Cisco UCS B-Series, Managed C-Series, and X-Series Servers Redfish API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-webui-csrf-ycuyxkko | Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-vlan-dos-27pur5rt | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-utd-snort3-dos-bypas-b4ouewxd | Cisco Unified Threat Defense Snort Intrusion Prevention System Engine for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-sdwan-xss-zq4kpvyd | Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability | 2024-09-25T16:00:00+00:00 | 2025-03-28T18:38:53+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-62468 | Windows Defender Firewall Service Information Disclosure Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-12T08:00:00.000Z |
| msrc_cve-2025-62467 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62466 | Windows Client-Side Caching Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62465 | DirectX Graphics Kernel Denial of Service Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62464 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62463 | DirectX Graphics Kernel Denial of Service Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62462 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62461 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62458 | Win32k Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62457 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62456 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62455 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62454 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-62221 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-59517 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-59516 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-55233 | Windows Projected File System Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-09T08:00:00.000Z |
| msrc_cve-2025-54100 | PowerShell Remote Code Execution Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-18T08:00:00.000Z |
| msrc_cve-2025-14174 | Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE | 2025-12-09T08:00:00.000Z | 2025-12-15T08:00:00.000Z |
| msrc_cve-2025-62223 | Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability | 2025-12-04T08:00:00.000Z | 2025-12-04T08:00:00.000Z |
| msrc_cve-2025-69277 | libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. | 2025-12-02T00:00:00.000Z | 2026-01-03T01:01:58.000Z |
| msrc_cve-2025-68973 | In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.) | 2025-12-02T00:00:00.000Z | 2026-01-06T14:36:10.000Z |
| msrc_cve-2025-68972 | In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an "invalid armor" message is printed during verification). This is related to use of \f as a marker to denote truncation of a long plaintext line. | 2025-12-02T00:00:00.000Z | 2026-01-06T14:36:03.000Z |
| msrc_cve-2025-68746 | spi: tegra210-quad: Fix timeout handling | 2025-12-02T00:00:00.000Z | 2025-12-26T14:37:09.000Z |
| msrc_cve-2025-68745 | scsi: qla2xxx: Clear cmds after chip reset | 2025-12-02T00:00:00.000Z | 2025-12-26T14:36:45.000Z |
| msrc_cve-2025-68744 | bpf: Free special fields when update [lru_,]percpu_hash maps | 2025-12-02T00:00:00.000Z | 2025-12-26T14:36:55.000Z |
| msrc_cve-2025-68742 | bpf: Fix invalid prog->stats access when update_effective_progs fails | 2025-12-02T00:00:00.000Z | 2025-12-26T14:37:19.000Z |
| msrc_cve-2025-68741 | scsi: qla2xxx: Fix improper freeing of purex item | 2025-12-02T00:00:00.000Z | 2025-12-26T14:36:16.000Z |
| msrc_cve-2025-68740 | ima: Handle error code returned by ima_filter_rule_match() | 2025-12-02T00:00:00.000Z | 2025-12-26T14:37:57.000Z |
| msrc_cve-2025-68736 | landlock: Fix handling of disconnected directories | 2025-12-02T00:00:00.000Z | 2025-12-26T14:36:40.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:20121-1 | Security update for redis | 2025-12-30T17:05:45Z | 2025-12-30T17:05:45Z |
| opensuse-su-2025:20155-1 | Security update for exim | 2025-12-30T17:02:44Z | 2025-12-30T17:02:44Z |
| opensuse-su-2025:20128-1 | Security update for shadowsocks-v2ray-plugin, v2ray-core | 2025-12-30T17:02:04Z | 2025-12-30T17:02:04Z |
| opensuse-su-2025:20097-1 | Security update for helmfile | 2025-12-30T17:00:02Z | 2025-12-30T17:00:02Z |
| opensuse-su-2025:20178-1 | Security update for chromium | 2025-12-30T16:56:53Z | 2025-12-30T16:56:53Z |
| opensuse-su-2025:15853-1 | weblate-5.14.3-2.1 on GA media | 2025-12-30T00:00:00Z | 2025-12-30T00:00:00Z |
| opensuse-su-2025:15852-1 | trivy-0.68.2-1.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15851-1 | python313-3.13.11-1.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15850-1 | python312-3.12.12-4.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15849-1 | python311-3.11.14-3.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15848-1 | python311-openapi-core-0.22.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| opensuse-su-2025:15847-1 | anubis-1.24.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| opensuse-su-2025:15846-1 | python39-3.9.25-2.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15845-1 | podman-5.7.1-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15844-1 | cpp-httplib-devel-0.28.0-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15843-1 | buildah-1.42.2-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2026:20000-1 | Security update for salt | 2025-12-23T09:11:50Z | 2025-12-23T09:11:50Z |
| opensuse-su-2025:15842-1 | libnbd-1.24.0-2.1 on GA media | 2025-12-23T00:00:00Z | 2025-12-23T00:00:00Z |
| opensuse-su-2025:20175-1 | Security update for mariadb | 2025-12-22T11:44:04Z | 2025-12-22T11:44:04Z |
| opensuse-su-2025:20174-1 | Security update for fontforge | 2025-12-22T10:04:31Z | 2025-12-22T10:04:31Z |
| opensuse-su-2025:15841-1 | zk-0.15.2-1.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15840-1 | python315-3.15.0~a3-1.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15839-1 | python310-3.10.19-3.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15838-1 | python311-tornado6-6.5.4-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15837-1 | php8-8.4.16-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15836-1 | kernel-devel-6.18.2-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15835-1 | duc-1.4.6-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15834-1 | busybox-1.37.0-8.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15833-1 | MozillaFirefox-146.0.1-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:20172-1 | Security update for the Linux Kernel | 2025-12-19T17:38:16Z | 2025-12-19T17:38:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| sevd-2020-224-01 | Schneider Electric Modbus Serial Driver | 2020-08-11T00:00:00.000Z | 2020-10-13T00:00:00.000Z |
| sevd-2020-196-01 | Schneider Electric Software Update (SESU) | 2020-07-14T00:00:00.000Z | 2020-07-14T00:00:00.000Z |
| sevd-2020-175-01 | Treck TCP/IP Vulnerabilities (Ripple20) | 2020-06-23T16:00:00.000Z | 2022-08-08T13:57:08.970Z |
| sevd-2020-174-01 | APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices | 2020-06-22T00:00:00.000Z | 2021-06-30T00:00:00.000Z |
| sevd-2020-161-05 | Easergy Builder | 2020-06-09T00:00:00.000Z | 2021-05-13T00:00:00.000Z |
| sevd-2020-161-04 | Easergy T300 | 2020-06-09T00:00:00.000Z | 2021-05-13T00:00:00.000Z |
| sevd-2020-161-03 | Modicon LMC078 Logic Controller additional URGENT/11 Fix | 2020-06-09T00:00:00.000Z | 2020-06-09T00:00:00.000Z |
| sevd-2020-161-01 | Modicon M218 Logic Controller | 2020-06-09T00:00:00.000Z | 2020-06-09T00:00:00.000Z |
| sevd-2020-133-03 | U.motion Servers and Touch Panels | 2020-05-12T00:00:00.000Z | 2021-04-15T00:00:00.000Z |
| sevd-2020-133-02 | Vijeo Designer and Vijeo Designer Basic Software | 2020-05-12T00:00:00.000Z | 2020-08-14T00:00:00.000Z |
| sevd-2020-105-03 | Vijeo Designer and Vijeo Designer Basic | 2020-04-14T00:00:00.000Z | 2020-08-11T00:00:00.000Z |
| sevd-2020-105-02 | Modicon M218/M241/M251/M258 Logic Controllers,SoMachine/SoMachine Motion, EcoStruxure™ Machine Expert | 2020-04-14T00:00:00.000Z | 2020-11-10T00:00:00.000Z |
| sevd-2020-105-01 | Modicon M100/M200/M221 controllers, SoMachine Basic and EcoStruxure Machine Expert - Basic Programming Software | 2020-04-14T00:00:00.000Z | 2020-04-14T00:00:00.000Z |
| sevd-2020-080-01 | Modicon Controllers, EcoStruxure™ Control Expert and Unity Pro Programming Software | 2020-03-20T00:00:00.000Z | 2021-05-11T00:00:00.000Z |
| sevd-2020-070-04 | Andover Continuum System | 2020-03-10T00:00:00.000Z | 2020-05-12T00:00:00.000Z |
| sevd-2020-070-03 | ZigBee Installation Toolkit | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-070-02 | Modicon Quantum Ethernet Network module and Quantum / Premium COPRO | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-070-01 | IGSS (Interactive Graphical SCADA System) | 2020-03-10T00:00:00.000Z | 2020-03-10T00:00:00.000Z |
| sevd-2020-042-01 | ProSoft Configurator for Modicon PMEPXM0100 (H) | 2020-02-11T00:00:00.000Z | 2020-02-11T00:00:00.000Z |
| sevd-2020-014-01 | MSX Configurator | 2020-01-14T00:00:00.000Z | 2020-01-14T00:00:00.000Z |
| sevd-2019-281-02 | Modicon Controllers | 2019-09-26T12:53:28.000Z | 2024-08-13T00:00:00.000Z |
| sevd-2019-225-01 | Harmony (formerly known as Magelis) HMI Panels | 2019-08-13T09:59:02.000Z | 2024-01-09T09:59:02.000Z |
| sesb-2019-214-01 | Wind River VxWorks Vulnerabilities (URGENT/11) | 2019-08-02T00:00:00.000Z | 2022-09-13T00:00:00.000Z |
| sevd-2019-134-11 | Modicon Controllers | 2019-05-14T08:31:22.000Z | 2025-02-11T06:00:00.000Z |
| sevd-2018-095-01 | Security Notification - U.motion Builder software | 2018-04-05T00:00:00.000Z | 2020-02-11T00:00:00.000Z |
| sevd-2018-081-01 | Embedded FTP Servers for Modicon PAC Controllers | 2018-03-22T03:39:21.000Z | 2024-08-13T00:00:00.000Z |
| sevd-2015-344-01 | GoAhead Web Server vulnerability | 2015-12-15T00:00:00.000Z | 2020-06-09T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-1424 | Heap-buffer-overflow in extract_candidate | 2025-01-25T00:17:13.787335Z | 2025-01-25T14:25:05.188301Z |
| osv-2024-1423 | Security exception in java.base/java.util.Arrays.copyOfRange | 2025-01-25T00:03:24.362190Z | 2025-01-25T00:03:24.362579Z |
| osv-2025-54 | UNKNOWN READ in Assimp::SceneCombiner::CopyScene | 2025-01-22T00:15:23.827419Z | 2025-03-18T00:29:47.108675Z |
| osv-2025-52 | Use-of-uninitialized-value in icalmemory_strdup | 2025-01-22T00:07:34.573371Z | 2025-01-22T00:07:34.573823Z |
| osv-2025-51 | Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame | 2025-01-22T00:03:50.355443Z | 2025-01-24T14:26:07.849301Z |
| osv-2025-50 | Heap-double-free in r_crbtree_free | 2025-01-20T00:16:43.389094Z | 2025-01-20T00:16:43.389604Z |
| osv-2025-45 | Security exception in POIHDGFFuzzer | 2025-01-19T00:14:10.746839Z | 2025-01-19T00:14:10.747322Z |
| osv-2025-42 | Heap-use-after-free in r_list_free | 2025-01-19T00:06:58.533546Z | 2025-01-19T00:06:58.534017Z |
| osv-2025-33 | UNKNOWN READ in pcpp::RawPacket::insertData | 2025-01-16T00:01:14.786268Z | 2025-10-22T18:25:08.281167Z |
| osv-2025-32 | UNKNOWN READ in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch | 2025-01-16T00:01:09.535772Z | 2025-01-16T00:01:09.536403Z |
| osv-2025-31 | Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects | 2025-01-15T00:14:05.357161Z | 2025-05-17T14:21:13.704657Z |
| osv-2025-17 | Heap-buffer-overflow in cv::PngDecoder::readHeader | 2025-01-08T00:14:02.009521Z | 2025-01-08T00:14:02.009997Z |
| osv-2025-16 | UNKNOWN READ in png_free_data | 2025-01-08T00:13:45.160139Z | 2025-01-08T00:13:45.160518Z |
| osv-2025-13 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2025-01-07T00:15:11.722974Z | 2025-01-07T00:15:11.723402Z |
| osv-2025-7 | Heap-buffer-overflow in oatpp::json::Utils::escapeUtf8Char | 2025-01-07T00:03:42.053605Z | 2025-01-07T00:03:42.054132Z |
| osv-2025-6 | Heap-buffer-overflow in next_marker | 2025-01-06T00:16:10.036783Z | 2025-01-06T00:16:10.037219Z |
| osv-2025-4 | Heap-buffer-overflow in ___interceptor_pthread_create | 2025-01-05T00:17:02.263743Z | 2025-01-05T00:17:02.264158Z |
| osv-2025-3 | Heap-buffer-overflow in avifImageAddUUIDProperty | 2025-01-05T00:10:22.871565Z | 2025-01-05T00:10:22.872062Z |
| osv-2025-1 | Segv on unknown address in avif_fuzztest_properties@PropertiesAvifFuzzTest.PropsValid | 2025-01-04T00:00:30.888504Z | 2025-01-04T00:00:30.889140Z |
| osv-2024-1417 | Heap-buffer-overflow in cv::PngDecoder::read_from_io | 2025-01-02T00:15:00.246767Z | 2025-01-02T00:15:00.247102Z |
| osv-2024-1411 | Use-of-uninitialized-value in mark_context | 2024-12-29T00:03:28.881713Z | 2024-12-29T00:03:28.882100Z |
| osv-2024-1406 | UNKNOWN READ in _TIFFVSetField | 2024-12-27T00:16:38.077175Z | 2024-12-27T00:16:38.077756Z |
| osv-2024-1391 | Heap-buffer-overflow in gsicc_create_getv2buffer | 2024-12-20T00:03:10.307442Z | 2024-12-20T00:03:10.308031Z |
| osv-2024-1388 | Security exception in com.google.gson.internal.bind.TypeAdapters$28.write | 2024-12-18T00:02:54.357847Z | 2024-12-18T00:02:54.358393Z |
| osv-2024-1380 | Index-out-of-bounds in ndpi_search_dns | 2024-12-15T00:12:21.687565Z | 2024-12-15T00:12:21.687988Z |
| osv-2024-1375 | Index-out-of-bounds in dwg_decode_eed | 2024-12-15T00:01:20.442440Z | 2025-05-03T14:23:13.369570Z |
| osv-2024-1372 | Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess | 2024-12-14T00:00:14.982156Z | 2024-12-14T00:00:14.982614Z |
| osv-2024-1356 | Heap-buffer-overflow in ChunkAssignData | 2024-12-10T00:13:56.481718Z | 2024-12-10T00:13:56.482170Z |
| osv-2024-1355 | UNKNOWN READ in glslang::TInfoSinkBase::location | 2024-12-10T00:08:00.540533Z | 2025-12-23T15:50:47.917708Z |
| osv-2024-1351 | Use-of-uninitialized-value in Archive::UnexpEndArcMsg | 2024-12-10T00:05:42.992615Z | 2024-12-10T00:05:42.992960Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2024-0345 | Low severity (DoS) vulnerability in sequoia-openpgp | 2024-06-26T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0395 | The maintainer of chrono-english is unresponsive | 2024-06-24T12:00:00Z | 2024-11-10T20:38:56Z |
| rustsec-2024-0344 | Timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub` | 2024-06-18T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0394 | mmap unmaintained | 2024-06-10T12:00:00Z | 2024-11-10T14:06:58Z |
| rustsec-2024-0343 | Reduced entropy due to inadequate character set usage | 2024-06-03T12:00:00Z | 2024-06-15T13:11:33Z |
| rustsec-2024-0353 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0352 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0351 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0350 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0349 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0348 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0406 | BTreeMap memory leak when deallocating nodes with overflows | 2024-05-17T12:00:00Z | 2024-12-04T12:44:24Z |
| rustsec-2024-0340 | Tor path lengths too short when "full Vanguards" configured | 2024-05-15T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0339 | Tor path lengths too short when "Vanguards lite" configured | 2024-05-15T12:00:00Z | 2024-05-21T02:12:32Z |
| rustsec-2024-0342 | Degraded secret zeroization capabilities | 2024-05-02T12:00:00Z | 2024-05-20T15:25:56Z |
| rustsec-2024-0338 | Arithmetic overflows in cosmwasm-std | 2024-04-24T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0337 | The crate `zip_next` has been renamed to `zip`. | 2024-04-20T12:00:00Z | 2024-04-24T14:13:51Z |
| rustsec-2024-0336 | `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input | 2024-04-19T12:00:00Z | 2024-04-20T02:21:14Z |
| rustsec-2024-0335 | gix-transport indirect code execution via malicious username | 2024-04-13T12:00:00Z | 2024-07-02T23:39:37Z |
| rustsec-2024-0333 | `rsa-export` is unmaintained | 2024-04-06T12:00:00Z | 2024-04-12T16:29:46Z |
| rustsec-2024-0334 | `libp2p-tokio-socks5` is unmaintained | 2024-04-05T12:00:00Z | 2024-04-12T16:31:39Z |
| rustsec-2024-0332 | Degradation of service in h2 servers with CONTINUATION Flood | 2024-04-03T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2024-0441 | Panic when using a dropped extenref-typed element segment | 2024-04-02T12:00:00Z | 2025-05-02T08:23:27Z |
| rustsec-2024-0331 | Puccinier is unmainted. | 2024-03-31T12:00:00Z | 2024-03-31T14:44:37Z |
| rustsec-2024-0429 | Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter` | 2024-03-30T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0320 | yaml-rust is unmaintained. | 2024-03-20T12:00:00Z | 2024-11-01T12:31:51Z |
| rustsec-2024-0341 | Slow loris vulnerability with default configuration | 2024-03-15T12:00:00Z | 2024-05-21T02:12:32Z |
| rustsec-2024-0407 | Fails to ensure slice elements match the slice's declared type | 2024-03-05T12:00:00Z | 2025-10-28T06:02:18Z |
| rustsec-2024-0021 | Parts of Report are dropped as the wrong type during downcast | 2024-03-05T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2024-0420 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-activemq-2021-21350 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:32.295Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21349 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host | 2025-12-03T14:35:30.789Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21348 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) | 2025-12-03T14:35:29.299Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21347 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:27.664Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21346 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:26.027Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21345 | XStream is vulnerable to a Remote Command Execution attack | 2025-12-03T14:35:24.382Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21344 | XStream is vulnerable to an Arbitrary Code Execution attack | 2025-12-03T14:35:22.678Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21343 | XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights | 2025-12-03T14:35:21.073Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21342 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host | 2025-12-03T14:35:19.481Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2021-21341 | XStream can cause a Denial of Service | 2025-12-03T14:35:17.881Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2020-26217 | Remote Code Execution in XStream | 2025-12-03T14:35:16.352Z | 2025-12-03T15:08:24.036Z |
| bit-activemq-2020-1941 | 2025-12-03T14:35:14.779Z | 2025-12-03T15:08:24.036Z | |
| bit-activemq-2020-13947 | 2025-12-03T14:35:13.393Z | 2025-12-03T15:08:24.036Z | |
| bit-activemq-2020-13920 | 2025-12-03T14:35:12.171Z | 2025-12-03T15:08:24.036Z | |
| bit-activemq-2020-11998 | 2025-12-03T14:35:10.504Z | 2025-12-03T15:08:24.036Z | |
| bit-flux-2022-39272 | Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration | 2025-12-02T17:37:01.043Z | 2025-12-02T18:06:28.296Z |
| bit-flux-2022-36049 | Flux2 Helm Controller denial of service | 2025-12-02T17:36:59.799Z | 2025-12-02T18:06:28.296Z |
| bit-flux-2022-36035 | Flux CLI Workload Injection | 2025-12-02T17:36:58.339Z | 2025-12-02T18:06:28.296Z |
| bit-flux-2022-24878 | Improper path handling in Kustomization files allows for denial of service | 2025-12-02T17:36:56.954Z | 2025-12-02T18:06:28.296Z |
| bit-flux-2022-24877 | Improper path handling in kustomization files allows path traversal | 2025-12-02T17:36:55.459Z | 2025-12-02T18:06:28.296Z |
| bit-flux-2022-24817 | Improper kubeconfig validation allows arbitrary code execution | 2025-12-02T17:36:53.808Z | 2025-12-02T18:06:28.296Z |
| bit-gitlab-2025-7449 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-02T12:05:42.978Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-6195 | Direct Request ('Forced Browsing') in GitLab | 2025-12-02T12:05:25.518Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-13611 | Insertion of Sensitive Information into Log File in GitLab | 2025-12-02T12:03:48.649Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-12653 | Authentication Bypass by Spoofing in GitLab | 2025-12-02T12:03:41.060Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-12571 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-02T12:03:39.208Z | 2025-12-11T12:06:55.559Z |
| bit-cilium-2025-64715 | Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic | 2025-12-02T11:35:57.032Z | 2025-12-06T12:06:23.267Z |
| bit-gitlab-2025-9825 | Missing Authorization in GitLab | 2025-11-25T18:25:02.547Z | 2025-12-03T12:08:06.927Z |
| bit-drupal-2025-13083 | Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 | 2025-11-25T17:56:46.824Z | 2026-01-10T12:08:11.327Z |
| bit-drupal-2025-13082 | Drupal core - Moderately critical - Defacement - SA-CORE-2025-007 | 2025-11-25T17:56:45.040Z | 2025-11-25T18:26:29.568Z |
| ID | Description | Updated |
|---|---|---|
| var-200610-0022 | User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 a… | 2024-07-23T21:56:15.078000Z |
| var-200905-0505 | Array index error in the insertItemBefore method in WebKit, as used in Apple Safari befor… | 2024-07-23T21:56:07.125000Z |
| var-201912-0618 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:55:36.712000Z |
| var-202112-2011 | Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 an… | 2024-07-23T21:55:35.394000Z |
| var-201810-0932 | The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side chan… | 2024-07-23T21:55:35.727000Z |
| var-201210-0063 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:55:35.147000Z |
| var-200809-0182 | ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attack… | 2024-07-23T21:55:33.188000Z |
| var-201903-0417 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:55:16.315000Z |
| var-201912-0597 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:55:13.309000Z |
| var-200809-0009 | ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attack… | 2024-07-23T21:55:12.610000Z |
| var-201704-1589 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server t… | 2024-07-23T21:55:11.835000Z |
| var-200911-0398 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Int… | 2024-07-23T21:54:40.707000Z |
| var-201912-0128 | A logic issue was addressed with improved state management. This issue is fixed in watchO… | 2024-07-23T21:54:39.274000Z |
| var-201502-0366 | named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when D… | 2024-07-23T21:54:05.549000Z |
| var-201006-1183 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2024-07-23T21:53:56.790000Z |
| var-202003-1784 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2024-07-23T21:53:51.536000Z |
| var-201302-0132 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:53:51.971000Z |
| var-201711-0447 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T21:53:49.059000Z |
| var-201805-0963 | Systems with microprocessors utilizing speculative execution and speculative execution of… | 2024-07-23T21:53:48.206000Z |
| var-200102-0104 | "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges b… | 2024-07-23T21:53:48.441000Z |
| var-201403-0387 | Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python … | 2024-07-23T21:53:47.789000Z |
| var-201208-0344 | libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not pro… | 2024-07-23T21:53:17.145000Z |
| var-201910-1495 | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print… | 2024-07-23T21:53:16.217000Z |
| var-201912-0579 | A logic issue existed in the handling of synchronous page loads. This issue was addressed… | 2024-07-23T21:53:15.777000Z |
| var-200905-0196 | racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denia… | 2024-07-23T21:53:12.318000Z |
| var-200609-0315 | Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary c… | 2024-07-23T21:53:10.410000Z |
| var-202212-1751 | A type confusion issue was addressed with improved state handling. This issue is fixed in… | 2024-07-23T21:52:34.161000Z |
| var-201404-0398 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 an… | 2024-07-23T21:52:34.093000Z |
| var-201008-0172 | Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType befor… | 2024-07-23T21:52:33.872000Z |
| var-202108-2172 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-07-23T21:52:30.241000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000115 | Chatwork Desktop Application (Windows) uses a potentially dangerous function | 2024-10-28T14:29+09:00 | 2024-10-28T14:29+09:00 |
| jvndb-2024-000114 | Multiple vulnerabilities in baserCMS | 2024-10-25T15:07+09:00 | 2025-02-18T15:35+09:00 |
| jvndb-2024-010802 | Multiple SQL injection vulnerabilities in Trend Micro Deep Discovery Inspector | 2024-10-22T13:02+09:00 | 2024-10-22T13:02+09:00 |
| jvndb-2024-000106 | Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software | 2024-10-21T11:58+09:00 | 2024-11-21T11:37+09:00 |
| jvndb-2024-000113 | N-LINE vulnerable to HTML injection | 2024-10-18T14:48+09:00 | 2024-10-25T16:48+09:00 |
| jvndb-2024-000112 | MUSASI version 3 performing authentication on client-side | 2024-10-18T14:40+09:00 | 2024-10-25T16:55+09:00 |
| jvndb-2024-000111 | SHIRASAGI vulnerable to path traversal | 2024-10-16T14:12+09:00 | 2024-10-23T17:35+09:00 |
| jvndb-2024-000110 | Multiple vulnerabilities in Exment | 2024-10-11T14:13+09:00 | 2024-10-11T14:13+09:00 |
| jvndb-2024-000109 | baserCMS plugin "BurgerEditor" vulnerable to directory listing | 2024-10-10T14:57+09:00 | 2024-11-06T14:45+09:00 |
| jvndb-2024-009667 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2024-10-03T13:42+09:00 | 2024-10-03T13:42+09:00 |
| jvndb-2024-000108 | Apache Tomcat improper handling of TLS handshake process data | 2024-10-01T17:51+09:00 | 2024-10-01T17:51+09:00 |
| jvndb-2024-009498 | Vulnerability in Cosminexus | 2024-10-01T16:01+09:00 | 2024-10-01T16:01+09:00 |
| jvndb-2024-009481 | Insecure initial password configuration issue in SEIKO EPSON Web Config | 2024-10-01T14:14+09:00 | 2024-11-12T10:25+09:00 |
| jvndb-2024-000107 | RevoWorks Cloud vulnerable to unintended process execution | 2024-09-30T15:17+09:00 | 2024-09-30T15:17+09:00 |
| jvndb-2024-003932 | File Permissions Vulnerability in Hitachi Ops Center Common Services | 2024-09-30T14:15+09:00 | 2024-09-30T14:15+09:00 |
| jvndb-2024-000105 | Multiple vulnerabilities in Smart-tab | 2024-09-30T14:14+09:00 | 2024-09-30T14:14+09:00 |
| jvndb-2024-009396 | SNMP service is enabled by default in Sharp NEC Display Solutions projectors | 2024-09-30T12:46+09:00 | 2024-09-30T12:46+09:00 |
| jvndb-2024-000104 | MF Teacher Performance Management System vulnerable to cross-site scripting | 2024-09-27T15:00+09:00 | 2024-10-10T11:14+09:00 |
| jvndb-2024-000103 | The installer of e-Tax software(common program) vulnerable to privilege escalation | 2024-09-24T16:12+09:00 | 2024-09-24T16:12+09:00 |
| jvndb-2024-000102 | Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions | 2024-09-24T16:00+09:00 | 2024-10-18T11:02+09:00 |
| jvndb-2024-000101 | Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices | 2024-09-24T15:26+09:00 | 2024-09-24T15:26+09:00 |
| jvndb-2024-008391 | Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders | 2024-09-19T14:07+09:00 | 2024-09-19T14:07+09:00 |
| jvndb-2024-000100 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2024-09-18T14:34+09:00 | 2024-09-18T14:34+09:00 |
| jvndb-2024-000099 | Assimp vulnerable to heap-based buffer overflow | 2024-09-18T14:20+09:00 | 2024-09-18T14:20+09:00 |
| jvndb-2020-018328 | Falsification and eavesdropping of contents across multiple websites via Web Rehosting services | 2024-09-12T12:23+09:00 | 2024-09-12T12:23+09:00 |
| jvndb-2023-027250 | Security Problem in Web Browser Permission Mechanism | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| jvndb-2020-018327 | Malleability attack against executables encrypted by CBC mode with no integrity check | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| jvndb-2024-000095 | Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery | 2024-09-09T16:40+09:00 | 2024-09-09T16:40+09:00 |
| jvndb-2024-000096 | Pgpool-II vulnerable to information disclosure | 2024-09-09T14:58+09:00 | 2024-09-09T14:58+09:00 |
| jvndb-2024-000094 | "@cosme" App fails to restrict custom URL schemes properly | 2024-09-09T14:20+09:00 | 2024-09-09T14:20+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0145-1 | Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T11:04:25Z | 2026-01-17T11:04:25Z |
| suse-su-2026:0144-1 | Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7) | 2026-01-17T11:04:22Z | 2026-01-17T11:04:22Z |
| suse-su-2026:0143-1 | Security update for avahi | 2026-01-17T11:04:15Z | 2026-01-17T11:04:15Z |
| suse-su-2026:0133-1 | Security update for python | 2026-01-16T09:19:41Z | 2026-01-16T09:19:41Z |
| suse-su-2026:20090-1 | Security update for cpp-httplib | 2026-01-15T22:11:51Z | 2026-01-15T22:11:51Z |
| suse-su-2026:20089-1 | Security update for alloy | 2026-01-15T17:57:53Z | 2026-01-15T17:57:53Z |
| suse-su-2026:20088-1 | Security update for erlang | 2026-01-15T17:32:55Z | 2026-01-15T17:32:55Z |
| suse-su-2026:20086-1 | Security update for MozillaFirefox | 2026-01-15T16:33:38Z | 2026-01-15T16:33:38Z |
| suse-su-2026:0130-1 | Security update for python310 | 2026-01-15T13:11:09Z | 2026-01-15T13:11:09Z |
| suse-su-2026:20085-1 | Security update for bind | 2026-01-15T10:43:50Z | 2026-01-15T10:43:50Z |
| suse-su-2026:0125-1 | Security update for podman | 2026-01-14T16:57:37Z | 2026-01-14T16:57:37Z |
| suse-su-2026:0123-1 | Security update for libsoup | 2026-01-14T13:47:28Z | 2026-01-14T13:47:28Z |
| suse-su-2026:20084-1 | Security update for tomcat | 2026-01-14T13:17:56Z | 2026-01-14T13:17:56Z |
| suse-su-2026:20081-1 | Security update for apache2 | 2026-01-14T11:03:13Z | 2026-01-14T11:03:13Z |
| suse-su-2026:20110-1 | Security update for curl | 2026-01-14T10:58:55Z | 2026-01-14T10:58:55Z |
| suse-su-2026:20082-1 | Security update for curl | 2026-01-14T10:58:55Z | 2026-01-14T10:58:55Z |
| suse-su-2026:20092-1 | Security update for haproxy | 2026-01-14T10:57:49Z | 2026-01-14T10:57:49Z |
| suse-su-2026:20109-1 | Security update for haproxy | 2026-01-14T10:55:40Z | 2026-01-14T10:55:40Z |
| suse-su-2026:20094-1 | Security update for haproxy | 2026-01-14T10:55:40Z | 2026-01-14T10:55:40Z |
| suse-su-2026:20108-1 | Security update for gpg2 | 2026-01-14T10:23:37Z | 2026-01-14T10:23:37Z |
| suse-su-2026:20080-1 | Security update for gpg2 | 2026-01-14T10:23:37Z | 2026-01-14T10:23:37Z |
| suse-su-2026:0122-1 | Security update for MozillaFirefox | 2026-01-14T08:49:21Z | 2026-01-14T08:49:21Z |
| suse-su-2026:20078-1 | Security update for squid | 2026-01-14T08:37:40Z | 2026-01-14T08:37:40Z |
| suse-su-2026:0121-1 | Security update for ovmf | 2026-01-14T06:47:26Z | 2026-01-14T06:47:26Z |
| suse-su-2026:0120-1 | Security update for ovmf | 2026-01-14T06:46:44Z | 2026-01-14T06:46:44Z |
| suse-su-2026:20077-1 | Security update for python-uv | 2026-01-13T12:49:17Z | 2026-01-13T12:49:17Z |
| suse-su-2026:20091-1 | Security update for hawk2 | 2026-01-13T12:46:40Z | 2026-01-13T12:46:40Z |
| suse-su-2026:20093-1 | Security update for hawk2 | 2026-01-13T12:43:07Z | 2026-01-13T12:43:07Z |
| suse-su-2026:0119-1 | Security update for curl | 2026-01-13T08:10:35Z | 2026-01-13T08:10:35Z |
| suse-su-2026:0118-1 | Security update for libtasn1 | 2026-01-13T06:46:54Z | 2026-01-13T06:46:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-00677 | WordPress插件VikBooking Hotel Booking Engine & PMS信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00676 | WordPress插件Ultimate Member Widgets for Elementor信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00675 | WordPress插件Restaurant Menu by MotoPress信息泄露漏洞 | 2025-12-25 | 2026-01-07 |
| cnvd-2026-00012 | Microsoft Azure Cosmos DB欺骗漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00011 | Microsoft Azure Cognitive Service for Language权限提升漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00010 | Microsoft Edge (Chromium-based)欺骗漏洞(CNVD-2026-00010) | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00009 | WordPress插件MasterStudy LMS Pro信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00008 | WordPress插件Follow My Blog Post息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00007 | Apache StreamPark安全绕过漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00006 | Apache Fineract信息泄露漏洞(CNVD-2026-00006) | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00005 | Apache Fineract信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00004 | Apache Fineract安全绕过漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00003 | Apache Airflow信息泄露漏洞(CNVD-2026-00003) | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00002 | WordPress插件myCred信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00001 | WordPress插件Appointment Booking Calendar信息泄露漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2025-31388 | Apache StreamPark弱算法漏洞 | 2025-12-25 | 2025-12-25 |
| cnvd-2025-31387 | Apache HugeGraph-Server反序列化漏洞 | 2025-12-25 | 2025-12-25 |
| cnvd-2026-04454 | 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-1134083) | 2025-12-22 | 2026-01-21 |
| cnvd-2025-31336 | WordPress Hide Email Address plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-24 |
| cnvd-2025-31335 | WordPress HelloLeads CRM Form Shortcode plugin缺少授权漏洞 | 2025-12-22 | 2025-12-24 |
| cnvd-2025-31334 | WordPress Header Footer Script Adder plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31333 | WordPress Grider for Elementor plugin缺少授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31332 | WordPress GPXpress plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31331 | WordPress FX Currency Converter plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31330 | WordPress Freshchat plugin跨站请求伪造漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31329 | WordPress Fix Media Library plugin信息泄露漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31328 | WordPress Filebird Plugin缺少授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31327 | WordPress FileBird Pro plugin缺失授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31115 | WordPress Fancy Product Designer plugin信息泄露漏洞 | 2025-12-22 | 2025-12-23 |
| cnvd-2025-31114 | WordPress Fancy Product Designer plugin服务器端请求伪造漏洞 | 2025-12-22 | 2025-12-23 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-1120 | Vulnérabilité dans les produits Cisco | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1119 | Multiples vulnérabilités dans les produits Synology | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1118 | Vulnérabilité dans Mozilla Firefox | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1117 | Multiples vulnérabilités dans GLPI | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1116 | Multiples vulnérabilités dans Google Chrome | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| CERTFR-2025-AVI-1119 | Multiples vulnérabilités dans les produits Synology | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| CERTFR-2025-AVI-1118 | Vulnérabilité dans Mozilla Firefox | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| CERTFR-2025-AVI-1117 | Multiples vulnérabilités dans GLPI | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| CERTFR-2025-AVI-1116 | Multiples vulnérabilités dans Google Chrome | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1115 | Vulnérabilité dans Trend Micro Apex One | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1114 | Multiples vulnérabilités dans Tenable Nessus | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1113 | Multiples vulnérabilités dans Moodle | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| CERTFR-2025-AVI-1115 | Vulnérabilité dans Trend Micro Apex One | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| CERTFR-2025-AVI-1114 | Multiples vulnérabilités dans Tenable Nessus | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| CERTFR-2025-AVI-1113 | Multiples vulnérabilités dans Moodle | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1112 | Multiples vulnérabilités dans les produits Elastic | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1111 | Multiples vulnérabilités dans Roundcube | 2025-12-15T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2025-avi-1110 | Multiples vulnérabilités dans les produits Apple | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1109 | Vulnérabilité dans strongSwan | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| CERTFR-2025-AVI-1112 | Multiples vulnérabilités dans les produits Elastic | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| CERTFR-2025-AVI-1111 | Multiples vulnérabilités dans Roundcube | 2025-12-15T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| CERTFR-2025-AVI-1110 | Multiples vulnérabilités dans les produits Apple | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| CERTFR-2025-AVI-1109 | Vulnérabilité dans strongSwan | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1108 | Multiples vulnérabilités dans les produits IBM | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1107 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1106 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1105 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1104 | Vulnérabilité dans Microsoft Windows Admin Center | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| certfr-2025-avi-1103 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-12T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1102 | Multiples vulnérabilités dans les produits NetApp | 2025-12-12T00:00:00.000000 | 2025-12-12T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2019-ALE-001 | Vulnérabilité dans le gestionnaire de paquets APT | 2019-01-22T00:00:00.000000 | 2019-02-27T00:00:00.000000 |
| certfr-2018-ale-013 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| CERTFR-2018-ALE-013 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-012 | Vulnérabilité dans Wallix AdminBastion | 2018-10-26T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| CERTFR-2018-ALE-012 | Vulnérabilité dans Wallix AdminBastion | 2018-10-26T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-011 | Vulnérabilité dans le client Git | 2018-10-08T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| CERTFR-2018-ALE-011 | Vulnérabilité dans le client Git | 2018-10-08T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| certfr-2018-ale-010 | Vulnérabilité activement exploitée dans le framework STRUTS 2 | 2018-08-29T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-009 | Vulnérabilité dans Microsoft Windows | 2018-08-29T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| CERTFR-2018-ALE-010 | Vulnérabilité activement exploitée dans le framework STRUTS 2 | 2018-08-29T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-009 | Vulnérabilité dans Microsoft Windows | 2018-08-29T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-ale-008 | Campagne de messages électroniques non sollicités de type Locky Locker | 2018-08-03T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-008 | Campagne de messages électroniques non sollicités de type Locky Locker | 2018-08-03T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-007 | Multiples vulnérabilités dans S/MIME et OpenPGP | 2018-05-14T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-007 | Multiples vulnérabilités dans S/MIME et OpenPGP | 2018-05-14T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-006 | Vulnérabilité dans Cisco IOS et IOS XE Smart Install Client | 2018-04-06T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| CERTFR-2018-ALE-006 | Vulnérabilité dans Cisco IOS et IOS XE Smart Install Client | 2018-04-06T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-005 | Multiples vulnérabilités dans Drupal | 2018-03-29T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| CERTFR-2018-ALE-005 | Multiples vulnérabilités dans Drupal | 2018-03-29T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-004 | Vulnérabilité dans le serveur de messagerie Exim | 2018-03-07T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| CERTFR-2018-ALE-004 | Vulnérabilité dans le serveur de messagerie Exim | 2018-03-07T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-003 | Vulnérabilité dans Adobe Flash Player | 2018-02-02T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| CERTFR-2018-ALE-003 | Vulnérabilité dans Adobe Flash Player | 2018-02-02T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| certfr-2018-ale-002 | Vulnérabilité dans Cisco Adaptive Security Appliance | 2018-02-01T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| CERTFR-2018-ALE-002 | Vulnérabilité dans Cisco Adaptive Security Appliance | 2018-02-01T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2018-ale-001 | Multiples vulnérabilités de fuite d'informations dans des processeurs | 2018-01-04T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| CERTFR-2018-ALE-001 | Multiples vulnérabilités de fuite d'informations dans des processeurs | 2018-01-04T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2017-ale-020 | Vulnérabilité dans des implémentations de TLS | 2017-12-13T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| CERTFR-2017-ALE-020 | Vulnérabilité dans des implémentations de TLS | 2017-12-13T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2017-ale-019 | Vulnérabilité d'usurpation d'identité dans plusieurs clients de messagerie | 2017-12-05T00:00:00.000000 | 2018-03-07T00:00:00.000000 |