Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2024-12086
6.1 (3.1)
Rsync: rsync server leaks arbitrary client files

2025-01-14T17:37:54.960Z 2026-04-24T09:54:54.496Z
CVE-2026-6272
8.5 (4.0)
A client holding only a read JWT scope can still … Eclipse Foundation
 Eclipse KUKSA - Databroker
 2026-04-24T08:28:17.690Z 2026-04-24T08:28:17.690Z
CVE-2025-41115
10 (3.1)
Incorrect privilege assignment Grafana
 Grafana Enterprise
 2025-11-21T14:25:38.945Z 2026-04-24T08:00:52.496Z
CVE-2025-41118
9.1 (3.1)
Sensitive COS `SecretKey` exposed in plaintext via con… Grafana
 Pyroscope
 2026-04-15T19:15:17.689Z 2026-04-24T08:00:52.045Z
CVE-2025-41117
6.8 (3.1)
XSS in Grafana Explore stack trace Grafana
 grafana/grafana
 2026-02-12T08:49:08.545Z 2026-04-24T08:00:51.710Z
CVE-2026-21721
8.1 (3.1)
Dashboard Permissions Scope Bypass Enables Cross‑Dashb… Grafana
 grafana/grafana
 2026-01-27T09:07:55.160Z 2026-04-24T08:00:51.154Z
CVE-2026-33375
6.5 (3.1)
Grafana MSSQL Data Source Plugin: Restriction Bypass L… Grafana
 Grafana OSS
 2026-03-26T20:05:52.564Z 2026-04-24T08:00:50.665Z
CVE-2026-27880
7.5 (3.1)
OpenFeature evaluation API reads input data with no bounds Grafana
 Grafana
 2026-03-27T14:12:20.075Z 2026-04-24T08:00:50.308Z
CVE-2026-27877
6.5 (3.1)
Public dashboards discloses all direct mode datasources Grafana
 Grafana
 2026-03-27T14:02:11.889Z 2026-04-24T08:00:49.946Z
CVE-2026-21727
3.3 (3.1)
Grafana Correlations: Cross-Tenant Data Disclosure and… Grafana
 Grafana Correlations
 2026-04-15T18:57:25.185Z 2026-04-24T08:00:49.460Z
CVE-2026-27879
6.5 (3.1)
Query resampling can cause unbounded memory allocations Grafana
 Grafana
 2026-03-27T14:28:56.133Z 2026-04-24T08:00:49.101Z
CVE-2026-21720
7.5 (3.1)
Unauthenticated DoS: avatar cache leaks goroutines whe… Grafana
 grafana/grafana-enterprise
 2026-01-27T09:07:04.758Z 2026-04-24T08:00:48.727Z
CVE-2026-28377
7.5 (3.1)
S3 SSE-C Encryption Key Exposed in Plaintext via Confi… Grafana
 Tempo
 2026-03-26T21:39:46.928Z 2026-04-24T08:00:48.241Z
CVE-2026-21722
5.3 (3.1)
Public Dashboards time range restriction on annotation… Grafana
 grafana/grafana
 2026-02-12T08:49:05.678Z 2026-04-24T08:00:47.717Z
CVE-2026-21728
7.5 (3.1)
Tempo query limit results in unbounded memory allocation Grafana
 Tempo
 2026-04-24T08:00:47.074Z 2026-04-24T08:00:47.074Z
CVE-2026-21724
5.4 (3.1)
Missing Protected-field Authorization in Provisioning … Grafana
 Grafana OSS
 2026-03-26T20:06:18.829Z 2026-04-24T08:00:46.706Z
CVE-2026-21726
5.3 (3.1)
Loki Path Traversal - CVE-2021-36156 Bypass Grafana
 Loki
 2026-04-15T19:24:31.268Z 2026-04-24T08:00:46.291Z
CVE-2026-27876
9.1 (3.1)
RCE on Grafana via sqlExpressions Grafana
 Grafana
 2026-03-27T14:24:36.771Z 2026-04-24T08:00:45.815Z
CVE-2026-28375
6.5 (3.1)
Grafana Testdata datasource can issue unbounded memory… Grafana
 Grafana
 2026-03-27T14:26:19.270Z 2026-04-24T08:00:45.094Z
CVE-2026-21725
2.6 (3.1)
Authorization Bypass via TOCTOU in Grafana Datasource … Grafana
 Grafana
 2026-02-25T12:35:43.104Z 2026-04-24T08:00:44.700Z
CVE-2026-3569
5.3 (3.1)
Liaison Site Prober <= 1.2.1 - Missing Authorization t… liaison
 Liaison Site Prober
 2026-04-24T07:45:08.536Z 2026-04-24T07:45:08.536Z
CVE-2026-4078
6.4 (3.1)
ITERAS <= 1.8.2 - Authenticated (Contributor+) Stored … iteras
 ITERAS
 2026-04-24T07:45:08.094Z 2026-04-24T07:45:08.094Z
CVE-2026-3565
4.3 (3.1)
Taqnix <= 1.0.3 - Cross-Site Request Forgery to Accoun… taqnix
 Taqnix
 2026-04-24T07:45:07.610Z 2026-04-24T07:45:07.610Z
CVE-2025-11762
4.3 (3.1)
HubSpot All-In-One Marketing - Forms, Popups, Live Cha… hubspotdev
 HubSpot All-In-One Marketing – Forms, Popups, Live Chat
 2026-04-24T07:45:06.751Z 2026-04-24T07:45:06.751Z
CVE-2026-31283
9.8 (3.1)
In Totara LMS v19.1.5 and before, the forgot pass… n/a
 n/a
 2026-04-13T00:00:00.000Z 2026-04-24T07:32:30.441Z
CVE-2026-1875
8.7 (4.0)
Denial-of-Service (DoS) vulnerability in Ethernet func… Mitsubishi Electric Corporation
 MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP
 2026-03-03T06:54:20.732Z 2026-04-24T07:29:25.067Z
CVE-2026-1874
8.7 (4.0)
Denial-of-Service (DoS) vulnerability in Ethernet func… Mitsubishi Electric Corporation
 MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP
 2026-03-03T06:46:21.526Z 2026-04-24T07:24:38.061Z
CVE-2026-6349
9.3 (4.0)
9.8 (3.1)
HGiga｜iSherlock - OS Command Injection HGiga
 iSherlock-base-4.5
 2026-04-16T02:24:45.258Z 2026-04-24T07:23:51.324Z
CVE-2025-3511
7.5 (3.1)
Improper Validation of Specified Quantity in Inpu… Mitsubishi Electric Corporation
 CC-Link IE TSN Remote I/O module NZ2GN2S1-32D
 2025-04-25T05:14:43.758Z 2026-04-24T07:13:32.562Z
CVE-2026-1951
9.8 (3.1)
No checking of the length of the buffer with the direc… DeltaWW
 AS320T
 2026-04-24T06:13:35.539Z 2026-04-24T06:13:35.539Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-6272
8.5 (4.0)
A client holding only a read JWT scope can still … Eclipse Foundation
 Eclipse KUKSA - Databroker
 2026-04-24T08:28:17.690Z 2026-04-24T08:28:17.690Z
CVE-2026-21728
7.5 (3.1)
Tempo query limit results in unbounded memory allocation Grafana
 Tempo
 2026-04-24T08:00:47.074Z 2026-04-24T08:00:47.074Z
CVE-2026-6349
9.3 (4.0)
9.8 (3.1)
HGiga｜iSherlock - OS Command Injection HGiga
 iSherlock-base-4.5
 2026-04-16T02:24:45.258Z 2026-04-24T07:23:51.324Z
CVE-2026-4078
6.4 (3.1)
ITERAS <= 1.8.2 - Authenticated (Contributor+) Stored … iteras
 ITERAS
 2026-04-24T07:45:08.094Z 2026-04-24T07:45:08.094Z
CVE-2026-3569
5.3 (3.1)
Liaison Site Prober <= 1.2.1 - Missing Authorization t… liaison
 Liaison Site Prober
 2026-04-24T07:45:08.536Z 2026-04-24T07:45:08.536Z
CVE-2026-3565
4.3 (3.1)
Taqnix <= 1.0.3 - Cross-Site Request Forgery to Accoun… taqnix
 Taqnix
 2026-04-24T07:45:07.610Z 2026-04-24T07:45:07.610Z
CVE-2026-31283
9.8 (3.1)
In Totara LMS v19.1.5 and before, the forgot pass… n/a
 n/a
 2026-04-13T00:00:00.000Z 2026-04-24T07:32:30.441Z
CVE-2026-1875
8.7 (4.0)
Denial-of-Service (DoS) vulnerability in Ethernet func… Mitsubishi Electric Corporation
 MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP
 2026-03-03T06:54:20.732Z 2026-04-24T07:29:25.067Z
CVE-2026-1874
8.7 (4.0)
Denial-of-Service (DoS) vulnerability in Ethernet func… Mitsubishi Electric Corporation
 MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP
 2026-03-03T06:46:21.526Z 2026-04-24T07:24:38.061Z
CVE-2025-11762
4.3 (3.1)
HubSpot All-In-One Marketing - Forms, Popups, Live Cha… hubspotdev
 HubSpot All-In-One Marketing – Forms, Popups, Live Chat
 2026-04-24T07:45:06.751Z 2026-04-24T07:45:06.751Z
CVE-2026-1952
9.8 (3.1)
Denial of service via the undocumented subfunction in AS320T DeltaWW
 AS320T
 2026-04-24T06:08:58.826Z 2026-04-24T06:08:58.826Z
CVE-2026-1951
9.8 (3.1)
No checking of the length of the buffer with the direc… DeltaWW
 AS320T
 2026-04-24T06:13:35.539Z 2026-04-24T06:13:35.539Z
CVE-2026-1950
9.8 (3.1)
No checking of the length of the buffer with the file … DeltaWW
 AS320T
 2026-04-24T05:56:52.385Z 2026-04-24T06:00:06.239Z
CVE-2026-6810
5.3 (3.1)
Booking Calendar Contact Form <= 1.2.63 - Authenticate… codepeople
 Booking Calendar Contact Form
 2026-04-24T05:29:38.488Z 2026-04-24T05:29:38.488Z
CVE-2026-5428
6.4 (3.1)
Royal Addons for Elementor <= 1.7.1056 - Authenticated… wproyal
 Royal Addons for Elementor – Addons and Templates Kit for Elementor
 2026-04-24T05:29:38.884Z 2026-04-24T05:29:38.884Z
CVE-2026-5364
8.1 (3.1)
Drag and Drop File Upload for Contact Form 7 <= 1.1.3 … addonsorg
 Drag and Drop File Upload for Contact Form 7
 2026-04-24T05:29:37.326Z 2026-04-24T05:29:37.326Z
CVE-2026-5347
5.3 (3.1)
WP Books Gallery <= 4.8.0 - Missing Authorization to U… mhmrajib
 WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes
 2026-04-24T05:29:38.066Z 2026-04-24T05:29:38.066Z
CVE-2026-1949
9.8 (3.1)
Incorrect calculation of buffer size on the stack in AS320T DeltaWW
 AS320T
 2026-04-24T05:50:48.468Z 2026-04-24T05:50:48.468Z
CVE-2026-6947
8.7 (4.0)
7.5 (3.1)
D-Link｜DWM-222W USB Wi-Fi Adapter - Brute-Force Protec… D-Link
 DWM-222W
 2026-04-24T03:46:15.124Z 2026-04-24T03:46:15.124Z
CVE-2026-6393
4.3 (3.1)
BetterDocs <= 4.3.11 - Missing Authorization to Authen… wpdevteam
 BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
 2026-04-24T03:27:05.541Z 2026-04-24T03:27:05.541Z
CVE-2026-5488
5.3 (3.1)
ExactMetrics <= 9.1.2 - Authenticated (Subscriber+) Mi… smub
 ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)
 2026-04-24T03:27:06.309Z 2026-04-24T03:27:06.309Z
CVE-2026-41485
7.7 (3.1)
Kyverno Controller Denial of Service via forEach Mutat… kyverno
 kyverno
 2026-04-24T03:27:08.865Z 2026-04-24T03:27:08.865Z
CVE-2026-41430
1.3 (4.0)
Press vulnerable to reflected XSS on login redirection frappe
 press
 2026-04-24T02:42:30.228Z 2026-04-24T02:42:30.228Z
CVE-2026-41324
7.5 (3.1)
basic-ftp vulnerable to denial of service via unbounde… patrickjuchli
 basic-ftp
 2026-04-24T03:28:48.696Z 2026-04-24T03:28:48.696Z
CVE-2026-41323
8.1 (3.1)
Kyverno: ServiceAccount token leaked to external serve… kyverno
 kyverno
 2026-04-24T03:21:36.265Z 2026-04-24T03:21:36.265Z
CVE-2026-41319
6.5 (3.1)
MailKit has STARTTLS Response Injection via unflushed … jstedfast
 MailKit
 2026-04-24T03:07:24.335Z 2026-04-24T03:07:24.335Z
CVE-2026-41318
5.4 (3.1)
AnythingLLM vulnerable to stored DOM XSS in chart capt… Mintplex-Labs
 anything-llm
 2026-04-24T02:57:16.193Z 2026-04-24T02:57:16.193Z
CVE-2026-41068
7.7 (3.1)
Kyverno: Cross-Namespace Read Bypasses RBAC Isolation … kyverno
 kyverno
 2026-04-24T03:14:27.640Z 2026-04-24T03:14:27.640Z
CVE-2026-2028
5.3 (3.1)
Maxi Blocks <= 2.1.8 - Missing Authorization to Authen… ckp267
 MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites
 2026-04-24T03:27:06.728Z 2026-04-24T03:27:06.728Z
CVE-2026-41317
6.6 (4.0)
Frappe Press has an unsafe HTTP method / CSRF-adjacent… frappe
 press
 2026-04-24T02:40:16.528Z 2026-04-24T02:40:16.528Z
ID Description Published Updated
fkie_cve-2026-6272 A client holding only a read JWT scope can still register itself as a signal provider through the p… 2026-04-24T09:16:04.227 2026-04-24T09:16:04.227
fkie_cve-2026-21728 Tempo queries with large limits can cause large memory allocations which can impact the availabilit… 2026-04-24T09:16:03.710 2026-04-24T09:16:03.710
fkie_cve-2026-6349 The  iSherlock developed by HGiga  has an OS Command Injection vulnerability, allowing unauthentica… 2026-04-16T03:16:30.660 2026-04-24T08:16:30.537
fkie_cve-2026-4078 The ITERAS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode… 2026-04-24T08:16:30.373 2026-04-24T08:16:30.373
fkie_cve-2026-3569 The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions … 2026-04-24T08:16:30.217 2026-04-24T08:16:30.217
fkie_cve-2026-3565 The Taqnix plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, … 2026-04-24T08:16:30.073 2026-04-24T08:16:30.073
fkie_cve-2026-31283 In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the … 2026-04-13T15:17:33.220 2026-04-24T08:16:29.853
fkie_cve-2026-1875 Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F … 2026-03-03T07:16:10.277 2026-04-24T08:16:29.703
fkie_cve-2026-1874 Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSE… 2026-03-03T07:16:10.067 2026-04-24T08:16:29.453
fkie_cve-2025-11762 The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to S… 2026-04-24T08:16:29.000 2026-04-24T08:16:29.000
fkie_cve-2026-1952 Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability. 2026-04-24T07:16:09.627 2026-04-24T07:16:09.627
fkie_cve-2026-1951 Delta Electronics AS320T has no checking of the length of the buffer with the directory name vuln… 2026-04-24T07:16:09.520 2026-04-24T07:16:09.520
fkie_cve-2026-1950 Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability. 2026-04-24T07:16:08.523 2026-04-24T07:16:08.523
fkie_cve-2026-6810 The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Refe… 2026-04-24T06:16:08.790 2026-04-24T06:16:08.790
fkie_cve-2026-5428 The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via im… 2026-04-24T06:16:08.643 2026-04-24T06:16:08.643
fkie_cve-2026-5364 The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary fi… 2026-04-24T06:16:08.480 2026-04-24T06:16:08.480
fkie_cve-2026-5347 The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to … 2026-04-24T06:16:04.913 2026-04-24T06:16:04.913
fkie_cve-2026-1949 Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT r… 2026-04-24T06:16:03.883 2026-04-24T06:16:03.883
fkie_cve-2026-6947 DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, a… 2026-04-24T04:16:23.170 2026-04-24T04:16:23.170
fkie_cve-2026-6393 The BetterDocs plugin for WordPress is vulnerable to Missing Authorization in versions up to and in… 2026-04-24T04:16:22.607 2026-04-24T04:16:22.607
fkie_cve-2026-5488 The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to M… 2026-04-24T04:16:22.200 2026-04-24T04:16:22.200
fkie_cve-2026-41485 Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions … 2026-04-24T04:16:21.317 2026-04-24T04:16:21.317
fkie_cve-2026-41430 Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplac… 2026-04-24T04:16:21.000 2026-04-24T04:16:21.000
fkie_cve-2026-41324 basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial of service… 2026-04-24T04:16:20.767 2026-04-24T04:16:20.767
fkie_cve-2026-41323 Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions … 2026-04-24T04:16:20.593 2026-04-24T04:16:20.593
fkie_cve-2026-41319 MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Inject… 2026-04-24T04:16:20.400 2026-04-24T04:16:20.400
fkie_cve-2026-41318 AnythingLLM is an application that turns pieces of content into context that any LLM can use as ref… 2026-04-24T04:16:20.193 2026-04-24T04:16:20.193
fkie_cve-2026-41068 Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-… 2026-04-24T04:16:19.950 2026-04-24T04:16:19.950
fkie_cve-2026-2028 The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to i… 2026-04-24T04:16:09.360 2026-04-24T04:16:09.360
fkie_cve-2026-41317 Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplac… 2026-04-24T03:16:12.113 2026-04-24T03:16:12.113
ID Severity Description Published Updated
ghsa-x2pj-x7hv-qm35
5.3 (3.1)
The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions … 2026-04-24T09:30:30Z 2026-04-24T09:30:30Z
ghsa-rhxq-26gm-p3gp
4.3 (3.1)
The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to S… 2026-04-24T09:30:30Z 2026-04-24T09:30:30Z
ghsa-rfwp-57wg-5x36
6.4 (3.1)
The ITERAS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode… 2026-04-24T09:30:30Z 2026-04-24T09:30:30Z
ghsa-p4r4-xvrq-gvmc
7.5 (3.1)
Tempo queries with large limits can cause large memory allocations which can impact the availabilit… 2026-04-24T09:30:30Z 2026-04-24T09:30:30Z
ghsa-g4r7-2w2r-848v
4.3 (3.1)
The Taqnix plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, … 2026-04-24T09:30:30Z 2026-04-24T09:30:30Z
ghsa-66v8-c34p-jmrm
8.5 (4.0)
A client holding only a read JWT scope can still register itself as a signal provider through the p… 2026-04-24T09:30:30Z 2026-04-24T09:30:30Z
ghsa-wv29-5pf5-8fp6
9.8 (3.1)
Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability. 2026-04-24T09:30:29Z 2026-04-24T09:30:29Z
ghsa-hx2j-xhcm-gv72
9.8 (3.1)
10.0 (4.0)
The  iSherlock developed by HGiga  has an OS Command Injection vulnerability, allowing unauthentica… 2026-04-16T03:31:06Z 2026-04-24T09:30:29Z
ghsa-cc2v-9v42-3c8q
9.8 (3.1)
Delta Electronics AS320T has no checking of the length of the buffer with the directory name vuln… 2026-04-24T09:30:29Z 2026-04-24T09:30:29Z
ghsa-598w-79v9-4m2g
9.8 (3.1)
Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability. 2026-04-24T09:30:29Z 2026-04-24T09:30:29Z
ghsa-qfjv-r2q6-x287
5.3 (3.1)
The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Refe… 2026-04-24T06:31:17Z 2026-04-24T06:31:17Z
ghsa-j7j4-xj8f-m78g
7.5 (3.1)
8.7 (4.0)
DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, a… 2026-04-24T06:31:17Z 2026-04-24T06:31:17Z
ghsa-hpvr-gqf8-j82g
4.3 (3.1)
The BetterDocs plugin for WordPress is vulnerable to Missing Authorization in versions up to and in… 2026-04-24T06:31:17Z 2026-04-24T06:31:17Z
ghsa-f4r3-xfjm-5x8p
6.4 (3.1)
The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via im… 2026-04-24T06:31:17Z 2026-04-24T06:31:17Z
ghsa-9rv5-7gpw-9g55
9.8 (3.1)
Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT r… 2026-04-24T06:31:17Z 2026-04-24T06:31:17Z
ghsa-8q7x-g4f6-63gp
8.1 (3.1)
The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary fi… 2026-04-24T06:31:17Z 2026-04-24T06:31:17Z
ghsa-7cw2-vvg5-h9pj
5.3 (3.1)
The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to … 2026-04-24T06:31:17Z 2026-04-24T06:31:17Z
ghsa-36m8-qf73-626j
5.3 (3.1)
The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to M… 2026-04-24T06:31:17Z 2026-04-24T06:31:17Z
ghsa-xqqc-58qj-9w8r
5.3 (3.1)
The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to i… 2026-04-24T06:31:16Z 2026-04-24T06:31:16Z
ghsa-wwc3-c577-533m
5.4 (3.1)
2.3 (4.0)
OpenClaw before 2026.3.31 fails to terminate active WebSocket sessions when rotating device tokens.… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-w5qr-q983-45ww
3.3 (3.1)
2.0 (4.0)
OpenClaw before 2026.3.31 contains an environment variable leakage vulnerability in SSH-based sandb… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-vx53-3hhq-vppx
7.5 (3.1)
8.7 (4.0)
A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deplo… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-v3p7-858r-pr8m
6.7 (3.1)
5.4 (4.0)
OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bin… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-qf4m-p7c4-p4m7
9.8 (3.1)
9.3 (4.0)
A vulnerability in  SenseLive X3050’s web management interface allows unauthorized access to cert… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-mf69-r24q-ghhr
5.3 (3.1)
6.3 (4.0)
OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead … 2026-04-24T00:31:51Z 2026-04-24T00:31:52Z
ghsa-m958-864j-xq5w
5.3 (3.1)
6.3 (4.0)
OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature han… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-m563-373q-885c
7.3 (3.1)
5.4 (4.0)
OpenShell before 2026.3.28 contains an arbitrary code execution vulnerability in mirror mode that c… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-jh49-rh44-24pq
4.9 (3.1)
6.9 (4.0)
A vulnerability in the browser-based remote management interface may allow an administrator to acce… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-j5pw-86cx-29xv
9.8 (3.1)
9.3 (4.0)
A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ghsa-hjc2-p4mc-rcpr
5.4 (3.1)
6.9 (4.0)
A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifet… 2026-04-24T00:31:52Z 2026-04-24T00:31:52Z
ID Severity Description Package Published Updated
pysec-2024-85
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-04-23T07:43:20.598639Z
pysec-2024-84
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-04-23T07:43:20.526718Z
pysec-2024-83
7.5 (3.1)
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsD… mindsdb 2024-09-12T13:15:00Z 2026-04-23T07:43:20.456202Z
pysec-2024-82
8.8 (3.1)
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB… mindsdb 2024-09-12T13:15:00Z 2026-04-23T07:43:20.386659Z
pysec-2023-278
5.3 (3.1)
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.1… mindsdb 2023-12-11T21:15:00Z 2026-04-23T07:43:20.300009Z
pysec-2026-3
After an API token exposure from an exploited Trivy dependency, two new releases of `teln… telnyx 2026-03-27T14:53:14Z
pysec-2026-2
After an API Token exposure from an exploited Trivy dependency, two new releases of `lite… litellm 2026-03-24T15:35:32Z
pysec-2023-121
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as a… zstd 2023-03-31T20:15:00+00:00 2026-02-25T19:20:58+00:00
pysec-2026-1
A PyPI user account compromised by an attacker and was able to upload a malicious version… dydx-v4-client 2026-01-28T21:09:02+00:00
pysec-2025-52
gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation. mlflow 2025-06-23T15:15:29Z 2025-12-05T13:25:55.146081Z
pysec-2020-220
A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage coll… ansible 2020-10-05T14:15:00Z 2025-10-31T04:43:53.616247Z
pysec-2025-72
The `num2words` project was compromised via a phishing attack and two new versions were u… num2words 2025-07-31T14:34:47+00:00
pysec-2025-71
Cadwyn creates production-ready community-driven modern Stripe-like API versioning in Fas… cadwyn 2025-07-21T21:15:25+00:00 2025-07-23T15:24:03.825615+00:00
pysec-2025-70
10.0 (3.1)
A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit componen… langchain-community 2025-06-23T21:15:25+00:00 2025-07-16T21:23:40.211079+00:00
pysec-2024-259
9.8 (3.1)
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by m… torch 2024-10-29T21:15:04+00:00 2025-07-16T03:09:57.748865+00:00
pysec-2024-258
In scrapy/scrapy, an issue was identified where the Authorization header is not removed d… scrapy 2024-05-20T08:15:08+00:00 2025-07-15T17:37:50.051730+00:00
pysec-2025-69
In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker tem… roundup 2025-07-13T20:15:25+00:00 2025-07-13T21:23:01.161315+00:00
pysec-2025-68
8.0 (3.1)
A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6… upsonic 2025-06-19T21:15:27+00:00 2025-07-08T19:22:27.449399+00:00
pysec-2025-67
9.8 (3.1)
A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerabil… upsonic 2025-06-19T21:15:27+00:00 2025-07-08T19:22:27.385619+00:00
pysec-2025-66
Improper privilege management in a REST interface allowed registered users to access unau… streampipes 2025-03-03T11:15:11+00:00 2025-07-08T15:23:46.628375+00:00
pysec-2025-65
A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0… llama-index 2025-07-07T13:15:28+00:00 2025-07-07T15:23:42.730681+00:00
pysec-2025-61
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap … pillow 2025-07-01T19:15:27Z 2025-07-07T14:12:46.226030Z
pysec-2025-64
9.8 (3.1)
A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0… python-a2a 2025-06-17T07:15:18+00:00 2025-07-02T21:23:13.806273+00:00
pysec-2025-63
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Whe… vllm 2025-03-19T16:15:32+00:00 2025-07-01T23:22:49.176005+00:00
pysec-2025-62
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Mal… vllm 2025-02-07T20:15:34+00:00 2025-07-01T23:22:49.083695+00:00
pysec-2025-60
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Inform… apache-iotdb 2025-05-14T11:16:28+00:00 2025-07-01T21:22:47.232036+00:00
pysec-2025-59
Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attack… apache-iotdb 2025-05-14T11:15:47+00:00 2025-07-01T21:22:47.177405+00:00
pysec-2024-257
7.5 (3.1)
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessm… mobsf 2024-03-22T23:15:07+00:00 2025-06-30T15:23:50.085549+00:00
pysec-2025-58
8.8 (3.1)
vLLM is a library for LLM inference and serving. vllm/model_executor/weight_utils.py impl… vllm 2025-01-27T18:15:41+00:00 2025-06-27T21:22:36.583615+00:00
pysec-2025-57
A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthent… zenml 2025-03-20T10:15:48+00:00 2025-06-27T17:22:55.175431+00:00
ID Description Updated
gsd-2024-33903 In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pede… 2024-04-29T05:02:07.295775Z
gsd-2024-33902 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.486429Z
gsd-2024-33901 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.525896Z
gsd-2024-33900 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.290639Z
gsd-2024-33899 RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the scr… 2024-04-29T05:02:07.400574Z
gsd-2024-33898 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.287632Z
gsd-2024-33897 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.283756Z
gsd-2024-33896 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.313250Z
gsd-2024-33895 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.493081Z
gsd-2024-33894 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.488420Z
gsd-2024-33893 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.381761Z
gsd-2024-33892 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.378170Z
gsd-2024-33891 Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via th… 2024-04-29T05:02:07.412035Z
gsd-2024-33890 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.344384Z
gsd-2024-33889 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.392587Z
gsd-2024-33888 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.468423Z
gsd-2024-33887 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.503613Z
gsd-2024-33886 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.287167Z
gsd-2024-33885 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.441746Z
gsd-2024-33884 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:07.534455Z
gsd-2024-33883 The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certa… 2024-04-29T05:02:07.271727Z
gsd-2024-4303 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:05.716348Z
gsd-2024-4302 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:05.603637Z
gsd-2024-4301 The format of the source doesn't require a description, click on the link for more details. 2024-04-29T05:02:05.678292Z
gsd-2024-4300 E-WEBInformationCo. FS-EZViewer(Web) exposes sensitive information in the service. A remo… 2024-04-29T05:02:05.715239Z
gsd-2024-4299 The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSheroc… 2024-04-29T05:02:05.606402Z
gsd-2024-4298 The email search interface of HGiga iSherlock (including MailSherlock, SpamSherock, Audit… 2024-04-29T05:02:05.598531Z
gsd-2024-4297 The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlo… 2024-04-29T05:02:05.700888Z
gsd-2024-4296 The account management interface of HGiga iSherlock (including MailSherlock, SpamSherlock… 2024-04-29T05:02:05.621428Z
gsd-2024-33882 The format of the source doesn't require a description, click on the link for more details. 2024-04-28T05:02:07.803998Z
ID Description Published Updated
mal-2026-3018 Malicious code in microsoft-employee-experience (npm) 2026-04-23T16:11:04Z 2026-04-24T06:47:56Z
mal-2026-3029 Malicious code in eth-logger (npm) 2026-04-23T07:27:12Z 2026-04-24T06:47:54Z
mal-2026-3016 Malicious code in amazon-q-developer-streaming-client (npm) 2026-04-23T13:15:52Z 2026-04-24T06:47:53Z
mal-2026-3028 Malicious code in amplitude-ma-ts (npm) 2026-04-24T05:40:43Z 2026-04-24T05:40:43Z
mal-2026-2901 Malicious code in env_express (npm) 2026-04-15T22:05:03Z 2026-04-24T05:18:59Z
mal-2026-1320 Malicious code in chain-promised-await (npm) 2026-03-10T08:24:44Z 2026-04-24T05:18:59Z
mal-2026-3017 Malicious code in react-spa-npm (npm) 2026-04-23T14:35:43Z 2026-04-24T03:25:11Z
mal-2026-2931 Malicious code in react-spa-shadcn (npm) 2026-04-19T18:36:09Z 2026-04-24T03:25:11Z
mal-2026-3025 Malicious code in next-rwa (npm) 2026-04-24T03:19:37Z 2026-04-24T03:19:38Z
mal-2026-3024 Malicious code in auth0-ui-components-docs (npm) 2026-04-24T03:19:37Z 2026-04-24T03:19:38Z
mal-2026-3027 Malicious code in wrapped-logger-utils (npm) 2026-04-24T03:07:24Z 2026-04-24T03:07:24Z
mal-2026-3026 Malicious code in sagat-core (npm) 2026-04-24T02:39:04Z 2026-04-24T02:39:04Z
mal-2026-3014 Malicious code in vime-azl (npm) 2026-04-23T03:56:24Z 2026-04-23T20:50:52Z
mal-2026-3013 Malicious code in undicy-http (npm) 2026-04-23T03:59:27Z 2026-04-23T20:50:52Z
mal-2026-3012 Malicious code in ts-moduler (npm) 2026-04-23T03:49:53Z 2026-04-23T20:50:52Z
mal-2026-3011 Malicious code in ts-bing (npm) 2026-04-23T03:56:24Z 2026-04-23T20:50:52Z
mal-2026-3010 Malicious code in separadordeinfocc (npm) 2026-04-23T03:59:27Z 2026-04-23T20:50:52Z
mal-2026-3009 Malicious code in rollup-plugin-polyfill-route (npm) 2026-04-23T03:54:10Z 2026-04-23T20:50:52Z
mal-2026-2996 Malicious code in sparkling-sdk (npm) 2026-04-22T14:49:27Z 2026-04-23T20:50:52Z
mal-2026-2979 Malicious code in tsdoc-build-rig (npm) 2026-04-22T05:55:56Z 2026-04-23T20:50:52Z
mal-2026-2977 Malicious code in ts-utils-dev (npm) 2026-04-22T01:49:52Z 2026-04-23T20:50:52Z
mal-2026-2950 Malicious code in tailwind-text-fill (npm) 2026-04-20T13:39:53Z 2026-04-23T20:50:52Z
mal-2026-2944 Malicious code in turbo-leven (npm) 2026-04-20T06:15:42Z 2026-04-23T20:50:52Z
mal-2026-2943 Malicious code in turbo-he (npm) 2026-04-20T06:15:42Z 2026-04-23T20:50:52Z
mal-2026-2932 Malicious code in sy-editor-v3 (npm) 2026-04-19T08:46:05Z 2026-04-23T20:50:52Z
mal-2026-2913 Malicious code in vite-plugin-compress-plus (npm) 2026-04-16T01:34:06Z 2026-04-23T20:50:52Z
mal-2026-2912 Malicious code in trgrip (npm) 2026-04-15T23:43:20Z 2026-04-23T20:50:52Z
mal-2026-2911 Malicious code in terminal-formatter (npm) 2026-04-16T00:44:26Z 2026-04-23T20:50:52Z
mal-2026-2910 Malicious code in tailwindthml-flips (npm) 2026-04-15T23:43:20Z 2026-04-23T20:50:52Z
mal-2026-2909 Malicious code in tailwind-typography-cssstyle (npm) 2026-04-15T23:43:20Z 2026-04-23T20:50:52Z
ID Description Published Updated
7paa020125 Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 communication stack 2026-04-13T00:30:00.000Z 2026-04-13T00:30:00.000Z
7paa017341 PostgreSQL vulnerabilities in ABB Ability™ Symphony® Plus Engineering 2026-04-13T00:30:00.000Z 2026-04-13T00:30:00.000Z
7paa023732 System 800xA affected by 3rd party component vulnerabilities 2026-03-31T00:30:00.000Z 2026-03-31T00:30:00.000Z
4hzm000604 ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (SQLite 3.2.4) 2026-03-26T00:30:00.000Z 2026-03-26T00:30:00.000Z
4jno000329 AWIN Gateways Vulnerabilities in Embedded Webserver 2026-03-13T00:30:00.000Z 2026-03-13T00:30:00.000Z
3adr011536 AC500 V3 Stack buffer overflow in Cryptographic Message Syntax 2026-03-12T00:30:00.000Z 2026-03-12T00:30:00.000Z
3adr011525 ABB Automation Builder Gateway for Windows with insecure defaults 2026-02-24T00:30:00.000Z 2026-02-24T00:30:00.000Z
3adr011524 AC500 V3 Multiple vulnerabilities 2026-02-24T00:30:00.000Z 2026-02-24T00:30:00.000Z
sa25p007 B&R Automation Studio Update of SQLite version 2026-02-18T00:30:00.000Z 2026-02-18T00:30:00.000Z
sa26p001 ​​PVI​ ​​Insertion of Sensitive Information into Logfile 2026-01-29T00:30:00.000Z 2026-01-29T00:30:00.000Z
sa24p003 ​B&R PCs vulnerable to PixieFail attack​ 2026-01-29T00:30:00.000Z 2026-01-29T00:30:00.000Z
7paa013309 System 800xA SECURITY Advisory - ABB 800xA Base 6.0.x, 6.1.x CSLib communication DoS vulnerability 2024-06-05T00:30:00.000Z 2026-01-23T00:30:00.000Z
sa25p005 B&R Automation Runtime Improper Handling of Flooding conditions on ANSL Server 2026-01-19T00:30:00.000Z 2026-01-19T00:30:00.000Z
sa25p004 Automation Studio Insufficient Server Certificate Validation 2026-01-19T00:30:00.000Z 2026-01-19T00:30:00.000Z
9akk108472a1331 ABB Ability™ OPTIMAX® Authentication Bypass in Single-Sign On with Azure Active Directory 2026-01-16T00:30:00.000Z 2026-01-16T00:30:00.000Z
2crt000009 WebPro SNMP Card PowerValue Multiple Vulnerabilities 2026-01-07T00:30:00.000Z 2026-01-07T00:30:00.000Z
9akk108471a8107 Terra AC wallbox Heap Memory Corruption Vulnerability 2025-09-16T00:30:00.000Z 2025-11-28T08:00:00.000Z
4hzm000603 ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (VLC) 2025-11-27T00:30:00.000Z 2025-11-28T00:30:00.000Z
7paa022088 Edgenius Management Portal Authentication Bypass 2025-11-20T00:30:00.000Z 2025-11-20T00:30:00.000Z
2nga002813 PCM600 SharpZip library vulnerability 2025-11-03T00:30:00.000Z 2025-11-03T00:30:00.000Z
4tz00000006007 ALS-mini-S4/S8 IP Missing Authentication Vulnerability and its Mitigations 2025-10-20T00:30:00.000Z 2025-10-23T00:30:00.000Z
9akk108471a8948 Terra AC wallbox Heap Memory Corruption Vulnerability 2025-10-20T00:30:00.000Z 2025-10-21T00:30:00.000Z
3kxg200000r4801 CoreSense™ HM and CoreSense™ M10 File Path Traversal Vulnerability 2025-04-16T00:30:00.000Z 2025-10-20T00:30:00.000Z
sa25p003 B&R Automation Runtime Vulnerabilities in System Diagnostic Manager (SDM) 2025-10-07T00:30:00.000Z 2025-10-14T00:30:00.000Z
4tz00000006008 LVS MConfig Insecure memory handling 2025-10-08T00:30:00.000Z 2025-10-08T00:30:00.000Z
sa25p002 B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM) 2025-10-07T00:30:00.000Z 2025-10-07T00:30:00.000Z
9akk108471a7808 EIBPORT Reflected XSS 2025-10-07T00:30:00.000Z 2025-10-07T00:30:00.000Z
9akk108471a7121 FLXeon Controllers Multiple vulnerabilities 2025-09-09T00:30:00.000Z 2025-09-18T00:30:00.000Z
9akk108471a4462 ELSB/BLBA ASPECT advisory several CVEs 2025-08-11T00:30:00.000Z 2025-09-04T00:30:00.000Z
9akk108471a3623 RMC - 100 Vulnerabilities in web UI (REST Interface) 2025-07-03T00:30:00.000Z 2025-08-18T00:30:00.000Z
ID Description Published Updated
wid-sec-w-2026-1227 OpenClaw: Mehrere Schwachstellen 2026-04-21T22:00:00.000+00:00 2026-04-23T22:00:00.000+00:00
wid-sec-w-2026-0980 OpenClaw: Mehrere Schwachstellen 2026-04-06T22:00:00.000+00:00 2026-04-23T22:00:00.000+00:00
wid-sec-w-2026-0948 OpenClaw: Mehrere Schwachstellen 2026-03-31T22:00:00.000+00:00 2026-04-23T22:00:00.000+00:00
wid-sec-w-2026-0930 OpenClaw: Mehrere Schwachstellen 2026-03-30T22:00:00.000+00:00 2026-04-23T22:00:00.000+00:00
wid-sec-w-2025-2142 Cisco ASA, FTD, IOS, IOS XE, IOS XR: Mehrere Schwachstellen 2025-09-25T22:00:00.000+00:00 2026-04-23T22:00:00.000+00:00
wid-sec-w-2026-1233 PackageKit: Schwachstelle ermöglicht Privilegieneskalation 2026-04-21T22:00:00.000+00:00 2026-04-22T22:00:00.000+00:00
wid-sec-w-2026-1145 Flowise: Mehrere Schwachstellen 2026-04-15T22:00:00.000+00:00 2026-04-21T22:00:00.000+00:00
wid-sec-w-2026-1084 BigBlueButton: Mehrere Schwachstellen 2026-04-13T22:00:00.000+00:00 2026-04-21T22:00:00.000+00:00
wid-sec-w-2026-1081 MinIO: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-04-13T22:00:00.000+00:00 2026-04-21T22:00:00.000+00:00
wid-sec-w-2026-1161 OpenClaw: Mehrere Schwachstellen 2026-04-16T22:00:00.000+00:00 2026-04-20T22:00:00.000+00:00
wid-sec-w-2026-1118 Dell PowerProtect Data Domain OS: Mehrere Schwachstellen 2026-04-14T22:00:00.000+00:00 2026-04-19T22:00:00.000+00:00
wid-sec-w-2026-1144 GIMP: Mehrere Schwachstellen 2026-04-15T22:00:00.000+00:00 2026-04-16T22:00:00.000+00:00
wid-sec-w-2026-0991 Apache ActiveMQ, Client, Broker und Web: Mehrere Schwachstellen 2026-04-07T22:00:00.000+00:00 2026-04-15T22:00:00.000+00:00
wid-sec-w-2026-0915 Kyocera Drucker: Mehrere Schwachstellen 2026-03-30T22:00:00.000+00:00 2026-04-15T22:00:00.000+00:00
wid-sec-w-2026-1054 Apache log4net: Schwachstelle ermöglicht Manipulation von Dateien 2026-04-12T22:00:00.000+00:00 2026-04-14T22:00:00.000+00:00
wid-sec-w-2026-0950 Linux Kernel: Mehrere Schwachstellen 2026-03-31T22:00:00.000+00:00 2026-04-14T22:00:00.000+00:00
wid-sec-w-2026-1068 Adobe Acrobat und Acrobat Reader: Mehrere Schwachstellen 2020-08-11T22:00:00.000+00:00 2026-04-13T22:00:00.000+00:00
wid-sec-w-2025-2564 Microsoft Windows und Windows Server: Mehrere Schwachstellen 2025-11-11T23:00:00.000+00:00 2026-04-13T22:00:00.000+00:00
wid-sec-w-2023-2890 Microsoft Windows: Mehrere Schwachstellen 2023-11-14T23:00:00.000+00:00 2026-04-13T22:00:00.000+00:00
wid-sec-w-2023-0368 Microsoft Exchange: Mehrere Schwachstellen ermöglichen Codeausführung 2023-02-14T23:00:00.000+00:00 2026-04-13T22:00:00.000+00:00
wid-sec-w-2026-1047 Adobe Acrobat Reader: Schwachstelle ermöglicht Offenlegung von Informationen und Codeausführung 2026-04-09T22:00:00.000+00:00 2026-04-12T22:00:00.000+00:00
wid-sec-w-2026-0884 OpenClaw: Mehrere Schwachstellen 2026-03-26T23:00:00.000+00:00 2026-04-12T22:00:00.000+00:00
wid-sec-w-2026-0856 OpenClaw: Mehrere Schwachstellen 2026-03-24T23:00:00.000+00:00 2026-04-12T22:00:00.000+00:00
wid-sec-w-2026-0542 OpenClaw: Mehrere Schwachstellen 2026-02-25T23:00:00.000+00:00 2026-04-12T22:00:00.000+00:00
wid-sec-w-2026-0472 OpenClaw: Mehrere Schwachstellen 2026-02-22T23:00:00.000+00:00 2026-04-12T22:00:00.000+00:00
wid-sec-w-2026-1036 OpenCTI: Schwachstelle ermöglicht Codeausführung 2026-04-08T22:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-1027 LangChain: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-04-08T22:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-1023 libpng: Schwachstelle ermöglicht Offenlegung von Informationen 2026-04-08T22:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-1022 Juniper Patchday April 2026: Mehrere Schwachstellen 2026-04-08T22:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-1020 Intel Prozessoren (Pentium Silver Series, Celeron J Series, und Celeron N series): Schwachstelle ermöglicht Privilegieneskalation 2026-04-08T22:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
ID Description Published Updated
icsa-26-113-06 Intrado 911 Emergency Gateway (EGW) 2026-04-23T06:00:00.000000Z 2026-04-23T06:00:00.000000Z
icsa-26-113-05 Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera 2026-04-23T06:00:00.000000Z 2026-04-23T06:00:00.000000Z
icsa-26-113-04 SpiceJet Online Booking System 2026-04-23T06:00:00.000000Z 2026-04-23T06:00:00.000000Z
icsa-26-113-03 Milesight Cameras 2026-04-23T06:00:00.000000Z 2026-04-23T06:00:00.000000Z
icsa-26-113-02 Carlson Software VASCO-B GNSS Receiver 2026-04-23T06:00:00.000000Z 2026-04-23T06:00:00.000000Z
icsa-26-113-01 Yadea T5 Electric Bicycle 2026-04-23T06:00:00.000000Z 2026-04-23T06:00:00.000000Z
icsa-25-114-01 Schneider Electric Modicon Controllers (Update A) 2019-05-14T16:48:40.000000Z 2026-04-23T06:00:00.000000Z
icsa-26-111-12 SenseLive X3050 2026-04-21T06:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-11 Siemens Industrial Edge Management 2026-04-14T00:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-10 Silex Technology SD-330AC and AMC Manager 2026-04-21T06:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-09 Siemens SINEC NMS 2026-04-14T00:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-08 Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC) 2026-04-14T00:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-07 Siemens SCALANCE 2026-04-14T00:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-06 Zero Motorcycles Firmware 2026-04-21T06:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-04 Siemens Analytics Toolkit 2026-04-14T00:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-03 Siemens SINEC NMS 2026-04-14T00:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-02 Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary 2026-04-14T00:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-01 Siemens TPM 2.0 2026-04-14T00:00:00.000000Z 2026-04-21T06:00:00.000000Z
icsa-26-111-05 Hardy Barth Salia EV Charge Controller 2026-04-21T05:00:00.000000Z 2026-04-21T05:00:00.000000Z
icsa-26-106-04 AVEVA Pipeline Simulation 2026-04-16T06:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-26-106-03 Anviz Multiple Products 2026-04-16T06:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-26-106-02 Horner Automation Cscape and XL4, XL7 PLC 2026-04-16T06:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-26-106-01 Delta Electronics ASDA-Soft 2026-04-16T06:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-26-085-02 OC Messaging and Custom Messaging Gateway 2026-03-26T06:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-26-043-01 Siemens SINEC NMS 2026-02-10T00:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-26-015-07 Siemens RUGGEDCOM APE1808 Devices 2026-01-13T00:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-25-259-05 Siemens OpenSSL Vulnerability in Industrial Products 2022-02-08T00:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-25-226-18 Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER 2025-08-12T00:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-25-135-15 Siemens Mendix OIDC SSO 2025-05-13T00:00:00.000000Z 2026-04-16T06:00:00.000000Z
icsa-25-072-11 Siemens SIMATIC IPC Family, ITP1000, and Field PGs 2025-03-11T00:00:00.000000Z 2026-04-16T06:00:00.000000Z
ID Description Published Updated
cisco-sa-asaftd-persist-cisaed25-03 Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 2026-04-23T15:00:00+00:00 2026-04-23T15:00:00+00:00
cisco-sa-cimc-xss-a2tkgvab Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities 2026-04-01T16:00:00+00:00 2026-04-22T18:05:52+00:00
cisco-sa-cimc-cmd-inj-3hkn3bvt Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities 2026-04-01T16:00:00+00:00 2026-04-22T18:01:40+00:00
cisco-sa-sdwan-authbp-qwcx8d4v Cisco Catalyst SD-WAN Vulnerabilities 2026-02-25T16:00:00+00:00 2026-04-22T15:10:56+00:00
cisco-sa-webex-cui-cert-8jszyhwl Cisco Webex Services Certificate Validation Vulnerability 2026-04-15T16:00:00+00:00 2026-04-16T18:52:15+00:00
cisco-sa-wsa-auth-bypass-6yzktqhd Cisco Secure Web Appliance Authentication Bypass Vulnerability 2026-04-15T16:00:00+00:00 2026-04-16T13:14:04+00:00
cisco-sa-webexcc-xss-wex5nuna Cisco Webex Contact Center Cross-Site Scripting Vulnerability 2026-04-15T16:00:00+00:00 2026-04-15T16:00:00+00:00
cisco-sa-unity-vulns-n2ejsbbw Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities 2026-04-15T16:00:00+00:00 2026-04-15T16:00:00+00:00
cisco-sa-unity-file-download-rmkevwpx Cisco Unity Connection Arbitrary File Download Vulnerabilities 2026-04-15T16:00:00+00:00 2026-04-15T16:00:00+00:00
cisco-sa-te-agentfilewrite-tquw3smu Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability 2026-04-15T16:00:00+00:00 2026-04-15T16:00:00+00:00
cisco-sa-isexss-bs8cte7u Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities 2026-04-15T16:00:00+00:00 2026-04-15T16:00:00+00:00
cisco-sa-ise-rce-traversal-8byndvrz Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities 2026-04-15T16:00:00+00:00 2026-04-15T16:00:00+00:00
cisco-sa-ise-rce-4fverepv Cisco Identity Services Engine Remote Code Execution Vulnerabilities 2026-04-15T16:00:00+00:00 2026-04-15T16:00:00+00:00
cisco-sa-ise-cmd-inj-5wsjcyjb Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability 2026-04-15T16:00:00+00:00 2026-04-15T16:00:00+00:00
cisco-sa-iosxe-mntc-dos-lzweqcyq Cisco IOS XE Software Denial of Service Vulnerability 2026-03-25T16:00:00+00:00 2026-04-02T19:43:54+00:00
cisco-sa-ssm-cli-execution-chucwunr Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability 2026-04-01T16:00:00+00:00 2026-04-01T16:00:00+00:00
cisco-sa-ndi-afw-rjurc5dz Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability 2026-04-01T16:00:00+00:00 2026-04-01T16:00:00+00:00
cisco-sa-nd-ssrf-naen4o7r Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability 2026-04-01T16:00:00+00:00 2026-04-01T16:00:00+00:00
cisco-sa-nd-cbid-5yqkoshu Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerability 2026-04-01T16:00:00+00:00 2026-04-01T16:00:00+00:00
cisco-sa-epnm-improp-auth-muwfwuu3 Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability 2026-04-01T16:00:00+00:00 2026-04-01T16:00:00+00:00
cisco-sa-cssm-priv-esc-xranouo8 Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability 2026-04-01T16:00:00+00:00 2026-04-01T16:00:00+00:00
cisco-sa-cimc-auth-bypass-agg2bxtn Cisco Integrated Management Controller Authentication Bypass Vulnerability 2026-04-01T16:00:00+00:00 2026-04-01T16:00:00+00:00
cisco-sa-ndfc-cmdinj-uvyzrkfr Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability 2024-10-02T16:00:00+00:00 2026-03-31T18:47:53+00:00
cisco-sa-xe-secureboot-bypass-b6uyxysz Cisco IOS XE Software for Cisco Catalyst and Rugged Series Switches Secure Boot Bypass Vulnerability 2026-03-25T16:00:00+00:00 2026-03-25T16:00:00+00:00
cisco-sa-wlc-dos-hnx5kgom Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family CAPWAP Denial of Service Vulnerability 2026-03-25T16:00:00+00:00 2026-03-25T16:00:00+00:00
cisco-sa-vmanage-xss-zqkhp9w9 Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability 2026-03-25T16:00:00+00:00 2026-03-25T16:00:00+00:00
cisco-sa-scp-dos-duadxtcg Cisco IOS XE Software Secure Copy Protocol Server Denial of Service Vulnerability 2026-03-25T16:00:00+00:00 2026-03-25T16:00:00+00:00
cisco-sa-iox-xss-lpgkzwtj Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability 2026-03-25T16:00:00+00:00 2026-03-25T16:00:00+00:00
cisco-sa-iox-crlf-nvgktkjz Cisco IOx Application Hosting Environment Carriage Return Line Feed Injection Vulnerability 2026-03-25T16:00:00+00:00 2026-03-25T16:00:00+00:00
cisco-sa-iosxe_infodis-6j847ueb Cisco IOS XE Software Secure Channel for Meraki Information Disclosure Vulnerability 2026-03-25T16:00:00+00:00 2026-03-25T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-5958 Race Condition in GNU Sed 2026-04-02T00:00:00.000Z 2026-04-24T01:41:30.000Z
msrc_cve-2026-5187 Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL 2026-04-02T00:00:00.000Z 2026-04-24T01:39:57.000Z
msrc_cve-2026-31521 module: Fix kernel panic when a symbol st_shndx is out of bounds 2026-04-02T00:00:00.000Z 2026-04-24T01:39:42.000Z
msrc_cve-2026-31493 RDMA/efa: Fix use of completion ctx after free 2026-04-02T00:00:00.000Z 2026-04-24T01:39:36.000Z
msrc_cve-2026-31473 media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex 2026-04-02T00:00:00.000Z 2026-04-24T01:39:31.000Z
msrc_cve-2026-31450 ext4: publish jinode after initialization 2026-04-02T00:00:00.000Z 2026-04-24T01:39:25.000Z
msrc_cve-2026-31494 net: macb: use the current queue number for stats 2026-04-02T00:00:00.000Z 2026-04-24T01:39:20.000Z
msrc_cve-2026-31525 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN 2026-04-02T00:00:00.000Z 2026-04-24T01:39:07.000Z
msrc_cve-2026-31453 xfs: avoid dereferencing log items after push callbacks 2026-04-02T00:00:00.000Z 2026-04-24T01:39:01.000Z
msrc_cve-2026-31480 tracing: Fix potential deadlock in cpu hotplug with osnoise 2026-04-02T00:00:00.000Z 2026-04-24T01:38:50.000Z
msrc_cve-2026-31528 perf: Make sure to use pmu_ctx->pmu for groups 2026-04-02T00:00:00.000Z 2026-04-24T01:38:45.000Z
msrc_cve-2026-31530 cxl/port: Fix use after free of parent_port in cxl_detach_ep() 2026-04-02T00:00:00.000Z 2026-04-24T01:38:39.000Z
msrc_cve-2026-31478 ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() 2026-04-02T00:00:00.000Z 2026-04-24T01:38:26.000Z
msrc_cve-2026-31500 Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock 2026-04-02T00:00:00.000Z 2026-04-24T01:38:12.000Z
msrc_cve-2026-31507 net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer 2026-04-02T00:00:00.000Z 2026-04-24T01:38:04.000Z
msrc_cve-2026-31448 ext4: avoid infinite loops caused by residual data 2026-04-02T00:00:00.000Z 2026-04-24T01:37:59.000Z
msrc_cve-2026-31483 s390/syscalls: Add spectre boundary for syscall dispatch table 2026-04-02T00:00:00.000Z 2026-04-24T01:37:53.000Z
msrc_cve-2026-41988 CVE-2026-41988 2026-04-02T00:00:00.000Z 2026-04-24T01:05:17.000Z
msrc_cve-2026-41989 CVE-2026-41989 2026-04-02T00:00:00.000Z 2026-04-24T01:05:11.000Z
msrc_cve-2026-31531 ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() 2026-04-02T00:00:00.000Z 2026-04-24T01:05:05.000Z
msrc_cve-2026-31532 can: raw: fix ro->uniq use-after-free in raw_rcv() 2026-04-02T00:00:00.000Z 2026-04-24T01:04:59.000Z
msrc_cve-2026-40706 CVE-2026-40706 2026-04-02T00:00:00.000Z 2026-04-24T01:04:53.000Z
msrc_cve-2026-35240 CVE-2026-35240 2026-04-02T00:00:00.000Z 2026-04-24T01:04:48.000Z
msrc_cve-2026-35239 CVE-2026-35239 2026-04-02T00:00:00.000Z 2026-04-24T01:04:43.000Z
msrc_cve-2026-35238 CVE-2026-35238 2026-04-02T00:00:00.000Z 2026-04-24T01:04:38.000Z
msrc_cve-2026-35237 CVE-2026-35237 2026-04-02T00:00:00.000Z 2026-04-24T01:04:33.000Z
msrc_cve-2026-35236 CVE-2026-35236 2026-04-02T00:00:00.000Z 2026-04-24T01:04:28.000Z
msrc_cve-2026-34308 CVE-2026-34308 2026-04-02T00:00:00.000Z 2026-04-24T01:04:23.000Z
msrc_cve-2026-34304 CVE-2026-34304 2026-04-02T00:00:00.000Z 2026-04-24T01:04:18.000Z
msrc_cve-2026-34303 CVE-2026-34303 2026-04-02T00:00:00.000Z 2026-04-24T01:04:12.000Z
ID Description Published Updated
ncsc-2026-0128 Kwetsbaarheden verholpen in GitLab EE en CE 2026-04-23T11:21:11.080481Z 2026-04-23T11:21:11.080481Z
ncsc-2026-0127 Kwetsbaarheden verholpen in Oracle PeopleSoft 2026-04-22T14:10:36.199130Z 2026-04-22T14:10:36.199130Z
ncsc-2026-0126 Kwetsbaarheden verholpen in Oracle E-Business Suite 2026-04-22T12:56:26.266249Z 2026-04-22T12:56:26.266249Z
ncsc-2026-0125 Kwetsbaarheden verholpen in Oracle Enterprise Manager 2026-04-22T12:46:17.624971Z 2026-04-22T12:46:17.624971Z
ncsc-2026-0124 Kwetsbaarheden verholpen in Oracle Identity Manager Connector 2026-04-22T11:33:45.816246Z 2026-04-22T11:33:45.816246Z
ncsc-2026-0123 Kwetsbaarheid verholpen in ASP.NET Core van Microsoft 2026-04-22T09:40:27.334869Z 2026-04-22T09:40:27.334869Z
ncsc-2026-0122 Kwetsbaarheid verholpen in Cisco Webex Services 2026-04-17T08:37:31.398143Z 2026-04-17T08:37:31.398143Z
ncsc-2026-0121 Kwetsbaarheden verholpen in Fortinet FortiSandbox 2026-04-15T12:23:16.801183Z 2026-04-15T12:23:16.801183Z
ncsc-2026-0120 Kwetsbaarheden verholpen in Fortinet FortiAnalyzer en FortiManager 2026-04-15T12:20:38.675602Z 2026-04-15T12:20:38.675602Z
ncsc-2026-0115 Kwetsbaarheid verholpen in Microsoft Defender 2026-04-14T19:19:48.691858Z 2026-04-15T08:54:16.881135Z
ncsc-2026-0119 Kwetsbaarheden verholpen in Microsoft Windows 2026-04-15T08:53:38.926894Z 2026-04-15T08:53:38.926894Z
ncsc-2026-0118 Kwetsbaarheden verholpen in Microsoft SQL Server 2026-04-14T19:24:22.610160Z 2026-04-14T19:24:22.610160Z
ncsc-2026-0117 Kwetsbaarheden verholpen in Microsoft Azure 2026-04-14T19:23:30.733725Z 2026-04-14T19:23:30.733725Z
ncsc-2026-0116 Kwetsbaarheden verholpen in Microsoft Office 2026-04-14T19:20:56.343558Z 2026-04-14T19:20:56.343558Z
ncsc-2026-0114 Kwetsbaarheden verholpen in Microsoft Developer tools 2026-04-14T19:18:58.666745Z 2026-04-14T19:18:58.666745Z
ncsc-2026-0113 Kwetsbaarheden verholpen in SAP-producten 2026-04-14T12:55:40.388960Z 2026-04-14T12:55:40.388960Z
ncsc-2026-0112 Kwetsbaarheden verholpen in Siemens producten 2026-04-14T11:37:21.682429Z 2026-04-14T11:37:21.682429Z
ncsc-2026-0111 Kwetsbaarheid verholpen in Adobe Acrobat 2026-04-12T08:42:18.844193Z 2026-04-13T09:38:04.129352Z
ncsc-2026-0110 Kwetsbaarheid verholpen in Cisco Smart Software Manager On-Prem 2026-04-10T14:28:58.703642Z 2026-04-10T14:28:58.703642Z
ncsc-2026-0007 Kwetsbaarheden verholpen in Microsoft Windows 2026-01-13T19:16:30.720079Z 2026-04-10T12:53:42.521564Z
ncsc-2026-0109 Kwetsbaarheden verholpen in Synology SSL VPN Client 2026-04-10T12:11:00.859799Z 2026-04-10T12:11:00.859799Z
ncsc-2026-0108 Kwetsbaarheid verholpen in Juniper Networks Junos OS Evolved 2026-04-10T12:06:13.479822Z 2026-04-10T12:06:13.479822Z
ncsc-2026-0107 Kwetsbaarheid verholpen in FortiClient EMS van Fortinet 2026-04-04T13:49:19.002116Z 2026-04-04T13:49:19.002116Z
ncsc-2026-0106 Kwetsbaarheden verholpen in Cisco Integrated Management Controller 2026-04-03T10:34:46.145536Z 2026-04-03T10:34:46.145536Z
ncsc-2026-0105 Kwetsbaarheden verholpen in Cisco Nexus Dashboard en Nexus Dashboard Insights 2026-04-03T08:20:48.187725Z 2026-04-03T08:20:48.187725Z
ncsc-2026-0047 Kwetsbaarheid verholpen in Fortinet FortiClient EMS 2026-02-09T10:16:18.048622Z 2026-03-30T11:36:22.656910Z
ncsc-2025-0319 Kwetsbaarheden verholpen in F5 Networks BIG-IP, F5OS en NGINX App Protect WAF 2025-10-15T15:21:14.871532Z 2026-03-27T18:09:03.259108Z
ncsc-2026-0104 Kwetsbaarheden verholpen in Cisco IOS XE Software 2026-03-26T09:50:03.269095Z 2026-03-26T09:50:03.269095Z
ncsc-2026-0103 Kwetsbaarheden verholpen in GitLab 2026-03-26T09:48:10.874427Z 2026-03-26T09:48:10.874427Z
ncsc-2026-0102 Kwetsbaarheden verholpen in Apple macOS 2026-03-25T14:15:56.073353Z 2026-03-25T14:15:56.073353Z
ID Description Published Updated
nn-2026:2-01 Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 2026-04-15T11:00:00.000Z 2026-04-15T11:00:00.000Z
nn-2026:1-01 Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 2026-04-15T11:00:00.000Z 2026-04-15T11:00:00.000Z
nn-2025:18-01 Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0 2026-03-04T11:00:00.000Z 2026-03-04T11:00:00.000Z
nn-2025:17-01 HTML injection in Sensor Map in CMC before 25.6.0 2026-03-04T11:00:00.000Z 2026-03-04T11:00:00.000Z
nn-2025:16-01 HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0 2026-03-04T11:00:00.000Z 2026-03-04T11:00:00.000Z
nn-2025:15-01 Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 2025-12-18T11:00:00.000Z 2025-12-18T11:00:00.000Z
nn-2025:14-01 HTML injection in Asset List in Guardian/CMC before 25.5.0 2025-12-18T11:00:00.000Z 2025-12-18T11:00:00.000Z
nn-2025:13-01 Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0 2025-12-18T11:00:00.000Z 2025-12-18T11:00:00.000Z
nn-2025:12-01 HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0 2025-12-18T11:00:00.000Z 2025-12-18T11:00:00.000Z
nn-2025:11-01 Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0 2025-11-25T11:00:00.000Z 2025-11-26T11:00:00.000Z
nn-2025:9-01 Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:8-01 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:7-01 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:6-01 Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:5-01 Incorrect authorization for CLI in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:4-01 Client-side path traversal in Guardian/CMC before 25.2.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:10-01 Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0 2025-10-07T11:00:00.000Z 2025-10-07T11:00:00.000Z
nn-2025:3-01 Incorrect authorization for traces request/download in CMC before 25.1.0 2025-08-26T11:00:00.000Z 2025-08-26T11:00:00.000Z
nn-2025:2-01 Privilege escalation in Guardian/CMC before 24.6.0 2025-06-10T11:00:00.000Z 2025-06-10T11:00:00.000Z
nn-2025:1-01 Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 2025-06-10T11:00:00.000Z 2025-06-10T11:00:00.000Z
nn-2023_17-01 Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1 2024-04-10T11:00:00.000Z 2024-04-11T11:00:00.000Z
nn-2023:17-01 Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1 2024-04-10T11:00:00.000Z 2024-04-11T11:00:00.000Z
nn-2024_1-01 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1 2024-04-10T11:00:00.000Z 2024-04-10T11:00:00.000Z
nn-2024:1-01 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1 2024-04-10T11:00:00.000Z 2024-04-10T11:00:00.000Z
nn-2023_12-01 Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0 2024-01-15T11:00:00.000Z 2024-01-16T11:00:00.000Z
nn-2023:12-01 Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0 2024-01-15T11:00:00.000Z 2024-01-16T11:00:00.000Z
nn-2023_9-01 Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0 2023-09-18T11:00:00.000Z 2023-11-16T11:00:00.000Z
nn-2023_8-01 Session Fixation in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2023-11-16T11:00:00.000Z
nn-2023_7-01 DoS via SAML configuration in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2023-11-16T11:00:00.000Z
nn-2023_6-01 Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2 2023-08-09T11:00:00.000Z 2023-11-16T11:00:00.000Z
ID Description Published Updated
opensuse-su-2026:10604-1 ruby4.0-rubygem-rack-session-2.1.2-1.1 on GA media 2026-04-22T00:00:00Z 2026-04-22T00:00:00Z
opensuse-su-2026:10603-1 jupyter-nbconvert-7.17.1-1.1 on GA media 2026-04-22T00:00:00Z 2026-04-22T00:00:00Z
opensuse-su-2026:10602-1 glances-common-4.5.4-1.1 on GA media 2026-04-22T00:00:00Z 2026-04-22T00:00:00Z
opensuse-su-2026:10601-1 grafana-11.6.14+security01-1.1 on GA media 2026-04-22T00:00:00Z 2026-04-22T00:00:00Z
opensuse-su-2026:10600-1 csync2-2.0+git.1600444747.83b3644-3.1 on GA media 2026-04-22T00:00:00Z 2026-04-22T00:00:00Z
opensuse-su-2026:10599-1 cacti-1.2.30+git306.82d5aef5-1.1 on GA media 2026-04-22T00:00:00Z 2026-04-22T00:00:00Z
opensuse-su-2026:20595-1 Security update for tomcat11 2026-04-21T11:43:18Z 2026-04-21T11:43:18Z
opensuse-su-2026:20593-1 Security update for libpng16 2026-04-21T09:59:18Z 2026-04-21T09:59:18Z
opensuse-su-2026:20591-1 Security update for GraphicsMagick 2026-04-21T09:49:40Z 2026-04-21T09:49:40Z
opensuse-su-2026:20592-1 Security update for ghostscript 2026-04-21T09:49:39Z 2026-04-21T09:49:39Z
opensuse-su-2026:20598-1 Security update for python-PyPDF2 2026-04-21T09:43:19Z 2026-04-21T09:43:19Z
opensuse-su-2026:20590-1 Security update for gnome-remote-desktop 2026-04-21T09:37:03Z 2026-04-21T09:37:03Z
opensuse-su-2026:10584-1 rclone-1.73.5-1.1 on GA media 2026-04-20T00:00:00Z 2026-04-20T00:00:00Z
opensuse-su-2026:10583-1 python311-pypdf-6.10.2-1.1 on GA media 2026-04-20T00:00:00Z 2026-04-20T00:00:00Z
opensuse-su-2026:10582-1 python311-PyPDF2-2.11.1-9.1 on GA media 2026-04-20T00:00:00Z 2026-04-20T00:00:00Z
opensuse-su-2026:10581-1 haproxy-3.3.6+git91.af5637e93-1.1 on GA media 2026-04-20T00:00:00Z 2026-04-20T00:00:00Z
opensuse-su-2026:10578-1 tempo-cli-2.10.4-1.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10577-1 skopeo-1.22.1-1.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10576-1 python311-jwcrypto-1.5.7-2.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10575-1 python311-Pillow-12.2.0-2.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10574-1 jetty-annotations-9.4.58-4.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10573-1 cpp-httplib-devel-0.42.0-1.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10572-1 chromedriver-147.0.7727.101-1.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10571-1 bouncycastle-1.84-1.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10570-1 aardvark-dns-1.17.1-1.1 on GA media 2026-04-18T00:00:00Z 2026-04-18T00:00:00Z
opensuse-su-2026:10567-1 python311-Django-5.2.13-1.1 on GA media 2026-04-16T00:00:00Z 2026-04-16T00:00:00Z
opensuse-su-2026:10566-1 liblog4cxx-devel-1.7.0-2.1 on GA media 2026-04-16T00:00:00Z 2026-04-16T00:00:00Z
opensuse-su-2026:10565-1 libraw-devel-0.22.1-1.1 on GA media 2026-04-16T00:00:00Z 2026-04-16T00:00:00Z
opensuse-su-2026:10564-1 libpng16-16-1.6.57-1.1 on GA media 2026-04-16T00:00:00Z 2026-04-16T00:00:00Z
opensuse-su-2026:10563-1 leancrypto-devel-1.7.2-1.1 on GA media 2026-04-16T00:00:00Z 2026-04-16T00:00:00Z
ID Description Published Updated
oxdc-adv-2026-0001 OX Dovecot Security Advisory OXDC-ADV-2026-0001 2026-03-27T00:00:00+00:00 2026-03-27T00:00:00+00:00
oxdc-adv-2025-0001 OX Dovecot Pro Security Advisory OXDC-ADV-2025-0001 2025-10-31T00:00:00+00:00 2025-11-27T00:00:00+00:00
oxas-adv-2025-0003 OX App Suite Security Advisory OXAS-ADV-2025-0003 2025-09-24T00:00:00+02:00 2025-11-27T00:00:00+00:00
oxas-adv-2025-0002 OX App Suite Security Advisory OXAS-ADV-2025-0002 2025-08-12T00:00:00+02:00 2025-10-31T00:00:00+00:00
oxas-adv-2025-0001 OX App Suite Security Advisory OXAS-ADV-2025-0001 2025-01-27T00:00:00+01:00 2025-04-07T00:00:00+00:00
oxdc-adv-2024-0003 OX Dovecot Pro Security Advisory OXDC-ADV-2024-0003 2024-09-10T00:00:00+02:00 2024-09-10T00:00:00+00:00
oxdc-adv-2024-0002 OX Dovecot Pro Security Advisory OXDC-ADV-2024-0002 2024-09-10T00:00:00+02:00 2024-09-10T00:00:00+00:00
oxas-adv-2024-0005 OX App Suite Security Advisory OXAS-ADV-2024-0005 2024-07-08T00:00:00+02:00 2024-09-09T00:00:00+00:00
oxdc-adv-2024-0001 OX Dovecot Pro Security Advisory OXDC-ADV-2024-0001 2024-09-02T00:00:00+02:00 2024-09-06T00:00:00+00:00
oxas-adv-2024-0004 OX App Suite Security Advisory OXAS-ADV-2024-0004 2024-06-13T00:00:00+02:00 2024-08-19T00:00:00+00:00
oxas-adv-2024-0003 OX App Suite Security Advisory OXAS-ADV-2024-0003 2024-04-24T00:00:00+02:00 2024-08-19T00:00:00+00:00
oxas-adv-2024-0002 OX App Suite Security Advisory OXAS-ADV-2024-0002 2024-03-06T00:00:00+01:00 2024-05-06T00:00:00+00:00
oxas-adv-2024-0001 OX App Suite Security Advisory OXAS-ADV-2024-0001 2024-02-08T00:00:00+01:00 2024-04-25T00:00:00+00:00
oxas-adv-2023-0007 OX App Suite Security Advisory OXAS-ADV-2023-0007 2023-12-11T00:00:00+01:00 2024-02-16T00:00:00+00:00
oxas-adv-2023-0006 OX App Suite Security Advisory OXAS-ADV-2023-0006 2023-09-25T00:00:00+02:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0005 OX App Suite Security Advisory OXAS-ADV-2023-0005 2023-09-19T00:00:00+02:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0004 OX App Suite Security Advisory OXAS-ADV-2023-0004 2023-08-01T00:00:00+02:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0003 OX App Suite Security Advisory OXAS-ADV-2023-0003 2023-05-02T00:00:00+02:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0002 OX App Suite Security Advisory OXAS-ADV-2023-0002 2023-03-20T00:00:00+01:00 2024-01-22T00:00:00+00:00
oxas-adv-2023-0001 OX App Suite Security Advisory OXAS-ADV-2023-0001 2023-02-06T00:00:00+01:00 2024-01-22T00:00:00+00:00
oxas-adv-2022-0002 OX App Suite Security Advisory OXAS-ADV-2022-0002 2022-11-02T00:00:00+01:00 2024-01-22T00:00:00+00:00
oxas-adv-2022-0001 OX App Suite Security Advisory OXAS-ADV-2022-0001 2022-08-10T00:00:00+02:00 2024-01-22T00:00:00+00:00
ID Description Published Updated
rhsa-2026:9832 Red Hat Security Advisory: Insights proxy Container Image 2026-04-22T17:32:43+00:00 2026-04-23T06:09:34+00:00
rhsa-2026:9874 Red Hat Security Advisory: nodejs:20 security update 2026-04-22T21:54:54+00:00 2026-04-23T06:09:32+00:00
rhsa-2026:9872 Red Hat Security Advisory: DevWorkspace Operator 0.40.1 release. 2026-04-22T21:03:38+00:00 2026-04-23T06:09:32+00:00
rhsa-2026:9745 Red Hat Security Advisory: python3 security update 2026-04-22T15:41:14+00:00 2026-04-23T06:09:32+00:00
rhsa-2026:9742 Red Hat Security Advisory: Red Hat Developer Hub 1.8.6 release. 2026-04-22T14:56:38+00:00 2026-04-23T06:09:32+00:00
rhsa-2026:9732 Red Hat Security Advisory: openssh security update 2026-04-22T15:08:16+00:00 2026-04-23T06:09:31+00:00
rhsa-2026:9711 Red Hat Security Advisory: nodejs:20 security update 2026-04-22T14:07:14+00:00 2026-04-23T06:09:31+00:00
rhsa-2026:9705 Red Hat Security Advisory: python3.11 security update 2026-04-22T14:06:14+00:00 2026-04-23T06:09:31+00:00
rhsa-2026:9108 Red Hat Security Advisory: gvisor-tap-vsock security update 2026-04-20T19:56:47+00:00 2026-04-23T06:09:31+00:00
rhsa-2026:9695 Red Hat Security Advisory: rhc security update 2026-04-22T11:44:28+00:00 2026-04-23T06:09:30+00:00
rhsa-2026:9621 Red Hat Security Advisory: python3 security update 2026-04-22T07:12:32+00:00 2026-04-23T06:09:30+00:00
rhsa-2026:9614 Red Hat Security Advisory: python security update 2026-04-22T07:09:02+00:00 2026-04-23T06:09:30+00:00
rhsa-2026:9592 Red Hat Security Advisory: libarchive security update 2026-04-22T06:02:52+00:00 2026-04-23T06:09:30+00:00
rhsa-2026:9591 Red Hat Security Advisory: python3.11 security update 2026-04-22T06:09:17+00:00 2026-04-23T06:09:30+00:00
rhsa-2026:9461 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.2 2026-04-21T17:38:07+00:00 2026-04-23T06:09:29+00:00
rhsa-2026:9453 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.4 2026-04-21T17:29:36+00:00 2026-04-23T06:09:29+00:00
rhsa-2026:9448 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.7 2026-04-21T17:23:46+00:00 2026-04-23T06:09:29+00:00
rhsa-2026:9440 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.10 2026-04-21T17:12:20+00:00 2026-04-23T06:09:29+00:00
rhsa-2026:9439 Red Hat Security Advisory: git-lfs security update 2026-04-21T17:53:20+00:00 2026-04-23T06:09:29+00:00
rhsa-2026:9436 Red Hat Security Advisory: git-lfs security update 2026-04-21T17:09:01+00:00 2026-04-23T06:09:28+00:00
rhsa-2026:9435 Red Hat Security Advisory: git-lfs security update 2026-04-21T17:12:00+00:00 2026-04-23T06:09:28+00:00
rhsa-2026:9434 Red Hat Security Advisory: git-lfs security update 2026-04-21T17:19:55+00:00 2026-04-23T06:09:28+00:00
rhsa-2026:9415 Red Hat Security Advisory: openssh security update 2026-04-21T17:19:55+00:00 2026-04-23T06:09:28+00:00
rhsa-2026:9387 Red Hat Security Advisory: python3 security update 2026-04-21T15:37:50+00:00 2026-04-23T06:09:27+00:00
rhsa-2026:9386 Red Hat Security Advisory: python3 security update 2026-04-21T16:29:40+00:00 2026-04-23T06:09:27+00:00
rhsa-2026:9385 Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release 2026-04-21T15:08:38+00:00 2026-04-23T06:09:27+00:00
rhsa-2026:9354 Red Hat Security Advisory: python3.9 security update 2026-04-21T15:36:00+00:00 2026-04-23T06:09:27+00:00
rhsa-2026:9289 Red Hat Security Advisory: python3 security update 2026-04-21T14:31:25+00:00 2026-04-23T06:09:27+00:00
rhsa-2026:9262 Red Hat Security Advisory: python3.9 security update 2026-04-21T12:05:49+00:00 2026-04-23T06:09:26+00:00
rhsa-2026:9261 Red Hat Security Advisory: python3.9 security update 2026-04-21T11:42:29+00:00 2026-04-23T06:09:26+00:00
ID Description Published Updated
sevd-2026-104-03 Use of Hard-coded Credentials vulnerability on Easergy MiCOM Px40 Series 2026-04-14T07:00:00.000Z 2026-04-14T07:00:00.000Z
sevd-2026-104-02 Third-Party vulnerability on Modicon Networking Managed Switches 2026-04-14T07:00:00.000Z 2026-04-14T07:00:00.000Z
sevd-2026-104-01 Multiple Vulnerabilities on PowerChute™ Serial Shutdown 2026-04-14T07:00:00.000Z 2026-04-14T07:00:00.000Z
sevd-2025-224-05 Modicon M340 Controller and Communication Modules 2025-08-12T04:00:00.000Z 2026-04-14T07:00:00.000Z
sevd-2025-014-05 Web Server on Modicon M340, Modbus/TCP Ethernet Modicon M340 module, Modbus/TCP Ethernet Modicon M340 FactoryCast module and Ethernet / Serial RTU communication modules 2025-01-14T00:00:00.000Z 2026-04-14T07:00:00.000Z
sevd-2024-317-02 Modicon Controllers M340 / Momentum / MC80 & EcoStruxure™ Control Expert 2024-11-12T00:00:00.000Z 2026-04-14T07:00:00.000Z
sevd-2024-163-01 Modicon M340, Modbus/TCP Ethernet Modicon M340 module, and Modbus/TCP Ethernet Modicon M340 FactoryCast module 2024-06-11T00:00:00.000Z 2026-04-14T07:00:00.000Z
sevd-2024-044-01 EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon M340, M580 and M580 Safety PLCs 2024-02-13T12:41:43.000Z 2026-04-14T07:00:00.000Z
sevd-2023-010-06 EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon M340, M580 and M580 CPU Safety 2023-01-10T00:00:00.000Z 2026-04-14T07:00:00.000Z
sevd-2019-134-11 Multiple Vulnerabilities in Modicon Controller Products 2019-05-14T16:48:40.000Z 2026-04-14T07:00:00.000Z
sevd-2026-069-02 Improper Neutralization vulnerability in Multiple Products 2026-03-10T07:00:00.000Z 2026-03-31T07:00:00.000Z
sevd-2026-069-01 Improper Resource Shutdown or Release vulnerability in Multiple Products 2026-03-10T07:00:00.000Z 2026-03-31T07:00:00.000Z
sevd-2026-069-03 Deserialization of Untrusted Data vulnerability on EcoStruxure™ Foxboro DCS 2026-03-10T07:00:00.000Z 2026-03-13T07:00:00.000Z
sevd-2026-069-06 Deserialization of Untrusted Data vulnerability on Multiple Products 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-069-05 Use of Hard-coded Credentials vulnerability in EcoStruxure™ IT Data Center Expert 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-069-04 Improper Control of Generation of Code ('Code Injection') vulnerability on EcoStruxure™ Automation Expert 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-013-04 Multiple Vulnerabilities on EcoStruxure Power Build Rapsody 2026-01-13T08:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-013-01 Multiple Third-Party Vulnerabilities on ProLeiT Plant iT/Brewmaxx 2026-01-13T08:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2025-014-07 FlexNet Publisher Vulnerability 2025-01-14T07:00:00.000Z 2026-03-10T07:00:00.000Z
sevd-2026-041-02 Multiple Vulnerabilities on EcoStruxure™ Building Operation Workstation and EcoStruxure™ Building Operation Webstation 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2026-041-01 Improper Check for Unusual or Exceptional Conditions on Multiple Products 2026-02-10T08:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2025-343-01 EcoStruxure™ Foxboro DCS 2025-12-09T08:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2025-189-03 EcoStruxure™ Power Operation 2025-07-08T04:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2025-042-02 Improper Input Validation Vulnerability in Uni-Telway Driver 2025-02-11T05:00:00.000Z 2026-02-10T08:00:00.000Z
sevd-2026-013-03 Multiple Vulnerabilities on Zigbee Products 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
sevd-2026-013-02 Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
sevd-2025-014-06 RemoteConnect and SCADAPack™ x70 Utilities 2025-01-14T00:00:00.000Z 2026-01-13T08:00:00.000Z
sevd-2024-317-03 Modicon Controllers M340 / Momentum / MC80 2024-11-12T05:00:00.000Z 2026-01-13T08:00:00.000Z
sevd-2025-343-02 EcoStruxure™ Foxboro DCS Advisor 2025-12-09T08:00:00.000Z 2025-12-09T08:00:00.000Z
sevd-2025-252-01 Multiple Altivar Process Drives and Communication Modules 2025-09-09T04:00:00.000Z 2025-12-09T08:00:00.000Z
ID Description Published Updated
sca-2026-0007 Sudo vulnerability affects Endress+Hauser MCS200HW 2026-04-21T13:00:00.000Z 2026-04-21T13:00:00.000Z
sca-2025-0003 FreeRTOS Vulnerabilities have no impact on SICK Products 2025-02-28T00:00:00.000Z 2026-04-17T11:00:00.000Z
sca-2026-0006 Vulnerabilities affecting SICK Lector85x and SICK Lector83x 2026-03-06T14:00:00.000Z 2026-03-06T14:00:00.000Z
sca-2026-0005 Vulnerabilities affecting SICK LMS1000 and SICK MRS1000 2026-02-27T14:00:00.000Z 2026-02-27T14:00:00.000Z
sca-2026-0004 Eclipse Cyclone DDS Vulnerabilities have no impact on SICK picoScan150 & SICK picoScan120 products 2026-02-13T14:00:00.000Z 2026-02-13T14:00:00.000Z
sca-2026-0003 Vulnerability affecting SICK nanoScan3 and microScan3 2026-01-26T14:00:00.000Z 2026-01-26T14:00:00.000Z
sca-2026-0002 Vulnerabilities affecting SICK Incoming Goods Suite 2026-01-15T14:00:00.000Z 2026-01-22T19:00:00.000Z
sca-2026-0001 Vulnerabilities affecting SICK TDC-X401GL 2026-01-15T14:00:00.000Z 2026-01-15T14:00:00.000Z
sca-2025-0013 Vulnerabilities affecting SICK TLOC100-100 2025-10-27T14:00:00.000Z 2025-11-11T14:00:00.000Z
sca-2025-0014 CodeMeter vulnerablity affects SICK CODE-LOC and SICK LIDAR-LOC 2025-11-03T11:00:00.000Z 2025-11-03T14:00:00.000Z
sca-2025-0012 Sudo vulnerability affects SICK SID products 2025-10-27T11:00:00.000Z 2025-10-27T14:00:00.000Z
sca-2025-0011 Vulnerabilities affecting Endress+Hauser SSG-E210GC 2025-10-02T13:00:00.000Z 2025-10-02T13:00:00.000Z
sca-2025-0010 Multiple vulnerabilities in SICK Enterprise Analytics and SICK Logistic Analytics Products 2025-10-02T13:00:00.000Z 2025-10-02T13:00:00.000Z
sca-2025-0009 Vulnerabilities affecting SICK TDC-E210GC 2025-08-01T13:00:00.000Z 2025-08-01T13:00:00.000Z
sca-2025-0008 Multiple vulnerabilities in Endress+Hauser MEAC300-FNADE4 2025-07-03T13:00:00.000Z 2025-07-03T13:00:00.000Z
sca-2025-0007 Multiple vulnerabilities in SICK Field Analytics and SICK Media Server 2025-06-12T13:00:00.000Z 2025-06-12T13:00:00.000Z
sca-2025-0006 Vulnerability affecting picoScan and multiScan 2025-04-28T13:00:00.000Z 2025-04-28T13:00:00.000Z
sca-2025-0005 Vulnerabilities in SICK Flexi Compact 2025-04-28T10:00:00.000Z 2025-04-28T10:00:00.000Z
sca-2025-0004 Critical vulnerabilities in SICK DL100-2xxxxxxx 2025-03-14T11:00:00.000Z 2025-03-14T11:00:00.000Z
sca-2025-0001 Multiple vulnerabilities in SICK MEAC300 2025-02-14T14:00:00.000Z 2025-02-21T14:00:00.000Z
sca-2025-0002 Vulnerability in SICK Lector8xx and SICK InspectorP8xx 2025-02-14T10:19:00.000Z 2025-02-14T10:19:00.000Z
sca-2024-0007 Vulnerability in SICK OLM 2024-12-31T00:00:00.000Z 2024-12-31T00:00:00.000Z
sca-2024-0006 Critical vulnerabilities in SICK InspectorP61x, InspectorP62x and TiM3xx 2024-12-06T00:00:00.000Z 2024-12-06T00:00:00.000Z
sca-2024-0005 Vulnerability in SICK Incoming Goods Suite 2024-11-19T00:00:00.000Z 2024-11-19T00:00:00.000Z
sca-2024-0004 Third party vulnerabilities in SICK CDE-100 2024-11-07T12:00:00.000Z 2024-11-07T12:00:00.000Z
sca-2024-0003 Critical vulnerability in multiple SICK products 2024-10-17T13:00:00.000Z 2024-10-17T13:00:00.000Z
sca-2024-0002 Vulnerability in SICK MSC800 2024-09-11T23:00:00.000Z 2024-09-11T23:00:00.000Z
sca-2024-0001 Vulnerability in SICK Logistics Analytics Products and SICK Field Analytics 2024-01-29T00:00:00.000Z 2024-01-29T00:00:00.000Z
sca-2023-0011 Vulnerability in multiple SICK Flexi Soft Gateways 2023-10-23T11:00:00.000Z 2023-10-23T11:00:00.000Z
SCA-2023-0011 Vulnerability in multiple SICK Flexi Soft Gateways 2023-10-23T11:00:00.000Z 2023-10-23T11:00:00.000Z
ID Description Published Updated
ssa-981622 SSA-981622: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit 2026-04-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-913875 SSA-913875: Frame Aggregation and Fragmentation Vulnerabilities in 802.11 2021-07-13T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-827968 SSA-827968: Vulnerability in Nozomi Guardian/CMC on RUGGEDCOM APE1808 Devices 2026-01-13T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-801704 SSA-801704: Authentication Bypass Vulnerability in SINEC NMS 2026-04-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-741509 SSA-741509: Privilege Escalation Vulnerability in RUGGEDCOM CROSSBOW Secure Access Manager Primary Before V5.8 2026-04-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-726834 SSA-726834: Denial of Service Vulnerability in the RADIUS Client of SIPROTEC 5 Devices 2023-03-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-726617 SSA-726617: Incorrect Privilege Assignment Vulnerability in Mendix OIDC SSO Module 2025-05-13T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-712929 SSA-712929: Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products 2022-06-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-710008 SSA-710008: Multiple Web Vulnerabilities in SCALANCE Products 2022-08-09T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-628843 SSA-628843: Out of Bound Read Vulnerability in TPM 2.0 2026-04-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-609469 SSA-609469: Authorization Bypass Vulnerability in Industrial Edge Management 2026-04-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-605717 SSA-605717: Authorization Bypass Vulnerability in SINEC NMS Before V4.0 SP3 2026-04-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-599968 SSA-599968: Denial of Service Vulnerability in Profinet Devices 2021-07-13T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-552702 SSA-552702: Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products 2022-10-11T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-408105 SSA-408105: Buffer Overflow Vulnerabilities in OpenSSL 3.0 Affecting Siemens Products 2022-12-13T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-311973 SSA-311973: Multiple Local Privilege Escalation Vulnerabilities in SINEC NMS and User Management Component (UMC) 2026-02-10T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-244969 SSA-244969: OpenSSL Vulnerability in Industrial Products 2022-02-08T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-225816 SSA-225816: Memory Corruption Vulnerability in RUGGEDCOM CROSSBOW Station Access Controller Before V5.8 2026-04-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-216014 SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs 2025-03-11T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-186293 SSA-186293: XML External Entity (XXE) Injection Vulnerability in SIMOTION SCOUT, SIMOTION SCOUT TIA and SINAMICS STARTER 2025-08-12T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-019200 SSA-019200: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11n Devices Before V6.6.0 2026-04-14T00:00:00.000Z 2026-04-14T00:00:00.000Z
ssa-246443 SSA-246443: Multiple Vulnerabilities in SICAM 8 Products 2026-03-26T00:00:00.000Z 2026-03-26T00:00:00.000Z
ssa-452276 SSA-452276: Eval Injection Vulnerability in SIMATIC S7-1500 2026-03-10T00:00:00.000Z 2026-03-19T00:00:00.000Z
ssa-975644 SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices 2026-03-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-903736 SSA-903736: Multiple vulnerabilities in SICAM SIAPP SDK before V2.1.7 2026-03-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-868571 SSA-868571: Missing Server Certificate Validation in IAM Client 2025-12-09T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-770770 SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices 2025-02-11T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-710408 SSA-710408: Missing Server Certificate Validation in Siemens Advanced Licensing (SALT) Toolkit 2025-12-09T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-535115 SSA-535115: Data Validation Vulnerability in NX Before V2512 2026-02-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ssa-513708 SSA-513708: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices 2025-06-10T00:00:00.000Z 2026-03-10T00:00:00.000Z
ID Description Published Updated
suse-su-2026:1577-1 Security update for openssl-1_1 2026-04-23T15:53:50Z 2026-04-23T15:53:50Z
suse-su-2026:1576-1 Security update for gdk-pixbuf 2026-04-23T15:53:31Z 2026-04-23T15:53:31Z
suse-su-2026:1575-1 Security update for the Linux Kernel 2026-04-23T15:53:10Z 2026-04-23T15:53:10Z
suse-su-2026:1574-1 Security update for the Linux Kernel 2026-04-23T15:52:59Z 2026-04-23T15:52:59Z
suse-su-2026:1573-1 Security update for the Linux Kernel 2026-04-23T15:52:40Z 2026-04-23T15:52:40Z
suse-su-2026:1572-1 Security update for tomcat 2026-04-23T15:52:25Z 2026-04-23T15:52:25Z
suse-su-2026:1571-1 Security update for ntfs-3g_ntfsprogs 2026-04-23T15:52:09Z 2026-04-23T15:52:09Z
suse-su-2026:1568-1 Security update for haproxy 2026-04-23T12:11:11Z 2026-04-23T12:11:11Z
suse-su-2026:1567-1 Security update for perl 2026-04-23T12:10:55Z 2026-04-23T12:10:55Z
suse-su-2026:1565-1 Security update for libssh 2026-04-23T07:08:38Z 2026-04-23T07:08:38Z
suse-su-2026:1563-1 Security update for the Linux Kernel 2026-04-23T07:08:02Z 2026-04-23T07:08:02Z
suse-su-2026:1562-1 Security update for openssl-1_1 2026-04-23T07:06:07Z 2026-04-23T07:06:07Z
suse-su-2026:1560-1 Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5) 2026-04-23T05:47:32Z 2026-04-23T05:47:32Z
suse-su-2026:1558-1 Security update for tomcat11 2026-04-22T16:24:40Z 2026-04-22T16:24:40Z
suse-su-2026:1557-1 Security update for the Linux Kernel 2026-04-22T16:24:13Z 2026-04-22T16:24:13Z
suse-su-2026:1556-1 Security update for libraw 2026-04-22T16:24:02Z 2026-04-22T16:24:02Z
suse-su-2026:1555-1 Security update for libraw 2026-04-22T16:23:16Z 2026-04-22T16:23:16Z
suse-su-2026:1550-1 Security update for openssl-1_1 2026-04-22T09:41:29Z 2026-04-22T09:41:29Z
suse-su-2026:1549-1 Security update for openssl-1_1 2026-04-22T09:40:58Z 2026-04-22T09:40:58Z
suse-su-2026:1548-1 Security update for kea 2026-04-22T09:40:51Z 2026-04-22T09:40:51Z
suse-su-2026:1541-1 Security update for flatpak 2026-04-22T07:22:36Z 2026-04-22T07:22:36Z
suse-su-2026:1540-1 Security update for podman 2026-04-22T07:22:18Z 2026-04-22T07:22:18Z
suse-su-2026:1539-1 Security update for gdk-pixbuf 2026-04-22T07:20:51Z 2026-04-22T07:20:51Z
suse-su-2026:1537-1 Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) 2026-04-21T23:07:10Z 2026-04-21T23:07:10Z
suse-su-2026:1535-1 Security update for the Linux Kernel (Live Patch 68 for SUSE Linux Enterprise 12 SP5) 2026-04-21T14:34:30Z 2026-04-21T14:34:30Z
suse-su-2026:1532-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) 2026-04-21T12:04:58Z 2026-04-21T12:04:58Z
suse-su-2026:1531-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6) 2026-04-21T12:04:49Z 2026-04-21T12:04:49Z
suse-su-2026:1530-1 Security update for python311 2026-04-21T11:04:58Z 2026-04-21T11:04:58Z
suse-su-2026:1527-1 Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6) 2026-04-21T10:04:36Z 2026-04-21T10:04:36Z
suse-su-2026:21239-1 Security update for libpng16 2026-04-21T10:01:03Z 2026-04-21T10:01:03Z
ID Description Published Updated
alsa-2026:9135 Important: kernel-rt security update 2026-04-20T00:00:00Z 2026-04-21T08:48:27Z
alsa-2026:9131 Important: kernel security update 2026-04-20T00:00:00Z 2026-04-21T08:45:35Z
alsa-2026:8945 Important: freerdp security update 2026-04-20T00:00:00Z 2026-04-20T12:43:14Z
alsa-2026:8468 Important: .NET 8.0 security update 2026-04-16T00:00:00Z 2026-04-20T08:45:13Z
alsa-2026:8473 Important: .NET 10.0 security update 2026-04-16T00:00:00Z 2026-04-20T08:43:11Z
alsa-2026:8475 Important: .NET 9.0 security update 2026-04-16T00:00:00Z 2026-04-20T08:40:30Z
alsa-2026:8534 Important: libarchive security update 2026-04-16T00:00:00Z 2026-04-20T08:36:26Z
alsa-2026:8840 Important: go-rpm-macros security update 2026-04-20T00:00:00Z 2026-04-20T08:35:06Z
alsa-2026:8841 Important: go-rpm-macros security update 2026-04-20T00:00:00Z 2026-04-20T08:33:18Z
alsa-2026:8842 Important: delve security update 2026-04-20T00:00:00Z 2026-04-20T08:31:59Z
alsa-2026:8888 Important: openexr security update 2026-04-20T00:00:00Z 2026-04-20T08:30:11Z
alsa-2026:8858 Important: giflib security update 2026-04-20T00:00:00Z 2026-04-20T08:28:56Z
alsa-2026:8457 Important: freerdp security update 2026-04-16T00:00:00Z 2026-04-17T12:08:37Z
alsa-2026:8459 Important: thunderbird security update 2026-04-16T00:00:00Z 2026-04-17T12:06:47Z
alsa-2026:8469 Important: .NET 8.0 security update 2026-04-16T00:00:00Z 2026-04-17T11:12:30Z
alsa-2026:8510 Important: libarchive security update 2026-04-16T00:00:00Z 2026-04-17T11:10:09Z
alsa-2026:8458 Important: freerdp security update 2026-04-16T00:00:00Z 2026-04-17T09:35:48Z
alsa-2026:8470 Important: .NET 8.0 security update 2026-04-16T00:00:00Z 2026-04-17T09:34:29Z
alsa-2026:8472 Important: .NET 9.0 security update 2026-04-16T00:00:00Z 2026-04-17T09:30:19Z
alsa-2026:8492 Important: libarchive security update 2026-04-16T00:00:00Z 2026-04-17T09:27:24Z
alsa-2026:8339 Important: nodejs:20 security update 2026-04-15T00:00:00Z 2026-04-16T10:12:34Z
alsa-2026:8093 Moderate: pcs security update 2026-04-14T00:00:00Z 2026-04-16T10:10:22Z
alsa-2026:8312 Important: bind security update 2026-04-15T00:00:00Z 2026-04-16T10:09:13Z
alsa-2026:8317 Important: squid:4 security update 2026-04-15T00:00:00Z 2026-04-16T10:06:56Z
alsa-2026:8352 Important: bind security update 2026-04-15T00:00:00Z 2026-04-16T10:03:27Z
alsa-2026:8052 Important: firefox security update 2026-04-14T00:00:00Z 2026-04-15T13:12:54Z
alsa-2026:8259 Important: vim security update 2026-04-15T00:00:00Z 2026-04-15T10:37:43Z
alsa-2026:8096 Moderate: perl:5.32 security update 2026-04-14T00:00:00Z 2026-04-15T10:32:31Z
alsa-2026:7915 Important: bind9.18 security update 2026-04-13T00:00:00Z 2026-04-15T08:47:47Z
alsa-2026:7123 Important: nodejs:22 security update 2026-04-08T00:00:00Z 2026-04-15T08:45:14Z
ID Description Published Updated
hsec-2026-0006 Cabal deletes project source files during configure 2026-04-08T14:23:27Z 2026-04-08T14:23:27Z
hsec-2026-0004 Hackage package metadata stored XSS vulnerability 2026-03-28T16:05:12Z 2026-03-28T16:05:12Z
hsec-2026-0002 Hackage CSRF vulnerability 2026-03-28T16:04:58Z 2026-03-28T16:04:58Z
hsec-2024-0004 Hackage package and doc upload stored XSS vulnerability 2026-01-16T11:18:20Z 2026-01-16T11:18:20Z
hsec-2025-0007 cmark-gfm: resource exhaustion due to quadratic complexity in parser 2025-12-27T08:58:56Z 2025-12-27T08:58:56Z
hsec-2025-0006 Private key leak via inherited file descriptor 2025-11-17T02:22:38Z 2025-11-17T02:22:38Z
hsec-2025-0005 cabal-install dependency confusion 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2025-0004 Broken Path Sanitization in spacecookie Library 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2025-0003 Use after free in multithreaded lzma (.xz) decoder 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2025-0002 Double Public Key Signing Function Oracle Attack on Ed25519 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2025-0001 Subword division operations may produce incorrect results 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0009 Public key confusion in third-party blocks 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0008 Sign extension error in the PPC64le FFI 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0007 Sign extension error in the AArch64 NCG 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0006 fromIntegral: conversion error 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0003 process: command injection via argument list on Windows 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0002 out-of-bounds write when there are many bzip2 selectors 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2024-0001 Reflected XSS vulnerability in keter 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0015 cabal-install uses expired key policies 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0014 Arbitrary file write is possible when using PDF output or --extract-media with untrusted input 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0013 git-annex plaintext storage of embedded credentials on encrypted remotes 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0012 git-annex checksum exposure to encrypted special remotes 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0011 git-annex GPG decryption attack via compromised remote 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0010 git-annex private data exfiltration to compromised remote 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0009 git-annex command injection via malicious SSH hostname 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0008 Stored XSS in hledger-web 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0007 readFloat: memory exhaustion with large exponent 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0006 x509-validation does not enforce pathLenConstraint 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0005 tls-extra: certificate validation does not check Basic Constraints 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
hsec-2023-0004 xml-conduit unbounded entity expansion 2025-11-14T14:45:34Z 2025-11-14T14:45:34Z
ID Description Published Updated
osec-2026-03 opam install sandbox escape 2026-04-15T22:00:00Z 2026-04-16T21:00:00Z
osec-2026-01 Buffer Over-Read in OCaml Marshal Deserialization 2026-02-17T13:30:00Z 2026-02-27T09:30:00Z
osec-2026-02 ARP unbounded memory usage 2026-02-18T10:30:00Z 2026-02-18T10:30:00Z
osec-2022-01 Infinite loop in console output on xen 2022-12-07T00:00:00Z 2026-02-18T09:30:00Z
osec-2025-01 Albatross console out of memory 2025-08-15T00:18:22Z 2026-01-13T12:00:00Z
osec-2019-02 Grant unshare vulnerability in mirage-xen 2019-04-26T00:00:00Z 2026-01-13T12:00:00Z
osec-2019-01 Memory disclosure in mirage-net-xen 2019-03-21T00:00:00Z 2026-01-13T12:00:00Z
osec-2016-02 Memory disclosure in mirage-net-xen 2016-05-03T00:00:00Z 2026-01-13T12:00:00Z
osec-2023-01 Time of check time of use issue in opam's cache 2023-05-25T12:00:00Z 2026-01-09T12:00:00Z
osec-2016-01 Buffer overflow and information leak in OCaml < 4.03.0 2016-04-29T00:18:22Z 2026-01-01T12:00:00Z
osec-2018-01 An integer overflow in the `bigarray` serialization module leads to arbitrary code execution 2018-04-06T18:29:00Z 2025-12-16T12:00:00Z
osec-2017-01 Local privilege escalation issue with ocaml binaries 2017-06-23T15:19:47Z 2025-12-16T12:00:00Z
ID Description Published Updated
osv-2025-266 Heap-buffer-overflow in lj_buf_ruleb128 2025-04-08T00:17:06.279554Z 2026-04-23T14:27:49.452133Z
osv-2025-1020 Heap-buffer-overflow in mmcall 2025-12-25T00:17:49.020029Z 2026-04-23T14:26:53.545771Z
osv-2023-606 Heap-buffer-overflow in ZSTD_decompressMultiFrame 2023-07-23T14:01:02.159160Z 2026-04-23T14:18:14.557259Z
osv-2023-1350 Heap-buffer-overflow in inflate 2023-12-23T00:12:38.562149Z 2026-04-23T14:15:02.045047Z
osv-2023-319 Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2 2023-04-16T14:01:58.406534Z 2026-04-23T14:14:55.887946Z
osv-2022-1165 Heap-buffer-overflow in parse_content_length 2022-11-12T13:00:05.964113Z 2026-04-23T14:13:17.790957Z
osv-2022-1134 Heap-buffer-overflow in ndlz8_decompress 2022-11-04T00:02:11.463429Z 2026-04-23T14:10:23.311160Z
osv-2025-312 Heap-buffer-overflow in ZSTD_decompressMultiFrame 2025-05-02T00:14:14.459388Z 2026-04-23T14:09:47.792625Z
osv-2021-1070 Heap-buffer-overflow in ZSTD_decompressBlock_internal 2021-07-29T00:01:10.187569Z 2026-04-23T14:09:44.517804Z
osv-2021-1672 Heap-buffer-overflow in blosc_d 2021-12-12T00:01:29.747137Z 2026-04-23T14:09:28.883683Z
osv-2023-390 Heap-buffer-overflow in sdhci_write 2023-05-12T14:00:08.854823Z 2026-04-22T14:35:41.637005Z
osv-2022-581 Heap-buffer-overflow in megasas_map_sgl 2022-07-14T00:00:45.644503Z 2026-04-22T14:35:33.317656Z
osv-2021-820 UNKNOWN READ in virtio_gpu_disable_scanout 2021-06-02T00:00:31.619765Z 2026-04-22T14:32:37.244679Z
osv-2024-914 UNKNOWN READ in boost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha 2024-08-16T00:08:20.277708Z 2026-04-22T14:19:19.643856Z
osv-2024-112 Stack-overflow in boost::read_graphviz_detail::parser::parse_subgraph 2024-02-16T00:05:47.896843Z 2026-04-22T14:15:49.542103Z
osv-2022-312 Heap-buffer-overflow in dhcp_reply 2022-04-07T00:00:40.457052Z 2026-04-22T14:08:42.726114Z
osv-2026-611 Heap-buffer-overflow in ParseOpaqueMetadata 2026-04-22T00:09:09.767586Z 2026-04-22T00:09:09.767978Z
osv-2026-610 Memcpy-param-overlap in htx_replace_blk_value 2026-04-22T00:07:53.902461Z 2026-04-22T00:07:53.902743Z
osv-2026-608 Stack-buffer-overflow in is_http 2026-04-22T00:04:16.715949Z 2026-04-22T00:04:16.716488Z
osv-2024-719 Heap-buffer-overflow in hevc_ref_pic_lists_modification 2024-08-07T00:05:22.699506Z 2026-04-21T14:21:22.256358Z
osv-2024-664 Heap-buffer-overflow in gf_dash_group_get_template 2024-07-18T00:13:55.576218Z 2026-04-21T14:20:24.483114Z
osv-2024-659 Index-out-of-bounds in gf_vvc_parse_nalu_bs 2024-07-18T00:01:18.765548Z 2026-04-21T14:20:20.228578Z
osv-2024-695 Stack-buffer-overflow in gf_vvc_parse_nalu_bs 2024-07-31T00:02:35.217594Z 2026-04-21T14:09:12.462576Z
osv-2026-603 UNKNOWN READ in <wasmtime::runtime::func::Func>::call_unchecked_raw::< 2026-04-21T00:05:37.586369Z 2026-04-21T00:05:37.586785Z
osv-2025-1059 Security exception in com.google.re2j.Machine.add 2026-01-18T00:02:23.827422Z 2026-04-20T14:15:42.315180Z
osv-2022-1235 Heap-buffer-overflow in _rrparse 2022-12-04T13:00:30.303410Z 2026-04-20T14:10:48.152964Z
osv-2022-652 Use-of-uninitialized-value in udiv 2022-07-29T00:02:04.321859Z 2026-04-20T14:10:26.566278Z
osv-2022-599 Use-of-uninitialized-value in mrb_bint_as_int 2022-07-20T00:00:11.865502Z 2026-04-20T14:10:24.129976Z
osv-2022-679 Heap-buffer-overflow in udiv 2022-08-07T00:01:59.645310Z 2026-04-20T14:06:31.342885Z
osv-2022-126 Heap-buffer-overflow in md_analyze_inlines 2022-02-07T00:00:05.720107Z 2026-04-20T14:05:37.342162Z
ID Description Published Updated
rustsec-2026-0110 bare-metal is deprecated 2026-04-23T12:00:00Z 2026-04-24T09:37:01Z
rustsec-2026-0109 Broken hard revocation handling 2026-04-21T12:00:00Z 2026-04-24T09:17:50Z
rustsec-2026-0108 `sui-execution-cut` was removed from crates.io for malicious code 2026-04-23T12:00:00Z 2026-04-23T23:05:07Z
rustsec-2026-0107 `mysten-metrics` was removed from crates.io for malicious code 2026-04-22T12:00:00Z 2026-04-23T23:05:07Z
rustsec-2026-0106 Record cache accepts AUTHORITY section NS from sibling zone via parent-pool zone-context elevation 2026-04-22T12:00:00Z 2026-04-22T19:53:31Z
rustsec-2026-0105 core2 is unmaintained, all versions yanked 2026-04-14T12:00:00Z 2026-04-22T13:15:38Z
rustsec-2026-0104 Reachable panic in certificate revocation list parsing 2026-04-22T12:00:00Z 2026-04-22T08:56:10Z
rustsec-2026-0103 Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics 2026-04-14T12:00:00Z 2026-04-21T07:33:14Z
rustsec-2026-0097 Rand is unsound with a custom logger using `rand::rng()` 2026-04-09T12:00:00Z 2026-04-17T15:55:25Z
rustsec-2026-0102 `microsoftsystem64` was removed from crates.io for malicious code 2026-04-13T12:00:00Z 2026-04-15T21:38:09Z
rustsec-2026-0101 `safe-agent-rs` was removed from crates.io for being affiliated with malicious code 2026-04-13T12:00:00Z 2026-04-15T21:38:09Z
rustsec-2026-0100 `pretty-changelog-logger` was removed from crates.io for malicious code 2026-04-13T12:00:00Z 2026-04-15T21:38:09Z
rustsec-2026-0099 Name constraints were accepted for certificates asserting a wildcard name 2026-04-14T12:00:00Z 2026-04-15T09:57:12Z
rustsec-2026-0098 Name constraints for URI names were incorrectly accepted 2026-04-14T12:00:00Z 2026-04-15T07:36:20Z
rustsec-2025-0161 libsecp256k1 is unmaintained 2025-01-14T12:00:00Z 2026-04-14T11:24:03Z
rustsec-2026-0096 Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0095 Wasmtime with Winch compiler backend may allow a sandbox-escaping memory access 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0094 Improperly masked return value from `table.grow` with Winch compiler backend 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0093 Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0092 Panic when transcoding misaligned component model UTF-16 strings 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0091 Out-of-bounds write or crash when transcoding component model strings 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0090 Use-after-free bug after cloning `wasmtime::Linker` 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0089 Host panic when Winch compiler executes `table.fill` 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0088 Data leakage between pooling allocator instances 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0087 Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on Cranelift x86-64 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0086 Host data leakage with 64-bit tables and Winch 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0085 Panic when lifting `flags` component value 2026-04-09T12:00:00Z 2026-04-09T19:59:38Z
rustsec-2026-0084 `logprinter` was removed from crates.io for malicious code 2026-04-09T12:00:00Z 2026-04-09T11:23:07Z
rustsec-2026-0083 zantetsu-trainer is unmaintained 2026-04-07T12:00:00Z 2026-04-08T08:55:27Z
rustsec-2026-0082 zantetsu-ffi is unmaintained 2026-04-07T12:00:00Z 2026-04-08T08:55:27Z
ID Description Published Updated
bit-wordpress-2025-58674 WordPress core <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability 2025-09-25T08:55:10.378Z 2026-04-24T09:12:35.749Z
bit-wordpress-2025-58246 WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability 2025-09-25T08:55:08.592Z 2026-04-24T09:12:35.749Z
bit-rclone-2026-41179 RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution 2026-04-24T08:51:09.638Z 2026-04-24T09:12:35.749Z
bit-rclone-2026-41176 Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution 2026-04-24T08:51:07.745Z 2026-04-24T09:12:35.749Z
bit-gitlab-2026-6515 Insufficient Session Expiration in GitLab 2026-04-24T09:11:06.841Z 2026-04-24T09:12:35.749Z
bit-gitlab-2026-5816 Improper Resolution of Path Equivalence in GitLab 2026-04-24T09:11:05.210Z 2026-04-24T09:12:35.749Z
bit-gitlab-2026-5377 Incorrect Authorization in GitLab 2026-04-24T09:11:03.540Z 2026-04-24T09:12:35.749Z
bit-gitlab-2026-5262 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2026-04-24T09:11:01.779Z 2026-04-24T09:12:35.749Z
bit-gitlab-2026-4922 Cross-Site Request Forgery (CSRF) in GitLab 2026-04-24T09:10:58.420Z 2026-04-24T09:12:35.749Z
bit-gitlab-2026-3254 Improper Restriction of Rendered UI Layers or Frames in GitLab 2026-04-24T09:10:47.044Z 2026-04-24T09:12:35.749Z
bit-gitlab-2026-1660 Allocation of Resources Without Limits or Throttling in GitLab 2026-04-24T09:10:19.147Z 2026-04-24T09:12:35.749Z
bit-gitlab-2025-9957 Incorrect Authorization in GitLab 2026-04-24T09:09:44.772Z 2026-04-24T09:12:35.749Z
bit-gitlab-2025-6016 Allocation of Resources Without Limits or Throttling in GitLab 2026-04-24T09:08:59.686Z 2026-04-24T09:12:35.749Z
bit-gitlab-2025-3922 Allocation of Resources Without Limits or Throttling in GitLab 2026-04-24T09:08:26.706Z 2026-04-24T09:12:35.749Z
bit-gitlab-2025-0186 Allocation of Resources Without Limits or Throttling in GitLab 2026-04-24T09:05:10.195Z 2026-04-24T09:12:35.749Z
bit-kyverno-2026-4789 CVE-2026-4789 2026-04-06T07:49:20.364Z 2026-04-23T18:12:09.750Z
bit-python-2026-3298 Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes 2026-04-23T08:52:48.858Z 2026-04-23T09:10:51.830Z
bit-libpython-2026-3298 Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes 2026-04-23T08:44:10.229Z 2026-04-23T09:10:51.830Z
bit-kyverno-2026-40868 kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token 2026-04-23T08:41:53.633Z 2026-04-23T09:10:51.830Z
bit-kibana-2026-33461 Incorrect Authorization in Kibana Fleet Leading to Information Disclosure 2026-04-13T05:42:03.441Z 2026-04-23T09:10:51.830Z
bit-elk-2026-33461 Incorrect Authorization in Kibana Fleet Leading to Information Disclosure 2026-04-13T05:38:38.805Z 2026-04-23T09:10:51.830Z
bit-dotnet-2026-25667 2026-04-16T23:38:58.356Z 2026-04-23T09:10:51.830Z
bit-airflow-2026-25917 Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5) 2026-04-21T12:01:27.677Z 2026-04-23T09:10:51.830Z
bit-python-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF 2026-04-16T23:50:28.207Z 2026-04-22T09:10:06.651Z
bit-mlflow-2026-0545 Missing Authentication for Critical Function in mlflow/mlflow 2026-04-22T08:45:28.317Z 2026-04-22T09:10:06.651Z
bit-logstash-2026-33466 Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write 2026-04-13T05:42:10.653Z 2026-04-22T09:10:06.651Z
bit-libpython-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF 2026-04-16T23:43:06.028Z 2026-04-22T09:10:06.651Z
bit-kafka-2026-33558 Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output 2026-04-22T08:40:42.095Z 2026-04-22T09:10:06.651Z
bit-kafka-2026-33557 Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication 2026-04-22T08:40:40.515Z 2026-04-22T09:10:06.651Z
bit-vault-2026-5807 Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations 2026-04-21T12:15:58.123Z 2026-04-21T12:33:30.555Z
ID Description Published Updated
cleanstart-2026-kx82113 In libexpat before 2 2026-04-23T00:37:25.300123Z 2026-04-22T09:49:02Z
cleanstart-2026-hm96194 In libexpat before 2 2026-04-23T00:37:25.660354Z 2026-04-22T09:49:02Z
cleanstart-2026-is05941 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native 2026-04-23T00:39:55.461024Z 2026-04-22T06:13:27Z
cleanstart-2026-fo49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0 2026-04-22T00:36:28.593230Z 2026-04-21T09:53:20Z
cleanstart-2026-kb76878 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written 2026-04-22T00:39:59.241183Z 2026-04-21T09:47:18Z
cleanstart-2026-al68245 filippo 2026-04-22T00:37:28.755649Z 2026-04-21T09:29:42Z
cleanstart-2026-bb70412 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions 2026-04-22T00:41:59.291167Z 2026-04-21T09:28:36Z
cleanstart-2026-lf33811 In libexpat before 2 2026-04-22T00:40:28.653558Z 2026-04-21T09:26:32Z
cleanstart-2026-lt06489 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-22T00:37:51.095485Z 2026-04-21T07:42:07Z
cleanstart-2026-af45008 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers 2026-04-21T00:40:00.550928Z 2026-04-20T07:28:24Z
cleanstart-2026-ad31975 Security fixes for ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv applied in versions: 26.5.6-r3 2026-04-21T00:36:59.139031Z 2026-04-20T07:28:24Z
cleanstart-2026-dy53885 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0 2026-04-21T00:37:09.087233Z 2026-04-20T05:52:44Z
cleanstart-2026-dk70097 In libexpat before 2 2026-04-21T00:38:59.570153Z 2026-04-20T05:52:44Z
cleanstart-2026-cp08056 In libexpat before 2 2026-04-21T00:38:29.529453Z 2026-04-20T05:52:44Z
cleanstart-2026-mw34654 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0 2026-04-18T00:36:20.394488Z 2026-04-17T12:37:31Z
cleanstart-2026-js27352 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6 2026-04-18T00:36:20.590981Z 2026-04-17T12:37:31Z
cleanstart-2026-bc44092 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-18T00:36:20.226066Z 2026-04-17T12:37:31Z
cleanstart-2026-kf53276 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6 2026-04-17T00:38:05.902586Z 2026-04-16T05:00:01Z
cleanstart-2026-gw37659 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0 2026-04-17T00:38:05.744772Z 2026-04-16T05:00:01Z
cleanstart-2026-co09549 In libexpat before 2 2026-04-17T00:39:07.237615Z 2026-04-16T05:00:01Z
cleanstart-2026-ak18460 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-17T00:38:05.524563Z 2026-04-16T05:00:01Z
cleanstart-2026-mn70386 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-16T00:37:18.538311Z 2026-04-15T10:48:12Z
cleanstart-2026-io64153 In libexpat before 2 2026-04-16T00:38:53.556040Z 2026-04-15T10:48:12Z
cleanstart-2026-hh39661 In libexpat before 2 2026-04-16T00:38:49.545664Z 2026-04-15T10:48:12Z
cleanstart-2026-ez90321 Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper s... 2026-04-16T00:40:49.655378Z 2026-04-15T10:23:29Z
cleanstart-2026-cf62516 Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper s... 2026-04-16T00:42:51.354420Z 2026-04-15T10:18:15Z
cleanstart-2026-gn18755 gRPC-Go is the Go language implementation of gRPC 2026-04-16T00:38:55.766955Z 2026-04-15T10:06:08Z
cleanstart-2026-bh97849 gRPC-Go is the Go language implementation of gRPC 2026-04-16T00:46:20.819037Z 2026-04-15T10:00:00Z
cleanstart-2026-an01004 filippo 2026-04-16T00:44:50.314232Z 2026-04-15T09:36:13Z
cleanstart-2026-jz43336 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions 2026-04-16T00:45:49.932786Z 2026-04-15T09:24:00Z
ID Description Published Updated
drupal-contrib-2026-033 2026-04-22T17:47:43.000Z 2026-04-22T17:47:43.000Z
drupal-contrib-2026-032 2026-04-08T16:09:54.000Z 2026-04-10T16:51:06.000Z
drupal-contrib-2026-031 2026-04-01T16:38:14.000Z 2026-04-02T14:13:13.000Z
drupal-contrib-2026-029 2026-03-11T16:35:02.000Z 2026-03-26T19:50:52.000Z
drupal-contrib-2026-028 2026-03-11T16:33:14.000Z 2026-03-26T19:43:59.000Z
drupal-contrib-2026-030 2026-03-18T16:10:00.000Z 2026-03-18T16:10:00.000Z
drupal-contrib-2026-015 2026-02-25T18:47:57.000Z 2026-03-17T13:20:54.000Z
drupal-contrib-2026-024 2026-03-04T17:59:51.000Z 2026-03-05T14:03:05.000Z
drupal-contrib-2026-027 2026-03-04T18:02:59.000Z 2026-03-04T18:02:59.000Z
drupal-contrib-2026-026 2026-03-04T18:02:14.000Z 2026-03-04T18:02:14.000Z
drupal-contrib-2026-025 2026-03-04T18:00:41.000Z 2026-03-04T18:00:41.000Z
drupal-contrib-2026-023 2026-03-04T17:58:55.000Z 2026-03-04T17:58:55.000Z
drupal-contrib-2026-022 2026-03-04T17:57:58.000Z 2026-03-04T17:57:58.000Z
drupal-contrib-2026-021 2026-03-04T17:56:18.000Z 2026-03-04T17:56:18.000Z
drupal-contrib-2026-020 2026-03-04T17:54:27.000Z 2026-03-04T17:54:27.000Z
drupal-contrib-2026-016 2026-02-25T18:49:59.000Z 2026-02-25T19:30:03.000Z
drupal-contrib-2026-019 2026-02-25T18:51:43.000Z 2026-02-25T18:51:43.000Z
drupal-contrib-2026-018 2026-02-25T18:51:26.000Z 2026-02-25T18:51:26.000Z
drupal-contrib-2026-017 2026-02-25T18:51:01.000Z 2026-02-25T18:51:01.000Z
drupal-contrib-2026-014 2026-02-25T18:46:10.000Z 2026-02-25T18:46:10.000Z
drupal-contrib-2026-013 2026-02-25T18:45:13.000Z 2026-02-25T18:45:13.000Z
drupal-contrib-2026-012 2026-02-25T18:44:38.000Z 2026-02-25T18:44:38.000Z
drupal-contrib-2026-011 2026-02-25T18:43:32.000Z 2026-02-25T18:43:32.000Z
drupal-contrib-2026-010 2026-02-11T16:54:18.000Z 2026-02-25T17:17:46.000Z
drupal-contrib-2026-009 2026-02-11T16:53:32.000Z 2026-02-12T15:37:20.000Z
drupal-contrib-2026-008 2026-02-04T17:23:40.000Z 2026-02-04T17:23:40.000Z
drupal-contrib-2025-110 2025-09-24T17:27:41.000Z 2025-09-24T17:27:41.000Z
ID Description Updated
ts-2026-001 TS-2026-001 2026-01-15T00:00
ts-2025-008 TS-2025-008 2025-11-19T00:00
ts-2025-007 TS-2025-007 2025-11-07T00:00
ts-2025-006 TS-2025-006 2025-10-28T00:00
ts-2025-005 TS-2025-005 2025-08-07T00:00
ts-2025-004 TS-2025-004 2025-05-27T00:00
ts-2025-003 TS-2025-003 2025-05-21T00:00
ts-2025-002 TS-2025-002 2025-05-15T00:00
ts-2025-001 TS-2025-001 2025-03-07T00:00
ts-2024-013 TS-2024-013 2024-12-04T00:00
ts-2024-012 TS-2024-012 2024-10-02T00:00
ts-2024-011 TS-2024-011 2024-07-22T00:00
ts-2024-010 TS-2024-010 2024-07-19T00:00
ts-2024-009 TS-2024-009 2024-06-27T00:00
ts-2024-008 TS-2024-008 2024-06-14T00:00
ts-2024-007 TS-2024-007 2024-06-12T00:00
ts-2024-006 TS-2024-006 2024-05-22T00:00
ts-2024-005 TS-2024-005 2024-05-08T00:00
ts-2024-004 TS-2024-004 2024-05-06T00:00
ts-2024-003 TS-2024-003 2024-04-23T00:00
ts-2024-002 TS-2024-002 2024-01-30T00:00
ts-2024-001 TS-2024-001 2024-01-08T00:00
ts-2023-009 TS-2023-009 2023-12-22T00:00
ts-2023-008 TS-2023-008 2023-11-01T00:00
ts-2023-007 TS-2023-007 2023-10-26T00:00
ts-2023-006 TS-2023-006 2023-08-22T00:00
ts-2023-005 TS-2023-005 2023-04-28T00:00
ts-2023-004 TS-2023-004 2023-04-04T00:00
ts-2023-003 TS-2023-003 2023-03-22T00:00
ts-2023-002 TS-2023-002 2023-01-24T00:00
ID Description Published Updated
certfr-2026-ale-003 Note d’alerte – Ciblage des messageries instantanées 2026-03-20T00:00:00.000000 2026-04-20T00:00:00.000000
certfr-2026-ale-004 Vulnérabilité dans F5 BIG-IP Access Policy Manager 2026-03-31T00:00:00.000000 2026-03-31T00:00:00.000000
certfr-2026-ale-002 [MàJ] Vulnérabilité dans Cisco Catalyst SD-WAN 2026-02-25T00:00:00.000000 2026-03-26T00:00:00.000000
certfr-2025-ale-014 [MàJ] Vulnérabilité dans React Server Components 2025-12-05T00:00:00.000000 2026-02-12T00:00:00.000000
CERTFR-2025-ALE-014 [MàJ] Vulnérabilité dans React Server Components 2025-12-05T00:00:00.000000 2026-02-12T00:00:00.000000
certfr-2026-ale-001 [MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile 2026-01-30T00:00:00.000000 2026-02-03T00:00:00.000000
CERTFR-2026-ALE-001 [MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile 2026-01-30T00:00:00.000000 2026-02-03T00:00:00.000000
certfr-2025-ale-013 [MàJ] Multiples vulnérabilités dans Cisco ASA et FTD 2025-09-25T00:00:00.000000 2025-10-06T00:00:00.000000
CERTFR-2025-ALE-013 [MàJ] Multiples vulnérabilités dans Cisco ASA et FTD 2025-09-25T00:00:00.000000 2025-10-06T00:00:00.000000
certfr-2025-ale-012 Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway 2025-08-26T00:00:00.000000 2025-09-26T00:00:00.000000
CERTFR-2025-ALE-012 Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway 2025-08-26T00:00:00.000000 2025-09-26T00:00:00.000000
certfr-2025-ale-010 [MàJ] Multiples vulnérabilités dans Microsoft SharePoint 2025-07-21T00:00:00.000000 2025-08-26T00:00:00.000000
CERTFR-2025-ALE-010 [MàJ] Multiples vulnérabilités dans Microsoft SharePoint 2025-07-21T00:00:00.000000 2025-08-26T00:00:00.000000
certfr-2025-ale-011 Incidents de sécurité dans les pare-feux SonicWall 2025-08-05T00:00:00.000000 2025-08-18T00:00:00.000000
certfr-2025-ale-009 Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway 2025-07-01T00:00:00.000000 2025-07-17T00:00:00.000000
CERTFR-2025-ALE-011 Incidents de sécurité dans les pare-feux SonicWall 2025-08-05T00:00:00.000000 2025-08-18T00:00:00.000000
CERTFR-2025-ALE-009 Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway 2025-07-01T00:00:00.000000 2025-07-17T00:00:00.000000
certfr-2025-ale-004 Activités de post-exploitation dans Fortinet FortiGate 2025-04-11T00:00:00.000000 2025-08-07T00:00:00.000000
CERTFR-2025-ALE-004 Activités de post-exploitation dans Fortinet FortiGate 2025-04-11T00:00:00.000000 2025-08-07T00:00:00.000000
certfr-2025-ale-008 [MàJ] Vulnérabilité dans Roundcube 2025-06-05T00:00:00.000000 2025-07-21T00:00:00.000000
CERTFR-2025-ALE-008 [MàJ] Vulnérabilité dans Roundcube 2025-06-05T00:00:00.000000 2025-07-21T00:00:00.000000
certfr-2025-ale-007 Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (EPMM) 2025-05-14T00:00:00.000000 2025-06-24T00:00:00.000000
certfr-2025-ale-006 Vulnérabilité dans les produits Fortinet 2025-05-13T00:00:00.000000 2025-06-24T00:00:00.000000
certfr-2025-ale-005 Vulnérabilité dans SAP NetWeaver 2025-04-28T00:00:00.000000 2025-06-24T00:00:00.000000
certfr-2025-ale-003 [MàJ] Vulnérabilité dans les produits Ivanti 2025-04-04T00:00:00.000000 2025-04-11T00:00:00.000000
CERTFR-2025-ALE-007 Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (EPMM) 2025-05-14T00:00:00.000000 2025-06-24T00:00:00.000000
CERTFR-2025-ALE-006 Vulnérabilité dans les produits Fortinet 2025-05-13T00:00:00.000000 2025-06-24T00:00:00.000000
CERTFR-2025-ALE-005 Vulnérabilité dans SAP NetWeaver 2025-04-28T00:00:00.000000 2025-06-24T00:00:00.000000
CERTFR-2025-ALE-003 [MàJ] Vulnérabilité dans les produits Ivanti 2025-04-04T00:00:00.000000 2025-04-11T00:00:00.000000
certfr-2025-ale-002 [MàJ] Vulnérabilité dans les produits Fortinet 2025-05-07T00:00:00.000000 2025-01-14T00:00:00.000000
ID Description Published Updated
certfr-2026-avi-0487 Multiples vulnérabilités dans Google Chrome 2026-04-23T00:00:00.000000 2026-04-23T00:00:00.000000
certfr-2026-avi-0486 Multiples vulnérabilités dans les produits Microsoft 2026-04-23T00:00:00.000000 2026-04-23T00:00:00.000000
certfr-2026-avi-0485 Vulnérabilité dans Mattermost Server 2026-04-23T00:00:00.000000 2026-04-23T00:00:00.000000
certfr-2026-avi-0484 Multiples vulnérabilités dans strongSwan 2026-04-23T00:00:00.000000 2026-04-23T00:00:00.000000
certfr-2026-avi-0483 Multiples vulnérabilités dans Stormshield Management Center 2026-04-23T00:00:00.000000 2026-04-23T00:00:00.000000
certfr-2026-avi-0482 Vulnérabilité dans CPython 2026-04-23T00:00:00.000000 2026-04-23T00:00:00.000000
certfr-2026-avi-0481 Vulnérabilité dans les produits Apple 2026-04-23T00:00:00.000000 2026-04-23T00:00:00.000000
certfr-2026-avi-0480 Multiples vulnérabilités dans les produits Mozilla 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0479 Multiples vulnérabilités dans les produits Atlassian 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0478 Vulnérabilité dans Microsoft .Net 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0477 Multiples vulnérabilités dans les produits Spring 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0476 Multiples vulnérabilités dans les produits NetApp 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0475 Multiples vulnérabilités dans GitLab 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0474 Vulnérabilité dans Python 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0473 Multiples vulnérabilités dans Oracle Weblogic 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0472 Multiples vulnérabilités dans Oracle Virtualization 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0471 Multiples vulnérabilités dans Oracle Systems 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0470 Multiples vulnérabilités dans Oracle PeopleSoft 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0469 Multiples vulnérabilités dans Oracle MySQL 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0468 Multiples vulnérabilités dans Oracle Java SE 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0467 Multiples vulnérabilités dans Oracle Database Server 2026-04-22T00:00:00.000000 2026-04-22T00:00:00.000000
certfr-2026-avi-0466 Multiples vulnérabilités dans les produits Microsoft 2026-04-21T00:00:00.000000 2026-04-21T00:00:00.000000
certfr-2026-avi-0465 Vulnérabilité dans Mattermost Server 2026-04-21T00:00:00.000000 2026-04-21T00:00:00.000000
certfr-2026-avi-0464 Vulnérabilité dans Typo3 2026-04-21T00:00:00.000000 2026-04-21T00:00:00.000000
certfr-2026-avi-0463 Multiples vulnérabilités dans les produits Microsoft 2026-04-20T00:00:00.000000 2026-04-20T00:00:00.000000
certfr-2026-avi-0462 Multiples vulnérabilités dans Microsoft Edge 2026-04-20T00:00:00.000000 2026-04-20T00:00:00.000000
certfr-2026-avi-0461 Multiples vulnérabilités dans Apache Kafka 2026-04-20T00:00:00.000000 2026-04-20T00:00:00.000000
certfr-2026-avi-0460 Vulnérabilité dans Xen 2026-04-20T00:00:00.000000 2026-04-20T00:00:00.000000
certfr-2026-avi-0459 Vulnérabilité dans Mattermost Server 2026-04-20T00:00:00.000000 2026-04-20T00:00:00.000000
certfr-2026-avi-0458 Vulnérabilité dans les produits Moxa 2026-04-20T00:00:00.000000 2026-04-20T00:00:00.000000
ID Description Published Updated
jvndb-2026-012056 Multiple vulnerabilities in silex technology SD-330AC and AMC Manager 2026-04-21T15:27+09:00 2026-04-23T17:57+09:00
jvndb-2026-000064 GROWI vulnerable to Regular expression Denial-of-Service (ReDoS) 2026-04-23T16:57+09:00 2026-04-23T16:57+09:00
jvndb-2026-000063 IP Setting Software may insecurely load Dynamic Link Libraries 2026-04-23T16:57+09:00 2026-04-23T16:57+09:00
jvndb-2026-000062 CMS ALAYA vulnerable to SQL injection 2026-04-23T16:57+09:00 2026-04-23T16:57+09:00
jvndb-2026-000059 Multiple vulnerabilities in LogonTracer 2026-04-23T16:57+09:00 2026-04-23T16:57+09:00
jvndb-2026-000061 Installers of LiveOn Meet Client for Windows and its plugin may insecurely load Dynamic Link Libraries 2026-04-22T15:45+09:00 2026-04-22T15:45+09:00
jvndb-2026-000060 DeepL Chrome browser extension vulnerable to cross-site scripting 2026-04-22T15:45+09:00 2026-04-22T15:45+09:00
jvndb-2026-000058 Ziostation2 vulnerable to path traversal 2026-04-22T15:45+09:00 2026-04-22T15:45+09:00
jvndb-2026-000051 SKYSEA Client View and SKYMEC IT Manager improper file access permission settings 2026-04-20T14:47+09:00 2026-04-20T14:47+09:00
jvndb-2026-011472 OMRON UPS (Uninterruptible Power Supply) management application may insecurely load Dynamic Link Libraries 2026-04-17T14:54+09:00 2026-04-17T14:54+09:00
jvndb-2026-000057 Multiple vulnerabilities in CubeCart 2026-04-17T13:32+09:00 2026-04-17T13:32+09:00
jvndb-2026-000056 Arcserve UDP Console vulnerable to redirect to a dummy URL 2026-04-16T17:29+09:00 2026-04-16T17:29+09:00
jvndb-2026-000055 GROWI vulnerable to stored cross-site scripting 2026-04-15T17:21+09:00 2026-04-15T17:21+09:00
jvndb-2026-010851 Stack-based buffer overflow vulnerability in Dynabook Bluetooth ACPI Drivers 2026-04-14T18:13+09:00 2026-04-14T18:13+09:00
jvndb-2026-000053 EmoCheck loads Dynamic Link Libraries insecurely 2026-04-10T13:38+09:00 2026-04-10T13:38+09:00
jvndb-2026-007973 Multiple vulnerabilities in Xerox FreeFlow Core (XRX26-005) 2026-03-23T14:54+09:00 2026-04-09T13:55+09:00
jvndb-2026-000052 Multiple vulnerabilities in MATCHA series 2026-04-08T16:15+09:00 2026-04-08T16:15+09:00
jvndb-2026-000050 Multiple vulnerabilities in Movable Type 2026-04-08T16:15+09:00 2026-04-08T16:15+09:00
jvndb-2026-010301 Multiple Vulnerabilities in JP1/IT Desktop Management 2 and JP1/NETM/DM 2026-04-08T12:11+09:00 2026-04-08T12:11+09:00
jvndb-2026-010300 Multiple Vulnerabilities in Hitachi Ops Center Viewpoint 2026-04-08T12:11+09:00 2026-04-08T12:11+09:00
jvndb-2026-010299 Multiple Vulnerabilities in Hitachi Ops Center Common Services 2026-04-08T12:11+09:00 2026-04-08T12:11+09:00
jvndb-2026-009720 Multiple vulnerabilities in FUJI Electric V-SFT (April 2026) 2026-04-02T14:58+09:00 2026-04-03T15:50+09:00
jvndb-2026-000049 Multiple vulnerabilities in NEC Aterm series (NV26-001) 2026-04-03T15:09+09:00 2026-04-03T15:09+09:00
jvndb-2026-009412 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009411 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009410 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009409 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009408 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009406 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009147 Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer 2026-03-27T18:18+09:00 2026-03-27T18:18+09:00
ID Description Published Updated
cnvd-2026-17803 Cisco Unity Connection Web管理界面SQL注入漏洞 2026-04-16 2026-04-17
cnvd-2026-17802 Cisco Webex Contact Center桌面代理跨站脚本漏洞 2026-04-16 2026-04-17
cnvd-2026-17658 D-Link DI-8003和DI-8003G缓冲区溢出漏洞 2026-04-16 2026-04-17
cnvd-2026-17657 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17657） 2026-04-16 2026-04-17
cnvd-2026-17656 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17656） 2026-04-16 2026-04-17
cnvd-2026-17655 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17655） 2026-04-16 2026-04-17
cnvd-2026-17654 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17654） 2026-04-16 2026-04-17
cnvd-2026-17652 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17652） 2026-04-16 2026-04-17
cnvd-2026-17650 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17650） 2026-04-16 2026-04-17
cnvd-2026-17648 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17648） 2026-04-16 2026-04-17
cnvd-2026-17643 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17643） 2026-04-16 2026-04-17
cnvd-2026-17638 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17638） 2026-04-16 2026-04-17
cnvd-2026-17635 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17635） 2026-04-16 2026-04-17
cnvd-2026-17634 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17634） 2026-04-16 2026-04-17
cnvd-2026-17633 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17633） 2026-04-16 2026-04-17
cnvd-2026-17632 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17632） 2026-04-16 2026-04-17
cnvd-2026-17631 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17631） 2026-04-16 2026-04-17
cnvd-2026-17630 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17630） 2026-04-16 2026-04-17
cnvd-2026-17628 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17628） 2026-04-16 2026-04-17
cnvd-2026-17627 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17627） 2026-04-16 2026-04-17
cnvd-2026-17624 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17624） 2026-04-16 2026-04-17
cnvd-2026-17623 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17623） 2026-04-16 2026-04-17
cnvd-2026-17622 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17622） 2026-04-16 2026-04-17
cnvd-2026-17537 D-Link DI-8003缓冲区溢出漏洞（CNVD-2026-17537） 2026-04-16 2026-04-17
cnvd-2026-17494 WordPress插件Atarim存在未明漏洞 2026-03-19 2026-04-16
cnvd-2026-17493 Microsoft Edge (Chromium-based) for Android欺骗漏洞（CNVD-2026-17493） 2026-03-19 2026-04-16
cnvd-2026-17492 IBM Aspera Console拒绝服务漏洞 2026-03-19 2026-04-16
cnvd-2026-17491 IBM Aspera Console信息泄露漏洞（CNVD-2026-17491） 2026-03-19 2026-04-16
cnvd-2026-17490 MailEnable StartDate参数跨站脚本漏洞 2026-03-26 2026-04-16
cnvd-2026-17489 MailEnable SelectedIndex参数跨站脚本漏洞 2026-03-26 2026-04-16
ID Description Published Updated
bdu:2026-01844 Уязвимость сервиса безопасности Advanced DNS Security (ADNS) операционной системы PAN-OS,… 16.02.2026 16.02.2026
bdu:2026-01843 Уязвимость функции loadRLE() загрузчика TGA-изображений (PluginTARGA.cpp) графической биб… 16.02.2026 16.02.2026
bdu:2026-01842 Уязвимость функции ws_user_gerList() сценария pwg.users.php системы управления контентом … 16.02.2026 16.02.2026
bdu:2026-01841 Уязвимость компонента Updater облачной платформы управления контейнерами Arcane, позволяю… 16.02.2026 16.02.2026
bdu:2026-01840 Уязвимость ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), связанная с отсутствием про… 16.02.2026 16.02.2026
bdu:2026-01839 Уязвимость функции blocked_path() пакета Python для создания приложений для моделей машин… 16.02.2026 16.02.2026
bdu:2026-01838 Уязвимость драйверов графических процессоров NVIDIA NVS, Quadro, NVIDIA RTX, GeForce, свя… 16.02.2026 16.02.2026
bdu:2026-01837 Уязвимость микропрограммного обеспечения графических процессоров Imagination, позволяющая… 16.02.2026 16.02.2026
bdu:2026-01836 Уязвимость микропрограммного обеспечения графических процессоров Imagination, позволяющая… 16.02.2026 16.02.2026
bdu:2026-01835 Уязвимость драйвера ESXi base микропрограммного обеспечения сетевых контроллеров Intel 80… 16.02.2026 16.02.2026
bdu:2026-01834 Уязвимость микропрограммного обеспечения контроллеров Intel Ethernet серии E810, связанна… 16.02.2026 16.02.2026
bdu:2026-01833 Уязвимость технологий Intel Active Management Technology (AMT) и Intel Standard Manageabi… 16.02.2026 16.02.2026
bdu:2026-01832 Уязвимость технологий Intel Active Management Technology (AMT) и Intel Standard Manageabi… 16.02.2026 16.02.2026
bdu:2026-01831 Уязвимость технологий Intel Active Management Technology (AMT) и Intel Standard Manageabi… 16.02.2026 16.02.2026
bdu:2026-01830 Уязвимость компонента File input браузера Google Chrome, позволяющая нарушителю осуществи… 16.02.2026 16.02.2026
bdu:2026-01829 Уязвимость компонента PictureInPicture браузера Google Chrome, позволяющая нарушителю ока… 16.02.2026 16.02.2026
bdu:2026-01828 Уязвимость компонента Animation браузера Google Chrome, позволяющая нарушителю оказать во… 16.02.2026 16.02.2026
bdu:2026-01827 Уязвимость функции конфиденциальности Fenced Frames браузера Google Chrome, позволяющая н… 16.02.2026 16.02.2026
bdu:2026-01826 Уязвимость компонента WebGPU браузера Google Chrome, позволяющая нарушителю вызвать отказ… 16.02.2026 16.02.2026
bdu:2026-01825 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… 16.02.2026 16.02.2026
bdu:2026-01824 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связ… 16.02.2026 16.02.2026
bdu:2026-01823 Уязвимость функции межсетевых экранов SSL-VPN операционных систем Fortinet FortiOS, позво… 16.02.2026 16.02.2026
bdu:2026-01822 Уязвимость операционных систем Fortinet FortiOS, связанная с недостаточной проверкой исто… 16.02.2026 16.02.2026
bdu:2026-01821 Уязвимость функции межсетевых экранов SSL-VPN операционных систем Fortinet FortiOS, позво… 16.02.2026 16.02.2026
bdu:2026-01820 Уязвимость интерфейса командной строки операционных систем Fortinet FortiOS, позволяющая … 16.02.2026 16.02.2026
bdu:2026-01819 Уязвимость графического пользовательского интерфейса операционных систем Fortinet FortiOS… 16.02.2026 16.02.2026
bdu:2026-01818 Уязвимость программного обеспечения для разработки 3D-моделей Autodesk Fusion, связанная … 16.02.2026 16.02.2026
bdu:2026-01817 Уязвимость программного обеспечения для разработки 3D-моделей Autodesk Fusion, связанная … 16.02.2026 16.02.2026
bdu:2026-01816 Уязвимость программного обеспечения для разработки 3D-моделей Autodesk Fusion, связанная … 16.02.2026 16.02.2026
bdu:2026-01815 Уязвимость программного обеспечения Microsoft ACI Confidential Containers, связанная с не… 16.02.2026 16.02.2026
ID Description Updated
var-202407-2188 Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digita… 2024-07-23T22:46:32.699000Z
var-202406-3119 Beijing StarNet Ruijie Network Technology Co., Ltd. EG3220 is a new generation of multi-s… 2024-07-23T22:46:22.685000Z
var-202407-1740 NBR6135-E is a router. Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6135-E ha… 2024-07-23T22:46:18.378000Z
var-202407-1417 Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digita… 2024-07-23T22:46:07.784000Z
var-202407-1103 Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digita… 2024-07-23T22:46:01.992000Z
var-202407-0957 WinCC is a SCADA system suitable for all walks of life. It can access devices from mobile… 2024-07-23T22:45:59.391000Z
var-202407-0819 SIMATIC S7-1500 is a modular control system suitable for various automation applications … 2024-07-23T22:45:56.958000Z
var-202407-0818 NBR6210-E is a router product. Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6… 2024-07-23T22:45:56.946000Z
var-202407-0779 Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root. Tenda of … 2024-07-23T22:45:56.150000Z
var-202407-0778 Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnera… 2024-07-23T22:45:56.131000Z
var-202407-0745 Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnera… 2024-07-23T22:45:55.498000Z
var-202305-1479 D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution … 2024-07-23T22:45:09.335000Z
var-202108-1158 A race condition was addressed with improved locking. This issue is fixed in macOS Monter… 2024-07-23T22:44:06.976000Z
var-201109-0089 Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used… 2024-07-23T22:43:49.590000Z
var-200702-0378 Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 … 2024-07-23T22:43:25.614000Z
var-201011-0225 Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent … 2024-07-23T22:41:43.584000Z
var-201112-0297 Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Ne… 2024-07-23T22:41:20.004000Z
var-201507-0645 D-Link is an internationally renowned provider of network equipment and solutions, includ… 2024-07-23T22:41:18.832000Z
var-201803-1810 A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial … 2024-07-23T22:41:17.171000Z
var-201809-0087 WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vul… 2024-07-23T22:41:16.554000Z
var-200607-0396 Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) b… 2024-07-23T22:41:04.279000Z
var-201702-0423 An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft… 2024-07-23T22:40:53.160000Z
var-202305-1588 D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerabilit… 2024-07-23T22:40:05.297000Z
var-201112-0173 The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, … 2024-07-23T22:39:32.535000Z
var-201103-0371 SAP Crystal Reports Server is a complete reporting solution for creating, managing, and d… 2024-07-23T22:39:32.874000Z
var-201706-0017 In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClie… 2024-07-23T22:38:34.494000Z
var-202305-1520 D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vul… 2024-07-23T22:38:26.576000Z
var-202407-0490 A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP … 2024-07-23T22:38:24.768000Z
var-201810-0396 Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabili… 2024-07-23T22:37:44.850000Z
var-202001-0833 A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe mo… 2024-07-23T22:37:43.471000Z
ID Description Published Updated
vde-2025-028 Draeger: ICMHelper is vulnerable to a privilege escalation 2025-08-05T10:00:00.000Z 2026-01-06T11:00:00.000Z
vde-2019-012 TECSON/GOK: Improper Authentication and Access Control on multiple devices 2019-06-04T13:21:00.000Z 2025-05-14T13:00:14.000Z
ID Description Published Updated
vde-2026-023 Phoenix Contact: Several products are affected by vulnerabilities found in OpenSSL 2026-04-22T08:00:00.000Z 2026-04-22T08:00:00.000Z
vde-2025-104 Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx, FL SWITCH TSN 23xx and FL SWITCH 59xx Firmware 2026-03-18T08:00:00.000Z 2026-03-18T08:00:00.000Z
vde-2025-109 Phoenix Contact: Unbounded growth of the session cache in TCP encapsulation service in FL MGUARD 2xxx and 4xxx firmware 2026-02-10T08:00:00.000Z 2026-02-23T14:00:00.000Z
vde-2025-073 Phoenix Contact: Security Advisory for TC ROUTER and CLOUD CLIENT Industrial mobile network routers 2026-01-13T08:00:00.000Z 2026-01-13T08:00:00.000Z
vde-2025-071 Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware 2025-12-09T08:00:00.000Z 2026-01-12T08:00:00.000Z
vde-2025-074 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers 2025-10-14T10:00:00.000Z 2025-10-15T10:00:00.000Z
vde-2025-072 Phoenix Contact: Security Advisory for QUINT4-UPS EIP 2025-10-14T06:00:00.000Z 2025-10-14T06:00:00.000Z
vde-2018-003 PHOENIX CONTACT: addressing Meltdown and Spectre vulnerabilities 2018-03-23T09:43:00.000Z 2025-10-01T08:00:00.000Z
vde-2025-077 Phoenix Contact: Two vulnerabilities in the jq JSON processor utilized by FL MGUARD 110x devices 2025-09-09T10:00:00.000Z 2025-09-09T10:00:00.000Z
vde-2025-064 Phoenix Contact: Products utilizing WIBU-SYSTEMS CodeMeter Runtime Windows Installer have a privilege escalation 2025-09-09T07:00:00.000Z 2025-09-09T07:00:00.000Z
vde-2024-039 Phoenix Contact: Multiple Vulnerabilities in mGuard devices 2024-09-10T10:00:00.000Z 2025-08-27T10:00:00.000Z
vde-2024-022 Phoenix Contact: Security Advisory for CHARX-SEC3xxx Charge controllers 2024-08-13T10:00:00.000Z 2025-08-27T10:00:00.000Z
vde-2025-063 Phoenix Contact: Device and Update Management Windows Installer Privilege Escalation 2025-08-12T10:00:00.000Z 2025-08-12T10:00:00.000Z
vde-2025-019 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers 2025-07-08T10:00:00.000Z 2025-07-22T08:00:00.000Z
vde-2019-015 PHOENIX CONTACT: Security Advisory for multiple Industrial Controllers 2019-08-07T00:00:00.000Z 2025-07-11T07:00:00.000Z
vde-2025-054 Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware 2025-07-08T10:00:00.000Z 2025-07-08T10:00:00.000Z
vde-2025-053 Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware 2025-07-08T10:00:00.000Z 2025-07-08T10:00:00.000Z
vde-2025-014 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers 2025-07-08T10:00:00.000Z 2025-07-08T10:00:00.000Z
vde-2023-057 Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC 2023-12-12T07:00:00.000Z 2025-06-05T13:28:12.000Z
vde-2023-001 PHOENIX CONTACT: Multiple Vulnerabilities in PLCnext Firmware 2023-02-14T07:50:00.000Z 2025-06-05T13:28:12.000Z
vde-2020-002 PHOENIX CONTACT: Advisory for multiple FL Switch GHS utilising VxWorks 2020-02-25T09:07:00.000Z 2025-06-05T13:28:12.000Z
vde-2024-073 Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware 2024-12-09T11:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2024-071 Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware 2024-12-09T11:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-058 Phoenix Contact: PLCnext Control prone to download of code without integrity check 2023-12-12T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-056 Phoenix Contact: PLCnext prone to Incorrect Permission Assignment for Critical Resource 2023-12-12T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-054 Phoenix Contact: ProConOS prone to Download of Code Without Integrity Check 2023-12-12T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-051 Phoenix Contact: MULTIPROG Engineering tool and ProConOS eCLR SDK prone to CWE-732 2023-12-12T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-018 Phoenix Contact: Multiple vulnerabilities in WP 6xxx Web panels 2023-08-08T06:41:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-017 Phoenix Contact: Multiple vulnerabilities in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices 2023-08-08T04:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-016 Phoenix Contact: PLCnext Engineer Vulnerabilities in LibGit2Sharp/LibGit2 2023-08-08T06:00:00.000Z 2025-05-22T13:03:10.000Z
ID Description Published Updated
vde-2025-085 Welotec: Path Traversal in SmartEMS Upload Handling 2025-09-10T07:00:00.000Z 2025-09-22T08:00:00.000Z
vde-2025-076 Welotec: Hard-coded JWT secret in egOS WebGUI 2025-08-26T07:00:00.000Z 2025-08-26T07:00:00.000Z
vde-2024-009 Welotec: Two vulnerabilities in TK500v1 router series 2024-04-09T08:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2024-043 Welotec: Multiple products are vulnerable to regreSSHion 2024-08-22T06:00:00.000Z 2024-08-22T06:00:00.000Z
vde-2024-023 Welotec: Clickjacking Vulnerability in WebUI 2024-04-23T08:00:00.000Z 2024-04-23T08:00:00.000Z
ID Description Published Updated
advisory2026-04_vde-2026-040 CODESYS EtherNetIP - Improper timeout handling 2026-04-23T12:00:00.000Z 2026-04-23T12:00:00.000Z
advisory2026-03_vde-2026-018 CODESYS Control V3 - Externally-controlled format string in Auditlog 2026-03-24T08:00:00.000Z 2026-03-24T08:00:00.000Z
advisory2026-02_vde-2026-011 CODESYS Control V3 - Untrusted boot application 2026-03-24T08:00:00.000Z 2026-03-24T08:00:00.000Z
advisory2026-01_vde-2026-012 CODESYS Installer - Possible Privilege Escalation 2026-03-10T10:00:00.000Z 2026-03-10T10:00:00.000Z
advisory2025-10_vde-2025-100 CODESYS Control - Invalid type usage in visualization 2025-12-01T10:00:00.000Z 2026-02-12T11:00:00.000Z
advisory2025-09_vde-2025-099 CODESYS Control - Linux/QNX SysSocket flaw 2025-12-01T11:00:00.000Z 2026-02-12T11:00:00.000Z
advisory2025-11_vde-2025-101 CODESYS Development System - Deserialization of Untrusted Data 2025-12-01T10:00:00.000Z 2025-12-01T10:00:00.000Z
advisory2025-08_vde-2025-070 CODESYS Control V3 - NULL pointer dereference 2025-08-04T08:00:00.000Z 2025-10-14T08:00:00.000Z
advisory2025-07_vde-2025-051 CODESYS Control V3 - Exposed PKI folder 2025-08-04T10:00:00.000Z 2025-09-01T10:00:00.000Z
advisory2025-06_vde-2025-049 CODESYS Control V3 - Insecure default permissions 2025-08-04T10:00:00.000Z 2025-08-04T10:00:00.000Z
advisory2025-04_vde-2025-022 CODESYS Control V3 - OPC UA Server Authentication bypass 2025-03-18T11:00:00.000Z 2025-06-05T13:31:01.000Z
advisory2025-03_vde-2025-015 CODESYS Control V3 removable media path traversal 2025-03-18T11:00:00.000Z 2025-06-05T13:31:01.000Z
advisory2025-02_vde-2025-013 CODESYS (Edge) Gateway for Windows insecure default 2025-03-18T11:00:00.000Z 2025-06-05T13:31:01.000Z
advisory2025-01_vde-2025-001 CODESYS Key physical side-channel vulnerability 2025-01-21T11:00:00.000Z 2025-06-05T13:31:01.000Z
vde-2024-024 CODESYS: Development System V2.3 affected by two vulnerabilities through corrupted project files 2024-05-06T08:00:00.000Z 2025-05-14T13:00:15.000Z
vde-2024-027 CODESYS: Vulnerability in multiple products through exposure of resource to wrong sphere 2024-06-04T06:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2024-026 CODESYS: Vulnerability can cause a DoS on CODESYS OPC UA products 2024-06-04T08:00:00.000Z 2025-05-14T13:00:14.000Z
advisory2025-05_vde-2025-027 CODESYS Visualization user management bypass in WebVisu 2025-04-23T10:00:00.000Z 2025-04-23T10:00:00.000Z
advisory2024-05_vde-2024-057 CODESYS: CODESYS web server vulnerable to DoS 2024-09-25T21:59:00.000Z 2025-04-03T10:00:00.000Z
vde-2024-046 OSCAT: Out-of-bounds read in OSCAT Basic library 2024-09-10T14:00:00.000Z 2024-09-10T14:00:00.000Z
vde-2023-066 CODESYS: OS Command Injection Vulnerability in multiple CODESYS Control products 2023-12-05T14:25:00.000Z 2023-12-05T14:25:00.000Z
vde-2023-035 CODESYS: Multiple products affected by WIBU Codemeter vulnerability 2023-12-05T07:00:00.000Z 2023-12-05T07:00:00.000Z
vde-2023-025 CODESYS: Control runtime system memory and integrity check vulnerabilities 2023-08-03T11:18:00.000Z 2023-08-03T11:18:00.000Z
vde-2023-023 CODESYS: Missing Brute-Force protection in CODESYS Development System 2023-08-03T11:08:00.000Z 2023-08-03T11:08:00.000Z
vde-2023-022 CODESYS: Missing integrity check in CODESYS Development System 2023-08-03T10:52:00.000Z 2023-08-03T10:52:00.000Z
vde-2023-021 CODESYS: Vulnerability in CODESYS Development System allows execution of binaries 2023-08-03T10:48:00.000Z 2023-08-03T10:48:00.000Z
vde-2023-019 CODESYS: Multiple Vulnerabilities in CmpApp CmpAppBP and CmpAppForce 2023-08-03T10:42:00.000Z 2023-08-03T10:42:00.000Z
vde-2023-024 CODESYS: Vulnerability in CODESYS Development System and CODESYS Scripting 2023-07-28T07:45:00.000Z 2023-07-28T07:45:00.000Z
ID Description Published Updated
vde-2025-067 Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access 2025-08-10T10:00:00.000Z 2025-08-25T10:00:00.000Z
vde-2022-057 Wiesemann & Theis multiple products prone to web interface vulnerability 2022-12-13T07:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2024-018 Wiesemann & Theis: Multiple products prone to unquoted search path 2024-02-28T07:00:00.000Z 2025-05-14T12:36:39.000Z
vde-2025-024 Wiesemann & Theis: Multiple products from Wiesemann & Theis support deprecated jQuery version 2025-05-13T10:00:00.000Z 2025-05-13T10:00:00.000Z
vde-2025-032 Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting 2025-05-06T10:00:00.000Z 2025-05-06T10:00:00.000Z
vde-2025-031 Wiesemann & Theis: Multiple products from Wiesemann & Theis support deprecated TLS protocol versions 2025-04-28T10:00:00.000Z 2025-04-28T10:00:00.000Z
vde-2022-043 Wiesemann & Theis: Multiple Vulnerabilities in the Com-Server Family 2022-11-07T11:43:00.000Z 2022-11-07T12:14:00.000Z
ID Description Published Updated
vde-2026-030 MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 2026-04-02T11:00:00.000Z 2026-04-02T11:00:00.000Z
vde-2026-024 MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 2026-03-23T12:00:00.000Z 2026-03-23T12:00:00.000Z
vde-2024-068 MB connect line: Multiple Vulnerabilities in MB connect line Products 2024-10-15T08:00:00.000Z 2026-03-06T08:00:00.000Z
vde-2024-056 MB connect line: Multiple Vulnerabilities in mbNET.mini Product 2024-10-15T08:00:00.000Z 2025-08-27T10:00:00.000Z
vde-2024-010 Vulnerabilities in mbCONNECT24/mymbCONNECT24 2025-03-18T11:00:00.000Z 2025-08-27T10:00:00.000Z
vde-2025-065 MB connect line: Sandbox escape in mbNET's LUA interpreter 2025-07-31T10:00:00.000Z 2025-07-31T10:00:00.000Z
vde-2025-058 MB connect line: Multiple vulnerabilities in mbNET.mini 2025-07-21T10:00:00.000Z 2025-07-21T10:00:00.000Z
vde-2025-035 Vulnerabilities in mbCONNECT24/mymbCONNECT24 2025-06-24T10:00:00.000Z 2025-06-24T10:00:00.000Z
vde-2025-034 Vulnerabilities in mbCONNECT24/mymbCONNECT24 2025-06-24T10:00:00.000Z 2025-06-24T10:00:00.000Z
vde-2021-030 MB connect line: two vulnerabilities in mymbCONNECT24, mbCONNECT24 (Update A) 2022-09-07T10:48:00.000Z 2025-06-06T07:00:00.000Z
vde-2023-002 MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24 2023-05-15T14:06:00.000Z 2025-05-14T13:00:14.000Z
vde-2021-037 MB connect line: Remote user enumeration in mbCONNECT24/mymbCONNECT24 2021-10-27T10:15:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-031 MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24 2021-07-22T11:33:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-017 MB connect line: Privilege escalation in mbDIALUP 2021-07-22T11:35:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-012 MB connect line: multiple products partially affected by DNSpooq 2021-04-26T08:04:00.000Z 2025-05-14T12:28:19.000Z
vde-2020-035 MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1 2020-09-18T12:30:00.000Z 2025-05-14T12:28:19.000Z
vde-2024-030 MB connect line: mbNET.mini vulnerable to OS command injection 2024-07-03T09:00:00.000Z 2024-07-03T09:00:00.000Z
vde-2023-041 MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24 2023-10-16T08:38:00.000Z 2023-10-16T08:38:00.000Z
vde-2024-042 MB connect line: Multiple products are vulnerable to regreSSHion 2023-08-17T12:00:00.000Z 2023-08-17T12:00:00.000Z
vde-2023-012 MB connect line: Cross-site Scripting vulnerability in mbNET/mbNET.rokey 2023-08-17T12:00:00.000Z 2023-08-17T12:00:00.000Z
vde-2022-011 MB connect line: Unauthenticated user enumeration in mbCONNECT24 and mymbCONNECT24 2022-09-07T12:50:00.000Z 2022-09-07T12:50:00.000Z
vde-2021-003 MB connect line: Multiple vulnerabilites in mymbCONNECT24 and mbCONNECT24 (Update A) 2022-09-07T10:46:00.000Z 2022-09-07T10:46:00.000Z
ID Description Published Updated
vde-2026-015 Helmholz: Use of a Broken or Risky Cryptographic Algorithm 2026-04-21T10:00:00.000Z 2026-04-21T12:00:00.000Z
vde-2026-043 Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual 2026-04-13T11:00:00.000Z 2026-04-13T11:00:00.000Z
vde-2026-013 Helmholz: Use of a Broken or Risky Cryptographic Algorithm 2026-04-07T08:00:00.000Z 2026-04-07T08:00:00.000Z
vde-2026-025 Helmholz: Multiple Vulnerabilities in myREX24V2 / myREX24V2.virtual 2026-03-23T12:00:00.000Z 2026-03-23T12:00:00.000Z
vde-2024-069 Helmholz: Multiple Vulnerabilities in Helmholz products 2024-10-15T08:00:00.000Z 2026-03-06T08:00:00.000Z
vde-2024-066 Helmholz: Multiple Vulnerabilities in Helmholz REX100 Product 2024-10-15T08:00:00.000Z 2025-08-27T10:00:00.000Z
vde-2025-069 Helmholz: Sandbox escape in REX200/250 LUA interpreter 2025-07-31T10:00:00.000Z 2025-07-31T10:00:00.000Z
vde-2025-059 Helmholz: Multiple vulnerabilities in REX 100 2025-07-21T10:00:00.000Z 2025-07-21T10:00:00.000Z
vde-2025-038 Vulnerabilities in myREX24/myREX24.virtual 2025-06-24T10:00:00.000Z 2025-06-24T10:00:00.000Z
vde-2025-037 Vulnerabilities in myREX24/myREX24.virtual 2025-06-24T10:00:00.000Z 2025-06-24T10:00:00.000Z
vde-2021-057 Helmholz: Privilege Escalation in shDialup (Update A) 2021-03-28T13:03:00.000Z 2025-05-14T13:00:15.000Z
vde-2024-031 Helmholz: Vulnerabilities in myREX24 V2/myREX24.virtual 2025-03-18T11:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2022-017 Helmholz: Unauthenticated user enumeration in myREX24 and myREX24.virtual 2022-09-07T12:54:00.000Z 2025-05-14T13:00:14.000Z
vde-2021-058 Helmholz: Remote user enumeration in myREX24/myREX24-virtual 2021-12-08T13:04:00.000Z 2025-05-14T13:00:14.000Z
vde-2024-044 Helmholz: Multiple products are vulnerable to regreSSHion 2024-07-31T08:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2024-032 Helmholz: REX 100 vulnerable to OS command injection 2024-07-03T09:00:00.000Z 2024-07-03T13:33:00.000Z
vde-2023-043 Helmholz: Vulnerability allows access to non-critical information in myREX24 and myREX24.virtual 2023-10-16T08:38:00.000Z 2023-10-16T08:38:00.000Z
vde-2023-029 Helmholz: Cross-site Scripting vulnerability in REX 200/REX 250 2023-08-17T12:00:00.000Z 2023-08-17T12:00:00.000Z
vde-2023-008 Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual 2023-05-15T12:06:00.000Z 2023-05-15T12:06:00.000Z
vde-2022-039 Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual 2022-09-07T10:56:00.000Z 2022-09-07T10:56:00.000Z
ID Description Published Updated
fsa-202601 Several CODESYS vulnerabilities in Festo Automation Suite 2026-02-26T08:00:00.000Z 2026-02-26T08:00:00.000Z
fsa-202302 Festo: Several vulnerabilities in FactoryViews 2023-07-10T10:00:00.000Z 2026-02-02T08:00:00.000Z
fsa-202402 Several Vulnerabilities in MES PC (Windows 10) 2024-02-27T12:00:00.000Z 2025-12-08T07:00:00.000Z
fsa-202405 Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products contains a memory protection bypass vulnerability 2024-09-09T07:00:00.000Z 2025-11-05T08:00:00.000Z
fsa-202401 Festo: Multiple products contain CoDe16 vulnerability 2024-01-30T07:00:00.000Z 2025-11-04T11:00:00.000Z
fsa-202202 Festo: Controller CECC-S,LK,D family <= 2.3.8.1 - multiple vulnerabilities in CODESYS V3 runtime system 2022-07-18T10:00:00.000Z 2025-11-03T11:00:00.000Z
fsa-202209 Festo: Incomplete documentation of remote accessible functions and protocols in Festo products 2022-11-29T11:49:00.000Z 2025-11-03T10:00:00.000Z
fsa-202208 Festo: Multiple Festo products contain an unsafe default Codesys configuration 2022-11-29T11:41:00.000Z 2025-10-28T11:00:00.000Z
fsa-202206 Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in multiple products 2022-12-13T11:50:00.000Z 2025-10-01T10:50:00.000Z
fsa-202304 Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions 2023-09-05T10:00:00.000Z 2025-10-01T10:00:00.000Z
fsa-202301 Festo: Cross-Site-Scripting (XSS) vulnerability in LX-Appliance 2023-08-29T10:00:00.000Z 2025-10-01T10:00:00.000Z
fsa-202303 Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products 2023-10-17T06:00:00.000Z 2025-10-01T06:00:00.000Z
fsa-202101 Festo: Multiple vulnerabilities in Ethernet/IP Stack of SBRD-Q/SBOC-Q/SBOI-Q 2021-09-22T11:13:00.000Z 2025-08-26T10:00:00.000Z
fsa-202207 Festo: CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function 2022-09-20T10:00:00.000Z 2025-07-28T10:00:00.000Z
fsa-202203 Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system 2022-07-18T10:00:00.000Z 2025-07-10T10:00:00.000Z
fsa-202201 Festo: CECC-X-M1 - command injection vulnerabilities 2022-07-06T07:00:00.000Z 2025-06-23T08:00:00.000Z
fsa-202305 Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in several products 2023-11-28T07:00:00.000Z 2025-05-13T10:00:00.000Z
fsa-202406 Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo 2024-12-03T11:00:00.000Z 2024-12-03T14:00:00.000Z
ID Description Published Updated
vde-2025-011 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability and information disclosure 2025-05-26T10:00:00.000Z 2025-08-27T10:00:00.000Z
vde-2024-038 Pepperl+Fuchs: Anonymous FTP server and Telnet access allows information disclosure and manipulation 2024-07-10T06:00:00.000Z 2025-08-27T10:00:00.000Z
vde-2025-002 PEPPERL+FUCHS: HMI – devices are affected by Windows RCE 2025-02-25T11:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2024-017 Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities 2024-04-10T06:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2022-021 Pepperl+Fuchs: RSM-EX devices - Multiple Bluetooth vulnerabilities 2022-05-16T14:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2021-041 Pepperl+Fuchs: Multiple DTM and VisuNet Software affected by log4net vulnerability 2021-10-26T13:35:00.000Z 2025-05-22T13:03:10.000Z
vde-2020-053 Pepperl+Fuchs: Comtrol RocketLinx ICRL-M - Multiple Vulnerabilities 2021-03-08T13:44:00.000Z 2025-05-22T13:03:10.000Z
vde-2020-017 Pepperl+Fuchs, PACTware: Two password vulnerabilities found 2020-05-29T10:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2024-033 PEPPERL+FUCHS: Device Master ICDM-RX/* – Vulnerability may allow unauthenticated remote attacker information disclosure and denial of service 2024-08-13T12:00:00.000Z 2025-05-14T14:34:17.000Z
vde-2020-014 Pepperl+Fuchs: Kr00k vulnerabilities in Broadcom Wi-Fi chipsets 2020-03-31T13:30:00.000Z 2025-05-14T14:34:17.000Z
vde-2021-006 Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service 2021-11-16T14:53:00.000Z 2025-05-14T13:00:15.000Z
vde-2020-050 Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service 2021-02-15T13:33:00.000Z 2025-05-14T13:00:15.000Z
vde-2021-028 Pepperl+Fuchs: Multiple VDM100-Distance Ethernet-IP sensors with multiple vulnerabilities 2021-08-16T12:01:00.000Z 2025-05-14T13:00:14.000Z
vde-2021-027 Pepperl+Fuchs: WirelessHART-Gateway - Vulnerability may allow remote attackers to cause a Denial Of Service 2021-10-16T12:00:00.001Z 2025-05-14T13:00:14.000Z
vde-2020-038 Pepperl+Fuchs: Multiple vulnerabilites in Comtrol IO-Link Master 2021-01-04T13:01:00.000Z 2025-05-14T13:00:14.000Z
vde-2019-002 Pepperl+Fuchs: Path traversal in WirelessHART Gateway 2019-03-06T10:35:00.000Z 2025-05-14T13:00:14.000Z
vde-2021-007 Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service 2021-02-16T14:53:00.000Z 2025-05-14T12:53:43.000Z
vde-2024-065 PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key 2024-11-26T11:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2024-063 PEPPERL+FUCHS: Multiple products are affected by regreSSHion 2024-10-08T12:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-001 Pepperl+Fuchs: Vulnerability allowing code-excution in PACTware <=5.0.5.31 2021-01-15T12:41:00.000Z 2025-05-14T12:28:19.000Z
vde-2018-016 Pepperl+Fuchs: ecom Mobile devices prone to Android privilege elevation vulnerability 2018-10-19T10:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2018-002 Pepperl+Fuchs: HMI devices vulnerable to Meltdown and Spectre Attacks 2018-02-14T08:50:00.000Z 2025-05-14T12:28:19.000Z
vde-2024-037 Pepperl+Fuchs: Use after free vulnerability in Smart-Ex 02 and Smart-Ex 03 2024-07-10T06:00:00.000Z 2024-07-10T06:00:00.000Z
vde-2022-012 Pepperl+Fuchs: Vulnerability in multiple VisuNet devices 2022-04-26T12:00:00.000Z 2022-05-16T14:15:00.000Z
vde-2021-034 Pepperl+Fuchs: Security Advisory for PrintNightmare Vulnerability in multiple HMI Devices 2021-07-30T07:55:00.000Z 2021-07-30T07:55:00.000Z
vde-2021-018 Pepperl+Fuchs: Multiple vulnerabilites in ICE1 Ethernet IO Modules 2021-05-12T08:57:00.000Z 2021-05-12T08:57:00.000Z
vde-2020-040 Pepperl+Fuchs: Multiple Products prone to multiple vulnerabilities in Comtrol RocketLinux 2020-10-05T12:00:00.000Z 2020-10-05T12:00:00.000Z
vde-2020-034 Pepperl+Fuchs: VMT MSS and VMT IS - Several vulnerabilities in products utilizing WIBU-SYSTEMS CodeMeter components 2020-09-10T13:22:00.000Z 2020-09-10T13:22:00.000Z
vde-2019-011 Pepperl+Fuchs: Remote code execution vulnerability in HMI devices 2019-05-29T07:35:00.000Z 2019-10-07T10:00:00.000Z
vde-2019-004 Pepperl+Fuchs: ecom Mobile Devices prone to BlueBorne Attack 2019-03-14T07:52:00.000Z 2019-03-14T07:52:00.000Z
ID Description Published Updated
ppsa-2026-002 Pilz: Vulnerability affecting PASvisu Runtime 2026-04-23T12:00:00.000Z 2026-04-23T12:00:00.000Z
ppsa-2026-001 Pilz: Multiple Vulnerabilities affecting the PIT User Authentication Service 2026-02-02T08:00:00.000Z 2026-02-02T10:00:00.000Z
ppsa-2025-004 Pilz: Vulnerability affecting PASvisu Runtime 2025-10-20T10:00:00.000Z 2025-10-20T10:00:00.000Z
ppsa-2025-003 Pilz: Authentication Bypass in IndustrialPI Webstatus 2025-07-01T10:00:00.000Z 2025-07-01T10:00:00.000Z
ppsa-2025-002 Pilz: Missing Authentication in Node-RED integration 2025-07-01T10:00:00.000Z 2025-07-01T10:00:00.000Z
ppsa-2025-001 Pilz: Authentication Bypass and Cross-Site-Scripting in PiCtory 2025-06-30T10:00:00.000Z 2025-06-30T10:00:00.000Z
vde-2022-044 Pilz: Multiple products affected by ZipSlip 2022-11-24T09:00:00.000Z 2025-06-05T13:28:13.000Z
vde-2023-048 Pilz: Multiple products prone to libwebp vulnerability 2023-12-05T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-033 Pilz: WIBU Vulnerabilitiy in multiple Products 2023-10-12T06:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2022-045 Pilz: PAS 4000 prone to ZipSlip 2022-11-24T09:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2021-009 Pilz: Multiple products prone to Niche Ethernet Stack vulnerabilities 2021-09-20T11:56:00.000Z 2025-05-14T13:00:14.000Z
vde-2020-033 Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities 2020-09-10T13:18:00.000Z 2025-05-14T12:28:19.000Z
vde-2023-050 Pilz: Vulnerability in PASvisu and PMI v8xx 2024-01-30T07:00:00.000Z 2025-04-10T13:00:00.000Z
vde-2024-002 Pilz: Multiple products affected by uC/HTTP vulnerability 2024-02-06T07:00:00.000Z 2024-02-06T07:00:00.000Z
vde-2023-059 Pilz: Electron Vulnerabilities in PASvisu and PMI v8xx 2023-12-05T07:06:00.000Z 2023-12-05T07:06:00.000Z
vde-2022-033 Pilz: PASvisu and PMI affected by multiple vulnerabilities 2022-11-24T09:00:00.000Z 2022-11-24T09:00:00.000Z
vde-2021-061 Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities 2022-04-26T10:00:00.000Z 2022-04-26T10:00:00.000Z
vde-2021-055 Pilz: PMC programming tool 2.x.x affected by multiple vulnerabilities 2022-04-26T10:00:00.000Z 2022-04-26T10:00:00.000Z
vde-2021-054 Pilz: Multiple vulnerabilities in CODESYS V2 and V3 runtime system 2022-04-26T10:00:00.000Z 2022-04-26T10:00:00.000Z
ID Description Published Updated
vde-2024-008 Wago: Vulnerability in WBM through Open VPN 2026-04-08T07:00:00.000Z 2026-04-08T07:00:00.000Z
vde-2026-021 WAGO: Multiple Vulnerabilities in WAGO VC Hub 2026-03-30T07:00:00.000Z 2026-03-30T07:00:00.000Z
vde-2026-010 WAGO: Multiple Vulnerabilities in WAGO Solution Builder and WAGO Device Sphere 2026-03-30T07:00:00.000Z 2026-03-30T07:00:00.000Z
vde-2026-020 WAGO: Vulnerability in managed switches 2026-03-23T08:00:00.000Z 2026-03-23T08:00:00.000Z
vde-2026-004 WAGO: Vulnerabilities in Managed Switch 2026-02-09T08:00:00.000Z 2026-02-09T08:00:00.000Z
vde-2025-095 WAGO: Vulnerabilities in WAGO Industrial-Managed Switches 2025-12-10T10:00:00.000Z 2026-01-19T08:00:00.000Z
vde-2025-018 WAGO: Vulnerabilities in WAGO Device Manager 2025-06-16T10:00:00.000Z 2025-11-21T12:00:00.000Z
vde-2025-062 WAGO: Multiple Vulnerabilities in CODESYS components 2025-11-03T11:00:00.000Z 2025-11-03T11:00:00.000Z
vde-2025-087 WAGO: Vulnerabilities in Device Sphere and Solution Builder 2025-09-24T09:00:00.000Z 2025-09-24T09:00:00.000Z
vde-2018-013 WAGO: 750-8xx Controller Denial of Service 2018-08-17T09:45:00.000Z 2025-09-22T10:00:00.000Z
vde-2025-083 WAGO: Vulnerability in hardware switch circuit 2025-09-15T08:00:00.000Z 2025-09-15T08:00:00.000Z
vde-2025-080 WAGO: Multiple Vulnerabilities in I/O-Check Service 2025-09-09T10:00:00.000Z 2025-09-09T10:00:00.000Z
vde-2025-082 WAGO: Critical sudo Vulnerability in Multiple Products 2025-09-08T07:00:00.000Z 2025-09-08T07:00:00.000Z
vde-2025-048 WAGO: Escalation of Privileges in Coupler Firmware 2025-09-08T07:00:00.000Z 2025-09-08T07:00:00.000Z
vde-2025-057 WAGO: Vulnerability in WAGO Device Sphere 2025-06-23T10:00:00.000Z 2025-07-07T06:15:00.000Z
vde-2025-040 WAGO: Vulnerabilities in ctrlX OS app 2025-06-16T10:00:00.000Z 2025-06-16T10:00:00.000Z
vde-2024-014 WAGO: Multiple products affected by Terrapin 2024-02-22T07:00:00.000Z 2025-06-05T13:28:13.000Z
vde-2025-020 WAGO: Switches affected by year 2k38 problem 2025-06-02T06:00:00.000Z 2025-06-02T06:00:00.000Z
vde-2024-047 WAGO: Multiple vulnerabilities in docker configuration 2024-11-18T11:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-026 WAGO: Multiple products prone to multiple vulnerabilities in e!Runtime / CODESYS V3 Runtime 2023-07-31T07:36:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-007 WAGO: Unauthenticated command execution via Web-based-management UPDATE A 2023-05-15T08:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2022-009 WAGO: Multiple Products affected by Linux Kernel Vulnerability Dirty Pipe 2022-04-06T07:30:00.000Z 2025-05-22T13:03:10.000Z
vde-2022-002 WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro 2022-01-31T13:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2021-060 WAGO: Smart Script affected by Log4Shell Vulnerability 2022-01-05T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2021-049 WAGO: Denial of Service Vulnerability in CODESYS Runtime 2.3 2021-11-16T12:05:00.000Z 2025-05-22T13:03:10.000Z
vde-2021-014 WAGO: Multiple Vulnerabilities in CODESYS Runtime 2.3 2021-05-20T09:08:00.000Z 2025-05-22T13:03:10.000Z
vde-2020-011 WAGO: Multiple Vulnerabilities in I/O-Check Service 2020-03-09T09:30:00.000Z 2025-05-22T13:03:10.000Z
vde-2020-009 WAGO: e!Cockpit Two Update Package Vulnerabilities 2020-03-09T09:18:00.000Z 2025-05-22T13:03:10.000Z
vde-2018-010 WAGO: Multiple vulnerabilities in e!DISPLAY products 2018-07-10T09:50:00.000Z 2025-05-22T13:03:10.000Z
vde-2025-008 WAGO: Vulnerabilities in CODESYS Control 2025-02-04T11:00:00.000Z 2025-05-14T13:00:15.000Z
ID Description Published Updated
vde-2024-061 ifm: Improper Access Control vulnerability 2025-06-30T10:00:00.000Z 2026-02-18T08:00:00.000Z
vde-2024-028 ifm moneo password reset can be exploited 2024-05-06T10:00:00.000Z 2026-01-15T11:00:00.000Z
vde-2024-012 ifm: Vulnerabilities in ifm AC14 firmware 2024-07-09T07:00:00.000Z 2026-01-15T11:00:00.000Z
vde-2022-050 IFM: weak password recovery vulnerability in moneo appliance 2022-12-12T11:00:00.000Z 2026-01-06T11:00:00.000Z
ID Description Published Updated
vde-2025-106 Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server 2026-01-26T10:00:00.000Z 2026-02-12T09:00:00.000Z
vde-2025-092 Beckhoff: Privilege escalation and information leak via Beckhoff Device Manager 2026-01-27T11:00:00.000Z 2026-01-27T11:00:00.000Z
vde-2025-075 Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering 2025-09-09T10:00:00.000Z 2025-09-09T10:00:00.000Z
vde-2022-003 BECKHOFF: Null Pointer Dereference vulnerability in products with OPC UA technology 2022-03-01T12:34:00.000Z 2025-06-05T13:28:13.000Z
vde-2024-050 Beckhoff: Denial-of-Service vulnerability in the MDP package included in TwinCAT/BSD operating system 2024-08-27T08:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2024-049 Beckhoff: Denial-of-Service vulnerability in the IPC-Diagnostics package included in TwinCAT/BSD operating system 2024-08-27T08:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2024-048 Beckhoff: Improper neutralization of input in IPC-Diagnostics-www package included in TwinCAT/BSD operating system 2024-08-27T08:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2024-045 Beckhoff: Local authentication bypass in IPC-Diagnostics package included in TwinCAT/BSD operating system 2024-08-27T08:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2023-067 Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf 2023-12-13T08:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2021-051 Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server 2021-11-04T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2021-008 Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products 2024-10-21T08:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2020-037 Beckhoff: Privilege Escalation through TwinCat System Tray (TcSysUI.exe) 2020-11-19T13:41:00.000Z 2025-05-22T13:03:10.000Z
vde-2020-019 Beckhoff: EtherLeak in TwinCAT RT network driver 2020-06-16T08:31:00.000Z 2025-05-22T13:03:10.000Z
vde-2020-005 Beckhoff: BK9000 couplers - Denial of service inhibits function 2020-03-10T13:17:00.000Z 2025-05-22T13:03:10.000Z
vde-2019-019 Beckhoff: TwinCAT Denial-of-Service in Profinet driver 2019-10-09T10:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2024-064 Beckhoff: Local command injection via TwinCAT Package Manager 2024-10-31T11:00:00.000Z 2025-04-11T07:00:00.000Z
vde-2020-051 Beckhoff: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server 2021-04-27T08:08:00.000Z 2021-05-11T10:00:00.000Z
ID Description Published Updated
vde-2026-007 TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability 2026-02-23T08:00:00.000Z 2026-02-23T08:00:00.000Z
vde-2021-011 TRUMPF Laser GmbH: TruControl 2.14.0 to 3.14.0 affected by recent sudo vulnerability 2021-03-22T08:59:00.000Z 2026-02-02T14:25:00.000Z
vde-2025-078 TRUMPF: Remote support uses an outdated encryption algorithm 2025-08-25T06:00:00.000Z 2025-08-29T10:00:00.000Z
vde-2024-005 TRUMPF: Multiple products contain vulnerable version of 7-zip 2024-01-23T07:00:00.000Z 2025-06-05T13:28:12.000Z
vde-2024-004 TRUMPF: Multiple products affected by log4net vulnerability 2025-04-22T10:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2024-003 TRUMPF: Multiple products include a vulnerable version of Notepad++ 2024-01-23T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2022-049 TRUMPF: Multiple products prone to X.Org server vulnerabilities 2022-11-07T11:43:00.000Z 2025-05-22T13:03:10.000Z
vde-2020-039 TRUMPF: Multiple products prone to WIBU CodeMeter vulnerabilities 2020-10-27T10:28:00.000Z 2025-05-14T12:36:39.000Z
vde-2024-040 Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerabilities 2024-06-25T10:00:00.000Z 2025-04-10T13:00:00.000Z
vde-2024-034 Multiple TRUMPF products prone to nftables server vulnerabilities 2024-06-25T10:00:00.000Z 2025-04-10T13:00:00.000Z
vde-2024-001 TRUMPF: Multiple products contain WIBU CodeMeter vulnerabilities 2024-01-29T07:00:00.000Z 2024-01-29T07:00:00.000Z
vde-2024-006 TRUMPF: Oseon contains vulnerable version of OpenSSL 1.1.x 2024-01-23T07:00:00.000Z 2024-01-23T07:00:00.000Z
vde-2023-031 Trumpf: Multiple Products affected by WIBU Codemeter Vulnerability 2023-09-13T10:00:00.000Z 2023-11-13T11:00:00.000Z
vde-2022-023 TRUMPF TruTops prone to improper access control 2022-10-17T10:00:00.000Z 2022-10-17T10:00:00.000Z
vde-2022-034 TRUMPF: Products prone to Unified Automation vulnerabilities 2022-08-15T10:00:00.000Z 2022-08-15T10:00:00.000Z
vde-2022-016 TRUMPF: TruTops Fab, TruTops Boost prone to vulnerability 2022-05-02T10:00:00.000Z 2022-05-02T10:00:00.000Z
vde-2021-033 TRUMPF Laser GmbH: multiple products prone to codesys runtime vulnerabilities 2021-08-12T13:02:00.001Z 2021-08-12T13:02:00.001Z
ID Description Published Updated
vde-2025-043 Lenze: PLC Designer V4 with insecure storage of sensitive information 2025-06-25T10:00:00.000Z 2025-06-25T10:00:00.000Z
vde-2025-042 Lenze: VPN Client Privilege Escalation in combination with Lenze x500 IoT Gateway 2025-05-27T09:00:00.000Z 2025-05-27T09:00:00.000Z
vde-2024-053 Lenze: Install Directory with insufficient permissions 2024-09-03T08:00:00.000Z 2025-03-13T11:30:00.000Z
vde-2022-030 Lenze: Vulnerability in the OPC-UA authentification connection in the firmware 2022-07-11T10:00:00.000Z 2022-07-11T10:00:00.000Z
vde-2021-048 Lenze: Multiple Vulnerabilities in CODESYS Control V2 communication 2021-10-04T12:33:00.000Z 2021-10-04T12:33:00.000Z
ID Description Published Updated
vde-2022-029 Carlo Gavazzi Controls: Multiple Vulnerabilities in Controller UWP 3.0 2022-09-26T08:00:00.000Z 2026-03-02T11:00:00.000Z
ID Description Published Updated
vde-2025-047 AUMA: Incorrect delivery status of the Bluetooth configuration 2025-06-10T10:00:00.000Z 2025-06-10T10:00:00.000Z
vde-2023-028 AUMA: SIMA Master Station affected by WRECK vulnerability 2023-08-07T11:35:00.000Z 2025-05-14T13:00:15.000Z
vde-2022-024 Auma: SIMA² Master Station Denial of Service Vulnerability on Automation Runtime Webserver 2022-06-15T10:00:00.000Z 2025-05-14T13:00:15.000Z
vde-2025-026 AUMA Riester: Buffer overflow in service telegram 2025-05-12T10:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2023-027 AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations 2023-08-07T09:35:00.000Z 2023-08-07T09:35:00.000Z
vde-2022-032 AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service 2022-08-09T08:00:00.000Z 2022-08-09T08:00:00.000Z
ID Description Published Updated
vde-2025-084 Bender Charge Controller Vulnerability - Unsecure Communication 2025-09-08T07:00:00.000Z 2025-09-08T07:00:00.000Z
vde-2025-061 Bender Charge Controller Vulnerability - Disclosure Of Stored Credentials When Authenticated 2025-09-08T07:00:00.000Z 2025-09-08T07:00:00.000Z
vde-2021-047 Bender/ebee: Multiple Charge Controller Vulnerabilities 2022-04-26T10:00:00.000Z 2022-04-26T10:00:00.000Z
vde-2020-043 Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vulnerability 2020-10-16T06:54:00.000Z 2020-10-16T06:54:00.000Z
ID Description Published Updated
vde-2026-032 Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW 2026-04-21T07:00:00.000Z 2026-04-21T07:00:00.000Z
vde-2025-107 Endress+Hauser: Multiple products affected by Qualcomm vulnerabilities 2025-12-05T11:00:00.000Z 2026-04-02T10:00:00.000Z
vde-2026-003 Endress+Hauser: Multiple products prone to multiple vulnerabilities in e!Runtime and CODESYS V3 Runtime 2026-03-31T08:00:00.000Z 2026-04-01T11:00:00.000Z
vde-2026-002 Endress+Hauser: buffer overflow in glibc ld.so leading to privilege escalation 2026-03-02T07:00:00.000Z 2026-03-02T07:00:00.000Z
vde-2025-068 Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions 2025-09-02T10:00:00.000Z 2026-02-20T09:00:00.000Z
vde-2025-105 Endress+Hauser: Multiple products affected by Wibu-Systems CodeMeter Vulnerability 2025-12-08T09:00:00.000Z 2025-12-08T09:00:00.000Z
vde-2024-054 Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities 2024-10-21T08:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2021-044 Endress+Hauser: Multiple products affected by log4net vulnerability 2022-01-20T08:06:00.000Z 2025-05-14T13:00:14.000Z
vde-2021-005 Endress+Hauser: Multiple Devices affected by fdtContainer vulnerability 2021-03-01T06:39:00.000Z 2025-05-14T13:00:14.000Z
vde-2020-031 Endress+Hauser: Multiple products prone to WIBU CodeMeter vulnerabilities 2020-10-27T13:10:00.000Z 2025-05-14T13:00:14.000Z
vde-2020-022 Endress+Hauser: Ecograph T utilizing Webserver firmware version 2.x exposes sensitive information 2020-11-19T14:48:00.000Z 2025-05-14T13:00:14.000Z
vde-2021-040 Endress+Hauser: Promass 83 with EtherNet/IP affected by a stack-based buffer overflow 2021-10-04T12:30:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-010 Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks 2021-05-18T09:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2020-021 Endress+Hauser: Ecograph T utilizing Webserver firmware version 1.x suffers from improper privilege management 2020-11-19T14:48:00.000Z 2025-04-11T07:00:00.000Z
vde-2025-036 Multiple vulnerabilities in Endress+Hauser MEAC300-FNADE4 2025-03-06T14:00:00.000Z 2025-03-06T14:00:00.000Z
vde-2024-041 Endress+Hauser: Multiple products are vulnerable to code injection 2024-09-10T08:00:00.000Z 2024-09-10T08:00:00.000Z
vde-2022-019 Endress+Hauser: Multiple products utilizing vulnerable WIBU-SYSTEMS CodeMeter components 2022-06-02T15:11:00.000Z 2022-06-02T15:11:00.000Z
vde-2022-006 Endress+Hauser: FieldPort SFP50 Memory Corruption in Bluetooth Controller Firmware 2022-03-24T10:48:00.000Z 2022-03-24T10:48:00.000Z
vde-2019-005 Endress+Hauser: WIFI enabled products utilising WPA2 2019-03-19T15:34:00.000Z 2019-03-19T15:34:00.000Z
ID Description Published Updated
vde-2025-030 Frauscher: FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi are Vulnerable to OS Command Injection Vulnerability 2025-07-07T10:00:00.000Z 2025-07-29T10:00:00.000Z
vde-2023-049 Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability 2023-12-11T07:00:00.000Z 2023-12-11T07:00:00.000Z
vde-2023-038 Frauscher: Multiple Vulnerabilities in FDS101 2023-09-21T06:00:00.000Z 2023-09-21T06:00:00.000Z
vde-2023-011 Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability 2023-07-05T08:00:00.000Z 2023-07-05T08:00:00.000Z
ID Description Published Updated
vde-2019-010 Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway 2019-05-20T06:58:00.000Z 2025-05-14T13:00:15.000Z
vde-2020-024 Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communication Module XKM3000 L MED 2020-07-08T07:29:00.000Z 2025-05-14T12:28:19.000Z
vde-2022-052 Miele: Vulnerability in ease2pay cloud service used by appWash 2022-11-21T09:00:00.000Z 2022-11-21T09:00:00.000Z
vde-2022-015 Miele: Security vulnerability in Benchmark Programming Tool 2022-04-27T12:00:00.000Z 2022-04-27T12:00:00.000Z
ID Description Published Updated
vde-2025-096 Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Energy Meter 750-230 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
vde-2025-044 Weidmueller: Industrial ethernet switches are affected by multiple vulnerabilities 2025-05-27T09:00:00.000Z 2025-08-27T10:00:00.000Z
vde-2025-052 Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities 2025-06-11T10:00:00.000Z 2025-07-23T10:00:00.000Z
vde-2023-032 Weidmueller: WIBU Vulnerability in multiple Products 2023-11-09T07:42:00.000Z 2025-05-22T13:03:10.000Z
vde-2019-018 Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches 2019-12-05T12:03:00.000Z 2025-05-22T13:03:10.000Z
vde-2025-041 Weidmueller: ResMa is affected by a Vulnerability for ASP.NET AJAX 2025-05-19T09:00:00.000Z 2025-05-19T09:00:00.000Z
vde-2025-021 Weidmueller: Authentication Vulnerability in PROCON-WIN 5 2025-03-05T09:00:00.000Z 2025-05-14T13:26:53.000Z
vde-2021-026 Weidmueller: Multiple vulnerabilities in Industrial WLAN devices 2021-06-23T11:04:00.000Z 2025-05-14T13:00:15.000Z
vde-2021-042 Weidmueller: Remote I/O fieldbus couplers (IP20) affected by INFRA:HALT vulnerabilities 2021-10-18T08:24:00.000Z 2025-05-14T13:00:14.000Z
vde-2021-016 Weidmueller: Accidentally open network port in u-controls and IoT-Gateways 2021-05-04T08:17:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-002 Weidmueller: WI Manager affected by fdtContainer vulnerability 2021-01-20T13:32:00.000Z 2025-05-14T12:28:19.000Z
vde-2020-041 Weidmueller: u-create studio < 1.20.2 affected by WIBU-SYSTEMS CodeMeter vulnerabilities 2020-10-12T09:14:00.000Z 2025-05-14T12:28:19.000Z
vde-2025-023 Weidmueller: OpenSSL vulnerability in industrial ethernet switches 2025-03-05T08:00:00.000Z 2025-03-05T11:00:00.000Z
vde-2022-056 Weidmueller: Multiple IoT and control products affected by JavaScript injection vulnerability 2022-12-14T07:00:00.000Z 2022-12-14T07:00:00.000Z
vde-2021-004 Weidmueller: EtherNet/IP Fieldbus Coupler out-of-bounds write 2022-06-21T08:00:00.000Z 2022-06-21T08:00:00.000Z
vde-2022-008 WEIDMUELLER: Multiple vulnerabilities in Modbus TCP/RTU Gateways 2022-04-07T06:00:00.000Z 2022-04-07T06:00:00.000Z
ID Description Published Updated
vde-2025-066 SMA: Directory Traversal in Sunny Boy 2025-08-27T08:00:00.000Z 2025-08-27T08:00:00.000Z
vde-2025-050 SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user 2025-08-19T10:00:00.000Z 2025-08-19T10:00:00.000Z
vde-2024-075 SMA: Sunny Webbox clickjacking vulnerability 2025-01-27T13:00:00.000Z 2025-06-17T06:00:00.000Z
vde-2025-012 SMA: Sunny Portal Remote Code Execution 2025-02-26T11:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2025-010 SMA: Sunny Portal demo system privilege escalation 2025-05-13T11:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2024-074 SMA: SQL injection in Sunny Central UP 2024-11-27T09:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2024-020 SMA: Cluster Controller CSRF vulnerability 2025-01-27T13:00:00.000Z 2025-02-12T16:48:47.000Z
ID Description Published Updated
vde-2024-013 HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing 2024-02-13T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2022-059 HIMA: unquoted path vulnerabilities in X-OPC and X-OTS 2023-01-16T09:00:00.000Z 2025-05-22T13:03:10.000Z
ID Description Published Updated
vde-2025-091 Murrelektronik: Cleartext Transmission of Sensitive Information in IMPACT67 Pro 2025-10-14T10:00:00.000Z 2025-10-14T10:00:00.000Z
ID Description Published Updated
vde-2020-016 SWARCO: Critical Vulnerability in CPU LS4000 2020-05-28T13:00:00.000Z 2020-05-28T13:00:00.000Z
ID Description Published Updated
vde-2024-016 ADS-TEC Industrial IT: Docker vulnerability affects multiple products 2024-02-19T07:00:00.000Z 2025-05-22T13:03:10.000Z
vde-2025-033 ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC IRF Products 2025-04-14T10:00:00.000Z 2025-04-14T10:00:00.000Z
vde-2023-009 ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000 2023-05-08T13:37:00.000Z 2023-05-08T13:37:00.000Z
ID Description Published Updated
vde-2022-061 VARTA: Multiple devices prone to hard-coded credentials 2023-03-15T09:00:00.000Z 2023-03-15T09:00:00.000Z
ID Description Published Updated
vde-2025-060 Sauter: Multiple vulnerabilities in SAUTER modulo 6 2025-10-21T10:00:00.000Z 2025-10-27T11:00:00.000Z
ID Description Published Updated
vde-2025-079 Janitza: Multiple vulnerabilities in UMG 96RM-E 2026-03-10T07:00:00.000Z 2026-03-10T07:00:00.000Z
vde-2025-094 Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+ 2025-11-24T12:00:00.000Z 2025-11-24T12:00:00.000Z
ID Description Published Updated
vde-2026-029 METTLER TOLEDO: OpenSSL vulnerability in MX and MR balances 2026-04-23T10:00:00.000Z 2026-04-23T10:00:00.000Z
vde-2026-001 METTLER TOLEDO: ASP.NET core vulnerability in LabX 2026-03-04T07:00:00.000Z 2026-03-04T07:00:00.000Z
ID CVSS Description Vendor Product Published Updated
GCVE-1-2026-0025
6.9 (4.0)
RansomLook - Improper Filtering of Private Location En… ransomlook
 ransomlook
 2026-04-12T15:22:00.000Z 2026-04-15T20:29:51.794609Z
GCVE-1-2026-0024
8.8 (4.0)
LDAP injection in MISP ApacheAuthenticate when using a… misp
 misp
 2026-04-08T08:28:00.000Z 2026-04-09T04:44:04.936665Z
GCVE-1-2026-0023
8.5 (4.0)
Stored XSS in modal item preview for long item content… ail-project
 ail-framework
 2026-04-07T06:29:00.000Z 2026-04-08T04:22:15.084342Z
GCVE-1-2026-0022
6.4 (4.0)
MISP - Beta Overmind UI Stored Cross-Site Scripting in… misp
 misp
 2026-03-30T09:48:36.968649Z 2026-03-30T09:48:36.968649Z
GCVE-1-2026-0021
10 (4.0)
Critical RCE Vulnerability reported in Windchill windchill
 FlexPLM
 2026-03-23T12:30:40.249187Z 2026-03-23T12:30:40.249187Z
GCVE-1-2026-0020
10 (4.0)
Remote Code Execution Attack Against Eircom D1000 Router Eir
 D1000
 2026-03-11T14:12:00.000Z 2026-03-11T14:23:24.609831Z
GCVE-1-2026-0019
6.4 (4.0)
Improper URL validation in MISP dashboard button widge… misp
 misp
 2026-02-27T14:55:00.000Z 2026-02-27T15:44:29.998063Z
GCVE-1-2026-0018
6.5 (4.0)
Improper access control in MISP user contact form allo… misp
 misp
 2026-02-27T13:25:32.632362Z 2026-02-27T13:25:32.632362Z
GCVE-1-2026-0017
7.2 (4.0)
Improper Neutralization of Raw HTML in MISP modules Ma… misp
 misp-modules
 2026-02-27T13:10:24.641948Z 2026-02-27T13:10:24.641948Z
GCVE-1-2026-0016
7 (4.0)
Server-Side Request Forgery via Event Report Import Fr… misp
 misp
 2026-02-27T10:56:32.745676Z 2026-02-27T10:56:32.745676Z
GCVE-1-2026-0015
7.2 (4.0)
Threat actors use FortiCloud SSO bypass to collect LDA… fortinet
 fortios
 2026-02-09T09:09:00.000Z 2026-02-09T09:14:59.004089Z
GCVE-1-2026-0014
7.4 (4.0)
Missing Authorization Check Allows Unauthorized Modifi… vulnerability-lookup
 vulnerability-lookup
 2026-02-04T19:32:14.341383Z 2026-02-04T19:32:14.341383Z
GCVE-1-2026-0013
2.1 (4.0)
Flask Application Username Route Collision Allows Rese… vulnerability-lookup
 vulnerability-lookup
 2026-02-04T19:27:00.000Z 2026-02-04T19:32:49.787763Z
GCVE-1-2026-0012
2.1 (4.0)
Authentication Error Message Allows Email Address Enum… vulnerability-lookup
 vulnerability-lookup
 2026-02-04T19:21:34.411344Z 2026-02-04T19:21:34.411344Z
GCVE-1-2026-0011
8.7 (4.0)
Out-of-bounds memory write in the network packet … EA Games
 Command & Conquer: Generals
 2026-01-29T14:37:00.000Z 2026-01-29T14:39:17.728822Z
GCVE-1-2026-0010
9.3 (4.0)
Improper input validation in the file transfer ha… EA Games
 Command & Conquer: Generals
 2026-01-29T14:33:18.822829Z 2026-01-29T14:33:18.822829Z
GCVE-1-2026-0009
9.3 (4.0)
Stack-based buffer overflow in the multiplayer ne… EA Games
 Command & Conquer: Generals
 2026-01-29T14:30:38.596928Z 2026-01-29T14:30:38.596928Z
GCVE-1-2026-0008
10 (4.0)
gpg-agent stack buffer overflow in pkdecrypt using KEM gnupg
 gpg-agent
 2026-01-28T13:48:12.350509Z 2026-01-28T13:48:12.350509Z
GCVE-1-2026-0007
10 (4.0)
GNU InetUtils Security Advisory: remote authentication… gnu
 InetUtils
 2026-01-20T20:57:00.000Z 2026-01-26T16:32:40.831364Z
GCVE-1-2026-0006
8.5 (4.0)
Improper Access Control in Cerebrate AuthKey and Encry… cerebrate
 cerebrate
 2026-01-13T15:37:17.337254Z 2026-01-13T15:37:17.337254Z
GCVE-1-2026-0005
8.5 (4.0)
Improper Access Control in Cerebrate Alignment Model A… cerebrate
 cerebrate
 2026-01-13T15:31:00.000Z 2026-01-13T15:38:02.888546Z
GCVE-1-2026-0004
8.5 (4.0)
Authorization Bypass in Cerebrate IndividualsControlle… cerebrate
 cerebrate
 2026-01-13T15:28:00.000Z 2026-01-13T15:38:37.744618Z
GCVE-1-2026-0003
6.3 (4.0)
Stored/Reflected XSS via Unsanitized Parameters in URL… misp
 misp
 2026-01-13T10:50:00.000Z 2026-01-13T10:54:13.659223Z
GCVE-1-2026-0002
10 (4.0)
Heap-buffer-overflow in EXIF writer for extra IFD tags ffmpeg
 ffmpeg
 2026-01-02T19:50:00.000Z 2026-01-02T20:05:27.269877Z
GCVE-1-2026-0001
N/A
Bundle reference to gpg.fail gnupg
 gnupg
 2026-01-02T10:20:00.000Z 2026-01-02T13:31:14.359346Z
GCVE-1-2025-0041
6.4 (4.0)
[online services] Reflected Cross-Site Scripting (XSS)… typo3
 typo3
 2025-12-19T14:25:00.000Z 2025-12-19T14:54:51.594645Z
GCVE-1-2025-0031
7.1 (4.0)
A cross-site scripting (XSS) vulnerability was identif… misp
 misp
 2025-12-03T10:58:00.000Z 2025-12-16T09:36:09.594750Z
GCVE-1-2025-0040
7.2 (4.0)
A cross-site scripting (XSS) vulnerability was id… misp
 misp
 2025-12-13T08:44:32.378924Z 2025-12-13T08:44:32.378924Z
GCVE-1-2025-0039
8.5 (4.0)
XSS Reintroduced in MISP Dashboard World Map Widget Du… misp
 misp
 2025-12-10T14:33:52.856734Z 2025-12-10T14:33:52.856734Z
GCVE-1-2025-0038
5 (4.0)
Reflected XSS in MISP Template Tag Removal and MISP Ad… misp
 misp
 2025-12-10T14:10:00.000Z 2025-12-10T14:16:55.918270Z
ID CVSS Description Vendor Product Published Updated
GCVE-1337-2026-00000000000000000000000000000000000000000000000001011111111111000111111110000000000000000000000000000000000000000000000000000000110
8.8 (3.1)
NSA Ghidra Auto-Analysis Annotation Command Execution NSA
 Ghidra
 2026-03-29T19:35:30.692Z 2026-03-29T19:35:30.692Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011
9.1 (3.1)
HexStrike AI MCP Server Command Injection 0x4m4
 HexStrike AI
 2025-11-30T21:27:56.057Z 2025-11-30T21:27:56.057Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111111111011111111110000000000000000000000000000000000000000000000000000000100
6.5 (3.1)
Abilis CPX Fallback Shell Connection Relay Abilis
 CPX
 2025-11-04T00:23:23.924Z 2025-11-04T00:23:23.924Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011011111110011111111110000000000000000000000000000000000000000000000000000000010
7.3 (3.1)
Unitree Multiple Robotic Products Command Injection Unitree
 Go2
 2025-09-26T06:53:49.585Z 2025-09-26T15:16:57.586Z
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001
4.3 (3.1)
Unauthenticated leak of sensitive information affectin… Brother Industries, Ltd
 HL-L8260CDN
 2025-08-12T15:23:00.577Z 2025-08-15T05:53:23.017Z