Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2019-25377 |
4.8 (4.0)
5.4 (3.1)
|
OPNsense 19.1 Reflected XSS via system_advanced_sysctl.php |
Opnsense |
OPNsense |
2026-02-15T13:58:58.193Z | 2026-02-17T16:51:41.154Z |
| CVE-2026-26366 |
9.3 (4.0)
9.8 (3.1)
|
JUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default… |
JUNG |
eNet SMART HOME server |
2026-02-15T15:29:53.866Z | 2026-02-17T16:51:25.025Z |
| CVE-2026-26367 |
7.1 (4.0)
6.5 (3.1)
|
JUNG eNet SMART HOME server 2.2.1/2.3.1 Arbitrary User… |
JUNG |
eNet SMART HOME server |
2026-02-15T15:29:54.646Z | 2026-02-17T16:50:52.127Z |
| CVE-2026-26368 |
8.7 (4.0)
8.8 (3.1)
|
JUNG eNet SMART HOME server 2.2.1/2.3.1 Account Takeov… |
JUNG |
eNet SMART HOME server |
2026-02-15T15:29:55.403Z | 2026-02-17T16:50:34.868Z |
| CVE-2026-26369 |
9.3 (4.0)
9.8 (3.1)
|
JUNG eNet SMART HOME server 2.2.1/2.3.1 Privilege Esca… |
JUNG |
eNet SMART HOME server |
2026-02-15T15:29:56.204Z | 2026-02-17T16:50:04.129Z |
| CVE-2019-25378 |
5.1 (4.0)
6.1 (3.1)
|
Smoothwall Express 3.1 'proxy.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:04:53.222Z | 2026-02-17T16:49:43.661Z |
| CVE-2019-25379 |
5.3 (4.0)
7.2 (3.1)
|
Smoothwall Express 3.1 'urlfilter.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:04:54.146Z | 2026-02-17T16:49:23.149Z |
| CVE-2019-25380 |
5.1 (4.0)
6.1 (3.1)
|
Smoothwall Express 3.1 'dhcp.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:04:54.998Z | 2026-02-17T16:48:57.484Z |
| CVE-2019-25381 |
5.1 (4.0)
6.1 (3.1)
|
Smoothwall Express 3.1 'hosts.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:04:55.894Z | 2026-02-17T16:48:42.411Z |
| CVE-2019-25382 |
5.1 (4.0)
6.1 (3.1)
|
Smoothwall Express 3.1 'time.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:04:56.674Z | 2026-02-17T16:46:04.978Z |
| CVE-2019-25383 |
5.1 (4.0)
6.1 (3.1)
|
Smoothwall Express 3.1 'apcupsd.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:04:57.460Z | 2026-02-17T16:45:38.976Z |
| CVE-2019-25384 |
5.1 (4.0)
6.1 (3.1)
|
Smoothwall Express 3.1 'portfw.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:04:58.295Z | 2026-02-17T16:45:24.262Z |
| CVE-2019-25392 |
5.1 (4.0)
6.1 (3.1)
|
Smoothwall Express 3.1 'iptools.cgi' Cross-Site Scripting |
Smoothwall |
Smoothwall Express |
2026-02-16T17:05:05.287Z | 2026-02-17T16:45:08.369Z |
| CVE-2025-59905 |
4.8 (4.0)
|
Reflected Cross-Site Scripting (XSS) in Kubysoft |
Kubysoft |
Kubysoft |
2026-02-16T09:49:45.219Z | 2026-02-17T16:44:06.603Z |
| CVE-2026-2577 |
10 (3.1)
|
Nanobot Unauthenticated WhatsApp Session Hijack via We… |
HKUDS |
nanobot |
2026-02-16T09:51:11.375Z | 2026-02-17T16:43:29.855Z |
| CVE-2025-65924 |
4.1 (3.1)
|
ERPNext thru 15.88.1 does not sanitize or remove … |
n/a |
n/a |
2026-02-03T00:00:00.000Z | 2026-02-17T16:42:43.134Z |
| CVE-2026-2552 |
5.1 (4.0)
5.5 (3.1)
5.5 (3.0)
|
ZenTao Editor control.php delete path traversal |
n/a |
ZenTao |
2026-02-16T11:02:05.938Z | 2026-02-17T16:41:38.415Z |
| CVE-2026-2553 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
tushar-2223 Hotel-Management-System HTTP POST Request … |
tushar-2223 |
Hotel-Management-System |
2026-02-16T11:32:06.780Z | 2026-02-17T16:37:22.685Z |
| CVE-2026-2557 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
cskefu File Upload MediaController.java upload cross s… |
n/a |
cskefu |
2026-02-16T13:02:39.281Z | 2026-02-17T16:34:54.871Z |
| CVE-2026-2534 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Comfast CF-N1 V2 mbox-config sub_44AC4C command injection |
Comfast |
CF-N1 V2 |
2026-02-16T04:02:06.616Z | 2026-02-17T16:34:08.793Z |
| CVE-2026-2533 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Tosei Self-service Washing Machine tosei_datasend.php … |
Tosei |
Self-service Washing Machine |
2026-02-16T03:32:08.901Z | 2026-02-17T16:33:25.494Z |
| CVE-2026-24858 |
9.4 (3.1)
|
An Authentication Bypass Using an Alternate Path … |
Fortinet |
FortiManager |
2026-01-27T19:18:23.591Z | 2026-02-17T16:33:19.415Z |
| CVE-2026-25922 |
8.8 (3.1)
|
authentik has a Signature Verification Bypass via SAML… |
goauthentik |
authentik |
2026-02-12T19:38:16.850Z | 2026-02-17T16:19:14.739Z |
| CVE-2025-70397 |
8.8 (3.1)
|
jizhicms 2.5.6 is vulnerable to SQL Injection in … |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T16:17:46.850Z |
| CVE-2022-41650 |
6.5 (3.1)
|
WordPress Custom Content by Country plugin <= 3.1.2 - … |
Paul |
Custom Content by Country (by Shield Security) |
2026-02-17T14:56:33.641Z | 2026-02-17T16:10:57.039Z |
| CVE-2026-2532 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
lintsinghua DeepAudit IP Address embedding_config.py s… |
lintsinghua |
DeepAudit |
2026-02-16T03:02:09.038Z | 2026-02-17T16:05:06.408Z |
| CVE-2025-70828 |
8.8 (3.1)
|
An issue in Datart v1.0.0-rc.3 allows attackers t… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T15:59:06.768Z |
| CVE-2026-2556 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
cskefu Endpoint MediaController.java server-side reque… |
n/a |
cskefu |
2026-02-16T12:32:39.941Z | 2026-02-17T15:55:09.349Z |
| CVE-2025-70830 |
9.9 (3.1)
|
A Server-Side Template Injection (SSTI) vulnerabi… |
n/a |
n/a |
2026-02-17T00:00:00.000Z | 2026-02-17T15:54:28.629Z |
| CVE-2026-2555 |
2.3 (4.0)
5 (3.1)
5 (3.0)
|
JeecgBoot Retrieval-Augmented Generation AiragKnowledg… |
n/a |
JeecgBoot |
2026-02-16T12:02:07.302Z | 2026-02-17T15:54:22.780Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25478 |
7.4 (3.1)
|
Litestar has a CORS origin allowlist bypass due to une… |
litestar-org |
litestar |
2026-02-09T18:46:56.445Z | 2026-02-10T16:01:16.807Z |
| CVE-2026-24324 |
6.5 (3.1)
|
Denial of service (DOS) vulnerability in SAP BusinessO… |
SAP_SE |
SAP BusinessObjects Business Intelligence Platform (AdminTools) |
2026-02-10T03:04:21.162Z | 2026-02-10T16:17:50.858Z |
| CVE-2026-24325 |
4.8 (3.1)
|
Cross Site Scripting (XSS) vulnerability in SAP Busine… |
SAP_SE |
SAP BusinessObjects Enterprise (Central Management Console) |
2026-02-10T03:04:30.133Z | 2026-02-10T16:16:25.107Z |
| CVE-2025-64781 |
4.7 (3.0)
5.1 (4.0)
|
In GroupSession Free edition prior to ver5.7.1, G… |
Japan Total System Co.,Ltd. |
GroupSession Free edition |
2025-12-12T05:02:58.824Z | 2025-12-12T20:26:03.855Z |
| CVE-2026-25479 |
6.5 (3.1)
|
Litestar has an AllowedHosts validation bypass due to … |
litestar-org |
litestar |
2026-02-09T18:48:19.971Z | 2026-02-10T16:01:11.941Z |
| CVE-2026-24326 |
4.3 (3.1)
|
Missing authorization check in SAP S/4HANA Defense & S… |
SAP_SE |
SAP S/4HANA Defense & Security (Disconnected Operations) |
2026-02-10T03:04:39.908Z | 2026-02-10T16:15:32.371Z |
| CVE-2026-25480 |
6.5 (3.1)
|
FileStore key canonicalization collisions allow respon… |
litestar-org |
litestar |
2026-02-09T18:49:34.305Z | 2026-02-10T16:01:06.327Z |
| CVE-2026-24327 |
4.3 (3.1)
|
Missing Authorization Check in SAP Strategic Enterpris… |
SAP_SE |
SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application) |
2026-02-10T03:04:46.790Z | 2026-02-10T16:12:07.367Z |
| CVE-2025-11547 |
7.8 (3.1)
|
AXIS Camera Station Pro contained a flaw to perfo… |
Axis Communications AB |
AXIS Camera Station Pro |
2026-02-10T05:35:50.903Z | 2026-02-11T04:56:16.470Z |
| CVE-2026-24328 |
6.1 (3.1)
|
Open Redirection vulnerability in Business Server Page… |
SAP_SE |
Business Server Pages Application (TAF_APPLAUNCHER) |
2026-02-10T03:04:54.749Z | 2026-02-10T15:41:55.313Z |
| CVE-2025-12757 |
4.6 (3.1)
|
An AXIS Camera Station Pro feature can be exploit… |
Axis Communications AB |
AXIS Camera Station Pro |
2026-02-10T05:47:20.339Z | 2026-02-10T20:16:37.549Z |
| CVE-2025-13064 |
4.5 (3.1)
|
A server-side injection was possible for a malici… |
Axis Communications AB |
AXIS Camera Station Pro |
2026-02-10T05:40:34.374Z | 2026-02-10T20:16:16.016Z |
| CVE-2025-65120 |
6.1 (3.0)
5.1 (4.0)
|
Reflected cross-site scripting vulnerability exis… |
Japan Total System Co.,Ltd. |
GroupSession Free edition |
2025-12-12T05:02:03.882Z | 2025-12-12T18:45:07.474Z |
| CVE-2025-12063 |
5.7 (3.1)
|
An insecure direct object reference allowed a non… |
Axis Communications AB |
AXIS Camera Station Pro |
2026-02-10T05:52:35.732Z | 2026-02-10T20:16:58.729Z |
| CVE-2026-2259 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
aardappel lobster Parsing parser.h ParseStatements mem… |
aardappel |
lobster |
2026-02-10T02:32:08.234Z | 2026-02-10T20:19:24.411Z |
| CVE-2025-66284 |
5.4 (3.0)
4.8 (4.0)
|
Stored cross-site scripting vulnerabilities exist… |
Japan Total System Co.,Ltd. |
GroupSession Free edition |
2025-12-12T05:01:37.675Z | 2025-12-12T18:43:52.015Z |
| CVE-2026-25956 |
6.1 (3.1)
|
Frappe Affected by XSS and Open Redirect in Sign Up |
frappe |
frappe |
2026-02-10T17:39:20.430Z | 2026-02-10T19:27:58.893Z |
| CVE-2025-70083 |
7.8 (3.1)
|
An issue was discovered in OpenSatKit 2.2.1. The … |
n/a |
n/a |
2026-02-11T00:00:00.000Z | 2026-02-12T14:55:55.149Z |
| CVE-2025-70084 |
7.5 (3.1)
|
Directory traversal vulnerability in OpenSatKit 2… |
n/a |
n/a |
2026-02-11T00:00:00.000Z | 2026-02-12T14:58:06.498Z |
| CVE-2025-70085 |
9.8 (3.1)
|
An issue was discovered in OpenSatKit 2.2.1. The … |
n/a |
n/a |
2026-02-11T00:00:00.000Z | 2026-02-12T15:02:00.414Z |
| CVE-2024-50618 |
4.3 (3.1)
|
A Use of Single-factor Authentication vulnerabili… |
n/a |
n/a |
2026-02-11T00:00:00.000Z | 2026-02-12T21:05:27.762Z |
| CVE-2025-70091 |
6.5 (3.1)
|
A cross-site scripting (XSS) vulnerability in the… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T16:35:01.441Z |
| CVE-2025-70093 |
7.4 (3.1)
|
An issue in OpenSourcePOS v3.4.1 allows attackers… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T21:04:14.693Z |
| CVE-2025-70094 |
6.5 (3.1)
|
A cross-site scripting (XSS) vulnerability in the… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T16:36:56.152Z |
| CVE-2025-70095 |
6.5 (3.1)
|
A cross-site scripting (XSS) vulnerability in the… |
n/a |
n/a |
2026-02-13T00:00:00.000Z | 2026-02-13T16:33:57.399Z |
| CVE-2025-67737 |
3.1 (3.1)
|
AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE |
AzuraCast |
AzuraCast |
2025-12-12T06:53:15.213Z | 2025-12-12T20:39:38.708Z |
| CVE-2026-20642 |
N/A
|
An input validation issue was addressed. This iss… |
Apple |
iOS and iPadOS |
2026-02-11T22:58:41.039Z | 2026-02-11T22:58:41.039Z |
| CVE-2026-24854 |
8.8 (3.1)
|
Church CRM has SQL injection in PaddleNumEditor.php |
ChurchCRM |
CRM |
2026-01-30T15:05:12.017Z | 2026-01-30T15:57:32.491Z |
| CVE-2026-24855 |
7.2 (4.0)
|
ChurchCRM has Stored Cross-Site Scripting (XSS) in Cre… |
ChurchCRM |
CRM |
2026-01-30T15:08:31.006Z | 2026-01-30T15:50:58.147Z |
| CVE-2026-23861 |
5.4 (3.1)
|
Dell Unisphere for PowerMax vApp, version(s) 9.2.… |
Dell |
Unisphere for PowerMax vApp, |
2026-02-17T13:47:23.893Z | 2026-02-17T14:34:00.591Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-25478 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, CORSConfig.… | 2026-02-09T20:15:57.017 | 2026-02-17T15:15:29.523 |
| fkie_cve-2026-24324 | SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker wi… | 2026-02-10T04:16:04.630 | 2026-02-17T15:15:09.090 |
| fkie_cve-2026-24325 | SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stor… | 2026-02-10T04:16:04.790 | 2026-02-17T15:14:43.317 |
| fkie_cve-2025-64781 | In GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSe… | 2025-12-12T05:16:11.623 | 2026-02-17T15:14:09.757 |
| fkie_cve-2026-25479 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, in litestar… | 2026-02-09T20:15:57.177 | 2026-02-17T15:14:04.910 |
| fkie_cve-2026-24326 | Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Se… | 2026-02-10T04:16:04.950 | 2026-02-17T15:13:03.900 |
| fkie_cve-2026-25480 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, FileStore m… | 2026-02-09T20:15:57.330 | 2026-02-17T15:12:34.963 |
| fkie_cve-2026-24327 | Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Bu… | 2026-02-10T04:16:05.113 | 2026-02-17T15:12:00.680 |
| fkie_cve-2025-11547 | AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as … | 2026-02-10T06:15:53.903 | 2026-02-17T15:10:57.130 |
| fkie_cve-2026-24328 | SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious… | 2026-02-10T04:16:05.273 | 2026-02-17T15:10:34.963 |
| fkie_cve-2025-12757 | An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view i… | 2026-02-10T06:15:54.037 | 2026-02-17T15:10:09.890 |
| fkie_cve-2025-13064 | A server-side injection was possible for a malicious admin to manipulate the application to include… | 2026-02-10T06:15:54.170 | 2026-02-17T15:10:00.157 |
| fkie_cve-2025-65120 | Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.7.1,… | 2025-12-12T05:16:12.000 | 2026-02-17T15:09:46.407 |
| fkie_cve-2025-12063 | An insecure direct object reference allowed a non-admin user to modify or remove certain data objec… | 2026-02-10T07:16:12.553 | 2026-02-17T15:09:06.027 |
| fkie_cve-2026-2259 | A vulnerability has been found in aardappel lobster up to 2025.4. Affected by this issue is the fun… | 2026-02-10T04:16:05.433 | 2026-02-17T15:08:39.840 |
| fkie_cve-2025-66284 | Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, G… | 2025-12-12T05:16:12.230 | 2026-02-17T15:07:21.693 |
| fkie_cve-2026-25956 | Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could … | 2026-02-10T18:16:38.653 | 2026-02-17T15:05:39.610 |
| fkie_cve-2025-70083 | An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by th… | 2026-02-11T18:16:06.337 | 2026-02-17T15:03:48.430 |
| fkie_cve-2025-70084 | Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive … | 2026-02-11T18:16:06.483 | 2026-02-17T15:03:33.090 |
| fkie_cve-2025-70085 | An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. … | 2026-02-11T18:16:06.600 | 2026-02-17T15:02:22.943 |
| fkie_cve-2024-50618 | A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner C… | 2026-02-11T20:16:07.017 | 2026-02-17T15:01:29.567 |
| fkie_cve-2025-70091 | A cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1 allows… | 2026-02-13T16:16:10.760 | 2026-02-17T15:00:22.087 |
| fkie_cve-2025-70093 | An issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a crafted… | 2026-02-13T16:16:10.867 | 2026-02-17T14:59:41.803 |
| fkie_cve-2025-70094 | A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS v… | 2026-02-13T16:16:10.977 | 2026-02-17T14:59:24.453 |
| fkie_cve-2025-70095 | A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of Ope… | 2026-02-13T16:16:11.080 | 2026-02-17T14:59:05.980 |
| fkie_cve-2025-67737 | AzuraCast is a self-hosted, all-in-one web radio management suite. Versions 0.23.1 mistakenly inclu… | 2025-12-12T07:15:45.417 | 2026-02-17T14:52:29.713 |
| fkie_cve-2026-20642 | An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person … | 2026-02-11T23:16:07.227 | 2026-02-17T14:41:54.473 |
| fkie_cve-2026-24854 | ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in endpo… | 2026-01-30T16:16:13.620 | 2026-02-17T14:33:24.433 |
| fkie_cve-2026-24855 | ChurchCRM is an open-source church management system. Versions prior to 6.7.2 have a Stored Cross-S… | 2026-01-30T16:16:13.790 | 2026-02-17T14:32:44.697 |
| fkie_cve-2026-23861 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Inpu… | 2026-02-17T14:16:01.773 | 2026-02-17T14:16:01.773 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-cgjg-p2m2-qm4p |
3.8 (3.1)
|
Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settin… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-c6rr-xhrp-94pr |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the … | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-89wr-3g6x-pxxx |
6.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in cskefu up to 8.0.1. This issue affects some unknown p… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-63ww-623p-2ph4 |
7.8 (3.1)
|
An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawin… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-57cc-2pf4-mhmx |
4.3 (3.1)
|
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validat… | 2026-02-16T15:32:47Z | 2026-02-16T15:32:47Z |
| ghsa-xj75-c4vf-wp8x |
9.8 (3.1)
8.9 (4.0)
|
A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_fil… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-r8p8-qw9w-j9qv |
7.5 (4.0)
|
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example,… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-pp9j-pf5c-659x |
5.7 (3.1)
|
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to sanitize sensiti… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-mv9g-vp7w-xq67 |
7.5 (4.0)
|
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example,… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-m22r-r587-48f7 |
5.5 (3.1)
5.1 (4.0)
|
A vulnerability was identified in ZenTao up to 21.7.8. Affected by this issue is the function delet… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-frvg-p8g8-45cj |
4.3 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in TR7 Cyber Defense Inc. Web A… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-8crw-7238-r6f8 |
5.4 (3.1)
2.1 (4.0)
|
A vulnerability was determined in ZenTao up to 21.7.8. Affected by this vulnerability is the functi… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-7p7v-9r75-mq55 |
6.3 (3.1)
2.1 (4.0)
|
A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-77hc-3xh2-m95m |
5.0 (3.1)
2.3 (4.0)
|
A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDo… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-75mf-97wq-jjpw |
7.5 (4.0)
|
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example,… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-59w9-4rgj-869h |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in zhanghuanhao LibrarySystem 图书馆管理系统 up to 1.1.1. This impacts an u… | 2026-02-16T12:30:24Z | 2026-02-16T12:30:25Z |
| ghsa-3g85-xpc2-p2hq |
10.0 (3.1)
|
The WhatsApp bridge component in Nanobot binds the WebSocket server to all network interfaces (0.0.… | 2026-02-16T12:30:25Z | 2026-02-16T12:30:25Z |
| ghsa-xrr8-p4pf-hfwr |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return … | 2025-04-16T15:34:39Z | 2026-02-16T12:30:24Z |
| ghsa-w65c-fvp5-fvc5 |
4.3 (3.1)
|
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zo… | 2026-02-16T12:30:24Z | 2026-02-16T12:30:24Z |
| ghsa-r97f-5wrg-fmv7 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: pre… | 2025-07-03T09:30:35Z | 2026-02-16T12:30:24Z |
| ghsa-r3f7-9rj4-j5fm |
|
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl… | 2026-02-14T18:30:15Z | 2026-02-16T12:30:24Z |
| ghsa-qrxh-hqj2-g6xg |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple pa… | 2026-02-16T12:30:24Z | 2026-02-16T12:30:24Z |
| ghsa-g4vw-3hq5-q7gr |
|
In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implemen… | 2025-10-20T18:30:32Z | 2026-02-16T12:30:24Z |
| ghsa-fvcr-8w5m-c388 |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, where uploaded SVG images are not prop… | 2026-02-16T12:30:24Z | 2026-02-16T12:30:24Z |
| ghsa-3c9r-7f29-qp32 |
5.4 (3.1)
|
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validat… | 2026-02-16T12:30:24Z | 2026-02-16T12:30:24Z |
| ghsa-37cc-q9ww-mg9w |
4.8 (4.0)
|
Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple param… | 2026-02-16T12:30:24Z | 2026-02-16T12:30:24Z |
| ghsa-2phx-frhf-xr55 |
4.3 (3.1)
|
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zo… | 2026-02-16T12:30:24Z | 2026-02-16T12:30:24Z |
| ghsa-vjg4-vp37-8p46 |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability was detected in LigeroSmart up to 6.1.26. The impacted element is the function Agen… | 2026-02-16T09:30:30Z | 2026-02-16T09:30:30Z |
| ghsa-vfjw-j4jg-frr6 |
6.3 (3.1)
2.1 (4.0)
|
A flaw has been found in WAYOS FBM-220G 24.10.19. This affects the function sub_40F820 of the file … | 2026-02-16T09:30:30Z | 2026-02-16T09:30:30Z |
| ghsa-gmr7-w89v-rr2q |
|
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Prevent exces… | 2026-02-14T18:30:16Z | 2026-02-16T09:30:30Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2016-40 |
5.3 (3.1)
|
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, a… | tryton | 2016-09-07T19:28:00+00:00 | 2024-11-21T14:23:02.008255+00:00 |
| pysec-2023-301 |
7.8 (3.1)
|
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. | transformers | 2023-12-20T17:15:00+00:00 | 2024-11-21T14:23:01.933055+00:00 |
| pysec-2023-300 |
8.8 (3.1)
|
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. | transformers | 2023-12-19T13:15:00+00:00 | 2024-11-21T14:23:01.871022+00:00 |
| pysec-2023-299 |
4.7 (3.1)
|
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0. | transformers | 2023-05-18T17:15:00+00:00 | 2024-11-21T14:23:01.805729+00:00 |
| pysec-2022-43169 |
9.8 (3.1)
|
The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution bac… | togglee | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.740031Z |
| pysec-2022-43167 |
8.8 (3.1)
|
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types suc… | selenium | 2022-04-19T03:15:00+00:00 | 2024-11-21T14:23:01.289420+00:00 |
| pysec-2022-43165 |
9.8 (3.1)
|
The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution b… | scoptrial | 2022-06-24T21:15:00Z | 2024-11-21T14:23:01.181819Z |
| pysec-2016-39 |
7.5 (3.1)
|
An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode … | tarantool | 2016-12-23T22:59:00Z | 2024-11-21T14:23:01.531112Z |
| pysec-2023-297 |
7.5 (3.1)
|
A path traversal vulnerability has been detected in Repox, which allows an attacker to re… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.892241Z |
| pysec-2023-296 |
7.5 (3.1)
|
An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.841929Z |
| pysec-2023-295 |
5.4 (3.1)
|
An XSS vulnerability stored in Repox has been identified, which allows a local attacker t… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.792103Z |
| pysec-2023-294 |
6.1 (3.1)
|
An XSS vulnerability has been detected in Repox, which allows an attacker to compromise i… | repox | 2023-12-13T10:15:00Z | 2024-11-21T14:23:00.74018Z |
| pysec-2023-293 |
7.5 (3.1)
|
An authentication bypass vulnerability has been found in Repox, which allows a remote use… | repox | 2023-12-13T09:15:00Z | 2024-11-21T14:23:00.689595Z |
| pysec-2022-43164 |
9.8 (3.1)
|
The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution … | rondolu-yt-concate | 2022-06-24T21:15:00Z | 2024-11-21T14:23:00.996865Z |
| pysec-2022-43161 |
9.8 (3.1)
|
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. | rdiffweb | 2022-10-13T20:15:00+00:00 | 2024-11-21T14:23:00.575892+00:00 |
| pysec-2022-43160 |
9.8 (3.1)
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-13T20:15:00+00:00 | 2024-11-21T14:23:00.515460+00:00 |
| pysec-2022-43159 |
9.8 (3.1)
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-14T12:15:00+00:00 | 2024-11-21T14:23:00.456366+00:00 |
| pysec-2022-43158 |
6.1 (3.1)
|
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | rdiffweb | 2022-10-10T12:15:00+00:00 | 2024-11-21T14:23:00.394851+00:00 |
| pysec-2022-43157 |
5.3 (3.1)
|
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | rdiffweb | 2022-10-06T18:16:00+00:00 | 2024-11-21T14:23:00.333240+00:00 |
| pysec-2022-43156 |
9.8 (3.1)
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-10-06T18:16:00+00:00 | 2024-11-21T14:23:00.273706+00:00 |
| pysec-2022-43155 |
5.5 (3.1)
|
wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segment… | pywasm3 | 2022-12-13T23:15:00Z | 2024-11-21T14:23:00.213494Z |
| pysec-2022-43153 |
5.5 (3.1)
|
Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirect… | pywasm3 | 2022-04-16T16:15:00Z | 2024-11-21T14:23:00.113164Z |
| pysec-2023-292 |
7.8 (3.1)
|
PyInstaller bundles a Python application and all its dependencies into a single package. … | pyinstaller | 2023-12-09T01:15:00+00:00 | 2024-11-21T14:22:59.796437+00:00 |
| pysec-2023-291 |
7.8 (3.1)
|
PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Goo… | pydrive2 | 2023-12-05T21:15:00+00:00 | 2024-11-21T14:22:59.681617+00:00 |
| pysec-2023-290 |
8.8 (3.1)
|
An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaP… | pyassimp | 2023-01-20T19:15:00Z | 2024-11-21T14:22:59.461917Z |
| pysec-2022-43149 |
6.5 (3.1)
|
Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentatio… | pyassimp | 2022-09-06T23:15:00Z | 2024-11-21T14:22:59.412324Z |
| pysec-2022-43148 |
5.5 (3.1)
|
Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow i… | pyassimp | 2022-01-01T00:15:00Z | 2024-11-21T14:22:59.35793Z |
| pysec-2022-43147 |
9.8 (3.1)
|
pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact… | pyanxdns | 2022-06-08T20:15:00Z | 2024-11-21T14:22:59.309018Z |
| pysec-2017-146 |
7.5 (3.1)
|
Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users abou… | pyignite | 2017-06-28T13:29:00Z | 2024-11-21T14:22:59.736776Z |
| pysec-2014-115 |
|
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using… | portage | 2014-09-29T22:55:00Z | 2024-11-21T14:22:59.10272Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587045Z |
| gsd-2024-4231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.534700Z |
| gsd-2024-4230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.587245Z |
| gsd-2024-4229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.599914Z |
| gsd-2024-4228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.563352Z |
| gsd-2024-4227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:16.624403Z |
| gsd-2024-32946 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:15.595218Z |
| gsd-2018-25102 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:03:04.675370Z |
| gsd-2024-33676 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.297185Z |
| gsd-2024-33675 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.273998Z |
| gsd-2024-33674 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.150702Z |
| gsd-2024-33673 | An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access… | 2024-04-26T05:02:19.162010Z |
| gsd-2024-33672 | An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used i… | 2024-04-26T05:02:19.171109Z |
| gsd-2024-33671 | An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec… | 2024-04-26T05:02:19.236619Z |
| gsd-2024-33670 | Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom c… | 2024-04-26T05:02:19.244921Z |
| gsd-2024-33669 | An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple … | 2024-04-26T05:02:19.275535Z |
| gsd-2024-33668 | An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, pa… | 2024-04-26T05:02:19.281107Z |
| gsd-2024-33667 | An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a re… | 2024-04-26T05:02:19.258447Z |
| gsd-2024-33666 | An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket co… | 2024-04-26T05:02:19.293701Z |
| gsd-2024-33665 | ** DISPUTED ** angular-translate through 2.19.1 allows XSS via a crafted key that is used… | 2024-04-26T05:02:19.265097Z |
| gsd-2024-33664 | python-jose through 3.3.0 allows attackers to cause a denial of service (resource consump… | 2024-04-26T05:02:19.131389Z |
| gsd-2024-33663 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.175935Z |
| gsd-2024-33662 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149532Z |
| gsd-2024-33661 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.254483Z |
| gsd-2024-33660 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.226651Z |
| gsd-2024-33659 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.194728Z |
| gsd-2024-33658 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.225239Z |
| gsd-2024-33657 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.176271Z |
| gsd-2024-33656 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.263057Z |
| gsd-2024-33655 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.215383Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-788 | Malicious code in @sporting-life/sportinglife-betslip-sdk (npm) | 2026-02-06T03:57:32Z | 2026-02-06T16:19:56Z |
| mal-2026-787 | Malicious code in @sporting-life/sportinglife-be (npm) | 2026-02-06T04:07:15Z | 2026-02-06T16:19:56Z |
| mal-2026-786 | Malicious code in @rsgweb/locale-tools (npm) | 2026-02-06T03:46:00Z | 2026-02-06T16:19:56Z |
| MAL-2026-805 | Malicious code in aligned-arrays (npm) | 2026-02-06T14:24:56Z | 2026-02-06T16:19:56Z |
| MAL-2026-802 | Malicious code in @sbseg-plugin/qbo-web-app-ui (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-801 | Malicious code in @rsgweb/utils (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-800 | Malicious code in @rsgweb/tina (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-799 | Malicious code in @rsgweb/rockstar-account (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-798 | Malicious code in @rsgweb/modules-core-www-page (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-797 | Malicious code in @rsgweb/modules-core-feedback (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-796 | Malicious code in @rdxportal/ui-components (npm) | 2026-02-06T11:10:48Z | 2026-02-06T16:19:56Z |
| MAL-2026-795 | Malicious code in @opposhop/nuxt-ssr-cache (npm) | 2026-02-06T11:10:47Z | 2026-02-06T16:19:56Z |
| MAL-2026-794 | Malicious code in @meli-lint/eslint-config-tests-jest (npm) | 2026-02-06T11:10:46Z | 2026-02-06T16:19:56Z |
| MAL-2026-793 | Malicious code in @meli-lint/eslint-config-base-ts (npm) | 2026-02-06T11:10:46Z | 2026-02-06T16:19:56Z |
| MAL-2026-792 | Malicious code in @meli-lint/eslint-config-base (npm) | 2026-02-06T11:10:47Z | 2026-02-06T16:19:56Z |
| MAL-2026-791 | Malicious code in @hashicorp-internal/vault-reporting (npm) | 2026-02-06T11:10:46Z | 2026-02-06T16:19:56Z |
| MAL-2026-788 | Malicious code in @sporting-life/sportinglife-betslip-sdk (npm) | 2026-02-06T03:57:32Z | 2026-02-06T16:19:56Z |
| MAL-2026-787 | Malicious code in @sporting-life/sportinglife-be (npm) | 2026-02-06T04:07:15Z | 2026-02-06T16:19:56Z |
| MAL-2026-786 | Malicious code in @rsgweb/locale-tools (npm) | 2026-02-06T03:46:00Z | 2026-02-06T16:19:56Z |
| mal-2026-808 | Malicious code in carcent (PyPI) | 2026-02-06T15:23:01Z | 2026-02-06T15:23:01Z |
| MAL-2026-808 | Malicious code in carcent (PyPI) | 2026-02-06T15:23:01Z | 2026-02-06T15:23:01Z |
| mal-2026-803 | Malicious code in moveworks-pipeline-test (PyPI) | 2026-02-06T11:36:06Z | 2026-02-06T11:36:06Z |
| MAL-2026-803 | Malicious code in moveworks-pipeline-test (PyPI) | 2026-02-06T11:36:06Z | 2026-02-06T11:36:06Z |
| mal-2026-790 | Malicious code in p7zip-full (PyPI) | 2026-02-06T09:30:38Z | 2026-02-06T09:30:38Z |
| MAL-2026-790 | Malicious code in p7zip-full (PyPI) | 2026-02-06T09:30:38Z | 2026-02-06T09:30:38Z |
| mal-2025-47509 | Malicious code in syf-api-legacy (npm) | 2025-09-22T04:00:48Z | 2026-02-06T07:35:22Z |
| mal-2025-4581 | Malicious code in syf-api (npm) | 2025-05-26T06:27:11Z | 2026-02-06T07:35:22Z |
| MAL-2025-47509 | Malicious code in syf-api-legacy (npm) | 2025-09-22T04:00:48Z | 2026-02-06T07:35:22Z |
| MAL-2025-4581 | Malicious code in syf-api (npm) | 2025-05-26T06:27:11Z | 2026-02-06T07:35:22Z |
| mal-2026-730 | Malicious code in zappr (npm) | 2026-02-04T05:14:29Z | 2026-02-06T03:05:28Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2934 | ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-29T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2927 | NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-28T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2891 | WebKitGTK: Mehrere Schwachstellen ermöglichen Codeausführung und DoS | 2025-12-18T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2888 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-12-18T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2751 | WebKitGTK: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2657 | WebKitGTK: Mehrere Schwachstellen | 2025-11-20T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2607 | Red Hat Enterprise Linux (lasso): Eine Schwachstelle ermöglichen Codeausführung | 2025-11-16T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2600 | PostgreSQL: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-13T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2449 | GIMP: Schwachstelle ermöglicht Codeausführung | 2025-10-29T23:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2392 | Internet Systems Consortium BIND: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2365 | Oracle Java SE: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2269 | WebKitGTK: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung | 2025-10-13T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2212 | OpenSSH: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-10-06T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2166 | OpenSSL und LibreSSL: Mehrere Schwachstellen | 2025-09-30T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2153 | VMware Cloud Foundation, vSphere, Aria Operations und Tools: Mehrere Schwachstellen | 2025-09-29T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2129 | GIMP: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-09-24T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2104 | WebKitGTK: Mehrere Schwachstellen | 2025-09-22T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2101 | Ghostscript: Schwachstellen ermöglichen Codeausführung | 2025-09-21T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2092 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-18T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2087 | Linux Kernel: Mehrere Schwachstellen | 2025-09-17T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2077 | Linux Kernel: Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-2039 | CUPS: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1828 | PAM (linux-pam package): Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-08-13T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1754 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-08-10T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1748 | libarchive: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung | 2025-08-07T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1732 | Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht Codeausführung | 2025-08-06T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1646 | Red Hat Enterprise Linux (nodejs, perl): Mehrere Schwachstellen | 2025-07-27T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1637 | GNU libc: Schwachstelle ermöglicht unspezifischen Angriff | 2025-07-23T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1575 | vim (.tar and .zip): Mehrere Schwachstellen ermöglichen Codeausführung | 2025-07-15T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-1569 | Oracle Java SE: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2026-01-21T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0169 | Kwetsbaarheden verholpen in Google Chrome | 2025-05-16T12:41:47.685095Z | 2025-05-16T12:41:47.685095Z |
| ncsc-2025-0152 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager Mobile (EPMM, voormalig MobileIron) | 2025-05-13T15:35:45.784542Z | 2025-05-16T09:42:15.822544Z |
| ncsc-2025-0168 | Kwetsbaarheid verholpen in FortiVoice | 2025-05-14T13:50:54.001151Z | 2025-05-14T13:50:54.001151Z |
| ncsc-2025-0167 | Kwetsbaarheden verholpen in Zoho ManageEngine | 2025-05-14T13:19:58.768414Z | 2025-05-14T13:19:58.768414Z |
| ncsc-2025-0166 | Kwetsbaarheden verholpen in Fortinet producten | 2025-05-14T08:41:08.980708Z | 2025-05-14T08:41:08.980708Z |
| ncsc-2025-0165 | Kwetsbaarheid verholpen in Adobe Illustrator | 2025-05-14T08:25:17.869407Z | 2025-05-14T08:25:17.869407Z |
| ncsc-2025-0164 | Kwetsbaarheden verholpen in Adobe Photoshop | 2025-05-14T08:24:02.186984Z | 2025-05-14T08:24:02.186984Z |
| ncsc-2025-0163 | Kwetsbaarheden verholpen in Adobe Animate | 2025-05-14T08:21:49.917725Z | 2025-05-14T08:21:49.917725Z |
| ncsc-2025-0162 | Kwetsbaarheden verholpen in Adobe ColdFusion | 2025-05-14T08:18:54.775740Z | 2025-05-14T08:18:54.775740Z |
| ncsc-2025-0161 | Kwetsbaarheid verholpen in Ivanti Neurons for ITSM | 2025-05-14T08:16:04.867590Z | 2025-05-14T08:16:04.867590Z |
| ncsc-2025-0160 | Kwetsbaarheden verholpen in Siemens producten | 2025-05-14T07:13:32.957900Z | 2025-05-14T07:13:32.957900Z |
| ncsc-2025-0159 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-05-13T19:47:12.555983Z | 2025-05-13T19:47:12.555983Z |
| ncsc-2025-0158 | Kwetsbaarheden verholpen in Microsoft Edge | 2025-05-13T19:17:52.478234Z | 2025-05-13T19:17:52.478234Z |
| ncsc-2025-0157 | Kwetsbaarheden verholpen in Microsoft Defender | 2025-05-13T19:14:25.545635Z | 2025-05-13T19:14:25.545635Z |
| ncsc-2025-0156 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-05-13T19:10:10.012472Z | 2025-05-13T19:10:10.012472Z |
| ncsc-2025-0155 | Kwetsbaarheden verholpen in Microsoft Office | 2025-05-13T18:58:56.989073Z | 2025-05-13T18:58:56.989073Z |
| ncsc-2025-0154 | Kwetsbaarheden verholpen in Microsoft Dynamics Dataverse | 2025-05-13T18:44:03.290810Z | 2025-05-13T18:44:03.290810Z |
| ncsc-2025-0153 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-05-13T18:35:28.760017Z | 2025-05-13T18:35:28.760017Z |
| ncsc-2025-0151 | Kwetsbaarheden verholpen in Apple macOS | 2025-05-13T09:19:37.094950Z | 2025-05-13T09:19:37.094950Z |
| ncsc-2025-0150 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2025-05-13T09:14:44.606584Z | 2025-05-13T09:14:44.606584Z |
| ncsc-2025-0149 | Kwetsbaarheden verholpen in SAP producten | 2025-05-13T09:05:38.110295Z | 2025-05-13T09:05:38.110295Z |
| ncsc-2025-0148 | Kwetsbaarheden verholpen in ASUS DriverHub | 2025-05-12T13:22:18.034442Z | 2025-05-12T13:22:18.034442Z |
| ncsc-2025-0147 | Kwetsbaarheden verholpen in F5 BIG-IP | 2025-05-09T08:07:32.002935Z | 2025-05-09T08:07:32.002935Z |
| ncsc-2025-0146 | Kwetsbaarheden verholpen in Cisco IOS XE Software | 2025-05-08T08:43:57.415709Z | 2025-05-08T08:43:57.415709Z |
| ncsc-2025-0145 | Kwetsbaarheden verholpen in SonicWall SMA100 | 2025-05-08T08:40:26.301646Z | 2025-05-08T08:40:26.301646Z |
| ncsc-2025-0144 | Kwetsbaarheden verholpen in SysAid On-Prem | 2025-05-08T06:56:21.378830Z | 2025-05-08T06:56:21.378830Z |
| ncsc-2025-0143 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-05-07T11:19:50.517092Z | 2025-05-07T11:19:50.517092Z |
| ncsc-2025-0142 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2025-05-06T08:01:05.582708Z | 2025-05-06T08:01:05.582708Z |
| ncsc-2025-0141 | Kwetsbaarheden verholpen in Keycloak | 2025-05-06T07:12:42.075830Z | 2025-05-06T07:12:42.075830Z |
| ncsc-2025-0138 | Kwetsbaarheid verholpen in Commvault Command Center | 2025-04-24T13:09:08.399556Z | 2025-05-06T06:55:31.232567Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-087301 | SSA-087301: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.1 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-068047 | SSA-068047: Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2 | 2023-12-12T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-071402 | SSA-071402: Multiple Vulnerabilities in SICAM Products | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| ssa-998949 | SSA-998949: Hard-coded Default Encryption Key in Mendix Encryption Module V10.0.0 and V10.0.1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-928781 | SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-868282 | SSA-868282: Multiple Vulnerabilities in SINEMA Remote Connect Client before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-825651 | SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-824889 | SSA-824889: XML File Parsing Vulnerabilities in JT Open and PLM XML SDK | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-780073 | SSA-780073: Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets | 2020-02-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-779936 | SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-750274 | SSA-750274: Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW | 2024-04-19T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-484086 | SSA-484086: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.1 | 2022-06-14T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-473245 | SSA-473245: Denial of Service Vulnerability in Profinet Devices | 2019-10-08T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-381581 | SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-346262 | SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products | 2017-11-23T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-160243 | SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 | 2023-10-10T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-093430 | SSA-093430: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V3.0 | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:1892 | Red Hat Security Advisory: OpenShift Container Platform 4.15.10 packages and security update | 2024-04-26T05:31:01+00:00 | 2026-02-18T05:55:38+00:00 |
| rhsa-2024:1770 | Red Hat Security Advisory: OpenShift Container Platform 4.15.9 bug fix and security update | 2024-04-16T14:52:58+00:00 | 2026-02-18T05:55:38+00:00 |
| rhsa-2024:1765 | Red Hat Security Advisory: OpenShift Container Platform 4.14.21 bug fix and security update | 2024-04-18T11:58:59+00:00 | 2026-02-18T05:55:37+00:00 |
| rhsa-2024:1683 | Red Hat Security Advisory: OpenShift Container Platform 4.13.39 bug fix and security update | 2024-04-08T09:52:30+00:00 | 2026-02-18T05:55:37+00:00 |
| rhsa-2024:1681 | Red Hat Security Advisory: OpenShift Container Platform 4.14.20 bug fix and security update | 2024-04-08T08:43:50+00:00 | 2026-02-18T05:55:37+00:00 |
| rhsa-2024:1679 | Red Hat Security Advisory: OpenShift Container Platform 4.12.55 bug fix and security update | 2024-04-08T06:38:12+00:00 | 2026-02-18T05:55:37+00:00 |
| rhsa-2024:1668 | Red Hat Security Advisory: OpenShift Container Platform 4.15.8 bug fix and security update | 2024-04-08T06:24:52+00:00 | 2026-02-18T05:55:36+00:00 |
| rhsa-2024:1616 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.1 for RHEL 9 | 2024-07-01T00:28:51+00:00 | 2026-02-18T05:55:36+00:00 |
| rhsa-2024:1572 | Red Hat Security Advisory: OpenShift Container Platform 4.12.54 bug fix and security update | 2024-04-03T06:57:46+00:00 | 2026-02-18T05:55:36+00:00 |
| rhsa-2024:1464 | Red Hat Security Advisory: OpenShift Container Platform 4.11.59 bug fix and security update | 2024-03-27T19:51:20+00:00 | 2026-02-18T05:55:35+00:00 |
| rhsa-2024:1458 | Red Hat Security Advisory: OpenShift Container Platform 4.14.18 bug fix and security update | 2024-03-27T00:25:36+00:00 | 2026-02-18T05:55:35+00:00 |
| rhsa-2024:1454 | Red Hat Security Advisory: OpenShift Container Platform 4.13.38 bug fix and security update | 2024-03-27T00:32:17+00:00 | 2026-02-18T05:55:34+00:00 |
| rhsa-2024:1449 | Red Hat Security Advisory: OpenShift Container Platform 4.15.5 bug fix and security update | 2024-03-27T11:18:26+00:00 | 2026-02-18T05:55:34+00:00 |
| rhsa-2024:10813 | Red Hat Security Advisory: OpenShift Container Platform 4.13.54 bug fix and security update | 2024-12-12T02:08:06+00:00 | 2026-02-18T05:55:33+00:00 |
| rhsa-2024:10523 | Red Hat Security Advisory: OpenShift Container Platform 4.14.42 bug fix and security update | 2024-12-05T00:33:01+00:00 | 2026-02-18T05:55:33+00:00 |
| rhsa-2024:1052 | Red Hat Security Advisory: OpenShift Container Platform 4.12.51 bug fix and security update | 2024-03-06T00:38:22+00:00 | 2026-02-18T05:55:33+00:00 |
| rhsa-2024:1037 | Red Hat Security Advisory: OpenShift Container Platform 4.13.36 bug fix and security update | 2024-03-06T14:46:43+00:00 | 2026-02-18T05:55:33+00:00 |
| rhsa-2024:0741 | Red Hat Security Advisory: OpenShift Container Platform 4.13.33 bug fix and security update | 2024-02-14T06:34:01+00:00 | 2026-02-18T05:55:33+00:00 |
| rhsa-2024:10142 | Red Hat Security Advisory: OpenShift Container Platform 4.15.39 bug fix and security update | 2024-11-26T11:17:01+00:00 | 2026-02-18T05:55:32+00:00 |
| rhsa-2024:0954 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update | 2024-02-27T15:16:25+00:00 | 2026-02-18T05:55:32+00:00 |
| rhsa-2024:0946 | Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update | 2024-02-28T14:03:56+00:00 | 2026-02-18T05:55:31+00:00 |
| rhsa-2024:0941 | Red Hat Security Advisory: OpenShift Container Platform 4.14.14 bug fix and security update | 2024-02-28T00:21:13+00:00 | 2026-02-18T05:55:31+00:00 |
| rhsa-2024:0837 | Red Hat Security Advisory: OpenShift Container Platform 4.14.13 security update | 2024-02-20T15:27:06+00:00 | 2026-02-18T05:55:31+00:00 |
| rhsa-2024:0833 | Red Hat Security Advisory: OpenShift Container Platform 4.12.50 bug fix and security update | 2024-02-21T01:44:15+00:00 | 2026-02-18T05:55:31+00:00 |
| rhsa-2024:0777 | Red Hat Security Advisory: jenkins and jenkins-2-plugins security update | 2024-02-12T10:27:23+00:00 | 2026-02-18T05:55:30+00:00 |
| rhsa-2024:0766 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security update | 2024-02-28T08:10:56+00:00 | 2026-02-18T05:55:29+00:00 |
| rhsa-2024:0269 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.0 for RHEL 9 | 2024-02-28T00:20:04+00:00 | 2026-02-18T05:55:29+00:00 |
| rhsa-2024:0682 | Red Hat Security Advisory: OpenShift Container Platform 4.11.58 bug fix and security update | 2024-02-08T18:42:42+00:00 | 2026-02-18T05:55:28+00:00 |
| rhsa-2024:0664 | Red Hat Security Advisory: OpenShift Container Platform 4.12.49 bug fix update and security update | 2024-02-08T19:31:18+00:00 | 2026-02-18T05:55:28+00:00 |
| rhsa-2024:0660 | Red Hat Security Advisory: OpenShift Container Platform 4.13.32 bug fix and security update | 2024-02-07T15:07:37+00:00 | 2026-02-18T05:55:27+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-259-02 | Hitachi Energy RTU500 series | 2025-09-16T06:00:00.000000Z | 2025-09-16T06:00:00.000000Z |
| va-25-259-01 | CISA Thorium multiple vulnerabilities | 2025-09-16T00:00:00Z | 2025-09-16T00:00:00Z |
| va-25-258-01 | psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse | 2025-09-15T18:41:08Z | 2025-09-15T18:41:08Z |
| va-25-174-01 | OPEXUS FOIAXpress Public Access Link (PAL) multiple vulnerabilities | 2025-07-31T17:01:09Z | 2025-09-09T21:12:34Z |
| va-25-252-01 | OPEXUS FOIAXpress Public Access Link (PAL) SQL injection | 2025-09-09T20:48:26Z | 2025-09-09T20:48:26Z |
| icsa-25-093-01 | Hitachi Energy RTU500 Series (Update B) | 2025-03-25T12:30:00.000000Z | 2025-09-09T12:30:00.000000Z |
| icsa-25-023-02 | Hitachi Energy RTU500 Series Product (Update A) | 2024-04-30T12:30:00.000000Z | 2025-09-09T10:00:00.000000Z |
| icsa-25-252-09 | Rockwell Automation 1783-NATR | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-07 | Rockwell Automation ControlLogix 5580 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-06 | Rockwell Automation CompactLogix® 5480 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-05 | Rockwell Automation FactoryTalk Activation Manager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-04 | Rockwell Automation FactoryTalk Optix | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-03 | Rockwell Automation Stratix IOS | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-01 | Rockwell Automation ThinManager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-233-01 | Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module (Update A) | 2025-08-21T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-219-07 | EG4 Electronics EG4 Inverters (Update B) | 2025-08-07T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-058-01 | Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B) | 2025-02-27T07:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-02 | ABB Cylon Aspect BMS/BAS | 2025-09-09T05:00:00.000000Z | 2025-09-09T05:00:00.000000Z |
| icsa-25-266-03 | Schneider Electric SESU | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-08 | Schneider Electric EcoStruxure | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-035-07 | Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A) | 2025-01-14T00:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-06 | Siemens Industrial Edge Management | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-05 | Siemens Apogee PXC and Talon TC Devices | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-04 | Siemens SINEC OS | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-02 | Siemens SIMATIC Virtualization as a Service (SIVaaS) | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-01 | Siemens SIMOTION Tools | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-226-05 | Siemens WIBU CodeMeter Runtime | 2025-08-12T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-072-03 | Siemens SIMATIC S7-1500 TM MFP | 2025-03-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-24-102-08 | Siemens OPC Foundation Local Discovery Server Affecting Siemens Products | 2023-04-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-105-07 | Delta Electronics COMMGR (Update A) | 2025-04-15T06:00:00.000000Z | 2025-09-04T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asaftd-dap-dos-bhEkP7n | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-bf-dos-vdzhlqrw | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-bf-dos-vDZhLqrW | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-nyh3fhp | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-nyH3fhp | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-czf8gt | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-cZf8gT | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-4gyewmkg | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-vpn-4gYEWMKg | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-tls-cwy6zxb | Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-tls-CWY6zXB | Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-rce-graupeuf | Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-rce-gRAuPEUF | Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-dos-eedwu5rm | Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ssh-dos-eEDWu5RM | Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ftd-priv-esc-hbs9gnwq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asa-ftd-priv-esc-hBS9gnwq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-ftd-fmc-code-inj-wshrgz8l | Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-10-23T15:57:47+00:00 |
| cisco-sa-ftd-fmc-code-inj-wSHrgz8L | Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability | 2023-11-01T16:00:00+00:00 | 2024-10-23T15:57:47+00:00 |
| cisco-sa-ucsc-bkpsky-tgj5f73j | Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ucsc-bkpsky-TgJ5f73J | Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tax76u3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-ccmpdm-rxss-tAX76U3k | Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability | 2024-10-16T16:00:00+00:00 | 2024-10-16T16:00:00+00:00 |
| cisco-sa-vlan-dos-27pur5rt | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-vlan-dos-27Pur5RT | Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-10-04T21:53:25+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yj2osdhv | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yJ2OSDhV | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qe33tcms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qE33TCms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-fduf3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-39752 | ARM: rockchip: fix kernel hang during smp initialization | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:58.000Z |
| msrc_cve-2025-39743 | jfs: truncate good inode pages when hard link is 0 | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:53.000Z |
| msrc_cve-2025-39742 | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:48.000Z |
| msrc_cve-2025-38732 | netfilter: nf_reject: don't leak dst refcount for loopback packets | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:43.000Z |
| msrc_cve-2025-38700 | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:39.000Z |
| msrc_cve-2025-38696 | MIPS: Don't crash in stack_top() for tasks without ABI or vDSO | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:34.000Z |
| msrc_cve-2025-38695 | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:29.000Z |
| msrc_cve-2025-38691 | pNFS: Fix uninited ptr deref in block/scsi layout | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:24.000Z |
| msrc_cve-2025-38687 | comedi: fix race between polling and detaching | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:19.000Z |
| msrc_cve-2025-39736 | mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:14.000Z |
| msrc_cve-2025-38714 | hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:09.000Z |
| msrc_cve-2025-38711 | smb/server: avoid deadlock when linking with ReplaceIfExists | 2025-09-02T00:00:00.000Z | 2026-01-13T01:44:03.000Z |
| msrc_cve-2025-38707 | fs/ntfs3: Add sanity check for file name | 2025-09-02T00:00:00.000Z | 2026-01-13T01:43:57.000Z |
| msrc_cve-2025-38684 | net/sched: ets: use old 'nbands' while purging unused classes | 2025-09-02T00:00:00.000Z | 2026-01-13T01:43:16.000Z |
| msrc_cve-2025-38681 | mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() | 2025-09-02T00:00:00.000Z | 2026-01-13T01:43:09.000Z |
| msrc_cve-2025-38478 | comedi: Fix initialization of data for instructions that write to subdevice | 2025-07-02T00:00:00.000Z | 2026-01-13T01:42:28.000Z |
| msrc_cve-2025-38467 | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 2025-07-02T00:00:00.000Z | 2026-01-13T01:41:52.000Z |
| msrc_cve-2025-39709 | media: venus: protect against spurious interrupts during probe | 2025-09-02T00:00:00.000Z | 2026-01-13T01:41:51.000Z |
| msrc_cve-2025-38448 | usb: gadget: u_serial: Fix race condition in TTY wakeup | 2025-07-02T00:00:00.000Z | 2026-01-13T01:41:45.000Z |
| msrc_cve-2025-39692 | smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() | 2025-09-02T00:00:00.000Z | 2026-01-13T01:41:44.000Z |
| msrc_cve-2025-39686 | comedi: Make insn_rw_emulate_bits() do insn->n samples | 2025-09-02T00:00:00.000Z | 2026-01-13T01:41:37.000Z |
| msrc_cve-2025-39685 | comedi: pcl726: Prevent invalid irq number | 2025-09-02T00:00:00.000Z | 2026-01-13T01:41:31.000Z |
| msrc_cve-2025-39684 | comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() | 2025-09-02T00:00:00.000Z | 2026-01-13T01:41:24.000Z |
| msrc_cve-2025-38275 | phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug | 2025-07-02T00:00:00.000Z | 2026-01-13T01:40:41.000Z |
| msrc_cve-2025-38263 | bcache: fix NULL pointer in cache_set_flush() | 2025-07-02T00:00:00.000Z | 2026-01-13T01:40:34.000Z |
| msrc_cve-2025-38225 | media: imx-jpeg: Cleanup after an allocation error | 2025-07-02T00:00:00.000Z | 2026-01-13T01:40:27.000Z |
| msrc_cve-2025-38191 | ksmbd: fix null pointer dereference in destroy_previous_session | 2025-07-02T00:00:00.000Z | 2026-01-13T01:40:20.000Z |
| msrc_cve-2025-37951 | drm/v3d: Add job to pending list if the reset was skipped | 2025-05-02T00:00:00.000Z | 2026-01-13T01:40:02.000Z |
| msrc_cve-2025-54567 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327. | 2025-07-02T00:00:00.000Z | 2026-01-13T01:39:55.000Z |
| msrc_cve-2025-54566 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327. | 2025-07-02T00:00:00.000Z | 2026-01-13T01:39:48.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15817-1 | buildpacks-cli-0.39.1-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| opensuse-su-2025:15816-1 | ImageMagick-7.1.2.10-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| opensuse-su-2025:15815-1 | xkbcomp-1.5.0-1.1 on GA media | 2025-12-11T00:00:00Z | 2025-12-11T00:00:00Z |
| opensuse-su-2025:15814-1 | MozillaThunderbird-140.6.0-1.1 on GA media | 2025-12-11T00:00:00Z | 2025-12-11T00:00:00Z |
| opensuse-su-2025:15813-1 | MozillaFirefox-146.0-1.1 on GA media | 2025-12-11T00:00:00Z | 2025-12-11T00:00:00Z |
| opensuse-su-2025:15812-1 | libpoppler-cpp2-25.09.1-4.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:15811-1 | keylime-config-7.13.0+40-1.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:15810-1 | gio-branding-upstream-2.86.3-1.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:15809-1 | firefox-esr-140.6.0-1.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:15808-1 | apache2-2.4.66-1.1 on GA media | 2025-12-10T00:00:00Z | 2025-12-10T00:00:00Z |
| opensuse-su-2025:20148-1 | Security update for openexr | 2025-12-09T16:32:45Z | 2025-12-09T16:32:45Z |
| opensuse-su-2025:20153-1 | Security update for python-Django | 2025-12-09T13:43:55Z | 2025-12-09T13:43:55Z |
| opensuse-su-2025:15807-1 | regclient-0.11.1-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15806-1 | python311-Django4-4.2.27-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15805-1 | python311-Django-5.2.9-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15804-1 | nvidia-open-driver-G07-signed-check-590.44.01-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15803-1 | krb5-1.22.1-1.1 on GA media | 2025-12-09T00:00:00Z | 2025-12-09T00:00:00Z |
| opensuse-su-2025:15802-1 | corepack24-24.11.1-2.1 on GA media | 2025-12-08T00:00:00Z | 2025-12-08T00:00:00Z |
| opensuse-su-2025:15801-1 | libpng16-16-1.6.52-1.1 on GA media | 2025-12-08T00:00:00Z | 2025-12-08T00:00:00Z |
| opensuse-su-2025:15800-1 | kdeconnect-kde-25.11.90-1.1 on GA media | 2025-12-08T00:00:00Z | 2025-12-08T00:00:00Z |
| opensuse-su-2025:15799-1 | libwireshark19-4.6.2-1.1 on GA media | 2025-12-05T00:00:00Z | 2025-12-05T00:00:00Z |
| opensuse-su-2025:15798-1 | rhino-1.7.15.1-1.1 on GA media | 2025-12-05T00:00:00Z | 2025-12-05T00:00:00Z |
| opensuse-su-2025:20143-1 | Security update for git-bug | 2025-12-04T13:08:26Z | 2025-12-04T13:08:26Z |
| opensuse-su-2025:20138-1 | Security update for act | 2025-12-04T12:02:10Z | 2025-12-04T12:02:10Z |
| opensuse-su-2025:15797-1 | libpng12-0-1.2.59-4.1 on GA media | 2025-12-04T00:00:00Z | 2025-12-04T00:00:00Z |
| opensuse-su-2025:15796-1 | go1.24-1.24.11-1.1 on GA media | 2025-12-04T00:00:00Z | 2025-12-04T00:00:00Z |
| opensuse-su-2025:20135-1 | Security update for mozjs128 | 2025-12-03T20:41:04Z | 2025-12-03T20:41:04Z |
| opensuse-su-2025-20135-1 | Security update for mozjs128 | 2025-12-03T20:41:04Z | 2025-12-03T20:41:04Z |
| opensuse-su-2025:15795-1 | go1.25-1.25.5-1.1 on GA media | 2025-12-03T00:00:00Z | 2025-12-03T00:00:00Z |
| opensuse-su-2025:15794-1 | chromedriver-143.0.7499.40-2.1 on GA media | 2025-12-03T00:00:00Z | 2025-12-03T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2025-608 | Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes | 2025-08-09T00:02:00.092320Z | 2025-08-11T14:17:56.957704Z |
| osv-2024-380 | Heap-use-after-free in H5FL__blk_gc_list | 2024-04-30T00:12:11.366893Z | 2025-08-06T15:10:14.893372Z |
| osv-2025-600 | Heap-buffer-overflow in generic_unpack | 2025-08-05T00:10:00.536266Z | 2025-08-05T00:10:00.536669Z |
| osv-2025-597 | Heap-buffer-overflow in generic_unpack | 2025-08-04T00:08:26.345735Z | 2025-08-04T00:08:26.346368Z |
| osv-2025-591 | UNKNOWN READ in mov_read_header | 2025-08-02T00:02:00.509459Z | 2025-08-02T00:02:00.510035Z |
| osv-2025-589 | Heap-buffer-overflow in isvcd_decode_recon_tfr_nmb_base_lyr | 2025-08-01T00:10:54.848946Z | 2025-08-01T00:10:54.849286Z |
| osv-2025-584 | Heap-buffer-overflow in isvcd_mark_err_slice_skip | 2025-07-31T00:09:08.538145Z | 2025-07-31T00:09:08.538507Z |
| osv-2025-93 | Heap-buffer-overflow in lj_strfmt_pushvf | 2025-02-05T00:18:14.584575Z | 2025-07-23T14:24:29.384461Z |
| osv-2025-249 | Heap-use-after-free in lj_strfmt_pushvf | 2025-04-02T00:09:53.120387Z | 2025-07-23T14:23:01.826780Z |
| osv-2025-267 | Stack-buffer-overflow in snap_usedef | 2025-04-08T00:17:16.034122Z | 2025-07-23T14:22:40.655455Z |
| osv-2025-570 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2025-07-23T00:17:34.356115Z | 2025-07-23T00:17:34.356449Z |
| osv-2023-838 | Use-of-uninitialized-value in wabt::BinaryReaderIR::OnOpcode | 2023-09-12T14:01:08.316035Z | 2025-07-22T14:22:12.701561Z |
| osv-2025-564 | Heap-buffer-overflow in ndpi_match_host_subprotocol | 2025-07-21T00:03:40.000875Z | 2025-07-21T00:03:40.001170Z |
| osv-2025-550 | Use-of-uninitialized-value in CFF::cff2_cs_opset_t<cff2_cs_opset_subr_subset_t, CFF::subr_subset_param_t, CFF: | 2025-07-16T00:09:08.050994Z | 2025-07-16T00:09:08.051469Z |
| osv-2025-544 | Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32 | 2025-07-11T00:16:53.687776Z | 2025-07-11T00:16:53.688703Z |
| osv-2025-542 | Use-of-uninitialized-value in httpEncode64_3 | 2025-07-10T00:07:45.698070Z | 2025-07-10T00:07:45.698655Z |
| osv-2025-541 | Heap-buffer-overflow in js_create_function | 2025-07-09T00:20:09.455729Z | 2025-07-09T00:20:09.456170Z |
| osv-2025-534 | Heap-use-after-free in ih264_inter_pred_luma_horz_ssse3 | 2025-07-08T00:08:11.218515Z | 2025-07-08T00:08:11.218991Z |
| osv-2025-530 | Invalid-free in cli_pdf | 2025-07-07T00:17:21.884018Z | 2025-07-07T00:17:21.884367Z |
| osv-2025-528 | Heap-buffer-overflow in xmlnode_parser_structural_error_libxml | 2025-07-07T00:10:42.902465Z | 2025-07-07T00:10:42.902766Z |
| osv-2025-525 | UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame | 2025-07-06T00:18:54.304371Z | 2025-07-06T00:18:54.304891Z |
| osv-2022-1276 | Stack-buffer-overflow in ntlm_phase_3 | 2023-06-15T14:01:52.594793Z | 2025-07-05T14:11:24.654963Z |
| osv-2025-524 | Heap-buffer-overflow in JS_CallInternal | 2025-07-05T00:19:21.758513Z | 2025-07-05T00:19:21.758880Z |
| osv-2025-515 | Use-of-uninitialized-value in JS_DefineProperty | 2025-07-03T00:16:17.481972Z | 2025-07-03T00:16:17.482410Z |
| osv-2025-512 | Invalid-free in pdf_decodestream | 2025-07-03T00:00:40.745577Z | 2025-07-03T00:00:40.746200Z |
| osv-2024-440 | UNKNOWN READ | 2024-05-07T00:06:11.033336Z | 2025-07-01T14:30:06.613574Z |
| osv-2024-396 | UNKNOWN READ in jvp_object_free | 2024-05-01T00:11:24.552935Z | 2025-07-01T14:29:52.935440Z |
| osv-2022-785 | Heap-buffer-overflow in resize_packet | 2022-08-27T00:00:14.614126Z | 2025-07-01T14:25:29.517657Z |
| osv-2022-572 | Heap-buffer-overflow in dhcp_reply | 2022-07-12T00:00:45.818288Z | 2025-07-01T14:24:05.029738Z |
| osv-2022-1101 | UNKNOWN READ in APFSBtreeNodeIterator<APFSJObjBtreeNode> APFSJObjBtreeNode::find<unsigned long, | 2022-10-28T00:00:27.714849Z | 2025-06-29T14:11:11.919343Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2024-0370 | proc-macro-error is unmaintained | 2024-09-01T12:00:00Z | 2024-09-09T12:08:37Z |
| rustsec-2024-0373 | `Endpoint::retry()` calls can lead to panicking | 2024-09-02T12:00:00Z | 2024-09-08T01:47:13Z |
| rustsec-2024-0372 | Memory leak when calling a canister method via `ic_cdk::call` | 2024-09-05T12:00:00Z | 2024-09-07T18:23:36Z |
| rustsec-2024-0371 | gix-path improperly resolves configuration path reported by Git | 2024-09-06T12:00:00Z | 2024-09-07T01:48:33Z |
| rustsec-2024-0369 | phonenumber: panic on parsing crafted phonenumber inputs | 2024-07-07T12:00:00Z | 2024-09-05T13:40:37Z |
| rustsec-2024-0367 | gix-path uses local config across repos when it is the highest scope | 2024-08-31T12:00:00Z | 2024-09-03T22:23:51Z |
| rustsec-2024-0364 | gitoxide-core does not neutralize special characters for terminals | 2024-08-22T12:00:00Z | 2024-08-22T23:15:02Z |
| rustsec-2024-0361 | CWA-2024-004: Gas mispricing in cosmwasm-vm | 2024-08-08T12:00:00Z | 2024-08-08T17:11:37Z |
| rustsec-2024-0356 | `UserIdentity::is_verified` not checking verification status of own user identity while performing the check | 2024-07-18T12:00:00Z | 2024-07-19T10:11:38Z |
| rustsec-2024-0355 | gix-path can use a fake program files location | 2024-07-18T12:00:00Z | 2024-07-18T16:46:06Z |
| rustsec-2024-0354 | Usage of non-constant time base64 decoder could lead to leakage of secret key material | 2024-07-17T12:00:00Z | 2024-07-18T11:24:58Z |
| rustsec-2024-0353 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0352 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0351 | Refs and paths with reserved Windows device names access the devices | 2024-05-22T12:00:00Z | 2024-07-08T15:14:36Z |
| rustsec-2024-0350 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0349 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0348 | Traversal outside working tree enables arbitrary code execution | 2024-05-22T12:00:00Z | 2024-07-08T15:12:43Z |
| rustsec-2024-0335 | gix-transport indirect code execution via malicious username | 2024-04-13T12:00:00Z | 2024-07-02T23:39:37Z |
| rustsec-2024-0343 | Reduced entropy due to inadequate character set usage | 2024-06-03T12:00:00Z | 2024-06-15T13:11:33Z |
| rustsec-2020-0071 | Potential segfault in the time crate | 2020-11-18T12:00:00Z | 2024-06-05T14:00:17Z |
| rustsec-2024-0341 | Slow loris vulnerability with default configuration | 2024-03-15T12:00:00Z | 2024-05-21T02:12:32Z |
| rustsec-2024-0339 | Tor path lengths too short when "Vanguards lite" configured | 2024-05-15T12:00:00Z | 2024-05-21T02:12:32Z |
| rustsec-2024-0342 | Degraded secret zeroization capabilities | 2024-05-02T12:00:00Z | 2024-05-20T15:25:56Z |
| rustsec-2024-0337 | The crate `zip_next` has been renamed to `zip`. | 2024-04-20T12:00:00Z | 2024-04-24T14:13:51Z |
| rustsec-2024-0336 | `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input | 2024-04-19T12:00:00Z | 2024-04-20T02:21:14Z |
| rustsec-2023-0079 | KyberSlash: division timings depending on secrets | 2023-12-01T12:00:00Z | 2024-04-12T21:07:31Z |
| rustsec-2024-0334 | `libp2p-tokio-socks5` is unmaintained | 2024-04-05T12:00:00Z | 2024-04-12T16:31:39Z |
| rustsec-2024-0333 | `rsa-export` is unmaintained | 2024-04-06T12:00:00Z | 2024-04-12T16:29:46Z |
| rustsec-2024-0332 | Degradation of service in h2 servers with CONTINUATION Flood | 2024-04-03T12:00:00Z | 2024-04-11T16:16:20Z |
| rustsec-2024-0021 | Parts of Report are dropped as the wrong type during downcast | 2024-03-05T12:00:00Z | 2024-04-11T16:16:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2025-14157 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:46.334Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-13978 | Generation of Error Message Containing Sensitive Information in GitLab | 2025-12-18T12:04:44.454Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12734 | Improper Encoding or Escaping of Output in GitLab | 2025-12-18T12:04:35.112Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12716 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:33.134Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12562 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:25.675Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12029 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:20.332Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11984 | Authentication Bypass Using an Alternate Path or Channel in GitLab | 2025-12-18T12:04:14.698Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11247 | Authorization Bypass Through User-Controlled Key in GitLab | 2025-12-18T12:03:59.823Z | 2025-12-18T12:08:20.703Z |
| bit-elk-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:37:43.350Z | 2025-12-18T12:08:20.703Z |
| bit-vault-2025-6013 | Vault LDAP MFA Enforcement Bypass When Using Username As Alias | 2025-08-08T06:04:14.175Z | 2025-12-16T15:14:22.118Z |
| bit-airflow-2025-66388 | Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI | 2025-12-16T14:37:51.384Z | 2025-12-16T15:14:22.118Z |
| bit-mongodb-2025-12657 | Malformed KMIP response may result in access violation | 2025-12-13T11:42:23.275Z | 2025-12-13T12:05:53.698Z |
| bit-django-2025-13372 | Potential SQL injection in FilteredRelation column aliases on PostgreSQL | 2025-12-13T11:36:31.883Z | 2025-12-13T12:05:53.698Z |
| bit-mongodb-2025-14345 | Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server | 2025-12-12T17:42:48.437Z | 2025-12-12T18:06:16.411Z |
| bit-jenkins-2025-67639 | 2025-12-12T11:23:52.749Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67638 | 2025-12-12T11:23:47.516Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67637 | 2025-12-12T11:23:42.761Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67636 | 2025-12-12T11:23:36.617Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67635 | 2025-12-12T11:23:31.286Z | 2025-12-12T11:51:34.315Z | |
| bit-gitlab-2025-7449 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-02T12:05:42.978Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-6195 | Direct Request ('Forced Browsing') in GitLab | 2025-12-02T12:05:25.518Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-13611 | Insertion of Sensitive Information into Log File in GitLab | 2025-12-02T12:03:48.649Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-12653 | Authentication Bypass by Spoofing in GitLab | 2025-12-02T12:03:41.060Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-12571 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-02T12:03:39.208Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2024-9183 | Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab | 2025-12-09T12:02:49.276Z | 2025-12-11T12:06:55.559Z |
| bit-django-2025-64460 | Potential denial-of-service vulnerability in XML serializer text extraction | 2025-12-11T11:37:12.400Z | 2025-12-11T12:06:55.559Z |
| bit-golang-2025-61725 | Excessive CPU consumption in ParseAddress in net/mail | 2025-11-06T12:58:41.872Z | 2025-12-10T12:06:24.101Z |
| bit-pgbouncer-2025-2291 | PgBouncer default auth_query does not take Postgres password expiry into account | 2025-04-18T19:19:16.416Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-66220 | Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte | 2025-12-06T11:38:21.122Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-64763 | Envoy forwards early CONNECT data in TCP proxy mode | 2025-12-06T11:38:19.488Z | 2025-12-09T12:08:00.393Z |
| ID | Description | Updated |
|---|---|---|
| var-201804-1225 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T21:48:34.131000Z |
| var-200906-0603 | Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possi… | 2024-07-23T21:48:33.753000Z |
| var-202204-0596 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle … | 2024-07-23T21:48:32.252000Z |
| var-202109-1789 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data usi… | 2024-07-23T21:48:32.869000Z |
| var-200102-0075 | IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP … | 2024-07-23T21:48:08.812000Z |
| var-201211-0367 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-07-23T21:48:07.636000Z |
| var-201108-0285 | Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allow… | 2024-07-23T21:47:36.928000Z |
| var-200505-0193 | Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary … | 2024-07-23T21:47:36.724000Z |
| var-202110-1705 | The Snappy frame decoder function doesn't restrict the chunk length which may lead to exc… | 2024-07-23T21:46:59.236000Z |
| var-201506-0265 | Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x… | 2024-07-23T21:46:59.847000Z |
| var-202203-0111 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2024-07-23T21:46:58.879000Z |
| var-201201-0170 | Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK i… | 2024-07-23T21:46:58.960000Z |
| var-201611-0348 | named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-… | 2024-07-23T21:46:27.318000Z |
| var-200609-1376 | The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… | 2024-07-23T21:46:26.250000Z |
| var-201903-0441 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:46:20.783000Z |
| var-202210-1526 | The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macO… | 2024-07-23T21:46:13.464000Z |
| var-201606-0135 | The XML parser in Expat does not use sufficient entropy for hash initialization, which al… | 2024-07-23T21:46:12.300000Z |
| var-201210-0053 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:46:11.539000Z |
| var-201605-0464 | Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlPars… | 2024-07-23T21:45:39.491000Z |
| var-201006-1131 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2024-07-23T21:45:38.565000Z |
| var-200804-0039 | Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compil… | 2024-07-23T21:45:07.043000Z |
| var-201204-0084 | Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome befo… | 2024-07-23T21:45:06.885000Z |
| var-200102-0028 | The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log… | 2024-07-23T21:45:05.204000Z |
| var-201504-0060 | The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows… | 2024-07-23T21:45:04.448000Z |
| var-202203-0043 | A flaw was found in the way the "flags" member of the new pipe buffer structure was lacki… | 2024-07-23T21:45:03.589000Z |
| var-201111-0222 | FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arb… | 2024-07-23T21:45:03.152000Z |
| var-201904-0981 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow … | 2024-07-23T21:45:01.742000Z |
| var-201808-1004 | Bluetooth firmware or operating system software drivers in macOS versions before 10.13, H… | 2024-07-23T21:45:01.058000Z |
| var-200512-0633 | passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 al… | 2024-07-23T21:45:01.566000Z |
| var-202208-2263 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies … | 2024-07-23T21:44:51.339000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000091 | IPCOM vulnerable to information disclosure | 2024-08-30T14:56+09:00 | 2024-08-30T14:56+09:00 |
| jvndb-2024-000092 | Multiple vulnerabilities in WordPress plugin "Carousel Slider" | 2024-08-30T13:58+09:00 | 2024-08-30T13:58+09:00 |
| jvndb-2024-006787 | xfpt vulnerable to stack-based buffer overflow | 2024-08-29T14:07+09:00 | 2024-08-29T14:07+09:00 |
| jvndb-2024-000086 | Multiple Safie products vulnerable to improper server certificate verification | 2024-08-22T13:51+09:00 | 2024-08-29T12:23+09:00 |
| jvndb-2024-006646 | Authentication Bypass Vulnerability in Hitachi Ops Center Common Services | 2024-08-27T12:01+09:00 | 2024-08-27T12:01+09:00 |
| jvndb-2024-006367 | Unquoted Service Path in Hitachi Device Manager | 2024-08-26T16:27+09:00 | 2024-08-26T16:27+09:00 |
| jvndb-2024-000087 | BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection | 2024-08-23T14:17+09:00 | 2024-08-23T14:17+09:00 |
| jvndb-2020-007305 | Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries | 2024-08-22T11:33+09:00 | 2024-08-22T11:33+09:00 |
| jvndb-2017-009536 | Packetbeat vulnerable to denial-of-service (DoS) | 2024-08-21T17:54+09:00 | 2024-08-21T17:54+09:00 |
| jvndb-2018-009127 | Multiple vulnerabilities in LogonTracer | 2024-08-21T17:37+09:00 | 2024-08-21T17:37+09:00 |
| jvndb-2020-002957 | A vulnerability in TOYOTA MOTOR's DCU (Display Control Unit) | 2024-08-20T18:12+09:00 | 2024-08-20T18:12+09:00 |
| jvndb-2020-007306 | Trend Micro Security (Consumer) Driver vulnerable to Out-of-bounds Read | 2024-08-20T17:52+09:00 | 2024-08-20T17:52+09:00 |
| jvndb-2024-000085 | "Rakuten Ichiba App" fails to restrict custom URL schemes properly | 2024-08-20T16:56+09:00 | 2024-08-20T16:56+09:00 |
| jvndb-2024-005167 | EL Injection Vulnerability in Hitachi Tuning Manager | 2024-08-15T09:38+09:00 | 2024-08-15T09:38+09:00 |
| jvndb-2016-000124 | WAON service app for Android fails to verify SSL server certificates | 2024-08-15T09:36+09:00 | 2024-08-15T09:36+09:00 |
| jvndb-2024-000083 | Firmware update for RICOH JavaTM Platform resets the TLS configuration | 2024-08-06T15:13+09:00 | 2024-08-06T15:13+09:00 |
| jvndb-2024-000079 | Cybozu Office vulnerable to bypass browsing restrictions in Custom App | 2024-08-06T14:59+09:00 | 2024-08-06T14:59+09:00 |
| jvndb-2024-000082 | Pimax Play and PiTool accept WebSocket connections from unintended endpoints | 2024-08-05T13:58+09:00 | 2024-08-05T13:58+09:00 |
| jvndb-2024-000084 | Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN | 2024-08-05T13:46+09:00 | 2024-08-05T13:46+09:00 |
| jvndb-2024-000074 | Multiple vulnerabilities in SKYSEA Client View | 2024-07-29T15:28+09:00 | 2024-07-31T14:12+09:00 |
| jvndb-2024-000077 | FFRI AMC vulnerable to OS command injection | 2024-07-30T16:40+09:00 | 2024-07-30T16:40+09:00 |
| jvndb-2024-000081 | EC-CUBE plugin (for EC-CUBE 4 series) "EC-CUBE Web API Plugin" vulnerable to stored cross-site scripting | 2024-07-30T14:06+09:00 | 2024-07-30T14:06+09:00 |
| jvndb-2024-000080 | EC-CUBE 4 Series improper input validation when installing plugins | 2024-07-30T13:56+09:00 | 2024-07-30T13:56+09:00 |
| jvndb-2024-000028 | Multiple vulnerabilities in SKYSEA Client View | 2024-03-07T16:09+09:00 | 2024-07-29T18:13+09:00 |
| jvndb-2024-000076 | SDoP contains a stack-based buffer overflow vulnerability. | 2024-07-29T17:24+09:00 | 2024-07-29T17:24+09:00 |
| jvndb-2024-003242 | OMRON NJ/NX series vulnerable to insufficient verification of data authenticity | 2024-05-28T12:28+09:00 | 2024-07-26T16:27+09:00 |
| jvndb-2021-000105 | PowerCMS XMLRPC API vulnerable to OS command injection | 2021-11-24T15:47+09:00 | 2024-07-26T15:22+09:00 |
| jvndb-2024-000075 | ORC vulnerable to stack-based buffer overflow | 2024-07-26T13:55+09:00 | 2024-07-26T13:55+09:00 |
| jvndb-2022-000030 | Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM | 2022-05-09T15:02+09:00 | 2024-07-18T16:30+09:00 |
| jvndb-2024-000073 | Assimp vulnerable to heap-based buffer overflow | 2024-07-18T13:44+09:00 | 2024-07-18T13:44+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20072-1 | Security update for libmicrohttpd | 2026-01-12T11:15:02Z | 2026-01-12T11:15:02Z |
| suse-su-2026:20029-1 | Security update for libmicrohttpd | 2026-01-12T11:15:02Z | 2026-01-12T11:15:02Z |
| suse-su-2026:20073-1 | Security update for libpng16 | 2026-01-12T11:15:01Z | 2026-01-12T11:15:01Z |
| suse-su-2026:20030-1 | Security update for libpng16 | 2026-01-12T11:15:01Z | 2026-01-12T11:15:01Z |
| suse-su-2026:0099-1 | Security update for ImageMagick | 2026-01-12T10:37:47Z | 2026-01-12T10:37:47Z |
| suse-su-2026:0107-1 | Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) | 2026-01-12T10:34:47Z | 2026-01-12T10:34:47Z |
| suse-su-2026:0090-1 | Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) | 2026-01-12T10:34:10Z | 2026-01-12T10:34:10Z |
| suse-su-2026:20071-1 | Security update for python-tornado6 | 2026-01-12T10:30:08Z | 2026-01-12T10:30:08Z |
| suse-su-2026:20028-1 | Security update for python-tornado6 | 2026-01-12T10:30:08Z | 2026-01-12T10:30:08Z |
| suse-su-2026:20070-1 | Security update for avahi | 2026-01-11T16:54:30Z | 2026-01-11T16:54:30Z |
| suse-su-2026:20027-1 | Security update for avahi | 2026-01-11T16:54:30Z | 2026-01-11T16:54:30Z |
| suse-su-2026:0087-1 | Security update for libheif | 2026-01-09T15:19:44Z | 2026-01-09T15:19:44Z |
| suse-su-2026:0086-1 | Security update for php8 | 2026-01-09T15:01:56Z | 2026-01-09T15:01:56Z |
| suse-su-2026:0085-1 | Security update for libpng16 | 2026-01-09T15:01:38Z | 2026-01-09T15:01:38Z |
| suse-su-2026:20050-1 | Security update for libvirt | 2026-01-09T11:04:23Z | 2026-01-09T11:04:23Z |
| suse-su-2026:20049-1 | Security update for openvswitch | 2026-01-09T10:54:58Z | 2026-01-09T10:54:58Z |
| suse-su-2026:0083-1 | Security update for gimp | 2026-01-09T09:12:59Z | 2026-01-09T09:12:59Z |
| suse-su-2026:0082-1 | Security update for python-filelock | 2026-01-09T09:12:48Z | 2026-01-09T09:12:48Z |
| suse-su-2026:0081-1 | Security update for poppler | 2026-01-09T08:02:02Z | 2026-01-09T08:02:02Z |
| suse-su-2026:0080-1 | Security update for libvirt | 2026-01-09T08:01:44Z | 2026-01-09T08:01:44Z |
| suse-su-2026:0079-1 | Security update for libvirt | 2026-01-09T08:01:29Z | 2026-01-09T08:01:29Z |
| suse-su-2026:0078-1 | Security update for curl | 2026-01-09T07:07:10Z | 2026-01-09T07:07:10Z |
| suse-su-2026:0077-1 | Security update for curl | 2026-01-08T19:04:00Z | 2026-01-08T19:04:00Z |
| suse-su-2026:20048-1 | Security update for libpcap | 2026-01-08T16:29:06Z | 2026-01-08T16:29:06Z |
| suse-su-2026:20047-1 | Security update for python311 | 2026-01-08T16:27:35Z | 2026-01-08T16:27:35Z |
| suse-su-2026:20064-1 | Security update for libpcap | 2026-01-08T16:16:36Z | 2026-01-08T16:16:36Z |
| suse-su-2026:20045-1 | Security update for glib2 | 2026-01-08T16:00:18Z | 2026-01-08T16:00:18Z |
| suse-su-2026:20044-1 | Security update for rsync | 2026-01-08T15:49:46Z | 2026-01-08T15:49:46Z |
| suse-su-2026:20043-1 | Security update for python-tornado6 | 2026-01-08T15:48:09Z | 2026-01-08T15:48:09Z |
| suse-su-2026:20042-1 | Security update for curl | 2026-01-08T15:18:54Z | 2026-01-08T15:18:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-07937 | iccDEV IccTagXml函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07936 | iccDEV CIccXmlArrayType::ParseText函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07935 | iccDEV CIccLocalizedUnicode::GetText函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07934 | iccDEV CIccCLUT::Init函数堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07933 | iccDEV堆缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07249 | Google Android逻辑错误漏洞 | 2025-09-08 | 2026-01-26 |
| cnvd-2026-07248 | Google Android缺少权限检查漏洞 | 2025-09-08 | 2026-01-26 |
| cnvd-2026-07240 | Google Chrome实现不当漏洞(CNVD-2026-07240) | 2026-01-23 | 2026-01-26 |
| cnvd-2026-07196 | Microsoft Excel代码执行漏洞(CNVD-2026-07196) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07195 | Adobe Substance3D Stager资源管理错误漏洞(CNVD-2026-07195) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07194 | Adobe Substance3D Modeler越界读取漏洞(CNVD-2026-07194) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07193 | Adobe Substance3D Modeler越界读取漏洞(CNVD-2026-07193) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07192 | Adobe Substance3D Designer越界读取漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07191 | Adobe Substance3D Designer缓冲区溢出漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07190 | Adobe Illustrator代码问题漏洞(CNVD-2026-07190) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07189 | Adobe Illustrator代码问题漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07188 | Adobe Dreamweaver Desktop输入验证错误漏洞(CNVD-2026-07188) | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07187 | Adobe Dreamweaver Desktop输入验证错误漏洞 | 2026-01-19 | 2026-01-26 |
| cnvd-2026-07160 | Fuji Electric V-SFT栈缓冲区溢出漏洞 | 2025-10-15 | 2026-01-26 |
| cnvd-2026-06337 | 用友网络科技股份有限公司U8 cloud存在信息泄露漏洞 | 2025-12-12 | 2026-01-26 |
| cnvd-2026-06272 | 用友网络科技股份有限公司U8 cloud存在SQL注入漏洞(CNVD-2026-06272) | 2025-12-12 | 2026-01-26 |
| cnvd-2026-06106 | 湖南强智科技发展有限公司教务管理系统存在SQL注入漏洞(CNVD-2026-06106 ) | 2025-12-15 | 2026-01-26 |
| cnvd-2026-07157 | Tenda FH1203 page参数栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07156 | Tenda FH1203 fromAddressNat方法栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07155 | Tenda FH1203 formSetSpeedWan方法堆栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07154 | Tenda FH1203 formSetDeviceName方法堆栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07153 | Tenda FH1203 formSetClientState方法堆栈缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07152 | Tenda FH1203 addWifiMacFilter方法堆缓冲区溢出漏洞 | 2023-07-12 | 2026-01-23 |
| cnvd-2026-07148 | Tenda FH1203 formWriteFacMac方法命令注入漏洞 | 2024-03-29 | 2026-01-23 |
| cnvd-2026-07147 | Tenda FH1203 GetParentControlInfo方法堆栈缓冲区溢出漏洞 | 2024-03-29 | 2026-01-23 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0027 | Vulnérabilité dans NetApp ONTAP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0026 | Vulnérabilité dans Google Pixel | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0030 | Vulnérabilité dans MISP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0029 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0028 | Multiples vulnérabilités dans MariaDB | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0027 | Vulnérabilité dans NetApp ONTAP | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| CERTFR-2026-AVI-0026 | Vulnérabilité dans Google Pixel | 2026-01-13T00:00:00.000000 | 2026-01-13T00:00:00.000000 |
| certfr-2026-avi-0025 | Vulnérabilité dans Microsoft Edge | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0024 | Multiples vulnérabilités dans VMware Tanzu Greenplum Backup and Restore | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0023 | Multiples vulnérabilités dans les produits Axis | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| CERTFR-2026-AVI-0025 | Vulnérabilité dans Microsoft Edge | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| CERTFR-2026-AVI-0024 | Multiples vulnérabilités dans VMware Tanzu Greenplum Backup and Restore | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| CERTFR-2026-AVI-0023 | Multiples vulnérabilités dans les produits Axis | 2026-01-12T00:00:00.000000 | 2026-01-12T00:00:00.000000 |
| certfr-2026-avi-0022 | Multiples vulnérabilités dans les produits Microsoft | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0021 | Vulnérabilité dans Microsoft Edge | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0020 | Multiples vulnérabilités dans les produits IBM | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0018 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0017 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0016 | Vulnérabilité dans les produits Moxa | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0022 | Multiples vulnérabilités dans les produits Microsoft | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0021 | Vulnérabilité dans Microsoft Edge | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0020 | Multiples vulnérabilités dans les produits IBM | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0018 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0017 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| CERTFR-2026-AVI-0016 | Vulnérabilité dans les produits Moxa | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0015 | Multiples vulnérabilités dans les produits Centreon | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0014 | Multiples vulnérabilités dans GitLab | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0013 | Vulnérabilité dans Tenable Nessus Agent | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-ale-006 | Multiples vulnérabilités dans SCADA Siemens RUGGEDCOM ROX I | 2017-03-29T00:00:00.000000 | 2017-03-29T00:00:00.000000 |
| CERTFR-2017-ALE-006 | Multiples vulnérabilités dans SCADA Siemens RUGGEDCOM ROX I | 2017-03-29T00:00:00.000000 | 2017-03-29T00:00:00.000000 |
| certfr-2017-ale-003 | Vulnérabilité dans les navigateurs Microsoft | 2017-02-27T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-ale-002 | Vulnérabilité dans Microsoft Windows | 2017-02-20T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| CERTFR-2017-ALE-003 | Vulnérabilité dans les navigateurs Microsoft | 2017-02-27T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| CERTFR-2017-ALE-002 | Vulnérabilité dans Microsoft Windows | 2017-02-20T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-ale-001 | Vulnérabilité dans Cisco WebEx | 2017-01-25T00:00:00.000000 | 2017-01-31T00:00:00.000000 |
| CERTFR-2017-ALE-001 | Vulnérabilité dans Cisco WebEx | 2017-01-25T00:00:00.000000 | 2017-01-31T00:00:00.000000 |
| certfr-2016-ale-009 | Campagne d'attaque contre des routeurs DSL | 2016-12-01T00:00:00.000000 | 2017-01-26T00:00:00.000000 |
| CERTFR-2016-ALE-009 | Campagne d'attaque contre des routeurs DSL | 2016-12-01T00:00:00.000000 | 2017-01-26T00:00:00.000000 |
| certfr-2016-ale-010 | Vulnérabilité dans les routeurs Netgear | 2016-12-13T00:00:00.000000 | 2016-12-26T00:00:00.000000 |
| CERTFR-2016-ALE-010 | Vulnérabilité dans les routeurs Netgear | 2016-12-13T00:00:00.000000 | 2016-12-26T00:00:00.000000 |
| certfr-2016-ale-006 | Campagne de messages électroniques non sollicités de type Zepto/Odin | 2016-09-05T00:00:00.000000 | 2016-11-17T00:00:00.000000 |
| CERTFR-2016-ALE-006 | Campagne de messages électroniques non sollicités de type Zepto/Odin | 2016-09-05T00:00:00.000000 | 2016-11-17T00:00:00.000000 |
| certfr-2016-ale-008 | Vulnérabilité dans Microsoft Windows | 2016-11-02T00:00:00.000000 | 2016-11-09T00:00:00.000000 |
| CERTFR-2016-ALE-008 | Vulnérabilité dans Microsoft Windows | 2016-11-02T00:00:00.000000 | 2016-11-09T00:00:00.000000 |
| certfr-2016-ale-007 | Vulnérabilité dans Cisco IOS, IOS XE et IOS XR | 2016-09-19T00:00:00.000000 | 2016-09-19T00:00:00.000000 |
| CERTFR-2016-ALE-007 | Vulnérabilité dans Cisco IOS, IOS XE et IOS XR | 2016-09-19T00:00:00.000000 | 2016-09-19T00:00:00.000000 |
| certfr-2016-ale-005 | Multiples vulnérabilités dans les pare-feux Cisco | 2016-08-18T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| CERTFR-2016-ALE-005 | Multiples vulnérabilités dans les pare-feux Cisco | 2016-08-18T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2015-ale-013 | Vulnérabilité dans Joomla! | 2015-12-14T00:00:00.000000 | 2016-08-01T00:00:00.000000 |
| CERTFR-2015-ALE-013 | Vulnérabilité dans Joomla! | 2015-12-14T00:00:00.000000 | 2016-08-01T00:00:00.000000 |
| certfr-2016-ale-004 | Vulnérabilité dans Adobe Flash Player | 2016-06-15T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| CERTFR-2016-ALE-004 | Vulnérabilité dans Adobe Flash Player | 2016-06-15T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| certfr-2016-ale-003 | Vulnérabilité dans Adobe Flash Player | 2016-05-11T00:00:00.000000 | 2016-05-12T00:00:00.000000 |
| CERTFR-2016-ALE-003 | Vulnérabilité dans Adobe Flash Player | 2016-05-11T00:00:00.000000 | 2016-05-12T00:00:00.000000 |
| certfr-2015-ale-014 | Vulnérabilité dans Juniper ScreenOS | 2015-12-18T00:00:00.000000 | 2016-04-11T00:00:00.000000 |
| CERTFR-2015-ALE-014 | Vulnérabilité dans Juniper ScreenOS | 2015-12-18T00:00:00.000000 | 2016-04-11T00:00:00.000000 |
| certfr-2016-ale-002 | Vulnérabilité dans Adobe Flash Player | 2016-04-06T00:00:00.000000 | 2016-04-08T00:00:00.000000 |
| CERTFR-2016-ALE-002 | Vulnérabilité dans Adobe Flash Player | 2016-04-06T00:00:00.000000 | 2016-04-08T00:00:00.000000 |